@bongos/core 1.24.36 → 1.24.38

package/modules/hall-ui/public/watch.html

@@ -167,8 +167,8 @@
      chrome exists before the page script runs. -->
 <script src="/builders/dom-utils.js?v=2026-10-25-escape"></script>
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/craft-mode.js?v=2026-11-04-reading-room"></script>
-<script src="/builders/shell.js?v=2026-11-04-reading-room"></script>
+<script src="/builders/craft-mode.js?v=2026-11-05-sections"></script>
+<script src="/builders/shell.js?v=2026-11-05-sections"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared component kit (window.OTBKit) — tabs, ledger, pager (task 2166). -->

package/modules/hall-ui/public/work.html

@@ -173,8 +173,8 @@
      time so the chrome exists before the deferred page scripts execute. -->
 <script src="/builders/dom-utils.js?v=2026-10-25-escape"></script>
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/craft-mode.js?v=2026-11-04-reading-room"></script>
-<script src="/builders/shell.js?v=2026-11-04-reading-room"></script>
+<script src="/builders/craft-mode.js?v=2026-11-05-sections"></script>
+<script src="/builders/shell.js?v=2026-11-05-sections"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- task 1004727: the ONE karma vote control every task/idea list renders -->

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.24.36",
+  "version": "1.24.38",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.24.36",
+      "version": "1.24.38",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.24.36",
+  "version": "1.24.38",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -11179,5 +11179,17 @@
       "id": "1005046",
       "text": "The Docs section now has one reading room instead of four pages: ranks, credits and karma, and the five diagrams all live in the Primer, each topic explained once with its picture beside it. Old links to Ranks, Economy and Dia"
     }
+  ],
+  "1.24.37": [
+    {
+      "id": "1005047",
+      "text": "Owners now have one Money page in the Government group: what the project spent and paid out, its treasury, and what each hosted project costs, all in one place. Project settings and the Primer link to it instead of repeating t"
+    }
+  ],
+  "1.24.38": [
+    {
+      "id": "1005071",
+      "text": "The hall sidebar is now seven labelled sections (Work, Make, Community, You, Govern, Run the project, Help), and every craft can reach Help."
+    }
   ]
 }

package/src/bongos/auth.js

@@ -406,10 +406,6 @@ const PAGE_GATES = Object.freeze({
   // live project; which project they may read or move is still the routes' question,
   // asked per request against that project's row.
   requireCorePinPage: Object.freeze({ permission: 'core.pin.move', deniedTo: '/builders', alsoAdmits: 'isProjectOwner' }),
-  // The /fleet cost page (task 1001949) — on `provisioning.fleet.manage`, the SAME atom
-  // its one read (GET /provisioning/fleet/cost-ledger) checks: every owner's projects
-  // and what they cost, so the page reaches exactly as far as the data does.
-  requireFleetPage: Object.freeze({ permission: 'provisioning.fleet.manage', deniedTo: '/builders' }),
 });
 
 // The `alsoAdmits` door — "is this visitor the page's OTHER audience?", asked of
@@ -568,9 +564,6 @@ async function requireBoardVotePage(req, res, next) {
 async function requireCorePinPage(req, res, next) {
   return runPageGate('requireCorePinPage', req, res, next);
 }
-async function requireFleetPage(req, res, next) {
-  return runPageGate('requireFleetPage', req, res, next);
-}
 
 // ---------------------------------------------------------------------------
 // Route-gate inventory (V3.R06 #231) — the canonical "who can call what" list.
@@ -862,7 +855,6 @@ module.exports = {
   requireGovernmentPage,
   requireBoardVotePage,
   requireCorePinPage,
-  requireFleetPage,
   requireRank,
   rankMeetsThreshold,
   requirePermission,

package/src/bongos/serve-internal.js

@@ -1010,8 +1010,9 @@ function mountInternalSurfaces(app) {
   // statically, and a comment in that gap makes the page test as UNGATED while
   // looking gated here. Prose goes above the const, as here.
   const DEPLOY_PAGE_RE = /^\/builders\/deploy(?:\.html)?\/?$/;
-  // The fleet cost page (task 1001949), on the atom its one read checks.
-  const FLEET_PAGE_RE = /^\/builders\/fleet(?:\.html)?\/?$/;
+  // /money — the owner's one money page (task 1005047): the government floor; each
+  // section's read keeps its own wall. NB as at PROJECT_SETTINGS_PAGE_RE.
+  const MONEY_PAGE_RE = /^\/builders\/money(?:\.html)?\/?$/;
   // /people and its legacy twin /scouting were the hall's cross-project builder
   // directory. Task 1003440 deleted the /scouting door; task 1003444 deleted
   // /people itself (owner call, 2026-09-25 — ADR 0337 D5): cross-project
@@ -1048,6 +1049,16 @@ function mountInternalSurfaces(app) {
     return res.redirect(302, `${isBuildersHost(req) ? '' : '/builders'}/market-watch${qs}#settings`);
   });
 
+  // task 1005047: Fleet costs is /money's #hosting section now; 302 and no gate, as above.
+  const RETIRED_FLEET_RE = /^\/builders\/fleet(?:\.html)?\/?$/;
+  app.use((req, res, next) => {
+    if (isModuleSurfaceHost(req)) return next();
+    if (req.method !== 'GET' && req.method !== 'HEAD') return next();
+    if (!RETIRED_FLEET_RE.test(path.posix.normalize(req.path))) return next();
+    const qs = req.url.includes('?') ? req.url.slice(req.url.indexOf('?')) : '';
+    return res.redirect(302, `${isBuildersHost(req) ? '' : '/builders'}/money${qs}#hosting`);
+  });
+
   // task 1005046 (owner decision 2026-11-03, idea 1001311): ONE reading room. Ranks,
   // Economy (/drachmae) and Diagrams explained what the Primer already explained, so
   // they are Primer chapters now, each with its diagram, and each old URL lands on the
@@ -1094,7 +1105,8 @@ function mountInternalSurfaces(app) {
     if (!req.path.startsWith('/builders')) return next();
     const norm = path.posix.normalize(req.path);
     if (WATCH_PAGE_RE.test(norm) || GATE_PAGE_RE.test(norm)
-      || SESSIONS_PAGE_RE.test(norm) || PROJECT_SETTINGS_PAGE_RE.test(norm)) {
+      || SESSIONS_PAGE_RE.test(norm) || PROJECT_SETTINGS_PAGE_RE.test(norm)
+      || MONEY_PAGE_RE.test(norm)) {
       return gdsAuth.requireGovernmentPage(req, res, next);
     }
     // R16 (goal 1000069) widened the government shell from the manage atom
@@ -1125,9 +1137,6 @@ function mountInternalSurfaces(app) {
     if (DEPLOY_PAGE_RE.test(norm)) {
       return gdsAuth.requireCorePinPage(req, res, next);
     }
-    if (FLEET_PAGE_RE.test(norm)) {
-      return gdsAuth.requireFleetPage(req, res, next);
-    }
     next();
   });
 

package/src/module-api.js

@@ -81,7 +81,7 @@ const { sleep } = require('./sleep');
 // MAJOR (see allowBoxScope below): passes the request through untouched.
 function deprecatedNoopMiddleware(_req, _res, next) { next(); }
 
-const CORE_VERSION = '1.24.36'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.24.38'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('discord'); log.info('mounted');

package/tests/auth_resolve_failure.mjs

@@ -97,18 +97,19 @@ test('AUDIT: every async middleware mounted directly on a router owns its reject
   //   requireBoardVotePage       /  BV1.R107 (and the ADR 0266 /board-room vote gate)
   //   requireCorePinPage        /   ADR 0293's /deploy door — the narrowest of them,
   //                                 on the archon-floor `core.pin.move` atom.
-  //   requireFleetPage            — task 1001949's /fleet cost page, same delegation.
-  // Task 1003450 removed two more — requireNonXenosPage and the R113
+  // Task 1005047 removed requireFleetPage with the /fleet page it fronted (its
+  // ledger is a section of /money now, behind the government page floor and the
+  // route's own atom). Task 1003450 removed two more — requireNonXenosPage and the R113
   // requireGovernmentManagePage — which had both ended up dispatched from no
   // route at all; tests/hall_page_gate_map.mjs now fails if that recurs. Task
   // 1003444 removed requireProjectCuratePage with the /people page it fronted.
   // Anything else async and router-mounted must be added with its own try/catch.
   const src = fs.readFileSync(path.join(ROOT, 'src', 'bongos', 'auth.js'), 'utf8');
   const asyncMw = [...src.matchAll(/^async function (require\w+|allow\w+)\s*\(req, res, next\)/gm)].map((m) => m[1]);
-  assert.deepEqual(asyncMw.sort(), ['requireBoardVotePage', 'requireBuilder', 'requireBuilderPage', 'requireCorePinPage', 'requireFleetPage', 'requireGovernmentPage'],
+  assert.deepEqual(asyncMw.sort(), ['requireBoardVotePage', 'requireBuilder', 'requireBuilderPage', 'requireCorePinPage', 'requireGovernmentPage'],
     'a new async router middleware appeared — give it a try/catch and add it here');
   // The page gates must actually delegate (that is WHY they are safe).
-  for (const name of ['requireBuilderPage', 'requireGovernmentPage', 'requireBoardVotePage', 'requireCorePinPage', 'requireFleetPage']) {
+  for (const name of ['requireBuilderPage', 'requireGovernmentPage', 'requireBoardVotePage', 'requireCorePinPage']) {
     const fn = src.slice(src.indexOf(`async function ${name}`));
     assert.match(sliceFn(fn), /runPageGate\(/, `${name} must delegate to the guarded runPageGate`);
   }

package/tests/craft_mode_nav.mjs

@@ -25,7 +25,7 @@ const CRAFT = read('craft-mode.js');
 
 // Every NAV id, and the Government group's, read from shell.js itself.
 const NAV_IDS = [...SHELL.matchAll(/\{ id: '([a-z-]+)', label:/g)].map((m) => m[1]);
-const GOV_BLOCK = SHELL.slice(SHELL.indexOf("{ group: 'Government'"));
+const GOV_BLOCK = SHELL.slice(SHELL.indexOf("{ group: 'Run the project'"));
 const GOV_IDS = [...GOV_BLOCK.slice(0, GOV_BLOCK.indexOf('] }')).matchAll(/\{ id: '([a-z-]+)'/g)].map((m) => m[1]);
 
 // A small element. Elements parsed from the sidebar's markup are built ONCE, so
@@ -132,8 +132,9 @@ test('THE ALWAYS-PRESENT LIST: one shared list, Builders first, then Collab and
   const { craft } = boot();
   // task 1004685 (the living-city prototype): My agents joins as a PROPOSAL for the
   // owner — every craft has agents, and round-3 board 6 pairs it with the city.
-  assert.deepEqual([...craft.ALWAYS_TABS], ['roster', 'collab', 'profile', 'my-agents'],
-    'Builders (NAV id roster) heads the list (owner, 2026-10-01); Collab and Profile join it (owner, 2026-10-03); My agents (prototype, task 1004685)');
+  // task 1005071 (owner, 2026-11-04): Help — the old Docs group — joins, so every craft has the Primer.
+  assert.deepEqual([...craft.ALWAYS_TABS], ['roster', 'collab', 'profile', 'my-agents', 'primer', 'commands', 'atlas', 'modules', 'apidocs'],
+    'Builders (NAV id roster) heads the list (owner, 2026-10-01); Collab and Profile join it (owner, 2026-10-03); My agents (prototype, task 1004685); Help (task 1005071)');
   for (const m of CRAFTS) {
     const tabs = craft.tabsFor(m);
     assert.ok(Array.isArray(tabs), `${m} has a named tab list`);
@@ -180,7 +181,7 @@ test('each mode shows its own tabs, and switching updates the nav live', () => {
     assert.equal(p.root.dataset.craft, m);
     assert.deepEqual(new Set(p.showing()), new Set(p.craft.tabsFor(m)), `${m} shows exactly its list`);
     for (const id of ['roster', 'collab', 'profile']) assert.ok(p.showing().includes(id), `${id} stays in ${m}`);
-    assert.equal(p.headShowing('government'), m === 'governing', `the Government head shows only where its tabs do (${m})`);
+    assert.equal(p.headShowing('run-the-project'), m === 'governing', `the Government head shows only where its tabs do (${m})`);
   }
   p.craft.choose('building');
   assert.deepEqual(new Set(p.showing()), new Set(p.craft.tabsFor('building')), 'back to Building, its tabs return without a reload');
@@ -190,11 +191,12 @@ test('a mode never shows a tab the gate hid, and a later gate pass keeps the mod
   const p = boot({ session: { 'hall-craft': 'governing' } });
   p.signIn('thetes');
   assert.ok(!p.showing().includes('watch'), 'a thetes in Governing does not get the metic-floored Watch tab');
-  assert.ok(!p.headShowing('government'), 'nor its group head');
-  assert.deepEqual(p.showing(), ['blockers', 'board-room', 'city', 'profile', 'my-agents', 'collab', 'roster'], 'what a thetes board member in Governing sees');
+  assert.ok(!p.headShowing('run-the-project'), 'nor its group head');
+  // task 1005071: sidebar order — Work, Community, You, Govern, then Help (every craft).
+  assert.deepEqual(p.showing(), ['blockers', 'collab', 'roster', 'profile', 'my-agents', 'city', 'board-room', 'primer', 'commands', 'atlas', 'modules', 'apidocs'], 'what a thetes board member in Governing sees');
   p.signIn('archon');
   assert.ok(p.showing().includes('watch'), 'promoted, the gate lets it through and the mode keeps it');
-  assert.ok(p.headShowing('government'), 'and its group head comes back with it, which only a mode pass after the gate can know');
+  assert.ok(p.headShowing('run-the-project'), 'and its group head comes back with it, which only a mode pass after the gate can know');
   assert.ok(!p.showing().includes('work'), 'and the gate pass did not bring back a tab the mode left out');
 });
 
@@ -257,9 +259,9 @@ function bootTree({ mode = null, activeId = null } = {}) {
     let into = group;
     if (label) {
       const head = el('BUTTON', 'nav-group__head');
-      head.dataset.group = label.toLowerCase();
+      head.dataset.group = label.toLowerCase().replace(/\s+/g, '-');
       group.appendChild(head);
-      into = group.appendChild(el('DIV', 'nav-items', 'nav-items-' + label.toLowerCase()));
+      into = group.appendChild(el('DIV', 'nav-items', 'nav-items-' + label.toLowerCase().replace(/\s+/g, '-')));
     }
     for (const m of block.matchAll(/\{ id: '([a-z-]+)', label:/g)) {
       into.appendChild(el('A', 'nav-item' + (m[1] === activeId ? ' nav-item--active' : ''), 'nav-' + m[1]));
@@ -306,7 +308,7 @@ test('GOVERNING LEADS WITH THE CITY: its other tabs fold into one dropdown right
   assert.equal(head.getAttribute('aria-controls'), 'nav-items-craft-fold', 'the head names the region it opens');
   assert.match(head.innerHTML, /More governing/);
   assert.ok(head.hasAttribute('data-craft-off') === false, 'its head shows while a tab inside does');
-  assert.ok(p.sidebar.querySelectorAll('.nav-group__head').find((h) => h.dataset.group === 'government').hasAttribute('data-craft-off'),
+  assert.ok(p.sidebar.querySelectorAll('.nav-group__head').find((h) => h.dataset.group === 'run-the-project').hasAttribute('data-craft-off'),
     'the emptied Government head hides, so no label sits over nothing');
   p.craft.choose('building');
   assert.equal(p.fold(), null, 'leaving Governing removes the dropdown');

package/tests/fleet_cost_view.mjs

@@ -103,24 +103,8 @@ test('no projects renders a sentence, not an empty table', () => {
   assert.match(costs.ledgerHtml(null), /No projects are hosted here yet/);
 });
 
-// ── the page: its wiring and its gate ────────────────────────────────────────
-test('the page loads the builders before its chrome and reads the ledger route', () => {
-  const html = read(path.join(HALL, 'fleet.html'));
-  assert.ok(html.indexOf('fleet-costs.js') !== -1 && html.indexOf('fleet-costs.js') < html.indexOf('/fleet.js'), 'fleet-costs.js loads first');
-  const js = read(path.join(HALL, 'fleet.js'));
-  assert.match(js, /\/provisioning\/fleet\/cost-ledger/);
-  assert.match(js, /status === 403[\s\S]{0,200}fl-sealed/, 'a refusal shows the sealed state');
-});
-
-test('the page gate is the atom the ledger route checks, and the nav mirrors its floor', () => {
-  const route = read(path.join(ROOT, 'modules', 'provisioning', 'routes', 'provisioning.js'));
-  assert.match(route, /router\.get\('\/provisioning\/fleet\/cost-ledger', auth\.requireBuilder, auth\.requirePermission\('provisioning\.fleet\.manage'\)/);
-  assert.match(read(path.join(ROOT, 'src', 'bongos', 'auth.js')), /requireFleetPage: Object\.freeze\(\{ permission: 'provisioning\.fleet\.manage'/);
-  // The nav is cosmetic (the page gate is the wall); 'government' is the metic floor.
-  const { byKey } = require(path.join(ROOT, 'modules', 'government', 'catalog.js'));
-  assert.equal(byKey('provisioning.fleet.manage').floor, 'metic');
-  assert.match(read(path.join(HALL, 'shell.js')), /href: '\/fleet', gate: 'government', module: 'provisioning'/);
-});
+// The page's wiring and its gate moved to tests/hall_money_page.mjs with the page
+// (task 1005047): the ledger is the money page's #hosting section, and /fleet redirects.
 
 // ── the owner's line on their own project page ───────────────────────────────
 const HUB = read(path.join(ROOT, 'modules', 'public-landing', 'public', 'projects.html'));

package/tests/goal_map_page.mjs

@@ -415,8 +415,11 @@ await test('Sky sits directly under Goals in the nav, member-gated, at the URL G
   const shell = read('shell.js');
   const item = shell.indexOf("{ id: 'goal-map', label: 'Sky', icon: 'sky', href: '/goal-map', gate: 'member' }");
   assert.ok(item > -1, 'the nav item, with the slot the map was denied (ADR 0227 §11)');
-  const goals = shell.indexOf("{ id: 'goals', label: 'Goals'"); const work = shell.indexOf("{ id: 'work', label: 'Tasks'");
-  assert.ok(goals > -1 && goals < item && item < work, 'under Goals, above Tasks');
+  // task 1005071 moved Tasks up to second in Work (owner, 2026-11-04); Sky stays the
+  // item straight after Goals.
+  const goals = shell.indexOf("{ id: 'goals', label: 'Goals'");
+  const between = shell.slice(goals, item);
+  assert.ok(goals > -1 && goals < item && (between.match(/\{ id: '/g) || []).length === 1, 'directly under Goals');
   assert.match(read('goals.html'), /href="\/builders\/goal-map"/, 'Goals still links to it');
 });
 

package/tests/hall_loading.mjs

@@ -83,7 +83,7 @@ test('the page loaders step aside by themselves, and never show without :has()',
   assert.match(STYLE, /\.hall-loading--wait, \.hall-loading--zones \{ display: none; \}/);
   assert.match(STYLE, /@supports selector\(:has\(a\)\) \{\s*\.hall-loading--wait:not\(:has\(~ :not\(\[hidden\], script, template, style\)\)\) \{ display: flex; \}\s*\.hall-loading--zones:not\(:has\(~ :not\(\[hidden\]\) > :not\(\[hidden\], script, template, style\)\)\) \{ display: flex; \}\s*\}/);
   // A page whose sections all start [hidden] carries the --wait loader FIRST in its main.
-  for (const page of ['board-room', 'deploy', 'fleet', 'gate', 'government', 'project-settings', 'sessions']) {
+  for (const page of ['board-room', 'deploy', 'gate', 'government', 'money', 'project-settings', 'sessions']) {
     const html = read(`${page}.html`);
     const main = html.slice(html.indexOf('<main id="hall-main">'));
     const first = main.replace(/<main id="hall-main">\s*(<!--[\s\S]*?-->\s*)*/, '');

package/tests/hall_money_page.mjs

@@ -0,0 +1,272 @@
+// tests/hall_money_page.mjs — the owner's ONE money page (task 1005047, owner
+// decision 2026-11-03, idea 1001312).
+//
+// What the project spent and paid out was drawn on three pages: Project settings
+// ("Where the money went"), the Primer ("The treasury, so far", from the retired
+// Economy page) and /fleet (what each hosted project costs). They are three sections
+// of /money now. This file holds what makes that true and keeps it true:
+//
+//   * THE PAGE DRAWS ALL THREE, each only when its own read answers. money.js is
+//     RUN in a vm against the hall-preview fixtures: a section whose read refuses
+//     (a 403, or a hall without the provisioning module) stays hidden, and a page
+//     where nothing answers says so in one line instead of loading forever.
+//   * NO MONEY FIGURE IS DRAWN ON TWO HALL PAGES. Project settings and the Primer
+//     keep their knobs and their prose, read none of the three feeds, and link here.
+//   * OLD URLS LAND ON THE RIGHT SECTION. /fleet 302s to /money#hosting through the
+//     real middleware, and /money sits behind the government
+//     page floor.
+//
+// The treasury cases moved here from tests/hall_reading_room.mjs, and the fleet
+// page's wiring cases from tests/fleet_cost_view.mjs, with the code they test.
+
+import { test } from 'node:test';
+import assert from 'node:assert/strict';
+import fs from 'node:fs';
+import http from 'node:http';
+import path from 'node:path';
+import vm from 'node:vm';
+import { createRequire } from 'node:module';
+import { fileURLToPath } from 'node:url';
+import { realOTB } from './helpers.mjs';
+
+const require = createRequire(import.meta.url);
+const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
+const HALL = path.join(ROOT, 'modules', 'hall-ui', 'public');
+const read = (f) => fs.readFileSync(path.join(HALL, f), 'utf8');
+const fixture = (name) => JSON.parse(fs.readFileSync(path.join(ROOT, 'scripts', 'hall-preview', 'fixtures', `${name}.json`), 'utf8'));
+
+const moneyHtml = read('money.html');
+const moneyJs = read('money.js');
+
+const OUTFLOW = '/api/bongos/project-account/outflow';
+const CHECKS = '/api/bongos/project-account/ledger-checks?limit=1';
+const TREASURY = '/api/bongos/public/cost-summary';
+const LEDGER = '/api/bongos/provisioning/fleet/cost-ledger';
+
+const costSummaryFixture = JSON.parse(
+  fs.readFileSync(path.join(ROOT, 'modules', 'ui-design', 'kit', 'fixtures', 'cost-summary.json'), 'utf8'),
+);
+
+// Just enough of an element for money.js: it writes a body's innerHTML and a
+// section's `hidden`, and asks a section to scroll into view.
+function fakeEl(id) {
+  return { id, hidden: true, innerHTML: '', scrolled: false, scrollIntoView() { this.scrolled = true; } };
+}
+
+// money.js in a vm. `responses` maps a URL to a payload (200), a number (that
+// status, no body) or an Error (the request threw). `page` boots it as the page.
+async function loadMoney({ responses = {}, page = false, hash = '', kit = true, branding = { currency: { label: 'drachmae' } } } = {}) {
+  const els = {};
+  for (const id of ['payouts', 'payouts-body', 'the-treasury', 'the-treasury-body', 'hosting', 'hosting-body', 'money-empty']) els[id] = fakeEl(id);
+  const warnings = [];
+  const requests = [];
+  const window = {
+    OTB: realOTB(),
+    __BRANDING__: branding,
+    location: { hash },
+    BongosClient: {
+      createClient: () => ({
+        request: async (method, url) => {
+          requests.push(url);
+          const r = responses[url];
+          if (r instanceof Error) throw r;
+          if (r === undefined) return { ok: false, status: 404, data: null };
+          if (typeof r === 'number') return { ok: false, status: r, data: null };
+          return { ok: true, status: 200, data: r };
+        },
+      }),
+    },
+  };
+  if (kit) {
+    const kitPath = path.join(HALL, 'hall-kit.js');
+    window.OTBKit = await import(`file://${kitPath.replace(/\\/g, '/')}`).then((m) => m.default);
+  }
+  const sandbox = { window, console: { warn: (...a) => warnings.push(a.join(' ')) } };
+  vm.createContext(sandbox);
+  // the hosting section draws through the real fleet-costs.js, as the page loads it
+  vm.runInContext(read('fleet-costs.js'), sandbox, { filename: 'fleet-costs.js' });
+  sandbox.document = page
+    ? { readyState: 'complete', getElementById: (id) => els[id] || null, addEventListener() {} }
+    : { readyState: 'complete', getElementById: () => null, addEventListener() {} };
+  vm.runInContext(moneyJs, sandbox, { filename: 'money.js' });
+  return { money: window.OTBMoney, els, warnings, requests };
+}
+
+const ALL = { [OUTFLOW]: fixture('project-account__outflow'), [TREASURY]: costSummaryFixture, [LEDGER]: fixture('provisioning__fleet__cost-ledger') };
+
+// ---- 1. one page, three sections, each on its own read ------------------------
+
+test('RUN: an owner finds spend and payouts, the treasury and the hosting bills on one page', async () => {
+  const t = await loadMoney({ responses: ALL, page: true });
+  await t.money.ready;
+  for (const id of ['payouts', 'the-treasury', 'hosting']) assert.equal(t.els[id].hidden, false, `#${id} is shown`);
+  assert.equal(t.els['money-empty'].hidden, true);
+  assert.match(t.els['payouts-body'].innerHTML, /Owed but not paid/);
+  assert.match(t.els['payouts-body'].innerHTML, /Money out, by month/);
+  assert.match(t.els['the-treasury-body'].innerHTML, /id="treasury-spend"/);
+  assert.match(t.els['hosting-body'].innerHTML, /example-project/);
+  assert.deepEqual([...t.requests].sort(), [CHECKS, LEDGER, OUTFLOW, TREASURY].sort(), 'the three feeds the three pages read, and nothing new');
+});
+
+test('RUN: a section whose read refuses stays hidden — never an empty panel', async () => {
+  // payout.approve refused, and no provisioning module (its route is not mounted)
+  const t = await loadMoney({ responses: { [OUTFLOW]: 403, [TREASURY]: costSummaryFixture, [LEDGER]: 404 }, page: true });
+  await t.money.ready;
+  assert.equal(t.els.payouts.hidden, true);
+  assert.equal(t.els.hosting.hidden, true, 'the hosting section shows only where the provisioning module answers, as /fleet did');
+  assert.equal(t.els['the-treasury'].hidden, false);
+  assert.ok(!t.requests.includes(CHECKS), 'no ledger check is read for a reader the outflow refused');
+});
+
+test('RUN: a page where nothing answers says so in one line instead of loading forever', async () => {
+  for (const responses of [{}, { [OUTFLOW]: new Error('down'), [TREASURY]: { daily: [], daily_credits: [] }, [LEDGER]: 403 }]) {
+    const t = await loadMoney({ responses, page: true });
+    await t.money.ready;
+    assert.equal(t.els['money-empty'].hidden, false);
+    for (const id of ['payouts', 'the-treasury', 'hosting']) assert.equal(t.els[id].hidden, true);
+  }
+});
+
+test('RUN: an old /fleet link lands on the hosting section once it is drawn', async () => {
+  const t = await loadMoney({ responses: ALL, page: true, hash: '#hosting' });
+  await t.money.ready;
+  assert.equal(t.els.hosting.scrolled, true);
+  const none = await loadMoney({ responses: {}, page: true, hash: '#hosting' });
+  await none.money.ready;
+  assert.equal(none.els.hosting.scrolled, false, 'a hidden section is not scrolled to');
+});
+
+test('the page waits for its sections: a Loading… line until one is shown', () => {
+  assert.match(moneyHtml, /<p class="hall-loading hall-loading--page hall-loading--wait" role="status">Loading…<\/p>/);
+  for (const id of ['payouts', 'the-treasury', 'hosting', 'money-empty']) {
+    assert.match(moneyHtml, new RegExp(`<section class="scroll" id="${id}" [^>]*hidden>`), `#${id} starts hidden`);
+  }
+});
+
+test('the page loads the kit and the hosting builders before its own script', () => {
+  const loaded = [...moneyHtml.matchAll(/<script[^>]+src="([^"?]+)/g)].map((m) => m[1].split('/').pop());
+  const at = (f) => loaded.indexOf(f);
+  assert.ok(at('hall-kit.js') > -1 && at('fleet-costs.js') > -1 && at('money.js') > -1);
+  assert.ok(at('hall-kit.js') < at('money.js') && at('fleet-costs.js') < at('money.js'));
+  assert.match(moneyHtml, /project-settings\.css/, 'the payout figures keep their sheet');
+});
+
+// ---- 2. the payouts section (moved from project-settings.js) --------------------
+
+test('RUN: the payouts lead with what is left after what is owed', async () => {
+  const { money } = await loadMoney();
+  const html = money.payoutsHtml(fixture('project-account__outflow'), null);
+  for (const label of ['Balance', 'Owed but not paid', 'Approved, not started', 'Left after all of that']) {
+    assert.ok(html.includes(`<span class="ps-money__label">${label}</span>`), label);
+  }
+  assert.equal(money.payoutsHtml(null, null), '');
+  assert.equal(money.payoutsHtml({ balance: null }, null), '');
+  assert.equal(money.lastTryWords({ last_outcome: 'held', last_reason: 'no_processor' }), 'Waiting — no payment processor connected yet');
+  assert.equal(money.lastTryWords({ last_outcome: 'failed', last_reason: 'some_code' }), 'Did not go through', 'an unknown code is left out, never shown as a slug');
+});
+
+// ---- 3. the treasury (moved from primer-live.js) -------------------------------
+
+test('RUN: the treasury draws from the payload, and its line ends on the total the prose states', async () => {
+  const { money } = await loadMoney();
+  const html = money.treasuryHtml(costSummaryFixture);
+  const usd = `$${Number(costSummaryFixture.total_usd).toLocaleString(undefined, { maximumFractionDigits: 0 })}`;
+  assert.ok(html.includes(`<strong>${usd}</strong>`), 'the spend total is stated');
+  assert.match(html, /id="treasury-spend"/);
+  assert.match(html, /id="treasury-earned"/);
+  assert.match(html, /Drachmae awarded, cumulative/, 'the currency word is the branding pack\'s');
+  assert.match(html, /<h3 class="ps-money__h" id="treasury-by-category">Spent, by kind<\/h3>/, 'under the section\'s h2, named apart from "Where the money went"');
+  assert.doesNotMatch(html, /NaN|Infinity/, 'a NaN in a path renders as an invisible chart with no error anywhere');
+  assert.doesNotMatch(html, /tabindex="0"/, 'no focus stop: nothing here wires a readout');
+  assert.doesNotMatch(html, /&amp;amp;|&amp;#/, 'nothing is escaped twice');
+});
+
+test('RUN: a treasury that holds nothing yet, or no chart kit, draws nothing', async () => {
+  const { money } = await loadMoney();
+  assert.equal(money.treasuryHtml(null), '');
+  assert.equal(money.treasuryHtml({ daily: [], daily_credits: [] }), '');
+  const noKit = await loadMoney({ responses: { [TREASURY]: costSummaryFixture }, page: true, kit: false });
+  await noKit.money.ready;
+  assert.equal(noKit.els['the-treasury'].hidden, true, 'without the chart kit there is nothing honest to draw');
+  assert.match(noKit.warnings.join('\n'), /OTBKit missing/);
+});
+
+test('the treasury reads the endpoint the status page draws, and draws only through the kit', () => {
+  assert.match(moneyJs, /TREASURY_URL = `\$\{API\}\/public\/cost-summary`/);
+  for (const fn of ['cumulateByDay', 'timeStepSeriesHtml', 'plotSvgHtml', 'plotValueLabelHtml', 'barSeriesHtml']) {
+    assert.match(moneyJs, new RegExp(`kit\\.${fn}\\(`), `the treasury draws through ${fn}`);
+  }
+  assert.doesNotMatch(moneyJs, /<(?:path|polyline|rect)\b[^>]*\b(?:d|points)="\$\{/, 'no hand-built SVG geometry');
+});
+
+// ---- 4. no money figure on two hall pages ---------------------------------------
+
+test('no other hall page reads the three money feeds', () => {
+  const FEEDS = [/project-account\/outflow/, /project-account\/ledger-checks/, /fleet\/cost-ledger/];
+  // fleet-costs.js is the hosting section's own drawing, loaded only by money.html.
+  const files = fs.readdirSync(HALL).filter((f) => /\.(js|html)$/.test(f) && !['money.js', 'fleet-costs.js'].includes(f));
+  for (const f of files) {
+    for (const re of FEEDS) assert.doesNotMatch(read(f), re, `${f} reads ${re} — that figure belongs on /money`);
+  }
+  // The treasury feed is also the Tasks board's credits tile (a count of credits,
+  // not money) — but no other page draws the treasury itself.
+  for (const f of ['project-settings.js', 'project-settings.html', 'primer.js', 'primer-live.js']) {
+    assert.doesNotMatch(read(f), /cost-summary|treasury-spend|Where the money went<\/h2>/, `${f} draws no money figure`);
+  }
+});
+
+test('Project settings and the Primer link to the money page instead', () => {
+  assert.match(read('project-settings.html'), /<a href="\/builders\/money">Money<\/a>/);
+  assert.doesNotMatch(read('project-settings.html'), /id="ps-money"/);
+  const md = fs.readFileSync(path.join(ROOT, 'docs', 'onboarding', 'primer.md'), 'utf8');
+  assert.match(md, /\[Money\]\(\.\.\/\.\.\/modules\/hall-ui\/public\/money\.html\)/, 'a hall-page link primer.js opens in the hall');
+  assert.doesNotMatch(read('primer-live.js'), /fillTreasury|treasuryHtml/);
+});
+
+// ---- 5. the gate, the nav and the old URL ---------------------------------------
+
+test('/money is behind the government page floor, and the nav mirrors it', () => {
+  const src = fs.readFileSync(path.join(ROOT, 'src', 'bongos', 'serve-internal.js'), 'utf8');
+  assert.match(src, /const MONEY_PAGE_RE = \/\^\\\/builders\\\/money\(\?:\\\.html\)\?\\\/\?\$\/;/);
+  assert.match(src, /\|\| MONEY_PAGE_RE\.test\(norm\)\) \{\n\s+return gdsAuth\.requireGovernmentPage\(req, res, next\);/);
+  assert.match(read('shell.js'), /\{ id: 'money', label: 'Money', icon: 'money', href: '\/money', gate: 'government', position: true \}/);
+  assert.doesNotMatch(read('shell.js'), /id: 'fleet'/, 'Fleet costs left the sidebar');
+  // the hosting section's data keeps its own wall: the route's atom, unchanged
+  const route = fs.readFileSync(path.join(ROOT, 'modules', 'provisioning', 'routes', 'provisioning.js'), 'utf8');
+  assert.match(route, /router\.get\('\/provisioning\/fleet\/cost-ledger', auth\.requireBuilder, auth\.requirePermission\('provisioning\.fleet\.manage'\)/);
+});
+
+async function withHall(fn) {
+  const express = require('express');
+  const { mountInternalSurfaces } = require('../src/bongos/serve-internal.js');
+  const app = express();
+  mountInternalSurfaces(app);
+  const server = app.listen(0, '127.0.0.1');
+  await new Promise((r) => server.once('listening', r));
+  const { port } = server.address();
+  const get = (p, host) => new Promise((resolve, reject) => {
+    http.get({ host: '127.0.0.1', port, path: p, headers: { host } }, (res) => {
+      res.resume();
+      res.on('end', () => resolve({ status: res.statusCode, location: res.headers.location || '' }));
+    }).on('error', reject);
+  });
+  try { await fn(get); } finally { server.close(); }
+}
+
+test('RUN: /fleet 302s to the money page\'s hosting section, in every form it was linked', async () => {
+  await withHall(async (get) => {
+    for (const form of ['/fleet', '/fleet/', '/fleet.html']) {
+      const r = await get(form, 'builders.127.0.0.1');
+      assert.equal(r.status, 302, `${form} is a temporary redirect, so a later re-point is never cached past`);
+      assert.equal(r.location, '/money#hosting');
+    }
+    const q = await get('/fleet?from=mail', 'builders.127.0.0.1');
+    assert.equal(q.location, '/money?from=mail#hosting', 'a query string rides along');
+  });
+});
+
+test('the states file shoots the redirected deep link too', () => {
+  const states = JSON.parse(read('money.states.json'));
+  assert.equal(states.page, '/builders/money');
+  assert.match(states.states.hosting.url, /#hosting$/);
+});