@bongos/core 1.19.910 → 1.19.911

package/docs/copy-registry.json

@@ -109,8 +109,8 @@
         "modules/hall-ui/public/gate.js:157",
         "modules/hall-ui/public/hall-render.js:669",
         "modules/hall-ui/public/idea.js:207",
-        "modules/hall-ui/public/ideas.js:183",
-        "modules/hall-ui/public/ideas.js:561",
+        "modules/hall-ui/public/ideas.js:189",
+        "modules/hall-ui/public/ideas.js:666",
         "modules/hall-ui/public/watch.js:1242"
       ]
     },
@@ -812,7 +812,7 @@
       "occurrences": 2,
       "at": [
         "modules/hall-ui/public/blockers.js:311",
-        "modules/hall-ui/public/ideas.html:107"
+        "modules/hall-ui/public/ideas.html:119"
       ]
     },
     {
@@ -1552,7 +1552,7 @@
       "occurrences": 2,
       "at": [
         "modules/hall-ui/public/idea.js:210",
-        "modules/hall-ui/public/ideas.js:433"
+        "modules/hall-ui/public/ideas.js:439"
       ]
     },
     {
@@ -2043,7 +2043,7 @@
       "surface": "builders-hall",
       "text": "A Full Idea answers five questions, so that someone else can deliver against it without having to interview you first. Open to every role — the score below is the only filter, and it counts substance, not who you are.",
       "file": "modules/hall-ui/public/ideas.html",
-      "line": 115,
+      "line": 127,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -2493,7 +2493,7 @@
       "surface": "builders-hall",
       "text": "Answer the five questions and this spark becomes a Full Idea.",
       "file": "modules/hall-ui/public/ideas.js",
-      "line": 692,
+      "line": 805,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -3753,7 +3753,7 @@
       "surface": "builders-hall",
       "text": "Could not load idea {…}.",
       "file": "modules/hall-ui/public/ideas.js",
-      "line": 735,
+      "line": 848,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -3807,7 +3807,7 @@
       "surface": "builders-hall",
       "text": "Could not load the idea template. Reload, or file from the terminal with capture.js.",
       "file": "modules/hall-ui/public/ideas.js",
-      "line": 717,
+      "line": 830,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -3834,7 +3834,7 @@
       "surface": "builders-hall",
       "text": "Could not load the queue just now.",
       "file": "modules/hall-ui/public/ideas.js",
-      "line": 656,
+      "line": 769,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -4275,7 +4275,7 @@
       "surface": "builders-hall",
       "text": "Counted, not judged: each question is worth the same, and earns its share in proportion to how much real text it carries. Whitespace and padding score nothing.",
       "file": "modules/hall-ui/public/ideas.html",
-      "line": 175,
+      "line": 187,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -4419,7 +4419,7 @@
       "surface": "builders-hall",
       "text": "Develop this idea",
       "file": "modules/hall-ui/public/ideas.js",
-      "line": 691,
+      "line": 804,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -4428,7 +4428,7 @@
       "surface": "builders-hall",
       "text": "Developing a Big Idea Spark",
       "file": "modules/hall-ui/public/ideas.html",
-      "line": 127,
+      "line": 139,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -4446,7 +4446,7 @@
       "surface": "builders-hall",
       "text": "Discard draft",
       "file": "modules/hall-ui/public/ideas.html",
-      "line": 153,
+      "line": 165,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -4608,7 +4608,7 @@
       "surface": "builders-hall",
       "text": "Draft discarded.",
       "file": "modules/hall-ui/public/ideas.js",
-      "line": 446,
+      "line": 452,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -4869,7 +4869,7 @@
       "surface": "builders-hall",
       "text": "File it",
       "file": "modules/hall-ui/public/ideas.html",
-      "line": 107,
+      "line": 119,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -4896,7 +4896,7 @@
       "surface": "builders-hall",
       "text": "File this idea",
       "file": "modules/hall-ui/public/ideas.html",
-      "line": 152,
+      "line": 164,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -4914,7 +4914,7 @@
       "surface": "builders-hall",
       "text": "Filed to the inbox.",
       "file": "modules/hall-ui/public/ideas.js",
-      "line": 564,
+      "line": 669,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -5022,7 +5022,7 @@
       "surface": "builders-hall",
       "text": "Five questions, and a score that counts how much of each you actually answered.",
       "file": "modules/hall-ui/public/ideas.js",
-      "line": 727,
+      "line": 840,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -6246,7 +6246,7 @@
       "surface": "builders-hall",
       "text": "Loading the five questions…",
       "file": "modules/hall-ui/public/ideas.html",
-      "line": 146,
+      "line": 158,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -6804,7 +6804,7 @@
       "surface": "builders-hall",
       "text": "No goal (homeless)",
       "file": "modules/hall-ui/public/ideas.js",
-      "line": 467,
+      "line": 473,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -7182,7 +7182,7 @@
       "surface": "builders-hall",
       "text": "Nothing is waiting. A spark appears here when its author offers a quick idea up for development.",
       "file": "modules/hall-ui/public/ideas.js",
-      "line": 634,
+      "line": 747,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -7272,7 +7272,7 @@
       "surface": "builders-hall",
       "text": "One line. This is what the idea is called everywhere else.",
       "file": "modules/hall-ui/public/ideas.html",
-      "line": 135,
+      "line": 147,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -8136,7 +8136,7 @@
       "surface": "builders-hall",
       "text": "Recent filings",
       "file": "modules/hall-ui/public/ideas.html",
-      "line": 101,
+      "line": 113,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -9009,7 +9009,7 @@
       "surface": "builders-hall",
       "text": "Showing {…} of {…}.",
       "file": "modules/hall-ui/public/ideas.js",
-      "line": 638,
+      "line": 751,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -11106,7 +11106,7 @@
       "surface": "builders-hall",
       "text": "Write a Full Idea",
       "file": "modules/hall-ui/public/ideas.html",
-      "line": 114,
+      "line": 126,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -12069,7 +12069,7 @@
       "surface": "builders-hall",
       "text": "idea {…}",
       "file": "modules/hall-ui/public/ideas.js",
-      "line": 433,
+      "line": 439,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -12717,7 +12717,7 @@
       "surface": "builders-hall",
       "text": "task {…}",
       "file": "modules/hall-ui/public/ideas.js",
-      "line": 183,
+      "line": 189,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -12726,7 +12726,7 @@
       "surface": "builders-hall",
       "text": "task {…}",
       "file": "modules/hall-ui/public/ideas.js",
-      "line": 561,
+      "line": 666,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -12951,7 +12951,7 @@
       "surface": "builders-hall",
       "text": "what the idea is, in one line",
       "file": "modules/hall-ui/public/ideas.html",
-      "line": 138,
+      "line": 150,
       "origin": "html-attr:placeholder",
       "confidence": "certain"
     },

package/docs/module-api-changelog.md

@@ -2293,6 +2293,8 @@ is load-bearing: the script throws rather than guess if it is missing, and
   1.19.909 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.908 with no explicit bump. run 35517426559. (task 1002620)
   1.19.910 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
-        landed since 1.19.909 with no explicit bump. run 35519713709. (task 1002620)
+        landed since 1.19.909 with no explicit bump. run 35519966415. (task 1002620)
+  1.19.911 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.910 with no explicit bump. run 35520751450. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/hall-ui/public/ideas.css

@@ -71,6 +71,31 @@
 
 .fi-note { font-size: 13.5px; color: var(--ink-faint); }
 
+/* GRAVITY (task 1004083 / spec R02) — the consequence of the picker above it,
+   so it sits tight under the select rather than at the form's own rhythm, and
+   reads a step louder than .fi-hint: a hint describes a control, this states
+   what will happen to the thought.
+
+   TONE IS THE STATUS VOCABULARY, the same .fi-fieldnote[data-ok] precedent, and
+   the three are three different facts rather than three severities:
+     lands   — it becomes work. --ok, because that IS the verification colour:
+               the thought has a home and the system can name it.
+     floats  — it waits in the inbox. NEUTRAL on purpose — floating is a legal
+               outcome the filer may have chosen, not a failure to warn about,
+               and painting it as one would push people to pick a goal they do
+               not believe in just to make the line go quiet.
+     refused — it will not be filed at all (the protected-scope wall). --danger,
+               because this one costs the filer the filing. */
+.fi-gravity {
+  margin: 8px 0 0;
+  max-width: var(--measure);
+  font-size: 13.5px;
+  line-height: 1.5;
+  color: var(--ink-soft);
+}
+.fi-gravity[data-tone="lands"] { color: var(--ok); }
+.fi-gravity[data-tone="refused"] { color: var(--danger); }
+
 .fi-err { margin: var(--sp-sm) 0 0; max-width: var(--measure); font-size: 14px; line-height: 1.5; color: var(--danger); }
 .fi-err[data-visible="0"] { display: none; }
 

package/modules/hall-ui/public/ideas.html

@@ -89,6 +89,18 @@
             </label>
             <select id="fq-goal" class="fi-input"></select>
 
+            <!-- GRAVITY (task 1004083 / spec R02) — what will actually catch this
+                 thought, stated before it is released. It sits under the picker
+                 because it is the picker's consequence, and because the picker's
+                 own option labels cannot carry it: "No goal (homeless)" is false
+                 for a bug (ADR 0262 routes it to the maintenance goal), and a
+                 named goal is false for a judgment kind (routing.js
+                 NEVER_ROUTE_KINDS). The verdict comes from the server's real
+                 landing matrix — see POST /inbox/preview-landing — never from a
+                 second copy of the rules in ideas.js. Hidden until there is
+                 something true to say. -->
+            <p class="fi-gravity" id="fq-gravity" role="status" aria-live="polite" hidden></p>
+
             <p class="fi-err" id="fq-err" role="alert"></p>
             <p class="fi-result" id="fq-result" role="status" aria-live="polite"></p>
 

package/modules/hall-ui/public/ideas.js

@@ -88,6 +88,12 @@
   let goalTouchedByUser = false; // once the builder picks, stop clobbering it with fresh suggestions
   let quickSuggestTimer = null;
   let quickFiling = false;
+  // GRAVITY (task 1004083 / spec R02). The landing verdict for the draft as it
+  // currently stands, read from POST /inbox/preview-landing. A monotonic token
+  // guards against the out-of-order arrival a debounced-but-concurrent read
+  // invites: two previews in flight can land in either order, and the older one
+  // winning would leave the line describing a draft that no longer exists.
+  let gravitySeq = 0;
 
   // ---------------------------------------------------------------------------
   // draft persistence
@@ -501,9 +507,108 @@
     }
   }
 
+  // ---------------------------------------------------------------------------
+  // gravity — which goal will catch this thought, said before it is released
+  // (task 1004083 / spec R02)
+  // ---------------------------------------------------------------------------
+
+  const fqGravityEl = () => $('#fq-gravity');
+
+  // THE SENTENCES, AND NOTHING ELSE. Every branch below READS a field of the
+  // server's verdict; not one of them decides a landing. That split is the whole
+  // point of the endpoint: modules/ideas/routing.js `decideLanding` stays the one
+  // place the matrix lives, and a second copy of it in this file is precisely the
+  // failure the #fq-kind comment above already records ("this markup used to
+  // spell the whole vocabulary and had gone stale ... a third copy nobody was
+  // watching"). If a sentence here ever needs an `if` over kind or rank, the
+  // verdict is missing a field and the fix belongs on the server.
+  //
+  // Returns null for "say nothing" — an unscorable draft, or a read that failed.
+  // Silence is the honest degraded state: it leaves the filer exactly where they
+  // were before this feature, rather than replacing a quiet lie with a loud one.
+  function gravitySentence(v) {
+    if (!v || !v.outcome) return null;
+    const goalName = v.goal ? (v.goal.title || `goal ${v.goal.id}`) : null;
+    const claimable = v.status === 'ready';
+
+    if (v.outcome === 'refused') {
+      // The protected-scope wall. The server wrote the reason for a human; it is
+      // the one branch that already reads as a sentence, so it is passed through.
+      return { tone: 'refused', text: v.refusal && v.refusal.reason ? v.refusal.reason : `${goalName} will not take this filing.` };
+    }
+    if (v.outcome === 'routed') {
+      return {
+        tone: 'lands',
+        text: claimable
+          ? `This lands in ${goalName} as a task anyone can claim.`
+          : `This lands in ${goalName}, waiting for a nod before anyone can claim it.`,
+      };
+    }
+    if (v.outcome === 'routed_home') {
+      // The label on the picker says "homeless"; since ADR 0262 that is not true
+      // of a bug, and this line is the correction. Naming the version rather than
+      // the goal is deliberate — the maintenance goal is created by the capture,
+      // so the preview has no row to name without making one (landing-preview.js).
+      return {
+        tone: 'lands',
+        text: claimable
+          ? `A bug always lands. With no goal picked this goes to ${v.version_id}'s maintenance goal, claimable straight away.`
+          : `A bug always lands. With no goal picked this goes to ${v.version_id}'s maintenance goal, waiting for a nod.`,
+      };
+    }
+    // outcome === 'floats' — the inbox. Two ways to get here, and they are
+    // different facts: nobody named a goal, or a goal was named and the matrix
+    // declined it. The second is the one the picker currently lies about.
+    if (v.reason === 'judgment_kind') {
+      return { tone: 'floats', text: `${goalName} will not catch this — this kind is judged, not queued. It waits in the inbox for triage.` };
+    }
+    if (v.reason === 'full_idea_never_routes') {
+      return { tone: 'floats', text: 'A Full Idea is ratified by the board rather than routed. It waits in the inbox.' };
+    }
+    return { tone: 'floats', text: 'This floats in the inbox until someone triages it.' };
+  }
+
+  function renderGravity(v) {
+    const el = fqGravityEl();
+    if (!el) return;
+    const said = gravitySentence(v);
+    // dataset, not setAttribute: it writes the same data-tone the sheet selects
+    // on, and it is the half of the element a DOM the page is rendered into and
+    // a test stub both really carry.
+    if (!said) { el.hidden = true; el.textContent = ''; el.dataset.tone = ''; return; }
+    el.textContent = said.text;
+    el.dataset.tone = said.tone;
+    el.hidden = false;
+  }
+
+  // The read. Shares the suggester's debounce rather than adding a second clock:
+  // the two answer the same question at the same moment ("given what is typed so
+  // far, where does this go?"), and spec decision 12 — filing never gets slower —
+  // is a reason not to grow the number of things a keystroke sets running.
+  //
+  // A draft with no title is not previewed: it cannot be filed either, so there
+  // is no outcome to state.
+  async function refreshGravity() {
+    const seq = ++gravitySeq;
+    const title = fqTitleEl().value.trim();
+    if (!title) { renderGravity(null); return; }
+    const goalId = fqGoalEl().value;
+    const body = { kind: fqKindEl().value };
+    if (goalId) body.goal_id = Number(goalId);
+    let r;
+    try {
+      r = await api.inbox.postInboxPreviewLanding({ body });
+    } catch (_) {
+      r = null;
+    }
+    // A stale answer never paints. See gravitySeq above.
+    if (seq !== gravitySeq) return;
+    renderGravity(r && r.ok ? r.data : null);
+  }
+
   function onQuickTitleEdit() {
     clearTimeout(quickSuggestTimer);
-    quickSuggestTimer = setTimeout(refreshGoalSuggestions, QUICK_SUGGEST_DEBOUNCE_MS);
+    quickSuggestTimer = setTimeout(() => { refreshGoalSuggestions(); refreshGravity(); }, QUICK_SUGGEST_DEBOUNCE_MS);
   }
 
   function showQuickErr(msg) {
@@ -570,6 +675,10 @@
     fqKindEl().value = 'bug';
     goalTouchedByUser = false;
     renderGoalOptions([]);
+    // The form is empty again, so the line has nothing to describe. The RECEIPT
+    // above is what survives the filing (task 1004082); gravity is a statement
+    // about a draft, and this draft is gone.
+    renderGravity(null);
   }
 
   async function bootQuickComposer() {
@@ -577,7 +686,11 @@
     renderGoalOptions([]);
     fqTitleEl().addEventListener('input', onQuickTitleEdit);
     fqKindEl().addEventListener('change', onQuickTitleEdit);
-    fqGoalEl().addEventListener('change', () => { goalTouchedByUser = true; });
+    // Changing the goal is the one edit that changes gravity WITHOUT changing
+    // what the suggester would return, so it redraws the line directly rather
+    // than going through onQuickTitleEdit. Deliberately undebounced: a select is a
+    // deliberate single act, not a stream of keystrokes.
+    fqGoalEl().addEventListener('change', () => { goalTouchedByUser = true; refreshGravity(); });
     $('#fq-form').addEventListener('submit', fileQuick);
 
     // Before any network call: the receipts are local, so a builder who reloads

package/modules/ideas/landing-preview.js

@@ -0,0 +1,180 @@
+'use strict';
+
+// modules/ideas/landing-preview.js — THE LANDING VERDICT, BEFORE THE WRITE
+// (task 1004083, BV2.R02 — "Gravity is visible before release").
+//
+// THE PROBLEM THIS ANSWERS. The composer's goal `<select>` is not invisible; it
+// is visible and it MISLEADS, in two directions that the filer cannot see:
+//
+//   1. `No goal (homeless)` is FALSE FOR A BUG. Since ADR 0262 a homeless
+//      kind='bug' filed through the `api` vector routes into the version's
+//      maintenance goal (./homeless-home.js). The filer is told their report
+//      will float. It will not.
+//   2. NAMING A GOAL IS FALSE FOR A JUDGMENT KIND. routing.NEVER_ROUTE_KINDS
+//      ('criterion-proposal', 'decision') and grade='full' never route, so the
+//      select shows a goal that will not catch the thought.
+//
+// So "gravity is visible" is not a restyle of the dropdown — the dropdown's own
+// labels are the thing that is wrong. It is met by stating the matrix's verdict.
+//
+// NO NEW ROUTING, and this file is where that promise is kept. It DECIDES
+// nothing: it calls the same `decideLanding` and `authorizeRoutedLanding` the
+// capture calls, over the same inputs, and reports what they said. A second copy
+// of the matrix in browser JS is the failure mode this exists to avoid — the
+// same one the composer's `#fq-kind` comment already records ("this markup used
+// to spell the whole vocabulary and had gone stale against the DB CHECK ... a
+// third copy nobody was watching"), and the same one `ideas.js` already forbids
+// in prose ("read it, never re-derive the landing matrix here").
+//
+// READ-ONLY IS A HARD CONTRACT, not an intention. Every statement below is a
+// SELECT. In particular it calls `currentBuildingVersionId` and NEVER
+// `ensureMaintenanceGoal` — that one is find-or-CREATE, and the preview runs on
+// every keystroke of a debounced composer. Previewing a homeless bug must not
+// mint a goal as a side effect of typing, so the preview names the version whose
+// maintenance goal will catch it and leaves the row to the real capture.
+//
+// ITS OWN FILE for the reason homeless-home.js gives: inbox.js sits at the
+// fitness line cap with no headroom, and "what will happen if I file this" is
+// one question with one answer that a reader should find as a file.
+
+const api = require('../../src/module-api');
+const { pool } = api;
+const { decideLanding, authorizeRoutedLanding } = require('./routing');
+
+// The verdict vocabulary the composer renders. Stable machine tokens, never
+// prose: the wording is the UI's business and the copy registry's, and a client
+// that wants a different sentence must not have to string-match English.
+//
+//   'routed'        — it becomes a task in a named goal. `status` says whether
+//                     that task is claimable ('ready') or awaiting a nod
+//                     ('backlog'); `goal` names the home.
+//   'routed_home'   — it becomes a task, but the goal is the MAINTENANCE goal the
+//                     system picks, not one the filer named (the homeless bug).
+//                     `version_id` names whose maintenance goal.
+//   'floats'        — it waits in the inbox for triage. The honest reading of
+//                     "no goal", and also of a goal the matrix declined.
+//   'refused'       — it will not be filed at all (the protected-scope wall).
+const OUTCOMES = Object.freeze({
+  ROUTED: 'routed',
+  ROUTED_HOME: 'routed_home',
+  FLOATS: 'floats',
+  REFUSED: 'refused',
+});
+
+// previewLanding — what pressing "File it" would do, without doing it.
+//
+// Takes exactly what the capture takes, and the caller resolves `filerRank` and
+// `vector` the same way POST /inbox does: the rank off the AUTHENTICATED builder
+// and the vector hardcoded. A preview that read either from the body would let a
+// filer see — and then, by symmetry of argument, demand — a landing they do not
+// hold. It is a read, so being wrong here leaks nothing; being wrong here
+// TEACHES something false, which is the whole defect this task is about.
+//
+// NEVER THROWS. A composer redrawing on every keystroke must degrade to "we
+// cannot say yet", never to a red error under a half-typed title. An outage in
+// any read below collapses to `{ outcome: null }` and the UI says nothing —
+// which leaves today's behaviour exactly as it is, rather than replacing a
+// silent lie with a loud one.
+async function previewLanding(input, deps = {}) {
+  // NORMALISE FIRST, DESTRUCTURE AFTER — the trap ./routing.js's `decideLanding`
+  // already records, and which the first cut of this function walked straight
+  // into. A default in the parameter list fires on `undefined` and NOT on
+  // `null`, so `previewLanding(null)` threw from the signature — BEFORE the
+  // try/catch below, so the "never throws" contract above was false for the one
+  // input a caller spreading an absent object actually produces.
+  const { goalId = null, kind = null, grade = null, filerRank = null, vector = null } = input || {};
+  const activePool = ((deps || {}).pool && process.env.NODE_ENV === 'test') ? deps.pool : pool;
+  try {
+    const landing = decideLanding({ goalId, kind, grade, filerRank, vector });
+
+    if (!landing.route) {
+      // A goal was named and the matrix declined it — the second lie above. The
+      // reason token travels so the UI can say WHY it still floats rather than
+      // showing a goal that is not going to catch anything.
+      return { outcome: OUTCOMES.FLOATS, reason: landing.reason, status: null, goal: null, version_id: null, refusal: null };
+    }
+
+    if (landing.homeless) {
+      // The first lie above. Read-only: name the version, never make the goal.
+      const lifecycle = api.resolveOptional && api.resolveOptional('lifecycle');
+      const versionId = lifecycle && lifecycle.currentBuildingVersionId
+        ? await lifecycle.currentBuildingVersionId()
+        : null;
+      // No building version means the real capture would fail closed
+      // (homeless-home.js NO_BUILDING_VERSION), so the preview must not promise
+      // a landing. It says nothing rather than naming a home that isn't there.
+      if (!versionId) return { outcome: null, reason: landing.reason, status: null, goal: null, version_id: null, refusal: null };
+      return {
+        outcome: OUTCOMES.ROUTED_HOME,
+        reason: landing.reason,
+        status: landing.status,
+        goal: null,
+        version_id: versionId,
+        refusal: null,
+      };
+    }
+
+    // A named goal. The same three facts the transaction checks — the goal is
+    // real, open, and on a building version — read WITHOUT the FOR SHARE lock,
+    // because a preview holds nothing and races nothing: it describes the world
+    // a moment before the write, and the write re-checks under its own lock.
+    const { rows } = await activePool.query(
+      `SELECT g.id, g.title, g.status, g.version_id, g.scope_modules, v.status AS version_status
+         FROM goals g
+         JOIN versions v ON v.id = g.version_id
+        WHERE g.id = $1`,
+      [goalId]
+    );
+    const goal = rows[0];
+    // A goal that is gone, archived, or on a closed version would be refused by
+    // the capture. The preview declines to guess a sentence for a state the
+    // filer cannot reach from the picker anyway (it lists open goals only), and
+    // lets the real 400 name it if they get there by other means.
+    if (!goal || goal.status !== 'open' || goal.version_status !== 'building') {
+      return { outcome: null, reason: landing.reason, status: null, goal: null, version_id: null, refusal: null };
+    }
+
+    // The binding gate, verbatim. `touches` is never declared by the composer —
+    // a person reporting a bug does not know which files it lives in — so the
+    // scope wall has nothing to subset-check and `scopeCheck` is null, exactly
+    // as it is for a human filing through POST /inbox. What CAN bite is the
+    // protected-scope refusal, and that is a server-only fact: it is the reason
+    // this preview cannot live in the browser.
+    const authorized = authorizeRoutedLanding({
+      landing,
+      filerRank,
+      scopeProtected: api.moduleScopeMap.scopeIncludesProtected(goal.scope_modules),
+      scopeCheck: null,
+    });
+    // The refusal NAMES the goal, and that is checked rather than assumed: the
+    // composer's own picker is filled from `GET /goals?status=open`, which applies
+    // no rank filter, so every open goal's title is already on screen for this
+    // caller — they picked this one FROM that list. Withholding it here would hide
+    // nothing and would cost the refusal its subject. If that read ever becomes
+    // rank-scoped, this line has to be revisited with it.
+    if (!authorized.ok) {
+      return {
+        outcome: OUTCOMES.REFUSED,
+        reason: landing.reason,
+        status: null,
+        goal: { id: goal.id, title: goal.title },
+        version_id: goal.version_id,
+        refusal: { code: authorized.code, reason: authorized.reason },
+      };
+    }
+
+    return {
+      outcome: OUTCOMES.ROUTED,
+      reason: landing.reason,
+      status: authorized.status,
+      goal: { id: goal.id, title: goal.title },
+      version_id: goal.version_id,
+      refusal: null,
+    };
+  } catch (_) {
+    // See the NEVER THROWS note above.
+    return { outcome: null, reason: null, status: null, goal: null, version_id: null, refusal: null };
+  }
+}
+
+module.exports = { previewLanding, OUTCOMES };