@bongos/core 1.19.180 → 1.19.182

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.180",
-  "core_contract": "1.19.180",
-  "source_commit": "0e35108a1b162d8346e1262bf6453f991bd41de9",
+  "core_version": "1.19.182",
+  "core_contract": "1.19.182",
+  "source_commit": "e5417ea88504c51b0cc9af06d143ec9b3d37c0ed",
   "source_ref": "HEAD",
-  "built_at": "2026-08-16T21:08:29.177Z",
+  "built_at": "2026-08-16T21:13:59.751Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 308,
     "agent_docs_stubbed": 21,
-    "functional_verbatim": 1276,
+    "functional_verbatim": 1279,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 1605,
-  "tree_sha256": "31a11588f3d36ea469e0fc02f4e295ffe55eac4b68f3a9979a49d44acddbaddb",
+  "file_count": 1608,
+  "tree_sha256": "101a4745dd8d3b2a32eb0658b962706986782e31b92eb968862d929b7e5e05b7",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -347,12 +347,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "6b865314ad2d5e2e3e0e017a6bed7ae435ecfbca3859bdf763b59411a1d3d9f8"
+      "sha256": "4801db32c6f4ba6220bce8e664be063f8d8483bc22a57df08205b0fc36788b8b"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "c137a0e79a5e9065b071f87150639bff98cbda8f0d50a27027b42fa48ae200f6"
+      "sha256": "0d3fc054ed48e1e9398366c75e526e52c3b9ecf96b70888d98607e8aa0e68949"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -362,17 +362,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "2fef3ad1be5b853de1d6df155bb5717b581cf8b6afa3851add9ea81032c159a6"
+      "sha256": "53dc2ac9322bdc1827fae124789e0cd8b09751c5359e1ae0266b65951a90126a"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "52dbea93e7039796ebf579e816bd3ed54727077e5383d27a348d36572a85b90d"
+      "sha256": "a775432136dc7ba0093a989991adf3f639793a287919dccc002eeaf026dacf6b"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "b2d21163a9fb149a98051dfde08e1cee81969194e74d3e272bb7779da9461c1b"
+      "sha256": "3588010536522ef306ab7e822bdb68dcc40ef42754d5b298384dac443f9ae0c6"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -1362,12 +1362,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "74ee845dae6f2757b564c1a760042391f3eb3af21dd3abe4a8590b3c3f88c4b3"
+      "sha256": "b311208b348d4e94ca20536ae095098007f855ef1861169a15e534dbb2cf6ab4"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "1c8b42344fa248bd6e38d370cc117c5017fdd58071ba9cb2ca6e55a1678c5e56"
+      "sha256": "c414eadf025db00d4e87b2cadd5a7c6b18a55780ac2af6bfe0cafc9897ae4512"
     },
     {
       "path": "docs/architecture.md",
@@ -2677,7 +2677,7 @@
     {
       "path": "modules/dev-box/app/src/vendor/bongos-client.cjs",
       "mode": "0000644",
-      "sha256": "2fef3ad1be5b853de1d6df155bb5717b581cf8b6afa3851add9ea81032c159a6"
+      "sha256": "53dc2ac9322bdc1827fae124789e0cd8b09751c5359e1ae0266b65951a90126a"
     },
     {
       "path": "modules/dev-box/app/test/unit.mjs",
@@ -2842,7 +2842,7 @@
     {
       "path": "modules/economy/credits.js",
       "mode": "0000644",
-      "sha256": "b6f8c6fcabe6cb9f5eb83e936d129509004c86969d5e0d16a9653ff06b88f7ac"
+      "sha256": "71248889315a29d2a1714ad55ffc685987d862b74e877a29ac2de010bea140f3"
     },
     {
       "path": "modules/economy/migrations/economy_001_fix_gds_shipper_description.sql",
@@ -2857,7 +2857,7 @@
     {
       "path": "modules/economy/reward.js",
       "mode": "0000644",
-      "sha256": "2a354daf06e344a613c8ad7df12ed6e534a9920f49b9f62b54e29b64ead59546"
+      "sha256": "59952daf3cb8cadc33f5249fb07552949d390ba37c71299117a2d503f83e422a"
     },
     {
       "path": "modules/economy/routes/cost.js",
@@ -3337,7 +3337,7 @@
     {
       "path": "modules/hall-ui/public/profile.js",
       "mode": "0000644",
-      "sha256": "a4cf0c4c2d088fd1fb84c41c93cc28e2acd2b656b0bc995cd46043881b3611fa"
+      "sha256": "ddd95350fa5c3696452996d4c79bb7e9c5d4d2b1034ed31a082dd568195b6543"
     },
     {
       "path": "modules/hall-ui/public/ranks.html",
@@ -3532,7 +3532,7 @@
     {
       "path": "modules/lifecycle/db.js",
       "mode": "0000644",
-      "sha256": "5e7dc6c267384eb3b691f49ec82631425151b97d2208eaf342922bf46146965f"
+      "sha256": "3b7e1979609fa7ba55253e193596d8d0db169925574934083232057dcd1b3e6a"
     },
     {
       "path": "modules/lifecycle/done-when.js",
@@ -3814,6 +3814,11 @@
       "mode": "0000644",
       "sha256": "f78eb8f7b6ee1ea3ddd789d6019b9715ae193ff0cb7890aeb24d8473033a911a"
     },
+    {
+      "path": "modules/platform-identity/migrations/platform_identity_009_profile_fields.sql",
+      "mode": "0000644",
+      "sha256": "00e2e9feccc56bdb30a5e4f0c6abbe610382fe425222419963a04ae022d3c58a"
+    },
     {
       "path": "modules/platform-identity/module.json",
       "mode": "0000644",
@@ -3822,7 +3827,7 @@
     {
       "path": "modules/platform-identity/platform-identity.js",
       "mode": "0000644",
-      "sha256": "59d9ef7d052890fdf09fd0a9f04432ab1baddc7c8dfe49950893b9dd67b89d66"
+      "sha256": "423afc175f0e1024d39fc20b561e24b423e2d9b6e5c16ddcd8e4a3329bcfa97b"
     },
     {
       "path": "modules/platform-identity/pollers/code-sweep.js",
@@ -3842,7 +3847,7 @@
     {
       "path": "modules/platform-identity/routes/profile.js",
       "mode": "0000644",
-      "sha256": "29e7f6304b4215fd79c35662c48370a04a5a9ffa2c3c4ae3d1fabf277d407eb2"
+      "sha256": "2e158331e7cae0535ae81d63b6b7e8d471330c0f3d732f7e3092e45ad8255916"
     },
     {
       "path": "modules/platform-identity/routes/projects.js",
@@ -3852,7 +3857,7 @@
     {
       "path": "modules/platform-identity/routes/public-profile.js",
       "mode": "0000644",
-      "sha256": "9032ff152e6440187f0f9bd2b1a3bb9ea24167c9f6d79ae3345a26a0e2fdc356"
+      "sha256": "e59f99d6f323e70611a08fa2c8299af815e350dbb81bd7cc79e9d96bd93cdbba"
     },
     {
       "path": "modules/platform-identity/routes/scouting.js",
@@ -3867,7 +3872,7 @@
     {
       "path": "modules/platform-identity/tests/platform-identity.mjs",
       "mode": "0000644",
-      "sha256": "53b5bdd5c9eb4a14695289dd1396231d29e0f53c8709bd591dc328362da88072"
+      "sha256": "514adcaae952190d418888ffb778d541a632e3040664ce53f7a55ba9a297292b"
     },
     {
       "path": "modules/platform-identity/ui/.gitkeep",
@@ -4242,12 +4247,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "f9e97249b5dcb223b1c8910bfe85a239d9948cbf721ec303989a553d601b48dd"
+      "sha256": "1817517e0566226b12320fb61a3a216cbb08c4536cd0e5b959567438b81f9993"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "395d13208f43926545b37afc8dab7d3a833809a036fba5a268247c198a8dfc66"
+      "sha256": "090d46542c940a8327bb953057f47a8e51e56c9ecc86755af99a7e941eea4247"
     },
     {
       "path": "public-docs/index.html",
@@ -5852,7 +5857,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "20924c6aa2d3ab24769ca059983064cab32c103fc979a6749a80021fcf7321d7"
+      "sha256": "bcbce9e29c6f05fc39ad8e52b4aa13b170962a06dbd3b6b5befba810a48e29d8"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -6967,7 +6972,7 @@
     {
       "path": "tests/hub_profile_leak.mjs",
       "mode": "0000644",
-      "sha256": "f0934fad2cd869a0955b9b087cab449932e921032ca94fc356a952e88f528d82"
+      "sha256": "ea992d1ab2ddedc27aaa5348a397356bef91a4c1ad9b295eb1a0ed1c4fc707e9"
     },
     {
       "path": "tests/idea_completeness.mjs",
@@ -6999,6 +7004,11 @@
       "mode": "0000644",
       "sha256": "cd782459f1e4e6ca6df8a0349521aedcc6a867128240a78d2f00e15f0fd5f259"
     },
+    {
+      "path": "tests/idea_task_ship_credit.mjs",
+      "mode": "0000644",
+      "sha256": "e7f0807491c094fddedd518380af73a98c7ac17ac9d42736d9ed9a7cd6d4bf51"
+    },
     {
       "path": "tests/idea_templates.mjs",
       "mode": "0000644",
@@ -7429,6 +7439,11 @@
       "mode": "0000644",
       "sha256": "3c85d28ecc55e375988f3e55aee993c8c84220889678262d8207146c2772f3f5"
     },
+    {
+      "path": "tests/profile_fields.mjs",
+      "mode": "0000644",
+      "sha256": "ff73579dd2416a81648d85dcd5d1a77cb776c32047bd0cc7897dff132cbae5b7"
+    },
     {
       "path": "tests/profile_rollup_consent.mjs",
       "mode": "0000644",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 275 operations across 46 resource groups
+- 276 operations across 46 resource groups
 
 ## Install
 

package/clients/bongos-client/bongos-client.global.js

@@ -433,6 +433,8 @@ function createClient(opts = {}) {
       getMeModelAllocation: (args) => request("GET", "/me/model-allocation", { hasBody: false }, args),
       // PATCH /me/model-allocation — rank: any-builder — PATCH /me/model-allocation
       patchMeModelAllocation: (args) => request("PATCH", "/me/model-allocation", { hasBody: true }, args),
+      // PATCH /me/profile — rank: any-builder — PATCH /me/profile
+      patchMeProfile: (args) => request("PATCH", "/me/profile", { hasBody: true }, args),
       // GET /me/recent-ships — rank: any-builder — GET /me/recent-ships
       getMeRecentShips: (args) => request("GET", "/me/recent-ships", { hasBody: false }, args),
       // GET /me/render — rank: any-builder — GET /me/render

package/clients/bongos-client/index.cjs

@@ -432,6 +432,8 @@ function createClient(opts = {}) {
       getMeModelAllocation: (args) => request("GET", "/me/model-allocation", { hasBody: false }, args),
       // PATCH /me/model-allocation — rank: any-builder — PATCH /me/model-allocation
       patchMeModelAllocation: (args) => request("PATCH", "/me/model-allocation", { hasBody: true }, args),
+      // PATCH /me/profile — rank: any-builder — PATCH /me/profile
+      patchMeProfile: (args) => request("PATCH", "/me/profile", { hasBody: true }, args),
       // GET /me/recent-ships — rank: any-builder — GET /me/recent-ships
       getMeRecentShips: (args) => request("GET", "/me/recent-ships", { hasBody: false }, args),
       // GET /me/render — rank: any-builder — GET /me/render

package/clients/bongos-client/index.d.ts

@@ -51,7 +51,7 @@ export interface GetInboxResponse { ideas: unknown; open_count: unknown }
 export interface GetLeaderboardResponse { leaderboard: unknown; page: unknown }
 export interface GetLearningsResponse { learnings: unknown }
 export interface GetMeAchievementsResponse { unlocked: unknown }
-export interface GetMeCrossProjectResponse { hide_stats: boolean; profile_state: unknown; handle: unknown; cross_project: unknown }
+export interface GetMeCrossProjectResponse { hide_stats: boolean; profile_state: unknown; handle: unknown; display_name: unknown; bio: unknown; links: unknown; cross_project: unknown }
 export interface GetMeDisplayNameResponse { display_name: unknown; max_length: unknown }
 export interface GetMeEventSoundPrefsResponse { prefs: unknown; effective: unknown; effective_wav: unknown; events: unknown }
 export interface GetMeRecentShipsResponse { ships: unknown }
@@ -134,6 +134,8 @@ export interface PatchMeDisplayNameResponse { display_name: unknown; max_length:
 export interface PatchMeEventSoundPrefsResponse { prefs: unknown; effective: unknown; effective_wav: unknown; events: unknown }
 export interface PatchMeHandleRequest { handle: string }
 export interface PatchMeHandleResponse { handle: unknown; previous_handle: unknown }
+export interface PatchMeProfileRequest { display_name?: unknown; bio?: unknown; links?: unknown }
+export interface PatchMeProfileResponse { display_name: unknown; bio: unknown; links: unknown }
 export interface PatchMeSkillPrefsResponse { prefs: unknown; effective: unknown; defaults: unknown; known_skills: unknown; allowed_models: unknown }
 export interface PatchMeSoundPrefsResponse { prefs: unknown; effective: unknown; effective_map: unknown; volume: unknown; defaults: unknown; known_sounds: unknown }
 export interface PatchProjectsIdFeaturedRequest { featured: boolean }
@@ -675,6 +677,8 @@ export interface BongosClient {
     getMeModelAllocation(args?: RequestArgs): Promise<ApiResponse>;
     /** PATCH /me/model-allocation — rank: any-builder */
     patchMeModelAllocation(args?: RequestArgs): Promise<ApiResponse>;
+    /** PATCH /me/profile — rank: any-builder */
+    patchMeProfile(args?: RequestArgs & { body?: PatchMeProfileRequest }): Promise<PatchMeProfileResponse>;
     /** GET /me/recent-ships — rank: any-builder */
     getMeRecentShips(args?: RequestArgs): Promise<GetMeRecentShipsResponse>;
     /** GET /me/render — rank: any-builder */

package/clients/bongos-client/index.mjs

@@ -429,6 +429,8 @@ export function createClient(opts = {}) {
       getMeModelAllocation: (args) => request("GET", "/me/model-allocation", { hasBody: false }, args),
       // PATCH /me/model-allocation — rank: any-builder — PATCH /me/model-allocation
       patchMeModelAllocation: (args) => request("PATCH", "/me/model-allocation", { hasBody: true }, args),
+      // PATCH /me/profile — rank: any-builder — PATCH /me/profile
+      patchMeProfile: (args) => request("PATCH", "/me/profile", { hasBody: true }, args),
       // GET /me/recent-ships — rank: any-builder — GET /me/recent-ships
       getMeRecentShips: (args) => request("GET", "/me/recent-ships", { hasBody: false }, args),
       // GET /me/render — rank: any-builder — GET /me/render

package/docs/api/openapi.json

@@ -6774,6 +6774,55 @@
         ]
       }
     },
+    "/me/profile": {
+      "patch": {
+        "operationId": "patch_me_profile",
+        "tags": [
+          "me"
+        ],
+        "summary": "PATCH /me/profile",
+        "description": "the caller's OWN profile fields (P02, task 1002798; spec Decision 4): bio, typed links, account display name. Own data, keyed on the authenticated github_id. The schema declares the keys for strict mode; the REAL validation (bio length/charset, https-only + host-pinned links, name length) lives in the domain, next to the data, and each field is nullable (null clears), which validateOrRespond's typed rules can't express.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/platform-identity/routes/profile.js",
+        "requestBody": {
+          "required": false,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PatchMeProfileRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PatchMeProfileResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/me/recent-ships": {
       "get": {
         "operationId": "get_me_recent_ships",
@@ -8174,7 +8223,7 @@
           "profiles"
         ],
         "summary": "GET /profiles/:handle",
-        "description": "a handle-addressed public profile. Every field is already world-readable on the numeric profile route + the leaderboard; the handle is just the rename-proof address (spec Decision 3). Whitelisting happens inside the module (getPublicProfileByHandle); no-store because the payload embeds cross_project and hide must beat the cache (ADR 0171 D5).\n\n**Rank:** `public` — No authentication — any caller.",
+        "description": "a handle-addressed public profile. Every field is already world-readable on the numeric profile route + the leaderboard; the handle is just the rename-proof address (spec Decision 3). Whitelisting happens inside the module (getPublicProfileByHandle); no-store because the payload embeds cross_project and hide must beat the cache (ADR 0171 D5). Rate-limited like /public/* (per-IP read limiter) so the handle→identity mapping can't be scripted-enumerated at line rate (R05 grade advisory, task 1002798).\n\n**Rank:** `public` — No authentication — any caller.",
         "x-rank": "public",
         "x-source": "modules/platform-identity/routes/public-profile.js",
         "parameters": [
@@ -13038,12 +13087,18 @@
           },
           "profile_state": {},
           "handle": {},
+          "display_name": {},
+          "bio": {},
+          "links": {},
           "cross_project": {}
         },
         "required": [
           "hide_stats",
           "profile_state",
           "handle",
+          "display_name",
+          "bio",
+          "links",
           "cross_project"
         ]
       },
@@ -14117,6 +14172,28 @@
           "previous_handle"
         ]
       },
+      "PatchMeProfileRequest": {
+        "type": "object",
+        "properties": {
+          "display_name": {},
+          "bio": {},
+          "links": {}
+        },
+        "additionalProperties": false
+      },
+      "PatchMeProfileResponse": {
+        "type": "object",
+        "properties": {
+          "display_name": {},
+          "bio": {},
+          "links": {}
+        },
+        "required": [
+          "display_name",
+          "bio",
+          "links"
+        ]
+      },
       "PatchMeSkillPrefsResponse": {
         "type": "object",
         "properties": {
@@ -17355,9 +17432,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 275,
-  "x-schema-count": 309,
+  "x-endpoint-count": 276,
+  "x-schema-count": 311,
   "x-undocumented-bodies": 8,
-  "x-response-schemas": 209,
+  "x-response-schemas": 210,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 275 endpoints across 46 route files.
+> **Generated from the live route files** — the route file is authoritative. 276 endpoints across 46 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -282,7 +282,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | POST | `/api/bongos/llm-cache/lookup` | `metic+archon` | `cache_key`, `tokens_saved_est` | POST /llm-cache/lookup — hit/miss + atomic hit_count bump. |
 | POST | `/api/bongos/llm-cache/store` | `metic+archon` | `spec`, `result_stdout`, `result_cost_usd` | POST /llm-cache/store — upsert a freshly-produced result. |
 
-## `me` (24)
+## `me` (25)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -301,6 +301,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | PATCH | `/api/bongos/me/interaction` | `any-builder` | _undocumented_ | PATCH the interaction profile. |
 | GET | `/api/bongos/me/model-allocation` | `any-builder` | — |  |
 | PATCH | `/api/bongos/me/model-allocation` | `any-builder` | _undocumented_ | PATCH the model allocation. |
+| PATCH | `/api/bongos/me/profile` | `any-builder` | `display_name`, `bio`, `links` | the caller's OWN profile fields (P02, task 1002798; spec Decision 4): bio, typed links, account display name. |
 | GET | `/api/bongos/me/recent-ships` | `any-builder` | — | Tasks this builder has shipped, most recent first. |
 | GET | `/api/bongos/me/render` | `any-builder` | — | Per-builder "render widgets" knob (task 1279, shares the behavior_prefs jsonb / migration 119). |
 | PATCH | `/api/bongos/me/render` | `any-builder` | _undocumented_ | PATCH the render knob. |

package/modules/dev-box/app/src/vendor/bongos-client.cjs

@@ -432,6 +432,8 @@ function createClient(opts = {}) {
       getMeModelAllocation: (args) => request("GET", "/me/model-allocation", { hasBody: false }, args),
       // PATCH /me/model-allocation — rank: any-builder — PATCH /me/model-allocation
       patchMeModelAllocation: (args) => request("PATCH", "/me/model-allocation", { hasBody: true }, args),
+      // PATCH /me/profile — rank: any-builder — PATCH /me/profile
+      patchMeProfile: (args) => request("PATCH", "/me/profile", { hasBody: true }, args),
       // GET /me/recent-ships — rank: any-builder — GET /me/recent-ships
       getMeRecentShips: (args) => request("GET", "/me/recent-ships", { hasBody: false }, args),
       // GET /me/render — rank: any-builder — GET /me/render

package/modules/economy/credits.js

@@ -117,6 +117,8 @@ const IDEA_BONUS_FRACTION = 0.25; // 25% slice to the idea's original capturer
 // (per-task-ship IC4, governance-pass IC5) will be siblings of this function.
 const IDEA_FULL_PASS_CREDIT = 5;   // owner: "gives 5 credits"
 const IDEA_FULL_PASS_BAR = 60;     // completeness 0-100; ADR 0172 proposed default
+const IDEA_TASK_SHIP_BASE = 5;     // stream 1: base credit per shipped task under an idea
+const QUICK_IDEA_FACTOR = 0.6;     // a quick/spark idea's grade factor (ADR 0172 default)
 
 // =========================================================================
 // Session token reward (flat cost-plus) — task 1005 (ADR 0054).
@@ -385,6 +387,74 @@ async function awardIdeaFullPassCredit(client, { ideaId, authorId, completenessS
     : { credited: 0, reason: 'already_paid' };
 }
 
+// Stream 1 (ADR 0172 / goal 1000067 IC4): as each task descended from an idea
+// SHIPS, pay the idea's author IDEA_TASK_SHIP_BASE credits, SCALED by the idea's
+// grade — a Full Idea by its completeness, a Quick/Spark idea by a flat factor.
+// The ideator lane, so it gates on config.ideatorCredit, never perTaskCredit.
+//
+// THIS REPLACES the ADR 0023 25% idea-promotion slice (maybeAwardIdeaPromotionBonus).
+// The lifecycle ship hook (awardLandingCredit) now calls THIS instead of the
+// slice, so there is one idea-credit-on-ship path, not two (ADR 0172 §4). The
+// old function stays for its unit tests + any compat caller, but is no longer
+// wired at ship.
+//
+// LINEAGE READ, NOT A CODE IMPORT. It reads the ideas-owned lineage + grade
+// tables directly (ideas_task_lineage → idea_inbox → ideas_grades), exactly as
+// maybeAwardIdeaPromotionBonus reads idea_inbox — a cross-table SQL read is
+// allowed across the module boundary; a cross-module require is not.
+//
+//   client   — pg client / pool (transaction participant)
+//   taskId   — the task that just shipped
+//   config   — resolved reward policy; gates on config.ideatorCredit
+//
+// Returns { credited, reason, ideaId, authorId } — credited 0 with a reason for
+// every no-pay path (no source idea, lane off, already paid). Idempotent per
+// (idea, task) via reason='idea.credit.task_ship:<idea>:<task>', builder-scoped
+// so the NOT EXISTS hits idx_credit_log_builder (the IC2 index lesson).
+async function awardIdeaTaskShipCredit(client, { taskId, config = rewardConfig() } = {}) {
+  if (config && config.ideatorCredit === false) {
+    return { credited: 0, reason: 'ideator_lane_off' };
+  }
+  // Which idea does this task descend from, who authored it, and at what grade?
+  const { rows } = await client.query(
+    `SELECT l.idea_id,
+            i.captured_by,
+            COALESCE(g.grade, 'quick')        AS grade,
+            g.completeness_score              AS completeness
+       FROM ideas_task_lineage l
+       JOIN idea_inbox i        ON i.id = l.idea_id
+       LEFT JOIN ideas_grades g ON g.idea_id = l.idea_id
+      WHERE l.task_id = $1`,
+    [taskId]
+  );
+  if (rows.length === 0 || rows[0].captured_by == null) {
+    return { credited: 0, reason: 'no_source_idea', ideaId: null, authorId: null };
+  }
+  const { idea_id: ideaId, captured_by: authorId, grade, completeness } = rows[0];
+  // Grade factor: a Full Idea earns in proportion to its completeness; a Quick
+  // or Spark idea (no completeness score) earns the flat quick factor. A full
+  // idea with no score yet also falls back to the quick factor rather than 0 —
+  // the work shipped, the idea is at least quick-grade.
+  const factor = (grade === 'full' && completeness != null && Number.isFinite(Number(completeness)))
+    ? Math.max(0, Math.min(1, Number(completeness) / 100))
+    : QUICK_IDEA_FACTOR;
+  const delta = Math.round(IDEA_TASK_SHIP_BASE * factor);
+  if (delta <= 0) {
+    return { credited: 0, reason: 'zero_after_scaling', ideaId: Number(ideaId), authorId: Number(authorId) };
+  }
+  const reason = `idea.credit.task_ship:${ideaId}:${taskId}`;
+  const description = `Task #${taskId} shipped under idea #${ideaId} (${grade}${completeness != null ? ` ${Math.round(Number(completeness))}%` : ''}) → ${delta}c to its author (ideator lane stream 1, ADR 0172)`;
+  const { rowCount } = await client.query(
+    `INSERT INTO credit_log (builder_id, task_id, delta, reason, description)
+     SELECT $1, $2, $3, $4, $5
+      WHERE NOT EXISTS (SELECT 1 FROM credit_log WHERE builder_id = $1 AND reason = $4)`,
+    [authorId, taskId, delta, reason, description]
+  );
+  return rowCount > 0
+    ? { credited: delta, reason: 'paid', ideaId: Number(ideaId), authorId: Number(authorId) }
+    : { credited: 0, reason: 'already_paid', ideaId: Number(ideaId), authorId: Number(authorId) };
+}
+
 // Award the flat cost-plus session token reward, idempotent per session_id
 // (task 1005, ADR 0054). Called inside the same transaction as the session
 // upsert (see upsertSessionRecordWithReward).
@@ -596,8 +666,11 @@ module.exports = {
   insertMultipliedConfirmCredit,
   maybeAwardIdeaPromotionBonus,
   awardIdeaFullPassCredit,
+  awardIdeaTaskShipCredit,
   IDEA_FULL_PASS_CREDIT,
   IDEA_FULL_PASS_BAR,
+  IDEA_TASK_SHIP_BASE,
+  QUICK_IDEA_FACTOR,
   awardSessionTokenReward,
   NET_NEGATIVE_BONUS,
   SUBTRACTOR_THRESHOLD,

package/modules/economy/reward.js

@@ -26,6 +26,8 @@ module.exports = {
   maybeAwardIdeaPromotionBonus: (...a) => credits.maybeAwardIdeaPromotionBonus(...a),
   // ADR 0172 IC2 — the ideator credit lane (stream 2): a passing Full Idea pays its author, once.
   awardIdeaFullPassCredit: (...a) => credits.awardIdeaFullPassCredit(...a),
+  // ADR 0172 IC4 — stream 1: pay the idea's author per shipped task, grade-scaled (replaces the 25% slice at ship).
+  awardIdeaTaskShipCredit: (...a) => credits.awardIdeaTaskShipCredit(...a),
   awardNetNegativeBonus: (...a) => credits.awardNetNegativeBonus(...a),
   awardSessionTokenReward: (...a) => credits.awardSessionTokenReward(...a),
   // gamification hooks the lifecycle fires at claim/ship

package/modules/hall-ui/public/profile.js

@@ -177,7 +177,7 @@
     const name = escapeHtml(p.name || 'Project');
     // origin is third-party-reported; link only a well-formed https URL.
     const origin = typeof p.origin === 'string' && /^https:\/\//.test(p.origin) ? p.origin : null;
-    const nameCell = origin ? `<a href="${escapeHtml(origin)}" rel="noopener">${name}</a>` : name;
+    const nameCell = origin ? `<a href="${escapeHtml(origin)}" rel="noopener noreferrer">${name}</a>` : name;
     // rank_held is THAT project's standing as it reported it — plain text, never
     // the local rank badge or the instance's own rank labels (spec Decision 1).
     const held = typeof p.rank_held === 'string' && p.rank_held

package/modules/lifecycle/db.js

@@ -3597,9 +3597,19 @@ async function awardLandingCredit(client, { taskId, creditedBuilderId, creditsRe
   const credit = await reward.insertMultipliedConfirmCredit(
     client, creditedBuilderId, taskId, creditsReward, kind, 'task.shipped'
   );
-  const ideaBonus = await reward.maybeAwardIdeaPromotionBonus(
-    client, taskId, creditedBuilderId, credit.creditsAwarded
-  );
+  // Stream 1 of the ideator credit lane (ADR 0172 / IC4) REPLACES the ADR 0023
+  // 25% idea-promotion slice here — one idea-credit-on-ship path, not two
+  // (ADR 0172 §4). Unlike the slice (25% of the builder estimate, so zero under
+  // cost-plus-only), this pays 5×grade-factor on the IDEATOR lane, so an idea
+  // earns as its work ships even when per-task builder credit is withheld. It
+  // reads the one-idea-many-tasks lineage (ideas_task_lineage, IC3), so a Full
+  // Idea that became a whole goal pays on every one of its shipped tasks — the
+  // old slice only saw the single promoted_to_task_id. `maybeAwardIdeaPromotionBonus`
+  // stays on the port for its unit tests / any compat caller, but is no longer
+  // wired at ship. Guarded so a null return (lane off, no source idea) is fine.
+  const ideaBonus = reward.awardIdeaTaskShipCredit
+    ? await reward.awardIdeaTaskShipCredit(client, { taskId })
+    : null;
   return {
     creditsAwarded: credit.creditsAwarded,
     creditsRaw: credit.raw,

package/modules/platform-identity/migrations/platform_identity_009_profile_fields.sql

@@ -0,0 +1,38 @@
+-- platform_identity_009_profile_fields.sql — bio + typed links + the
+-- display-name source bit (P02, task 1002798 / goal 1000045; profile-page spec
+-- Decision 4, ADR 0171 amendments R01).
+--
+--   bio   — plain text, ~280 chars, NO markdown and no auto-linking. The length
+--           cap + charset live in the domain validator (validateProfileBio in
+--           platform-identity.js — the only writer); nullable = never set.
+--   links — a TYPED, capped set as a jsonb object whose only keys are
+--           website | x | linkedin | discord, each an https URL (max 4 by
+--           construction — one per type). Typed-and-capped rather than a
+--           free-form list because a public, indexable page with
+--           user-controlled links is an SEO-spam magnet (spec Decision 4).
+--           Validation (https-only, no userinfo, per-type host pinning) lives
+--           in validateProfileLinks — the single write path; nullable = never set.
+--   display_name_source — the ADR 0156 mirror for the HUB account: 'github'
+--           (default; upsertAccount keeps re-syncing the name on every
+--           check-in/authorize) or 'user' (set by setAccountProfileFields; the
+--           upsertAccount conflict branch then never overwrites the name).
+--           Module-owned here — unlike core_197 the guard reads it inside this
+--           module's own upsertAccount, so it belongs on the module's table
+--           (ADR 0083 §5).
+--
+-- Additive + platform_identity_-namespaced (ADR 0083 §5). Idempotent: the
+-- inline CHECK rides the ADD COLUMN IF NOT EXISTS, so a re-run is a no-op.
+
+BEGIN;
+
+ALTER TABLE platform_identity_accounts
+  ADD COLUMN IF NOT EXISTS bio text,
+  ADD COLUMN IF NOT EXISTS links jsonb,
+  ADD COLUMN IF NOT EXISTS display_name_source text NOT NULL DEFAULT 'github'
+    CHECK (display_name_source IN ('github', 'user'));
+
+-- 'github' is correct for every pre-existing row: before this change there was
+-- no user-set account display name, so whatever is stored IS GitHub-derived
+-- (the ADR 0156 backfill argument, unchanged).
+
+COMMIT;