@bongos/core 1.20.33 → 1.20.35

package/modules/hall-ui/public/collab.js

@@ -158,10 +158,17 @@
   // The composer is CLOSED until asked for. A textarea open on every row would
   // turn a page you read into a page you are being asked to type on, and the
   // blocks are condensed to three rows precisely so the page stays readable.
+  //
+  // "Post & resolve" (task 1004458) is the answer and the close in one press,
+  // drawn only for someone L.canClose says may close the ask. The asker can
+  // reopen it from their archive if the answer did not do it.
   function threadHtml(req, key, nowMs) {
     const thread = L.threadOf(req);
     const id = escapeHtml(String(req.id));
     const fid = `cb-reply-${escapeHtml(key)}-${id}`;
+    const resolve = L.canClose(req, meId, myCrafts)
+      ? `<button class="btn-ghost" type="submit" data-reply-send="${id}" data-reply-resolve>Post &amp; resolve</button>`
+      : '';
     const list = thread.length
       ? `<ul class="cb-thread">${thread.map((r) => replyHtml(r, nowMs)).join('')}</ul>`
       : '';
@@ -172,6 +179,7 @@
         <textarea class="cb-reply-input" name="body" rows="3" maxlength="${L.MAX_REPLY}" placeholder="Write a reply…"></textarea>
         <div class="cb-reply-actions">
           <button class="btn-accent" type="submit" data-reply-send="${id}">Post reply</button>
+          ${resolve}
           <button class="btn-ghost" type="button" data-reply-cancel="${fid}">Cancel</button>
         </div>
       </form>`;
@@ -267,7 +275,7 @@
     // draw it and the server's own WHERE decides whether it works — so the worst
     // a wrong answer here can do is offer a button that refuses.
     const close = L.canClose(req, meId, myCrafts)
-      ? `<div class="ov-row__actions"><button class="btn-ghost" data-settle="answered" data-id="${escapeHtml(String(req.id))}">Close this ask</button></div>`
+      ? `<div class="ov-row__actions"><button class="btn-ghost" data-settle="answered" data-id="${escapeHtml(String(req.id))}">Mark resolved</button></div>`
       : '';
     return `<li class="ov-row ov-row--lead cb-row${live}" data-id="${escapeHtml(String(req.id))}"${extra ? ' data-extra hidden' : ''}>
       ${faceHtml(L.faceOf(req, 'in'))}
@@ -301,7 +309,7 @@
       </div>
       <div class="ov-row__right">
         <div class="ov-row__actions">
-          <button class="btn-accent" data-settle="answered" data-id="${id}">Someone helped</button>
+          <button class="btn-accent" data-settle="answered" data-id="${id}">Mark resolved</button>
           <button class="btn-ghost" data-settle="withdrawn" data-id="${id}">Withdraw</button>
         </div>
       </div>
@@ -338,6 +346,11 @@
   // and the sentence: 'in' on the asks made OF them (the asker's face), 'out' on
   // the asks they made (the addressee's). Exactly the pairing forMeRow and
   // mineRow use, which is why an archived row reads like the open row it was.
+  //
+  // ONE ACTION, ON ONE SIDE (task 1004458): the asker's own archived asks carry
+  // "Reopen", ticket style — whoever closed it, the person who needed the answer
+  // has the last word. The server's WHERE holds the rule (asker only); the button
+  // is only drawn where it can work.
   function archiveRow(dir) {
     return (req, nowMs, extra, key) => {
       const outcome = L.outcomeLine(req);
@@ -350,11 +363,15 @@
       // holds the other facts, and the row keeps no right column at all: there
       // is nothing on an archived row to act on.
       const fact = outcome ? `<span class="ov-fact cb-outcome">${escapeHtml(outcome)}</span>` : '';
-      return `<li class="ov-row ov-row--lead cb-row cb-row--archived" data-id="${escapeHtml(String(req.id))}"${extra ? ' data-extra hidden' : ''}>
+      const id = escapeHtml(String(req.id));
+      const reopen = L.canReopen(req, meId)
+        ? `<div class="ov-row__right"><div class="ov-row__actions"><button class="btn-ghost" data-reopen data-id="${id}">Reopen</button></div></div>`
+        : '';
+      return `<li class="ov-row ov-row--lead cb-row cb-row--archived" data-id="${id}"${extra ? ' data-extra hidden' : ''}>
         ${faceHtml(L.faceOf(req, dir))}
         <div class="ov-row__main">${askHtml(req, key, true)}
           <div class="ov-row__facts">${directionFact(req, dir)}${contextChip(req)}${fact}</div>
-        </div>
+        </div>${reopen}
       </li>`;
     };
   }
@@ -691,7 +708,7 @@
     if (settling) return;
     settling = true;
     try {
-      const r = await api.request('POST', `/mingle/pairs/${id}/decide`, { decision });
+      const r = await api.request('POST', `/mingle/pairs/${id}/decide`, { body: { decision } });
       if (!r.ok) {
         toast(window.OTB.errMessage ? window.OTB.errMessage(r.data) : 'Could not answer that introduction.');
         return;
@@ -709,7 +726,11 @@
   // Post a reply. One in flight at a time (the `replying` latch), the same guard
   // `settling` gives the settle actions: a double-submit on an APPEND-ONLY table
   // writes the answer twice and there is no edit or delete to take it back with.
-  async function postReply(form) {
+  //
+  // `resolve` (task 1004458) closes the ask as 'answered' once the reply has
+  // landed — never before, so a refused reply cannot leave an ask closed on words
+  // nobody can read.
+  async function postReply(form, resolve) {
     if (replying) return;
     const id = form.getAttribute('data-reply-form');
     const input = form.querySelector('.cb-reply-input');
@@ -725,13 +746,22 @@
     const send = form.querySelector('[data-reply-send]');
     if (send) { send.disabled = true; send.textContent = 'Posting…'; }
     try {
-      const r = await api.request('POST', `/help-requests/${id}/replies`, { body: v.body });
+      // The reply's field is ALSO called `body`, so it is nested: the client's
+      // `body` option is the whole JSON payload. Passing the bare string sent a
+      // top-level JSON string, which the server's strict parser refuses as
+      // bad_json (task 1004458).
+      const r = await api.request('POST', `/help-requests/${id}/replies`, { body: { body: v.body } });
       if (!r.ok) {
         toast(window.OTB.errMessage ? window.OTB.errMessage(r.data) : 'Could not post that reply.');
         return;
       }
       if (input) input.value = '';
-      toast('Replied.');
+      if (resolve) {
+        const c = await api.helpRequests.patchHelpRequestsId({ id: Number(id), body: { status: 'answered' } });
+        toast(c.ok ? 'Replied and resolved.' : 'Replied, but could not resolve it.');
+      } else {
+        toast('Replied.');
+      }
       await load();
     } finally {
       replying = false;
@@ -758,7 +788,7 @@
         toast(window.OTB.errMessage ? window.OTB.errMessage(r.data) : 'Could not update that request.');
         return;
       }
-      toast(status === 'answered' ? 'Closed.' : 'Withdrawn.');
+      toast(status === 'answered' ? 'Resolved.' : status === 'open' ? 'Reopened.' : 'Withdrawn.');
       await load();
     } finally {
       settling = false;
@@ -785,6 +815,12 @@
       decideMingle(Number(mingleBtn.getAttribute('data-id')), mingleBtn.getAttribute('data-mingle'));
       return;
     }
+    const reopenBtn = closest('[data-reopen]');
+    if (reopenBtn) {
+      ev.preventDefault();
+      settle(Number(reopenBtn.getAttribute('data-id')), 'open');
+      return;
+    }
     const btn = closest('[data-settle]');
     if (!btn) return;
     ev.preventDefault();
@@ -799,7 +835,8 @@
     const form = ev.target && ev.target.closest ? ev.target.closest('[data-reply-form]') : null;
     if (!form) return;
     ev.preventDefault();
-    postReply(form);
+    const resolve = !!(ev.submitter && ev.submitter.hasAttribute('data-reply-resolve'));
+    postReply(form, resolve);
   });
 
   load().catch(() => {

package/modules/hall-ui/public/studio.js

@@ -386,7 +386,7 @@
     const said = words();
     const who = (viewer && (viewer.display_name || viewer.github_login)) || 'an artist';
     const reason = `Reviewed in the studio by ${who} — the copy and visuals are good as shipped.${said ? ` ${said}` : ''}`;
-    const res = await api.request('POST', WRITE_ROUTES.abandon(p.taskId), { reason });
+    const res = await api.request('POST', WRITE_ROUTES.abandon(p.taskId), { body: { reason } });
     if (!res.ok) return verdictError(errMessage(res.data) || 'That could not be recorded. Nothing changed.');
     toast('Dismissed — the copy and visuals are good as shipped.');
     retire(p);
@@ -417,7 +417,7 @@
     const who = (viewer && (viewer.display_name || viewer.github_login)) || 'an artist';
     const stamp = new Date().toISOString().slice(0, 10);
     const block = `\n\n---\n\nARTIST NOTE (${stamp}, ${who}, from the studio):\n\n${said}`;
-    const res = await api.request('PATCH', WRITE_ROUTES.patch(p.taskId), { description: `${base}${block}` });
+    const res = await api.request('PATCH', WRITE_ROUTES.patch(p.taskId), { body: { description: `${base}${block}` } });
     if (!res.ok) return verdictError(errMessage(res.data) || 'That could not be recorded. Nothing changed.');
     p.description = `${base}${block}`;
     toast('Noted on the review — it stays open.');
@@ -447,7 +447,7 @@
     if (!said) return verdictError('Write what needs work first — a follow-up with no brief cannot be claimed.');
     const who = (viewer && (viewer.display_name || viewer.github_login)) || 'an artist';
     const about = p.shippedId ? `task ${p.shippedId}` : `review ${p.taskId}`;
-    const created = await api.request('POST', WRITE_ROUTES.create(), {
+    const created = await api.request('POST', WRITE_ROUTES.create(), { body: {
       version_id: p.versionId,
       goal_id: p.goalId ? Number(p.goalId) : undefined,
       title: `Artist verdict: the copy or visuals shipped in ${about} need work`,
@@ -463,17 +463,17 @@
       discipline: 'artist',
       source: 'studio-verdict',
       source_ref: `studio-needs-work-on-review-${p.taskId}`,
-    });
+    } });
     if (!created.ok) return verdictError(errMessage(created.data) || 'The follow-up could not be filed. Nothing changed.');
     const newId = created.data && created.data.task && created.data.task.id;
     if (!newId) return verdictError('The follow-up came back without an id, so the review was left open.');
     // Close the review against the follow-up. If this half fails the follow-up
     // still exists and is reported as such — a stranded-but-visible task beats
     // a silent success, and re-running the same verdict is safe.
-    const closed = await api.request('POST', WRITE_ROUTES.merge(p.taskId), {
+    const closed = await api.request('POST', WRITE_ROUTES.merge(p.taskId), { body: {
       into_task_id: Number(newId),
       reason: `Artist verdict from the studio: the review's answer is task ${newId}, which carries the work.`,
-    });
+    } });
     if (!closed.ok) {
       return verdictError(`Task ${newId} was filed, but this review could not be closed against it — close it from the review itself.`);
     }
@@ -882,7 +882,7 @@
     wedit.save = 'saving';
     wedit.error = '';
     paintEditing();
-    wedit.inflight = api.request('PUT', WRITE_ROUTES.draft(STUDIO), body);
+    wedit.inflight = api.request('PUT', WRITE_ROUTES.draft(STUDIO), { body });
     const res = await wedit.inflight;
     wedit.inflight = null;
     if (res.ok) {

package/modules/lifecycle/help-requests.js

@@ -48,7 +48,7 @@ async function craftsForBuilder(builderId, deps = {}) {
   return [...new Set(list.map(craftForDiscipline).filter(Boolean))];
 }
 
-const COLS = 'id, requested_by, needs_craft, needs_builder_id, what_is_stuck, task_id, goal_id, status, created_at, updated_at, settled_by, settled_reason';
+const COLS = 'id, requested_by, needs_craft, needs_builder_id, what_is_stuck, task_id, goal_id, status, created_at, updated_at, settled_by, settled_reason, reopened_at';
 // The two list reads also NAME the people on a row — who is asking (the fact
 // the collab page owes a helper: "who to answer", task 1003471) and who a
 // by-name ask is addressed to — through two LEFT JOINs on builders. COLS stays
@@ -257,6 +257,11 @@ async function listOpenAll({ limit = MAX_ROWS } = {}, deps = {}) {
 // it, and inventing one — treating a reply as an answer, say — would close the
 // clarifying question that was asking for more detail. Those still need a person.
 //
+// NEVER a REOPENED row (task 1004458). An asker who reopens an ask is saying the
+// shipped task did NOT answer it; closing it again on the next page load because
+// that same task is still shipped would overrule them in under a second. Once
+// reopened, only a person closes it.
+//
 // IDEMPOTENT, and safe to run on every list read: the WHERE matches only rows
 // that are still open, so a second run within the same page load finds nothing.
 async function settleFromLedger(deps = {}) {
@@ -266,6 +271,7 @@ async function settleFromLedger(deps = {}) {
         SET status = 'answered', settled_reason = 'task_shipped', updated_at = now()
       WHERE h.status = 'open'
         AND h.task_id IS NOT NULL
+        AND h.reopened_at IS NULL
         AND EXISTS (SELECT 1 FROM tasks t WHERE t.id = h.task_id AND t.status = 'shipped')
      RETURNING h.id, h.task_id`
   );
@@ -359,6 +365,33 @@ async function setHelpRequestStatus({ id, builderId, status, crafts = [] }, deps
   return rows[0] || null;
 }
 
+// THE ASKER REOPENS (task 1004458, owner direction: "like a traditional ticket").
+// Closing moved to the addressee with ADR 0330, which means an ask can now be
+// closed by someone other than the person who needed the answer — so the person
+// who needed it gets the last word. Only they may reopen: an addressee who wants
+// more has a reply box, and a third party reopening someone else's question
+// would be putting it back in a queue its owner had left.
+//
+// Any settled status reopens — 'answered' by a person or by the ledger, and the
+// asker's own 'withdrawn'. The settle fields are cleared so the row reads as the
+// open ask it is again, and `reopened_at` is what keeps settleFromLedger from
+// closing it straight back.
+//
+// Returns null for absent, not yours, or still open — ONE answer for all three,
+// for the same enumeration reason setHelpRequestStatus gives.
+async function reopenHelpRequest({ id, builderId }, deps = {}) {
+  const activePool = deps.pool || pool;
+  const { rows } = await activePool.query(
+    `UPDATE lifecycle_help_requests
+        SET status = 'open', settled_by = NULL, settled_reason = NULL,
+            reopened_at = now(), updated_at = now()
+      WHERE id = $1 AND requested_by = $2 AND status <> 'open'
+     RETURNING ${COLS}`,
+    [id, builderId]
+  );
+  return rows[0] || null;
+}
+
 // ---- replies (task 1004216) -------------------------------------------------
 //
 // APPEND-ONLY, and the table's own trigger is the authority — there is deliberately
@@ -450,7 +483,7 @@ async function repliesForRequests(ids, deps = {}) {
 module.exports = {
   HELP_CRAFTS, helpCrafts, disciplineForCraft, craftForDiscipline, craftsForBuilder,
   validateHelpRequest, MAX_STUCK, MAX_ROWS, capRows,
-  builderExists, createHelpRequest, listOpenForBuilder, listMine, listOpenAll, getHelpRequest, setHelpRequestStatus,
+  builderExists, createHelpRequest, listOpenForBuilder, listMine, listOpenAll, getHelpRequest, setHelpRequestStatus, reopenHelpRequest,
   settleFromLedger, listArchivedForBuilder, listArchivedMine,
   countOpenForBuilder, craftMapSql,
   MAX_REPLY, MAX_THREAD_ON_LIST, validateReply, createReply, listReplies, repliesForRequests,

package/modules/lifecycle/migrations/lifecycle_016_help_request_reopen.sql

@@ -0,0 +1,23 @@
+-- lifecycle_016_help_request_reopen.sql — the asker can reopen a settled ask
+-- (task 1004458, owner direction 2026-09-30: "mark it as resolved and the
+-- requester should then be able to re-open like traditional ticket fashion").
+--
+-- WHY A COLUMN AND NOT JUST A STATUS FLIP. Reopening sets status back to 'open',
+-- which is all the page needs. But settleFromLedger (lifecycle_012) closes every
+-- open ask whose task has shipped, on every Collab read — so an ask the ledger
+-- closed, then reopened by its asker, would be closed again on the very next
+-- page load. `reopened_at` is the fact that settle reads to leave it alone: the
+-- asker has said the shipped task did not answer the question, and only a person
+-- closes it from then on.
+--
+-- MODULE-OWNED and `lifecycle_`-prefixed, so fitness check 11 permits it; no core
+-- table is altered (ADR 0083 §Decision #5).
+
+ALTER TABLE lifecycle_help_requests
+  ADD COLUMN IF NOT EXISTS reopened_at timestamptz;
+
+COMMENT ON COLUMN lifecycle_help_requests.reopened_at IS
+  'When the asker last reopened this ask after it was settled (task 1004458). Non-NULL keeps settleFromLedger from closing it again because its task shipped.';
+
+INSERT INTO schema_migrations (version) VALUES ('lifecycle_016_help_request_reopen')
+ON CONFLICT (version) DO NOTHING;

package/modules/lifecycle/routes/help-requests.js

@@ -200,6 +200,9 @@ module.exports = function buildHelpRequestsRouter() {
   // Nobody is assigned by being asked — closing an ask ends a question, it does
   // not accept work (ADR 0187 §3).
   //
+  // 'open' REOPENS a settled ask (task 1004458) — the asker's alone, ticket
+  // style: whoever closed it, the person who needed the answer has the last word.
+  //
   // rank: any-builder — who may settle is enforced in the UPDATE's WHERE, not by
   // rank. The caller's crafts come from THEIR OWN profile, never from the body,
   // for the same reason the addressed read refuses a ?craft= it was handed.
@@ -207,9 +210,20 @@ module.exports = function buildHelpRequestsRouter() {
     const id = parseId(req, res, { code: 'bad_help_request_id', positiveInt: true });
     if (id === null) return;
     if (validateOrRespond(req, res, {
-      status: { required: true, type: 'string', enum: ['answered', 'withdrawn'] },
+      status: { required: true, type: 'string', enum: ['answered', 'withdrawn', 'open'] },
     })) return;
 
+    if (req.body.status === 'open') {
+      const reopened = await help.reopenHelpRequest({ id, builderId: req.builder.id });
+      if (!reopened) {
+        // Same single refusal as below, for the same enumeration reason.
+        return res.fail('help_request_not_reopenable', 404, {
+          reason: 'no settled help request with that id that you asked',
+        });
+      }
+      return res.json({ ok: true, help_request: reopened });
+    }
+
     const crafts = await help.craftsForBuilder(req.builder.id);
     const row = await help.setHelpRequestStatus({
       id, builderId: req.builder.id, status: req.body.status, crafts,

package/modules/provisioning/render-standup.js

@@ -21,7 +21,10 @@
 
 // The plan and region vocabulary — shared with the runner's payload builder, which
 // requires it from here, so the web tier and the runner can never disagree on a name.
-const WEB_PLANS = ['starter', 'standard', 'pro', 'pro_plus', 'pro_max', 'pro_ultra'];
+// `free` is a web plan only (task 1004457, owner call 2026-09-30): the app sleeps when
+// idle, which is the owner's trade to make. The database has no free plan here —
+// Render's free Postgres has no backups and expires.
+const WEB_PLANS = ['free', 'starter','standard', 'pro', 'pro_plus', 'pro_max', 'pro_ultra'];
 const DB_PLANS = ['basic_256mb', 'basic_1gb', 'basic_4gb', 'pro_4gb', 'pro_8gb'];
 const REGIONS = ['virginia', 'ohio', 'oregon', 'frankfurt', 'singapore'];
 const MODES = ['adopt', 'greenfield'];

package/modules/public-landing/public/projects.html

@@ -1434,10 +1434,10 @@ summary{min-height:24px;padding:3px 0;}
                     </select>
                   </label>
                   <label class="wizField" id="renderBuildWrap"><span>Build command <small>— leave empty if there is none</small></span>
-                    <input type="text" id="f-renderBuild" autocomplete="off" spellcheck="false" maxlength="500" placeholder="npm ci">
+                    <input type="text" id="f-renderBuild" autocomplete="off" spellcheck="false" maxlength="500" placeholder="for example: npm ci">
                   </label>
                   <label class="wizField" id="renderStartWrap"><span>Start command</span>
-                    <input type="text" id="f-renderStart" autocomplete="off" spellcheck="false" maxlength="500" placeholder="npm start">
+                    <input type="text" id="f-renderStart" autocomplete="off" spellcheck="false" maxlength="500" placeholder="for example: npm start">
                   </label>
                   <label class="wizField"><span>Plan</span>
                     <select id="f-renderPlan"></select>
@@ -1800,14 +1800,18 @@ summary{min-height:24px;padding:3px 0;}
      a key reaches every workspace its user is in, so nothing is pre-picked (ADR 0327).
      Prices are Render's list prices per month: starter and basic_256mb were measured by the
      pilot (task 1004142); Render's own pricing page is the source of truth, and the review
-     says Render bills the owner. Lists are built node by node, never from an HTML string. */
-  var RENDER_WEB_PLANS = [['starter', 'Starter', 7], ['standard', 'Standard', 25], ['pro', 'Pro', 85]];
+     says Render bills the owner. Lists are built node by node, never from an HTML string.
+     Free (task 1004457) is listed first by price but never preselected: its app sleeps when
+     idle, and the list says so rather than letting $0 read as a plain bargain. */
+  var RENDER_WEB_PLANS = [['free', 'Free', 0], ['starter', 'Starter', 7], ['standard', 'Standard', 25], ['pro', 'Pro', 85]];
+  var RENDER_FREE_NOTE = '$0, but it sleeps when idle and takes about a minute to wake up';
+  function planPrice(p) { return p[2] ? 'about $' + p[2] + '/month' : RENDER_FREE_NOTE; }
   var RENDER_DB_PLANS = [['basic_256mb', 'Basic 256 MB', 6], ['basic_1gb', 'Basic 1 GB', 19], ['basic_4gb', 'Basic 4 GB', 75]];
   var RENDER_RUNTIMES = { node: 'Node.js', python: 'Python', ruby: 'Ruby', go: 'Go', rust: 'Rust', elixir: 'Elixir', docker: 'Docker' };
   var RENDER_KEY_RE = /^rnd_[A-Za-z0-9]{16,128}$/;
   function planLabel(list, v) {
     var p = list.filter(function (x) { return x[0] === v; })[0] || list[0];
-    return p[1] + ', about $' + p[2] + '/month';
+    return p[1] + ', ' + planPrice(p);
   }
   function runtimeLabel(v) { return RENDER_RUNTIMES[v] || RENDER_RUNTIMES.node; }
   function repoOf(url) { var m = String(url || '').replace(/\.git$/, '').match(/github\.com\/([^/]+\/[^/]+)$/i); return m ? m[1].toLowerCase() : ''; }
@@ -1832,7 +1836,7 @@ summary{min-height:24px;padding:3px 0;}
     function fillPlans(sel, list, v) {
       sel.textContent = '';
       list.forEach(function (p) {
-        var o = appEl('option', null, p[1] + ' — about $' + p[2] + '/month');
+        var o = appEl('option', null, p[1] + ' — ' + planPrice(p));
         o.value = p[0];
         if (p[0] === v) o.selected = true;
         sel.appendChild(o);
@@ -1972,7 +1976,12 @@ summary{min-height:24px;padding:3px 0;}
     });
     q('renderNew').addEventListener('input', function (ev) {
       if (ev.target.id === q('f-renderBuild').id) st.renderBuild = ev.target.value;
-      if (ev.target.id === q('f-renderStart').id) st.renderStart = ev.target.value;
+      if (ev.target.id === q('f-renderStart').id) {
+        st.renderStart = ev.target.value;
+        // the "say how your app starts" ask is answered the moment there is a command —
+        // it used to stay on screen until the next press of Next
+        if (String(st.renderStart).trim() && /\berr\b/.test(q('h-render').className)) hint('h-render', '');
+      }
       hooks.save();
     });
     function validate() {

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.20.33",
+  "version": "1.20.35",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.20.33",
+      "version": "1.20.35",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.20.33",
+  "version": "1.20.35",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -8266,6 +8266,10 @@
     }
   ],
   "1.20.33": [
+    {
+      "id": "1004456",
+      "text": "The self-deploy decision record no longer promises a CI re-grade check that was never built; it now records the owner's choice to retire it."
+    },
     {
       "id": "1004396",
       "text": "The unattended runner no longer gets stuck retrying a task it isn't allowed to take: it moves on to the next one, and only waits when a stuck ship is blocking everyone, resuming by itself once that lands."
@@ -8274,5 +8278,24 @@
       "id": "1004449",
       "text": "When a project update fails in a way the system can't fix by itself, it now opens one blocker for a person and posts one message on Discord, instead of failing quietly. When a later update succeeds, the blocker closes by itsel"
     }
+  ],
+  "1.20.34": [
+    {
+      "id": "1004454",
+      "text": "The unattended runner no longer stops after two tasks: it keeps working while there's usage left, and if it hits the usage limit it sleeps until the limit resets and then carries on by itself."
+    }
+  ],
+  "1.20.35": [
+    {
+      "id": "1004461",
+      "text": "Fixes a broken automatic check that was blocking everyone's work from landing."
+    },
+    {
+      "text": "Replying to an ask on the Collab page works again, and asks can now be marked resolved and reopened by the person who asked, like a ticket."
+    },
+    {
+      "id": "1004457",
+      "text": "The project setup wizard now offers Render's Free plan for your app, with a plain note that a free app sleeps when idle and takes about a minute to wake. Starter stays the default. The build and start command boxes no longer l"
+    }
   ]
 }

package/scripts/gds/autobongos-loop.js

@@ -164,7 +164,43 @@ function classifyRun({ envelope = null, exitCode = 0, timedOut = false, spawnErr
   return { outcome: 'claims_shipped', reason: parsed.verdict.what_happened, releaseClaim: false, verdict: parsed.verdict, costUsd: parsed.costUsd };
 }
 
+// usageLimitHit — was this worker cut off by the subscription's usage limit?
+// (task 1004454)
+//
+// Owner ruling, 2026-09-30: no fixed cap on work; hitting the limit is fine, and
+// the runner restarts once it resets. That makes the limit message the stop
+// signal, so it has to be recognised — otherwise a limit-hit worker (seconds
+// long, nothing spent) reads as workerNeverRan() and escalates the runner into
+// probing for a condition the owner accepts.
+//
+// Only an ERROR envelope, or a run with no parseable envelope, can be a limit
+// hit. A worker that FINISHED may well write about limits in its verdict (it
+// might have fixed a rate-limit bug), and sleeping on that would stop the runner
+// for doing its job.
+//
+// The CLI's machine form is `Claude AI usage limit reached|<epoch seconds>`; the
+// human forms ("You've hit your limit · resets 3am", "5-hour limit reached ∙
+// resets 3pm") carry a clock time in a zone we would have to guess, so they
+// return resetAt: null and the caller picks a bounded wait instead of parsing one.
+const LIMIT_EPOCH_RE = /usage limit reached\|(\d{9,11})/i;
+const LIMIT_TEXT_RE = /usage limit reached|hit your (usage )?limit|\b(5|five)-hour limit reached|weekly limit reached|limit reached\s*[∙·•|-]\s*resets/i;
+function usageLimitHit({ envelope = null, stderr = '' } = {}) {
+  let text = '';
+  let parsedEnvelope = null;
+  try { parsedEnvelope = typeof envelope === 'string' ? (envelope.trim() ? JSON.parse(envelope) : null) : envelope; } catch (_) { parsedEnvelope = null; }
+  if (parsedEnvelope && typeof parsedEnvelope === 'object') {
+    if (parsedEnvelope.is_error !== true) return null;
+    text = String(parsedEnvelope.result || '');
+  } else if (typeof envelope === 'string') {
+    text = envelope;
+  }
+  text = `${text}\n${stderr || ''}`;
+  const m = LIMIT_EPOCH_RE.exec(text);
+  if (m) return { resetAt: Number(m[1]) };
+  return LIMIT_TEXT_RE.test(text) ? { resetAt: null } : null;
+}
+
 module.exports = {
   WORKER_VERDICT_SCHEMA, DEFAULT_MODEL, DEFAULT_WORKER_TIMEOUT_MS,
-  buildWorkerArgs, buildWorkerPrompt, parseWorkerEnvelope, classifyRun,
+  buildWorkerArgs, buildWorkerPrompt, parseWorkerEnvelope, classifyRun, usageLimitHit,
 };