@bongos/core 1.21.175 → 1.21.177

package/modules/hall-ui/public/deploy.js

@@ -132,7 +132,7 @@
 
   // ---- why a move stopped, in words (task 1004450) ---------------------------
   //
-  // The runner classifies every failed move (scripts/gds/upgrade-outcome.js) into one of
+  // The runner classifies every failed move (scripts/bongos/upgrade-outcome.js) into one of
   // four kinds, each with a fixed reason code. The page used to show only the runner's raw
   // output, addressed to someone holding a shell. These are the same reasons in the
   // owner's words. A code with no entry falls back to a plain "no words for this" rather
@@ -174,7 +174,7 @@
     integrity_pin: 'the new core did not match the checksum it was published with',
   };
   const reasonWords = (f) => (f && REASON_WORDS[f.reason]) || 'the upgrade stopped for a reason this page has no words for yet';
-  // What the runner's one automatic fix (scripts/gds/wedge-remedy.js) did for a known snag.
+  // What the runner's one automatic fix (scripts/bongos/wedge-remedy.js) did for a known snag.
   const REMEDY_WORDS = {
     dirty_tree: 'saved those changes',
     disk_full: 'cleared out old backups',
@@ -565,16 +565,28 @@
   }
 
   function stepTwoHtml(p, isSelf) {
-    const id = escapeHtml(String(p.instance_id));
+    const id = String(p.instance_id);
+    const to = String(p.recommended_version);
+    // The move is the one decision this page asks of its reader, so it is the hall's
+    // ask card (task 1004829) — drawn only where the server said this viewer's press
+    // would be let through (`viewer_may_move`: the read already took the move's two
+    // doors, and this adds the release building's act-alone rule). Cancel stays a
+    // plain control: it answers nothing, it only steps back.
+    const ask = p.viewer_may_move === true && window.OTBAsk
+      ? window.OTBAsk.html({
+        tag: 'div',
+        q: `Move ${isSelf ? 'the platform' : String(p.slug)} to core ${to}?`,
+        said: `It restarts on ${to}, and goes back to ${p.served_version} if it does not answer.`,
+        row: true,
+        opts: [{ label: `Move to ${to}`, result: 'Restarts it on the new core', rec: true, attrs: { id: `dp-confirm-${id}` } }],
+      })
+      : '<p class="ov-row__sub">This move is decided by the project’s government, not by one person here.</p>';
     return `
       <div class="ps-controls">
         ${changesHtml(p)}
         ${preflightHtml(p)}
-        <p class="ov-row__sub">This restarts ${isSelf ? 'the platform' : escapeHtml(String(p.slug))} onto core
-          <strong>${escapeHtml(String(p.recommended_version))}</strong>. It waits for the box to answer and
-          puts itself back on ${escapeHtml(String(p.served_version))} if it does not.</p>
-        <button type="button" class="btn btn--primary" id="dp-confirm-${id}">Move to ${escapeHtml(String(p.recommended_version))}</button>
-        <button type="button" class="btn" id="dp-cancel-${id}">Cancel</button>
+        ${ask}
+        <button type="button" class="btn" id="dp-cancel-${escapeHtml(id)}">Cancel</button>
       </div>`;
   }
 
@@ -830,7 +842,7 @@
 
   async function load() {
     const slug = scopeSlug();
-    if (!slug && !doorIsHere()) { $('dp-sub').textContent = 'Render'; return; }
+    if (!slug && !doorIsHere()) return;
     try {
       if (!slug) {
         // THE HALL'S OWN PROJECT. On the control plane that is the self row, which is why
@@ -845,7 +857,6 @@
           if (e && e.kind === '403') throw e;
           view.notEnrolled = e.message || 'This platform has no deploy door yet.';
         }
-        $('dp-sub').textContent = (view.box && view.box.slug) || 'This platform';
       } else {
         view = { box: null, isSelf: false, name: slug, notEnrolled: null, unreadable: null };
         const inst = await findBySlug(slug);
@@ -863,7 +874,6 @@
             view.unreadable = (e && e.message) || 'unknown error';
           }
         }
-        $('dp-sub').textContent = slug;
       }
       $('dp-body').hidden = false;
       repaint();
@@ -871,11 +881,9 @@
       if (e && e.kind === '401') return;
       if (e && e.kind === '403') {
         $('dp-sealed').hidden = false;
-        $('dp-sub').textContent = 'Restricted';
         return;
       }
       $('dp-body').hidden = false;
-      $('dp-sub').textContent = 'Unavailable';
       $('dp-panel').innerHTML = `<p class="ps-invalid">${escapeHtml(e.message || 'Could not read the deploy state.')}</p>`;
     }
   }

package/modules/hall-ui/public/diagrams.css

@@ -12,7 +12,7 @@
    exception retires with it, and the hall now carries no substantive inline
    style at all.
 
-   The diagrams themselves are GENERATED (scripts/gds/gen-diagrams.js writes the
+   The diagrams themselves are GENERATED (scripts/bongos/gen-diagrams.js writes the
    .svg/.png pair and assertions.json in lockstep) — never hand-edit a .mmd. */
 
 /* The key sits above the figures on the ground of its own panel, wrapping to a

package/modules/hall-ui/public/diagrams.html

@@ -24,20 +24,17 @@
   <div class="app-body">
     <header class="app-topbar" id="app-topbar"></header>
     <div class="app-content">
-      <!-- The page had no <h1> at all before task 1003306, so it failed
-           one-header-main-h1 on every render. The reading room's head: the
-           label voice on the eyebrow, the room's name in the display face. -->
+      <!-- The page's one h1, for screen readers: no page shows its head (task
+           1004836), so its eyebrow and sub-line went in task 1004828. -->
       <div class="page-head page-head--room">
-        <p class="page-head__eyebrow">Docs</p>
         <h1 class="page-head__h">How the system works</h1>
-        <p class="page-head__sub">Five diagrams that show, at a glance, how work flows through {{worldName}}'s development system. <em>Drag to pan, scroll to zoom</em> — or open any diagram fullscreen.</p>
       </div>
 
       <main id="hall-main">
 
         <section class="scroll" aria-labelledby="legend-h">
           <h2 id="legend-h" class="scroll__h">Reading the diagrams</h2>
-          <p class="scroll__lede">The system is mid-build. These diagrams deliberately separate what stands today from what is yet planned, so they double as an honest snapshot of where we are.</p>
+          <p class="scroll__lede">How work flows through {{worldName}}, in five diagrams. Each marks what is built and what is still planned. <em>Drag to pan, scroll to zoom</em>, or open one fullscreen.</p>
           <div class="legend">
             <span class="legend__item"><span class="legend__swatch legend__swatch--live">● LIVE</span> built &amp; enforced today</span>
             <span class="legend__item"><span class="legend__swatch legend__swatch--planned">⤍ PLANNED</span> designed, task-tracked, not yet built</span>
@@ -71,7 +68,7 @@
 
         <section class="scroll" aria-labelledby="d4-h">
           <h2 id="d4-h" class="scroll__h">4 · The complete architecture</h2>
-          <p class="scroll__lede">Where your work runs and how it reaches production, in one diagram. <strong>Your machine</strong> holds the worker, the code, and your local memory; the <strong>server</strong> is both the authority and production; <strong>GitHub</strong> holds the repo. Follow the numbered path to see how your work gets to prod. This is the largest diagram — <em>drag to pan, scroll to zoom, or open it fullscreen</em>.</p>
+          <p class="scroll__lede">Where your work runs and how it reaches production. <strong>Your machine</strong> holds the worker, the code and your local memory; the <strong>server</strong> is the authority and production; <strong>GitHub</strong> holds the repo. Follow the numbered path.</p>
           <figure class="diagram">
             <img src="diagrams/04-architecture.png" alt="The complete architecture: your machine (the worker, the code, and local memory), the server (authority and production, with Postgres, the server-side memory store, and the push credential), and GitHub (branch-protected main). Numbered edges show how a change travels from your machine to production; the per-builder memory layer syncs between your machine and the server.">
             <figcaption>Your machine · memory · server (authority + prod) · GitHub — and the full path from your machine to production.</figcaption>
@@ -99,7 +96,7 @@
      time so the chrome exists before the deferred page scripts execute. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
+<script src="/builders/shell.js?v=2026-10-25-logo1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/diagram-viewer.js?v=2026-06-14-diagviewer-1" defer></script>

package/modules/hall-ui/public/diagrams.states.json

@@ -4,7 +4,7 @@
   "surface": "hall-ui",
   "stub": { "prefix": "/builders/" },
   "modeQuery": false,
-  "_feeds": "The diagrams are generated PNG/SVG pairs written by scripts/gds/gen-diagrams.js and served from /builders/diagrams/*; the kit's stub has neither those nor the hall's feeds, so both are declared. diagram-viewer.js upgrades each <img> into a pan/zoom canvas only once its .svg fetch succeeds — under the stub it does not, so what renders here is the graceful-degradation path: the framed figure with a static image in it. That IS the state to measure, because it is what a reader gets whenever the vector is unavailable.",
+  "_feeds": "The diagrams are generated PNG/SVG pairs written by scripts/bongos/gen-diagrams.js and served from /builders/diagrams/*; the kit's stub has neither those nor the hall's feeds, so both are declared. diagram-viewer.js upgrades each <img> into a pan/zoom canvas only once its .svg fetch succeeds — under the stub it does not, so what renders here is the graceful-degradation path: the framed figure with a static image in it. That IS the state to measure, because it is what a reader gets whenever the vector is unavailable.",
   "ignoreRequests": [
     "/api/(gds|bongos)/me$",
     "/api/(gds|bongos)/me/",

package/modules/hall-ui/public/drachmae.html

@@ -28,14 +28,10 @@
     <header class="app-topbar" id="app-topbar"></header>
     <div class="app-content">
 
-      <!-- The reading room announces its document (task 1003306's archetype):
-           the label voice on a one-word eyebrow, then the room's name lowercase
-           in the display face. The sub line says what KIND of document this is,
-           not how long it takes: nobody reads a reference to the end. -->
+      <!-- The page's one h1, for screen readers: no page shows its head (task
+           1004836), so its eyebrow and sub-line went in task 1004828. -->
       <div class="page-head page-head--room">
-        <p class="page-head__eyebrow">Docs</p>
         <h1 class="page-head__h">Drachmae &amp; karma</h1>
-        <p class="page-head__sub">How you get paid, and how you earn trust. A reference to jump around in: every section has its own link, and the bounty rates are read live.</p>
       </div>
 
       <main id="hall-main">
@@ -100,7 +96,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
+<script src="/builders/shell.js?v=2026-10-25-logo1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/md-reader.js?v=2026-09-02-mdreader-2"></script>

package/modules/hall-ui/public/fleet.html

@@ -20,9 +20,10 @@
   <div class="app-body">
     <header class="app-topbar" id="app-topbar"></header>
     <div class="app-content">
+      <!-- The page's one h1, for screen readers: no page shows its head (task
+           1004836), so its sub-line went in task 1004829. -->
       <div class="page-head page-head--board">
         <h1 class="page-head__h">Fleet costs</h1>
-        <p class="page-head__sub" id="fl-sub">Loading…</p>
       </div>
 
       <main id="hall-main">
@@ -56,7 +57,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
+<script src="/builders/shell.js?v=2026-10-25-logo1"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>
 <script src="/builders/hall-kit.js"></script>

package/modules/hall-ui/public/fleet.js

@@ -14,7 +14,6 @@
 
   function fail(message) {
     $('fl-body').hidden = false;
-    $('fl-sub').textContent = 'Unavailable';
     $('fl-panel').innerHTML = `<p class="ps-invalid">${escapeHtml(message)}</p>`;
   }
 
@@ -28,15 +27,12 @@
     if (res.status === 401) { window.location.assign(`${API}/auth/web/start`); return; }
     if (res.status === 403) {
       $('fl-sealed').hidden = false;
-      $('fl-sub').textContent = 'Restricted';
       return;
     }
     if (!res.ok) {
       const err = (res.data && res.data.error) || {};
       return fail(err.message && err.message !== err.code ? err.message : 'Could not read the fleet costs.');
     }
-    const n = ((res.data && res.data.instances) || []).length;
-    $('fl-sub').textContent = `${n} project${n === 1 ? '' : 's'}`;
     $('fl-body').hidden = false;
     $('fl-panel').innerHTML = window.OTBFleetCosts.ledgerHtml(res.data);
   }

package/modules/hall-ui/public/gate.html

@@ -10,6 +10,7 @@
   <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
   <link rel="stylesheet" href="/builders/style.css?v=2026-07-02-shell1">
   <link rel="stylesheet" href="/builders/oversight.css">
+  <link rel="stylesheet" href="/builders/hall-ask.css">
   <link rel="stylesheet" href="/builders/gate.css">
 </head>
 <body data-page="gate" data-page-title="Gate">
@@ -20,12 +21,10 @@
   <div class="app-body">
     <header class="app-topbar" id="app-topbar"></header>
     <div class="app-content">
-      <!-- The board page head (task 1003307): the LABEL voice, not a display
-           line, because on a working surface the page's own name is the least
-           interesting thing on it. -->
+      <!-- The page's one h1, for screen readers: no page shows its head (task
+           1004836), so its sub-line went in task 1004829. -->
       <div class="page-head page-head--board">
         <h1 class="page-head__h">Gate</h1>
-        <p class="page-head__sub" id="gate-sub">Loading…</p>
       </div>
 
       <main id="hall-main">
@@ -62,7 +61,7 @@
 
           <section class="scroll" aria-labelledby="gate-list-h">
             <h2 class="scroll__h" id="gate-list-h">Held pull requests</h2>
-            <p class="scroll__lede">Each one touched a protected surface and stopped at the gate check. Approving records your seal on that commit and re-runs the check.</p>
+            <p class="scroll__lede">Each one touched a protected surface and stopped at the gate check.</p>
             <div id="gate-list"><span class="kit-skel"></span></div>
             <p class="ov-foot" id="gate-checking" hidden></p>
           </section>
@@ -74,16 +73,17 @@
   </div>
 </div>
 
-<div id="gate-modal-root"></div>
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
+<script src="/builders/shell.js?v=2026-10-25-logo1"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>
 <script src="/builders/hall-kit.js"></script>
+<!-- the shared ask card a held PR is drawn with (task 1004829) -->
+<script src="/builders/hall-ask.js"></script>
 <script src="/builders/gate.js?v=2026-10-01-runner-checklist"></script>
 </body>
 </html>

package/modules/hall-ui/public/gate.js

@@ -1,11 +1,13 @@
 // public-builders/gate.js — The Gate (/builders/gate).
 //
-// Archon-only approval view for gate-surface PRs (task 1179, ADR 0058 amendment).
+// The approval view for gate-surface PRs (task 1179, ADR 0058 amendment).
 // A pull request that touches the build's protected machinery is held by the
 // gate-review CI check until the owner approves. This page lists every such PR
 // as one oversight row (task 1003469) with WHY it was stopped (the same
-// classifier the CI runs), and an Approve button that records the owner's seal
-// (a server-set gate-owner-approved status) and re-runs the check so the PR merges.
+// classifier the CI runs). Approving records the owner's seal (a server-set
+// gate-owner-approved status) and re-runs the check so the PR merges. It is the
+// page's one real decision, so a held PR is the hall's ask card (task 1004829) —
+// drawn only for a viewer the approve route would let through.
 //
 // Like The Watch, this reads /api/bongos/me to show a Sealed notice for
 // non-Archons — DEFENCE IN DEPTH only. GET /gate-approvals + POST
@@ -66,64 +68,22 @@
   // How many files a row shows before it names the rest as a count.
   const FILES_SHOWN = 12;
 
-  // ---- modal (the oversight family's, oversight.css) -----------------------
-
-  function closeModal() {
-    const root = document.getElementById('gate-modal-root');
-    if (root) root.innerHTML = '';
-  }
-
-  function openModal({ title, bodyHtml, confirmLabel, onConfirm }) {
-    const root = document.getElementById('gate-modal-root');
-    root.innerHTML = '';
-    const bg = document.createElement('div');
-    bg.className = 'ov-modal-bg';
-    bg.innerHTML =
-      `<div class="ov-modal" role="dialog" aria-modal="true" aria-labelledby="gate-modal-h">
-        <h2 class="scroll__h" id="gate-modal-h">${escapeHtml(title)}</h2>
-        ${bodyHtml}
-        <div class="ov-modal__actions">
-          <button type="button" class="btn-ghost" data-act="cancel">Cancel</button>
-          <button type="button" class="btn-accent" data-act="confirm">${escapeHtml(confirmLabel)}</button>
-        </div>
-      </div>`;
-    bg.addEventListener('click', (e) => { if (e.target === bg) closeModal(); });
-    bg.addEventListener('keydown', (e) => { if (e.key === 'Escape') closeModal(); });
-    bg.querySelector('[data-act=cancel]').addEventListener('click', closeModal);
-    bg.querySelector('[data-act=confirm]').addEventListener('click', () => onConfirm(bg));
-    root.appendChild(bg);
-    const confirm = bg.querySelector('[data-act=confirm]');
-    if (confirm) confirm.focus();
-  }
-
   // ---- actions -------------------------------------------------------------
 
-  function confirmApprove(pr) {
-    const floors = (pr.reasons || []).filter((r) => r.hard_floor).map((r) => r.path);
-    const what = floors.length
-      ? `the hard-floor surface ${floors.slice(0, 3).map((p) => `<span class="ov-key">${escapeHtml(p)}</span>`).join(', ')}`
-      : 'a protected build surface';
-    openModal({
-      title: `Approve PR #${pr.number}?`,
-      bodyHtml:
-        `<p>Record your owner approval for <strong>${escapeHtml(pr.title || `PR #${pr.number}`)}</strong>${pr.task ? ` (task ${pr.task})` : ''}.</p>
-         <p>This clears ${what}. The gate check re-runs and the PR merges once it goes green. Your approval applies only to commit <span class="ov-key">${escapeHtml(shortSha(pr.head_sha))}</span>; a later push must be re-approved.</p>`,
-      confirmLabel: 'Approve & re-run',
-      onConfirm: async (modal) => {
-        const btn = modal.querySelector('[data-act=confirm]');
-        if (btn) { btn.disabled = true; btn.textContent = 'Approving…'; }
-        try {
-          const r = await sendJson('POST', `/gate-approvals/${pr.number}/approve`, {});
-          toast(r.message || 'Approval recorded.');
-          closeModal();
-          load();
-        } catch (err) {
-          if (err && err.kind === '401') return;
-          if (btn) { btn.disabled = false; btn.textContent = 'Approve & re-run'; }
-          toast(`Could not approve: ${err.message || err}`);
-        }
-      },
-    });
+  // The card IS the confirmation (task 1004829): its question names the PR and
+  // its answer's result line says what approving does, so the old modal that
+  // repeated both is gone. A failed press gives the chip back.
+  async function approve(pr, btn) {
+    if (btn) btn.disabled = true;
+    try {
+      const r = await sendJson('POST', `/gate-approvals/${pr.number}/approve`, {});
+      toast(r.message || 'Approval recorded.');
+      load();
+    } catch (err) {
+      if (err && err.kind === '401') return;
+      if (btn) btn.disabled = false;
+      toast(`Could not approve: ${err.message || err}`);
+    }
   }
 
   // ---- render --------------------------------------------------------------
@@ -133,7 +93,7 @@
   // author, sha, diff, every hold reason and the changed files — and every one
   // of them survives the rebuild: the verdict is a state pill instead of a band,
   // the reasons are hairline detail lines, the files are chips.
-  function renderRow(pr) {
+  function renderRow(pr, mayApprove) {
     const floor = pr.verdict !== 'needs_trust';
     const reasons = (pr.reasons || []).map((r) =>
       `<li class="gate-reason${r.hard_floor ? ' gate-reason--floor' : ''}">` +
@@ -141,7 +101,7 @@
       `<span>${escapeHtml(r.reason)}</span>` +
       (r.hard_floor ? '<span class="gate-reason__floor">hard floor</span>' : '') +
       '</li>').join('')
-      || '<li><span>This PR is held by the gate-review check.</span></li>';
+      || '<li><span>Held by the gate check.</span></li>';
 
     const files = pr.files || [];
     const chips = files.slice(0, FILES_SHOWN).map((f) =>
@@ -160,23 +120,46 @@
       `<span class="ov-fact"><a href="${escapeHtml(pr.url)}/files" target="_blank" rel="noopener">view diff</a></span>`,
     ].filter(Boolean).join('');
 
+    const title = `<a class="ov-row__title" href="${escapeHtml(pr.url)}" target="_blank" rel="noopener">${escapeHtml(pr.title || `PR #${pr.number}`)}<span class="ov-mono">#${escapeHtml(String(pr.number))}</span></a>`;
+    const detail = `<div class="ov-row__facts">${facts}</div>
+         <ul class="ov-lines">${reasons}</ul>
+         ${filesHtml}`;
+
+    // The decision, as the ask card — only where the server said this viewer's
+    // approval would be let through (`viewer_may_approve`: the approve route's
+    // permission AND the release building's act-alone rule). Everyone else reads
+    // the same facts as a plain row.
+    if (mayApprove && !pr.already_approved && window.OTBAsk) {
+      const holder = document.createElement('ul');
+      holder.innerHTML = window.OTBAsk.html({
+        q: `Let PR #${pr.number} through?`,
+        saidHtml: title + detail,
+        row: true,
+        opts: [{
+          label: 'Approve',
+          result: `Clears the hold on ${shortSha(pr.head_sha)}; it merges once the check passes`,
+          rec: true,
+          attrs: { 'data-act': 'approve' },
+        }],
+      });
+      const card = holder.firstElementChild;
+      const btn = card.querySelector('[data-act=approve]');
+      if (btn) btn.addEventListener('click', () => approve(pr, btn));
+      return card;
+    }
+
     const action = pr.already_approved
       ? '<span class="ov-fact ov-ok">Approved. Re-check pending.</span>'
-      : '<button type="button" class="btn-accent" data-act="approve">Approve</button>';
+      : '<span class="ov-fact">Waiting for approval</span>';
 
     const el = document.createElement('li');
     el.className = 'ov-row';
     el.innerHTML =
       `<div class="ov-row__main">
-         <a class="ov-row__title" href="${escapeHtml(pr.url)}" target="_blank" rel="noopener">${escapeHtml(pr.title || `PR #${pr.number}`)}<span class="ov-mono">#${escapeHtml(String(pr.number))}</span></a>
-         <div class="ov-row__facts">${facts}</div>
-         <ul class="ov-lines">${reasons}</ul>
-         ${filesHtml}
+         ${title}
+         ${detail}
        </div>
        <div class="ov-row__right">${action}</div>`;
-
-    const approveBtn = el.querySelector('[data-act=approve]');
-    if (approveBtn) approveBtn.addEventListener('click', () => confirmApprove(pr));
     return el;
   }
 
@@ -186,9 +169,9 @@
     const floors = awaiting.filter((p) => p.verdict === 'escalate').length;
     const trust = awaiting.filter((p) => p.verdict === 'needs_trust').length;
     const tiles = [
-      ['Awaiting your approval', fmtInt(awaiting.length), 'held at the gate check'],
-      ['Hard-floor holds', fmtInt(floors), 'touch a surface only an owner may clear'],
-      ['Trust holds', fmtInt(trust), 'an author the gate does not yet trust'],
+      ['Held', fmtInt(awaiting.length), 'at the gate check'],
+      ['Hard floor', fmtInt(floors), 'only an owner may clear'],
+      ['Needs trust', fmtInt(trust), 'an author not yet trusted'],
     ];
     document.getElementById('gate-summary').innerHTML = tiles.map(([label, num, sub]) =>
       `<div class="stat-tile"><span class="stat-tile__label">${escapeHtml(label)}</span><span class="stat-tile__num">${num}</span><span class="stat-tile__sub">${escapeHtml(sub)}</span></div>`).join('');
@@ -211,18 +194,18 @@
     renderSummary(awaiting);
 
     if (awaiting.length === 0) {
-      list.innerHTML = emptyStateHtml('Nothing is waiting. No held change needs your approval.');
+      list.innerHTML = emptyStateHtml('Nothing is held.');
     } else {
       list.innerHTML = '';
       const rows = document.createElement('ul');
       rows.className = 'ov-rows';
-      for (const pr of awaiting) rows.appendChild(renderRow(pr));
+      for (const pr of awaiting) rows.appendChild(renderRow(pr, resp.viewer_may_approve === true));
       list.appendChild(rows);
     }
 
     if (resp.checking > 0) {
       checkingEl.hidden = false;
-      checkingEl.textContent = `${resp.checking} more PR${resp.checking === 1 ? '' : 's'} still being checked. Refresh shortly.`;
+      checkingEl.textContent = `${resp.checking} more PR${resp.checking === 1 ? ' is' : 's are'} still being checked.`;
     } else {
       checkingEl.hidden = true;
     }
@@ -231,7 +214,6 @@
   function showSealed() {
     document.getElementById('gate-sealed').hidden = false;
     document.getElementById('gate-body').hidden = true;
-    document.getElementById('gate-sub').textContent = 'Restricted.';
     // The floor in the pack's own words (ADR 0157: metic), never a rank spelled into the source.
     const body = document.getElementById('gate-sealed-body');
     if (body) body.textContent = `Available from the ${rankLabel('metic')} rank up.`;
@@ -609,7 +591,6 @@
     // they were just admitted to.
     if (rank !== 'metic' && rank !== 'archon') { showSealed(); return; }
 
-    document.getElementById('gate-sub').textContent = 'Changes touching protected build surfaces, held for your approval.';
     document.getElementById('gate-body').hidden = false;
     if (rank === 'archon') {
       document.getElementById('fence-panel').hidden = false;

package/modules/hall-ui/public/goal-map.html

@@ -139,7 +139,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-18-core-move1"></script>
+<script src="/builders/shell.js?v=2026-10-25-logo1"></script>
 <script src="/builders/palette.js" defer></script>
 
 <script src="/builders/idea-objects.js?v=2026-09-27-split"></script>

package/modules/hall-ui/public/goals-page.js

@@ -763,9 +763,9 @@
     completion: '#goal-completion-view',
   };
   const SUB_SUBTITLE = {
-    dependencies: 'Goal dependencies — which tasks wait on which, and which open tasks touch the same files.',
-    members: 'Goal members — who’s on this goal and what they’ve contributed to it.',
-    completion: 'Goal completion — every done-when criterion, with its full detail.',
+    dependencies: 'What waits on what, and which tasks touch the same files.',
+    members: 'Who is on this goal, and what they did.',
+    completion: 'Every done-when line, in full.',
   };
   function setView(goalId, view) {
     view = view || (goalId == null ? 'list' : 'detail');
@@ -782,8 +782,8 @@
     const sub = $('#goals-sub');
     if (sub) {
       sub.textContent = view === 'list'
-        ? 'Shared goals: progress, members, and the work remaining.'
-        : (SUB_SUBTITLE[view] || 'Goal detail — completion, members, dependencies, and the work queue.');
+        ? 'What we are building, and how far along each goal is.'
+        : (SUB_SUBTITLE[view] || 'One goal: progress, people and work.');
     }
     window.scrollTo({ top: 0 });
   }

package/modules/hall-ui/public/goals-render.js

@@ -435,7 +435,7 @@
     return tasks.map((t) => `
       <tr class="ledger__row--task" data-task-id="${escapeHtml(String(t.id))}" style="cursor:pointer" title="Open task #${escapeHtml(String(t.id))}">
         <td class="ledger__num">#${escapeHtml(String(t.id))}</td>
-        <td>${escapeHtml(t.title || '')}</td>
+        <td>${escapeHtml(t.title || '')}${window.OTBVote ? ` ${window.OTBVote.taskHtml(t)}` : ''}</td>
         <td>${window.OTB.kindIsUnset(t.kind) ? '—' : escapeHtml(t.kind)}</td>
         <td class="ledger__drachmae">${fmtNum(creditVal(t))}${taskSettled(t) ? '' : ' <span class="ledger__est" title="Estimate — credits settle when the task is confirmed">est.</span>'}</td>
         <td class="ledger__date">${fmtDate(t.shipped_at)}</td>
@@ -1409,26 +1409,25 @@
   function pendingRequestsHtml(rows) {
     const requests = rows.filter((r) => r.kind === 'request');
     const invites = rows.filter((r) => r.kind === 'invite');
-    const requestLi = (r) => `<li class="pending-row">
-        <span class="pending-row__who">${escapeHtml(pendingRequestWho(r))}</span>
-        ${r.note ? `<span class="pending-row__note">“${escapeHtml(r.note)}”</span>` : ''}
-        <span class="pending-row__actions">
-          <button class="btn-ghost" type="button" data-approve-req="${escapeHtml(String(r.id))}">Approve</button>
-          <button class="btn-ghost" type="button" data-deny-req="${escapeHtml(String(r.id))}">Deny</button>
-        </span>
-      </li>`;
+    // A join request is a decision, so it is the city's ask card (hall-ask.js, task 1004823); this
+    // panel only loads for a goal manager (loadDetail's canManage). Chips carry the handler's data-*.
+    const requestLi = (r) => window.OTBAsk.html({
+      cls: 'pending-ask', where: 'Join request', q: `Let ${pendingRequestWho(r)} join?`, said: r.note ? `“${r.note}”` : '', row: true,
+      opts: [{ label: 'Let them in', result: 'They join this goal', rec: true, attrs: { 'data-approve-req': String(r.id) } },
+        { label: 'Say no', result: 'The request closes', attrs: { 'data-deny-req': String(r.id) } }],
+    });
     // task 1002971 — an invitation the goal SENT can now be taken back by the
     // people who sent it (core_188's 'cancelled' = "withdrawn/rescinded by the
     // opener"); before this the only un-send was asking the invitee to decline.
     const inviteLi = (r) => `<li class="pending-row">
         <span class="pending-row__who">${escapeHtml(pendingRequestWho(r))}</span>
-        <span class="pending-row__note">invited — awaiting their response</span>
+        <span class="pending-row__note">invited, no answer yet</span>
         <span class="pending-row__actions">
           <button class="btn-ghost" type="button" data-rescind-inv="${escapeHtml(String(r.id))}">Rescind</button>
         </span>
       </li>`;
     const parts = [];
-    if (requests.length) parts.push(`<div class="pending-group"><h3 class="pending-group__h">Join requests<span class="count-pill">${requests.length}</span></h3><ul class="pending-list">${requests.map(requestLi).join('')}</ul></div>`);
+    if (requests.length) parts.push(`<div class="pending-group"><h3 class="pending-group__h">Join requests<span class="count-pill">${requests.length}</span></h3><ul class="pending-list pending-list--ask">${requests.map(requestLi).join('')}</ul></div>`);
     if (invites.length) parts.push(`<div class="pending-group"><h3 class="pending-group__h">Pending invitations<span class="count-pill">${invites.length}</span></h3><ul class="pending-list">${invites.map(inviteLi).join('')}</ul></div>`);
     return parts.join('');
   }

package/modules/hall-ui/public/goals.css

@@ -576,3 +576,13 @@
 .goal-author__suggest li a { display: inline-block; min-height: 24px; line-height: 24px; }
 .goal-author__err { color: var(--danger); margin: 0; }
 .goal-author__open { margin-top: 8px; }
+/* task 1004836: no top block, so New goal and the goal map sit on the list's
+   own line, and the way back sits inside the goal's panel. The author form
+   opens as a full-width row under the line. */
+.goals-line__acts, #goal-author-mount { display: contents; }
+.goals-line .goals-count-line { margin-right: auto; }
+.goals-line__map { display: inline-flex; align-items: center; min-height: 26px; padding: 0 4px; font-size: 13px; color: var(--ink-soft); }
+.goals-line .goal-author { flex: 1 1 100%; order: 9; margin: 6px 0 0; }
+.goal-detail__back { margin: 0 0 10px; font-size: 13px; }
+/* Join requests are the shared ask card (task 1004823): no ledger rules between cards. */
+.pending-list--ask { gap: 10px; }