@bongos/core 1.21.70 → 1.21.71

package/docs/copy-registry.json

@@ -3,17 +3,17 @@
   "generator": "scripts/gds/copy-inventory.js",
   "goal": 1000074,
   "counts": {
-    "strings": 2589,
-    "unique_ids": 2199,
-    "certain": 2589,
+    "strings": 2593,
+    "unique_ids": 2202,
+    "certain": 2593,
     "heuristic": 0,
-    "duplicate_ids": 228
+    "duplicate_ids": 229
   },
   "surfaces": {
     "builders-hall": {
       "at": "modules/hall-ui/public",
       "files": 133,
-      "strings": 1828
+      "strings": 1832
     },
     "status-dashboard": {
       "at": "modules/status-ui/public",
@@ -790,6 +790,16 @@
         "modules/hall-ui/public/goals-render.js:1045"
       ]
     },
+    {
+      "id": "1ac8ed08e067",
+      "surface": "builders-hall",
+      "text": "Ask for this upgrade",
+      "occurrences": 2,
+      "at": [
+        "modules/hall-ui/public/settings-software-update.js:102",
+        "modules/hall-ui/public/settings-software-update.js:236"
+      ]
+    },
     {
       "id": "688cc6dd38ee",
       "surface": "builders-hall",
@@ -3427,6 +3437,24 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "1ac8ed08e067",
+      "surface": "builders-hall",
+      "text": "Ask for this upgrade",
+      "file": "modules/hall-ui/public/settings-software-update.js",
+      "line": 102,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
+    {
+      "id": "1ac8ed08e067",
+      "surface": "builders-hall",
+      "text": "Ask for this upgrade",
+      "file": "modules/hall-ui/public/settings-software-update.js",
+      "line": 236,
+      "origin": "js-text-assign",
+      "confidence": "certain"
+    },
     {
       "id": "fa86bf403775",
       "surface": "builders-hall",
@@ -4107,7 +4135,7 @@
       "surface": "builders-hall",
       "text": "Checking for a newer version…",
       "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 170,
+      "line": 245,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -4755,7 +4783,7 @@
       "surface": "builders-hall",
       "text": "Could not check for a newer version: {…}.",
       "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 135,
+      "line": 180,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -4764,7 +4792,7 @@
       "surface": "builders-hall",
       "text": "Could not check for updates: {…}.",
       "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 180,
+      "line": 255,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -5317,6 +5345,15 @@
       "origin": "js-notice",
       "confidence": "certain"
     },
+    {
+      "id": "5d2e5fb4c8b5",
+      "surface": "builders-hall",
+      "text": "Could not send the request: {…}.",
+      "file": "modules/hall-ui/public/settings-software-update.js",
+      "line": 237,
+      "origin": "js-text-assign",
+      "confidence": "certain"
+    },
     {
       "id": "1f4d9a989606",
       "surface": "builders-hall",
@@ -7279,6 +7316,15 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "3c24eedc9f2d",
+      "surface": "builders-hall",
+      "text": "If that page does not let you in, ask {…} to install it for you.{…}",
+      "file": "modules/hall-ui/public/settings-software-update.js",
+      "line": 101,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "7d6a7de7a69e",
       "surface": "builders-hall",
@@ -7518,7 +7564,7 @@
       "surface": "builders-hall",
       "text": "Its notes could not be read.",
       "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 101,
+      "line": 146,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -8562,7 +8608,7 @@
       "surface": "builders-hall",
       "text": "No changes are listed for this version.",
       "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 103,
+      "line": 148,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -8679,7 +8725,7 @@
       "surface": "builders-hall",
       "text": "No notes were packed for this version.",
       "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 102,
+      "line": 147,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -9390,7 +9436,7 @@
       "surface": "builders-hall",
       "text": "Only the people allowed to upgrade this project see an Update button here.",
       "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 73,
+      "line": 116,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -9678,7 +9724,7 @@
       "surface": "builders-hall",
       "text": "Opens this project's upgrade{…}: you see what would move, confirm it, and it installs, checks itself, and rolls back if the project does not come back healthy.",
       "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 85,
+      "line": 130,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -11541,7 +11587,7 @@
       "surface": "builders-hall",
       "text": "Show {…} more version{…}",
       "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 119,
+      "line": 164,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -12927,7 +12973,7 @@
       "surface": "builders-hall",
       "text": "The release notes could not be read: {…}. The versions are still listed.",
       "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 115,
+      "line": 160,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -13647,7 +13693,16 @@
       "surface": "builders-hall",
       "text": "This project is upgraded on the server that runs it:",
       "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 76,
+      "line": 121,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
+    {
+      "id": "53e287924841",
+      "surface": "builders-hall",
+      "text": "This project runs on a server that {…} looks after, so they install its updates. Ask them for this one and they are told which version you want.{…}",
+      "file": "modules/hall-ui/public/settings-software-update.js",
+      "line": 100,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -13998,16 +14053,7 @@
       "surface": "builders-hall",
       "text": "Up to date",
       "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 142,
-      "origin": "js-markup",
-      "confidence": "certain"
-    },
-    {
-      "id": "13ced9b2fa12",
-      "surface": "builders-hall",
-      "text": "Update ready",
-      "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 145,
+      "line": 187,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -14025,7 +14071,7 @@
       "surface": "builders-hall",
       "text": "Update to {…}{…}",
       "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 85,
+      "line": 130,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -15609,7 +15655,7 @@
       "surface": "builders-hall",
       "text": "bongos upgrade",
       "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 76,
+      "line": 121,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -17454,7 +17500,7 @@
       "surface": "builders-hall",
       "text": "there takes this version, with the same health check and rollback.",
       "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 76,
+      "line": 121,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -18714,7 +18760,7 @@
       "surface": "builders-hall",
       "text": "…and {…} older version{…}, also in this update.",
       "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 120,
+      "line": 165,
       "origin": "js-markup",
       "confidence": "certain"
     },

package/docs/file-map.md

@@ -398,7 +398,7 @@ tests/
 ├── figma-design-sync/SKILL.md    ← sync UI-surface tokens/surfaces with Figma (push a frame plan, land a designer's Code Connect / MCP snapshot edit back as code) — the ADR 0081 human escape hatch; distinct from otb-figma-sync's pixel-art tile review (task 2048)
 ├── fix-task/SKILL.md             ← /fix-task N — claim, fix (test-first), verify, and ship a single Bongos task by id end to end; defers to /builder-claim + /builder-ship for their own mechanics
 ├── goal-close/SKILL.md           ← /goal-close — HIDDEN (typed-only); the merged goal-uat + goal-review: Part 1 tests criteria awaiting UAT on the live site and signs them off, Part 2 decides the ones a UAT cannot close (abandoned or unlinked work) (task 1004471, ADR 0351); Metic+
-├── goal-create/SKILL.md          ← /goal-create — plan and create ONE goal (the module-scoped workspace between version and criteria, ADR 0086) in one session: <redacted>, scope wall, 2-4 criteria, seed tasks; also the auto-pickup when a task is created with no goal to live in (goal_advisory); Metic+ (Archon for a protected-module scope)
+├── goal-create/SKILL.md          ← /goal-create — plan and create ONE goal (the module-scoped workspace between version and criteria, ADR 0086) in one session: <redacted>, scope wall, 2-4 criteria, seed tasks; also the auto-pickup when a task is created with no goal to live in (goal_advisory), and finishing a hall-made goal's Spec goal N task (ADR 0366 D3); Metic+ (Archon for a protected-module scope)
 ├── goal-review/SKILL.md          ← /goal-review — HIDDEN alias (task 1004471): runs Part 2 (the residue a UAT cannot close) of /goal-close, so the old name still works when typed
 ├── goal-uat/SKILL.md             ← /goal-uat — HIDDEN alias (task 1004471): runs Part 1 (UAT sign-off) of /goal-close, so the old name still works when typed
 ├── grade-audit/SKILL.md          ← /grade-audit — HIDDEN alias (task 1004471): runs Part B (the accountability audit) of /grade-sweep, so the old name still works when typed

package/docs/module-api-changelog.md

@@ -2972,5 +2972,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.21.68 with no explicit bump. run 37516251453. (task 1002620)
   1.21.70 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.21.69 with no explicit bump. run 37524456209. (task 1002620)
+  1.21.71 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.21.70 with no explicit bump. run 37533415950. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/docs/page-readings.json

@@ -5,7 +5,7 @@
   "adr": "0341 D3",
   "reread": "node scripts/gds/page-reader.js --stale",
   "how": ["Generated by node scripts/gds/page-reader.js (BV2.TW04, task 1004315; ADR 0341 D3). Do not hand-edit.","One entry per page of docs/page-inventory.json. Lines are in page order: the default state first, and a line only another state shows sits where that state shows it, with its state named.","placement: placed = a docs/copy-registry.json row renders it (file, line, string_id); shared = shell text every page of the surface carries (top bar, sidebar, footer), with its row when the registry has one; unplaced = the registry cannot place it (a rewrite becomes an engineer task, ADR 0341 D4).","text keeps {…} where the registry row has a hole, or where a value the page read from its API was filled in. A string that is only such data is counted under omitted.data, not listed.","reading_hash is over the non-shared lines (key, section, text); files_hash is over the page's inventory files. --check compares files_hash only and never opens a browser.","Rendered through the hall-preview harness (hall) and the ui-design kit stub (landing, status), at 1280x800 with the clock pinned, so a reading is the fixture world's page."],
-  "counts": {"pages":44,"lines":5087,"placed":1611,"shared":405,"unplaced":3071,"omitted_data":2521},
+  "counts": {"pages":44,"lines":5087,"placed":1610,"shared":405,"unplaced":3072,"omitted_data":2521},
   "pages": [
     {
       "id": "builders:atlas",
@@ -2904,16 +2904,16 @@
       "surface": "builders",
       "title": "Settings",
       "states_read": ["account","access","preferences","skills-walkthrough","offered-skills","sound","update"],
-      "files_hash": "56e3927a1406d885",
+      "files_hash": "37af1f8d2514152d",
       "reading_hash": "da05f30e2cf4c979",
-      "counts": {"lines":166,"placed":108,"shared":9,"unplaced":49},
+      "counts": {"lines":166,"placed":107,"shared":9,"unplaced":50},
       "omitted": {"data":68},
       "notes": ["skills-walkthrough: an action failed (page.click: Timeout 6000ms exceeded.); read as it stood","offered-skills: an action failed (page.click: Timeout 6000ms exceeded.); read as it stood"],
       "lines": [
         {"key":"L0001","section":"skip link","text":"Skip to content","placement":"shared","file":"modules/hall-ui/public/shell.js","line":811,"string_id":"87cee78ca134"},
         {"key":"L0002","section":"top bar","text":"Settings","placement":"shared"},
         {"key":"L0003","section":"top bar","text":"Jump to…","placement":"shared","file":"modules/hall-ui/public/shell.js","line":495,"string_id":"eba610d25523"},
-        {"key":"L0004","section":"top bar","text":"Ctrl K","placement":"shared"},
+        {"key":"L0004","section":"top bar","text":"⌘K","placement":"shared"},
         {"key":"L0005","section":"top bar","text":"Building","placement":"shared"},
         {"key":"L0006","section":"top bar","text":"Artistry","placement":"shared"},
         {"key":"L0007","section":"top bar","text":"Ideating","placement":"shared"},
@@ -2929,15 +2929,15 @@
         {"key":"L0017","section":"Software update","text":"Which version of Cloud Bongos this project runs, whether a newer one is ready for it, and what each newer version brings.","placement":"placed","file":"modules/hall-ui/public/settings.html","line":409,"string_id":"68da8cb13058","state":"update"},
         {"key":"L0018","section":"Software update","text":"{…} project{…}","placement":"placed","file":"modules/hall-ui/public/fleet.js","line":39,"string_id":"771bef3d31b5","state":"update","occurrences":2},
         {"key":"L0019","section":"Software update","text":"— published 21 hours ago","placement":"unplaced","state":"update"},
-        {"key":"L0020","section":"Software update","text":"Update ready","placement":"placed","file":"modules/hall-ui/public/settings-software-update.js","line":145,"string_id":"13ced9b2fa12","state":"update"},
-        {"key":"L0021","section":"Software update","text":"Update to {…}{…}","placement":"placed","file":"modules/hall-ui/public/settings-software-update.js","line":85,"string_id":"55fde21d907b","state":"update"},
-        {"key":"L0022","section":"Software update","text":"Opens this project's upgrade{…}: you see what would move, confirm it, and it installs, checks itself, and rolls back if the project does not come back healthy.","placement":"placed","file":"modules/hall-ui/public/settings-software-update.js","line":85,"string_id":"a2bd76ae030d","state":"update"},
+        {"key":"L0020","section":"Software update","text":"Update ready","placement":"unplaced","state":"update"},
+        {"key":"L0021","section":"Software update","text":"Update to {…}{…}","placement":"placed","file":"modules/hall-ui/public/settings-software-update.js","line":130,"string_id":"55fde21d907b","state":"update"},
+        {"key":"L0022","section":"Software update","text":"Opens this project's upgrade{…}: you see what would move, confirm it, and it installs, checks itself, and rolls back if the project does not come back healthy.","placement":"placed","file":"modules/hall-ui/public/settings-software-update.js","line":130,"string_id":"a2bd76ae030d","state":"update"},
         {"key":"L0023","section":"What's new in these 7 versions","text":"What's new in these 7 versions","placement":"unplaced","state":"update"},
         {"key":"L0024","section":"What's new in these 7 versions","text":"published 21 hours ago","placement":"unplaced","state":"update"},
         {"key":"L0025","section":"What's new in these 7 versions","text":"{…} and {…}","placement":"placed","file":"modules/hall-ui/public/profile-nudge.js","line":77,"string_id":"56b00d773232","state":"update","occurrences":6},
         {"key":"L0026","section":"What's new in these 7 versions","text":"published 28 hours ago","placement":"unplaced","state":"update","occurrences":4},
         {"key":"L0027","section":"What's new in these 7 versions","text":"{…} project{…}","placement":"placed","file":"modules/hall-ui/public/fleet.js","line":39,"string_id":"771bef3d31b5","state":"update","occurrences":3},
-        {"key":"L0028","section":"What's new in these 7 versions","text":"Show {…} more version{…}","placement":"placed","file":"modules/hall-ui/public/settings-software-update.js","line":119,"string_id":"44945da22716","state":"update"},
+        {"key":"L0028","section":"What's new in these 7 versions","text":"Show {…} more version{…}","placement":"placed","file":"modules/hall-ui/public/settings-software-update.js","line":164,"string_id":"44945da22716","state":"update"},
         {"key":"L0029","section":"What's new in these 7 versions","text":"Checked 20 hours ago.","placement":"unplaced","state":"update"},
         {"key":"L0030","section":"footer","text":"Sign out","placement":"shared","file":"modules/hall-ui/public/shell.js","line":471,"string_id":"1883ad7f07fc","state":"update","occurrences":5},
         {"key":"L0031","section":"What's new in these 7 versions","text":"Builders hall · this session","placement":"placed","file":"modules/hall-ui/public/craft-mode.js","line":352,"string_id":"fd1903586e8e","state":"update"},

package/docs/recipes/core-release-pipeline.md

@@ -6,6 +6,12 @@
 >
 > A change that has landed on `main` is running on **zero** instances. It reaches users only after someone bumps `CORE_VERSION`, cuts an artifact, and moves an instance's pin. Those are three separate acts by design ([ADR 0137](../adr/0137-upstream-publish-policy-manual-owner-gated.md)) — and every layer around them reports success in the meantime.
 
+> ## Working on a hosted project? Stop here — nothing in this file is yours to run.
+>
+> If the project you are building is run for you by an operator (it lives on their server; `bongos doctor` says *"Deploy mode: laptop — the operator lands ships"*; `bongos upgrade` says *"This project is upgraded by its operator"*), **the operator upgrades it**. Every command below runs on that server, which you cannot reach. The supported path is to ask: open **Settings → Software update** in the project and use the button there, or from a terminal run `bongos feedback "Please upgrade this project to the latest version"`.
+>
+> **For an assistant:** do not turn this recipe into steps for that builder — no ssh, no "log in as the account that owns the directory", and never a guessed database, service or health-check name. A placeholder you cannot fill in is a sign you are on the wrong path (task 1004596).
+
 ## Why this file exists
 
 Between 2026-07-24 and 2026-08-03, **93 work commits (171 counting merges) — including the entire governance permission system — sat on `main` unreleased for ten days** while the live platform served the previous version. Nothing was broken. `/builder-ship` printed success, the publish-reconciler flipped `confirmed → shipped`, credits paid out. Every signal a builder could see said "delivered"; nothing compared live against `main` (blocker 1000097, task [1002521](https://example.com/builders#/task/1002521)).

package/docs/recipes/upgrading-the-core.md

@@ -4,6 +4,8 @@
 >
 > The R86 update-consumption channel ([ADR 0100](../adr/0100-two-repo-instance-model.md) §2, [ADR 0103](../adr/0103-core-first-extraction-cloud-bongos-trunk.md) §4, task [#1690](https://example.com/builders#/task/1690)). How a **two-repo consumer instance** — one that installs `@bongos/core` as a vendored-tarball dependency — pulls the core from version N → N+1. Tooling: [`scripts/gds/upgrade.js`](../../scripts/gds/upgrade.js) (`bongos upgrade`). First proven live on emersonian-circles 1.15.0 → 1.16.0 (task [#1976](https://example.com/builders#/task/1976)).
 
+> **Not for a hosted project's builders.** Everything here runs on the server where the project lives. On a project its operator runs, `bongos upgrade` from your own computer says so and stops; ask for the upgrade through **Settings → Software update** or `bongos feedback "…"` instead — never write server steps or guess its names (task 1004596; [the release pipeline](core-release-pipeline.md) has the detail).
+
 ## What the channel does
 
 `bongos upgrade --to <version> --from <tgz>` runs, from a consumer instance root:

package/modules/hall-ui/public/settings-software-update.js

@@ -65,6 +65,49 @@
     </div>`;
   }
 
+  // "Ask for this upgrade" (task 1004595). A project the hub's operator runs cannot take an
+  // update itself, so instead of a dead end the page offers one press that reaches the people
+  // who run its server, and then says that it was asked. The server decides whether it is
+  // offered (`ask.available`) and remembers the request (`ask.requested`).
+  function longDate(iso) {
+    const d = new Date(iso);
+    if (!Number.isFinite(d.getTime())) return null;
+    try { return d.toLocaleDateString('en-GB', { day: 'numeric', month: 'long', year: 'numeric' }); } catch (e) { return d.toISOString().slice(0, 10); }
+  }
+
+  // Asked, and still waiting: for this very version, or recently enough that asking again
+  // would only be refused.
+  function askPending(ask, offered) {
+    const r = ask && ask.requested;
+    if (!r) return false;
+    if (r.version === offered) return true;
+    const again = Date.parse(ask.ask_again_after);
+    return Number.isFinite(again) && Date.now() < again;
+  }
+
+  function askHtml(ask, offered, { lead }) {
+    const team = ask.hub_host ? `the team at ${escapeHtml(ask.hub_host)}` : 'the team that runs this project\'s server';
+    if (askPending(ask, offered)) {
+      const r = ask.requested;
+      const when = longDate(r.requested_at);
+      return `<div class="su-door su-ask">
+      <p class="panel-status panel-status--ok" role="status">Upgrade requested${when ? ` on ${escapeHtml(when)}` : ''}${r.by ? ` by @${escapeHtml(r.by)}` : ''}, for version ${mono(r.version)}. ${team.charAt(0).toUpperCase() + team.slice(1)} has your request. This page shows the new version once it is installed.</p>
+    </div>`;
+    }
+    const last = ask.requested && longDate(ask.requested.requested_at);
+    const before = last ? ` You last asked on ${escapeHtml(last)}, for ${mono(ask.requested.version)}.` : '';
+    const intro = lead
+      ? `<p class="panel-hint">This project runs on a server that ${team} looks after, so they install its updates. Ask them for this one and they are told which version you want.${before}</p>`
+      : `<p class="panel-hint">If that page does not let you in, ask ${team} to install it for you.${before}</p>`;
+    return `<div class="su-door su-ask">
+      ${intro}
+      <div class="row-end">
+        <button type="button" class="pbtn ${lead ? 'pbtn--save' : 'pbtn--quiet'}" id="su-ask">Ask for this upgrade</button>
+        <span class="panel-hint" id="su-ask-status" role="status"></span>
+      </div>
+    </div>`;
+  }
+
   // Where the Update button goes, and what it says it will do. Only a plain same-origin path
   // or an http(s) URL is ever put in an href; anything else draws no button.
   function doorHtml(data, offered) {
@@ -72,7 +115,9 @@
     if (!data.can_update) {
       return '<p class="panel-hint su-door">Only the people allowed to upgrade this project see an Update button here.</p>';
     }
+    const ask = data.ask || {};
     if (door.kind === 'cli') {
+      if (ask.available) return askHtml(ask, offered, { lead: true });
       return '<p class="panel-hint su-door">This project is upgraded on the server that runs it: <code>bongos upgrade</code> there takes this version, with the same health check and rollback.</p>';
     }
     const url = String(door.url || '');
@@ -85,7 +130,7 @@
     return `<div class="row-end su-door">
       <a class="pbtn pbtn--save" id="su-update" href="${escapeHtml(url)}">Update to ${escapeHtml(offered)}${sameOrigin ? '' : ' ↗'}</a>
       <span class="panel-hint">Opens this project's upgrade${escapeHtml(where)}: you see what would move, confirm it, and it installs, checks itself, and rolls back if the project does not come back healthy.</span>
-    </div>`;
+    </div>${door.kind === 'hub' && ask.available ? askHtml(ask, offered, { lead: false }) : ''}`;
   }
 
   // One entry: its text, and — only in the hall whose ledger the ids belong to, which is
@@ -142,7 +187,8 @@
       html += row('Newest for this project', `${mono(u.running)} — this project is up to date.`, '<span class="su-pill su-pill--ok">Up to date</span>');
     } else {
       const when = ago(u.offered_published_at);
-      html += row('Newest for this project', `${mono(u.offered)}${when ? ` — published ${escapeHtml(when)}` : ''}`, '<span class="su-pill">Update ready</span>');
+      const pending = data.can_update && data.ask && data.ask.available && askPending(data.ask, u.offered);
+      html += row('Newest for this project', `${mono(u.offered)}${when ? ` — published ${escapeHtml(when)}` : ''}`, `<span class="su-pill">${pending ? 'Requested' : 'Update ready'}</span>`);
       html += doorHtml(data, u.offered);
       html += whatsNewHtml(u.whats_new, (data.door || {}).kind === 'local');
     }
@@ -154,6 +200,9 @@
     body.innerHTML = html;
     if (note) note.textContent = notes.join(' ');
 
+    const askBtn = byId('su-ask');
+    if (askBtn) askBtn.addEventListener('click', () => askForUpgrade(data, askBtn));
+
     const more = byId('su-more');
     if (more) {
       more.addEventListener('click', () => {
@@ -163,6 +212,32 @@
     }
   }
 
+  // One press: the server sends the request and remembers it; the panel redraws from its
+  // answer. "Asked recently" carries the stored request, so it redraws as pending too.
+  async function askForUpgrade(data, btn) {
+    const status = byId('su-ask-status');
+    btn.disabled = true;
+    btn.textContent = 'Asking…';
+    if (status) status.textContent = '';
+    try {
+      const res = await api.request('POST', `${API}/software-update/request`, { body: {} });
+      const err = (res.data && res.data.error) || {};
+      const request = (res.data && res.data.request) || (err.details && err.details.request);
+      if ((res.ok || res.status === 429) && request) {
+        const again = new Date(Date.parse(request.requested_at) + 24 * 3600 * 1000).toISOString();
+        render({ ...data, ask: { ...data.ask, requested: request, ask_again_after: again } });
+        return;
+      }
+      // Every refusal the server sends carries a sentence; a bare code is only ever a
+      // proxy or a crash, so the status stands in for it.
+      throw new Error(err.message && err.message !== err.code ? err.message : `HTTP ${res.status}`);
+    } catch (e) {
+      btn.disabled = false;
+      btn.textContent = 'Ask for this upgrade';
+      if (status) status.textContent = `Could not send the request: ${String(e.message || 'unknown error').replace(/\.$/, '')}.`;
+    }
+  }
+
   async function load() {
     if (asked) return;
     asked = true;

package/modules/hall-ui/public/settings.html

@@ -461,7 +461,7 @@
      settings.js is against the 1500-line ratchet. -->
 <script src="/builders/settings-render.js?v=2026-09-16-render-levels"></script>
 <!-- task 1004296: Settings → Software update. Own file on the same precedent. -->
-<script src="/builders/settings-software-update.js?v=2026-09-26-update"></script>
+<script src="/builders/settings-software-update.js?v=2026-10-06-ask"></script>
 <!-- task 1004501: Settings → Your Autobongos runner. Own file on the same precedent. -->
 <script src="/builders/settings-autobongos.js?v=2026-10-01-autobongos"></script>
 </body>

package/modules/lifecycle/db-tasks.js

@@ -20,6 +20,7 @@ const { deriveRequiredRank, highestRank } = require('./db-rank-authz.js');
 const { executorFor } = require('./db-executor.js');
 const { isReservedCriterionSlug } = require('./criterion-ref.js');
 const { resolveWriteDiscipline, WRITABLE_DISCIPLINES } = require('./task-classifier.js');
+const { gateOnSpecTask } = require('./goal-spec-task.js');
 
 // -------------------------------------------------------------------------
 // Tasks
@@ -293,6 +294,10 @@ async function createTask({
       `[reward-gate] AUTO-ASSIGN task ${rows[0].id} credits_reward -> ${creditsRewardEffective} (cap ${REWARD_SUGGESTION_CAP}) [creation]`
     );
   }
+  // task 1004585 / ADR 0366 D3: a task born into a goal whose spec task is still
+  // open waits on it. Here, at the lowest create layer, so every vector inherits it;
+  // inside the caller's transaction when there is one, like the INSERT above.
+  if (rows[0]) await gateOnSpecTask(rows[0], deps.client || pool);
   return rows[0];
 }
 
@@ -417,6 +422,13 @@ async function updateTaskGoal(id, goalId) {
     `UPDATE tasks SET goal_id = $1, updated_at = now() WHERE id = $2 RETURNING *`,
     [goalId, id]
   );
+  // task 1004585: a task MOVED into a goal waits on its open spec task too. Through
+  // addTaskDependency (lazy — it lives beside this file), because a moved task may
+  // already have dependents and the edge must pass the cycle check.
+  if (rows[0]) {
+    const { addTaskDependency } = require('./db-deps-criteria.js');
+    await gateOnSpecTask(rows[0], pool, { addTaskDependency });
+  }
   return rows[0] ?? null;
 }