@bongos/core 1.21.39 → 1.21.41

package/modules/hall-ui/public/street.js

@@ -78,7 +78,9 @@
   var $ = function (id) { return document.getElementById(id); };
   var media = window.matchMedia ? window.matchMedia('(prefers-color-scheme: dark)') : null;
   var data = { docket: null, goals: [], rollups: [], earnings: null, loaded: false, tasks: {}, room: null, constitution: null };
-  var card = { cv: null, form: null, error: '', busy: false, fresh: null, answer: null };
+  // ask: the act whose chips stand open; more: the detail is open in place;
+  // pick: which of the review queue the queue's card shows (task 1004566)
+  var card = { cv: null, form: null, ask: null, more: false, pick: null, error: '', busy: false, fresh: null, answer: null };
   var view = { open: null, opener: null, model: null, scale: 1, mode: null, inside: null, insideModel: null };
   // the desk's own state: rows you acted on this visit, what you did per floor,
   // the floors you cleared, the row whose facts or chips are open
@@ -1041,21 +1043,42 @@
 
 
   // ---------- the matter card (task 1004528: it acts) ----------
+  // Its acts are the desk row's for the same item (GovDesk.cardFor, task
+  // 1004566): the same words, chips, routes and permission checks. "more" grows
+  // the card in place; nothing on it opens an older page to decide.
   function fillCard() {
-    var C = window.GovMatterCard;
-    var cv = C ? C.model({ docket: data.docket, key: view.open, room: data.room, constitution: data.constitution, now: Date.now() }) : null;
+    var C = window.GovMatterCard, D = window.GovDesk;
+    var ctx = { room: data.room, constitution: data.constitution, now: Date.now(), goals: (data.goals || []).filter(function (g) { return g && g.status === 'open'; }), pick: card.pick };
+    var cv = D && D.cardFor ? D.cardFor(view.open, data.docket, ctx) : C ? C.model({ docket: data.docket, key: view.open, room: data.room, constitution: data.constitution, now: Date.now() }) : null;
     if (!cv) { closeCard(false); return null; }
     card.cv = cv;
     $('streetCardWhere').textContent = cv.where;
     $('streetCardWhen').textContent = cv.when;
     $('streetCardTitle').textContent = cv.title;
-    C.render(document, $('streetCardBody'), cv, { act: actOn, openForm: openForm }, { form: card.form, error: card.error, busy: card.busy, fresh: card.fresh });
-    var open = $('streetCardOpen');
-    if (cv.href) open.setAttribute('href', cv.href);
-    open.hidden = !cv.href;
+    C.render(document, $('streetCardBody'), cv, { act: actOn, openForm: openForm, ask: askFor, more: toggleMore, pick: pickQueued }, { form: card.form, ask: card.ask, more: card.more, error: card.error, busy: card.busy, fresh: card.fresh });
+    var frame = $('streetCard'); if (frame) frame.setAttribute('data-more', card.more ? 'open' : 'closed');
     placeCard();
     return cv;
   }
+  function askFor(key) {
+    card.ask = card.ask === key ? null : key;
+    card.error = '';
+    fillCard();
+    var body = $('streetCardBody'), first = body && body.querySelector ? body.querySelector('.mcard-chip, .mcard-chips__field') : null;
+    if (card.ask && first && first.focus) first.focus();
+  }
+  function toggleMore() {
+    card.more = !card.more;
+    fillCard();
+    var mb = $('streetCardBody'), t = mb && mb.querySelector ? mb.querySelector('[data-act="more"]') : null;
+    if (t && t.focus) t.focus();
+  }
+  function pickQueued(key) {
+    card.pick = key; card.ask = null; card.more = false; card.form = null; card.error = '';
+    fillCard();
+    var close = $('streetCardClose');
+    if (close && close.focus) close.focus();
+  }
   function placeCard() {
     var card = $('streetCard');
     if (!card || !view.open || !view.model) return;
@@ -1071,7 +1094,7 @@
   function openCard(key, opener) {
     view.open = key;
     view.opener = opener || null;
-    card.form = null; card.error = ''; card.fresh = null;
+    card.form = null; card.ask = null; card.more = false; card.pick = null; card.error = ''; card.fresh = null;
     var el = $('streetCard');
     if (!fillCard()) return;
     el.hidden = false;
@@ -1084,7 +1107,7 @@
     var was = view.opener;
     view.open = null;
     view.opener = null;
-    card.cv = null; card.form = null; card.error = ''; card.busy = false; card.fresh = null;
+    card.cv = null; card.form = null; card.ask = null; card.more = false; card.pick = null; card.error = ''; card.busy = false; card.fresh = null;
     var el = $('streetCard');
     if (el) el.hidden = true;
     draw();
@@ -1123,32 +1146,36 @@
     card.form = name || null;
     card.error = '';
     fillCard();
-    var f = name === 'object' ? $('mcardReason') : name === 'revise' ? $('mcardRevise') : $('streetCardClose');
+    var f = name === 'revise' ? $('mcardRevise') : $('streetCardClose');
     if (f && f.focus) f.focus();
   }
   // One act: checked, sent to its own route (the server's permission checks
   // decide), then answered. An act that records nothing (abstain, hold) is
   // answered without a request.
+  // An act from the card goes with the desk row's own card when a row stands
+  // behind it (its subject: which route, the council's), else the model's.
   function actOn(key, input) {
     var C = window.GovMatterCard, cv = card.cv;
     if (!C || !cv || card.busy) return Promise.resolve(false);
-    var refused = C.check(cv, key, input);
+    var subj = cv.row && cv.row.card ? cv.row.card : cv;
+    var refused = C.check(subj, key, input);
     if (refused) { card.error = refused; fillCard(); return Promise.resolve(false); }
     card.error = '';
-    var req = C.request(cv, key, input);
-    if (!req) return Promise.resolve(answered(cv, key, {}, false));
+    var req = C.request(subj, key, input);
+    if (!req) return Promise.resolve(answered(subj, key, {}, false));
     card.busy = true;
     fillCard();
     return send(req).then(function (out) {
       card.busy = false;
       if (!out.ok) { card.error = C.refusal(out.status, out.body); if (view.open) fillCard(); return false; }
-      return answered(cv, key, out.body, true);
+      return answered(subj, key, out.body, true);
     });
   }
   function answered(cv, key, body, recorded) {
     var a = window.GovMatterCard.answer(cv, key, body);
     say(a.toast);
-    card.form = null;
+    card.form = null; card.ask = null;
+    card.pick = null;
     card.fresh = key === 'for' || key === 'object' ? 'you' : null;
     if (a.building && a.kind) card.answer = { building: a.building, matter: cv.key, kind: a.kind, at: Date.now() };
     if (a.close) closeCard(true);

package/modules/hall-ui/public/studio.html

@@ -176,9 +176,9 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell-trail.js?v=2026-10-03-looks"></script>
-<script src="/builders/craft-mode.js?v=2026-10-03-looks"></script>
-<script src="/builders/shell.js?v=2026-10-03-looks"></script>
+<script src="/builders/shell-trail.js?v=2026-10-04-palette"></script>
+<script src="/builders/craft-mode.js?v=2026-10-04-palette"></script>
+<script src="/builders/shell.js?v=2026-10-04-palette"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <!-- The kit, for its ONE renderer: the full-size ship-time visual figure

package/modules/hall-ui/public/style.css

@@ -1550,6 +1550,150 @@ html[data-theme="light"][data-craft="ideating"] .app-sidebar {
     radial-gradient(1.5px 1.5px at 170px 260px, rgba(184, 137, 28, .25), transparent);
 }
 
+/* THE MODE TOOLS (task 1004496, craft-mode.js TOOLS): a round button beside the
+   switch, in the mode's colour, shown only in its own mode. Artistry's palette
+   opens the page feedback doc (page-notes.js). */
+.craft-tool {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  width: 32px; height: 32px;
+  padding: 0;
+  border: 0;
+  border-radius: var(--radius-pill);
+  background: none;
+  color: var(--craft, var(--ink-soft));
+  box-shadow: inset 0 0 0 1px color-mix(in srgb, var(--craft, var(--ink)) 40%, transparent);
+  cursor: pointer;
+  flex-shrink: 0;
+}
+.craft-tool:hover { background: color-mix(in srgb, var(--craft, var(--ink)) 12%, transparent); }
+.craft-tool:focus-visible { outline: 2px solid var(--focus); outline-offset: 2px; }
+.craft-tool[aria-disabled="true"] { opacity: .45; cursor: default; }
+.craft-tool__icon { width: 16px; height: 16px; flex-shrink: 0; }
+/* With room, the tool says what it does, so it cannot be read as the mode's own
+   pill (same palette glyph); under 1180px it folds to the icon, as the switch does. */
+.craft-tool__label { font-size: 13px; white-space: nowrap; }
+@media (min-width: 1181px) {
+  .craft-tool { width: auto; gap: 6px; padding: 0 12px 0 10px; }
+}
+@media (max-width: 1180px) { .craft-tool__label { display: none; } }
+
+/* The page feedback doc: a sheet from the right over a scrim. */
+html.pn-open { overflow: hidden; }
+.pn {
+  position: fixed;
+  inset: 0;
+  z-index: var(--z-modal);
+  display: flex;
+  justify-content: flex-end;
+  background: var(--scrim);
+}
+.pn__panel {
+  position: relative;
+  width: min(560px, 100%);
+  height: 100%;
+  box-sizing: border-box;
+  display: flex;
+  flex-direction: column;
+  background: var(--bg-card);
+  color: var(--ink);
+  box-shadow: 0 0 0 1px var(--glass-edge), var(--shadow-pop);
+}
+.pn__head { position: relative; padding: 22px 64px 14px 24px; border-bottom: 1px solid var(--rule-soft); }
+.pn__eyebrow {
+  margin: 0 0 6px;
+  font-family: var(--label-face);
+  font-size: 11px;
+  letter-spacing: .12em;
+  text-transform: uppercase;
+  color: var(--craft, var(--ink-faint));
+}
+.pn__title { margin: 0; font-family: var(--font-display); font-weight: 400; font-size: 22px; letter-spacing: -0.02em; }
+.pn__close {
+  position: absolute; top: 14px; right: 14px;
+  display: inline-flex; align-items: center; justify-content: center;
+  width: 40px; height: 40px; padding: 0; border: 0; border-radius: var(--radius-pill);
+  background: none; color: var(--ink-soft); cursor: pointer;
+}
+.pn__close svg { width: 18px; height: 18px; }
+.pn__close:hover { color: var(--ink); background: var(--glass); }
+.pn__body { flex: 1; min-height: 0; overflow-y: auto; padding: 18px 24px 28px; display: flex; flex-direction: column; gap: 12px; }
+.pn__label { font-size: 13px; color: var(--ink-soft); }
+.pn__text {
+  width: 100%;
+  min-height: 260px;
+  box-sizing: border-box;
+  padding: 14px 16px;
+  border: 1px solid var(--rule);
+  border-radius: var(--radius-sm);
+  background: var(--bg);
+  color: var(--ink);
+  font: inherit;
+  font-size: 15px;
+  line-height: 1.55;
+  resize: vertical;
+}
+.pn__text:focus { outline: 2px solid var(--focus); outline-offset: 1px; }
+.pn__tools { display: flex; flex-wrap: wrap; align-items: center; gap: 8px 14px; }
+.pn__add {
+  position: relative;
+  display: inline-flex; align-items: center;
+  min-height: 34px; padding: 0 14px;
+  border-radius: var(--radius-pill);
+  box-shadow: inset 0 0 0 1px var(--rule);
+  font-size: 13.5px; color: var(--ink); cursor: pointer;
+}
+.pn__add:hover { background: var(--glass); }
+.pn__add:focus-within { outline: 2px solid var(--focus); outline-offset: 2px; }
+.pn__add input { position: absolute; inset: 0; opacity: 0; cursor: pointer; width: 100%; }
+.pn__quiet { margin: 0; font-size: 13px; color: var(--ink-faint); }
+.pn__saved { margin-left: auto; }
+.pn__thumbs { display: grid; grid-template-columns: repeat(auto-fill, minmax(88px, 1fr)); gap: 8px; }
+.pn__thumb { width: 100%; aspect-ratio: 4 / 3; object-fit: cover; border-radius: 8px; background: var(--bg-deep); }
+.pn__error { margin: 0; font-size: 13.5px; color: var(--danger); }
+.pn__error:empty { display: none; }
+.pn__foot { display: flex; flex-wrap: wrap; align-items: center; gap: 10px 16px; padding-top: 4px; }
+.pn__hint { margin: 0; font-size: 13px; line-height: 1.45; color: var(--ink-soft); }
+.pn__foot .pn__hint { flex: 1 1 240px; }
+.pn__submit {
+  min-height: 40px; padding: 0 20px; border: 0; border-radius: var(--radius-pill);
+  background: var(--accent); color: var(--accent-on); font: inherit; font-weight: 500; cursor: pointer;
+}
+.pn__submit:hover { background: var(--accent-lift); }
+.pn__submit:disabled { opacity: .55; cursor: default; }
+.pn__submit:focus-visible { outline: 2px solid var(--focus); outline-offset: 2px; }
+.pn__list { margin-top: 14px; padding-top: 16px; border-top: 1px solid var(--rule-soft); }
+.pn__list-h {
+  margin: 0 0 8px;
+  font-family: var(--label-face); font-size: var(--label-size); letter-spacing: var(--label-space);
+  text-transform: var(--label-case); color: var(--ink-faint); font-weight: 400;
+}
+.pn__rows, .pn__ideas { list-style: none; margin: 0; padding: 0; display: flex; flex-direction: column; gap: 4px; }
+.pn__row {
+  display: grid; gap: 2px; width: 100%; padding: 10px 12px; border: 0; border-radius: var(--radius-sm);
+  background: none; color: var(--ink); font: inherit; text-align: left; cursor: pointer;
+}
+.pn__row:hover { background: var(--glass); }
+.pn__row:focus-visible, .pn__back:focus-visible { outline: 2px solid var(--focus); outline-offset: 1px; }
+.pn__row-meta { font-size: 12px; color: var(--ink-faint); }
+.pn__row-text { font-size: 14px; color: var(--ink-soft); }
+.pn__ideas a { display: inline-block; padding: 6px 0; color: var(--ink); text-decoration: underline; text-underline-offset: 3px; }
+.pn__back {
+  align-self: flex-start; min-height: 32px; padding: 0 12px; margin-left: -12px; border: 0;
+  border-radius: var(--radius-pill); background: none; color: var(--ink-soft); font: inherit; font-size: 13.5px; cursor: pointer;
+}
+.pn__back:hover { color: var(--ink); background: var(--glass); }
+.pn__done { margin: 0; font-size: 16px; }
+.pn-doc { font-size: 15px; line-height: 1.6; overflow-wrap: anywhere; }
+.pn-doc p, .pn-doc ul { margin: 0 0 12px; }
+.pn-doc__h { margin: 16px 0 6px; font-size: 16px; font-weight: 500; }
+.pn-doc__img { display: block; max-width: 100%; height: auto; margin: 8px 0; border-radius: 8px; }
+@media (max-width: 640px) {
+  .pn__head { padding: 18px 60px 12px 16px; }
+  .pn__body { padding: 14px 16px 24px; }
+}
+
 /* THE BACK LINK (task 1004430): at the head of the bar when the page was
    reached from inside another hall page. 24px floor on both axes. */
 .topbar-back {

package/modules/hall-ui/public/task.html

@@ -54,9 +54,9 @@
 
 <!-- The app shell (sidebar + top bar + footer). Dependency-free; runs at parse
      time so the chrome exists before the deferred page scripts execute. -->
-<script src="/builders/shell-trail.js?v=2026-10-03-looks"></script>
-<script src="/builders/craft-mode.js?v=2026-10-03-looks"></script>
-<script src="/builders/shell.js?v=2026-10-03-looks"></script>
+<script src="/builders/shell-trail.js?v=2026-10-04-palette"></script>
+<script src="/builders/craft-mode.js?v=2026-10-04-palette"></script>
+<script src="/builders/shell.js?v=2026-10-04-palette"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded FIRST so task.js can pull from it. -->

package/modules/hall-ui/public/thinking.html

@@ -138,9 +138,9 @@
   </div>
 </div>
 
-<script src="/builders/shell-trail.js?v=2026-10-03-looks"></script>
-<script src="/builders/craft-mode.js?v=2026-10-03-looks"></script>
-<script src="/builders/shell.js?v=2026-10-03-looks"></script>
+<script src="/builders/shell-trail.js?v=2026-10-04-palette"></script>
+<script src="/builders/craft-mode.js?v=2026-10-04-palette"></script>
+<script src="/builders/shell.js?v=2026-10-04-palette"></script>
 <script src="/builders/palette.js" defer></script>
 
 <script src="/builders/idea-objects.js?v=2026-09-27-split"></script>

package/modules/hall-ui/public/tweak-editor.html

@@ -142,9 +142,9 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell-trail.js?v=2026-10-03-looks"></script>
-<script src="/builders/craft-mode.js?v=2026-10-03-looks"></script>
-<script src="/builders/shell.js?v=2026-10-03-looks"></script>
+<script src="/builders/shell-trail.js?v=2026-10-04-palette"></script>
+<script src="/builders/craft-mode.js?v=2026-10-04-palette"></script>
+<script src="/builders/shell.js?v=2026-10-04-palette"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <script src="/builders/brand-holes.js?v=2026-09-29-aqfix"></script>

package/modules/hall-ui/public/watch.html

@@ -162,9 +162,9 @@
 
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
-<script src="/builders/shell-trail.js?v=2026-10-03-looks"></script>
-<script src="/builders/craft-mode.js?v=2026-10-03-looks"></script>
-<script src="/builders/shell.js?v=2026-10-03-looks"></script>
+<script src="/builders/shell-trail.js?v=2026-10-04-palette"></script>
+<script src="/builders/craft-mode.js?v=2026-10-04-palette"></script>
+<script src="/builders/shell.js?v=2026-10-04-palette"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before watch.js, which pulls from it. -->

package/modules/hall-ui/public/work.html

@@ -171,9 +171,9 @@
 
 <!-- The app shell (sidebar + top bar + footer). Dependency-free; runs at parse
      time so the chrome exists before the deferred page scripts execute. -->
-<script src="/builders/shell-trail.js?v=2026-10-03-looks"></script>
-<script src="/builders/craft-mode.js?v=2026-10-03-looks"></script>
-<script src="/builders/shell.js?v=2026-10-03-looks"></script>
+<script src="/builders/shell-trail.js?v=2026-10-04-palette"></script>
+<script src="/builders/craft-mode.js?v=2026-10-04-palette"></script>
+<script src="/builders/shell.js?v=2026-10-04-palette"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded FIRST so work.js can pull from it. -->

package/modules/hall-ui/records/page-notes.md

@@ -0,0 +1,16 @@
+# Page feedback docs — the Artistry palette (task 1004496, goal 1000095 WA6)
+
+Covers: the palette tool in the top bar (`craft-mode.js` `TOOLS`), the feedback sheet (`page-notes.js`, `.pn*` and `.craft-tool*` in `style.css`). The store and its rules are `modules/page-notes/CLAUDE.md`.
+
+## What it is
+
+- In **Artistry** mode a round palette button sits right before the mode switch ("Feedback" beside it from 1181px up, the glyph alone below, as the switch folds). Pressing it opens a sheet from the right: "What should this page be?", a long text area, **Add images** (PNG, JPG, GIF, WebP, 4 MB each, eight per doc), and **Turn into ideas**. The draft saves as you type; closing loses nothing, and reopening on the same page resumes it.
+- On submit the server's AI split files each point as its own idea under the artist's name; the sheet shows the ideas it became. Under the writing area, **This page's reference docs** lists the page's submitted docs; each opens in place.
+- **`?note=N` on any hall page opens that doc on arrival, in any mode.** Every idea a doc became links there, which is how the doc is retrievable from its ideas.
+
+## The rules an edit here must keep
+
+- **The tool's code is not on every page.** `craft-mode.js` loads `page-notes.js` the first time the palette is pressed (or a `?note=` link arrives), at the same `?v` as itself. A new mode tool (paintbrush 1004497, lightbulb 1004498) is a `TOOLS` entry with its own script, not more code in `craft-mode.js`.
+- **The reader shows only this module's own images** (`/api/bongos/page-notes/images/<id>`); any other image markdown stays text, and the doc is escaped. `tests/page_notes_panel.mjs` pins it.
+- **The page id is the page inventory's** — `builders:` plus `body[data-page]` — so a doc keys to the same id every other page record uses.
+- **Colours stay in `style.css`.** The tool takes `--craft` (falling back to ink outside a looked mode); the submit button keeps the accent, because it is the thing to press.

package/modules/ideas/governor-docket.js

@@ -42,6 +42,8 @@ function blockerDocketMatter(b, mayResolve) {
     tally: null,
     href: `/blockers#blocker-${b.id}`,
     ref: { type: 'blocker', id: b.id },
+    // the card's "more" (task 1004566): the body GET /blockers shows everyone
+    detail: b.body_md || null,
     // the floor desk's one act (task 1004560): decide, by one of its options
     ...(mayResolve ? { acts: [{ key: 'decide', options: blockerOptions(b.body_md) }] } : {}),
   };

package/modules/lifecycle/governor-docket.js

@@ -41,6 +41,8 @@ function overrideMatter(r, mayDecide) {
     tally: null,
     href: `/task/${encodeURIComponent(r.task_id)}`,
     ref: { type: 'override_request', id: r.id },
+    // the card's "more" (task 1004566): the reason GET /override-requests shows
+    detail: r.rationale || null,
   };
 }
 
@@ -58,6 +60,8 @@ function removalMatter(r) {
     tally: null,
     href: `/task/${encodeURIComponent(r.proposal_task_id)}`,
     ref: { type: 'task', id: r.proposal_task_id },
+    // the card's "more" (task 1004566): the proposal's own text, from the same read
+    detail: r.description || null,
     // POST /removal-proposals/:id/decide, the docket source's own atom (task 1004559)
     acts: [{ key: 'remove' }, { key: 'keep' }],
   };

package/modules/onboarding/routes/access-requests.js

@@ -236,6 +236,8 @@ function accessRequestDocketMatter(r) {
     tally: null,
     href: '/watch',
     ref: { type: 'access_request', id: r.id },
+    // the card's "more" (task 1004566): their note, as GET /access-requests shows it
+    detail: r.note || null,
   };
 }
 

package/modules/page-notes/CLAUDE.md

@@ -0,0 +1,15 @@
+# @bongos/core — installed platform dependency (not your project's CLAUDE.md)
+
+This file is a placeholder shipped inside the **@bongos/core** package. The core's own
+internal agent notes are intentionally omitted from the published artifact so they cannot
+load into your instance's context.
+
+**It does not govern this repository.** Your own root `CLAUDE.md`, your `.claude/`
+directory, and the live Bongos database are the source of truth for how work happens here
+and who may do what.
+
+You are seeing this only because an agent opened a file under `node_modules/@bongos/core/`.
+Nothing in here needs to be read to use the platform — run `bongos help` for commands.
+
+_To work ON the platform core itself, use the standalone @bongos/core source repository,
+not this vendored copy._

package/modules/page-notes/db.js

@@ -0,0 +1,147 @@
+// modules/page-notes/db.js — the thin SQL behind a page feedback doc (task
+// 1004496). Every function takes an optional executor so a test can hand in a
+// fake query function; the default is the shared pool.
+
+'use strict';
+
+const { pool } = require('../../src/module-api');
+
+const exec = (executor) => executor || ((text, params) => pool.query(text, params));
+
+const COLUMNS = `n.id, n.page_id, n.page_path, n.page_title, n.body_md, n.author_id, n.status, n.split_by,
+  n.idea_ids, n.created_at, n.updated_at, n.submitted_at, n.filed_at,
+  b.github_login AS author_login, COALESCE(NULLIF(b.display_name, ''), b.github_login) AS author_name`;
+
+// The builder's open draft for a page, made if there is none. ON CONFLICT on
+// the one-draft index makes two tabs opening at once resolve to one row.
+async function openDraft({ authorId, pageId, pagePath, pageTitle }, executor) {
+  const q = exec(executor);
+  await q(
+    `INSERT INTO page_notes_docs (page_id, page_path, page_title, author_id)
+     VALUES ($1, $2, $3, $4)
+     ON CONFLICT (author_id, page_id) WHERE status = 'draft' DO NOTHING`,
+    [pageId, pagePath, pageTitle, authorId],
+  );
+  const r = await q(
+    `SELECT ${COLUMNS} FROM page_notes_docs n JOIN builders b ON b.id = n.author_id
+      WHERE n.author_id = $1 AND n.page_id = $2 AND n.status = 'draft'`,
+    [authorId, pageId],
+  );
+  return r.rows[0] || null;
+}
+
+async function getNote(id, executor) {
+  const q = exec(executor);
+  const r = await q(`SELECT ${COLUMNS} FROM page_notes_docs n JOIN builders b ON b.id = n.author_id WHERE n.id = $1`, [id]);
+  return r.rows[0] || null;
+}
+
+// A page's submitted docs, newest first, with no body (the list shows an excerpt).
+async function listForPage(pageId, { limit = 20 } = {}, executor) {
+  const q = exec(executor);
+  const r = await q(
+    `SELECT n.id, n.page_id, n.page_title, n.status, n.submitted_at, n.idea_ids,
+            left(n.body_md, 400) AS excerpt,
+            COALESCE(NULLIF(b.display_name, ''), b.github_login) AS author_name
+       FROM page_notes_docs n JOIN builders b ON b.id = n.author_id
+      WHERE n.page_id = $1 AND n.status <> 'draft'
+      ORDER BY n.submitted_at DESC NULLS LAST, n.id DESC
+      LIMIT $2`,
+    [pageId, limit],
+  );
+  return r.rows;
+}
+
+async function saveBody(id, authorId, bodyMd, executor) {
+  const q = exec(executor);
+  const r = await q(
+    `UPDATE page_notes_docs SET body_md = $3, updated_at = now()
+      WHERE id = $1 AND author_id = $2 AND status = 'draft'
+      RETURNING id, updated_at`,
+    [id, authorId, bodyMd],
+  );
+  return r.rows[0] || null;
+}
+
+async function countImages(noteId, executor) {
+  const q = exec(executor);
+  const r = await q('SELECT count(*)::int AS n FROM page_notes_images WHERE note_id = $1', [noteId]);
+  return r.rows[0] ? r.rows[0].n : 0;
+}
+
+async function addImage(noteId, { content_type: type, bytes, name }, executor) {
+  const q = exec(executor);
+  const r = await q(
+    `INSERT INTO page_notes_images (note_id, content_type, name, bytes)
+     VALUES ($1, $2, $3, $4) RETURNING id, name, content_type, octet_length(bytes) AS size`,
+    [noteId, type, name, bytes],
+  );
+  return r.rows[0] || null;
+}
+
+async function listImages(noteId, executor) {
+  const q = exec(executor);
+  const r = await q(
+    'SELECT id, name, content_type, octet_length(bytes) AS size FROM page_notes_images WHERE note_id = $1 ORDER BY id',
+    [noteId],
+  );
+  return r.rows;
+}
+
+// One image with the status and author of the doc it belongs to, which is what
+// decides who may see it.
+async function getImage(id, executor) {
+  const q = exec(executor);
+  const r = await q(
+    `SELECT i.id, i.content_type, i.bytes, n.status, n.author_id
+       FROM page_notes_images i JOIN page_notes_docs n ON n.id = i.note_id WHERE i.id = $1`,
+    [id],
+  );
+  return r.rows[0] || null;
+}
+
+// Submit: the draft becomes 'splitting', and images its text no longer shows
+// are dropped. Conditional on 'draft', so a double click submits once.
+async function markSplitting(id, authorId, keepImageIds, executor) {
+  const q = exec(executor);
+  const r = await q(
+    `UPDATE page_notes_docs SET status = 'splitting', submitted_at = now(), updated_at = now()
+      WHERE id = $1 AND author_id = $2 AND status = 'draft' RETURNING id`,
+    [id, authorId],
+  );
+  if (!r.rows[0]) return false;
+  await q('DELETE FROM page_notes_images WHERE note_id = $1 AND NOT (id = ANY($2::bigint[]))', [id, keepImageIds]);
+  return true;
+}
+
+async function markFiled(id, { ideaIds, splitBy }, executor) {
+  const q = exec(executor);
+  const r = await q(
+    `UPDATE page_notes_docs SET status = 'filed', idea_ids = $2::bigint[], split_by = $3, filed_at = now(), updated_at = now()
+      WHERE id = $1 AND status = 'splitting' RETURNING id`,
+    [id, ideaIds, splitBy],
+  );
+  return !!r.rows[0];
+}
+
+// The ideas a doc became, by title, for the doc's own view.
+async function ideaTitles(ids, executor) {
+  if (!ids || !ids.length) return [];
+  const q = exec(executor);
+  const r = await q('SELECT id, title, status FROM idea_inbox WHERE id = ANY($1::bigint[]) ORDER BY id', [ids]);
+  return r.rows;
+}
+
+module.exports = {
+  openDraft,
+  getNote,
+  listForPage,
+  saveBody,
+  countImages,
+  addImage,
+  listImages,
+  getImage,
+  markSplitting,
+  markFiled,
+  ideaTitles,
+};

package/modules/page-notes/migrations/page_notes_001_notes.sql

@@ -0,0 +1,68 @@
+-- page_notes_001_notes.sql — an artist's feedback doc on one hall page, and the
+-- reference images it carries (task 1004496, goal 1000095 WA6).
+--
+-- In Artistry mode the palette button opens a feedback doc for the page you are
+-- on. The doc can be as long as it needs to be and carries uploaded reference
+-- images. On submit an AI splits it into separate ideas in the idea inbox, each
+-- attributed to the artist, and the doc itself STAYS as the page's design
+-- reference: later tasks on that page can cite it, and every idea it became
+-- links back to it.
+--
+-- WHY A ROW AND NOT THE COPY DESK. The copy desk's rule is "no live CMS": it may
+-- hold no wording that could become product copy. A feedback doc is not product
+-- copy — it is a person's judgement about a page, like an idea's body — so it
+-- lives in its own module, and nothing here is ever rendered as the page's text.
+--
+-- page_id is the page inventory's stable id, `<surface>:<page>` (docs/page-
+-- inventory.json). page_path is where the doc's links lead back to.
+-- Images live in the database, not on disk: a doc holds a handful of
+-- screenshots, and a row survives every core upgrade and backup with no path
+-- to get wrong (the task-visuals store had to be moved once for exactly that).
+
+CREATE TABLE IF NOT EXISTS page_notes_docs (
+  id            BIGSERIAL   PRIMARY KEY,
+  page_id       TEXT        NOT NULL,
+  page_path     TEXT        NOT NULL DEFAULT '',
+  page_title    TEXT        NOT NULL DEFAULT '',
+  body_md       TEXT        NOT NULL DEFAULT '',
+  author_id     BIGINT      NOT NULL REFERENCES builders(id),
+  status        TEXT        NOT NULL DEFAULT 'draft',
+  split_by      TEXT,
+  idea_ids      BIGINT[]    NOT NULL DEFAULT '{}',
+  created_at    TIMESTAMPTZ NOT NULL DEFAULT now(),
+  updated_at    TIMESTAMPTZ NOT NULL DEFAULT now(),
+  submitted_at  TIMESTAMPTZ,
+  filed_at      TIMESTAMPTZ,
+  CONSTRAINT page_notes_page_id_chk CHECK (page_id ~ '^[a-z][a-z0-9-]{0,31}:[a-z0-9][a-z0-9_-]{0,63}$'),
+  CONSTRAINT page_notes_page_path_chk CHECK (length(page_path) <= 200 AND (page_path = '' OR page_path ~ '^/[A-Za-z0-9/_.-]*$')),
+  CONSTRAINT page_notes_page_title_chk CHECK (length(page_title) <= 120),
+  CONSTRAINT page_notes_body_chk CHECK (length(body_md) <= 40000),
+  CONSTRAINT page_notes_status_chk CHECK (status IN ('draft', 'splitting', 'filed')),
+  CONSTRAINT page_notes_split_by_chk CHECK (split_by IS NULL OR split_by IN ('ai', 'whole')),
+  CONSTRAINT page_notes_ideas_bounded CHECK (cardinality(idea_ids) <= 20)
+);
+
+-- One open draft per builder per page: reopening the palette resumes it.
+CREATE UNIQUE INDEX IF NOT EXISTS page_notes_one_draft
+  ON page_notes_docs (author_id, page_id) WHERE status = 'draft';
+-- The page's reference docs, newest first.
+CREATE INDEX IF NOT EXISTS page_notes_by_page
+  ON page_notes_docs (page_id, submitted_at DESC) WHERE status <> 'draft';
+
+CREATE TABLE IF NOT EXISTS page_notes_images (
+  id            BIGSERIAL   PRIMARY KEY,
+  note_id       BIGINT      NOT NULL REFERENCES page_notes_docs(id) ON DELETE CASCADE,
+  content_type  TEXT        NOT NULL,
+  name          TEXT        NOT NULL DEFAULT '',
+  bytes         BYTEA       NOT NULL,
+  created_at    TIMESTAMPTZ NOT NULL DEFAULT now(),
+  -- SVG is deliberately absent: it is an executable document, and these are
+  -- served from our own origin (the task-visuals rule).
+  CONSTRAINT page_notes_images_type_chk CHECK (content_type IN ('image/png', 'image/jpeg', 'image/gif', 'image/webp')),
+  CONSTRAINT page_notes_images_size_chk CHECK (octet_length(bytes) BETWEEN 1 AND 4194304),
+  CONSTRAINT page_notes_images_name_chk CHECK (length(name) <= 120)
+);
+CREATE INDEX IF NOT EXISTS page_notes_images_by_note ON page_notes_images (note_id);
+
+INSERT INTO schema_migrations (version) VALUES ('page_notes_001_notes')
+  ON CONFLICT DO NOTHING;