@bongos/core 1.19.332 → 1.19.334

package/tests/rank_tier_single_source.mjs

@@ -124,9 +124,18 @@ test('static ladder copies carry the exact canonical ladder', () => {
   }
 });
 
-const STATIC_MAP_FILES = ['modules/hall-ui/public/builders.js', 'modules/hall-ui/public/goals-page.js'];
+// task 1003206 carved the hall page scripts up; the rank tier maps travelled with
+// the renderers that read them, so the pin and the allowlist follow the code.
+const HALL_SCRIPTS = ['modules/hall-ui/public/builders.js', 'modules/hall-ui/public/goals-page.js',
+  'modules/hall-ui/public/hall-render.js', 'modules/hall-ui/public/goals-render.js'];
+// Filtered INSIDE the test, not at module scope: extractRankMaps is declared
+// further down, so calling it up here is a temporal-dead-zone crash.
+const staticMapFiles = () => HALL_SCRIPTS.filter(
+  (rel) => extractRankMaps(fs.readFileSync(path.join(ROOT, rel), 'utf8')).length > 0);
 test('hall static tier maps match the kernel map', () => {
-  for (const rel of STATIC_MAP_FILES) {
+  const files = staticMapFiles();
+  assert.ok(files.length > 0, 'at least one hall script must carry the tier map');
+  for (const rel of files) {
     const src = fs.readFileSync(path.join(ROOT, rel), 'utf8');
     const maps = extractRankMaps(src);
     assert.ok(maps.length > 0, `${rel}: expected a rank tier map`);
@@ -146,7 +155,11 @@ const MAP_ALLOWLIST = new Set([
   'scripts/gds/box-connect-lib.js',
   'modules/dev-box/boxes.js',
   'modules/hall-ui/public/builders.js',
-  'modules/hall-ui/public/goals-page.js',
+  // task 1003206 carved the hall page scripts up. builders.js KEPT its map (the
+  // renderers read it through the injected ctx), while goals-page.js's travelled
+  // into goals-render.js — so goals-page.js is pruned and hall-render.js is never
+  // added. The allowlist fails on a stale entry, which is the check working.
+  'modules/hall-ui/public/goals-render.js',
 ]);
 // Where a rank-ladder array literal is allowed to exist.
 const LADDER_ALLOWLIST = new Set([

package/tests/reward_gate.mjs

@@ -25,7 +25,7 @@ const db = require('../modules/lifecycle/db.js');
 // the SAME singleton object db.js captured, so mutating its .query stubs the INSERT
 // createTask runs — no database needed.
 const sharedPool = require('../src/module-api.js').pool;
-import { lifecycleDbSource } from './helpers.mjs';
+import { lifecycleDbSource, taskRoutesSource } from './helpers.mjs';
 
 const __dir = dirname(fileURLToPath(import.meta.url));
 const root = join(__dir, '..');
@@ -132,7 +132,8 @@ t('null task is a no-op (no throw, no assignment)', () => {
 // ---------------------------------------------------------------------------
 console.log('\nenforcement points (source-wiring — AUTO-ASSIGN):');
 
-const tasksRouteSrc = readFileSync(join(root, 'modules/lifecycle/routes/tasks.js'), 'utf8');
+// task 1003206: POST /tasks now lives in task-write-routes.js — read the family.
+const tasksRouteSrc = taskRoutesSource();
 // task 1003204: the lifecycle data layer is db.js + db-*.js now — read the family.
 const dbSrc = lifecycleDbSource();
 const migration178 = readFileSync(join(root, 'migrations/178_reward_gate_auto_assign_revert_autopromote.sql'), 'utf8');