@bongos/core 1.21.159 → 1.21.161

package/modules/hall-ui/public/thinking.html

@@ -69,7 +69,7 @@
      <div> — no selector names the element, so the render is unchanged. -->
 <div class="top">
   <div class="brand">
-    <h1>your sky <em id="lensWord">— your thinking</em></h1>
+    <h1>your sky <em id="lensWord">- ideas from you</em></h1>
     <div class="stats" id="stats"></div>
   </div>
   <div class="lens" role="group" aria-label="Filter" id="lensGroup">

package/modules/public-landing/public/privacy.html

@@ -93,16 +93,16 @@
 
 <main class="legal" id="legal">
   <h1>Privacy</h1>
-  <p class="lede">What {{productName}} keeps about you and your project, who else sees it, and how long it stays — in plain words. The code that does all of this is open, so every sentence here can be checked.</p>
+  <p class="lede">What {{productName}} keeps on you in regards to data, and the terms and conditions thereof.</p>
 
   <section class="card">
     <h2>Visiting</h2>
-    <p>Reading these pages signs you into nothing and sets no tracking cookie. There are no advertising or analytics trackers on this site. Your browser keeps one preference locally — light or dark mode — and nothing here reads it back to a server.</p>
+    <p>Reading these pages signs you into nothing and sets no tracking cookies. There are no advertising or analytics trackers on this site.</p>
 
-    <h2>Signing in with GitHub</h2>
-    <p>You sign in through GitHub; we never see your GitHub password. From GitHub we receive and keep your numeric GitHub id, your username, your display name and your avatar. On top of that, {{productName}} keeps what you do here: your rank, the tasks you claim and ship, your session logs, the grades your shipped work receives, and the {{currency}} and costs recorded against your sessions.</p>
-    <p>Each sign-in creates a session: a random token, whether it came from the browser or the command line, the browser's identification string, and when it was created, last used, expires or was signed out. A signed-out or expired session stays on record but can no longer be used.</p>
-    <p>If you grant repository access while creating a project, that permission is used to create or adopt your repository. The token is kept encrypted for the few minutes the setup needs and is used for nothing else. Optional links you make yourself — a Discord account, an Anthropic account for attribution — are kept only when you make them, and only as the identifier needed to recognise the link.</p>
+    <h2>Linked Sign-ins (GitHub)</h2>
+    <p>You sign in through GitHub; we never see your GitHub password. From GitHub we receive and keep your numeric GitHub id, your username, your display name and your avatar. {{productName}} DOES keep what you do here: your rank, the tasks you claim and ship, your session logs, the grades your shipped work receives, and the {{currency}} and costs recorded against your sessions.</p>
+    <p>Each sign-in creates a session: a random token. A signed-out or expired session stays on record but can no longer be used.</p>
+    <p>If you grant repository access while creating a project, that permission is used to create or adopt your repository. The token is kept encrypted for the few minutes the setup needs and is used for nothing else. Current Optional links you make yourself — a Discord account, an Anthropic account for attribution — are kept only when you make them, and only as the identifier needed to recognise the link.</p>
 
     <h2>A project you create</h2>
     <p>A project is a record here and a database of its own. The record holds its name, the GitHub repository it ships to, its web address, how it is hosted, who owns it, when it was created, what state it is in, and its settings — who can see it and how people join. The project's own database holds the same kinds of records as above for the people who build on it: accounts, sessions, tasks, grades, {{currency}}.</p>
@@ -111,15 +111,15 @@
     <h2>Who else sees it</h2>
     <ul>
       <li><b>GitHub</b> — for signing in, and for the repositories your projects ship to.</li>
-      <li><b>The AI model provider</b> — when a shipped task is graded, the change it made (the code diff) is sent to the model the grader runs on, Anthropic's Claude, under the key of the builder or the instance. That is how a ship earns its grade.</li>
+      <li><b>The AI model provider</b> — when a shipped task is graded, the change it made is sent to the model the grader runs on, Anthropic's Claude, under the key of the builder or the instance.</li>
       <!--apex-only:start--><li><b>Hosting</b> — projects hosted by the platform run on servers rented from DigitalOcean, with their web address and traffic passing through Cloudflare.</li><!--apex-only:end-->
     </ul>
     <p>Nothing is sold, and nothing is shared for advertising.</p>
 
-    <h2>How long, and how to leave</h2>
+    <h2>Session length, and Leaving</h2>
     <p>Sign out to end a session. Browser sessions expire on their own; command-line tokens last until you revoke them from your settings.</p>
     <p>Your builder record and your shipped work stay attributed to you after you leave — the ledger of who built what is the point of the platform. The owner can deactivate a builder: that ends their sessions and releases their claims, and keeps the record.</p>
-    <p>Tearing down a project stops its server and its backups. It does not erase the project: its database and existing backups are kept on purpose so it can be brought back. Clearing them for good is done by hand — ask through the <a href="/contact">contact page</a>.</p>
+    <p>Tearing down a project stops its server and its backups, does not erase the project: its database and existing backups are kept on purpose so it can be brought back. Clearing them for good is done by hand — ask through the <a href="/contact">contact page</a>.</p>
 
     <h2>The code is open</h2>
     <p>Every part of this — what is stored, where, and for how long — is public. This site runs Cloud Bongos, free software under the AGPL-3.0. <a href="{{sourceRepoUrl}}">Read the source.</a></p>

package/modules/public-landing/public/projects.html

@@ -817,7 +817,7 @@ summary{min-height:24px;padding:3px 0;}
            map, folds with the field under 480 and hides with it off the map.
            Member-gated by paintShellIdentity, as before. -->
       <label class="switch" title="Show only projects you own or build on">
-        <input type="checkbox" id="onlyMine"><span class="track"></span> Only mine
+        <input type="checkbox" id="onlyMine"><span class="track"></span> me only
       </label>
     </div>
   </div>

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.159",
+  "version": "1.21.161",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.21.159",
+      "version": "1.21.161",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.159",
+  "version": "1.21.161",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -9988,5 +9988,25 @@
       "id": "1004371",
       "text": "The home page now carries the artist's rewritten words (18 lines), ready for the artist to approve before it goes live."
     }
+  ],
+  "1.21.160": [
+    {
+      "id": "1004697",
+      "text": "The thinking page's heading now carries the artist's new wording, ready for the artist to approve before it goes live."
+    },
+    {
+      "id": "1004378",
+      "text": "The projects page's filter toggle now carries the artist's new label, ready for the artist to approve before it goes live."
+    }
+  ],
+  "1.21.161": [
+    {
+      "id": "1004373",
+      "text": "The Studio now shows where every page you have submitted actually is: waiting to be applied, being applied, waiting for your review, or approved and going live, with how long it has sat there and a \"stuck\" mark when it has sat"
+    },
+    {
+      "id": "1004373",
+      "text": "The privacy page now reads the way the artist rewrote it: shorter, plainer sentences and two renamed headings. It waits for the artist to approve it."
+    }
   ]
 }

package/src/module-api.js

@@ -75,7 +75,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // MAJOR (see allowBoxScope below): passes the request through untouched.
 function deprecatedNoopMiddleware(_req, _res, next) { next(); }
 
-const CORE_VERSION = '1.21.159'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.21.161'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('discord'); log.info('mounted');

package/tests/landing_legal_pages.mjs

@@ -36,7 +36,7 @@ const { buildPlatformApp, stripApexOnly } = platformMod;
 const { applyBrandTokens } = require('../src/bongos/serve-internal.js');
 
 const PAGES = [
-  { route: '/privacy', file: 'privacy.html', title: 'Privacy', spine: ['Signing in with GitHub', 'How long, and how to leave'], platformOnly: ['DigitalOcean', 'Cloudflare'] },
+  { route: '/privacy', file: 'privacy.html', title: 'Privacy', spine: ['Linked Sign-ins (GitHub)', 'Session length, and Leaving'], platformOnly: ['DigitalOcean', 'Cloudflare'] },
   { route: '/terms', file: 'terms.html', title: 'Terms', spine: ['Fair use', 'Your projects and your code'], platformOnly: ['non-profit', 'Hosted projects'] },
   { route: '/contact', file: 'contact.html', title: 'Contact', spine: ['The Repository (repo)', 'Security'], platformOnly: ['the platform these projects run on'] },
 ];