@bongos/core 1.19.795 → 1.19.797

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.795",
-  "core_contract": "1.19.795",
-  "source_commit": "59f35c05e7edb8428f4c532e5032e9333bd7a0b9",
+  "core_version": "1.19.797",
+  "core_contract": "1.19.797",
+  "source_commit": "8f5cae915f47995fbf47d3adaeeb356c02f4a9f7",
   "source_ref": "HEAD",
-  "built_at": "2026-09-17T00:54:38.883Z",
+  "built_at": "2026-09-17T01:13:47.184Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 486,
     "agent_docs_stubbed": 25,
-    "functional_verbatim": 2182,
+    "functional_verbatim": 2183,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 2693,
-  "tree_sha256": "bb912c280be9ea67a9825f8ee7e6bbc68b2be165c826b3fb40185a0badd7cd9d",
+  "file_count": 2694,
+  "tree_sha256": "c15e5cbc3148cc9a221215b7607ed8cdc79df894902b2e7390bc9baa08d49bc6",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -207,7 +207,7 @@
     {
       "path": ".claude/skills/planning-session/SKILL.md",
       "mode": "0000644",
-      "sha256": "ede2aa15718bff19d38ffa7f42d64bae7490a9025f7e85d43c43306da3f611b6"
+      "sha256": "9320b9a04d36d3169e5a01e4fb5dc595fe84ef292541307fd17974a283b4c509"
     },
     {
       "path": ".claude/skills/priority-session/SKILL.md",
@@ -1997,12 +1997,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "ec93785011f13f27444bd8ccfe9fe24da8cd125cd1b440bb974b78ebe1b28533"
+      "sha256": "ab5057dfc9880545e8d2ac6ac44eb86af18f13a7efe1a071c9a3b9910a2ec5b6"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "76dfd0c0caaedc010f832b44a3acef437f7352e86090cc46f7ce1edb15b6f192"
+      "sha256": "8306b8b8748398081ddece28d92a5dd78b29facc39b55b394bb1b0877249264e"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2527,7 +2527,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "d9df5939232118367f1db9c0127c514a19f625aa46a8375e65dda21705e84671"
+      "sha256": "e0e6a2d6f7b83b899430db2acfa43e9385fd35237cf0245cf54c415be7fe9424"
     },
     {
       "path": "docs/modules-contract.md",
@@ -4677,22 +4677,22 @@
     {
       "path": "modules/hall-ui/public/collab-lib.js",
       "mode": "0000644",
-      "sha256": "32099a90da4ff3deb49027102d4a42b7616d5f576340e74e0416b0dd1588a408"
+      "sha256": "b5bb0d5f86879fe7fb154aaa819f2c5bceda50138f6c7cf9150bce2d0b51a832"
     },
     {
       "path": "modules/hall-ui/public/collab.css",
       "mode": "0000644",
-      "sha256": "964d51e697532fa88c6f1da5cc0e46f47d25ecef3a5cdf55526d721eb781257a"
+      "sha256": "12c967c9bbed5fa4d1cb58b57f6f70eb90fee9626c7cad8e30e3a36b1f8c8db8"
     },
     {
       "path": "modules/hall-ui/public/collab.html",
       "mode": "0000644",
-      "sha256": "1710a2bf97ffa11daff277148299751fe1ca468e038bfa98c5d62d60b914cbf9"
+      "sha256": "664bbcc84bd92ed3762f5c74f265ac86f320995f02d0093c12758db6e8af35ed"
     },
     {
       "path": "modules/hall-ui/public/collab.js",
       "mode": "0000644",
-      "sha256": "039a053ee61e4627b4eaa352c0f1d5c976e4ecbffede2dad9bde63d560e28d01"
+      "sha256": "101a428f4b1bc76117eec665710265b201c32dbce76e2ddfd20e7e82b036faf7"
     },
     {
       "path": "modules/hall-ui/public/collab.states.json",
@@ -7702,12 +7702,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "abe39cacffdf6a8359f19b7e7a5a06a7055f99637edc556db2124968bdae5eb8"
+      "sha256": "21954c7eccc561a9ad23abf43f4511040f8b67231aeb91fa88e47d324c3ff18d"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "6f9922b6e8c2eb446a10daa28bd6a34da2097b36098a70db45f16010c8529217"
+      "sha256": "4a4cd623c012c80ec9a7d18065e78a47209ed2ded81d282e796e9bca6ce7ce6b"
     },
     {
       "path": "public-docs/index.html",
@@ -9587,7 +9587,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "e21607486d5b15d09ea4e0f1ad1a3a626c9dbaf3713aa601dd113e5e3d7bd13e"
+      "sha256": "12ad8d673d39e15d3ccf283f17927e66dbcf499f1b5243f15bd6cb46545bb1e2"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -10979,6 +10979,11 @@
       "mode": "0000644",
       "sha256": "3c420d28341a6e5aaeb5d4af978e72acefec3c9bd7d97f66fd11a72517118606"
     },
+    {
+      "path": "tests/goal_unknown_module_hint.mjs",
+      "mode": "0000644",
+      "sha256": "7e7863c75b1282150fb090da90da8628f68a97873c27527978d806fa9d2c4835"
+    },
     {
       "path": "tests/goal_wall_proof.mjs",
       "mode": "0000644",
@@ -11287,7 +11292,7 @@
     {
       "path": "tests/hall_collab_world.mjs",
       "mode": "0000644",
-      "sha256": "847b3c8ea9bfb6c4b047f311338934cedd7e59e3936552e7265612cd0e5302d7"
+      "sha256": "d005de58e0eabd019f616ee6c77123c5880b67034ce33dc1b01d687a2b284b10"
     },
     {
       "path": "tests/hall_error_envelope.mjs",

package/.claude/skills/planning-session/SKILL.md

@@ -134,6 +134,9 @@ For the version being planned, **group the agreed criteria into goals**. For eac
 - **`scope_modules`** — the module **keys** (NOT file paths) whose files this goal's members may touch. **This is the wall, and it is set here and only here — never self-granted.** Keep it tight: the modules the goal's work actually needs. Widening later goes through an explicit request a trusted rank approves (`POST /goals/:id/scope`; Archon for a `protected` module) — BV1.R64.
   > **The valid key list is the source of truth in [`src/bongos/module-scope-map.js`](../../../src/bongos/module-scope-map.js) — read it, don't trust this list.** It exports `moduleKeys()` (all keys), `protectedModules()` / `isProtectedModule(key)` (which are PROTECTED), and `scopeForModule(key)` (a key's globs + `protected` flag). Each key maps to path-globs; `protected` is **derived** (the key's globs overlap the trust/ship-pipeline/migration/authz core), and a goal scoped to any protected key is **Archon-only** to create. The current roster (run `node -e "const m=require('./src/bongos/module-scope-map');console.log(m.moduleKeys().map(k=>k+(m.isProtectedModule(k)?' 🔒':'')).join('\n'))"` to print it live):
   >   - **No roster is written down here on purpose.** The previous snapshot went stale within a release (it still omitted a key that had been added), which is exactly the failure a "read it live" rule prevents. Run the one-liner above; `protected` is derived from glob overlap, so it changes when the globs change.
+  >   - **That file is the SOURCE. The RUNNING SERVER is the GATE.** `POST /goals` validates `scope_modules` against the roster the LIVE server loaded — not the one in your checkout — so a key added since the last deploy is valid here and refused on the wire. Merging to main deploys nothing (gate 3 of [the release pipeline](../../../docs/recipes/core-release-pipeline.md)), and this is not a rare race: the module roster grows precisely during the versions when planning sessions run. On 2026-08-16 goal 1000069 was created with `government` in scope and came back `unknown: ["government"]` — the key was on main; the site was a release behind. **The SessionStart deploy-state line already tells you whether you are exposed.** If it says the site is behind main, treat any recently-added key as suspect before you compose the goal, not after.
+  >   - **The refusal is not a dead end — it hands you the answer.** `unknown_module` comes back with `valid: [...]`: the LIVE roster, from the server that just refused you. One rejected call tells you exactly what will be accepted, so read it and re-point rather than trying keys one at a time. (`tests/goal_unknown_module_hint.mjs` pins that the refusal keeps carrying it, because this instruction is only true while it does.)
+  >   - **Prefer a deployed alias where one exists, and write the re-point down.** Goal 1000069 was walled to the deprecated `governance` alias, which ADR 0174 deliberately kept carrying BOTH sets of globs through the transition — so the wall was identical, not weaker — and the goal description recorded that `scope_modules` should be re-pointed once the newer release went live. A goal walled to an alias with no note is a goal nobody re-points.
 - **No covering key? → file a module-map prep task FIRST.** Every `scope_modules` entry must be a real key from `moduleKeys()`. If a goal's planned work touches file paths that **no existing key covers** (e.g. a brand-new module dir, or code still fused under `src/bongos/` that isn't yet broken out as its own key), the scope wall cannot place that work. Do **not** invent a key. Instead, **add a prep task to this version** — `kind='refactor'`, scoped to `kernel` (the module that owns `module-scope-map.js`) — to extend `MODULE_GLOBS` so a key covers those paths, and make the dependent goal's tasks depend on it. Adding/editing a key is itself a `kernel`-scoped (Archon-gated) change, so flag it for Archon sign-off in this session.
 - **Join policy** — a normal-scope goal is **open-join** (any builder); a goal whose scope includes a **`protected`** module is **Archon-mediated** (a non-Archon can't self-join; an Archon admits Metic+ members). Creating a protected-scope goal is itself **Archon-only** — so flag those for Archon sign-off in this session.
 - **Optional seed tasks / lead** — any obvious first tasks, and who leads.

package/docs/copy-inventory.md

@@ -4,13 +4,13 @@
 > Deterministic on a given tree — regenerate and commit rather than hand-editing.
 > Machine-readable twin: [`copy-registry.json`](copy-registry.json).
 
-**1793 strings** across 3 surfaces · 1549 distinct pieces of copy · 1793 certain, 0 heuristic · 169 shown in more than one place.
+**1795 strings** across 3 surfaces · 1551 distinct pieces of copy · 1795 certain, 0 heuristic · 169 shown in more than one place.
 
 ## Surfaces
 
 | surface | lives at | files | strings |
 |---|---|---|---|
-| `builders-hall` | `modules/hall-ui/public` | 85 | 1303 |
+| `builders-hall` | `modules/hall-ui/public` | 85 | 1305 |
 | `status-dashboard` | `modules/status-ui/public` | 4 | 100 |
 | `landing` | `modules/public-landing/public` | 5 | 390 |
 
@@ -78,7 +78,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `996edffc1966` | 2x | Access requests | modules/hall-ui/public/watch.html:46, modules/hall-ui/public/watch.html:61 |
 | … | | _129 more in the JSON registry_ | |
 
-## `builders-hall` — 1303 strings
+## `builders-hall` — 1305 strings
 
 | id | conf | text | where |
 |---|---|---|---|
@@ -134,7 +134,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `a3185a43c230` | certain | A sound plays at each turn of your work — a gentle chime when Claude finishes, a flourish when a task ships or | `modules/hall-ui/public/settings.html:333` |
 | `83b1274f9088` | certain | A tally of recorded work sessions, and the latest five. The full record lives on the Sessions page. | `modules/hall-ui/public/watch.html:103` |
 | `daf73127afff` | certain | A word on why | `modules/hall-ui/public/hall-render.js:294` |
-| `1b326b0be1a4` | certain | A {…} — you are a {…}. Mingle pairs across crafts. | `modules/hall-ui/public/collab.js:278` |
+| `1b326b0be1a4` | certain | A {…} — you are a {…}. Mingle pairs across crafts. | `modules/hall-ui/public/collab.js:365` |
 | `996edffc1966` | certain | Access requests | `modules/hall-ui/public/watch.html:46` |
 | `996edffc1966` | certain | Access requests | `modules/hall-ui/public/watch.html:61` |
 | `303f8d90266f` | certain | Achievements could not be loaded. | `modules/hall-ui/public/builders.js:1158` |
@@ -173,7 +173,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `5fcfdf8975cf` | certain | As configuration: | `modules/hall-ui/public/government.js:829` |
 | `01a0f29ff406` | certain | As first filed | `modules/hall-ui/public/idea.js:252` |
 | `688cc6dd38ee` | certain | Asked of you | `modules/hall-ui/public/collab.html:41` |
-| `b2656d0b2402` | certain | Asked {…} | `modules/hall-ui/public/collab.js:49` |
+| `b2656d0b2402` | certain | Asked {…} | `modules/hall-ui/public/collab.js:53` |
 | `b2656d0b2402` | certain | Asked {…} | `modules/hall-ui/public/watch.js:488` |
 | `8c8ec2597036` | certain | Assigned {…} to builder {…}. | `modules/hall-ui/public/government.js:463` |
 | `46714066f2da` | certain | Audit log | `modules/hall-ui/public/watch.html:148` |
@@ -272,6 +272,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `12ee050d0180` | certain | Copy desk | `modules/hall-ui/public/copy-desk.html:27` |
 | `1214ea8e0d1b` | certain | Copy desk — {{worldName}} | `modules/hall-ui/public/copy-desk.html:6` |
 | `1214ea8e0d1b` | certain | Copy desk — {{worldName}} | `modules/hall-ui/public/copy-desk.html:6` |
+| `30764a4f0e28` | certain | Copy for Session Start | `modules/hall-ui/public/collab.js:91` |
 | `7cabea700b57` | certain | Copy not supported here — select the value and copy by hand. | `modules/hall-ui/public/box-panel.js:415` |
 | `ebc8a6c16a22` | certain | Copy parallel prompt | `modules/hall-ui/public/work.html:146` |
 | `a873e7c29d80` | certain | Copy prompt | `modules/hall-ui/public/task.js:614` |
@@ -304,7 +305,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `90691bceaf68` | certain | Could not load | `modules/hall-ui/public/task.js:707` |
 | `589a4cfc5442` | certain | Could not load idea {…}. | `modules/hall-ui/public/ideas.js:644` |
 | `192c893fc64e` | certain | Could not load modules. | `modules/hall-ui/public/modules.js:318` |
-| `8a4b590fa1a0` | certain | Could not load requests. | `modules/hall-ui/public/collab.js:367` |
+| `8a4b590fa1a0` | certain | Could not load requests. | `modules/hall-ui/public/collab.js:458` |
 | `7775fec0fa85` | certain | Could not load sessions. | `modules/hall-ui/public/sessions.js:275` |
 | `7775fec0fa85` | certain | Could not load sessions. | `modules/hall-ui/public/sessions.js:313` |
 | `b2147cc90e36` | certain | Could not load the idea template. Reload, or file from the terminal with capture.js. | `modules/hall-ui/public/ideas.js:626` |
@@ -659,7 +660,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `c72e0bdb834a` | certain | Not declared in module.json — this is who ships the module. | `modules/hall-ui/public/modules.js:62` |
 | `361b353ded5e` | certain | Not enough shipped work yet to chart. | `modules/hall-ui/public/hall-widgets.js:184` |
 | `90230572d017` | certain | Not found | `modules/hall-ui/public/task.js:695` |
-| `8226c979db4d` | certain | Not now | `modules/hall-ui/public/collab.js:278` |
+| `8226c979db4d` | certain | Not now | `modules/hall-ui/public/collab.js:365` |
 | `5ffcdc1a0176` | certain | Not scored — this builder’s own profile waived every signal, or the session predates this measure. | `modules/hall-ui/public/sessions.js:67` |
 | `61250b49a90b` | certain | Not scored. | `modules/hall-ui/public/idea.js:84` |
 | `8d6afe6def47` | certain | Not signed in | `modules/hall-ui/public/settings.html:40` |
@@ -765,6 +766,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `b03e17693dcd` | certain | Read it as a table | `modules/hall-ui/public/drachmae.js:148` |
 | `b03e17693dcd` | certain | Read it as a table | `modules/hall-ui/public/watch.js:1167` |
 | `b6fcfdd652a7` | certain | Read it here | `modules/hall-ui/public/work.html:45` |
+| `053df132e22c` | certain | Read the full ask | `modules/hall-ui/public/collab.js:91` |
 | `c5f19a888a15` | certain | Read the handoff notes | `modules/hall-ui/public/task.js:438` |
 | `f9e998f4af3d` | certain | Read to the end and the button below unlocks. It is an honour system — nothing here checks your comprehension. | `modules/hall-ui/public/primer.html:100` |
 | `26e6c9879035` | certain | Reading the diagrams | `modules/hall-ui/public/diagrams.html:39` |
@@ -828,7 +830,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `e8e4e49fe8f4` | certain | Saves when you press Save; shows everywhere at once. | `modules/hall-ui/public/settings.html:88` |
 | `42cbc20a6ec8` | certain | Saves when you press Save; your next | `modules/hall-ui/public/settings.html:136` |
 | `fc9d783ed0f5` | certain | Say why it is better. Whoever reviews this decides it from your reason, without asking you. | `modules/hall-ui/public/copy-desk.js:446` |
-| `12c1ec21a2c6` | certain | Say yes | `modules/hall-ui/public/collab.js:278` |
+| `12c1ec21a2c6` | certain | Say yes | `modules/hall-ui/public/collab.js:365` |
 | `46711f7bc3df` | certain | Search every string the product shows a person, by what it says or the file it lives in. | `modules/hall-ui/public/copy-desk.html:65` |
 | `5d2ba8e72fa1` | certain | Search failed. | `modules/hall-ui/public/copy-desk.js:343` |
 | `373a7639bcb9` | certain | Sections in this primer | `modules/hall-ui/public/primer.html:52` |
@@ -863,7 +865,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `ac44b08aec92` | certain | Ship it | `modules/hall-ui/public/task.js:600` |
 | `b94a6b5b3d8c` | certain | Shipped with the core | `modules/hall-ui/public/modules.html:56` |
 | `0c0a50ba1666` | certain | Shipped {…}{…}, {…}. | `modules/hall-ui/public/task.js:581` |
-| `6dde12eb0c78` | certain | Show all {…} | `modules/hall-ui/public/collab.js:211` |
+| `6dde12eb0c78` | certain | Show all {…} | `modules/hall-ui/public/collab.js:245` |
 | `14d32a35c15f` | certain | Show my cross-project record | `modules/hall-ui/public/settings.js:516` |
 | `dc0f9fe50a65` | certain | Show the setup guide again | `modules/hall-ui/public/index.html:64` |
 | `2af4c0f2b4b9` | certain | Showing {…} of {…}. | `modules/hall-ui/public/ideas.js:547` |
@@ -885,7 +887,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `87cee78ca134` | certain | Skip to content | `modules/hall-ui/public/shell.js:588` |
 | `688ca7b6e30f` | certain | Slop — reads as machine-written | `modules/hall-ui/public/copy-desk.html:90` |
 | `82df09a08476` | certain | So the Archon knows who you are | `modules/hall-ui/public/hall-render.js:294` |
-| `7da6a848cd26` | certain | Someone helped | `modules/hall-ui/public/collab.js:161` |
+| `7da6a848cd26` | certain | Someone helped | `modules/hall-ui/public/collab.js:195` |
 | `867df58c9aaa` | certain | Something else | `modules/hall-ui/public/copy-desk.html:95` |
 | `c377d8ed744b` | certain | Something went wrong. Try again. | `modules/hall-ui/public/profile-connections.js:275` |
 | `e0767e80206c` | certain | Sound for {…} | `modules/hall-ui/public/settings.js:311` |

package/docs/copy-registry.json

@@ -3,9 +3,9 @@
   "generator": "scripts/gds/copy-inventory.js",
   "goal": 1000074,
   "counts": {
-    "strings": 1793,
-    "unique_ids": 1549,
-    "certain": 1793,
+    "strings": 1795,
+    "unique_ids": 1551,
+    "certain": 1795,
     "heuristic": 0,
     "duplicate_ids": 169
   },
@@ -13,7 +13,7 @@
     "builders-hall": {
       "at": "modules/hall-ui/public",
       "files": 85,
-      "strings": 1303
+      "strings": 1305
     },
     "status-dashboard": {
       "at": "modules/status-ui/public",
@@ -549,7 +549,7 @@
       "text": "Asked {…}",
       "occurrences": 2,
       "at": [
-        "modules/hall-ui/public/collab.js:49",
+        "modules/hall-ui/public/collab.js:53",
         "modules/hall-ui/public/watch.js:488"
       ]
     },
@@ -2278,7 +2278,7 @@
       "surface": "builders-hall",
       "text": "A {…} — you are a {…}. Mingle pairs across crafts.",
       "file": "modules/hall-ui/public/collab.js",
-      "line": 278,
+      "line": 365,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -2629,7 +2629,7 @@
       "surface": "builders-hall",
       "text": "Asked {…}",
       "file": "modules/hall-ui/public/collab.js",
-      "line": 49,
+      "line": 53,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -3515,6 +3515,15 @@
       "origin": "html-title",
       "confidence": "certain"
     },
+    {
+      "id": "30764a4f0e28",
+      "surface": "builders-hall",
+      "text": "Copy for Session Start",
+      "file": "modules/hall-ui/public/collab.js",
+      "line": 91,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "7cabea700b57",
       "surface": "builders-hall",
@@ -3808,7 +3817,7 @@
       "surface": "builders-hall",
       "text": "Could not load requests.",
       "file": "modules/hall-ui/public/collab.js",
-      "line": 367,
+      "line": 458,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -7003,7 +7012,7 @@
       "surface": "builders-hall",
       "text": "Not now",
       "file": "modules/hall-ui/public/collab.js",
-      "line": 278,
+      "line": 365,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -7952,6 +7961,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "053df132e22c",
+      "surface": "builders-hall",
+      "text": "Read the full ask",
+      "file": "modules/hall-ui/public/collab.js",
+      "line": 91,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "c5f19a888a15",
       "surface": "builders-hall",
@@ -8524,7 +8542,7 @@
       "surface": "builders-hall",
       "text": "Say yes",
       "file": "modules/hall-ui/public/collab.js",
-      "line": 278,
+      "line": 365,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -8839,7 +8857,7 @@
       "surface": "builders-hall",
       "text": "Show all {…}",
       "file": "modules/hall-ui/public/collab.js",
-      "line": 211,
+      "line": 245,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -9037,7 +9055,7 @@
       "surface": "builders-hall",
       "text": "Someone helped",
       "file": "modules/hall-ui/public/collab.js",
-      "line": 161,
+      "line": 195,
       "origin": "js-markup",
       "confidence": "certain"
     },

package/docs/module-api-changelog.md

@@ -2064,5 +2064,9 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.793 with no explicit bump. run 35167814500. (task 1002620)
   1.19.795 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.794 with no explicit bump. run 35168408728. (task 1002620)
+  1.19.796 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.795 with no explicit bump. run 35169093667. (task 1002620)
+  1.19.797 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.796 with no explicit bump. run 35169694391. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/hall-ui/public/collab-lib.js

@@ -120,6 +120,69 @@
     return { title: m[1], rest: m[2].trim() };
   }
 
+  // THE CARD FACE IS TWO SENTENCES (owner direction, task 1003960). The
+  // ask-for-help skill asks a session to write up to 4000 characters — what is
+  // stuck, why this person, the steps, how to verify, what has been tried — and
+  // printing all of it on the face buried every row under whichever ask happened
+  // to be longest. So the face carries the ask's first sentence as the title and
+  // its second as the sub line, and everything else waits behind a door.
+  //
+  // WHAT IS BEHIND THE DOOR IS THE WHOLE ASK, not the leftover. A reader opening
+  // "the full ask" wants the document, and the copy control beside it hands that
+  // document to a fresh session verbatim — so `more` is the original text,
+  // untrimmed of its own opening, rather than a remainder that would copy as a
+  // sentence fragment with no beginning.
+  //
+  // A LINE BUDGET AS WELL AS A SENTENCE COUNT. Sentence-splitting alone is not
+  // enough: an ask written as one 4000-character paragraph with no full stop has
+  // exactly one sentence, and counting sentences would put all of it on the face.
+  // Each of the two lines is therefore also capped, and a line that had to be cut
+  // sends the whole ask behind the door.
+  var LEAD_MAX = 200;
+
+  // Trailing punctuation a cut can land on, hoisted so the literal is compiled
+  // once rather than per row per line.
+  var TRAILING_PUNCT = /[\s.,;:!?\u2013\u2014-]+$/;
+
+  // Cut at a word boundary, never mid-word, and mark the cut. The ellipsis is
+  // the only place this page abbreviates, and it is reached only when the asker
+  // wrote no sentence short enough to be a line — the full words are one click
+  // away either way.
+  function clipWords(s, max) {
+    var t = String(s == null ? '' : s);
+    if (t.length <= max) return { text: t, clipped: false };
+    var cut = t.slice(0, max);
+    var sp = cut.lastIndexOf(' ');
+    if (sp > max * 0.6) cut = cut.slice(0, sp);
+    return { text: cut.replace(TRAILING_PUNCT, '') + '\u2026', clipped: true };
+  }
+
+  // summaryOf(text) -> { title, lead, more }. `more` is '' when the ask already
+  // FITS on the face, which is not the same as "has two sentences or fewer". A
+  // door onto nothing is a lie about there being more to read; so is no door
+  // over words the reader cannot see.
+  //
+  // THE CASE THAT LOOKS LIKE A BUG AND IS NOT (grader, task 1003960): two
+  // sentences whose SECOND runs past LEAD_MAX gets a door, even though the ask
+  // has only two sentences. That is correct and deliberate. The lead was cut, so
+  // part of that second sentence is not on the face; hiding the door there would
+  // abbreviate an ask with no way to read the rest, which is the one thing this
+  // whole change exists to prevent. The door tracks WHAT IS UNREAD, never the
+  // sentence count — which is why `hidden` is `l.clipped || second.rest` and not
+  // `second.rest` alone.
+  function summaryOf(text) {
+    var full = String(text == null ? '' : text).trim();
+    var first = titleOf(full);
+    var t = clipWords(first.title, TITLE_MAX);
+    // No sentence short enough to be a headline: the face carries a lead-in only
+    // and the ask goes behind the door whole.
+    if (t.clipped) return { title: t.text, lead: '', more: full };
+    var second = first.rest ? titleOf(first.rest) : { title: '', rest: '' };
+    var l = clipWords(second.title, LEAD_MAX);
+    var hidden = l.clipped || !!second.rest;
+    return { title: t.text, lead: l.text, more: hidden ? full : '' };
+  }
+
   // The "asked of you" list reads in runs: what is asked of you BY NAME first
   // (a personal ask is the one you owe an answer), then one run per craft.
   function groupOf(req) {
@@ -223,7 +286,7 @@
     BANDS: BANDS, ageBand: ageBand, byAgeOldestFirst: byAgeOldestFirst, byNewestFirst: byNewestFirst,
     askerOf: askerOf, contextOf: contextOf,
     directionLine: directionLine, boardLine: boardLine,
-    titleOf: titleOf, groupOf: groupOf,
+    titleOf: titleOf, summaryOf: summaryOf, clipWords: clipWords, LEAD_MAX: LEAD_MAX, groupOf: groupOf,
     httpUrl: httpUrl, initialOf: initialOf, faceOf: faceOf, askers: askers, splitShown: splitShown,
   };
 })();

package/modules/hall-ui/public/collab.css

@@ -120,6 +120,62 @@
   .cb-band { grid-template-columns: 1fr; }
 }
 
+/* ---- the door onto the whole ask -------------------------------------------
+   Owner direction, task 1003960: a card shows two sentences and no more. What
+   the asker actually wrote — up to four thousand characters of context, steps
+   and what they already ruled out — waits behind this pair of controls, which
+   sit together under the two visible lines.
+
+   TWO CONTROLS, TWO WEIGHTS. The door is a text action in the accent ink, like
+   every other door on this page; the copy control is a pill, because it does
+   something rather than going somewhere, and because a reader scanning the board
+   for "take this into a session" should find a button shape. It keeps its own
+   capitals — .btn-ghost lowercases its label, and this one is a named action the
+   owner wrote, so it does not borrow that class. */
+.cb-ask { display: flex; align-items: center; gap: 10px; flex-wrap: wrap; margin: 7px 0 0; }
+.cb-ask__door {
+  font: inherit;
+  font-size: 12.5px;
+  color: var(--accent-ink);
+  background: none;
+  border: 0;
+  padding: 0;
+  cursor: pointer;
+}
+.cb-ask__door:hover { text-decoration: underline; }
+.cb-ask__copy {
+  font: inherit;
+  font-size: 12px;
+  line-height: 1;
+  color: var(--ink-soft);
+  background: none;
+  border: 1px solid var(--rule);
+  border-radius: var(--radius-pill);
+  padding: 5px 11px;
+  cursor: pointer;
+}
+.cb-ask__copy:hover { border-color: var(--ink-faint); color: var(--ink); }
+
+/* The ask itself, opened in place. pre-wrap because an ask is written as a
+   briefing with its own paragraphs and steps, and collapsing them here would
+   make the page's own rendering less readable than the text a reader copies out
+   of it. Capped to the measure so it never becomes the wall of prose this
+   change exists to end. */
+.cb-ask__full {
+  margin: 9px 0 0;
+  padding: 11px 13px;
+  background: var(--glass);
+  border-radius: var(--radius-sm);
+  white-space: pre-wrap;
+  font-size: 13px;
+  line-height: 1.6;
+  color: var(--ink-soft);
+  /* --measure is 48ch, and ch scales with the ELEMENT's font-size — spending it
+     at 13px would cap a briefing at 380px, well under a readable line. So this
+     one block states its own measure, computed at its own size. */
+  max-width: 62ch;
+}
+
 /* ---- empties and the foot -------------------------------------------------- */
 .cb-empty p { font-size: 14px; }
 .cb-foot { margin: var(--sp-sm) 0 0; font-size: 12.5px; color: var(--ink-faint); max-width: var(--measure); }

package/modules/hall-ui/public/collab.html

@@ -98,7 +98,7 @@
 <script src="/builders/shell.js?v=2026-07-02-shell1"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
-<script src="/builders/collab-lib.js?v=2026-09-16-blocks"></script>
-<script src="/builders/collab.js?v=2026-09-16-blocks"></script>
+<script src="/builders/collab-lib.js?v=2026-09-16-twosentence"></script>
+<script src="/builders/collab.js?v=2026-09-16-twosentence"></script>
 </body>
 </html>

package/modules/hall-ui/public/collab.js

@@ -13,11 +13,15 @@
 //
 // A row is the family's .ov-row--lead: the person's FACE first (collab-lib
 // faceOf: the asker on what was asked of you and on the board, the addressee on
-// your own asks), the ask's first sentence as the title and the rest as the sub
-// (titleOf), the direction as a fact with a door to their profile, the task or
-// goal as a chip, and the AGE as a state pill in the right column, so a glance
-// down a list reads the ages in words and in the verification colours. Every
-// rule that can be pure lives in collab-lib.js where a test can execute it.
+// your own asks), then the ask's first TWO sentences and no more (summaryOf),
+// then the direction as a fact with a door to their profile, the task or goal as
+// a chip, and the AGE as a state pill in the right column, so a glance down a
+// list reads the ages in words and in the verification colours. Every rule that
+// can be pure lives in collab-lib.js where a test can execute it.
+//
+// Under those two sentences, when there is more ask than fits: a door onto the
+// whole thing and a control that copies it verbatim for a fresh session (task
+// 1003960).
 //
 // MATCHING IS THE SERVER'S JOB, not this file's. GET /help-requests/for-me derives
 // the viewer's crafts from their own profile; sending a craft from here would be
@@ -55,10 +59,40 @@
     return `<span class="ov-row__when">${escapeHtml(d.toLocaleDateString(undefined, { day: 'numeric', month: 'short', year: 'numeric' }))}</span>`;
   }
 
-  function titleHtml(req) {
-    const t = L.titleOf(req.what_is_stuck);
-    return `<span class="ov-row__title">${escapeHtml(t.title)}</span>`
-      + (t.rest ? `<p class="ov-row__sub">${escapeHtml(t.rest)}</p>` : '');
+  // A DOM id per row that is stable, unique and safe to put in an attribute. The
+  // same request appears in up to three blocks at once, so the block's key is
+  // part of the id — without it "all open asks" and "your asks" would hand the
+  // same id to two elements and every aria-controls on the page would resolve to
+  // whichever painted first.
+  function askId(key, id) {
+    return `cb-ask-${key}-${String(id).replace(/[^A-Za-z0-9_-]/g, '')}`;
+  }
+
+  // THE FACE IS TWO SENTENCES, AND THE ASK ITSELF IS BEHIND A DOOR (owner
+  // direction, task 1003960: "the text here does not need to be visible, all we
+  // need is two sentences"). An ask is written to be answerable by someone with
+  // none of your context — the skill asks for what is stuck, why this person, the
+  // steps, how to verify and what was already tried, up to 4000 characters — so
+  // the words are worth keeping and were only ever at the wrong altitude.
+  //
+  // THE COPY CONTROL IS THE POINT OF THE DOOR, not an extra. What is behind it is
+  // a handoff: the reader's next move is usually to open a fresh session and
+  // paste the whole ask in as its opening context, and a page that made them
+  // expand, select and drag over four thousand characters would be asking them to
+  // do by hand the one thing it knows they came to do. It sits beside the door in
+  // the CLOSED state on purpose — taking the ask away does not require reading it
+  // here first.
+  function askHtml(req, key) {
+    const s = L.summaryOf(req.what_is_stuck);
+    let html = `<span class="ov-row__title">${escapeHtml(s.title)}</span>`;
+    if (s.lead) html += `<p class="ov-row__sub">${escapeHtml(s.lead)}</p>`;
+    if (!s.more) return html;
+    const fid = askId(key, req.id);
+    return html + `<div class="cb-ask">
+        <button class="cb-ask__door" type="button" data-ask-toggle aria-expanded="false" aria-controls="${fid}">Read the full ask</button>
+        <button class="cb-ask__copy" type="button" data-ask-copy="${fid}">Copy for Session Start</button>
+      </div>
+      <p class="cb-ask__full" id="${fid}" hidden>${escapeHtml(s.more)}</p>`;
   }
 
   function contextChip(req) {
@@ -142,11 +176,11 @@
   // chat mirror). What the page owes a helper is the request, its age, its
   // context, and who to answer — and their face. A by-name ask is the personal
   // call on this reader, so its row is the LIT one (.cb-row--live).
-  function forMeRow(req, nowMs, extra) {
+  function forMeRow(req, nowMs, extra, key) {
     const live = req.needs_builder_id != null ? ' cb-row--live' : '';
     return `<li class="ov-row ov-row--lead cb-row${live}" data-id="${escapeHtml(String(req.id))}"${extra ? ' data-extra hidden' : ''}>
       ${faceHtml(L.faceOf(req, 'in'))}
-      <div class="ov-row__main">${titleHtml(req)}
+      <div class="ov-row__main">${askHtml(req, key)}
         <div class="ov-row__facts">${directionFact(req, 'in')}${contextChip(req)}</div>
       </div>
       <div class="ov-row__right">${ageChip(req, nowMs)}${whenLine(req.created_at)}</div>
@@ -156,11 +190,11 @@
   // Your own ask, led by who you asked, with the two settle actions. Only the
   // asker can settle — the server enforces it in the UPDATE's WHERE, this is
   // just the affordance.
-  function mineRow(req, nowMs, extra) {
+  function mineRow(req, nowMs, extra, key) {
     const id = escapeHtml(String(req.id));
     return `<li class="ov-row ov-row--lead cb-row" data-id="${id}"${extra ? ' data-extra hidden' : ''}>
       ${faceHtml(L.faceOf(req, 'out'))}
-      <div class="ov-row__main">${titleHtml(req)}
+      <div class="ov-row__main">${askHtml(req, key)}
         <div class="ov-row__facts">${directionFact(req, 'out')}${contextChip(req)}</div>
       </div>
       <div class="ov-row__right">${ageChip(req, nowMs)}
@@ -174,10 +208,10 @@
 
   // A row on the board of everyone's asks: the asker's face, the third-person
   // line, no actions — settling is the asker's, in their own block.
-  function allRow(req, nowMs, extra) {
+  function allRow(req, nowMs, extra, key) {
     return `<li class="ov-row ov-row--lead cb-row" data-id="${escapeHtml(String(req.id))}"${extra ? ' data-extra hidden' : ''}>
       ${faceHtml(L.faceOf(req, 'in'))}
-      <div class="ov-row__main">${titleHtml(req)}
+      <div class="ov-row__main">${askHtml(req, key)}
         <div class="ov-row__facts">${boardFact(req)}${contextChip(req)}</div>
       </div>
       <div class="ov-row__right">${ageChip(req, nowMs)}${whenLine(req.created_at)}</div>
@@ -195,8 +229,8 @@
     const { shown, hidden } = L.splitShown(list, SHOWN);
     const host = $(`#cb-${key}`);
     if (host) {
-      host.innerHTML = shown.map((r) => rowFn(r, nowMs, false)).join('')
-        + hidden.map((r) => rowFn(r, nowMs, true)).join('');
+      host.innerHTML = shown.map((r) => rowFn(r, nowMs, false, key)).join('')
+        + hidden.map((r) => rowFn(r, nowMs, true, key)).join('');
     }
     const n = $(`#cb-${key}-n`);
     if (n) n.textContent = list.length ? String(list.length) : '';
@@ -213,6 +247,59 @@
     }
   }
 
+  // The per-row door. Independent of the block's "Show all N", which flips
+  // [data-extra] on the <li>s: this flips one <p> inside one row, so opening a
+  // row inside a condensed block and then expanding the block cannot leave either
+  // control describing a state the page is not in.
+  function toggleAsk(btn) {
+    const full = document.getElementById(btn.getAttribute('aria-controls'));
+    if (!full) return;
+    const open = btn.getAttribute('aria-expanded') === 'true';
+    full.hidden = open;
+    btn.setAttribute('aria-expanded', open ? 'false' : 'true');
+    btn.textContent = open ? 'Read the full ask' : 'Hide the full ask';
+  }
+
+  // Clipboard, with the hall's own fallback (copy-on-click.js's rule): the async
+  // API is absent outside a secure context, and a copy control that silently did
+  // nothing on a plain-http preview would be worse than no control at all — so
+  // the caller is always told which way it went.
+  function writeClipboard(text) {
+    if (navigator.clipboard && navigator.clipboard.writeText && window.isSecureContext) {
+      return navigator.clipboard.writeText(text).then(() => true, () => legacyCopy(text));
+    }
+    return Promise.resolve(legacyCopy(text));
+  }
+
+  function legacyCopy(text) {
+    try {
+      const ta = document.createElement('textarea');
+      ta.value = text;
+      ta.setAttribute('readonly', '');
+      ta.style.position = 'fixed';
+      ta.style.top = '-1000px';
+      ta.style.opacity = '0';
+      document.body.appendChild(ta);
+      ta.select();
+      const ok = document.execCommand('copy');
+      document.body.removeChild(ta);
+      return ok;
+    } catch (_) { return false; }
+  }
+
+  // textContent, not innerText: the hidden <p> holds the ask verbatim including
+  // its line breaks, and innerText on a hidden element is not guaranteed to
+  // return them. What lands on the clipboard is exactly what the asker wrote.
+  function copyAsk(btn) {
+    const full = document.getElementById(btn.getAttribute('data-ask-copy'));
+    if (!full) return;
+    const text = full.textContent || '';
+    if (!text) return;
+    writeClipboard(text).then((ok) => {
+      toast(ok ? 'Copied — paste it in to start a session on this.' : 'Could not copy — open the full ask and copy it by hand.');
+    });
+  }
+
   function toggleMore(btn) {
     const key = btn.id.replace(/^cb-|-more$/g, '');
     const host = $(`#cb-${key}`);
@@ -350,6 +437,10 @@
     const closest = (sel) => (ev.target && ev.target.closest ? ev.target.closest(sel) : null);
     const more = closest('.cb-more');
     if (more) { ev.preventDefault(); toggleMore(more); return; }
+    const door = closest('[data-ask-toggle]');
+    if (door) { ev.preventDefault(); toggleAsk(door); return; }
+    const copyBtn = closest('[data-ask-copy]');
+    if (copyBtn) { ev.preventDefault(); copyAsk(copyBtn); return; }
     const mingleBtn = closest('[data-mingle]');
     if (mingleBtn) {
       ev.preventDefault();

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.795",
+  "version": "1.19.797",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.795",
+      "version": "1.19.797",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.795",
+  "version": "1.19.797",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/src/module-api.js

@@ -71,7 +71,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.795'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.797'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/goal_unknown_module_hint.mjs

@@ -0,0 +1,103 @@
+// tests/goal_unknown_module_hint.mjs
+//
+// The `unknown_module` refusal must keep handing back the LIVE module roster
+// (task 1003106, goal 1000095, from idea 1000760).
+//
+// WHY THIS EXISTS. `POST /goals` validates `scope_modules` against the roster
+// the RUNNING server loaded, while a planning session reads the roster from its
+// own checkout. Those are different lists whenever the deployed core pin sits
+// behind `main` — which is the normal state, by design, because merging to main
+// deploys nothing (gate 3 of the release pipeline). On 2026-08-16 a session
+// created a goal with `government` in scope and was refused: the key was on
+// main, the site was a release behind.
+//
+// The fix is guidance in `/planning-session` Phase 2.5, and the part of that
+// guidance with teeth is "the refusal is not a dead end — read `valid` off it
+// and re-point". **That instruction is only true while the refusal carries the
+// list.** If someone trims the payload to a bare code, the skill keeps telling
+// agents to read a field that is no longer there, and the failure is silent:
+// the planning session simply guesses again. So the two are pinned together
+// here — the route's payload, the roster it is built from, and the skill text
+// that depends on both.
+//
+// Deliberately NOT a re-test of the schema layer: `tests/goal_routes.mjs`
+// covers the request-validation branches and says in its own words that the
+// unknown-key check is in-handler, which is exactly the gap this fills.
+//
+// Pure: no DB, no network.
+//
+// Run:  node tests/goal_unknown_module_hint.mjs
+
+import { strict as assert } from 'node:assert';
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { createRequire } from 'node:module';
+
+const require = createRequire(import.meta.url);
+const scopeMap = require('../src/bongos/module-scope-map.js');
+
+const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
+const GOALS_ROUTE = path.join(ROOT, 'modules', 'lifecycle', 'routes', 'goals.js');
+const SKILL = path.join(ROOT, '.claude', 'skills', 'planning-session', 'SKILL.md');
+
+let passed = 0;
+let failed = 0;
+function test(name, fn) {
+  try {
+    fn();
+    passed++;
+    console.log(`  ok  ${name}`);
+  } catch (err) {
+    failed++;
+    console.log(`  FAIL ${name}`);
+    console.log(`     ${err.message}`);
+  }
+}
+
+// ---- the roster the refusal would hand back is real ------------------------
+
+test('moduleKeys() returns a real, non-empty roster', () => {
+  const keys = scopeMap.moduleKeys();
+  assert.ok(Array.isArray(keys), 'moduleKeys() returns an array');
+  assert.ok(keys.length >= 10, `expected a substantial roster, got ${keys.length}`);
+  assert.equal(new Set(keys).size, keys.length, 'keys are unique');
+  for (const k of keys) {
+    assert.ok(typeof k === 'string' && k.trim(), `key ${JSON.stringify(k)} is a non-empty string`);
+    assert.ok(scopeMap.isModuleKey(k), `isModuleKey agrees about ${k}`);
+  }
+  // A roster that answered "yes" to everything would make the refusal
+  // unreachable and this whole file vacuous.
+  assert.equal(scopeMap.isModuleKey('definitely-not-a-module'), false);
+});
+
+// ---- the refusal carries it ------------------------------------------------
+
+test('every unknown_module refusal hands back valid: moduleKeys()', () => {
+  const src = fs.readFileSync(GOALS_ROUTE, 'utf8');
+  const sites = [...src.matchAll(/res\.fail\(\s*'unknown_module'[\s\S]{0,200}?\)/g)].map((m) => m[0]);
+  // The count IS the vacuity guard: a regex that silently matched nothing would
+  // make the loop below pass without asserting anything at all.
+  assert.equal(sites.length, 2, `expected 2 unknown_module refusals in goals.js, found ${sites.length}`);
+  for (const site of sites) {
+    assert.match(
+      site, /valid:\s*moduleKeys\(\)/,
+      `an unknown_module refusal without valid: moduleKeys() — /planning-session Phase 2.5 tells agents to read that field:\n${site}`
+    );
+  }
+});
+
+// ---- and the skill still tells agents to read it ---------------------------
+
+test('Phase 2.5 tells the agent the server is the gate and the refusal carries the answer', () => {
+  const skill = fs.readFileSync(SKILL, 'utf8');
+  assert.ok(skill.includes('### Phase 2.5'), 'Phase 2.5 still exists');
+  assert.match(skill, /RUNNING SERVER is the GATE/,
+    'Phase 2.5 must still say the live server, not the checkout, decides a key');
+  assert.match(skill, /`unknown_module` comes back with `valid/,
+    'Phase 2.5 must still point at the field this test pins');
+});
+
+console.log('');
+console.log(`unknown_module carries the live roster (task 1003106): ${passed} passed, ${failed} failed`);
+if (failed > 0) process.exit(1);

package/tests/hall_collab_world.mjs

@@ -123,10 +123,121 @@ test('the first line is decided: the ask\'s first sentence is the title, the res
   assert.equal(L.titleOf('docs/x.md is stale and y.js too').title, 'docs/x.md is stale and y.js too', 'a dot inside a path is not a sentence break');
   const t = L.titleOf('  padded.  and trailing   ');
   assert.equal(`${t.title} ${t.rest}`, 'padded. and trailing', 'nothing is clipped');
+  // titleOf is still the sentence splitter; what the page DOES with the tail
+  // changed in task 1003960 and is asserted in the next test.
+  assert.equal(typeof L.summaryOf, 'function', 'the page face is built on summaryOf now');
+});
+
+test('a card face carries two sentences at most, and the whole ask waits behind a door', () => {
+  const L = lib();
+
+  // The common case: two short sentences fit, so there is nothing behind a door
+  // and the page must not offer one. A door onto nothing is a lie about there
+  // being more to read.
+  const fits = L.summaryOf('The pin will not move past 782. Can you look before I ship?');
+  assert.deepEqual(fits, {
+    title: 'The pin will not move past 782.',
+    lead: 'Can you look before I ship?',
+    more: '',
+  });
+  assert.equal(L.summaryOf('Can you look at the pin?').more, '', 'one sentence needs no door');
+
+  // The case the owner reported: a real ask, written the way the ask-for-help
+  // skill asks for it, is five parts long. Two reach the face; the rest does not.
+  const long = [
+    'The deploy pin is stuck at 1.19.782.',
+    'I need a Metic because the release gate is above my rank.',
+    'Run the release pipeline, then check /version reports 789.',
+    'Verify by loading the hall and reading the footer.',
+    'I already ruled out a stale CDN cache and a bad merge.',
+  ].join(' ');
+  const s = L.summaryOf(long);
+  assert.equal(s.title, 'The deploy pin is stuck at 1.19.782.');
+  assert.equal(s.lead, 'I need a Metic because the release gate is above my rank.');
+  assert.ok(s.more, 'the rest goes behind the door');
+  assert.equal(s.more, long, 'and what is behind the door is the WHOLE ask, so a copy is not a fragment');
+  assert.ok(!s.title.includes('Verify by loading'), 'nothing past the second sentence is on the face');
+
+  // A sentence count alone is not enough: one 4000-character paragraph with no
+  // full stop is ONE sentence, and counting sentences would put all of it on the
+  // face. The line budget catches it, and the ask still goes behind the door whole.
+  const blob = 'x '.repeat(900).trim();
+  const b = L.summaryOf(blob);
+  assert.ok(b.title.length < 160, 'a blob is cut to a lead-in');
+  assert.ok(b.title.endsWith('\u2026'), 'and the cut is marked');
+  assert.equal(b.lead, '');
+  assert.equal(b.more, blob, 'the words are not lost, only moved');
+
+  // The cut never lands mid-word.
+  const words = 'antidisestablishmentarianism '.repeat(40).trim();
+  const w = L.summaryOf(words);
+  assert.ok(/(^|\s)antidisestablishmentarianism\u2026$/.test(w.title) || w.title.endsWith('antidisestablishmentarianism\u2026'),
+    'clipWords cuts at a space, never inside a word');
+
+  assert.deepEqual(L.summaryOf(''), { title: '', lead: '', more: '' }, 'an empty ask renders nothing, not a door');
+});
+
+test('the door tracks what is UNREAD, not the sentence count', () => {
+  const L = lib();
+
+  // Raised by the grader on task 1003960 as a violation of "one or two sentences
+  // shows no expander". It is neither a violation nor a bug, and the rule it
+  // appeals to was the imprecise one: an ask earns a door when part of it is not
+  // on the face, and sentence two can be longer than the face on its own.
+  const twoButLong = 'The pin will not move. ' + 'I have tried '.repeat(30).trim() + '.';
+  const r = L.summaryOf(twoButLong);
+  assert.equal(r.title, 'The pin will not move.');
+  assert.ok(r.lead.endsWith('\u2026'), 'the second sentence did not fit, so it was cut');
+  assert.ok(r.lead.length < twoButLong.length, 'and part of it is therefore unread');
+  assert.equal(r.more, twoButLong,
+    'so it gets a door — hiding one here would abbreviate an ask with no way to read the rest');
+
+  // The mirror case, so the pair states the rule between them: two sentences
+  // that BOTH fit are fully on the face, so there is nothing to open.
+  assert.equal(L.summaryOf('The pin will not move. Can you look?').more, '',
+    'nothing unread means no door');
+});
+
+test('the door and the copy control are on the row, and the copy control is reachable while it is shut', () => {
   const js = read('collab.js');
-  assert.match(js, /L\.titleOf\(req\.what_is_stuck\)/);
-  assert.match(js, /class="ov-row__title">\$\{escapeHtml\(t\.title\)\}/);
-  assert.match(js, /class="ov-row__sub">\$\{escapeHtml\(t\.rest\)\}/);
+  assert.match(js, /L\.summaryOf\(req\.what_is_stuck\)/, 'the face is built from summaryOf');
+  assert.match(js, /class="ov-row__title">\$\{escapeHtml\(s\.title\)\}/);
+  assert.match(js, /class="ov-row__sub">\$\{escapeHtml\(s\.lead\)\}/);
+  assert.match(js, /if \(!s\.more\) return html;/, 'no door when the ask already fits');
+
+  // The door announces its state and names what it controls, so it works from
+  // the keyboard and reads correctly to a screen reader.
+  assert.match(js, /data-ask-toggle aria-expanded="false" aria-controls="\$\{fid\}"/);
+  assert.match(js, /aria-expanded', open \? 'false' : 'true'/, 'and the state flips when it opens');
+  assert.match(js, /Read the full ask/);
+  assert.match(js, /Hide the full ask/);
+
+  // The copy control sits in the SAME block as the door, which is rendered
+  // whether or not the ask is open — the owner asked for it "in the closed
+  // version next to the link", and a control only reachable after expanding
+  // would make a reader open four thousand characters to take them away.
+  const bar = js.slice(js.indexOf('<div class="cb-ask">'), js.indexOf('</div>', js.indexOf('<div class="cb-ask">')));
+  assert.match(bar, /data-ask-toggle/, 'the door is in the bar');
+  assert.match(bar, /Copy for Session Start/, 'and so is the copy control, in the owner\'s words');
+  assert.ok(!/hidden/.test(bar), 'the bar itself is never hidden');
+  assert.match(js, /<p class="cb-ask__full" id="\$\{fid\}" hidden>/, 'only the ask is hidden');
+
+  // What lands on the clipboard is the ask verbatim, line breaks and all.
+  assert.match(js, /full\.textContent/, 'copied from textContent, so the line breaks survive');
+  assert.ok(!/full\.innerText/.test(js), 'innerText on a hidden element is not guaranteed to keep them');
+  assert.match(js, /document\.execCommand\('copy'\)/, 'with the hall\'s fallback for an insecure context');
+
+  // One request can appear in three blocks at once, so the id is block-scoped.
+  assert.match(js, /function askId\(key, id\)/);
+  assert.match(js, /cb-ask-\$\{key\}-/);
+  assert.match(js, /rowFn\(r, nowMs, false, key\)/, 'and paintBlock hands the key down');
+
+  const css = read('collab.css');
+  for (const cls of ['.cb-ask ', '.cb-ask__door', '.cb-ask__copy', '.cb-ask__full']) {
+    assert.ok(css.includes(cls), `collab.css dresses ${cls.trim()}`);
+  }
+  assert.match(css, /\.cb-ask__full[\s\S]*?white-space: pre-wrap/, 'the opened ask keeps its own paragraphs');
+  assert.ok(!/\.cb-ask__copy[^}]*text-transform/.test(css), 'the copy control keeps the capitals the owner wrote');
 });
 
 test('"asked of you" reads in runs — by name first, then each craft', () => {