@bongos/core 1.24.79 → 1.24.80

package/modules/hall-ui/public/watch.js

@@ -142,7 +142,9 @@
     if (!res.ok) {
       // the envelope (ADR 0116) nests the sentence under `error`; older handlers answer flat
       const env = data.error && typeof data.error === 'object' ? data.error : null;
-      throw new Error((env && env.message) || data.message || (typeof data.error === 'string' ? data.error : '') || `${path} → ${res.status}`);
+      const e = new Error((env && env.message) || data.message || (typeof data.error === 'string' ? data.error : '') || `${path} → ${res.status}`);
+      if (env && env.code) e.code = env.code; // the repo invite branches on repo_scope_required
+      throw e;
     }
     return data;
   }
@@ -276,6 +278,10 @@
   const ghost = (attrs, label, danger = false) =>
     `<button type="button" class="btn-ghost${danger ? ' btn-ghost--danger' : ''}" ${attrs}>${label}</button>`;
 
+  // The GitHub repository half of an invite (watch-repo-invite.js): a separate door from
+  // the hall invite, and always read-only.
+  const repoInvite = window.OTBWatchRepoInvite.make({ api, API, postJson, $ });
+
   // =========================================================================
   // 1. GATE — access requests (pending)
   // =========================================================================
@@ -299,8 +305,10 @@
       '<label class="ov-field__l" for="gate-invite-login">Invite by GitHub username</label>' +
       '<input type="text" id="gate-invite-login" name="github_login" autocomplete="off" placeholder="e.g. octocat" maxlength="40">' +
       '</div>' +
+      repoInvite.formFieldsHtml() + // the GitHub repository is a separate door
       '<button type="submit" class="btn-accent">Invite</button>' +
       `<p class="ov-form__why">${escapeHtml(why)}</p>` +
+      repoInvite.explainerHtml() +
       '</form>'
     );
   }
@@ -337,11 +345,14 @@
       const login = ((input && input.value) || '').trim().replace(/^@/, '');
       if (!login) { toast('A GitHub username is needed.'); return; }
       const btn = form.querySelector('button[type="submit"]');
+      const repo = repoInvite.readForm(form);
       if (btn) btn.disabled = true;
       try {
         const r = await postJson('/access-requests/invite', { github_login: login });
         toast(r.already_invited ? `@${login} is already invited.` : `@${login} invited — their sign-in gets in.`);
+        const repoResult = repo.want ? await repoInvite.inviteToRepo(login) : null;
         await loadGate();
+        if (repoResult) repoInvite.showRepoNote(repoResult);
       } catch (err) {
         if (err && err.kind === '401') return;
         if (btn) btn.disabled = false;
@@ -493,7 +504,9 @@
     // the only move, so the row offers none.
     if (r.expired) return '';
     if (r.status === 'invited') {
-      return ghost(`data-gate-action="dismissed" data-gate-from="invited" data-id="${id}"`, 'Rescind', true);
+      // The GitHub repository is its own door: check where this person stands on it, and
+      // send (or re-send) a read-only invite. A Google-only member has no GitHub name.
+      return repoInvite.rowButtonHtml(r, ghost) + ghost(`data-gate-action="dismissed" data-gate-from="invited" data-id="${id}"`, 'Rescind', true);
     }
     if (r.status === 'dismissed') return '';
     return ghost(`data-gate-action="invited" data-id="${id}"`, 'Invite')
@@ -533,6 +546,7 @@
       vouchedHandleHtml(r, !!profile) +
       `<span class="ov-row__when">Asked ${escapeHtml(fmtDate(r.created_at))}</span>` +
       decided +
+      repoInvite.rowStateHtml(r) +
       '</div>' +
       '</div>' +
       (actions ? `<div class="ov-row__right"><div class="ov-row__actions">${actions}</div></div>` : '') +
@@ -638,6 +652,7 @@
     if (requests.length) {
       wireActions(target, '[data-gate-bulk]', (btn) =>
         inviteAll(String(btn.getAttribute('data-ids') || '').split(',').filter(Boolean)), 'Could not invite');
+      wireActions(target, '[data-gate-gh]', repoInvite.gateGithubStep, 'Could not check GitHub');
       wireActions(target, '[data-gate-action]', async (btn) => {
         const id = btn.getAttribute('data-id');
         const status = btn.getAttribute('data-gate-action');

package/modules/hall-ui/public/welcome-boot.js

@@ -10,8 +10,9 @@
 // hall underneath.
 //
 // Rules:
-//   - A signed-in builder sees it once per LOCAL day, and again after every fresh sign-in (the
-//     sign-in click leaves a flag in localStorage that the return visit consumes). Storage that
+//   - A signed-in builder sees it once per LOCAL day. A fresh sign-in (the sign-in click leaves a
+//     flag in localStorage that the return visit consumes) opens on the game's start screen
+//     instead (task 1005143, shell-game.js); without that file it is greeted here as before. Storage that
 //     throws cannot remember, so such a browser is never shown it (it would replay on every visit).
 //   - A visitor who is not signed in sees the Welcome on Home, every visit, with a "Sign in with
 //     GitHub" button in place of the role choices. Only on Home, never over a deep link (#/task/N, #/idea/N).
@@ -73,11 +74,12 @@
 
   // ---------- the roles (the owner's mapping) ----------
   // `mode` is the craft mode the pick sets; `href` null means stay on Home.
+  // The game's three characters (task 1005141): Owner became Patron, and the
+  // ideator's and the artist's doors are one Artist door (the studio).
   var ROLES = [
-    { id: 'owner', label: 'Owner', room: 'City', href: '/city', mode: 'governing', dot: 'var(--accent)' },
-    { id: 'ideator', label: 'Ideator', room: 'Your thinking', href: '/thinking', mode: 'ideating', dot: 'var(--warn)' },
-    { id: 'artist', label: 'Artist', room: 'Studio', href: '/studio', mode: 'artistry', dot: '#f472b6' },
-    { id: 'engineer', label: 'Engineer', room: 'Home', href: null, mode: 'building', dot: '#60a5fa' },
+    { id: 'patron', label: 'Patron', room: 'City', href: '/city', mode: 'patron', dot: 'var(--accent)' },
+    { id: 'artist', label: 'Artist', room: 'Studio', href: '/studio', mode: 'artist', dot: '#f472b6' },
+    { id: 'artisan', label: 'Artisan', room: 'Home', href: null, mode: 'artisan', dot: '#60a5fa' },
   ];
   function rolesFor(craft) {
     return ROLES.filter(function (r) { return !craft || typeof craft.offered !== 'function' || craft.offered(r.mode); });
@@ -382,6 +384,13 @@
     } catch (_) { return false; }
     shown = true;
     var c = craft();
+    // A fresh sign-in opens on the game's start screen instead (task 1005143, shell-game.js): the
+    // same still behind it, and the craft picker asked once the world is showing.
+    var game = window.OTBShellGame;
+    if (fresh && game && typeof game.start === 'function' && game.start({
+      name: projectName(window.__BRANDING__), art: artFor(timeOfDay(now)),
+      done: function () { if (c && typeof c.onAccess === 'function') c.onAccess(access, builder); },
+    })) return true;
     if (c && typeof c.markAsked === 'function') c.markAsked();
     show(builder);
     return true;

package/modules/hall-ui/public/work.html

@@ -8,7 +8,7 @@
   <link rel="icon" href="/modules/ui-design/public/brand/favicon.svg" type="image/svg+xml">
   <link rel="preconnect" href="https://fonts.googleapis.com">
   <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
-  <link rel="stylesheet" href="/builders/style.css?v=2026-07-02-shell1">
+  <link rel="stylesheet" href="/builders/style.css?v=2026-11-10-options">
   <!-- Page-local styles (task 2170) — extracted from the old inline <style>
        block per the hall placement rules; shared pager/count-pill styles now
        live in style.css's hall-kit section. -->
@@ -172,10 +172,10 @@
 <!-- The app shell (sidebar + top bar + footer). Dependency-free; runs at parse
      time so the chrome exists before the deferred page scripts execute. -->
 <script src="/builders/dom-utils.js?v=2026-11-05-numbers"></script>
-<script src="/builders/shell-game.js?v=2026-11-09-game-mode"></script>
+<script src="/builders/shell-game.js?v=2026-11-10-options"></script>
 <script src="/builders/shell-trail.js?v=2026-11-05-numbers"></script>
-<script src="/builders/craft-mode.js?v=2026-11-05-goals"></script>
-<script src="/builders/shell.js?v=2026-11-09-game-mode"></script>
+<script src="/builders/craft-mode.js?v=2026-11-10-visor"></script>
+<script src="/builders/shell.js?v=2026-11-10-character"></script>
 <script src="/builders/hall-dialog.js"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
@@ -192,7 +192,7 @@
 <script src="/builders/mine-lens.js" defer></script>
 <!-- the Completed tab's project-wide momentum card (window.OTBWorkSummary), carved out of work.js. -->
 <script src="/builders/work-summary.js" defer></script>
-<script src="/builders/task-detail.js?v=2026-07-03-taskdetail" defer></script>
+<script src="/builders/task-detail.js?v=2026-11-10-options" defer></script>
 <script src="/builders/brand-apply.js?v=2026-06-19-r56" defer></script>
 <script src="/builders/bulk-toolbar.js" defer></script>
 <script src="/builders/work.js?v=2026-09-30-bulktoolbar" defer></script>

package/modules/hall-ui/records/builders-roster.md

@@ -11,12 +11,12 @@ Pinned by `tests/hall_nav.mjs` (the Community group's middle id is `roster`) and
 
 ## The roles (task 1004437, WA6.RP07)
 
-Owner decision (b), 2026-09-30: the leaderboard gets BOTH a column naming each builder's roles and the Everyone / Engineers / Artists / Ideators toggle above it. The approved mock is `docs/design/mocks/profile-roles/` (`?state=board`, `?state=board-artists`).
+Owner decision (b), 2026-09-30: the leaderboard gets BOTH a column naming each builder's roles and the Everyone / Engineers / Artists / Ideators toggle above it (Everyone / Artisans / Artists since task 1005141, `roster.js` `ROLE_CHIPS`). The approved mock is `docs/design/mocks/profile-roles/` (`?state=board`, `?state=board-artists`).
 
 - **The roster now reads `GET /public/leaderboard`,** the list the status page reads, which carries each row's `roles` (`src/bongos/role-stats.js` `readRolesForBuilders`: the profile's own main/shown rules, two reads for the whole page) and, since this task, `karma`. The hall and the public page cannot rank a role differently. The authed `/leaderboard` is unchanged and no longer read by the hall.
 - **Roles column:** one pill per role in `roles.shown`, the main one a step stronger. `shown` is the main role plus every craft the builder has EARNED in, so it is evidence of work, not only a declared preference.
 - **The toggle** keeps the builders a craft is shown for and ranks them by the credits that craft earned (`roles.credits_by_craft`, in the row: ADR 0255). The place column becomes the place inside that craft, the credits header says "Credits as artist", and the karma/rank/tokens lenses still apply on top.
-- **Tokens only where they apply.** A builder with no recorded AI session (an artist in the studio, an ideator in the room) reads a dash, and the cell's tooltip says no AI sessions were recorded, instead of a 0 and a "0 tokens per credit" figure that read as "did nothing".
+- **Tokens only where they apply.** A builder with no recorded AI session (an artist in the studio or in the room) reads a dash, and the cell's tooltip says no AI sessions were recorded, instead of a 0 and a "0 tokens per credit" figure that read as "did nothing".
 - **Home's Standing card** reads the same list and adds "#N as an artist" beside "#N on the leaderboard" when the place inside the builder's main role differs from the overall one (`hall-render.js` `rolePlaceText`).
 - **The status page** names each builder's roles under their name, on that page's own palette (`status.js` `renderRoles`).
 

package/modules/hall-ui/records/craft-mode.md

@@ -4,10 +4,12 @@ Covers: every shelled hall page (`craft-mode.js`, `shell.js`, `style.css`), and
 
 ## What it is
 
-- On entering the hall, once per browser session, a signed-in builder is asked **"What are you doing now?"**: Building, Artistry, Ideating or Governing. A fifth choice, **Legacy mode** (2026-10-01: the hall exactly as it was), was removed in task 1004567 (owner, 2026-10-04: "builder has all those tabs anyways"); a browser that still has `legacy` stored reads it as no mode, because `valid()` ignores any id that is not a mode. The approved prototype is the design canvas linked on the task; the doors carry its four scenes (the work desk, the night room, the sky, the governor city).
-- The answer is ONE attribute, `html[data-craft="building|artistry|ideating|governing"]`, readable by every hall page. Every change also fires `otb:craft` on `document` with `{ detail: { mode } }`, so a page can react without polling.
-- The top bar carries a switch with all four; pressing one changes the mode without a reload. Under 1180px it drops the words; at phone width only the current mode shows (or a "Choose your mode" button when there is none), and tapping it opens the picker.
-- Artistry is pre-selected for a builder whose `main_discipline` is `artist` (or, with no main role, whose first craft is).
+> **Renamed by task 1005141.** The four modes are three now: Building is **Artisan** (`artisan`), Artistry and Ideating are one **Artist** (`artist`), Governing is **Patron** (`patron`). A mode stored under an old id is read as the new one (`LEGACY_MODES`). Lines below that name the old modes are the record of what was built.
+
+- On entering the hall, once per browser session, a signed-in builder is asked **"What are you doing now?"**: Artisan, Artist or Patron (Building, Artistry, Ideating or Governing until task 1005141). A fifth choice, **Legacy mode** (2026-10-01: the hall exactly as it was), was removed in task 1004567 (owner, 2026-10-04: "builder has all those tabs anyways"); a browser that still has `legacy` stored reads it as no mode, because `valid()` ignores any id that is not a mode. The approved prototype is the design canvas linked on the task; the doors carry its four scenes (the work desk, the night room, the sky, the governor city).
+- The answer is ONE attribute, `html[data-craft="artisan|artist|patron"]`, readable by every hall page. Every change also fires `otb:craft` on `document` with `{ detail: { mode } }`, so a page can react without polling.
+- The top bar carries a switch with all three; pressing one changes the mode without a reload. Under 1180px it drops the words; at phone width only the current mode shows (or a "Choose your mode" button when there is none), and tapping it opens the picker.
+- Artist is pre-selected for a builder whose `main_discipline` is `artist` (or, with no main role, whose first craft is).
 
 ## The rules an edit here must keep
 
@@ -24,13 +26,13 @@ Covers: every shelled hall page (`craft-mode.js`, `shell.js`, `style.css`), and
 ## The nav follows the mode (task 1004493)
 
 - **Each craft has a named tab list**, `MODE_TABS` in `craft-mode.js`, by NAV id. `ALWAYS_TABS` is the owner's list of tabs no mode may hide (2026-10-01: Builders, NAV id `roster`, first), and every mode's list is `ALWAYS_TABS` plus its own. No mode has no entry, so it shows every tab, as before.
-- **Government shows only in Governing**, and outside that group Governing is the shortest list (Blockers, Board Room). Building is every tab except Government and the Board Room; Artistry is Studio, Goals, Your thinking; Ideating is Sky, Your thinking, Goals. The prototype names rooms that do not exist yet (Store, Page reviews, Treasury); a list names only real NAV items, and `tests/craft_mode_nav.mjs` requires every NAV item to sit in some mode.
+- **Government shows only in Patron**, which leads with City and folds its other tabs under More (`MODE_LEAD`). Artisan is Goals, Goal map, Work, Blockers, Your thinking, Studio, Market Watch; Artist is Studio, Goals, Your thinking, Goal map, Market Watch (`MODE_TABS`). The prototype names rooms that do not exist yet (Store, Page reviews, Treasury); a list names only real NAV items, and `tests/craft_mode_nav.mjs` requires every NAV item to sit in some mode.
 - **The mode only ever takes away, and never through `hidden`.** The access gate owns `hidden`; `applyNav()` marks what the mode leaves out with `[data-craft-off]`, which `style.css` hides. So a mode can never show a tab the gate hid, and switching mode just moves the attribute. A group head goes too once nothing under it shows.
 - **Two callers.** `apply()` runs it on every mode change (live, no reload), and `shell.js` `applyAccess` runs it right after its gate loop, so a later `/me` answer (a promotion, a permission) brings a head back with its tabs. Hidden tabs still open by their URL; nothing is enforced (ADR 0016).
 
 ## Each mode's look (task 1004495)
 
-- **Three modes wear a look; Building and no mode wear none.** Artistry, Ideating and Governing each set `--craft` (where you are) and `--craft-on` (text on it) on `html[data-craft="<mode>"]`, with a dark twin on `html[data-theme="dark"][data-craft="<mode>"]` that also darkens the ground and tints the glass (Artistry, Ideating). Values and contrast are the direction's, `docs/design/craft-mode-direction.md`. No rule in `style.css` names `building`, and none matches any mode at all; `tests/craft_mode_looks.mjs` pins both, and re-measures every colour pair.
+- **Two modes wear a look; Artisan and no mode wear none.** Artist and Patron each set `--craft` (where you are) and `--craft-on` (text on it) on `html[data-craft="<mode>"]`, with a dark twin on `html[data-theme="dark"][data-craft="<mode>"]` that also darkens the ground and tints the glass. Values and contrast are the direction's, `docs/design/craft-mode-direction.md`. No rule in `style.css` names `artisan`, and none matches any mode at all; `tests/craft_mode_looks.mjs` pins both, and re-measures every colour pair.
 - **The accent stays the action colour.** `--craft` paints only the switch's current pill, the current tab (tint, icon, label, marker) and the top bar's hairline.
 - **Two pieces are drawn by `craft-mode.js` `applyLook()`, on every mode change:** the eyebrow beside `#topbar-title` (`LOOKS`: "the studio · night", "the sky", "the city"; hidden at <=640px, where it overflowed phones) and the scene plate under `.app-sidebar__brand` (40px closed rail, 64px open). The plate's markup IS `artHtml(mode)`, the picker's door art, exported rather than copied; light mode recolours it to each scene's day (the city is the dark one through `invert(1) hue-rotate(180deg)`). It does not animate.
 - **Always-present tabs widened** (owner, 2026-10-03): `ALWAYS_TABS` is Builders, Collab and Profile, so every mode keeps the You and Community groups.
@@ -38,7 +40,7 @@ Covers: every shelled hall page (`craft-mode.js`, `shell.js`, `style.css`), and
 
 ## The paintbrush (task 1004497)
 
-- **Artistry carries two tools**: the palette (a feedback doc, `page-notes.js`, record `page-notes.md`) and the paintbrush (`paintbrush.js`). Both are `TOOLS` entries in `craft-mode.js` and load their own script on first press.
+- **Artist carries the palette and the paintbrush** (and the lightbulb, below): the palette (a feedback doc, `page-notes.js`, record `page-notes.md`) and the paintbrush (`paintbrush.js`). Both are `TOOLS` entries in `craft-mode.js` and load their own script on first press.
 - **The paintbrush edits the page's own words where they stand, as a REAL wording change** (owner, 2026-10-04): it is the copy desk's page round, the same one the tweak editor and the studio's own words write (ADR 0341). Pressing it reads `GET /copy-desk/pages/builders:<page>/draft`; a page nobody holds is OFFERED, never taken silently (taking it is the copy desk's artists-only claim, and the page shows as being tweaked while held). Typing saves the whole draft; "Review" lists every change as was/now; "Send for approval" submits the round. It never writes `page-notes` (owner: kept separate from the feedback docs).
 - **Only a leaf element inside `<main>` whose words are one reading line becomes editable.** Shared chrome, a line with a `{…}` hole, controls (`button`, form fields, `code`), and anything hidden stay as they are; the bar counts the lines it cannot reach and links to the tweak editor for them. A click on edited words inside a link does not navigate.
 - **Nobody else's view changes, and neither does yours once editing ends**: "Stop editing" and "Send" both put the page's own words back. The draft stays on the round.
@@ -47,20 +49,20 @@ Covers: every shelled hall page (`craft-mode.js`, `shell.js`, `style.css`), and
 
 ### Removing a line, and the artist review alongside (task 1004696)
 
-- **An artist can recommend removing a line** (owner, 2026-10-09: pages carry superfluous subtitles and text). The line the artist is in shows in the bar with **Remove this line**; emptying a line's words and leaving it does the same. A removed line shows the page's own words struck through and faded, is no longer typed into but stays focusable, and **Keep this line** puts it back. Review lists it as its own "Remove" row and says it goes to an engineer. It is saved as `{ key, remove: true }` (the copy desk's rule, `modules/copy-desk/CLAUDE.md`), so the send files an engineer task to take it out.
+- **An artist can recommend removing a line** (owner, 2026-10-09: pages carry superfluous subtitles and text). The line the artist is in shows in the bar with **Remove this line**; emptying a line's words and leaving it does the same. A removed line shows the page's own words struck through and faded, is no longer typed into but stays focusable, and **Keep this line** puts it back. Review lists it as its own "Remove" row and says it goes to an engineer. It is saved as `{ key, remove: true }` (the copy desk's rule, `modules/copy-desk/CLAUDE.md`), so the send files an artisan task to take it out.
 - **The artist review is one press away**: **Artist review** in the editing bar saves the words and opens the palette's sheet (`page-notes.js`, loaded on demand like a tool) over the page; editing carries on when it closes. Once the words are sent, the bar asks "Review how this page looks too?" with **Start an artist review** (closes the bar, opens the sheet) and **Not now**. The paintbrush still writes no feedback doc itself: `tests/paintbrush.mjs` allows `page-notes.js` as the only page-notes name in the file.
 
 ## The lightbulb (task 1004498)
 
-- **Ideating carries one tool, the lightbulb** (`lightbulb.js`, a `TOOLS` entry loaded on first press). Its button wears its own note glyph, not the mode's lightbulb, so it is never read as the Ideating pill beside it (owner, 2026-10-04). It is a watered-down palette: the same side sheet and `.pn` styles, text only, no uploads.
-- **Only the ideas remain** (owner, 2026-10-04). `POST /page-notes/ideas` splits the notes with the palette's AI split (ideator wording, one idea if the split cannot run) and files each idea under the ideator, its body ending in a link to the page. Nothing else is stored: no doc row, no reference doc. The split answers inside the request, so it gives up after 45 seconds and files the notes whole.
+- **The lightbulb** (`lightbulb.js`, a `TOOLS` entry loaded on first press) was Ideating's one tool and is the Artist's third since task 1005141. Its button wears its own note glyph, not the mode's lightbulb, so it is never read as the Ideating pill beside it (owner, 2026-10-04). It is a watered-down palette: the same side sheet and `.pn` styles, text only, no uploads.
+- **Only the ideas remain** (owner, 2026-10-04). `POST /page-notes/ideas` splits the notes with the palette's AI split (the notes wording, once the ideator's; one idea if the split cannot run) and files each idea under its author, its body ending in a link to the page. Nothing else is stored: no doc row, no reference doc. The split answers inside the request, so it gives up after 45 seconds and files the notes whole.
 - **The panel lists the ideas already filed from this page** (`GET /page-notes/ideas?page_path=`): open and promoted ideas whose body carries the page's link, from the lightbulb (`](/page)`) or the palette (`](/page?note=`). That link is the only record of where an idea came from, so `notes.pageLinks` and the two idea bodies are pinned together in `tests/lightbulb.mjs`.
 - **Unsent text waits in this browser only**, per page (`localStorage 'hall-lightbulb:<path>'`), and is forgotten once it files.
 - `tests/lightbulb.mjs` runs the real routes and the real script over a small DOM.
 
 ## Artist review mode (task 1004686)
 
-- **Review is a split pill** (owner, 2026-10-09): pressing Review still opens the feedback doc; hovering it with a mouse, or pressing its chevron, opens a menu: "Write feedback on this page", then the four experiences in the owner's order and words (Ideator, Governing, Building, Artistry experience), then "Stop reviewing" while a review is on. Hover is asked of the pointer (`pointerType === 'mouse'`), never `(hover: hover)`: a touch laptop can report no hover at all. On a phone (<=640px) the chevron folds away and a tap on Review opens the menu.
+- **Review is a split pill** (owner, 2026-10-09): pressing Review still opens the feedback doc; hovering it with a mouse, or pressing its chevron, opens a menu: "Write feedback on this page", then the experiences in the owner's order (Ideator, Governing, Building, Artistry experience when written; since task 1005141 three: Patron, Artisan, Artist experience), then "Stop reviewing" while a review is on. Hover is asked of the pointer (`pointerType === 'mouse'`), never `(hover: hover)`: a touch laptop can report no hover at all. On a phone (<=640px) the chevron folds away and a tap on Review opens the menu.
 - **Picking one makes the hall wear that mode** (`html[data-craft]`, so its tabs, look, eyebrow and tallies follow) and stamps `html[data-craft-review]`. The artist's own mode stays Artistry: `sessionStorage['hall-craft-review']` holds the experience for the session only, and is ignored unless the mode is Artistry. Choosing any mode from the switch or the picker ends it. The artist keeps Review and Edit words; the experience's own tools follow them, marked `craft-tool--guest` so a phone under 360px can fold them away (three tools pushed 320px 36px sideways; Artistry alone overflows 4px there today, before and after).
 - **The scribble wall** (`craft-review.js`, loaded on demand; `craft-review.css`, imported by `style.css`): a flexible box in the top bar's empty space where a pen tip scribbles six small doodles in the sky's hand (thinking.css: hairlines, stars, a dashed orbit, a constellation, a crescent, a shooting star, a looped scribble, sparks), each at its own spot and height, a new one every 5s of a 30s round and each up about 10s, so two or three show at once. **Ink alone** (owner, 2026-10-09, after a first cut of big painted colour tags: "small black white graffiti scribbling"): every mark is `--ink`, black on the light bar and white on the dark, with the sky's fainter ladder for trails and orbits; the test holds the wall section to that one token. No doodle is wider than 56px or taller than 24px; the two widest fold away on a wall under 58px (Governing at 1440px keeps about 60), all of them under 34px and on a phone. The wipe is two opposite `translateX` moves, so every motion is transform or opacity in CSS, and the kill switch leaves three doodles standing, finished, with no pen. A doodle not yet begun keeps its pen unseen (`gx-track` starts at opacity 0), or each waiting tip shows as a stray dot.
 - **An @import lands before style.css's own rules**, so a rule in `craft-review.css` that restyles `.craft-tool` needs two classes, or `.craft-tool` silently wins (it did, for the reviewing wash and the guest fold, until measured).

package/modules/hall-ui/records/game-mode.md

@@ -7,7 +7,7 @@ Covers: every shelled hall page (`shell-game.js`, `shell.js`). Spec: `docs/specs
 - **Game mode is the existing full-screen switch, made hall-wide. There is no second full-screen mode.** The switch was already on every page (task 1004430) but remembered per page, so a reader had to turn it on 33 times. Game mode is one `localStorage` key, `hall-game`; while it is `on`, `shell.js` `storedFullscreen()` answers yes for every page, whatever that page remembers. What hides, the corner button and the Escape hand-off are the shell's, unchanged.
 - **`shell-game.js` holds the mode and nothing else**: `window.OTBShellGame` = `on()`, `set(bool)`, `hint()`. It stamps `html[data-game="on"]` for a sheet or script that wants to read the mode. `shell.js` reads it through a fallback object, so a page without the file is never in game mode. It is its own file because `shell.js` sits on the 1,500-line ratchet; the start screen and options menu (R03, R04) are expected to grow here, not in `shell.js`.
 - **Load order**: `shell-game.js` before `shell-trail.js` / `craft-mode.js` / `shell.js`, loaded the same way (deferred or not) as the shell on that page. Test-pinned.
-- **Leaving is for this page load only.** In game mode the corner button and Escape bring the bars back, and nothing is written: the next page opens without them again, and a page's own `hall-fullscreen:<page>` memory is never overwritten. Turning game mode off (`set(false)`) hands each page back what it remembered. `OTBShell.setFullscreen(null)` is the "re-read what should show" call `set()` uses.
+- **Leaving is for this page load only.** In game mode the corner button brings the bars back (Escape did too until task 1005144; it opens the options menu now), and nothing is written: the next page opens without them again, and a page's own `hall-fullscreen:<page>` memory is never overwritten. Turning game mode off (`set(false)`) hands each page back what it remembered. `OTBShell.setFullscreen(null)` is the "re-read what should show" call `set()` uses.
 - **No page may opt out.** `<body data-fullscreen-switch="off">` would keep that page's sidebar in game mode; the test fails on one. A new hall page needs `#app-topbar` and the `shell-game.js` tag, like the rest.
 - **The "how to leave" line shows once per tab in game mode** (`sessionStorage 'hall-game-hint'`), not on every page load. Outside game mode the shell's rule is unchanged.
 - **How it is turned on today**: `?game=on` / `?game=off` on any hall URL, or `OTBShellGame.set()`. Nothing in the hall's interface sets it yet; the start screen (R03) is where that lands.
@@ -15,6 +15,6 @@ Covers: every shelled hall page (`shell-game.js`, `shell.js`). Spec: `docs/specs
 ## For the tasks after this one
 
 - A HUD or options menu that wants Escape must call `preventDefault()` on the press. `shell.js` `onFullscreenKey` waits one tick before leaving so a listener added after it still wins.
-- Until the options menu exists, Escape is the only way to reach navigation in game mode. Do not remove it before R04 lands.
+- Since R04 (task 1005144, ADR 0401) the last Escape in game mode opens the options menu (`shell-game.js` `onEscape`), and on the menu it closes it again. The corner button is still the way back to the bars.
 
 Tests: `tests/hall_fullscreen.mjs` (the eight `game mode:` cases run the real `shell-game.js` + `shell.js`), and the script lists in `tests/hall_city.mjs`, `tests/hall_street.mjs`, `tests/hall_my_agents.mjs`, `tests/goal_map_page.mjs`.

package/modules/hall-ui/records/governor-street.md

@@ -29,7 +29,7 @@ Files: `street-inside.js` (`window.GovInside`, node-require-safe, pure): the pro
 - **The lift and the flip.** The lift is one node kept across draws, so picking a floor slides it by a CSS transform transition; the chosen floor's block is two blocks that take turns (`flipA` / `flipB`), so it re-enters on every pick. Both are dead under reduced motion.
 - **Change how this works** is present and honest: pressed, it says drafting an amendment from here is not built yet (task 1004530 wires it).
 - **No "on the table here" list.** The prototype's list of the building's open matters was removed on the owner's direction (task 1004565): the floor desks carry every matter as an actionable row, so the list was duplication. Inside a building a matter is its desk row; the short card opens from the street's pins.
-- **Districts.** The goal's tasks (`GET /tasks?goal_id=N`, read once per goal): shape from the discipline (tower engineer, studio artist, glass front UI, pavilion ideator; none is a tower), stage from the status (backlog and blocked a staked plot, ready a slab, active a scaffold, completed and confirmed built with a flag, shipped lit), label the kind; height from the estimate. Up to ten stand on the road, work in flight first; the rest are counted with a link to the goal. Each one opens its task.
+- **Districts.** The goal's tasks (`GET /tasks?goal_id=N`, read once per goal): shape from the discipline (tower artisan, studio artist, glass front UI; none or any other is a tower; the ideator's pavilion went with task 1005141), stage from the status (backlog and blocked a staked plot, ready a slab, active a scaffold, completed and confirmed built with a flag, shipped lit), label the kind; height from the estimate. Up to ten stand on the road, work in flight first; the rest are counted with a link to the goal. Each one opens its task.
 - **Narrow.** Under 900 px the board becomes a column: the drawing in its own sideways strip (never scaled under 0.6, so a floor stays a 24 px target), then the panel.
 
 Tests: `tests/hall_street_inside.mjs` runs the prototype's own `Component` beside `street-inside.js` on the prototype's sample floors and holds every building's section, panel bindings and every district equal to it in both modes, then the docket rules (no invented numbers) and the page in a vm (the persistent lift, the flip, the drawers, the amendment note, the card from a table row, back to the street, a district's tasks). The states file renders every building, a floor pick, the amendment note and a district.

package/modules/hall-ui/records/home-city.md

@@ -87,6 +87,8 @@ the builder's Home. Steps 2–4 (the ideator's sky, the artist's gallery, the st
 
 ## v16 step 2 — the ideator's sky (task 1005059)
 
+> **Not drawn since task 1005141.** The Ideating mode folded into Artist, so `home-city.js` `craft()` never answers `ideating` and every craft lands in the city; the sky is a door away (Your thinking). The branch and `skySvg` are kept so the sky can come back as its own view. What follows is the record of what step 2 built.
+
 The mock is [`v16-ideating.html`](../../../docs/design/mocks/hall/home/v16-ideating.html). While the craft is
 **Ideating** (`OTBCraftMode.current()`, redrawn on `otb:craft`) the same widget, from the same one read, draws
 `home-city-draw.js` `skySvg` instead of the city. Every other craft keeps the builder's city untouched.
@@ -108,7 +110,7 @@ The mock is [`v16-ideating.html`](../../../docs/design/mocks/hall/home/v16-ideat
   new idea (these two weeks) that is open, in no area, not the viewer's, and not yet voted on by them. In the
   week an idea became work it falls into its tower; after that it lights a window there. The moon is the
   version, its phase what the areas have shipped over every task under them (`version.tasks`).
-- **The ladder** ranks the week's ideators: ideas filed, idea votes cast, and ideas of theirs that became work.
+- **The ladder** (in the dormant sky view) ranked the week's ideators: ideas filed, idea votes cast, and ideas of theirs that became work.
 - **The read stays one and bounded.** `GET /home/city` adds these fields to the ideas list it already sent
   (still newest first, at most 120 rows), plus idea votes per builder per week and a per-area task count.
   The `ideas_votes` table is probed first, so a project with the ideas module off answers without votes.

package/modules/hall-ui/records/market-watch-settings.md

@@ -1,5 +1,7 @@
 # Market Watch settings, the owner's Settings tab on /market-watch (task 1004938; a tab since task 1005045)
 
+**Since task 1005144 (ADR 0401) the settings are an options menu entry, not a tab.** The menu opens `/market-watch?embed=1#settings` in its frame and the page shows `#mw-panel-settings` alone; a plain visit is the watch with no tab strip and no settings read, an old `/market-watch#settings` link `location.replace`s to `/settings?open=market-watch`, and `/market-watch-settings` 302s to the same entry (`RETIRED_TO_OPTIONS`). The owner check moved with it: the menu lists the entry for an archon, and the four routes stay the wall. The tab-era notes below are history; see `records/options-menu.md`.
+
 **Since task 1005045 (owner decision 2026-11-03, idea 1001310) this is a tab, not a page.** The sidebar showed "Market Watch" twice — the page and these settings — so the settings page is gone and its markup is the `#mw-panel-settings` panel in `market-watch.html`. What that move settled:
 
 - **Only the owner gets the strip.** `market-watch.js` adopts the shell's one `/me` read (`window.__hallReads`, no second request); for an archon it builds two kit tabs (`watch`, `settings`, `hash: true`) and calls `OTBMarketWatchSettings.load()`. Anyone else gets no tab strip at all, and their page never asks for the settings. An unreadable `/me` is not an owner. Cosmetic only: the four routes below are still the wall (ADR 0016).

package/modules/hall-ui/records/options-menu.md

@@ -0,0 +1,15 @@
+# The options menu — Settings, and the six screens it opens (task 1005144, BONGOS-V3 R04; ADR 0401)
+
+Every setting and configuration is reached from one vertical, grouped menu with a search box at the top. The menu IS `/settings`; the profile chip opens it and says "Options".
+
+- **Two kinds of entry** (`options-menu.js` `MENU`). *Native* entries are Settings' own groups (`data-group` in `settings.html`): Account, Access and keys, Preferences, Sound, Software update, Extensions (only when a module contributed a panel). *Embedded* entries open an old page in an `<iframe>` of its address with `?embed=1`: Your agents (`/my-agents`), Project settings, Modules, Permissions and constitution (`/government`), Market Watch settings (`/market-watch#settings`) and Market Watch rules. A frame is created the first time its entry opens, never at boot.
+- **Who sees an entry** is the rank key the old sidebar item used (`signed`, `member`, `government`, `archon`), plus a module gate (`market-watch`). Cosmetic: each framed page keeps its server page gate and its routes.
+- **The search** (`search()`, pure) matches every typed word against a line's label, its `words`, its entry and its group. Each entry can list `anchors` (CLI access, How Claude talks to you, …) so a search lands on the exact place; Enter opens the first line, so the ranking puts a label hit first, then the exact place above the group that merely holds it.
+- **Addresses.** `/settings#<entry>` or `/settings?open=<entry>#<anchor>`; a panel anchor (`#cli`, `#art-key`) still lands as before. The address follows what is open (`replaceState`), and `?from=` survives switches so closing returns.
+- **Embedded pages** (`shell-game.js`, only inside a frame): `html[data-embed="on"]` hides the sidebar, scrim, foot and top bar; the full-screen switch is off; an unused Escape goes to the menu; a link to another page opens in the whole window. A link on the menu's own panels to an old page (Settings' "these moved to My agents" lines) opens that entry in place instead.
+- **Old addresses** 302 to the menu (`serve-internal.js` `RETIRED_TO_OPTIONS`, the twin of `options-menu.js` `RETIRED`); `?embed=1` passes through, except for `/market-watch-settings`, which has no page left.
+- **Game mode.** The last Escape on any page opens the menu (`/settings?from=…`); on the menu or in a frame it closes it. Outside game mode the menu is a page like any other.
+- **Layout.** The rail is sticky beside the open screen and scrolls itself; a frame fills the column to the window's foot. Below 860px the menu stacks above the screen, and choosing an entry scrolls the screen up clear of the top bar.
+- **Left the sidebar:** My agents, Project settings, Permissions, Modules (and their glyphs). The palette's agent rows open the menu; its Government rows are gone.
+- **Tests:** `tests/hall_options_menu.mjs` (the catalogue, gates, search, addresses, both redirect maps, the embedded page, game-mode Escape); `tests/hall_fullscreen.mjs` (Escape in game mode); `tests/market_watch_pages.mjs` (the settings panel in the frame).
+- **Known:** sounds are switched off (task 1004554), so the Sound entry shows its note, not a toggle.

package/modules/hall-ui/records/profile-roles.md

@@ -4,9 +4,9 @@
 
 ## What the page says now
 
-- **The main craft's headline** — "N works shipped" (engineer), "N pages approved" (artist), "N thoughts filed" (ideator) — leads the tally. It was also the subtitle under the h1 until task 1004827 removed the page's sub-line (no top block).
+- **The main craft's headline** — "N works shipped" (artisan), "N pages approved" (artist; an artist with ideas and no approved page leads with "N thoughts filed", since task 1005141 folded the ideator into the artist) — leads the tally. It was also the subtitle under the h1 until task 1004827 removed the page's sub-line (no top block).
 - **The identity band** keeps the avatar, name, rank badge, handle, member-since and the "Answerable for" block unchanged. The "Preferred work:" line became **craft chips**, main role first ("Artist, main role"), then every other craft the server lists in `roles.shown`, which is a craft that has *earned* credits (the owner's 2026-09-30 rule; the server decides it, never this page).
-- **The tally** replaces the credits/karma column: the studio's corner tally carried onto the profile, the total first and then the two numbers the main craft leads with (engineer: works shipped, karma; artist: pages approved, this week; ideator: thoughts filed, ignited).
+- **The tally** replaces the credits/karma column: the studio's corner tally carried onto the profile, the total first and then the two numbers the main craft leads with (artisan: works shipped, karma; artist: pages approved, thoughts filed — or thoughts filed, ignited when they have ideas and no approved page).
 - **By the numbers** is the main craft's set of tiles, then one headline tile per other shown craft. The artist adds the studio's "N of M tweaked" per surface underneath, on `OTBKit.barSeriesHtml` with this sheet only moving the three cells into the mock's layout (name and count on a line, the bar under them).
 
 ## Where the words live
@@ -16,28 +16,28 @@
 ## Rules an edit must keep
 
 - **A number the instance could not read is a dash, never a zero.** The role ports are optional; "0 pages approved" would be a claim about the person.
-- **The ~ on an ideator's total size** is the sky's historical-estimate mark; its tile's tooltip says how much is estimated.
+- **The ~ on an artist's total size** is the sky's historical-estimate mark; its tile's tooltip says how much is estimated.
 - **The per-surface rows follow the MAIN craft only.**
 - Every page that boots `profile.js` in a vm must load `profile-roles.js` first (`tests/helpers.mjs` `bootProfilePage` and `tests/profile_ui_cross_project.mjs` do).
 
 ## Harness
 
-Three fixtures, one per craft: `builders__profile` (the engineer, id 95, the viewer's own), `<redacted>` (an artist who never shipped), `builders__2002__profile` (an ideator who never shipped, part of whose size is estimated). `profile.states.json` renders them as `own`, `artist` and `ideator`.
+Three fixtures: `builders__profile` (the artisan, id 95, the viewer's own), `<redacted>` (an artist who never shipped), `builders__2002__profile` (an artist whose work is ideas, who never shipped, part of whose size is estimated; the ideator fixture until task 1005141). `profile.states.json` renders them as `own`, `artist` and `artist-ideas`.
 
 ## Deliberate differences from the mock
 
-- The engineer's tally shows **karma** where the mock shows "+120 this week", and the fourth engineer tile is **achievements** where the mock shows a shipping streak: neither weekly engineer credits nor a weekly streak is in the profile read, and a number the page cannot read is not drawn.
-- The engineer tile "works shipped" has no "across N goals" foot, the ideator's "thoughts filed" no "since <month>" foot, the artist's "credits from pages" no "N a page" foot, and the surface rows no "where" sub-label: none of those is in the read.
-- **Karma ends every artist's and ideator's set of tiles**, which the mock does not draw. The owner's call, reviewing this build on 2026-10-01: "karma for artists and ideators is definitely key". The engineer's set carries it already.
+- The artisan's tally shows **karma** where the mock shows "+120 this week", and the fourth artisan tile is **achievements** where the mock shows a shipping streak: neither weekly artisan credits nor a weekly streak is in the profile read, and a number the page cannot read is not drawn.
+- The artisan tile "works shipped" has no "across N goals" foot, the artist's "thoughts filed" no "since <month>" foot, the artist's "credits from pages" no "N a page" foot, and the surface rows no "where" sub-label: none of those is in the read.
+- **Karma ends the artist's set of tiles** (every main craft but the artisan's), which the mock does not draw. The owner's call, reviewing this build on 2026-10-01: "karma for artists and ideators is definitely key" (the ideator is part of the artist craft since task 1005141). The artisan's set carries it already.
 - The tiles' grid fits at 148px rather than 170px, so five tiles sit on one row inside the hall's narrower panel.
 
 ## The Activity tabs, one per role (task 1004435, WA6.RP05)
 
 The section used to offer All / Engineer / Artist / Ideator / UI tabs over one task ledger, so an ideator's tab listed tasks whose discipline happened to be "ideator" and an artist's listed only artist-labelled tasks they had shipped. Now there is **one tab per role the person has** (`roles.shown`, the header's chips, main first), each counted the way the header leads, each its craft's own record, each with its own panel:
 
-- **Engineer**: the works completed and goals created ledgers, WHOLE (no craft filter: most of the corpus is unclassified and a filter reads as "you did less").
-- **Ideator**: the room's public trail, `public/profile-crafts.js`. One read of up to the route's cap of thoughts (`GET /inbox/by-builder/:id`, which already carried each thought's `state` and `size`), drawn as the sky's five marks by the day each was filed (size = diameter, brightness = a star's opacity, a folded-in thought tethered to the one it joined), the legend in the sky's words from `OTBIdeaObjects`, and every drawn thought a row in the ledger under it: state, size (~ for a historical estimate), still alive, and the old trail's "what became of it" cell folded in whole. A mark and its row light together on hover or focus; clicking a mark focuses its row.
-- **Artist**: the pages they rewrote in Tweak Mode that were approved, four at a time with "Show N more", from `GET /copy-desk/artists/:id/pages` (signed in; copy-desk's `composeArtistPages`). Each row: page, surface, approval day, changed-line count, and a before/after: the round's first changed line beside the approval renders (`/tasks/:id/visuals`, `before-` and `after-desktop-light`) as small thumbnails.
+- **Artisan**: the works completed and goals created ledgers, WHOLE (no craft filter: most of the corpus is unclassified and a filter reads as "you did less").
+- **Artist, the ideas half** (its own Ideator tab until task 1005141; now drawn under the approved pages on the one Artist tab): the room's public trail, `public/profile-crafts.js`. One read of up to the route's cap of thoughts (`GET /inbox/by-builder/:id`, which already carried each thought's `state` and `size`), drawn as the sky's five marks by the day each was filed (size = diameter, brightness = a star's opacity, a folded-in thought tethered to the one it joined), the legend in the sky's words from `OTBIdeaObjects`, and every drawn thought a row in the ledger under it: state, size (~ for a historical estimate), still alive, and the old trail's "what became of it" cell folded in whole. A mark and its row light together on hover or focus; clicking a mark focuses its row.
+- **Artist, the pages half**: the pages they rewrote in Tweak Mode that were approved, four at a time with "Show N more", from `GET /copy-desk/artists/:id/pages` (signed in; copy-desk's `composeArtistPages`). Each row: page, surface, approval day, changed-line count, and a before/after: the round's first changed line beside the approval renders (`/tasks/:id/visuals`, `before-` and `after-desktop-light`) as small thumbnails.
 
 Signed out, the section is one sign-in line (owner decision (a)).
 
@@ -59,7 +59,7 @@ The Overview's charts used to stop at "No works shipped yet" before they read a
 - **The works charts still need a shipped task**, and without one they are a single line under the figure ("No works shipped yet ..."), not two empty cards. Someone with neither credits nor works gets one line for the whole section.
 - **On a phone** the figure stacks: the line, then "where it came from". The plot's viewBox is half again a card's on a wide screen so its type matches the cards', and the kit's own on a phone (read at draw time, at the same 720px the grid stacks).
 
-Harness: `builders__earnings.json` serves any id; the artist (2001) and the ideator (2002) carry their own earnings beside an empty `builders__<id>__activity.json`, and the `artist`/`ideator` states expect `#chart-drachmae` and `.pearn__kinds`.
+Harness: `builders__earnings.json` serves any id; the artist (2001) and the ideas artist (2002) carry their own earnings beside an empty `builders__<id>__activity.json`, and the `artist`/`artist-ideas` states expect `#chart-drachmae` and `.pearn__kinds`.
 
 ### Deliberate differences from the mock (RP06)
 

package/modules/hall-ui/records/sky.md

@@ -1,6 +1,6 @@
 # The sky — /thinking and /goal-map (tasks 1004231, 1004232, 1004233)
 
-**THE SKY landed at `/thinking` (task 1004231 / sky part 3 of 5, goal 1000095; [ADR 0331](../../../docs/adr/0331-the-sky-is-the-ideators-home.md), ADR 0227 §11)** — the ideator's home. It replaced BOTH the room (task 1004098, `/thinking`) and the first ambient sky (task 1004105, `/sky` — the URL 301s here now) with the prototype the owner adopted as the design of record: `docs/design/mocks/sky/sky.template.html` is the **pixel contract** — copy, layout, colours, the thirteen tour steps, the toggles, the keys (`L` list, `?` tour, `0` fit, `/` compose) — built for real over `GET /sky` and `GET /sky/mine` (part 2). The room survives inside it as the list drawer: every drawn thought is a row with its whole sentence, one key away. Eight things it settled:
+**THE SKY landed at `/thinking` (task 1004231 / sky part 3 of 5, goal 1000095; [ADR 0331](../../../docs/adr/0331-the-sky-is-the-ideators-home.md), ADR 0227 §11)** — the ideator's home (the artist craft's since task 1005141 folded the ideator into it). It replaced BOTH the room (task 1004098, `/thinking`) and the first ambient sky (task 1004105, `/sky` — the URL 301s here now) with the prototype the owner adopted as the design of record: `docs/design/mocks/sky/sky.template.html` is the **pixel contract** — copy, layout, colours, the thirteen tour steps, the toggles, the keys (`L` list, `?` tour, `0` fit, `/` compose) — built for real over `GET /sky` and `GET /sky/mine` (part 2). The room survives inside it as the list drawer: every drawn thought is a row with its whole sentence, one key away. Eight things it settled:
 
 - **The page has no hall chrome, on purpose.** `thinking.html` is the template's markup (no shell.js, no sidebar); `thinking.css` is its `<style>`, one file; the world's tokens are not loaded — the template's values ARE the contract. The hall's doors (the record, the goal, the task) open from the panel, resolved against `hallBase()` (apex `/builders` or the subdomain). The title stamps `{{worldName}}` like every hall page.
 - **One script became seven files under the 1,500-line ratchet, on ONE shared object.** `window.OTBSky`: `SKY.S` is every `let` the prototype's closure held; everything else is a function or a constant. Load order is pinned in the HTML — `sky-data.js` (helpers, the vocabulary, the two adaptors, the bands, the world, the thoughts, the five reads) → `sky-layout.js` (clock, routes, explore, camera) → `sky-draw.js` (the drawing, the hit test) → `sky-interaction.js` (card, menu, pointer, keys, lenses, stats, jump, legend) → `sky-panel.js` (the panel, the drawer) → `sky-composer.js` (gravity, quick + full filing, the nod) → `sky-tour.js` (the thirteen steps, the frame loop, the boot). A file only CALLS a later file through `SKY.name(...)`, never at load time. The README says a split is not a deviation; a changed behaviour inside one is — and every deviation a gate or a route forced is listed in the task's ship notes, one line each.
@@ -37,8 +37,8 @@ Pinned by `tests/hall_sky.mjs` (31 cases: the reads, the five objects, the two c
 
 **Owner decision 2026-09-27: "Your thinking is only your thinking."** Part 4's "one page, two doors" above is SUPERSEDED: the two pages share the renderer and nothing else. The owner confirmed that "the your projects tab" means the whole-project lens, its switch and the project-map features. What this settled:
 - **The lens and the features separate; the drawing does not.** `thinking.css`, the seven `sky-*.js` files and every draw path stay shared. What each page may be in is `S.lenses` (set once in `sky-data.js` from `data-sky-lens`): `['simple', 'mine']` on `/thinking`, `['all']` on `/goal-map`. `setLens` clamps to it, so nothing — a button, the tour, a jump, the panel's "descend" — can take a page into a lens it lacks, and no button leaves for the other page (`location.assign` is gone from `sky-interaction.js`).
-- **Absent, not hidden.** `/thinking` carries no "the whole project" button, no "my ideas", no "explore" and no "where do you begin" dialog; `/goal-map` carries no switcher at all and none of the ideator's pills (recent, claude layer, my influence). The scripts touch a one-page control through `SKY.hide` / `SKY.press` / `SKY.on`, which do nothing when the element is not there. `thinking.css` gained one rule, `.brand + .tools { margin-left: auto; }`, so `/goal-map`'s tools keep the switcher's push to the right and its top strip reads as before.
-- **Two tours from one list.** Every step in `ALL_STEPS` says which sky it belongs to; `/thinking` walks nine of the template's thirteen (the ideator's steps, the wells and rings, the clock, the composer, simple), `/goal-map` walks eight — the wells, rings, life, routes, settled systems, the clock and explore — opened by one new step, "This is the whole project.", because the template's first step is "This is your sky." and belongs to `/thinking`. The project tour turns explore off for its length and gives it back. Each tour has its own seen key (S.tourKey: sky-tour-seen here, sky-map-tour-seen on the map), so one does not silence the other.
+- **Absent, not hidden.** `/thinking` carries no "the whole project" button, no "my ideas", no "explore" and no "where do you begin" dialog; `/goal-map` carries no switcher at all and none of `/thinking`'s pills (recent, claude layer, my influence). The scripts touch a one-page control through `SKY.hide` / `SKY.press` / `SKY.on`, which do nothing when the element is not there. `thinking.css` gained one rule, `.brand + .tools { margin-left: auto; }`, so `/goal-map`'s tools keep the switcher's push to the right and its top strip reads as before.
+- **Two tours from one list.** Every step in `ALL_STEPS` says which sky it belongs to; `/thinking` walks nine of the template's thirteen (the thinking sky's steps, the wells and rings, the clock, the composer, simple), `/goal-map` walks eight — the wells, rings, life, routes, settled systems, the clock and explore — opened by one new step, "This is the whole project.", because the template's first step is "This is your sky." and belongs to `/thinking`. The project tour turns explore off for its length and gives it back. Each tour has its own seen key (S.tourKey: sky-tour-seen here, sky-map-tour-seen on the map), so one does not silence the other.
 - **"Descend into the well" stays in its sky.** On `/goal-map` it only flies; on `/thinking` it steps "simple" up to "your thinking" (the one lens there that zooms). The legend drops "unexplored" on `/thinking`, which has no explore.
 - **Kept on both:** the list drawer (the room on `/thinking`, the ledger on `/goal-map`), the clock, the composer, "what if", the panel. Filing a thought from the project map still works; the owner's decision names the lens and the overlay, not the composer.
 

package/modules/hall-ui/records/start-screen.md

@@ -0,0 +1,21 @@
+# The start screen and the load screen — a sign-in opens the game (task 1005143, BONGOS-V3 R03)
+
+Covers: Home (`shell-game.js` `start()`, `shell-game.css`, the hand-off in `welcome-boot.js`). Spec: `docs/specs/bongos-v3-game-conversion.md` C1 `game-opens-not-navigates`. Game mode itself is in `game-mode.md`.
+
+## What it settled
+
+- **A fresh sign-in opens on the start screen, on Home.** Home is where a sign-in lands (`postLoginLanding`), and `welcome-boot.js` already knows a fresh sign-in from a return visit (the flag the sign-in click leaves). On one, `OTBWelcome.onAccess` calls `OTBShellGame.start({ name, art, done })` in place of its own greeting. The day's first visit without a sign-in keeps the welcome; a signed-out visitor keeps the welcome. A sign-in that returns to a deep link or another page goes straight there, as the welcome always did. `shell.js` is untouched.
+- **Five choices, one column: Start, Options, Achievements, Extras, Quit.** Start is the one filled pill. Options is a link to `/settings`, which IS the one options menu since task 1005144 (`records/options-menu.md`); Achievements is `/profile`. Extras opens three links under the menu (the thinking sky, the atlas, the docs). Quit calls `window.close()`; a browser only closes a tab a script opened, so when the tab is still there 300ms later the screen says "Close it to quit" instead of doing nothing.
+- **Start turns game mode on** (`set(true)`), then shows the load screen. Nothing else in the hall's interface sets it.
+- **The load screen is the still, a tip, and the city building up.** The still is the welcome's painting for the time of day, handed in by `welcome-boot.js` (this file names no picture). In a card of the hall's own tokens, the project city is drawn by `home-city-draw.js` `citySvg` from the one bounded read Home already uses (`GET /home/city?weeks=10`), at 31 stops from the oldest week to now, about three seconds, with "The city, N weeks ago" under it. Each stop is a whole drawing set as state; nothing animates in JavaScript. With reduced motion it is the finished city at once. With no city to draw (the read failed, the scripts are missing) the still and the tip stand for 1.4s. Either way the world opens.
+- **Tips rotate** (`localStorage 'hall-game-tip'` counts them), so each load shows the next one. A tip must be true of the hall today; the first one is the Escape rule from `game-mode.md` (rewritten by task 1005144: Escape opens the options menu).
+- **The craft picker waits for the world.** While the start screen is up the shell asks no picker (`onAccess` returned true). `done` runs once the screen is gone and asks `OTBCraftMode.onAccess` then.
+- **Keys.** While either screen is up it keeps every key: the arrows and Tab walk the menu, Escape folds Extras away and does nothing else, so the shell's Escape cannot flip the bars underneath. Once the world shows, the last Escape opens the options menu (task 1005144); the screen's capture listener calls `preventDefault`, so the menu never opens from under it.
+- **The look.** The painting under the hall's `--scrim`, and on it one card of the hall's own tokens per screen (`--bg-card`, `--ink`, `--rule`; Start is the hall's primary pill, `--accent` under `--accent-on`), so both follow the hall's theme and the sheet holds no colour literal (`tests/hall_audit.mjs`). Sizes, corners and spacing are `--ds-*` tokens only; the sheet has no `@media` (the column is `max-width` in `rem` and wraps). The fade into the world is one CSS opacity transition, stopped by the hall's reduced-motion rule.
+
+## For the tasks after this one
+
+- R04 (task 1005144): point Options at the options menu and move Achievements/Extras targets if those pages lose their interfaces. Escape on the start screen is free for the menu to use.
+- `shell-game.js` is loaded on every hall page but only Home calls `start()`; `shell-game.css` is linked on Home only. A second page that wants the start screen links the sheet and calls `start()` with its own still.
+
+Tests: `tests/hall_start_screen.mjs` (the hand-off and pure parts in a vm; both screens, Quit, the no-city and reduced-motion paths in a real browser).

package/modules/hall-ui/records/tweak-editor.md

@@ -6,7 +6,7 @@ Files: `tweak-editor.html` (the markup), `tweak-editor.css` (the artboard's inli
 
 - **Which page.** `?page=<page id>` (`landing:index`). With none, the page the caller holds (`GET /copy-desk/next`'s `resume`), and with nothing held, the "is in" panel's next up, so a bare link still leads somewhere. The studio (TW16) links here.
 - **One read opens it.** `GET /copy-desk/pages/:pageId/draft` (added here: `GET /copy-desk/pages/:pageId` carries neither the lines nor the draft) answers every reading line with its margin note, the open round and `held_by_you`, and the saved draft, only on the current reading (`draft_on_older_reading` otherwise). The note is the server's: `engineer` is `pages.goesToEngineer`, the submit's own rule, so a shared line with no registry row says "goes to an engineer", which is what the submit will do with it.
-- **The autosave is the whole draft, debounced (700ms) and on blur**, one save in flight at a time, skipped when the body equals the last accepted one; a last `keepalive` PUT on `pagehide`. An emptied box is saved as a removal, `{ key, remove: true }` (task 1004696): its margin note says it is to be removed and goes to an engineer, and the submit files that engineer task (an empty `after` alone is still the server's `line_empty`), and the counter reads "not saved" with the server's own words above the paper when a save is refused.
+- **The autosave is the whole draft, debounced (700ms) and on blur**, one save in flight at a time, skipped when the body equals the last accepted one; a last `keepalive` PUT on `pagehide`. An emptied box is saved as a removal, `{ key, remove: true }` (task 1004696): its margin note says it is to be removed and goes to an engineer, and the submit files that artisan task (an empty `after` alone is still the server's `line_empty`), and the counter reads "not saved" with the server's own words above the paper when a save is refused.
 - **Holding decides writing.** A page nobody holds is read-only with one button, "take this page" (the claim); another builder's is read-only and names them; a submitted one is frozen. Upload and submit are the holder's only, as their routes are.
 - **Every write is named** (`WRITES`: the draft PUT, the .docx POST, the submit, the claim on a server-given `take.path`), and `tests/hall_tweak_editor.mjs` pins the list. The upload is a raw `fetch` because the generated client JSON-encodes every body.
 - **It opens full screen.** The artboard is the whole window, so the first visit sets the shell's switch (task 1004327) on; after that the shell remembers the artist's choice for this page. In full screen the switch button wears the room's glass, since the stage is dark in both themes.

package/modules/hall-ui/records/update-pill.md

@@ -10,3 +10,15 @@ The owner, 2026-11-03: upgrading Bongos from a project's hall was "way too obstr
 - **shell.js got smaller.** The banner's 109 lines became a 61-line loader that fetches `/core-update` once per page and loads the pill only when there is news or a run in flight (1,499 → 1,451 lines).
 
 Tests: `tests/update_pill.mjs` (the pure half, and the real shell + pill in a DOM stub: who sees it, never a link, both doors, refusals, a blocked window, held, a run across pages, done → Reload), `tests/deploy_handoff.mjs` (the hub's three refusals, and its page run for real). Each origin, opener and version check was deleted once and watched to go red. Harness fixture: `core-update.json` (behind, so the pill shows).
+
+## The pop-up (task 1005191)
+
+The owner, 2026-11-10: the pill alone was not seen. Game mode (task 1005142) opens every page without its bars, and full screen hid everything in the top bar's right side except its own button, so a hosted project sat three minor versions behind with nobody told. What this settled:
+
+- **A ready update also asks, once.** `update-pill.js` `maybeAsk` opens the hall's one dialog (`OTBDialog.open`, no bespoke dialog): "Update the builders hall?", up to three release-note lines, the takes-a-few-minutes note, both versions, then *Later* and *Update now*. It reads the same `/software-update` answer the card reads, so both name one version and the two-step rule (ADR 0293 D4) holds.
+- **Update now runs inside the press.** A hosted project opens the hub's window, which a browser allows only from the click; the progress card then opens under the pill.
+- **Any other way of closing it is "later".** That version is not asked about again in this browser for a day (`bongos.update.later`); a newer version asks at once. The pill stays, so later never means lost.
+- **Who is not asked:** a viewer the door would refuse, the hub's handoff window, the `/deploy` page, a builder held at the setup screen, a held version, an update already running. A self-hosted project is told the command, with one *Close* button.
+- **The pill stays with the bars away** (`style.css`, `html[data-fullscreen="on"] .upd-pill`), beside the button that brings the bars back.
+
+Tests: `tests/update_pill.mjs`, the ten cases under "the pop-up".

package/modules/hall-ui/records/visor.md

@@ -0,0 +1,23 @@
+# The visor — the first-person HUD over every scene (task 1005148, BONGOS-V3 R08; ADR 0399)
+
+Covers: `visor.js` + `visor.css`, loaded on Home, `/city`, `/goal-map` and `/thinking`, and the three scene registrations (`sky-interaction.js`, `city.js`, `home-city.js`). Spec: `docs/specs/bongos-v3-game-conversion.md` C2 `you-are-a-character-in-first-person`. Game mode itself is in `game-mode.md`.
+
+## What it settled
+
+- **The look the owner agreed (2026-11-10, five mock-up rounds).** A quiet layout with "hairline instruments" from the helmet round: thin curved visor lines across the top, bottom and both sides, a small centre cross, and a compass of nine slanted cells along the top line with the one salmon marker under its centre. No tracker or radar (tried and dropped), no clipped corners: the pills stay round (DESIGN.md "pill or nothing"). No glow (DESIGN.md's rejected near-black-plus-neon HUD). The frame is one SVG in a 1000×1000 box stretched over the stage with non-scaling strokes, so it is a hairline at every size.
+- **What sits where.** Bottom-left: the character's main action, the one accent pill, with its key. Bottom-right: the sprite (task 1005147's art, `OTBCraftMode.spriteSrc`) with the character's name and the credit count (`/me` `builder.total_credits` through `OTBCraftMode.me()`; credits only, never a payout). Top-right: Actions (key A), which opens the sheet: the character's actions, then "This place" (the scene's own actions and keys), then Options on Escape. A place line under the compass names the scene; the sky leaves it empty because its own heading names it.
+- **Each character's actions** (`ACTIONS`): Artisan Claim a task C (`/work`), Blockers B, Goal sky G, Your thinking T. Artist Review this page R, Edit its words E, Write an idea I (the three craft-mode tools, through `OTBCraftMode.openTool`), Studio S. Patron Board room O, Governor city V, Blockers B, Watch W. Every one is a page or tool the hall already has; the visor gates nothing, and the server's rank checks answer exactly as before (ADR 0399 §2.5). No key a scene binds is reused (the sky's L 0 / ?, the gallery's F, the palette's K, the city card's digits, arrows and Tab).
+- **Glass, not layout (ADR 0399 §2.1).** `#visor` is `position: fixed` with `pointer-events: none`; only the pills and the sheet take a pointer. A drag across a frame line pans the sky (test-pinned).
+- **No camera (§2.2).** A scene registers once: `window.__visorScene = { name, place, actions, keys }`, then `OTBVisor.scene(...)` if the visor is already loaded (it also reads the global at start, so load order between the two does not matter). The sky offers "Back to centre" (its own `fitAll`); the Governor City and Home have no camera yet and offer none, with no disabled button. R13 adds Home's.
+- **Escape (§2.4).** The open sheet takes the press in capture with `preventDefault` and `stopPropagation`, so the sky's pick under it survives; the ambient glass never takes Escape, so the last press reaches the options menu. The letter keys listen in bubble on `window` and skip a press a scene already spent (`defaultPrevented`), one with a modifier, one in a field, and any press while the character picker, the start screen or an `aria-modal` dialog is up.
+- **When it shows.** Game mode (`html[data-game="on"]`) AND a registered scene AND a character (the held one, else this session's craft mode) AND not inside the options menu's frame. Otherwise the hall is exactly as before.
+- **Scenes keep clear of the glass.** While it shows, `visor.js` puts `visor-on` on `<html>`, and `thinking.css` moves the sky's top row, composer, jump field and side panels below the compass, and its foot and tour above the corner pills. A new scene with fixed furniture does the same in its own sheet.
+- **Stacking.** The glass is z 4: above the scene, under the sky's pop-ups (5–8). The Governor City's card lives inside `.city-main`'s stacking context, so the glass is drawn over it; nothing collides (the card is centred, the pills are in the corners).
+
+## For the tasks after this one
+
+- R09 (one hotkey registry): `ACTIONS` keys and the scene `keys` lines are what it registers; the sheet is where a rebind shows.
+- R13 (the sky camera on Home's city): register `fitAll` / `flyTo` as actions in `home-city.js`'s `__visorScene`.
+- R11 (Patron for everyone): no visor change; the Patron's actions already open pages whose routes keep their rank walls.
+
+Tests: `tests/hall_visor.mjs` (the pure parts in a vm; the glass, the pointer pass-through, the Escape order, the sheet, the Artist's tools and the key guards in a real browser over a stand-in scene). The script-order pins in `tests/hall_city.mjs` and `tests/goal_map_page.mjs` name the visor after the shell.

package/modules/hall-ui/records/welcome-tower.md

@@ -32,14 +32,14 @@ finally had Gemini paint the city by day and by night and asked for those to be
 - **Banner.** "Working on the core of <project>" from `__BRANDING__.identity` (never a hardcoded word),
   with `core <version>` under it when the public `GET /version` reports one.
 - **Sequence.** Veil lifts, the city powers up (pulses brighten), the greeting comes up at ~3.4s.
-  **Skip** jumps to the greeting; **Esc**, "Your home page" and Engineer leave slowly: the picture sinks
+  **Skip** jumps to the greeting; **Esc**, "Your home page" and Artisan leave slowly: the picture sinks
   past the rooftops while the welcome fades into the hall underneath (about 2.4s), and the hall can be
   clicked and scrolled from the first moment. A role bound for another room sinks into the veil, then
   opens that room. Under `prefers-reduced-motion` nothing moves and leaving is immediate.
-- **Roles** (the owner's mapping): Owner → `/city`, Ideator → `/thinking`, Artist → `/studio`,
-  Engineer → stays on Home. A pick also calls `OTBCraftMode.choose()` with governing / ideating /
-  artistry / building. **Owner shows only where `OTBCraftMode.offered('governing')`** — Governing is a
-  seat — and the list is built when "Start with your role" is pressed, after the seats have settled.
+- **Roles** (the owner's mapping, renamed by task 1005141): Patron → `/city`, Artist → `/studio`,
+  Artisan → stays on Home (the Ideator door, once `/thinking`, folded into Artist). A pick also calls
+  `OTBCraftMode.choose()` with patron / artist / artisan. **Patron shows only where
+  `OTBCraftMode.offered('patron')`** — the patron craft is a seat — and the list is built when "Start with your role" is pressed, after the seats have settled.
 - **No painting** (a 404) hides the image and leaves the sky gradient; everything else works.
 - **Colours are the paintings'**, in both hall themes: `welcome-boot.css` and `welcome-boot.js` are on
   `tests/hall_audit.mjs`'s literal exemptions with that reason.

package/modules/ideas/ideator-stats.js

@@ -132,7 +132,9 @@ async function readIdeatorStats(builderId, deps = {}) {
   if (reward && typeof reward.creditsByCraft === 'function') {
     const byCraft = await reward.creditsByCraft([builderId]);
     const row = byCraft.get(String(builderId));
-    ideatorCredits = row ? row.ideator : 0;
+    // The idea streams alone — artist credits also carry page money since the
+    // ideator folded into the artist (task 1005141), so `artist` would overstate this.
+    ideatorCredits = row ? (Number.isFinite(row.ideas) ? row.ideas : 0) : 0;
   }
 
   let ratifiedIds = null;