@bongos/core 1.24.44 → 1.24.46

package/modules/hall-ui/public/notes-panel.css

@@ -11,7 +11,7 @@
 .np-note__body { margin: 0; white-space: pre-wrap; overflow-wrap: anywhere; }
 .np-note__meta { margin: var(--sp-xs) 0 0; font-size: 12px; color: var(--ink-soft); display: flex; gap: var(--sp-md); flex-wrap: wrap; align-items: center; }
 .np-move select { font-size: 12px; }
-.np-link { background: none; border: 0; padding: 0; color: var(--accent); cursor: pointer; font: inherit; font-size: 12px; text-decoration: underline; }
+.np-link { background: none; border: 0; padding: 0; color: var(--accent); cursor: pointer; font: inherit; font-size: 12px; text-decoration: underline; min-height: 24px; min-width: 24px; display: inline-flex; align-items: center; } /* the 24px target floor (task 1005080) */
 .np-empty { color: var(--ink-soft); }
 .np-form { margin: var(--sp-lg) 0 0; display: grid; gap: var(--sp-sm); }
 .np-field { display: grid; gap: var(--sp-xs); font-size: 13px; }

package/modules/hall-ui/public/primer.html

@@ -113,7 +113,7 @@
 <script src="/builders/dom-utils.js?v=2026-11-05-numbers"></script>
 <script src="/builders/shell-trail.js?v=2026-11-05-numbers"></script>
 <script src="/builders/craft-mode.js?v=2026-11-05-goals"></script>
-<script src="/builders/shell.js?v=2026-11-05-goals"></script>
+<script src="/builders/shell.js?v=2026-11-06-sidebar"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- the shared markdown reader (window.OTBMdReader) — primer.js renders through

package/modules/hall-ui/public/primer.states.json

@@ -1,6 +1,8 @@
 {
   "_": "The hall's primer through modules/ui-design/kit/render.js (task 1003306). Written with the reading-room re-skin so the room's failure state and its table of contents are MEASURED at 1440/390/320 in both modes, not just looked at.",
   "page": "/builders/primer",
+  "_storage": "The hall asks a first-visit question (the session mode picker, craft-mode.js) over every page; seeding \"already asked\" renders the page a returning builder sees (task 1005080).",
+  "storage": { "session": { "hall-craft-asked": "1" } },
   "surface": "hall-ui",
   "stub": {
     "prefix": "/builders/"

package/modules/hall-ui/public/profile.html

@@ -249,7 +249,7 @@
 <script src="/builders/dom-utils.js?v=2026-11-05-numbers"></script>
 <script src="/builders/shell-trail.js?v=2026-11-05-numbers"></script>
 <script src="/builders/craft-mode.js?v=2026-11-05-goals"></script>
-<script src="/builders/shell.js?v=2026-11-05-goals"></script>
+<script src="/builders/shell.js?v=2026-11-06-sidebar"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- task 1004727: the ONE karma vote control every task/idea list renders -->

package/modules/hall-ui/public/profile.states.json

@@ -1,6 +1,8 @@
 {
   "_": "The hall's PROFILE page through modules/ui-design/kit/render.js (task 1003308; four screens behind the section rail since task 1003489 — overview, works, activity, connections). The identity band, the charts, the works ledger and the activity ledgers only exist once a profile has LOADED, so the floors run against the hall-preview harness (see settings.states.json for the two commands; pass --base-in/--base-out at it). One rail key renders at a time, so each key is its own state. `out` is a real state here rather than a redirect: a signed-out visitor with no ?id= gets the empty state, not a bounce — under the harness's --fixture-me the /me read still answers, so `out` renders the own profile there and the empty state only under the kit's own stub.",
   "page": "/profile",
+  "_storage": "The hall asks a first-visit question (the session mode picker, craft-mode.js) over every page; seeding \"already asked\" renders the page a returning builder sees (task 1005080).",
+  "storage": { "session": { "hall-craft-asked": "1" } },
   "surface": "hall-ui",
   "stub": {
     "prefix": "/builders/"

package/modules/hall-ui/public/project-settings.html

@@ -77,7 +77,7 @@
 <script src="/builders/dom-utils.js?v=2026-11-05-numbers"></script>
 <script src="/builders/shell-trail.js?v=2026-11-05-numbers"></script>
 <script src="/builders/craft-mode.js?v=2026-11-05-goals"></script>
-<script src="/builders/shell.js?v=2026-11-05-goals"></script>
+<script src="/builders/shell.js?v=2026-11-06-sidebar"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/hall-kit.js"></script>

package/modules/hall-ui/public/roster.html

@@ -59,7 +59,7 @@
 <script src="/builders/dom-utils.js?v=2026-11-05-numbers"></script>
 <script src="/builders/shell-trail.js?v=2026-11-05-numbers"></script>
 <script src="/builders/craft-mode.js?v=2026-11-05-goals"></script>
-<script src="/builders/shell.js?v=2026-11-05-goals"></script>
+<script src="/builders/shell.js?v=2026-11-06-sidebar"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- the branding pack's currency label, loaded BEFORE roster.js. -->

package/modules/hall-ui/public/roster.states.json

@@ -1,6 +1,8 @@
 {
   "_": "Builders — this project's OWN roster, ranked by credits earned (task 1003441, goal 1000075). Was the #leaderboard hash view on index.html; /#leaderboard now redirects here. Deliberately UNGATED, because its one data source (GET /leaderboard) is deliberately unauthenticated and mirrors the public status surface — so unlike a gated page's states file the `out` state below renders the real page rather than a seal. Populated look: the hall-preview harness (scripts/hall-preview/fixtures/public__leaderboard.json, since task 1004437 the list the page reads: fifteen builders with avatars, ranks, karma, tokens and each one's roles, including an artist and an ideator with no AI sessions).",
   "page": "/builders/roster",
+  "_storage": "The hall asks a first-visit question (the session mode picker, craft-mode.js) over every page; seeding \"already asked\" renders the page a returning builder sees (task 1005080).",
+  "storage": { "session": { "hall-craft-asked": "1" } },
   "surface": "hall-ui",
   "stub": {
     "prefix": "/builders/"

package/modules/hall-ui/public/settings.html

@@ -394,7 +394,7 @@
 <script src="/builders/dom-utils.js?v=2026-11-05-numbers"></script>
 <script src="/builders/shell-trail.js?v=2026-11-05-numbers"></script>
 <script src="/builders/craft-mode.js?v=2026-11-05-goals"></script>
-<script src="/builders/shell.js?v=2026-11-05-goals"></script>
+<script src="/builders/shell.js?v=2026-11-06-sidebar"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared component kit (window.OTBKit) — section rail (task 2166). -->

package/modules/hall-ui/public/settings.states.json

@@ -1,6 +1,8 @@
 {
   "_": "The hall's SETTINGS page through modules/ui-design/kit/render.js (task 1003308). Every panel on it is a form the page script fills from a dozen /me/* reads, so the floors run against the hall-preview harness rather than the kit's own stub:\n\n  node scripts/hall-preview/server.js --port 4621 --fixture-me\n  node modules/ui-design/kit/render.js --states modules/hall-ui/public/settings.states.json --base-in http://builders.localhost:4621 --base-out http://builders.localhost:4621\n\nOne group renders at a time behind the section rail, so each rail group is its own state. There is no `out` state on purpose: settings.js answers a 401 by navigating to the sign-in flow, and a state whose page navigates away measures the destination, not this page (the not-signed-in gate panel is the non-401 failure render, pinned statically in tests/hall_settings_world.mjs).",
   "page": "/settings",
+  "_storage": "The hall asks a first-visit question (the session mode picker, craft-mode.js) over every page; seeding \"already asked\" renders the page a returning builder sees (task 1005080).",
+  "storage": { "session": { "hall-craft-asked": "1" } },
   "surface": "hall-ui",
   "stub": { "prefix": "/builders/" },
   "modeQuery": false,

package/modules/hall-ui/public/shell.js

@@ -877,6 +877,23 @@
   // task 1004685: `positions` (seats held, null while unknown), `simRank` (?as=nobody's).
   var access = { authed: null, rank: null, graduated: false, showWork: false, permissions: null, needs: null, founding: null, positions: null, simRank: null };
 
+  // THE REMEMBERED NAV (task 1005070): pages are full loads and the gate waits on /me, so the rail booted empty. The last
+  // settled access paints at boot, /me settles the rest; cosmetic (ADR 0016), no needs roster; a 401/403 or sign-out forgets it.
+  var NAV_KEY = 'hall-nav-access', NAV_TTL = 24 * 60 * 60 * 1000;
+  function rememberAccess(b) {
+    if (access.authed !== true || !b || b.id == null) return;
+    var who = { id: b.id, rank: b.rank, display_name: b.display_name, github_login: b.github_login, avatar_url: b.avatar_url, preferred_disciplines: b.preferred_disciplines };
+    try { window.localStorage.setItem(NAV_KEY, JSON.stringify({ at: Date.now(), rank: access.rank, graduated: access.graduated, showWork: access.showWork, permissions: access.permissions, builder: who })); } catch (_) { /* private mode: wait for /me */ }
+  }
+  function forgetAccess() { try { window.localStorage.removeItem(NAV_KEY); } catch (_) { /* nothing kept */ } }
+  function recallAccess() {
+    var c; try { c = JSON.parse(window.localStorage.getItem(NAV_KEY) || 'null'); } catch (_) { return; }
+    if (!c || !c.builder || c.builder.id == null || !(Date.now() - c.at < NAV_TTL)) return;
+    access.authed = true; access.rank = c.rank ? String(c.rank).toLowerCase() : null; access.graduated = !!c.graduated; access.showWork = !!c.showWork;
+    access.permissions = (c.permissions && typeof c.permissions === 'object') ? c.permissions : null;
+    renderUser(c.builder); applyCraftEmphasis(c.builder);
+  }
+
   function gateAllows(gate) {
     var authed = access.authed === true;
     // ?as=nobody's stand-in rank only ever sits BELOW the real one (gov-positions.js).
@@ -1154,6 +1171,7 @@
       if (state.builder) { renderUser(state.builder); applyCraftEmphasis(state.builder); }
       // task 1004713: which seats this builder holds — /me's server-resolved block.
       if (state.builder && access.authed === true) { loadPositions(state.builder, state.positions); loadGithubChip(state.builder); }
+      if (state.builder && access.authed === true) rememberAccess(state.builder); else if (access.authed === false) forgetAccess(); // task 1005070
     }
     document.querySelectorAll('#app-sidebar [data-gate]').forEach(function (el) {
       var ok = gateAllows(el.dataset.gate);
@@ -1301,6 +1319,7 @@
   // live here, not only on the index (builders.js used to own it alone). Convert
   // the click into the real POST, then bounce home.
   function doLogout() {
+    forgetAccess(); // task 1005070: the next visitor's rail is not this builder's
     var finish = function () {
       // Mirror the SERVER logout (src/bongos/routes/auth.js): expire BOTH the
       // current gds_session and the legacy pms_session, each in BOTH the
@@ -1396,7 +1415,7 @@
     // the governor pages' living model reads /me too: it takes this answer (gov-feeds.js)
     HALL_READS['/me'] = meRead.then(function (res) { return res && res.ok ? res.data : (res && res.status === 403 ? false : null); }, function () { return null; });
     meRead.then(function (res) {
-      if (res.status === 401) { applyAccess({ authed: false }); return null; }
+      if (res.status === 401 || res.status === 403) { applyAccess({ authed: false }); return null; }
       if (!res.ok) return null;
       return res.data;
     }).then(function (me) {
@@ -1442,6 +1461,7 @@
   applyZoom();
   if (CRAFT) CRAFT.mount();
   applyFullscreen(storedFullscreen());
+  recallAccess(); // task 1005070: the last settled nav, so the rail paints before /me
   applyAccess(null); // default: everything gated until access is known
   wire();
   TRAIL.fillExits();

package/modules/hall-ui/public/street-card.states.json

@@ -1,6 +1,8 @@
 {
   "_": "THE MATTER CARD THAT ACTS (task 1004528, goal 1000125) on the street page, through modules/ui-design/kit/render.js. Kept beside street.states.json rather than inside it, so the street and its interiors (task 1004526) and the card each own their states. The populated card needs the hall-preview harness, whose government__docket.json puts the review-seat amendment on the board source (board:47) and whose government__board__items.json carries its ballot (item 47), with a canned answer for a vote:\n\n  node scripts/hall-preview/server.js --port 4625 --fixture-me\n  node modules/ui-design/kit/render.js --states modules/hall-ui/public/street-card.states.json --base-in http://localhost:4625 --base-out http://localhost:4625\n\nTask 1004566 adds a card per kind the docket carries (blocker, red-team report, core update, module re-check, a Full Idea and the review queue), each compact and with \"more\" open; the harness fixture carries them. Against the kit stub there is no docket and no pin, so these states are for the harness.",
   "page": "/builders/street",
+  "_storage": "The hall asks a first-visit question (the session mode picker, craft-mode.js) over every page; seeding \"already asked\" renders the page a returning builder sees (task 1005080).",
+  "storage": { "session": { "hall-craft-asked": "1" } },
   "surface": "hall-ui",
   "stub": {
     "prefix": "/builders/"

package/modules/hall-ui/public/street.html

@@ -231,7 +231,7 @@
 <script src="/builders/dom-utils.js?v=2026-11-05-numbers"></script>
 <script src="/builders/shell-trail.js?v=2026-11-05-numbers"></script>
 <script src="/builders/craft-mode.js?v=2026-11-05-goals"></script>
-<script src="/builders/shell.js?v=2026-11-05-goals"></script>
+<script src="/builders/shell.js?v=2026-11-06-sidebar"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/gov-living.js?v=2026-10-09-positions1"></script>
 <script src="/builders/gov-feeds.js?v=2026-10-09-living3"></script>

package/modules/hall-ui/public/street.states.json

@@ -1,6 +1,8 @@
 {
   "_": "THE STREET (task 1004525, goal 1000125) and inside every building and district (task 1004526) through modules/ui-design/kit/render.js. The page draws GET /government/docket, GET /goals, GET /goals/rollups and the viewer's GET /builders/:id/earnings; against the kit's own stub none exists, so every state renders the bare street (the nine civic buildings, no districts, no pins) with the readings saying the docket could not be read: a real state the floors must hold in. To look at the populated street, run it against the hall-preview harness, whose government__docket.json fixture carries the reference design's seven sample matters (3 need you, 2 moving, 2 settled) and whose goals fixtures carry the open goals:\n\n  node scripts/hall-preview/server.js --port 4625 --fixture-me\n  node modules/ui-design/kit/render.js --states modules/hall-ui/public/street.states.json --base-in http://localhost:4625 --base-out http://localhost:4625\n\nThe page follows the OS mode until the switch is pressed (then the hall's own 'hall-theme' preference), so the kit's dark/light emulation renders both modes.",
   "page": "/builders/street",
+  "_storage": "The hall asks a first-visit question (the session mode picker, craft-mode.js) over every page; seeding \"already asked\" renders the page a returning builder sees (task 1005080).",
+  "storage": { "session": { "hall-craft-asked": "1" } },
   "surface": "hall-ui",
   "stub": {
     "prefix": "/builders/",

package/modules/hall-ui/public/studio.html

@@ -225,7 +225,7 @@
 <script src="/builders/dom-utils.js?v=2026-11-05-numbers"></script>
 <script src="/builders/shell-trail.js?v=2026-11-05-numbers"></script>
 <script src="/builders/craft-mode.js?v=2026-11-05-goals"></script>
-<script src="/builders/shell.js?v=2026-11-05-goals"></script>
+<script src="/builders/shell.js?v=2026-11-06-sidebar"></script>
 <script src="/builders/palette.js" defer></script>
 <!-- The kit, for its ONE renderer: the full-size ship-time visual figure
      (task 1003829), which the older reviews still show. -->

package/modules/hall-ui/public/studio.states.json

@@ -1,6 +1,8 @@
 {
   "_": "The studio home (task 1003971 / BV2.TW16), built 1:1 on docs/design/mocks/tweak-mode/Main.dc.html: the night room, the greeting and its sub-line (editable in place as a tweak of builders:studio), the tally, Resume, and three quick actions opening glass panels (the Tweak/CopyWrite Flow, the Approval queue, Artist Review Status). Behind a quiet door, the older reviews (R06 of goal 1000074, task 1003117; retired in TW14) still answer the reviews filed before Tweak Mode. Against the kit's own stub the page renders its unread states (no copy-desk feeds). TO SEE IT POPULATED, point the kit at the hall-preview harness: `node scripts/hall-preview/server.js --port 4636 --fixture-me` then `render.js --base-in http://builders.localhost:4636 --base-out http://builders.localhost:4636`. The harness answers the tally, the pages and the next page from copy-desk__tally.json, copy-desk__pages.json and copy-desk__next.json (built by the real composers), Resume's counter from copy-desk__pages__draft.json, the studio's own lines from copy-desk__pages__draft-studio.json, the claim and the draft save from its CANNED WRITES, and the older reviews from tasks.json (whose first row IS a cascade artist review).",
   "page": "/builders/studio",
+  "_storage": "The hall asks a first-visit question (the session mode picker, craft-mode.js) over every page; seeding \"already asked\" renders the page a returning builder sees (task 1005080).",
+  "storage": { "session": { "hall-craft-asked": "1" } },
   "surface": "hall-ui",
   "stub": {
     "prefix": "/builders/"

package/modules/hall-ui/public/style.css

@@ -56,6 +56,10 @@
    here. It lives on the shell rules below and on a page's own body, because a
    body declaration beats an inherited :root value at every width and a token
    tier that carries a breakpoint silently defeats its own media query. */
+/* The shared token sheet (task 1005081): the scales — type, spacing, corners,
+   shadows, motion, stacking — every surface loads. Imported FIRST so this
+   sheet's own rules follow it; the hall's scale names below are aliases of it. */
+@import url("/modules/ui-design/public/tokens.css");
 @import url("page-notes.css");
 @import url("craft-review.css");
 
@@ -158,7 +162,7 @@
           thin on black, so light takes the mono and dark takes the body face.
           Take the token, never the family. ---- */
   --label-face:  var(--font-mono);
-  --label-size:  11px;
+  --label-size:  var(--ds-text-2xs);
   --label-space: .12em;
   --label-case:  uppercase;
 
@@ -166,11 +170,12 @@
           there is nothing behind it. Never a coloured glow. ---- */
   --type-halo: none;
 
-  /* ---- structure. --line is a WIDTH (note c). ---- */
-  --line:        1px;
-  --radius:      16px;
-  --radius-sm:   10px;
-  --radius-pill: 999px;
+  /* ---- structure. --line is a WIDTH (note c). The values live in the shared
+          token sheet (task 1005081); these names are the hall's aliases. ---- */
+  --line:        var(--ds-line);
+  --radius:      var(--ds-radius-panel);
+  --radius-sm:   var(--ds-radius-tile);
+  --radius-pill: var(--ds-radius-pill);
 
   /* ---- the shell's metrics. --topbar-h stays under the kit's 80px top-bar
           floor; --sidebar-w IS the rail, because v3 pins the rail at every
@@ -195,12 +200,12 @@
   /* ---- spacing: DESIGN.md's rhythm (6/10/14/22/34/52). The four-step
           --space-* scale task 2179 named aliases onto it, so no ported rule
           breaks; hairlines separate, padding does not. ---- */
-  --sp-hair: 6px;
-  --sp-xs:   10px;
-  --sp-sm:   14px;
-  --sp-md:   22px;
-  --sp-lg:   34px;
-  --sp-xl:   52px;
+  --sp-hair: var(--ds-space-hair);
+  --sp-xs:   var(--ds-space-xs);
+  --sp-sm:   var(--ds-space-sm);
+  --sp-md:   var(--ds-space-md);
+  --sp-lg:   var(--ds-space-lg);
+  --sp-xl:   var(--ds-space-xl);
   --space-1: var(--sp-hair);
   --space-2: var(--sp-xs);
   --space-3: var(--sp-sm);
@@ -216,7 +221,7 @@
   /* The world has no shadow vocabulary for UI, so this is spent only where an
      element floats over a scrim (the phone drawer, the deep-link card). Pure
      black with alpha is the one literal the Fifteen Rule allows, as a scrim. */
-  --shadow-pop: 0 18px 40px rgba(0, 0, 0, .28);
+  --shadow-pop: var(--ds-shadow-pop);
 
   /* ---- z ladder — content overlays (rank tips z-50, modals z-50, toast z-100,
      copy-toast z-1000, deeplink z-2000) must beat the chrome; the mobile drawer
@@ -225,17 +230,17 @@
      reading hairline sits UNDER the topbar so it reads as the article's
      progress and not as app chrome, and the diagram's fullscreen canvas is the
      top of the whole ladder because it covers the shell entirely. ---- */
-  --z-progress: 25;
-  --z-topbar: 30;
-  --z-sidebar: 40;
-  --z-scrim: 140;
-  --z-drawer: 150;
+  --z-progress: var(--ds-z-progress);
+  --z-topbar: var(--ds-z-topbar);
+  --z-sidebar: var(--ds-z-sidebar);
+  --z-scrim: var(--ds-z-scrim);
+  --z-drawer: var(--ds-z-drawer);
   /* A confirm dialog is the one thing that must sit above the drawer: it is
      asking a question the drawer's content cannot answer. Added by task 1003307
      because two pages had each guessed a bare number for exactly this
      (200 and 50), which is what a missing layer looks like. */
-  --z-modal: 160;
-  --z-diagram-full: 9999;
+  --z-modal: var(--ds-z-modal);
+  --z-diagram-full: var(--ds-z-diagram-full);
 
   /* ---- the hall's own plate: the declared seam, deferred by the owner
           ("decide after the shell lands", 2026-08-30). The hall's plate was
@@ -286,11 +291,10 @@ html[data-theme="dark"] {
   --info-weak:   color-mix(in srgb, var(--info) 14%, var(--bg-card));
   --focus:       var(--accent);
   --label-face:  var(--font-body);
-  --label-size:  11.5px;
+  --label-size:  var(--ds-text-2xs-plus);
   --label-space: .1em;
   --type-halo:   0 2px 18px rgba(0, 0, 0, .94), 0 0 54px rgba(0, 0, 0, .72);
   --surface-2:   color-mix(in srgb, var(--ink) 6%, var(--bg-card));
-  --shadow-pop:  0 18px 40px rgba(0, 0, 0, .62);
   --plate-veil:  linear-gradient(to bottom, rgba(0, 0, 0, .82), rgba(0, 0, 0, .93));
 }
 html[data-theme="dark"] body { background: var(--bg); }
@@ -327,11 +331,10 @@ html[data-theme="dark"] body { background: var(--bg); }
     --info-weak:   color-mix(in srgb, var(--info) 14%, var(--bg-card));
     --focus:       var(--accent);
     --label-face:  var(--font-body);
-    --label-size:  11.5px;
+    --label-size:  var(--ds-text-2xs-plus);
     --label-space: .1em;
     --type-halo:   0 2px 18px rgba(0, 0, 0, .94), 0 0 54px rgba(0, 0, 0, .72);
     --surface-2:   color-mix(in srgb, var(--ink) 6%, var(--bg-card));
-    --shadow-pop:  0 18px 40px rgba(0, 0, 0, .62);
     --plate-veil:  linear-gradient(to bottom, rgba(0, 0, 0, .82), rgba(0, 0, 0, .93));
   }
   html:not([data-theme]) body { background: var(--bg); }

package/modules/hall-ui/public/task.html

@@ -59,7 +59,7 @@
 <script src="/builders/dom-utils.js?v=2026-11-05-numbers"></script>
 <script src="/builders/shell-trail.js?v=2026-11-05-numbers"></script>
 <script src="/builders/craft-mode.js?v=2026-11-05-goals"></script>
-<script src="/builders/shell.js?v=2026-11-05-goals"></script>
+<script src="/builders/shell.js?v=2026-11-06-sidebar"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- task-detail.js still owns the #/idea/N and #/blocker/N deep-link overlay

package/modules/hall-ui/public/task.states.json

@@ -1,6 +1,8 @@
 {
   "_": "The hall's TASK RECORD through modules/ui-design/kit/render.js (task 1003305). The record's own controls — the dependency links, the lifecycle buttons, the figure band, the way back — only exist once a task has LOADED, so the floors here are run against the hall-preview harness rather than the kit's own stub, which carries the public-landing feeds and not the hall's:\n\n  node scripts/hall-preview/server.js --port 4612 --fixture-me\n  node modules/ui-design/kit/render.js --states modules/hall-ui/public/task.states.json --base-in http://builders.localhost:4612 --base-out http://builders.localhost:4612\n\nRun against the kit's own stubs instead and every state renders `no such task`, which is a real state and is the `missing` one below — just not the one the re-skin changed.",
   "page": "/task/2166",
+  "_storage": "The hall asks a first-visit question (the session mode picker, craft-mode.js) over every page; seeding \"already asked\" renders the page a returning builder sees (task 1005080).",
+  "storage": { "session": { "hall-craft-asked": "1" } },
   "surface": "hall-ui",
   "stub": { "prefix": "/builders/" },
   "modeQuery": false,

package/modules/hall-ui/public/thinking.html

@@ -141,7 +141,7 @@
 <script src="/builders/dom-utils.js?v=2026-11-05-numbers"></script>
 <script src="/builders/shell-trail.js?v=2026-11-05-numbers"></script>
 <script src="/builders/craft-mode.js?v=2026-11-05-goals"></script>
-<script src="/builders/shell.js?v=2026-11-05-goals"></script>
+<script src="/builders/shell.js?v=2026-11-06-sidebar"></script>
 <script src="/builders/palette.js" defer></script>
 
 <script src="/builders/idea-objects.js?v=2026-09-27-split"></script>

package/modules/hall-ui/public/thinking.states.json

@@ -1,6 +1,8 @@
 {
   "_": "THE SKY (task 1004231 / sky part 3 of 5, goal 1000095; ADR 0331) through modules/ui-design/kit/render.js. The page draws GET /sky + GET /sky/mine; against the kit's own stub neither exists, so every state below renders the EMPTY sky — a real state the floors must hold in (the composer, the tour, the list drawer and the lenses all exist with no thought filed). To look at the populated sky, run it against the hall-preview harness, whose sky.json + sky__mine.json fixtures carry the wells and one of each of the five objects:\n\n  node scripts/hall-preview/server.js --port 4615 --fixture-me\n  node modules/ui-design/kit/render.js --states modules/hall-ui/public/thinking.states.json --base-in http://localhost:4615 --base-out http://localhost:4615\n\nThe tour opens by itself on a first visit (sky-tour-seen), so states that want the bare sky skip it first.\n\nIN THE HALL (task 1004327): the page sits in the hall chrome, so it renders in BOTH modes — the chrome follows the hall theme and the sky's stage stays the void in both. The full-* states press the shell's full-screen switch: the sidebar and the top bar leave, and the one button that brings them back floats top right.",
   "page": "/builders/thinking",
+  "_storage": "The hall asks a first-visit question (the session mode picker, craft-mode.js) over every page; seeding \"already asked\" renders the page a returning builder sees (task 1005080).",
+  "storage": { "session": { "hall-craft-asked": "1" } },
   "surface": "hall-ui",
   "stub": { "prefix": "/builders/" },
   "modeQuery": false,

package/modules/hall-ui/public/tweak-editor.html

@@ -145,7 +145,7 @@
 <script src="/builders/dom-utils.js?v=2026-11-05-numbers"></script>
 <script src="/builders/shell-trail.js?v=2026-11-05-numbers"></script>
 <script src="/builders/craft-mode.js?v=2026-11-05-goals"></script>
-<script src="/builders/shell.js?v=2026-11-05-goals"></script>
+<script src="/builders/shell.js?v=2026-11-06-sidebar"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/brand-holes.js?v=2026-09-29-aqfix"></script>
 <script src="/builders/tweak-editor-lib.js?v=2026-09-29-tw27"></script>

package/modules/hall-ui/public/tweak-editor.states.json

@@ -1,6 +1,8 @@
 {
   "_": "The tweak editor (task 1004321 / BV2.TW10), built 1:1 on docs/design/mocks/tweak-mode/Editor.dc.html. Against the kit's own stub the page renders its could-not-read state (no /copy-desk feed), a state the floors must hold in. TO SEE IT POPULATED, point the kit at the hall-preview harness: `node scripts/hall-preview/server.js --port 4631 --fixture-me`, then `render.js --page '/builders/tweak-editor?page=landing:index' --base-in http://builders.localhost:4631 --base-out http://builders.localhost:4631`. The harness answers the read from fixtures/copy-desk__pages__draft.json (the real landing:index reading with the artboard's two rewrites as the saved draft), next up from copy-desk__next.json, and the autosave, the submit and the claim from its canned writes.",
   "page": "/builders/tweak-editor?page=landing:index",
+  "_storage": "The hall asks a first-visit question (the session mode picker, craft-mode.js) over every page; seeding \"already asked\" renders the page a returning builder sees (task 1005080).",
+  "storage": { "session": { "hall-craft-asked": "1" } },
   "surface": "hall-ui",
   "stub": {
     "prefix": "/builders/"

package/modules/hall-ui/public/watch.html

@@ -271,7 +271,7 @@
 <script src="/builders/dom-utils.js?v=2026-11-05-numbers"></script>
 <script src="/builders/shell-trail.js?v=2026-11-05-numbers"></script>
 <script src="/builders/craft-mode.js?v=2026-11-05-goals"></script>
-<script src="/builders/shell.js?v=2026-11-05-goals"></script>
+<script src="/builders/shell.js?v=2026-11-06-sidebar"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared component kit (window.OTBKit) — tabs, ledger, pager (task 2166). -->

package/modules/hall-ui/public/watch.states.json

@@ -1,6 +1,8 @@
 {
   "_": "Watch — the attention board behind requireGovernmentPage. The SEALED state (a viewer below the gate) is a real render, not an error page, so it is a state here. Written with the re-skin (task 1003307) so this page is MEASURED at three widths in both modes rather than looked at once.",
   "page": "/builders/watch",
+  "_storage": "The hall asks a first-visit question (the session mode picker, craft-mode.js) over every page; seeding \"already asked\" renders the page a returning builder sees (task 1005080).",
+  "storage": { "session": { "hall-craft-asked": "1" } },
   "surface": "hall-ui",
   "stub": {
     "prefix": "/builders/"

package/modules/hall-ui/public/welcome-boot.js

@@ -166,14 +166,18 @@
 
   var root = null, timers = [], returnFocus = null, shown = false, leaving = false;
 
+  function bannerTag(builder) { return builder ? 'div' : 'header'; }
   function overlayHtml(builder, now, when) {
     return '<div class="wb__art" aria-hidden="true"><div class="wb__pan">' +
         '<img class="wb__img" alt="" src="' + artFor(when) + '" decoding="async">' +
         '<div class="wb__fx" id="wb-fx"></div>' +
       '</div></div>' +
       '<div class="wb__cloud wb__cloud--a" aria-hidden="true"></div><div class="wb__cloud wb__cloud--b" aria-hidden="true"></div>' +
-      '<div class="wb__banner">' + logoHtml(window.__BRANDING__) +
-        '<span class="wb__version" id="wb-version" hidden></span></div>' +
+      // For a visitor the welcome IS the page (the shell draws no header for them), so its logo
+      // banner is the page's one <header>; over a signed-in hall the shell's header stands, and the
+      // banner stays a plain block (task 1005080).
+      '<' + bannerTag(builder) + ' class="wb__banner">' + logoHtml(window.__BRANDING__) +
+        '<span class="wb__version" id="wb-version" hidden></span></' + bannerTag(builder) + '>' +
       '<div class="wb__veil" aria-hidden="true"></div>' +
       '<button class="wb__skip" type="button" data-wb-skip>Skip</button>' +
       '<a class="wb__built" href="' + BUILT_ON.href + '" target="_blank" rel="noopener">Built on <b>' + BUILT_ON.label + '</b></a>' +

package/modules/hall-ui/public/work-founding.states.json

@@ -1,6 +1,8 @@
 {
   "_": "Project founding mode (task 1004422) on an ordinary hall page: the founding band above the topbar and today's nav items asleep, rendered from a /me that says founding (kit fixture me-founding.json, the real server shaper's output at stage strategize). The page itself is work.states.json's; only the identity differs. The no-founding case is every other hall states file.",
   "page": "/builders/work",
+  "_storage": "The hall asks a first-visit question (the session mode picker, craft-mode.js) over every page; seeding \"already asked\" renders the page a returning builder sees (task 1005080).",
+  "storage": { "session": { "hall-craft-asked": "1" } },
   "surface": "hall-ui",
   "stub": {
     "prefix": "/builders/",

package/modules/hall-ui/public/work.html

@@ -174,7 +174,7 @@
 <script src="/builders/dom-utils.js?v=2026-11-05-numbers"></script>
 <script src="/builders/shell-trail.js?v=2026-11-05-numbers"></script>
 <script src="/builders/craft-mode.js?v=2026-11-05-goals"></script>
-<script src="/builders/shell.js?v=2026-11-05-goals"></script>
+<script src="/builders/shell.js?v=2026-11-06-sidebar"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- task 1004727: the ONE karma vote control every task/idea list renders -->

package/modules/hall-ui/public/work.states.json

@@ -1,11 +1,13 @@
 {
   "_": "The hall's Work Board through modules/ui-design/kit/render.js (task 1003304). Written with the re-skin so the board's four tabs and its selection state are measured at 1440/390/320 in both modes, not just looked at. The populated look is the hall-preview harness (scripts/hall-preview/server.js); this file is the FLOORS.",
   "page": "/builders/work",
+  "_storage": "The hall asks a first-visit question (the session mode picker, craft-mode.js) over every page; seeding \"already asked\" renders the page a returning builder sees (task 1005080).",
+  "storage": { "session": { "hall-craft-asked": "1" } },
   "surface": "hall-ui",
   "stub": { "prefix": "/builders/" },
   "modeQuery": false,
   "_feeds": "The kit's stub carries a small fixture set, not the hall's task feeds, so the board renders its EMPTY and SKELETON states here — which is the point: an empty queue is a state the floors must hold in. The feed 404s are declared, never hidden.",
-  "ignoreRequests": ["/api/(gds|bongos)/me$", "/api/(gds|bongos)/me/", "/api/(gds|bongos)/tasks", "/api/(gds|bongos)/claims", "/api/(gds|bongos)/goals", "/api/(gds|bongos)/inbox/", "/api/(gds|bongos)/versions"],
+  "ignoreRequests": ["/api/(gds|bongos)/live", "/api/(gds|bongos)/me$", "/api/(gds|bongos)/me/", "/api/(gds|bongos)/tasks", "/api/(gds|bongos)/claims", "/api/(gds|bongos)/goals", "/api/(gds|bongos)/inbox/", "/api/(gds|bongos)/versions"],
   "ignoreConsole": ["/api/(gds|bongos)/", "\\b401\\b", "\\b404\\b", "Unauthorized", "Not Found", "load failed"],
   "states": {
     "ready": { "auth": true, "expect": { "visible": ["#claim-scroll"], "hidden": ["#wip-scroll", "#backlog-scroll", "#history-scroll"] } },

package/modules/hall-ui/records/hall-navigation.md

@@ -28,3 +28,8 @@ Covers: every shelled hall page (`shell.js`, `style.css`), plus `goal-map.html`
 `goal-map.html` now uses thinking.html's structure: sidebar and top-bar mounts, `style.css`, `shell.js`, the sky inside `<main id="hall-main" class="sky-stage">`, and a `<div class="brand">` because the shell's bar is the page's one `<header>`. In `thinking.css` both pages share one stage rule, `body[data-page] .sky-stage`. No hall page is standalone any more (`tests/hall_audit.mjs` `STANDALONE_EXEMPT` is empty).
 
 Tests: `tests/hall_fullscreen.mjs` (the standard switch, `plain`, Back link, trail, fallback and exit cases), `tests/hall_record_world.mjs` §10 (the record places its exit), `tests/goal_map_page.mjs`, `tests/hall_audit.mjs` §8.
+
+## The rail paints at once, and Home is one button (task 1005070)
+
+- Every hall page is a full load, and the gate waits on `/me`, so the rail used to boot with only Home and pop the rest in once `/me` answered — longest for the owner, whose `/me` is the heaviest. `shell.js` now keeps the last settled access in `localStorage['hall-nav-access']` (rank, graduated/showWork, the nav permission map, the user chip; never the needs roster, so no badge is stale) and paints from it at boot. `/me` still settles the real state. It is forgotten on any signed-out settle (a 401 or a refused 403) and by the sign-out link, and is not painted once a day old.
+- In a craft the plate under the brand is the Home button (task 1005065), so no mode's tab list names `home` — Building used to, which drew two home icons. With no craft chosen there is no plate and the Home tab shows. Pinned in `tests/craft_mode_nav.mjs`.

package/modules/lifecycle/db-claims.js

@@ -108,7 +108,7 @@ function isRebaseGateExempt(task) {
   return Boolean(task) && task.kind === 'infra' && Number(task.priority) === 1;
 }
 
-async function claimTask({ taskId, builderId, worktreeName, headSha, creatorSessionId, enforceOverlap = false, autoPickup = false }) {
+async function claimTask({ taskId, builderId, worktreeName, headSha, creatorSessionId, enforceOverlap = false, autoPickup = false, autonomous = false }) {
   const heldPermissions = await claimPermissionsFor(builderId); // BV1.R106 — before the tx opens
   // ADR 0371 D5: a marked claim needs the project's switch and cap, read before the
   // tx like the permissions above; the COUNT runs inside it, under the lock.
@@ -433,9 +433,12 @@ async function claimTask({ taskId, builderId, worktreeName, headSha, creatorSess
 
     // The column is named only on a marked claim, so an ordinary claim's insert is
     // byte-identical to before core_275.
+    // `autonomous` (core_295, task 1004547) is the server's mark that an Autobongos
+    // runner's own login made this claim — set by the claims route from the SESSION,
+    // never from the body. Like auto_pickup, the column is named only when true.
     const insertClaim = await client.query(
-      `INSERT INTO claims (task_id, builder_id, worktree_name, requested_worktree_name, head_sha, reserved_migration_number, creator_session_id${autoPickup ? ', auto_pickup' : ''})
-       VALUES ($1, $2, $3, $4, $5, $6, $7${autoPickup ? ', TRUE' : ''})
+      `INSERT INTO claims (task_id, builder_id, worktree_name, requested_worktree_name, head_sha, reserved_migration_number, creator_session_id${autoPickup ? ', auto_pickup' : ''}${autonomous ? ', autonomous' : ''})
+       VALUES ($1, $2, $3, $4, $5, $6, $7${autoPickup ? ', TRUE' : ''}${autonomous ? ', TRUE' : ''})
        RETURNING id, task_id, builder_id, worktree_name, requested_worktree_name, claimed_at, head_sha, reserved_migration_number`,
       [taskId, builderId, finalWorktreeName, requestedWorktreeName, headSha ?? null, reservedMigrationNumber, creatorSessionId ?? null]
     );

package/modules/lifecycle/routes/claims.js

@@ -305,6 +305,10 @@ module.exports = function buildClaimsRouter() {
         creatorSessionId: resolveCreatorSessionId(bindSession, req.gdsSession?.session_id),
         enforceOverlap: enforceTouches === true,
         autoPickup: autoPickup === true,
+        // task 1004547: an Autobongos runner's own login marks its claim
+        // autonomous. Read from the SESSION (auth.requireBuilder), never the body,
+        // so a worker cannot claim its way out of the runner-only walls.
+        autonomous: !!(req.builder && req.builder.runner),
       });
       const { just_unlocked: justUnlocked, overlap_warning: overlapWarning, sibling_overlap_warning: siblingOverlapWarning, page_notice: pageNotice, ...claim } = claimResult;
       const task = await db.getTask(Number(taskId));
@@ -476,6 +480,12 @@ module.exports = function buildClaimsRouter() {
     if (taskIds.length === 0) {
       return res.fail('task_ids_required', 400);
     }
+    // task 1004547: a batch claim binds only its first row to the session, so it
+    // cannot carry the autonomous mark row by row. A runner works one task per
+    // worker and never batch-claims, so its own login is refused here outright.
+    if (req.builder && req.builder.runner) {
+      return res.fail('runner_batch_refused', { status: 403, message: 'An Autobongos runner claims one task at a time. Use POST /claims.' });
+    }
     if (taskIds.length > 20) {
       // Safety cap. The optimizer doesn't return more than a handful at a time,
       // and unlimited batches let one slow transaction lock up the table.

package/modules/lifecycle/routes/tasks.js

@@ -1184,7 +1184,7 @@ module.exports = function buildTasksRouter() {
         `Merging triggers .github/workflows/deploy-prod.yml -> ${branding().domains.publicOrigin}. ` +
         prMergeSentence(held);
       const pr = await githubPush.openOrFindPullRequest({ branch, title, body });
-      const prReads = sharedPrReads(); for (const [guard, refusalFor] of [[autoPickupFiles, autoPickupFiles.autoPickupFileRefusal], [runnerSelfGuard, runnerSelfGuard.runnerSelfEditRefusal]]) { const refusal = await refusalFor({ taskId: id, prNumber: pr.number, branch }, { getPullRequestFiles: prReads.getPullRequestFiles }); if (refusal) { await githubPrClose.closePullRequest({ number: pr.number }).catch(() => null); return res.fail(refusal.code, 409, { ...refusal, message: guard.refusalMessage(refusal) }); } } // the PR's own files: an auto-pickup round stays on its page (ADR 0371 D8, task 1004678); a runner never changes its own files (task 1004546)
+      const prReads = sharedPrReads(); for (const [guard, refusalFor] of [[autoPickupFiles, autoPickupFiles.autoPickupFileRefusal], [runnerSelfGuard, runnerSelfGuard.runnerSelfEditRefusal]]) { const refusal = await refusalFor({ taskId: id, prNumber: pr.number, branch, publisherIsRunner: !!(req.builder && req.builder.runner) }, { getPullRequestFiles: prReads.getPullRequestFiles }); if (refusal) { await githubPrClose.closePullRequest({ number: pr.number }).catch(() => null); return res.fail(refusal.code, 409, { ...refusal, message: guard.refusalMessage(refusal) }); } } // the PR's own files: an auto-pickup round stays on its page (ADR 0371 D8, task 1004678); a runner never changes its own files (task 1004546), whoever's claim it is when a runner login publishes (task 1004547)
       // Best-effort by contract (pr-assign.js never rejects); the catch is for a future
       // edit that forgets — an assignment must not be able to fail a pushed ship.
       const assignment = await prAssign.assignPullRequest({ number: pr.number, login: builderLogin })