@bongos/core 1.19.790 → 1.19.792

package/docs/module-api-changelog.md

@@ -2054,5 +2054,9 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.788 with no explicit bump. run 35159544354. (task 1002620)
   1.19.790 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.789 with no explicit bump. run 35163350575. (task 1002620)
+  1.19.791 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.790 with no explicit bump. run 35165066743. (task 1002620)
+  1.19.792 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.791 with no explicit bump. run 35166486577. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/migrations/core_243_cli_sessions_never_expire.sql

@@ -0,0 +1,58 @@
+-- core_243 — CLI sessions lose their idle expiry (task 1003956, ADR 0294).
+--
+-- WHAT CHANGED IN CODE. db-kernel.js createSession now records NO expiry when a
+-- caller names none (every such caller is source='cli'), and lookupSession's
+-- refresh-on-use rolls expires_at forward only for a row that already has one.
+-- Both halves are forward-looking: they govern sessions minted or used AFTER the
+-- deploy. Neither touches the dated rows already sitting in the table.
+--
+-- WHY THAT NEEDS A MIGRATION. Without this, the code change would be nearly
+-- invisible on the day it ships. Every live CLI session carries an expires_at
+-- from migration 035's backfill and from every refresh since, so each one would
+-- still lapse on its own 24h clock exactly as before — and each builder would eat
+-- one final forced re-auth to get a row the new default applies to. That is the
+-- precise annoyance the task set out to remove, delivered once more on the way
+-- out. Clearing the column here is what makes the fix arrive for people who are
+-- already signed in.
+--
+-- DIRECTION OF THE GRACE. Migration 035 faced the mirror of this and reasoned the
+-- same way: it backfilled a 24h runway specifically so introducing a TTL would
+-- not kill the session running the migration. This is that courtesy inverted —
+-- 035 pushed expiries out so nobody was signed out by a new timer; this removes
+-- them so nobody is signed out by a timer already gone from the code. In both
+-- cases the migration exists to keep a policy change off the backs of the people
+-- holding live sessions when it lands.
+--
+-- WHY source='cli' AND NOT A BLANKET UPDATE. builder_sessions holds both classes
+-- and only the CLI's expiry was asked for. A web row's expires_at is an explicit
+-- 30-day value its own flow chose (auth-idp.js / auth-github.js pass a real date,
+-- so the new NULL default never reaches them); nulling it here would silently
+-- hand browser cookies an immortality nobody decided on, and the code would not
+-- re-establish it — lookupSession only rolls an expiry it can already see, so a
+-- web row cleared by mistake stays cleared forever. The filter is the whole
+-- safety property of this statement.
+--
+-- WHY revoked_at IS NULL. A revoked row is dead by revoked_at, which lookupSession
+-- checks before it ever reads expires_at, so clearing its expiry could not revive
+-- it. It is excluded anyway: revoked rows are the audit trail of sessions somebody
+-- deliberately killed, and rewriting their columns muddies what that record says.
+-- Touch only what the change is actually about.
+--
+-- WHAT THIS DOES NOT WEAKEN. Revocation is untouched and remains the real remedy
+-- (ADR 0206): POST /me/sessions/revoke and "Sign out everywhere" kill a leaked
+-- bearer immediately, setBuilderRank sweeps every session on demotion, and
+-- requireBuilder refuses a deactivated builder on the hot path regardless of any
+-- live token. None of those consult expires_at.
+--
+-- Idempotent: re-running matches no rows the second time (expires_at is already
+-- NULL) and is a no-op.
+
+BEGIN;
+
+UPDATE builder_sessions
+   SET expires_at = NULL
+ WHERE source = 'cli'
+   AND revoked_at IS NULL
+   AND expires_at IS NOT NULL;
+
+COMMIT;

package/modules/hall-ui/public/hall-kit.js

@@ -579,70 +579,14 @@
     };
   }
 
-  // ---- ship-time task visual (task 1003109, goal 1000072) -------------------
+  // ---- ship-time task visual — MOVED OUT (task 1003835) ---------------------
   //
-  // A shipped task may carry an optional IMAGE alongside its value summary — the
-  // same claim in another medium, so a non-engineer can SEE what changed rather
-  // than read about it. In a FEED the summary is one line in a list, so the image
-  // appears as a small thumbnail linking to the full-size file; the task page
-  // renders it properly (task.js taskVisualHtml).
-  //
-  // Lives here because three separate feeds render it (Standing's ship ledger,
-  // a profile's recent ships, the status dashboard) and a fourth copy of an
-  // HTML-building helper is how the pre-kit drift started.
-
-  // Same-origin, SERVER-MINTED paths only. The URL arrives from our own API, but
-  // it lands in an href and a src, so it is matched literally against the shape
-  // modules/lifecycle/task-visuals.js mints rather than trusted. Anything else
-  // renders nothing at all.
-  const VISUAL_URL_RE = /^\/api\/(gds|bongos)\/task-visuals\/task-\d+-[0-9a-f]{16}\.(png|jpg|gif|webp)$/;
-  function isTaskVisualUrl(url) {
-    return VISUAL_URL_RE.test(String(url ?? ''));
-  }
-
-  // The compact thumbnail. Returns '' when the row carries no visual — a task
-  // without one must never look incomplete, so nothing is drawn (no placeholder).
-  function shipVisualThumbHtml(row) {
-    const url = String((row && row.visual_url) ?? '');
-    if (!isTaskVisualUrl(url)) return '';
-    const alt = String((row && row.visual_alt) || `Visual for task ${(row && row.id) ?? ''}`).trim();
-    return `<a href="${esc(url)}" target="_blank" rel="noopener" title="${esc(alt)}">` +
-      `<img class="ship-visual-thumb" src="${esc(url)}" alt="${esc(alt)}" loading="lazy"></a>`;
-  }
-
-  // The FULL-SIZE form: the picture as the thing being looked at, with
-  // visual_alt as its caption. The thumbnail above is for a FEED, where the
-  // summary is one line in a list; this is for a surface whose subject IS the
-  // image — the task record, and the Studio's review card (task 1003829).
-  //
-  // It lives here so the Studio did not become the THIRD hand-rolled <figure>
-  // for this one image. Be precise about what that did and did not fix: the two
-  // that already existed — task.js's taskVisualHtml (.tk-visual) and
-  // task-detail.js's overlay (.td-visual) — are NOT converged onto this yet and
-  // are untouched by the task that added it (1003829). Neither page loads the
-  // kit, so migrating them means adding it to task.html, which is a call of its
-  // own. So: one canonical renderer exists and new callers take it; the two
-  // legacy copies are a known, named cleanup rather than a claim already met.
-  //
-  // `className` is the caller's BEM base, because the size is the surface's
-  // decision and not the kit's: the task record caps at 52vh inside a record
-  // column (.tk-visual), the Studio gives the plate the card's whole width.
-  // The markup, the URL guard and the escaping are the kit's and identical
-  // everywhere. Returns '' with no visual, like the thumbnail.
-  function taskVisualFigureHtml(row, { className = 'task-visual' } = {}) {
-    const url = String((row && row.visual_url) ?? '');
-    if (!isTaskVisualUrl(url)) return '';
-    const written = String((row && row.visual_alt) || '').trim();
-    const alt = written || `Visual for task ${(row && row.id) ?? ''}`;
-    const base = String(className).replace(/[^A-Za-z0-9_-]/g, '');
-    // The caption is only drawn when the shipper WROTE one — the fallback alt is
-    // a machine sentence for a screen reader, not a caption to show a reader.
-    const caption = written ? `<figcaption class="${base}__caption">${esc(written)}</figcaption>` : '';
-    return `<figure class="${base}">` +
-      `<a href="${esc(url)}" target="_blank" rel="noopener">` +
-      `<img class="${base}__img" src="${esc(url)}" alt="${esc(alt)}" loading="lazy">` +
-      `</a>${caption}</figure>`;
-  }
+  // isTaskVisualUrl / shipVisualThumbHtml / taskVisualFigureHtml now live in
+  // hall-visual.js. They left because the task record page renders a visual and
+  // needs nothing else in this file, so converging it here would have loaded 61KB
+  // on the hall's most-visited record page for one function. A page that draws a
+  // visual loads hall-visual.js; pages that only use the kit no longer carry the
+  // renderers at all. Callers read window.OTBVisual, not OTBKit.
 
   // ---- charts (task 1003445) ------------------------------------------------
   //
@@ -1218,8 +1162,6 @@
     plotBox, plotWindow,
     // states
     emptyStateHtml, skeletonRows, collapsibleCard,
-    // ship-time task visual (task 1003109; the full-size figure, task 1003829)
-    isTaskVisualUrl, shipVisualThumbHtml, taskVisualFigureHtml,
     // age (task 1002955)
     fmtAge, fmtAbsDate, ageChipHtml, AGE_STALE_DAYS,
   };

package/modules/hall-ui/public/hall-render.js

@@ -1100,7 +1100,7 @@
         <td>
           <div>${escapeHtml(s.title)}</div>
           ${s.value_summary ? `<div style="color:var(--ink-soft);font-size:0.88rem;font-style:italic;margin-top:2px">${escapeHtml(s.value_summary)}</div>` : ''}
-          ${s.visual_url ? `<div style="margin-top:6px">${window.OTBKit.shipVisualThumbHtml(s)}</div>` : ''}
+          ${s.visual_url && window.OTBVisual ? `<div style="margin-top:6px">${window.OTBVisual.shipVisualThumbHtml(s)}</div>` : ''}
         </td>
         <td class="ledger__drachmae">${fmtNum(window.OTBBranding?.taskCreditValue?.(s) ?? s.credits_reward)}</td>
         <td class="ledger__date">${fmtDate(s.shipped_at)}</td>

package/modules/hall-ui/public/hall-visual.js

@@ -0,0 +1,85 @@
+// modules/hall-ui/public/hall-visual.js — the ship-time task visual, in one place
+// (task 1003835; the renderers themselves are tasks 1003109 and 1003829).
+//
+// A satellite of hall-kit.js rather than a part of it, and that is the decision
+// this file records. These three functions lived in the kit, which is 61KB of
+// pager/ledger/filter/chart machinery. The task record page (task.html) renders a
+// visual and needs NOTHING else the kit holds, so converging it onto the kit's
+// renderer would have meant loading 61KB on the hall's most-visited record page
+// for one function — a real cost, paid on the wrong page. The alternative was to
+// let task.js keep its own copy, which is how the hall ended up with two.
+//
+// So the helpers moved OUT. Any page that renders a visual loads this file; the
+// kit no longer carries them and the pages that only use the kit no longer pay
+// for them. The owner's call (2026-09-16) was that the kit may grow satellites
+// like this one.
+//
+// Contract, identical to the kit's own: dependency-free (its own esc(), no
+// window.OTB use) so load order only needs "before the page script";
+// node-require-safe, so tests/task_visuals.mjs can require it with no DOM;
+// string-template builders returning HTML, no state, no render loop.
+//
+// CSS: each caller supplies its own BEM base, because SIZE is the surface's
+// decision and not this file's — the task record caps at 52vh in a record column
+// (.tk-visual, style.css/task.css), the Studio gives the plate the card's whole
+// width (.studio-plate). The markup, the URL guard and the escaping are shared.
+(() => {
+  'use strict';
+
+  // HTML-escape for text interpolated into innerHTML.
+  function esc(s) {
+    return String(s ?? '').replace(/[&<>"']/g, (c) => ({
+      '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;',
+    }[c]));
+  }
+
+  // Same-origin, SERVER-MINTED paths only. The URL arrives from our own API, but
+  // it lands in an href and a src, so it is matched literally against the shape
+  // modules/lifecycle/task-visuals.js mints rather than trusted. Anything else
+  // renders nothing at all.
+  const VISUAL_URL_RE = /^\/api\/(gds|bongos)\/task-visuals\/task-\d+-[0-9a-f]{16}\.(png|jpg|gif|webp)$/;
+  function isTaskVisualUrl(url) {
+    return VISUAL_URL_RE.test(String(url ?? ''));
+  }
+
+  // The compact thumbnail, for a FEED — where the summary is one line in a list,
+  // so the image appears small and links to the full-size file. Three feeds draw
+  // it (the hall's ship ledger, a profile's recent ships, the status dashboard).
+  // Returns '' when the row carries no visual: a task without one must never look
+  // incomplete, so nothing is drawn and there is no placeholder.
+  function shipVisualThumbHtml(row) {
+    const url = String((row && row.visual_url) ?? '');
+    if (!isTaskVisualUrl(url)) return '';
+    const alt = String((row && row.visual_alt) || `Visual for task ${(row && row.id) ?? ''}`).trim();
+    return `<a href="${esc(url)}" target="_blank" rel="noopener" title="${esc(alt)}">` +
+      `<img class="ship-visual-thumb" src="${esc(url)}" alt="${esc(alt)}" loading="lazy"></a>`;
+  }
+
+  // The FULL-SIZE form: the picture as the thing being looked at, with visual_alt
+  // as its caption. For a surface whose subject IS the image — the task record
+  // (.tk-visual) and the Studio's review card (.studio-plate).
+  //
+  // `className` is the caller's BEM base; it is sanitised because it reaches a
+  // class attribute. Returns '' with no visual, like the thumbnail.
+  function taskVisualFigureHtml(row, { className = 'task-visual' } = {}) {
+    const url = String((row && row.visual_url) ?? '');
+    if (!isTaskVisualUrl(url)) return '';
+    const written = String((row && row.visual_alt) || '').trim();
+    const alt = written || `Visual for task ${(row && row.id) ?? ''}`;
+    const base = String(className).replace(/[^A-Za-z0-9_-]/g, '');
+    // The caption is only drawn when the shipper WROTE one — the fallback alt is
+    // a machine sentence for a screen reader, not a caption to show a reader.
+    const caption = written ? `<figcaption class="${base}__caption">${esc(written)}</figcaption>` : '';
+    return `<figure class="${base}">` +
+      `<a href="${esc(url)}" target="_blank" rel="noopener">` +
+      `<img class="${base}__img" src="${esc(url)}" alt="${esc(alt)}" loading="lazy">` +
+      `</a>${caption}</figure>`;
+  }
+
+  const api = { isTaskVisualUrl, shipVisualThumbHtml, taskVisualFigureHtml };
+
+  // Node-require-safe (the dom-utils.js / hall-kit.js pattern): assignment is the
+  // only eval-time side effect, and only when a window exists.
+  if (typeof window !== 'undefined') window.OTBVisual = api;
+  if (typeof module !== 'undefined' && module.exports) module.exports = api;
+})();

package/modules/hall-ui/public/index.html

@@ -110,6 +110,7 @@
 <script src="/builders/box-panel.js?v=2026-06-14-domutils" defer></script>
 <!-- task 2166: the shared component kit (window.OTBKit) — pager/ledger/rail.
      Loaded BEFORE hall-widgets.js, whose skeletons call OTBKit.pagerBarHtml(). -->
+<script src="/builders/hall-visual.js?v=2026-09-16-visual1" defer></script>
 <script src="/builders/hall-kit.js" defer></script>
 <!-- BV1.R75: the CORE hall widgets register into window.OTB's hall-widget registry.
      Loaded BEFORE builders.js so the registry is populated when builders.js stamps

package/modules/hall-ui/public/profile.html

@@ -196,6 +196,7 @@
 <!-- hall-kit (window.OTBKit) — profile.js renders ship-time task visuals through
      its shared thumbnail helper (task 1003109) and builds the section rail with
      it (task 1003489), so it must load first. -->
+<script src="/builders/hall-visual.js?v=2026-09-16-visual1"></script>
 <script src="/builders/hall-kit.js?v=2026-08-27-activity"></script>
 <!-- Connections (section 6). Loaded BEFORE profile.js so window.OTBConnections
      exists by the time renderProfile runs; profile.js guards on it anyway, so a

package/modules/hall-ui/public/profile.js

@@ -176,7 +176,7 @@
     const summary = s.value_summary
       ? `<span style="display:block;margin-top:2px;font-size:12px;color:var(--ink-faint)">${escapeHtml(s.value_summary)}</span>`
       : '';
-    const visual = window.OTBKit && window.OTBKit.shipVisualThumbHtml ? window.OTBKit.shipVisualThumbHtml(s) : '';
+    const visual = window.OTBVisual ? window.OTBVisual.shipVisualThumbHtml(s) : '';
     return `<tr>
         <td class="ledger__num">#${escapeHtml(String(s.id))}</td>
         <td><a href="${taskHref(s.id)}">${escapeHtml(s.title || `Task ${s.id}`)}</a>${summary}${visual ? `<span style="display:block;margin-top:6px">${visual}</span>` : ''}</td>
@@ -473,7 +473,7 @@
         const summary = t.value_summary
           ? `<span style="display:block;margin-top:2px;font-size:12px;color:var(--ink-faint)">${escapeHtml(t.value_summary)}</span>`
           : '';
-        const visual = kit.shipVisualThumbHtml ? kit.shipVisualThumbHtml(t) : '';
+        const visual = window.OTBVisual ? window.OTBVisual.shipVisualThumbHtml(t) : '';
         return `<tr>
           <td class="ledger__num">#${escapeHtml(String(t.id))}</td>
           <td><a href="${taskHref(t.id)}">${escapeHtml(t.title || `Task ${t.id}`)}</a>${summary}${visual ? `<span style="display:block;margin-top:6px">${visual}</span>` : ''}</td>

package/modules/hall-ui/public/settings.js

@@ -913,7 +913,10 @@
       if (res.status === 401) { toAuth(); return; }
       const body = (res.data || {});
       if (!res.ok) throw new Error(body.message || `HTTP ${res.status}`);
-      const expires = body.expires_at ? new Date(body.expires_at).toLocaleString() : 'unknown';
+      // No expires_at is the NORMAL case for a CLI bearer since ADR 0294 — say so
+      // plainly. 'unknown' read as a gap in the page's knowledge; the absence of a
+      // date is the fact, and the revoke is what replaced the timer.
+      const expires = body.expires_at ? `Expires ${new Date(body.expires_at).toLocaleString()}` : 'Never expires';
       const pasteCommand = body.paste_command || '';
       // The secret is QUOTED (settings.css `.quote`): a 64-character token cannot
       // be a line of prose, so it sits one tonal step down with its own foot. Same
@@ -936,7 +939,7 @@
       copyBtn.id = 'cli-reissue-copy';
       copyBtn.textContent = 'Copy';
       const hint = el('span', 'settings-card__hint');
-      hint.textContent = `Expires ${expires} · refreshes on use.`;
+      hint.textContent = `${expires} · revoke it any time under Active sessions.`;
       const foot = el('div', 'quote__foot');
       foot.append(copyBtn, hint);
       const quote = el('div', 'quote');

package/modules/hall-ui/public/studio.css

@@ -155,7 +155,7 @@
    IS the card: an artist is being asked to LOOK at something, so it is given the
    card's full width and as much height as a screen can spare, not the 44px
    thumbnail a ship feed uses. Markup comes from the kit's one renderer
-   (OTBKit.taskVisualFigureHtml); only the size is this room's decision.
+   (OTBVisual.taskVisualFigureHtml); only the size is this room's decision.
 
    max-height in vh, and MEASURED at 1440x900 rather than chosen. The size an
    artist can judge it at wins over a zero-scroll card — that is the task's own

package/modules/hall-ui/public/studio.html

@@ -72,6 +72,7 @@
 <!-- The kit, for its ONE renderer: the full-size ship-time visual figure
      (task 1003829). The copy desk — the artist's other room — already loads it,
      and a fourth hand-rolled <figure> is what the kit exists to stop. -->
+<script src="/builders/hall-visual.js?v=2026-09-16-visual1"></script>
 <script src="/builders/hall-kit.js"></script>
 <script src="/builders/studio.js?v=2026-09-10-studio2"></script>
 </body>

package/modules/hall-ui/public/studio.js

@@ -132,7 +132,7 @@
   // ---------------------------------------------------------------------------
 
   // THE PLATE — the reviewed work's ship-time visual, at the size the card can
-  // give it. Through the kit's one renderer (OTBKit.taskVisualFigureHtml, which
+  // give it. Through the one renderer (OTBVisual.taskVisualFigureHtml, which
   // carries the server-minted-URL guard and the escaping) with the Studio's own
   // class, because the size is this surface's decision: here the picture is the
   // subject, not an illustration beside a record.
@@ -141,8 +141,9 @@
   // read, or when the kit is absent — a review with no picture must read as a
   // review, never as an empty frame (the degrade rule).
   function plateHtml(p) {
-    if (!p.shipped || !kit || typeof kit.taskVisualFigureHtml !== 'function') return '';
-    return kit.taskVisualFigureHtml(p.shipped, { className: 'studio-plate' });
+    const vis = window.OTBVisual;
+    if (!p.shipped || !vis || typeof vis.taskVisualFigureHtml !== 'function') return '';
+    return vis.taskVisualFigureHtml(p.shipped, { className: 'studio-plate' });
   }
 
   // The three weights, and the one field they share. Offered only to a viewer

package/modules/hall-ui/public/style.css

@@ -2841,22 +2841,6 @@ main [id] { scroll-margin-top: calc(var(--topbar-h) + 16px); }
   overflow-y: auto;
 }
 .td-touches { font-size: 12.5px; color: var(--ink-faint); font-family: var(--font-mono); word-break: break-word; margin: 0 0 12px; }
-/* task 1003109: the ship-time VISUAL, rendered directly under the value summary
-   it restates. Sized to be READ (this exists so a non-engineer can see a change),
-   capped so a tall screenshot can't push the rest of the record off the page, and
-   never drawn at all when a task has no visual. */
-.td-visual { margin: 0 0 12px; }
-.td-visual__img {
-  display: block;
-  max-width: 100%;
-  max-height: 52vh;
-  width: auto;
-  height: auto;
-  border: var(--line) solid var(--rule-soft);
-  border-radius: var(--radius-sm);
-  background: var(--glass);
-}
-.td-visual__caption { font-size: 12.5px; color: var(--ink-faint); margin: 6px 0 0; }
 /* The compact form: a thumbnail beside a value summary in a ship FEED, where the
    summary is one line in a list and a full-width image would drown it. */
 .ship-visual-thumb {

package/modules/hall-ui/public/task.html

@@ -68,6 +68,7 @@
 <script src="/builders/task-detail.js?v=2026-07-03-taskdetail2" defer></script>
 <script src="/builders/brand-apply.js?v=2026-06-19-r56" defer></script>
 <script src="/builders/md-reader.js" defer></script>
+<script src="/builders/hall-visual.js?v=2026-09-16-visual1" defer></script>
 <script src="/builders/task.js?v=2026-07-03-taskpage1" defer></script>
 </body>
 </html>

package/modules/hall-ui/public/task.js

@@ -292,20 +292,17 @@
   // a detail can be opened full-size. The caption (visual_alt) doubles as the alt
   // text, which is why it is stored: an image with no alt tells a screen reader
   // nothing, and "a picture of the change" is exactly the audience that needs it.
+  // The shared renderer (hall-visual.js), not a copy of it — task 1003835. This
+  // page hand-rolled the same <figure> until then; the markup it produced is what
+  // OTBVisual emits, so .tk-visual's rules are unchanged. `className` keeps the
+  // sizing this page's own CSS owns (52vh inside a record column).
+  //
+  // Guarded rather than assumed: hall-visual.js is a separate <script>, so a page
+  // that forgot it should render no picture, never a broken one.
   function taskVisualHtml(t) {
-    const url = String(t.visual_url || '');
-    // Same-origin, server-generated paths only. The URL comes from our own API,
-    // but rendering it into an href/src is a place to be literal rather than
-    // trusting: anything that is not the shape our serve route mints is dropped.
-    if (!/^\/api\/(gds|bongos)\/task-visuals\/task-\d+-[0-9a-f]{16}\.(png|jpg|gif|webp)$/.test(url)) return '';
-    const alt = String(t.visual_alt || `Visual for task ${t.id}`);
-    const caption = t.visual_alt
-      ? `<figcaption class="tk-visual__caption">${escapeHtml(t.visual_alt)}</figcaption>`
-      : '';
-    return `<figure class="tk-visual">` +
-      `<a href="${escapeHtml(url)}" target="_blank" rel="noopener">` +
-      `<img class="tk-visual__img" src="${escapeHtml(url)}" alt="${escapeHtml(alt)}" loading="lazy">` +
-      `</a>${caption}</figure>`;
+    const vis = window.OTBVisual;
+    if (!vis || typeof vis.taskVisualFigureHtml !== 'function') return '';
+    return vis.taskVisualFigureHtml(t, { className: 'tk-visual' });
   }
 
   async function copyText(text) {

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.790",
+  "version": "1.19.792",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.790",
+      "version": "1.19.792",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.790",
+  "version": "1.19.792",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",