@bongos/core 1.21.153 → 1.21.154

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.21.153",
-  "core_contract": "1.21.153",
-  "source_commit": "fc0ed4122e62acbeb463e589bd686bc56e242daf",
+  "core_version": "1.21.154",
+  "core_contract": "1.21.154",
+  "source_commit": "046cb72ed357309e34e58fb712b7efa7b56a4888",
   "source_ref": "HEAD",
-  "built_at": "2026-10-21T21:04:39.395Z",
+  "built_at": "2026-10-22T14:58:30.668Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 608,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 3808,
-  "tree_sha256": "8bafc2ef799ecc86b401ba0af5adbd70549de74a2c687d44b722f607b58fc268",
+  "tree_sha256": "9b227a8bf5b2795c452c985814ac1f22809900835d5148efee15c24a2203b4af",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -2387,7 +2387,7 @@
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "36e20b38d432f4f698b2138ebc76e97aec0307fed427337825ee4c7080ea8332"
+      "sha256": "9402cb974357bea192c8fd919a1f49cc6e8f514b9948705f37ef5dafebca1278"
     },
     {
       "path": "docs/architecture.md",
@@ -2412,12 +2412,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "b38c249c28740733f21a3629881b56e0a12b67418094c442da3ed5573370f09d"
+      "sha256": "36192920b84dfe1a36853f586c7de9259b6ce62adba750ef73537a050604b6d7"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "309b4557fa126b25d30658607eb37fc950bd36d4e8a5737e40ba1678d7735b0d"
+      "sha256": "0ce492be99e91cdf249acc1f49c2acfde87e652b5a73a95c1d12ff41865273ff"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2927,12 +2927,12 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "6255a313246c3289458f9d8b9e002216e7226ba57318b7814a9d621fc9dc6d7f"
+      "sha256": "933a5d803257d84f6df3fa2fd66229f74e0463ba41f23256ab7db81c7a689ca8"
     },
     {
       "path": "docs/modules-contract.md",
       "mode": "0000644",
-      "sha256": "bf2879ae52353790c2f8b9ef22f06ae3358a1357513d2a967f5ce3768eafb221"
+      "sha256": "4d0036450b55adc4539a9838f8478848e1cce16fa237b9207c10d08980a3d906"
     },
     {
       "path": "docs/onboarding/diagrams/01-task-lifecycle.mmd",
@@ -3017,7 +3017,7 @@
     {
       "path": "docs/page-readings.json",
       "mode": "0000644",
-      "sha256": "a6a2bdce1ad9bdb2463892c9e4618090c4bf6c1dbabe7ab026507268810d940a"
+      "sha256": "5bfc13802503364ffb6812d85c052ec273404d5994affc1be4949dd819161b1f"
     },
     {
       "path": "docs/project-context.template.md",
@@ -6162,12 +6162,12 @@
     {
       "path": "modules/hall-ui/public/modules.html",
       "mode": "0000644",
-      "sha256": "ac61c093dd938f658898762259a8f9431b4f625797943a42d6048602317576bd"
+      "sha256": "75a38104b51ea30550a616c8e709a3ec278bf153dedbd487acf89d247a61b19f"
     },
     {
       "path": "modules/hall-ui/public/modules.js",
       "mode": "0000644",
-      "sha256": "6174a55c79244cf80508024903f89803c908f731b09dc74190f447af832204b6"
+      "sha256": "6b5a48f2bb96e0478a7150265ded185e04d707b51f5ad7d3b813446115eb6142"
     },
     {
       "path": "modules/hall-ui/public/modules.states.json",
@@ -6762,7 +6762,7 @@
     {
       "path": "modules/hall-ui/records/catalog.md",
       "mode": "0000644",
-      "sha256": "f2ef04fd2c76d94bcdfd70354a243a77370502849b50365352ae633c9566b258"
+      "sha256": "e760daf386c9e723843c573afcce713a1b18514684c57f58ad156f3a79d9b557"
     },
     {
       "path": "modules/hall-ui/records/collaboration.md",
@@ -10557,12 +10557,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "7107af68ad1c2b1d87998b3e40cc5f51ca1607c681ab363b95196e7a93a5c9c5"
+      "sha256": "8896ac22750733e9413d6ac302b78e85999a7878eb8ca8c1ec1af5e493abea42"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "67ef9a37cc7fd004e95cec39e419b6a132e331867d6dabd29cfa4fdc2d8c23d1"
+      "sha256": "1a220fca30df53b3e1cc4ae053b91ec424e142b0e2aaf38bf53bf22cf444b5ba"
     },
     {
       "path": "public-docs/index.html",
@@ -10582,7 +10582,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "d7f56b04bf200720e04752f98b564cc8f245344bbf93bd1e64fa81a7a41a5a46"
+      "sha256": "3dbca36d0a1743a39859a3d3d26cf209db264cd6bd6c8588e7ebf1177be55b75"
     },
     {
       "path": "scripts/cron/style_guide_audit.sh",
@@ -12692,7 +12692,7 @@
     {
       "path": "src/bongos/module-listing.js",
       "mode": "0000644",
-      "sha256": "3f35454a231ef86e08e2c49f641ae912977bf1c351ed6838c348a0880d2d2850"
+      "sha256": "2f2ac4e04af85579c9c2bfd6e6b8e880cff46cadf49ad3791948c9bca03c8d72"
     },
     {
       "path": "src/bongos/module-overrides.js",
@@ -12872,7 +12872,7 @@
     {
       "path": "src/bongos/routes/modules.js",
       "mode": "0000644",
-      "sha256": "e6b1b25371695b4aa959f5fdcece31869e827221f0205d1797c8332628d7b6a2"
+      "sha256": "051144a0c2235022e7e423b6a48c2203dadb8142dedfb57edbbf6c5ba69206bb"
     },
     {
       "path": "src/bongos/routes/my-passkeys.js",
@@ -12962,7 +12962,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "43818864e42838c6ba32937c9fee880154e5164fe64363ba230bb576a8ff02d7"
+      "sha256": "39421d70df1f7628486cf17294e001fc06d49fa502847ca7786fff43fb2738c4"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -15467,7 +15467,7 @@
     {
       "path": "tests/hall_catalog_world.mjs",
       "mode": "0000644",
-      "sha256": "8cbc6512e9ab4dace612378482aab215d39de9727622daef998ebe84ab68f9f0"
+      "sha256": "d209d00843af7bab570d02be627761913e03129c80f29f0c036235633b8085a9"
     },
     {
       "path": "tests/hall_city.mjs",
@@ -16642,7 +16642,7 @@
     {
       "path": "tests/module_store_listing.mjs",
       "mode": "0000644",
-      "sha256": "3402dfb7575e482b409712381ee5cfe6b39e015ae3c1186edcba0b049690d532"
+      "sha256": "be639096f82a9750e25b57c7612e94754b6109ef13507144be9ceb384628eb91"
     },
     {
       "path": "tests/module_store_publish.mjs",

package/docs/api/openapi.json

@@ -23004,7 +23004,7 @@
           "store"
         ],
         "summary": "GET /store/modules",
-        "description": "The store catalog under the quality floor (task 1003807, ADR 0343 D2/D5): each listed module's newest version, if it passed the Security gate and scores at or above the floor, or under \"new\" if it has no real-world data yet. Below the bar is not listed at all. The floor is fixed in module-listing.js and returned here. rank: any-builder — a read of public store metadata, like /store/modules/latest: no entitlement taken, nothing changed.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "description": "The store catalog under the quality floor (task 1003807, ADR 0343 D2/D5): each listed module's newest version, if it passed the Security gate and scores at or above the floor, or under \"new\" if it has no real-world data yet. Below the bar is not listed at all. The floor is fixed in module-listing.js and returned here. `?sort=<part>` orders the listed modules by the part a buyer cares about (task 1003800, sortByPart); the parts it accepts come back as sort_parts. rank: any-builder — a read of public store metadata, like /store/modules/latest: no entitlement taken, nothing changed.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
         "x-source": "src/bongos/routes/modules.js",
         "responses": {

package/docs/copy-inventory.md

@@ -4,13 +4,13 @@
 > Deterministic on a given tree — regenerate and commit rather than hand-editing.
 > Machine-readable twin: [`copy-registry.json`](copy-registry.json).
 
-**2769 strings** across 3 surfaces · 2348 distinct pieces of copy · 2769 certain, 0 heuristic · 241 shown in more than one place.
+**2771 strings** across 3 surfaces · 2350 distinct pieces of copy · 2771 certain, 0 heuristic · 241 shown in more than one place.
 
 ## Surfaces
 
 | surface | lives at | files | strings |
 |---|---|---|---|
-| `builders-hall` | `modules/hall-ui/public` | 148 | 1961 |
+| `builders-hall` | `modules/hall-ui/public` | 148 | 1963 |
 | `status-dashboard` | `modules/status-ui/public` | 4 | 100 |
 | `landing` | `modules/public-landing/public` | 9 | 708 |
 
@@ -78,7 +78,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `8226c979db4d` | 3x | Not now | modules/hall-ui/public/collab.js:668, modules/hall-ui/public/paintbrush.js:119, modules/hall-ui/public/paintbrush.js:183 |
 | … | | _201 more in the JSON registry_ | |
 
-## `builders-hall` — 1961 strings
+## `builders-hall` — 1963 strings
 
 | id | conf | text | where |
 |---|---|---|---|
@@ -129,7 +129,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `0150152ea9ec` | certain | A known snag stopped the move to core {…}: | `modules/hall-ui/public/deploy.js:214` |
 | `2e17d7e236d9` | certain | A module built here can be submitted upstream for review, so it can join the shared catalog with your name and | `modules/hall-ui/public/modules.html:74` |
 | `0c611f5a76af` | certain | A move to core {…} failed{…} — this project has moved on since, and is serving {…} now. Whatever stopped that  | `modules/hall-ui/public/deploy.js:374` |
-| `d316ba4f7e9a` | certain | A part is strong at 80 out of 100 or more, and weak below the listing floor. A part with no data yet is not co | `modules/hall-ui/public/modules.html:87` |
+| `e395cd11edab` | certain | A part is strong at 80 out of 100 or more, and weak below the listing floor. A part with no data yet is not co | `modules/hall-ui/public/modules.html:90` |
 | `a07c7b335a66` | certain | A protected-scope goal requires a Metic+ member. | `modules/hall-ui/public/goals-render.js:1306` |
 | `a07c7b335a66` | certain | A protected-scope goal requires a Metic+ member. | `modules/hall-ui/public/goals-render.js:1328` |
 | `5723baf26b2d` | certain | A quick idea is a thought filed fast. It is not an unfinished Full Idea — only its author can offer it up for  | `modules/hall-ui/public/idea.js:475` |
@@ -176,7 +176,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `375b0e67bc30` | certain | Allow new releases and move to {…} | `modules/hall-ui/public/deploy.js:257` |
 | `375b0e67bc30` | certain | Allow new releases and move to {…} | `modules/hall-ui/public/deploy.js:685` |
 | `e99cc5d37404` | certain | Already a member? | `modules/hall-ui/public/hall-render.js:373` |
-| `70ffbebe42fd` | certain | Also available as a Claude page | `modules/hall-ui/public/modules.html:100` |
+| `70ffbebe42fd` | certain | Also available as a Claude page | `modules/hall-ui/public/modules.html:103` |
 | `da5368d10f85` | certain | Amendment {…} passed{…}, and the constitution below is not the one it decided: | `modules/hall-ui/public/government.js:671` |
 | `2ca420e19dbb` | certain | An earlier attempt did not land. | `modules/hall-ui/public/deploy.js:374` |
 | `69f0ca4a4d84` | certain | Analytics scope | `modules/hall-ui/public/hall-render.js:1184` |
@@ -368,7 +368,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `90691bceaf68` | certain | Could not load | `modules/hall-ui/public/project-settings.js:284` |
 | `90691bceaf68` | certain | Could not load | `modules/hall-ui/public/task.js:1022` |
 | `589a4cfc5442` | certain | Could not load idea {…}. | `modules/hall-ui/public/ideas.js:1018` |
-| `192c893fc64e` | certain | Could not load modules. | `modules/hall-ui/public/modules.js:458` |
+| `192c893fc64e` | certain | Could not load modules. | `modules/hall-ui/public/modules.js:489` |
 | `9912c3835136` | certain | Could not load requests — reload to try again. | `modules/hall-ui/public/collab.js:845` |
 | `7775fec0fa85` | certain | Could not load sessions. | `modules/hall-ui/public/sessions.js:504` |
 | `7775fec0fa85` | certain | Could not load sessions. | `modules/hall-ui/public/sessions.js:542` |
@@ -389,7 +389,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `64f9d51f0fa2` | certain | Could not load your settings. | `modules/hall-ui/public/settings.js:1204` |
 | `de244c45d916` | certain | Could not load {…} | `modules/hall-ui/public/task.js:1015` |
 | `2366356926b4` | certain | Could not mark the primer just now. Try again. | `modules/hall-ui/public/primer.js:259` |
-| `753987b5da13` | certain | Could not reach the submit endpoint. | `modules/hall-ui/public/modules.js:436` |
+| `753987b5da13` | certain | Could not reach the submit endpoint. | `modules/hall-ui/public/modules.js:467` |
 | `6f500726f0ac` | certain | Could not read the report: {…} | `modules/hall-ui/public/watch.js:768` |
 | `21c2f33168a3` | certain | Could not read this project's deploy state: {…} | `modules/hall-ui/public/deploy.js:624` |
 | `21a782f1af26` | certain | Could not read what this would bring in: {…}. The check below still applies. | `modules/hall-ui/public/deploy.js:542` |
@@ -831,7 +831,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `90623fec4cfa` | certain | No page is open. | `modules/hall-ui/public/tweak-editor.js:563` |
 | `1a46c31343cb` | certain | No projects are hosted here yet. | `modules/hall-ui/public/fleet-costs.js:68` |
 | `9f73b3f3dad0` | certain | No rank floor — any builder can claim this task | `modules/hall-ui/public/task-lib.js:82` |
-| `4ffd939755e0` | certain | No real-world data yet, so it is listed but not ranked. | `modules/hall-ui/public/modules.js:221` |
+| `4ffd939755e0` | certain | No real-world data yet, so it is listed but not ranked. | `modules/hall-ui/public/modules.js:235` |
 | `722d107d7a90` | certain | No render is attached to this page yet. /tweak attaches them when it applies a page; until then there is nothi | `modules/hall-ui/public/approval-queue.js:135` |
 | `3fd0c6fcb92e` | certain | No request and no invite needed. Sign in with GitHub, and a step-by-step guide takes you the rest of the way. | `modules/hall-ui/public/hall-render.js:283` |
 | `2947c1ddea9a` | certain | No running box to deploy. | `modules/hall-ui/public/deploy.js:708` |
@@ -902,7 +902,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `43626cff7071` | certain | Nothing of that kind in your sky. | `modules/hall-ui/public/sky-panel.js:123` |
 | `b05a5f8cb074` | certain | Nothing personal is sent. | `modules/hall-ui/public/my-agents.js:450` |
 | `ad9a17a8a5eb` | certain | Nothing shipped yet. | `modules/hall-ui/public/profile.js:297` |
-| `f326632f2013` | certain | Nothing to submit — every module here ships with the core. | `modules/hall-ui/public/modules.js:397` |
+| `f326632f2013` | certain | Nothing to submit — every module here ships with the core. | `modules/hall-ui/public/modules.js:428` |
 | `27c0d872db2d` | certain | Nothing you have typed above is lost by opening this. | `modules/hall-ui/public/ideas.html:155` |
 | `26a07b64f49d` | certain | Now running core {…} | `modules/hall-ui/public/deploy.js:400` |
 | `21cb60a8a96a` | certain | Now running core {…} — but GitHub was not updated. | `modules/hall-ui/public/deploy.js:390` |
@@ -1111,7 +1111,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `48e5f1d19e90` | certain | Runner allowed to work | `modules/hall-ui/public/gate.js:425` |
 | `41730c113dd5` | certain | Runners work only the goals above, and only while the switch is on. Each builder picks which of them their own | `modules/hall-ui/public/gate.js:425` |
 | `b6596905f845` | certain | Said more than once | `modules/hall-ui/public/copy-desk.html:56` |
-| `ce046dcbd8e1` | certain | Save as PDF | `modules/hall-ui/public/modules.html:101` |
+| `ce046dcbd8e1` | certain | Save as PDF | `modules/hall-ui/public/modules.html:104` |
 | `819cdcaac499` | certain | Save current filters as | `modules/hall-ui/public/hall-kit.js:411` |
 | `0c79b504aebe` | certain | Save key | `modules/hall-ui/public/settings.js:876` |
 | `b3d55c8c765a` | certain | Save my choices | `modules/hall-ui/public/settings-specialities.js:163` |
@@ -1216,6 +1216,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `867df58c9aaa` | certain | Something else | `modules/hall-ui/public/copy-desk.html:95` |
 | `e11c18877155` | certain | Something is here. | `modules/hall-ui/public/sky-interaction.js:35` |
 | `c377d8ed744b` | certain | Something went wrong. Try again. | `modules/hall-ui/public/profile-connections.js:331` |
+| `70383b194ec0` | certain | Sort by | `modules/hall-ui/public/modules.html:87` |
 | `e0767e80206c` | certain | Sound for {…} | `modules/hall-ui/public/settings.js:309` |
 | `7f4f7b25c61f` | certain | Sound preference saved. | `modules/hall-ui/public/settings.js:326` |
 | `490f4bbbc75b` | certain | Sounds are switched off for now. Nothing plays when a task ships, when {{currency}} arrive, or when Claude fin | `modules/hall-ui/public/settings.html:396` |
@@ -1757,7 +1758,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `7b5ad068dc26` | certain | not graded | `modules/hall-ui/public/hall-render.js:349` |
 | `01a3d68d80c1` | certain | not graded (grader outage) | `modules/hall-ui/public/builders.js:557` |
 | `d43b9bbb8d4d` | certain | not graded (quality lens unavailable) | `modules/hall-ui/public/builders.js:559` |
-| `380177c47d89` | certain | not measured yet | `modules/hall-ui/public/modules.js:236` |
+| `380177c47d89` | certain | not measured yet | `modules/hall-ui/public/modules.js:252` |
 | `c04e4491af67` | certain | not now | `modules/hall-ui/public/studio.html:110` |
 | `3916a3dc8e98` | certain | not started | `modules/hall-ui/public/roadmap.js:120` |
 | `3916a3dc8e98` | certain | not started | `modules/hall-ui/public/roadmap.js:341` |
@@ -1824,7 +1825,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `c8c2551006dc` | certain | skip the tour | `modules/hall-ui/public/goal-map.html:121` |
 | `c8c2551006dc` | certain | skip the tour | `modules/hall-ui/public/thinking.html:122` |
 | `1e737a57eb20` | certain | start governing | `modules/hall-ui/public/city.html:99` |
-| `e294c3429c2e` | certain | strong at {…} | `modules/hall-ui/public/modules.js:225` |
+| `e294c3429c2e` | certain | strong at {…} | `modules/hall-ui/public/modules.js:241` |
 | `0215b2cdca8c` | certain | submit for review | `modules/hall-ui/public/modules.js:187` |
 | `43e6f1592ae3` | certain | submit it in the editor | `modules/hall-ui/public/studio.js:836` |
 | `9ec19e32f86f` | certain | submit page | `modules/hall-ui/public/tweak-editor.html:68` |
@@ -1895,7 +1896,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `18cf722bdd7e` | certain | waiting · | `modules/hall-ui/public/sky-interaction.js:128` |
 | `354861d3c2ce` | certain | waits for a restart | `modules/hall-ui/public/modules.js:139` |
 | `35be9e0923da` | certain | walks the whole path in plain language. | `modules/hall-ui/public/hall-render.js:837` |
-| `20318b6da94e` | certain | weak at {…} | `modules/hall-ui/public/modules.js:227` |
+| `20318b6da94e` | certain | weak at {…} | `modules/hall-ui/public/modules.js:243` |
 | `db42054582ed` | certain | wells · | `modules/hall-ui/public/sky-interaction.js:129` |
 | `17705daf7b85` | certain | what counts as passing | `modules/hall-ui/public/government.html:55` |
 | `96a8971a5c44` | certain | what got un-stuck | `modules/hall-ui/public/blockers.js:132` |
@@ -1945,6 +1946,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `80b4aa799a4b` | certain | {…} is writing this page now. You can read it, download it, or take another page from the studio. | `modules/hall-ui/public/tweak-editor.js:319` |
 | `830d2be6f859` | certain | {…} line | `modules/hall-ui/public/tweak-editor.js:235` |
 | `511a4b6073cf` | certain | {…} more PR{…} still being checked. Refresh shortly. | `modules/hall-ui/public/gate.js:225` |
+| `92469c4757f1` | certain | {…} not measured yet | `modules/hall-ui/public/modules.js:226` |
 | `73c1372b43d9` | certain | {…} of {…} | `modules/hall-ui/public/sky-panel.js:120` |
 | `cc5106af4b35` | certain | {…} of {…} criteria satisfied | `modules/hall-ui/public/goals-lib.js:32` |
 | `cc5106af4b35` | certain | {…} of {…} criteria satisfied | `modules/hall-ui/public/goals-render.js:701` |
@@ -1968,7 +1970,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `1a8a6267e490` | certain | {…} unfinished task{…} — say what happens to each | `modules/hall-ui/public/goals-render.js:1032` |
 | `2f75f69cdb2f` | certain | {…} {…} changed | `modules/hall-ui/public/profile-crafts.js:218` |
 | `8186b562553a` | certain | {…} {…} waiting | `modules/hall-ui/public/work.js:420` |
-| `a9216af9b05e` | certain | {…} {…} — how-to | `modules/hall-ui/public/modules.js:513` |
+| `a9216af9b05e` | certain | {…} {…} — how-to | `modules/hall-ui/public/modules.js:544` |
 | `0d4016a5531c` | certain | {…} {…}{…} | `modules/hall-ui/public/watch.js:514` |
 | `0d4016a5531c` | certain | {…} {…}{…} | `modules/hall-ui/public/work.js:265` |
 | `b3757ba3bb46` | certain | {…} · Stored encrypted; never shown again after saving. | `modules/hall-ui/public/settings.js:878` |
@@ -1976,7 +1978,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `d73256fbc395` | certain | {…} · who votes, and how it {…} | `modules/hall-ui/public/board-room.js:460` |
 | `cab2a4296aec` | certain | {…} · {…} · {…}{…} | `modules/hall-ui/public/goal-inbox.js:458` |
 | `1ac723849449` | certain | {…} · {…}{…} | `modules/hall-ui/public/sky-interaction.js:33` |
-| `ddd2bfc1fb60` | certain | {…} — how to use it | `modules/hall-ui/public/modules.js:515` |
+| `ddd2bfc1fb60` | certain | {…} — how to use it | `modules/hall-ui/public/modules.js:546` |
 | `085f93f3f775` | certain | {…} — see all standings | `modules/hall-ui/public/hall-render.js:80` |
 | `2a2728a4ec4f` | certain | {…}% of tasks complete | `modules/hall-ui/public/roadmap.js:63` |
 | `15e545eb3ce2` | certain | {…}, no such task | `modules/hall-ui/public/task.js:1002` |
@@ -1991,7 +1993,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `97e27ab169ae` | certain | {…}{…} session{…} across {…} builder{…}. | `modules/hall-ui/public/sessions.js:443` |
 | `3d74668f69e5` | certain | {…}{…} · {…} | `modules/hall-ui/public/task.js:639` |
 | `7f79bedecf60` | certain | {…}{…} — open it to see what went | `modules/hall-ui/public/goal-inbox.js:374` |
-| `1026fd5f68b7` | certain | · version | `modules/hall-ui/public/modules.js:518` |
+| `1026fd5f68b7` | certain | · version | `modules/hall-ui/public/modules.js:549` |
 | `4a5ff4f662df` | certain | — ${…} of ${…} this month ({…}%). {…} | `modules/hall-ui/public/hall-render.js:523` |
 | `a6ae9cbdee30` | certain | — all builders — | `modules/hall-ui/public/builders.js:711` |
 | `729d4ce22b99` | certain | — any — | `modules/hall-ui/public/hall-widgets.js:163` |
@@ -2026,7 +2028,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `5f1d914ad45e` | certain | …{…} more — | `modules/hall-ui/public/goal-inbox.js:561` |
 | `de8fa5223aee` | certain | ‹ Prev | `modules/hall-ui/public/hall-kit.js:74` |
 | `d4b84b7fbdeb` | certain | ← All goals | `modules/hall-ui/public/goals.html:77` |
-| `9159687c73ff` | certain | ← All modules | `modules/hall-ui/public/modules.html:98` |
+| `9159687c73ff` | certain | ← All modules | `modules/hall-ui/public/modules.html:101` |
 | `d063a7b9c83e` | certain | ← Back | `modules/hall-ui/public/page-notes.js:283` |
 | `7926e30955d2` | certain | ← Back to goal | `modules/hall-ui/public/goals.html:189` |
 | `7926e30955d2` | certain | ← Back to goal | `modules/hall-ui/public/goals.html:205` |

package/docs/copy-registry.json

@@ -3,9 +3,9 @@
   "generator": "scripts/gds/copy-inventory.js",
   "goal": 1000074,
   "counts": {
-    "strings": 2769,
-    "unique_ids": 2348,
-    "certain": 2769,
+    "strings": 2771,
+    "unique_ids": 2350,
+    "certain": 2771,
     "heuristic": 0,
     "duplicate_ids": 241
   },
@@ -13,7 +13,7 @@
     "builders-hall": {
       "at": "modules/hall-ui/public",
       "files": 148,
-      "strings": 1961
+      "strings": 1963
     },
     "status-dashboard": {
       "at": "modules/status-ui/public",
@@ -3054,11 +3054,11 @@
       "confidence": "certain"
     },
     {
-      "id": "d316ba4f7e9a",
+      "id": "e395cd11edab",
       "surface": "builders-hall",
-      "text": "A part is strong at 80 out of 100 or more, and weak below the listing floor. A part with no data yet is not counted against a module.",
+      "text": "A part is strong at 80 out of 100 or more, and weak below the listing floor. A part with no data yet is not counted against a module. Sort by a part to see the modules strongest at it first; a module with no score for that part goes last, and a new module is never ranked.",
       "file": "modules/hall-ui/public/modules.html",
-      "line": 87,
+      "line": 90,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -3481,7 +3481,7 @@
       "surface": "builders-hall",
       "text": "Also available as a Claude page",
       "file": "modules/hall-ui/public/modules.html",
-      "line": 100,
+      "line": 103,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -5209,7 +5209,7 @@
       "surface": "builders-hall",
       "text": "Could not load modules.",
       "file": "modules/hall-ui/public/modules.js",
-      "line": 458,
+      "line": 489,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -5398,7 +5398,7 @@
       "surface": "builders-hall",
       "text": "Could not reach the submit endpoint.",
       "file": "modules/hall-ui/public/modules.js",
-      "line": 436,
+      "line": 467,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -9376,7 +9376,7 @@
       "surface": "builders-hall",
       "text": "No real-world data yet, so it is listed but not ranked.",
       "file": "modules/hall-ui/public/modules.js",
-      "line": 221,
+      "line": 235,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10015,7 +10015,7 @@
       "surface": "builders-hall",
       "text": "Nothing to submit — every module here ships with the core.",
       "file": "modules/hall-ui/public/modules.js",
-      "line": 397,
+      "line": 428,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -11896,7 +11896,7 @@
       "surface": "builders-hall",
       "text": "Save as PDF",
       "file": "modules/hall-ui/public/modules.html",
-      "line": 101,
+      "line": 104,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -12836,6 +12836,15 @@
       "origin": "js-notice",
       "confidence": "certain"
     },
+    {
+      "id": "70383b194ec0",
+      "surface": "builders-hall",
+      "text": "Sort by",
+      "file": "modules/hall-ui/public/modules.html",
+      "line": 87,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "e0767e80206c",
       "surface": "builders-hall",
@@ -17710,7 +17719,7 @@
       "surface": "builders-hall",
       "text": "not measured yet",
       "file": "modules/hall-ui/public/modules.js",
-      "line": 236,
+      "line": 252,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -18313,7 +18322,7 @@
       "surface": "builders-hall",
       "text": "strong at {…}",
       "file": "modules/hall-ui/public/modules.js",
-      "line": 225,
+      "line": 241,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -18952,7 +18961,7 @@
       "surface": "builders-hall",
       "text": "weak at {…}",
       "file": "modules/hall-ui/public/modules.js",
-      "line": 227,
+      "line": 243,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -19397,6 +19406,15 @@
       "origin": "js-text-assign",
       "confidence": "certain"
     },
+    {
+      "id": "92469c4757f1",
+      "surface": "builders-hall",
+      "text": "{…} not measured yet",
+      "file": "modules/hall-ui/public/modules.js",
+      "line": 226,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "73c1372b43d9",
       "surface": "builders-hall",
@@ -19609,7 +19627,7 @@
       "surface": "builders-hall",
       "text": "{…} {…} — how-to",
       "file": "modules/hall-ui/public/modules.js",
-      "line": 513,
+      "line": 544,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -19681,7 +19699,7 @@
       "surface": "builders-hall",
       "text": "{…} — how to use it",
       "file": "modules/hall-ui/public/modules.js",
-      "line": 515,
+      "line": 546,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -19816,7 +19834,7 @@
       "surface": "builders-hall",
       "text": "· version",
       "file": "modules/hall-ui/public/modules.js",
-      "line": 518,
+      "line": 549,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -20131,7 +20149,7 @@
       "surface": "builders-hall",
       "text": "← All modules",
       "file": "modules/hall-ui/public/modules.html",
-      "line": 98,
+      "line": 101,
       "origin": "html-text",
       "confidence": "certain"
     },

package/docs/module-api-changelog.md

@@ -3143,5 +3143,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.21.151 with no explicit bump. run 39671625798. (task 1002620)
   1.21.153 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.21.152 with no explicit bump. run 39675693737. (task 1002620)
+  1.21.154 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.21.153 with no explicit bump. run 39800316919. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/docs/modules-contract.md

@@ -393,6 +393,7 @@ Run `bongos upgrade` to confirm coreVersion compatibility, then `node scripts/gd
 - **A how-to is required** ([ADR 0347](adr/0347-every-store-module-ships-a-how-to.md)). `modules/<key>/HOWTO.md` is what a buyer reads — the store shows it as the module's page — so it is written for the person who installs the module, not for an AI working inside it (that is `CLAUDE.md`). It is plain Markdown: any AI or person can write it. Publish refuses the version unless it has these five level-2 headings, in any order and any case, each with some text under it: `## What it does`, `## Install and enable`, `## How to use it` (with one worked example), `## Configuration` ("None." is fine) and `## Limits and known issues` ("None known." is fine). HTML comments don't count as text, so the scaffold's prompts must be replaced. The refusal names each failing section. The check is one function, `checkHowto` in `scripts/gds/module-artifact.js`; the CLI runs it before uploading and the store runs it again on upload, so a hand-built upload can't skip it. `bongos module check` reports it as advice only — an upstream submit is not gated by it. Install and update don't re-check it, so a version published before the gate still installs. The file travels in the tarball, so its hash pins it to the version. An optional `howto.artifactUrl` in `module.json` (an `https://` link on `claude.ai`) is shown as an extra, never graded.
 - **Getting listed** (task 1003807, [ADR 0343](adr/0343-a-module-score-is-a-security-gate-then-an-average-of-visible-parts.md)). Publishing a version does not by itself put it in the store's catalog, `GET /store/modules`. The catalog shows each module's newest version, judged by its current score. It must pass the Security gate first; a version that failed it, or has not been checked yet, is not listed. A new version with no install or reliability data yet is listed with a **New** label and is not ranked; the floor does not apply to it until it has a real score. Every other version is listed only if its overall score is **at least 50 out of 100**. Below that it is not listed at all. The floor is fixed in Bongos itself (`QUALITY_FLOOR` in `src/bongos/module-listing.js`) and returned in the catalog response; no author or instance setting moves it, and changing it is an owner-approved, reviewed task.
 - **What a module is strong and weak at** (task 1003799, ADR 0343 D4). Each catalog entry also carries `parts` (the current result of Tests, Clean installs, Reliability, Tester feedback and How-to) and a reading of them: `strengths` (a part scored **80 or more**), `weaknesses` (a part scored **below the floor**) and `unmeasured` (a part with no score yet, which is never counted as weak). Each strength and weakness has a one-sentence `detail` saying what the number rests on. Security is not among them: every listed version has passed it. The reading is `readParts` in `src/bongos/module-listing.js`; the hall's Modules tab shows it in its "In the store" group, so two modules with the same overall score can be told apart.
+- **Sorting by a part** (task 1003800). `GET /store/modules?sort=<part>` orders the listed modules by one part a buyer cares about: `tests`, `install`, `reliability`, `tester_feedback` or `docs` (the response lists them as `sort_parts`, and says which one it applied as `sort`). Modules with a score for that part come first, highest first; a tie goes to the higher overall score, then the module key. A module with no score for that part goes last, so missing data never wins or loses a place on its own. New modules are not sorted: they are never ranked. Any other `sort` value is refused with a 400. Without `sort`, both lists are in key order. The rule is `sortByPart` in `src/bongos/module-listing.js`.
 
 ### 7. Install from the store
 

package/docs/page-readings.json

@@ -5,7 +5,7 @@
   "adr": "0341 D3",
   "reread": "node scripts/gds/page-reader.js --stale",
   "how": ["Generated by node scripts/gds/page-reader.js (BV2.TW04, task 1004315; ADR 0341 D3). Do not hand-edit.","One entry per page of docs/page-inventory.json. Lines are in page order: the default state first, and a line only another state shows sits where that state shows it, with its state named.","placement: placed = a docs/copy-registry.json row renders it (file, line, string_id); shared = shell text every page of the surface carries (top bar, sidebar, footer), with its row when the registry has one; unplaced = the registry cannot place it (a rewrite becomes an engineer task, ADR 0341 D4).","text keeps {…} where the registry row has a hole, or where a value the page read from its API was filled in. A string that is only such data is counted under omitted.data, not listed.","reading_hash is over the non-shared lines (key, section, text); files_hash is over the page's inventory files. --check compares files_hash only and never opens a browser.","Rendered through the hall-preview harness (hall) and the ui-design kit stub (landing, status), at 1280x800 with the clock pinned, so a reading is the fixture world's page."],
-  "counts": {"pages":46,"lines":5561,"placed":1706,"shared":398,"unplaced":3457,"omitted_data":3600},
+  "counts": {"pages":46,"lines":5563,"placed":1707,"shared":398,"unplaced":3458,"omitted_data":3605},
   "pages": [
     {
       "id": "builders:atlas",
@@ -1885,10 +1885,10 @@
       "surface": "builders",
       "title": "Modules",
       "states_read": ["browse","search-empty","lens","details","out"],
-      "files_hash": "e607fd3b8af5c0ba",
-      "reading_hash": "9983cfd08a0605e5",
-      "counts": {"lines":55,"placed":24,"shared":8,"unplaced":23},
-      "omitted": {"data":100},
+      "files_hash": "78b02310ae1e8e04",
+      "reading_hash": "a3861c8a1816328f",
+      "counts": {"lines":57,"placed":25,"shared":8,"unplaced":24},
+      "omitted": {"data":105},
       "notes": ["details: an action failed (page.click: Timeout 6000ms exceeded.); read as it stood"],
       "lines": [
         {"key":"L0001","section":"skip link","text":"Skip to content","placement":"shared","file":"modules/hall-ui/public/shell.js","line":872,"string_id":"87cee78ca134"},
@@ -1931,21 +1931,23 @@
         {"key":"L0038","section":"Module catalog","text":"submit for review","placement":"placed","file":"modules/hall-ui/public/modules.js","line":187,"string_id":"0215b2cdca8c"},
         {"key":"L0039","section":"Module catalog","text":"A module built here can be submitted upstream for review, so it can join the shared catalog with your name and this project credited.","placement":"placed","file":"modules/hall-ui/public/modules.html","line":74,"string_id":"2e17d7e236d9"},
         {"key":"L0040","section":"Module catalog","text":"In the store","placement":"placed","file":"modules/hall-ui/public/modules.html","line":83,"string_id":"ecfebcd52894"},
-        {"key":"L0041","section":"Module catalog","text":"No store module matches that {…}.","placement":"unplaced","state":"search-empty"},
-        {"key":"L0042","section":"Module catalog","text":"scores","placement":"unplaced","occurrences":2},
-        {"key":"L0043","section":"Module catalog","text":"strong at {…}","placement":"placed","file":"modules/hall-ui/public/modules.js","line":225,"string_id":"e294c3429c2e","occurrences":3},
-        {"key":"L0044","section":"Module catalog","text":"weak at {…}","placement":"placed","file":"modules/hall-ui/public/modules.js","line":227,"string_id":"20318b6da94e"},
-        {"key":"L0045","section":"Module catalog","text":"A part is strong at 80 out of 100 or more, and weak below the listing floor. A part with no data yet is not counted against a module.","placement":"placed","file":"modules/hall-ui/public/modules.html","line":87,"string_id":"d316ba4f7e9a"},
-        {"key":"L0046","section":"footer","text":"Sign out","placement":"shared","file":"modules/hall-ui/public/shell.js","line":520,"string_id":"1883ad7f07fc"},
-        {"key":"L0047","section":"Module catalog","text":"Builders hall · this session","placement":"placed","file":"modules/hall-ui/public/craft-mode.js","line":810,"string_id":"fd1903586e8e"},
-        {"key":"L0048","section":"What are you doing now?","text":"What are you doing now?","placement":"placed","file":"modules/hall-ui/public/craft-mode.js","line":811,"string_id":"60853319f290"},
-        {"key":"L0049","section":"What are you doing now?","text":"Pick one. You can switch any time from the top bar.","placement":"placed","file":"modules/hall-ui/public/craft-mode.js","line":812,"string_id":"4f87d5b17b54"},
-        {"key":"L0050","section":"What are you doing now?","text":"Building","placement":"unplaced"},
-        {"key":"L0051","section":"What are you doing now?","text":"{…} and {…}","placement":"placed","file":"modules/hall-ui/public/profile-nudge.js","line":77,"string_id":"56b00d773232","occurrences":3},
-        {"key":"L0052","section":"What are you doing now?","text":"Artistry","placement":"unplaced"},
-        {"key":"L0053","section":"What are you doing now?","text":"Ideating","placement":"unplaced"},
-        {"key":"L0054","section":"What are you doing now?","text":"Turn thoughts into {…}.","placement":"unplaced"},
-        {"key":"L0055","section":"What are you doing now?","text":"Ask me again next session","placement":"placed","file":"modules/hall-ui/public/craft-mode.js","line":815,"string_id":"fa86bf403775"}
+        {"key":"L0041","section":"Module catalog","text":"Sort by","placement":"placed","file":"modules/hall-ui/public/modules.html","line":87,"string_id":"70383b194ec0"},
+        {"key":"L0042","section":"Module catalog","text":"Name","placement":"unplaced"},
+        {"key":"L0043","section":"Module catalog","text":"No store module matches that {…}.","placement":"unplaced","state":"search-empty"},
+        {"key":"L0044","section":"Module catalog","text":"scores","placement":"unplaced","occurrences":2},
+        {"key":"L0045","section":"Module catalog","text":"strong at {…}","placement":"placed","file":"modules/hall-ui/public/modules.js","line":241,"string_id":"e294c3429c2e","occurrences":3},
+        {"key":"L0046","section":"Module catalog","text":"weak at {…}","placement":"placed","file":"modules/hall-ui/public/modules.js","line":243,"string_id":"20318b6da94e"},
+        {"key":"L0047","section":"Module catalog","text":"A part is strong at 80 out of 100 or more, and weak below the listing floor. A part with no data yet is not counted against a module. Sort by a part to see the modules strongest at it first; a module with no score for that part goes last, and a new module is never ranked.","placement":"placed","file":"modules/hall-ui/public/modules.html","line":90,"string_id":"e395cd11edab"},
+        {"key":"L0048","section":"footer","text":"Sign out","placement":"shared","file":"modules/hall-ui/public/shell.js","line":520,"string_id":"1883ad7f07fc"},
+        {"key":"L0049","section":"Module catalog","text":"Builders hall · this session","placement":"placed","file":"modules/hall-ui/public/craft-mode.js","line":810,"string_id":"fd1903586e8e"},
+        {"key":"L0050","section":"What are you doing now?","text":"What are you doing now?","placement":"placed","file":"modules/hall-ui/public/craft-mode.js","line":811,"string_id":"60853319f290"},
+        {"key":"L0051","section":"What are you doing now?","text":"Pick one. You can switch any time from the top bar.","placement":"placed","file":"modules/hall-ui/public/craft-mode.js","line":812,"string_id":"4f87d5b17b54"},
+        {"key":"L0052","section":"What are you doing now?","text":"Building","placement":"unplaced"},
+        {"key":"L0053","section":"What are you doing now?","text":"{…} and {…}","placement":"placed","file":"modules/hall-ui/public/profile-nudge.js","line":77,"string_id":"56b00d773232","occurrences":3},
+        {"key":"L0054","section":"What are you doing now?","text":"Artistry","placement":"unplaced"},
+        {"key":"L0055","section":"What are you doing now?","text":"Ideating","placement":"unplaced"},
+        {"key":"L0056","section":"What are you doing now?","text":"Turn thoughts into {…}.","placement":"unplaced"},
+        {"key":"L0057","section":"What are you doing now?","text":"Ask me again next session","placement":"placed","file":"modules/hall-ui/public/craft-mode.js","line":815,"string_id":"fa86bf403775"}
       ]
     },
     {

package/modules/hall-ui/public/modules.html

@@ -82,9 +82,12 @@
             <div class="ov-group__head">
               <span class="ov-group__name">In the store</span>
               <span class="ov-group__n" id="store-n"></span>
+              <!-- task 1003800: the buyer picks the part that matters to them, and
+                   the server orders by it (sortByPart). Filled from sort_parts. -->
+              <label class="ov-group__note">Sort by <select id="store-sort"><option value="">Name</option></select></label>
             </div>
             <ul class="ov-rows" id="store-grid"></ul>
-            <p class="ov-foot" id="store-lede">A part is strong at 80 out of 100 or more, and weak below the listing floor. A part with no data yet is not counted against a module.</p>
+            <p class="ov-foot" id="store-lede">A part is strong at 80 out of 100 or more, and weak below the listing floor. A part with no data yet is not counted against a module. Sort by a part to see the modules strongest at it first; a module with no score for that part goes last, and a new module is never ranked.</p>
           </div>
         </section>
 

package/modules/hall-ui/public/modules.js

@@ -211,6 +211,20 @@
   // short labels; the sentence behind each is one click away in the details, the
   // splitCriterion idea: scannable in a list, thorough on demand.
   let storeModules = [];
+  // The part the buyer sorts by (task 1003800): '' is name order. The server owns
+  // the order and the list of parts; this page only asks for one and shows it.
+  let storeSort = '';
+  let storeSortTitle = '';
+  let storeSortWired = false;
+
+  // The sorted-by part's own score, so the order explains itself on every row.
+  function sortedPartFact(m) {
+    if (!storeSort || m.is_new) return '';
+    const p = m.parts && m.parts[storeSort];
+    return p && p.score != null
+      ? `<span class="ov-fact">${escapeHtml(storeSortTitle)} <b>${escapeHtml(String(p.score))}</b></span>`
+      : `<span class="ov-fact">${escapeHtml(storeSortTitle)} not measured yet</span>`;
+  }
 
   function partsList(items) {
     return items.map((p) => `${escapeHtml(p.title)} <b>${escapeHtml(String(p.score))}</b>`).join(', ');
@@ -220,6 +234,8 @@
     const facts = [m.is_new
       ? '<span class="fact-pill fact-pill--info" title="No real-world data yet, so it is listed but not ranked.">new</span>'
       : `<span class="ov-fact">scores <b>${escapeHtml(String(m.overall))}</b></span>`];
+    const sorted = sortedPartFact(m);
+    if (sorted) facts.push(sorted);
     const strong = Array.isArray(m.strengths) ? m.strengths : [];
     const weak = Array.isArray(m.weaknesses) ? m.weaknesses : [];
     if (strong.length) facts.push(`<span class="ov-fact">strong at ${partsList(strong)}</span>`);
@@ -275,11 +291,26 @@
 
   // Best-effort and last: the store is a second read, and the modules on disk ARE
   // this page, so a store that cannot be read costs this group and nothing else.
+  // Filled and wired once, on the first store read; a re-read only re-renders.
+  function fillStoreSort(parts) {
+    const select = $('#store-sort');
+    if (storeSortWired || !select || !Array.isArray(parts)) return;
+    storeSortWired = true;
+    for (const p of parts) select.add(new Option(p.title, p.part));
+    select.addEventListener('change', () => {
+      storeSort = select.value;
+      storeSortTitle = storeSort ? select.options[select.selectedIndex].text : '';
+      loadStore();
+    });
+  }
+
   async function loadStore() {
     try {
-      const res = await api.request('GET', `${API}/store/modules`);
+      const q = storeSort ? `?sort=${encodeURIComponent(storeSort)}` : '';
+      const res = await api.request('GET', `${API}/store/modules${q}`);
       if (!res.ok) return;
       const body = res.data || {};
+      fillStoreSort(body.sort_parts);
       storeModules = [...(body.listed || []), ...(body.new || [])];
       renderStore();
     } catch (err) {

package/modules/hall-ui/records/catalog.md

@@ -12,3 +12,5 @@ Also gone, and the one rule in that list: `.ab-caption` takes the lede's `--meas
 **A store version's how-to is a view of the Modules page, not a new page (task 1004366).** `/builders/modules?howto=<key>&version=<X.Y.Z>` hides the catalog and shows that version's `HOWTO.md` in the reading room's article card: the page adds `body.room` so `room.css`'s sizes apply, and the markdown goes through `md-reader.js` (author-written, so every byte is escaped; only absolute http(s), mailto and #anchor links become links). A query, not a `#/` route — the hash namespace is frozen to the idea and blocker overlays. "Save as PDF" is `window.print()` with an `@media print` block in `modules.css` that keeps only the document and prints in the system ink (`CanvasText`), because a literal colour is the token tier's. Harness fixture: `store__modules__howto.json`.
 
 **The store's modules are a third group on the same panel, read as strengths and weaknesses (task 1003799, ADR 0343 D4).** `#store-group` ("In the store") lists what `GET /store/modules` lists, hidden until that read answers with something; it loads after the modules on disk and best-effort, so a store that cannot be read costs this group and nothing else. A row is the same `.ov-row`: the overall score as a plain fact (or the `new` info pill), `strong at Tests 96, How-to 88` as a plain fact, and `weak at …` as the warn pill, because a weakness is the exception a buyer must not miss. The sentence behind each part ("Tests scored 96 out of 100, from 40 test cases.") and the parts with no data yet sit in the row's `<details class="mod-more">`, the `splitCriterion` idea: short label in the list, the detail one click away. The reading is the server's (`readParts` in `src/bongos/module-listing.js`: strong at 80 or more, weak below the listing floor, unmeasured never weak); the page re-derives nothing. Harness fixture: `store__modules.json`.
+
+**The buyer sorts the store by the part that matters to them (task 1003800, owner decision 2026-10-22).** A "Sort by" menu sits in the store group's head (`#store-sort`, `.ov-group__note`): Name, then the parts the server lists in `sort_parts`. Picking one re-reads `GET /store/modules?sort=<part>`, and the server orders the listed modules (`sortByPart` in `src/bongos/module-listing.js`: highest for that part first, a tie to the overall score then the key, a module with no score for the part last). The page never sorts the rows itself, and New modules keep name order because they are never ranked. While a part is picked, each listed row carries that part's score as a plain fact (`Reliability 91`, or `Reliability not measured yet`), so the order explains itself. The owner chose the buyer over a per-category "key part" because nothing records what a category is for, and a hidden weighting would break the score an author can check (ADR 0343 D3).

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.153",
+  "version": "1.21.154",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.21.153",
+      "version": "1.21.154",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.153",
+  "version": "1.21.154",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -9940,5 +9940,11 @@
       "id": "1004766",
       "text": "When a project's server can't talk to GitHub, the land-status check now says which step failed and what GitHub answered, instead of a bare error."
     }
+  ],
+  "1.21.154": [
+    {
+      "id": "1003800",
+      "text": "In the module store, a buyer can now sort by the score that matters to them, like reliability or tests, so the module strongest at that comes first."
+    }
   ]
 }

package/src/bongos/module-listing.js

@@ -92,6 +92,40 @@ function readParts(signals = [], { floor = QUALITY_FLOOR } = {}) {
   return { parts, strengths, weaknesses, unmeasured };
 }
 
+// ---------------------------------------------------------------------------
+// Sort by the part a buyer cares about (task 1003800, owner decision 2026-10-22)
+// ---------------------------------------------------------------------------
+//
+// A module strong at what a buyer needs should come first for THAT buyer. Nothing
+// records what a category is "for", and a hidden per-category weighting would break
+// the score an author can check (ADR 0343 D3), so the owner chose: the buyer picks
+// the part. The rule, in a sentence an author can check:
+//
+//   modules with a score for the part come first, highest first; a tie goes to the
+//   higher overall score, then the key. A module with no score for the part goes
+//   last, in key order: a missing part is never a zero, and never a first place.
+//
+// Only `listed` is sorted. A "New" version is never ranked (owner decision,
+// 2026-10-01), so `new` keeps key order whatever the buyer picks. Today this runs
+// over the whole store; once approved sub-categories exist (task 1004355) the same
+// rule orders each one (ADR 0342 D2).
+const SORT_PARTS = PARTS.map(({ part, title }) => ({ part, title }));
+
+// `entries` carry `parts` as readParts builds them. Returns a new array. Pure.
+function sortByPart(entries, part) {
+  const scoreOf = (e) => (e.parts && e.parts[part] ? e.parts[part].score : null);
+  return [...entries].sort((a, b) => {
+    const sa = scoreOf(a);
+    const sb = scoreOf(b);
+    if (sa == null || sb == null) {
+      if (sa != null) return -1;
+      if (sb != null) return 1;
+      return a.key.localeCompare(b.key);
+    }
+    return (sb - sa) || ((b.overall ?? -1) - (a.overall ?? -1)) || a.key.localeCompare(b.key);
+  });
+}
+
 // The newest version row per module key, in semver order (a version that does not
 // parse is skipped, as latestVersions does in module-store.js).
 function newestPerModule(rows) {
@@ -106,12 +140,13 @@ function newestPerModule(rows) {
   return [...out.values()];
 }
 
-// The catalog: { floor, listed: [...], new: [...] }, each entry
+// The catalog: { floor, sort, sort_parts, listed: [...], new: [...] }, each entry
 // { key, title, version, published_at, overall, is_new, parts, strengths, weaknesses,
 // unmeasured } (the last four from readParts). Excluded versions are left
 // out entirely: a module below the bar is not listed at all. Both lists are in key
-// order; ranking is a separate task (1003808) and does not happen here.
-async function listCatalog({ db, floor = QUALITY_FLOOR } = {}) {
+// order unless `sort` names a part, which orders `listed` by sortByPart; ranking
+// is a separate task (1003808) and does not happen here.
+async function listCatalog({ db, floor = QUALITY_FLOOR, sort = null } = {}) {
   const pool = db || require('./pool').pool;
   const { rows: versions } = await pool.query(
     `SELECT m.module_key, m.title, v.id AS version_id, v.version, v.published_at
@@ -142,7 +177,7 @@ async function listCatalog({ db, floor = QUALITY_FLOOR } = {}) {
       signals.get(k).push(s);
     }
   }
-  const out = { floor, listed: [], new: [] };
+  const out = { floor, sort: sort || null, sort_parts: SORT_PARTS, listed: [], new: [] };
   for (const r of newest.sort((a, b) => a.module_key.localeCompare(b.module_key))) {
     const score = scores.get(String(r.version_id)) || null;
     const { placement } = placeVersion(score, floor);
@@ -153,7 +188,8 @@ async function listCatalog({ db, floor = QUALITY_FLOOR } = {}) {
       ...readParts(signals.get(String(r.version_id)) || [], { floor }),
     });
   }
+  if (sort) out.listed = sortByPart(out.listed, sort);
   return out;
 }
 
-module.exports = { QUALITY_FLOOR, STRONG_AT, placeVersion, readParts, listCatalog };
+module.exports = { QUALITY_FLOOR, STRONG_AT, SORT_PARTS, placeVersion, readParts, sortByPart, listCatalog };

package/src/bongos/routes/modules.js

@@ -110,7 +110,7 @@ const log = require('../logger').logger.child({ src: 'modules' });
 // property access on a CommonJS namespace, so reaching these through one made them read
 // as unused exports and tripped the dead-code ratchet that held this branch out of main.
 const { listOverrides, setOverride } = require('../module-overrides');
-const { listCatalog } = require('../module-listing');
+const { listCatalog, SORT_PARTS } = require('../module-listing');
 
 // The sentence for a toggle that waits on a restart (task 1004463). 'routes' are the
 // module's pages, 'pollers' its background jobs. PURE.
@@ -733,12 +733,20 @@ module.exports = function buildModulesRouter() {
   // listed module's newest version, if it passed the Security gate and scores at or
   // above the floor, or under "new" if it has no real-world data yet. Below the bar
   // is not listed at all. The floor is fixed in module-listing.js and returned here.
+  // `?sort=<part>` orders the listed modules by the part a buyer cares about
+  // (task 1003800, sortByPart); the parts it accepts come back as sort_parts.
   //
   // rank: any-builder — a read of public store metadata, like /store/modules/latest:
   // no entitlement taken, nothing changed.
   router.get('/store/modules', auth.requireBuilder,
-    asyncHandler('GET /store/modules', async (_req, res) => {
-      const listing = await listCatalog();
+    asyncHandler('GET /store/modules', async (req, res) => {
+      const raw = req.query && req.query.sort;
+      const sort = typeof raw === 'string' && raw ? raw : null;
+      if (sort && !SORT_PARTS.some((p) => p.part === sort)) {
+        const names = SORT_PARTS.map((p) => `${p.title} (${p.part})`).join(', ');
+        return res.fail('bad_request', { status: 400, message: `The store can be sorted by one part of the score: ${names}.` });
+      }
+      const listing = await listCatalog({ sort });
       res.set('Cache-Control', 'no-store');
       res.json(listing);
     }));

package/src/module-api.js

@@ -75,7 +75,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // MAJOR (see allowBoxScope below): passes the request through untouched.
 function deprecatedNoopMiddleware(_req, _res, next) { next(); }
 
-const CORE_VERSION = '1.21.153'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.21.154'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('discord'); log.info('mounted');

package/tests/hall_catalog_world.mjs

@@ -94,7 +94,7 @@ test('modules: the store group reads strengths and weaknesses off the server row
   const html = read('modules.html');
   assert.match(html, /<div class="ov-group" id="store-group" hidden>/, 'the store group is hidden until the store answers');
   assert.match(html, /<ul class="ov-rows" id="store-grid"><\/ul>/);
-  assert.match(js, /api\.request\('GET', `\$\{API\}\/store\/modules`\)/, 'it reads GET /store/modules');
+  assert.match(js, /api\.request\('GET', `\$\{API\}\/store\/modules\$\{q\}`\)/, 'it reads GET /store/modules');
   assert.match(js, /<span class="ov-fact">strong at \$\{partsList\(strong\)\}<\/span>/, 'a strength is a plain fact');
   assert.match(js, /<span class="fact-pill fact-pill--warn">weak at \$\{partsList\(weak\)\}<\/span>/, 'a weakness is the warn pill');
   assert.match(js, /not measured yet/, 'a part with no data is named, never counted as weak');
@@ -106,6 +106,18 @@ test('modules: the store group reads strengths and weaknesses off the server row
   assert.notDeepEqual(two[0].strengths.map((s) => s.part), two[1].strengths.map((s) => s.part), '…that are strong at different things');
 });
 
+test('modules: the buyer sorts the store by the part that matters to them (task 1003800)', () => {
+  const js = read('modules.js');
+  const html = read('modules.html');
+  assert.match(html, /<select id="store-sort"><option value="">Name<\/option><\/select>/, 'the menu starts at name order');
+  assert.match(js, /\?sort=\$\{encodeURIComponent\(storeSort\)\}/, 'the server orders the list; the page asks for a part');
+  assert.match(js, /fillStoreSort\(body\.sort_parts\)/, 'the parts on the menu are the server\'s list');
+  assert.doesNotMatch(decomment(js), /\.sort\(\(a, b\)/, 'the page does not re-sort the store rows itself');
+  assert.match(js, /not measured yet<\/span>/, 'a row with no score for the sorted part says so, not a zero');
+  const fixture = JSON.parse(fs.readFileSync(path.join(ROOT, 'scripts', 'hall-preview', 'fixtures', 'store__modules.json'), 'utf8'));
+  assert.deepEqual(fixture.sort_parts.map((p) => p.part), ['tests', 'install', 'reliability', 'tester_feedback', 'docs'], 'the harness carries the menu');
+});
+
 test('modules: the kit filter bar carries the search and a state lens, and the empty state is the kit\'s', () => {
   const js = read('modules.js');
   assert.match(js, /kit\.makeFilterBar\(\{/, 'the bar is the kit\'s');

package/tests/module_store_listing.mjs

@@ -53,7 +53,7 @@ const poolPath = require.resolve('../src/bongos/pool.js');
 require.cache[poolPath] = { id: poolPath, filename: poolPath, loaded: true, exports: { pool: { connect: async () => ({ ...pool, release() {} }), query: pool.query } } };
 
 const buildModulesRouter = require('../src/bongos/routes/modules.js');
-const { QUALITY_FLOOR, placeVersion } = require('../src/bongos/module-listing.js');
+const { QUALITY_FLOOR, SORT_PARTS, placeVersion, sortByPart } = require('../src/bongos/module-listing.js');
 
 function handlerFor(router, method, p) {
   const layer = router.stack.find((l) => l.route && l.route.path === p && l.route.methods[method]);
@@ -163,7 +163,83 @@ test('GET /store/modules: an empty store answers empty lists and the floor', asy
   state.modules = {}; state.versions = []; state.scores = [];
   const { handle } = handlerFor(buildModulesRouter(), 'get', '/store/modules');
   const res = await invoke(handle, {});
-  assert.deepEqual(res.body, { floor: 50, listed: [], new: [] });
+  assert.deepEqual(res.body, { floor: 50, sort: null, sort_parts: SORT_PARTS, listed: [], new: [] });
+});
+
+// ---------------------------------------------------------------------------
+// sort by the part a buyer cares about (task 1003800, owner decision 2026-10-22)
+// ---------------------------------------------------------------------------
+
+const entry = (key, overall, partScores) => ({
+  key, overall,
+  parts: Object.fromEntries(Object.entries(partScores).map(([p, s]) => [p, { outcome: s == null ? 'no_data' : 'scored', score: s, sample_size: null }])),
+});
+
+test('sortByPart: highest first for the chosen part; a tie goes to the overall score, then the key', () => {
+  const out = sortByPart([
+    entry('b-mod', 70, { reliability: 90 }),
+    entry('a-mod', 70, { reliability: 90 }),
+    entry('steady', 60, { reliability: 95 }),
+    entry('higher', 80, { reliability: 90 }),
+  ], 'reliability');
+  assert.deepEqual(out.map((e) => e.key), ['steady', 'higher', 'a-mod', 'b-mod']);
+});
+
+test('sortByPart: a module with no score for the part goes last, never first, and the input is untouched', () => {
+  const input = [entry('z-unmeasured', 99, { reliability: null }), entry('low', 55, { reliability: 10 }), entry('a-missing', 99, {})];
+  const out = sortByPart(input, 'reliability');
+  assert.deepEqual(out.map((e) => e.key), ['low', 'a-missing', 'z-unmeasured']);
+  assert.equal(input[0].key, 'z-unmeasured', 'a new array; the listing it came from keeps its order');
+});
+
+test('SORT_PARTS: every part a buyer compares, Security not among them', () => {
+  assert.deepEqual(SORT_PARTS.map((p) => p.part), ['tests', 'install', 'reliability', 'tester_feedback', 'docs']);
+});
+
+test('GET /store/modules?sort=: orders the listed modules by the part, leaves New in key order', async () => {
+  state.modules = {
+    tested: { status: 'listed', title: 'Tested' }, steady: { status: 'listed', title: 'Steady' },
+    'b-new': { status: 'listed', title: 'B new' }, 'a-new': { status: 'listed', title: 'A new' },
+  };
+  state.versions = [
+    { id: 21, module_key: 'tested', version: '1.0.0', published_at: 't' },
+    { id: 22, module_key: 'steady', version: '1.0.0', published_at: 't' },
+    { id: 23, module_key: 'b-new', version: '1.0.0', published_at: 't' },
+    { id: 24, module_key: 'a-new', version: '1.0.0', published_at: 't' },
+  ];
+  state.scores = [
+    { id: 21, version_id: 21, computed_at: 1, ...score({ overall: 74 }) },
+    { id: 22, version_id: 22, computed_at: 1, ...score({ overall: 74 }) },
+    { id: 23, version_id: 23, computed_at: 1, ...score({ is_new: true }) },
+    { id: 24, version_id: 24, computed_at: 1, ...score({ is_new: true }) },
+  ];
+  state.signals = [
+    { id: 21, version_id: 21, measured_at: 1, ...sig('tests', 96) },
+    { id: 22, version_id: 21, measured_at: 1, ...sig('reliability', 52) },
+    { id: 23, version_id: 22, measured_at: 1, ...sig('tests', 58) },
+    { id: 24, version_id: 22, measured_at: 1, ...sig('reliability', 91) },
+    { id: 25, version_id: 23, measured_at: 1, ...sig('reliability', 99) },
+  ];
+  const { handle } = handlerFor(buildModulesRouter(), 'get', '/store/modules');
+  const byRel = await invoke(handle, { query: { sort: 'reliability' } });
+  assert.equal(byRel.body.sort, 'reliability');
+  assert.deepEqual(byRel.body.listed.map((m) => m.key), ['steady', 'tested'], 'the buyer who cares about reliability sees Steady first');
+  assert.deepEqual(byRel.body.new.map((m) => m.key), ['a-new', 'b-new'], 'New is never ranked, whatever the buyer picks');
+  const byTests = await invoke(handle, { query: { sort: 'tests' } });
+  assert.deepEqual(byTests.body.listed.map((m) => m.key), ['tested', 'steady']);
+  const plain = await invoke(handle, { query: {} });
+  assert.equal(plain.body.sort, null);
+  assert.deepEqual(plain.body.listed.map((m) => m.key), ['steady', 'tested'], 'no sort is key order, as before');
+  state.signals = [];
+});
+
+test('GET /store/modules?sort=: a part it does not know is refused, Security included', async () => {
+  const { handle } = handlerFor(buildModulesRouter(), 'get', '/store/modules');
+  for (const sort of ['security', 'price', 'overall']) {
+    const res = await invoke(handle, { query: { sort } });
+    assert.equal(res.statusCode, 400, `${sort} is not a part to sort by`);
+    assert.match(res.body.message, /Tests \(tests\), Clean installs \(install\), Reliability \(reliability\), Tester feedback \(tester_feedback\), How-to \(docs\)/, 'the refusal names each part as a person says it, with the value to send');
+  }
 });
 
 // ---------------------------------------------------------------------------