@bongos/core 1.23.22 → 1.24.1

package/modules/hall-ui/public/studio.js

@@ -687,6 +687,32 @@
     setText('st-status-detail', lib.statusDetail(home.pages));
   }
 
+  // The AI door and the AI balance line (task 1004921, goal 1000136). Only where
+  // the ai-studio module is on: it is off by default, so a missing flag means
+  // off here (not moduleOn's show-when-unsure). The door's line follows the
+  // newest request (ai-studio-lib.js homeLine); the balance line shows only
+  // where paying from a balance is set up.
+  async function loadAi() {
+    const mods = window.__MODULES__;
+    const aiLib = window.OTBAiStudioLib;
+    if (!aiLib || !mods || !mods.enabled || mods.enabled['ai-studio'] !== true) return;
+    const [reqs, bal] = await Promise.all([
+      api.request('GET', `${API}/ai-studio/requests`),
+      api.request('GET', `${API}/ai-studio/balance`),
+    ]);
+    if (!reqs.ok && !bal.ok) return;
+    const door = byId('st-ai');
+    const line = aiLib.homeLine(reqs.ok && reqs.data ? reqs.data.requests : [], new Date());
+    if (door) { door.href = line.href; door.hidden = false; }
+    setText('st-ai-detail', line.detail);
+    const b = bal.ok && bal.data ? bal.data.balance : null;
+    const row = byId('st-ai-balance');
+    if (row && b) {
+      setText('st-ai-balance-detail', `${aiLib.balanceUsd(b.available_micro)} left`);
+      row.hidden = false;
+    }
+  }
+
   // The public site's reviews (task 1004499): docs written with its Artist
   // review button, newest first. Each row is the doc's own link, which opens it
   // in the palette's panel right here (craft-mode.js reads ?note=).
@@ -760,25 +786,33 @@
     return `<ul class="st-surfaces">${rows}</ul>${asked ? `<p class="st-asked">${escapeHtml(asked)}</p>` : ''}${inFlight}${worstList}`;
   }
 
+  // What the two views of the live site's reviews (the panel and the full page)
+  // say in common, so they cannot drift apart.
+  const SITE_FAILED = 'The reviews could not be read just now. Try again in a moment.';
+  const SITE_NONE = 'None yet. A signed-in builder on the live site sees a Review button in its top bar; what they write lands here.';
+  const siteWhen = (iso, withYear) => {
+    const d = iso ? new Date(iso) : null;
+    return d && !isNaN(d) ? d.toLocaleDateString(undefined, withYear ? { month: 'short', day: 'numeric', year: 'numeric' } : { month: 'short', day: 'numeric' }) : '';
+  };
+  const siteIdeas = (r) => (r.status === 'filed' ? `${r.idea_count} ${r.idea_count === 1 ? 'idea' : 'ideas'}` : 'splitting');
+  const siteExcerpt = (r, max) => {
+    const whole = String(r.excerpt || '').replace(/!\[[^\]\n]*\]\([^)\n]*\)/g, '[image]').replace(/\s+/g, ' ').trim();
+    return whole.length > max ? `${whole.slice(0, max - 1).replace(/\s+\S*$/, '')}…` : whole;
+  };
+  // A review's link comes from the server; only a path on this site is followed.
+  const siteHref = (link) => (/^\/(?!\/)/.test(String(link || '')) ? String(link) : '#');
+
   function siteHtml() {
     if (!home.site) {
-      return `<p class="st-panel__line">${home.siteFailed ? 'The reviews could not be read just now. Try again in a moment.' : 'Reading the reviews…'}</p>`;
+      return `<p class="st-panel__line">${home.siteFailed ? SITE_FAILED : 'Reading the reviews…'}</p>`;
     }
-    if (!home.site.length) {
-      return '<p class="st-panel__line">None yet. A signed-in builder on the live site sees a Review button in its top bar; what they write lands here.</p>';
-    }
-    const day = (iso) => { const d = iso ? new Date(iso) : null; return d && !isNaN(d) ? d.toLocaleDateString(undefined, { month: 'short', day: 'numeric' }) : ''; };
-    const rows = home.site.map((r) => {
-      const ideas = r.status === 'filed' ? `${r.idea_count} ${r.idea_count === 1 ? 'idea' : 'ideas'}` : 'splitting';
-      const whole = String(r.excerpt || '').replace(/!\[[^\]\n]*\]\([^)\n]*\)/g, '[image]').replace(/\s+/g, ' ').trim();
-      const text = whole.length > 140 ? `${whole.slice(0, 139).replace(/\s+\S*$/, '')}…` : whole;
-      return `
-      <li><a class="st-site" href="${escapeHtml(r.link)}">
-        <span class="st-site__head"><span class="st-site__page">${escapeHtml(r.page_title || r.page_path || r.page_id)}</span><span class="st-site__meta">${escapeHtml(r.author_name)} · ${escapeHtml(day(r.submitted_at))} · ${escapeHtml(ideas)}</span></span>
-        <span class="st-site__text">${escapeHtml(text)}</span>
-      </a></li>`;
-    }).join('');
-    return `<ul class="st-sites">${rows}</ul>`;
+    if (!home.site.length) return `<p class="st-panel__line">${SITE_NONE}</p>`;
+    const rows = home.site.map((r) => `
+      <li><a class="st-site" href="${escapeHtml(siteHref(r.link))}">
+        <span class="st-site__head"><span class="st-site__page">${escapeHtml(r.page_title || r.page_path || r.page_id)}</span><span class="st-site__meta">${escapeHtml(r.author_name)} · ${escapeHtml(siteWhen(r.submitted_at))} · ${escapeHtml(siteIdeas(r))}</span></span>
+        <span class="st-site__text">${escapeHtml(siteExcerpt(r, 140))}</span>
+      </a></li>`).join('');
+    return `<ul class="st-sites">${rows}</ul><p class="st-panel__line"><a href="/builders/studio?view=site">Read all the live-site reviews</a></p>`;
   }
 
   function paintPanel() {
@@ -1092,11 +1126,107 @@
     window.addEventListener('pagehide', () => { if (wedit.editing) saveWords(); });
   }
 
+  // ---- the full-page reader --------------------------------------------------
+  // The live site's reviews as a page of their own, not a panel over the room:
+  // /studio?view=site lists them, /studio?note=N reads one review. Both replace the
+  // room's greeting and doors in place (html.st-reading) and nothing is modal.
+
+  const IMAGE_RE = /!\[([^\]\n]{0,120})\]\(\/api\/bongos\/page-notes\/images\/(\d{1,18})\)/g;
+  const HEADING_RE = /^(#{1,3})\s+(.*)$/;
+  const ITEM_RE = /^\s*[-*]\s+(.*)$/;
+  const NOTE_RE = /[?&]note=([1-9]\d{0,17})(?:&|$)/;
+  const SITE_VIEW_RE = /[?&]view=site(?:&|$)/;
+
+  // A review's markdown as headings, lists and paragraphs. Deliberately not
+  // md-reader.js: that one follows links and draws tables and code, and a review
+  // may show only this module's own pictures; anything else stays escaped text.
+  // Same subset as the side sheet's reader (page-notes.js), which this replaces
+  // on the Studio.
+  function docBodyHtml(md) {
+    const out = [];
+    let para = [];
+    let list = [];
+    const inline = (line) => escapeHtml(line).replace(IMAGE_RE, (_m, alt, id) => `<img class="st-doc__img" src="${API}/page-notes/images/${id}" alt="${alt}" loading="lazy">`);
+    const flush = () => {
+      if (para.length) out.push(`<p>${para.join('<br>')}</p>`);
+      if (list.length) out.push(`<ul>${list.map((x) => `<li>${x}</li>`).join('')}</ul>`);
+      para = []; list = [];
+    };
+    for (const raw of String(md || '').split('\n')) {
+      const line = raw.replace(/\s+$/, '');
+      const h = HEADING_RE.exec(line);
+      const li = ITEM_RE.exec(line);
+      if (!line.trim()) flush();
+      else if (h) { flush(); out.push(`<h3>${inline(h[2])}</h3>`); }
+      else if (li) { if (para.length) flush(); list.push(inline(li[1])); }
+      else { if (list.length) flush(); para.push(inline(line)); }
+    }
+    flush();
+    return out.join('');
+  }
+
+  function showReader(html, title) {
+    const box = byId('st-doc');
+    if (!box) return;
+    setText('st-doc-title', title);
+    const body = byId('st-doc-body');
+    if (body) body.innerHTML = html;
+    box.hidden = false;
+    document.documentElement.classList.add('st-reading');
+    const t = byId('st-doc-title');
+    if (t) t.focus();
+  }
+
+  function siteListPage() {
+    if (!home.site) return `<p class="st-panel__line">${home.siteFailed ? SITE_FAILED : 'Reading the reviews…'}</p>`;
+    if (!home.site.length) return `<p class="st-panel__line">${SITE_NONE}</p>`;
+    return `<ul class="st-doc-list">${home.site.map((r) => `<li><a class="st-doc-list__row" href="${escapeHtml(siteHref(r.link))}">
+        <span class="st-doc-list__page">${escapeHtml(r.page_title || r.page_path || r.page_id)}</span>
+        <span class="st-doc-list__meta">${escapeHtml(r.author_name)} · ${escapeHtml(siteWhen(r.submitted_at, true))} · ${escapeHtml(siteIdeas(r))}</span>
+        <span class="st-doc-list__text">${escapeHtml(siteExcerpt(r, 260))}</span>
+      </a></li>`).join('')}</ul>`;
+  }
+
+  async function openDocPage(id) {
+    showReader('<p class="st-panel__line">Opening the review…</p>', 'Review');
+    const res = await api.request('GET', `${API}/page-notes/${id}`);
+    if (!res.ok || !res.data || !res.data.note) {
+      showReader('<p class="st-panel__err" role="alert">That review could not be opened. It may have been removed, or you may not have access.</p>', 'Review');
+      return;
+    }
+    const n = res.data.note;
+    const ideas = res.data.ideas || [];
+    const filed = n.status === 'filed';
+    const became = filed
+      ? `<h3 class="st-doc__h">It became ${ideas.length} ${ideas.length === 1 ? 'idea' : 'ideas'}</h3><ul class="st-doc__ideas">${ideas.map((i) => `<li><a href="/#/idea/${escapeHtml(String(i.id))}">${escapeHtml(i.title)}</a></li>`).join('')}</ul>`
+      : '<p class="st-panel__line">Being split into ideas…</p>';
+    showReader(
+      `<p class="st-doc__meta">${escapeHtml(n.author_name)} · ${escapeHtml(siteWhen(n.submitted_at, true))}</p><div class="st-doc__text">${docBodyHtml(n.body_md)}</div>${became}`,
+      n.page_title || n.page_id || 'Review',
+    );
+  }
+
+  // Which reader the address asks for: one review (?note=N) wins over the list
+  // (?view=site). Read once, so the page makes one request for it.
+  function readerRoute() {
+    const q = (window.location && window.location.search) || '';
+    const note = NOTE_RE.exec(q);
+    if (note) return { note: note[1] };
+    return SITE_VIEW_RE.test(q) ? { site: true } : null;
+  }
+
   async function bootHome(signedIn) {
     if (!hasDom || !lib) return;
     wireHome();
-    if (!signedIn) return;
-    await Promise.all([loadTally(), loadNext(), loadPages(), loadSite()]);
+    const route = readerRoute();
+    if (!signedIn) {
+      // The side sheet stays shut on this page (craft-mode.js), so say why here.
+      if (route) showReader('<p class="st-panel__line">Sign in to read page reviews.</p>', 'Review');
+      return;
+    }
+    if (route && route.note) openDocPage(route.note);
+    await Promise.all([loadTally(), loadNext(), loadPages(), loadSite(), loadAi()]);
+    if (route && route.site) showReader(siteListPage(), 'From the live site');
     if (home.panel) paintPanel();
   }
 

package/modules/hall-ui/public/task.html

@@ -15,6 +15,7 @@
   <link rel="stylesheet" href="/builders/record.css">
   <link rel="stylesheet" href="/builders/hall-ask.css">
   <link rel="stylesheet" href="/builders/task.css">
+  <link rel="stylesheet" href="/builders/notes-panel.css">
 </head>
 <body data-page="task" data-page-title="Task" data-back-fallback="/work">
 
@@ -72,6 +73,7 @@
      page's Claim it button consumes it rather than a second hand-rolled POST. -->
 <script src="/builders/claim-action.js?v=2026-09-26-claimaction1" defer></script>
 <script src="/builders/hall-ask.js" defer></script>
+<script src="/builders/notes-panel.js" defer></script>
 <script src="/builders/task.js?v=2026-09-28-taskclaim" defer></script>
 </body>
 </html>

package/modules/hall-ui/public/task.js

@@ -815,6 +815,9 @@
         : '<button class="td-btn" type="button" id="abandon-open-btn">Retire this task…</button>';
     }
 
+    // Notes (task 1004745): grouped by purpose, filled by notes-panel.js after the body is set.
+    parts.push('<section class="rec-sec"><p class="rec-sec__h">Notes</p><div id="task-notes"></div></section>');
+
     // Copy prompt (the "ship link") — the same claim/build/ship prompt the Work
     // Board hands an agent. Purely client-side (clipboard write, no server call).
     parts.push(`
@@ -833,6 +836,7 @@
     if (body) body.innerHTML = parts.join('');
     fillExits(body);
     announceShown(t);
+    if (window.OTBNotes) window.OTBNotes.mount(document.getElementById('task-notes'), { task_id: t.id });
 
     const copyBtn = $('#copy-prompt-btn');
     if (copyBtn) {

package/modules/hall-ui/public/tweak-editor.js

@@ -296,10 +296,19 @@
     $('tw-submit').disabled = !st.writable;
   }
 
+  // Information only (task 1004948): engineering work is open on this page's files.
+  function engineeringLine() {
+    const list = st.ed && Array.isArray(st.ed.engineering_active) ? st.ed.engineering_active : [];
+    if (!list.length) return '';
+    const who = list.slice(0, 2).map((e) => escapeHtml(e.holder)).join(' and ');
+    return `<p>Engineering work is open on this page (${who}), so code may change around your words. You can keep writing.</p>`;
+  }
+
   function notice(html) {
     const n = $('tw-notice');
-    if (!html) { n.hidden = true; n.innerHTML = ''; return; }
-    n.innerHTML = html;
+    const all = (html || '') + engineeringLine();
+    if (!all) { n.hidden = true; n.innerHTML = ''; return; }
+    n.innerHTML = all;
     n.hidden = false;
   }
 
@@ -309,7 +318,7 @@
     if (st.ed.draft_on_older_reading) {
       notice('<p>The page changed after your draft was saved, so the draft is not shown over its new words. Rewrite the lines again here.</p>');
     }
-    if (st.writable) return;
+    if (st.writable) { if (!st.ed.draft_on_older_reading) notice(''); return; }
     if (!r || r.state === 'draft' || (r.state === 'writing' && !r.holder)) {
       notice('<p>Nobody is writing this page. Take it, and every line here is yours to type over.</p>'
         + '<button class="tw-notice__act" id="tw-claim" type="button">take this page</button>');

package/modules/hall-ui/public/welcome-boot.css

@@ -56,20 +56,56 @@ html.wb-open { overflow: hidden; }
 .wb__skip:hover, .wb__skip:focus-visible { border-color: rgba(255, 255, 255, .6); outline: none; }
 .wb--day .wb__skip { background: rgba(255, 255, 255, .55); border-color: rgba(20, 22, 30, .2); color: #14161c; }
 
-/* the banner: what is being built */
+/* the banner: the logo, animated (task 1004953). The rest state below IS the finished logo; the
+   motion lives only in keyframes that run once the veil lifts, so reduced motion (animation: none)
+   and a page that never lights both show the whole mark. */
 .wb__banner {
   position: absolute; top: 20px; left: 50%; transform: translateX(-50%); z-index: 4;
-  display: flex; flex-direction: column; align-items: center; gap: 4px; padding: 10px 22px;
+  display: flex; flex-direction: column; align-items: center; gap: 4px; padding: 10px 24px 10px 16px;
   max-width: calc(100% - 140px); text-align: center;
-  background: rgba(10, 14, 32, .55); border: 1px solid rgba(94, 234, 212, .35); border-radius: 999px;
+  background: rgba(10, 14, 32, .5); border: 1px solid rgba(255, 255, 255, .14); border-radius: 999px;
   backdrop-filter: blur(6px);
   transition: transform 2.2s cubic-bezier(.45, 0, .25, 1);
 }
-.wb__eyebrow { font-family: var(--font-display); font-size: clamp(15px, 2.2vw, 22px); font-weight: 500; letter-spacing: .01em; }
+.wb__lockup { display: flex; align-items: center; gap: 12px; }
+.wb__mark, .wb__logo { width: clamp(34px, 4.4vw, 46px); height: clamp(34px, 4.4vw, 46px); flex: none; overflow: visible; }
+.wb__logo { object-fit: contain; }
+.wb__name {
+  font-family: var(--font-display); font-size: clamp(18px, 2.6vw, 26px); font-weight: 300;
+  letter-spacing: -.01em; text-transform: lowercase; white-space: nowrap;
+}
+/* the mark's ink follows the painting: pale by night, dark by day; the moon stays salmon */
+.wb__ring { stroke: #e2e1e4; }
+.wb__planet { fill: #e2e1e4; transform-box: fill-box; transform-origin: center; }
+.wb__moonlet { transform-box: view-box; transform-origin: 100px 100px; }
+.wb--day .wb__ring { stroke: #17181a; }
+.wb--day .wb__planet { fill: #17181a; }
+.wb--lit .wb__ring { stroke-dasharray: 100; animation: wb-ring 1.5s cubic-bezier(.6, 0, .2, 1) .5s both; }
+.wb--lit .wb__planet { animation: wb-planet 1s cubic-bezier(.3, 1.4, .5, 1) .3s both; }
+.wb--lit .wb__moonlet { animation: wb-orbit 1.6s cubic-bezier(.25, .8, .3, 1) 1.1s both, wb-glow 3.2s ease-in-out 2.7s infinite alternate; }
+.wb--lit .wb__name { animation: wb-name 1.2s ease-out 1.5s both; }
+@keyframes wb-ring { from { stroke-dashoffset: 100; } to { stroke-dashoffset: 0; } }
+@keyframes wb-planet { from { transform: scale(.35); opacity: 0; } to { transform: none; opacity: 1; } }
+@keyframes wb-orbit { from { transform: rotate(-200deg); opacity: 0; } 25% { opacity: 1; } to { transform: none; opacity: 1; } }
+@keyframes wb-glow { from { filter: drop-shadow(0 0 0 rgba(251, 149, 105, 0)); } to { filter: drop-shadow(0 0 7px rgba(251, 149, 105, .95)); } }
+@keyframes wb-name { from { opacity: 0; letter-spacing: .18em; } to { opacity: 1; letter-spacing: -.01em; } }
 .wb__version { font-family: var(--font-mono); font-size: 12px; color: #a5b4cf; }
-.wb--day .wb__banner { background: rgba(255, 255, 255, .7); border-color: rgba(15, 159, 143, .4); }
+.wb--day .wb__banner { background: rgba(255, 255, 255, .7); border-color: rgba(20, 22, 30, .14); }
 .wb--day .wb__version { color: #475569; }
 
+/* the credit, bottom right (task 1004953): under the veil, so it arrives with the scene */
+.wb__built {
+  position: absolute; right: 16px; bottom: 14px; z-index: 5;
+  display: inline-flex; align-items: center; min-height: 24px; padding: 2px 10px; border-radius: 999px;
+  font-size: 12px; color: rgba(244, 244, 246, .78); text-decoration: none;
+  background: rgba(10, 14, 32, .4); backdrop-filter: blur(4px);
+}
+.wb__built b { font-weight: 600; margin-left: .3em; color: #f4f4f6; }
+.wb__built:hover, .wb__built:focus-visible { color: #fff; outline: 1px solid rgba(255, 255, 255, .5); text-decoration: none; }
+.wb--day .wb__built { color: rgba(20, 22, 28, .7); background: rgba(255, 255, 255, .6); }
+.wb--day .wb__built b { color: #14161c; }
+.wb--leaving .wb__built { opacity: 0; transition: opacity .4s; }
+
 /* the greeting and the choice */
 .wb__after {
   position: absolute; left: 0; right: 0; bottom: 8vh; z-index: 5;
@@ -124,7 +160,7 @@ html.wb-open { overflow: hidden; }
 }
 @media (max-width: 600px) {
   .wb__banner { top: 16px; max-width: calc(100% - 110px); border-radius: 18px; }
-  .wb__eyebrow { font-size: 14px; }
+  .wb__name { font-size: 17px; }
   .wb__choices { grid-template-columns: 1fr; }
   .wb__roles, .wb__roles:has(> :nth-child(3):last-child) { grid-template-columns: 1fr 1fr; }
 }

package/modules/hall-ui/public/welcome-boot.js

@@ -3,8 +3,8 @@
 // Home only. The scene is the owner's own painting of a circuit city (welcome-day.webp and
 // welcome-night.webp, 2026-10-23), brought to life: a slow drift across the skyline, data pulses
 // climbing the circuit towers, hover cars crossing, and by night blinking aircraft lights, a breathing
-// moon and twinkling stars. A banner at the top says what is being built ("Working on the core of
-// <project>"). The picture follows the local time of day: the day painting from 06:00 to 17:59, the
+// moon and twinkling stars. The banner at the top is the logo, animated, and a "Built on
+// cloudbongos.com" credit sits in the bottom-right corner (task 1004953). The picture follows the local time of day: the day painting from 06:00 to 17:59, the
 // night one otherwise. It opens from a white (day) or black (night) veil, then "Good morning, <name>"
 // comes up with two choices. The way out is slow: the view sinks past the rooftops and fades into the
 // hall underneath.
@@ -22,7 +22,7 @@
 //   - A painting that will not load leaves the sky gradient behind it, and the welcome works the same.
 //   - prefers-reduced-motion: no motion; the still painting and the greeting at once, leaving is immediate.
 //
-// The pure parts (the day rule, the banner, the roles, the motion layout) are exported for
+// The pure parts (the day rule, the logo, the roles, the motion layout) are exported for
 // tests/welcome_boot.mjs; tests/welcome_boot_browser.mjs runs the overlay itself in a real browser.
 (function () {
   'use strict';
@@ -54,7 +54,20 @@
     var id = branding && branding.identity;
     return String((id && (id.worldName || id.productName)) || 'this project');
   }
-  function bannerText(branding) { return 'Working on the core of ' + projectName(branding); }
+  // The banner is the logo, animated (task 1004953; it replaced "Working on the core of <project>"):
+  // the ring draws in, the planet settles, the moon glides into the gap and glows. A project with its
+  // own logo (theme.logo, ADR 0358) shows that instead, as the sidebar's brand mark does.
+  var MARK_SVG = '<svg class="wb__mark" viewBox="0 0 200 200" aria-hidden="true">' +
+    '<path class="wb__ring" d="M137 31 A78 78 0 1 0 170 66" pathLength="100" fill="none" stroke-width="15" stroke-linecap="round"/>' +
+    '<circle class="wb__planet" cx="100" cy="100" r="55"/>' +
+    '<circle class="wb__moonlet" cx="156" cy="46" r="12" fill="#fb9569"/></svg>';
+  function logoHtml(branding) {
+    var logo = branding && branding.theme && branding.theme.logo;
+    var mark = logo ? '<img class="wb__logo" src="' + esc(logo) + '" alt="" width="40" height="40" decoding="async">' : MARK_SVG;
+    return '<span class="wb__lockup">' + mark + '<span class="wb__name">' + esc(projectName(branding)) + '</span></span>';
+  }
+  // The credit in the bottom-right corner (task 1004953).
+  var BUILT_ON = { href: 'https://cloudbongos.com', label: 'cloudbongos.com' };
 
   // ---------- the roles (the owner's mapping) ----------
   // `mode` is the craft mode the pick sets; `href` null means stay on Home.
@@ -159,10 +172,11 @@
         '<div class="wb__fx" id="wb-fx"></div>' +
       '</div></div>' +
       '<div class="wb__cloud wb__cloud--a" aria-hidden="true"></div><div class="wb__cloud wb__cloud--b" aria-hidden="true"></div>' +
-      '<div class="wb__banner"><span class="wb__eyebrow">' + esc(bannerText(window.__BRANDING__)) + '</span>' +
+      '<div class="wb__banner">' + logoHtml(window.__BRANDING__) +
         '<span class="wb__version" id="wb-version" hidden></span></div>' +
       '<div class="wb__veil" aria-hidden="true"></div>' +
       '<button class="wb__skip" type="button" data-wb-skip>Skip</button>' +
+      '<a class="wb__built" href="' + BUILT_ON.href + '" target="_blank" rel="noopener">Built on <b>' + BUILT_ON.label + '</b></a>' +
       '<div class="wb__after">' + (builder ? signedInHtml(builder, now) : signedOutHtml()) + '</div>';
   }
   function signedInHtml(builder, now) {
@@ -374,7 +388,7 @@
   var api = {
     DAY_KEY: DAY_KEY, SIGNIN_KEY: SIGNIN_KEY, ROLES: ROLES, ART: ART, TOWERS: TOWERS, BEACONS: BEACONS, LANES: LANES, AW: AW, AH: AH,
     localDay: localDay, firstVisitToday: firstVisitToday, greetingFor: greetingFor, nameOf: nameOf, timeOfDay: timeOfDay,
-    artFor: artFor, projectName: projectName, bannerText: bannerText, rolesFor: rolesFor, pulseRuns: pulseRuns,
+    artFor: artFor, projectName: projectName, logoHtml: logoHtml, BUILT_ON: BUILT_ON, rolesFor: rolesFor, pulseRuns: pulseRuns,
     onAccess: onAccess, finish: finish, close: close,
   };
   if (typeof window !== 'undefined') { window.OTBWelcome = api; watchSignInLinks(); }

package/modules/hall-ui/public/work.js

@@ -88,6 +88,8 @@
     const parts = [];
     const creator = $('#f-creator') ? $('#f-creator').value : '';
     const stale = $('#f-stale') ? $('#f-stale').value : '';
+    const needs = $('#f-needs') ? $('#f-needs').value : '';
+    if (needs) parts.push(`needs=${encodeURIComponent(needs)}`); // task 1004950
     if (creator) parts.push(`created_by=${encodeURIComponent(creator === '__none__' ? 'none' : creator)}`);
     if (stale) parts.push(`stale_days=${encodeURIComponent(stale)}`);
     return parts.length ? `?${parts.join('&')}` : '';
@@ -115,6 +117,7 @@
     const parts = [];
     if (f.creator) parts.push(`created_by=${encodeURIComponent(f.creator === '__none__' ? 'none' : f.creator)}`);
     if (f.stale) parts.push(`stale_days=${encodeURIComponent(f.stale)}`);
+    if (f.needs) parts.push(`needs=${encodeURIComponent(f.needs)}`);
     if (f.version) parts.push(`version=${encodeURIComponent(f.version)}`);
     if (f.kind) parts.push(`kind=${encodeURIComponent(f.kind)}`);
     if (f.discipline) parts.push(`discipline=${encodeURIComponent(f.discipline)}`);
@@ -347,6 +350,7 @@
       newcomer: val('#f-newcomer'),
       creator: val('#f-creator'),
       stale: val('#f-stale'),
+      needs: val('#f-needs'),
     };
   }
 
@@ -368,6 +372,9 @@
     if (f.creator === '__none__' && t.created_by != null) return false;
     if (f.creator && f.creator !== '__none__' && String(t.created_by) !== f.creator) return false;
     if (f.stale && !isStale(taskActivityMs(t), f.stale)) return false;
+    const tNeeds = Array.isArray(t.needs) ? t.needs : [];
+    if (f.needs === 'none' && tNeeds.length > 0) return false;
+    if (f.needs && f.needs !== 'none' && !tNeeds.includes(f.needs)) return false;
     return true;
   }
 
@@ -456,6 +463,8 @@
         : `<span class="task__tag">${escapeHtml(window.OTB.roleLabel(t.discipline))}</span>`;
       // A kind nobody set is no tag at all, like the role above (task 1004038).
       const kindTag = window.OTB.kindIsUnset(t.kind) ? '' : `<span class="task__tag">${escapeHtml(t.kind)}</span>`;
+      // task 1004950 — what the task needs beyond the build loop, said in words.
+      const needsTags = (Array.isArray(t.needs) ? t.needs : []).map((n) => `<span class="task__tag task__tag--needs">${n === 'owner' ? 'needs the project owner' : n === 'server' ? 'needs server access' : escapeHtml(n)}</span>`).join('');
       const newcomerTag = t.newcomer_friendly
         ? '<span class="task__tag task__tag--newcomer">newcomer</span>'
         : '';
@@ -489,6 +498,7 @@
               ${kindTag}
               ${disciplineTag}
               ${newcomerTag}
+              ${needsTags}
               ${rankTag}
               ${t.priority ? `<span class="task__tag">${escapeHtml(t.priority)}</span>` : ''}
               <span>${minutesText}</span>
@@ -1162,6 +1172,16 @@
         // shared STALE_CHOICES so both tiers offer the same lenses.
         { id: 'f-creator', label: 'Creator', options: [{ value: '', label: '— any —' }] },
         { id: 'f-stale', label: 'Age', options: STALE_CHOICES },
+        // task 1004950 — what a task needs beyond the build loop. Answered by the
+        // server (both feeds), like Creator and Age.
+        {
+          id: 'f-needs',
+          label: 'Needs',
+          options: [{ value: '', label: '— any —' },
+            { value: 'owner', label: 'needs the project owner' },
+            { value: 'server', label: 'needs server access' },
+            { value: 'none', label: 'needs neither' }],
+        },
         {
           id: 'f-fit',
           label: 'Run mode',

package/modules/hall-ui/records/ai-studio.md

@@ -0,0 +1,36 @@
+# The studio's AI pages — /builders/ai-studio (task 1004921)
+
+**Goal 1000136, [ADR 0392](../../../docs/adr/0392-ai-generation-runs-on-a-processor-held-balance-and-the-builders-own-keys.md).** Built 1:1 on the owner's pick, option C of the five-option "AI Studio options" canvas ("Three steps: pick, describe, make"), plus the owner's addition (2026-10-29): *"when the image is made it needs the option to edit/update the prompt"*. The server half is the `ai-studio` module (`modules/ai-studio/CLAUDE.md`); this page is its only face besides the key panel in Settings.
+
+Files: `ai-studio.html` (the room, drawn as studio.html draws it, and one view mount), `ai-studio.css` (spends only studio.css's `--st-*` tokens), `ai-studio-lib.js` (the pure rules, `window.OTBAiStudioLib`, node-require-safe) and `ai-studio.js` (the reads, the writes, the painting). The page's own id is `data-page="ai-studio"` (page-inventory.js keys pages on it, so it cannot share `studio`); studio.css names `ai-studio` beside `studio` on the room's rules (the tokens, the day sky, the full-width stage, the full-screen button), so the room and its two skies apply unchanged.
+
+## The views (one page, the address names the view)
+
+- `?step=pick` — "What are you starting from?" Each file uploads as it is picked, one per call; the page says no to a wrong type or size before the upload starts, in the server's words.
+- `?step=describe` — "What should it make?"
+- `?step=make` — "How do you want to pay?" Two cards: *My own key* (only when one is saved; OpenRouter first, as `keys.chooseKey` prefers it) and *My balance* (only where payments are set up; disabled under the run ceiling, with a link to add money). A card press sends the request.
+- `?request=N` — the waiting page (a clock, three lines, the lamp on), polled every 2.5 s, then the result: the picture big with thumbnails and *Save picture*, the reply, **Your request** in an editable box with *Make it again* / *Change files* / *Start something new*, and the receipt.
+- `?view=balance` — what is left, *Add how much?* with the card charge shown before paying, this month's summary, and every charge and refund (`&all=1`).
+
+The draft (files and words) lives in sessionStorage, so the steps survive a reload and the back button.
+
+## The rules worth knowing
+
+- **A file goes with one request only** (the server's `createRequest`). So *Make it again* and *Change files* carry the earlier request's UPLOADS by address and upload a fresh copy of each when the new request is sent; outputs are never copied. *Make it again* pays the same way the first run did (`key_source`).
+- **No price is spelled in the browser.** The card charge comes from `GET /ai-studio/topup/quote` and the "up to $0.50 is set aside" from `max_cost_micro` on `GET /ai-studio/balance`, both added in this task, so the fee and the ceiling stay named only in `pricing.js` / `studio.js`. The file limits ARE repeated in the lib (named, with a pointer), only to spare a doomed 4 MB upload; the server still checks.
+- **Which own key ran is inferred**: the stored request says `own`, not which provider. A reported cost means OpenRouter, none means Gemini (Google reports no price). A failed run shows no receipt; its error line already says what was charged.
+- **A key is never asked for here.** The "add your own key" line links to `/builders/settings#ai-keys`. `tests/hall_ai_studio.mjs` pins the three writes (`upload`, `request`, `topup`) and the absence of a key field.
+- **The studio home's door** ("Make something with AI") and its **AI balance** line show only where `window.__MODULES__.enabled['ai-studio'] === true`: the module is off by default, so a missing flag means off (not `moduleOn`'s show-when-unsure). The door's line follows the newest request while it runs or for a day after it finished.
+
+## Where it differs from the canvas, and why
+
+- **The column is 580 px**, not the canvas's 680: the studio's window never slides left of 680 px, and a wider column ran under it on a narrower window.
+- **The waiting checklist is paced by the clock** ("Wrote the answer" ticks at 25 s): the server reports queued or running, not which call it is on.
+- **By day the lamp lights while a request runs** (by day the room's lamp is otherwise off), so "the lamp stays on until it's done" holds at noon.
+- **On a phone** the words start below the scaled window and end above the plant (`padding-bottom: 240px`), so no line is read over the drawing.
+- **The PDF badge reads 10 px**, not 8: the kit flags 8 px as tiny type.
+- **Not on the canvas at all:** the no-key and no-payments lines on step 3, the short-balance line, the failed-run result, *Test mode: no real money moves.*, the other-amount box, the module-off and signed-out lines.
+
+## The proof
+
+`ai-studio.states.json` renders ten states (pick, describe, make, waiting, result, result-own, failed, balance, balance-all, out) against the hall-preview harness with the module on (`node scripts/hall-preview/server.js --port 4637 --fixture-me --modules-on ai-studio`, the `hall-preview-ai-studio` launch entry). All clean at 1440, 390 and 320, dark and light. The harness answers from `ai-studio__*.json` (request 1002 running, 1003 failed, 1004 own Gemini key, any other id the finished result on the balance) and serves every file as a stand-in picture. Behaviour: `tests/hall_ai_studio.mjs` (the lib, and the real page in a vm over those fixtures: the steps, the request sent on the card pressed, *Make it again* with the changed words on fresh copies, *Change files*, a failed run, the balance and top-up, the module off).

package/modules/hall-ui/records/blockers-people.md

@@ -0,0 +1,24 @@
+# Blockers under people — Blockers, Collab and the City say WHO a blocker waits on (task 1004999)
+
+Goal 1000111 (working area 7, Government). A blocker has no assignee: who it waits on is the seat its ask
+names (the owner, a building's Lead, a board), and the person in that seat changes. Every surface used to
+show the seat alone — or, on /blockers, every blocker under "Requires project owner fix".
+
+- **One rule, the server's.** `GET /government/blockers/people` and `/government/blockers/for-me` group
+  open blockers with `modules/government/waiting.js`, which resolves each one through `routing.js` — the
+  City's own rule. A page never decides whose a blocker is; it draws the answer.
+- **/blockers** gains a *Waiting on people* section above the queue (`blockers-by-person.js`): the viewer's
+  own group first as **You**, then each person with their count, then **Nobody yet** for a seat nobody
+  sits in. Each row says the seat in words ("as the owner, since Planning has no Lead"). Hidden until the
+  read answers, so a signed-out visitor still gets the public queue and nothing else.
+- **Collab** gains *Blockers waiting on you* beside *Asked of you*, from the same file. Collab loads no
+  `hall-kit.js`, so the file falls back to the shell's `OTB.escapeHtml` and a local date format.
+- **The City** names the people on every routed card: `route.people` rides the docket, `gov-living.js`
+  keeps it on `waits_on.people`, and `street-deck.js` `whoWords` says "It waits on Ana, the Planning Lead."
+- **The heading stays "Requires project owner fix"** — Home names its summary that way and
+  `tests/blockers_page_ui.mjs` pins the match; renaming both is a separate copy call.
+- **Harness fixtures are DERIVED, not hand-written**: `government__docket.json`'s routes and the two
+  `government__blockers__*.json` reads are computed with `routing.js` + `waiting.js` over the leads
+  fixture, because `tests/hall_preview_governor_fixtures.mjs` re-derives every route and fails on a guess.
+
+Tests: `tests/blockers_people.mjs`.

package/modules/lifecycle/db-claims.js

@@ -15,6 +15,8 @@ const { pool, withTx } = api;
 const log = api.logger('lifecycle');
 const seams = api;
 const { touchesOverlap } = api.pathMatch;
+const { notPageMarkerSql } = require('./page-tweak-artist.js');
+const { heldPagesForTouches } = require('./page-notice.js');
 // CLAIM_ANY / CLAIM_NEWCOMER name the two atoms in the refusal message. The
 // decision itself moved to db-rank-authz.claimGate (task 1003196), so this file
 // no longer calls claimEligibilityAllows / rankAllowsTask / xenosClaimAllowed
@@ -27,6 +29,9 @@ const { goalMembershipFailures } = require('./claim-feed.js');
 // called from all three claim surfaces below, so a flagged task can't be
 // claimed via the batch path as a bypass of the single-claim gate.
 const { relevanceFrictionFailures } = require('./db-relevance-flags.js');
+// task 1004950 / ADR 0395: a task that needs server access refuses a claimer
+// without the grant — the third extracted gate in the same shape.
+const { taskNeedsFailures } = require('./task-needs-gate.js');
 const { unsatisfiedDeps } = require('./db-deps-criteria.js');
 // depRefusalRow: the ONE shape a DEPS_NOT_SHIPPED refusal carries. All three
 // claim paths below use it — hand-building the object here is what made task
@@ -251,6 +256,13 @@ async function claimTask({ taskId, builderId, worktreeName, headSha, creatorSess
     const relevanceRefusals = await relevanceFrictionFailures({ client, tasks: [task] });
     if (relevanceRefusals.length > 0) throw relevanceRefusals[0].refusal;
 
+    // task 1004950 / ADR 0395: a task that needs the live server refuses a
+    // claimer without the server grant. Same extracted check on all three
+    // surfaces (task-needs-gate.js). `owner` never refuses here — the feed is
+    // where owner work narrows to the owner.
+    const needsRefusals = await taskNeedsFailures({ client, tasks: [task], builderId });
+    if (needsRefusals.length > 0) throw needsRefusals[0].refusal;
+
     // The claim gate (ADR 0015, generalized in task 1516 / ADR 0086 §5): a task
     // can't be claimed while any dependency is un-done — its OWN edges plus those
     // inherited from its goal/criteria, where "done" = task shipped | criterion
@@ -300,7 +312,7 @@ async function claimTask({ taskId, builderId, worktreeName, headSha, creatorSess
     const { rows: activeClaimRows } = await client.query(
       `SELECT c.id, t.id AS task_id, t.title, t.touches, t.module_key FROM claims c
          JOIN tasks t ON t.id = c.task_id
-        WHERE c.released_at IS NULL AND t.id <> $1`,
+        WHERE c.released_at IS NULL AND t.id <> $1 AND ${notPageMarkerSql('c', 't')}`,
       [taskId]
     );
     // BV1.R53 (task 1422): module-disjointness is a HARD gate (not advisory) when
@@ -460,7 +472,10 @@ async function claimTask({ taskId, builderId, worktreeName, headSha, creatorSess
         console.log('[gds] graduation broadcast post-claim failed:', e && e.message);
       }
     }
-    return { ...insertClaim.rows[0], just_unlocked: justUnlocked, overlap_warning: overlapWarning, sibling_overlap_warning: siblingWarning };
+    // task 1004948: a gentle heads-up, never a refusal, when this task's files belong
+    // to a page an artist is updating. Read after the commit; a failed read is "none".
+    const pageNotice = await heldPagesForTouches(task.touches, client, { exceptTaskId: taskId });
+    return { ...insertClaim.rows[0], just_unlocked: justUnlocked, overlap_warning: overlapWarning, sibling_overlap_warning: siblingWarning, page_notice: pageNotice };
   } catch (err) {
     await client.query('ROLLBACK').catch(() => {});
     if (err && err.code === '23505') {
@@ -658,6 +673,12 @@ async function claimTasksBatch({ taskIds, builderId, worktreePrefix, creatorSess
       failures.push({ task_id: f.task_id, reason: code, ...rest });
     }
 
+    // task 1004950: the SAME extracted server-access gate as claimTask.
+    for (const f of await taskNeedsFailures({ client, tasks: taskRows, builderId })) {
+      const { code, ...rest } = f.refusal;
+      failures.push({ task_id: f.task_id, reason: code, ...rest });
+    }
+
     // Per-task dependency check (ADR 0015, generalized task 1516). An EXTERNAL dep
     // (not in this batch) must already be done; a batch-internal dep isn't done yet
     // at claim time but doesn't block — the batch is worked serially. "Internal"
@@ -724,7 +745,8 @@ async function claimTasksBatch({ taskIds, builderId, worktreePrefix, creatorSess
          FROM claims c
          JOIN tasks t ON t.id = c.task_id
         WHERE c.released_at IS NULL
-          AND t.id <> ALL($1::bigint[])`,
+          AND t.id <> ALL($1::bigint[])
+          AND ${notPageMarkerSql('c', 't')}`,
       [uniqIds]
     );
     for (const t of taskRows) {
@@ -966,7 +988,7 @@ async function validateClaimBatch({ taskIds, builderId }) {
   const { rows: activeClaims } = await pool.query(
     `SELECT c.id AS claim_id, t.title, t.touches, t.module_key
        FROM claims c JOIN tasks t ON t.id = c.task_id
-      WHERE c.released_at IS NULL AND t.id <> ALL($1::bigint[])`,
+      WHERE c.released_at IS NULL AND t.id <> ALL($1::bigint[]) AND ${notPageMarkerSql('c', 't')}`,
     [uniqIds]
   );
 
@@ -1014,6 +1036,12 @@ async function validateClaimBatch({ taskIds, builderId }) {
     push(f.task_id, { reason: code, ...rest });
   }
 
+  // task 1004950: server-access, kept in sync with claimTask + claimTasksBatch.
+  for (const f of await taskNeedsFailures({ client: pool, tasks: taskRows, builderId })) {
+    const { code, ...rest } = f.refusal;
+    push(f.task_id, { reason: code, ...rest });
+  }
+
   // Dependencies — external to the batch only (a batch-internal dep is fine;
   // the batch is worked serially, same rule as claimTasksBatch).
   const batchIdSet = new Set(uniqIds);