@bongos/core 1.20.77 → 1.20.78

package/modules/hall-ui/public/sky-interaction.js

@@ -31,7 +31,7 @@
     if (!h || h.kind === 'shuttle') { card.classList.remove('on'); card.setAttribute('aria-hidden', 'true'); return; }
     const { goalById } = S; let html = '';
     if (h.kind === 'idea') { const i = h.ref; const o = OBJ[i.st] || { noun: i.st, word: i.st }; const wellG = i.well && goalById.get(i.well); const r = reach(i).length; html = `<div class="k">${glyphHtml(i)}<span class="lbl${i.st === 'star' ? ' hot' : ''}">${o.noun} · ${o.word}${i.origin === 'claude' ? ' · filed by a session' : ''}</span></div><div class="t">${esc(i.title)}</div><div class="m">${i.shaped ? `<b>${i.shaped.kind === 'goal' ? 'became this goal' : 'became a ring'}</b> · ` : ''}${wellG ? `caught by <b>${esc(short(wellG.title))}</b>` : `open space · ${Math.round(i.age)} days adrift`} · ${esc(became(i))}${i.size && i.size.credits ? ` · size <b>${i.size.credits}</b>` : ''}${i.lit < 1 ? ` · <b>${Math.round(i.lit * 100)}%</b> alive` : ''}${r ? ' · its reach is drawn' : ''}</div>`; }
-    else if (h.kind === 'ring') { const c = h.ref; const g = h.goal; html = `<div class="k"><span class="mk well" style="${c.satisfied ? 'border-style:solid;border-color:rgba(255,255,255,.7)' : ''}"></span><span class="lbl">ring ${h.index + 1} of ${g.crit.length} · ${c.satisfied ? 'closed' : 'open'}</span></div><div class="t">${esc(SKY.plain(c.text).slice(0, 180))}${SKY.plain(c.text).length > 180 ? '…' : ''}</div><div class="m">${c.tasks.length ? `<b>${c.tasks.length}</b> task${c.tasks.length === 1 ? '' : 's'} on this ring · <b>${c.credits}</b> credits` : 'no task gates it yet'}${c.uatLabel ? ` · ${esc(c.uatLabel)}` : (c.pendingReview && !c.uat ? ' · awaiting review' : '')}${c.backendOnly ? ' · backend-only' : ''}${c.bornOf ? ` · <b style="color:var(--accent)">born of a thought</b>: ${esc(ideaTitle(c.bornOf))}` : ''}</div>`; }
+    else if (h.kind === 'ring') { const c = h.ref; const g = h.goal; html = `<div class="k"><span class="mk well" style="${c.satisfied ? 'border-style:solid;border-color:rgba(var(--sky-ink-rgb),.7)' : ''}"></span><span class="lbl">ring ${h.index + 1} of ${g.crit.length} · ${c.satisfied ? 'closed' : 'open'}</span></div><div class="t">${esc(SKY.plain(c.text).slice(0, 180))}${SKY.plain(c.text).length > 180 ? '…' : ''}</div><div class="m">${c.tasks.length ? `<b>${c.tasks.length}</b> task${c.tasks.length === 1 ? '' : 's'} on this ring · <b>${c.credits}</b> credits` : 'no task gates it yet'}${c.uatLabel ? ` · ${esc(c.uatLabel)}` : (c.pendingReview && !c.uat ? ' · awaiting review' : '')}${c.backendOnly ? ' · backend-only' : ''}${c.bornOf ? ` · <b style="color:var(--accent)">born of a thought</b>: ${esc(ideaTitle(c.bornOf))}` : ''}</div>`; }
     else if (h.kind === 'goal') { const g = h.ref; if (!seen(g)) html = `<div class="k"><span class="mk unseen"></span><span class="lbl">unexplored</span></div><div class="t">Something is here.</div><div class="m">Follow a route from a goal you know to reach it — or turn explore off to see everything.</div>`; else { const met = g.crit.filter((c) => c.satisfied).length; const state = g.status === 'open' ? (g.live > 0 ? 'gravity well · alive' : 'gravity well') : g.status === 'achieved' ? 'settled system' : 'collapsed'; html = `<div class="k"><span class="mk ${g.status === 'open' ? (g.live > 0 ? 'alive' : 'well') : g.status === 'achieved' ? 'settled' : 'collapsed'}"></span><span class="lbl${g.live > 0 ? ' hot' : ''}">${state} · ${esc(g.band.label)}</span></div><div class="t">${esc(g.title)}</div><div class="m"><b>${g.taskDone}</b> of <b>${g.taskTotal}</b> tasks${g.credits ? ` · <b>${g.credits}</b> credits` : ''} · ${g.crit.length ? `<b>${met}</b> of <b>${g.crit.length}</b> rings closed` : 'no rings written'}${g.live > 0 ? ` · <b>${g.active}</b> held now, <b>${g.recent}</b> landed this week` : ''}${g.thoughts.filter(inLayer).length ? ` · <b>${g.thoughts.filter(inLayer).length}</b> of your thoughts` : ''}${g.bornOf ? ` · <b style="color:var(--accent)">born of a thought</b>` : ''}${edgesOf(g).length ? ` · <b>${edgesOf(g).length}</b> route${edgesOf(g).length === 1 ? '' : 's'}` : ''}</div>`; } }
     else if (h.kind === 'task' || h.kind === 'ltask') { const t = h.ref; const kin = t.goal && t.kin ? t.goal.tasks.filter((x) => x.kin === t.kin && x !== t).length : 0; html = `<div class="k"><span class="mk task${t.status === 'active' ? ' live' : ''}"></span><span class="lbl${t.status === 'active' ? ' hot' : ''}">task · ${esc(t.status)}</span></div><div class="t">${esc(t.title)}</div><div class="m">${t.credits != null ? `<b>${t.credits}</b> credits · ` : ''}${t.ci >= 0 ? `ring ${t.ci + 1}` : 'outer orbit'}${t.sourceRef ? ' · born of a thought' : ''}${kin ? ` · lines up with <b>${kin}</b> kin` : ''}${t.drift ? ' · in motion' : ''}</div>`; }
     else if (h.kind === 'stub') { const e = h.edge; const waits = e.a === h.goal; html = `<div class="k"><span class="mk route"></span><span class="lbl chart">route · ${waits ? 'waits on' : 'waited on by'}</span></div><div class="t">${seen(h.other) ? esc(h.other.title) : 'an unexplored goal'}</div><div class="m"><b>${e.count}</b> task dependenc${e.count === 1 ? 'y' : 'ies'} · click to chart it · double-click to chart every route from here</div>`; }

package/modules/hall-ui/public/sky-panel.js

@@ -39,7 +39,7 @@
         ${rch.length ? fact('lives on in', rch.map((g) => `<a href="#" data-goal="${esc(g.id)}">${esc(short(g.title))}</a>`).join(', ')) : ''}
         ${fact('size — credits', i.size ? `${i.size.credits}${i.size.historical ? ' <span class="lbl">hist.</span>' : ''}` : 'unknown', true)}
         ${i.size ? fact('of which', esc(sizeWords(i))) : ''}
-        ${bright ? fact('brightness — still alive', `<span class="bar" style="width:${Math.max(4, Math.round(i.lit * 70))}px;${i.lit > 0 ? '' : 'background:rgba(255,255,255,.2)'}"></span>${esc(bright)}`) : ''}
+        ${bright ? fact('brightness — still alive', `<span class="bar" style="width:${Math.max(4, Math.round(i.lit * 70))}px;${i.lit > 0 ? '' : 'background:rgba(var(--sky-ink-rgb),.2)'}"></span>${esc(bright)}`) : ''}
         ${pos ? fact('position', esc(pos)) : ''}
         ${fact('filed', esc(fmtDate(i.capturedAt)) + (i.kind ? ` · ${esc(i.kind)}` : '') + (i.grade === 'full' ? ' · full idea' : '') + ' · ' + esc(SKY.viaWord(i.filedVia)) + (i.origin === 'claude' ? ' · by a session, under your name' : ''))}
       </div>

package/modules/hall-ui/public/thinking.css

@@ -24,11 +24,39 @@
 body[data-page] .sky-stage {
   color-scheme: dark;
   --void: #000000; --ink: #ffffff; --ink-soft: #c0c0c0; --ink-faint: #a8a8a8; --ink-dim: #65656a; --ink-ghost: #3a3a3f;
-  --rule: rgba(255,255,255,.16); --rule-soft: rgba(255,255,255,.08); --glass: rgba(255,255,255,.075); --glass-strong: rgba(255,255,255,.14);
+  --rule: rgba(var(--sky-ink-rgb),.16); --rule-soft: rgba(var(--sky-ink-rgb),.08); --glass: rgba(var(--sky-ink-rgb),.075); --glass-strong: rgba(var(--sky-ink-rgb),.14);
   --accent: #fb9569; --accent-on: #2a1305; --chart: #f2d27a;
+  --sky-ink-rgb: 255,255,255; --sky-void-rgb: 0,0,0; --sky-accent-rgb: 251,149,105; --sky-chart-rgb: 242,210,122;
+  --sky-cold: #141418; --sky-cold-rgb: 20,20,24; --sky-drop: rgba(0,0,0,.6); --sky-temp: 1;
   --label: 400 11px/1.2 "JetBrains Mono", ui-monospace, Consolas, monospace; --mono: 400 13px/1.4 "JetBrains Mono", ui-monospace, Consolas, monospace;
   --face: Manrope, "Segoe UI", system-ui, -apple-system, sans-serif;
 }
+/* LIGHT (task 1004500, owner ask 2026-10-01). The sky follows the hall's theme:
+   the void becomes paper and the white ladder becomes an ink ladder at the SAME
+   alphas, so every mark keeps its place in the hierarchy; the accent and the
+   chart yellow darken until they read on paper. Dark above is the template's,
+   untouched. Written twice for the same reason style.css writes dark twice:
+   html[data-theme] once shell.js runs, the media query for first paint.
+   sky-draw.js reads these channels (--sky-*-rgb) off the stage, so the canvas
+   repaints with the toggle. */
+html[data-theme="light"] body[data-page] .sky-stage {
+  color-scheme: light;
+  --void: #f4f3f5; --ink: #17181a; --ink-soft: #3f4044; --ink-faint: #55565a; --ink-dim: #6c6d72; --ink-ghost: #a3a4a8;
+  --rule: rgba(23,24,26,.16); --rule-soft: rgba(23,24,26,.08); --glass: rgba(23,24,26,.06); --glass-strong: rgba(23,24,26,.11);
+  --accent: #b8501f; --accent-on: #ffffff; --chart: #8f6a0c;
+  --sky-ink-rgb: 23,24,26; --sky-void-rgb: 244,243,245; --sky-accent-rgb: 184,80,31; --sky-chart-rgb: 143,106,12;
+  --sky-cold: #dcdbde; --sky-cold-rgb: 220,219,222; --sky-drop: rgba(23,24,26,.14); --sky-temp: .42;
+}
+@media (prefers-color-scheme: light) {
+  html:not([data-theme]) body[data-page] .sky-stage {
+    color-scheme: light;
+    --void: #f4f3f5; --ink: #17181a; --ink-soft: #3f4044; --ink-faint: #55565a; --ink-dim: #6c6d72; --ink-ghost: #a3a4a8;
+    --rule: rgba(23,24,26,.16); --rule-soft: rgba(23,24,26,.08); --glass: rgba(23,24,26,.06); --glass-strong: rgba(23,24,26,.11);
+    --accent: #b8501f; --accent-on: #ffffff; --chart: #8f6a0c;
+    --sky-ink-rgb: 23,24,26; --sky-void-rgb: 244,243,245; --sky-accent-rgb: 184,80,31; --sky-chart-rgb: 143,106,12;
+    --sky-cold: #dcdbde; --sky-cold-rgb: 220,219,222; --sky-drop: rgba(23,24,26,.14); --sky-temp: .42;
+  }
+}
 html, body { height: 100%; }
 body[data-page] .sky-stage { margin: 0; background: var(--void); color: var(--ink); font-family: var(--face); font-size: 15px; line-height: 1.5; overflow: hidden; overflow: clip; -webkit-font-smoothing: antialiased; }
 /* clip, not just hidden (task 1004342): a hidden-overflow box is still scrollable, so
@@ -100,10 +128,10 @@ html[data-fullscreen="on"] .sky-stage .top { padding-right: 184px; }
 .pill[aria-pressed="true"]::before { content: ""; display: inline-block; width: 6px; height: 6px; border-radius: 50%; background: var(--accent); margin-right: 8px; vertical-align: 1px; }
 .pill.icon { width: 36px; padding: 0; display: inline-grid; place-items: center; }
 .pill.icon::before { display: none; }
-.spot { outline: 2px solid var(--accent) !important; outline-offset: 4px; box-shadow: 0 0 0 8px rgba(251,149,105,.12), 0 0 40px rgba(251,149,105,.35); }
+.spot { outline: 2px solid var(--accent) !important; outline-offset: 4px; box-shadow: 0 0 0 8px rgba(var(--sky-accent-rgb),.12), 0 0 40px rgba(var(--sky-accent-rgb),.35); }
 
 .composer { position: fixed; left: 50%; top: calc(76px + env(safe-area-inset-top, 0px)); transform: translateX(-50%); width: min(620px, calc(100% - 32px)); z-index: 6; display: flex; flex-direction: column; gap: 8px; align-items: center; }
-.composer form { display: flex; width: 100%; height: 48px; border-radius: 999px; background: rgba(0,0,0,.5); box-shadow: inset 0 0 0 1px var(--rule); backdrop-filter: blur(6px); align-items: center; padding: 0 6px 0 22px; gap: 8px; }
+.composer form { display: flex; width: 100%; height: 48px; border-radius: 999px; background: rgba(var(--sky-void-rgb),.5); box-shadow: inset 0 0 0 1px var(--rule); backdrop-filter: blur(6px); align-items: center; padding: 0 6px 0 22px; gap: 8px; }
 .composer form:focus-within { box-shadow: inset 0 0 0 1px var(--ink-faint); }
 .composer input { flex: 1; min-width: 0; height: 100%; background: transparent; border: 0; color: var(--ink); font: 300 17px/1 var(--face); letter-spacing: -.01em; outline: none; }
 .composer input::placeholder { color: var(--ink-dim); }
@@ -112,12 +140,12 @@ html[data-fullscreen="on"] .sky-stage .top { padding-right: 184px; }
 .gravity { min-height: 18px; font: var(--mono); font-variant-numeric: tabular-nums; color: var(--ink-dim); text-align: center; }
 .gravity b { font-weight: 400; color: var(--ink-soft); }
 .gravity .hot { color: var(--accent); }
-.receipt { display: flex; align-items: center; gap: 12px; height: 34px; padding: 0 8px 0 16px; border-radius: 999px; box-shadow: inset 0 0 0 1px var(--rule-soft); background: rgba(0,0,0,.45); color: var(--ink-soft); font-size: 13px; }
-.receipt .dot { width: 7px; height: 7px; border-radius: 50%; background: rgba(255,255,255,.5); box-shadow: 0 0 0 4px rgba(255,255,255,.05); }
+.receipt { display: flex; align-items: center; gap: 12px; height: 34px; padding: 0 8px 0 16px; border-radius: 999px; box-shadow: inset 0 0 0 1px var(--rule-soft); background: rgba(var(--sky-void-rgb),.45); color: var(--ink-soft); font-size: 13px; }
+.receipt .dot { width: 7px; height: 7px; border-radius: 50%; background: rgba(var(--sky-ink-rgb),.5); box-shadow: 0 0 0 4px rgba(var(--sky-ink-rgb),.05); }
 .receipt button { border: 0; background: transparent; color: var(--ink-dim); cursor: pointer; height: 26px; padding: 0 8px; border-radius: 999px; font-size: 12px; white-space: nowrap; flex-shrink: 0; }
 .receipt button:hover { color: var(--ink); background: var(--glass); }
 
-.glass { background: rgba(255,255,255,.07); box-shadow: inset 0 0 0 1px rgba(255,255,255,.14), inset 0 1px 0 rgba(255,255,255,.12), 0 18px 40px rgba(0,0,0,.6); backdrop-filter: blur(14px) saturate(140%); -webkit-backdrop-filter: blur(14px) saturate(140%); }
+.glass { background: rgba(var(--sky-ink-rgb),.07); box-shadow: inset 0 0 0 1px rgba(var(--sky-ink-rgb),.14), inset 0 1px 0 rgba(var(--sky-ink-rgb),.12), 0 18px 40px var(--sky-drop); backdrop-filter: blur(14px) saturate(140%); -webkit-backdrop-filter: blur(14px) saturate(140%); }
 .card { position: fixed; z-index: 7; max-width: 300px; padding: 12px 14px; border-radius: 14px; pointer-events: none; color: var(--ink); font-size: 13.5px; line-height: 1.4; display: flex; flex-direction: column; gap: 5px; opacity: 0; transform: translateY(4px); transition: opacity .12s ease, transform .12s ease; }
 .card.on { opacity: 1; transform: none; }
 .card .k { display: flex; align-items: center; gap: 8px; }
@@ -131,7 +159,7 @@ html[data-fullscreen="on"] .sky-stage .top { padding-right: 184px; }
 .menu button { border: 0; background: transparent; color: var(--ink-soft); text-align: left; padding: 8px 10px; border-radius: 8px; font-size: 13.5px; cursor: pointer; }
 .menu button:hover { background: var(--glass-strong); color: var(--ink); }
 
-.panel { position: fixed; right: 20px; top: calc(140px + env(safe-area-inset-top, 0px)); bottom: calc(96px + env(safe-area-inset-bottom, 0px)); width: 340px; z-index: 5; display: flex; flex-direction: column; gap: 14px; padding: 22px 24px; border-radius: 16px; background: rgba(0,0,0,.62); box-shadow: inset 0 0 0 1px var(--rule-soft); backdrop-filter: blur(8px); overflow: auto; }
+.panel { position: fixed; right: 20px; top: calc(140px + env(safe-area-inset-top, 0px)); bottom: calc(96px + env(safe-area-inset-bottom, 0px)); width: 340px; z-index: 5; display: flex; flex-direction: column; gap: 14px; padding: 22px 24px; border-radius: 16px; background: rgba(var(--sky-void-rgb),.62); box-shadow: inset 0 0 0 1px var(--rule-soft); backdrop-filter: blur(8px); overflow: auto; }
 .panel .kind { display: flex; align-items: center; gap: 12px; min-height: 28px; }
 .panel .kind .glyph { width: 32px; display: grid; place-items: center; }
 .panel h2 { margin: 0; font-size: 21px; font-weight: 300; line-height: 1.25; letter-spacing: -.02em; text-wrap: balance; }
@@ -157,7 +185,7 @@ html[data-fullscreen="on"] .sky-stage .top { padding-right: 184px; }
 .orbit-list .st { font: var(--label); letter-spacing: .1em; text-transform: uppercase; color: var(--ink-dim); flex-shrink: 0; width: 72px; }
 .orbit-list .st.live { color: var(--accent); }
 
-.room { position: fixed; left: 20px; top: calc(140px + env(safe-area-inset-top, 0px)); bottom: calc(96px + env(safe-area-inset-bottom, 0px)); width: 440px; z-index: 5; display: flex; flex-direction: column; gap: 14px; padding: 22px 0 0; border-radius: 16px; background: rgba(0,0,0,.62); box-shadow: inset 0 0 0 1px var(--rule-soft); backdrop-filter: blur(8px); }
+.room { position: fixed; left: 20px; top: calc(140px + env(safe-area-inset-top, 0px)); bottom: calc(96px + env(safe-area-inset-bottom, 0px)); width: 440px; z-index: 5; display: flex; flex-direction: column; gap: 14px; padding: 22px 0 0; border-radius: 16px; background: rgba(var(--sky-void-rgb),.62); box-shadow: inset 0 0 0 1px var(--rule-soft); backdrop-filter: blur(8px); }
 .room .head { display: flex; align-items: baseline; gap: 14px; padding: 0 24px; }
 .room .head h2 { margin: 0; font-size: 21px; font-weight: 300; letter-spacing: -.02em; }
 .room .head .lbl { margin-left: auto; }
@@ -175,9 +203,9 @@ html[data-fullscreen="on"] .sky-stage .top { padding-right: 184px; }
 .empty { padding: 20px 24px; color: var(--ink-dim); font-size: 14px; }
 
 .jump { position: fixed; left: 20px; top: calc(76px + env(safe-area-inset-top, 0px)); z-index: 6; }
-.jump input { width: 260px; height: 40px; border-radius: 999px; border: 0; box-shadow: inset 0 0 0 1px var(--rule-soft); background: rgba(0,0,0,.5); color: var(--ink); padding: 0 16px; font: 400 14px/1 var(--face); }
+.jump input { width: 260px; height: 40px; border-radius: 999px; border: 0; box-shadow: inset 0 0 0 1px var(--rule-soft); background: rgba(var(--sky-void-rgb),.5); color: var(--ink); padding: 0 16px; font: 400 14px/1 var(--face); }
 .jump input::placeholder { color: var(--ink-dim); }
-.jump ul { list-style: none; margin: 6px 0 0; padding: 6px; border-radius: 12px; background: rgba(0,0,0,.8); box-shadow: inset 0 0 0 1px var(--rule-soft); max-height: 300px; overflow: auto; width: 360px; }
+.jump ul { list-style: none; margin: 6px 0 0; padding: 6px; border-radius: 12px; background: rgba(var(--sky-void-rgb),.8); box-shadow: inset 0 0 0 1px var(--rule-soft); max-height: 300px; overflow: auto; width: 360px; }
 .jump li button { width: 100%; text-align: left; border: 0; background: transparent; color: var(--ink-soft); padding: 8px 10px; border-radius: 8px; font-size: 13.5px; cursor: pointer; display: flex; gap: 10px; align-items: baseline; }
 .jump li button:hover, .jump li button:focus-visible { background: var(--glass); color: var(--ink); }
 .jump li .lbl { flex-shrink: 0; width: 60px; }
@@ -185,7 +213,7 @@ html[data-fullscreen="on"] .sky-stage .top { padding-right: 184px; }
 .tour, .start { position: fixed; left: 50%; bottom: calc(110px + env(safe-area-inset-bottom, 0px)); transform: translateX(-50%); width: min(560px, calc(100% - 32px)); z-index: 8; padding: 18px 22px 16px; border-radius: 16px; display: flex; flex-direction: column; gap: 10px; }
 .tour .step { display: flex; align-items: center; gap: 10px; }
 .tour .dots { display: flex; gap: 5px; margin-left: auto; }
-.tour .dots i { width: 5px; height: 5px; border-radius: 50%; background: rgba(255,255,255,.2); }
+.tour .dots i { width: 5px; height: 5px; border-radius: 50%; background: rgba(var(--sky-ink-rgb),.2); }
 .tour .dots i.on { background: var(--accent); }
 .tour h3, .start h3 { margin: 0; font-size: 19px; font-weight: 300; letter-spacing: -.02em; line-height: 1.25; }
 .tour p, .start p { margin: 0; font-size: 14px; line-height: 1.5; color: var(--ink-soft); }
@@ -206,7 +234,7 @@ html[data-fullscreen="on"] .sky-stage .top { padding-right: 184px; }
 .alt { margin-left: auto; min-width: 0; overflow: hidden; text-overflow: ellipsis; text-align: right; color: var(--ink-dim); font: var(--mono); font-variant-numeric: tabular-nums; white-space: nowrap; }
 .alt b { color: var(--ink-soft); font-weight: 400; }
 .hint { color: var(--ink-ghost); }
-.time { display: flex; align-items: center; gap: 8px; width: min(360px, 100%); align-self: center; padding: 3px 4px 3px 4px; border-radius: 999px; background: rgba(0,0,0,.45); box-shadow: inset 0 0 0 1px var(--rule-soft); opacity: .8; }
+.time { display: flex; align-items: center; gap: 8px; width: min(360px, 100%); align-self: center; padding: 3px 4px 3px 4px; border-radius: 999px; background: rgba(var(--sky-void-rgb),.45); box-shadow: inset 0 0 0 1px var(--rule-soft); opacity: .8; }
 .time:hover { opacity: 1; }
 .time .play { width: 24px; height: 24px; border-radius: 50%; border: 0; background: var(--glass-strong); color: var(--ink); cursor: pointer; display: grid; place-items: center; font-size: 9px; flex-shrink: 0; }
 .time .play[aria-pressed="true"] { background: var(--accent); color: var(--accent-on); }
@@ -218,7 +246,7 @@ html[data-fullscreen="on"] .sky-stage .top { padding-right: 184px; }
 .composer .mode:hover { color: var(--ink); }
 .composer .mode[aria-pressed="true"] { background: var(--glass-strong); color: var(--ink); }
 .composer .mode[aria-pressed="true"]::before { content: ""; display: inline-block; width: 6px; height: 6px; border-radius: 50%; background: var(--accent); margin-right: 7px; vertical-align: 1px; }
-.steps { display: flex; align-items: center; flex-wrap: wrap; gap: 6px 10px; max-width: 100%; font-size: 13px; color: var(--ink-soft); padding: 5px 8px 5px 14px; border-radius: 999px; background: rgba(0,0,0,.5); box-shadow: inset 0 0 0 1px var(--rule-soft); }
+.steps { display: flex; align-items: center; flex-wrap: wrap; gap: 6px 10px; max-width: 100%; font-size: 13px; color: var(--ink-soft); padding: 5px 8px 5px 14px; border-radius: 999px; background: rgba(var(--sky-void-rgb),.5); box-shadow: inset 0 0 0 1px var(--rule-soft); }
 .steps b { font: var(--label); letter-spacing: .14em; text-transform: uppercase; color: var(--accent); font-weight: 400; }
 .steps .skip { border: 0; background: transparent; color: var(--ink-dim); cursor: pointer; font-size: 12px; height: 24px; padding: 0 8px; border-radius: 999px; }
 .steps .skip:hover { color: var(--ink); background: var(--glass); }
@@ -227,18 +255,18 @@ html[data-fullscreen="on"] .sky-stage .top { padding-right: 184px; }
 .mk { display: block; width: 9px; height: 9px; border-radius: 50%; box-sizing: border-box; }
 .mk.star { background: var(--accent); box-shadow: 0 0 10px color-mix(in srgb, var(--accent) 75%, transparent); }
 .mk.star.dim { opacity: .55; box-shadow: 0 0 4px color-mix(in srgb, var(--accent) 40%, transparent); }
-.mk.protostar { width: 7px; height: 7px; background: rgba(255,255,255,.5); box-shadow: 0 0 0 4px rgba(255,255,255,.05); }
-.mk.satellite { width: 6px; height: 6px; background: rgba(255,255,255,.4); outline: 1px solid rgba(255,255,255,.16); outline-offset: 3px; }
-.mk.remnant { width: 12px; height: 12px; background: transparent; border: 1px solid rgba(255,255,255,.4); }
-.mk.cold { width: 6px; height: 6px; background: #141418; border: 1px solid rgba(255,255,255,.18); }
-.mk.well { width: 14px; height: 14px; background: transparent; border: 1px dashed rgba(255,255,255,.35); }
-.mk.alive { width: 14px; height: 14px; background: transparent; border: 1px solid rgba(255,255,255,.35); box-shadow: 0 0 0 3px color-mix(in srgb, var(--accent) 25%, transparent), 0 0 10px var(--accent); }
-.mk.settled { width: 12px; height: 12px; background: transparent; border: 1px solid rgba(255,255,255,.5); box-shadow: inset 0 0 0 3px #000, inset 0 0 0 4px rgba(255,255,255,.35), 0 0 8px rgba(255,255,255,.25); }
-.mk.collapsed { width: 9px; height: 9px; background: #000; border: 1px solid rgba(255,255,255,.3); box-shadow: 0 0 0 2px rgba(0,0,0,1), 0 0 0 3px rgba(255,255,255,.08); }
-.mk.unseen { width: 12px; height: 12px; background: transparent; border: 1px dashed rgba(255,255,255,.2); }
-.mk.task { width: 4px; height: 4px; background: rgba(255,255,255,.6); }
+.mk.protostar { width: 7px; height: 7px; background: rgba(var(--sky-ink-rgb),.5); box-shadow: 0 0 0 4px rgba(var(--sky-ink-rgb),.05); }
+.mk.satellite { width: 6px; height: 6px; background: rgba(var(--sky-ink-rgb),.4); outline: 1px solid rgba(var(--sky-ink-rgb),.16); outline-offset: 3px; }
+.mk.remnant { width: 12px; height: 12px; background: transparent; border: 1px solid rgba(var(--sky-ink-rgb),.4); }
+.mk.cold { width: 6px; height: 6px; background: var(--sky-cold); border: 1px solid rgba(var(--sky-ink-rgb),.18); }
+.mk.well { width: 14px; height: 14px; background: transparent; border: 1px dashed rgba(var(--sky-ink-rgb),.35); }
+.mk.alive { width: 14px; height: 14px; background: transparent; border: 1px solid rgba(var(--sky-ink-rgb),.35); box-shadow: 0 0 0 3px color-mix(in srgb, var(--accent) 25%, transparent), 0 0 10px var(--accent); }
+.mk.settled { width: 12px; height: 12px; background: transparent; border: 1px solid rgba(var(--sky-ink-rgb),.5); box-shadow: inset 0 0 0 3px var(--void), inset 0 0 0 4px rgba(var(--sky-ink-rgb),.35), 0 0 8px rgba(var(--sky-ink-rgb),.25); }
+.mk.collapsed { width: 9px; height: 9px; background: var(--void); border: 1px solid rgba(var(--sky-ink-rgb),.3); box-shadow: 0 0 0 2px rgba(var(--sky-void-rgb),1), 0 0 0 3px rgba(var(--sky-ink-rgb),.08); }
+.mk.unseen { width: 12px; height: 12px; background: transparent; border: 1px dashed rgba(var(--sky-ink-rgb),.2); }
+.mk.task { width: 4px; height: 4px; background: rgba(var(--sky-ink-rgb),.6); }
 .mk.task.live { background: var(--accent); box-shadow: 0 0 6px var(--accent); }
-.mk.born { width: 10px; height: 10px; background: transparent; border: 1px solid var(--accent); box-shadow: inset 0 0 0 2px #000, inset 0 0 0 5px var(--accent); }
+.mk.born { width: 10px; height: 10px; background: transparent; border: 1px solid var(--accent); box-shadow: inset 0 0 0 2px var(--void), inset 0 0 0 5px var(--accent); }
 .mk.route { width: 14px; height: 2px; border-radius: 1px; background: var(--chart); box-shadow: 0 0 6px var(--chart); }
 
 @media (max-width: 900px) {

package/modules/hall-ui/records/profile-roles.md

@@ -30,3 +30,21 @@ Three fixtures, one per craft: `builders__profile` (the engineer, id 95, the vie
 - The engineer tile "works shipped" has no "across N goals" foot, the ideator's "thoughts filed" no "since <month>" foot, the artist's "credits from pages" no "N a page" foot, and the surface rows no "where" sub-label: none of those is in the read.
 - **Karma ends every artist's and ideator's set of tiles**, which the mock does not draw. The owner's call, reviewing this build on 2026-10-01: "karma for artists and ideators is definitely key". The engineer's set carries it already.
 - The tiles' grid fits at 148px rather than 170px, so five tiles sit on one row inside the hall's narrower panel.
+
+## The Activity tabs, one per role (task 1004435, WA6.RP05)
+
+The section used to offer All / Engineer / Artist / Ideator / UI tabs over one task ledger, so an ideator's tab listed tasks whose discipline happened to be "ideator" and an artist's listed only artist-labelled tasks they had shipped. Now there is **one tab per role the person has** (`roles.shown`, the header's chips, main first), each counted the way the header leads, each its craft's own record, each with its own panel:
+
+- **Engineer**: the works completed and goals created ledgers, WHOLE (no craft filter: most of the corpus is unclassified and a filter reads as "you did less").
+- **Ideator**: the room's public trail, `public/profile-crafts.js`. One read of up to the route's cap of thoughts (`GET /inbox/by-builder/:id`, which already carried each thought's `state` and `size`), drawn as the sky's five marks by the day each was filed (size = diameter, brightness = a star's opacity, a folded-in thought tethered to the one it joined), the legend in the sky's words from `OTBIdeaObjects`, and every drawn thought a row in the ledger under it: state, size (~ for a historical estimate), still alive, and the old trail's "what became of it" cell folded in whole. A mark and its row light together on hover or focus; clicking a mark focuses its row.
+- **Artist**: the pages they rewrote in Tweak Mode that were approved, four at a time with "Show N more", from `GET /copy-desk/artists/:id/pages` (signed in; copy-desk's `composeArtistPages`). Each row: page, surface, approval day, changed-line count, and a before/after: the round's first changed line beside the approval renders (`/tasks/:id/visuals`, `before-` and `after-desktop-light`) as small thumbnails.
+
+Signed out, the section is one sign-in line (owner decision (a)).
+
+### Deliberate differences from the mock (RP05)
+
+- **The tab labels are lowercase**, the hall's own `.setup__tab` style; the mock capitalises them. The live hall's chrome wins over a mock's (the blend rule).
+- **"What became of it" is the existing cell**, with its links, descent and triage note, not the mock's short phrase: the task asked to fold the old trail in, not to lose what it said.
+- **The whole after line is highlighted**, where the mock highlights only the changed words: the batch stores whole lines, not the changed span.
+- **The artist tab's lede does not say what each page paid**: the pay per page is not in the read.
+- **The trail's window** is the span of the person's own thoughts (at least a month), with a line at each month, rather than the mock's fixed three months.

package/modules/npm-release/public/work.js

@@ -88,6 +88,77 @@
       </li>`;
   }
 
+  // ---- this hall's own upgrades (task 1004297) ----------------------------------------
+  //
+  // The Bongos hall takes every new version by itself, so the page has to say two things the
+  // stages cannot: whether that is still happening, and whether a version was tried here and
+  // rolled back. Both come off the server's reading; nothing is inferred here.
+  const HOW = {
+    door: 'Upgrade pressed on /deploy',
+    sweep: 'the automatic update',
+    server: 'on the server',
+  };
+
+  function ago(iso) {
+    const t = Date.parse(iso);
+    if (!Number.isFinite(t)) return 'a while ago';
+    const mins = Math.max(0, Math.round((Date.now() - t) / 60000));
+    if (mins < 1) return 'just now';
+    if (mins < 60) return `${mins} minute${mins === 1 ? '' : 's'} ago`;
+    const hours = Math.round(mins / 60);
+    if (hours < 48) return `${hours} hour${hours === 1 ? '' : 's'} ago`;
+    return `${Math.round(hours / 24)} days ago`;
+  }
+
+  // A stalled wait is the automation having stopped, and gets the warning box; an ordinary one
+  // (published minutes ago) is one quiet sentence, because it is the system working.
+  function waitingHtml(w) {
+    if (!w || !w.first) return '';
+    const more = w.versions > 1 ? ` (and ${w.versions - 1} newer)` : '';
+    const since = w.since ? ` ${ago(w.since)}` : '';
+    if (w.stalled) {
+      return `<div class="ov-note ov-note--warn"><p><strong>The automatic update may have stopped.</strong> ${escapeHtml(w.first)}${escapeHtml(more)} was published${escapeHtml(since)} and this hall has not installed it. Each new version should reach this hall by itself within about fifteen minutes of being published.</p></div>`;
+    }
+    return `<p class="ov-row__sub">${escapeHtml(w.first)}${escapeHtml(more)} was published${escapeHtml(since)}; this hall takes it on its next automatic update.</p>`;
+  }
+
+  function upgradeRow(u) {
+    const facts = [`<span class="ov-fact">${escapeHtml(HOW[u.how] || HOW.server)}</span>`];
+    if (u.rolled_back) facts.unshift('<span class="ov-fact"><b>rolled back</b></span>');
+    const move = `${u.from || '(none)'} → ${u.to || '?'}`;
+    return `<li class="ov-row ov-row--dense${u.rolled_back ? ' nr-upgrade--back' : ''}">
+        <div class="ov-row__main">
+          <span class="ov-row__title ov-key">${escapeHtml(u.rolled_back ? `Tried ${move}` : move)}</span>
+          ${u.rolled_back ? `<p class="ov-row__sub">${escapeHtml(u.reason ? `It did not come back healthy (${unDash(u.reason)}), so the hall went back to ${u.from || 'the version before'}.` : `It did not come back healthy, so the hall went back to ${u.from || 'the version before'}.`)}</p>` : ''}
+          <div class="ov-row__facts">${facts.join('')}</div>
+        </div>
+        <div class="ov-row__right">${when(u.at)}</div>
+      </li>`;
+  }
+
+  function upgradesHtml(d) {
+    const u = d.upgrades;
+    if (!u) return '';
+    let body;
+    if (!u.ok) body = `<p class="ov-row__sub">${escapeHtml(u.error || 'This hall\'s upgrade ledger could not be read')}.</p>`;
+    else if (!u.rows.length) body = '<p class="ov-row__sub">No upgrade is recorded on this hall yet.</p>';
+    else body = `<ul class="ov-rows">${u.rows.map(upgradeRow).join('')}</ul>`;
+    const latest = u.ok && u.rows[0];
+    const warn = latest && latest.rolled_back
+      ? `<div class="ov-note ov-note--warn"><p><strong>The last upgrade here was rolled back.</strong> ${escapeHtml(latest.to || 'That version')} was installed, did not come back healthy, and was undone. This hall will not try it again for a day; the next newer version is installed as soon as it is published.</p></div>`
+      : '';
+    return `<div class="ov-group" data-upgrades>
+        <div class="ov-group__head">
+          <span class="ov-group__name">Upgrades on this hall</span>
+          ${u.ok ? `<span class="ov-group__n">${u.rows.length}</span>` : ''}
+        </div>
+        <p class="ov-row__sub">Each new version should reach this hall by itself within about fifteen minutes of being published, checked that the site came back healthy, and rolled back if it did not.</p>
+        ${warn}
+        ${warn ? '' : waitingHtml(d.waiting)}
+        ${body}
+      </div>`;
+  }
+
   function moreButton(key, total, shown) {
     return total > shown ? `<button type="button" class="ov-toggle" data-expand="${escapeHtml(key)}">Show all ${total}</button>` : '';
   }
@@ -251,6 +322,7 @@
       ${problemsHtml(data)}
       ${figsHtml(stages, data)}
       ${groups || '<p class="ov-row__sub">Nothing was finished in this window.</p>'}
+      ${upgradesHtml(data)}
       <p class="ov-foot">read ${escapeHtml(new Date(data.checked_at).toLocaleTimeString())} · ${escapeHtml(data.package)} · release notes from ${escapeHtml(data.notes.source ? `${data.notes.source.from === 'package' ? 'the published' : 'this hall\'s'} ${data.notes.source.version} package` : 'nowhere')}</p>`;
     work.hidden = false;
     if (vers) {

package/modules/npm-release/work.js

@@ -189,6 +189,66 @@ async function taskTitles(pool, ids) {
   return new Map(rows.map((r) => [String(r.id), r.title]));
 }
 
+// THIS HALL'S OWN UPGRADES (task 1004297) — the core_upgrades ledger `bongos upgrade` writes on
+// every move and every rollback, newest first. The Bongos hall takes each new version by itself
+// now, so this list is the record of that happening — and a rolled-back row is the one thing on
+// this page that says a version was tried here and refused. Fail-soft: an unreadable ledger is
+// reported as unreadable, never as "no upgrades".
+//
+// HOW IT WAS MOVED (`how`: a method, never a person's name) is only as precise as the ledger is: 'owner-control' is the Upgrade button on
+// /deploy; a row the lane noted as `auto-subscription` is the unattended sweep; anything else was
+// started on the server, by the sweep through go-live or by a person at a shell, and the ledger
+// does not tell those two apart — so the page says "on the server" rather than guess.
+const UPGRADES_SHOWN = 8;
+async function recentUpgrades(pool) {
+  try {
+    const { rows } = await pool.query(
+      `SELECT from_version, to_version, applied_at, source, note
+         FROM core_upgrades
+        ORDER BY applied_at DESC, id DESC
+        LIMIT $1`,
+      [UPGRADES_SHOWN]
+    );
+    return {
+      ok: true,
+      rows: rows.map((r) => {
+        const note = r.note == null ? '' : String(r.note);
+        const rolledBack = /^rolled_back:/.test(note);
+        const how = r.source === 'owner-control' ? 'door'
+          : /auto-subscription/.test(note) ? 'sweep'
+            : 'server';
+        return {
+          from: r.from_version || null,
+          to: r.to_version || null,
+          at: r.applied_at ? new Date(r.applied_at).toISOString() : null,
+          how,
+          rolled_back: rolledBack,
+          // "rolled_back: <reason> (attempted A → B, restored C)" — the reason, bounded.
+          reason: rolledBack ? boundText(note.replace(/^rolled_back:\s*/, '').replace(/\s*\(attempted[^)]*\)\s*$/, '')) : null,
+        };
+      }),
+    };
+  } catch (e) {
+    return { ok: false, error: `this hall's upgrade ledger could not be read (${e.message})` };
+  }
+}
+
+// HOW LONG THE NEWEST VERSION HAS BEEN WAITING HERE (task 1004297). The Bongos hall takes every
+// new version by itself, within one sweep of it being published; a version that has waited longer
+// than twice that is the automation having stopped, and the page says so rather than letting it
+// look like an ordinary queue. The sweep's period is host configuration (15 minutes, declared in
+// config/scheduled-routines.json); this is the threshold, not a reading of it.
+const WAIT_ALARM_MIN = 30;
+function waitingHere({ live, versions, published, now }) {
+  if (!live || !Array.isArray(versions)) return null;
+  const newer = versions.filter((v) => compareVersions(v, live) > 0).sort(compareVersions);
+  if (!newer.length) return null;
+  const first = newer[0];
+  const since = published[first] ? Date.parse(published[first]) : NaN;
+  const minutes = Number.isFinite(since) ? Math.max(0, Math.round((now - since) / 60000)) : null;
+  return { versions: newer.length, first, since: Number.isFinite(since) ? new Date(since).toISOString() : null, minutes, stalled: minutes != null && minutes > WAIT_ALARM_MIN };
+}
+
 function clampInt(v, dflt, max) {
   const n = Number.parseInt(v, 10);
   return Number.isInteger(n) && n > 0 ? Math.min(n, max) : dflt;
@@ -256,9 +316,11 @@ async function readWork({
     for (const v of hist.versions) for (const e of v.entries || []) if (e.id && !e.title) e.title = more.get(e.id) || null;
   }
 
+  const at = now ? now() : Date.now();
+  const isCore = pkg === CORE_PACKAGE;
   return {
     package: pkg,
-    checked_at: new Date(now ? now() : Date.now()).toISOString(),
+    checked_at: new Date(at).toISOString(),
     live: liveVersion,
     released,
     newest: registry.ok ? registry.newest : null,
@@ -267,6 +329,10 @@ async function readWork({
     window_days: windowDays,
     stages,
     history: hist,
+    // Only the core's page has a "this hall" to have upgraded: another package is not what this
+    // server runs.
+    upgrades: isCore ? await recentUpgrades(pool) : null,
+    waiting: isCore && registry.ok ? waitingHere({ live: liveVersion, versions: registry.versions, published, now: at }) : null,
   };
 }
 

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.20.77",
+  "version": "1.20.78",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.20.77",
+      "version": "1.20.78",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.20.77",
+  "version": "1.20.78",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -8591,5 +8591,23 @@
       "id": "1004419",
       "text": "New founders now answer the last three planet questions: how many people will build (with a growth guess they can adjust), how builders might be rewarded (skipped for someone building alone), and how much the platform should r"
     }
+  ],
+  "1.20.78": [
+    {
+      "id": "1004500",
+      "text": "Your thinking and the project sky now have a light mode. When the hall is set to light, the sky turns to paper with ink-drawn rings and thoughts and light panels; switch to dark and the black night sky comes back exactly as be"
+    },
+    {
+      "id": "1004435",
+      "text": "A profile's Activity section now has one tab for each role the person has, each with a count. The engineer tab lists their finished work and the goals they created. The ideator tab draws their ideas as the sky trail, with a li"
+    },
+    {
+      "id": "1004488",
+      "text": "The script that updates the database on every deploy could randomly re-run a handful of updates it had already made. Most were harmless repeats, but one could change live data or fail a deploy. It now checks reliably, proven o"
+    },
+    {
+      "id": "1004297",
+      "text": "Each project can now be set to take every new version (Bongos) or only released ones (everyone else), a version that fails is no longer retried in a loop, and the deploy page shows each upgrade, any rollback, and when the auto"
+    }
   ]
 }

package/scripts/gds/update-channel.js

@@ -17,6 +17,16 @@
 // A MAJOR bump is NEVER automatic under any channel — a major is a breaking change that wants a human.
 // Prereleases (1.17.2-rc.1) are never auto-target either — only stable releases.
 //
+// A second, independent axis says WHICH published versions an instance may take at all (task 1004297,
+// ADR 0360) — its FOLLOW:
+//   released   — only versions at or below the one the registry labels `latest`, i.e. what the owner
+//                has released to other projects. DEFAULT, for every project.
+//   candidates — every published version, the moment it is published. The platform's own hall, and
+//                only it: Bongos runs each version before anyone else is offered it.
+// The channel bounds how FAR a jump may go; the follow bounds which versions exist to jump to. Until
+// candidates publish under their own label (task 1004298), `latest` is the newest version and the two
+// follows pick the same target — the axis exists first so that the split changes nothing for Bongos.
+//
 // WHY the registry as the source (not vendored tarballs): a subscription needs a LIVE source of
 // truth for "what's the newest published core?" — that's `npm view @bongos/core versions` against the
 // private registry (ADR 0134, task 2090). The vendored path is for a one-off manual bump.
@@ -28,6 +38,10 @@ const { spawnSync } = require('node:child_process');
 const CORE_PKG = '@bongos/core';
 const VALID_CHANNELS = ['pinned', 'patch', 'minor'];
 const DEFAULT_CHANNEL = 'patch';
+const VALID_FOLLOWS = ['released', 'candidates'];
+// Unknown or absent reads as `released`: the follow that takes FEWER versions is the safe default,
+// the way an unknown channel reads as `patch` rather than `minor`.
+const DEFAULT_FOLLOW = 'released';
 const NPM_VIEW_TIMEOUT_MS = 30000;
 // The subscription manifest an operator edits to opt instances in. Ships EMPTY (instances: []) in the
 // core template — a fresh instance subscribes nothing until the operator lists a target here.
@@ -109,6 +123,22 @@ function normalizeChannel(channel) {
   return VALID_CHANNELS.includes(c) ? c : DEFAULT_CHANNEL;
 }
 
+function normalizeFollow(follow) {
+  const f = String(follow == null ? '' : follow).trim().toLowerCase();
+  return VALID_FOLLOWS.includes(f) ? f : DEFAULT_FOLLOW;
+}
+
+// The published versions an instance's FOLLOW admits (task 1004297). PURE. `candidates` admits every
+// one; `released` admits those at or below `released` — the version the registry labels `latest` —
+// and NOTHING when that label is unknown: an instance that follows releases must never take a version
+// because nobody could say whether it was released. Feed the result to resolveChannelTarget.
+function versionsForFollow({ follow, available, released } = {}) {
+  const list = Array.isArray(available) ? available.filter((v) => typeof v === 'string') : [];
+  if (normalizeFollow(follow) === 'candidates') return list;
+  if (!parseSemver(released)) return [];
+  return list.filter((v) => compareSemver(v, released) <= 0);
+}
+
 // Would `channel` permit an unattended jump from `installed` to `candidate`? True only when candidate
 // is a STABLE release strictly newer than installed AND within the channel's blast radius. Any invalid
 // input, an unknown installed version, a prerelease candidate, or a major bump ⇒ false (fail-closed).
@@ -174,6 +204,34 @@ function parseNpmViewVersions(stdout) {
   return { ok: false, error: 'unexpected npm view shape', versions: [] };
 }
 
+// Which version is RELEASED — the one the registry labels `latest` (task 1004297) — via
+// `npm view … dist-tags --json`. A separate read from listAvailableVersions on purpose: that one's
+// output shape is relied on by the deploy door and `bongos upgrade`, and it stays exactly as it is.
+// Fail-SOFT like its sibling: { ok:false, error } on any failure, never a throw. `released` is null
+// unless the label names a stable version.
+function readReleaseTags({ cwd = process.cwd(), pkg = CORE_PKG, run = spawnSync, env = process.env, timeoutMs = NPM_VIEW_TIMEOUT_MS } = {}) {
+  let res;
+  try {
+    res = run('npm', ['view', pkg, 'dist-tags', '--json'], { cwd, env, encoding: 'utf8', timeout: timeoutMs });
+  } catch (e) {
+    return { ok: false, error: e && e.message ? e.message : String(e), released: null, tags: {} };
+  }
+  if (!res || res.status !== 0) {
+    const reason = (res && (res.stderr || res.error && res.error.message)) || `exit ${res && res.status}`;
+    return { ok: false, error: String(reason).trim().split('\n')[0] || 'npm view failed', released: null, tags: {} };
+  }
+  let tags;
+  try { tags = JSON.parse(String(res.stdout || '').trim() || '{}'); } catch (e) {
+    return { ok: false, error: `unparseable npm output: ${e.message}`, released: null, tags: {} };
+  }
+  if (!tags || typeof tags !== 'object' || Array.isArray(tags)) return { ok: false, error: 'unexpected npm view shape', released: null, tags: {} };
+  const latest = typeof tags.latest === 'string' ? tags.latest : null;
+  const released = latest && isStable(latest) ? latest : null;
+  return released
+    ? { ok: true, released, tags }
+    : { ok: false, error: 'the registry names no released (latest) version', released: null, tags };
+}
+
 // ---- subscription manifest --------------------------------------------------
 
 // Read + normalize config/update-subscriptions.json — the operator-edited opt-in list of instances
@@ -191,6 +249,7 @@ function loadSubscriptions({ instanceDir = process.cwd(), fsImpl = fs, file = SU
   let json;
   try { json = JSON.parse(raw); } catch (e) { return { defaultChannel: DEFAULT_CHANNEL, instances: [], source: abs, present: true, dropped: 0, error: `malformed JSON: ${e.message}`, reason: ROSTER_MALFORMED }; }
   const defaultChannel = normalizeChannel(json.defaultChannel);
+  const defaultFollow = normalizeFollow(json.defaultFollow);
   const rows = Array.isArray(json.instances) ? json.instances : [];
   // An entry without a dir can't be upgraded — drop it, but COUNT the drops. Silently discarding an
   // operator's malformed row is how an instance believes it is enrolled while nothing ever touches it.
@@ -203,6 +262,9 @@ function loadSubscriptions({ instanceDir = process.cwd(), fsImpl = fs, file = SU
       service: r.service ? String(r.service) : null,
       healthUrl: r.healthUrl ? String(r.healthUrl) : null,
       channel: normalizeChannel(r.channel == null ? defaultChannel : r.channel),
+      // Which versions this instance takes at all (task 1004297): `released` unless the operator
+      // says `candidates` — which only the platform's own hall should.
+      follow: normalizeFollow(r.follow == null ? defaultFollow : r.follow),
       // Deploy topology (task 1003219). Optional, and only meaningful together: with
       // versionUrl + deployTimer present the sweep can hand the bump to go-live.js and
       // inherit its backup, pull-deploy-timer guard and INDEPENDENT box-side version
@@ -223,7 +285,7 @@ function loadSubscriptions({ instanceDir = process.cwd(), fsImpl = fs, file = SU
         : {},
     }));
   return {
-    defaultChannel, instances, source: abs, present: true, dropped,
+    defaultChannel, defaultFollow, instances, source: abs, present: true, dropped,
     reason: instances.length ? ROSTER_OK : ROSTER_EMPTY,
   };
 }
@@ -396,6 +458,11 @@ module.exports = {
   CORE_PKG,
   VALID_CHANNELS,
   DEFAULT_CHANNEL,
+  VALID_FOLLOWS,
+  DEFAULT_FOLLOW,
+  normalizeFollow,
+  versionsForFollow,
+  readReleaseTags,
   SUBSCRIPTIONS_REL,
   parseSemver,
   isStable,