@bongos/core 1.19.687 → 1.19.689

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.687",
-  "core_contract": "1.19.687",
-  "source_commit": "80529e693e8b33d02d80143fce82b5300e5f0c01",
+  "core_version": "1.19.689",
+  "core_contract": "1.19.689",
+  "source_commit": "636af32c2114ecf4e8b2fe03d2146106f8123776",
   "source_ref": "HEAD",
-  "built_at": "2026-09-12T23:13:15.800Z",
+  "built_at": "2026-09-12T23:51:28.908Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 477,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 2626,
-  "tree_sha256": "c85f4828bf21b1e106dfef13e6d603ea2774214cacdaf87ddbdb7f4242506e5c",
+  "tree_sha256": "480885e76086019b4dc2565be23ed784e8181134410c41afc8ef25da3374d72e",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -1952,12 +1952,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "2ef3bae15b679d797a2fc7210085c54b527eec3be3b4ec397dc3e043725d3a02"
+      "sha256": "06669e4ff16041426605f0a419c090bc1bb703cfe0ca6ee420651d0081424e29"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "88b6a409123033b93bfe079e807774acd263ea14739ca8851b4ae24e4a89247a"
+      "sha256": "aae00576adf9a4beb3658a181f0d8b0b2616f7c4c9ddf5809740fd84bd5db45c"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2802,7 +2802,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "f596cd52ec02d7e08108da8ce76a21a085aa1455989496d6a8501d1d7955ec5a"
+      "sha256": "837ec3c7ddeb36761a1b67b765e28fa117b85f1e8e58795798024e1cd432d9c1"
     },
     {
       "path": "docs/modules-contract.md",
@@ -5412,7 +5412,7 @@
     {
       "path": "modules/hall-ui/public/settings.js",
       "mode": "0000644",
-      "sha256": "6186335ea15fb1149edece2c75f0b7b91ca0fc95dd6a84470756d26f36e51cb8"
+      "sha256": "f96c78c7411e60810c8f1149217d2b7c1be21c22a5fac6f4feea4881ce20c9e4"
     },
     {
       "path": "modules/hall-ui/public/settings.states.json",
@@ -7782,12 +7782,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "ad18930429a58c935061b8269dfea3c2fcbb1095eeff26859158679b9faf37d3"
+      "sha256": "973f657a0c063434dec755b53ee29e1b8348c9f1f3f7e8762d937d79aead985e"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "f4d3a3c0536c755502e2f9bafaf07a54fda378a3394b22e0a3a3368992300073"
+      "sha256": "defc3109442ff69bb93889c12a876641ec174585697a93f12722e31a548c4848"
     },
     {
       "path": "public-docs/index.html",
@@ -9287,7 +9287,7 @@
     {
       "path": "src/bongos/cascade-dispatch.js",
       "mode": "0000644",
-      "sha256": "b5401daa01d006ba239d882aa1acfddfc560f3505dd5437c829e7a553ee2662e"
+      "sha256": "7290d5d15b4c8283ebb17e28b17739b9dc5de4da3e916e9491248ba8acc24619"
     },
     {
       "path": "src/bongos/db-kernel.js",
@@ -9547,7 +9547,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "c323740fa5182f9e2c200cdbd349d19753cf7d6f2faee9cf98ff44ba13249d2f"
+      "sha256": "95a7e92acae45c56f040be85ecb6a2b65a6c240290af7f383b18672da4764ec8"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -10072,7 +10072,7 @@
     {
       "path": "tests/cascade-dispatch.mjs",
       "mode": "0000644",
-      "sha256": "de9d8f8c1daab1e48122febd16699ac519890b6e1296edb7966d835434851786"
+      "sha256": "5a537d6c4a3bcde720b95420fb41224f5169ae578d56b8d80f55043ddaa8113e"
     },
     {
       "path": "tests/catalog_only_client.mjs",
@@ -11177,7 +11177,7 @@
     {
       "path": "tests/hall_settings_world.mjs",
       "mode": "0000644",
-      "sha256": "14605444faa2e0780d076501cc974a73f5375522ce28b3831d8dbb305134208b"
+      "sha256": "5e2429ec47f2037d26a18b3813dd145fab1e83af232fb1a883093d6c4d563118"
     },
     {
       "path": "tests/hall_signout.mjs",
@@ -12757,7 +12757,7 @@
     {
       "path": "tests/sound_player.mjs",
       "mode": "0000644",
-      "sha256": "5b42ae4236e203c69feb3b8885ebec3a5f2b0d7f6880128536dfe5b8088fd4e8"
+      "sha256": "8d65bc64902312731e6b194af5be6336bcb59882adb930299cf43cf083977ca1"
     },
     {
       "path": "tests/sound_prefs.mjs",

package/docs/copy-inventory.md

@@ -225,7 +225,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `e6982a9ff948` | certain | Charter library | `modules/hall-ui/public/government.js:799` |
 | `f8725cf3ba62` | certain | Checking dependency order… | `modules/hall-ui/public/work.js:853` |
 | `7a41b18c0de8` | certain | Checking for conflicts… | `modules/hall-ui/public/work.js:832` |
-| `aa3ba7d28a76` | certain | Checking your key… | `modules/hall-ui/public/settings.js:1118` |
+| `aa3ba7d28a76` | certain | Checking your key… | `modules/hall-ui/public/settings.js:1138` |
 | `b3d0e2af5176` | certain | Choose a goal first. | `modules/hall-ui/public/task.js:666` |
 | `1c6b0e3ffc0e` | certain | Choose a setup | `modules/hall-ui/public/hall-render.js:779` |
 | `6c88cdf417f1` | certain | Choose which sound plays for each build event — one when Claude waits for your input, another when a task ship | `modules/hall-ui/public/settings.html:329` |
@@ -291,7 +291,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `b9e53fbd90e6` | certain | Could not change standing: {…} | `modules/hall-ui/public/watch.js:845` |
 | `1ef1efc15b6c` | certain | Could not change that just now. | `modules/hall-ui/public/goals-render.js:1235` |
 | `78e18ea59b9f` | certain | Could not close: {…} | `modules/hall-ui/public/harbor.js:136` |
-| `c3f99e7c6e6b` | certain | Could not copy automatically — select and copy manually. ({…}) | `modules/hall-ui/public/settings.js:997` |
+| `c3f99e7c6e6b` | certain | Could not copy automatically — select and copy manually. ({…}) | `modules/hall-ui/public/settings.js:1017` |
 | `e3fd1febf63d` | certain | Could not copy to the clipboard. Try again. | `modules/hall-ui/public/goals-page.js:374` |
 | `e3fd1febf63d` | certain | Could not copy to the clipboard. Try again. | `modules/hall-ui/public/work.js:614` |
 | `487e0b39ac8f` | certain | Could not copy — select and copy by hand. | `modules/hall-ui/public/box-panel.js:413` |
@@ -313,22 +313,22 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `edd5bafbe075` | certain | Could not load the queue just now. | `modules/hall-ui/public/ideas.js:550` |
 | `02bb0570996a` | certain | Could not load the ranks. | `modules/hall-ui/public/ranks.js:197` |
 | `2878778cf9f3` | certain | Could not load this page. | `modules/hall-ui/public/watch.js:1311` |
-| `4b0c8d94541c` | certain | Could not load your account. Reload the page to try again. | `modules/hall-ui/public/settings.js:1376` |
+| `4b0c8d94541c` | certain | Could not load your account. Reload the page to try again. | `modules/hall-ui/public/settings.js:1396` |
 | `2a9fb4046bc4` | certain | Could not load your rank. Return to the hall and try again. | `modules/hall-ui/public/ranks.js:196` |
 | `9d533e811dec` | certain | Could not load your sessions: {…} | `modules/hall-ui/public/settings-sessions.js:114` |
-| `64f9d51f0fa2` | certain | Could not load your settings. | `modules/hall-ui/public/settings.js:1379` |
+| `64f9d51f0fa2` | certain | Could not load your settings. | `modules/hall-ui/public/settings.js:1399` |
 | `de244c45d916` | certain | Could not load {…} | `modules/hall-ui/public/task.js:703` |
 | `2366356926b4` | certain | Could not mark the primer just now. Try again. | `modules/hall-ui/public/primer.js:260` |
 | `753987b5da13` | certain | Could not reach the submit endpoint. | `modules/hall-ui/public/modules.js:297` |
 | `6f500726f0ac` | certain | Could not read the report: {…} | `modules/hall-ui/public/watch.js:640` |
-| `8b470cebf53d` | certain | Could not remove your key. Try again. | `modules/hall-ui/public/settings.js:1198` |
-| `4cf6bc8b377b` | certain | Could not remove. Try again. | `modules/hall-ui/public/settings.js:1197` |
+| `8b470cebf53d` | certain | Could not remove your key. Try again. | `modules/hall-ui/public/settings.js:1218` |
+| `4cf6bc8b377b` | certain | Could not remove. Try again. | `modules/hall-ui/public/settings.js:1217` |
 | `7a778d188e87` | certain | Could not remove: {…} | `modules/hall-ui/public/government.js:369` |
 | `bb5a7753e62b` | certain | Could not reset: {…} | `modules/hall-ui/public/government.js:301` |
 | `b526ee0b8c48` | certain | Could not save just now. Try again. | `modules/hall-ui/public/builders.js:464` |
 | `41a351aea8d4` | certain | Could not save the volume. Try again. | `modules/hall-ui/public/settings.js:221` |
 | `5305186a4154` | certain | Could not save your choice. Try again. | `modules/hall-ui/public/settings.js:104` |
-| `ea4fb30debd0` | certain | Could not save your key. Try again. | `modules/hall-ui/public/settings.js:1142` |
+| `ea4fb30debd0` | certain | Could not save your key. Try again. | `modules/hall-ui/public/settings.js:1162` |
 | `ef609f2c0cb3` | certain | Could not save your name. Try again. | `modules/hall-ui/public/settings.js:863` |
 | `59ecd5c52f59` | certain | Could not save your preference. Try again. | `modules/hall-ui/public/builders.js:361` |
 | `59ecd5c52f59` | certain | Could not save your preference. Try again. | `modules/hall-ui/public/settings.js:783` |
@@ -343,10 +343,10 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `8c234d5c8bd4` | certain | Could not save. Try again. | `modules/hall-ui/public/settings.js:683` |
 | `8c234d5c8bd4` | certain | Could not save. Try again. | `modules/hall-ui/public/settings.js:782` |
 | `8c234d5c8bd4` | certain | Could not save. Try again. | `modules/hall-ui/public/settings.js:862` |
-| `8c234d5c8bd4` | certain | Could not save. Try again. | `modules/hall-ui/public/settings.js:1141` |
+| `8c234d5c8bd4` | certain | Could not save. Try again. | `modules/hall-ui/public/settings.js:1161` |
 | `31c6e3fd754b` | certain | Could not send the request just now. | `modules/hall-ui/public/goals-render.js:1250` |
-| `1f4d9a989606` | certain | Could not set up key storage. Try again. | `modules/hall-ui/public/settings.js:1178` |
-| `e65b392144ac` | certain | Could not set up storage. Try again. | `modules/hall-ui/public/settings.js:1177` |
+| `1f4d9a989606` | certain | Could not set up key storage. Try again. | `modules/hall-ui/public/settings.js:1198` |
+| `e65b392144ac` | certain | Could not set up storage. Try again. | `modules/hall-ui/public/settings.js:1197` |
 | `d4601887a058` | certain | Could not sign out everywhere: {…} | `modules/hall-ui/public/settings-sessions.js:102` |
 | `b1602d01f4bb` | certain | Could not unblock: {…} | `modules/hall-ui/public/harbor.js:187` |
 | `3db890b074a7` | certain | Could not update visibility just now. | `modules/hall-ui/public/goals-render.js:1219` |
@@ -420,7 +420,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `04bbccfe7465` | certain | Everything a new builder needs before claiming their first task. About a ten-minute read. | `modules/hall-ui/public/primer.html:42` |
 | `647513e4838a` | certain | Everything this builder has shipped. Seen one craft at a time, with goals and ideas, under | `modules/hall-ui/public/profile.html:108` |
 | `efdb46f76b02` | certain | Everything this instance can run: what the core ships, what this project built, and who keeps each one true as | `modules/hall-ui/public/modules.html:32` |
-| `d629e152f074` | certain | Expires {…} · refreshes on use. | `modules/hall-ui/public/settings.js:992` |
+| `d629e152f074` | certain | Expires {…} · refreshes on use. | `modules/hall-ui/public/settings.js:1007` |
 | `de62f4cc7d2e` | certain | File a bug or idea | `modules/hall-ui/public/ideas.html:59` |
 | `0f166311ff3f` | certain | File it | `modules/hall-ui/public/ideas.html:99` |
 | `0c4632f983db` | certain | File the change | `modules/hall-ui/public/copy-desk.html:173` |
@@ -444,7 +444,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `6149e9ca69f7` | certain | Fleet summary | `modules/hall-ui/public/harbor.html:44` |
 | `617f13fa3fdb` | certain | Flip the switch. | `modules/hall-ui/public/hall-render.js:779` |
 | `42cee5cb3584` | certain | Fold this idea into # | `modules/hall-ui/public/task-detail.js:473` |
-| `647bcfcfdb03` | certain | Fresh CLI token issued. Paste it in your terminal: | `modules/hall-ui/public/settings.js:988` |
+| `647bcfcfdb03` | certain | Fresh CLI token issued. Paste it in your terminal: | `modules/hall-ui/public/settings.js:997` |
 | `55c71d76a94c` | certain | From creation to production — and the exact step where {{currency}} are awarded (at | `modules/hall-ui/public/diagrams.html:52` |
 | `d32c5e058d1e` | certain | From the system | `modules/hall-ui/public/hall-render.js:658` |
 | `fc6fdfa639a7` | certain | Full log | `modules/hall-ui/public/task.js:443` |
@@ -453,7 +453,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `c93912bbad76` | certain | Gathering the reviews and flagged copy that wait for you. | `modules/hall-ui/public/studio.html:46` |
 | `4638e024f0af` | certain | Generated from the code on the last deploy · | `modules/hall-ui/public/atlas.js:431` |
 | `3c1a5d27ef0b` | certain | Generated from the code on the last deploy. | `modules/hall-ui/public/atlas.js:431` |
-| `2ae2114b61db` | certain | Get a free key ↗ | `modules/hall-ui/public/settings.js:1021` |
+| `2ae2114b61db` | certain | Get a free key ↗ | `modules/hall-ui/public/settings.js:1041` |
 | `4794a991de3d` | certain | Getting started | `modules/hall-ui/public/hall-widgets.js:59` |
 | `a28b1a567f1a` | certain | GitHub username | `modules/hall-ui/public/hall-render.js:294` |
 | `8e52f0649662` | certain | Give the category a label. | `modules/hall-ui/public/project-settings.js:189` |
@@ -508,7 +508,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `ef224c9de7c8` | certain | Ideas — {{worldName}} | `modules/hall-ui/public/ideas.html:6` |
 | `9e9f8a44276b` | certain | Identity vouched | `modules/hall-ui/public/watch.js:373` |
 | `7d6a7de7a69e` | certain | If the {…} has invited you, sign in with GitHub and you're in. If not, ask them for an invite — this project d | `modules/hall-ui/public/hall-render.js:286` |
-| `b6c47d4ee42c` | certain | Image key removed. | `modules/hall-ui/public/settings.js:1194` |
+| `b6c47d4ee42c` | certain | Image key removed. | `modules/hall-ui/public/settings.js:1214` |
 | `783853467d52` | certain | Image-generation key | `modules/hall-ui/public/settings.html:184` |
 | `5c2e2bcbd5fb` | certain | In Progress | `modules/hall-ui/public/work.html:95` |
 | `75cfcdd41661` | certain | In this primer | `modules/hall-ui/public/primer.html:58` |
@@ -535,16 +535,16 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `bc779353aa0c` | certain | Karma — peer recognition and approvals, a separate counter from {…}. | `modules/hall-ui/public/profile.js:94` |
 | `de0e1590667f` | certain | Keep all {…} {…} — they are the values the code drops in, and the change cannot land without them. | `modules/hall-ui/public/copy-desk.js:442` |
 | `32d25ef2182d` | certain | Keep box | `modules/hall-ui/public/box-panel.js:164` |
-| `fbe40b5818a3` | certain | Key removed. | `modules/hall-ui/public/settings.js:1193` |
-| `93c17262bacf` | certain | Key storage is being set up by an Archon — check back shortly. {…} | `modules/hall-ui/public/settings.js:1072` |
-| `2a3c9e501f8e` | certain | Key storage isn't set up yet. As an Archon you can turn it on now — the server generates and safely stores the | `modules/hall-ui/public/settings.js:1068` |
+| `fbe40b5818a3` | certain | Key removed. | `modules/hall-ui/public/settings.js:1213` |
+| `93c17262bacf` | certain | Key storage is being set up by an Archon — check back shortly. {…} | `modules/hall-ui/public/settings.js:1092` |
+| `2a3c9e501f8e` | certain | Key storage isn't set up yet. As an Archon you can turn it on now — the server generates and safely stores the | `modules/hall-ui/public/settings.js:1088` |
 | `7d6eaa8d4514` | certain | Kinds of work shipped | `modules/hall-ui/public/hall-render.js:1194` |
 | `81f62e066dbf` | certain | Last 14 days: {…} / 10 average across {…} graded work{…} ({…} passed). | `modules/hall-ui/public/builders.js:595` |
 | `35a15eb0a117` | certain | Last 30 days | `modules/hall-ui/public/hall-widgets.js:129` |
 | `9be8b839eff8` | certain | Last 7 days | `modules/hall-ui/public/hall-widgets.js:129` |
 | `59f0bc78a28f` | certain | Last 90 days | `modules/hall-ui/public/hall-widgets.js:130` |
 | `13bae4dfb28e` | certain | Last claimed by | `modules/hall-ui/public/task.js:549` |
-| `1526a7ae8c85` | certain | Latest version: v{…}. | `modules/hall-ui/public/settings.js:1462` |
+| `1526a7ae8c85` | certain | Latest version: v{…}. | `modules/hall-ui/public/settings.js:1482` |
 | `19ad2430937d` | certain | Learning capture | `modules/hall-ui/public/ideas.html:78` |
 | `7c9b7a89353b` | certain | Leave goal | `modules/hall-ui/public/goals-render.js:931` |
 | `f192ff6563f9` | certain | Leave your GitHub username and an Archon will let you in. No coding needed to start — once you're approved, si | `modules/hall-ui/public/hall-render.js:294` |
@@ -616,7 +616,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `c255749ec989` | certain | No achievements earned yet. | `modules/hall-ui/public/builders.js:480` |
 | `c255749ec989` | certain | No achievements earned yet. | `modules/hall-ui/public/profile.js:144` |
 | `479c1a45f39d` | certain | No backlog tasks match these filters. Try widening them. | `modules/hall-ui/public/work.js:1120` |
-| `83f62fc94271` | certain | No builder account found for this sign-in. | `modules/hall-ui/public/settings.js:1384` |
+| `83f62fc94271` | certain | No builder account found for this sign-in. | `modules/hall-ui/public/settings.js:1404` |
 | `6d6fd2314248` | certain | No cross-project activity reported yet. | `modules/hall-ui/public/profile.js:323` |
 | `b1ada579483c` | certain | No custom ranks yet | `modules/hall-ui/public/government.js:358` |
 | `6e2d2e11f84a` | certain | No description. | `modules/hall-ui/public/idea.js:122` |
@@ -702,8 +702,8 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `5ded44da0cc5` | certain | Override requests | `modules/hall-ui/public/watch.html:143` |
 | `15a49bf15007` | certain | Page {…} of {…} | `modules/hall-ui/public/hall-kit.js:112` |
 | `8595b0aa76a0` | certain | Pair Claude Desktop | `modules/hall-ui/public/settings.html:242` |
-| `cf68a394cfa5` | certain | Paste command copied. | `modules/hall-ui/public/settings.js:996` |
-| `a495649d1f82` | certain | Paste your key first. | `modules/hall-ui/public/settings.js:1117` |
+| `cf68a394cfa5` | certain | Paste command copied. | `modules/hall-ui/public/settings.js:1016` |
+| `a495649d1f82` | certain | Paste your key first. | `modules/hall-ui/public/settings.js:1137` |
 | `542f801cc77f` | certain | Path-based estimate from declared files. Glob-aware detection with claim collisions — and lead resolution acti | `modules/hall-ui/public/goals-render.js:582` |
 | `54fa47e421a5` | certain | Peer recognition | `modules/hall-ui/public/hall-widgets.js:168` |
 | `47d609ece51c` | certain | Pending invitations | `modules/hall-ui/public/goals-render.js:1290` |
@@ -748,7 +748,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `6824ec470f99` | certain | Ranks — {{worldName}} | `modules/hall-ui/public/ranks.html:6` |
 | `6824ec470f99` | certain | Ranks — {{worldName}} | `modules/hall-ui/public/ranks.html:6` |
 | `e60039795803` | certain | Re-issue CLI token | `modules/hall-ui/public/settings.html:151` |
-| `101a51902f53` | certain | Re-issue failed: {…} | `modules/hall-ui/public/settings.js:1001` |
+| `101a51902f53` | certain | Re-issue failed: {…} | `modules/hall-ui/public/settings.js:1021` |
 | `fae2f90927bd` | certain | Read an idea, then decide. An objection needs a reason and the section it faults. | `modules/hall-ui/public/board-room.html:51` |
 | `b03e17693dcd` | certain | Read it as a table | `modules/hall-ui/public/drachmae.js:148` |
 | `b03e17693dcd` | certain | Read it as a table | `modules/hall-ui/public/watch.js:1126` |
@@ -777,7 +777,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `c49f9b9f8864` | certain | Remake or tweak | `modules/hall-ui/public/studio.js:181` |
 | `9c74a2572f4d` | certain | Remote control (recommended) | `modules/hall-ui/public/hall-render.js:779` |
 | `65e3399a8fbf` | certain | Remove filter | `modules/hall-ui/public/hall-kit.js:311` |
-| `dacd113fb3b2` | certain | Remove your image-generation key? Art generation will stop until you add one again. | `modules/hall-ui/public/settings.js:1185` |
+| `dacd113fb3b2` | certain | Remove your image-generation key? Art generation will stop until you add one again. | `modules/hall-ui/public/settings.js:1205` |
 | `20882d6ffdd0` | certain | Removed {…} from builder {…}. | `modules/hall-ui/public/government.js:365` |
 | `b06589044b0b` | certain | Render session cards as widgets (prettier, costs tokens) instead of plain text (cheaper, identical info). | `modules/hall-ui/public/settings.js:507` |
 | `9f4e519ea3e2` | certain | Repo Atlas | `modules/hall-ui/public/atlas.html:18` |
@@ -813,7 +813,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `f7ed4ba07178` | certain | Roadmap — {{worldName}} | `modules/hall-ui/public/roadmap.html:6` |
 | `f7ed4ba07178` | certain | Roadmap — {{worldName}} | `modules/hall-ui/public/roadmap.html:6` |
 | `b6596905f845` | certain | Said more than once | `modules/hall-ui/public/copy-desk.html:56` |
-| `0c79b504aebe` | certain | Save key | `modules/hall-ui/public/settings.js:1053` |
+| `0c79b504aebe` | certain | Save key | `modules/hall-ui/public/settings.js:1073` |
 | `11486793742e` | certain | Saves the moment you toggle; applies from your next session. | `modules/hall-ui/public/settings.html:284` |
 | `e8e4e49fe8f4` | certain | Saves when you press Save; shows everywhere at once. | `modules/hall-ui/public/settings.html:88` |
 | `42cbc20a6ec8` | certain | Saves when you press Save; your next | `modules/hall-ui/public/settings.html:136` |
@@ -840,9 +840,9 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `55e0a34bafed` | certain | Session log{…} | `modules/hall-ui/public/task.js:447` |
 | `cccb362bd6da` | certain | Sessions — {{worldName}} | `modules/hall-ui/public/sessions.html:6` |
 | `cccb362bd6da` | certain | Sessions — {{worldName}} | `modules/hall-ui/public/sessions.html:6` |
-| `b823d9a37a35` | certain | Set up key storage | `modules/hall-ui/public/settings.js:1069` |
+| `b823d9a37a35` | certain | Set up key storage | `modules/hall-ui/public/settings.js:1089` |
 | `84f31c3c3797` | certain | Set up your machine / get the code | `modules/hall-ui/public/hall-render.js:846` |
-| `f639250de42f` | certain | Setting up key storage… | `modules/hall-ui/public/settings.js:1153` |
+| `f639250de42f` | certain | Setting up key storage… | `modules/hall-ui/public/settings.js:1173` |
 | `44bd6c3a2471` | certain | Setting up your box… (about a minute) | `modules/hall-ui/public/box-panel.js:298` |
 | `65509721fe12` | certain | Setting up… | `modules/hall-ui/public/box-panel.js:352` |
 | `62c3ea026095` | certain | Settings sections | `modules/hall-ui/public/settings.html:51` |
@@ -1090,15 +1090,15 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `4ca77de13df4` | certain | Your dev box is stopped — turn it back on below. | `modules/hall-ui/public/box-panel.js:332` |
 | `909b0b7c6ffa` | certain | Your display name | `modules/hall-ui/public/settings.html:84` |
 | `51cae49539b5` | certain | Your files are kept | `modules/hall-ui/public/box-panel.js:323` |
-| `a47f15b6a33c` | certain | Your image-generation key settings could not be loaded. Reload the page to try again. | `modules/hall-ui/public/settings.js:1220` |
-| `51fd6f1ecb2f` | certain | Your key | `modules/hall-ui/public/settings.js:1049` |
+| `a47f15b6a33c` | certain | Your image-generation key settings could not be loaded. Reload the page to try again. | `modules/hall-ui/public/settings.js:1240` |
+| `51fd6f1ecb2f` | certain | Your key | `modules/hall-ui/public/settings.js:1069` |
 | `20d453b11ae5` | certain | Your name | `modules/hall-ui/public/hall-render.js:294` |
 | `6dadadffa36e` | certain | Your name cannot be blank. | `modules/hall-ui/public/settings.js:832` |
 | `bd77210a8c90` | certain | Your name must be {…} characters or fewer. | `modules/hall-ui/public/settings.js:837` |
 | `c0a01a95e97e` | certain | Your own idea. You may vote, but it can’t be decided by your vote alone, and a vote on your own idea earns no  | `modules/hall-ui/public/board-room.js:274` |
 | `8fc605026acf` | certain | Your pending join {…}: {…} — awaiting approval. | `modules/hall-ui/public/goal-inbox.js:88` |
 | `e91418db3962` | certain | Your preferences, {…}. | `modules/hall-ui/public/settings.js:856` |
-| `e91418db3962` | certain | Your preferences, {…}. | `modules/hall-ui/public/settings.js:1393` |
+| `e91418db3962` | certain | Your preferences, {…}. | `modules/hall-ui/public/settings.js:1413` |
 | `b6dceaace783` | certain | Your profile page setting applies now — private already answers "not found" everywhere your profile is read. R | `modules/hall-ui/public/settings.html:119` |
 | `f39746e3d66b` | certain | Your rendering preference could not be loaded. Reload the page to try again. | `modules/hall-ui/public/settings.js:554` |
 | `b2dfd7120052` | certain | Your request is sent ✓ | `modules/hall-ui/public/hall-render.js:391` |
@@ -1218,7 +1218,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `7b85e6494596` | certain | opens a new tab | `modules/hall-ui/public/palette.js:190` |
 | `c38db02adb61` | certain | or above | `modules/hall-ui/public/government.js:564` |
 | `66f7e9c2dde0` | certain | or right-click — plain Ctrl+V will not paste here. Claude takes over the terminal with its own interface once  | `modules/hall-ui/public/hall-render.js:779` |
-| `884948925fcb` | certain | paste command | `modules/hall-ui/public/settings.js:989` |
+| `884948925fcb` | certain | paste command | `modules/hall-ui/public/settings.js:999` |
 | `25d2c940e672` | certain | paste it into your terminal — bypasses Device Flow. | `modules/hall-ui/public/settings.html:152` |
 | `2fb1dad96280` | certain | pending, on the People tab | `modules/hall-ui/public/watch.html:46` |
 | `3b22c5af029b` | certain | rank or above, or that it is your own. | `modules/hall-ui/public/copy-desk.html:47` |
@@ -1315,7 +1315,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `8186b562553a` | certain | {…} {…} waiting | `modules/hall-ui/public/work.js:407` |
 | `0d4016a5531c` | certain | {…} {…}{…} | `modules/hall-ui/public/watch.js:474` |
 | `0d4016a5531c` | certain | {…} {…}{…} | `modules/hall-ui/public/work.js:249` |
-| `b3757ba3bb46` | certain | {…} · Stored encrypted; never shown again after saving. | `modules/hall-ui/public/settings.js:1055` |
+| `b3757ba3bb46` | certain | {…} · Stored encrypted; never shown again after saving. | `modules/hall-ui/public/settings.js:1075` |
 | `94445e6ed5e8` | certain | {…} · code | `modules/hall-ui/public/pair.js:53` |
 | `d73256fbc395` | certain | {…} · who votes, and how it {…} | `modules/hall-ui/public/board-room.js:357` |
 | `cab2a4296aec` | certain | {…} · {…} · {…}{…} | `modules/hall-ui/public/goal-inbox.js:326` |

package/docs/copy-registry.json

@@ -81,7 +81,7 @@
         "modules/hall-ui/public/settings.js:683",
         "modules/hall-ui/public/settings.js:782",
         "modules/hall-ui/public/settings.js:862",
-        "modules/hall-ui/public/settings.js:1141"
+        "modules/hall-ui/public/settings.js:1161"
       ]
     },
     {
@@ -1468,7 +1468,7 @@
       "occurrences": 2,
       "at": [
         "modules/hall-ui/public/settings.js:856",
-        "modules/hall-ui/public/settings.js:1393"
+        "modules/hall-ui/public/settings.js:1413"
       ]
     },
     {
@@ -3055,7 +3055,7 @@
       "surface": "builders-hall",
       "text": "Checking your key…",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1118,
+      "line": 1138,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -3649,7 +3649,7 @@
       "surface": "builders-hall",
       "text": "Could not copy automatically — select and copy manually. ({…})",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 997,
+      "line": 1017,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -3847,7 +3847,7 @@
       "surface": "builders-hall",
       "text": "Could not load your account. Reload the page to try again.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1376,
+      "line": 1396,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -3874,7 +3874,7 @@
       "surface": "builders-hall",
       "text": "Could not load your settings.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1379,
+      "line": 1399,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -3919,7 +3919,7 @@
       "surface": "builders-hall",
       "text": "Could not remove your key. Try again.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1198,
+      "line": 1218,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -3928,7 +3928,7 @@
       "surface": "builders-hall",
       "text": "Could not remove. Try again.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1197,
+      "line": 1217,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -3982,7 +3982,7 @@
       "surface": "builders-hall",
       "text": "Could not save your key. Try again.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1142,
+      "line": 1162,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -4117,7 +4117,7 @@
       "surface": "builders-hall",
       "text": "Could not save. Try again.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1141,
+      "line": 1161,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -4135,7 +4135,7 @@
       "surface": "builders-hall",
       "text": "Could not set up key storage. Try again.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1178,
+      "line": 1198,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -4144,7 +4144,7 @@
       "surface": "builders-hall",
       "text": "Could not set up storage. Try again.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1177,
+      "line": 1197,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -4810,8 +4810,8 @@
       "surface": "builders-hall",
       "text": "Expires {…} · refreshes on use.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 992,
-      "origin": "js-markup",
+      "line": 1007,
+      "origin": "js-text-assign",
       "confidence": "certain"
     },
     {
@@ -5026,8 +5026,8 @@
       "surface": "builders-hall",
       "text": "Fresh CLI token issued. Paste it in your terminal:",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 988,
-      "origin": "js-markup",
+      "line": 997,
+      "origin": "js-text-assign",
       "confidence": "certain"
     },
     {
@@ -5107,7 +5107,7 @@
       "surface": "builders-hall",
       "text": "Get a free key ↗",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1021,
+      "line": 1041,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -5602,7 +5602,7 @@
       "surface": "builders-hall",
       "text": "Image key removed.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1194,
+      "line": 1214,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -5845,7 +5845,7 @@
       "surface": "builders-hall",
       "text": "Key removed.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1193,
+      "line": 1213,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -5854,7 +5854,7 @@
       "surface": "builders-hall",
       "text": "Key storage is being set up by an Archon — check back shortly. {…}",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1072,
+      "line": 1092,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -5863,7 +5863,7 @@
       "surface": "builders-hall",
       "text": "Key storage isn't set up yet. As an Archon you can turn it on now — the server generates and safely stores the master key (no terminal needed).",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1068,
+      "line": 1088,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -5926,7 +5926,7 @@
       "surface": "builders-hall",
       "text": "Latest version: v{…}.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1462,
+      "line": 1482,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -6574,7 +6574,7 @@
       "surface": "builders-hall",
       "text": "No builder account found for this sign-in.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1384,
+      "line": 1404,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -7348,7 +7348,7 @@
       "surface": "builders-hall",
       "text": "Paste command copied.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 996,
+      "line": 1016,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -7357,7 +7357,7 @@
       "surface": "builders-hall",
       "text": "Paste your key first.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1117,
+      "line": 1137,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -7762,7 +7762,7 @@
       "surface": "builders-hall",
       "text": "Re-issue failed: {…}",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1001,
+      "line": 1021,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -8023,7 +8023,7 @@
       "surface": "builders-hall",
       "text": "Remove your image-generation key? Art generation will stop until you add one again.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1185,
+      "line": 1205,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -8347,7 +8347,7 @@
       "surface": "builders-hall",
       "text": "Save key",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1053,
+      "line": 1073,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -8590,7 +8590,7 @@
       "surface": "builders-hall",
       "text": "Set up key storage",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1069,
+      "line": 1089,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -8608,7 +8608,7 @@
       "surface": "builders-hall",
       "text": "Setting up key storage…",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1153,
+      "line": 1173,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -10840,7 +10840,7 @@
       "surface": "builders-hall",
       "text": "Your image-generation key settings could not be loaded. Reload the page to try again.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1220,
+      "line": 1240,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10849,7 +10849,7 @@
       "surface": "builders-hall",
       "text": "Your key",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1049,
+      "line": 1069,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10912,7 +10912,7 @@
       "surface": "builders-hall",
       "text": "Your preferences, {…}.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1393,
+      "line": 1413,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -11992,8 +11992,8 @@
       "surface": "builders-hall",
       "text": "paste command",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 989,
-      "origin": "js-markup",
+      "line": 999,
+      "origin": "js-text-assign",
       "confidence": "certain"
     },
     {
@@ -12865,7 +12865,7 @@
       "surface": "builders-hall",
       "text": "{…} · Stored encrypted; never shown again after saving.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1055,
+      "line": 1075,
       "origin": "js-markup",
       "confidence": "certain"
     },

package/docs/module-api-changelog.md

@@ -1833,5 +1833,9 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.685 with no explicit bump. run 34721104118. (task 1002620)
   1.19.687 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.686 with no explicit bump. run 34724811506. (task 1002620)
+  1.19.688 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.687 with no explicit bump. run 34725902871. (task 1002620)
+  1.19.689 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.688 with no explicit bump. run 34726470555. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/hall-ui/public/settings.js

@@ -982,18 +982,38 @@
       const body = (res.data || {});
       if (!res.ok) throw new Error(body.message || `HTTP ${res.status}`);
       const expires = body.expires_at ? new Date(body.expires_at).toLocaleString() : 'unknown';
+      const pasteCommand = body.paste_command || '';
       // The secret is QUOTED (settings.css `.quote`): a 64-character token cannot
-      // be a line of prose, so it sits one tonal step down with its own foot.
-      result.innerHTML =
-        '<p class="cli-result__say">Fresh CLI token issued. Paste it in your terminal:</p>' +
-        '<div class="quote"><p class="quote__eyebrow">paste command</p>' +
-        `<pre class="quote__pre">${escapeHtml(body.paste_command || '')}</pre>` +
-        '<div class="quote__foot"><button type="button" class="settings-btn settings-btn--quiet" id="cli-reissue-copy">Copy</button>' +
-        `<span class="settings-card__hint">Expires ${escapeHtml(expires)} · refreshes on use.</span></div></div>`;
+      // be a line of prose, so it sits one tonal step down with its own foot. Same
+      // markup as the innerHTML template it replaces (task 1003644) — what changes
+      // is that the token arrives via textContent, where it is text by construction
+      // rather than by an escape call someone has to remember at every
+      // interpolation. Each literal is assigned DIRECTLY, never passed through the
+      // helper: `.textContent = '…'` is the render path copy-inventory.js follows,
+      // and threading them through `el(tag, cls, text)` reads tidier but drops all
+      // three out of the copy registry, blinding the artist's queue to this panel.
+      const el = (tag, cls) => Object.assign(document.createElement(tag), { className: cls });
+      const say = el('p', 'cli-result__say');
+      say.textContent = 'Fresh CLI token issued. Paste it in your terminal:';
+      const eyebrow = el('p', 'quote__eyebrow');
+      eyebrow.textContent = 'paste command';
+      const pre = el('pre', 'quote__pre');
+      pre.textContent = pasteCommand;
+      const copyBtn = el('button', 'settings-btn settings-btn--quiet');
+      copyBtn.type = 'button';
+      copyBtn.id = 'cli-reissue-copy';
+      copyBtn.textContent = 'Copy';
+      const hint = el('span', 'settings-card__hint');
+      hint.textContent = `Expires ${expires} · refreshes on use.`;
+      const foot = el('div', 'quote__foot');
+      foot.append(copyBtn, hint);
+      const quote = el('div', 'quote');
+      quote.append(eyebrow, pre, foot);
+      result.textContent = ''; // a re-issue replaces the previous token, as innerHTML did
+      result.append(say, quote);
       result.hidden = false;
-      const copyBtn = $('#cli-reissue-copy');
-      if (copyBtn) copyBtn.addEventListener('click', async () => {
-        try { await navigator.clipboard.writeText(body.paste_command); toast('Paste command copied.'); }
+      copyBtn.addEventListener('click', async () => {
+        try { await navigator.clipboard.writeText(pasteCommand); toast('Paste command copied.'); }
         catch (err) { toast(`Could not copy automatically — select and copy manually. (${err.message})`); }
       });
     } catch (err) {

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.687",
+  "version": "1.19.689",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.687",
+      "version": "1.19.689",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.687",
+  "version": "1.19.689",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/src/bongos/cascade-dispatch.js

@@ -3,7 +3,9 @@
 // exceeding the per-builder ceiling. A mechanical task drafts on haiku; a
 // bug/refactor/feature drafts on sonnet; escalation to a higher rung happens only
 // when the cheaper run (a) fails its expected schema or (b) self-reports low
-// confidence — capped at 2 escalations. The cascade operates UNDER the builder's
+// confidence — capped at one full climb of the ladder (MAX_ESCALATIONS, derived
+// from LADDER so the cap can never sit below the ceiling a builder is allowed to
+// pick; task 1003664). The cascade operates UNDER the builder's
 // configured model ceiling (skill-prefs.getForBuilder, migration 037) — it can
 // downshift below it, never above.
 //
@@ -25,14 +27,33 @@
 const seams = require('../module-seams');
 
 // Cheapest → dearest. Indices are "rungs"; the cascade only ever moves UP.
-const LADDER = ['haiku', 'sonnet', 'opus'];
-const MAX_ESCALATIONS = 2;
+// `fable` tops the ladder: it is this instance's top-model default and prices
+// ABOVE opus ($10/$50 vs $5/$25 — llm-pricing.js PRICES), and the allowed-tier
+// list the settings UI writes agrees (modules/builder-settings/model-alloc-prefs.js
+// ALLOWED_TIERS). Without the rung, `claude-fable-5` fell through rungIndex's
+// unknown-model default and a fable CEILING silently clamped the cascade to
+// sonnet — one rung BELOW opus, the opposite of what that ceiling means
+// (task 1003664).
+const LADDER = ['haiku', 'sonnet', 'opus', 'fable'];
+
+// Enough escalations to climb from the CHEAPEST rung to the dearest — the
+// invariant the hardcoded `2` quietly satisfied while the ladder was 3 rungs
+// (haiku→opus is 2 steps) and stopped satisfying the moment fable was added: a
+// 'chore' starting on haiku with a fable ceiling would have run out of
+// escalations at opus and stopped one rung short, which is this task's own bug
+// wearing a different start rung. Derived, so a fifth rung cannot reintroduce it.
+// Per-call `maxEscalations` is unchanged and still overrides this.
+const MAX_ESCALATIONS = LADDER.length - 1;
 
 function rungIndex(model) {
   const m = String(model || '').toLowerCase();
   if (m.includes('haiku')) return 0;
   if (m.includes('sonnet')) return 1;
   if (m.includes('opus')) return 2;
+  // fable and mythos are ONE family at one price — the same pairing llm-pricing's
+  // familyFor() and grader-model's MODEL_FAMILY_TOKENS already make, so mythos
+  // must not fall through to the unknown default either.
+  if (m.includes('fable') || m.includes('mythos')) return 3;
   return 1; // unknown / 'script' / null → middle (sonnet); callers pass a real ceiling
 }
 

package/src/module-api.js

@@ -71,7 +71,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.687'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.689'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/cascade-dispatch.mjs

@@ -56,7 +56,7 @@ test('ceiling is NEVER exceeded — schema keeps failing but stops at sonnet cei
   assert.equal(r.ceiling, 'sonnet');
 });
 
-test('escalation capped at 2 (haiku → sonnet → opus, then stop)', async () => {
+test('a full climb from the cheapest rung reaches the ceiling (haiku → sonnet → opus)', async () => {
   const neverValid = () => false;
   const runner = mockRunner({});
   const r = await cascade.dispatch({ prompt: 'p', taskKind: 'chore', ceiling: 'opus', expectSchema: neverValid, runner });
@@ -64,6 +64,19 @@ test('escalation capped at 2 (haiku → sonnet → opus, then stop)', async () =
   assert.equal(r.escalations, 2);
 });
 
+// This one used to be the test above, named for the CAP — but with a 3-rung
+// ladder the cap and the opus ceiling stopped the climb at the same rung, so it
+// could not tell which one had acted. Drive the cap explicitly instead.
+test('the escalation cap stops a climb short of the ceiling when it is set below it', async () => {
+  const neverValid = () => false;
+  const runner = mockRunner({});
+  const r = await cascade.dispatch({
+    prompt: 'p', taskKind: 'chore', ceiling: 'fable', expectSchema: neverValid, runner, maxEscalations: 1,
+  });
+  assert.deepEqual(runner.calls, ['haiku', 'sonnet'], 'one escalation, then stop — well below the fable ceiling');
+  assert.equal(r.escalations, 1);
+});
+
 test('self-reported low confidence triggers escalation', async () => {
   const runner = mockRunner({ sonnet: LOWCONF, opus: GOOD });
   const r = await cascade.dispatch({ prompt: 'p', taskKind: 'feature', ceiling: 'opus', runner });
@@ -88,6 +101,70 @@ test('dispatch requires an injected runner', async () => {
   await assert.rejects(() => cascade.dispatch({ prompt: 'p', taskKind: 'bug', ceiling: 'opus' }), /requires an injected runner/);
 });
 
+// --- the fable rung (task 1003664) ------------------------------------------
+// A ceiling naming a model rungIndex does not recognise falls through to the
+// unknown default (1 = sonnet). For a ceiling that is meant to be the HIGHEST
+// rung that silently clamps the cascade BELOW opus — a downgrade dressed as a
+// ceiling, and invisible because nothing errors.
+
+test('a real fable model id resolves to the top rung, not the unknown default', async () => {
+  assert.equal(cascade.rungIndex('claude-fable-5'), 3, 'this is the bug: a fable id must not read as sonnet');
+  assert.equal(cascade.rungIndex('claude-fable-5-1'), 3);
+  assert.equal(cascade.rungIndex('fable'), 3);
+  // mythos is the same family at the same price everywhere else in the codebase.
+  assert.equal(cascade.rungIndex('claude-mythos-5-1'), 3);
+  assert.equal(cascade.rungIndex('mythos'), 3);
+  // the rung is above opus, which is the whole point
+  assert.ok(cascade.rungIndex('claude-fable-5') > cascade.rungIndex('claude-opus-5'));
+  assert.equal(cascade.LADDER[3], 'fable');
+});
+
+test('a fable ceiling escalates PAST opus instead of stopping at sonnet', async () => {
+  const neverValid = () => false;
+  const runner = mockRunner({});
+  const r = await cascade.dispatch({
+    prompt: 'p', taskKind: 'feature', ceiling: 'claude-fable-5', expectSchema: neverValid, runner,
+  });
+  assert.deepEqual(runner.calls, ['sonnet', 'opus', 'fable'], 'a fable ceiling must reach fable');
+  assert.equal(r.model, 'fable');
+  assert.equal(r.ceiling, 'fable');
+});
+
+// The haiku-start case, which the sonnet-start test above cannot see. A 4-rung
+// ladder needs 3 escalations to climb end-to-end; while MAX_ESCALATIONS was the
+// hardcoded 2 that a 3-rung ladder happened to satisfy, this stopped at opus —
+// the same "ceiling that doesn't reach its ceiling" bug, one start rung over.
+test('a chore with a fable ceiling climbs the WHOLE ladder, not just two rungs', async () => {
+  const neverValid = () => false;
+  const runner = mockRunner({});
+  const r = await cascade.dispatch({
+    prompt: 'p', taskKind: 'chore', ceiling: 'claude-fable-5', expectSchema: neverValid, runner,
+  });
+  assert.deepEqual(runner.calls, ['haiku', 'sonnet', 'opus', 'fable'], 'the cap must not sit below the ceiling');
+  assert.equal(r.model, 'fable');
+  assert.equal(r.escalations, 3);
+});
+
+test('the default cap always allows one full climb, whatever the ladder length', async () => {
+  assert.equal(cascade.MAX_ESCALATIONS, cascade.LADDER.length - 1, 'derive it — a fifth rung must not reintroduce the bug');
+});
+
+test('an opus ceiling still never reaches fable (the new rung is not a new floor)', async () => {
+  const neverValid = () => false;
+  const runner = mockRunner({});
+  const r = await cascade.dispatch({
+    prompt: 'p', taskKind: 'feature', ceiling: 'claude-opus-5', expectSchema: neverValid, runner,
+  });
+  assert.ok(!runner.calls.includes('fable'), 'fable must never be called above an opus ceiling');
+  assert.equal(r.model, 'opus');
+});
+
+test('an unknown model id still falls back to the safe middle', async () => {
+  assert.equal(cascade.rungIndex('script'), 1, 'the documented fallback is unchanged');
+  assert.equal(cascade.rungIndex(null), 1);
+  assert.equal(cascade.rungIndex(''), 1);
+});
+
 // settle async tests then report
 setTimeout(() => {
   console.log(`\ncascade-dispatch: ${passed} passed, ${failed} failed`);

package/tests/hall_settings_world.mjs

@@ -229,14 +229,40 @@ test('white on the accent is gone, and the Discord mark is the one named excepti
 test('the CLI token is quoted — one tonal step down, wrapping anywhere', () => {
   const fn = settingsJs.match(/async function issueCliToken\([\s\S]*?\n  \}\n/);
   assert.ok(fn, 'issueCliToken is a whole function');
-  assert.match(fn[0], /class="quote"/, 'the result renders the quote');
-  assert.match(fn[0], /<pre class="quote__pre">\$\{escapeHtml\(body\.paste_command \|\| ''\)\}<\/pre>/, 'the secret is escaped into the pre');
+  // The composition is unchanged by task 1003644 — only how it is built. These
+  // used to read `class="quote"` out of a template string; they read the same
+  // four class names out of the createElement calls.
+  for (const cls of ['quote', 'quote__eyebrow', 'quote__pre', 'quote__foot']) {
+    assert.match(fn[0], new RegExp(`'${cls}'`), `the result renders .${cls}`);
+  }
   assert.doesNotMatch(fn[0], /style="/, 'no inline style on the foot');
   const pre = ruleOf(settingsCss, '.quote__pre');
   assert.match(pre, /overflow-wrap:\s*anywhere/, 'a 64-character token wraps inside its quote instead of widening the panel');
   assert.match(ruleOf(settingsCss, '.quote') || '', /background:\s*var\(--glass\)/, 'one tonal step down from the panel');
 });
 
+// The node that renders a live credential builds it, never writes it (task
+// 1003644). The old form was correct — every interpolation was wrapped in
+// escapeHtml — but correct by memory: the escape was a call someone had to keep
+// making, and the string being interpolated is a bearer token. Built as nodes,
+// the token is text by construction and there is no call to forget.
+test('the CLI token reaches the page as text, not as markup', () => {
+  const fn = settingsJs.match(/async function issueCliToken\([\s\S]*?\n  \}\n/);
+  assert.ok(fn, 'issueCliToken is a whole function');
+  // An ASSIGNMENT, not the bare word — the function's own comment names innerHTML
+  // to say why it isn't used, and a test that its explanation trips is a test that
+  // punishes documenting the decision.
+  assert.doesNotMatch(fn[0], /\.innerHTML\s*=/, 'the credential node must not be assembled by writing innerHTML');
+  assert.match(fn[0], /createElement/, 'it is built with createElement');
+  assert.match(fn[0], /textContent/, 'and filled with textContent');
+  // The secret and the clipboard read the SAME resolved value, so the button can
+  // never copy a different string than the one on screen — nor the literal
+  // "undefined", which writeText(body.paste_command) produced on a body without one.
+  assert.match(fn[0], /const pasteCommand = body\.paste_command \|\| ''/, 'one resolved value');
+  assert.match(fn[0], /writeText\(pasteCommand\)/, 'the clipboard copies that same value');
+  assert.match(fn[0], /result\.textContent = ''/, 're-issuing replaces the previous token rather than stacking a second');
+});
+
 // The hall's my-projects page is GONE (owner decision, task 1003308): "my
 // projects" is a user-level page that already lives on the hub, so the hall
 // carries neither the page nor a link nor a redirect to it.

package/tests/sound_player.mjs

@@ -355,29 +355,62 @@ test('playerFor never throws and returns null or a [cmd, args] pair', () => {
 // right for the DEFAULT call; it is wrong the moment a caller names a file.
 // ---------------------------------------------------------------------------
 
+// Runs in a CHILD with a sandboxed home, for the reason task 1003760 wrote up at
+// length in tests/cli_sessions.mjs: both prefs paths derive from os.homedir(), so
+// in-process this case reads the BUILDER'S OWN settings.
+//
+// That is what made it red (task 1003628). The old guard skipped only when the
+// LEGACY file existed, and then planted one — but it never checked the CANONICAL
+// file, and readPrefs consults legacy only when the canonical read THROWS. On any
+// machine with saved sound settings the canonical file parses, volume 100 comes
+// back, and the final assertion failed 100 !== 11. On a bare CI runner neither file
+// exists, the plant works, and it passed: green where nobody looks, red where
+// everybody does — the exact phrase this file's own comment above uses for the
+// product bug task 1003293 fixed. The product is correct; the test was reading the
+// developer's machine. Sandboxing is what makes the claim testable at all, rather
+// than skipped on every machine that has the state it cares about.
+//
+// Both layers of the 1003760 contract apply: override every variable a platform
+// might read for the home, and FAIL CLOSED in the child if os.homedir() did not
+// land in the sandbox — a silent escape here would plant a prefs file in the
+// builder's real config dir.
+function sandboxEnv(home) {
+  const { root } = path.parse(home);
+  return {
+    ...process.env,
+    HOME: home,
+    USERPROFILE: home,                          // Windows: what os.homedir() actually reads
+    HOMEDRIVE: root.replace(/[\\/]+$/, ''),     // legacy Windows fallback pair
+    HOMEPATH: home.slice(root.length - 1) || '\\',
+  };
+}
+
 test('an explicit missing path fails open — it never substitutes another file', () => {
-  // The regression: write a legacy-shaped prefs file at the pre-rename location
-  // and prove an explicit path still ignores it. Skipped if the real file exists,
-  // because this test must never clobber a builder's own settings.
-  const legacy = player.LEGACY_PREFS_PATH;
-  if (!legacy || fs.existsSync(legacy)) {
-    // Nothing to plant, but the invariant is still checkable: an absent explicit
-    // path must yield the fail-open default, whatever the legacy file holds.
-    const p = player.readPrefs(path.join(os.tmpdir(), `otb-absent-${process.pid}.json`));
-    assert.equal(p.volume, 100);
-    assert.equal(p.enabled('ship'), true);
-    return;
-  }
-  fs.mkdirSync(path.dirname(legacy), { recursive: true });
-  fs.writeFileSync(legacy, JSON.stringify({ volume: 11, ship: false }));
+  const home = fs.mkdtempSync(path.join(os.tmpdir(), 'otb-sound-home-'));
   try {
-    const p = player.readPrefs(path.join(os.tmpdir(), `otb-absent-${process.pid}.json`));
-    assert.equal(p.volume, 100, 'an explicit path must not inherit the legacy file volume');
-    assert.equal(p.enabled('ship'), true, 'an explicit path must not inherit legacy mutes');
-    // …while the DEFAULT call still honours it — the fallback is not removed.
-    const d = player.readPrefs();
-    assert.equal(d.volume, 11, 'the default path must still fall back to the legacy file');
+    const code = `const R=${JSON.stringify(ROOT)};
+      const SANDBOX=${JSON.stringify(home)};
+      const os=require('node:os'), fs=require('node:fs'), path=require('node:path');
+      const assert=require('node:assert/strict');
+      if (os.homedir() !== SANDBOX) {
+        console.error('ERR sandbox-escape: os.homedir()=' + os.homedir() + ' but the sandbox is ' + SANDBOX
+          + ' — this platform does not take the home override, and planting prefs here would write to the real config dir.');
+        process.exit(2);
+      }
+      const player = require(R + '/.claude/sounds/play.js');
+      assert.ok(!fs.existsSync(player.PREFS_PATH), 'the sandbox must start with no canonical prefs file');
+      fs.mkdirSync(path.dirname(player.LEGACY_PREFS_PATH), { recursive: true });
+      fs.writeFileSync(player.LEGACY_PREFS_PATH, JSON.stringify({ volume: 11, ship: false }));
+      const p = player.readPrefs(path.join(os.tmpdir(), 'otb-absent-' + process.pid + '.json'));
+      assert.equal(p.volume, 100, 'an explicit path must not inherit the legacy file volume');
+      assert.equal(p.enabled('ship'), true, 'an explicit path must not inherit legacy mutes');
+      // …while the DEFAULT call still honours it — the fallback is not removed.
+      const d = player.readPrefs();
+      assert.equal(d.volume, 11, 'the default path must still fall back to the legacy file');
+      console.log('OK');`;
+    const r = execFileSync(process.execPath, ['-e', code], { encoding: 'utf8', env: sandboxEnv(home) });
+    assert.match(r, /OK/, 'the sandboxed child must reach its final assertion');
   } finally {
-    fs.unlinkSync(legacy);
+    fs.rmSync(home, { recursive: true, force: true });
   }
 });