@bongos/core 1.21.26 → 1.21.27

package/modules/hall-ui/public/watch.html

@@ -162,7 +162,7 @@
 
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
-<script src="/builders/shell.js?v=2026-10-02-back"></script>
+<script src="/builders/shell.js?v=2026-10-02-trail"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before watch.js, which pulls from it. -->

package/modules/hall-ui/public/work.html

@@ -171,7 +171,7 @@
 
 <!-- The app shell (sidebar + top bar + footer). Dependency-free; runs at parse
      time so the chrome exists before the deferred page scripts execute. -->
-<script src="/builders/shell.js?v=2026-10-02-back"></script>
+<script src="/builders/shell.js?v=2026-10-02-trail"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded FIRST so work.js can pull from it. -->

package/modules/hall-ui/records/hall-navigation.md

@@ -1,4 +1,4 @@
-# Hall navigation — the Back link and the standard full-screen switch (tasks 1004430, 1004477)
+# Hall navigation — the Back link and its trail, and the standard full-screen switch (tasks 1004430, 1004477, 1004476)
 
 Covers: every shelled hall page (`shell.js`, `style.css`), plus `goal-map.html` joining the chrome.
 
@@ -11,6 +11,11 @@ Covers: every shelled hall page (`shell.js`, `style.css`), plus `goal-map.html`
   - `<body data-back-fallback="/work">` names where Back goes when there is no origin (a deep-linked task falls back to Tasks, an idea to Your thinking, the tweak editor to Studio). It is honoured only as a path on this host; a sidebar hop still shows nothing.
   - A link marked `[data-shell-exit]` is a second exit a page places: the task record's actions row and its two failure renders, the primer and drachmae error notes, and the tweak editor's bar. The shell fills its `href` and its words ("Back to goal 12", "Back to tasks"), and with no way back at all it goes home. A page that renders one after boot calls `OTBShell.fillExits(root)`.
   - The origin's own `?from=` is dropped so back links never chain, and a `?from=` naming the page itself is refused.
+- **The trail (task 1004476).** Two or more clicks deep the Back link grows into a breadcrumb: "‹ Goals › goal 12 › task 340", each crumb a link and the last one `#topbar-back` itself. One step back renders exactly the old Back link.
+  - It lives per tab in `sessionStorage['hall-nav-trail']`, a list of `{href,label}` crumbs ending with the current page. A drill-down (origin found in the trail) cuts after the origin and appends; returning to a crumb (this page is in the trail and the origin sits after it, or there is none) trims after it; an origin the trail does not know starts fresh, so `?from=`, referrer and `data-back-fallback` still decide the first crumb; a sidebar hop starts over with no trail.
+  - A referrer has no `#hash`, so a referrer origin matches the latest crumb on the same address: a task opened from `/goals#/goal/12` finds "goal 12", not "Goals". Hash routes (a goal opened on `/goals`, the hall's overlays) update the trail on `hashchange`: a record hash appends, a held crumb trims, any other view only renames the page's own crumb.
+  - Capped at four crumbs, oldest dropped. Stored crumbs pass the same host-path check as the fallback and are escaped when drawn. Storage that throws keeps the one-step Back.
+  - Width folds it: at 640px the middle becomes "…"; at 480px the first crumb joins it, the "…" becomes a link to the trail's start (titled with what it hides), and the bar's page name hides while a trail shows; at 360px only the Back arrow is left. Measured with no sideways scroll at 320, 390, 600 and 1280.
 - `/profile?id=N` highlights **Builders**, not your own Profile, unless `/me` says the id is yours.
 
 ## Full screen is standard
@@ -22,4 +27,4 @@ Covers: every shelled hall page (`shell.js`, `style.css`), plus `goal-map.html`
 
 `goal-map.html` now uses thinking.html's structure: sidebar and top-bar mounts, `style.css`, `shell.js`, the sky inside `<main id="hall-main" class="sky-stage">`, and a `<div class="brand">` because the shell's bar is the page's one `<header>`. In `thinking.css` both pages share one stage rule, `body[data-page] .sky-stage`. No hall page is standalone any more (`tests/hall_audit.mjs` `STANDALONE_EXEMPT` is empty).
 
-Tests: `tests/hall_fullscreen.mjs` (the standard switch, `plain`, Back link, fallback and exit cases), `tests/hall_record_world.mjs` §10 (the record places its exit), `tests/goal_map_page.mjs`, `tests/hall_audit.mjs` §8.
+Tests: `tests/hall_fullscreen.mjs` (the standard switch, `plain`, Back link, trail, fallback and exit cases), `tests/hall_record_world.mjs` §10 (the record places its exit), `tests/goal_map_page.mjs`, `tests/hall_audit.mjs` §8.

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.26",
+  "version": "1.21.27",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.21.26",
+      "version": "1.21.27",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.26",
+  "version": "1.21.27",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -8912,5 +8912,11 @@
       "id": "1003623",
       "text": "Fixed idea-triage cluster handling: 'keep #N' and 'merge #N' now parse; skipped clusters count toward the summary; spark ideas excluded from batch clustering; stale Step 1.5 refs now point at 1.5b. Tests added in tests/idea_tr"
     }
+  ],
+  "1.21.27": [
+    {
+      "id": "1004476",
+      "text": "In the builders' hall, a page you reach through several clicks now shows the whole way back at the top, like Goals > goal 12 > task 340, and each step is a link. Clicking an earlier step takes you straight there; the sidebar s"
+    }
   ]
 }

package/src/module-api.js

@@ -75,7 +75,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // MAJOR (see allowBoxScope below): passes the request through untouched.
 function deprecatedNoopMiddleware(_req, _res, next) { next(); }
 
-const CORE_VERSION = '1.21.26'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.21.27'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('discord'); log.info('mounted');

package/tests/hall_fullscreen.mjs

@@ -33,7 +33,8 @@ const read = (f) => fs.readFileSync(path.join(HALL, f), 'utf8');
 // <body data-back-fallback> and `exits` how many [data-shell-exit] links the
 // page placed for the shell to fill (task 1004477).
 function boot({ page = 'thinking', optIn = true, store = {}, storageThrows = false,
-  referrer = '', search = '', session = {}, fallback = null, exits = 0, path = null, meId = null } = {}) {
+  referrer = '', search = '', session = {}, fallback = null, exits = 0, path = null, meId = null,
+  hash = '', sessionThrows = false } = {}) {
   const els = new Map();
   const windowListeners = {};
   const timers = [];
@@ -87,11 +88,13 @@ function boot({ page = 'thinking', optIn = true, store = {}, storageThrows = fal
     addEventListener() {}, dispatchEvent() {},
     get cookie() { return ''; }, set cookie(_v) {},
   };
-  const location = { hostname: 'h', origin: 'https://h', href: 'https://h/' + page + search, pathname: path || '/' + page, hash: '', search, assign() {}, replace() {} };
+  const location = { hostname: 'h', origin: 'https://h', href: 'https://h/' + page + search, pathname: path || '/' + page, hash, search, assign() {}, replace() {} };
+  // `session` is the TAB's sessionStorage: pass one object to several boots and
+  // they are page loads in one tab (the trail, task 1004476).
   const sessionStorage = {
-    getItem: (k) => (k in session ? session[k] : null),
-    setItem: (k, v) => { session[k] = String(v); },
-    removeItem: (k) => { delete session[k]; },
+    getItem: (k) => { if (sessionThrows) throw new Error('SecurityError'); return k in session ? session[k] : null; },
+    setItem: (k, v) => { if (sessionThrows) throw new Error('SecurityError'); session[k] = String(v); },
+    removeItem: (k) => { if (sessionThrows) throw new Error('SecurityError'); delete session[k]; },
   };
   const localStorage = {
     getItem: (k) => { if (storageThrows) throw new Error('SecurityError'); return k in store ? store[k] : null; },
@@ -131,6 +134,11 @@ function boot({ page = 'thinking', optIn = true, store = {}, storageThrows = fal
     shell: () => windowObj.OTBShell,
     session,
     resizes: () => resizes,
+    // A hash route moving without a page load (a goal opened on /goals).
+    go(h) { location.hash = h; for (const fn of windowListeners.hashchange || []) fn({ type: 'hashchange' }); },
+    trail: () => JSON.parse(session['hall-nav-trail'] || '[]').map((c) => c.label),
+    crumbs: () => [...topbar._html.matchAll(/class="topbar-crumb" href="([^"]*)">([^<]*)</g)].map((m) => `${m[2]} ${m[1]}`),
+    back: () => { const m = /id="topbar-back" href="([^"]*)"[^>]*>(?:<svg[\s\S]*?<\/svg>)?<span class="topbar-back__label">([^<]*)</.exec(topbar._html); return m ? `${m[2]} ${m[1]}` : null; },
     // Press a key the way the browser dispatches it: every window listener,
     // then the page may mark the press used, then the queued timers run.
     press(key, { target = { tagName: 'CANVAS' }, pageUses = false } = {}) {
@@ -277,6 +285,115 @@ test('Back: an origin\'s own ?from= is dropped, so one page\'s way back never ch
   assert.match(p.topbar(), /href="\/roster\?q=a"/);
 });
 
+// THE TRAIL (task 1004476). The owner's case: Goals -> goal 12 -> task 340 ->
+// an idea shows "Goals › goal 12 › task 340", each a link, and Back is the last.
+// One `session` object across boots is one browser tab.
+function walkToIdea() {
+  const tab = {};
+  const goals = boot({ page: 'goals', optIn: false, path: '/goals', session: Object.assign(tab, { 'hall-nav-hop': '/goals' }) });
+  goals.go('#/goal/12');
+  boot({ page: 'task', optIn: false, path: '/task/340', search: '?from=' + encodeURIComponent('/goals#/goal/12'), fallback: '/work', session: tab });
+  const idea = boot({ page: 'idea', optIn: false, path: '/idea/4', referrer: 'https://h/task/340', fallback: '/thinking', session: tab });
+  return { tab, idea };
+}
+
+test('trail: a drill-down two layers deep shows every step, each a link, and Back is the last', () => {
+  const { tab, idea } = walkToIdea();
+  assert.deepEqual(idea.crumbs(), ['Goals /goals', 'goal 12 /goals#/goal/12']);
+  assert.equal(idea.back(), 'task 340 /task/340', 'the step before this page is still the Back link');
+  assert.match(idea.topbar(), /<nav class="topbar-trail topbar-trail--long" aria-label="Breadcrumb">/);
+  assert.deepEqual(JSON.parse(tab['hall-nav-trail']).map((c) => c.label), ['Goals', 'goal 12', 'task 340', 'idea 4']);
+});
+
+test('trail: one step back is exactly the Back link it always was', () => {
+  const tab = {};
+  boot({ page: 'roster', optIn: false, path: '/roster', session: Object.assign(tab, { 'hall-nav-hop': '/roster' }) });
+  const p = boot({ page: 'profile', optIn: false, search: '?id=7', referrer: 'https://h/roster', session: tab });
+  assert.doesNotMatch(p.topbar(), /topbar-trail|topbar-crumb/);
+  assert.match(p.topbar(), /<a class="topbar-back" id="topbar-back" href="\/roster" title="Back to Builders"><svg/);
+});
+
+test('trail: returning to a crumb trims everything after it, and a reload keeps it', () => {
+  const { tab } = walkToIdea();
+  const goal = boot({ page: 'goals', optIn: false, path: '/goals', hash: '#/goal/12', referrer: 'https://h/idea/4', session: tab });
+  assert.deepEqual(goal.crumbs(), [], 'one step left, so just Back');
+  assert.equal(goal.back(), 'Goals /goals');
+  assert.deepEqual(goal.trail(), ['Goals', 'goal 12']);
+  // A reload keeps its referrer: the task opened from the goal again.
+  const task = boot({ page: 'task', optIn: false, path: '/task/340', referrer: 'https://h/goals', fallback: '/work', session: tab });
+  const again = boot({ page: 'task', optIn: false, path: '/task/340', referrer: 'https://h/goals', fallback: '/work', session: tab });
+  for (const p of [task, again]) {
+    assert.deepEqual(p.crumbs(), ['Goals /goals'], 'a referrer has no #hash, and still finds goal 12');
+    assert.equal(p.back(), 'goal 12 /goals#/goal/12');
+  }
+  assert.deepEqual(again.trail(), ['Goals', 'goal 12', 'task 340']);
+});
+
+test('trail: a hash route back to a crumb trims, and a view switch only renames the page', () => {
+  const tab = {};
+  const goals = boot({ page: 'goals', optIn: false, path: '/goals', session: Object.assign(tab, { 'hall-nav-hop': '/goals' }) });
+  goals.go('#/goal/12');
+  assert.deepEqual(goals.trail(), ['Goals', 'goal 12']);
+  goals.go('');
+  assert.deepEqual(goals.trail(), ['Goals'], 'back to the list is a return, not a step');
+  goals.go('#archived');
+  assert.deepEqual(goals.trail(), ['Goals'], 'a view of the same page is not a drill-down');
+});
+
+test('trail: a sidebar hop starts over', () => {
+  const { tab } = walkToIdea();
+  const work = boot({ page: 'work', optIn: false, path: '/work', referrer: 'https://h/idea/4', session: Object.assign(tab, { 'hall-nav-hop': '/work' }) });
+  assert.doesNotMatch(work.topbar(), /topbar-back/);
+  assert.deepEqual(work.trail(), ['Tasks']);
+  const task = boot({ page: 'task', optIn: false, path: '/task/9', referrer: 'https://h/work', fallback: '/work', session: tab });
+  assert.deepEqual(task.crumbs(), []);
+  assert.equal(task.back(), 'Tasks /work');
+});
+
+test('trail: an origin the trail does not know starts a fresh one by the ?from= rules', () => {
+  const { tab } = walkToIdea();
+  const p = boot({ page: 'profile', optIn: false, search: '?id=7&from=%2Froster', referrer: 'https://h/idea/4', session: tab });
+  assert.deepEqual(p.crumbs(), [], 'the old trail is not this page\'s way here');
+  assert.equal(p.back(), 'Builders /roster');
+  assert.deepEqual(p.trail(), ['Builders', 'Profile']);
+});
+
+test('trail: capped at four crumbs, and on a phone the middle collapses', () => {
+  const tab = {};
+  boot({ page: 'goals', optIn: false, path: '/goals', session: Object.assign(tab, { 'hall-nav-hop': '/goals' }) });
+  let prev = '/goals';
+  let last;
+  for (const id of [1, 2, 3, 4, 5]) {
+    last = boot({ page: 'task', optIn: false, path: `/task/${id}`, referrer: `https://h${prev}`, fallback: '/work', session: tab });
+    prev = `/task/${id}`;
+  }
+  assert.deepEqual(last.crumbs(), ['task 1 /task/1', 'task 2 /task/2', 'task 3 /task/3'], 'Goals fell off the front');
+  assert.equal(last.back(), 'task 4 /task/4');
+  assert.equal(last.trail().length, 5, 'four crumbs plus this page');
+  const html = last.topbar();
+  assert.equal((html.match(/topbar-trail__step--mid/g) || []).length, 2, 'every crumb between the first and Back is the middle');
+  assert.match(html, /<nav class="topbar-trail topbar-trail--long"/);
+  assert.match(html, /<span class="topbar-trail__more"><a class="topbar-crumb topbar-crumb--more" href="\/task\/1" title="task 1 › task 2 › task 3" aria-label="task 1">…<\/a>/,
+    'the fold is a link to the start of the trail, naming what it hides');
+  const css = read('style.css');
+  assert.match(css, /@media \(max-width: 640px\) \{\s*\.topbar-trail__step--mid \{ display: none; \}\s*\.topbar-trail--long \.topbar-trail__more \{ display: inline-flex; \}/,
+    'source: on a phone the middle hides and "…" stands in');
+  assert.match(css, /@media \(max-width: 480px\) \{\s*\.topbar-trail__step--first \{ display: none; \}/, 'source: narrower, the first crumb folds too');
+  assert.match(css, /@media \(max-width: 360px\) \{\s*\.topbar-trail__mark, \.topbar-trail \.topbar-trail__more, \.topbar-trail \.topbar-back__label \{ display: none; \}/,
+    'source: narrowest, only the Back arrow is left');
+});
+
+test('trail: a hostile stored crumb is dropped, and storage that throws keeps the one-step Back', () => {
+  const tab = { 'hall-nav-trail': JSON.stringify([{ href: '//evil.example', label: 'x' }, { href: '/api/gds/x', label: 'y' },
+    { href: 'javascript:alert(1)', label: 'z' }, { href: '/goals', label: '<b>Goals</b>' }]) };
+  const p = boot({ page: 'task', optIn: false, path: '/task/9', referrer: 'https://h/goals', fallback: '/work', session: tab });
+  assert.equal(p.back(), '&lt;b&gt;Goals&lt;/b&gt; /goals', 'a stored label is escaped');
+  assert.deepEqual(JSON.parse(tab['hall-nav-trail']).map((c) => c.href), ['/goals', '/task/9']);
+  const locked = boot({ page: 'task', optIn: false, path: '/task/9', referrer: 'https://h/goals', fallback: '/work', sessionThrows: true });
+  assert.equal(locked.back(), 'Goals /goals');
+  assert.deepEqual(locked.crumbs(), []);
+});
+
 test('an opted-in page renders ONE switch in the top bar, off by default', () => {
   const p = boot();
   const btn = p.button();

package/tests/hall_tweak_editor.mjs

@@ -635,7 +635,7 @@ try {
     assert.match(HTML, /<body data-page="tweak-editor"[^>]*data-fullscreen-switch/);
     assert.equal((HTML.match(/<h1\b/g) || []).length, 1);
     assert.ok(HTML.indexOf('tweak-editor-lib.js') < HTML.indexOf('tweak-editor.js?'), 'the lib loads first');
-    assert.match(HTML, /shell\.js\?v=2026-10-02-back/);
+    assert.match(HTML, /shell\.js\?v=2026-10-02-trail/);
     assert.equal(/fonts\.googleapis\.com\/css/.test(HTML), false);
     for (const id of ['tw-bar', 'tw-counter', 'tw-open', 'tw-open-more', 'tw-divider', 'tw-openwrap', 'tw-open-menu', 'tw-open-tab', 'tw-open-split', 'tw-frame', 'tw-frame-view', 'tw-split-close', 'tw-download', 'tw-upload', 'tw-file', 'tw-submit', 'tw-paper', 'tw-doc', 'tw-notice', 'tw-done', 'tw-take', 'tw-pick', 'tw-picks', 'tw-refused', 'tw-refused-title', 'tw-refused-list', 'tw-refused-next', 'tw-refused-download', 'tw-refused-close']) {
       assert.ok(new RegExp(`id="${id}"`).test(HTML), `#${id} is in the markup`);

package/tests/nav_permission_atoms.mjs

@@ -87,7 +87,7 @@ test('the hall-preview fixture carries every atom /me resolves', () => {
 // the file and left the query alone, so a returning browser kept the cached copy —
 // a fix that reaches nobody looks identical to a fix that does not work.
 
-const SHELL_SHA = 'e5094c169d5ee6ef';
+const SHELL_SHA = '901fc3252b096ce6';
 
 test('shell.js has not changed without its cache-bust being bumped', () => {
   const actual = crypto.createHash('sha256').update(SHELL).digest('hex').slice(0, 16);