@bongos/core 1.19.62 → 1.19.64

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.62",
-  "core_contract": "1.19.62",
-  "source_commit": "81537ad6976770dfa5d0e9ff4aae44c6cc00be9f",
+  "core_version": "1.19.64",
+  "core_contract": "1.19.64",
+  "source_commit": "ce3ba6421d4c20ca1f0b218a1b09d8825db932b1",
   "source_ref": "HEAD",
-  "built_at": "2026-08-12T01:12:59.066Z",
+  "built_at": "2026-08-12T03:26:56.981Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 291,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 1532,
-  "tree_sha256": "d7adb6b51e99575f2dbed8932206114b763bc19d3d4b880f41b091710892920b",
+  "tree_sha256": "c8e496c8bd2e61bc44e0ccb85fcceadb92acbeaa5ac0c7db1f856004a36f2728",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -947,7 +947,7 @@
     {
       "path": "docs/adr/0097-one-active-claim-per-session-and-worktree-binding.md",
       "mode": "0000644",
-      "sha256": "9613664f0f3906aeda7c384c3a6dfaacb8a0a048b0010da8a011831846d7911e"
+      "sha256": "3aa1e9074bd62168f999139533d672b0e0369186e2a78bbc966bca940df8d012"
     },
     {
       "path": "docs/adr/0097-retroactive-reward-backfill.md",
@@ -1377,7 +1377,7 @@
     {
       "path": "docs/file-map.md",
       "mode": "0000644",
-      "sha256": "01f8ff6aaa583d333b466f4d5cff849c09327653c33dcb3d82d60cc46f913cb8"
+      "sha256": "4b3ee1ce8445659a2660263cbbd9e2a903d010410b8ff8f89e2ed61ed54c6eab"
     },
     {
       "path": "docs/handoff-template.md",
@@ -2557,7 +2557,7 @@
     {
       "path": "modules/dev-box/app/test/unit.mjs",
       "mode": "0000644",
-      "sha256": "6c209f446990af95d16995720a4746d4890ed77c77ebc13f22293404ea0d3eea"
+      "sha256": "104360917db40f8c6de633ed692b50417e5cf55f316d97fc4d29285046ff2324"
     },
     {
       "path": "modules/dev-box/box-access.js",
@@ -3382,7 +3382,7 @@
     {
       "path": "modules/lifecycle/db.js",
       "mode": "0000644",
-      "sha256": "37303ffa7a795ea41db83f346bc736898720a3d1521434f566a71bbeb7b4dc15"
+      "sha256": "bc1526d068698e489fc2a698c04418e60097f18b56fd5c0dcdb6a6f62bbd1c81"
     },
     {
       "path": "modules/lifecycle/done-when.js",
@@ -3457,7 +3457,7 @@
     {
       "path": "modules/lifecycle/routes/claims.js",
       "mode": "0000644",
-      "sha256": "92065e0a5cfd2a5d76bbf04f4efafe0e2b3bc31cf616136963d4c07fad25047e"
+      "sha256": "60f698b88fab3b850e2ab7d4350b7192ca57fa932089d0a24a187add08e5c819"
     },
     {
       "path": "modules/lifecycle/routes/dependencies.js",
@@ -4037,12 +4037,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "66f2a964b8eb493c69abb582b5f9be8dec20d49f31919abf3b55b8c11ffee2ed"
+      "sha256": "90fef156fcc7117e3a88064eaab10da019b48fc2b1b5586cbbfe7d4006333682"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "c49444a432fa927ad7487c52180f23cda72e18055cfbfbf22565d4cdca2825de"
+      "sha256": "9fd4475c4f673be84d4504811890f5ec5339a226e4c738d41b6bb94c808cc76e"
     },
     {
       "path": "public-docs/index.html",
@@ -5662,7 +5662,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "f2df366234508aa746d344fd4c28b3e09f4354c3510f585283518a0fde03b89c"
+      "sha256": "d55be57d6e2c4435e3b1cdab9543b90c449358b26ba1035fdb82b097f41ca7d6"
     },
     {
       "path": "src/module-loader/loader.js",
@@ -6742,7 +6742,7 @@
     {
       "path": "tests/infra_exec_paths.mjs",
       "mode": "0000644",
-      "sha256": "0437795b927bf68baa1e08ba2e52ca5b1799d41938402159ffb01f2f5bff01b2"
+      "sha256": "2b905b00f873e082340af0fb6b460a31053d8b6cb77db121c97ed73383088973"
     },
     {
       "path": "tests/init.mjs",
@@ -7052,7 +7052,7 @@
     {
       "path": "tests/one_active_claim_per_session.mjs",
       "mode": "0000644",
-      "sha256": "3a4d6cc704d0ecd7be2f094ad10baf9c725a2045587994f076de76fb26ce90e5"
+      "sha256": "030c7f3958d1fef45977326b52596e21638fe80b4ff9e7ecba31c76063283aea"
     },
     {
       "path": "tests/orphaned_claim_ship.mjs",

package/docs/adr/0097-one-active-claim-per-session-and-worktree-binding.md

@@ -40,6 +40,10 @@ The default claim flow (`.claude/skills/builder-claim/SKILL.md`) ensures the tas
 
 > **Amended 2026-08-06 (task 1002570 / `core_204`).** The index as shipped was *stricter* than the worktree-scoped guard above: keyed on `creator_session_id` alone, it refused at the DB layer the second-worktree parallel claim the guard deliberately allows — breaking the many-sessions-per-builder norm this ADR set out to preserve. `migrations/<redacted>.sql` re-keys it to `(creator_session_id, COALESCE(worktree_name, ''))` under the name `uniq_active_claim_per_session_worktree`, same partial predicate, so the backstop now enforces exactly the guard's boundary. The `COALESCE` fold (rather than PG15's `NULLS NOT DISTINCT`) is load-bearing: a plain composite index treats NULLs as distinct, so two worktree-less claims off one shared clone would both insert and re-open the commingling hole. A `23505` from either index generation surfaces as `session_already_has_bound_claim` (task 1002589), never the false `ALREADY_CLAIMED`.
 
+> **Amended 2026-08-11 (task 1002522) — the guard and the index now fold tree identity identically.** `core_204`'s key folds `NULL` and `''` together (`COALESCE(worktree_name, '')`); the guard compared raw values, where `'' !== null`. So a claim sent with `worktree_name: ""` (the route caps the length but never required non-empty) was waved through beside a worktree-less claim and *then* refused by the index — a `23505` on a task nobody had taken. `db.foldWorktreeName` is now the single normalization: it folds empty/whitespace-only to `NULL` and trims, and it is applied at **every ingest point** (`claimTask`, `claimTasksBatch`'s prefix, and `shouldRefuseSessionClaim`), so stored names are always trimmed-or-`NULL` and the guard's comparison of stored rows is exact by construction. Pinned DB-free in `tests/one_active_claim_per_session.mjs`.
+>
+> Two things were checked and deliberately left alone. **The stale-claim sweep needs no re-tuning** now that one session may hold N claims: both the heartbeat (`session_pulses`, PK `claim_id`) and the sweep (`modules/sessions/pulse.js sweepStaleClaims`) are keyed per *claim*, never per session, so each parallel worktree's claim ages out on its own clock. **One residual divergence remains**, tracked as [#1002709](https://example.com/builders#/task/1002709): V3.R51 disambiguation renames a colliding `worktree_name` (`"wt-a"` → `"wt-a-2"`) while the CLI keeps sending the original, so guard and index both key on a name the caller never used — a second claim in the *same* real tree can slip past both. Closing it needs the requested name persisted (a schema decision), which is why it is a follow-up rather than part of this amendment.
+
 ## Consequences
 
 - A session can hold at most one active claim — commingled ships are structurally prevented, not just discouraged.

package/docs/file-map.md

@@ -226,6 +226,7 @@
 │   (public-status/ moved to modules/status-ui/public/ in BV1.R84 — see the modules/ block above)
 │   (public-builders/ moved to modules/hall-ui/public/ in BV1.R85 — the authenticated builders' hall; see the modules/ block above. It keeps its DEDICATED serving block in src/bongos/serve-internal.js: the builders.<apex> + apex /builders/* shim, canonical redirects, the citizen/Archon page gates, asset-stamping, and the module hall-widget injection — partitioned out of the generic web-surface loop. index.html=the hall dashboard; work/board/roadmap/goals/watch/harbor/gate/pair/settings/ranks/sessions/primer/diagrams/atlas pages; profile.html/profile.js=the public, shareable builder profile page (/profile?id=N — rank, works, credits, karma, achievements; task 1467); task.html/task.js=the task-detail page (/task/:id, task 751 — replaced the old #/task/N overlay); builders.js=the controller; dom-utils.js/hall-widgets.js=the widget+settings-panel registries.)
 │
+├── infra/                          ← ON-BOX scripts (task 1002699): the four reporter/heartbeat crons every dev box runs from its /workspace clone — box-heartbeat.sh (idle-sweep activity signal), box-report-version.sh (HEAD → POST /box/version), box-report-host-keys.sh (SSH host keys → POST /box/host-keys), box-report-terminal.sh (ttyd URL+credential → POST /box/terminal). Delivered by the workspace clone itself (modules/dev-box/box-access.js sparse scope includes infra/); crons self-installed by box-source-fetch.sh's per-tick bring-up. API base resolves GDS_BASE env → session-file api_base → skip (no hardcoded host in the neutral core).
 ├── devbox-app/                     ← OTB Dev Box — Electron menu-bar/tray switch for the builder's box (#904, ADR 0045; internal). SELF-CONTAINED: own package.json (never feeds the droplet's npm ci); built by .github/workflows/build-devbox-app.yml; published to the public releases repo per config/devbox-app.json; release recipe docs/recipes/devbox-app-release.md
 │   ├── src/                        ← main process: main.js (tray/window/IPC), brand.js (ADR 0004 — the ONE civ-name string), pairing.js, box-controller.js, gds-client.js, session-store.js (shares ~/.config/otb/gds-session.json with the CLI), ssh-setup.js (key 600 + known_hosts replace + managed-settings install w/ elevation), tray.js, preload.js
 │   ├── renderer/                   ← the panel UI (sandboxed; parchment theme)

package/modules/dev-box/app/test/unit.mjs

@@ -447,7 +447,7 @@ const ENDPOINTS = [
   ['claimableTasks', [], 'GET', '/api/gds/tasks/claimable', undefined],
   ['claimTask', ['1002388'], 'POST', '/api/gds/claims', { task_id: '1002388' }],
   ['boxScope', [], 'GET', '/api/gds/box/scope', undefined],
-  ['latestRelease', [], 'GET', '/downloads/devbox/latest.json', undefined],
+  ['latestRelease', [], 'GET', '/downloads/devbox/version', undefined],
 ];
 
 for (const [name, args, method, urlPath, body] of ENDPOINTS) {

package/modules/lifecycle/db.js

@@ -335,6 +335,30 @@ function singleRungPromotionError(oldRank, newRank) {
   };
 }
 
+// foldWorktreeName — task 1002522. The ONE normalization of an incoming
+// worktree_name, applied at every ingest point so the app guard
+// (shouldRefuseSessionClaim) and its DB backstop (core_204's index, keyed on
+// (creator_session_id, COALESCE(worktree_name, ''))) can never disagree about
+// which claims share a working tree.
+//
+// The index folds NULL to '' — so to Postgres an EMPTY-string name IS the
+// worktree-less group. The guard compared raw values, where '' !== null: it
+// waved through a ''-named claim beside a worktree-less one, and the INSERT
+// then failed the backstop with a 23505 the caller never earned. Whitespace-only
+// is the same case wearing a coat (`.claude/worktrees/<blank>` is the repo root,
+// not a tree), so it folds too, and surrounding whitespace is trimmed rather
+// than stored — an untrimmed name would key the index differently from the
+// trimmed one the guard compared.
+//
+// Fold ONCE, at ingest: claimTask/claimTasksBatch normalize before the INSERT,
+// so every stored name is already trimmed-or-NULL and the guard's comparison of
+// stored rows is exact. Pure + exported for DB-free tests.
+function foldWorktreeName(name) {
+  if (name == null) return null;
+  const trimmed = String(name).trim();
+  return trimmed === '' ? null : trimmed;
+}
+
 // disambiguateWorktreeName — V3.R51 (#270). Two simultaneously-ACTIVE claims
 // must never share a worktree_name: `.claude/worktrees/<name>` is a filesystem
 // path, and two live builders pointing at the same one would stomp each other.
@@ -2762,7 +2786,10 @@ async function claimTask({ taskId, builderId, worktreeName, headSha, creatorSess
     // which is what the overnight builder relies on. We hold FOR UPDATE on the
     // task row already; reading the active names inside the same txn is good
     // enough for the disambiguation to be stable for this insert.
-    let finalWorktreeName = worktreeName ?? null;
+    // task 1002522: fold ''/whitespace → NULL before anything keys on the name.
+    // core_204's index folds them together anyway (COALESCE(worktree_name, ''));
+    // normalizing here means the stored row matches what the guard compared.
+    let finalWorktreeName = foldWorktreeName(worktreeName);
     if (finalWorktreeName) {
       const { rows: activeNameRows } = await client.query(
         `SELECT worktree_name FROM claims
@@ -3121,8 +3148,12 @@ async function claimTasksBatch({ taskIds, builderId, worktreePrefix, creatorSess
         );
         reservedMigrationNumber = bumpRows[0].allocated;
       }
-      const worktreeName = worktreePrefix
-        ? `${worktreePrefix}-${t.id}`
+      // task 1002522: fold the prefix the same way a single claim's name is
+      // folded, so a blank/whitespace prefix yields worktree-less rows rather
+      // than names like "  -1234" that the index would key as distinct trees.
+      const foldedPrefix = foldWorktreeName(worktreePrefix);
+      const worktreeName = foldedPrefix
+        ? `${foldedPrefix}-${t.id}`
         : null;
       const rowCreatorSessionId = i === 0 ? (creatorSessionId ?? null) : null;
       try {
@@ -5546,6 +5577,7 @@ module.exports = {
   countShippedTasksForBuilder,
   singleRungPromotionError,
   disambiguateWorktreeName,
+  foldWorktreeName,
   updateTaskParallelSafe,
   updateTaskSecuritySensitive,
   updateTaskAutomationTag,

package/modules/lifecycle/routes/claims.js

@@ -80,13 +80,17 @@ function shouldRefuseSessionClaim({ activeClaimsForSession, creatorSessionId, wo
     return { refuse: false, inFlightTaskId: null, inFlightTitle: null, reason: null };
   }
   const claims = Array.isArray(activeClaimsForSession) ? activeClaimsForSession : [];
-  const incomingTree = worktreeName == null ? null : worktreeName;
-  // Two claims share a WORKING TREE iff their worktree_names match, or both are
-  // null (a worktree-less clone — the single branch genuinely commingles).
-  const sameWorkingTree = (name) => {
-    const t = name == null ? null : name;
-    return t === incomingTree;
-  };
+  // task 1002522: fold through db.foldWorktreeName — the SAME normalization the
+  // INSERT applies — so this decision keys trees exactly the way core_204's
+  // backstop index does (it folds NULL and '' into one group via
+  // COALESCE(worktree_name, '')). Comparing raw values let a ''-named claim slip
+  // past the guard and then trip the index, refusing a claim on a task that was
+  // never taken.
+  const incomingTree = db.foldWorktreeName(worktreeName);
+  // Two claims share a WORKING TREE iff their folded worktree_names match — which
+  // includes both being worktree-less (a plain clone, whose single branch
+  // genuinely commingles).
+  const sameWorkingTree = (name) => db.foldWorktreeName(name) === incomingTree;
   // Defence in depth: only count claims that belong to THIS session, are genuinely
   // session-bound (a NULL-session row must never trip the block), AND would land in
   // the SAME working tree as the incoming claim.
@@ -122,7 +126,9 @@ async function gateOneActiveClaimPerSession(req, res, next) {
   // The incoming claim's working tree — the hazard boundary the guard keys on. A
   // second claim in a DIFFERENT worktree is safe (different branch); only a second
   // claim into the SAME tree (or off one worktree-less clone) commingles.
-  const worktreeName = req.body?.worktree_name ?? null;
+  // Folded (task 1002522) so the guard, the refusal message, and the row the
+  // INSERT will actually write all speak about the same tree.
+  const worktreeName = db.foldWorktreeName(req.body?.worktree_name);
   let activeClaimsForSession;
   try {
     activeClaimsForSession = await db.getActiveClaimsForSession(creatorSessionId);

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.62",
+  "version": "1.19.64",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.62",
+      "version": "1.19.64",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.62",
+  "version": "1.19.64",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/src/module-api.js

@@ -551,8 +551,12 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 //         landed since 1.19.60 with no explicit bump. run 31550061440. (task 1002620)
 //   1.19.62 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
 //         landed since 1.19.61 with no explicit bump. run 31552833331. (task 1002620)
+//   1.19.63 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.62 with no explicit bump. run 31553743979. (task 1002620)
+//   1.19.64 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.63 with no explicit bump. run 31560059785. (task 1002620)
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.62'; // CI auto-patch carrier (ADR 0161); see changelog above
+const CORE_VERSION = '1.19.64'; // CI auto-patch carrier (ADR 0161); see changelog above
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/infra_exec_paths.mjs

@@ -31,18 +31,22 @@ function test(name, fn) {
   catch (err) { console.error(`  FAIL ${name}`); console.error('    ', err.message); failed++; }
 }
 
-// infra/ is HOST topology (publish-manifest.js PROTECTED_TOPOLOGY_EXCLUDE) — the neutral
-// core carries no units and no launcher (task 1002470). The checks that read the REAL tree
-// only mean something where that tree exists; the synthetic counterfactuals below always run.
-const HAS_INFRA = fs.existsSync(path.join(REPO, 'infra'));
+// Host topology means systemd UNITS, not the bare infra/ directory: the neutral core
+// carries no units and no launcher (task 1002470), but it DOES ship the four ON-BOX
+// reporter scripts in infra/ (task 1002699 — dev boxes clone this repo and wire them
+// as crons). So the real-tree unit lint is gated on *.service files being present,
+// and the launcher checks on core-node.sh — the synthetic counterfactuals always run.
+const INFRA_DIR = path.join(REPO, 'infra');
+const HAS_UNITS = fs.existsSync(INFRA_DIR) &&
+  fs.readdirSync(INFRA_DIR).some((f) => f.endsWith('.service'));
 const HAS_LAUNCHER = fs.existsSync(LAUNCHER);
 function hostTest(name, present, fn) {
-  if (!present) { console.log(`  skip ${name} — infra/ is absent in this checkout (host topology)`); return; }
+  if (!present) { console.log(`  skip ${name} — host topology (units/launcher) absent in this checkout`); return; }
   test(name, fn);
 }
 
 // ---- A. the lint is green on the real tree, and covers all 11 core-script units ----------------
-hostTest('lint-infra-exec: every core-script unit resolves in a consumer layout (publishable + present)', HAS_INFRA, () => {
+hostTest('lint-infra-exec: every core-script unit resolves in a consumer layout (publishable + present)', HAS_UNITS, () => {
   const r = lintInfraExec({ instanceRoot: REPO, coreRoot: REPO });
   assert.deepEqual(r.violations, [], `expected no violations, got: ${JSON.stringify(r.violations)}`);
   assert.ok(r.ok, 'lint should pass');

package/tests/one_active_claim_per_session.mjs

@@ -183,6 +183,80 @@ t('names the in-flight task in the MATCHING worktree, not the first row', () =>
   assert.equal(d.inFlightTitle, 'Two');
 });
 
+// =========================================================================
+// task 1002522 — the guard and core_204's backstop index must agree EXACTLY on
+// which claims share a tree. The index keys (creator_session_id,
+// COALESCE(worktree_name, '')), so to Postgres '' IS the worktree-less group;
+// the guard compared raw values, where '' !== null. db.foldWorktreeName is the
+// single normalization both sides now use (and claimTask applies before the
+// INSERT, so stored rows are already trimmed-or-NULL).
+// =========================================================================
+const { foldWorktreeName } = require('../modules/lifecycle/db.js');
+
+t('foldWorktreeName folds null / empty / whitespace to the same NULL key', () => {
+  assert.equal(foldWorktreeName(null), null);
+  assert.equal(foldWorktreeName(undefined), null);
+  assert.equal(foldWorktreeName(''), null);
+  assert.equal(foldWorktreeName('   '), null);
+  assert.equal(foldWorktreeName('\t\n'), null);
+});
+
+t('foldWorktreeName trims but never renames a real worktree', () => {
+  assert.equal(foldWorktreeName('wt-a'), 'wt-a');
+  assert.equal(foldWorktreeName('  wt-a  '), 'wt-a');
+  // Distinct trees stay distinct — the fold must not collapse parallel work.
+  assert.notEqual(foldWorktreeName('wt-a'), foldWorktreeName('wt-a-2'));
+});
+
+t("empty-string worktree is the SAME tree as worktree-less → refused (matches the index)", () => {
+  // Before the fold this returned allow, and the INSERT then tripped
+  // uniq_active_claim_per_session_worktree — a 23505 on a task nobody had taken.
+  const d = shouldRefuseSessionClaim({
+    creatorSessionId: 'sess-6',
+    worktreeName: '',
+    activeClaimsForSession: [
+      { claim_id: 50, task_id: 70, creator_session_id: 'sess-6', worktree_name: null, title: 'shared clone' },
+    ],
+  });
+  assert.equal(d.refuse, true);
+  assert.equal(d.inFlightTaskId, 70);
+});
+
+t('the mirror case: worktree-less incoming vs a stored empty-string name → refused', () => {
+  const d = shouldRefuseSessionClaim({
+    creatorSessionId: 'sess-6',
+    worktreeName: null,
+    activeClaimsForSession: [
+      { claim_id: 51, task_id: 71, creator_session_id: 'sess-6', worktree_name: '   ', title: 'blank name' },
+    ],
+  });
+  assert.equal(d.refuse, true);
+  assert.equal(d.inFlightTaskId, 71);
+});
+
+t('whitespace around a real name does not fake a second tree', () => {
+  const d = shouldRefuseSessionClaim({
+    creatorSessionId: 'sess-6',
+    worktreeName: ' wt-a ',
+    activeClaimsForSession: [
+      { claim_id: 52, task_id: 72, creator_session_id: 'sess-6', worktree_name: 'wt-a', title: 'A' },
+    ],
+  });
+  assert.equal(d.refuse, true);
+  assert.equal(d.inFlightTaskId, 72);
+});
+
+t('the fold does NOT re-break parallel worktrees (the bug this family fixed)', () => {
+  const d = shouldRefuseSessionClaim({
+    creatorSessionId: 'sess-6',
+    worktreeName: 'wt-b',
+    activeClaimsForSession: [
+      { claim_id: 53, task_id: 73, creator_session_id: 'sess-6', worktree_name: 'wt-a', title: 'A' },
+    ],
+  });
+  assert.equal(d.refuse, false);
+});
+
 // =========================================================================
 // task 1002589 (idea 1000638) — the DB backstop's ERROR SURFACE. A claims
 // INSERT can trip TWO partial unique indexes; claimTask used to map every pg