@bongos/core 1.19.408 → 1.19.410

package/tests/prose_edits.mjs

@@ -182,16 +182,20 @@ await test('ROUTE SHAPE: the author gate is fail-closed and uses the array form
   assert.match(src, /captured_by != null/, 'and the author check treats a NULL author as not-you');
 });
 
-await test('ROUTE SHAPE: the goal + visibility handlers share ONE authority gate', () => {
-  // Both were moved into goal-edits.js precisely because they are the same kind
-  // of operation behind the same gate; this pins that they still are.
+await test('ROUTE SHAPE: every goal-edit handler shares ONE authority gate', () => {
+  // Each was moved into goal-edits.js precisely because they are the same kind
+  // of operation behind the same gate; this pins that they still are. The count
+  // grows with the file — task 1002971 added the D6 accepting-requests toggle,
+  // the third write to a goal's own row behind authorizeGoalManagement.
   const src = readFileSync(new URL('../modules/lifecycle/goal-edits.js', import.meta.url), 'utf8');
-  assert.equal((src.match(/authorizeGoalManagement\(/g) || []).length, 2, 'prose + visibility, both gated');
+  assert.equal((src.match(/authorizeGoalManagement\(/g) || []).length, 3, 'prose + visibility + accepting-requests, all gated');
   assert.equal(typeof goalEdits.goalProseHandler, 'function');
   assert.equal(typeof goalEdits.goalVisibilityHandler, 'function');
+  assert.equal(typeof goalEdits.goalAcceptingRequestsHandler, 'function');
   const routes = readFileSync(new URL('../modules/lifecycle/routes/goals.js', import.meta.url), 'utf8');
   assert.match(routes, /router\.patch\('\/goals\/:id',/, 'the REGISTRATION stays in the route file so route-rank-check sees it');
   assert.match(routes, /router\.patch\('\/goals\/:id\/visibility',/);
+  assert.match(routes, /router\.patch\('\/goals\/:id\/accepting-requests',/);
 });
 
 // ---- 5. THE HANDLERS ARE ACTUALLY INVOKED ---------------------------------