@bongos/core 1.19.457 → 1.19.458

package/modules/hall-ui/public/watch.states.json

@@ -46,6 +46,52 @@
     },
     "out": {
       "auth": false
+    },
+    "operations": {
+      "auth": true,
+      "actions": [
+        [
+          "wait",
+          700
+        ],
+        [
+          "click",
+          "#tab-operations"
+        ],
+        [
+          "wait",
+          300
+        ]
+      ],
+      "expect": {
+        "visible": [
+          "#pane-operations",
+          "#sessions-stats"
+        ]
+      }
+    },
+    "security": {
+      "auth": true,
+      "actions": [
+        [
+          "wait",
+          700
+        ],
+        [
+          "click",
+          "#tab-security"
+        ],
+        [
+          "wait",
+          300
+        ]
+      ],
+      "expect": {
+        "visible": [
+          "#pane-security",
+          "#watch-scroll"
+        ]
+      }
     }
   },
   "reducedMotion": {
@@ -56,5 +102,6 @@
         600
       ]
     ]
-  }
+  },
+  "_states": "task 1003469: the three tabs are three states, so the Operations figure bands and the recent-sessions ledger, and the Security panel's four groups, are each measured and not only the People tab the page opens on."
 }

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.457",
+  "version": "1.19.458",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.457",
+      "version": "1.19.458",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.457",
+  "version": "1.19.458",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/src/module-api.js

@@ -33,7 +33,7 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.457'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.458'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/hall_oversight_world.mjs

@@ -0,0 +1,118 @@
+// tests/hall_oversight_world.mjs — the oversight family in the chrome world
+// (task 1003469, goal 1000081): government, watch, harbor and gate share one
+// archetype sheet (oversight.css) the way the records share record.css and the
+// reading rooms room.css. These are static pins over the shipped source: the
+// family sheet is linked and spends only the fifteen, every page renders the
+// family's row, Watch has no page-local table, the facts the audit found thrown
+// away (a rank's description, the five recent sessions) are rendered, the
+// coloured bands are gone, the shared modal has no shadow, and the one control
+// the shell does not style (a number input) clears the 24px floor.
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
+const PUB = path.join(ROOT, 'modules', 'hall-ui', 'public');
+const read = (f) => fs.readFileSync(path.join(PUB, f), 'utf8').replace(/\r\n/g, '\n');
+const PAGES = ['government', 'watch', 'harbor', 'gate'];
+
+test('every oversight page links the family sheet, before its own', () => {
+  for (const p of PAGES) {
+    const html = read(`${p}.html`);
+    const fam = html.indexOf('/builders/oversight.css');
+    const own = html.indexOf(`/builders/${p}.css`);
+    assert.ok(fam > 0, `${p}.html links oversight.css`);
+    assert.ok(own > fam, `${p}.html links its own sheet after the family's`);
+  }
+});
+
+test('the family sheet spends only the fifteen: no literal colour', () => {
+  const css = read('oversight.css');
+  const hexes = css.match(/#[0-9a-f]{3,8}\b/gi) || [];
+  assert.deepEqual(hexes, [], `oversight.css carries literal colours: ${hexes.join(', ')}`);
+  assert.ok(!/rgba?\(/.test(css), 'no rgb() literal either');
+});
+
+test('the row is the family\'s archetype, and every page renders it', () => {
+  const css = read('oversight.css');
+  for (const cls of ['.ov-row', '.ov-row__title', '.ov-row__sub', '.ov-row__facts', '.ov-row__right',
+    '.ov-group__head', '.ov-figs', '.ov-modal', '.ov-form', '.ov-toggle', '.ov-lines', '.ov-prose']) {
+    assert.ok(new RegExp(`^${cls.replace(/[.]/g, '\\.')}[\\s,{]`, 'm').test(css), `oversight.css defines ${cls}`);
+  }
+  for (const p of PAGES) assert.match(read(`${p}.js`), /class="ov-row/, `${p}.js renders .ov-row`);
+});
+
+test('Watch has no page-local table: every list is the kit ledger', () => {
+  const js = read('watch.js');
+  assert.ok(!/renderTable\(/.test(js), 'renderTable is gone');
+  assert.ok(!/<table class="watch"/.test(js), 'no <table class="watch"> is emitted');
+  assert.ok(!/table\.watch/.test(read('watch.css')), 'watch.css no longer styles table.watch');
+  const sites = (js.match(/\bledger\((?:target|body|group|locEl|filesEl|recentEl)/g) || []).length;
+  assert.ok(sites >= 9, `the nine lists ride makeLedger (found ${sites} sites)`);
+  // A list that pages re-renders its rows on a flip, so its actions are
+  // delegated to the section, not attached to a row that will be replaced.
+  for (const sel of ['[data-rep-action]', '[data-ovr-action]']) {
+    assert.match(js, new RegExp(`delegate\\(target, '${sel.replace(/[[\]]/g, '\\$&')}'`), `${sel} is delegated`);
+  }
+});
+
+test('Watch renders the five recent sessions it fetches, not only the totals', () => {
+  const js = read('watch.js');
+  const fn = js.slice(js.indexOf('function renderSessions'), js.indexOf('function loadSessions'));
+  assert.match(fn, /data\.sessions/, 'the rows are read');
+  assert.match(fn, /sessions-recent/, 'and rendered into their own mount');
+  assert.match(read('watch.html'), /id="sessions-recent"/, 'the mount exists in the markup');
+  assert.match(js, /limit=5/, 'the request still asks for five');
+});
+
+test('Government renders the rank description the create form collects', () => {
+  const js = read('government.js');
+  const fn = js.slice(js.indexOf('function renderRanks'), js.indexOf('// ---- render: permission grid'));
+  assert.match(fn, /rank\.description/, 'renderRanks reads the description');
+  assert.match(fn, /ov-row__sub/, 'and renders it as the row\'s sub line');
+  assert.match(read('government.html'), /id="gov-create-desc"/, 'the form still collects it');
+});
+
+test('Harbor and Gate carry no coloured band: state is a pill', () => {
+  for (const p of ['harbor', 'gate']) {
+    assert.ok(!/__roof|__seal/.test(read(`${p}.js`)), `${p}.js emits no roof or seal band`);
+    assert.ok(!/__roof|__seal/.test(read(`${p}.css`)), `${p}.css has no band rule`);
+    assert.match(read(`${p}.js`), /fact-pill fact-pill--/, `${p}.js paints state as a .fact-pill`);
+  }
+});
+
+test('the shared confirm modal sits on --z-modal, closed by one hairline and no shadow', () => {
+  const css = read('oversight.css');
+  const bg = css.slice(css.indexOf('.ov-modal-bg {'), css.indexOf('.ov-modal {'));
+  assert.match(bg, /z-index: var\(--z-modal\)/, 'the shell layer, not a guessed number');
+  const modal = css.slice(css.indexOf('.ov-modal {'), css.indexOf('.ov-modal .scroll__h'));
+  assert.ok(!/box-shadow/.test(modal), 'no shadow under the dialog');
+  assert.match(modal, /border: var\(--line\) solid var\(--rule\)/, 'one rule hairline');
+  for (const p of ['harbor', 'gate']) {
+    assert.match(read(`${p}.js`), /className = 'ov-modal-bg'/, `${p}.js opens the family modal`);
+    assert.ok(!/-modal-bg/.test(read(`${p}.css`)), `${p}.css no longer styles a modal of its own`);
+  }
+});
+
+test('a number input inside a family field clears the 24px floor', () => {
+  const css = read('oversight.css');
+  const i = css.indexOf('.ov-field input, .ov-field select, .ov-field textarea {');
+  assert.ok(i > 0, 'the field rule exists');
+  assert.match(css.slice(i, i + 500), /min-height: 30px/, 'the field restates the shell\'s 30px pill');
+  assert.match(read('government.html'), /id="gov-assign-builder" type="number"/, 'the builder id is still a number input');
+});
+
+test('the sealed state is a panel with the floor written from the pack, on all four pages', () => {
+  for (const p of PAGES) {
+    assert.match(read(`${p}.html`), /class="scroll" id="[a-z-]*sealed(-scroll)?" /, `${p}.html seals with a .scroll panel`);
+    assert.match(read(`${p}.js`), /rankLabel\('metic'\)/, `${p}.js writes the floor from the pack's rank label`);
+  }
+});
+
+test('the vocabulary wall holds: the family is named oversight on the government surface', () => {
+  for (const f of ['government.js', 'government.html', 'government.css', 'oversight.css']) {
+    assert.ok(!/governance/i.test(read(f)), `${f} does not say the pre-ADR-0174 word`);
+  }
+});