@bongos/core 1.19.878 → 1.19.880

package/modules/hall-ui/public/work.js

@@ -429,6 +429,8 @@
       const disciplineTag = window.OTB.roleIsUnset(t.discipline)
         ? ''
         : `<span class="task__tag">${escapeHtml(window.OTB.roleLabel(t.discipline))}</span>`;
+      // A kind nobody set is no tag at all, like the role above (task 1004038).
+      const kindTag = window.OTB.kindIsUnset(t.kind) ? '' : `<span class="task__tag">${escapeHtml(t.kind)}</span>`;
       const newcomerTag = t.newcomer_friendly
         ? '<span class="task__tag task__tag--newcomer">newcomer</span>'
         : '';
@@ -459,7 +461,7 @@
             <p class="task__title"><a class="task__link" href="${escapeHtml(taskHref(t.id))}">${escapeHtml(t.title)}</a></p>
             <div class="task__meta">
               <span class="task__tag">${escapeHtml(t.version_id || '?')}</span>
-              <span class="task__tag">${escapeHtml(t.kind || 'unclassified')}</span>
+              ${kindTag}
               ${disciplineTag}
               ${newcomerTag}
               ${rankTag}
@@ -1142,7 +1144,7 @@
         <div class="history__row" data-task-id="${escapeHtml(String(t.id))}" title="Open task #${escapeHtml(String(t.id))}">
           <span class="history__id">#${escapeHtml(String(t.id))}</span>
           <span class="history__title">${escapeHtml(t.title || '(untitled)')} ${ver} ${disciplineTag} ${rankTagHtml(t.requires_rank)}<br>${goalTag}</span>
-          <span class="history__when">${escapeHtml(t.kind || '')}</span>
+          <span class="history__when">${window.OTB.kindIsUnset(t.kind) ? '' : escapeHtml(t.kind)}</span>
         </div>`;
     }).join('');
   }

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.878",
+  "version": "1.19.880",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.878",
+      "version": "1.19.880",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.878",
+  "version": "1.19.880",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/src/bongos/serve-internal.js

@@ -927,16 +927,16 @@ function mountInternalSurfaces(app) {
     return res.redirect(301, `https://builders.${apex}/${rest}${qs}`);
   });
 
-  // The /watch monitoring page and the /harbor dev-box management page (idea 257)
-  // and the /gate page (task 1179) all sit behind `page.view.government` — Metic
-  // and up since ADR 0157. Same server-side page gate, same posture: a builder
-  // without the permission never receives the shell (requireGovernmentPage — named
-  // requireArchonPage before ADR 0157 — redirects them to the hall, and an
-  // unauthenticated visitor into sign-in). The subdomain shim above has already
-  // rewritten the bare /watch + /harbor + /gate onto /builders/*. (Defense in
-  // depth: every data endpoint these pages call carries its own server-side gate.)
+  // The /watch monitoring page and the /gate page (task 1179) both sit behind
+  // `page.view.government` — Metic and up since ADR 0157. Same server-side page
+  // gate, same posture: a builder without the permission never receives the shell
+  // (requireGovernmentPage — named requireArchonPage before ADR 0157 — redirects
+  // them to the hall, and an unauthenticated visitor into sign-in). The subdomain
+  // shim above has already rewritten the bare /watch + /gate onto /builders/*.
+  // (Defense in depth: every data endpoint these pages call carries its own
+  // server-side gate.) /harbor sat here too until task 1003890 removed the dev
+  // box: its page is gone, and a gate in front of nothing is a dead guard.
   const WATCH_PAGE_RE = /^\/builders\/watch(?:\.html)?\/?$/;
-  const HARBOR_PAGE_RE = /^\/builders\/harbor(?:\.html)?\/?$/;
   const GATE_PAGE_RE = /^\/builders\/gate(?:\.html)?\/?$/;
   // /sessions (the session-log ledger) belongs to that same Governance group and
   // its data route (`session.search`) carries the same metic floor since ADR 0157
@@ -1020,7 +1020,7 @@ function mountInternalSurfaces(app) {
     if (isModuleSurfaceHost(req)) return next();
     if (!req.path.startsWith('/builders')) return next();
     const norm = path.posix.normalize(req.path);
-    if (WATCH_PAGE_RE.test(norm) || HARBOR_PAGE_RE.test(norm) || GATE_PAGE_RE.test(norm)
+    if (WATCH_PAGE_RE.test(norm) || GATE_PAGE_RE.test(norm)
       || SESSIONS_PAGE_RE.test(norm) || PROJECT_SETTINGS_PAGE_RE.test(norm)) {
       return gdsAuth.requireGovernmentPage(req, res, next);
     }
@@ -1201,7 +1201,7 @@ function mountInternalSurfaces(app) {
   // read behind it is gated server-side, so this closed an inconsistency rather
   // than an exposure; the point is that one URL cannot be two tiers at once.
   const SIGNEDIN_BUILDERS_PAGE_RE =
-    /^\/builders\/(?:work|pair|settings|atlas|modules|goals|roadmap|copy-desk|studio|ideas|collab|task|idea|primer(?:\.md)?|diagrams)(?:\.html)?\/?$/;
+    /^\/builders\/(?:work|settings|atlas|modules|goals|roadmap|copy-desk|studio|ideas|collab|task|idea|primer(?:\.md)?|diagrams)(?:\.html)?\/?$/;
   // The diagram image assets under /builders/diagrams/ ride the same tier as the
   // page that embeds them.
   const SIGNEDIN_BUILDERS_PREFIX_RE = /^\/builders\/diagrams\//;

package/src/module-api.js

@@ -71,7 +71,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.878'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.880'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/government_page_gates.mjs

@@ -64,7 +64,7 @@ const LIVE_RANKS = ['xenos', 'thetes', 'metic', 'archon'];
 // unaffected — it held right up to the deletion.
 //
 // ADR 0157 (owner decision, 2026-08-05) lowered `page.view.government` archon→metic, so
-// the monitoring pages (/watch, /harbor, /gate) now open to the working rank. That gate
+// the monitoring pages (/watch, /gate) now open to the working rank. That gate
 // was spelled `requireArchonPage` through R107 and ADR 0157 — the name the rows below
 // were first written against — and was renamed once the floor moved; the audience here,
 // not the name, is the contract.

package/tests/hall_landing_boot.mjs

@@ -91,7 +91,7 @@ async function boot({ meStatus }) {
       wirePager: () => {},
     },
     OTBHallRender: () => ({
-      SETUP_CONFIG_KEY: 'k', analyticsState: {}, lbState: {}, onboardingBox: () => makeEl(),
+      SETUP_CONFIG_KEY: 'k', analyticsState: {}, lbState: {},
       shipState: {}, shipsPager: { page: 1 }, welcomeDismissalKey: () => 'k',
       mountHallWidgets: spy('mountHallWidgets'),
       renderLanding: spy('renderLanding'),

package/tests/hall_nav.mjs

@@ -287,7 +287,7 @@ test('sidebar groups read by audience, in order', () => {
   // 'deploy' (task 1003159, ADR 0293) is the SECOND archon item, beside 'government':
   // its gate is the `core.pin.move` atom, archon-floor and system:true. It sits with
   // the steering surfaces because that is what it is — the owner's third release gate.
-  assert.deepEqual(nav[4].items.map((i) => i.id), ['watch', 'harbor', 'gate', 'sessions', 'project-settings', 'deploy', 'government']);
+  assert.deepEqual(nav[4].items.map((i) => i.id), ['watch', 'gate', 'sessions', 'project-settings', 'deploy', 'government']);
 });
 
 test('Economy lives in Docs and points at the reward-schedule page', () => {

package/tests/hall_oversight_world.mjs

@@ -1,5 +1,5 @@
 // tests/hall_oversight_world.mjs — the oversight family in the chrome world
-// (task 1003469, goal 1000081): government, watch, harbor and gate share one
+// (task 1003469, goal 1000081): government, watch and gate share one
 // archetype sheet (oversight.css) the way the records share record.css and the
 // reading rooms room.css. These are static pins over the shipped source: the
 // family sheet is linked and spends only the fifteen, every page renders the
@@ -17,7 +17,7 @@ import { fileURLToPath } from 'node:url';
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
 const PUB = path.join(ROOT, 'modules', 'hall-ui', 'public');
 const read = (f) => fs.readFileSync(path.join(PUB, f), 'utf8').replace(/\r\n/g, '\n');
-const PAGES = ['government', 'watch', 'harbor', 'gate'];
+const PAGES = ['government', 'watch', 'gate'];
 
 test('every oversight page links the family sheet, before its own', () => {
   for (const p of PAGES) {
@@ -76,8 +76,8 @@ test('Government renders the rank description the create form collects', () => {
   assert.match(read('government.html'), /id="gov-create-desc"/, 'the form still collects it');
 });
 
-test('Harbor and Gate carry no coloured band: state is a pill', () => {
-  for (const p of ['harbor', 'gate']) {
+test('Gate carries no coloured band: state is a pill', () => {
+  for (const p of ['gate']) {
     assert.ok(!/__roof|__seal/.test(read(`${p}.js`)), `${p}.js emits no roof or seal band`);
     assert.ok(!/__roof|__seal/.test(read(`${p}.css`)), `${p}.css has no band rule`);
     assert.match(read(`${p}.js`), /fact-pill fact-pill--/, `${p}.js paints state as a .fact-pill`);
@@ -91,7 +91,7 @@ test('the shared confirm modal sits on --z-modal, closed by one hairline and no
   const modal = css.slice(css.indexOf('.ov-modal {'), css.indexOf('.ov-modal .scroll__h'));
   assert.ok(!/box-shadow/.test(modal), 'no shadow under the dialog');
   assert.match(modal, /border: var\(--line\) solid var\(--rule\)/, 'one rule hairline');
-  for (const p of ['harbor', 'gate']) {
+  for (const p of ['gate']) {
     assert.match(read(`${p}.js`), /className = 'ov-modal-bg'/, `${p}.js opens the family modal`);
     assert.ok(!/-modal-bg/.test(read(`${p}.css`)), `${p}.css no longer styles a modal of its own`);
   }

package/tests/hall_page_gate_map.mjs

@@ -44,7 +44,6 @@ const SRC = fs.readFileSync(path.join(ROOT, 'src/bongos/serve-internal.js'), 'ut
 const ORACLE = {
   // Any signed-in builder — no rank floor.
   '/builders/work': 'requireBuilderPage',
-  '/builders/pair': 'requireBuilderPage',
   '/builders/settings': 'requireBuilderPage',
   '/builders/atlas': 'requireBuilderPage',
   '/builders/modules': 'requireBuilderPage',
@@ -74,7 +73,6 @@ const ORACLE = {
 
   // Metic+ operator surfaces (the Governance nav group).
   '/builders/watch': 'requireGovernmentPage',
-  '/builders/harbor': 'requireGovernmentPage',
   '/builders/gate': 'requireGovernmentPage',
   '/builders/sessions': 'requireGovernmentPage',
   // The five fundamentals of the project (task 1003280, goal 1000072). Same tier as
@@ -155,6 +153,14 @@ const ORACLE = {
   // catch. GONE_PAGES below keeps the row honest if the file ever returns.
   '/builders/my-projects': null,
 
+  // Gone with the dev box (task 1003890, goal 1000091). Harbor was the Archon
+  // view of the box fleet and pair the device-pairing page; the fleet was turned
+  // off at the control plane by task 1003886, so both pages drove an API that no
+  // longer answers. Their gates left serve-internal.js with them — a gate in
+  // front of nothing is the dead-guard shape the check below exists to catch.
+  '/builders/harbor': null,
+  '/builders/pair': null,
+
   // Gone too, and for a reason worth keeping in front of the next reader: this
   // was a bespoke refusal PAGE ("not yet — ship three tasks to graduate"), the
   // deniedTo of the thetes+ gate. Task 1002613 replaced that whole idea with a
@@ -278,6 +284,9 @@ const GONE_PAGES = {
   '/builders/my-projects': 'task 1003308 — the hub owns "my projects"',
   // Task 1003450 — the shell's ?denied= banner replaced the bespoke refusal page.
   '/builders/not-ready': 'task 1003450 — the shell renders the refusal from ?denied=',
+  // Task 1003890 — the dev-box deprecation removed the fleet these two drove.
+  '/builders/harbor': 'task 1003890 — the dev box is gone, so its Archon view is too',
+  '/builders/pair': 'task 1003890 — the dev box is gone, so its pairing page is too',
 };
 
 test('a row that is null because the page left the hall serves no page', () => {

package/tests/hall_record_world.mjs

@@ -354,6 +354,11 @@ function renderTask(task, { lastClaim = null, viewer = null, goal = null, goalsL
       roleOptions: () => [{ value: '', label: '— any —' }, { value: 'engineer', label: 'Engineer' }, { value: 'artist', label: 'Artist' }],
       roleIsUnset: (d) => !d || d === 'unclassified',
       ROLE_UNSET: 'unclassified',
+      // task 1004038 — the kind axis asks the same question. Stubbed for the
+      // reason the comment above gives: an undefined helper throws mid-render,
+      // and the page then renders its "feed unavailable" card instead.
+      kindIsUnset: (k) => !k || k === 'unclassified',
+      KIND_UNSET: 'unclassified',
       escapeHtml,
       $: (sel) => documentObj.querySelector(sel),
       fmtDate: (iso) => String(iso).slice(0, 10),

package/tests/hall_settings_world.mjs

@@ -1,5 +1,6 @@
 // tests/hall_settings_world.mjs — the PANEL family in the chrome world
-// (task 1003308, goal 1000081): settings, profile, pair.
+// (task 1003308, goal 1000081): settings and profile. Pair left with the dev
+// box (task 1003890).
 //
 // tests/hall_tokens.mjs pins the TIER these pages spend; this pins how they
 // spend it. Everything here is a fact that is silent in a browser: the page
@@ -9,9 +10,9 @@
 //
 // What it locks:
 //   * ONE ARCHETYPE SHEET. panel.css holds the row, the switch, the field, the
-//     chip control and the family's voices; the four page sheets hold only what
-//     one page has. Every page links panel.css BEFORE its own sheet.
-//   * THE ONE h1. None of the five had one — the hall predates the floor — so
+//     chip control and the family's voices; the page sheets hold only what one
+//     page has. Every page links panel.css BEFORE its own sheet.
+//   * THE ONE h1. None of them had one — the hall predates the floor — so
 //     every render failed one-header-main-h1. The h1 is the page's name in the
 //     room voice, and it lives in the static markup so the DOM has it in every
 //     state, not only the happy path.
@@ -26,14 +27,14 @@
 //   * WHITE ON THE ACCENT, AND THE ONE EXCEPTION. Eight literals across three
 //     sheets are gone; the Discord blurple pair stays, because it is Discord's
 //     mark and not the world's, and it is named as the exception in a comment.
-//   * THE COMPAT ALIASES. Five sheets, zero aliases spent.
+//   * THE COMPAT ALIASES. Every sheet in the family, zero aliases spent.
 //
 // Reproduce the renders these came from (the family needs the fixture harness —
 // every panel is filled from /me/* reads the kit stub does not carry):
 //   node scripts/hall-preview/server.js --port 4621 --fixture-me
 //   node modules/ui-design/kit/render.js --states modules/hall-ui/public/settings.states.json \
 //     --base-in http://builders.localhost:4621 --base-out http://builders.localhost:4621
-//   (and profile / pair .states.json the same way)
+//   (and profile .states.json the same way)
 
 import { test } from 'node:test';
 import assert from 'node:assert/strict';
@@ -48,9 +49,10 @@ const stripComments = (css) => css.replace(/\/\*[\s\S]*?\*\//g, '');
 
 // not-ready was the fourth until task 1003450 deleted the page — see
 // tests/hall_page_gate_map.mjs (GONE_PAGES) for why, and for the row that stops
-// it coming back ungated. The archetype is unaffected: three pages still spend it.
-const PAGES = ['settings', 'profile', 'pair'];
-const SHEETS = ['panel.css', 'settings.css', 'pair.css', 'profile.css'];
+// it coming back ungated; pair left the same way in task 1003890. The archetype
+// is unaffected: the pages that remain still spend it.
+const PAGES = ['settings', 'profile'];
+const SHEETS = ['panel.css', 'settings.css', 'profile.css'];
 
 const panelCss = read('panel.css');
 const settingsCss = read('settings.css');
@@ -94,7 +96,7 @@ test('the archetype holds the row, the switch, the field and the voices; the pag
   for (const sel of ['.prow', '.sw', '.sw__track', '.sw__knob', '.field-label', '.pinput', '.chip-ctl', '.panel-note', '.panel-status', '.gate']) {
     assert.ok(ruleOf(panelCss, sel), `panel.css defines ${sel}`);
   }
-  for (const sheet of ['settings.css', 'pair.css', 'profile.css']) {
+  for (const sheet of ['settings.css', 'profile.css']) {
     const css = read(sheet);
     for (const sel of ['.prow', '.sw', '.sw__track', '.pinput', '.chip-ctl']) {
       assert.equal(ruleOf(css, sel), null, `${sheet} must not redefine ${sel} — that is how the family would drift`);
@@ -104,7 +106,7 @@ test('the archetype holds the row, the switch, the field and the voices; the pag
 
 // ---- 2. the one h1, in the static markup ----------------------------------
 
-test('each of the five pages has exactly one h1, in the family\'s page head', () => {
+test('each page in the family has exactly one h1, in the family\'s page head', () => {
   for (const p of PAGES) {
     const html = read(`${p}.html`).replace(/<!--[\s\S]*?-->/g, '');
     const h1s = html.match(/<h1\b/g) || [];
@@ -301,7 +303,7 @@ test('no sheet in the family spends a compat alias', () => {
 });
 
 test('white on the accent is gone, and the Discord mark is the one named exception', () => {
-  for (const sheet of ['panel.css', 'pair.css', 'profile.css']) {
+  for (const sheet of ['panel.css', 'profile.css']) {
     const bare = stripComments(read(sheet));
     assert.doesNotMatch(bare, /#[0-9a-f]{3,8}\b/i, `${sheet} carries no colour literal`);
     assert.doesNotMatch(bare, /:\s*white\b/i, `${sheet} carries no named white`);
@@ -318,16 +320,17 @@ test('white on the accent is gone, and the Discord mark is the one named excepti
     assert.match(selector, /\.settings-btn--discord/, `${lit} is spent only on the Discord button`);
   }
   assert.match(settingsCss, /THIRD-PARTY MARK, KEPT ON PURPOSE/, 'the exception is named in a comment so a literal sweep leaves it alone');
-  // the save/accent buttons take --accent-on. `.pair-approve` and `.craft-save`
-  // are members of the base pill rule AND the save rule, so the save rule is
-  // found by its own name and the two are asserted as its members.
+  // the save/accent buttons take --accent-on. `.craft-save` is a member of the
+  // base pill rule AND the save rule, so the save rule is found by its own name
+  // and the member is asserted against it. (`.pair-approve` was its sibling here
+  // until task 1003890 removed the pair page.)
   const save = ruleOf(panelCss, '.pbtn--save');
   assert.ok(save, '.pbtn--save has a rule');
   assert.match(save, /background:\s*var\(--accent\)/);
   assert.match(save, /color:\s*var\(--accent-on\)/, 'the dark ink for the salmon — white on it fails AA');
   const saveSelector = stripComments(panelCss).match(/([^{}]*\.pbtn--save[^{}]*)\{/);
   assert.ok(saveSelector, 'the save rule\'s selector list is readable');
-  for (const member of ['.craft-save', '.pair-approve']) {
+  for (const member of ['.craft-save']) {
     assert.ok(saveSelector[1].split(',').map((s) => s.trim()).includes(member), `${member} is the accent door on its page`);
   }
 });
@@ -394,14 +397,14 @@ test('the profile identity band is a MODIFIER on the shell\'s .profile, never a
 
 // ---- 6. the floors are reproducible ------------------------------------------
 
-test('all five pages have a states file, so the floors are reproducible', () => {
+test('every page in the family has a states file, so the floors are reproducible', () => {
   for (const p of PAGES) {
     const json = JSON.parse(read(`${p}.states.json`));
     assert.equal(json.surface, 'hall-ui', `${p}.states.json names its surface`);
     assert.ok(Object.keys(json.states).length >= 2, `${p}.states.json renders more than the default state`);
   }
   assert.ok(Object.keys(JSON.parse(read('settings.states.json')).states).length >= 4, 'settings renders every rail group');
-  for (const fx of ['me__sessions', 'auth__app-pair__info']) {
+  for (const fx of ['me__sessions']) {
     assert.ok(fs.existsSync(path.join(ROOT, 'scripts', 'hall-preview', 'fixtures', `${fx}.json`)),
       `the harness serves ${fx} — without it the page only ever rendered its empty state`);
   }

package/tests/kind_axis_unset.mjs

@@ -0,0 +1,195 @@
+// tests/kind_axis_unset.mjs — the KIND axis never reads its column default to a
+// person (task 1004038, goal 1000095).
+//
+// The twin of the role axis task 1003936 fixed. `tasks.kind` defaults to
+// 'unclassified'; docs/voice.md V2 says a value that exists because a column
+// needed a default is not a word a person should read. Before this, the word
+// reached a reader on four surfaces: the Goals page row tag, the Tasks board row
+// tag, the backlog history row, and every Kind filter's option list.
+//
+// The line this holds — the same one 1003936 drew: the STORED value and the
+// FILTER VALUE stay 'unclassified'. Only what is READ changes. A test that let
+// the value change would be pinning the wrong half.
+
+import { test } from 'node:test';
+import assert from 'node:assert/strict';
+import fs from 'node:fs';
+import path from 'node:path';
+import vm from 'node:vm';
+import { fileURLToPath } from 'node:url';
+
+const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
+const HALL = path.join(ROOT, 'modules', 'hall-ui', 'public');
+const read = (f) => fs.readFileSync(path.join(HALL, f), 'utf8');
+
+// The real dom-utils.js, booted the way the pages boot it, so these are the
+// functions that ship and not a restatement of them.
+function loadOTB() {
+  const mkEl = () => ({
+    value: '', textContent: '', length: 0, children: [],
+    appendChild(c) { this.children.push(c); this.length = this.children.length; },
+    setAttribute() {}, addEventListener() {},
+  });
+  const sandbox = {
+    window: { __BRANDING__: {}, __MODULES__: { enabled: {} }, addEventListener() {} },
+    document: { createElement: mkEl, getElementById: () => null, querySelector: () => null,
+      querySelectorAll: () => [], addEventListener() {} },
+    console,
+  };
+  sandbox.globalThis = sandbox;
+  vm.createContext(sandbox);
+  vm.runInContext(read('dom-utils.js'), sandbox, { filename: 'dom-utils.js' });
+  return { OTB: sandbox.window.OTB };
+}
+
+test('the unset kind is asked about, not spelled, and the stored value is untouched', () => {
+  const { OTB } = loadOTB();
+  assert.equal(OTB.KIND_UNSET, 'unclassified',
+    'the STORED value is still the column default — this fix changes reading, not writing');
+  assert.equal(OTB.kindIsUnset('unclassified'), true);
+  assert.equal(OTB.kindIsUnset(''), true, 'a missing kind is unset too');
+  assert.equal(OTB.kindIsUnset(null), true);
+  assert.equal(OTB.kindIsUnset(undefined), true);
+  assert.equal(OTB.kindIsUnset('bug'), false, 'a real kind is never unset');
+  assert.equal(OTB.kindIsUnset('verify'), false);
+});
+
+test('a kind is named for a reader, and the unset one is named a phrase a person would say', () => {
+  const { OTB } = loadOTB();
+  assert.equal(OTB.kindLabel('unclassified'), 'No kind yet',
+    "the column's word never reaches a reader");
+  assert.doesNotMatch(OTB.kindLabel('unclassified'), /unclassified/i);
+  // The labels task 1003453 shipped are unchanged — this fix adds a case, it
+  // does not restyle the vocabulary.
+  assert.equal(OTB.kindLabel('bug'), 'Bug');
+  assert.equal(OTB.kindLabel('blocker-resolution'), 'Blocker resolution');
+  assert.equal(OTB.kindLabel('learning-capture'), 'Learning capture');
+});
+
+test('EVERY Kind picker names the unset bucket, filters included — and keeps its value', () => {
+  const { OTB } = loadOTB();
+  const sel = { value: '', length: 1, options: [],
+    appendChild(o) { this.options.push(o); this.length = this.options.length + 1; } };
+  // A FILTER: `label` is identity, as work.js and goals-page.js pass it. Before
+  // this fix that identity function is exactly what leaked the column's word.
+  OTB.fillKindFilter(sel, ['bug', 'verify', 'unclassified'], { keepFirst: 1 });
+  const unset = sel.options.find((o) => o.value === 'unclassified');
+  assert.ok(unset, 'the unset bucket is still SELECTABLE — a filter you cannot apply is a lost lens');
+  assert.equal(unset.value, 'unclassified', 'and it still filters on the stored value');
+  assert.equal(unset.textContent, 'No kind yet', 'but it READS as a phrase');
+  // The real kinds still honour the caller's label choice.
+  assert.equal(sel.options.find((o) => o.value === 'bug').textContent, 'bug',
+    "a filter's raw-value labelling for real kinds is unchanged");
+});
+
+// ---- the render sites ------------------------------------------------------
+// Source pins, the idiom tests/hall_board_world.mjs uses for the role twin: a
+// row tag is built in a template literal that no unit test can reach without
+// booting the whole page.
+
+const goalsRender = read('goals-render.js');
+const workJs = read('work.js');
+const taskJs = read('task.js');
+
+// Every `t.kind` USE in the two files is accounted for — the structural form,
+// not a pattern match. task 1004038's first round asserted the literal
+// `t.kind || 'unclassified'` was gone, which was true and still missed
+// taskRowsDone()'s `t.kind || '—'`: a different spelling of the same bug, in a
+// file the diff was already editing. `||` cannot guard this axis AT ALL, because
+// the default is the truthy string 'unclassified' — so the test has to enumerate
+// every use and demand each one either guards or is a declared non-render.
+// Each scanned file split ONCE at module load — the scan below reads these, so
+// adding a case costs no re-read (the per-test split was the round-2 note).
+const scanned = (src) => {
+  const all = src.split('\n');
+  return { raw: src, all, hits: all.map((l, i) => [l, i]).filter(([l]) => l.includes('t.kind')) };
+};
+
+const USES = {
+  'goals-render.js': {
+    src: scanned(goalsRender),
+    // A use that never reaches a reader, each with the reason it is exempt.
+    nonRender: {
+      "case 'kind': return String(t.kind || '').toLowerCase();": 'a SORT key — compared, never displayed',
+      "if (kFilter && (t.kind || window.OTB.KIND_UNSET) !== kFilter) return false;": 'the filter PREDICATE — must use the stored value',
+    },
+  },
+  'work.js': {
+    src: scanned(workJs),
+    nonRender: {
+      'if (f.kind && t.kind !== f.kind) return false;': 'the board filter PREDICATE — stored value again',
+    },
+  },
+  // Round 2 found the RECORD page reading the word too, via `if (t.kind)` — which
+  // is not a guard, because the default is truthy. Enumerating the file here is
+  // what stops the next one being found by a grader instead of by this test.
+  'task.js': {
+    src: scanned(taskJs),
+    nonRender: {
+      "if (t.kind === 'verify' && !window.confirm(": 'a BRANCH on the value — gates a confirm prompt, renders nothing',
+      "const body = t.kind === 'verify' ? { verified: true } : {};": 'a REQUEST body — sent to the route, never displayed',
+    },
+  },
+};
+
+test('every t.kind use either goes through kindIsUnset or is a declared non-render', () => {
+  for (const [name, { src, nonRender }] of Object.entries(USES)) {
+    const { all, hits } = src;
+    assert.ok(hits.length, `${name} has t.kind uses to check`);
+    for (const [raw, i] of hits) {
+      const line = raw.trim();
+      if (line.startsWith('//') || line.startsWith('*')) continue; // prose about the axis
+      if (Object.keys(nonRender).some((k) => line.includes(k.trim()))) continue;
+      // The guard may be a multi-line ternary whose `?`/`:` arms sit on their own
+      // lines (goals-render.js writes it that way), so the window is the
+      // statement, not the line — two lines back is enough for every form here.
+      const stmt = all.slice(Math.max(0, i - 2), i + 1).join('\n');
+      assert.match(stmt, /kindIsUnset/,
+        `${name}: this t.kind use neither guards nor is declared a non-render — `
+        + `if it renders, the column's word reaches a reader:\n    ${line}`);
+    }
+  }
+});
+
+test('the column default is TRUTHY, so `||` can never be the guard', () => {
+  // The fact that makes the finding above a bug rather than a style note, and
+  // the reason no render site may fall back with `||`. Pinned so a future reader
+  // does not "simplify" a kindIsUnset() call back into a falsy check.
+  const { OTB } = loadOTB();
+  assert.ok(OTB.KIND_UNSET, 'the default is a non-empty string');
+  assert.equal(!!(OTB.KIND_UNSET || '—'), true, '`t.kind || fallback` keeps the default, never the fallback');
+  assert.equal(OTB.KIND_UNSET || '—', 'unclassified', 'which is exactly the word that must not be read');
+  for (const [name, { src }] of Object.entries(USES)) {
+    assert.doesNotMatch(src.raw, /escapeHtml\(t\.kind \|\|/,
+      `${name} never renders a \`||\` fallback for the kind axis — it cannot fire`);
+  }
+});
+
+test('a kind nobody set renders NO tag, exactly as an unset role does', () => {
+  for (const [name, src] of [['goals-render.js', goalsRender], ['work.js', workJs]]) {
+    assert.match(src, /window\.OTB\.kindIsUnset\(t\.kind\)/,
+      `${name} asks the vocabulary whether the kind is set`);
+    assert.match(src, /kindTag/, `${name} renders through the guarded tag`);
+  }
+  // The backlog history row is the third surface and the easiest to miss — it
+  // rendered `t.kind || ''`, which is empty-safe but says 'unclassified' out loud.
+  const history = workJs.slice(workJs.indexOf('class="history__row"'));
+  assert.match(history, /kindIsUnset\(t\.kind\) \? '' : escapeHtml\(t\.kind\)/,
+    'the backlog history row is guarded too');
+});
+
+test("a TABLE cell keeps its placeholder — 'no tag' is not 'no cell'", () => {
+  // taskRowsDone()'s Completed ledger is a table: a vanished <td> would shift
+  // every following column. It guards like the rest but falls back to the
+  // em-dash the ledger already used for an empty cell.
+  const done = goalsRender.slice(goalsRender.indexOf('function taskRowsDone'));
+  assert.match(done.slice(0, done.indexOf('function ', 10)), /kindIsUnset\(t\.kind\) \? '—' : escapeHtml\(t\.kind\)/,
+    'the ledger cell is guarded and still renders a placeholder');
+});
+
+test('the filter PREDICATE still compares against the stored value', () => {
+  // If this ever reads the label instead, every Kind filter silently matches
+  // nothing and the board looks empty rather than broken.
+  assert.match(goalsRender, /t\.kind \|\| window\.OTB\.KIND_UNSET/,
+    'the goals-page predicate defaults to the stored value, through the constant');
+});