@bongos/core 1.21.113 → 1.21.115

package/modules/hall-ui/public/street.states.json

@@ -59,6 +59,10 @@
           "wait",
           900
         ],
+        [
+          "clickIfVisible",
+          "[data-craft-close]"
+        ],
         [
           "click",
           "#fullscreen-toggle"
@@ -96,6 +100,10 @@
           "wait",
           900
         ],
+        [
+          "clickIfVisible",
+          "[data-craft-close]"
+        ],
         [
           "click",
           ".street-pin"
@@ -120,6 +128,10 @@
           "wait",
           600
         ],
+        [
+          "clickIfVisible",
+          "[data-craft-close]"
+        ],
         [
           "click",
           "#streetMode"
@@ -329,13 +341,17 @@
     },
     "floor": {
       "auth": true,
-      "_": "A floor picked: the lift slides to it, its frame and sign turn orange, and its block re-enters with the sign large.",
+      "_": "A floor picked: the lift slides to it, its frame and sign turn ink (salmon is only what needs you, task 1004718), and its block re-enters with the sign large.",
       "url": "/builders/street#building=people",
       "actions": [
         [
           "wait",
           900
         ],
+        [
+          "clickIfVisible",
+          "[data-craft-close]"
+        ],
         [
           "click",
           ".inside-floor[data-floor=\"0\"]"
@@ -360,6 +376,10 @@
           "wait",
           900
         ],
+        [
+          "clickIfVisible",
+          "[data-craft-close]"
+        ],
         [
           "click",
           "#insideAmend"
@@ -399,8 +419,8 @@
     },
     "desk": {
       "auth": true,
-      "_": "The floor desk (task 1004558): inside People the building opens on the floor that needs you, and the desk shows its sign, name and orange status, the tiles, the to-do rows with their two buttons, and the record line; the street header carries the today meter.",
-      "url": "/builders/street#building=people",
+      "_": "The floor desk (task 1004558): a building opens on the floor that needs you. Over the harness fixtures (the real site since task 1004717) that is Disputes, Security reports: the desk shows its sign, name and salmon status, the tiles, the to-do rows with their two buttons, and the record line; the street header carries the today meter.",
+      "url": "/builders/street#building=disputes",
       "actions": [
         [
           "wait",
@@ -426,8 +446,8 @@
     },
     "desk-facts": {
       "auth": true,
-      "_": "A row name tapped: at most three facts open in place under it.",
-      "url": "/builders/street#building=people",
+      "_": "A row name tapped (Disputes, Security reports): at most three facts open in place under it.",
+      "url": "/builders/street#building=disputes",
       "actions": [
         [
           "wait",
@@ -458,8 +478,8 @@
     },
     "desk-quiet": {
       "auth": true,
-      "_": "A quiet floor: one line with the lights on, never an empty list.",
-      "url": "/builders/street#building=review",
+      "_": "A quiet floor (People: nothing needs you over the harness fixtures): one line with the lights on, never an empty list.",
+      "url": "/builders/street#building=people",
       "actions": [
         [
           "wait",
@@ -620,7 +640,7 @@
     },
     "desk-release-core": {
       "auth": true,
-      "_": "Task 1004559: Release, Core update. Check first (a dry run); take it is offered only after the check passed for that version.",
+      "_": "Task 1004559: Release, Core update. Check first (a dry run); take it is offered only after the check passed for that version. The harness offers no core update, so the floor stands quiet: one line, never an empty list.",
       "url": "/builders/street#building=release",
       "actions": [
         [
@@ -646,7 +666,8 @@
       ],
       "expect": {
         "visible": [
-          ".desk-rows"
+          ".desk-quiet",
+          ".desk-record"
         ]
       }
     },
@@ -766,7 +787,7 @@
     },
     "desk-planning-ideas": {
       "auth": true,
-      "_": "Task 1004560: Planning, Ideas to ratify. A Full Idea in its vote with seat pips, a promise to ratify in one tap, and a carried Full Idea made a goal from a version chip.",
+      "_": "Task 1004560: Planning, Ideas to ratify. With a Full Idea in its vote it shows seat pips, a promise to ratify in one tap and a version chip; the harness holds none, so the floor stands quiet: one line, never an empty list.",
       "url": "/builders/street#building=planning",
       "actions": [
         [
@@ -788,19 +809,12 @@
         [
           "wait",
           600
-        ],
-        [
-          "focus",
-          ".desk-rows .desk-row:last-child .desk-name"
-        ],
-        [
-          "wait",
-          300
         ]
       ],
       "expect": {
         "visible": [
-          ".desk-rows"
+          ".desk-quiet",
+          ".desk-record"
         ]
       }
     },
@@ -848,7 +862,7 @@
     },
     "pins": {
       "auth": true,
-      "_": "The street over the dense docket (task 1004569): one pin per building in the tier of its most important matter — urgent (needs you within a day: people, rules) largest and pulsing, needs you orange, moving small and ink, settled a grey dot — with a count where a building holds more than one open matter. Only urgent and needs-you pins show a label, and no two labels meet. Render at 1440 and 390 in both modes.",
+      "_": "The street over the docket (task 1004569): one pin per building in the tier of its most important matter — urgent (needs you within a day) largest and pulsing, needs you salmon, moving small and ink, settled a grey dot — with a count where a building holds more than one open matter. Only urgent and needs-you pins show a label, and no two labels meet. Since task 1004705 salmon is only what waits on the viewer's own seat; the harness fixtures hold no ask on the viewer due within a day, so no pin is urgent here (as in the city).",
       "actions": [
         [
           "wait",
@@ -866,7 +880,6 @@
       "expect": {
         "visible": [
           "#streetBoard",
-          ".street-pin--urgent",
           ".street-pin--needs",
           ".street-pin__badge"
         ]
@@ -913,6 +926,101 @@
           "[data-act=\"page-next\"]"
         ]
       }
+    },
+    "living": {
+      "auth": true,
+      "_": "The living street (task 1004685) over the harness fixtures alone (task 1004717 deleted the prototype overlay): the goals' skyline in two hazed rows behind the civic row, one pod per active claim on the skylanes and the road, the plates at street level (the hub seats no Lead, so every one reads owner), the salmon windows on the floors that hold what needs you, the readings as tiles and the deck behind \"to do\".",
+      "actions": [
+        [
+          "wait",
+          1500
+        ],
+        [
+          "clickIfVisible",
+          "[data-craft-close]"
+        ],
+        [
+          "wait",
+          300
+        ]
+      ],
+      "expect": {
+        "visible": [
+          "#streetDepthNear",
+          ".street-depth-pod",
+          ".street-depth-plate",
+          ".street-depth-needs",
+          "#hudDeck"
+        ],
+        "href": [
+          [
+            "#hudDeck",
+            "/builders/street#deck"
+          ]
+        ]
+      }
+    },
+    "deck": {
+      "auth": true,
+      "_": "The decision deck over the street (task 1004702, the glass language): the street stays in view under a light hush with the asking building clear, the card a glass panel beside its building with a hairline to its pin and a halo on it, two glass slivers for the cards to come, and the slim dock at the foot (count, today, the keys, back to the street). The harness's first ask has no stored ask, so it shows in its own words with its desk. On a phone (390, 320) the panel is a sheet from the foot and the dock gives way to the sheet's own skip and pass it on.",
+      "url": "/builders/street#deck",
+      "actions": [
+        [
+          "wait",
+          1500
+        ],
+        [
+          "clickIfVisible",
+          "[data-craft-close]"
+        ],
+        [
+          "wait",
+          400
+        ]
+      ],
+      "expect": {
+        "visible": [
+          "#streetDeck",
+          ".deck-panel",
+          ".gov-halo",
+          ".ask__desk",
+          "#streetBoard"
+        ]
+      }
+    },
+    "deck-treasury": {
+      "auth": true,
+      "_": "The Treasury's deck (task 1004702): the dry pot's real stored borrow ask, answered from the glass panel: three tap answers with their keys, the pick marked \"my pick\", the said line in the asker's voice, and the last line as a sentence.",
+      "url": "/builders/street#deck=treasury",
+      "actions": [
+        [
+          "wait",
+          1500
+        ],
+        [
+          "clickIfVisible",
+          "[data-craft-close]"
+        ],
+        [
+          "wait",
+          400
+        ]
+      ],
+      "expect": {
+        "visible": [
+          ".deck-panel",
+          ".ask__opt",
+          ".ask__pick",
+          ".ask__said",
+          ".ask__foot"
+        ],
+        "href": [
+          [
+            "#deckBack",
+            "/builders/street#building=treasury"
+          ]
+        ]
+      }
     }
   },
   "reducedMotion": {

package/modules/hall-ui/public/studio.html

@@ -189,8 +189,8 @@
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
+<script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
+<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <!-- The kit, for its ONE renderer: the full-size ship-time visual figure

package/modules/hall-ui/public/style.css

@@ -1404,6 +1404,11 @@ html.craft-picker-open { overflow: hidden; }
 .craft-picker__again input { width: 18px; height: 18px; margin: 0; accent-color: var(--accent); }
 .craft-picker__hint { font-size: 13px; color: var(--ink-faint); }
 .craft-picker__close:focus-visible { outline: 2px solid var(--focus); outline-offset: 2px; }
+/* task 1004685 (prototype): Governing is a held seat, so a builder with none sees
+   three doors, not four (craft-mode.js stamps the count). */
+@media (min-width: 901px) {
+  .craft-picker__doors[data-doors="3"] { grid-template-columns: repeat(3, minmax(0, 1fr)); }
+}
 @media (max-width: 900px) {
   .craft-picker__doors { grid-template-columns: repeat(2, minmax(0, 1fr)); }
 }
@@ -2683,7 +2688,6 @@ main [id] { scroll-margin-top: calc(var(--topbar-h) + 16px); }
   padding: 8px 10px; border: 1px solid var(--border); border-radius: var(--radius-sm); background: var(--surface-2);
 }
 .conn-req__note { flex: 1 1 100%; margin: 0; font-size: 13px; color: var(--ink-soft); }
-.conn-req__state { font-size: 13px; color: var(--ink-faint); }
 .conn-req__acts { margin-left: auto; display: flex; gap: 6px; }
 
 @media (max-width: 640px) {

package/modules/hall-ui/public/task.html

@@ -55,8 +55,8 @@
 <!-- The app shell (sidebar + top bar + footer). Dependency-free; runs at parse
      time so the chrome exists before the deferred page scripts execute. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
+<script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
+<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded FIRST so task.js can pull from it. -->

package/modules/hall-ui/public/thinking.html

@@ -139,8 +139,8 @@
 </div>
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
+<script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
+<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
 <script src="/builders/palette.js" defer></script>
 
 <script src="/builders/idea-objects.js?v=2026-09-27-split"></script>

package/modules/hall-ui/public/tweak-editor.html

@@ -143,8 +143,8 @@
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
+<script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
+<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <script src="/builders/brand-holes.js?v=2026-09-29-aqfix"></script>

package/modules/hall-ui/public/watch.html

@@ -166,8 +166,8 @@
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
+<script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
+<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before watch.js, which pulls from it. -->

package/modules/hall-ui/public/watch.js

@@ -468,6 +468,17 @@
       + '</div>';
   }
 
+  // The platform handle the vouch carried (ADR 0333 D5), for a vouched row that
+  // drew no profile (the hub was down or answered nothing, or the read was over
+  // the queue's cap). It is what the queue can still call the applicant, and
+  // nothing more. Plain text: the hub has no person page to link to yet. A row
+  // that drew its profile shows the live record instead, and an unvouched row
+  // has no handle at all.
+  function vouchedHandleHtml(r, drewProfile) {
+    if (!r.vouched || drewProfile || !r.applicant_handle) return '';
+    return `<span class="ov-row__when">On the platform as <span class="ov-mono">@${escapeHtml(r.applicant_handle)}</span></span>`;
+  }
+
   // What this row still offers. A waiting request has two decisions; an admitted
   // one can still be rescinded (until they sign in, after which the server
   // refuses and says so); a declined one is terminal here — re-admitting is the
@@ -503,6 +514,7 @@
         ? `<span class="ov-row__when">${r.status === 'invited' ? 'Admitted' : 'Declined'} ${escapeHtml(fmtDate(r.resolved_at))}${by}</span>`
         : '';
     const actions = gateRowActions(r);
+    const profile = profileHtml(r.profile);
     return (
       `<li class="ov-row" data-req-id="${escapeHtml(r.id)}">` +
       '<div class="ov-row__main">' +
@@ -511,9 +523,10 @@
       // The applicant's own profile sits between what THEY wrote and what the
       // SYSTEM knows — their words first, their record second, the decision
       // facts last. Empty string when the server resolved nothing.
-      profileHtml(r.profile) +
+      profile +
       '<div class="ov-row__facts">' +
       vouchPill(!!r.vouched) +
+      vouchedHandleHtml(r, !!profile) +
       `<span class="ov-row__when">Asked ${escapeHtml(fmtDate(r.created_at))}</span>` +
       decided +
       '</div>' +

package/modules/hall-ui/public/work.html

@@ -172,8 +172,8 @@
 <!-- The app shell (sidebar + top bar + footer). Dependency-free; runs at parse
      time so the chrome exists before the deferred page scripts execute. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
+<script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
+<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded FIRST so work.js can pull from it. -->

package/modules/hall-ui/records/living-city.md

@@ -0,0 +1,57 @@
+# The living city — /city, /street, the decision deck and the government inside each building (task 1004685, the living-city prototype)
+
+Covers: `gov-living.js` (the model), `gov-feeds.js` (its one reader per page), `city.{html,js,css}` + `city-draw.js`, `street.{html,js,css}` + `street-draw.js` + `street-depth.js`, `street-deck.{js,css}`, `street-office.js`, the office storey in `street-inside.js`, and the Governing tally in `craft-mode.js`. My agents and the held-seat nav have their own record ([my-agents.md](my-agents.md)); the street's first build is [governor-street.md](governor-street.md). **It runs on real reads only** (task 1004717): the prototype overlay that once stood in for Leads, laws, pots, presets, build-outs and the human rewrite of each ask is deleted, with its harness fixture, its `data-proto` marks and its keys. A real project's city is complete on its own reads.
+
+## The thesis, and the three levels
+
+Government is how a project steers its AI. The city and the street draw that in three levels, each with one meaning: the **ground** is the work (one capsule-cluster district per open goal, hazed by depth; the spend conduit in the reserve blue, its width the real spend rate), the **civic** level is the nine buildings (height is structure: a Lead's capsule floor, then one per committee room and per floor a build-out put up, plug into the core), and the **sky** is the agents (one chrome pod per active claim on a lane to its goal's district, at a fixed spacing so they count).
+
+## Where each thing comes from
+
+| What the hall draws | The read |
+|---|---|
+| every docket matter, blocker and its words; the readings; how each building decides; the board and its sittings | `GET /government/docket`, `/blockers`, `/government/constitution` |
+| who leads each building, their charter, and the owner seat on every unseated one: plates, cards, doors, the Lead's capsule floor | `GET /government/leads` (task 1004709) |
+| what a building's holder may build without a vote | its `build_rights` (task 1004710) |
+| construction (a live site going up, a ghost on its vote), committee rooms and built floors, the office's works | its `structure` (task 1004711, [ADR 0378](../../../docs/adr/0378-a-leads-build-outs-are-rows-built-at-once-or-by-a-passed-vote.md)) |
+| the active claims (pods), the goals and their rollups (districts, skyline) | `GET /tasks/claimable`, `/goals`, `/goals/rollups` |
+| this month's spend, the unattended budget, moving; the pots, the reserve, the spend cap (off: no limit) and a dry pot's borrow ask | `GET /public/cost-summary`, `/moving`, `GET /government/treasury` (task 1004712, [ADR 0379](../../../docs/adr/0379-the-treasury-is-pots-per-goal-a-reserve-and-borrowing-over-real-spend.md)) |
+| the law book, and "the landing rule" the docket reads | `GET /government/laws` (task 1004706) |
+| the laws every session reads and what each lock did to your settings | `GET /me` `laws` (task 1004707) |
+| an ask's card | the matter's stored `ask` (task 1004703); a matter without one shows in its own words |
+| who every matter waits on, so what is "to do" and what "waits on others"; an ask nobody answers settled with its own line; passing a stored ask on | the docket's `route` (task 1004705, [ADR 0376](../../../docs/adr/0376-every-ask-is-routed-to-a-real-seat-on-the-server.md)), `POST /government/asks/:matter/pass` |
+| the strictness preset and a switch | `GET /government/presets`, `POST /government/board/presets` (task 1004715) |
+| the five counts | `GET /government/counts` (task 1004716) |
+
+`gov-living.js` labels every field `real`, `derived` or `mixed` in `_sources` — there is no other label — and `tests/hall_gov_living.mjs` walks the whole model to hold it to that, and proves an `overlay` handed in changes nothing. **A feed that is not read leaves its part empty, never invented**: without `GET /government/leads` no Lead, owner, office, build-out or right is drawn and no building is "led by" or "held by the owner"; without the treasury no pot, reserve or limit; without the presets no strip. **A concept no table holds is not drawn**: a Lead's deputies and a committee room's members (rooms stand, unpeopled), the "propose a law" chips (a law is proposed from My agents' "Make it a law", a real vote), and appointing a Lead from the hall (the route exists, `appoint_lead` through a People matter; no hall button files one yet).
+
+**Who an ask waits on is routed on the server (task 1004705).** `GET /government/docket` routes every matter to a seat (`modules/government/routing.js`) and says `routed: true`; the hall takes `needs_you` and `waits_on` from the route. A docket that is not routed (an older server) falls back to whether the viewer holds the seat the real Leads resolve, else the docket's own per-viewer word. The hall-preview docket fixture is routed by the same rule (`tests/hall_preview_governor_fixtures.mjs`). Tests that need a seated government (Leads in office, a room, a build-out going up and one on its vote) build it in the routes' own shapes from `tests/fixtures/gov-seated.mjs` and route the docket to it by the server's rule; the past-asks corpus the ask tests use is `tests/fixtures/government-ask-cards.json`. The hall reads neither.
+
+**The harness preview is the real site.** It serves the same reads production answers (the hub has seated no Lead, built nothing and passed no law, so every plate reads owner and the law book holds only the docket's rule). `tests/hall_gov_real_site.mjs` boots the city, the street, the deck, every interior and My agents with a stale server still answering the old overlay route, and requires that no page asks for it and nothing shown carries `data-proto` or any phrase the overlay used to invent, with a control that the same scan finds such a phrase when a real read carries it.
+
+## One source of counts
+
+The city's plaque and door, the street's header and readings, the deck and the shell's Governing tally print the same numbers, defined once in `gov-living.js` `countsOf` with one label each: **to do** (asks on one of your seats; the owner's word for the main count, "24 to do"), **wait on others**, **to decide**, **agents working** (active claims) and **moving** (`GET /moving`: tasks being built or waiting to land, the owner's definition, so it never reads under agents working). `gov-feeds.js` reads each feed once per page view; the deck reads nothing (it draws the street's own living model); the shell's tally reads only `COUNT_FEEDS` (`GET /government/counts` and `/me`), which `tests/hall_gov_counts.mjs` proves give the same counts as every feed, and renders each surface from the same fixture to hold them equal. An answer on the deck leaves every count at once; an act's re-read refreshes the living model once. The top-bar tally stands on the city and the street only (`craft-mode.js` `TALLY_PAGES`, the body's `data-page`); every other page asks for nothing. A desk's own floor line keeps "needs you": that is one matter, not the count.
+
+## The surfaces
+
+- **The city** (`/city`). The plaque reads the government at a glance (its form, the laws, what is on you, this month's spend); a building opens its card in place, a glass panel beside it (task 1004702) — its name, who holds it ("Your seat.", "Led by …", or the owner until a Lead is seated), one fact and what waits there, then **its first ask, answered in place** (the owner's pick, 2026-10-13, reversing task 1004717's link-only card) through the deck's own sender (`GovDeck.sendAnswer`: the desk row's real route; keys 1/2/3 too), and two doors, "decide all N in a row" to the deck and "go inside" to the street. `city.html` loads the deck's card and sender (`street-draw.js`, `street-card.js`, `street-inside.js`, `street-desk.js`, `street-deck.js`, and `street-deck.css` for the glass). The door is "decide N in a row". Lead plates sit beside seated Leads; an unseated building shows "owner" on hover or focus.
+- **The street** (`/street`). Three planes: a hazed skyline of every open goal behind, the nine buildings with a deeper side face, the road in front. Construction is the city's family: a live site (scaffold at its share built, a crane whose jib swings) for a build-out going up, and a dashed-glass ghost annex with a parked crane and a tally arc for one waiting on its vote; an open sitting is a light shaft. What needs you lights salmon windows on the floor that holds it.
+- **The decision deck** (`/street#deck`, `#deck=<building>`). The street stays in view (task 1004702, the Tweak Mode glass language, mocks in `docs/design/mocks/decision-cards/`): the card is a glass panel beside the building that asks, a hairline to its pin and a halo on it, the scene under a light hush with that building left clear, two glass slivers for the cards still to come, and a slim glass dock at the foot ("1 of 38 to do" — the cards in hand of the to-do count, three for a batch — today's pips, the keys, back to the street). On a phone the panel is a sheet from the foot and the street scrolls so the building stays in view above it; the sheet carries its own skip and pass it on. The words come first and speak as "I", the agent that asked (the owner's pick): the question, the said line (the stored why; one not said as "I" is led by the pick, "I'd keep it off."), the answers with "my pick" in ink, and the last line as a sentence — who it waits on ("Only you can answer this.", the only salmon on it) then "Left alone, …". One card at a time in the ask format (a question of at most twelve words, two or three tap answers each with a one-line result, a pick and why, who it waits on, what happens if nobody answers). Keys 1/2/3 pick, S skips, D passes it on (only over a routed docket with the Leads read, and only a stored ask that waits on you; the server moves it). A card sends what its desk row sends, through the same route; "same answer for these 3?" batches like asks. A matter with no stored ask shows in its own words with its floor's desk beside it. The server holds the ask rules (`modules/government/asks.js`, [ADR 0372](../../../docs/adr/0372-an-ask-is-stored-per-docket-matter-and-the-server-refuses-slop.md)) and refuses a slop ask before it is stored; since task 1004704 an AI session cannot file a blocker without one ([ADR 0373](../../../docs/adr/0373-an-ai-session-files-a-blocker-with-an-ask.md)). A board vote's pips light as its sitting's tally counts them.
+- **A building's card on the street** (a pin): glass beside its pin over the same hush (task 1004702). A matter with a stored ask opens as its building's card — its name, who holds it and what waits, the ask inside answered in place through the deck's path, "go inside", "pass it on" and S to skip to the pin's next matter; one without keeps the matter card's own acts.
+- **Inside a building**: the Lead's row, the building's own stack, and the Lead's office storey once the Leads are read: who holds it, whether it builds without a vote (the server's `build_rights`), its committee rooms and works, and — for the building's holder — BUILD OUT, a capsule tap that is `POST /government/buildouts` (built at once, or filed as a vote whose card carries an iso picture drawn from the building as it stands; the preview stores nothing and says so). Rules holds the law book and what every session reads; the Treasury its pots, reserve, cap and the dry pot's borrow card; the Charter its strictness preset, a switch filing one laws vote.
+
+## The rules an edit here must keep
+
+- **Nothing is invented.** A field comes from a read or is derived from reads by a rule in `gov-living.js`; a read that fails leaves its part out. No sample data, no prototype mark, no key.
+- **Salmon is spent only on what needs you**, everywhere: a matter routed to another seat stands in ink on the street (pin and windows) as in the city. Ordinary activity is ink, and so is a choice: inside a building the chosen floor, its frame, sign and number, the lift and the desk's plate are ink, salmon only while that floor needs you (task 1004718).
+- **What needs you is never hidden.** The civic quarter's back corner, centre and front corner stand in one screen column, so the Charter (the tallest) takes the back corner and nothing taller stands in front of Planning; a building's salmon windows take its top rows first (task 1004718).
+- **The street band is cropped to what it draws** (`street.js` `BAND_TOP`/`BAND_H`, matched by `street.css`): no empty sky over the skylanes and no bare ground under the brackets; a stage taller than the street needs gives its spare height to the foot of the page, under the readings, never to the sky. Paper haze is a cool sea tone deep enough to read as distance (task 1004718).
+- **Motion is CSS only**, says only "this is live", and carries no data (count, size, position and colour do). Ambient loops are 20 s or longer (the pin's halo breathes on 24 s); growth, build-out and the deck's card (the panel rises once) are class-triggered one-shots; every animation stops under `prefers-reduced-motion`, and the still frame is a complete picture.
+- **Colours are the pack's tokens**, except the iso and front-on drawing palettes, which are drawing data. Dark rules are written twice. Light mode is paper: glows become ink washes.
+- **A tile is one number and two words, hidden at zero**; a row is a name of at most three words, one fact and at most two buttons; choices are one-tap chips.
+- **The files are split on purpose.** `street-depth.js` holds the street's depth model (pure) and the exterior's painters, so `street.js` stays under the 1,500-line ratchet and `street-draw.js` never requires `street-inside.js` (no cycle: `street-depth.js` requires both). `gov-living.js` stays pure; reading belongs to `gov-feeds.js`.
+
+## Verifying
+
+`node scripts/hall-preview/server.js --port 4620 --fixture-me --rank archon`, then `node modules/ui-design/kit/render.js --page city|street|my-agents` at 1440, 390 and 320 in both modes (restart the harness after editing a page's HTML). The states' expectations are the harness fixtures' (task 1004718 refreshed the ones that went stale when the harness became the real site). Tests: `tests/hall_gov_living.mjs`, `tests/hall_gov_counts.mjs`, `tests/hall_city_living.mjs`, `tests/hall_street_depth.mjs`, `tests/hall_street_deck.mjs`, `tests/hall_buildouts.mjs`, `tests/craft_mode_tallies.mjs`, `tests/hall_gov_real_site.mjs`.

package/modules/hall-ui/records/my-agents.md

@@ -0,0 +1,21 @@
+# My agents, and governing as a held seat — /my-agents and the nav (task 1004685, the living-city prototype)
+
+Covers: `my-agents.{html,js,css,states.json}`, `gov-positions.js`, the `position` flag in `shell.js` NAV, the seat in `craft-mode.js`, and the harness recorder `scripts/hall-preview/pref-writes.js`. Built on round-3 boards 6 ("the city and My agents"), 7 ("how strict") and 8 ("governance is a position") of the living-city design canvas. **Every row is real since task 1004714**: the settings, the laws' locks and caps, and Make it a law. The strictness preset strip is real too since task 1004715 (`GET /government/presets`, [ADR 0380](../../../docs/adr/0380-a-strictness-preset-is-a-bundle-of-laws-switched-by-one-laws-vote.md)).
+
+## What it is
+
+- **My agents** (in You, after Profile): every setting that shapes how your own Claude works, one line each — a name of at most three words, one fact, one-tap chips (the owner's desk line rule). Real rows come from `GET /me` (interaction profile, wandering, model allocation, session cards), `GET /me/skill-prefs`, `GET /specialities` and the sounds switch; they write to the real routes. The five settings no table held (when stuck, when it asks, how it asks, at once, going live) were dropped by task 1004714 rather than shown as settings nothing stores or obeys; how an agent asks is a project rule now (the ask shape, ADR 0372-0373).
+- **Only a law in force locks a row** (task 1004714). The rows read gov-living's model, which holds nothing but real reads (task 1004717 deleted the prototype overlay), so nothing else locks, caps or advises one. The strictness strip (real, task 1004715) names the preset the laws in force amount to ("No preset yet" on the hub) and previews what each WOULD lock of these rows — the server's locks after a switch, fixed or capped (Open workshop none, Guild off-task, Factory off-task and the three model slots) — with a tile and one pip per lockable row; it never locks a row. Previewing another preset offers "put it to a vote" to a builder who may open a board item: one real laws vote (`POST /government/board/presets`).
+- **What your agent reads first** quotes the REAL contract text `/me` carries (the Conductor relays it), says plainly when a knob is not sent (permissive wandering is `inject: false`), and puts the project's REAL laws above it: `/me`'s `laws` block, the very words every session gets first (task 1004707). With no law in force that block is not drawn.
+- **A real law's lock is real.** `/me`'s `laws.locks` says what each law in force did to your settings; the server already applied it (the slice's effective value obeys it), so the row is locked, naming the law and its number in the real book, with your own choice underneath. A law that only CAPS a setting (`{ setting, max }`) does not lock the row: the server names every value it still allows (`allowed` on each lock, `law-locks.js` allowedFor — the same list a refused PATCH carries), the chips offer those, and the line says `capped by <law> · Law N`. A cap that leaves one value, or a server that names none, reads as the whole-row lock. A lock the server could not enforce (a setting no table holds yet) locks nothing. A write the law forbids answers 409 `locked_by_law`, and the toast says the law.
+- **Make it a law** lists your own non-default choices that no law already locks or caps; proposing one files a real laws vote (`POST /government/board/laws`, task 1004706): one law, in the desk's voice, locking the setting to your value, sat under the constitution in force. It is offered only to a builder `/me` says may open a board item (`permissions['board.item.open']`, one of `NAV_PERMISSION_ATOMS`); an unreadable map offers nothing. A filed habit links to its vote in the Board Room.
+- **Governing is a held seat** (real since task 1004713, ADR 0377). `GET /me` carries `positions`, resolved by the server (`modules/government/positions.js`: the owner seat, a Lead in office, a seat on a building's sitting, the board under the constitution in force). `gov-positions.js` only reads that block — no constitution or rank. Items flagged `position: true` (the City, the Board Room, the Government group) hide for a builder the server says holds none, and the craft mode names Governing by the seat ("Planning Lead") or drops it. A `/me` with no block is unknown and keeps today's nav.
+
+## The rules an edit here must keep
+
+- **Cosmetic nav only.** Page gates stay server-side; a seat only ever takes a link away. `/my-agents` itself is `requireBuilderPage` (serve-internal.js, the ORACLE row).
+- **Unknown is today's nav.** A `/me` with no `positions` block (the module off, a failed read) is unknown whatever the constitution says: nothing hides and the craft picker keeps four doors.
+- **`?as=nobody` is a review aid that can only hide**: the stand-in has no seat and a rank no higher than thetes (never above the real one). It is remembered for the browser session; `?as=me` clears it.
+- **Nothing is invented**: `tests/hall_my_agents.mjs` hands the view an overlay of invented settings, laws and presets and requires the whole view to read the same; the page carries no prototype key.
+- **The accent is not spent here**: on the governing surfaces salmon means "needs you". A chosen chip is ink on glass, a lock a dashed hairline, a law band an ink wash. Motion is the lit pip and the saved tick, both one-shot on `transform`, dead under the kill switch.
+- **The harness records the five pref PATCHes** with the real shapers over an in-memory copy and lays them over later reads, so a reload shows the change and the derived card level moves with the profile as it does in production. A restart forgets everything.

package/modules/hall-ui/records/oversight-family.md

@@ -13,6 +13,7 @@ Also gone, and the one rule in that list: a sealed state is a `.scroll` panel wh
 **Watch's access-requests section became the applications REVIEW queue (task 1002332, BV1.R13)** — a project's applications ARE its own `access_requests` rows (ADR 0182 §Scope), and this section is the owner's surface for them until R4's console page absorbs it. Three things it added, all inside `renderGate`/`loadGate`:
 
 - **Every row says whether the platform vouched for the name on it** — a `.fact-pill--ok` "Identity vouched" or a `.fact-pill--warn` "Name unvouched", from the `vouched` the queue read already returned (`applicant_github_id IS NOT NULL`, core_230). `POST /access-requests` is the one PUBLIC unauthenticated write, so anyone may apply under anyone's name; ADR 0201 calls the distinction UI-load-bearing, not decoration. It is never authority (ADR 0016) — both classes offer the identical buttons, and `tests/watch_applications_queue.mjs` asserts exactly that.
+- **A vouched row that drew no profile names the handle its vouch carried** (task 1004673; ADR 0333 D5): "On the platform as `@handle`", from the `applicant_handle` the queue read returns, in the facts line after the pill. The live profile is null when the hub is down, answers nothing, or the read falls past the queue's cap, and the stored handle is then what the reviewer can still call the applicant. It shows only on a vouched row with no profile block (a drawn profile is the live record, and an unvouched row has no handle), as plain text, because the hub has no person page to link to yet (`/u/<handle>` is unbuilt). The harness fixture's row 907 is that state.
 - **The three lifecycle states sit behind one `makeFilterBar` switch**, so the decided history is readable and the RESCIND (`invited → dismissed`) the route has always taken is finally offered — ADR 0208 recorded that nothing on this page did. A declined row offers no button: reviving one is the invite form above, which is what the server's own 409 names. The switch is rebuilt each render (the same lifecycle `wireInviteForm` lives with, since `section` replaces the whole body).
 - **The `att-access` tile counts pending only.** Its sub line says "pending", so the count is guarded on the pending view — reading the history must not repaint the board with a number that means something else.
 

package/modules/hall-ui/records/profile-connections.md

@@ -0,0 +1,10 @@
+# The profile's Connections tab is this project's cut — your connections who build here, and a link to the hub for the rest (task 1004279)
+
+The owner's call of 2026-09-25 (ADR 0337 D5.4) made the hub the home of connections, and the hall's Connections key the in-project cut of them. The hub page came first (`/connections`, task 1004278), so cross-project connections never lost their only page; this tab then narrowed.
+
+- **What the own view shows.** Your accepted connections who are also active builders on this project, read as `GET /connections?here=1` (`modules/platform-identity/connections.js` `HERE_SQL`: the edge joined to core's `builders` row on github_id, `status = 'active'`). Nothing new is tracked about where a connection was made; both rows already existed. The lede counts the list beside it ("3 of your connections build on this project."), each row is 1st degree and removable, as before.
+- **What moved to the hub, and the way there.** The request queues (accept, decline, withdraw) and your connections on other projects are on the hub's `/connections`, so the tab draws one line and a `.pbtn` to `${OTB.hubOrigin()}/connections`, the Settings "Open your account page" pattern. No hub origin, no link. Accept and decline stay on another builder's profile, where an incoming request still turns their Connect button into the decision.
+- **It does not read the queues.** `GET /connections/requests` stamps `seen_at` on the incoming rows it returns ("delivered"), so fetching them here only to count or hide them would mark a request seen that nobody saw. `tests/profile_connections_ui.mjs` pins the absence of that read.
+- **"Builders you may know" stays.** ADR 0337 D4.2 puts it on both sides and D5.4 moved only connections and their requests, so it keeps its place under the list, unchanged.
+- **Only the hub's own hall shows this tab.** The connections routes exist where `platform-identity` is on, which is the hub; a hosted project's hall never reveals the key. Giving hosted halls the cut needs a cross-site read and was left out on the owner's pick.
+- **Looked at:** before/after full-page renders of `/profile#connections` against the hall-preview harness (own profile re-keyed to the `--fixture-me` builder, hub origin filled as the hub stamps it), 1440 dark and light, 390 light; floors probed at 1440/390/320 in both modes: no page-level sideways scroll, the link 236x38, no target under 24px. No new CSS; `.conn-req__state` went with the outbox that was its only user.

package/modules/hall-ui/records/reading-rooms.md

@@ -10,3 +10,5 @@
 Also gone, and the one rule in that list: **a page-local `:root` is forbidden both ways** (`roadmap.css` had the hall's only one) — the pack's `:root` is spliced at the end of `<head>` at (0,1,0), so a page's own `:root` neither wins reliably nor loses cleanly.
 
 **Two page-head voices, one per archetype, and that is the pick, not drift.** `.page-head--board` is quiet because a working surface's own name is the least interesting thing on it; `.page-head--room` is a lowercase display line over the ground with a one-word eyebrow, because in a reading room the document *is* the page. The roadmap deck takes the **board's** voice — it is a figure surface, not a document. The modifier carries the voice only; the room's WIDTH (`--room-max`, 1010px — past that a reading card is more empty ground than page) lives in `room.css`, so Ranks can take the voice without loading the archetype and never ends up with a 1010px head over 1120px cards.
+
+**The figures follow the theme ([task 1003639](https://cloudbongos.com/builders#/task/1003639)).** mermaid-cli renders one LIGHT figure per diagram at deploy, so on dark mode the canvas was a white plate on black. The fix is two CSS twins and one JS line, not a second render: `diagram-viewer.js` drops the `background-color: white` mermaid bakes into the SVG root, and in dark `diagram-viewer.css` turns the inline SVG with `filter: invert(1) hue-rotate(180deg)` (invert, then turn the hues back, so dark ink reads light and a purple edge stays purple). `room.css` turns the fallback PNG the same way, so a dark reader gets no white flash before the SVG arrives. A second, dark render per diagram was the alternative; it was not taken because it doubles the deploy's headless-Chrome work on a small host and needs the viewer to swap files on a theme switch, where CSS follows the switch for free. Measured on the rendered page, dark, at 137%: 16.1:1 on a node, 11.4:1 on an edge label, 18.8:1 on the note. `tests/hall_reading_world.mjs` §7b pins both twins and the JS line.