@bongos/core 1.19.194 → 1.19.195

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.194",
-  "core_contract": "1.19.194",
-  "source_commit": "51e36d9f794eb0037aa09c1e1730e1e840809121",
+  "core_version": "1.19.195",
+  "core_contract": "1.19.195",
+  "source_commit": "6f4385930d135df297276b8621d06766d37a31f4",
   "source_ref": "HEAD",
-  "built_at": "2026-08-17T02:24:40.175Z",
+  "built_at": "2026-08-17T02:34:38.864Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 309,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 1614,
-  "tree_sha256": "01783a610e639ab5b32fc23d453417b70b8a9277f80e987926c0b0e95a12b225",
+  "tree_sha256": "8116719f0704b34ec16115f9e0134e61f13a8dbdcf965a215c6696d637c7ed91",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -3332,7 +3332,7 @@
     {
       "path": "modules/hall-ui/public/people.js",
       "mode": "0000644",
-      "sha256": "5439654ddbc1ad6be7944dc198eca5094ec5978ad3b73b7196215ad3dc781dca"
+      "sha256": "65240ee6f7c1dd4a73282f82a659e5906edbe612500e2e4ed9930f31f7e3f377"
     },
     {
       "path": "modules/hall-ui/public/primer.css",
@@ -4267,12 +4267,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "426eec8097d4ca14acea9859a254673f9d51fe2c644ef013229b1efe46a2d389"
+      "sha256": "7b801c937ba9dd1e63dd47500431d689b484386e24ce7dd4a170e8aad9fe3795"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "07bf17d0989db9908ddc62823f0f46c03806aaa0e01add72f0073d8cc86ec158"
+      "sha256": "41ec69a812063ad9f24f616976b4492e2b651cfb5bdc4242ebd5873b7a9e8c2f"
     },
     {
       "path": "public-docs/index.html",
@@ -5882,7 +5882,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "c670dfda30a263cdef49ff035bb9e6739346fca361b38f5e4fea67eea76dd423"
+      "sha256": "719cefa356719d4cbe09a49186afae9e5cc116eece82c2c2694ab93706effd54"
     },
     {
       "path": "src/module-loader/catalog.js",

package/modules/hall-ui/public/people.js

@@ -58,6 +58,25 @@
 
   function mountDirectory(builders) {
     all = Array.isArray(builders) ? builders : [];
+    // An EMPTY directory is almost never missing data — it is ADR 0171's
+    // fail-closed consent boundary doing exactly what it was ratified to do.
+    // `listScoutingRollup` filters on `profile_state = 'active'`, every account
+    // starts `'provisional'`, and an account activates ONLY when its human signs
+    // in at the hub itself (P03, ratified by the owner 2026-08-16: no backfill
+    // activation). This builders hall predates the hub flow, so its builders stay
+    // unlisted until each has signed in there once.
+    //
+    // Reporting that as "no cross-project activity reported yet" is actively
+    // misleading — the activity exists and is visible on every project's own
+    // leaderboard; the accounts simply are not publicly listed — and that wrong
+    // explanation is why an empty directory got filed as a bug (task 1002937).
+    // Say which of the two it is, so the page is never mistaken for broken.
+    if (!all.length) {
+      notice('Nobody is publicly listed here yet. A builder joins this directory once they have '
+        + 'signed in on the main platform site at least once — accounts stay unlisted until then, '
+        + 'and none are listed without it. Their work still shows on each project’s own ledger.');
+      return;
+    }
     kit.makeFilterBar({
       mount: document.getElementById('people-filters'),
       search: { id: 'people-q', label: 'Search', placeholder: 'name or discipline' },
@@ -73,7 +92,9 @@
       columns: ['Builder', { label: 'Projects', class: 'num' }, { label: 'Credits', class: 'num' },
         { label: 'Ships', class: 'num' }, { label: 'Karma', class: 'num' }, 'Disciplines', 'Last active'],
       rowHtml: rowHtml,
-      emptyMsg: 'No cross-project activity reported yet.',
+      // Reached only when the directory HAS builders and the search excluded them
+      // all — the empty-API case returns above with its own explanation.
+      emptyMsg: 'No listed builder matches that search.',
       pager: pager,
     });
     rerender();

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.194",
+  "version": "1.19.195",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.194",
+      "version": "1.19.195",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.194",
+  "version": "1.19.195",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/src/module-api.js

@@ -815,8 +815,10 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 //         landed since 1.19.192 with no explicit bump. run 31985689267. (task 1002620)
 //   1.19.194 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
 //         landed since 1.19.193 with no explicit bump. run 31987857242. (task 1002620)
+//   1.19.195 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.194 with no explicit bump. run 31988381869. (task 1002620)
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.194'; // CI auto-patch carrier (ADR 0161); see changelog above
+const CORE_VERSION = '1.19.195'; // CI auto-patch carrier (ADR 0161); see changelog above
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');