@bongos/core 1.21.175 → 1.21.176

package/tests/cutover_codemod.mjs

@@ -12,7 +12,7 @@ import { createRequire } from 'node:module';
 import path from 'node:path';
 
 const require = createRequire(import.meta.url);
-const cm = require('../scripts/gds/cutover-codemod.js');
+const cm = require('../scripts/bongos/cutover-codemod.js');
 const { rewriteCoreRequires, isHostFile, looksLikeConsumer, planCodemod, CORE_INTERNAL_MAP } = cm;
 
 let passed = 0;
@@ -83,8 +83,6 @@ t('rewrites every mapped entry in the table', () => {
 t('F3: rewrites server.js core internals from ./src/* form', () => {
   assert.equal(rewriteCoreRequires(`const p = require('./src/bongos/api-path-404');`).text,
     `const p = require('@bongos/core/bongos/api-path-404');`);
-  assert.equal(rewriteCoreRequires(`const u = require('./src/bongos/uptime-poller');`).text,
-    `const u = require('@bongos/core/bongos/uptime-poller');`);
   assert.equal(rewriteCoreRequires(`const l = require('./src/module-loader/loader');`).text,
     `const l = require('@bongos/core/module-loader/loader');`);
   assert.equal(rewriteCoreRequires(`const m = require('./src/modules');`).text,
@@ -184,7 +182,7 @@ t('planCodemod rewrites host files, skips core files, reports unmapped', () => {
 // ---- invariant: every mapped target is an actual @bongos/core export ---------
 
 t('every CORE_INTERNAL_MAP target is exported by the core package (a rewrite never outruns an export)', () => {
-  const { buildPackageJson } = require('../scripts/gds/package-core.js');
+  const { buildPackageJson } = require('../scripts/bongos/package-core.js');
   const pkg = buildPackageJson({ version: '0.0.0-test', sourceDeps: { express: '^4.0.0', pg: '^8.0.0', pino: '^9.0.0' } });
   for (const mapped of Object.values(CORE_INTERNAL_MAP)) {
     assert.ok(pkg.exports[`./${mapped}`], `@bongos/core must export ./${mapped} (targeted by the codemod)`);

package/tests/db_backup_nightly.mjs

@@ -21,7 +21,7 @@ import { fileURLToPath } from 'node:url';
 import { macShapedTools } from './helpers.mjs';
 
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
-const SCRIPT = path.join(ROOT, 'scripts', 'gds', 'db-backup-nightly.sh');
+const SCRIPT = path.join(ROOT, 'scripts', 'bongos', 'db-backup-nightly.sh');
 const skip = process.platform === 'win32' ? 'needs a POSIX bash + coreutils (runs in CI)' : false;
 // The script's env-var prefix, built rather than written so the legacy-literal ratchet
 // does not count a test that has to speak the script's own variable names.

package/tests/db_backup_offsite.mjs

@@ -23,7 +23,7 @@ import { fileURLToPath } from 'node:url';
 import { macShapedTools } from './helpers.mjs';
 
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
-const SCRIPT = path.join(ROOT, 'scripts', 'gds', 'db-backup-offsite.sh');
+const SCRIPT = path.join(ROOT, 'scripts', 'bongos', 'db-backup-offsite.sh');
 const skip = process.platform === 'win32' ? 'needs a POSIX bash + coreutils (runs in CI)' : false;
 // The script's env-var prefix, built rather than written — the same reason as in
 // tests/db_backup_nightly.mjs: the legacy-literal ratchet counts the spelled-out form.

package/tests/db_ownership_handover.mjs

@@ -5,7 +5,7 @@
 // and only GRANTed to the account. Later core moves migrate AS that account, and GRANT ALL
 // does not carry the right to ALTER TABLE or CREATE OR REPLACE FUNCTION — only ownership
 // does — so toast's first ALTERing move failed "must be owner of table tasks" and rolled
-// back. dbOwnershipSql (scripts/gds/provision-repo.js) hands everything over. It is one long
+// back. dbOwnershipSql (scripts/bongos/provision-repo.js) hands everything over. It is one long
 // DO block of catalog queries, which a string test cannot prove: whether it actually runs,
 // which objects it reaches, and that it leaves extension-owned objects alone are questions
 // only a real engine answers.
@@ -24,7 +24,7 @@ import { createRequire } from 'node:module';
 
 const require = createRequire(import.meta.url);
 const { Pool } = require('pg');
-const { dbOwnershipSql } = require('../scripts/gds/provision-repo.js');
+const { dbOwnershipSql } = require('../scripts/bongos/provision-repo.js');
 
 const pool = new Pool({ connectionString: process.env.DATABASE_URL || undefined });
 let client;

package/tests/dead_deps.mjs

@@ -31,7 +31,7 @@ process.env.NODE_ENV = 'test';
 const require = createRequire(import.meta.url);
 const { absorbedInto, depRefusalRow, splitDeadDeps, deadDepHint, findStrandedTasks, DEAD_DEP_STATUSES, LIVE_STATUSES } =
   require('../modules/lifecycle/dead-deps.js');
-const { formatClaimFailure } = require('../scripts/gds/claim.js');
+const { formatClaimFailure } = require('../scripts/bongos/claim.js');
 const { test, summary } = makeRunner();
 
 const dep = (id, status, kind = 'task') => ({ kind, id, title: `t${id}`, status });
@@ -172,10 +172,10 @@ await test('findStrandedTasks: every live status counts, and a healthy dep never
 });
 
 await test('audit-deps exposes the --stranded mode and abandon.js reports what a cut strands', () => {
-  const audit = readFileSync(new URL('../scripts/gds/audit-deps.js', import.meta.url), 'utf8');
+  const audit = readFileSync(new URL('../scripts/bongos/audit-deps.js', import.meta.url), 'utf8');
   assert.match(audit, /--stranded/, 'the mode is documented in the usage header');
   assert.match(audit, /findStrandedTasks/, 'and uses the shared core, not a second copy');
-  const abandon = readFileSync(new URL('../scripts/gds/abandon.js', import.meta.url), 'utf8');
+  const abandon = readFileSync(new URL('../scripts/bongos/abandon.js', import.meta.url), 'utf8');
   assert.match(abandon, /TOP PRIORITY/, 'cutting a depended-on task reports the strand at cut time');
   assert.match(abandon, /LIVE_STATUSES/, 'and shares the live-status definition with the detector');
 });

package/tests/dependency_advisory.mjs

@@ -1,7 +1,7 @@
 // tests/dependency_advisory.mjs — the missing-dependency advisory on POST
 // /tasks (task 1002827, goal 1000089).
 //
-// scripts/gds/audit-deps.js has shipped a working likely-missing-dependency
+// scripts/bongos/audit-deps.js has shipped a working likely-missing-dependency
 // detector since task 1000349 (tests/audit_deps.mjs, tests/missing_dep_classify.mjs)
 // and nothing called it. This wires the SAME detector's pure core
 // (modules/lifecycle/missing-dep-classify.js) live, mirroring goal-advisory.js's

package/tests/deploy_audit_gate.mjs

@@ -23,7 +23,7 @@ import path from 'node:path';
 import { fileURLToPath } from 'node:url';
 
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
-const GATE = path.join(ROOT, 'scripts', 'gds', 'deploy-main-audit-gate.sh');
+const GATE = path.join(ROOT, 'scripts', 'bongos', 'deploy-main-audit-gate.sh');
 
 // A throwaway repo with two commits, checked out at the second — the state a deploy is in
 // when the gate runs: PREV is what was deployed, HEAD is what was just pulled.
@@ -41,7 +41,7 @@ function makeRepo({ auditor = 'exit 0' } = {}) {
   const head = git('rev-parse', 'HEAD').trim();
 
   if (auditor !== null) {
-    const gdsDir = path.join(dir, 'node_modules', '@bongos', 'core', 'scripts', 'gds');
+    const gdsDir = path.join(dir, 'node_modules', '@bongos', 'core', 'scripts', 'bongos');
     fs.mkdirSync(gdsDir, { recursive: true });
     fs.writeFileSync(path.join(gdsDir, 'main-audit.js'), `process.${auditor.replace('exit ', 'exit(')});\n`);
   }
@@ -87,7 +87,7 @@ test('the range handed to the auditor is the exact deploy delta, not a window',
   // Pinned because the whole row is named for an audit range that could be slipped under.
   const repo = makeRepo({ auditor: null });
   try {
-    const gdsDir = path.join(repo.dir, 'node_modules', '@bongos', 'core', 'scripts', 'gds');
+    const gdsDir = path.join(repo.dir, 'node_modules', '@bongos', 'core', 'scripts', 'bongos');
     fs.mkdirSync(gdsDir, { recursive: true });
     // The range rides --range, not an env var (task 1001441): a shell cannot compute
     // the instance's branded env prefix, and argv needs none.
@@ -139,7 +139,7 @@ test('a missing auditor FAILS CLOSED — it never waves the deploy through', ()
 test('OTB_AUDIT_STRICT=1 is passed through, and is OFF by default', () => {
   const repo = makeRepo({ auditor: null });
   try {
-    const gdsDir = path.join(repo.dir, 'node_modules', '@bongos', 'core', 'scripts', 'gds');
+    const gdsDir = path.join(repo.dir, 'node_modules', '@bongos', 'core', 'scripts', 'bongos');
     fs.mkdirSync(gdsDir, { recursive: true });
     fs.writeFileSync(path.join(gdsDir, 'main-audit.js'),
       'require("fs").writeFileSync("argv.txt", process.argv.slice(2).join(" "));\n');

package/tests/deploy_divergence_line.mjs

@@ -29,9 +29,9 @@ import { fileURLToPath } from 'node:url';
 
 const require = createRequire(import.meta.url);
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
-const { line, check } = require('../scripts/gds/deploy-divergence.js');
+const { line, check } = require('../scripts/bongos/deploy-divergence.js');
 const ic = require('../src/instance-config.js');
-const SCRIPT = path.join(ROOT, 'scripts/gds/deploy-divergence.js');
+const SCRIPT = path.join(ROOT, 'scripts/bongos/deploy-divergence.js');
 
 // Run `--line` exactly as SessionStart does. Returns {status, stdout} instead of
 // throwing, so a non-zero exit is an ASSERTABLE value rather than a test crash.
@@ -71,16 +71,32 @@ test('a behind instance names both versions and the host', () => {
   assert.equal(s.split('\n').length, 1, 'must be ONE line — it is injected context');
 });
 
-test('the line says who sees a merge, not a blanket "deploys nothing"', () => {
-  // task 1004682: the old advice ("Merging to main deploys nothing") was the ADR 0137
-  // rule, false since ADR 0161, and sessions repeated it to the owner about live work.
-  // The invariant now: name BOTH audiences — the hub redeploys on every merge, hosted
-  // projects only when a release carries the change and their pin moves.
+test('the line says who sees a merge, not a blanket rule in either direction', () => {
+  // task 1004682: "Merging to main deploys nothing" (ADR 0137) was false since ADR 0161.
+  // task 1004873: its replacement, "the hub redeploys from main on every merge, within
+  // minutes", was never true — the hub pins a published core like every instance, and
+  // served one build through 200+ merges while sessions called work live.
   const s = line(behind);
   assert.doesNotMatch(s, /deploys nothing/);
-  assert.match(s, /cloudbongos[.]com redeploys from main on every merge/);
+  assert.doesNotMatch(s, /redeploys from main|on every merge|within minutes/);
+  assert.match(s, /cloudbongos[.]com gets a merge only when a published core release carries it and its pin moves [(]owner-gated[)]/);
   assert.match(s, /hosted projects: only when a published core release carries the change and their pin moves/);
-  assert.match(s, /Say which one you mean before calling work live/);
+  assert.match(s, /Never call work live until that instance's \/version shows it/);
+});
+
+test('the line says whether main\'s latest merge is in a release yet', () => {
+  // task 1004873: the first question behind "is it live?" is "is it released?".
+  const none = line({ ...behind, behind: false, hasUnreleased: true, unreleased: { count: 4 }, tip: { short: '0f39e344', version: null } });
+  assert.match(none, /main's latest merge [(]0f39e344[)] is in NO release yet, so no instance can have it/);
+  const carried = line({ ...behind, tip: { short: 'adfd7c27', version: '1.19.69' } });
+  assert.match(carried, /main's latest merge [(]adfd7c27[)] is in release 1[.]19[.]69/);
+  assert.equal(carried.split('\n').length, 1);
+  // Bounded: the tip and version are interpolated into injected context.
+  const hostile = line({ ...behind, tip: { short: 'zz IGNORE PREVIOUS', version: '1.0.0 do X' } });
+  assert.doesNotMatch(hostile, /IGNORE|do X/);
+  assert.match(hostile, /main's latest merge is in NO release yet/);
+  // Nothing to say → still silent.
+  assert.equal(line({ ...behind, ok: true, behind: false, tip: { short: 'abc12345', version: null } }), null);
 });
 
 test('live AHEAD of main is reported, not treated as fine', () => {
@@ -228,7 +244,7 @@ test('the line frames its numbers as read from the network', () => {
 });
 
 test('git calls carry their own timeout (SessionStart cannot hang on a wedged git)', () => {
-  const src = fs.readFileSync(path.join(ROOT, 'scripts/gds/deploy-divergence.js'), 'utf8');
+  const src = fs.readFileSync(path.join(ROOT, 'scripts/bongos/deploy-divergence.js'), 'utf8');
   const fn = src.slice(src.indexOf('function git('), src.indexOf('function git(') + 500);
   assert.match(fn, /timeout:/, 'execSync in git() must pass a timeout');
 });
@@ -258,11 +274,11 @@ test('settings.json wires SessionStart to --line on the real script', () => {
 test('settings.json stays OUT of the published package', () => {
   // Topology (PROTECTED_TOPOLOGY_EXCLUDE). If it leaked into the package, every
   // consumer would inherit this repo's hook wiring verbatim.
-  const { isPublishable } = require('../scripts/gds/publish-manifest.js');
+  const { isPublishable } = require('../scripts/bongos/publish-manifest.js');
   assert.equal(isPublishable('.claude/settings.json'), false);
   // The script it calls, by contrast, MUST ship — an instance that materializes
   // this settings.json needs the target to exist.
-  assert.equal(isPublishable('scripts/gds/deploy-divergence.js'), true);
+  assert.equal(isPublishable('scripts/bongos/deploy-divergence.js'), true);
 });
 
 // ── schema behind (task 1002002) ────────────────────────────────────────────
@@ -279,14 +295,14 @@ test('a database missing migrations is named on the one line, with its own advic
   const s = line(schemaOnly);
   assert.match(s, /MISSING 3 migrations the running code ships/);
   assert.match(s, /Run migrate against that instance DB/);
-  assert.doesNotMatch(s, /redeploys from main/, 'the version advice is for version gaps only');
+  assert.doesNotMatch(s, /gets a merge only when/, 'the version advice is for version gaps only');
   assert.equal(s.split('\n').length, 1);
   assert.match(line({ ...schemaOnly, live: { ...schemaOnly.live, schemaPending: 1 } }), /MISSING 1 migration the/);
 
   const both = line({ ...schemaOnly, behind: true, live: { version: '1.0.0', coreVersion: '1.19.56', schemaPending: 2 } });
   assert.match(both, /1\.19\.56/);
   assert.match(both, /MISSING 2 migrations/);
-  assert.match(both, /redeploys from main on every merge/);
+  assert.match(both, /gets a merge only when a published core release carries it/);
 });
 
 test('a non-integer schemaPending never reaches the line', () => {
@@ -329,7 +345,7 @@ test('check() reads schemaPending off /version, and only a bounded integer count
 // CORE_VERSION bump at or after the commit (the hub runs its own repo and reports
 // its own commit). Pinned against this repo's real history, on HEAD so a checkout
 // without origin/main still runs it (CI checks out fetch-depth 0).
-const { liveIncludes, hubReading, coreVersionAt } = require('../scripts/gds/deploy-divergence.js');
+const { liveIncludes, hubReading, coreVersionAt } = require('../scripts/bongos/deploy-divergence.js');
 const gitOut = (args) => spawnSync('git', args, { cwd: ROOT, encoding: 'utf8' }).stdout.trim();
 const bumps = gitOut(['log', 'HEAD', '-3', '--format=%H', '-G^const CORE_VERSION = ', '--', 'src/module-api.js']).split('\n').filter(Boolean);
 
@@ -372,7 +388,7 @@ test('hubReading bounds what the sentence prints', () => {
 
 test('the full report prints the same two lines the ship card does', () => {
   const { whoSeesAMerge } = require('../modules/lifecycle/merge-reach.js');
-  const { report } = require('../scripts/gds/deploy-divergence.js');
+  const { report } = require('../scripts/bongos/deploy-divergence.js');
   const reach = { host: 'cloudbongos.com', liveShort: '09478c8e', includes: true };
   const lines = [];
   const orig = console.log;
@@ -392,6 +408,10 @@ test('check() computes the hub reading for the report, and skips it for the Sess
   assert.equal(full.reach.liveShort, '09478c8e', 'the report and ship card read it');
   const lean = await withVersionStub(body, (base) => check({ base, timeoutMs: 5000, withReach: false }));
   assert.equal(lean.reach, null, '--line never prints it, so it pays no git calls for it');
+  // task 1004873: the --line path DOES carry the latest-merge release state.
+  assert.match(lean.tip.short, /^[0-9a-f]{8}$/, 'main\'s tip, as a short sha');
+  assert.equal(lean.tip.version, lean.unreleased && lean.unreleased.count === 0 ? lean.onMain : null,
+    'released exactly when no work commit sits past the last CORE_VERSION bump');
   const src = fs.readFileSync(SCRIPT, 'utf8');
   assert.match(src, /line\(await check\(\{ timeoutMs: ms, withReach: false \}\)\)/, 'the --line path opts out');
 });

package/tests/deploy_page_projects.mjs

@@ -20,11 +20,15 @@ import { fileURLToPath } from 'node:url';
 
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
 const SRC = fs.readFileSync(path.join(ROOT, 'modules/hall-ui/public/deploy.js'), 'utf8');
+// The shared ask card the move is drawn with (task 1004829), loaded before the page
+// exactly as deploy.html does.
+const ASK_SRC = fs.readFileSync(path.join(ROOT, 'modules/hall-ui/public/hall-ask.js'), 'utf8');
 
 const preview = (id, slug, over = {}) => ({
   instance_id: id, slug, hosting_shape: 'cloud-host',
   served_version: '1.19.800', recommended_version: '1.19.871',
   behind: true, reading: 'ok', observed_at: new Date().toISOString(), open_intent: null,
+  viewer_may_move: true,
   ...over,
 });
 
@@ -106,6 +110,7 @@ function boot({ controlPlane = preview('1', 'cloudbongos'), controlPlaneStatus =
   const sandbox = { window: windowObj, document: documentObj, console, setTimeout, clearTimeout, queueMicrotask, Date, Set, Map, Promise, decodeURIComponent };
   sandbox.globalThis = sandbox;
   vm.createContext(sandbox);
+  vm.runInContext(ASK_SRC, sandbox, { filename: 'hall-ask.js' });
   vm.runInContext(SRC, sandbox, { filename: 'deploy.js' });
   documentObj._ready();
   const settle = async () => { for (let i = 0; i < 40; i++) await new Promise((r) => setTimeout(r, 0)); };
@@ -113,7 +118,7 @@ function boot({ controlPlane = preview('1', 'cloudbongos'), controlPlaneStatus =
   // `settle` drains the whole loop (POLL_MS is 0 here), so an assertion about the
   // in-flight row has to look before the loop finishes, not after it.
   const tick = async (n = 3) => { for (let i = 0; i < n; i++) await new Promise((r) => setTimeout(r, 0)); };
-  return { els, posts, gets, reads, toasts, settle, tick, panel: () => els.get('dp-panel').innerHTML, sub: () => els.get('dp-sub').textContent };
+  return { els, posts, gets, reads, toasts, settle, tick, panel: () => els.get('dp-panel').innerHTML };
 }
 
 // ---- WHICH project the page is about (task 1004171) -------------------------------
@@ -125,7 +130,6 @@ test('unscoped, the page is the hall’s OWN project and nothing else', async ()
   assert.match(html, /cloudbongos/, 'the hall’s own project');
   assert.doesNotMatch(html, /mercury/, 'and not another project');
   assert.doesNotMatch(html, /hoodify-finance/);
-  assert.match(b.sub(), /^cloudbongos$/);
 });
 
 test('unscoped, it never LISTS the fleet or probes a project it is not about', async () => {
@@ -147,7 +151,6 @@ test('?project= renders THAT project, by slug, and still only one row', async ()
   assert.match(html, /mercury/);
   assert.doesNotMatch(html, /cloudbongos/, 'the self row is not added beside it');
   assert.doesNotMatch(html, /hoodify-finance/, 'nor any other project');
-  assert.equal(b.sub(), 'mercury');
   assert.ok(!b.gets.includes('/provisioning/control-plane'), 'and the self row is not even read');
 });
 
@@ -790,7 +793,7 @@ test('every reason the runner can give has owner words on this page — none fal
   // sentence here would reach the owner as "no words for this yet".
   const { createRequire } = await import('node:module');
   const req = createRequire(import.meta.url);
-  const vocab = Object.keys(req(path.join(ROOT, 'scripts/gds/upgrade-outcome.js')).REASON_CLASS || {});
+  const vocab = Object.keys(req(path.join(ROOT, 'scripts/bongos/upgrade-outcome.js')).REASON_CLASS || {});
   assert.ok(vocab.length > 20, 'the vocabulary was read');
   const block = SRC.slice(SRC.indexOf('const REASON_WORDS = {'), SRC.indexOf('const reasonWords'));
   const missing = vocab.filter((k) => !new RegExp(`\\b${k}:`).test(block));
@@ -809,3 +812,31 @@ test('a known snag it could not fix names the next step, and does NOT point at a
   assert.match(b.panel(), /whoever runs that machine clears the snag/);
   assert.doesNotMatch(b.panel(), /href="\/blockers"/, 'move-escalation files no blocker for this class');
 });
+
+// ---- the move is the hall's ask card (task 1004829) -------------------------------
+
+test('the move is asked as a question, with the press as its answer', async () => {
+  const b = boot({ scope: 'mercury' });
+  await b.settle();
+  b.els.get('dp-preview-31')._on.click();
+  const html = b.panel();
+  assert.match(html, /class="hask/, 'the shared ask card');
+  assert.match(html, /Move mercury to core 1\.19\.871\?/, 'a question naming the project and the version');
+  assert.match(html, /id="dp-confirm-31"/, 'the answer is the same control the handler is wired to');
+  assert.match(html, /id="dp-cancel-31"/, 'and Cancel stays a plain step back');
+});
+
+test('a viewer the move would refuse is never offered the press', async () => {
+  // viewer_may_move is the server's answer (the release building's act-alone rule
+  // on top of the move's own doors). Anything but true offers nothing.
+  for (const flag of [false, undefined]) {
+    const b = boot({ scope: 'mercury', instanceOver: () => ({ viewer_may_move: flag }) });
+    await b.settle();
+    b.els.get('dp-preview-31')._on.click();
+    const html = b.panel();
+    assert.doesNotMatch(html, /id="dp-confirm-31"/, `no Move for viewer_may_move=${flag}`);
+    assert.doesNotMatch(html, /class="hask/, 'and no card asking for one');
+    assert.match(html, /decided by the project’s government/, 'it says why');
+    assert.match(html, /id="dp-cancel-31"/);
+  }
+});

package/tests/dev_lib.mjs

@@ -1,4 +1,4 @@
-// tests/dev_lib.mjs — hermetic unit smoke for scripts/gds/dev-lib.js (the `bongos
+// tests/dev_lib.mjs — hermetic unit smoke for scripts/bongos/dev-lib.js (the `bongos
 // dev` local launcher core, ADR 0149). NO real spawn, DB, network, or fs writes:
 // fs / spawn / kill / fetchImpl / env / userInfo are all injected.
 //
@@ -8,7 +8,7 @@ import { strict as assert } from 'node:assert';
 import { createRequire } from 'node:module';
 
 const require = createRequire(import.meta.url);
-const lib = require('../scripts/gds/dev-lib.js');
+const lib = require('../scripts/bongos/dev-lib.js');
 
 let passed = 0, failed = 0;
 function t(name, fn) {

package/tests/dev_windows.mjs

@@ -19,8 +19,8 @@ import { createRequire } from 'node:module';
 const require = createRequire(import.meta.url);
 const cp = require('node:child_process');
 const fs = require('node:fs');
-const lib = require('../scripts/gds/dev-lib.js');
-const devCli = require('../scripts/gds/dev.js');
+const lib = require('../scripts/bongos/dev-lib.js');
+const devCli = require('../scripts/bongos/dev.js');
 
 let passed = 0, failed = 0;
 function t(name, fn) {

package/tests/diagram_facts_offset.mjs

@@ -17,7 +17,7 @@ import path from 'node:path';
 const require = createRequire(import.meta.url);
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 const REPO = path.join(__dirname, '..');
-const facts = require(path.join(REPO, 'scripts/gds/diagram-facts.js'));
+const facts = require(path.join(REPO, 'scripts/bongos/diagram-facts.js'));
 
 const ORIGIN_IDS = Object.keys({
   ...facts.CONCEPTUAL_TASK_IDS,

package/tests/diagram_repo_slug.mjs

@@ -54,7 +54,7 @@ function slugWith(pack) {
   try {
     const out = execFileSync(
       process.execPath,
-      ['-e', 'process.stdout.write(JSON.stringify(require("./scripts/gds/diagram-facts.js").repoSlug()))'],
+      ['-e', 'process.stdout.write(JSON.stringify(require("./scripts/bongos/diagram-facts.js").repoSlug()))'],
       { cwd: REPO, encoding: 'utf8', env: { ...process.env, BONGOS_BRANDING_FILE: file } },
     );
     return JSON.parse(out);

package/tests/diff_derived_signals.mjs

@@ -15,7 +15,7 @@ import assert from 'node:assert/strict';
 import { createRequire } from 'node:module';
 
 const require = createRequire(import.meta.url);
-const ship = require('../scripts/gds/ship.js');
+const ship = require('../scripts/bongos/ship.js');
 // achievements carved into modules/economy/ (BV1.R77 / ADR 0093 §1-2).
 const achievements = require('../modules/economy/achievements.js');
 const learnings = require('../modules/memory/learnings.js');
@@ -40,7 +40,7 @@ test('deriveTagsFromPaths: empty / globby input falls back to "pms"', () => {
 
 test('deriveTagsFromPaths: art + scripts paths', () => {
   assert.deepEqual(
-    ship.deriveTagsFromPaths(['art/generated/tiles/x.png', 'scripts/gds/ship.js']).sort(),
+    ship.deriveTagsFromPaths(['art/generated/tiles/x.png', 'scripts/bongos/ship.js']).sort(),
     ['art', 'scripts'],
   );
 });

package/tests/dns_preflight.mjs

@@ -1,10 +1,10 @@
 // tests/dns_preflight.mjs — DB-free unit tests for the DNS token-scope preflight
-// (scripts/gds/provision.js classifyZoneScope + checkDnsTokenScope, task 1980).
+// (scripts/bongos/provision.js classifyZoneScope + checkDnsTokenScope, task 1980).
 import { test } from 'node:test';
 import assert from 'node:assert/strict';
 import { createRequire } from 'node:module';
 const require = createRequire(import.meta.url);
-const prov = require('../scripts/gds/provision.js');
+const prov = require('../scripts/bongos/provision.js');
 
 test('classifyZoneScope: a token that sees the zone is reachable', () => {
   const r = prov.classifyZoneScope({ status: 200, body: { success: true, result: [{ name: 'example.com', id: 'z1' }] }, zone: 'example.com' });

package/tests/do_api.mjs

@@ -1,7 +1,7 @@
-// tests/do_api.mjs — the control plane's DigitalOcean client (scripts/gds/do-api.js).
+// tests/do_api.mjs — the control plane's DigitalOcean client (scripts/bongos/do-api.js).
 //
 // Pins the dry-run/live contract and the droplet-settle poll that instance
-// provisioning (scripts/gds/provision.js) relies on — with NO network (an injected
+// provisioning (scripts/bongos/provision.js) relies on — with NO network (an injected
 // fetch) and NO real clock (an injected sleepFn). Given its own file by task
 // 1003893, when the suite it used to share was retired with its other subject.
 //
@@ -11,7 +11,7 @@ import { strict as assert } from 'node:assert';
 import { createRequire } from 'node:module';
 
 const require = createRequire(import.meta.url);
-const { DoApi, DoApiError } = require('../scripts/gds/do-api.js');
+const { DoApi, DoApiError } = require('../scripts/bongos/do-api.js');
 
 let passed = 0;
 let failed = 0;

package/tests/doc_cli_guard.mjs

@@ -18,7 +18,7 @@ import { fileURLToPath } from 'node:url';
 
 const require = createRequire(import.meta.url);
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
-const g = require(path.join(ROOT, 'scripts', 'gds', 'doc-cli-guard.js'));
+const g = require(path.join(ROOT, 'scripts', 'bongos', 'doc-cli-guard.js'));
 
 // A tiny injected world: doc text and script source, by path.
 const world = (docs, scripts) => ({
@@ -50,9 +50,9 @@ test('an empty enumeration FAILS rather than passing quietly', () => {
 // ---- the regression that motivated the check ------------------------------
 test('THE 1002931 CASE: a doc naming a flag the script does not have is caught', () => {
   const { violations } = g.scanDocs(['skill.md'], world(
-    { 'skill.md': 'Run `node scripts/gds/capture.js --full --fields-file f.json`.' },
+    { 'skill.md': 'Run `node scripts/bongos/capture.js --full --fields-file f.json`.' },
     // capture.js as it was on the OTHER machine: no --full, no --fields-file.
-    { 'scripts/gds/capture.js': "const text = process.argv.slice(2).join(' ');" },
+    { 'scripts/bongos/capture.js': "const text = process.argv.slice(2).join(' ');" },
   ));
   assert.equal(violations.length, 2, violations.join('\n'));
   assert.ok(violations.some((v) => v.includes('--full')));
@@ -62,15 +62,15 @@ test('THE 1002931 CASE: a doc naming a flag the script does not have is caught',
 
 test('the same doc PASSES once the script really carries the flags', () => {
   const { violations } = g.scanDocs(['skill.md'], world(
-    { 'skill.md': 'Run `node scripts/gds/capture.js --full --fields-file f.json`.' },
-    { 'scripts/gds/capture.js': "const full = args.includes('--full'); const ff = arg('--fields-file');" },
+    { 'skill.md': 'Run `node scripts/bongos/capture.js --full --fields-file f.json`.' },
+    { 'scripts/bongos/capture.js': "const full = args.includes('--full'); const ff = arg('--fields-file');" },
   ));
   assert.deepEqual(violations, []);
 });
 
 test('a doc naming a script that does not exist is caught', () => {
   const { violations } = g.scanDocs(['skill.md'], world(
-    { 'skill.md': 'run `node scripts/gds/art-stage.js` to publish' }, {},
+    { 'skill.md': 'run `node scripts/bongos/art-stage.js` to publish' }, {},
   ));
   assert.equal(violations.length, 1);
   assert.match(violations[0], /does not exist/);
@@ -86,12 +86,12 @@ test('every real argv idiom in this repo is accepted', () => {
     'argVal(args, x)': "const v = argVal(args, '--development');",
     'strict equality': "else if (a === '--development') on = true;",
     'Set.has': "const on = ARGS.has('--development');",
-    'usage text only': '//   node scripts/gds/x.js --development <path>',
+    'usage text only': '//   node scripts/bongos/x.js --development <path>',
   };
   for (const [label, src] of Object.entries(idioms)) {
     const { violations } = g.scanDocs(['d.md'], world(
-      { 'd.md': 'run `node scripts/gds/x.js --development p.json`' },
-      { 'scripts/gds/x.js': src },
+      { 'd.md': 'run `node scripts/bongos/x.js --development p.json`' },
+      { 'scripts/bongos/x.js': src },
     ));
     assert.deepEqual(violations, [], `${label} must be accepted`);
   }
@@ -104,8 +104,8 @@ test('a LONGER flag in the source does not satisfy a shorter documented one', ()
   // case passes with or without the guard, so it proves nothing — the first
   // draft of this test had it backwards and a mutation run caught it.
   const { violations } = g.scanDocs(['d.md'], world(
-    { 'd.md': 'run `node scripts/gds/x.js --client abc`' },
-    { 'scripts/gds/x.js': "const c = argVal(args, '--client-id');" },
+    { 'd.md': 'run `node scripts/bongos/x.js --client abc`' },
+    { 'scripts/bongos/x.js': "const c = argVal(args, '--client-id');" },
   ));
   assert.equal(violations.length, 1, 'a longer flag must not satisfy a shorter one');
   assert.match(violations[0], /--client\b/);
@@ -113,8 +113,8 @@ test('a LONGER flag in the source does not satisfy a shorter documented one', ()
 
 test('and the exact documented flag is still accepted alongside a longer sibling', () => {
   const { violations } = g.scanDocs(['d.md'], world(
-    { 'd.md': 'run `node scripts/gds/x.js --client abc`' },
-    { 'scripts/gds/x.js': "argVal(args, '--client-id'); argVal(args, '--client');" },
+    { 'd.md': 'run `node scripts/bongos/x.js --client abc`' },
+    { 'scripts/bongos/x.js': "argVal(args, '--client-id'); argVal(args, '--client');" },
   ));
   assert.deepEqual(violations, []);
 });
@@ -122,8 +122,8 @@ test('and the exact documented flag is still accepted alongside a longer sibling
 test('flags do not leak across two invocations in one doc', () => {
   // b.js carries --beta, a.js does not; only a.js/--alpha may be flagged.
   const { violations } = g.scanDocs(['d.md'], world(
-    { 'd.md': 'first `node scripts/gds/a.js --alpha`\nthen `node scripts/gds/b.js --beta`' },
-    { 'scripts/gds/a.js': 'nothing here', 'scripts/gds/b.js': "arg('--beta')" },
+    { 'd.md': 'first `node scripts/bongos/a.js --alpha`\nthen `node scripts/bongos/b.js --beta`' },
+    { 'scripts/bongos/a.js': 'nothing here', 'scripts/bongos/b.js': "arg('--beta')" },
   ));
   assert.equal(violations.length, 1, violations.join('\n'));
   assert.match(violations[0], /a\.js.*--alpha/);
@@ -131,17 +131,17 @@ test('flags do not leak across two invocations in one doc', () => {
 
 test('universal plumbing flags are not reported', () => {
   const { violations } = g.scanDocs(['d.md'], world(
-    { 'd.md': 'run `node scripts/gds/x.js --quiet --json --help --dry-run`' },
-    { 'scripts/gds/x.js': 'no flags at all' },
+    { 'd.md': 'run `node scripts/bongos/x.js --quiet --json --help --dry-run`' },
+    { 'scripts/bongos/x.js': 'no flags at all' },
   ));
   assert.deepEqual(violations, []);
 });
 
 // ---- the allowlist -------------------------------------------------------
 test('an allowlisted invocation is tolerated — and covers its own flags', () => {
-  const allow = new Map([['d.md::scripts/gds/gone.js', 'ships with an excluded host module']]);
+  const allow = new Map([['d.md::scripts/bongos/gone.js', 'ships with an excluded host module']]);
   const { violations } = g.scanDocs(['d.md'], {
-    readDoc: () => 'run `node scripts/gds/gone.js --whatever`',
+    readDoc: () => 'run `node scripts/bongos/gone.js --whatever`',
     readScript: () => null,
     allow,
   });
@@ -164,8 +164,8 @@ test('a flag surviving ONLY in a usage comment warns without failing', () => {
   // scripts legitimately name a flag only in their banner and handle it via a
   // helper, and failing on that is what sank the first draft.
   const { violations, warnings } = g.scanDocs(['d.md'], world(
-    { 'd.md': 'run `node scripts/gds/x.js --gone`' },
-    { 'scripts/gds/x.js': '// usage: x.js --gone <path>\nconst nothing = 1;' },
+    { 'd.md': 'run `node scripts/bongos/x.js --gone`' },
+    { 'scripts/bongos/x.js': '// usage: x.js --gone <path>\nconst nothing = 1;' },
   ));
   assert.deepEqual(violations, [], 'a comment-only mention must not fail the build');
   assert.equal(warnings.length, 1);
@@ -174,29 +174,29 @@ test('a flag surviving ONLY in a usage comment warns without failing', () => {
 
 test('a flag present in real code produces NO warning', () => {
   const { violations, warnings } = g.scanDocs(['d.md'], world(
-    { 'd.md': 'run `node scripts/gds/x.js --live`' },
-    { 'scripts/gds/x.js': "// usage: x.js --live\nconst on = args.includes('--live');" },
+    { 'd.md': 'run `node scripts/bongos/x.js --live`' },
+    { 'scripts/bongos/x.js': "// usage: x.js --live\nconst on = args.includes('--live');" },
   ));
   assert.deepEqual(violations, []);
   assert.deepEqual(warnings, []);
 });
 
-test('a scripts/gds/ shim is read together with the module CLI it forwards to (task 1003324)', () => {
-  // scripts/gds/validate-design.js is `require('../../modules/ui-design/scripts/validate-design.js')`
+test('a scripts/bongos/ shim is read together with the module CLI it forwards to (task 1003324)', () => {
+  // scripts/bongos/validate-design.js is `require('../../modules/ui-design/scripts/validate-design.js')`
   // plus a usage banner; `--strict` is parsed in the module file. Read alone, the shim
   // would only ever say "named in comments" for a flag that is genuinely honoured.
-  const src = g.readCliSource('scripts/gds/validate-design.js');
+  const src = g.readCliSource('scripts/bongos/validate-design.js');
   assert.ok(src, 'the shim exists');
   assert.ok(g.scriptMentionsFlag(g.stripLineComments(src), 'strict'),
     'the flag is found in CODE — the module CLI was followed, not just the shim banner');
   const { violations, warnings } = g.scanDocs(['d.md'], {
-    readDoc: () => 'run `node scripts/gds/validate-design.js --strict`',
+    readDoc: () => 'run `node scripts/bongos/validate-design.js --strict`',
     readScript: g.readCliSource, allow: new Map(),
   });
   assert.deepEqual(violations, []);
   assert.deepEqual(warnings, [], 'no "only in comments" warning for a shim-forwarded flag');
   // Bounded: a require into src/ is NOT followed (it is not a CLI phase).
-  assert.ok(!g.readCliSource('scripts/gds/fitness.js').includes('function requireBuilder'),
+  assert.ok(!g.readCliSource('scripts/bongos/fitness.js').includes('function requireBuilder'),
     'a core internal the CLI requires is not concatenated into its source');
 });
 

package/tests/doc_comment_coverage.mjs

@@ -20,7 +20,7 @@ import path from 'node:path';
 const require = createRequire(import.meta.url);
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
 const { checkDocCommentCoverage, scanHeaders, leadingComment, wordCount, MIN_WORDS } =
-  require(path.join(ROOT, 'scripts', 'gds', 'doc-comment-coverage.js'));
+  require(path.join(ROOT, 'scripts', 'bongos', 'doc-comment-coverage.js'));
 
 const FILES = {
   'src/no-header.js': "const x = require('y');\nmodule.exports = x;\n",