@bongos/core 1.24.36 → 1.24.37

package/tests/hall_money_page.mjs

@@ -0,0 +1,272 @@
+// tests/hall_money_page.mjs — the owner's ONE money page (task 1005047, owner
+// decision 2026-11-03, idea 1001312).
+//
+// What the project spent and paid out was drawn on three pages: Project settings
+// ("Where the money went"), the Primer ("The treasury, so far", from the retired
+// Economy page) and /fleet (what each hosted project costs). They are three sections
+// of /money now. This file holds what makes that true and keeps it true:
+//
+//   * THE PAGE DRAWS ALL THREE, each only when its own read answers. money.js is
+//     RUN in a vm against the hall-preview fixtures: a section whose read refuses
+//     (a 403, or a hall without the provisioning module) stays hidden, and a page
+//     where nothing answers says so in one line instead of loading forever.
+//   * NO MONEY FIGURE IS DRAWN ON TWO HALL PAGES. Project settings and the Primer
+//     keep their knobs and their prose, read none of the three feeds, and link here.
+//   * OLD URLS LAND ON THE RIGHT SECTION. /fleet 302s to /money#hosting through the
+//     real middleware, and /money sits behind the government
+//     page floor.
+//
+// The treasury cases moved here from tests/hall_reading_room.mjs, and the fleet
+// page's wiring cases from tests/fleet_cost_view.mjs, with the code they test.
+
+import { test } from 'node:test';
+import assert from 'node:assert/strict';
+import fs from 'node:fs';
+import http from 'node:http';
+import path from 'node:path';
+import vm from 'node:vm';
+import { createRequire } from 'node:module';
+import { fileURLToPath } from 'node:url';
+import { realOTB } from './helpers.mjs';
+
+const require = createRequire(import.meta.url);
+const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
+const HALL = path.join(ROOT, 'modules', 'hall-ui', 'public');
+const read = (f) => fs.readFileSync(path.join(HALL, f), 'utf8');
+const fixture = (name) => JSON.parse(fs.readFileSync(path.join(ROOT, 'scripts', 'hall-preview', 'fixtures', `${name}.json`), 'utf8'));
+
+const moneyHtml = read('money.html');
+const moneyJs = read('money.js');
+
+const OUTFLOW = '/api/bongos/project-account/outflow';
+const CHECKS = '/api/bongos/project-account/ledger-checks?limit=1';
+const TREASURY = '/api/bongos/public/cost-summary';
+const LEDGER = '/api/bongos/provisioning/fleet/cost-ledger';
+
+const costSummaryFixture = JSON.parse(
+  fs.readFileSync(path.join(ROOT, 'modules', 'ui-design', 'kit', 'fixtures', 'cost-summary.json'), 'utf8'),
+);
+
+// Just enough of an element for money.js: it writes a body's innerHTML and a
+// section's `hidden`, and asks a section to scroll into view.
+function fakeEl(id) {
+  return { id, hidden: true, innerHTML: '', scrolled: false, scrollIntoView() { this.scrolled = true; } };
+}
+
+// money.js in a vm. `responses` maps a URL to a payload (200), a number (that
+// status, no body) or an Error (the request threw). `page` boots it as the page.
+async function loadMoney({ responses = {}, page = false, hash = '', kit = true, branding = { currency: { label: 'drachmae' } } } = {}) {
+  const els = {};
+  for (const id of ['payouts', 'payouts-body', 'the-treasury', 'the-treasury-body', 'hosting', 'hosting-body', 'money-empty']) els[id] = fakeEl(id);
+  const warnings = [];
+  const requests = [];
+  const window = {
+    OTB: realOTB(),
+    __BRANDING__: branding,
+    location: { hash },
+    BongosClient: {
+      createClient: () => ({
+        request: async (method, url) => {
+          requests.push(url);
+          const r = responses[url];
+          if (r instanceof Error) throw r;
+          if (r === undefined) return { ok: false, status: 404, data: null };
+          if (typeof r === 'number') return { ok: false, status: r, data: null };
+          return { ok: true, status: 200, data: r };
+        },
+      }),
+    },
+  };
+  if (kit) {
+    const kitPath = path.join(HALL, 'hall-kit.js');
+    window.OTBKit = await import(`file://${kitPath.replace(/\\/g, '/')}`).then((m) => m.default);
+  }
+  const sandbox = { window, console: { warn: (...a) => warnings.push(a.join(' ')) } };
+  vm.createContext(sandbox);
+  // the hosting section draws through the real fleet-costs.js, as the page loads it
+  vm.runInContext(read('fleet-costs.js'), sandbox, { filename: 'fleet-costs.js' });
+  sandbox.document = page
+    ? { readyState: 'complete', getElementById: (id) => els[id] || null, addEventListener() {} }
+    : { readyState: 'complete', getElementById: () => null, addEventListener() {} };
+  vm.runInContext(moneyJs, sandbox, { filename: 'money.js' });
+  return { money: window.OTBMoney, els, warnings, requests };
+}
+
+const ALL = { [OUTFLOW]: fixture('project-account__outflow'), [TREASURY]: costSummaryFixture, [LEDGER]: fixture('provisioning__fleet__cost-ledger') };
+
+// ---- 1. one page, three sections, each on its own read ------------------------
+
+test('RUN: an owner finds spend and payouts, the treasury and the hosting bills on one page', async () => {
+  const t = await loadMoney({ responses: ALL, page: true });
+  await t.money.ready;
+  for (const id of ['payouts', 'the-treasury', 'hosting']) assert.equal(t.els[id].hidden, false, `#${id} is shown`);
+  assert.equal(t.els['money-empty'].hidden, true);
+  assert.match(t.els['payouts-body'].innerHTML, /Owed but not paid/);
+  assert.match(t.els['payouts-body'].innerHTML, /Money out, by month/);
+  assert.match(t.els['the-treasury-body'].innerHTML, /id="treasury-spend"/);
+  assert.match(t.els['hosting-body'].innerHTML, /example-project/);
+  assert.deepEqual([...t.requests].sort(), [CHECKS, LEDGER, OUTFLOW, TREASURY].sort(), 'the three feeds the three pages read, and nothing new');
+});
+
+test('RUN: a section whose read refuses stays hidden — never an empty panel', async () => {
+  // payout.approve refused, and no provisioning module (its route is not mounted)
+  const t = await loadMoney({ responses: { [OUTFLOW]: 403, [TREASURY]: costSummaryFixture, [LEDGER]: 404 }, page: true });
+  await t.money.ready;
+  assert.equal(t.els.payouts.hidden, true);
+  assert.equal(t.els.hosting.hidden, true, 'the hosting section shows only where the provisioning module answers, as /fleet did');
+  assert.equal(t.els['the-treasury'].hidden, false);
+  assert.ok(!t.requests.includes(CHECKS), 'no ledger check is read for a reader the outflow refused');
+});
+
+test('RUN: a page where nothing answers says so in one line instead of loading forever', async () => {
+  for (const responses of [{}, { [OUTFLOW]: new Error('down'), [TREASURY]: { daily: [], daily_credits: [] }, [LEDGER]: 403 }]) {
+    const t = await loadMoney({ responses, page: true });
+    await t.money.ready;
+    assert.equal(t.els['money-empty'].hidden, false);
+    for (const id of ['payouts', 'the-treasury', 'hosting']) assert.equal(t.els[id].hidden, true);
+  }
+});
+
+test('RUN: an old /fleet link lands on the hosting section once it is drawn', async () => {
+  const t = await loadMoney({ responses: ALL, page: true, hash: '#hosting' });
+  await t.money.ready;
+  assert.equal(t.els.hosting.scrolled, true);
+  const none = await loadMoney({ responses: {}, page: true, hash: '#hosting' });
+  await none.money.ready;
+  assert.equal(none.els.hosting.scrolled, false, 'a hidden section is not scrolled to');
+});
+
+test('the page waits for its sections: a Loading… line until one is shown', () => {
+  assert.match(moneyHtml, /<p class="hall-loading hall-loading--page hall-loading--wait" role="status">Loading…<\/p>/);
+  for (const id of ['payouts', 'the-treasury', 'hosting', 'money-empty']) {
+    assert.match(moneyHtml, new RegExp(`<section class="scroll" id="${id}" [^>]*hidden>`), `#${id} starts hidden`);
+  }
+});
+
+test('the page loads the kit and the hosting builders before its own script', () => {
+  const loaded = [...moneyHtml.matchAll(/<script[^>]+src="([^"?]+)/g)].map((m) => m[1].split('/').pop());
+  const at = (f) => loaded.indexOf(f);
+  assert.ok(at('hall-kit.js') > -1 && at('fleet-costs.js') > -1 && at('money.js') > -1);
+  assert.ok(at('hall-kit.js') < at('money.js') && at('fleet-costs.js') < at('money.js'));
+  assert.match(moneyHtml, /project-settings\.css/, 'the payout figures keep their sheet');
+});
+
+// ---- 2. the payouts section (moved from project-settings.js) --------------------
+
+test('RUN: the payouts lead with what is left after what is owed', async () => {
+  const { money } = await loadMoney();
+  const html = money.payoutsHtml(fixture('project-account__outflow'), null);
+  for (const label of ['Balance', 'Owed but not paid', 'Approved, not started', 'Left after all of that']) {
+    assert.ok(html.includes(`<span class="ps-money__label">${label}</span>`), label);
+  }
+  assert.equal(money.payoutsHtml(null, null), '');
+  assert.equal(money.payoutsHtml({ balance: null }, null), '');
+  assert.equal(money.lastTryWords({ last_outcome: 'held', last_reason: 'no_processor' }), 'Waiting — no payment processor connected yet');
+  assert.equal(money.lastTryWords({ last_outcome: 'failed', last_reason: 'some_code' }), 'Did not go through', 'an unknown code is left out, never shown as a slug');
+});
+
+// ---- 3. the treasury (moved from primer-live.js) -------------------------------
+
+test('RUN: the treasury draws from the payload, and its line ends on the total the prose states', async () => {
+  const { money } = await loadMoney();
+  const html = money.treasuryHtml(costSummaryFixture);
+  const usd = `$${Number(costSummaryFixture.total_usd).toLocaleString(undefined, { maximumFractionDigits: 0 })}`;
+  assert.ok(html.includes(`<strong>${usd}</strong>`), 'the spend total is stated');
+  assert.match(html, /id="treasury-spend"/);
+  assert.match(html, /id="treasury-earned"/);
+  assert.match(html, /Drachmae awarded, cumulative/, 'the currency word is the branding pack\'s');
+  assert.match(html, /<h3 class="ps-money__h" id="treasury-by-category">Spent, by kind<\/h3>/, 'under the section\'s h2, named apart from "Where the money went"');
+  assert.doesNotMatch(html, /NaN|Infinity/, 'a NaN in a path renders as an invisible chart with no error anywhere');
+  assert.doesNotMatch(html, /tabindex="0"/, 'no focus stop: nothing here wires a readout');
+  assert.doesNotMatch(html, /&amp;amp;|&amp;#/, 'nothing is escaped twice');
+});
+
+test('RUN: a treasury that holds nothing yet, or no chart kit, draws nothing', async () => {
+  const { money } = await loadMoney();
+  assert.equal(money.treasuryHtml(null), '');
+  assert.equal(money.treasuryHtml({ daily: [], daily_credits: [] }), '');
+  const noKit = await loadMoney({ responses: { [TREASURY]: costSummaryFixture }, page: true, kit: false });
+  await noKit.money.ready;
+  assert.equal(noKit.els['the-treasury'].hidden, true, 'without the chart kit there is nothing honest to draw');
+  assert.match(noKit.warnings.join('\n'), /OTBKit missing/);
+});
+
+test('the treasury reads the endpoint the status page draws, and draws only through the kit', () => {
+  assert.match(moneyJs, /TREASURY_URL = `\$\{API\}\/public\/cost-summary`/);
+  for (const fn of ['cumulateByDay', 'timeStepSeriesHtml', 'plotSvgHtml', 'plotValueLabelHtml', 'barSeriesHtml']) {
+    assert.match(moneyJs, new RegExp(`kit\\.${fn}\\(`), `the treasury draws through ${fn}`);
+  }
+  assert.doesNotMatch(moneyJs, /<(?:path|polyline|rect)\b[^>]*\b(?:d|points)="\$\{/, 'no hand-built SVG geometry');
+});
+
+// ---- 4. no money figure on two hall pages ---------------------------------------
+
+test('no other hall page reads the three money feeds', () => {
+  const FEEDS = [/project-account\/outflow/, /project-account\/ledger-checks/, /fleet\/cost-ledger/];
+  // fleet-costs.js is the hosting section's own drawing, loaded only by money.html.
+  const files = fs.readdirSync(HALL).filter((f) => /\.(js|html)$/.test(f) && !['money.js', 'fleet-costs.js'].includes(f));
+  for (const f of files) {
+    for (const re of FEEDS) assert.doesNotMatch(read(f), re, `${f} reads ${re} — that figure belongs on /money`);
+  }
+  // The treasury feed is also the Tasks board's credits tile (a count of credits,
+  // not money) — but no other page draws the treasury itself.
+  for (const f of ['project-settings.js', 'project-settings.html', 'primer.js', 'primer-live.js']) {
+    assert.doesNotMatch(read(f), /cost-summary|treasury-spend|Where the money went<\/h2>/, `${f} draws no money figure`);
+  }
+});
+
+test('Project settings and the Primer link to the money page instead', () => {
+  assert.match(read('project-settings.html'), /<a href="\/builders\/money">Money<\/a>/);
+  assert.doesNotMatch(read('project-settings.html'), /id="ps-money"/);
+  const md = fs.readFileSync(path.join(ROOT, 'docs', 'onboarding', 'primer.md'), 'utf8');
+  assert.match(md, /\[Money\]\(\.\.\/\.\.\/modules\/hall-ui\/public\/money\.html\)/, 'a hall-page link primer.js opens in the hall');
+  assert.doesNotMatch(read('primer-live.js'), /fillTreasury|treasuryHtml/);
+});
+
+// ---- 5. the gate, the nav and the old URL ---------------------------------------
+
+test('/money is behind the government page floor, and the nav mirrors it', () => {
+  const src = fs.readFileSync(path.join(ROOT, 'src', 'bongos', 'serve-internal.js'), 'utf8');
+  assert.match(src, /const MONEY_PAGE_RE = \/\^\\\/builders\\\/money\(\?:\\\.html\)\?\\\/\?\$\/;/);
+  assert.match(src, /\|\| MONEY_PAGE_RE\.test\(norm\)\) \{\n\s+return gdsAuth\.requireGovernmentPage\(req, res, next\);/);
+  assert.match(read('shell.js'), /\{ id: 'money', label: 'Money', icon: 'money', href: '\/money', gate: 'government', position: true \}/);
+  assert.doesNotMatch(read('shell.js'), /id: 'fleet'/, 'Fleet costs left the sidebar');
+  // the hosting section's data keeps its own wall: the route's atom, unchanged
+  const route = fs.readFileSync(path.join(ROOT, 'modules', 'provisioning', 'routes', 'provisioning.js'), 'utf8');
+  assert.match(route, /router\.get\('\/provisioning\/fleet\/cost-ledger', auth\.requireBuilder, auth\.requirePermission\('provisioning\.fleet\.manage'\)/);
+});
+
+async function withHall(fn) {
+  const express = require('express');
+  const { mountInternalSurfaces } = require('../src/bongos/serve-internal.js');
+  const app = express();
+  mountInternalSurfaces(app);
+  const server = app.listen(0, '127.0.0.1');
+  await new Promise((r) => server.once('listening', r));
+  const { port } = server.address();
+  const get = (p, host) => new Promise((resolve, reject) => {
+    http.get({ host: '127.0.0.1', port, path: p, headers: { host } }, (res) => {
+      res.resume();
+      res.on('end', () => resolve({ status: res.statusCode, location: res.headers.location || '' }));
+    }).on('error', reject);
+  });
+  try { await fn(get); } finally { server.close(); }
+}
+
+test('RUN: /fleet 302s to the money page\'s hosting section, in every form it was linked', async () => {
+  await withHall(async (get) => {
+    for (const form of ['/fleet', '/fleet/', '/fleet.html']) {
+      const r = await get(form, 'builders.127.0.0.1');
+      assert.equal(r.status, 302, `${form} is a temporary redirect, so a later re-point is never cached past`);
+      assert.equal(r.location, '/money#hosting');
+    }
+    const q = await get('/fleet?from=mail', 'builders.127.0.0.1');
+    assert.equal(q.location, '/money?from=mail#hosting', 'a query string rides along');
+  });
+});
+
+test('the states file shoots the redirected deep link too', () => {
+  const states = JSON.parse(read('money.states.json'));
+  assert.equal(states.page, '/builders/money');
+  assert.match(states.states.hosting.url, /#hosting$/);
+});

package/tests/hall_nav.mjs

@@ -322,12 +322,13 @@ test('sidebar groups read by audience, in order', () => {
   // 'deploy' (task 1003159, ADR 0293) is the SECOND archon item, beside 'government':
   // its gate is the `core.pin.move` atom, archon-floor and system:true. It sits with
   // the steering surfaces because that is what it is — the owner's third release gate.
-  // 'fleet' (task 1001949) follows it at the metic floor of `provisioning.fleet.manage`:
-  // what each hosted project costs is an operator surface, like the rest of this group.
+  // 'money' (task 1005047, owner decision 2026-11-03) follows 'project-settings' at the
+  // same government floor: the one money page — spend and payouts, the treasury and the
+  // hosting bills. It replaced 'fleet' (task 1001949), now its #hosting section.
   // 'market-watch-settings' (task 1004938) LEFT the group in task 1005045: the owner saw
   // "Market Watch" twice and had to guess which was which (owner decision 2026-11-03,
   // idea 1001310). The settings are an owner-only Settings tab on /market-watch now.
-  assert.deepEqual(nav[4].items.map((i) => i.id), ['watch', 'gate', 'sessions', 'project-settings', 'deploy', 'fleet', 'government']);
+  assert.deepEqual(nav[4].items.map((i) => i.id), ['watch', 'gate', 'sessions', 'project-settings', 'money', 'deploy', 'government']);
   // task 1005045: and no label is left twice anywhere in the sidebar, so the next pair
   // fails here instead of in front of the owner.
   const labels = [...boot().sidebarHtml.matchAll(/<a class="nav-item" [^>]*>[\s\S]*?<span class="nav-item__label">([^<]*)<\/span>/g)].map((m) => m[1]);
@@ -779,7 +780,7 @@ test('no glyph path data reads as an IP address to the release leak scan', () =>
 // block (task 1004713). These drive the real shell and the real gov-positions.js.
 
 const tick = () => new Promise((resolve) => setImmediate(resolve));
-const GOVERNING = ['board-room', 'city', 'watch', 'gate', 'sessions', 'project-settings', 'deploy', 'fleet', 'government'];
+const GOVERNING = ['board-room', 'city', 'watch', 'gate', 'sessions', 'project-settings', 'money', 'deploy', 'government'];
 const lead = (building, title) => ({ kind: 'lead', seat: 'lead:' + building, building, title });
 const block = (held) => ({ held, title: held.length ? held[0].title : null, has_position: held.length > 0 });
 

package/tests/hall_oversight_world.mjs

@@ -278,7 +278,7 @@ test('RUN: a metric its snapshots never carried is skipped, not drawn as a cliff
 
 // ---- task 1004829: the government pages read like the rebuilt Home ----------
 
-const GOV_PAGES = ['watch', 'gate', 'sessions', 'project-settings', 'deploy', 'fleet', 'government'];
+const GOV_PAGES = ['watch', 'gate', 'sessions', 'project-settings', 'money', 'deploy', 'government'];
 
 test('every government page head holds only its h1, and no script writes into it', () => {
   // No page shows its head (task 1004836). A sub-line there is a line nobody

package/tests/hall_page_gate_map.mjs

@@ -126,6 +126,9 @@ const ORACLE = {
   // its neighbours: a steering surface, metic+ per ADR 0157. Its two WRITES gate
   // independently on `project.settings.manage`, so this row is only about the shell.
   '/builders/project-settings': 'requireGovernmentPage',
+  // The one money page (task 1005047): the same floor as project-settings, whose money
+  // section it took. Its hosting section's data keeps its own atom on the route.
+  '/builders/money': 'requireGovernmentPage',
   // The deploy door (task 1003159, ADR 0293) — the NARROWEST gate in this table, on
   // the `core.pin.move` atom: archon-floor and system:true, the same key its preview
   // and its move both check. Correct for the one page whose button restarts the live
@@ -133,8 +136,6 @@ const ORACLE = {
   // its write on purpose: the preview discloses the exact core version the box serves
   // and how far behind it is, which is a vulnerability window.
   '/builders/deploy': 'requireCorePinPage',
-  // The fleet cost page (task 1001949), on the atom its one read checks.
-  '/builders/fleet': 'requireFleetPage',
 
   // Gone (task 1003444, owner call 2026-09-25 — ADR 0337 D5): the cross-project
   // directory left the hall, and /people now redirects to /roster before this

package/tests/hall_reading_room.mjs

@@ -15,10 +15,11 @@
 //     real h2/h3 slug of docs/onboarding/primer.md, computed by the SAME slugify
 //     the page runs — so retitling a chapter fails here, not silently in a
 //     browser (the credits diagram was lost that way once).
-//   * THE ECONOMY PAGE'S LIVE SECTIONS MOVED WHOLE. The treasury and the bounty
-//     rate card (primer-live.js, from drachmae.js, tasks 1003446 and 2174) are
-//     RUN in a vm against the checked-in fixtures: a Loading… line first, the
-//     real numbers after, and NOTHING — not an empty panel — when a feed fails.
+//   * THE ECONOMY PAGE'S LIVE SECTION MOVED WHOLE. The bounty rate card
+//     (primer-live.js, from drachmae.js, task 2174) is RUN in a vm against the
+//     checked-in fixture: a Loading… line first, the real numbers after, and
+//     NOTHING — not an empty panel — when the feed fails. (The treasury beside
+//     it went to the money page in task 1005047: tests/hall_money_page.mjs.)
 //   * THE SHARED READER the economy doc leaned on (h4, linked headings, nested
 //     emphasis) stays pinned: drachmae-and-karma.md is still the full reference.
 //
@@ -188,7 +189,6 @@ function liftInsertLive({ hash = '', withObserver = true }) {
     location: { hash },
     OTBPrimerLive: {
       placeholder: (kind) => ({ kind }),
-      fillTreasury: async (s) => { fills.push(s.kind); return true; },
       fillBounty: async (s) => { fills.push(s.kind); return true; },
     },
   };
@@ -216,7 +216,7 @@ function liftInsertLive({ hash = '', withObserver = true }) {
 test('RUN: the live reads wait until the reader comes near, so an ordinary Primer visit costs nothing', async () => {
   const t = liftInsertLive({ hash: '#the-rank-ladder' });
   await t.run();
-  assert.deepEqual(t.placed, [['treasury', true], ['bounty', true]], 'both placed at the end of the credits chapter, ahead of the next one');
+  assert.deepEqual(t.placed, [['bounty', true]], 'placed at the end of the credits chapter, ahead of the next one (the treasury is on /money since task 1005047)');
   assert.deepEqual(t.fills, [], 'no fetch on load');
   assert.equal(t.observers.length, 1);
   t.observers[0].cb([{ isIntersecting: false }]);
@@ -224,20 +224,20 @@ test('RUN: the live reads wait until the reader comes near, so an ordinary Prime
   t.observers[0].cb([{ isIntersecting: true }]);
   t.observers[0].cb([{ isIntersecting: true }]);
   await Promise.resolve();
-  assert.deepEqual(t.fills, ['treasury', 'bounty'], 'one read each, once, when the reader approaches');
+  assert.deepEqual(t.fills, ['bounty'], 'one read, once, when the reader approaches');
   assert.equal(t.observers[0].gone, true, 'and the watch is dropped');
 });
 
 test('RUN: an old /drachmae link (or a section address) fills at once, so the landing is on the final layout', async () => {
-  for (const hash of ['#credits-and-karma', '#the-treasury', '#security-bounty-rates']) {
+  for (const hash of ['#credits-and-karma', '#security-bounty-rates']) {
     const t = liftInsertLive({ hash });
     await t.run();
-    assert.deepEqual(t.fills, ['treasury', 'bounty'], `${hash} reads both before landing`);
+    assert.deepEqual(t.fills, ['bounty'], `${hash} reads it before landing`);
     assert.equal(t.observers.length, 0);
   }
   const old = liftInsertLive({ withObserver: false });
   await old.run();
-  assert.deepEqual(old.fills, ['treasury', 'bounty'], 'a browser with no observer still gets the sections');
+  assert.deepEqual(old.fills, ['bounty'], 'a browser with no observer still gets the section');
 });
 
 test('a deep link lands after the article, its live sections and the fonts', () => {
@@ -251,11 +251,8 @@ test('the states file shoots a redirected deep link, not just the top of the pag
   assert.match(states.states.jump.url, /#credits-and-karma$/);
 });
 
-// ---- 3. the live sections, RUN ---------------------------------------------
+// ---- 3. the live section, RUN ---------------------------------------------
 
-const costSummaryFixture = JSON.parse(
-  fs.readFileSync(path.join(ROOT, 'modules', 'ui-design', 'kit', 'fixtures', 'cost-summary.json'), 'utf8'),
-);
 const bountyFixture = JSON.parse(
   fs.readFileSync(path.join(ROOT, 'scripts', 'hall-preview', 'fixtures', 'public__bounty-table.json'), 'utf8'),
 );
@@ -271,7 +268,7 @@ function fakeSection() {
   };
 }
 
-async function loadLive({ responses, branding = { currency: { label: 'drachmae' } }, kit = true }) {
+async function loadLive({ responses, branding = { currency: { label: 'drachmae' } } }) {
   const warnings = [];
   const sandbox = {
     window: { OTB: realOTB(), __BRANDING__: branding },
@@ -284,21 +281,16 @@ async function loadLive({ responses, branding = { currency: { label: 'drachmae'
       return { ok: true, status: 200, json: async () => r };
     },
   };
-  if (kit) {
-    const kitPath = path.join(HALL, 'hall-kit.js');
-    sandbox.window.OTBKit = await import(`file://${kitPath.replace(/\\/g, '/')}`).then((m) => m.default);
-  }
   vm.createContext(sandbox);
   vm.runInContext(liveJs, sandbox, { filename: 'primer-live.js' });
   return { live: sandbox.window.OTBPrimerLive, warnings };
 }
 
-const TREASURY = '/api/bongos/public/cost-summary';
 const BOUNTY = '/api/bongos/public/bounty-table';
 
 test('RUN: a section says Loading… the moment it is placed, under the heading a deep link needs', async () => {
   const { live } = await loadLive({ responses: {} });
-  for (const [kind, id] of [['treasury', 'the-treasury'], ['bounty', 'security-bounty-rates']]) {
+  for (const [kind, id] of [['bounty', 'security-bounty-rates']]) {
     const s = live.placeholder(kind);
     assert.match(s.innerHTML, new RegExp(`^<h3 id="${id}">`), `${kind} carries its address from the start`);
     assert.match(s.innerHTML, /<p class="hall-loading" role="status">Loading…<\/p>/);
@@ -306,38 +298,6 @@ test('RUN: a section says Loading… the moment it is placed, under the heading
   }
 });
 
-test('RUN: the treasury fills from the payload, and its line ends on the total the prose states', async () => {
-  const { live } = await loadLive({ responses: { [TREASURY]: costSummaryFixture } });
-  const s = live.placeholder('treasury');
-  assert.equal(await live.fillTreasury(s), true);
-  assert.equal(s.removed, false);
-  assert.equal(s.attrs['aria-busy'], undefined, 'no longer busy');
-  assert.doesNotMatch(s.innerHTML, /Loading…/);
-  assert.match(s.innerHTML, /^<h3 id="the-treasury">The treasury, so far<\/h3>/);
-  const usd = `$${Number(costSummaryFixture.total_usd).toLocaleString(undefined, { maximumFractionDigits: 0 })}`;
-  assert.ok(s.innerHTML.includes(`<strong>${usd}</strong>`), 'the spend total is stated');
-  assert.match(s.innerHTML, /id="treasury-spend"/);
-  assert.match(s.innerHTML, /id="treasury-earned"/);
-  assert.match(s.innerHTML, /Drachmae awarded, cumulative/, 'the currency word is the branding pack\'s');
-  assert.doesNotMatch(s.innerHTML, /NaN|Infinity/, 'a NaN in a path renders as an invisible chart with no error anywhere');
-  assert.doesNotMatch(s.innerHTML, /tabindex="0"/, 'no focus stop: nothing here wires a readout');
-  assert.doesNotMatch(s.innerHTML, /&amp;amp;|&amp;#/, 'nothing is escaped twice');
-});
-
-test('RUN: a treasury that cannot be read, or holds nothing yet, leaves NO section behind', async () => {
-  for (const responses of [{}, { [TREASURY]: new Error('down') }, { [TREASURY]: { daily: [], daily_credits: [] } }]) {
-    const { live } = await loadLive({ responses });
-    const s = live.placeholder('treasury');
-    assert.equal(await live.fillTreasury(s), false);
-    assert.equal(s.removed, true, 'the Loading… line goes with it — never an empty panel');
-  }
-  const noKit = await loadLive({ responses: { [TREASURY]: costSummaryFixture }, kit: false });
-  const s = noKit.live.placeholder('treasury');
-  assert.equal(await noKit.live.fillTreasury(s), false, 'without the chart kit there is nothing honest to draw');
-  assert.equal(s.removed, true);
-  assert.match(noKit.warnings.join('\n'), /OTBKit missing/);
-});
-
 test('RUN: the bounty rate card renders the live table, tuned tiers marked', async () => {
   const tuned = { ...bountyFixture, table: bountyFixture.table.map((r, i) => (i === 0 ? { ...r, overridden: true } : r)) };
   const { live } = await loadLive({ responses: { [BOUNTY]: tuned }, branding: {} });
@@ -358,20 +318,19 @@ test('RUN: a bounty feed that fails leaves no section', async () => {
   }
 });
 
-test('the live sections read endpoints that already existed, and draw only through the kit', () => {
-  assert.match(liveJs, /TREASURY_URL = '\/api\/bongos\/public\/cost-summary'/);
+test('the live section reads an endpoint that already existed, and the treasury is gone to /money', () => {
   assert.match(liveJs, /BOUNTY_URL = '\/api\/bongos\/public\/bounty-table'/);
-  for (const fn of ['cumulateByDay', 'timeStepSeriesHtml', 'plotSvgHtml', 'plotValueLabelHtml', 'barSeriesHtml']) {
-    assert.match(liveJs, new RegExp(`kit\\.${fn}\\(`), `the treasury draws through ${fn}`);
-  }
+  assert.doesNotMatch(liveJs, /cost-summary|fillTreasury/, 'task 1005047: a money figure is drawn on the money page alone');
   assert.doesNotMatch(liveJs, /<(?:path|polyline|rect)\b[^>]*\b(?:d|points)="\$\{/, 'no hand-built SVG geometry');
 });
 
-test('the page loads the kit, then the live module, then the page script', () => {
+test('the page loads the live module, then the page script', () => {
   const loaded = [...primerHtml.matchAll(/<script[^>]+src="([^"?]+)/g)].map((m) => m[1].split('/').pop());
   const at = (f) => loaded.indexOf(f);
-  assert.ok(at('hall-kit.js') > -1 && at('primer-live.js') > -1 && at('primer.js') > -1);
-  assert.ok(at('hall-kit.js') < at('primer-live.js') && at('primer-live.js') < at('primer.js'));
+  assert.ok(at('primer-live.js') > -1 && at('primer.js') > -1);
+  assert.ok(at('primer-live.js') < at('primer.js'));
+  // task 1005047: the chart kit drew the treasury, which is on the money page now.
+  assert.equal(at('hall-kit.js'), -1, 'nothing on the Primer draws a chart');
   // The figure chrome is shared (style.css), so the Primer needs no profile sheet.
   assert.match(primerHtml, /style\.css/);
   assert.doesNotMatch(primerHtml, /profile\.css/);
@@ -411,7 +370,7 @@ test('emphasis inside a bold run renders — the API list-price line showed its
 
 test('the room gives the fourth level a rule, the measure and the anchor offset', () => {
   const h4 = rule(roomCss, '.primer-article h4');
-  assert.ok(h4, 'room.css styles h4 (the treasury\'s "Where it went" is one)');
+  assert.ok(h4, 'room.css styles h4 (the credits reference doc uses them)');
   assert.match(h4, /scroll-margin-top/, 'a deep link to an h4 clears the top bar');
   const measured = decomment(roomCss).match(/\.primer-article\s*>\s*p,[\s\S]*?\{([^}]*)\}/);
   assert.ok(measured, 'the measured-children list exists');

package/tests/nav_permission_atoms.mjs

@@ -96,7 +96,7 @@ test('the hall-preview fixture carries every atom /me resolves', () => {
 // Market Watch settings nav item and its fuel glyph; task 1005041: the Update pill replaced the
 // core-update banner; task 1005045: the Market Watch settings item left (one sidebar item);
 // task 1005046: Ranks, Economy and Diagrams left Docs (one reading room, the Primer).
-const SHELL_SHA = '36c64a1cf84e9db1';
+const SHELL_SHA = '662e036a340ad33f';
 
 test('shell.js has not changed without its cache-bust being bumped', () => {
   const actual = crypto.createHash('sha256').update(SHELL).digest('hex').slice(0, 16);

package/modules/hall-ui/public/fleet.html

@@ -1,69 +0,0 @@
-<!doctype html>
-<html lang="en">
-<head>
-  <meta charset="utf-8">
-  <meta name="viewport" content="width=device-width, initial-scale=1">
-  <title>Fleet costs — {{worldName}}</title>
-  <meta name="description" content="What each hosted project costs this platform, and an estimate of what its owner pays for their own hosting.">
-  <link rel="icon" href="data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'><text x='16' y='24' font-size='24' text-anchor='middle' font-family='sans-serif'>⌂</text></svg>">
-  <link rel="preconnect" href="https://fonts.googleapis.com">
-  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
-  <link rel="stylesheet" href="/builders/style.css?v=2026-09-23-changelist1">
-  <link rel="stylesheet" href="/builders/oversight.css">
-  <link rel="stylesheet" href="/builders/project-settings.css">
-</head>
-<body data-page="fleet" data-page-title="Fleet costs">
-
-<div class="app">
-  <aside class="app-sidebar" id="app-sidebar" aria-label="Primary"></aside>
-  <div class="app-scrim" id="app-scrim" hidden></div>
-  <div class="app-body">
-    <header class="app-topbar" id="app-topbar"></header>
-    <div class="app-content">
-      <!-- The page's one h1, for screen readers: no page shows its head (task
-           1004836), so its sub-line went in task 1004829. -->
-      <div class="page-head page-head--board">
-        <h1 class="page-head__h">Fleet costs</h1>
-      </div>
-
-      <main id="hall-main">
-        <!-- task 1005043: the page loader, shown until any section below is revealed. -->
-        <p class="hall-loading hall-loading--page hall-loading--wait" role="status">Loading…</p>
-        <section class="scroll" id="fl-sealed" aria-labelledby="fl-sealed-h" hidden>
-          <h2 class="scroll__h" id="fl-sealed-h">Restricted</h2>
-          <p class="scroll__lede">This page opens at a higher rank.</p>
-        </section>
-
-        <section class="scroll" id="fl-body" aria-labelledby="fl-body-h" hidden>
-          <h2 class="scroll__h" id="fl-body-h">What each project costs</h2>
-          <!-- Two different bills, one column each (ADR 0327): a cloud host runs on its
-               OWNER's account, so it costs this platform nothing and its owner pays their
-               hosting provider directly. Nothing on this page is charged to anyone. -->
-          <p class="scroll__lede">
-            Two different bills, one column each. The first is what a project costs this
-            platform. The second is an estimate of what its owner pays their own hosting
-            provider, which bills them directly. A project with no recorded plan reads
-            "not priced yet", never $0, and is left out of the total. A self-hosted
-            project runs on its owner's own machine, so its bill is not visible to us.
-          </p>
-          <div id="fl-panel"><span class="kit-skel"></span></div>
-        </section>
-      </main>
-
-      <footer class="app-foot" id="app-foot"></footer>
-    </div>
-  </div>
-</div>
-
-<div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
-
-<script src="/builders/dom-utils.js?v=2026-10-25-escape"></script>
-<script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/craft-mode.js?v=2026-11-04-reading-room"></script>
-<script src="/builders/shell.js?v=2026-11-04-reading-room"></script>
-<script src="/builders/palette.js" defer></script>
-<script src="/builders/hall-kit.js"></script>
-<script src="/builders/fleet-costs.js"></script>
-<script src="/builders/fleet.js"></script>
-</body>
-</html>

package/modules/hall-ui/public/fleet.js

@@ -1,41 +0,0 @@
-// fleet.js — the fleet cost page (task 1001949, ADR 0327): the chrome around
-// fleet-costs.js, which does all the drawing.
-//
-// One read, GET /provisioning/fleet/cost-ledger, gated on `provisioning.fleet.manage`
-// exactly as this page is. A 403 shows the sealed state rather than an empty table,
-// so a refusal is never mistaken for a fleet with nothing in it.
-(() => {
-  'use strict';
-
-  const API = '/api/bongos';
-  const api = window.BongosClient.createClient({ baseUrl: '', credentials: 'same-origin', throwOnError: false });
-  const { escapeHtml } = window.OTB;
-  const $ = (id) => document.getElementById(id);
-
-  function fail(message) {
-    $('fl-body').hidden = false;
-    $('fl-panel').innerHTML = `<p class="ps-invalid">${escapeHtml(message)}</p>`;
-  }
-
-  async function load() {
-    let res;
-    try {
-      res = await api.request('GET', `${API}/provisioning/fleet/cost-ledger`);
-    } catch (e) {
-      return fail('Could not reach the server.');
-    }
-    if (res.status === 401) { window.location.assign(`${API}/auth/web/start`); return; }
-    if (res.status === 403) {
-      $('fl-sealed').hidden = false;
-      return;
-    }
-    if (!res.ok) {
-      const err = (res.data && res.data.error) || {};
-      return fail(err.message && err.message !== err.code ? err.message : 'Could not read the fleet costs.');
-    }
-    $('fl-body').hidden = false;
-    $('fl-panel').innerHTML = window.OTBFleetCosts.ledgerHtml(res.data);
-  }
-
-  document.addEventListener('DOMContentLoaded', load);
-})();