@bongos/core 1.24.95 → 1.25.1

package/modules/hall-ui/public/home-city.js

@@ -104,7 +104,8 @@
     const svg = host.querySelector('.hc-svg');
     const sky = craft() === 'ideating';
     const draw = sky ? Draw.skySvg : Draw.citySvg;
-    const out = draw(model, atLive(t) ? model.W - 1 : t, { mode: mode(), gov: window.GovCity || null });
+    const R = window.OTBHomeRunner; // your runner on its tower, and the tower picked for it (home-runner.js)
+    const out = draw(model, atLive(t) ? model.W - 1 : t, { mode: mode(), gov: window.GovCity || null, runner: R ? R.marker() : null, picked: R ? R.picked() : null });
     host.classList.toggle('hc-is-sky', sky);
     svg.setAttribute('aria-label', sky ? SKY_LABEL : CITY_LABEL);
     host.querySelector('#home-city-h').textContent = sky ? 'The project\'s ideas this week' : 'The project this week';
@@ -354,6 +355,7 @@
     new MutationObserver(() => { if (model) drawScene(); }).observe(document.documentElement, { attributes: true, attributeFilter: ['data-theme'] });
     document.addEventListener('otb:craft', () => { if (model) { drawScene(); drawLadder(); } });
     window.addEventListener('resize', () => { if (model) drawLadder(); });
+    document.addEventListener('otb:home-runner', () => { if (model) drawScene(); });
     registerScene();
     load();
   }

package/modules/hall-ui/public/home-runner.js

@@ -0,0 +1,248 @@
+// modules/hall-ui/public/home-runner.js — your Autobongos runner on Home's city
+// (task 1005243, goal 1000142).
+//
+// WHY. Owner direction, 2026-11-12: running your runner should feel like putting a
+// builder on a building in a base-building game. In game mode you tap a tower (a
+// goal), the visor offers "Send runner here", and the tower then carries your
+// runner's marker; tap it again and the visor shows what it has done there and
+// "Recall runner". The owner chose that a runner works ONE tower at a time, so
+// sending it sets your goal picks to that one goal.
+//
+// THE RULES IT KEEPS.
+//   - ADR 0403: the scene is the view and the visor is the control. The tower only
+//     gets picked; every button is on the glass (OTBVisor.focus).
+//   - The server decides who may run a runner: GET /autonomy/fence answers
+//     scope.may_run, and only then is a tower pickable. Signed out, a rank without
+//     `autonomy.run`, or classic mode: towers stay plain links and nothing is new.
+//   - Every write is a route Settings already uses: PUT /autonomy/me/goals and
+//     POST /autonomy/runners/:host/run. The numbers come from GET
+//     /autonomy/me/goals/:id/stats (the ledger: runner claims shipped there, the
+//     tokens their sessions took, the tasks still ready).
+//   - The device's face (working, resting until, off…) is runner-button.js's
+//     buttonState, the same decision the Settings card draws.
+//
+// The decision (cardFor, stateOf) is PURE and exported for node tests; the wiring
+// below it only runs in a browser.
+(function (root) {
+  'use strict';
+
+  const RB = () => (root && root.OTBRunnerButton) || (typeof require === 'function' ? require('./runner-button.js') : null);
+
+  // ---------- pure ----------
+
+  // The device that speaks for "your runner": one that is working, else one that is
+  // switched on, else the most recently seen (the server's order).
+  function leadDevice(runners) {
+    const list = Array.isArray(runners) ? runners.filter(Boolean) : [];
+    return list.find((r) => r.health && r.health.workingTaskId) ||
+      list.find((r) => r.run_requested !== false) || list[0] || null;
+  }
+  function anyOn(runners) { return (Array.isArray(runners) ? runners : []).some((r) => r && r.run_requested !== false); }
+
+  // The goal the runner is sent to: exactly one pick. Several picks (made in Settings)
+  // is not one tower, so no tower carries the marker until the builder sends it.
+  function assignedGoal(fence) {
+    const g = fence && fence.scope && Array.isArray(fence.scope.goals) ? fence.scope.goals : [];
+    return g.length === 1 ? String(g[0]) : null;
+  }
+
+  // The marker's state, from the device's face: working | resting | starting | ready | off.
+  function stateOf({ runners, fence, nowMs } = {}) {
+    const d = leadDevice(runners);
+    if (!d || !anyOn(runners)) return 'off';
+    const b = RB().buttonState({ runner: d, fence, nowMs });
+    if (d.health && d.health.workingTaskId && b.status === 'Running') return 'working';
+    if (/^Resting/.test(b.status)) return 'resting';
+    if (b.status === 'Starting…' || b.status === 'Updating…') return 'starting';
+    if (b.status === 'Running' || b.status === 'Ready') return 'ready';
+    return 'off';
+  }
+
+  // 1.2M tokens, 340k tokens, 900 tokens.
+  function tokensText(n) {
+    const v = Number(n) || 0;
+    if (v >= 1e6) return `${(v / 1e6).toFixed(v >= 1e7 ? 0 : 1).replace(/\.0$/, '')}M tokens`;
+    if (v >= 1e3) return `${Math.round(v / 1e3)}k tokens`;
+    return `${Math.round(v)} tokens`;
+  }
+  // "about 40 min", "about 3 h", "about 2 days": an estimate, so rounded like one.
+  function aboutText(seconds) {
+    const s = Number(seconds);
+    if (!Number.isFinite(s) || s <= 0) return '';
+    const min = s / 60;
+    if (min < 60) return `about ${Math.max(5, Math.round(min / 5) * 5)} min`;
+    const h = min / 60;
+    if (h < 36) return `about ${Math.round(h)} h`;
+    return `about ${Math.round(h / 24)} days`;
+  }
+  function plural(n, one, many) { return `${n} ${n === 1 ? one : many}`; }
+
+  // What the visor's card says for one tower. Returns null when the viewer has no
+  // runner to send (the tower then stays a plain link), else
+  //   { title, status: { text, tone }, lines: [string], lead: { label, act } | null }
+  // act: 'send' | 'recall' | 'setup' | 'open'.
+  function cardFor({ goal, runners, fence, stats, nowMs = Date.now(), titleOf } = {}) {
+    if (!goal || !fence || !fence.scope || fence.scope.may_run !== true) return null;
+    const id = String(goal.id);
+    const title = goal.title || `Goal ${id}`;
+    const nameOf = (g) => (typeof titleOf === 'function' && titleOf(g)) || `goal ${g}`;
+    const list = Array.isArray(runners) ? runners : [];
+    const st = stats || null;
+    const done = st ? Number(st.tasks_done) || 0 : 0;
+    const left = st ? Number(st.tasks_left) || 0 : null;
+    const eta = st && left ? aboutText(left * (Number(st.avg_task_seconds) || 0)) : '';
+    const leftLine = left == null ? null : left === 0 ? 'Nothing ready to build here right now.' : `${plural(left, 'task', 'tasks')} ready${eta ? ` · ${eta} for your runner` : ''}`;
+    const doneLine = st && done ? `${plural(done, 'task', 'tasks')} done here · ${tokensText(st.tokens)}` : null;
+
+    if (!list.length) {
+      return { title, status: { text: 'No runner yet', tone: 'neutral' },
+        lines: ['Set it up on your PC once, then send it to any tower.'], lead: { label: 'Set up a runner', act: 'setup' } };
+    }
+    const allowed = fence.project && Array.isArray(fence.project.goals) ? fence.project.goals.map(String) : [];
+    if (!allowed.includes(id)) {
+      return { title, status: { text: 'Closed to runners', tone: 'neutral' },
+        lines: ['The project has not opened this goal to runners yet.'], lead: { label: 'Open the goal', act: 'open' } };
+    }
+    const here = assignedGoal(fence) === id;
+    const on = anyOn(list);
+    if (here && on) {
+      const b = RB().buttonState({ runner: leadDevice(list), fence, nowMs });
+      const face = b.status ? `${b.status}${b.countdown ? ` · ${b.countdown}` : ''}` : 'Off';
+      return { title, status: { text: face, tone: b.tone || 'neutral' },
+        lines: [b.sub, doneLine, leftLine].filter(Boolean), lead: { label: 'Recall runner', act: 'recall' } };
+    }
+    const where = on && assignedGoal(fence) ? `Your runner is at ${nameOf(assignedGoal(fence))}` :
+      on ? 'Your runner is working on several goals' : 'Your runner is resting';
+    return { title, status: { text: here ? 'Recalled' : where, tone: 'neutral' },
+      lines: [doneLine, leftLine].filter(Boolean), lead: { label: 'Send runner here', act: 'send' } };
+  }
+
+  const api = { cardFor, stateOf, assignedGoal, leadDevice, tokensText, aboutText };
+  if (typeof module !== 'undefined' && module.exports) module.exports = api;
+  if (!root || typeof document === 'undefined') return;
+  root.OTBHomeRunnerLib = api;
+
+  // ---------- the wiring (browser only) ----------
+  const API = '/api/bongos';
+  const POLL_MS = 15000;
+  let fence = null, runners = [], picked = null, stats = null, busy = false, error = '', timer = null;
+  let client = null;
+  function http() {
+    if (!client && root.BongosClient) client = root.BongosClient.createClient({ baseUrl: '', credentials: 'same-origin', throwOnError: false });
+    return client;
+  }
+  async function req(method, path, body) {
+    const c = http();
+    if (!c) return null;
+    try { return await c.request(method, API + path, body ? { body } : undefined); } catch (_) { return null; }
+  }
+  function game() { return document.documentElement.dataset.game === 'on'; }
+  function mayRun() { return !!(fence && fence.scope && fence.scope.may_run === true); }
+  function active() { return game() && mayRun() && !!root.OTBVisor && typeof root.OTBVisor.focus === 'function'; }
+  function towerOf(id) { return document.querySelector(`.home-city .hc-tower[data-goal="${CSS.escape(String(id))}"]`); }
+  function titleOf(id) { const t = towerOf(id); return t ? t.getAttribute('data-tip') : null; }
+
+  // What home-city.js draws: the marker on the assigned tower, and the picked tower.
+  function marker() {
+    if (!active()) return null;
+    const goal = assignedGoal(fence);
+    return goal ? { goal, state: stateOf({ runners, fence, nowMs: Date.now() }) } : null;
+  }
+  function changed() { document.dispatchEvent(new CustomEvent('otb:home-runner')); }
+
+  async function readState() {
+    const [f, r] = await Promise.all([req('GET', '/autonomy/fence'), req('GET', '/autonomy/runners')]);
+    fence = f && f.ok && f.data ? f.data : null;
+    runners = r && r.ok && r.data && Array.isArray(r.data.runners) ? r.data.runners : [];
+  }
+  async function readStats() {
+    if (!picked) return;
+    const s = await req('GET', `/autonomy/me/goals/${encodeURIComponent(picked)}/stats`);
+    stats = s && s.ok && s.data ? s.data : null;
+  }
+
+  function show() {
+    const V = root.OTBVisor;
+    if (!V || typeof V.focus !== 'function') return;
+    if (!picked || !active()) { V.focus(null); return; }
+    const card = cardFor({ goal: { id: picked, title: titleOf(picked) }, runners, fence, stats, nowMs: Date.now(), titleOf });
+    if (!card) { V.focus(null); return; }
+    const lead = card.lead ? { label: busy ? (card.lead.act === 'recall' ? 'Recalling…' : 'Sending…') : card.lead.label, busy, run: () => act(card.lead.act) } : null;
+    V.focus({ key: `runner:${picked}`, title: card.title, status: card.status, lines: error ? [error].concat(card.lines) : card.lines, lead, onClose: unpick });
+  }
+
+  async function act(what) {
+    if (busy || !picked) return;
+    if (what === 'open') { root.location.assign(`/goals#/goal/${encodeURIComponent(picked)}`); return; }
+    if (what === 'setup') { root.location.assign('/settings#autobongos'); return; }
+    busy = true; error = ''; show();
+    let ok = true;
+    if (what === 'send') {
+      const g = await req('PUT', '/autonomy/me/goals', { goal_ids: [Number(picked)] });
+      ok = !!(g && g.ok);
+      if (ok) {
+        const outs = await Promise.all(runners.filter((r) => r.run_requested === false)
+          .map((r) => req('POST', `/autonomy/runners/${encodeURIComponent(r.host)}/run`, { run: true })));
+        ok = outs.every((o) => o && o.ok);
+      }
+    } else if (what === 'recall') {
+      const outs = await Promise.all(runners.filter((r) => r.run_requested !== false)
+        .map((r) => req('POST', `/autonomy/runners/${encodeURIComponent(r.host)}/run`, { run: false })));
+      ok = outs.every((o) => o && o.ok);
+    }
+    if (!ok) error = what === 'send' ? 'Could not send your runner. Try again.' : 'Could not recall your runner. Try again.';
+    await readState();
+    await readStats();
+    busy = false;
+    show();
+    changed();
+  }
+
+  function pick(id) {
+    picked = String(id); stats = null; error = '';
+    show(); changed();
+    readStats().then(() => { if (picked === String(id)) show(); });
+  }
+  // The visor's card closed (Escape, its close mark, or a tap on open ground).
+  function unpick() {
+    if (!picked) return;
+    picked = null; stats = null; error = '';
+    changed();
+  }
+
+  // A tap on a tower in game mode picks it instead of leaving the page; a tap on open
+  // ground lets the pick go. Capture, so it runs before the tower's own link.
+  function onClick(e) {
+    if (!active()) return;
+    const city = e.target.closest && e.target.closest('.home-city .hc-svg');
+    if (!city) return;
+    const t = e.target.closest('.hc-tower[data-goal], .hc-runner[data-goal]');
+    if (!t) { if (picked && !e.target.closest('a')) { root.OTBVisor.focus(null); unpick(); } return; }
+    e.preventDefault();
+    const id = t.getAttribute('data-goal');
+    if (picked === id) return;
+    pick(id);
+  }
+
+  async function refresh() {
+    await readState();
+    if (picked) await readStats();
+    if (picked) show();
+    changed();
+  }
+  function poll() {
+    clearTimeout(timer);
+    timer = setTimeout(async () => {
+      if (!document.hidden && game() && mayRun() && runners.length) await refresh();
+      poll();
+    }, POLL_MS);
+  }
+
+  function start() {
+    document.addEventListener('click', onClick, true);
+    refresh().then(poll);
+  }
+  root.OTBHomeRunner = { marker, picked: () => (active() ? picked : null), refresh };
+  if (document.readyState === 'loading') document.addEventListener('DOMContentLoaded', start);
+  else start();
+})(typeof window !== 'undefined' ? window : null);

package/modules/hall-ui/public/index.html

@@ -19,11 +19,11 @@
   <link rel="preconnect" href="https://fonts.googleapis.com">
   <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
   <link rel="stylesheet" href="/builders/style.css?v=2026-11-11-helm4d">
-  <link rel="stylesheet" href="/builders/visor.css?v=2026-11-11-helm4c">
+  <link rel="stylesheet" href="/builders/visor.css?v=2026-11-12-runner">
   <link rel="stylesheet" href="/builders/welcome-boot.css?v=2026-11-07-brand-mark">
   <link rel="stylesheet" href="/builders/shell-game.css?v=2026-11-11-view2">
   <link rel="stylesheet" href="/builders/hall-ask.css">
-  <link rel="stylesheet" href="/builders/home-city.css?v=2026-11-11-helm4c">
+  <link rel="stylesheet" href="/builders/home-city.css?v=2026-11-12-runner">
   <link rel="stylesheet" href="/builders/home-gallery.css">
   <link rel="stylesheet" href="/builders/home-idea-box.css">
 </head>
@@ -116,7 +116,7 @@
 <script src="/builders/shell.js?v=2026-11-11-view2" defer></script>
 <script src="/builders/hall-dialog.js" defer></script>
 <!-- task 1005148: the visor (glass over the scene, game mode only; ADR 0399), after the shell and hall-dialog.js -->
-<script src="/builders/visor.js?v=2026-11-11-helm3" defer></script>
+<script src="/builders/visor.js?v=2026-11-12-runner" defer></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- task 2166: the shared component kit (window.OTBKit) — pager/ledger/rail.
@@ -138,10 +138,13 @@
 <script src="/builders/city-draw.js" defer></script>
 <!-- task 1005196: the hour of the city's sky (sets the --sky-now-* tokens the city spends) -->
 <script src="/builders/sky-time.js?v=2026-11-11-helm4" defer></script>
-<script src="/builders/home-city-draw.js?v=2026-11-11-helm4d" defer></script>
+<script src="/builders/home-city-draw.js?v=2026-11-12-runner" defer></script>
 <script src="/builders/home-gallery.js" defer></script>
 <script src="/builders/home-idea-box.js" defer></script>
-<script src="/builders/home-city.js?v=2026-11-10-visor" defer></script>
+<!-- task 1005243: your runner on Home's towers (game mode; the visor carries its card and button) -->
+<script src="/builders/runner-button.js" defer></script>
+<script src="/builders/home-runner.js" defer></script>
+<script src="/builders/home-city.js?v=2026-11-12-runner" defer></script>
 <!-- task 1003455: the shared blocker-row renderer (window.OTBBlockersLib), read by
      both goal-inbox.js's attention-inbox slice below and the /blockers page.
      Loaded BEFORE goal-inbox.js, which calls it while rendering. -->

package/modules/hall-ui/public/visor.css

@@ -169,5 +169,32 @@ html[data-game="on"] .visor:not([hidden]) {
 .visor__row--hint:hover { color: var(--ink-soft); }
 .visor__sheet .visor__key { color: var(--ink-soft); background: none; }
 
+/* the card for what the scene picked (task 1005243): Home's tower and your runner on it. Centred
+   over the accent button it hands its one action to, the night panel between two strong
+   hairlines like the sheet, never wider than a short paragraph. The words are the scene's facts;
+   the status dot is the hall's status vocabulary (--ok / --warn / --info), never a colour of its own. */
+.visor__focus {
+  position: absolute; left: 50%; bottom: calc(var(--visor-inset-bottom) + 72px); transform: translateX(-50%);
+  pointer-events: auto; box-sizing: border-box; width: min(20rem, calc(100vw - 2 * var(--ds-space-gutter-narrow)));
+  padding: var(--ds-space-xs) var(--ds-space-sm) var(--ds-space-sm); background: var(--bg-card);
+  border: 0 solid var(--rule); border-left-width: var(--line-strong); border-right-width: var(--line-strong);
+}
+.visor__focus-head { display: flex; align-items: center; justify-content: space-between; gap: var(--ds-space-xs); }
+.visor__focus-title {
+  margin: 0; min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap;
+  font-family: var(--name-face); font-weight: var(--name-weight); text-transform: var(--name-case);
+  font-size: var(--ds-text-xl); letter-spacing: var(--name-space); color: var(--ink);
+}
+.visor__focus-status { display: flex; align-items: center; gap: var(--ds-space-xs); margin: 2px 0 0; font-size: var(--ds-text-md); color: var(--ink); }
+.visor__focus-status i { width: 10px; height: 10px; flex: none; background: var(--rule); }
+.visor__focus-status--ok i { background: var(--ok); }
+.visor__focus-status--warn i { background: var(--warn); }
+.visor__focus-status--info i { background: var(--info); }
+.visor__focus-status--danger i { background: var(--danger); }
+.visor__focus-lines { list-style: none; margin: var(--ds-space-xs) 0 0; padding: 0; color: var(--ink-soft); font-size: var(--ds-text-sm); line-height: 1.45; }
+.visor__focus-lines li + li { margin-top: 2px; }
+.visor__focus .visor__key { color: var(--ink-soft); background: none; }
+.visor__main--lead[aria-busy="true"] { cursor: progress; background: var(--accent-lift); }
+
 /* a phone (640px and narrower): the rules live in style.css’s shared phone block, so the
    visor adds no breakpoint of its own (the design-count ratchet). */

package/modules/hall-ui/public/visor.js

@@ -151,6 +151,64 @@
     render();
   }
 
+  // ---------- what the scene has picked (task 1005243) ----------
+  // A scene that picks something (Home's tower) hands the visor a small card about it:
+  // a title, one status, a few lines, and at most one action. The action becomes the
+  // accent button while the card is up (ADR 0403 §4: a scene's lead action reaches the
+  // accent button); the character's own main action is back when the card closes.
+  // The scene paints the pick; the visor paints the words and the button.
+  var focus = null;
+  function setFocus(f) {
+    var was = focus;
+    if (!f || typeof f !== 'object' || !f.title) focus = null;
+    else {
+      var lead = f.lead && f.lead.label && typeof f.lead.run === 'function' ? { label: String(f.lead.label), run: f.lead.run, busy: !!f.lead.busy } : null;
+      focus = {
+        key: String(f.key || f.title), title: String(f.title),
+        status: f.status && f.status.text ? { text: String(f.status.text), tone: String(f.status.tone || 'neutral') } : null,
+        lines: (Array.isArray(f.lines) ? f.lines : []).filter(Boolean).map(String).slice(0, 4),
+        lead: lead, onClose: typeof f.onClose === 'function' ? f.onClose : null,
+      };
+    }
+    if (focus && !was) document.addEventListener('keydown', onFocusKey, true);
+    if (!focus && was) document.removeEventListener('keydown', onFocusKey, true);
+    render();
+  }
+  // Closed by the person (Escape or the close mark): the scene is told, so it unpicks.
+  function dropFocus() {
+    var f = focus;
+    if (!f) return;
+    setFocus(null);
+    if (f.onClose) f.onClose();
+  }
+  // Escape closes the card before it reaches the options menu, but never while the sheet
+  // is open: the sheet's own capture listener takes that press.
+  function onFocusKey(e) {
+    if (!focus || sheet || e.key !== 'Escape' || !shown()) return;
+    e.preventDefault();
+    e.stopPropagation();
+    dropFocus();
+  }
+  var TONES = { ok: 1, warn: 1, info: 1, neutral: 1, danger: 1 };
+  function focusHtml() {
+    if (!focus) return '';
+    var st = focus.status;
+    return '<div class="visor__focus" role="group" aria-label="' + esc(focus.title) + '" aria-live="polite" data-visor-focus>' +
+      '<div class="visor__focus-head"><p class="visor__focus-title">' + esc(focus.title) + '</p>' +
+        '<button class="visor__close" type="button" data-visor-unfocus aria-label="Close">' + keyHtml('Esc') + '</button></div>' +
+      (st ? '<p class="visor__focus-status visor__focus-status--' + (TONES[st.tone] ? st.tone : 'neutral') + '"><i aria-hidden="true"></i>' + esc(st.text) + '</p>' : '') +
+      (focus.lines.length ? '<ul class="visor__focus-lines">' + focus.lines.map(function (l) { return '<li>' + esc(l) + '</li>'; }).join('') + '</ul>' : '') +
+      '</div>';
+  }
+  function mainHtml(main) {
+    if (focus && focus.lead) {
+      return '<button class="visor__main visor__main--lead" type="button" data-visor-lead' + (focus.lead.busy ? ' aria-busy="true"' : '') + '>' +
+        '<span>' + esc(focus.lead.label) + '</span></button>';
+    }
+    return '<a class="visor__main" data-visor-act="' + esc(main.id) + '" ' + actionAttrs(main) + '>' +
+      '<span>' + esc(main.label) + '</span>' + keyHtml(main.key) + '</a>';
+  }
+
   // ---------- drawing ----------
   var root = null, sheet = null, returnFocus = null;
   var NS = 'http://www.w3.org/2000/svg';
@@ -197,14 +255,14 @@
     return frameSvg() +
       (scene.place ? '<p class="visor__place">' + esc(scene.place) + '</p>' : '') +
       progressHtml() +
+      focusHtml() +
       '<div class="visor__foot">' +
         '<div class="visor__me">' +
           (sprite ? '<img class="visor__sprite" src="' + esc(sprite) + '" alt="" width="32" height="32" decoding="async">' : '') +
           '<span class="visor__who"><span class="visor__name">' + esc(NAMES[id]) + '</span>' +
           '<span class="visor__credits" data-visor-credits>' + creditsHtml(n) + '</span></span>' +
         '</div>' +
-        '<a class="visor__main" data-visor-act="' + esc(main.id) + '" ' + actionAttrs(main) + '>' +
-          '<span>' + esc(main.label) + '</span>' + keyHtml(main.key) + '</a>' +
+        mainHtml(main) +
         '<div class="visor__hints">' + scene.actions.map(function (a, i) { return a.lead ? placeHintHtml(a, i) : ''; }).join('') + acts.slice(1).map(hintHtml).join('') +
           '<button class="visor__hint visor__hint--sheet" type="button" data-visor-sheet aria-expanded="false" aria-controls="visor-sheet">' +
             '<span class="visor__dots" aria-hidden="true"></span>' + keyHtml(SHEET_KEY) + '<span>Actions</span></button>' +
@@ -328,6 +386,8 @@
     var t = e.target && e.target.closest ? e.target : null;
     if (!t) return;
     if (t.closest('[data-visor-close]')) { closeSheet(true); return; }
+    if (t.closest('[data-visor-unfocus]')) { dropFocus(); return; }
+    if (t.closest('[data-visor-lead]')) { if (focus && focus.lead && !focus.lead.busy) { closeSheet(false); focus.lead.run(); } return; }
     if (t.closest('[data-visor-sheet]')) { openSheet(); return; }
     var sc = t.closest('[data-visor-scene]');
     if (sc && scene) { var a = scene.actions[Number(sc.getAttribute('data-visor-scene'))]; closeSheet(false); if (a) a.run(); return; }
@@ -389,6 +449,9 @@
 
   window.OTBVisor = {
     scene: registerScene,
+    // a scene's pick: OTBVisor.focus({ title, status, lines, lead: { label, run }, onClose }) or focus(null)
+    focus: setFocus,
+    focused: function () { return focus ? focus.key : null; },
     render: render,
     open: openSheet,
     close: function () { closeSheet(true); },

package/modules/hall-ui/records/home-runner.md

@@ -0,0 +1,19 @@
+# Your runner on Home's towers — send it, see it, recall it (task 1005243, goal 1000142)
+
+Covers: `home-runner.js` (new), the tower pick and runner marker in `home-city-draw.js` / `home-city.css`, the visor's card (`visor.js` `OTBVisor.focus`, `visor.css` `.visor__focus*`), and the read `GET /api/bongos/autonomy/me/goals/:goalId/stats` (`modules/autonomy`). Game mode only.
+
+## What it settled
+
+- **The owner's brief (2026-11-12):** putting your Autobongos runner to work should feel like putting a builder on a building in a base-building game, and stay uncluttered. In game mode you tap a tower on Home (a tower is a goal), the visor offers **Send runner here**, and the tower then carries your runner. Tap it again for what it has done there and **Recall runner**.
+- **One tower at a time (owner, 2026-11-12).** Sending sets your goal picks to that one goal (`PUT /autonomy/me/goals`) and switches on any of your devices that are stopped (`POST /autonomy/runners/:host/run`). Recall switches them off and leaves the pick. Several picks made in Settings are "working on several goals": no tower carries the marker until you send it somewhere.
+- **ADR 0403 kept:** the scene only gets picked (the tower is lit and edged in the accent); the words and the one button are the visor's. `OTBVisor.focus({ title, status, lines, lead: { label, run }, onClose })` is the general mechanism: a scene's pick puts a small card on the glass and its action takes the accent button; Escape (or the card's Esc mark, or a tap on open ground) closes it before the options menu sees the press, and the character's own main action comes back. This answers ADR 0403 §4's open question for one action.
+- **Who sees it:** only a viewer the server says may run a runner (`GET /autonomy/fence` → `scope.may_run`, the `autonomy.run` atom). Signed out, without the atom, or in classic mode a tower stays the plain link to its goal and nothing is new.
+- **The marker** is the agent's robot face in the accent colour (yours, not anyone's agent), ringed by its state: working (accent ring that turns, CSS only, stilled by the hall's reduced-motion rule), starting, resting (dotted info ring), ready (soft ring), recalled (faded). It replaces the agent face `/home/city` would draw on that tower. Tapping it picks its tower.
+- **The numbers are the ledger's**, never the runner's own report: tasks the caller's runner shipped in that goal (`claims.autonomous` + outcome `shipped`), the tokens their sessions took (`session_records.total_tokens`), their average length, and the goal's `ready`/`active` tasks. Time left is that count × the average and is shown only when there is an average ("about 3 h"); with no runner history there it promises no time. The device's face (Running, Resting until 12:31 · 42 min, Device is off…) is `runner-button.js` `buttonState`, the same decision the Settings card draws.
+- **Not yet:** the percent of your Claude usage limit. That number lives only on the runner's PC; task 1005244 has the runner report it in its check-in.
+
+## Looking at it
+
+`hall-preview-fixture` in `.claude/launch.json` (port 4602, `--fixture-me`; the plain preview borrows the live `/me`, whose character may not be the Artisan). Set `localStorage hall-game=on`, `OTBCraftMode.setCharacter('artisan')`, and edit `autonomy__fence.json` / `autonomy__runners.json` to a project that allows goals (the checked-in fence has the switch off and no goals, which renders "Closed to runners" — a real state). The harness reads fixtures per request, so `OTBHomeRunner.refresh()` picks a change up without a restart. Fixtures added: `autonomy__me__goals__stats.json`, `autonomy__me__goals.put.json`.
+
+Tests: `tests/home_runner.mjs` (the card and marker decisions, run for real), `tests/autonomy_runner_goal_stats.mjs` (the read and route), `tests/hall_visor.mjs` (the card on the glass, its button, Escape order).

package/modules/hall-ui/records/visor.md

@@ -42,6 +42,10 @@ The glass was redrawn to the owner's mock-up "Cloud city: in the visor, minimal"
 - **Scenes.** The top arc, the notch and the place sit inside the top 64px (`--visor-arc`; the segments under them take the inset to 88px, `--visor-inset-top`), so no scene's top row is struck through. Home no longer shifts its greeting row left (there is no pill top-right to clear). The city's door rises above the foot row at every width, because the accent button is centred where the door stood. The sky's `visor-on` offsets are unchanged.
 - **Looking at it.** The stand-in scene in `tests/hall_visor.mjs` over the hall's real sheets; put a bright gradient behind it to check midday.
 
+## A scene's pick on the glass (task 1005243)
+
+`OTBVisor.focus({ key, title, status: { text, tone }, lines, lead: { label, run }, onClose })` puts a small card above the accent button (the night panel between two strong hairlines, like the sheet) and hands `lead` the accent button while it is up; `focus(null)` takes both away. Escape closes it in capture before the options menu, but never while the sheet is open. First user: Home's towers and your runner (`records/home-runner.md`).
+
 ## What it settled (task 1005148)
 
 - **The first look (2026-11-10, five mock-up rounds; replaced by the minimal visor above).** A quiet layout with "hairline instruments" from the helmet round: thin curved visor lines across the top, bottom and both sides, a small centre cross, and a compass of nine slanted cells along the top line with the one salmon marker under its centre. No tracker or radar (tried and dropped), no clipped corners: the pills stay round (DESIGN.md "pill or nothing"). No glow (DESIGN.md's rejected near-black-plus-neon HUD). The frame is one SVG in a 1000×1000 box stretched over the stage with non-scaling strokes, so it is a hairline at every size.

package/modules/render-deploy/routes/act.js

@@ -26,7 +26,7 @@ const log = api.logger('render-deploy');
 module.exports = function buildRenderDeployActRouter({ makeClient = defaultMakeClient, pool } = {}) {
   const router = express.Router();
 
-  router.post('/render-deploy/act', api.requireBuilder, api.requirePermission('core.pin.move'), api.requireActAlone('release'), async (req, res) => {
+  router.post('/render-deploy/act', api.requireBuilder, api.requirePermission('core.pin.move'), api.requireCardStepUp, api.requireActAlone('release'), async (req, res) => {
     const db = pool || api.pool;
     // Shape only, and strict: an undeclared field is refused. `confirm` and `expectLiveDeployId`
     // are left to the checks below so each gets its own plain refusal rather than a schema one.

package/modules/render-deploy/routes/app.js

@@ -35,7 +35,7 @@ module.exports = function buildRenderDeployAppRouter({ makeClient = defaultMakeC
     }
   });
 
-  router.put('/render-deploy/app', api.requireBuilder, api.requirePermission('core.pin.move'), async (req, res) => {
+  router.put('/render-deploy/app', api.requireBuilder, api.requirePermission('core.pin.move'), api.requireCardStepUp, async (req, res) => {
     if (api.validateOrRespond(req, res, {
       ownerId: { type: 'string', maxLength: 80 },
       serviceId: { type: 'string', maxLength: 80 },

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.24.95",
+  "version": "1.25.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.24.95",
+      "version": "1.25.1",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.24.95",
+  "version": "1.25.1",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -11683,5 +11683,22 @@
       "id": "1005218",
       "text": "The three characters have a new look: space-faring aliens made of two animals each, drawn at a larger size. Each has its own colour, and in the game the visor now takes your character's colour and shows your character wearing"
     }
+  ],
+  "1.24.96": [
+    {
+      "id": "1005243",
+      "text": "In game mode, tap a goal tower on Home to send your Autobongos runner there with one visor button; the tower then shows your runner at work, and tapping it shows tasks done, tokens used, time left and a Recall button."
+    }
+  ],
+  "1.25.0": [],
+  "1.25.1": [
+    {
+      "id": "1004747",
+      "text": "Sensitive actions (rank changes, deploys, signing sessions out, treasury payouts) can now require a tap of your hardware card within the last 10 minutes. Nobody is required to yet; an Archon switch comes next."
+    },
+    {
+      "id": "1005040",
+      "text": "Added the Stripe Connect test-mode payment adapter (economy.processor port). Every payout, cash-out, balance and ledger-check call now has a processor to talk to once a test key is set; nothing is live."
+    }
   ]
 }

package/scripts/bongos/fitness.js

@@ -619,7 +619,7 @@ const KERNEL_FILES = [
   // by the doorway, so leaving it off reads as a kernel->non-kernel leak. It imports
   // only module-seams.js and logger.js (both on this roster) and reaches the
   // government module through its port, never by require.
-  'src/bongos/act-alone.js',
+  'src/bongos/act-alone.js', 'src/bongos/step-up.js', 'src/bongos/passkeys.js', // trust gate + its store (task 1004747, ADR 0382)
 ];
 
 // Kernel files exempt from the no-module-keys scan (Check 10) because naming a

package/scripts/bongos/government-walk.js

@@ -687,13 +687,13 @@ async function runWalk() {
 
   // The session: whoever the request says it is, from this project's people.
   const asHeader = 'x-walk-builder';
-  const sessionHeader = 'x-walk-session';
+  const sessionHeader = 'x-walk-session'; req('src/bongos/passkeys').stepUpStatus = async () => ({ required: false, fresh: false }); // task 1004747: no card is required in the walk
   const fakeBuilder = (r, res, nextFn) => {
     const b = store.builders.get(String(r.headers[asHeader] || ''));
     if (!b || b.status !== 'active') return res.status(401).json({ error: { code: 'not_signed_in' } });
     r.builder = { id: Number(b.id), rank: b.rank, github_login: b.github_login, display_name: b.display_name };
     // an AI session's CLI token, or a person in the hall (task 1004704's line)
-    r.gdsSession = { source: r.headers[sessionHeader] === 'cli' ? 'cli' : 'web' };
+    r.gdsSession = { source: r.headers[sessionHeader] === 'cli' ? 'cli' : 'web', session_id: '1' }; // session_id: the step-up gate (task 1004747) needs one
     return nextFn();
   };
   api.requireBuilder = fakeBuilder;

package/scripts/hall-preview/server.js

@@ -112,6 +112,8 @@ let liveWhy = null;
 // me__recent-ships.json. Query strings are ignored when matching. Id-bearing
 // paths fall back to the generic names below so one fixture serves any id.
 const FIXTURE_FALLBACKS = [
+  // Home's runner card (task 1005243): one goal's runner numbers, the same for every goal
+  [/^autonomy\/me\/goals\/\d+\/stats$/, 'autonomy__me__goals__stats'],
   [/^goals\/\d+\/conflicts$/, 'goals__conflicts'],
   [/^goals\/\d+\/dependency-forest$/, 'goals__dependency-forest'],
   [/^goals\/\d+\/requests$/, 'goals__requests'],
@@ -221,6 +223,8 @@ const CANNED_WRITES = [
   ['POST', /^auth\/runner-code\/issue$/, 'auth__runner-code__issue.post'],
   ['POST', /^me\/sessions\/revoke$/, 'me__sessions__revoke.post'],
   ['DELETE', /^autonomy\/runners\/[^/]+$/, 'autonomy__runners.delete'],
+  // Home's runner card (task 1005243): Send runner here writes the one pick.
+  ['PUT', /^autonomy\/me\/goals$/, 'autonomy__me__goals.put'],
 ];
 
 // A DATE THAT ROTS CANNOT DEMO AN AGE SIGNAL (task 1004041). The help-request