@bongos/core 1.19.870 → 1.19.872

package/tests/hall_roster_world.mjs

@@ -231,7 +231,8 @@ test('the directory has a search, a sort and a craft lens on the kit bar, and pa
   assert.match(src, /kit\.makeFilterBar\(\{/);
   assert.match(src, /search: \{ id: 'people-q'/);
   assert.match(src, /\{ id: 'people-sort', label: 'Sort'/);
-  assert.match(src, /\{ id: 'people-craft', label: 'Craft'/);
+  // task 1003936: the axis label is read from OTB.roleAxisLabel(), never typed.
+  assert.match(src, /\{ id: 'people-craft', label: window\.OTB\.roleAxisLabel\(\)/);
   assert.match(src, /kit\.makePager\('people'/);
   assert.match(src, /kit\.makeLedger\(\{/);
   assert.doesNotMatch(src, /createElement\('table'\)/, 'no hand-built table');

package/tests/hall_studio_world.mjs

@@ -259,6 +259,13 @@ async function bootStudio({ reviews = [], shipped = {}, rank = 'metic', flags =
   const window = {
     BongosClient: { createClient: () => ({ request }) },
     OTB: {
+      // task 1003936 — the role axis vocabulary (dom-utils OTB.role*). PRESENT for
+      // the same reason categoryChip is: an undefined helper throws mid-render.
+      roleAxisLabel: () => 'Role',
+      roleLabel: (d) => (!d ? '' : d === 'unclassified' ? 'No role yet' : d === 'ui' ? 'UI' : d.charAt(0).toUpperCase() + d.slice(1)),
+      roleOptions: () => [{ value: '', label: '— any —' }, { value: 'engineer', label: 'Engineer' }, { value: 'artist', label: 'Artist' }],
+      roleIsUnset: (d) => !d || d === 'unclassified',
+      ROLE_UNSET: 'unclassified',
       escapeHtml: (s) => String(s ?? '').replace(/[&<>"']/g, (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' }[c])),
       $: (sel) => el(String(sel).replace(/^#/, '')),
       toast: () => {},

package/tests/hook_shell_tools.mjs

@@ -26,7 +26,7 @@ import { fileURLToPath } from 'node:url';
 
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
 const require = createRequire(import.meta.url);
-const { SHELL_TOOLS, MATCHER, isShellTool } = require(
+const { SHELL_TOOLS, MATCHER, isShellTool, escapesWithBacktick } = require(
   path.join(ROOT, '.claude', 'hooks', 'shell-tools.js'),
 );
 
@@ -113,3 +113,25 @@ test('isShellTool admits every listed tool and nothing else, and never throws',
     assert.equal(isShellTool(junk), false);
   }
 });
+
+// task 1004028 — the shells differ, and a guard that reads a command literally reads
+// the wrong thing on the one whose escape character vanishes before its parser.
+test('escapesWithBacktick names PowerShell and not Bash, and never throws', () => {
+  assert.equal(escapesWithBacktick('PowerShell'), true);
+  assert.equal(escapesWithBacktick('Bash'), false, 'a backtick opens a command substitution in Bash');
+  for (const other of ['powershell', 'Write', '']) assert.equal(escapesWithBacktick(other), false, other);
+  for (const junk of [undefined, null, 0, {}, []]) assert.equal(escapesWithBacktick(junk), false);
+});
+
+// A tool whose escape rules a guard normalizes must be a tool a guard is reached on
+// at all — otherwise the entry is inert and reads as coverage that does not exist.
+test('every backtick-escaping tool is itself a shell tool', () => {
+  for (const tool of SHELL_TOOLS.filter((t) => escapesWithBacktick(t))) assert.ok(isShellTool(tool));
+  const src = fs.readFileSync(path.join(ROOT, '.claude', 'hooks', 'shell-tools.js'), 'utf8');
+  const listed = (src.match(/const BACKTICK_ESCAPE_TOOLS = \[([^\]]*)\]/) || [, ''])[1]
+    .split(',').map((s) => s.trim().replace(/^['"]|['"]$/g, '')).filter(Boolean);
+  assert.ok(listed.length, 'BACKTICK_ESCAPE_TOOLS could not be read');
+  for (const tool of listed) {
+    assert.ok(SHELL_TOOLS.includes(tool), `BACKTICK_ESCAPE_TOOLS names "${tool}", which is not a shell tool`);
+  }
+});

package/tests/idea_detail_page.mjs

@@ -91,6 +91,13 @@ function render(idea, { template = TEMPLATE, templateFails = false, ideaStatus =
     __BRANDING__: {}, __MODULES__: { enabled: {} },
     BongosClient: { createClient: () => client },
     OTB: {
+      // task 1003936 — the role axis vocabulary (dom-utils OTB.role*). PRESENT for
+      // the same reason categoryChip is: an undefined helper throws mid-render.
+      roleAxisLabel: () => 'Role',
+      roleLabel: (d) => (!d ? '' : d === 'unclassified' ? 'No role yet' : d === 'ui' ? 'UI' : d.charAt(0).toUpperCase() + d.slice(1)),
+      roleOptions: () => [{ value: '', label: '— any —' }, { value: 'engineer', label: 'Engineer' }, { value: 'artist', label: 'Artist' }],
+      roleIsUnset: (d) => !d || d === 'unclassified',
+      ROLE_UNSET: 'unclassified',
       escapeHtml: (s) => String(s == null ? '' : s).replace(/[&<>"']/g, (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' }[c])),
       $: (sel) => documentObj.querySelector(sel),
       fmtDate: (iso) => String(iso).slice(0, 10),

package/tests/idea_spark_hall.mjs

@@ -126,6 +126,13 @@ function boot({
     __BRANDING__: {}, __MODULES__: { enabled: {} },
     BongosClient: { createClient: () => client },
     OTB: {
+      // task 1003936 — the role axis vocabulary (dom-utils OTB.role*). PRESENT for
+      // the same reason categoryChip is: an undefined helper throws mid-render.
+      roleAxisLabel: () => 'Role',
+      roleLabel: (d) => (!d ? '' : d === 'unclassified' ? 'No role yet' : d === 'ui' ? 'UI' : d.charAt(0).toUpperCase() + d.slice(1)),
+      roleOptions: () => [{ value: '', label: '— any —' }, { value: 'engineer', label: 'Engineer' }, { value: 'artist', label: 'Artist' }],
+      roleIsUnset: (d) => !d || d === 'unclassified',
+      ROLE_UNSET: 'unclassified',
       escapeHtml: (s) => String(s == null ? '' : s).replace(/[&<>"']/g, (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' }[c])),
       $: (sel) => documentObj.querySelector(sel),
       toast: (m) => toasts.push(m),

package/tests/integration_parked_ratchet.mjs

@@ -0,0 +1,79 @@
+// tests/integration_parked_ratchet.mjs — the DB-free half of INTEGRATION_PARKED's
+// guarantees (task 1004034). Sibling of tests/known_failing_ratchet.mjs, which does
+// the same duty for the DB-free lane's KNOWN_FAILING.
+//
+// THE SPLIT, AND WHY IT EXISTS. INTEGRATION_PARKED holds integration tests that fail
+// and are excluded from the lane so it can gate the ones that pass. Its central
+// promise — "a parked test that starts passing reds the lane until its entry goes" —
+// can only be checked WITH a database, because a parked integration test run without
+// one fails for want of the database and would report "still failing" whether or not
+// anybody had fixed it. That half therefore lives in
+// `run-unit-tests.js --integration-parked`, which the integration workflow runs as a
+// blocking step.
+//
+// What is left is everything that does NOT need a database, and it is the half that
+// rots quietest: an entry naming a file nobody kept, an entry for a test the lane was
+// never going to run anyway, an entry double-listed in KNOWN_FAILING so two
+// mechanisms disagree about who owns it, and the list quietly growing. None of those
+// shows up as a red test anywhere else — the lane just silently gates less.
+//
+// DB-free, no network. Run: node tests/integration_parked_ratchet.mjs
+
+import { strict as assert } from 'node:assert';
+import { test } from 'node:test';
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { createRequire } from 'node:module';
+
+const require = createRequire(import.meta.url);
+const TESTS_DIR = path.dirname(fileURLToPath(import.meta.url));
+const { INTEGRATION, INTEGRATION_PARKED, KNOWN_FAILING } = require('../scripts/gds/run-unit-tests.js');
+
+// The ceiling. Twenty-three is what the integration lane's first ever run surfaced
+// (task 1000862) — every one a test nothing had executed before, not a regression.
+// Lowering it as they are fixed is the point; raising it means a NEW failure was
+// parked instead of fixed, which is a deliberate, reviewable act.
+//
+// RAISED 23 → 24 by task 1004042, and this is that act with its reason attached:
+// acclaim_feed_evidence_db is not a new failure, it is one of the original set that
+// was held back because it happened to PASS in the CI run the list was read from.
+// Two later readings — 2/2 locally on a clean database, and the first CI run after
+// the parking landed — showed the pass was the anomaly. No new breakage was parked
+// here; one straggler joined the cohort it always belonged to.
+const MAX_PARKED = 24;
+
+test('every parked entry names a test file that exists', () => {
+  const ghosts = [...INTEGRATION_PARKED]
+    .filter((name) => !fs.existsSync(path.join(TESTS_DIR, `${name}.mjs`)))
+    .sort();
+  assert.deepEqual(ghosts, [],
+    'these are parked but have no test file. An entry that outlives its test silently '
+    + 'shrinks what the lane gates and can never be un-parked — delete the entry, or '
+    + 'restore the file.');
+});
+
+test('every parked entry is one the integration lane would otherwise run', () => {
+  // Parking a name the lane never selects gates nothing and hides nothing; it just
+  // makes the list look like it is doing more than it is.
+  const notInLane = [...INTEGRATION_PARKED].filter((name) => !INTEGRATION.has(name)).sort();
+  assert.deepEqual(notInLane, [],
+    'these are parked but are not in the INTEGRATION set, so the lane was never going '
+    + 'to run them. Add them to INTEGRATION or drop the parked entry.');
+});
+
+test('no test is parked in both INTEGRATION_PARKED and KNOWN_FAILING', () => {
+  // They are different mechanisms with different ratchets. A name in both means two
+  // lists claim ownership and only one of them will ever be the reason it is skipped,
+  // so removing it from one would look like a fix while the other kept it excluded.
+  const both = [...INTEGRATION_PARKED].filter((name) => KNOWN_FAILING.has(name)).sort();
+  assert.deepEqual(both, [],
+    'parked in two places at once — pick the mechanism that owns each test.');
+});
+
+test('the parked count is ratcheted and cannot grow silently', () => {
+  const n = INTEGRATION_PARKED.size;
+  assert.ok(n <= MAX_PARKED,
+    `${n} parked integration tests exceeds the ratchet of ${MAX_PARKED}. Fix the new `
+    + 'failure rather than parking it; raising MAX_PARKED is a deliberate act.');
+});

package/tests/module_contributions.mjs

@@ -9,7 +9,7 @@
 import assert from 'node:assert/strict';
 import { test } from 'node:test';
 import { createRequire } from 'node:module';
-import { readFileSync } from 'node:fs';
+import { readFileSync, readdirSync } from 'node:fs';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
 
@@ -191,20 +191,75 @@ test('craft picker options: OTB.disciplines() mirrors the server list, and falls
   assert.deepEqual(OTB.disciplines(), ['engineer', 'ideator', 'ui']);
 });
 
-test('craft picker options: disciplineLabel names an acronym correctly', () => {
+test('craft picker options: roleLabel names an acronym correctly', () => {
   global.window = {};
   // the IIFE assigns window.OTB once at load — evict it for a fresh binding
   const domUtils = path.join(ROOT, 'modules', 'hall-ui', 'public', 'dom-utils.js');
   delete require.cache[require.resolve(domUtils)];
   require(domUtils);
   const OTB = global.window.OTB;
-  assert.equal(OTB.disciplineLabel('ui'), 'UI', 'not "Ui"');
-  assert.equal(OTB.disciplineLabel('engineer'), 'Engineer');
-  assert.equal(OTB.disciplineLabel('artist'), 'Artist');
-  assert.equal(OTB.disciplineLabel('ideator'), 'Ideator');
+  assert.equal(OTB.roleLabel('ui'), 'UI', 'not "Ui"');
+  assert.equal(OTB.roleLabel('engineer'), 'Engineer');
+  assert.equal(OTB.roleLabel('artist'), 'Artist');
+  assert.equal(OTB.roleLabel('ideator'), 'Ideator');
   // a craft a module adds later needs no new entry here
-  assert.equal(OTB.disciplineLabel('archivist'), 'Archivist');
-  for (const bad of ['', null, undefined]) assert.equal(OTB.disciplineLabel(bad), '');
+  assert.equal(OTB.roleLabel('archivist'), 'Archivist');
+  for (const bad of ['', null, undefined]) assert.equal(OTB.roleLabel(bad), '');
+});
+
+// ---- task 1003936: ONE word for the role axis, and it lives in one place -----
+
+test('the role axis has exactly one user-facing word, and no surface types it', () => {
+  // The bug this pins: the hall shipped FOUR words for one axis — Discipline on the
+  // Tasks board, Discipline AND Craft on the Goals page 77 lines apart, Craft in the
+  // Directory and Settings, craft in Collab, Type/lane on the builder-start card.
+  // ADR 0174 Decision 5 settled the word as "role"; the owner confirmed it as the
+  // shipped label on 2026-09-18. A label repeated in six files drifts back, so the
+  // real invariant is not "the word is Role" but "no surface spells it itself".
+  global.window = {};
+  const domUtils = path.join(ROOT, 'modules', 'hall-ui', 'public', 'dom-utils.js');
+  delete require.cache[require.resolve(domUtils)];
+  require(domUtils);
+  const OTB = global.window.OTB;
+  assert.equal(OTB.roleAxisLabel(), 'Role');
+
+  const readSrc = (p) => readFileSync(path.join(ROOT, p), 'utf8');
+  const SURFACES = [
+    'modules/hall-ui/public/work.js',
+    'modules/hall-ui/public/goals-page.js',
+    'modules/hall-ui/public/people.js',
+    'modules/hall-ui/public/profile.js',
+    'modules/hall-ui/public/builders.js',
+  ];
+  for (const p of SURFACES) {
+    const s = readSrc(p);
+    // No surface may carry a hand-typed label for the axis...
+    assert.ok(!/label: '(Craft|Discipline|Role)'/.test(s), p + ' types the axis label instead of reading roleAxisLabel()');
+    assert.ok(!/'Crafts'|'Disciplines'|'Roles'/.test(s), p + ' types the plural axis label');
+    // ...and every one of them must actually read the shared vocabulary.
+    assert.match(s, /OTB\.role(AxisLabel|Label|Options|IsUnset)\(/, p + ' does not read the shared role vocabulary');
+  }
+});
+
+test('an unset role is never shown to a person as the database default', () => {
+  // 'unclassified' is a column default, not a word anyone would say (docs/voice.md
+  // V2). It may remain the stored value and the filter VALUE; it may not be what a
+  // person reads.
+  global.window = {};
+  const domUtils = path.join(ROOT, 'modules', 'hall-ui', 'public', 'dom-utils.js');
+  delete require.cache[require.resolve(domUtils)];
+  require(domUtils);
+  const OTB = global.window.OTB;
+  assert.equal(OTB.ROLE_UNSET, 'unclassified', 'the stored value is unchanged');
+  assert.equal(OTB.roleLabel('unclassified'), 'No role yet');
+  assert.ok(OTB.roleIsUnset('unclassified') && OTB.roleIsUnset(null) && OTB.roleIsUnset(''));
+  assert.ok(!OTB.roleIsUnset('engineer'));
+
+  const readSrc = (p) => readFileSync(path.join(ROOT, p), 'utf8');
+  // The role-bearing render sites must not interpolate the raw default into markup.
+  for (const p of ['modules/hall-ui/public/work.js', 'modules/hall-ui/public/profile.js', 'modules/hall-ui/public/profile-charts.js']) {
+    assert.ok(!/t\.discipline \|\| 'unclassified'/.test(readSrc(p)), p + ' still renders the stored default');
+  }
 });
 
 test('craft picker options: neither picker hardcodes the craft list any more', () => {
@@ -268,3 +323,74 @@ test('hall-widget registry: placement rules reject bad registrations, accept goo
     delete global.window;
   }
 });
+
+// ---- task 1004039: the role axis on the PUBLIC LEGAL surface ----------------
+
+test('the public landing pages spell the role axis one way, and Terms actually says it', () => {
+  // Task 1003936 unified the word to "Role" across the hall, the status dashboard and
+  // the builder-start card, but deliberately left Terms alone: it is a public legal
+  // surface, and rewording one is a different decision from renaming a filter label.
+  // That left a FIFTH spelling in the wild — "the disciplines you worked in" — on the
+  // one page whose whole job is to describe accurately what the platform publishes
+  // about a person.
+  //
+  // OWNER CONFIRMATION (the task's third done-when: confirm before shipping, because a
+  // legal surface is not a pure copy edit). Asked and answered 2026-09-19 — the owner
+  // was shown the current sentence, the proposed "the roles you worked in", and that
+  // the change is label-only with the published fields unchanged, and chose to ship it.
+  // Recorded here because a reviewer reads the diff, not the conversation.
+  //
+  // Scanned as RENDERED TEXT, not source lines. Task 1003936 burned four grading
+  // rounds on greps keyed to the shape the word was expected to have: a sentence split
+  // across three lines inside one <p> defeats a line-anchored HTML grep. Strip
+  // script/style/comments/tags, collapse whitespace, then scan the prose a reader sees.
+  const dir = path.join(ROOT, 'modules', 'public-landing', 'public');
+  const renderedText = (file) => readFileSync(path.join(dir, file), 'utf8')
+    .replace(/<script[\s\S]*?<\/script>/gi, ' ')
+    .replace(/<style[\s\S]*?<\/style>/gi, ' ')
+    .replace(/<!--[\s\S]*?-->/g, ' ')
+    .replace(/<[^>]+>/g, ' ')
+    .replace(/\s+/g, ' ');
+
+  const pages = readdirSync(dir).filter((f) => f.endsWith('.html'));
+  assert.ok(pages.includes('terms.html'), 'terms.html must be among the scanned pages');
+
+  // The superseded spellings task 1003936 swept: Discipline, Craft, Type and lane.
+  // Three of the four can be matched as bare words — none has an innocent use on these
+  // pages (verified: zero hits for lane, and the craft/discipline hits were this bug).
+  const BARE = [
+    [/\bdisciplines?\b/i, 'discipline'],
+    [/\bcrafts?\b/i, 'craft'],
+    [/\blanes?\b/i, 'lane'],
+  ];
+  // "type" and "domain" CANNOT be matched bare, and this is the interesting case rather
+  // than an omission. Both have innocent uses here that must survive: projects.html says
+  // "point a domain you own at it" (DNS) and "type the name here" (the verb), index.html
+  // has a "Types of projects" heading and projects.html a "Type" column (a PROJECT's
+  // type, a different axis entirely). A bare scan would flag four correct strings, and
+  // the exception list needed to silence them is exactly where the next stale spelling
+  // would hide. So match the SHAPES the role axis takes in a sentence instead.
+  const AXIS_SHAPED = [
+    [/\btypes?\s+you\s+worked\s+in\b/i, 'type ("the types you worked in")'],
+    [/\bdomains?\s+you\s+worked\s+in\b/i, 'domain ("the domains you worked in")'],
+    [/\bby\s+(type|lane|craft|discipline|domain)\b/i, 'the axis in a "by <word>" filter label'],
+    [/\byour\s+(type|lane|craft|discipline)\b/i, 'the axis in a "your <word>" label'],
+  ];
+  for (const page of pages) {
+    const text = renderedText(page);
+    for (const [re, word] of BARE) {
+      assert.ok(!re.test(text), `${page} still spells the role axis "${word}"`);
+    }
+    for (const [re, what] of AXIS_SHAPED) {
+      assert.ok(!re.test(text), `${page} still spells the role axis as ${what}`);
+    }
+  }
+
+  // The negative assertions above all pass on a page that simply deleted the sentence,
+  // so pin the POSITIVE too — the clause must still be there, saying "roles".
+  assert.match(
+    renderedText('terms.html'),
+    /the rank that project gave you, the roles you worked in, and when you were last active/,
+    'terms.html no longer states, in the shipped wording, which role axis the platform publishes',
+  );
+});

package/tests/people_directory_clip.mjs

@@ -102,6 +102,13 @@ function harness({ count }) {
     matchMedia: () => ({ matches: false, addEventListener() {}, addListener() {} }),
     OTBBranding: { currencyLabel: () => 'Credits' },
     OTB: {
+      // task 1003936 — the role axis vocabulary (dom-utils OTB.role*). PRESENT for
+      // the same reason categoryChip is: an undefined helper throws mid-render.
+      roleAxisLabel: () => 'Role',
+      roleLabel: (d) => (!d ? '' : d === 'unclassified' ? 'No role yet' : d === 'ui' ? 'UI' : d.charAt(0).toUpperCase() + d.slice(1)),
+      roleOptions: () => [{ value: '', label: '— any —' }, { value: 'engineer', label: 'Engineer' }, { value: 'artist', label: 'Artist' }],
+      roleIsUnset: (d) => !d || d === 'unclassified',
+      ROLE_UNSET: 'unclassified',
       escapeHtml: (s) => String(s == null ? '' : s),
       $: (sel) => documentObj.querySelector(sel),
       num: (n) => Number(n) || 0,

package/tests/profile_activity.mjs

@@ -517,6 +517,13 @@ function bootProfile({ signedIn = true } = {}) {
     BongosClient: { createClient: () => client },
     OTBKit: kit,
     OTB: {
+      // task 1003936 — the role axis vocabulary (dom-utils OTB.role*). PRESENT for
+      // the same reason categoryChip is: an undefined helper throws mid-render.
+      roleAxisLabel: () => 'Role',
+      roleLabel: (d) => (!d ? '' : d === 'unclassified' ? 'No role yet' : d === 'ui' ? 'UI' : d.charAt(0).toUpperCase() + d.slice(1)),
+      roleOptions: () => [{ value: '', label: '— any —' }, { value: 'engineer', label: 'Engineer' }, { value: 'artist', label: 'Artist' }],
+      roleIsUnset: (d) => !d || d === 'unclassified',
+      ROLE_UNSET: 'unclassified',
       escapeHtml: (s) => String(s == null ? '' : s).replace(/[&<>"']/g, (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' }[c])),
       $: (sel) => documentObj.querySelector(sel),
       fmtNum: (n) => String(n ?? 0),

package/tests/profile_ui_cross_project.mjs

@@ -79,6 +79,13 @@ async function boot({ search = '', me, profile } = {}) {
     __BRANDING__: {},
     BongosClient: { createClient: () => api },
     OTB: {
+      // task 1003936 — the role axis vocabulary (dom-utils OTB.role*). PRESENT for
+      // the same reason categoryChip is: an undefined helper throws mid-render.
+      roleAxisLabel: () => 'Role',
+      roleLabel: (d) => (!d ? '' : d === 'unclassified' ? 'No role yet' : d === 'ui' ? 'UI' : d.charAt(0).toUpperCase() + d.slice(1)),
+      roleOptions: () => [{ value: '', label: '— any —' }, { value: 'engineer', label: 'Engineer' }, { value: 'artist', label: 'Artist' }],
+      roleIsUnset: (d) => !d || d === 'unclassified',
+      ROLE_UNSET: 'unclassified',
       $, escapeHtml,
       fmtNum: (n) => String(Number(n) || 0),
       fmtDate: (d) => String(d).slice(0, 10),
@@ -161,7 +168,8 @@ test('full cross_project → tiles, named rows, plain-text standing, +N more', a
   assert.match(html, /Metic/, 'rank_held renders capitalized as that project\'s own standing');
   assert.ok(!html.includes('rank-badge'), 'never the local rank-badge component for another project\'s rank (spec Decision 1)');
   assert.match(html, /\+ 1 more project/, 'non-public projects are counted, never named');
-  assert.match(html, /Disciplines: engineer, ui/);
+  // task 1003936: one word for the axis, and the values are named not slugged.
+  assert.match(html, /Roles: Engineer, UI/);
   assert.match(html, /Last active 2026-08-01/);
   assert.ok(!html.includes('/settings#cross-project'), 'no self link for a stranger');
 });

package/tests/provision_disconnect.mjs

@@ -28,6 +28,13 @@ const require = createRequire(import.meta.url);
 const P = require('../scripts/gds/provision.js');
 const D = require('../scripts/gds/provision-disconnect.js');
 
+// The assertions below pin the supervision verbs as `systemctl …` (task 1003997, ADR 0306).
+// The manager is PROBED from /run/systemd/system when nothing pins it, so a CI runner that
+// boots systemd and a container that does not disagree on the same source. Pin it here — these
+// tests are about the runbook, not about what the test box happens to boot. The probe itself is
+// covered directly, with an injected fs, in tests/provision.mjs.
+process.env.PROVISION_PROCESS_MANAGER = 'systemd';
+
 let passed = 0, failed = 0;
 function t(name, fn) {
   try { fn(); passed++; console.log(`  PASS  ${name}`); }

package/tests/provision_restart.mjs

@@ -32,6 +32,13 @@ const require = createRequire(import.meta.url);
 const P = require('../scripts/gds/provision.js');
 const { MANIFEST_VERIFY_TRIES } = require('../scripts/gds/provision-config.js');
 
+// The assertions below pin the supervision verbs as `systemctl …` (task 1003997, ADR 0306).
+// The manager is PROBED from /run/systemd/system when nothing pins it, so a CI runner that
+// boots systemd and a container that does not disagree on the same source. Pin it here — these
+// tests are about the runbook, not about what the test box happens to boot. The probe itself is
+// covered directly, with an injected fs, in tests/provision.mjs.
+process.env.PROVISION_PROCESS_MANAGER = 'systemd';
+
 let passed = 0, failed = 0;
 async function ta(name, fn) {
   try { await fn(); passed++; console.log(`  PASS  ${name}`); }

package/tests/provision_settings_apply.mjs

@@ -28,6 +28,13 @@ const require = createRequire(import.meta.url);
 const P = require('../scripts/gds/provision.js');
 const { MANIFEST_VERIFY_TRIES } = require('../scripts/gds/provision-config.js');
 
+// The assertions below pin the supervision verbs as `systemctl …` (task 1003997, ADR 0306).
+// The manager is PROBED from /run/systemd/system when nothing pins it, so a CI runner that
+// boots systemd and a container that does not disagree on the same source. Pin it here — these
+// tests are about the runbook, not about what the test box happens to boot. The probe itself is
+// covered directly, with an injected fs, in tests/provision.mjs.
+process.env.PROVISION_PROCESS_MANAGER = 'systemd';
+
 const NEUTRAL_PREFIX =
   JSON.parse(readFileSync(new URL('../config/branding.neutral.json', import.meta.url), 'utf8')).envPrefix || 'CLOUDBONGOS';
 

package/tests/sessions_kit_pager.mjs

@@ -118,6 +118,13 @@ function harness({ total = 320, failAfter = null, viewerRank = 'metic', perPageP
     scrollTo() {},
     addEventListener() {},
     OTB: {
+      // task 1003936 — the role axis vocabulary (dom-utils OTB.role*). PRESENT for
+      // the same reason categoryChip is: an undefined helper throws mid-render.
+      roleAxisLabel: () => 'Role',
+      roleLabel: (d) => (!d ? '' : d === 'unclassified' ? 'No role yet' : d === 'ui' ? 'UI' : d.charAt(0).toUpperCase() + d.slice(1)),
+      roleOptions: () => [{ value: '', label: '— any —' }, { value: 'engineer', label: 'Engineer' }, { value: 'artist', label: 'Artist' }],
+      roleIsUnset: (d) => !d || d === 'unclassified',
+      ROLE_UNSET: 'unclassified',
       escapeHtml: (s) => String(s == null ? '' : s),
       $: (sel) => documentObj.querySelector(sel),
       num: (n) => Number(n) || 0,

package/tests/watch_applications_queue.mjs

@@ -159,6 +159,13 @@ async function boot(opts = {}) {
   const windowObj = {
     __BRANDING__: { project: { joinability: 'apply' } },
     OTB: {
+      // task 1003936 — the role axis vocabulary (dom-utils OTB.role*). PRESENT for
+      // the same reason categoryChip is: an undefined helper throws mid-render.
+      roleAxisLabel: () => 'Role',
+      roleLabel: (d) => (!d ? '' : d === 'unclassified' ? 'No role yet' : d === 'ui' ? 'UI' : d.charAt(0).toUpperCase() + d.slice(1)),
+      roleOptions: () => [{ value: '', label: '— any —' }, { value: 'engineer', label: 'Engineer' }, { value: 'artist', label: 'Artist' }],
+      roleIsUnset: (d) => !d || d === 'unclassified',
+      ROLE_UNSET: 'unclassified',
       escapeHtml,
       $: (sel) => documentObj.querySelector(sel),
       num: (v) => Number(v),

package/tests/watch_roster_self_row.mjs

@@ -129,6 +129,13 @@ async function boot(opts = {}) {
   const windowObj = {
     __BRANDING__: { project: { joinability: 'apply' } },
     OTB: {
+      // task 1003936 — the role axis vocabulary (dom-utils OTB.role*). PRESENT for
+      // the same reason categoryChip is: an undefined helper throws mid-render.
+      roleAxisLabel: () => 'Role',
+      roleLabel: (d) => (!d ? '' : d === 'unclassified' ? 'No role yet' : d === 'ui' ? 'UI' : d.charAt(0).toUpperCase() + d.slice(1)),
+      roleOptions: () => [{ value: '', label: '— any —' }, { value: 'engineer', label: 'Engineer' }, { value: 'artist', label: 'Artist' }],
+      roleIsUnset: (d) => !d || d === 'unclassified',
+      ROLE_UNSET: 'unclassified',
       escapeHtml,
       $: (sel) => documentObj.querySelector(sel),
       num: (v) => Number(v),

package/tests/watch_sealed_floor.mjs

@@ -116,6 +116,13 @@ async function boot({ answers = {}, fallback = ok({}) } = {}) {
   const windowObj = {
     __BRANDING__: { project: { joinability: 'apply' } },
     OTB: {
+      // task 1003936 — the role axis vocabulary (dom-utils OTB.role*). PRESENT for
+      // the same reason categoryChip is: an undefined helper throws mid-render.
+      roleAxisLabel: () => 'Role',
+      roleLabel: (d) => (!d ? '' : d === 'unclassified' ? 'No role yet' : d === 'ui' ? 'UI' : d.charAt(0).toUpperCase() + d.slice(1)),
+      roleOptions: () => [{ value: '', label: '— any —' }, { value: 'engineer', label: 'Engineer' }, { value: 'artist', label: 'Artist' }],
+      roleIsUnset: (d) => !d || d === 'unclassified',
+      ROLE_UNSET: 'unclassified',
       escapeHtml,
       $: (sel) => documentObj.querySelector(sel),
       num: (v) => Number(v),