@bongos/core 1.19.692 → 1.19.694

package/docs/copy-registry.json

@@ -3,9 +3,9 @@
   "generator": "scripts/gds/copy-inventory.js",
   "goal": 1000074,
   "counts": {
-    "strings": 1761,
-    "unique_ids": 1523,
-    "certain": 1761,
+    "strings": 1759,
+    "unique_ids": 1521,
+    "certain": 1759,
     "heuristic": 0,
     "duplicate_ids": 165
   },
@@ -13,7 +13,7 @@
     "builders-hall": {
       "at": "modules/hall-ui/public",
       "files": 81,
-      "strings": 1282
+      "strings": 1280
     },
     "status-dashboard": {
       "at": "modules/status-ui/public",
@@ -2056,7 +2056,7 @@
       "surface": "builders-hall",
       "text": "A Full Idea answers five questions, so that someone else can deliver against it without having to interview you first. Open to every role — the score below is the only filter, and it counts substance, not who you are.",
       "file": "modules/hall-ui/public/ideas.html",
-      "line": 107,
+      "line": 104,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -2416,7 +2416,7 @@
       "surface": "builders-hall",
       "text": "Answer the five questions and this spark becomes a Full Idea.",
       "file": "modules/hall-ui/public/ideas.js",
-      "line": 586,
+      "line": 601,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -2726,15 +2726,6 @@
       "origin": "js-notice",
       "confidence": "certain"
     },
-    {
-      "id": "f0576990e9fc",
-      "surface": "builders-hall",
-      "text": "Blocker resolution",
-      "file": "modules/hall-ui/public/ideas.html",
-      "line": 81,
-      "origin": "html-text",
-      "confidence": "certain"
-    },
     {
       "id": "118026595c16",
       "surface": "builders-hall",
@@ -3748,7 +3739,7 @@
       "surface": "builders-hall",
       "text": "Could not load idea {…}.",
       "file": "modules/hall-ui/public/ideas.js",
-      "line": 629,
+      "line": 644,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -3793,7 +3784,7 @@
       "surface": "builders-hall",
       "text": "Could not load the idea template. Reload, or file from the terminal with capture.js.",
       "file": "modules/hall-ui/public/ideas.js",
-      "line": 611,
+      "line": 626,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -3820,7 +3811,7 @@
       "surface": "builders-hall",
       "text": "Could not load the queue just now.",
       "file": "modules/hall-ui/public/ideas.js",
-      "line": 550,
+      "line": 565,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -4225,7 +4216,7 @@
       "surface": "builders-hall",
       "text": "Counted, not judged: each question is worth the same, and earns its share in proportion to how much real text it carries. Whitespace and padding score nothing.",
       "file": "modules/hall-ui/public/ideas.html",
-      "line": 167,
+      "line": 164,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -4351,7 +4342,7 @@
       "surface": "builders-hall",
       "text": "Develop this idea",
       "file": "modules/hall-ui/public/ideas.js",
-      "line": 585,
+      "line": 600,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -4360,7 +4351,7 @@
       "surface": "builders-hall",
       "text": "Developing a Big Idea Spark",
       "file": "modules/hall-ui/public/ideas.html",
-      "line": 119,
+      "line": 116,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -4396,7 +4387,7 @@
       "surface": "builders-hall",
       "text": "Discard draft",
       "file": "modules/hall-ui/public/ideas.html",
-      "line": 145,
+      "line": 142,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -4828,7 +4819,7 @@
       "surface": "builders-hall",
       "text": "File it",
       "file": "modules/hall-ui/public/ideas.html",
-      "line": 99,
+      "line": 96,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -4855,7 +4846,7 @@
       "surface": "builders-hall",
       "text": "File this idea",
       "file": "modules/hall-ui/public/ideas.html",
-      "line": 144,
+      "line": 141,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -4954,7 +4945,7 @@
       "surface": "builders-hall",
       "text": "Five questions, and a score that counts how much of each you actually answered.",
       "file": "modules/hall-ui/public/ideas.js",
-      "line": 621,
+      "line": 636,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -5188,7 +5179,7 @@
       "surface": "builders-hall",
       "text": "Goals could not be loaded. Refresh to try again.",
       "file": "modules/hall-ui/public/goals-page.js",
-      "line": 890,
+      "line": 896,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -5930,15 +5921,6 @@
       "origin": "js-text-assign",
       "confidence": "certain"
     },
-    {
-      "id": "19ad2430937d",
-      "surface": "builders-hall",
-      "text": "Learning capture",
-      "file": "modules/hall-ui/public/ideas.html",
-      "line": 78,
-      "origin": "html-text",
-      "confidence": "certain"
-    },
     {
       "id": "7c9b7a89353b",
       "surface": "builders-hall",
@@ -6115,7 +6097,7 @@
       "surface": "builders-hall",
       "text": "Loading the five questions…",
       "file": "modules/hall-ui/public/ideas.html",
-      "line": 138,
+      "line": 135,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -6970,7 +6952,7 @@
       "surface": "builders-hall",
       "text": "Nothing is waiting. A spark appears here when its author offers a quick idea up for development.",
       "file": "modules/hall-ui/public/ideas.js",
-      "line": 528,
+      "line": 543,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -7060,7 +7042,7 @@
       "surface": "builders-hall",
       "text": "One line. This is what the idea is called everywhere else.",
       "file": "modules/hall-ui/public/ideas.html",
-      "line": 127,
+      "line": 124,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -7888,7 +7870,7 @@
       "surface": "builders-hall",
       "text": "Recent history could not be loaded right now.",
       "file": "modules/hall-ui/public/work.js",
-      "line": 1232,
+      "line": 1236,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -8707,7 +8689,7 @@
       "surface": "builders-hall",
       "text": "Showing {…} of {…}.",
       "file": "modules/hall-ui/public/ideas.js",
-      "line": 532,
+      "line": 547,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -8752,7 +8734,7 @@
       "surface": "builders-hall",
       "text": "Sign in to filter to your goals",
       "file": "modules/hall-ui/public/goals-page.js",
-      "line": 867,
+      "line": 873,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -9022,7 +9004,7 @@
       "surface": "builders-hall",
       "text": "Suggested as you type; leave it on \"no goal\" and it waits for triage.",
       "file": "modules/hall-ui/public/ideas.html",
-      "line": 91,
+      "line": 88,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -9715,7 +9697,7 @@
       "surface": "builders-hall",
       "text": "The task list could not be loaded right now.",
       "file": "modules/hall-ui/public/work.js",
-      "line": 1297,
+      "line": 1301,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10255,7 +10237,7 @@
       "surface": "builders-hall",
       "text": "Welcome, {…}. Claim and release tasks and follow work in progress — no terminal needed.",
       "file": "modules/hall-ui/public/work.js",
-      "line": 1223,
+      "line": 1227,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -10597,7 +10579,7 @@
       "surface": "builders-hall",
       "text": "Write a Full Idea",
       "file": "modules/hall-ui/public/ideas.html",
-      "line": 106,
+      "line": 103,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -12055,7 +12037,7 @@
       "surface": "builders-hall",
       "text": "repro steps, context, anything that helps…",
       "file": "modules/hall-ui/public/ideas.html",
-      "line": 87,
+      "line": 84,
       "origin": "html-attr:placeholder",
       "confidence": "certain"
     },
@@ -12361,7 +12343,7 @@
       "surface": "builders-hall",
       "text": "via goal",
       "file": "modules/hall-ui/public/dom-utils.js",
-      "line": 322,
+      "line": 364,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -12397,7 +12379,7 @@
       "surface": "builders-hall",
       "text": "what the idea is, in one line",
       "file": "modules/hall-ui/public/ideas.html",
-      "line": 130,
+      "line": 127,
       "origin": "html-attr:placeholder",
       "confidence": "certain"
     },

package/docs/module-api-changelog.md

@@ -1843,5 +1843,9 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.690 with no explicit bump. run 34729018766. (task 1002620)
   1.19.692 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.691 with no explicit bump. run 34730821372. (task 1002620)
+  1.19.693 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.692 with no explicit bump. run 34731402927. (task 1002620)
+  1.19.694 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.693 with no explicit bump. run 34731674808. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/hall-ui/public/dom-utils.js

@@ -120,6 +120,48 @@
     return list && list.length ? list.slice() : ['engineer', 'ideator'];
   }
 
+  // Fill a Kind <select> from the vocabulary the SERVER serves (GET /me
+  // `task_kinds`, sourced from the lifecycle port's VALID_KINDS) — task 1003453.
+  // The board and the goals page each carried their own hardcoded copy and both
+  // had gone stale against the DB CHECK: 'verify' tasks existed, were claimable,
+  // and could not be filtered for on either. One filler here is what stops a
+  // third copy being the easiest option, the same reasoning `disciplines()`
+  // above was written on.
+  //
+  // Leading '— any —' is the page's own markup and is KEPT (`sel.length = 1`,
+  // the populateGoalFilter idiom). An absent or empty list leaves the select
+  // with just that row rather than a wrong list — an older server that serves no
+  // vocabulary should offer no lens, not a stale one.
+  // `keepFirst` is how many markup options survive: 1 for a FILTER, whose leading
+  // '— any —' belongs to the page, and 0 for a FILING select, which is cleared and
+  // rebuilt — its markup option is the degraded fallback that still lets someone
+  // file if the read never lands. `label` names a kind for a reader (the filters
+  // show the raw value, as their literals did; the filing select shows kindLabel).
+  function fillKindFilter(sel, kinds, { keepFirst = 1, label = (k) => k, selected = null } = {}) {
+    if (!sel) return;
+    const list = Array.isArray(kinds) ? kinds.filter((k) => typeof k === 'string' && k) : [];
+    if (!list.length) return; // no vocabulary served → leave the markup alone
+    const cur = sel.value;
+    sel.length = keepFirst;
+    for (const k of list) {
+      const opt = document.createElement('option');
+      opt.value = k;
+      opt.textContent = label(k);
+      sel.appendChild(opt);
+    }
+    // A refill must not drop the reader's pick; `selected` is the filing default.
+    const want = (cur && list.includes(cur)) ? cur : (list.includes(selected) ? selected : null);
+    if (want) sel.value = want;
+  }
+
+  // How a kind is named in a picker — 'blocker-resolution' → 'Blocker resolution'.
+  // The same shape disciplineLabel takes below, and it reproduces every label the
+  // hand-written <option> list in ideas.html carried, so no copy changes.
+  function kindLabel(k) {
+    const s = String(k || '').replace(/-/g, ' ');
+    return s ? s.charAt(0).toUpperCase() + s.slice(1) : '';
+  }
+
   // How a craft is named in a picker. An acronym stays upper-case ('ui' → 'UI');
   // anything else is Title Case, so a craft a module adds later needs no new entry.
   function disciplineLabel(d) {
@@ -324,6 +366,7 @@
 
   window.OTB = {
     escapeHtml, $, fmtNum, num, fmtInt, fmtCompact, fmtDate, rankLabel, toast, moduleOn, disciplines, disciplineLabel,
+    fillKindFilter, kindLabel, // task 1003453 — one Kind filler, all three surfaces
     errCode, errMessage, errDetails, // task 1002462 — ADR 0116 envelope readers
     contributeSettingsPanel, settingsPanels,
     contributeHallWidget, hallWidgets, hallWidgetIds,

package/modules/hall-ui/public/goals-page.js

@@ -862,6 +862,12 @@
     }
     try {
       state.me = await getJSON(`${API}/me`).catch(() => null);
+      // task 1003453 — the Kind lens is built from the served vocabulary.
+      // Optional-called on purpose: a browser holding an older cached dom-utils.js
+      // must lose one LENS, not the whole page. boot() is a single try block, so an
+      // unguarded call here throws before anything renders — which is exactly what
+      // it did to every goals render until this guard went in.
+      window.OTB.fillKindFilter?.($('#f-goal-kind'), state.me && state.me.task_kinds);
       // task 1828 — "My goals" needs an identity; disable it when signed out.
       const mineSel = $('#f-goal-mine');
       if (mineSel && !state.me) { mineSel.disabled = true; mineSel.title = 'Sign in to filter to your goals'; }
@@ -1028,9 +1034,10 @@
       ] },
     ],
     overflow: [
-      { id: 'f-goal-kind', label: 'Kind', options: [{ value: '', label: '— any —' },
-        'feature', 'bug', 'infra', 'refactor', 'spike', 'learning-capture',
-        'cleanup', 'decision', 'blocker-resolution', 'unclassified'] },
+      // task 1003453: filled from /me.task_kinds once boot lands it, never typed
+      // here — this copy had gone stale against the DB CHECK exactly as the
+      // board's had, so 'verify' work could not be filtered for on either.
+      { id: 'f-goal-kind', label: 'Kind', options: [{ value: '', label: '— any —' }] },
       { id: 'f-goal-discipline', label: 'Discipline', options: [{ value: '', label: '— any —' }, 'engineer', 'artist', 'ideator', 'ui', 'unclassified'] },
       { id: 'f-goal-newcomer', label: 'Newcomer', options: [{ value: '', label: '— any —' }, { value: 'yes', label: 'newcomer-friendly only' }] },
       { id: 'f-goal-fit', label: 'Run mode', options: [{ value: '', label: '— any —' },

package/modules/hall-ui/public/ideas.html

@@ -69,17 +69,14 @@
                    placeholder="what's wrong, or what you'd like to see">
 
             <label class="fi-label" for="fq-kind">Kind</label>
+            <!-- task 1003453: the options are FILLED from /me.task_kinds at boot
+                 (ideas.js), not written here. This markup used to spell the whole
+                 vocabulary and had gone stale against the DB CHECK exactly as the
+                 two board filters had — a third copy nobody was watching. The one
+                 option left is the degraded fallback: if the read never lands, a
+                 bug can still be filed. -->
             <select id="fq-kind" class="fi-input">
               <option value="bug" selected>Bug</option>
-              <option value="feature">Feature</option>
-              <option value="infra">Infra</option>
-              <option value="refactor">Refactor</option>
-              <option value="spike">Spike</option>
-              <option value="learning-capture">Learning capture</option>
-              <option value="cleanup">Cleanup</option>
-              <option value="decision">Decision</option>
-              <option value="blocker-resolution">Blocker resolution</option>
-              <option value="unclassified">Unclassified</option>
             </select>
 
             <label class="fi-label" for="fq-body">Details <span class="fi-hint">(optional)</span></label>

package/modules/hall-ui/public/ideas.js

@@ -508,6 +508,21 @@
       // The picker degrades to "homeless only" — filing itself never depends
       // on this read succeeding.
     }
+
+    // task 1003453 — the kind vocabulary, so this select is not a third hardcoded
+    // copy. Its OWN try, deliberately not folded into the Promise.all above: the
+    // goal picker is what this form is FOR and the kind list is cosmetic, so a
+    // vocabulary read must never be able to take the picker down with it. (It can:
+    // put it in that Promise.all and one rejection strands buildingVersionIds and
+    // allOpenGoals in the shared catch — two suites caught exactly that.)
+    // keepFirst 0 clears the markup's fallback and rebuilds with the served list,
+    // keeping 'bug' as the default this form has always opened on.
+    try {
+      const meRes = await api.me.getMe({});
+      window.OTB.fillKindFilter?.(fqKindEl(), meRes.ok && meRes.data && meRes.data.task_kinds, {
+        keepFirst: 0, label: window.OTB.kindLabel, selected: 'bug',
+      });
+    } catch (_) { /* the markup's Bug option stands — a report can still be filed */ }
   }
 
   // ---------------------------------------------------------------------------

package/modules/hall-ui/public/work.js

@@ -1217,6 +1217,10 @@
       throw err;
     }
     viewer.id = me?.builder?.id ?? null;
+    // task 1003453 — the Kind lens, from the served vocabulary. Optional-called so an
+    // older cached dom-utils.js costs one lens, not the board; see OTB.fillKindFilter.
+    window.OTB.fillKindFilter?.($('#f-kind'), me?.task_kinds);
+    restoreUrlFilter('f-kind'); // a shared URL's kind applies once the options exist
     const sub = $('#work-sub');
     if (sub) {
       const name = me?.builder?.display_name || me?.builder?.github_login || 'builder';
@@ -1364,13 +1368,9 @@
       ],
       overflow: [
         { id: 'f-goal', label: 'Goal', options: [{ value: '', label: '— all goals —' }] },
-        {
-          id: 'f-kind',
-          label: 'Kind',
-          options: [{ value: '', label: '— any —' },
-            'feature', 'bug', 'infra', 'refactor', 'spike', 'learning-capture',
-            'cleanup', 'decision', 'blocker-resolution', 'unclassified'],
-        },
+        // task 1003453: FILLED from /me.task_kinds at boot, never typed here — the
+        // literal was stale against the DB CHECK, so 'verify' was unfilterable.
+        { id: 'f-kind', label: 'Kind', options: [{ value: '', label: '— any —' }] },
         {
           id: 'f-newcomer',
           label: 'Newcomer',

package/modules/lifecycle/lifecycle.js

@@ -37,6 +37,12 @@ module.exports = {
   // (consumer: core cascade-dispatch.js, the dormant System-3 lib).
   get VOTABLE_TASK_STATUSES() { return classifier.VOTABLE_TASK_STATUSES; },
   classifyTaskKind: (...a) => classifier.classifyTaskKind(...a),
+  // TASK_KINDS: the kind vocabulary, as an ordered array (consumer: GET /me,
+  // which hands it to the hall so a filter can be BUILT from it instead of
+  // retyped — task 1003453). VALID_KINDS is a Set and Sets do not survive
+  // JSON.stringify, so the port hands over the array rather than making every
+  // caller remember to spread it.
+  get TASK_KINDS() { return [...classifier.VALID_KINDS]; },
   // suggestGoalForCapture: ONE goal for a filing that named none, or null (task
   // 1003067). Consumer: the discord #bugs vector, which files through the ideas
   // routing path and needs a home to offer it. Lives behind the port because

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.692",
+  "version": "1.19.694",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.692",
+      "version": "1.19.694",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.692",
+  "version": "1.19.694",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/scripts/gds/docs-entropy.js

@@ -160,6 +160,16 @@ function parseFile(absPath) {
       const href = m[2].trim();
       // Skip external URLs, mailto, and obvious non-paths (e.g. ellipsis placeholders)
       if (/^(https?:|mailto:|ftp:)/.test(href)) continue;
+      // The hall deep-link resolver in its ROOT-RELATIVE form (task 1003542). The
+      // absolute form is already skipped above as external; linkify-refs.js emits
+      // this one whenever the instance origin is absent or loopback — which is now
+      // the normal case on a core checkout, since writing http://localhost:3000 into
+      // a committed doc is the worse bug. It is an APP ROUTE, not a file path, so
+      // counting it as a stale link is a false positive: 28 of them appeared the
+      // moment the linkifier could see this instance's 7-digit ids.
+      // Deliberately NOT a blanket `^/` skip — a genuinely wrong root-relative file
+      // link should still be reported as rot.
+      if (/^\/builders#/.test(href)) continue;
       if (/^\.{2,}$/.test(href)) continue; // skip ... or .. used as placeholders
       links.push({ href, line: lineNo });
     }

package/scripts/gds/linkify-refs.js

@@ -57,12 +57,45 @@ const path = require('node:path');
 // `https://amazonprimea.com`). When branding is unreadable the base is the
 // root-relative '/builders#/…' — never a hardcoded founder host. Reading branding is
 // a sync file read (no network), safe at module scope for this token-free CI gate.
+// A LOOPBACK origin is treated exactly like an unreadable one — root-relative,
+// never written out (task 1003542; the committed-doc half of task 1002975).
+//
+// The header above promises a per-dev localhost override "must never leak into a
+// committed doc link", and the API_BASE half of that holds. But the BRANDING half
+// did not: config/branding.neutral.json — the neutral core's own default, used by
+// every checkout with no instance branding — sets buildersOrigin to
+// http://localhost:3000. So `--apply` on a core checkout rewrote bare refs into
+// http://localhost:3000/builders#/task/N and committed them.
+//
+// That was survivable only while the gate was blind: it matched \d{1,5} and this
+// instance's ids are 7 digits, so --apply found nothing to rewrite. Widening the
+// width in this task ARMS it — the first honest run wanted to rewrite 33 refs
+// across 10 committed docs, ADRs included. Hence this guard lands with the widening
+// rather than after it.
+//
+// Root-relative is the right fallback, not a guess: it is what the catch below
+// already returns, and it resolves correctly on whatever host actually serves the
+// hall — which is more than a baked absolute origin can promise.
+function isLoopbackOrigin(origin) {
+  try {
+    // URL keeps an IPv6 literal in its brackets ('[::1]'), so strip them before
+    // comparing — a caught-by-its-own-test detail, not a hypothetical.
+    const host = new URL(origin).hostname.replace(/^\[|\]$/g, '');
+    return host === 'localhost' || host === '::1' || host === '0.0.0.0'
+      || host.endsWith('.localhost')
+      || /^127\./.test(host); // the whole 127.0.0.0/8 loopback block, not just .0.1
+  } catch (_) {
+    return false; // not a parseable absolute URL → not a loopback origin
+  }
+}
+
 function resolverHallRoot() {
   try {
     const d = (require('../../src/branding').branding().domains) || {};
     const origin = (typeof d.buildersOrigin === 'string' && d.buildersOrigin.trim())
       || (typeof d.publicOrigin === 'string' && d.publicOrigin.trim())
       || '';
+    if (!origin || isLoopbackOrigin(origin)) return '/builders#';
     return `${String(origin).replace(/\/+$/, '')}/builders#`;
   } catch (_) {
     return '/builders#';
@@ -94,8 +127,24 @@ function discoverDocs() {
     }
   };
   for (const root of ['CLAUDE.md', 'README.md', 'docs']) walk(root);
+  // The skip marker matched only the literal "GENERATED FILE" — and NO generator in
+  // this repo writes that (task 1003542). gen-api-docs.js heads both of its outputs
+  // with "GENERATED by scripts/gds/gen-api-docs.js", so docs/api-reference.md and
+  // docs/routes-permissions.md were being linkified despite the rule above: their
+  // rewrites survive exactly until the next regen, and meanwhile ship-check reports
+  // api-docs STALE. Two gates fighting over one file, each correctly.
+  //
+  // Latent until now for the same reason as the loopback leak: the matcher was too
+  // narrow to rewrite anything, so nothing was ever written into a generated file.
+  // Widening it in this task is what surfaced this.
+  //
+  // NOTE docs/copy-inventory.md heads with "**Generated** by" — bolded, so not
+  // contiguous and still unmatched here. Left alone deliberately: it carries no bare
+  // refs today, and inventing a looser pattern risks skipping a hand-authored doc
+  // that merely mentions being generated. Fix its marker at the generator if it ever
+  // grows one.
   return out.filter((rel) =>
-    !/GENERATED FILE/i.test(fs.readFileSync(path.resolve(process.cwd(), rel), 'utf8').slice(0, 200))
+    !/GENERATED (?:FILE|by)\b/i.test(fs.readFileSync(path.resolve(process.cwd(), rel), 'utf8').slice(0, 200))
   );
 }
 
@@ -131,7 +180,27 @@ const LIST_GLUE_RE = /^[\s,–—-]*(?:and|&|\+|or|to|through)?[\s,–—-]*$/i;
 // '/builders#/…', so the mislink-cleanup path still recognizes a link a PRIOR run
 // committed under a DIFFERENT host — the legacy `amazonprimea.com` links, a
 // co-tenant's, or this instance's own — not only the current RESOLVER_BASE host.
-const RESOLVER_LINK_RE = /\[#(\d{1,5})\]\((?:https?:\/\/[^/)\s]+)?\/builders#\/task\/(\d{1,5})\)/g;
+// How many digits a bare "#NNN" may carry — ONE source of truth, because the
+// width had drifted out of date in five places at once (task 1003542).
+//
+// It was {1,5}, a PRE-IMPORT id width. This instance renumbered imported tasks
+// +1,000,000, so every live id is SEVEN digits — and both enforcement points
+// silently stopped enforcing: `linkify-refs.js --check` (the CI gate) passed
+// trivially on a doc containing a bare #1003365, and .claude/hooks/stop-refcheck.js
+// fast-path-exited before it even fetched the allow-list. A guard that matches
+// nothing reports clean, which is indistinguishable from a guard that works.
+//
+// 7 keeps the property {1,5} was chosen for — not over-matching PR-shaped numbers.
+// GitHub PR numbers on this repo are 3 digits, well inside the old range, so the
+// bound was never what separated them; classifyKind's `PR #NNN` left-context test
+// is, and it is untouched here.
+//
+// Exported as the SOURCE STRING, not a RegExp: a /g/ regex carries lastIndex
+// between calls, so a shared instance would skip matches depending on who scanned
+// last. Each site builds its own.
+const REF_DIGITS = '\\d{1,7}';
+
+const RESOLVER_LINK_RE = new RegExp(`\\[#(${REF_DIGITS})\\]\\((?:https?:\\/\\/[^/)\\s]+)?\\/builders#\\/task\\/(${REF_DIGITS})\\)`, 'g');
 
 // Classify a ref by its left context (+ list-glue carry). Returns one of
 // 'github' | 'idea' | 'blocker' | 'entity' | null (null = candidate task ref).
@@ -194,7 +263,7 @@ function unlinkEntitySegment(segment, leftContext, stats) {
 // {tasks, ideas, blockers} Sets. Returns the transformed segment; mutates `stats`.
 function linkifySegment(segment, ids, leftContext, stats) {
   let out = '';
-  const re = /#(\d{1,5})/g;
+  const re = new RegExp(`#(${REF_DIGITS})`, 'g');
   let m;
   let last = 0;
   let prevEnd = 0;        // index in `segment` just past the previous match
@@ -303,7 +372,7 @@ function upgradeLineCodeSpans(line, ids, stats) {
   let prevEnd = 0;
   let hadPrev = false;
   let prevKind = null; // only 'idea' | 'blocker' carry here
-  const re = /`#(\d{1,5})`/g;
+  const re = new RegExp('`#(' + REF_DIGITS + ')`', 'g');
   let m;
   while ((m = re.exec(line)) !== null) {
     const num = m[1];
@@ -496,4 +565,12 @@ module.exports = {
   linkifyText, linkifySegment, unlinkEntitySegment, upgradeLineCodeSpans,
   classifyKind, normalizeIdSets, discoverDocs,
   RESOLVER_BASE, RESOLVER_BASE_IDEA, RESOLVER_BASE_BLOCKER,
+  // task 1003542: the bare-ref digit width, exported so the OTHER enforcement
+  // point (.claude/hooks/stop-refcheck.js) reads it here instead of keeping its
+  // own copy — the drift that let 7-digit ids past both guards at once.
+  REF_DIGITS,
+  // task 1003542: the loopback test behind the resolver base. Exported because
+  // RESOLVER_BASE is computed once at module load, so the DECISION is the only
+  // part a unit test can reach without re-requiring under a mocked branding.
+  isLoopbackOrigin,
 };