@bongos/core 1.19.688 → 1.19.690

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.688",
-  "core_contract": "1.19.688",
-  "source_commit": "51aa693c35073ab1ce7daa457af2e0e4d7fec69b",
+  "core_version": "1.19.690",
+  "core_contract": "1.19.690",
+  "source_commit": "60679343d4642880b9d09e266fdf8847948e63c4",
   "source_ref": "HEAD",
-  "built_at": "2026-09-12T23:37:57.983Z",
+  "built_at": "2026-09-13T00:15:19.171Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 477,
     "agent_docs_stubbed": 24,
-    "functional_verbatim": 2125,
+    "functional_verbatim": 2126,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 2626,
-  "tree_sha256": "816e4e976c2a1c41669cd3780f49542b0e1cfd53c429b6eed76083d4a5d9ca91",
+  "file_count": 2627,
+  "tree_sha256": "62df4f01b358cfb184df394a6f373977f6638d2b4ce8f58df8e78f66259bfb95",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -1952,12 +1952,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "2ef3bae15b679d797a2fc7210085c54b527eec3be3b4ec397dc3e043725d3a02"
+      "sha256": "06669e4ff16041426605f0a419c090bc1bb703cfe0ca6ee420651d0081424e29"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "88b6a409123033b93bfe079e807774acd263ea14739ca8851b4ae24e4a89247a"
+      "sha256": "aae00576adf9a4beb3658a181f0d8b0b2616f7c4c9ddf5809740fd84bd5db45c"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2802,7 +2802,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "ad6fde9308e83470ab3ec5edac298cbf8779592deeb3d3303a3059fdde18c84b"
+      "sha256": "a8b10d6556ee013925b76fab635bbf14e1299216be69b54959b07de8cf47b8da"
     },
     {
       "path": "docs/modules-contract.md",
@@ -5412,7 +5412,7 @@
     {
       "path": "modules/hall-ui/public/settings.js",
       "mode": "0000644",
-      "sha256": "6186335ea15fb1149edece2c75f0b7b91ca0fc95dd6a84470756d26f36e51cb8"
+      "sha256": "f96c78c7411e60810c8f1149217d2b7c1be21c22a5fac6f4feea4881ce20c9e4"
     },
     {
       "path": "modules/hall-ui/public/settings.states.json",
@@ -7782,12 +7782,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "9d60af5f5140c304e6e4246a248d24756f4aed5c467d8939957243e41104e1e4"
+      "sha256": "260ff5666981dd27b2112c4e0ed8618761d10fe9c505630e3b75eaac3d588f73"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "84191b0fabaca6bd99dc874989f2c2a74e6574e9e7ee1b74345d05fbbc50650e"
+      "sha256": "6164b80832d080ed4ec27d8e4678ffbbab1344cf876af1b46702e5e4e2988924"
     },
     {
       "path": "public-docs/index.html",
@@ -8077,7 +8077,7 @@
     {
       "path": "scripts/gds/conductor-dispatch.js",
       "mode": "0000644",
-      "sha256": "6f25380a8b715dad1ce9dd17c0f0a2d7fa7573db6e2434029f0ba1d3c1cdc730"
+      "sha256": "b0e5767d0a30e57130169b41f1dd0add6cfc54237bca6d731219d5aff5d38168"
     },
     {
       "path": "scripts/gds/context-pack.js",
@@ -9289,6 +9289,11 @@
       "mode": "0000644",
       "sha256": "7290d5d15b4c8283ebb17e28b17739b9dc5de4da3e916e9491248ba8acc24619"
     },
+    {
+      "path": "src/bongos/claim-attribution.js",
+      "mode": "0000644",
+      "sha256": "1c3c7bc5d3c72de526334866a966a2fc7c5c8a486e19d65fefd50431f982d77b"
+    },
     {
       "path": "src/bongos/db-kernel.js",
       "mode": "0000644",
@@ -9547,7 +9552,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "0cf41cdf014bc501350140b91d3cffe8c42cdb144375e53e8efdcc67c3f5ebb2"
+      "sha256": "3db8b41741ace6b9070683824e39c1fa8e7c2724bef4585e91734ffd43afa382"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -10207,7 +10212,7 @@
     {
       "path": "tests/conductor.mjs",
       "mode": "0000644",
-      "sha256": "e2c338b765a7fccedd1730bb56e9338e022c41a40ed60406a94c1bb5b7b1599a"
+      "sha256": "e0d75747731cf45280dca2d36260a8b7799923dc1a2ffeb775cd37a0eb1f837c"
     },
     {
       "path": "tests/confirm_attribution.mjs",
@@ -11177,7 +11182,7 @@
     {
       "path": "tests/hall_settings_world.mjs",
       "mode": "0000644",
-      "sha256": "14605444faa2e0780d076501cc974a73f5375522ce28b3831d8dbb305134208b"
+      "sha256": "5e2429ec47f2037d26a18b3813dd145fab1e83af232fb1a883093d6c4d563118"
     },
     {
       "path": "tests/hall_signout.mjs",

package/docs/copy-inventory.md

@@ -225,7 +225,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `e6982a9ff948` | certain | Charter library | `modules/hall-ui/public/government.js:799` |
 | `f8725cf3ba62` | certain | Checking dependency order… | `modules/hall-ui/public/work.js:853` |
 | `7a41b18c0de8` | certain | Checking for conflicts… | `modules/hall-ui/public/work.js:832` |
-| `aa3ba7d28a76` | certain | Checking your key… | `modules/hall-ui/public/settings.js:1118` |
+| `aa3ba7d28a76` | certain | Checking your key… | `modules/hall-ui/public/settings.js:1138` |
 | `b3d0e2af5176` | certain | Choose a goal first. | `modules/hall-ui/public/task.js:666` |
 | `1c6b0e3ffc0e` | certain | Choose a setup | `modules/hall-ui/public/hall-render.js:779` |
 | `6c88cdf417f1` | certain | Choose which sound plays for each build event — one when Claude waits for your input, another when a task ship | `modules/hall-ui/public/settings.html:329` |
@@ -291,7 +291,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `b9e53fbd90e6` | certain | Could not change standing: {…} | `modules/hall-ui/public/watch.js:845` |
 | `1ef1efc15b6c` | certain | Could not change that just now. | `modules/hall-ui/public/goals-render.js:1235` |
 | `78e18ea59b9f` | certain | Could not close: {…} | `modules/hall-ui/public/harbor.js:136` |
-| `c3f99e7c6e6b` | certain | Could not copy automatically — select and copy manually. ({…}) | `modules/hall-ui/public/settings.js:997` |
+| `c3f99e7c6e6b` | certain | Could not copy automatically — select and copy manually. ({…}) | `modules/hall-ui/public/settings.js:1017` |
 | `e3fd1febf63d` | certain | Could not copy to the clipboard. Try again. | `modules/hall-ui/public/goals-page.js:374` |
 | `e3fd1febf63d` | certain | Could not copy to the clipboard. Try again. | `modules/hall-ui/public/work.js:614` |
 | `487e0b39ac8f` | certain | Could not copy — select and copy by hand. | `modules/hall-ui/public/box-panel.js:413` |
@@ -313,22 +313,22 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `edd5bafbe075` | certain | Could not load the queue just now. | `modules/hall-ui/public/ideas.js:550` |
 | `02bb0570996a` | certain | Could not load the ranks. | `modules/hall-ui/public/ranks.js:197` |
 | `2878778cf9f3` | certain | Could not load this page. | `modules/hall-ui/public/watch.js:1311` |
-| `4b0c8d94541c` | certain | Could not load your account. Reload the page to try again. | `modules/hall-ui/public/settings.js:1376` |
+| `4b0c8d94541c` | certain | Could not load your account. Reload the page to try again. | `modules/hall-ui/public/settings.js:1396` |
 | `2a9fb4046bc4` | certain | Could not load your rank. Return to the hall and try again. | `modules/hall-ui/public/ranks.js:196` |
 | `9d533e811dec` | certain | Could not load your sessions: {…} | `modules/hall-ui/public/settings-sessions.js:114` |
-| `64f9d51f0fa2` | certain | Could not load your settings. | `modules/hall-ui/public/settings.js:1379` |
+| `64f9d51f0fa2` | certain | Could not load your settings. | `modules/hall-ui/public/settings.js:1399` |
 | `de244c45d916` | certain | Could not load {…} | `modules/hall-ui/public/task.js:703` |
 | `2366356926b4` | certain | Could not mark the primer just now. Try again. | `modules/hall-ui/public/primer.js:260` |
 | `753987b5da13` | certain | Could not reach the submit endpoint. | `modules/hall-ui/public/modules.js:297` |
 | `6f500726f0ac` | certain | Could not read the report: {…} | `modules/hall-ui/public/watch.js:640` |
-| `8b470cebf53d` | certain | Could not remove your key. Try again. | `modules/hall-ui/public/settings.js:1198` |
-| `4cf6bc8b377b` | certain | Could not remove. Try again. | `modules/hall-ui/public/settings.js:1197` |
+| `8b470cebf53d` | certain | Could not remove your key. Try again. | `modules/hall-ui/public/settings.js:1218` |
+| `4cf6bc8b377b` | certain | Could not remove. Try again. | `modules/hall-ui/public/settings.js:1217` |
 | `7a778d188e87` | certain | Could not remove: {…} | `modules/hall-ui/public/government.js:369` |
 | `bb5a7753e62b` | certain | Could not reset: {…} | `modules/hall-ui/public/government.js:301` |
 | `b526ee0b8c48` | certain | Could not save just now. Try again. | `modules/hall-ui/public/builders.js:464` |
 | `41a351aea8d4` | certain | Could not save the volume. Try again. | `modules/hall-ui/public/settings.js:221` |
 | `5305186a4154` | certain | Could not save your choice. Try again. | `modules/hall-ui/public/settings.js:104` |
-| `ea4fb30debd0` | certain | Could not save your key. Try again. | `modules/hall-ui/public/settings.js:1142` |
+| `ea4fb30debd0` | certain | Could not save your key. Try again. | `modules/hall-ui/public/settings.js:1162` |
 | `ef609f2c0cb3` | certain | Could not save your name. Try again. | `modules/hall-ui/public/settings.js:863` |
 | `59ecd5c52f59` | certain | Could not save your preference. Try again. | `modules/hall-ui/public/builders.js:361` |
 | `59ecd5c52f59` | certain | Could not save your preference. Try again. | `modules/hall-ui/public/settings.js:783` |
@@ -343,10 +343,10 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `8c234d5c8bd4` | certain | Could not save. Try again. | `modules/hall-ui/public/settings.js:683` |
 | `8c234d5c8bd4` | certain | Could not save. Try again. | `modules/hall-ui/public/settings.js:782` |
 | `8c234d5c8bd4` | certain | Could not save. Try again. | `modules/hall-ui/public/settings.js:862` |
-| `8c234d5c8bd4` | certain | Could not save. Try again. | `modules/hall-ui/public/settings.js:1141` |
+| `8c234d5c8bd4` | certain | Could not save. Try again. | `modules/hall-ui/public/settings.js:1161` |
 | `31c6e3fd754b` | certain | Could not send the request just now. | `modules/hall-ui/public/goals-render.js:1250` |
-| `1f4d9a989606` | certain | Could not set up key storage. Try again. | `modules/hall-ui/public/settings.js:1178` |
-| `e65b392144ac` | certain | Could not set up storage. Try again. | `modules/hall-ui/public/settings.js:1177` |
+| `1f4d9a989606` | certain | Could not set up key storage. Try again. | `modules/hall-ui/public/settings.js:1198` |
+| `e65b392144ac` | certain | Could not set up storage. Try again. | `modules/hall-ui/public/settings.js:1197` |
 | `d4601887a058` | certain | Could not sign out everywhere: {…} | `modules/hall-ui/public/settings-sessions.js:102` |
 | `b1602d01f4bb` | certain | Could not unblock: {…} | `modules/hall-ui/public/harbor.js:187` |
 | `3db890b074a7` | certain | Could not update visibility just now. | `modules/hall-ui/public/goals-render.js:1219` |
@@ -420,7 +420,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `04bbccfe7465` | certain | Everything a new builder needs before claiming their first task. About a ten-minute read. | `modules/hall-ui/public/primer.html:42` |
 | `647513e4838a` | certain | Everything this builder has shipped. Seen one craft at a time, with goals and ideas, under | `modules/hall-ui/public/profile.html:108` |
 | `efdb46f76b02` | certain | Everything this instance can run: what the core ships, what this project built, and who keeps each one true as | `modules/hall-ui/public/modules.html:32` |
-| `d629e152f074` | certain | Expires {…} · refreshes on use. | `modules/hall-ui/public/settings.js:992` |
+| `d629e152f074` | certain | Expires {…} · refreshes on use. | `modules/hall-ui/public/settings.js:1007` |
 | `de62f4cc7d2e` | certain | File a bug or idea | `modules/hall-ui/public/ideas.html:59` |
 | `0f166311ff3f` | certain | File it | `modules/hall-ui/public/ideas.html:99` |
 | `0c4632f983db` | certain | File the change | `modules/hall-ui/public/copy-desk.html:173` |
@@ -444,7 +444,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `6149e9ca69f7` | certain | Fleet summary | `modules/hall-ui/public/harbor.html:44` |
 | `617f13fa3fdb` | certain | Flip the switch. | `modules/hall-ui/public/hall-render.js:779` |
 | `42cee5cb3584` | certain | Fold this idea into # | `modules/hall-ui/public/task-detail.js:473` |
-| `647bcfcfdb03` | certain | Fresh CLI token issued. Paste it in your terminal: | `modules/hall-ui/public/settings.js:988` |
+| `647bcfcfdb03` | certain | Fresh CLI token issued. Paste it in your terminal: | `modules/hall-ui/public/settings.js:997` |
 | `55c71d76a94c` | certain | From creation to production — and the exact step where {{currency}} are awarded (at | `modules/hall-ui/public/diagrams.html:52` |
 | `d32c5e058d1e` | certain | From the system | `modules/hall-ui/public/hall-render.js:658` |
 | `fc6fdfa639a7` | certain | Full log | `modules/hall-ui/public/task.js:443` |
@@ -453,7 +453,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `c93912bbad76` | certain | Gathering the reviews and flagged copy that wait for you. | `modules/hall-ui/public/studio.html:46` |
 | `4638e024f0af` | certain | Generated from the code on the last deploy · | `modules/hall-ui/public/atlas.js:431` |
 | `3c1a5d27ef0b` | certain | Generated from the code on the last deploy. | `modules/hall-ui/public/atlas.js:431` |
-| `2ae2114b61db` | certain | Get a free key ↗ | `modules/hall-ui/public/settings.js:1021` |
+| `2ae2114b61db` | certain | Get a free key ↗ | `modules/hall-ui/public/settings.js:1041` |
 | `4794a991de3d` | certain | Getting started | `modules/hall-ui/public/hall-widgets.js:59` |
 | `a28b1a567f1a` | certain | GitHub username | `modules/hall-ui/public/hall-render.js:294` |
 | `8e52f0649662` | certain | Give the category a label. | `modules/hall-ui/public/project-settings.js:189` |
@@ -508,7 +508,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `ef224c9de7c8` | certain | Ideas — {{worldName}} | `modules/hall-ui/public/ideas.html:6` |
 | `9e9f8a44276b` | certain | Identity vouched | `modules/hall-ui/public/watch.js:373` |
 | `7d6a7de7a69e` | certain | If the {…} has invited you, sign in with GitHub and you're in. If not, ask them for an invite — this project d | `modules/hall-ui/public/hall-render.js:286` |
-| `b6c47d4ee42c` | certain | Image key removed. | `modules/hall-ui/public/settings.js:1194` |
+| `b6c47d4ee42c` | certain | Image key removed. | `modules/hall-ui/public/settings.js:1214` |
 | `783853467d52` | certain | Image-generation key | `modules/hall-ui/public/settings.html:184` |
 | `5c2e2bcbd5fb` | certain | In Progress | `modules/hall-ui/public/work.html:95` |
 | `75cfcdd41661` | certain | In this primer | `modules/hall-ui/public/primer.html:58` |
@@ -535,16 +535,16 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `bc779353aa0c` | certain | Karma — peer recognition and approvals, a separate counter from {…}. | `modules/hall-ui/public/profile.js:94` |
 | `de0e1590667f` | certain | Keep all {…} {…} — they are the values the code drops in, and the change cannot land without them. | `modules/hall-ui/public/copy-desk.js:442` |
 | `32d25ef2182d` | certain | Keep box | `modules/hall-ui/public/box-panel.js:164` |
-| `fbe40b5818a3` | certain | Key removed. | `modules/hall-ui/public/settings.js:1193` |
-| `93c17262bacf` | certain | Key storage is being set up by an Archon — check back shortly. {…} | `modules/hall-ui/public/settings.js:1072` |
-| `2a3c9e501f8e` | certain | Key storage isn't set up yet. As an Archon you can turn it on now — the server generates and safely stores the | `modules/hall-ui/public/settings.js:1068` |
+| `fbe40b5818a3` | certain | Key removed. | `modules/hall-ui/public/settings.js:1213` |
+| `93c17262bacf` | certain | Key storage is being set up by an Archon — check back shortly. {…} | `modules/hall-ui/public/settings.js:1092` |
+| `2a3c9e501f8e` | certain | Key storage isn't set up yet. As an Archon you can turn it on now — the server generates and safely stores the | `modules/hall-ui/public/settings.js:1088` |
 | `7d6eaa8d4514` | certain | Kinds of work shipped | `modules/hall-ui/public/hall-render.js:1194` |
 | `81f62e066dbf` | certain | Last 14 days: {…} / 10 average across {…} graded work{…} ({…} passed). | `modules/hall-ui/public/builders.js:595` |
 | `35a15eb0a117` | certain | Last 30 days | `modules/hall-ui/public/hall-widgets.js:129` |
 | `9be8b839eff8` | certain | Last 7 days | `modules/hall-ui/public/hall-widgets.js:129` |
 | `59f0bc78a28f` | certain | Last 90 days | `modules/hall-ui/public/hall-widgets.js:130` |
 | `13bae4dfb28e` | certain | Last claimed by | `modules/hall-ui/public/task.js:549` |
-| `1526a7ae8c85` | certain | Latest version: v{…}. | `modules/hall-ui/public/settings.js:1462` |
+| `1526a7ae8c85` | certain | Latest version: v{…}. | `modules/hall-ui/public/settings.js:1482` |
 | `19ad2430937d` | certain | Learning capture | `modules/hall-ui/public/ideas.html:78` |
 | `7c9b7a89353b` | certain | Leave goal | `modules/hall-ui/public/goals-render.js:931` |
 | `f192ff6563f9` | certain | Leave your GitHub username and an Archon will let you in. No coding needed to start — once you're approved, si | `modules/hall-ui/public/hall-render.js:294` |
@@ -616,7 +616,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `c255749ec989` | certain | No achievements earned yet. | `modules/hall-ui/public/builders.js:480` |
 | `c255749ec989` | certain | No achievements earned yet. | `modules/hall-ui/public/profile.js:144` |
 | `479c1a45f39d` | certain | No backlog tasks match these filters. Try widening them. | `modules/hall-ui/public/work.js:1120` |
-| `83f62fc94271` | certain | No builder account found for this sign-in. | `modules/hall-ui/public/settings.js:1384` |
+| `83f62fc94271` | certain | No builder account found for this sign-in. | `modules/hall-ui/public/settings.js:1404` |
 | `6d6fd2314248` | certain | No cross-project activity reported yet. | `modules/hall-ui/public/profile.js:323` |
 | `b1ada579483c` | certain | No custom ranks yet | `modules/hall-ui/public/government.js:358` |
 | `6e2d2e11f84a` | certain | No description. | `modules/hall-ui/public/idea.js:122` |
@@ -702,8 +702,8 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `5ded44da0cc5` | certain | Override requests | `modules/hall-ui/public/watch.html:143` |
 | `15a49bf15007` | certain | Page {…} of {…} | `modules/hall-ui/public/hall-kit.js:112` |
 | `8595b0aa76a0` | certain | Pair Claude Desktop | `modules/hall-ui/public/settings.html:242` |
-| `cf68a394cfa5` | certain | Paste command copied. | `modules/hall-ui/public/settings.js:996` |
-| `a495649d1f82` | certain | Paste your key first. | `modules/hall-ui/public/settings.js:1117` |
+| `cf68a394cfa5` | certain | Paste command copied. | `modules/hall-ui/public/settings.js:1016` |
+| `a495649d1f82` | certain | Paste your key first. | `modules/hall-ui/public/settings.js:1137` |
 | `542f801cc77f` | certain | Path-based estimate from declared files. Glob-aware detection with claim collisions — and lead resolution acti | `modules/hall-ui/public/goals-render.js:582` |
 | `54fa47e421a5` | certain | Peer recognition | `modules/hall-ui/public/hall-widgets.js:168` |
 | `47d609ece51c` | certain | Pending invitations | `modules/hall-ui/public/goals-render.js:1290` |
@@ -748,7 +748,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `6824ec470f99` | certain | Ranks — {{worldName}} | `modules/hall-ui/public/ranks.html:6` |
 | `6824ec470f99` | certain | Ranks — {{worldName}} | `modules/hall-ui/public/ranks.html:6` |
 | `e60039795803` | certain | Re-issue CLI token | `modules/hall-ui/public/settings.html:151` |
-| `101a51902f53` | certain | Re-issue failed: {…} | `modules/hall-ui/public/settings.js:1001` |
+| `101a51902f53` | certain | Re-issue failed: {…} | `modules/hall-ui/public/settings.js:1021` |
 | `fae2f90927bd` | certain | Read an idea, then decide. An objection needs a reason and the section it faults. | `modules/hall-ui/public/board-room.html:51` |
 | `b03e17693dcd` | certain | Read it as a table | `modules/hall-ui/public/drachmae.js:148` |
 | `b03e17693dcd` | certain | Read it as a table | `modules/hall-ui/public/watch.js:1126` |
@@ -777,7 +777,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `c49f9b9f8864` | certain | Remake or tweak | `modules/hall-ui/public/studio.js:181` |
 | `9c74a2572f4d` | certain | Remote control (recommended) | `modules/hall-ui/public/hall-render.js:779` |
 | `65e3399a8fbf` | certain | Remove filter | `modules/hall-ui/public/hall-kit.js:311` |
-| `dacd113fb3b2` | certain | Remove your image-generation key? Art generation will stop until you add one again. | `modules/hall-ui/public/settings.js:1185` |
+| `dacd113fb3b2` | certain | Remove your image-generation key? Art generation will stop until you add one again. | `modules/hall-ui/public/settings.js:1205` |
 | `20882d6ffdd0` | certain | Removed {…} from builder {…}. | `modules/hall-ui/public/government.js:365` |
 | `b06589044b0b` | certain | Render session cards as widgets (prettier, costs tokens) instead of plain text (cheaper, identical info). | `modules/hall-ui/public/settings.js:507` |
 | `9f4e519ea3e2` | certain | Repo Atlas | `modules/hall-ui/public/atlas.html:18` |
@@ -813,7 +813,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `f7ed4ba07178` | certain | Roadmap — {{worldName}} | `modules/hall-ui/public/roadmap.html:6` |
 | `f7ed4ba07178` | certain | Roadmap — {{worldName}} | `modules/hall-ui/public/roadmap.html:6` |
 | `b6596905f845` | certain | Said more than once | `modules/hall-ui/public/copy-desk.html:56` |
-| `0c79b504aebe` | certain | Save key | `modules/hall-ui/public/settings.js:1053` |
+| `0c79b504aebe` | certain | Save key | `modules/hall-ui/public/settings.js:1073` |
 | `11486793742e` | certain | Saves the moment you toggle; applies from your next session. | `modules/hall-ui/public/settings.html:284` |
 | `e8e4e49fe8f4` | certain | Saves when you press Save; shows everywhere at once. | `modules/hall-ui/public/settings.html:88` |
 | `42cbc20a6ec8` | certain | Saves when you press Save; your next | `modules/hall-ui/public/settings.html:136` |
@@ -840,9 +840,9 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `55e0a34bafed` | certain | Session log{…} | `modules/hall-ui/public/task.js:447` |
 | `cccb362bd6da` | certain | Sessions — {{worldName}} | `modules/hall-ui/public/sessions.html:6` |
 | `cccb362bd6da` | certain | Sessions — {{worldName}} | `modules/hall-ui/public/sessions.html:6` |
-| `b823d9a37a35` | certain | Set up key storage | `modules/hall-ui/public/settings.js:1069` |
+| `b823d9a37a35` | certain | Set up key storage | `modules/hall-ui/public/settings.js:1089` |
 | `84f31c3c3797` | certain | Set up your machine / get the code | `modules/hall-ui/public/hall-render.js:846` |
-| `f639250de42f` | certain | Setting up key storage… | `modules/hall-ui/public/settings.js:1153` |
+| `f639250de42f` | certain | Setting up key storage… | `modules/hall-ui/public/settings.js:1173` |
 | `44bd6c3a2471` | certain | Setting up your box… (about a minute) | `modules/hall-ui/public/box-panel.js:298` |
 | `65509721fe12` | certain | Setting up… | `modules/hall-ui/public/box-panel.js:352` |
 | `62c3ea026095` | certain | Settings sections | `modules/hall-ui/public/settings.html:51` |
@@ -1090,15 +1090,15 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `4ca77de13df4` | certain | Your dev box is stopped — turn it back on below. | `modules/hall-ui/public/box-panel.js:332` |
 | `909b0b7c6ffa` | certain | Your display name | `modules/hall-ui/public/settings.html:84` |
 | `51cae49539b5` | certain | Your files are kept | `modules/hall-ui/public/box-panel.js:323` |
-| `a47f15b6a33c` | certain | Your image-generation key settings could not be loaded. Reload the page to try again. | `modules/hall-ui/public/settings.js:1220` |
-| `51fd6f1ecb2f` | certain | Your key | `modules/hall-ui/public/settings.js:1049` |
+| `a47f15b6a33c` | certain | Your image-generation key settings could not be loaded. Reload the page to try again. | `modules/hall-ui/public/settings.js:1240` |
+| `51fd6f1ecb2f` | certain | Your key | `modules/hall-ui/public/settings.js:1069` |
 | `20d453b11ae5` | certain | Your name | `modules/hall-ui/public/hall-render.js:294` |
 | `6dadadffa36e` | certain | Your name cannot be blank. | `modules/hall-ui/public/settings.js:832` |
 | `bd77210a8c90` | certain | Your name must be {…} characters or fewer. | `modules/hall-ui/public/settings.js:837` |
 | `c0a01a95e97e` | certain | Your own idea. You may vote, but it can’t be decided by your vote alone, and a vote on your own idea earns no  | `modules/hall-ui/public/board-room.js:274` |
 | `8fc605026acf` | certain | Your pending join {…}: {…} — awaiting approval. | `modules/hall-ui/public/goal-inbox.js:88` |
 | `e91418db3962` | certain | Your preferences, {…}. | `modules/hall-ui/public/settings.js:856` |
-| `e91418db3962` | certain | Your preferences, {…}. | `modules/hall-ui/public/settings.js:1393` |
+| `e91418db3962` | certain | Your preferences, {…}. | `modules/hall-ui/public/settings.js:1413` |
 | `b6dceaace783` | certain | Your profile page setting applies now — private already answers "not found" everywhere your profile is read. R | `modules/hall-ui/public/settings.html:119` |
 | `f39746e3d66b` | certain | Your rendering preference could not be loaded. Reload the page to try again. | `modules/hall-ui/public/settings.js:554` |
 | `b2dfd7120052` | certain | Your request is sent ✓ | `modules/hall-ui/public/hall-render.js:391` |
@@ -1218,7 +1218,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `7b85e6494596` | certain | opens a new tab | `modules/hall-ui/public/palette.js:190` |
 | `c38db02adb61` | certain | or above | `modules/hall-ui/public/government.js:564` |
 | `66f7e9c2dde0` | certain | or right-click — plain Ctrl+V will not paste here. Claude takes over the terminal with its own interface once  | `modules/hall-ui/public/hall-render.js:779` |
-| `884948925fcb` | certain | paste command | `modules/hall-ui/public/settings.js:989` |
+| `884948925fcb` | certain | paste command | `modules/hall-ui/public/settings.js:999` |
 | `25d2c940e672` | certain | paste it into your terminal — bypasses Device Flow. | `modules/hall-ui/public/settings.html:152` |
 | `2fb1dad96280` | certain | pending, on the People tab | `modules/hall-ui/public/watch.html:46` |
 | `3b22c5af029b` | certain | rank or above, or that it is your own. | `modules/hall-ui/public/copy-desk.html:47` |
@@ -1315,7 +1315,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `8186b562553a` | certain | {…} {…} waiting | `modules/hall-ui/public/work.js:407` |
 | `0d4016a5531c` | certain | {…} {…}{…} | `modules/hall-ui/public/watch.js:474` |
 | `0d4016a5531c` | certain | {…} {…}{…} | `modules/hall-ui/public/work.js:249` |
-| `b3757ba3bb46` | certain | {…} · Stored encrypted; never shown again after saving. | `modules/hall-ui/public/settings.js:1055` |
+| `b3757ba3bb46` | certain | {…} · Stored encrypted; never shown again after saving. | `modules/hall-ui/public/settings.js:1075` |
 | `94445e6ed5e8` | certain | {…} · code | `modules/hall-ui/public/pair.js:53` |
 | `d73256fbc395` | certain | {…} · who votes, and how it {…} | `modules/hall-ui/public/board-room.js:357` |
 | `cab2a4296aec` | certain | {…} · {…} · {…}{…} | `modules/hall-ui/public/goal-inbox.js:326` |

package/docs/copy-registry.json

@@ -81,7 +81,7 @@
         "modules/hall-ui/public/settings.js:683",
         "modules/hall-ui/public/settings.js:782",
         "modules/hall-ui/public/settings.js:862",
-        "modules/hall-ui/public/settings.js:1141"
+        "modules/hall-ui/public/settings.js:1161"
       ]
     },
     {
@@ -1468,7 +1468,7 @@
       "occurrences": 2,
       "at": [
         "modules/hall-ui/public/settings.js:856",
-        "modules/hall-ui/public/settings.js:1393"
+        "modules/hall-ui/public/settings.js:1413"
       ]
     },
     {
@@ -3055,7 +3055,7 @@
       "surface": "builders-hall",
       "text": "Checking your key…",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1118,
+      "line": 1138,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -3649,7 +3649,7 @@
       "surface": "builders-hall",
       "text": "Could not copy automatically — select and copy manually. ({…})",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 997,
+      "line": 1017,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -3847,7 +3847,7 @@
       "surface": "builders-hall",
       "text": "Could not load your account. Reload the page to try again.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1376,
+      "line": 1396,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -3874,7 +3874,7 @@
       "surface": "builders-hall",
       "text": "Could not load your settings.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1379,
+      "line": 1399,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -3919,7 +3919,7 @@
       "surface": "builders-hall",
       "text": "Could not remove your key. Try again.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1198,
+      "line": 1218,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -3928,7 +3928,7 @@
       "surface": "builders-hall",
       "text": "Could not remove. Try again.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1197,
+      "line": 1217,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -3982,7 +3982,7 @@
       "surface": "builders-hall",
       "text": "Could not save your key. Try again.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1142,
+      "line": 1162,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -4117,7 +4117,7 @@
       "surface": "builders-hall",
       "text": "Could not save. Try again.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1141,
+      "line": 1161,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -4135,7 +4135,7 @@
       "surface": "builders-hall",
       "text": "Could not set up key storage. Try again.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1178,
+      "line": 1198,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -4144,7 +4144,7 @@
       "surface": "builders-hall",
       "text": "Could not set up storage. Try again.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1177,
+      "line": 1197,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -4810,8 +4810,8 @@
       "surface": "builders-hall",
       "text": "Expires {…} · refreshes on use.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 992,
-      "origin": "js-markup",
+      "line": 1007,
+      "origin": "js-text-assign",
       "confidence": "certain"
     },
     {
@@ -5026,8 +5026,8 @@
       "surface": "builders-hall",
       "text": "Fresh CLI token issued. Paste it in your terminal:",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 988,
-      "origin": "js-markup",
+      "line": 997,
+      "origin": "js-text-assign",
       "confidence": "certain"
     },
     {
@@ -5107,7 +5107,7 @@
       "surface": "builders-hall",
       "text": "Get a free key ↗",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1021,
+      "line": 1041,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -5602,7 +5602,7 @@
       "surface": "builders-hall",
       "text": "Image key removed.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1194,
+      "line": 1214,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -5845,7 +5845,7 @@
       "surface": "builders-hall",
       "text": "Key removed.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1193,
+      "line": 1213,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -5854,7 +5854,7 @@
       "surface": "builders-hall",
       "text": "Key storage is being set up by an Archon — check back shortly. {…}",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1072,
+      "line": 1092,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -5863,7 +5863,7 @@
       "surface": "builders-hall",
       "text": "Key storage isn't set up yet. As an Archon you can turn it on now — the server generates and safely stores the master key (no terminal needed).",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1068,
+      "line": 1088,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -5926,7 +5926,7 @@
       "surface": "builders-hall",
       "text": "Latest version: v{…}.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1462,
+      "line": 1482,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -6574,7 +6574,7 @@
       "surface": "builders-hall",
       "text": "No builder account found for this sign-in.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1384,
+      "line": 1404,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -7348,7 +7348,7 @@
       "surface": "builders-hall",
       "text": "Paste command copied.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 996,
+      "line": 1016,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -7357,7 +7357,7 @@
       "surface": "builders-hall",
       "text": "Paste your key first.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1117,
+      "line": 1137,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -7762,7 +7762,7 @@
       "surface": "builders-hall",
       "text": "Re-issue failed: {…}",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1001,
+      "line": 1021,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -8023,7 +8023,7 @@
       "surface": "builders-hall",
       "text": "Remove your image-generation key? Art generation will stop until you add one again.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1185,
+      "line": 1205,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -8347,7 +8347,7 @@
       "surface": "builders-hall",
       "text": "Save key",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1053,
+      "line": 1073,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -8590,7 +8590,7 @@
       "surface": "builders-hall",
       "text": "Set up key storage",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1069,
+      "line": 1089,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -8608,7 +8608,7 @@
       "surface": "builders-hall",
       "text": "Setting up key storage…",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1153,
+      "line": 1173,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -10840,7 +10840,7 @@
       "surface": "builders-hall",
       "text": "Your image-generation key settings could not be loaded. Reload the page to try again.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1220,
+      "line": 1240,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10849,7 +10849,7 @@
       "surface": "builders-hall",
       "text": "Your key",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1049,
+      "line": 1069,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10912,7 +10912,7 @@
       "surface": "builders-hall",
       "text": "Your preferences, {…}.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1393,
+      "line": 1413,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -11992,8 +11992,8 @@
       "surface": "builders-hall",
       "text": "paste command",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 989,
-      "origin": "js-markup",
+      "line": 999,
+      "origin": "js-text-assign",
       "confidence": "certain"
     },
     {
@@ -12865,7 +12865,7 @@
       "surface": "builders-hall",
       "text": "{…} · Stored encrypted; never shown again after saving.",
       "file": "modules/hall-ui/public/settings.js",
-      "line": 1055,
+      "line": 1075,
       "origin": "js-markup",
       "confidence": "certain"
     },

package/docs/module-api-changelog.md

@@ -1835,5 +1835,9 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.686 with no explicit bump. run 34724811506. (task 1002620)
   1.19.688 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.687 with no explicit bump. run 34725902871. (task 1002620)
+  1.19.689 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.688 with no explicit bump. run 34726470555. (task 1002620)
+  1.19.690 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.689 with no explicit bump. run 34727464797. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/hall-ui/public/settings.js

@@ -982,18 +982,38 @@
       const body = (res.data || {});
       if (!res.ok) throw new Error(body.message || `HTTP ${res.status}`);
       const expires = body.expires_at ? new Date(body.expires_at).toLocaleString() : 'unknown';
+      const pasteCommand = body.paste_command || '';
       // The secret is QUOTED (settings.css `.quote`): a 64-character token cannot
-      // be a line of prose, so it sits one tonal step down with its own foot.
-      result.innerHTML =
-        '<p class="cli-result__say">Fresh CLI token issued. Paste it in your terminal:</p>' +
-        '<div class="quote"><p class="quote__eyebrow">paste command</p>' +
-        `<pre class="quote__pre">${escapeHtml(body.paste_command || '')}</pre>` +
-        '<div class="quote__foot"><button type="button" class="settings-btn settings-btn--quiet" id="cli-reissue-copy">Copy</button>' +
-        `<span class="settings-card__hint">Expires ${escapeHtml(expires)} · refreshes on use.</span></div></div>`;
+      // be a line of prose, so it sits one tonal step down with its own foot. Same
+      // markup as the innerHTML template it replaces (task 1003644) — what changes
+      // is that the token arrives via textContent, where it is text by construction
+      // rather than by an escape call someone has to remember at every
+      // interpolation. Each literal is assigned DIRECTLY, never passed through the
+      // helper: `.textContent = '…'` is the render path copy-inventory.js follows,
+      // and threading them through `el(tag, cls, text)` reads tidier but drops all
+      // three out of the copy registry, blinding the artist's queue to this panel.
+      const el = (tag, cls) => Object.assign(document.createElement(tag), { className: cls });
+      const say = el('p', 'cli-result__say');
+      say.textContent = 'Fresh CLI token issued. Paste it in your terminal:';
+      const eyebrow = el('p', 'quote__eyebrow');
+      eyebrow.textContent = 'paste command';
+      const pre = el('pre', 'quote__pre');
+      pre.textContent = pasteCommand;
+      const copyBtn = el('button', 'settings-btn settings-btn--quiet');
+      copyBtn.type = 'button';
+      copyBtn.id = 'cli-reissue-copy';
+      copyBtn.textContent = 'Copy';
+      const hint = el('span', 'settings-card__hint');
+      hint.textContent = `Expires ${expires} · refreshes on use.`;
+      const foot = el('div', 'quote__foot');
+      foot.append(copyBtn, hint);
+      const quote = el('div', 'quote');
+      quote.append(eyebrow, pre, foot);
+      result.textContent = ''; // a re-issue replaces the previous token, as innerHTML did
+      result.append(say, quote);
       result.hidden = false;
-      const copyBtn = $('#cli-reissue-copy');
-      if (copyBtn) copyBtn.addEventListener('click', async () => {
-        try { await navigator.clipboard.writeText(body.paste_command); toast('Paste command copied.'); }
+      copyBtn.addEventListener('click', async () => {
+        try { await navigator.clipboard.writeText(pasteCommand); toast('Paste command copied.'); }
         catch (err) { toast(`Could not copy automatically — select and copy manually. (${err.message})`); }
       });
     } catch (err) {

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.688",
+  "version": "1.19.690",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.688",
+      "version": "1.19.690",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.688",
+  "version": "1.19.690",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/scripts/gds/conductor-dispatch.js

@@ -65,6 +65,9 @@ const { isSensitive } = require('../../src/bongos/sensitive-surfaces');
 // re-hand-rolled this coverage logic — the exact drift this PR fixed for the
 // sensitive-surface set. Route through the one matcher instead.)
 const { matchOne } = require('../../src/bongos/path-match');
+// The worktree→claim rule, shared with .claude/hooks/conductor.js — the third
+// member of this file's "one definition, both conductors" set (task 1003837).
+const { claimForWorktree } = require('../../src/bongos/claim-attribution');
 
 const GRADER_DIFF_CHAR_CAP = 250_000;
 const GRADER_TIMEOUT_MS = 240_000;
@@ -209,10 +212,11 @@ function diffStatsSince(base, untracked) {
 //
 // Claims from before the column existed carry a null worktree_name and are
 // simply not matched here — the heuristic still covers them.
-function claimForWorktree(claims, worktreeName) {
-  if (!Array.isArray(claims) || !worktreeName) return null;
-  return claims.find((c) => c && c.worktree_name && c.worktree_name === worktreeName) || null;
-}
+//
+// The rule itself moved to src/bongos/claim-attribution.js in task 1003837, so
+// the conductor HOOK can answer the same question the same way without pulling
+// this module (and cli-lib, and the grader) into a per-prompt hook. Re-exported
+// below, so every existing importer and test is unchanged.
 
 // Pick the active claim whose touches[] best overlap the changed files — the
 // claim the current diff most plausibly belongs to. With multiple (possibly
@@ -296,6 +300,13 @@ async function resolveTaskContext(changedFiles) {
         // one answered is reported to the reader rather than hidden.
         const attribution = attributeClaim(claims, changedFiles, path.basename(process.cwd()));
         const c = attribution.claim;
+        // attributeClaim's documented { claim: null, signal: 'none' } return —
+        // not dead defensive code, and not a crash path: the throw is caught by
+        // this function's own catch below, which is where the no-claim context
+        // is synthesized. Unreachable only because the caller happens to check
+        // claims.length first; it states the seam's contract rather than relying
+        // on that. (Task 1003834's grade panel read it as a dead branch and
+        // filed it as a nit; kept, with this sentence, per task 1003837.)
         if (!c) throw new Error('no claim attributed');
         // Pull the full description for richer context (best-effort). Coerce
         // task_id to an integer before interpolating it into the URL path —

package/src/bongos/claim-attribution.js

@@ -0,0 +1,49 @@
+'use strict';
+// src/bongos/claim-attribution.js — which of a builder's open claims does THIS
+// working tree belong to? (task 1003837)
+//
+// WHY. Two things answer that question — `scripts/gds/conductor-dispatch.js`,
+// which briefs a reviewer on the claim a diff belongs to, and
+// `.claude/hooks/conductor.js`, which measures "changed files outside your
+// claim's declared touches[]" on every prompt. They must not answer it
+// differently, and the hook cannot simply require the dispatcher: the dispatcher
+// pulls in cli-lib, the grader and the autonomy gate at module scope, and the
+// hook's cost posture is explicit that it runs on EVERY prompt and must never
+// crash one. So the rule lives here, in a dependency-free core module both can
+// resolve — the same shape `sensitive-surfaces.js` and `path-match.js` already
+// take for this exact pair, after the Phase 4 dogfood flagged a hand-copied
+// pattern set as a drift risk.
+//
+// The worktree is a FACT, not a guess. `claim.js` records the worktree it was
+// run in, and the project default is one claim per worktree (task 1642), so a
+// name match attributes the tree with certainty. That is worth keeping separate
+// from the dispatcher's touches[]-overlap heuristic, which is a guess and is
+// labelled as one.
+
+const path = require('node:path');
+
+// The claim bound to `worktreeName`, or null. Exact match: the worktree name is
+// a recorded identifier, not a pattern, so a near-miss is a different tree.
+function claimForWorktree(claims, worktreeName) {
+  if (!Array.isArray(claims) || !worktreeName) return null;
+  return claims.find((c) => c && c.worktree_name && c.worktree_name === worktreeName) || null;
+}
+
+// The worktree name for a directory — its basename, which is what `claim.js`
+// stores. Returns null for an empty/garbage input so callers get "unknown"
+// rather than a name that cannot match anything.
+//
+// Backslashes are normalized BEFORE the basename, then `path.posix` does the
+// split, so the answer does not depend on which platform is asking. Plain
+// `path.basename` is the platform's: on POSIX it splits only on `/`, so a
+// Windows path arrives back whole — `C:\…\task-1003837` would BE the worktree
+// name, matching nothing. This repo keeps finding that same defect (task
+// 1003821 was two CI-invisible instances of it), and `scripts/gds/worktree.js`
+// already normalizes backslashes first for exactly this reason.
+function worktreeNameFor(dir) {
+  const d = String(dir || '').trim().replace(/\\/g, '/').replace(/\/+$/, '');
+  if (!d) return null;
+  return path.posix.basename(d) || null;
+}
+
+module.exports = { claimForWorktree, worktreeNameFor };

package/src/module-api.js

@@ -71,7 +71,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.688'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.690'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/conductor.mjs

@@ -10,6 +10,7 @@
 
 import { strict as assert } from 'node:assert';
 import { createRequire } from 'node:module';
+import { readFileSync } from 'node:fs';
 import { requireHostModule } from './helpers.mjs';
 
 const require = createRequire(import.meta.url);
@@ -129,11 +130,15 @@ test('wandering: lowest priority — emitted after methodology/status advisories
   assert.equal(a[a.length - 1].id, 'wandering', 'wandering is emitted last');
 });
 
+// The nudge says "your claim's", singular, so it is measured against the claim
+// bound to THIS worktree (task 1003837). These three carry a worktree_name and a
+// matching `worktree` for that reason; the four below pin what changed.
 test('outside-touches fires for files outside the claim touches[]', () => {
   const a = conductor.evaluateTriggers({
     changedFiles: ['src/bongos/grader.js', 'server.js'],
     prompt: 'edits',
-    activeClaims: [{ task_id: 1, title: 't', touches: ['src/bongos/grader.js'] }],
+    activeClaims: [{ task_id: 1, title: 't', touches: ['src/bongos/grader.js'], worktree_name: 'task-1' }],
+    worktree: 'task-1',
   });
   const outside = a.find((x) => x.id === 'outside-touches');
   assert.ok(outside, 'expected outside-touches advisory');
@@ -144,7 +149,8 @@ test('outside-touches does NOT fire when all changes are covered', () => {
   const a = conductor.evaluateTriggers({
     changedFiles: ['src/bongos/grader.js', 'migrations/053_x.sql'],
     prompt: 'edits',
-    activeClaims: [{ task_id: 1, title: 't', touches: ['src/bongos/grader.js', 'migrations/'] }],
+    activeClaims: [{ task_id: 1, title: 't', touches: ['src/bongos/grader.js', 'migrations/'], worktree_name: 'task-1' }],
+    worktree: 'task-1',
   });
   assert.ok(!ids(a).includes('outside-touches'));
 });
@@ -153,7 +159,71 @@ test('outside-touches does NOT fire when the claim has empty touches[] (fresh ta
   const a = conductor.evaluateTriggers({
     changedFiles: ['src/bongos/grader.js'],
     prompt: 'edits',
-    activeClaims: [{ task_id: 1, title: 't', touches: [] }],
+    activeClaims: [{ task_id: 1, title: 't', touches: [], worktree_name: 'task-1' }],
+    worktree: 'task-1',
+  });
+  assert.ok(!ids(a).includes('outside-touches'));
+});
+
+// THE BUG (task 1003837). The pool measured the line partly against somebody
+// else's declared paths. The shape is the one observed on 2026-09-10: the claim
+// you are in declares three exact files, a concurrent claim declares four broad
+// directories, and those directories cover the very files the nudge should have
+// named. Under the pool this fired with ONE file; it must name both.
+test('outside-touches ignores a CONCURRENT claim\'s touches[] — the under-report', () => {
+  const a = conductor.evaluateTriggers({
+    changedFiles: ['modules/hall-ui/public/studio.js', 'scripts/gds/ship.js', 'docs/adr/0280-x.md'],
+    prompt: 'edits',
+    activeClaims: [
+      { task_id: 1, title: 'mine', touches: ['modules/hall-ui/public/studio.js'], worktree_name: 'task-1' },
+      { task_id: 2, title: 'theirs', touches: ['scripts/gds/', 'src/bongos/', 'modules/', 'clients/'], worktree_name: 'task-2' },
+    ],
+    worktree: 'task-1',
+  });
+  const outside = a.find((x) => x.id === 'outside-touches');
+  assert.ok(outside, 'expected outside-touches advisory');
+  // studio.js is covered by MY claim; the other two are not covered by anything
+  // of mine. Under the pool, `modules/` and `scripts/gds/` swallowed them and
+  // the line read "1 changed file(s)".
+  assert.match(outside.text, /^2 changed file\(s\)/, 'both uncovered files must be counted, not one');
+});
+
+test('outside-touches counts only what MY claim fails to cover', () => {
+  const a = conductor.evaluateTriggers({
+    changedFiles: ['modules/hall-ui/public/studio.js', 'scripts/gds/ship.js', 'docs/adr/0280-x.md'],
+    prompt: 'edits',
+    activeClaims: [
+      { task_id: 1, title: 'mine', touches: ['modules/hall-ui/public/studio.js'], worktree_name: 'task-1' },
+      { task_id: 2, title: 'theirs', touches: ['scripts/gds/', 'modules/'], worktree_name: 'task-2' },
+    ],
+    worktree: 'task-1',
+  });
+  const outside = a.find((x) => x.id === 'outside-touches');
+  assert.match(outside.text, /scripts\/gds\/ship\.js/, "the other claim's directory must not cover my diff");
+  assert.match(outside.text, /docs\/adr\/0280-x\.md/);
+  assert.doesNotMatch(outside.text, /studio\.js/, 'my own declared file is still covered');
+});
+
+// The owner's call, recorded in the task: an unbound tree is SILENT rather than
+// falling back to the pool. There is no "your claim" to measure against, and a
+// number derived from another claim's touches[] is the defect, not a degraded
+// version of it. Trigger 1 still covers having no claim at all.
+test('outside-touches is SILENT when no claim is bound to this worktree', () => {
+  const claims = [{ task_id: 2, title: 'theirs', touches: ['scripts/gds/'], worktree_name: 'task-2' }];
+  for (const worktree of ['cloud-bongos', null, undefined, '']) {
+    const a = conductor.evaluateTriggers({
+      changedFiles: ['server.js', 'scripts/gds/ship.js'], prompt: 'edits', activeClaims: claims, worktree,
+    });
+    assert.ok(!ids(a).includes('outside-touches'), `unbound tree (${String(worktree)}) must not borrow another claim's touches[]`);
+  }
+});
+
+test('outside-touches is SILENT for a claim predating the worktree_name column', () => {
+  const a = conductor.evaluateTriggers({
+    changedFiles: ['server.js'],
+    prompt: 'edits',
+    activeClaims: [{ task_id: 1, title: 'old', touches: ['src/bongos/'], worktree_name: null }],
+    worktree: 'task-1',
   });
   assert.ok(!ids(a).includes('outside-touches'));
 });
@@ -478,6 +548,36 @@ test('attribution: claimForWorktree ignores claims with no recorded worktree', (
   assert.equal(dispatch.claimForWorktree(null, 'task-x'), null);
 });
 
+// ONE DEFINITION, BOTH CONDUCTORS (task 1003837). The dispatcher and the hook
+// answer "which claim is this tree?" and must not answer it differently — the
+// drift this file's own header warns about, after the Phase 4 dogfood found a
+// hand-copied pattern set. The dispatcher re-exports the shared rule, so identity
+// is the assertion: a second copy would pass a behavioural test and fail this one.
+test('attribution: the hook and the dispatcher share ONE claimForWorktree', () => {
+  const shared = require('../src/bongos/claim-attribution.js');
+  assert.equal(dispatch.claimForWorktree, shared.claimForWorktree, 'the dispatcher must re-export the shared rule, not re-derive it');
+  // …and the hook resolves that same module rather than inlining a find().
+  const hookSrc = readFileSync(new URL('../.claude/hooks/conductor.js', import.meta.url), 'utf8');
+  assert.match(hookSrc, /requireCore\('src\/bongos\/claim-attribution'\)/, 'the hook resolves the shared module');
+  assert.doesNotMatch(hookSrc, /flatMap\(\(c\) => \(Array\.isArray\(c\.touches\)/, 'the touches POOL must not come back');
+});
+
+// PLATFORM-INDEPENDENT on purpose. These assertions must hold identically on the
+// Windows box a builder runs on and the POSIX box CI runs on — `path.basename`
+// splits only on `/` under POSIX, so a Windows path would come back whole and
+// match no claim, and this test would red on CI while passing locally.
+test('attribution: worktreeNameFor is the basename claim.js records, on either platform', () => {
+  const { worktreeNameFor } = require('../src/bongos/claim-attribution.js');
+  assert.equal(worktreeNameFor('/repo/.claude/worktrees/task-1003837'), 'task-1003837');
+  assert.equal(worktreeNameFor('C:\\repo\\.claude\\worktrees\\task-1003837'), 'task-1003837', 'a Windows path must resolve the same way under POSIX');
+  assert.equal(worktreeNameFor('C:/repo/.claude/worktrees/task-1003837'), 'task-1003837');
+  assert.equal(worktreeNameFor('/repo/.claude/worktrees/task-1003837/'), 'task-1003837', 'a trailing separator must not erase the name');
+  assert.equal(worktreeNameFor('C:\\repo\\worktrees\\task-1003837\\'), 'task-1003837');
+  assert.equal(worktreeNameFor(null), null);
+  assert.equal(worktreeNameFor(''), null);
+  assert.equal(worktreeNameFor('   '), null);
+});
+
 test('isCovered now delegates to the canonical matcher (still correct)', () => {
   // Regression guard for the dedup: isCovered is a thin wrapper over
   // path-match.matchOne (relocated from the deleted touches-scan in task 879),

package/tests/hall_settings_world.mjs

@@ -229,14 +229,40 @@ test('white on the accent is gone, and the Discord mark is the one named excepti
 test('the CLI token is quoted — one tonal step down, wrapping anywhere', () => {
   const fn = settingsJs.match(/async function issueCliToken\([\s\S]*?\n  \}\n/);
   assert.ok(fn, 'issueCliToken is a whole function');
-  assert.match(fn[0], /class="quote"/, 'the result renders the quote');
-  assert.match(fn[0], /<pre class="quote__pre">\$\{escapeHtml\(body\.paste_command \|\| ''\)\}<\/pre>/, 'the secret is escaped into the pre');
+  // The composition is unchanged by task 1003644 — only how it is built. These
+  // used to read `class="quote"` out of a template string; they read the same
+  // four class names out of the createElement calls.
+  for (const cls of ['quote', 'quote__eyebrow', 'quote__pre', 'quote__foot']) {
+    assert.match(fn[0], new RegExp(`'${cls}'`), `the result renders .${cls}`);
+  }
   assert.doesNotMatch(fn[0], /style="/, 'no inline style on the foot');
   const pre = ruleOf(settingsCss, '.quote__pre');
   assert.match(pre, /overflow-wrap:\s*anywhere/, 'a 64-character token wraps inside its quote instead of widening the panel');
   assert.match(ruleOf(settingsCss, '.quote') || '', /background:\s*var\(--glass\)/, 'one tonal step down from the panel');
 });
 
+// The node that renders a live credential builds it, never writes it (task
+// 1003644). The old form was correct — every interpolation was wrapped in
+// escapeHtml — but correct by memory: the escape was a call someone had to keep
+// making, and the string being interpolated is a bearer token. Built as nodes,
+// the token is text by construction and there is no call to forget.
+test('the CLI token reaches the page as text, not as markup', () => {
+  const fn = settingsJs.match(/async function issueCliToken\([\s\S]*?\n  \}\n/);
+  assert.ok(fn, 'issueCliToken is a whole function');
+  // An ASSIGNMENT, not the bare word — the function's own comment names innerHTML
+  // to say why it isn't used, and a test that its explanation trips is a test that
+  // punishes documenting the decision.
+  assert.doesNotMatch(fn[0], /\.innerHTML\s*=/, 'the credential node must not be assembled by writing innerHTML');
+  assert.match(fn[0], /createElement/, 'it is built with createElement');
+  assert.match(fn[0], /textContent/, 'and filled with textContent');
+  // The secret and the clipboard read the SAME resolved value, so the button can
+  // never copy a different string than the one on screen — nor the literal
+  // "undefined", which writeText(body.paste_command) produced on a body without one.
+  assert.match(fn[0], /const pasteCommand = body\.paste_command \|\| ''/, 'one resolved value');
+  assert.match(fn[0], /writeText\(pasteCommand\)/, 'the clipboard copies that same value');
+  assert.match(fn[0], /result\.textContent = ''/, 're-issuing replaces the previous token rather than stacking a second');
+});
+
 // The hall's my-projects page is GONE (owner decision, task 1003308): "my
 // projects" is a user-level page that already lives on the hub, so the hall
 // carries neither the page nor a link nor a redirect to it.