@bongos/core 1.19.184 → 1.19.186

package/modules/government/routes/{governance.js → government.js}

@@ -97,7 +97,7 @@ function registerSeams() {
       selectFragment: `,
             (SELECT COALESCE(array_agg(DISTINCT rp.permission_key), '{}')
                FROM government_builder_ranks br
-               JOIN government_rank_permissions rp ON rp.role_key = br.role_key
+               JOIN government_rank_permissions rp ON rp.rank_key = br.rank_key
               WHERE br.builder_id = s.builder_id) AS raw_permission_keys`,
     });
   }
@@ -105,7 +105,7 @@ function registerSeams() {
 
 // ── the R110 CRUD surface (ADR 0151 §2 — the governance tab's server half) ────
 //
-// Every route — the three reads included — gates on the `governance.manage`
+// Every route — the three reads included — gates on the `government.manage`
 // atom (system, floor archon): this surface EDITS the role/permission graph
 // itself, the meta-escalation the catalog flags non-grantable, and even listing
 // it exposes the full authority map. The invariants are enforced HERE, against
@@ -131,37 +131,37 @@ function registerSeams() {
 // SUBSTRATE keys stay non-grantable to everything, rank-roles included, because a
 // grant row for one delegates nothing (ADR 0043 enforces them out of band).
 const { validateOrRespond, LIMITS, parseId } = api;
-const ROLE_KEY_RE = /^[a-z][a-z0-9-]*$/;
-const ROLE_KEY_MAX = 64;
+const RANK_KEY_RE = /^[a-z][a-z0-9-]*$/;
+const RANK_KEY_MAX = 64;
 
 module.exports = function buildGovernanceRouter() {
   registerSeams();
   const router = express.Router();
 
-  // Param guard for :roleKey. Responds bad_role_key and returns null on a
+  // Param guard for :rankKey. Responds bad_rank_key and returns null on a
   // malformed slug (seeded keys like 'metic' pass shape and are refused later,
   // by policy, with the honest code).
-  function roleKeyParam(req, res) {
-    const roleKey = req.params.roleKey;
-    if (roleKey.length > ROLE_KEY_MAX || !ROLE_KEY_RE.test(roleKey)) {
-      res.fail('bad_role_key', 400, { role_key: roleKey, expected: 'a kebab-case slug (^[a-z][a-z0-9-]*$)' });
+  function rankKeyParam(req, res) {
+    const rankKey = req.params.rankKey;
+    if (rankKey.length > RANK_KEY_MAX || !RANK_KEY_RE.test(rankKey)) {
+      res.fail('bad_rank_key', 400, { rank_key: rankKey, expected: 'a kebab-case slug (^[a-z][a-z0-9-]*$)' });
       return null;
     }
-    return roleKey;
+    return rankKey;
   }
 
   // Load a role whose GRANTS this API may edit (ADR 0172): 404 on a missing role,
   // refuse only the Archon rank-role. Every other role — the three sub-Archon
   // rank-roles and every custom one — is grant-editable; WHICH keys is then
   // `catalog.isGrantableTo(key, role)`, per role. Returns null after responding.
-  async function loadGrantEditableRole(res, roleKey) {
-    const role = await db.getRoleByKey(roleKey);
+  async function loadGrantEditableRole(res, rankKey) {
+    const role = await db.getRoleByKey(rankKey);
     if (!role) {
-      res.fail('role_not_found', 404, { role_key: roleKey });
+      res.fail('rank_not_found', 404, { rank_key: rankKey });
       return null;
     }
     if (role.is_system && role.seeded_rank === ARCHON) {
-      res.fail('archon_role_immutable', 403, { role_key: roleKey, reason: ARCHON_REASON });
+      res.fail('archon_rank_immutable', 403, { rank_key: rankKey, reason: ARCHON_REASON });
       return null;
     }
     return role;
@@ -169,14 +169,14 @@ module.exports = function buildGovernanceRouter() {
 
   // Load a role this API may ASSIGN. Unchanged from R110: every seeded rank-role is
   // refused, because assignment derives from builders.rank via the R95b sync.
-  async function loadAssignableRole(res, roleKey) {
-    const role = await db.getRoleByKey(roleKey);
+  async function loadAssignableRole(res, rankKey) {
+    const role = await db.getRoleByKey(rankKey);
     if (!role) {
-      res.fail('role_not_found', 404, { role_key: roleKey });
+      res.fail('rank_not_found', 404, { rank_key: rankKey });
       return null;
     }
     if (role.is_system) {
-      res.fail('seeded_role_assignment_forbidden', 403, { role_key: roleKey, reason: ASSIGN_REASON });
+      res.fail('seeded_rank_assignment_forbidden', 403, { rank_key: rankKey, reason: ASSIGN_REASON });
       return null;
     }
     return role;
@@ -185,18 +185,43 @@ module.exports = function buildGovernanceRouter() {
   const ARCHON_REASON = 'the Archon rank-role holds every permission and is immutable — it is the role that can never be locked out of this tab (ADR 0172)';
   const ASSIGN_REASON = 'a seeded rank-role is assigned by rank (R95b sync); change the builder\'s rank instead';
 
-  // rank: perm governance.manage — the full role list with each role's grants.
-  router.get('/governance/roles', api.requireBuilder, api.requirePermission('governance.manage'), async (req, res) => {
+  // ── one-release compatibility aliases: /governance/* -> /government/* ──────
+  // ADR 0174 committed to keeping the pre-rename paths answering for exactly one
+  // release. The case this actually protects is narrow but real: a browser that
+  // still has the OLD hall page open when the instance upgrades will keep calling
+  // /governance/* against the new server. Everything else that consumed these
+  // paths (the hall bundle, the generated client) ships INSIDE the same core
+  // package and moves in lockstep.
+  //
+  // A 308 preserves the method and body, so a PUT/DELETE grant toggle survives
+  // the hop. The alias carries NO gate of its own — it redirects, and the real
+  // route re-runs requireBuilder + requirePermission on the followed request, so
+  // this cannot become a way around the wall.
+  //
+  // REMOVE THIS BLOCK one release after the rename ships (goal 1000068 follow-up).
+  // The `alias` counter in the log line is how we tell whether anything still
+  // calls them before deleting.
+  const LEGACY_PATH_PREFIX = '/governance';
+  router.all(`${LEGACY_PATH_PREFIX}/*rest`, (req, res, next) => {
+    const rest = req.originalUrl.slice(req.originalUrl.indexOf(LEGACY_PATH_PREFIX) + LEGACY_PATH_PREFIX.length);
+    if (!rest) return next();
+    const target = `/government${rest.replace(/^\/roles(?=\/|$)/, '/ranks')}`;
+    console.warn(`[government] legacy path hit: ${req.method} ${req.originalUrl} -> ${target} (ADR 0174 alias; remove one release after the rename)`);
+    return res.redirect(308, target);
+  });
+
+  // rank: perm government.manage — the full role list with each role's grants.
+  router.get('/government/ranks', api.requireBuilder, api.requirePermission('government.manage'), async (req, res) => {
     try {
-      const roles = await db.listRolesWithGrants();
-      res.json({ roles });
+      const ranks = await db.listRolesWithGrants();
+      res.json({ ranks });
     } catch (err) {
-      console.error('[gds] GET /governance/roles', err);
+      console.error('[gds] GET /government/ranks', err);
       res.fail('roles_list_failed', { status: 500, message: 'internal error' });
     }
   });
 
-  // rank: perm governance.manage — the permission catalog + principals, straight
+  // rank: perm government.manage — the permission catalog + principals, straight
   // from code (the catalog is CODE, not a table); no DB read. Principals are
   // read-only by construction. Three flags the tab renders its locks from, and the
   // tab must read all three rather than just `grantable`, because since ADR 0172
@@ -205,7 +230,7 @@ module.exports = function buildGovernanceRouter() {
   //   • `system`    — an in-app Archon power: locked on a custom role, togglable on
   //                   a sub-Archon rank-role.
   //   • `substrate` — locked EVERYWHERE, on every role, forever (ADR 0043).
-  router.get('/governance/permissions', api.requireBuilder, api.requirePermission('governance.manage'), (req, res) => {
+  router.get('/government/permissions', api.requireBuilder, api.requirePermission('government.manage'), (req, res) => {
     const permissions = catalog.PERMISSIONS.map((p) => ({
       key: p.key,
       system: p.system,
@@ -219,56 +244,56 @@ module.exports = function buildGovernanceRouter() {
     res.json({ permissions, principals: catalog.principals() });
   });
 
-  // rank: perm governance.manage — every builder↔role assignment row.
-  router.get('/governance/assignments', api.requireBuilder, api.requirePermission('governance.manage'), async (req, res) => {
+  // rank: perm government.manage — every builder↔role assignment row.
+  router.get('/government/assignments', api.requireBuilder, api.requirePermission('government.manage'), async (req, res) => {
     try {
       const assignments = await db.listAssignments();
       res.json({ assignments });
     } catch (err) {
-      console.error('[gds] GET /governance/assignments', err);
+      console.error('[gds] GET /government/assignments', err);
       res.fail('assignments_list_failed', { status: 500, message: 'internal error' });
     }
   });
 
-  // rank: perm governance.manage — create a CUSTOM role (is_system false, no
+  // rank: perm government.manage — create a CUSTOM role (is_system false, no
   // seeded_rank — the seeded four exist only via governance_002). Grants are
   // added one at a time via the toggle below, so creation carries none.
-  router.post('/governance/roles', api.requireBuilder, api.requirePermission('governance.manage'), async (req, res) => {
+  router.post('/government/ranks', api.requireBuilder, api.requirePermission('government.manage'), async (req, res) => {
     if (validateOrRespond(req, res, {
-      role_key: { required: true, type: 'string', minLength: 2, maxLength: ROLE_KEY_MAX },
+      rank_key: { required: true, type: 'string', minLength: 2, maxLength: RANK_KEY_MAX },
       label: { required: true, type: 'string', minLength: 1, maxLength: LIMITS.TITLE },
       description: { type: 'string', maxLength: 2000 },
     })) return;
-    const roleKey = req.body.role_key;
-    if (!ROLE_KEY_RE.test(roleKey)) {
-      return res.fail('bad_role_key', 400, { role_key: roleKey, expected: 'a kebab-case slug (^[a-z][a-z0-9-]*$)' });
+    const rankKey = req.body.rank_key;
+    if (!RANK_KEY_RE.test(rankKey)) {
+      return res.fail('bad_rank_key', 400, { rank_key: rankKey, expected: 'a kebab-case slug (^[a-z][a-z0-9-]*$)' });
     }
     try {
-      const role = await db.createRole({
-        roleKey,
+      const rank = await db.createRole({
+        rankKey,
         label: req.body.label,
         description: req.body.description ?? null,
         createdBy: req.builder.id,
       });
-      res.status(201).json({ role: { ...role, permissions: [] } });
+      res.status(201).json({ rank: { ...rank, permissions: [] } });
     } catch (err) {
       if (err && err.code === '23505') {
-        return res.fail('role_exists', 409, { role_key: roleKey });
+        return res.fail('rank_exists', 409, { rank_key: rankKey });
       }
-      console.error('[gds] POST /governance/roles', err);
+      console.error('[gds] POST /government/ranks', err);
       res.fail('role_create_failed', { status: 500, message: 'internal error' });
     }
   });
 
-  // rank: perm governance.manage — grant one permission to a role (the toggle's ON
+  // rank: perm government.manage — grant one permission to a role (the toggle's ON
   // half). The order of refusals is the authority order: role exists → role is not
   // the Archon one → the key exists → the key is grantable TO THIS ROLE.
-  router.put('/governance/roles/:roleKey/permissions/:permissionKey', api.requireBuilder, api.requirePermission('governance.manage'), async (req, res) => {
-    const roleKey = roleKeyParam(req, res);
-    if (roleKey === null) return;
+  router.put('/government/ranks/:rankKey/permissions/:permissionKey', api.requireBuilder, api.requirePermission('government.manage'), async (req, res) => {
+    const rankKey = rankKeyParam(req, res);
+    if (rankKey === null) return;
     const permissionKey = req.params.permissionKey;
     try {
-      const role = await loadGrantEditableRole(res, roleKey);
+      const role = await loadGrantEditableRole(res, rankKey);
       if (role === null) return;
       if (!catalog.byKey(permissionKey)) {
         return res.fail('unknown_permission', 400, { permission_key: permissionKey });
@@ -276,7 +301,7 @@ module.exports = function buildGovernanceRouter() {
       if (!catalog.isGrantableTo(permissionKey, role)) {
         return res.fail('permission_not_grantable', 400, {
           permission_key: permissionKey,
-          role_key: roleKey,
+          rank_key: rankKey,
           // Name the ACTUAL wall. "Not grantable" now has three distinct causes and
           // a caller that cannot tell them apart cannot tell a policy choice
           // (widen the role) from a structural one (nothing will ever work).
@@ -287,34 +312,34 @@ module.exports = function buildGovernanceRouter() {
               : 'a system (trust-boundary) permission is non-grantable to a CUSTOM role; only a sub-Archon rank-role may carry one (ADR 0172)',
         });
       }
-      const granted = await db.grantRolePermission({ roleKey, permissionKey });
-      res.json({ ok: true, role_key: roleKey, permission_key: permissionKey, granted });
+      const granted = await db.grantRolePermission({ rankKey, permissionKey });
+      res.json({ ok: true, rank_key: rankKey, permission_key: permissionKey, granted });
     } catch (err) {
-      console.error('[gds] PUT /governance/roles/:roleKey/permissions/:permissionKey', err);
+      console.error('[gds] PUT /government/ranks/:rankKey/permissions/:permissionKey', err);
       res.fail('grant_failed', { status: 500, message: 'internal error' });
     }
   });
 
-  // rank: perm governance.manage — revoke a grant (the toggle's OFF half).
+  // rank: perm government.manage — revoke a grant (the toggle's OFF half).
   // Deliberately NOT validated against the catalog: a grant whose key the
   // catalog since retired is exactly the row an Archon most needs to remove
   // (the resolver already drops it — this is hygiene, not authority).
-  router.delete('/governance/roles/:roleKey/permissions/:permissionKey', api.requireBuilder, api.requirePermission('governance.manage'), async (req, res) => {
-    const roleKey = roleKeyParam(req, res);
-    if (roleKey === null) return;
+  router.delete('/government/ranks/:rankKey/permissions/:permissionKey', api.requireBuilder, api.requirePermission('government.manage'), async (req, res) => {
+    const rankKey = rankKeyParam(req, res);
+    if (rankKey === null) return;
     const permissionKey = req.params.permissionKey;
     try {
-      const role = await loadGrantEditableRole(res, roleKey);
+      const role = await loadGrantEditableRole(res, rankKey);
       if (role === null) return;
-      const removed = await db.revokeRolePermission({ roleKey, permissionKey });
-      res.json({ ok: true, role_key: roleKey, permission_key: permissionKey, removed });
+      const removed = await db.revokeRolePermission({ rankKey, permissionKey });
+      res.json({ ok: true, rank_key: rankKey, permission_key: permissionKey, removed });
     } catch (err) {
-      console.error('[gds] DELETE /governance/roles/:roleKey/permissions/:permissionKey', err);
+      console.error('[gds] DELETE /government/ranks/:rankKey/permissions/:permissionKey', err);
       res.fail('revoke_failed', { status: 500, message: 'internal error' });
     }
   });
 
-  // rank: perm governance.manage — restore a SEEDED rank-role to its catalog
+  // rank: perm government.manage — restore a SEEDED rank-role to its catalog
   // default (ADR 0172). The counterweight to making the rank-roles editable: a
   // rank's grant set is ~60 rows, so an owner who drifts one has no practical way
   // back by clicking, and "what does Trusted mean by default" is a question only
@@ -325,15 +350,15 @@ module.exports = function buildGovernanceRouter() {
   // Deliberately NOT offered for a CUSTOM role: a custom role has no catalog
   // default to return to (its "default" is the empty set it was created with), so
   // the honest verb there is revoking the grants, which the toggle already does.
-  router.post('/governance/roles/:roleKey/reset', api.requireBuilder, api.requirePermission('governance.manage'), async (req, res) => {
-    const roleKey = roleKeyParam(req, res);
-    if (roleKey === null) return;
+  router.post('/government/ranks/:rankKey/reset', api.requireBuilder, api.requirePermission('government.manage'), async (req, res) => {
+    const rankKey = rankKeyParam(req, res);
+    if (rankKey === null) return;
     try {
-      const role = await loadGrantEditableRole(res, roleKey);
+      const role = await loadGrantEditableRole(res, rankKey);
       if (role === null) return;
       if (!role.is_system || !catalog.RANK_ORDER.includes(role.seeded_rank)) {
-        return res.fail('role_has_no_default', 400, {
-          role_key: roleKey,
+        return res.fail('rank_has_no_default', 400, {
+          rank_key: rankKey,
           reason: 'only a seeded rank-role has a catalog default to reset to; revoke a custom role\'s grants instead',
         });
       }
@@ -341,58 +366,58 @@ module.exports = function buildGovernanceRouter() {
       // — below archon — never a system one. Filtering by isGrantableTo anyway keeps
       // reset from being a back door that writes what the toggle refuses.
       const keys = catalog.seedForRank(role.seeded_rank).filter((k) => catalog.isGrantableTo(k, role));
-      const count = await db.resetRoleGrants({ roleKey, permissionKeys: keys });
-      res.json({ ok: true, role_key: roleKey, seeded_rank: role.seeded_rank, permission_count: count });
+      const count = await db.resetRoleGrants({ rankKey, permissionKeys: keys });
+      res.json({ ok: true, rank_key: rankKey, seeded_rank: role.seeded_rank, permission_count: count });
     } catch (err) {
-      console.error('[gds] POST /governance/roles/:roleKey/reset', err);
+      console.error('[gds] POST /government/ranks/:rankKey/reset', err);
       res.fail('reset_failed', { status: 500, message: 'internal error' });
     }
   });
 
-  // rank: perm governance.manage — assign a CUSTOM role to a builder.
+  // rank: perm government.manage — assign a CUSTOM role to a builder.
   // assigned_by is ALWAYS the session builder, never input (the audit trail's
   // "who did this" must be the authenticated actor).
-  router.post('/governance/assignments', api.requireBuilder, api.requirePermission('governance.manage'), async (req, res) => {
+  router.post('/government/assignments', api.requireBuilder, api.requirePermission('government.manage'), async (req, res) => {
     if (validateOrRespond(req, res, {
       builder_id: { required: true, type: 'integer', min: 1 },
-      role_key: { required: true, type: 'string', minLength: 2, maxLength: ROLE_KEY_MAX },
+      rank_key: { required: true, type: 'string', minLength: 2, maxLength: RANK_KEY_MAX },
     })) return;
-    const roleKey = req.body.role_key;
-    if (!ROLE_KEY_RE.test(roleKey)) {
-      return res.fail('bad_role_key', 400, { role_key: roleKey, expected: 'a kebab-case slug (^[a-z][a-z0-9-]*$)' });
+    const rankKey = req.body.rank_key;
+    if (!RANK_KEY_RE.test(rankKey)) {
+      return res.fail('bad_rank_key', 400, { rank_key: rankKey, expected: 'a kebab-case slug (^[a-z][a-z0-9-]*$)' });
     }
     try {
-      const role = await loadAssignableRole(res, roleKey);
+      const role = await loadAssignableRole(res, rankKey);
       if (role === null) return;
       const assigned = await db.assignRole({
         builderId: req.body.builder_id,
-        roleKey,
+        rankKey,
         assignedBy: req.builder.id,
       });
-      res.status(assigned ? 201 : 200).json({ ok: true, builder_id: req.body.builder_id, role_key: roleKey, assigned });
+      res.status(assigned ? 201 : 200).json({ ok: true, builder_id: req.body.builder_id, rank_key: rankKey, assigned });
     } catch (err) {
       if (err && err.code === '23503') {
         return res.fail('builder_not_found', 404, { builder_id: req.body.builder_id });
       }
-      console.error('[gds] POST /governance/assignments', err);
+      console.error('[gds] POST /government/assignments', err);
       res.fail('assign_failed', { status: 500, message: 'internal error' });
     }
   });
 
-  // rank: perm governance.manage — remove a custom-role assignment. Idempotent:
+  // rank: perm government.manage — remove a custom-role assignment. Idempotent:
   // `removed` says whether a row went away.
-  router.delete('/governance/assignments/:builderId/:roleKey', api.requireBuilder, api.requirePermission('governance.manage'), async (req, res) => {
+  router.delete('/government/assignments/:builderId/:rankKey', api.requireBuilder, api.requirePermission('government.manage'), async (req, res) => {
     const builderId = parseId(req, res, { param: 'builderId', code: 'bad_builder_id', positiveInt: true });
     if (builderId === null) return;
-    const roleKey = roleKeyParam(req, res);
-    if (roleKey === null) return;
+    const rankKey = rankKeyParam(req, res);
+    if (rankKey === null) return;
     try {
-      const role = await loadAssignableRole(res, roleKey);
+      const role = await loadAssignableRole(res, rankKey);
       if (role === null) return;
-      const removed = await db.unassignRole({ builderId, roleKey });
-      res.json({ ok: true, builder_id: builderId, role_key: roleKey, removed });
+      const removed = await db.unassignRole({ builderId, rankKey });
+      res.json({ ok: true, builder_id: builderId, rank_key: rankKey, removed });
     } catch (err) {
-      console.error('[gds] DELETE /governance/assignments/:builderId/:roleKey', err);
+      console.error('[gds] DELETE /government/assignments/:builderId/:rankKey', err);
       res.fail('unassign_failed', { status: 500, message: 'internal error' });
     }
   });

package/modules/government/routes/rank-sync.js

@@ -2,7 +2,7 @@
 
 // The governance module's rank-role SYNC port (ADR 0151, BV1.R95b).
 //
-// A second, deliberately tiny kernel port beside `governance` (routes/governance.js).
+// A second, deliberately tiny kernel port beside `government` (routes/government.js).
 // `governance` is the READ surface every gate resolves on every request; this is the
 // single WRITE core needs — "this builder's rank is now X, make their seeded
 // rank-role match". They are kept apart on purpose:
@@ -14,7 +14,7 @@
 // The port name is namespaced (`government.rankSync`) like the `ideas.capture` /
 // `art.getBuilderGeminiKeyRow` / `grade.builderRollingAvgGrade` ports.
 //
-// Registered from a route factory for the same reason routes/governance.js is:
+// Registered from a route factory for the same reason routes/government.js is:
 // mountModuleRoutes is the one boot hook that runs BOTH in the live server and
 // whenever a test rebuilds the router, and registration is hasProvider-guarded so a
 // rebuild never trips the seam's single-provider duplicate guard.

package/modules/hall-ui/public/gate.js

@@ -10,7 +10,7 @@
 // Like The Watch + The Harbor, this reads /api/bongos/me to show a Sealed notice for
 // non-Archons — DEFENCE IN DEPTH only. GET /gate-approvals + POST
 // /gate-approvals/:pr/approve are ALSO archon-gated server-side (ADR 0016), and
-// the page itself is gated by server.js requireGovernancePage. On 401 → web sign-in.
+// the page itself is gated by server.js requireGovernmentPage. On 401 → web sign-in.
 
 (() => {
   'use strict';
@@ -217,8 +217,8 @@
       me = null;
     }
     const rank = (me && (me.builder || me).rank || '').toLowerCase();
-    // ADR 0157: the Gate page sits at the `page.view.governance` floor (metic). The
-    // server's requireGovernancePage is the wall — this only decides whether to render the
+    // ADR 0157: the Gate page sits at the `page.view.government` floor (metic). The
+    // server's requireGovernmentPage is the wall — this only decides whether to render the
     // body or the sealed notice, so it must agree or a Metic sees "sealed" on a page
     // they were just admitted to.
     if (rank !== 'metic' && rank !== 'archon') { showSealed(); return; }

package/modules/hall-ui/public/{governance.css → government.css}

@@ -6,28 +6,28 @@
 .gov-h { color: var(--ink); font-size: 16px; font-weight: 600; margin: 22px 0 8px; }
 .gov-h--minor { font-size: 13px; margin: 18px 0 6px; }
 .gov-grid-note { color: var(--ink-soft); font-size: 12.5px; margin: 0 0 12px; }
-/* Holds the rank-role reset button. Empty for every other role, so it collapses
+/* Holds the ladder-rank reset button. Empty for every other rank, so it collapses
    rather than reserving a gap — hence no margin on the empty box itself. */
 .gov-grid-actions:not(:empty) { margin: 0 0 14px; }
 .gov-sealed, .gov-empty { color: var(--ink-soft); padding: 16px 0; }
 
-/* Two columns on wide screens: role rail left, permission grid right. */
+/* Two columns on wide screens: rank rail left, permission grid right. */
 .gov-layout { display: grid; grid-template-columns: 260px 1fr; gap: 22px; align-items: start; }
 @media (max-width: 760px) { .gov-layout { grid-template-columns: 1fr; } }
 
-/* ---- role list ---------------------------------------------------------- */
-.gov-role-list { display: flex; flex-direction: column; gap: 8px; }
-.gov-role {
+/* ---- rank list ---------------------------------------------------------- */
+.gov-rank-list { display: flex; flex-direction: column; gap: 8px; }
+.gov-rank {
   text-align: left; font: inherit; cursor: pointer;
   border: 1px solid var(--border); border-radius: var(--radius-sm);
   background: var(--surface); padding: 10px 12px;
   display: flex; flex-direction: column; gap: 4px;
 }
-.gov-role:hover { background: var(--surface-2); }
-.gov-role[aria-pressed="true"] { border-color: var(--accent); box-shadow: inset 2px 0 0 var(--accent); }
-.gov-role__head { display: flex; align-items: baseline; justify-content: space-between; gap: 8px; }
-.gov-role__label { font-weight: 600; color: var(--ink); font-size: 13.5px; }
-.gov-role__meta { color: var(--ink-faint); font-size: 11.5px; }
+.gov-rank:hover { background: var(--surface-2); }
+.gov-rank[aria-pressed="true"] { border-color: var(--accent); box-shadow: inset 2px 0 0 var(--accent); }
+.gov-rank__head { display: flex; align-items: baseline; justify-content: space-between; gap: 8px; }
+.gov-rank__label { font-weight: 600; color: var(--ink); font-size: 13.5px; }
+.gov-rank__meta { color: var(--ink-faint); font-size: 11.5px; }
 
 .gov-pill {
   font-size: 10.5px; font-weight: 600;

package/modules/hall-ui/public/{governance.html → government.html}

@@ -3,16 +3,16 @@
 <head>
   <meta charset="utf-8">
   <meta name="viewport" content="width=device-width, initial-scale=1">
-  <title>Governance — {{worldName}}</title>
-  <meta name="description" content="Roles and permissions — create a custom role, grant everyday permissions, assign it to a builder. Trust-boundary powers stay locked.">
+  <title>Government — {{worldName}}</title>
+  <meta name="description" content="Ranks and permissions — create a custom rank, grant everyday permissions, assign it to a builder. Trust-boundary powers stay locked.">
   <link rel="icon" href="data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'><text x='16' y='24' font-size='24' text-anchor='middle' font-family='sans-serif'>⌂</text></svg>">
   <link rel="preconnect" href="https://fonts.googleapis.com">
   <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
   <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet">
   <link rel="stylesheet" href="/builders/style.css?v=2026-07-02-shell1">
-  <link rel="stylesheet" href="/builders/governance.css">
+  <link rel="stylesheet" href="/builders/government.css">
 </head>
-<body data-page="governance" data-page-title="Governance">
+<body data-page="government" data-page-title="Government">
 
 <div class="app">
   <aside class="app-sidebar" id="app-sidebar" aria-label="Primary"></aside>
@@ -27,15 +27,15 @@
 
         <section id="gov-body" hidden>
           <div class="gov-layout">
-            <div class="gov-roles-col">
-              <h2 class="gov-h">Roles</h2>
-              <div class="gov-role-list" id="gov-role-list"></div>
+            <div class="gov-ranks-col">
+              <h2 class="gov-h">Ranks</h2>
+              <div class="gov-rank-list" id="gov-rank-list"></div>
               <form class="gov-create" id="gov-create-form" autocomplete="off">
-                <h3 class="gov-h gov-h--minor">New custom role</h3>
-                <input class="gov-input" id="gov-create-key" placeholder="role-key (kebab-case)" maxlength="64" required>
+                <h3 class="gov-h gov-h--minor">New custom rank</h3>
+                <input class="gov-input" id="gov-create-key" placeholder="rank-key (kebab-case)" maxlength="64" required>
                 <input class="gov-input" id="gov-create-label" placeholder="Label" maxlength="200" required>
                 <input class="gov-input" id="gov-create-desc" placeholder="Description (optional)" maxlength="2000">
-                <button class="gov-btn" type="submit">Create role</button>
+                <button class="gov-btn" type="submit">Create rank</button>
               </form>
             </div>
 
@@ -48,16 +48,16 @@
           </div>
 
           <h2 class="gov-h">Assignments</h2>
-          <p class="gov-grid-note">Hand a custom role to a builder. Rank roles are assigned by rank itself and cannot be granted here.</p>
+          <p class="gov-grid-note">Hand a custom rank to a builder. The four ladder ranks are assigned by rank itself and cannot be granted here.</p>
           <form class="gov-assign" id="gov-assign-form" autocomplete="off">
             <input class="gov-input gov-input--id" id="gov-assign-builder" type="number" min="1" placeholder="Builder id" required>
-            <select class="gov-input" id="gov-assign-role" required></select>
+            <select class="gov-input" id="gov-assign-rank" required></select>
             <button class="gov-btn" type="submit">Assign</button>
           </form>
           <div id="gov-assignments"></div>
 
           <h2 class="gov-h">Machine principals</h2>
-          <p class="gov-grid-note">Capabilities held by a machine identity, never by a person or a role. Shown for completeness — nothing here can be granted.</p>
+          <p class="gov-grid-note">Capabilities held by a machine identity, never by a person or a rank. Shown for completeness — nothing here can be granted.</p>
           <div id="gov-principals"></div>
         </section>
       </main>
@@ -73,6 +73,6 @@
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>
-<script src="/builders/governance.js?v=2026-08-06-governance"></script>
+<script src="/builders/government.js?v=2026-08-06-governance"></script>
 </body>
 </html>