@bongos/core 1.19.429 → 1.19.431

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (48) hide show
  1. package/.bongos-core.json +71 -51
  2. package/clients/bongos-client/README.md +1 -1
  3. package/clients/bongos-client/bongos-client.global.js +2 -0
  4. package/clients/bongos-client/index.cjs +2 -0
  5. package/clients/bongos-client/index.d.ts +6 -3
  6. package/clients/bongos-client/index.mjs +2 -0
  7. package/docs/adr/0215-the-recruiter-sliver-is-a-ceiling-not-a-step.md +116 -0
  8. package/docs/adr/README.md +1 -0
  9. package/docs/api/openapi.json +74 -3
  10. package/docs/api-reference.md +4 -3
  11. package/docs/copy-inventory.md +162 -154
  12. package/docs/copy-registry.json +271 -198
  13. package/docs/design/mocks/hub/picker.html +421 -0
  14. package/docs/design/projects-hub-direction-v2.md +22 -0
  15. package/docs/file-map.md +1 -0
  16. package/docs/module-api-changelog.md +4 -0
  17. package/modules/dev-box/app/src/vendor/bongos-client.cjs +2 -0
  18. package/modules/hall-ui/public/settings.html +1 -1
  19. package/modules/hall-ui/public/settings.js +17 -8
  20. package/modules/platform-identity/account-visibility.js +47 -0
  21. package/modules/platform-identity/platform-identity.js +4 -4
  22. package/modules/platform-identity/recruiter-sliver.js +197 -0
  23. package/modules/platform-identity/routes/projects.js +24 -0
  24. package/modules/platform-identity/routes/scouting.js +58 -0
  25. package/modules/provisioning/module.json +1 -1
  26. package/modules/provisioning/provisioning.js +63 -2
  27. package/modules/provisioning/routes/provisioning.js +28 -6
  28. package/modules/provisioning/tests/provisioning.mjs +34 -0
  29. package/modules/ui-design/kit/fixtures/featured-hub.json +1 -1
  30. package/modules/ui-design/kit/fixtures/featured.json +1 -1
  31. package/modules/ui-design/kit/fixtures/provisioning-instances.json +1 -1
  32. package/modules/ui-design/kit/serve.js +28 -4
  33. package/package-lock.json +2 -2
  34. package/package.json +1 -1
  35. package/public-landing/assets/cosmos.css +37 -0
  36. package/public-landing/projects.html +164 -5
  37. package/public-landing/projects.probes.json +12 -0
  38. package/public-landing/projects.states.json +3 -2
  39. package/src/module-api.js +1 -1
  40. package/tests/account_privacy_flags.mjs +115 -9
  41. package/tests/effective_visibility_predicate.mjs +58 -1
  42. package/tests/government_require_permission.mjs +22 -0
  43. package/tests/profile_route.mjs +6 -0
  44. package/tests/projects_hub.mjs +122 -7
  45. package/tests/provisioning_settings.mjs +81 -2
  46. package/tests/provisioning_settings_env.mjs +6 -0
  47. package/tests/recruiter_sliver_boundary.mjs +841 -0
  48. package/tests/scouting_owner_access_and_reach.mjs +4 -0
package/tests/scouting_owner_access_and_reach.mjs CHANGED
@@ -263,6 +263,10 @@ require.cache[moduleApiPath] = {
263
263
  // THE REAL GATE. Not a stub: the 403 a non-owner gets below is produced by
264
264
  // production code resolving production permission atoms.
265
265
  requirePermission: auth.requirePermission,
266
+ // The sliver route beside the directory gates on rank (ADR 0215 D4), so the
267
+ // PARTIAL doorway this proof pins has to carry it — otherwise requiring the
268
+ // router throws and this file fails for a reason that is not its subject.
269
+ requireRank: auth.requireRank,
266
270
  requireBuilder: (req, res, next) => {
267
271
  if (!currentCaller) return res.fail('unauthenticated', 401);
268
272
  req.builder = { ...currentCaller };