@bongos/core 1.24.79 → 1.24.81

package/modules/hall-ui/public/market-watch.js

@@ -3,10 +3,12 @@
 // GET /market-watch/home, which every signed-in member may make. Where the module is off
 // its routes do not exist, so the page shows its quiet off state rather than an error.
 //
-// task 1005045: the owner also gets a Settings tab here (task 1004938's settings page,
-// folded in so the sidebar says "Market Watch" once). Owner means archon on /me, and it is
-// cosmetic: the four settings routes are the wall (ADR 0016). Everyone else gets no tab
-// strip at all, and their page never asks for the settings.
+// task 1005144 (ADR 0401): the owner's settings (task 1004938's page, then task 1005045's
+// Settings tab here) are an entry in the ONE options menu. The menu opens this page in its
+// frame (?embed=1, shell-game.js) and the page then shows the settings panel ALONE; a plain
+// visit shows the watch and no tab strip, and an old #settings link goes on to the menu.
+// The four settings routes stay the wall (ADR 0016): a reader who is not the owner gets the
+// panel's own "only the owner" line from their 403.
 (() => {
   'use strict';
 
@@ -107,54 +109,29 @@
     });
   }
 
-  // The viewer's rank, or null when /me cannot say. Unknown is not an owner.
-  // The shell already asks /me once on every hall page and shares the answer on
-  // window.__hallReads (the gov-feeds.js precedent), so this adopts that read rather
-  // than paying a second round trip; it asks itself only where the shell did not.
-  async function viewerRank() {
-    try {
-      const shared = window.__hallReads && window.__hallReads['/me'];
-      let me;
-      if (shared) {
-        me = await shared; // the data, false on a 403, or null when unreadable
-      } else {
-        const res = await fetch('/api/bongos/me', { credentials: 'same-origin' });
-        me = res.ok ? await res.json() : null;
-      }
-      const b = (me && (me.builder || me)) || {};
-      return b.rank ? String(b.rank).toLowerCase() : null;
-    } catch (_) {
-      return null;
-    }
+  // Inside the options menu's frame: the settings panel alone, and no watch read.
+  function embedded() {
+    return !!(window.OTBShellGame && window.OTBShellGame.embedded && window.OTBShellGame.embedded());
   }
-
-  // The owner's two tabs. #settings is the address the old /market-watch-settings URL
-  // redirects to, so the ids are the contract.
-  function mountOwnerTabs() {
-    $('mw-tabs').hidden = false;
-    window.OTBKit.makeTabs({
-      mount: $('mw-tabs'),
-      hash: true,
-      initial: 'watch',
-      tabs: [
-        { id: 'watch', label: 'Watch', panel: 'mw-panel-watch' },
-        { id: 'settings', label: 'Settings', panel: 'mw-panel-settings' },
-      ],
-    });
+  function showSettingsOnly() {
+    $('mw-panel-watch').hidden = true;
+    $('mw-panel-settings').hidden = false;
     window.OTBMarketWatchSettings.load();
   }
+  // An old link to the owner's tab (/market-watch#settings) opens the menu entry instead.
+  function settingsLinkMoved() {
+    if (String(window.location.hash || '') !== '#settings') return false;
+    const game = window.OTBShellGame;
+    const menu = game && game.menuPath ? game.menuPath() : '/settings';
+    window.location.replace(menu + '?open=market-watch');
+    return true;
+  }
 
   async function load() {
+    if (embedded()) return moduleOff() ? show('mw-off') : showSettingsOnly();
+    if (settingsLinkMoved()) return;
     if (moduleOff()) return show('mw-off');
-    const rank = viewerRank();
     await loadDesk();
-    // Where the module's routes are not mounted there is nothing to set, so no tab.
-    // A watch that failed to READ (mw-fail) still gets the tab on purpose: the settings
-    // are their own read, and a broken watch must not lock the owner out of its switch,
-    // cap and key — the old settings page never depended on the desk either. The failure
-    // line stays on the Watch tab, where it belongs.
-    if (!$('mw-off').hidden) return;
-    if ((await rank) === 'archon') mountOwnerTabs();
   }
 
   async function loadDesk() {

package/modules/hall-ui/public/market-watch.states.json

@@ -1,6 +1,7 @@
 {
   "_": "MARKET WATCH HOME, the watchtower desk (task 1004939; design of record docs/design/mocks/market-watch/home.html, option D). One read, GET /market-watch/home. Against the kit's own stub it 404s, which the page reads as the module being off, so the stub render is the quiet off state. The populated desk needs the hall-preview harness with the module reported on; its market-watch__home.json fixture was built from the committed 2026-10-28 seed through the real shapes (tests/fixtures/market-watch-seed-rows.cjs):\n\n  node scripts/hall-preview/server.js --port 4639 --fixture-me --modules-on market-watch --rank archon\n  node modules/ui-design/kit/render.js --states modules/hall-ui/public/market-watch.states.json --base-in http://localhost:4639 --base-out http://localhost:4639\n\nThe 'settings' state is the owner's Settings tab (task 1005045; task 1004938's page before it), drawn from GET /market-watch/settings (the harness's market-watch__settings.json, the mockup's month). Only an archon viewer gets the tab, so the harness needs --rank archon; for anyone else the state renders the desk with no tab strip.",
   "page": "/builders/market-watch",
+  "modes": ["dark"],
   "_storage": "The hall asks a first-visit question (the session mode picker, craft-mode.js) over every page; seeding \"already asked\" renders the page a returning builder sees (task 1005080).",
   "storage": { "session": { "hall-craft-asked": "1" } },
   "surface": "hall-ui",

package/modules/hall-ui/public/modules.html

@@ -8,7 +8,7 @@
   <link rel="icon" href="/modules/ui-design/public/brand/favicon.svg" type="image/svg+xml">
   <link rel="preconnect" href="https://fonts.googleapis.com">
   <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
-  <link rel="stylesheet" href="/builders/style.css?v=2026-07-02-shell1">
+  <link rel="stylesheet" href="/builders/style.css?v=2026-11-11-helm">
   <!-- task 1004366: a store version's how-to reads as a document, so it borrows the
        reading room's article card (room.css is scoped to its own primer- classes). -->
   <link rel="stylesheet" href="/builders/room.css">
@@ -126,10 +126,10 @@
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
 <script src="/builders/dom-utils.js?v=2026-11-05-numbers"></script>
-<script src="/builders/shell-game.js?v=2026-11-09-game-mode"></script>
+<script src="/builders/shell-game.js?v=2026-11-11-helm"></script>
 <script src="/builders/shell-trail.js?v=2026-11-05-numbers"></script>
-<script src="/builders/craft-mode.js?v=2026-11-05-goals"></script>
-<script src="/builders/shell.js?v=2026-11-09-game-mode"></script>
+<script src="/builders/craft-mode.js?v=2026-11-10-visor"></script>
+<script src="/builders/shell.js?v=2026-11-11-helm"></script>
 <script src="/builders/hall-dialog.js"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>

package/modules/hall-ui/public/modules.states.json

@@ -1,6 +1,7 @@
 {
   "_": "Modules — the catalog as ONE panel of oversight rows (task 1003472): the kit filter bar, the figure band, two groups under heads. The empty state matters more than the populated one: a filter that matches nothing is the state a browse page spends real time in. Written with the re-skin (task 1003307) so this page is MEASURED at three widths in both modes rather than looked at once; the redesign added the `lens` and `details` states. Populated look: the hall-preview harness (scripts/hall-preview/fixtures/modules.json carries eighteen modules, one built by the project).",
   "page": "/builders/modules",
+  "modes": ["dark"],
   "_storage": "The hall asks a first-visit question (the session mode picker, craft-mode.js) over every page; seeding \"already asked\" renders the page a returning builder sees (task 1005080).",
   "storage": { "session": { "hall-craft-asked": "1" } },
   "surface": "hall-ui",

package/modules/hall-ui/public/money.html

@@ -8,7 +8,7 @@
   <link rel="icon" href="/modules/ui-design/public/brand/favicon.svg" type="image/svg+xml">
   <link rel="preconnect" href="https://fonts.googleapis.com">
   <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
-  <link rel="stylesheet" href="/builders/style.css?v=2026-09-23-changelist1">
+  <link rel="stylesheet" href="/builders/style.css?v=2026-11-11-helm">
   <link rel="stylesheet" href="/builders/oversight.css">
   <link rel="stylesheet" href="/builders/project-settings.css?v=2026-11-02-outflow">
 </head>
@@ -80,10 +80,10 @@
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
 <script src="/builders/dom-utils.js?v=2026-11-05-numbers"></script>
-<script src="/builders/shell-game.js?v=2026-11-09-game-mode"></script>
+<script src="/builders/shell-game.js?v=2026-11-11-helm"></script>
 <script src="/builders/shell-trail.js?v=2026-11-05-numbers"></script>
-<script src="/builders/craft-mode.js?v=2026-11-05-goals"></script>
-<script src="/builders/shell.js?v=2026-11-09-game-mode"></script>
+<script src="/builders/craft-mode.js?v=2026-11-10-visor"></script>
+<script src="/builders/shell.js?v=2026-11-11-helm"></script>
 <script src="/builders/hall-dialog.js"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>

package/modules/hall-ui/public/money.states.json

@@ -1,6 +1,7 @@
 {
   "_": "MONEY (task 1005047; once FLEET COSTS, task 1001949, ADR 0327) through modules/ui-design/kit/render.js. The page reads three authenticated routes — GET /project-account/outflow (payout.approve), GET /public/cost-summary and GET /provisioning/fleet/cost-ledger (provisioning.fleet.manage) — each section hidden until its own read answers. Against the kit's own stub every read fails, so the page shows its one 'Nothing to show yet' line, a state the floors must hold in. To look at the populated page run it against the hall-preview harness, whose fixtures answer all three (the ledger's two cloud hosts carry no recorded plan, the state live is in today):\n\n  node scripts/hall-preview/server.js --port 4620 --fixture-me\n  node modules/ui-design/kit/render.js --states modules/hall-ui/public/money.states.json --base-in http://localhost:4620 --base-out http://localhost:4620",
   "page": "/builders/money",
+  "modes": ["dark"],
   "_storage": "The hall asks a first-visit question (the session mode picker, craft-mode.js) over every page; seeding \"already asked\" renders the page a returning builder sees (task 1005080).",
   "storage": { "session": { "hall-craft-asked": "1" } },
   "surface": "hall-ui",

package/modules/hall-ui/public/my-agents.html

@@ -8,7 +8,7 @@
   <link rel="icon" href="/modules/ui-design/public/brand/favicon.svg" type="image/svg+xml">
   <link rel="preconnect" href="https://fonts.googleapis.com">
   <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
-  <link rel="stylesheet" href="/builders/style.css?v=2026-07-02-shell1">
+  <link rel="stylesheet" href="/builders/style.css?v=2026-11-11-helm">
   <!-- The oversight family's archetype: a titled row with facts and actions, the
        group head and the foot line (records/oversight-family.md). This page's
        repeated thing is that row at the desk's one-line density. -->
@@ -82,10 +82,10 @@
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
 <script src="/builders/dom-utils.js?v=2026-11-05-numbers"></script>
-<script src="/builders/shell-game.js?v=2026-11-09-game-mode"></script>
+<script src="/builders/shell-game.js?v=2026-11-11-helm"></script>
 <script src="/builders/shell-trail.js?v=2026-11-05-numbers"></script>
-<script src="/builders/craft-mode.js?v=2026-11-05-goals"></script>
-<script src="/builders/shell.js?v=2026-11-09-game-mode"></script>
+<script src="/builders/craft-mode.js?v=2026-11-10-visor"></script>
+<script src="/builders/shell.js?v=2026-11-11-helm"></script>
 <script src="/builders/hall-dialog.js"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>

package/modules/hall-ui/public/my-agents.states.json

@@ -1,6 +1,7 @@
 {
   "_": "MY AGENTS (task 1004685, the living-city prototype) through modules/ui-design/kit/render.js. Every row is filled from GET /me and its prefs, so the floors run against the hall-preview harness, which serves those reads and records the pref writes (scripts/hall-preview/pref-writes.js):\n\n  node scripts/hall-preview/server.js --port 4614 --fixture-me --rank archon\n  node modules/ui-design/kit/render.js --states modules/hall-ui/public/my-agents.states.json --base-in http://builders.localhost:4614 --base-out http://builders.localhost:4614\n\nAgainst the kit's own stub the reads 404 and the page shows its sign-in line. The 'nobody' state is the same page as a builder who holds no seat (?as=nobody, a stand-in that can only take away, gov-positions.js).",
   "page": "/my-agents",
+  "modes": ["dark"],
   "_storage": "The hall asks a first-visit question (the session mode picker, craft-mode.js) over every page; seeding \"already asked\" renders the page a returning builder sees (task 1005080).",
   "storage": { "session": { "hall-craft-asked": "1" } },
   "surface": "hall-ui",

package/modules/hall-ui/public/options-menu.js

@@ -0,0 +1,409 @@
+// options-menu.js — the ONE options menu (task 1005144, BONGOS-V3 R04, goal 1000141;
+// ADR 0401; docs/specs/bongos-v3-game-conversion.md, criterion game-opens-not-navigates).
+//
+// Every setting and configuration in the hall is reached from one vertical, grouped
+// menu with a search box at the top. The menu IS the Settings page (/settings): its
+// own panels stay where they were (the native groups below), and the six screens that
+// used to be pages of their own — My agents, Project settings, Modules, Permissions,
+// and Market Watch's settings and rules — open INSIDE the menu, in a frame, with
+// `?embed=1` (shell-game.js strips their chrome). A plain visit to one of those old
+// addresses is sent here by the server (serve-internal.js RETIRED_TO_OPTIONS), as
+// `/settings?open=<entry>`, and the browser carries the old #anchor along.
+//
+// Two halves, the my-agents.js shape: the PURE half (the catalogue, who may see an
+// entry, the search, what an address opens) is node-require-safe for
+// tests/hall_options_menu.mjs; the page half draws the rail and the frames.
+//
+// What it does NOT do: it gates nothing. An entry is listed for the viewer the
+// sidebar would have shown its page to (the same rank keys as shell.js gateAllows,
+// cosmetic only); every screen keeps its own server page gate and its own routes,
+// which are the wall (ADR 0016).
+
+(function (root) {
+  'use strict';
+
+  // ---------- the pure half ----------
+
+  // The menu, top to bottom. A group is a heading; an entry is one line under it.
+  //   id       the entry's address: /settings#<id> or /settings?open=<id>
+  //   native   true = one of Settings' own groups (settings.html data-group=<id>)
+  //   embed    the old page's path, opened in the frame with ?embed=1
+  //   gate     the rank key the old sidebar item used (signed | member | government | archon)
+  //   module   shown only where that module is on (window.OTB.moduleOn)
+  //   words    what a reader might type to find it, beyond its label
+  //   anchors  the places inside it a search can land on: { label, anchor, words }
+  var MENU = [
+    { head: 'You', items: [
+      { id: 'account', label: 'Account', native: true, gate: 'signed',
+        words: 'name display connections discord age privacy profile roles craft',
+        anchors: [
+          { label: 'Display name', anchor: 'display-name', words: 'name' },
+          { label: 'Connections', anchor: 'connections', words: 'discord link' },
+          { label: 'Your age', anchor: 'age', words: 'birthday' },
+          { label: 'Profile and privacy', anchor: 'privacy', words: 'cross-project public' },
+          { label: 'Preferred roles', anchor: 'disciplines', words: 'craft artisan artist discipline' },
+        ] },
+      { id: 'my-agents', label: 'Your agents', embed: '/my-agents', gate: 'signed',
+        words: 'claude agent ai interaction wandering rendering session cards models specialities',
+        anchors: [
+          { label: 'How Claude talks to you', anchor: 'talk', words: 'interaction technical verbosity rendering cards' },
+          { label: 'How your agents work', anchor: 'work', words: 'wandering autonomy' },
+          { label: 'Which models run', anchor: 'models', words: 'model opus sonnet' },
+          { label: 'Skill voices', anchor: 'skills', words: 'voice' },
+          { label: 'What it knows', anchor: 'knows', words: 'specialities expertise' },
+        ] },
+    ] },
+    { head: 'Sign-in and keys', items: [
+      { id: 'access', label: 'Access and keys', native: true, gate: 'signed',
+        words: 'cli token terminal sessions security cards passkeys autobongos runner key api gemini image',
+        anchors: [
+          { label: 'CLI access', anchor: 'cli', words: 'token terminal command line' },
+          { label: 'Active sessions', anchor: 'sessions-scroll', words: 'signed in devices' },
+          { label: 'Security cards', anchor: 'passkeys-scroll', words: 'passkey card' },
+          { label: 'Your Autobongos runner', anchor: 'autobongos', words: 'runner machine' },
+          { label: 'Image-generation key', anchor: 'art-key', words: 'gemini art' },
+          { label: 'Your AI keys', anchor: 'ai-keys', words: 'anthropic api key' },
+        ] },
+    ] },
+    { head: 'Preferences', items: [
+      { id: 'preferences', label: 'Preferences', native: true, gate: 'signed', words: 'usage reports' },
+      { id: 'sound', label: 'Sound', native: true, gate: 'signed', words: 'sounds audio chime event volume mute' },
+    ] },
+    { head: 'The project', items: [
+      { id: 'project-settings', label: 'Project settings', embed: '/project-settings', gate: 'government',
+        words: 'fundamentals name ship mode spend cap funding danger zone delete' },
+      { id: 'modules', label: 'Modules', embed: '/modules', gate: 'member',
+        words: 'module catalog enable disable toggle on off install extension' },
+      { id: 'permissions', label: 'Permissions and constitution', embed: '/government', gate: 'government',
+        words: 'ranks roles permission assignments outside access machine principals constitution laws',
+        anchors: [
+          { label: 'Ranks and permissions', anchor: 'ranks', words: 'rank permission assignments' },
+          { label: 'Constitution', anchor: 'constitution', words: 'laws charter' },
+        ] },
+      { id: 'market-watch', label: 'Market Watch settings', embed: '/market-watch', anchor: 'settings', gate: 'archon', module: 'market-watch',
+        words: 'market watch cap key switch weekly' },
+      { id: 'market-watch-rules', label: 'Market Watch rules', embed: '/market-watch-rules', gate: 'signed', module: 'market-watch',
+        words: 'market watch steps search score propose change' },
+      { id: 'update', label: 'Software update', native: true, gate: 'signed', words: 'version upgrade release update' },
+      { id: 'extensions', label: 'Extensions', native: true, gate: 'signed', contributed: true, words: 'module panels' },
+    ] },
+  ];
+
+  // The old addresses that used to be pages: path → entry id (the server's map too).
+  var RETIRED = {
+    '/my-agents': 'my-agents',
+    '/project-settings': 'project-settings',
+    '/modules': 'modules',
+    '/government': 'permissions',
+    '/market-watch-rules': 'market-watch-rules',
+    '/market-watch-settings': 'market-watch',
+  };
+
+  function entries() {
+    var out = [];
+    MENU.forEach(function (g) { g.items.forEach(function (it) { out.push(Object.assign({ head: g.head }, it)); }); });
+    return out;
+  }
+  function entry(id) {
+    var all = entries();
+    for (var i = 0; i < all.length; i += 1) if (all[i].id === id) return all[i];
+    return null;
+  }
+
+  // The same rank ladder as shell.js gateAllows. viewer = { authed, rank }.
+  function gateAllows(gate, viewer) {
+    var v = viewer || {};
+    var authed = v.authed === true;
+    var rank = String(v.rank || '').toLowerCase();
+    switch (gate) {
+      case 'signed': return authed;
+      case 'member': return authed && rank !== 'xenos' && rank !== '';
+      case 'government': return authed && (rank === 'metic' || rank === 'archon');
+      case 'archon': return authed && rank === 'archon';
+      default: return false;
+    }
+  }
+
+  // The menu this viewer sees: groups with at least one entry they may open.
+  // opts.moduleOn(key) answers module gates; opts.contributed says whether a module
+  // contributed a Settings panel (the Extensions entry shows only then).
+  function visibleMenu(viewer, opts) {
+    var o = opts || {};
+    var moduleOn = typeof o.moduleOn === 'function' ? o.moduleOn : function () { return true; };
+    return MENU.map(function (g) {
+      var items = g.items.filter(function (it) {
+        if (!gateAllows(it.gate, viewer)) return false;
+        if (it.module && !moduleOn(it.module)) return false;
+        if (it.contributed && !o.contributed) return false;
+        return true;
+      });
+      return { head: g.head, items: items };
+    }).filter(function (g) { return g.items.length > 0; });
+  }
+
+  function norm(s) { return String(s || '').toLowerCase().replace(/[^a-z0-9]+/g, ' ').trim(); }
+
+  // The smart search: every word typed must appear in the line's label, its words,
+  // its entry's label or its group's heading. Ranked so the first line is the one
+  // Enter should open: a hit in the line's own label first; then a hit in its own
+  // words; and when nothing hit a label, the exact place (CLI access) above the
+  // group that merely holds it (Access and keys), because "token" means the token.
+  // Returns [{ id, anchor, label, where }] — `where` names the entry for a sub-line.
+  function search(query, menu) {
+    var words = norm(query).split(' ').filter(Boolean);
+    if (!words.length) return [];
+    var lines = [];
+    (menu || []).forEach(function (g) {
+      g.items.forEach(function (it) {
+        lines.push({ id: it.id, anchor: it.anchor || null, label: it.label, where: g.head, sub: false,
+          label_n: norm(it.label), own: norm([it.label, it.words].join(' ')), hay: norm([it.label, it.words, g.head].join(' ')) });
+        (it.anchors || []).forEach(function (a) {
+          lines.push({ id: it.id, anchor: a.anchor, label: a.label, where: it.label, sub: true,
+            label_n: norm(a.label), own: norm([a.label, a.words].join(' ')), hay: norm([a.label, a.words, it.label, g.head].join(' ')) });
+        });
+      });
+    });
+    var hits = [];
+    var count = function (s) { return words.filter(function (w) { return s.indexOf(w) !== -1; }).length; };
+    lines.forEach(function (l, i) {
+      if (!words.every(function (w) { return l.hay.indexOf(w) !== -1; })) return;
+      hits.push({ l: l, label: count(l.label_n), own: count(l.own), i: i });
+    });
+    hits.sort(function (a, b) {
+      return (b.label - a.label) || (b.own - a.own)
+        || (a.label === 0 && a.l.sub !== b.l.sub ? (a.l.sub ? -1 : 1) : 0) || (a.i - b.i);
+    });
+    return hits.map(function (h) { return { id: h.l.id, anchor: h.l.anchor, label: h.l.label, where: h.l.where }; });
+  }
+
+  // What an address opens: ?open=<id> with an optional #anchor, or a bare #<id>,
+  // or a settings panel anchor (#cli) the page itself resolves. Returns
+  // { id, anchor } or null (null = the page's own hash handling decides).
+  function target(search, hash) {
+    var params;
+    try { params = new URLSearchParams(search || ''); } catch (_) { params = null; }
+    var open = params ? params.get('open') : null;
+    var h = String(hash || '').replace(/^#/, '');
+    if (open && entry(open)) {
+      var e = entry(open);
+      return { id: open, anchor: h || e.anchor || null };
+    }
+    if (h && entry(h)) return { id: h, anchor: entry(h).anchor || null };
+    return null;
+  }
+
+  // The frame's address for an embedded entry: same-host path + ?embed=1 + #anchor.
+  // `base` is '' on the builders host, '/builders' on the apex.
+  function frameSrc(e, anchor, base) {
+    if (!e || !e.embed) return null;
+    var a = anchor || e.anchor || '';
+    return (base || '') + e.embed + '?embed=1' + (a ? '#' + encodeURIComponent(a) : '');
+  }
+
+  // Where closing the menu goes: ?from= when it is a same-site path, else null
+  // (the caller then steps back, or goes home).
+  function closeTo(search) {
+    var from = null;
+    try { from = new URLSearchParams(search || '').get('from'); } catch (_) { from = null; }
+    if (!from || from.charAt(0) !== '/' || from.charAt(1) === '/' || from.charAt(1) === '\\') return null;
+    return from;
+  }
+
+  var pure = { MENU: MENU, RETIRED: RETIRED, entries: entries, entry: entry, gateAllows: gateAllows,
+    visibleMenu: visibleMenu, search: search, target: target, frameSrc: frameSrc, closeTo: closeTo };
+  if (typeof module !== 'undefined' && module.exports) { module.exports = pure; return; }
+  if (typeof document === 'undefined') { root.OTBOptionsMenu = pure; return; }
+
+  // ---------- the page half ----------
+
+  // The hall's one escaper (dom-utils.js, loaded first on every page; task 1004876).
+  var esc = function (s) { return window.OTB.escapeHtml(s); };
+  var base = /^\/builders(\/|$)/.test(window.location.pathname) ? '/builders' : '';
+  var state = { menu: [], active: null, onNative: null, query: '', from: null };
+  var railEl = null;
+  var groupsEl = null;
+
+  // An embedded entry's section: created the first time it opens, so a screen's
+  // reads are paid only when someone asks for it.
+  function frameFor(e, anchor) {
+    var id = 'opt-frame-' + e.id;
+    var sec = document.getElementById(id);
+    var src = frameSrc(e, anchor, base);
+    if (!sec) {
+      sec = document.createElement('section');
+      sec.id = id;
+      sec.className = 'opt-embed';
+      sec.setAttribute('data-group', e.id);
+      sec.setAttribute('aria-label', e.label);
+      sec.innerHTML = '<iframe class="opt-embed__frame" title="' + esc(e.label) + '"></iframe>';
+      groupsEl.appendChild(sec);
+      sec.querySelector('iframe').src = src;
+      sec.dataset.src = src;
+    } else if (anchor && sec.dataset.src !== src) {
+      // A new place in a screen already open: move its hash, no reload.
+      try { sec.querySelector('iframe').contentWindow.location.hash = anchor; } catch (_) { sec.querySelector('iframe').src = src; }
+      sec.dataset.src = src;
+    }
+    return sec;
+  }
+
+  function activate(id, anchor, opts) {
+    var e = entry(id);
+    if (!e || !groupsEl) return false;
+    if (!state.menu.some(function (g) { return g.items.some(function (it) { return it.id === id; }); })) return false;
+    state.active = id;
+    groupsEl.dataset.active = id;
+    Array.prototype.forEach.call(groupsEl.querySelectorAll('.opt-embed'), function (s) { s.classList.remove('opt-embed--on'); });
+    if (e.embed) frameFor(e, anchor).classList.add('opt-embed--on');
+    else if (state.onNative) state.onNative(id, anchor);
+    markActive();
+    if (!opts || opts.url !== false) {
+      // The address says what is open, so it can be shared; ?from= stays, so
+      // closing still goes back to where the menu was opened.
+      var q = [];
+      if (e.embed) q.push('open=' + encodeURIComponent(id));
+      if (state.from) q.push('from=' + encodeURIComponent(state.from));
+      var frag = e.embed ? (anchor || '') : (anchor || id);
+      var url = window.location.pathname + (q.length ? '?' + q.join('&') : '') + (frag ? '#' + encodeURIComponent(frag) : '');
+      try { history.replaceState(null, '', url); } catch (_) { /* file:// */ }
+    }
+    return true;
+  }
+
+  function markActive() {
+    if (!railEl) return;
+    Array.prototype.forEach.call(railEl.querySelectorAll('.opt-link'), function (a) {
+      var on = a.dataset.key === state.active && !a.dataset.anchor;
+      a.classList.toggle('opt-link--active', on);
+      if (on) a.setAttribute('aria-current', 'page'); else a.removeAttribute('aria-current');
+    });
+  }
+
+  function linkHtml(id, label, anchor, where) {
+    var href = anchor ? '?open=' + encodeURIComponent(id) + '#' + encodeURIComponent(anchor) : '#' + encodeURIComponent(id);
+    return '<a class="opt-link" href="' + esc(href) + '" data-key="' + esc(id) + '"' + (anchor ? ' data-anchor="' + esc(anchor) + '"' : '') + '>' +
+      '<span class="opt-link__label">' + esc(label) + '</span>' +
+      (where ? '<span class="opt-link__where">' + esc(where) + '</span>' : '') + '</a>';
+  }
+
+  function renderList() {
+    var list = railEl.querySelector('.opt-list');
+    if (!list) return;
+    if (state.query) {
+      var hits = search(state.query, state.menu);
+      list.innerHTML = hits.length
+        ? '<p class="opt-head">Matches</p>' + hits.map(function (h) { return linkHtml(h.id, h.label, h.anchor, h.where); }).join('')
+        : '<p class="opt-none">Nothing matches “' + esc(state.query) + '”. Try another word.</p>';
+    } else {
+      list.innerHTML = state.menu.map(function (g) {
+        return '<p class="opt-head">' + esc(g.head) + '</p>' + g.items.map(function (it) { return linkHtml(it.id, it.label); }).join('');
+      }).join('');
+    }
+    markActive();
+  }
+
+  // The rail: the search box, then the groups. Typing filters; Enter opens the first match.
+  function draw() {
+    railEl.classList.add('opt-rail');
+    railEl.innerHTML =
+      '<label class="opt-search"><span class="sr-only">Search settings</span>' +
+      '<input type="search" id="opt-search" placeholder="Search settings" autocomplete="off" spellcheck="false"></label>' +
+      '<div class="opt-list"></div>';
+    var input = railEl.querySelector('#opt-search');
+    input.addEventListener('input', function () { state.query = input.value; renderList(); });
+    input.addEventListener('keydown', function (e) {
+      if (e.key === 'Enter') {
+        var first = railEl.querySelector('.opt-list .opt-link');
+        if (first) { e.preventDefault(); first.click(); }
+      } else if (e.key === 'Escape' && input.value) {
+        // The field's own Escape: clear the search (the press stays the field's).
+        e.preventDefault();
+        input.value = ''; state.query = ''; renderList();
+      }
+    });
+    railEl.addEventListener('click', function (e) {
+      var a = e.target.closest ? e.target.closest('.opt-link') : null;
+      if (!a) return;
+      e.preventDefault();
+      activate(a.dataset.key, a.dataset.anchor || null);
+      // On a phone the menu sits above the screen it opened, so bring that screen up —
+      // after the opened group's own scroll to the top, which would otherwise win, and
+      // clear of the sticky top bar.
+      if (window.matchMedia && window.matchMedia('(max-width: 860px)').matches) {
+        window.setTimeout(function () {
+          var bar = document.getElementById('app-topbar');
+          var clear = bar ? bar.getBoundingClientRect().height + 8 : 8;
+          window.scrollTo({ top: Math.max(0, groupsEl.getBoundingClientRect().top + window.scrollY - clear) });
+        }, 60);
+      }
+    });
+    renderList();
+  }
+
+  // Close the menu (game mode's Escape): back where it was opened from.
+  function close() {
+    var to = state.from || closeTo(window.location.search);
+    if (to) { window.location.assign(to); return; }
+    var ref = '';
+    try { ref = document.referrer ? new URL(document.referrer).origin : ''; } catch (_) { ref = ''; }
+    if (ref === window.location.origin && window.history.length > 1) { window.history.back(); return; }
+    window.location.assign(base + '/');
+  }
+
+  // Game mode hands the menu its last Escape (shell-game.js); outside it, the
+  // menu is a page like any other and the press is the shell's.
+  function escape() {
+    var game = window.OTBShellGame;
+    if (game && game.on && game.on()) close();
+  }
+
+  // settings.js calls this once it knows the viewer.
+  //   rail, groups   the two mounts
+  //   viewer         { authed, rank }
+  //   contributed    whether a module contributed a Settings panel
+  //   onNative(id, anchor)  shows one of Settings' own groups
+  function mount(o) {
+    railEl = o.rail; groupsEl = o.groups;
+    state.onNative = o.onNative || null;
+    var moduleOn = window.OTB && typeof window.OTB.moduleOn === 'function' ? window.OTB.moduleOn : function () { return true; };
+    state.menu = visibleMenu(o.viewer, { moduleOn: moduleOn, contributed: !!o.contributed });
+    state.from = closeTo(window.location.search);
+    if (railEl && groupsEl) draw();
+    return state.menu;
+  }
+  // Re-read the viewer's menu (a module contributed a panel after load).
+  function refresh(o) {
+    var moduleOn = window.OTB && typeof window.OTB.moduleOn === 'function' ? window.OTB.moduleOn : function () { return true; };
+    state.menu = visibleMenu(o.viewer, { moduleOn: moduleOn, contributed: !!o.contributed });
+    if (railEl) renderList();
+  }
+
+  // A link on the menu's own panels to an old page (Settings' "these moved to My agents"
+  // lines, a docs link) opens that entry in place instead of a round trip through the
+  // server's redirect back to this same page.
+  if (typeof document !== 'undefined' && document.addEventListener) {
+    document.addEventListener('click', function (e) {
+      if (e.defaultPrevented || e.button || e.metaKey || e.ctrlKey || e.shiftKey || e.altKey) return;
+      var a = e.target && e.target.closest ? e.target.closest('a[href]') : null;
+      if (!a || !groupsEl || !groupsEl.contains(a) || a.getAttribute('target')) return;
+      var to;
+      try { to = new URL(a.getAttribute('href'), window.location.href); } catch (_) { return; }
+      if (to.origin !== window.location.origin) return;
+      var id = RETIRED[to.pathname.replace(/^\/builders/, '').replace(/\.html$/, '')];
+      if (!id) return;
+      var anchor = to.hash ? decodeURIComponent(to.hash.slice(1)) : null;
+      if (activate(id, anchor)) e.preventDefault();
+    });
+  }
+
+  // Open what the address asks for. true = it was a menu entry; false = the page decides.
+  function openFromUrl() {
+    var t = target(window.location.search, window.location.hash);
+    if (!t) return false;
+    return activate(t.id, t.anchor, { url: false });
+  }
+
+  root.OTBOptionsMenu = pure;
+  root.OTBOptions = { mount: mount, refresh: refresh, activate: activate, openFromUrl: openFromUrl,
+    escape: escape, close: close, active: function () { return state.active; } };
+}(typeof window !== 'undefined' ? window : globalThis));

package/modules/hall-ui/public/paintbrush.js

@@ -161,8 +161,8 @@
           '<span class="pb__now"><span class="pb__tag">Now</span> ' + esc(c.now) + '</span>' +
         '</li>';
       }).join('') + '</ol>' +
-      '<p class="pb__hint">Sending submits the page: an engineer applies the new words, and they come back to you to approve before anyone sees them.' +
-        (rows.some(function (c) { return c.remove; }) ? ' A line you remove goes to an engineer to take out.' : '') + '</p>' +
+      '<p class="pb__hint">Sending submits the page: an artisan applies the new words, and they come back to you to approve before anyone sees them.' +
+        (rows.some(function (c) { return c.remove; }) ? ' A line you remove goes to an artisan to take out.' : '') + '</p>' +
       '<p class="pb__error" role="alert">' + esc(err || '') + '</p>' +
       '<div class="pb__actions">' +
         '<button class="pb__btn" type="button" data-pb-back>Keep editing</button>' +
@@ -172,7 +172,7 @@
 
   // After sending: the words are on their way, and the look is one press away.
   function sentHtml(n) {
-    return '<p class="pb__line" role="status">Sent for approval: ' + esc(plural(n, 'change', 'changes')) + '. An engineer applies the new words, and they come back to you in the studio to approve.</p>' +
+    return '<p class="pb__line" role="status">Sent for approval: ' + esc(plural(n, 'change', 'changes')) + '. An artisan applies the new words, and they come back to you in the studio to approve.</p>' +
       '<p class="pb__line"><strong>Review how this page looks too?</strong> Write what you would change about it, and each point becomes an idea under your name.</p>' +
       '<p class="pb__error" role="alert">' + esc(st.notesError || '') + '</p>' +
       '<div class="pb__actions">' +