@bongos/core 1.21.145 → 1.21.147

package/modules/builder-settings/core-move-seen.js

@@ -0,0 +1,41 @@
+// modules/builder-settings/core-move-seen.js — which core move a builder has already been
+// told about (task 1004731).
+//
+// After the project's core moves, its hall shows a one-time notice ("Upgraded to core X on
+// <date>", and what changed). One-time has to mean once per PERSON, across devices: an owner
+// who read it on their laptop should not be told again on their phone. So, like the profile
+// nudge's dismissal (profile-nudge-prefs.js), it is stored SERVER-side, in one reserved key
+// of the `behavior_prefs` jsonb on `builders` (migration 119), and adds no migration.
+//
+// The value is the id of the core_upgrades ledger row the builder acknowledged. Only the
+// newest row can be a notice, so remembering one id is enough: the next move writes a new
+// row with a new id, and is news again. Core (src/bongos/core-moves.js) never reads this key
+// itself; it asks the `builder-settings` port's `coreMoveSeen`.
+
+const RESERVED_KEY = 'core_move_seen';
+const ID_RE = /^\d{1,19}$/;
+
+/** The ledger row id this builder has acknowledged, or null. PURE. */
+function seenId(behaviorPrefs) {
+  const raw = behaviorPrefs && behaviorPrefs[RESERVED_KEY];
+  return typeof raw === 'string' && ID_RE.test(raw) ? raw : null;
+}
+
+/** Validate a PATCH body `{ id: "<ledger row id>" }`. PURE. */
+function validatePatch(body) {
+  if (body == null || typeof body !== 'object' || Array.isArray(body)) {
+    return { ok: false, errors: [{ error: 'body_must_be_object' }] };
+  }
+  const id = body.id == null ? '' : String(body.id);
+  if (!ID_RE.test(id)) return { ok: false, errors: [{ key: 'id', error: 'invalid_value', allowed: 'a core_upgrades row id' }] };
+  const extra = Object.keys(body).filter((k) => k !== 'id');
+  if (extra.length) return { ok: false, errors: extra.map((key) => ({ key, error: 'unknown_key', allowed: ['id'] })) };
+  return { ok: true, id };
+}
+
+/** The builder's behavior_prefs with the acknowledged id set; sibling keys untouched. PURE. */
+function applySeen(existing, id) {
+  return { ...(existing || {}), [RESERVED_KEY]: id };
+}
+
+module.exports = { seenId, validatePatch, applySeen };

package/modules/builder-settings/routes/settings.js

@@ -30,6 +30,7 @@ const modelAllocPrefs = require('../model-alloc-prefs');
 const lawLocks = require('../law-locks');
 const renderPrefs = require('../render-prefs');
 const profileNudgePrefs = require('../profile-nudge-prefs');
+const coreMoveSeen = require('../core-move-seen');
 const displayName = require('../display-name');
 const filterViews = require('../filter-views');
 // task 1003208: structured logging (pino via the doorway) — was console.*.
@@ -495,6 +496,27 @@ module.exports = function buildBuilderSettingsRouter() {
     }
   });
 
+  // The core move this builder has been told about (task 1004731, core-move-seen.js):
+  // closing the hall's "Upgraded to core X" notice stores that move's ledger id here, so
+  // it is not shown to them again on any device. Body: { id: "<core_upgrades row id>" }.
+  //
+  // rank: any-builder — own acknowledgement; same posture as /me/profile-nudge.
+  router.patch('/me/core-move-seen', api.requireBuilder, async (req, res) => {
+    if (api.validateOrRespond(req, res, {
+      id: { required: true, type: 'string', maxLength: 19 },
+    }, { strict: true })) return undefined;
+    try {
+      const v = coreMoveSeen.validatePatch(req.body || {});
+      if (!v.ok) return res.fail('invalid_patch', 422, { errors: v.errors });
+      const existing = await db.getBuilderBehaviorPrefs(req.builder.id);
+      const saved = await db.setBuilderBehaviorPrefs(req.builder.id, coreMoveSeen.applySeen(existing, v.id));
+      res.json({ ok: true, seen: coreMoveSeen.seenId(saved) });
+    } catch (err) {
+      log.error('PATCH /me/core-move-seen', err);
+      res.fail('write_failed', { status: 500, message: 'internal error' });
+    }
+  });
+
   // Per-builder SAVED FILTER VIEWS (task 1004553; shares the behavior_prefs jsonb /
   // migration 119). A view is a named set of filter values for one hall page. They
   // are PERSONAL: every route reads and writes only req.builder.id's own prefs, so

package/modules/builder-settings/settings.js

@@ -33,6 +33,7 @@ const modelAllocPrefs = require('./model-alloc-prefs');
 const renderPrefs = require('./render-prefs');
 const builderNeeds = require('./builder-needs');
 const lawLocks = require('./law-locks');
+const coreMoveSeen = require('./core-move-seen');
 
 module.exports = {
   // --- the raw behavior_prefs blob read (GET /me resolves this once, then shapes
@@ -53,6 +54,10 @@ module.exports = {
   // values, not the builder's own.
   describeWithLaws: (...a) => lawLocks.describe(...a),
 
+  // task 1004731: the core_upgrades row id this builder has acknowledged (the hall's
+  // one-time "Upgraded to core X" notice), from the behavior_prefs blob; null if none.
+  coreMoveSeen: (behaviorPrefs) => coreMoveSeen.seenId(behaviorPrefs),
+
   // --- the per-builder model ceiling for a skill (cascade-dispatch clamps to it;
   //     never exceeds it). Mirrors the former `skillPrefs.getForBuilder` call.
   skillCeiling: (builderPrefs, skillName) => skillPrefs.getForBuilder(builderPrefs, skillName),

package/modules/hall-ui/public/atlas.html

@@ -93,7 +93,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/atlas.js?v=2026-09-02-index" defer></script>

package/modules/hall-ui/public/blockers.html

@@ -52,7 +52,7 @@
      chrome exists before the page script runs. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB — rank labels, number formats) + the

package/modules/hall-ui/public/board-room.html

@@ -62,7 +62,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-board"></script>

package/modules/hall-ui/public/city.html

@@ -105,7 +105,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/gov-living.js?v=2026-10-09-positions1"></script>
 <script src="/builders/gov-feeds.js?v=2026-10-09-living3"></script>

package/modules/hall-ui/public/collab.html

@@ -150,7 +150,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <script src="/builders/collab-lib.js?v=2026-09-24-archive"></script>

package/modules/hall-ui/public/commands.html

@@ -56,7 +56,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-14-domutils"></script>

package/modules/hall-ui/public/copy-desk.html

@@ -179,7 +179,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <script src="/builders/hall-kit.js"></script>

package/modules/hall-ui/public/core-move-notice.js

@@ -0,0 +1,70 @@
+// modules/hall-ui/public/core-move-notice.js — "Upgraded to core X on <date>", once, after
+// this project's core moved, with the release-note entries between the old and the new
+// version (task 1004731).
+//
+// THE SERVER DECIDES, THIS ONLY DRAWS. GET /core-update carries `moved` only when there is
+// one for THIS builder (src/bongos/core-moves.js: the newest ledger row is a move to the core
+// this server runs, recent, and not yet seen by them), with the sentence already worded.
+//
+// SEEN IS PER BUILDER. Closing it, or following it to Settings → Software update, marks that
+// move seen: on the server (`remember: 'server'` → PATCH /me/core-move-seen, the
+// builder-settings module's behavior_prefs, so no other device shows it again), or in this
+// browser when the server has nowhere to keep it (`remember: 'browser'`).
+//
+// Its own file, loaded by shell.js only when there is a notice to draw (the gov-positions.js
+// way): shell.js sits at the 1500-line ratchet, and most page loads have nothing to say here.
+
+(function () {
+  'use strict';
+
+  var SEEN_KEY = 'bongos.coreMove.seen';
+  function esc(s) {
+    return String(s == null ? '' : s).replace(/[&<>"']/g, function (c) {
+      return { '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' }[c];
+    });
+  }
+
+  /** Draw the notice under the top bar. `opts.api` is shell.js's client; `opts.href` Settings. */
+  function render(moved, opts) {
+    if (!moved || !moved.id || !moved.message) return;
+    var api = opts && opts.api;
+    var onServer = moved.remember === 'server' && !!api;
+    if (!onServer) {
+      try {
+        if (window.localStorage && window.localStorage.getItem(SEEN_KEY) === String(moved.id)) return;
+      } catch (e) { /* no storage: show it */ }
+    }
+    var topbar = document.getElementById('app-topbar');
+    if (!topbar) return;
+    var el = document.createElement('div');
+    el.className = 'core-update-notice core-move-notice';
+    el.id = 'core-move-notice';
+    el.setAttribute('role', 'status');
+    var entries = Array.isArray(moved.entries) ? moved.entries : [];
+    var list = entries.length
+      ? '<ul class="core-move-notice__list">' + entries.map(function (e) { return '<li>' + esc(e && e.text) + '</li>'; }).join('') +
+        (moved.more > 0 ? '<li>…and ' + esc(String(moved.more)) + ' more.</li>' : '') + '</ul>'
+      : '';
+    el.innerHTML = '<div class="core-move-notice__body"><span>' + esc(moved.message) +
+      (entries.length ? ' What changed:' : '') + '</span>' + list + '</div>' +
+      '<a class="core-update-notice__action core-move-notice__more" href="' + esc((opts && opts.href) || '/settings#software-update') + '">Update history</a>' +
+      '<button type="button" class="core-update-notice__close core-move-notice__close" aria-label="Dismiss">×</button>';
+    function markSeen() {
+      try {
+        if (window.localStorage) window.localStorage.setItem(SEEN_KEY, String(moved.id));
+      } catch (e) { /* best-effort */ }
+      if (onServer) {
+        api.request('PATCH', '/api/bongos/me/core-move-seen', { body: { id: String(moved.id) } })
+          .then(null, function () { /* seen is best-effort; it shows once more at worst */ });
+      }
+    }
+    el.querySelector('.core-move-notice__more').addEventListener('click', markSeen);
+    el.querySelector('.core-move-notice__close').addEventListener('click', function () {
+      markSeen();
+      el.remove();
+    });
+    topbar.insertAdjacentElement('afterend', el);
+  }
+
+  window.CoreMoveNotice = { render: render };
+})();

package/modules/hall-ui/public/deploy.html

@@ -76,7 +76,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>
 <script src="/builders/hall-kit.js"></script>

package/modules/hall-ui/public/diagrams.html

@@ -99,7 +99,7 @@
      time so the chrome exists before the deferred page scripts execute. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/diagram-viewer.js?v=2026-06-14-diagviewer-1" defer></script>

package/modules/hall-ui/public/drachmae.html

@@ -100,7 +100,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/md-reader.js?v=2026-09-02-mdreader-2"></script>

package/modules/hall-ui/public/fleet.html

@@ -56,7 +56,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>
 <script src="/builders/hall-kit.js"></script>

package/modules/hall-ui/public/gate.html

@@ -79,7 +79,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>

package/modules/hall-ui/public/goal-map.html

@@ -139,7 +139,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
 <script src="/builders/palette.js" defer></script>
 
 <script src="/builders/idea-objects.js?v=2026-09-27-split"></script>

package/modules/hall-ui/public/goals.html

@@ -232,7 +232,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-14-domutils"></script>

package/modules/hall-ui/public/government.html

@@ -136,7 +136,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>

package/modules/hall-ui/public/idea.html

@@ -52,7 +52,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib" defer></script>
 <!-- task-detail.js still owns the #/idea/N and #/blocker/N overlay, so a ref

package/modules/hall-ui/public/ideas.html

@@ -227,7 +227,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <!-- task 1003069 (R08) — the quick-filing form's routed result links a task

package/modules/hall-ui/public/index.html

@@ -108,7 +108,7 @@
      BEFORE builders.js so the chrome ids exist when events are wired. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab" defer></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3" defer></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1" defer></script>
+<script src="/builders/shell.js?v=2026-10-18-core-move1" defer></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- task 2166: the shared component kit (window.OTBKit) — pager/ledger/rail.

package/modules/hall-ui/public/modules.html

@@ -103,7 +103,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>

package/modules/hall-ui/public/my-agents.html

@@ -61,7 +61,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-14-domutils"></script>

package/modules/hall-ui/public/primer.html

@@ -117,7 +117,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- the shared markdown reader (window.OTBMdReader) — primer.js renders through

package/modules/hall-ui/public/profile.html

@@ -209,7 +209,7 @@
      chrome exists before the page script runs. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before profile.js, which pulls from it. -->

package/modules/hall-ui/public/project-settings.html

@@ -72,7 +72,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>

package/modules/hall-ui/public/ranks.html

@@ -79,7 +79,7 @@
      chrome exists before the page script runs. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before ranks.js, which pulls from it. -->

package/modules/hall-ui/public/roadmap.html

@@ -43,7 +43,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-14-domutils"></script>

package/modules/hall-ui/public/roster.html

@@ -55,7 +55,7 @@
      chrome exists before the page script runs. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB — rank labels, number formats) + the

package/modules/hall-ui/public/sessions.html

@@ -113,7 +113,7 @@
      chrome exists before the page script runs. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded BEFORE sessions.js so it can pull from it. -->

package/modules/hall-ui/public/settings-software-update.js

@@ -166,6 +166,35 @@
     return `${head}${warn}<ol class="su-versions" aria-labelledby="su-new-h">${items.join('')}</ol>${more ? `<div class="row-end">${more}</div>` : ''}${beyond}`;
   }
 
+  // A move this project's own ledger says was rolled back (task 1004730): the server's plain
+  // sentence, said as it is. It names the version tried, that it was rolled back, and that
+  // the project is still on its old version and working; nothing here re-derives it.
+  function heldHtml(held) {
+    if (!held || !held.message) return '';
+    return `<p class="panel-status" role="status">${escapeHtml(held.message)}</p>`;
+  }
+
+  // The short history of moves (task 1004731, src/bongos/core-moves.js): each core this
+  // project moved to, when, how it was started, and whether it went in. Only for the people
+  // allowed to upgrade (the server sends `history: null` to anyone else). The words for
+  // "how" are only as precise as the ledger: a move run on the server by neither the Update
+  // button nor an automatic rule is said as exactly that.
+  const HOW_WORDS = { automatic: 'Automatic', by_hand: 'By hand, from the Update button', on_server: 'Run on the server' };
+  const OUTCOME_WORDS = { upgraded: 'Installed', moved_back: 'Moved back to it', rolled_back: 'Rolled back' };
+  function historyHtml(history) {
+    if (!Array.isArray(history) || !history.length) return '';
+    const items = history.map((m) => {
+      const when = m.at ? longDate(m.at) : null;
+      const outcome = OUTCOME_WORDS[m.outcome] || OUTCOME_WORDS.upgraded;
+      const pill = m.outcome === 'rolled_back' ? 'su-pill' : 'su-pill su-pill--ok';
+      return `<li class="su-version">
+      <span class="prow__label">${mono(m.version)}${when ? `<span class="prow__tag">${escapeHtml(when)}</span>` : ''}</span>
+      <p class="prow__desc">${escapeHtml(HOW_WORDS[m.how] || HOW_WORDS.on_server)}${m.from ? `, from ${mono(m.from)}` : ''}. <span class="${pill}">${escapeHtml(outcome)}</span></p>
+    </li>`;
+    }).join('');
+    return `<h3 class="su-h" id="su-history-h">Recent updates</h3><ol class="su-versions" aria-labelledby="su-history-h">${items}</ol>`;
+  }
+
   function render(data) {
     const body = byId('su-body');
     const note = byId('su-note');
@@ -177,19 +206,23 @@
 
     if (u.reading !== 'ok') {
       body.innerHTML = row('This project runs', u.running ? mono(u.running) : 'a version it could not name')
-        + `<p class="panel-status panel-status--danger" role="status">Could not check for a newer version: ${escapeHtml(u.error || 'no answer')}.</p>`;
+        + heldHtml(data.held)
+        + `<p class="panel-status panel-status--danger" role="status">Could not check for a newer version: ${escapeHtml(u.error || 'no answer')}.</p>`
+        + historyHtml(data.history);
       if (note) note.textContent = notes.join(' ');
       return;
     }
 
-    let html = row('This project runs', mono(u.running));
+    let html = row('This project runs', mono(u.running)) + heldHtml(data.held);
+    const onHold = !!(data.held && u.offered && data.held.version === u.offered);
     if (!u.offered) {
       html += row('Newest for this project', `${mono(u.running)} — this project is up to date.`, '<span class="su-pill su-pill--ok">Up to date</span>');
     } else {
       const when = ago(u.offered_published_at);
       const pending = data.can_update && data.ask && data.ask.available && askPending(data.ask, u.offered);
-      html += row('Newest for this project', `${mono(u.offered)}${when ? ` — published ${escapeHtml(when)}` : ''}`, `<span class="su-pill">${pending ? 'Requested' : 'Update ready'}</span>`);
-      html += doorHtml(data, u.offered);
+      html += row('Newest for this project', `${mono(u.offered)}${when ? ` — published ${escapeHtml(when)}` : ''}`, `<span class="su-pill">${onHold ? 'On hold' : pending ? 'Requested' : 'Update ready'}</span>`);
+      // No button to take again the very version that was just rolled back here (task 1004730).
+      if (!onHold) html += doorHtml(data, u.offered);
       html += whatsNewHtml(u.whats_new, (data.door || {}).kind === 'local');
     }
     // A newer line this project's channel does not take is a fact worth one sentence — it
@@ -197,7 +230,7 @@
     if (u.newest && u.newest !== (u.offered || u.running) && String(u.newest).split('.')[1] !== String(u.running).split('.')[1]) {
       notes.push(`${u.newest} is also published; it starts a new line, and this project takes updates within ${String(u.running).split('.').slice(0, 2).join('.')} on its own.`);
     }
-    body.innerHTML = html;
+    body.innerHTML = html + historyHtml(data.history);
     if (note) note.textContent = notes.join(' ');
 
     const askBtn = byId('su-ask');

package/modules/hall-ui/public/settings.html

@@ -472,7 +472,7 @@
      chrome exists before the page scripts run. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before consuming IIFEs. -->
@@ -498,7 +498,7 @@
      settings.js is against the 1500-line ratchet. -->
 <script src="/builders/settings-render.js?v=2026-09-16-render-levels"></script>
 <!-- task 1004296: Settings → Software update. Own file on the same precedent. -->
-<script src="/builders/settings-software-update.js?v=2026-10-06-ask"></script>
+<script src="/builders/settings-software-update.js?v=2026-10-18-history"></script>
 <!-- task 1004501: Settings → Your Autobongos runner. Own file on the same precedent. -->
 <script src="/builders/settings-autobongos.js?v=2026-10-01-autobongos"></script>
 <!-- task 1003793: Settings → Module install reports. Own file on the same precedent. -->

package/modules/hall-ui/public/shell.js

@@ -774,9 +774,17 @@
     coreUpdateAsked = true;
     api.request('GET', '/api/bongos/core-update').then(function (res) {
       if (!res || res.status !== 200 || !res.data) return;
-      if (res.data.update) renderCoreUpdateBanner(res.data.update);
+      if (res.data.update) renderCoreUpdateBanner(res.data.update, res.data.held);
+      if (res.data.moved) renderCoreMoveNotice(res.data.moved); // task 1004731: loads core-move-notice.js, which draws it
     }, function () { /* fail-soft: no banner is the correct answer to no answer */ });
   }
+  function renderCoreMoveNotice(moved) {
+    if (!document.head || !document.head.appendChild) return;
+    var tag = document.createElement('script');
+    tag.src = '/builders/core-move-notice.js' + (SHELL_V ? '?v=' + SHELL_V : '');
+    tag.onload = function () { if (window.CoreMoveNotice) window.CoreMoveNotice.render(moved, { api: api, href: SOFTWARE_UPDATE_HREF }); };
+    document.head.appendChild(tag);
+  }
 
   // Where the banner's Upgrade goes (task 1004296). The platform's hall runs the deploy
   // door itself, so there it is /deploy. Every other hall — a hosted project, a
@@ -789,7 +797,7 @@
   // is current AND when the registry could not be read; `reading` separates them,
   // and neither renders. A banner is a claim about being out of date, and a wrong
   // one on a project that is actually current is worse than silence.
-  function renderCoreUpdateBanner(update) {
+  function renderCoreUpdateBanner(update, held) {
     if (!update || update.reading !== 'ok' || !update.behind || !update.latest) return;
     // A dismissal is remembered PER VERSION, not forever: the next release is new
     // news and must re-announce itself, or the surface is dead after one click.
@@ -826,10 +834,14 @@
       : (onUpdatePanel
         ? '<span class="core-update-notice__hint">Its details are below.</span>'
         : '<a class="core-update-notice__action" href="' + SOFTWARE_UPDATE_HREF + '">Upgrade</a>');
-    el.innerHTML =
-      '<span>Core <strong>' + esc(update.latest) + '</strong> is available — this project runs ' +
-      esc(update.running || 'an unknown version') + '.</span>' +
-      action +
+    // task 1004730: the newest version already failed here and was rolled back. Say so, never
+    // "available" with a button to take it again; Software update carries the full sentence.
+    var hold = held && held.version === update.latest ? held : null;
+    el.innerHTML = (hold
+      ? '<span>Core <strong>' + esc(hold.version) + '</strong> was tried on this project and rolled back. It is still on ' +
+        esc(hold.still_on) + ' and working.</span><a class="core-update-notice__action" href="' + SOFTWARE_UPDATE_HREF + '">Details</a>'
+      : '<span>Core <strong>' + esc(update.latest) + '</strong> is available — this project runs ' +
+        esc(update.running || 'an unknown version') + '.</span>' + action) +
       '<button type="button" class="core-update-notice__close" aria-label="Dismiss">×</button>';
     el.querySelector('.core-update-notice__close').addEventListener('click', function () {
       try {

package/modules/hall-ui/public/street.html

@@ -230,7 +230,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-10-hall-keys1"></script>
+<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/gov-living.js?v=2026-10-09-positions1"></script>
 <script src="/builders/gov-feeds.js?v=2026-10-09-living3"></script>