@bongos/core 1.25.32 → 1.25.33

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/bongos/package-core.js",
-  "core_version": "1.25.32",
-  "core_contract": "1.25.32",
-  "source_commit": "229f85ce4b90f085b848b35622dbcc128b0057ce",
+  "core_version": "1.25.33",
+  "core_contract": "1.25.33",
+  "source_commit": "4b5c8d701067bdfbff18b430afc31b42d93bc473",
   "source_ref": "HEAD",
-  "built_at": "2026-11-14T14:21:44.964Z",
+  "built_at": "2026-11-14T14:37:07.493Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 659,
     "agent_docs_stubbed": 34,
-    "functional_verbatim": 4091,
+    "functional_verbatim": 4092,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 4785,
-  "tree_sha256": "16aaec3eb64ea6c85c1525e28d61a133c757d674794144c34b1c3d3d621a8073",
+  "file_count": 4786,
+  "tree_sha256": "98b5b7a87754177055b0767a010c3c7376170c614a91d857e51705d09be541ad",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -2542,12 +2542,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "3988b264c3287e008eac0bc904071f1e1da6a4c3a08032509b7a0b6d8aa0ad83"
+      "sha256": "1d0c71ce2c00fb0f2c6d0ef9718f2deae87bfedfda15e0fd907d2d74258f5d14"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "8a25633c4c0dc902f09c90a3637a8fe87c021e6149cc7211584469dc6a2e6fb1"
+      "sha256": "dbd60962cf08e2cdec6a2e59a7d89acaf106ebf163234d8e92fb58a33d3ae2ca"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -3102,7 +3102,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "b7a5a08b27c2c3a25ba91434a45cdd7e8d3a480403cffc68d02bea3bf8bb4c0c"
+      "sha256": "33db3faa1834a96618182e25a012b6cc98ca87236d346953c987fa6c1f1c7997"
     },
     {
       "path": "docs/modules-contract.md",
@@ -3187,7 +3187,7 @@
     {
       "path": "docs/page-readings.json",
       "mode": "0000644",
-      "sha256": "d1f2904c04abff3a17f6d0ff1515036f2d33e334ef4e4b63775e10ff56e30491"
+      "sha256": "a19d45806423cb1f44f40f6bc6f5cc130db29e4ccefe8d85af8967fb68334d63"
     },
     {
       "path": "docs/project-context.template.md",
@@ -4752,7 +4752,7 @@
     {
       "path": "modules/autonomy/runner-health.js",
       "mode": "0000644",
-      "sha256": "c25bb637534ba41b9a71e3d34321415ff0edff7dae4edac40736436cd4e2bad2"
+      "sha256": "dfab3899749342a6e1f0684d0f4b1aab8c42550024b8e555e8cc1413e7d05e67"
     },
     {
       "path": "modules/autonomy/server-schedule.js",
@@ -6662,7 +6662,7 @@
     {
       "path": "modules/hall-ui/public/gate.js",
       "mode": "0000644",
-      "sha256": "9b166e3028e034fc98bcff582c7e588f1bb0b2e7d82459c5a7ee1cac5f64269f"
+      "sha256": "3d1e7683f27eb30c11647e89a3ae6138c9d2e459606deb6a334d7231490f5576"
     },
     {
       "path": "modules/hall-ui/public/genesis-home.js",
@@ -7337,7 +7337,7 @@
     {
       "path": "modules/hall-ui/public/runner-button.js",
       "mode": "0000644",
-      "sha256": "f083be214ca3ab6e6868c43a5d67a99ab904c9e8939e4f1566df4f1fe5b0c562"
+      "sha256": "83f065223dbf6903bc0426adc92459fc486bc46b877537aa2944b8d71aade49d"
     },
     {
       "path": "modules/hall-ui/public/sessions.css",
@@ -12517,12 +12517,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "c67d732a8b17d6770f86652bc20ba6b052afd0b65de35bea9e897d531ea8847b"
+      "sha256": "1855476688c40e5b761ea79b3ad14f908dc4ca9204de3d2c1eed4972e669e625"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "3d1af59f70de777b9e2b383222f288d301dd2ce7c31fe52f2488033454950c18"
+      "sha256": "cbfcba84dcf5ffd88672a1e50168bc45df2c385babf24f21ae0f6f401fb9f6a4"
     },
     {
       "path": "public-docs/index.html",
@@ -12542,7 +12542,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "b3f123f8b328674e373abac3a487b23889dda6e0118da2e8888589f026e20c00"
+      "sha256": "5cb90b68209691dda5d1d1834ee42c3cec56272605119bedb2465a0ac1302abb"
     },
     {
       "path": "scripts/bongos/CLAUDE.md",
@@ -12682,7 +12682,7 @@
     {
       "path": "scripts/bongos/autobongos-host.js",
       "mode": "0000755",
-      "sha256": "5fc39d1b1c98c23ef7cc9549de376ed2c9751575934af550194cb29a5a5f7a4d"
+      "sha256": "92caf5cebcaa06eb71b0bc514f3616fc7b29bc5e04e8b1c2ee4011849dfb2042"
     },
     {
       "path": "scripts/bongos/autobongos-loop.js",
@@ -12692,7 +12692,7 @@
     {
       "path": "scripts/bongos/autobongos-run.js",
       "mode": "0000644",
-      "sha256": "b051621396ec639d2503beec1c992be84e3fefc22d959a7124698da7e0a7a0fe"
+      "sha256": "e366b9995bef2f1d6313634f483a182b288272ed40af3496c4d0a4ad0655e9d6"
     },
     {
       "path": "scripts/bongos/autobongos-service.cmd",
@@ -16622,7 +16622,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "130d7b45a6fd3579b7863b1901969d8dde97ae473ca53b198efe88b91ddb90e0"
+      "sha256": "ae2ad3a3e6b66f1e03369e0b40df1417f17519792ccd2a5cd90bf509cb7b3a51"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -17179,6 +17179,11 @@
       "mode": "0000644",
       "sha256": "3c55fd843bb0e8e5c9eaf3e8be4d32fe9a46eba077eaaf30a45ad7bea959d27f"
     },
+    {
+      "path": "tests/autobongos_cannot_fetch.mjs",
+      "mode": "0000644",
+      "sha256": "64d6f7783afb4e692653983fab4c67b61a59abee8d2e2279807605f64df6b4ef"
+    },
     {
       "path": "tests/autobongos_fence.mjs",
       "mode": "0000644",

package/docs/copy-inventory.md

@@ -91,7 +91,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `af615fa9f404` | certain | (checked {…}) | `modules/hall-ui/public/deploy.js:516` |
 | `e2c5af6b2815` | certain | (the desktop app, or Claude Code in a terminal). | `modules/hall-ui/public/setup-gate.js:33` |
 | `c7aecadc8133` | certain | (with {…}) | `modules/hall-ui/public/goals-render.js:594` |
-| `c81e3a97b531` | certain | + Add goal | `modules/hall-ui/public/gate.js:217` |
+| `c81e3a97b531` | certain | + Add goal | `modules/hall-ui/public/gate.js:221` |
 | `27d9721f358f` | certain | + Invite | `modules/hall-ui/public/goals-render.js:1213` |
 | `74815c8882ba` | certain | + send a new scout | `modules/hall-ui/public/market-watch.html:51` |
 | `646fab1157fe` | certain | + {…} more project{…} not publicly listed. | `modules/hall-ui/public/profile.js:395` |
@@ -151,7 +151,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `524188fe0078` | certain | Active sessions | `modules/hall-ui/public/settings.html:190` |
 | `e4da002ae135` | certain | Add ${…} | `modules/hall-ui/public/ai-studio.js:567` |
 | `e271eaeba3ba` | certain | Add a card | `modules/hall-ui/public/settings.html:218` |
-| `1bdd78d8e7c5` | certain | Add a device | `modules/hall-ui/public/gate.js:188` |
+| `1bdd78d8e7c5` | certain | Add a device | `modules/hall-ui/public/gate.js:192` |
 | `1bdd78d8e7c5` | certain | Add a device | `modules/hall-ui/public/settings-autobongos.js:211` |
 | `ff277763b4ce` | certain | Add a device, press Run on its card, and it builds the goals you choose below while you are away. Any Windows  | `modules/hall-ui/public/settings.html:233` |
 | `32509514479f` | certain | Add a done-when criterion | `modules/hall-ui/public/goal-author.js:38` |
@@ -305,7 +305,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `aa3ba7d28a76` | certain | Checking your key… | `modules/hall-ui/public/settings.js:794` |
 | `834f8c6f3b72` | certain | Choose a builder… | `modules/hall-ui/public/goals-render.js:1249` |
 | `b3d0e2af5176` | certain | Choose a goal first. | `modules/hall-ui/public/task.js:1023` |
-| `89ddfeda9566` | certain | Choose goals | `modules/hall-ui/public/gate.js:186` |
+| `89ddfeda9566` | certain | Choose goals | `modules/hall-ui/public/gate.js:190` |
 | `6bf684ebc1c3` | certain | Choose the skills for {…} | `modules/hall-ui/public/speciality-tools.js:199` |
 | `6c88cdf417f1` | certain | Choose which sound plays for each build event — one when Claude waits for your input, another when a task ship | `modules/hall-ui/public/settings.html:368` |
 | `7b984c01b6a8` | certain | Choose your character | `modules/hall-ui/public/craft-mode.js:910` |
@@ -485,7 +485,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `64f6af887b28` | certain | Drag to go back in time | `modules/hall-ui/public/visor.js:577` |
 | `39f897eaff3c` | certain | Drop sketches, pictures or a PDF here, paste a picture, | `modules/hall-ui/public/ai-studio.js:180` |
 | `67f09099c2d3` | certain | Duplicate — should be said once, in one place | `modules/hall-ui/public/copy-desk.html:93` |
-| `1de61111bc00` | certain | Each builder's runner | `modules/hall-ui/public/gate.js:418` |
+| `1de61111bc00` | certain | Each builder's runner | `modules/hall-ui/public/gate.js:422` |
 | `1f3b826a05d4` | certain | Each month is recorded spend ({…} over these {…} months) plus payouts and fees out of the project account. Rea | `modules/hall-ui/public/money.js:126` |
 | `3a6916fa79d4` | certain | Each one links back to this page. | `modules/hall-ui/public/lightbulb.js:103` |
 | `3f7d82a0d9b1` | certain | Each was filed when a ship changed copy or visuals. No new ones arrive; answer these and the door goes. | `modules/hall-ui/public/studio.html:197` |
@@ -498,7 +498,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `8e82771e5b63` | certain | Ending a session takes effect immediately; the token stops working on its very next request. | `modules/hall-ui/public/settings.html:202` |
 | `58d381535285` | certain | Engagement reports | `modules/hall-ui/public/watch.html:129` |
 | `6fd9b1bf8d97` | certain | Engineering work is open on this page ({…}), so code may change around your words. You can keep writing. | `modules/hall-ui/public/tweak-editor.js:304` |
-| `690609c8e9a9` | certain | Enter a goal number. | `modules/hall-ui/public/gate.js:323` |
+| `690609c8e9a9` | certain | Enter a goal number. | `modules/hall-ui/public/gate.js:327` |
 | `8eabe3d69bf3` | certain | Enter files the idea. Shift and Enter starts a new line. | `modules/hall-ui/public/home-idea-box.js:55` |
 | `4f776bc33d5f` | certain | Enter the builders’ hall | `modules/hall-ui/public/genesis-home.js:421` |
 | `1825c9c467d8` | certain | Enter the id of the task this one should wait for. | `modules/hall-ui/public/task.js:965` |
@@ -577,15 +577,15 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `9e70797b7e97` | certain | Goal id | `modules/hall-ui/public/goals-render.js:852` |
 | `529460e82058` | certain | Goal invitations to you | `modules/hall-ui/public/goal-inbox.js:149` |
 | `3807521c5db7` | certain | Goal map | `modules/hall-ui/public/goals.html:70` |
-| `ed1966d824a5` | certain | Goal number | `modules/hall-ui/public/gate.js:209` |
+| `ed1966d824a5` | certain | Goal number | `modules/hall-ui/public/gate.js:213` |
 | `e2a9e33abe60` | certain | Goal tasks | `modules/hall-ui/public/goals.html:155` |
-| `ec88b946ad16` | certain | Goal {…} | `modules/hall-ui/public/gate.js:202` |
-| `6f0deb0b667d` | certain | Goal {…} added. | `modules/hall-ui/public/gate.js:326` |
-| `8a421ae268e6` | certain | Goal {…} removed. | `modules/hall-ui/public/gate.js:350` |
+| `ec88b946ad16` | certain | Goal {…} | `modules/hall-ui/public/gate.js:206` |
+| `6f0deb0b667d` | certain | Goal {…} added. | `modules/hall-ui/public/gate.js:330` |
+| `8a421ae268e6` | certain | Goal {…} removed. | `modules/hall-ui/public/gate.js:354` |
 | `e0bc28d10785` | certain | Goals could not be loaded. Refresh to try again. | `modules/hall-ui/public/goals-page.js:875` |
 | `4517f2253d0f` | certain | Goals couldn’t be loaded just now. Refresh to try again. | `modules/hall-ui/public/goals.js:142` |
 | `6a85997bda21` | certain | Goals created | `modules/hall-ui/public/profile.html:152` |
-| `6bbd703b5aad` | certain | Goals it can work on | `modules/hall-ui/public/gate.js:218` |
+| `6bbd703b5aad` | certain | Goals it can work on | `modules/hall-ui/public/gate.js:222` |
 | `bba4caf837e9` | certain | Goals — {{worldName}} | `modules/hall-ui/public/goals.html:6` |
 | `bba4caf837e9` | certain | Goals — {{worldName}} | `modules/hall-ui/public/goals.html:6` |
 | `d0f76a295d09` | certain | Good afternoon. | `modules/hall-ui/public/studio.js:1059` |
@@ -822,7 +822,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `b5839a34590c` | certain | My agents — {{worldName}} | `modules/hall-ui/public/my-agents.html:6` |
 | `b5839a34590c` | certain | My agents — {{worldName}} | `modules/hall-ui/public/my-agents.html:6` |
 | `39afdc03594a` | certain | My balance | `modules/hall-ui/public/ai-studio.js:340` |
-| `3d0d554cd684` | certain | Name (optional) | `modules/hall-ui/public/gate.js:209` |
+| `3d0d554cd684` | certain | Name (optional) | `modules/hall-ui/public/gate.js:213` |
 | `ae84ebe1d735` | certain | Name cannot be blank. | `modules/hall-ui/public/settings.js:458` |
 | `31e91ee6ce03` | certain | Name must be {…} characters or fewer. | `modules/hall-ui/public/settings.js:463` |
 | `00461d24cd51` | certain | Name this card (optional) | `modules/hall-ui/public/settings.html:217` |
@@ -984,7 +984,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `fa818ee444b4` | certain | Only this goal's owner or a manager (or an Archon) may do this. | `modules/hall-ui/public/goals-render.js:1363` |
 | `fa818ee444b4` | certain | Only this goal's owner or a manager (or an Archon) may do this. | `modules/hall-ui/public/goals-render.js:1379` |
 | `544011db314a` | certain | Only this goal's owner or a manager (or an Archon) may invite. | `modules/hall-ui/public/goals-render.js:1311` |
-| `42bb75e4297c` | certain | Open Settings | `modules/hall-ui/public/gate.js:187` |
+| `42bb75e4297c` | certain | Open Settings | `modules/hall-ui/public/gate.js:191` |
 | `5f3e0b179839` | certain | Open in Sessions | `modules/hall-ui/public/task.js:491` |
 | `9f55e4674ebb` | certain | Open in the copy desk | `modules/hall-ui/public/studio.js:253` |
 | `03197f066323` | certain | Open it in the tweak editor | `modules/hall-ui/public/paintbrush.js:440` |
@@ -1125,7 +1125,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `58af483d7a84` | certain | Release task {…} | `modules/hall-ui/public/goals-render.js:374` |
 | `c49f9b9f8864` | certain | Remake or tweak | `modules/hall-ui/public/studio.js:216` |
 | `65e3399a8fbf` | certain | Remove filter | `modules/hall-ui/public/hall-kit.js:311` |
-| `12c3328b937c` | certain | Remove goal {…} | `modules/hall-ui/public/gate.js:202` |
+| `12c3328b937c` | certain | Remove goal {…} | `modules/hall-ui/public/gate.js:206` |
 | `1c755c04e705` | certain | Remove this line | `modules/hall-ui/public/paintbrush.js:129` |
 | `20882d6ffdd0` | certain | Removed {…} from builder {…}. | `modules/hall-ui/public/government.js:411` |
 | `9be75ebd8d67` | certain | Replay the sky from the first day | `modules/hall-ui/public/goal-map.html:127` |
@@ -1167,8 +1167,8 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `c56d9a6451a7` | certain | Rewrite them in the tweak editor | `modules/hall-ui/public/paintbrush.js:248` |
 | `12af2af5acf2` | certain | Role it sits under | `modules/hall-ui/public/speciality-tools.js:614` |
 | `4c1e8ab8e1de` | certain | Run this command instead (same folder). When it asks for the token, click Copy token and paste it there; nothi | `modules/hall-ui/public/settings.js:652` |
-| `48e5f1d19e90` | certain | Runner allowed to work | `modules/hall-ui/public/gate.js:267` |
-| `41730c113dd5` | certain | Runners work only the goals above, and only while the switch is on. Each builder picks which of them their own | `modules/hall-ui/public/gate.js:267` |
+| `48e5f1d19e90` | certain | Runner allowed to work | `modules/hall-ui/public/gate.js:271` |
+| `41730c113dd5` | certain | Runners work only the goals above, and only while the switch is on. Each builder picks which of them their own | `modules/hall-ui/public/gate.js:271` |
 | `6fb37ca50950` | certain | Runs use this key, so the project's Anthropic account pays for them. It is stored encrypted and never shown ag | `modules/hall-ui/public/market-watch.html:170` |
 | `b6596905f845` | certain | Said more than once | `modules/hall-ui/public/copy-desk.html:56` |
 | `ce046dcbd8e1` | certain | Save as PDF | `modules/hall-ui/public/modules.html:112` |

package/docs/copy-registry.json

@@ -1136,7 +1136,7 @@
       "text": "Add a device",
       "occurrences": 2,
       "at": [
-        "modules/hall-ui/public/gate.js:188",
+        "modules/hall-ui/public/gate.js:192",
         "modules/hall-ui/public/settings-autobongos.js:211"
       ]
     },
@@ -3238,7 +3238,7 @@
       "surface": "builders-hall",
       "text": "+ Add goal",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 217,
+      "line": 221,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -3778,7 +3778,7 @@
       "surface": "builders-hall",
       "text": "Add a device",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 188,
+      "line": 192,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -5164,7 +5164,7 @@
       "surface": "builders-hall",
       "text": "Choose goals",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 186,
+      "line": 190,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -6784,7 +6784,7 @@
       "surface": "builders-hall",
       "text": "Each builder's runner",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 418,
+      "line": 422,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -6901,7 +6901,7 @@
       "surface": "builders-hall",
       "text": "Enter a goal number.",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 323,
+      "line": 327,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -7612,7 +7612,7 @@
       "surface": "builders-hall",
       "text": "Goal number",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 209,
+      "line": 213,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -7630,7 +7630,7 @@
       "surface": "builders-hall",
       "text": "Goal {…}",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 202,
+      "line": 206,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -7639,7 +7639,7 @@
       "surface": "builders-hall",
       "text": "Goal {…} added.",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 326,
+      "line": 330,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -7648,7 +7648,7 @@
       "surface": "builders-hall",
       "text": "Goal {…} removed.",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 350,
+      "line": 354,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -7684,7 +7684,7 @@
       "surface": "builders-hall",
       "text": "Goals it can work on",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 218,
+      "line": 222,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -9817,7 +9817,7 @@
       "surface": "builders-hall",
       "text": "Name (optional)",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 209,
+      "line": 213,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -11275,7 +11275,7 @@
       "surface": "builders-hall",
       "text": "Open Settings",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 187,
+      "line": 191,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -12544,7 +12544,7 @@
       "surface": "builders-hall",
       "text": "Remove goal {…}",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 202,
+      "line": 206,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -12922,7 +12922,7 @@
       "surface": "builders-hall",
       "text": "Runner allowed to work",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 267,
+      "line": 271,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -12931,7 +12931,7 @@
       "surface": "builders-hall",
       "text": "Runners work only the goals above, and only while the switch is on. Each builder picks which of them their own runner takes, and you can pause any one builder's runner below. All of it lives on the server, so a runner's PC can read it but cannot change it.",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 267,
+      "line": 271,
       "origin": "js-markup",
       "confidence": "certain"
     },

package/docs/module-api-changelog.md

@@ -3502,5 +3502,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.25.30 with no explicit bump. run 43602884082. (task 1002620)
   1.25.32 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.25.31 with no explicit bump. run 43604349792. (task 1002620)
+  1.25.33 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.25.32 with no explicit bump. run 43605667657. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/docs/page-readings.json

@@ -954,7 +954,7 @@
       "surface": "builders",
       "title": "Builders' Hall",
       "states_read": ["home","out","founding","genesis","decide","demo","votes"],
-      "files_hash": "cc83670f9478672c",
+      "files_hash": "0f2d40cf76c32eb9",
       "reading_hash": "c5f4986bd90e2a2a",
       "counts": {"lines":29,"placed":8,"shared":8,"unplaced":13},
       "omitted": {"data":4},
@@ -2415,7 +2415,7 @@
       "surface": "builders",
       "title": "Options",
       "states_read": ["account","access","preferences","install-reports","sound","update"],
-      "files_hash": "f62327c29506ae22",
+      "files_hash": "23bd832511bb89db",
       "reading_hash": "a6d3194ed1b751ca",
       "counts": {"lines":163,"placed":104,"shared":7,"unplaced":52},
       "omitted": {"data":23},
@@ -3259,7 +3259,7 @@
       "surface": "builders",
       "title": "Watch",
       "states_read": ["board","out","operations","security","sessions","autobongos"],
-      "files_hash": "80347c5c722c6c97",
+      "files_hash": "78a1c17cb7e1331f",
       "reading_hash": "1961a0c06b9d8477",
       "counts": {"lines":72,"placed":33,"shared":7,"unplaced":32},
       "omitted": {"data":52},

package/modules/autonomy/runner-health.js

@@ -30,6 +30,9 @@
 //     it carries the fix as `remedy`. The runner decides the grace and says
 //     `config_idle:<code>` on its heartbeat; only a code config-idle.js knows is
 //     honoured, so the owner's kill switch and pause can never read as an alarm.
+//   · cannot_fetch — alive, but it has failed to reach the project several times
+//     in a row (task 1005202), so it is pinned to the code it has. NOT ok, and it
+//     carries the fix as `remedy`, like idle_config.
 //   · stopped — alive, and its builder pressed Stop on this device (task
 //     1005094). Not an alarm and not "running": the device is doing what it was
 //     told, and its card shows Run. Only a runner that is still checking in can
@@ -56,6 +59,11 @@ const RESTART_S = 10 * 60;
 
 const configIdle = require('./config-idle.js');
 
+// The fix for `cannot_fetch` (task 1005202). Seen on a real Mac: the GitHub
+// account git was using could not see the project. The runner's own log names
+// that account; this is the step to take on the device.
+const CANNOT_FETCH_REMEDY = 'On that device, git cannot reach this project on GitHub — usually it is signed in to a GitHub account that cannot see it. Run  gh auth switch  there to pick one that can (or  gh auth login  to add it); the runner\'s log names the account it is using. It picks up new code by itself once it can.';
+
 const SHA_RE = /^[0-9a-f]{40}$/;
 const sha = (v) => (typeof v === 'string' && SHA_RE.test(v) ? v : null);
 
@@ -141,6 +149,17 @@ function describeRunner(heartbeat, { nowMs = Date.now(), aliveS = ALIVE_S, lateS
     holdUntil: Number.isFinite(holdMs) && holdMs > nowMs ? new Date(holdMs).toISOString() : null,
   };
 
+  // Talking, but it cannot reach the project to fetch new code (task 1005202), so
+  // it works forever on the code it has. NOT ok, and it carries the fix. Only
+  // while it is still checking in: past that, silence is the truth.
+  if (heartbeat.last_event === 'cannot_fetch' && age <= aliveS) {
+    return {
+      state: 'cannot_fetch', ok: false, ageS: age, age: humanAge(age), ...ident,
+      why: 'it cannot fetch new code from GitHub', remedy: CANNOT_FETCH_REMEDY,
+      detail: `running old code${where} — it cannot fetch new code from GitHub`,
+    };
+  }
+
   if (heartbeat.last_event === 'upgrade_exit') {
     if (age <= RESTART_S) {
       return {

package/modules/hall-ui/public/gate.js

@@ -99,8 +99,10 @@
   // stopped (task 1005094): checking in, and its builder pressed Stop on that
   // device in Settings. Connected, not an alarm, and not the one to describe
   // while another device is working.
-  const HEALTH_RANK = { alive: 0, late: 1, idle_config: 2, restarting: 3, stopped: 4, dead: 5, never_seen: 6 };
-  const HEALTH_DOT = { alive: 'ok', late: 'ok', idle_config: 'warn', restarting: 'info', stopped: 'info', dead: 'danger', never_seen: 'info' };
+  // cannot_fetch (task 1005202): talking, but stuck on old code because it cannot
+  // reach the project on GitHub. A warning with its fix, like idle_config.
+  const HEALTH_RANK = { alive: 0, late: 1, idle_config: 2, cannot_fetch: 2, restarting: 3, stopped: 4, dead: 5, never_seen: 6 };
+  const HEALTH_DOT = { alive: 'ok', late: 'ok', idle_config: 'warn', cannot_fetch: 'warn', restarting: 'info', stopped: 'info', dead: 'danger', never_seen: 'info' };
 
   // The panel is drawn from both reads at once; each is kept so a write that only
   // reloads one of them redraws with the other's last answer.
@@ -124,7 +126,7 @@
   // `project`, and then there is no second layer to check.
   function readiness(runner, fence, mine) {
     const h = (runner && runner.health) || {};
-    const connected = ['alive', 'late', 'restarting', 'idle_config', 'stopped'].includes(h.state);
+    const connected = ['alive', 'late', 'restarting', 'idle_config', 'cannot_fetch', 'stopped'].includes(h.state);
     const goals = (fence && fence.goals) || [];
     const items = [];
     if (!runner) {
@@ -138,7 +140,9 @@
     }
     if (!connected) items.push({ key: 'claude', state: 'wait', text: 'Claude signed in' });
     else if (h.account) items.push({ key: 'claude', state: 'ok', text: 'Claude signed in' });
-    if (connected && h.code && h.code.behind === true) {
+    if (h.state === 'cannot_fetch') {
+      items.push({ key: 'code', state: 'todo', text: 'Cannot fetch new code', hint: h.remedy || '' });
+    } else if (connected && h.code && h.code.behind === true) {
       items.push({ key: 'code', state: 'wait', text: 'Updating to the latest code', hint: 'It does this by itself.' });
     } else if (connected && h.code) {
       items.push({ key: 'code', state: 'ok', text: 'Up to date' });
@@ -388,7 +392,7 @@
       : 'has picked no goals, so their runner takes no work';
     const beats = (b.runners || []).map((r) => {
       const h = r.health || {};
-      const label = { dead: 'not checking in', late: 'quiet', alive: 'checking in', restarting: 'restarting', stopped: 'stopped on that device', idle_config: `idle on a setting — ${h.remedy || 'see Settings'}` }[h.state] || 'unknown';
+      const label = { dead: 'not checking in', late: 'quiet', alive: 'checking in', restarting: 'restarting', stopped: 'stopped on that device', idle_config: `idle on a setting — ${h.remedy || 'see Settings'}`, cannot_fetch: 'stuck on old code — it cannot fetch from GitHub' }[h.state] || 'unknown';
       return `<span class="ov-fact"><span class="rn-dot rn-dot--sm rn-dot--${HEALTH_DOT[h.state] || 'info'}" aria-hidden="true"></span> ${escapeHtml(h.host || r.host || '')} ${escapeHtml(label)}</span>`;
     }).join('');
     const paused = b.owner_paused === true;

package/modules/hall-ui/public/runner-button.js

@@ -126,6 +126,13 @@
         sub: `It is on, but ${hold}.` };
     }
 
+    // Checking in, but pinned to the code it has: it cannot reach the project on
+    // GitHub (task 1005202). Said the way "off or asleep" is, with the fix under it.
+    if (h.state === 'cannot_fetch') {
+      return { status: 'Stuck on old code', act: 'stop', label: 'Stop', tone: 'warn', busy: false, alt: null,
+        sub: `It is on, but it cannot fetch new code from GitHub. ${h.remedy || ''}`.trim() };
+    }
+
     if (h.state === 'idle_config') {
       return { status: 'Ready', act: 'stop', label: 'Stop', tone: 'warn', busy: false, alt: null,
         sub: `It is on, but idle because ${h.why || 'of a setting'}. ${h.remedy || ''}`.trim() };

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.25.32",
+  "version": "1.25.33",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.25.32",
+      "version": "1.25.33",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.25.32",
+  "version": "1.25.33",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -11967,5 +11967,11 @@
       "id": "1005308",
       "text": "The old circuit-city painting is gone. The welcome screen and the game's start screens now open on the city in the clouds, coloured for the time of day: deep night with lit windows, a warm dawn, a bright midday."
     }
+  ],
+  "1.25.33": [
+    {
+      "id": "1005202",
+      "text": "A runner that cannot download new code from GitHub now shows \"Stuck on old code\" on its card, with the fix, instead of looking healthy."
+    }
   ]
 }

package/scripts/bongos/autobongos-host.js

@@ -308,18 +308,28 @@ function git(args, opts = {}) {
 }
 
 // refreshCheckout — the .cmd's fetch + reset, on the runner's own copy only.
-function refreshCheckout(log = () => {}) {
-  assertRunnerCopy();
-  const f = git(['fetch', '--quiet', 'origin', 'main']);
-  if (f.status !== 0) {
-    // The log is the ONLY place this is said (the card reads check-ins, not fetches), so it
-    // carries the remedy too — a fetch that fails for a credential reason fails every loop,
-    // and the runner then works forever on the code it happens to have (task 1005096).
+//
+// Straight fetch failures are counted in `counter` and handed to the supervisor
+// through `env` (AUTOBONGOS_FETCH_FAILURES), which seeds its own count, so its
+// check-in can say `cannot_fetch` and the device's card stops reading healthy
+// (task 1005202). The collaborators are injectable for the test only.
+function refreshCheckout(log = () => {}, {
+  git: gitFn = git, assert = assertRunnerCopy, remedy = githubRemedy, counter = null, env = null,
+} = {}) {
+  assert();
+  const f = gitFn(['fetch', '--quiet', 'origin', 'main']);
+  const fetched = f.status === 0;
+  if (counter) counter.fetchFailures = fetched ? 0 : (counter.fetchFailures || 0) + 1;
+  if (counter && env) env.AUTOBONGOS_FETCH_FAILURES = String(counter.fetchFailures);
+  if (!fetched) {
+    // A fetch that fails for a credential reason fails every loop, and the runner then
+    // works forever on the code it happens to have (task 1005096), so the log carries
+    // the remedy, and the count above carries the fact to the card.
     log(`git fetch failed — running the code already here (${String(f.stderr || '').trim().slice(0, 200)})`);
-    log(`  if that keeps happening, it is not transient: ${githubRemedy()}`);
+    log(`  if that keeps happening, it is not transient: ${remedy()}`);
     return false;
   }
-  const r = git(['reset', '--quiet', '--hard', 'origin/main']);
+  const r = gitFn(['reset', '--quiet', '--hard', 'origin/main']);
   if (r.status !== 0) { log(`git reset failed (${String(r.stderr || '').trim().slice(0, 200)})`); return false; }
   return true;
 }
@@ -821,6 +831,7 @@ async function runCommand({ paths = hostPaths() } = {}) {
   const log = makeLogger(paths, { echo: !!process.stdout.isTTY });
   const env = supervisorEnv(process.env, paths, dirName);
   const state = { child: null, stopping: false };
+  const fetchCounter = { fetchFailures: 0 };   // straight failed fetches, handed to the supervisor (task 1005202)
   const keepAwake = makeKeepAwake();
   const selfSha = fileSha(__filename);
   writeLock(paths);
@@ -836,7 +847,7 @@ async function runCommand({ paths = hostPaths() } = {}) {
   rotateLog(paths);
   const out = await runLoop({}, {
     log, shouldStop: () => state.stopping,
-    refresh: () => refreshCheckout(log),
+    refresh: () => refreshCheckout(log, { counter: fetchCounter, env }),
     ensureDeps: () => ensureDeps(paths, log),
     spawnSupervisor: () => spawnSupervisorReal({ paths, env, log, keepAwake, state }),
     selfChanged: () => fileSha(__filename) !== selfSha,
@@ -924,5 +935,5 @@ module.exports = {
   windowsRunArgv, windowsRunCommand, windowsStartSpawn, legacyBootTaskInstalled, launchdPlist,
   stopRunner, stopReport, exchangeCode, claudeState, waitForCheckIn,
   signIn, cleanBase, install, removeStartEntry, installedState, status, digestArgv,
-  githubRemedy, GITHUB_REMEDY_GENERIC,
+  githubRemedy, GITHUB_REMEDY_GENERIC, refreshCheckout,
 };

package/scripts/bongos/autobongos-run.js

@@ -511,8 +511,19 @@ const MAX_CLAIM_ATTEMPTS = 5;
 // guess that is wrong costs one wasted spawn per half hour, not one per wake.
 const LIMIT_UNKNOWN_RESET_MS = 30 * 60 * 1000;
 
+// How many straight failures to reach origin before the check-in says
+// `cannot_fetch` (task 1005202). A blip fails once or twice and clears; a
+// credential fault (the active GitHub account cannot see the project) fails
+// every time, forever, and the runner then works on whatever code it has. The
+// polls inside a wait are a minute apart, so this is a few minutes of failing.
+const CANNOT_FETCH_AFTER = 3;
+
+// fetchFailures starts from the host wrapper's own count (AUTOBONGOS_FETCH_FAILURES,
+// set by autobongos-host.js), so a restart does not reset the card to healthy.
 function newRunnerState() {
-  return { setAside: new Map(), queueGate: null, limitUntil: null, diskHead: null, mainHead: null, landSweepAt: null };
+  const seeded = Number.parseInt(process.env.AUTOBONGOS_FETCH_FAILURES, 10);
+  return { setAside: new Map(), queueGate: null, limitUntil: null, diskHead: null, mainHead: null, landSweepAt: null,
+    fetchFailures: Number.isInteger(seeded) && seeded > 0 ? seeded : 0 };
 }
 const RUNNER_STATE = newRunnerState();
 
@@ -920,9 +931,23 @@ function heartbeatIdentity(deps = {}) {
   return out;
 }
 
+// cannotFetchEvent — what a beat says once the runner has failed to reach the
+// project CANNOT_FETCH_AFTER times in a row (task 1005202). It replaces the idle
+// words ("waiting", "loop", nothing), which would otherwise read as healthy. It
+// never hides a restart, a setting holding the runner, or the task in its hands:
+// each of those is its own truth about this minute.
+function cannotFetchEvent(fields = {}, state = RUNNER_STATE) {
+  if (!state || !((state.fetchFailures || 0) >= CANNOT_FETCH_AFTER)) return fields.last_event;
+  if (fields.working_task_id) return fields.last_event;
+  const ev = fields.last_event;
+  if (ev === 'upgrade_exit' || (typeof ev === 'string' && ev.startsWith('config_idle:'))) return ev;
+  return 'cannot_fetch';
+}
+
 async function postHeartbeat(fields = {}, deps = {}) {
   try {
     const api = deps.api || await (require('./cli-lib').cliClient)();
+    const lastEvent = cannotFetchEvent(fields, deps.state || RUNNER_STATE);
     await api.autonomy.postAutonomyHeartbeat({
       body: {
         host: os.hostname(),
@@ -930,6 +955,7 @@ async function postHeartbeat(fields = {}, deps = {}) {
         started_at: RUNNER_STARTED_AT,
         ...heartbeatIdentity(deps),
         ...fields,
+        ...(lastEvent ? { last_event: lastEvent } : {}),
       },
     });
     return true;
@@ -1165,11 +1191,17 @@ async function refreshCheckout(deps = {}) {
 // The head of origin/main, or null. `git ls-remote` rather than `fetch`: it moves
 // no refs and writes nothing, so polling it every few minutes cannot interfere
 // with a worker building in a tree beside it.
+//
+// Every call also counts toward `fetchFailures` (task 1005202): a success clears
+// it, anything else adds one, so the heartbeat can say the runner cannot reach
+// the project instead of reading healthy on code it can never update.
 async function runFetchHead(deps = {}) {
   const runCmd = deps.run || run;
-  const r = await runCmd('git', ['ls-remote', 'origin', 'refs/heads/main']);
-  if (!r.ok) return null;
-  const m = /^([0-9a-f]{40})/.exec(String(r.stdout).trim());
+  const st = deps.state || RUNNER_STATE;
+  let r = null;
+  try { r = await runCmd('git', ['ls-remote', 'origin', 'refs/heads/main']); } catch (_) { r = null; }
+  const m = r && r.ok ? /^([0-9a-f]{40})/.exec(String(r.stdout).trim()) : null;
+  st.fetchFailures = m ? 0 : (st.fetchFailures || 0) + 1;
   return m ? m[1] : null;
 }
 
@@ -1395,6 +1427,6 @@ module.exports = {
   worktreeName, readFence, gradeLedgerPath, gradeCapReader, reconcileLeftoverClaims, pollSignals, waitOrJump, forever, CLAIM_PREFIX, codeDrifted, loadedHead, UPGRADE_EXIT_CODE, MIN_UPTIME_BEFORE_UPGRADE_MS,
   heartbeatPath, writeHeartbeat, readHeartbeat, pidAlive, anotherRunnerIsAlive, HEARTBEAT_STALE_MS,
   isRunnerTree, RUNNER_TREE_RE, postHeartbeat, claudeAccountLabel, RUNNER_STARTED_AT, failureReason,
-  newRunnerState, loadedFiles, supervisorTouched, refreshCheckout, LIMIT_UNKNOWN_RESET_MS, QUEUE_GATED_EXIT, CLAIM_SET_ASIDE_MS, MAX_CLAIM_ATTEMPTS, owedTaskIds,
+  newRunnerState, runFetchHead, cannotFetchEvent, CANNOT_FETCH_AFTER, loadedFiles, supervisorTouched, refreshCheckout, LIMIT_UNKNOWN_RESET_MS, QUEUE_GATED_EXIT, CLAIM_SET_ASIDE_MS, MAX_CLAIM_ATTEMPTS, owedTaskIds,
   readRunLogRows, recheckPendingLands, LAND_SWEEP_MS,
 };

package/src/module-api.js

@@ -81,7 +81,7 @@ const { sleep } = require('./sleep');
 // MAJOR (see allowBoxScope below): passes the request through untouched.
 function deprecatedNoopMiddleware(_req, _res, next) { next(); }
 
-const CORE_VERSION = '1.25.32'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.25.33'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('discord'); log.info('mounted');

package/tests/autobongos_cannot_fetch.mjs

@@ -0,0 +1,123 @@
+// tests/autobongos_cannot_fetch.mjs — a runner that can never fetch says so on
+// its card (task 1005202).
+//
+// Found on a real Mac: two GitHub accounts were signed in, the active one could
+// not see the private project, and every `git fetch` 404'd. The runner checked in
+// as healthy and worked on the code it happened to clone, forever; only its own
+// log said otherwise. These pin the signal end to end: the host and the
+// supervisor count straight fetch failures, past CANNOT_FETCH_AFTER the check-in
+// says `cannot_fetch`, the verdict is not ok and carries the remedy, and the
+// device's button and checklist stop reading healthy. One good fetch clears it.
+//
+// DB-free, no network. Run:  node --test tests/autobongos_cannot_fetch.mjs
+
+import { test } from 'node:test';
+import assert from 'node:assert/strict';
+import path from 'node:path';
+import { createRequire } from 'node:module';
+import { fileURLToPath } from 'node:url';
+
+const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
+const req = createRequire(import.meta.url);
+const runner = req(path.join(ROOT, 'scripts/bongos/autobongos-run.js'));
+const host = req(path.join(ROOT, 'scripts/bongos/autobongos-host.js'));
+const health = req(path.join(ROOT, 'modules/autonomy/runner-health.js'));
+const RB = req(path.join(ROOT, 'modules/hall-ui/public/runner-button.js'));
+
+const A = 'a'.repeat(40);
+const NOW = Date.parse('2026-11-14T12:00:00.000Z');
+const agoS = (s) => new Date(NOW - s * 1000).toISOString();
+
+const failing = async () => ({ ok: false, stdout: '', stderr: 'remote: Repository not found.' });
+const working = async () => ({ ok: true, stdout: `${A}\trefs/heads/main\n` });
+
+function recorder() {
+  const bodies = [];
+  const api = { autonomy: { postAutonomyHeartbeat: async ({ body }) => { bodies.push(body); return { ok: true }; } } };
+  return { bodies, api };
+}
+
+test('the supervisor counts straight failures to reach main, and one success clears the count', async () => {
+  const state = runner.newRunnerState();
+  assert.equal(state.fetchFailures, 0);
+  for (let i = 1; i <= 3; i++) {
+    assert.equal(await runner.runFetchHead({ run: failing, state }), null);
+    assert.equal(state.fetchFailures, i);
+  }
+  await runner.runFetchHead({ run: async () => { throw new Error('spawn git ENOENT'); }, state });
+  assert.equal(state.fetchFailures, 4, 'a git that cannot even start is a failure too');
+  assert.equal(await runner.runFetchHead({ run: working, state }), A);
+  assert.equal(state.fetchFailures, 0);
+});
+
+test('past the threshold the check-in says cannot_fetch instead of a healthy idle', async () => {
+  const { bodies, api } = recorder();
+  const state = runner.newRunnerState();
+  const deps = { api, state, claudeAccountLabel: () => null };
+  for (let i = 0; i < runner.CANNOT_FETCH_AFTER - 1; i++) await runner.runFetchHead({ run: failing, state });
+  await runner.postHeartbeat({ last_event: 'waiting' }, deps);
+  assert.equal(bodies.at(-1).last_event, 'waiting', 'a blip below the threshold is not an alarm');
+
+  await runner.runFetchHead({ run: failing, state });
+  for (const ev of ['waiting', 'loop', 'nothing_claimable', undefined]) {
+    await runner.postHeartbeat(ev ? { last_event: ev } : {}, deps);
+    assert.equal(bodies.at(-1).last_event, 'cannot_fetch', String(ev));
+  }
+  // What it must never hide: a restart, a setting holding it, or the task in its hands.
+  await runner.postHeartbeat({ last_event: 'upgrade_exit' }, deps);
+  assert.equal(bodies.at(-1).last_event, 'upgrade_exit');
+  await runner.postHeartbeat({ last_event: 'config_idle:no_goals' }, deps);
+  assert.equal(bodies.at(-1).last_event, 'config_idle:no_goals');
+  await runner.postHeartbeat({ last_event: 'claimed', working_task_id: 7 }, deps);
+  assert.equal(bodies.at(-1).last_event, 'claimed');
+
+  await runner.runFetchHead({ run: working, state });
+  await runner.postHeartbeat({ last_event: 'waiting' }, deps);
+  assert.equal(bodies.at(-1).last_event, 'waiting', 'one good fetch and the card reads healthy again');
+});
+
+test('the host counts its own failed fetches and hands the count to the supervisor it starts', () => {
+  const env = {};
+  const counter = { fetchFailures: 0 };
+  const bad = () => ({ status: 128, stdout: '', stderr: 'fatal: repository not found' });
+  const good = () => ({ status: 0, stdout: '', stderr: '' });
+  const opts = { git: bad, assert: () => {}, remedy: () => 'switch account', counter, env };
+  assert.equal(host.refreshCheckout(() => {}, opts), false);
+  assert.equal(host.refreshCheckout(() => {}, opts), false);
+  assert.equal(counter.fetchFailures, 2);
+  assert.equal(env.AUTOBONGOS_FETCH_FAILURES, '2');
+  // The supervisor it starts begins from that count, so the card does not wait
+  // for a fresh run of failures after every restart.
+  const saved = process.env.AUTOBONGOS_FETCH_FAILURES;
+  process.env.AUTOBONGOS_FETCH_FAILURES = env.AUTOBONGOS_FETCH_FAILURES;
+  try { assert.equal(runner.newRunnerState().fetchFailures, 2); } finally {
+    if (saved === undefined) delete process.env.AUTOBONGOS_FETCH_FAILURES; else process.env.AUTOBONGOS_FETCH_FAILURES = saved;
+  }
+  assert.equal(host.refreshCheckout(() => {}, { ...opts, git: good }), true);
+  assert.equal(counter.fetchFailures, 0);
+  assert.equal(env.AUTOBONGOS_FETCH_FAILURES, '0');
+});
+
+test('the verdict is cannot_fetch: not ok, and it carries the remedy', () => {
+  const d = health.describeRunner({ host: 'mac-mini', mode: 'full', last_event: 'cannot_fetch', last_seen_at: agoS(30) }, { nowMs: NOW });
+  assert.equal(d.state, 'cannot_fetch');
+  assert.equal(d.ok, false, 'a runner pinned to old code is not healthy');
+  assert.match(d.detail, /mac-mini/);
+  assert.match(d.remedy, /gh auth switch/);
+  // Silence still wins: a runner nobody has heard from cannot vouch for anything.
+  assert.equal(health.describeRunner({ host: 'mac-mini', last_event: 'cannot_fetch', last_seen_at: agoS(3 * 3600) }, { nowMs: NOW }).state, 'dead');
+});
+
+test("the device's button says it is stuck on old code, and names the fix", () => {
+  const fence = { enabled: true, scope: { goals: [1] }, project: { enabled: true, goals: [{ goal_id: 1 }] } };
+  const runnerRow = {
+    host: 'mac-mini', run_requested: true, run_changed_at: agoS(3600), last_seen_at: agoS(30),
+    health: { state: 'cannot_fetch', host: 'mac-mini', age: '30s', remedy: 'Run gh auth switch on it.' },
+  };
+  const b = RB.buttonState({ runner: runnerRow, fence, nowMs: NOW });
+  assert.equal(b.status, 'Stuck on old code');
+  assert.equal(b.tone, 'warn');
+  assert.equal(b.act, 'stop');
+  assert.match(b.sub, /cannot fetch new code/);
+  assert.match(b.sub, /gh auth switch/);
+});