@bongos/core 1.18.0 → 1.18.18

package/modules/sessions/pollers/session-reward-reconcile.js

@@ -0,0 +1,78 @@
+'use strict';
+
+// modules/sessions/pollers/session-reward-reconcile.js — the loader poller entry
+// for the STATE-BASED session-token-reward safety net (ADR 0120).
+//
+// The deferred cost-plus session reward books via two LIVE triggers only: the
+// upload-time gate and the in-process `task.shipped` listener. Both miss a task
+// that reaches status='shipped' OUT OF BAND — a direct-SQL / hotpatch flip, or a
+// ship in another process — leaving that session's drachmae stranded forever even
+// though the code landed. This poller periodically calls
+// db.reconcileUnbookedSessionRewards(), which books the reward for any already-
+// shipped session that has no session.token_reward row yet. It is the sessions-
+// domain twin of the publish-reconciler poller (the same loader inversion), and
+// mirrors the task 1679 achievements reconcile (reconcile from durable STATE, not
+// the event). Idempotent — a re-sweep never double-pays.
+//
+// Deliberately independent of any GitHub push credential (unlike the confirmed→
+// shipped publish-reconciler): this sweep touches no git and its whole purpose is
+// to run on a credential-less box and recover already-shipped-but-unbooked work.
+
+const db = require('../db');
+
+// Sweep cadence. A safety net, not a hot path — the live triggers do the real-time
+// work; this only catches out-of-band ships, so a relaxed interval is fine.
+const INTERVAL_MS = Number(process.env.SESSION_REWARD_RECONCILE_MS) || 10 * 60_000;
+const FIRST_SWEEP_DELAY_MS = Number(process.env.SESSION_REWARD_RECONCILE_FIRST_MS) || 90_000;
+
+let intervalTimer = null;
+let firstTimer = null;
+
+async function runSweep() {
+  const res = await db.reconcileUnbookedSessionRewards({ limit: 200 });
+  if (res && res.awarded > 0) {
+    console.log(
+      `[session-reward-reconcile] booked ${res.awarded} stranded session reward(s) (scanned ${res.scanned})`
+    );
+  }
+  return res;
+}
+
+// Start the periodic sweep. Idempotent (a second call is a no-op). Kill-switched by
+// SESSION_REWARD_RECONCILE_DISABLED=1. Timers are unref'd so they never hold the
+// process open on a systemd restart (the publish-reconciler / discord-bot precedent).
+function start() {
+  if (process.env.SESSION_REWARD_RECONCILE_DISABLED === '1') {
+    console.log('[session-reward-reconcile] disabled (SESSION_REWARD_RECONCILE_DISABLED=1)');
+    return;
+  }
+  if (intervalTimer) return; // already started
+
+  const tick = () => {
+    runSweep().catch((e) =>
+      console.error(`[session-reward-reconcile] sweep crashed: ${e && e.message ? e.message : e}`)
+    );
+  };
+
+  firstTimer = setTimeout(tick, FIRST_SWEEP_DELAY_MS);
+  if (firstTimer.unref) firstTimer.unref();
+  intervalTimer = setInterval(tick, INTERVAL_MS);
+  if (intervalTimer.unref) intervalTimer.unref();
+
+  console.log(
+    `[session-reward-reconcile] started — recovering out-of-band-ship rewards every ${Math.round(INTERVAL_MS / 1000)}s`
+  );
+}
+
+function stop() {
+  if (firstTimer) {
+    clearTimeout(firstTimer);
+    firstTimer = null;
+  }
+  if (intervalTimer) {
+    clearInterval(intervalTimer);
+    intervalTimer = null;
+  }
+}
+
+module.exports = { start, stop, runSweep, INTERVAL_MS };

package/modules/sessions/routes/sessions.js

@@ -133,7 +133,40 @@ function recordSessionRead(req, { route, targetBuilderId, target }) {
   });
 }
 
+// The module's kernel seam wiring, registered when this factory runs (the loader
+// runs it at boot, already gated to enabled instances — the discord precedent).
+// This is the LAND-side half of ADR 0120 "pay on land": core emits `task.shipped`
+// on EVERY land path (publish-reconciler + routes/tasks) with the shipped task
+// row; we react by booking the cost-plus SESSION token reward for any session
+// that shipped that task and DEFERRED its reward at upload time (the ci/async
+// order, where the digest upload precedes the land). The upload-side gate in
+// db.upsertSessionRecordWithReward covers the sync/laptop order; both call the
+// SAME idempotent award, so re-firing is a safe per-session_id no-op.
+//
+// sessions registers no PORT (provides: []) — this is an EVENT listener, not a
+// port, so module.json is unchanged. off→on guarded so a test re-instantiating
+// the router never stacks duplicate listeners (the discord listener precedent).
+let _shipRewardListenerOff = null;
+function registerSeams() {
+  if (_shipRewardListenerOff) _shipRewardListenerOff();
+  _shipRewardListenerOff = api.on('task.shipped', (task) => {
+    const id = task && task.id;
+    if (id == null) return;
+    // Best-effort: awardDeferredSessionRewardForTask is async, so a rejection
+    // (e.g. a transient DB error) surfaces as a rejected promise — .catch keeps
+    // it from escaping the listener. This matters because the dominant ci/async
+    // land path emits SYNCHRONOUSLY (publish-reconciler's emit()), which is
+    // fire-and-forget and would otherwise turn a throw here into an
+    // unhandledRejection. A missed reward is re-attempted idempotently on the
+    // next land/upload, so a best-effort miss never double-pays or loses money.
+    db.awardDeferredSessionRewardForTask(id).catch((e) =>
+      console.error('[sessions] deferred session-reward on task.shipped (non-blocking):',
+        e && e.message ? e.message : e));
+  });
+}
+
 module.exports = function buildSessionsRouter() {
+  registerSeams();
   const router = express.Router();
   const uploadJson = express.json({ limit: UPLOAD_BODY_LIMIT });
 

package/modules/status-ui/public/explore.html

@@ -0,0 +1,54 @@
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>Explore — featured projects</title>
+  <style>
+    /* Self-contained so the showcase renders correctly whether or not the host
+       injects theme tokens. Warm Cloud Bongos defaults; overridable by the pack. */
+    :root {
+      --bg: #fff7ed; --card: #ffffff; --ink: #2a1f17; --ink-soft: #6b5d52;
+      --rule: #fed7aa; --accent: #ea580c;
+    }
+    * { box-sizing: border-box; }
+    body {
+      margin: 0; padding: 2.5rem 1.25rem 4rem;
+      background: var(--bg); color: var(--ink);
+      font-family: "Quicksand", system-ui, -apple-system, "Segoe UI", sans-serif;
+      line-height: 1.5;
+    }
+    .wrap { max-width: 960px; margin: 0 auto; }
+    header { text-align: center; margin-bottom: 2.5rem; }
+    h1 { font-size: 2rem; margin: 0 0 .35rem; letter-spacing: .01em; }
+    .sub { color: var(--ink-soft); margin: 0; }
+    .grid { display: grid; gap: 1rem; grid-template-columns: repeat(auto-fill, minmax(260px, 1fr)); }
+    .card {
+      background: var(--card); border: 1px solid var(--rule); border-radius: 14px;
+      padding: 1.1rem 1.2rem; text-decoration: none; color: inherit;
+      display: flex; flex-direction: column; gap: .4rem; transition: transform .12s ease, box-shadow .12s ease;
+    }
+    .card:hover { transform: translateY(-2px); box-shadow: 0 6px 20px rgba(234,88,12,.12); }
+    .card h2 { font-size: 1.15rem; margin: 0; }
+    .card p { margin: 0; color: var(--ink-soft); font-size: .95rem; }
+    .card .origin { color: var(--accent); font-size: .82rem; word-break: break-all; margin-top: auto; }
+    .card .art { width: 100%; height: 120px; object-fit: cover; border-radius: 10px; margin-bottom: .3rem; }
+    .empty, .err { text-align: center; color: var(--ink-soft); padding: 3rem 1rem; }
+    @media (prefers-color-scheme: dark) {
+      :root { --bg: #1a1410; --card: #241c16; --ink: #f5ece3; --ink-soft: #b9a998; --rule: #4a3728; }
+    }
+  </style>
+</head>
+<body>
+  <div class="wrap">
+    <header>
+      <h1>Explore</h1>
+      <p class="sub">Featured projects built on the platform.</p>
+    </header>
+    <div id="grid" class="grid" hidden></div>
+    <div id="empty" class="empty" hidden>No featured projects yet — check back soon.</div>
+    <div id="err" class="err" hidden>Couldn't load projects right now.</div>
+  </div>
+  <script src="/explore.js"></script>
+</body>
+</html>

package/modules/status-ui/public/explore.js

@@ -0,0 +1,67 @@
+// explore.js — the public Explore showcase (ADR 0141 §5, task #1002110). Fetches the
+// hub's featured projects and renders cards. On a NON-hub instance (platform-identity
+// off) the endpoint 404s / returns nothing, so the page shows a graceful empty state.
+//
+// Project fields come from the network, so every value is set via textContent /
+// attribute assignment — never innerHTML — so a project name/tagline can't inject markup.
+(function () {
+  'use strict';
+  var grid = document.getElementById('grid');
+  var empty = document.getElementById('empty');
+  var err = document.getElementById('err');
+
+  function show(el) { if (el) el.hidden = false; }
+
+  // Only http(s) origins are linkified — never javascript:/data: etc.
+  function safeHref(origin) {
+    try {
+      var u = new URL(String(origin));
+      return (u.protocol === 'https:' || u.protocol === 'http:') ? u.toString() : null;
+    } catch (_) { return null; }
+  }
+
+  function card(p) {
+    var href = safeHref(p.origin);
+    var el = document.createElement(href ? 'a' : 'div');
+    el.className = 'card';
+    if (href) { el.href = href; el.target = '_blank'; el.rel = 'noopener noreferrer'; }
+
+    if (p.art_url && safeHref(p.art_url)) {
+      var img = document.createElement('img');
+      img.className = 'art';
+      img.src = p.art_url;
+      img.alt = '';
+      img.loading = 'lazy';
+      el.appendChild(img);
+    }
+    var h = document.createElement('h2');
+    h.textContent = p.name || p.origin || 'Untitled project';
+    el.appendChild(h);
+    if (p.tagline) {
+      var tag = document.createElement('p');
+      tag.textContent = p.tagline;
+      el.appendChild(tag);
+    }
+    if (p.origin) {
+      var o = document.createElement('span');
+      o.className = 'origin';
+      o.textContent = String(p.origin).replace(/^https?:\/\//, '');
+      el.appendChild(o);
+    }
+    return el;
+  }
+
+  fetch('/api/gds/projects/featured', { headers: { Accept: 'application/json' } })
+    .then(function (r) { if (!r.ok) throw new Error('http ' + r.status); return r.json(); })
+    .then(function (data) {
+      var projects = (data && Array.isArray(data.projects)) ? data.projects : [];
+      if (projects.length === 0) { show(empty); return; }
+      projects.forEach(function (p) { grid.appendChild(card(p)); });
+      show(grid);
+    })
+    .catch(function () {
+      // A missing endpoint (non-hub instance) is not an error to the visitor — show
+      // the empty state rather than a scary failure.
+      show(empty);
+    });
+}());

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.18.0",
+  "version": "1.18.18",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.18.0",
+      "version": "1.18.18",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.18.0",
+  "version": "1.18.18",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",