@bongos/core 1.17.1 → 1.17.3

package/scripts/hall-preview/fixtures/tasks__detail.json

@@ -0,0 +1,111 @@
+{
+  "task": {
+    "id": "2166",
+    "version_id": "BONGOS-V1",
+    "title": "hall-kit.js: shared hall UI primitives (pager, ledger, filter bar, tabs, rail, empty/skeleton)",
+    "description": "**What:** New `modules/hall-ui/public/hall-kit.js` — a dependency-free IIFE exposing `window.OTBKit`, the shared component kit the page redesigns (tasks hallux-t04..t11) adopt. Hard cap ~500 lines. No page adopts in this task.\n\n**Primitives (six, no more):**\n1. **Pager** — canonize the best implementation (`work.js:105-184`: makePager/paginate/renderPagerBar/wirePager — clamping, localStorage persistence, hide-below-min, poll-safe page retention) + `pagerBarHtml(prefix)` emitting the standard `#<prefix>-{pager,range,page,prev,next,per-page}` markup. localStorage key stays a caller parameter so existing per-page keys survive migration.\n2. **Ledger** — `makeLedger({mount, columns, rowHtml, emptyMsg, pager})` stamping `table.ledger` + pager bar; exposes `render(rows)`. Low-level pager stays exported for incremental adoption.\n3. **Filter bar** — `makeFilterBar({mount, primary, overflow, search, onChange})`: primary controls inline, the rest behind a \"More filters\" disclosure with active-count badge; URL-query sync helper.\n4. **Tabs** — hash-synced tab strip (promote the `setup__tab` idiom); toggles `hidden` on panels exactly like the index hash views (window stays the only scroller).\n5. **Section rail** — `makeSectionRail(items, mount, {mode})` with two modes: scrollspy (Standing idiom) and panel-switch (Settings idiom) — one implementation replacing the two divergent copies.\n6. **Empty/skeleton + collapsible** — `emptyState(msg, {action})`, `skeletonRows(n, cols)` (CSS-only shimmer via color-mix of --ink/--bg), `collapsibleCard` (generalize the Work backlog details idiom).\n\n**Style:** string-template + innerHTML, factories return {el, render(data)} — the idiom pages already use. No state manager, no render loop. Guard the global assignment eval-safe (no eval-time DOM) like dom-utils.js.\n\n**CSS:** kit styles land as ONE new bannered section in `modules/hall-ui/public/style.css` (reuse existing .ledger/.pager/.filters classes; add only disclosure, skeleton shimmer, rail generalization). While in there: normalize section banners into a stable order + add a table-of-contents comment. **NEVER move or rename lines 12-107 (the 13 color + 2 font theme vars + dark-mode flip — the instance-pack API).** Do NOT touch dom-utils.js (Node-required by tests/module_contributions.mjs).\n\n**Acceptance:** kit file loads standalone with zero console errors on any page when included; grep-diff proves style.css token block byte-identical; no page behavior changes (nothing adopts yet).\n\n**Verify:** hall preview harness (scripts/hall-preview, task hallux-t02) + Playwright — screenshots {light,dark}x{1280w,390w}, seam assertions (window is the only scroller; #/idea/N overlay + #/task/N navigation intact; module widgets mount and vanish with modules off). Run `node scripts/gds/fitness.js` + `node --check` on edited JS before ship.",
+    "status": "shipped",
+    "touches": [
+      "modules/hall-ui/public/hall-kit.js",
+      "modules/hall-ui/public/style.css",
+      "scripts/gds/CLAUDE.md"
+    ],
+    "est_minutes": 240,
+    "est_cost_usd": null,
+    "manual_degree": null,
+    "priority": 2,
+    "automation_tag": null,
+    "credits_reward": 80,
+    "source": "hall-ux-redesign",
+    "source_ref": "hallux-t1",
+    "promoted_at": null,
+    "shipped_at": "2026-07-10T18:28:51.046Z",
+    "shipped_by": "95",
+    "value_summary": "The builders' hall now has one shared component kit — tables, pagers, filters, tabs, and rails that used to be rebuilt slightly differently on every page now come from a single source, so every page redesign that follows lands faster and behaves the same way.",
+    "created_at": "2026-07-10T18:16:55.661Z",
+    "updated_at": "2026-07-10T18:28:51.046Z",
+    "kind": "infra",
+    "parent_task_id": null,
+    "actual_minutes": 10,
+    "scoping_confidence": null,
+    "discipline": "engineer",
+    "parallel_safe": null,
+    "newcomer_friendly": false,
+    "requires_rank": "xenos",
+    "needs_migration": false,
+    "security_sensitive": false,
+    "sandbox_review": null,
+    "goal_id": "25",
+    "module_key": null,
+    "reward_gate_exempt": false,
+    "credits_awarded": 80,
+    "est_minutes_calibrated": 20,
+    "dependencies": [],
+    "dependents": [
+      {
+        "id": "2171",
+        "title": "Goals page: converge onto the kit (pagers, filter bar, invite disclosure)",
+        "status": "ready",
+        "version_id": "BONGOS-V1",
+        "kind": "refactor",
+        "priority": 2
+      },
+      {
+        "id": "2169",
+        "title": "Home redesign: attention inbox, Projects card, linked stat tiles, zone budgets",
+        "status": "backlog",
+        "version_id": "BONGOS-V1",
+        "kind": "refactor",
+        "priority": 2
+      },
+      {
+        "id": "2176",
+        "title": "Secondary-page sweep: inline styles to per-page CSS + kit empty states",
+        "status": "ready",
+        "version_id": "BONGOS-V1",
+        "kind": "refactor",
+        "priority": 2
+      },
+      {
+        "id": "2172",
+        "title": "Settings regroup: 6 groups, standard panel anatomy, stable anchors",
+        "status": "ready",
+        "version_id": "BONGOS-V1",
+        "kind": "blocker-resolution",
+        "priority": 2
+      },
+      {
+        "id": "2175",
+        "title": "Sidebar IA regroup by audience + Economy in Docs + task page breadcrumb",
+        "status": "backlog",
+        "version_id": "BONGOS-V1",
+        "kind": "feature",
+        "priority": 2
+      },
+      {
+        "id": "2174",
+        "title": "Standing consolidation: 4 rail sections, Achievements folded in, bounties to Economy",
+        "status": "backlog",
+        "version_id": "BONGOS-V1",
+        "kind": "feature",
+        "priority": 2
+      },
+      {
+        "id": "2173",
+        "title": "Watch redesign: attention row + People/Operations/Security tabs (Archon)",
+        "status": "ready",
+        "version_id": "BONGOS-V1",
+        "kind": "blocker-resolution",
+        "priority": 2
+      },
+      {
+        "id": "2170",
+        "title": "Work board redesign: tabs, filter diet, denser cards",
+        "status": "ready",
+        "version_id": "BONGOS-V1",
+        "kind": "refactor",
+        "priority": 2
+      }
+    ]
+  }
+}

package/scripts/hall-preview/fixtures/tasks__peer-votes__feed.json

@@ -0,0 +1,330 @@
+{
+  "tasks": [
+    {
+      "id": "2160",
+      "title": "R89-prereq (rehearsal F2): consumer package.json must carry the full host dep closure (+ decide core-module deps like discord.js)",
+      "value_summary": "R89 cutover prerequisite (F2): decided to keep the shared platform package lean — a module that needs an extra library (Discord) now declares it itself, and a new project automatically picks up the libraries for the features it turns on. (Landed via the shared R89 branch merged under task 2159.)",
+      "version_id": "BONGOS-V1",
+      "status": "shipped",
+      "shipped_at": "2026-07-10T18:09:25.806Z",
+      "shipped_by": "1",
+      "github_login": "lars589",
+      "display_name": "lars589",
+      "net_votes": 0,
+      "my_vote": null
+    },
+    {
+      "id": "2161",
+      "title": "R89-prereq (rehearsal F3): server.js game entrypoint — widen core exports + rewrite its core requires + set consumer start=server.js",
+      "value_summary": "R89 cutover prerequisite (F3): the shared platform package now exposes the pieces a game instance's entrypoint needs, and the cutover tool rewrites that entrypoint to use them — so the game server still boots after the split. (Landed via the shared R89 branch merged under task 2159.)",
+      "version_id": "BONGOS-V1",
+      "status": "shipped",
+      "shipped_at": "2026-07-10T18:09:07.800Z",
+      "shipped_by": "1",
+      "github_login": "lars589",
+      "display_name": "lars589",
+      "net_votes": 0,
+      "my_vote": null
+    },
+    {
+      "id": "2159",
+      "title": "R89-prereq (rehearsal F1): cutover codemod to rewrite host-module doorway requires to @bongos/core/module-api",
+      "value_summary": "R89 cutover prerequisite (F1): a cutover-time tool that rewrites the game and art modules' internal code links to the shared @bongos/core package, so splitting Amazonprimea onto the packaged core won't break the boot.",
+      "version_id": "BONGOS-V1",
+      "status": "shipped",
+      "shipped_at": "2026-07-10T18:08:15.894Z",
+      "shipped_by": "1",
+      "github_login": "lars589",
+      "display_name": "lars589",
+      "net_votes": 0,
+      "my_vote": null
+    },
+    {
+      "id": "2158",
+      "title": "Upstream auto-publish policy for @bongos/core patch releases (subscription supply side)",
+      "value_summary": "Decided how new core releases reach subscribers: the owner publishes them deliberately (not auto-published on every change) — keeps release control and avoids storing a standing publish password in the build system.",
+      "version_id": "BONGOS-V1",
+      "status": "shipped",
+      "shipped_at": "2026-07-10T15:57:10.884Z",
+      "shipped_by": "1",
+      "github_login": "lars589",
+      "display_name": "lars589",
+      "net_votes": 0,
+      "my_vote": null
+    },
+    {
+      "id": "2144",
+      "title": "R89-prereq: rehearse the full cutover on a throwaway clone of amazonprimea (staging)",
+      "value_summary": "Rehearsed the big platform split on a throwaway copy of the project before we do it for real — it boots and runs end to end (game + platform) on the pinned Cloud Bongos core. Caught 3 must-fix issues that only appear when converting the live project (not the fresh-start demos), so the real switch won't surprise us.",
+      "version_id": "BONGOS-V1",
+      "status": "shipped",
+      "shipped_at": "2026-07-10T15:42:26.095Z",
+      "shipped_by": "1",
+      "github_login": "lars589",
+      "display_name": "lars589",
+      "net_votes": 0,
+      "my_vote": null
+    },
+    {
+      "id": "2150",
+      "title": "Update subscription: scheduled patch-only auto-upgrade routine for consumer instances",
+      "value_summary": "Projects can now subscribe to automatic platform updates: opt in and an instance quietly takes the latest safe bug-fix releases on a schedule — and if an update ever fails a health check it rolls itself back with no downtime. Off by default and fully opt-in, with a per-project setting for how far updates may jump (bug-fixes only, by default).",
+      "version_id": "BONGOS-V1",
+      "status": "shipped",
+      "shipped_at": "2026-07-10T12:05:51.655Z",
+      "shipped_by": "1",
+      "github_login": "lars589",
+      "display_name": "lars589",
+      "net_votes": 0,
+      "my_vote": null
+    },
+    {
+      "id": "2157",
+      "title": "Live rollback drill: prove bongos upgrade auto-rollback end-to-end on demo.cloudbongos.com",
+      "value_summary": "Proved on the live demo site that a failed platform update safely undoes itself: we deliberately broke an update and the system automatically rolled back to the working version with zero downtime — confirming the safety net works before we let updates run unattended.",
+      "version_id": "BONGOS-V1",
+      "status": "shipped",
+      "shipped_at": "2026-07-10T11:39:56.167Z",
+      "shipped_by": "1",
+      "github_login": "lars589",
+      "display_name": "lars589",
+      "net_votes": 0,
+      "my_vote": null
+    },
+    {
+      "id": "2155",
+      "title": "Neutralize world-narrative prose in shipped core docs (primer pitch + reclassify OTB game-design specs) — task 1728 clean-split part B",
+      "value_summary": "",
+      "version_id": "BONGOS-V1",
+      "status": "shipped",
+      "shipped_at": "2026-07-10T11:10:10.507Z",
+      "shipped_by": "1",
+      "github_login": "lars589",
+      "display_name": "lars589",
+      "net_votes": 0,
+      "my_vote": null
+    },
+    {
+      "id": "2149",
+      "title": "Add auto-rollback to `bongos upgrade` (revert pin + reinstall + restart on failed health check)",
+      "value_summary": "The one-command platform update now protects itself: if an update fails partway or the site comes back unhealthy, it automatically undoes the change and restores the previous working version, so a bad update can't leave a site stuck on a broken version.",
+      "version_id": "BONGOS-V1",
+      "status": "shipped",
+      "shipped_at": "2026-07-10T11:08:24.267Z",
+      "shipped_by": "1",
+      "github_login": "lars589",
+      "display_name": "lars589",
+      "net_votes": 0,
+      "my_vote": null
+    },
+    {
+      "id": "2148",
+      "title": "Prove `bongos upgrade` end-to-end on demo.cloudbongos.com via a canary core release (1.17.1 → 1.17.2)",
+      "value_summary": "Proved our one-command platform-update system works end-to-end: staged a new version and pushed it live to the demo site with a single command, confirming the running code was actually replaced, the site stayed healthy, and the update was logged.",
+      "version_id": "BONGOS-V1",
+      "status": "shipped",
+      "shipped_at": "2026-07-10T10:45:38.752Z",
+      "shipped_by": "1",
+      "github_login": "lars589",
+      "display_name": "lars589",
+      "net_votes": 0,
+      "my_vote": null
+    },
+    {
+      "id": "2153",
+      "title": "Finish @bongos/core neutralization: drop project-specific recipes + brand-leaking docs (task 1728 clean-split prereq)",
+      "value_summary": "New projects built on Cloud Bongos no longer inherit Off the Boats' internal recipes or brand text in the shared platform core.",
+      "version_id": "BONGOS-V1",
+      "status": "shipped",
+      "shipped_at": "2026-07-10T10:13:44.904Z",
+      "shipped_by": "1",
+      "github_login": "lars589",
+      "display_name": "lars589",
+      "net_votes": 0,
+      "my_vote": null
+    },
+    {
+      "id": "2136",
+      "title": "R89-prereq [topology-routing 1/4]: rewrite .github/workflows/*.yml scripts/gds/* invocations to the pinned @bongos/core",
+      "value_summary": "The CI checks and merge gates that guard every pull request will keep working after the platform-core split: their commands now resolve the platform code in both the current and future layouts, and a pull request still cannot weaken its own gate.",
+      "version_id": "BONGOS-V1",
+      "status": "shipped",
+      "shipped_at": "2026-07-10T09:58:48.440Z",
+      "shipped_by": "1",
+      "github_login": "lars589",
+      "display_name": "lars589",
+      "net_votes": 0,
+      "my_vote": null
+    },
+    {
+      "id": "2137",
+      "title": "R89-prereq [topology-routing 2/4]: rewrite infra/*.service ExecStart paths to the pinned @bongos/core (11 units)",
+      "value_summary": "The background fleet services (dev-box lifecycle, provisioning, nightly search indexing) will keep launching after the platform-core split: their start commands now find the code whether it lives in the old single-repo layout or the new packaged one.",
+      "version_id": "BONGOS-V1",
+      "status": "shipped",
+      "shipped_at": "2026-07-10T09:37:54.653Z",
+      "shipped_by": "1",
+      "github_login": "lars589",
+      "display_name": "lars589",
+      "net_votes": 0,
+      "my_vote": null
+    },
+    {
+      "id": "2138",
+      "title": "R89-prereq [topology-routing 3/4]: materialize .claude/scheduled-tasks (20 routines) + make run-routine.js two-root aware",
+      "value_summary": "Kept the automated nightly routines (overnight builder, security review, idea triage, and the housekeeping checkers) working after the platform-core split: the routine dispatcher now finds and runs them whether the code lives in the old single-repo layout or the new packaged one.",
+      "version_id": "BONGOS-V1",
+      "status": "shipped",
+      "shipped_at": "2026-07-10T09:28:34.285Z",
+      "shipped_by": "1",
+      "github_login": "lars589",
+      "display_name": "lars589",
+      "net_votes": 0,
+      "my_vote": null
+    },
+    {
+      "id": "2139",
+      "title": "R89-prereq [topology-routing 4/4]: fix .claude/hooks require()/spawn of scripts/gds & src/bongos to resolve the pinned core (promotes idea 498)",
+      "value_summary": "Made the per-session automation resilient to the upcoming platform split: the session hooks now locate the shared platform code whether it lives in the project or in the installed package, so an instance that moves onto the packaged core won't have its sessions start erroring. No visible change today.",
+      "version_id": "BONGOS-V1",
+      "status": "shipped",
+      "shipped_at": "2026-07-10T08:39:54.293Z",
+      "shipped_by": "1",
+      "github_login": "lars589",
+      "display_name": "lars589",
+      "net_votes": 0,
+      "my_vote": null
+    },
+    {
+      "id": "2152",
+      "title": "Fix mirror-lineage C9 check miscounting migrations/instance/ as core (unit-gate red)",
+      "value_summary": "Unblocked the automated merge pipeline: an internal safety check was raising a false alarm (mistaking this instance's private setup data for a mismatch) that had stopped code from landing. Fixed the check so merges flow again — nothing about what ships changed.",
+      "version_id": "BONGOS-V1",
+      "status": "shipped",
+      "shipped_at": "2026-07-10T08:35:34.050Z",
+      "shipped_by": "1",
+      "github_login": "lars589",
+      "display_name": "lars589",
+      "net_votes": 0,
+      "my_vote": null
+    },
+    {
+      "id": "2129",
+      "title": "fix(onboarding): surface the manual Enable-Device-Flow step on the GitHub App Manifest path + deep-link it from the device_flow_disabled CLI error",
+      "value_summary": "New project owners now get clear guidance to enable GitHub Device Flow for terminal sign-in, and the terminal error links straight to the fix.",
+      "version_id": "BONGOS-V1",
+      "status": "shipped",
+      "shipped_at": "2026-07-09T22:26:49.623Z",
+      "shipped_by": "1",
+      "github_login": "lars589",
+      "display_name": "lars589",
+      "net_votes": 0,
+      "my_vote": null
+    },
+    {
+      "id": "2101",
+      "title": "Brand the provisioning control-plane origin as cloudbongos.com (not amazonprimea.com)",
+      "value_summary": "New-customer sign-up can now carry a Cloud Bongos web address instead of the game's domain on the GitHub connection step — shipped and tested; it activates once that address is pointed at the server.",
+      "version_id": "BONGOS-V1",
+      "status": "shipped",
+      "shipped_at": "2026-07-09T22:21:30.598Z",
+      "shipped_by": "1",
+      "github_login": "lars589",
+      "display_name": "lars589",
+      "net_votes": 0,
+      "my_vote": null
+    },
+    {
+      "id": "2130",
+      "title": "fix(security): package-core no-leak gate false-positives on OLDPWD/PWD shell vars (pwd matches the password pattern)",
+      "value_summary": "Fixed a bug that could intermittently block publishing a new platform release depending on the operator's working folder. Publishing is now reliable.",
+      "version_id": "BONGOS-V1",
+      "status": "shipped",
+      "shipped_at": "2026-07-09T22:18:53.664Z",
+      "shipped_by": "1",
+      "github_login": "lars589",
+      "display_name": "lars589",
+      "net_votes": 0,
+      "my_vote": null
+    },
+    {
+      "id": "2142",
+      "title": "R89-prereq: real-consumer-layout CI proof — install the .tgz, boot platform-server, run fitness+generators, assert two-root module load",
+      "value_summary": "New CI check installs Cloud Bongos the way a real downstream project would — a packaged dependency with its own content on top — and proves it boots and finds all its parts.",
+      "version_id": "BONGOS-V1",
+      "status": "shipped",
+      "shipped_at": "2026-07-09T22:09:40.184Z",
+      "shipped_by": "1",
+      "github_login": "lars589",
+      "display_name": "lars589",
+      "net_votes": 0,
+      "my_vote": null
+    },
+    {
+      "id": "2147",
+      "title": "Exclude host-module tests from @bongos/core; split tests/ in the R89 runbook",
+      "value_summary": "Kept the game's own tests out of the shareable core package, so it installs cleanly for other projects.",
+      "version_id": "BONGOS-V1",
+      "status": "shipped",
+      "shipped_at": "2026-07-09T21:34:57.270Z",
+      "shipped_by": "1",
+      "github_login": "lars589",
+      "display_name": "lars589",
+      "net_votes": 0,
+      "my_vote": null
+    },
+    {
+      "id": "2145",
+      "title": "R89-prereq: author the cutover rollback runbook (pg_dump + pin-revert + service restart)",
+      "value_summary": "Wrote the rollback plan so a failed split of Off the Boats onto the shared core can be reverted to the working monolith in minutes.",
+      "version_id": "BONGOS-V1",
+      "status": "shipped",
+      "shipped_at": "2026-07-09T21:05:08.417Z",
+      "shipped_by": "1",
+      "github_login": "lars589",
+      "display_name": "lars589",
+      "net_votes": 0,
+      "my_vote": null
+    },
+    {
+      "id": "2146",
+      "title": "Fix gate minimap: click blanks the grid + freezes all controls (0-size minimap → divide-by-zero → NaN pan)",
+      "value_summary": "On the Cloud Bongos landing, clicking the bottom-right overview map now recenters the view instead of blanking the grid and freezing the controls.",
+      "version_id": "BONGOS-V1",
+      "status": "shipped",
+      "shipped_at": "2026-07-09T21:03:23.172Z",
+      "shipped_by": "1",
+      "github_login": "lars589",
+      "display_name": "lars589",
+      "net_votes": 0,
+      "my_vote": null
+    },
+    {
+      "id": "2143",
+      "title": "R89-prereq: author the de-couple runbook + isPublishable partition output for amazonprimea",
+      "value_summary": "Wrote the step-by-step runbook for splitting Off the Boats onto the shared Cloud Bongos core, with the exact list of which files move to the package vs. stay with the project.",
+      "version_id": "BONGOS-V1",
+      "status": "shipped",
+      "shipped_at": "2026-07-09T21:01:10.751Z",
+      "shipped_by": "1",
+      "github_login": "lars589",
+      "display_name": "lars589",
+      "net_votes": 0,
+      "my_vote": null
+    },
+    {
+      "id": "2135",
+      "title": "R89-prereq: core files must resolve instance modules via resolveInstanceRoot() — fix provision.js + audit siblings",
+      "value_summary": "Fixed a post-split crash risk: the shared core no longer references project-only code, and a new automated guard keeps it from creeping back.",
+      "version_id": "BONGOS-V1",
+      "status": "shipped",
+      "shipped_at": "2026-07-09T20:18:44.131Z",
+      "shipped_by": "1",
+      "github_login": "lars589",
+      "display_name": "lars589",
+      "net_votes": 0,
+      "my_vote": null
+    }
+  ],
+  "can_vote": true
+}

package/scripts/hall-preview/fixtures/versions.json

@@ -0,0 +1,89 @@
+{
+  "versions": [
+    {
+      "id": "V1",
+      "name": "Game V1 — foundation and polish",
+      "track": "product",
+      "status": "shipped",
+      "scope_doc_path": "limitations/current-version.md",
+      "started_at": "2026-05-08T04:00:00.000Z",
+      "shipped_at": "2026-05-12T19:58:36.805Z",
+      "done_when": "Foundation is durable: regression gates for tiles, sprites, and style-guide drift are live; the world has variant + windowed ground; the player walks; dev ergonomics let new tiles + worlds be added at low manual effort. Commerce shifts to V3."
+    },
+    {
+      "id": "PMS-V1",
+      "name": "PMS V1 — project management system, parallel internal track",
+      "track": "internal",
+      "status": "shipped",
+      "scope_doc_path": "limitations/pms-v1-shipped.md",
+      "started_at": "2026-05-09T04:00:00.000Z",
+      "shipped_at": "2026-05-09T23:43:54.308Z",
+      "done_when": "Builders auth via GitHub. Slash commands claim/ship tasks atomically. Backlog migrated. Public status page live."
+    },
+    {
+      "id": "PMS-V2",
+      "name": "PMS V2 — themed /builders UI + gamification",
+      "track": "internal",
+      "status": "shipped",
+      "scope_doc_path": "limitations/pms-v2.md",
+      "started_at": "2026-05-09T23:26:50.100Z",
+      "shipped_at": "2026-05-12T19:52:13.366Z",
+      "done_when": "When this is finished, the citizens building Amazonprimea will keep their works on a themed ledger of their own — naming sessions, claiming tasks in batches, earning laurels for milestones, and seeing each version's scope painted in plain words."
+    },
+    {
+      "id": "GDS-V3",
+      "name": "PMS V3 — multi-builder readiness + per-builder credentials",
+      "track": "internal",
+      "status": "shipped",
+      "scope_doc_path": "limitations/pms-v3.md",
+      "started_at": "2026-05-10T09:30:43.200Z",
+      "shipped_at": "2026-06-17T20:49:19.292Z",
+      "done_when": "Delivers multi-builder readiness: clone-and-ship onboarding under two hours, three server-enforced ranks, per-builder credentials/cost/authorship, an Opus grader gating quality, parallel-safe claims and merges, a propose-and-ratify cadence, and production-grade security with red-team bounties."
+    },
+    {
+      "id": "V2",
+      "name": "Game V2 — visible other players",
+      "track": "product",
+      "status": "planning",
+      "scope_doc_path": "limitations/v2.md",
+      "started_at": "2026-05-11T22:41:31.784Z",
+      "shipped_at": null,
+      "done_when": "Other players are visible in a real, walkable world: a player walks the Olympia Sanctuary in-game at reference-art fidelity, with file-based multi-layer maps feeding both client render and server collision, correct depth-sorting on tall structures, at least two connected maps with server-authoritative warps, and the Olympia art set passing the rubric on the locked palette."
+    },
+    {
+      "id": "V3",
+      "name": "Game V3 — first entirely functional game (purchase loop)",
+      "track": "product",
+      "status": "planning",
+      "scope_doc_path": "limitations/v3.md",
+      "started_at": "2026-05-11T22:41:31.784Z",
+      "shipped_at": null,
+      "done_when": "Delivers the real purchase loop: Stripe sign-in, a vendor that sells real Off the Boats goods from a catalogue, order handoff to Hermeslines for fulfilment, and in-world order confirmation.\n\nAlso (folded in from the world-building plan): a lightweight in-house map editor lets a builder author maps that round-trip into the game (depends on the V2 world engine shipping first)."
+    },
+    {
+      "id": "GDS-V4",
+      "name": "GDS V4 — recall, resumable pipeline, honest measurement",
+      "track": "internal",
+      "status": "frozen",
+      "scope_doc_path": null,
+      "started_at": "2026-05-30T19:36:07.632Z",
+      "shipped_at": null,
+      "done_when": "When this is finished, a builder's session answers \"have we done this before?\" in one call instead of an afternoon — project knowledge (markdown and database prose alike) is searchable in one rank-scoped query and pushed into sessions at claim time; a failed ship is one command from resume instead of a consumed claim; the recurring tool-error classes (wrong-tree writes, HTML 404s, phantom smoke servers) are engineered away; the BFG's measurements reflect real friction so the improvement is provable against the 2026-06-12 baseline; and the city watches itself on one pane of glass. And the build system itself becomes Medusa — a standalone, configurable, self-hostable, AGPL-licensed, non-profit, AI-first platform decoupled from any one project, with Amazonprimea running as its first instance."
+    },
+    {
+      "id": "BONGOS-V1",
+      "name": "Cloud Bongos — platform (V1)",
+      "track": "internal",
+      "status": "building",
+      "scope_doc_path": "limitations/bongos-v1.md",
+      "started_at": "2026-06-20T13:43:55.145Z",
+      "shipped_at": null,
+      "done_when": "Bongos App V1 ships the Cloud Bongos desktop feedback tool: a Zoom-style floating toolbar that captures narrated voice + ~1/sec snapshots and freehand markup over any on-screen target, synthesizes them into one cheap, model-agnostic prompt, and hands it to Claude Desktop and Claude Code. The Dev Box desktop app is absorbed as a module of the bongos app. This is the inaugural version of the bongos line, the successor the GDS migrates into after GDS-V4. Visual element-select is deferred to V2."
+    }
+  ],
+  "page": {
+    "limit": 50,
+    "offset": 0,
+    "total": 8
+  }
+}

package/scripts/hall-preview/refresh-fixtures.js

@@ -0,0 +1,77 @@
+#!/usr/bin/env node
+// scripts/hall-preview/refresh-fixtures.js — snapshot real API responses into
+// the preview harness's fixtures/ (task 2167). Run with a valid GDS CLI session
+// (~/.config/otb/gds-session.json) whenever the fixtures drift from the live
+// API shapes:  node scripts/hall-preview/refresh-fixtures.js
+//
+// Read-only: GETs only. Endpoints that 403/404 for the caller's rank are
+// skipped (the existing fixture, if any, is kept). Box/terminal endpoints are
+// deliberately NOT snapshotted (they carry host/connection details).
+'use strict';
+
+const fs = require('fs');
+const path = require('path');
+const { cliClient } = require('../gds/cli-lib');
+
+const FIXTURES = path.join(__dirname, 'fixtures');
+
+// [api path (no /api prefix, no query), fixture name, optional trim fn]
+const trimList = (key, n) => (d) => (Array.isArray(d?.[key]) ? { ...d, [key]: d[key].slice(0, n) } : d);
+const SNAPSHOTS = [
+  ['me', 'me'],
+  ['me/recent-ships?limit=30', 'me__recent-ships'],
+  ['achievements', 'achievements'],
+  ['versions', 'versions'],
+  ['leaderboard', 'leaderboard'],
+  ['inbox', 'inbox', trimList('ideas', 25)],
+  ['goals', 'goals'],
+  ['goals/inbox', 'goals__inbox'],
+  // goal details: a handful of REAL ids (exact-match fixtures) + goal 25
+  // doubling as the generic goals__detail fallback for any other id. Without
+  // the exact ones, every /goals/:id answers as goal 25 and membership-driven
+  // widgets render one goal N times.
+  ['goals/25', 'goals__detail'],
+  ['goals/25', 'goals__25'],
+  ['goals/3', 'goals__3'],
+  ['goals/35', 'goals__35'],
+  ['goals/26', 'goals__26'],
+  ['goals/25/conflicts', 'goals__conflicts'],
+  ['goals/25/requests', 'goals__requests'],
+  ['tasks/claimable', 'tasks__claimable'],
+  ['tasks?status=ready', 'tasks', trimList('tasks', 60)],
+  ['tasks/2166', 'tasks__detail'],
+  ['tasks/peer-votes/feed?limit=25', 'tasks__peer-votes__feed'],
+  ['analytics/builder/95?days=90', 'analytics__builder'],
+  ['builders/directory', 'builders__directory'],
+  ['instance', 'instance'],
+  ['override-requests?status=open', 'override-requests'],
+  ['audit-log?limit=25', 'audit-log'],
+  ['builders/roster', 'builders__roster'],
+  ['public/analytics/ecosystem?days=90', 'public__analytics__ecosystem'],
+  ['public/estimation-drift', 'public__estimation-drift'],
+  ['public/grades?days=7', 'public__grades'],
+  ['public/repo-health?days=30', 'public__repo-health'],
+  ['public/bounty-table', 'public__bounty-table'],
+  ['public/cost-summary', 'public__cost-summary'],
+  ['public/progress', 'public__progress'],
+  ['public/recent-shipped', 'public__recent-shipped'],
+  ['public/repo-info', 'public__repo-info'],
+];
+
+(async () => {
+  const api = await cliClient();
+  fs.mkdirSync(FIXTURES, { recursive: true });
+  let wrote = 0;
+  for (const [apiPath, name, trim] of SNAPSHOTS) {
+    const res = await api.request('GET', `/${apiPath}`, {});
+    if (!res.ok) {
+      console.log(`  skip ${apiPath} → ${res.status} (kept existing fixture if present)`);
+      continue;
+    }
+    const data = trim ? trim(res.data) : res.data;
+    fs.writeFileSync(path.join(FIXTURES, `${name}.json`), `${JSON.stringify(data, null, 2)}\n`);
+    wrote += 1;
+    console.log(`  wrote ${name}.json  (${apiPath})`);
+  }
+  console.log(`refresh-fixtures: ${wrote}/${SNAPSHOTS.length} snapshots written to ${FIXTURES}`);
+})().catch((e) => { console.error(e.message || e); process.exit(1); });