@bongos/core 1.21.169 → 1.21.170

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.21.169",
-  "core_contract": "1.21.169",
-  "source_commit": "8b02f41534160e6504eabfe51100a2495d211974",
+  "core_version": "1.21.170",
+  "core_contract": "1.21.170",
+  "source_commit": "dd8ede0d02e94bf42ebeecabda31e50d04207496",
   "source_ref": "HEAD",
-  "built_at": "2026-10-23T17:05:22.541Z",
+  "built_at": "2026-10-23T17:21:55.040Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 609,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 3831,
-  "tree_sha256": "bac0beb6098d17b2b1f50303ea3e9fdee6fe962ca9b7670f43b1770dac79c7de",
+  "tree_sha256": "e66d52e5a8929945674ce60631b73e08c435660bf0228c776306ec586cc77464",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -2182,7 +2182,7 @@
     {
       "path": "docs/adr/0344-a-tester-is-a-project-that-opts-in-once.md",
       "mode": "0000644",
-      "sha256": "ca2a376a0c555f28a3ce82542f9e7b5ac4d5da1713bf0a423087515a81d8ee7e"
+      "sha256": "3ad19bfe66fbff271a718af8d151f814371b1d03fa45463a88010f9915ee1843"
     },
     {
       "path": "docs/adr/0345-we-host-every-projects-hall-and-its-app-deploys-where-the-owner-chooses.md",
@@ -2412,12 +2412,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "25f5a61ab2dd538a7df3a7d014989c26ffb95edb53647b2a6c3170f4dacc5771"
+      "sha256": "6342b5c569de415d86db07c9e557eee201292149a4fe69d65bbee1b66eee2a70"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "95ce55e7f52df50b58eeda739923a6a4302f51d288c9c2922cf815851d68dff6"
+      "sha256": "e2c97496bcaef11d81aba576f2dc6d50128ec1f04a5023ef02d7a67aabce07a0"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2927,12 +2927,12 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "2167306eca652743c7e6f345a0837ff342db271856e3ce08a6cd87f216cf4b23"
+      "sha256": "69e717f42c7d4a55a1c985e886807078c1cc320c4650993ad7ecd5aba27d3d2c"
     },
     {
       "path": "docs/modules-contract.md",
       "mode": "0000644",
-      "sha256": "9e3a88916b780e0ae8c842bebfe892f513a61e2a234ab32dd7480873bd7de94f"
+      "sha256": "73757f66afb17289933edd12b20e0c8d903b37d74a004a622826adf09742401f"
     },
     {
       "path": "docs/onboarding/diagrams/01-task-lifecycle.mmd",
@@ -3017,7 +3017,7 @@
     {
       "path": "docs/page-readings.json",
       "mode": "0000644",
-      "sha256": "21d20ab9185c218e916e0e31e88f7bade97b842df05683e337e2a960f45b595a"
+      "sha256": "60976ab4a0fa35bcdc1dcb4c14ddcd1221f7a6f98bd31f79c9b8bc458edb8ba8"
     },
     {
       "path": "docs/project-context.template.md",
@@ -4487,7 +4487,7 @@
     {
       "path": "modules/copy-desk/page-status.js",
       "mode": "0000644",
-      "sha256": "c368513e1d24ebf35d8f817b33624066ac93c7b3c04beff5742a8c9676d8c69f"
+      "sha256": "bf482381365aac38d983048f87597cc7d498ff320915502e4d5cb8ac3387d3e4"
     },
     {
       "path": "modules/copy-desk/pages.js",
@@ -5552,17 +5552,17 @@
     {
       "path": "modules/hall-ui/public/approval-queue-lib.js",
       "mode": "0000644",
-      "sha256": "80b58f43103d3b99ce0992ecc53fb98bdedbcdb154908b73650cc2ec4a4c427b"
+      "sha256": "876b7f94461c8a13e0ce85597e60a9ff089adcde86ed8c3fd540e06ac92eab87"
     },
     {
       "path": "modules/hall-ui/public/approval-queue.css",
       "mode": "0000644",
-      "sha256": "89c1a9e86eed65260503bae596ac51689070e181e226927f9019a39a95e38684"
+      "sha256": "6bf30c8a3d397a3f7994e4ecee848a76172f7ecb828d8bcf286f45eaa9c7bccb"
     },
     {
       "path": "modules/hall-ui/public/approval-queue.js",
       "mode": "0000644",
-      "sha256": "0795078c6aa00603c400bbedb170c975a042536b5ce62f7fb7cec100af8c0dcf"
+      "sha256": "3272cdcbad2a90892be9d248f2c8f52e6f97d44404d05c1b8159827e6ed54b75"
     },
     {
       "path": "modules/hall-ui/public/atlas.css",
@@ -10602,12 +10602,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "34102111462f50e10260246a90a52182e37c80d0ccd3bec9e803ebff646eb732"
+      "sha256": "612aedb1a80183da059e896d4a3325c4672d4159009eda6329159b0cc23d9c34"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "12da6d57d97df3fa29bde1ad54891bbd8adb1a36cfcd1841a793a6b37ea24edb"
+      "sha256": "9a75c884c3bbd879707469af51cac45699ae093714ed9a2176d6a95bfbb954e0"
     },
     {
       "path": "public-docs/index.html",
@@ -10627,7 +10627,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "fab9655657d0c99fa95529dde44fcdfac9fc830520286ba1b6f9682477e45992"
+      "sha256": "bc246f86279741c379c800cd01e417876b45cd7b73adf48d0bb8c7204517376e"
     },
     {
       "path": "scripts/cron/style_guide_audit.sh",
@@ -11512,7 +11512,7 @@
     {
       "path": "scripts/gds/module-assess-installs.js",
       "mode": "0000644",
-      "sha256": "157340a75c621f2e8a22f86df9924a16c9c6287368f615df815388956ce8adcb"
+      "sha256": "70b1ff5aa78d085481afba69f9f3ec8b0ba8b1901e2c683b36c9383585ada6be"
     },
     {
       "path": "scripts/gds/module-assess-score.js",
@@ -13017,7 +13017,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "af3d3d00ecdd47a62cd383271cf2f606d0c695cd8ba189269764fd4108c0485d"
+      "sha256": "1792868060800cda8dd8d8f8426cd070d7083a0d5ae74f1b0964e238ccf79e4d"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -15512,7 +15512,7 @@
     {
       "path": "tests/hall_approval_queue.mjs",
       "mode": "0000644",
-      "sha256": "90f354ed104753fef4a8f159d9afaa29935a918162169453ec9b8a4780f04c78"
+      "sha256": "d036f80973aca6351c34f859439c073e9e9e8e410ccdc63e7148be07d88c8f4f"
     },
     {
       "path": "tests/hall_audit.mjs",
@@ -16607,7 +16607,7 @@
     {
       "path": "tests/module_assess_installs.mjs",
       "mode": "0000644",
-      "sha256": "3fa715a8ae55abed9708ede1871c925a8bb520722ea0df3e8ad97661a24890cb"
+      "sha256": "7baa761878723075aaf8e46b5e336abc3f5534d94425737c5a2e532a4b744035"
     },
     {
       "path": "tests/module_assess_price_parity.mjs",

package/docs/adr/0344-a-tester-is-a-project-that-opts-in-once.md

@@ -75,3 +75,15 @@ feedback part of the module's score (ADR 0343 D1, task 1003806).
   updated.
 - **Releasing to everyone at once.** Testing would only happen when volunteers happened to be
   there.
+
+## Implementation note — tester feedback (task 1003806, 2026-10-23)
+
+D5 is `assessTesterFeedback` in `scripts/gds/module-assess-installs.js`, re-scored on every
+install or error report alongside Install and Reliability. A report counts when it falls in the
+version's **tester window** — from its first tester-channel row to the first later row on any
+other channel (promoted or withdrawn), or now — because only tester projects are served a tester
+version. A tester it went well for installed without failing and reported no runtime errors in
+the window. "Whether they kept it" is not measured: nothing reports an uninstall. The module's
+author never counts, and fewer than 3 testers is `pending`, as for Install. So that two friendly
+testers cannot outrank two hundred real ones, the count is blended with ten neutral testers:
+`round(100 × (went well + 5) / (testers + 10))` — 3 of 3 scores 62, 200 of 200 scores 98.

package/docs/copy-inventory.md

@@ -4,13 +4,13 @@
 > Deterministic on a given tree — regenerate and commit rather than hand-editing.
 > Machine-readable twin: [`copy-registry.json`](copy-registry.json).
 
-**2791 strings** across 3 surfaces · 2372 distinct pieces of copy · 2791 certain, 0 heuristic · 243 shown in more than one place.
+**2793 strings** across 3 surfaces · 2374 distinct pieces of copy · 2793 certain, 0 heuristic · 243 shown in more than one place.
 
 ## Surfaces
 
 | surface | lives at | files | strings |
 |---|---|---|---|
-| `builders-hall` | `modules/hall-ui/public` | 150 | 1971 |
+| `builders-hall` | `modules/hall-ui/public` | 150 | 1973 |
 | `status-dashboard` | `modules/status-ui/public` | 4 | 100 |
 | `landing` | `modules/public-landing/public` | 9 | 720 |
 
@@ -78,7 +78,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `8226c979db4d` | 3x | Not now | modules/hall-ui/public/collab.js:668, modules/hall-ui/public/paintbrush.js:119, modules/hall-ui/public/paintbrush.js:183 |
 | … | | _203 more in the JSON registry_ | |
 
-## `builders-hall` — 1971 strings
+## `builders-hall` — 1973 strings
 
 | id | conf | text | where |
 |---|---|---|---|
@@ -836,7 +836,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `1a46c31343cb` | certain | No projects are hosted here yet. | `modules/hall-ui/public/fleet-costs.js:68` |
 | `9f73b3f3dad0` | certain | No rank floor — any builder can claim this task | `modules/hall-ui/public/task-lib.js:82` |
 | `4ffd939755e0` | certain | No real-world data yet, so it is listed but not ranked. | `modules/hall-ui/public/modules.js:334` |
-| `722d107d7a90` | certain | No render is attached to this page yet. /tweak attaches them when it applies a page; until then there is nothi | `modules/hall-ui/public/approval-queue.js:135` |
+| `722d107d7a90` | certain | No render is attached to this page yet. /tweak attaches them when it applies a page; until then there is nothi | `modules/hall-ui/public/approval-queue.js:136` |
 | `3fd0c6fcb92e` | certain | No request and no invite needed. Sign in with GitHub, and a step-by-step guide takes you the rest of the way. | `modules/hall-ui/public/hall-render.js:283` |
 | `2947c1ddea9a` | certain | No running box to deploy. | `modules/hall-ui/public/deploy.js:708` |
 | `c8fa4bdba44a` | certain | No saved views yet. Set the filters you want, then save them here. | `modules/hall-ui/public/hall-kit.js:411` |
@@ -853,9 +853,9 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `c9800f8b6bc8` | certain | No versions declared yet. | `modules/hall-ui/public/roadmap.js:481` |
 | `4654849396a3` | certain | No work reviewed yet. | `modules/hall-ui/public/hall-widgets.js:191` |
 | `9cf1c752b65d` | certain | No works shipped yet — the works charts draw once the first one lands. | `modules/hall-ui/public/profile-charts.js:594` |
-| `9dbe1981055c` | certain | No {…} render is attached to this page. | `modules/hall-ui/public/approval-queue.js:134` |
+| `9dbe1981055c` | certain | No {…} render is attached to this page. | `modules/hall-ui/public/approval-queue.js:135` |
 | `086665af6208` | certain | No {…} sessions recorded. Choose another kind to widen the ledger. | `modules/hall-ui/public/sessions.js:148` |
-| `730a248e7888` | certain | No {…} {…} render; showing {…} {…}. | `modules/hall-ui/public/approval-queue.js:139` |
+| `730a248e7888` | certain | No {…} {…} render; showing {…} {…}. | `modules/hall-ui/public/approval-queue.js:140` |
 | `1967d2176f2e` | certain | Nobody has an open ask right now. | `modules/hall-ui/public/collab.html:84` |
 | `c65c9f5c02e3` | certain | Nobody is waiting on you. Requests reach you by role — | `modules/hall-ui/public/collab.html:54` |
 | `d5cf262e671d` | certain | Nobody is writing this page. Take it, and every line here is yours to type over. | `modules/hall-ui/public/tweak-editor.js:314` |
@@ -924,7 +924,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `3e1d0b2334d1` | certain | Only if it needs it — with the AI at your side, or on your own. | `modules/hall-ui/public/studio.js:211` |
 | `45b667751b95` | certain | Only me | `modules/hall-ui/public/settings.html:294` |
 | `f9f2a3af318a` | certain | Only mine | `modules/hall-ui/public/work.html:70` |
-| `ab48bab11b70` | certain | Only the artist who wrote this page, or another artist, can approve it or send it back. | `modules/hall-ui/public/approval-queue.js:170` |
+| `ab48bab11b70` | certain | Only the artist who wrote this page, or another artist, can approve it or send it back. | `modules/hall-ui/public/approval-queue.js:171` |
 | `e11eae1d0a92` | certain | Only the goals your thoughts touched — everything else fades. | `modules/hall-ui/public/thinking.html:83` |
 | `f74ec527907f` | certain | Only the people allowed to upgrade this project see an Update button here. | `modules/hall-ui/public/settings-software-update.js:116` |
 | `f28917ca859e` | certain | Only the thoughts of the last thirty days. | `modules/hall-ui/public/thinking.html:81` |
@@ -954,7 +954,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `f6f68ba322be` | certain | Open {…} | `modules/hall-ui/public/goal-inbox.js:69` |
 | `f6f68ba322be` | certain | Open {…} | `modules/hall-ui/public/goals.js:84` |
 | `35d46f963cd1` | certain | Opening the doc… | `modules/hall-ui/public/page-notes.js:313` |
-| `7a8dfadb7468` | certain | Opening the rendered page… | `modules/hall-ui/public/approval-queue.js:129` |
+| `7a8dfadb7468` | certain | Opening the rendered page… | `modules/hall-ui/public/approval-queue.js:130` |
 | `62e75a9d0af4` | certain | Opening the reviews… | `modules/hall-ui/public/studio.html:171` |
 | `94f3d9f46098` | certain | Opening your doc… | `modules/hall-ui/public/page-notes.js:146` |
 | `94f3d9f46098` | certain | Opening your doc… | `modules/hall-ui/public/page-notes.js:338` |
@@ -1247,6 +1247,8 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `6c6544f5c011` | certain | Stored encrypted; never shown again after saving — only its last four digits. | `modules/hall-ui/public/settings.html:226` |
 | `5831de503015` | certain | Studio — {{worldName}} | `modules/hall-ui/public/studio.html:10` |
 | `5831de503015` | certain | Studio — {{worldName}} | `modules/hall-ui/public/studio.html:10` |
+| `30b78bc382a1` | certain | Submitted, not applied yet | `modules/hall-ui/public/approval-queue.js:193` |
+| `7d56be90cd16` | certain | Submitted, not applied yet ({…}) | `modules/hall-ui/public/approval-queue.js:193` |
 | `f79e1fb8ebd4` | certain | Suggested as you type; leave it on "no goal" and it waits for triage. | `modules/hall-ui/public/ideas.html:84` |
 | `a1482eff4ead` | certain | Suggested for you | `modules/hall-ui/public/settings-specialities.js:384` |
 | `1e40f33483eb` | certain | Switch theme | `modules/hall-ui/public/shell.js:549` |
@@ -1321,7 +1323,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `5615bef4a99e` | certain | The governor city | `modules/hall-ui/public/city.html:79` |
 | `19b23f2cc45b` | certain | The grading panel could not run when this task was shipped, so no quality signal was recorded — an outage, not | `modules/hall-ui/public/task.js:394` |
 | `027e9420daa2` | certain | The headline lands, but the sub-line reads like a brochure. | `modules/hall-ui/public/studio.js:191` |
-| `f08587a38a2a` | certain | The hero line is too long on a phone. | `modules/hall-ui/public/approval-queue.js:176` |
+| `f08587a38a2a` | certain | The hero line is too long on a phone. | `modules/hall-ui/public/approval-queue.js:177` |
 | `9f45c63c9697` | certain | The kinds of work you prefer. Task suggestions lean toward your choices — pick one, several, or none. | `modules/hall-ui/public/settings.html:116` |
 | `2a2152c7bcfb` | certain | The ladder's own shape at this size is {…}. {…} | `modules/hall-ui/public/government.js:926` |
 | `814eb6889339` | certain | The ledger | `modules/hall-ui/public/goal-map.html:102` |
@@ -1340,7 +1342,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `329a1d350f07` | certain | The page changed after your draft was saved, so the draft is not shown over its new words. Rewrite the lines a | `modules/hall-ui/public/tweak-editor.js:310` |
 | `aa716f3dd551` | certain | The page could not be loaded. Try again. | `modules/hall-ui/public/builders.js:1455` |
 | `28e0c1457b08` | certain | The page is in. | `modules/hall-ui/public/tweak-editor.html:96` |
-| `4821b0e74460` | certain | The page, rendered | `modules/hall-ui/public/approval-queue.js:200` |
+| `4821b0e74460` | certain | The page, rendered | `modules/hall-ui/public/approval-queue.js:215` |
 | `74bc22f38140` | certain | The platform confirmed this request came from the account it names. | `modules/hall-ui/public/watch.js:396` |
 | `6c3d88de42de` | certain | The primer | `modules/hall-ui/public/primer.html:41` |
 | `dea378cd4837` | certain | The primer did not load | `modules/hall-ui/public/primer.html:88` |
@@ -1349,7 +1351,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `c0034db3281c` | certain | The reason is recorded in the audit log. This is recoverable: a retired task can be restored to the backlog wi | `modules/hall-ui/public/task.js:788` |
 | `1ce78006fe00` | certain | The reference did not load | `modules/hall-ui/public/drachmae.html:85` |
 | `c43812b59e97` | certain | The release notes could not be read: {…}. The versions are still listed. | `modules/hall-ui/public/settings-software-update.js:160` |
-| `8040b1d05ff2` | certain | The renders could not be read just now. Close the queue and open it again. | `modules/hall-ui/public/approval-queue.js:130` |
+| `8040b1d05ff2` | certain | The renders could not be read just now. Close the queue and open it again. | `modules/hall-ui/public/approval-queue.js:131` |
 | `3b5260b8780a` | certain | The reserved 16-rank ladder, which ranks are live today (archon, metic, thetes, xenos), and what each may do. | `modules/hall-ui/public/diagrams.html:60` |
 | `cfa55899240b` | certain | The roadmap could not be loaded right now. Reload to try again. | `modules/hall-ui/public/roadmap.js:494` |
 | `2dea5ed89aa1` | certain | The roadmap failed to load. Reload to try again. | `modules/hall-ui/public/roadmap.js:495` |
@@ -1388,7 +1390,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `34555793f33e` | certain | The task list could not be loaded right now. | `modules/hall-ui/public/work.js:1026` |
 | `8c991355687d` | certain | The upgrade checked {…} and refused:{…} | `modules/hall-ui/public/deploy.js:473` |
 | `a42a37c43bfb` | certain | The words this project shows people — what has been flagged, and what nobody has looked at. | `modules/hall-ui/public/copy-desk.js:328` |
-| `d51b954e0aa9` | certain | The words you changed | `modules/hall-ui/public/approval-queue.js:200` |
+| `d51b954e0aa9` | certain | The words you changed | `modules/hall-ui/public/approval-queue.js:215` |
 | `bcdbded93d4e` | certain | The work board failed to load. Reload to try again. | `modules/hall-ui/public/work.js:1214` |
 | `996d2aa0e2f0` | certain | Then copy the project onto your machine, install its dependencies, and sign in: | `modules/hall-ui/public/hall-render.js:848` |
 | `383018c7df70` | certain | There is no transcript you can read for this session. | `modules/hall-ui/public/sessions.js:234` |
@@ -1432,7 +1434,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `1116d2cad470` | certain | This project tests new versions first | `modules/hall-ui/public/modules.js:211` |
 | `3c8aaec39c40` | certain | This project's code expects {…} database change{…} that its database has not applied yet. Anything that relies | `modules/hall-ui/public/deploy.js:587` |
 | `6e9dfe1fb903` | certain | This restarts {…} onto core | `modules/hall-ui/public/deploy.js:569` |
-| `b9ed9a5f38dd` | certain | This round changed no lines. | `modules/hall-ui/public/approval-queue.js:149` |
+| `b9ed9a5f38dd` | certain | This round changed no lines. | `modules/hall-ui/public/approval-queue.js:150` |
 | `69e8beced2ff` | certain | This sends the idea back to its author. Say why, and which section. | `modules/hall-ui/public/board-room.js:379` |
 | `09256febc32d` | certain | This sentence has {…} {…} where a value is dropped in when it is shown. | `modules/hall-ui/public/copy-desk.js:422` |
 | `9333d71e3e15` | certain | This speciality offers no skills to choose. | `modules/hall-ui/public/settings-specialities.js:106` |
@@ -1518,7 +1520,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `54952bcb6ca3` | certain | What it is for | `modules/hall-ui/public/goal-author.js:38` |
 | `ae44a375e814` | certain | What it unlocks | `modules/hall-ui/public/ranks.js:109` |
 | `00dc1f0f83e1` | certain | What kind of wrong? | `modules/hall-ui/public/copy-desk.html:87` |
-| `c9a4c6f16433` | certain | What needs changing | `modules/hall-ui/public/approval-queue.js:176` |
+| `c9a4c6f16433` | certain | What needs changing | `modules/hall-ui/public/approval-queue.js:177` |
 | `9a85f2c19b48` | certain | What should it say? | `modules/hall-ui/public/copy-desk.html:156` |
 | `7c765a4209d1` | certain | What should this page be? | `modules/hall-ui/public/page-notes.js:141` |
 | `2dd116d2d817` | certain | What the current wording gets wrong, and what yours does about it. | `modules/hall-ui/public/copy-desk.html:166` |
@@ -1650,8 +1652,8 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `2177da93be9b` | certain | and leave this alone. | `modules/hall-ui/public/settings.html:347` |
 | `0257cb508ae7` | certain | and {…} more below this thought | `modules/hall-ui/public/profile.js:489` |
 | `d86265f99668` | certain | and {…} more waiting{…} | `modules/hall-ui/public/studio.js:311` |
-| `9bf4d3cabf80` | certain | approval queue | `modules/hall-ui/public/approval-queue.js:194` |
-| `ac37199ccdbb` | certain | approve and ship | `modules/hall-ui/public/approval-queue.js:174` |
+| `9bf4d3cabf80` | certain | approval queue | `modules/hall-ui/public/approval-queue.js:208` |
+| `ac37199ccdbb` | certain | approve and ship | `modules/hall-ui/public/approval-queue.js:175` |
 | `b4033000c537` | certain | as a table | `modules/hall-ui/public/profile-charts.js:281` |
 | `72f977e4c47f` | certain | as configuration: membership rank:{…} — the council rank below, once you have added it and assigned its member | `modules/hall-ui/public/government.js:923` |
 | `d7c511423bc0` | certain | as configuration: {…} | `modules/hall-ui/public/government.js:833` |
@@ -1715,8 +1717,8 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `8e66451d0c12` | certain | gravity — the goal that catches it lights as you type; letting it float is a real answer | `modules/hall-ui/public/thinking.html:102` |
 | `c5862d055f1a` | certain | hard floor | `modules/hall-ui/public/gate.js:142` |
 | `55d673a5f0ec` | certain | highest credits | `modules/hall-ui/public/hall-widgets.js:176` |
-| `c2267f78f931` | certain | highlighted: the words you changed | `modules/hall-ui/public/approval-queue.js:170` |
-| `c2267f78f931` | certain | highlighted: the words you changed | `modules/hall-ui/public/approval-queue.js:183` |
+| `c2267f78f931` | certain | highlighted: the words you changed | `modules/hall-ui/public/approval-queue.js:171` |
+| `c2267f78f931` | certain | highlighted: the words you changed | `modules/hall-ui/public/approval-queue.js:184` |
 | `da40bf505b89` | certain | hist. | `modules/hall-ui/public/sky-panel.js:40` |
 | `fda88709bc50` | certain | holds the repo. Follow the numbered path to see how your work gets to prod. This is the largest diagram — | `modules/hall-ui/public/diagrams.html:74` |
 | `17ab8db79e1f` | certain | holds the worker, the code, and your local memory; the | `modules/hall-ui/public/diagrams.html:74` |
@@ -1788,7 +1790,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `cbaf58cdbe35` | certain | open the queue | `modules/hall-ui/public/goal-inbox.js:561` |
 | `af3a8e0fe6a8` | certain | open your goals | `modules/hall-ui/public/goal-inbox.js:127` |
 | `af3a8e0fe6a8` | certain | open your goals | `modules/hall-ui/public/goal-inbox.js:158` |
-| `9a803563c948` | certain | open {…} | `modules/hall-ui/public/approval-queue.js:165` |
+| `9a803563c948` | certain | open {…} | `modules/hall-ui/public/approval-queue.js:166` |
 | `4f279d68175f` | certain | open, on the Security tab | `modules/hall-ui/public/watch.html:50` |
 | `7b85e6494596` | certain | opens a new tab | `modules/hall-ui/public/palette.js:315` |
 | `c38db02adb61` | certain | or above | `modules/hall-ui/public/government.js:602` |
@@ -1818,7 +1820,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `9bec9eb4829e` | certain | scope: {…} | `modules/hall-ui/public/goals-render.js:855` |
 | `9c35bc28a3e9` | certain | see it | `modules/hall-ui/public/goal-map.html:96` |
 | `9c35bc28a3e9` | certain | see it | `modules/hall-ui/public/thinking.html:104` |
-| `92775a3d8d0d` | certain | send it back | `modules/hall-ui/public/approval-queue.js:181` |
+| `92775a3d8d0d` | certain | send it back | `modules/hall-ui/public/approval-queue.js:182` |
 | `276f0b25e030` | certain | sent today, live | `modules/hall-ui/public/my-agents.js:450` |
 | `a13ee0cde7f2` | certain | set yours in Settings | `modules/hall-ui/public/collab.html:55` |
 | `be368c58934a` | certain | settled · | `modules/hall-ui/public/sky-interaction.js:129` |

package/docs/copy-registry.json

@@ -3,9 +3,9 @@
   "generator": "scripts/gds/copy-inventory.js",
   "goal": 1000074,
   "counts": {
-    "strings": 2791,
-    "unique_ids": 2372,
-    "certain": 2791,
+    "strings": 2793,
+    "unique_ids": 2374,
+    "certain": 2793,
     "heuristic": 0,
     "duplicate_ids": 243
   },
@@ -13,7 +13,7 @@
     "builders-hall": {
       "at": "modules/hall-ui/public",
       "files": 150,
-      "strings": 1971
+      "strings": 1973
     },
     "status-dashboard": {
       "at": "modules/status-ui/public",
@@ -2260,8 +2260,8 @@
       "text": "highlighted: the words you changed",
       "occurrences": 2,
       "at": [
-        "modules/hall-ui/public/approval-queue.js:170",
-        "modules/hall-ui/public/approval-queue.js:183"
+        "modules/hall-ui/public/approval-queue.js:171",
+        "modules/hall-ui/public/approval-queue.js:184"
       ]
     },
     {
@@ -9437,7 +9437,7 @@
       "surface": "builders-hall",
       "text": "No render is attached to this page yet. /tweak attaches them when it applies a page; until then there is nothing to approve from, so send it back or wait.",
       "file": "modules/hall-ui/public/approval-queue.js",
-      "line": 135,
+      "line": 136,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -9590,7 +9590,7 @@
       "surface": "builders-hall",
       "text": "No {…} render is attached to this page.",
       "file": "modules/hall-ui/public/approval-queue.js",
-      "line": 134,
+      "line": 135,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -9608,7 +9608,7 @@
       "surface": "builders-hall",
       "text": "No {…} {…} render; showing {…} {…}.",
       "file": "modules/hall-ui/public/approval-queue.js",
-      "line": 139,
+      "line": 140,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10229,7 +10229,7 @@
       "surface": "builders-hall",
       "text": "Only the artist who wrote this page, or another artist, can approve it or send it back.",
       "file": "modules/hall-ui/public/approval-queue.js",
-      "line": 170,
+      "line": 171,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10499,7 +10499,7 @@
       "surface": "builders-hall",
       "text": "Opening the rendered page…",
       "file": "modules/hall-ui/public/approval-queue.js",
-      "line": 129,
+      "line": 130,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -13131,6 +13131,24 @@
       "origin": "html-title",
       "confidence": "certain"
     },
+    {
+      "id": "30b78bc382a1",
+      "surface": "builders-hall",
+      "text": "Submitted, not applied yet",
+      "file": "modules/hall-ui/public/approval-queue.js",
+      "line": 193,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
+    {
+      "id": "7d56be90cd16",
+      "surface": "builders-hall",
+      "text": "Submitted, not applied yet ({…})",
+      "file": "modules/hall-ui/public/approval-queue.js",
+      "line": 193,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "f79e1fb8ebd4",
       "surface": "builders-hall",
@@ -13802,7 +13820,7 @@
       "surface": "builders-hall",
       "text": "The hero line is too long on a phone.",
       "file": "modules/hall-ui/public/approval-queue.js",
-      "line": 176,
+      "line": 177,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -13973,7 +13991,7 @@
       "surface": "builders-hall",
       "text": "The page, rendered",
       "file": "modules/hall-ui/public/approval-queue.js",
-      "line": 200,
+      "line": 215,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -14054,7 +14072,7 @@
       "surface": "builders-hall",
       "text": "The renders could not be read just now. Close the queue and open it again.",
       "file": "modules/hall-ui/public/approval-queue.js",
-      "line": 130,
+      "line": 131,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -14405,7 +14423,7 @@
       "surface": "builders-hall",
       "text": "The words you changed",
       "file": "modules/hall-ui/public/approval-queue.js",
-      "line": 200,
+      "line": 215,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -14801,7 +14819,7 @@
       "surface": "builders-hall",
       "text": "This round changed no lines.",
       "file": "modules/hall-ui/public/approval-queue.js",
-      "line": 149,
+      "line": 150,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -15575,7 +15593,7 @@
       "surface": "builders-hall",
       "text": "What needs changing",
       "file": "modules/hall-ui/public/approval-queue.js",
-      "line": 176,
+      "line": 177,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -16763,7 +16781,7 @@
       "surface": "builders-hall",
       "text": "approval queue",
       "file": "modules/hall-ui/public/approval-queue.js",
-      "line": 194,
+      "line": 208,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -16772,7 +16790,7 @@
       "surface": "builders-hall",
       "text": "approve and ship",
       "file": "modules/hall-ui/public/approval-queue.js",
-      "line": 174,
+      "line": 175,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -17348,7 +17366,7 @@
       "surface": "builders-hall",
       "text": "highlighted: the words you changed",
       "file": "modules/hall-ui/public/approval-queue.js",
-      "line": 170,
+      "line": 171,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -17357,7 +17375,7 @@
       "surface": "builders-hall",
       "text": "highlighted: the words you changed",
       "file": "modules/hall-ui/public/approval-queue.js",
-      "line": 183,
+      "line": 184,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -18005,7 +18023,7 @@
       "surface": "builders-hall",
       "text": "open {…}",
       "file": "modules/hall-ui/public/approval-queue.js",
-      "line": 165,
+      "line": 166,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -18275,7 +18293,7 @@
       "surface": "builders-hall",
       "text": "send it back",
       "file": "modules/hall-ui/public/approval-queue.js",
-      "line": 181,
+      "line": 182,
       "origin": "js-markup",
       "confidence": "certain"
     },

package/docs/module-api-changelog.md

@@ -3175,5 +3175,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.21.167 with no explicit bump. run 39990468332. (task 1002620)
   1.21.169 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.21.168 with no explicit bump. run 39992064615. (task 1002620)
+  1.21.170 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.21.169 with no explicit bump. run 39994339257. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/docs/modules-contract.md

@@ -394,6 +394,7 @@ Run `bongos upgrade` to confirm coreVersion compatibility, then `node scripts/gd
 - Gate: Metic+ (`module.submit`) for now. This is not `bongos module submit`, which proposes a module *into* core.
 - **A how-to is required** ([ADR 0347](adr/0347-every-store-module-ships-a-how-to.md)). `modules/<key>/HOWTO.md` is what a buyer reads — the store shows it as the module's page — so it is written for the person who installs the module, not for an AI working inside it (that is `CLAUDE.md`). It is plain Markdown: any AI or person can write it. Publish refuses the version unless it has these five level-2 headings, in any order and any case, each with some text under it: `## What it does`, `## Install and enable`, `## How to use it` (with one worked example), `## Configuration` ("None." is fine) and `## Limits and known issues` ("None known." is fine). HTML comments don't count as text, so the scaffold's prompts must be replaced. The refusal names each failing section. The check is one function, `checkHowto` in `scripts/gds/module-artifact.js`; the CLI runs it before uploading and the store runs it again on upload, so a hand-built upload can't skip it. `bongos module check` reports it as advice only — an upstream submit is not gated by it. Install and update don't re-check it, so a version published before the gate still installs. The file travels in the tarball, so its hash pins it to the version. An optional `howto.artifactUrl` in `module.json` (an `https://` link on `claude.ai`) is shown as an extra, never graded.
 - **Getting listed** (task 1003807, [ADR 0343](adr/0343-a-module-score-is-a-security-gate-then-an-average-of-visible-parts.md)). Publishing a version does not by itself put it in the store's catalog, `GET /store/modules`. The catalog shows each module's newest version, judged by its current score. It must pass the Security gate first; a version that failed it, or has not been checked yet, is not listed. A new version with no install or reliability data yet is listed with a **New** label and is not ranked; the floor does not apply to it until it has a real score. Every other version is listed only if its overall score is **at least 50 out of 100**. Below that it is not listed at all. The floor is fixed in Bongos itself (`QUALITY_FLOOR` in `src/bongos/module-listing.js`) and returned in the catalog response; no author or instance setting moves it, and changing it is an owner-approved, reviewed task.
+- **Tester feedback** (task 1003806, ADR 0344 D5). While a version is on the tester channel, what tester projects report about it becomes its Tester feedback part: the share of testers whose install worked and who hit no runtime errors, blended with ten neutral testers so a small sample cannot score high — `round(100 × (went well + 5) / (testers + 10))`. Reports from after the version left the tester channel, and the author's own, never count; under 3 testers it is not scored yet. The rule is `assessTesterFeedback` in `scripts/gds/module-assess-installs.js`.
 - **What a module is strong and weak at** (task 1003799, ADR 0343 D4). Each catalog entry also carries `parts` (the current result of Tests, Clean installs, Reliability, Tester feedback and How-to) and a reading of them: `strengths` (a part scored **80 or more**), `weaknesses` (a part scored **below the floor**) and `unmeasured` (a part with no score yet, which is never counted as weak). Each strength and weakness has a one-sentence `detail` saying what the number rests on. Security is not among them: every listed version has passed it. The reading is `readParts` in `src/bongos/module-listing.js`; the hall's Modules tab shows it in its "In the store" group, so two modules with the same overall score can be told apart.
 - **Sorting by a part** (task 1003800). `GET /store/modules?sort=<part>` orders the listed modules by one part a buyer cares about: `tests`, `install`, `reliability`, `tester_feedback` or `docs` (the response lists them as `sort_parts`, and says which one it applied as `sort`). Modules with a score for that part come first, highest first; a tie goes to the higher overall score, then the module key. A module with no score for that part goes last, so missing data never wins or loses a place on its own. New modules are not sorted: they are never ranked. Any other `sort` value is refused with a 400. Without `sort`, both lists are in key order. The rule is `sortByPart` in `src/bongos/module-listing.js`.
 - **Testing new versions first** (task 1003802, [ADR 0344](adr/0344-a-tester-is-a-project-that-opts-in-once.md) D1). A project can choose to get each new version of its modules before everyone else. It is the project that opts in, never one builder for someone else's project, and never by default. `GET /modules/testing` returns `{ tester, general_only, updated_at, updated_by }` to anyone signed in. `POST /modules/testing { tester: true|false }` switches it, and `POST /modules/:key/general-only { general_only: true|false }` keeps one module on the versions everyone gets while the rest are tested. Both writes take the `module.enable` permission, the same one that turns modules on and off. Both are reversible: switching testing off puts the project back on general versions from its next update, and a module's "general only" mark is kept if testing is switched off and on again. The choice is stored in the project's own settings (`modules.tester`, `modules.general_only`); anything that cannot be read counts as not testing. `testsVersionsOf` in `src/bongos/module-testing.js` is the one answer to "does this project get the tester version of this module", which installs and updates use (task 1003805). The hall's Modules tab has the switch in its "Testing new versions" group, and the general-only control in each module's details.

package/docs/page-readings.json

@@ -3978,7 +3978,7 @@
       "surface": "builders",
       "title": "Studio",
       "states_read": ["home","out","flow","flow-pick","status","words-offer","words-edit","reviews","full","full-back","approvals","approvals-before","approvals-phone","approvals-note","approved","sent-back"],
-      "files_hash": "bd33b2df51b981d4",
+      "files_hash": "a072c3fdf156d639",
       "reading_hash": "55e9090fdd96a979",
       "counts": {"lines":30,"placed":16,"shared":6,"unplaced":8},
       "omitted": {"data":4},

package/modules/copy-desk/page-status.js

@@ -800,8 +800,40 @@ function approvalFor({ page, pageId, rounds, round, builderId, isArtist }) {
   };
 }
 
+// The submitted-but-unapplied rounds, oldest first, in the in-flight list's
+// own words (task 1004662's IN_FLIGHT.submitted), with how long each waited.
+function notAppliedFor({ byPage, invById, now }) {
+  const nowMs = now instanceof Date ? now.getTime() : Number(now);
+  const rows = [];
+  for (const [pageId, rounds] of byPage) {
+    const open = rounds.filter((r) => !TERMINAL.has(r.status));
+    const round = open.length ? open[open.length - 1] : null;
+    if (!round || roundState(round) !== 'submitted') continue;
+    const page = invById.get(pageId) || null;
+    const b = pages.parseBatchBlock(round.description);
+    const since = iso((b.ok && b.batch.submitted_at) || round.updated_at || round.created_at);
+    const ms = since ? nowMs - Date.parse(since) : null;
+    const surface = page ? page.surface : String(pageId).split(':')[0];
+    rows.push({
+      page_id: pageId,
+      surface,
+      surface_word: surfaceWord(surface),
+      title: page ? (page.title || page.id) : pageId,
+      path: page ? page.path || null : null,
+      task_id: String(round.id),
+      state: 'submitted',
+      state_word: IN_FLIGHT.submitted.word,
+      since,
+      waited_days: ms == null ? null : Math.max(0, Math.floor(ms / DAY_MS)),
+      line_count: b.ok ? b.batch.lines.length : 0,
+    });
+  }
+  rows.sort((a, b) => String(a.since || '').localeCompare(String(b.since || '')) || Number(a.task_id) - Number(b.task_id));
+  return { not_applied: rows, not_applied_count: rows.length };
+}
+
 // GET /copy-desk/approvals — the queue, "1 of 2".
-function composeApprovals({ inventory, tasks, builderId, crafts }) {
+function composeApprovals({ inventory, tasks, builderId, crafts, now = Date.now() }) {
   const byPage = indexRounds(tasks);
   const invById = new Map(((inventory && inventory.pages) || []).filter((p) => p && p.id).map((p) => [p.id, p]));
   const isArtist = (crafts || []).includes('artist');
@@ -825,6 +857,11 @@ function composeApprovals({ inventory, tasks, builderId, crafts }) {
     is_artist: isArtist,
     count: queue.length,
     queue,
+    // task 1004765: rounds SUBMITTED but not yet applied. They sat unseen for
+    // weeks because this queue listed only applied rounds; they are listed
+    // apart, never in `queue`, so nothing can approve or send back a page that
+    // has not been applied, and `count` (the studio door) stays reviewable only.
+    ...notAppliedFor({ byPage, invById, now }),
   };
 }
 

package/modules/hall-ui/public/approval-queue-lib.js

@@ -130,6 +130,20 @@
     };
   }
 
+  // task 1004765: a submitted round nobody has applied yet. Listed under the
+  // reviewable pages, marked so, with how long it has waited; it carries no
+  // verb, since there is no applied page to judge.
+  function notAppliedRow(r) {
+    const d = r && r.waited_days;
+    const waited = d == null ? '' : (d === 0 ? 'today' : `${d} day${d === 1 ? '' : 's'}`);
+    return {
+      task_id: String(r.task_id),
+      title: displayTitle(r),
+      mark: 'not applied yet',
+      line: `${r.state_word}${waited ? ` · waiting ${waited}` : ''}. The words are waiting to be applied, so there is nothing to approve yet.`,
+    };
+  }
+
   function noteProblem(note) {
     const n = String(note == null ? '' : note).replace(/\s+/g, ' ').trim();
     if (n.length < MIN_NOTE) return `Say what needs changing in at least ${MIN_NOTE} characters.`;
@@ -157,7 +171,7 @@
   const api = {
     PHASES, DEVICES, MODES, MIN_NOTE, MAX_NOTE,
     slotName, renderIndex, pickRender, hasAnyRender, displayTitle,
-    eyebrow, subLine, doorDetail, refusedWords, lineRow, noteProblem, approvedLine, sentBackLine,
+    eyebrow, subLine, doorDetail, refusedWords, lineRow, notAppliedRow, noteProblem, approvedLine, sentBackLine,
   };
   if (typeof window !== 'undefined') window.OTBApprovalQueueLib = api;
   if (typeof module !== 'undefined' && module.exports) module.exports = api;

package/modules/hall-ui/public/approval-queue.css

@@ -230,6 +230,15 @@ html.aq-open { overflow: hidden; }
 .aq-line__pinned { font-size: 13px; line-height: 1.45; color: var(--aq-link); overflow-wrap: anywhere; }
 .aq-lines__none { margin: 0; font-size: 14px; color: var(--aq-ink-faint); }
 
+/* task 1004765: submitted rounds not applied yet, below the reviewable page. */
+.aq-pending { padding: 14px 20px 18px; border-top: 1px solid var(--aq-rule); }
+.aq-pending__h { margin: 0 0 8px; font-size: 13px; font-weight: 600; color: var(--aq-ink-faint); }
+.aq-pending__list { list-style: none; margin: 0; padding: 0; display: flex; flex-direction: column; gap: 8px; }
+.aq-pending__row { display: flex; flex-wrap: wrap; gap: 4px 8px; font-size: 14px; }
+.aq-pending__title { font-weight: 600; }
+.aq-pending__mark { font-family: var(--aq-mono); font-size: 11px; letter-spacing: .08em; text-transform: uppercase; color: var(--aq-link); }
+.aq-pending__line { flex-basis: 100%; font-size: 13px; color: var(--aq-ink-faint); overflow-wrap: anywhere; }
+
 /* The decision row. */
 .aq-foot {
   display: flex;

package/modules/hall-ui/public/approval-queue.js

@@ -105,6 +105,7 @@
       state.loadError = null;
       state.loaded = true;
       state.queue = (res.data && res.data.queue) || [];
+      state.notApplied = (res.data && res.data.not_applied) || [];
       if (state.idx >= state.queue.length) state.idx = 0;
       tellCount();
     }
@@ -183,6 +184,19 @@
       return `<div class="aq-foot">${approve}${note}<span class="aq-hint">highlighted: the words you changed</span></div>${err}`;
     }
 
+    // task 1004765: submitted rounds nobody has applied, below the reviewable
+    // pages. The server lists them apart; the panel only words them, and gives
+    // them no approve or send-back verb.
+    function notAppliedHtml() {
+      const rows = (state.notApplied || []).map((r) => L.notAppliedRow(r));
+      if (!rows.length) return '';
+      return `<section class="aq-pending" aria-label="Submitted, not applied yet">
+          <h3 class="aq-pending__h">Submitted, not applied yet (${rows.length})</h3>
+          <ul class="aq-pending__list">${rows.map((r) => `
+            <li class="aq-pending__row" data-task="${esc(r.task_id)}"><span class="aq-pending__title">${esc(r.title)}</span> <span class="aq-pending__mark">${esc(r.mark)}</span><span class="aq-pending__line">${esc(r.line)}</span></li>`).join('')}</ul>
+        </section>`;
+    }
+
     function paint() {
       if (!state.open) return;
       const keepNote = document.getElementById('aq-note');
@@ -193,7 +207,8 @@
         const words = state.loadError || (state.loaded ? 'Nothing is waiting for you. A page appears here once /tweak has applied it and its grade has passed.' : 'Opening the Approval queue…');
         dialog.innerHTML = `
           <div class="aq-head"><span class="aq-eyebrow">approval queue</span><h2 class="aq-title" id="aq-title">${state.loaded ? 'Nothing waiting' : 'Approval queue'}</h2><span class="aq-head__gap"></span>${close}</div>
-          <div class="aq-body aq-body--empty"><div class="aq-frame"><p class="aq-frame__note">${esc(words)}</p></div></div>`;
+          <div class="aq-body aq-body--empty"><div class="aq-frame"><p class="aq-frame__note">${esc(words)}</p></div></div>
+          ${notAppliedHtml()}`;
         return;
       }
       loadRenders(item);
@@ -212,7 +227,8 @@
             ${linesHtml(item)}
           </aside>
         </div>
-        ${footHtml(item)}`;
+        ${footHtml(item)}
+        ${notAppliedHtml()}`;
       const note = document.getElementById('aq-note');
       if (note) { note.value = noteValue; }
     }

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.169",
+  "version": "1.21.170",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.21.169",
+      "version": "1.21.170",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.169",
+  "version": "1.21.170",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -10084,5 +10084,15 @@
       "id": "1003805",
       "text": "Projects that test new module versions now actually get them first, and everyone else only gets versions that have passed testing. Turning testing off keeps what you have and moves you to the tested versions from your next upd"
     }
+  ],
+  "1.21.170": [
+    {
+      "id": "1004765",
+      "text": "The Approval queue now also shows pages an artist submitted that nobody has applied yet, under the pages ready to review. Each is marked not applied yet and says how many days it has waited. They have no approve or send back b"
+    },
+    {
+      "id": "1003806",
+      "text": "When a new module version is being tested, how it went for the testing projects now counts toward its quality score — and a handful of friendly testers can no longer outscore hundreds of real ones."
+    }
   ]
 }

package/scripts/gds/module-assess-installs.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-// scripts/gds/module-assess-installs.js — the Install and Reliability parts of a
-// module's assessment, worked out from what real installs report (task 1003793,
+// scripts/gds/module-assess-installs.js — the Install, Reliability and Tester
+// feedback parts of a module's assessment, worked out from what real installs report (task 1003793,
 // ADR 0343 D1; reports from core_273, signal rows into core_265).
 //
 // WHY these two parts. Tests and Docs are things an author writes; Install and
@@ -17,6 +17,21 @@
 //                  reported), over the last ERROR_DAY_WINDOW days.
 // No reports → no_data (ADR 0343 D3: left out of the average, never a zero).
 //
+// Tester feedback (task 1003806, ADR 0344 D5) is the same reports, narrowed to
+// the version's TESTER WINDOW: from the first time it went on the tester channel
+// to the first time it left it (promoted or withdrawn), or now while it is still
+// there. Only tester projects are served a tester version (ADR 0344 D1), so a
+// report inside that window is a tester's. A tester it went well for is one whose
+// install did not fail and who reported no runtime errors in the window.
+// Sample size has to weigh — two friendly testers must not outrank two hundred
+// real ones when a buyer sorts by this part — so the count is blended with
+// PRIOR_TESTERS imaginary testers it went half well for:
+//   Tester feedback = round(100 × (went well + PRIOR_TESTERS/2) / (testers + PRIOR_TESTERS)).
+// 3 of 3 → 62, 10 of 10 → 75, 200 of 200 → 98. MIN_HOLDERS applies here too.
+// An install report is one row per holder, re-stamped on each attempt, so a
+// tester who reinstalls after promotion leaves the window; error counts are per
+// day, so they are placed by their day, not by when they were sent.
+//
 // What the reports may contain is fixed by the owner's privacy posture and
 // enforced at intake (src/bongos/module-usage-reports.js): counts and short codes
 // only, and nothing from a holder who switched reporting off.
@@ -29,6 +44,7 @@
 const { ERROR_DAY_WINDOW } = require('../../src/bongos/module-usage-reports');
 
 const MIN_HOLDERS = 3;
+const PRIOR_TESTERS = 10;
 
 // The not-yet-scored outcomes, shared by both parts. Pure.
 function notYet(holders, what) {
@@ -67,8 +83,41 @@ function assessReliability(days = []) {
   };
 }
 
+// Tester feedback from what testers reported in the tester window: `installs` is
+// { holder_kind, holder_ref, ok, error_code } per holder, `days` the holder-days
+// as Reliability takes them. One verdict per tester, blended with the prior. Pure.
+function assessTesterFeedback({ installs = [], days = [] } = {}) {
+  const testers = new Map();
+  const of = (r) => {
+    const k = `${r.holder_kind}:${r.holder_ref}`;
+    if (!testers.has(k)) testers.set(k, { failed: false, errors: 0 });
+    return testers.get(k);
+  };
+  for (const r of installs) of(r).failed = !r.ok;
+  for (const d of days) of(d).errors += Number(d.error_count);
+  const all = [...testers.values()];
+  const n = all.length;
+  const wentWell = all.filter((t) => !t.failed && t.errors === 0).length;
+  const detail = {
+    testers: n, went_well: wentWell,
+    install_failed: all.filter((t) => t.failed).length,
+    with_errors: all.filter((t) => t.errors > 0).length,
+    errors: all.reduce((sum, t) => sum + t.errors, 0),
+    prior_testers: PRIOR_TESTERS,
+  };
+  if (n < MIN_HOLDERS) return { ...notYet(n, 'from the tester channel'), detail };
+  return {
+    outcome: 'scored',
+    score: Math.round((100 * (wentWell + PRIOR_TESTERS / 2)) / (n + PRIOR_TESTERS)),
+    sample_size: n,
+    reason: `it went well for ${wentWell} of ${n} testers (weighed against ${PRIOR_TESTERS} neutral ones, so a small sample cannot score high)`,
+    detail,
+  };
+}
+
 // The author's own reports never count. Shared by both reads.
-const NOT_AUTHOR = `NOT (r.holder_kind = 'builder' AND r.holder_ref = m.author_id::text)`;
+const notAuthor = (a) => `NOT (${a}.holder_kind = 'builder' AND ${a}.holder_ref = m.author_id::text)`;
+const NOT_AUTHOR = notAuthor('r');
 
 async function readReports(versionId, pool) {
   const { rows: latest } = await pool.query(
@@ -87,26 +136,62 @@ async function readReports(versionId, pool) {
   return { latest, days };
 }
 
+// The version's tester window, as SQL over its channel history (core_276): `t.start`
+// is when it first went on the tester channel, `t.stop` when it next left it (null
+// while it is still there). A version that was never a tester version has no row.
+const TESTER_WINDOW = `(SELECT s.start,
+          (SELECT min(c2.set_at) FROM store_module_version_channels c2
+            WHERE c2.version_id = $1 AND c2.channel <> 'tester' AND c2.set_at > s.start) AS stop
+     FROM (SELECT min(c1.set_at) AS start FROM store_module_version_channels c1
+            WHERE c1.version_id = $1 AND c1.channel = 'tester') s
+    WHERE s.start IS NOT NULL) t`;
+
+async function readTesterReports(versionId, pool) {
+  const { rows: installs } = await pool.query(
+    `SELECT ir.holder_kind, ir.holder_ref, ir.ok, ir.error_code
+       FROM module_install_reports ir
+       JOIN store_module_versions v ON v.id = ir.version_id
+       JOIN store_modules m ON m.module_key = v.module_key
+       CROSS JOIN ${TESTER_WINDOW}
+      WHERE ir.version_id = $1 AND ir.reported_at >= t.start AND (t.stop IS NULL OR ir.reported_at < t.stop)
+        AND ${notAuthor('ir')}`, [versionId]);
+  const { rows: days } = await pool.query(
+    `SELECT ec.holder_kind, ec.holder_ref, ec.error_count
+       FROM module_runtime_error_counts ec
+       JOIN store_module_versions v ON v.id = ec.version_id
+       JOIN store_modules m ON m.module_key = v.module_key
+       CROSS JOIN ${TESTER_WINDOW}
+      WHERE ec.version_id = $1 AND ec.day >= t.start::date AND (t.stop IS NULL OR ec.day <= t.stop::date)
+        AND ${notAuthor('ec')}`, [versionId]);
+  return { installs, days };
+}
+
 const sameResult = (cur, s) => !!cur && cur.outcome === s.outcome
   && (cur.score == null ? null : Number(cur.score)) === s.score
   && Number(cur.sample_size) === s.sample_size;
 
-// Re-score Install and Reliability for one version from its reports, append a
+const PARTS = ['install', 'reliability', 'tester_feedback'];
+
+// Re-score Install, Reliability and Tester feedback for one version from its reports, append a
 // signal row for each part whose result moved, then re-compose the overall score
 // (module-assess-score.js). Resolves { ok, written: [part…], score }.
 async function recordInstallSignals(versionId, { db } = {}) {
   const pool = db || require('../../src/bongos/pool').pool;
   const { latest, days } = await readReports(versionId, pool);
-  const next = { install: assessInstall(latest), reliability: assessReliability(days) };
+  const next = {
+    install: assessInstall(latest),
+    reliability: assessReliability(days),
+    tester_feedback: assessTesterFeedback(await readTesterReports(versionId, pool)),
+  };
 
   const { rows: current } = await pool.query(
     `SELECT DISTINCT ON (part) part, outcome, score, sample_size
-       FROM module_assessment_signals WHERE version_id = $1 AND part IN ('install', 'reliability')
+       FROM module_assessment_signals WHERE version_id = $1 AND part IN ('install', 'reliability', 'tester_feedback')
       ORDER BY part, measured_at DESC, id DESC`, [versionId]);
   const byPart = Object.fromEntries(current.map((r) => [r.part, r]));
 
   const written = [];
-  for (const part of ['install', 'reliability']) {
+  for (const part of PARTS) {
     const s = next[part];
     if (sameResult(byPart[part], s)) continue;
     await pool.query(
@@ -128,7 +213,7 @@ async function main(argv) {
     return 2;
   }
   const res = await recordInstallSignals(id);
-  for (const part of ['install', 'reliability']) {
+  for (const part of PARTS) {
     const s = res.signals[part];
     console.log(`${part}: ${s.outcome}${s.score != null ? ` ${s.score}/100` : ''} — ${s.reason}${res.written.includes(part) ? '' : ' (unchanged)'}`);
   }
@@ -140,4 +225,4 @@ if (require.main === module) {
   main(process.argv.slice(2)).then((code) => { process.exitCode = code; }, (e) => { console.error(e.stack || e.message); process.exitCode = 1; });
 }
 
-module.exports = { MIN_HOLDERS, assessInstall, assessReliability, recordInstallSignals };
+module.exports = { MIN_HOLDERS, PRIOR_TESTERS, assessInstall, assessReliability, assessTesterFeedback, recordInstallSignals };

package/src/module-api.js

@@ -75,7 +75,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // MAJOR (see allowBoxScope below): passes the request through untouched.
 function deprecatedNoopMiddleware(_req, _res, next) { next(); }
 
-const CORE_VERSION = '1.21.169'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.21.170'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('discord'); log.info('mounted');

package/tests/hall_approval_queue.mjs

@@ -311,6 +311,41 @@ await test('empty, closed with Escape, and focus goes back where it was', async
   assert.deepEqual(b.counts, [0]);
 });
 
+// task 1004765: a round SUBMITTED but never applied sat unseen for weeks. The
+// server lists it apart (not_applied), the panel shows it below the reviewable
+// page, marked, with how long it has waited, and with no verb; the door counts
+// only what can be reviewed.
+await test('submitted but not applied: listed apart, marked, how long, no verbs, not in the door count', async () => {
+  const NOW = Date.parse('2026-10-20T12:00:00Z');
+  const submitted = {
+    id: 60, status: 'ready', holder_id: null, artist_id: ME, artist_login: 'me', updated_at: '2026-09-29T08:00:00Z',
+    source_ref: pages.roundSourceRef('landing:projects', 2),
+    description: ['Page tweak round 2.', pages.composeBatchBlock({ page_id: 'landing:projects', reading_hash: 'h', submitted_at: '2026-09-29T08:00:00Z', lines: [{ key: 'L0002', section: 'list', before: 'Every project', after: 'All of them', placement: 'placed', file: 'x.html', line: 1, string_id: 'a' }] })].join('\n\n'),
+  };
+  const tasks = [...TASKS.filter((t) => t.id !== 42), submitted];
+  const data = pageStatus.composeApprovals({ inventory: INVENTORY, tasks, builderId: ME, crafts: ['artist'], now: NOW });
+  assert.equal(data.count, 1, 'the door counts reviewable rounds only');
+  assert.deepEqual(data.queue.map((q) => q.task_id), ['41']);
+  assert.deepEqual(data.not_applied.map((r) => [r.page_id, r.task_id, r.state_word, r.waited_days, r.line_count]),
+    [['landing:projects', '60', 'Submitted, waiting to be applied', 21, 1]]);
+
+  const b = bootPanel({ answers: { [APPROVALS]: { ok: true, ...data }, [vis(41)]: slotsFor(41) } });
+  await b.panel.open(); await settle(); await settle();
+  assert.equal(text(b.q('.aq-pending__h')), 'Submitted, not applied yet (1)');
+  const row = b.q('.aq-pending__row');
+  assert.match(text(row), /Projects/);
+  assert.match(text(row), /not applied yet/);
+  assert.match(text(row), /Submitted, waiting to be applied · waiting 21 days\. The words are waiting to be applied/);
+  assert.equal(row.querySelectorAll('button').length, 0, 'no approve or send-back on a page nobody applied');
+  assert.deepEqual(b.counts, [1]);
+
+  const empty = bootPanel({ answers: { [APPROVALS]: { ok: true, ...pageStatus.composeApprovals({ inventory: INVENTORY, tasks: [submitted], builderId: ME, crafts: ['artist'], now: NOW }) } } });
+  await empty.panel.open(); await settle();
+  assert.equal(text(empty.q('.aq-title')), 'Nothing waiting', 'nothing to review');
+  assert.ok(empty.q('.aq-pending__row'), 'but the submitted page is still shown');
+  assert.deepEqual(empty.counts, [0]);
+});
+
 // ── the writes: only the host's, and the host's are the studio's allowlist ──
 
 await test('the panel writes only through the writes it is handed; the studio hands it its own WRITE_ROUTES', () => {

package/tests/module_assess_installs.mjs

@@ -20,7 +20,7 @@ import { fileURLToPath } from 'node:url';
 
 const require = createRequire(import.meta.url);
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
-const { MIN_HOLDERS, assessInstall, assessReliability, recordInstallSignals } = require('../scripts/gds/module-assess-installs.js');
+const { MIN_HOLDERS, PRIOR_TESTERS, assessInstall, assessReliability, assessTesterFeedback, recordInstallSignals } = require('../scripts/gds/module-assess-installs.js');
 const reports = require('../src/bongos/module-usage-reports.js');
 const { ERROR_CODE_RE } = require('../src/bongos/module-usage-reports.js');
 const { cmdInstall } = require('../scripts/gds/module.js');
@@ -146,11 +146,13 @@ test('the switch: off writes an opt-out row, on deletes it', async () => {
 
 // ---- the re-score ----
 
-function scoringDb({ latest, days, current = [] }) {
+function scoringDb({ latest, days, current = [], testerInstalls = [], testerDays = [] }) {
   return fakeDb([
-    [/FROM module_install_reports r/, () => ({ rows: latest })],
-    [/FROM module_runtime_error_counts r/, () => ({ rows: days })],
-    [/part IN \('install', 'reliability'\)/, () => ({ rows: current })],
+    [/FROM module_install_reports r\s/, () => ({ rows: latest })],
+    [/FROM module_runtime_error_counts r\s/, () => ({ rows: days })],
+    [/FROM module_install_reports ir/, () => ({ rows: testerInstalls })],
+    [/FROM module_runtime_error_counts ec/, () => ({ rows: testerDays })],
+    [/part IN \('install', 'reliability', 'tester_feedback'\)/, () => ({ rows: current })],
     [/INSERT INTO module_assessment_signals/, () => ({ rows: [] })],
     [/SELECT DISTINCT ON \(part\) id, part, outcome, score, sample_size/, () => ({ rows: [] })],
     [/FROM module_assessment_scores/, () => ({ rows: [] })],
@@ -173,7 +175,10 @@ test('re-score: writes a signal row only for a part whose result moved, then re-
   const latest = [{ ok: true }, { ok: true }, { ok: false, error_code: 'place_failed' }];
   const db = scoringDb({
     latest, days: [],
-    current: [{ part: 'reliability', outcome: 'no_data', score: null, sample_size: 0 }],
+    current: [
+      { part: 'reliability', outcome: 'no_data', score: null, sample_size: 0 },
+      { part: 'tester_feedback', outcome: 'no_data', score: null, sample_size: 0 },
+    ],
   });
   const res = await recordInstallSignals(5, { db });
   assert.deepEqual(res.written, ['install'], 'reliability is unchanged, so no new row');
@@ -184,12 +189,73 @@ test('re-score: writes a signal row only for a part whose result moved, then re-
   const again = scoringDb({ latest, days: [], current: [
     { part: 'install', outcome: 'scored', score: 67, sample_size: 3 },
     { part: 'reliability', outcome: 'no_data', score: null, sample_size: 0 },
+    { part: 'tester_feedback', outcome: 'no_data', score: null, sample_size: 0 },
   ] });
   const res2 = await recordInstallSignals(5, { db: again });
   assert.deepEqual(res2.written, []);
   assert.ok(!again.calls.some((c) => /INSERT/.test(c.sql)), 'nothing moved, nothing written');
 });
 
+// ---- tester feedback (task 1003806, ADR 0344 D5) ----
+
+const testers = (n, { failed = 0, erroring = 0 } = {}) => {
+  const installs = Array.from({ length: n }, (_, i) => ({ holder_kind: 'instance', holder_ref: `p${i}`, ok: i >= failed, error_code: i < failed ? 'place_failed' : null }));
+  const days = Array.from({ length: erroring }, (_, i) => ({ holder_kind: 'instance', holder_ref: `p${n - 1 - i}`, error_count: 2 }));
+  return { installs, days };
+};
+
+test('Tester feedback: no tester reports is no_data, and fewer than MIN_HOLDERS is pending', () => {
+  assert.equal(assessTesterFeedback({}).outcome, 'no_data');
+  const s = assessTesterFeedback(testers(MIN_HOLDERS - 1));
+  assert.equal(s.outcome, 'pending');
+  assert.equal(s.score, null);
+});
+
+test('Tester feedback: a tester it went well for installed cleanly AND hit no runtime errors', () => {
+  const s = assessTesterFeedback(testers(20, { failed: 2, erroring: 3 }));
+  assert.equal(s.detail.went_well, 15);
+  assert.equal(s.detail.install_failed, 2);
+  assert.equal(s.detail.with_errors, 3);
+  assert.equal(s.detail.errors, 6);
+  assert.equal(s.score, Math.round((100 * (15 + PRIOR_TESTERS / 2)) / (20 + PRIOR_TESTERS)));
+});
+
+test('Tester feedback: a tester who only sent error counts still counts once', () => {
+  const s = assessTesterFeedback({ installs: [], days: [
+    { holder_kind: 'instance', holder_ref: 'a', error_count: 0 },
+    { holder_kind: 'instance', holder_ref: 'a', error_count: 0 },
+    { holder_kind: 'instance', holder_ref: 'b', error_count: 0 },
+    { holder_kind: 'builder', holder_ref: 'a', error_count: 1 },
+  ] });
+  assert.equal(s.sample_size, 3);
+  assert.equal(s.detail.went_well, 2);
+});
+
+test('Tester feedback: sample size weighs — a few friendly testers cannot outrank many real ones', () => {
+  const few = assessTesterFeedback(testers(3)).score;
+  const many = assessTesterFeedback(testers(200, { failed: 10 })).score;
+  assert.ok(many > few, `200 testers at 95% (${many}) must beat 3 at 100% (${few})`);
+  assert.ok(assessTesterFeedback(testers(200)).score >= 95, 'a large clean sample still scores high');
+});
+
+test('re-score: tester reports are read only inside the tester window, author excluded', async () => {
+  const t4 = testers(4);
+  const db = scoringDb({ latest: [], days: [], testerInstalls: t4.installs, testerDays: t4.days });
+  const res = await recordInstallSignals(5, { db });
+  assert.ok(res.written.includes('tester_feedback'));
+  assert.equal(res.signals.tester_feedback.score, Math.round((100 * (4 + PRIOR_TESTERS / 2)) / (4 + PRIOR_TESTERS)));
+  for (const [table, a, when] of [['module_install_reports', 'ir', /ir\.reported_at >= t\.start AND \(t\.stop IS NULL OR ir\.reported_at < t\.stop\)/],
+                                  ['module_runtime_error_counts', 'ec', /ec\.day >= t\.start::date AND \(t\.stop IS NULL OR ec\.day <= t\.stop::date\)/]]) {
+    const sql = db.calls.find((c) => c.sql.includes(`FROM ${table} ${a}`)).sql;
+    assert.match(sql, /c1\.channel = 'tester'/, `${table}: the window opens on the tester channel`);
+    assert.match(sql, /c2\.channel <> 'tester' AND c2\.set_at > s\.start/, `${table}: and closes when it leaves it`);
+    assert.match(sql, when, `${table}: only reports inside the window`);
+    assert.ok(sql.includes(`NOT (${a}.holder_kind = 'builder' AND ${a}.holder_ref = m.author_id::text)`), `${table}: excludes the author`);
+  }
+  const insert = db.calls.find((c) => /INSERT INTO module_assessment_signals/.test(c.sql) && c.params[1] === 'tester_feedback');
+  assert.deepEqual(insert.params.slice(0, 5), [5, 'tester_feedback', 'scored', res.signals.tester_feedback.score, 4]);
+});
+
 // ---- the migration: there is nowhere to put anything but counts ----
 
 test('core_273: three additive tables whose columns hold counts and codes only', () => {