@bongos/core 1.19.468 → 1.19.470

package/src/bongos/serve-internal.js

@@ -837,13 +837,25 @@ function mountInternalSurfaces(app) {
   // exact permission its data route (GET /scouting) checks — same posture as the
   // /government tab above (the page can never drift wider than the API it fronts).
   const PEOPLE_PAGE_RE = /^\/builders\/people(?:\.html)?\/?$/;
-  // /scouting is the LEGACY twin of /people — the same /api/gds/scouting directory,
-  // left behind when task 1002577 graduated it into the hall. It has no nav entry
-  // and its own header claims "Archon-only", but it was never page-gated: the page
-  // rendered for anyone and leaned entirely on the data route's 403. Gated on the
-  // same atom as /people so the two can't drift apart (task 1002710). Deleting it
-  // in favour of /people is a separate call — it is walled, not removed, here.
-  const SCOUTING_PAGE_RE = /^\/builders\/scouting(?:\.html)?\/?$/;
+  // /scouting WAS the legacy twin of /people — the same /api/gds/scouting
+  // directory, left behind when task 1002577 graduated it into the hall. Task
+  // 1003470 had already made the two one page (scouting.html rendered people's
+  // body byte-for-byte and scouting.js was deleted); task 1003440 removes the
+  // door itself, because a second URL onto one directory is a surface to keep in
+  // sync for no reader. The URL survives as a 301 so an old bookmark lands on the
+  // directory instead of a 404. It carries no page gate: the redirect discloses
+  // nothing, and /people's wall applies the instant the browser follows it.
+  const SCOUTING_LEGACY_RE = /^\/builders\/scouting(?:\.html)?\/?$/;
+  app.use((req, res, next) => {
+    if (isModuleSurfaceHost(req)) return next();
+    if (req.method !== 'GET' && req.method !== 'HEAD') return next();
+    if (!SCOUTING_LEGACY_RE.test(path.posix.normalize(req.path))) return next();
+    const qs = req.url.includes('?') ? req.url.slice(req.url.indexOf('?')) : '';
+    // On the builders subdomain the /builders prefix is redundant (the canonical
+    // redirect above strips it), so emit the clean path and save a second hop.
+    return res.redirect(301, `${isBuildersHost(req) ? '' : '/builders'}/people${qs}`);
+  });
+
   app.use((req, res, next) => {
     if (isModuleSurfaceHost(req)) return next();
     if (!req.path.startsWith('/builders')) return next();
@@ -862,7 +874,7 @@ function mountInternalSurfaces(app) {
     if (GOVERNMENT_PAGE_RE.test(norm)) {
       return gdsAuth.requireGovernmentPage(req, res, next);
     }
-    if (PEOPLE_PAGE_RE.test(norm) || SCOUTING_PAGE_RE.test(norm)) {
+    if (PEOPLE_PAGE_RE.test(norm)) {
       return gdsAuth.requireProjectCuratePage(req, res, next);
     }
     next();

package/src/module-api.js

@@ -33,7 +33,7 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.468'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.470'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/hall_catalog_world.mjs

@@ -0,0 +1,181 @@
+// tests/hall_catalog_world.mjs — the catalog pages in the chrome world (task
+// 1003472, goal 1000081): modules and the repo atlas, REDESIGNED rather than
+// re-skinned. Static pins over the shipped source: the module catalog is ONE
+// panel of the oversight family's rows (the card grid, the boxed search and
+// the .mod-chip alias are gone), the description is clamped with a details
+// disclosure under it, the right column is the family's grant toggle or a
+// state pill and never an accent fill, the submit door sits on the row, and
+// the figure band carries the numbers the page head used to say as prose; the
+// atlas keeps its nine semantic colours and puts every piece of chrome around
+// the scene in the shell's dialect — the panel is a .scroll, the view switch
+// the tab strip, the detail card a hairline panel with no shadow — and gains
+// an island index a keyboard or a phone can open.
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
+const PUB = path.join(ROOT, 'modules', 'hall-ui', 'public');
+const read = (f) => fs.readFileSync(path.join(PUB, f), 'utf8').replace(/\r\n/g, '\n');
+// Negative pins read the code, not its comments (a comment that says what left
+// would otherwise fail the pin that says it left).
+const decomment = (src) => src.replace(/\/\*[\s\S]*?\*\//g, '').replace(/<!--[\s\S]*?-->/g, '').replace(/^\s*\/\/.*$/gm, '');
+const STYLE = read('style.css');
+const OVERSIGHT = read('oversight.css');
+const tokensDefined = (css, where) => {
+  for (const t of new Set([...css.matchAll(/var\((--[a-z0-9-]+)\)/g)].map((m) => m[1]))) {
+    const declared = (src) => new RegExp(`(^\\s*|[{;]\\s*)${t}:`, 'm').test(src);
+    assert.ok(declared(STYLE) || declared(OVERSIGHT) || declared(css),
+      `${where} spends ${t}, which neither style.css, oversight.css nor the sheet itself defines`);
+  }
+};
+const noAlias = (rawCss, where) => {
+  const css = decomment(rawCss);
+  const alias = css.match(/--(surface|surface-2|border|border-strong|accent-weak|accent-text)\b/g) || [];
+  assert.deepEqual(alias, [], `${where} spends a compat alias: ${alias.join(', ')}`);
+};
+
+// ---- modules ----------------------------------------------------------------
+
+test('modules: ONE panel of family rows — the filter bar, the figure band and two groups on one .scroll', () => {
+  const html = read('modules.html');
+  assert.match(html, /<link rel="stylesheet" href="\/builders\/oversight\.css">\s*<link rel="stylesheet" href="\/builders\/modules\.css">/, 'the family sheet loads before the page sheet');
+  assert.equal((html.match(/class="scroll[ "]/g) || []).length, 1, 'one panel, not three');
+  assert.match(html, /<div id="mod-filters"><\/div>/, 'the kit filter bar has a mount');
+  assert.match(html, /class="ov-figs" id="mod-figs"/, 'the figure band is the family\'s');
+  assert.match(html, /<ul class="ov-rows" id="core-grid">/, 'the core catalog is a run of rows');
+  assert.match(html, /<ul class="ov-rows" id="own-grid">/, 'the project\'s own modules are a run of rows');
+  assert.equal((html.match(/class="ov-group__head"/g) || []).length, 2, 'two group heads');
+  assert.doesNotMatch(decomment(html), /mod-grid|mod-card|mod-browse|submit-scroll|class="settings-status"/, 'the card grid, the boxed search and the third panel are gone');
+  assert.doesNotMatch(html, /\d+ module\(s\)/, 'the page head no longer says the numbers as prose');
+});
+
+test('modules: the row is the oversight row — title with the mono key, clamped description, facts, one control on the right', () => {
+  const js = read('modules.js');
+  assert.match(js, /<li class="ov-row mod-row" data-key=/, 'each module is an .ov-row');
+  assert.match(js, /<span class="ov-row__title">\$\{escapeHtml\(m\.title \|\| m\.key\)\}<span class="ov-mono">\$\{escapeHtml\(m\.key\)\}<\/span>/, 'the key rides inside the title in mono');
+  assert.match(js, /class="ov-row__sub mod-row__desc"/, 'the description is the sub line');
+  assert.match(js, /<details class="mod-more"/, 'a details disclosure opens the rest');
+  assert.match(js, /<div class="ov-row__facts">\$\{provenancePill\(m\)\}\$\{attributionFacts\(m\)\}\$\{upkeepFact\(m\)\}<\/div>/, 'provenance, credit and upkeep are the facts line');
+  assert.match(js, /<div class="ov-row__right mod-row__right">\$\{rightHtml\(m\)\}<\/div>/, 'the right column is one function');
+  const css = read('modules.css');
+  assert.match(css, /\.mod-row__desc \{[^}]*-webkit-line-clamp: 2/, 'the description clamps to two lines');
+  assert.match(css, /\.mod-row:has\(\.mod-more\[open\]\) \.mod-row__desc/, 'and lifts the clamp while the details are open');
+  assert.doesNotMatch(decomment(js), /class="mod-chip|innerHTML = .*style=|<span style=/, 'no .mod-chip, no inline style');
+});
+
+test('modules: the switch is the family grant toggle or a state pill — never an accent fill, never a dead control', () => {
+  const js = read('modules.js');
+  assert.match(js, /class="ov-toggle mod-toggle" aria-pressed=/, 'the toggle is .ov-toggle with aria-pressed');
+  assert.match(js, /: `<span class="fact-pill \$\{on \? 'fact-pill--ok' : ''\}"/, 'a viewer below the floor sees the state as a pill');
+  assert.match(js, /rankLabel\('metic'\)/, 'the floor is written from the pack');
+  assert.doesNotMatch(js, /Metic\+/, 'and never as a hardcoded rank');
+  const css = decomment(read('modules.css'));
+  assert.doesNotMatch(css, /background:\s*var\(--accent\)/, 'no accent fill on a state');
+  assert.doesNotMatch(css, /button\.mod-toggle|\[data-on=/, 'the old accent-filled toggle is gone');
+  assert.match(js, /class="btn-ghost btn--sm mod-submit" data-submit-key=/, 'the submit door is a ghost pill on the row');
+});
+
+test('modules: upkeep colours the exception — undeclared is the warn pill, maintained a plain fact', () => {
+  const js = read('modules.js');
+  assert.match(js, /fact-pill fact-pill--warn"[^>]*>upkeep undeclared</, 'undeclared upkeep is the warn pill');
+  assert.match(js, /<span class="ov-fact">upkeep <b>\$\{escapeHtml\(status\)\}<\/b><\/span>/, 'a maintained module reads as a plain fact');
+  assert.match(js, /fact-pill fact-pill--info">core-loaded</, 'core-loaded is the info pill');
+  assert.match(js, /<span class="fact-chip">\$\{escapeHtml\(m\.license\)\}<\/span>/, 'the licence is a chip');
+});
+
+test('modules: the kit filter bar carries the search and a state lens, and the empty state is the kit\'s', () => {
+  const js = read('modules.js');
+  assert.match(js, /kit\.makeFilterBar\(\{/, 'the bar is the kit\'s');
+  assert.match(js, /search: \{ id: 'mod-search'/, 'the search keeps its id (the states file fills it)');
+  assert.match(js, /\{ id: 'mod-state', label: 'State'/, 'a state lens');
+  assert.match(js, /kit\.emptyStateHtml\(/, 'empties are the kit\'s');
+  assert.doesNotMatch(decomment(js), /mod-empty/, '.mod-empty is gone');
+  const html = read('modules.html');
+  assert.match(html, /<script src="\/builders\/hall-kit\.js"><\/script>/, 'and the page loads the kit');
+});
+
+test('modules: the figure band carries modules, enabled, built here and undeclared upkeep', () => {
+  const js = read('modules.js');
+  for (const label of ['modules', 'enabled', 'built here', 'no upkeep']) {
+    assert.match(js, new RegExp(`fig\\('${label}'`), `figure: ${label}`);
+  }
+});
+
+test('modules.css spends only the fifteen, and every token it names exists', () => {
+  const css = read('modules.css');
+  noAlias(css, 'modules.css');
+  tokensDefined(css, 'modules.css');
+  assert.doesNotMatch(decomment(css), /#[0-9a-f]{3,8}\b/i, 'no literal colours');
+});
+
+test('the shell no longer aliases .mod-chip onto the pill', () => {
+  const alias = STYLE.slice(STYLE.indexOf('.fact-pill,\n'), STYLE.indexOf('{', STYLE.indexOf('.fact-pill,\n')));
+  assert.doesNotMatch(alias, /mod-chip/, 'modules takes .fact-pill by name');
+});
+
+// ---- atlas ------------------------------------------------------------------
+
+test('atlas: the nine semantic colours stay fixed literals, and nothing else in the sheet is one', () => {
+  const css = read('atlas.css');
+  for (const t of ['--ab-sun', '--ab-sky', '--ab-coral', '--ab-paper', '--ab-good', '--ab-core', '--ab-db', '--ab-ghost', '--ab-danger']) {
+    assert.match(css, new RegExp(`${t}:#[0-9a-f]{6}`), `${t} is a fixed literal (ADR 0094)`);
+  }
+  const rest = decomment(css).replace(/--ab-(sun|sky|coral|paper|good|core|db|ghost|danger):#[0-9a-f]{6}/g, '');
+  assert.deepEqual(rest.match(/#[0-9a-f]{3,8}\b/gi) || [], [], 'no other literal colour');
+  noAlias(css, 'atlas.css');
+  tokensDefined(css, 'atlas.css');
+  assert.doesNotMatch(rest, /box-shadow/, 'no box-shadow: the world draws depth with hairlines');
+});
+
+test('atlas: the panel is the shell\'s .scroll and the view switch is the shell\'s tab strip', () => {
+  const html = read('atlas.html');
+  assert.match(html, /<section class="scroll atlas-page"/, 'the map sits on a .scroll');
+  assert.match(html, /<div class="kit-tabs ab-views" role="tablist"/, 'the view switch is .kit-tabs');
+  assert.equal((html.match(/class="setup__tab" role="tab" data-view=/g) || []).length, 2, 'two tabs');
+  assert.doesNotMatch(decomment(html), /ab-modes|ab-chip"|class="card"/, 'the segmented box, the live chip and the empty card are gone');
+  const css = decomment(read('atlas.css'));
+  assert.doesNotMatch(css, /\.ab-modes|\.ab-chip\b|radial-gradient|\.ab-empty \.card/, 'and their rules with them');
+  const js = read('atlas.js');
+  assert.match(js, /setAttribute\('aria-selected'/, 'the script switches the tabs by aria-selected');
+  assert.doesNotMatch(decomment(js), /classList\.toggle\('active'/, 'not by an .active class');
+});
+
+test('atlas: the detail card is a hairline panel whose facts are the shell\'s pills and chips, and a neighbour is a door', () => {
+  const css = read('atlas.css');
+  assert.match(css, /\.ab-popup\{[^}]*border:var\(--line\) solid var\(--rule\)/, 'the card closes on one rule hairline');
+  const js = read('atlas.js');
+  assert.match(js, /fact-pill fact-pill--' \+ \(PILL\[n\.badge\.k\]/, 'the badge is a status pill');
+  assert.match(js, /<span class="fact-chip">' \+ esc\(n\.metric\)/, 'the metric is a chip');
+  assert.match(js, /<button type="button" class="fact-chip ab-jump" data-node=/, 'a connected island is a button');
+  assert.doesNotMatch(decomment(js), /ab-chip2|ab-badge ab-b-|↔/, 'the glass chips, the private badges and the arrow glyph are gone');
+  assert.match(js, /ev\.key === 'Escape'/, 'Escape closes the card');
+});
+
+test('atlas: the island index renders every node of the view as a row a keyboard can open', () => {
+  const html = read('atlas.html');
+  assert.match(html, /<details class="kit-collapse ab-index" id="ab-index">/, 'the index is a collapsible under the map');
+  assert.match(html, /<ul class="ov-rows" id="ab-index-rows"><\/ul>/, 'its rows are the family\'s');
+  const js = read('atlas.js');
+  assert.match(js, /function drawIndex\(d\)/, 'the index is drawn per view');
+  assert.match(js, /<li class="ov-row ov-row--dense ab-ix" data-node=/, 'each island is a dense row');
+  assert.match(js, /class="ov-row__title ab-ix__t" aria-expanded="false" aria-controls=/, 'the title is a disclosure button');
+  assert.match(js, /body\.innerHTML = detailHTML\(nodeById\(id\)\)/, 'and opens the same detail the map\'s card shows');
+  assert.match(js, /matchMedia\('\(max-width: 640px\)'\)\.matches\) indexEl\.open = true/, 'open by default on a phone, where the index is the read');
+  assert.match(js, /drawIndex\(d\);/, 'drawn on every render');
+});
+
+test('atlas: the hub breathes at the world\'s ambient floor, not as a pulse', () => {
+  const css = read('atlas.css');
+  const m = css.match(/animation:abbreathe (\d+)s/);
+  assert.ok(m && Number(m[1]) >= 20, 'the loop is 20s or slower');
+});
+
+test('the states files exercise the redesign\'s new states', () => {
+  const mod = JSON.parse(read('modules.states.json'));
+  for (const s of ['browse', 'search-empty', 'lens', 'details', 'out']) assert.ok(mod.states[s], `modules: ${s}`);
+  const atlas = JSON.parse(read('atlas.states.json'));
+  for (const s of ['map', 'truth', 'detail', 'index', 'out']) assert.ok(atlas.states[s], `atlas: ${s}`);
+});

package/tests/hall_page_gate_map.mjs

@@ -63,9 +63,11 @@ const ORACLE = {
   '/builders/sessions': 'requireGovernmentPage',
 
   // Metic+ via the `project.curate` atom — the exact permission GET /scouting
-  // checks, so neither page can drift wider than the API it fronts.
+  // checks, so the page can never drift wider than the API it fronts. Its
+  // legacy twin /builders/scouting is gone (task 1003440): the URL now 301s to
+  // /people before this dispatch runs, so it holds no gate and has no row —
+  // tests/hall_roster_world.mjs owns the proof that the redirect is there.
   '/builders/people': 'requireProjectCuratePage',
-  '/builders/scouting': 'requireProjectCuratePage',
 
   // Metic+ since R16 (goal 1000069): the Government page is three rooms —
   // Permissions · Board Room · Constitution (reordered, task 1003269) — and only

package/tests/hall_reading_world.mjs

@@ -364,8 +364,8 @@ test('no reading room carries an inline <style>, and none needs an audit excepti
   assert.ok(budgets, 'hall_audit.mjs still declares the ratchet');
   assert.doesNotMatch(budgets[1].replace(/\/\/[^\n]*/g, ''), /['"][a-z-]+\.html['"]\s*:/,
     'no page carries an inline-style exception any more');
-  // (scouting.html keeps a one-line block, comfortably inside the DEFAULT
-  // budget — an exception is what this asserts is gone, not every <style>.)
+  // (an exception is what this asserts is gone, not every <style>. scouting.html
+  // was the last page carrying a one-line block; task 1003440 deleted the page.)
 });
 
 test('roadmap\'s two sub-24px controls clear the floor, on both axes', () => {

package/tests/hall_roster_world.mjs

@@ -5,8 +5,8 @@
 // in the open and the rest behind the kit's disclosure, the readiness is the
 // family's figure band in the same dot language as the roll line, the view
 // toggle is a view and not a filter, the accent lands on the one live door; the
-// two directory pages are ONE page (the legacy door renders the same body from
-// the same script) and the directory shows the avatar, the name and the login
+// legacy /scouting door is deleted and its URL redirects onto the one directory
+// page (task 1003440), which shows the avatar, the name and the login
 // the API returns; the session ledger drops the nowrap + wrapper pair that broke
 // its sticky header, makes every id a door, and names its floor from the pack.
 import test from 'node:test';
@@ -165,17 +165,47 @@ test('goals.css and people.css spend only the fifteen, and every token they name
 });
 
 // =========================================================================
-// PEOPLE + SCOUTING — one directory, two doors
+// PEOPLE — one directory, one door
 // =========================================================================
 
-test('scouting is the same page as people: one body, one script, no script of its own', () => {
+// Task 1003470 made /scouting render people.html byte-for-byte; task 1003440
+// removes the door itself. Two URLs onto one directory is a surface to keep in
+// sync that no reader ever asked for — but the URL still has to answer, or a
+// bookmark on the old door 404s.
+test('the legacy /scouting door is deleted, and nothing scouting-shaped is left in the hall', () => {
+  for (const f of ['scouting.html', 'scouting.js', 'scouting.states.json', 'scouting.css']) {
+    assert.ok(!fs.existsSync(path.join(PUB, f)), f + ' is gone — one directory, one door');
+  }
+});
+
+test('the /scouting URL redirects to /people, and no dead gate dispatches to it', () => {
+  const serve = fs.readFileSync(path.join(ROOT, 'src', 'bongos', 'serve-internal.js'), 'utf8');
+  const i = serve.indexOf('const SCOUTING_LEGACY_RE');
+  assert.ok(i > 0, 'the retired URL keeps a matcher, so the bookmark still lands somewhere');
+  const block = serve.slice(i, i + 1200);
+  assert.ok(block.includes('res.redirect(301,'), 'and answers with a permanent redirect');
+  assert.ok(block.includes("/people"), 'pointing at the directory that replaced it');
+  // RUN the shipped matcher, rather than trusting that it reads right. Anchoring
+  // is the half that goes wrong: an unanchored twin would swallow the API route.
+  const decl = 'const SCOUTING_LEGACY_RE = ';
+  const j = serve.indexOf(decl);
+  const rx = eval(serve.slice(j + decl.length, serve.indexOf(';', j))); // eslint-disable-line no-eval
+  for (const p of ['/builders/scouting', '/builders/scouting/', '/builders/scouting.html']) {
+    assert.ok(rx.test(p), p + ' must reach the redirect');
+  }
+  for (const p of ['/api/gds/scouting', '/api/bongos/scouting', '/builders/people',
+    '/builders/scoutingfoo', '/builders/scouting/extra']) {
+    assert.ok(!rx.test(p), p + ' must NOT be redirected — the data route and the directory are not the door');
+  }
+  // The gate is the half that would rot silently: a page-gate branch still
+  // naming a deleted page is a wall guarding nothing.
+  assert.ok(!decomment(serve).includes('SCOUTING_PAGE_RE'),
+    'no page gate is left dispatching to a page that no longer exists');
+});
+
+test('the directory page loads its own script, sheet and toolkit', () => {
   const people = read('people.html');
-  const scouting = read('scouting.html');
-  const bodyOf = (html) => html.slice(html.indexOf('<body'));
-  assert.equal(bodyOf(scouting), bodyOf(people), 'the two bodies are byte-identical');
-  assert.ok(!fs.existsSync(path.join(PUB, 'scouting.js')), 'scouting.js is gone — the third rendering of one endpoint');
-  assert.doesNotMatch(scouting, /<style[^>]*>/, 'the legacy door carries no inline style');
-  for (const html of [people, scouting]) {
+  for (const html of [people]) {
     assert.match(html, /\/builders\/people\.js/);
     assert.match(html, /\/builders\/people\.css/);
     assert.match(html, /\/builders\/dom-utils\.js/, 'the toolkit the rank label and the number formats come from');
@@ -280,8 +310,6 @@ test('the states files exercise the redesign\'s new states', () => {
   assert.deepEqual(goals.states.cards.expect.value, [['#f-goal-view', 'cards']]);
   const people = JSON.parse(read('people.states.json'));
   assert.ok(people.states.search, 'people: a search is measured');
-  const scouting = JSON.parse(read('scouting.states.json'));
-  assert.deepEqual(scouting.states.board.expect.visible, ['#people-scroll'], 'scouting expects the People panel');
   const sessions = JSON.parse(read('sessions.states.json'));
   assert.deepEqual(sessions.states.ledger.expect.visible, ['#stats-scroll', '#sessions-scroll']);
 });

package/modules/hall-ui/public/scouting.html

@@ -1,69 +0,0 @@
-<!doctype html>
-<html lang="en">
-<head>
-  <meta charset="utf-8">
-  <meta name="viewport" content="width=device-width, initial-scale=1">
-  <title>People — {{worldName}}</title>
-  <meta name="description" content="The builder directory: everyone building across {{worldName}} projects, searchable and ranked by track record.">
-  <link rel="icon" href="data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'><text x='16' y='24' font-size='24' text-anchor='middle' font-family='sans-serif'>⌂</text></svg>">
-  <link rel="preconnect" href="https://fonts.googleapis.com">
-  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
-  <link rel="stylesheet" href="/builders/style.css?v=2026-07-02-shell1">
-  <!-- /scouting is the LEGACY DOOR to the People directory (task 1002577
-       graduated it into the hall; task 1002710 walled it on the same
-       project.curate gate). Task 1003470 made it the SAME PAGE: the body below
-       is byte-identical to people.html and runs people.js — the one
-       /api/gds/scouting rollup used to be drawn three different ways, and a
-       door that renders a different page from the same data is the drift.
-       tests/hall_roster_world.mjs holds the two bodies equal. -->
-  <link rel="stylesheet" href="/builders/people.css">
-</head>
-<body data-page="people" data-page-title="People">
-
-<div class="app">
-  <aside class="app-sidebar" id="app-sidebar" aria-label="Primary"></aside>
-  <div class="app-scrim" id="app-scrim" hidden></div>
-  <div class="app-body">
-    <header class="app-topbar" id="app-topbar"></header>
-    <div class="app-content">
-      <!-- The board page head (task 1003307): the label voice, because on a
-           working surface the page's own name is the least interesting thing on
-           it. The sub is rewritten by people.js once the directory has loaded. -->
-      <div class="page-head page-head--board">
-        <h1 class="page-head__h">People</h1>
-        <p class="page-head__sub" id="people-sub">Everyone building across hosted projects, ranked by track record. Descriptive only — cross-project numbers never carry authority here.</p>
-      </div>
-
-      <main id="hall-main">
-        <!-- task 1003470: ONE directory. /people and its legacy door /scouting
-             render this same page from the same script — the same
-             /api/gds/scouting rollup used to be drawn three different ways. -->
-        <section class="scroll" id="people-scroll" aria-labelledby="people-h">
-          <h2 id="people-h" class="scroll__h">Builder directory<span class="count-pill" id="people-count" hidden></span></h2>
-          <div id="people-filters"></div>
-          <div id="people-body">
-            <div class="profile__placeholder">Loading the directory…</div>
-          </div>
-        </section>
-      </main>
-
-      <footer class="app-foot" id="app-foot"></footer>
-    </div>
-  </div>
-</div>
-
-<div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
-
-<!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
-     chrome exists before the page script runs. -->
-<script src="/builders/shell.js?v=2026-07-02-shell1"></script>
-<!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
-<script src="/builders/palette.js" defer></script>
-<!-- shared frontend toolkit (window.OTB — rank labels, number formats) + the
-     branding pack's currency label, loaded BEFORE people.js. -->
-<script src="/builders/dom-utils.js?v=2026-06-14-domutils"></script>
-<script src="/builders/brand-apply.js"></script>
-<script src="/builders/hall-kit.js"></script>
-<script src="/builders/people.js"></script>
-</body>
-</html>

package/modules/hall-ui/public/scouting.states.json

@@ -1,59 +0,0 @@
-{
-  "_": "Scouting — the LEGACY DOOR to the People directory, on the same project.curate gate. Since task 1003470 it renders the People page itself (the same body, the same people.js), so this file measures the door, not a second design: the same floors at the same widths, with the People panel expected. The three-line inline <style> it used to carry went with the page it belonged to.",
-  "page": "/builders/scouting",
-  "surface": "hall-ui",
-  "stub": {
-    "prefix": "/builders/"
-  },
-  "modeQuery": false,
-  "_feeds": "The kit's own stub carries no feed for this page, so against it the page renders its EMPTY and SKELETON states — which is the point: those are states the floors must hold in. Against the hall-preview harness the same states render populated. Every declared 404 below is a fixture the harness does not carry, named rather than hidden.",
-  "ignoreRequests": [
-    "/api/(gds|bongos)/me$",
-    "/api/(gds|bongos)/me/",
-    "/api/(gds|bongos)/goals",
-    "/api/(gds|bongos)/inbox/",
-    "/api/(gds|bongos)/versions",
-    "/api/(gds|bongos)/scouting",
-    "/api/(gds|bongos)/builders"
-  ],
-  "ignoreConsole": [
-    "/api/(gds|bongos)/",
-    "\\b401\\b",
-    "\\b403\\b",
-    "\\b404\\b",
-    "\\b501\\b",
-    "Unauthorized",
-    "Forbidden",
-    "Not Found",
-    "Not Implemented",
-    "load failed"
-  ],
-  "states": {
-    "board": {
-      "auth": true,
-      "actions": [
-        [
-          "wait",
-          700
-        ]
-      ],
-      "expect": {
-        "visible": [
-          "#people-scroll"
-        ]
-      }
-    },
-    "out": {
-      "auth": false
-    }
-  },
-  "reducedMotion": {
-    "auth": true,
-    "actions": [
-      [
-        "wait",
-        600
-      ]
-    ]
-  }
-}