@bongos/core 1.21.38 → 1.21.40

package/modules/hall-ui/public/street.css

@@ -161,10 +161,8 @@ html[data-fullscreen="on"] .street-top { padding-right: 184px; }
 .street-card__lines { margin: 0; padding: 0; list-style: none; display: flex; flex-direction: column; }
 .street-card__lines li { padding: 8px 0; border-top: 1px solid var(--street-rule); font-size: 14px; line-height: 1.4; }
 .street-card__result { margin: 0; font-size: 15px; line-height: 1.45; }
-.street-card__open { align-self: flex-start; display: inline-flex; align-items: center; min-height: 24px; padding: 6px 0; font-size: 14px; color: var(--street-accent-text); text-decoration: underline; text-underline-offset: 4px; }
-.street-card__open[hidden] { display: none; }
 
-.street-mark:focus-visible, .street-mode:focus-visible, .street-pin:focus-visible, .street-door:focus-visible, .street-sign:focus-visible, .street-card__close:focus-visible, .street-card__open:focus-visible { outline: 2px solid var(--accent); outline-offset: 3px; }
+.street-mark:focus-visible, .street-mode:focus-visible, .street-pin:focus-visible, .street-door:focus-visible, .street-sign:focus-visible, .street-card__close:focus-visible { outline: 2px solid var(--accent); outline-offset: 3px; }
 
 /* narrower: the strip tightens, then wraps; the readings scroll sideways */
 @media (max-width: 1180px) {
@@ -195,7 +193,7 @@ html[data-fullscreen="on"] .street-top { padding-right: 184px; }
    on the hall's tokens. Under 900 px the artboard gives way to a column: the
    drawing in its own sideways strip, the panel below it. */
 .inside { position: absolute; inset: 0; display: flex; overflow-x: auto; overflow-y: auto; background: var(--bg); }
-.inside[hidden], .inside-annex[hidden], .inside-dhead[hidden], .inside-legend[hidden], .inside-table[hidden], .inside-open[hidden], .inside-note[hidden], .inside-panel[hidden], .inside-more[hidden] { display: none; }
+.inside[hidden], .inside-annex[hidden], .inside-dhead[hidden], .inside-legend[hidden], .inside-open[hidden], .inside-note[hidden], .inside-panel[hidden], .inside-more[hidden] { display: none; }
 .inside-sizer { position: relative; margin: auto; flex: none; overflow: hidden; }
 .inside-board { position: absolute; left: 0; top: 0; width: 1440px; height: 708px; transform-origin: 0 0; transform: scale(var(--inside-scale, 1)); color: var(--ink); }
 .inside-head { position: absolute; left: 32px; top: 16px; display: flex; align-items: center; gap: 16px; z-index: 2; }
@@ -265,10 +263,6 @@ html[data-fullscreen="on"] .street-top { padding-right: 184px; }
 .inside-meter__fill { height: 6px; width: 0; background: color-mix(in srgb, var(--ink) 30%, var(--bg)); }
 .inside-meter__fill--full { background: var(--accent); }
 .inside-meter__line { font-size: 13px; color: var(--ink-soft); line-height: 1.45; }
-.inside-table { display: flex; flex-direction: column; gap: 8px; }
-.inside-row { display: flex; justify-content: space-between; align-items: center; gap: 12px; width: 100%; background: none; border: 0; border-top: 1px solid var(--street-rule); padding: 10px 0; cursor: pointer; font-family: var(--font-body); font-size: 15px; text-align: left; color: var(--ink); }
-.inside-row--needs { color: var(--street-accent-text); }
-.inside-row__status { font-size: 12.5px; color: var(--ink-faint); white-space: nowrap; }
 
 /* the chosen floor, its sign large; the block re-enters on every pick */
 .inside-open { display: flex; flex-direction: column; gap: 10px; }
@@ -362,7 +356,7 @@ html[data-fullscreen="on"] .street-top { padding-right: 184px; }
 .inside-ditem { display: flex; justify-content: space-between; gap: 14px; padding: 8px 0; border-top: 1px solid var(--street-rule); font-size: 14px; line-height: 1.4; }
 .inside-ditem__meta { color: var(--ink-faint); white-space: nowrap; }
 
-.inside-back:focus-visible, .inside-textbtn:focus-visible, .inside-row:focus-visible, .inside-drawer:focus-visible, .inside-item:focus-visible, .inside-more:focus-visible { outline: 2px solid var(--accent); outline-offset: 3px; }
+.inside-back:focus-visible, .inside-textbtn:focus-visible, .inside-drawer:focus-visible, .inside-item:focus-visible, .inside-more:focus-visible { outline: 2px solid var(--accent); outline-offset: 3px; }
 .inside-floor:focus-visible { outline: 2px solid var(--accent); outline-offset: -3px; }
 .inside-name:focus { outline: none; }
 .inside-name:focus-visible { outline: 2px solid var(--accent); outline-offset: 4px; }

package/modules/hall-ui/public/street.html

@@ -166,10 +166,6 @@
           <span class="inside-meter__line" id="insideGrowth"></span>
         </div>
       </div>
-      <div class="inside-table" id="insideTableWrap" hidden>
-        <span class="street-label">on the table here</span>
-        <div id="insideTable"></div>
-      </div>
       <div class="inside-open" id="insideOpenA"></div>
       <div class="inside-open" id="insideOpenB" hidden></div>
       <div class="inside-record">
@@ -199,7 +195,6 @@
   </div>
   <h2 class="street-card__title" id="streetCardTitle"></h2>
   <div class="street-card__body" id="streetCardBody"></div>
-  <a class="street-card__open" id="streetCardOpen" href="/builders/street" hidden>open it where it lives</a>
 </div>
 
 <div class="street-toast" id="streetToast" role="status" aria-live="polite" hidden></div>

package/modules/hall-ui/public/street.js

@@ -78,7 +78,9 @@
   var $ = function (id) { return document.getElementById(id); };
   var media = window.matchMedia ? window.matchMedia('(prefers-color-scheme: dark)') : null;
   var data = { docket: null, goals: [], rollups: [], earnings: null, loaded: false, tasks: {}, room: null, constitution: null };
-  var card = { cv: null, form: null, error: '', busy: false, fresh: null, answer: null };
+  // ask: the act whose chips stand open; more: the detail is open in place;
+  // pick: which of the review queue the queue's card shows (task 1004566)
+  var card = { cv: null, form: null, ask: null, more: false, pick: null, error: '', busy: false, fresh: null, answer: null };
   var view = { open: null, opener: null, model: null, scale: 1, mode: null, inside: null, insideModel: null };
   // the desk's own state: rows you acted on this visit, what you did per floor,
   // the floors you cleared, the row whose facts or chips are open
@@ -493,19 +495,6 @@
     var fill = $('insideFill');
     if (fill) { fill.style.width = bv.fill + '%'; fill.className = 'inside-meter__fill' + (bv.fill >= 80 ? ' inside-meter__fill--full' : ''); }
     setText('insideGrowth', bv.growth);
-    show('insideTableWrap', bv.hasTable);
-    var table = $('insideTable'); clear(table);
-    bv.table.forEach(function (r) {
-      var b = node('button', 'inside-row' + (r.state === 'needs' ? ' inside-row--needs' : ''));
-      b.setAttribute('type', 'button');
-      b.setAttribute('data-matter', r.matter);
-      b.setAttribute('aria-controls', 'streetCard');
-      b.setAttribute('aria-expanded', view.open === r.matter ? 'true' : 'false');
-      b.appendChild(node('span', 'inside-row__label', r.label));
-      b.appendChild(node('span', 'inside-row__status', r.status));
-      b.addEventListener('click', function () { openCard(r.matter, b); });
-      if (table) table.appendChild(b);
-    });
     // the chosen floor: two blocks that take turns, so the block re-enters on every pick
     var on = $(bv.flipA ? 'insideOpenA' : 'insideOpenB'), off = $(bv.flipA ? 'insideOpenB' : 'insideOpenA');
     if (off) { off.hidden = true; clear(off); }
@@ -1054,21 +1043,42 @@
 
 
   // ---------- the matter card (task 1004528: it acts) ----------
+  // Its acts are the desk row's for the same item (GovDesk.cardFor, task
+  // 1004566): the same words, chips, routes and permission checks. "more" grows
+  // the card in place; nothing on it opens an older page to decide.
   function fillCard() {
-    var C = window.GovMatterCard;
-    var cv = C ? C.model({ docket: data.docket, key: view.open, room: data.room, constitution: data.constitution, now: Date.now() }) : null;
+    var C = window.GovMatterCard, D = window.GovDesk;
+    var ctx = { room: data.room, constitution: data.constitution, now: Date.now(), goals: (data.goals || []).filter(function (g) { return g && g.status === 'open'; }), pick: card.pick };
+    var cv = D && D.cardFor ? D.cardFor(view.open, data.docket, ctx) : C ? C.model({ docket: data.docket, key: view.open, room: data.room, constitution: data.constitution, now: Date.now() }) : null;
     if (!cv) { closeCard(false); return null; }
     card.cv = cv;
     $('streetCardWhere').textContent = cv.where;
     $('streetCardWhen').textContent = cv.when;
     $('streetCardTitle').textContent = cv.title;
-    C.render(document, $('streetCardBody'), cv, { act: actOn, openForm: openForm }, { form: card.form, error: card.error, busy: card.busy, fresh: card.fresh });
-    var open = $('streetCardOpen');
-    if (cv.href) open.setAttribute('href', cv.href);
-    open.hidden = !cv.href;
+    C.render(document, $('streetCardBody'), cv, { act: actOn, openForm: openForm, ask: askFor, more: toggleMore, pick: pickQueued }, { form: card.form, ask: card.ask, more: card.more, error: card.error, busy: card.busy, fresh: card.fresh });
+    var frame = $('streetCard'); if (frame) frame.setAttribute('data-more', card.more ? 'open' : 'closed');
     placeCard();
     return cv;
   }
+  function askFor(key) {
+    card.ask = card.ask === key ? null : key;
+    card.error = '';
+    fillCard();
+    var body = $('streetCardBody'), first = body && body.querySelector ? body.querySelector('.mcard-chip, .mcard-chips__field') : null;
+    if (card.ask && first && first.focus) first.focus();
+  }
+  function toggleMore() {
+    card.more = !card.more;
+    fillCard();
+    var mb = $('streetCardBody'), t = mb && mb.querySelector ? mb.querySelector('[data-act="more"]') : null;
+    if (t && t.focus) t.focus();
+  }
+  function pickQueued(key) {
+    card.pick = key; card.ask = null; card.more = false; card.form = null; card.error = '';
+    fillCard();
+    var close = $('streetCardClose');
+    if (close && close.focus) close.focus();
+  }
   function placeCard() {
     var card = $('streetCard');
     if (!card || !view.open || !view.model) return;
@@ -1084,7 +1094,7 @@
   function openCard(key, opener) {
     view.open = key;
     view.opener = opener || null;
-    card.form = null; card.error = ''; card.fresh = null;
+    card.form = null; card.ask = null; card.more = false; card.pick = null; card.error = ''; card.fresh = null;
     var el = $('streetCard');
     if (!fillCard()) return;
     el.hidden = false;
@@ -1097,19 +1107,17 @@
     var was = view.opener;
     view.open = null;
     view.opener = null;
-    card.cv = null; card.form = null; card.error = ''; card.busy = false; card.fresh = null;
+    card.cv = null; card.form = null; card.ask = null; card.more = false; card.pick = null; card.error = ''; card.busy = false; card.fresh = null;
     var el = $('streetCard');
     if (el) el.hidden = true;
     draw();
     // The pins were redrawn, so focus goes back to the new button for the same matter.
     if (restore !== false && was && was.getAttribute) {
       var key = was.getAttribute('data-matter');
-      // the pins and the table rows were redrawn: focus the new control for the same matter
+      // the pins were redrawn: focus the new pin for the same matter
       // .children is an HTMLCollection, which concat does not spread: copy it first
       var list = function (id) { var el = $(id); return el && el.children ? Array.prototype.slice.call(el.children) : []; };
-      var pins = list('streetPins');
-      var rows = list('insideTable');
-      var pool = view.inside ? [].concat(rows, pins) : [].concat(pins, rows);
+      var pool = list('streetPins');
       for (var i = 0; i < pool.length; i++) {
         if (pool[i].getAttribute('data-matter') === key) { if (pool[i].focus) pool[i].focus(); break; }
       }
@@ -1138,32 +1146,36 @@
     card.form = name || null;
     card.error = '';
     fillCard();
-    var f = name === 'object' ? $('mcardReason') : name === 'revise' ? $('mcardRevise') : $('streetCardClose');
+    var f = name === 'revise' ? $('mcardRevise') : $('streetCardClose');
     if (f && f.focus) f.focus();
   }
   // One act: checked, sent to its own route (the server's permission checks
   // decide), then answered. An act that records nothing (abstain, hold) is
   // answered without a request.
+  // An act from the card goes with the desk row's own card when a row stands
+  // behind it (its subject: which route, the council's), else the model's.
   function actOn(key, input) {
     var C = window.GovMatterCard, cv = card.cv;
     if (!C || !cv || card.busy) return Promise.resolve(false);
-    var refused = C.check(cv, key, input);
+    var subj = cv.row && cv.row.card ? cv.row.card : cv;
+    var refused = C.check(subj, key, input);
     if (refused) { card.error = refused; fillCard(); return Promise.resolve(false); }
     card.error = '';
-    var req = C.request(cv, key, input);
-    if (!req) return Promise.resolve(answered(cv, key, {}, false));
+    var req = C.request(subj, key, input);
+    if (!req) return Promise.resolve(answered(subj, key, {}, false));
     card.busy = true;
     fillCard();
     return send(req).then(function (out) {
       card.busy = false;
       if (!out.ok) { card.error = C.refusal(out.status, out.body); if (view.open) fillCard(); return false; }
-      return answered(cv, key, out.body, true);
+      return answered(subj, key, out.body, true);
     });
   }
   function answered(cv, key, body, recorded) {
     var a = window.GovMatterCard.answer(cv, key, body);
     say(a.toast);
-    card.form = null;
+    card.form = null; card.ask = null;
+    card.pick = null;
     card.fresh = key === 'for' || key === 'object' ? 'you' : null;
     if (a.building && a.kind) card.answer = { building: a.building, matter: cv.key, kind: a.kind, at: Date.now() };
     if (a.close) closeCard(true);

package/modules/hall-ui/records/governor-street.md

@@ -21,12 +21,12 @@ Built 1:1 on `buildingView()` and `districtView()` of the same prototype. The in
 Files: `street-inside.js` (`window.GovInside`, node-require-safe, pure): the prototype's `crown()`, `workItem()`, `floorSymbol()`, `symbolPath()` (all forty symbols) and the section drawing itself, verbatim, plus the real-data adapters. `street.js` builds the nodes; `street.css` carries the interior's styles under the `inside-` prefix.
 
 - **The building in section.** Every storey a real floor (slab, cut walls with glazing, three lamps, a partition with a doorway, the framed sign with the floor's symbol, its name and state lettered on the wall, its count, its level number), dark empty floors up to the building's capacity, the crown per building, the lift in its shaft, the orange frame and orange sign on the chosen floor, and the annex lot once the building is full. An unheld Review is the dashed ghost (`GovStreet.reviewHeldOf()`, so the street and the interior agree).
-- **The right panel.** Name and what it holds, who holds it (seat chips), how it decides (the rule glyph), **change how this works**, the fill meter with its growth line, on the table here, the chosen floor with its sign large, and the record as monthly filing drawers.
+- **The right panel.** Name and what it holds, who holds it (seat chips), how it decides (the rule glyph), **change how this works**, the fill meter with its growth line, the chosen floor with its sign large, and the record as monthly filing drawers.
 - **Floors are the prototype's structure; a number appears only when the docket holds it.** `GovInside.PLAN` keeps each building's floors, order and capacity. A floor bound to a docket source shows that source's open matters at this building (count, line, needs you, the lines); one bound to a reading shows its figure; Planning's Goals floor counts the open goals. Every other floor says "not recorded yet" on the wall, lettered faint, with no number. A source that is off, coming, not yours or unreadable says which, never a figure. Filling every floor with real data is task 1004527, through `floorFor()` and `PLAN`.
 - **Who holds it.** The docket names no holders yet (task 1004529), so the seat is an empty dashed chip and says "who holds it is not set on this project yet". The rule is the one the building's open matters are decided by, else the design's default, which the words call "by default". `holderOf()` reads a docket building's `holders` / `rule` / `who` first, so 1004529 lands without touching the drawing.
 - **The lift and the flip.** The lift is one node kept across draws, so picking a floor slides it by a CSS transform transition; the chosen floor's block is two blocks that take turns (`flipA` / `flipB`), so it re-enters on every pick. Both are dead under reduced motion.
 - **Change how this works** is present and honest: pressed, it says drafting an amendment from here is not built yet (task 1004530 wires it).
-- **On the table here** rows open the same short card a pin opens, through `openCard()`; Escape gives focus back to the row.
+- **No "on the table here" list.** The prototype's list of the building's open matters was removed on the owner's direction (task 1004565): the floor desks carry every matter as an actionable row, so the list was duplication. Inside a building a matter is its desk row; the short card opens from the street's pins.
 - **Districts.** The goal's tasks (`GET /tasks?goal_id=N`, read once per goal): shape from the discipline (tower engineer, studio artist, glass front UI, pavilion ideator; none is a tower), stage from the status (backlog and blocked a staked plot, ready a slab, active a scaffold, completed and confirmed built with a flag, shipped lit), label the kind; height from the estimate. Up to ten stand on the road, work in flight first; the rest are counted with a link to the goal. Each one opens its task.
 - **Narrow.** Under 900 px the board becomes a column: the drawing in its own sideways strip (never scaled under 0.6, so a floor stays a 24 px target), then the panel.
 

package/modules/ideas/governor-docket.js

@@ -42,6 +42,8 @@ function blockerDocketMatter(b, mayResolve) {
     tally: null,
     href: `/blockers#blocker-${b.id}`,
     ref: { type: 'blocker', id: b.id },
+    // the card's "more" (task 1004566): the body GET /blockers shows everyone
+    detail: b.body_md || null,
     // the floor desk's one act (task 1004560): decide, by one of its options
     ...(mayResolve ? { acts: [{ key: 'decide', options: blockerOptions(b.body_md) }] } : {}),
   };

package/modules/lifecycle/governor-docket.js

@@ -41,6 +41,8 @@ function overrideMatter(r, mayDecide) {
     tally: null,
     href: `/task/${encodeURIComponent(r.task_id)}`,
     ref: { type: 'override_request', id: r.id },
+    // the card's "more" (task 1004566): the reason GET /override-requests shows
+    detail: r.rationale || null,
   };
 }
 
@@ -58,6 +60,8 @@ function removalMatter(r) {
     tally: null,
     href: `/task/${encodeURIComponent(r.proposal_task_id)}`,
     ref: { type: 'task', id: r.proposal_task_id },
+    // the card's "more" (task 1004566): the proposal's own text, from the same read
+    detail: r.description || null,
     // POST /removal-proposals/:id/decide, the docket source's own atom (task 1004559)
     acts: [{ key: 'remove' }, { key: 'keep' }],
   };

package/modules/onboarding/routes/access-requests.js

@@ -236,6 +236,8 @@ function accessRequestDocketMatter(r) {
     tally: null,
     href: '/watch',
     ref: { type: 'access_request', id: r.id },
+    // the card's "more" (task 1004566): their note, as GET /access-requests shows it
+    detail: r.note || null,
   };
 }
 

package/modules/security/routes/reports.js

@@ -56,6 +56,9 @@ function redteamDocketMatter(r) {
     tally: null,
     href: '/watch',
     ref: { type: 'vulnerability_report', id: r.id },
+    // the card's "more" (task 1004566): what GET /security/reports shows this
+    // same atom — what it targets and the report's description
+    detail: [r.target ? `Target: ${r.target}` : '', r.description || ''].filter(Boolean).join('\n\n') || null,
     // The floor desk's acts (task 1004559): the docket only lists this for a
     // holder of the adjudicate atom, which both routes check.
     acts: [{ key: 'confirm' }, { key: 'dispute' }],

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.38",
+  "version": "1.21.40",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.21.38",
+      "version": "1.21.40",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.38",
+  "version": "1.21.40",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -8992,5 +8992,17 @@
       "id": "1004564",
       "text": "If you put something up for a vote and nobody has voted yet, you can now withdraw it with one tap on your desk. Once anyone votes, it stays with the vote. A small database change makes \"withdrawn\" a valid way for a sitting to"
     }
+  ],
+  "1.21.39": [
+    {
+      "id": "1004565",
+      "text": "Inside each building on the governor street, the separate \"on the table here\" list is gone. The floor desks already show every matter as a row you can act on, so the list only repeated them. The rest of the building panel look"
+    }
+  ],
+  "1.21.40": [
+    {
+      "id": "1004566",
+      "text": "Every card on the governor street now acts where it opens. Pressing a pin gives the same buttons as that item's row at its building desk: confirm or dispute a security report, remove or keep, decide a blocker by tapping an opt"
+    }
   ]
 }

package/src/bongos/module-rechecks.js

@@ -53,6 +53,13 @@ async function listModuleRechecks({ limit = RECHECK_LIMIT, db = null } = {}) {
 
 // One version as a docket matter. Pure. A failed gate needs a governor who may
 // ask for a re-check; a pending part is a re-check already moving.
+// The one-tap reasons a re-check may give (POST /store/modules/:key/versions/
+// :version/reassess requires one; task 1004566).
+const RECHECK_REASONS = Object.freeze([
+  { key: 'fixed', label: 'fixed since' },
+  { key: 'misfired', label: 'check misfired' },
+  { key: 'again', label: 'look again' },
+]);
 function moduleRecheckMatter(r, mayRerun) {
   const failed = r.security_failed === true;
   const pending = Array.isArray(r.pending_parts) ? r.pending_parts.filter(Boolean) : [];
@@ -70,7 +77,11 @@ function moduleRecheckMatter(r, mayRerun) {
     proposer: null,
     tally: null,
     href: '/modules',
-    ref: { type: 'module_version', id: r.version_id },
+    // "<key>@<version>": the reassess route's two path parts (task 1004566)
+    ref: { type: 'module_version', id: `${r.module_key}@${r.version}` },
+    // the one act a governor takes on it, under the reassess route's own atom,
+    // only when its security check failed (a pending check is still running)
+    ...(failed && mayRerun ? { acts: [{ key: 'recheck', options: RECHECK_REASONS }] } : {}),
   };
 }
 

package/src/module-api.js

@@ -75,7 +75,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // MAJOR (see allowBoxScope below): passes the request through untouched.
 function deprecatedNoopMiddleware(_req, _res, next) { next(); }
 
-const CORE_VERSION = '1.21.38'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.21.40'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('discord'); log.info('mounted');

package/tests/governor_docket.mjs

@@ -101,6 +101,26 @@ test('normalizeMatter: the one shape, prefixed id, ISO dates', () => {
   assert.deepEqual(Object.keys(m).sort(), ['building', 'deadline', 'href', 'id', 'opened_at', 'proposer', 'ref', 'rule', 'short', 'source', 'state', 'tally', 'title', 'where'].sort());
 });
 
+test('normalizeMatter carries a matter\'s detail for the card\'s "more" only as bounded text (task 1004566)', () => {
+  const base = { id: 1, title: 't' };
+  const at = { source: 'blockers', building: 'planning' };
+  assert.equal(docket.normalizeMatter({ ...base, detail: '  Option A: Render\n\nOption B: Fly  ' }, at).detail, 'Option A: Render\n\nOption B: Fly', 'lines kept, ends trimmed');
+  assert.equal(docket.normalizeMatter({ ...base, detail: 'x'.repeat(5000) }, at).detail.length, 4000);
+  for (const bad of [null, '', '   ', 42, { md: 'x' }, ['x']]) assert.ok(!('detail' in docket.normalizeMatter({ ...base, detail: bad }, at)), JSON.stringify(bad));
+});
+
+test('the sources hand the detail their own list route shows, and a failed module check its one act (task 1004566)', () => {
+  const r = reportsRoute.redteamDocketMatter({ id: 2, title: 'x', status: 'open', target: '/login', description: 'No limit on tries.' });
+  assert.equal(r.detail, 'Target: /login\n\nNo limit on tries.');
+  assert.equal(reportsRoute.redteamDocketMatter({ id: 2, title: 'x', status: 'open' }).detail, null);
+  const failed = moduleRechecks.moduleRecheckMatter({ version_id: 7, module_key: 'image-tools', version: '1.2.0', security_failed: true }, true);
+  assert.deepEqual(failed.ref, { type: 'module_version', id: 'image-tools@1.2.0' }, 'the reassess route\'s two path parts');
+  assert.deepEqual(failed.acts.map((a) => a.key), ['recheck']);
+  assert.ok(failed.acts[0].options.length >= 2 && failed.acts[0].options.every((o) => o.label.length <= 16), 'reasons are one-tap chips');
+  assert.ok(!('acts' in moduleRechecks.moduleRecheckMatter({ version_id: 7, module_key: 'm', version: '1.0.0', security_failed: true }, false)), 'not without the reassess atom');
+  assert.ok(!('acts' in moduleRechecks.moduleRecheckMatter({ version_id: 8, module_key: 'm', version: '1.0.0', security_failed: false, pending_parts: ['tests'] }, true)), 'not while its check is still running');
+});
+
 test('normalizeMatter fails SAFE: unknown state → moving (never a false "needs you"), unknown rule → null', () => {
   const m = docket.normalizeMatter({ id: 1, title: 't', state: 'urgent!!', rule: 'vibes', building: 'castle' }, { source: 's', building: 'review' });
   assert.equal(m.state, 'moving');