@bongos/core 1.19.503 → 1.19.504

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.503",
-  "core_contract": "1.19.503",
-  "source_commit": "df473e8241e4225ae20d599c3158e244199d4e16",
+  "core_version": "1.19.504",
+  "core_contract": "1.19.504",
+  "source_commit": "96482f8fb1d0169f219d074f71df3fc67a9cd326",
   "source_ref": "HEAD",
-  "built_at": "2026-09-03T17:20:56.366Z",
+  "built_at": "2026-09-03T17:25:18.511Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 427,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 2394,
-  "tree_sha256": "d2fa5b6500a8ab75eb8c81b3ce9e8b56dfe858dad8ac0ac161f7b9653f0b83d9",
+  "tree_sha256": "26ec04b40be6bdbd60cbf3e985893d173d7e24138984ffab8e1e13255d298d00",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -1727,12 +1727,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "a58679c1cbf659e334938c752ff1c5dd56800057fe590b74a65ac6c5799900ab"
+      "sha256": "b88ee6e73282179c6c4234af8361227cbe2c790ca46822d202bc29297a813b9d"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "acb0ebb7c6c6204c482a4f7e57ee8e7187b1b03441abe5110a36dd7a159f17d5"
+      "sha256": "e2c273686958a096eb60708dfb2181f61ef120ff150345e614616c48e5367560"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2577,7 +2577,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "617f270d120002ae0d222e6454744f946f25c7f531557365389f199bf0d2555c"
+      "sha256": "daf79599dc6cea40dcd488676b8b8673c8d8651bcf46c492ce9d1cff7b110941"
     },
     {
       "path": "docs/modules-contract.md",
@@ -5037,7 +5037,7 @@
     {
       "path": "modules/hall-ui/public/shell.js",
       "mode": "0000644",
-      "sha256": "1779bddc395a97fa0a5934838c483cfa8cc1b331dc354407521fa12c1a815727"
+      "sha256": "3dc94ce92e6131a632a9c0749edb86efebe3e35077528668b2340c931f138448"
     },
     {
       "path": "modules/hall-ui/public/ship.wav",
@@ -7227,12 +7227,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "74063906121c7bd41daa897aa6710baff1f0737e954fb570e86f3374194cce85"
+      "sha256": "1d0767945801b150d2f8d7b3559e15e69c27db9dfd559618b1a2c6eaeb81ecef"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "a56c6e485d5d87daba754dce001fc77ee52e566801e333a5e03221d161bc3682"
+      "sha256": "a3e1829e516c862e34180c932552d5df7912352f685c83d84137022c22ca3e9f"
     },
     {
       "path": "public-docs/index.html",
@@ -8902,7 +8902,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "24b41b0c2d49f19e302831644599b853f1f10ded65aeb56b3024b9de6a9d4cf7"
+      "sha256": "e34fd7bf26cd87df1b86dd3e28e2b345eecf5c902c64639157fb49b310126b90"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -10307,7 +10307,7 @@
     {
       "path": "tests/hall_nav.mjs",
       "mode": "0000644",
-      "sha256": "05ed6e312636cd1f4af9a26daf8c030c5892e2dc9f24ec6969fa224db5cf0525"
+      "sha256": "f621410c18a7f4c69108ddad5cd4047e303df4f774503d13cc650a5e255f8d52"
     },
     {
       "path": "tests/hall_oversight_world.mjs",

package/docs/copy-inventory.md

@@ -498,8 +498,8 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `7ee76a958445` | certain | Join requests | `modules/hall-ui/public/goals-render.js:1113` |
 | `b7ab5922126b` | certain | Join-requests to approve | `modules/hall-ui/public/goal-inbox.js:117` |
 | `d305f0df6f25` | certain | Jump to | `modules/hall-ui/public/palette.js:223` |
-| `2bfc5a50ce88` | certain | Jump to a page or record | `modules/hall-ui/public/shell.js:344` |
-| `eba610d25523` | certain | Jump to… | `modules/hall-ui/public/shell.js:346` |
+| `2bfc5a50ce88` | certain | Jump to a page or record | `modules/hall-ui/public/shell.js:363` |
+| `eba610d25523` | certain | Jump to… | `modules/hall-ui/public/shell.js:365` |
 | `bc779353aa0c` | certain | Karma — peer recognition and approvals, a separate counter from {…}. | `modules/hall-ui/public/profile.js:65` |
 | `de0e1590667f` | certain | Keep all {…} {…} — they are the values the code drops in, and the change cannot land without them. | `modules/hall-ui/public/copy-desk.js:442` |
 | `32d25ef2182d` | certain | Keep box | `modules/hall-ui/public/box-panel.js:164` |
@@ -633,7 +633,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `0c471e06cfc1` | certain | Only you can settle your own request — mark it answered when someone helped, or withdraw it when you no longer | `modules/hall-ui/public/collab.html:51` |
 | `261d123970e8` | certain | Open goal #{…} | `modules/hall-ui/public/roadmap.js:100` |
 | `5f3e0b179839` | certain | Open in Sessions | `modules/hall-ui/public/task.js:443` |
-| `3366b115217b` | certain | Open navigation | `modules/hall-ui/public/shell.js:335` |
+| `3366b115217b` | certain | Open navigation | `modules/hall-ui/public/shell.js:354` |
 | `0f0b1e62148d` | certain | Open online environment | `modules/hall-ui/public/box-panel.js:421` |
 | `855277dff074` | certain | Open task #{…} | `modules/hall-ui/public/goals-render.js:392` |
 | `855277dff074` | certain | Open task #{…} | `modules/hall-ui/public/work.js:1065` |
@@ -801,12 +801,12 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `e57ec24e13ef` | certain | Sign in with GitHub | `modules/hall-ui/public/hall-render.js:259` |
 | `e57ec24e13ef` | certain | Sign in with GitHub | `modules/hall-ui/public/hall-render.js:330` |
 | `e57ec24e13ef` | certain | Sign in with GitHub | `modules/hall-ui/public/hall-render.js:399` |
-| `e57ec24e13ef` | certain | Sign in with GitHub | `modules/hall-ui/public/shell.js:305` |
-| `1883ad7f07fc` | certain | Sign out | `modules/hall-ui/public/shell.js:323` |
-| `1883ad7f07fc` | certain | Sign out | `modules/hall-ui/public/shell.js:480` |
+| `e57ec24e13ef` | certain | Sign in with GitHub | `modules/hall-ui/public/shell.js:324` |
+| `1883ad7f07fc` | certain | Sign out | `modules/hall-ui/public/shell.js:342` |
+| `1883ad7f07fc` | certain | Sign out | `modules/hall-ui/public/shell.js:499` |
 | `8ad669ab2565` | certain | Sign out everywhere | `modules/hall-ui/public/settings.html:171` |
 | `ecc12c1dd4de` | certain | Skill voices | `modules/hall-ui/public/settings.html:291` |
-| `87cee78ca134` | certain | Skip to content | `modules/hall-ui/public/shell.js:471` |
+| `87cee78ca134` | certain | Skip to content | `modules/hall-ui/public/shell.js:490` |
 | `688ca7b6e30f` | certain | Slop — reads as machine-written | `modules/hall-ui/public/copy-desk.html:90` |
 | `82df09a08476` | certain | So the Archon knows who you are | `modules/hall-ui/public/hall-render.js:278` |
 | `7da6a848cd26` | certain | Someone helped | `modules/hall-ui/public/collab.js:90` |
@@ -822,7 +822,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `4e09b7f4288b` | certain | Stops and deletes your box. Provision a fresh one anytime. | `modules/hall-ui/public/box-panel.js:150` |
 | `6c6544f5c011` | certain | Stored encrypted; never shown again after saving — only its last four digits. | `modules/hall-ui/public/settings.html:193` |
 | `f79e1fb8ebd4` | certain | Suggested as you type; leave it on "no goal" and it waits for triage. | `modules/hall-ui/public/ideas.html:91` |
-| `1e40f33483eb` | certain | Switch theme | `modules/hall-ui/public/shell.js:350` |
+| `1e40f33483eb` | certain | Switch theme | `modules/hall-ui/public/shell.js:369` |
 | `93fa2e97dd35` | certain | System default for this skill | `modules/hall-ui/public/settings.js:74` |
 | `4894b1d9b0de` | certain | System oversight: people, operations and security. | `modules/hall-ui/public/watch.js:1024` |
 | `dfc967a63d57` | certain | Task lifecycle from backlog to shipped, showing states and transitions and the edge where credits are awarded. | `modules/hall-ui/public/diagrams.html:51` |
@@ -840,7 +840,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `2fc66e722e33` | certain | Tasks open once you have read the builder primer. | `modules/hall-ui/public/work.html:43` |
 | `44579eef0c8d` | certain | Tasks — {{worldName}} | `modules/hall-ui/public/work.html:6` |
 | `44579eef0c8d` | certain | Tasks — {{worldName}} | `modules/hall-ui/public/work.html:6` |
-| `2f4f047dc1b4` | certain | Text size | `modules/hall-ui/public/shell.js:349` |
+| `2f4f047dc1b4` | certain | Text size | `modules/hall-ui/public/shell.js:368` |
 | `545c59c1deb7` | certain | That is the session you are using right now. Ending it signs you out of this page. | `modules/hall-ui/public/settings-sessions.js:74` |
 | `282c3fa2d456` | certain | That is the wording it already has. Change something, or file a flag instead if you only want to mark it. | `modules/hall-ui/public/copy-desk.js:438` |
 | `c0e28f30524d` | certain | That project's own standing, as reported by that project. | `modules/hall-ui/public/profile.js:285` |

package/docs/copy-registry.json

@@ -226,7 +226,7 @@
         "modules/hall-ui/public/hall-render.js:259",
         "modules/hall-ui/public/hall-render.js:330",
         "modules/hall-ui/public/hall-render.js:399",
-        "modules/hall-ui/public/shell.js:305"
+        "modules/hall-ui/public/shell.js:324"
       ]
     },
     {
@@ -1214,8 +1214,8 @@
       "text": "Sign out",
       "occurrences": 2,
       "at": [
-        "modules/hall-ui/public/shell.js:323",
-        "modules/hall-ui/public/shell.js:480"
+        "modules/hall-ui/public/shell.js:342",
+        "modules/hall-ui/public/shell.js:499"
       ]
     },
     {
@@ -5349,7 +5349,7 @@
       "surface": "builders-hall",
       "text": "Jump to a page or record",
       "file": "modules/hall-ui/public/shell.js",
-      "line": 344,
+      "line": 363,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -5358,7 +5358,7 @@
       "surface": "builders-hall",
       "text": "Jump to…",
       "file": "modules/hall-ui/public/shell.js",
-      "line": 346,
+      "line": 365,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -6564,7 +6564,7 @@
       "surface": "builders-hall",
       "text": "Open navigation",
       "file": "modules/hall-ui/public/shell.js",
-      "line": 335,
+      "line": 354,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -8076,7 +8076,7 @@
       "surface": "builders-hall",
       "text": "Sign in with GitHub",
       "file": "modules/hall-ui/public/shell.js",
-      "line": 305,
+      "line": 324,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -8085,7 +8085,7 @@
       "surface": "builders-hall",
       "text": "Sign out",
       "file": "modules/hall-ui/public/shell.js",
-      "line": 323,
+      "line": 342,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -8094,7 +8094,7 @@
       "surface": "builders-hall",
       "text": "Sign out",
       "file": "modules/hall-ui/public/shell.js",
-      "line": 480,
+      "line": 499,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -8121,7 +8121,7 @@
       "surface": "builders-hall",
       "text": "Skip to content",
       "file": "modules/hall-ui/public/shell.js",
-      "line": 471,
+      "line": 490,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -8265,7 +8265,7 @@
       "surface": "builders-hall",
       "text": "Switch theme",
       "file": "modules/hall-ui/public/shell.js",
-      "line": 350,
+      "line": 369,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -8427,7 +8427,7 @@
       "surface": "builders-hall",
       "text": "Text size",
       "file": "modules/hall-ui/public/shell.js",
-      "line": 349,
+      "line": 368,
       "origin": "js-markup",
       "confidence": "certain"
     },

package/docs/module-api-changelog.md

@@ -1443,5 +1443,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.501 with no explicit bump. run 33777587058. (task 1002620)
   1.19.503 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.502 with no explicit bump. run 33783963947. (task 1002620)
+  1.19.504 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.503 with no explicit bump. run 33784387586. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/hall-ui/public/shell.js

@@ -166,16 +166,35 @@
       // profile' shortcut once you're signed in".
       { id: 'profile', label: 'Profile', icon: 'profile', href: '/profile', gate: 'signed' },
     ] },
-    { group: 'Community', gate: 'member', items: [
+    // task 1003442 (goal 1000075): Community is Collab + Builders, and NEITHER
+    // carries a rank flag any more. Both items and this head read 'member'
+    // (authed && rank !== 'xenos') until now, which hid them from the newcomer
+    // the pages are most useful to — while the walls themselves were already
+    // open: /builders/collab dispatches to requireBuilderPage (any signed-in
+    // builder, NO rank floor) and /builders/roster is `null` in the page-gate
+    // ORACLE, fronting a deliberately unauthenticated GET /leaderboard. So the
+    // rank gate lived only in this list — hiding a link to data anyone can
+    // already curl, which tests/hall_page_gate_map.mjs calls "a wall that exists
+    // only in the reviewer's head". Removing it is a correction, not a policy
+    // change: no page gate, permission or API floor moves with it.
+    //
+    // 'signed', not 'always', on purpose. The complaint is the RANK flag, and
+    // 'signed' carries none. /roster's PAGE stays public — a stranger may still
+    // open it by URL, exactly as the ORACLE intends — but the nav entry is a
+    // shortcut for someone who is signed in, the same cosmetic call /profile
+    // already makes for its own public page. It also keeps the group honest:
+    // Collab genuinely needs a session, so an 'always' head would show a
+    // Community group that is one item for a stranger and two for everyone else.
+    { group: 'Community', gate: 'signed', items: [
       // task 1003172 (C02, goal 1000075): help requests addressed to you. In
       // Community because the group is picked by WHOSE data it is, and this is
       // other builders reaching you — not your own numbers (that is You).
-      { id: 'collab', label: 'Collab', icon: 'leaderboard', href: '/collab', gate: 'member' },
+      { id: 'collab', label: 'Collab', icon: 'leaderboard', href: '/collab', gate: 'signed' },
       // task 1003441: was the #leaderboard hash view on the home page, which is
       // why this group read as one real page plus a link into index.html. Now a
       // page, so no `view` key. Labelled Builders — 'roster' is the word
       // modules/hall-ui/CLAUDE.md uses, but Builders is what a reader scans for.
-      { id: 'roster', label: 'Builders', icon: 'leaderboard', href: '/roster', gate: 'member' },
+      { id: 'roster', label: 'Builders', icon: 'leaderboard', href: '/roster', gate: 'signed' },
       // task 1002577: the cross-project builder directory (/scouting graduated
       // into the hall). Gated to MATCH its data — /api/gds/scouting checks
       // `project.curate`, whose catalog floor is METIC. This read 'archon' until

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.503",
+  "version": "1.19.504",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.503",
+      "version": "1.19.504",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.503",
+  "version": "1.19.504",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/src/module-api.js

@@ -45,7 +45,7 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.503'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.504'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/hall_nav.mjs

@@ -193,6 +193,39 @@ test('href check actually CATCHES a dead link', () => {
   assert.equal(hrefResolves({ href: '/drachmae', external: false }), true);
 });
 
+// ── Community carries no rank flag (task 1003442, goal 1000075) ─────────────
+
+// The nav ladder as shell.js gateAllows() defines it, for ONE viewer: a signed-in
+// xenos. Restated here rather than imported because the point of this file is to
+// check the rendered markup against the rule, not to trust the source twice.
+const XENOS_SEES = { always: true, signed: true, work: false, member: false, government: false, archon: false };
+// The gates that encode a RANK floor. 'signed' is not one of them — it asks
+// whether you are here, not who you are.
+const RANK_GATES = new Set(['member', 'work', 'government', 'archon']);
+
+test('THE CORRECTION: Community shows a xenos two items, Collab and Builders', () => {
+  // Both items read 'member' until task 1003442, so a newcomer saw an empty
+  // Community group — while /builders/collab was already requireBuilderPage (no
+  // rank floor) and /builders/roster was already `null` in the page-gate ORACLE.
+  // The rank gate existed only in the nav list.
+  const community = parseNav(boot().sidebarHtml).find((g) => g.label === 'Community');
+  assert.ok(community, 'the Community group renders');
+  assert.equal(XENOS_SEES[community.headGate], true, 'the group HEAD is visible to a xenos');
+  const visible = community.items.filter((i) => XENOS_SEES[i.gate]);
+  assert.deepEqual(visible.map((i) => i.id), ['collab', 'roster'],
+    'a xenos sees exactly Collab and Builders');
+});
+
+test('neither Community page hides behind a rank the page itself does not enforce', () => {
+  // The invariant this task exists to restore: a nav flag may be narrower than
+  // the wall for cosmetic reasons (/profile does it), but it must never assert a
+  // RANK the page gate does not. /people keeps its rank flag legitimately — it
+  // fronts project.curate, which requireProjectCuratePage really does enforce.
+  const community = parseNav(boot().sidebarHtml).find((g) => g.label === 'Community');
+  const ranked = community.items.filter((i) => RANK_GATES.has(i.gate)).map((i) => i.id);
+  assert.deepEqual(ranked, ['people'], 'only /people carries a rank flag, and its API enforces one');
+});
+
 test('no group head is gated wider than its own items', () => {
   const bad = parseNav(boot().sidebarHtml).filter(headOutOfRange).map((g) => g.label);
   assert.deepEqual(bad, [], 'a head gated wider than every item would render a label over nothing');