@bongos/core 1.25.3 → 1.25.5

package/src/bongos/db.js

@@ -724,6 +724,48 @@ async function setBuilderTester({ builderId, isTester }) {
   });
 }
 
+// setRequireCard — an Archon switches the hardware-card requirement on or off for one
+// builder (task 1004748, ADR 0382 D3/D4). Switching ON needs at least one registered
+// card, so nobody is locked out by the switch. The audit row is written in the SAME
+// transaction as the flag, so a change cannot happen without its entry; unlike the
+// generic request log it names the builder it was done TO.
+async function setRequireCard({ builderId, required, actorBuilderId, ip = null, userAgent = null }) {
+  return withTx(async (client) => {
+    const { rows: found } = await client.query(
+      `SELECT id, system_role, require_card FROM builders WHERE id = $1 FOR UPDATE`,
+      [builderId]
+    );
+    const before = found[0];
+    if (!before) return null;
+    if (before.system_role) throw { code: 'TARGET_IS_SYSTEM_PRINCIPAL' };
+    if (required) {
+      const { rows: cards } = await client.query(
+        `SELECT 1 FROM passkey_credentials WHERE builder_id = $1 LIMIT 1 FOR SHARE`,
+        [builderId]
+      );
+      if (!cards[0]) throw { code: 'NO_CARD_REGISTERED' };
+    }
+    const { rows } = await client.query(
+      `UPDATE builders SET require_card = $2 WHERE id = $1
+       RETURNING id, github_login, display_name, rank, status, require_card`,
+      [builderId, !!required]
+    );
+    await client.query(
+      `INSERT INTO audit_log
+         (builder_id, route, method, request_body_redacted, response_status, ip, user_agent, surface)
+       VALUES ($1, $2, 'PATCH', $3, 200, $4, $5, NULL)`,
+      [
+        actorBuilderId,
+        `${require('./api-prefix').API_PREFIX}/builders/:id/card-requirement`,
+        { target_builder_id: String(builderId), require_card: !!required, was: before.require_card === true },
+        ip,
+        userAgent,
+      ]
+    );
+    return rows[0];
+  });
+}
+
 async function reactivateBuilder({ builderId, actorBuilderId }) {
   return withTx(async (client) => {
     const { rows } = await client.query(
@@ -1183,6 +1225,7 @@ module.exports = {
   RANKS,
   setBuilderRank,
   setBuilderTester,
+  setRequireCard,
   getLatestRankChangeForBuilder,
   deactivateBuilder,
   reactivateBuilder,

package/src/bongos/route-rank-check.js

@@ -194,6 +194,7 @@ const EXPECTED_RANKS = {
   // builder authority — rank + lifecycle status mutation
   'PATCH /builders/:id/rank': 'perm:builder.rank.set',
   'PATCH /builders/:id/status': 'perm:builder.status.set',
+  'PATCH /builders/:id/card-requirement': 'perm:builder.rank.set',
   // task 1004561: the Treasury desk sets a builder's monthly limit through it
   'PATCH /builders/:id/budget': 'perm:builder.budget.set',
   // session revocation (kill another builder's / all sessions)

package/src/bongos/routes/builders.js

@@ -421,6 +421,43 @@ module.exports = function buildBuildersRouter() {
     }
   });
 
+  // PATCH /builders/:id/card-requirement — an Archon switches the hardware-card
+  // requirement on or off for one builder (task 1004748, ADR 0382 D4). Body:
+  // { require_card: boolean }. Default is off for everyone. Switching ON refuses 409
+  // no_card_registered unless the builder has a registered card, so the switch cannot
+  // lock anyone out. You cannot switch OFF your own requirement (403
+  // cannot_disable_own_card_requirement) — a stolen session must not be able to drop
+  // it; another Archon does it. Every change writes an audit row naming the target.
+  // rank: archon. Gate: requirePermission('builder.rank.set') (the non-delegable atom that
+  // guards the step-up's own target route) then requireCardStepUp; read fresh per request.
+  router.patch('/builders/:id/card-requirement', auth.requireBuilder, auth.requirePermission('builder.rank.set'), requireCardStepUp, async (req, res) => {
+    if (validateOrRespond(req, res, { require_card: { required: true, type: 'boolean' } })) return;
+    const targetId = parseId(req, res, { code: 'bad_builder_id', positiveInt: true });
+    if (targetId === null) return;
+    const required = req.body.require_card;
+    if (!required && String(targetId) === String(req.builder.id)) {
+      return res.fail('cannot_disable_own_card_requirement', 403);
+    }
+    try {
+      const builder = await db.setRequireCard({
+        builderId: targetId,
+        required,
+        actorBuilderId: req.builder.id,
+        ip: req.ip || null,
+        userAgent: req.headers['user-agent'] || null,
+      });
+      if (!builder) return res.fail('builder_not_found', 404);
+      res.json({ builder });
+    } catch (err) {
+      if (err && err.code === 'TARGET_IS_SYSTEM_PRINCIPAL') return res.fail('target_is_system_principal', 403);
+      if (err && err.code === 'NO_CARD_REGISTERED') {
+        return res.fail('no_card_registered', 409, { message: 'That builder has no registered card yet; they must register one before the requirement can be switched on.' });
+      }
+      log.error('[gds] PATCH /builders/:id/card-requirement', err);
+      res.fail('card_requirement_change_failed', { status: 500, message: 'internal error' });
+    }
+  });
+
   // PATCH /builders/:id/capabilities — the owner gives or takes a builder's server
   // access (task 1004950, ADR 0395). Body: { server: boolean }. A task that needs
   // the server is shown to and claimable by a builder only while this is on.

package/src/module-api.js

@@ -81,7 +81,7 @@ const { sleep } = require('./sleep');
 // MAJOR (see allowBoxScope below): passes the request through untouched.
 function deprecatedNoopMiddleware(_req, _res, next) { next(); }
 
-const CORE_VERSION = '1.25.3'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.25.5'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('discord'); log.info('mounted');

package/tests/builder_card_requirement.mjs

@@ -0,0 +1,75 @@
+// tests/builder_card_requirement.mjs
+//
+// Task 1004748 (ADR 0382 D3/D4) — an Archon switches the hardware-card requirement on
+// per builder. DB-free: the shared pool's client is a recorder.
+//
+// Run:  node tests/builder_card_requirement.mjs
+
+import { strict as assert } from 'node:assert';
+import { createRequire } from 'node:module';
+import { makeRunner } from './helpers.mjs';
+
+const require = createRequire(import.meta.url);
+const { pool } = require('../src/bongos/pool');
+const { test, summary } = makeRunner();
+
+let builderRow; let hasCard; const sent = [];
+pool.connect = async () => ({
+  query: async (sql, params = []) => {
+    const q = String(sql);
+    sent.push({ sql: q, params });
+    if (/^\s*(BEGIN|COMMIT|ROLLBACK)/i.test(q)) return { rows: [] };
+    if (/FROM builders WHERE id/.test(q)) return { rows: builderRow ? [builderRow] : [] };
+    if (/FROM passkey_credentials/.test(q)) return { rows: hasCard ? [{}] : [] };
+    if (/UPDATE builders SET require_card/.test(q)) return { rows: [{ id: params[0], require_card: params[1] }] };
+    return { rows: [] };
+  },
+  release() {},
+});
+
+const { setRequireCard } = require('../src/bongos/db');
+const reset = () => { sent.length = 0; };
+
+await test('switching on refuses a builder with no registered card, writes nothing', async () => {
+  reset(); builderRow = { id: '7', system_role: null, require_card: false }; hasCard = false;
+  await assert.rejects(setRequireCard({ builderId: '7', required: true, actorBuilderId: '1' }), { code: 'NO_CARD_REGISTERED' });
+  assert.equal(sent.some((s) => /UPDATE builders|INSERT INTO audit_log/.test(s.sql)), false);
+});
+
+await test('switching on with a card sets the flag and audits the target in the same transaction', async () => {
+  reset(); hasCard = true;
+  const r = await setRequireCard({ builderId: '7', required: true, actorBuilderId: '1' });
+  assert.equal(r.require_card, true);
+  const audit = sent.find((s) => /INSERT INTO audit_log/.test(s.sql));
+  assert.ok(audit);
+  assert.equal(audit.params[0], '1');
+  assert.deepEqual(audit.params[2], { target_builder_id: '7', require_card: true, was: false });
+});
+
+await test('switching off needs no card and is audited', async () => {
+  reset(); hasCard = false; builderRow = { id: '7', system_role: null, require_card: true };
+  const r = await setRequireCard({ builderId: '7', required: false, actorBuilderId: '1' });
+  assert.equal(r.require_card, false);
+  assert.deepEqual(sent.find((s) => /INSERT INTO audit_log/.test(s.sql)).params[2].was, true);
+});
+
+await test('unknown builder is null; a system principal is refused', async () => {
+  reset(); builderRow = null;
+  assert.equal(await setRequireCard({ builderId: '9', required: false, actorBuilderId: '1' }), null);
+  builderRow = { id: '9', system_role: 'runner', require_card: false };
+  await assert.rejects(setRequireCard({ builderId: '9', required: false, actorBuilderId: '1' }), { code: 'TARGET_IS_SYSTEM_PRINCIPAL' });
+});
+
+await test('route: rank atom + step-up gate, self-disable refused, 409 mapped, errors classified', async () => {
+  const fs = await import('node:fs');
+  const src = fs.readFileSync(new URL('../src/bongos/routes/builders.js', import.meta.url), 'utf8');
+  const line = src.split(/\r?\n/).find((l) => l.includes("router.patch('/builders/:id/card-requirement'"));
+  assert.match(line, /requirePermission\('builder\.rank\.set'\), requireCardStepUp/);
+  assert.match(src, /cannot_disable_own_card_requirement', 403/);
+  assert.match(src, /NO_CARD_REGISTERED[\s\S]{0,80}no_card_registered', 409/);
+  const { classify } = require('../src/bongos/api-errors');
+  assert.equal(classify('no_card_registered'), 'conflict');
+  assert.equal(classify('cannot_disable_own_card_requirement'), 'forbidden');
+});
+
+summary();

package/tests/hall_board_world.mjs

@@ -270,23 +270,6 @@ test('the band ends level: no align-items on the grid, so the two cards stretch'
     'and the single-column fallback still exists below 768px (the task text said 860; the sheet says 768)');
 });
 
-test('the Standing card is the mock\'s: an identity line and a three-row fact ledger, no banner', () => {
-  const block = hallRenderJs.match(/const homeStanding = document\.getElementById\('home-standing-body'\);[\s\S]*?renderSystemNotices\(/);
-  assert.ok(block, 'the Home card render is where it was');
-  assert.match(block[0], /class="home-who"/, 'the identity line');
-  assert.match(block[0], /<dt>\$\{escapeHtml\(curLabel\(true\)\)\}<\/dt>/,
-    'the currency row takes its label from the branding contract at render time — a data-currency-label attribute is rebranded once at load, before this row exists');
-  for (const label of ['Leaderboard place', 'Preferred work']) {
-    assert.match(block[0], new RegExp(`<dt>${label}</dt>`), `the ledger row: ${label}`);
-  }
-  assert.match(block[0], /: PREFS_EMPTY\}/, 'the empty-preference copy is the one string both Standing surfaces share');
-  assert.doesNotMatch(block[0], /Banner\}/, 'no banner is stacked into the card any more');
-  for (const sel of ['.home-who', '.home-facts', '.home-facts dt', '.home-facts dd']) {
-    assert.ok(rule(styleCss, sel), `style.css styles ${sel}`);
-  }
-  assert.match(rule(styleCss, '.home-who__avatar') || '', /var\(--skeleton\)/, 'the avatar placeholder is the skeleton tone, not --bg-deep (pure black in dark)');
-});
-
 test('the system notices are inbox LINES, first in the card, and counted by its refresh()', () => {
   // Anchored on the statement AFTER the markup, so a ';' inside the markup or its comments cannot cut it short.
   const mount = goalInboxJs.match(/host\.innerHTML =([\s\S]*?);\n    host\.addEventListener/);
@@ -322,7 +305,7 @@ test('the greeting reads /me only; the version tab and its progress read left Ho
 
 // Boot hall-render.js against a stub DOM and a ctx of getters (the way
 // builders.js builds it) and read what the greeting and the card actually say.
-function bootHallRender({ me, progress = null, leaderboard = [], ctxExtra = {} }) {
+function bootHallRender({ me, progress = null, ctxExtra = {} }) {
   const els = new Map();
   const makeEl = () => ({
     dataset: {}, style: {}, textContent: '', hidden: false, _html: '', innerHTML: '',
@@ -364,7 +347,6 @@ function bootHallRender({ me, progress = null, leaderboard = [], ctxExtra = {} }
     ...ctxExtra,
   };
   const api = windowObj.OTBHallRender(ctx);
-  api.lbState.rows = leaderboard;
   return { api, el: (id) => documentObj.getElementById(id) };
 }
 
@@ -374,7 +356,6 @@ const ME = {
   cost: { level: 'warn', spend_mtd_usd: 80, budget_mtd_usd: 100, pct_used: 80 },
   needs_rebase_tasks: [{ id: 1003460 }],
 };
-const LEADERBOARD = [{ github_login: 'a', total_credits: 20000 }, { github_login: 'percy', total_credits: 14441 }, { github_login: 'b', total_credits: 3 }, { github_login: 'c', total_credits: 1 }];
 const PROGRESS = { progress: [{ version_id: 'BONGOS-V1', status: 'building', total_count: 605, percent_complete: 75 }, { version_id: 'V2', status: 'planning', total_count: 9000, percent_complete: 0 }] };
 
 test('RUN: the greeting names the builder, and writes nothing else', () => {
@@ -386,22 +367,13 @@ test('RUN: the greeting names the builder, and writes nothing else', () => {
   assert.equal(el('home-version').textContent || '', '', 'no version tab is drawn');
 });
 
-test('RUN: the Standing card carries the three facts, the place as "2nd of 4", and no banner', () => {
-  const { api, el } = bootHallRender({ me: ME, leaderboard: LEADERBOARD });
+test('RUN: Home draws no Standing chip, your details are on the visor now (task 1005249)', () => {
+  const { api, el } = bootHallRender({ me: ME });
+  assert.equal(api.lbState, undefined, 'no leaderboard rows are kept for a place nobody shows');
+  assert.equal(api.setRecentShips, undefined, 'no shipped count is kept for a chip that is gone');
   api.renderProfile(ME.builder);
-  const html = el('home-standing-body').innerHTML;
-  assert.match(html, /<p class="home-who__name">Percy Jackson<\/p>/);
-  assert.match(html, /<p class="home-who__handle">@percy<\/p>/);
-  // written from curLabel(true), not a data-currency-label attribute: brand-apply
-  // rebrands those once at load, and this row is stamped after /me answers
-  assert.match(html, /<dt>Credits<\/dt><dd>14,441<\/dd>/);
-  assert.match(html, /<dt>Leaderboard place<\/dt><dd>2nd of 4<\/dd>/);
-  assert.match(html, /<dt>Preferred work<\/dt><dd>Not set yet<\/dd>/, 'the mock\'s copy for an empty preference');
-  assert.doesNotMatch(html, /profile__(needs|budget|rebase)/, 'the banners are not in the card');
-  const withPrefs = bootHallRender({ me: ME, leaderboard: [] });
-  withPrefs.api.renderProfile({ ...ME.builder, preferred_disciplines: ['artisan', 'ui'] });
-  assert.match(withPrefs.el('home-standing-body').innerHTML, /<dd>artisan, ui<\/dd>/);
-  assert.match(withPrefs.el('home-standing-body').innerHTML, /<dt>Leaderboard place<\/dt><dd>—<\/dd>/, 'no roll yet: a dash, not a wrong place');
+  // the stub document hands back a blank element for any id, so "drew nothing" is an empty one
+  assert.equal(el('home-standing-body').innerHTML || '', '', 'no Standing card is written');
 });
 
 // task 1005046: "Where you stand" left the retired Ranks page for Accomplishments,

package/tests/hall_home_ships_bounded.mjs

@@ -7,9 +7,8 @@
 // table and a count. This pins the bounded shape:
 //
 //   1. the route answers a small page plus `total`, counting only when it must;
-//   2. hall-render.js keeps Home on that small page, and fetches the full ledger
-//      only when the Accomplishments view is open — and again only when the
-//      newest ships or the count moved.
+//   2. Home asks for no ships at all (task 1005249 removed the last count it
+//      showed); the Profile page reads its own ledger.
 //
 // (builders.js's own request is pinned in tests/hall_landing_boot.mjs, which
 // already boots the real page.) DB-free: vm + stubs.
@@ -120,31 +119,16 @@ function loadRender({ view = 'home' } = {}) {
   return { r, el, fetched, showView };
 }
 
-const homePage = (total, firstId = 3000) => ({ ships: [ship(firstId), ship(firstId - 1)], total });
-
-test('Home: the Standing chip\'s count comes from the small page, with no ledger fetch', async () => {
-  // task 1005054: the Shipped tile and the five-row table left Home with the stats
-  // strip and "Your work"; the small page still feeds the Standing chip's count.
-  const { r, el, fetched } = loadRender();
-  assert.equal(r.HOME_SHIPS_LIMIT, 5);
-  r.setRecentShips(homePage(3000));
-  await new Promise((done) => setTimeout(done, 0));
-  assert.deepEqual(fetched, [], 'Home never asks for the full history');
-  assert.equal(el('standing-shipped').textContent, '3000', 'the chip shows the server total, not rows held');
-  assert.equal(el('recent-ships tbody').innerHTML, '', 'the ledger is untouched until its view opens');
-});
-
-// task 1005050: the full ledger was the Accomplishments view's, and that view
-// folded into the Profile page (whose Works ledger reads its own record). Home
-// now NEVER asks for the whole history — not on a view change, not on a refresh.
-test('Home never downloads the whole history, whatever view event or refresh arrives', async () => {
-  const { r, el, fetched, showView } = loadRender({ view: 'standing' });
-  r.setRecentShips(homePage(3000));
+// task 1005249: the Standing chip, the last thing on Home that showed a shipped
+// count, is gone, so Home keeps no ships at all — not a small page, not a count —
+// and asks for none, whatever view event arrives.
+test('Home keeps and asks for no ships at all, whatever view event arrives', async () => {
+  const { r, fetched, showView } = loadRender({ view: 'home' });
+  assert.equal(r.setRecentShips, undefined, 'no ships setter');
+  assert.equal(r.HOME_SHIPS_LIMIT, undefined, 'no small page size');
+  assert.equal(r.loadShipLedger, undefined, 'no ledger loader');
   showView('standing');
-  r.setRecentShips(homePage(3001, 3001)); // this builder shipped
   await new Promise((done) => setTimeout(done, 0));
-  assert.deepEqual(fetched, [], 'no ?limit=all read from Home');
-  assert.equal(el('standing-shipped').textContent, '3001', 'the chip follows the newest total');
-  assert.equal(r.loadShipLedger, undefined, 'the ledger loader went with the view');
+  assert.deepEqual(fetched, [], 'no ships read from Home');
 });
 

package/tests/hall_landing_boot.mjs

@@ -91,10 +91,9 @@ async function boot({ meStatus, settle = false }) {
       wirePager: () => {},
     },
     OTBHallRender: () => ({
-      analyticsState: {}, lbState: {},
+      analyticsState: {},
       shipsPager: { page: 1 },
-      // task 1004854: Home asks for this many ships; the ledger's full read lives in hall-render.js.
-      HOME_SHIPS_LIMIT: 5, setRecentShips: spy('setRecentShips'), populateShipVersionFilter: spy('populateShipVersionFilter'),
+      populateShipVersionFilter: spy('populateShipVersionFilter'),
       mountHallWidgets: spy('mountHallWidgets'),
       renderLanding: spy('renderLanding'),
       renderCurveBody: spy('renderCurveBody'), renderGreeting: spy('renderGreeting'),
@@ -154,10 +153,10 @@ test('a signed-in builder still gets the hall', async () => {
 
 // task 1004854: Home used to download the builder's WHOLE ship history here, on
 // every load and every live refresh — ~3.4 s of database time for 3,000 ships, to
-// fill a five-row table and a count. It asks for the small page only.
-test('Home asks for its few newest ships, never the full history', async () => {
+// fill a five-row table and a count. Since task 1005249 it shows no ship count at
+// all (the Standing chip went), so it asks for no ships and no leaderboard.
+test('Home asks for no ships and no leaderboard', async () => {
   const calls = await boot({ meStatus: 200, settle: true });
-  const ships = calls.requests.filter((r) => r.includes('/me/recent-ships'));
-  assert.deepEqual(ships, ['GET /api/bongos/me/recent-ships?limit=5'], `ship requests were: ${ships.join(', ') || 'none'}`);
-  assert.ok(calls.rendered.includes('setRecentShips'), 'the small page is handed to the renderer');
+  const reads = calls.requests.filter((r) => r.includes('/me/recent-ships') || r.includes('/leaderboard'));
+  assert.deepEqual(reads, [], `Home still read: ${reads.join(', ')}`);
 });

package/tests/hall_nav.mjs

@@ -905,9 +905,9 @@ test('Accomplishments is gone from the sidebar, and every old link lands on your
   }
   // No view is left for them to open on the index.
   assert.ok(!/id="view-standing"/.test(fs.readFileSync(path.join(HALL, 'index.html'), 'utf8')), 'the view is gone');
-  // Home's Standing card still names the shipped count and links to the profile.
+  // Home's Standing card went in task 1005249: the visor's you-block opens the profile now
+  // (tests/hall_visor_profile.mjs runs it).
   const render = fs.readFileSync(path.join(HALL, 'hall-render.js'), 'utf8');
-  assert.match(render, /View full profile →/);
   assert.ok(!/\$\('#profile-body'\)/.test(render), 'the Accomplishments band is not drawn any more');
   const fn = render.slice(render.indexOf('  function renderProfile(builder) {'), render.indexOf('  function renderSystemNotices('));
   assert.match(fn, /renderSystemNotices\(\{ rebaseTasks, need, actionNeeds, cost \}\)/, 'Home still gets every notice');

package/tests/hall_visor.mjs

@@ -503,9 +503,16 @@ test('the glass is the kit\'s: the cut accent button, ice hints with no box, the
   assert.equal(g.placeShadow, 'none', 'type on a plate needs no halo');
   assert.equal(g.radius, '0px', 'no round thing on the glass');
   assert.match(g.spriteClip, /^polygon\(/, 'the sprite sits in a cut box');
+  // task 1005249: you (left of the foot row) are a link to your profile now, so the
+  // stops run in reading order: you, then the accent button. Both take the inset ring.
+  const focused = () => page.evaluate(() => { const a = document.activeElement; const s = getComputedStyle(a); return { cls: a.className, outline: s.outlineStyle, ring: s.boxShadow }; });
   await page.keyboard.press('Tab');
-  const f = await page.evaluate(() => { const a = document.activeElement; const s = getComputedStyle(a); return { cls: a.className, outline: s.outlineStyle, ring: s.boxShadow }; });
-  assert.equal(f.cls, 'visor__main', 'the accent button is the first stop');
+  const me = await focused();
+  assert.equal(me.cls, 'visor__me', 'you are the first stop, reading left to right');
+  assert.match(me.ring, /inset/, 'you take the inset ring too');
+  await page.keyboard.press('Tab');
+  const f = await focused();
+  assert.equal(f.cls, 'visor__main', 'the accent button is the next stop');
   assert.equal(f.outline, 'none');
   assert.match(f.ring, /inset/, 'focus is the inset two-tone ring (--press-focus)');
   await ctx.close();

package/tests/hall_visor_profile.mjs

@@ -0,0 +1,150 @@
+// tests/hall_visor_profile.mjs — you on the visor (task 1005249).
+//
+// The owner's ask (2026-11-12): the Standing chip that sat top right of Home is gone;
+// the visor's bottom-left you-block shows your details on hover and opens your whole
+// profile, in the game's window over the place, on click. This runs the real visor,
+// the real shell-game window and the real dialog in a browser, plus the pure facts in
+// a vm, and checks Home's page no longer carries the chip.
+//
+// Run:  node --test tests/hall_visor_profile.mjs
+import assert from 'node:assert/strict';
+import { test, after } from 'node:test';
+import { createRequire } from 'node:module';
+import fs from 'node:fs';
+import path from 'node:path';
+import vm from 'node:vm';
+import { fileURLToPath } from 'node:url';
+
+const require = createRequire(import.meta.url);
+const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
+const HALL = path.join(ROOT, 'modules/hall-ui/public');
+const read = (f) => fs.readFileSync(path.join(HALL, f), 'utf8');
+
+// ---------- the facts, in a vm ----------
+function loadVisor(me) {
+  const doc = {
+    readyState: 'complete', body: null, documentElement: { dataset: {}, classList: { contains: () => false, toggle() {}, remove() {} } },
+    addEventListener() {}, querySelector: () => null, createElement: () => ({}),
+  };
+  const win = { document: doc, location: { pathname: '/', assign() {} }, addEventListener() {}, OTBCraftMode: { me: () => me } };
+  win.window = win;
+  vm.runInNewContext(read('visor.js'), win);
+  return win.OTBVisor;
+}
+
+test('the card\'s facts come from /me: name, handle, rank, credits, karma, preferred work', () => {
+  const me = { builder: { display_name: 'Percy Jackson', github_login: 'percy', rank: 'metic', total_credits: 14441, karma: 96.4, preferred_disciplines: ['artisan', 'ui'] } };
+  const f = JSON.parse(JSON.stringify(loadVisor(me).meFacts(me)));
+  assert.deepEqual(f, { name: 'Percy Jackson', handle: '@percy', rank: 'Metic', credits: 14441, karma: 96, prefs: 'artisan, ui' });
+  const bare = JSON.parse(JSON.stringify(loadVisor(null).meFacts({ builder: { github_login: 'x' } })));
+  assert.equal(bare.name, 'x', 'no display name: the login');
+  assert.equal(bare.karma, 0);
+  assert.equal(bare.prefs, '', 'no preference: empty, and the card says "Not set yet"');
+  assert.equal(loadVisor(null).meFacts(null), null, 'before /me answers there is nothing to show');
+});
+
+test('Home carries no Standing chip any more, and no sheet styles one', () => {
+  assert.doesNotMatch(read('index.html'), /hall-standing|home-standing-body/);
+  assert.doesNotMatch(read('style.css'), /\.hall-standing|\.home-who|\.home-facts/);
+  assert.doesNotMatch(read('hall-render.js'), /home-standing-body|hall-standing|leaderboardPlace/);
+});
+
+// ---------- in a browser ----------
+const lib = require(path.join(ROOT, 'modules', 'ui-design', 'kit', 'lib.js'));
+let browser = null;
+try { browser = await lib.launchBrowser(); } catch (e) { if (!(e instanceof lib.NoBrowserError)) throw e; }
+after(() => browser && browser.close());
+const skip = !browser && 'no system Edge or Chrome';
+
+const ORIGIN = 'http://hall.test';
+const TYPES = { '.js': 'text/javascript', '.css': 'text/css', '.png': 'image/png', '.svg': 'image/svg+xml' };
+const SCENE = `<script>
+  window.OTBCraftMode = { character() { return 'artisan'; }, current() { return null; },
+    me() { return { builder: { display_name: 'Percy Jackson', github_login: 'percy', rank: 'metic', total_credits: 14441, karma: 96, preferred_disciplines: [] } }; },
+    spriteSrc(id) { return '/builders/characters/' + id + '.png'; } };
+  window.__visorScene = { name: 'test', place: 'Test city', actions: [], keys: [] };
+</script>`;
+const PAGE = (withWindow) => `<!doctype html><html data-theme="dark" data-faces="helm"><head><meta charset="utf-8">
+<link rel="stylesheet" href="/builders/style.css"><link rel="stylesheet" href="/builders/visor.css"></head>
+<body>${SCENE}<script src="/builders/hall-dialog.js"></script>${withWindow ? '<script src="/builders/shell-game.js"></script>' : ''}<script src="/builders/visor.js"></script></body></html>`;
+
+async function open({ withWindow = true } = {}) {
+  const ctx = await browser.newContext({ viewport: { width: 1280, height: 800 } });
+  await ctx.route(ORIGIN + '/**', (route) => {
+    const p = new URL(route.request().url()).pathname;
+    if (p === '/') return route.fulfill({ contentType: 'text/html', body: PAGE(withWindow) });
+    if (p === '/profile') return route.fulfill({ contentType: 'text/html', body: '<!doctype html><title>profile</title><p id="pp">your profile</p><script src="/builders/shell-game.js"></script>' }); // the real page carries the game shell, which hands an Escape up
+    const f = path.join(HALL, p.replace(/^\/builders\//, ''));
+    if (p.startsWith('/builders/') && TYPES[path.extname(p)] && fs.existsSync(f)) return route.fulfill({ contentType: TYPES[path.extname(p)], body: fs.readFileSync(f) });
+    return route.fulfill({ status: 404, body: '' });
+  });
+  const page = await ctx.newPage();
+  const errors = [];
+  page.on('pageerror', (e) => errors.push(String(e.message)));
+  await page.addInitScript(() => { try { localStorage.setItem('hall-game', 'on'); document.documentElement.dataset.game = 'on'; window.OTB = { escapeHtml: (s) => String(s) }; } catch (_) { /* none */ } });
+  await page.goto(ORIGIN + '/');
+  await page.waitForFunction(() => !!document.querySelector('.visor__me'));
+  return { ctx, page, errors };
+}
+
+test('hovering you on the visor shows your details; at rest they are hidden', { skip }, async () => {
+  const { ctx, page, errors } = await open();
+  const shown = () => page.evaluate(() => getComputedStyle(document.querySelector('.visor__card')).visibility);
+  assert.equal(await shown(), 'hidden', 'nothing over the scene at rest');
+  await page.hover('.visor__me');
+  await page.waitForFunction(() => getComputedStyle(document.querySelector('.visor__card')).opacity === '1');
+  assert.equal(await shown(), 'visible');
+  const text = await page.evaluate(() => [...document.querySelectorAll('.visor__card > span')].map((s) => s.innerText.replace(/\s+/g, ' ').trim()));
+  assert.match(text[0], /Percy Jackson @percy/i);
+  assert.match(text[1], /Rank Metic/i);
+  assert.match(text[1], /Credits 14,441/i);
+  assert.match(text[1], /Karma 96/i);
+  assert.match(text[1], /Preferred work Not set yet/i);
+  assert.match(text[2], /Open your profile/i);
+  const box = await page.evaluate(() => { const r = document.querySelector('.visor__card').getBoundingClientRect(); return { top: r.top, left: r.left }; });
+  assert.ok(box.top >= 0 && box.left >= 0, 'the card stays on screen');
+  assert.deepEqual(errors, []);
+  await ctx.close();
+});
+
+test('clicking you opens your whole profile in the window over the place; Escape closes it', { skip }, async () => {
+  const { ctx, page, errors } = await open();
+  await page.click('.visor__me');
+  await page.waitForFunction(() => window.OTBOptionsOverlay.isOpen());
+  const w = await page.evaluate(() => ({
+    url: location.pathname,
+    src: document.querySelector('.opt-window__frame').getAttribute('src'),
+    label: document.querySelector('.opt-window__box').getAttribute('aria-label'),
+    close: document.querySelector('.opt-window__x').getAttribute('aria-label'),
+  }));
+  assert.equal(w.url, '/', 'the place stays: no navigation');
+  assert.equal(w.src, '/profile?embed=1');
+  assert.equal(w.label, 'Your profile');
+  assert.equal(w.close, 'Close your profile');
+  // the frame's own shell must be up before an Escape inside it can be handed up
+  await page.waitForFunction(() => { const f = document.querySelector('.opt-window__frame'); try { return !!(f && f.contentDocument.readyState === 'complete' && f.contentDocument.documentElement.dataset.embed === 'on'); } catch (_) { return false; } });
+  await page.keyboard.press('Escape');
+  await page.waitForFunction(() => !window.OTBOptionsOverlay.isOpen());
+  // the same window still opens Options under its own name
+  await page.evaluate(() => window.OTBOptionsOverlay.open(''));
+  assert.equal(await page.evaluate(() => document.querySelector('.opt-window__box').getAttribute('aria-label')), 'Options');
+  assert.equal(await page.evaluate(() => document.querySelector('.opt-window__frame').getAttribute('src')), '/settings?embed=1');
+  assert.deepEqual(errors, []);
+  await ctx.close();
+});
+
+test('with no window to draw, you are still a link to your profile', { skip }, async () => {
+  const { ctx, page, errors } = await open({ withWindow: false });
+  const r = await page.evaluate(() => {
+    const me = document.querySelector('.visor__me');
+    const ev = new MouseEvent('click', { bubbles: true, cancelable: true });
+    // stop the browser before it leaves, once the visor has had its say
+    window.addEventListener('click', (e) => { window.__left = !e.defaultPrevented; e.preventDefault(); });
+    me.querySelector('.visor__name').dispatchEvent(ev);
+    return { href: me.getAttribute('href'), followed: window.__left };
+  });
+  assert.equal(r.href, '/profile');
+  assert.equal(r.followed, true, 'the visor lets the link take you to the profile page');
+  assert.deepEqual(errors, []);
+  await ctx.close();
+});

package/tests/leaderboard_roles.mjs

@@ -16,7 +16,7 @@
 //      that craft earned, and a dash, not a 0, for a builder with no AI sessions.
 //      (Two crafts since task 1005141: the engineer is the artisan, and the
 //      ideator folded into the artist, so idea credits rank as artist credits.)
-//   4. THE STANDING CARD and 5. THE STATUS PAGE: the real functions, run.
+//   5. THE STATUS PAGE: the real function, run. (4, the Standing chip, went in task 1005249.)
 
 import { strict as assert } from 'node:assert';
 import { createRequire } from 'node:module';
@@ -234,7 +234,7 @@ await test('the Artists toggle shows only artists, ranked by the credits that cr
   assert.equal(r.rows.length, FIX.leaderboard.length, 'Everyone brings every builder back');
 });
 
-// ---- 4. the standing card ---------------------------------------------------------
+// ---- 4. (the standing card, gone; extract() serves section 5) ---------------------
 
 function extract(src, start, end) {
   const a = src.indexOf(start);
@@ -243,21 +243,7 @@ function extract(src, start, end) {
   return src.slice(a, b);
 }
 
-await test('the standing card adds the place inside the builder\'s main role, only when it says something new', () => {
-  const src = read('modules/hall-ui/public/hall-render.js');
-  const code = extract(src, 'const lbState = { rows: [] };', '    return { lbState');
-  const sandbox = { rows: FIX.leaderboard };
-  vm.createContext(sandbox);
-  vm.runInContext(`${code}; lbState.rows = rows; this.place = leaderboardPlace; this.text = rolePlaceText;`, sandbox);
-  const art = sandbox.place('builder-7');
-  assert.equal(art.role.craft, 'artist');
-  assert.equal(sandbox.text(art), `#2 as an artist`, 'fourth overall, second among artists: something new, so it is said');
-  const top = sandbox.place(FIX.leaderboard[0].github_login);
-  assert.equal(sandbox.text(top), '', 'the top artisan is #1 either way, so nothing is added');
-  // task 1005054: the stats strip (and its rank tile) left Home; the Standing chip's card carries the role place
-  assert.match(src, /\$\{rolePlaceText\(rollPlace\) \? `<span title="Your place among the/);
-  assert.match(read('modules/hall-ui/public/builders.js'), /getJSON\(`\$\{API\}\/public\/leaderboard`\)/, 'the hall reads the list with the roles');
-});
+// (Its test of the Standing chip's role place went with the chip in task 1005249.)
 
 // ---- 5. the status page -----------------------------------------------------------