@bongos/core 1.19.837 → 1.19.839

package/modules/discord/module.json

@@ -11,7 +11,7 @@
     "pollers": ["discord-bot"],
     "uiSections": []
   },
-  "provides": ["discord.isLinked"],
+  "provides": ["discord.isLinked", "discord.post", "discord.hasChannel"],
   "consumes": ["ideas.capture", "government", "lifecycle"],
   "dependencies": { "discord.js": "^14.26.4" }
 }

package/modules/discord/routes/discord.js

@@ -22,6 +22,7 @@ const db = require('../db');
 const shipBroadcast = require('../ship-broadcast');
 const boardBroadcast = require('../board-broadcast');
 const roleSync = require('../discord-role-sync');
+const webhook = require('../webhook');
 
 // The module's kernel seams, registered when this factory runs (the loader runs
 // it at boot, already gated to enabled instances — ADR 0083 / BV1.R47). They are
@@ -60,6 +61,30 @@ function registerSeams() {
       return { guildId, roleIds: roleId ? [roleId] : [] };
     });
   }
+  // `discord.post` — the GENERIC outbound line (task 1002494). Until now every
+  // post this module makes was driven by a listener on an event it already knew
+  // about, so a module with something to say and no event of its own — the
+  // agents event-router, whose findings declare a `discord` sink — had nothing
+  // to deliver to, and could not require a sibling module to get one (ADR 0083).
+  //
+  // THE CALLER NAMES A CHANNEL KEY, NEVER A URL. `webhook.js` owns the
+  // key→webhook allowlist and throws on an unknown key, so this port cannot be
+  // used to post anywhere the operator has not configured — and `hasWebhook`
+  // lets a caller check that BEFORE doing expensive work it would then throw
+  // away. Still outbound only (ADR 0033 §8): nothing here reads from Discord,
+  // and nothing posted through it carries authority.
+  if (!api.hasProvider('discord.post')) {
+    api.registerProvider('discord.post', async ({ channel, text } = {}) => {
+      if (!webhook.hasWebhook(channel)) {
+        return { posted: false, reason: 'no_webhook_for_channel', channel: channel || null };
+      }
+      await webhook.postWebhook(channel, String(text == null ? '' : text));
+      return { posted: true, channel };
+    });
+  }
+  if (!api.hasProvider('discord.hasChannel')) {
+    api.registerProvider('discord.hasChannel', (channel) => webhook.hasWebhook(channel));
+  }
   if (_shipListenerOff) _shipListenerOff();
   _shipListenerOff = api.on('task.shipped', (task) => shipBroadcast.postShipBroadcast(task));
   if (_strandListenerOff) _strandListenerOff();

package/modules/status-ui/public/index.html

@@ -352,7 +352,8 @@
     <svg><use href="#orn-diamond"/></svg>
   </div>
   <p class="foot__seal">By order of the Senate</p>
-  <p>{{worldName}} is the work of <a href="https://hermeslines.com" target="_blank" rel="noopener"><strong>Hermeslines</strong></a>, a third-party logistics house in Cleveland, Ohio.</p>
+  <!-- task 1002853: every company field is optional, so each clause drops whole when its pack field is empty -->
+  <!--brand-if:companyName--><p>{{worldName}} is the work of <!--brand-if:companySite--><a href="{{companySite}}" target="_blank" rel="noopener"><!--/brand-if:companySite--><strong>{{companyName}}</strong><!--brand-if:companySite--></a><!--/brand-if:companySite--><!--brand-if:companyTagline-->, {{companyTagline}}<!--/brand-if:companyTagline-->.</p><!--/brand-if:companyName-->
   <p>{{Currency}} are wrought by the lawmen's review; redemption awaits their seal.</p>
 </footer>
 

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.837",
+  "version": "1.19.839",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.837",
+      "version": "1.19.839",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.837",
+  "version": "1.19.839",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/scripts/gds/fitness-checks-identity.js

@@ -41,6 +41,9 @@ const { CORE_ROOT, MODULE_ROOTS, REPO_ROOT, rel } = require('./fitness-lib.js');
 const PROMPT_IDENTITY_LITERALS = [
   /off the boats/i,
   /amazonprimea/i,
+  // The host's operating company (task 1002853): the scan already covered the status
+  // page's HTML, but with only the product listed its footer credited this company for years.
+  /hermeslines/i,
 ];
 // Scan roots (recursive) + kernel-prompt CLIs that live outside them.
 // scripts/gds joined at task 1002427: the builder CLI was UNSCANNED, which is how
@@ -101,7 +104,7 @@ const IDENTITY_SCAN_EXTRA_FILES = [];
 const IDENTITY_SCAN_ALLOWED = {
   // task 1003206 moved Check 13's own regexes out of fitness.js into THIS file
   // when the monolith was split, so the detector's self-carve-out moved with them.
-  'scripts/gds/fitness-checks-identity.js': 2,
+  'scripts/gds/fitness-checks-identity.js': 3,
   'scripts/gds/package-core.js': 1,
   // audit-replay.sh + db-backup-{nightly,offsite}.sh were carved out here as
   // "host-pinned ops"; task 1002757 RETIRED that justification for them — each
@@ -125,6 +128,11 @@ const IDENTITY_SCAN_ALLOWED = {
   'scripts/gds/seed-productization-tasks.js': 6,
   'scripts/gds/seed-provisioning-tasks.js': 2,
   'scripts/gds/version-close.js': 1,
+  // task 1002853 (the company literal joined the list): audit-authorship.sh is itself a
+  // detector — its ops allowlist names the founder's commit address so it can exempt it; grade-smoke.js
+  // is a protected grader probe whose fixture task prose names the company, the seed-*.js rationale.
+  'scripts/gds/audit-authorship.sh': 1,
+  'scripts/gds/grade-smoke.js': 1,
 };
 // `.sh` joined at task 1002567: the extension set was `.js/.html/.css`, so NO shell
 // script had ever been scanned — which is how scripts/gds/lib.sh kept a hardcoded

package/scripts/gds/fitness.js

@@ -113,6 +113,12 @@ const ROOT_CHAR_HARD_MAX = 42000; // ~10.5K tokens — the always-loaded file mu
 const ROOT_CHAR_TARGET = 32000;   // ~8K tokens — aspirational, mirrors the ~200-line aim.
 const estTokens = (n) => Math.round(n / 4); // ~4 chars/token for markdown prose.
 
+// Where the charter BODY lives since task 1003687. It is guidance for EDITING a
+// CLAUDE.md, so it is paths-scoped (`paths:` frontmatter, same mechanism as
+// .claude/rules/hook-authoring.md) and costs nothing in the sessions — the large
+// majority — that never open one. The kernel keeps the heading and a pointer.
+const CHARTER_RULE_REL = '.claude/rules/claudemd-authoring.md';
+
 function checkClaudeMdBudget(opts = {}) {
   const p = path.join(INSTANCE_ROOT, 'CLAUDE.md'); // the root CLAUDE.md is INSTANCE content (materialized per instance; ADR 0108)
   const text = opts.text != null ? opts.text : fs.readFileSync(p, 'utf8');
@@ -133,8 +139,35 @@ function checkClaudeMdBudget(opts = {}) {
   }
   if (!text.includes('## Working with this file (content charter)')) {
     violations.push('CLAUDE.md is missing the content-charter section (ADR 0061) — the per-line test + "what goes where" table must stay.');
+  } else {
+    // Task 1003687 relocated the charter BODY to a paths-scoped rule, so the kernel
+    // keeps the heading and a pointer. That makes the heading cheap to fake: a section
+    // with nothing behind it satisfies a substring check while the rules it names are
+    // gone. So the charter must resolve to something — either inline here, or through a
+    // pointer whose target actually exists and still carries the two rules + the table.
+    const namesRule = text.includes(CHARTER_RULE_REL);
+    const inlineCharter = text.includes('Per-line test:');
+    if (namesRule) {
+      const rulePath = path.join(INSTANCE_ROOT, CHARTER_RULE_REL); // .claude/ is materialized INSTANCE content (ADR 0108 §3)
+      if (!fs.existsSync(rulePath)) {
+        violations.push(`CLAUDE.md points its content charter at ${CHARTER_RULE_REL}, but that file does not exist — a pointer to nothing is worse than no pointer (ADR 0061 / task 1003687).`);
+      } else {
+        const rule = fs.readFileSync(rulePath, 'utf8');
+        const missing = [];
+        if (!/^---\r?\n[\s\S]*?\bpaths:[\s\S]*?["']\*\*\/CLAUDE\.md["'][\s\S]*?^---$/m.test(rule)) {
+          missing.push('`paths:` frontmatter matching `**/CLAUDE.md` (without it the rule never loads, and the charter is simply gone)');
+        }
+        if (!rule.includes('Per-line test:')) missing.push('the per-line test');
+        if (!rule.includes('## What goes where')) missing.push('the "what goes where" table');
+        if (missing.length) {
+          violations.push(`${CHARTER_RULE_REL} is missing ${missing.join(', ')} — the kernel delegates the charter to it, so the charter is only as real as that file (ADR 0061 / task 1003687).`);
+        }
+      }
+    } else if (!inlineCharter) {
+      violations.push('The CLAUDE.md content-charter section is hollow — it has the heading but neither the per-line test inline nor a pointer to `' + CHARTER_RULE_REL + '`. The heading exists to make the rules findable; on its own it only satisfies this check (ADR 0061).');
+    }
   }
-  return { name: 'root CLAUDE.md budget + charter', ok: violations.length === 0, hardFail: violations.length > 0, violations, warnings, note: `≤ ${ROOT_HARD_MAX} lines / ${ROOT_CHAR_HARD_MAX} chars (~${estTokens(ROOT_CHAR_HARD_MAX)} tok); targets ~${ROOT_TARGET} lines / ~${estTokens(ROOT_CHAR_TARGET)} tok; charter present.` };
+  return { name: 'root CLAUDE.md budget + charter', ok: violations.length === 0, hardFail: violations.length > 0, violations, warnings, note: `≤ ${ROOT_HARD_MAX} lines / ${ROOT_CHAR_HARD_MAX} chars (~${estTokens(ROOT_CHAR_HARD_MAX)} tok); targets ~${ROOT_TARGET} lines / ~${estTokens(ROOT_CHAR_TARGET)} tok; charter resolves (inline or via ${CHARTER_RULE_REL}).` };
 }
 
 // ============================================================================

package/scripts/gds/plain-cards.js

@@ -333,6 +333,8 @@ function cardFor(code) {
 // AGENT SURFACE ONLY: a card is written in the agent's voice ("I will…") for a
 // session to relay. A person running the `bongos` CLI reads the text above it directly,
 // and several cards name slash commands that do not exist there (tests/cli_surface.mjs).
+// The labels below are READ BACK by .claude/hooks/stuck-detector.js as its failure
+// signature (task 1003990); tests/stuck_detector.mjs reds if they drift.
 function plainCardLines(code, env = process.env) {
   const c = isTerminal(env) ? null : cardFor(code);
   if (!c) return [];

package/scripts/status-mirror-sync.js

@@ -48,7 +48,7 @@ const { execFileSync } = require('node:child_process');
 
 const REPO_ROOT = path.resolve(__dirname, '..');
 const SRC = path.join(REPO_ROOT, 'modules', 'status-ui', 'public');
-const { branding, clientBranding } = require('../src/branding');
+const { branding, clientBranding, applyBrandConditionals } = require('../src/branding');
 
 // Stamp instance-identity tokens into the mirror HTML. The off-box mirror is
 // served by a static Pages host, NOT the branding-injecting Node server — so this
@@ -63,15 +63,19 @@ function brandTokens(html, brand = {}, publicOrigin = '', buildersOrigin = '') {
   const tagline = (brand.copy && brand.copy.tagline) || '';
   const cur = (brand.currency && brand.currency.label) || 'credits';
   const Cur = cur ? cur.charAt(0).toUpperCase() + cur.slice(1) : cur;
+  const company = (brand.identity && brand.identity.company) || {};
   const esc = (s) => String(s == null ? '' : s)
     .replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;')
     .replace(/"/g, '&quot;').replace(/'/g, '&#39;');
-  return html
+  return applyBrandConditionals(html, { companyName: company.name, companySite: company.site, companyTagline: company.tagline })
     .split('{{worldName}}').join(esc(world))
     .split('{{productName}}').join(esc(product))
     .split('{{Currency}}').join(esc(Cur))
     .split('{{currency}}').join(esc(cur))
     .split('{{tagline}}').join(esc(tagline))
+    .split('{{companyName}}').join(esc(company.name))
+    .split('{{companySite}}').join(esc(company.site))
+    .split('{{companyTagline}}').join(esc(company.tagline))
     .split('{{publicOrigin}}').join(esc(publicOrigin || ''))
     .split('{{buildersOrigin}}').join(esc(buildersOrigin || publicOrigin || ''));
 }

package/src/bongos/serve-internal.js

@@ -46,7 +46,7 @@ const { buildStampedHtml } = require('../asset-version');
 const { buildInfo } = require('../build-info');
 const { buildDevboxDownloads } = require('../devbox-downloads');
 const { buildBongosDownloads } = require('../bongos-downloads');
-const { clientBranding, branding } = require('../branding');
+const { clientBranding, branding, applyBrandConditionals } = require('../branding');
 const { prelaunchGate } = require('./prelaunch-gate');
 const { platformVisibilityGate } = require('./platform-visibility-gate');
 const { clientModules, isModuleEnabled } = require('../modules');
@@ -205,6 +205,8 @@ function injectBrandingGlobal(html, brand = clientBranding(), mods = clientModul
 // served page can carry a correct cross-host href or canonical/og: URL: a client
 // fill cannot reach them, and a baked one would make every instance advertise
 // whichever instance happened to author the file (task 1002748, direction C5/C6).
+// {{companyName}} {{companySite}} {{companyTagline}} are optional, so a page wraps
+// each clause in a brand-if region that drops whole when its field is empty (task 1002853).
 // Pure + exported for the test; both origins are injectable so it drives with zero I/O.
 function applyBrandTokens(html, brand = clientBranding(), origin = safePublicOrigin(), hallOrigin = safeBuildersOrigin(), sourceRepo = safeSourceRepoUrl(), instanceBase = safeInstanceBase(), hubOrigin = safeHubOrigin()) {
   const world = (brand.identity && brand.identity.worldName) || '';
@@ -213,12 +215,17 @@ function applyBrandTokens(html, brand = clientBranding(), origin = safePublicOri
   const cur = (brand.currency && brand.currency.label) || 'credits';
   const Cur = cur ? cur.charAt(0).toUpperCase() + cur.slice(1) : cur;
   const hall = hallOrigin || origin || '';
-  return dropEmptyHrefLinks(String(html == null ? '' : html), { publicOrigin: origin || '', buildersOrigin: hall, sourceRepoUrl: sourceRepo || '' })
+  const company = (brand.identity && brand.identity.company) || {};
+  const conditioned = applyBrandConditionals(html == null ? '' : html, { companyName: company.name, companySite: company.site, companyTagline: company.tagline });
+  return dropEmptyHrefLinks(conditioned, { publicOrigin: origin || '', buildersOrigin: hall, sourceRepoUrl: sourceRepo || '' })
     .split('{{worldName}}').join(esc(world))
     .split('{{productName}}').join(esc(product))
     .split('{{Currency}}').join(esc(Cur))
     .split('{{currency}}').join(esc(cur))
     .split('{{tagline}}').join(esc(tagline))
+    .split('{{companyName}}').join(esc(company.name))
+    .split('{{companySite}}').join(esc(company.site))
+    .split('{{companyTagline}}').join(esc(company.tagline))
     .split('{{publicOrigin}}').join(esc(origin || ''))
     // a pack that names no hall of its own resolves to its OWN apex — never to
     // whichever instance authored the file

package/src/branding.js

@@ -221,7 +221,11 @@ function clientBranding(b = branding()) {
     identity: {
       productName: b.identity?.productName || '',
       worldName: b.identity?.worldName || '',
-      company: { name: b.identity?.company?.name || '' },
+      company: {
+        name: b.identity?.company?.name || '',
+        site: b.identity?.company?.site || '',
+        tagline: b.identity?.company?.tagline || '',
+      },
     },
     currency: {
       label: b.currency?.label || 'credits',
@@ -308,4 +312,20 @@ function clientReward() {
   }
 }
 
-module.exports = { resolveBranding, loadBranding, deepMerge, branding, clientBranding, userAgent, NEUTRAL_PATH, INSTANCE_PATH };
+// Resolve the `<!--brand-if:KEY-->…<!--/brand-if:KEY-->` regions of a served page:
+// kept (markers removed) when `values[KEY]` is non-empty, dropped whole otherwise,
+// so an optional pack field removes its entire clause instead of rendering half a
+// sentence (task 1002853). Lives here, not in serve-internal, because the off-box
+// status mirror stamps the same page without loading the server. Repeats until
+// stable so a region nested inside a kept one resolves too.
+const BRAND_IF_REGION = /<!--brand-if:(\w+)-->([\s\S]*?)<!--\/brand-if:\1-->/g;
+function applyBrandConditionals(html, values) {
+  let out = String(html);
+  for (let prev; prev !== out;) {
+    prev = out;
+    out = out.replace(BRAND_IF_REGION, (_, key, inner) => (values[key] ? inner : ''));
+  }
+  return out;
+}
+
+module.exports = { resolveBranding, loadBranding, deepMerge, branding, clientBranding, userAgent, applyBrandConditionals, NEUTRAL_PATH, INSTANCE_PATH };

package/src/module-api.js

@@ -71,7 +71,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.837'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.839'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');