@bongos/core 1.19.653 → 1.19.655

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.653",
-  "core_contract": "1.19.653",
-  "source_commit": "eff58cdbf33eb107723b56ef2f119c578d628d5e",
+  "core_version": "1.19.655",
+  "core_contract": "1.19.655",
+  "source_commit": "0385761c80a2ab6960eb0553532e3d2f3a55714d",
   "source_ref": "HEAD",
-  "built_at": "2026-09-10T23:48:13.514Z",
+  "built_at": "2026-09-11T00:16:29.379Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 472,
     "agent_docs_stubbed": 24,
-    "functional_verbatim": 2110,
+    "functional_verbatim": 2111,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 2606,
-  "tree_sha256": "f2c83acf6434a7c56482adc7efcd782b2577ba4f4d6092d74e2ea143b5c6f90c",
+  "file_count": 2607,
+  "tree_sha256": "e0d112687c5e0ef345193d8be0fc71fca2ce378fba76eeb0441b4b5b347d160e",
   "files": [
     {
       "path": ".claude/skills/backlog-review/SKILL.md",
@@ -312,7 +312,7 @@
     {
       "path": ".env.local.example",
       "mode": "0000644",
-      "sha256": "a94c3ba19a639d190a88eb631ea3789a96fb64165e9d71c4dfca89d47e507df1"
+      "sha256": "3974cc6cbd95229bfcf35c622fb6805f5974b5f0e739af8481abe1237721ed95"
     },
     {
       "path": ".gitattributes",
@@ -397,7 +397,7 @@
     {
       "path": "config/branding.neutral.json",
       "mode": "0000644",
-      "sha256": "af8b7eea98085e2ec1365e3e4bdaaffe35df17e753c8891265b3839dc2a8d42b"
+      "sha256": "6d91405921c5d4844540a3571ad54ec395828054cad04d4874ff356b0bf0d670"
     },
     {
       "path": "config/design-tokens.neutral.json",
@@ -422,7 +422,7 @@
     {
       "path": "docker-compose.yml",
       "mode": "0000644",
-      "sha256": "1ed9752d6ded3450ae9471920b5a78f70e45f4b6867643d7a44065b8a4cd2661"
+      "sha256": "1742d8f1fe0795a1b1396e0e59b17bb324cba1101cb89b17336a866a34eeddd1"
     },
     {
       "path": "docker-entrypoint.sh",
@@ -1917,7 +1917,7 @@
     {
       "path": "docs/branding-contract.md",
       "mode": "0000644",
-      "sha256": "f71af4c488ecddd8636de3bebcefee2d714ff5035a20428e5f853130fc3f8953"
+      "sha256": "994f30b4459c83f28a579fc506f23bc2de3de6c17f482b9dfd6debf9f94d116a"
     },
     {
       "path": "docs/branding-fill-prompt.md",
@@ -1932,12 +1932,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "c260c58b911d89d5384ae4206d94e36034c747c5ad47be72001e8c3ac368c26a"
+      "sha256": "bcf48ded2e73de1f9892dd8b3a088c1a36750df38b37296c77dfb30fc1741682"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "af592f7cdadfbf31b5f44a2e623f0a5f1f126fe8959c1faef11dbbbd03d3c1f2"
+      "sha256": "57d7553e4da5ee9fc563c79d712dde9aea8f89c21f03ddf1dd18a317d513ee71"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2782,7 +2782,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "11da08cbbf3f33e0a95df12baddcfc0bddba2b4bb4cf7c77f2a818c7d1dbfba8"
+      "sha256": "7ab264db84c1eab7bc17fb54d875a7c56ed6142adc3c55fd45dc4e3470d30dae"
     },
     {
       "path": "docs/modules-contract.md",
@@ -3007,7 +3007,7 @@
     {
       "path": "docs/recipes/self-host.md",
       "mode": "0000644",
-      "sha256": "d49a9c449a9454838a1f794865c009b8de284bbca554c1591ac843eb710cbd5e"
+      "sha256": "366ca4863a794c0efad068f8f7664715e2203c1a142b3b6ddcede3dd2d2808f4"
     },
     {
       "path": "docs/recipes/server-bring-up.md",
@@ -3027,7 +3027,7 @@
     {
       "path": "docs/recipes/standalone-live-docs.md",
       "mode": "0000644",
-      "sha256": "02ae31810440b86f7c896b7014c75549497cab47345079986d54c9785cf5cc4a"
+      "sha256": "dc660646aa546985365e18d625652c3b6e42ea7304642dc1ac0ca93a04a7fb54"
     },
     {
       "path": "docs/recipes/ui-look-before-you-ship.md",
@@ -3037,7 +3037,7 @@
     {
       "path": "docs/recipes/upgrading-the-core.md",
       "mode": "0000644",
-      "sha256": "82a8a5b17d465b9048ce645e2bc13acaa492f766726cc79981fff1352a92d1b0"
+      "sha256": "2e0d4dec1964103798431d904a6bb4b960dbdbf598d90d0fd8d1018909fbbb95"
     },
     {
       "path": "docs/recipes/windows-builders.md",
@@ -4272,7 +4272,7 @@
     {
       "path": "modules/dev-box/routes/box.js",
       "mode": "0000644",
-      "sha256": "c5cef340b2a5c85202d07709f1b96983eb03ce5a15168684922e2de1ae025d71"
+      "sha256": "c096f0ff0fcf2889f8a1ebf5663d6b35979a7e552aa6558ea5a6a3df638550c0"
     },
     {
       "path": "modules/discord/CLAUDE.md",
@@ -5472,7 +5472,7 @@
     {
       "path": "modules/hall-ui/public/watch.js",
       "mode": "0000644",
-      "sha256": "058f25fcef75b3db5410ea7fa6b09515b0b7fddc64a7698c1a1c44e753c8a651"
+      "sha256": "e6808a692963759ca0942bcf28f4ee1479ba0b0ef727c2ace010bbcf5159043c"
     },
     {
       "path": "modules/hall-ui/public/watch.states.json",
@@ -5567,7 +5567,7 @@
     {
       "path": "modules/ideas/routes/inbox.js",
       "mode": "0000644",
-      "sha256": "b3df5f0d4273f44af60a7e09a8bef026a0f02085c7823c7912c70d067e55e127"
+      "sha256": "0f5997e58ca3f8ee33e84948136697519f095670387f0ae26cadb325f2389268"
     },
     {
       "path": "modules/ideas/routing.js",
@@ -7742,12 +7742,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "42dddf576e9fb7f8d33e39dff4244f6105bd4bf78b150cf700d819f763ab6b8d"
+      "sha256": "8bd02249a0695644a522b26a0a2e93519c0359d2b47b10855f69b2e24654d9fb"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "12d491b531085f6ed22cbda1b8f7485401c186fd10b1cb4170e8af6bed174d95"
+      "sha256": "a0ca266a85fbe549d63f4b62a04e4ac17f72bf1cd0500af154ca5597eb801c70"
     },
     {
       "path": "public-docs/index.html",
@@ -7942,7 +7942,7 @@
     {
       "path": "scripts/gds/box.js",
       "mode": "0000644",
-      "sha256": "e7d82101c8212d1c46da944bb52f2d18a7fc87293f66f18e6856844f8766666b"
+      "sha256": "6b1a2ea6ecb4a4c61811b30a3bac989083c0bc44bab83838c38b0c307690b9e0"
     },
     {
       "path": "scripts/gds/bug-triage.js",
@@ -8002,7 +8002,7 @@
     {
       "path": "scripts/gds/claude-materialize.js",
       "mode": "0000644",
-      "sha256": "cf333976f3c8fc9cfa1af57a121e5ee1f826d40fe7461bf1e32f939a59523663"
+      "sha256": "577698e9f8b6e3fea07fb4fdefe2d568d59f28f21dd3af7604c7ebd1406b682e"
     },
     {
       "path": "scripts/gds/claude-md-template.js",
@@ -8337,7 +8337,7 @@
     {
       "path": "scripts/gds/init.js",
       "mode": "0000644",
-      "sha256": "280197b62032374c11824c4f97ec713725e28e2b57cfd6c8aa42d493b02c4ed7"
+      "sha256": "0e6f775304038af80d3ca3b060f174ec9fc9e39f4d4eead2bc1c1587845099bd"
     },
     {
       "path": "scripts/gds/install-git-hooks.js",
@@ -8412,7 +8412,7 @@
     {
       "path": "scripts/gds/main-audit.js",
       "mode": "0000644",
-      "sha256": "35047f05c6059aee0cb64b13ef1495e4db1f3885b5b9c8cac5c60283069a059d"
+      "sha256": "4b27716f74bd13b0500c14b2607ea9f9e2584c4a27280bd075418772ac4dc644"
     },
     {
       "path": "scripts/gds/me.js",
@@ -8447,7 +8447,7 @@
     {
       "path": "scripts/gds/module.js",
       "mode": "0000644",
-      "sha256": "1ae452fc21ade9a39d7b0f9e13825f45e4a3402eddb1cbfee3c2d63ba35dd5df"
+      "sha256": "11787ddea4c1b3e37173532458149715a24b8ae078e3c9bde4bcefc91afb7e11"
     },
     {
       "path": "scripts/gds/newcomer-floor.config.json",
@@ -8482,7 +8482,7 @@
     {
       "path": "scripts/gds/oauth-secret.js",
       "mode": "0000644",
-      "sha256": "6d0aed5daf270551a1d9280bc6a52aab5448e2487e59e6e20a91d12931f4d74c"
+      "sha256": "39e8a37e623a8a5746fd83c9a572f1a5435e93afe5e0bd185f8760b4ef9ad31a"
     },
     {
       "path": "scripts/gds/onboard.js",
@@ -8552,7 +8552,7 @@
     {
       "path": "scripts/gds/provision-units.js",
       "mode": "0000644",
-      "sha256": "2b2c2a74514de43e9015e38db56da1daff040488bf6b10ffa4bfa10042995dea"
+      "sha256": "55c394bb932966cd2c53ab44e34d7fc23e855c1157c185456c5a630d8c3e62e1"
     },
     {
       "path": "scripts/gds/provision.js",
@@ -8712,12 +8712,12 @@
     {
       "path": "scripts/gds/seed-bongos-coreB-tranche1-tasks.js",
       "mode": "0000644",
-      "sha256": "b23ab6a5472c2312e75c06292f0ac52722978dd38692b2ea4c48dd6db9f89a9e"
+      "sha256": "775bafb00e95373305fff28e7e807ad73a77593de728be4033ae2bdd645d17fd"
     },
     {
       "path": "scripts/gds/seed-bongos-coreB-tranche2-tasks.js",
       "mode": "0000644",
-      "sha256": "e1c16162a054a9b49935a7575598422e29f84f9e30e00c5267864fccf30f64f5"
+      "sha256": "ca8619062d20ccfb2d13437f161041121bdd97d002a381aaf3b24fa393089990"
     },
     {
       "path": "scripts/gds/seed-bongos-goal-hierarchy-tasks.js",
@@ -8802,7 +8802,7 @@
     {
       "path": "scripts/gds/seed-provisioning-tasks.js",
       "mode": "0000644",
-      "sha256": "4b329798c90c9e600f80c33fef08fdbdb2c12e4cb9bbe60b3c085ef68156a2d9"
+      "sha256": "3f8f6ac70bda7848c165ea803e7edfe9757acfb957e6c0c67f500cd6aced44ed"
     },
     {
       "path": "scripts/gds/seed-staging.sh",
@@ -9012,7 +9012,7 @@
     {
       "path": "scripts/gds/spark.js",
       "mode": "0000755",
-      "sha256": "dfd5aa72caa26eb2c8cf3063e1b4f51e1f4bcd7fddcdd93d243279c130850628"
+      "sha256": "3cc086defcaf14df25db27646596f2332ac79dff97c95e72d4cff329d8db9189"
     },
     {
       "path": "scripts/gds/spike-task-map.js",
@@ -9032,7 +9032,7 @@
     {
       "path": "scripts/gds/status.js",
       "mode": "0000644",
-      "sha256": "5cc69c5f3301912325aa48481e63141523ad75241f021e0e8f1a6dc592048bdd"
+      "sha256": "945d5c88c6e24e7c27ce37339286bbe2ece7aecff0e86631c2e9a125f9ac18b4"
     },
     {
       "path": "scripts/gds/strand-watch.js",
@@ -9077,7 +9077,7 @@
     {
       "path": "scripts/gds/upgrade.js",
       "mode": "0000644",
-      "sha256": "80856db9974df9b3451decf55385eeb78bcba61e523ca09a2ea070deb48991ab"
+      "sha256": "430d1f55212254d75144fb15a438ffc61aad1ea7d5176b36f39e87c30efeb2df"
     },
     {
       "path": "scripts/gds/validate-design.js",
@@ -9127,7 +9127,7 @@
     {
       "path": "scripts/hall-preview/server.js",
       "mode": "0000644",
-      "sha256": "8f2b9f348d7372db1a5c9be3cdd9c14d48f20884b3f816b664ff3e590fa3b951"
+      "sha256": "b4332ac14675c4b7963920b3628f83c775d2b6362f9486052d6faec58aa53521"
     },
     {
       "path": "scripts/migrate.sh",
@@ -9387,12 +9387,12 @@
     {
       "path": "src/bongos/routes/auth.js",
       "mode": "0000644",
-      "sha256": "f7e24d83d5fceceb33eacc7d82ee8136a2177bb190e5b912e5857ffc07090009"
+      "sha256": "cfed94a4ce1c1c6ef20d33cc12149d3b669e822e1b4affb06a22de576c8f7f12"
     },
     {
       "path": "src/bongos/routes/backup.js",
       "mode": "0000644",
-      "sha256": "b6bab9ff17e967cbdb18d29f7e027d0ab74874c8b444434f955456829a5ed547"
+      "sha256": "134fe372078d8a04ee4565247f5e1bcc355259d32f53083334b660f5a2b40486"
     },
     {
       "path": "src/bongos/routes/builders.js",
@@ -9452,7 +9452,7 @@
     {
       "path": "src/bongos/routes/security.js",
       "mode": "0000644",
-      "sha256": "ae79028f92e0f299a8da7b68a2a17d227c7db06e43334991a9673468ca155a6f"
+      "sha256": "145edf46c6a76b9f37983f2fd2f41e298a694de9af1db4e3d593649f8ce8390b"
     },
     {
       "path": "src/bongos/secret-box.js",
@@ -9467,7 +9467,7 @@
     {
       "path": "src/bongos/serve-internal.js",
       "mode": "0000644",
-      "sha256": "6a83cdf4be07fabb61898906b2cbc9f2068b8e3263856403b0bb5040af207308"
+      "sha256": "969494ec8a6730aa5d40c5c1bf046e8dbbdcae15f81b835658f710cdf8dc87af"
     },
     {
       "path": "src/bongos/stealth-gate.js",
@@ -9482,7 +9482,7 @@
     {
       "path": "src/branding.js",
       "mode": "0000644",
-      "sha256": "2bbb5774c9ae8659b4d5ce9b62cb558d28d036b2aa0075f9329ae85c15734a2d"
+      "sha256": "8f25350cccc78218fa7bcca1b405604b781b085b5565668988918b7c7e80786f"
     },
     {
       "path": "src/build-info.js",
@@ -9497,12 +9497,12 @@
     {
       "path": "src/instance-config.js",
       "mode": "0000644",
-      "sha256": "8acbe84b69175385271e916c2966668dcfa43adc43790214ad1a524c95190be1"
+      "sha256": "08b655540d7297e827abcdfb576c37089c188d88b64a3b8a731e61c99d3c78d1"
     },
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "03201e0e94d7ba4d755c8d0efae051208913faa2a7f654b231d3cb9ded49bd9b"
+      "sha256": "503fd9b1f372ec8577fff63dc486b9e33a801a3114e5a151cf47d71f818bf4de"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -9537,7 +9537,7 @@
     {
       "path": "src/modules.js",
       "mode": "0000644",
-      "sha256": "dff7e5ff44a647d514dac9935453620aff12de6842f50521e80eca6c1f531571"
+      "sha256": "c487fb1516380cd7f1de2f57feb550e487172deed247248c15f35bbbf4f48472"
     },
     {
       "path": "src/platform-server.js",
@@ -10087,7 +10087,7 @@
     {
       "path": "tests/claude_materialize.mjs",
       "mode": "0000644",
-      "sha256": "b0474476af85716848114d345f4be67beb2e01ad3ceab36a25d474c3e9e536c5"
+      "sha256": "9ae022d9051937e80b0d3a4baf3840d57560fa9d441b93beff746cfa11871d35"
     },
     {
       "path": "tests/clawback_confirmed_backlog.mjs",
@@ -10107,7 +10107,7 @@
     {
       "path": "tests/cli_exit_no_abort.mjs",
       "mode": "0000644",
-      "sha256": "7bc4d54d29458c70cd545aecac1ca1f7b8cc13d7b1dacaa90a8c2184ef553304"
+      "sha256": "7b489890ab6e2baa6aefe784b81852eaaac39cdc50af5974de7eee815baee510"
     },
     {
       "path": "tests/cli_lib_formatters.mjs",
@@ -10152,7 +10152,7 @@
     {
       "path": "tests/cloud_bongos_pack.mjs",
       "mode": "0000644",
-      "sha256": "7aa52fa81440f628ab8daf45a71b9acd519b16435646464a7419a850773535d9"
+      "sha256": "2bda12dc2c0667988726b8177da1068c5355cec8930831bf16e64535bbaad2c6"
     },
     {
       "path": "tests/collab_page.mjs",
@@ -11227,7 +11227,7 @@
     {
       "path": "tests/idea_develop_spark.mjs",
       "mode": "0000644",
-      "sha256": "a498e2dfc87dbb5050d414ff04ebf4178900edb771be384fe91247e452a37a02"
+      "sha256": "fe55e01a0be2aa6ca0bc536469eefcee7d44f40dfa0767fedf1709aed3f7d81e"
     },
     {
       "path": "tests/idea_full_capture.mjs",
@@ -11267,7 +11267,7 @@
     {
       "path": "tests/idea_resubmit.mjs",
       "mode": "0000644",
-      "sha256": "51e1286235cbde1b56188f29b0e2bd12ac73a9637dbf1c16b325f10147256f27"
+      "sha256": "56ef1d4405ec63a9c095000411774f533b3e34cdb89184bd4351e58313dc2975"
     },
     {
       "path": "tests/idea_route_attribution.mjs",
@@ -11342,12 +11342,12 @@
     {
       "path": "tests/init.mjs",
       "mode": "0000644",
-      "sha256": "ed99a7b7d925d9f202ab90f861cc4b761c0e58bb7eb79b189a6366591faeb388"
+      "sha256": "21e5093a3b151e378a69249dab9b82845cec4d6c172d1a729cdc28512615a00b"
     },
     {
       "path": "tests/instance_config.mjs",
       "mode": "0000644",
-      "sha256": "99002df0ac0ea199a615094b7d1d5fe856823494a7291c6014c78ead1d7c8c30"
+      "sha256": "cc55d82015e3be2f603ac2621704f8dfe6c505affc60c573fbd36f8114363c32"
     },
     {
       "path": "tests/instance_manifest.mjs",
@@ -12917,7 +12917,7 @@
     {
       "path": "tests/upgrade.mjs",
       "mode": "0000644",
-      "sha256": "a565b3a5e93a41feccaa8b616272390ea27cf2d50950a96f04856d18caa67744"
+      "sha256": "3c7203cb85a187ce5ff0cff16ffd3dc1e02256501318b7fbb6e273e67abc2e99"
     },
     {
       "path": "tests/upgrade_persist_pin.mjs",
@@ -12997,7 +12997,12 @@
     {
       "path": "tests/watch_applications_queue.mjs",
       "mode": "0000644",
-      "sha256": "52c5c056c33b0b2ee91076b29e24ea5b650a0148c603fdde5136e60d6c6e926a"
+      "sha256": "bca521caccef7c1c147bfa678203369b246f786d4d8cb5a485f15a9d11f925ba"
+    },
+    {
+      "path": "tests/watch_sealed_floor.mjs",
+      "mode": "0000644",
+      "sha256": "13d04de202ecc61b0f97be30496273fb4f0ff5e01da0c7f36f410052812e360c"
     },
     {
       "path": "tests/web_admission_status.mjs",

package/.env.local.example

@@ -21,7 +21,7 @@ GOOGLE_AI_STUDIO_KEY=
 
 # --- GDS CLI ------------------------------------------------------------------
 # The /builder-* CLI base is NOT read from this file. It resolves (in order):
-#   1. the <PREFIX>_API_BASE env var on the command (e.g. CLOUDBONGOS_API_BASE=https://…)
+#   1. the <PREFIX>_API_BASE env var on the command (e.g. BONGOS_API_BASE=https://…)
 #   2. the signed-in session's api_base (set once by `bongos login <instance-url>`)
 #   3. the instance's own branding (config/branding.json → branding.neutral.json)
 
@@ -29,5 +29,5 @@ GOOGLE_AI_STUDIO_KEY=
 # Needed only if you are running the GDS server yourself (server.js) and want
 # Device Flow auth to work. The production droplet has these in
 # /etc/amazonprimea/ — builders do NOT need these for normal day-to-day work.
-# GDS_GITHUB_CLIENT_ID=
-# GDS_GITHUB_CLIENT_SECRET=
+# BONGOS_GITHUB_CLIENT_ID=
+# BONGOS_GITHUB_CLIENT_SECRET=

package/config/branding.neutral.json

@@ -108,5 +108,5 @@
     "_note": "Where a successful sign-in lands when no explicit ?return= / same-apex Referer was carried (auth.js postLoginLanding). Portable default '/builders' — the hall always exists. A platform-home instance points this at its own front door (cloudbongos.com → '/', its landing page; the retired '/gate/' orb sky folds to '/' — task 1003233). Validated through the open-redirect allowlist; env override <PREFIX>_POST_LOGIN_LANDING. Task 1002240.",
     "postLogin": "/builders"
   },
-  "envPrefix": "CLOUDBONGOS"
+  "envPrefix": "BONGOS"
 }

package/docker-compose.yml

@@ -43,7 +43,7 @@ services:
       # GDS-only instance: skip game-module migrations (ADR 0062 §5).
       MEDUSA_GDS_ONLY: "1"
       # Public origin for OAuth callbacks etc. — localhost for a local self-host.
-      CLOUDBONGOS_PUBLIC_ORIGIN: http://localhost:3000
+      BONGOS_PUBLIC_ORIGIN: http://localhost:3000
     ports:
       - "3000:3000"
     restart: unless-stopped

package/docs/branding-contract.md

@@ -42,7 +42,7 @@ env override   →   instance config (config/branding.json)   →   neutral star
 | `theme` | `{ palette, mode, ui }` — palette file ref + theme mode, plus `ui`, the WEB look `themeMarkup()` splices into every served page as a plain `:root` after the page's stylesheet: `colors` (the thirteen contract tokens — **light-mode values**; each stylesheet derives its own dark tier from them at `:root[data-mode="dark"]` + its `prefers-color-scheme` twin, which outrank the pack), `fonts` (`display`, `body`, `links`), `favicon`, and `backdrop` — a `body{background:…}` rule that outranks every sheet in **both** modes, so a dual-mode world sets it to `var(--bg)` (the neutral pack does since [task 1003298](https://cloudbongos.com/builders#/task/1003298), ADR 0196) rather than a literal. The neutral values are the chrome world's; `config/design-tokens.neutral.json` must mirror `colors` + `fonts` key for key (`tests/design_tokens_sync.mjs`), and the world's derived recipes are recorded in `DESIGN.md`. The ui-design module's **style library** (`modules/ui-design/styles/`, [ADR 0219](adr/<redacted>.md)) ships ready-made `theme.ui` blocks (looks) an instance copies into this field; every served sheet reads only these fifteen, so a look re-themes every surface with no page edit. |
 | `copy` | Instance copy keys (tagline, hallName, notFound, …). Full copy pack adoption = task [#1196](https://example.com/builders#/task/1196). |
 | `landing.postLogin` | Where a successful web sign-in lands when it carried no explicit `?return=` / same-apex `Referer` (`src/bongos/routes/auth.js` `postLoginLanding`). **Portable default `/builders`** — the hall always exists. A platform-home instance points this at its OWN front door so a visitor who signs in from there returns there instead of being auto-redirected into the hall (cloudbongos.com → `/gate/`, the orbs). Validated through the same open-redirect allowlist as `?return=` (a misconfigured value falls back to `/builders`). Env-overridable: `<PREFIX>_POST_LOGIN_LANDING`. (task [#1002240](https://cloudbongos.com/builders#/task/1002240)) |
-| `envPrefix` | Env-var namespace for overrides (`OTB`, `CLOUDBONGOS`, …). |
+| `envPrefix` | Env-var namespace for overrides (`BONGOS` for vanilla, `OTB`, …). Legacy `CLOUDBONGOS_`, `OTB_`, `GDS_` and `PMS_` spellings still resolve, with one deprecation warning per name, until core 1.21 (task 1003703). |
 
 **Not here:** feature-module on/off flags (game, art, discord, dev-box) are a sibling config owned by R54 (task [#1193](https://example.com/builders#/task/1193)).