npm - @bongos/core - Versions diffs - 1.19.928 → 1.19.930 - Mend

@bongos/core 1.19.928 → 1.19.930

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (50) hide show

package/.bongos-core.json +80 -50
package/docs/copy-inventory.md +36 -15
package/docs/copy-registry.json +239 -28
package/docs/file-map.md +1 -1
package/docs/module-api-changelog.md +4 -0
package/modules/hall-ui/public/atlas.html +1 -1
package/modules/hall-ui/public/blockers.html +1 -1
package/modules/hall-ui/public/board-room.html +1 -1
package/modules/hall-ui/public/collab.html +1 -1
package/modules/hall-ui/public/copy-desk.html +1 -1
package/modules/hall-ui/public/deploy.html +1 -1
package/modules/hall-ui/public/diagrams.html +1 -1
package/modules/hall-ui/public/drachmae.html +1 -1
package/modules/hall-ui/public/gate.html +1 -1
package/modules/hall-ui/public/goals.html +1 -1
package/modules/hall-ui/public/government.html +1 -1
package/modules/hall-ui/public/idea-objects.js +109 -0
package/modules/hall-ui/public/idea.html +1 -1
package/modules/hall-ui/public/ideas.html +1 -1
package/modules/hall-ui/public/index.html +1 -1
package/modules/hall-ui/public/modules.html +1 -1
package/modules/hall-ui/public/people.html +1 -1
package/modules/hall-ui/public/primer.html +1 -1
package/modules/hall-ui/public/profile.html +1 -1
package/modules/hall-ui/public/project-settings.html +1 -1
package/modules/hall-ui/public/ranks.html +1 -1
package/modules/hall-ui/public/roadmap.html +1 -1
package/modules/hall-ui/public/roster.html +1 -1
package/modules/hall-ui/public/sessions.html +1 -1
package/modules/hall-ui/public/settings.html +1 -1
package/modules/hall-ui/public/shell.js +11 -0
package/modules/hall-ui/public/studio.html +1 -1
package/modules/hall-ui/public/style.css +10 -0
package/modules/hall-ui/public/task.html +1 -1
package/modules/hall-ui/public/thinking.css +277 -0
package/modules/hall-ui/public/thinking.html +74 -0
package/modules/hall-ui/public/thinking.js +418 -0
package/modules/hall-ui/public/thinking.states.json +20 -0
package/modules/hall-ui/public/watch.html +1 -1
package/modules/hall-ui/public/work.html +1 -1
package/package-lock.json +2 -2
package/package.json +1 -1
package/src/bongos/serve-internal.js +7 -1
package/src/module-api.js +1 -1
package/tests/hall_board_world.mjs +32 -0
package/tests/hall_nav.mjs +1 -1
package/tests/hall_page_gate_map.mjs +6 -0
package/tests/hall_thinking_room.mjs +366 -0
package/tests/helpers.mjs +124 -0
package/tests/nav_permission_atoms.mjs +1 -1

package/modules/hall-ui/public/thinking.html ADDED Viewed

@@ -0,0 +1,74 @@
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>Your thinking — {{worldName}}</title>
+  <meta name="description" content="Everything you filed and what became of it: what it became, how much work it caused, and whether that work is still alive.">
+  <link rel="icon" href="data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'><text x='16' y='24' font-size='24' text-anchor='middle' font-family='sans-serif'>⌂</text></svg>">
+  <link rel="preconnect" href="https://fonts.googleapis.com">
+  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+  <link rel="stylesheet" href="/builders/style.css?v=2026-07-02-shell1">
+  <link rel="stylesheet" href="/builders/thinking.css">
+</head>
+<!-- THE PAGE THE SPEC CALLS "THE ROOM" (task 1004098 / BV2.R03). The file is
+     `thinking` and not `room` because `room.css` is already taken, by the hall's
+     READING-ROOM archetype (the primer, diagrams, drachmae — task 1003306,
+     ADR 0228), and `board-room` is the government surface. Three unrelated
+     rooms in one directory is a collision waiting to be made by whoever next
+     links a sheet into a page; the page's own h1 is the design's phrase, so
+     nothing about the vocabulary is lost by naming the file after it. -->
+<body data-page="thinking" data-page-title="Your thinking">
+<div class="app">
+  <aside class="app-sidebar" id="app-sidebar" aria-label="Primary"></aside>
+  <div class="app-scrim" id="app-scrim" hidden></div>
+  <div class="app-body">
+    <header class="app-topbar" id="app-topbar"></header>
+    <div class="app-content">
+      <!-- The LABEL voice, like every other working surface: the page's own name
+           is the least interesting thing on it (modules/hall-ui/CLAUDE.md, the
+           two page-head voices). The room is a working surface, not a document,
+           so it takes the board's head and not the reading room's. -->
+      <div class="page-head page-head--board">
+        <h1 class="page-head__h">Your thinking</h1>
+        <p class="page-head__sub" id="tr-sub">Loading what you filed…</p>
+      </div>
+      <main id="hall-main">
+        <section class="scroll" id="tr-scroll" aria-labelledby="tr-h">
+          <h2 id="tr-h" class="scroll__h">What you filed, and what became of it</h2>
+          <p class="scroll__lede">
+            Your own view of your own thinking. Size is the work a thought caused and
+            never falls; brightness is how much of that work is still alive — that is
+            the part that can go out.
+          </p>
+          <!-- The figures, the filters and the rows are all written by
+               thinking.js from ONE read, so nothing here can be a second copy of
+               a number the server already computed. -->
+          <div id="tr-figs" class="tr-figs" role="status" aria-live="polite"></div>
+          <div id="tr-filters" class="tr-filters" role="group" aria-label="Show only"></div>
+          <div id="tr-body"><p class="tr-note">Loading…</p></div>
+          <p class="tr-foot" id="tr-foot" hidden></p>
+        </section>
+      </main>
+      <footer class="app-foot" id="app-foot"></footer>
+    </div>
+  </div>
+</div>
+<div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
+<script src="/builders/shell.js?v=2026-09-20-room1"></script>
+<script src="/builders/palette.js" defer></script>
+<script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
+<!-- The filter strip is the kit's tab strip (makeTabs) rather than a fifth
+     hand-rolled pill row: it already carries the count pills, the hash sync and
+     the narrow-screen scroller this page would otherwise reinvent. -->
+<script src="/builders/hall-kit.js"></script>
+<script src="/builders/idea-objects.js?v=2026-09-20-r03"></script>
+<script src="/builders/thinking.js?v=2026-09-20-r03"></script>
+</body>
+</html>

package/modules/hall-ui/public/thinking.js ADDED Viewed

@@ -0,0 +1,418 @@
+// modules/hall-ui/public/thinking.js — THE ROOM (task 1004098 / BV2.R03 of
+// goal 1000095, criterion `ideator-nothing-is-lost`; spec
+// docs/specs/bongos-v2-ideator-surface.md, the agreed shape is
+// docs/design/mocks/ideator-surface/Room.dc.html).
+//
+// "A plain overview of one's own thinking: what was filed, what it became, its
+// size, and whether it still burns." It is deliberately unglamorous — rows, a
+// size, a state — because it is the page a person opens daily and the sky is
+// the ambient one.
+//
+// IT IS THE AUTHOR'S OWN VIEW, and that is spec decision 19 rather than a
+// convenience: the profile's idea trail (profile.js, `activity-ideas`) stays
+// exactly as it is, because it is what SOMEONE ELSE sees on you — three columns,
+// capped, inside an activity log about a person. This page is about the
+// thinking, not about the thinker, so it reads your own trail whole and spends
+// its width on what the profile has no room for: the size and the state. The
+// two surfaces share a READ and nothing else, which is why neither is built out
+// of the other.
+//
+// EVERY NUMBER ON THIS PAGE IS THE SERVER'S. `GET /inbox/by-builder/:id`
+// composes four attachers over each trail row — the descent, what it paid
+// (`size`), which of the five objects it is (`state`) — and this file draws
+// them. It derives no state, compresses no size and counts no brightness:
+// modules/ideas/idea-state.js exists precisely so that the room, the descent
+// and the sky cannot answer the same question three ways (ADR 0322), and the
+// word for each object comes from the one shared table in ./idea-objects.js.
+//
+// WHY IT LOADS THE WHOLE TRAIL AND NOT ONE PAGE OF IT. The four figures over
+// the list — filed / ignited / still burning / burned out — are a claim about a
+// person's whole body of thinking, and computed over a 20-row window they would
+// be a claim about a window while looking exactly like a claim about a life.
+// So the page renders its first window immediately (the read is not cheap: a
+// descent walk and a ledger read per page) and then keeps fetching in the
+// background, re-rendering as it goes, until the trail is exhausted or the cap
+// below is reached. If the cap is reached the foot SAYS the figures cover the
+// newest N — an honest partial beats a silent one.
+(() => {
+  'use strict';
+  const API = '/api/bongos';
+  // baseUrl:'' — this page builds full paths itself through api.request, the
+  // way work.js and copy-desk.js do, because the trail read is reached by a
+  // path the generated namespaced client does not carry a method for. The two
+  // idioms must never be mixed on one page (see idea.js's note on what happens
+  // when they are).
+  const api = window.BongosClient.createClient({ baseUrl: '', credentials: 'same-origin', throwOnError: false });
+  const { escapeHtml, $, fmtDate } = window.OTB;
+  const objects = window.OTBIdeaObjects;
+  const hallBase = () => (location.hostname.startsWith('builders.') ? '' : '/builders');
+  const ideaHref = (id) => `${hallBase()}/idea/${encodeURIComponent(id)}`;
+  const taskHref = (id) => `${hallBase()}/task/${encodeURIComponent(id)}`;
+  // The server's own ceiling (modules/ideas/trail.js IDEA_TRAIL_MAX_LIMIT), so
+  // the background load takes the fewest round trips the route allows.
+  const PAGE = 100;
+  // Three pages. A trail longer than this exists — and when it does the foot
+  // says so rather than the figures quietly describing the newest 300 as though
+  // they described everything.
+  const CAP = 300;
+  const state = {
+    ideas: [],
+    total: 0,
+    capped: false,
+    loading: false,
+    filter: 'everything',
+    tabs: null,
+  };
+  // ---- what a row says it became -------------------------------------------
+  //
+  // The OUTCOME column, and the one place this file composes a sentence rather
+  // than printing a field. It is built from the ledger facts the row already
+  // carries and never from the state: a satellite says it was folded in because
+  // `merged_into_idea_id` is set, not because the resolver called it a
+  // satellite — so a disagreement between the two shows up as a visibly odd row
+  // instead of being smoothed over into agreement.
+  //
+  // `descent_tasks` is what the roots went on to cause, and it deliberately
+  // EXCLUDES those roots (attachDescentToTrail leaves them out so the first hop
+  // is not paid twice), which is why the two counts are added rather than one
+  // being read as the whole.
+  function becameHtml(idea) {
+    if (idea.merged_into_idea_id) {
+      const title = idea.merged_into_idea_title || `idea ${idea.merged_into_idea_id}`;
+      return `folded into <a href="${ideaHref(idea.merged_into_idea_id)}">${escapeHtml(title)}</a>`;
+    }
+    const lineage = Array.isArray(idea.lineage_tasks) ? idea.lineage_tasks : [];
+    const roots = new Set();
+    for (const t of lineage) if (t && t.task_id != null) roots.add(String(t.task_id));
+    // The legacy column is the only answer for a promotion that predates
+    // ideas_task_lineage (the same guard idea.js's descentRows() carries).
+    if (roots.size === 0 && idea.promoted_to_task_id != null) roots.add(String(idea.promoted_to_task_id));
+    if (roots.size === 0) {
+      if (idea.status === 'discarded') {
+        return idea.triage_note
+          ? `declined — ${escapeHtml(idea.triage_note)}`
+          : 'declined at triage';
+      }
+      return '<span class="tr-quiet">nothing yet</span>';
+    }
+    const bits = [];
+    // A single root gets its name and a link, because with one task the title
+    // IS the outcome. Several get a count — five titles in a cell is not an
+    // overview, which is what this page is.
+    if (roots.size === 1) {
+      const id = [...roots][0];
+      const named = lineage.find((t) => t && String(t.task_id) === id);
+      const title = (named && named.title) || idea.promoted_task_title || `task ${id}`;
+      bits.push(`<a href="${taskHref(id)}">${escapeHtml(title)}</a>`);
+    } else {
+      bits.push(`${roots.size} tasks`);
+    }
+    const descent = Array.isArray(idea.descent_tasks) ? idea.descent_tasks : [];
+    if (descent.length > 0) {
+      bits.push(`<span class="tr-quiet">and ${descent.length} more below ${descent.length === 1 ? 'it' : 'them'}</span>`);
+    }
+    // The nod is the one ACTIONABLE thing this column can carry: a task sitting
+    // at backlog inside a goal is one Metic+ promote from claimable, and the
+    // whole point of surfacing position (idea-state.js) was that the queue
+    // becomes something a person can see rather than remember to open.
+    const pos = objects.positionWord(idea.state);
+    if (pos === 'waiting for a nod') bits.push('<span class="tr-nod">waiting for a nod</span>');
+    return bits.join(' · ');
+  }
+  // ---- size ----------------------------------------------------------------
+  //
+  // The bar's width is the server's `scale` and nothing else. Size is
+  // long-tailed, so economy compresses it ONCE at the read
+  // (modules/economy/idea-size.js compressIdeaSize) and the direction is
+  // explicit that the compressed value is what a drawing uses while the true
+  // figure is shown beside it. A second curve here — a log of a log — is
+  // exactly how the sky and the room would end up drawing the same thought at
+  // two different sizes.
+  function sizeHtml(idea) {
+    const size = idea.size;
+    if (!size || typeof size.credits !== 'number') {
+      // `size: null` is "the reward port could not be asked", not "it earned
+      // nothing" (trail-size.js). Drawing it as a zero would be a claim.
+      return '<span class="tr-quiet" title="the ledger could not be read">unknown</span>';
+    }
+    if (size.credits <= 0) return '<span class="tr-quiet">—</span>';
+    const pct = Math.max(4, Math.round(Number(size.scale || 0) * 100));
+    // A size computed from the descent an idea already had, rather than from
+    // payouts actually made (spec decision 17). The marker rides wherever the
+    // number is shown or the number quietly claims to be money that was spent.
+    const mark = size.historical === true
+      ? '<abbr class="tr-hist" title="computed from the descent this idea already had — not payouts that were made">part historical</abbr>'
+      : '';
+    // THE BAR KEEPS ITS WIDTH AND LOSES ITS COLOUR WHEN THE WORK IS GONE, which
+    // is the agreed shape (Room.dc.html draws the bar in the accent only while
+    // `alive > 0`) and the picture the whole two-channel model exists for: a
+    // thought that caused a great deal of work the project then tore out reads
+    // LARGE AND DEAD, not small. Width is size and never falls; colour is the
+    // live channel. Set from the same `state` the object column draws, so the
+    // two cells of a row cannot disagree — and only when the removal facts were
+    // actually READABLE, because `brightness: null` is "we could not look" and
+    // greying a bar on that basis would state something nobody checked.
+    const st = idea.state;
+    const out = st && st.attributable === true && st.hasWork === true && st.brightness === 0;
+    return `<span class="tr-size"${out ? ' data-lit="out"' : ''}>
+        <span class="tr-size__bar" style="--w:${pct}%"></span>
+        <span class="tr-size__n">${escapeHtml(String(size.credits))}</span>
+      </span>${mark}`;
+  }
+  // ---- the object ----------------------------------------------------------
+  //
+  // The mark restates in SHAPE what the cell also says in words — the sheet's
+  // own rule for the grade badge, and the reason the glyph is not decoration: a
+  // mark distinguished only by colour tells a colour-blind reader nothing.
+  // Brightness rides the glyph's opacity AND the sentence beside it, so dimness
+  // is never the only channel either.
+  function objectHtml(idea) {
+    const st = idea.state;
+    const o = objects.objectFor(st && st.state);
+    const bright = objects.brightnessWord(st);
+    const pos = objects.positionWord(st);
+    // `brightness: null` on a thought that HAS work means the removal facts
+    // could not be read. It must not be drawn as a dim star — the glyph stays
+    // full and the words carry the doubt.
+    const lit = (st && st.hasWork === true && st.attributable === true && typeof st.brightness === 'number')
+      ? st.brightness
+      : 1;
+    const sub = bright || pos || o.blurb.split('.')[0];
+    return `<span class="tr-obj" data-object="${escapeHtml(String((st && st.state) || 'unknown'))}" style="--lit:${lit.toFixed(2)}">
+        <span class="tr-obj__glyph" aria-hidden="true"></span>
+        <span class="tr-obj__body">
+          <span class="tr-obj__label">${escapeHtml(o.label)}</span>
+          <span class="tr-obj__sub">${escapeHtml(sub)}</span>
+        </span>
+      </span>`;
+  }
+  function rowHtml(idea) {
+    const st = idea.state;
+    // NO ID COLUMN, which is the agreed shape (the mock's five columns are the
+    // thought, filed, became, size, object) and not only a saving of width: an
+    // id is a lookup key, and on the one page where every row is YOURS there is
+    // nothing to look up — you know which thought it is by reading it. The id
+    // is still one click away, on the record the title links to, and it rides
+    // the link's title so it can be copied without leaving.
+    return `<tr data-object="${escapeHtml(String((st && st.state) || 'unknown'))}">
+      <td class="tr-thought"><a href="${ideaHref(idea.id)}" title="Idea ${escapeHtml(String(idea.id))}">${escapeHtml(idea.title || `Idea ${idea.id}`)}</a></td>
+      <td class="ledger__date">${escapeHtml(fmtDate(idea.captured_at))}</td>
+      <td class="tr-became">${becameHtml(idea)}</td>
+      <td class="tr-sizecell">${sizeHtml(idea)}</td>
+      <td class="tr-objcell">${objectHtml(idea)}</td>
+    </tr>`;
+  }
+  // ---- the figures ---------------------------------------------------------
+  //
+  // Four counts, each one a plain tally over the rows in hand — no thresholds
+  // and no judgement. "filed" is the SERVER's total rather than the loaded
+  // length, because that one is knowable in full from the first response even
+  // when the rest is still arriving.
+  //
+  // "ignited" is `hasWork`, which is the resolver's own word for "this has been
+  // paid for something" — not a status. An idea can be promoted, sit in a goal,
+  // and have ignited nothing; that is the distinction the direction draws and
+  // counting statuses here would erase it.
+  function figuresHtml() {
+    const rows = state.ideas;
+    const by = (fn) => rows.filter(fn).length;
+    const figs = [
+      { n: state.total, label: 'filed', tone: '' },
+      { n: by((i) => i.state && i.state.hasWork === true), label: 'ignited', tone: '' },
+      { n: by((i) => i.state && i.state.state === 'star'), label: 'still burning', tone: 'warm' },
+      { n: by((i) => i.state && i.state.state === 'remnant'), label: 'burned out', tone: 'dim' },
+    ];
+    return figs.map((f) => `<div class="tr-fig"${f.tone ? ` data-tone="${f.tone}"` : ''}>
+        <span class="tr-fig__n">${escapeHtml(String(f.n))}</span>
+        <span class="tr-fig__label">${escapeHtml(f.label)}</span>
+      </div>`).join('');
+  }
+  // ---- the filter strip ----------------------------------------------------
+  //
+  // The tab ids ARE the five state values, so a deep link is `#remnant` and the
+  // strip cannot drift from the vocabulary: the order comes from
+  // idea-objects.js ORDER and the labels from its table.
+  //
+  // A tab whose count is zero is HIDDEN rather than shown empty or disabled.
+  // Five dead pills over a new builder's two ideas is noise about objects they
+  // do not have; the strip grows as their thinking does. It is done by
+  // visibility and not by rebuilding the strip, so the hash of a filter that
+  // later empties still resolves instead of throwing.
+  function buildTabs() {
+    const kit = window.OTBKit;
+    const mount = $('#tr-filters');
+    if (!kit || !mount || state.tabs) return;
+    const tabs = [{ id: 'everything', label: 'everything' }].concat(
+      objects.ORDER.map((id) => ({ id, label: objects.objectFor(id).label }))
+    );
+    state.tabs = kit.makeTabs({
+      mount,
+      tabs,
+      hash: true,
+      // syncTabs BEFORE the rows, and not only on a load: the "never hide the
+      // filter the reader is looking through" rule is a property of the
+      // CURRENT filter, so it has to be re-applied whenever that changes. A
+      // filter can be selected without a load — the strip syncs its hash, so
+      // `#remnant` on a trail with no remnants arrives here directly — and
+      // painting rows alone would leave the reader on an empty list whose
+      // control had just been hidden.
+      onChange: (id) => { state.filter = id; syncTabs(); paintRows(); },
+    });
+  }
+  function syncTabs() {
+    if (!state.tabs) return;
+    const counts = { everything: state.ideas.length };
+    for (const id of objects.ORDER) counts[id] = 0;
+    for (const i of state.ideas) {
+      const k = i.state && i.state.state;
+      if (k in counts) counts[k] += 1;
+    }
+    for (const id of Object.keys(counts)) {
+      state.tabs.setCount(id, counts[id]);
+      const btn = state.tabs.el.querySelector(`[data-tab="${window.CSS.escape(id)}"]`);
+      // The active filter is never hidden, even at zero: hiding the control a
+      // reader is currently looking through would leave them staring at an
+      // empty list with no way back to everything.
+      if (btn) btn.hidden = counts[id] === 0 && id !== 'everything' && id !== state.filter;
+    }
+  }
+  // ---- painting ------------------------------------------------------------
+  function visibleIdeas() {
+    if (state.filter === 'everything') return state.ideas;
+    return state.ideas.filter((i) => i.state && i.state.state === state.filter);
+  }
+  function paintRows() {
+    const rows = visibleIdeas();
+    const body = $('#tr-body');
+    if (rows.length === 0) {
+      body.innerHTML = state.ideas.length === 0
+        ? `<p class="tr-empty">You have not filed anything yet. <a href="${hallBase()}/ideas">File a thought</a> — it takes one line.</p>`
+        : `<p class="tr-empty">Nothing of yours is ${escapeHtml(objects.objectFor(state.filter).label)} right now.</p>`;
+      return;
+    }
+    body.innerHTML = `<table class="ledger tr-table">
+      <thead><tr>
+        <th>The thought</th>
+        <th class="ledger__date">Filed</th>
+        <th>Became</th>
+        <th>Size</th>
+        <th>Object</th>
+      </tr></thead>
+      <tbody>${rows.map(rowHtml).join('')}</tbody>
+    </table>`;
+  }
+  function paint() {
+    $('#tr-figs').innerHTML = figuresHtml();
+    syncTabs();
+    paintRows();
+    const foot = $('#tr-foot');
+    const bits = [];
+    if (state.loading) bits.push(`Reading the rest of your trail — ${state.ideas.length} of ${state.total} so far.`);
+    else if (state.capped) bits.push(`Showing your newest ${state.ideas.length} of ${state.total}; the figures above count those.`);
+    if (!state.loading && !state.capped && state.ideas.length > 0) {
+      bits.push('Size never falls. Brightness is how much of the work a thought caused is still alive, and that is the part that can go out.');
+    }
+    foot.innerHTML = bits.map((b) => escapeHtml(b)).join(' ');
+    foot.hidden = bits.length === 0;
+  }
+  function subLine() {
+    const sub = $('#tr-sub');
+    if (!sub) return;
+    sub.textContent = state.total === 0
+      ? 'Nothing filed yet'
+      : `${state.total} thought${state.total === 1 ? '' : 's'} filed`;
+  }
+  // ---- the read ------------------------------------------------------------
+  async function fetchPage(builderId, offset) {
+    const r = await api.request('GET',
+      `${API}/inbox/by-builder/${encodeURIComponent(builderId)}?limit=${PAGE}&offset=${offset}`);
+    if (r.status === 401) { window.location.assign(`${API}/auth/web/start`); return null; }
+    if (!r.ok || !r.data) throw new Error(`idea trail → ${r.status}`);
+    return r.data;
+  }
+  function fail(msg) {
+    $('#tr-body').innerHTML = `<p class="tr-empty">${escapeHtml(msg)}</p>`;
+    $('#tr-foot').hidden = true;
+  }
+  async function main() {
+    // Who is looking. The page is the AUTHOR's own view, so the id is the
+    // viewer's and never a query parameter: /thinking?builder=41 would be a
+    // second, worse profile page, and the profile already exists.
+    const me = await api.request('GET', `${API}/me`);
+    if (me.status === 401) { window.location.assign(`${API}/auth/web/start`); return; }
+    if (!me.ok || !me.data || !me.data.builder) return fail('Could not work out who you are — try signing in again.');
+    const builderId = me.data.builder.id;
+    let first;
+    try {
+      first = await fetchPage(builderId, 0);
+    } catch (_) {
+      return fail('Could not read your idea trail.');
+    }
+    if (!first) return;
+    state.ideas = Array.isArray(first.ideas) ? first.ideas : [];
+    state.total = Number(first.total) || state.ideas.length;
+    state.loading = state.ideas.length < state.total && state.ideas.length < CAP;
+    subLine();
+    buildTabs();
+    paint();
+    // The rest, in the background. A failure here leaves the first window
+    // rendered and says so in the foot rather than blanking a page that is
+    // already useful — the same posture idea.js takes with its /me read.
+    while (state.loading) {
+      let next;
+      try {
+        next = await fetchPage(builderId, state.ideas.length);
+      } catch (_) {
+        state.loading = false;
+        state.capped = true;
+        break;
+      }
+      if (!next) return;
+      const batch = Array.isArray(next.ideas) ? next.ideas : [];
+      state.total = Number(next.total) || state.total;
+      if (batch.length === 0) { state.loading = false; break; }
+      state.ideas = state.ideas.concat(batch);
+      if (state.ideas.length >= CAP && state.ideas.length < state.total) {
+        state.capped = true;
+        state.loading = false;
+      } else if (state.ideas.length >= state.total) {
+        state.loading = false;
+      }
+      subLine();
+      paint();
+    }
+    paint();
+  }
+  main();
+})();

package/modules/hall-ui/public/thinking.states.json ADDED Viewed

@@ -0,0 +1,20 @@
+{
+  "_": "THE ROOM (task 1004098 / BV2.R03) through modules/ui-design/kit/render.js. Every row on this page comes from ONE authenticated read, so against the kit's own stub it renders its signed-out / empty state — which is a state the floors must hold in and is rendered here deliberately. To look at the populated page, run it against the hall-preview harness, whose inbox__by-builder.json fixture carries one of each of the five objects plus a historical size and an unreadable brightness:\n\n  node scripts/hall-preview/server.js --port 4615 --fixture-me\n  node modules/ui-design/kit/render.js --states modules/hall-ui/public/thinking.states.json --base-in http://localhost:4615 --base-out http://localhost:4615",
+  "page": "/builders/thinking",
+  "surface": "hall-ui",
+  "stub": { "prefix": "/builders/" },
+  "modeQuery": false,
+  "ignoreRequests": ["/api/(gds|bongos)/"],
+  "ignoreConsole": ["/api/(gds|bongos)/", "\\b401\\b", "\\b404\\b", "Unauthorized", "Not Found", "load failed"],
+  "states": {
+    "room": { "auth": true, "actions": [["wait", 900]], "expect": { "visible": ["#tr-figs", "#tr-body"] } },
+    "burning": {
+      "auth": true,
+      "_": "The filter strip is the page's only control, and the state it selects is the one a person opens this page for. clickIfVisible and not click: the tab is HIDDEN when the trail carries no stars, which is exactly what the kit's own stub produces, so a bare click would fail the state rather than render it.",
+      "actions": [["wait", 900], ["clickIfVisible", "[data-tab=\"star\"]"], ["wait", 200]],
+      "expect": { "visible": ["#tr-body"] }
+    },
+    "out": { "auth": false, "actions": [["wait", 600]] }
+  },
+  "reducedMotion": { "auth": true, "actions": [["wait", 900]] }
+}

package/modules/hall-ui/public/watch.html CHANGED Viewed

@@ -162,7 +162,7 @@
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
-<script src="/builders/shell.js?v=2026-09-20-coreupdate1"></script>
+<script src="/builders/shell.js?v=2026-09-20-room1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before watch.js, which pulls from it. -->

package/modules/hall-ui/public/work.html CHANGED Viewed

@@ -151,7 +151,7 @@
 <!-- The app shell (sidebar + top bar + footer). Dependency-free; runs at parse
      time so the chrome exists before the deferred page scripts execute. -->
-<script src="/builders/shell.js?v=2026-09-20-coreupdate1"></script>
+<script src="/builders/shell.js?v=2026-09-20-room1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded FIRST so work.js can pull from it. -->

package/package-lock.json CHANGED Viewed

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.928",
+  "version": "1.19.930",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.928",
+      "version": "1.19.930",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.928",
+  "version": "1.19.930",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/src/bongos/serve-internal.js CHANGED Viewed

@@ -1154,8 +1154,14 @@ function mountInternalSurfaces(app) {
   // shells — and matched no gate at all. The shell carries no data and every
   // read behind it is gated server-side, so this closed an inconsistency rather
   // than an exposure; the point is that one URL cannot be two tiers at once.
+  // task 1004098 (BV2.R03): `thinking` — THE ROOM, a builder's own idea trail —
+  // joins the tier `ideas` sits on, for the same settled reason: there is no
+  // permission gate on having a thought. It needs no floor ABOVE sign-in either,
+  // because the page reads the VIEWER's own trail and nobody else's — the id it
+  // asks for comes from GET /me, never from the URL, so a rank could protect
+  // nothing here that the session does not already.
   const SIGNEDIN_BUILDERS_PAGE_RE =
-    /^\/builders\/(?:work|settings|atlas|modules|goals|roadmap|copy-desk|studio|ideas|collab|task|idea|primer(?:\.md)?|diagrams)(?:\.html)?\/?$/;
+    /^\/builders\/(?:work|settings|atlas|modules|goals|roadmap|copy-desk|studio|ideas|thinking|collab|task|idea|primer(?:\.md)?|diagrams)(?:\.html)?\/?$/;
   // The diagram image assets under /builders/diagrams/ ride the same tier as the
   // page that embeds them.
   const SIGNEDIN_BUILDERS_PREFIX_RE = /^\/builders\/diagrams\//;

package/src/module-api.js CHANGED Viewed

@@ -71,7 +71,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.928'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.930'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/hall_board_world.mjs CHANGED Viewed

@@ -470,6 +470,38 @@ test('the tab strip is left alone — it scrolls in its own row and never moved
   const strip = /\.setup__tabs\s*\{([^}]*)\}/.exec(styleCss) || /\.kit-tabs\s*\{([^}]*)\}/.exec(styleCss);
   assert.ok(strip, 'the tab strip rule is present');
   assert.match(strip[1], /overflow-x:\s*auto/, 'it scrolls itself, which is why it is not the overflow cause');
+  // …and the OTHER axis is named too (task 1004130). Per the overflow spec a
+  // non-`visible` value on one axis computes the other to `auto`, so the line
+  // above alone made the strip a vertical scroll container as well — and
+  // `.setup__tab`'s `margin-bottom: -1px` overflowed it by exactly 1px, so
+  // every hall page with tabs grew a vertical scrollbar that could not scroll.
+  // The regression is invisible on an overlay-scrollbar platform, which is why
+  // it is pinned here rather than left to be spotted in a screenshot.
+  assert.match(strip[1], /overflow-y:\s*hidden/,
+    'the strip pins overflow-y so the spec cannot promote it to a second scroller');
+  // `visible` would NOT do: beside an `auto` it is the value the spec rewrites,
+  // which is the bug itself. Only a value that suppresses the axis is legal.
+  assert.doesNotMatch(strip[1], /overflow-y:\s*(visible|auto|scroll)\b/,
+    'overflow-y: visible/auto/scroll would put the stray scrollbar straight back');
+  // The 1px that overflows is the underline sitting ON the strip's hairline —
+  // the intended look, and the reason the axis is suppressed instead of the
+  // margin being removed.
+  const tab = rule(styleCss, '.setup__tab');
+  assert.ok(tab, '.setup__tab rule present in style.css');
+  assert.match(tab, /margin-bottom:\s*-1px/,
+    'the tab underline still overlaps the strip hairline — the overflow-y pin is what makes that free');
+});
+// The page-local workaround the room carried while the shared rule was broken
+// is gone with it (task 1004130, done-when 3). A stale duplicate would be a
+// comment in the tree asserting a defect that no longer exists.
+test('the room no longer carries its own copy of the tab-strip fix', () => {
+  const thinkingCss = read('thinking.css');
+  assert.doesNotMatch(thinkingCss, /\.kit-tabs\s*\{[^}]*overflow-y/,
+    'thinking.css must not restate overflow-y on .kit-tabs — style.css owns it now');
 });
 // ---- the board's filters drive BOTH queue tabs (task 1003828) ---------------

package/tests/hall_nav.mjs CHANGED Viewed

@@ -258,7 +258,7 @@ test('sidebar groups read by audience, in order', () => {
   // task 1003455 (goal 1000089): 'blockers' joins the same group, after Tasks —
   // its subject is the project (what's stuck on the owner), not a person or a
   // craft, and its one data source (GET /blockers) is public like Roadmap's.
-  assert.deepEqual(nav[0].items.map((i) => i.id), ['home', 'roadmap', 'goals', 'work', 'blockers', 'board-room', 'ideas', 'copy-desk', 'studio'],
+  assert.deepEqual(nav[0].items.map((i) => i.id), ['home', 'roadmap', 'goals', 'work', 'blockers', 'board-room', 'ideas', 'thinking', 'copy-desk', 'studio'],
     'the unlabeled group is the project itself (task 1002425 order)');
   assert.deepEqual(nav[1].items.map((i) => i.id), ['standing', 'profile'], 'You = your own numbers');
   // People (task 1002577): the /scouting directory graduated into the hall.

package/tests/hall_page_gate_map.mjs CHANGED Viewed

@@ -60,6 +60,12 @@ const ORACLE = {
   // themselves server-side.
   '/builders/studio': 'requireBuilderPage',
   '/builders/ideas': 'requireBuilderPage',
+  // THE ROOM (task 1004098 / BV2.R03) — a builder's own idea trail. Sign-in and
+  // no rank floor, the tier /ideas sits on: there is no permission gate on
+  // having a thought, and the page reads the VIEWER's own trail (the id comes
+  // from GET /me, never from the URL), so a rank could protect nothing the
+  // session does not already.
+  '/builders/thinking': 'requireBuilderPage',
   '/builders/collab': 'requireBuilderPage',
   // task 1002710: the orientation reading rooms moved DOWN to this tier from a
   // thetes+ gate. They are the onboarding documents, so gating them above xenos