@bongos/core 1.21.109 → 1.21.111

package/modules/copy-desk/skills/tweak/SKILL.md

@@ -72,6 +72,34 @@ Heal whatever ship-check names first (`git add` new files before it). Run ship.j
 
 A failed grade is an ordinary one: read it (`GET /api/bongos/tasks/<task-id>?include=grade`), fix, commit, `node scripts/gds/ship.js <task-id> --regrade`. If the branch did not publish, a plain `node scripts/gds/ship.js <task-id>` publishes it again without re-grading.
 
+## Unattended mode: `/tweak --page <page-id> --unattended`
+
+The Autobongos tweak lane (ADR 0371 D1, D8) runs this skill with nobody at the terminal. It names ONE page and claims that page's submitted round with the `auto_pickup` mark before you start. In this mode:
+
+- **Never ask.** Every question the steps above would put to a person is a halt instead.
+- **Work only the named page.** Skip step 1's queue read; the round is the one you hold. Pass `--page <page-id>` to every script: `copy-apply.js --batch --page <page-id> --unattended` refuses a round for another page (exit 5) and, on any non-zero exit, releases the round with a plain note itself.
+- **Change only the page's own files.** No shell cache-bust, no hand fix of a refused line, no edit outside the page's files in `docs/page-inventory.json` (besides the copy registry, the page readings and the generated maps ship.js refreshes), and no session-log file (it would move `CLAUDE.md`, a protected path). A rewrite that needs anything else is already its own engineer task.
+- **Ship one round, once, graded.** Never `--skip-grade`, `--force` or `--allow-empty`. Stop at WAITING FOR THE ARTIST.
+
+**On any halt, release and exit.** Run the matching line and stop; do not retry, and do not try another round:
+
+```bash
+node scripts/gds/tweak-halt.js <task-id> --code <code>
+```
+
+| What happened | `--code` |
+|---|---|
+| the claim was refused | `claim_refused` (nothing to release: just exit) |
+| `copy-apply` exited non-zero | already released by `--unattended` |
+| `ship-check` named something stale it cannot heal by regenerating | `ship_check_stale` |
+| the grade came back GRADER UNAVAILABLE | `grader_unavailable` |
+| the grade failed | `grade_failed` |
+| the diff would touch a file outside the page | `outside_page` |
+
+The note is fixed wording per code, so nothing you write reaches the round.
+
+**The server holds these rules, not you.** A page tweak reaches `confirmed` only through its artist's approval or the owner's override (`POST /tasks/:id/confirm` refuses it), and the publish of an `auto_pickup` round whose pull request touches a file outside the page, or a protected path, is refused and its pull request closed. Breaking a rule above gets the round refused, not landed.
+
 ## What happens next (not yours)
 
 The artist approves in the studio's Approval queue (TW12), which lands it like any confirmed task, or sends it back with a note, which returns the round to the queue for the next `/tweak`.

package/modules/discord/bug-attachments.js

@@ -55,10 +55,17 @@ const NAME_RE = /^bug-[a-z0-9]{1,40}-[0-9a-f]{16}\.(png|jpg|gif|webp)$/;
 // used to be __dirname/../../var, which is the repo root in a single checkout and
 // `node_modules/@bongos/core/var` on an instance running a vendored core — where
 // every core reinstall wipes it. That is the task 1002237 shape, and these files
-// are the one thing here that cannot be regenerated: a Discord CDN URL expires in
-// about a day, so our copy IS the image. All five attachments this instance ever
-// stored are already gone (the 2026-07-05 droplet move carried the database and
-// not var/), which is what this default is meant to stop happening again.
+// are the hardest thing here to get back. What expires in about a day is the URL
+// SIGNATURE (`?ex=&is=&hm=`), not the attachment: Discord keeps the file for as
+// long as its message exists, and `GET /channels/{channel}/messages/{message}`
+// with the bot token returns a freshly-signed URL. The stored filename carries
+// the message id (`bug-<messageId>-<rand>.<ext>`), so a lost file is still
+// addressable — `scripts/gds/bug-attachment-recover.js` re-fetches it to its
+// original name (task 1004667). It stops working the day the message is deleted
+// or the channel history is gone, so our copy is still the copy to keep. All five
+// attachments this instance ever stored went missing from disk (the 2026-07-05
+// droplet move carried the database and not var/), which is what this default is
+// meant to stop happening again.
 //
 // BUG_ATTACHMENTS_DIR still wins, and on a box where the instance root is itself
 // impermanent that override is the answer — the standup recipe says so.
@@ -155,12 +162,19 @@ function sniffMatches(buf, ext) {
 // success, or { ok:false, reason } when the image is refused (never throws on a
 // refusal; throws only on an unexpected fs error the caller wraps). `messageId`
 // just seeds the (still-random) filename so attachments group readably.
+//
+// `file` (task 1004667) writes under a GIVEN name instead of a fresh one — the
+// recovery path, re-fetching a lost image back to the exact name a task
+// description already links. The name must pass isSafeName, its extension must
+// match the bytes actually fetched, and an existing file is never overwritten.
+// Same download path, same guards: recovery does not grow a second one.
 // How many manual redirect hops we'll re-validate + follow before giving up.
 // Discord CDN attachments are direct (0 redirects) in practice; a small bound
 // covers a CDN edge bounce without becoming an open redirect-follow loop.
 const MAX_REDIRECT_HOPS = 3;
 
-async function persistImageFromUrl(url, { messageId = 'x', fetchImpl = globalThis.fetch, dir = attachmentsDir() } = {}) {
+async function persistImageFromUrl(url, { messageId = 'x', fetchImpl = globalThis.fetch, dir = attachmentsDir(), file: givenFile = null } = {}) {
+  if (givenFile != null && !isSafeName(givenFile)) return { ok: false, reason: 'bad_name' };
   if (!isAllowedAttachmentHost(url)) return { ok: false, reason: 'bad_host' };
   // L3 residual (red-team 2026-06-12): fetch with redirect:'manual' and re-run
   // the host allowlist on every Location before following. With redirect:'follow'
@@ -202,10 +216,23 @@ async function persistImageFromUrl(url, { messageId = 'x', fetchImpl = globalThi
   if (buf.length > MAX_BYTES) return { ok: false, reason: 'too_big', bytes: buf.length };
   if (!sniffMatches(buf, ext)) return { ok: false, reason: 'sniff_mismatch' };
 
-  const idSlug = String(messageId).replace(/[^a-z0-9]/gi, '').slice(0, 40).toLowerCase() || 'x';
-  const file = `bug-${idSlug}-${crypto.randomBytes(8).toString('hex')}.${ext}`;
+  let file;
+  if (givenFile != null) {
+    if (path.extname(givenFile).slice(1) !== ext) return { ok: false, reason: 'ext_mismatch', type: rawType };
+    file = givenFile;
+  } else {
+    const idSlug = String(messageId).replace(/[^a-z0-9]/gi, '').slice(0, 40).toLowerCase() || 'x';
+    file = `bug-${idSlug}-${crypto.randomBytes(8).toString('hex')}.${ext}`;
+  }
   await fs.mkdir(dir, { recursive: true });
-  await fs.writeFile(path.join(dir, file), buf, { mode: 0o640 });
+  try {
+    // 'wx' only matters for a given name (a random one cannot collide): a
+    // recovery never clobbers a file that is already there.
+    await fs.writeFile(path.join(dir, file), buf, { mode: 0o640, flag: givenFile != null ? 'wx' : 'w' });
+  } catch (e) {
+    if (e && e.code === 'EEXIST') return { ok: false, reason: 'exists' };
+    throw e;
+  }
   return { ok: true, file, url: `/api/bongos/bug-attachments/${file}`, bytes: buf.length };
 }
 

package/modules/hall-ui/public/craft-mode.js

@@ -9,7 +9,9 @@
 // It is a MODE the existing hall wears, never a second hall (the founding-mode
 // precedent, docs/design/project-startup-direction.md). The nav follows the mode
 // (task 1004493, MODE_TABS below), and so does the look (task 1004495, LOOKS
-// below); the mode tools are their own tasks (1004496 onward). Legacy mode, a
+// below); the mode tools are their own tasks (1004496 onward), and Artistry's
+// Review button opens review mode (task 1004686): the hall wears another
+// mode's experience while an artist reviews it. Legacy mode, a
 // fifth choice, was removed (task 1004567): Building already shows every tab,
 // and a stored 'legacy' now reads as no mode.
 //
@@ -32,6 +34,7 @@
     governing: '<path d="M2 6 8 2.5 14 6M3.5 6.5v6M6.5 6.5v6M9.5 6.5v6M12.5 6.5v6M2 13.5h12"/>',
     brush: '<path d="M13.6 2.4 7.4 8.6"/><path d="M7.4 8.6c-1.3-.7-3-.1-3.4 1.5-.3 1.3-.8 2.2-1.9 2.9 2.4.7 4.6.1 5.6-1.4.6-.9.5-2.1-.3-3Z"/>',
     note: '<path d="M9.5 2.5h-6v11h9v-6"/><path d="M5.5 8h5M5.5 10.5h3.5"/><path d="M12.5 1.5v4M10.5 3.5h4"/>',
+    write: '<path d="M2.5 13.5h11"/><path d="M10.4 2.6l2.9 2.9-6.4 6.4H4V9z"/>',
     modes: '<rect x="2.5" y="2.5" width="4.5" height="4.5" rx="1"/><rect x="9" y="2.5" width="4.5" height="4.5" rx="1"/><rect x="2.5" y="9" width="4.5" height="4.5" rx="1"/><rect x="9" y="9" width="4.5" height="4.5" rx="1"/>',
   };
   // The four crafts. `short` is the switch's label; `line` is the
@@ -266,7 +269,8 @@
     artistry: [
       // Named "Artist review" since task 1004499: the public site's button
       // (public-landing assets/artist-review.js) opens this same panel.
-      { id: 'palette', icon: 'artistry', short: 'Review', label: 'Artist review: write feedback on this page', script: 'page-notes.js', api: 'OTBPageNotes' },
+      // `menu`: hovering it opens the review-mode menu (task 1004686, below).
+      { id: 'palette', icon: 'artistry', short: 'Review', label: 'Artist review: write feedback on this page', script: 'page-notes.js', api: 'OTBPageNotes', menu: true },
       // Task 1004497: this page's words, edited where they stand as a proposed wording change.
       { id: 'paintbrush', icon: 'brush', short: 'Edit words', label: 'Edit this page\'s words', script: 'paintbrush.js', api: 'OTBPaintbrush' },
     ],
@@ -297,29 +301,270 @@
     for (var m in TOOLS) for (var i = 0; i < TOOLS[m].length; i++) if (TOOLS[m][i].id === id) return TOOLS[m][i];
     return null;
   }
+  // The tools a mode shows. Reviewing another experience (task 1004686), the
+  // artist keeps Artistry's tools and gains that experience's own after them.
+  function toolsFor(mode) {
+    var own = Object.prototype.hasOwnProperty.call(TOOLS, mode) ? TOOLS[mode] : [];
+    if (!review || mode === 'artistry') return own;
+    return TOOLS.artistry.concat(own);
+  }
+  function openTool(t, b) {
+    loadTool(t).then(function (api) { api.open(); }, function () { b.setAttribute('aria-disabled', 'true'); });
+  }
+  function toolButton(t) {
+    var b = document.createElement('button');
+    b.type = 'button';
+    b.id = 'craft-tool-' + t.id;
+    b.className = 'craft-tool craft-tool--' + t.id;
+    b.setAttribute('data-craft-tool', t.id);
+    b.setAttribute('aria-label', t.label);
+    b.title = t.label;
+    b.innerHTML = icon(t.icon, 'craft-tool__icon') + '<span class="craft-tool__label">' + esc(t.short) + '</span>';
+    b.addEventListener('click', function (e) {
+      // A phone has no hover, so there a tap on Review opens its menu instead.
+      if (t.menu && narrow()) { toggleReviewMenu(e && e.detail === 0); return; }
+      openTool(t, b);
+    });
+    return t.menu ? reviewGroup(t, b) : b;
+  }
+  // The node a tool occupies in the bar: its button, or Review's whole group.
+  function toolNode(t) {
+    var b = document.getElementById('craft-tool-' + t.id);
+    return b && t.menu && b.parentNode && b.parentNode.id === REVIEW_GROUP ? b.parentNode : b;
+  }
   function applyTools(mode) {
     var sw = document.getElementById('craft-switch');
-    var own = Object.prototype.hasOwnProperty.call(TOOLS, mode) ? TOOLS[mode] : [];
+    var own = toolsFor(mode);
     var old = document.querySelectorAll ? document.querySelectorAll('[data-craft-tool]') : [];
     for (var i = old.length - 1; i >= 0; i--) {
-      if (!own.some(function (t) { return t.id === old[i].getAttribute('data-craft-tool'); })) remove(old[i]);
+      if (own.some(function (t) { return t.id === old[i].getAttribute('data-craft-tool'); })) continue;
+      var t0 = toolFor(old[i].getAttribute('data-craft-tool'));
+      remove(t0 ? toolNode(t0) : old[i]);
     }
     if (!sw || !sw.parentNode) return;
+    // Right to left, each missing tool goes in front of the one after it, so
+    // the bar reads in TOOLS order whichever tools were already there.
+    var before = sw;
+    for (var j = own.length - 1; j >= 0; j--) {
+      var node = toolNode(own[j]);
+      if (!node) node = sw.parentNode.insertBefore(toolButton(own[j]), before);
+      before = node;
+    }
+    // A guest is the reviewed experience's own tool beside the artist's: under
+    // 360px the bar has no room for three, so craft-review.css folds it away.
     own.forEach(function (t) {
-      if (document.getElementById('craft-tool-' + t.id)) return;
-      var b = document.createElement('button');
-      b.type = 'button';
-      b.id = 'craft-tool-' + t.id;
-      b.className = 'craft-tool craft-tool--' + t.id;
-      b.setAttribute('data-craft-tool', t.id);
-      b.setAttribute('aria-label', t.label);
-      b.title = t.label;
-      b.innerHTML = icon(t.icon, 'craft-tool__icon') + '<span class="craft-tool__label">' + esc(t.short) + '</span>';
-      b.addEventListener('click', function () {
-        loadTool(t).then(function (api) { api.open(); }, function () { b.setAttribute('aria-disabled', 'true'); });
-      });
-      sw.parentNode.insertBefore(b, sw);
+      var el = document.getElementById('craft-tool-' + t.id);
+      if (el && el.classList) el.classList.toggle('craft-tool--guest', !!review && TOOLS.artistry.indexOf(t) === -1);
     });
+    var on = document.getElementById('craft-tool-palette');
+    if (on) {
+      on.classList.toggle('craft-tool--reviewing', !!review);
+      var word = on.querySelector && on.querySelector('.craft-tool__label');
+      if (word) word.textContent = review ? 'Reviewing' : 'Review';
+    }
+  }
+
+  // ---------- artist review mode (task 1004686) ----------
+  // Hovering Artistry's Review button opens a menu of the four experiences
+  // (owner, 2026-10-09, in the owner's order and words). Picking one makes the hall
+  // wear that mode on every page — its tabs, its look, its tools — the way a
+  // builder in it sees it, while the artist keeps Artistry's tools and small
+  // sky-style doodles are scribbled into the top bar's empty space (craft-review.js draws them,
+  // loaded only in review mode; craft-review.css styles it and the menu).
+  // The artist's own mode stays Artistry: the experience is this session's
+  // alone (sessionStorage), and choosing any mode from the switch or the
+  // picker ends it. Cosmetic like the mode: a tab the gate hides stays hidden.
+  var REVIEW_KEY = 'hall-craft-review';
+  var REVIEW_GROUP = 'craft-review';
+  var EXPERIENCES = [
+    { id: 'ideating', label: 'Ideator experience' },
+    { id: 'governing', label: 'Governing experience' },
+    { id: 'building', label: 'Building experience' },
+    { id: 'artistry', label: 'Artistry experience' },
+  ];
+  // The experience being reviewed, or null. Read from the session once, then
+  // held here, so a browser whose storage throws still reviews this page.
+  var review = null;
+  function storedReview() {
+    return read() === 'artistry' ? valid(get('sessionStorage', REVIEW_KEY)) : null;
+  }
+  // The mode the hall wears: the experience under review, else the chosen mode.
+  function wearing() { return review || read(); }
+  function startReview(mode) {
+    mode = valid(mode);
+    if (!mode) return;
+    set('sessionStorage', MODE_KEY, 'artistry');
+    set('sessionStorage', ASKED_KEY, '1');
+    set('sessionStorage', REVIEW_KEY, mode);
+    review = mode;
+    apply(mode);
+  }
+  function stopReview() {
+    drop('sessionStorage', REVIEW_KEY);
+    review = null;
+    apply('artistry');
+  }
+
+  // The menu. Hover opens it where a pointer can hover; the chevron (or, on a
+  // phone, Review itself) opens it by click, tap or keyboard. Built on every
+  // open, so the checked experience is always the live one.
+  var closeTimer = null;
+  // Hover is a mouse's alone: a touch also fires pointer events, and a laptop
+  // with a touch screen can report no hover at all, so ask the pointer itself.
+  function byMouse(e) { return !!e && e.pointerType === 'mouse'; }
+  function reviewMenuHtml() {
+    var items = '<button class="craft-review__item" type="button" role="menuitem" data-review-act="write">' +
+      icon('write', 'craft-review__icon') + '<span>Write feedback on this page</span></button>' +
+      '<p class="craft-review__head" role="presentation">Review mode</p>';
+    items += EXPERIENCES.map(function (x) {
+      var on = review === x.id;
+      return '<button class="craft-review__item" type="button" role="menuitemradio" aria-checked="' + (on ? 'true' : 'false') + '" data-review-pick="' + x.id + '">' +
+        icon(x.id, 'craft-review__icon') + '<span>' + esc(x.label) + '</span>' +
+        (on ? '<svg class="craft-review__check" viewBox="0 0 16 16" fill="none" stroke="currentColor" stroke-width="1.6" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M3.5 8.5l3 3 6-7"/></svg>' : '') +
+        '</button>';
+    }).join('');
+    if (review) {
+      items += '<button class="craft-review__item craft-review__item--stop" type="button" role="menuitem" data-review-act="stop">' +
+        '<svg class="craft-review__icon" viewBox="0 0 16 16" fill="none" stroke="currentColor" stroke-width="1.4" stroke-linecap="round" aria-hidden="true"><path d="M4.5 4.5l7 7M11.5 4.5l-7 7"/></svg><span>Stop reviewing</span></button>';
+    }
+    return items;
+  }
+  function menuEl() { return document.getElementById(REVIEW_GROUP + '-menu'); }
+  function menuItems() {
+    var m = menuEl();
+    return m && m.querySelectorAll ? Array.prototype.slice.call(m.querySelectorAll('[role^="menuitem"]')) : [];
+  }
+  function openReviewMenu(focusFirst) {
+    var m = menuEl(), more = document.getElementById(REVIEW_GROUP + '-more');
+    if (!m) return;
+    clearTimeout(closeTimer);
+    if (m.hasAttribute('hidden')) {
+      m.innerHTML = reviewMenuHtml();
+      m.removeAttribute('hidden');
+      if (more) more.setAttribute('aria-expanded', 'true');
+      document.addEventListener('click', onOutside, true);
+    }
+    if (focusFirst) {
+      var first = menuItems()[0];
+      if (first && first.focus) first.focus();
+    }
+  }
+  function closeReviewMenu(refocus) {
+    var m = menuEl(), more = document.getElementById(REVIEW_GROUP + '-more');
+    clearTimeout(closeTimer);
+    document.removeEventListener('click', onOutside, true);
+    if (!m || m.hasAttribute('hidden')) return;
+    m.setAttribute('hidden', '');
+    if (more) more.setAttribute('aria-expanded', 'false');
+    if (refocus) {
+      var back = narrow() ? document.getElementById('craft-tool-palette') : more;
+      if (back && back.focus) back.focus();
+    }
+  }
+  function toggleReviewMenu(focusFirst) {
+    var m = menuEl();
+    if (m && !m.hasAttribute('hidden')) closeReviewMenu(false); else openReviewMenu(focusFirst);
+  }
+  function onOutside(e) {
+    var g = document.getElementById(REVIEW_GROUP);
+    if (g && g.contains && !g.contains(e.target)) closeReviewMenu(false);
+  }
+  function onMenuClick(e) {
+    var btn = e.target.closest && e.target.closest('button');
+    if (!btn) return;
+    var pick = btn.getAttribute('data-review-pick');
+    var act = btn.getAttribute('data-review-act');
+    if (!pick && !act) return;
+    closeReviewMenu(false);
+    if (pick) startReview(pick);
+    else if (act === 'stop') stopReview();
+    else if (act === 'write') openTool(toolFor('palette'), document.getElementById('craft-tool-palette'));
+  }
+  // The menu keys: arrows move, Home and End jump, Escape closes back to the
+  // button that opened it, Tab closes and lets focus move on.
+  function onMenuKey(e) {
+    var items = menuItems();
+    var at = items.indexOf(document.activeElement);
+    var to = null;
+    if (e.key === 'ArrowDown') to = (at + 1) % items.length;
+    else if (e.key === 'ArrowUp') to = (at - 1 + items.length) % items.length;
+    else if (e.key === 'Home') to = 0;
+    else if (e.key === 'End') to = items.length - 1;
+    else if (e.key === 'Escape') { e.preventDefault(); closeReviewMenu(true); return; }
+    else if (e.key === 'Tab') { closeReviewMenu(false); return; }
+    if (to === null || !items[to]) return;
+    e.preventDefault();
+    items[to].focus();
+  }
+  function reviewGroup(t, b) {
+    var g = document.createElement('span');
+    g.id = REVIEW_GROUP;
+    g.className = 'craft-review';
+    var more = document.createElement('button');
+    more.type = 'button';
+    more.id = REVIEW_GROUP + '-more';
+    more.className = 'craft-review__more';
+    more.setAttribute('aria-haspopup', 'menu');
+    more.setAttribute('aria-expanded', 'false');
+    more.setAttribute('aria-controls', REVIEW_GROUP + '-menu');
+    more.setAttribute('aria-label', 'Review mode: see the hall as another mode');
+    more.title = 'Review mode: see the hall as another mode';
+    more.innerHTML = '<svg viewBox="0 0 12 12" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M3 4.5 6 7.5 9 4.5"/></svg>';
+    more.addEventListener('click', function (e) { toggleReviewMenu(e && e.detail === 0); });
+    more.addEventListener('keydown', function (e) {
+      if (e.key === 'ArrowDown') { e.preventDefault(); openReviewMenu(true); }
+    });
+    var menu = document.createElement('div');
+    menu.id = REVIEW_GROUP + '-menu';
+    menu.className = 'craft-review__menu';
+    menu.setAttribute('role', 'menu');
+    menu.setAttribute('aria-label', 'Review mode');
+    menu.setAttribute('hidden', '');
+    menu.addEventListener('click', onMenuClick);
+    menu.addEventListener('keydown', onMenuKey);
+    b.addEventListener('keydown', function (e) {
+      if (e.key === 'ArrowDown') { e.preventDefault(); openReviewMenu(true); }
+    });
+    g.addEventListener('pointerenter', function (e) { if (byMouse(e)) openReviewMenu(false); });
+    g.addEventListener('pointerleave', function (e) {
+      if (!byMouse(e)) return;
+      clearTimeout(closeTimer);
+      closeTimer = setTimeout(function () { closeReviewMenu(false); }, 220);
+    });
+    g.appendChild(b);
+    g.appendChild(more);
+    g.appendChild(menu);
+    return g;
+  }
+
+  // The scribble wall: the top bar's empty space, doodled on while reviewing.
+  // craft-review.js draws it (decorative, aria-hidden); every motion is CSS,
+  // so the reduced-motion kill switch leaves three finished doodles standing.
+  var WALL = 'craft-graffiti';
+  var wallTool = { script: 'craft-review.js', api: 'OTBCraftReview' };
+  function applyWall(mode) {
+    var wall = document.getElementById(WALL);
+    var root = document.documentElement;
+    if (!review) {
+      remove(wall);
+      if (root.removeAttribute) root.removeAttribute('data-craft-review');
+      return;
+    }
+    if (root.setAttribute) root.setAttribute('data-craft-review', mode);
+    var side = document.querySelector && document.querySelector('#app-topbar > .topbar-side');
+    if (wall && wall.getAttribute('data-wall') === mode) return;
+    remove(wall);
+    if (!side || !side.parentNode) return;
+    wall = document.createElement('div');
+    wall.id = WALL;
+    wall.className = 'craft-graffiti';
+    wall.setAttribute('data-wall', mode);
+    wall.setAttribute('aria-hidden', 'true');
+    side.parentNode.insertBefore(wall, side);
+    loadTool(wallTool).then(function (api) {
+      var live = document.getElementById(WALL);
+      if (live === wall && review === mode) wall.innerHTML = api.wallHtml(mode);
+    }, function () { /* a bare wall; the menu still says you are reviewing */ });
   }
   // sessionStorage: this session's mode, or that the picker was already shown.
   var MODE_KEY = 'hall-craft';
@@ -371,13 +616,16 @@
     applyLook(mode);
     applyTallies(mode);
     applyTools(mode);
-    try { document.dispatchEvent(new CustomEvent('otb:craft', { detail: { mode: mode } })); } catch (_) { /* old engine */ }
+    applyWall(mode);
+    try { document.dispatchEvent(new CustomEvent('otb:craft', { detail: { mode: mode, review: !!review } })); } catch (_) { /* old engine */ }
   }
 
   // Choose a mode: this session always; across sessions only when asked to keep it.
+  // Choosing any mode, Artistry included, ends a review (task 1004686).
   function choose(mode, keep) {
     mode = valid(mode);
     if (!mode) return;
+    if (review) { drop('sessionStorage', REVIEW_KEY); review = null; closeReviewMenu(false); }
     set('sessionStorage', MODE_KEY, mode);
     set('sessionStorage', ASKED_KEY, '1');
     if (keep === true) set('localStorage', KEEP_KEY, mode);
@@ -389,7 +637,8 @@
   // ---------- the header switch ----------
   function switchHtml() {
     if (pageOptsOut()) return '';
-    var current = read();
+    review = storedReview();
+    var current = review || read();
     return '<div class="craft-switch' + (current ? '' : ' craft-switch--unset') + '" id="craft-switch" role="group" aria-label="Mode">' +
       MODES.map(function (m) {
         return '<button class="craft-switch__opt craft-switch__opt--' + m.id + '" type="button" data-craft-opt="' + m.id + '"' +
@@ -551,7 +800,8 @@
   var mounted = false;
   function mount() {
     if (pageOptsOut()) return;
-    apply(read());
+    review = storedReview();
+    apply(wearing());
     if (mounted) return;
     mounted = true;
     var sw = document.getElementById('craft-switch');
@@ -572,8 +822,13 @@
 
   window.OTBCraftMode = {
     MODES: IDS.slice(),
-    current: read,
+    current: wearing,
     choose: choose,
+    // Review mode (task 1004686): the experience under review, or null.
+    reviewing: function () { return review; },
+    review: startReview,
+    stopReview: stopReview,
+    EXPERIENCES: EXPERIENCES.map(function (x) { return x.id; }),
     open: openPicker,
     ALWAYS_TABS: ALWAYS_TABS.slice(),
     tabsFor: tabsFor,