@bongos/core 1.20.80 → 1.20.82

package/modules/economy/routes/earnings.js

@@ -0,0 +1,47 @@
+// modules/economy/routes/earnings.js — GET /builders/:builderId/earnings: what a
+// builder earned, per day and per kind of credit (task 1004436 / WA6.RP06).
+//
+// → { builder_id, days: [{ day, kind, credits }], totals: { <kind>: credits }, total }
+//
+// The profile's earnings chart reads it for EVERY builder, whatever their craft:
+// an ideator or an artist who never shipped a task is paid all the same, and the
+// chart used to draw only for someone who had. `../earnings.js` owns the read and
+// the kinds; this file is only the doorway, and must never grow SQL.
+//
+// SIGNED IN. The owner's decision (a), 2026-09-30: "no one should be able to open
+// up the hood of data without being signed in." Sums only — the itemised ledger
+// (/builders/:builderId/credits) stays behind builder.roster.read.
+//
+// MODULE BOUNDARY: reaches core only through the published doorway
+// `../../../src/module-api`; `../earnings` is an intra-module sibling.
+
+'use strict';
+
+const express = require('express');
+const api = require('../../../src/module-api');
+const { readEarnings } = require('../earnings');
+
+module.exports = function buildEarningsRouter() {
+  const router = express.Router();
+
+  // rank: builder — any signed-in builder may read any builder's earnings by
+  // kind, as the profile's other signed-in sections are; a stranger gets the
+  // sign-in line. The param names the builder (`:builderId`), the credits
+  // route's convention, because this route deliberately reads someone else.
+  router.get('/builders/:builderId/earnings', api.requireBuilder, async (req, res) => {
+    const targetId = api.parseId(req, res, { param: 'builderId', code: 'bad_builder_id', positiveInt: true });
+    if (targetId === null) return;
+    try {
+      const b = await api.getBuilderById(targetId);
+      if (!b) return res.fail('builder_not_found', 404);
+      const out = await readEarnings(targetId);
+      res.set('Cache-Control', 'no-store');
+      res.json({ builder_id: targetId, ...out });
+    } catch (err) {
+      console.error('[gds] GET /builders/:builderId/earnings', err);
+      if (!res.headersSent) res.fail('earnings_read_failed', { status: 500, message: 'internal error' });
+    }
+  });
+
+  return router;
+};

package/modules/government/catalog.js

@@ -119,7 +119,15 @@ const PERMISSIONS = [
   // suggestion. Deliberately NOT paired with a read permission: seeing whether the
   // runner is on is harmless, and GET /autonomy/fence is any-builder so the runner
   // itself does not need an elevated session merely to learn it must stop.
-  { key: 'autonomy.fence.manage', system: true, floor: 'archon', guards: 'POST /autonomy/fence (the kill switch), POST|DELETE /autonomy/fence/goals (the allowlist) — the Autobongos fence (ADR 0307 §6)' },
+  { key: 'autonomy.fence.manage', system: true, floor: 'archon', guards: 'POST /autonomy/fence (the kill switch), POST|DELETE /autonomy/fence/goals (the allowlist), POST /autonomy/builders/:id/pause (one builder\'s runner), GET /autonomy/runners/all — the Autobongos fence (ADR 0307 §6)' },
+  // autonomy.run (task 1004501) — WHO MAY RUN A RUNNER AT ALL. Held, a builder may
+  // pick which allowlisted goals their own runner works, and GET /autonomy/fence
+  // hands their runner those goals; not held, the fence they read is off. NOT
+  // system: it is operational, and an owner who wants a custom rank of
+  // "runner operators" should be able to compose one. It can never widen the fence
+  // — the project allowlist and the kill switch stay behind autonomy.fence.manage —
+  // so delegating it delegates only "whose machine may work the allowed goals".
+  { key: 'autonomy.run', system: false, floor: 'metic', guards: 'PUT /autonomy/me/goals (a builder\'s own runner scope); also decides whether GET /autonomy/fence answers enabled for the caller' },
   // BV1.R21 (task 1003608, goal 1000086). ADR 0250 §6 amends ADR 0157 for exactly
   // this key: `version.create` returns to the Archon floor.
   //

package/modules/government/migrations/government_022_autonomy_run.sql

@@ -0,0 +1,38 @@
+-- government_022_autonomy_run.sql — grant the new `autonomy.run` atom to Metic and
+-- Archon (task 1004501).
+--
+-- WHAT IT IS. Whether a builder may run an Autobongos runner at all: pick the
+-- allowlisted goals their own runner works, and be answered `enabled` when their
+-- runner reads GET /autonomy/fence. Without it, a builder's runner reads a fence
+-- that is off for them, whatever the project switch says.
+--
+-- METIC FLOOR. A runner spawns sessions with blanket bypassPermissions on the
+-- builder's own machine, and sub-Metic builders stay out of the build pipeline
+-- (ADR 0043). NOT system: an owner may add it to a custom rank. That delegates
+-- only whose machine may work the allowed goals — the allowlist and the kill
+-- switch stay behind the archon-only `autonomy.fence.manage`.
+--
+-- WHY THIS FILE EXISTS AT ALL. RANK_SEED is derived from the catalog's floors and
+-- tests/government_seed.mjs compares it against the run-once seed plus every later
+-- grant migration, per rank. A catalog row without this migration leaves the key
+-- held on paper and not in the database.
+--
+-- Additive only; idempotent (ON CONFLICT DO NOTHING); forward-safe (INSERT only).
+-- The `SELECT '<rank>', unnest(ARRAY[…])` shape is load-bearing: the drift guard
+-- scans for it literally.
+
+BEGIN;
+
+INSERT INTO government_rank_permissions (rank_key, permission_key)
+SELECT 'metic', unnest(ARRAY[
+  'autonomy.run'
+])
+ON CONFLICT (rank_key, permission_key) DO NOTHING;
+
+INSERT INTO government_rank_permissions (rank_key, permission_key)
+SELECT 'archon', unnest(ARRAY[
+  'autonomy.run'
+])
+ON CONFLICT (rank_key, permission_key) DO NOTHING;
+
+COMMIT;

package/modules/hall-ui/public/gate.css

@@ -23,3 +23,52 @@
   .gate-reason > span:nth-of-type(2) { flex: 1 1 100%; order: 3; }
   .gate-reason__floor { margin-left: auto; }
 }
+
+/* The Autobongos runner panel (task 1004509): a status line with the switch,
+   a checklist only while something is missing, goals as chips, and the
+   machine facts folded under Details. */
+.rn-head { display: flex; align-items: center; gap: 12px; }
+.rn-head__text { flex: 1; min-width: 0; }
+.rn-title { margin: 0; font-size: 17px; color: var(--ink); }
+.rn-meta { margin: 2px 0 0; font-size: 12.5px; color: var(--ink-faint); }
+.rn-dot { width: 12px; height: 12px; border-radius: 50%; flex: none; background: var(--info); }
+.rn-dot--ok { background: var(--ok); }
+.rn-dot--warn { background: var(--warn); }
+.rn-dot--danger { background: var(--danger); }
+
+.rn-switch { display: inline-flex; align-items: center; gap: 8px; background: none; border: 0; padding: 4px; cursor: pointer; color: var(--ink-soft); font: inherit; font-size: 13px; }
+.rn-switch__track { position: relative; width: 40px; height: 22px; border-radius: var(--radius-pill); background: var(--rule); transition: background .15s; }
+.rn-switch__track::after { content: ""; position: absolute; top: 3px; left: 3px; width: 16px; height: 16px; border-radius: 50%; background: var(--bg-card); transition: transform .15s; }
+.rn-switch[aria-checked="true"] .rn-switch__track { background: var(--ok); }
+.rn-switch[aria-checked="true"] .rn-switch__track::after { transform: translateX(18px); }
+.rn-switch:focus-visible { outline: 2px solid var(--focus); outline-offset: 2px; border-radius: var(--radius-sm); }
+
+.rn-check { list-style: none; margin: 16px 0 0; padding: 0; display: grid; gap: 10px; }
+.rn-check__item { display: flex; align-items: flex-start; gap: 10px; font-size: 14px; color: var(--ink); }
+.rn-check__icon { width: 20px; height: 20px; border-radius: 50%; flex: none; display: inline-flex; align-items: center; justify-content: center; font-size: 12px; }
+.rn-check__item--ok .rn-check__icon { background: var(--ok-weak); color: var(--ok); }
+.rn-check__item--todo .rn-check__icon { background: var(--warn-weak); color: var(--warn); }
+.rn-check__item--wait { color: var(--ink-faint); }
+.rn-check__item--wait .rn-check__icon { border: var(--line) solid var(--rule); color: var(--ink-faint); }
+.rn-check__text { flex: 1; min-width: 0; }
+.rn-check__hint { display: block; font-size: 12.5px; color: var(--ink-faint); }
+.rn-check .rn-meta { display: inline; }
+
+.rn-sub { margin: 20px 0 8px; font-size: 13px; font-weight: 500; color: var(--ink-soft); }
+.rn-chips { list-style: none; margin: 0; padding: 0; display: flex; flex-wrap: wrap; gap: 8px; align-items: center; }
+.rn-chip { display: inline-flex; align-items: center; gap: 4px; padding: 3px 6px; border: var(--line) solid var(--rule); border-radius: var(--radius-pill); font-size: 13px; background: none; color: var(--ink); }
+.rn-chip a { color: inherit; text-decoration: none; padding: 0 2px; }
+.rn-chip a:hover { text-decoration: underline; }
+.rn-chip--pri { border-color: var(--accent); }
+.rn-chip__star, .rn-chip__x { background: none; border: 0; padding: 0 4px; cursor: pointer; color: var(--ink-faint); font: inherit; font-size: 14px; line-height: 1; }
+.rn-chip--pri .rn-chip__star { color: var(--accent); }
+.rn-chip__star:hover, .rn-chip__x:hover { color: var(--ink); }
+.rn-chip--add { border-style: dashed; color: var(--ink-soft); padding: 3px 12px; cursor: pointer; font: inherit; font-size: 13px; }
+.rn-add { display: flex; flex-wrap: wrap; gap: 8px; align-items: center; }
+.rn-add input[type="number"] { width: 140px; }
+
+.rn-details { margin: 18px 0 0; font-size: 12.5px; color: var(--ink-faint); }
+.rn-details summary { cursor: pointer; width: fit-content; }
+.rn-details p, .rn-details ul { margin: 8px 0 0; max-width: var(--measure); }
+.rn-details ul { padding-left: 18px; display: grid; gap: 4px; }
+.rn-dot--sm { display: inline-block; width: 8px; height: 8px; vertical-align: 1px; }

package/modules/hall-ui/public/gate.html

@@ -51,12 +51,13 @@
                behind it are system:true/archon server-side regardless. -->
           <section class="scroll" id="fence-panel" aria-labelledby="fence-h" hidden>
             <h2 class="scroll__h" id="fence-h">Autobongos runner</h2>
-            <p class="scroll__lede">The unattended runner works only the goals listed here, and only while it is on. This is the switch — it lives on the server, so the machine can read it and cannot change it.</p>
-            <!-- Liveness first (task 1003905): "is it running at all" is the
-                 question before "is it allowed to run". -->
-            <div id="fence-runner"><span class="kit-skel"></span></div>
-            <div id="fence-state"><span class="kit-skel"></span></div>
-            <div id="fence-goals"></div>
+            <!-- One panel (task 1004509): a checklist while anything the runner
+                 needs is missing, one status line with the switch once it is all
+                 ticked. Drawn from /autonomy/runners + /autonomy/fence together. -->
+            <div id="fence-body"><span class="kit-skel"></span></div>
+            <!-- Every builder's runner (task 1004501): what each one picked to
+                 work, whether you paused it, and whether it is checking in. -->
+            <div id="fence-builders"></div>
           </section>
 
           <section class="scroll" aria-labelledby="gate-list-h">
@@ -81,6 +82,6 @@
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>
 <script src="/builders/hall-kit.js"></script>
-<script src="/builders/gate.js?v=2026-09-19-runner"></script>
+<script src="/builders/gate.js?v=2026-10-01-runner-checklist"></script>
 </body>
 </html>