@bongos/core 1.21.132 → 1.21.134

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.21.132",
-  "core_contract": "1.21.132",
-  "source_commit": "10dc21ed515c04c95e9dba666c809be9ea45a593",
+  "core_version": "1.21.134",
+  "core_contract": "1.21.134",
+  "source_commit": "7f0bb837924e95ccff5e553a687b228eef70ce30",
   "source_ref": "HEAD",
-  "built_at": "2026-10-15T18:14:12.382Z",
+  "built_at": "2026-10-15T21:28:31.615Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
-    "docs_redacted": 606,
+    "docs_redacted": 608,
     "agent_docs_stubbed": 28,
-    "functional_verbatim": 3146,
+    "functional_verbatim": 3149,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 3781,
-  "tree_sha256": "2f366274bb2738a2385ff8682e82cddcda6f1cffea387e43a5a9001755b9ee84",
+  "file_count": 3786,
+  "tree_sha256": "f5dfa49c3f439d7d10d733cc5f9c0940cf30172fa438d8757a49b7a6cd636fc8",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -2369,10 +2369,15 @@
       "mode": "0000644",
       "sha256": "12602b29d3a701e7ad1e6c411f7cbf6de3c3148b9c08624b6197968de8079c5f"
     },
+    {
+      "path": "docs/adr/0382-a-hardware-card-is-a-passkey-step-up-an-archon-switches-on-per-builder.md",
+      "mode": "0000644",
+      "sha256": "ae20b78283a004ba64d66cd0eec7db2c0d1a6ba211560e37f99d188a94f11668"
+    },
     {
       "path": "docs/adr/README.md",
       "mode": "0000644",
-      "sha256": "6d2a97e2c7ce557aad5e82dd02c529dc05f0bdf6c014df9a812d3e65c7216763"
+      "sha256": "c5e8e4a27cf07799da677172e50a0c06d9be9bdf31f511416b40e392d268ffc0"
     },
     {
       "path": "docs/api-reference.md",
@@ -2407,12 +2412,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "24ace5710d2fd5823ec9f1c030570e53b48ccdff5b356b193e5d055fe9209d9f"
+      "sha256": "999f2aebe366e15d3a90e5f5eae8895d083b6bfab971ce5dae5689abf746b148"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "d1bf2d46cc50c80729a6b705eef2313753ea48b56eed76bb365b8bda635ca68f"
+      "sha256": "c2800908ad74f7719dd80dd441bd0720733f3219a45a43aa8e3aecb939bad703"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2922,7 +2927,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "fcac7f752834fcc7244b69e173b1c9711bb86100e1904e3a59933fa508716c0c"
+      "sha256": "e77d3f864bca9f90cc1dbf2cfedd61dc315a27bb37084bbc8873ed144e7afa64"
     },
     {
       "path": "docs/modules-contract.md",
@@ -3007,12 +3012,12 @@
     {
       "path": "docs/page-inventory.json",
       "mode": "0000644",
-      "sha256": "688c15d7b79c60a561be7fca61931627898d1544d52dd912a79ff3fa6c160876"
+      "sha256": "4b5758170f88553d4b734e08d5c4563cbe7a44c97802ba208098ad0f58f7066d"
     },
     {
       "path": "docs/page-readings.json",
       "mode": "0000644",
-      "sha256": "2ade456b9e5e4e51e4c4e541f3336360d694022bd43b6ea5da77ae63367bd809"
+      "sha256": "688397e5f326c13764b78b90929ed54213c683df661043d357c37cfc85b8ce35"
     },
     {
       "path": "docs/project-context.template.md",
@@ -5919,6 +5924,16 @@
       "mode": "0000644",
       "sha256": "0a7f1d704304971ece4e0ccb97082179a28cdfd76293ab46eceec02945de88df"
     },
+    {
+      "path": "modules/hall-ui/public/goal-author-lib.js",
+      "mode": "0000644",
+      "sha256": "3d962593e1d29665ba54f4bb356291123e3cccf53178a1eab79838f7e54bd09d"
+    },
+    {
+      "path": "modules/hall-ui/public/goal-author.js",
+      "mode": "0000644",
+      "sha256": "e4d5355eb3d2a9c894cce901c20051f769e4817f85bb3ba0ec7ebe4d67921306"
+    },
     {
       "path": "modules/hall-ui/public/goal-forest-lib.js",
       "mode": "0000644",
@@ -5952,7 +5967,7 @@
     {
       "path": "modules/hall-ui/public/goals-page.js",
       "mode": "0000644",
-      "sha256": "3836cafa9edc429cdcd847f48f324f7f3aa412ca42b847ed1622126525e67c9a"
+      "sha256": "1a83916b1ec071e490439984d56c6c81215697b536751b9985b288dfec2d7423"
     },
     {
       "path": "modules/hall-ui/public/goals-render.js",
@@ -5962,12 +5977,12 @@
     {
       "path": "modules/hall-ui/public/goals.css",
       "mode": "0000644",
-      "sha256": "6042df284acac7f5af12688651aad7e8d0cf38829a9395a1e28e0e0ded7b8bf3"
+      "sha256": "95bf7533b115b58c96f2598f7ae3a61287a87d61d2928de577e7712d9b5d51f0"
     },
     {
       "path": "modules/hall-ui/public/goals.html",
       "mode": "0000644",
-      "sha256": "11b681a246ba5a6a662e6fb0b0eae795460bd1f8cdf251f8cd0e2e52c4869756"
+      "sha256": "20890dee7decd30bb8ca5310b976fc0a0264f2c6c5f15c8680030cd0621490f5"
     },
     {
       "path": "modules/hall-ui/public/goals.js",
@@ -5977,7 +5992,7 @@
     {
       "path": "modules/hall-ui/public/goals.states.json",
       "mode": "0000644",
-      "sha256": "8b458aa1afaaf9e122217d912bcf15390550cf75953414a94c6bd912c98574e5"
+      "sha256": "07f3964ece50f67d5e0e4628af66dd90f014a16b122b6dad4015f93878c50aa3"
     },
     {
       "path": "modules/hall-ui/public/gov-feeds.js",
@@ -6759,6 +6774,11 @@
       "mode": "0000644",
       "sha256": "f4063fc1bdaaa31e81e41b9dfb58dbf575d04db20e0bad1159639494f88a058b"
     },
+    {
+      "path": "modules/hall-ui/records/goal-authoring.md",
+      "mode": "0000644",
+      "sha256": "e400c7263c63006d10b17bb495e346b3e79a28f942118c545cf0eb86d1f95808"
+    },
     {
       "path": "modules/hall-ui/records/goal-dependency-forest.md",
       "mode": "0000644",
@@ -10502,12 +10522,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "6664906b88a5d77b193eb6c60bcad81603678fd33b14dc6c60d94e56cd7221d0"
+      "sha256": "16a65f4d7586e27be39c10448d7a39a0782725e1c050655e08ed930e3dc50ed5"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "971b67f78304f94f08f4ca1f66bab6b692362b81b949aa8ed886e51696000d83"
+      "sha256": "f6a3dfa7fb0820113d9448f1b011a6e2edaeb3f06656d9530e2dbea160e112f0"
     },
     {
       "path": "public-docs/index.html",
@@ -10527,7 +10547,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "ba6b8f8a08e0aaf99bb72acb3f28f291bc92232c5f234e4c7ab86ca7c23bcb95"
+      "sha256": "0a7de5fe356b571a5dcaf748c830d457a365165d17b0d733594b6bfc89ef6267"
     },
     {
       "path": "scripts/cron/style_guide_audit.sh",
@@ -12882,7 +12902,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "551446e38657afe5ad3430c5b33ee82f052bee8d6da7f4ad24f4ffeef24d57dd"
+      "sha256": "d253382a583b4d8ad6289d41cf1e5db7ebe264ed7bf54ab93b5b0b44f46b5135"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -14669,6 +14689,11 @@
       "mode": "0000644",
       "sha256": "ffefb97db455e2b6656f5c26933312572102e3a8aa37605545ae9b425d616be0"
     },
+    {
+      "path": "tests/goal_author_ui.mjs",
+      "mode": "0000644",
+      "sha256": "78d7caca514961f3f21a86de47bad2c76408434bbb887d302f9b688fb46387bf"
+    },
     {
       "path": "tests/goal_category.mjs",
       "mode": "0000644",

package/docs/adr/0382-a-hardware-card-is-a-passkey-step-up-an-archon-switches-on-per-builder.md

@@ -0,0 +1,64 @@
+# 0382 — A hardware security card is a passkey step-up check, switched on per builder by an Archon
+
+- **Status:** Proposed (research draft — nothing is built by this ADR)
+- **Date:** 2026-10-15
+- **Task:** task 1004676 (from idea 1001144)
+- **Decided by:** pending owner review
+- **Related:** [ADR 0016](0016-trust-boundary-server-enforced-permissions.md) (trust boundary: the server enforces)
+
+## Context
+
+A builder should be able to tap an NFC card on a reader to prove who they are before reaching sensitive features. The owner has an NFC biometric card with FIDO on it and wants to test it.
+
+Findings from the code (2026-10-15):
+
+1. **No passkey / WebAuthn support exists.** `grep` over `src/` and `package.json` finds nothing. Sign-in is GitHub OAuth (`src/bongos/auth-github.js`) or, for hosted projects, the hub as identity provider (`auth-idp.js`). Both end in the same `builder_sessions` row (`auth.js`), and rank is read fresh from the DB on every request.
+2. **A step-up check fits the existing gates.** `requireBuilder` / `requireRank` / `requirePermission` in `auth.js` already run per request, so one more gate can ask "has this session proven a card recently?".
+3. **A plain RFID / PC-SC reader is not needed.** A FIDO2 card is a standard WebAuthn authenticator: the browser talks to it over NFC (or USB). No driver or PC/SC middleware is required for this path.
+
+## Decision
+
+**D1 — Use WebAuthn (FIDO2) via a vetted library** (`@simplewebauthn/server` + `@simplewebauthn/browser`). No hand-rolled CBOR/COSE parsing.
+
+**D2 — The card is a second factor, never the first.** GitHub (or hub) sign-in stays. The card adds a *step-up*: a session that has done a card check in the last **10 minutes** may reach the protected actions. The proof is a timestamp column on the server-side `builder_sessions` row, set only by the verify route; nothing the client sends counts as proof.
+
+**D3 — Register first.** A builder registers a card while signed in the normal way. The requirement can only be switched on for a builder who has at least one registered credential, so nobody is locked out by a switch. The Archon route refuses (409) when the builder has no credential.
+
+**D4 — An Archon switches the requirement on or off per builder.** Default is off for everyone. The switch is a server-side flag on the builder, set through an Archon-ranked route (rank checked fresh, per ADR 0016). Local file edits cannot flip it.
+
+**D5 — What the card guards (first cut, owner to confirm):** rank changes, deploy / go-live, session revocation, and any payout or treasury action. Chosen as the actions where a stolen session does the most damage.
+
+**D6 — Challenge and credential hygiene.** Random single-use challenges, server-stored, short-lived; verify origin and RP ID; `userVerification: 'required'` (the card's biometric is the second proof); credentials table with `credential_id`, `public_key`, `sign_count`, `transports`, `aaguid`, `nickname`, `created_at`, `last_used_at`; an opaque random user handle, never the email. A `sign_count` that goes backwards (when the card reports a counter) fails the check and is logged as a possible clone. Indexes on `credential_id` and `builder_id`. Challenges carry a TTL and are swept.
+
+**D7 — RP ID.** The RP ID is the registrable domain. Changing it later invalidates every credential, so it is set once, by the owner. Hosted projects on other subdomains need their own decision (one RP ID per host, or the hub as the sole place a card is checked).
+
+**D8 — Recovery is its own decision, not part of this ADR.** The owner will define the lost-card protocol. Until then the Archon off-switch (D4) is the recovery path, and a builder may register more than one card.
+
+## Alternatives considered
+
+- **PC/SC reader middleware** reading the card's UID: rejected. A UID is a copyable identifier, not a cryptographic proof, and it needs drivers on every machine.
+- **Card as the only login:** rejected. It removes the fallback and makes a lost card a lockout.
+
+## Testing and rollout
+
+- **Local:** passkeys work on `http://localhost`. Chrome DevTools' virtual authenticator tests without hardware; the real card is tested on the owner's machine.
+- **Rollout:** ship with the switch off for everyone (safe to land); the owner turns it on for their own account and tries the real card on the live site; then an Archon enables it builder by builder as cards are handed out.
+
+## Hardware and cost
+
+One FIDO2 NFC card (owner already has one), plus an NFC reader only if the computer has no NFC (a FIDO-compatible USB NFC reader is roughly $20–40). Phones with NFC need nothing extra.
+
+## Follow-up tasks
+
+Filed from this research: tasks 1004746 (registration page), 1004747 (step-up gate), 1004748 (Archon switch), 1004749 (lost-card recovery), and idea 1001246 (WebAuthn foundation). Sizing: one dependency, one table, roughly five small tasks, about a working week in total.
+
+1. WebAuthn foundation: library, credentials table, challenge store.
+2. Card registration page for a signed-in builder (+ list / rename / remove).
+3. The step-up gate and the protected actions of D5.
+4. The Archon per-builder switch (D4) and its audit-log entry.
+5. Lost-card recovery (waits on the owner's protocol).
+
+## Consequences
+
+- One new dependency and one new table; no change to how anyone signs in until the switch is turned on.
+- The protected-action list must be kept in step with new sensitive routes (a fitness check is a worthwhile follow-up).

package/docs/adr/README.md

@@ -500,3 +500,4 @@ These 20 numbers are each shared by exactly two files. They are **accepted histo
 | 0379 | [**The treasury is pots per goal, a reserve, and borrowing, over real spend** ([task 1004712](https://cloudbongos.com/builders#/task/1004712), goal 1000111). **D1:** spend is cost_log through each task's goal, this month, read every time. **D2:** a pot is a budget the Treasury's holder gives a goal (`government_pots`, government_031). **D3:** the reserve is last month's spend no pot was given, less loans; it may be overdrawn. **D4:** a dry pot files a borrow (poller), its ask stored on `treasury_spending:<id>` and routed to the Treasury. **D5:** answered once (lend, half, no) by its seat. **D6:** the spend cap is a project setting, off by default. **D7:** the docket source and the hall's pots, reserve, beacon and book are real.](0379-the-treasury-is-pots-per-goal-a-reserve-and-borrowing-over-real-spend.md) | government / treasury / city |
 | 0380 | [**A strictness preset is a bundle of laws, switched by one laws vote and read from the laws in force** ([task 1004715](https://cloudbongos.com/builders#/task/1004715), goal 1000111). **D1:** Open workshop, Guild, Factory are catalogues of laws in `presets.js`; every lock names a stored personal setting. **D2:** a switch is ONE laws amendment through `board.proposeLaws` (`POST /government/board/presets`); only its passing writes. **D3:** the preset in force is read from the laws in force, never stored; nothing is seeded. **D4:** `GET /government/presets` says what each would lock; My agents and the Charter are real.](0380-a-strictness-preset-is-a-bundle-of-laws-switched-by-one-laws-vote.md) | government / laws / my agents |
 | 0381 | [**The hub moves each hosted project's core on its own, by that project's update rule** ([task 1004729](https://cloudbongos.com/builders#/task/1004729), goal 1000090). Amends ADR 0293's "not automatic" for hosted projects. **D1:** after each snapshot the runner queues a preflight for `recommended`, then the move once that preflight passed. **D2:** through `enqueueIntent` as `runner:auto-upgrade`; never the control-plane row. **D3:** one automatic intent per tick. **D4:** a target that already failed or was refused is held (read from existing rows; task 1004730 is the richer hold). **D5:** `BONGOS_AUTO_CORE_UPGRADE=off` stops it platform-wide; default on; `pinned` is the per-project switch.](0381-the-hub-moves-each-hosted-project-by-its-update-rule.md) | provisioning / core upgrade / automation |
+| 0382 | [**A hardware card is a passkey step-up check, switched on per builder by an Archon** ([task 1004676](https://cloudbongos.com/builders#/task/1004676), proposed). No WebAuthn exists today; sign-in is GitHub OAuth or the hub IdP. **D1:** WebAuthn via a vetted library. **D2:** the card is a second factor, a server-recorded step-up, never the first. **D3:** register first; the requirement needs a registered card. **D4:** an Archon switches it on per builder, default off. **D5:** guards rank changes, deploy, session revoke, payouts. No PC/SC reader needed. Rejected: PC/SC middleware, card as sole login.](0382-a-hardware-card-is-a-passkey-step-up-an-archon-switches-on-per-builder.md) | auth / security |

package/docs/copy-inventory.md

@@ -4,13 +4,13 @@
 > Deterministic on a given tree — regenerate and commit rather than hand-editing.
 > Machine-readable twin: [`copy-registry.json`](copy-registry.json).
 
-**2724 strings** across 3 surfaces · 2304 distinct pieces of copy · 2724 certain, 0 heuristic · 240 shown in more than one place.
+**2739 strings** across 3 surfaces · 2317 distinct pieces of copy · 2739 certain, 0 heuristic · 242 shown in more than one place.
 
 ## Surfaces
 
 | surface | lives at | files | strings |
 |---|---|---|---|
-| `builders-hall` | `modules/hall-ui/public` | 143 | 1916 |
+| `builders-hall` | `modules/hall-ui/public` | 145 | 1931 |
 | `status-dashboard` | `modules/status-ui/public` | 4 | 100 |
 | `landing` | `modules/public-landing/public` | 9 | 708 |
 
@@ -76,9 +76,9 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `e0e2606e1104` | 3x | Fleet costs | modules/hall-ui/public/fleet.html:15, modules/hall-ui/public/fleet.html:15, modules/hall-ui/public/fleet.html:24 |
 | `f2671b0f02da` | 3x | My agents | modules/hall-ui/public/my-agents.html:18, modules/hall-ui/public/my-agents.html:18, modules/hall-ui/public/my-agents.html:31 |
 | `8226c979db4d` | 3x | Not now | modules/hall-ui/public/collab.js:668, modules/hall-ui/public/paintbrush.js:119, modules/hall-ui/public/paintbrush.js:183 |
-| … | | _200 more in the JSON registry_ | |
+| … | | _202 more in the JSON registry_ | |
 
-## `builders-hall` — 1916 strings
+## `builders-hall` — 1931 strings
 
 | id | conf | text | where |
 |---|---|---|---|
@@ -150,6 +150,8 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `74cc57f76b42` | certain | Active recently | `modules/hall-ui/public/watch.js:458` |
 | `524188fe0078` | certain | Active sessions | `modules/hall-ui/public/settings.html:159` |
 | `d628b36ec58e` | certain | Activity, by role | `modules/hall-ui/public/profile.html:138` |
+| `32509514479f` | certain | Add a done-when criterion | `modules/hall-ui/public/goal-author.js:38` |
+| `f4c5a03f715c` | certain | Add criterion | `modules/hall-ui/public/goal-author.js:38` |
 | `2b94171ce525` | certain | Add dependency | `modules/hall-ui/public/task.js:592` |
 | `a70b72ec4dcc` | certain | Add images | `modules/hall-ui/public/page-notes.js:120` |
 | `da8659b0099b` | certain | Add something you wrote — notes, a standard, a worked example. It is indexed for recall, not pasted into every | `modules/hall-ui/public/settings-specialities.js:354` |
@@ -160,7 +162,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `ff67fba11965` | certain | Admitted into {…} mid-build | `modules/hall-ui/public/goals-render.js:898` |
 | `f1bb43d0e481` | certain | Adopt a speciality | `modules/hall-ui/public/my-agents.js:323` |
 | `8b736e365191` | certain | All builders | `modules/hall-ui/public/hall-render.js:1186` |
-| `b5e03617b319` | certain | All goals | `modules/hall-ui/public/goals.html:48` |
+| `b5e03617b319` | certain | All goals | `modules/hall-ui/public/goals.html:50` |
 | `e08d410571e9` | certain | All kinds | `modules/hall-ui/public/sessions.js:391` |
 | `9c34bccb06ef` | certain | All open asks | `modules/hall-ui/public/collab.html:79` |
 | `bea7817e57a4` | certain | All surfaces | `modules/hall-ui/public/copy-desk.js:301` |
@@ -203,6 +205,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `8c8ec2597036` | certain | Assigned {…} to builder {…}. | `modules/hall-ui/public/government.js:501` |
 | `9c6f1baa6447` | certain | At the start of every session, in this order. | `modules/hall-ui/public/my-agents.html:49` |
 | `46714066f2da` | certain | Audit log | `modules/hall-ui/public/watch.html:144` |
+| `c718806bc2b9` | certain | Author a goal | `modules/hall-ui/public/goal-author.js:38` |
 | `d7c574ba6b2a` | certain | Autobongos runner | `modules/hall-ui/public/gate.html:53` |
 | `1de02052abf2` | certain | Available from the {…} rank up. | `modules/hall-ui/public/gate.js:237` |
 | `1de02052abf2` | certain | Available from the {…} rank up. | `modules/hall-ui/public/government.js:1054` |
@@ -243,11 +246,11 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `a78477a24a48` | certain | Builders' Hall | `modules/hall-ui/public/index.html:12` |
 | `a78477a24a48` | certain | Builders' Hall | `modules/hall-ui/public/index.html:49` |
 | `b51edc826cbe` | certain | Built by this project | `modules/hall-ui/public/modules.html:70` |
-| `563d29ed86d8` | certain | Bulk actions | `modules/hall-ui/public/goals.html:169` |
+| `563d29ed86d8` | certain | Bulk actions | `modules/hall-ui/public/goals.html:171` |
 | `563d29ed86d8` | certain | Bulk actions | `modules/hall-ui/public/work.html:161` |
-| `46b33550d52b` | certain | Bulk claim | `modules/hall-ui/public/goals.html:172` |
+| `46b33550d52b` | certain | Bulk claim | `modules/hall-ui/public/goals.html:174` |
 | `46b33550d52b` | certain | Bulk claim | `modules/hall-ui/public/work.html:164` |
-| `6d6d626fc518` | certain | Bulk release | `modules/hall-ui/public/goals.html:173` |
+| `6d6d626fc518` | certain | Bulk release | `modules/hall-ui/public/goals.html:175` |
 | `6d6d626fc518` | certain | Bulk release | `modules/hall-ui/public/work.html:165` |
 | `181cfa50b127` | certain | By the numbers | `modules/hall-ui/public/profile.html:65` |
 | `a015a43bfc7f` | certain | CLI access | `modules/hall-ui/public/settings.html:141` |
@@ -291,7 +294,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `18a03475e536` | certain | Claude Code | `modules/hall-ui/public/hall-render.js:837` |
 | `ccb94814e3c2` | certain | Claude can start it when you ask in plain words. | `modules/hall-ui/public/commands.html:36` |
 | `6cb414d119be` | certain | Claude sees it and can start it when you ask in plain words | `modules/hall-ui/public/commands-lib.js:94` |
-| `5b3b75ee0596` | certain | Claude's notes on this goal | `modules/hall-ui/public/goals.html:86` |
+| `5b3b75ee0596` | certain | Claude's notes on this goal | `modules/hall-ui/public/goals.html:88` |
 | `593dda3178eb` | certain | Click to copy | `modules/hall-ui/public/copy-on-click.js:137` |
 | `34624d39ff29` | certain | Clone the project to your machine and run | `modules/hall-ui/public/hall-render.js:901` |
 | `f42cb1edcf1e` | certain | Clone the repository | `modules/hall-ui/public/hall-render.js:813` |
@@ -324,14 +327,14 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `1214ea8e0d1b` | certain | Copy desk — {{worldName}} | `modules/hall-ui/public/copy-desk.html:6` |
 | `1214ea8e0d1b` | certain | Copy desk — {{worldName}} | `modules/hall-ui/public/copy-desk.html:6` |
 | `30764a4f0e28` | certain | Copy for Session Start | `modules/hall-ui/public/collab.js:137` |
-| `ebc8a6c16a22` | certain | Copy parallel prompt | `modules/hall-ui/public/goals.html:174` |
+| `ebc8a6c16a22` | certain | Copy parallel prompt | `modules/hall-ui/public/goals.html:176` |
 | `ebc8a6c16a22` | certain | Copy parallel prompt | `modules/hall-ui/public/work.html:166` |
 | `a873e7c29d80` | certain | Copy prompt | `modules/hall-ui/public/task.js:804` |
 | `a873e7c29d80` | certain | Copy prompt | `modules/hall-ui/public/task.js:827` |
 | `a873e7c29d80` | certain | Copy prompt | `modules/hall-ui/public/work.js:634` |
 | `8e2046777710` | certain | Copy prompt for task {…} | `modules/hall-ui/public/goals-render.js:370` |
 | `8e2046777710` | certain | Copy prompt for task {…} | `modules/hall-ui/public/work.js:482` |
-| `8618c85d014f` | certain | Copy sequential prompt | `modules/hall-ui/public/goals.html:175` |
+| `8618c85d014f` | certain | Copy sequential prompt | `modules/hall-ui/public/goals.html:177` |
 | `8618c85d014f` | certain | Copy sequential prompt | `modules/hall-ui/public/work.html:167` |
 | `7306a1448097` | certain | Copy someone has judged as needing attention, with their reason. Anyone can file one; closing it needs the | `modules/hall-ui/public/copy-desk.html:47` |
 | `3837f6d586a3` | certain | Copy the task prompt to your clipboard | `modules/hall-ui/public/goals-render.js:370` |
@@ -424,6 +427,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `737bef533845` | certain | Couldn’t refresh the queue — try reloading the page. | `modules/hall-ui/public/blockers.js:285` |
 | `28ec06f6060a` | certain | Counted, not judged: each question is worth the same, and earns its share in proportion to how much real text  | `modules/hall-ui/public/ideas.html:220` |
 | `38827a954f3b` | certain | Create a custom rank first. | `modules/hall-ui/public/government.js:497` |
+| `8e072934fffc` | certain | Create goal | `modules/hall-ui/public/goal-author.js:38` |
 | `20459b66303a` | certain | Create one | `modules/hall-ui/public/settings.html:249` |
 | `dd8ead7adc9a` | certain | Create rank | `modules/hall-ui/public/government.html:92` |
 | `af21de422c14` | certain | Create speciality | `modules/hall-ui/public/settings.html:292` |
@@ -484,7 +488,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `44f928d13699` | certain | Event sounds | `modules/hall-ui/public/settings.html:402` |
 | `8690c6424585` | certain | Every builder in {{worldName}} — rank, {{currency}}, karma, and active claims. | `modules/hall-ui/public/watch.html:72` |
 | `a97b064db76f` | certain | Every closed amendment sitting, ratified and returned alike, with the rule it was decided under. | `modules/hall-ui/public/government.js:1009` |
-| `2ae1eb35611e` | certain | Every done-when criterion for this goal, with its full detail. | `modules/hall-ui/public/goals.html:218` |
+| `2ae1eb35611e` | certain | Every done-when criterion for this goal, with its full detail. | `modules/hall-ui/public/goals.html:220` |
 | `25b6c0f9e74e` | certain | Every page is taken or on its way to the site right now. Come back soon. | `modules/hall-ui/public/studio.js:690` |
 | `c188854da766` | certain | Every place you are currently signed in — this browser, your terminal, any other machine. A session refreshes  | `modules/hall-ui/public/settings.html:160` |
 | `823db1913949` | certain | Every room in the hall is open now. The founding builders keep their mark for good. | `modules/hall-ui/public/genesis-home.js:231` |
@@ -560,11 +564,11 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `9e70797b7e97` | certain | Goal id | `modules/hall-ui/public/goals-render.js:849` |
 | `529460e82058` | certain | Goal invitations to you | `modules/hall-ui/public/goal-inbox.js:150` |
 | `ed1966d824a5` | certain | Goal number | `modules/hall-ui/public/gate.js:367` |
-| `e2a9e33abe60` | certain | Goal tasks | `modules/hall-ui/public/goals.html:133` |
+| `e2a9e33abe60` | certain | Goal tasks | `modules/hall-ui/public/goals.html:135` |
 | `ec88b946ad16` | certain | Goal {…} | `modules/hall-ui/public/gate.js:360` |
 | `6f0deb0b667d` | certain | Goal {…} added. | `modules/hall-ui/public/gate.js:480` |
 | `8a421ae268e6` | certain | Goal {…} removed. | `modules/hall-ui/public/gate.js:504` |
-| `e0bc28d10785` | certain | Goals could not be loaded. Refresh to try again. | `modules/hall-ui/public/goals-page.js:892` |
+| `e0bc28d10785` | certain | Goals could not be loaded. Refresh to try again. | `modules/hall-ui/public/goals-page.js:895` |
 | `4517f2253d0f` | certain | Goals couldn’t be loaded just now. Refresh to try again. | `modules/hall-ui/public/goals.js:121` |
 | `6a85997bda21` | certain | Goals created | `modules/hall-ui/public/profile.html:154` |
 | `6bbd703b5aad` | certain | Goals it can work on | `modules/hall-ui/public/gate.js:376` |
@@ -775,6 +779,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `87f09d983f6c` | certain | New category label | `modules/hall-ui/public/project-settings.js:162` |
 | `d427d9dab01c` | certain | New claims are paused: {…} confirmed {…} can't land yet, so {…} reward is pending. Rebase and re-ship, or rele | `modules/hall-ui/public/hall-render.js:681` |
 | `7fcc2583c372` | certain | New custom rank | `modules/hall-ui/public/government.html:79` |
+| `38e215b464a4` | certain | New goal | `modules/hall-ui/public/goal-author.js:38` |
 | `9e06c14d155a` | certain | New here — request access | `modules/hall-ui/public/hall-render.js:300` |
 | `ccf08aecab86` | certain | New here — sign in to join | `modules/hall-ui/public/hall-render.js:283` |
 | `de1713edd4aa` | certain | Next page | `modules/hall-ui/public/hall-kit.js:74` |
@@ -890,6 +895,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `ea1f179dd878` | certain | On this page | `modules/hall-ui/public/drachmae.html:56` |
 | `7f27a95dc847` | certain | One line each. Tap to change; it saves straight away. | `modules/hall-ui/public/my-agents.html:43` |
 | `f7e17c78c8b6` | certain | One line is enough. Developing it is a later step. | `modules/hall-ui/public/ideas.html:37` |
+| `c30b6c28d0ae` | certain | One line, under the name | `modules/hall-ui/public/goal-author.js:38` |
 | `d5f0b7156024` | certain | One line. This is what the idea is called everywhere else. | `modules/hall-ui/public/ideas.html:172` |
 | `0bc1d1470e22` | certain | Only an open goal can be managed. | `modules/hall-ui/public/goals-render.js:1360` |
 | `0bc1d1470e22` | certain | Only an open goal can be managed. | `modules/hall-ui/public/goals-render.js:1376` |
@@ -913,7 +919,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `3366b115217b` | certain | Open navigation | `modules/hall-ui/public/shell.js:532` |
 | `855277dff074` | certain | Open task #{…} | `modules/hall-ui/public/goals-render.js:435` |
 | `855277dff074` | certain | Open task #{…} | `modules/hall-ui/public/work.js:854` |
-| `99c630009152` | certain | Open tasks whose declared files overlap — sequence these before two builders collide. | `modules/hall-ui/public/goals.html:195` |
+| `99c630009152` | certain | Open tasks whose declared files overlap — sequence these before two builders collide. | `modules/hall-ui/public/goals.html:197` |
 | `fe9986a9d821` | certain | Open the Board Room | `modules/hall-ui/public/genesis-home.js:212` |
 | `fe9986a9d821` | certain | Open the Board Room | `modules/hall-ui/public/genesis-home.js:217` |
 | `e073aa0c3847` | certain | Open the conflicts for {…} | `modules/hall-ui/public/goal-inbox.js:112` |
@@ -1100,6 +1106,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `645dd8117cf3` | certain | Say why it is being retired — the reason goes in the record. | `modules/hall-ui/public/task.js:952` |
 | `fc9d783ed0f5` | certain | Say why it is better. Whoever reviews this decides it from your reason, without asking you. | `modules/hall-ui/public/copy-desk.js:446` |
 | `12c1ec21a2c6` | certain | Say yes | `modules/hall-ui/public/collab.js:668` |
+| `aa92c792a85c` | certain | Scope is not asked for here: the goal gets a “Spec goal” task, and the scope is set when that task is done. | `modules/hall-ui/public/goal-author.js:38` |
 | `4cfb02fbe696` | certain | Screen recording of you doing this on the live site (mp4 or webm, up to 100 MB) | `modules/hall-ui/public/criterion-uat-ui.js:142` |
 | `46711f7bc3df` | certain | Search every string the product shows a person, by what it says or the file it lives in. | `modules/hall-ui/public/copy-desk.html:65` |
 | `5d2ba8e72fa1` | certain | Search failed. | `modules/hall-ui/public/copy-desk.js:343` |
@@ -1161,7 +1168,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `9bea6404e6e1` | certain | Sign in | `modules/hall-ui/public/my-agents.js:589` |
 | `9bea6404e6e1` | certain | Sign in | `modules/hall-ui/public/profile.js:263` |
 | `9bea6404e6e1` | certain | Sign in | `modules/hall-ui/public/settings.html:45` |
-| `19ab56cc3932` | certain | Sign in to filter to your goals | `modules/hall-ui/public/goals-page.js:862` |
+| `19ab56cc3932` | certain | Sign in to filter to your goals | `modules/hall-ui/public/goals-page.js:865` |
 | `595df7546cd3` | certain | Sign in to see your agents. | `modules/hall-ui/public/my-agents.js:589` |
 | `969f95f183ca` | certain | Sign in to the platform once to activate your profile before connecting. | `modules/hall-ui/public/profile-connections.js:266` |
 | `e57ec24e13ef` | certain | Sign in with GitHub | `modules/hall-ui/public/hall-render.js:281` |
@@ -1227,7 +1234,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `fc53e250e86f` | certain | Take this page | `modules/hall-ui/public/paintbrush.js:120` |
 | `8b3cdb88b0f4` | certain | Taken out of the store. Your copy keeps working, but it will get no more updates. | `modules/hall-ui/public/modules.js:113` |
 | `e604fc3ace79` | certain | Task # | `modules/hall-ui/public/blockers.js:139` |
-| `a0f384b022fd` | certain | Task dependencies | `modules/hall-ui/public/goals.html:189` |
+| `a0f384b022fd` | certain | Task dependencies | `modules/hall-ui/public/goals.html:191` |
 | `91576eb7c880` | certain | Task dependency forest — scrolls sideways inside this box | `modules/hall-ui/public/goal-forest-render.js:186` |
 | `dfc967a63d57` | certain | Task lifecycle from backlog to shipped, showing states and transitions and the edge where credits are awarded. | `modules/hall-ui/public/diagrams.html:51` |
 | `10cc12f37636` | certain | Task sections | `modules/hall-ui/public/work.html:53` |
@@ -1358,6 +1365,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `bcdbded93d4e` | certain | The work board failed to load. Reload to try again. | `modules/hall-ui/public/work.js:1214` |
 | `996d2aa0e2f0` | certain | Then copy the project onto your machine, install its dependencies, and sign in: | `modules/hall-ui/public/hall-render.js:837` |
 | `383018c7df70` | certain | There is no transcript you can read for this session. | `modules/hall-ui/public/sessions.js:234` |
+| `9f09494abfa1` | certain | These open goals look related — use one instead? | `modules/hall-ui/public/goal-author.js:125` |
 | `d6b9826f1bd3` | certain | These words are the studio page itself. Take the page, type over them here, and submit it from the editor when | `modules/hall-ui/public/studio.html:106` |
 | `775a73b066e3` | certain | These words come from the skill’s own description, which was written for Claude to recognise rather than for y | `modules/hall-ui/public/settings-specialities.js:128` |
 | `a0140098c0e0` | certain | They already have an invitation or a join-request pending on this goal. | `modules/hall-ui/public/goals-render.js:1302` |
@@ -1478,6 +1486,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `0efa2f18bb6c` | certain | What it does | `modules/hall-ui/public/commands-lib.js:100` |
 | `0efa2f18bb6c` | certain | What it does | `modules/hall-ui/public/commands-lib.js:122` |
 | `0efa2f18bb6c` | certain | What it does | `modules/hall-ui/public/settings-specialities.js:130` |
+| `54952bcb6ca3` | certain | What it is for | `modules/hall-ui/public/goal-author.js:38` |
 | `ae44a375e814` | certain | What it unlocks | `modules/hall-ui/public/ranks.js:109` |
 | `00dc1f0f83e1` | certain | What kind of wrong? | `modules/hall-ui/public/copy-desk.html:87` |
 | `c9a4c6f16433` | certain | What needs changing | `modules/hall-ui/public/approval-queue.js:174` |
@@ -1490,6 +1499,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `a444ad812e4f` | certain | What this builder has done, seen one role at a time. | `modules/hall-ui/public/profile.html:139` |
 | `32d675a2b022` | certain | What this rank is for (optional) | `modules/hall-ui/public/government.html:90` |
 | `04b3ff4c4f4c` | certain | What users can see | `modules/hall-ui/public/deploy.html:47` |
+| `db435ff49441` | certain | What will be true when it is done | `modules/hall-ui/public/goal-author.js:38` |
 | `1d5bfd09068c` | certain | What you saw | `modules/hall-ui/public/studio.js:191` |
 | `470de13e9ef7` | certain | What your agent reads first | `modules/hall-ui/public/my-agents.html:48` |
 | `a9e95b5fda1d` | certain | What {…} offers | `modules/hall-ui/public/settings-specialities.js:276` |
@@ -1514,7 +1524,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `f9ab9eb870a6` | certain | While you wait: install the Claude desktop app at | `modules/hall-ui/public/hall-render.js:443` |
 | `74d8c58ef235` | certain | Who builds on this project, ranked by work shipped. This project's own ledger — everyone who builds here is li | `modules/hall-ui/public/roster.html:28` |
 | `b79ea4077bc5` | certain | Who can use it | `modules/hall-ui/public/settings.html:273` |
-| `045c629729b7` | certain | Who’s on this goal, and what they’ve contributed to it. | `modules/hall-ui/public/goals.html:206` |
+| `045c629729b7` | certain | Who’s on this goal, and what they’ve contributed to it. | `modules/hall-ui/public/goals.html:208` |
 | `5cc53380b1e8` | certain | Why (optional) | `modules/hall-ui/public/goals-render.js:1025` |
 | `62ab2e60f629` | certain | Why is this better? | `modules/hall-ui/public/copy-desk.html:164` |
 | `ef4614d549d5` | certain | Why retire this task? | `modules/hall-ui/public/task.js:788` |
@@ -1959,7 +1969,12 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `d9ad3ee37a88` | certain | — erases the project’s server, its database and every backup, and releases its name and web address. Your repo | `modules/hall-ui/public/project-settings.html:61` |
 | `e31a588bb9e1` | certain | — moved {…}, and the box confirmed it. | `modules/hall-ui/public/deploy.js:400` |
 | `417adabd1a00` | certain | — no goal suggested — open the goal board and pick one — | `modules/hall-ui/public/task-detail.js:412` |
+| `1f9504667df5` | certain | — none — | `modules/hall-ui/public/goal-author.js:38` |
+| `1f9504667df5` | certain | — none — | `modules/hall-ui/public/goal-author.js:109` |
 | `da9962dc1729` | certain | — or open any diagram fullscreen. | `modules/hall-ui/public/diagrams.html:33` |
+| `b1ca53ebfc10` | certain | — pick a goal — | `modules/hall-ui/public/goal-author.js:38` |
+| `b1ca53ebfc10` | certain | — pick a goal — | `modules/hall-ui/public/goal-author.js:94` |
+| `825930577f01` | certain | — pick a version — | `modules/hall-ui/public/goal-author.js:106` |
 | `61ebc5d684fd` | certain | — stops the project and its nightly backups but keeps everything: its database, its backups and your repositor | `modules/hall-ui/public/project-settings.html:60` |
 | `e5c5e94152b3` | certain | — that's all the tooling you need up front. | `modules/hall-ui/public/hall-render.js:837` |
 | `85f1dd2ee732` | certain | — the whole project | `modules/hall-ui/public/goal-map.html:69` |
@@ -1980,12 +1995,12 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `e35f11bdc5d7` | certain | …{…} more open ideas — triage clears them one at a time. | `modules/hall-ui/public/builders.js:895` |
 | `5f1d914ad45e` | certain | …{…} more — | `modules/hall-ui/public/goal-inbox.js:561` |
 | `de8fa5223aee` | certain | ‹ Prev | `modules/hall-ui/public/hall-kit.js:74` |
-| `d4b84b7fbdeb` | certain | ← All goals | `modules/hall-ui/public/goals.html:75` |
+| `d4b84b7fbdeb` | certain | ← All goals | `modules/hall-ui/public/goals.html:77` |
 | `9159687c73ff` | certain | ← All modules | `modules/hall-ui/public/modules.html:85` |
 | `d063a7b9c83e` | certain | ← Back | `modules/hall-ui/public/page-notes.js:283` |
-| `7926e30955d2` | certain | ← Back to goal | `modules/hall-ui/public/goals.html:187` |
-| `7926e30955d2` | certain | ← Back to goal | `modules/hall-ui/public/goals.html:203` |
-| `7926e30955d2` | certain | ← Back to goal | `modules/hall-ui/public/goals.html:215` |
+| `7926e30955d2` | certain | ← Back to goal | `modules/hall-ui/public/goals.html:189` |
+| `7926e30955d2` | certain | ← Back to goal | `modules/hall-ui/public/goals.html:205` |
+| `7926e30955d2` | certain | ← Back to goal | `modules/hall-ui/public/goals.html:217` |
 | `2180e0ecf138` | certain | → no idea # | `modules/hall-ui/public/task-detail.js:583` |
 | `d5d76f1c0dfe` | certain | ○ reserved | `modules/hall-ui/public/diagrams.html:44` |
 | `97b0773e72a5` | certain | ● LIVE | `modules/hall-ui/public/diagrams.html:42` |