@bongos/core 1.19.426 → 1.19.428

package/docs/copy-registry.json

@@ -3,17 +3,17 @@
   "generator": "scripts/gds/copy-inventory.js",
   "goal": 1000074,
   "counts": {
-    "strings": 1572,
-    "unique_ids": 1367,
-    "certain": 1572,
+    "strings": 1588,
+    "unique_ids": 1382,
+    "certain": 1588,
     "heuristic": 0,
-    "duplicate_ids": 156
+    "duplicate_ids": 157
   },
   "surfaces": {
     "builders-hall": {
       "at": "modules/hall-ui/public",
-      "files": 72,
-      "strings": 1156
+      "files": 73,
+      "strings": 1164
     },
     "status-dashboard": {
       "at": "modules/status-ui/public",
@@ -23,7 +23,7 @@
     "landing": {
       "at": "public-landing",
       "files": 5,
-      "strings": 318
+      "strings": 326
     }
   },
   "blind_spots": [
@@ -92,7 +92,7 @@
         "public-landing/index.html:900",
         "public-landing/privacy.html:80",
         "public-landing/projects.html:1115",
-        "public-landing/terms.html:76"
+        "public-landing/terms.html:84"
       ]
     },
     {
@@ -105,7 +105,7 @@
         "public-landing/index.html:900",
         "public-landing/privacy.html:80",
         "public-landing/projects.html:1115",
-        "public-landing/terms.html:76"
+        "public-landing/terms.html:84"
       ]
     },
     {
@@ -142,7 +142,7 @@
         "public-landing/contact.html:71",
         "public-landing/index.html:900",
         "public-landing/privacy.html:80",
-        "public-landing/terms.html:76"
+        "public-landing/terms.html:84"
       ]
     },
     {
@@ -1104,7 +1104,7 @@
       "occurrences": 2,
       "at": [
         "public-landing/privacy.html:75",
-        "public-landing/terms.html:71"
+        "public-landing/terms.html:79"
       ]
     },
     {
@@ -1177,6 +1177,16 @@
         "modules/hall-ui/public/box-panel.js:421"
       ]
     },
+    {
+      "id": "820f47ce5f16",
+      "surface": "builders-hall",
+      "text": "Request sent",
+      "occurrences": 2,
+      "at": [
+        "modules/hall-ui/public/profile-connections.js:82",
+        "modules/hall-ui/public/profile-connections.js:130"
+      ]
+    },
     {
       "id": "0887725744f2",
       "surface": "builders-hall",
@@ -1404,7 +1414,7 @@
       "occurrences": 2,
       "at": [
         "public-landing/privacy.html:72",
-        "public-landing/terms.html:72"
+        "public-landing/terms.html:80"
       ]
     },
     {
@@ -1474,7 +1484,7 @@
       "occurrences": 2,
       "at": [
         "public-landing/contact.html:59",
-        "public-landing/terms.html:72"
+        "public-landing/terms.html:80"
       ]
     },
     {
@@ -3589,7 +3599,7 @@
       "surface": "builders-hall",
       "text": "Could not load the profile.",
       "file": "modules/hall-ui/public/profile.js",
-      "line": 615,
+      "line": 620,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -7562,6 +7572,24 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "820f47ce5f16",
+      "surface": "builders-hall",
+      "text": "Request sent",
+      "file": "modules/hall-ui/public/profile-connections.js",
+      "line": 82,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
+    {
+      "id": "820f47ce5f16",
+      "surface": "builders-hall",
+      "text": "Request sent",
+      "file": "modules/hall-ui/public/profile-connections.js",
+      "line": 130,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "e86e43684bce",
       "surface": "builders-hall",
@@ -8129,6 +8157,15 @@
       "origin": "js-text-assign",
       "confidence": "certain"
     },
+    {
+      "id": "969f95f183ca",
+      "surface": "builders-hall",
+      "text": "Sign in to the platform once to activate your profile before connecting.",
+      "file": "modules/hall-ui/public/profile-connections.js",
+      "line": 216,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "b057dfbf49c5",
       "surface": "builders-hall",
@@ -8246,6 +8283,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "c377d8ed744b",
+      "surface": "builders-hall",
+      "text": "Something went wrong. Try again.",
+      "file": "modules/hall-ui/public/profile-connections.js",
+      "line": 271,
+      "origin": "js-notice",
+      "confidence": "certain"
+    },
     {
       "id": "7e4b5d31df51",
       "surface": "builders-hall",
@@ -8543,6 +8589,15 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "e99d4a811e92",
+      "surface": "builders-hall",
+      "text": "That request is no longer available.",
+      "file": "modules/hall-ui/public/profile-connections.js",
+      "line": 266,
+      "origin": "js-notice",
+      "confidence": "certain"
+    },
     {
       "id": "50198c465225",
       "surface": "builders-hall",
@@ -8894,6 +8949,15 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "5151cf635644",
+      "surface": "builders-hall",
+      "text": "They have asked to connect.",
+      "file": "modules/hall-ui/public/profile-connections.js",
+      "line": 199,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "6e46811189db",
       "surface": "builders-hall",
@@ -11351,6 +11415,15 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "0da0e247ff0f",
+      "surface": "builders-hall",
+      "text": "{…} asking to connect",
+      "file": "modules/hall-ui/public/profile-connections.js",
+      "line": 132,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "9d160147b34a",
       "surface": "builders-hall",
@@ -11585,6 +11658,15 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "3ad8f32dd43b",
+      "surface": "builders-hall",
+      "text": "{…} you have sent",
+      "file": "modules/hall-ui/public/profile-connections.js",
+      "line": 133,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "8186b562553a",
       "surface": "builders-hall",
@@ -12175,7 +12257,7 @@
       "surface": "landing",
       "text": "A non-profit, capture-resistant commons.",
       "file": "public-landing/terms.html",
-      "line": 76,
+      "line": 84,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -12436,7 +12518,7 @@
       "surface": "landing",
       "text": "Built by agents, on Cloud Bongos.",
       "file": "public-landing/terms.html",
-      "line": 76,
+      "line": 84,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -12616,7 +12698,7 @@
       "surface": "landing",
       "text": "Don't use {{productName}} to break the law, to attack this site or other people's projects, to mine, spam or otherwise abuse hosted resources, or to harass other builders. The owner may deactivate a builder or take a project offline for breaking these, and may set further house rules inside the hall.",
       "file": "public-landing/terms.html",
-      "line": 65,
+      "line": 73,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -12697,7 +12779,7 @@
       "surface": "landing",
       "text": "Fair use",
       "file": "public-landing/terms.html",
-      "line": 64,
+      "line": 72,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -12800,6 +12882,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "0808df6e434c",
+      "surface": "landing",
+      "text": "From your settings you can hide your statistics, drop out of the recruiting directory, or make your account private. Each takes effect immediately, everywhere, including on a page someone already has open. Hiding removes the platform’s combined view; it does not retract the per-project numbers each project publishes itself, so a determined reader could still add them up the hard way.",
+      "file": "public-landing/terms.html",
+      "line": 69,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "8bb1f00b1558",
       "surface": "landing",
@@ -13088,6 +13179,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "69400ca12477",
+      "surface": "landing",
+      "text": "Once you have signed in here and accepted these terms, your profile and that record are public by default: at your handle’s page, in the people directory, to project owners looking for people to work with, and to search engines. An account that has never signed in here stays provisional and is published nowhere.",
+      "file": "public-landing/terms.html",
+      "line": 68,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "8329bb1a3693",
       "surface": "landing",
@@ -13156,7 +13256,7 @@
       "surface": "landing",
       "text": "Open source (AGPL-3.0)",
       "file": "public-landing/terms.html",
-      "line": 76,
+      "line": 84,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -13300,7 +13400,7 @@
       "surface": "landing",
       "text": "Questions go through the",
       "file": "public-landing/terms.html",
-      "line": 72,
+      "line": 80,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -13318,7 +13418,7 @@
       "surface": "landing",
       "text": "Read the source.",
       "file": "public-landing/terms.html",
-      "line": 71,
+      "line": 79,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -13799,6 +13899,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "198f1eac5a95",
+      "surface": "landing",
+      "text": "The platform stores the date you accepted these terms, and which version, on your account. It is written only by signing in here, and only once — signing in again does not change the original date. This is version",
+      "file": "public-landing/terms.html",
+      "line": 70,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "20fcebaa85c4",
       "surface": "landing",
@@ -13862,12 +13971,21 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "02e596cc4569",
+      "surface": "landing",
+      "text": "These numbers describe; they do not govern.",
+      "file": "public-landing/terms.html",
+      "line": 67,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "ea7de26ce2f0",
       "surface": "landing",
       "text": "These terms ship with the software and change with it. The version served on this page is the one that applies; the repository keeps the history.",
       "file": "public-landing/terms.html",
-      "line": 71,
+      "line": 79,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -13921,7 +14039,7 @@
       "surface": "landing",
       "text": "To the extent the law allows, the people running {{productName}} are not liable for loss arising from its use. It is free software, offered without warranty, as the AGPL-3.0 states.",
       "file": "public-landing/terms.html",
-      "line": 68,
+      "line": 76,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -14024,6 +14142,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "9b3312899fb1",
+      "surface": "landing",
+      "text": "What is public.",
+      "file": "public-landing/terms.html",
+      "line": 68,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "b19e6b7ddc42",
       "surface": "landing",
@@ -14060,6 +14187,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "6130dcb60532",
+      "surface": "landing",
+      "text": "What you control.",
+      "file": "public-landing/terms.html",
+      "line": 69,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "b938baf0f723",
       "surface": "landing",
@@ -14168,6 +14304,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "0f06f7e72ea7",
+      "surface": "landing",
+      "text": "Your acceptance is recorded.",
+      "file": "public-landing/terms.html",
+      "line": 70,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "a4d2357d486b",
       "surface": "landing",
@@ -14276,6 +14421,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "cd379e3e0111",
+      "surface": "landing",
+      "text": "Your work across projects",
+      "file": "public-landing/terms.html",
+      "line": 65,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "bb158e10340b",
       "surface": "landing",
@@ -14362,7 +14516,7 @@
       "surface": "landing",
       "text": "contact page",
       "file": "public-landing/terms.html",
-      "line": 72,
+      "line": 80,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -14524,7 +14678,7 @@
       "surface": "landing",
       "text": "privacy page",
       "file": "public-landing/terms.html",
-      "line": 72,
+      "line": 80,
       "origin": "html-text",
       "confidence": "certain"
     },

package/docs/file-map.md

@@ -244,7 +244,7 @@
 │       ├── terrain.js           ← (Phase D + ADR 0012, CJS): TERRAIN + OBJECT enums + BLOCKING_TERRAINS + BLOCKING_OBJECTS (server twin of public/game/world/terrain.js)
 │       └── map.js               ← (Phase D + ADR 0012): two-grid INITIAL_MAP {ground, objects}; isBlocked checks both layers (mirrors public/game/world/{terrain,map}.js)
 │   (public-status/ moved to modules/status-ui/public/ in BV1.R84 — see the modules/ block above)
-│   (public-builders/ moved to modules/hall-ui/public/ in BV1.R85 — the authenticated builders' hall; see the modules/ block above. It keeps its DEDICATED serving block in src/bongos/serve-internal.js: the builders.<apex> + apex /builders/* shim, canonical redirects, the citizen/Archon page gates, asset-stamping, and the module hall-widget injection — partitioned out of the generic web-surface loop. index.html=the hall dashboard; work/board/roadmap/goals/watch/harbor/gate/pair/settings/ranks/sessions/primer/diagrams/atlas pages; ideas.{html,js,css}=the Full Idea composer (task 1002928 / R152 of goal 1000062 — the five R141 fields with a live R142 completeness meter, both fetched from the server so the page carries no copy of the rules; drafts in localStorage so navigation costs nothing. Task 1002930 / R154 added the SPARK QUEUE above it and a second mode: `?develop=<id>` reuses the same form to develop a spark — the spark's words shown above the fields, its title read-only, and the file routed to POST /inbox/:id/develop instead of POST /inbox, under its own per-idea draft key); idea.html/idea.js=the idea-detail PAGE (/idea/:id, task 1002929 / R153 — the SECOND two-segment hall page after /task/:id: grade, the five answers in template order, the score, and both attributions. The GRADE decides what the page contains — a quick idea gets no five-field skeleton. task-detail.js keeps the #/idea/N overlay because ~320 of its lines are the Metic+ triage panel; the overlay now links here); profile.html/profile.js=the public, shareable builder profile page (/profile?id=N — rank, works, credits, karma, achievements; task 1467); task.html/task.js=the task-detail page (/task/:id, task 751 — replaced the old #/task/N overlay); builders.js=the controller; dom-utils.js/hall-widgets.js=the widget+settings-panel registries.)
+│   (public-builders/ moved to modules/hall-ui/public/ in BV1.R85 — the authenticated builders' hall; see the modules/ block above. It keeps its DEDICATED serving block in src/bongos/serve-internal.js: the builders.<apex> + apex /builders/* shim, canonical redirects, the citizen/Archon page gates, asset-stamping, and the module hall-widget injection — partitioned out of the generic web-surface loop. index.html=the hall dashboard; work/board/roadmap/goals/watch/harbor/gate/pair/settings/ranks/sessions/primer/diagrams/atlas pages; ideas.{html,js,css}=the Full Idea composer (task 1002928 / R152 of goal 1000062 — the five R141 fields with a live R142 completeness meter, both fetched from the server so the page carries no copy of the rules; drafts in localStorage so navigation costs nothing. Task 1002930 / R154 added the SPARK QUEUE above it and a second mode: `?develop=<id>` reuses the same form to develop a spark — the spark's words shown above the fields, its title read-only, and the file routed to POST /inbox/:id/develop instead of POST /inbox, under its own per-idea draft key); idea.html/idea.js=the idea-detail PAGE (/idea/:id, task 1002929 / R153 — the SECOND two-segment hall page after /task/:id: grade, the five answers in template order, the score, and both attributions. The GRADE decides what the page contains — a quick idea gets no five-field skeleton. task-detail.js keeps the #/idea/N overlay because ~320 of its lines are the Metic+ triage panel; the overlay now links here); profile.html/profile.js=the public, shareable builder profile page (/profile?id=N — rank, works, credits, karma, achievements; task 1467); profile-connections.js=section 6 of that page, the hub-only connections block (task 1002296 / R20 of goal 1000045 — the viewer-relative 1st/2nd/3rd/out-of-network label, the mutuals it was computed from, the connect button, and on your own profile both request queues plus your connections ledger. Loaded BEFORE profile.js, which calls window.OTBConnections.render behind a guard, so a page that omits the script simply has no section; the section reveals only when the hub's /connections routes answer, exactly as the cross-project record does. ADR 0212 records why it is on this page rather than the not-yet-built /u/&lt;handle&gt;, and why it addresses a builder by github_login and then uses the canonical handle the API echoes back); task.html/task.js=the task-detail page (/task/:id, task 751 — replaced the old #/task/N overlay); builders.js=the controller; dom-utils.js/hall-widgets.js=the widget+settings-panel registries.)
 │
 ├── infra/                          ← ON-BOX scripts (task 1002699): the four reporter/heartbeat crons every dev box runs from its /workspace clone — box-heartbeat.sh (idle-sweep activity signal), box-report-version.sh (HEAD → POST /box/version), box-report-host-keys.sh (SSH host keys → POST /box/host-keys), box-report-terminal.sh (ttyd URL+credential → POST /box/terminal). Delivered by the workspace clone itself (modules/dev-box/box-access.js sparse scope includes infra/); crons self-installed by box-source-fetch.sh's per-tick bring-up. API base resolves GDS_BASE env → session-file api_base → skip (no hardcoded host in the neutral core).
 ├── devbox-app/                     ← OTB Dev Box — Electron menu-bar/tray switch for the builder's box (#904, ADR 0045; internal). SELF-CONTAINED: own package.json (never feeds the droplet's npm ci); built by .github/workflows/build-devbox-app.yml; published to the public releases repo per config/devbox-app.json; release recipe docs/recipes/devbox-app-release.md
@@ -355,6 +355,7 @@ tests/
 ├── application_echo.mjs          ← (task 1002284, goal 1000045, ADR 0201 D1.3/D1.4): the hub's STATUSLESS echo of an application. Part A pins the domain functions — the read binds `APPLICATION_ECHO_WINDOW_DAYS` itself (one 30, not three), the write is an upsert on the pair, neither statement mentions a status, and a non-numeric principal is refused before any query (ADR 0171 D2). Part B runs the real `POST /my-projects/join` and `GET /my-projects` over an in-memory `platform_identity_application_echoes` table with the relay's answer scripted: only an accepted application leaves a trace — a standing membership, either door refusal, a members-only project and an unreachable project leave none — and best-effort is asserted in both directions (a failed echo write still reports the filed application; a failed echo read still lands the memberships listing). DB-free `unit` lane.
 ├── scouting_owner_access_and_reach.mjs ← (task 1002290, goal 1000045 C5, ADR 0210): the R14 proof — WHO may read the cross-project recruiting directory, and WHO appears in it. A project owner (an instance-asserted, hub-witnessed `membership_kind='owner'`) reads `GET /scouting` with no rank at all; a builder who is neither owner nor `project.curate` holder gets the unchanged 403; an un-witnessed owner claim is refused; a broken ownership read falls closed onto the permission gate rather than admitting or 500ing. And the recruiting opt-out finally bites: a public, unhidden, active account that opted out is absent from `/scouting` and the hall's `/people` (the same endpoint), returns when it opts back in, and the opt-out grants and denies no permission — an opted-out owner still reads the directory while being absent from their own copy of it. Fake pool filtered by each statement's own WHERE clause, real route, real `requirePermission` over the real government catalog, real HTTP. Mutation-checked three ways. DB-free `unit` lane.
 ├── scouting_page_gate.mjs        ← (task 1002290, goal 1000045 C5, ADR 0210 D3): the OTHER half of R14 — the `/builders/people` SHELL must admit exactly the two audiences `GET /scouting` admits. A project owner holding no permission reaches it; everyone the route refuses gets the byte-identical `?denied=project.curate` redirect; and each of six ways the `alsoAdmits` door can fail (module absent, function absent, throw, reject, non-boolean, prototype-only) fails CLOSED. Also pins that the other four page gates never consult the seam at all, and that exactly ONE gate declares a second door. Its own file because the route proof's ESM imports pull `auth.js` in before a session double could be installed — this one installs it first, the `government_page_gates.mjs` pattern. DB-free `unit` lane.
+├── terms_acceptance.mjs        ← (task 1002913, goal 1000045, ADR 0213): the platform T&C acceptance record. Proves the four properties that make it evidence rather than a claim — the /terms page carries the cross-project consent ADR 0141 §4 deferred to it and it is apex-only; acceptance is written ONLY by the hub's own /sso/authorize (driven over the real router with an attacker-controlled query string, so a forged timestamp/version/activate flag reaches nothing); it is written ONCE (the fake pool interprets the upsert's own column assignments, so COALESCE is executed, not string-matched, and an assignment shape it cannot read throws instead of reading as "unchanged"); and consent is two columns in the shared predicate, so an account the hub witnessed before the terms existed publishes nothing. Plus the projection rule — every read whose row a JS twin judges must select both consent columns, or the twin denies everyone silently. DB-free `unit` lane, asserts its own lane membership.
 └── public_task_resolver.mjs      ← (#604): the public `/public/tasks/:id` projection — title/value_summary exposed only for shipped|confirmed; withheld for in-flight so unshipped/security task names can't leak.
 ```
 

package/docs/module-api-changelog.md

@@ -1289,5 +1289,9 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.424 with no explicit bump. run 33270559541. (task 1002620)
   1.19.426 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.425 with no explicit bump. run 33270772607. (task 1002620)
+  1.19.427 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.426 with no explicit bump. run 33271340372. (task 1002620)
+  1.19.428 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.427 with no explicit bump. run 33274315388. (task 1002620)
 ---------------------------------------------------------------------------
 ```