@bongos/core 1.25.12 → 1.25.14

package/modules/front-door-guide/routes/front-door-guide-plan.js

@@ -0,0 +1,145 @@
+// modules/front-door-guide/routes/front-door-guide-plan.js — where the start-a-project chat
+// ends (task 1005273): the visitor's plan, then the chat and plan moving onto the account
+// they sign up as.
+//
+//   POST /front-door-guide/conversations/:id/plan    write (or re-read) the plan   { token, website? }
+//   POST /front-door-guide/conversations/:id/attach  put the chat on my account    { token }
+//   GET  /front-door-guide/mine                      my newest chat and its plan
+//
+// The plan is ONE structured-output call per chat (a JSON schema, never parsed prose),
+// asked once the visitor has said something; a second request re-reads the stored plan
+// and spends nothing. Its modules come only from the live catalog (context.moduleCatalog,
+// the project-creation picker's own list). It is held to the site's daily and monthly
+// budget like a reply, and its cost lands in the same ledger; it is not one of the
+// visitor's messages.
+//
+// Attaching is the sign-up hand-off's call (task 1005274): right after the visitor signs
+// in, the page that still holds the chat's token sends it here. A chat already on another
+// account is never moved. A chat nobody attaches is deleted by the retention sweep
+// (pollers/retention-sweep.js) after BONGOS_FRONT_DOOR_GUIDE_RETENTION_DAYS.
+
+'use strict';
+
+const express = require('express');
+const api = require('../../../src/module-api');
+const G = require('../guide');
+const P = require('../plan');
+const db = require('../db');
+const claude = require('../claude');
+const { readSettings } = require('../settings');
+const L = require('../limits');
+const C = require('../context');
+
+const log = api.logger('front-door-guide');
+const ID_RE = /^\d{1,18}$/;
+const TOKEN_RE = /^[A-Za-z0-9_-]{16,64}$/;
+
+// The words for "write my plan now", sent as the visitor's last turn of the plan call.
+const PLAN_ASK = 'Please write my first plan now, from what I have told you.';
+
+function planAnswer(conv, settings) {
+  return {
+    ok: true, mode: 'plan', plan: conv.plan, next: P.NEXT_STEP,
+    message: G.END_REASONS.planned,
+    saved: G.savedNotice(settings.retentionDays),
+    conversation: G.conversationView(conv, settings),
+  };
+}
+
+// What a signed-in builder sees of their chat: never the visitor hash.
+function mineView(conv, settings) {
+  return {
+    id: String(conv.id),
+    starting_point: conv.starting_point || null,
+    status: conv.status,
+    end_reason: conv.end_reason || null,
+    attached_at: conv.attached_at || null,
+    transcript: G.transcriptView(conv.messages),
+    plan: conv.plan || null,
+    ...(conv.plan ? { next: P.NEXT_STEP } : {}),
+    messages_used: Number(conv.visitor_messages) || 0,
+    max_message_chars: settings.maxMessageChars,
+  };
+}
+
+module.exports = function buildFrontDoorGuidePlanRouter() {
+  const router = express.Router();
+  let current = readSettings();
+  const fresh = (req, res, next) => { current = readSettings(); next(); };
+  const planLimit = L.makeLimiter({ windowMs: 60_000, max: () => current.messagesPerMinute, scope: 'front-door-guide-plan' });
+
+  // rank: public — the visitor has no account yet.
+  router.post('/front-door-guide/conversations/:id/plan', fresh, planLimit, api.asyncHandler('POST /front-door-guide/conversations/:id/plan', async (req, res) => {
+    if (api.validateOrRespond(req, res, {
+      token: { required: true, type: 'string', maxLength: 64 },
+      website: { type: 'string', maxLength: 500 },
+    })) return;
+    const s = current;
+    const body = req.body || {};
+    if (!ID_RE.test(String(req.params.id)) || !TOKEN_RE.test(body.token)) return res.status(400).json({ ok: false, error: 'bad_request' });
+    const conv = await db.getConversation(req.params.id, L.tokenHash(body.token));
+    if (!conv) return res.status(404).json({ ok: false, error: 'not_found' });
+    if (conv.plan) return res.json(planAnswer(conv, s));
+    if (!(Number(conv.visitor_messages) > 0)) return res.status(409).json({ ok: false, error: 'too_early' });
+    if (G.botCheck({ body, userAgent: req.get('user-agent'), now: Date.now(), minFirstMessageMs: s.minFirstMessageMs })) {
+      return res.json(G.formAnswer('check_failed'));
+    }
+    if (!s.apiKey) return res.json(G.formAnswer('no_key'));
+
+    const catalog = await C.moduleCatalog();
+    const schema = P.planSchema(catalog.optional.map((m) => m.key));
+    const system = `${G.systemPrompt(C.productName(), conv.starting_point)}\n\n${P.planInstructions(catalog, conv.starting_point)}`;
+    const messages = [...(conv.messages || []), { role: 'user', content: PLAN_ASK }];
+    const estimate = G.estimateMicro({ model: s.model, system: system + JSON.stringify(schema), messages, maxReplyTokens: s.maxPlanTokens });
+    const budget = await C.siteBudgetReason(s, estimate);
+    if (budget) return res.json(G.formAnswer(budget));
+
+    const visitor = conv.visitor_hash;
+    const release = C.reservations.take(visitor, estimate);
+    if (!release) return res.status(429).json({ ok: false, error: 'busy', retry_after_seconds: 2 });
+    let result;
+    try {
+      result = await claude.askGuide({ client: claude.createClient(s.apiKey), settings: s, system, messages, schema });
+    } finally {
+      release();
+    }
+    if (!result.ok) {
+      log.warn({ conversation_id: String(conv.id), error: result.error }, 'front-door-guide: plan call failed');
+      return res.json(G.formAnswer('unavailable'));
+    }
+    const u = result.usage || {};
+    const call = {
+      visitorHash: visitor, model: result.model, costMicro: G.costMicro(result.model, u), stopReason: result.stopReason || null,
+      inputTokens: Number(u.input_tokens) || 0, outputTokens: Number(u.output_tokens) || 0,
+      cacheReadTokens: Number(u.cache_read_input_tokens) || 0, cacheWriteTokens: Number(u.cache_creation_input_tokens) || 0,
+    };
+    // A refused or cut-off reply may not match the schema: it costs what it cost, and the
+    // visitor is offered the form rather than half a plan.
+    const plan = result.stopReason === 'end_turn' ? P.parsePlan(G.replyText(result.content), catalog, conv.starting_point) : null;
+    if (!plan) {
+      await db.recordPlanSpend(conv.id, call);
+      log.warn({ conversation_id: String(conv.id), stop_reason: result.stopReason }, 'front-door-guide: no usable plan');
+      return res.json(G.formAnswer('unavailable'));
+    }
+    const saved = await db.savePlan(conv.id, plan, call);
+    res.json(planAnswer(saved || { ...conv, plan }, s));
+  }));
+
+  // rank: builder — the visitor has just signed in; the chat moves onto their account.
+  router.post('/front-door-guide/conversations/:id/attach', api.requireBuilder, fresh, api.asyncHandler('POST /front-door-guide/conversations/:id/attach', async (req, res) => {
+    if (api.validateOrRespond(req, res, { token: { required: true, type: 'string', maxLength: 64 } })) return;
+    const token = req.body.token;
+    if (!ID_RE.test(String(req.params.id)) || !TOKEN_RE.test(token)) return res.status(400).json({ ok: false, error: 'bad_request' });
+    const conv = await db.attachToBuilder(req.params.id, L.tokenHash(token), req.builder.id);
+    if (!conv) return res.status(404).json({ ok: false, error: 'not_found' });
+    res.json({ ok: true, conversation: mineView(conv, current) });
+  }));
+
+  // rank: builder — my newest chat and plan (the creation wizard's pre-fill reads it).
+  router.get('/front-door-guide/mine', api.requireBuilder, fresh, api.asyncHandler('GET /front-door-guide/mine', async (req, res) => {
+    const conv = await db.latestForBuilder(req.builder.id);
+    res.json({ ok: true, conversation: conv ? mineView(conv, current) : null });
+  }));
+
+  return router;
+};

package/modules/front-door-guide/routes/front-door-guide.js

@@ -7,6 +7,9 @@
 //   POST /front-door-guide/conversations/:id/messages send one message   { token, text, website? }
 //   GET  /front-door-guide/conversations/:id          read it back       header x-guide-token
 //
+// The plan, attaching a chat to an account at sign-up, and "my plan" are in
+// routes/front-door-guide-plan.js (task 1005273).
+//
 // rank: public — every route. The visitor has no account yet; that is the point. What
 // stands in for one: per-visitor rate limits, a bot check, a token per conversation, and
 // every money cap enforced here before a call is made (the per-visitor message count and
@@ -25,37 +28,17 @@ const db = require('../db');
 const claude = require('../claude');
 const { readSettings } = require('../settings');
 const L = require('../limits');
+const C = require('../context');
+const P = require('../plan');
+const SP = require('../starting-point');
 
 const log = api.logger('front-door-guide');
 const ID_RE = /^\d{1,18}$/;
 const TOKEN_RE = /^[A-Za-z0-9_-]{16,64}$/;
 
-function salt() {
-  let s;
-  try { s = api.resolveEnv('FRONT_DOOR_GUIDE_SALT'); } catch (_) { s = null; }
-  if (s) return s;
-  let name = 'bongos';
-  try { name = api.instanceDbName() || name; } catch (_) { /* the default salt still separates visitors */ }
-  return `front-door-guide:${name}`;
-}
-
-function productName() {
-  try { return api.branding().identity.productName || 'Cloud Bongos'; } catch (_) { return 'Cloud Bongos'; }
-}
-
-// Can the site afford a call of `extraMicro` right now? → null, or the form reason.
-async function siteBudgetReason(settings, extraMicro, reservations) {
-  const pending = reservations.siteMicro();
-  // Spent is spent (>=), and a call must also fit in what is left (>).
-  const over = (spent, cap) => spent + pending >= cap || spent + pending + extraMicro > cap;
-  if (over(await db.siteSpendMicro('day'), settings.dailyBudgetMicro)) return 'daily_budget';
-  if (over(await db.siteSpendMicro('month'), settings.monthlyBudgetMicro)) return 'monthly_budget';
-  return null;
-}
-
 module.exports = function buildFrontDoorGuideRouter() {
   const router = express.Router();
-  const reservations = L.makeReservations();
+  const { reservations, siteBudgetReason, salt, productName } = C;
   let current = readSettings();
   const knobs = () => current;
 
@@ -68,7 +51,7 @@ module.exports = function buildFrontDoorGuideRouter() {
   // rank: public — the landing asks before it offers the chat.
   router.get('/front-door-guide/status', fresh, statusLimit, api.asyncHandler('GET /front-door-guide/status', async (req, res) => {
     const s = knobs();
-    const reason = !s.apiKey ? 'no_key' : await siteBudgetReason(s, 0, reservations);
+    const reason = !s.apiKey ? 'no_key' : await siteBudgetReason(s, 0);
     res.json({
       ok: true,
       mode: reason ? 'form' : 'chat',
@@ -79,24 +62,30 @@ module.exports = function buildFrontDoorGuideRouter() {
 
   // rank: public — start a chat. Answers the greeting and the conversation's token.
   router.post('/front-door-guide/conversations', fresh, startLimit, api.asyncHandler('POST /front-door-guide/conversations', async (req, res) => {
-    if (api.validateOrRespond(req, res, { website: { type: 'string', maxLength: 500 } })) return;
+    if (api.validateOrRespond(req, res, {
+      website: { type: 'string', maxLength: 500 },
+      starting_point: { type: 'string', enum: SP.STARTING_POINTS },
+    })) return;
     const s = knobs();
     const body = req.body || {};
     if (G.botCheck({ body, userAgent: req.get('user-agent'), now: Date.now(), minFirstMessageMs: s.minFirstMessageMs })) {
       return res.json(G.formAnswer('check_failed'));
     }
     if (!s.apiKey) return res.json(G.formAnswer('no_key'));
-    const budget = await siteBudgetReason(s, 0, reservations);
+    const budget = await siteBudgetReason(s, 0);
     if (budget) return res.json(G.formAnswer(budget));
     const visitor = L.visitorHash(L.clientIp(req), salt());
     const used = await db.visitorUsage(visitor);
     if (used.messages >= s.maxMessages || used.spendMicro >= s.visitorCapMicro) return res.json(G.formAnswer('visitor_limit'));
     const token = L.newToken();
-    const conv = await db.createConversation(L.tokenHash(token), visitor);
+    let conv = await db.createConversation(L.tokenHash(token), visitor);
+    if (SP.isStartingPoint(body.starting_point)) conv = (await db.setStartingPoint(conv.id, body.starting_point)) || conv;
     res.status(201).json({
       ok: true, mode: 'chat',
       conversation: { ...G.conversationView(conv, s), token },
-      greeting: G.GREETING,
+      greeting: SP.greetingFor(conv.starting_point),
+      starting_point_options: SP.OPTIONS,
+      saved: G.savedNotice(s.retentionDays),
     });
   }));
 
@@ -108,6 +97,7 @@ module.exports = function buildFrontDoorGuideRouter() {
       token: { required: true, type: 'string', maxLength: 64 },
       text: { required: true, type: 'string', maxLength: 100_000 },
       website: { type: 'string', maxLength: 500 },
+      starting_point: { type: 'string', enum: SP.STARTING_POINTS },
     })) return;
     const s = knobs();
     const body = req.body || {};
@@ -122,7 +112,10 @@ module.exports = function buildFrontDoorGuideRouter() {
     const conv = await db.getConversation(req.params.id, L.tokenHash(body.token));
     if (!conv) return res.status(404).json({ ok: false, error: 'not_found' });
     const view = () => G.conversationView(conv, s);
-    const ended = (reason) => ({ ok: true, mode: 'ended', reason, message: G.END_REASONS[reason] || G.END_REASONS.message_cap, conversation: view() });
+    const ended = (reason) => ({
+      ok: true, mode: 'ended', reason, message: G.END_REASONS[reason] || G.END_REASONS.message_cap,
+      next_step: reason === 'planned' ? 'sign_up' : 'plan', conversation: view(),
+    });
     if (conv.status === 'ended') return res.json(ended(conv.end_reason));
 
     const bot = G.botCheck({
@@ -141,14 +134,20 @@ module.exports = function buildFrontDoorGuideRouter() {
       return res.json(ended('message_cap'));
     }
 
-    const system = G.systemPrompt(productName());
+    // A starting point sent with the message (the visitor pressed one of the buttons)
+    // is stored first, so this reply already follows it.
+    if (SP.isStartingPoint(body.starting_point) && conv.starting_point !== body.starting_point) {
+      Object.assign(conv, { starting_point: body.starting_point });
+      await db.setStartingPoint(conv.id, body.starting_point);
+    }
+    const system = G.systemPrompt(productName(), conv.starting_point);
     const messages = [...(conv.messages || []), { role: 'user', content: text }];
     const estimate = G.estimateMicro({ model: s.model, system, messages, maxReplyTokens: s.maxReplyTokens });
     if (used.spendMicro + estimate > s.visitorCapMicro) {
       await db.endConversation(conv.id, 'visitor_budget');
       return res.json(ended('visitor_budget'));
     }
-    const budget = await siteBudgetReason(s, estimate, reservations);
+    const budget = await siteBudgetReason(s, estimate);
     if (budget) return res.json(G.formAnswer(budget));
 
     const release = reservations.take(visitor, estimate);
@@ -182,7 +181,7 @@ module.exports = function buildFrontDoorGuideRouter() {
     res.json({
       ok: true,
       mode: endReason ? 'ended' : 'chat',
-      ...(endReason ? { reason: endReason, message: G.END_REASONS[endReason] } : {}),
+      ...(endReason ? { reason: endReason, message: G.END_REASONS[endReason], next_step: 'plan' } : {}),
       ...(refused ? { declined: true } : {}),
       reply: { text: reply },
       conversation: G.conversationView(saved || { ...conv, visitor_messages: Number(conv.visitor_messages) + 1 }, s),
@@ -199,6 +198,10 @@ module.exports = function buildFrontDoorGuideRouter() {
       ok: true,
       conversation: { ...G.conversationView(conv, knobs()), status: conv.status, end_reason: conv.end_reason || null },
       transcript: G.transcriptView(conv.messages),
+      plan: conv.plan || null,
+      ...(conv.plan ? { next: P.NEXT_STEP } : {}),
+      saved: G.savedNotice(knobs().retentionDays),
+      attached: conv.builder_id != null,
     });
   }));
 

package/modules/front-door-guide/settings.js

@@ -25,6 +25,8 @@ const DEFAULTS = Object.freeze({
   STARTS_PER_HOUR: 5,            // new conversations per visitor per hour
   MESSAGES_PER_MINUTE: 6,        // messages per visitor per minute
   MIN_FIRST_MESSAGE_MS: 1500,    // a person takes longer than this to type a first line
+  MAX_PLAN_TOKENS: 4000,         // the plan, thinking included
+  RETENTION_DAYS: 30,            // a chat nobody signed up for is deleted after this
 });
 
 const EFFORTS = new Set(['low', 'medium', 'high', 'xhigh', 'max']);
@@ -62,6 +64,8 @@ function readSettings({ resolve = defaultResolve } = {}) {
     startsPerHour: intKnob(read, 'STARTS_PER_HOUR'),
     messagesPerMinute: intKnob(read, 'MESSAGES_PER_MINUTE'),
     minFirstMessageMs: intKnob(read, 'MIN_FIRST_MESSAGE_MS'),
+    maxPlanTokens: intKnob(read, 'MAX_PLAN_TOKENS'),
+    retentionDays: intKnob(read, 'RETENTION_DAYS'),
   };
 }
 

package/modules/front-door-guide/starting-point.js

@@ -0,0 +1,55 @@
+// modules/front-door-guide/starting-point.js — fresh or existing (task 1005279). The
+// guide asks early whether the visitor is starting from nothing or already has something
+// (code, documents, artwork), and for an existing project it asks what they have and what
+// they want to build next, then plans from their DESCRIPTION.
+//
+// THE OWNER'S HARD RULE: the platform never reads a visitor's repository or files on its
+// own AI bill. So this branch adds no upload, no fetch and no link-reading path: the call
+// carries text only and no tools (claude.buildRequest), and the guide is told it cannot
+// open anything and must ask for a description instead. The deep read of their work is
+// done later by their own AI, after sign-up (task 1005280).
+//
+// Pure.
+
+'use strict';
+
+const STARTING_POINTS = Object.freeze(['fresh', 'existing']);
+
+// The two answers, for the front end's buttons under the greeting.
+const OPTIONS = Object.freeze([
+  Object.freeze({ value: 'fresh', label: 'Starting fresh' }),
+  Object.freeze({ value: 'existing', label: 'I already have something' }),
+]);
+
+const GREETINGS = Object.freeze({
+  unknown: 'Hi! Are you starting a new project from scratch, or do you already have something, like code, documents or artwork? Either way, tell me what you would like to build.',
+  fresh: 'Hi! Tell me what you would like to build and what you want it to do for you. A sentence or two is plenty.',
+  existing: 'Hi! Tell me about what you already have (code, documents, artwork, and how far along it is), and what you want to build next. Describe it in your own words: I cannot open files or links.',
+});
+
+const isStartingPoint = (v) => STARTING_POINTS.includes(v);
+
+function greetingFor(startingPoint) {
+  return GREETINGS[isStartingPoint(startingPoint) ? startingPoint : 'unknown'];
+}
+
+// The part of the guide's instructions that depends on the starting point. Every version
+// carries the no-reading rule, because a visitor can mention existing work at any time.
+function instructionsFor(startingPoint) {
+  const noReading = 'You cannot see, open or read any file, repository, code, document, image or link, and nothing the visitor has made is sent to you. Never ask them to paste code, upload files or share links. If they paste a link, say you cannot open links and ask them to describe it. Plan only from what they tell you in their own words; after sign-up, their own AI tools can look at their existing work in detail.';
+  if (startingPoint === 'existing') {
+    return [
+      'This visitor already has something. Early on, ask what they have (code, documents, artwork or something else, and how far along it is) and what they want to build next.',
+      noReading,
+    ].join('\n');
+  }
+  if (startingPoint === 'fresh') {
+    return ['This visitor is starting fresh, from an idea.', noReading].join('\n');
+  }
+  return [
+    'You do not yet know whether this visitor is starting fresh or already has something. If it is not clear from what they say, ask early, in one short question. If they already have something, ask what they have (code, documents, artwork, how far along) and what they want to build next.',
+    noReading,
+  ].join('\n');
+}
+
+module.exports = { STARTING_POINTS, OPTIONS, GREETINGS, isStartingPoint, greetingFor, instructionsFor };

package/modules/hall-ui/public/genesis-home.js

@@ -188,6 +188,30 @@
     }).join('') + '</ol>';
   }
 
+  // task 1005109: Copy prompt on each task still to do, so the founder pastes it into
+  // Claude without leaving Genesis. The Tasks board's own button (work.js), and only that
+  // one verb: the owner declined a Claim button here. A finished task offers nothing.
+  function copyButtonHtml(t) {
+    if (t.finished) return '';
+    return '<button class="task__copy" type="button" data-genesis-copy="' + esc(t.id) + '"'
+      + ' title="Copy the task prompt to your clipboard" aria-label="Copy prompt for task ' + esc(t.id) + '">'
+      + '<span class="task__copy-icon" aria-hidden="true">📋</span></button>';
+  }
+
+  // The click: the stage task (with the description the genesis feed carries) handed
+  // to the hall's one Copy prompt (task-lib.js copyTaskPrompt). No wording of our own.
+  function copyPrompt(btn, state) {
+    var id = btn.getAttribute('data-genesis-copy');
+    var g = state.genesis;
+    var lib = window.OTBTaskLib;
+    var t = null;
+    (g ? g.stages : []).forEach(function (s) {
+      (s.tasks || []).forEach(function (x) { if (String(x.id) === String(id)) t = x; });
+    });
+    if (!t || !lib || typeof lib.copyTaskPrompt !== 'function') return Promise.resolve(false);
+    return lib.copyTaskPrompt(t, btn, toast);
+  }
+
   function nowHtml(g, viewerId) {
     var s = g.stages.find(function (x) { return x.state === 'now'; });
     if (!s) return '';
@@ -195,7 +219,8 @@
       ? '<ul class="genesis__tasks">' + s.tasks.map(function (t) {
         return '<li class="genesis__task' + (t.finished ? ' is-finished' : '') + '">'
           + '<a class="genesis__task-t" href="/task/' + encodeURIComponent(t.id) + '">' + esc(t.title) + '</a>'
-          + window.OTB.statusPill(t.status, { small: true, extraClass: 'genesis__task-st' }) + '</li>';
+          + window.OTB.statusPill(t.status, { small: true, extraClass: 'genesis__task-st' })
+          + copyButtonHtml(t) + '</li>';
       }).join('') + '</ul>'
       : '<p class="genesis__note">No tasks for this stage yet.</p>';
     return '<section class="genesis__now" aria-labelledby="genesis-now-h">'
@@ -356,7 +381,9 @@
     host.addEventListener('click', function (e) {
       var t = e.target.closest('button');
       if (!t || !host.contains(t)) return;
-      if (t.hasAttribute('data-genesis-plan')) {
+      if (t.hasAttribute('data-genesis-copy')) {
+        copyPrompt(t, state);
+      } else if (t.hasAttribute('data-genesis-plan')) {
         // The government picked here is filed as a charter amendment with the plan
         // (task 1004656). When the founder's one yes decides it, saving the plan is
         // that yes too, the same one-click fast-track the stage closes take.

package/modules/hall-ui/public/goals-page.js

@@ -390,20 +390,8 @@
   // goal-title match — a single goal makes that redundant).
   // Copy-prompt (work.js:454-503). deHashRefs stops a bare #NNN autolinking to
   // GitHub in a pasted session; the prompt points the builder at the hall task URL.
-  // Clipboard write that says whether it worked (the bulk prompts report it).
-  async function copyText(text) {
-    try { await navigator.clipboard.writeText(text); return true; }
-    catch (_) {
-      try {
-        const ta = document.createElement('textarea');
-        ta.value = text; ta.style.position = 'fixed'; ta.style.opacity = '0';
-        document.body.appendChild(ta); ta.select();
-        const ok = document.execCommand('copy');
-        ta.remove();
-        return ok;
-      } catch (_e) { return false; }
-    }
-  }
+  // Clipboard write that says whether it worked (the bulk prompts report it): task-lib's one copy.
+  const copyText = (text) => window.OTBTaskLib.copyText(text);
   // task 1004587 (ADR 0366 D4) — the optional "Plan with Claude" hand-off; every planning form works without it.
   async function planWithClaude() {
     const d = state.details.get(String(state.current));
@@ -419,21 +407,7 @@
   async function copyPromptForTask(taskId, btn) {
     const t = state.work.todo.find((x) => String(x.id) === String(taskId));
     if (!t) return;
-    const prompt = buildPromptForTask(t);
-    const icon = btn.querySelector('.task__copy-icon');
-    try {
-      await navigator.clipboard.writeText(prompt);
-      if (icon) icon.textContent = '✓';
-      setTimeout(() => { if (icon) icon.textContent = '📋'; }, 1600);
-      toast(`Prompt for #${taskId} copied to your clipboard.`);
-    } catch (err) {
-      try {
-        const ta = document.createElement('textarea');
-        ta.value = prompt; ta.style.position = 'fixed'; ta.style.opacity = '0';
-        document.body.appendChild(ta); ta.select(); document.execCommand('copy'); ta.remove();
-        toast(`Prompt for #${taskId} copied.`);
-      } catch (_) { toast('Could not copy to the clipboard. Try again.'); }
-    }
+    await window.OTBTaskLib.copyTaskPrompt(t, btn, toast);
   }
 
   // The claimable card (ported from work.js renderClaimable, work.js:345-394).

package/modules/hall-ui/public/index.html

@@ -125,7 +125,8 @@
 <script src="/builders/founding-mark.js?v=2026-09-30-founding" defer></script>
 <script src="/builders/hall-widgets.js?v=2026-11-04-reading-room" defer></script>
 <!-- The genesis home (task 1004423): a Home banner card that renders only in founding mode. -->
-<script src="/builders/genesis-home.js?v=2026-10-01-genesis" defer></script>
+<script src="/builders/task-lib.js" defer></script>
+<script src="/builders/genesis-home.js?v=2026-11-13-copy" defer></script>
 <!-- task 1005054: the project city — the drawing (pure) and the widget — in the
      home-stats zone; the Goals card (goals.js) left Home with it. -->
 <script src="/builders/city-draw.js" defer></script>

package/modules/hall-ui/public/task-lib.js

@@ -205,11 +205,56 @@
     return (optionValues || []).includes(focusId) ? focusId : null;
   }
 
+  // copyText(text) → Promise<boolean>: the hall's one clipboard write. The async
+  // clipboard first, then the hidden-textarea fallback for an insecure context or a
+  // browser without it; says whether it worked so the caller can tell the builder.
+  async function copyText(text) {
+    try { await navigator.clipboard.writeText(text); return true; } catch (_) { /* fall back */ }
+    try {
+      const ta = document.createElement('textarea');
+      ta.value = text;
+      ta.setAttribute('readonly', '');
+      ta.style.position = 'fixed';
+      ta.style.opacity = '0';
+      document.body.appendChild(ta);
+      ta.select();
+      const ok = document.execCommand('copy');
+      ta.remove();
+      return ok;
+    } catch (_) { return false; }
+  }
+
+  // copyTaskPrompt(t, btn, toast) — the per-task "Copy prompt" button's whole click
+  // (task 1005109): buildPromptForTask's text onto the clipboard, the button's 📋 →
+  // ✓ flip for 1.6s, and the one toast wording. The Tasks board, a goal's to-do list
+  // and the Genesis stage list all call this, so the button behaves and reads the
+  // same everywhere. `t` needs its description, or the prompt says "(no description)".
+  async function copyTaskPrompt(t, btn, toast) {
+    const say = typeof toast === 'function' ? toast : () => {};
+    const ok = await copyText(buildPromptForTask(t));
+    if (!ok) { say('Could not copy to the clipboard. Try again.'); return false; }
+    if (btn) {
+      const icon = btn.querySelector && btn.querySelector('.task__copy-icon');
+      const label = btn.querySelector && btn.querySelector('.task__copy-label');
+      btn.setAttribute('data-copied', '1');
+      if (icon) icon.textContent = '✓';
+      if (label) label.textContent = 'Copied';
+      setTimeout(() => {
+        btn.setAttribute('data-copied', '0');
+        if (icon) icon.textContent = '📋';
+        if (label) label.textContent = 'Copy prompt';
+      }, 1600);
+    }
+    say(`Prompt for task ${t.id} copied to your clipboard.`);
+    return true;
+  }
+
   const api = {
     focusVersionDefault,
     msOf, taskActivityMs, STALE_CHOICES, isStale,
     priorityRank, touchesConflict, conflictPeers, conflictChipHtml, rankTagHtml, deHashRefs,
     creditsPerMinute, buildPromptForTask, buildPlanPromptForGoal, friendlyBatchReason,
+    copyText, copyTaskPrompt,
   };
   if (typeof window !== 'undefined') window.OTBTaskLib = api;
   if (typeof module !== 'undefined' && module.exports) module.exports = api;

package/modules/hall-ui/public/work.js

@@ -641,54 +641,10 @@
   async function copyPromptForTask(taskId, btn) {
     const t = taskState.all.find((x) => String(x.id) === String(taskId));
     if (!t) return;
-    const prompt = buildPromptForTask(t);
-    const icon = btn.querySelector('.task__copy-icon');
-    const label = btn.querySelector('.task__copy-label');
-    try {
-      await navigator.clipboard.writeText(prompt);
-      btn.dataset.copied = '1';
-      if (icon) icon.textContent = '✓';
-      if (label) label.textContent = 'Copied';
-      setTimeout(() => {
-        btn.dataset.copied = '0';
-        if (icon) icon.textContent = '📋';
-        if (label) label.textContent = 'Copy prompt';
-      }, 1600);
-      toast(`Prompt for #${taskId} copied to your clipboard.`);
-    } catch (err) {
-      try {
-        const ta = document.createElement('textarea');
-        ta.value = prompt;
-        ta.style.position = 'fixed';
-        ta.style.opacity = '0';
-        document.body.appendChild(ta);
-        ta.select();
-        document.execCommand('copy');
-        ta.remove();
-        toast(`Prompt for #${taskId} copied.`);
-      } catch (_) {
-        toast('Could not copy to the clipboard. Try again.');
-      }
-    }
-  }
-  async function copyText(text) {
-    try { await navigator.clipboard.writeText(text); return true; }
-    catch (_) {
-      try {
-        const ta = document.createElement('textarea');
-        ta.value = text;
-        ta.style.position = 'fixed';
-        ta.style.opacity = '0';
-        document.body.appendChild(ta);
-        ta.select();
-        const ok = document.execCommand('copy');
-        ta.remove();
-        return ok;
-      } catch (_e) {
-        return false;
-      }
-    }
+    await window.OTBTaskLib.copyTaskPrompt(t, btn, toast);
   }
+  // The hall's one clipboard write (task-lib.js), kept under this name for the ctx below.
+  const copyText = (text) => window.OTBTaskLib.copyText(text);
 
   // ---- bulk selection (task 1759) -------------------------------------------
 

package/modules/lifecycle/kickoff-seed.js

@@ -112,20 +112,24 @@ async function seedGenesisStages({ builderId = null, existing = false } = {}, de
   return { seeded, versionId };
 }
 
-// genesisStageTasks(deps) → { stageKey: [{ id, title, status }] } for every genesis
-// task on the board, grouped by the stage its source_ref names. The genesis home lists
-// them, and a stage close hands their ids to the Board Room's finished-tasks gate.
+// genesisStageTasks(deps) → { stageKey: [{ id, title, status, description }] } for every
+// genesis task on the board, grouped by the stage its source_ref names. The genesis home
+// lists them, and a stage close hands their ids to the Board Room's finished-tasks gate.
+// The description rides along so each row's Copy prompt carries the task's own words
+// (task 1005109); the read stays bounded, it is only the few seeded genesis tasks.
 async function genesisStageTasks(deps = {}) {
   const pool = deps.pool || api.pool;
   const { rows } = await pool.query(
-    `SELECT id, title, status, source_ref FROM tasks WHERE source = $1 ORDER BY id ASC`,
+    `SELECT id, title, status, description, source_ref FROM tasks WHERE source = $1 ORDER BY id ASC`,
     [GENESIS_SOURCE],
   );
   const out = {};
   for (const r of rows) {
     const stage = String(r.source_ref || '').split(':')[1];
     if (!stage) continue;
-    (out[stage] = out[stage] || []).push({ id: String(r.id), title: r.title, status: r.status });
+    (out[stage] = out[stage] || []).push({
+      id: String(r.id), title: r.title, status: r.status, description: r.description || '',
+    });
   }
   return out;
 }

package/modules/onboarding/genesis-home.js

@@ -146,7 +146,7 @@ const FINISHED = Object.freeze(['shipped', 'abandoned']); // the Board Room's ow
 // shapeGenesis({ mode, plan, tasks, board, stageAt }) — PURE. The genesis home's view.
 //   mode    foundingModeFor's shape (non-null)
 //   plan    the saved plan or null (deciding)
-//   tasks   { stage: [{ id, title, status }] }
+//   tasks   { stage: [{ id, title, status, description }] }
 //   board   { stage: genesisStageStatus row } or {}
 //   stageAt { stage: ISO } — when each stage began, for its due date
 function shapeGenesis({ mode, plan, tasks = {}, board = {}, stageAt = {} }) {

package/modules/provisioning/module.json

@@ -39,7 +39,8 @@
     "provisioning.projectPlanets",
     "provisioning.projectOwnedBy",
     "provisioning.projectPublishIdentity",
-    "provisioning.selfUpdateChannel"
+    "provisioning.selfUpdateChannel",
+    "provisioning.moduleCatalog"
   ],
   "consumes": []
 }