@bongos/core 1.21.65 → 1.21.66

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.21.65",
-  "core_contract": "1.21.65",
-  "source_commit": "bf961553e46095e169f2fb5218e409ff2ce03a8f",
+  "core_version": "1.21.66",
+  "core_contract": "1.21.66",
+  "source_commit": "7d5fb4a32c7bde51ddbc429756639ecba23c987f",
   "source_ref": "HEAD",
-  "built_at": "2026-10-06T14:51:44.072Z",
+  "built_at": "2026-10-06T15:22:33.015Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 587,
     "agent_docs_stubbed": 28,
-    "functional_verbatim": 2954,
+    "functional_verbatim": 2953,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 3570,
-  "tree_sha256": "bbb40e44796d6e7f5f34f46813add3554ad9d3a8ec722731a46bf1fa2ea1022f",
+  "file_count": 3569,
+  "tree_sha256": "5267240f0d28ca05c97ca9e9911fb79f57f5027e6d0434e2c9a1c1f1b45bd600",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -2332,12 +2332,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "73103f4bef4fcc8dca7b91dff1ae4cf5d4f3dd7e188efcef3a6a848633816cc5"
+      "sha256": "deee182912a3b4f6827af242e28d903b85ab53fc563d122a8c1c842739413ae3"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "2c74dc77936690dbc7879a1b7bef5680555fdf2cb99dbe74de2ee5ee89e7035d"
+      "sha256": "55481321c3bbf249cff8cf69935f95b2ca8901239310ea1093d6d58d45f81c08"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2847,7 +2847,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "3e70987df8e2ab36308b3ad31db5f3d8de001ee085b77c0093fb8962511cd07f"
+      "sha256": "243f9810e7be9a77ae9e4aa5f0fbcf084ea2e261f521053aba2beb2d57667af9"
     },
     {
       "path": "docs/modules-contract.md",
@@ -2932,12 +2932,12 @@
     {
       "path": "docs/page-inventory.json",
       "mode": "0000644",
-      "sha256": "bfc236a808f6cd7cdc51fd2b872077500d7d5932d16a365d4c4a081521f729e7"
+      "sha256": "9ac8290512a1b7dee3b6b2ab836473beea4589d6ed9407d884659c3bd973c78b"
     },
     {
       "path": "docs/page-readings.json",
       "mode": "0000644",
-      "sha256": "e5649a86d502afffa3d71a744f49511bad2ceffdbfc1eecae1206a79761f53f6"
+      "sha256": "79c99779b57ad095968f0173411caa5a521b4ad4ffd76c7a54a8a93682854573"
     },
     {
       "path": "docs/project-context.template.md",
@@ -5964,11 +5964,6 @@
       "mode": "0000644",
       "sha256": "ade6ff2b23d9b7e7b01f893148c53733f1c9bd11c50d0f01c662b9726239fd98"
     },
-    {
-      "path": "modules/hall-ui/public/profile-canonical.js",
-      "mode": "0000644",
-      "sha256": "4f010fd2a4e77447839eb77f5e294ea62c525fc47f392e916790f37078a92726"
-    },
     {
       "path": "modules/hall-ui/public/profile-charts.js",
       "mode": "0000644",
@@ -6002,12 +5997,12 @@
     {
       "path": "modules/hall-ui/public/profile.html",
       "mode": "0000644",
-      "sha256": "ad569cbd5d3388c408397015b4045bc7fe3691327dce16b024206a01f2c35315"
+      "sha256": "a43f55145547d63da5c38e9173d227853904b508caa3282f34585c2cd4bf678e"
     },
     {
       "path": "modules/hall-ui/public/profile.js",
       "mode": "0000644",
-      "sha256": "e2292fbbe7bc80fa3c53e93ed67bc0c022bb00c9a6fe4672de163244a61082f3"
+      "sha256": "4a16a4b2a5bb5e444f514723656a3775bf65aef9180d4d25ed0a6693101060fb"
     },
     {
       "path": "modules/hall-ui/public/profile.states.json",
@@ -9977,12 +9972,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "f74efc3baf5ed890ece42d60d96e89fcaf6a798f44558b400c079839ff46e3e8"
+      "sha256": "6c64398d62e13b46e7372422ead03873bc142124c89e02e92ed923cec360e9e8"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "33e94ab67e0bf024b19d2a59ac82e00a76e2878e28e5d962c5222fbec419cbb9"
+      "sha256": "a6a8fcb855c7bc3af08820abdee41c3a9aecdb1b0f368429edf413e17106c9d7"
     },
     {
       "path": "public-docs/index.html",
@@ -10002,7 +9997,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "f5e7adc2ee05b1a16498418766dba9f6ca27c708c750ba9dfbb501a899d476c1"
+      "sha256": "5849cac3f0e8260822d39216ad50c17560c8ef4cbed7a48d760a3b2f8247b38f"
     },
     {
       "path": "scripts/cron/style_guide_audit.sh",
@@ -12222,7 +12217,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "be6c5f14da4c58d5449936a2c21aa984d00db13cb51c804e26dcdc25e36a18e3"
+      "sha256": "476059af8acd597e4ecfc9d3beb9447f6473475d15fc93ed16339d42f5c3ffa2"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -12907,7 +12902,7 @@
     {
       "path": "tests/canonical_profile_url.mjs",
       "mode": "0000644",
-      "sha256": "41a5c46e470255b6e9e9036bc6d5d0710f8cb0f8c576ec166d2e2831544a2d2c"
+      "sha256": "328e949ff0c675cdf1f54f445f36517e740454fe57f1a4ab5fd10edbc20a2f8f"
     },
     {
       "path": "tests/cap_newcomer_tasks.mjs",

package/docs/copy-inventory.md

@@ -4,13 +4,13 @@
 > Deterministic on a given tree — regenerate and commit rather than hand-editing.
 > Machine-readable twin: [`copy-registry.json`](copy-registry.json).
 
-**2557 strings** across 3 surfaces · 2184 distinct pieces of copy · 2557 certain, 0 heuristic · 227 shown in more than one place.
+**2556 strings** across 3 surfaces · 2183 distinct pieces of copy · 2556 certain, 0 heuristic · 227 shown in more than one place.
 
 ## Surfaces
 
 | surface | lives at | files | strings |
 |---|---|---|---|
-| `builders-hall` | `modules/hall-ui/public` | 134 | 1829 |
+| `builders-hall` | `modules/hall-ui/public` | 133 | 1828 |
 | `status-dashboard` | `modules/status-ui/public` | 4 | 100 |
 | `landing` | `modules/public-landing/public` | 7 | 628 |
 
@@ -78,7 +78,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `f6f68ba322be` | 3x | Open {…} | modules/hall-ui/public/goal-inbox.js:53, modules/hall-ui/public/goal-inbox.js:69, modules/hall-ui/public/goals.js:67 |
 | … | | _187 more in the JSON registry_ | |
 
-## `builders-hall` — 1829 strings
+## `builders-hall` — 1828 strings
 
 | id | conf | text | where |
 |---|---|---|---|
@@ -104,7 +104,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `ac57fe1ccd6e` | certain | , follow its acceptance criteria, stay within touches[], /builder-ship | `modules/hall-ui/public/bulk-toolbar.js:78` |
 | `574acf2f93bb` | certain | , never quietly ratified — so a clock is worth proposing. The recommended sitting is | `modules/hall-ui/public/government.js:605` |
 | `741e355954ac` | certain | , not at ship). | `modules/hall-ui/public/diagrams.html:52` |
-| `b31a6bd7edc5` | certain | , or | `modules/hall-ui/public/profile.js:982` |
+| `b31a6bd7edc5` | certain | , or | `modules/hall-ui/public/profile.js:977` |
 | `c7c9b0afc38e` | certain | , then mark it as read on the Home page. | `modules/hall-ui/public/work.html:45` |
 | `7627d5c3aa29` | certain | 0 decided | `modules/hall-ui/public/street.html:73` |
 | `24174ce79df3` | certain | 1 · Task lifecycle | `modules/hall-ui/public/diagrams.html:49` |
@@ -146,7 +146,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `6ca31dd5eb91` | certain | Acknowledge the primer | `modules/hall-ui/public/primer.html:99` |
 | `74cc57f76b42` | certain | Active recently | `modules/hall-ui/public/watch.js:458` |
 | `524188fe0078` | certain | Active sessions | `modules/hall-ui/public/settings.html:159` |
-| `d628b36ec58e` | certain | Activity, by role | `modules/hall-ui/public/profile.html:137` |
+| `d628b36ec58e` | certain | Activity, by role | `modules/hall-ui/public/profile.html:138` |
 | `2b94171ce525` | certain | Add dependency | `modules/hall-ui/public/task.js:592` |
 | `a70b72ec4dcc` | certain | Add images | `modules/hall-ui/public/page-notes.js:97` |
 | `da8659b0099b` | certain | Add something you wrote — notes, a standard, a worked example. It is indexed for recall, not pasted into every | `modules/hall-ui/public/settings-specialities.js:354` |
@@ -240,7 +240,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `46b33550d52b` | certain | Bulk claim | `modules/hall-ui/public/work.html:164` |
 | `6d6d626fc518` | certain | Bulk release | `modules/hall-ui/public/goals.html:183` |
 | `6d6d626fc518` | certain | Bulk release | `modules/hall-ui/public/work.html:165` |
-| `181cfa50b127` | certain | By the numbers | `modules/hall-ui/public/profile.html:64` |
+| `181cfa50b127` | certain | By the numbers | `modules/hall-ui/public/profile.html:65` |
 | `a015a43bfc7f` | certain | CLI access | `modules/hall-ui/public/settings.html:141` |
 | `09e863eb90af` | certain | Can: {…} | `modules/hall-ui/public/government.js:873` |
 | `084eb64bce72` | certain | Capabilities held by a machine identity, never by a person or a rank. Shown for completeness; nothing here can | `modules/hall-ui/public/government.html:123` |
@@ -353,7 +353,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `a2f2e8babef5` | certain | Could not load that page. Try again. | `modules/hall-ui/public/blockers.js:276` |
 | `9d8192ac9098` | certain | Could not load the earnings. | `modules/hall-ui/public/profile-charts.js:546` |
 | `b2147cc90e36` | certain | Could not load the idea template. Reload, or file from the terminal with capture.js. | `modules/hall-ui/public/ideas.js:1000` |
-| `7604af13c40e` | certain | Could not load the profile. | `modules/hall-ui/public/profile.js:1059` |
+| `7604af13c40e` | certain | Could not load the profile. | `modules/hall-ui/public/profile.js:1054` |
 | `8b69e445592a` | certain | Could not load the question labels; showing the answers as stored. | `modules/hall-ui/public/idea.js:458` |
 | `edd5bafbe075` | certain | Could not load the queue just now. | `modules/hall-ui/public/ideas.js:885` |
 | `02bb0570996a` | certain | Could not load the ranks. | `modules/hall-ui/public/ranks.js:197` |
@@ -415,7 +415,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `af21de422c14` | certain | Create speciality | `modules/hall-ui/public/settings.html:292` |
 | `d7beb841395e` | certain | Create task | `modules/hall-ui/public/task-detail.js:465` |
 | `e91a4d2e3e1c` | certain | Created rank {…}. | `modules/hall-ui/public/government.js:442` |
-| `a55e423263f0` | certain | Cross-project record | `modules/hall-ui/public/profile.html:98` |
+| `a55e423263f0` | certain | Cross-project record | `modules/hall-ui/public/profile.html:99` |
 | `24013a074724` | certain | Custom rank | `modules/hall-ui/public/government.html:113` |
 | `13b22e48d9fb` | certain | Danger zone | `modules/hall-ui/public/project-settings.html:57` |
 | `cf7d7d5d5e83` | certain | Database behind. | `modules/hall-ui/public/deploy.js:582` |
@@ -477,7 +477,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `6604d63c2fb4` | certain | Everyone who joined while this project was being founded, in the order they arrived. The mark is for good. | `modules/hall-ui/public/hall-widgets.js:124` |
 | `04bbccfe7465` | certain | Everything a new builder needs before claiming their first task. About a ten-minute read. | `modules/hall-ui/public/primer.html:42` |
 | `89d9c0962048` | certain | Everything that fell out of it | `modules/hall-ui/public/idea.js:420` |
-| `37110f7e2b27` | certain | Everything this builder has shipped. Seen one role at a time, with goals and ideas, under | `modules/hall-ui/public/profile.html:112` |
+| `37110f7e2b27` | certain | Everything this builder has shipped. Seen one role at a time, with goals and ideas, under | `modules/hall-ui/public/profile.html:113` |
 | `efdb46f76b02` | certain | Everything this instance can run: what the core ships, what this project built, and who keeps each one true as | `modules/hall-ui/public/modules.html:35` |
 | `57d5ba0fdefb` | certain | Exit full screen | `modules/hall-ui/public/shell.js:581` |
 | `94339ddaeeea` | certain | Explore: the sky reveals itself as you follow routes from where you begin. | `modules/hall-ui/public/goal-map.html:74` |
@@ -550,7 +550,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `8a421ae268e6` | certain | Goal {…} removed. | `modules/hall-ui/public/gate.js:504` |
 | `e0bc28d10785` | certain | Goals could not be loaded. Refresh to try again. | `modules/hall-ui/public/goals-page.js:883` |
 | `4517f2253d0f` | certain | Goals couldn’t be loaded just now. Refresh to try again. | `modules/hall-ui/public/goals.js:121` |
-| `6a85997bda21` | certain | Goals created | `modules/hall-ui/public/profile.html:153` |
+| `6a85997bda21` | certain | Goals created | `modules/hall-ui/public/profile.html:154` |
 | `6bbd703b5aad` | certain | Goals it can work on | `modules/hall-ui/public/gate.js:376` |
 | `2ed2cb8fbffd` | certain | Goals page | `modules/hall-ui/public/goals.js:94` |
 | `320a0516a33e` | certain | Goals seeded — awaiting kickoff | `modules/hall-ui/public/roadmap.js:271` |
@@ -680,7 +680,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `3b49f0fcd19c` | certain | Load more turns | `modules/hall-ui/public/sessions.html:101` |
 | `daf84bba41b1` | certain | Loading goals… | `modules/hall-ui/public/goals.html:36` |
 | `93ceeaa4e226` | certain | Loading idea | `modules/hall-ui/public/idea.html:30` |
-| `2b5826012538` | certain | Loading profile… | `modules/hall-ui/public/profile.html:35` |
+| `2b5826012538` | certain | Loading profile… | `modules/hall-ui/public/profile.html:36` |
 | `554b156a08d6` | certain | Loading sessions… | `modules/hall-ui/public/sessions.html:32` |
 | `a0c18cece568` | certain | Loading sittings… | `modules/hall-ui/public/board-room.js:553` |
 | `7ca55f9ba183` | certain | Loading task | `modules/hall-ui/public/task.html:32` |
@@ -756,7 +756,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `c255749ec989` | certain | No achievements earned yet. | `modules/hall-ui/public/profile.js:199` |
 | `479c1a45f39d` | certain | No backlog tasks match these filters. Try widening them. | `modules/hall-ui/public/work.js:831` |
 | `83f62fc94271` | certain | No builder account found for this sign-in. | `modules/hall-ui/public/settings.js:1204` |
-| `2e9c154c09cd` | certain | No builder selected. Open a builder from the | `modules/hall-ui/public/profile.js:982` |
+| `2e9c154c09cd` | certain | No builder selected. Open a builder from the | `modules/hall-ui/public/profile.js:977` |
 | `449db2ead464` | certain | No changes are listed for this version. | `modules/hall-ui/public/settings-software-update.js:103` |
 | `6d6fd2314248` | certain | No cross-project activity reported yet. | `modules/hall-ui/public/profile.js:402` |
 | `b1ada579483c` | certain | No custom ranks yet | `modules/hall-ui/public/government.js:358` |
@@ -885,7 +885,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `569980a263ae` | certain | Optional. This is the ledger link — a copy change ships as a task like every other change. | `modules/hall-ui/public/copy-desk.html:130` |
 | `f2e9e8f21e8e` | certain | Or add someone without asking… | `modules/hall-ui/public/goals-render.js:1264` |
 | `d89d1923ecf9` | certain | Over the last {…} days | `modules/hall-ui/public/watch.js:1274` |
-| `695ffff13730` | certain | Over time | `modules/hall-ui/public/profile.html:76` |
+| `695ffff13730` | certain | Over time | `modules/hall-ui/public/profile.html:77` |
 | `5ded44da0cc5` | certain | Override requests | `modules/hall-ui/public/watch.html:139` |
 | `0046e08db06a` | certain | Owner’s bill / month (est.) | `modules/hall-ui/public/fleet-costs.js:70` |
 | `15a49bf15007` | certain | Page {…} of {…} | `modules/hall-ui/public/hall-kit.js:112` |
@@ -919,7 +919,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `92d8fad6dc91` | certain | Private account — this is all they share by applying. | `modules/hall-ui/public/watch.js:459` |
 | `2b88c01d1697` | certain | Private — join is by invitation or an approved request | `modules/hall-ui/public/goals-render.js:877` |
 | `a5cd9cbfe82a` | certain | Profile and privacy | `modules/hall-ui/public/settings.html:103` |
-| `f796836eac4e` | certain | Profile sections | `modules/hall-ui/public/profile.html:45` |
+| `f796836eac4e` | certain | Profile sections | `modules/hall-ui/public/profile.html:46` |
 | `935b317ce2d8` | certain | Profile — {{worldName}} | `modules/hall-ui/public/profile.html:6` |
 | `935b317ce2d8` | certain | Profile — {{worldName}} | `modules/hall-ui/public/profile.html:6` |
 | `cf8d14410264` | certain | Project founding mode | `modules/hall-ui/public/shell.js:950` |
@@ -1048,7 +1048,6 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `324af64c8b6e` | certain | See all {…} goals {…} | `modules/hall-ui/public/roadmap.js:128` |
 | `324af64c8b6e` | certain | See all {…} goals {…} | `modules/hall-ui/public/roadmap.js:260` |
 | `00473a773fd7` | certain | See the UAT | `modules/hall-ui/public/criterion-uat-ui.js:80` |
-| `a9c398651862` | certain | See the cross-project record | `modules/hall-ui/public/profile-canonical.js:114` |
 | `17d5b5739f46` | certain | See the work board → | `modules/hall-ui/public/hall-render.js:948` |
 | `55cde0774831` | certain | See what would change | `modules/hall-ui/public/deploy.js:425` |
 | `292761c89fae` | certain | See which goals wait on each other → | `modules/hall-ui/public/goals.html:39` |
@@ -1417,7 +1416,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `e179870922a3` | certain | What the session did, derived from its own transcript: whether it wrote files, used tools, and how many prompt | `modules/hall-ui/public/sessions.html:74` |
 | `868cf4bbe616` | certain | What the start-it markers mean | `modules/hall-ui/public/commands.html:35` |
 | `5a58392783fd` | certain | What this brings in | `modules/hall-ui/public/deploy.js:553` |
-| `a444ad812e4f` | certain | What this builder has done, seen one role at a time. | `modules/hall-ui/public/profile.html:138` |
+| `a444ad812e4f` | certain | What this builder has done, seen one role at a time. | `modules/hall-ui/public/profile.html:139` |
 | `32d675a2b022` | certain | What this rank is for (optional) | `modules/hall-ui/public/government.html:90` |
 | `04b3ff4c4f4c` | certain | What users can see | `modules/hall-ui/public/deploy.html:47` |
 | `1d5bfd09068c` | certain | What you saw | `modules/hall-ui/public/studio.js:191` |
@@ -1453,7 +1452,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `c5fd76a9e03d` | certain | Won {…} | `modules/hall-ui/public/profile.js:206` |
 | `986514f35589` | certain | Work board | `modules/hall-ui/public/work.html:31` |
 | `520d139df9eb` | certain | Work is complete but the version is held — no tasks are being claimed here right now. | `modules/hall-ui/public/roadmap.js:289` |
-| `0e6b8e8f26cc` | certain | Works completed | `modules/hall-ui/public/profile.html:148` |
+| `0e6b8e8f26cc` | certain | Works completed | `modules/hall-ui/public/profile.html:149` |
 | `52e5fe3c6075` | certain | Write a Full Idea | `modules/hall-ui/public/ideas.html:145` |
 | `ad1e1ab1ecac` | certain | Write a reply… | `modules/hall-ui/public/collab.js:175` |
 | `a79ca1e2463b` | certain | Write another | `modules/hall-ui/public/page-notes.js:143` |
@@ -1703,7 +1702,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `b250b5c4eb03` | certain | shuttle · {…} | `modules/hall-ui/public/sky-interaction.js:45` |
 | `ec6d8c900bc8` | certain | sign in | `modules/hall-ui/public/profile-charts.js:605` |
 | `ec6d8c900bc8` | certain | sign in | `modules/hall-ui/public/profile.js:841` |
-| `ec6d8c900bc8` | certain | sign in | `modules/hall-ui/public/profile.js:982` |
+| `ec6d8c900bc8` | certain | sign in | `modules/hall-ui/public/profile.js:977` |
 | `c8c2551006dc` | certain | skip the tour | `modules/hall-ui/public/goal-map.html:121` |
 | `c8c2551006dc` | certain | skip the tour | `modules/hall-ui/public/thinking.html:122` |
 | `1e737a57eb20` | certain | start governing | `modules/hall-ui/public/city.html:79` |
@@ -1737,7 +1736,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `abddfb2b1022` | certain | the newest {…} only | `modules/hall-ui/public/sky-interaction.js:124` |
 | `4ad74172c874` | certain | the next page to tweak | `modules/hall-ui/public/studio.html:118` |
 | `2be732b11690` | certain | the owner’s blockers | `modules/hall-ui/public/deploy.js:229` |
-| `95854f8315ca` | certain | the page everyone else reads | `modules/hall-ui/public/profile.html:33` |
+| `95854f8315ca` | certain | the page everyone else reads | `modules/hall-ui/public/profile.html:34` |
 | `2f48995206d4` | certain | the pages /tweak has applied | `modules/hall-ui/public/studio.html:122` |
 | `4bde7b562cf4` | certain | the record | `modules/hall-ui/public/sky-panel.js:51` |
 | `4bde7b562cf4` | certain | the record | `modules/hall-ui/public/street.html:173` |
@@ -1755,7 +1754,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `94735a2353aa` | certain | to run it. | `modules/hall-ui/public/commands.html:37` |
 | `7d54a818850d` | certain | to see the full record. | `modules/hall-ui/public/profile.js:263` |
 | `3c9ba5dc851d` | certain | to see this list there. | `modules/hall-ui/public/commands.html:45` |
-| `47204e5f11de` | certain | to see your own profile. | `modules/hall-ui/public/profile.js:982` |
+| `47204e5f11de` | certain | to see your own profile. | `modules/hall-ui/public/profile.js:977` |
 | `23488ca48320` | certain | to take a task right here — no terminal needed. Then click | `modules/hall-ui/public/work.html:103` |
 | `1b88ce51fd84` | certain | to tend now · {…} | `modules/hall-ui/public/studio.js:233` |
 | `1b88ce51fd84` | certain | to tend now · {…} | `modules/hall-ui/public/studio.js:248` |

package/docs/copy-registry.json

@@ -3,17 +3,17 @@
   "generator": "scripts/gds/copy-inventory.js",
   "goal": 1000074,
   "counts": {
-    "strings": 2557,
-    "unique_ids": 2184,
-    "certain": 2557,
+    "strings": 2556,
+    "unique_ids": 2183,
+    "certain": 2556,
     "heuristic": 0,
     "duplicate_ids": 227
   },
   "surfaces": {
     "builders-hall": {
       "at": "modules/hall-ui/public",
-      "files": 134,
-      "strings": 1829
+      "files": 133,
+      "strings": 1828
     },
     "status-dashboard": {
       "at": "modules/status-ui/public",
@@ -669,7 +669,7 @@
       "at": [
         "modules/hall-ui/public/profile-charts.js:605",
         "modules/hall-ui/public/profile.js:841",
-        "modules/hall-ui/public/profile.js:982"
+        "modules/hall-ui/public/profile.js:977"
       ]
     },
     {
@@ -2659,7 +2659,7 @@
       "surface": "builders-hall",
       "text": ", or",
       "file": "modules/hall-ui/public/profile.js",
-      "line": 982,
+      "line": 977,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -3037,7 +3037,7 @@
       "surface": "builders-hall",
       "text": "Activity, by role",
       "file": "modules/hall-ui/public/profile.html",
-      "line": 137,
+      "line": 138,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -3883,7 +3883,7 @@
       "surface": "builders-hall",
       "text": "By the numbers",
       "file": "modules/hall-ui/public/profile.html",
-      "line": 64,
+      "line": 65,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -4900,7 +4900,7 @@
       "surface": "builders-hall",
       "text": "Could not load the profile.",
       "file": "modules/hall-ui/public/profile.js",
-      "line": 1059,
+      "line": 1054,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -5458,7 +5458,7 @@
       "surface": "builders-hall",
       "text": "Cross-project record",
       "file": "modules/hall-ui/public/profile.html",
-      "line": 98,
+      "line": 99,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -6016,7 +6016,7 @@
       "surface": "builders-hall",
       "text": "Everything this builder has shipped. Seen one role at a time, with goals and ideas, under",
       "file": "modules/hall-ui/public/profile.html",
-      "line": 112,
+      "line": 113,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -6673,7 +6673,7 @@
       "surface": "builders-hall",
       "text": "Goals created",
       "file": "modules/hall-ui/public/profile.html",
-      "line": 153,
+      "line": 154,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -7843,7 +7843,7 @@
       "surface": "builders-hall",
       "text": "Loading profile…",
       "file": "modules/hall-ui/public/profile.html",
-      "line": 35,
+      "line": 36,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -8527,7 +8527,7 @@
       "surface": "builders-hall",
       "text": "No builder selected. Open a builder from the",
       "file": "modules/hall-ui/public/profile.js",
-      "line": 982,
+      "line": 977,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -9688,7 +9688,7 @@
       "surface": "builders-hall",
       "text": "Over time",
       "file": "modules/hall-ui/public/profile.html",
-      "line": 76,
+      "line": 77,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -9994,7 +9994,7 @@
       "surface": "builders-hall",
       "text": "Profile sections",
       "file": "modules/hall-ui/public/profile.html",
-      "line": 45,
+      "line": 46,
       "origin": "html-attr:aria-label",
       "confidence": "certain"
     },
@@ -11150,15 +11150,6 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
-    {
-      "id": "a9c398651862",
-      "surface": "builders-hall",
-      "text": "See the cross-project record",
-      "file": "modules/hall-ui/public/profile-canonical.js",
-      "line": 114,
-      "origin": "js-markup",
-      "confidence": "certain"
-    },
     {
       "id": "17d5b5739f46",
       "surface": "builders-hall",
@@ -14476,7 +14467,7 @@
       "surface": "builders-hall",
       "text": "What this builder has done, seen one role at a time.",
       "file": "modules/hall-ui/public/profile.html",
-      "line": 138,
+      "line": 139,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -14800,7 +14791,7 @@
       "surface": "builders-hall",
       "text": "Works completed",
       "file": "modules/hall-ui/public/profile.html",
-      "line": 148,
+      "line": 149,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -17050,7 +17041,7 @@
       "surface": "builders-hall",
       "text": "sign in",
       "file": "modules/hall-ui/public/profile.js",
-      "line": 982,
+      "line": 977,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -17356,7 +17347,7 @@
       "surface": "builders-hall",
       "text": "the page everyone else reads",
       "file": "modules/hall-ui/public/profile.html",
-      "line": 33,
+      "line": 34,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -17518,7 +17509,7 @@
       "surface": "builders-hall",
       "text": "to see your own profile.",
       "file": "modules/hall-ui/public/profile.js",
-      "line": 982,
+      "line": 977,
       "origin": "js-markup",
       "confidence": "certain"
     },

package/docs/module-api-changelog.md

@@ -2962,5 +2962,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.21.63 with no explicit bump. run 37477390735. (task 1002620)
   1.21.65 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.21.64 with no explicit bump. run 37482378254. (task 1002620)
+  1.21.66 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.21.65 with no explicit bump. run 37486828045. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/docs/page-inventory.json

@@ -758,7 +758,6 @@
         "modules/hall-ui/public/hall-visual.js",
         "modules/hall-ui/public/hall-kit.js",
         "modules/hall-ui/public/profile-connections.js",
-        "modules/hall-ui/public/profile-canonical.js",
         "modules/hall-ui/public/profile-charts.js",
         "modules/hall-ui/public/founding-mark.js",
         "modules/hall-ui/public/profile-roles.js",

package/docs/page-readings.json

@@ -2374,7 +2374,7 @@
       "surface": "builders",
       "title": "Profile",
       "states_read": ["own","works","activity","activity-artist","activity-ideator","other","artist","ideator","out"],
-      "files_hash": "6fe4be25444cf73f",
+      "files_hash": "47ded1e58ca035ec",
       "reading_hash": "8d48fe73a48c9fc3",
       "counts": {"lines":200,"placed":72,"shared":9,"unplaced":119},
       "omitted": {"data":195},
@@ -2388,7 +2388,7 @@
         {"key":"L0006","section":"top bar","text":"Artistry","placement":"shared"},
         {"key":"L0007","section":"top bar","text":"Ideating","placement":"shared"},
         {"key":"L0008","section":"top bar","text":"Governing","placement":"shared"},
-        {"key":"L0009","section":"page top","text":"the page everyone else reads","placement":"placed","file":"modules/hall-ui/public/profile.html","line":33,"string_id":"95854f8315ca"},
+        {"key":"L0009","section":"page top","text":"the page everyone else reads","placement":"placed","file":"modules/hall-ui/public/profile.html","line":34,"string_id":"95854f8315ca"},
         {"key":"L0010","section":"profile","text":"profile","placement":"unplaced"},
         {"key":"L0011","section":"profile","text":"{…} file{…}","placement":"placed","file":"modules/hall-ui/public/gate.js","line":151,"string_id":"3efa67dc6e07","state":"activity-ideator","occurrences":2},
         {"key":"L0012","section":"profile","text":"{…} — {…} · 9 pages approved","placement":"unplaced","state":"activity-artist"},
@@ -2400,8 +2400,8 @@
         {"key":"L0018","section":"profile","text":"Member since {…}","placement":"placed","file":"modules/hall-ui/public/profile.js","line":118,"string_id":"df335a1224ae","state":"ideator","occurrences":3},
         {"key":"L0019","section":"profile","text":"Ideator, {…} role","placement":"unplaced","state":"ideator"},
         {"key":"L0020","section":"profile","text":"Artist, {…} role","placement":"unplaced","state":"artist"},
-        {"key":"L0021","section":"Activity, by role","text":"Activity, by role","placement":"placed","file":"modules/hall-ui/public/profile.html","line":137,"string_id":"d628b36ec58e","state":"activity"},
-        {"key":"L0022","section":"Activity, by role","text":"What this builder has done, seen one role at a time.","placement":"placed","file":"modules/hall-ui/public/profile.html","line":138,"string_id":"a444ad812e4f","state":"activity"},
+        {"key":"L0021","section":"Activity, by role","text":"Activity, by role","placement":"placed","file":"modules/hall-ui/public/profile.html","line":138,"string_id":"d628b36ec58e","state":"activity"},
+        {"key":"L0022","section":"Activity, by role","text":"What this builder has done, seen one role at a time.","placement":"placed","file":"modules/hall-ui/public/profile.html","line":139,"string_id":"a444ad812e4f","state":"activity"},
         {"key":"L0023","section":"Activity, by role","text":"Artist","placement":"unplaced","state":"activity-artist"},
         {"key":"L0024","section":"Activity, by role","text":"Ideator","placement":"unplaced","state":"activity"},
         {"key":"L0025","section":"Activity, by role","text":"{…} file{…}","placement":"placed","file":"modules/hall-ui/public/gate.js","line":151,"string_id":"3efa67dc6e07","state":"activity-ideator","occurrences":3},
@@ -2446,7 +2446,7 @@
         {"key":"L0064","section":"Activity, by role","text":"after","placement":"unplaced","state":"activity-artist","occurrences":4},
         {"key":"L0065","section":"footer","text":"Sign out","placement":"shared","file":"modules/hall-ui/public/shell.js","line":471,"string_id":"1883ad7f07fc","state":"activity-artist","occurrences":4},
         {"key":"L0066","section":"Activity, by role","text":"Builders hall · this session","placement":"placed","file":"modules/hall-ui/public/craft-mode.js","line":352,"string_id":"fd1903586e8e","state":"activity-artist"},
-        {"key":"L0067","section":"Works completed","text":"Works completed","placement":"placed","file":"modules/hall-ui/public/profile.html","line":148,"string_id":"0e6b8e8f26cc","state":"activity"},
+        {"key":"L0067","section":"Works completed","text":"Works completed","placement":"placed","file":"modules/hall-ui/public/profile.html","line":149,"string_id":"0e6b8e8f26cc","state":"activity"},
         {"key":"L0068","section":"Works completed","text":"Role","placement":"unplaced","state":"activity"},
         {"key":"L0069","section":"Works completed","text":"Shipped","placement":"placed","file":"modules/hall-ui/public/task.js","line":677,"string_id":"0c0a50ba1666","state":"activity"},
         {"key":"L0070","section":"Works completed","text":"{…} file{…}","placement":"placed","file":"modules/hall-ui/public/gate.js","line":151,"string_id":"3efa67dc6e07","state":"activity","occurrences":3},
@@ -2459,7 +2459,7 @@
         {"key":"L0077","section":"Works completed","text":"‹ Prev","placement":"placed","file":"modules/hall-ui/public/hall-kit.js","line":74,"string_id":"de8fa5223aee","state":"activity"},
         {"key":"L0078","section":"Works completed","text":"Page {…} of {…}","placement":"placed","file":"modules/hall-ui/public/hall-kit.js","line":112,"string_id":"15a49bf15007","state":"activity"},
         {"key":"L0079","section":"Works completed","text":"Next ›","placement":"placed","file":"modules/hall-ui/public/hall-kit.js","line":74,"string_id":"f52ba261d930","state":"activity"},
-        {"key":"L0080","section":"Goals created","text":"Goals created","placement":"placed","file":"modules/hall-ui/public/profile.html","line":153,"string_id":"6a85997bda21","state":"activity"},
+        {"key":"L0080","section":"Goals created","text":"Goals created","placement":"placed","file":"modules/hall-ui/public/profile.html","line":154,"string_id":"6a85997bda21","state":"activity"},
         {"key":"L0081","section":"Goals created","text":"Goal","placement":"placed","file":"modules/hall-ui/public/gate.js","line":360,"string_id":"ec88b946ad16","state":"activity"},
         {"key":"L0082","section":"Goals created","text":"Roles","placement":"unplaced","state":"activity"},
         {"key":"L0083","section":"Goals created","text":"Progress","placement":"unplaced","state":"activity"},
@@ -2467,7 +2467,7 @@
         {"key":"L0085","section":"Goals created","text":"{…} and {…}","placement":"placed","file":"modules/hall-ui/public/profile-nudge.js","line":77,"string_id":"56b00d773232","state":"activity"},
         {"key":"L0086","section":"Goals created","text":"Builders hall · this session","placement":"placed","file":"modules/hall-ui/public/craft-mode.js","line":352,"string_id":"fd1903586e8e","state":"activity"},
         {"key":"L0087","section":"Works","text":"Works","placement":"unplaced","state":"works"},
-        {"key":"L0088","section":"Works","text":"Everything this builder has shipped. Seen one role at a time, with goals and ideas, under","placement":"placed","file":"modules/hall-ui/public/profile.html","line":112,"string_id":"37110f7e2b27","state":"works"},
+        {"key":"L0088","section":"Works","text":"Everything this builder has shipped. Seen one role at a time, with goals and ideas, under","placement":"placed","file":"modules/hall-ui/public/profile.html","line":113,"string_id":"37110f7e2b27","state":"works"},
         {"key":"L0089","section":"Works","text":"activity","placement":"unplaced","state":"works"},
         {"key":"L0090","section":"Works","text":"Credits","placement":"unplaced","state":"works"},
         {"key":"L0091","section":"Works","text":"Shipped","placement":"placed","file":"modules/hall-ui/public/task.js","line":677,"string_id":"0c0a50ba1666","state":"works"},
@@ -2485,7 +2485,7 @@
         {"key":"L0103","section":"profile","text":"this week","placement":"unplaced","state":"artist"},
         {"key":"L0104","section":"profile","text":"works {…}","placement":"unplaced"},
         {"key":"L0105","section":"profile","text":"karma","placement":"unplaced"},
-        {"key":"L0106","section":"By the numbers","text":"By the numbers","placement":"placed","file":"modules/hall-ui/public/profile.html","line":64,"string_id":"181cfa50b127"},
+        {"key":"L0106","section":"By the numbers","text":"By the numbers","placement":"placed","file":"modules/hall-ui/public/profile.html","line":65,"string_id":"181cfa50b127"},
         {"key":"L0107","section":"By the numbers","text":"works {…}","placement":"unplaced"},
         {"key":"L0108","section":"By the numbers","text":"all kinds, see below","placement":"unplaced"},
         {"key":"L0109","section":"By the numbers","text":"karma","placement":"unplaced"},
@@ -2508,7 +2508,7 @@
         {"key":"L0126","section":"pages tweaked, per surface","text":"pages tweaked, per surface","placement":"placed","file":"modules/hall-ui/public/profile.js","line":183,"string_id":"356573640ce1","state":"artist"},
         {"key":"L0127","section":"pages tweaked, per surface","text":"{…} of {…}","placement":"placed","file":"modules/hall-ui/public/sky-panel.js","line":120,"string_id":"73c1372b43d9","state":"artist","occurrences":3},
         {"key":"L0128","section":"By the numbers","text":"2 ignited","placement":"unplaced"},
-        {"key":"L0129","section":"Over time","text":"Over time","placement":"placed","file":"modules/hall-ui/public/profile.html","line":76,"string_id":"695ffff13730"},
+        {"key":"L0129","section":"Over time","text":"Over time","placement":"placed","file":"modules/hall-ui/public/profile.html","line":77,"string_id":"695ffff13730"},
         {"key":"L0130","section":"Over time","text":"30 days","placement":"unplaced"},
         {"key":"L0131","section":"Over time","text":"90 days","placement":"unplaced"},
         {"key":"L0132","section":"Over time","text":"1 year","placement":"unplaced"},
@@ -2548,7 +2548,7 @@
         {"key":"L0166","section":"Achievements","text":"Achievements","placement":"unplaced"},
         {"key":"L0167","section":"Achievements","text":"No achievements earned yet.","placement":"placed","file":"modules/hall-ui/public/profile.js","line":199,"string_id":"c255749ec989","state":"ideator"},
         {"key":"L0168","section":"Achievements","text":"Won {…}","placement":"placed","file":"modules/hall-ui/public/profile.js","line":206,"string_id":"c5fd76a9e03d","occurrences":2},
-        {"key":"L0169","section":"Cross-project record","text":"Cross-project record","placement":"placed","file":"modules/hall-ui/public/profile.html","line":98,"string_id":"a55e423263f0"},
+        {"key":"L0169","section":"Cross-project record","text":"Cross-project record","placement":"placed","file":"modules/hall-ui/public/profile.html","line":99,"string_id":"a55e423263f0"},
         {"key":"L0170","section":"Cross-project record","text":"Works {…}","placement":"unplaced"},
         {"key":"L0171","section":"Cross-project record","text":"Credits","placement":"unplaced"},
         {"key":"L0172","section":"Cross-project record","text":"Karma","placement":"unplaced"},

package/modules/hall-ui/public/profile.html

@@ -6,9 +6,10 @@
   <title>Profile — {{worldName}}</title>
   <meta name="description" content="A builder of {{worldName}} — rank, works shipped, standing, and achievements.">
   <!-- The platform hub's apex, stamped server-side (P08, task 1002804; ADR 0214
-       D2). Empty on a vanilla instance, and profile-canonical.js renders nothing
-       then — a meta, never an href, so an empty value cannot degrade into a
-       same-host URL claiming to be the hub. -->
+       D2), read through OTB.hubOrigin() (the profile nudge's link to the hub).
+       Empty on a vanilla instance, and then no hub link renders — a meta, never
+       an href, so an empty value cannot degrade into a same-host URL claiming
+       to be the hub. -->
   <meta name="hub-origin" content="{{hubOrigin}}">
   <link rel="icon" href="data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'><text x='16' y='24' font-size='24' text-anchor='middle' font-family='sans-serif'>⌂</text></svg>">
   <link rel="preconnect" href="https://fonts.googleapis.com">
@@ -223,10 +224,6 @@
      exists by the time renderProfile runs; profile.js guards on it anyway, so a
      page that omits this script simply has no connections section. -->
 <script src="/builders/profile-connections.js?v=2026-08-29-r20"></script>
-<!-- Canonical-profile wiring (P08). Loaded BEFORE profile.js so
-     window.OTBCanonical exists when renderProfile runs; profile.js guards on it,
-     so a page that omits this script simply declares no canonical. -->
-<script src="/builders/profile-canonical.js?v=2026-08-29-p08"></script>
 <!-- The charts (task 1003489). Loaded BEFORE profile.js so window.OTBProfileCharts
      exists when renderProfile runs; profile.js guards on it, so a page that
      omits this script simply has no charts section content. -->

package/modules/hall-ui/public/profile.js

@@ -965,11 +965,6 @@
     // reveals its own section or leaves it hidden. Optional by design: a page
     // that does not load it simply has no connections section.
     if (window.OTBConnections) window.OTBConnections.render(data, selfId);
-    // Canonical-profile wiring (P08, task 1002804) — the rel=canonical + the
-    // link-out to the cross-project record on a federated instance, and the
-    // numeric-id redirect on the hub. Optional the same way: a page without the
-    // script declares no canonical rather than breaking.
-    if (window.OTBCanonical) window.OTBCanonical.render(data);
   }
 
   // Render the friendly "no builder chosen" empty state for a signed-out visitor

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.65",
+  "version": "1.21.66",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.21.65",
+      "version": "1.21.66",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.65",
+  "version": "1.21.66",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -9166,5 +9166,11 @@
       "id": "1002534",
       "text": "The Discord bot can now answer questions in #support when someone @-mentions it, using only the project's public newcomer docs. It ships switched off: it starts answering once the owner adds an Anthropic key and turns it on, a"
     }
+  ],
+  "1.21.66": [
+    {
+      "id": "1003451",
+      "text": "The builder profile page no longer downloads a script that could never run; nothing on the page changes for anyone."
+    }
   ]
 }

package/src/module-api.js

@@ -75,7 +75,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // MAJOR (see allowBoxScope below): passes the request through untouched.
 function deprecatedNoopMiddleware(_req, _res, next) { next(); }
 
-const CORE_VERSION = '1.21.65'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.21.66'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('discord'); log.info('mounted');

package/tests/canonical_profile_url.mjs

@@ -9,14 +9,15 @@
 // OWN WHERE CLAUSE and throws on a placeholder or a literal comparison it did
 // not consume, so a predicate this file cannot read can never degrade into "no
 // constraint" and quietly pass. The REAL core router runs above it over a REAL
-// loopback socket, and the REAL browser script runs in a vm above a stub DOM.
-// Nothing here asserts against a canned response.
+// loopback socket. Nothing here asserts against a canned response.
 //
-// THE FLAG IS FALSE TODAY (ADR 0214 D1), so the three render behaviours are all
-// no-ops in production. Testing only that would be testing nothing, so the
-// client tests run the SAME source with the one constant flipped — and assert
-// the substitution changed exactly one thing, because a mutation that misses is
-// the failure mode this file exists to avoid.
+// THE FLAG IS FALSE (ADR 0214 D1), and the page that would flip it (goal
+// 1000048 R14, task 1002365) was abandoned. So the browser half that would have
+// rendered rel=canonical, the link-out and the numeric-id redirect was removed
+// (task 1003451): it shipped 137 lines of permanently dead branches to every
+// /profile reader. The server half stays — getPublicHandle is live, and the
+// resolver is what a rebuilt page will call. The test below pins the absence,
+// and fails the moment the flag flips without the browser half coming back.
 //
 // LANE: DB-free. It must run on every PR, where there is no Postgres. The last
 // test asserts that membership from the runner's own source (learning 1000218 —
@@ -26,7 +27,6 @@
 import { test } from 'node:test';
 import assert from 'node:assert/strict';
 import http from 'node:http';
-import vm from 'node:vm';
 import express from 'express';
 import { createRequire } from 'node:module';
 import { readFileSync } from 'node:fs';
@@ -48,7 +48,6 @@ const require = createRequire(import.meta.url);
 const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
 const read = (...p) => readFileSync(join(ROOT, ...p), 'utf8');
 
-const CLIENT_SRC = read('modules', 'hall-ui', 'public', 'profile-canonical.js');
 const MODULE_SRC = read('modules', 'platform-identity', 'canonical-profile.js');
 const PROFILE_JS = read('modules', 'hall-ui', 'public', 'profile.js');
 const PROFILE_HTML = read('modules', 'hall-ui', 'public', 'profile.html');
@@ -429,154 +428,21 @@ test('an older hub provider without getPublicHandle degrades to null instead of
 test.after(() => server.close());
 
 // ===========================================================================
-// The browser script — the three behaviours, run for real in a vm
+// The wiring: the page and the stamp
 // ===========================================================================
 
-const LIVE_SRC = CLIENT_SRC.replace('const CANONICAL_PROFILE_PAGE_LIVE = false;', 'const CANONICAL_PROFILE_PAGE_LIVE = true;');
-
-test('the live-source substitution changes exactly one thing (the instrument, checked first)', () => {
-  assert.notEqual(LIVE_SRC, CLIENT_SRC, 'the constant this file flips is not spelled the way the test expects — every client assertion below would be testing the dark path');
-  const diffs = CLIENT_SRC.split('\n').filter((l, i) => l !== LIVE_SRC.split('\n')[i]);
-  assert.equal(diffs.length, 1, 'the substitution must flip one line, not rewrite the module');
-});
-
-function boot(src, { hubOriginMeta, modules, search } = {}) {
-  const head = { children: [], appendChild(el) { this.children.push(el); } };
-  const els = new Map();
-  const el = (id) => {
-    if (!els.has(id)) els.set(id, { id, hidden: true, _html: '', attrs: {}, setAttribute(k, v) { this.attrs[k] = v; }, getAttribute(k) { return this.attrs[k] ?? null; }, set innerHTML(v) { this._html = String(v); }, get innerHTML() { return this._html; } });
-    return els.get(id);
-  };
-  const meta = hubOriginMeta === undefined ? null : { getAttribute: () => hubOriginMeta };
-  const replaced = [];
-  const assigned = [];
-  const sandbox = {
-    console: { error() {}, warn() {}, log() {} },
-    URL,
-    URLSearchParams,
-    document: {
-      head,
-      querySelector: (sel) => (sel === 'meta[name="hub-origin"]' ? meta : (head.children.find((c) => c.attrs.rel === 'canonical') || null)),
-      getElementById: (id) => (id === 'xp-scroll' || id === 'xp-body' ? el(id) : null),
-      createElement: () => ({ attrs: {}, setAttribute(k, v) { this.attrs[k] = v; }, getAttribute(k) { return this.attrs[k] ?? null; } }),
-    },
-    // `assign` is stubbed too, and deliberately records into a SEPARATE list:
-    // swapping replace→assign must fail on the assertion (the numeric URL would
-    // stay in history as a place Back returns to), not crash on an undefined
-    // method, which would "pass" the mutation check for the wrong reason.
-    location: { search: search || '', replace: (u) => replaced.push(u), assign: (u) => assigned.push(u), href: '' },
-    window: { OTB: { escapeHtml: (s) => String(s).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;') }, __MODULES__: modules || [] },
-  };
-  sandbox.globalThis = sandbox;
-  vm.createContext(sandbox);
-  vm.runInContext(src, sandbox, { filename: 'profile-canonical.js' });
-  return {
-    api: sandbox.window.OTBCanonical,
-    canonicalHref: () => { const l = head.children.find((c) => c.attrs.rel === 'canonical'); return l ? l.attrs.href : null; },
-    xp: () => el('xp-scroll'),
-    xpHtml: () => el('xp-body').innerHTML,
-    replaced,
-    assigned,
-  };
-}
-
-const FEDERATED = { hubOriginMeta: 'https://cloudbongos.com', modules: ['lifecycle', 'hall-ui'] };
-const HUB = { hubOriginMeta: 'https://cloudbongos.com', modules: ['platform-identity', 'hall-ui'] };
-
-test('DARK today: with the shipped source nothing is emitted, anywhere', () => {
-  const fed = boot(CLIENT_SRC, FEDERATED);
-  fed.api.render({ handle: 'ada' });
-  assert.equal(fed.canonicalHref(), null, 'a canonical must not name a URL that 404s');
-  assert.equal(fed.xp().hidden, true);
-  const hub = boot(CLIENT_SRC, { ...HUB, search: '?id=7' });
-  hub.api.render({ handle: 'ada' });
-  assert.deepEqual(hub.replaced, [], 'redirecting a working page to a 404 would be the worst of the three');
-});
-
-test('LIVE, federated: rel=canonical points at the hub and the link-out is visible', () => {
-  const page = boot(LIVE_SRC, FEDERATED);
-  page.api.render({ handle: 'ada' });
-  assert.equal(page.canonicalHref(), 'https://cloudbongos.com/u/ada');
-  assert.equal(page.xp().hidden, false);
-  assert.match(page.xpHtml(), /href="https:\/\/cloudbongos\.com\/u\/ada"/);
-  assert.match(page.xpHtml(), /See the cross-project record/,
-    'the link-out is what ADR 0171 D1 asks a federated instance to render instead of inlining numbers');
-  assert.deepEqual(page.replaced, [], 'a federated instance shows its OWN record — it must never redirect away from it');
-});
-
-test('LIVE, hub: the numeric ?id= form redirects to the canonical handle URL', () => {
-  const page = boot(LIVE_SRC, { ...HUB, search: '?id=7' });
-  page.api.render({ handle: 'ada' });
-  assert.deepEqual(page.replaced, ['https://cloudbongos.com/u/ada']);
-  assert.equal(page.canonicalHref(), null, 'a page that redirects must not also declare a canonical');
-});
-
-test('LIVE, hub without ?id=: the self view is not redirected', () => {
-  const page = boot(LIVE_SRC, { ...HUB, search: '' });
-  page.api.render({ handle: 'ada' });
-  assert.deepEqual(page.replaced, [], 'the handle-less /profile is the viewer\'s own page, not a numeric address');
-});
-
-test('LIVE: no handle means no canonical, no link-out and NO REDIRECT — the fallback is a working page', () => {
-  for (const data of [{}, { handle: null }, { handle: '' }]) {
-    const fed = boot(LIVE_SRC, FEDERATED);
-    fed.api.render(data);
-    assert.equal(fed.canonicalHref(), null);
-    assert.equal(fed.xp().hidden, true);
-
-    const hub = boot(LIVE_SRC, { ...HUB, search: '?id=7' });
-    hub.api.render(data);
-    assert.deepEqual(hub.replaced, [],
-      'absent, provisional and private all arrive here as a missing handle and all get the ordinary local page — there is no error shape to read a signal off');
-  }
-});
-
-test('LIVE: a vanilla instance with no hub origin emits nothing', () => {
-  for (const meta of [undefined, '', '   ', 'http://cloudbongos.com', 'https://cloudbongos.com/u']) {
-    const page = boot(LIVE_SRC, { hubOriginMeta: meta, modules: [] });
-    page.api.render({ handle: 'ada' });
-    assert.equal(page.canonicalHref(), null, `an unusable hub-origin meta (${JSON.stringify(meta)}) must produce no canonical, never a relative one`);
-    assert.equal(page.xp().hidden, true);
-  }
-});
-
-test('LIVE: a hostile handle from the wire never reaches an href', () => {
-  for (const handle of ['ada/../../admin', 'ada"onload=x', '../evil', 'a b']) {
-    const page = boot(LIVE_SRC, FEDERATED);
-    page.api.render({ handle });
-    assert.equal(page.canonicalHref(), null, `handle ${JSON.stringify(handle)} must be refused, not encoded`);
-  }
-});
-
-// ===========================================================================
-// The wiring: the mirror, the page, and the stamp
-// ===========================================================================
-
-test('the client mirror and the module agree on both constants', () => {
-  const liveInModule = /const CANONICAL_PROFILE_PAGE_LIVE = (true|false);/.exec(MODULE_SRC);
-  const liveInClient = /const CANONICAL_PROFILE_PAGE_LIVE = (true|false);/.exec(CLIENT_SRC);
-  assert.ok(liveInModule && liveInClient, 'both files must spell the flag as a plain const so this guard can read it');
-  assert.equal(liveInClient[1], liveInModule[1],
-    'the browser mirror has drifted from modules/platform-identity/canonical-profile.js — flip both or neither');
-  assert.equal(String(CANONICAL_PROFILE_PAGE_LIVE), liveInModule[1], 'the module export disagrees with its own source');
-
-  const prefixInClient = /const CANONICAL_PROFILE_PREFIX = '([^']+)';/.exec(CLIENT_SRC);
-  assert.ok(prefixInClient, 'the client must spell the prefix as a plain const');
-  assert.equal(prefixInClient[1], CANONICAL_PROFILE_PREFIX, 'the two canonical namespaces have drifted apart');
-});
-
-test('the profile page loads the script BEFORE profile.js, and profile.js calls it', () => {
-  // Match the <script> TAGS, not the filenames: both names also appear in the
-  // page's prose, and an ordering assertion that reads a comment proves nothing.
+test('while the page is dark, /profile ships no canonical wiring at all (task 1003451)', () => {
+  // The browser half (profile-canonical.js) was removed when R14 — the
+  // /u/<handle> page that would have turned it on — was abandoned: 137 lines
+  // whose every branch sat behind a false flag, shipped to every /profile
+  // reader. Rebuild it with the page. Until then the module's flag is the one
+  // statement of "dark", and nothing in the hall may branch on it.
+  assert.equal(CANONICAL_PROFILE_PAGE_LIVE, false,
+    'the flag flipped: the /u/<handle> page now resolves, so the browser half (rel=canonical, link-out, numeric-id redirect) has to be rebuilt in this same change');
   const tags = [...PROFILE_HTML.matchAll(/<script\s+src="\/builders\/([a-z-]+\.js)/g)].map((m) => m[1]);
-  assert.ok(tags.includes('profile-canonical.js'),
-    'the page never loads the script, so nothing above runs in a browser');
-  assert.ok(
-    tags.indexOf('profile-canonical.js') < tags.indexOf('profile.js'),
-    `profile.js must load AFTER profile-canonical.js so window.OTBCanonical exists when renderProfile runs — got ${tags.join(', ')}`,
-  );
-  assert.match(PROFILE_JS, /window\.OTBCanonical\.render\(data\)/,
-    'profile.js must hand the profile response to the canonical wiring');
+  assert.ok(tags.includes('profile.js'), 'the tag reader matched nothing, so the next assertion would pass vacuously');
+  assert.ok(!tags.includes('profile-canonical.js'), 'the page loads a canonical script whose every branch is dead');
+  assert.doesNotMatch(PROFILE_JS, /OTBCanonical/, 'profile.js branches on a canonical wiring that does not exist');
 });
 
 test('the hub origin is stamped as a meta, and never straight into an href', () => {
@@ -593,9 +459,9 @@ test('the hub origin is stamped as a meta, and never straight into an href', ()
 });
 
 test('the resolver is the ONLY place that spells the canonical namespace', () => {
-  // Two files may carry it: the module and its browser mirror (checked equal
-  // above). A third would be a second opinion about where a profile lives.
-  const owners = ['modules/platform-identity/canonical-profile.js', 'modules/hall-ui/public/profile-canonical.js'];
+  // One file carries it: the module. A second would be a second opinion
+  // about where a profile lives.
+  const owners = ['modules/platform-identity/canonical-profile.js'];
   const offenders = [];
   const walk = (rel) => {
     for (const e of require('node:fs').readdirSync(join(ROOT, rel), { withFileTypes: true })) {

package/modules/hall-ui/public/profile-canonical.js

@@ -1,137 +0,0 @@
-// modules/hall-ui/public/profile-canonical.js — the canonical-profile wiring on
-// the hall's profile page (P08, task 1002804; ADR 0214, ADR 0171 D1,
-// profile-page spec Decision 1).
-//
-// ONE ANSWER, THREE BEHAVIOURS. A builder has exactly one canonical public
-// profile, at <hub>/u/<handle>. What this page does about that depends on which
-// instance is serving it, and the two cases are opposites:
-//
-//   * THE HUB serves the same person's canonical page itself, from the same
-//     database. Two URLs for one page on one host is the duplication Decision 1
-//     exists to end, so the numeric ?id= form REDIRECTS to the handle URL.
-//   * A FEDERATED INSTANCE shows its OWN rank, works and achievements here —
-//     genuinely different content — so it must not redirect. It stays the local
-//     view, declares the hub page canonical, and LINKS OUT to the cross-project
-//     record rather than inlining numbers it would have to keep fresh
-//     (ADR 0171 D1: an instance-side copy is stale the moment a builder hides).
-//   * A VANILLA INSTANCE has no hub. Nothing here does anything.
-//
-// A page cannot both redirect to a URL and declare it canonical, and it does not
-// have to: those are two different instances.
-//
-// IT IS ALL DARK TODAY, ON PURPOSE. `/u/<handle>` does not exist yet — the page
-// is goal 1000048 R14, and the ADR that fixes its PATH (R01) is unwritten. A
-// rel=canonical naming a 404 consolidates nothing and risks the one page that
-// works, so CANONICAL_PROFILE_PAGE_LIVE is false and every branch below is a
-// no-op. ADR 0214 D1 carries the argument.
-//
-// NOTHING HERE IS AUTHORITY (ADR 0016): a canonical URL is an address, never a
-// grant. And nothing here decides who is visible — the server already did that
-// by omitting `handle` for an account that is absent, provisional or private,
-// identically in all three cases (ADR 0214 D5).
-
-(() => {
-  'use strict';
-
-  // BOUNDARY-FORCED DUPLICATION (the ADR 0091 §2 pattern, as
-  // platform-identity.js already does for the display-name cap): a browser
-  // script cannot require modules/platform-identity/canonical-profile.js, so the
-  // two constants below MIRROR it. tests/canonical_profile_url.mjs reads both
-  // files and fails if they ever disagree, which is what keeps this a mirror
-  // rather than a second opinion. Flip the module's copy and this one together.
-  const CANONICAL_PROFILE_PAGE_LIVE = false;
-  const CANONICAL_PROFILE_PREFIX = '/u/';
-
-  // Same charset the module re-checks: a handle is about to be interpolated into
-  // an href and a <link rel=canonical>, so it is validated here too rather than
-  // trusted because it arrived over the wire.
-  const HANDLE_RE = /^[a-z0-9-]{1,39}$/;
-
-  // The hub apex, stamped server-side into a <meta> (never a script global, and
-  // never straight into an href — an empty value in an href would silently
-  // become a same-host relative URL claiming to be the hub). Absent or empty
-  // means "no hub", and every branch below then does nothing.
-  function hubOrigin() {
-    const meta = document.querySelector('meta[name="hub-origin"]');
-    const raw = ((meta && meta.getAttribute('content')) || '').trim().replace(/\/+$/, '');
-    if (!raw) return null;
-    // Bare https origin only — a canonical must never name a downgraded scheme,
-    // and a value carrying a path is not an origin.
-    try {
-      const url = new URL(raw);
-      if (url.protocol !== 'https:' || url.username || url.password) return null;
-      if (url.pathname !== '/' || url.search || url.hash) return null;
-      return url.origin;
-    } catch (err) { return null; }
-  }
-
-  // The canonical public profile URL, or null when we must not point anywhere:
-  // the page is not live, no hub is known, or the account has no public handle
-  // (absent / provisional / private — indistinguishable by design).
-  function canonicalProfileUrl(handle) {
-    if (!CANONICAL_PROFILE_PAGE_LIVE) return null;
-    const origin = hubOrigin();
-    if (!origin) return null;
-    const h = String(handle == null ? '' : handle).trim().toLowerCase();
-    if (!HANDLE_RE.test(h)) return null;
-    return `${origin}${CANONICAL_PROFILE_PREFIX}${h}`;
-  }
-
-  // "Am I the hub?" — the enabled-module set the server injects. `platform-
-  // identity` IS the hub flag rather than a proxy for it (src/platform-server.js
-  // says so), so this asks the instance what it is and nothing has to know the
-  // platform's hostname.
-  function isHub() {
-    const mods = window.__MODULES__;
-    return Array.isArray(mods) ? mods.includes('platform-identity') : !!(mods && mods['platform-identity']);
-  }
-
-  function setCanonicalLink(url) {
-    let link = document.querySelector('link[rel="canonical"]');
-    if (!link) {
-      link = document.createElement('link');
-      link.setAttribute('rel', 'canonical');
-      document.head.appendChild(link);
-    }
-    link.setAttribute('href', url);
-  }
-
-  // The visible link-out — ADR 0171 D1's federated render path. It reuses the
-  // page's existing cross-project section, which on a federated instance is
-  // empty and hidden (the response carries no cross_project key there), so the
-  // heading a reader already understands gets the link instead of numbers.
-  function renderLinkOut(url) {
-    const section = document.getElementById('xp-scroll');
-    const body = document.getElementById('xp-body');
-    if (!section || !body) return;
-    // Defence in depth, and honestly UNOBSERVABLE today: canonicalProfileUrl has
-    // already refused anything outside `https://<bare origin>/u/[a-z0-9-]{1,39}`,
-    // so no value reaching here can contain a character this changes. It is the
-    // second wall for the day someone loosens the handle charset — a mutation
-    // test cannot make it bite, and that is the point rather than a gap.
-    const escapeHtml = (window.OTB && window.OTB.escapeHtml) || ((s) => String(s));
-    body.innerHTML = `<p class="scroll__lede">This builder's work spans more than this project. `
-      + `<a href="${escapeHtml(url)}" rel="noopener">See the cross-project record</a>.</p>`;
-    section.hidden = false;
-  }
-
-  // render(data) — called by profile.js once the profile response is in hand.
-  // `data.handle` is present iff the builder has a PUBLICLY VISIBLE platform
-  // account; absent for no account, provisional and private alike, so nothing
-  // here can tell those apart and neither can a visitor watching it.
-  function render(data) {
-    const url = canonicalProfileUrl(data && data.handle);
-    if (!url) return;
-    if (isHub()) {
-      // The hub's numeric form is an address for a page the hub also serves at
-      // the canonical URL. `replace`, not `assign`: the numeric URL should not
-      // sit in history as a place Back returns to.
-      if (new URLSearchParams(location.search).get('id')) location.replace(url);
-      return;
-    }
-    setCanonicalLink(url);
-    renderLinkOut(url);
-  }
-
-  window.OTBCanonical = { render, canonicalProfileUrl, hubOrigin, isHub };
-})();