@bongos/core 1.21.175 → 1.21.176

package/modules/status-ui/public/status.js

@@ -19,7 +19,6 @@ function curLabel(caps) {
 }
 
 const els = {
-  uptime: document.getElementById('uptime'),
   versions: document.getElementById('versions'),
   costTotal: document.getElementById('cost-total'),
   valueTotal: document.getElementById('value-total'),
@@ -94,7 +93,6 @@ async function fetchJson(path) {
 
 const SECTIONS = [
   { id: 'headline-tablet', label: 'Pulse'      },
-  { id: 'uptime-tablet',   label: 'Watch'      },
   { id: 'leader-tablet',   label: 'Architects' },
   { id: 'foundry-tablet',  label: 'Foundry'    },
   { id: 'versions-tablet', label: 'Works'      },
@@ -160,52 +158,21 @@ function setupNavObserver() {
 
 // ---------- headline strip (#409) ----------
 //
-// Above-the-fold answer to "is it alive?", "what shipped lately?", "where's
-// the money?", "is quality holding?" — fed by four public endpoints in
-// parallel. Standing aggregates across all services: any down → "Fallen",
-// any degraded → "Faltering", all up → "Standing". The treasury card shows
-// percent-of-purse with a thin progress bar underneath; bar turns amber at
-// 75% and terracotta at 100%.
-
-function aggregateStanding(services) {
-  if (!Array.isArray(services) || services.length === 0) {
-    return { label: '—', cls: '' };
-  }
-  let anyDown = false, anyDegraded = false, anyUnknown = false;
-  for (const s of services) {
-    const st = s.current_status;
-    if (st === 'down') anyDown = true;
-    else if (st === 'degraded') anyDegraded = true;
-    else if (st === 'unknown') anyUnknown = true;
-  }
-  if (anyDown) return { label: 'Fallen', cls: 'headline-stat--standing-down' };
-  if (anyDegraded) return { label: 'Faltering', cls: 'headline-stat--standing-warn' };
-  if (anyUnknown) return { label: '—', cls: '' };
-  return { label: 'Standing', cls: 'headline-stat--standing-up' };
-}
+// Above-the-fold answer to "what shipped lately?", "where's the money?" and
+// "is quality holding?" — fed by public endpoints in parallel. The treasury
+// card shows percent-of-purse with a thin progress bar underneath; bar turns
+// amber at 75% and terracotta at 100%.
 
 async function loadHeadline() {
-  // 3 fetches in parallel — uptime + cost + grades. The 4th headline card
+  // 2 fetches in parallel — cost + grades. The 3rd headline card
   // (shipped count) is computed from loadShipped's data via
   // updateHeadlineShippedFromItems() to avoid a duplicate /recent-shipped
   // round trip every 60s. See the comment in loadShipped() for the math.
-  const [uptimeR, costR, gradeR] = await Promise.all([
-    fetchJson('/api/bongos/public/uptime').catch(() => null),
+  const [costR, gradeR] = await Promise.all([
     fetchJson('/api/bongos/public/cost-summary').catch(() => null),
     fetchJson('/api/bongos/public/grades?days=7').catch(() => null),
   ]);
 
-  // Standing card
-  const standingNum = document.getElementById('headline-standing-num');
-  const standingCard = document.getElementById('headline-standing');
-  if (standingNum && standingCard) {
-    const { label, cls } = aggregateStanding(uptimeR?.services || []);
-    standingNum.textContent = label;
-    // Reset state classes, apply new
-    standingCard.classList.remove('headline-stat--standing-up', 'headline-stat--standing-down', 'headline-stat--standing-warn');
-    if (cls) standingCard.classList.add(cls);
-  }
-
   // Treasury
   const treasuryNum = document.getElementById('headline-treasury-num');
   const treasuryLabel = document.getElementById('headline-treasury-label');
@@ -357,140 +324,6 @@ async function loadWorldSnapshots() {
   }
 }
 
-// ---------- uptime ----------
-
-const SERVICE_LABELS = {
-  game_server: 'The World',
-  api:         'The Ledger',
-  database:    'The Vault',
-};
-
-async function loadUptime() {
-  let data;
-  try {
-    data = await fetchJson('/api/bongos/public/uptime');
-  } catch (_) {
-    // Endpoint not yet deployed (migration not applied) — show graceful placeholder
-    clear(els.uptime);
-    const p = document.createElement('p');
-    p.className = 'empty';
-    p.textContent = 'The sentinels have not yet taken their posts.';
-    els.uptime.appendChild(p);
-    return;
-  }
-
-  const services = data.services || [];
-  clear(els.uptime);
-
-  for (const svc of services) {
-    const label = SERVICE_LABELS[svc.service] || svc.service;
-    const isUp = svc.current_status === 'up';
-    const isDegraded = svc.current_status === 'degraded';
-    const isUnknown = svc.current_status === 'unknown';
-
-    const row = document.createElement('div');
-    row.className = 'uptime-row';
-
-    // Top line: label + status badge + uptime %
-    const top = document.createElement('div');
-    top.className = 'uptime-row__top';
-
-    const nameWrap = document.createElement('div');
-    nameWrap.className = 'uptime-row__name-wrap';
-
-    const dot = document.createElement('span');
-    dot.className = `uptime-dot uptime-dot--${isUnknown ? 'unknown' : isUp ? 'up' : isDegraded ? 'degraded' : 'down'}`;
-    dot.setAttribute('aria-hidden', 'true');
-
-    const name = document.createElement('span');
-    name.className = 'uptime-row__name';
-    name.textContent = label;
-
-    const badge = document.createElement('span');
-    badge.className = `uptime-badge uptime-badge--${isUnknown ? 'unknown' : isUp ? 'up' : isDegraded ? 'degraded' : 'down'}`;
-    badge.textContent = isUnknown ? 'awaiting watch' : isUp ? 'standing' : isDegraded ? 'strained' : 'fallen';
-
-    nameWrap.appendChild(dot);
-    nameWrap.appendChild(name);
-    nameWrap.appendChild(badge);
-
-    const pctEl = document.createElement('span');
-    pctEl.className = 'uptime-row__pct';
-    pctEl.textContent = svc.uptime_pct_90d != null
-      ? `${svc.uptime_pct_90d}% over 90 days`
-      : 'no history yet';
-
-    top.appendChild(nameWrap);
-    top.appendChild(pctEl);
-    row.appendChild(top);
-
-    // History bars — last 90 days as hourly buckets collapsed into ~90 day-wide bars
-    const history = svc.history || [];
-    if (history.length > 0) {
-      // Collapse hourly rows into daily buckets for display (up to 90 bars)
-      const byDay = new Map();
-      for (const h of history) {
-        const day = new Date(h.hour).toISOString().slice(0, 10);
-        if (!byDay.has(day)) byDay.set(day, { up: 0, total: 0 });
-        byDay.get(day).up += h.up;
-        byDay.get(day).total += h.total;
-      }
-
-      // Fill in any missing days in the last 90 so gaps show as unknown
-      const today = new Date();
-      const days = [];
-      for (let i = 89; i >= 0; i--) {
-        const d = new Date(today);
-        d.setDate(d.getDate() - i);
-        days.push(d.toISOString().slice(0, 10));
-      }
-
-      const bars = document.createElement('div');
-      bars.className = 'uptime-bars';
-      bars.setAttribute('aria-label', `90-day uptime history for ${label}`);
-
-      for (const day of days) {
-        const bucket = byDay.get(day);
-        const bar = document.createElement('span');
-        bar.className = 'uptime-bar';
-        if (!bucket) {
-          bar.classList.add('uptime-bar--unknown');
-          bar.title = `${day}: no data`;
-        } else {
-          const ratio = bucket.total > 0 ? bucket.up / bucket.total : 0;
-          if (ratio >= 0.99) {
-            bar.classList.add('uptime-bar--up');
-          } else if (ratio >= 0.5) {
-            bar.classList.add('uptime-bar--degraded');
-          } else {
-            bar.classList.add('uptime-bar--down');
-          }
-          bar.title = `${day}: ${Math.round(ratio * 100)}% (${bucket.up}/${bucket.total} checks)`;
-        }
-        bars.appendChild(bar);
-      }
-      row.appendChild(bars);
-
-      const barLabels = document.createElement('div');
-      barLabels.className = 'uptime-bars__labels';
-      const lbl90 = document.createElement('span');
-      lbl90.textContent = '90 days ago';
-      const lblNow = document.createElement('span');
-      lblNow.textContent = 'today';
-      barLabels.appendChild(lbl90);
-      barLabels.appendChild(lblNow);
-      row.appendChild(barLabels);
-    } else {
-      const noHist = document.createElement('p');
-      noHist.className = 'uptime-row__no-history';
-      noHist.textContent = 'History accumulating — returns after the first day of watch.';
-      row.appendChild(noHist);
-    }
-
-    els.uptime.appendChild(row);
-  }
-}
-
 // ---------- versions (active endeavours — a thin mirror of the work board) ----------
 
 async function loadVersions() {
@@ -1281,7 +1114,6 @@ async function refresh() {
   const tasks = [
     loadHeadline().catch((e) => console.error('headline', e)),
     loadWorldSnapshots().catch((e) => console.error('snapshots', e)),
-    loadUptime().catch((e) => console.error('uptime', e)),
     loadVersions().catch((e) => console.error('versions', e)),
     loadCosts().catch((e) => console.error('costs', e)),
     loadShipped().catch((e) => console.error('shipped', e)),

package/modules/status-ui/public/style.css

@@ -825,120 +825,6 @@ main {
   margin: 6px 0 14px !important;
 }
 
-/* ---------- Uptime / The Watch ---------- */
-
-.uptime-list {
-  display: flex;
-  flex-direction: column;
-  gap: 20px;
-}
-
-.uptime-row {
-  display: flex;
-  flex-direction: column;
-  gap: 6px;
-}
-
-.uptime-row__top {
-  display: flex;
-  align-items: center;
-  justify-content: space-between;
-  gap: 12px;
-  flex-wrap: wrap;
-}
-
-.uptime-row__name-wrap {
-  display: flex;
-  align-items: center;
-  gap: 8px;
-}
-
-.uptime-dot {
-  display: inline-block;
-  width: 9px;
-  height: 9px;
-  border-radius: 50%;
-  flex-shrink: 0;
-}
-.uptime-dot--up       { background: #3a7d52; box-shadow: 0 0 4px rgba(58,125,82,0.5); }
-.uptime-dot--degraded { background: #a86a2a; box-shadow: 0 0 4px rgba(168,106,42,0.5); }
-.uptime-dot--down     { background: #a83030; box-shadow: 0 0 4px rgba(168,48,48,0.5); }
-.uptime-dot--unknown  { background: var(--ink-faint); }
-
-.uptime-row__name {
-  font-family: var(--font-display);
-  font-size: 0.9rem;
-  font-weight: 500;
-  letter-spacing: 0.06em;
-  color: var(--ink);
-}
-
-.uptime-badge {
-  font-family: var(--font-body);
-  font-size: 0.78rem;
-  font-style: italic;
-  padding: 1px 7px;
-  border-radius: 2px;
-  letter-spacing: 0.02em;
-}
-.uptime-badge--up       { background: rgba(58,125,82,0.12);  color: #2a5c3c; border: 1px solid rgba(58,125,82,0.28); }
-.uptime-badge--degraded { background: rgba(168,106,42,0.12); color: #7a4a10; border: 1px solid rgba(168,106,42,0.28); }
-.uptime-badge--down     { background: rgba(168,48,48,0.12);  color: #8a2020; border: 1px solid rgba(168,48,48,0.28); }
-.uptime-badge--unknown  { background: var(--bg-deep); color: var(--ink-faint); border: 1px solid var(--rule-soft); }
-
-.uptime-row__pct {
-  font-family: var(--font-body);
-  font-size: 0.82rem;
-  color: var(--ink-soft);
-  white-space: nowrap;
-}
-
-/* 90-bar history strip */
-.uptime-bars {
-  display: flex;
-  gap: 2px;
-  align-items: stretch;
-  height: 28px;
-  margin-top: 2px;
-}
-
-.uptime-bar {
-  flex: 1;
-  min-width: 0;
-  border-radius: 2px;
-  transition: opacity 0.1s;
-  cursor: default;
-}
-.uptime-bar:hover { opacity: 0.7; }
-.uptime-bar--up       { background: #3a7d52; }
-.uptime-bar--degraded { background: #a86a2a; }
-.uptime-bar--down     { background: #a83030; }
-.uptime-bar--unknown  { background: var(--bg-deep); }
-
-.uptime-bars__labels {
-  display: flex;
-  justify-content: space-between;
-  font-family: var(--font-body);
-  font-size: 0.72rem;
-  font-style: italic;
-  color: var(--ink-faint);
-  margin-top: 2px;
-}
-
-.uptime-row__no-history {
-  font-family: var(--font-body);
-  font-size: 0.85rem;
-  font-style: italic;
-  color: var(--ink-faint);
-  margin: 4px 0 0;
-}
-
-/* Divider between service rows */
-.uptime-row + .uptime-row {
-  padding-top: 18px;
-  border-top: 1px solid rgba(139,111,44,0.18);
-}
-
 /* ---------- Mobile ---------- */
 
 @media (max-width: 540px) {
@@ -1186,10 +1072,9 @@ main {
 }
 
 /* --- Headline strip (#409) -------------------------------------------------
-   Above-the-fold answer to "is the project alive?" plus three other common
-   visitor questions. Uses the existing .stat block from the cost summary
-   for visual rhythm — no new card vocabulary invented. Status-coloured
-   number for the standing card so it reads at a glance. */
+   Above-the-fold answer to three common visitor questions (shipped, spend,
+   quality). Uses the existing .stat block from the cost summary for visual
+   rhythm — no new card vocabulary invented. */
 
 .tablet--headline {
   padding: 22px 32px 24px;
@@ -1207,7 +1092,7 @@ main {
 }
 .headline-grid {
   display: grid;
-  grid-template-columns: repeat(4, 1fr);
+  grid-template-columns: repeat(3, 1fr);
   gap: 14px;
 }
 .headline-stat {
@@ -1222,9 +1107,6 @@ main {
   font-size: 0.84rem;
   margin-top: 6px;
 }
-.headline-stat--standing-up    .stat__num { color: var(--accent-deep); }
-.headline-stat--standing-down  .stat__num { color: var(--terracotta); }
-.headline-stat--standing-warn  .stat__num { color: #a86a2a; }
 .headline-bar {
   margin: 10px auto 0;
   width: 80%;
@@ -1241,9 +1123,6 @@ main {
 .headline-bar__fill--warn { background: #a86a2a; }
 .headline-bar__fill--over { background: var(--terracotta); }
 
-@media (max-width: 768px) {
-  .headline-grid { grid-template-columns: repeat(2, 1fr); }
-}
 @media (max-width: 480px) {
   .headline-grid { grid-template-columns: 1fr; }
 }
@@ -1278,14 +1157,6 @@ main {
 }
 .world-history__summary:hover { color: var(--ink); }
 
-/* --- Uptime bar height bump (#409) ----------------------------------------
-   Bars were 28px tall — usable but tappable-target-borderline on phones.
-   ~44px on mobile (+ a couple px tap zone via padding) brings each daily
-   bucket within touch-target guidelines while reading as the same chart. */
-@media (max-width: 640px) {
-  .uptime-bars { height: 44px; }
-}
-
 /* ---- The Foundry — ecosystem dev curve (#291, C5) ---------------------- */
 .foundry__charts {
   display: grid;

package/modules/ui-design/docs/design-contract.md

@@ -2,7 +2,7 @@
 
 **Status:** Accepted · authored by [task 1377](https://example.com/builders#/task/1377) · governed by [ADR 0081](../../../docs/adr/0081-tool-agnostic-design-layer.md) · lives in the `ui-design` module since [task 1003324](https://cloudbongos.com/builders#/task/1003324) ([ADR 0197](../../../docs/adr/0197-the-ui-design-module.md)) — the token files it names stay in `config/` as the host boundary
 
-The repo is the single source of truth for design. Every design tool is a swappable adapter that reads from and writes to this contract — it does not own the source. This file is the contract every adapter must conform to. The minimal validator (`modules/ui-design/scripts/validate-design.js`; `node scripts/gds/validate-design.js` is a thin shim over it) enforces the machine-checkable parts.
+The repo is the single source of truth for design. Every design tool is a swappable adapter that reads from and writes to this contract — it does not own the source. This file is the contract every adapter must conform to. The minimal validator (`modules/ui-design/scripts/validate-design.js`; `node scripts/bongos/validate-design.js` is a thin shim over it) enforces the machine-checkable parts.
 
 ---
 
@@ -280,7 +280,7 @@ The `--dt-` prefix is reserved for this design system. Adapters must not emit CS
 
 ## 6. Validator
 
-`modules/ui-design/scripts/validate-design.js` is the minimal validator for this contract (`node scripts/gds/validate-design.js` is a thin shim over it). It checks:
+`modules/ui-design/scripts/validate-design.js` is the minimal validator for this contract (`node scripts/bongos/validate-design.js` is a thin shim over it). It checks:
 
 1. `config/design-tokens.neutral.json` exists and validates against the schema.
 2. If `config/design-tokens.json` exists, it validates against the schema.
@@ -300,7 +300,7 @@ node modules/ui-design/scripts/validate-design.js --json    # machine-readable r
 node modules/ui-design/scripts/validate-design.js --strict  # fail on warnings too
 ```
 
-The validator is wired into `scripts/gds/fitness.js` (`checkDesignContract` in `fitness-checks-identity.js`) and hard-fails while any adapter is present.
+The validator is wired into `scripts/bongos/fitness.js` (`checkDesignContract` in `fitness-checks-identity.js`) and hard-fails while any adapter is present.
 
 ---
 

package/modules/ui-design/kit/README.md

@@ -12,7 +12,7 @@ node modules/ui-design/kit/contrast.js --pack [look] | --url <url> [--glyphs sel
 
 A **look** is a branding pack from the module's style library (`modules/ui-design/styles/<name>/`, task 1003323): `STYLE=<name>` lays it over the instance's own pack through `GDS_BRANDING_FILE`, so any surface renders under any look with no page edit.
 
-Two of the floors are about fit ([task 1004203](https://cloudbongos.com/builders#/task/1004203), [ADR 0329](../../../docs/adr/0329-the-rendered-fit-check-is-a-kit-floor-and-an-advisory-ship-check-row.md)): `text-fit` (text past its box, SVG text past its card) and `sibling-overlap` (text-bearing siblings on top of each other). `scripts/gds/render-check.js` runs just those two over the pages a branch changed, and `/ship-check` shows them as an advisory row.
+Two of the floors are about fit ([task 1004203](https://cloudbongos.com/builders#/task/1004203), [ADR 0329](../../../docs/adr/0329-the-rendered-fit-check-is-a-kit-floor-and-an-advisory-ship-check-row.md)): `text-fit` (text past its box, SVG text past its card) and `sibling-overlap` (text-bearing siblings on top of each other). `scripts/bongos/render-check.js` runs just those two over the pages a branch changed, and `/ship-check` shows them as an advisory row.
 
 A surface describes itself in two JSON files beside it — `<page>.states.json` and `<page>.probes.json` — in the vocabularies `lib.js` defines and validates. The full loop, the file shapes and the failure table: [`docs/recipes/ui-look-before-you-ship.md`](../../../docs/recipes/ui-look-before-you-ship.md). Exit codes everywhere: 0 clean · 1 problems · 2 a broken file or usage · 3 no browser.
 

package/modules/ui-design/kit/serve.js

@@ -3,7 +3,7 @@
 // serve.js — the look-before-you-ship stub (task 1003320, ADR 0197): serves ANY
 // surface directory of the checkout through the instance's REAL serving
 // transforms — the apex-only strip, the brand-token stamp and the pack's theme
-// injection, run by scripts/gds/ui-kit-transform.js (a core-side command: a
+// injection, run by scripts/bongos/ui-kit-transform.js (a core-side command: a
 // module may not require core and the doorway may not import the serving domain,
 // so the real code path is reached as a child process) — plus the content-hash
 // ?v= stamp, with the instance's own branding pack. Answers the public feeds from
@@ -48,7 +48,7 @@ const STYLE = process.env.STYLE || '';
 const ALIAS = JSON.parse(process.env.FIXTURE_ALIAS || '{}');
 const FIXTURES = path.join(__dirname, 'fixtures');
 const DOCS = path.join(ROOT, 'docs');
-const TRANSFORM = path.join(ROOT, 'scripts', 'gds', 'ui-kit-transform.js');
+const TRANSFORM = path.join(ROOT, 'scripts', 'bongos', 'ui-kit-transform.js');
 
 const DIR = lib.resolveSurfaceDir(SURFACE, ROOT);
 if (!DIR) { process.stderr.write(`serve: SURFACE "${SURFACE}" is neither a directory of ${ROOT} nor a module key with a webSurfaces dir\n`); process.exit(lib.EXIT.USAGE); }
@@ -807,11 +807,20 @@ const server = http.createServer((req, res) => {
     if (rest === '/instance') { const b = pages.size ? pages.values().next().value.brand : {}; return json(res, 200, { brand: { productName: (b && b.productName) || '', project: {} }, modules: {} }); }
     return json(res, 404, { error: { code: 'not_found', message: p } });
   }
-  // the generated client every internal page loads (the real bundle when present)
+  // the generated client every internal page loads: the bundle on disk when present, else
+  // (a fresh checkout — the client is gitignored, task 1004866) generated from the routes
   if (/\/lib\/bongos-client\.js$/.test(p)) {
     const bundle = fileUnder(ROOT, 'clients/bongos-client/bongos-client.global.js');
+    let js = bundle ? fs.readFileSync(bundle, 'utf8') : '';
+    if (!js) {
+      try {
+        const docs = require(path.join(ROOT, 'scripts/bongos/gen-api-docs.js'));
+        const client = require(path.join(ROOT, 'scripts/bongos/gen-api-client.js'));
+        js = client.build(docs.build().spec).files['bongos-client.global.js'];
+      } catch (e) { js = `/* client generation failed: ${String(e && e.message).replace(/\*\//g, '')} */`; }
+    }
     res.writeHead(200, { 'content-type': MIME['.js'], 'cache-control': 'no-store' });
-    return res.end(bundle ? fs.readFileSync(bundle, 'utf8') : '/* stub: no client bundle in this checkout */');
+    return res.end(js);
   }
   // an enabled module's browser assets, as serve-internal.js serves them on every host
   // (task 1004499: the public site loads the hall's feedback panel from here)

package/modules/ui-design/scripts/design-sync.js

@@ -4,7 +4,7 @@
 // Usage:
 //   node modules/ui-design/scripts/design-sync.js                 — build bundle, print manifest JSON
 //   node modules/ui-design/scripts/design-sync.js --surface <id>  — limit to one surface
-//   (node scripts/gds/design-sync.js is a thin shim over this file — the form the skills use)
+//   (node scripts/bongos/design-sync.js is a thin shim over this file — the form the skills use)
 //
 // Output (stdout, JSON):
 //   { bundlePath, files, surfaceIds, summary }

package/modules/ui-design/scripts/figma-design-sync.js

@@ -4,7 +4,7 @@
 // Usage:
 //   node modules/ui-design/scripts/figma-design-sync.js                 — build plan, print manifest JSON
 //   node modules/ui-design/scripts/figma-design-sync.js --surface <id>  — limit to one surface
-//   (node scripts/gds/figma-design-sync.js is a thin shim over this file — the form the skills use)
+//   (node scripts/bongos/figma-design-sync.js is a thin shim over this file — the form the skills use)
 //
 // Output (stdout, JSON):
 //   { planPath, files, surfaceIds, summary }

package/modules/ui-design/scripts/validate-design.js

@@ -2,7 +2,7 @@
 'use strict';
 // validate-design.js — minimal validator for the neutral design contract (task 1377).
 // See modules/ui-design/docs/design-contract.md §6 for the full spec. Lives in the
-// ui-design module since task 1003324 (ADR 0197); node scripts/gds/validate-design.js
+// ui-design module since task 1003324 (ADR 0197); node scripts/bongos/validate-design.js
 // is a thin shim over this file.
 //
 // Usage:

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.175",
+  "version": "1.21.176",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.21.175",
+      "version": "1.21.176",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",
@@ -48,9 +48,9 @@
       }
     },
     "node_modules/body-parser": {
-      "version": "1.20.6",
-      "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.6.tgz",
-      "integrity": "sha512-p5tAzS57i5MV9fZFDj9LeIiTZEufbSe2eDozP+ElheSUq1m74CRq1jI4mYNDdVs9vQztXFLuk/Gd6BWTdwRJ5g==",
+      "version": "1.20.9",
+      "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.9.tgz",
+      "integrity": "sha512-FISIQxV5u91Y9gvuFq3q/tA/qTqLJn3AhRcEvyozyhJTh5OBFFtv827AdHU7Rbyct4r+Ba1/99oFa1Y3yuFsdw==",
       "license": "MIT",
       "dependencies": {
         "bytes": "~3.1.2",
@@ -61,7 +61,7 @@
         "http-errors": "~2.0.1",
         "iconv-lite": "~0.4.24",
         "on-finished": "~2.4.1",
-        "qs": "~6.15.1",
+        "qs": "~6.16.0",
         "raw-body": "~2.5.3",
         "type-is": "~1.6.18",
         "unpipe": "~1.0.0"
@@ -71,6 +71,22 @@
         "npm": "1.2.8000 || >= 1.4.16"
       }
     },
+    "node_modules/body-parser/node_modules/qs": {
+      "version": "6.16.1",
+      "resolved": "https://registry.npmjs.org/qs/-/qs-6.16.1.tgz",
+      "integrity": "sha512-5Px6J7rfHBAGUhNQ3es4YzcOdBBw0SDcVtThJml4RdnKw4tKs2epA0kPZ+K8X+WiHktT93RHVcQ/3ym5aTCgtg==",
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "es-define-property": "^1.0.1",
+        "side-channel": "^1.1.1"
+      },
+      "engines": {
+        "node": ">=0.6"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
     "node_modules/bytes": {
       "version": "3.1.2",
       "resolved": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz",
@@ -929,14 +945,14 @@
       "license": "ISC"
     },
     "node_modules/side-channel": {
-      "version": "1.1.0",
-      "resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.0.tgz",
-      "integrity": "sha512-ZX99e6tRweoUXqR+VBrslhda51Nh5MTQwou5tnUDgbtyM0dBgmhEDtWGP/xbKn6hqfPRHujUNwz5fy/wbbhnpw==",
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.1.tgz",
+      "integrity": "sha512-6x6dK6zJdpTzF4sQeNYxwtvBzf6Eg4GtlesS94HOvTudUeyK2WXAaIfmDgsyslYrRBeFIlsi54AYsFGUuhmvrQ==",
       "license": "MIT",
       "dependencies": {
         "es-errors": "^1.3.0",
-        "object-inspect": "^1.13.3",
-        "side-channel-list": "^1.0.0",
+        "object-inspect": "^1.13.4",
+        "side-channel-list": "^1.0.1",
         "side-channel-map": "^1.0.1",
         "side-channel-weakmap": "^1.0.2"
       },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.175",
+  "version": "1.21.176",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",
@@ -12,7 +12,6 @@
     "./serve-internal": "./src/bongos/serve-internal.js",
     "./module-api": "./src/module-api.js",
     "./bongos/api-path-404": "./src/bongos/api-path-404.js",
-    "./bongos/uptime-poller": "./src/bongos/uptime-poller.js",
     "./module-loader/loader": "./src/module-loader/loader.js",
     "./modules": "./src/modules.js",
     "./module-seams": "./src/module-seams.js"
@@ -29,6 +28,6 @@
     "pino": "^9.14.0"
   },
   "overrides": {
-    "undici": "^6.28.1"
+    "undici": "^6.29.1"
   }
 }