@bongos/core 1.19.529 → 1.19.531

package/modules/provisioning/routes/provisioning.js

@@ -27,6 +27,9 @@
 //
 // Reaches core ONLY through the doorway src/module-api.js (the one-way rule, ADR
 // 0083); it requires this module's own provisioning.js (same-dir), never a sibling.
+// The GitHub-App callback page's presentation (esc / ACCENT / the stylesheet / the
+// client script / callbackPage) lives in ./callback-page.js — moved out under task
+// 1003570 because this file had reached the 1500-line fitness ratchet.
 'use strict';
 
 const crypto = require('node:crypto');
@@ -39,6 +42,7 @@ const { onboardPlan, stepsForShape } = require('../onboard-plan');
 const { ALWAYS_ON_CORE, OPTIONAL_MODULES, starterBundleAnswerTable, optionalModules, effectiveModules } = require('../starter-bundles');
 const { recommendationsForDetails } = require('../recommendations');
 const { makeAskRateLimiter, clientIp } = require('../rate-limit');
+const { callbackPage } = require('./callback-page');
 // task 1003208: structured logging (pino via the doorway) — was console.*.
 const log = api.logger('provisioning');
 
@@ -139,142 +143,6 @@ function badModuleSelection(modules) {
   return null;
 }
 
-// Minimal HTML escaper for the callback landing page (no template engine here).
-function esc(s) {
-  return String(s == null ? '' : s).replace(/[&<>"']/g, (c) => (
-    { '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' }[c]
-  ));
-}
-
-// Accent pair resolved from the instance's own branding — the pack is the palette
-// authority (task 1002810); the literal fallbacks are the neutral pack's values, so
-// a branding validation error still paints the current family, never a stale one.
-const ACCENT = (() => {
-  try {
-    const c = api.branding().theme?.ui?.colors || {};
-    return { sun: c.accent || '#fb9569', sun600: c.accentDeep || '#a3481a' };
-  } catch { return { sun: '#fb9569', sun600: '#a3481a' }; }
-})();
-
-// Brand styling for the standalone onboarding pages — sunrise palette + Baloo 2 /
-// Quicksand (accents from the branding pack, config/branding.neutral.json resolved
-// under the instance's own config/branding.json). Light + dark aware; no external
-// dependency beyond an optional Google-Fonts link (system fallback if it doesn't load).
-const PAGE_STYLE = `
-:root{color-scheme:light dark;--sun:${ACCENT.sun};--sun600:${ACCENT.sun600};--sunInk:#2a1305;--coral:#fb7185;--sky:#38bdf8;--sky600:#0284c7;--ok:#16a34a;--warn:#f59e0b;--ink:#2a1f17;--inkSoft:#6b5d52;--card:#fffdfa;--line:#f0e2cf;--bg1:#fde8c8;--bg2:#fff4e6;--bg3:#fffdfa}
-@media (prefers-color-scheme:dark){:root{--ink:#f5efe6;--inkSoft:#cbbdad;--card:#241b13;--line:#3a2c1e;--bg1:#2a1d10;--bg2:#1b130b;--bg3:#130d07}}
-*{box-sizing:border-box}html,body{height:100%}
-body{margin:0;font-family:"Quicksand",system-ui,-apple-system,"Segoe UI",sans-serif;color:var(--ink);background:linear-gradient(180deg,var(--bg1) 0%,var(--bg2) 45%,var(--bg3) 100%);background-attachment:fixed;display:flex;align-items:center;justify-content:center;padding:1.5rem;-webkit-font-smoothing:antialiased;text-rendering:optimizeLegibility}
-.card{width:100%;max-width:30rem;background:var(--card);border:1px solid var(--line);border-radius:20px;padding:2.4rem 2rem 2rem;text-align:center;box-shadow:0 18px 50px -22px rgba(120,60,10,.4),0 2px 8px rgba(120,60,10,.07)}
-.badge-warn{font-size:2.4rem;line-height:1;margin:0 auto 1rem}
-h1{font-family:"Baloo 2",system-ui,sans-serif;font-weight:700;font-size:1.5rem;line-height:1.15;margin:.2rem 0 .55rem}
-.sub{color:var(--inkSoft);font-size:1.02rem;line-height:1.5;margin:0 auto;max-width:24rem}
-.sub p{margin:.6rem 0}
-code{font-family:"Fira Code",ui-monospace,SFMono-Regular,monospace;background:rgba(56,189,248,.14);color:var(--sky600);padding:.12em .45em;border-radius:6px;font-size:.9em;overflow-wrap:anywhere}
-@media (prefers-color-scheme:dark){code{color:var(--sky)}}
-.steps{display:flex;align-items:flex-start;justify-content:center;margin:1.9rem 0 1.1rem}
-.step{flex:1 1 0;max-width:9rem;position:relative}
-.step::before{content:"";position:absolute;top:16px;left:-50%;width:100%;height:3px;background:var(--line);z-index:0;transition:background .4s ease}
-.step:first-child::before{display:none}
-.dot{width:34px;height:34px;border-radius:50%;margin:0 auto;display:grid;place-items:center;background:var(--bg3);border:2px solid var(--line);color:var(--inkSoft);font-weight:700;font-size:.95rem;position:relative;z-index:1;transition:all .4s ease}
-.lbl{margin-top:.55rem;font-size:.78rem;color:var(--inkSoft);font-weight:600;line-height:1.25;padding:0 .2rem}
-.step.done .dot{background:var(--ok);border-color:var(--ok);color:#fff}
-.step.done::before{background:var(--ok)}
-.step.active .dot{border-color:var(--sun);color:var(--sun600);animation:pulse 1.5s ease-in-out infinite}
-.step.active .lbl{color:var(--ink)}
-.step.active .dot::after{content:"";position:absolute;inset:-3px;border-radius:50%;border:2px solid transparent;border-top-color:var(--sun);animation:spin .8s linear infinite}
-@keyframes spin{to{transform:rotate(360deg)}}
-@keyframes pulse{0%,100%{box-shadow:0 0 0 4px rgba(249,115,22,.15)}50%{box-shadow:0 0 0 9px rgba(249,115,22,.04)}}
-@media (prefers-reduced-motion:reduce){.step.active .dot,.step.active .dot::after{animation:none}}
-.status-line{min-height:1.4em;color:var(--inkSoft);font-size:.94rem;margin:.4rem auto 0;max-width:24rem;line-height:1.45}
-.cta{margin-top:1.4rem}
-.btn{display:inline-block;background:var(--sun);color:var(--sunInk);text-decoration:none;font-weight:700;font-family:"Baloo 2",system-ui,sans-serif;padding:.72rem 1.5rem;border-radius:999px;font-size:1.02rem;box-shadow:0 10px 22px -8px rgba(249,115,22,.7);transition:transform .15s ease,box-shadow .15s ease}
-.btn:hover{transform:translateY(-1px);box-shadow:0 14px 28px -8px rgba(249,115,22,.8)}
-.muted{color:var(--inkSoft);opacity:.9;font-size:.85rem;margin:1.1rem auto 0;max-width:24rem;line-height:1.45}
-.hidden{display:none!important}
-`;
-
-// Client script for the PROGRESS variant only (task 2096): poll the public status
-// endpoint, advance the stepper, and auto-open the instance the moment its credentials
-// land. Deliberately contains NO backticks and NO ${...} so it survives the outer
-// template literal verbatim; the only server data it reads is the JSON config block
-// written just above it. Fails soft — a poll hiccup just retries; a long wait reveals a
-// manual "open" button rather than ever falsely erroring. The auto-open countdown runs
-// ONLY when this page is the wizard's pop-up; a same-tab return (pop-up blocked) keeps
-// the founder here with the door and a way back to the checklist (task 1003236).
-const CALLBACK_SCRIPT = `
-(function(){
-  var cfg=window.__CB_SETUP__||{};
-  var state=cfg.state||'',domain=cfg.domain||'';
-  if(!state||!domain)return;
-  var target='https://'+domain;
-  var pollUrl=location.pathname.replace('/callback','/status')+'?state='+encodeURIComponent(state);
-  var steps=document.getElementById('steps'),statusEl=document.getElementById('status');
-  var cta=document.getElementById('cta'),go=document.getElementById('go'),foot=document.getElementById('foot'),back=document.getElementById('back');
-  /* Opened from the wizard as a pop-up (window.opener alive, or the tab still carries the name the wizard gave it):
-     the checklist is in the other tab, so this one may auto-open the instance. Same-tab fallback (pop-up blocked,
-     form target=_self): this IS the founder's checklist tab — never navigate it away; offer both doors (task 1003236). */
-  var popup=!!window.opener||window.name==='ghAppSetup';
-  var finished=false,tries=0,manual=false;
-  function dot(n){return steps.querySelector('[data-step="'+n+'"]');}
-  function setActive(n){for(var i=1;i<=3;i++){var el=dot(i);if(!el)continue;el.classList.remove('active','done');if(i<n){el.classList.add('done');el.querySelector('.dot').textContent='\\u2713';}else if(i===n){el.classList.add('active');}}}
-  function allDone(){for(var i=1;i<=3;i++){var el=dot(i);if(!el)continue;el.classList.remove('active');el.classList.add('done');el.querySelector('.dot').textContent='\\u2713';}}
-  function ready(){if(finished)return;finished=true;allDone();statusEl.textContent='Your instance is ready \\u2014 sign in with GitHub to claim it as owner.';cta.classList.remove('hidden');
-    if(!popup){go.textContent='Open '+domain+' \\u2192';if(back)back.classList.remove('hidden');if(foot)foot.textContent='Your setup checklist is waiting where you left it \\u2014 finish it first, or open your instance now.';return;}
-    var n=4;(function tick(){if(n<=0){location.href=target;return;}go.textContent='Opening '+domain+' in '+n+'\\u2026';n--;setTimeout(tick,1000);})();}
-  function failed(){if(finished)return;finished=true;statusEl.textContent='Setup didn\\u2019t finish. Open your instance page and start the GitHub sign-in setup again.';cta.classList.remove('hidden');go.textContent='Open '+domain+' \\u2192';}
-  function revealManual(){if(manual||finished)return;manual=true;cta.classList.remove('hidden');go.textContent='Open '+domain+' \\u2192';if(foot)foot.textContent='This is taking a little longer than usual \\u2014 you can open your instance now, or keep waiting.';}
-  function schedule(){if(!finished)setTimeout(poll,3000);}
-  function poll(){tries++;fetch(pollUrl,{headers:{accept:'application/json'},cache:'no-store'}).then(function(r){return r.ok?r.json():null;}).then(function(j){if(!j){schedule();return;}if(j.ready||j.status==='done'){ready();return;}if(j.status==='error'||j.status==='expired'){failed();return;}setActive(2);if(tries===40)revealManual();schedule();}).catch(function(){schedule();});}
-  setActive(2);poll();
-})();
-`;
-
-// The standalone landing page for the public GitHub redirect (the mothership serves it;
-// it is NOT the hall shell). Two variants share the Cloud Bongos brand shell (task 2096):
-//   • progress — ok + state + domain: an animated stepper that polls the status endpoint
-//     and auto-opens the instance when its credentials are placed.
-//   • message — everything else (errors + the no-domain success fallback): a calm badge
-//     + `body` (server-authored, trusted HTML).
-function callbackPage({ ok, title, body, state, domain }) {
-  const progress = !!(ok && state && domain);
-  const cfgJson = JSON.stringify({ state: state || '', domain: domain || '' }).replace(/</g, '\\u003c');
-  const head = `<!doctype html><html lang="en"><head><meta charset="utf-8">
-<meta name="viewport" content="width=device-width, initial-scale=1">
-<meta name="color-scheme" content="light dark">
-<title>${esc(title)}</title>
-<link rel="preconnect" href="https://fonts.googleapis.com"><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
-<link href="https://fonts.googleapis.com/css2?family=Baloo+2:wght@600;700;800&family=Quicksand:wght@400;500;600;700&family=Fira+Code&display=swap" rel="stylesheet">
-<style>${PAGE_STYLE}</style></head><body>`;
-  if (progress) {
-    return `${head}
-<main class="card">
-  <h1>${esc(title)}</h1>
-  <p class="sub">Finishing sign-in setup for <code>${esc(domain)}</code>.</p>
-  <div class="steps" id="steps" aria-label="Setup progress">
-    <div class="step done" data-step="1"><div class="dot">✓</div><div class="lbl">GitHub app created</div></div>
-    <div class="step active" data-step="2"><div class="dot">2</div><div class="lbl">Placing credentials</div></div>
-    <div class="step" data-step="3"><div class="dot">3</div><div class="lbl">Ready to sign in</div></div>
-  </div>
-  <p class="status-line" id="status">Hang tight — keep this tab open while we finish.</p>
-  <div class="cta hidden" id="cta"><a class="btn" id="go" href="https://${esc(domain)}">Open ${esc(domain)} →</a></div>
-  <p class="muted hidden" id="back"><a href="/projects?view=new">Finish your remaining setup steps →</a></p>
-  <p class="muted" id="foot">This page opens <code>${esc(domain)}</code> for you the moment it’s ready.</p>
-  <noscript><p class="muted">When setup finishes, open <a href="https://${esc(domain)}">${esc(domain)}</a> and sign in with GitHub — that first sign-in makes you the owner.</p></noscript>
-</main>
-<script>window.__CB_SETUP__=${cfgJson};</script>
-<script>${CALLBACK_SCRIPT}</script>
-</body></html>`;
-  }
-  return `${head}
-<main class="card">
-  <div class="badge-warn">${ok ? '✓' : '⚠️'}</div>
-  <h1>${esc(title)}</h1>
-  <div class="sub">${body || ''}</div>
-</main>
-</body></html>`;
-}
-
 // Register this module's kernel seam (ADR 0083 / the registerBoxSeams precedent).
 // Idempotent — the loader calls this factory once at boot, but tests may
 // instantiate the router repeatedly; gating on hasProvider keeps the port

package/modules/status-ui/public/explore.html

@@ -3,7 +3,7 @@
 <head>
   <meta charset="utf-8">
   <meta name="viewport" content="width=device-width, initial-scale=1">
-  <title>Explore — featured projects</title>
+  <title>Explore — projects on the map</title>
   <style>
     /* Self-contained so the showcase renders correctly whether or not the host
        injects theme tokens. Warm Cloud Bongos defaults; overridable by the pack. */
@@ -15,6 +15,10 @@
          salmon --accent is a fill and measures 2.1:1 as type on the card. */
       --bg: #edecee; --card: #fbfafc; --ink: #17181a; --ink-soft: #55565a;
       --rule: #c6c6c8; --accent: #fb9569; --accent-deep: #a3481a;
+      /* The black hole's own colour, and deliberately NOT a pack token: --ink
+         inverts between the schemes and would paint the void white in dark mode.
+         A hole is the one thing on this page that is the same colour in both. */
+      --orb-void: #0b0b10;
     }
     * { box-sizing: border-box; }
     body {
@@ -39,6 +43,55 @@
     .card .origin { color: var(--accent-deep); font-size: .82rem; word-break: break-all; margin-top: auto; }
     .card .art { width: 100%; height: 120px; object-fit: cover; border-radius: 10px; margin-bottom: .3rem; }
     .empty, .err { text-align: center; color: var(--ink-soft); padding: 3rem 1rem; }
+
+    /* THE THREE ORBS (BV1.R07, task 1002326; ADR 0182 D1) — how a project stands on
+       the map, DRAWN. The label beside each one is the plain word (Public / Private /
+       Stealth): the space words belong to the shape, not to the copy, which is the
+       goal's own interview decision. The orb is aria-hidden, so that plain word is
+       its accessible name. */
+    .state { display: flex; align-items: center; gap: .5rem; }
+    .state-label {
+      font-size: .74rem; letter-spacing: .09em; text-transform: uppercase;
+      color: var(--ink-soft);
+    }
+    .orb { width: 22px; height: 22px; border-radius: 50%; flex: 0 0 auto; position: relative; }
+    /* planet — identified and open: a lit sphere, ringed so you can pick it out */
+    .orb-planet {
+      background: radial-gradient(circle at 33% 30%, #ffffff 0 9%, var(--accent) 42%, var(--accent-deep) 100%);
+    }
+    .orb-planet::after {
+      content: ''; position: absolute; left: -26%; right: -26%; top: 40%; height: 24%;
+      border: 1.5px solid var(--accent-deep); border-radius: 50%;
+      transform: rotate(-20deg); opacity: .8;
+    }
+    /* star — identified but closed: visible from anywhere, with no surface to land on */
+    .orb-star {
+      background: radial-gradient(circle, #ffffff 0 15%, var(--accent) 38%, transparent 70%);
+    }
+    /* the rays taper rather than end, so the orb reads as a point of light and not
+       as a plus sign */
+    .orb-star::before, .orb-star::after {
+      content: ''; position: absolute; left: 50%; top: 50%; transform: translate(-50%, -50%);
+    }
+    .orb-star::before {
+      width: 2px; height: 155%;
+      background: linear-gradient(to bottom, transparent, var(--accent) 50%, transparent);
+    }
+    .orb-star::after {
+      width: 155%; height: 2px;
+      background: linear-gradient(to right, transparent, var(--accent) 50%, transparent);
+    }
+    /* black hole — existence without identity: you are shown the ring, never the object */
+    .orb-black-hole {
+      background: var(--orb-void);
+      box-shadow: 0 0 0 1.5px var(--accent), 0 0 10px 1px var(--accent);
+    }
+    /* an anonymous card has nothing to click and nothing to name, so it does not
+       pretend otherwise — no lift on hover, and its heading reads as the placeholder
+       it is rather than as a project's name */
+    .card.anon:hover { transform: none; box-shadow: none; }
+    .card.anon h2 { color: var(--ink-soft); font-weight: 600; }
+
     @media (prefers-color-scheme: dark) {
       :root { --bg: #000000; --card: #101012; --ink: #ffffff; --ink-soft: #c0c0c0; --rule: rgba(255,255,255,.16);
               --accent-deep: color-mix(in srgb, var(--accent) 45%, #ffffff); }
@@ -49,10 +102,10 @@
   <div class="wrap">
     <header>
       <h1>Explore</h1>
-      <p class="sub">Featured projects built on the platform.</p>
+      <p class="sub">Projects on the map, and how each one stands on it.</p>
     </header>
     <div id="grid" class="grid" hidden></div>
-    <div id="empty" class="empty" hidden>No featured projects yet — check back soon.</div>
+    <div id="empty" class="empty" hidden>No projects on the map yet — check back soon.</div>
     <div id="err" class="err" hidden>Couldn't load projects right now.</div>
   </div>
   <script src="/explore.js"></script>

package/modules/status-ui/public/explore.js

@@ -1,15 +1,39 @@
-// explore.js — the public Explore showcase (ADR 0141 §5, task #1002110). Fetches the
-// hub's featured projects and renders cards. On a NON-hub instance (platform-identity
-// off) the endpoint 404s / returns nothing, so the page shows a graceful empty state.
+// explore.js — the public Explore showcase (ADR 0141 §5, task #1002110), and since
+// BV1.R07 (task 1002326) the in-repo surface that DOGFOODS the visible-projects feed:
+// every project on the map, drawn as the state it stands in.
+//
+// Fetches the hub's public projects feed and renders one card each. On a NON-hub
+// instance (platform-identity off) the endpoint 404s / returns nothing, so the page
+// shows a graceful empty state.
+//
+// WHAT A CARD SAYS ABOUT VISIBILITY (ADR 0182 D1/D2a). Each feed row carries the
+// render type the server derived from the project's join door — planet, star or
+// black hole. This page draws that shape and labels it with the plain word
+// (Public / Private / Stealth), because the space words are the drawn orb's and
+// not the copy's. A black hole is ANONYMOUS: the feed already nulled everything
+// identifying server-side, and the branch that renders it here reads no
+// identifying field at all, so a server that regressed still could not put a name
+// on this page. Dark matter — a project that has not said what it is — is excluded
+// in SQL and never arrives; a row this page cannot classify is dropped rather than
+// guessed at, which is the same fail-closed rule one layer down.
 //
 // Project fields come from the network, so every value is set via textContent /
 // attribute assignment — never innerHTML — so a project name/tagline can't inject markup.
+//
+// Proof: ../../../tests/explore_visible_states.mjs
 (function () {
   'use strict';
   var grid = document.getElementById('grid');
   var empty = document.getElementById('empty');
   var err = document.getElementById('err');
 
+  // The map's render types → the plain word shown beside each one. Keyed on the
+  // feed's own `orb` field rather than re-derived from `state`: the state→orb
+  // mapping has exactly one home (modules/platform-identity/projects-feed.js) and a
+  // second copy here is a copy that drifts. An orb missing from this table is a row
+  // this page cannot honestly draw, so it draws nothing.
+  var ORB_LABEL = { planet: 'Public', star: 'Private', 'black-hole': 'Stealth' };
+
   function show(el) { if (el) el.hidden = false; }
 
   // Only http(s) origins are linkified — never javascript:/data: etc.
@@ -20,12 +44,50 @@
     } catch (_) { return null; }
   }
 
+  // The orb + its plain word. The shape is decorative (aria-hidden) — the label is
+  // what a screen reader gets, because a shape it cannot see is not a name.
+  function stateRow(orb) {
+    var row = document.createElement('div');
+    row.className = 'state';
+    var dot = document.createElement('span');
+    dot.className = 'orb orb-' + orb;
+    dot.setAttribute('aria-hidden', 'true');
+    row.appendChild(dot);
+    var label = document.createElement('span');
+    label.className = 'state-label';
+    label.textContent = ORB_LABEL[orb];
+    row.appendChild(label);
+    return row;
+  }
+
+  // A black hole publishes EXISTENCE and nothing else (ADR 0182 D2a). Deliberately
+  // takes no project argument: there is no identifying value in scope to leak by
+  // accident, now or when the feed grows a column.
+  function anonymousCard() {
+    var el = document.createElement('div');
+    el.className = 'card anon';
+    el.appendChild(stateRow('black-hole'));
+    var h = document.createElement('h2');
+    h.textContent = 'A project';
+    el.appendChild(h);
+    var p = document.createElement('p');
+    p.textContent = 'Something is here. Its name, and everything else about it, stay with its owner.';
+    el.appendChild(p);
+    return el;
+  }
+
+  // One feed row → one card, or null when the row is not drawable.
   function card(p) {
+    var orb = String((p && p.orb) || '');
+    if (!Object.prototype.hasOwnProperty.call(ORB_LABEL, orb)) return null;
+    if (orb === 'black-hole') return anonymousCard();
+
     var href = safeHref(p.origin);
     var el = document.createElement(href ? 'a' : 'div');
     el.className = 'card';
     if (href) { el.href = href; el.target = '_blank'; el.rel = 'noopener noreferrer'; }
 
+    el.appendChild(stateRow(orb));
     if (p.art_url && safeHref(p.art_url)) {
       var img = document.createElement('img');
       img.className = 'art';
@@ -55,8 +117,12 @@
     .then(function (r) { if (!r.ok) throw new Error('http ' + r.status); return r.json(); })
     .then(function (data) {
       var projects = (data && Array.isArray(data.projects)) ? data.projects : [];
-      if (projects.length === 0) { show(empty); return; }
-      projects.forEach(function (p) { grid.appendChild(card(p)); });
+      // Filtered BEFORE the count is read: a feed of rows none of which can be drawn
+      // is an empty map, and a visitor is owed the empty state rather than a grid
+      // with nothing in it.
+      var cards = projects.map(card).filter(Boolean);
+      if (cards.length === 0) { show(empty); return; }
+      cards.forEach(function (el) { grid.appendChild(el); });
       show(grid);
     })
     .catch(function () {

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.529",
+  "version": "1.19.531",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.529",
+      "version": "1.19.531",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.529",
+  "version": "1.19.531",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/src/module-api.js

@@ -45,7 +45,7 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.529'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.531'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/design_tokens_sync.mjs

@@ -132,7 +132,7 @@ test('the explore page mirrors the pack, var for var', () => {
 
 test('the provisioning onboarding pages resolve their accent pair from branding', () => {
   const source = fs.readFileSync(
-    path.join(REPO_ROOT, 'modules/provisioning/routes/provisioning.js'), 'utf8');
+    path.join(REPO_ROOT, 'modules/provisioning/routes/callback-page.js'), 'utf8');
   assert.match(source, /--sun:\$\{/, '--sun interpolates a resolved value, never a literal');
   assert.match(source, /--sun600:\$\{/, '--sun600 interpolates a resolved value, never a literal');
   const block = source.match(/const ACCENT =[\s\S]*?\}\)\(\);/);