@bongos/core 1.17.3 → 1.18.3

package/tests/ship_ci_deploy.mjs

@@ -71,6 +71,66 @@ test('parseDeployMode: SAFE DEFAULT laptop on no input at all', () => {
   assert.equal(parseDeployMode('', ''), 'laptop');
 });
 
+// ---- 1b. resolveDeployTarget precedence + safe "no target" default (task 1002202) ----
+// Every case passes env explicitly so the machine's own OTB_/GDS_ env can't leak in.
+
+const { resolveDeployTarget } = ship;
+
+test('resolveDeployTarget: SAFE DEFAULT — no env, no config, no branding → no target', () => {
+  const r = resolveDeployTarget({ env: {}, configRaw: null, branding: null });
+  assert.equal(r.sshTarget, null);
+  assert.equal(r.healthzUrl, null);
+});
+
+test('resolveDeployTarget: config sshTarget + healthzUrl are honored', () => {
+  const r = resolveDeployTarget({
+    env: {},
+    configRaw: '{"sshTarget":"deployer@host.example","healthzUrl":"https://inst.example/healthz"}',
+    branding: null,
+  });
+  assert.equal(r.sshTarget, 'deployer@host.example');
+  assert.equal(r.healthzUrl, 'https://inst.example/healthz');
+});
+
+test('resolveDeployTarget: env wins over config for the ssh target', () => {
+  const r = resolveDeployTarget({
+    env: { GDS_DEPLOY_SSH_TARGET: 'env@host.example' },
+    configRaw: '{"sshTarget":"config@host.example"}',
+    branding: null,
+  });
+  assert.equal(r.sshTarget, 'env@host.example');
+});
+
+test('resolveDeployTarget: healthzUrl falls back to branding publicOrigin + /healthz', () => {
+  const r = resolveDeployTarget({
+    env: {},
+    configRaw: '{"sshTarget":"deployer@host.example"}',
+    branding: { domains: { publicOrigin: 'https://cloudbongos.com' } },
+  });
+  assert.equal(r.healthzUrl, 'https://cloudbongos.com/healthz');
+});
+
+test('resolveDeployTarget: env healthz URL wins over the branding fallback', () => {
+  const r = resolveDeployTarget({
+    env: { GDS_DEPLOY_HEALTHZ_URL: 'https://explicit.example/healthz' },
+    configRaw: null,
+    branding: { domains: { publicOrigin: 'https://cloudbongos.com' } },
+  });
+  assert.equal(r.healthzUrl, 'https://explicit.example/healthz');
+});
+
+test('resolveDeployTarget: malformed config JSON → safe no-target (never throws)', () => {
+  const r = resolveDeployTarget({ env: {}, configRaw: '{not json', branding: null });
+  assert.equal(r.sshTarget, null);
+  assert.equal(r.healthzUrl, null);
+});
+
+test('resolveDeployTarget: blank/whitespace config values are treated as unset', () => {
+  const r = resolveDeployTarget({ env: {}, configRaw: '{"sshTarget":"   ","healthzUrl":""}', branding: null });
+  assert.equal(r.sshTarget, null);
+  assert.equal(r.healthzUrl, null);
+});
+
 test('parseDeployMode: SAFE DEFAULT laptop on malformed config JSON', () => {
   assert.equal(parseDeployMode(undefined, '{not json'), 'laptop');
 });

package/tests/upgrade.mjs

@@ -16,10 +16,11 @@ import { strict as assert } from 'node:assert';
 import { createRequire } from 'node:module';
 import { mkdtempSync, mkdirSync, writeFileSync, readFileSync, existsSync } from 'node:fs';
 import { tmpdir } from 'node:os';
-import { join } from 'node:path';
+import { join, dirname } from 'node:path';
 
 const require = createRequire(import.meta.url);
 const u = require('../scripts/gds/upgrade.js');
+const pc = require('../scripts/gds/package-core.js'); // the packager — reuse its EXACT hash fns to build reference pins
 
 let passed = 0, failed = 0;
 const pending = [];
@@ -159,7 +160,9 @@ t('full: pre-flight → pin → install → migrate → materialize → restart
   let materialized = null;
   let regenArgs = null;
   const res = await u.runUpgrade(
-    { to: '1.15.0', from: join(src, 'bongos-core-1.15.0.tgz'), instance: dir, service: 'emersonian.service' },
+    // healthCheck:false — this test exercises the full pipeline, not the health poll (which would need
+    // a fetch mock); a managed-restart bump now requires a --health-url unless health is opted out (H9).
+    { to: '1.15.0', from: join(src, 'bongos-core-1.15.0.tgz'), instance: dir, service: 'emersonian.service', healthCheck: false },
     {
       log: () => {}, err: () => {},
       run: fakeRun(calls, { dirty: '', installTo: '1.15.0', dir }),
@@ -398,7 +401,7 @@ t('runUpgrade --registry (full): pins the exact version + writes the env-fed .np
   const dir = scratchConsumer({ pinned: '1.16.0', installed: '1.16.0' });
   const calls = [];
   const res = await u.runUpgrade(
-    { to: '1.17.0', registry: true, instance: dir, service: 'demo.service' },
+    { to: '1.17.0', registry: true, instance: dir, service: 'demo.service', healthCheck: false }, // H9: opt out (no health poll under test)
     {
       log: () => {}, err: () => {},
       run: fakeRun(calls, { dirty: '', installTo: '1.17.0', dir }),
@@ -479,7 +482,7 @@ t('rollback on migrate failure: reverts pin + reinstalls previous core + rolled_
   const dir = scratchConsumer({ pinned: '1.14.1', installed: '1.14.1' });
   const calls = [], queries = [];
   const res = await u.runUpgrade(
-    { to: '1.15.0', from: join(src, 'bongos-core-1.15.0.tgz'), instance: dir, service: 'demo.service' },
+    { to: '1.15.0', from: join(src, 'bongos-core-1.15.0.tgz'), instance: dir, service: 'demo.service', healthCheck: false }, // H9: opt out — this test is about migrate-failure rollback, not health
     {
       log: () => {}, err: () => {},
       run: pinAwareRun(calls, { dir, failMigrate: true }),
@@ -502,7 +505,7 @@ t('rollback on npm-install failure: reverts pin + reinstalls previous core', asy
   const dir = scratchConsumer({ pinned: '1.14.1', installed: '1.14.1' });
   const calls = [], queries = [];
   const res = await u.runUpgrade(
-    { to: '1.15.0', from: join(src, 'bongos-core-1.15.0.tgz'), instance: dir, service: 'demo.service' },
+    { to: '1.15.0', from: join(src, 'bongos-core-1.15.0.tgz'), instance: dir, service: 'demo.service', healthCheck: false }, // H9: opt out — this test is about install-failure rollback, not health
     {
       log: () => {}, err: () => {},
       run: pinAwareRun(calls, { dir, failInstallForVersion: '1.15.0' }),
@@ -547,6 +550,252 @@ t('restorePin: writes a previous dep string back verbatim (file: or registry)',
   assert.equal(JSON.parse(readFileSync(join(dir, 'package.json'), 'utf8')).dependencies['@bongos/core'], '^1.16.0');
 });
 
+// ---- 7. integrity-pin verification (task 1002216 / audit H8, finding F1) ----
+// Build a reference pin exactly as the packager does — canonicalTreeHash over the pinned
+// files' sha256, so a matching installed tree recomputes byte-identically.
+function pinManifestFor(files, { tarballSha = null, tarballBytes = 0 } = {}) {
+  const meta = files
+    .map((f) => ({ path: f.path, mode: f.mode || '0000644', sha256: pc.sha256hex(Buffer.from(f.content)) }))
+    .sort((a, b) => (a.path < b.path ? -1 : a.path > b.path ? 1 : 0));
+  const m = { artifact: 'bongos-core', tree_sha256: pc.canonicalTreeHash(meta), files: meta };
+  if (tarballSha) m.tarball = { name: 'bongos-core.tgz', sha256: tarballSha, bytes: tarballBytes };
+  return m;
+}
+function writeCoreTree(coreDir, files) {
+  for (const f of files) {
+    const abs = join(coreDir, ...f.path.split('/'));
+    mkdirSync(dirname(abs), { recursive: true });
+    writeFileSync(abs, f.content);
+  }
+}
+const PIN_FILES = [{ path: 'a.js', content: 'console.log(1)\n' }, { path: 'sub/b.json', content: '{"x":1}\n' }];
+
+t('verifyInstalledPin: matching installed tree + tarball bytes → ok (both checks)', () => {
+  const dir = mkdtempSync(join(tmpdir(), 'otb-pin-'));
+  const coreDir = join(dir, 'node_modules', '@bongos', 'core');
+  writeCoreTree(coreDir, PIN_FILES);
+  const tgzBytes = Buffer.from('deterministic-fake-tgz');
+  const tgz = join(dir, 'vendor', 'bongos-core-1.15.0.tgz');
+  mkdirSync(dirname(tgz), { recursive: true });
+  writeFileSync(tgz, tgzBytes);
+  const m = pinManifestFor(PIN_FILES, { tarballSha: pc.sha256hex(tgzBytes), tarballBytes: tgzBytes.length });
+  const res = u.verifyInstalledPin({ coreDir, referenceManifest: m, tgzPath: tgz });
+  assert.equal(res.ran, true);
+  assert.equal(res.ok, true, res.problems.join('; '));
+  assert.deepEqual(res.checks.map((c) => c.name).sort(), ['tarball.sha256', 'tree_sha256']);
+});
+
+t('verifyInstalledPin: a corrupted installed file → mismatch (ran, not ok)', () => {
+  const dir = mkdtempSync(join(tmpdir(), 'otb-pin-'));
+  const coreDir = join(dir, 'node_modules', '@bongos', 'core');
+  writeCoreTree(coreDir, PIN_FILES);
+  const m = pinManifestFor(PIN_FILES);
+  writeFileSync(join(coreDir, 'a.js'), 'console.log(999) // tampered\n'); // corrupt AFTER pinning
+  const res = u.verifyInstalledPin({ coreDir, referenceManifest: m, tgzPath: null });
+  assert.equal(res.ran, true);
+  assert.equal(res.ok, false);
+  assert.ok(res.problems.some((p) => /content mismatch: a\.js/.test(p)), res.problems.join('; '));
+});
+
+t('verifyInstalledPin: a missing installed file → mismatch', () => {
+  const dir = mkdtempSync(join(tmpdir(), 'otb-pin-'));
+  const coreDir = join(dir, 'node_modules', '@bongos', 'core');
+  writeCoreTree(coreDir, [PIN_FILES[0]]); // omit sub/b.json
+  const res = u.verifyInstalledPin({ coreDir, referenceManifest: pinManifestFor(PIN_FILES), tgzPath: null });
+  assert.equal(res.ok, false);
+  assert.ok(res.problems.some((p) => /missing installed file: sub\/b\.json/.test(p)), res.problems.join('; '));
+});
+
+t('verifyInstalledPin: tarball bytes differ from the pin → mismatch', () => {
+  const dir = mkdtempSync(join(tmpdir(), 'otb-pin-'));
+  const coreDir = join(dir, 'node_modules', '@bongos', 'core');
+  writeCoreTree(coreDir, PIN_FILES);
+  const tgz = join(dir, 'vendor', 'bongos-core-1.15.0.tgz');
+  mkdirSync(dirname(tgz), { recursive: true });
+  writeFileSync(tgz, Buffer.from('the-actual-bytes'));
+  const m = pinManifestFor(PIN_FILES, { tarballSha: pc.sha256hex(Buffer.from('DIFFERENT-bytes')), tarballBytes: 9 });
+  const res = u.verifyInstalledPin({ coreDir, referenceManifest: m, tgzPath: tgz });
+  assert.equal(res.ok, false);
+  assert.ok(res.problems.some((p) => /tarball bytes/.test(p)), res.problems.join('; '));
+});
+
+t('verifyInstalledPin: no pin in the reference manifest → ran:false (nothing to check)', () => {
+  const res = u.verifyInstalledPin({ coreDir: '/nonexistent', referenceManifest: {}, tgzPath: null });
+  assert.equal(res.ran, false);
+  assert.equal(res.ok, false);
+});
+
+t('resolveReferenceManifest: prefers the committed vendored side-car (strong)', () => {
+  const dir = mkdtempSync(join(tmpdir(), 'otb-pin-'));
+  const coreDir = join(dir, 'node_modules', '@bongos', 'core');
+  mkdirSync(join(dir, 'vendor'), { recursive: true });
+  writeFileSync(join(dir, 'vendor', 'bongos-core-1.15.0.manifest.json'), JSON.stringify(pinManifestFor(PIN_FILES)));
+  writeFileSync(join(dir, 'vendor', 'bongos-core-1.15.0.tgz'), 'x');
+  const ref = u.resolveReferenceManifest({ instanceDir: dir, coreDir, targetVersion: '1.15.0' });
+  assert.equal(ref.source, 'vendored side-car manifest');
+  assert.equal(ref.strong, true);
+  assert.ok(ref.tgzPath && existsSync(ref.tgzPath));
+});
+
+t('resolveReferenceManifest: falls back to the installed inner manifest (not strong)', () => {
+  const dir = mkdtempSync(join(tmpdir(), 'otb-pin-'));
+  const coreDir = join(dir, 'node_modules', '@bongos', 'core');
+  mkdirSync(coreDir, { recursive: true });
+  writeFileSync(join(coreDir, '.bongos-core.json'), JSON.stringify(pinManifestFor(PIN_FILES)));
+  const ref = u.resolveReferenceManifest({ instanceDir: dir, coreDir, targetVersion: '1.15.0' });
+  assert.equal(ref.source, 'installed inner manifest');
+  assert.equal(ref.strong, false);
+  assert.equal(ref.tgzPath, null);
+});
+
+// A spawn shim whose `npm install` writes an installed core tree (+ version) so the
+// real pin-verify step can run against it. `files` is what actually lands on disk.
+function installWritingTree(calls, { dir, version, files }) {
+  return (cmd, args) => {
+    calls.push(`${cmd} ${(args || []).join(' ')}`.trim());
+    if (cmd === 'git' && args[0] === 'status') return { status: 0, stdout: '' };
+    if (cmd === 'npm' && args[0] === 'install') {
+      const coreDir = join(dir, 'node_modules', '@bongos', 'core');
+      writeCoreTree(coreDir, files);
+      writeFileSync(join(coreDir, 'package.json'), JSON.stringify({ name: '@bongos/core', version }) + '\n');
+    }
+    return { status: 0 };
+  };
+}
+
+t('runUpgrade: a matching pin passes verification (upgrade proceeds)', async () => {
+  const dir = scratchConsumer({ pinned: '1.14.1', installed: '1.14.1' });
+  mkdirSync(join(dir, 'vendor'), { recursive: true });
+  writeFileSync(join(dir, 'vendor', 'bongos-core-1.15.0.tgz'), 'fake-tgz');
+  writeFileSync(join(dir, 'vendor', 'bongos-core-1.15.0.manifest.json'),
+    JSON.stringify(pinManifestFor(PIN_FILES, { tarballSha: pc.sha256hex(Buffer.from('fake-tgz')), tarballBytes: 8 })));
+  const logs = [];
+  const res = await u.runUpgrade(
+    { to: '1.15.0', instance: dir },
+    {
+      log: (m) => logs.push(m), err: () => {},
+      run: installWritingTree([], { dir, version: '1.15.0', files: PIN_FILES }),
+      materialize: () => ({ skills: 1 }), regenerateApiArtifacts: () => ({ ok: true, ran: [] }),
+    }
+  );
+  assert.equal(res.ok, true, res.error);
+  assert.ok(logs.some((m) => /integrity pin verified.*tarball\.sha256.*tree_sha256/.test(m)), logs.join('\n'));
+});
+
+t('runUpgrade: a pin MISMATCH after install fails and auto-rolls-back', async () => {
+  const dir = scratchConsumer({ pinned: '1.14.1', installed: '1.14.1' });
+  mkdirSync(join(dir, 'vendor'), { recursive: true });
+  writeFileSync(join(dir, 'vendor', 'bongos-core-1.15.0.tgz'), 'fake-tgz');
+  // The reference pin is for PIN_FILES, but install writes DIFFERENT content → tree mismatch.
+  writeFileSync(join(dir, 'vendor', 'bongos-core-1.15.0.manifest.json'), JSON.stringify(pinManifestFor(PIN_FILES)));
+  const corrupted = [{ path: 'a.js', content: 'console.log(666)\n' }, { path: 'sub/b.json', content: '{"x":1}\n' }];
+  const res = await u.runUpgrade(
+    { to: '1.15.0', instance: dir },
+    {
+      log: () => {}, err: () => {},
+      run: installWritingTree([], { dir, version: '1.15.0', files: corrupted }),
+      materialize: () => ({ skills: 1 }), regenerateApiArtifacts: () => ({ ok: true, ran: [] }),
+    }
+  );
+  assert.equal(res.ok, false);
+  assert.ok(/integrity pin MISMATCH/.test(res.error || ''), res.error);
+  assert.equal(res.rolledBack, true);
+  assert.equal(u.readPinnedCoreVersion(dir), '1.14.1', 'pin reverted to the previous version on rollback');
+});
+
+t('runUpgrade: --require-pin makes a MISSING reference manifest fatal', async () => {
+  const dir = scratchConsumer({ pinned: '1.14.1', installed: '1.14.1' });
+  mkdirSync(join(dir, 'vendor'), { recursive: true });
+  writeFileSync(join(dir, 'vendor', 'bongos-core-1.15.0.tgz'), 'fake-tgz'); // tgz present, but NO manifest
+  const res = await u.runUpgrade(
+    { to: '1.15.0', instance: dir, requirePin: true },
+    {
+      log: () => {}, err: () => {},
+      run: installWritingTree([], { dir, version: '1.15.0', files: PIN_FILES }),
+      materialize: () => ({ skills: 1 }), regenerateApiArtifacts: () => ({ ok: true, ran: [] }),
+    }
+  );
+  assert.equal(res.ok, false);
+  assert.ok(/no reference manifest/.test(res.error || ''), res.error);
+  assert.equal(res.rolledBack, true, 'unverifiable pin rolls back under --require-pin');
+});
+
+t('runUpgrade: --skip-pin-verify bypasses the check (no manifest, still succeeds)', async () => {
+  const dir = scratchConsumer({ pinned: '1.14.1', installed: '1.14.1' });
+  mkdirSync(join(dir, 'vendor'), { recursive: true });
+  writeFileSync(join(dir, 'vendor', 'bongos-core-1.15.0.tgz'), 'fake-tgz');
+  const res = await u.runUpgrade(
+    { to: '1.15.0', instance: dir, skipPinVerify: true },
+    {
+      log: () => {}, err: () => {},
+      run: installWritingTree([], { dir, version: '1.15.0', files: PIN_FILES }),
+      materialize: () => ({ skills: 1 }), regenerateApiArtifacts: () => ({ ok: true, ran: [] }),
+    }
+  );
+  assert.equal(res.ok, true, res.error);
+});
+
+// ---- 8. mandatory post-restart health check (task 1002222 / audit H9, finding F5) ----
+t('runUpgrade: a managed-restart bump WITHOUT --health-url is refused up front (H9 mandatory)', async () => {
+  const src = mkdtempSync(join(tmpdir(), 'src-'));
+  writeFileSync(join(src, 'bongos-core-1.15.0.tgz'), 'TGZ');
+  const dir = scratchConsumer({ pinned: '1.14.1', installed: '1.14.1' });
+  const calls = [];
+  const res = await u.runUpgrade(
+    { to: '1.15.0', from: join(src, 'bongos-core-1.15.0.tgz'), instance: dir, service: 'demo.service' }, // restarts, no --health-url, not opted out
+    { log: () => {}, err: () => {}, run: fakeRun(calls, { dirty: '', installTo: '1.15.0', dir }), materialize: () => ({ skills: 1 }), regenerateApiArtifacts: () => ({ ok: true, ran: [] }) }
+  );
+  assert.equal(res.ok, false);
+  assert.match(res.error, /health check is mandatory/);
+  assert.equal(u.readPinnedCoreVersion(dir), '1.14.1', 'refused in pre-flight → pin untouched');
+  assert.ok(!calls.some((c) => /npm install/.test(c)), 'refused before any install');
+});
+
+t('runUpgrade: --no-health-check lets a managed-restart bump proceed without a URL', async () => {
+  const src = mkdtempSync(join(tmpdir(), 'src-'));
+  writeFileSync(join(src, 'bongos-core-1.15.0.tgz'), 'TGZ');
+  const dir = scratchConsumer({ pinned: '1.14.1', installed: '1.14.1' });
+  const logs = [];
+  const res = await u.runUpgrade(
+    { to: '1.15.0', from: join(src, 'bongos-core-1.15.0.tgz'), instance: dir, service: 'demo.service', healthCheck: false },
+    { log: (m) => logs.push(m), err: () => {}, run: fakeRun([], { dirty: '', installTo: '1.15.0', dir }), materialize: () => ({ skills: 1 }), regenerateApiArtifacts: () => ({ ok: true, ran: [] }) }
+  );
+  assert.equal(res.ok, true, res.error);
+  assert.ok(logs.some((m) => /health check skipped \(--no-health-check\)/.test(m)), logs.join('\n'));
+});
+
+t('runUpgrade: a managed-restart bump WITH a healthy --health-url confirms + succeeds', async () => {
+  const src = mkdtempSync(join(tmpdir(), 'src-'));
+  writeFileSync(join(src, 'bongos-core-1.15.0.tgz'), 'TGZ');
+  const dir = scratchConsumer({ pinned: '1.14.1', installed: '1.14.1' });
+  const logs = [];
+  const res = await u.runUpgrade(
+    { to: '1.15.0', from: join(src, 'bongos-core-1.15.0.tgz'), instance: dir, service: 'demo.service', healthUrl: 'http://x/healthz' },
+    {
+      log: (m) => logs.push(m), err: () => {}, run: fakeRun([], { dirty: '', installTo: '1.15.0', dir }),
+      materialize: () => ({ skills: 1 }), regenerateApiArtifacts: () => ({ ok: true, ran: [] }),
+      fetch: async () => ({ ok: true, status: 200 }), sleep: async () => {}, now: () => 0,
+    }
+  );
+  assert.equal(res.ok, true, res.error);
+  assert.equal(res.healthOk, true);
+  assert.ok(logs.some((m) => /health http:\/\/x\/healthz → 200/.test(m)), logs.join('\n'));
+});
+
+t('runUpgrade: no managed restart + no --health-url proceeds but flags the bump as unconfirmed', async () => {
+  const src = mkdtempSync(join(tmpdir(), 'src-'));
+  writeFileSync(join(src, 'bongos-core-1.15.0.tgz'), 'TGZ');
+  const dir = scratchConsumer({ pinned: '1.14.1', installed: '1.14.1' });
+  const logs = [];
+  const res = await u.runUpgrade(
+    { to: '1.15.0', from: join(src, 'bongos-core-1.15.0.tgz'), instance: dir }, // no service/restart-cmd, no --health-url
+    { log: (m) => logs.push(m), err: () => {}, run: fakeRun([], { dirty: '', installTo: '1.15.0', dir }), materialize: () => ({ skills: 1 }), regenerateApiArtifacts: () => ({ ok: true, ran: [] }) }
+  );
+  assert.equal(res.ok, true, res.error);
+  assert.equal(res.healthOk, null);
+  assert.ok(logs.some((m) => /not confirmed serving/.test(m)), logs.join('\n'));
+});
+
 await Promise.all(pending);
 console.log(`\nupgrade: ${passed} passed, ${failed} failed`);
 process.exit(failed ? 1 : 0);

package/.gitignore

@@ -1,91 +0,0 @@
-# Dependencies
-node_modules/
-
-# Per-session git worktrees live under here; each is itself a git checkout
-# and must NEVER be committed (would create embedded-repo references).
-.claude/worktrees/
-
-# Environment / secrets
-.env
-.env.local
-.env.*.local
-
-# Google Chat OAuth credentials — must NEVER be committed.
-# Live on the droplet at /etc/amazonprimea/ instead.
-google-chat-credentials.json
-google-chat-refresh-token.json
-*.credentials.json
-
-# Build output
-dist/
-build/
-
-# Logs
-*.log
-npm-debug.log*
-
-# OS files
-.DS_Store
-
-# Pixel art generation artifacts (iterations are huge; keep references + finals only)
-modules/art-pipeline/iterations/*
-# ...but keep the anti-grid FFT baselines tracked (idea 27): they're tiny + the smoke suite
-# (tests/anti_grid.mjs) compares against them. `modules/art-pipeline/iterations/*` (not the bare
-# dir) lets this negation re-include the file — git can't re-include under a fully-excluded dir.
-!modules/art-pipeline/iterations/anti_grid_baselines.json
-modules/art-pipeline/generated/raw/
-modules/art-pipeline/generated/*/raw/
-# Derived from references/ via slice_references.py — easy to regenerate, no need in git
-modules/art-pipeline/template/ref_tiles/
-modules/art-pipeline/template/ref_clusters/
-# Autotile cross-verify snapshot — regenerated on every smoke_test run.
-modules/art-pipeline/pipeline/_autotile_tables.json
-__pycache__/
-*.pyc
-
-
-# World snapshots — generated on the droplet by scripts/snapshots/render-world.mjs.
-# Untracked so git reset --hard on deploy doesn't wipe them.
-public-status/snapshots/*.png
-public-status/snapshots/manifest.json
-
-# Repo Atlas data — generated on the droplet by scripts/gds/gen-atlas.js on every
-# deploy (ADR 0094). Untracked so git reset --hard doesn't wipe it; the deploy
-# step rewrites it fresh each time, so a committed copy would only go stale.
-# (The hall surface carved to modules/hall-ui/public/ in BV1.R85.)
-modules/hall-ui/public/atlas.json
-
-# Whole-file generated navigation docs — untracked since ADR 0110 (task 1926), the
-# same reasoning as the atlas above. docs/repo-map.md (symbol skeleton, ADR 0063) and
-# docs/session-log-index.md (session index, ADR 0062 §8) are 100%-generated and were
-# regenerated + committed on EVERY ship, so two parallel builder branches collided on
-# them constantly. Untracked + regenerated at deploy (scripts/deploy/deploy-prod.sh) and
-# at box-source-fetch, they can never appear in a branch diff → the conflict class is
-# gone at the source. Their generators are dual-duty: the nested CLAUDE.md symbol blocks
-# and the CLAUDE.md §13 snippet stay TRACKED and CI-gated (gen-*.js --check-block).
-docs/repo-map.md
-docs/session-log-index.md
-
-# Onboarding diagram RENDERS — untracked since ADR 0110 pt.3 / ADR 0122 (task 2027),
-# the deferred diagram half of ADR 0110. The .svg/.png are regenerated + committed on
-# every render-capable ship, so parallel builder branches collided on them (same class
-# as the nav docs above). Untracked + re-rendered at deploy (scripts/deploy/deploy-prod.sh
-# runs scripts/render-diagrams.sh against the tracked .mmd, using the host's installed
-# Chrome — never puppeteer's own droplet-stalling download) and best-effort at
-# box-source-fetch. The .mmd SOURCES + assertions.json stay TRACKED (git reset --hard
-# restores them; the render regenerates the images from them), so the nightly
-# diagram-drift cron (reads assertions.json) is unaffected.
-docs/onboarding/diagrams/*.svg
-docs/onboarding/diagrams/*.png
-
-# Re-hosted #bugs screenshots (task #936). Downloaded from Discord and served
-# by routes/bug-attachments.js. Outside git so a deploy never wipes them.
-var/bug-attachments/
-
-# Custom merge-driver scratch files. The regen merge driver
-# (scripts/gds/git-merge-regen.js, installed by scripts/gds/install-git-hooks.js)
-# writes `.merge_file_*` temp files while resolving conflicts. They are pure
-# scratch — never source — but a `git add -A` once staged one onto main
-# (.merge_file_IKo9KW, merge 3e9f1f81). Ignore the pattern so it can't recur.
-.merge_file_*
-scratchpad/

package/scripts/hall-preview/fixtures/access-requests.json

@@ -1 +0,0 @@
-{ "requests": [] }

package/scripts/hall-preview/fixtures/achievements.json

@@ -1,76 +0,0 @@
-{
-  "achievements": [
-    {
-      "id": "first-ship",
-      "name": "First Ship",
-      "description": "Ship your first task.",
-      "icon": "📦",
-      "credit_bonus": 1,
-      "sort_order": 10
-    },
-    {
-      "id": "first-claim",
-      "name": "First Claim",
-      "description": "Claim your first task.",
-      "icon": "🪙",
-      "credit_bonus": 1,
-      "sort_order": 20
-    },
-    {
-      "id": "first-parallel-claim",
-      "name": "First Parallel Claim",
-      "description": "Hold two simultaneous claims; ship both successfully.",
-      "icon": "⚓",
-      "credit_bonus": 2,
-      "sort_order": 30
-    },
-    {
-      "id": "streak-3",
-      "name": "Streak: 3 Nights",
-      "description": "Ship a task in 3 consecutive local-time nights (>=15min; cleanup/refactor now counts).",
-      "icon": "🔥",
-      "credit_bonus": 2,
-      "sort_order": 40
-    },
-    {
-      "id": "streak-7",
-      "name": "Streak: 7 Nights",
-      "description": "Ship a task in 7 consecutive local-time nights (>=15min; cleanup/refactor now counts).",
-      "icon": "🌋",
-      "credit_bonus": 5,
-      "sort_order": 50
-    },
-    {
-      "id": "art-pipeline-shipper",
-      "name": "Art Pipeline Shipper",
-      "description": "Ship a task whose touches[] include the art/ pipeline.",
-      "icon": "🎨",
-      "credit_bonus": 2,
-      "sort_order": 60
-    },
-    {
-      "id": "subtractor",
-      "name": "Subtractor",
-      "description": "Earn the net-negative ship bonus on 3 ships — across your work you have deleted more than you have added.",
-      "icon": "🪓",
-      "credit_bonus": 2,
-      "sort_order": 65
-    },
-    {
-      "id": "gds-shipper",
-      "name": "GDS Shipper",
-      "description": "Ship a task whose touches[] include src/gds/ or scripts/gds/.",
-      "icon": "⚙️",
-      "credit_bonus": 2,
-      "sort_order": 70
-    },
-    {
-      "id": "breaking-the-100c-bar",
-      "name": "Breaking the 100c Bar",
-      "description": "Cross 100 total credits.",
-      "icon": "💯",
-      "credit_bonus": 5,
-      "sort_order": 80
-    }
-  ]
-}