@bongos/core 1.21.112 → 1.21.114

package/modules/hall-ui/public/my-agents.states.json

@@ -0,0 +1,37 @@
+{
+  "_": "MY AGENTS (task 1004685, the living-city prototype) through modules/ui-design/kit/render.js. Every row is filled from GET /me and its prefs, so the floors run against the hall-preview harness, which serves those reads and records the pref writes (scripts/hall-preview/pref-writes.js):\n\n  node scripts/hall-preview/server.js --port 4614 --fixture-me --rank archon\n  node modules/ui-design/kit/render.js --states modules/hall-ui/public/my-agents.states.json --base-in http://builders.localhost:4614 --base-out http://builders.localhost:4614\n\nAgainst the kit's own stub the reads 404 and the page shows its sign-in line. The 'nobody' state is the same page as a builder who holds no seat (?as=nobody, read by the prototype only).",
+  "page": "/my-agents",
+  "surface": "hall-ui",
+  "stub": { "prefix": "/builders/" },
+  "modeQuery": false,
+  "ignoreRequests": ["/api/(gds|bongos)/"],
+  "ignoreConsole": ["/api/(gds|bongos)/", "\\b401\\b", "\\b403\\b", "\\b404\\b", "\\b501\\b", "Unauthorized", "Forbidden", "Not Found", "load failed"],
+  "states": {
+    "desk": {
+      "auth": true,
+      "_": "Every setting as one real line (task 1004714: only a real law locks a row, and the hub has none), the real preset strip (no preset in force on the hub; what each would lock), Make it a law, and what the agent reads first.",
+      "actions": [["wait", 900], ["clickIfVisible", "[data-craft-close]"], ["wait", 300]],
+      "expect": { "visible": ["#ma-strict", "#ma-desk", "#ma-reads", ".ma-chip", "[data-group=\"habits\"] [data-propose]"] }
+    },
+    "factory": {
+      "auth": true,
+      "_": "Previewing Factory: the strip says it would lock off-task and the three model slots (a preview only: no row locks), offers to put it to a vote, and the way back.",
+      "actions": [["wait", 900], ["clickIfVisible", "[data-craft-close]"], ["wait", 300], ["click", "button[data-preset=\"factory\"]"], ["wait", 400]],
+      "expect": { "visible": [".ma-back", ".ma-pip[data-on]"] }
+    },
+    "saved": {
+      "auth": true,
+      "_": "A choice saved through the real route (the harness records it): reply length flipped to the value not chosen, the row's tick lit. Clicking the UNCHOSEN chip keeps the state repeatable, since the recorder remembers the last run's choice.",
+      "actions": [["wait", 900], ["clickIfVisible", "[data-craft-close]"], ["wait", 300], ["click", "button[data-set=\"verbosity\"][aria-pressed=\"false\"]"], ["wait", 400]],
+      "expect": { "visible": [".ma-row[data-saved] .ma-tick"] }
+    },
+    "nobody": {
+      "auth": true,
+      "url": "/my-agents?as=nobody",
+      "_": "As a builder with no seat: no governing tabs, no Governing mode, the same laws.",
+      "actions": [["wait", 900], ["clickIfVisible", "[data-craft-close]"], ["wait", 300]],
+      "expect": { "visible": ["#ma-as", "#ma-desk"] }
+    }
+  },
+  "reducedMotion": { "auth": true, "actions": [["wait", 900]] }
+}

package/modules/hall-ui/public/primer.html

@@ -116,8 +116,8 @@
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
+<script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
+<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- the shared markdown reader (window.OTBMdReader) — primer.js renders through

package/modules/hall-ui/public/profile-connections.js

@@ -3,12 +3,21 @@
 // task 1002296 / goal 1000045 criterion C6; ADR 0202, ADR 0207).
 //
 // WHAT IT RENDERS, and to whom:
-//   * on YOUR OWN profile — the pending requests in both directions (incoming
-//     ones you Accept or Decline, outgoing ones you Withdraw) and your accepted
-//     connections, each 1st degree by definition, each removable.
+//   * on YOUR OWN profile — your accepted connections who also build on THIS
+//     project (`GET /connections?here=1`), each 1st degree by definition, each
+//     removable; a link to the hub's /connections page for everything else; and
+//     "builders you may know" (below).
 //   * on ANOTHER builder's profile — the viewer-relative degree label, the
 //     mutual connections it was computed from, and the connect affordance.
 //
+// THE HUB IS CONNECTIONS' HOME, THIS TAB IS ITS IN-PROJECT CUT (ADR 0337 D5.4,
+// task 1004279). Your connections on other projects, and the request queues in
+// both directions, live on the hub's /connections page (task 1004278), and this
+// tab links there rather than drawing a second copy. It does not even READ the
+// requests: GET /connections/requests stamps `seen_at` on the incoming rows it
+// returns, which means "delivered", so a read this tab did not render would mark
+// a request seen that nobody saw.
+//
 // HUB-ONLY, AND IT DEGRADES TO NOTHING. Connections are account-to-account on
 // the platform hub (modules/platform-identity); on an instance without that
 // module every route here is absent, every call 404s, and the section never
@@ -40,7 +49,9 @@
 // viewer was actually handed — never a total carried beside a filtered list,
 // which is a leak by subtraction (ADR 0171 D4 / ADR 0202 D4).
 //
-// "BUILDERS YOU MAY KNOW" (R21, task 1002297; ADR 0202 D5) renders on YOUR
+// "BUILDERS YOU MAY KNOW" (R21, task 1002297; ADR 0202 D5) STAYS in the hall
+// (decided with task 1004279): ADR 0337 D4.2 puts it on both sides, and D5.4
+// moved only the connections and their requests to the hub. It renders on YOUR
 // OWN profile only, under your connections — never on someone else's, which
 // is what makes it own-scope: the candidate pool is the session's own
 // frontier. The server already picked the reason; this file renders it
@@ -135,17 +146,6 @@
     </tr>`;
   }
 
-  function requestsHtml(incoming, outgoing) {
-    const inbox = incoming.map((r) => `<li class="conn-req">${personHtml(r)}`
-      + (r.note ? `<p class="conn-req__note">${escapeHtml(r.note)}</p>` : '')
-      + `<span class="conn-req__acts">${btn('accept', r.id, 'Accept')}${btn('decline', r.id, 'Decline')}</span></li>`).join('');
-    const outbox = outgoing.map((r) => `<li class="conn-req">${personHtml(r)}`
-      + '<span class="conn-req__state">Request sent</span>'
-      + `<span class="conn-req__acts">${btn('withdraw', r.id, 'Withdraw')}</span></li>`).join('');
-    return (incoming.length ? `<h3 class="conn-sub">${escapeHtml(plural(incoming.length, 'builder'))} asking to connect</h3><ul class="conn-reqs">${inbox}</ul>` : '')
-      + (outgoing.length ? `<h3 class="conn-sub">${escapeHtml(plural(outgoing.length, 'request'))} you have sent</h3><ul class="conn-reqs">${outbox}</ul>` : '');
-  }
-
   // "Builders you may know" (R21, task 1002297; ADR 0202 D5) — mutual
   // connections + shared projects, each explained in one line by the server.
   // Empty when the server has nothing to say, same as every other honest
@@ -166,24 +166,37 @@
     return `<button class="btn-ghost" type="button" data-act="suggest-connect" data-handle="${escapeHtml(handle)}">Connect</button>`;
   }
 
-  // Your own connections + both request queues + "builders you may know".
-  // Returns false when the hub routes are absent or the session is gone, so
-  // the caller leaves the section hidden rather than rendering an empty
+  // How many of your connections build here — the length of the list beside it.
+  function hereLede(n) {
+    if (!n) return 'None of your connections build on this project yet.';
+    return n === 1 ? '1 of your connections builds on this project.' : `${n} of your connections build on this project.`;
+  }
+
+  // The way out to the hub's /connections page, where the rest of your
+  // connections and both request queues live. No hub origin, no link — the
+  // OTB.hubOrigin() contract every hall link to the hub keeps.
+  function hubLinkHtml() {
+    const hub = window.OTB.hubOrigin ? window.OTB.hubOrigin() : null;
+    if (!hub) return '';
+    return '<p class="scroll__lede">Requests, and your connections on other projects, are on your Connections page.</p>'
+      + `<div class="row-end"><a class="pbtn" id="conn-hub-link" href="${escapeHtml(`${hub}/connections`)}">Open your Connections page</a></div>`;
+  }
+
+  // Your own connections on this project + the link to the rest + "builders you
+  // may know". Returns false when the hub routes are absent or the session is
+  // gone, so the caller leaves the section hidden rather than rendering an empty
   // shell.
   async function renderOwn(body) {
-    const [list, reqs, suggestions] = await Promise.all([
-      api.request('GET', `${API}/connections`),
-      api.request('GET', `${API}/connections/requests`),
+    const [list, suggestions] = await Promise.all([
+      api.request('GET', `${API}/connections?here=1`),
       api.request('GET', `${API}/connections/suggestions`),
     ]);
-    if (!list.ok || !reqs.ok) return false;
+    if (!list.ok) return false;
     const connections = arr(list.data && list.data.connections);
-    const incoming = arr(reqs.data && reqs.data.incoming);
-    const outgoing = arr(reqs.data && reqs.data.outgoing);
     const suggested = suggestions.ok ? arr(suggestions.data && suggestions.data.suggestions) : [];
-    body.innerHTML = requestsHtml(incoming, outgoing)
-      + `<p class="scroll__lede">${escapeHtml(plural(connections.length, 'connection'))}.</p>`
+    body.innerHTML = `<p class="scroll__lede">${escapeHtml(hereLede(connections.length))}</p>`
       + '<div id="conn-ledger"></div>'
+      + hubLinkHtml()
       + suggestionsHtml(suggested);
     const mount = $('#conn-ledger');
     if (mount) {
@@ -192,7 +205,7 @@
         mount,
         columns: ['Builder', 'Degree', { label: 'Connected', class: 'ledger__date' }, ''],
         rowHtml: connectionRow,
-        emptyMsg: 'No connections yet.',
+        emptyMsg: 'When someone you are connected with joins this project, they show up here.',
         pager,
       }).render(connections);
     }
@@ -280,7 +293,6 @@
     accept: { call: (id) => api.request('POST', `${API}/connections/${encodeURIComponent(id)}/accept`), message: 'Connected.' },
     decline: { call: (id) => api.request('POST', `${API}/connections/${encodeURIComponent(id)}/decline`), message: 'Declined.' },
     remove: { call: (id) => api.request('DELETE', `${API}/connections/${encodeURIComponent(id)}`), message: 'Connection removed.' },
-    withdraw: { call: (id) => api.request('DELETE', `${API}/connections/${encodeURIComponent(id)}`), message: 'Request withdrawn.' },
   };
 
   async function onClick(ev) {

package/modules/hall-ui/public/profile.html

@@ -208,8 +208,8 @@
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
+<script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
+<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before profile.js, which pulls from it. -->

package/modules/hall-ui/public/project-settings.html

@@ -71,8 +71,8 @@
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
+<script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
+<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>

package/modules/hall-ui/public/ranks.html

@@ -78,8 +78,8 @@
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
+<script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
+<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before ranks.js, which pulls from it. -->

package/modules/hall-ui/public/roadmap.html

@@ -42,8 +42,8 @@
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
+<script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
+<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-14-domutils"></script>

package/modules/hall-ui/public/room.css

@@ -371,6 +371,14 @@ body.room .page-head { max-width: var(--room-max); }
   max-width: 100%;
   height: auto;
 }
+/* The PNG the canvas replaces is a light render too, and it is what shows
+   before the SVG arrives and whenever it cannot. Dark turns it the way
+   diagram-viewer.css turns the canvas (task 1003639), so a dark reader never
+   gets a white flash; the PNG keeps its baked ground, which inverts to black. */
+html[data-theme="dark"] .primer-figure img, html[data-theme="dark"] figure.diagram img { filter: invert(1) hue-rotate(180deg); }
+@media (prefers-color-scheme: dark) {
+  html:not([data-theme]) .primer-figure img, html:not([data-theme]) figure.diagram img { filter: invert(1) hue-rotate(180deg); }
+}
 /* diagram-viewer.js inserts its canvas INSIDE the figure and hides the <img>,
    so the frame has to belong to exactly one of them or the diagram ends up in
    two nested boxes. The figure keeps it; the canvas gives its own up. (Its

package/modules/hall-ui/public/roster.html

@@ -54,8 +54,8 @@
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
+<script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
+<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB — rank labels, number formats) + the

package/modules/hall-ui/public/sessions.html

@@ -112,8 +112,8 @@
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
+<script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
+<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded BEFORE sessions.js so it can pull from it. -->

package/modules/hall-ui/public/settings.html

@@ -452,8 +452,8 @@
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page scripts run. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
+<script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
+<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before consuming IIFEs. -->

package/modules/hall-ui/public/shell.js

@@ -108,6 +108,8 @@
     // You
     standing: '<circle cx="9" cy="6" r="3"/><path d="M3.5 15.5c.6-2.9 2.9-4.5 5.5-4.5s4.9 1.6 5.5 4.5"/>',
     profile: '<rect x="2.5" y="4" width="13" height="10" rx="1.5"/><circle cx="6.3" cy="8" r="1.6"/><path d="M4.1 12c.3-1.1 1.1-1.7 2.2-1.7s1.9.6 2.2 1.7"/><path d="M10.4 7.5h3M10.4 10.3h3"/>',
+    // task 1004685 (prototype): My agents — a helper's head on an antenna, not a person.
+    agents: '<rect x="4" y="6" width="10" height="8.5" rx="2.5"/><path d="M9 6V3.6"/><circle cx="9" cy="2.7" r="0.9"/><path d="M7 10.2v0.6M11 10.2v0.6"/><path d="M1.8 9v3M16.2 9v3"/>',
     // Community
     collab: '<path d="M2.5 4a1 1 0 0 1 1-1h7a1 1 0 0 1 1 1v4.5a1 1 0 0 1-1 1H6.5L4 11.5v-2h-.5a1 1 0 0 1-1-1V4Z"/><path d="M11.5 6.5h3a1 1 0 0 1 1 1V12a1 1 0 0 1-1 1H14v2l-2.5-2H8.5a1 1 0 0 1-1-1V9.5"/>',
     roster: '<circle cx="6.5" cy="6.3" r="2.3"/><path d="M2.5 15c.4-2.3 1.9-3.7 4-3.7s3.6 1.4 4 3.7"/><circle cx="12.5" cy="5.8" r="2"/><path d="M11.4 10.5c.4-.1.7-.2 1.1-.2 1.9 0 3.3 1.3 3.7 3.5"/>',
@@ -243,14 +245,15 @@
       // /me (boardVotesNeed), pre-filtered to what the vote route would accept —
       // so the badge counts ballots this viewer can actually cast, never "items
       // open somewhere".
-      { id: 'board-room', label: 'Board Room', icon: 'boardroom', href: '/board-room', gate: 'perm:board.vote.cast', count: 'board_votes' },
+      // task 1004685: `position: true` narrows the gate to seat holders (GOVERNING IS A POSITION).
+      { id: 'board-room', label: 'Board Room', icon: 'boardroom', href: '/board-room', gate: 'perm:board.vote.cast', count: 'board_votes', position: true },
       // The governor city (task 1004524): the owner put it on the sidebar on
       // 2026-10-08, reversing "leave it off". It is the Governing mode's lead tab
       // (craft-mode.js folds that mode's other tabs into a dropdown under it).
       // Gated on the atom its page is (requireBoardVotePage), and it sits in this
       // head-less group for the reason the Board Room does: the atom floors below
       // any rank head. Cosmetic only (ADR 0016).
-      { id: 'city', label: 'City', icon: 'city', href: '/city', gate: 'perm:board.vote.cast' },
+      { id: 'city', label: 'City', icon: 'city', href: '/city', gate: 'perm:board.vote.cast', position: true },
       // task 1004326 (BV2.TW15 of goal 1000095): the Ideas board (/ideas, task
       // 1002928) and the Copy desk (/copy-desk, task 1003113) are ARCHIVED — off
       // the nav on the owner's call of 2026-09-27, NOT deleted. Both pages and
@@ -292,6 +295,9 @@
       // /profile?id=N from the leaderboard); 'signed' just means "show this 'my
       // profile' shortcut once you're signed in".
       { id: 'profile', label: 'Profile', icon: 'profile', href: '/profile', gate: 'signed' },
+      // task 1004685 (prototype, board 6): MY AGENTS — how your own Claude works for you
+      // and which settings the project's laws lock. 'signed' is its page's real floor.
+      { id: 'my-agents', label: 'My agents', icon: 'agents', href: '/my-agents', gate: 'signed' },
     ] },
     // task 1003442 (goal 1000075): Community is Collab + Builders, and NEITHER
     // carries a rank flag any more. Both items and this head read 'member'
@@ -357,18 +363,19 @@
     // Relabeled 'Archon' → 'Governance' in ADR 0157, then → 'Government' by ADR 0174: these pages are no longer
     // Archon-only, so a group header reading "Archon" over items a Metic can open
     // would misdescribe the ladder to the builders most likely to be learning it.
-    { group: 'Government', gate: 'government', items: [
+    // task 1004685: a governing surface throughout, so head and items carry `position`.
+    { group: 'Government', gate: 'government', position: true, items: [
       // The Board Room was FIRST here from the ADR 0266 carve until task 1003744
       // moved it into the project group — its wall is an ATOM (`board.vote.cast`,
       // xenos floor) rather than this group's rank, and a group whose audience is
       // Metic+ oversight could not honestly hold it. Everything below IS a rank
       // surface, so this group's gate and audience are unchanged.
-      { id: 'watch', label: 'Watch', icon: 'watch', href: '/watch', gate: 'government' },
-      { id: 'gate', label: 'Gate', icon: 'gate', href: '/gate', gate: 'government' },
-      { id: 'sessions', label: 'Sessions', icon: 'sessions', href: '/sessions', gate: 'government' },
+      { id: 'watch', label: 'Watch', icon: 'watch', href: '/watch', gate: 'government', position: true },
+      { id: 'gate', label: 'Gate', icon: 'gate', href: '/gate', gate: 'government', position: true },
+      { id: 'sessions', label: 'Sessions', icon: 'sessions', href: '/sessions', gate: 'government', position: true },
       // The project's own fundamentals (task 1003280, goal 1000072). Mirrors the
       // server's requireGovernmentPage floor; cosmetic only, as every item here is.
-      { id: 'project-settings', label: 'Project settings', icon: 'settings', href: '/project-settings', gate: 'government' },
+      { id: 'project-settings', label: 'Project settings', icon: 'settings', href: '/project-settings', gate: 'government', position: true },
       // The deploy door (task 1003159, ADR 0293). Gated 'archon' here to mirror the
       // `core.pin.move` atom its page and both its routes check — cosmetic only, as
       // every item in this list is; the wall is server-side.
@@ -378,18 +385,18 @@
       // dropped where the module is off — and since task 1004296 it STAYS dropped: /deploy
       // is the platform hall's page alone, and every other hall takes its update from
       // Settings → Software update, whose Update button carries the hub hand-off.
-      { id: 'deploy', label: 'Deploy', icon: 'deploy', href: '/deploy', gate: 'archon', module: 'provisioning render-deploy' },
+      { id: 'deploy', label: 'Deploy', icon: 'deploy', href: '/deploy', gate: 'archon', module: 'provisioning render-deploy', position: true },
       // task 1001949: what each hosted project costs. 'government' mirrors the metic floor
       // of `provisioning.fleet.manage`, the atom its page and its one read check (the
       // Deploy precedent above); dropped where the provisioning module is not enabled.
-      { id: 'fleet', label: 'Fleet costs', icon: 'fleet', href: '/fleet', gate: 'government', module: 'provisioning' },
+      { id: 'fleet', label: 'Fleet costs', icon: 'fleet', href: '/fleet', gate: 'government', module: 'provisioning', position: true },
       // BV1.R113: the roles-and-permissions tab (ADR 0151). The one genuinely
       // Archon-only item the 'government' gate comment anticipated — cosmetic
       // only. The wall is the `government.manage` atom checked on each of the
       // tab's nine data routes (route-rank-check.js); the page SHELL itself is
       // metic+, because R16 made /government three rooms and only this one is
       // the archon surface.
-      { id: 'government', label: 'Permissions', icon: 'permissions', href: '/government', gate: 'archon' }  // NOT 'Ranks': /ranks is the signed-in ladder explainer and two nav items
+      { id: 'government', label: 'Permissions', icon: 'permissions', href: '/government', gate: 'archon', position: true }  // NOT 'Ranks': /ranks is the signed-in ladder explainer and two nav items
       //   reading 'Ranks' is the confusion this rename exists to remove. This tab
       //   is where a rank's permissions are granted, so it says what it does.,
     ] },
@@ -443,6 +450,7 @@
           (it.external ? ' target="_blank" rel="noopener"' : '') +
           (it.view ? ' data-view="' + it.view + '"' : '') +
           ' data-gate="' + it.gate + '"' + (it.module ? ' data-module="' + it.module + '"' : '') +
+          (it.position ? ' data-position="1"' : '') +
           (it.count ? ' data-count="' + esc(it.count) + '"' : '') +
           ' title="' + esc(it.label) + '" hidden>' + icon(it.icon) +
           '<span class="nav-item__label">' + esc(it.label) + '</span>' +
@@ -470,7 +478,7 @@
       // string to find groups and a matching wrapper would parse as a phantom
       // one. `data-gate` stays immediately after the class for the same reason.
       var head = g.group
-        ? '<button type="button" class="nav-group__head" data-gate="' + (g.gate || 'always') + '" data-group="' + esc(groupId) + '" aria-expanded="' + (collapsed ? 'false' : 'true') + '" aria-controls="nav-items-' + esc(groupId) + '" hidden>' +
+        ? '<button type="button" class="nav-group__head" data-gate="' + (g.gate || 'always') + '"' + (g.position ? ' data-position="1"' : '') + ' data-group="' + esc(groupId) + '" aria-expanded="' + (collapsed ? 'false' : 'true') + '" aria-controls="nav-items-' + esc(groupId) + '" hidden>' +
             '<span class="nav-group__head-label">' + esc(g.group) + '</span>' + chevronIcon() +
           '</button>'
         : '';
@@ -870,11 +878,14 @@
   // not establish authority. null is NOT "holds nothing that matters": it is
   // unreadable, and unreadable hides the link, the same call gateAllows()'s
   // `default: false` and the social mode's OFF-is-the-fallback rule make.
-  var access = { authed: null, rank: null, graduated: false, showWork: false, permissions: null, needs: null, founding: null };
+  // task 1004685: `positions` (seats held, null while unknown), `simRank` (?as=nobody's).
+  var access = { authed: null, rank: null, graduated: false, showWork: false, permissions: null, needs: null, founding: null, positions: null, simRank: null };
 
   function gateAllows(gate) {
     var authed = access.authed === true;
-    var member = authed && access.rank !== 'xenos';
+    // ?as=nobody's stand-in rank only ever sits BELOW the real one (gov-positions.js).
+    var rank = access.simRank || access.rank;
+    var member = authed && rank !== 'xenos';
     // task 1003744: the one gate key that is not a rank. `perm:<atom>` asks whether
     // the viewer HOLDS that permission, reading the answer the SERVER resolved —
     // never re-derived here from rank or anything else, the social-mode precedent:
@@ -889,11 +900,11 @@
       case 'signed': return authed;
       case 'member': return member;
       case 'work': return authed && (member || access.showWork);
-      case 'archon': return authed && access.rank === 'archon';
+      case 'archon': return authed && rank === 'archon';
       // ADR 0157: the monitoring/ops pages sit at the `page.view.government` floor,
       // which is metic. Kept as its own key rather than widening 'archon', so a
       // genuinely Archon-only nav item can still be added later.
-      case 'government': return authed && (access.rank === 'metic' || access.rank === 'archon');
+      case 'government': return authed && (rank === 'metic' || rank === 'archon');
       default: return false;
     }
   }
@@ -995,6 +1006,81 @@
       '<a class="founding-band__link" href="/">What\u2019s this?</a>';
   }
 
+  // ---------- GOVERNING IS A POSITION (task 1004685 drew it; task 1004713 made it real) ----------
+  // Owner ruling: you pick a craft, but you HOLD a seat or you don't. `position: true`
+  // items (City, Board Room, Government) show only to a seat holder — the owner, a
+  // Lead, a seat on a building's sitting, a board member — and craft-mode.js names
+  // Governing by the seat. The seats are /me's `positions` block, resolved by the
+  // SERVER (modules/government/positions.js); gov-positions.js (loaded lazily) only
+  // reads it. COSMETIC NAV ONLY: page gates stay server-side, and a seat only takes
+  // a link away. UNKNOWN IS TODAY'S NAV (a /me with no positions block: null).
+  // ?as=nobody views the hall with no seat (session-sticky; ?as=me clears). It only hides.
+  var POSITIONS_KEY = 'hall-positions';
+  var AS_KEY = 'hall-as';
+  var POSITIONS_TTL = 10 * 60 * 1000;
+  var positionsAsked = null;
+  var SHELL_V = (function () {
+    var s = document.currentScript && document.currentScript.src;
+    var m = s && /[?&]v=([^&#]+)/.exec(s);
+    return m ? m[1] : '';
+  })();
+  function protoAs() {
+    var m = /[?&]as=([a-z]+)/.exec((window.location && window.location.search) || '');
+    try {
+      if (m && m[1] === 'nobody') window.sessionStorage.setItem(AS_KEY, 'nobody');
+      else if (m && m[1] === 'me') window.sessionStorage.removeItem(AS_KEY);
+      return window.sessionStorage.getItem(AS_KEY) === 'nobody' ? 'nobody' : null;
+    } catch (_) { return m && m[1] === 'nobody' ? 'nobody' : null; }
+  }
+  // id null = whoever was last asked about (the boot paint, before /me lands).
+  function cachedPositions(id, as) {
+    try {
+      var c = JSON.parse(window.sessionStorage.getItem(POSITIONS_KEY) || 'null');
+      if (c && (id == null || c.id === id) && c.as === as && Date.now() - c.at < POSITIONS_TTL) return c.value;
+    } catch (_) { /* no storage: ask again */ }
+    return null;
+  }
+  function settlePositions(p) {
+    access.positions = p && p.known === true ? p : null;
+    access.simRank = access.positions && access.positions.sim_rank ? access.positions.sim_rank : null;
+    if (CRAFT && CRAFT.setPositions) CRAFT.setPositions(access.positions);
+  }
+  // READS A PAGE SHARES (task 1004685): /me is asked once a page; gov-feeds.js adopts
+  // window.__hallReads. The seats ride /me itself (task 1004713), so no read of their own.
+  var HALL_READS = window.__hallReads = window.__hallReads || {};
+  var positionsLibAsk = null;
+  function positionsLib() {
+    if (window.GovPositions) return Promise.resolve(window.GovPositions);
+    if (!positionsLibAsk) {
+      positionsLibAsk = new Promise(function (resolve) {
+        var head = document.head;
+        if (!head || !head.appendChild || !document.createElement) { resolve(null); return; }
+        var tag = document.createElement('script');
+        tag.src = '/builders/gov-positions.js' + (SHELL_V ? '?v=' + SHELL_V : '');
+        tag.onload = function () { resolve(window.GovPositions || null); };
+        tag.onerror = function () { resolve(null); };
+        head.appendChild(tag);
+      });
+    }
+    return positionsLibAsk;
+  }
+  // `sent` is /me's `positions` block as the server resolved it (undefined: not told).
+  function loadPositions(builder, sent) {
+    var id = builder && builder.id != null ? String(builder.id) : null;
+    if (!id) return;
+    var as = protoAs();
+    var key = id + '|' + JSON.stringify(sent === undefined ? null : sent);
+    if (positionsAsked === key) return;
+    positionsAsked = key;
+    positionsLib().then(function (lib) {
+      if (!lib || positionsAsked !== key) return;
+      var p = lib.positionsFor({ me: { builder: builder, positions: sent }, as: as });
+      try { window.sessionStorage.setItem(POSITIONS_KEY, JSON.stringify({ id: id, as: as, at: Date.now(), value: p })); } catch (_) { /* private mode */ }
+      settlePositions(p);
+      applyAccess();
+    }, function () { /* cosmetic: unknown stays today's nav */ });
+  }
+
   // task 1003117 (R06 of goal 1000074): EMPHASISE the Studio nav entry for a
   // builder whose craft includes artist — the "emphasized entry for artist-craft
   // builders" half of artist mode. Cosmetic only (the page is open to every rank,
@@ -1077,12 +1163,17 @@
         access.founding = (state.founding && typeof state.founding === 'object') ? state.founding : null;
       }
       if (state.builder) { renderUser(state.builder); applyCraftEmphasis(state.builder); }
+      // task 1004713: which seats this builder holds — /me's server-resolved block.
+      if (state.builder && access.authed === true) loadPositions(state.builder, state.positions);
     }
     document.querySelectorAll('#app-sidebar [data-gate]').forEach(function (el) {
       var ok = gateAllows(el.dataset.gate);
       // A space-separated list is any-of: the Deploy item is the provisioning door's on the
       // platform hall and the render-deploy module's on a Render project's hall (task 1004270).
       if (ok && el.dataset.module && !el.dataset.module.split(' ').some(moduleOn)) ok = false;
+      // task 1004713: a governing surface also needs a held seat — once the seats are
+      // KNOWN (/me's server-resolved positions). Unknown (null) is today's nav.
+      if (ok && el.dataset.position && access.positions && !access.positions.has_position) ok = false;
       el.hidden = !ok;
     });
     // task 1004493: the craft mode then takes away the tabs its craft does not need.
@@ -1311,7 +1402,10 @@
     });
   }
   function probeMe(otherProfile) {
-    api.request('GET', '/api/bongos/me').then(function (res) {
+    var meRead = api.request('GET', '/api/bongos/me');
+    // the governor pages' living model reads /me too: it takes this answer (gov-feeds.js)
+    HALL_READS['/me'] = meRead.then(function (res) { return res && res.ok ? res.data : (res && res.status === 403 ? false : null); }, function () { return null; });
+    meRead.then(function (res) {
       if (res.status === 401) { applyAccess({ authed: false }); return null; }
       if (!res.ok) return null;
       return res.data;
@@ -1336,6 +1430,8 @@
         needs: me.needs || null,
         // task 1004422: project founding mode, for the band and the asleep rooms.
         founding: me.founding_mode || null,
+        // task 1004713: the government positions this builder holds (server-resolved).
+        positions: me.positions || null,
         builder: me.builder,
       });
     }).catch(function () { /* cosmetic only */ });
@@ -1343,6 +1439,8 @@
 
   // ---------- boot (defer = DOM parsed; render synchronously) ----------
 
+  // task 1004685: the seats last seen this session, so the first paint is right.
+  settlePositions(cachedPositions(null, protoAs()));
   renderSkipLink();
   renderSidebar();
   renderTopbar();
@@ -1383,5 +1481,7 @@
     applyTheme: applyTheme,
     // task 1004477: a page that renders an exit after boot asks the shell to fill it.
     fillExits: TRAIL.fillExits,
+    // task 1004713: the seats this viewer holds (null while unknown).
+    positions: function () { return access.positions; },
   };
 })();

package/modules/hall-ui/public/street-card.js

@@ -194,6 +194,7 @@
     if (item.subject_type === 'genesis_stage') return 'genesis';
     if (areaOf(item)) return 'matter';
     if (item.subject && item.subject.kind === 'decision_rules') return 'rules';
+    if (item.subject && item.subject.kind === 'laws') return 'law';
     return 'amendment';
   }
   // The proposer's own words for a sitting.
@@ -201,7 +202,7 @@
     var s = item && item.subject;
     if (!s) return '';
     var k = subjectKind(item);
-    if (k === 'amendment' || k === 'rules') return firstPara(s.rationale_md);
+    if (k === 'amendment' || k === 'rules' || k === 'law') return firstPara(s.rationale_md);
     if (k === 'matter') return firstPara(s.detail_md);
     if (k === 'idea') {
       var f = s.field_values || {};
@@ -232,6 +233,13 @@
       });
       return rows.length ? { rows: rows } : null;
     }
+    if (k === 'law') {
+      // task 1004706: each law it enacts is inserted; each it repeals, struck
+      var lp = s.proposed && s.proposed.laws ? s.proposed.laws : {};
+      var lrows = (Array.isArray(lp.enact) ? lp.enact : []).map(function (l) { return { label: 'law', struck: '', inserted: str(l.text) }; })
+        .concat((Array.isArray(lp.repeal) ? lp.repeal : []).map(function (id) { return { label: 'repeal', struck: 'law ' + str(id), inserted: '' }; }));
+      return lrows.length ? { rows: lrows } : null;
+    }
     if (k === 'amendment') {
       var live = constitution && constitution.board ? constitution.board : null;
       var p = s.proposed || {};
@@ -687,6 +695,11 @@
   ACT_ROUTES.builder_budget = {
     budget: function (id, inp) { return inp.option ? call('PATCH', '/builders/' + id + '/budget', { monthly_budget_usd: inp.option === 'none' ? null : Number(inp.option) }) : null; },
   };
+  // task 1004712: a dry pot's borrow from the reserve, answered by its seat
+  // (POST /government/treasury/borrows/:id/answer; the chip's key is lend, half or no).
+  ACT_ROUTES.treasury_spending = {
+    answer: function (id, inp) { return inp.option ? post('/government/treasury/borrows/' + id + '/answer', { key: str(inp.option) }) : null; },
+  };
   ACT_ROUTES.signed_criterion = { unsign: function (id, inp) { return post('/done-when/' + id + '/unsatisfy', { reason: str(inp.label) || 'undone on the floor desk' }); } };
   // The same acts at a building a sitting decides (task 1004561): filed as the
   // building's matter, which carries the act out once it passes. Each returns
@@ -743,6 +756,10 @@
         var text = str(inp.text).trim();
         if (s.kind === 'amendment') return post('/government/board/items', { subject_type: 'constitutional_amendment', proposal: s.proposed, rationale_md: text });
         if (s.kind === 'rules') return post('/government/board/decision-rules', { rules: (s.proposed && s.proposed.decision_rules) || [], rationale_md: text });
+        if (s.kind === 'law') {
+          var lw = (s.proposed && s.proposed.laws) || {};
+          return post('/government/board/laws', { enact: lw.enact || [], repeal: lw.repeal || [], rationale_md: text });
+        }
         if (s.kind === 'matter') {
           var body = { area: s.area, title: s.title || cv.title, detail_md: text };
           if (s.action) body.action = s.action;