@bongos/core 1.20.50 → 1.20.51

package/modules/hall-ui/public/style.css

@@ -1051,15 +1051,71 @@ html[data-fullscreen="on"] .app-topbar {
 }
 html[data-fullscreen="on"] .app-topbar > :not(.topbar-side),
 html[data-fullscreen="on"] .topbar-side > :not(.fullscreen-toggle) { display: none; }
+/* task 1004430: the way back must read on ANY ground. The hall's glass is
+   near-clear, so over the black sky in the light theme it was a dark glyph on
+   black — the page looked stuck without its bars. The card tone plus a drop
+   shadow and a ring keeps it legible on paper, on the sky and in either mode. */
 html[data-fullscreen="on"] .fullscreen-toggle {
   pointer-events: auto;
-  width: 36px; height: 36px;
+  width: auto; height: 36px;
+  gap: 6px;
+  padding: 0 14px 0 10px;
   color: var(--ink);
-  background: var(--glass);
-  box-shadow: inset 0 0 0 1px var(--glass-edge);
-  backdrop-filter: blur(var(--glass-blur));
-  -webkit-backdrop-filter: blur(var(--glass-blur));
+  background: var(--bg-card);
+  box-shadow: 0 0 0 1px var(--rule), 0 4px 16px rgba(0, 0, 0, .35);
+  font-size: 13px;
+  font-weight: 500;
+  white-space: nowrap;
+}
+/* A phone has no room for the words; the round button keeps its card tone. */
+@media (max-width: 640px) {
+  html[data-fullscreen="on"] .fullscreen-toggle { width: 36px; padding: 0; }
+  .fullscreen-toggle__label { display: none; }
+}
+html[data-fullscreen="on"] .fullscreen-toggle:hover { color: var(--accent-ink); }
+/* A page with no full-screen layout of its own steps its content clear of the
+   corner button; the sky and the studio lay themselves out (shell.js `plain`). */
+html[data-fullscreen="on"][data-fullscreen-plain="on"] .app-content { padding-top: 60px; }
+/* Said once on entering, since the choice is remembered and a page can open in it. */
+.fullscreen-hint {
+  position: fixed;
+  top: 56px;
+  right: 12px;
+  z-index: var(--z-topbar);
+  max-width: min(320px, calc(100vw - 24px));
+  padding: 8px 12px;
+  border-radius: 10px;
+  background: var(--bg-card);
+  color: var(--ink);
+  font-size: 13px;
+  line-height: 1.4;
+  box-shadow: 0 0 0 1px var(--rule), 0 4px 16px rgba(0, 0, 0, .35);
+  pointer-events: none;
+}
+
+/* THE BACK LINK (task 1004430): at the head of the bar when the page was
+   reached from inside another hall page. 24px floor on both axes. */
+.topbar-back {
+  display: inline-flex;
+  align-items: center;
+  gap: 4px;
+  min-height: 32px;
+  min-width: 32px;
+  padding: 0 10px 0 6px;
+  margin-right: -4px;
+  border-radius: var(--radius-pill);
+  color: var(--ink-soft);
+  font-size: 13px;
+  text-decoration: none;
+  white-space: nowrap;
+  flex-shrink: 0;
+  max-width: 40vw;
+  overflow: hidden;
+  text-overflow: ellipsis;
 }
+.topbar-back:hover { color: var(--ink); background: var(--rule-soft); }
+.topbar-back svg { width: 16px; height: 16px; flex-shrink: 0; }
+@media (max-width: 480px) { .topbar-back__label { display: none; } .topbar-back { padding: 0 8px; } }
 .zoom-toggle__pct {
   font-size: 12px;
   font-weight: 500;

package/modules/hall-ui/public/task.html

@@ -57,7 +57,7 @@
 
 <!-- The app shell (sidebar + top bar + footer). Dependency-free; runs at parse
      time so the chrome exists before the deferred page scripts execute. -->
-<script src="/builders/shell.js?v=2026-09-30-founding-commands"></script>
+<script src="/builders/shell.js?v=2026-09-30-navback2"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded FIRST so task.js can pull from it. -->

package/modules/hall-ui/public/thinking.css

@@ -7,11 +7,11 @@
    ONE SHEET, TWO DOORS (part 4, task 1004232): /thinking and /goal-map are the
    same page opened in different lenses, so both are named below.
    IN THE HALL (task 1004327): /thinking now loads style.css and sits in the
-   hall chrome; /goal-map is still standalone. So the sky's tokens and ground
-   sit on /thinking's STAGE (main.sky-stage) instead of its body — the chrome
+   hall chrome, and /goal-map joined it in task 1004430. So the sky's tokens and
+   ground sit on the STAGE (main.sky-stage) instead of its body — the chrome
    around the stage keeps the hall's own palette in both modes — and the sky's
    few global rules are written :where()-scoped, so they cost no specificity
-   (goal-map renders exactly as before) and never reach the chrome. */
+   and never reach the chrome. */
 /* The template declared these on :root. They sit on the page's body here,
    with the template's values untouched, because the server splices the
    branding pack's own :root (--ink, --accent, --rule …) into <head> AFTER this
@@ -21,7 +21,7 @@
    its own — tests/hall_reading_world.mjs; color-scheme inherits from body
    too). Same reason `body` below is qualified: a pack backdrop is written as
    `body{background:…}` and the void must win. */
-body[data-page="goal-map"], body[data-page="thinking"] .sky-stage {
+body[data-page] .sky-stage {
   color-scheme: dark;
   --void: #000000; --ink: #ffffff; --ink-soft: #c0c0c0; --ink-faint: #a8a8a8; --ink-dim: #65656a; --ink-ghost: #3a3a3f;
   --rule: rgba(255,255,255,.16); --rule-soft: rgba(255,255,255,.08); --glass: rgba(255,255,255,.075); --glass-strong: rgba(255,255,255,.14);
@@ -30,15 +30,15 @@ body[data-page="goal-map"], body[data-page="thinking"] .sky-stage {
   --face: Manrope, "Segoe UI", system-ui, -apple-system, sans-serif;
 }
 html, body { height: 100%; }
-body[data-page="goal-map"], body[data-page="thinking"] .sky-stage { margin: 0; background: var(--void); color: var(--ink); font-family: var(--face); font-size: 15px; line-height: 1.5; overflow: hidden; overflow: clip; -webkit-font-smoothing: antialiased; }
+body[data-page] .sky-stage { margin: 0; background: var(--void); color: var(--ink); font-family: var(--face); font-size: 15px; line-height: 1.5; overflow: hidden; overflow: clip; -webkit-font-smoothing: antialiased; }
 /* clip, not just hidden (task 1004342): a hidden-overflow box is still scrollable, so
    focus scrolled the stage sideways to show the footer hint and the whole sky slid
    left. clip cuts the same pixels and cannot be scrolled; hidden stays as the fallback. */
-body[data-page="thinking"] { overflow: hidden; overflow: clip; }
-:where(body[data-page="goal-map"], .sky-stage) button { font-family: inherit; }
-:where(body[data-page="goal-map"], .sky-stage) a { color: var(--accent); }
-:where(body[data-page="goal-map"], .sky-stage) .lbl { font: var(--label); letter-spacing: .14em; text-transform: uppercase; color: var(--ink-faint); }
-:where(body[data-page="goal-map"], .sky-stage) .mono { font: var(--mono); font-variant-numeric: tabular-nums; }
+body[data-page="thinking"], body[data-page="goal-map"] { overflow: hidden; overflow: clip; }
+:where(.sky-stage) button { font-family: inherit; }
+:where(.sky-stage) a { color: var(--accent); }
+:where(.sky-stage) .lbl { font: var(--label); letter-spacing: .14em; text-transform: uppercase; color: var(--ink-faint); }
+:where(.sky-stage) .mono { font: var(--mono); font-variant-numeric: tabular-nums; }
 [hidden] { display: none !important; }
 
 /* THE STAGE (task 1004327). The box under the hall's top bar and beside its
@@ -55,11 +55,15 @@ html[data-fullscreen="on"] .sky-stage { top: 0; left: 0; }
 @media (max-width: 768px) { .sky-stage { left: 0; } }
 /* The full-screen switch floats top right over the stage, where the sky's
    tools end; the strip steps in by the button's width so nothing sits under it. */
-html[data-fullscreen="on"] .sky-stage .top { padding-right: 64px; }
+html[data-fullscreen="on"] .sky-stage .top { padding-right: 184px; }
 /* Under 900 the brand takes a row of its own (the template's rule below), so
    only that row steps in and the tools keep their width. */
 @media (max-width: 900px) {
   html[data-fullscreen="on"] .sky-stage .top { padding-right: 16px; }
+  html[data-fullscreen="on"] .sky-stage .brand { padding-right: 168px; }
+}
+/* Under 640 the exit is the round button again (style.css). */
+@media (max-width: 640px) {
   html[data-fullscreen="on"] .sky-stage .brand { padding-right: 48px; }
 }
 /* style.css rules whose names the template also uses — each one reset to what

package/modules/hall-ui/public/thinking.html

@@ -138,7 +138,7 @@
   </div>
 </div>
 
-<script src="/builders/shell.js?v=2026-09-30-founding-commands"></script>
+<script src="/builders/shell.js?v=2026-09-30-navback2"></script>
 <script src="/builders/palette.js" defer></script>
 
 <script src="/builders/idea-objects.js?v=2026-09-27-split"></script>

package/modules/hall-ui/public/tweak-editor.css

@@ -136,10 +136,16 @@ html[data-fullscreen="on"] .tw-room { top: 0; left: 0; }
 /* In full screen the shell's one button floats over the night room in either
    theme, so on this page it wears the room's glass, not the hall's light ink. */
 html[data-fullscreen="on"] body[data-page="tweak-editor"] .fullscreen-toggle {
+  /* task 1004430: the shell's exit is a labelled pill, but this bar is laid out
+     for a 36px button in the corner, so the words would sit on submit. The
+     room keeps the round button; its name and title still say "Exit". */
+  width: 36px;
+  padding: 0;
   color: #ffffff;
   background: rgba(255, 255, 255, .07);
   box-shadow: inset 0 0 0 1px rgba(255, 255, 255, .16);
 }
+body[data-page="tweak-editor"] .fullscreen-toggle__label { display: none; }
 
 /* THE GLASS TOP BAR. Sticky, so the four doors stay in reach down a long page
    and the paper passes under the glass. In full screen it steps in far enough

package/modules/hall-ui/public/tweak-editor.html

@@ -49,7 +49,7 @@
         <!-- A <div>, not a <header>: the shell's top bar is the page's one
              <header> (the kit's one-header-main-h1 floor). -->
         <div class="tw-bar" id="tw-bar">
-          <a class="tw-back" href="/builders/studio">← studio</a>
+          <a class="tw-back" data-own-back href="/builders/studio">← studio</a>
           <span class="tw-name"><span id="tw-name">Tweak a page</span> <span class="tw-surface" id="tw-surface"></span></span>
           <span class="tw-counter" id="tw-counter" aria-live="polite"></span>
           <div class="tw-actions">
@@ -140,7 +140,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-30-founding-commands"></script>
+<script src="/builders/shell.js?v=2026-09-30-navback2"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <script src="/builders/brand-holes.js?v=2026-09-29-aqfix"></script>

package/modules/hall-ui/public/watch.html

@@ -162,7 +162,7 @@
 
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
-<script src="/builders/shell.js?v=2026-09-30-founding-commands"></script>
+<script src="/builders/shell.js?v=2026-09-30-navback2"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before watch.js, which pulls from it. -->

package/modules/hall-ui/public/work.html

@@ -171,7 +171,7 @@
 
 <!-- The app shell (sidebar + top bar + footer). Dependency-free; runs at parse
      time so the chrome exists before the deferred page scripts execute. -->
-<script src="/builders/shell.js?v=2026-09-30-founding-commands"></script>
+<script src="/builders/shell.js?v=2026-09-30-navback2"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded FIRST so work.js can pull from it. -->

package/modules/hall-ui/records/hall-navigation.md

@@ -0,0 +1,22 @@
+# Hall navigation — the Back link and the standard full-screen switch (task 1004430)
+
+Covers: every shelled hall page (`shell.js`, `style.css`), plus `goal-map.html` joining the chrome.
+
+## The Back link
+
+- `shell.js` renders `#topbar-back` ("← <label>") at the head of the top bar when the page was reached from INSIDE another hall page. The origin is `?from=` first, then a same-origin `document.referrer`; the label is that page's `NAV` label (or "task N" / "idea N" / "goal N" for a record).
+- **A sidebar hop is not a drill-down.** A sidebar link click writes a one-shot `sessionStorage['hall-nav-hop']` naming its target; the page it lands on reads and deletes it, and shows no Back link. Without this every page reached from the sidebar would carry a Back link, which is just history.
+- When the origin came from the referrer, the click runs `history.back()`, so a list comes back with its scroll and filters; the `href` is still the real address for a new tab.
+- A page drawing its own record back link (`.rec-back` — `task.html`, `idea.html`) keeps it; the bar adds no second one. The origin's own `?from=` is dropped so back links never chain.
+- `/profile?id=N` highlights **Builders**, not your own Profile, unless `/me` says the id is yours.
+
+## Full screen is standard
+
+- Every shelled page gets the switch. `<body data-fullscreen-switch="off">` opts out. The bare attribute means "this page lays itself out for full screen" (sky, studio, tweak editor); a page without it is **plain**, and the shell sets `html[data-fullscreen-plain="on"]` so `style.css` pads `.app-content` clear of the corner button.
+- In full screen the button is a labelled pill, an icon plus "Exit full screen", in `--bg-card` with a ring and a drop shadow, not the hall's near-clear glass. Under 640px it drops the words, and the tweak editor keeps the 36px round button because its bar is laid out for one. A page whose own back link is not `.rec-back` marks it `data-own-back`. On the black sky in the light theme the glass button was a dark icon on black, and because the choice is remembered per page, `/thinking` looked stuck with no bars. Entering full screen (or a page opening in it) also shows a 4.5s `#fullscreen-hint` saying how to leave.
+
+## The project sky joined the hall
+
+`goal-map.html` now uses thinking.html's structure: sidebar and top-bar mounts, `style.css`, `shell.js`, the sky inside `<main id="hall-main" class="sky-stage">`, and a `<div class="brand">` because the shell's bar is the page's one `<header>`. In `thinking.css` both pages share one stage rule, `body[data-page] .sky-stage`. No hall page is standalone any more (`tests/hall_audit.mjs` `STANDALONE_EXEMPT` is empty).
+
+Tests: `tests/hall_fullscreen.mjs` (the standard switch, `plain`, Back link cases), `tests/goal_map_page.mjs`, `tests/hall_audit.mjs` §8.

package/modules/hall-ui/records/sky.md

@@ -31,6 +31,8 @@ Pinned by `tests/hall_sky.mjs` (31 cases: the reads, the five objects, the two c
 - **The sky's palette lives on the stage, not the body, on `/thinking`** — so the chrome around it keeps the hall's own light and dark. `style.css` now loads under `thinking.css`, and the handful of hall rules whose names the template also uses (`.skip`, `.filters`, `.foot`, `:focus-visible`, text inputs, `* { box-sizing }`) are reset under `:where(.sky-stage)` at the same specificity, before the sky's own rules. The sky's global rules are `:where()`-scoped for the same reason, which leaves `/goal-map` byte-for-byte in its old cascade.
 - **Both pages render in both modes now.** The chrome follows the hall theme; the sky's stage is the void in both. The `full` and `full-back` states in both states files (and `full-list` in the sky's) press the switch.
 
+**Superseded for `/goal-map` by task 1004430 (owner, 2026-09-30):** the project sky joined the hall chrome the same way, with the same switch. Both pages now share one stage rule (`body[data-page] .sky-stage`), `STANDALONE_EXEMPT` is empty, and the full-screen button uses the card tone so it can be seen on the void. See [`hall-navigation.md`](hall-navigation.md).
+
 ## Two skies, one renderer (task 1004328, BV2.TW21)
 
 **Owner decision 2026-09-27: "Your thinking is only your thinking."** Part 4's "one page, two doors" above is SUPERSEDED: the two pages share the renderer and nothing else. The owner confirmed that "the your projects tab" means the whole-project lens, its switch and the project-map features. What this settled:

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.20.50",
+  "version": "1.20.51",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.20.50",
+      "version": "1.20.51",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.20.50",
+  "version": "1.20.51",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -8413,5 +8413,11 @@
       "id": "1004417",
       "text": "Starting a new project now begins with two decisions before any setup. First screen, \"anything you want to make\": the founder ticks that they can sign legally for the platform and acknowledge the terms, with a link to read the"
     }
+  ],
+  "1.20.51": [
+    {
+      "id": "1004430",
+      "text": "Hall navigation is more standard. The top bar now has a Back button when you open a page from inside another one. A builder's profile opened from the Builders list shows \"Back to Builders\" and returns you to the same spot in t"
+    }
   ]
 }

package/src/module-api.js

@@ -75,7 +75,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // MAJOR (see allowBoxScope below): passes the request through untouched.
 function deprecatedNoopMiddleware(_req, _res, next) { next(); }
 
-const CORE_VERSION = '1.20.50'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.20.51'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('discord'); log.info('mounted');

package/tests/goal_map_page.mjs

@@ -422,18 +422,21 @@ await test('Sky sits directly under Goals in the nav, member-gated, at the URL G
 
 await test('the page is the sky\'s own surface — the same sheet and the same seven scripts as /thinking, one cache-bust between them, and the old goal map is gone', () => {
   const html = read('goal-map.html'); const thinking = read('thinking.html');
-  assert.match(html, /<body data-page="goal-map" data-page-title="The sky" data-sky-lens="all">/);
+  assert.match(html, /<body data-page="goal-map" data-page-title="The sky" data-sky-lens="all" data-fullscreen-switch>/);
   assert.match(html, /<title>The sky — \{\{worldName\}\}<\/title>/);
   assert.match(html, /<h1>the sky <em id="lensWord">— the whole project<\/em><\/h1>/, 'the h1 is in static markup, so every state has one');
-  assert.equal(/shell\.js|style\.css/.test(html), false, 'no hall chrome yet — /thinking joined it (task 1004327), the project sky did not');
+  // IN THE HALL (task 1004430): the project sky joined /thinking in the chrome.
+  assert.match(html, /<script src="\/builders\/shell\.js\?v=/, 'the shell draws its sidebar and top bar');
+  assert.match(html, /<link rel="stylesheet" href="\/builders\/style\.css/, 'and the hall sheet styles them');
+  assert.match(html, /<main id="hall-main" class="sky-stage">/, 'the sky is drawn in the stage, the skip link\'s target');
   const scripts = (h) => [...h.matchAll(/<script src="\/builders\/([^"?]+)\?v=([^"]+)"/g)].map((m) => [m[1], m[2]]);
   // criterion-uat-ui.js (task 1004402): the rings' UAT state words, shared with the goal page.
-  assert.deepEqual(scripts(html).map((s) => s[0]), ['idea-objects.js', 'criterion-uat-ui.js', 'sky-data.js', 'sky-layout.js', 'sky-draw.js', 'sky-interaction.js', 'sky-panel.js', 'sky-composer.js', 'sky-tour.js']);
-  // /thinking also loads the shell (task 1004327); the SKY's files are the same.
+  assert.deepEqual(scripts(html).filter((s) => s[0] !== 'shell.js').map((s) => s[0]), ['idea-objects.js', 'criterion-uat-ui.js', 'sky-data.js', 'sky-layout.js', 'sky-draw.js', 'sky-interaction.js', 'sky-panel.js', 'sky-composer.js', 'sky-tour.js']);
+  // Both doors load the shell (tasks 1004327, 1004430); the SKY's files are the same.
   const skyScripts = (h) => scripts(h).filter((s) => s[0] !== 'shell.js');
   assert.deepEqual(skyScripts(html), skyScripts(thinking), 'the two doors load the same sky files at the same stamp');
   assert.equal(html.match(/thinking\.css\?v=([^"]+)/)[1], thinking.match(/thinking\.css\?v=([^"]+)/)[1]);
-  assert.match(read('thinking.css'), /body\[data-page="goal-map"\], body\[data-page="thinking"\] \.sky-stage \{/, 'the sheet names both doors: the project sky\'s body, and the stage /thinking draws in inside the hall');
+  assert.match(read('thinking.css'), /body\[data-page\] \.sky-stage \{/, 'the sheet dresses the one stage both doors draw in inside the hall');
   for (const f of ['goal-map.css', 'goal-map.js', 'goal-map-lib.js']) assert.equal(fs.existsSync(path.join(HALL, f)), false, `${f} is retired`);
   assert.equal(fs.existsSync(path.join(ROOT, 'tests/goal_map_lib.mjs')), false, 'and so is the lib\'s test');
   assert.equal(/goal-map-lib|goal-map\.js|goal-map\.css/.test(html), false);
@@ -457,11 +460,11 @@ await test('the ledger drawer accessible name matches its visible heading (docs/
 // slide the sky again whatever overflows; and the hint now shrinks instead.
 await test('the sky cannot be scrolled sideways: its box clips, it does not hide (task 1004342)', () => {
   const css = read('thinking.css');
-  const rule = /body\[data-page="goal-map"\], body\[data-page="thinking"\] \.sky-stage \{ margin: 0;[^}]*\}/.exec(css);
+  const rule = /body\[data-page\] \.sky-stage \{ margin: 0;[^}]*\}/.exec(css);
   assert.ok(rule, 'the shared stage rule is still there');
   // hidden first as the fallback for an engine without clip, then clip, which wins where supported
   assert.match(rule[0], /overflow: hidden; overflow: clip;/, 'the stage clips (not scrollable), with hidden only as a fallback');
-  assert.match(css, /body\[data-page="thinking"\] \{ overflow: hidden; overflow: clip; \}/, 'and so does the page body');
+  assert.match(css, /body\[data-page="thinking"\], body\[data-page="goal-map"\] \{ overflow: hidden; overflow: clip; \}/, 'and so does each door\'s page body');
 });
 
 await test('the footer hint shrinks with an ellipsis instead of running past the stage (task 1004342)', () => {

package/tests/hall_audit.mjs

@@ -367,10 +367,9 @@ test('the module doc still records where the 2179 density pass landed', () => {
 // tests/hall_sky.mjs against the template. It still stamps the branding token
 // and the pack's font links like every hall page (the server injects them).
 // /thinking left this list in task 1004327 (owner decision 2026-09-27): it sits
-// in the hall chrome now, with the shell's full-screen switch to hide it.
-const STANDALONE_EXEMPT = {
-  'goal-map.html': 'the project sky (task 1004232) — the same surface as thinking.html, opened in its whole-project lens',
-};
+// in the hall chrome now, with the shell's full-screen switch to hide it. The
+// project sky (/goal-map) followed in task 1004430, so the list is empty again.
+const STANDALONE_EXEMPT = {};
 
 test('every hall page loads style.css and shell.js', () => {
   const missing = [];

package/tests/hall_fullscreen.mjs

@@ -26,7 +26,12 @@ const read = (f) => fs.readFileSync(path.join(HALL, f), 'utf8');
 
 // Boot the shell once — one page load. `store` is the browser's localStorage and
 // is SHARED across boots on purpose: a second boot over the same store is a reload.
-function boot({ page = 'thinking', optIn = true, store = {}, storageThrows = false } = {}) {
+// `optIn`: true = the bare attribute (the page lays itself out for full screen),
+// null = no attribute (a plain page — the switch is standard since task
+// 1004430), 'off' = the page opts out. `referrer` / `search` / `session` /
+// `recBack` drive the top bar's Back link (task 1004430).
+function boot({ page = 'thinking', optIn = true, store = {}, storageThrows = false,
+  referrer = '', search = '', session = {}, recBack = false, path = null, meId = null } = {}) {
   const els = new Map();
   const windowListeners = {};
   const timers = [];
@@ -49,25 +54,41 @@ function boot({ page = 'thinking', optIn = true, store = {}, storageThrows = fal
   const topbar = makeEl('app-topbar');
   const getElementById = (id) => {
     if (id === 'app-topbar') return topbar;
-    if (/^(fullscreen-toggle|theme-toggle|zoom-toggle|topbar-menu|topbar-title|topbar-jump)$/.test(id)
+    if (/^(fullscreen-toggle|theme-toggle|zoom-toggle|topbar-menu|topbar-title|topbar-jump|topbar-back)$/.test(id)
       && !topbar._html.includes(`id="${id}"`)) return null;
     if (!els.has(id)) els.set(id, makeEl(id));
     return els.get(id);
   };
+  // Two sidebar items, enough to see which one the shell marks active.
+  const navItems = ['/roster', '/profile'].map((href) => {
+    const cls = new Set();
+    return { href, dataset: {}, getAttribute: (k) => (k === 'href' ? href : null),
+      classList: { add: (c) => cls.add(c), remove: (c) => cls.delete(c), contains: (c) => cls.has(c) } };
+  });
+  const attr = optIn === true ? '' : optIn === false ? null : optIn;
   const body = {
     dataset: { page },
-    hasAttribute: (k) => optIn && k === 'data-fullscreen-switch',
+    hasAttribute: (k) => k === 'data-fullscreen-switch' && attr !== null,
+    getAttribute: (k) => (k === 'data-fullscreen-switch' ? attr : null),
+    appendChild() {},
   };
   const documentObj = {
     body,
+    referrer,
     documentElement: { dataset: {}, style: {}, classList: { add() {}, remove() {}, toggle() { return false; }, contains() { return false; } } },
     getElementById,
-    querySelectorAll() { return []; },
+    querySelector: (sel) => (/\.rec-back/.test(sel) && recBack ? {} : null),
+    querySelectorAll: (sel) => (sel === '#app-sidebar .nav-item' ? navItems : []),
     createElement() { return makeEl(null); },
     addEventListener() {}, dispatchEvent() {},
     get cookie() { return ''; }, set cookie(_v) {},
   };
-  const location = { hostname: 'h', origin: 'https://h', pathname: '/' + page, hash: '', search: '', assign() {}, replace() {} };
+  const location = { hostname: 'h', origin: 'https://h', href: 'https://h/' + page + search, pathname: path || '/' + page, hash: '', search, assign() {}, replace() {} };
+  const sessionStorage = {
+    getItem: (k) => (k in session ? session[k] : null),
+    setItem: (k, v) => { session[k] = String(v); },
+    removeItem: (k) => { delete session[k]; },
+  };
   const localStorage = {
     getItem: (k) => { if (storageThrows) throw new Error('SecurityError'); return k in store ? store[k] : null; },
     setItem: (k, v) => { if (storageThrows) throw new Error('SecurityError'); store[k] = String(v); },
@@ -75,16 +96,18 @@ function boot({ page = 'thinking', optIn = true, store = {}, storageThrows = fal
   let resizes = 0;
   const windowObj = {
     __BRANDING__: {}, __MODULES__: { enabled: {} },
-    BongosClient: { createClient: () => ({ request: () => new Promise(() => {}) }) },
+    // `meId` answers /me once with that builder; otherwise the read never settles.
+    BongosClient: { createClient: () => ({ request: () => (meId == null ? new Promise(() => {})
+      : Promise.resolve({ status: 200, ok: true, data: { builder: { id: meId, rank: 'thetes' } } })) }) },
     matchMedia: () => ({ matches: false, addEventListener() {} }),
-    localStorage, location,
+    localStorage, sessionStorage, location, clearTimeout() {},
     requestAnimationFrame() {}, scrollTo() {},
     addEventListener(type, fn) { (windowListeners[type] ||= []).push(fn); },
     dispatchEvent(ev) { if (ev && ev.type === 'resize') resizes += 1; return true; },
     setTimeout: (fn) => { timers.push(fn); return timers.length; },
   };
   const sandbox = {
-    window: windowObj, document: documentObj, location, console, clearTimeout() {}, queueMicrotask,
+    window: windowObj, document: documentObj, location, console, clearTimeout() {}, queueMicrotask, URL, URLSearchParams,
     setTimeout: windowObj.setTimeout,
     Event: class { constructor(t) { this.type = t; } },
     CustomEvent: class { constructor(t, i) { this.type = t; Object.assign(this, i); } },
@@ -97,6 +120,10 @@ function boot({ page = 'thinking', optIn = true, store = {}, storageThrows = fal
     store,
     button: () => getElementById('fullscreen-toggle'),
     on: () => root.dataset.fullscreen === 'on',
+    plain: () => root.dataset.fullscreenPlain === 'on',
+    active: () => navItems.filter((a) => a.classList.contains('nav-item--active')).map((a) => a.href),
+    topbar: () => topbar._html,
+    session,
     resizes: () => resizes,
     // Press a key the way the browser dispatches it: every window listener,
     // then the page may mark the press used, then the queued timers run.
@@ -109,13 +136,71 @@ function boot({ page = 'thinking', optIn = true, store = {}, storageThrows = fal
   };
 }
 
-test('a page that does not opt in gets no switch, and never goes full screen', () => {
+test('a page that opts OUT gets no switch, and never goes full screen', () => {
   const store = { 'hall-fullscreen:work': 'on' };
-  const p = boot({ page: 'work', optIn: false, store });
+  const p = boot({ page: 'work', optIn: 'off', store });
   assert.equal(p.button(), null, 'no button rendered');
   assert.equal(p.on(), false, 'a stored value for a page with no switch is ignored');
 });
 
+test('THE SWITCH IS STANDARD (task 1004430): a page with no attribute gets it too, marked plain', () => {
+  const p = boot({ page: 'goals', optIn: false });
+  assert.ok(p.button(), 'goals carries the switch without opting in');
+  p.button().click();
+  assert.equal(p.on(), true);
+  assert.equal(p.plain(), true, 'a plain page: style.css steps its content clear of the corner button');
+  p.button().click();
+  assert.equal(p.plain(), false, 'and the mark leaves with full screen');
+  const sky = boot({ page: 'thinking' });
+  sky.button().click();
+  assert.equal(sky.plain(), false, 'a page that lays itself out for full screen is not plain');
+});
+
+// THE BACK LINK (task 1004430). The owner's case: a profile opened from the
+// Builders list shows "← Builders", and a sidebar hop shows nothing.
+test('a page reached from inside another hall page shows Back to it, by its nav label', () => {
+  const p = boot({ page: 'profile', optIn: false, search: '?id=7', referrer: 'https://h/roster' });
+  assert.match(p.topbar(), /<a class="topbar-back" id="topbar-back" href="\/roster"/);
+  assert.match(p.topbar(), />Builders<\/span><\/a>/);
+});
+
+test('Back: ?from= wins over the referrer, and a record origin is named as the record', () => {
+  const p = boot({ page: 'profile', optIn: false, search: '?id=7&from=%2Ftask%2F42', referrer: 'https://h/roster' });
+  assert.match(p.topbar(), /href="\/task\/42"/);
+  assert.match(p.topbar(), />task 42<\/span>/);
+});
+
+test('Back: none after a sidebar hop, from another site, from the page itself, or where the page draws its own', () => {
+  const hop = boot({ page: 'goals', optIn: false, referrer: 'https://h/work', session: { 'hall-nav-hop': '/goals' } });
+  assert.doesNotMatch(hop.topbar(), /topbar-back/, 'the sidebar is not a drill-down');
+  assert.equal(hop.session['hall-nav-hop'], undefined, 'the note is one-shot');
+  assert.doesNotMatch(boot({ page: 'goals', optIn: false, referrer: 'https://elsewhere.example/roster' }).topbar(), /topbar-back/);
+  assert.doesNotMatch(boot({ page: 'goals', optIn: false, referrer: 'https://h/goals' }).topbar(), /topbar-back/);
+  assert.doesNotMatch(boot({ page: 'task', optIn: false, path: '/task/9', referrer: 'https://h/goals', recBack: true }).topbar(), /topbar-back/,
+    'the task record keeps its own back link, and the bar adds no second one');
+});
+
+test('someone else\'s profile highlights Builders; your own hands the mark back to Profile', async () => {
+  const other = boot({ page: 'profile', optIn: false, search: '?id=7', meId: 3 });
+  assert.deepEqual(other.active(), ['/roster'], 'at boot, before /me answers');
+  await new Promise((r) => setImmediate(r));
+  assert.deepEqual(other.active(), ['/roster'], 'id 7 is not the viewer (3)');
+  const own = boot({ page: 'profile', optIn: false, search: '?id=3', meId: 3 });
+  await new Promise((r) => setImmediate(r));
+  assert.deepEqual(own.active(), ['/profile'], 'the viewer\'s own id is their Profile');
+  assert.deepEqual(boot({ page: 'profile', optIn: false }).active(), ['/profile'], 'no id: your own profile');
+});
+
+test('Back: a page\'s own back link (data-own-back, the tweak editor\'s "← studio") suppresses the bar\'s', () => {
+  assert.match(read('tweak-editor.html'), /<a class="tw-back" data-own-back href="\/builders\/studio">/);
+  assert.match(SHELL, /querySelector\('\.rec-back, \[data-own-back\]'\)/);
+});
+
+test('Back: an origin\'s own ?from= is dropped, so one page\'s way back never chains into the next', () => {
+  const p = boot({ page: 'profile', optIn: false, search: '?id=7', referrer: 'https://h/roster?q=a&from=%2Fwork' });
+  assert.match(p.topbar(), /href="\/roster\?q=a"/);
+});
+
 test('an opted-in page renders ONE switch in the top bar, off by default', () => {
   const p = boot();
   const btn = p.button();
@@ -130,7 +215,8 @@ test('the switch hides the chrome, the same button brings it back', () => {
   p.button().click();
   assert.equal(p.on(), true, 'html[data-fullscreen="on"]');
   assert.equal(p.button().getAttribute('aria-pressed'), 'true');
-  assert.equal(p.button().getAttribute('aria-label'), 'Leave full screen');
+  assert.equal(p.button().getAttribute('aria-label'), 'Exit full screen');
+  assert.match(p.button().innerHTML, />Exit full screen<\/span>/, 'a labelled pill, not a bare glyph (task 1004430)');
   assert.ok(p.resizes() >= 1, 'a page that sizes to its box is told to re-measure');
   p.button().click();
   assert.equal(p.on(), false, 'and back');
@@ -174,15 +260,14 @@ test('storage that throws (a private window) leaves the chrome showing and the s
   assert.equal(p.on(), true, 'the switch still works for this page load');
 });
 
-test('the studio and Your thinking opt in, inside the hall chrome; the project sky does not (yet)', () => {
-  for (const f of ['studio.html', 'thinking.html']) {
+test('the studio, Your thinking and the project sky lay themselves out for it, inside the hall chrome', () => {
+  for (const f of ['studio.html', 'thinking.html', 'goal-map.html']) {
     const html = read(f);
     assert.match(html, /<body[^>]*\bdata-fullscreen-switch\b/, `${f} opts in`);
     for (const id of ['app-sidebar', 'app-topbar']) assert.match(html, new RegExp(`id="${id}"`), `${f} carries #${id}`);
     assert.match(html, /<main id="hall-main"/, `${f}: the skip link's target`);
     assert.equal((html.replace(/<!--[\s\S]*?-->/g, '').match(/<header\b/g) || []).length, 1, `${f}: the top bar is the one <header>`);
   }
-  assert.doesNotMatch(read('goal-map.html'), /data-fullscreen-switch|shell\.js/, '/goal-map keeps its standalone form');
 });
 
 // SOURCE ASSERTION (the CSS half): full screen hides the sidebar and the foot

package/tests/hall_tweak_editor.mjs

@@ -635,7 +635,7 @@ try {
     assert.match(HTML, /<body data-page="tweak-editor"[^>]*data-fullscreen-switch/);
     assert.equal((HTML.match(/<h1\b/g) || []).length, 1);
     assert.ok(HTML.indexOf('tweak-editor-lib.js') < HTML.indexOf('tweak-editor.js?'), 'the lib loads first');
-    assert.match(HTML, /shell\.js\?v=2026-09-30-founding-commands/);
+    assert.match(HTML, /shell\.js\?v=2026-09-30-navback2/);
     assert.equal(/fonts\.googleapis\.com\/css/.test(HTML), false);
     for (const id of ['tw-bar', 'tw-counter', 'tw-open', 'tw-open-more', 'tw-divider', 'tw-openwrap', 'tw-open-menu', 'tw-open-tab', 'tw-open-split', 'tw-frame', 'tw-frame-view', 'tw-split-close', 'tw-download', 'tw-upload', 'tw-file', 'tw-submit', 'tw-paper', 'tw-doc', 'tw-notice', 'tw-done', 'tw-take', 'tw-pick', 'tw-picks', 'tw-refused', 'tw-refused-title', 'tw-refused-list', 'tw-refused-next', 'tw-refused-download', 'tw-refused-close']) {
       assert.ok(new RegExp(`id="${id}"`).test(HTML), `#${id} is in the markup`);

package/tests/nav_permission_atoms.mjs

@@ -87,7 +87,7 @@ test('the hall-preview fixture carries every atom /me resolves', () => {
 // the file and left the query alone, so a returning browser kept the cached copy —
 // a fix that reaches nobody looks identical to a fix that does not work.
 
-const SHELL_SHA = '3e4f905947bc39d2';
+const SHELL_SHA = 'c05e9d87594aca3c';
 
 test('shell.js has not changed without its cache-bust being bumped', () => {
   const actual = crypto.createHash('sha256').update(SHELL).digest('hex').slice(0, 16);