@bongos/core 1.19.919 → 1.19.920

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.919",
-  "core_contract": "1.19.919",
-  "source_commit": "bc2cae9667f75f9a2df301fc776a5e0b79451325",
+  "core_version": "1.19.920",
+  "core_contract": "1.19.920",
+  "source_commit": "f4047b39eee17385567cbe07c45821af322b8f51",
   "source_ref": "HEAD",
-  "built_at": "2026-09-20T19:06:48.075Z",
+  "built_at": "2026-09-20T19:16:17.763Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 508,
     "agent_docs_stubbed": 26,
-    "functional_verbatim": 2302,
+    "functional_verbatim": 2303,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 2836,
-  "tree_sha256": "fcb4d5d17d74106fc9ba7d49143956885bb9c5dadc48c2e1a3aa39ebcc76a851",
+  "file_count": 2837,
+  "tree_sha256": "0aa0c6f824621e1dd477c005962f961b6c9e71756b59f6bf383b122152964b5b",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -2662,7 +2662,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "e15b7bc78c0b64fc27725df643ec05f20e047322623ac182f3614fea341521bb"
+      "sha256": "760c792a9c7d16c1b9fc1b77eaf915baf0d9e652d04c84571118c521bbde0700"
     },
     {
       "path": "docs/modules-contract.md",
@@ -4627,7 +4627,7 @@
     {
       "path": "modules/hall-ui/public/atlas.html",
       "mode": "0000644",
-      "sha256": "5be54f6e574fd171cfccad405e006873ff110206777c95bd6f482befe0e9c600"
+      "sha256": "7a18c8a53bf17b4eb5fecdd108fefa518d917a297651dae32bda31ef650f0d0c"
     },
     {
       "path": "modules/hall-ui/public/atlas.js",
@@ -4647,7 +4647,7 @@
     {
       "path": "modules/hall-ui/public/blockers.html",
       "mode": "0000644",
-      "sha256": "efe8931f650fcb1e98194f34cf0f4cc11e570e565c51bae2223beacb4307ae94"
+      "sha256": "a41140a699e8d0a12cdeb22804f21a33c96ae0467f71260eb6a06ddce26618ee"
     },
     {
       "path": "modules/hall-ui/public/blockers.js",
@@ -4667,7 +4667,7 @@
     {
       "path": "modules/hall-ui/public/board-room.html",
       "mode": "0000644",
-      "sha256": "362381c40f1011455cab89d473108eb3f41747fe46cde62d932744fc2d2512f0"
+      "sha256": "52ac2cac716ea87e028437d132d2b088527aea365ed8093381c40e194d014d80"
     },
     {
       "path": "modules/hall-ui/public/board-room.js",
@@ -4707,7 +4707,7 @@
     {
       "path": "modules/hall-ui/public/collab.html",
       "mode": "0000644",
-      "sha256": "9876929d0ce989d12dadcdfa6da5cd93ca660e0b291a24a467a920632245dd65"
+      "sha256": "3255ef7a523ec831ef1fded9c9ef18fcc6298dc81a5c6510233cc42a247af613"
     },
     {
       "path": "modules/hall-ui/public/collab.js",
@@ -4727,7 +4727,7 @@
     {
       "path": "modules/hall-ui/public/copy-desk.html",
       "mode": "0000644",
-      "sha256": "96b2dac4c916f1912bd5b5b954bbdea598581e4213cc905ea2ee4db7583d115d"
+      "sha256": "16eba28547728612dcbcb9563021cf01a6ef5fe6a207fd01cf8744017fac3f67"
     },
     {
       "path": "modules/hall-ui/public/copy-desk.js",
@@ -4767,7 +4767,7 @@
     {
       "path": "modules/hall-ui/public/deploy.html",
       "mode": "0000644",
-      "sha256": "1dabc13d4c3dc59e10918348e0607ab7162522ba91d0269e3d4db3fbf5f0001e"
+      "sha256": "939d7544560d07848172df49700bdbb6f13d9e8ccb04040cf3f85a2eafd1f9bf"
     },
     {
       "path": "modules/hall-ui/public/deploy.js",
@@ -4792,7 +4792,7 @@
     {
       "path": "modules/hall-ui/public/diagrams.html",
       "mode": "0000644",
-      "sha256": "8586c32beb1d116a7d37505328b077efc3499315c73b02727d28b9f82cd78eb3"
+      "sha256": "85d09cb964c7938e7634e8ec15bb31229ec2ae3bfbe6c3152ded85b10e5f2122"
     },
     {
       "path": "modules/hall-ui/public/diagrams.states.json",
@@ -4807,7 +4807,7 @@
     {
       "path": "modules/hall-ui/public/drachmae.html",
       "mode": "0000644",
-      "sha256": "89bd28f00b4f4849b8789f8d5b4d5eb50705fddeb65f1675bb0d88fc43fd1859"
+      "sha256": "357f766069e13f836e5d229451b0644579bb7d5f2db9228317a513dd46024508"
     },
     {
       "path": "modules/hall-ui/public/drachmae.js",
@@ -4832,7 +4832,7 @@
     {
       "path": "modules/hall-ui/public/gate.html",
       "mode": "0000644",
-      "sha256": "0b07c5a358d50b8537e303fc8fc84a2ae5100c09df7af1e15b96caa5a677aa76"
+      "sha256": "b8581d242c8b228070b719020222a86c6049de4004881d059636fa27c6740213"
     },
     {
       "path": "modules/hall-ui/public/gate.js",
@@ -4872,7 +4872,7 @@
     {
       "path": "modules/hall-ui/public/goals.html",
       "mode": "0000644",
-      "sha256": "ecbd2c50f6dc00f9243417f27ed40603498cd7a8178e6701a1151d9188baff2c"
+      "sha256": "47a148b1c67e6d81fcd032b21dbd988fffbff6602a34c92c69cfb0114411e867"
     },
     {
       "path": "modules/hall-ui/public/goals.js",
@@ -4892,7 +4892,7 @@
     {
       "path": "modules/hall-ui/public/government.html",
       "mode": "0000644",
-      "sha256": "83338cc027af8f146960f58c3398dd28c0218c9671aad2327eef6d81588f85b8"
+      "sha256": "b275b437bbc25dec17f2ff33d3d4673dae4bc9e3bf6a08db538405267303d731"
     },
     {
       "path": "modules/hall-ui/public/government.js",
@@ -4932,7 +4932,7 @@
     {
       "path": "modules/hall-ui/public/idea.html",
       "mode": "0000644",
-      "sha256": "4edb9800c4b7ae528f66dfcfb89f4d8ee765b1923303d29c57984cde933986a1"
+      "sha256": "495cabec6824445cb19363870f7893bc70c82e8ef6427c6a0acb10a9099cf384"
     },
     {
       "path": "modules/hall-ui/public/idea.js",
@@ -4952,7 +4952,7 @@
     {
       "path": "modules/hall-ui/public/ideas.html",
       "mode": "0000644",
-      "sha256": "c59e5f293b4dcabd01e2cd17c983b42184bb17468654888f4adf2243a506623b"
+      "sha256": "7519ec60796cc13455a706b68a28df4906f5eb97c6c383402602d6724dc109c3"
     },
     {
       "path": "modules/hall-ui/public/ideas.js",
@@ -4967,7 +4967,7 @@
     {
       "path": "modules/hall-ui/public/index.html",
       "mode": "0000644",
-      "sha256": "a1cb9e9d3378c6a8c0e78add088bc8f8a705da26b83a6f6ebef8d5136f44b6c9"
+      "sha256": "cb27c9d4a53bfc99e31cf235f7809330c762145228492cb21cfa1a7df6bb0b69"
     },
     {
       "path": "modules/hall-ui/public/index.states.json",
@@ -4987,7 +4987,7 @@
     {
       "path": "modules/hall-ui/public/modules.html",
       "mode": "0000644",
-      "sha256": "493de4531267d2b0b0ce268cc5998e33d54481442af619771f05dc27182e6f18"
+      "sha256": "ad62097f5917f2b7bf5d97506f59f684525c4704b99c05dc0b34225d248270ee"
     },
     {
       "path": "modules/hall-ui/public/modules.js",
@@ -5022,7 +5022,7 @@
     {
       "path": "modules/hall-ui/public/people.html",
       "mode": "0000644",
-      "sha256": "8df57c42bbcf1309bce63228b63c6f2ab2f8fbf70cfd6dd9e4228b4d5b7e09b4"
+      "sha256": "8e4eb3cc38902efc9df68fb59ff3d89b73c8544e64f2d1ff6de758a40ca58de1"
     },
     {
       "path": "modules/hall-ui/public/people.js",
@@ -5042,7 +5042,7 @@
     {
       "path": "modules/hall-ui/public/primer.html",
       "mode": "0000644",
-      "sha256": "988261501fd425e7e94cd8d236ffbab7a42d6d73f65bac6b33a6b8bf4f7fe7a1"
+      "sha256": "7f4a81acd3cfb689cb928916cd22cc2f059865f0adf1c0d86b5bd24ebee6cae4"
     },
     {
       "path": "modules/hall-ui/public/primer.js",
@@ -5082,7 +5082,7 @@
     {
       "path": "modules/hall-ui/public/profile.html",
       "mode": "0000644",
-      "sha256": "b169bf612448988b8f114c2b1702463b49f643afe20b29cbb43a7b5bcb18b549"
+      "sha256": "a8bea342986ab3fd751ce8a6c026ddbd63d3982ee1e588611e506e26d6822198"
     },
     {
       "path": "modules/hall-ui/public/profile.js",
@@ -5102,7 +5102,7 @@
     {
       "path": "modules/hall-ui/public/project-settings.html",
       "mode": "0000644",
-      "sha256": "d96bd79671787688cbfb58633236b6287a06356767bc53a8b9f96294e2850335"
+      "sha256": "dbc1290d64354c12931779db84645637b118356df8a5173006c9fe19865e7116"
     },
     {
       "path": "modules/hall-ui/public/project-settings.js",
@@ -5112,7 +5112,7 @@
     {
       "path": "modules/hall-ui/public/ranks.html",
       "mode": "0000644",
-      "sha256": "07396f9135db32359405d5c290549d0d6fb3d2c3a799408c1a268afbdd72ba3c"
+      "sha256": "96fc146b06eed3cf008474d4a749ce153d44e6ffdc339cbfb0f24e80cf3473ea"
     },
     {
       "path": "modules/hall-ui/public/ranks.js",
@@ -5142,7 +5142,7 @@
     {
       "path": "modules/hall-ui/public/roadmap.html",
       "mode": "0000644",
-      "sha256": "f4d80840fc87ca128a193d4a68bfe8c8cce1df25c5b490ee7cc5166ab1a1b381"
+      "sha256": "e23079e6c99511315ff6cc5be3332177e0f9d2ce02834b71f7cb0c800ed0bd6b"
     },
     {
       "path": "modules/hall-ui/public/roadmap.js",
@@ -5162,7 +5162,7 @@
     {
       "path": "modules/hall-ui/public/roster.html",
       "mode": "0000644",
-      "sha256": "4edbfb63eb08a0c0e96efec59f6559b62bc4bed24eaebe3ef4169382a8e1124c"
+      "sha256": "efdbdf33e10be17474c5d46e633865834b41abfbc54f02a0bca9fe54d8642024"
     },
     {
       "path": "modules/hall-ui/public/roster.js",
@@ -5182,7 +5182,7 @@
     {
       "path": "modules/hall-ui/public/sessions.html",
       "mode": "0000644",
-      "sha256": "3a3a17d9623e601c2c45d9c87f34ad3b29c7ba495658dda9900086ecd47a64de"
+      "sha256": "2627f0cdd7c7bda698f1f4c37e5acfa0278e665dcbf1bd189d538fc111c15e2e"
     },
     {
       "path": "modules/hall-ui/public/sessions.js",
@@ -5222,7 +5222,7 @@
     {
       "path": "modules/hall-ui/public/settings.html",
       "mode": "0000644",
-      "sha256": "6c3e1dd29a8822091e3dee20598578712bf74d67936465fd9d3c15a5855a996e"
+      "sha256": "03608a940bab5b723ee848d05c355f61d1d129efe0c7a1f68e2577d640de8b68"
     },
     {
       "path": "modules/hall-ui/public/settings.js",
@@ -5252,7 +5252,7 @@
     {
       "path": "modules/hall-ui/public/studio.html",
       "mode": "0000644",
-      "sha256": "ea0051dba4a0e4e2ebde1ab1dcaeaedac697d41f89df35526286beb018553025"
+      "sha256": "5dcde0e7fc83c9d0f861530bbfa094977d3e10a2efd53c0d7eea7b43d8036a53"
     },
     {
       "path": "modules/hall-ui/public/studio.js",
@@ -5287,7 +5287,7 @@
     {
       "path": "modules/hall-ui/public/task.html",
       "mode": "0000644",
-      "sha256": "5d8a37f1d69506824339063f9f9f3b1af1f9569ca28738e638eaa98a19e86ea8"
+      "sha256": "e239a66b0dacef8799eb0402a26d4938fb58c9ea019bcf5c7ede01286ae67fff"
     },
     {
       "path": "modules/hall-ui/public/task.js",
@@ -5312,7 +5312,7 @@
     {
       "path": "modules/hall-ui/public/watch.html",
       "mode": "0000644",
-      "sha256": "9e1dff41ebd8f0872d45057edf378e3e587ae68499973cc8bafa97bb92c4d61d"
+      "sha256": "c235d89f45fb12cfbefe6cf22000de2804f3b4c9887419c981d220695985188f"
     },
     {
       "path": "modules/hall-ui/public/watch.js",
@@ -5332,7 +5332,7 @@
     {
       "path": "modules/hall-ui/public/work.html",
       "mode": "0000644",
-      "sha256": "f8e72cd4d322554ac6ebdf49dcb48b001e61a09bdbfb62390b409fc0c867b0dd"
+      "sha256": "819ca20923783af7b7ecae16b0a44e42f460d0f7af5179f78f9ee5f41220574e"
     },
     {
       "path": "modules/hall-ui/public/work.js",
@@ -7872,12 +7872,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "c74ec04aa7a18c9c94e42afecaac34a114331a3769e1df4af00e192555155f66"
+      "sha256": "c4064939e0c8b7f6452d0348427109332caa61e8759e40a60ded3dc4f704602a"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "fc839d817a279254882dd33532bbbb2831174de15f28b3c72a3830021e8ded5f"
+      "sha256": "840b50ec98565b70f1550ea34aa8813bf5e8cbb8ae7dece18ed1e45abe6ad608"
     },
     {
       "path": "public-docs/index.html",
@@ -9812,7 +9812,7 @@
     {
       "path": "src/bongos/routes/me.js",
       "mode": "0000644",
-      "sha256": "4be2b550184af2541f20c5b1a40cce4b61beb2eb676d4de7d2c05b0d9a92dfd4"
+      "sha256": "d53906b0df21f0b645bc0553d2913e8b60bec2b4cbe7bb1f9c5a71ea8de27f44"
     },
     {
       "path": "src/bongos/routes/modules.js",
@@ -9877,7 +9877,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "e5fb0cc646c7821da2c99ceb43ee9a9214399fb81b1ee26e1c9bc84ff5bff380"
+      "sha256": "111908611a709491751fd92695758cca7125efc22bf5e68e908a8c4f45cf6301"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -10782,7 +10782,7 @@
     {
       "path": "tests/core_update_banner.mjs",
       "mode": "0000644",
-      "sha256": "734be5047155f3feed777a416adb4eeadec171da9922bbde4cb1739ac7265f8c"
+      "sha256": "9f2cdc1780a59602454b42f59be746fc7af246a7e3e62ade83774aebf63fe4a7"
     },
     {
       "path": "tests/core_upgrade_door.mjs",
@@ -12479,6 +12479,11 @@
       "mode": "0000644",
       "sha256": "03b61cb8de6713b03fe17b2b3c5d70af7c511b33b17a42295f49c36e27771470"
     },
+    {
+      "path": "tests/nav_permission_atoms.mjs",
+      "mode": "0000644",
+      "sha256": "c965c4d56b00ec2cdf476ca045c8e28120ca16b57f26006a9017350b44014e92"
+    },
     {
       "path": "tests/needs_rebase.mjs",
       "mode": "0000644",

package/docs/module-api-changelog.md

@@ -2312,5 +2312,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.917 with no explicit bump. run 35529342372. (task 1002620)
   1.19.919 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.918 with no explicit bump. run 35531198454. (task 1002620)
+  1.19.920 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.919 with no explicit bump. run 35531720944. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/hall-ui/public/atlas.html

@@ -91,7 +91,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-07-02-shell1"></script>
+<script src="/builders/shell.js?v=2026-09-20-coreupdate1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/atlas.js?v=2026-09-02-index" defer></script>

package/modules/hall-ui/public/blockers.html

@@ -50,7 +50,7 @@
 
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
-<script src="/builders/shell.js?v=2026-07-02-shell1"></script>
+<script src="/builders/shell.js?v=2026-09-20-coreupdate1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB — rank labels, number formats) + the

package/modules/hall-ui/public/board-room.html

@@ -60,7 +60,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-07-02-shell1"></script>
+<script src="/builders/shell.js?v=2026-09-20-coreupdate1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-board"></script>

package/modules/hall-ui/public/collab.html

@@ -105,7 +105,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-07-02-shell1"></script>
+<script src="/builders/shell.js?v=2026-09-20-coreupdate1"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <script src="/builders/collab-lib.js?v=2026-09-19-agewords"></script>

package/modules/hall-ui/public/copy-desk.html

@@ -177,7 +177,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-07-02-shell1"></script>
+<script src="/builders/shell.js?v=2026-09-20-coreupdate1"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <script src="/builders/hall-kit.js"></script>

package/modules/hall-ui/public/deploy.html

@@ -55,7 +55,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-07-02-shell1"></script>
+<script src="/builders/shell.js?v=2026-09-20-coreupdate1"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>
 <script src="/builders/hall-kit.js"></script>

package/modules/hall-ui/public/diagrams.html

@@ -97,7 +97,7 @@
 
 <!-- The app shell (sidebar + top bar + footer). Dependency-free; runs at parse
      time so the chrome exists before the deferred page scripts execute. -->
-<script src="/builders/shell.js?v=2026-07-02-shell1"></script>
+<script src="/builders/shell.js?v=2026-09-20-coreupdate1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/diagram-viewer.js?v=2026-06-14-diagviewer-1" defer></script>

package/modules/hall-ui/public/drachmae.html

@@ -98,7 +98,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-07-02-shell1"></script>
+<script src="/builders/shell.js?v=2026-09-20-coreupdate1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/md-reader.js?v=2026-09-02-mdreader-2"></script>

package/modules/hall-ui/public/gate.html

@@ -76,7 +76,7 @@
 <div id="gate-modal-root"></div>
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-07-02-shell1"></script>
+<script src="/builders/shell.js?v=2026-09-20-coreupdate1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>

package/modules/hall-ui/public/goals.html

@@ -220,7 +220,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-07-03-goals1"></script>
+<script src="/builders/shell.js?v=2026-09-20-coreupdate1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-14-domutils"></script>

package/modules/hall-ui/public/government.html

@@ -134,7 +134,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-07-02-shell1"></script>
+<script src="/builders/shell.js?v=2026-09-20-coreupdate1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>

package/modules/hall-ui/public/idea.html

@@ -52,7 +52,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-07-02-shell1"></script>
+<script src="/builders/shell.js?v=2026-09-20-coreupdate1"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib" defer></script>
 <!-- task-detail.js still owns the #/idea/N and #/blocker/N overlay, so a ref

package/modules/hall-ui/public/ideas.html

@@ -192,7 +192,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-07-02-shell1"></script>
+<script src="/builders/shell.js?v=2026-09-20-coreupdate1"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <!-- task 1003069 (R08) — the quick-filing form's routed result links a task

package/modules/hall-ui/public/index.html

@@ -102,7 +102,7 @@
 <script src="/builders/brand-apply.js?v=2026-06-27-r75" defer></script>
 <!-- The app shell (sidebar + top bar + view router). Dependency-free; loaded
      BEFORE builders.js so the chrome ids exist when events are wired. -->
-<script src="/builders/shell.js?v=2026-07-02-shell1" defer></script>
+<script src="/builders/shell.js?v=2026-09-20-coreupdate1" defer></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- task 2166: the shared component kit (window.OTBKit) — pager/ledger/rail.

package/modules/hall-ui/public/modules.html

@@ -80,7 +80,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-07-02-shell1"></script>
+<script src="/builders/shell.js?v=2026-09-20-coreupdate1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>

package/modules/hall-ui/public/people.html

@@ -55,7 +55,7 @@
 
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
-<script src="/builders/shell.js?v=2026-07-02-shell1"></script>
+<script src="/builders/shell.js?v=2026-09-20-coreupdate1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB — rank labels, number formats) + the

package/modules/hall-ui/public/primer.html

@@ -115,7 +115,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-07-02-shell1"></script>
+<script src="/builders/shell.js?v=2026-09-20-coreupdate1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- the shared markdown reader (window.OTBMdReader) — primer.js renders through

package/modules/hall-ui/public/profile.html

@@ -187,7 +187,7 @@
 
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
-<script src="/builders/shell.js?v=2026-07-02-shell1"></script>
+<script src="/builders/shell.js?v=2026-09-20-coreupdate1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before profile.js, which pulls from it. -->

package/modules/hall-ui/public/project-settings.html

@@ -58,7 +58,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-07-02-shell1"></script>
+<script src="/builders/shell.js?v=2026-09-20-coreupdate1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>

package/modules/hall-ui/public/ranks.html

@@ -68,7 +68,7 @@
 
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
-<script src="/builders/shell.js?v=2026-07-02-shell1"></script>
+<script src="/builders/shell.js?v=2026-09-20-coreupdate1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before ranks.js, which pulls from it. -->

package/modules/hall-ui/public/roadmap.html

@@ -41,7 +41,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-07-03-roadmap1"></script>
+<script src="/builders/shell.js?v=2026-09-20-coreupdate1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-14-domutils"></script>

package/modules/hall-ui/public/roster.html

@@ -50,7 +50,7 @@
 
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
-<script src="/builders/shell.js?v=2026-07-02-shell1"></script>
+<script src="/builders/shell.js?v=2026-09-20-coreupdate1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB — rank labels, number formats) + the

package/modules/hall-ui/public/sessions.html

@@ -99,7 +99,7 @@
 
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
-<script src="/builders/shell.js?v=2026-07-02-shell1"></script>
+<script src="/builders/shell.js?v=2026-09-20-coreupdate1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded BEFORE sessions.js so it can pull from it. -->

package/modules/hall-ui/public/settings.html

@@ -416,7 +416,7 @@
 
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page scripts run. -->
-<script src="/builders/shell.js?v=2026-07-02-shell1"></script>
+<script src="/builders/shell.js?v=2026-09-20-coreupdate1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before consuming IIFEs. -->

package/modules/hall-ui/public/studio.html

@@ -66,7 +66,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-07-02-shell1"></script>
+<script src="/builders/shell.js?v=2026-09-20-coreupdate1"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <!-- The kit, for its ONE renderer: the full-size ship-time visual figure

package/modules/hall-ui/public/task.html

@@ -57,7 +57,7 @@
 
 <!-- The app shell (sidebar + top bar + footer). Dependency-free; runs at parse
      time so the chrome exists before the deferred page scripts execute. -->
-<script src="/builders/shell.js?v=2026-07-02-shell1"></script>
+<script src="/builders/shell.js?v=2026-09-20-coreupdate1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded FIRST so task.js can pull from it. -->

package/modules/hall-ui/public/watch.html

@@ -162,7 +162,7 @@
 
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
-<script src="/builders/shell.js?v=2026-07-02-shell1"></script>
+<script src="/builders/shell.js?v=2026-09-20-coreupdate1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before watch.js, which pulls from it. -->

package/modules/hall-ui/public/work.html

@@ -151,7 +151,7 @@
 
 <!-- The app shell (sidebar + top bar + footer). Dependency-free; runs at parse
      time so the chrome exists before the deferred page scripts execute. -->
-<script src="/builders/shell.js?v=2026-07-02-shell1"></script>
+<script src="/builders/shell.js?v=2026-09-20-coreupdate1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded FIRST so work.js can pull from it. -->

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.919",
+  "version": "1.19.920",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.919",
+      "version": "1.19.920",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.919",
+  "version": "1.19.920",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/src/bongos/routes/me.js

@@ -119,7 +119,15 @@ const discordIsLinked = (builderId) =>
 // COSMETIC ONLY (ADR 0016). This decides who is OFFERED a link. The page gate
 // (auth.js PAGE_GATES) and each data route's requirePermission are the wall, and
 // they run regardless of what this says.
-const NAV_PERMISSION_ATOMS = Object.freeze(['board.vote.cast']);
+// `core.pin.move` (task 1004118). The core-update banner in shell.js gates on it,
+// and task 1004045 shipped that gate WITHOUT adding the atom here — so the value was
+// `undefined` for every builder, the guard always bailed, and the banner could not
+// render for anyone, on any instance. The authority was never the problem: the same
+// account that saw no banner is answered 200 by a `core.pin.move`-gated route. Only
+// this projection omitted it. Adding an atom here is the deliberate act this comment
+// already described; tests/nav_permission_atoms.mjs now fails if shell.js gates on
+// one that is missing, so the act cannot be skipped again.
+const NAV_PERMISSION_ATOMS = Object.freeze(['board.vote.cast', 'core.pin.move']);
 
 // navPermissionsFor(builderId) → { '<atom>': boolean } over NAV_PERMISSION_ATOMS,
 // or null when authority could not be established (government off, port missing,

package/src/module-api.js

@@ -71,7 +71,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.919'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.920'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/core_update_banner.mjs

@@ -306,3 +306,31 @@ test('the banner is asked for ONCE, not on every access settle', async () => {
   const first = b.requested.filter((r) => r.endsWith('/core-update')).length;
   assert.equal(first, 1);
 });
+
+// ── the chain, with the map the SERVER would really send (task 1004118) ───────
+//
+// Every case above hands applyAccess a permissions map written here. That is exactly
+// how task 1004045's banner shipped dead: it gated on `core.pin.move`, /me resolved
+// only NAV_PERMISSION_ATOMS, the atom was not in it, and the guard bailed for every
+// builder on every instance — while this suite stayed green throughout.
+//
+// So this case does NOT write the map. It DERIVES it from me.js's own declaration,
+// the way the server does, and grants everything in it. If the atom the banner needs
+// is not part of that projection, there is nothing here to grant and the banner
+// cannot render — which is the real bug, reproduced as a failure.
+test('the banner renders from the projection /me ACTUALLY sends, not one written by this test', async () => {
+  const meSrc = fs.readFileSync(path.join(ROOT, 'src/bongos/routes/me.js'), 'utf8');
+  const m = meSrc.match(/NAV_PERMISSION_ATOMS = Object\.freeze\(\[([^\]]*)\]\)/);
+  assert.ok(m, 'NAV_PERMISSION_ATOMS is readable');
+  const atoms = m[1].split(',').map((x) => x.trim().replace(/^'|'$/g, '')).filter(Boolean);
+  // A builder who holds everything the projection can report — the most generous real
+  // answer the server is capable of giving.
+  const permissions = Object.fromEntries(atoms.map((a) => [a, true]));
+  const b = boot({ permissions, update: BEHIND });
+  await new Promise((r) => setTimeout(r, 0));
+  assert.ok(
+    b.banner(),
+    'the banner did not render for a builder holding EVERY atom /me can report — so the atom it ' +
+    'gates on is outside NAV_PERMISSION_ATOMS and the feature is dead for everyone (task 1004118)',
+  );
+});

package/tests/nav_permission_atoms.mjs

@@ -0,0 +1,110 @@
+// tests/nav_permission_atoms.mjs — the hall shell may only gate on a permission the
+// server actually reports, and shell.js may not change behind its own cache-bust
+// (task 1004118).
+//
+// WHY THIS FILE EXISTS. Task 1004045 added a banner gated on `core.pin.move`, and
+// `/me` resolves ONLY the keys in NAV_PERMISSION_ATOMS — which did not include it. The
+// value was `undefined` for every builder, the guard always bailed, and the banner
+// could not render for ANYONE, on any instance. Its own test suite passed throughout,
+// because every case called applyAccess({ permissions: { 'core.pin.move': true } }) —
+// injecting the very map whose real shape was the defect. A renderer proven correct
+// against an input the server never produces is proven of nothing.
+//
+// So this asserts the CONTRACT BETWEEN TWO FILES, which is the only place the bug was
+// visible, and it reads both rather than trusting either.
+import assert from 'node:assert/strict';
+import { test } from 'node:test';
+import fs from 'node:fs';
+import path from 'node:path';
+import crypto from 'node:crypto';
+import { fileURLToPath } from 'node:url';
+
+const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
+const SHELL_PATH = path.join(ROOT, 'modules/hall-ui/public/shell.js');
+const SHELL = fs.readFileSync(SHELL_PATH, 'utf8');
+const ME = fs.readFileSync(path.join(ROOT, 'src/bongos/routes/me.js'), 'utf8');
+
+// The atoms /me will actually resolve, read out of its own declaration.
+function navAtoms() {
+  const m = ME.match(/NAV_PERMISSION_ATOMS = Object\.freeze\(\[([^\]]*)\]\)/);
+  assert.ok(m, 'NAV_PERMISSION_ATOMS is declared where this test can read it');
+  return m[1].split(',').map((s) => s.trim().replace(/^'|'$/g, '')).filter(Boolean);
+}
+
+// Every atom the shell gates on, in BOTH the shapes it uses: a nav item's
+// `gate: 'perm:<atom>'`, and a direct read of the resolved map.
+function shellAtoms() {
+  const out = new Set();
+  for (const m of SHELL.matchAll(/gate: *'perm:([^']+)'/g)) out.add(m[1]);
+  for (const m of SHELL.matchAll(/perms\['([^']+)'\]/g)) out.add(m[1]);
+  for (const m of SHELL.matchAll(/permissions\['([^']+)'\]/g)) out.add(m[1]);
+  return [...out];
+}
+
+test('every permission the shell gates on is one /me actually reports', () => {
+  const served = navAtoms();
+  const needed = shellAtoms();
+  assert.ok(needed.length, 'the shell gates on at least one atom (else this test is vacuous)');
+  for (const atom of needed) {
+    assert.ok(
+      served.includes(atom),
+      `shell.js gates on '${atom}' but /me does not resolve it — NAV_PERMISSION_ATOMS carries [${served.join(', ')}]. ` +
+      'A gate on an atom the server never sends is not a gate, it is an OFF switch: the value is undefined for ' +
+      "every builder, so the feature is dead for everyone. Add the atom to NAV_PERMISSION_ATOMS in src/bongos/routes/me.js.",
+    );
+  }
+});
+
+test('the shell gates on nothing the catalog does not define', () => {
+  // The other direction: a typo'd atom would sit in NAV_PERMISSION_ATOMS resolving
+  // false forever, which looks exactly like "you do not hold it".
+  const catalog = fs.readFileSync(path.join(ROOT, 'modules/government/catalog.js'), 'utf8');
+  for (const atom of shellAtoms()) {
+    assert.ok(catalog.includes(`'${atom}'`), `'${atom}' is a real permission in the government catalog`);
+  }
+});
+
+test('the hall-preview fixture carries every atom /me resolves', () => {
+  // modules/hall-ui/CLAUDE.md makes this a required step — "add the key to
+  // scripts/hall-preview/fixtures/me.json when you add an atom, or the harness renders
+  // the item's absent state forever" — and nothing enforced it, so this task missed it
+  // exactly as the doc predicted. A design harness that silently shows the wrong state
+  // is worse than one that is obviously broken, because it is trusted.
+  const fixture = JSON.parse(fs.readFileSync(path.join(ROOT, 'scripts/hall-preview/fixtures/me.json'), 'utf8'));
+  const perms = fixture.permissions || {};
+  for (const atom of navAtoms()) {
+    assert.ok(
+      atom in perms,
+      `'${atom}' is resolved by /me but missing from the hall-preview fixture — the harness will render its ` +
+      'absent state forever. Add it to scripts/hall-preview/fixtures/me.json.',
+    );
+  }
+});
+
+// ── the cache-bust ────────────────────────────────────────────────────────────
+//
+// shell.js is requested with a `?v=` query by every hall page. Task 1004045 changed
+// the file and left the query alone, so a returning browser kept the cached copy —
+// a fix that reaches nobody looks identical to a fix that does not work.
+
+const SHELL_SHA = 'd91b8e5fad83c8e2';
+
+test('shell.js has not changed without its cache-bust being bumped', () => {
+  const actual = crypto.createHash('sha256').update(SHELL).digest('hex').slice(0, 16);
+  assert.equal(
+    actual, SHELL_SHA,
+    `shell.js changed. Bump the ?v= on every hall page that loads it, then set SHELL_SHA in this file to '${actual}'. ` +
+    'Without the bump the edit reaches only first-time visitors.',
+  );
+});
+
+test('every hall page busts shell.js with the SAME string', () => {
+  // Divergent strings are how one of them goes stale: three different queries for one
+  // file were live before this task, and only the majority ever got bumped.
+  const dir = path.join(ROOT, 'modules/hall-ui/public');
+  const versions = new Set();
+  for (const f of fs.readdirSync(dir).filter((f) => f.endsWith('.html'))) {
+    for (const m of fs.readFileSync(path.join(dir, f), 'utf8').matchAll(/shell\.js\?v=([^"]+)/g)) versions.add(m[1]);
+  }
+  assert.equal(versions.size, 1, `one cache-bust for one file — found: [${[...versions].join(', ')}]`);
+});