@bongos/core 1.21.77 → 1.21.79

package/migrations/core_273_module_install_reports.sql

@@ -0,0 +1,66 @@
+-- core_273_module_install_reports.sql — the raw reports behind a module's
+-- Install and Reliability parts: did an install work, and how many runtime
+-- errors a version threw on a day.
+--
+-- task 1003793 (goal 1000091, working area 5). ADR 0343 D1 names Install and
+-- Reliability as the parts an author cannot fake, because they come from real
+-- installs. core_265's module_assessment_signals holds FINISHED per-part scores,
+-- not the per-holder reports those scores are worked out from, so the reports
+-- need a place of their own.
+--
+-- Privacy (owner decision, Will, 2026-10-01): COUNTS ONLY, ON BY DEFAULT, WITH
+-- AN OPT-OUT. A report carries only
+--   (a) whether an install worked: yes/no plus a short error CODE, and
+--   (b) a daily count of runtime errors per module version.
+-- No error text, no file paths, no user data — the columns below have nowhere
+-- to put any, and error_code is held to a short lowercase code by a CHECK so a
+-- free-text message cannot be smuggled in through it.
+--
+--   module_install_reports  one row per (version, holder): that holder's LATEST
+--                          install or update attempt of the version (the same
+--                          holder identity as module_entitlements, core_259). A
+--                          new attempt replaces the row, so the table grows with
+--                          holders, never with retries, and Install is scored
+--                          from it without scanning a history. ok = true carries
+--                          no code; ok = false carries one.
+--   module_runtime_error_counts  one row per (version, holder, day): how many
+--                          runtime errors that version threw for that holder on
+--                          that day. A second report for the same day replaces
+--                          the count rather than adding a row.
+--   module_usage_report_optouts  a holder that has switched reporting off. No
+--                          row = reporting on (the default). The store drops a
+--                          report from an opted-out holder at intake, so the
+--                          switch holds whatever client sends the report.
+--
+-- Additive only (new tables), so forward-safe. Idempotent: safe to re-run.
+
+CREATE TABLE IF NOT EXISTS module_install_reports (
+  version_id   bigint NOT NULL REFERENCES store_module_versions(id) ON DELETE CASCADE,
+  holder_kind  text NOT NULL CHECK (holder_kind IN ('builder', 'instance')),
+  holder_ref   text NOT NULL,
+  ok           boolean NOT NULL,
+  error_code   text CHECK (error_code ~ '^[a-z][a-z0-9_]{0,39}$'),
+  reported_at  timestamptz NOT NULL DEFAULT now(),
+  CHECK ((ok AND error_code IS NULL) OR (NOT ok AND error_code IS NOT NULL)),
+  PRIMARY KEY (version_id, holder_kind, holder_ref)
+);
+
+CREATE TABLE IF NOT EXISTS module_runtime_error_counts (
+  version_id   bigint NOT NULL REFERENCES store_module_versions(id) ON DELETE CASCADE,
+  holder_kind  text NOT NULL CHECK (holder_kind IN ('builder', 'instance')),
+  holder_ref   text NOT NULL,
+  day          date NOT NULL,
+  error_count  integer NOT NULL CHECK (error_count >= 0),
+  reported_at  timestamptz NOT NULL DEFAULT now(),
+  PRIMARY KEY (version_id, holder_kind, holder_ref, day)
+);
+
+CREATE TABLE IF NOT EXISTS module_usage_report_optouts (
+  holder_kind    text NOT NULL CHECK (holder_kind IN ('builder', 'instance')),
+  holder_ref     text NOT NULL,
+  opted_out_at   timestamptz NOT NULL DEFAULT now(),
+  PRIMARY KEY (holder_kind, holder_ref)
+);
+
+INSERT INTO schema_migrations (version) VALUES ('core_273_module_install_reports')
+  ON CONFLICT (version) DO NOTHING;

package/modules/hall-ui/public/atlas.html

@@ -93,7 +93,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-city-tab"></script>
+<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/atlas.js?v=2026-09-02-index" defer></script>

package/modules/hall-ui/public/blockers.html

@@ -52,7 +52,7 @@
      chrome exists before the page script runs. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-city-tab"></script>
+<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB — rank labels, number formats) + the

package/modules/hall-ui/public/board-room.html

@@ -62,7 +62,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-city-tab"></script>
+<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-board"></script>

package/modules/hall-ui/public/city.html

@@ -85,7 +85,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-city-tab"></script>
+<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/city-draw.js?v=2026-10-04-pins1"></script>
 <script src="/builders/city.js?v=2026-10-04-pins1"></script>

package/modules/hall-ui/public/collab.html

@@ -150,7 +150,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-city-tab"></script>
+<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <script src="/builders/collab-lib.js?v=2026-09-24-archive"></script>

package/modules/hall-ui/public/commands.html

@@ -56,7 +56,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-city-tab"></script>
+<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-14-domutils"></script>

package/modules/hall-ui/public/copy-desk.html

@@ -179,7 +179,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-city-tab"></script>
+<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <script src="/builders/hall-kit.js"></script>

package/modules/hall-ui/public/deploy.html

@@ -76,7 +76,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-city-tab"></script>
+<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>
 <script src="/builders/hall-kit.js"></script>

package/modules/hall-ui/public/diagrams.html

@@ -99,7 +99,7 @@
      time so the chrome exists before the deferred page scripts execute. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-city-tab"></script>
+<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/diagram-viewer.js?v=2026-06-14-diagviewer-1" defer></script>

package/modules/hall-ui/public/drachmae.html

@@ -100,7 +100,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-city-tab"></script>
+<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/md-reader.js?v=2026-09-02-mdreader-2"></script>

package/modules/hall-ui/public/fleet.html

@@ -56,7 +56,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-city-tab"></script>
+<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>
 <script src="/builders/hall-kit.js"></script>

package/modules/hall-ui/public/gate.html

@@ -79,7 +79,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-city-tab"></script>
+<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>

package/modules/hall-ui/public/goal-map.html

@@ -139,7 +139,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-city-tab"></script>
+<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
 <script src="/builders/palette.js" defer></script>
 
 <script src="/builders/idea-objects.js?v=2026-09-27-split"></script>

package/modules/hall-ui/public/goals-page.js

@@ -31,7 +31,7 @@
   // below reads exactly as before; the single copy lives in task-lib.js.
   const {
     priorityRank, touchesConflict, rankTagHtml, deHashRefs,
-    creditsPerMinute, buildPromptForTask, friendlyBatchReason,
+    creditsPerMinute, buildPromptForTask, buildPlanPromptForGoal, friendlyBatchReason,
   } = window.OTBTaskLib;
   // Shared component kit (hall-kit.js, task 2166): pager, filter bar, tabs,
   // empty/skeleton states — adopted here by task 2171.
@@ -404,6 +404,18 @@
       } catch (_e) { return false; }
     }
   }
+  // task 1004587 (ADR 0366 D4) — the optional "Plan with Claude" hand-off; every planning form works without it.
+  async function planWithClaude() {
+    const d = state.details.get(String(state.current));
+    if (!d) return;
+    // The spec task is found in the goal's task list, so wait for it: copying early would hand back the fallback prompt for a goal that has a spec task.
+    if (!state.workLoaded) return toast("Still loading this goal's tasks. Try again in a moment.");
+    const g = d.goal;
+    const ok = await copyText(buildPlanPromptForGoal(g, state.work.todo));
+    toast(ok ? 'Prompt copied. Paste it into a Claude Code session to plan this goal.' : 'Could not copy to the clipboard. Try again.');
+  }
+  // The button is drawn by renderActions (which re-draws it), so the click is delegated.
+  document.addEventListener('click', (e) => { if (e.target.closest && e.target.closest('#goal-plan-btn')) planWithClaude(); });
   async function copyPromptForTask(taskId, btn) {
     const t = state.work.todo.find((x) => String(x.id) === String(taskId));
     if (!t) return;

package/modules/hall-ui/public/goals-render.js

@@ -962,7 +962,7 @@
     if (canManage && g.status === 'open') {
       parts.push('<button class="btn-ghost" id="goal-archive-btn" type="button" title="Retire this goal — you will be asked what happens to any unfinished work">Archive goal</button>');
     }
-    if (g.status === 'open') {
+    if (g.status === 'open') { parts.push('<button class="btn-ghost" id="goal-plan-btn" type="button" title="Copies a prompt to paste into a Claude Code session">Plan with Claude</button>'); // task 1004587
       if (joined) {
         parts.push('<button class="btn-ghost" id="goal-leave-btn" type="button">Leave goal</button>');
       } else if ((g.visibility === 'private' || g.scope_protected) && !isArchon()) {

package/modules/hall-ui/public/goals.html

@@ -232,7 +232,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-city-tab"></script>
+<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-14-domutils"></script>

package/modules/hall-ui/public/government.html

@@ -136,7 +136,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-city-tab"></script>
+<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>

package/modules/hall-ui/public/idea.html

@@ -52,7 +52,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-city-tab"></script>
+<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib" defer></script>
 <!-- task-detail.js still owns the #/idea/N and #/blocker/N overlay, so a ref

package/modules/hall-ui/public/ideas.html

@@ -227,7 +227,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-city-tab"></script>
+<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <!-- task 1003069 (R08) — the quick-filing form's routed result links a task

package/modules/hall-ui/public/index.html

@@ -108,7 +108,7 @@
      BEFORE builders.js so the chrome ids exist when events are wired. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab" defer></script>
 <script src="/builders/craft-mode.js?v=2026-10-08-city-tab" defer></script>
-<script src="/builders/shell.js?v=2026-10-08-city-tab" defer></script>
+<script src="/builders/shell.js?v=2026-10-08-glyph-fix" defer></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- task 2166: the shared component kit (window.OTBKit) — pager/ledger/rail.

package/modules/hall-ui/public/modules.html

@@ -103,7 +103,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-city-tab"></script>
+<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>

package/modules/hall-ui/public/primer.html

@@ -117,7 +117,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-city-tab"></script>
+<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- the shared markdown reader (window.OTBMdReader) — primer.js renders through

package/modules/hall-ui/public/profile.html

@@ -209,7 +209,7 @@
      chrome exists before the page script runs. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-city-tab"></script>
+<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before profile.js, which pulls from it. -->

package/modules/hall-ui/public/project-settings.html

@@ -72,7 +72,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-city-tab"></script>
+<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>

package/modules/hall-ui/public/ranks.html

@@ -79,7 +79,7 @@
      chrome exists before the page script runs. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-city-tab"></script>
+<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before ranks.js, which pulls from it. -->

package/modules/hall-ui/public/roadmap.html

@@ -43,7 +43,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-city-tab"></script>
+<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-14-domutils"></script>

package/modules/hall-ui/public/roster.html

@@ -55,7 +55,7 @@
      chrome exists before the page script runs. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-city-tab"></script>
+<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB — rank labels, number formats) + the

package/modules/hall-ui/public/sessions.html

@@ -113,7 +113,7 @@
      chrome exists before the page script runs. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-city-tab"></script>
+<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded BEFORE sessions.js so it can pull from it. -->

package/modules/hall-ui/public/settings-usage-reports.js

@@ -0,0 +1,96 @@
+// modules/hall-ui/public/settings-usage-reports.js — the "Module install reports"
+// panel on /builders/settings: the switch that stops your module installs being
+// counted in a module's store score (task 1003793, ADR 0343 D1).
+//
+// WHY IT EXISTS. A store module's Install and Reliability scores come from real
+// installs reporting back. The owner's privacy posture (2026-10-01) is counts
+// only, on by default, with an opt-out — this is the opt-out. The server holds
+// the switch and drops a report from someone who turned it off, so this panel
+// only reads and writes GET/POST /store/usage-reporting; it decides nothing.
+//
+// Own file on the settings-render.js precedent: settings.js is against the
+// 1500-line ratchet, and this panel shares nothing with the rest of the page.
+
+(() => {
+  'use strict';
+
+  const API = '/api/bongos';
+  const { $ } = window.OTB;
+  const toast = (msg) => window.OTB.toast(msg);
+  const api = window.BongosClient.createClient({ baseUrl: '', credentials: 'same-origin', throwOnError: false });
+
+  const toAuth = () => window.location.assign(`${API}/auth/web/start`);
+
+  const CHOICES = [
+    { value: 'on', label: 'Share counts', desc: 'When you install or update a store module, the store learns whether it worked. Nothing else is sent.' },
+    { value: 'off', label: 'Don’t share', desc: 'Your installs are left out of every module’s score.' },
+  ];
+
+  function render(enabled) {
+    const wrap = $('#usage-reports-rows');
+    if (!wrap) return;
+    const current = enabled ? 'on' : 'off';
+    wrap.innerHTML =
+      '<fieldset class="pgroup" id="usage-reports-group">' +
+      '<legend class="prow__label">Share what happens when you install a module</legend>' +
+      CHOICES.map((c) => {
+        const id = `usage-reports-${c.value}`;
+        return (
+          `<label class="prow prow--pick" for="${id}">` +
+          `<input class="pradio" type="radio" name="usage-reports" id="${id}"` +
+          ` value="${c.value}"${current === c.value ? ' checked' : ''}>` +
+          '<span class="prow__main">' +
+          `<span class="prow__label">${c.label}${c.value === 'on' ? '<span class="prow__tag">default</span>' : ''}</span>` +
+          `<span class="prow__desc">${c.desc}</span>` +
+          '</span></label>'
+        );
+      }).join('') +
+      '</fieldset>';
+  }
+
+  async function save(value, input) {
+    const status = $('#usage-reports-status');
+    if (status) status.textContent = 'Saving…';
+    if (input) input.disabled = true;
+    try {
+      const res = await api.request('POST', `${API}/store/usage-reporting`, { body: { enabled: value === 'on' } });
+      if (res.status === 401) { toAuth(); return; }
+      if (!res.ok) throw new Error(`usage-reporting POST → ${res.status}`);
+      render(res.data.enabled);
+      const msg = res.data.enabled
+        ? 'Saved — your module installs count toward their scores.'
+        : 'Saved — your module installs are no longer reported.';
+      if (status) status.textContent = msg;
+      toast(msg);
+    } catch (err) {
+      console.error('[settings] save usage reporting failed', err);
+      if (status) status.textContent = 'Could not save. Try again.';
+      toast('Could not save whether to share your install results. Try again.');
+      if (input) input.disabled = false;
+    }
+  }
+
+  async function setup() {
+    try {
+      const res = await api.request('GET', `${API}/store/usage-reporting`);
+      if (res.status === 401) { toAuth(); return; }
+      if (!res.ok) throw new Error(`usage-reporting GET → ${res.status}`);
+      render(res.data.enabled !== false);
+      $('#usage-reports-scroll').hidden = false;
+      $('#usage-reports-rows').addEventListener('change', (e) => {
+        const r = e.target.closest('.pradio');
+        if (!r || r.disabled || !r.checked) return;
+        save(r.value, r);
+      });
+    } catch (err) {
+      // Its own try/catch, like every other section: a failing endpoint shows
+      // this panel's own error rather than taking the settings page down.
+      console.error('[settings] failed to load usage reporting', err);
+      $('#usage-reports-scroll').hidden = false;
+      $('#usage-reports-rows').innerHTML =
+        '<p class="voices-empty">Whether you share your install results could not be loaded. Reload the page to try again.</p>';
+    }
+  }
+
+  setup();
+})();

package/modules/hall-ui/public/settings.html

@@ -332,6 +332,22 @@
               <p class="section-note">Saves the moment you choose; applies from your next session.</p>
             </section>
 
+            <!-- MODULE INSTALL REPORTS — the opt-out for counting your store-module
+                 installs in a module's Install and Reliability scores (task 1003793,
+                 ADR 0343 D1; owner: counts only, on by default, with an opt-out).
+                 GET/POST /store/usage-reporting, rendered by settings-usage-reports.js. -->
+            <section class="scroll" id="usage-reports-scroll" aria-labelledby="usage-reports-h" data-group="preferences" hidden>
+              <h2 id="usage-reports-h" class="scroll__h">Module install reports</h2>
+              <p class="scroll__lede">
+                A store module is scored partly on whether it installs and runs cleanly for
+                the people who use it. Only counts are sent: whether an install worked, and
+                a short code if it did not. No messages, file paths or details about you.
+              </p>
+              <div class="sound-rows" id="usage-reports-rows"></div>
+              <p class="settings-status" id="usage-reports-status" role="status" aria-live="polite"></p>
+              <p class="section-note">Saves the moment you choose; applies to your next install.</p>
+            </section>
+
             <!-- ============ group: sound ============ -->
 
             <!-- VOICES — per-skill model picker (GET/PATCH /me/skill-prefs). -->
@@ -437,7 +453,7 @@
      chrome exists before the page scripts run. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/shell.js?v=2026-10-08-city-tab"></script>
+<script src="/builders/shell.js?v=2026-10-08-glyph-fix"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before consuming IIFEs. -->
@@ -464,5 +480,7 @@
 <script src="/builders/settings-software-update.js?v=2026-10-06-ask"></script>
 <!-- task 1004501: Settings → Your Autobongos runner. Own file on the same precedent. -->
 <script src="/builders/settings-autobongos.js?v=2026-10-01-autobongos"></script>
+<!-- task 1003793: Settings → Module install reports. Own file on the same precedent. -->
+<script src="/builders/settings-usage-reports.js?v=2026-10-08-usage-reports"></script>
 </body>
 </html>

package/modules/hall-ui/public/settings.states.json

@@ -12,6 +12,7 @@
     "preferences": { "auth": true, "url": "/settings#preferences", "actions": [["wait", 900]], "expect": { "visible": ["#wander-rows", "#render-rows", "#specialities-rows"] } },
     "skills-walkthrough": { "auth": true, "url": "/settings#preferences", "actions": [["wait", 900], ["click", "#specialities-rows button[data-act=\"adopt\"]"], ["wait", 700]], "expect": { "visible": [".skill-walk", ".skill-walk__facts", "button[data-walk=\"on\"]", "button[data-walk=\"off\"]"] } },
     "offered-skills": { "auth": true, "url": "/settings#preferences", "actions": [["wait", 900], ["click", "#specialities-rows button[data-act=\"offer\"]"], ["wait", 700]], "expect": { "visible": ["form.speciality-offer", ".speciality-offer__list", ".speciality-offer__filter"] } },
+    "install-reports": { "_": "The Module install reports switch (task 1003793): the opt-out for counting your store-module installs in a module's score, on by default. Scrolled into view by focusing its default choice.", "auth": true, "url": "/settings#preferences", "actions": [["wait", 900], ["clickIfVisible", "[data-craft-close]"], ["wait", 300], ["focus", "#usage-reports-on"], ["wait", 300]], "expect": { "visible": ["#usage-reports-h", "#usage-reports-on", "#usage-reports-off"] } },
     "sound": { "auth": true, "url": "/settings#sound", "actions": [["wait", 900]], "expect": { "visible": ["#voices-table", "#sound-rows", "#event-sound-rows"] } },
     "update": { "auth": true, "url": "/settings#software-update", "actions": [["wait", 1200]], "expect": { "visible": ["#software-update-h", "#su-body", "#su-update", ".su-versions"] } }
   },