@bongos/core 1.21.145 → 1.21.146

package/modules/hall-ui/public/atlas.html

@@ -93,7 +93,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-17-upgrade-hold1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/atlas.js?v=2026-09-02-index" defer></script>

package/modules/hall-ui/public/blockers.html

@@ -52,7 +52,7 @@
      chrome exists before the page script runs. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-17-upgrade-hold1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB — rank labels, number formats) + the

package/modules/hall-ui/public/board-room.html

@@ -62,7 +62,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-17-upgrade-hold1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-board"></script>

package/modules/hall-ui/public/city.html

@@ -105,7 +105,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-17-upgrade-hold1"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/gov-living.js?v=2026-10-09-positions1"></script>
 <script src="/builders/gov-feeds.js?v=2026-10-09-living3"></script>

package/modules/hall-ui/public/collab.html

@@ -150,7 +150,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-17-upgrade-hold1"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <script src="/builders/collab-lib.js?v=2026-09-24-archive"></script>

package/modules/hall-ui/public/commands.html

@@ -56,7 +56,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-17-upgrade-hold1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-14-domutils"></script>

package/modules/hall-ui/public/copy-desk.html

@@ -179,7 +179,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-17-upgrade-hold1"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <script src="/builders/hall-kit.js"></script>

package/modules/hall-ui/public/deploy.html

@@ -76,7 +76,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-17-upgrade-hold1"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>
 <script src="/builders/hall-kit.js"></script>

package/modules/hall-ui/public/diagrams.html

@@ -99,7 +99,7 @@
      time so the chrome exists before the deferred page scripts execute. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-17-upgrade-hold1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/diagram-viewer.js?v=2026-06-14-diagviewer-1" defer></script>

package/modules/hall-ui/public/drachmae.html

@@ -100,7 +100,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-17-upgrade-hold1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/md-reader.js?v=2026-09-02-mdreader-2"></script>

package/modules/hall-ui/public/fleet.html

@@ -56,7 +56,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-17-upgrade-hold1"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>
 <script src="/builders/hall-kit.js"></script>

package/modules/hall-ui/public/gate.html

@@ -79,7 +79,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-17-upgrade-hold1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>

package/modules/hall-ui/public/goal-map.html

@@ -139,7 +139,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-17-upgrade-hold1"></script>
 <script src="/builders/palette.js" defer></script>
 
 <script src="/builders/idea-objects.js?v=2026-09-27-split"></script>

package/modules/hall-ui/public/goals.html

@@ -232,7 +232,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-17-upgrade-hold1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-14-domutils"></script>

package/modules/hall-ui/public/government.html

@@ -136,7 +136,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-17-upgrade-hold1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>

package/modules/hall-ui/public/idea.html

@@ -52,7 +52,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-17-upgrade-hold1"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib" defer></script>
 <!-- task-detail.js still owns the #/idea/N and #/blocker/N overlay, so a ref

package/modules/hall-ui/public/ideas.html

@@ -227,7 +227,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-17-upgrade-hold1"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <!-- task 1003069 (R08) — the quick-filing form's routed result links a task

package/modules/hall-ui/public/index.html

@@ -108,7 +108,7 @@
      BEFORE builders.js so the chrome ids exist when events are wired. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab" defer></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3" defer></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1" defer></script>
+<script src="/builders/shell.js?v=2026-10-17-upgrade-hold1" defer></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- task 2166: the shared component kit (window.OTBKit) — pager/ledger/rail.

package/modules/hall-ui/public/modules.html

@@ -103,7 +103,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-17-upgrade-hold1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>

package/modules/hall-ui/public/my-agents.html

@@ -61,7 +61,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-17-upgrade-hold1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-14-domutils"></script>

package/modules/hall-ui/public/primer.html

@@ -117,7 +117,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-17-upgrade-hold1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- the shared markdown reader (window.OTBMdReader) — primer.js renders through

package/modules/hall-ui/public/profile.html

@@ -209,7 +209,7 @@
      chrome exists before the page script runs. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-17-upgrade-hold1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before profile.js, which pulls from it. -->

package/modules/hall-ui/public/project-settings.html

@@ -72,7 +72,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-17-upgrade-hold1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>

package/modules/hall-ui/public/ranks.html

@@ -79,7 +79,7 @@
      chrome exists before the page script runs. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-17-upgrade-hold1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before ranks.js, which pulls from it. -->

package/modules/hall-ui/public/roadmap.html

@@ -43,7 +43,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-17-upgrade-hold1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-14-domutils"></script>

package/modules/hall-ui/public/roster.html

@@ -55,7 +55,7 @@
      chrome exists before the page script runs. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-17-upgrade-hold1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB — rank labels, number formats) + the

package/modules/hall-ui/public/sessions.html

@@ -113,7 +113,7 @@
      chrome exists before the page script runs. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-17-upgrade-hold1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded BEFORE sessions.js so it can pull from it. -->

package/modules/hall-ui/public/settings-software-update.js

@@ -166,6 +166,14 @@
     return `${head}${warn}<ol class="su-versions" aria-labelledby="su-new-h">${items.join('')}</ol>${more ? `<div class="row-end">${more}</div>` : ''}${beyond}`;
   }
 
+  // A move this project's own ledger says was rolled back (task 1004730): the server's plain
+  // sentence, said as it is. It names the version tried, that it was rolled back, and that
+  // the project is still on its old version and working; nothing here re-derives it.
+  function heldHtml(held) {
+    if (!held || !held.message) return '';
+    return `<p class="panel-status" role="status">${escapeHtml(held.message)}</p>`;
+  }
+
   function render(data) {
     const body = byId('su-body');
     const note = byId('su-note');
@@ -177,19 +185,22 @@
 
     if (u.reading !== 'ok') {
       body.innerHTML = row('This project runs', u.running ? mono(u.running) : 'a version it could not name')
+        + heldHtml(data.held)
         + `<p class="panel-status panel-status--danger" role="status">Could not check for a newer version: ${escapeHtml(u.error || 'no answer')}.</p>`;
       if (note) note.textContent = notes.join(' ');
       return;
     }
 
-    let html = row('This project runs', mono(u.running));
+    let html = row('This project runs', mono(u.running)) + heldHtml(data.held);
+    const onHold = !!(data.held && u.offered && data.held.version === u.offered);
     if (!u.offered) {
       html += row('Newest for this project', `${mono(u.running)} — this project is up to date.`, '<span class="su-pill su-pill--ok">Up to date</span>');
     } else {
       const when = ago(u.offered_published_at);
       const pending = data.can_update && data.ask && data.ask.available && askPending(data.ask, u.offered);
-      html += row('Newest for this project', `${mono(u.offered)}${when ? ` — published ${escapeHtml(when)}` : ''}`, `<span class="su-pill">${pending ? 'Requested' : 'Update ready'}</span>`);
-      html += doorHtml(data, u.offered);
+      html += row('Newest for this project', `${mono(u.offered)}${when ? ` — published ${escapeHtml(when)}` : ''}`, `<span class="su-pill">${onHold ? 'On hold' : pending ? 'Requested' : 'Update ready'}</span>`);
+      // No button to take again the very version that was just rolled back here (task 1004730).
+      if (!onHold) html += doorHtml(data, u.offered);
       html += whatsNewHtml(u.whats_new, (data.door || {}).kind === 'local');
     }
     // A newer line this project's channel does not take is a fact worth one sentence — it

package/modules/hall-ui/public/settings.html

@@ -472,7 +472,7 @@
      chrome exists before the page scripts run. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-17-upgrade-hold1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before consuming IIFEs. -->
@@ -498,7 +498,7 @@
      settings.js is against the 1500-line ratchet. -->
 <script src="/builders/settings-render.js?v=2026-09-16-render-levels"></script>
 <!-- task 1004296: Settings → Software update. Own file on the same precedent. -->
-<script src="/builders/settings-software-update.js?v=2026-10-06-ask"></script>
+<script src="/builders/settings-software-update.js?v=2026-10-17-hold"></script>
 <!-- task 1004501: Settings → Your Autobongos runner. Own file on the same precedent. -->
 <script src="/builders/settings-autobongos.js?v=2026-10-01-autobongos"></script>
 <!-- task 1003793: Settings → Module install reports. Own file on the same precedent. -->

package/modules/hall-ui/public/shell.js

@@ -774,7 +774,7 @@
     coreUpdateAsked = true;
     api.request('GET', '/api/bongos/core-update').then(function (res) {
       if (!res || res.status !== 200 || !res.data) return;
-      if (res.data.update) renderCoreUpdateBanner(res.data.update);
+      if (res.data.update) renderCoreUpdateBanner(res.data.update, res.data.held);
     }, function () { /* fail-soft: no banner is the correct answer to no answer */ });
   }
 
@@ -789,7 +789,7 @@
   // is current AND when the registry could not be read; `reading` separates them,
   // and neither renders. A banner is a claim about being out of date, and a wrong
   // one on a project that is actually current is worse than silence.
-  function renderCoreUpdateBanner(update) {
+  function renderCoreUpdateBanner(update, held) {
     if (!update || update.reading !== 'ok' || !update.behind || !update.latest) return;
     // A dismissal is remembered PER VERSION, not forever: the next release is new
     // news and must re-announce itself, or the surface is dead after one click.
@@ -826,10 +826,14 @@
       : (onUpdatePanel
         ? '<span class="core-update-notice__hint">Its details are below.</span>'
         : '<a class="core-update-notice__action" href="' + SOFTWARE_UPDATE_HREF + '">Upgrade</a>');
-    el.innerHTML =
-      '<span>Core <strong>' + esc(update.latest) + '</strong> is available — this project runs ' +
-      esc(update.running || 'an unknown version') + '.</span>' +
-      action +
+    // task 1004730: the newest version already failed here and was rolled back. Say so, never
+    // "available" with a button to take it again; Software update carries the full sentence.
+    var hold = held && held.version === update.latest ? held : null;
+    el.innerHTML = (hold
+      ? '<span>Core <strong>' + esc(hold.version) + '</strong> was tried on this project and rolled back. It is still on ' +
+        esc(hold.still_on) + ' and working.</span><a class="core-update-notice__action" href="' + SOFTWARE_UPDATE_HREF + '">Details</a>'
+      : '<span>Core <strong>' + esc(update.latest) + '</strong> is available — this project runs ' +
+        esc(update.running || 'an unknown version') + '.</span>' + action) +
       '<button type="button" class="core-update-notice__close" aria-label="Dismiss">×</button>';
     el.querySelector('.core-update-notice__close').addEventListener('click', function () {
       try {

package/modules/hall-ui/public/street.html

@@ -230,7 +230,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-17-upgrade-hold1"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/gov-living.js?v=2026-10-09-positions1"></script>
 <script src="/builders/gov-feeds.js?v=2026-10-09-living3"></script>

package/modules/hall-ui/public/studio.html

@@ -190,7 +190,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-17-upgrade-hold1"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <!-- The kit, for its ONE renderer: the full-size ship-time visual figure

package/modules/hall-ui/public/task.html

@@ -56,7 +56,7 @@
      time so the chrome exists before the deferred page scripts execute. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-17-upgrade-hold1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded FIRST so task.js can pull from it. -->

package/modules/hall-ui/public/thinking.html

@@ -140,7 +140,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-17-upgrade-hold1"></script>
 <script src="/builders/palette.js" defer></script>
 
 <script src="/builders/idea-objects.js?v=2026-09-27-split"></script>

package/modules/hall-ui/public/tweak-editor.html

@@ -144,7 +144,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-17-upgrade-hold1"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <script src="/builders/brand-holes.js?v=2026-09-29-aqfix"></script>

package/modules/hall-ui/public/watch.html

@@ -167,7 +167,7 @@
      chrome exists before the page script runs. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-17-upgrade-hold1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before watch.js, which pulls from it. -->

package/modules/hall-ui/public/work.html

@@ -173,7 +173,7 @@
      time so the chrome exists before the deferred page scripts execute. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-17-upgrade-hold1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded FIRST so work.js can pull from it. -->

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.145",
+  "version": "1.21.146",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.21.145",
+      "version": "1.21.146",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.145",
+  "version": "1.21.146",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -9884,5 +9884,11 @@
       "id": "1004348",
       "text": "The Blockers page now uses the owner's own words, written on a Chromebook and brought back from Google Docs. The line under the page title is shorter and plainer, and the button reads \"+ File blocker\". Both rewritten lines wen"
     }
+  ],
+  "1.21.146": [
+    {
+      "id": "1004730",
+      "text": "When an automatic core update fails on a hosted project and is rolled back, that version is not retried over and over, and the project's owner now sees in their own Settings and update banner which version was tried, that it w"
+    }
   ]
 }

package/scripts/gds/provision-auto-upgrade.js

@@ -23,8 +23,16 @@
 // re-queue a target that already failed, every tick, forever. A target is held for an
 // instance when it already has, FOR THAT TARGET: a core-upgrade that ended (error, or
 // done but the box is still behind), a preflight intent that errored, or a stored
-// preflight verdict that refused. A newer release is a new target and is not held. The
-// richer hold — telling the project owner, releasing it — is task 1004730.
+// preflight verdict that refused. A newer release is a new target and is not held.
+//
+// BY FAILURE CLASS (task 1004730). A failed intent records WHAT KIND of failure it was
+// (upgrade-outcome.js classifyFailure, stored by the drain loop). A `transient` one (a
+// registry blip, an install that could not download) already waited out its own
+// 15m/1h/6h backoff inside the intent (intent-retry.js) before it was retired, so this
+// path may try that same target once more after TRANSIENT_HOLD_MS. Every other class (a
+// known wedge whose one fix did not hold, a rule refusing it, an unknown, a failed
+// rollback, which move-escalation.js already took to a person) stays held until a newer
+// release. The project's own hall tells its owner: src/bongos/upgrade-hold.js.
 //
 // Carved into its own file because provision.js and provision-core-upgrade.js sit at
 // the size ratchet. Best-effort: nothing here may fail the tick.
@@ -35,6 +43,11 @@ const { resolveEnv } = require('../../src/instance-config');
 // restarts every hosted project at once. The tick runs every few minutes; one is plenty.
 const AUTO_MOVES_PER_TICK = 1;
 
+// How long a target whose failure was classed transient waits before this path tries it
+// again (task 1004730): a day, the hold the self-host sweep gives a failed version
+// (update-sweep.js REFUSAL_HOLD_MS).
+const TRANSIENT_HOLD_MS = 24 * 60 * 60 * 1000;
+
 const REQUESTED_BY = 'runner:auto-upgrade';
 const OPEN_STATES = new Set(['pending', 'running']);
 const OFF_VALUES = new Set(['off', '0', 'false', 'no', 'disabled']);
@@ -57,6 +70,15 @@ function parseVerdict(p) {
   return p;
 }
 
+// Does this failed intent still hold its target at `now`? A transient error holds for
+// TRANSIENT_HOLD_MS from when it was retired; anything else holds until a newer release
+// (task 1004730). An unreadable time reads as "just now", the safe direction. PURE.
+function stillHolds(i, now) {
+  if (i.failure_class !== 'transient' || i.state !== 'error') return true;
+  const at = Date.parse(i.updated_at);
+  return !Number.isFinite(at) || now - at < TRANSIENT_HOLD_MS;
+}
+
 /**
  * What, if anything, to queue for one project. PURE.
  * @param {object} inst     provisioning_instances row joined with its core-version snapshot
@@ -64,7 +86,7 @@ function parseVerdict(p) {
  * @param {object} channelMod update-channel.js
  * @returns {{ action: string, to: string } | { skip: string }}
  */
-function decideAutoMove(inst, intents, channelMod) {
+function decideAutoMove(inst, intents, channelMod, now = Date.now()) {
   if (inst.hosting_shape !== 'cloud-host') return { skip: 'not a hosted project' }; // never the control-plane row
   if (inst.status !== 'active') return { skip: 'not active' };
   if (channelMod.normalizeChannel(inst.update_channel) === 'pinned') return { skip: 'pinned' };
@@ -75,7 +97,7 @@ function decideAutoMove(inst, intents, channelMod) {
   const same = (i) => String(i.target_version || '') === String(to);
   const held = intents.some((i) => same(i) && (
     (i.action === 'core-upgrade' && (i.state === 'error' || i.state === 'done'))
-    || (i.action === 'core-upgrade-preflight' && i.state === 'error')));
+    || (i.action === 'core-upgrade-preflight' && i.state === 'error')) && stillHolds(i, now));
   const verdict = parseVerdict(inst.preflight);
   const verdictForTarget = verdict && String(verdict.target || '') === String(to) ? verdict : null;
   if (held || (verdictForTarget && verdictForTarget.ok !== true)) return { skip: `held: ${to} already failed here` };
@@ -95,6 +117,7 @@ async function autoUpgradeTick(deps) {
   }
   const channelMod = deps.updateChannel || require('./update-channel.js');
   let queued = 0;
+  const now = (deps.now || Date.now)();
   try {
     const { rows } = await db.query(
       `SELECT i.id, i.slug, i.owner_builder_id, i.hosting_shape, i.status, i.update_channel,
@@ -105,7 +128,7 @@ async function autoUpgradeTick(deps) {
         ORDER BY i.id`);
     if (!rows.length) return { queued };
     const { rows: intents } = await db.query(
-      `SELECT instance_id, action, state, target_version FROM provisioning_intents
+      `SELECT instance_id, action, state, target_version, failure_class, updated_at FROM provisioning_intents
         WHERE instance_id = ANY($1)
           AND (state IN ('pending', 'running')
                OR (action IN ('core-upgrade', 'core-upgrade-preflight') AND target_version IS NOT NULL))`,
@@ -113,7 +136,7 @@ async function autoUpgradeTick(deps) {
     for (const inst of rows) {
       if (queued >= AUTO_MOVES_PER_TICK) break;
       const mine = intents.filter((i) => String(i.instance_id) === String(inst.id));
-      const d = decideAutoMove(inst, mine, channelMod);
+      const d = decideAutoMove(inst, mine, channelMod, now);
       if (d.skip) { if (d.skip.startsWith('held')) log(`  auto core-upgrade: ${inst.slug} ${d.skip}`); continue; }
       try {
         const r = await provisioning.enqueueIntent(db, inst.id, d.action, REQUESTED_BY, d.to);
@@ -136,4 +159,4 @@ async function autoUpgradeTick(deps) {
   return { queued };
 }
 
-module.exports = { AUTO_MOVES_PER_TICK, autoUpgradeEnabled, autoUpgradeTick };
+module.exports = { AUTO_MOVES_PER_TICK, TRANSIENT_HOLD_MS, autoUpgradeEnabled, autoUpgradeTick };