@bongos/core 1.19.512 → 1.19.513

package/modules/hall-ui/public/style.css

@@ -1944,24 +1944,110 @@ main [id] { scroll-margin-top: calc(var(--topbar-h) + 16px); }
   grid-template-columns: repeat(auto-fit, minmax(180px, 1fr));
   gap: 12px;
 }
-.curve__chart {
-  background: var(--surface-2);
-  border-radius: var(--radius-sm);
-  padding: 10px 14px 12px;
+/* ---------- hall-kit charts (task 1003445) ----------
+   The hall's ONE chart vocabulary. Before this the same horizontal bar was
+   written three times — the Curve's kinds, Watch's Review-quality trend, and
+   the profile's craft mix — each with its own class family, geometry and tone,
+   and the line chart a fourth family beside them.
+
+   Three deliberate changes came with the merge, all of them the kit's defaults
+   winning over a copy that had drifted: every row now holds the hall's 24px
+   FLOOR (only the profile's copy remembered it, so the Curve's kind rows grow
+   a few px), the hover dim applies to all three rather than the profile alone,
+   and the value cell right-aligns (a no-op where its column is `auto`).
+   Everything else is declaration-for-declaration what the three families
+   said. */
+
+.kit-chart { background: var(--surface-2); border-radius: var(--radius-sm); padding: 10px 14px 12px; }
+.kit-chart__title { font-size: 12px; font-weight: 600; color: var(--ink-soft); margin: 0 0 6px; }
+.kit-chart__empty { font-size: 12px; color: var(--ink-faint); }
+.kit-chart__foot { font-size: 11.5px; color: var(--ink-faint); margin-top: 4px; }
+
+.kit-spark { width: 100%; height: 44px; display: block; }
+/* The stroke/fill here are the FALLBACK: sparklineHtml writes the caller's
+   colour inline, because the Curve spends a different accent per chart. */
+.kit-spark__line { fill: none; stroke: var(--accent); stroke-width: 2; }
+.kit-spark__area { fill: color-mix(in srgb, var(--accent) 14%, transparent); stroke: none; }
+
+/* Every difference between the three call sites is one of these six custom
+   properties, which is what makes the fifth chart free: pass barSeriesHtml's
+   labelWidth / valueWidth / barHeight / radius / track options, never a new
+   class. */
+.kit-bars {
+  --kit-bars-label-w: 110px;
+  --kit-bars-val-w: auto;
+  --kit-bars-h: 8px;
+  --kit-bars-radius: 4px;
+  --kit-bars-track: var(--surface-2);
+  --kit-bars-fill: var(--accent);
+  display: flex;
+  flex-direction: column;
+  gap: 6px;
+}
+.kit-bars__row {
+  display: grid;
+  grid-template-columns: var(--kit-bars-label-w) minmax(0, 1fr) var(--kit-bars-val-w);
+  align-items: center;
+  gap: 10px;
+  /* The hall's 24px floor, held here so no call site has to remember it —
+     the profile's mix was the only one of the three that did. */
+  min-height: 24px;
+  font-size: 12.5px;
+  font-variant-numeric: tabular-nums;
 }
-.curve__chart-title { font-size: 12px; font-weight: 600; color: var(--ink-soft); margin: 0 0 6px; }
-.curve__chart-empty { font-size: 12px; color: var(--ink-faint); }
-.curve__chart-foot { font-size: 11.5px; color: var(--ink-faint); margin-top: 4px; }
-.spark { width: 100%; height: 44px; display: block; }
-.spark__line { fill: none; stroke: var(--accent); stroke-width: 2; }
-.spark__area { fill: color-mix(in srgb, var(--accent) 14%, transparent); stroke: none; }
+.kit-bars__label { color: var(--ink-soft); white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
+.kit-bars__track {
+  display: block;
+  height: var(--kit-bars-h);
+  background: var(--kit-bars-track);
+  border-radius: var(--kit-bars-radius);
+  overflow: hidden;
+}
+.kit-bars__fill {
+  display: block;
+  height: 100%;
+  background: var(--kit-bars-fill);
+  border-radius: var(--kit-bars-radius);
+  /* A re-render (an SSE nudge, a lookback change) grows the bar to its new
+     width rather than jumping. First paint does not animate: a freshly
+     inserted element has no previous width to transition from. The hall's ONE
+     reduced-motion kill switch (§the kill switch, at the end of this sheet)
+     already zeroes this with !important — do NOT add a second @media block
+     here, which is what `tests/hall_tokens.mjs` forbids and why the rule
+     cannot rot in two places. */
+  transition: width 200ms ease;
+}
+.kit-bars__row:hover .kit-bars__fill { opacity: .8; }
+.kit-bars__val { text-align: right; color: var(--ink-faint); }
+/* The neutral tone: a series read as data rather than as the page's own
+   accent — Watch's trend, where the accent belongs to the pressable. */
+.kit-bars--neutral {
+  --kit-bars-track: var(--rule-soft);
+  --kit-bars-fill: var(--ink-soft);
+}
+.kit-bars--neutral .kit-bars__val { color: var(--ink); }
+
+/* The PLOT: a step line or a column series on a time axis. Moved verbatim from
+   profile.css's .pchart__* (task 1003445), where the same frame was drawn twice
+   by profile-charts.js. The dataviz spec here is measured, not chosen — a 2px
+   accent line, a 10% wash, a hairline solid axis, an r=4 end dot with a 2px
+   card-coloured ring, and the ONE labelled value in ink rather than the series
+   colour. tests/hall_kit_charts.mjs pins all five; do not hand-tune one.
+   `tabindex` is on the svg because the chart is walkable by arrow key, so the
+   focus ring is a real control's, not decoration. */
+.kit-plot { display: block; width: 100%; height: auto; overflow: visible; border-radius: var(--radius-sm); }
+.kit-plot:focus-visible { outline: 2px solid var(--accent); outline-offset: 2px; }
+.kit-plot__line { fill: none; stroke: var(--accent); stroke-width: 2; stroke-linejoin: round; stroke-linecap: round; }
+.kit-plot__area { fill: color-mix(in srgb, var(--accent) 10%, transparent); stroke: none; }
+.kit-plot__axis, .kit-plot__hair { stroke: var(--rule-soft); stroke-width: 1; }
+.kit-plot__hair { stroke: var(--ink-faint); }
+.kit-plot__dot { fill: var(--accent); stroke: var(--bg-card); stroke-width: 2; }
+.kit-plot__col { fill: var(--accent); }
+.kit-plot__col--empty { fill: var(--rule-soft); }
+.kit-plot__end { font-family: var(--font-body); font-size: 11.5px; font-weight: 500; fill: var(--ink); }
+.kit-plot__tick { font-family: var(--label-face); font-size: 10px; letter-spacing: var(--label-space); text-transform: var(--label-case); fill: var(--ink-faint); }
 
 .curve__kinds { display: flex; flex-direction: column; gap: 6px; margin-top: 16px; }
-.curve__kind { display: grid; grid-template-columns: 110px minmax(0, 1fr) auto; align-items: center; gap: 10px; font-size: 12.5px; }
-.curve__kind-label { color: var(--ink-soft); white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
-.curve__kind-bar { height: 8px; background: var(--surface-2); border-radius: 4px; overflow: hidden; }
-.curve__kind-fill { height: 100%; background: var(--accent); border-radius: 4px; }
-.curve__kind-n { color: var(--ink-faint); font-variant-numeric: tabular-nums; }
 
 /* ---------- onboarding checklist ---------- */
 

package/modules/hall-ui/public/watch.css

@@ -55,20 +55,12 @@
 /* The 14-day grade trend: a day, a bar, then the count and score. The bar is a
    measurement, not a control, so it is ink on a hairline track and never the
    accent. */
-.watch-trend { display: flex; flex-direction: column; margin-top: 4px; }
-.watch-trend__row {
-  display: grid;
-  grid-template-columns: 64px minmax(0, 1fr) 96px;
-  gap: 12px;
-  align-items: center;
-  min-height: 28px;
-  font-size: 13px;
-  color: var(--ink-soft);
-  font-variant-numeric: tabular-nums;
-}
-.watch-trend__bar-track { height: 6px; overflow: hidden; border-radius: var(--radius-pill); background: var(--rule-soft); }
-.watch-trend__bar-fill { display: block; height: 100%; background: var(--ink-soft); }
-.watch-trend__val { text-align: right; color: var(--ink); }
+/* The Review-quality trend is OTBKit.barSeriesHtml in its neutral tone (task
+   1003445) — the .watch-trend family was the hall's second copy of one
+   horizontal bar. What stays here is this page's own density: a taller row and
+   more air between the three columns than the kit's default. */
+#mason-marks-trend .kit-bars { margin-top: 4px; gap: 0; }
+#mason-marks-trend .kit-bars__row { min-height: 28px; gap: 12px; font-size: 13px; }
 
 /* A link inside a ledger cell (a session's tasks) is a control at a 13.5px line
    box: the padding buys the 24px floor and the negative margin hands it back. */

package/modules/hall-ui/public/watch.html

@@ -59,7 +59,7 @@
           <!-- 1. ACCESS REQUESTS -->
           <section class="scroll" id="gate-scroll" aria-labelledby="gate-h" hidden>
             <h2 id="gate-h" class="scroll__h">Access requests</h2>
-            <p class="scroll__lede">People asking to join. Approve or dismiss each request.</p>
+            <p class="scroll__lede">People asking to join. Approve or dismiss each request, re-read the ones you already decided, and take back an approval before that person has signed in.</p>
             <div id="gate-body"><span class="kit-skel"></span></div>
           </section>
 

package/modules/hall-ui/public/watch.js

@@ -26,6 +26,14 @@
 // family's .ov-figs, every sub-section is an .ov-group head, the access requests
 // are oversight rows, and the five most recent sessions the page always fetched
 // and threw away are now rendered under the tally.
+//
+// TASK 1002332 made the access-requests section a REVIEW queue rather than a
+// decision button: every row says whether the platform vouched for the name on
+// it (ADR 0201 — the public unauthenticated write means anyone may apply as
+// anyone, so vouched/unvouched is load-bearing, not decoration), the three
+// lifecycle states sit behind one switch, and an approval can be RESCINDED
+// before its holder ever signs in — a transition the route has always taken and
+// nothing on this page offered (ADR 0208).
 
 (() => {
   'use strict';
@@ -43,7 +51,7 @@
   const { escapeHtml, $, num, fmtInt, fmtCompact } = window.OTB;
   // Shared component kit (hall-kit.js, task 2166): tabs, ledger, pager, empty
   // states — adopted here by task 2173, and by every list since task 1003469.
-  const { makeTabs, makeLedger, makePager, emptyStateHtml } = window.OTBKit;
+  const { makeTabs, makeLedger, makePager, makeFilterBar, emptyStateHtml } = window.OTBKit;
   const fmtDate = (iso) => window.OTB.fmtDate(iso, { time: true });
   const rankLabel = (rank) => window.OTB.rankLabel(rank, { empty: '' });
   const toast = (msg) => window.OTB.toast(msg);
@@ -291,50 +299,131 @@
     });
   }
 
-  // One request, one oversight row: who, their note as the sub line, when they
-  // asked as the fact, and the two decisions on the right.
+  // The three lists the queue is, behind one switch. Reviewing is not only
+  // deciding: an owner has to re-read what they already decided, and RESCIND an
+  // approval given by mistake before the applicant ever signed in — the route
+  // has always taken that transition (ADR 0201 D4.2) and nothing offered it,
+  // because this page only ever fetched `?status=pending` (ADR 0208).
+  const GATE_VIEWS = [
+    { value: 'pending', label: 'Waiting', empty: 'No pending access requests.' },
+    { value: 'invited', label: 'Admitted', empty: 'Nobody has been admitted yet.' },
+    { value: 'dismissed', label: 'Declined', empty: 'No declined requests.' },
+  ];
+  let gateView = 'pending';
+
+  function gateEmptyMsg() {
+    return (GATE_VIEWS.find((v) => v.value === gateView) || GATE_VIEWS[0]).empty;
+  }
+
+  // The switch itself, rebuilt on every render because `section` replaces the
+  // whole body — the same lifecycle wireInviteForm already lives with.
+  function wireGateView(target) {
+    const mount = target.querySelector('#gate-view');
+    if (!mount) return;
+    makeFilterBar({
+      mount,
+      primary: [{
+        id: 'gate-status',
+        label: 'Show',
+        value: gateView,
+        options: GATE_VIEWS.map((v) => ({ value: v.value, label: v.label })),
+      }],
+      onChange: (vals) => {
+        const next = vals['gate-status'];
+        if (next === gateView) return;
+        gateView = next;
+        loadGate();
+      },
+    });
+  }
+
+  // Whether the platform vouched for this applicant, said on the row — and the
+  // single thing that makes the queue safe to read (ADR 0201, Consequences).
+  // POST /access-requests is the one PUBLIC unauthenticated write, so anyone may
+  // file a request under anyone's name; a row that merely LOOKED vouched is the
+  // whole impersonation surface the vouch exists to close. It is never authority
+  // (ADR 0016) — an unvouched applicant is admitted by the identical statement —
+  // it only says whether anyone confirmed who is asking.
+  function vouchPill(vouched) {
+    return vouched
+      ? '<span class="fact-pill fact-pill--ok" title="The platform confirmed this request came from the account it names.">Identity vouched</span>'
+      : '<span class="fact-pill fact-pill--warn" title="Nobody vouched for this name — anyone can file a request naming anyone. Confirm who is asking before you admit them.">Name unvouched</span>';
+  }
+
+  // What this row still offers. A waiting request has two decisions; an admitted
+  // one can still be rescinded (until they sign in, after which the server
+  // refuses and says so); a declined one is terminal here — re-admitting is the
+  // invite form above, which is what the server's own refusal names.
+  function gateRowActions(r) {
+    const id = escapeHtml(r.id);
+    if (r.status === 'invited') {
+      return ghost(`data-gate-action="dismissed" data-gate-from="invited" data-id="${id}"`, 'Rescind', true);
+    }
+    if (r.status === 'dismissed') return '';
+    return ghost(`data-gate-action="invited" data-id="${id}"`, 'Invite')
+      + ghost(`data-gate-action="dismissed" data-id="${id}"`, 'Dismiss', true);
+  }
+
+  // One request, one oversight row: who, whether anyone vouched for them, their
+  // note as the sub line, when they asked (and who decided, once someone has) as
+  // the facts, and whatever decisions are still open on the right.
+  function gateRowHtml(r) {
+    const who = r.display_name
+      ? `${escapeHtml(r.display_name)}<span class="ov-mono">@${escapeHtml(r.github_login)}</span>`
+      : `<span class="ov-mono">@${escapeHtml(r.github_login)}</span>`;
+    const note = r.note ? `<p class="ov-row__sub">“${escapeHtml(r.note)}”</p>` : '';
+    // A rescind overwrites the approver with the rescinder (ADR 0208), so this
+    // names who put the row in the state it is in now — which is what it says.
+    const by = r.resolved_by_login ? ` by <span class="ov-mono">@${escapeHtml(r.resolved_by_login)}</span>` : '';
+    const decided = r.resolved_at
+      ? `<span class="ov-row__when">${r.status === 'invited' ? 'Admitted' : 'Declined'} ${escapeHtml(fmtDate(r.resolved_at))}${by}</span>`
+      : '';
+    const actions = gateRowActions(r);
+    return (
+      `<li class="ov-row" data-req-id="${escapeHtml(r.id)}">` +
+      '<div class="ov-row__main">' +
+      `<span class="ov-row__title">${who}</span>` +
+      note +
+      '<div class="ov-row__facts">' +
+      vouchPill(!!r.vouched) +
+      `<span class="ov-row__when">Asked ${escapeHtml(fmtDate(r.created_at))}</span>` +
+      decided +
+      '</div>' +
+      '</div>' +
+      (actions ? `<div class="ov-row__right"><div class="ov-row__actions">${actions}</div></div>` : '') +
+      '</li>'
+    );
+  }
+
   function renderGate(data, target) {
     const requests = Array.isArray(data.requests) ? data.requests : [];
-    setAttention('att-access', requests.length); // tile count = table content
-    if (!requests.length) {
-      target.innerHTML = inviteFormHtml() + emptyStateHtml('No pending access requests.');
-      wireInviteForm(target);
-      return;
+    // The attention tile counts WAITING work, never whatever list is on screen:
+    // reading the decided history must not repaint the board with a number that
+    // means something else. Its own sub line says "pending".
+    if (gateView === 'pending') setAttention('att-access', requests.length);
+    const head = inviteFormHtml() + '<div id="gate-view"></div>';
+    target.innerHTML = requests.length
+      ? head + '<ul class="ov-rows">' + requests.map(gateRowHtml).join('') + '</ul>'
+      : head + emptyStateHtml(gateEmptyMsg());
+
+    if (requests.length) {
+      wireActions(target, '[data-gate-action]', async (btn) => {
+        const id = btn.getAttribute('data-id');
+        const status = btn.getAttribute('data-gate-action');
+        const rescinding = btn.getAttribute('data-gate-from') === 'invited';
+        await patchJson(`/access-requests/${encodeURIComponent(id)}`, { status });
+        toast(status === 'invited' ? 'Builder invited.'
+          : rescinding ? 'Approval rescinded — that sign-in no longer gets in.'
+            : 'Request dismissed.');
+        await loadGate();
+      }, 'Could not resolve');
     }
-    target.innerHTML = inviteFormHtml() + '<ul class="ov-rows">' + requests
-      .map((r) => {
-        const who = r.display_name
-          ? `${escapeHtml(r.display_name)}<span class="ov-mono">@${escapeHtml(r.github_login)}</span>`
-          : `<span class="ov-mono">@${escapeHtml(r.github_login)}</span>`;
-        const note = r.note ? `<p class="ov-row__sub">“${escapeHtml(r.note)}”</p>` : '';
-        return (
-          `<li class="ov-row" data-req-id="${escapeHtml(r.id)}">` +
-          '<div class="ov-row__main">' +
-          `<span class="ov-row__title">${who}</span>` +
-          note +
-          `<div class="ov-row__facts"><span class="ov-row__when">Asked ${escapeHtml(fmtDate(r.created_at))}</span></div>` +
-          '</div>' +
-          '<div class="ov-row__right"><div class="ov-row__actions">' +
-          ghost(`data-gate-action="invited" data-id="${escapeHtml(r.id)}"`, 'Invite') +
-          ghost(`data-gate-action="dismissed" data-id="${escapeHtml(r.id)}"`, 'Dismiss', true) +
-          '</div></div>' +
-          '</li>'
-        );
-      })
-      .join('') + '</ul>';
-
-    wireActions(target, '[data-gate-action]', async (btn) => {
-      const id = btn.getAttribute('data-id');
-      const status = btn.getAttribute('data-gate-action');
-      await patchJson(`/access-requests/${encodeURIComponent(id)}`, { status });
-      toast(status === 'invited' ? 'Builder invited.' : 'Request dismissed.');
-      await loadGate();
-    }, 'Could not resolve');
     wireInviteForm(target);
+    wireGateView(target);
   }
 
   function loadGate() {
-    return section($('#gate-body'), () => fetchJson('/access-requests?status=pending'), renderGate, {
+    return section($('#gate-body'), () => fetchJson(`/access-requests?status=${encodeURIComponent(gateView)}`), renderGate, {
       sealedMsg: 'Archons only. Access requests are not visible at your rank.',
       errMsg: 'Could not load access requests.',
       name: 'gate',
@@ -782,23 +871,19 @@
       trendEl.innerHTML = emptyStateHtml('No trend to show yet.');
       return;
     }
-    const maxN = Math.max(1, ...trend.map((t) => num(t.n)));
+    // task 1003445: this was the hall's third copy of the same horizontal bar.
+    // It draws through OTBKit.barSeriesHtml now, in the NEUTRAL tone — on an
+    // oversight page the accent belongs to the pressable, not to the data —
+    // with its own geometry passed as options rather than a second class family.
     trendEl.innerHTML =
-      '<div class="watch-trend">' +
-      trend
-        .map((t) => {
-          const w = Math.round((num(t.n) / maxN) * 100);
-          const avg = (t.avg_score ?? '—') === '—' ? '—' : escapeHtml(String(t.avg_score));
-          return (
-            '<div class="watch-trend__row">' +
-            `<span>${escapeHtml(fmtDay(t.day))}</span>` +
-            `<span class="watch-trend__bar-track"><span class="watch-trend__bar-fill" style="width:${w}%"></span></span>` +
-            `<span class="watch-trend__val">${fmtInt(t.n)} · ${avg}</span>` +
-            '</div>'
-          );
-        })
-        .join('') +
-      '</div>' +
+      window.OTBKit.barSeriesHtml(
+        trend.map((t) => ({
+          label: fmtDay(t.day),
+          value: num(t.n),
+          valueLabel: `${fmtInt(t.n)} · ${(t.avg_score ?? '—') === '—' ? '—' : String(t.avg_score)}`,
+        })),
+        { tone: 'neutral', labelWidth: '64px', valueWidth: '96px', barHeight: '6px', pill: true },
+      ) +
       foot('Per day: ships graded · avg score.');
   }
 

package/modules/provisioning/recommendations.js

@@ -0,0 +1,260 @@
+// modules/provisioning/recommendations.js — the RULE ENGINE that turns what an
+// owner said during project creation into a recommended starter bundle, a
+// recommended governance preset, and an invite suggestion (BV1.R17, task
+// 1002336; goal 1000046 criteria `proj-module-select`, `proj-governance-reco`,
+// `proj-invite-builders`).
+//
+// WHY. Goal 1000046 pins the near term as RULE-BASED and defers the semantic
+// layer: "near-term recommendations are rule-based and module search is lexical;
+// the AI/embeddings layer … is a deferred follow-up captured in the idea inbox"
+// (idea 1000552, task 1003500). So this file is a set of small declarative
+// TABLES — condition -> effect -> a one-line `reason` in the owner's own words —
+// and a resolver over them. Not a model, not a scoring function, and nothing
+// that reads the free-text description: a rule an owner cannot be told the
+// reason for is a recommendation they cannot audit.
+//
+// TWO INPUTS, AND ONLY TWO. `type` is the DECLARED project type (a column, the
+// closed set task 1002772 fixed) and `team_shape` is the one closed-answer key
+// the R15 interview collects (`PROJECT_DETAIL_VOCAB` in provisioning.js beside
+// this file). The interview deliberately does not re-ask the type (ADR 0237 §2),
+// so the two arrive separately and this is the file that puts them together.
+//
+// SKIPPING IS A SUPPORTED ANSWER, NOT A GAP. The interview is optional (ADR 0182
+// D4), so every table has a stated DEFAULT for "nobody said" and the defaults are
+// deliberately the narrowest option — the type's own bundle unadjusted, the
+// governance preset that grants nobody anything, and no invites. An off-vocabulary
+// team shape reads as no answer for the same reason `normalizeProjectDetail` drops
+// one: inventing an answer nobody gave feeds the recommendation a lie. R18 (task
+// 1002337) is the live proof of exactly that split.
+//
+// PURE — no I/O, no core import, no sibling-module import; requires only its own
+// module's `starter-bundles.js` and `provisioning.js`, both of which are pure
+// themselves. That is what lets a route, a script and a test read one answer.
+// It is also why `invites.suggested` is always empty here: ranking builders means
+// querying the leaderboard, which lives in a sibling module (`economy`) this one
+// may not import (the one-way rule, ADR 0083). The engine states WHAT to look for
+// in `invites.seeking`; R28 (task 1002347) owns the lookup that fills it.
+//
+// Decision record: ADR 0239.
+
+'use strict';
+
+const { bundleForProjectType, ALWAYS_ON_CORE } = require('./starter-bundles');
+const { PROJECT_DETAIL_VOCAB } = require('./provisioning');
+
+// How the team shape adjusts the type's starter bundle, in application order.
+// Each entry is one condition (`teamShape`) and one effect on ONE opt-in module,
+// carrying the sentence a picker shows when it fires. Deliberately tiny: ADR 0237
+// already made the per-type preset the opinion, and today's opt-in catalog is
+// three modules wide (`agents`, `dev-box`, `discord`) — so this table's job is to
+// correct a preset the owner's answer contradicts, not to re-derive it.
+//
+// A rule may only ever name an OPT-IN module. Adding or removing an always-on one
+// would be a toggle that toggles nothing (ADR 0237 §3's argument, and
+// `tests/provisioning_recommendations.mjs` fails the build over it).
+const TEAM_SHAPE_RULES = Object.freeze([
+  Object.freeze({
+    id: 'a-community-needs-somewhere-to-gather',
+    teamShape: 'community',
+    effect: 'add',
+    module: 'discord',
+    reason: 'You said an open community is building this, so somewhere for it to gather is switched on.',
+  }),
+  Object.freeze({
+    id: 'a-team-shares-one-environment',
+    teamShape: 'small-team',
+    effect: 'add',
+    module: 'dev-box',
+    reason: 'A small team gets one shared environment to build in, so nobody is debugging their own laptop.',
+  }),
+  Object.freeze({
+    id: 'building-alone-needs-no-shared-environment',
+    teamShape: 'solo',
+    effect: 'remove',
+    module: 'dev-box',
+    reason: 'You are building this alone, so the shared cloud environment is off — your own machine is the setup.',
+  }),
+]);
+
+// The governance presets, by key. A preset is a NAME plus the one sentence that
+// says what living under it feels like — never a set of roles or permissions,
+// because there is nowhere to put them: the governance module is planned (goal
+// 1000030) and unbuilt, which criterion `proj-governance-reco` says out loud.
+// R25 (task 1002344) is the spike that fits these to the real module when it
+// exists; until then every recommendation carries `applied: false` so a form can
+// label it a preview without hardcoding that fact in four places.
+const GOVERNANCE_PRESETS = Object.freeze({
+  'owner-only': Object.freeze({
+    label: 'You decide',
+    preview: 'You hold every role. Nothing waits on anyone else, and nothing changes without you.',
+  }),
+  'trusted-team': Object.freeze({
+    label: 'A trusted team',
+    preview: 'Everyone you invite can build and ship. You keep the decisions that spend money or change the shape of the project.',
+  }),
+  'open-contribution': Object.freeze({
+    label: 'Open contribution',
+    preview: 'Anyone can turn up and propose work. A small circle you choose reviews what actually lands.',
+  }),
+});
+
+// Team shape -> governance preset. One row per shape the interview can return;
+// the integrity test fails the build if a shape in `PROJECT_DETAIL_VOCAB` has no
+// row here, so a fourth answer can never be added and silently unhandled.
+const GOVERNANCE_RULES = Object.freeze([
+  Object.freeze({
+    teamShape: 'solo',
+    preset: 'owner-only',
+    reason: 'You said you are building this alone.',
+  }),
+  Object.freeze({
+    teamShape: 'small-team',
+    preset: 'trusted-team',
+    reason: 'You said a small team is building this, so the people you invite can get on with it without asking first.',
+  }),
+  Object.freeze({
+    teamShape: 'community',
+    preset: 'open-contribution',
+    reason: 'You said an open community is building this, so people can arrive and propose work without an invite.',
+  }),
+]);
+
+// What a skipped interview gets. The narrowest preset on purpose: widening later
+// costs one setting, while a project that quietly granted strangers a role it was
+// never asked to grant is not recoverable by changing the setting back.
+const GOVERNANCE_DEFAULT = Object.freeze({
+  preset: 'owner-only',
+  reason: 'Nobody has said who is building this yet, so this is the narrowest setup — widen it whenever you like.',
+});
+
+// Team shape -> who is worth suggesting, as a SEEK — the kind of builder to look
+// for and how many. This engine is pure and cannot run the lookup (the
+// leaderboard lives in the `economy` module, which this one may not import), so
+// `seeking` is the seam R28 (task 1002347) reads and `suggested` stays empty.
+// `seeking: null` means "suggest nobody", which is a real answer and not a
+// missing one.
+const INVITE_RULES = Object.freeze([
+  Object.freeze({
+    teamShape: 'solo',
+    seeking: null,
+    reason: 'You said you are building alone, so nobody is suggested. You can invite anyone later from the project settings.',
+  }),
+  Object.freeze({
+    teamShape: 'small-team',
+    seeking: Object.freeze({ kind: 'top-builders', limit: 3 }),
+    reason: 'A small team is the shape that fills fastest, so here is a short list of the builders with the strongest recent record.',
+  }),
+  Object.freeze({
+    teamShape: 'community',
+    seeking: Object.freeze({ kind: 'top-builders', limit: 5 }),
+    reason: 'An open community wants a wider first circle, so the list runs longer. Guilds join it once guilds can be invited.',
+  }),
+]);
+
+// What a skipped interview gets: nobody. Same reasoning as the governance
+// default — an invite suggested on an answer nobody gave is a stranger the owner
+// never asked for.
+const INVITE_DEFAULT = Object.freeze({
+  seeking: null,
+  reason: 'Nobody has said who is building this yet, so nothing is suggested. Invites can be sent any time from the project settings.',
+});
+
+// The interview's answer, or null. Anything outside `PROJECT_DETAIL_VOCAB` —
+// absent, misspelled, or a value that was valid when it was stored and has since
+// left the vocabulary — reads as NO ANSWER, exactly as `normalizeProjectDetail`
+// drops it on the way in. PURE.
+function normalizeTeamShape(value) {
+  return PROJECT_DETAIL_VOCAB.team_shape.includes(value) ? value : null;
+}
+
+// Apply the team-shape rules to one type's opt-in bundle. Returns the adjusted
+// list plus the adjustments that ACTUALLY changed it — a rule whose module the
+// bundle already carries (or already lacks) records nothing, because a stated
+// reason for a change that did not happen is a lie the owner cannot check.
+// Never touches the always-on core. PURE.
+function adjustBundle(bundle, teamShape) {
+  const modules = [...bundle];
+  const adjustments = [];
+  for (const rule of TEAM_SHAPE_RULES) {
+    if (rule.teamShape !== teamShape) continue;
+    const at = modules.indexOf(rule.module);
+    if (rule.effect === 'add' && at === -1) modules.push(rule.module);
+    else if (rule.effect === 'remove' && at !== -1) modules.splice(at, 1);
+    else continue;
+    adjustments.push({ rule: rule.id, effect: rule.effect, module: rule.module, reason: rule.reason });
+  }
+  return { modules, adjustments };
+}
+
+// The whole recommendation for one set of creation answers:
+//
+//   {
+//     type, teamShape,          // what was actually declared/answered (null = not)
+//     tailored,                 // did a DETAIL answer shape any of this?
+//     bundle:     { type, label, summary, core, bundle, modules, adjustments },
+//     governance: { preset, label, preview, reason, applied },
+//     invites:    { suggested, seeking, reason },
+//   }
+//
+// `bundle` is ADR 0237 §5's shape with one key added, so R20's picker and this
+// engine can never name different modules; `adjustments` is the delta the rules
+// made to it and is empty when nothing fired. `tailored` is false when the
+// interview was skipped — the machine-readable half of criterion
+// `proj-detail-interview`'s "completing it produces tailored recommendations;
+// skipping produces sensible defaults", and what R18 (task 1002337) proves.
+//
+// Accepts a flat object because the two answers live in two places: `type` is a
+// column and `team_shape` is a key of the `detail` jsonb, so a caller holding a
+// row passes `{ type: row.type, ...projectDetail(row) }`. Never throws and never
+// invents an answer. PURE — result arrays and objects are fresh, so a caller may
+// sort or splice them without corrupting the frozen tables.
+function recommendationsForDetails(answers) {
+  const given = answers && typeof answers === 'object' && !Array.isArray(answers) ? answers : {};
+  const teamShape = normalizeTeamShape(given.team_shape);
+  const preset = bundleForProjectType(given.type);
+  const { modules, adjustments } = adjustBundle(preset.bundle, teamShape);
+
+  const gov = GOVERNANCE_RULES.find((r) => r.teamShape === teamShape) || GOVERNANCE_DEFAULT;
+  const invite = INVITE_RULES.find((r) => r.teamShape === teamShape) || INVITE_DEFAULT;
+
+  return {
+    type: preset.type,
+    teamShape,
+    tailored: teamShape !== null,
+    bundle: {
+      type: preset.type,
+      label: preset.label,
+      summary: preset.summary,
+      core: [...ALWAYS_ON_CORE],
+      bundle: modules,
+      modules: [...ALWAYS_ON_CORE, ...modules],
+      adjustments,
+    },
+    governance: {
+      preset: gov.preset,
+      label: GOVERNANCE_PRESETS[gov.preset].label,
+      preview: GOVERNANCE_PRESETS[gov.preset].preview,
+      reason: gov.reason,
+      // Always false until the governance module ships (goal 1000030). A named
+      // recommendation, never an applied setting — criterion `proj-governance-reco`.
+      applied: false,
+    },
+    invites: {
+      // The seam, not an omission: ranking builders is a leaderboard query this
+      // pure file may not run. R28 (task 1002347) fills this from `seeking`.
+      suggested: [],
+      seeking: invite.seeking ? { ...invite.seeking } : null,
+      reason: invite.reason,
+    },
+  };
+}
+
+module.exports = {
+  TEAM_SHAPE_RULES,
+  GOVERNANCE_PRESETS,
+  GOVERNANCE_RULES,
+  GOVERNANCE_DEFAULT,
+  INVITE_RULES,
+  INVITE_DEFAULT,
+  recommendationsForDetails,
+};