@bongos/core 1.21.174 → 1.21.176

package/modules/hall-ui/public/style.css

@@ -547,27 +547,33 @@ main:focus { outline: none; }
   align-items: center;
   justify-content: center;
   gap: 10px;
-  /* The label leaves the layout in the closed rail, so the dot alone would be
-     an 11px target — the mark still has to clear the 24px control floor. */
+  /* The label leaves the layout in the closed rail, so the mark alone would be
+     a 28px target — the mark still has to clear the 24px control floor. */
   min-width: 32px;
   min-height: 32px;
   font-family: var(--font-display);
-  font-weight: 500;
+  /* the lockup (task 1004846): the name in lowercase, light weight */
+  font-weight: 300;
   font-size: 15px;
-  letter-spacing: -0.015em;
+  letter-spacing: -0.01em;
+  text-transform: lowercase;
   color: var(--ink);
 }
 .brand-mark:hover { text-decoration: none; }
-/* An outlined dot, not a filled one: the accent lights only what is pressable
-   or live, and a wordmark is neither. */
-.brand-mark__dot {
-  width: 11px; height: 11px;
-  border-radius: 50%;
-  border: 1px solid var(--ink);
-  background: none;
+/* The Bongos mark (task 1004846): Ink and one light, and its Night ink twin in
+   dark mode. The salmon moon is the one lit thing in it. */
+.brand-mark__mark {
+  width: 28px; height: 28px;
+  display: block;
   flex-shrink: 0;
 }
-/* A project's logo in the dot's place (ADR 0358): the image is the founder's, so
+html[data-theme="dark"] .brand-mark__mark .mr { stroke: #e2e1e4; }
+html[data-theme="dark"] .brand-mark__mark .mp { fill: #e2e1e4; }
+@media (prefers-color-scheme: dark) {
+  html:not([data-theme]) .brand-mark__mark .mr { stroke: #e2e1e4; }
+  html:not([data-theme]) .brand-mark__mark .mp { fill: #e2e1e4; }
+}
+/* A project's logo in the mark's place (ADR 0358): the image is the founder's, so
    it gets a soft square, never a recolour. */
 .brand-mark__logo {
   width: 24px; height: 24px;
@@ -973,7 +979,8 @@ html[data-theme="dark"] .gplate__light { display: none; }
   gap: 14px;
   height: var(--topbar-h);
   padding: 0 22px;
-  background: var(--glass);
+  /* Near-opaque, so scrolled text does not read through the banner. */
+  background: color-mix(in srgb, var(--bg) 94%, transparent);
   backdrop-filter: blur(var(--glass-blur));
   -webkit-backdrop-filter: blur(var(--glass-blur));
   border-bottom: 1px solid var(--glass-edge);
@@ -2784,25 +2791,24 @@ main [id] { scroll-margin-top: calc(var(--topbar-h) + 16px); }
 .karma-badge__trend--flat, .karma-feed__delta--flat { color: var(--ink-faint); }
 .karma-feed__delta { font-weight: 600; font-variant-numeric: tabular-nums; }
 
-.acclaim__vote { display: inline-flex; gap: 4px; }
-.acclaim__btn {
-  width: 28px; height: 24px;
+
+/* task 1004727: the ONE list vote control (vote-control.js) every task and idea
+   list renders. 24px targets on both axes; the net sits between the arrows. */
+.vote { display: inline-flex; flex: none; align-items: center; gap: 2px; vertical-align: middle; white-space: nowrap; }
+.vote__btn {
+  min-width: 24px; height: 24px; padding: 0;
   border: 1px solid var(--border-strong);
   border-radius: var(--radius-sm);
   background: var(--surface);
   color: var(--ink-soft);
-  font-size: 13px;
+  font-size: 11px; line-height: 1;
   cursor: pointer;
 }
-.acclaim__btn:hover:not(:disabled) { background: var(--surface-2); }
-.acclaim__btn--up.is-active { background: var(--ok-weak); color: var(--ok); border-color: color-mix(in srgb, var(--ok) 35%, transparent); }
-.acclaim__btn--down.is-active { background: var(--danger-weak); color: var(--danger); border-color: color-mix(in srgb, var(--danger) 35%, transparent); }
-.acclaim__btn:disabled { opacity: 0.45; cursor: not-allowed; }
-.acclaim__readonly { color: var(--ink-faint); }
-.acclaim__net { font-weight: 600; font-variant-numeric: tabular-nums; }
-.acclaim__net--up { color: var(--ok); }
-.acclaim__net--down { color: var(--danger); }
-.acclaim__net--flat { color: var(--ink-faint); }
+.vote__btn:hover:not(:disabled) { background: var(--surface-2); }
+.vote__btn--up.is-active { background: var(--ok-weak); color: var(--ok); border-color: color-mix(in srgb, var(--ok) 35%, transparent); }
+.vote__btn--down.is-active { background: var(--danger-weak); color: var(--danger); border-color: color-mix(in srgb, var(--danger) 35%, transparent); }
+.vote__btn:disabled { opacity: 0.45; cursor: wait; }
+.vote__net { min-width: 2.2em; text-align: center; font-weight: 600; font-size: 12px; font-variant-numeric: tabular-nums; color: var(--ink-soft); }
 
 /* ---------- achievements ---------- */
 
@@ -4660,3 +4666,14 @@ body[data-page="home"] #home-stats .stat-row { border-bottom-left-radius: 0; bor
 .home-facts--grid > div { display: flex; flex-direction: column; gap: 2px; }
 .home-facts--grid dt, .home-facts--grid dd { border-top: 0; padding: 0; text-align: left; }
 .home-facts--grid dd { font-family: var(--font-display); font-size: 20px; font-weight: 300; }
+
+/* NO TOP BLOCK (task 1004836, owner 2026-10-23). The left rail highlights the
+   page and the top bar names it, so a page draws nothing above its first
+   section: no title, no tagline, no little cluster of links. The head stays in
+   the markup only so every page keeps its one <h1> for screen readers; nothing
+   focusable may live in it (a control belongs in the page body, in the layout).
+   Home keeps its greeting band — it is the reference design, not a title. */
+body:not([data-page="home"]) .page-head {
+  position: absolute; width: 1px; height: 1px; margin: -1px; padding: 0;
+  overflow: hidden; clip: rect(0 0 0 0); clip-path: inset(50%); white-space: nowrap; border: 0;
+}

package/modules/hall-ui/public/task-detail.js

@@ -9,7 +9,7 @@
 // (/task/:id — task.js) so a task gets a shareable URL and working back/forward
 // instead of a modal. This file now just REDIRECTS `#/task/N` to that page — for
 // every `#/task/N` link already written across the codebase (ADRs, session logs,
-// CLAUDE.md, scripts/gds/linkify-refs.js's RESOLVER_BASE) to keep resolving.
+// CLAUDE.md, scripts/bongos/linkify-refs.js's RESOLVER_BASE) to keep resolving.
 //
 // Self-contained (its own getJSON, no framework), loaded AFTER dom-utils.js on
 // each page. It self-boots on DOMContentLoaded and survives the sign-in round-trip
@@ -159,11 +159,14 @@
     // above already has with the /idea page — a compact card, not the full
     // queue — so it carries only Resolve (the one-tap "this is done" verb);
     // Link a task lives on the fuller /blockers page, which has room for the
-    // task-id field and the queue to confirm against. Rendered only for
-    // metic/archon, the COSMETIC mirror of the real blocker.review floor —
-    // "AUTHORITY IS UNCHANGED... the hall must add none of its own" — the
-    // server enforces the same gate regardless, exactly the idea panel's rule.
-    if (kind === 'blocker' && r.status === 'open' && (rank === 'metic' || rank === 'archon')) {
+    // task-id field and the queue to confirm against. Rendered only for a
+    // viewer who holds blocker.review — the SAME atom the resolve route's
+    // requirePermission names, read off /me.permissions (task 1004824), since
+    // a government can move it off the metic floor. Cosmetic: "AUTHORITY IS
+    // UNCHANGED... the hall must add none of its own" — the server enforces
+    // the gate regardless. A missing permissions map hides the panel.
+    var perms = (viewer && viewer.permissions) || null;
+    if (kind === 'blocker' && r.status === 'open' && perms && perms['blocker.review'] === true) {
       nodes.push(blockerPanel(r));
     }
     // A resolved blocker says what closed it — otherwise the status word has
@@ -736,7 +739,7 @@
       if ((kind === 'idea' || kind === 'blocker') && ref) {
         try {
           var me = await getJSON(API + '/me', { softAuth: true });
-          viewer = (me && me.builder) ? me.builder : null;
+          viewer = (me && me.builder) ? Object.assign({}, me.builder, { permissions: me.permissions || null }) : null;
         } catch (_) { /* cosmetic — server enforces the gate regardless */ }
       }
       render(ref ? { kind: kind, id: id, ref: ref, viewer: viewer } : { kind: kind, id: id, notFound: true });

package/modules/hall-ui/public/task.css

@@ -145,3 +145,5 @@
    Empty unless a module fills it, and then it takes no room at all. */
 .tk-contrib { margin: var(--sp-md) 0 0; }
 .tk-contrib:empty { display: none; }
+/* The ship / confirm decision as the shared ask card (task 1004822). */
+.rec-ask { flex: 1 1 100%; margin: 0; }

package/modules/hall-ui/public/task.html

@@ -13,6 +13,7 @@
        shapes. Promoted out of an inline <style> by task 1003305 — the block was
        the hall's last substantive one and sat at its hall_audit ratchet. -->
   <link rel="stylesheet" href="/builders/record.css">
+  <link rel="stylesheet" href="/builders/hall-ask.css">
   <link rel="stylesheet" href="/builders/task.css">
 </head>
 <body data-page="task" data-page-title="Task" data-back-fallback="/work">
@@ -56,7 +57,7 @@
      time so the chrome exists before the deferred page scripts execute. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
+<script src="/builders/shell.js?v=2026-10-25-logo1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded FIRST so task.js can pull from it. -->
@@ -71,6 +72,7 @@
 <!-- task 1003459: the hall's ONE claim/release action (task 1003458) — this
      page's Claim it button consumes it rather than a second hand-rolled POST. -->
 <script src="/builders/claim-action.js?v=2026-09-26-claimaction1" defer></script>
+<script src="/builders/hall-ask.js" defer></script>
 <script src="/builders/task.js?v=2026-09-28-taskclaim" defer></script>
 </body>
 </html>

package/modules/hall-ui/public/task.js

@@ -154,10 +154,13 @@
   // task 759: run a lifecycle action (ship / confirm), then reload so the page
   // re-renders at the new status. On failure, surface the server's refusal and
   // re-enable the button. `load` is hoisted below.
+  // An ask-card chip (decideHtml) keeps its two-line label while it works; a
+  // plain button shows '…' and gets its words back on a refusal.
   async function runLifecycle(btn, url, body, okMsg) {
+    const isAsk = /hask__opt/.test(btn.className || '');
     const orig = btn.textContent;
     btn.disabled = true;
-    btn.textContent = '…';
+    if (!isAsk) btn.textContent = '…';
     try {
       await postJSON(url, body);
       toast(okMsg);
@@ -166,10 +169,23 @@
       if (err && err.message === 'redirecting to auth') return;
       toast(friendlyActionError(err && err.status, err && err.data));
       btn.disabled = false;
-      btn.textContent = orig;
+      if (!isAsk) btn.textContent = orig;
     }
   }
 
+  // The two lifecycle DECISIONS (ship, confirm) as the city's ask card
+  // (hall-ask.js; task 1004822, criterion wa6-hall-reads-like-home). Only a
+  // decision the page waits on gets the card — claim, copy and retire stay plain
+  // controls (owner, 2026-10-23). The chip keeps its id, so the handlers below
+  // bind exactly as they did; without the card script it falls back to a button.
+  function decideHtml(id, q, said, label, result) {
+    if (!window.OTBAsk) return `<button class="td-btn td-btn--primary" type="button" id="${id}">${escapeHtml(label)}</button>`;
+    return window.OTBAsk.html({
+      tag: 'div', cls: 'rec-ask', where: 'This task', q, said, row: true,
+      opts: [{ label, result, rec: true, attrs: { id } }],
+    });
+  }
+
   // Same base-URL logic as work.js's buildPromptForTask / task-detail.js's
   // redirect — the hall is mounted at "/" on builders.<apex> and at "/builders"
   // on the apex host.
@@ -714,18 +730,18 @@
       lifecycle = `<button class="td-btn td-btn--primary" type="button" id="claim-btn">Claim it</button>`;
     } else if (t.status === 'ready') {
       const names = unmetDeps.map((d) => `${d.id}`).join(', ');
-      lifecycle = `<p class="rec-actnote">This task is waiting on ${unmetDeps.length === 1 ? 'task' : 'tasks'} ${escapeHtml(names)}. It cannot be claimed until ${unmetDeps.length === 1 ? 'that one ships' : 'those ship'} — see Blocked by above.</p>`;
+      lifecycle = `<p class="rec-actnote">It is waiting on ${unmetDeps.length === 1 ? 'task' : 'tasks'} ${escapeHtml(names)}. It can be claimed once ${unmetDeps.length === 1 ? 'that ships' : 'those ship'}.</p>`;
     } else if (t.status === 'confirmed' && (isSupervisor || ownsLastClaim)) {
-      lifecycle = `<button class="td-btn td-btn--primary" type="button" id="ship-btn">Ship it</button>`;
+      lifecycle = decideHtml('ship-btn', 'Ship this task?', 'It passed review and was confirmed.', 'Ship it', 'Merges it and pays the credits');
     } else if (t.status === 'completed') {
       lifecycle = rank === 'archon'
-        ? `<button class="td-btn td-btn--primary" type="button" id="confirm-btn">Confirm</button>`
-        : `<p class="rec-actnote">Awaiting the grader, or a confirmation, before it can ship.</p>`;
+        ? decideHtml('confirm-btn', 'Confirm this work?', 'It is done and waiting for a confirmation.', 'Confirm', 'It can ship next')
+        : `<p class="rec-actnote">Waiting for review before it can ship.</p>`;
     } else if (t.status === 'shipped') {
       // A shipped task has no lifecycle control left, so the row says so in words
       // rather than leaving a gap a reader has to interpret. Nothing here is
       // pressable-or-live, so nothing here is warm — the One Warm Thing Rule.
-      lifecycle = `<p class="rec-actnote">This task has shipped and its credits have landed. Neither Ship it nor Confirm is available.</p>`;
+      lifecycle = `<p class="rec-actnote">Shipped. Credits paid.</p>`;
     }
 
     // task 1002858 — RETIRE. Kept out of the button row and behind a disclosure

package/modules/hall-ui/public/thinking.html

@@ -140,7 +140,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
+<script src="/builders/shell.js?v=2026-10-25-logo1"></script>
 <script src="/builders/palette.js" defer></script>
 
 <script src="/builders/idea-objects.js?v=2026-09-27-split"></script>

package/modules/hall-ui/public/tweak-editor.html

@@ -144,7 +144,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
+<script src="/builders/shell.js?v=2026-10-25-logo1"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <script src="/builders/brand-holes.js?v=2026-09-29-aqfix"></script>

package/modules/hall-ui/public/vote-control.js

@@ -0,0 +1,208 @@
+// vote-control.js — THE karma vote control for every hall list of tasks or
+// ideas (task 1004727). One component, reused by the work board, goal task
+// lists, profile task lists and the idea lists; no page carries its own.
+//
+//   OTBVote.taskHtml(task)  markup for a task row, or '' unless the server
+//                           would accept a vote (confirmed or shipped). A row
+//                           that cannot be voted on shows NOTHING, not a
+//                           disabled button (owner, 2026-10-23).
+//   OTBVote.ideaHtml(idea)  markup for an idea row.
+//   OTBVote.hydrate(root)   fills net + "your vote" for every control under
+//                           root, ONE batched read per kind.
+//   OTBVote.cast(button)    posts the click and repaints that row in place.
+//
+// Pages only render the markup. A click listener and a MutationObserver are
+// installed once, so a list that re-renders is hydrated without page code.
+// The server decides who may vote (Metic+, never on your own work); a refusal
+// is shown as a short message and the row is left as it was.
+(function (root) {
+  'use strict';
+  const API = '/api/bongos';
+  const VOTABLE_TASK = new Set(['confirmed', 'shipped']);
+  const ROUTES = {
+    task: { cast: (id) => `${API}/tasks/${id}/vote`, read: `${API}/tasks/peer-votes/lookup` },
+    idea: { cast: (id) => `${API}/inbox/${id}/vote`, read: `${API}/inbox/votes` },
+  };
+  const REFUSALS = {
+    self_vote_forbidden: 'You cannot vote on your own work.',
+    vote_already_counted: 'That vote already counted toward karma, so it is fixed now.',
+    forbidden: 'Voting opens at Metic rank.',
+    insufficient_rank: 'Voting opens at Metic rank.',
+  };
+
+  const esc = (s) => String(s).replace(/[&<>"']/g, (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' }[c]));
+  const netText = (n) => { const v = Number(n) || 0; return v > 0 ? `+${v}` : `${v}`; };
+  const validId = (id) => { const n = Number(id); return Number.isInteger(n) && n > 0 ? n : null; };
+
+  function controlHtml(kind, id) {
+    const n = validId(id);
+    if (n === null || !ROUTES[kind]) return '';
+    const what = kind === 'idea' ? 'this idea' : 'this work';
+    return `<span class="vote" role="group" aria-label="Karma vote on ${what}" data-vote-kind="${kind}" data-vote-id="${n}">`
+      + `<button type="button" class="vote__btn vote__btn--up" data-vote="1" aria-pressed="false" title="Upvote (+1 karma)">▲</button>`
+      + `<span class="vote__net" data-vote-net>·</span>`
+      + `<button type="button" class="vote__btn vote__btn--down" data-vote="-1" aria-pressed="false" title="Downvote (−1 karma)">▼</button>`
+      + `</span>`;
+  }
+
+  function taskVotable(t) { return !!t && VOTABLE_TASK.has(String(t.status || '')); }
+  // A row that already carries its tally (net_votes / my_vote, as the acclaim
+  // feed's does) is painted at render and skips the batched read (task 1004833).
+  function prepainted(html, row) {
+    if (!html || !row || row.net_votes == null) return html;
+    const net = Number(row.net_votes) || 0;
+    const mine = row.my_vote == null ? null : Number(row.my_vote);
+    const press = (v) => `aria-pressed="${mine === v}"`;
+    return html
+      .replace('data-vote-id=', 'data-vote-ready="1" data-vote-id=')
+      .replace('data-vote="1" aria-pressed="false"', `data-vote="1" ${press(1)}`)
+      .replace('data-vote="-1" aria-pressed="false"', `data-vote="-1" ${press(-1)}`)
+      .replace(/vote__btn--up"/, mine === 1 ? 'vote__btn--up is-active"' : 'vote__btn--up"')
+      .replace(/vote__btn--down"/, mine === -1 ? 'vote__btn--down is-active"' : 'vote__btn--down"')
+      .replace('data-vote-net>·<', `data-vote-net>${netText(net)}<`);
+  }
+  function taskHtml(t) { return taskVotable(t) ? prepainted(controlHtml('task', t.id), t) : ''; }
+  // task 1004834: idea votes need idea.vote, resolved server-side into /me and
+  // read through the shell. Known false: no control. Not known yet (/me still
+  // loading): rendered hidden, and hydrate reveals or removes it once known.
+  function ideaVoteAllowed() {
+    const shell = root.OTBShell;
+    const perms = shell && typeof shell.permissions === 'function' ? shell.permissions() : null;
+    if (!perms || typeof perms !== 'object') return null;
+    return perms['idea.vote'] === true;
+  }
+  function ideaHtml(i) {
+    if (!i) return '';
+    const allowed = ideaVoteAllowed();
+    if (allowed === false) return '';
+    const html = prepainted(controlHtml('idea', i.id), i);
+    return allowed ? html : html.replace('data-vote-id=', 'hidden data-vote-id=');
+  }
+
+  function paint(ctl, { net, mine }) {
+    const netEl = ctl.querySelector('[data-vote-net]');
+    if (netEl) netEl.textContent = netText(net);
+    for (const b of ctl.querySelectorAll('[data-vote]')) {
+      const on = mine != null && Number(mine) === Number(b.getAttribute('data-vote'));
+      b.classList.toggle('is-active', on);
+      b.setAttribute('aria-pressed', String(on));
+    }
+    ctl.setAttribute('data-vote-ready', '1');
+  }
+
+  async function errorText(res) {
+    let code = '';
+    try { const body = await res.json(); code = (body && body.error && (body.error.code || body.error)) || ''; } catch { /* no body */ }
+    if (REFUSALS[code]) return REFUSALS[code];
+    if (res.status === 403) return 'Voting opens at Metic rank, and never on your own work.';
+    return 'The vote did not go through. Try again.';
+  }
+
+  function say(msg) {
+    const t = root.OTB && root.OTB.toast;
+    if (typeof t === 'function') t(msg);
+  }
+
+  // Returns null on success, or the message shown for a refusal.
+  async function cast(btn) {
+    const ctl = btn && btn.closest('[data-vote-kind]');
+    if (!ctl) return null;
+    const kind = ctl.getAttribute('data-vote-kind');
+    const id = validId(ctl.getAttribute('data-vote-id'));
+    if (!ROUTES[kind] || id === null) return null;
+    const clicked = Number(btn.getAttribute('data-vote'));
+    const vote = btn.classList.contains('is-active') ? 0 : clicked; // clicking your vote clears it
+    const buttons = ctl.querySelectorAll('[data-vote]');
+    buttons.forEach((b) => { b.disabled = true; });
+    try {
+      const res = await root.fetch(ROUTES[kind].cast(id), {
+        method: 'POST', credentials: 'include',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ vote }),
+      });
+      if (!res.ok) { const msg = await errorText(res); say(msg); return msg; }
+      const data = await res.json();
+      paint(ctl, { net: data.net_votes, mine: data.my_vote });
+      // Tell the list what landed, so a page that holds its rows (a pager) keeps
+      // them in step (task 1004833). Bubbles from the control to the list.
+      if (typeof ctl.dispatchEvent === 'function' && typeof root.CustomEvent === 'function') {
+        ctl.dispatchEvent(new root.CustomEvent('otb-vote', { bubbles: true, detail: { kind, id, net_votes: data.net_votes, my_vote: data.my_vote } }));
+      }
+      return null;
+    } catch {
+      const msg = 'The vote did not go through. Try again.';
+      say(msg);
+      return msg;
+    } finally {
+      buttons.forEach((b) => { b.disabled = false; });
+    }
+  }
+
+  // Reveal or drop idea controls rendered before /me answered (task 1004834).
+  let settleTries = 0;
+  function settleIdeaVisibility(base) {
+    const waiting = Array.prototype.filter.call(base.querySelectorAll('[data-vote-kind]'), (c) => c.getAttribute('data-vote-kind') === 'idea' && c.hasAttribute('hidden'));
+    if (!waiting.length) return;
+    const allowed = ideaVoteAllowed();
+    if (allowed === null) {
+      if (settleTries++ < 20 && typeof root.setTimeout === 'function') root.setTimeout(() => settleIdeaVisibility(base), 500);
+      return;
+    }
+    for (const c of waiting) {
+      if (allowed) c.removeAttribute('hidden');
+      else if (c.parentNode) c.parentNode.removeChild(c);
+    }
+  }
+
+  async function hydrate(scope) {
+    const base = scope || (root.document && root.document.body);
+    if (!base) return;
+    settleIdeaVisibility(base);
+    const byKind = {};
+    for (const ctl of base.querySelectorAll('[data-vote-kind]')) {
+      if (ctl.getAttribute('data-vote-ready')) continue;
+      const kind = ctl.getAttribute('data-vote-kind');
+      const id = validId(ctl.getAttribute('data-vote-id'));
+      if (!ROUTES[kind] || id === null) continue;
+      (byKind[kind] = byKind[kind] || []).push([id, ctl]);
+    }
+    await Promise.all(Object.entries(byKind).map(async ([kind, list]) => {
+      const ids = [...new Set(list.map(([id]) => id))];
+      try {
+        const res = await root.fetch(`${ROUTES[kind].read}?ids=${ids.join(',')}`, { credentials: 'include' });
+        if (!res.ok) return;
+        const votes = ((await res.json()) || {}).votes || {};
+        for (const [id, ctl] of list) paint(ctl, votes[id] || { net: 0, mine: null });
+      } catch { /* a read failure leaves the placeholder; voting still works */ }
+    }));
+  }
+
+  function install(doc) {
+    if (!doc || !doc.addEventListener || root.__otbVoteInstalled) return;
+    root.__otbVoteInstalled = true;
+    doc.addEventListener('click', (ev) => {
+      const btn = ev.target && ev.target.closest && ev.target.closest('[data-vote]');
+      if (!btn || !btn.closest('[data-vote-kind]')) return;
+      // A vote inside a clickable row must not also open the row.
+      ev.preventDefault();
+      ev.stopPropagation();
+      cast(btn);
+    }, true);
+    let queued = false;
+    const later = () => {
+      if (queued) return;
+      queued = true;
+      Promise.resolve().then(() => { queued = false; hydrate(doc.body); });
+    };
+    if (typeof root.MutationObserver === 'function' && doc.body) {
+      new root.MutationObserver(later).observe(doc.body, { childList: true, subtree: true });
+    }
+    later();
+  }
+
+  root.OTBVote = { taskHtml, ideaHtml, taskVotable, hydrate, cast };
+  if (root.document) {
+    if (root.document.readyState === 'loading') root.document.addEventListener('DOMContentLoaded', () => install(root.document));
+    else install(root.document);
+  }
+})(typeof window !== 'undefined' ? window : globalThis);

package/modules/hall-ui/public/watch.html

@@ -27,12 +27,10 @@
   <div class="app-body">
     <header class="app-topbar" id="app-topbar"></header>
     <div class="app-content">
-      <!-- The board page head (task 1003307): the LABEL voice, not a display
-           line, because on a working surface the page's own name is the least
-           interesting thing on it. -->
+      <!-- The page's one h1, for screen readers: no page shows its head (task
+           1004836), so its sub-line went in task 1004829. -->
       <div class="page-head page-head--board">
         <h1 class="page-head__h">Watch</h1>
-        <p class="page-head__sub" id="watch-sub">Loading…</p>
       </div>
 
       <main id="hall-main">
@@ -167,7 +165,7 @@
      chrome exists before the page script runs. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
+<script src="/builders/shell.js?v=2026-10-25-logo1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before watch.js, which pulls from it. -->

package/modules/hall-ui/public/watch.js

@@ -1395,8 +1395,10 @@
   // Boot
   // =========================================================================
 
-  function showSealed(message) {
-    $('#watch-sub').textContent = 'Restricted.';
+  // The sealed panel is also where a failed access check says so: the page head
+  // that used to carry both is hidden (task 1004829).
+  function showSealed(message, heading) {
+    if (heading) $('#sealed-h').textContent = heading;
     const gate = $('#sealed-scroll');
     if (message) $('#sealed-body').textContent = message;
     gate.hidden = false;
@@ -1446,7 +1448,7 @@
       viewerId = (builder && builder.id != null) ? builder.id : null;
     } catch (err) {
       console.error('[watch] failed to read viewer', err);
-      $('#watch-sub').textContent = 'Could not verify your access. Go back and try again.';
+      showSealed('Could not check your access. Reload to try again.', 'Could not load');
       toast('Could not load this page.');
       return;
     }
@@ -1460,7 +1462,6 @@
     }
 
     revealSections();
-    $('#watch-sub').textContent = 'System oversight: people, operations and security.';
 
     // Each section loads independently — one failure must not break the rest.
     loadGate();