@bongos/core 1.23.22 → 1.24.2

package/modules/hall-ui/public/blockers-by-person.js

@@ -0,0 +1,158 @@
+// blockers-by-person.js — open blockers grouped UNDER THE PEOPLE they wait on (task 1004999).
+//
+// WHY. The Blockers page listed every open blocker under one heading, "Requires project
+// owner fix", whoever it actually waited on. A blocker has no assignee; who it waits on
+// is the seat its ask names (owner, a building's Lead, a board), and who sits in that
+// seat changes. The server resolves it at read time with the City's own routing
+// (GET /government/blockers/people), so this page and the City can never disagree about
+// whose a blocker is. This file only draws the answer.
+//
+// The viewer's own group comes first, marked "You". A blocker that resolves to nobody is
+// shown under "Nobody yet" — never dropped. A signed-out viewer, or one the read refuses,
+// sees no section at all: the queue below stays the page.
+//
+// UMD like blockers-lib.js: the pure `peopleHtml` is required by
+// tests/blockers_people.mjs; the mount runs only in a browser.
+(function (root, factory) {
+  var mod = factory();
+  if (typeof module !== 'undefined' && module.exports) module.exports = mod;
+  else root.OTBBlockersPeople = mod;
+}(typeof self !== 'undefined' ? self : this, function () {
+  'use strict';
+
+  function nameOf(p) {
+    return (p && (p.name || p.login)) || (p && p.id != null ? 'Builder ' + p.id : 'Someone');
+  }
+
+  // "as the owner" · "as the Planning Lead" · "as the owner, since Planning has no Lead".
+  function asWords(item) {
+    // task 1005000: only whoever holds an outside access can clear it — say so first.
+    if (item.needs) return item.fell_to_owner ? item.needs + ', and nobody is recorded holding it' : item.needs;
+    var as = item.as || 'their seat';
+    if (item.fell_to_owner && /^lead:([a-z]+)$/.test(String(item.asked || ''))) {
+      var b = String(item.asked).slice(5);
+      return 'as ' + as + ', since ' + b.charAt(0).toUpperCase() + b.slice(1) + ' has no Lead';
+    }
+    return 'as ' + as;
+  }
+
+  function rowHtml(item, o) {
+    var esc = o.esc;
+    var title = esc(item.title || ('Blocker ' + item.id));
+    var href = o.blockerHref ? o.blockerHref(item.id) : null;
+    var titleHtml = href
+      ? '<a class="ov-row__title" href="' + esc(href) + '">' + title + '</a>'
+      : '<span class="ov-row__title">' + title + '</span>';
+    var facts = [esc(asWords(item))];
+    if (item.opened_at) facts.push('filed ' + esc(o.fmtDate(item.opened_at)));
+    var q = item.question ? '<span class="ov-row__sub">' + esc(item.question) + '</span>' : '';
+    return '<li class="ov-row ov-row--dense"><div class="ov-row__main">' + titleHtml + q
+      + '<div class="ov-row__facts"><span class="ov-row__when">' + facts.join(' · ') + '</span></div></div></li>';
+  }
+
+  function groupHtml(name, n, note, items, o) {
+    return '<div class="ov-group">'
+      + '<div class="ov-group__head"><span class="ov-group__name">' + o.esc(name) + '</span>'
+      + '<span class="ov-group__n">' + n + '</span>'
+      + (note ? '<span class="ov-group__note">' + o.esc(note) + '</span>' : '')
+      + '</div><ul class="ov-rows">' + items.map(function (it) { return rowHtml(it, o); }).join('') + '</ul></div>';
+  }
+
+  // peopleHtml(data, { esc, fmtDate, viewerId, blockerHref }) → markup, or '' when there
+  // is nothing to show. `data` is GET /government/blockers/people.
+  function peopleHtml(data, o) {
+    if (!o || typeof o.esc !== 'function' || typeof o.fmtDate !== 'function') {
+      throw new TypeError('peopleHtml: opts.esc and opts.fmtDate are required');
+    }
+    if (!data || !data.available) return '';
+    var people = Array.isArray(data.people) ? data.people.slice() : [];
+    var nobody = Array.isArray(data.nobody) ? data.nobody : [];
+    if (!people.length && !nobody.length) return '';
+    var me = o.viewerId == null ? null : String(o.viewerId);
+    people.sort(function (a, b) { return (a.person.id === me ? 0 : 1) - (b.person.id === me ? 0 : 1); });
+    var html = people.map(function (g) {
+      var mine = g.person.id === me;
+      return groupHtml(mine ? 'You' : nameOf(g.person), g.count, mine ? 'waiting on you' : '', g.items, o);
+    }).join('');
+    if (nobody.length) html += groupHtml('Nobody yet', nobody.length, 'no one sits in the seat it waits on', nobody, o);
+    return html;
+  }
+
+  // mineHtml(data, opts) → the viewer's own rows, for Collab's "waiting on you" block.
+  // data is GET /government/blockers/for-me ({ available, count, items }).
+  function mineHtml(data, o) {
+    if (!o || typeof o.esc !== 'function' || typeof o.fmtDate !== 'function') {
+      throw new TypeError('mineHtml: opts.esc and opts.fmtDate are required');
+    }
+    if (!data || !data.available || !Array.isArray(data.items) || !data.items.length) return '';
+    return data.items.map(function (it) { return rowHtml(it, o); }).join('');
+  }
+
+  var blockerHref = function (id) { return '#/blocker/' + encodeURIComponent(id); };
+
+  // Collab's block: only what waits on the viewer. Hidden when nothing does.
+  function mountMine(doc, kit) {
+    var section = doc.getElementById('cb-blockers-scroll');
+    var list = doc.getElementById('cb-blockers');
+    if (!section || !list) return;
+    fetch('/api/bongos/government/blockers/for-me', { credentials: 'same-origin' })
+      .then(function (r) { return r.ok ? r.json() : null; })
+      .catch(function () { return null; })
+      .then(function (data) {
+        var html = mineHtml(data, { esc: kit.esc, fmtDate: kit.fmtAbsDate, blockerHref: blockerHref });
+        if (!html) return;
+        list.innerHTML = html;
+        var n = doc.getElementById('cb-blockers-n');
+        if (n) n.textContent = String(data.count);
+        section.hidden = false;
+      });
+  }
+
+  // The browser half: fetch, draw, reveal. Any failure leaves the section hidden.
+  // Collab loads dom-utils but not the kit, so the two helpers fall back to the shell's.
+  function helpers() {
+    var kit = window.OTBKit || {};
+    var esc = kit.esc || (window.OTB && window.OTB.escapeHtml);
+    var fmtDate = kit.fmtAbsDate || function (iso) {
+      var d = new Date(iso);
+      return isNaN(d.getTime()) ? '' : d.toLocaleDateString(undefined, { day: 'numeric', month: 'short', year: 'numeric' });
+    };
+    return typeof esc === 'function' ? { esc: esc, fmtAbsDate: fmtDate } : null;
+  }
+
+  function mount() {
+    var doc = typeof document !== 'undefined' ? document : null;
+    var h = doc ? helpers() : null;
+    if (!h) return;
+    mountMine(doc, h);
+    var section = doc.getElementById('blockers-people-scroll');
+    var body = doc.getElementById('blockers-people-body');
+    var kit = h;
+    if (!section || !body) return;
+    var get = function (path) {
+      return fetch('/api/bongos' + path, { credentials: 'same-origin' })
+        .then(function (r) { return r.ok ? r.json() : null; })
+        .catch(function () { return null; });
+    };
+    Promise.all([get('/government/blockers/people'), get('/me')]).then(function (res) {
+      var data = res[0];
+      var me = res[1] && (res[1].builder || res[1]);
+      var html = peopleHtml(data, {
+        esc: kit.esc,
+        fmtDate: kit.fmtAbsDate,
+        viewerId: me && me.id != null ? me.id : null,
+        blockerHref: blockerHref,
+      });
+      if (!html) return;
+      body.innerHTML = html;
+      section.hidden = false;
+    });
+  }
+
+  if (typeof window !== 'undefined' && typeof document !== 'undefined') {
+    if (document.readyState === 'loading') document.addEventListener('DOMContentLoaded', mount);
+    else mount();
+  }
+
+  return { peopleHtml: peopleHtml, mineHtml: mineHtml, asWords: asWords };
+}));

package/modules/hall-ui/public/blockers-lib.js

@@ -101,5 +101,19 @@
     };
   }
 
-  return { blockingLine: blockingLine, blockerFacts: blockerFacts };
+  // Which human signal a blocker wears (task 1004946, owner 2026-10-28): every
+  // blocker waits on a person, but some ask them to DO a thing and some to
+  // CHOOSE. The stored ask (government_asks, on GET /blockers as `ask`) says
+  // which: two or more REAL options is a choice, a HUMAN DECISION. An option
+  // that only defers ("Not yet", "later") is no choice at all, so "Do it / Not
+  // yet" is a HUMAN TASK, as is a blocker with no ask. One rule for the Blockers
+  // page and Home's slice, so the two never disagree.
+  var DEFER_KEYS = /^(later|not[-_ ]?yet|notnow|not[-_ ]now|wait|defer|skip|no)$/i;
+  function humanKind(b) {
+    var opts = b && b.ask && Array.isArray(b.ask.options) ? b.ask.options : [];
+    var real = opts.filter(function (o) { return o && !DEFER_KEYS.test(String(o.key || '')); });
+    return real.length >= 2 ? 'decision' : 'task';
+  }
+
+  return { blockingLine: blockingLine, blockerFacts: blockerFacts, humanKind: humanKind };
 }));

package/modules/hall-ui/public/blockers.html

@@ -33,6 +33,13 @@
              bar. task 1003456 added the write half: filing (any signed-in
              builder) below the heading, and per-row Resolve/Link (blocker.review
              — metic+archon) rendered by blockers.js when the viewer holds it. -->
+        <!-- task 1004999: the same open blockers, grouped under the people they wait
+             on (GET /government/blockers/people — the City's routing). Hidden until
+             that read answers; the queue below stays the page without it. -->
+        <section class="scroll" id="blockers-people-scroll" aria-labelledby="blockers-people-h" hidden>
+          <h2 id="blockers-people-h" class="scroll__h">Waiting on people</h2>
+          <div id="blockers-people-body"></div>
+        </section>
         <section class="scroll" id="blockers-scroll" aria-labelledby="blockers-h">
           <h2 id="blockers-h" class="scroll__h">Requires project owner fix<span class="count-pill" id="blockers-count" hidden></span></h2>
           <div id="blockers-file-area"></div>
@@ -67,5 +74,6 @@
 <script src="/builders/blockers-lib.js"></script>
 <script src="/builders/hall-ask.js"></script>
 <script src="/builders/blockers.js"></script>
+<script src="/builders/blockers-by-person.js"></script>
 </body>
 </html>

package/modules/hall-ui/public/blockers.js

@@ -147,7 +147,7 @@
         // bookkeeping, so it stays a plain control beside the facts (owner
         // 2026-10-23: a card only where the page asks the reader to decide).
         return window.OTBAsk.html({
-          attrs: { 'data-id': id },
+          attrs: { 'data-id': id }, human: lib.humanKind(b),
           q: b.title || ('Blocker ' + id), qHref: blockerHref(id),
           saidHtml: facts.noteHtml + '<div class="ov-row__facts blockers-facts">' + facts.factsHtml
             + '<button type="button" class="btn-ghost blockers-facts__link" data-link-open="' + kit.esc(id) + '">Link a task</button></div>',

package/modules/hall-ui/public/claim-action.js

@@ -89,6 +89,9 @@
       // a private goal, so this must not invent one either.
       case 'GOAL_MEMBERSHIP_REQUIRED':
         return errMessage(data) || 'That task belongs to a goal you are not a member of.';
+      // task 1004950: the task needs hands on the live server.
+      case 'NEEDS_SERVER_ACCESS':
+        return errMessage(data) || 'This task needs server access, which you do not have yet, so pick another task or ask the project owner for it.';
       case 'DEPS_NOT_SHIPPED':
         return 'That task waits on unshipped dependencies. Pick another for now.';
       // 10. the module-level sibling of TOUCHES_CONFLICT, and a REFUSAL where

package/modules/hall-ui/public/collab.html

@@ -63,6 +63,17 @@
             <button class="cb-ask__copy cb-copy-all" id="cb-for-me-copy" type="button" hidden></button>
           </section>
 
+          <!-- task 1004999: open blockers whose seat resolves to this viewer (as the
+               owner, a building's Lead, or a board member) — GET
+               /government/blockers/for-me, drawn by blockers-by-person.js. Hidden
+               until something waits on them. -->
+          <section class="scroll cb-block" id="cb-blockers-scroll" aria-labelledby="cb-blockers-h" hidden>
+            <div class="cb-block__head">
+              <h2 class="scroll__h" id="cb-blockers-h">Blockers waiting on you <span class="cb-block__n" id="cb-blockers-n"></span></h2>
+            </div>
+            <ul class="ov-rows" id="cb-blockers"></ul>
+          </section>
+
           <section class="scroll cb-block" aria-labelledby="cb-mine-h">
             <div class="cb-block__head">
               <h2 class="scroll__h" id="cb-mine-h">Your asks <span class="cb-block__n" id="cb-mine-n"></span></h2>
@@ -155,5 +166,6 @@
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/collab-lib.js?v=2026-09-24-archive"></script>
 <script src="/builders/collab.js?v=2026-09-24-archive"></script>
+<script src="/builders/blockers-by-person.js"></script>
 </body>
 </html>

package/modules/hall-ui/public/craft-mode.js

@@ -750,7 +750,10 @@
     // one) opens it on arrival, in any mode.
     var note = /[?&]note=([1-9]\d{0,17})(?:&|$)/.exec((window.location && window.location.search) || '');
     var notes = toolFor('palette');
-    if (note && notes) loadTool(notes).then(function (api) { api.openNote(note[1]); }, function () { /* the page still works */ });
+    // The Studio reads the doc as a full page of its own (studio.js), so the
+    // side sheet stays shut there.
+    var onStudio = document.body && document.body.getAttribute('data-page') === 'studio';
+    if (note && notes && !onStudio) loadTool(notes).then(function (api) { api.openNote(note[1]); }, function () { /* the page still works */ });
   }
   // Once a signed-in builder is known, ask — unless this session already has a
   // mode, already saw the picker, or the page opts out.

package/modules/hall-ui/public/criterion-uat-ui.js

@@ -62,7 +62,10 @@
     const pill = (s === 'open' || s === 'legacy_satisfied') ? ''
       : `<span class="crit-state crit-state--${esc(s)}">${esc(STATE_LABELS[s])}</span>`;
     const tag = c && c.backend_only ? '<span class="crit-tag" title="No screen to record: this is signed off without a video">Backend-only</span>' : '';
-    return pill + tag;
+    // task 1004922: a criterion waiting on a person to try it is a HUMAN TASK.
+    const ask = typeof window !== 'undefined' && window.OTBAsk;
+    const human = s === 'awaiting_uat' && ask ? ask.human('task') : '';
+    return human + pill + tag;
   }
 
   // The trailing action. canReview = the viewer may sign off (Metic+; the server

package/modules/hall-ui/public/drachmae.html

@@ -4,7 +4,7 @@
   <meta charset="utf-8">
   <meta name="viewport" content="width=device-width, initial-scale=1">
   <title>Drachmae &amp; karma — {{worldName}}</title>
-  <meta name="description" content="How you get paid and how you earn trust: the cost-plus {{currency}} reward, the kind multipliers, the monthly budget cap, and how karma differs from {{currency}}.">
+  <meta name="description" content="How your work is counted and how you earn trust: the cost-plus {{currency}} reward, the kind multipliers, the monthly budget cap, and how karma differs from {{currency}}.">
   <link rel="icon" href="data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'><text x='16' y='24' font-size='24' text-anchor='middle' font-family='sans-serif'>◈</text></svg>">
   <link rel="preconnect" href="https://fonts.googleapis.com">
   <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>

package/modules/hall-ui/public/goal-inbox.js

@@ -522,7 +522,7 @@
     });
     // Was a link only; now it answers in place: the overlay is where it resolves.
     return window.OTBAsk.html({
-      cls: 'ginbox__item',
+      cls: 'ginbox__item', human: lib.humanKind(b),
       where: 'Waiting on the project owner',
       q: b.title || `Blocker ${b.id}`, qHref: `#/blocker/${encodeURIComponent(b.id)}`,
       saidHtml: facts.factsHtml + facts.noteHtml,

package/modules/hall-ui/public/goals-render.js

@@ -336,6 +336,8 @@
     const kindTag = window.OTB.kindIsUnset(t.kind)
       ? ''
       : `<span class="task__tag">${escapeHtml(t.kind)}</span>`;
+    // task 1004950 — what the task needs beyond the build loop, said in words.
+    const needsTags = (Array.isArray(t.needs) ? t.needs : []).map((n) => `<span class="task__tag task__tag--needs">${n === 'owner' ? 'needs the project owner' : n === 'server' ? 'needs server access' : escapeHtml(n)}</span>`).join('');
     const newcomerTag = t.newcomer_friendly ? '<span class="task__tag task__tag--newcomer">newcomer</span>' : '';
     const rankTag = rankTagHtml(t.requires_rank);
     const touches = Array.isArray(t.touches) ? t.touches : [];
@@ -387,6 +389,7 @@
             ${kindTag}
             ${disciplineTag}
             ${newcomerTag}
+            ${needsTags}
             ${rankTag}
             ${t.priority ? `<span class="task__tag">${escapeHtml(t.priority)}</span>` : ''}
             <span>${minutesText}</span>
@@ -924,6 +927,7 @@
     // task 1953 — my own pending request (any viewer) + the goal's pending queue
     // (managers only); async, re-renders Actions + the pending panel on arrival.
     loadGoalMembership(g.id, canManage);
+    if (window.OTBNotes) window.OTBNotes.mount($('#goal-notes'), { goal_id: g.id }); // task 1004745
     void sat; void crit; // now read inside renderCompletion()
   }
   function renderActions(g, { joined, canManage }) {

package/modules/hall-ui/public/goals.html

@@ -17,6 +17,7 @@
        styles now live in style.css's hall-kit section. -->
   <link rel="stylesheet" href="/builders/hall-ask.css">
   <link rel="stylesheet" href="/builders/goals.css">
+  <link rel="stylesheet" href="/builders/notes-panel.css">
 </head>
 <body data-page="goals" data-page-title="Goals">
 
@@ -130,6 +131,12 @@
             </div>
           </div>
 
+          <!-- task 1004745: notes on the goal, grouped by purpose (notes-panel.js). -->
+          <div class="scroll goal-notes">
+            <h2 class="scroll__h">Notes</h2>
+            <div id="goal-notes"></div>
+          </div>
+
           <div class="scroll" style="margin-top:20px">
             <div class="goal-work__head">
               <h2 class="scroll__h">Tasks</h2>
@@ -271,6 +278,7 @@
 <script src="/builders/goal-author-lib.js"></script>
 <script src="/builders/goal-author.js"></script>
 <script src="/builders/hall-ask.js"></script>
+<script src="/builders/notes-panel.js"></script>
 <script src="/builders/goals-render.js?v=2026-09-30-uat2"></script>
 <script src="/builders/goals-page.js?v=2026-09-30-uat2"></script>
 </body>

package/modules/hall-ui/public/gov-living.js

@@ -344,8 +344,12 @@
     const format = askFormat(human);
     // the server's route (task 1004705), when the docket was routed
     const served = ctx.routed ? obj(base.route) : null;
+    // task 1004999: the server names who sits in the seat now, so a card can say
+    // "waits on Lars, the owner" and not only "waits on the owner".
+    const servedPeople = served ? arr(served.people).filter((p) => p && p.id != null)
+      .map((p) => ({ id: str(p.id), login: str(p.login), name: str(p.name || p.login) })) : [];
     const route = served
-      ? { seat: str(served.seat), label: str(served.label), person: null, fell_to_owner: !!served.fell_to_owner, members: [] }
+      ? { seat: str(served.seat), label: str(served.label), person: servedPeople[0] || null, people: servedPeople, fell_to_owner: !!served.fell_to_owner, members: servedPeople.map((p) => p.id) }
       : ctx.resolveSeat(human && human.waits_on, base.building);
     const nobody = served && obj(served.nobody) ? { why: str(served.nobody.why), outcome: served.nobody.outcome == null ? null : str(served.nobody.outcome) } : null;
     // an ask nobody answers has done what its "if nobody answers" line says
@@ -375,7 +379,7 @@
       human: human || null,
       format,
       shown: format.ok ? human : null,
-      waits_on: { seat: route.seat, label: route.label, person: route.person || null, fell_to_owner: !!route.fell_to_owner, real: !!served },
+      waits_on: { seat: route.seat, label: route.label, person: route.person || null, people: route.people || (route.person ? [route.person] : []), fell_to_owner: !!route.fell_to_owner, real: !!served },
       needs_you: needsYou,
       nobody,
       // the card's words are the agent's own stored ask (task 1004703)

package/modules/hall-ui/public/government-access.js

@@ -0,0 +1,108 @@
+// government-access.js — Outside access, on the Government page's Permissions tab
+// (task 1005000).
+//
+// WHY. Some blockers can only be cleared by whoever holds access OUTSIDE Bongos: the
+// GitHub repository's admin, the server, DNS, hosting, package publishing, payments.
+// The owner records who holds each here (GET/POST/DELETE /government/access), and an
+// ask can then wait on `access:<key>` — it reaches that person, and reads on the
+// Blockers page as "needs repo-owner access". An access nobody is recorded holding
+// falls to the owner, like every unheld seat.
+//
+// A RECORD OF WHO TO ASK, NEVER A PERMISSION: holding one here unlocks nothing in
+// Bongos, and no credential is stored — the page says so. The server gates the
+// writes on government.manage; the Permissions tab is already sealed for everyone
+// else (government.js sealRanksPanel), so this file draws no gate of its own.
+//
+// UMD so tests/access_holders.mjs can run `accessHtml` without a browser.
+(function (root, factory) {
+  var mod = factory();
+  if (typeof module !== 'undefined' && module.exports) module.exports = mod;
+  else root.OTBGovAccess = mod;
+}(typeof self !== 'undefined' ? self : this, function () {
+  'use strict';
+
+  // accessHtml(list, esc) → one row per access: its name, what it is, who holds it
+  // (each with a Remove control), or that it falls to the owner.
+  function accessHtml(list, esc) {
+    if (!Array.isArray(list) || !list.length) return '';
+    return '<ul class="ov-rows">' + list.map(function (a) {
+      var holders = Array.isArray(a.holders) ? a.holders : [];
+      var who = holders.length
+        ? holders.map(function (h) {
+          return '<span class="ov-fact">' + esc(h.name || h.login || ('builder ' + h.id))
+            + ' <button type="button" class="btn-ghost" data-act="revoke" data-key="' + esc(a.key) + '" data-id="' + esc(h.id) + '">Remove</button></span>';
+        }).join('')
+        : '<span class="ov-fact">Nobody recorded — it falls to the owner</span>';
+      return '<li class="ov-row"><div class="ov-row__main">'
+        + '<span class="ov-row__title">' + esc(a.title || a.name) + '</span>'
+        + '<span class="ov-row__sub">' + esc(a.what) + '</span>'
+        + '<div class="ov-row__facts">' + who + '<span class="ov-mono">' + esc(a.seat) + '</span></div>'
+        + '</div></li>';
+    }).join('') + '</ul>';
+  }
+
+  // The Record form's picker: the same display name the list shows.
+  function optionsHtml(list, esc) {
+    return (Array.isArray(list) ? list : []).map(function (a) { return '<option value="' + esc(a.key) + '">' + esc(a.title || a.name) + '</option>'; }).join('');
+  }
+
+  function mount() {
+    var doc = typeof document !== 'undefined' ? document : null;
+    var box = doc && doc.getElementById('gov-access');
+    var form = doc && doc.getElementById('gov-access-form');
+    var select = doc && doc.getElementById('gov-access-key');
+    var esc = window.OTB && window.OTB.escapeHtml;
+    if (!box || !form || !select || typeof esc !== 'function') return;
+    var toast = function (m) { if (window.OTB && window.OTB.toast) window.OTB.toast(m, { duration: 3200 }); };
+    var call = function (method, path, body) {
+      return fetch('/api/bongos' + path, {
+        method: method,
+        credentials: 'same-origin',
+        headers: body ? { 'Content-Type': 'application/json' } : {},
+        body: body ? JSON.stringify(body) : undefined,
+      }).then(function (r) {
+        return r.json().catch(function () { return {}; }).then(function (d) { return { ok: r.ok, status: r.status, data: d }; });
+      });
+    };
+    var said = function (r) { var e = r.data && r.data.error; return (e && e.message) || ('It did not save (' + r.status + ').'); };
+
+    function load() {
+      return call('GET', '/government/access').then(function (r) {
+        if (!r.ok || !r.data || !Array.isArray(r.data.access)) {
+          box.innerHTML = '<p class="ov-row__sub">Outside access could not be read just now.</p>';
+          return;
+        }
+        if (!select.options.length) {
+          select.innerHTML = optionsHtml(r.data.access, esc);
+        }
+        box.innerHTML = accessHtml(r.data.access, esc);
+      });
+    }
+
+    box.addEventListener('click', function (ev) {
+      var btn = ev.target.closest && ev.target.closest('[data-act=revoke]');
+      if (!btn) return;
+      btn.disabled = true;
+      call('DELETE', '/government/access/' + encodeURIComponent(btn.dataset.key) + '/holders/' + encodeURIComponent(btn.dataset.id))
+        .then(function (r) { if (!r.ok) { toast(said(r)); btn.disabled = false; return null; } return load(); });
+    });
+    form.addEventListener('submit', function (ev) {
+      ev.preventDefault();
+      var id = Number(doc.getElementById('gov-access-builder').value);
+      call('POST', '/government/access/' + encodeURIComponent(select.value) + '/holders', { builder_id: id })
+        .then(function (r) {
+          if (!r.ok) { toast(said(r)); return null; }
+          form.reset();
+          return load();
+        });
+    });
+    load();
+  }
+
+  if (typeof window !== 'undefined' && typeof document !== 'undefined') {
+    if (document.readyState === 'loading') document.addEventListener('DOMContentLoaded', mount);
+    else mount();
+  }
+
+  return { accessHtml: accessHtml, optionsHtml: optionsHtml };
+}));

package/modules/hall-ui/public/government.html

@@ -116,6 +116,26 @@
               <div id="gov-assignments"><span class="kit-skel"></span></div>
             </section>
 
+            <!-- task 1005000: who holds the keys OUTSIDE Bongos (GitHub admin, server, DNS,
+                 hosting, publishing, payments), so an ask can wait on access:<key>.
+                 Drawn by government-access.js. -->
+            <section class="scroll" aria-labelledby="gov-access-h">
+              <h2 class="scroll__h" id="gov-access-h">Outside access</h2>
+              <p class="scroll__lede">Who holds the keys outside the project, so a blocker that needs one reaches them. This is a record of who to ask: it grants nothing here and stores no password or token.</p>
+              <form class="ov-form" id="gov-access-form" autocomplete="off">
+                <div class="ov-field ov-field--sm">
+                  <label class="ov-field__l" for="gov-access-builder">Builder id</label>
+                  <input id="gov-access-builder" type="number" min="1" placeholder="e.g. 95" required>
+                </div>
+                <div class="ov-field">
+                  <label class="ov-field__l" for="gov-access-key">Access</label>
+                  <select id="gov-access-key" required></select>
+                </div>
+                <button class="btn-accent" type="submit">Record</button>
+              </form>
+              <div id="gov-access"><span class="kit-skel"></span></div>
+            </section>
+
             <section class="scroll" aria-labelledby="gov-principals-h">
               <h2 class="scroll__h" id="gov-principals-h">Machine principals</h2>
               <p class="scroll__lede">Capabilities held by a machine identity, never by a person or a rank. Shown for completeness; nothing here can be granted.</p>
@@ -143,5 +163,6 @@
      BEFORE government.js, which destructures window.OTBBoardLib at IIFE entry. -->
 <script src="/builders/board-lib.js?v=2026-09-10-boardlib1"></script>
 <script src="/builders/government.js?v=2026-09-02-gov-rows"></script>
+<script src="/builders/government-access.js"></script>
 </body>
 </html>

package/modules/hall-ui/public/hall-ask.css

@@ -33,6 +33,11 @@ html[data-theme="dark"] body {
 .hask:last-child { margin-bottom: 0; }
 .hask__where { display: flex; align-items: center; gap: 8px; min-height: 24px; font-size: 13px; color: var(--ink-soft); min-width: 0; }
 .hask__dot { flex: none; width: 7px; height: 7px; border-radius: 50%; background: var(--accent); }
+/* the human signal (task 1004922): a person on the hall's "needs you" tint,
+   HUMAN TASK or HUMAN DECISION; also drawn bare beside an Awaiting UAT row */
+.hhuman { flex: none; display: inline-flex; align-items: center; gap: 7px; min-height: 28px; padding: 3px 12px 3px 8px; box-sizing: border-box; border-radius: 999px; background: var(--accent-tint); color: var(--accent-ink); font-family: var(--font-mono); font-size: 12.5px; font-weight: 700; letter-spacing: 0.07em; line-height: 1; white-space: nowrap; vertical-align: middle; }
+.hhuman__i { flex: none; width: 20px; height: 20px; }
+.hask__human { display: flex; align-items: center; min-height: 24px; }
 .hask__where-t { min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
 .hask__q { margin: 0; font-size: 21px; font-weight: 300; letter-spacing: -0.02em; line-height: 1.2; overflow-wrap: anywhere; }
 .hask__q a { color: inherit; text-decoration: none; }

package/modules/hall-ui/public/hall-ask.js

@@ -10,11 +10,20 @@
 // path: switching a row to the card changes how it looks, never what it calls.
 // An option with `href` is a link (an act that needs its own panel).
 //
-//   OTBAsk.html({ where, q, qHref, said, saidHtml, tag, cls, attrs,
+//   OTBAsk.html({ where, q, qHref, said, saidHtml, tag, cls, attrs, human,
 //                 row: bool, opts: [{ label, result, rec, href, attrs }] })
 //
 // Every string is escaped here; `saidHtml` is the one pre-built slot, for a
 // caller whose facts are already escaped markup (blockerFacts).
+//
+// THE HUMAN SIGNAL (task 1004922, owner 2026-10-28). Everything that waits on
+// a person says so with a person: HUMAN DECISION (a person at a fork) when
+// they must choose, HUMAN TASK (a person with a hand up) when they must do
+// something only a person can do. Every card is a decision unless the caller
+// passes `human: 'task'` (a blocker's owner fix); `human: false` drops it.
+// `OTBAsk.human(kind)` is the same badge for a surface that is not a card
+// (the Awaiting UAT row). The chat half of the rule — `🙋 **HUMAN TASK:**` /
+// `🔀 **HUMAN DECISION:**` — lives in docs/voice.md and the Conductor.
 (function () {
   // The shared escaper: window.OTB in the page; under Node (this file is also require()d as a
   // CommonJS lib — see its module.exports and its tests) dom-utils.js's own export (task 1004876).
@@ -32,19 +41,46 @@
       : `<button class="${cls}" type="button"${attrsOf(o.attrs)}>${inner}</button>`;
   }
 
+  // 18px grid, 1.5 stroke, currentColor — the rail's glyph recipe.
+  const HUMAN = {
+    task: {
+      label: 'HUMAN TASK',
+      title: 'A person needs to do this',
+      svg: '<circle cx="8" cy="5" r="2.2"/><path d="M3.5 16v-2.5a4.5 4.5 0 0 1 9 0V16"/><path d="M12.5 9.5 14.5 3"/>',
+    },
+    decision: {
+      label: 'HUMAN DECISION',
+      title: 'A person needs to decide this',
+      svg: '<circle cx="7" cy="6" r="2.2"/><path d="M2.5 16v-2a4.5 4.5 0 0 1 9 0v2"/><path d="M13 2.5v3M13 5.5l-2 2.2M13 5.5l2 2.2"/>',
+    },
+  };
+
+  function human(kind) {
+    const h = HUMAN[kind];
+    if (!h) return '';
+    return `<span class="hhuman hhuman--${kind}" title="${h.title}">`
+      + `<svg class="hhuman__i" viewBox="0 0 18 18" width="14" height="14" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true">${h.svg}</svg>`
+      + `<span class="hhuman__t">${h.label}</span></span>`;
+  }
+
   function html(c) {
     const tag = c.tag || 'li';
     const opts = (c.opts || []).filter(Boolean);
     const q = c.qHref ? `<a href="${esc(c.qHref)}">${esc(c.q)}</a>` : esc(c.q);
+    const badge = human(c.human === undefined ? 'decision' : c.human);
+    const where = c.where ? `<span class="hask__where-t">${esc(c.where)}</span>` : '';
     return `<${tag} class="hask${c.cls ? ' ' + esc(c.cls) : ''}"${attrsOf(c.attrs)}>`
-      + (c.where ? `<div class="hask__where"><span class="hask__dot" aria-hidden="true"></span><span class="hask__where-t">${esc(c.where)}</span></div>` : '')
+      // With a where line the badge leads it; without one (the Blockers page
+      // dropped its repeated eyebrow) the badge stands on a line of its own.
+      + (where ? `<div class="hask__where">${badge || '<span class="hask__dot" aria-hidden="true"></span>'}${where}</div>`
+        : (badge ? `<div class="hask__human">${badge}</div>` : ''))
       + `<h4 class="hask__q">${q}</h4>`
       + (c.saidHtml ? `<div class="hask__said">${c.saidHtml}</div>` : (c.said ? `<p class="hask__said">${esc(c.said)}</p>` : ''))
       + (opts.length ? `<div class="hask__opts${c.row ? ' hask__opts--row' : ''}">${opts.map(optHtml).join('')}</div>` : '')
       + `</${tag}>`;
   }
 
-  const api = { html, esc };
+  const api = { html, esc, human };
   if (typeof window !== 'undefined') window.OTBAsk = api;
   if (typeof module !== 'undefined' && module.exports) module.exports = api;
 })();