@bongos/core 1.21.175 → 1.21.176

package/tests/doc_control_claims.mjs

@@ -10,7 +10,7 @@ import { fileURLToPath } from 'node:url';
 
 const require = createRequire(import.meta.url);
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
-const dcc = require(path.join(ROOT, 'scripts', 'gds', 'doc-control-claims.js'));
+const dcc = require(path.join(ROOT, 'scripts', 'bongos', 'doc-control-claims.js'));
 
 // A fake tree: docs maps path -> text; `present` is the set of artifacts on disk.
 function run(docs, present = [], allow = new Map()) {
@@ -40,7 +40,7 @@ test('the same sentence is clean once the artifact exists', () => {
 });
 
 test('each kind of enforcement artifact is recognised', () => {
-  for (const a of ['.claude/hooks/x-gate.js', '.github/workflows/x.yml', 'scripts/gds/x-guard.js', '.husky/x.sh', 'scripts/hooks/x.sh']) {
+  for (const a of ['.claude/hooks/x-gate.js', '.github/workflows/x.yml', 'scripts/bongos/x-guard.js', '.husky/x.sh', 'scripts/hooks/x.sh']) {
     const r = run({ 'docs/x.md': `The \`${a}\` hook blocks every bad write.\n` });
     assert.equal(r.violations.length, 1, `${a} should be a claim`);
   }
@@ -69,15 +69,15 @@ test('history is not a claim: a sentence about what was removed does not trip it
 });
 
 test('a mention without control vocabulary is not a claim', () => {
-  const r = run({ 'docs/x.md': 'See `scripts/gds/old-seed.js` for the shape of a TASKS array.\n' });
+  const r = run({ 'docs/x.md': 'See `scripts/bongos/old-seed.js` for the shape of a TASKS array.\n' });
   assert.deepEqual(r.violations, []);
 });
 
 test('a path\'s own NAME never decides the wording, in either direction', () => {
   // `x-guard.js` must not make a plain pointer read as a control claim...
-  assert.deepEqual(run({ 'docs/x.md': 'See `scripts/gds/x-guard.js` for the shape of a TASKS array.\n' }).violations, []);
+  assert.deepEqual(run({ 'docs/x.md': 'See `scripts/bongos/x-guard.js` for the shape of a TASKS array.\n' }).violations, []);
   // ...and `gone.yml` / `replaced.js` must not make a live claim read as history.
-  for (const a of ['.github/workflows/gone.yml', 'scripts/gds/replaced.js']) {
+  for (const a of ['.github/workflows/gone.yml', 'scripts/bongos/replaced.js']) {
     assert.equal(run({ 'docs/x.md': `The \`${a}\` gate blocks every PR.\n` }).violations.length, 1, a);
   }
 });
@@ -100,14 +100,14 @@ test('dated records describe a moment, not the tree, and are skipped', () => {
 });
 
 test('an allowlisted claim passes, and says so by being counted', () => {
-  const docs = { 'docs/adr/0996-x.md': 'The `scripts/gds/box.js` runner gates every box.\n' };
-  const r = run(docs, [], new Map([['docs/adr/0996-x.md::scripts/gds/box.js', 'retired by a later ADR']]));
+  const docs = { 'docs/adr/0996-x.md': 'The `scripts/bongos/box.js` runner gates every box.\n' };
+  const r = run(docs, [], new Map([['docs/adr/0996-x.md::scripts/bongos/box.js', 'retired by a later ADR']]));
   assert.deepEqual(r.violations, []);
   assert.equal(r.claims.length, 1);
 });
 
 test('a STALE allowance is itself a violation, so a fixed doc cannot leave a dead exception', () => {
-  const r = run({ 'docs/x.md': 'Nothing here.\n' }, [], new Map([['docs/x.md::scripts/gds/box.js', 'was true once']]));
+  const r = run({ 'docs/x.md': 'Nothing here.\n' }, [], new Map([['docs/x.md::scripts/bongos/box.js', 'was true once']]));
   assert.equal(r.violations.length, 1);
   assert.match(r.violations[0], /stale allowance/);
 });
@@ -126,8 +126,8 @@ test('an empty enumeration is a broken scan, not a clean result', () => {
 
 test('the guard is wired: fitness runs it and the control manifest lists it', async () => {
   const fs = await import('node:fs');
-  const fitness = fs.readFileSync(path.join(ROOT, 'scripts', 'gds', 'fitness.js'), 'utf8');
+  const fitness = fs.readFileSync(path.join(ROOT, 'scripts', 'bongos', 'fitness.js'), 'utf8');
   assert.match(fitness, /require\('\.\/doc-control-claims\.js'\)\.checkDocControlClaims/);
-  const cm = require(path.join(ROOT, 'scripts', 'gds', 'control-manifest.js'));
-  assert.ok(cm.CONTROLS.some((c) => c.file === 'scripts/gds/doc-control-claims.js'), 'listed in the manifest');
+  const cm = require(path.join(ROOT, 'scripts', 'bongos', 'control-manifest.js'));
+  assert.ok(cm.CONTROLS.some((c) => c.file === 'scripts/bongos/doc-control-claims.js'), 'listed in the manifest');
 });

package/tests/docs_entropy.mjs

@@ -18,7 +18,7 @@ import path from 'node:path';
 
 const require = createRequire(import.meta.url);
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
-const SCANNER = path.join(ROOT, 'scripts', 'gds', 'docs-entropy.js');
+const SCANNER = path.join(ROOT, 'scripts', 'bongos', 'docs-entropy.js');
 const { collectMarkdownFiles, parseFile, scanDuplicateProse } = require(SCANNER); // require.main-guarded → no scan on import
 
 test('collectMarkdownFiles passes the glob as an argv array, never a shell string', () => {
@@ -113,7 +113,7 @@ test('parseFile slugs a CRLF heading without a trailing carriage return', () =>
 
 test('parseFile ignores a leading BOM, so a BOM file is not one heading short', () => {
   // Same class, different byte: PowerShell writes UTF-8 WITH BOM by default
-  // (scripts/gds/CLAUDE.md warns about this for JSON bodies) and
+  // (scripts/bongos/CLAUDE.md warns about this for JSON bodies) and
   // readFileSync('utf8') does not strip it — the BOM would sit before the first
   // '#' and hide that heading.
   const withBom = parseString('' + DOC_LINES.join('\r\n'));

package/tests/docs_openapi_route.mjs

@@ -52,11 +52,13 @@ test('/docs/openapi.json serves a valid OpenAPI 3.1 spec with CORS', async () =>
     assert.equal(spec.openapi, '3.1.0');
     assert.ok(spec.paths && Object.keys(spec.paths).length > 0, 'spec advertises paths');
     assert.ok(spec.info && spec.info.title, 'spec carries an info.title');
-    // Zero behaviour change on a healthy deploy: when the committed spec is present
-    // (the common case) it is served verbatim — the committed file wins, generation
-    // is only the fallback tier.
-    const committed = fs.readFileSync(path.join(ROOT, 'docs/api/openapi.json'), 'utf8');
-    assert.equal(body, committed, 'served bytes equal the committed spec (committed file preferred over generation)');
+    // A packaged spec on disk (every core tarball carries one) is served verbatim; a fresh
+    // checkout has none — it is gitignored, task 1004866 — so the generated tier serves.
+    const onDisk = path.join(ROOT, 'docs/api/openapi.json');
+    const expected = fs.existsSync(onDisk)
+      ? fs.readFileSync(onDisk, 'utf8')
+      : JSON.stringify(require('../scripts/bongos/gen-api-docs.js').build().spec, null, 2) + '\n';
+    assert.equal(body, expected, 'served bytes equal the file on disk, else the spec generated from the routes');
   });
 });
 
@@ -102,7 +104,7 @@ test('resolveOpenapiJson: degrades to empty string (→ 404) instead of crashing
 test('the in-process generation tier really yields a structurally valid spec', () => {
   // This is the tier that heals a standalone/missing-file deploy: no file on disk,
   // spec built from the live route source. Prove it produces a valid OpenAPI 3.1.
-  const gen = require('../scripts/gds/gen-api-docs.js');
+  const gen = require('../scripts/bongos/gen-api-docs.js');
   const { spec } = gen.build();
   assert.equal(spec.openapi, '3.1.0');
   assert.ok(Object.keys(spec.paths).length > 0, 'generated spec advertises paths');

package/tests/doctor_hooks.mjs

@@ -25,7 +25,7 @@ import { createRequire } from 'node:module';
 import path from 'node:path';
 
 const require = createRequire(import.meta.url);
-const { classifyHooksState, classifyPreCommitState } = require('../scripts/gds/doctor.js');
+const { classifyHooksState, classifyPreCommitState } = require('../scripts/bongos/doctor.js');
 
 let passed = 0;
 let failed = 0;

package/tests/edit_hints.mjs

@@ -24,7 +24,6 @@ test('each generator input maps to its generator; unrelated paths map to nothing
     ['modules/hall-ui/public/roster.js', 'copy-inventory.js'],
     ['modules/status-ui/public/index.html', 'copy-inventory.js'],
     ['src/bongos/auth.js', 'gen-repo-map.js'],
-    ['modules/lifecycle/routes/claims.js', 'gen-api-docs.js'],
     ['.claude/skills/status/SKILL.md', 'gen-file-map.js'],
     ['docs/session-logs/2026-09-03-x.md', 'gen-session-index.js'],
     ['docs/adr/0236-something.md', 'fitness.js'],
@@ -33,7 +32,9 @@ test('each generator input maps to its generator; unrelated paths map to nothing
     const h = hints.generatorHint(p);
     assert.ok(h && h.includes(gen), `${p} → expected ${gen}, got ${h}`);
   }
-  for (const p of ['README.md', 'tests/foo.mjs', 'modules/hall-ui/CLAUDE.md', 'scripts/gds/ship.js']) {
+  // task 1004866: a route edit stales no TRACKED file any more (the API spec, reference and
+  // client are gitignored), so a hint to regenerate and commit them would be wrong advice.
+  for (const p of ['README.md', 'tests/foo.mjs', 'modules/hall-ui/CLAUDE.md', 'scripts/bongos/ship.js', 'modules/lifecycle/routes/claims.js']) {
     assert.equal(hints.generatorHint(p), null, `${p} should be silent`);
   }
 });

package/tests/effective_visibility_predicate.mjs

@@ -146,7 +146,7 @@ const SPELLING_EXEMPTIONS = [
     demands: 'issues no database query and loads no database driver — it answers from fixtures only',
   },
   {
-    file: 'scripts/gds/seed-bv1-privacy-invites-tasks.js',
+    file: 'scripts/bongos/seed-bv1-privacy-invites-tasks.js',
     allow: [
       { text: "profile_state='", count: 1, why: 'a one-shot historical seeder: this sits inside a task DESCRIPTION string, quoting the predicate as prose describing the work to be done. Its subject IS this predicate.' },
       { text: 'NOT hide_stats', count: 1, why: 'the second half of that same quoted sentence in that same task description — prose, not a query.' },
@@ -155,7 +155,7 @@ const SPELLING_EXEMPTIONS = [
     demands: 'issues no database query at all — it posts task rows over HTTP',
   },
   {
-    file: 'scripts/gds/seed-bv1-r01-delta-tasks.js',
+    file: 'scripts/bongos/seed-bv1-r01-delta-tasks.js',
     allow: [
       { text: "profile_state='", count: 1, why: 'the ADR 0171 R01 seeder: the predicate is quoted as prose inside the task briefs this script files, the same shape as the privacy seeder above.' },
       { text: 'NOT hide_stats', count: 1, why: 'the second half of that same quoted sentence in that same brief — prose describing work, never executed.' },
@@ -1150,7 +1150,7 @@ server.close();
 console.log('\ncoverage:');
 
 t('this guard runs in the DB-free unit lane (it is not parked as integration or known-failing)', () => {
-  const runner = fs.readFileSync(path.join(repo, 'scripts', 'gds', 'run-unit-tests.js'), 'utf8');
+  const runner = fs.readFileSync(path.join(repo, 'scripts', 'bongos', 'run-unit-tests.js'), 'utf8');
   assert.ok(
     !/effective_visibility_predicate/.test(runner),
     'effective_visibility_predicate is named in run-unit-tests.js — parked into INTEGRATION or KNOWN_FAILING it would gate nothing (task 1002282)'

package/tests/env_knobs_neutral_prefix.mjs

@@ -74,7 +74,7 @@ test('DEPLOY_MODE: <PREFIX>_DEPLOY_MODE pins the mode, with no gh probe', () =>
   // 'laptop' from the env is honoured as-is. Ignored, the same run would probe gh
   // (absent here), find no credential and fall back to 'ci'.
   const out = runNode(
-    "console.log(require('./scripts/gds/ship-deploy-target.js').resolveDeployMode())",
+    "console.log(require('./scripts/bongos/ship-deploy-target.js').resolveDeployMode())",
     { ...envWith('DEPLOY_MODE', 'laptop'), PATH: EMPTY_BIN },
   );
   assert.equal(out.split('\n').pop(), 'laptop');
@@ -82,18 +82,18 @@ test('DEPLOY_MODE: <PREFIX>_DEPLOY_MODE pins the mode, with no gh probe', () =>
 
 test('PUSH_VIA_SERVER: <PREFIX>_PUSH_VIA_SERVER=0 forces the local push path', () => {
   const out = runNode(
-    "console.log(require('./scripts/gds/ship-deploy-target.js').pushVia())",
+    "console.log(require('./scripts/bongos/ship-deploy-target.js').pushVia())",
     { ...envWith('PUSH_VIA_SERVER', '0'), PATH: EMPTY_BIN },
   );
   assert.equal(out, 'local', 'with no gh on PATH, only the override can answer local');
 });
 
 test('ALLOW_MAIN_PUSH: push-main.js writes the canonical spelling, and the hook obeys it', () => {
-  const { pushEnv } = require('../scripts/gds/push-main.js');
+  const { pushEnv } = require('../scripts/bongos/push-main.js');
   const env = pushEnv({ PATH: process.env.PATH, HOME: process.env.HOME });
   assert.equal(env[canonical('ALLOW_MAIN_PUSH')], '1', 'the writer uses this instance\'s own prefix');
 
-  const hook = path.join(ROOT, 'scripts', 'gds', 'hooks', 'pre-push.js');
+  const hook = path.join(ROOT, 'scripts', 'bongos', 'hooks', 'pre-push.js');
   const sha = 'a'.repeat(40);
   const push = (e) => spawnSync(process.execPath, [hook, 'origin', 'https://example.invalid/repo.git'], {
     cwd: ROOT, input: `refs/heads/main ${sha} refs/heads/main ${sha}\n`, encoding: 'utf8', env: e,
@@ -105,7 +105,7 @@ test('ALLOW_MAIN_PUSH: push-main.js writes the canonical spelling, and the hook
 });
 
 test('CLAUDE_BIN: the preflight probe, the Autobongos worker and its env allowlist', () => {
-  const { preflightChecks } = require('../scripts/gds/preflight.js');
+  const { preflightChecks } = require('../scripts/bongos/preflight.js');
   let seen = null;
   const spy = (bin) => { seen = bin; return { status: 0, stdout: 'x\n' }; };
   const fsOk = { existsSync: () => true };
@@ -114,7 +114,7 @@ test('CLAUDE_BIN: the preflight probe, the Autobongos worker and its env allowli
   const row = r.find((x) => x.title === 'claude CLI');
   assert.match(row.detail, new RegExp(`via ${canonical('CLAUDE_BIN')}`), 'the label names the spelling that supplied it');
 
-  const runner = require('../scripts/gds/autobongos-run.js');
+  const runner = require('../scripts/bongos/autobongos-run.js');
   assert.equal(runner.resolveWorkerBin({ [canonical('CLAUDE_BIN')]: '/x/claude' }, 'linux').bin, '/x/claude');
   const wenv = runner.workerEnv({ [canonical('CLAUDE_BIN')]: '/x/claude', DATABASE_URL: 'postgres://secret' });
   assert.equal(wenv[canonical('CLAUDE_BIN')], '/x/claude', 'the worker receives the canonical spelling');
@@ -143,8 +143,8 @@ test('CLAUDE_BIN: the grader spawns the binary <PREFIX>_CLAUDE_BIN names', async
 });
 
 test('COST_CRON_ROUTINE: run-routine.js writes the canonical name and session-cost.js reads it', () => {
-  const { stepEnv } = require('../scripts/gds/run-routine.js');
-  const { cronRoutineFromEnv } = require('../scripts/gds/session-cost.js');
+  const { stepEnv } = require('../scripts/bongos/run-routine.js');
+  const { cronRoutineFromEnv } = require('../scripts/bongos/session-cost.js');
   const env = stepEnv('bfg', {});
   assert.equal(env[canonical('COST_CRON_ROUTINE')], 'bfg', 'the writer uses this instance\'s own prefix');
   assert.equal(cronRoutineFromEnv(env), 'bfg', 'the reader finds what the writer wrote');
@@ -153,13 +153,13 @@ test('COST_CRON_ROUTINE: run-routine.js writes the canonical name and session-co
 });
 
 test('ROUTINE_ALERT_CHANNEL: <PREFIX>_ROUTINE_ALERT_CHANNEL picks the alert channel', () => {
-  const { alertChannel } = require('../scripts/gds/run-routine.js');
+  const { alertChannel } = require('../scripts/bongos/run-routine.js');
   assert.equal(alertChannel({ [canonical('ROUTINE_ALERT_CHANNEL')]: 'ops' }), 'ops');
   assert.equal(alertChannel({}), 'ship_feed');
 });
 
 test('COST_LEDGER: <PREFIX>_COST_LEDGER is the first place a ledger is looked for', () => {
-  const { knownLedgerPaths } = require('../scripts/gds/backfill-cost.js');
+  const { knownLedgerPaths } = require('../scripts/bongos/backfill-cost.js');
   assert.equal(knownLedgerPaths({ [canonical('COST_LEDGER')]: '/data/cost_ledger.jsonl' })[0], '/data/cost_ledger.jsonl');
 });
 
@@ -177,7 +177,7 @@ test('MEMORY_DIR: <PREFIX>_MEMORY_DIR is where memory-map.js reads MEMORY.md', (
   const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'knobs-memory-'));
   try {
     fs.writeFileSync(path.join(dir, 'MEMORY.md'), '# Memory index\n\n- [a note](a.md) — one line\n');
-    const r = spawnSync(process.execPath, ['scripts/gds/memory-map.js'], { cwd: ROOT, env: envWith('MEMORY_DIR', dir), encoding: 'utf8' });
+    const r = spawnSync(process.execPath, ['scripts/bongos/memory-map.js'], { cwd: ROOT, env: envWith('MEMORY_DIR', dir), encoding: 'utf8' });
     assert.equal(r.status, 0, r.stderr);
     assert.match(r.stdout, /^map: \d+ bytes/m, 'it measured the map in that directory (ignored, it prints usage and exits 2)');
   } finally {
@@ -186,7 +186,7 @@ test('MEMORY_DIR: <PREFIX>_MEMORY_DIR is where memory-map.js reads MEMORY.md', (
 });
 
 test('AUDIT_RANGE: <PREFIX>_AUDIT_RANGE is the range main-audit.js audits, and --range still wins', () => {
-  const { requestedRange } = require('../scripts/gds/main-audit.js');
+  const { requestedRange } = require('../scripts/bongos/main-audit.js');
   assert.equal(requestedRange(undefined, { [canonical('AUDIT_RANGE')]: 'abc123..HEAD' }), 'abc123..HEAD');
   assert.equal(requestedRange('def456..HEAD', { [canonical('AUDIT_RANGE')]: 'abc123..HEAD' }), 'def456..HEAD',
     'the flag the deploy gate and CI pass beats any env value');
@@ -196,7 +196,7 @@ test('AUDIT_RANGE: <PREFIX>_AUDIT_RANGE is the range main-audit.js audits, and -
 
 test('ONBOARDING_WINDOW_DAYS: <PREFIX>_ONBOARDING_WINDOW_DAYS sets the window', () => {
   const out = runNode(
-    "console.log(require('./scripts/gds/onboarding-config.js').windowDays())",
+    "console.log(require('./scripts/bongos/onboarding-config.js').windowDays())",
     envWith('ONBOARDING_WINDOW_DAYS', '3'),
   );
   assert.equal(out, '3');

package/tests/exec_path_guard.mjs

@@ -19,10 +19,10 @@ import { execFileSync } from 'node:child_process';
 import { fileURLToPath } from 'node:url';
 
 // fileURLToPath, not URL.pathname. Both a test (tests/test_path_guard.mjs) and a
-// fitness check (scripts/gds/test-path-guard.js, Check 30) reject the pathname form.
+// fitness check (scripts/bongos/test-path-guard.js, Check 30) reject the pathname form.
 const require = createRequire(import.meta.url);
 const ROOT = path.resolve(fileURLToPath(new URL('..', import.meta.url)));
-const g = require(path.join(ROOT, 'scripts', 'gds', 'exec-path-guard.js'));
+const g = require(path.join(ROOT, 'scripts', 'bongos', 'exec-path-guard.js'));
 
 const scan = (src, rel = 'modules/probe/x.js') => g.scanFile(rel, src);
 const CP = "const { execFile, execFileSync, spawn, execSync } = require('node:child_process');\n";
@@ -127,8 +127,8 @@ test('a template rooted at __dirname is still static', () => {
 test('an UNBOUND require(...).execFileSync(runtimePath) is caught', () => {
   // The gap that failed the first grade. This form binds no name, and the first draft
   // short-circuited the whole file on "no bindings" — so a file spawning this way was
-  // skipped entirely. Not hypothetical: scripts/gds/autonomy-gate.js and
-  // scripts/gds/ship-land.js already use exactly this shape.
+  // skipped entirely. Not hypothetical: scripts/bongos/autonomy-gate.js and
+  // scripts/bongos/ship-land.js already use exactly this shape.
   const f = scan("require('node:child_process').execFileSync(process.execPath, [path.join(work, rel)]);");
   assert.equal(f.length, 1, 'the unbound spawner form must not escape the scan');
   assert.equal(f[0].role, 'script');

package/tests/executed_closure.mjs

@@ -2,15 +2,15 @@
 //
 // THE DEFECT. resolveBranchConflicts and refreshStaleGenerated clone a builder's branch
 // and run code out of it with the live server's environment. The audit prescribed
-// restoring scripts/gds/ and .gitattributes from origin/main after the merge and before
+// restoring scripts/bongos/ and .gitattributes from origin/main after the merge and before
 // runGenerators. Building it that way would have left the hole open TWICE, and both of
 // those are what these tests pin:
 //
 //   TOO NARROW — the generators require ../../src/instance-config, and gen-api-docs also
 //     requires src/bongos/route-rank-check, api-prefix and routes/_helpers. A restore
-//     scoped to scripts/gds/ leaves those builder-controlled and still executed.
+//     scoped to scripts/bongos/ leaves those builder-controlled and still executed.
 //   TOO LATE   — `git merge` runs the otb-regen driver, whose registered command is
-//     `node scripts/gds/git-merge-regen.js` by RELATIVE path with cwd at the clone root.
+//     `node scripts/bongos/git-merge-regen.js` by RELATIVE path with cwd at the clone root.
 //     That is the clone's copy, and it runs at the merge, before any post-merge step.
 //
 // So the assertions below care about two things: that the closure reaches past
@@ -89,14 +89,14 @@ test('every computed require inside the closure is one we have accounted for', (
   // ever loads modules, this closure must grow to cover modules/**/routes/*.js.
   const ACCOUNTED = new Map([
     ['src/module-loader/loader.js', 2],   // routes/<key>.js + pollerPath, from loadModules()
-    ['scripts/gds/onboard.js', 3],        // provision/oauth-secret/onboardPlan, inside the verb
+    ['scripts/bongos/onboard.js', 3],        // provision/oauth-secret/onboardPlan, inside the verb
     // 6th added by task 1003869: leak-scan-allowlist.js. Unlike the others this one IS
     // top-level, so it resolves whenever package-core is required — but it does not widen
     // the closure: the module is pure data plus three predicates, does no I/O, dispatches
     // nothing dynamically, and its single require (back to package-core, for the literal
     // floor) is lazy and inside a function.
-    ['scripts/gds/package-core.js', 6],   // publish-manifest/mirror-redact/secret-scrub/leak-scan-allowlist/…
-    ['scripts/gds/upgrade.js', 1],        // a `node -e` child, not a require in this process
+    ['scripts/bongos/package-core.js', 6],   // publish-manifest/mirror-redact/secret-scrub/leak-scan-allowlist/…
+    ['scripts/bongos/upgrade.js', 1],        // a `node -e` child, not a require in this process
     // Added by task 1003081: upgrade.js's pin push needs the owner-credential helpers,
     // and requiring provision.js for them would have pulled provision-config/-repo/-units
     // (7/1/1 unaccounted computed requires) into the closure. This LEAF is the whole of
@@ -104,8 +104,14 @@ test('every computed require inside the closure is one we have accounted for', (
     // modules/provisioning + src/bongos/pool in lookupInstanceRow — each inside a function
     // body reached only from the pin push, which no generator calls. Its top level requires
     // node builtins only, so it drags nothing else in behind it.
-    ['scripts/gds/provision-repo-auth.js', 3],
-    ['scripts/gds/gen-api-docs.js', 1],   // require(path.join(CORE_ROOT,'package.json')) — JSON
+    ['scripts/bongos/provision-repo-auth.js', 3],
+    ['scripts/bongos/gen-api-docs.js', 1],   // require(path.join(CORE_ROOT,'package.json')) — JSON
+    // Added by task 1004848: the forwarder runtime the old-path ENTRYPOINTS reach. Its one
+    // computed require is `require(path.join(__dirname, rel))`, where `rel` is the string
+    // literal the forwarder itself passes — so it can only ever load scripts/bongos/<same
+    // name>, and every such name on this path is already an ENTRYPOINT. Run as a merge
+    // driver it does not require at all: it re-execs that same file as a child process.
+    ['scripts/bongos/forwarder.js', 1],
   ]);
 
   // Strip line comments and single/double-quoted strings first: prose and message strings
@@ -157,10 +163,10 @@ test('ENTRYPOINTS covers every generator the resolver actually runs', () => {
 });
 
 test('both script-tree spellings are entrypoints while the compat shim exists', () => {
-  // Task 1003705 moves these to scripts/bongos/ and leaves scripts/gds/ holding WORKING
+  // Task 1003705 moves these to scripts/bongos/ and leaves scripts/bongos/ holding WORKING
   // forwarders. The driver command is a relative path, so the old spelling still
   // executes; a guard that knew only one name would stop seeing edits to live code.
-  for (const tree of ['scripts/gds', 'scripts/bongos']) {
+  for (const tree of ['scripts/bongos', 'scripts/bongos']) {
     assert.ok(ec.ENTRYPOINTS.some((p) => p === `${tree}/git-merge-regen.js`),
       `${tree}/git-merge-regen.js must be an entrypoint while both trees can execute`);
   }
@@ -206,7 +212,7 @@ function mkDeps(touched, over = {}) {
   const exec = mkExec(touched);
   return {
     exec,
-    executedClosure: ['.gitattributes', 'src/instance-config.js', 'scripts/gds/git-merge-regen.js'],
+    executedClosure: ['.gitattributes', 'src/instance-config.js', 'scripts/bongos/git-merge-regen.js'],
     runGenerators: async () => ({ code: 0 }),
     githubPush: {
       isConfigured: () => true,
@@ -245,7 +251,7 @@ for (const [label, fn, okKey] of [
   test(`${label} refuses BEFORE running git merge`, async () => {
     // The assertion that distinguishes this fix from the one the audit prescribed. A
     // post-merge restore would already have run the branch's merge driver by now.
-    const deps = mkDeps(['scripts/gds/git-merge-regen.js']);
+    const deps = mkDeps(['scripts/bongos/git-merge-regen.js']);
     const r = await fn(deps);
     assert.equal(r.skipped, 'branch_modifies_executed_code');
     assert.equal(ranMerge(deps._exec), false,

package/tests/file_map.mjs

@@ -11,7 +11,7 @@ import path from 'node:path';
 
 const require = createRequire(import.meta.url);
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
-const GEN = path.join(ROOT, 'scripts', 'gds', 'gen-file-map.js');
+const GEN = path.join(ROOT, 'scripts', 'bongos', 'gen-file-map.js');
 const gen = require(GEN); // require.main-guarded → importing runs no main()
 
 function run(args) {

package/tests/find_untested.mjs

@@ -1,6 +1,6 @@
 // tests/find_untested.mjs
 //
-// Unit test for scripts/gds/find-untested.js (task 1002458) — the finder the newcomer
+// Unit test for scripts/bongos/find-untested.js (task 1002458) — the finder the newcomer
 // "add a unit test" chore runs instead of a hardcoded target list. The cases pin the two
 // failures that made the naive scans unusable, measured before it was built:
 //   - BASENAME matching falsely marks a common-word module (settings.js) as tested because
@@ -15,7 +15,7 @@ import { strict as assert } from 'node:assert';
 import { createRequire } from 'node:module';
 
 const require = createRequire(import.meta.url);
-const fu = require('../scripts/gds/find-untested.js');
+const fu = require('../scripts/bongos/find-untested.js');
 
 let passed = 0;
 let failed = 0;
@@ -28,8 +28,8 @@ const MODS = new Set([
   'modules/hall-ui/settings.js',
   'modules/government/db.js',
   'modules/government/board.js',
-  'scripts/gds/memory-map.js',
-  'scripts/gds/grade-smoke.js',
+  'scripts/bongos/memory-map.js',
+  'scripts/bongos/grade-smoke.js',
   'modules/lifecycle/index.js',
 ]);
 const hits = (src, file) => [...fu.extractPathRefs(src, file)].map((r) => fu.resolveRef(r, MODS)).filter(Boolean).sort();
@@ -49,9 +49,9 @@ test('path.join(ROOT, …) segments, and a const prefix, are evaluated (the memo
     "const ROOT = path.resolve(__dirname, '..');",
     "const GOV = path.join(ROOT, 'modules', 'government');",
     "const db = require(path.join(GOV, 'db.js'));",
-    "const mm = require(path.join(ROOT, 'scripts', 'gds', 'memory-map.js'));",
+    "const mm = require(path.join(ROOT, 'scripts', 'bongos', 'memory-map.js'));",
   ].join('\n');
-  assert.deepEqual(hits(src, 'tests/x.mjs'), ['modules/government/db.js', 'scripts/gds/memory-map.js']);
+  assert.deepEqual(hits(src, 'tests/x.mjs'), ['modules/government/db.js', 'scripts/bongos/memory-map.js']);
 });
 
 test('an unknown leading identifier stands for the repo root; one in the middle does not', () => {
@@ -60,14 +60,14 @@ test('an unknown leading identifier stands for the repo root; one in the middle
 });
 
 test('a spawned script, new URL(…, import.meta.url) and a directory index all count', () => {
-  assert.deepEqual(hits("spawnSync(process.execPath, ['scripts/gds/grade-smoke.js', '--dry'])", 'tests/x.mjs'), ['scripts/gds/grade-smoke.js']);
-  assert.deepEqual(hits("await import(new URL('../scripts/gds/memory-map.js', import.meta.url))", 'tests/x.mjs'), ['scripts/gds/memory-map.js']);
+  assert.deepEqual(hits("spawnSync(process.execPath, ['scripts/bongos/grade-smoke.js', '--dry'])", 'tests/x.mjs'), ['scripts/bongos/grade-smoke.js']);
+  assert.deepEqual(hits("await import(new URL('../scripts/bongos/memory-map.js', import.meta.url))", 'tests/x.mjs'), ['scripts/bongos/memory-map.js']);
   assert.deepEqual(hits("require('../modules/lifecycle')", 'tests/x.mjs'), ['modules/lifecycle/index.js']);
 });
 
 test('template literals with interpolation and URLs are ignored, not mis-resolved', () => {
   assert.deepEqual(hits('require(`../modules/${k}/settings.js`)', 'tests/x.mjs'), []);
-  assert.deepEqual(hits("fetch('https://example.com/scripts/gds/memory-map.js')", 'tests/x.mjs'), []);
+  assert.deepEqual(hits("fetch('https://example.com/scripts/bongos/memory-map.js')", 'tests/x.mjs'), []);
 });
 
 test('extractRequires separates packages from local edges and ignores comment mentions', () => {
@@ -92,8 +92,8 @@ test('ownImpurity: pg, a db module, child_process and fetch are hard; fs is soft
 test('isTestPath covers every test root and *.test.js siblings, and nothing else', () => {
   assert.equal(fu.isTestPath('tests/a.mjs'), true);
   assert.equal(fu.isTestPath('modules/lifecycle/tests/a.mjs'), true);
-  assert.equal(fu.isTestPath('scripts/gds/newcomer-floor.test.js'), true);
-  assert.equal(fu.isTestPath('scripts/gds/latest.js'), false);
+  assert.equal(fu.isTestPath('scripts/bongos/newcomer-floor.test.js'), true);
+  assert.equal(fu.isTestPath('scripts/bongos/latest.js'), false);
 });
 
 test('hasExports / countExports read CommonJS and ESM', () => {
@@ -104,7 +104,7 @@ test('hasExports / countExports read CommonJS and ESM', () => {
 });
 
 test('normRel clamps a climb above the root instead of escaping it', () => {
-  assert.equal(fu.normRel('tests/../../../scripts/gds/x.js'), 'scripts/gds/x.js');
+  assert.equal(fu.normRel('tests/../../../scripts/bongos/x.js'), 'scripts/bongos/x.js');
   assert.equal(fu.normRel('./a//b/./c'), 'a/b/c');
   assert.equal(fu.normRel('..'), '');
 });
@@ -124,7 +124,7 @@ test('the live tree: tested modules the naive scans got wrong are NOT candidates
   const by = new Map(rows.map((r) => [r.path, r]));
   // A scan that finds nothing looks exactly like a clean tree, so assert it found a lot.
   assert.ok(rows.length > 300, `expected hundreds of exported modules, scanned ${rows.length}`);
-  for (const p of ['scripts/gds/memory-map.js', 'modules/grading/grader-workers/worker-verdict.js', 'scripts/gds/find-untested.js']) {
+  for (const p of ['scripts/bongos/memory-map.js', 'modules/grading/grader-workers/worker-verdict.js', 'scripts/bongos/find-untested.js']) {
     assert.ok(by.has(p), `${p} should be scanned`);
     assert.equal(by.get(p).tested, true, `${p} has a test naming it`);
   }

package/tests/first_admin_bootstrap.mjs

@@ -19,7 +19,7 @@ test('firstAdminLogin: resolves from the branding pack when no env override', ()
   // Asserts the RESOLUTION, not one instance's owner. This used to hardcode the OTB
   // founder's login, which both broke on any other instance (the neutral pack sets
   // firstAdmin: "") and put a founder identity in a test — the thing
-  // scripts/gds/audit-authorship.sh exists to keep out (task 1002470).
+  // scripts/bongos/audit-authorship.sh exists to keep out (task 1002470).
   clearEnv();
   const configured = (branding().firstAdmin || '').trim() || null;
   assert.equal(firstAdminLogin(), configured,