@bongos/core 1.21.17 → 1.21.19

package/modules/public-landing/public/projects.html

@@ -590,7 +590,6 @@ summary{min-height:24px;padding:3px 0;}
 
 /* GitHub repo picker (task 1002099): hairline rows, the chosen one marked on
    the accent; the private badge in the label face */
-#ghConnect .btn{margin-top:4px;}
 .ghlist{margin-top:4px;max-height:220px;overflow-y:auto;border:0;border-top:1px solid var(--rule);border-radius:0;background:none;}
 .ghlist:empty{display:none;}
 .ghrow{display:flex;align-items:center;gap:8px;width:100%;min-height:40px;text-align:left;background:none;border:0;border-bottom:1px solid var(--rule-soft);padding:10px 0;font:inherit;font-size:14px;color:var(--ink);cursor:pointer;}
@@ -1637,11 +1636,11 @@ summary{min-height:24px;padding:3px 0;}
                       <!-- GitHub-integrated repo picker (adopt) + auto-create (fresh) — task 1002099.
                            Without repo access we fall back to the manual owner/repo inputs
                            (#manualHome), which stay authoritative. -->
-                      <div id="ghConnect" class="reassure">
-                        <p id="ghConnectMsg">&nbsp;</p>
-                        <button type="button" class="btn" id="ghConnectBtn">Allow repo access</button>
-                        <button type="button" class="linklike" id="ghManualToggle">or enter it manually</button>
-                      </div>
+                      <!-- no repo-access ask in the wizard (task 1004555): every hub sign-in asks for repo
+                           access (ADR 0364), and a missing token is fetched by one automatic GitHub
+                           round-trip. Only when that hop could not help does this line show, above
+                           the manual fields. -->
+                      <div id="ghNoAccess" class="hint" hidden>We couldn’t read your GitHub repositories just now, so enter the repo by hand below.</div>
                       <div id="ghBusy" class="hint" hidden>Reading your GitHub repositories…</div>
                       <div id="ghAdopt" class="wizField" hidden>
                         <span>Pick one of your repositories</span>
@@ -1667,8 +1666,6 @@ summary{min-height:24px;padding:3px 0;}
                         </label>
                         <!-- visibility stated BEFORE GitHub's own radio is the first place it appears (task 1002721) -->
                         <div class="hint" style="grid-column:1 / -1;">Creating the repo yourself on GitHub? Public or private is your choice there — both work here, and we never change it.</div>
-                        <!-- the way back from the manual fallback (task 1003683) -->
-                        <button type="button" class="linklike" id="ghManualBack" style="grid-column:1 / -1;" hidden>Use my GitHub repositories instead</button>
                       </div>
                       <div class="hint" id="h-home">&nbsp;</div>
                       <button type="button" class="btn small rowUse" data-row-use>Use this</button>
@@ -5276,44 +5273,39 @@ summary{min-height:24px;padding:3px 0;}
             403 → offer to grant repo access (a ?repos=1 re-sign-in);
             503 (server can't store the token) or any error → the manual inputs.
           #manualHome (the classic owner/repo fields) is the always-safe fallback. ── */
-    var repoAccess = null;   /* null=unknown/loading · true · 'need-connect' · 'unavailable' · 'manual' */
+    var repoAccess = null;   /* null=unknown/loading · true · 'unavailable' (manual fields) */
     var repoList = [];       /* the user's repos (from the probe) — feeds the picker + the fresh-name clash hint */
     var ghProbed = false;
 
-    function isManualHome() { return repoAccess === 'manual' || repoAccess === 'unavailable'; }
+    function isManualHome() { return repoAccess === 'unavailable'; }
     function validRepoName(s) { return /^[A-Za-z0-9._-]{1,100}$/.test(String(s || '')); }
     function myLogin() { return (me && me.github_login) || 'you'; }
 
-    function connectRepos(e) {
-      if (e) e.preventDefault();
-      /* Same-tab navigation so the sessionStorage draft round-trips back to the Home step. */
+    /* The one automatic GitHub round-trip (task 1004555). The token is missing (a session
+       from before ADR 0364, or a sign-out elsewhere), and GitHub answers a repo sign-in at
+       once for anyone who already approved it — so the page goes and fetches it instead of
+       asking. Same tab, so the sessionStorage draft comes back with its step (task 1004549).
+       ONCE per tab session: a hop that came back still without access cannot be helped by a
+       second, so the caller falls back to the manual fields instead of looping. A probe that
+       answers 200 clears the mark, so a later expiry may hop again. */
+    var HOP_KEY = 'cb-repo-hop';
+    function repoHopDone() { try { return sessionStorage.getItem(HOP_KEY) === '1'; } catch (e) { return true; } }
+    function hopForRepoAccess() {
+      if (repoHopDone()) return false;
+      try { sessionStorage.setItem(HOP_KEY, '1'); } catch (e) { return false; }
+      saveDraft();
       window.location.assign(API + '/auth/web/start?return=/projects%3Fview%3Dnew&repos=1');
+      return true;
     }
-    $('ghConnectBtn').addEventListener('click', connectRepos);
-    $('ghManualToggle').addEventListener('click', function () { repoAccess = 'manual'; syncHome(); $('f-owner').focus(); });
-    $('ghManualBack').addEventListener('click', function () { repoAccess = 'need-connect'; syncHome(); $('ghConnectBtn').focus(); });
 
     function syncHome() {
-      var need = repoAccess === 'need-connect';
       var ok = repoAccess === true;
       var adopt = state.mode === 'adopt';
       $('ghBusy').hidden = !!repoAccess;              /* busy only while still probing (null) */
-      $('ghConnect').classList.toggle('on', need);    /* .reassure box: shown via .on (not hidden — .reassure sets display:none) */
+      $('ghNoAccess').hidden = repoAccess !== 'unavailable';
       $('ghAdopt').hidden = !(ok && adopt);
       $('ghFresh').hidden = !(ok && !adopt);
       $('manualHome').hidden = !isManualHome();
-      /* only when the visitor CHOSE manual: with 'unavailable' the server cannot hold a
-         token, so a connect round-trip would land back here having changed nothing */
-      $('ghManualBack').hidden = repoAccess !== 'manual';
-      if (need) {
-        /* Informed consent (ADR 0155): this grants `repo`, which GitHub's own screen
-           words as full control of ALL your repositories — so say plainly why we ask
-           and what we do with it, rather than letting GitHub's wording be the first
-           the user hears of it. Private repos are the reason the scope is this wide. */
-        $('ghConnectMsg').textContent = adopt
-          ? 'You’re signed in — creating your project needs one more GitHub permission. GitHub will ask for repository access (it words this as access to all your repositories — that is the only scope it offers that can write to a private repo). We use it to read the repo you pick and push the setup commit to it. Nothing else is touched.'
-          : 'You’re signed in — creating your project needs one more GitHub permission. GitHub will ask for repository access (it words this as access to all your repositories — the narrower option cannot write to private repos). We use it to create your new empty repo and push the setup commit to it. Nothing else is touched.';
-      }
       if (ok && adopt) initAdoptPicker();
       if (ok && !adopt) syncFresh();
     }
@@ -5413,13 +5405,16 @@ summary{min-height:24px;padding:3px 0;}
 
     function ensureRepoAccess() {
       if (ghProbed && repoAccess !== null) return;   /* already known this session */
-      if (isManualHome()) return;                     /* user chose manual — don't nag */
       repoAccess = null; syncHome();                  /* show "reading your repos…" */
       fetch(API + '/github/repos', { credentials: 'same-origin' })
         .then(function (res) {
           ghProbed = true;
-          if (res.status === 200) return res.json().then(function (d) { repoList = (d && d.repos) || []; repoAccess = true; });
-          if (res.status === 403 || res.status === 401) { repoAccess = 'need-connect'; return; }
+          if (res.status === 200) {
+            try { sessionStorage.removeItem(HOP_KEY); } catch (e) {}
+            return res.json().then(function (d) { repoList = (d && d.repos) || []; repoAccess = true; });
+          }
+          /* no stored token: fetch it (one hop), else the manual fields */
+          if (res.status === 403 || res.status === 401) { if (!hopForRepoAccess()) repoAccess = 'unavailable'; return; }
           repoAccess = 'unavailable'; return;         /* 503 or anything else → manual fallback */
         })
         .catch(function () { ghProbed = true; repoAccess = 'unavailable'; })
@@ -5901,7 +5896,6 @@ summary{min-height:24px;padding:3px 0;}
         if (!works.length) return homeErr('Pick what already exists, then your main one.');
         if (works.indexOf(a.main_work) === -1) return homeErr('Mark which of them is your main one.');
       }
-      if (repoAccess === 'need-connect') return homeErr('Allow GitHub repo access to pick or create your repository — or choose “enter it manually”.');
       if (repoAccess === true && state.mode !== 'adopt') {
         /* Fresh with access: just the new repo NAME (owner is the signed-in account). */
         if (!validRepoName(state.repo)) return homeErr('Name the new repository (letters, numbers, and . _ -).');
@@ -6346,9 +6340,12 @@ summary{min-height:24px;padding:3px 0;}
       }).then(function (res) {
         return res.json().catch(function () { return {}; }).then(function (data) {
           if (res.status === 401 || res.status === 403) {
-            repoAccess = 'need-connect';
-            var e0 = new Error('reconnect'); e0.gotoHome = true;
-            e0.homeMsg = 'Your GitHub authorization expired — reconnect on the Home step to create the repo.';
+            /* the token went between the probe and Create: the hop fetches it again and
+               brings the founder back to this screen; if it cannot, the manual fields */
+            var hopped = hopForRepoAccess();
+            if (!hopped) { repoAccess = 'unavailable'; syncHome(); }
+            var e0 = new Error('reconnect'); e0.gotoHome = !hopped;
+            e0.homeMsg = 'We couldn’t create the repo on GitHub just now — enter one you made yourself below.';
             throw e0;
           }
           if (!res.ok) {

package/modules/ui-design/kit/fixtures/government-constitution-rules.json

@@ -0,0 +1,184 @@
+{
+  "_": "GET /government/constitution as the street reads it for a drafted amendment (task 1004530): the board block and the who-decides-what table, resolved by modules/government/decision-rules.js resolveAll (Release already amended to a sitting; every other building as today). Regenerate from the resolver, never by hand.",
+  "board": {
+    "membership": "rank:metic+",
+    "pass_rule": "majority",
+    "window_minutes": 4320,
+    "close_early_on_full_turnout": true
+  },
+  "history": [],
+  "headcount": 6,
+  "decision_rules": {
+    "areas": [
+      {
+        "area": "charter",
+        "name": "Charter",
+        "decided_by": "board",
+        "rule": "majority",
+        "rule_words": "majority vote",
+        "who": "the board (metic and above (metic, archon))",
+        "as_today": true,
+        "sitting": false,
+        "gate": null,
+        "today": "the board, under the constitution in force",
+        "acts": [],
+        "set_by_item_id": null,
+        "updated_at": null
+      },
+      {
+        "area": "rules",
+        "name": "Rules",
+        "decided_by": "gate",
+        "rule": "decide",
+        "rule_words": "decides alone",
+        "who": "whoever may change the project settings",
+        "as_today": true,
+        "sitting": false,
+        "gate": "project.settings.manage",
+        "today": "whoever may change the project settings",
+        "acts": [],
+        "set_by_item_id": null,
+        "updated_at": null
+      },
+      {
+        "area": "disputes",
+        "name": "Disputes",
+        "decided_by": "gate",
+        "rule": "decide",
+        "rule_words": "decides alone",
+        "who": "whoever may judge reports",
+        "as_today": true,
+        "sitting": false,
+        "gate": "security.report.adjudicate",
+        "today": "whoever may judge reports",
+        "acts": [],
+        "set_by_item_id": null,
+        "updated_at": null
+      },
+      {
+        "area": "people",
+        "name": "People",
+        "decided_by": "gate",
+        "rule": "decide",
+        "rule_words": "decides alone",
+        "who": "whoever may manage ranks",
+        "as_today": true,
+        "sitting": false,
+        "gate": "government.manage",
+        "today": "whoever may manage ranks",
+        "acts": [
+          "POST /government/assignments",
+          "DELETE /government/assignments/:builderId/:rankKey"
+        ],
+        "set_by_item_id": null,
+        "updated_at": null
+      },
+      {
+        "area": "planning",
+        "name": "Planning",
+        "decided_by": "gate",
+        "rule": "decide",
+        "rule_words": "decides alone",
+        "who": "whoever may create goals",
+        "as_today": true,
+        "sitting": false,
+        "gate": "goal.create",
+        "today": "whoever may create goals",
+        "acts": [],
+        "set_by_item_id": null,
+        "updated_at": null
+      },
+      {
+        "area": "automation",
+        "name": "Automation",
+        "decided_by": "gate",
+        "rule": "decide",
+        "rule_words": "decides alone",
+        "who": "whoever may switch unattended building on and off",
+        "as_today": true,
+        "sitting": false,
+        "gate": "autonomy.fence.manage",
+        "today": "whoever may switch unattended building on and off",
+        "acts": [],
+        "set_by_item_id": null,
+        "updated_at": null
+      },
+      {
+        "area": "review",
+        "name": "Review",
+        "decided_by": "gate",
+        "rule": "decide",
+        "rule_words": "decides alone",
+        "who": "whoever may mark work as meeting its checks",
+        "as_today": true,
+        "sitting": false,
+        "gate": "criterion.satisfy",
+        "today": "whoever may mark work as meeting its checks",
+        "acts": [],
+        "set_by_item_id": null,
+        "updated_at": null
+      },
+      {
+        "area": "release",
+        "name": "Release",
+        "decided_by": "rank:archon",
+        "rule": "unanimous",
+        "rule_words": "everyone agrees",
+        "who": "exactly archon",
+        "as_today": false,
+        "sitting": true,
+        "gate": "core.pin.move",
+        "today": "whoever may put a release live",
+        "acts": [],
+        "set_by_item_id": "3",
+        "updated_at": null
+      },
+      {
+        "area": "treasury",
+        "name": "Treasury",
+        "decided_by": "gate",
+        "rule": "decide",
+        "rule_words": "decides alone",
+        "who": "whoever may set spending limits",
+        "as_today": true,
+        "sitting": false,
+        "gate": "builder.budget.set",
+        "today": "whoever may set spending limits",
+        "acts": [],
+        "set_by_item_id": null,
+        "updated_at": null
+      }
+    ],
+    "rules": [
+      {
+        "key": "decide",
+        "words": "decides alone"
+      },
+      {
+        "key": "first",
+        "words": "first yes wins"
+      },
+      {
+        "key": "consent",
+        "words": "passes unless someone objects"
+      },
+      {
+        "key": "majority",
+        "words": "majority vote"
+      },
+      {
+        "key": "unanimous",
+        "words": "everyone agrees"
+      },
+      {
+        "key": "signoff",
+        "words": "signed off by someone who did not build it"
+      },
+      {
+        "key": "vacant",
+        "words": "no one holds this yet"
+      }
+    ],
+    "changed_by": "a passed amendment only — POST /government/board/decision-rules files one"
+  }
+}

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.17",
+  "version": "1.21.19",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.21.17",
+      "version": "1.21.19",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.17",
+  "version": "1.21.19",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -8858,5 +8858,17 @@
       "id": "1004554",
       "text": "Bongos no longer plays any sounds: no ship bell, credits chime, fanfare or end-of-turn chime. Settings → Sound now just says they're off for now."
     }
+  ],
+  "1.21.18": [
+    {
+      "id": "1004555",
+      "text": "Project setup no longer shows an \"Allow repo access\" button — if the site needs GitHub access it fetches it in a quick reload and brings you straight back to where you were."
+    }
+  ],
+  "1.21.19": [
+    {
+      "id": "1004530",
+      "text": "Inside any building on the street, \"change how this works\" now drafts a real amendment. It shows how the building decides today crossed out, and the proposed change written in. You pick who decides and how from the project's o"
+    }
   ]
 }

package/src/module-api.js

@@ -75,7 +75,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // MAJOR (see allowBoxScope below): passes the request through untouched.
 function deprecatedNoopMiddleware(_req, _res, next) { next(); }
 
-const CORE_VERSION = '1.21.17'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.21.19'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('discord'); log.info('mounted');

package/tests/hall_street.mjs

@@ -377,7 +377,7 @@ test('the page holds the prototype\'s header, the street, the readings and the c
   for (const id of ['hudNeeds', 'hudMoving', 'hudShare', 'streetMode', 'streetSigns', 'streetPins', 'streetDoors', 'streetCard']) assert.match(html, new RegExp(`id="${id}"`), id);
   assert.doesNotMatch(html, /app-sidebar|shell\.js/, 'no hall chrome, as the city');
   const scripts = [...html.matchAll(/<script src="\/builders\/([a-z-]+)\.js/g)].map((m) => m[1]);
-  assert.deepEqual(scripts, ['city-draw', 'street-draw', 'street-card', 'street-inside', 'street'], 'the shared kit loads first, then the card (task 1004528) and the interiors (task 1004526)');
+  assert.deepEqual(scripts, ['city-draw', 'street-draw', 'street-card', 'street-inside', 'street-amend', 'street'], 'the shared kit loads first, then the card (task 1004528), the interiors (task 1004526) and the drafted amendment (task 1004530)');
   assert.equal(City.STREET_HREF, '/builders/street', 'the city\'s door is this page');
 });