@bongos/core 1.19.346 → 1.19.348

package/modules/hall-ui/public/collab.html

@@ -0,0 +1,66 @@
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>Collab — {{worldName}}</title>
+  <meta name="description" content="Requests for help addressed to your craft or to you by name, and the asks you have open — with how long each has been waiting.">
+  <link rel="icon" href="data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'><text x='16' y='24' font-size='24' text-anchor='middle' font-family='sans-serif'>⌂</text></svg>">
+  <link rel="preconnect" href="https://fonts.googleapis.com">
+  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+  <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet">
+  <link rel="stylesheet" href="/builders/style.css?v=2026-07-02-shell1">
+  <link rel="stylesheet" href="/builders/collab.css">
+</head>
+<body data-page="collab" data-page-title="Collab">
+
+<div class="app">
+  <aside class="app-sidebar" id="app-sidebar" aria-label="Primary"></aside>
+  <div class="app-scrim" id="app-scrim" hidden></div>
+  <div class="app-body">
+    <header class="app-topbar" id="app-topbar"></header>
+    <div class="app-content">
+      <div class="page-head">
+        <p class="page-head__sub" id="cb-sub">Loading…</p>
+      </div>
+
+      <main>
+        <!-- ASKED OF YOU comes first: it is the half where someone is waiting on a
+             human. Your own asks are below, because they are a status check, not a
+             call to act. -->
+        <section class="scroll" aria-labelledby="cb-for-me-h">
+          <h2 class="scroll__h" id="cb-for-me-h">Asked of you</h2>
+          <p class="scroll__note" id="cb-for-me-note">
+            Requests addressed to your craft, or to you by name. Answering is optional
+            and declining costs nothing — nobody is assigned by being asked.
+          </p>
+          <ul class="cb-list" id="cb-for-me"></ul>
+          <p class="cb-empty" id="cb-for-me-empty" hidden>
+            Nothing is waiting on you. Requests reach you by your craft — set yours in
+            <a href="/builders/settings">Settings</a> if this stays empty.
+          </p>
+        </section>
+
+        <section class="scroll" aria-labelledby="cb-mine-h">
+          <h2 class="scroll__h" id="cb-mine-h">Your asks</h2>
+          <p class="scroll__note">
+            Only you can settle your own request — mark it answered when someone
+            helped, or withdraw it when you no longer need it.
+          </p>
+          <ul class="cb-list" id="cb-mine"></ul>
+          <p class="cb-empty" id="cb-mine-empty" hidden>You have no open asks.</p>
+        </section>
+      </main>
+    </div>
+  </div>
+</div>
+
+<div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
+
+<script src="/builders/shell.js?v=2026-07-02-shell1"></script>
+<script src="/builders/palette.js" defer></script>
+<script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
+<script src="/builders/collab-lib.js?v=2026-08-24-c02"></script>
+<script src="/builders/collab.js?v=2026-08-24-c02"></script>
+</body>
+</html>

package/modules/hall-ui/public/collab.js

@@ -0,0 +1,139 @@
+// modules/hall-ui/public/collab.js — the Collab page (/builders/collab).
+// Task 1003172 / C02 of goal 1000075, criterion collab-page-matches-my-craft.
+//
+// The hall surface for C01's help requests. Two sections, in this order on
+// purpose: what is ASKED OF YOU first, because someone is waiting on a human
+// answer, then YOUR OWN ASKS, which are a status check rather than a call to act.
+//
+// THE PART THAT IS EASY TO SKIP, and the criterion names it explicitly: a request
+// nobody takes must be VISIBLY AGING, not silently dead. Sorting the oldest to the
+// top does not satisfy that — the oldest then looks exactly like the newest, only
+// lower. So every row carries an age BAND with its own label and styling, and the
+// rules for it live in collab-lib.js where a test can execute them.
+//
+// MATCHING IS THE SERVER'S JOB, not this file's. GET /help-requests/for-me derives
+// the viewer's crafts from their own profile; sending a craft from here would be
+// the privacy hole C01's grader found (a ?craft= param that let anyone read
+// another craft's requests). This page never names a craft in a request.
+(() => {
+  'use strict';
+
+  // NO baseUrl OVERRIDE. The generated client's methods (api.helpRequests.*, api.me.*)
+  // emit API-RELATIVE paths like '/help-requests/for-me'. Passing baseUrl:'' means
+  // "these paths are already absolute" and sends them to the site root, where nothing
+  // is mounted — every call 404s. Letting it default resolves them against
+  // '/api/bongos/v1' (api-prefix.js VERSIONED_API_PREFIX), which is where the router
+  // actually mounts. Pages that DO pass baseUrl:'' must build full paths themselves
+  // via api.request('GET', `${API}/...`) — the two styles must never be mixed.
+  const api = window.BongosClient.createClient({ credentials: 'same-origin', throwOnError: false });
+  const { escapeHtml, $, toast } = window.OTB;
+  const L = window.OTBCollabLib;
+
+  let settling = false;
+
+  function ageChip(req, nowMs) {
+    const band = L.ageBand(req.created_at, nowMs);
+    return `<span class="cb-age cb-age--${band.id}" title="Asked ${escapeHtml(String(req.created_at || ''))}">${escapeHtml(band.label)}</span>`;
+  }
+
+  function contextChip(req) {
+    const ctx = L.contextOf(req);
+    if (!ctx) return '';
+    return `<a class="cb-ctx" href="${escapeHtml(ctx.href)}">${escapeHtml(ctx.kind)} #${escapeHtml(String(ctx.id))}</a>`;
+  }
+
+  // A row for the "asked of you" list. There is deliberately NO "claim this"
+  // button: answering is a conversation, and inventing a reply thread here would
+  // be reimplementing the Agora, which this goal explicitly forbids (C06 owns the
+  // chat mirror). What the page owes a helper is the request, its age, its
+  // context, and who to answer.
+  function forMeRow(req, viewerId, nowMs) {
+    const who = L.addressedTo(req, viewerId);
+    return `<li class="cb-item cb-item--${L.ageBand(req.created_at, nowMs).id}">
+      <p class="cb-item__stuck">${escapeHtml(req.what_is_stuck || '')}</p>
+      <p class="cb-item__meta">
+        <span class="cb-who">${escapeHtml(who)}</span>
+        ${contextChip(req)}
+        ${ageChip(req, nowMs)}
+      </p>
+    </li>`;
+  }
+
+  // Your own ask, with the two settle actions. Only the asker can settle — the
+  // server enforces it in the UPDATE's WHERE, this is just the affordance.
+  function mineRow(req, nowMs) {
+    return `<li class="cb-item cb-item--${L.ageBand(req.created_at, nowMs).id}" data-id="${escapeHtml(String(req.id))}">
+      <p class="cb-item__stuck">${escapeHtml(req.what_is_stuck || '')}</p>
+      <p class="cb-item__meta">
+        <span class="cb-who">${escapeHtml(L.addressedTo(req, null))}</span>
+        ${contextChip(req)}
+        ${ageChip(req, nowMs)}
+      </p>
+      <p class="cb-item__actions">
+        <button class="btn btn--sm" data-settle="answered" data-id="${escapeHtml(String(req.id))}">Someone helped</button>
+        <button class="btn btn--sm btn--quiet" data-settle="withdrawn" data-id="${escapeHtml(String(req.id))}">Withdraw</button>
+      </p>
+    </li>`;
+  }
+
+  function renderList(hostSel, emptySel, rows, html) {
+    const host = $(hostSel);
+    const empty = $(emptySel);
+    if (!host) return;
+    host.innerHTML = rows.map(html).join('');
+    if (empty) empty.hidden = rows.length > 0;
+  }
+
+  async function load() {
+    const nowMs = Date.now();
+    const [forMe, mine, me] = await Promise.all([
+      api.helpRequests.getHelpRequestsForMe({}),
+      api.helpRequests.getHelpRequestsMine({ query: { status: 'open' } }),
+      api.me.getMe ? api.me.getMe({}) : Promise.resolve({ ok: false }),
+    ]);
+
+    const viewerId = me && me.ok && me.data && me.data.builder ? me.data.builder.id : null;
+
+    const forMeRows = ((forMe.ok && forMe.data && forMe.data.help_requests) || []).slice().sort(L.byAgeOldestFirst);
+    const mineRows = ((mine.ok && mine.data && mine.data.help_requests) || []).slice().sort(L.byAgeOldestFirst);
+
+    renderList('#cb-for-me', '#cb-for-me-empty', forMeRows, (r) => forMeRow(r, viewerId, nowMs));
+    renderList('#cb-mine', '#cb-mine-empty', mineRows, (r) => mineRow(r, nowMs));
+
+    const sub = $('#cb-sub');
+    if (sub) {
+      const crafts = (forMe.ok && forMe.data && forMe.data.crafts) || [];
+      sub.textContent = crafts.length
+        ? `Matching your craft: ${crafts.join(', ')}.`
+        : 'You have not set a craft, so only requests addressed to you by name reach you.';
+    }
+  }
+
+  async function settle(id, status) {
+    if (settling) return;
+    settling = true;
+    try {
+      const r = await api.helpRequests.patchHelpRequestsId({ id, body: { status } });
+      if (!r.ok) {
+        toast(window.OTB.errMessage ? window.OTB.errMessage(r.data) : 'Could not update that request.');
+        return;
+      }
+      toast(status === 'answered' ? 'Marked answered.' : 'Withdrawn.');
+      await load();
+    } finally {
+      settling = false;
+    }
+  }
+
+  document.addEventListener('click', (ev) => {
+    const btn = ev.target && ev.target.closest ? ev.target.closest('[data-settle]') : null;
+    if (!btn) return;
+    ev.preventDefault();
+    settle(Number(btn.getAttribute('data-id')), btn.getAttribute('data-settle'));
+  });
+
+  load().catch(() => {
+    const sub = $('#cb-sub');
+    if (sub) sub.textContent = 'Could not load requests.';
+  });
+})();

package/modules/hall-ui/public/idea.js

@@ -39,7 +39,15 @@
   'use strict';
 
   const API = '/api/gds';
-  const api = window.BongosClient.createClient({ baseUrl: '', credentials: 'same-origin', throwOnError: false });
+  // NO baseUrl OVERRIDE — this page calls the GENERATED namespaced methods
+  // (api.inbox.*, api.me.*), whose path templates are API-RELATIVE ('/inbox/template').
+  // baseUrl:'' means "these paths are already absolute" and passes them through
+  // unchanged, which sent every request to the SITE ROOT and 404'd — this page was
+  // dead in production from the day it shipped. Letting it default resolves them
+  // against '/api/bongos/v1' (api-prefix.js VERSIONED_API_PREFIX), where the router
+  // actually mounts. A page that DOES pass baseUrl:'' must build full paths itself
+  // via api.request('GET', `${API}/...`) as work.js/copy-desk.js do — never mix the two.
+  const api = window.BongosClient.createClient({ credentials: 'same-origin', throwOnError: false });
   const { escapeHtml, $, fmtDate } = window.OTB;
 
   const ideaId = () => {

package/modules/hall-ui/public/ideas.js

@@ -44,7 +44,15 @@
 (() => {
   'use strict';
 
-  const api = window.BongosClient.createClient({ baseUrl: '', credentials: 'same-origin', throwOnError: false });
+  // NO baseUrl OVERRIDE — this page calls the GENERATED namespaced methods
+  // (api.inbox.*, api.me.*), whose path templates are API-RELATIVE ('/inbox/template').
+  // baseUrl:'' means "these paths are already absolute" and passes them through
+  // unchanged, which sent every request to the SITE ROOT and 404'd — this page was
+  // dead in production from the day it shipped. Letting it default resolves them
+  // against '/api/bongos/v1' (api-prefix.js VERSIONED_API_PREFIX), where the router
+  // actually mounts. A page that DOES pass baseUrl:'' must build full paths itself
+  // via api.request('GET', `${API}/...`) as work.js/copy-desk.js do — never mix the two.
+  const api = window.BongosClient.createClient({ credentials: 'same-origin', throwOnError: false });
   const { escapeHtml, $, toast } = window.OTB;
 
   // One key per THING BEING WRITTEN. A new idea and a spark being developed are
@@ -417,6 +425,14 @@
   }
 
   async function main() {
+    // THE QUEUE IS LOADED FIRST, AND UNCONDITIONALLY. The composer and the spark
+    // queue are independent surfaces that happen to share a page: the queue needs
+    // no template. Loading it after the template check meant one failed fetch took
+    // BOTH down — the reported symptom was "Could not load the idea template" AND a
+    // queue stuck on "Loading…" forever, which read as two bugs and was one.
+    // A surface that does not depend on the failure must not be hostage to it.
+    loadQueue();
+
     const r = await api.inbox.getInboxTemplate({});
     if (!r.ok || !r.data || !r.data.template) {
       $('#fi-sub').textContent = 'Could not load the idea template. Reload, or file from the terminal with capture.js.';
@@ -434,10 +450,6 @@
     $('#fi-form').addEventListener('submit', file);
     $('#fi-clear').addEventListener('click', discard);
 
-    // The queue loads on every visit, develop mode or not: having just picked one
-    // up, seeing what else is waiting is the natural next thing.
-    loadQueue();
-
     if (DEVELOP_ID) {
       const d = await api.inbox.getInboxId({ id: DEVELOP_ID });
       if (!d.ok || !d.data || !d.data.idea) {

package/modules/hall-ui/public/shell.js

@@ -153,6 +153,10 @@
       { id: 'profile', label: 'Profile', icon: 'profile', href: '/profile', gate: 'signed' },
     ] },
     { group: 'Community', gate: 'member', items: [
+      // task 1003172 (C02, goal 1000075): help requests addressed to you. In
+      // Community because the group is picked by WHOSE data it is, and this is
+      // other builders reaching you — not your own numbers (that is You).
+      { id: 'collab', label: 'Collab', icon: 'leaderboard', href: '/collab', gate: 'member' },
       { id: 'leaderboard', label: 'Leaderboard', icon: 'leaderboard', href: '/#leaderboard', view: 'leaderboard', gate: 'member' },
       // task 1002577: the cross-project builder directory (/scouting graduated
       // into the hall). Gated to MATCH its data — /api/gds/scouting checks

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.346",
+  "version": "1.19.348",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.346",
+      "version": "1.19.348",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.346",
+  "version": "1.19.348",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/scripts/gds/client-baseurl-guard.js

@@ -0,0 +1,116 @@
+#!/usr/bin/env node
+// scripts/gds/client-baseurl-guard.js — a web page must not send its API calls to
+// the site root (task 1003263).
+//
+// THE BUG THIS EXISTS TO STOP. The generated client (clients/bongos-client) exposes
+// two call styles, and mixing them is silent and fatal:
+//
+//   NAMESPACED   api.inbox.getInboxTemplate({})   → path template '/inbox/template',
+//                                                   API-RELATIVE, needs the API base
+//   ESCAPE HATCH api.request('GET', `${API}/me`)  → caller supplies the FULL path
+//
+// createClient documents `baseUrl: ''` as "paths are already absolute" and passes
+// them through unchanged. So a page that sets baseUrl:'' AND calls a namespaced
+// method requests '/inbox/template' — the SITE ROOT, where nothing is mounted — and
+// 404s on every call. The router mounts at '/api/bongos/v1' (api-prefix.js
+// VERSIONED_API_PREFIX), which is exactly the client's own default.
+//
+// WHY A FITNESS CHECK AND NOT A TEST. Three pages shipped this defect — ideas.js and
+// idea.js were dead in production from the day they shipped, and collab.js was caught
+// in review one commit before it would have been. Every page test stubs the client
+// method directly, so URL construction is never exercised; tests/idea_hall_composer.mjs
+// even asserted with a regex against the source text, which passes happily on a broken
+// URL. 54 green tests over pages that 404 on every call. The defect is invisible to the
+// test style this repo uses for hall pages, so it needs a guard at a different altitude.
+//
+// STATIC AND CONSERVATIVE. It flags only the unambiguous combination — an explicit
+// empty baseUrl in a createClient call, in a file that also makes a namespaced call.
+// A page using the escape hatch with baseUrl:'' is CORRECT and stays silent (work.js,
+// copy-desk.js, goal-inbox.js and most of the hall do exactly that).
+
+'use strict';
+
+const fs = require('node:fs');
+const path = require('node:path');
+const { execFileSync } = require('node:child_process');
+
+const REPO_ROOT = path.resolve(__dirname, '..', '..');
+const NAME = 'a web page sends its API calls to the API, not the site root (task 1003263)';
+
+// createClient({ ... baseUrl: '' ... }) — an EXPLICIT empty base. Omitting baseUrl is
+// the correct fix and must not match; only the literal empty string is the defect.
+const EMPTY_BASEURL = /createClient\(\s*\{[^}]*baseUrl\s*:\s*(''|""|`\s*`)/;
+
+// api.<namespace>.<method>( — the generated namespaced style. `api.request(` is the
+// escape hatch and is deliberately NOT matched: with it, baseUrl:'' is correct.
+const NAMESPACED_CALL = /\bapi\s*\.\s*(?!request\b)[A-Za-z_$][\w$]*\s*\.\s*[A-Za-z_$][\w$]*\s*\(/;
+
+// Every tracked browser-served script. Server code never calls createClient this way.
+function trackedPageScripts() {
+  try {
+    const out = execFileSync('git', ['ls-files', 'modules/*/public/*.js', 'public/*.js'],
+      { cwd: REPO_ROOT, encoding: 'utf8' });
+    return out.split('\n').map((s) => s.trim()).filter(Boolean);
+  } catch {
+    return [];
+  }
+}
+
+function scanPages(files, read) {
+  const violations = [];
+  let scanned = 0;
+  let usingClient = 0;
+  for (const rel of files) {
+    const src = read(rel);
+    if (src == null) continue;
+    scanned += 1;
+    if (!/createClient\(/.test(src)) continue;
+    usingClient += 1;
+    if (!EMPTY_BASEURL.test(src)) continue;
+    if (!NAMESPACED_CALL.test(src)) continue; // escape-hatch page — baseUrl:'' is right
+    const m = NAMESPACED_CALL.exec(src);
+    violations.push(
+      `${rel} sets baseUrl:'' AND calls the generated client (${m[0].replace(/\s+/g, '')}…). `
+      + "Those paths are API-relative, so baseUrl:'' sends them to the site root and every "
+      + 'call 404s. Drop the baseUrl override, or switch every call to '
+      + "api.request('METHOD', `${API}/…`) with a full path.",
+    );
+  }
+  return { violations, scanned, usingClient };
+}
+
+function checkClientBaseUrl({ files, read } = {}) {
+  const list = files || trackedPageScripts();
+  if (!list.length) {
+    return {
+      name: NAME, ok: false, hardFail: true,
+      violations: ['scan defect — enumerated 0 tracked page scripts; a broken enumeration, not a clean result.'],
+      warnings: [], note: 'static scan of browser-served scripts for a root-bound API client.',
+    };
+  }
+  const reader = read || ((rel) => {
+    try { return fs.readFileSync(path.join(REPO_ROOT, rel), 'utf8'); } catch { return null; }
+  });
+  const { violations, scanned, usingClient } = scanPages(list, reader);
+  return {
+    name: NAME,
+    ok: violations.length === 0,
+    hardFail: violations.length > 0,
+    violations,
+    warnings: [],
+    note: `${scanned} browser-served script(s) scanned, ${usingClient} building a client: none may combine `
+      + "baseUrl:'' with a generated namespaced call (api.<ns>.<method>()) — that pairing 404s every request. "
+      + "baseUrl:'' with api.request() and a full path is the correct escape-hatch style and is not flagged.",
+  };
+}
+
+function main() {
+  const r = checkClientBaseUrl();
+  for (const v of r.violations) console.error(`✗ ${v}`);
+  console.log(`${r.hardFail ? 'FAIL' : 'PASS'}  ${r.note}`);
+  process.exit(r.hardFail ? 1 : 0);
+}
+
+if (require.main === module) main();
+
+module.exports = { checkClientBaseUrl, scanPages, trackedPageScripts, EMPTY_BASEURL, NAMESPACED_CALL };

package/scripts/gds/deploy-divergence.js

@@ -160,6 +160,28 @@ async function fetchLive(base, timeoutMs = DEFAULT_TIMEOUT_MS) {
   }
 }
 
+// Is the automation that should have PREVENTED this divergence itself alive? (task 1003158)
+//
+// This script detects the SYMPTOM — live is behind main — and only ever at a moment a human is
+// already looking. What went unwatched is the auto-upgrade subscription itself: when it stopped,
+// nothing said so, and cloudbongos.com sat 36 releases behind for days. Reading the roster here means
+// a dead upgrader is reported in the same breath as the staleness it was supposed to prevent.
+//
+// Speaks ONLY when a subscription manifest is actually present. An ordinary core checkout has none by
+// design (ADR 0136 — it ships empty), and alarming about that every session is exactly the noise that
+// gets a real warning scrolled past. Present-but-broken, or present-and-subscribing-nothing, is the
+// signal worth having: someone meant to enroll instances here and none are being upgraded.
+function subscriptionHealth(dir = REPO_ROOT) {
+  try {
+    const uc = require('./update-channel');
+    const roster = uc.loadSubscriptions({ instanceDir: dir });
+    if (!roster.present) return null;
+    return uc.describeRoster(roster, { controlPlane: true });
+  } catch {
+    return null; // never let the health probe break the divergence check it rides along with
+  }
+}
+
 async function check({ base, timeoutMs = DEFAULT_TIMEOUT_MS } = {}) {
   const target = base || arg('--url') || API_BASE;
   const local = coreVersionAt(null);
@@ -173,7 +195,9 @@ async function check({ base, timeoutMs = DEFAULT_TIMEOUT_MS } = {}) {
   const unreleased = unreleasedSince(mainRef);
   const live = await fetchLive(target, timeoutMs);
 
-  if (live.error) return { ok: false, undetermined: true, reason: `could not read ${live.url}: ${live.error}`, target, local, onMain, unreleased };
+  const subscriptions = subscriptionHealth();
+
+  if (live.error) return { ok: false, undetermined: true, reason: `could not read ${live.url}: ${live.error}`, target, local, onMain, unreleased, subscriptions };
 
   const behind = cmpSemver(live.coreVersion, onMain) < 0;
   const ahead = cmpSemver(live.coreVersion, onMain) > 0;
@@ -181,7 +205,7 @@ async function check({ base, timeoutMs = DEFAULT_TIMEOUT_MS } = {}) {
 
   return {
     ok: !behind && !hasUnreleased,
-    target, local, onMain, mainRef, unreleased, live, behind, ahead, hasUnreleased,
+    target, local, onMain, mainRef, unreleased, live, behind, ahead, hasUnreleased, subscriptions,
   };
 }
 
@@ -232,6 +256,13 @@ function report(r, { quiet = false } = {}) {
   if (r.ahead) {
     say(`  note: live (${r.live.coreVersion}) is AHEAD of ${r.mainRef} (${r.onMain}) — this checkout is stale; fetch.`);
   }
+  // The watcher's watcher: if this checkout carries a subscription roster and that roster is not
+  // healthy, the unattended upgrade is not going to close the gap above on its own.
+  if (r.subscriptions && r.subscriptions.level !== 'ok') {
+    say('');
+    say(`  ${r.subscriptions.level === 'alarm' ? '⚠ AUTO-UPGRADE' : 'note: auto-upgrade'} — ${r.subscriptions.message}`);
+    if (r.behind) say('    So the gap above will NOT close by itself.');
+  }
   say('');
   say('  Merging to main deploys nothing by design. "shipped" means "merged" —');
   say('  it does not mean users can see it.');
@@ -317,4 +348,4 @@ if (require.main === module) {
   });
 }
 
-module.exports = { check, report, line, coreVersionAt, unreleasedSince, cmpSemver };
+module.exports = { check, report, line, coreVersionAt, unreleasedSince, cmpSemver, subscriptionHealth };

package/scripts/gds/fitness.js

@@ -1307,6 +1307,7 @@ const CHECKS = [
   require('./control-manifest.js').checkControlsExist, // Check 21 — task 1003131: goal-1000076 controls assert their own existence (the ADR 0022 assurance-of-assurance)
   require('./routine-schedule.js').checkRoutineCadencesScheduled, // Check 25 — task 1003209: a routine that declares a cadence must have a scheduler firing it AT that period (ADR 0188)
   require('./baseline-staleness.js').checkBaselineFloors, // Check 26 — task 1003210: a shrink-only baseline that never shrinks is unmanaged debt; a floor exempting one must say why
+  require('./client-baseurl-guard.js').checkClientBaseUrl, // Check 27 — task 1003263: a page must not combine baseUrl:'' with a generated namespaced call (that pairing 404s every request; three pages shipped it, two of them dead in prod)
 ];
 
 function runAll() {