@bongos/core 1.21.153 → 1.21.155

package/docs/copy-registry.json

@@ -3,9 +3,9 @@
   "generator": "scripts/gds/copy-inventory.js",
   "goal": 1000074,
   "counts": {
-    "strings": 2769,
-    "unique_ids": 2348,
-    "certain": 2769,
+    "strings": 2784,
+    "unique_ids": 2363,
+    "certain": 2784,
     "heuristic": 0,
     "duplicate_ids": 241
   },
@@ -13,7 +13,7 @@
     "builders-hall": {
       "at": "modules/hall-ui/public",
       "files": 148,
-      "strings": 1961
+      "strings": 1964
     },
     "status-dashboard": {
       "at": "modules/status-ui/public",
@@ -23,7 +23,7 @@
     "landing": {
       "at": "modules/public-landing/public",
       "files": 9,
-      "strings": 708
+      "strings": 720
     }
   },
   "blind_spots": [
@@ -3054,11 +3054,11 @@
       "confidence": "certain"
     },
     {
-      "id": "d316ba4f7e9a",
+      "id": "e395cd11edab",
       "surface": "builders-hall",
-      "text": "A part is strong at 80 out of 100 or more, and weak below the listing floor. A part with no data yet is not counted against a module.",
+      "text": "A part is strong at 80 out of 100 or more, and weak below the listing floor. A part with no data yet is not counted against a module. Sort by a part to see the modules strongest at it first; a module with no score for that part goes last, and a new module is never ranked.",
       "file": "modules/hall-ui/public/modules.html",
-      "line": 87,
+      "line": 90,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -3481,7 +3481,7 @@
       "surface": "builders-hall",
       "text": "Also available as a Claude page",
       "file": "modules/hall-ui/public/modules.html",
-      "line": 100,
+      "line": 103,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -5209,7 +5209,7 @@
       "surface": "builders-hall",
       "text": "Could not load modules.",
       "file": "modules/hall-ui/public/modules.js",
-      "line": 458,
+      "line": 489,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -5398,7 +5398,7 @@
       "surface": "builders-hall",
       "text": "Could not reach the submit endpoint.",
       "file": "modules/hall-ui/public/modules.js",
-      "line": 436,
+      "line": 467,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -9376,7 +9376,7 @@
       "surface": "builders-hall",
       "text": "No real-world data yet, so it is listed but not ranked.",
       "file": "modules/hall-ui/public/modules.js",
-      "line": 221,
+      "line": 235,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10015,7 +10015,7 @@
       "surface": "builders-hall",
       "text": "Nothing to submit — every module here ships with the core.",
       "file": "modules/hall-ui/public/modules.js",
-      "line": 397,
+      "line": 428,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -11896,7 +11896,7 @@
       "surface": "builders-hall",
       "text": "Save as PDF",
       "file": "modules/hall-ui/public/modules.html",
-      "line": 101,
+      "line": 104,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -12836,6 +12836,15 @@
       "origin": "js-notice",
       "confidence": "certain"
     },
+    {
+      "id": "70383b194ec0",
+      "surface": "builders-hall",
+      "text": "Sort by",
+      "file": "modules/hall-ui/public/modules.html",
+      "line": 87,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "e0767e80206c",
       "surface": "builders-hall",
@@ -14987,6 +14996,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "2850b51235fd",
+      "surface": "builders-hall",
+      "text": "Two different bills, one column each. The first is what a project costs this platform. The second is an estimate of what its owner pays their own hosting provider, which bills them directly. A project with no recorded plan reads \"not priced yet\", never $0, and is left out of the total. A self-hosted project runs on its owner's own machine, so its bill is not visible to us.",
+      "file": "modules/hall-ui/public/fleet.html",
+      "line": 39,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "4a25dba3ef56",
       "surface": "builders-hall",
@@ -17710,7 +17728,7 @@
       "surface": "builders-hall",
       "text": "not measured yet",
       "file": "modules/hall-ui/public/modules.js",
-      "line": 236,
+      "line": 252,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -18313,7 +18331,7 @@
       "surface": "builders-hall",
       "text": "strong at {…}",
       "file": "modules/hall-ui/public/modules.js",
-      "line": 225,
+      "line": 241,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -18952,7 +18970,7 @@
       "surface": "builders-hall",
       "text": "weak at {…}",
       "file": "modules/hall-ui/public/modules.js",
-      "line": 227,
+      "line": 243,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -19397,6 +19415,15 @@
       "origin": "js-text-assign",
       "confidence": "certain"
     },
+    {
+      "id": "92469c4757f1",
+      "surface": "builders-hall",
+      "text": "{…} not measured yet",
+      "file": "modules/hall-ui/public/modules.js",
+      "line": 226,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "73c1372b43d9",
       "surface": "builders-hall",
@@ -19609,7 +19636,7 @@
       "surface": "builders-hall",
       "text": "{…} {…} — how-to",
       "file": "modules/hall-ui/public/modules.js",
-      "line": 513,
+      "line": 544,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -19681,7 +19708,7 @@
       "surface": "builders-hall",
       "text": "{…} — how to use it",
       "file": "modules/hall-ui/public/modules.js",
-      "line": 515,
+      "line": 546,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -19816,7 +19843,7 @@
       "surface": "builders-hall",
       "text": "· version",
       "file": "modules/hall-ui/public/modules.js",
-      "line": 518,
+      "line": 549,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -20131,7 +20158,7 @@
       "surface": "builders-hall",
       "text": "← All modules",
       "file": "modules/hall-ui/public/modules.html",
-      "line": 98,
+      "line": 101,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -20630,6 +20657,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "437ddce8e760",
+      "surface": "landing",
+      "text": "A project is a record here and a database of its own. The record holds its name, the GitHub repository it ships to, its web address, how it is hosted, who owns it, when it was created, what state it is in, and its settings — who can see it and how people join. The project's own database holds the same kinds of records as above for the people who build on it: accounts, sessions, tasks, grades, {{currency}}.",
+      "file": "modules/public-landing/public/privacy.html",
+      "line": 108,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "c3504a900b0f",
       "surface": "landing",
@@ -21530,6 +21566,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "032693d19430",
+      "surface": "landing",
+      "text": "Each {{productName}} project you build in reports a summary of your work there to the platform: the {{currency}} you earned, the works you shipped, your karma, the rank that project gave you, the roles you worked in, and when you were last active. The platform adds these up across every project into one cross-project record. Projects report this themselves — the platform does not read their databases.",
+      "file": "modules/public-landing/public/terms.html",
+      "line": 116,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "9a4a940d2a56",
       "surface": "landing",
@@ -21638,6 +21683,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "e14fd6120fc6",
+      "surface": "landing",
+      "text": "Extras are the optional parts a project can run — extra AI agents, a Discord mirror, and the rest. You picked a set when you created the project, or took the suggested set by skipping that step; this is where you change your mind. Switching one on or off saves straight away and changes nothing that is already running: nothing restarts, and no work is lost either way. The parts every project runs — the platform itself, the way it tracks work, the builders’ hall — were never part of the choice, so they are not listed here and cannot be switched off.",
+      "file": "modules/public-landing/public/projects.html",
+      "line": 1334,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "7c8dcf228e70",
       "surface": "landing",
@@ -21962,6 +22016,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "5a2650d439ce",
+      "surface": "landing",
+      "text": "How this project is listed — the kind shown beside its name on the map, in the table and on its card. It is a declaration about the project, not a setting the project obeys: nothing is pushed to it and nothing restarts. One thing does follow the kind: if you never picked your extras yourself, they are the set this kind suggests, so changing the kind changes them too — you will be told when that happens. Extras you picked for yourself are stored and never move. Not Sure is a real answer, and it is the way back if you would rather not say.",
+      "file": "modules/public-landing/public/projects.html",
+      "line": 1314,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "a86a02b0ded9",
       "surface": "landing",
@@ -24338,6 +24401,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "82d751a27370",
+      "surface": "landing",
+      "text": "The platform first gives this project its own read-only deploy key and switches its deploys over to it, and only then makes the repository private — in that order, so no deploy ever tries to read a private repository with a key that can’t. The change is made with your connected GitHub account, so that account needs admin rights on the repository. It works for a project on a Cloud host; a project on your own host is yours to change on GitHub directly. You can make it public again from here at any time.",
+      "file": "modules/public-landing/public/projects.html",
+      "line": 1242,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "4fd8f5746cc5",
       "surface": "landing",
@@ -24347,6 +24419,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "768a6990ebfc",
+      "surface": "landing",
+      "text": "The platform stores the date you accepted these terms, and which version, on your account. It is written when you sign in to a project in your browser with your platform account, and only once — signing in again does not change the date you accepted. Signing in from the command line does not record it: you approve that sign-in on GitHub’s page, where these terms are not shown, so an account that has only signed in that way stays unpublished until you sign in to a project in your browser once. This is version",
+      "file": "modules/public-landing/public/terms.html",
+      "line": 120,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "20fcebaa85c4",
       "surface": "landing",
@@ -24500,6 +24581,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "a1aa7835abce",
+      "surface": "landing",
+      "text": "This is a list of which variables your project needs and what each one is for — not the secrets themselves. The values belong wherever your project actually runs (Vercel, Netlify, Render, or your own machine): that is where the running app reads them, and it already keeps them encrypted, logs who touched them and lets you rotate them. Keeping a second copy here would make this platform the keeper of your credentials and buy you nothing.",
+      "file": "modules/public-landing/public/projects.html",
+      "line": 1349,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "d83b739afb1e",
       "surface": "landing",
@@ -24590,6 +24680,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "50f764cf1229",
+      "surface": "landing",
+      "text": "Two things, and only two: a name — this project already has one — and a description of what it is. Modules, artwork, a finished setup interview: none of them are required, because the bar is there to keep empty shells off the map, not to make you finish anything. Until it is met the project is not listed publicly and nobody can ask to join it; the project itself runs exactly the same either way. Adding a description puts it on the map, and clearing one takes it back off.",
+      "file": "modules/public-landing/public/projects.html",
+      "line": 1214,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "b0c3729108be",
       "surface": "landing",
@@ -24662,6 +24761,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "f68a38de7e1b",
+      "surface": "landing",
+      "text": "Visitors who aren’t signed in meet a sign-in door instead of the project’s pages — its front page, its status page, and its hall. The door itself stays open, so members can always get in, and members see everything either way. It is separate from the repository’s visibility above: the code on GitHub is its own setting. Changing it restarts the project to pick it up — the line under the choice says what the project is running right now.",
+      "file": "modules/public-landing/public/projects.html",
+      "line": 1258,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "3d6b0bf6c2db",
       "surface": "landing",
@@ -25256,6 +25364,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "1e6d91f484e4",
+      "surface": "landing",
+      "text": "Your cross-project record is descriptive analytics and never authority. What you may do inside any project is decided by that project alone, from its own records, at the moment you ask. A large record grants nothing and a hidden one takes nothing away; no project is required to read it, and none may treat it as permission. A rank shown here is that project’s own standing for you, as that project reported it — the platform holds no rank of its own.",
+      "file": "modules/public-landing/public/terms.html",
+      "line": 117,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "63535be9eb75",
       "surface": "landing",
@@ -26597,6 +26714,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "a5319c33053a",
+      "surface": "landing",
+      "text": "— no one can apply: the project’s hall and its sign-in say so, and you invite people by GitHub username from the hall’s Watch page; only an invited person’s sign-in gets in — and people who asked before you switched stay in your queue, to approve or dismiss. Whichever you pick, people who are already members stay members. Changing it restarts the project to pick it up — the line under the choice says what the project is running right now.",
+      "file": "modules/public-landing/public/projects.html",
+      "line": 1273,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "5becfcad07c3",
       "surface": "landing",
@@ -26615,6 +26741,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "013f0e214b89",
+      "surface": "landing",
+      "text": "— the map shows only that something is there; its name, and everything else about it, stay yours, and nobody can ask to join. Switching to Stealth is itself visible: someone comparing the map before and after can tell which project went quiet. Whichever you pick, a project reaches the map only once it has a name and a description. This is separate from “Who can see it” above — that one is the door on the project’s own pages. Changing it restarts the project to pick it up.",
+      "file": "modules/public-landing/public/projects.html",
+      "line": 1292,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "b5bac008ba11",
       "surface": "landing",

package/docs/module-api-changelog.md

@@ -3143,5 +3143,9 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.21.151 with no explicit bump. run 39671625798. (task 1002620)
   1.21.153 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.21.152 with no explicit bump. run 39675693737. (task 1002620)
+  1.21.154 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.21.153 with no explicit bump. run 39800316919. (task 1002620)
+  1.21.155 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.21.154 with no explicit bump. run 39805364072. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/docs/modules-contract.md

@@ -393,6 +393,7 @@ Run `bongos upgrade` to confirm coreVersion compatibility, then `node scripts/gd
 - **A how-to is required** ([ADR 0347](adr/0347-every-store-module-ships-a-how-to.md)). `modules/<key>/HOWTO.md` is what a buyer reads — the store shows it as the module's page — so it is written for the person who installs the module, not for an AI working inside it (that is `CLAUDE.md`). It is plain Markdown: any AI or person can write it. Publish refuses the version unless it has these five level-2 headings, in any order and any case, each with some text under it: `## What it does`, `## Install and enable`, `## How to use it` (with one worked example), `## Configuration` ("None." is fine) and `## Limits and known issues` ("None known." is fine). HTML comments don't count as text, so the scaffold's prompts must be replaced. The refusal names each failing section. The check is one function, `checkHowto` in `scripts/gds/module-artifact.js`; the CLI runs it before uploading and the store runs it again on upload, so a hand-built upload can't skip it. `bongos module check` reports it as advice only — an upstream submit is not gated by it. Install and update don't re-check it, so a version published before the gate still installs. The file travels in the tarball, so its hash pins it to the version. An optional `howto.artifactUrl` in `module.json` (an `https://` link on `claude.ai`) is shown as an extra, never graded.
 - **Getting listed** (task 1003807, [ADR 0343](adr/0343-a-module-score-is-a-security-gate-then-an-average-of-visible-parts.md)). Publishing a version does not by itself put it in the store's catalog, `GET /store/modules`. The catalog shows each module's newest version, judged by its current score. It must pass the Security gate first; a version that failed it, or has not been checked yet, is not listed. A new version with no install or reliability data yet is listed with a **New** label and is not ranked; the floor does not apply to it until it has a real score. Every other version is listed only if its overall score is **at least 50 out of 100**. Below that it is not listed at all. The floor is fixed in Bongos itself (`QUALITY_FLOOR` in `src/bongos/module-listing.js`) and returned in the catalog response; no author or instance setting moves it, and changing it is an owner-approved, reviewed task.
 - **What a module is strong and weak at** (task 1003799, ADR 0343 D4). Each catalog entry also carries `parts` (the current result of Tests, Clean installs, Reliability, Tester feedback and How-to) and a reading of them: `strengths` (a part scored **80 or more**), `weaknesses` (a part scored **below the floor**) and `unmeasured` (a part with no score yet, which is never counted as weak). Each strength and weakness has a one-sentence `detail` saying what the number rests on. Security is not among them: every listed version has passed it. The reading is `readParts` in `src/bongos/module-listing.js`; the hall's Modules tab shows it in its "In the store" group, so two modules with the same overall score can be told apart.
+- **Sorting by a part** (task 1003800). `GET /store/modules?sort=<part>` orders the listed modules by one part a buyer cares about: `tests`, `install`, `reliability`, `tester_feedback` or `docs` (the response lists them as `sort_parts`, and says which one it applied as `sort`). Modules with a score for that part come first, highest first; a tie goes to the higher overall score, then the module key. A module with no score for that part goes last, so missing data never wins or loses a place on its own. New modules are not sorted: they are never ranked. Any other `sort` value is refused with a 400. Without `sort`, both lists are in key order. The rule is `sortByPart` in `src/bongos/module-listing.js`.
 
 ### 7. Install from the store
 

package/docs/page-readings.json

@@ -5,7 +5,7 @@
   "adr": "0341 D3",
   "reread": "node scripts/gds/page-reader.js --stale",
   "how": ["Generated by node scripts/gds/page-reader.js (BV2.TW04, task 1004315; ADR 0341 D3). Do not hand-edit.","One entry per page of docs/page-inventory.json. Lines are in page order: the default state first, and a line only another state shows sits where that state shows it, with its state named.","placement: placed = a docs/copy-registry.json row renders it (file, line, string_id); shared = shell text every page of the surface carries (top bar, sidebar, footer), with its row when the registry has one; unplaced = the registry cannot place it (a rewrite becomes an engineer task, ADR 0341 D4).","text keeps {…} where the registry row has a hole, or where a value the page read from its API was filled in. A string that is only such data is counted under omitted.data, not listed.","reading_hash is over the non-shared lines (key, section, text); files_hash is over the page's inventory files. --check compares files_hash only and never opens a browser.","Rendered through the hall-preview harness (hall) and the ui-design kit stub (landing, status), at 1280x800 with the clock pinned, so a reading is the fixture world's page."],
-  "counts": {"pages":46,"lines":5561,"placed":1706,"shared":398,"unplaced":3457,"omitted_data":3600},
+  "counts": {"pages":46,"lines":5563,"placed":1707,"shared":398,"unplaced":3458,"omitted_data":3605},
   "pages": [
     {
       "id": "builders:atlas",
@@ -1885,10 +1885,10 @@
       "surface": "builders",
       "title": "Modules",
       "states_read": ["browse","search-empty","lens","details","out"],
-      "files_hash": "e607fd3b8af5c0ba",
-      "reading_hash": "9983cfd08a0605e5",
-      "counts": {"lines":55,"placed":24,"shared":8,"unplaced":23},
-      "omitted": {"data":100},
+      "files_hash": "78b02310ae1e8e04",
+      "reading_hash": "a3861c8a1816328f",
+      "counts": {"lines":57,"placed":25,"shared":8,"unplaced":24},
+      "omitted": {"data":105},
       "notes": ["details: an action failed (page.click: Timeout 6000ms exceeded.); read as it stood"],
       "lines": [
         {"key":"L0001","section":"skip link","text":"Skip to content","placement":"shared","file":"modules/hall-ui/public/shell.js","line":872,"string_id":"87cee78ca134"},
@@ -1931,21 +1931,23 @@
         {"key":"L0038","section":"Module catalog","text":"submit for review","placement":"placed","file":"modules/hall-ui/public/modules.js","line":187,"string_id":"0215b2cdca8c"},
         {"key":"L0039","section":"Module catalog","text":"A module built here can be submitted upstream for review, so it can join the shared catalog with your name and this project credited.","placement":"placed","file":"modules/hall-ui/public/modules.html","line":74,"string_id":"2e17d7e236d9"},
         {"key":"L0040","section":"Module catalog","text":"In the store","placement":"placed","file":"modules/hall-ui/public/modules.html","line":83,"string_id":"ecfebcd52894"},
-        {"key":"L0041","section":"Module catalog","text":"No store module matches that {…}.","placement":"unplaced","state":"search-empty"},
-        {"key":"L0042","section":"Module catalog","text":"scores","placement":"unplaced","occurrences":2},
-        {"key":"L0043","section":"Module catalog","text":"strong at {…}","placement":"placed","file":"modules/hall-ui/public/modules.js","line":225,"string_id":"e294c3429c2e","occurrences":3},
-        {"key":"L0044","section":"Module catalog","text":"weak at {…}","placement":"placed","file":"modules/hall-ui/public/modules.js","line":227,"string_id":"20318b6da94e"},
-        {"key":"L0045","section":"Module catalog","text":"A part is strong at 80 out of 100 or more, and weak below the listing floor. A part with no data yet is not counted against a module.","placement":"placed","file":"modules/hall-ui/public/modules.html","line":87,"string_id":"d316ba4f7e9a"},
-        {"key":"L0046","section":"footer","text":"Sign out","placement":"shared","file":"modules/hall-ui/public/shell.js","line":520,"string_id":"1883ad7f07fc"},
-        {"key":"L0047","section":"Module catalog","text":"Builders hall · this session","placement":"placed","file":"modules/hall-ui/public/craft-mode.js","line":810,"string_id":"fd1903586e8e"},
-        {"key":"L0048","section":"What are you doing now?","text":"What are you doing now?","placement":"placed","file":"modules/hall-ui/public/craft-mode.js","line":811,"string_id":"60853319f290"},
-        {"key":"L0049","section":"What are you doing now?","text":"Pick one. You can switch any time from the top bar.","placement":"placed","file":"modules/hall-ui/public/craft-mode.js","line":812,"string_id":"4f87d5b17b54"},
-        {"key":"L0050","section":"What are you doing now?","text":"Building","placement":"unplaced"},
-        {"key":"L0051","section":"What are you doing now?","text":"{…} and {…}","placement":"placed","file":"modules/hall-ui/public/profile-nudge.js","line":77,"string_id":"56b00d773232","occurrences":3},
-        {"key":"L0052","section":"What are you doing now?","text":"Artistry","placement":"unplaced"},
-        {"key":"L0053","section":"What are you doing now?","text":"Ideating","placement":"unplaced"},
-        {"key":"L0054","section":"What are you doing now?","text":"Turn thoughts into {…}.","placement":"unplaced"},
-        {"key":"L0055","section":"What are you doing now?","text":"Ask me again next session","placement":"placed","file":"modules/hall-ui/public/craft-mode.js","line":815,"string_id":"fa86bf403775"}
+        {"key":"L0041","section":"Module catalog","text":"Sort by","placement":"placed","file":"modules/hall-ui/public/modules.html","line":87,"string_id":"70383b194ec0"},
+        {"key":"L0042","section":"Module catalog","text":"Name","placement":"unplaced"},
+        {"key":"L0043","section":"Module catalog","text":"No store module matches that {…}.","placement":"unplaced","state":"search-empty"},
+        {"key":"L0044","section":"Module catalog","text":"scores","placement":"unplaced","occurrences":2},
+        {"key":"L0045","section":"Module catalog","text":"strong at {…}","placement":"placed","file":"modules/hall-ui/public/modules.js","line":241,"string_id":"e294c3429c2e","occurrences":3},
+        {"key":"L0046","section":"Module catalog","text":"weak at {…}","placement":"placed","file":"modules/hall-ui/public/modules.js","line":243,"string_id":"20318b6da94e"},
+        {"key":"L0047","section":"Module catalog","text":"A part is strong at 80 out of 100 or more, and weak below the listing floor. A part with no data yet is not counted against a module. Sort by a part to see the modules strongest at it first; a module with no score for that part goes last, and a new module is never ranked.","placement":"placed","file":"modules/hall-ui/public/modules.html","line":90,"string_id":"e395cd11edab"},
+        {"key":"L0048","section":"footer","text":"Sign out","placement":"shared","file":"modules/hall-ui/public/shell.js","line":520,"string_id":"1883ad7f07fc"},
+        {"key":"L0049","section":"Module catalog","text":"Builders hall · this session","placement":"placed","file":"modules/hall-ui/public/craft-mode.js","line":810,"string_id":"fd1903586e8e"},
+        {"key":"L0050","section":"What are you doing now?","text":"What are you doing now?","placement":"placed","file":"modules/hall-ui/public/craft-mode.js","line":811,"string_id":"60853319f290"},
+        {"key":"L0051","section":"What are you doing now?","text":"Pick one. You can switch any time from the top bar.","placement":"placed","file":"modules/hall-ui/public/craft-mode.js","line":812,"string_id":"4f87d5b17b54"},
+        {"key":"L0052","section":"What are you doing now?","text":"Building","placement":"unplaced"},
+        {"key":"L0053","section":"What are you doing now?","text":"{…} and {…}","placement":"placed","file":"modules/hall-ui/public/profile-nudge.js","line":77,"string_id":"56b00d773232","occurrences":3},
+        {"key":"L0054","section":"What are you doing now?","text":"Artistry","placement":"unplaced"},
+        {"key":"L0055","section":"What are you doing now?","text":"Ideating","placement":"unplaced"},
+        {"key":"L0056","section":"What are you doing now?","text":"Turn thoughts into {…}.","placement":"unplaced"},
+        {"key":"L0057","section":"What are you doing now?","text":"Ask me again next session","placement":"placed","file":"modules/hall-ui/public/craft-mode.js","line":815,"string_id":"fa86bf403775"}
       ]
     },
     {

package/modules/hall-ui/public/modules.html

@@ -82,9 +82,12 @@
             <div class="ov-group__head">
               <span class="ov-group__name">In the store</span>
               <span class="ov-group__n" id="store-n"></span>
+              <!-- task 1003800: the buyer picks the part that matters to them, and
+                   the server orders by it (sortByPart). Filled from sort_parts. -->
+              <label class="ov-group__note">Sort by <select id="store-sort"><option value="">Name</option></select></label>
             </div>
             <ul class="ov-rows" id="store-grid"></ul>
-            <p class="ov-foot" id="store-lede">A part is strong at 80 out of 100 or more, and weak below the listing floor. A part with no data yet is not counted against a module.</p>
+            <p class="ov-foot" id="store-lede">A part is strong at 80 out of 100 or more, and weak below the listing floor. A part with no data yet is not counted against a module. Sort by a part to see the modules strongest at it first; a module with no score for that part goes last, and a new module is never ranked.</p>
           </div>
         </section>
 

package/modules/hall-ui/public/modules.js

@@ -211,6 +211,20 @@
   // short labels; the sentence behind each is one click away in the details, the
   // splitCriterion idea: scannable in a list, thorough on demand.
   let storeModules = [];
+  // The part the buyer sorts by (task 1003800): '' is name order. The server owns
+  // the order and the list of parts; this page only asks for one and shows it.
+  let storeSort = '';
+  let storeSortTitle = '';
+  let storeSortWired = false;
+
+  // The sorted-by part's own score, so the order explains itself on every row.
+  function sortedPartFact(m) {
+    if (!storeSort || m.is_new) return '';
+    const p = m.parts && m.parts[storeSort];
+    return p && p.score != null
+      ? `<span class="ov-fact">${escapeHtml(storeSortTitle)} <b>${escapeHtml(String(p.score))}</b></span>`
+      : `<span class="ov-fact">${escapeHtml(storeSortTitle)} not measured yet</span>`;
+  }
 
   function partsList(items) {
     return items.map((p) => `${escapeHtml(p.title)} <b>${escapeHtml(String(p.score))}</b>`).join(', ');
@@ -220,6 +234,8 @@
     const facts = [m.is_new
       ? '<span class="fact-pill fact-pill--info" title="No real-world data yet, so it is listed but not ranked.">new</span>'
       : `<span class="ov-fact">scores <b>${escapeHtml(String(m.overall))}</b></span>`];
+    const sorted = sortedPartFact(m);
+    if (sorted) facts.push(sorted);
     const strong = Array.isArray(m.strengths) ? m.strengths : [];
     const weak = Array.isArray(m.weaknesses) ? m.weaknesses : [];
     if (strong.length) facts.push(`<span class="ov-fact">strong at ${partsList(strong)}</span>`);
@@ -275,11 +291,26 @@
 
   // Best-effort and last: the store is a second read, and the modules on disk ARE
   // this page, so a store that cannot be read costs this group and nothing else.
+  // Filled and wired once, on the first store read; a re-read only re-renders.
+  function fillStoreSort(parts) {
+    const select = $('#store-sort');
+    if (storeSortWired || !select || !Array.isArray(parts)) return;
+    storeSortWired = true;
+    for (const p of parts) select.add(new Option(p.title, p.part));
+    select.addEventListener('change', () => {
+      storeSort = select.value;
+      storeSortTitle = storeSort ? select.options[select.selectedIndex].text : '';
+      loadStore();
+    });
+  }
+
   async function loadStore() {
     try {
-      const res = await api.request('GET', `${API}/store/modules`);
+      const q = storeSort ? `?sort=${encodeURIComponent(storeSort)}` : '';
+      const res = await api.request('GET', `${API}/store/modules${q}`);
       if (!res.ok) return;
       const body = res.data || {};
+      fillStoreSort(body.sort_parts);
       storeModules = [...(body.listed || []), ...(body.new || [])];
       renderStore();
     } catch (err) {

package/modules/hall-ui/records/catalog.md

@@ -12,3 +12,5 @@ Also gone, and the one rule in that list: `.ab-caption` takes the lede's `--meas
 **A store version's how-to is a view of the Modules page, not a new page (task 1004366).** `/builders/modules?howto=<key>&version=<X.Y.Z>` hides the catalog and shows that version's `HOWTO.md` in the reading room's article card: the page adds `body.room` so `room.css`'s sizes apply, and the markdown goes through `md-reader.js` (author-written, so every byte is escaped; only absolute http(s), mailto and #anchor links become links). A query, not a `#/` route — the hash namespace is frozen to the idea and blocker overlays. "Save as PDF" is `window.print()` with an `@media print` block in `modules.css` that keeps only the document and prints in the system ink (`CanvasText`), because a literal colour is the token tier's. Harness fixture: `store__modules__howto.json`.
 
 **The store's modules are a third group on the same panel, read as strengths and weaknesses (task 1003799, ADR 0343 D4).** `#store-group` ("In the store") lists what `GET /store/modules` lists, hidden until that read answers with something; it loads after the modules on disk and best-effort, so a store that cannot be read costs this group and nothing else. A row is the same `.ov-row`: the overall score as a plain fact (or the `new` info pill), `strong at Tests 96, How-to 88` as a plain fact, and `weak at …` as the warn pill, because a weakness is the exception a buyer must not miss. The sentence behind each part ("Tests scored 96 out of 100, from 40 test cases.") and the parts with no data yet sit in the row's `<details class="mod-more">`, the `splitCriterion` idea: short label in the list, the detail one click away. The reading is the server's (`readParts` in `src/bongos/module-listing.js`: strong at 80 or more, weak below the listing floor, unmeasured never weak); the page re-derives nothing. Harness fixture: `store__modules.json`.
+
+**The buyer sorts the store by the part that matters to them (task 1003800, owner decision 2026-10-22).** A "Sort by" menu sits in the store group's head (`#store-sort`, `.ov-group__note`): Name, then the parts the server lists in `sort_parts`. Picking one re-reads `GET /store/modules?sort=<part>`, and the server orders the listed modules (`sortByPart` in `src/bongos/module-listing.js`: highest for that part first, a tie to the overall score then the key, a module with no score for the part last). The page never sorts the rows itself, and New modules keep name order because they are never ranked. While a part is picked, each listed row carries that part's score as a plain fact (`Reliability 91`, or `Reliability not measured yet`), so the order explains itself. The owner chose the buyer over a per-category "key part" because nothing records what a category is for, and a hidden weighting would break the score an author can check (ADR 0343 D3).

package/modules/lifecycle/criterion-uat.js

@@ -122,6 +122,12 @@ function foldLiveReadings(readings) {
 
 // ── the sign-off refusal ladder ─────────────────────────────────────────────
 
+// PAUSED (owner, 2026-10-22): the "someone else signs it off" rule below is off,
+// so the person who shipped the work may sign off its UAT/review themselves.
+// Delete this flag to restore the rule. UAT_SELF_SIGNOFF=off turns it back on
+// (the tests do, so the paused rule stays proven while it waits).
+const SELF_SIGNOFF_ALLOWED = process.env.UAT_SELF_SIGNOFF !== 'off';
+
 // PURE — may this person sign this criterion off now? Returns null (allowed) or
 // { code, status, message, ...detail }. The ORDER is the order a person would
 // want to be told: is there anything to sign, is it the right kind of sign-off,
@@ -163,7 +169,7 @@ function signoffRefusal({ criterion, counts, remaining = [], backendOnly, kind,
   }
   const signer = String(signerId);
   const isOwner = signerIsOwner === true || (ownerId != null && String(ownerId) === signer);
-  if (!isOwner && shipperIds.map(String).includes(signer)) {
+  if (!SELF_SIGNOFF_ALLOWED && !isOwner && shipperIds.map(String).includes(signer)) {
     return { code: 'signer_shipped_this_work', status: 403, message: 'You shipped work linked to this criterion, so someone else has to sign it off. Any other reviewer, or the project owner, can.' };
   }
   if (kind === 'uat' && !recording) {

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.153",
+  "version": "1.21.155",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.21.153",
+      "version": "1.21.155",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.153",
+  "version": "1.21.155",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",