npm - @bongos/core - Versions diffs - 1.17.3 → 1.18.3 - Mend

@bongos/core 1.17.3 → 1.18.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (163) hide show

package/.bongos-core.json +212 -332
package/.devcontainer/healthcheck.sh +0 -0
package/.devcontainer/init-firewall.sh +0 -0
package/.devcontainer/post-create.sh +0 -0
package/GOVERNANCE.md +1 -1
package/README.md +26 -22
package/bin/bongos.js +0 -0
package/config/branding.neutral.json +5 -1
package/docker-entrypoint.sh +0 -0
package/docs/adr/0142-project-context-is-prose-only.md +41 -0
package/docs/adr/0143-onboarding-repo-picker-oauth-scope.md +35 -0
package/docs/adr/README.md +6 -0
package/docs/api/openapi.json +1630 -632
package/docs/api-reference.md +50 -15
package/docs/file-map.md +0 -18
package/docs/onboarding/diagrams/05-versioning.mmd +4 -6
package/docs/onboarding/diagrams/assertions.json +5 -9
package/docs/recipes/packaging-the-core.md +13 -0
package/docs/recipes/upgrading-the-core.md +5 -2
package/migrations/039_newcomer_friendly_column.sql +5 -0
package/migrations/102_remove_box_first_provision_approval.sql +4 -0
package/migrations/core_192_github_oauth_tokens.sql +33 -0
package/modules/hall-ui/public/builders.js +37 -0
package/modules/hall-ui/public/goals-page.js +98 -176
package/modules/hall-ui/public/goals.css +183 -0
package/modules/hall-ui/public/goals.html +35 -261
package/modules/hall-ui/public/goals.js +7 -2
package/modules/hall-ui/public/hall-widgets.js +12 -4
package/modules/hall-ui/public/my-projects.html +78 -0
package/modules/hall-ui/public/my-projects.js +142 -0
package/modules/hall-ui/public/scouting.html +45 -0
package/modules/hall-ui/public/scouting.js +73 -0
package/modules/hall-ui/public/settings.css +355 -0
package/modules/hall-ui/public/settings.html +86 -414
package/modules/hall-ui/public/settings.js +96 -35
package/modules/hall-ui/public/style.css +31 -0
package/modules/hall-ui/public/watch.css +184 -0
package/modules/hall-ui/public/watch.html +111 -285
package/modules/hall-ui/public/watch.js +59 -21
package/modules/status-ui/public/explore.html +54 -0
package/modules/status-ui/public/explore.js +67 -0
package/package-lock.json +2 -2
package/package.json +1 -1
package/public-landing/create.html +292 -19
package/public-landing/index.html +11 -76
package/scripts/cron/style_guide_audit.sh +0 -0
package/scripts/gds/api.js +0 -0
package/scripts/gds/architect-audit.js +0 -0
package/scripts/gds/audit-authorship.sh +0 -0
package/scripts/gds/audit-replay.sh +0 -0
package/scripts/gds/box.js +0 -0
package/scripts/gds/capture.js +0 -0
package/scripts/gds/cli-lib.js +11 -5
package/scripts/gds/conductor-dispatch.js +0 -0
package/scripts/gds/coreB-carve-proof.sh +0 -0
package/scripts/gds/db-backup-nightly.sh +0 -0
package/scripts/gds/db-backup-offsite.sh +0 -0
package/scripts/gds/doctor.js +0 -0
package/scripts/gds/grade-smoke.js +0 -0
package/scripts/gds/hooks/pre-push.js +0 -0
package/scripts/gds/install-git-hooks.js +0 -0
package/scripts/gds/lint-migrations.js +102 -0
package/scripts/gds/login.js +42 -10
package/scripts/gds/main-audit.js +0 -0
package/scripts/gds/mirror-redact.js +5 -0
package/scripts/gds/oauth-secret.js +0 -0
package/scripts/gds/onboarding-analyze.js +0 -0
package/scripts/gds/onboarding-ship.js +0 -0
package/scripts/gds/package-core.js +263 -4
package/scripts/gds/paste-token.js +0 -0
package/scripts/gds/portability-smoke-art.sh +0 -0
package/scripts/gds/portability-smoke-memory.sh +0 -0
package/scripts/gds/provision.js +270 -11
package/scripts/gds/publish-manifest.js +15 -0
package/scripts/gds/push-main.js +0 -0
package/scripts/gds/render-ideas.js +0 -0
package/scripts/gds/run-unit-tests.js +38 -14
package/scripts/gds/security-baseline-check.sh +0 -0
package/scripts/gds/session.js +0 -0
package/scripts/gds/setup.js +41 -0
package/scripts/gds/ship.js +126 -32
package/scripts/gds/smoke-batch-claim.sh +0 -0
package/scripts/gds/smoke-batch-release.sh +0 -0
package/scripts/gds/smoke-box.sh +0 -0
package/scripts/gds/smoke-claim-consistency.sh +0 -0
package/scripts/gds/smoke-dependencies.sh +0 -0
package/scripts/gds/smoke-write.sh +0 -0
package/scripts/gds/upgrade.js +147 -5
package/scripts/hall-preview/server.js +18 -1
package/scripts/migrate.sh +10 -0
package/scripts/migrate_cost_ledger.sh +0 -0
package/scripts/render-diagrams.sh +0 -0
package/scripts/security/dep-audit.js +0 -0
package/scripts/setup-builder.js +0 -0
package/scripts/setup-builder.sh +0 -0
package/scripts/snapshots/maybe-render-on-deploy.sh +0 -0
package/src/bongos/auth.js +362 -5
package/src/bongos/db.js +66 -0
package/src/bongos/github-repos.js +93 -0
package/src/bongos/routes/auth.js +93 -11
package/src/bongos/routes/github.js +90 -0
package/src/bongos/routes/instance.js +15 -3
package/src/bongos/routes.js +2 -0
package/src/branding.js +17 -2
package/src/instance-config.js +16 -0
package/src/module-api.js +48 -1
package/tests/branding.mjs +29 -23
package/tests/github_repos_helpers.mjs +91 -0
package/tests/github_token_store.mjs +121 -0
package/tests/idp_device_exchange.mjs +105 -0
package/tests/idp_federation.mjs +100 -0
package/tests/migrations_forward_safe.mjs +86 -0
package/tests/module_api.mjs +1 -1
package/tests/package_core.mjs +246 -1
package/tests/provision.mjs +226 -0
package/tests/pruned_lockfile_integrity.mjs +79 -0
package/tests/ship_ci_deploy.mjs +60 -0
package/tests/upgrade.mjs +254 -5
package/.gitignore +0 -91
package/scripts/hall-preview/fixtures/access-requests.json +0 -1
package/scripts/hall-preview/fixtures/achievements.json +0 -76
package/scripts/hall-preview/fixtures/analytics__builder.json +0 -251
package/scripts/hall-preview/fixtures/audit-log.json +0 -1
package/scripts/hall-preview/fixtures/boxes__cost-ledger.json +0 -1
package/scripts/hall-preview/fixtures/builders__active-claims.json +0 -1
package/scripts/hall-preview/fixtures/builders__directory.json +0 -81
package/scripts/hall-preview/fixtures/builders__roster.json +0 -1
package/scripts/hall-preview/fixtures/goals.json +0 -502
package/scripts/hall-preview/fixtures/goals__25.json +0 -96
package/scripts/hall-preview/fixtures/goals__26.json +0 -67
package/scripts/hall-preview/fixtures/goals__3.json +0 -103
package/scripts/hall-preview/fixtures/goals__35.json +0 -49
package/scripts/hall-preview/fixtures/goals__conflicts.json +0 -154
package/scripts/hall-preview/fixtures/goals__detail.json +0 -96
package/scripts/hall-preview/fixtures/goals__inbox.json +0 -5
package/scripts/hall-preview/fixtures/goals__requests.json +0 -3
package/scripts/hall-preview/fixtures/grades__by-builder.json +0 -1
package/scripts/hall-preview/fixtures/inbox.json +0 -330
package/scripts/hall-preview/fixtures/instance.json +0 -124
package/scripts/hall-preview/fixtures/leaderboard.json +0 -184
package/scripts/hall-preview/fixtures/me.json +0 -476
package/scripts/hall-preview/fixtures/me__recent-ships.json +0 -304
package/scripts/hall-preview/fixtures/override-requests.json +0 -1
package/scripts/hall-preview/fixtures/provisioning__fleet.json +0 -1
package/scripts/hall-preview/fixtures/provisioning__fleet__cost-ledger.json +0 -1
package/scripts/hall-preview/fixtures/provisioning__instances.json +0 -1
package/scripts/hall-preview/fixtures/public__analytics__ecosystem.json +0 -516
package/scripts/hall-preview/fixtures/public__bounty-table.json +0 -37
package/scripts/hall-preview/fixtures/public__cost-summary.json +0 -742
package/scripts/hall-preview/fixtures/public__estimation-drift.json +0 -41
package/scripts/hall-preview/fixtures/public__grades.json +0 -50
package/scripts/hall-preview/fixtures/public__progress.json +0 -124
package/scripts/hall-preview/fixtures/public__recent-shipped.json +0 -426
package/scripts/hall-preview/fixtures/public__repo-health.json +0 -160
package/scripts/hall-preview/fixtures/public__repo-info.json +0 -5
package/scripts/hall-preview/fixtures/security__docs.json +0 -1
package/scripts/hall-preview/fixtures/security__reports.json +0 -1
package/scripts/hall-preview/fixtures/sessions__search.json +0 -1
package/scripts/hall-preview/fixtures/tasks.json +0 -2420
package/scripts/hall-preview/fixtures/tasks__claimable.json +0 -2555
package/scripts/hall-preview/fixtures/tasks__detail.json +0 -111
package/scripts/hall-preview/fixtures/tasks__peer-votes__feed.json +0 -330
package/scripts/hall-preview/fixtures/versions.json +0 -89

package/scripts/hall-preview/fixtures/public__analytics__ecosystem.json DELETED Viewed

@@ -1,516 +0,0 @@
-{
-  "window_days": 90,
-  "ship_rate": [
-    {
-      "day": "2026-05-09",
-      "n": 10
-    },
-    {
-      "day": "2026-05-10",
-      "n": 43
-    },
-    {
-      "day": "2026-05-11",
-      "n": 40
-    },
-    {
-      "day": "2026-05-12",
-      "n": 37
-    },
-    {
-      "day": "2026-05-13",
-      "n": 4
-    },
-    {
-      "day": "2026-05-14",
-      "n": 1
-    },
-    {
-      "day": "2026-05-18",
-      "n": 1
-    },
-    {
-      "day": "2026-05-26",
-      "n": 17
-    },
-    {
-      "day": "2026-05-27",
-      "n": 21
-    },
-    {
-      "day": "2026-05-28",
-      "n": 34
-    },
-    {
-      "day": "2026-05-29",
-      "n": 38
-    },
-    {
-      "day": "2026-05-30",
-      "n": 45
-    },
-    {
-      "day": "2026-06-01",
-      "n": 11
-    },
-    {
-      "day": "2026-06-02",
-      "n": 17
-    },
-    {
-      "day": "2026-06-03",
-      "n": 18
-    },
-    {
-      "day": "2026-06-04",
-      "n": 26
-    },
-    {
-      "day": "2026-06-05",
-      "n": 26
-    },
-    {
-      "day": "2026-06-06",
-      "n": 73
-    },
-    {
-      "day": "2026-06-07",
-      "n": 40
-    },
-    {
-      "day": "2026-06-08",
-      "n": 2
-    },
-    {
-      "day": "2026-06-09",
-      "n": 10
-    },
-    {
-      "day": "2026-06-10",
-      "n": 9
-    },
-    {
-      "day": "2026-06-11",
-      "n": 12
-    },
-    {
-      "day": "2026-06-12",
-      "n": 16
-    },
-    {
-      "day": "2026-06-13",
-      "n": 59
-    },
-    {
-      "day": "2026-06-14",
-      "n": 45
-    },
-    {
-      "day": "2026-06-15",
-      "n": 23
-    },
-    {
-      "day": "2026-06-16",
-      "n": 37
-    },
-    {
-      "day": "2026-06-17",
-      "n": 19
-    },
-    {
-      "day": "2026-06-18",
-      "n": 29
-    },
-    {
-      "day": "2026-06-19",
-      "n": 44
-    },
-    {
-      "day": "2026-06-20",
-      "n": 59
-    },
-    {
-      "day": "2026-06-21",
-      "n": 53
-    },
-    {
-      "day": "2026-06-22",
-      "n": 13
-    },
-    {
-      "day": "2026-06-23",
-      "n": 24
-    },
-    {
-      "day": "2026-06-24",
-      "n": 17
-    },
-    {
-      "day": "2026-06-25",
-      "n": 16
-    },
-    {
-      "day": "2026-06-26",
-      "n": 37
-    },
-    {
-      "day": "2026-06-27",
-      "n": 35
-    },
-    {
-      "day": "2026-06-28",
-      "n": 19
-    },
-    {
-      "day": "2026-06-29",
-      "n": 13
-    },
-    {
-      "day": "2026-06-30",
-      "n": 18
-    },
-    {
-      "day": "2026-07-01",
-      "n": 7
-    },
-    {
-      "day": "2026-07-02",
-      "n": 43
-    },
-    {
-      "day": "2026-07-03",
-      "n": 120
-    },
-    {
-      "day": "2026-07-04",
-      "n": 57
-    },
-    {
-      "day": "2026-07-05",
-      "n": 42
-    },
-    {
-      "day": "2026-07-06",
-      "n": 2
-    },
-    {
-      "day": "2026-07-07",
-      "n": 13
-    },
-    {
-      "day": "2026-07-08",
-      "n": 21
-    },
-    {
-      "day": "2026-07-09",
-      "n": 15
-    },
-    {
-      "day": "2026-07-10",
-      "n": 22
-    }
-  ],
-  "duration_trend": [
-    {
-      "day": "2026-05-09",
-      "avg_actual": 8,
-      "avg_est": 125
-    },
-    {
-      "day": "2026-05-10",
-      "avg_actual": 25,
-      "avg_est": 119
-    },
-    {
-      "day": "2026-05-11",
-      "avg_actual": 7,
-      "avg_est": 133
-    },
-    {
-      "day": "2026-05-12",
-      "avg_actual": 35,
-      "avg_est": 62
-    },
-    {
-      "day": "2026-05-13",
-      "avg_actual": 436,
-      "avg_est": 243
-    },
-    {
-      "day": "2026-05-14",
-      "avg_actual": 1125,
-      "avg_est": 240
-    },
-    {
-      "day": "2026-05-18",
-      "avg_actual": 2,
-      "avg_est": 10
-    },
-    {
-      "day": "2026-05-26",
-      "avg_actual": 57,
-      "avg_est": 140
-    },
-    {
-      "day": "2026-05-27",
-      "avg_actual": 13,
-      "avg_est": 160
-    },
-    {
-      "day": "2026-05-28",
-      "avg_actual": 7,
-      "avg_est": 161
-    },
-    {
-      "day": "2026-05-29",
-      "avg_actual": 8,
-      "avg_est": 121
-    },
-    {
-      "day": "2026-05-30",
-      "avg_actual": 10,
-      "avg_est": 127
-    },
-    {
-      "day": "2026-06-01",
-      "avg_actual": 4,
-      "avg_est": 39
-    },
-    {
-      "day": "2026-06-02",
-      "avg_actual": 6,
-      "avg_est": 114
-    },
-    {
-      "day": "2026-06-03",
-      "avg_actual": 56,
-      "avg_est": 66
-    },
-    {
-      "day": "2026-06-04",
-      "avg_actual": 34,
-      "avg_est": 131
-    },
-    {
-      "day": "2026-06-05",
-      "avg_actual": 37,
-      "avg_est": 103
-    },
-    {
-      "day": "2026-06-06",
-      "avg_actual": 11,
-      "avg_est": 79
-    },
-    {
-      "day": "2026-06-07",
-      "avg_actual": 10,
-      "avg_est": 45
-    },
-    {
-      "day": "2026-06-09",
-      "avg_actual": 1,
-      "avg_est": 10
-    },
-    {
-      "day": "2026-06-10",
-      "avg_actual": 26,
-      "avg_est": 156
-    },
-    {
-      "day": "2026-06-11",
-      "avg_actual": 13,
-      "avg_est": 94
-    },
-    {
-      "day": "2026-06-12",
-      "avg_actual": 455,
-      "avg_est": 83
-    },
-    {
-      "day": "2026-06-13",
-      "avg_actual": 32,
-      "avg_est": 120
-    },
-    {
-      "day": "2026-06-14",
-      "avg_actual": 167,
-      "avg_est": 95
-    },
-    {
-      "day": "2026-06-15",
-      "avg_actual": 57,
-      "avg_est": 109
-    },
-    {
-      "day": "2026-06-16",
-      "avg_actual": 9,
-      "avg_est": 175
-    },
-    {
-      "day": "2026-06-17",
-      "avg_actual": 117,
-      "avg_est": 95
-    },
-    {
-      "day": "2026-06-18",
-      "avg_actual": 64,
-      "avg_est": 123
-    },
-    {
-      "day": "2026-06-19",
-      "avg_actual": 63,
-      "avg_est": 120
-    },
-    {
-      "day": "2026-06-20",
-      "avg_actual": 30,
-      "avg_est": 75
-    },
-    {
-      "day": "2026-06-21",
-      "avg_actual": 209,
-      "avg_est": 127
-    },
-    {
-      "day": "2026-06-22",
-      "avg_actual": 584,
-      "avg_est": 58
-    },
-    {
-      "day": "2026-06-23",
-      "avg_actual": 281,
-      "avg_est": 100
-    },
-    {
-      "day": "2026-06-24",
-      "avg_actual": 147,
-      "avg_est": 184
-    },
-    {
-      "day": "2026-06-25",
-      "avg_actual": 245,
-      "avg_est": 253
-    },
-    {
-      "day": "2026-06-26",
-      "avg_actual": 107,
-      "avg_est": 152
-    },
-    {
-      "day": "2026-06-27",
-      "avg_actual": 53,
-      "avg_est": 109
-    },
-    {
-      "day": "2026-06-28",
-      "avg_actual": 74,
-      "avg_est": 147
-    },
-    {
-      "day": "2026-06-29",
-      "avg_actual": 222,
-      "avg_est": 191
-    },
-    {
-      "day": "2026-06-30",
-      "avg_actual": 1192,
-      "avg_est": 270
-    },
-    {
-      "day": "2026-07-01",
-      "avg_actual": 322,
-      "avg_est": 255
-    },
-    {
-      "day": "2026-07-02",
-      "avg_actual": 56,
-      "avg_est": 168
-    },
-    {
-      "day": "2026-07-03",
-      "avg_actual": 23,
-      "avg_est": 116
-    },
-    {
-      "day": "2026-07-04",
-      "avg_actual": 11,
-      "avg_est": 148
-    },
-    {
-      "day": "2026-07-05",
-      "avg_actual": 51,
-      "avg_est": 122
-    },
-    {
-      "day": "2026-07-07",
-      "avg_actual": 8,
-      "avg_est": 37
-    },
-    {
-      "day": "2026-07-08",
-      "avg_actual": 116,
-      "avg_est": 139
-    },
-    {
-      "day": "2026-07-09",
-      "avg_actual": 5,
-      "avg_est": 75
-    },
-    {
-      "day": "2026-07-10",
-      "avg_actual": 7,
-      "avg_est": 86
-    }
-  ],
-  "top_kinds": [
-    {
-      "kind": "feature",
-      "n": 574
-    },
-    {
-      "kind": "bug",
-      "n": 245
-    },
-    {
-      "kind": "infra",
-      "n": 211
-    },
-    {
-      "kind": "cleanup",
-      "n": 118
-    },
-    {
-      "kind": "unclassified",
-      "n": 91
-    },
-    {
-      "kind": "decision",
-      "n": 84
-    },
-    {
-      "kind": "refactor",
-      "n": 75
-    },
-    {
-      "kind": "spike",
-      "n": 46
-    },
-    {
-      "kind": "learning-capture",
-      "n": 6
-    },
-    {
-      "kind": "verify",
-      "n": 2
-    },
-    {
-      "kind": "blocker-resolution",
-      "n": 1
-    }
-  ],
-  "headline": {
-    "total_shipped": 1453,
-    "active_builders": 6,
-    "avg_duration_min": 58
-  }
-}

package/scripts/hall-preview/fixtures/public__bounty-table.json DELETED Viewed

@@ -1,37 +0,0 @@
-{
-  "table": [
-    {
-      "severity": "low",
-      "drachmae": 10,
-      "default_drachmae": 10,
-      "overridden": false,
-      "env_var": "GDS_BOUNTY_LOW",
-      "blurb": "Cosmetic or low-impact — info leak with no exploit path, minor misconfig."
-    },
-    {
-      "severity": "medium",
-      "drachmae": 50,
-      "default_drachmae": 50,
-      "overridden": false,
-      "env_var": "GDS_BOUNTY_MEDIUM",
-      "blurb": "A real flaw needing specific conditions — limited-scope auth or data issue."
-    },
-    {
-      "severity": "high",
-      "drachmae": 200,
-      "default_drachmae": 200,
-      "overridden": false,
-      "env_var": "GDS_BOUNTY_HIGH",
-      "blurb": "Serious — privilege escalation, broad data exposure, or auth bypass."
-    },
-    {
-      "severity": "critical",
-      "drachmae": 1000,
-      "default_drachmae": 1000,
-      "overridden": false,
-      "env_var": "GDS_BOUNTY_CRITICAL",
-      "blurb": "Catastrophic — remote code execution, full account/rank takeover, treasury drain."
-    }
-  ],
-  "currency": "drachmae"
-}