@bongos/core 1.19.989 → 1.19.991

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.989",
-  "core_contract": "1.19.989",
-  "source_commit": "e2ff7b827391116e3e99f4b850441ca7482a3466",
+  "core_version": "1.19.991",
+  "core_contract": "1.19.991",
+  "source_commit": "e80119e1a3eaf21835fda089e6279bdff4043c04",
   "source_ref": "HEAD",
-  "built_at": "2026-09-23T19:44:16.401Z",
+  "built_at": "2026-09-23T20:27:54.477Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 518,
     "agent_docs_stubbed": 26,
-    "functional_verbatim": 2394,
+    "functional_verbatim": 2398,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 2938,
-  "tree_sha256": "65dea20f4453b26ed36b673a7a34da0008c338d0f4307aa1b327f3171ce42cb0",
+  "file_count": 2942,
+  "tree_sha256": "2e7708f19e4b524ede30ec609d2809a2d7e6bc77953d5d3106cbd01170134253",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -2152,7 +2152,7 @@
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "b227cab471090f0e961366e0299ad4ac7195c9123e46215f4af7b3bd7cf7713b"
+      "sha256": "8b1f2a53680ae8b68be5d54a82664413fa29186fb580825f5a1b0e3ce3677525"
     },
     {
       "path": "docs/architecture.md",
@@ -2177,12 +2177,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "4c03ef54c19fb90810ecf5fe16be7fa65c0966031fecc8a2496cd4bbcb7bed33"
+      "sha256": "8a156552c9834ecaf51ba06b9e09ba6e5cf44ca486694570426eb9fc0248dab1"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "a269cd95254b4e6dace3b2c48becbb1e67d1516bb7387971f760505fee0e4464"
+      "sha256": "6e50226135d6bab2ca2538531c6680ea6ccbf5820240af0daba240623d2313d2"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2712,7 +2712,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "b06d9ffcfde6e55a0997ffa926a671d0f53478d5e7c351b92374485e359cc0cd"
+      "sha256": "4f19e3d159ebd6ef4268a44b5805c0ad09cedcfb482d4e36e486f892e1e8df6e"
     },
     {
       "path": "docs/modules-contract.md",
@@ -2832,7 +2832,7 @@
     {
       "path": "docs/recipes/core-release-pipeline.md",
       "mode": "0000644",
-      "sha256": "53721b3314eab8f538aa7027862253abdbdd41be59f9dce75431c1b40ef80e63"
+      "sha256": "12e2fdc72d1bed7d524b50960dea3a67791b098b7dbafaff9c6f95cd356b185a"
     },
     {
       "path": "docs/recipes/failed-ship-recovery-proof.md",
@@ -2962,7 +2962,7 @@
     {
       "path": "docs/recipes/upgrading-the-core.md",
       "mode": "0000644",
-      "sha256": "0df57ea34114fb1ae81389458334b392d768fc83d9e82eb00fa917219189de87"
+      "sha256": "e035ebbda54d0d94f38bbcc9502689318c4f9bb2fe5bcca2592aa710dca5ffb0"
     },
     {
       "path": "docs/recipes/windows-builders.md",
@@ -4922,12 +4922,12 @@
     {
       "path": "modules/hall-ui/public/goal-forest-lib.js",
       "mode": "0000644",
-      "sha256": "a6e105100fcc8d1e6f15510bb44a8c8a86c5a652924629dfa846474d488637fc"
+      "sha256": "f4eef6f9ec782aa76369b98cbbd95152ab0e11858a4bb9d2c2f9839a1d71a08c"
     },
     {
       "path": "modules/hall-ui/public/goal-forest-render.js",
       "mode": "0000644",
-      "sha256": "69b010afbc63268d446dd1341261a2a3c611562bd28eea81dfc0505928ec5d8e"
+      "sha256": "9edf4cf99fe2726e75b4ac21b6f41a5e51ecc1b933659ac0f9c7d98c3de217b1"
     },
     {
       "path": "modules/hall-ui/public/goal-inbox.js",
@@ -4937,7 +4937,7 @@
     {
       "path": "modules/hall-ui/public/goal-map-lib.js",
       "mode": "0000644",
-      "sha256": "38f59b8c332323256bad987e1a7825b10dadc18e4ce46a3c18003ca6e189b5f5"
+      "sha256": "6f08884ef3afabb1ffc455995a0bd99ac8f7084cbb86eda39594eaa09326cba6"
     },
     {
       "path": "modules/hall-ui/public/goal-map.css",
@@ -4947,12 +4947,12 @@
     {
       "path": "modules/hall-ui/public/goal-map.html",
       "mode": "0000644",
-      "sha256": "f2d80f3812108c42820d5808c9d8963e019c97bfa7d99ead905347b56f106dba"
+      "sha256": "faa6152938c0c90cef5e4dc1f179bab967e01acb05c015b0fe93fa7c782941da"
     },
     {
       "path": "modules/hall-ui/public/goal-map.js",
       "mode": "0000644",
-      "sha256": "d73ee8032c1d995cccc54eaa6c853dd91fe5813e311b5eff5188ae76d8bddeb4"
+      "sha256": "b24a1f2d78a727d928668a431f2d8af8a1c42c8bfba0986cb4026ecd5397dd8a"
     },
     {
       "path": "modules/hall-ui/public/goal-map.states.json",
@@ -4982,7 +4982,7 @@
     {
       "path": "modules/hall-ui/public/goals.html",
       "mode": "0000644",
-      "sha256": "c1236c20825ed1c767b29d5b3bdfca502e0a40439cfeb84b58d65923c267705a"
+      "sha256": "597efb7e4a968892fdb1eaa8a113631aeb445c1a772520e81b80c53db572d3e3"
     },
     {
       "path": "modules/hall-ui/public/goals.js",
@@ -5439,6 +5439,11 @@
       "mode": "0000644",
       "sha256": "1be94e892012740aae899aa28425f4be9c94a5ae777c8c77e5e1b787791f5ec9"
     },
+    {
+      "path": "modules/hall-ui/public/text-fit.js",
+      "mode": "0000644",
+      "sha256": "c63dd0fb358b8c5e649460c9fc1581573a0369cbe022fc9e1db02f69da6e92f7"
+    },
     {
       "path": "modules/hall-ui/public/thinking.css",
       "mode": "0000644",
@@ -6042,7 +6047,7 @@
     {
       "path": "modules/lifecycle/routes/artist-gate.js",
       "mode": "0000644",
-      "sha256": "6b7928201e9bb8c35691f388b1aa73c0986dd9d5e186796d8b087b7a1645ac96"
+      "sha256": "9b6990b00e071e2b47c20fc790f975db63563b700ffbd4a6b0c60dfd138f0def"
     },
     {
       "path": "modules/lifecycle/routes/claims.js",
@@ -8162,12 +8167,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "09936259916688c880c3c787419714a83a798ccf7fd09b50d7fe26d3d293e600"
+      "sha256": "8693404033a617a03140037d079df84b7e71b967394f7f4069b0681667761be8"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "126708cbc785a14f0cf42ef0a151889033a852f1a331e6ab73b0c75743f41856"
+      "sha256": "4b6ac3b9b46c3053276678a73c6aaef328f9a832523b8efc82386645aabc6345"
     },
     {
       "path": "public-docs/index.html",
@@ -9739,10 +9744,15 @@
       "mode": "0000644",
       "sha256": "6418f51f933eac634a7df854af1e3a6dbde25e152e3dca0ce8df7d37d19c1d0c"
     },
+    {
+      "path": "scripts/gds/upgrade-artist-gate.js",
+      "mode": "0000644",
+      "sha256": "caf07b70b066fe1388037ce1c622ea3aed82cbf43f67ffb918214159cbe4444e"
+    },
     {
       "path": "scripts/gds/upgrade.js",
       "mode": "0000644",
-      "sha256": "d736a08f303447e3889c478b0a22d6e9ae96e326f75bd57bead6199ffc23f1c5"
+      "sha256": "70a7de81b25a17cb7ab7e57f92577b6d977f89911b784f33df668b650fb208b0"
     },
     {
       "path": "scripts/gds/validate-design.js",
@@ -10202,7 +10212,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "5ed09f42ce4e04ca5f27bc3d4004ceab18bf604bd8a8fca72648afbf389b0935"
+      "sha256": "fa9ef668d1c3a3762533b0b74415725117d45c789d3f8b3b2c6cda3ab8344b47"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -10507,7 +10517,7 @@
     {
       "path": "tests/artist_gate_route.mjs",
       "mode": "0000644",
-      "sha256": "616c19815b83f6796856ad6000eda4ce1c66eb526ecc4c1b901abdd9c49b4285"
+      "sha256": "3337ab686f2fa4bef95d0eabcf9b134a9b919d40480750e07a500b8007ae9659"
     },
     {
       "path": "tests/asset_version.mjs",
@@ -11687,12 +11697,12 @@
     {
       "path": "tests/goal_forest_lib.mjs",
       "mode": "0000644",
-      "sha256": "ecced35bef62920319c038ee7d21f7d0914219c7b8640a39b219990fce3357ca"
+      "sha256": "3b309358c195469bee0ab1ce95242914fbc0b1b3def0bb7de3d51dc09dd29c6a"
     },
     {
       "path": "tests/goal_forest_page.mjs",
       "mode": "0000644",
-      "sha256": "f2fa1534f8a0dc3e4e8eee69f95407eea328584f6b25a4d8ca13e2445a42caa8"
+      "sha256": "fe78639b77de1a85351ae954b59572f22b9dbce4f6575894f9f019daa0e66f3a"
     },
     {
       "path": "tests/goal_graph.mjs",
@@ -11712,7 +11722,7 @@
     {
       "path": "tests/goal_map_page.mjs",
       "mode": "0000644",
-      "sha256": "181791ca5b7e5ed239180878838c2a826fc7ac68d7cd78352c569277a701d12b"
+      "sha256": "d51008e89e01a195663e4e983b598272decc1cc2f5020cb7ec8c133f98f373fe"
     },
     {
       "path": "tests/goal_member_kinds.mjs",
@@ -14439,6 +14449,11 @@
       "mode": "0000644",
       "sha256": "bbb0b063bffc6e394114bc4895da5006d8797a0317ed38f1c7f9b989841d5eab"
     },
+    {
+      "path": "tests/text_fit.mjs",
+      "mode": "0000644",
+      "sha256": "cf2bab75f91ee81bd554e83b85de7d80c64a3a44a596ef8abc37f646041f584b"
+    },
     {
       "path": "tests/tool-scan-fixtures/README.md",
       "mode": "0000644",
@@ -14549,6 +14564,11 @@
       "mode": "0000644",
       "sha256": "8bd1c116b5459b54a847208c01669159414fed17b3704d621e1dc5acfb00f255"
     },
+    {
+      "path": "tests/upgrade_artist_gate.mjs",
+      "mode": "0000644",
+      "sha256": "a9b5fadd7f829fd54a9d976d82832eb536e7d988c466647860b0257109feec50"
+    },
     {
       "path": "tests/upgrade_persist_pin.mjs",
       "mode": "0000644",

package/docs/api/openapi.json

@@ -1065,7 +1065,7 @@
           "artist-gate"
         ],
         "summary": "GET /artist-gate",
-        "description": "GET /artist-gate — this project's artist strictness and what it is holding. rank: any authenticated builder. The payload is ordinary board state — a policy value the instance already publishes as its own behaviour, and task ids/titles any builder can read on the hall — so a floor above requireBuilder would gate a fact the board already shows. Nothing here is writable. Response: mode 'off' | 'advisory' | 'strict' the project's setting as resolved since ISO string | null when it was last RAISED to strict holds boolean does anything hold a deploy now? truncated boolean `reviews` hit the scan cap — a floor reviews [{ id, created_at }] the open reviews that count halt { code, message, detail } | null the refusal, pre-composed `halt` is composed HERE rather than by the caller on purpose: ADR 0241 §4's second guard is that the refusal must name what holds the deploy and which control releases it, and a sentence assembled independently by each caller is a sentence that eventually says something different. One composer, one wording.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "description": "GET /artist-gate — this project's artist strictness and what it is holding. rank: any authenticated builder. The payload is ordinary board state — a policy value the instance already publishes as its own behaviour, and task ids/titles any builder can read on the hall — so a floor above requireBuilder would gate a fact the board already shows. Nothing here is writable. Response: mode 'off' | 'advisory' | 'strict' the project's setting as resolved since ISO string | null when it was last RAISED to strict holds boolean does anything hold a deploy now? truncated boolean `reviews` hit the scan cap — a floor reviews [{ id, created_at }] the open reviews that count halt { code, message, detail } | null the refusal, pre-composed `halt` is composed HERE rather than by the caller on purpose: ADR 0241 §4's second guard is that the refusal must name what holds the deploy and which control releases it, and a sentence assembled independently by each caller is a sentence that eventually says something different. One composer, one wording. A caller on this machine that reached the app DIRECTLY may also read it, without a session (task 1004205; owner decision 2026-09-23): that is how `bongos upgrade` on the box asks before moving the pin, and the box holds no builder session. Everything else still passes requireBuilder.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
         "x-source": "modules/lifecycle/routes/artist-gate.js",
         "responses": {

package/docs/copy-inventory.md

@@ -10,7 +10,7 @@
 
 | surface | lives at | files | strings |
 |---|---|---|---|
-| `builders-hall` | `modules/hall-ui/public` | 96 | 1442 |
+| `builders-hall` | `modules/hall-ui/public` | 97 | 1442 |
 | `status-dashboard` | `modules/status-ui/public` | 4 | 100 |
 | `landing` | `modules/public-landing/public` | 5 | 391 |
 
@@ -164,7 +164,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `86ea8d57d34e` | certain | Allowlisted goals | `modules/hall-ui/public/gate.js:286` |
 | `e99cc5d37404` | certain | Already a member? | `modules/hall-ui/public/hall-render.js:367` |
 | `da5368d10f85` | certain | Amendment {…} passed{…}, and the constitution below is not the one it decided: | `modules/hall-ui/public/government.js:633` |
-| `20365fc74500` | certain | An arrow runs from the goal that has to ship first to the goal that waits on it, and a thicker line means more | `modules/hall-ui/public/goal-map.js:98` |
+| `20365fc74500` | certain | An arrow runs from the goal that has to ship first to the goal that waits on it, and a thicker line means more | `modules/hall-ui/public/goal-map.js:115` |
 | `2ca420e19dbb` | certain | An earlier attempt did not land. | `modules/hall-ui/public/deploy.js:193` |
 | `69f0ca4a4d84` | certain | Analytics scope | `modules/hall-ui/public/hall-render.js:1236` |
 | `14bdceaac078` | certain | Answer the five questions and this spark becomes a Full Idea. | `modules/hall-ui/public/ideas.js:901` |
@@ -368,7 +368,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `278e8281c82f` | certain | Could not vote: {…} | `modules/hall-ui/public/board-room.js:391` |
 | `a48e9f098392` | certain | Could not {…} just now. | `modules/hall-ui/public/goals-render.js:1348` |
 | `cb09ee26014f` | certain | Could not {…}: {…} | `modules/hall-ui/public/government.js:314` |
-| `f53f7aaa189f` | certain | Couldn’t load this goal’s task dependencies right now. | `modules/hall-ui/public/goal-forest-render.js:110` |
+| `f53f7aaa189f` | certain | Couldn’t load this goal’s task dependencies right now. | `modules/hall-ui/public/goal-forest-render.js:111` |
 | `737bef533845` | certain | Couldn’t refresh the queue — try reloading the page. | `modules/hall-ui/public/blockers.js:285` |
 | `28ec06f6060a` | certain | Counted, not judged: each question is worth the same, and earns its share in proportion to how much real text  | `modules/hall-ui/public/ideas.html:194` |
 | `38827a954f3b` | certain | Create a custom rank first. | `modules/hall-ui/public/government.js:459` |
@@ -486,7 +486,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `3807521c5db7` | certain | Goal map | `modules/hall-ui/public/goal-map.html:19` |
 | `3807521c5db7` | certain | Goal map | `modules/hall-ui/public/goal-map.html:19` |
 | `3807521c5db7` | certain | Goal map | `modules/hall-ui/public/goal-map.html:28` |
-| `342253f7829f` | certain | Goal map — scrolls sideways inside this box | `modules/hall-ui/public/goal-map.js:98` |
+| `342253f7829f` | certain | Goal map — scrolls sideways inside this box | `modules/hall-ui/public/goal-map.js:115` |
 | `6d04fe4e0ee5` | certain | Goal map — {{worldName}} | `modules/hall-ui/public/goal-map.html:6` |
 | `6d04fe4e0ee5` | certain | Goal map — {{worldName}} | `modules/hall-ui/public/goal-map.html:6` |
 | `e2a9e33abe60` | certain | Goal tasks | `modules/hall-ui/public/goals.html:151` |
@@ -650,7 +650,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `ae84ebe1d735` | certain | Name cannot be blank. | `modules/hall-ui/public/settings.js:761` |
 | `31e91ee6ce03` | certain | Name must be {…} characters or fewer. | `modules/hall-ui/public/settings.js:766` |
 | `5e8199266a8a` | certain | Name unvouched | `modules/hall-ui/public/watch.js:374` |
-| `83197947ee8d` | certain | Needed by | `modules/hall-ui/public/goal-forest-render.js:145` |
+| `83197947ee8d` | certain | Needed by | `modules/hall-ui/public/goal-forest-render.js:146` |
 | `3970d299c95a` | certain | Needs work | `modules/hall-ui/public/studio.js:162` |
 | `7def635421ea` | certain | Needs your attention | `modules/hall-ui/public/goal-inbox.js:559` |
 | `87f09d983f6c` | certain | New category label | `modules/hall-ui/public/project-settings.js:138` |
@@ -688,7 +688,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `bef9fe43ba84` | certain | No sessions recorded yet. They land here as builders ship and end sessions. | `modules/hall-ui/public/sessions.js:146` |
 | `084748fd85b4` | certain | No shipped work is recorded between core {…} and {…}. | `modules/hall-ui/public/deploy.js:340` |
 | `4485497d87bb` | certain | No specialities yet. Create one below — it takes a name and a craft, and you can train it afterwards. | `modules/hall-ui/public/settings-specialities.js:169` |
-| `545dc44ad427` | certain | No task in this goal depends on another task in this goal. | `modules/hall-ui/public/goal-forest-render.js:125` |
+| `545dc44ad427` | certain | No task in this goal depends on another task in this goal. | `modules/hall-ui/public/goal-forest-render.js:126` |
 | `712b64d8273f` | certain | No tasks match these filters. Try widening them. | `modules/hall-ui/public/work.js:417` |
 | `78f78d1d1e1f` | certain | No version is in flight right now. | `modules/hall-ui/public/roadmap.js:409` |
 | `c9800f8b6bc8` | certain | No versions declared yet. | `modules/hall-ui/public/roadmap.js:427` |
@@ -975,7 +975,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `4894b1d9b0de` | certain | System oversight: people, operations and security. | `modules/hall-ui/public/watch.js:1335` |
 | `e604fc3ace79` | certain | Task # | `modules/hall-ui/public/blockers.js:139` |
 | `a0f384b022fd` | certain | Task dependencies | `modules/hall-ui/public/goals.html:140` |
-| `91576eb7c880` | certain | Task dependency forest — scrolls sideways inside this box | `modules/hall-ui/public/goal-forest-render.js:145` |
+| `91576eb7c880` | certain | Task dependency forest — scrolls sideways inside this box | `modules/hall-ui/public/goal-forest-render.js:146` |
 | `dfc967a63d57` | certain | Task lifecycle from backlog to shipped, showing states and transitions and the edge where credits are awarded. | `modules/hall-ui/public/diagrams.html:51` |
 | `10cc12f37636` | certain | Task sections | `modules/hall-ui/public/work.html:53` |
 | `0e636ea41b29` | certain | Task status | `modules/hall-ui/public/goals-render.js:354` |
@@ -1125,7 +1125,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `b1e63e33f739` | certain | Vulnerability reports, engagement reports, override requests, and the audit log. | `modules/hall-ui/public/watch.html:122` |
 | `411b2ff58094` | certain | Wait for task | `modules/hall-ui/public/task.js:611` |
 | `f2e019bfdbe8` | certain | Waiting to be developed | `modules/hall-ui/public/ideas.html:41` |
-| `8e4f0179e1d3` | certain | Waits on | `modules/hall-ui/public/goal-forest-render.js:145` |
+| `8e4f0179e1d3` | certain | Waits on | `modules/hall-ui/public/goal-forest-render.js:146` |
 | `3a9cd9a27a84` | certain | Walk the full ladder → | `modules/hall-ui/public/hall-render.js:84` |
 | `18f2f54de2a8` | certain | Watch sections | `modules/hall-ui/public/watch.html:54` |
 | `c1fcfa9b48c2` | certain | Watch — {{worldName}} | `modules/hall-ui/public/watch.html:6` |
@@ -1441,7 +1441,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `3efa67dc6e07` | certain | {…} file{…} | `modules/hall-ui/public/gate.js:151` |
 | `00c50715f271` | certain | {…} fundamentals · {…} you can change here | `modules/hall-ui/public/project-settings.js:228` |
 | `511a4b6073cf` | certain | {…} more PR{…} still being checked. Refresh shortly. | `modules/hall-ui/public/gate.js:225` |
-| `73c1372b43d9` | certain | {…} of {…} | `modules/hall-ui/public/goal-map.js:147` |
+| `73c1372b43d9` | certain | {…} of {…} | `modules/hall-ui/public/goal-map.js:170` |
 | `cc5106af4b35` | certain | {…} of {…} criteria satisfied | `modules/hall-ui/public/goals-lib.js:32` |
 | `cc5106af4b35` | certain | {…} of {…} criteria satisfied | `modules/hall-ui/public/goals-render.js:705` |
 | `cc5106af4b35` | certain | {…} of {…} criteria satisfied | `modules/hall-ui/public/goals.js:45` |
@@ -1459,9 +1459,9 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `955499559f0a` | certain | {…} tokens | `modules/hall-ui/public/sessions.js:170` |
 | `8e28c14b106d` | certain | {…} total | `modules/hall-ui/public/roadmap.js:120` |
 | `1a8a6267e490` | certain | {…} unfinished task{…} — say what happens to each | `modules/hall-ui/public/goals-render.js:1036` |
-| `f78fd28045b8` | certain | {…} waits on {…} — {…} | `modules/hall-ui/public/goal-map.js:64` |
+| `f78fd28045b8` | certain | {…} waits on {…} — {…} | `modules/hall-ui/public/goal-map.js:78` |
 | `3ad8f32dd43b` | certain | {…} you have sent | `modules/hall-ui/public/profile-connections.js:137` |
-| `ae6bb71c72da` | certain | {…} {…} no task that waits on another goal’s work, | `modules/hall-ui/public/goal-map.js:123` |
+| `ae6bb71c72da` | certain | {…} {…} no task that waits on another goal’s work, | `modules/hall-ui/public/goal-map.js:146` |
 | `8186b562553a` | certain | {…} {…} waiting | `modules/hall-ui/public/work.js:410` |
 | `0d4016a5531c` | certain | {…} {…}{…} | `modules/hall-ui/public/watch.js:474` |
 | `0d4016a5531c` | certain | {…} {…}{…} | `modules/hall-ui/public/work.js:249` |
@@ -1471,11 +1471,11 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `cab2a4296aec` | certain | {…} · {…} · {…}{…} | `modules/hall-ui/public/goal-inbox.js:420` |
 | `085f93f3f775` | certain | {…} — see all standings | `modules/hall-ui/public/hall-render.js:80` |
 | `f75ee96a7511` | certain | {…} — total payout from shipped work. | `modules/hall-ui/public/profile.js:94` |
-| `0d4e848206f3` | certain | {…} — {…} — {…} of {…} tasks done | `modules/hall-ui/public/goal-map.js:77` |
+| `0d4e848206f3` | certain | {…} — {…} — {…} of {…} tasks done | `modules/hall-ui/public/goal-map.js:91` |
 | `2a2728a4ec4f` | certain | {…}% of tasks complete | `modules/hall-ui/public/roadmap.js:63` |
 | `15e545eb3ce2` | certain | {…}, no such task | `modules/hall-ui/public/task.js:963` |
 | `c43050b62297` | certain | {…}/100 complete | `modules/hall-ui/public/idea.js:87` |
-| `eb85443721f7` | certain | {…}No category | `modules/hall-ui/public/goal-map.js:114` |
+| `eb85443721f7` | certain | {…}No category | `modules/hall-ui/public/goal-map.js:137` |
 | `cbc5a8c686b2` | certain | {…}We store only your GitHub login, avatar, and the work you ship. | `modules/hall-ui/public/hall-render.js:392` |
 | `8e8c7da4f7f5` | certain | {…}criteria met · awaiting review | `modules/hall-ui/public/goals-render.js:163` |
 | `1e275ee0299c` | certain | {…}s only | `modules/hall-ui/public/government.js:896` |

package/docs/copy-registry.json

@@ -12,7 +12,7 @@
   "surfaces": {
     "builders-hall": {
       "at": "modules/hall-ui/public",
-      "files": 96,
+      "files": 97,
       "strings": 1442
     },
     "status-dashboard": {
@@ -2645,7 +2645,7 @@
       "surface": "builders-hall",
       "text": "An arrow runs from the goal that has to ship first to the goal that waits on it, and a thicker line means more tasks are waiting. Every goal in this map, and every dependency, is also in the table below.",
       "file": "modules/hall-ui/public/goal-map.js",
-      "line": 98,
+      "line": 115,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -4481,7 +4481,7 @@
       "surface": "builders-hall",
       "text": "Couldn’t load this goal’s task dependencies right now.",
       "file": "modules/hall-ui/public/goal-forest-render.js",
-      "line": 110,
+      "line": 111,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -5543,7 +5543,7 @@
       "surface": "builders-hall",
       "text": "Goal map — scrolls sideways inside this box",
       "file": "modules/hall-ui/public/goal-map.js",
-      "line": 98,
+      "line": 115,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -7019,7 +7019,7 @@
       "surface": "builders-hall",
       "text": "Needed by",
       "file": "modules/hall-ui/public/goal-forest-render.js",
-      "line": 145,
+      "line": 146,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -7361,7 +7361,7 @@
       "surface": "builders-hall",
       "text": "No task in this goal depends on another task in this goal.",
       "file": "modules/hall-ui/public/goal-forest-render.js",
-      "line": 125,
+      "line": 126,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -9944,7 +9944,7 @@
       "surface": "builders-hall",
       "text": "Task dependency forest — scrolls sideways inside this box",
       "file": "modules/hall-ui/public/goal-forest-render.js",
-      "line": 145,
+      "line": 146,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -11294,7 +11294,7 @@
       "surface": "builders-hall",
       "text": "Waits on",
       "file": "modules/hall-ui/public/goal-forest-render.js",
-      "line": 145,
+      "line": 146,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -14138,7 +14138,7 @@
       "surface": "builders-hall",
       "text": "{…} of {…}",
       "file": "modules/hall-ui/public/goal-map.js",
-      "line": 147,
+      "line": 170,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -14300,7 +14300,7 @@
       "surface": "builders-hall",
       "text": "{…} waits on {…} — {…}",
       "file": "modules/hall-ui/public/goal-map.js",
-      "line": 64,
+      "line": 78,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -14318,7 +14318,7 @@
       "surface": "builders-hall",
       "text": "{…} {…} no task that waits on another goal’s work,",
       "file": "modules/hall-ui/public/goal-map.js",
-      "line": 123,
+      "line": 146,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -14408,7 +14408,7 @@
       "surface": "builders-hall",
       "text": "{…} — {…} — {…} of {…} tasks done",
       "file": "modules/hall-ui/public/goal-map.js",
-      "line": 77,
+      "line": 91,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -14444,7 +14444,7 @@
       "surface": "builders-hall",
       "text": "{…}No category",
       "file": "modules/hall-ui/public/goal-map.js",
-      "line": 114,
+      "line": 137,
       "origin": "js-markup",
       "confidence": "certain"
     },

package/docs/module-api-changelog.md

@@ -2451,6 +2451,10 @@ is load-bearing: the script throws rather than guess if it is missing, and
   1.19.988 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.987 with no explicit bump. run 35909292753. (task 1002620)
   1.19.989 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
-        landed since 1.19.988 with no explicit bump. run 35911149318. (task 1002620)
+        landed since 1.19.988 with no explicit bump. run 35911817390. (task 1002620)
+  1.19.990 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.989 with no explicit bump. run 35912578496. (task 1002620)
+  1.19.991 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.990 with no explicit bump. run 35916061384. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/docs/recipes/core-release-pipeline.md

@@ -207,6 +207,11 @@ There are three ways past it, and the first two are the ordinary ones:
      the audit log as a self-override. It is the valve that stops a solo project deadlocking,
      not a routine step: the right answer to being gated is to fix the work or fix the grader.
 
+**`bongos upgrade` asks the same gate** (task 1004205): the vendored `upgrade.js --from` run
+refuses before the pin moves, with the same halt, the same three ways past it and the same two
+unknowns below — it reuses `go-live.js`'s reader. Until then only `go-live.js` asked, and an
+instance that moved its pin by hand moved it past open reviews.
+
 `go-live.js` prints the gate's level on every plan, held or not, so "why did nothing stop?" is
 answerable without going and looking. Two different unknowns, two different verdicts:
 

package/docs/recipes/upgrading-the-core.md

@@ -10,6 +10,7 @@
 
 0. **downgrade guard** (task [#1004009](https://example.com/builders#/task/1004009)) — a `--to` **older** than this instance's core is refused before anything moves, in one line naming both versions and the newest published release. "This instance's core" is the **newer** of what is installed and what is pinned, because a half-applied bump leaves the two apart and the pin is the thing about to be overwritten. `--force` does not waive it; `--allow-downgrade` does, and the run then says `DOWNGRADE` in its first line, its last line and its `core_upgrades` ledger note. Migrations are never reverted, so going backwards across one leaves the DB ahead of the code; and an instance subscribed to an update channel is taken forward again by the next sweep, so set it to `pinned` first if the downgrade is meant to hold. Auto-rollback (step 8) restores its own pin and is unaffected.
 1. **pre-flight** — module-compat vs the target core + a clean git tree (skip with `--force`).
+1a. **the artist gate** (task [#1004205](https://example.com/builders#/task/1004205), [ADR 0241](../adr/0241-the-artist-gate-is-a-per-project-deploy-gate-that-reads-a-state.md)) — asks the instance being upgraded, at the origin of `--health-url`, whether an unresolved artist review holds its deploy, and **refuses before anything moves** if one does. `--force` does not waive it, and a dry run reports it. Every change to a page files such a review (owner decision 2026-09-23), so on a `strict` project an upgrade waits until each has been looked at. The ways past it are ADR 0241's, unchanged: resolve or dismiss the review, lower `artist_gate` to `advisory`, or the project owner releases it (see [the release pipeline](core-release-pipeline.md)). It uses `go-live.js`'s own reader, so both paths decide one answer the same way: a gate that is there and errors halts; one that cannot be read (no `--health-url`, an older instance, the instance down) is printed as a note. A **downgrade** is never held — rolling back must not wait on a review. Before this, only `go-live.js` asked, so the vendored `--from` path this instance used moved its pin past open reviews. The instance answers this local request without a session (the box has none); a request through the proxy still needs one. So the **first** upgrade that carries this asks an instance still running the older route, gets a 401 and can only print the note — every upgrade after it holds.
 2. **bump the pin** — vendor the new `bongos-core-<version>.tgz` and rewrite the `"@bongos/core": "file:vendor/…"` dependency.
 3. **`npm install`** — `node_modules/@bongos/core` becomes the new version.
 3b. **verify the integrity pin** (task [#1002216](https://example.com/builders#/task/1002216)) — recompute `tree_sha256` over the installed core and check the vendored `.tgz` bytes against `tarball.sha256`, comparing to the trusted reference manifest (the committed `vendor/…manifest.json`; the installed inner manifest for `--registry`). Runs **before** migrate so a corrupted core never touches the DB. A **mismatch is fatal → rollback**; a missing reference warns (fatal with `--require-pin`); opt out with `--skip-pin-verify`.

package/modules/hall-ui/public/goal-forest-lib.js

@@ -41,52 +41,6 @@
   function num(id) { return Number(id); }
   function byNumericId(a, b) { return num(a) - num(b); }
 
-  // Titles are fitted to MEASURED width, not a character budget (task 1004200):
-  // proportional glyphs vary too much for any fixed count to fit a fixed box.
-  // `measure` is always the caller's, so this file stays DOM-free.
-
-  // The longest code-point prefix of `chars` that measures within maxWidth with
-  // `suffix` appended ('' if none does). Code points, so an emoji is never split.
-  function longestPrefix(chars, maxWidth, measure, suffix) {
-    var best = '';
-    var lo = 1;
-    var hi = chars.length;
-    while (lo <= hi) {
-      var mid = (lo + hi) >> 1;
-      var cand = chars.slice(0, mid).join('').replace(/\s+$/, '');
-      if (measure(cand + suffix) <= maxWidth) { best = cand; lo = mid + 1; } else { hi = mid - 1; }
-    }
-    return best;
-  }
-
-  // fitText — `text` whole if it fits, else its longest prefix that fits with an ellipsis.
-  function fitText(text, maxWidth, measure) {
-    var t = String(text == null ? '' : text);
-    if (measure(t) <= maxWidth) return t;
-    return longestPrefix(Array.from(t), maxWidth, measure, '…') + '…';
-  }
-
-  // fitLines — `text` wrapped at spaces into at most `maxLines` lines of maxWidth,
-  // the last ellipsised when the rest will not fit. A word wider than a whole
-  // line is broken where it runs out of room, the way the browser would.
-  function fitLines(text, maxWidth, maxLines, measure) {
-    var rest = String(text == null ? '' : text).replace(/\s+/g, ' ').trim();
-    var lines = [];
-    while (rest && lines.length < maxLines - 1 && measure(rest) > maxWidth) {
-      var words = rest.split(' ');
-      var line = '';
-      for (var i = 0; i < words.length; i++) {
-        var next = line ? line + ' ' + words[i] : words[i];
-        if (measure(next) > maxWidth) break;
-        line = next;
-      }
-      if (!line) line = longestPrefix(Array.from(words[0]), maxWidth, measure, '') || Array.from(words[0])[0];
-      lines.push(line);
-      rest = rest.slice(line.length).trim();
-    }
-    if (rest) lines.push(fitText(rest, maxWidth, measure));
-    return lines;
-  }
   function plural(n, one, many) { return n + ' ' + (n === 1 ? one : (many || one + 's')); }
 
   // analyse — nodes by id, who each task waits on and who needs it, and the
@@ -268,7 +222,7 @@
 
   return {
     analyse: analyse, layout: layout, tableRows: tableRows, describe: describe,
-    fitText: fitText, fitLines: fitLines, plural: plural, priorityLabel: priorityLabel,
+    plural: plural, priorityLabel: priorityLabel,
     TEXT_INSET: TEXT_INSET, TITLE_LINES: TITLE_LINES,
   };
 }));

package/modules/hall-ui/public/goal-forest-render.js

@@ -29,6 +29,7 @@
     const { API, state, sameId, getJSON } = ctx;
     const { escapeHtml, $ } = window.OTB;
     const lib = window.OTBGoalForestLib;
+    const textFit = window.OTBTextFit;
 
     function setCount(sel, n) {
       const el = $(sel);
@@ -58,7 +59,7 @@
     function fitNames(names, maxWidth) {
       names.forEach(({ els, full }) => {
         const measure = (s) => { els[0].textContent = s; return els[0].getComputedTextLength(); };
-        const lines = lib.fitLines(full, maxWidth, els.length, measure);
+        const lines = textFit.fitLines(full, maxWidth, els.length, measure);
         els.forEach((el, i) => { el.textContent = lines[i] || ''; });
       });
     }

package/modules/hall-ui/public/goal-map-lib.js

@@ -52,17 +52,10 @@
   // The categorical colour channel repeats after this many; the WORD on every
   // node is what distinguishes them, so a repeat costs nothing.
   var CATEGORY_COLOURS = 8;
-  var TITLE_CHARS = 24;
-  var SUB_CHARS = 30;
 
   function num(id) { return Number(id); }
   function byNumericId(a, b) { return num(a) - num(b); }
 
-  function clip(text, max) {
-    var t = String(text == null ? '' : text);
-    return t.length > max ? t.slice(0, max - 1).replace(/\s+$/, '') + '…' : t;
-  }
-
   // A private goal the viewer cannot read arrives with title null. It stays a node
   // (dropping it would falsely isolate its neighbours) and is named as what it is.
   function displayTitle(node) { return node.title ? String(node.title) : 'A private goal'; }
@@ -350,7 +343,7 @@
 
   return {
     analyse: analyse, layout: layout, categories: categories, colourOf: colourOf, weightOf: weightOf,
-    tableRows: tableRows, describe: describe, displayTitle: displayTitle, clip: clip,
-    plural: plural, TITLE_CHARS: TITLE_CHARS, SUB_CHARS: SUB_CHARS, CATEGORY_COLOURS: CATEGORY_COLOURS,
+    tableRows: tableRows, describe: describe, displayTitle: displayTitle,
+    plural: plural, CATEGORY_COLOURS: CATEGORY_COLOURS,
   };
 }));

package/modules/hall-ui/public/goal-map.html

@@ -63,6 +63,8 @@
 <!-- The model and layout are a pure lib so a test runs the real arithmetic; the
      page script keeps only the drawing and the table. Lib BEFORE page. -->
 <script src="/builders/goal-map-lib.js"></script>
+<!-- task 1004204: measured-width text fitting, shared with the goal forest. -->
+<script src="/builders/text-fit.js"></script>
 <script src="/builders/goal-map.js"></script>
 </body>
 </html>