@bongos/core 1.19.864 → 1.19.866

package/docs/module-api-changelog.md

@@ -2202,5 +2202,9 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.862 with no explicit bump. run 35292877780. (task 1002620)
   1.19.864 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.863 with no explicit bump. run 35294233113. (task 1002620)
+  1.19.865 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.864 with no explicit bump. run 35295856053. (task 1002620)
+  1.19.866 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.865 with no explicit bump. run 35355019469. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/hall-ui/public/blockers.html

@@ -29,9 +29,12 @@
       <main id="hall-main">
         <!-- task 1003455 (goal 1000089): the queue GET /blockers had no page for
              — the only door in used to be typing #/blocker/N into the address
-             bar. This is the read half; filing/resolving/linking is task 1003456. -->
+             bar. task 1003456 added the write half: filing (any signed-in
+             builder) below the heading, and per-row Resolve/Link (blocker.review
+             — metic+archon) rendered by blockers.js when the viewer holds it. -->
         <section class="scroll" id="blockers-scroll" aria-labelledby="blockers-h">
           <h2 id="blockers-h" class="scroll__h">Open blockers<span class="count-pill" id="blockers-count" hidden></span></h2>
+          <div id="blockers-file-area"></div>
           <div id="blockers-body">
             <p class="profile__placeholder">Loading…</p>
           </div>

package/modules/hall-ui/public/blockers.js

@@ -1,19 +1,35 @@
-// blockers.js — the Blockers page: the full open-blocker queue (task 1003455,
-// goal 1000089).
+// blockers.js — the Blockers page: the full open-blocker queue, and now (task
+// 1003456, goal 1000089) the write half — file, resolve, link.
 //
 // GET /blockers (modules/ideas/routes/blockers.js) is PUBLIC and had ZERO hall
-// consumers before this task — the only blocker a builder could ever see was the
-// #/blocker/N overlay task-detail.js already renders, reachable only by typing
-// the id into the address bar. Owner decision 2026-08-30: BOTH surfaces, from
-// ONE code path — this page is the full queue (a long list has nowhere else to
-// live), and goal-inbox.js's attention-inbox slice is the capped summary. Both
-// render from blockers-lib.js's blockerFacts(), so the two cannot drift apart
-// the way ~10 hand-rolled pagers did before the kit (hall-ui/CLAUDE.md).
+// consumers before task 1003455 — the only blocker a builder could ever see was
+// the #/blocker/N overlay task-detail.js already renders, reachable only by
+// typing the id into the address bar. Owner decision 2026-08-30: BOTH surfaces,
+// from ONE code path — this page is the full queue (a long list has nowhere
+// else to live), and goal-inbox.js's attention-inbox slice is the capped
+// summary. Both render from blockers-lib.js's blockerFacts(), so the two
+// cannot drift apart the way ~10 hand-rolled pagers did before the kit.
+//
+// task 1003456 — the write half. POST /blockers, POST /blockers/:id/resolve
+// and POST /blockers/:id/link already carry their own rank floors (any-builder
+// for filing, blocker.review — metic+archon — for resolve/link; proven by the
+// fitness route-rank-check gate, not re-proven here). AUTHORITY IS UNCHANGED:
+// this file adds no floor of its own, only a COSMETIC mirror of the real one —
+// the exact idea-triage-panel precedent in task-detail.js ("The panel only
+// renders for metic/archon; the server enforces the same gate regardless").
+// The one control open to EVERY signed-in viewer, including a non-reviewer, is
+// filing — and the file form's own "blocking task #" field is deliberately
+// NOT hidden from a non-reviewer, because a builder who is themselves stuck is
+// exactly who most needs to say what it blocks, even though completing the
+// LINK half needs a Metic+. That is the case "every API refusal renders as
+// honest copy rather than a silent no-op" (the task's own done-when) exists
+// for: filing still succeeds, and the honest message says a Metic+ has to
+// finish the link — never a swallowed failure.
 //
-// Read-only: filing, resolving and linking a blocker to a task are task 1003456.
 // Deliberately UNGATED (tests/hall_page_gate_map.mjs) — its one data source is
 // public, the roster/drachmae precedent: a page must not be gated tighter than
-// the API it fronts.
+// the API it fronts. A signed-out visitor sees the queue and the File button;
+// clicking it redirects to sign-in, same as every other hall write.
 (function () {
   'use strict';
   var kit = window.OTBKit;
@@ -22,6 +38,45 @@
   var body = document.getElementById('blockers-body');
   var countPill = document.getElementById('blockers-count');
   var sub = document.getElementById('blockers-sub');
+  var fileArea = document.getElementById('blockers-file-area');
+
+  // The generated typed client (task-detail.js's own pattern), result-mode so
+  // the status-inspecting control flow below (401 → sign-in, 403 → honest
+  // copy) reads 1:1.
+  var api = window.BongosClient.createClient({ baseUrl: '', credentials: 'same-origin', throwOnError: false });
+  var toast = function (m) { if (window.OTB && window.OTB.toast) window.OTB.toast(m, { duration: 3200 }); };
+
+  async function writeJSON(method, path, payload) {
+    var res = await api.request(method, path, { body: payload || {} });
+    if (res.status === 401) { window.location.assign(API + '/auth/web/start'); throw new Error('redirecting to auth'); }
+    var data = null;
+    try { data = res.data; } catch (_) { /* empty / non-JSON */ }
+    if (!res.ok) { var err = new Error(path + ' → ' + res.status); err.status = res.status; err.data = data || {}; throw err; }
+    return data;
+  }
+
+  // The R01/ADR-0116 envelope is `{ error: { code, message } }` — nested, the
+  // same trap task-detail.js's errMessage() guards against.
+  function errMessage(err) {
+    var d = err && err.data;
+    var e = d && d.error;
+    if (e && typeof e === 'object' && e.message) return e.message;
+    return (d && d.message) || '';
+  }
+  // Honest copy for a refusal — never a silent no-op (the done-when, verbatim).
+  // Generic: prefers the server's own message, falling back to the caller's.
+  // Filing has NO rank floor, so a 403 there is never "you need Metic+" — that
+  // reading belongs only to the two calls that actually gate on blocker.review.
+  function refusalMessage(err, fallback) {
+    return errMessage(err) || fallback;
+  }
+  // The reviewer-gated calls' version: a 403 on resolve/link IS the
+  // blocker.review floor, so it gets the specific message rather than
+  // whatever (or nothing) the server's envelope happened to say.
+  function reviewerRefusalMessage(err, fallback) {
+    if (err && err.status === 403) return 'You need Metic+ access to do that.';
+    return refusalMessage(err, fallback);
+  }
 
   var taskHref = function (id) {
     return window.OTBTaskDetail ? window.OTBTaskDetail.href(id) : ('/task/' + encodeURIComponent(id));
@@ -29,6 +84,17 @@
   var blockerHref = function (id) { return '#/blocker/' + encodeURIComponent(id); };
 
   var all = [];
+  // Which rank a reviewer action (Resolve / Link) needs — mirrors the server's
+  // blocker.review floor (metic+archon), cosmetically only; the server holds
+  // the actual gate regardless of what this variable says.
+  var viewer = { rank: null };
+  var isReviewer = function () { return viewer.rank === 'metic' || viewer.rank === 'archon'; };
+
+  // Which row (if any) has an inline action form open, and which form.
+  // { id, mode: 'resolve' | 'link' } | null — a row's OWN form, not a global
+  // one, so opening a second row's form closes whichever was open (one at a
+  // time keeps the list from growing a form per row on a long queue).
+  var openRow = null;
 
   function rowHtml(b) {
     var facts = lib.blockerFacts(b, {
@@ -38,12 +104,46 @@
       blockerHref: blockerHref,
       taskHref: taskHref,
     });
+    var right = '';
+    if (isReviewer()) {
+      var id = String(b.id);
+      if (openRow && String(openRow.id) === id && openRow.mode === 'resolve') {
+        right = '<div class="ov-row__right"><form class="td-form" data-resolve-form="' + lib.esc(id) + '">'
+          + '<label class="td-field td-field--wide"><span>Resolution note (optional)</span>'
+          + '<input type="text" name="note" maxlength="1000" placeholder="what got un-stuck"></label>'
+          + '<div class="td-actions">'
+          + '<button type="submit" class="td-btn td-btn--primary" data-submit>Resolve</button>'
+          + '<button type="button" class="td-btn" data-row-cancel>Cancel</button>'
+          + '</div><p class="td-action-note" data-err></p></form></div>';
+      } else if (openRow && String(openRow.id) === id && openRow.mode === 'link') {
+        right = '<div class="ov-row__right"><form class="td-form" data-link-form="' + lib.esc(id) + '">'
+          + '<label class="td-field td-field--wide"><span>Task #</span>'
+          + '<input type="number" name="taskId" min="1" required placeholder="e.g. 1002980"></label>'
+          + '<div class="td-actions">'
+          + '<button type="submit" class="td-btn td-btn--primary" data-submit>Link</button>'
+          + '<button type="button" class="td-btn" data-row-cancel>Cancel</button>'
+          + '</div><p class="td-action-note" data-err></p></form></div>';
+      } else {
+        right = '<div class="ov-row__right"><div class="ov-row__actions">'
+          + '<button type="button" class="btn-ghost" data-resolve-open="' + lib.esc(id) + '">Resolve</button>'
+          + '<button type="button" class="btn-ghost" data-link-open="' + lib.esc(id) + '">Link a task</button>'
+          + '</div></div>';
+      }
+    }
+    // Plain .ov-row, never --lead: this row has no LEAD column (a face, as
+    // collab's rows have) — it is .ov-row__main + .ov-row__right, exactly the
+    // shape .ov-row's own grid (minmax(0,1fr) auto) already handles correctly,
+    // both at full width and under the family's ≤640px collapse. --lead's
+    // three-column grid (auto minmax(0,1fr) auto) would misread the actions
+    // column as the row's middle content and pin it beside the text on a
+    // phone instead of dropping it beneath.
     return '<li class="ov-row" data-id="' + lib.esc(String(b.id)) + '">'
       + '<div class="ov-row__main">'
       + facts.titleHtml
       + facts.noteHtml
       + '<div class="ov-row__facts">' + facts.factsHtml + '</div>'
       + '</div>'
+      + right
       + '</li>';
   }
 
@@ -57,6 +157,10 @@
       : kit.emptyStateHtml('Nothing is stuck on the owner right now.');
   }
 
+  function reload() {
+    return fetchBlockers().catch(function () { toast('Couldn’t refresh the queue — try reloading the page.'); });
+  }
+
   function mountBlockers(rows) {
     all = Array.isArray(rows) ? rows : [];
     if (countPill) { countPill.textContent = String(all.length); countPill.hidden = all.length === 0; }
@@ -78,11 +182,172 @@
     body.textContent = msg;
   }
 
-  fetch(API + '/blockers?limit=200', { headers: { Accept: 'application/json' } })
-    .then(function (r) {
-      if (!r.ok) throw new Error('http ' + r.status);
-      return r.json();
-    })
-    .then(function (data) { mountBlockers(data && data.blockers); })
-    .catch(function () { notice('Couldn’t load the blocker queue right now.'); });
+  function fetchBlockers() {
+    return fetch(API + '/blockers?limit=200', { headers: { Accept: 'application/json' } })
+      .then(function (r) {
+        if (!r.ok) throw new Error('http ' + r.status);
+        return r.json();
+      })
+      .then(function (data) { mountBlockers(data && data.blockers); });
+  }
+
+  // ---- filing (any signed-in builder) ----------------------------------------
+
+  function fileFormHtml() {
+    return '<div class="td-actions" id="blockers-file-toggle">'
+      + '<button type="button" class="btn-ghost" id="blockers-file-open">+ File a blocker</button>'
+      + '</div>'
+      + '<form class="td-form" id="blockers-file-form" hidden>'
+      + '<label class="td-field td-field--wide"><span>Title</span>'
+      + '<input type="text" id="bf-title" maxlength="200" required placeholder="what needs the owner’s decision"></label>'
+      + '<label class="td-field td-field--wide"><span>What’s stuck (optional)</span>'
+      + '<input type="text" id="bf-note" maxlength="2000" placeholder="a sentence of context"></label>'
+      + '<label class="td-field"><span>Blocking task # (optional)</span>'
+      + '<input type="number" id="bf-task-id" min="1" placeholder="e.g. 1002980"></label>'
+      + '<div class="td-actions">'
+      + '<button type="submit" class="td-btn td-btn--primary" id="bf-submit">File it</button>'
+      + '<button type="button" class="td-btn" id="bf-cancel">Cancel</button>'
+      + '</div><p class="td-action-note" id="bf-err"></p>'
+      // The one control open to a non-reviewer that the review floor still
+      // touches: filing succeeds regardless, but linking needs blocker.review,
+      // and a viewer below it is told so BEFORE they submit — not left to
+      // discover it from a refusal.
+      + (isReviewer() ? '' : '<p class="td-form-hint">Filing is open to anyone. Linking to a task needs Metic+ — if you name one and aren’t, the blocker still files and a Metic+ can link it.</p>')
+      + '</form>';
+  }
+
+  function wireFileForm() {
+    var openBtn = document.getElementById('blockers-file-open');
+    var form = document.getElementById('blockers-file-form');
+    var cancelBtn = document.getElementById('bf-cancel');
+    var errEl = document.getElementById('bf-err');
+    if (!openBtn || !form) return;
+    openBtn.addEventListener('click', function () {
+      openBtn.parentElement.hidden = true;
+      form.hidden = false;
+      document.getElementById('bf-title').focus();
+    });
+    cancelBtn.addEventListener('click', function () {
+      form.hidden = true;
+      openBtn.parentElement.hidden = false;
+      form.reset();
+      errEl.textContent = '';
+    });
+    form.addEventListener('submit', async function (ev) {
+      ev.preventDefault();
+      errEl.textContent = '';
+      var title = document.getElementById('bf-title').value.trim();
+      var note = document.getElementById('bf-note').value.trim();
+      var taskIdRaw = document.getElementById('bf-task-id').value.trim();
+      if (!title) { errEl.textContent = 'A title is required.'; return; }
+      var submitBtn = document.getElementById('bf-submit');
+      submitBtn.disabled = true;
+      try {
+        var res = await writeJSON('POST', API + '/blockers', { title: title, body_md: note });
+        var blocker = res && res.blocker;
+        if (res && res.skipped) {
+          // A duplicate (source, source_ref) skip returns no blocker id at
+          // all, so a typed task # was NEVER attempted — say so rather than
+          // silently dropping half the request the builder asked for.
+          toast(taskIdRaw
+            ? 'That blocker was already filed. It was NOT linked to task #' + taskIdRaw + ' — open the existing blocker to link it.'
+            : 'That blocker was already filed.');
+        } else if (blocker && taskIdRaw) {
+          var taskId = Number(taskIdRaw);
+          try {
+            await writeJSON('POST', API + '/blockers/' + encodeURIComponent(blocker.id) + '/link', { task_id: taskId });
+            toast('Blocker #' + blocker.id + ' filed and linked to task #' + taskId + '.');
+          } catch (linkErr) {
+            // Honest copy, not a silent no-op: the filing DID succeed, and the
+            // reader is told exactly what still needs a Metic+.
+            toast('Blocker #' + blocker.id + ' filed. ' + reviewerRefusalMessage(linkErr, 'Could not link it to task #' + taskId + ' — a Metic+ can do that from this page.'));
+          }
+        } else if (blocker) {
+          toast('Blocker #' + blocker.id + ' filed.');
+        } else {
+          toast('Filed.');
+        }
+        form.reset();
+        form.hidden = true;
+        document.getElementById('blockers-file-toggle').hidden = false;
+        await reload();
+      } catch (err) {
+        errEl.textContent = refusalMessage(err, 'Could not file that blocker. Try again.');
+      } finally {
+        submitBtn.disabled = false;
+      }
+    });
+  }
+
+  // ---- resolve / link (blocker.review — metic+archon; cosmetic mirror only) --
+
+  function closeRowForms() { openRow = null; rerender(); }
+
+  body.addEventListener('click', function (e) {
+    var resolveOpen = e.target.closest('[data-resolve-open]');
+    if (resolveOpen) { openRow = { id: resolveOpen.dataset.resolveOpen, mode: 'resolve' }; rerender(); return; }
+    var linkOpen = e.target.closest('[data-link-open]');
+    if (linkOpen) { openRow = { id: linkOpen.dataset.linkOpen, mode: 'link' }; rerender(); return; }
+    if (e.target.closest('[data-row-cancel]')) { closeRowForms(); }
+  });
+
+  body.addEventListener('submit', async function (e) {
+    var resolveForm = e.target.closest('[data-resolve-form]');
+    var linkForm = e.target.closest('[data-link-form]');
+    if (!resolveForm && !linkForm) return;
+    e.preventDefault();
+    var form = resolveForm || linkForm;
+    var id = (resolveForm || linkForm).getAttribute(resolveForm ? 'data-resolve-form' : 'data-link-form');
+    var errEl = form.querySelector('[data-err]');
+    var submitBtn = form.querySelector('[data-submit]');
+    submitBtn.disabled = true;
+    try {
+      if (resolveForm) {
+        var note = form.querySelector('[name="note"]').value.trim();
+        await writeJSON('POST', API + '/blockers/' + encodeURIComponent(id) + '/resolve', { resolution_note: note || null });
+        toast('Blocker #' + id + ' resolved.');
+      } else {
+        var taskId = Number(form.querySelector('[name="taskId"]').value);
+        await writeJSON('POST', API + '/blockers/' + encodeURIComponent(id) + '/link', { task_id: taskId });
+        toast('Blocker #' + id + ' linked to task #' + taskId + '.');
+      }
+      openRow = null;
+      await reload();
+    } catch (err) {
+      errEl.textContent = reviewerRefusalMessage(err, 'Could not do that. Try again.');
+      submitBtn.disabled = false;
+    }
+  });
+
+  // ---- boot -------------------------------------------------------------------
+
+  async function loadViewer() {
+    try {
+      var res = await api.request('GET', API + '/me');
+      if (res.ok && res.data && res.data.builder) {
+        viewer = { rank: String(res.data.builder.rank || '').toLowerCase() };
+      }
+    } catch (_) { /* signed out or offline — viewer stays { rank: null }, isReviewer() false */ }
+  }
+
+  loadViewer().then(function () {
+    if (fileArea) { fileArea.innerHTML = fileFormHtml(); wireFileForm(); }
+    // Boot race: GET /me and GET /blockers fire together, and rowHtml() reads
+    // isReviewer() at RENDER time. If the queue rendered first (the common
+    // case — /me is Metic+-gated work the server does more of), it rendered
+    // with isReviewer() still false and nothing re-draws it once the real
+    // rank lands — a Metic/Archon would see no Resolve/Link buttons until an
+    // unrelated re-render (a pager click, a file, an otb:blocker-resolved).
+    // Re-render now that the viewer is known, but only if the list actually
+    // exists yet (fetchBlockers may still be in flight — it will render
+    // correctly on its own the moment it resolves).
+    if (listEl) rerender();
+  });
+
+  fetchBlockers().catch(function () { notice('Couldn’t load the blocker queue right now.'); });
+
+  // A row's title opens the #/blocker/N overlay ON TOP of this page
+  // (task-detail.js), whose own Resolve panel fires this — refresh the queue
+  // in place rather than leaving a resolved row sitting there.
+  window.addEventListener('otb:blocker-resolved', reload);
 }());

package/modules/hall-ui/public/builders.js

@@ -790,7 +790,7 @@
       const title = escapeHtml(t.value_summary || t.title || `task #${t.id}`);
       return `
         <tr data-acclaim-row="${tid}">
-          <td>${title}</td>
+          <td>${title}${acclaimEvidenceHtml(t)}</td>
           <td>${by}</td>
           <td class="acclaim__net ${netCls}" data-acclaim-net="${tid}">${netText}</td>
           <td>${controls}</td>
@@ -1424,7 +1424,7 @@
   // reads what this page holds NOW rather than what it held at boot. Everything
   // else is stable for the life of the page. This call sits AFTER every
   // declaration it passes — moving it earlier is a temporal-dead-zone crash.
-  const { SETUP_CONFIG_KEY, analyticsState, lbState, mountHallWidgets, onboardingBox, renderCurveBody, renderGreeting, renderLanding, renderNav, renderOnboarding, renderProfile, renderRecentShips, renderWelcomeCore, shipState, shipsPager, welcomeDismissalKey } = window.OTBHallRender({
+  const { SETUP_CONFIG_KEY, acclaimEvidenceHtml, analyticsState, lbState, mountHallWidgets, onboardingBox, renderCurveBody, renderGreeting, renderLanding, renderNav, renderOnboarding, renderProfile, renderRecentShips, renderWelcomeCore, shipState, shipsPager, welcomeDismissalKey } = window.OTBHallRender({
     API, RANK_ORDER, api, brandWorld, curLabel, emptyRow, fmtDate, mins, normalizeRank, pct, postJSON, rankLabel, rankWeight, signClasses, toast, usd,
     get instanceRepo() { return instanceRepo; },
     get lastClaimableCount() { return lastClaimableCount; },

package/modules/hall-ui/public/goal-inbox.js

@@ -530,4 +530,10 @@
     id: 'attention-scroll', label: 'Needs your attention', order: 20, mount, core: true,
     labelledby: 'attention-h', view: 'home', zone: 'home-main', hiddenByDefault: true,
   });
+
+  // task 1003456: a blocker resolved through the #/blocker/N overlay (which
+  // this slice's own row titles open into) should not sit in the inbox until
+  // the next full load — the otb:idea-triaged precedent, applied to the
+  // sibling event task-detail.js's blockerPanel fires.
+  window.addEventListener('otb:blocker-resolved', loadBlockers);
 })();

package/modules/hall-ui/public/hall-render.js

@@ -332,6 +332,46 @@
           </div>`;
   }
 
+  // task 1002835: a karma vote on a peer's ship was a vote on a title alone.
+  // The two facts the ship already recorded — what the grader scored it and
+  // what it cost — turn it into an informed one. ABSENCE IS NOT ZERO: an
+  // ungraded ship says so, and so does an unlogged cost, because "0.0" and
+  // "$0.00" would read as measurements that were never taken.
+  function acclaimEvidenceHtml(t) {
+    const score = t.grade_score == null ? null : Number(t.grade_score);
+    const grade = score == null || !Number.isFinite(score)
+      ? '<span class="ledger__verdict--none">not graded</span>'
+      : `<span class="${t.grade_passed ? 'ledger__verdict--ok' : 'ledger__verdict--danger'}">${score.toFixed(1)} / 10</span>`;
+    // Three states, not two. The route OMITS cost_usd for a builder who may not
+    // vote, and that is not the same fact as a logged cost of nothing: a reader
+    // who is shown no figure is told nothing, never "no cost logged".
+    const parts = [grade];
+    if (Object.prototype.hasOwnProperty.call(t, 'cost_usd')) {
+      const usd = t.cost_usd == null ? null : Number(t.cost_usd);
+      parts.push(usd == null || !Number.isFinite(usd)
+        ? '<span class="ledger__verdict--none">no cost logged</span>'
+        : `<span class="acclaim__cost">$${usd.toFixed(2)}</span>`);
+    }
+    return `<span class="acclaim__evidence">${parts.join(' · ')}</span>`;
+  }
+  // The RETURNING builder's door (task 1002851). `open` and `invite_only`
+  // already render a real .landing__btn sign-in inside the primary door, so a
+  // second button there would be a third scattered path rather than a clearer
+  // one — those modes keep the prose note alone. Only the `apply` door, whose
+  // primary control is the request FORM, left signing in as a footnote link.
+  // It gets a real button: the request button's geometry so it reads as a
+  // control, a quieter fill so the request path still leads for the strangers
+  // who are most of this page's traffic.
+  function returningDoorHtml(mode) {
+    if (mode !== 'apply') return '';
+    return `
+          <div class="landing__returning" id="landing-returning">
+            <h3 class="landing__request-h">Already a member?</h3>
+            <p class="landing__request-lede">You've been approved before — sign in and pick up where you left off.</p>
+            <p class="landing__cta"><a class="landing__btn landing__btn--quiet" href="${API}/auth/web/start">Sign in with GitHub</a></p>
+          </div>`;
+  }
+
   function renderLanding() {
     // task 1723: collapse the shell nav to the signed-out minimum (Home + a
     // Sign-in button). Cosmetic — the server gates every page regardless.
@@ -343,14 +383,20 @@
     const landing = $('#landing-root');
     if (landing) {
       landing.hidden = false;
+      const mode = joinabilityMode();
+      // On the apply door the sign-in is a real button above, so the note keeps
+      // only the privacy sentence — one sign-in path per landing, never two.
+      const signInNote = mode === 'apply'
+        ? ''
+        : `Already a member? <a href="${API}/auth/web/start">Sign in with GitHub</a>. `;
       landing.innerHTML = `
         <div class="scroll landing">
           <h2 class="scroll__h">Welcome</h2>
-          ${landingDoorHtml(joinabilityMode())}
+          ${landingDoorHtml(mode)}
+          ${returningDoorHtml(mode)}
 
           <p class="landing__signin-note">
-            Already a member? <a href="${API}/auth/web/start">Sign in with GitHub</a>.
-            We store only your GitHub login, avatar, and the work you ship.
+            ${signInNote}We store only your GitHub login, avatar, and the work you ship.
           </p>
         </div>
       `;
@@ -1305,6 +1351,6 @@
     return idx === -1 ? null : { place: idx + 1, total: ranked.length };
   }
 
-    return { SETUP_CONFIG_KEY, analyticsState, lbState, mountHallWidgets, onboardingBox, renderCurveBody, renderGreeting, renderLanding, renderNav, renderOnboarding, renderProfile, renderRecentShips, renderWelcomeCore, shipState, shipsPager, welcomeDismissalKey };
+    return { SETUP_CONFIG_KEY, acclaimEvidenceHtml, analyticsState, lbState, mountHallWidgets, onboardingBox, renderCurveBody, renderGreeting, renderLanding, renderNav, renderOnboarding, renderProfile, renderRecentShips, renderWelcomeCore, shipState, shipsPager, welcomeDismissalKey };
   };
 })();

package/modules/hall-ui/public/people.css

@@ -24,5 +24,14 @@
 .dir-who__t { display: flex; flex-direction: column; gap: 1px; min-width: 132px; }
 .dir-name { font-weight: 500; color: var(--ink); overflow-wrap: anywhere; }
 .dir-login { font-family: var(--font-mono); font-size: 11.5px; color: var(--ink-faint); }
+/* The roster's place cell carries two facts: the place, and under it the
+   builder's number in the same mono/faint voice the login uses (task
+   1002837). Block display so the id never wraps up beside the place. */
+.ledger__place .ledger__id {
+  display: block;
+  font-family: var(--font-mono);
+  font-size: 11.5px;
+  color: var(--ink-faint);
+}
 .dir-crafts { display: inline-flex; flex-wrap: wrap; gap: 6px; }
 .dir-none { color: var(--ink-faint); }

package/modules/hall-ui/public/roster.js

@@ -148,9 +148,19 @@
     return fmtInt(Math.round((Number(b.tokens_used) || 0) / credits)) + ' tokens per ' + one;
   }
 
+  // task 1002837: a builder's place answers "who is ahead", their NUMBER
+  // answers "which builder is this" — the id every task row, claim and ship
+  // note already cites. It sits under the place in the same mono/faint voice
+  // the login uses, and only when the payload carries one, so an older
+  // /builders response degrades to the place alone.
+  function idHtml(b) {
+    if (b.id == null || b.id === '') return '';
+    return '<span class="ledger__id">#' + esc(String(b.id)) + '</span>';
+  }
+
   function rowHtml(b) {
     return '<tr>'
-      + '<td class="ledger__num">' + esc(String(b.__place || '—')) + '</td>'
+      + '<td class="ledger__num ledger__place">' + esc(String(b.__place || '—')) + idHtml(b) + '</td>'
       + '<td>' + whoHtml(b) + achRowHtml(b.achievements) + '</td>'
       + '<td class="ledger__rank">' + rankBadgeHtml(b.rank) + '</td>'
       + '<td class="ledger__num">' + esc(fmtInt(b.total_credits)) + '</td>'

package/modules/hall-ui/public/style.css

@@ -1536,6 +1536,16 @@ main [id] { scroll-margin-top: calc(var(--topbar-h) + 16px); }
 .ledger__verdict--ok { color: var(--ok); font-weight: 600; }
 .ledger__verdict--danger { color: var(--danger); font-weight: 600; }
 .ledger__verdict--none { color: var(--ink-soft); }
+/* The acclaim feed's evidence line (task 1002835): the grade and the cost the
+   ship recorded, under the work it describes. Secondary to the title — this is
+   what a voter checks, not what they read first. */
+.acclaim__evidence {
+  display: block;
+  margin-top: 3px;
+  font-size: 12px;
+  color: var(--ink-faint);
+}
+.acclaim__cost { font-variant-numeric: tabular-nums; }
 .ledger th.ledger__sortable { cursor: pointer; user-select: none; }
 .ledger th.ledger__sortable:hover { color: var(--ink); }
 .ledger th.ledger__sortable[aria-sort="ascending"]::after { content: " ↑"; }
@@ -2492,6 +2502,24 @@ main [id] { scroll-margin-top: calc(var(--topbar-h) + 16px); }
 .landing__btn--request { align-self: flex-start; }
 .landing__request-status { font-size: 13px; margin: 0; color: var(--ok); }
 .landing__request-status[data-kind="err"] { color: var(--danger); }
+/* The returning builder's door, rendered only on the `apply` landing (task
+   1002851). Same panel as the request block and the same button geometry, so
+   signing in reads as a real control rather than a footnote — but a quiet
+   fill, because the request path is what most of this page's traffic needs. */
+.landing__returning {
+  border: 0;
+  border-radius: var(--radius);
+  background: var(--surface-2);
+  padding: 18px 20px;
+  margin: 16px 0;
+}
+.landing__returning .landing__cta { margin: 0; }
+.landing__btn--quiet {
+  background: transparent;
+  color: var(--ink);
+  box-shadow: inset 0 0 0 1px var(--border-strong);
+}
+.landing__btn--quiet:hover { background: var(--surface-2); color: var(--ink); }
 .landing__signin-note { font-size: 13px; color: var(--ink-soft); }
 
 /* ---------- goals ---------- */