@bongos/core 1.19.87 → 1.19.89

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.87",
-  "core_contract": "1.19.87",
-  "source_commit": "87978cd9aae6450f9a950000264a6ea3290061a9",
+  "core_version": "1.19.89",
+  "core_contract": "1.19.89",
+  "source_commit": "ed4e7542e4437ae70c78dc251b624ee4890a6050",
   "source_ref": "HEAD",
-  "built_at": "2026-08-13T00:58:58.091Z",
+  "built_at": "2026-08-13T01:22:32.002Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
-    "docs_redacted": 296,
+    "docs_redacted": 297,
     "agent_docs_stubbed": 21,
-    "functional_verbatim": 1234,
+    "functional_verbatim": 1235,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 1551,
-  "tree_sha256": "76b44f6926a63b7efc6f1458fa1ddb8be237a801879982bddf6c97628d35762f",
+  "file_count": 1553,
+  "tree_sha256": "9f17eea1b4e64561bd3da49f5fd8494e53ea0ea55d4d860862a1763788507e36",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -1354,10 +1354,15 @@
       "mode": "0000644",
       "sha256": "a86af6a923ed70bb8ea0846266f232f31a5fc9709d286362bcd37104d683342b"
     },
+    {
+      "path": "docs/design/front-door-and-hub-direction.md",
+      "mode": "0000644",
+      "sha256": "e3026e23472629a7d4f1bebe883f9bc84263a849e22eab627f7a5b5ace9dd110"
+    },
     {
       "path": "docs/design/gate-navigation-direction.md",
       "mode": "0000644",
-      "sha256": "b56c2394f695b64c567c581203901036222927f6c8e0d49fffceb2365f01e96b"
+      "sha256": "90bed9a9f3859f7cfc6dd8a0e23e70adeda5854be0b10f8208d60a96c83403b3"
     },
     {
       "path": "docs/design/mocks/component-sheet.html",
@@ -2597,7 +2602,7 @@
     {
       "path": "modules/dev-box/box-access.js",
       "mode": "0000644",
-      "sha256": "8d2dc69a139a5a658866a18527efeb5d9ae989e05883fa6cbd0ea63db0ba9476"
+      "sha256": "9357b423836c4e8d2cd3c9144d294c3cd3b498ac30755a9e6f62b5bbaa2add5e"
     },
     {
       "path": "modules/dev-box/box-credential.js",
@@ -4087,12 +4092,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "b3c0559dd15714741dd52b1493e31d0c58b400f29da9b5af0dd410559e890458"
+      "sha256": "91af9550ea511beb785aeda73ead01cc94c2f10b0e6bfb63a5704190fa12fb3b"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "c7433c4d5b1fc188cc1660b3ed0cffd2f9d669fc5974f072af2b2816324efc09"
+      "sha256": "ad3a6daa031c56fe45c5bc5de6036e8e97621e92888135406ed1c3cf5227f3bb"
     },
     {
       "path": "public-docs/index.html",
@@ -4367,7 +4372,7 @@
     {
       "path": "public-landing/gate/index.html",
       "mode": "0000644",
-      "sha256": "7e9e68da92493b0a728de0a4ff4d1a036d888df6b47267e5a5ac628ac55fcd07"
+      "sha256": "4fabebb37446cb55803332d89909dd25b905ebbff5f3dd7d607d383122095800"
     },
     {
       "path": "public-landing/gate/previews/cloud-bongos.jpg",
@@ -5727,7 +5732,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "3711343a6ac760f4742b14755a1e40722842fce3f29855804a092fdc72da6bb9"
+      "sha256": "2bcad1ce4253a64c908a01fb38cf76a7543fac19a12ff949864de4a08a339861"
     },
     {
       "path": "src/module-loader/loader.js",
@@ -6007,7 +6012,7 @@
     {
       "path": "tests/box_access.mjs",
       "mode": "0000644",
-      "sha256": "06e8afe871803c92b20c28b918e39804a1616ee3b5773517f5ac804118d2de1d"
+      "sha256": "694153e377a78d4325aa4ff9b947f691d71362f843da25815b9740821903802c"
     },
     {
       "path": "tests/box_auth_check.mjs",
@@ -6494,6 +6499,11 @@
       "mode": "0000644",
       "sha256": "df503f198853f6fe3497a2e0317d90bee69cc275f024027ad569ee1cef0155b6"
     },
+    {
+      "path": "tests/gate_launch_metadata.mjs",
+      "mode": "0000644",
+      "sha256": "235dfa1ea341b596ea4981fe8375650150387a60c9093c3a1a7b761222ee259a"
+    },
     {
       "path": "tests/gate_review.mjs",
       "mode": "0000644",

package/docs/design/front-door-and-hub-direction.md

@@ -0,0 +1,155 @@
+# The Front Door and the Project Hub — Direction
+
+> **Task 1002746** (goal 1000059), promoted from idea 1000713 · decided with the owner 2026-08-13.
+> Surfaced by the gate-navigation session (task 1002741) and **revises it** — see §6.
+> Time-sensitive: whichever page answers `/` when the pre-launch lock comes off becomes the
+> product's first impression.
+
+Scope: what `cloudbongos.com/` serves at launch, what happens to the `index.html` placeholder, and
+how the project surfaces are organised. Deliberately **not** in scope: the visual design of any of
+it — the owner plans a whole-site UI pass once the projects work completes, and this direction
+settles structure so that pass inherits a clean shape rather than a decision.
+
+---
+
+## 0. Starting point — what exists today
+
+Verified live on core 1.19.85 and read from `origin/main`.
+
+**Two landing pages, and the wrong one answers the domain.**
+
+| Path | Live | Notes |
+|---|---|---|
+| `/` | **302 → `/gate/` → 401** | the orb sky, behind the pre-launch `basic_auth` |
+| `/index.html` | 200, public | reachable only if you type the filename |
+| `/create`, `/projects` | 200, public | link only to each other |
+
+`public-landing/index.html` declares what it is in its own source: *"a deliberately MINIMAL
+placeholder home — just the mascot + a way into the Hall. The full landing page is a separate
+task."* It is a pre-gate stub, not a competing design.
+
+**The metadata is inverted.** The placeholder nobody reaches has a real product title and a meta
+description. The gate that actually answers `/` shipped with `<title>Cloud Bongos — landing gate</title>`,
+**no** description, **no** `og:`/`twitter:` tags, and **no** `<noscript>` — and the sky is entirely
+JS-built, so a non-executing crawler or a JS-off visitor got a blank page. None of it bit yet only
+because `X-Robots-Tag: noindex, nofollow` covers the whole host pre-launch. All of it bites at once
+when the lock comes off.
+
+**`index.html` is shared, not platform-specific.** It is the default landing every instance serves
+(a child instance like `spike-harbor.cloudbongos.com` has no gate, so it already answers `/` with
+this page). `/projects` is apex-only. That asymmetry constrains what may be hardcoded into it (§4).
+
+---
+
+## 1. Decisions (owner, 2026-08-13)
+
+1. **`/` serves a real landing page** — proper title, meta description, `og:`/social tags, and the
+   rest of the landing information. Not a redirect into an interactive experience.
+2. **`/projects` becomes the project hub.** One surface absorbs *all* project-related actions:
+   viewing the map/grid of projects, managing the signed-in owner's own projects, and creating new
+   ones. `/create` redirects into it. The orb sky stops being a front door and becomes a **view
+   inside the hub**.
+3. **Launch-safety is fixed now; the visual build is deferred** to the whole-site UI pass.
+4. **The pre-launch `basic_auth` is temporary** (carried over from task 1002741 §1).
+
+## 2. The hub model
+
+`/projects` is the single place a person goes for anything project-shaped:
+
+| Inside the hub | Comes from today's |
+|---|---|
+| the map / grid of projects (orb sky + the sortable table) | `/gate/` (`view-space`, `view-table`) |
+| your own projects — status, address, teardown, revive | `/projects` |
+| creating a project | `/create` (redirects in) |
+
+- **No new vocabulary.** The hub keeps the `/projects` URL rather than inventing `/projects-hub`;
+  every existing link and bookmark keeps working, and "projects" already means projects to anyone
+  who has seen the surface. (An underscore form — `/projects_hub` — was considered and rejected:
+  underscores are unconventional in URLs and read poorly in search results.)
+- **The map and the manage list are two views of one truth.** Both must render the verification
+  overlay the task 1002696 direction established (`live · checked Xm ago` / `live?` / `unreachable`).
+  A project cannot look alive on the map and unreachable in the list.
+- **Signed-out visitors get the map** as a showcase, plus a way in. Signed-in owners additionally get
+  their own projects — which is where owner-orbs (§6) land.
+
+## 3. Sequencing — why the flip is NOT in this task
+
+The apex flip is deliberately **not** shipped here, for a reason worth recording:
+
+- `/` today at least reaches the sky, which carries a (weak) corner door to `/projects`. The shared
+  `index.html` has **no** door into the hub at all — its only outbound link is the builders' hall.
+  Flipping `/` to that page before it has doors would leave navigation **worse** than today, not
+  better.
+- The flip also has an **infra half**: `/` is redirected in two places — the app
+  (`src/platform-server.js:115-121`) and the live Caddyfile (`redir / /gate/ 302` inside the `@gate`
+  block, which also carries the `basic_auth`). Changing code alone moves nothing on prod. The Caddy
+  edit is an operator act on the live box tied to launch, not a surface task.
+
+So the flip ships **with** the hub build, once the landing page has doors, and is paired with the
+Caddy change. What ships now is the part that is safe and useful regardless (§4).
+
+## 4. What ships in this task (the launch-safety fix)
+
+Because the gate is what answers `/` **today**, the launch-safety fix is applied to the gate — not to
+a page that does not yet hold the door:
+
+- **`public-landing/gate/index.html`**: a real `<title>`, a meta description, `canonical`,
+  `og:type/site_name/url/title/description/image`, and `twitter:` card tags. Absolute
+  `cloudbongos.com` URLs, matching the domain `space.js` already pins.
+- **A `<noscript>` block** stating plainly what Cloud Bongos is and linking to `/projects`,
+  `/create`, and the hall. Inline-styled, because every rule in `space.css` is scoped to a body
+  view-class this block must ignore. **No visual change for a JS visitor** — it renders only when
+  scripting is off.
+
+**Explicitly not done, and why:** `og:` tags were *not* added to `public-landing/index.html`. It ships
+to every instance, and social tags are read before JS runs — so its `window.__BRANDING__` fill cannot
+populate them, and hardcoding `cloudbongos.com` would make every child instance advertise the wrong
+site. Per-instance social tags need server-side injection; filed as **idea 1000715** rather than
+hacked in here.
+
+## 5. Findings surfaced while deciding this
+
+- **`tests/platform_boot.mjs` is parked in `KNOWN_FAILING` and has rotted.** Its apex test asserts
+  `/` returns 200 with the landing page; the gate redirect (task 1002408) made it 302, and the test
+  was never updated. It sits in `run-unit-tests.js`'s `KNOWN_FAILING` set (parked by task 1002617 so
+  the `unit` check could be made required), which is why CI is green. A `known_failing_ratchet.mjs`
+  pairs with it and fails the suite if a parked test starts passing — so **the hub flip must unpark
+  this test in the same change that makes it pass**. Filed as **idea 1000716**.
+  - Note the test also asserts an identity chip (`id="who"`, task 2094) that `index.html` does not
+    contain — a second, independent rot in the same file.
+- The assertion the repo already carries (`/` → 200, the landing page) is exactly the behaviour this
+  direction decides. The test was right; the code drifted past it.
+
+## 6. Revision of the gate-navigation direction (task 1002741)
+
+That direction was written hours earlier on the premise that **the gate is the front door**. This
+direction supersedes that premise. What survives and what changes:
+
+| Decision there | Status now |
+|---|---|
+| The `basic_auth` wall is temporary | **stands** |
+| The type-`bongos` entry ritual is removed; land on the sky | **stands** — the sky is now a hub view, and the ritual should not gate a view any more than it should gate a front door |
+| A persistent door in every gate view | **becomes hub navigation** — the same requirement, relocated: the door is now the hub's own nav between map / your projects / create, not a link out of the gate |
+| A signed-in owner's projects get a distinct identity in the sky | **stands** — and lands inside the hub's map view |
+| The sky is the public front door | **superseded** — `/` is the landing page; the sky is a view of `/projects` |
+
+Both carriers are re-scoped accordingly: **task 1002743** (ritual removal + hub navigation, plus the
+apex flip and unparking `platform_boot`) and **task 1002744** (owner-scoped feed + owned-orb identity
+inside the hub map).
+
+## 7. Boundary with the coming UI pass
+
+This direction settles **structure**: which URL serves what, what the hub contains, and what
+redirects where. It settles **no** visual design — not the landing page's layout, not the hub's
+chrome, not how the map and list views sit together. Those belong to the whole-site UI pass the owner
+plans after the projects work completes, and that pass should be able to take this structure as given
+and change only how it looks.
+
+## 8. Sign-off dispositions (owner, 2026-08-13)
+
+1. **`/` = a real landing page**; the map/project list is a separate surface.
+2. **That surface is `/projects`**, absorbing map, manage, and create — chosen over a new
+   `/projects-hub` URL so no vocabulary or bookmarks are lost.
+3. **Amend task 1002741's direction and re-scope its two carriers** rather than letting them ship
+   against a premise that changed (§6).
+4. **Decide + do the launch-safety fix now** — hence §4, and hence the flip deferred to §3.

package/docs/design/gate-navigation-direction.md

@@ -1,5 +1,22 @@
 # Gate Navigation — Direction
 
+> ## ⚠ REVISED the same day — read this first
+>
+> This document's central premise — **the gate is the front door** — was **superseded within hours**
+> by [`front-door-and-hub-direction.md`](front-door-and-hub-direction.md) (task 1002746, owner,
+> 2026-08-13). Under that decision `/` serves a real landing page, and **`/projects` becomes a project
+> hub** that absorbs the map/grid, managing your projects, and creating them. The orb sky is no longer
+> a front door — it is a **view inside the hub**.
+>
+> **What still stands:** the temporary `basic_auth` wall, removing the type-`bongos` entry ritual, the
+> requirement for persistent navigation, and owner-orbs. **What changed:** those land inside the hub
+> rather than on a standalone gate, and the "door out to `/projects`" becomes the hub's own internal
+> navigation. The full disposition is in that document's §6.
+>
+> Everything below is preserved as the **evidence base** — the live navigation trace, the five-view
+> map, the sign-in-awareness findings, and the shipped-door analysis are all still accurate and still
+> load-bearing for the build. Only the framing changed.
+
 > **Task 1002741** (goal 1000059 "Projects surface revamp") · direction decided with the owner 2026-08-13.
 > Owner finding, 2026-08-12, minutes after the task 1002696 redesign went live: *"cloudbongos.com/gate
 > is the landing page and there's no way to get there from the landing page."*

package/modules/dev-box/box-access.js

@@ -151,6 +151,13 @@ const BASE_SPARSE_PATHS = [
   // so a box holding the module source but not tests/ cannot verify a change.
   // A cone-mode directory; it carries no product runtime, only test code.
   'tests',
+  // clients/ — the generated bongos-client (ADR 0118) that cli-lib.js hard-imports
+  // since task 1996 made it the CLI's one HTTP client. Without it EVERY /builder-*
+  // command on the box dies at import, and the builder cannot self-heal: the
+  // workspace is a token-less blob:none clone (sparse-checkout add can't fetch)
+  // and box-source-fetch re-applies this server-computed list every tick
+  // (task 1002745). Generated ESM only, no product runtime.
+  'clients',
 ];
 
 // sparsePathsForScopeKeys — PURE. Given the module KEYS a builder's active claims

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.87",
+  "version": "1.19.89",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.87",
+      "version": "1.19.89",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.87",
+  "version": "1.19.89",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/public-landing/gate/index.html

@@ -3,7 +3,26 @@
 <head>
 <meta charset="utf-8" />
 <meta name="viewport" content="width=device-width, initial-scale=1" />
-<title>Cloud Bongos — landing gate</title>
+<title>Cloud Bongos — building software is laying down a beat</title>
+<!-- Launch-safety metadata (task 1002746). Until the front door moves to the
+     landing page (see docs/design/front-door-and-hub-direction.md), THIS page is
+     what answers cloudbongos.com/ — so it is what search results and link
+     previews describe. It shipped with an internal-sounding title, no
+     description, and no social tags; the whole host is noindex today, so none of
+     it bit yet, but all of it bites the moment the pre-launch lock comes off.
+     The absolute cloudbongos.com URLs match the domain space.js already pins. -->
+<meta name="description" content="An open-source, AI-first build platform. AI agents claim tasks and write the code; you set the scope and the gates. Explore the live projects, or start your own." />
+<link rel="canonical" href="https://cloudbongos.com/" />
+<meta property="og:type" content="website" />
+<meta property="og:site_name" content="Cloud Bongos" />
+<meta property="og:url" content="https://cloudbongos.com/" />
+<meta property="og:title" content="Cloud Bongos — building software is laying down a beat" />
+<meta property="og:description" content="An open-source, AI-first build platform. AI agents claim tasks and write the code; you set the scope and the gates." />
+<meta property="og:image" content="https://cloudbongos.com/buddha.png" />
+<meta name="twitter:card" content="summary_large_image" />
+<meta name="twitter:title" content="Cloud Bongos — building software is laying down a beat" />
+<meta name="twitter:description" content="An open-source, AI-first build platform. AI agents claim tasks and write the code; you set the scope and the gates." />
+<meta name="twitter:image" content="https://cloudbongos.com/buddha.png" />
 <link href="https://fonts.googleapis.com/css2?family=Baloo+2:wght@600;700&family=Fira+Code:wght@400;500&display=swap" rel="stylesheet" />
 <link rel="stylesheet" href="space.css" />
 <!-- Anti-flash (task 1985 follow-up): on a direct-orbs load — a vanity door
@@ -139,6 +158,29 @@
 </style>
 </head>
 <body class="view-entry">
+  <!-- No-JS fallback (task 1002746). The sky is entirely JS-built: without it this
+       page rendered blank, so a non-executing crawler or a JS-off visitor saw
+       nothing at all on the domain's front door. Inline styles because every
+       stylesheet rule here is scoped to a body view-class this block must ignore.
+       Keep the copy in sync with the meta description above. -->
+  <noscript>
+    <div style="position:fixed;inset:0;z-index:9999;overflow:auto;background:#0b1020;color:#e9edf7;font-family:'Baloo 2',system-ui,sans-serif;padding:2rem;">
+      <div style="max-width:34rem;margin:12vh auto 0;">
+        <h1 style="font-size:1.9rem;line-height:1.2;margin:0 0 .75rem;">Cloud&nbsp;Bongos</h1>
+        <p style="font-size:1.05rem;line-height:1.6;margin:0 0 1rem;color:#c3cbe0;">
+          An open-source, AI-first build platform. AI agents claim tasks and write the
+          code; you set the scope and the gates.
+        </p>
+        <p style="font-size:1.05rem;line-height:1.6;margin:0 0 1.5rem;color:#c3cbe0;">
+          The interactive map of live projects needs JavaScript, but everything below
+          works without it.
+        </p>
+        <p style="margin:0 0 .6rem;"><a href="/projects" style="color:#ffd98a;">Your projects</a> — find and manage the projects you own.</p>
+        <p style="margin:0 0 .6rem;"><a href="/create" style="color:#ffd98a;">Start a project</a> — stand up a new one.</p>
+        <p style="margin:0;"><a href="https://builders.cloudbongos.com" style="color:#ffd98a;">Builders' Hall</a> — where the work happens.</p>
+      </div>
+    </div>
+  </noscript>
   <!-- ═══ dive cinematic (task 1729): clicking the Cloud Bongos orb flies you
        from the space constellation, down through the clouds, into the Cloud
        Bongos world (the download page). space.js plays #descent on the self-orb

package/src/module-api.js

@@ -601,8 +601,12 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 //         landed since 1.19.85 with no explicit bump. run 31655210981. (task 1002620)
 //   1.19.87 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
 //         landed since 1.19.86 with no explicit bump. run 31656188572. (task 1002620)
+//   1.19.88 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.87 with no explicit bump. run 31656577595. (task 1002620)
+//   1.19.89 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.88 with no explicit bump. run 31657467485. (task 1002620)
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.87'; // CI auto-patch carrier (ADR 0161); see changelog above
+const CORE_VERSION = '1.19.89'; // CI auto-patch carrier (ADR 0161); see changelog above
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/box_access.mjs

@@ -194,7 +194,9 @@ const BASE = access.BASE_SPARSE_PATHS;
 console.log('\nBASE_SPARSE_PATHS — the non-product base a task-scoped box layers on:');
 
 t('BASE carries the methodology + tooling, NOT the product/game', () => {
-  for (const p of ['.devcontainer', '.claude', 'scripts', 'src/bongos', 'docs', 'infra', 'tests']) {
+  // clients/ is load-bearing: cli-lib.js hard-imports clients/bongos-client, so a
+  // cone without it has a fully dead builder CLI on the box (task 1002745).
+  for (const p of ['.devcontainer', '.claude', 'scripts', 'src/bongos', 'docs', 'infra', 'tests', 'clients']) {
     assert.ok(BASE.includes(p), `BASE must include ${p}`);
   }
   for (const p of ['src/world', 'src/rooms', 'public', 'art', 'modules/status-ui']) {

package/tests/gate_launch_metadata.mjs

@@ -0,0 +1,67 @@
+// tests/gate_launch_metadata.mjs — the landing gate is discoverable and degrades
+// without JavaScript (task 1002746).
+//
+// WHY THIS EXISTS. Until the front door moves to the landing page
+// (docs/design/front-door-and-hub-direction.md), public-landing/gate/index.html is
+// what answers cloudbongos.com/ — so it is what search results and link previews
+// describe, and what a JS-off visitor or a non-executing crawler receives. It
+// shipped with an internal-sounding <title>, no description, no social tags, and
+// no <noscript>, and the sky is entirely JS-built, so that visitor got a blank
+// page. The whole host is noindex pre-launch, which is exactly why the gap went
+// unnoticed — it costs nothing until the lock comes off, then it costs everything
+// at once.
+//
+// Pure disk read: no server boot, no DB, no network — this asserts the shipped
+// artifact, which is the thing that actually reaches a crawler.
+
+import assert from 'node:assert/strict';
+import { test } from 'node:test';
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const REPO_ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
+const GATE = path.join(REPO_ROOT, 'public-landing', 'gate', 'index.html');
+const html = fs.readFileSync(GATE, 'utf8');
+
+test('the gate carries a real product title, not an internal label', () => {
+  const title = (html.match(/<title>([^<]*)<\/title>/) || [])[1] || '';
+  assert.ok(title.trim().length > 0, 'the gate must have a <title>');
+  // "Cloud Bongos — landing gate" described the file to us, not the product to a
+  // stranger reading a search result.
+  assert.doesNotMatch(title, /landing gate/i, `<title> must not read as an internal label: ${title}`);
+  assert.match(title, /Cloud Bongos/);
+});
+
+test('the gate is describable by a crawler and a link preview', () => {
+  assert.match(html, /<meta\s+name="description"\s+content="[^"]{40,}"/, 'needs a meta description');
+  assert.match(html, /<link\s+rel="canonical"\s+href="https:\/\/cloudbongos\.com\/"/);
+  for (const prop of ['og:type', 'og:site_name', 'og:url', 'og:title', 'og:description', 'og:image']) {
+    assert.match(html, new RegExp(`property="${prop}"`), `missing ${prop}`);
+  }
+  for (const name of ['twitter:card', 'twitter:title', 'twitter:description', 'twitter:image']) {
+    assert.match(html, new RegExp(`name="${name}"`), `missing ${name}`);
+  }
+});
+
+test('the gate degrades to real content without JavaScript', () => {
+  const block = (html.match(/<noscript>([\s\S]*?)<\/noscript>/) || [])[1];
+  assert.ok(block, 'the JS-built sky must ship a <noscript> fallback');
+  // It has to SAY something, not just exist — a stranger with JS off should learn
+  // what this is and be able to leave through a real door.
+  assert.match(block, /Cloud&nbsp;Bongos|Cloud Bongos/);
+  assert.match(block, /href="\/projects"/, 'the fallback must reach the projects surface');
+  assert.match(block, /href="\/create"/, 'the fallback must reach project creation');
+  // Every rule in space.css is scoped to a body view-class the fallback must
+  // ignore, so its visibility cannot depend on the stylesheet.
+  assert.match(block, /style="/, 'the fallback must be inline-styled to survive the view-class CSS');
+});
+
+test('the gate still boots into a view class (the ritual removal has not landed yet)', () => {
+  // Guards the file's structural contract while task 1002743 is outstanding: the
+  // body carries a view class, and <head> closes before <body> opens. If the
+  // ritual removal lands, the expected class becomes view-space — update this
+  // assertion there rather than deleting it.
+  assert.match(html, /<body class="view-(entry|space)"/);
+  assert.ok(html.indexOf('</head>') < html.indexOf('<body class='), 'head must close before body opens');
+});