@bongos/core 1.19.907 → 1.19.910

package/docs/copy-registry.json

@@ -541,7 +541,7 @@
       "text": "Asked {…}",
       "occurrences": 2,
       "at": [
-        "modules/hall-ui/public/collab.js:58",
+        "modules/hall-ui/public/collab.js:66",
         "modules/hall-ui/public/watch.js:488"
       ]
     },
@@ -2412,7 +2412,7 @@
       "surface": "builders-hall",
       "text": "All open asks",
       "file": "modules/hall-ui/public/collab.html",
-      "line": 71,
+      "line": 73,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -2511,7 +2511,7 @@
       "surface": "builders-hall",
       "text": "Answering is optional and declining costs nothing. Nobody is assigned by being asked.",
       "file": "modules/hall-ui/public/collab.html",
-      "line": 97,
+      "line": 100,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -2628,7 +2628,7 @@
       "surface": "builders-hall",
       "text": "Asked {…}",
       "file": "modules/hall-ui/public/collab.js",
-      "line": 58,
+      "line": 66,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -3519,7 +3519,7 @@
       "surface": "builders-hall",
       "text": "Copy for Session Start",
       "file": "modules/hall-ui/public/collab.js",
-      "line": 90,
+      "line": 98,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -3771,7 +3771,7 @@
       "surface": "builders-hall",
       "text": "Could not load requests — reload to try again.",
       "file": "modules/hall-ui/public/collab.js",
-      "line": 529,
+      "line": 551,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -6471,7 +6471,7 @@
       "surface": "builders-hall",
       "text": "Mingle pairs you with someone from another role. Saying no costs nothing.",
       "file": "modules/hall-ui/public/collab.html",
-      "line": 87,
+      "line": 90,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -6840,7 +6840,7 @@
       "surface": "builders-hall",
       "text": "No introductions right now. One appears here when a pairing round runs.",
       "file": "modules/hall-ui/public/collab.html",
-      "line": 90,
+      "line": 93,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -7002,7 +7002,7 @@
       "surface": "builders-hall",
       "text": "Nobody has an open ask right now.",
       "file": "modules/hall-ui/public/collab.html",
-      "line": 75,
+      "line": 78,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -7011,7 +7011,7 @@
       "surface": "builders-hall",
       "text": "Nobody is waiting on you. Requests reach you by role —",
       "file": "modules/hall-ui/public/collab.html",
-      "line": 53,
+      "line": 54,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -7056,7 +7056,7 @@
       "surface": "builders-hall",
       "text": "Not now",
       "file": "modules/hall-ui/public/collab.js",
-      "line": 435,
+      "line": 457,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -8064,7 +8064,7 @@
       "surface": "builders-hall",
       "text": "Read the full ask",
       "file": "modules/hall-ui/public/collab.js",
-      "line": 90,
+      "line": 98,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -8667,7 +8667,7 @@
       "surface": "builders-hall",
       "text": "Say yes",
       "file": "modules/hall-ui/public/collab.js",
-      "line": 435,
+      "line": 457,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -8982,7 +8982,7 @@
       "surface": "builders-hall",
       "text": "Show all {…}",
       "file": "modules/hall-ui/public/collab.js",
-      "line": 253,
+      "line": 275,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -9189,7 +9189,7 @@
       "surface": "builders-hall",
       "text": "Someone helped",
       "file": "modules/hall-ui/public/collab.js",
-      "line": 203,
+      "line": 211,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -11232,7 +11232,7 @@
       "surface": "builders-hall",
       "text": "You have no open asks.",
       "file": "modules/hall-ui/public/collab.html",
-      "line": 64,
+      "line": 66,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -11295,7 +11295,7 @@
       "surface": "builders-hall",
       "text": "Your asks",
       "file": "modules/hall-ui/public/collab.html",
-      "line": 61,
+      "line": 62,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -12600,7 +12600,7 @@
       "surface": "builders-hall",
       "text": "set yours in Settings",
       "file": "modules/hall-ui/public/collab.html",
-      "line": 54,
+      "line": 55,
       "origin": "html-text",
       "confidence": "certain"
     },

package/docs/file-map.md

@@ -140,6 +140,9 @@
 │   ├── ui-design/               ← CORE-DOMAIN module (task 1003324 / ADR 0197, default-on): the design capability every builder on every instance gets — ships METHOD, never a world. Absorbs ADR 0081's layer: adapters/{claude-design,figma}/index.js (moved from src/ui/adapters/), scripts/{design-sync,figma-design-sync,validate-design}.js (moved from scripts/gds/, which keeps thin shims), docs/design-contract.md (moved from docs/). Declaration-only: contributes.skills design (the /design playbook, new) + design-sync + figma-design-sync; no routes/port/migrations, so disabling it touches no served surface. CLAUDE.md separates the platform FLOORS (the Fifteen Rule, the dark twins, no page :root, the 24px floor, AA in both modes, the kill switch) from the instance's WORLD (its packs + DESIGN.md). kit/ (task 1003320) is the look-before-you-ship kit: lib.js (the floors, the states/probes contracts, the action + expectation vocabularies, the WCAG maths, the stub spawner), serve.js (any surface through the doorway's real transforms + fixtures/), render.js (states × 1440/390/320 × dark/light, audited), probe.js (PASS/FAIL contracts), check-mock.js (platform rules + the instance's DESIGN.md taste bans, then the detector), tells.js (task 1003329 / ADR 0223: the anti-pattern detector as two tiers — floors FAIL, craft tells WARN, kit-ignore waivers per file; the rendered twins live in lib.js factsInPage), contrast.js + png.js; a page's <page>.states.json / <page>.probes.json sit BESIDE the surface (modules/public-landing/public/, modules/hall-ui/public/). Recipe: docs/recipes/ui-look-before-you-ship.md. skills/ (task 1003321 / ADR 0198) is the vendoring policy: policy.json (licence allowlist, verdicts that may land, sidecar fields, preamble markers), PREAMBLE.md (the platform preamble every vendored SKILL.md opens with), README.md (the roster — both origins scanned dangerous on 2026-08-28, landed as rebuild specs; nothing vendored — and the landing recipe); a landable copy goes under skills/vendor/<name>/ with PROVENANCE.md + LICENSE and is materialised into an instance's .claude/skills/ by claude-materialize.js step 1b. skills/<name>/ (task 1003325 / ADR 0220) are the in-house rebuilds from the specs, first-party and counted: design-taste-frontend (the default taste skill), design-taste-frontend-v1 (the earlier generation, kept distinct), high-end-visual-design (the polish pass), redesign-existing-projects (the in-place upgrade); each opens with the same preamble and carries a "Rebuilt from" section instead of a sidecar. impeccable/ (task 1003326 / ADR 0221) is the design-craft method as ONE skill with sub-commands: SKILL.md (the router, the menu, the craft floor, the bounded finish) + reference/<sub-command>.md (eighteen playbooks, one loaded per request); no hooks, no bypass agent, no telemetry, no live server. minimalist-ui/, industrial-brutalist-ui/, gpt-taste/, stitch-design-taste/ (task 1003327 / ADR 0230) are the four looks, composition grammars with no colours of their own: the palette is the instance's pack and the texture is a named entry in styles/; a substrate is an archetype that still ships both modes, gpt-taste's selection is derived from the route rather than rolled, and stitch-design-taste writes a DESIGN.md-shaped contract document whose thirteen are transcribed from the pack. image-to-code/, imagegen-frontend-web/, imagegen-frontend-mobile/, brandkit/ (task 1003328 / ADR 0222) are the image family under the hero-only rule: plates and hero objects only, the pair (JPEG dark plate + WebP alpha cutout) with a <file>.json sidecar beside each, through the instance's art pipeline key; the grove specimen's styles/grove/assets/ is the worked example. style/ (task 1003475 / ADR 0231) is the module's first FIRST-PARTY skill (no upstream, so a `## First party` section instead of `## Rebuilt from`): the /style session in which an owner authors their own look in four bounded steps, rendering the nearest library entries before asking, drafting inside the contract, retuning by measurement, and handing over the one-step adoption without ever writing config/branding.json. styles/ (task 1003323 / ADR 0219) is the style library: <name>/pack.json (the theme.ui overlay, exactly the fifteen) + DESIGN.md (the look's derived recipes, thirteen in lockstep with the pack) + mock.html (the specimen); chrome-world (pinned to the neutral pack), expedition, grove, blueprint (the first cool look, authored through /style at task 1003475); STYLE=<name> on the kit lays a look over the instance's pack through GDS_BRANDING_FILE; tests/ui_design_styles.mjs runs the world/cosmos/hall token suites once per alternate (UI_DESIGN_PACK). config/design-tokens.* + design-sources.json STAY in config/ as the host boundary; public-landing keeps its own key (first customer, not owner).
 │   ├── character-anim/          ← consistent-character generative animation (ADR 0088) — graded painterly frame sets + manifest, the otb-character-review skill. CLAUDE.md, module.json.
 │   ├── provisioning/            ← stands up + operates a Cloud Bongos instance's own infra (server/DB/domain/DNS/TLS) via the API (ADR 0111); web-tier request+state only, no cloud tokens — a separate control-plane runner drains the intents. Distinct from the `hosting` module (ADR 0092), which brokers compute workloads. CLAUDE.md, module.json.
+│   ├── government/              ← CORE-DOMAIN module (ADR 0151 / BV1 goal 1000030, renamed governance→government by ADR 0174, default-on): Discord-style configurable ranks + permissions. The PERMISSION is the atomic authority unit and the four ranks (xenos/thetes/metic/archon) are the positions in the government; the module owns the code-defined permission catalog — each key flagged `system` (trust-boundary), `substrate` (enforced out of band) or operational (delegable) — plus the compatibility seed that reproduces the old rank thresholds exactly. ADR 0016 is preserved: authority is still resolved server-side, per request, uncached. The word `role` is deliberately absent — it is reserved for the crafts. CLAUDE.md, module.json, catalog.js, ranks.js, resolver.js, config.js, db.js, board.js + board-membership.js + membership-predicate.js, session-scopes.{js,json}, protected-surfaces.{js,json}, routes/ (government + rank-sync), pollers/ (board-expiry), migrations/.
+│   ├── specialities/            ← CORE-DOMAIN module (task 1003855 / ADR 0296, default-on): role SUB-SPECIALITIES — a named bundle of knowledge, skills and an interaction contract sitting UNDER a craft. A craft says HOW you work (engineer/ideator/artist/ui); a speciality says WHAT you work on, and how a subject-matter expert wants to be engaged inside it. Deliberately thin over three surfaces that already exist — discipline-modes.json for craft→playbook, behavior_prefs.interaction for the per-session contract (a speciality contract rides the SAME GET /me → Conductor path rather than adding a second one), and the ADR 0083 manifest for declared skills; the only new machinery is the knowledge bundle. Training is two-fold: documents the builder supplied, plus learnings captured from sessions worked in the speciality (pointing at existing `learnings` rows, never a second corpus). Owned per-builder OR per-project, each carrying its owner's sharing decision (private/project/public) and a sellable flag that records INTENT only — ADR 0107 defers the marketplace, so there is nothing to list on. CLAUDE.md, module.json, specialities.js, db.js, routes/, migrations/.
+│   ├── agents/                  ← declarative agent registry (BV1 goal 1000038 Phase 1) — the one module that ships `default:false`, so shipped is not enabled and an instance opts in per ADR 0083. `.claude/agents/*.md` are reconciled at deploy into `agents_definitions` plus the per-fire `agents_runs` ledger; files-are-source (an instance-authored DB row is never clobbered), and `author_rank` is stamped from the author's LIVE DB rank because a committed file cannot grant authority (ADR 0016). Spawns consume the EXISTING read-only `grade` port, so v1 agents are observe-and-report only — no write principals — and every fire bills through the shared LLM cost cache. `spend.requiresPayer` (task 1003884): a fire spends real money for whoever called it, so the core REFUSES to enable the module on an instance whose join door is `open` with no payer configured — an account created seconds ago would otherwise spend the instance's money with nobody to bill. lib/spend-ceiling.js is the per-payer monthly ceiling, failing closed when it is exhausted OR unreadable; lib/fire-budget.js is the separate RATE ceiling. CLAUDE.md, module.json, spawn.js, lib/, routes/, pollers/ (event-router), migrations/.
 │   └── demo/                    ← BV1.R52 acceptance-proof module: one rank-gated write route + one namespaced migration proving the loader mounts a scaffolded module with zero core edits. CLAUDE.md, module.json.
 │
 ├── scripts/

package/docs/module-api-changelog.md

@@ -2288,5 +2288,11 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.905 with no explicit bump. run 35514202453. (task 1002620)
   1.19.907 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.906 with no explicit bump. run 35514739370. (task 1002620)
+  1.19.908 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.907 with no explicit bump. run 35516559010. (task 1002620)
+  1.19.909 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.908 with no explicit bump. run 35517426559. (task 1002620)
+  1.19.910 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.909 with no explicit bump. run 35519713709. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/hall-ui/public/collab-lib.js

@@ -73,6 +73,75 @@
     return 'waiting ' + weeks + ' weeks';
   }
 
+  // A PILL MARKS A ROW WORSE THAN ITS ROOM (task 1004067, from idea 1001065).
+  //
+  // Task 1004041 fixed half of this: the words now carry the real age, and the
+  // two calm bands lost their ring. What it could not fix from inside a single
+  // row is the case the report is actually about — a room where EVERY row is
+  // genuinely past a week. There the condition is not too loose; it is correct
+  // on all fourteen, and fourteen correct alarms are still not a signal. The
+  // instrument is wrong, not the threshold: a per-row badge can only say "this
+  // row is bad", and it has no way to say "this row is bad AND so is every other
+  // one", which is the fact a reader needs.
+  //
+  // So the room states its own condition once, in the block head, and a row
+  // wears the pill only when it is MORE SEVERE than that baseline. On a mixed
+  // board no band is dominant, nothing is muted, and the page reads exactly as
+  // it does today. On a uniformly stale board the alarm is said once instead of
+  // fourteen times, and the per-row words still carry each real age — so nothing
+  // goes silently dead, which is the criterion the bands exist to satisfy.
+  //
+  // Two dials, both deliberately blunt. A room under BASELINE_MIN_ROWS is not a
+  // wall — four pills can be read one at a time, so a short list keeps every
+  // one. BASELINE_SHARE is below 1 because thirteen-of-fourteen reads as a wall
+  // just as much as fourteen does, and a rule that only fires on unanimity is a
+  // rule that almost never fires.
+  var BASELINE_MIN_ROWS = 4;
+  var BASELINE_SHARE = 0.7;
+
+  // Only a band that actually WEARS a pill can be a baseline (severity >= 2 —
+  // aging and stale; collab.css rings those two and leaves the calm pair as
+  // plain text). A room that is uniformly 'just asked' has no alarm to move to
+  // the head, and announcing one there would invent the very noise this removes.
+  function roomBaseline(reqs, nowMs) {
+    var list = Array.isArray(reqs) ? reqs : [];
+    if (list.length < BASELINE_MIN_ROWS) return null;
+    var counts = {};
+    for (var i = 0; i < list.length; i += 1) {
+      var id = ageBand(list[i] && list[i].created_at, nowMs).id;
+      counts[id] = (counts[id] || 0) + 1;
+    }
+    // BANDS is severest-first, and two bands cannot both clear a share above a
+    // half, so the first match is the only match.
+    for (var j = 0; j < BANDS.length; j += 1) {
+      var band = BANDS[j];
+      var n = counts[band.id] || 0;
+      if (band.severity >= 2 && n / list.length >= BASELINE_SHARE) {
+        return { band: band, count: n, total: list.length };
+      }
+    }
+    return null;
+  }
+
+  // At or below the room's baseline, a row is the rule and reads quiet; above
+  // it, a row is the exception and keeps its pill. With no baseline nothing is
+  // quieted, which is what makes this inert on every mixed board.
+  function isRoomQuiet(band, baseline) {
+    if (!band || !baseline) return false;
+    return band.severity <= baseline.band.severity;
+  }
+
+  // The fact the pills used to repeat, said once. The band's own label supplies
+  // the words, so the head and the rows can never describe the same threshold
+  // two different ways.
+  function roomAgeLine(baseline) {
+    if (!baseline) return '';
+    var many = baseline.count === baseline.total
+      ? 'all ' + baseline.total
+      : baseline.count + ' of ' + baseline.total;
+    return many + ' ' + baseline.band.label;
+  }
+
   // Oldest first WITHIN the page, because the thing most at risk of dying
   // silently should be read first. This is in ADDITION to the band, never
   // instead of it.
@@ -336,6 +405,8 @@
 
   window.OTBCollabLib = {
     BANDS: BANDS, ageBand: ageBand, ageLabel: ageLabel,
+    roomBaseline: roomBaseline, isRoomQuiet: isRoomQuiet, roomAgeLine: roomAgeLine,
+    BASELINE_MIN_ROWS: BASELINE_MIN_ROWS, BASELINE_SHARE: BASELINE_SHARE,
     byAgeOldestFirst: byAgeOldestFirst, byNewestFirst: byNewestFirst,
     askerOf: askerOf, contextOf: contextOf,
     directionLine: directionLine, boardLine: boardLine,

package/modules/hall-ui/public/collab.css

@@ -43,6 +43,33 @@
   padding-right: 0;
 }
 
+/* THE ROOM'S OWN CONDITION IS NOT A PER-ROW WARNING (task 1004067). When a
+   block is uniformly old, every row's band is correct and every row's pill is
+   therefore identical — the wall the report describes. A row at or below its
+   room's baseline drops to the same plain quiet text the calm bands wear, so
+   the only chips left in the column are the rows that are worse than their
+   room. Two classes, so this outranks the band ink it replaces without an
+   !important. The WORDS are untouched: each row still states its own real age,
+   which is what keeps an old ask visibly aging rather than silently dead. */
+.cb-age.cb-age--quiet {
+  color: var(--ink-soft);
+  border-color: transparent;
+  padding-left: 0;
+  padding-right: 0;
+  font-weight: 400;
+}
+
+/* The fact the chips used to repeat, stated once in the head. It sits in the
+   band's own ink because here it IS the exception — one line on a page, not one
+   per row — and it is the only thing on the head that is allowed to be loud. */
+.cb-block__age {
+  font-size: 13px;
+  letter-spacing: 0;
+  color: var(--ink-soft);
+}
+.cb-block__age--aging { color: var(--warn); }
+.cb-block__age--stale { color: var(--danger); font-weight: 600; }
+
 /* ---- the figure strip -----------------------------------------------------
    The shell's .stat-row, unchanged, except that this page's third tile holds
    WORDS (the roles you answer for) rather than a figure. The shell's own

package/modules/hall-ui/public/collab.html

@@ -46,6 +46,7 @@
           <section class="scroll cb-block" aria-labelledby="cb-for-me-h">
             <div class="cb-block__head">
               <h2 class="scroll__h" id="cb-for-me-h">Asked of you <span class="cb-block__n" id="cb-for-me-n"></span></h2>
+              <span class="cb-block__age" id="cb-for-me-age" hidden></span>
               <span class="cb-faces" id="cb-for-me-faces" aria-hidden="true"></span>
             </div>
             <ul class="ov-rows" id="cb-for-me"></ul>
@@ -59,6 +60,7 @@
           <section class="scroll cb-block" aria-labelledby="cb-mine-h">
             <div class="cb-block__head">
               <h2 class="scroll__h" id="cb-mine-h">Your asks <span class="cb-block__n" id="cb-mine-n"></span></h2>
+              <span class="cb-block__age" id="cb-mine-age" hidden></span>
             </div>
             <ul class="ov-rows" id="cb-mine"></ul>
             <div class="empty-state cb-empty" id="cb-mine-empty" hidden><p>You have no open asks.</p></div>
@@ -69,6 +71,7 @@
         <section class="scroll cb-block cb-block--all" aria-labelledby="cb-all-h">
           <div class="cb-block__head">
             <h2 class="scroll__h" id="cb-all-h">All open asks <span class="cb-block__n" id="cb-all-n"></span></h2>
+              <span class="cb-block__age" id="cb-all-age" hidden></span>
             <span class="cb-faces" id="cb-all-faces" aria-hidden="true"></span>
           </div>
           <ul class="ov-rows" id="cb-all"></ul>

package/modules/hall-ui/public/collab.js

@@ -53,9 +53,17 @@
   // exact timestamp stays on the title, where a reader who wants the date can
   // still reach it — which is also why the separate date line that used to sit
   // under this pill is gone: the same fact twice is one fact too many.
-  function ageChip(req, nowMs) {
+  //
+  // `baseline` is the block's own room condition (L.roomBaseline), and it is the
+  // second half of the same verdict: where the label stops fourteen old rows
+  // reading as fourteen copies of one alarm, the baseline stops them WEARING
+  // fourteen copies of one alarm. A row at or below its room's baseline is the
+  // rule, not the exception, so it drops the ring and the danger ink and keeps
+  // only its words — the head says the room's condition once instead.
+  function ageChip(req, nowMs, baseline) {
     const band = L.ageBand(req.created_at, nowMs);
-    return `<span class="fact-pill cb-age cb-age--${band.id}" title="Asked ${escapeHtml(String(req.created_at || ''))}">${escapeHtml(L.ageLabel(req.created_at, nowMs))}</span>`;
+    const quiet = L.isRoomQuiet(band, baseline) ? ' cb-age--quiet' : '';
+    return `<span class="fact-pill cb-age cb-age--${band.id}${quiet}" title="Asked ${escapeHtml(String(req.created_at || ''))}">${escapeHtml(L.ageLabel(req.created_at, nowMs))}</span>`;
   }
 
   // A DOM id per row that is stable, unique and safe to put in an attribute. The
@@ -175,14 +183,14 @@
   // chat mirror). What the page owes a helper is the request, its age, its
   // context, and who to answer — and their face. A by-name ask is the personal
   // call on this reader, so its row is the LIT one (.cb-row--live).
-  function forMeRow(req, nowMs, extra, key) {
+  function forMeRow(req, nowMs, extra, key, baseline) {
     const live = req.needs_builder_id != null ? ' cb-row--live' : '';
     return `<li class="ov-row ov-row--lead cb-row${live}" data-id="${escapeHtml(String(req.id))}"${extra ? ' data-extra hidden' : ''}>
       ${faceHtml(L.faceOf(req, 'in'))}
       <div class="ov-row__main">${askHtml(req, key)}
         <div class="ov-row__facts">${directionFact(req, 'in')}${contextChip(req)}</div>
       </div>
-      <div class="ov-row__right">${ageChip(req, nowMs)}</div>
+      <div class="ov-row__right">${ageChip(req, nowMs, baseline)}</div>
     </li>`;
   }
 
@@ -198,12 +206,12 @@
   // which is precisely the distinction a reader could no longer make. Moving the
   // pill down to the facts line puts the warning with the other facts about the
   // ask and leaves the right column as what it is here: the place you act.
-  function mineRow(req, nowMs, extra, key) {
+  function mineRow(req, nowMs, extra, key, baseline) {
     const id = escapeHtml(String(req.id));
     return `<li class="ov-row ov-row--lead cb-row" data-id="${id}"${extra ? ' data-extra hidden' : ''}>
       ${faceHtml(L.faceOf(req, 'out'))}
       <div class="ov-row__main">${askHtml(req, key)}
-        <div class="ov-row__facts">${directionFact(req, 'out')}${contextChip(req)}${ageChip(req, nowMs)}</div>
+        <div class="ov-row__facts">${directionFact(req, 'out')}${contextChip(req)}${ageChip(req, nowMs, baseline)}</div>
       </div>
       <div class="ov-row__right">
         <div class="ov-row__actions">
@@ -216,13 +224,13 @@
 
   // A row on the board of everyone's asks: the asker's face, the third-person
   // line, no actions — settling is the asker's, in their own block.
-  function allRow(req, nowMs, extra, key) {
+  function allRow(req, nowMs, extra, key, baseline) {
     return `<li class="ov-row ov-row--lead cb-row" data-id="${escapeHtml(String(req.id))}"${extra ? ' data-extra hidden' : ''}>
       ${faceHtml(L.faceOf(req, 'in'))}
       <div class="ov-row__main">${askHtml(req, key)}
         <div class="ov-row__facts">${boardFact(req)}${contextChip(req)}</div>
       </div>
-      <div class="ov-row__right">${ageChip(req, nowMs)}</div>
+      <div class="ov-row__right">${ageChip(req, nowMs, baseline)}</div>
     </li>`;
   }
 
@@ -235,13 +243,27 @@
   function paintBlock(key, rows, rowFn, nowMs, faces) {
     const list = rows.slice().sort(L.byNewestFirst);
     const { shown, hidden } = L.splitShown(list, SHOWN);
+    // Over the WHOLE list, not the shown three: the door hides rows, it does not
+    // change what the room is, and a baseline that flipped when someone pressed
+    // "Show all" would re-alarm the rows it had just quieted.
+    const baseline = L.roomBaseline(list, nowMs);
     const host = $(`#cb-${key}`);
     if (host) {
-      host.innerHTML = shown.map((r) => rowFn(r, nowMs, false, key)).join('')
-        + hidden.map((r) => rowFn(r, nowMs, true, key)).join('');
+      host.innerHTML = shown.map((r) => rowFn(r, nowMs, false, key, baseline)).join('')
+        + hidden.map((r) => rowFn(r, nowMs, true, key, baseline)).join('');
     }
     const n = $(`#cb-${key}-n`);
     if (n) n.textContent = list.length ? String(list.length) : '';
+    // The room's condition, said once, beside the count that scopes it.
+    const age = $(`#cb-${key}-age`);
+    if (age) {
+      const line = L.roomAgeLine(baseline);
+      age.textContent = line;
+      age.hidden = !line;
+      age.className = line
+        ? `cb-block__age cb-block__age--${baseline.band.id}`
+        : 'cb-block__age';
+    }
     const empty = $(`#cb-${key}-empty`);
     if (empty) empty.hidden = list.length > 0;
     const facesEl = $(`#cb-${key}-faces`);

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.907",
+  "version": "1.19.910",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.907",
+      "version": "1.19.910",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.907",
+  "version": "1.19.910",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/scripts/gds/fitness.js

@@ -225,7 +225,7 @@ function checkGeneratedArtifactsFresh() {
   try {
     execFileSync(process.execPath, [path.join(__dirname, 'gen-file-map.js'), '--check'], { cwd: REPO_ROOT, stdio: 'pipe' });
   } catch {
-    violations.push('docs/file-map.md generated sections (.claude/skills/, .claude/scheduled-tasks/) are STALE or a skill/routine has no note in docs/file-map.notes.json — run `node scripts/gds/gen-file-map.js` and add any missing note, then commit (ADR 0066).');
+    violations.push('docs/file-map.md generated sections (.claude/skills/, .claude/scheduled-tasks/) are STALE, a skill/routine has no note in docs/file-map.notes.json, or a directory under modules/ has no file-map entry at all — run `node scripts/gds/gen-file-map.js --check` for the exact list, then fix and commit (ADR 0066; module coverage: task 1004066).');
   }
   try {
     // Also structurally validates the spec (exit 1 on invalid OpenAPI 3.1) beyond the drift check (exit 2). Task 1918.

package/scripts/gds/gen-file-map.js

@@ -16,6 +16,16 @@
 //   • every skill/routine dir on disk MUST have a note  → a new skill can't land undescribed;
 //   • every note MUST map to a dir that exists           → the map can't carry ghosts;
 //   • the rendered block MUST match what's committed      → no stale tree.
+// MODULE COVERAGE (task 1004066). The same honor system that let a skill land unmapped let a whole
+// MODULE land unmapped: `modules/agents`, `modules/government` and `modules/specialities` were all
+// on disk with nothing in the map, and the two that got fixed before this got fixed BY HAND — which
+// is the point, since hand-patching a drifting map does not stop the drift. The modules/ block is
+// not generated (each entry is a paragraph of prose no directory walk could write, and generating
+// the fenced repo tree is the expensive option this task ruled out), so what is enforced is the
+// cheap half: a set comparison asserting every directory under modules/ is documented SOMEWHERE in
+// the map — either a `modules/<key>/…` path reference or a `<key>/` entry inside the modules block.
+// A new module now fails --check until someone writes its line.
+//
 // scripts/gds/ is deliberately NOT generated: it is a curated highlight reel of ~20 of ~70 files
 // (generating it would bloat it with low-signal entries), and it sits mid-tree inside the big
 // fenced repo tree where HTML-comment markers can't live cleanly. It stays hand-curated.
@@ -51,6 +61,13 @@ const SECTIONS = [
   { id: 'scheduled-tasks', dir: '.claude/scheduled-tasks', notesKey: 'scheduled-tasks' },
 ];
 
+// modules/ is NOT generated (task 1004066): each entry is a paragraph of prose no directory walk
+// could write, and generating it would force the whole fenced repo tree through a generator —
+// explicitly out of scope. What IS enforceable is COVERAGE: every module on disk must be documented
+// somewhere in the map. That set comparison is the cheap half of the same contract the skills
+// section already carries, and it is what stops a whole vertical slice landing unmapped.
+const MODULES_DIR = 'modules';
+
 const begin = (id) => `<!-- BEGIN GENERATED FILE-MAP ${id} (scripts/gds/gen-file-map.js — do not hand-edit; notes live in docs/file-map.notes.json) -->`;
 const end = (id) => `<!-- END GENERATED FILE-MAP ${id} -->`;
 
@@ -107,6 +124,72 @@ function buildModel() {
   return SECTIONS.map((s) => buildSection(s, notes));
 }
 
+// ── module coverage (task 1004066) ────────────────────────────────────────────
+// A module counts as documented when the map either references its PATH (`modules/<key>/…`
+// anywhere) or carries a `<key>/` entry line inside the `modules/` tree block. Both forms are in
+// use today, so the check accepts both rather than inventing a third the map would fail on.
+
+// Both matchers CAPTURE the whole path segment rather than testing for a given key. That is what
+// makes the prefix hazard structural instead of something a lookahead has to remember: a mention of
+// `modules/agents-extra` yields the key `agents-extra`, so it can never vouch for `agents`. It also
+// means the map is scanned ONCE per run instead of twice per module.
+const PATH_REF_RE = /modules\/([A-Za-z0-9_.-]+)/g;
+const ENTRY_RE = /[├└]──\s+([A-Za-z0-9_.-]+)\//g;
+
+// The slice of the fenced repo tree between the `├── modules/` header and the next sibling at the
+// same depth. Scoping the entry search here matters: `.claude/skills/` lists dirs in the same
+// `├── name/` shape, so an unscoped match would let a SKILL named after a module vouch for it.
+function modulesBlock(mapText) {
+  const lines = String(mapText).split(/\r?\n/);
+  const start = lines.findIndex((l) => new RegExp(`^[├└]── ${MODULES_DIR}/`).test(l));
+  if (start === -1) return '';
+  let stop = lines.length;
+  for (let i = start + 1; i < lines.length; i += 1) {
+    if (/^[├└]── /.test(lines[i])) { stop = i; break; }
+  }
+  return lines.slice(start, stop).join('\n');
+}
+
+// Every module key the map documents: any `modules/<key>` path reference anywhere, plus any
+// `<key>/` entry line inside the modules block. Both forms are in use today, so both count.
+function documentedModuleKeys(mapText, block) {
+  const keys = new Set();
+  for (const m of String(mapText).matchAll(PATH_REF_RE)) keys.add(m[1]);
+  for (const m of String(block).matchAll(ENTRY_RE)) keys.add(m[1]);
+  return keys;
+}
+
+// The single-key form — the readable one to assert against.
+function isModuleDocumented(mapText, block, key) {
+  return documentedModuleKeys(mapText, block).has(key);
+}
+
+// Every immediate subdirectory of modules/, or [] when the tree carries no modules/ at all (a
+// consumer instance that enabled none — nothing to document).
+function listModules() {
+  return listSubdirs(path.join(REPO_ROOT, MODULES_DIR));
+}
+
+// The set comparison. Returns { onDisk, undocumented, defects } — `defects` is the non-vacuity
+// channel: this check breaks by comparing two empty sets and reporting nothing, so a state that
+// makes the comparison meaningless (modules on disk but no readable map, or no modules/ block to
+// read entries out of) is reported as a SCAN DEFECT rather than passing quietly.
+function moduleCoverage(mapText) {
+  const onDisk = listModules();
+  const defects = [];
+  if (!onDisk.length) return { onDisk, undocumented: [], defects };
+  const text = typeof mapText === 'string' ? mapText : (fs.existsSync(MAP_PATH) ? fs.readFileSync(MAP_PATH, 'utf8') : '');
+  if (!text.trim()) {
+    defects.push(`${onDisk.length} module(s) on disk but docs/file-map.md is missing or empty — the module-coverage check cannot run`);
+    return { onDisk, undocumented: [], defects };
+  }
+  const block = modulesBlock(text);
+  if (!block) defects.push('docs/file-map.md has no `modules/` block in its repo tree — module entries cannot be read (path references are still checked)');
+  const documented = documentedModuleKeys(text, block);
+  const undocumented = onDisk.filter((key) => !documented.has(key));
+  return { onDisk, undocumented, defects };
+}
+
 // Render one section's fenced tree block (the bytes that live between its markers). Arrows are
 // column-aligned to the longest label, matching the hand-formatted look of the rest of the map.
 function renderSection(model) {
@@ -144,6 +227,7 @@ function computeWrites() {
   const stale = model.flatMap((m) => m.stale);
   const writes = [];
   let markersMissing = [];
+  let mapText = '';
   if (fs.existsSync(MAP_PATH)) {
     let cur = fs.readFileSync(MAP_PATH, 'utf8');
     let next = cur;
@@ -152,8 +236,10 @@ function computeWrites() {
       next = injectSection(next, m);
     }
     if (!sameContent(next, cur)) writes.push({ full: MAP_PATH, content: next, rel: 'docs/file-map.md' });
+    mapText = next; // coverage reads the POST-generation text, so a regen never changes the verdict
   }
-  return { model, writes, missing, stale, markersMissing };
+  const modules = moduleCoverage(mapText);
+  return { model, writes, missing, stale, markersMissing, modules };
 }
 
 function main() {
@@ -162,7 +248,7 @@ function main() {
     process.stdout.write(JSON.stringify(buildModel(), null, 2) + '\n');
     return;
   }
-  const { writes, missing, stale, markersMissing } = computeWrites();
+  const { writes, missing, stale, markersMissing, modules } = computeWrites();
 
   // A missing note (dir without a note) or a stale note (note without a dir) is a hard failure in
   // BOTH modes: in --check it fails CI; in write mode we still report it (and render a visible
@@ -171,6 +257,8 @@ function main() {
   if (missing.length) problems.push(`notes MISSING for: ${missing.join(', ')} — add a one-line note to docs/file-map.notes.json`);
   if (stale.length) problems.push(`notes are STALE (no such dir) — remove from docs/file-map.notes.json: ${stale.join(', ')}`);
   if (markersMissing.length) problems.push(`docs/file-map.md is missing generated markers for: ${markersMissing.join(', ')}`);
+  if (modules.undocumented.length) problems.push(`modules with NO docs/file-map.md entry: ${modules.undocumented.map((k) => `${MODULES_DIR}/${k}`).join(', ')} — add an entry to the modules/ block of docs/file-map.md (task 1004066)`);
+  for (const d of modules.defects) problems.push(`module-coverage SCAN DEFECT — ${d}`);
 
   if (checkOnly) {
     if (writes.length || problems.length) {
@@ -197,6 +285,12 @@ if (require.main === module) main();
 module.exports = {
   materializedNames,
   SECTIONS,
+  MODULES_DIR,
+  listModules,
+  modulesBlock,
+  documentedModuleKeys,
+  isModuleDocumented,
+  moduleCoverage,
   begin,
   end,
   buildModel,

package/scripts/gds/ship-check.js

@@ -27,7 +27,7 @@ const STEPS = [
   { key: 'fitness', label: 'fitness.js (architecture + budgets + freshness gate)', argv: ['scripts/gds/fitness.js'], fix: 'read the ✗ lines above; each names its fix' },
   { key: 'repo-map', label: 'nested CLAUDE.md symbol blocks fresh', argv: ['scripts/gds/gen-repo-map.js', '--check-block'], fix: 'node scripts/gds/gen-repo-map.js' },
   { key: 'session-index', label: 'CLAUDE.md §13 session snippet fresh', argv: ['scripts/gds/gen-session-index.js', '--check-block'], fix: 'node scripts/gds/gen-session-index.js' },
-  { key: 'file-map', label: 'docs/file-map.md skills/routines sections fresh', argv: ['scripts/gds/gen-file-map.js', '--check'], fix: 'node scripts/gds/gen-file-map.js (+ a note in docs/file-map.notes.json for a new skill)' },
+  { key: 'file-map', label: 'docs/file-map.md skills/routines sections fresh + every module documented', argv: ['scripts/gds/gen-file-map.js', '--check'], fix: 'node scripts/gds/gen-file-map.js (+ a note in docs/file-map.notes.json for a new skill, or a modules/ entry in docs/file-map.md for a new module)' },
   { key: 'api-docs', label: 'docs/api/openapi.json + api-reference fresh', argv: ['scripts/gds/gen-api-docs.js', '--check'], fix: 'node scripts/gds/gen-api-docs.js' },
   { key: 'copy-registry', label: 'docs/copy-registry.json fresh', argv: ['scripts/gds/copy-inventory.js', '--check'], fix: 'node scripts/gds/copy-inventory.js', optional: true },
   { key: 'linkify', label: 'no bare #NNN task refs in committed markdown', argv: ['scripts/gds/linkify-refs.js', '--check'], fix: 'node scripts/gds/linkify-refs.js', optional: true },