@bongos/core 1.19.185 → 1.19.187

package/modules/government/session-scopes.js

@@ -1,9 +1,9 @@
 'use strict';
 
-// modules/governance/session-scopes.js — the SESSION-SCOPE axis (ADR 0151 §3, BV1.R99).
+// modules/government/session-scopes.js — the SESSION-SCOPE axis (ADR 0151 §3, BV1.R99).
 //
 // The FOURTH axis, and the only one attached to the TOKEN rather than to the
-// builder. Roles say what a person may do (R95); a principal's identity says what
+// builder. Ranks say what a person may do (R95); a principal's identity says what
 // a machine may do (R98); an ownership scope says whose row it may be done to
 // (R100); a SESSION-SCOPE says how much of that authority this particular
 // credential carries. A dev-box session is minted onto a machine OUTSIDE the ADR
@@ -13,15 +13,15 @@
 // A SESSION-SCOPE CAN ONLY EVER NARROW. That is the whole load-bearing property,
 // and it has two halves that fail in opposite directions:
 //   • INTERSECTION, never union — the scope may not GRANT a permission the
-//     builder's roles do not already confer, or a box token would escalate;
+//     builder's ranks do not already confer, or a box token would escalate;
 //   • DENY-BY-DEFAULT — a permission the allow-list does not name is denied, or an
 //     unlisted permission leaks through.
 // resolver.narrowToSessionScope() is the one place the two compose, and it is
-// written as a FILTER of the role answer so widening is not expressible there.
+// written as a FILTER of the rank answer so widening is not expressible there.
 //
 // EXPLICIT DATA, not `if (source === 'box')`. session-scopes.json (next to this
 // file) is the declaration; this module validates it against the permission
-// catalog at load. GOVERNANCE OWNS THE POLICY, THE KERNEL STAYS THE ENFORCER —
+// catalog at load. GOVERNMENT OWNS THE POLICY, THE KERNEL STAYS THE ENFORCER —
 // the same split R101 draws for the protected-surface registry: src/bongos/auth.js
 // reads the same JSON as DATA (fs, never `require` — ADR 0083's one-way rule) and
 // requireBuilder remains the gate every route composes. Nothing here enforces
@@ -64,10 +64,10 @@ function validateAgainstCatalog(scopes) {
         throw new Error(`${where} allows "${key}", which the permission catalog does not define`);
       }
       // R98's rule, kept structural: a machine principal's capability comes from
-      // its exact system_role, never from a role — so a box-scoped session
+      // its exact system_role, never from a rank — so a box-scoped session
       // carrying one must not be expressible on a scope allow-list either.
       if (catalog.isPrincipalKey(key)) {
-        throw new Error(`${where} allows the machine-principal permission "${key}" — a session-scope narrows a builder's ROLE authority and never composes with the identity axis`);
+        throw new Error(`${where} allows the machine-principal permission "${key}" — a session-scope narrows a builder's RANK authority and never composes with the identity axis`);
       }
       // A session-scope IS the surface a credential outside the ADR 0016 trust
       // boundary may reach. A trust-boundary permission must never appear on one,

package/modules/government/session-scopes.json

@@ -1,12 +1,12 @@
 {
   "_comment": [
     "The SESSION-SCOPE registry (BV1.R99, ADR 0151 §3; the model behind ADR 0053).",
-    "A session's scope is capability attached to the TOKEN, orthogonal to the builder's roles.",
+    "A session's scope is capability attached to the TOKEN, orthogonal to the builder's ranks.",
     "Each row declares EITHER unscoped:true (the session narrows nothing) OR a deny-by-default",
     "permissions allow-list (unlisted => denied). A scope can only ever NARROW: effective",
-    "authority is (the builder's role permissions) INTERSECT (this allow-list), never a union.",
-    "Every key here is validated against modules/governance/catalog.js at load by",
-    "modules/governance/session-scopes.js — unknown, system:true and principal keys are refused.",
+    "authority is (the builder's rank permissions) INTERSECT (this allow-list), never a union.",
+    "Every key here is validated against modules/government/catalog.js at load by",
+    "modules/government/session-scopes.js — unknown, system:true and principal keys are refused.",
     "Read as DATA by src/bongos/auth.js (fs, never require — ADR 0083's one-way rule)."
   ],
   "scopes": [
@@ -14,7 +14,7 @@
       "source": "cli",
       "label": "CLI session",
       "unscoped": true,
-      "note": "Device Flow token on a builder's own machine — inside the trust boundary, carries the builder's full role authority."
+      "note": "Device Flow token on a builder's own machine — inside the trust boundary, carries the builder's full rank authority."
     },
     {
       "source": "web",

package/modules/hall-ui/public/gate.js

@@ -10,7 +10,7 @@
 // Like The Watch + The Harbor, this reads /api/bongos/me to show a Sealed notice for
 // non-Archons — DEFENCE IN DEPTH only. GET /gate-approvals + POST
 // /gate-approvals/:pr/approve are ALSO archon-gated server-side (ADR 0016), and
-// the page itself is gated by server.js requireGovernancePage. On 401 → web sign-in.
+// the page itself is gated by server.js requireGovernmentPage. On 401 → web sign-in.
 
 (() => {
   'use strict';
@@ -218,7 +218,7 @@
     }
     const rank = (me && (me.builder || me).rank || '').toLowerCase();
     // ADR 0157: the Gate page sits at the `page.view.government` floor (metic). The
-    // server's requireGovernancePage is the wall — this only decides whether to render the
+    // server's requireGovernmentPage is the wall — this only decides whether to render the
     // body or the sealed notice, so it must agree or a Metic sees "sealed" on a page
     // they were just admitted to.
     if (rank !== 'metic' && rank !== 'archon') { showSealed(); return; }

package/modules/hall-ui/public/{governance.css → government.css}

@@ -1,4 +1,4 @@
-/* governance.css — Page-local styles for the Governance page (roles /
+/* government.css — Page-local styles for the Government page (ranks /
    permissions / assignments — BV1.R111, ADR 0151). Built on the shared design
    tokens (style.css), mirroring gate.css's card + pill idiom; the ?v= cache-bust
    is stamped from this file's content hash at boot (src/asset-version.js). */
@@ -6,28 +6,28 @@
 .gov-h { color: var(--ink); font-size: 16px; font-weight: 600; margin: 22px 0 8px; }
 .gov-h--minor { font-size: 13px; margin: 18px 0 6px; }
 .gov-grid-note { color: var(--ink-soft); font-size: 12.5px; margin: 0 0 12px; }
-/* Holds the rank-role reset button. Empty for every other role, so it collapses
+/* Holds the ladder-rank reset button. Empty for every other rank, so it collapses
    rather than reserving a gap — hence no margin on the empty box itself. */
 .gov-grid-actions:not(:empty) { margin: 0 0 14px; }
 .gov-sealed, .gov-empty { color: var(--ink-soft); padding: 16px 0; }
 
-/* Two columns on wide screens: role rail left, permission grid right. */
+/* Two columns on wide screens: rank rail left, permission grid right. */
 .gov-layout { display: grid; grid-template-columns: 260px 1fr; gap: 22px; align-items: start; }
 @media (max-width: 760px) { .gov-layout { grid-template-columns: 1fr; } }
 
-/* ---- role list ---------------------------------------------------------- */
-.gov-role-list { display: flex; flex-direction: column; gap: 8px; }
-.gov-role {
+/* ---- rank list ---------------------------------------------------------- */
+.gov-rank-list { display: flex; flex-direction: column; gap: 8px; }
+.gov-rank {
   text-align: left; font: inherit; cursor: pointer;
   border: 1px solid var(--border); border-radius: var(--radius-sm);
   background: var(--surface); padding: 10px 12px;
   display: flex; flex-direction: column; gap: 4px;
 }
-.gov-role:hover { background: var(--surface-2); }
-.gov-role[aria-pressed="true"] { border-color: var(--accent); box-shadow: inset 2px 0 0 var(--accent); }
-.gov-role__head { display: flex; align-items: baseline; justify-content: space-between; gap: 8px; }
-.gov-role__label { font-weight: 600; color: var(--ink); font-size: 13.5px; }
-.gov-role__meta { color: var(--ink-faint); font-size: 11.5px; }
+.gov-rank:hover { background: var(--surface-2); }
+.gov-rank[aria-pressed="true"] { border-color: var(--accent); box-shadow: inset 2px 0 0 var(--accent); }
+.gov-rank__head { display: flex; align-items: baseline; justify-content: space-between; gap: 8px; }
+.gov-rank__label { font-weight: 600; color: var(--ink); font-size: 13.5px; }
+.gov-rank__meta { color: var(--ink-faint); font-size: 11.5px; }
 
 .gov-pill {
   font-size: 10.5px; font-weight: 600;

package/modules/hall-ui/public/{governance.html → government.html}

@@ -3,16 +3,16 @@
 <head>
   <meta charset="utf-8">
   <meta name="viewport" content="width=device-width, initial-scale=1">
-  <title>Governance — {{worldName}}</title>
-  <meta name="description" content="Roles and permissions — create a custom role, grant everyday permissions, assign it to a builder. Trust-boundary powers stay locked.">
+  <title>Government — {{worldName}}</title>
+  <meta name="description" content="Ranks and permissions — create a custom rank, grant everyday permissions, assign it to a builder. Trust-boundary powers stay locked.">
   <link rel="icon" href="data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'><text x='16' y='24' font-size='24' text-anchor='middle' font-family='sans-serif'>⌂</text></svg>">
   <link rel="preconnect" href="https://fonts.googleapis.com">
   <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
   <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet">
   <link rel="stylesheet" href="/builders/style.css?v=2026-07-02-shell1">
-  <link rel="stylesheet" href="/builders/governance.css">
+  <link rel="stylesheet" href="/builders/government.css">
 </head>
-<body data-page="governance" data-page-title="Governance">
+<body data-page="government" data-page-title="Government">
 
 <div class="app">
   <aside class="app-sidebar" id="app-sidebar" aria-label="Primary"></aside>
@@ -27,15 +27,15 @@
 
         <section id="gov-body" hidden>
           <div class="gov-layout">
-            <div class="gov-roles-col">
-              <h2 class="gov-h">Roles</h2>
-              <div class="gov-role-list" id="gov-role-list"></div>
+            <div class="gov-ranks-col">
+              <h2 class="gov-h">Ranks</h2>
+              <div class="gov-rank-list" id="gov-rank-list"></div>
               <form class="gov-create" id="gov-create-form" autocomplete="off">
-                <h3 class="gov-h gov-h--minor">New custom role</h3>
-                <input class="gov-input" id="gov-create-key" placeholder="role-key (kebab-case)" maxlength="64" required>
+                <h3 class="gov-h gov-h--minor">New custom rank</h3>
+                <input class="gov-input" id="gov-create-key" placeholder="rank-key (kebab-case)" maxlength="64" required>
                 <input class="gov-input" id="gov-create-label" placeholder="Label" maxlength="200" required>
                 <input class="gov-input" id="gov-create-desc" placeholder="Description (optional)" maxlength="2000">
-                <button class="gov-btn" type="submit">Create role</button>
+                <button class="gov-btn" type="submit">Create rank</button>
               </form>
             </div>
 
@@ -48,16 +48,16 @@
           </div>
 
           <h2 class="gov-h">Assignments</h2>
-          <p class="gov-grid-note">Hand a custom role to a builder. Rank roles are assigned by rank itself and cannot be granted here.</p>
+          <p class="gov-grid-note">Hand a custom rank to a builder. The four ladder ranks are assigned by rank itself and cannot be granted here.</p>
           <form class="gov-assign" id="gov-assign-form" autocomplete="off">
             <input class="gov-input gov-input--id" id="gov-assign-builder" type="number" min="1" placeholder="Builder id" required>
-            <select class="gov-input" id="gov-assign-role" required></select>
+            <select class="gov-input" id="gov-assign-rank" required></select>
             <button class="gov-btn" type="submit">Assign</button>
           </form>
           <div id="gov-assignments"></div>
 
           <h2 class="gov-h">Machine principals</h2>
-          <p class="gov-grid-note">Capabilities held by a machine identity, never by a person or a role. Shown for completeness — nothing here can be granted.</p>
+          <p class="gov-grid-note">Capabilities held by a machine identity, never by a person or a rank. Shown for completeness — nothing here can be granted.</p>
           <div id="gov-principals"></div>
         </section>
       </main>
@@ -73,6 +73,6 @@
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>
-<script src="/builders/governance.js?v=2026-08-06-governance"></script>
+<script src="/builders/government.js?v=2026-08-16-government"></script>
 </body>
 </html>