@bongos/core 1.19.873 → 1.19.875

package/docs/copy-registry.json

@@ -3,9 +3,9 @@
   "generator": "scripts/gds/copy-inventory.js",
   "goal": 1000074,
   "counts": {
-    "strings": 1903,
-    "unique_ids": 1647,
-    "certain": 1903,
+    "strings": 1912,
+    "unique_ids": 1656,
+    "certain": 1912,
     "heuristic": 0,
     "duplicate_ids": 175
   },
@@ -13,7 +13,7 @@
     "builders-hall": {
       "at": "modules/hall-ui/public",
       "files": 89,
-      "strings": 1413
+      "strings": 1422
     },
     "status-dashboard": {
       "at": "modules/status-ui/public",
@@ -174,7 +174,7 @@
       "occurrences": 5,
       "at": [
         "modules/hall-ui/public/board-room.js:433",
-        "modules/hall-ui/public/gate.js:219",
+        "modules/hall-ui/public/gate.js:234",
         "modules/hall-ui/public/government.js:879",
         "modules/hall-ui/public/harbor.js:337",
         "modules/hall-ui/public/watch.js:1306"
@@ -199,7 +199,7 @@
       "text": "task {…}",
       "occurrences": 5,
       "at": [
-        "modules/hall-ui/public/gate.js:142",
+        "modules/hall-ui/public/gate.js:157",
         "modules/hall-ui/public/hall-render.js:669",
         "modules/hall-ui/public/idea.js:207",
         "modules/hall-ui/public/ideas.js:476",
@@ -308,7 +308,7 @@
       "text": "Available from the {…} rank up.",
       "occurrences": 3,
       "at": [
-        "modules/hall-ui/public/gate.js:222",
+        "modules/hall-ui/public/gate.js:237",
         "modules/hall-ui/public/government.js:882",
         "modules/hall-ui/public/harbor.js:340"
       ]
@@ -1075,8 +1075,8 @@
       "text": "Move to {…}",
       "occurrences": 2,
       "at": [
-        "modules/hall-ui/public/deploy.js:103",
-        "modules/hall-ui/public/deploy.js:161"
+        "modules/hall-ui/public/deploy.js:122",
+        "modules/hall-ui/public/deploy.js:217"
       ]
     },
     {
@@ -2047,7 +2047,7 @@
       "surface": "builders-hall",
       "text": "+{…} more",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 134,
+      "line": 149,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -2164,7 +2164,7 @@
       "surface": "builders-hall",
       "text": "; a later push must be re-approved.",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 94,
+      "line": 109,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -2609,6 +2609,24 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "efa803555625",
+      "surface": "builders-hall",
+      "text": "Allow goal",
+      "file": "modules/hall-ui/public/gate.js",
+      "line": 288,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
+    {
+      "id": "86ea8d57d34e",
+      "surface": "builders-hall",
+      "text": "Allowlisted goals",
+      "file": "modules/hall-ui/public/gate.js",
+      "line": 286,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "e99cc5d37404",
       "surface": "builders-hall",
@@ -2704,7 +2722,7 @@
       "surface": "builders-hall",
       "text": "Approve & re-run",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 107,
+      "line": 122,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -2758,7 +2776,7 @@
       "surface": "builders-hall",
       "text": "Approved. Re-check pending.",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 149,
+      "line": 164,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -2861,12 +2879,21 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "d7c574ba6b2a",
+      "surface": "builders-hall",
+      "text": "Autobongos runner",
+      "file": "modules/hall-ui/public/gate.html",
+      "line": 53,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "1de02052abf2",
       "surface": "builders-hall",
       "text": "Available from the {…} rank up.",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 222,
+      "line": 237,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -3307,7 +3334,7 @@
       "surface": "builders-hall",
       "text": "Changed files",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 136,
+      "line": 151,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -3343,7 +3370,7 @@
       "surface": "builders-hall",
       "text": "Changes touching protected build surfaces, held for your approval.",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 243,
+      "line": 355,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -3937,7 +3964,7 @@
       "surface": "builders-hall",
       "text": "Could not approve: {…}",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 108,
+      "line": 123,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -4265,6 +4292,15 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "21c2f33168a3",
+      "surface": "builders-hall",
+      "text": "Could not read this project's deploy state: {…}",
+      "file": "modules/hall-ui/public/deploy.js",
+      "line": 157,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "8b470cebf53d",
       "surface": "builders-hall",
@@ -5017,7 +5053,7 @@
       "surface": "builders-hall",
       "text": "Each one touched a protected surface and stopped at the gate check. Approving records your seal on that commit and re-runs the check.",
       "file": "modules/hall-ui/public/gate.html",
-      "line": 48,
+      "line": 61,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -5084,6 +5120,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "690609c8e9a9",
+      "surface": "builders-hall",
+      "text": "Enter a goal number.",
+      "file": "modules/hall-ui/public/gate.js",
+      "line": 300,
+      "origin": "js-notice",
+      "confidence": "certain"
+    },
     {
       "id": "1825c9c467d8",
       "surface": "builders-hall",
@@ -5633,6 +5678,33 @@
       "origin": "html-attr:aria-label",
       "confidence": "certain"
     },
+    {
+      "id": "ec88b946ad16",
+      "surface": "builders-hall",
+      "text": "Goal {…}",
+      "file": "modules/hall-ui/public/gate.js",
+      "line": 280,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
+    {
+      "id": "7b02827535c2",
+      "surface": "builders-hall",
+      "text": "Goal {…} allowlisted.",
+      "file": "modules/hall-ui/public/gate.js",
+      "line": 303,
+      "origin": "js-notice",
+      "confidence": "certain"
+    },
+    {
+      "id": "8a421ae268e6",
+      "surface": "builders-hall",
+      "text": "Goal {…} removed.",
+      "file": "modules/hall-ui/public/gate.js",
+      "line": 313,
+      "origin": "js-notice",
+      "confidence": "certain"
+    },
     {
       "id": "e0bc28d10785",
       "surface": "builders-hall",
@@ -5773,7 +5845,7 @@
       "surface": "builders-hall",
       "text": "Held pull requests",
       "file": "modules/hall-ui/public/gate.html",
-      "line": 47,
+      "line": 60,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -6794,15 +6866,6 @@
       "origin": "html-text",
       "confidence": "certain"
     },
-    {
-      "id": "c4b39de1e478",
-      "surface": "builders-hall",
-      "text": "Make it live",
-      "file": "modules/hall-ui/public/deploy.js",
-      "line": 128,
-      "origin": "js-markup",
-      "confidence": "certain"
-    },
     {
       "id": "6b3d660e0e31",
       "surface": "builders-hall",
@@ -6858,9 +6921,9 @@
       "confidence": "certain"
     },
     {
-      "id": "6bd456635167",
+      "id": "dce0546c9e34",
       "surface": "builders-hall",
-      "text": "Merging work does not put it in front of anyone. This is the step that does: it moves this instance onto a newer core, waits for the box to answer, and puts itself back if it does not.",
+      "text": "Merging work does not put it in front of anyone. This is the step that does: it moves this platform — or any project it hosts — onto a newer core, waits for that box to answer, and puts it back if it does not.",
       "file": "modules/hall-ui/public/deploy.html",
       "line": 39,
       "origin": "html-text",
@@ -6988,7 +7051,7 @@
       "surface": "builders-hall",
       "text": "Move to {…}",
       "file": "modules/hall-ui/public/deploy.js",
-      "line": 103,
+      "line": 122,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -6997,7 +7060,7 @@
       "surface": "builders-hall",
       "text": "Move to {…}",
       "file": "modules/hall-ui/public/deploy.js",
-      "line": 161,
+      "line": 217,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -7316,6 +7379,15 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "2947c1ddea9a",
+      "surface": "builders-hall",
+      "text": "No running box to deploy.",
+      "file": "modules/hall-ui/public/deploy.js",
+      "line": 195,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "9fb9f766450d",
       "surface": "builders-hall",
@@ -7591,7 +7663,7 @@
       "surface": "builders-hall",
       "text": "Nothing newer is published that this box can take. There is nothing to deploy.",
       "file": "modules/hall-ui/public/deploy.js",
-      "line": 126,
+      "line": 140,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -8617,7 +8689,7 @@
       "surface": "builders-hall",
       "text": "Record your owner approval for",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 94,
+      "line": 109,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -8950,7 +9022,7 @@
       "surface": "builders-hall",
       "text": "Restricted.",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 219,
+      "line": 234,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -9247,7 +9319,7 @@
       "surface": "builders-hall",
       "text": "See what would change",
       "file": "modules/hall-ui/public/deploy.js",
-      "line": 91,
+      "line": 108,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -9315,11 +9387,11 @@
       "confidence": "certain"
     },
     {
-      "id": "fcd68c6a21fd",
+      "id": "a39b0f9d86e5",
       "surface": "builders-hall",
-      "text": "Serving now",
+      "text": "Serving {…} — read from the box itself, {…}.",
       "file": "modules/hall-ui/public/deploy.js",
-      "line": 115,
+      "line": 142,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10628,6 +10700,15 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "aed969dd1e18",
+      "surface": "builders-hall",
+      "text": "The unattended runner works only the goals listed here, and only while it is on. This is the switch — it lives on the server, so the machine can read it and cannot change it.",
+      "file": "modules/hall-ui/public/gate.html",
+      "line": 54,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "a42a37c43bfb",
       "surface": "builders-hall",
@@ -10714,7 +10795,7 @@
       "surface": "builders-hall",
       "text": "This PR is held by the gate-review check.",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 129,
+      "line": 144,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10741,7 +10822,7 @@
       "surface": "builders-hall",
       "text": "This clears {…}. The gate check re-runs and the PR merges once it goes green. Your approval applies only to commit",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 94,
+      "line": 109,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10944,11 +11025,20 @@
       "confidence": "certain"
     },
     {
-      "id": "77e3b8f5318b",
+      "id": "f93fcb24c6ba",
       "surface": "builders-hall",
-      "text": "This restarts the platform onto core",
+      "text": "This platform",
       "file": "modules/hall-ui/public/deploy.js",
-      "line": 103,
+      "line": 187,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
+    {
+      "id": "6e9dfe1fb903",
+      "surface": "builders-hall",
+      "text": "This restarts {…} onto core",
+      "file": "modules/hall-ui/public/deploy.js",
+      "line": 122,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -12316,7 +12406,7 @@
       "surface": "builders-hall",
       "text": "author trusted",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 141,
+      "line": 156,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -12631,7 +12721,7 @@
       "surface": "builders-hall",
       "text": "hard floor",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 127,
+      "line": 142,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -12802,7 +12892,7 @@
       "surface": "builders-hall",
       "text": "is published and this box is not on it yet.",
       "file": "modules/hall-ui/public/deploy.js",
-      "line": 91,
+      "line": 108,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -12955,7 +13045,7 @@
       "surface": "builders-hall",
       "text": "no reading",
       "file": "modules/hall-ui/public/deploy.js",
-      "line": 74,
+      "line": 91,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -13225,7 +13315,7 @@
       "surface": "builders-hall",
       "text": "reads the control plane's own observation · ADR 0293 · every move is recorded with who asked",
       "file": "modules/hall-ui/public/deploy.js",
-      "line": 132,
+      "line": 199,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -13378,7 +13468,7 @@
       "surface": "builders-hall",
       "text": "task {…}",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 142,
+      "line": 157,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -13576,7 +13666,7 @@
       "surface": "builders-hall",
       "text": "view diff",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 145,
+      "line": 160,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -13661,6 +13751,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "57f45f7812ba",
+      "surface": "builders-hall",
+      "text": "why (optional)",
+      "file": "modules/hall-ui/public/gate.js",
+      "line": 288,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "143f77e2b782",
       "surface": "builders-hall",
@@ -13864,7 +13963,7 @@
       "surface": "builders-hall",
       "text": "{…} file{…}",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 136,
+      "line": 151,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -13882,7 +13981,7 @@
       "surface": "builders-hall",
       "text": "{…} more PR{…} still being checked. Refresh shortly.",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 210,
+      "line": 225,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -14138,15 +14237,6 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
-    {
-      "id": "d9b4ae2db0f4",
-      "surface": "builders-hall",
-      "text": "{…} — read from the box itself, {…}.",
-      "file": "modules/hall-ui/public/deploy.js",
-      "line": 115,
-      "origin": "js-markup",
-      "confidence": "certain"
-    },
     {
       "id": "085f93f3f775",
       "surface": "builders-hall",
@@ -14156,15 +14246,6 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
-    {
-      "id": "b814cb35ce2f",
-      "surface": "builders-hall",
-      "text": "{…} — the box this platform runs on",
-      "file": "modules/hall-ui/public/deploy.js",
-      "line": 168,
-      "origin": "js-text-assign",
-      "confidence": "certain"
-    },
     {
       "id": "f75ee96a7511",
       "surface": "builders-hall",

package/docs/module-api-changelog.md

@@ -2220,5 +2220,9 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.871 with no explicit bump. run 35419318693. (task 1002620)
   1.19.873 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.872 with no explicit bump. run 35419621747. (task 1002620)
+  1.19.874 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.873 with no explicit bump. run 35419921833. (task 1002620)
+  1.19.875 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.874 with no explicit bump. run 35420682750. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/autonomy/db.js

@@ -44,7 +44,81 @@ async function lastAutonomyHead(routine) {
   return rows[0]?.head_sha || null;
 }
 
+// ── the Autobongos fence (task 1003908, ADR 0307 §6) ─────────────────────────
+//
+// These back the one control surface the runner host cannot write to. Everything
+// here is deliberately dumb — a SELECT and three small writes — because the
+// decision logic is pure and lives in ../fence.js; a query that made a judgement
+// would put half the fence somewhere no test can reach without a database.
+
+// readFence — the kill switch and the allowlist, in one round trip.
+//
+// The singleton row is SEEDED by the migration, so a missing row means the
+// migration has not run, not "not configured yet". Returning null for that makes
+// it unreadable to the caller, which refuses — never a permissive default.
+async function readFence() {
+  const [fence, goals] = await Promise.all([
+    pool.query('SELECT enabled, paused_reason, updated_at, updated_by FROM autonomy_fence WHERE id = 1'),
+    pool.query('SELECT goal_id, note, added_at, added_by FROM autonomy_allowed_goals ORDER BY added_at DESC'),
+  ]);
+  const row = fence.rows[0];
+  if (!row) return null;
+  return {
+    enabled: row.enabled === true,
+    paused_reason: row.paused_reason,
+    updated_at: row.updated_at,
+    updated_by: row.updated_by ? String(row.updated_by) : null,
+    // goal_id is a bigint, which node-postgres hands back as a STRING. The runner
+    // compares it against a task's goal_id, so normalise here rather than leaving
+    // every caller to remember — a '1000119' !== 1000119 mismatch would silently
+    // empty the allowlist and read as "nothing to work on".
+    goals: goals.rows.map((g) => ({
+      goal_id: Number(g.goal_id), note: g.note, added_at: g.added_at,
+      added_by: g.added_by ? String(g.added_by) : null,
+    })),
+  };
+}
+
+// setFenceEnabled — throw the kill switch. The reason is stored on the OFF case
+// so a stopped machine can say who stopped it and why, which "halted" cannot.
+async function setFenceEnabled({ enabled, reason = null, builderId = null }) {
+  const { rows } = await pool.query(
+    `UPDATE autonomy_fence
+        SET enabled = $1, paused_reason = $2, updated_at = now(), updated_by = $3
+      WHERE id = 1
+      RETURNING enabled, paused_reason, updated_at`,
+    [enabled === true, enabled === true ? null : (reason || 'stopped by an owner'), builderId]
+  );
+  return rows[0] || null;
+}
+
+// allowGoal — put a goal on the allowlist. Idempotent: re-adding an allowed goal
+// updates its note rather than erroring, so the hall's form has no special case.
+async function allowGoal({ goalId, note = null, builderId = null }) {
+  const { rows } = await pool.query(
+    `INSERT INTO autonomy_allowed_goals (goal_id, note, added_by)
+     VALUES ($1, $2, $3)
+     ON CONFLICT (goal_id) DO UPDATE SET note = EXCLUDED.note
+     RETURNING goal_id, note, added_at`,
+    [goalId, note, builderId]
+  );
+  const r = rows[0];
+  return r ? { ...r, goal_id: Number(r.goal_id) } : null;
+}
+
+// disallowGoal — take a goal off the allowlist. `removed` says whether a row
+// actually went, because "already gone" and "just revoked" are different answers
+// to an owner clicking Remove.
+async function disallowGoal(goalId) {
+  const { rowCount } = await pool.query('DELETE FROM autonomy_allowed_goals WHERE goal_id = $1', [goalId]);
+  return { removed: rowCount > 0 };
+}
+
 module.exports = {
   recordAutonomyRun,
   lastAutonomyHead,
+  readFence,
+  setFenceEnabled,
+  allowGoal,
+  disallowGoal,
 };