@bongos/core 1.19.813 → 1.19.814

package/docs/copy-registry.json

@@ -3,9 +3,9 @@
   "generator": "scripts/gds/copy-inventory.js",
   "goal": 1000074,
   "counts": {
-    "strings": 1856,
-    "unique_ids": 1610,
-    "certain": 1856,
+    "strings": 1860,
+    "unique_ids": 1614,
+    "certain": 1860,
     "heuristic": 0,
     "duplicate_ids": 170
   },
@@ -13,7 +13,7 @@
     "builders-hall": {
       "at": "modules/hall-ui/public",
       "files": 86,
-      "strings": 1366
+      "strings": 1370
     },
     "status-dashboard": {
       "at": "modules/status-ui/public",
@@ -270,9 +270,9 @@
       "occurrences": 4,
       "at": [
         "modules/hall-ui/public/task.js:494",
-        "modules/hall-ui/public/task.js:518",
-        "modules/hall-ui/public/task.js:910",
-        "modules/hall-ui/public/task.js:922"
+        "modules/hall-ui/public/task.js:530",
+        "modules/hall-ui/public/task.js:959",
+        "modules/hall-ui/public/task.js:971"
       ]
     },
     {
@@ -348,8 +348,8 @@
       "text": "Copy prompt",
       "occurrences": 3,
       "at": [
-        "modules/hall-ui/public/task.js:742",
-        "modules/hall-ui/public/task.js:763",
+        "modules/hall-ui/public/task.js:791",
+        "modules/hall-ui/public/task.js:812",
         "modules/hall-ui/public/work.js:599"
       ]
     },
@@ -721,7 +721,7 @@
       "occurrences": 2,
       "at": [
         "modules/hall-ui/public/project-settings.js:242",
-        "modules/hall-ui/public/task.js:929"
+        "modules/hall-ui/public/task.js:978"
       ]
     },
     {
@@ -2154,7 +2154,7 @@
       "surface": "builders-hall",
       "text": "A dependency keeps this task out of the claimable queue until that one ships. Remove one with the × beside it under “Blocked by”.",
       "file": "modules/hall-ui/public/task.js",
-      "line": 595,
+      "line": 607,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -2271,7 +2271,7 @@
       "surface": "builders-hall",
       "text": "A shipped task cannot be retired — it is immutable history now.",
       "file": "modules/hall-ui/public/task.js",
-      "line": 719,
+      "line": 747,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -2316,7 +2316,7 @@
       "surface": "builders-hall",
       "text": "A task cannot wait for itself.",
       "file": "modules/hall-ui/public/task.js",
-      "line": 837,
+      "line": 886,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -2415,7 +2415,7 @@
       "surface": "builders-hall",
       "text": "Add dependency",
       "file": "modules/hall-ui/public/task.js",
-      "line": 595,
+      "line": 607,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -2811,7 +2811,7 @@
       "surface": "builders-hall",
       "text": "Awaiting the grader, or a confirmation, before it can ship.",
       "file": "modules/hall-ui/public/task.js",
-      "line": 698,
+      "line": 710,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -3234,7 +3234,7 @@
       "surface": "builders-hall",
       "text": "Choose a goal first.",
       "file": "modules/hall-ui/public/task.js",
-      "line": 885,
+      "line": 934,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -3540,7 +3540,7 @@
       "surface": "builders-hall",
       "text": "Confirm that verification for #{…} actually passed?",
       "file": "modules/hall-ui/public/task.js",
-      "line": 778,
+      "line": 827,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -3675,7 +3675,7 @@
       "surface": "builders-hall",
       "text": "Copy prompt",
       "file": "modules/hall-ui/public/task.js",
-      "line": 742,
+      "line": 791,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -3684,7 +3684,7 @@
       "surface": "builders-hall",
       "text": "Copy prompt",
       "file": "modules/hall-ui/public/task.js",
-      "line": 763,
+      "line": 812,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -3918,7 +3918,7 @@
       "surface": "builders-hall",
       "text": "Could not load",
       "file": "modules/hall-ui/public/task.js",
-      "line": 929,
+      "line": 978,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -4062,7 +4062,7 @@
       "surface": "builders-hall",
       "text": "Could not load {…}",
       "file": "modules/hall-ui/public/task.js",
-      "line": 922,
+      "line": 971,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -4917,7 +4917,7 @@
       "surface": "builders-hall",
       "text": "Enter the id of the task this one should wait for.",
       "file": "modules/hall-ui/public/task.js",
-      "line": 834,
+      "line": 883,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -6231,7 +6231,7 @@
       "surface": "builders-hall",
       "text": "Last claimed by",
       "file": "modules/hall-ui/public/task.js",
-      "line": 640,
+      "line": 652,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -6753,7 +6753,7 @@
       "surface": "builders-hall",
       "text": "Move to goal",
       "file": "modules/hall-ui/public/task.js",
-      "line": 565,
+      "line": 577,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -7059,7 +7059,7 @@
       "surface": "builders-hall",
       "text": "No open goals in this version",
       "file": "modules/hall-ui/public/task.js",
-      "line": 564,
+      "line": 576,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -7212,7 +7212,7 @@
       "surface": "builders-hall",
       "text": "Not found",
       "file": "modules/hall-ui/public/task.js",
-      "line": 917,
+      "line": 966,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -7842,7 +7842,7 @@
       "surface": "builders-hall",
       "text": "Pick a priority first.",
       "file": "modules/hall-ui/public/task.js",
-      "line": 819,
+      "line": 868,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -7968,7 +7968,7 @@
       "surface": "builders-hall",
       "text": "Priority is already {…}.",
       "file": "modules/hall-ui/public/task.js",
-      "line": 822,
+      "line": 871,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -8715,7 +8715,7 @@
       "surface": "builders-hall",
       "text": "Retire task {…}? It leaves the claimable queue. Promote restores it to the backlog.",
       "file": "modules/hall-ui/public/task.js",
-      "line": 872,
+      "line": 921,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -8733,7 +8733,7 @@
       "surface": "builders-hall",
       "text": "Retire this task",
       "file": "modules/hall-ui/public/task.js",
-      "line": 726,
+      "line": 775,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -8742,7 +8742,7 @@
       "surface": "builders-hall",
       "text": "Retire this task…",
       "file": "modules/hall-ui/public/task.js",
-      "line": 737,
+      "line": 786,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -8850,7 +8850,7 @@
       "surface": "builders-hall",
       "text": "Say why it is being retired — the reason goes in the record.",
       "file": "modules/hall-ui/public/task.js",
-      "line": 871,
+      "line": 920,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -9093,7 +9093,7 @@
       "surface": "builders-hall",
       "text": "Set priority",
       "file": "modules/hall-ui/public/task.js",
-      "line": 595,
+      "line": 607,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -9174,7 +9174,7 @@
       "surface": "builders-hall",
       "text": "Ship it",
       "file": "modules/hall-ui/public/task.js",
-      "line": 694,
+      "line": 706,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -9192,7 +9192,7 @@
       "surface": "builders-hall",
       "text": "Shipped {…}{…}, {…}.",
       "file": "modules/hall-ui/public/task.js",
-      "line": 675,
+      "line": 687,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -9408,7 +9408,7 @@
       "surface": "builders-hall",
       "text": "Someone is holding a claim on this task. It has to be released before the task can be retired.",
       "file": "modules/hall-ui/public/task.js",
-      "line": 721,
+      "line": 749,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -9660,7 +9660,7 @@
       "surface": "builders-hall",
       "text": "Task {…}",
       "file": "modules/hall-ui/public/task.js",
-      "line": 518,
+      "line": 530,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -9669,7 +9669,7 @@
       "surface": "builders-hall",
       "text": "Task {…}",
       "file": "modules/hall-ui/public/task.js",
-      "line": 910,
+      "line": 959,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -9678,7 +9678,7 @@
       "surface": "builders-hall",
       "text": "Task {…}",
       "file": "modules/hall-ui/public/task.js",
-      "line": 922,
+      "line": 971,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -9714,7 +9714,7 @@
       "surface": "builders-hall",
       "text": "Tasks in the ledger are numbered separately from GitHub pull requests, so this may be a PR number rather than a task. The work board lists everything that does exist.",
       "file": "modules/hall-ui/public/task.js",
-      "line": 910,
+      "line": 959,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10119,7 +10119,7 @@
       "surface": "builders-hall",
       "text": "The reason is recorded in the audit log. This is recoverable: a retired task can be restored to the backlog with Promote.",
       "file": "modules/hall-ui/public/task.js",
-      "line": 726,
+      "line": 775,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10299,7 +10299,7 @@
       "surface": "builders-hall",
       "text": "The task feed did not answer. Nothing on the record has changed, only the read failed. Try again in a moment, or go back.",
       "file": "modules/hall-ui/public/task.js",
-      "line": 922,
+      "line": 971,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10650,7 +10650,7 @@
       "surface": "builders-hall",
       "text": "This task has shipped and its credits have landed. Neither Ship it nor Confirm is available.",
       "file": "modules/hall-ui/public/task.js",
-      "line": 703,
+      "line": 715,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10659,7 +10659,7 @@
       "surface": "builders-hall",
       "text": "This task is already retired. Promote restores it to the backlog.",
       "file": "modules/hall-ui/public/task.js",
-      "line": 723,
+      "line": 751,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10884,7 +10884,7 @@
       "surface": "builders-hall",
       "text": "Wait for task",
       "file": "modules/hall-ui/public/task.js",
-      "line": 595,
+      "line": 607,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -11217,7 +11217,7 @@
       "surface": "builders-hall",
       "text": "Why retire this task?",
       "file": "modules/hall-ui/public/task.js",
-      "line": 726,
+      "line": 775,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -11392,6 +11392,42 @@
       "origin": "js-notice",
       "confidence": "certain"
     },
+    {
+      "id": "bcf33947aff6",
+      "surface": "builders-hall",
+      "text": "You created this task and it is already retired.",
+      "file": "modules/hall-ui/public/task.js",
+      "line": 767,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
+    {
+      "id": "23c68db6db4e",
+      "surface": "builders-hall",
+      "text": "You created this task, but it has already moved past planning. Retiring it now is a change to the record, so it needs a Metic.",
+      "file": "modules/hall-ui/public/task.js",
+      "line": 772,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
+    {
+      "id": "cf0c107a39fc",
+      "surface": "builders-hall",
+      "text": "You created this task, but it has shipped. Shipped work is immutable history — nobody can retire it, whatever their rank.",
+      "file": "modules/hall-ui/public/task.js",
+      "line": 765,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
+    {
+      "id": "b91183c02c63",
+      "surface": "builders-hall",
+      "text": "You created this task, but someone is holding a claim on it. Once that is released you can retire it yourself.",
+      "file": "modules/hall-ui/public/task.js",
+      "line": 770,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "da274462bb30",
       "surface": "builders-hall",
@@ -12126,7 +12162,7 @@
       "surface": "builders-hall",
       "text": "e.g. superseded by task 1002891",
       "file": "modules/hall-ui/public/task.js",
-      "line": 726,
+      "line": 775,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -12936,7 +12972,7 @@
       "surface": "builders-hall",
       "text": "task id",
       "file": "modules/hall-ui/public/task.js",
-      "line": 595,
+      "line": 607,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -13737,7 +13773,7 @@
       "surface": "builders-hall",
       "text": "{…}, no such task",
       "file": "modules/hall-ui/public/task.js",
-      "line": 910,
+      "line": 959,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -13782,7 +13818,7 @@
       "surface": "builders-hall",
       "text": "{…}{…} · {…}",
       "file": "modules/hall-ui/public/task.js",
-      "line": 637,
+      "line": 649,
       "origin": "js-markup",
       "confidence": "certain"
     },

package/docs/module-api-changelog.md

@@ -2100,5 +2100,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.811 with no explicit bump. run 35191850392. (task 1002620)
   1.19.813 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.812 with no explicit bump. run 35193306517. (task 1002620)
+  1.19.814 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.813 with no explicit bump. run 35194334679. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/dev-box/app/src/vendor/bongos-client.cjs

@@ -898,7 +898,7 @@ function createClient(opts = {}) {
       getTasksId: (args) => request("GET", "/tasks/{id}", { hasBody: false }, args),
       // PATCH /tasks/{id} — rank: metic+archon — PATCH /tasks/:id
       patchTasksId: (args) => request("PATCH", "/tasks/{id}", { hasBody: true }, args),
-      // POST /tasks/{id}/abandon — rank: metic+archon — POST /tasks/:id/abandon
+      // POST /tasks/{id}/abandon — rank: any-builder — POST /tasks/:id/abandon
       postTasksIdAbandon: (args) => request("POST", "/tasks/{id}/abandon", { hasBody: true }, args),
       // POST /tasks/{id}/attest-gate — rank: any-builder — POST /tasks/:id/attest-gate
       postTasksIdAttestGate: (args) => request("POST", "/tasks/{id}/attest-gate", { hasBody: true }, args),

package/modules/government/catalog.js

@@ -164,7 +164,16 @@ const PERMISSIONS = [
   { key: 'task.edit', system: false, floor: 'metic', guards: 'PATCH /tasks/:id' },
   { key: 'task.promote', system: false, floor: 'metic', guards: 'POST /tasks/:id/promote' },
   { key: 'task.demote', system: false, floor: 'metic', guards: 'POST /tasks/:id/demote' },
-  { key: 'task.abandon', system: false, floor: 'metic', guards: 'POST /tasks/:id/abandon — scope removal; undo = POST /tasks/:id/promote (ADR 0152, was archon)' },
+  // task 1002443: now the CROSS-OWNER half of a pair. Floor and guards are
+  // unchanged — what is new is that the key DECLARES its ownership axis, so
+  // `task.abandon.own` (in the ownership block below) can name it as the escalation
+  // path a creator's own-scoped grant is measured against.
+  //
+  // Verb `act`, not `manage`: retiring a task is ONE reach into the row, and
+  // `manage` is the full-control verb — declaring it here would silently dominate
+  // every future narrower `task.*.own` key, which is exactly the verb-blind
+  // escalation task 1003195 closed.
+  { key: 'task.abandon', system: false, floor: 'metic', scope: 'any', resource: 'task', verb: 'act', guards: 'POST /tasks/:id/abandon — scope removal on ANY task; undo = POST /tasks/:id/promote (ADR 0152, was archon). The cross-owner counterpart of task.abandon.own (task 1002443)' },
   { key: 'task.merge', system: false, floor: 'metic', guards: 'POST /tasks/:id/merge — mark a duplicate task merged into another (task 1001478, the idea.triage merge analogue)' },
   { key: 'task.vote', system: false, floor: 'metic', guards: 'POST /tasks/:id/vote' },
   { key: 'task.dependency.manage', system: false, floor: 'metic', guards: 'POST|PUT|DELETE /tasks/:id/dependencies (same-tier)' },
@@ -317,6 +326,24 @@ const PERMISSIONS = [
   // marker here. Exactly why scope is declared data: the suffix rule only runs the
   // safe direction ('.own' ⇒ scope 'own'), never the converse.
   { key: 'me.wandering.set', system: false, floor: 'xenos', scope: 'own', resource: 'builder_prefs', verb: 'set', counterpart: [], guards: 'PATCH /me/wandering (clamped by maxLevelForRank) — ownership-scoped' },
+  // task 1002443 — the owner's 2026-07-25 request: "the creator of that task should
+  // be able to abandon that task directly inside of the UI". Retiring work you
+  // filed yourself is not a triage authority, so it does not want the metic floor
+  // that `task.abandon` carries; it wants the OWNERSHIP axis, which is precisely the
+  // narrower rule a rank cannot express (`whose row is this`).
+  //
+  // counterpart is REAL here, unlike task.act.own/memory.manage.own: `task.abandon`
+  // is the same `act` verb over the same `task` resource across every creator, so it
+  // genuinely subsumes retiring your own — a Metic keeps the power they have today
+  // without needing to be the creator, and the route admits on either branch through
+  // resolver.authorizeOwnedOrAny.
+  //
+  // The floor is the LOOSER half of the gate, never the whole of it (the
+  // `goal.manage.own` posture): holding this key authorizes nothing on its own, and
+  // the STATUS envelope — creator-abandon only while the task is backlog/ready/
+  // blocked, never completed/confirmed/shipped — is enforced in abandonTask under
+  // the same FOR UPDATE lock that performs the write, not here.
+  { key: 'task.abandon.own', system: false, floor: 'xenos', scope: 'own', resource: 'task', verb: 'act', counterpart: ['task.abandon'], guards: 'POST /tasks/:id/abandon on a task you CREATED (tasks.created_by), while it is backlog/ready/blocked and unclaimed — requireBuilder + in-handler authorizeOwnedOrAny; ownership-scoped (task 1002443)' },
   { key: 'cost.log', system: false, floor: 'xenos', guards: 'POST /cost' },
   { key: 'learning.create', system: false, floor: 'xenos', guards: 'POST /learnings' },
   { key: 'blocker.file', system: false, floor: 'xenos', guards: 'POST /blockers' },

package/modules/government/migrations/government_015_task_abandon_own.sql

@@ -0,0 +1,64 @@
+-- government_015_task_abandon_own.sql — grant the new `task.abandon.own` atom to
+-- every rank (task 1002443, ADR 0297).
+--
+-- WHAT IT IS. The owner's 2026-07-25 request: "the creator of that task should be
+-- able to abandon that task directly inside of the UI." Retiring a task was a rank
+-- power only (`task.abandon`, floor metic, governance_003), so a sub-Metic builder
+-- could file a task and then could not withdraw their own proposal. The new key is
+-- the ADR 0151 §3 OWNERSHIP axis, not a rank widening.
+--
+-- A BRAND-NEW key: nobody holds it yet, so every rung the floor implies is granted
+-- here. RANK_SEED is a cumulative superset and this key floors at `xenos`, the
+-- bottom of the ladder — so ALL FOUR rank-roles get a block. The drift guard
+-- (tests/government_seed.mjs) compares the union of the run-once seed plus every
+-- later grant migration against the floor-derived seed, per rank; minting the
+-- catalog row WITHOUT this migration is exactly what that guard catches, and it did.
+--
+-- GRANTING IT TO EVERY RANK GIVES NOBODY THE POWER TO RETIRE ANYTHING ON ITS OWN.
+-- That is the whole point of an ownership-scoped key and the reason a floor this low
+-- is safe: holding it authorizes nothing until a handler supplies the concrete row's
+-- owner. `requirePermission` REFUSES an own-scoped key outright (auth.js, R100) so it
+-- can never gate a route unconditionally, and `resolveBuilderPermissions` returning
+-- it is only ever half a question. The other half — `tasks.created_by` equals the
+-- caller, and the task is still backlog/ready/blocked — is answered inside
+-- `abandonTask`'s FOR UPDATE transaction (modules/lifecycle/abandon-authz.js).
+--
+-- `task.abandon` (floor metic) is UNCHANGED and is not re-granted here: governance_003
+-- already granted it and migrations are run-once. It becomes this key's declared
+-- cross-owner counterpart — same `act` verb, same `task` resource — so a Metic keeps
+-- retiring any task without being its creator.
+--
+-- Additive only: one new permission key granted to four ranks; nothing is revoked.
+-- Idempotent (ON CONFLICT DO NOTHING); forward-safe (INSERT only).
+--
+-- One block PER RANK, in the government_004/009/010/011 shape: the drift guard scans
+-- for `SELECT '<rank>', unnest(ARRAY[…])` literally, so a combined
+-- `unnest(ARRAY['xenos','thetes']), 'key'` form parses as zero grants and reds it.
+
+BEGIN;
+
+INSERT INTO government_rank_permissions (rank_key, permission_key)
+SELECT 'xenos', unnest(ARRAY[
+  'task.abandon.own'
+])
+ON CONFLICT (rank_key, permission_key) DO NOTHING;
+
+INSERT INTO government_rank_permissions (rank_key, permission_key)
+SELECT 'thetes', unnest(ARRAY[
+  'task.abandon.own'
+])
+ON CONFLICT (rank_key, permission_key) DO NOTHING;
+
+INSERT INTO government_rank_permissions (rank_key, permission_key)
+SELECT 'metic', unnest(ARRAY[
+  'task.abandon.own'
+])
+ON CONFLICT (rank_key, permission_key) DO NOTHING;
+
+INSERT INTO government_rank_permissions (rank_key, permission_key)
+SELECT 'archon', unnest(ARRAY[
+  'task.abandon.own'
+])
+ON CONFLICT (rank_key, permission_key) DO NOTHING;
+
+COMMIT;

package/modules/hall-ui/public/task.js

@@ -509,6 +509,18 @@
     // should carry these permissions is a governance change that needs its own
     // ADR, so this surfaces controls only for builders who already hold the atoms.
     const canShape = isSupervisor;
+    // task 1002443 — the CREATOR axis, which is not a rank and so cannot live in
+    // canShape. `task.abandon.own` (floor xenos, ADR 0297) lets a builder retire a
+    // task THEY filed while it is still backlog/ready/blocked. Same display-hint
+    // posture as canShape: the server re-decides this under a row lock, and this
+    // line only chooses whether to draw the control.
+    //
+    // created_by is null on every task filed before core_227 and on system vectors
+    // (seed, restock, the Discord bug path), so isCreator is false for them and the
+    // control simply does not appear — never a button that would 403.
+    const CREATOR_RETIRABLE = ['backlog', 'ready', 'blocked'];
+    const isCreator = !!(viewer && t.created_by != null
+      && String(t.created_by) === String(viewer.id));
     // render() rebuilds #task-body wholesale, so a disclosure cannot keep its
     // state in the DOM. This re-renders the SAME data without a refetch — the
     // toggle is a view change, not a reason to ask the server anything.
@@ -713,7 +725,23 @@
     // active claim must be released first — both are 409s the server will raise
     // anyway, and both are knowable from this record. Offering the control and
     // letting it fail would teach the reader that the page guesses.
+    //
+    // task 1002443 — the control now has TWO audiences, and they are offered
+    // different amounts of it. A Metic+ keeps every branch below, over any task. A
+    // CREATOR who is not Metic+ gets it only on their own task and only while it is
+    // backlog/ready/blocked, because that is exactly what the server will admit:
+    // past the grader a retire is a ledger correction, not an author changing their
+    // mind. Outside that window the creator is told so in words, for the same reason
+    // the two refusals below are pre-answered — a control that cannot work teaches
+    // the reader that the page guesses.
     const claimIsLive = !!(lastClaim && !lastClaim.released_at);
+    // The creator's narrower window. This is a DISPLAY MIRROR of the server's own
+    // CREATOR_ABANDONABLE (modules/lifecycle/abandon-authz.js) — a browser file
+    // cannot require it, so the list is restated here and the server re-decides
+    // every call under a row lock. If that list moves, this one moves with it.
+    const creatorMayRetire = isCreator && !claimIsLive
+      && CREATOR_RETIRABLE.indexOf(t.status) !== -1;
+    const mayRetire = canShape || creatorMayRetire;
     let retire = '';
     if (canShape && t.status === 'shipped') {
       retire = '<p class="rec-actnote">A shipped task cannot be retired — it is immutable history now.</p>';
@@ -721,7 +749,28 @@
       retire = '<p class="rec-actnote">Someone is holding a claim on this task. It has to be released before the task can be retired.</p>';
     } else if (canShape && t.status === 'abandoned') {
       retire = '<p class="rec-actnote">This task is already retired. Promote restores it to the backlog.</p>';
-    } else if (canShape) {
+    // THE CREATOR'S REFUSALS ARE ORDERED BY WHAT WOULD ACTUALLY UNBLOCK THEM, which
+    // is not the same order as the supervisor's above. Each branch names the ONE
+    // thing standing in the way, and must not promise a remedy that would still be
+    // refused — the failure this file's own rule warns about, applied to the words
+    // rather than to a button.
+    //
+    //   shipped   → immutable for EVERYONE, so it must not read as 'ask a Metic'.
+    //   abandoned → already done.
+    //   a live claim, on a task that is otherwise retirable (or 'active', which
+    //               releases back to 'ready') → releasing genuinely unblocks it.
+    //   anything else outside the window (completed/confirmed) → authority is the
+    //               blocker, and a Metic really can act there.
+    } else if (!canShape && isCreator && t.status === 'shipped') {
+      retire = '<p class="rec-actnote">You created this task, but it has shipped. Shipped work is immutable history — nobody can retire it, whatever their rank.</p>';
+    } else if (!canShape && isCreator && t.status === 'abandoned') {
+      retire = '<p class="rec-actnote">You created this task and it is already retired.</p>';
+    } else if (!canShape && isCreator && claimIsLive
+               && (t.status === 'active' || CREATOR_RETIRABLE.indexOf(t.status) !== -1)) {
+      retire = '<p class="rec-actnote">You created this task, but someone is holding a claim on it. Once that is released you can retire it yourself.</p>';
+    } else if (!canShape && isCreator && !creatorMayRetire) {
+      retire = '<p class="rec-actnote">You created this task, but it has already moved past planning. Retiring it now is a change to the record, so it needs a Metic.</p>';
+    } else if (mayRetire) {
       retire = abandonOpen
         ? `
           <div class="td-form" id="abandon-form">