@bongos/core 1.19.193 → 1.19.195

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.193",
-  "core_contract": "1.19.193",
-  "source_commit": "8a3a21b06b2034b9972f0ae33c509b4551bb2d15",
+  "core_version": "1.19.195",
+  "core_contract": "1.19.195",
+  "source_commit": "6f4385930d135df297276b8621d06766d37a31f4",
   "source_ref": "HEAD",
-  "built_at": "2026-08-17T01:42:01.062Z",
+  "built_at": "2026-08-17T02:34:38.864Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 309,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 1614,
-  "tree_sha256": "1e89fae2ed7eddba5976e753bd28c3e2b9d9acff1e43cc1046b24133fdede5b6",
+  "tree_sha256": "8116719f0704b34ec16115f9e0134e61f13a8dbdcf965a215c6696d637c7ed91",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -3332,7 +3332,7 @@
     {
       "path": "modules/hall-ui/public/people.js",
       "mode": "0000644",
-      "sha256": "5439654ddbc1ad6be7944dc198eca5094ec5978ad3b73b7196215ad3dc781dca"
+      "sha256": "65240ee6f7c1dd4a73282f82a659e5906edbe612500e2e4ed9930f31f7e3f377"
     },
     {
       "path": "modules/hall-ui/public/primer.css",
@@ -4267,12 +4267,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "7d80a4c5bc2445f0f5e3402d5e1fabd3715e1b9ef42a63b9a807a8a4d3d3b07e"
+      "sha256": "7b801c937ba9dd1e63dd47500431d689b484386e24ce7dd4a170e8aad9fe3795"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "8afe9e20e19a60590530619bf1c380b4e8ba570a0fc49c15b8e3fdedc30f6f97"
+      "sha256": "41ec69a812063ad9f24f616976b4492e2b651cfb5bdc4242ebd5873b7a9e8c2f"
     },
     {
       "path": "public-docs/index.html",
@@ -5882,7 +5882,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "02055b996dbce5d537591cffca1eb0d12eff1207dd4df6b594da27482d3c2fdf"
+      "sha256": "719cefa356719d4cbe09a49186afae9e5cc116eece82c2c2694ab93706effd54"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -6562,7 +6562,7 @@
     {
       "path": "tests/discord_channels.mjs",
       "mode": "0000644",
-      "sha256": "9685df65e80f438c082867f2167b63c224dd32a9fe1e722957ac97d48ad2e88c"
+      "sha256": "981d34c2fb5ecb6e9b9f38ece947c6c7a400dceadf8bbcf09546c8b3a92eb899"
     },
     {
       "path": "tests/discord_foundation.mjs",

package/modules/hall-ui/public/people.js

@@ -58,6 +58,25 @@
 
   function mountDirectory(builders) {
     all = Array.isArray(builders) ? builders : [];
+    // An EMPTY directory is almost never missing data — it is ADR 0171's
+    // fail-closed consent boundary doing exactly what it was ratified to do.
+    // `listScoutingRollup` filters on `profile_state = 'active'`, every account
+    // starts `'provisional'`, and an account activates ONLY when its human signs
+    // in at the hub itself (P03, ratified by the owner 2026-08-16: no backfill
+    // activation). This builders hall predates the hub flow, so its builders stay
+    // unlisted until each has signed in there once.
+    //
+    // Reporting that as "no cross-project activity reported yet" is actively
+    // misleading — the activity exists and is visible on every project's own
+    // leaderboard; the accounts simply are not publicly listed — and that wrong
+    // explanation is why an empty directory got filed as a bug (task 1002937).
+    // Say which of the two it is, so the page is never mistaken for broken.
+    if (!all.length) {
+      notice('Nobody is publicly listed here yet. A builder joins this directory once they have '
+        + 'signed in on the main platform site at least once — accounts stay unlisted until then, '
+        + 'and none are listed without it. Their work still shows on each project’s own ledger.');
+      return;
+    }
     kit.makeFilterBar({
       mount: document.getElementById('people-filters'),
       search: { id: 'people-q', label: 'Search', placeholder: 'name or discipline' },
@@ -73,7 +92,9 @@
       columns: ['Builder', { label: 'Projects', class: 'num' }, { label: 'Credits', class: 'num' },
         { label: 'Ships', class: 'num' }, { label: 'Karma', class: 'num' }, 'Disciplines', 'Last active'],
       rowHtml: rowHtml,
-      emptyMsg: 'No cross-project activity reported yet.',
+      // Reached only when the directory HAS builders and the search excluded them
+      // all — the empty-API case returns above with its own explanation.
+      emptyMsg: 'No listed builder matches that search.',
       pager: pager,
     });
     rerender();

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.193",
+  "version": "1.19.195",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.193",
+      "version": "1.19.195",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.193",
+  "version": "1.19.195",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/src/module-api.js

@@ -813,8 +813,12 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 //         landed since 1.19.191 with no explicit bump. run 31984583069. (task 1002620)
 //   1.19.193 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
 //         landed since 1.19.192 with no explicit bump. run 31985689267. (task 1002620)
+//   1.19.194 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.193 with no explicit bump. run 31987857242. (task 1002620)
+//   1.19.195 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.194 with no explicit bump. run 31988381869. (task 1002620)
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.193'; // CI auto-patch carrier (ADR 0161); see changelog above
+const CORE_VERSION = '1.19.195'; // CI auto-patch carrier (ADR 0161); see changelog above
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/discord_channels.mjs

@@ -333,5 +333,37 @@ await t('planChannelReconcile no-ops a guild already matching, categories includ
   assert.deepEqual(ops, [], `expected no ops after #202 fix, got ${JSON.stringify(ops.map((o) => o.op + ' ' + (o.name || o.id)))}`);
 });
 
+// --- the REAL repo config (task 1003033 / R20 of goal 1000069) -------------
+// ADR 0037 calls docs/discord/channels.json the single source of truth, and
+// rests its "Archon-gated by construction" argument on that file being a
+// REPO file that has to be merged. It was not tracked in core until R20, so
+// loadConfig() threw ENOENT on a fresh checkout and the argument did not hold.
+// These pin the file's existence and shape so it cannot silently vanish again.
+await t('the real docs/discord/channels.json exists and parses', () => {
+  const cfg = ch.loadConfig();
+  assert.ok(Array.isArray(cfg.categories) && cfg.categories.length > 0,
+    'config must declare at least one category');
+});
+
+await t('the real config declares the board-room channel, visible to every builder', () => {
+  const cfg = ch.loadConfig();
+  const channels = cfg.categories.flatMap((c) => c.channels || []);
+  const board = channels.find((c) => ch.slugify(c.name) === 'board-room');
+  assert.ok(board, 'expected a channel whose slug is board-room');
+  // ADR 0175 §9 chose an OPEN ballot: a board nobody can observe cannot hold
+  // anyone to account. `xenos` grants that rank and every rank above it, so
+  // every builder sees the board's business while only members vote — and the
+  // vote itself is cast in the hall, never here.
+  assert.equal(board.view, 'xenos', 'board-room must be visible to every builder');
+  assert.ok(board.topic && board.topic.length > 0, 'board-room needs a topic');
+});
+
+await t('the real config plans cleanly against an empty guild and never deletes', () => {
+  const cfg = ch.loadConfig();
+  const { ops } = ch.planChannelReconcile({ categories: [], channels: [] }, cfg, CTX_BOT);
+  assert.ok(ops.some((o) => o.op === 'create-channel'), 'expected the channel to be created');
+  assert.ok(!ops.some((o) => String(o.op).startsWith('delete')), 'reconcile must never delete');
+});
+
 console.log(`\n${passed} passed, ${failed} failed`);
 process.exit(failed ? 1 : 0);