@bongos/core 1.21.174 → 1.21.176

package/modules/hall-ui/public/builders.js

@@ -54,7 +54,13 @@
       window.location.assign(`${API}/auth/web/start`);
       throw new Error('redirecting to auth');
     }
-    if (!res.ok) throw new Error(`${path} → ${res.status}`);
+    if (!res.ok) {
+      const err = new Error(`${path} → ${res.status}`);
+      err.status = res.status;
+      const env = res.data && typeof res.data.error === 'object' ? res.data.error : null;
+      err.code = (env && env.code) || (res.data && typeof res.data.error === 'string' ? res.data.error : null);
+      throw err;
+    }
     return res.data;
   }
 
@@ -123,7 +129,7 @@
   // ---- repo info (the clone URL the welcome walkthrough hands a newcomer) ---
   //
   // The /builder-* commands live INSIDE the repo (.claude/skills/, shelling out
-  // to scripts/gds/*.js). The old repo-clone walkthrough (and the
+  // to scripts/bongos/*.js). The old repo-clone walkthrough (and the
   // /public/repo-info fetch that fed it) was removed with the setup-first
   // redesign (#777); the welcome panel's clone block now reads the instance's
   // repo coords instead. The /public/repo-info surface still exists for other
@@ -513,23 +519,6 @@
     renderRecentShips();
   }
 
-  // Populate the ship-version filter from the versions API response. Called
-  // from loadAll once both versionsResp and the ships response are ready.
-  function populateShipVersionFilter(versions) {
-    const sel = $('#f-ships-version');
-    if (!sel) return;
-    // Build from the versions we've shipped to, intersected with the catalog.
-    const seen = new Set(shipState.all.map((s) => s.version_id).filter(Boolean));
-    for (const v of versions) {
-      if (!seen.has(v.id)) continue;
-      const opt = document.createElement('option');
-      opt.value = v.id;
-      opt.textContent = v.id;
-      if (v.name && v.name !== v.id) opt.title = v.name;
-      sel.appendChild(opt);
-    }
-  }
-
   // ---- recent grades (task 197) -------------------------------------------
 
   function renderRecentGrades(grades) {
@@ -763,27 +752,19 @@
       // task 1004432: an approved page is its artist's; the applying session rides along as a helper.
       const helperName = t.helper_display_name || (t.helper_login ? `@${t.helper_login}` : '');
       const by = escapeHtml(t.display_name || (t.github_login ? `@${t.github_login}` : `builder #${t.shipped_by}`)) + (helperName ? ` <span class="acclaim__evidence">with help from ${escapeHtml(helperName)}</span>` : '');
+      // task 1004833: the votes are THE shared list control (vote-control.js),
+      // pre-painted from the feed's own net_votes/my_vote so it costs no extra
+      // read. A viewer below the vote floor sees the net alone.
       const net = Number(t.net_votes) || 0;
-      const netCls = signClasses(net, 'acclaim__net');
-      const netText = net > 0 ? `+${net}` : `${net}`;
-      const mine = t.my_vote == null ? 0 : Number(t.my_vote);
-      // t.id is a bigserial integer, but coerce + escape it like every other
-      // server-sourced value rather than trusting the type — it flows into both
-      // innerHTML and querySelector attribute selectors below.
-      const tid = escapeHtml(String(t.id));
-      const controls = acclaimCanVote
-        ? `<span class="acclaim__vote" role="group" aria-label="Vote on this work">
-             <button type="button" class="acclaim__btn acclaim__btn--up${mine === 1 ? ' is-active' : ''}" data-vote-task="${tid}" data-vote="1" aria-pressed="${mine === 1}" title="Upvote (+1)">▲</button>
-             <button type="button" class="acclaim__btn acclaim__btn--down${mine === -1 ? ' is-active' : ''}" data-vote-task="${tid}" data-vote="-1" aria-pressed="${mine === -1}" title="Downvote (−1)">▼</button>
-           </span>`
-        : '<span class="acclaim__readonly" title="Metic rank and above may vote">—</span>';
+      const votes = acclaimCanVote && window.OTBVote
+        ? window.OTBVote.taskHtml(t)
+        : `<span class="vote__net" title="Metic rank and above may vote">${net > 0 ? `+${net}` : `${net}`}</span>`;
       const title = escapeHtml(t.value_summary || t.title || `task #${t.id}`);
       return `
-        <tr data-acclaim-row="${tid}">
+        <tr>
           <td>${title}${acclaimEvidenceHtml(t)}</td>
           <td>${by}</td>
-          <td class="acclaim__net ${netCls}" data-acclaim-net="${tid}">${netText}</td>
-          <td>${controls}</td>
+          <td>${votes}</td>
         </tr>
       `;
     }).join('');
@@ -801,50 +782,17 @@
     }
   }
 
-  // Click delegation for the vote buttons. Toggling an already-active vote
-  // clears it (sends 0). Re-fetches the row's net from the server response so
-  // the displayed tally is always authoritative.
-  async function onAcclaimClick(ev) {
-    const btn = ev.target.closest('[data-vote-task]');
-    if (!btn || !acclaimCanVote) return;
-    // Coerce the id to an integer before it goes into a CSS attribute selector
-    // or the URL — a non-numeric value would throw a querySelector SyntaxError.
-    const taskIdNum = Number(btn.getAttribute('data-vote-task'));
-    if (!Number.isInteger(taskIdNum)) return;
-    const taskId = String(taskIdNum);
-    const clicked = Number(btn.getAttribute('data-vote'));
-    const wasActive = btn.classList.contains('is-active');
-    const vote = wasActive ? 0 : clicked; // clicking your current vote clears it
-    const row = $(`[data-acclaim-row="${taskId}"]`);
-    const buttons = row ? row.querySelectorAll('.acclaim__btn') : [];
-    buttons.forEach((b) => { b.disabled = true; });
-    try {
-      const res = await postJSON(`${API}/tasks/${encodeURIComponent(taskId)}/vote`, { vote });
-      // task 1002446: the row is now paged, so the vote has to land in the held
-      // rows too — otherwise flipping to page 2 and back re-renders the stale
-      // server tally over the one just cast.
-      acclaimState.tasks = acclaimState.tasks.map((t) => (Number(t.id) === taskIdNum
-        ? { ...t, net_votes: res.net_votes, my_vote: res.my_vote }
-        : t));
-      // Reflect the authoritative net + which button is active.
-      const netEl = $(`[data-acclaim-net="${taskId}"]`);
-      if (netEl) {
-        const net = Number(res.net_votes) || 0;
-        netEl.textContent = net > 0 ? `+${net}` : `${net}`;
-        netEl.classList.remove('acclaim__net--up', 'acclaim__net--down', 'acclaim__net--flat');
-        netEl.classList.add(signClasses(net, 'acclaim__net'));
-      }
-      buttons.forEach((b) => {
-        const v = Number(b.getAttribute('data-vote'));
-        const active = res.my_vote != null && Number(res.my_vote) === v;
-        b.classList.toggle('is-active', active);
-        b.setAttribute('aria-pressed', String(active));
-      });
-    } catch (err) {
-      toast(err.status === 403 ? 'You can\'t vote on your own work.' : `Vote failed: ${err.message}`);
-    } finally {
-      buttons.forEach((b) => { b.disabled = false; });
-    }
+  // task 1004833: the shared vote control casts the vote and repaints its own
+  // row; it then raises 'otb-vote' with the server's answer. The feed is paged,
+  // so the vote must land in the HELD rows too (task 1002446), or flipping to
+  // page 2 and back re-renders the stale tally over the one just cast.
+  function onAcclaimVote(ev) {
+    const d = ev && ev.detail;
+    if (!d || d.kind !== 'task') return;
+    const taskIdNum = Number(d.id);
+    acclaimState.tasks = acclaimState.tasks.map((t) => (Number(t.id) === taskIdNum
+      ? { ...t, net_votes: d.net_votes, my_vote: d.my_vote }
+      : t));
   }
 
   // ---- task browser (removed #750) -----------------------------------------
@@ -886,6 +834,7 @@
         return `<li class="triage-inbox__item">`
           + `<a class="triage-inbox__link" href="#/idea/${encodeURIComponent(i.id)}">${title}</a>`
           + kind
+          + (window.OTBVote ? window.OTBVote.ideaHtml(i) : '')
           + `<button class="btn-ghost" type="button" data-triage-idea="${escapeHtml(String(i.id))}">Triage</button>`
           + `</li>`;
       }).join('');
@@ -1161,7 +1110,9 @@
     // so the hall no longer fetches /me/skill-prefs here.
     const [achAll, ships, versionsResp, lb, progress] = await Promise.allSettled([
       getJSON(`${API}/achievements`),
-      getJSON(`${API}/me/recent-ships?limit=all`),
+      // task 1004854: Home's newest few + a count — never the whole history,
+      // which only the Accomplishments ledger fetches (hall-render.js loadShipLedger).
+      getJSON(`${API}/me/recent-ships?limit=${HOME_SHIPS_LIMIT}`),
       getJSON(`${API}/versions`),
       getJSON(`${API}/public/leaderboard`), // task 1004437: the list with each builder's roles
       getJSON(`${API}/public/progress`), // the Home version tab (task 1004774)
@@ -1186,8 +1137,7 @@
     }
 
     if (ships.status === 'fulfilled') {
-      shipState.all = ships.value.ships || [];
-      renderRecentShips();
+      setRecentShips(ships.value);
     } else {
       $('#recent-ships tbody').innerHTML = emptyRow(4, 'Your work history could not be loaded.');
     }
@@ -1274,8 +1224,8 @@
       if (btn) btn.textContent = minimized ? '+' : '−';
     });
 
-    // V3.R25 (#245): delegated click handler for the peer-acclaim vote buttons.
-    $('#acclaim-feed')?.addEventListener('click', onAcclaimClick);
+    // task 1004833: the shared vote control reports each landed vote to the feed.
+    $('#acclaim-feed')?.addEventListener('otb-vote', onAcclaimVote);
 
     // task 1003459 — the Claim button on each Next-up row; the action + the
     // delegated listener live in hall-render.js (builders.js is at the
@@ -1396,8 +1346,8 @@
   // reads what this page holds NOW rather than what it held at boot. Everything
   // else is stable for the life of the page. This call sits AFTER every
   // declaration it passes — moving it earlier is a temporal-dead-zone crash.
-  const { acclaimEvidenceHtml, analyticsState, lbState, mountHallWidgets, renderCurveBody, renderGreeting, renderLanding, renderNav, renderOnboarding, renderProfile, renderRecentShips, renderWelcomeCore, shipState, shipsPager, welcomeDismissalKey, wireNextUpClaim } = window.OTBHallRender({
-    API, RANK_ORDER, api, brandWorld, curLabel, emptyRow, fmtDate, loadNextUp, mins, normalizeRank, pct, postJSON, rankLabel, rankWeight, signClasses, toast, usd,
+  const { acclaimEvidenceHtml, analyticsState, lbState, mountHallWidgets, renderCurveBody, renderGreeting, renderLanding, renderSessionRefused, renderNav, renderOnboarding, renderProfile, renderRecentShips, renderWelcomeCore, HOME_SHIPS_LIMIT, populateShipVersionFilter, setRecentShips, shipsPager, welcomeDismissalKey, wireNextUpClaim } = window.OTBHallRender({
+    API, RANK_ORDER, api, brandWorld, curLabel, emptyRow, fmtDate, getJSON, loadNextUp, mins, normalizeRank, pct, postJSON, rankLabel, rankWeight, signClasses, toast, usd,
     get instanceRepo() { return instanceRepo; },
     get lastCostState() { return lastCostState; },
     get lastKarmaState() { return lastKarmaState; },
@@ -1428,6 +1378,10 @@
     try {
       me = await getJSON(`${API}/me`, { softAuth: true });
     } catch (err) {
+      // A session the server refuses (an offboarded builder, a retired session
+      // source) is neither signed out nor a member: without this the page stayed
+      // blank with only the sidebar, and nothing said why.
+      if (err && err.status === 403) { renderSessionRefused(err.code); return; }
       if (!(err && err.code === AUTH_NEEDED)) throw err;
     }
 

package/modules/hall-ui/public/city-decide.js

@@ -21,6 +21,20 @@
   // row's own card and act key), so GovDeck.sendAnswer sends the desk's request.
   var QUIET = { hold: 1, abstain: 1 };
   function str(v) { return v == null ? '' : String(v); }
+  // a matter's markdown as plain words (the deck's own rule, GovDeck.plain)
+  function plain(v) { var D = typeof window !== 'undefined' ? window.GovDeck : null; return D && D.plain ? D.plain(v) : str(v); }
+  // the card's question from a matter's own title: all of it when it is short, else
+  // its first sentence (the whole text stays one tap away, under "Full text")
+  function questionOf(title) {
+    var t = plain(title).replace(/\s+/g, ' ').trim();
+    if (t.length <= 140) return t;
+    var sent = t.split(/(?<=[.!?])\s+/);
+    var first = sent.shift() || '';
+    // a bare headline ("Physics.") is not a question yet: take the next sentence too
+    while (first.length < 30 && sent.length) first += ' ' + sent.shift();
+    if (first.length <= 140) return first;
+    return first.slice(0, 139).replace(/\s+\S*$/, '') + '…';
+  }
   function answerable(cv) {
     if (!cv) return cv;
     var out = {};
@@ -230,9 +244,9 @@
   function fullText(matter, shown) {
     if (!matter) return '';
     var parts = [];
-    var title = str(matter.title).trim();
+    var title = plain(matter.title).trim();
     if (title && title !== str(shown.question).trim()) parts.push(title);
-    var detail = str((matter.ask && matter.ask.detail) || matter.detail).trim();
+    var detail = plain((matter.ask && matter.ask.detail) || matter.detail).trim();
     if (detail && detail !== title) parts.push(detail);
     return parts.join('\n\n');
   }
@@ -242,7 +256,7 @@
     var shown = answerable(cv);
     var matter = matterOf(on.docket && on.docket(), cv.id);
     // the question in full: a matter with no stored card is titled by its own words, cut to fit the deck
-    if (matter && /…$/.test(str(shown.question)) && matter.title) shown.question = str(matter.title).trim();
+    if (matter && !cv.askReal && matter.title) shown.question = questionOf(matter.title);
     var art = K.drawAsk(doc, shown, on, o);
     // and everything else it says, one tap away rather than cut
     var full = fullText(matter, shown);
@@ -672,5 +686,5 @@
     return { open: open, close: close, render: render, isOpen: function () { return st.open; } };
   }
 
-  window.GovCityDecide = { make: make, answerable: answerable, drawCard: drawCard, flash: flash, fullText: fullText, armKey: armKey, rewordingIds: rewordingIds, rewordingCount: rewordingCount, withoutReworded: withoutReworded, paintArmed: paintArmed, promptOf: promptOf, CLAUDE_URL: CLAUDE_URL };
+  window.GovCityDecide = { make: make, answerable: answerable, questionOf: questionOf, drawCard: drawCard, flash: flash, fullText: fullText, armKey: armKey, rewordingIds: rewordingIds, rewordingCount: rewordingCount, withoutReworded: withoutReworded, paintArmed: paintArmed, promptOf: promptOf, CLAUDE_URL: CLAUDE_URL };
 }());

package/modules/hall-ui/public/city.html

@@ -107,7 +107,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
+<script src="/builders/shell.js?v=2026-10-25-logo1"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/gov-living.js?v=2026-10-09-positions1"></script>
 <script src="/builders/gov-feeds.js?v=2026-10-09-living3"></script>

package/modules/hall-ui/public/collab.html

@@ -150,7 +150,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
+<script src="/builders/shell.js?v=2026-10-25-logo1"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <script src="/builders/collab-lib.js?v=2026-09-24-archive"></script>

package/modules/hall-ui/public/commands.html

@@ -19,30 +19,27 @@
   <div class="app-body">
     <header class="app-topbar" id="app-topbar"></header>
     <div class="app-content">
-      <!-- task 1004473: a reference page, so it takes the room's head like
-           Ranks. Both tables below are filled from live sources — nothing in
-           this file names a command. -->
+      <!-- The page's one h1, for screen readers: no page shows its head (task
+           1004836), so its eyebrow and sub-line went in task 1004828. -->
       <div class="page-head page-head--room">
-        <p class="page-head__eyebrow">Docs</p>
         <h1 class="page-head__h">Commands</h1>
-        <p class="page-head__sub">Every slash command and every terminal command this project has, with what each does, when to reach for it and what it costs. The list is read from the project itself, so it is always current.</p>
       </div>
 
       <main id="hall-main">
         <section class="scroll" id="skills-scroll" aria-labelledby="skills-h">
           <h2 id="skills-h" class="scroll__h">Slash commands in Claude Code</h2>
-          <p class="scroll__lede">Type these in a Claude Code session on this project. Most also start when you simply say what you want in plain words.</p>
+          <p class="scroll__lede">Type these in Claude Code on this project, or say what you want in plain words.</p>
           <div class="cmd-legend" aria-label="What the start-it markers mean">
             <span><span class="fact-pill fact-pill--info">Shown to Claude</span> Claude can start it when you ask in plain words.</span>
             <span><span class="fact-pill cmd-how--typed">Type it yourself</span> Kept out of Claude's menu to save room; type <code>/name</code> to run it.</span>
           </div>
           <div id="skills-body" aria-live="polite"><p class="cmd-error">Loading the slash commands…</p></div>
-          <p class="cmd-note">Having a command does not give you permission to use it: some refuse below a certain rank, and that is checked every time it runs.</p>
+          <p class="cmd-note">Some commands refuse below a certain rank.</p>
         </section>
 
         <section class="scroll" id="cli-scroll" aria-labelledby="cli-h">
           <h2 id="cli-h" class="scroll__h">Terminal commands (bongos)</h2>
-          <p class="scroll__lede">The same work from any terminal, outside Claude Code. Run <code>bongos help</code> to see this list there.</p>
+          <p class="scroll__lede">The same work from any terminal. <code>bongos help</code> lists them there.</p>
           <div id="cli-body" aria-live="polite"><p class="cmd-error">Loading the terminal commands…</p></div>
         </section>
       </main>
@@ -56,7 +53,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
+<script src="/builders/shell.js?v=2026-10-25-logo1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-14-domutils"></script>

package/modules/hall-ui/public/copy-desk.html

@@ -179,7 +179,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
+<script src="/builders/shell.js?v=2026-10-25-logo1"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <script src="/builders/hall-kit.js"></script>

package/modules/hall-ui/public/copy-desk.js

@@ -252,7 +252,7 @@
     const blind = (r.blind_spots || []).length;
     $('#cd-registry-note').innerHTML =
       `Read from <code>${escapeHtml(r.at || 'the copy registry')}</code> as committed. `
-      + `It is generated, not live: run <code>${escapeHtml(r.freshness_check || 'node scripts/gds/copy-inventory.js --check')}</code> to see whether it still matches the tree.`
+      + `It is generated, not live: run <code>${escapeHtml(r.freshness_check || 'node scripts/bongos/copy-inventory.js --check')}</code> to see whether it still matches the tree.`
       + (blind ? ` This inventory has ${blind} documented blind spot${blind === 1 ? '' : 's'} — server-side messages, skill prose and runtime-composed strings are not in it, so it is not every word the project says.` : '');
   }
 
@@ -317,7 +317,7 @@
       const code = res.data && res.data.error && res.data.error.code;
       const detail = (res.data && res.data.error && res.data.error.details) || {};
       $('#cd-sub').textContent = code === 'registry_missing'
-        ? `No copy registry on this instance yet. Run ${detail.run || 'node scripts/gds/copy-inventory.js'} and commit it.`
+        ? `No copy registry on this instance yet. Run ${detail.run || 'node scripts/bongos/copy-inventory.js'} and commit it.`
         : 'Could not load the copy desk.';
       $('#cd-flags').innerHTML = kit.emptyStateHtml('—');
       $('#cd-dupes').innerHTML = kit.emptyStateHtml('—');

package/modules/hall-ui/public/craft-mode.js

@@ -784,6 +784,10 @@
     },
     iconHtml: icon,
     open: openPicker,
+    // task 1004785: the welcome asks for a role instead of the picker on its load, and offers
+    // the Owner role only where Governing is offered.
+    offered: offered,
+    markAsked: function () { set('sessionStorage', ASKED_KEY, '1'); },
     ALWAYS_TABS: ALWAYS_TABS.slice(),
     tabsFor: tabsFor,
     applyNav: applyNav,

package/modules/hall-ui/public/deploy.html

@@ -10,6 +10,7 @@
   <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
   <link rel="stylesheet" href="/builders/style.css?v=2026-09-23-changelist1">
   <link rel="stylesheet" href="/builders/oversight.css">
+  <link rel="stylesheet" href="/builders/hall-ask.css">
   <link rel="stylesheet" href="/builders/project-settings.css">
 </head>
 <body data-page="deploy" data-page-title="Deploy">
@@ -20,9 +21,10 @@
   <div class="app-body">
     <header class="app-topbar" id="app-topbar"></header>
     <div class="app-content">
+      <!-- The page's one h1, for screen readers: no page shows its head (task
+           1004836), so its sub-line went in task 1004829. -->
       <div class="page-head page-head--board">
         <h1 class="page-head__h">Deploy</h1>
-        <p class="page-head__sub" id="dp-sub">Loading…</p>
       </div>
 
       <main id="hall-main">
@@ -76,10 +78,12 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
+<script src="/builders/shell.js?v=2026-10-25-logo1"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>
 <script src="/builders/hall-kit.js"></script>
+<!-- the shared ask card the move is drawn with (task 1004829) -->
+<script src="/builders/hall-ask.js"></script>
 <script src="/builders/deploy.js?v=2026-09-23-changelist1"></script>
 </body>
 </html>

package/modules/hall-ui/public/deploy.js

@@ -132,7 +132,7 @@
 
   // ---- why a move stopped, in words (task 1004450) ---------------------------
   //
-  // The runner classifies every failed move (scripts/gds/upgrade-outcome.js) into one of
+  // The runner classifies every failed move (scripts/bongos/upgrade-outcome.js) into one of
   // four kinds, each with a fixed reason code. The page used to show only the runner's raw
   // output, addressed to someone holding a shell. These are the same reasons in the
   // owner's words. A code with no entry falls back to a plain "no words for this" rather
@@ -174,7 +174,7 @@
     integrity_pin: 'the new core did not match the checksum it was published with',
   };
   const reasonWords = (f) => (f && REASON_WORDS[f.reason]) || 'the upgrade stopped for a reason this page has no words for yet';
-  // What the runner's one automatic fix (scripts/gds/wedge-remedy.js) did for a known snag.
+  // What the runner's one automatic fix (scripts/bongos/wedge-remedy.js) did for a known snag.
   const REMEDY_WORDS = {
     dirty_tree: 'saved those changes',
     disk_full: 'cleared out old backups',
@@ -565,16 +565,28 @@
   }
 
   function stepTwoHtml(p, isSelf) {
-    const id = escapeHtml(String(p.instance_id));
+    const id = String(p.instance_id);
+    const to = String(p.recommended_version);
+    // The move is the one decision this page asks of its reader, so it is the hall's
+    // ask card (task 1004829) — drawn only where the server said this viewer's press
+    // would be let through (`viewer_may_move`: the read already took the move's two
+    // doors, and this adds the release building's act-alone rule). Cancel stays a
+    // plain control: it answers nothing, it only steps back.
+    const ask = p.viewer_may_move === true && window.OTBAsk
+      ? window.OTBAsk.html({
+        tag: 'div',
+        q: `Move ${isSelf ? 'the platform' : String(p.slug)} to core ${to}?`,
+        said: `It restarts on ${to}, and goes back to ${p.served_version} if it does not answer.`,
+        row: true,
+        opts: [{ label: `Move to ${to}`, result: 'Restarts it on the new core', rec: true, attrs: { id: `dp-confirm-${id}` } }],
+      })
+      : '<p class="ov-row__sub">This move is decided by the project’s government, not by one person here.</p>';
     return `
       <div class="ps-controls">
         ${changesHtml(p)}
         ${preflightHtml(p)}
-        <p class="ov-row__sub">This restarts ${isSelf ? 'the platform' : escapeHtml(String(p.slug))} onto core
-          <strong>${escapeHtml(String(p.recommended_version))}</strong>. It waits for the box to answer and
-          puts itself back on ${escapeHtml(String(p.served_version))} if it does not.</p>
-        <button type="button" class="btn btn--primary" id="dp-confirm-${id}">Move to ${escapeHtml(String(p.recommended_version))}</button>
-        <button type="button" class="btn" id="dp-cancel-${id}">Cancel</button>
+        ${ask}
+        <button type="button" class="btn" id="dp-cancel-${escapeHtml(id)}">Cancel</button>
       </div>`;
   }
 
@@ -830,7 +842,7 @@
 
   async function load() {
     const slug = scopeSlug();
-    if (!slug && !doorIsHere()) { $('dp-sub').textContent = 'Render'; return; }
+    if (!slug && !doorIsHere()) return;
     try {
       if (!slug) {
         // THE HALL'S OWN PROJECT. On the control plane that is the self row, which is why
@@ -845,7 +857,6 @@
           if (e && e.kind === '403') throw e;
           view.notEnrolled = e.message || 'This platform has no deploy door yet.';
         }
-        $('dp-sub').textContent = (view.box && view.box.slug) || 'This platform';
       } else {
         view = { box: null, isSelf: false, name: slug, notEnrolled: null, unreadable: null };
         const inst = await findBySlug(slug);
@@ -863,7 +874,6 @@
             view.unreadable = (e && e.message) || 'unknown error';
           }
         }
-        $('dp-sub').textContent = slug;
       }
       $('dp-body').hidden = false;
       repaint();
@@ -871,11 +881,9 @@
       if (e && e.kind === '401') return;
       if (e && e.kind === '403') {
         $('dp-sealed').hidden = false;
-        $('dp-sub').textContent = 'Restricted';
         return;
       }
       $('dp-body').hidden = false;
-      $('dp-sub').textContent = 'Unavailable';
       $('dp-panel').innerHTML = `<p class="ps-invalid">${escapeHtml(e.message || 'Could not read the deploy state.')}</p>`;
     }
   }

package/modules/hall-ui/public/diagrams.css

@@ -12,7 +12,7 @@
    exception retires with it, and the hall now carries no substantive inline
    style at all.
 
-   The diagrams themselves are GENERATED (scripts/gds/gen-diagrams.js writes the
+   The diagrams themselves are GENERATED (scripts/bongos/gen-diagrams.js writes the
    .svg/.png pair and assertions.json in lockstep) — never hand-edit a .mmd. */
 
 /* The key sits above the figures on the ground of its own panel, wrapping to a

package/modules/hall-ui/public/diagrams.html

@@ -24,20 +24,17 @@
   <div class="app-body">
     <header class="app-topbar" id="app-topbar"></header>
     <div class="app-content">
-      <!-- The page had no <h1> at all before task 1003306, so it failed
-           one-header-main-h1 on every render. The reading room's head: the
-           label voice on the eyebrow, the room's name in the display face. -->
+      <!-- The page's one h1, for screen readers: no page shows its head (task
+           1004836), so its eyebrow and sub-line went in task 1004828. -->
       <div class="page-head page-head--room">
-        <p class="page-head__eyebrow">Docs</p>
         <h1 class="page-head__h">How the system works</h1>
-        <p class="page-head__sub">Five diagrams that show, at a glance, how work flows through {{worldName}}'s development system. <em>Drag to pan, scroll to zoom</em> — or open any diagram fullscreen.</p>
       </div>
 
       <main id="hall-main">
 
         <section class="scroll" aria-labelledby="legend-h">
           <h2 id="legend-h" class="scroll__h">Reading the diagrams</h2>
-          <p class="scroll__lede">The system is mid-build. These diagrams deliberately separate what stands today from what is yet planned, so they double as an honest snapshot of where we are.</p>
+          <p class="scroll__lede">How work flows through {{worldName}}, in five diagrams. Each marks what is built and what is still planned. <em>Drag to pan, scroll to zoom</em>, or open one fullscreen.</p>
           <div class="legend">
             <span class="legend__item"><span class="legend__swatch legend__swatch--live">● LIVE</span> built &amp; enforced today</span>
             <span class="legend__item"><span class="legend__swatch legend__swatch--planned">⤍ PLANNED</span> designed, task-tracked, not yet built</span>
@@ -71,7 +68,7 @@
 
         <section class="scroll" aria-labelledby="d4-h">
           <h2 id="d4-h" class="scroll__h">4 · The complete architecture</h2>
-          <p class="scroll__lede">Where your work runs and how it reaches production, in one diagram. <strong>Your machine</strong> holds the worker, the code, and your local memory; the <strong>server</strong> is both the authority and production; <strong>GitHub</strong> holds the repo. Follow the numbered path to see how your work gets to prod. This is the largest diagram — <em>drag to pan, scroll to zoom, or open it fullscreen</em>.</p>
+          <p class="scroll__lede">Where your work runs and how it reaches production. <strong>Your machine</strong> holds the worker, the code and your local memory; the <strong>server</strong> is the authority and production; <strong>GitHub</strong> holds the repo. Follow the numbered path.</p>
           <figure class="diagram">
             <img src="diagrams/04-architecture.png" alt="The complete architecture: your machine (the worker, the code, and local memory), the server (authority and production, with Postgres, the server-side memory store, and the push credential), and GitHub (branch-protected main). Numbered edges show how a change travels from your machine to production; the per-builder memory layer syncs between your machine and the server.">
             <figcaption>Your machine · memory · server (authority + prod) · GitHub — and the full path from your machine to production.</figcaption>
@@ -99,7 +96,7 @@
      time so the chrome exists before the deferred page scripts execute. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
+<script src="/builders/shell.js?v=2026-10-25-logo1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/diagram-viewer.js?v=2026-06-14-diagviewer-1" defer></script>

package/modules/hall-ui/public/diagrams.states.json

@@ -4,7 +4,7 @@
   "surface": "hall-ui",
   "stub": { "prefix": "/builders/" },
   "modeQuery": false,
-  "_feeds": "The diagrams are generated PNG/SVG pairs written by scripts/gds/gen-diagrams.js and served from /builders/diagrams/*; the kit's stub has neither those nor the hall's feeds, so both are declared. diagram-viewer.js upgrades each <img> into a pan/zoom canvas only once its .svg fetch succeeds — under the stub it does not, so what renders here is the graceful-degradation path: the framed figure with a static image in it. That IS the state to measure, because it is what a reader gets whenever the vector is unavailable.",
+  "_feeds": "The diagrams are generated PNG/SVG pairs written by scripts/bongos/gen-diagrams.js and served from /builders/diagrams/*; the kit's stub has neither those nor the hall's feeds, so both are declared. diagram-viewer.js upgrades each <img> into a pan/zoom canvas only once its .svg fetch succeeds — under the stub it does not, so what renders here is the graceful-degradation path: the framed figure with a static image in it. That IS the state to measure, because it is what a reader gets whenever the vector is unavailable.",
   "ignoreRequests": [
     "/api/(gds|bongos)/me$",
     "/api/(gds|bongos)/me/",

package/modules/hall-ui/public/drachmae.html

@@ -28,14 +28,10 @@
     <header class="app-topbar" id="app-topbar"></header>
     <div class="app-content">
 
-      <!-- The reading room announces its document (task 1003306's archetype):
-           the label voice on a one-word eyebrow, then the room's name lowercase
-           in the display face. The sub line says what KIND of document this is,
-           not how long it takes: nobody reads a reference to the end. -->
+      <!-- The page's one h1, for screen readers: no page shows its head (task
+           1004836), so its eyebrow and sub-line went in task 1004828. -->
       <div class="page-head page-head--room">
-        <p class="page-head__eyebrow">Docs</p>
         <h1 class="page-head__h">Drachmae &amp; karma</h1>
-        <p class="page-head__sub">How you get paid, and how you earn trust. A reference to jump around in: every section has its own link, and the bounty rates are read live.</p>
       </div>
 
       <main id="hall-main">
@@ -100,7 +96,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
+<script src="/builders/shell.js?v=2026-10-25-logo1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/md-reader.js?v=2026-09-02-mdreader-2"></script>

package/modules/hall-ui/public/fleet.html

@@ -20,9 +20,10 @@
   <div class="app-body">
     <header class="app-topbar" id="app-topbar"></header>
     <div class="app-content">
+      <!-- The page's one h1, for screen readers: no page shows its head (task
+           1004836), so its sub-line went in task 1004829. -->
       <div class="page-head page-head--board">
         <h1 class="page-head__h">Fleet costs</h1>
-        <p class="page-head__sub" id="fl-sub">Loading…</p>
       </div>
 
       <main id="hall-main">
@@ -56,7 +57,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
+<script src="/builders/shell.js?v=2026-10-25-logo1"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>
 <script src="/builders/hall-kit.js"></script>