@bongos/core 1.19.185 → 1.19.186

package/modules/hall-ui/public/{governance.js → government.js}

@@ -1,24 +1,24 @@
-// public-builders/governance.js — Governance (/builders/governance).
+// modules/hall-ui/public/government.js — Government (/builders/government).
 //
-// The roles/permissions/assignments tab (BV1.R111, ADR 0151 §2) over the R110
-// CRUD routes. Discord-style: pick a role on the left, toggle its permissions in
-// the grid, assign custom roles to builders below.
+// The ranks/permissions/assignments tab (BV1.R111, ADR 0151 §2) over the R110
+// CRUD routes. Discord-style: pick a rank on the left, toggle its permissions in
+// the grid, assign custom ranks to builders below.
 //
-// Since ADR 0172 grantability depends on WHICH role is selected, so this page's
+// Since ADR 0172 grantability depends on WHICH rank is selected, so this page's
 // central job is rendering three different locks honestly. The SERVER enforces all
 // of them (ADR 0016 — nothing here grants anything; a disabled button is a
 // courtesy, `isGrantableTo` on the route is the wall):
 //   • SUBSTRATE permissions (deploy / protected paths / ssh) render LOCKED for
-//     every role, always. They are enforced outside the app (ADR 0043), so a grant
+//     every rank, always. They are enforced outside the app (ADR 0043), so a grant
 //     row confers nothing — showing a working toggle would be the UI lying.
-//   • OWNER POWERS (the seven in-app `system` keys) render LOCKED on a custom role
-//     and TOGGLABLE on a sub-Archon rank-role. That asymmetry is the whole of the
+//   • OWNER POWERS (the seven in-app `system` keys) render LOCKED on a custom rank
+//     and TOGGLABLE on a sub-Archon rank. That asymmetry is the whole of the
 //     owner's 2026-08-16 decision, and the section header says so out loud.
-//   • the ARCHON rank-role is read-only in full: it holds everything, and its
+//   • the ARCHON rank is read-only in full: it holds everything, and its
 //     immutability is what makes it impossible to click your way into locking the
 //     owner out of this tab. The API refuses it as `archon_rank_immutable`.
-// ASSIGNMENT of any rank-role is still refused (`seeded_rank_assignment_forbidden`)
-// — you get a rank-role by holding the rank, so that dial is the rank itself.
+// ASSIGNMENT of any rank is still refused (`seeded_rank_assignment_forbidden`)
+// — you get a rank by holding the rank, so that dial is the rank itself.
 //
 // Like The Gate, this reads /api/bongos/me for a friendly Sealed notice —
 // DEFENCE IN DEPTH only. Every /government/* endpoint (reads included) is ALSO
@@ -63,50 +63,50 @@
 
   // The R110 refusal codes, translated for the person clicking.
   const ERROR_COPY = {
-    permission_not_grantable: 'That permission can’t be granted to this role. (The server’s reply says which of the three walls applied.)',
-    archon_rank_immutable: 'The Archon role is read-only — it holds every permission, which is what keeps you from locking yourself out of this page.',
-    rank_has_no_default: 'Only a rank role has a catalog default to reset to. Revoke a custom role’s permissions individually instead.',
-    seeded_rank_assignment_forbidden: 'Rank roles are assigned by rank itself — change the builder’s rank instead.',
-    rank_exists: 'A role with that key already exists.',
-    rank_not_found: 'That role no longer exists — refreshing.',
+    permission_not_grantable: 'That permission can’t be granted to this rank. (The server’s reply says which of the three walls applied.)',
+    archon_rank_immutable: 'The Owner rank is read-only — it holds every permission, which is what keeps you from locking yourself out of this page.',
+    rank_has_no_default: 'Only a ladder rank has a catalog default to reset to. Revoke a custom rank’s permissions individually instead.',
+    seeded_rank_assignment_forbidden: 'Ladder ranks are assigned by rank itself — change the builder’s rank instead.',
+    rank_exists: 'A rank with that key already exists.',
+    rank_not_found: 'That rank no longer exists — refreshing.',
     builder_not_found: 'No builder with that id.',
     unknown_permission: 'The permission catalog does not define that key.',
-    bad_rank_key: 'Role keys are kebab-case: lowercase letters, digits, dashes.',
+    bad_rank_key: 'Rank keys are kebab-case: lowercase letters, digits, dashes.',
     validation_failed: 'Missing or invalid fields.',
   };
   const friendlyError = (code) => ERROR_COPY[code] || null;
 
   // ---- state ---------------------------------------------------------------
 
-  let roles = [];        // [{ rank_key, label, description, is_system, seeded_rank, permissions: [] }]
+  let ranks = [];        // [{ rank_key, label, description, is_system, seeded_rank, permissions: [] }]
   let permissions = [];  // catalog rows: [{ key, system, floor, guards, grantable }]
   let principals = [];   // [{ system_role, permission, guards }]
-  let assignments = [];  // [{ builder_id, github_login, display_name, rank, rank_key, role_label, is_system }]
-  let selectedRoleKey = null;
+  let assignments = [];  // [{ builder_id, github_login, display_name, rank, rank_key, rank_label, is_system }]
+  let selectedRankKey = null;
 
-  const selectedRole = () => roles.find((r) => r.rank_key === selectedRoleKey) || null;
+  const selectedRank = () => ranks.find((r) => r.rank_key === selectedRankKey) || null;
 
-  // ---- render: role list ---------------------------------------------------
+  // ---- render: rank list ---------------------------------------------------
 
-  function renderRoles() {
-    const list = document.getElementById('gov-role-list');
+  function renderRanks() {
+    const list = document.getElementById('gov-rank-list');
     list.innerHTML = '';
-    for (const role of roles) {
-      // The Archon row is called out as read-only, because it is the one role in
+    for (const rank of ranks) {
+      // The Archon row is called out as read-only, because it is the one rank in
       // this list a click will not change and the reader should know before trying.
-      const pill = isArchonRole(role)
-        ? `<span class="gov-pill gov-pill--locked">rank role · read-only</span>`
-        : role.is_system
-          ? `<span class="gov-pill gov-pill--seeded">rank role</span>`
+      const pill = isArchonRank(rank)
+        ? `<span class="gov-pill gov-pill--locked">ladder · read-only</span>`
+        : rank.is_system
+          ? `<span class="gov-pill gov-pill--seeded">ladder</span>`
           : `<span class="gov-pill gov-pill--custom">custom</span>`;
       const btn = document.createElement('button');
       btn.type = 'button';
-      btn.className = 'gov-role';
-      btn.setAttribute('aria-pressed', role.rank_key === selectedRoleKey ? 'true' : 'false');
+      btn.className = 'gov-rank';
+      btn.setAttribute('aria-pressed', rank.rank_key === selectedRankKey ? 'true' : 'false');
       btn.innerHTML =
-        `<span class="gov-role__head"><span class="gov-role__label">${escapeHtml(role.label || role.rank_key)}</span>${pill}</span>
-         <span class="gov-role__meta"><code>${escapeHtml(role.rank_key)}</code> · ${(role.permissions || []).length} permission${(role.permissions || []).length === 1 ? '' : 's'}</span>`;
-      btn.addEventListener('click', () => { selectedRoleKey = role.rank_key; renderRoles(); renderGrid(); });
+        `<span class="gov-rank__head"><span class="gov-rank__label">${escapeHtml(rank.label || rank.rank_key)}</span>${pill}</span>
+         <span class="gov-rank__meta"><code>${escapeHtml(rank.rank_key)}</code> · ${(rank.permissions || []).length} permission${(rank.permissions || []).length === 1 ? '' : 's'}</span>`;
+      btn.addEventListener('click', () => { selectedRankKey = rank.rank_key; renderRanks(); renderGrid(); });
       list.appendChild(btn);
     }
   }
@@ -117,34 +117,34 @@
   // right control, NEVER to decide authority — the route runs the real one and
   // refuses regardless of what this returns. Kept in the same order as the server's
   // so a future catalog change lands in one obvious place on each side.
-  const isArchonRole = (role) => !!role && role.is_system && role.seeded_rank === 'archon';
-  const isRankRole = (role) => !!role && role.is_system;
-  function grantableTo(p, role) {
-    if (!role || p.substrate) return false;
-    if (role.is_system) return role.seeded_rank !== 'archon';
+  const isArchonRank = (rank) => !!rank && rank.is_system && rank.seeded_rank === 'archon';
+  const isRankRank = (rank) => !!rank && rank.is_system;
+  function grantableTo(p, rank) {
+    if (!rank || p.substrate) return false;
+    if (rank.is_system) return rank.seeded_rank !== 'archon';
     return !!p.grantable;
   }
 
-  function permRow(p, role) {
-    const held = !!role && (role.permissions || []).includes(p.key);
+  function permRow(p, rank) {
+    const held = !!rank && (rank.permissions || []).includes(p.key);
     const row = document.createElement('div');
     row.className = 'gov-perm';
 
     // Why locked, in the words that tell the reader whether it is a policy they
     // could change or a fact they cannot. Three causes, three sentences.
     const lockReason = p.substrate
-      ? 'Enforced outside the app (the pre-push hook, the deploy audit, the server itself). Granting it here would change nothing, so it is locked for every role.'
-      : isArchonRole(role)
-        ? 'The Archon role holds everything and is read-only.'
-        : 'An owner-level permission. It can be handed to a rank role, but never to a custom one.';
+      ? 'Enforced outside the app (the pre-push hook, the deploy audit, the server itself). Granting it here would change nothing, so it is locked for every rank.'
+      : isArchonRank(rank)
+        ? 'The Archon rank holds everything and is read-only.'
+        : 'An owner-level permission. It can be handed to a ladder rank, but never to a custom one.';
 
     let control;
-    if (!role) {
+    if (!rank) {
       control = '';
-    } else if (!grantableTo(p, role)) {
+    } else if (!grantableTo(p, rank)) {
       control = `<span class="gov-pill gov-pill--locked" title="${escapeHtml(lockReason)}">locked</span>`;
-      // The Archon role is read-only rather than empty-handed, so say what it holds.
-      if (held && isArchonRole(role)) control = `<span class="gov-held-note">held</span>${control}`;
+      // The Archon rank is read-only rather than empty-handed, so say what it holds.
+      if (held && isArchonRank(rank)) control = `<span class="gov-held-note">held</span>${control}`;
     } else {
       control = `<button type="button" class="gov-toggle" aria-pressed="${held ? 'true' : 'false'}" data-perm="${escapeHtml(p.key)}">${held ? 'granted' : 'grant'}</button>`;
     }
@@ -158,7 +158,7 @@
        ${control}`;
 
     const btn = row.querySelector('button.gov-toggle');
-    if (btn) btn.addEventListener('click', () => toggleGrant(role, p.key, !held, btn));
+    if (btn) btn.addEventListener('click', () => toggleGrant(rank, p.key, !held, btn));
     return row;
   }
 
@@ -170,34 +170,34 @@
     return el;
   }
 
-  function gridNote(role) {
-    if (!role) return 'Pick a role to see and edit what it may do.';
-    if (isArchonRole(role)) {
-      return 'The Archon role holds every permission and is read-only — that is what makes it impossible to lock yourself out of this page. To give a power away, hand it to one of the ranks below instead.';
+  function gridNote(rank) {
+    if (!rank) return 'Pick a rank to see and edit what it may do.';
+    if (isArchonRank(rank)) {
+      return 'The Archon rank holds every permission and is read-only — that is what makes it impossible to lock yourself out of this page. To give a power away, hand it to one of the ranks below instead.';
     }
-    if (isRankRole(role)) {
-      return `Everything a ${role.label || role.rank_key} can do, and yours to change — every builder at this rank is affected immediately. “Reset to default” puts it back to the shipped ladder.`;
+    if (isRankRank(rank)) {
+      return `Everything a ${rank.label || rank.rank_key} can do, and yours to change — every builder at this rank is affected immediately. “Reset to default” puts it back to the shipped ladder.`;
     }
-    return 'Toggle the everyday permissions this role carries. Owner powers can only go to a rank role, not to a custom one.';
+    return 'Toggle the everyday permissions this rank carries. Owner powers can only go to a ladder rank, not to a custom one.';
   }
 
   function renderGrid() {
     const grid = document.getElementById('gov-grid');
-    const role = selectedRole();
-    document.getElementById('gov-grid-title').textContent = role
-      ? `Permissions — ${role.label || role.rank_key}` : 'Permissions';
-    document.getElementById('gov-grid-note').textContent = gridNote(role);
+    const rank = selectedRank();
+    document.getElementById('gov-grid-title').textContent = rank
+      ? `Permissions — ${rank.label || rank.rank_key}` : 'Permissions';
+    document.getElementById('gov-grid-note').textContent = gridNote(rank);
 
-    // The reset escape hatch — only a rank role has a catalog default, and the
+    // The reset escape hatch — only a ladder rank has a catalog default, and the
     // Archon one never drifts from it, so it shows on exactly the three editable ones.
     const resetBox = document.getElementById('gov-reset');
     resetBox.innerHTML = '';
-    if (isRankRole(role) && !isArchonRole(role)) {
+    if (isRankRank(rank) && !isArchonRank(rank)) {
       const btn = document.createElement('button');
       btn.type = 'button';
       btn.className = 'gov-btn gov-btn--ghost gov-btn--small';
       btn.textContent = 'Reset to default';
-      btn.addEventListener('click', () => resetRole(role, btn));
+      btn.addEventListener('click', () => resetRank(rank, btn));
       resetBox.appendChild(btn);
     }
 
@@ -206,30 +206,30 @@
     // identity is not a row anyone can act on here.
     const humanPerms = permissions.filter((p) => !principals.some((pr) => pr.permission === p.key));
     // Three groups, split by WHY a row is or isn't editable rather than by the old
-    // single `grantable` flag — which since ADR 0172 answers only the custom-role case.
+    // single `grantable` flag — which since ADR 0172 answers only the custom-rank case.
     const substrate = humanPerms.filter((p) => p.substrate);
     const ownerPowers = humanPerms.filter((p) => p.system && !p.substrate);
     const operational = humanPerms.filter((p) => !p.system);
 
-    const ownerHead = !role || isRankRole(role)
+    const ownerHead = !rank || isRankRank(rank)
       ? `Owner powers (${ownerPowers.length})`
-      : `Owner powers — locked for custom roles (${ownerPowers.length})`;
+      : `Owner powers — locked for custom ranks (${ownerPowers.length})`;
 
-    grid.appendChild(section(`Operational (${operational.length})`, operational.map((p) => permRow(p, role))));
-    grid.appendChild(section(ownerHead, ownerPowers.map((p) => permRow(p, role))));
-    grid.appendChild(section(`Enforced outside the app — always locked (${substrate.length})`, substrate.map((p) => permRow(p, role))));
+    grid.appendChild(section(`Operational (${operational.length})`, operational.map((p) => permRow(p, rank))));
+    grid.appendChild(section(ownerHead, ownerPowers.map((p) => permRow(p, rank))));
+    grid.appendChild(section(`Enforced outside the app — always locked (${substrate.length})`, substrate.map((p) => permRow(p, rank))));
   }
 
-  // Restore a rank role to the shipped ladder. Confirmed because it is the one
-  // action here that discards work in bulk — a drifted role can be ~60 rows.
-  async function resetRole(role, btn) {
-    const label = role.label || role.rank_key;
+  // Restore a ladder rank to the shipped ladder. Confirmed because it is the one
+  // action here that discards work in bulk — a drifted rank can be ~60 rows.
+  async function resetRank(rank, btn) {
+    const label = rank.label || rank.rank_key;
     if (!window.confirm(`Reset ${label} to its default permissions?\n\nEvery change you've made to this rank is discarded, and it takes effect for every builder at this rank on their next request.`)) return;
     btn.disabled = true;
     try {
-      const out = await sendJson('POST', `/government/ranks/${encodeURIComponent(role.rank_key)}/reset`);
+      const out = await sendJson('POST', `/government/ranks/${encodeURIComponent(rank.rank_key)}/reset`);
       toast(`${label} reset to its default ${out.permission_count} permissions.`);
-      await reloadRoles();
+      await reloadRanks();
     } catch (err) {
       if (err && err.kind === '401') return;
       toast(`Could not reset: ${err.message || err}`);
@@ -237,12 +237,12 @@
     }
   }
 
-  async function toggleGrant(role, permissionKey, grant, btn) {
+  async function toggleGrant(rank, permissionKey, grant, btn) {
     btn.disabled = true;
     try {
-      await sendJson(grant ? 'PUT' : 'DELETE', `/government/ranks/${encodeURIComponent(role.rank_key)}/permissions/${encodeURIComponent(permissionKey)}`);
+      await sendJson(grant ? 'PUT' : 'DELETE', `/government/ranks/${encodeURIComponent(rank.rank_key)}/permissions/${encodeURIComponent(permissionKey)}`);
       toast(grant ? `Granted ${permissionKey}.` : `Revoked ${permissionKey}.`);
-      await reloadRoles();
+      await reloadRanks();
     } catch (err) {
       if (err && err.kind === '401') return;
       toast(`Could not ${grant ? 'grant' : 'revoke'}: ${err.message || err}`);
@@ -256,7 +256,7 @@
     const box = document.getElementById('gov-assignments');
     box.innerHTML = '';
     if (assignments.length === 0) {
-      box.innerHTML = `<p class="gov-empty">No role assignments yet.</p>`;
+      box.innerHTML = `<p class="gov-empty">No rank assignments yet.</p>`;
       return;
     }
     const wrap = document.createElement('section');
@@ -265,11 +265,11 @@
       const row = document.createElement('div');
       row.className = 'gov-assign-row';
       const who = `${escapeHtml(a.display_name || a.github_login || `builder ${a.builder_id}`)} <span class="muted">(#${escapeHtml(String(a.builder_id))} · ${escapeHtml(a.rank || '')})</span>`;
-      const rolePill = a.is_system
-        ? `<span class="gov-pill gov-pill--seeded">${escapeHtml(a.role_label || a.rank_key)} · via rank</span>`
-        : `<span class="gov-pill gov-pill--custom">${escapeHtml(a.role_label || a.rank_key)}</span>`;
+      const rankPill = a.is_system
+        ? `<span class="gov-pill gov-pill--seeded">${escapeHtml(a.rank_label || a.rank_key)} · via rank</span>`
+        : `<span class="gov-pill gov-pill--custom">${escapeHtml(a.rank_label || a.rank_key)}</span>`;
       const action = a.is_system ? '' : `<button type="button" class="gov-btn gov-btn--ghost gov-btn--small" data-act="unassign">Remove</button>`;
-      row.innerHTML = `<span class="gov-assign-row__who">${who}</span>${rolePill}${action}`;
+      row.innerHTML = `<span class="gov-assign-row__who">${who}</span>${rankPill}${action}`;
       const btn = row.querySelector('[data-act=unassign]');
       if (btn) btn.addEventListener('click', () => unassign(a, btn));
       wrap.appendChild(row);
@@ -278,18 +278,18 @@
   }
 
   function renderAssignSelect() {
-    const sel = document.getElementById('gov-assign-role');
-    const custom = roles.filter((r) => !r.is_system);
+    const sel = document.getElementById('gov-assign-rank');
+    const custom = ranks.filter((r) => !r.is_system);
     sel.innerHTML = custom.length
       ? custom.map((r) => `<option value="${escapeHtml(r.rank_key)}">${escapeHtml(r.label || r.rank_key)}</option>`).join('')
-      : `<option value="" disabled selected>No custom roles yet</option>`;
+      : `<option value="" disabled selected>No custom ranks yet</option>`;
   }
 
   async function unassign(a, btn) {
     btn.disabled = true;
     try {
       await sendJson('DELETE', `/government/assignments/${encodeURIComponent(a.builder_id)}/${encodeURIComponent(a.rank_key)}`);
-      toast(`Removed ${a.role_label || a.rank_key} from builder ${a.builder_id}.`);
+      toast(`Removed ${a.rank_label || a.rank_key} from builder ${a.builder_id}.`);
       await reloadAssignments();
     } catch (err) {
       if (err && err.kind === '401') return;
@@ -320,11 +320,11 @@
 
   // ---- loads ---------------------------------------------------------------
 
-  async function reloadRoles() {
+  async function reloadRanks() {
     const data = await fetchJson('/government/ranks');
-    roles = data.roles || [];
-    if (!roles.some((r) => r.rank_key === selectedRoleKey)) selectedRoleKey = roles.length ? roles[0].rank_key : null;
-    renderRoles();
+    ranks = data.ranks || [];
+    if (!ranks.some((r) => r.rank_key === selectedRankKey)) selectedRankKey = ranks.length ? ranks[0].rank_key : null;
+    renderRanks();
     renderGrid();
     renderAssignSelect();
   }
@@ -339,7 +339,7 @@
     const perms = await fetchJson('/government/permissions');
     permissions = perms.permissions || [];
     principals = perms.principals || [];
-    await reloadRoles();
+    await reloadRanks();
     await reloadAssignments();
     renderPrincipals();
   }
@@ -359,13 +359,13 @@
       if (desc) body.description = desc;
       try {
         const r = await sendJson('POST', '/government/ranks', body);
-        toast(`Created role ${r.role ? r.role.rank_key : body.rank_key}.`);
+        toast(`Created rank ${r.rank ? r.rank.rank_key : body.rank_key}.`);
         e.target.reset();
-        selectedRoleKey = body.rank_key;
-        await reloadRoles();
+        selectedRankKey = body.rank_key;
+        await reloadRanks();
       } catch (err) {
         if (err && err.kind === '401') return;
-        toast(`Could not create role: ${err.message || err}`);
+        toast(`Could not create rank: ${err.message || err}`);
       } finally {
         btn.disabled = false;
       }
@@ -375,12 +375,12 @@
       e.preventDefault();
       const btn = e.target.querySelector('button');
       const builderId = Number(document.getElementById('gov-assign-builder').value);
-      const roleKey = document.getElementById('gov-assign-role').value;
-      if (!roleKey) { toast('Create a custom role first.'); return; }
+      const rankKey = document.getElementById('gov-assign-rank').value;
+      if (!rankKey) { toast('Create a custom rank first.'); return; }
       btn.disabled = true;
       try {
-        await sendJson('POST', '/government/assignments', { builder_id: builderId, rank_key: roleKey });
-        toast(`Assigned ${roleKey} to builder ${builderId}.`);
+        await sendJson('POST', '/government/assignments', { builder_id: builderId, rank_key: rankKey });
+        toast(`Assigned ${rankKey} to builder ${builderId}.`);
         e.target.reset();
         await reloadAssignments();
       } catch (err) {
@@ -404,7 +404,7 @@
     // Confirm rank for a friendly sealed notice; the server gates the page and
     // every /governance endpoint on `government.manage` regardless (cosmetic
     // defence-in-depth). government.manage is system:true, so only the archon
-    // rank-role can hold it — rank is an accurate client-side proxy.
+    // rank can hold it — rank is an accurate client-side proxy.
     let me;
     try {
       me = await fetchJson('/me');
@@ -416,7 +416,7 @@
     const rank = (me && (me.builder || me).rank || '').toLowerCase();
     if (rank !== 'archon') { showSealed(); return; }
 
-    document.getElementById('gov-sub').textContent = 'Roles, permissions, and who holds them. Ranks below Archon are yours to shape; what the substrate enforces stays locked.';
+    document.getElementById('gov-sub').textContent = 'Ranks, permissions, and who holds them. Ranks below Archon are yours to shape; what the substrate enforces stays locked.';
     document.getElementById('gov-body').hidden = false;
     wireForms();
     try {

package/modules/hall-ui/public/harbor.js

@@ -9,7 +9,7 @@
 // shows a restricted notice below the Metic floor — DEFENCE IN DEPTH only. The data +
 // mutation endpoints (/boxes, /boxes/:id/close, /boxes/:id/block) are ALSO gated
 // server-side on `box.fleet.manage` (ADR 0016), and the page itself is gated by
-// serve-internal.js requireGovernancePage — whose own floor is `page.view.government`,
+// serve-internal.js requireGovernmentPage — whose own floor is `page.view.government`,
 // metic since ADR 0157. On a 401 it redirects into the web sign-in flow.
 
 (() => {
@@ -328,7 +328,7 @@
     const rank = (me && (me.builder || me).rank || '').toLowerCase();
     // ADR 0157: Harbor sits at the `page.view.government` floor (metic), and the fleet
     // data it reads is `box.fleet.manage` (also metic now). Cosmetic —
-    // requireGovernancePage + the route gates are the wall; this just picks body vs
+    // requireGovernmentPage + the route gates are the wall; this just picks body vs
     // sealed notice.
     if (rank !== 'metic' && rank !== 'archon') { showSealed(); return; }
 

package/modules/hall-ui/public/shell.js

@@ -12,7 +12,7 @@
 //     top bar (drawer toggle, page title, greeting slot) into the static mounts
 //     (#app-sidebar / #app-topbar / #app-foot) every hall page carries;
 //   - rank-gate nav items COSMETICALLY (server-side page gates remain the real
-//     access control — serve-internal.js requireGovernancePage etc.);
+//     access control — serve-internal.js requireGovernmentPage etc.);
 //   - on the index (body[data-page="home"]) route the three views (#home,
 //     #standing, #leaderboard) plus the #achievements alias into Standing. The
 //     `#/task|idea|blocker/N` deep-link hashes belong to builders.js and are
@@ -97,13 +97,15 @@
   //   work      — signed, but for newcomers only once the "ship three" stage is
   //               current (mirrors the old #hall-nav-work rule, task #833)
   //   archon    — rank === 'archon'
-  //   governance — rank is metic or archon (ADR 0157): the monitoring/ops pages.
+  //   government — rank is metic or archon (ADR 0157): the monitoring/ops pages.
+  //   NB this gate key is a RANK ALIAS meaning metic-or-archon; it is NOT the
+  //   `government` MODULE key, and the two are unrelated (ADR 0174).
   //               Mirrors the server's `page.view.government` floor, which that ADR
-  //               lowered archon→metic. Cosmetic only — requireGovernancePage is the wall.
+  //               lowered archon→metic. Cosmetic only — requireGovernmentPage is the wall.
   // `view` marks an index view (hash-routed); `module` gates on window.__MODULES__.
   // task 2175: grouped by AUDIENCE of the data, so the sidebar reads in coherent
   // runs instead of one long list — the project (unlabeled), You, Community,
-  // Docs, Governance. A group's `gate` must match its most permissive item's, or the
+  // Docs, Government. A group's `gate` must match its most permissive item's, or the
   // head renders over nothing.
   var NAV = [
     { group: '', items: [
@@ -143,7 +145,7 @@
       // requireProjectCuratePage is the wall — but a nav that disagrees with the
       // gate teaches the ladder wrong. The module gate hides the tab on
       // instances without the platform-identity hub.
-      { id: 'people', label: 'People', icon: 'people', href: '/people', gate: 'governance', module: 'platform-identity' },
+      { id: 'people', label: 'People', icon: 'people', href: '/people', gate: 'government', module: 'platform-identity' },
     ] },
     { group: 'Docs', gate: 'signed', items: [
       // task 1002710: primer + diagrams were gate:'member' (rank !== xenos) to
@@ -168,18 +170,20 @@
       // subdomain — external so the rewrite shim doesn't turn it into /builders/docs.
       { id: 'apidocs', label: 'API docs', icon: 'docs', href: '/docs', gate: 'signed', external: true },
     ] },
-    // Relabeled 'Archon' → 'Governance' in ADR 0157: these pages are no longer
+    // Relabeled 'Archon' → 'Governance' in ADR 0157, then → 'Government' by ADR 0174: these pages are no longer
     // Archon-only, so a group header reading "Archon" over items a Metic can open
     // would misdescribe the ladder to the builders most likely to be learning it.
-    { group: 'Governance', gate: 'governance', items: [
-      { id: 'watch', label: 'Watch', icon: 'admin', href: '/watch', gate: 'governance' },
-      { id: 'harbor', label: 'Harbor', icon: 'admin', href: '/harbor', gate: 'governance', module: 'dev-box' },
-      { id: 'gate', label: 'Gate', icon: 'admin', href: '/gate', gate: 'governance' },
-      { id: 'sessions', label: 'Sessions', icon: 'admin', href: '/sessions', gate: 'governance' },
+    { group: 'Government', gate: 'government', items: [
+      { id: 'watch', label: 'Watch', icon: 'admin', href: '/watch', gate: 'government' },
+      { id: 'harbor', label: 'Harbor', icon: 'admin', href: '/harbor', gate: 'government', module: 'dev-box' },
+      { id: 'gate', label: 'Gate', icon: 'admin', href: '/gate', gate: 'government' },
+      { id: 'sessions', label: 'Sessions', icon: 'admin', href: '/sessions', gate: 'government' },
       // BV1.R113: the roles-and-permissions tab (ADR 0151). The one genuinely
-      // Archon-only item the 'governance' gate comment anticipated — cosmetic
-      // only; requireGovernanceManagePage (the government.manage atom) is the wall.
-      { id: 'governance', label: 'Roles', icon: 'admin', href: '/governance', gate: 'archon' },
+      // Archon-only item the 'government' gate comment anticipated — cosmetic
+      // only; requireGovernmentManagePage (the government.manage atom) is the wall.
+      { id: 'government', label: 'Permissions', icon: 'admin', href: '/government', gate: 'archon' }  // NOT 'Ranks': /ranks is the signed-in ladder explainer and two nav items
+      //   reading 'Ranks' is the confusion this rename exists to remove. This tab
+      //   is where a rank's permissions are granted, so it says what it does.,
     ] },
   ];
 
@@ -423,7 +427,7 @@
       // ADR 0157: the monitoring/ops pages sit at the `page.view.government` floor,
       // which is metic. Kept as its own key rather than widening 'archon', so a
       // genuinely Archon-only nav item can still be added later.
-      case 'governance': return authed && (access.rank === 'metic' || access.rank === 'archon');
+      case 'government': return authed && (access.rank === 'metic' || access.rank === 'archon');
       default: return false;
     }
   }

package/modules/hall-ui/public/watch.js

@@ -887,7 +887,7 @@
 
     // ADR 0157: Watch sits at the `page.view.government` floor (metic), and every panel
     // it reads (roster, security reports, audit log, sessions, box costs) delegated to
-    // metic with it. Cosmetic — requireGovernancePage + the route gates are the wall.
+    // metic with it. Cosmetic — requireGovernmentPage + the route gates are the wall.
     if (!builder || (builder.rank !== 'metic' && builder.rank !== 'archon')) {
       showSealed('This page is available from the Metic rank up. Your current rank does not grant access.');
       return;

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.185",
+  "version": "1.19.186",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.185",
+      "version": "1.19.186",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.185",
+  "version": "1.19.186",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/scripts/hall-preview/server.js

@@ -44,7 +44,7 @@ const EMPTY = process.argv.includes('--empty');
 // --rank: view the hall as a different rank — the /me fixture's builder.rank is
 // overridden in the response, so the Archon-gated pages (watch, harbor, gate)
 // render their real content instead of the sealed notice. Preview-only theatre:
-// the real pages are server-gated (requireGovernancePage / ADR 0016).
+// the real pages are server-gated (requireGovernmentPage / ADR 0016).
 const RANK_OVERRIDE = arg('--rank');
 const MODULES_OFF = String(arg('--modules-off') || '').split(',').map((s) => s.trim()).filter(Boolean);
 // --modules-on: force-report modules as enabled — a dev box's local config

package/src/bongos/auth.js

@@ -1437,7 +1437,7 @@ function signInWithReturn(req) {
 // ranks (catalog.RANK_ORDER):
 //   requireBuilderPage     was "any session"      floor xenos  → page.view.public
 //   requireNonXenosPage    was rank !== 'xenos'   floor thetes → page.view.builder
-//   requireGovernancePage  was rank === 'archon'  floor archon → page.view.government
+//   requireGovernmentPage  was rank === 'archon'  floor archon → page.view.government
 // That third gate was spelled `requireArchonPage` until ADR 0157 lowered
 // page.view.government's floor archon→metic and the name stopped being true; the
 // floor now lives in modules/government/catalog.js, not in the function's name.
@@ -1456,8 +1456,8 @@ function signInWithReturn(req) {
 const PAGE_GATES = Object.freeze({
   requireBuilderPage: Object.freeze({ permission: 'page.view.public', deniedTo: '/builders' }),
   requireNonXenosPage: Object.freeze({ permission: 'page.view.builder', deniedTo: '/builders/not-ready' }),
-  requireGovernancePage: Object.freeze({ permission: 'page.view.government', deniedTo: '/builders' }),
-  requireGovernanceManagePage: Object.freeze({ permission: 'government.manage', deniedTo: '/builders' }),
+  requireGovernmentPage: Object.freeze({ permission: 'page.view.government', deniedTo: '/builders' }),
+  requireGovernmentManagePage: Object.freeze({ permission: 'government.manage', deniedTo: '/builders' }),
   requireProjectCuratePage: Object.freeze({ permission: 'project.curate', deniedTo: '/builders' }),
 });
 
@@ -1540,8 +1540,8 @@ async function requireBuilderPage(req, res, next) {
 // every data endpoint these pages call is independently gated server-side, so no
 // cross-builder data leaks even if this gate were bypassed; it keeps a builder
 // without the permission from ever seeing the page shell.
-async function requireGovernancePage(req, res, next) {
-  return runPageGate('requireGovernancePage', req, res, next);
+async function requireGovernmentPage(req, res, next) {
+  return runPageGate('requireGovernmentPage', req, res, next);
 }
 
 // The /governance roles-and-permissions tab (BV1.R113) — gated on the
@@ -1549,8 +1549,8 @@ async function requireGovernancePage(req, res, next) {
 // /governance/* data route checks, so the page layer can never drift wider than
 // the API it fronts. Defense-in-depth as above: the data endpoints are all
 // independently gated; this keeps the tab shell from rendering for anyone else.
-async function requireGovernanceManagePage(req, res, next) {
-  return runPageGate('requireGovernanceManagePage', req, res, next);
+async function requireGovernmentManagePage(req, res, next) {
+  return runPageGate('requireGovernmentManagePage', req, res, next);
 }
 
 // The /people builder-directory page (task 1002577) — gated on the
@@ -1827,8 +1827,8 @@ module.exports = {
   SESSION_SCOPES,
   requireBuilder,
   requireBuilderPage,
-  requireGovernancePage,
-  requireGovernanceManagePage,
+  requireGovernmentPage,
+  requireGovernmentManagePage,
   requireNonXenosPage,
   requireProjectCuratePage,
   requireRank,