@bongos/core 1.21.120 → 1.21.122

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.21.120",
-  "core_contract": "1.21.120",
-  "source_commit": "a0abf3fc6c913d358ffd525f1592603c5ba771b0",
+  "core_version": "1.21.122",
+  "core_contract": "1.21.122",
+  "source_commit": "1744caf4412e029c7cf9b465a9fae581bc2deea7",
   "source_ref": "HEAD",
-  "built_at": "2026-10-14T16:25:27.328Z",
+  "built_at": "2026-10-14T19:02:19.295Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 605,
     "agent_docs_stubbed": 28,
-    "functional_verbatim": 3117,
+    "functional_verbatim": 3120,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 3751,
-  "tree_sha256": "9223a47c6d78a1edb87bbb0565101cac2b5d3c655b3cc9a703bee7c6116db5be",
+  "file_count": 3754,
+  "tree_sha256": "df175c2d7b99fee7204cf032575b41a9fa13988b1a3635717568822cf1d84d6b",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -107,7 +107,7 @@
     {
       "path": ".claude/skills/builder-ship/SKILL.md",
       "mode": "0000644",
-      "sha256": "9a646bdb323e8e22d7e65b4e721ee2ffe717b9b83006f2bf8fcec5db8614ae43"
+      "sha256": "1053b6160f72c6f78d9608b8431ba59b707fb310493fdb24ea52efd52f1ef825"
     },
     {
       "path": ".claude/skills/builder-stage/SKILL.md",
@@ -337,7 +337,7 @@
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "180a7c8a717b39b948341c1f0e5fb9bf69aec98f5d1f8cf1c37607972a05ed6b"
+      "sha256": "c13884fb0bd175f8bc9745150b2ca5ed254dd0ad14bcaa63511cf892cdbaec36"
     },
     {
       "path": "clients/bongos-client/index.mjs",
@@ -1462,7 +1462,7 @@
     {
       "path": "docs/adr/0199-restart-an-unreachable-active-project.md",
       "mode": "0000644",
-      "sha256": "999c2eb382b51317a4f1fbf7a615855be7baeded04cf03c4e1a411b2f98386cd"
+      "sha256": "a1dae8f4126ab9cfff7390bbde17a501ec0fe0b17f5c49ce2d0b4bd4e7735d9b"
     },
     {
       "path": "docs/adr/0200-re-point-a-bring-your-own-domain.md",
@@ -2307,7 +2307,7 @@
     {
       "path": "docs/adr/0369-ship-mode-decides-who-starts-a-ship-not-how-it-lands.md",
       "mode": "0000644",
-      "sha256": "9a5d9de0e7895a66d5515a453beca25d4839e7f93ef4dd0cd60524239ab005ee"
+      "sha256": "a0dba98c2dfe34ed6110f2d813fef346ad8adf7430f2b7ab4da38be72c37f7c8"
     },
     {
       "path": "docs/adr/0370-a-repo-we-create-is-private.md",
@@ -2382,7 +2382,7 @@
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "6ecf7c560ed5131cbc24a55498493a1fcf200516118c4c84e4ef0484f1d780e7"
+      "sha256": "b8d8cae75596996b38203b5b73b8fc4f5cfc4afa8fa6a170541131fdfed924ea"
     },
     {
       "path": "docs/architecture.md",
@@ -2407,12 +2407,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "32112bc332f327d446a1a066fc4036a916ca7e1a021202d4c07f468973910697"
+      "sha256": "2f6c0fff979e7a52a1dff20184291da110751084197f9619497bc5a8668c2c0f"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "50acc9b093e07c52ee9fc4b31a3e69c5ae6bc73c00530c71fc4a81c6f6aca727"
+      "sha256": "2fa52a4d4411a29e5aadeb0a03898a32144834527c7e84804f4c9df5f584cab6"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2922,7 +2922,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "72ce941af880f14ccd6a7b1df337934e527a8553d85cbe8b986076bbcf1358cc"
+      "sha256": "05a2ac9355a782e35f6af18287d0395ece73a55b0541f680106c250d1f604b63"
     },
     {
       "path": "docs/modules-contract.md",
@@ -3012,7 +3012,7 @@
     {
       "path": "docs/page-readings.json",
       "mode": "0000644",
-      "sha256": "cda2d7936c5a440c9bf7a535d553c316ee41271a7081b283d52d1599f605d052"
+      "sha256": "d59a98a2c166e276275156dfb13887c9147f1596ca65fb777c97e988dd23bf25"
     },
     {
       "path": "docs/project-context.template.md",
@@ -5297,7 +5297,7 @@
     {
       "path": "modules/government/protected-surfaces.json",
       "mode": "0000644",
-      "sha256": "f7b6342000bd9f49d9747e2e02056060ad5aeda074424fbba586cd8bc1ef6bd2"
+      "sha256": "9aedf10b3cb611343baf96662e6f79d45ed2218b83abfb3ad8c03536c722d37c"
     },
     {
       "path": "modules/government/ranks.js",
@@ -6132,7 +6132,7 @@
     {
       "path": "modules/hall-ui/public/modules.js",
       "mode": "0000644",
-      "sha256": "6f960241607ea3921cce5d40bf5fbb6d17595d26213601cbc6a7195448624b11"
+      "sha256": "a42b39265d8cfc1a191fe203c6d48c7da111e231ae33da731ebe5a9aa7cd656c"
     },
     {
       "path": "modules/hall-ui/public/modules.states.json",
@@ -7622,7 +7622,7 @@
     {
       "path": "modules/lifecycle/routes/project-settings.js",
       "mode": "0000644",
-      "sha256": "ff31bc1e4dbfec3026e250beaf8d5f4bdfc02b39cee616be1bb36ddc74b6f11b"
+      "sha256": "67d28a56701e45e176236fc0eae3ece9e349cc5c7b61cf6e7b8267afe304ade5"
     },
     {
       "path": "modules/lifecycle/routes/recommendations.js",
@@ -8782,7 +8782,7 @@
     {
       "path": "modules/provisioning/provisioning.js",
       "mode": "0000644",
-      "sha256": "b45bcb38497d8999ea0e5e3d0844785a7514a829cfd6cbb58c9b3167ccce37f9"
+      "sha256": "c99cfa7d071ece3f6d821709a8610baa25bb0323f7219016ac53d7e8ebb5e197"
     },
     {
       "path": "modules/provisioning/public-refusal.js",
@@ -9667,7 +9667,7 @@
     {
       "path": "modules/public-landing/public/projects.html",
       "mode": "0000644",
-      "sha256": "060c9904c6fefb2848819609a61bbb76822c273c601d670500a9e031380120e1"
+      "sha256": "ead1660e07f5bd8cf34008318e1c729ce39f5f4717e104be4cd2e64942a6b264"
     },
     {
       "path": "modules/public-landing/public/projects.probes.json",
@@ -10467,12 +10467,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "acf5cb64360f149851f33d37eb868b75ea6a476b6a26fe8c7fba494d0a530202"
+      "sha256": "0698dfed8aaee5032ad705115bcbc515cc7328a78c31a30018a2e2f5df0cf1ca"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "0e819e620052f3e27e6088f87839bfa0ac850b3b1992024fd13c5540930cafce"
+      "sha256": "aefc81df15571d208d96577a7ade7189f1d1e064ae9a1af132b0725f871fcb40"
     },
     {
       "path": "public-docs/index.html",
@@ -10492,7 +10492,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "6969dc70a1c0541fcd0a79f7b801d7de58b8a84b96c22e8e36b5524432878219"
+      "sha256": "43b16f9fbd2c3834c02bd141ce4b9e737003d1c42112e6cb607e7a118e29e7dd"
     },
     {
       "path": "scripts/cron/style_guide_audit.sh",
@@ -11002,7 +11002,7 @@
     {
       "path": "scripts/gds/exec-path-guard.js",
       "mode": "0000644",
-      "sha256": "8ed7c35c0d6be3c8a11ee990b487114d7e422caeb70c67240b5060a0087cfdc4"
+      "sha256": "cda9e125cfb2cb354c7d4e20065c36712a75955d3981203012c2334d0ce637ae"
     },
     {
       "path": "scripts/gds/feedback-send.js",
@@ -11587,7 +11587,7 @@
     {
       "path": "scripts/gds/provision.js",
       "mode": "0000644",
-      "sha256": "ff2d4e3576942d20056d11236dc13481a8ef560fa9828b691b30ba3758203048"
+      "sha256": "ea11cc49dbc298c8b3ed4ad88e25a3acfbba65fcd65727c9b47c43ee41e24437"
     },
     {
       "path": "scripts/gds/publish-credential-check.js",
@@ -11997,7 +11997,7 @@
     {
       "path": "scripts/gds/ship-flow.js",
       "mode": "0000644",
-      "sha256": "ad768320095b1d6693e6da5cee1f8e857ac69cbbfbea0a64dfeaa7092c432de2"
+      "sha256": "bb8edf9166b1c452b87d75e009d7404758bcba6ea58aa9011848ec44e761bb52"
     },
     {
       "path": "scripts/gds/ship-git.js",
@@ -12044,6 +12044,11 @@
       "mode": "0000644",
       "sha256": "8d37d5c6cbaa1ca0e8363fab6c34159d1e16922fdae11d4ffc17b4d9e2c7f795"
     },
+    {
+      "path": "scripts/gds/ship-mode-ask.js",
+      "mode": "0000644",
+      "sha256": "7a489ea223b4fa1d7a3b4ee1076c9a0cb65d6d929e9a5a6e0b8e403e15266afc"
+    },
     {
       "path": "scripts/gds/ship-preflight-steps.js",
       "mode": "0000644",
@@ -12082,7 +12087,7 @@
     {
       "path": "scripts/gds/ship.js",
       "mode": "0000644",
-      "sha256": "96bda284d66eb2428bbd05d359143fb6090fe6ce51bc2deca0a47590a8f392ca"
+      "sha256": "9f00804212ef485fd8cfd02be19cddb4be2570a34aa2a284f237940aff17753e"
     },
     {
       "path": "scripts/gds/shipping-mode.js",
@@ -12562,7 +12567,7 @@
     {
       "path": "src/bongos/module-scope-map.js",
       "mode": "0000644",
-      "sha256": "67711bf6dd6becd1edeb6866279a788fd6360a51d013eed77f2592be0aaab01b"
+      "sha256": "1b0cec97fbdf2c14f48354741f5537a7db3dbc947e7b7182eb2aa9173cfa00dc"
     },
     {
       "path": "src/bongos/module-store.js",
@@ -12722,7 +12727,7 @@
     {
       "path": "src/bongos/routes/modules.js",
       "mode": "0000644",
-      "sha256": "aea0a0f28621500bee51e4fec8e794139cf90c3360fdc55caecbbd5a5fc82b69"
+      "sha256": "e6b1b25371695b4aa959f5fdcece31869e827221f0205d1797c8332628d7b6a2"
     },
     {
       "path": "src/bongos/routes/my-sessions.js",
@@ -12802,7 +12807,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "ea34607161a0fbc072ecd805d5e150692df9557f574b6c74ebd53f96ea8ba341"
+      "sha256": "d49bdec14177f77cd4e6dd63ac2532a095565373c0948d9d7b91c809e4e3e6f3"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -12812,7 +12817,7 @@
     {
       "path": "src/module-loader/loader.js",
       "mode": "0000644",
-      "sha256": "f3ec8f005fb9bb366a489b82a5836195b78982b0f605a8e03b588f53f7f9392f"
+      "sha256": "04458c645d876011324e5ae11011774699c06e39ff2fa1ba1cf58a2d2775f887"
     },
     {
       "path": "src/module-loader/manifest-schema.js",
@@ -14992,7 +14997,7 @@
     {
       "path": "tests/government_protected_surfaces.mjs",
       "mode": "0000644",
-      "sha256": "3f002c9669af99cba90480163e1040604ec77b53583a779c0ef81ee75dd02547"
+      "sha256": "3518806d6b065029677e77a242604b6dc85bfd28537c2d109dacaedd29ac6d49"
     },
     {
       "path": "tests/government_rank_sync.mjs",
@@ -15267,7 +15272,7 @@
     {
       "path": "tests/hall_catalog_world.mjs",
       "mode": "0000644",
-      "sha256": "11f0ac50c5424a76371591b31275c796ded853db0cd35798b9adc878cdd88c88"
+      "sha256": "8aad2dd0521d212dfdb21a4fe4d2c341ddc94796bd4bc9b871ac1b5b25cc596d"
     },
     {
       "path": "tests/hall_city.mjs",
@@ -16362,7 +16367,7 @@
     {
       "path": "tests/module_loader.mjs",
       "mode": "0000644",
-      "sha256": "88100737a4b7a67899c3eba3dc01bcf3079d4171ad1dad62b79ffdb49ec3bee3"
+      "sha256": "a2a029afd86336a83deeb79f0856473470024fa94da01e1c556094b8e6d042d5"
     },
     {
       "path": "tests/module_manifest.mjs",
@@ -16434,6 +16439,11 @@
       "mode": "0000644",
       "sha256": "0db12d802203780f489e9a6d7abf970dfcde9099ac7011fcaaa6c575336804cd"
     },
+    {
+      "path": "tests/module_toggle_restart.mjs",
+      "mode": "0000644",
+      "sha256": "31b96e448b751a6f81891286e0dee96eb13e543d029787c5520f785fe2f45291"
+    },
     {
       "path": "tests/module_update.mjs",
       "mode": "0000644",
@@ -17017,7 +17027,7 @@
     {
       "path": "tests/projects_hub_pre_uat.mjs",
       "mode": "0000644",
-      "sha256": "e1595e83c5ee16acf89d4dcbe2771e09f2e35a09c8e099d048857932388ba571"
+      "sha256": "d18b4f99bb89f935d594020df107c7e7a4db3ea1075a4b48dce33b7312412bb8"
     },
     {
       "path": "tests/projects_hub_render_connect.mjs",
@@ -17102,7 +17112,7 @@
     {
       "path": "tests/provision_restart.mjs",
       "mode": "0000644",
-      "sha256": "caa345e6708d896b42c597a9f83919b4795222e61955c728975d56a873a04fb8"
+      "sha256": "deb9ee70fd9fdc70b25a5dd97ed76200ab10daa7eef3f6ea61bb6d5b7bb50494"
     },
     {
       "path": "tests/provision_settings_apply.mjs",
@@ -17232,7 +17242,7 @@
     {
       "path": "tests/provisioning_restart.mjs",
       "mode": "0000644",
-      "sha256": "c591f3fcf47551575ff99a7da62dc9c68763698bed7144d463a9b11a37d34ee0"
+      "sha256": "5cd2eda5b5e7dd09e96694f7973672c557daa8c8c5197e4dc2ee90eaa30dff21"
     },
     {
       "path": "tests/provisioning_runner_drift_notice.mjs",
@@ -17247,7 +17257,7 @@
     {
       "path": "tests/provisioning_settings_apply.mjs",
       "mode": "0000644",
-      "sha256": "432e7122f9ab59de28f46d9bdc342c1387a799b2b567c26c1d019b57ae40ac92"
+      "sha256": "2a5645624375b0d4386e12af1e437bdefc41b60d0d3f0b7b2c1a6c53f6a2e06f"
     },
     {
       "path": "tests/provisioning_settings_env.mjs",
@@ -17934,6 +17944,11 @@
       "mode": "0000644",
       "sha256": "aee20a5f6e2998d18f605b91d1eb1019e8ada824135759b29633caa3153d9255"
     },
+    {
+      "path": "tests/ship_mode_first_ship.mjs",
+      "mode": "0000644",
+      "sha256": "361d6c7a364c0c1f6fb8266f887fe25fc357250e4585b438fdbf3fb3fafa6849"
+    },
     {
       "path": "tests/ship_post_land_verify.mjs",
       "mode": "0000644",

package/.claude/skills/builder-ship/SKILL.md

@@ -83,6 +83,8 @@ The CLI drives a **three-state lifecycle** with a subagent grader between states
    `--notes-file` is refused rather than resolved by precedence, so nothing you
    wrote is dropped without a word.
 
+   **If the ship stops with `[otb-ask-ship-mode]` (exit 5), ask the person, once** (task 1004630, [ADR 0369](../../../docs/adr/0369-ship-mode-decides-who-starts-a-ship-not-how-it-lands.md)). The project never chose who starts a ship, so its first ship asks. Nothing has resolved and the claim is still active. Put the question to the person with your question tool if you have one — two options, **Auto (recommended)** first, then **Manual**, each with the one-line meaning the ship printed — and re-run the exact command it printed with `--ship-mode auto` or `--ship-mode manual`. That saves the answer for the whole project and the ship carries on; it never asks again. Never answer it yourself: the choice is the owner's. An unattended run is never asked (it ships on the default, Auto).
+
    **Never merge a task branch to main before running `ship.js`.** `ship.js` diffs the claim branch against `main`; an already-merged branch yields an empty diff, and the only exits are `--allow-empty` (dead-ends the task at `completed`, requiring an Archon-only confirm) or reverting the merge. Ship from the branch, then let `ship.js` land it. (This trap was hit on tasks 1002417 and 1002419, producing blockers 1000081/1000082 and an ~8.5-hour stall.)
 
 5. **Render the completion card — it IS the summary; do NOT write a prose recap (task 1270).**

package/clients/bongos-client/index.d.ts

@@ -129,7 +129,7 @@ export interface GetPageNotesSiteResponse { notes: unknown }
 export interface GetProfilesHandleResponse { account: unknown; cross_project: unknown }
 export interface GetProjectManageLinkResponse { ok: boolean; link: unknown }
 export interface GetProjectSettingsResponse { rows: unknown }
-export interface GetProjectSettingsShipModeResponse { mode: unknown; chosen: unknown; source: unknown; sentence: unknown; choices: unknown }
+export interface GetProjectSettingsShipModeResponse { mode: unknown; chosen: unknown; source: unknown; sentence: unknown; choices: unknown; can_change: unknown }
 export interface GetProjectsFeaturedResponse { projects: unknown; page: PageInfo }
 export interface GetProjectsResponse { projects: unknown }
 export interface GetProvisioningFleetResponse { instances: unknown; capacity: unknown }
@@ -440,7 +440,7 @@ export interface PostMinglePairsIdDecideResponse { pair: unknown }
 export interface PostMingleRoundRequest { limit?: number }
 export interface PostMingleRoundResponse { paired: unknown; count: unknown; skipped: unknown }
 export interface PostModulesKeyEnableRequest { enabled?: unknown }
-export interface PostModulesKeyEnableResponse { ok: boolean; key: unknown; enabled: unknown; effective: unknown; source: unknown; note: unknown }
+export interface PostModulesKeyEnableResponse { ok: boolean; key: unknown; enabled: unknown; effective: unknown; source: unknown; restart_pending: unknown; note: unknown }
 export interface PostModulesKeySubmitRequest { signed_by?: string }
 export interface PostModulesKeySubmitResponse { ok: boolean; submission: unknown }
 export interface PostMyProjectsClientIdLeaveResponse { ok: boolean; left: unknown }

package/docs/adr/0199-restart-an-unreachable-active-project.md

@@ -47,3 +47,7 @@ None of them came with an action. The pre-UAT hub review (2026-08-24) recorded w
 - **Reporting `healthy:true` as "answering again" on a domained instance** — the loopback probe cannot see what the sweep sees; the card would still say unreachable and the event would read as a lie.
 - **Retrying a restart that left the project down** — restarting a broken instance four more times fixes nothing and ends by overwriting the owner's action with an `error_note`.
 - **Showing the door on every active card** — an always-available Restart invites downtime on projects that are fine, and there is no reading behind it to act on.
+
+## Amendment (task 1004463, 2026-10-14)
+
+The platform's own row (`control-plane`) joins `RESTART_SHAPES`, and decision 7's door shows on it whenever it is `active` with nothing in flight, healthy or not. It is the one exception to "no Restart door on every active card": a module switched on or off in that hall mounts its routes and starts its pollers only at the next restart (the Modules toggle now says so, `restartPendingFor` in `src/module-loader/loader.js`), and the owner's only other way to restart the control plane was a shell on the box. `control-plane-guard.js` already allowed `restart` on that row; the runner routes it to the control-plane executor as it does `settings-apply`.

package/docs/adr/0369-ship-mode-decides-who-starts-a-ship-not-how-it-lands.md

@@ -33,7 +33,7 @@ It lives in `project_settings` (migration `core_231`), so it needs no migration.
 
 - This task adds the setting only. Behaviour follows in the dependent tasks:
   - the creation wizard asks for it (task 1004629);
-  - the first ship asks once if nobody has chosen (task 1004630);
+  - the first ship asks once if nobody has chosen (task 1004630). The ship stops before anything resolves and exits 5 with an `[otb-ask-ship-mode]` ask; the AI puts the two choices to the person and re-runs with `--ship-mode auto|manual`, which saves the answer. It never asks a caller who cannot change settings (`can_change` on the read), an unattended run, or when the mode cannot be read; those ship on the default;
   - the AI obeys it (task 1004631).
 - **How the wizard's answer reaches the project (task 1004629).** The wizard runs on the platform, and the new project's database is out of its reach. So the answer travels the way the founding marker does: the platform keeps it on the new project's record, sends it to the project at startup, and the project reads it as a *chosen* mode (`source: 'wizard'`) only while its own setting is unset. The settings page and the CLI write that setting, so a later change always wins. Nothing is written into the project's database on its behalf.
 - A database read failure answers Auto rather than blocking a ship. That matches the setting's default, and blocking would be the worse outcome for a person mid-task.

package/docs/api/openapi.json

@@ -16489,7 +16489,7 @@
           "project-settings"
         ],
         "summary": "GET /project-settings/ship-mode",
-        "description": "GET /project-settings/ship-mode — the ship mode alone, for the CLI and the AI. rank: any signed-in builder. Unlike the full settings read this carries no reward internals or file paths an agent could not already read, and every builder's AI session must know whether to ship on its own or stop and ask — gating it Metic+ would leave a newcomer's session guessing.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "description": "GET /project-settings/ship-mode — the ship mode alone, for the CLI and the AI. rank: any signed-in builder. Unlike the full settings read this carries no reward internals or file paths an agent could not already read, and every builder's AI session must know whether to ship on its own or stop and ask — gating it Metic+ would leave a newcomer's session guessing. can_change (task 1004630): whether THIS caller holds project.settings.manage, so the first-ship question is put only to someone who can answer it. null when authority could not be established; the CLI then asks, and a refused save lets the ship go on. Cosmetic only — the PATCH below keeps its own gate (ADR 0016).\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
         "x-source": "modules/lifecycle/routes/project-settings.js",
         "responses": {
@@ -27665,14 +27665,16 @@
           "chosen": {},
           "source": {},
           "sentence": {},
-          "choices": {}
+          "choices": {},
+          "can_change": {}
         },
         "required": [
           "mode",
           "chosen",
           "source",
           "sentence",
-          "choices"
+          "choices",
+          "can_change"
         ]
       },
       "GetProjectsFeaturedResponse": {
@@ -32561,6 +32563,7 @@
           "enabled": {},
           "effective": {},
           "source": {},
+          "restart_pending": {},
           "note": {}
         },
         "required": [
@@ -32569,6 +32572,7 @@
           "enabled",
           "effective",
           "source",
+          "restart_pending",
           "note"
         ]
       },

package/docs/copy-inventory.md

@@ -4,13 +4,13 @@
 > Deterministic on a given tree — regenerate and commit rather than hand-editing.
 > Machine-readable twin: [`copy-registry.json`](copy-registry.json).
 
-**2720 strings** across 3 surfaces · 2300 distinct pieces of copy · 2720 certain, 0 heuristic · 240 shown in more than one place.
+**2722 strings** across 3 surfaces · 2302 distinct pieces of copy · 2722 certain, 0 heuristic · 240 shown in more than one place.
 
 ## Surfaces
 
 | surface | lives at | files | strings |
 |---|---|---|---|
-| `builders-hall` | `modules/hall-ui/public` | 143 | 1912 |
+| `builders-hall` | `modules/hall-ui/public` | 143 | 1914 |
 | `status-dashboard` | `modules/status-ui/public` | 4 | 100 |
 | `landing` | `modules/public-landing/public` | 9 | 708 |
 
@@ -78,7 +78,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `8226c979db4d` | 3x | Not now | modules/hall-ui/public/collab.js:668, modules/hall-ui/public/paintbrush.js:119, modules/hall-ui/public/paintbrush.js:183 |
 | … | | _200 more in the JSON registry_ | |
 
-## `builders-hall` — 1912 strings
+## `builders-hall` — 1914 strings
 
 | id | conf | text | where |
 |---|---|---|---|
@@ -356,7 +356,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `90691bceaf68` | certain | Could not load | `modules/hall-ui/public/project-settings.js:284` |
 | `90691bceaf68` | certain | Could not load | `modules/hall-ui/public/task.js:1022` |
 | `589a4cfc5442` | certain | Could not load idea {…}. | `modules/hall-ui/public/ideas.js:1018` |
-| `192c893fc64e` | certain | Could not load modules. | `modules/hall-ui/public/modules.js:335` |
+| `192c893fc64e` | certain | Could not load modules. | `modules/hall-ui/public/modules.js:361` |
 | `9912c3835136` | certain | Could not load requests — reload to try again. | `modules/hall-ui/public/collab.js:845` |
 | `7775fec0fa85` | certain | Could not load sessions. | `modules/hall-ui/public/sessions.js:504` |
 | `7775fec0fa85` | certain | Could not load sessions. | `modules/hall-ui/public/sessions.js:542` |
@@ -376,7 +376,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `64f9d51f0fa2` | certain | Could not load your settings. | `modules/hall-ui/public/settings.js:1199` |
 | `de244c45d916` | certain | Could not load {…} | `modules/hall-ui/public/task.js:1015` |
 | `2366356926b4` | certain | Could not mark the primer just now. Try again. | `modules/hall-ui/public/primer.js:259` |
-| `753987b5da13` | certain | Could not reach the submit endpoint. | `modules/hall-ui/public/modules.js:314` |
+| `753987b5da13` | certain | Could not reach the submit endpoint. | `modules/hall-ui/public/modules.js:340` |
 | `6f500726f0ac` | certain | Could not read the report: {…} | `modules/hall-ui/public/watch.js:768` |
 | `21c2f33168a3` | certain | Could not read this project's deploy state: {…} | `modules/hall-ui/public/deploy.js:624` |
 | `21a782f1af26` | certain | Could not read what this would bring in: {…}. The check below still applies. | `modules/hall-ui/public/deploy.js:542` |
@@ -877,7 +877,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `43626cff7071` | certain | Nothing of that kind in your sky. | `modules/hall-ui/public/sky-panel.js:123` |
 | `b05a5f8cb074` | certain | Nothing personal is sent. | `modules/hall-ui/public/my-agents.js:429` |
 | `ad9a17a8a5eb` | certain | Nothing shipped yet. | `modules/hall-ui/public/profile.js:297` |
-| `f326632f2013` | certain | Nothing to submit — every module here ships with the core. | `modules/hall-ui/public/modules.js:275` |
+| `f326632f2013` | certain | Nothing to submit — every module here ships with the core. | `modules/hall-ui/public/modules.js:301` |
 | `27c0d872db2d` | certain | Nothing you have typed above is lost by opening this. | `modules/hall-ui/public/ideas.html:155` |
 | `26a07b64f49d` | certain | Now running core {…} | `modules/hall-ui/public/deploy.js:400` |
 | `21cb60a8a96a` | certain | Now running core {…} — but GitHub was not updated. | `modules/hall-ui/public/deploy.js:390` |
@@ -1761,6 +1761,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `9eca058c6ad2` | certain | release a thought — one line | `modules/hall-ui/public/goal-map.html:90` |
 | `9eca058c6ad2` | certain | release a thought — one line | `modules/hall-ui/public/thinking.html:98` |
 | `d4bb81532896` | certain | repro steps, context, anything that helps… | `modules/hall-ui/public/ideas.html:80` |
+| `299dd9d33f53` | certain | restart it | `modules/hall-ui/public/modules.js:129` |
 | `58b4e7a48d86` | certain | reviews from before Tweak Mode | `modules/hall-ui/public/studio.html:143` |
 | `0d677ab4868a` | certain | reviews written on the live site | `modules/hall-ui/public/studio.html:138` |
 | `f37f5043f81b` | certain | ring {…} of {…} · {…} | `modules/hall-ui/public/sky-interaction.js:34` |
@@ -1784,7 +1785,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `c8c2551006dc` | certain | skip the tour | `modules/hall-ui/public/goal-map.html:121` |
 | `c8c2551006dc` | certain | skip the tour | `modules/hall-ui/public/thinking.html:122` |
 | `1e737a57eb20` | certain | start governing | `modules/hall-ui/public/city.html:99` |
-| `0215b2cdca8c` | certain | submit for review | `modules/hall-ui/public/modules.js:149` |
+| `0215b2cdca8c` | certain | submit for review | `modules/hall-ui/public/modules.js:175` |
 | `43e6f1592ae3` | certain | submit it in the editor | `modules/hall-ui/public/studio.js:829` |
 | `9ec19e32f86f` | certain | submit page | `modules/hall-ui/public/tweak-editor.html:68` |
 | `da30b952a60b` | certain | system / unattributed | `modules/hall-ui/public/goals-page.js:284` |
@@ -1852,6 +1853,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `8cd3cc4005fc` | certain | via goal | `modules/hall-ui/public/dom-utils.js:441` |
 | `007b28a56031` | certain | view diff | `modules/hall-ui/public/gate.js:160` |
 | `18cf722bdd7e` | certain | waiting · | `modules/hall-ui/public/sky-interaction.js:128` |
+| `354861d3c2ce` | certain | waits for a restart | `modules/hall-ui/public/modules.js:127` |
 | `35be9e0923da` | certain | walks the whole path in plain language. | `modules/hall-ui/public/hall-render.js:837` |
 | `db42054582ed` | certain | wells · | `modules/hall-ui/public/sky-interaction.js:129` |
 | `17705daf7b85` | certain | what counts as passing | `modules/hall-ui/public/government.html:55` |
@@ -1886,7 +1888,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `6c08bfe92e2b` | certain | {…} This project is invite-only: the {…} invites each builder, and there is nothing to apply for here. | `modules/hall-ui/public/hall-render.js:292` |
 | `c5623d60015d` | certain | {…} Your standing is {…}. | `modules/hall-ui/public/hall-render.js:850` |
 | `a91e1e702d4d` | certain | {…} achieved, {…} in progress, {…} not started of {…} goals | `modules/hall-ui/public/roadmap.js:73` |
-| `a65d371b5cb3` | certain | {…} and above can enable or disable a module | `modules/hall-ui/public/modules.js:147` |
+| `a65d371b5cb3` | certain | {…} and above can enable or disable a module | `modules/hall-ui/public/modules.js:173` |
 | `98b1c674fc37` | certain | {…} and up | `modules/hall-ui/public/sessions.js:289` |
 | `111b71a9acaf` | certain | {…} and up. | `modules/hall-ui/public/sessions.js:287` |
 | `56b00d773232` | certain | {…} and {…} | `modules/hall-ui/public/profile-nudge.js:77` |
@@ -1924,7 +1926,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `1a8a6267e490` | certain | {…} unfinished task{…} — say what happens to each | `modules/hall-ui/public/goals-render.js:1042` |
 | `2f75f69cdb2f` | certain | {…} {…} changed | `modules/hall-ui/public/profile-crafts.js:218` |
 | `8186b562553a` | certain | {…} {…} waiting | `modules/hall-ui/public/work.js:420` |
-| `a9216af9b05e` | certain | {…} {…} — how-to | `modules/hall-ui/public/modules.js:390` |
+| `a9216af9b05e` | certain | {…} {…} — how-to | `modules/hall-ui/public/modules.js:416` |
 | `0d4016a5531c` | certain | {…} {…}{…} | `modules/hall-ui/public/watch.js:514` |
 | `0d4016a5531c` | certain | {…} {…}{…} | `modules/hall-ui/public/work.js:265` |
 | `b3757ba3bb46` | certain | {…} · Stored encrypted; never shown again after saving. | `modules/hall-ui/public/settings.js:873` |
@@ -1932,7 +1934,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `d73256fbc395` | certain | {…} · who votes, and how it {…} | `modules/hall-ui/public/board-room.js:460` |
 | `cab2a4296aec` | certain | {…} · {…} · {…}{…} | `modules/hall-ui/public/goal-inbox.js:458` |
 | `1ac723849449` | certain | {…} · {…}{…} | `modules/hall-ui/public/sky-interaction.js:33` |
-| `ddd2bfc1fb60` | certain | {…} — how to use it | `modules/hall-ui/public/modules.js:392` |
+| `ddd2bfc1fb60` | certain | {…} — how to use it | `modules/hall-ui/public/modules.js:418` |
 | `085f93f3f775` | certain | {…} — see all standings | `modules/hall-ui/public/hall-render.js:80` |
 | `2a2728a4ec4f` | certain | {…}% of tasks complete | `modules/hall-ui/public/roadmap.js:63` |
 | `15e545eb3ce2` | certain | {…}, no such task | `modules/hall-ui/public/task.js:1002` |
@@ -1947,7 +1949,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `97e27ab169ae` | certain | {…}{…} session{…} across {…} builder{…}. | `modules/hall-ui/public/sessions.js:443` |
 | `3d74668f69e5` | certain | {…}{…} · {…} | `modules/hall-ui/public/task.js:639` |
 | `7f79bedecf60` | certain | {…}{…} — open it to see what went | `modules/hall-ui/public/goal-inbox.js:374` |
-| `1026fd5f68b7` | certain | · version | `modules/hall-ui/public/modules.js:395` |
+| `1026fd5f68b7` | certain | · version | `modules/hall-ui/public/modules.js:421` |
 | `4a5ff4f662df` | certain | — ${…} of ${…} this month ({…}%). {…} | `modules/hall-ui/public/hall-render.js:523` |
 | `a6ae9cbdee30` | certain | — all builders — | `modules/hall-ui/public/builders.js:711` |
 | `729d4ce22b99` | certain | — any — | `modules/hall-ui/public/hall-widgets.js:163` |