@bongos/core 1.19.184 → 1.19.186

package/modules/hall-ui/public/{governance.js → government.js}

@@ -1,28 +1,28 @@
-// public-builders/governance.js — Governance (/builders/governance).
+// modules/hall-ui/public/government.js — Government (/builders/government).
 //
-// The roles/permissions/assignments tab (BV1.R111, ADR 0151 §2) over the R110
-// CRUD routes. Discord-style: pick a role on the left, toggle its permissions in
-// the grid, assign custom roles to builders below.
+// The ranks/permissions/assignments tab (BV1.R111, ADR 0151 §2) over the R110
+// CRUD routes. Discord-style: pick a rank on the left, toggle its permissions in
+// the grid, assign custom ranks to builders below.
 //
-// Since ADR 0172 grantability depends on WHICH role is selected, so this page's
+// Since ADR 0172 grantability depends on WHICH rank is selected, so this page's
 // central job is rendering three different locks honestly. The SERVER enforces all
 // of them (ADR 0016 — nothing here grants anything; a disabled button is a
 // courtesy, `isGrantableTo` on the route is the wall):
 //   • SUBSTRATE permissions (deploy / protected paths / ssh) render LOCKED for
-//     every role, always. They are enforced outside the app (ADR 0043), so a grant
+//     every rank, always. They are enforced outside the app (ADR 0043), so a grant
 //     row confers nothing — showing a working toggle would be the UI lying.
-//   • OWNER POWERS (the seven in-app `system` keys) render LOCKED on a custom role
-//     and TOGGLABLE on a sub-Archon rank-role. That asymmetry is the whole of the
+//   • OWNER POWERS (the seven in-app `system` keys) render LOCKED on a custom rank
+//     and TOGGLABLE on a sub-Archon rank. That asymmetry is the whole of the
 //     owner's 2026-08-16 decision, and the section header says so out loud.
-//   • the ARCHON rank-role is read-only in full: it holds everything, and its
+//   • the ARCHON rank is read-only in full: it holds everything, and its
 //     immutability is what makes it impossible to click your way into locking the
-//     owner out of this tab. The API refuses it as `archon_role_immutable`.
-// ASSIGNMENT of any rank-role is still refused (`seeded_role_assignment_forbidden`)
-// — you get a rank-role by holding the rank, so that dial is the rank itself.
+//     owner out of this tab. The API refuses it as `archon_rank_immutable`.
+// ASSIGNMENT of any rank is still refused (`seeded_rank_assignment_forbidden`)
+// — you get a rank by holding the rank, so that dial is the rank itself.
 //
 // Like The Gate, this reads /api/bongos/me for a friendly Sealed notice —
-// DEFENCE IN DEPTH only. Every /governance/* endpoint (reads included) is ALSO
-// gated server-side on the `governance.manage` atom (archon floor). On 401 →
+// DEFENCE IN DEPTH only. Every /government/* endpoint (reads included) is ALSO
+// gated server-side on the `government.manage` atom (archon floor). On 401 →
 // web sign-in.
 //
 // DELIBERATELY NOT IN THE SIDEBAR YET: the nav entry + the server page gate are
@@ -63,50 +63,50 @@
 
   // The R110 refusal codes, translated for the person clicking.
   const ERROR_COPY = {
-    permission_not_grantable: 'That permission can’t be granted to this role. (The server’s reply says which of the three walls applied.)',
-    archon_role_immutable: 'The Archon role is read-only — it holds every permission, which is what keeps you from locking yourself out of this page.',
-    role_has_no_default: 'Only a rank role has a catalog default to reset to. Revoke a custom role’s permissions individually instead.',
-    seeded_role_assignment_forbidden: 'Rank roles are assigned by rank itself — change the builder’s rank instead.',
-    role_exists: 'A role with that key already exists.',
-    role_not_found: 'That role no longer exists — refreshing.',
+    permission_not_grantable: 'That permission can’t be granted to this rank. (The server’s reply says which of the three walls applied.)',
+    archon_rank_immutable: 'The Owner rank is read-only — it holds every permission, which is what keeps you from locking yourself out of this page.',
+    rank_has_no_default: 'Only a ladder rank has a catalog default to reset to. Revoke a custom rank’s permissions individually instead.',
+    seeded_rank_assignment_forbidden: 'Ladder ranks are assigned by rank itself — change the builder’s rank instead.',
+    rank_exists: 'A rank with that key already exists.',
+    rank_not_found: 'That rank no longer exists — refreshing.',
     builder_not_found: 'No builder with that id.',
     unknown_permission: 'The permission catalog does not define that key.',
-    bad_role_key: 'Role keys are kebab-case: lowercase letters, digits, dashes.',
+    bad_rank_key: 'Rank keys are kebab-case: lowercase letters, digits, dashes.',
     validation_failed: 'Missing or invalid fields.',
   };
   const friendlyError = (code) => ERROR_COPY[code] || null;
 
   // ---- state ---------------------------------------------------------------
 
-  let roles = [];        // [{ role_key, label, description, is_system, seeded_rank, permissions: [] }]
+  let ranks = [];        // [{ rank_key, label, description, is_system, seeded_rank, permissions: [] }]
   let permissions = [];  // catalog rows: [{ key, system, floor, guards, grantable }]
   let principals = [];   // [{ system_role, permission, guards }]
-  let assignments = [];  // [{ builder_id, github_login, display_name, rank, role_key, role_label, is_system }]
-  let selectedRoleKey = null;
+  let assignments = [];  // [{ builder_id, github_login, display_name, rank, rank_key, rank_label, is_system }]
+  let selectedRankKey = null;
 
-  const selectedRole = () => roles.find((r) => r.role_key === selectedRoleKey) || null;
+  const selectedRank = () => ranks.find((r) => r.rank_key === selectedRankKey) || null;
 
-  // ---- render: role list ---------------------------------------------------
+  // ---- render: rank list ---------------------------------------------------
 
-  function renderRoles() {
-    const list = document.getElementById('gov-role-list');
+  function renderRanks() {
+    const list = document.getElementById('gov-rank-list');
     list.innerHTML = '';
-    for (const role of roles) {
-      // The Archon row is called out as read-only, because it is the one role in
+    for (const rank of ranks) {
+      // The Archon row is called out as read-only, because it is the one rank in
       // this list a click will not change and the reader should know before trying.
-      const pill = isArchonRole(role)
-        ? `<span class="gov-pill gov-pill--locked">rank role · read-only</span>`
-        : role.is_system
-          ? `<span class="gov-pill gov-pill--seeded">rank role</span>`
+      const pill = isArchonRank(rank)
+        ? `<span class="gov-pill gov-pill--locked">ladder · read-only</span>`
+        : rank.is_system
+          ? `<span class="gov-pill gov-pill--seeded">ladder</span>`
           : `<span class="gov-pill gov-pill--custom">custom</span>`;
       const btn = document.createElement('button');
       btn.type = 'button';
-      btn.className = 'gov-role';
-      btn.setAttribute('aria-pressed', role.role_key === selectedRoleKey ? 'true' : 'false');
+      btn.className = 'gov-rank';
+      btn.setAttribute('aria-pressed', rank.rank_key === selectedRankKey ? 'true' : 'false');
       btn.innerHTML =
-        `<span class="gov-role__head"><span class="gov-role__label">${escapeHtml(role.label || role.role_key)}</span>${pill}</span>
-         <span class="gov-role__meta"><code>${escapeHtml(role.role_key)}</code> · ${(role.permissions || []).length} permission${(role.permissions || []).length === 1 ? '' : 's'}</span>`;
-      btn.addEventListener('click', () => { selectedRoleKey = role.role_key; renderRoles(); renderGrid(); });
+        `<span class="gov-rank__head"><span class="gov-rank__label">${escapeHtml(rank.label || rank.rank_key)}</span>${pill}</span>
+         <span class="gov-rank__meta"><code>${escapeHtml(rank.rank_key)}</code> · ${(rank.permissions || []).length} permission${(rank.permissions || []).length === 1 ? '' : 's'}</span>`;
+      btn.addEventListener('click', () => { selectedRankKey = rank.rank_key; renderRanks(); renderGrid(); });
       list.appendChild(btn);
     }
   }
@@ -117,34 +117,34 @@
   // right control, NEVER to decide authority — the route runs the real one and
   // refuses regardless of what this returns. Kept in the same order as the server's
   // so a future catalog change lands in one obvious place on each side.
-  const isArchonRole = (role) => !!role && role.is_system && role.seeded_rank === 'archon';
-  const isRankRole = (role) => !!role && role.is_system;
-  function grantableTo(p, role) {
-    if (!role || p.substrate) return false;
-    if (role.is_system) return role.seeded_rank !== 'archon';
+  const isArchonRank = (rank) => !!rank && rank.is_system && rank.seeded_rank === 'archon';
+  const isRankRank = (rank) => !!rank && rank.is_system;
+  function grantableTo(p, rank) {
+    if (!rank || p.substrate) return false;
+    if (rank.is_system) return rank.seeded_rank !== 'archon';
     return !!p.grantable;
   }
 
-  function permRow(p, role) {
-    const held = !!role && (role.permissions || []).includes(p.key);
+  function permRow(p, rank) {
+    const held = !!rank && (rank.permissions || []).includes(p.key);
     const row = document.createElement('div');
     row.className = 'gov-perm';
 
     // Why locked, in the words that tell the reader whether it is a policy they
     // could change or a fact they cannot. Three causes, three sentences.
     const lockReason = p.substrate
-      ? 'Enforced outside the app (the pre-push hook, the deploy audit, the server itself). Granting it here would change nothing, so it is locked for every role.'
-      : isArchonRole(role)
-        ? 'The Archon role holds everything and is read-only.'
-        : 'An owner-level permission. It can be handed to a rank role, but never to a custom one.';
+      ? 'Enforced outside the app (the pre-push hook, the deploy audit, the server itself). Granting it here would change nothing, so it is locked for every rank.'
+      : isArchonRank(rank)
+        ? 'The Archon rank holds everything and is read-only.'
+        : 'An owner-level permission. It can be handed to a ladder rank, but never to a custom one.';
 
     let control;
-    if (!role) {
+    if (!rank) {
       control = '';
-    } else if (!grantableTo(p, role)) {
+    } else if (!grantableTo(p, rank)) {
       control = `<span class="gov-pill gov-pill--locked" title="${escapeHtml(lockReason)}">locked</span>`;
-      // The Archon role is read-only rather than empty-handed, so say what it holds.
-      if (held && isArchonRole(role)) control = `<span class="gov-held-note">held</span>${control}`;
+      // The Archon rank is read-only rather than empty-handed, so say what it holds.
+      if (held && isArchonRank(rank)) control = `<span class="gov-held-note">held</span>${control}`;
     } else {
       control = `<button type="button" class="gov-toggle" aria-pressed="${held ? 'true' : 'false'}" data-perm="${escapeHtml(p.key)}">${held ? 'granted' : 'grant'}</button>`;
     }
@@ -158,7 +158,7 @@
        ${control}`;
 
     const btn = row.querySelector('button.gov-toggle');
-    if (btn) btn.addEventListener('click', () => toggleGrant(role, p.key, !held, btn));
+    if (btn) btn.addEventListener('click', () => toggleGrant(rank, p.key, !held, btn));
     return row;
   }
 
@@ -170,34 +170,34 @@
     return el;
   }
 
-  function gridNote(role) {
-    if (!role) return 'Pick a role to see and edit what it may do.';
-    if (isArchonRole(role)) {
-      return 'The Archon role holds every permission and is read-only — that is what makes it impossible to lock yourself out of this page. To give a power away, hand it to one of the ranks below instead.';
+  function gridNote(rank) {
+    if (!rank) return 'Pick a rank to see and edit what it may do.';
+    if (isArchonRank(rank)) {
+      return 'The Archon rank holds every permission and is read-only — that is what makes it impossible to lock yourself out of this page. To give a power away, hand it to one of the ranks below instead.';
     }
-    if (isRankRole(role)) {
-      return `Everything a ${role.label || role.role_key} can do, and yours to change — every builder at this rank is affected immediately. “Reset to default” puts it back to the shipped ladder.`;
+    if (isRankRank(rank)) {
+      return `Everything a ${rank.label || rank.rank_key} can do, and yours to change — every builder at this rank is affected immediately. “Reset to default” puts it back to the shipped ladder.`;
     }
-    return 'Toggle the everyday permissions this role carries. Owner powers can only go to a rank role, not to a custom one.';
+    return 'Toggle the everyday permissions this rank carries. Owner powers can only go to a ladder rank, not to a custom one.';
   }
 
   function renderGrid() {
     const grid = document.getElementById('gov-grid');
-    const role = selectedRole();
-    document.getElementById('gov-grid-title').textContent = role
-      ? `Permissions — ${role.label || role.role_key}` : 'Permissions';
-    document.getElementById('gov-grid-note').textContent = gridNote(role);
+    const rank = selectedRank();
+    document.getElementById('gov-grid-title').textContent = rank
+      ? `Permissions — ${rank.label || rank.rank_key}` : 'Permissions';
+    document.getElementById('gov-grid-note').textContent = gridNote(rank);
 
-    // The reset escape hatch — only a rank role has a catalog default, and the
+    // The reset escape hatch — only a ladder rank has a catalog default, and the
     // Archon one never drifts from it, so it shows on exactly the three editable ones.
     const resetBox = document.getElementById('gov-reset');
     resetBox.innerHTML = '';
-    if (isRankRole(role) && !isArchonRole(role)) {
+    if (isRankRank(rank) && !isArchonRank(rank)) {
       const btn = document.createElement('button');
       btn.type = 'button';
       btn.className = 'gov-btn gov-btn--ghost gov-btn--small';
       btn.textContent = 'Reset to default';
-      btn.addEventListener('click', () => resetRole(role, btn));
+      btn.addEventListener('click', () => resetRank(rank, btn));
       resetBox.appendChild(btn);
     }
 
@@ -206,30 +206,30 @@
     // identity is not a row anyone can act on here.
     const humanPerms = permissions.filter((p) => !principals.some((pr) => pr.permission === p.key));
     // Three groups, split by WHY a row is or isn't editable rather than by the old
-    // single `grantable` flag — which since ADR 0172 answers only the custom-role case.
+    // single `grantable` flag — which since ADR 0172 answers only the custom-rank case.
     const substrate = humanPerms.filter((p) => p.substrate);
     const ownerPowers = humanPerms.filter((p) => p.system && !p.substrate);
     const operational = humanPerms.filter((p) => !p.system);
 
-    const ownerHead = !role || isRankRole(role)
+    const ownerHead = !rank || isRankRank(rank)
       ? `Owner powers (${ownerPowers.length})`
-      : `Owner powers — locked for custom roles (${ownerPowers.length})`;
+      : `Owner powers — locked for custom ranks (${ownerPowers.length})`;
 
-    grid.appendChild(section(`Operational (${operational.length})`, operational.map((p) => permRow(p, role))));
-    grid.appendChild(section(ownerHead, ownerPowers.map((p) => permRow(p, role))));
-    grid.appendChild(section(`Enforced outside the app — always locked (${substrate.length})`, substrate.map((p) => permRow(p, role))));
+    grid.appendChild(section(`Operational (${operational.length})`, operational.map((p) => permRow(p, rank))));
+    grid.appendChild(section(ownerHead, ownerPowers.map((p) => permRow(p, rank))));
+    grid.appendChild(section(`Enforced outside the app — always locked (${substrate.length})`, substrate.map((p) => permRow(p, rank))));
   }
 
-  // Restore a rank role to the shipped ladder. Confirmed because it is the one
-  // action here that discards work in bulk — a drifted role can be ~60 rows.
-  async function resetRole(role, btn) {
-    const label = role.label || role.role_key;
+  // Restore a ladder rank to the shipped ladder. Confirmed because it is the one
+  // action here that discards work in bulk — a drifted rank can be ~60 rows.
+  async function resetRank(rank, btn) {
+    const label = rank.label || rank.rank_key;
     if (!window.confirm(`Reset ${label} to its default permissions?\n\nEvery change you've made to this rank is discarded, and it takes effect for every builder at this rank on their next request.`)) return;
     btn.disabled = true;
     try {
-      const out = await sendJson('POST', `/governance/roles/${encodeURIComponent(role.role_key)}/reset`);
+      const out = await sendJson('POST', `/government/ranks/${encodeURIComponent(rank.rank_key)}/reset`);
       toast(`${label} reset to its default ${out.permission_count} permissions.`);
-      await reloadRoles();
+      await reloadRanks();
     } catch (err) {
       if (err && err.kind === '401') return;
       toast(`Could not reset: ${err.message || err}`);
@@ -237,12 +237,12 @@
     }
   }
 
-  async function toggleGrant(role, permissionKey, grant, btn) {
+  async function toggleGrant(rank, permissionKey, grant, btn) {
     btn.disabled = true;
     try {
-      await sendJson(grant ? 'PUT' : 'DELETE', `/governance/roles/${encodeURIComponent(role.role_key)}/permissions/${encodeURIComponent(permissionKey)}`);
+      await sendJson(grant ? 'PUT' : 'DELETE', `/government/ranks/${encodeURIComponent(rank.rank_key)}/permissions/${encodeURIComponent(permissionKey)}`);
       toast(grant ? `Granted ${permissionKey}.` : `Revoked ${permissionKey}.`);
-      await reloadRoles();
+      await reloadRanks();
     } catch (err) {
       if (err && err.kind === '401') return;
       toast(`Could not ${grant ? 'grant' : 'revoke'}: ${err.message || err}`);
@@ -256,7 +256,7 @@
     const box = document.getElementById('gov-assignments');
     box.innerHTML = '';
     if (assignments.length === 0) {
-      box.innerHTML = `<p class="gov-empty">No role assignments yet.</p>`;
+      box.innerHTML = `<p class="gov-empty">No rank assignments yet.</p>`;
       return;
     }
     const wrap = document.createElement('section');
@@ -265,11 +265,11 @@
       const row = document.createElement('div');
       row.className = 'gov-assign-row';
       const who = `${escapeHtml(a.display_name || a.github_login || `builder ${a.builder_id}`)} <span class="muted">(#${escapeHtml(String(a.builder_id))} · ${escapeHtml(a.rank || '')})</span>`;
-      const rolePill = a.is_system
-        ? `<span class="gov-pill gov-pill--seeded">${escapeHtml(a.role_label || a.role_key)} · via rank</span>`
-        : `<span class="gov-pill gov-pill--custom">${escapeHtml(a.role_label || a.role_key)}</span>`;
+      const rankPill = a.is_system
+        ? `<span class="gov-pill gov-pill--seeded">${escapeHtml(a.rank_label || a.rank_key)} · via rank</span>`
+        : `<span class="gov-pill gov-pill--custom">${escapeHtml(a.rank_label || a.rank_key)}</span>`;
       const action = a.is_system ? '' : `<button type="button" class="gov-btn gov-btn--ghost gov-btn--small" data-act="unassign">Remove</button>`;
-      row.innerHTML = `<span class="gov-assign-row__who">${who}</span>${rolePill}${action}`;
+      row.innerHTML = `<span class="gov-assign-row__who">${who}</span>${rankPill}${action}`;
       const btn = row.querySelector('[data-act=unassign]');
       if (btn) btn.addEventListener('click', () => unassign(a, btn));
       wrap.appendChild(row);
@@ -278,18 +278,18 @@
   }
 
   function renderAssignSelect() {
-    const sel = document.getElementById('gov-assign-role');
-    const custom = roles.filter((r) => !r.is_system);
+    const sel = document.getElementById('gov-assign-rank');
+    const custom = ranks.filter((r) => !r.is_system);
     sel.innerHTML = custom.length
-      ? custom.map((r) => `<option value="${escapeHtml(r.role_key)}">${escapeHtml(r.label || r.role_key)}</option>`).join('')
-      : `<option value="" disabled selected>No custom roles yet</option>`;
+      ? custom.map((r) => `<option value="${escapeHtml(r.rank_key)}">${escapeHtml(r.label || r.rank_key)}</option>`).join('')
+      : `<option value="" disabled selected>No custom ranks yet</option>`;
   }
 
   async function unassign(a, btn) {
     btn.disabled = true;
     try {
-      await sendJson('DELETE', `/governance/assignments/${encodeURIComponent(a.builder_id)}/${encodeURIComponent(a.role_key)}`);
-      toast(`Removed ${a.role_label || a.role_key} from builder ${a.builder_id}.`);
+      await sendJson('DELETE', `/government/assignments/${encodeURIComponent(a.builder_id)}/${encodeURIComponent(a.rank_key)}`);
+      toast(`Removed ${a.rank_label || a.rank_key} from builder ${a.builder_id}.`);
       await reloadAssignments();
     } catch (err) {
       if (err && err.kind === '401') return;
@@ -320,26 +320,26 @@
 
   // ---- loads ---------------------------------------------------------------
 
-  async function reloadRoles() {
-    const data = await fetchJson('/governance/roles');
-    roles = data.roles || [];
-    if (!roles.some((r) => r.role_key === selectedRoleKey)) selectedRoleKey = roles.length ? roles[0].role_key : null;
-    renderRoles();
+  async function reloadRanks() {
+    const data = await fetchJson('/government/ranks');
+    ranks = data.ranks || [];
+    if (!ranks.some((r) => r.rank_key === selectedRankKey)) selectedRankKey = ranks.length ? ranks[0].rank_key : null;
+    renderRanks();
     renderGrid();
     renderAssignSelect();
   }
 
   async function reloadAssignments() {
-    const data = await fetchJson('/governance/assignments');
+    const data = await fetchJson('/government/assignments');
     assignments = data.assignments || [];
     renderAssignments();
   }
 
   async function load() {
-    const perms = await fetchJson('/governance/permissions');
+    const perms = await fetchJson('/government/permissions');
     permissions = perms.permissions || [];
     principals = perms.principals || [];
-    await reloadRoles();
+    await reloadRanks();
     await reloadAssignments();
     renderPrincipals();
   }
@@ -352,20 +352,20 @@
       const btn = e.target.querySelector('button');
       btn.disabled = true;
       const body = {
-        role_key: document.getElementById('gov-create-key').value.trim(),
+        rank_key: document.getElementById('gov-create-key').value.trim(),
         label: document.getElementById('gov-create-label').value.trim(),
       };
       const desc = document.getElementById('gov-create-desc').value.trim();
       if (desc) body.description = desc;
       try {
-        const r = await sendJson('POST', '/governance/roles', body);
-        toast(`Created role ${r.role ? r.role.role_key : body.role_key}.`);
+        const r = await sendJson('POST', '/government/ranks', body);
+        toast(`Created rank ${r.rank ? r.rank.rank_key : body.rank_key}.`);
         e.target.reset();
-        selectedRoleKey = body.role_key;
-        await reloadRoles();
+        selectedRankKey = body.rank_key;
+        await reloadRanks();
       } catch (err) {
         if (err && err.kind === '401') return;
-        toast(`Could not create role: ${err.message || err}`);
+        toast(`Could not create rank: ${err.message || err}`);
       } finally {
         btn.disabled = false;
       }
@@ -375,12 +375,12 @@
       e.preventDefault();
       const btn = e.target.querySelector('button');
       const builderId = Number(document.getElementById('gov-assign-builder').value);
-      const roleKey = document.getElementById('gov-assign-role').value;
-      if (!roleKey) { toast('Create a custom role first.'); return; }
+      const rankKey = document.getElementById('gov-assign-rank').value;
+      if (!rankKey) { toast('Create a custom rank first.'); return; }
       btn.disabled = true;
       try {
-        await sendJson('POST', '/governance/assignments', { builder_id: builderId, role_key: roleKey });
-        toast(`Assigned ${roleKey} to builder ${builderId}.`);
+        await sendJson('POST', '/government/assignments', { builder_id: builderId, rank_key: rankKey });
+        toast(`Assigned ${rankKey} to builder ${builderId}.`);
         e.target.reset();
         await reloadAssignments();
       } catch (err) {
@@ -402,9 +402,9 @@
 
   async function init() {
     // Confirm rank for a friendly sealed notice; the server gates the page and
-    // every /governance endpoint on `governance.manage` regardless (cosmetic
-    // defence-in-depth). governance.manage is system:true, so only the archon
-    // rank-role can hold it — rank is an accurate client-side proxy.
+    // every /governance endpoint on `government.manage` regardless (cosmetic
+    // defence-in-depth). government.manage is system:true, so only the archon
+    // rank can hold it — rank is an accurate client-side proxy.
     let me;
     try {
       me = await fetchJson('/me');
@@ -416,7 +416,7 @@
     const rank = (me && (me.builder || me).rank || '').toLowerCase();
     if (rank !== 'archon') { showSealed(); return; }
 
-    document.getElementById('gov-sub').textContent = 'Roles, permissions, and who holds them. Ranks below Archon are yours to shape; what the substrate enforces stays locked.';
+    document.getElementById('gov-sub').textContent = 'Ranks, permissions, and who holds them. Ranks below Archon are yours to shape; what the substrate enforces stays locked.';
     document.getElementById('gov-body').hidden = false;
     wireForms();
     try {

package/modules/hall-ui/public/harbor.js

@@ -9,7 +9,7 @@
 // shows a restricted notice below the Metic floor — DEFENCE IN DEPTH only. The data +
 // mutation endpoints (/boxes, /boxes/:id/close, /boxes/:id/block) are ALSO gated
 // server-side on `box.fleet.manage` (ADR 0016), and the page itself is gated by
-// serve-internal.js requireGovernancePage — whose own floor is `page.view.governance`,
+// serve-internal.js requireGovernmentPage — whose own floor is `page.view.government`,
 // metic since ADR 0157. On a 401 it redirects into the web sign-in flow.
 
 (() => {
@@ -326,9 +326,9 @@
       me = null;
     }
     const rank = (me && (me.builder || me).rank || '').toLowerCase();
-    // ADR 0157: Harbor sits at the `page.view.governance` floor (metic), and the fleet
+    // ADR 0157: Harbor sits at the `page.view.government` floor (metic), and the fleet
     // data it reads is `box.fleet.manage` (also metic now). Cosmetic —
-    // requireGovernancePage + the route gates are the wall; this just picks body vs
+    // requireGovernmentPage + the route gates are the wall; this just picks body vs
     // sealed notice.
     if (rank !== 'metic' && rank !== 'archon') { showSealed(); return; }
 

package/modules/hall-ui/public/shell.js

@@ -12,7 +12,7 @@
 //     top bar (drawer toggle, page title, greeting slot) into the static mounts
 //     (#app-sidebar / #app-topbar / #app-foot) every hall page carries;
 //   - rank-gate nav items COSMETICALLY (server-side page gates remain the real
-//     access control — serve-internal.js requireGovernancePage etc.);
+//     access control — serve-internal.js requireGovernmentPage etc.);
 //   - on the index (body[data-page="home"]) route the three views (#home,
 //     #standing, #leaderboard) plus the #achievements alias into Standing. The
 //     `#/task|idea|blocker/N` deep-link hashes belong to builders.js and are
@@ -97,13 +97,15 @@
   //   work      — signed, but for newcomers only once the "ship three" stage is
   //               current (mirrors the old #hall-nav-work rule, task #833)
   //   archon    — rank === 'archon'
-  //   governance — rank is metic or archon (ADR 0157): the monitoring/ops pages.
-  //               Mirrors the server's `page.view.governance` floor, which that ADR
-  //               lowered archon→metic. Cosmetic only — requireGovernancePage is the wall.
+  //   government — rank is metic or archon (ADR 0157): the monitoring/ops pages.
+  //   NB this gate key is a RANK ALIAS meaning metic-or-archon; it is NOT the
+  //   `government` MODULE key, and the two are unrelated (ADR 0174).
+  //               Mirrors the server's `page.view.government` floor, which that ADR
+  //               lowered archon→metic. Cosmetic only — requireGovernmentPage is the wall.
   // `view` marks an index view (hash-routed); `module` gates on window.__MODULES__.
   // task 2175: grouped by AUDIENCE of the data, so the sidebar reads in coherent
   // runs instead of one long list — the project (unlabeled), You, Community,
-  // Docs, Governance. A group's `gate` must match its most permissive item's, or the
+  // Docs, Government. A group's `gate` must match its most permissive item's, or the
   // head renders over nothing.
   var NAV = [
     { group: '', items: [
@@ -143,7 +145,7 @@
       // requireProjectCuratePage is the wall — but a nav that disagrees with the
       // gate teaches the ladder wrong. The module gate hides the tab on
       // instances without the platform-identity hub.
-      { id: 'people', label: 'People', icon: 'people', href: '/people', gate: 'governance', module: 'platform-identity' },
+      { id: 'people', label: 'People', icon: 'people', href: '/people', gate: 'government', module: 'platform-identity' },
     ] },
     { group: 'Docs', gate: 'signed', items: [
       // task 1002710: primer + diagrams were gate:'member' (rank !== xenos) to
@@ -168,18 +170,20 @@
       // subdomain — external so the rewrite shim doesn't turn it into /builders/docs.
       { id: 'apidocs', label: 'API docs', icon: 'docs', href: '/docs', gate: 'signed', external: true },
     ] },
-    // Relabeled 'Archon' → 'Governance' in ADR 0157: these pages are no longer
+    // Relabeled 'Archon' → 'Governance' in ADR 0157, then → 'Government' by ADR 0174: these pages are no longer
     // Archon-only, so a group header reading "Archon" over items a Metic can open
     // would misdescribe the ladder to the builders most likely to be learning it.
-    { group: 'Governance', gate: 'governance', items: [
-      { id: 'watch', label: 'Watch', icon: 'admin', href: '/watch', gate: 'governance' },
-      { id: 'harbor', label: 'Harbor', icon: 'admin', href: '/harbor', gate: 'governance', module: 'dev-box' },
-      { id: 'gate', label: 'Gate', icon: 'admin', href: '/gate', gate: 'governance' },
-      { id: 'sessions', label: 'Sessions', icon: 'admin', href: '/sessions', gate: 'governance' },
+    { group: 'Government', gate: 'government', items: [
+      { id: 'watch', label: 'Watch', icon: 'admin', href: '/watch', gate: 'government' },
+      { id: 'harbor', label: 'Harbor', icon: 'admin', href: '/harbor', gate: 'government', module: 'dev-box' },
+      { id: 'gate', label: 'Gate', icon: 'admin', href: '/gate', gate: 'government' },
+      { id: 'sessions', label: 'Sessions', icon: 'admin', href: '/sessions', gate: 'government' },
       // BV1.R113: the roles-and-permissions tab (ADR 0151). The one genuinely
-      // Archon-only item the 'governance' gate comment anticipated — cosmetic
-      // only; requireGovernanceManagePage (the governance.manage atom) is the wall.
-      { id: 'governance', label: 'Roles', icon: 'admin', href: '/governance', gate: 'archon' },
+      // Archon-only item the 'government' gate comment anticipated — cosmetic
+      // only; requireGovernmentManagePage (the government.manage atom) is the wall.
+      { id: 'government', label: 'Permissions', icon: 'admin', href: '/government', gate: 'archon' }  // NOT 'Ranks': /ranks is the signed-in ladder explainer and two nav items
+      //   reading 'Ranks' is the confusion this rename exists to remove. This tab
+      //   is where a rank's permissions are granted, so it says what it does.,
     ] },
   ];
 
@@ -420,10 +424,10 @@
       case 'member': return member;
       case 'work': return authed && (member || access.showWork);
       case 'archon': return authed && access.rank === 'archon';
-      // ADR 0157: the monitoring/ops pages sit at the `page.view.governance` floor,
+      // ADR 0157: the monitoring/ops pages sit at the `page.view.government` floor,
       // which is metic. Kept as its own key rather than widening 'archon', so a
       // genuinely Archon-only nav item can still be added later.
-      case 'governance': return authed && (access.rank === 'metic' || access.rank === 'archon');
+      case 'government': return authed && (access.rank === 'metic' || access.rank === 'archon');
       default: return false;
     }
   }

package/modules/hall-ui/public/watch.js

@@ -885,9 +885,9 @@
       return;
     }
 
-    // ADR 0157: Watch sits at the `page.view.governance` floor (metic), and every panel
+    // ADR 0157: Watch sits at the `page.view.government` floor (metic), and every panel
     // it reads (roster, security reports, audit log, sessions, box costs) delegated to
-    // metic with it. Cosmetic — requireGovernancePage + the route gates are the wall.
+    // metic with it. Cosmetic — requireGovernmentPage + the route gates are the wall.
     if (!builder || (builder.rank !== 'metic' && builder.rank !== 'archon')) {
       showSealed('This page is available from the Metic rank up. Your current rank does not grant access.');
       return;

package/modules/lifecycle/routes/gate-approvals.js

@@ -68,7 +68,7 @@ module.exports = function buildGateApprovalsRouter() {
   // BV1.R105 left this on requireRank because `gate_approval.decide` was declared over
   // the /approve WRITE only and no atom named the read. ADR 0157 extends the catalog
   // with exactly that atom — `gate_approval.read`, floor metic — so the mapping is now
-  // one the catalog makes. The split is load-bearing, not cosmetic: `page.view.governance`
+  // one the catalog makes. The split is load-bearing, not cosmetic: `page.view.government`
   // opens /gate to Metic, and without a Metic-readable data endpoint that page would
   // render nothing but a 403. Approving a held PR stays archon (`.decide`, system).
   router.get('/gate-approvals', auth.requireBuilder, auth.requirePermission('gate_approval.read'), async (req, res) => {

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.184",
+  "version": "1.19.186",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.184",
+      "version": "1.19.186",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.184",
+  "version": "1.19.186",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/scripts/gds/publish-manifest.js

@@ -61,7 +61,6 @@ const PUBLISH_ALLOWLIST = [
   'modules/sessions/',
   'modules/autonomy/',
   'modules/security/',
-  'modules/governance/',     // configurable roles & permissions (BV1 goal 1000030, ADR 0151) — the rank/permission machinery publishes AS the open-source methodology (ADR 0065 §4 / ADR 0098); it is in PROTECTED_GLOBS for write-protection, NOT publish-exclusion. default:true. Renamed → modules/government/ (ADR 0174); dropped with the folder in goal 1000068 R04.
   'modules/government/',     // the same machinery under its post-ADR-0174 name (goal 1000068, task 1003003). Added in lockstep with the protected-surfaces.json entry: publish_manifest asserts every PROTECTED_GLOB is either topology-excluded or publishable, so registering the glob as protected WITHOUT this line default-denies the module from the published core — the open-source methodology would silently lose its permission machinery at the next release.
   'modules/hall-ui/',
   'modules/status-ui/',
@@ -213,7 +212,6 @@ const INSTANCE_EXCLUDE = [
   'config/devbox-app.json',
   'config/hierarchy.json',
   'config/government.json',
-  'config/governance.json',   // pre-ADR-0174 spelling — a live instance may still carry one; it is host content and stays denied
   'CODEOWNERS',              // names the owner (a protected surface, excluded as identity)
   // instance SEED migrations — this host's scope-truth SQL (planning seeds, world data).
   // ADR 0105: a consumer's core must not carry them; migrate.sh reads instance seeds from

package/scripts/gds/seed-governance-tasks.js

@@ -216,7 +216,7 @@ const TASKS = [
     title: 'Governance API routes (roles/perms/assignments CRUD)',
     description: `**Why:** the tab's server surface.
 
-**Done when:** routes list roles/permissions/assignments, create a role, toggle an operational permission on a role, and assign a role to a builder — all gated \`governance.manage\` (Archon), system permissions rejected as non-grantable server-side, and pinned in route-rank-check. Depends on R97 + R109.`,
+**Done when:** routes list roles/permissions/assignments, create a role, toggle an operational permission on a role, and assign a role to a builder — all gated \`government.manage\` (Archon), system permissions rejected as non-grantable server-side, and pinned in route-rank-check. Depends on R97 + R109.`,
   },
   {
     ref: 'R111', kind: 'feature', priority: 3, est_minutes: 180, manual_degree: 2, credits_reward: 55,