@bongos/core 1.21.175 → 1.21.176

package/tests/fitness.mjs

@@ -10,7 +10,7 @@ import { onDiskModuleKeys } from './helpers.mjs';
 
 const require = createRequire(import.meta.url);
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
-const fitness = require(path.join(ROOT, 'scripts', 'gds', 'fitness.js'));
+const fitness = require(path.join(ROOT, 'scripts', 'bongos', 'fitness.js'));
 
 
 test('all fitness checks pass with no hard failures (the CI gate)', () => {
@@ -89,7 +89,7 @@ test('a pointer at a missing rule file hard-fails', () => {
   const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'charter-ptr-'));
   fs.writeFileSync(path.join(dir, 'CLAUDE.md'), `${CHARTER_HEADING}\ncharter: ${CHARTER_RULE_REL}\n`);
   const out = require('node:child_process').execFileSync(process.execPath,
-    ['-e', `const f=require(${JSON.stringify(path.join(ROOT, 'scripts/gds/fitness.js'))});process.stdout.write(JSON.stringify(f.checkClaudeMdBudget()))`],
+    ['-e', `const f=require(${JSON.stringify(path.join(ROOT, 'scripts/bongos/fitness.js'))});process.stdout.write(JSON.stringify(f.checkClaudeMdBudget()))`],
     { env: { ...process.env, BONGOS_INSTANCE_ROOT: dir }, encoding: 'utf8' });
   const r = JSON.parse(out);
   assert.equal(r.hardFail, true, 'a pointer to nothing is worse than no pointer');
@@ -111,7 +111,7 @@ test('CLAUDE.md char budget is ratcheted and ordered (target < ceiling, live fil
 // so an untested guard would undermine its own rationale. Hence both legs, the same
 // pair every sibling guard here carries: the live tree is clean, AND the check
 // actually catches the failure rather than being a no-op.
-const rolePacks = require(path.join(ROOT, 'scripts', 'gds', 'role-pack-guard.js'));
+const rolePacks = require(path.join(ROOT, 'scripts', 'bongos', 'role-pack-guard.js'));
 
 test('role packs: the live registry resolves and every pack is under budget', () => {
   const r = rolePacks.checkRolePacks();
@@ -189,7 +189,7 @@ test('role pack guard actually CATCHES a missing pack, a pointerless entry, and
 // shared source they cannot have: rename a pack and this fails instead of the hall
 // shipping a button that opens nothing.
 test('ship-card routing agrees with the role registry, entry for entry', () => {
-  const registry = JSON.parse(fs.readFileSync(path.join(ROOT, 'scripts', 'gds', 'discipline-modes.json'), 'utf8')).modes;
+  const registry = JSON.parse(fs.readFileSync(path.join(ROOT, 'scripts', 'bongos', 'discipline-modes.json'), 'utf8')).modes;
   const card = require(path.join(ROOT, 'modules', 'lifecycle', 'ship-card.js'));
   for (const [discipline, mode] of Object.entries(registry)) {
     const cmd = card.buildCardModel({ stage: 'claimed', taskId: 1, discipline, brand: { currency: 'credits' } }).action.cmd;
@@ -201,7 +201,7 @@ test('ship-card routing agrees with the role registry, entry for entry', () => {
 test('nested CLAUDE.md present for every high-traffic dir', () => {
   const r = fitness.checkNestedDocsPresent();
   assert.equal(r.hardFail, false, r.violations.join('\n'));
-  assert.deepEqual(fitness.HIGH_TRAFFIC, ['src/bongos', 'src/bongos/routes', 'scripts/gds']);
+  assert.deepEqual(fitness.HIGH_TRAFFIC, ['src/bongos', 'src/bongos/routes', 'scripts/bongos']);
 });
 
 test('no route bypasses server-side rank checks (ADR 0016)', () => {
@@ -361,7 +361,7 @@ test('the migration checks keep the BROAD definition — narrowing would lose co
   // still be namespace/stem-checked, because schema_migrations is stem-keyed and
   // a collision is SILENTLY skipped. So discoveredModuleKeys stays broad, and the
   // migration checks must still be calling it.
-  const src = fs.readFileSync(path.join(ROOT, 'scripts/gds/fitness.js'), 'utf8');
+  const src = fs.readFileSync(path.join(ROOT, 'scripts/bongos/fitness.js'), 'utf8');
   const additive = src.slice(src.indexOf('function checkModuleMigrationsAdditive'));
   assert.match(
     additive.slice(0, 600),
@@ -512,14 +512,14 @@ test('migration-namespacing actually CATCHES a new bare core migration (not a no
   // The pure helper the check is built on: a bare core migration ABOVE the legacy cutoff
   // must be flagged as needing the core_ prefix (else it could collide with an instance/
   // module migration across repos). Proves the gate has teeth without polluting the tree.
-  const migNs = require(path.join(ROOT, 'scripts', 'gds', 'migration-namespace.js'));
+  const migNs = require(path.join(ROOT, 'scripts', 'bongos', 'migration-namespace.js'));
   const v = migNs.filenameViolation('core', '188_new_bare.sql');
   assert.ok(v && /core_-prefixed/.test(v), 'a new bare core migration must be flagged');
   assert.equal(migNs.filenameViolation('core', 'core_188_new_bare.sql'), null, 'the namespaced form passes');
 });
 
 test('migration-namespacing actually CATCHES a cross-source stem collision (the silent-skip bug)', () => {
-  const migNs = require(path.join(ROOT, 'scripts', 'gds', 'migration-namespace.js'));
+  const migNs = require(path.join(ROOT, 'scripts', 'bongos', 'migration-namespace.js'));
   const collisions = migNs.stemCollisions([
     { source: 'core', basename: '188_x.sql' },
     { source: 'instance', basename: '188_x.sql' },
@@ -534,7 +534,7 @@ test('migration-namespacing actually CATCHES a cross-source stem collision (the
 // branches each landed an ADR numbered 0181 under different slugs, so git saw no path
 // collision, README.md auto-merged into two rows, and every gate passed.
 
-const adrNs = require(path.join(ROOT, 'scripts', 'gds', 'adr-namespace.js'));
+const adrNs = require(path.join(ROOT, 'scripts', 'bongos', 'adr-namespace.js'));
 
 test('ADR numbering: the live tree is clean (all 20 known duplicates grandfathered)', () => {
   const r = fitness.checkAdrNumbering();
@@ -893,7 +893,7 @@ test('identity gate: comment markers inside strings and regex literals are inert
   assert.equal(scanPromptIdentity('x.js', 'const x = a / b / c;\nconst leak = "amazonprimea";').length, 1);
 });
 
-test('identity gate scans the WHOLE scripts/ root, not just scripts/gds (task 1002756)', () => {
+test('identity gate scans the WHOLE scripts/ root, not just scripts/bongos (task 1002756)', () => {
   const r = fitness.checkKernelPromptsNoHardcodedIdentity();
   assert.match(r.note, /scripts\/\*\* \(whole root/, 'note must document the widened root');
   assert.equal(r.hardFail, false, 'live tree must be clean under the widened scan:\n' + r.violations.join('\n'));
@@ -969,7 +969,7 @@ test('KERNEL_FILES is exported exactly ONCE and still resolves (task 1002795)',
   // moment the two diverge. Task 1002795 removed the duplicate. Two grader
   // rounds read that `-  KERNEL_FILES,` line as "the export was removed", so pin
   // the actual behaviour here rather than arguing it in a ship note.
-  const src = fs.readFileSync(path.join(ROOT, 'scripts/gds/fitness.js'), 'utf8');
+  const src = fs.readFileSync(path.join(ROOT, 'scripts/bongos/fitness.js'), 'utf8');
   const decls = src.split('\n').filter((l) => l.trim() === 'KERNEL_FILES,');
   assert.equal(decls.length, 1, 'exactly one export entry — no duplicate key');
   assert.ok(Array.isArray(fitness.KERNEL_FILES), 'and it still resolves to an array');
@@ -978,12 +978,12 @@ test('KERNEL_FILES is exported exactly ONCE and still resolves (task 1002795)',
 
 // ---- the dev box stays retired (task 1003899, ADR 0346) ---------------------
 //
-// scripts/gds/dev-box-guard.js fails CI when a retired dev-box name reappears.
+// scripts/bongos/dev-box-guard.js fails CI when a retired dev-box name reappears.
 // Each rule is proven by PLANTING a violation through the injectable files/read
 // seam, never by assuming the regex is right. The retired names are assembled at
 // runtime (KEY = 'dev' + '-box', …) so this file never contains them literally and
 // needs no exemption of its own.
-const devBoxGuard = require(path.join(ROOT, 'scripts', 'gds', 'dev-box-guard.js'));
+const devBoxGuard = require(path.join(ROOT, 'scripts', 'bongos', 'dev-box-guard.js'));
 const KEY = 'dev' + '-box';
 const TABLE = 'builder' + '_boxes';
 const COLUMN = 'box' + '_blocked_reason';
@@ -1001,7 +1001,7 @@ test('dev-box guard: the clean tree passes, and it scans the real tracked files'
 });
 
 test('dev-box guard: it is wired into the fitness CHECKS that CI runs', () => {
-  const src = fs.readFileSync(path.join(ROOT, 'scripts', 'gds', 'fitness.js'), 'utf8');
+  const src = fs.readFileSync(path.join(ROOT, 'scripts', 'bongos', 'fitness.js'), 'utf8');
   assert.match(src, /require\('\.\/dev-box-guard\.js'\)\.checkNoDevBox/);
   const names = fitness.runAll().map((r) => r.name);
   assert.ok(names.includes('the dev box stays retired (ADR 0346)'), 'runAll() includes the guard');
@@ -1021,12 +1021,12 @@ test('dev-box guard: each rule FAILS on a planted violation', () => {
     const r = plant(rel, text);
     assert.equal(r.hardFail, true, `${label}: a planted violation must fail the check`);
     assert.match(r.violations[0], /ADR 0346/, `${label}: the failure names the ADR`);
-    assert.match(r.note, /DEV_BOX_EXEMPT in scripts\/gds\/dev-box-guard\.js/, `${label}: and the one exemption list`);
+    assert.match(r.note, /DEV_BOX_EXEMPT in scripts\/(?:gds|bongos)\/dev-box-guard\.js/, `${label}: and the one exemption list`);
   }
 });
 
 test('dev-box guard: a retired PATH fails even with harmless contents', () => {
-  for (const rel of [`scripts/gds/${BOX}.js`, `infra/${BOX}-provision.sh`, `modules/${KEY}/module.json`, '.devcontainer/devcontainer.json']) {
+  for (const rel of [`scripts/bongos/${BOX}.js`, `infra/${BOX}-provision.sh`, `modules/${KEY}/module.json`, '.devcontainer/devcontainer.json']) {
     const r = plant(rel, '{}');
     assert.equal(r.hardFail, true, `${rel} must fail`);
     assert.match(r.violations.join('\n'), /path: a retired dev-box location/);

package/tests/fitness_gds_ratchet.mjs

@@ -19,8 +19,8 @@ import { fileURLToPath } from 'node:url';
 
 const require = createRequire(import.meta.url);
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
-const scan = require(path.join(ROOT, 'scripts', 'gds', 'gds-literal-scan.js'));
-const ratchets = require(path.join(ROOT, 'scripts', 'gds', 'fitness-ratchets.js'));
+const scan = require(path.join(ROOT, 'scripts', 'bongos', 'gds-literal-scan.js'));
+const ratchets = require(path.join(ROOT, 'scripts', 'bongos', 'fitness-ratchets.js'));
 
 const LITERAL = ['G', 'D', 'S'].join(''); // built, not written, so this file needs no exemption of its own
 

package/tests/fitness_installed_core.mjs

@@ -5,7 +5,7 @@
 // own, just an ignored folder inside the project's repo. Every fitness check guards the
 // core's own source and enumerates it with git, so each scan found nothing and either
 // threw ("docs-entropy: scan defect — enumerated 0 tracked markdown files") or reported
-// a scan defect — `bongos exec scripts/gds/fitness.js` crashed on toast, on 1.21.20 and
+// a scan defect — `bongos exec scripts/bongos/fitness.js` crashed on toast, on 1.21.20 and
 // again on 1.21.115. The core repo's CI already ran this gate before publishing, so in an
 // installed core it steps aside, and says so.
 import assert from 'node:assert/strict';
@@ -19,7 +19,7 @@ import { fileURLToPath } from 'node:url';
 
 const require = createRequire(import.meta.url);
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
-const lib = require(path.join(ROOT, 'scripts', 'gds', 'fitness-lib.js'));
+const lib = require(path.join(ROOT, 'scripts', 'bongos', 'fitness-lib.js'));
 
 const git = (cwd, ...args) => execFileSync('git', args, { cwd, encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'] });
 
@@ -111,7 +111,7 @@ test('end to end: fitness.js run from <project>/node_modules/@bongos/core exits
   let out = '';
   let status = 0;
   try {
-    out = execFileSync(process.execPath, [path.join(core, 'scripts', 'gds', 'fitness.js')], {
+    out = execFileSync(process.execPath, [path.join(core, 'scripts', 'bongos', 'fitness.js')], {
       cwd: project,
       encoding: 'utf8',
       stdio: ['ignore', 'pipe', 'pipe'],

package/tests/fitness_no_raw_nul.mjs

@@ -29,7 +29,7 @@ import { fileURLToPath } from 'node:url';
 
 const require = createRequire(import.meta.url);
 const REPO_ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
-const { scanForRawNul } = require(path.join(REPO_ROOT, 'scripts/gds/fitness.js'));
+const { scanForRawNul } = require(path.join(REPO_ROOT, 'scripts/bongos/fitness.js'));
 
 // Built at runtime so THIS file never carries the byte it is about — otherwise the
 // check's own test would be its first violation.

package/tests/fitness_ratchets.mjs

@@ -75,7 +75,7 @@ const CONFIG_WRITE_ARGS = {
   }
 }
 
-const rat = require(path.join(ROOT, 'scripts', 'gds', 'fitness-ratchets.js'));
+const rat = require(path.join(ROOT, 'scripts', 'bongos', 'fitness-ratchets.js'));
 
 test('ratchet compare: worse fails, equal passes, better nudges, unknown warns', () => {
   const base = { a: 10, b: 5 };
@@ -138,11 +138,11 @@ test('console counting only sees server paths', () => {
   assert.equal(rat.isServerPath('src/bongos/auth.js'), true);
   assert.equal(rat.isServerPath('modules/lifecycle/db.js'), true);
   assert.equal(rat.isServerPath('modules/hall-ui/public/builders.js'), false, 'browser surfaces excluded');
-  assert.equal(rat.isServerPath('scripts/gds/ship.js'), false, 'CLI stdout is legitimate UX');
+  assert.equal(rat.isServerPath('scripts/bongos/ship.js'), false, 'CLI stdout is legitimate UX');
   assert.equal(rat.isServerPath('modules/security/tests/floor.mjs'), false);
   const n = rat.consoleCallCount(new Map([
     ['src/x.js', 'console.log(1); console.error(2);'],
-    ['scripts/gds/y.js', 'console.log(1);'],
+    ['scripts/bongos/y.js', 'console.log(1);'],
   ]));
   assert.equal(n, 2);
 });

package/tests/fitness_scope_roster.mjs

@@ -27,10 +27,10 @@ import { fileURLToPath } from 'node:url';
 
 const require = createRequire(import.meta.url);
 const REPO_ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
-const { discoveredModuleKeys } = require(path.join(REPO_ROOT, 'scripts/gds/fitness.js'));
+const { discoveredModuleKeys } = require(path.join(REPO_ROOT, 'scripts/bongos/fitness.js'));
 // The check lives in its own file (the role-pack-guard.js precedent) so fitness.js stays
 // under the size ratchet; module discovery stays in fitness.js, which owns it.
-const { scanScopeRosterCoverage } = require(path.join(REPO_ROOT, 'scripts/gds/scope-roster-guard.js'));
+const { scanScopeRosterCoverage } = require(path.join(REPO_ROOT, 'scripts/bongos/scope-roster-guard.js'));
 const scopeMap = require(path.join(REPO_ROOT, 'src/bongos/module-scope-map.js'));
 
 const nothingExists = () => false;

package/tests/fitness_two_root.mjs

@@ -44,7 +44,7 @@ t('checkClaudeMdBudget reads the CLAUDE.md at resolveInstanceRoot(), not a hardc
   // the ceiling), which proves the read followed OTB_INSTANCE_ROOT.
   writeFileSync(join(dir, 'CLAUDE.md'), '## Working with this file (content charter)\n' + 'x'.repeat(60000));
   const r = runWith(dir, `
-    const f = require(${JSON.stringify(join(ROOT, 'scripts/gds/fitness.js'))});
+    const f = require(${JSON.stringify(join(ROOT, 'scripts/bongos/fitness.js'))});
     process.stdout.write(JSON.stringify(f.checkClaudeMdBudget()));
   `);
   assert.equal(r.hardFail, true, 'the fixture CLAUDE.md is over the char ceiling → must hard-fail');
@@ -53,7 +53,7 @@ t('checkClaudeMdBudget reads the CLAUDE.md at resolveInstanceRoot(), not a hardc
 
 t('checkClaudeMdBudget still PASSES when the instance root is the real repo (byte-identical default)', () => {
   const r = runWith(ROOT, `
-    const f = require(${JSON.stringify(join(ROOT, 'scripts/gds/fitness.js'))});
+    const f = require(${JSON.stringify(join(ROOT, 'scripts/bongos/fitness.js'))});
     process.stdout.write(JSON.stringify(f.checkClaudeMdBudget()));
   `);
   assert.equal(r.hardFail, false, 'the live CLAUDE.md is under the ceiling');
@@ -62,11 +62,11 @@ t('checkClaudeMdBudget still PASSES when the instance root is the real repo (byt
 // ---- fitness: core checks stay on the CORE root regardless of instance root ------------------
 t('checkNestedDocsPresent stays clean even with a divergent (empty) instance root', () => {
   const dir = mkdtempSync(join(tmpdir(), 'w6-inst-'));
-  // HIGH_TRAFFIC nested docs (src/bongos, scripts/gds, …) are CORE — they must still resolve against
+  // HIGH_TRAFFIC nested docs (src/bongos, scripts/bongos, …) are CORE — they must still resolve against
   // the real core root even though the instance root is an empty temp dir. If they wrongly used the
   // instance root, all three would be "missing" → hard fail.
   const r = runWith(dir, `
-    const f = require(${JSON.stringify(join(ROOT, 'scripts/gds/fitness.js'))});
+    const f = require(${JSON.stringify(join(ROOT, 'scripts/bongos/fitness.js'))});
     process.stdout.write(JSON.stringify(f.checkNestedDocsPresent()));
   `);
   assert.equal(r.hardFail, false, 'core nested docs resolve against the core root, not the instance root');
@@ -79,7 +79,7 @@ t('gen-file-map lists the INSTANCE root .claude/skills, not the core repo', () =
   mkdirSync(join(dir, '.claude', 'scheduled-tasks'), { recursive: true });
   const model = runWith(dir, `
     const path = require('node:path');
-    const g = require(${JSON.stringify(join(ROOT, 'scripts/gds/gen-file-map.js'))});
+    const g = require(${JSON.stringify(join(ROOT, 'scripts/bongos/gen-file-map.js'))});
     process.stdout.write(JSON.stringify(g.buildModel()));
   `);
   const skills = model.find((s) => s.id === 'skills');
@@ -92,12 +92,12 @@ t('gen-file-map lists the INSTANCE root .claude/skills, not the core repo', () =
 t('gen-repo-map maps CORE files (fitness.js) regardless of a divergent instance root', () => {
   const dir = mkdtempSync(join(tmpdir(), 'w6-inst-')); // empty instance root
   const model = runWith(dir, `
-    const g = require(${JSON.stringify(join(ROOT, 'scripts/gds/gen-repo-map.js'))});
+    const g = require(${JSON.stringify(join(ROOT, 'scripts/bongos/gen-repo-map.js'))});
     const m = g.buildModel();
-    process.stdout.write(JSON.stringify({ files: m.files.length, hasFitness: m.byFile.some((f) => f.rel === 'scripts/gds/fitness.js') }));
+    process.stdout.write(JSON.stringify({ files: m.files.length, hasFitness: m.byFile.some((f) => f.rel === 'scripts/bongos/fitness.js') }));
   `);
   assert.ok(model.files > 50, `core scan should still find many files (got ${model.files})`);
-  assert.equal(model.hasFitness, true, 'the core file scripts/gds/fitness.js is mapped from the core root');
+  assert.equal(model.hasFitness, true, 'the core file scripts/bongos/fitness.js is mapped from the core root');
 });
 
 console.log(`\nfitness_two_root: ${passed} passed, ${failed} failed`);

package/tests/fixtures/accessibility-replay.json

@@ -56,7 +56,7 @@
       "profile": { "technical_level": "engineer", "toolchain_familiarity": "comfortable" },
       "replies": {
         "what-to-work-on": [
-          "Four ready. Run `node scripts/gds/start.js`, then claim a task by id.",
+          "Four ready. Run `node scripts/bongos/start.js`, then claim a task by id.",
           "Second row is a refactor behind the module boundary. The claim is idempotent, so re-running it is a no-op."
         ],
         "make-it-live": [
@@ -64,7 +64,7 @@
           "The control flow is enqueue, drain, health-gate, rollback. SIGTERM on a failed probe and the symlink goes back."
         ],
         "art-key": [
-          "Art key is unset. Run `node scripts/gds/api.js` against the settings route, or set it in Settings - either path ends up in the same env file.",
+          "Art key is unset. Run `node scripts/bongos/api.js` against the settings route, or set it in Settings - either path ends up in the same env file.",
           "The upstream call is async and the error surfaces on stderr, not in the hall."
         ],
         "session-expired": [
@@ -72,15 +72,15 @@
           "The JWT is short-lived by design and the refresh is idempotent, so a double call is harmless."
         ],
         "how-you-talk": [
-          "That is the interaction profile. Run `node scripts/gds/api.js PATCH /settings`, or set it in Settings.",
+          "That is the interaction profile. Run `node scripts/bongos/api.js PATCH /settings`, or set it in Settings.",
           "It is injected per session by the Conductor hook and never memoized, so the change takes on the next turn."
         ],
         "credits": [
-          "Cost-plus. Run `node scripts/gds/api.js GET /builders/me` for your balance, or read the leaderboard.",
+          "Cost-plus. Run `node scripts/bongos/api.js GET /builders/me` for your balance, or read the leaderboard.",
           "The write is an upsert keyed on the session, so a replayed ship cannot double-pay."
         ],
         "stuck": [
-          "Four open blockers. Run `node scripts/gds/blocker-review.js` to walk them.",
+          "Four open blockers. Run `node scripts/bongos/blocker-review.js` to walk them.",
           "Resolving one will upsert the linked rows to ready inside the same transaction."
         ],
         "why-slow": [

package/tests/fixtures/grade-replay/recorded-panel-grades.json

@@ -1,4 +1,4 @@
-{"note":"Recorded panel grades for the differential replay (tests/grade_engine_replay.mjs). Generated by scripts/gds/grade-replay.js --live --write-fixture: only grades whose replay agreed with the stored row, one per panel shape. Issue summaries, their files and stderr are hashed.",
+{"note":"Recorded panel grades for the differential replay (tests/grade_engine_replay.mjs). Generated by scripts/bongos/grade-replay.js --live --write-fixture: only grades whose replay agreed with the stored row, one per panel shape. Issue summaries, their files and stderr are hashed.",
 "grades":[
 {"task_id":"1004274","graded_at":"2026-09-25T21:46:43.130Z","recorded":{"panel_outcome":"pass","pass_count":4,"concerns_count":0,"fail_count":0,"error_count":0,"worker_count":4,"panel_cost_usd":3.0816240000000006,"confidence":0.8,"rubric":{"functional_fidelity":9,"code_quality":8,"economy":8,"security_score":9,"efficiency_score":8}},"workers":[{"kind":"narc","verdict":"pass","error":null,"scores":{"functional_fidelity":9},"confidence":0.75,"model":"claude-sonnet-5","cost_usd":0.433313,"retried":false,"issues":[]},{"kind":"quality","verdict":"pass","error":null,"scores":{"economy":8,"code_quality":8},"confidence":0.85,"model":"claude-sonnet-5","cost_usd":1.7134175000000003,"retried":false,"issues":[{"severity":"nit","file":"h:127350d220","summary":"h:3305acb211"}]},{"kind":"hacker","verdict":"pass","error":null,"scores":{"security_score":9},"confidence":0.8,"model":"claude-sonnet-5","cost_usd":0.493828,"retried":false,"issues":[{"severity":"nit","file":"h:a00915aecd","summary":"h:bd972ce028"}]},{"kind":"efficiency","verdict":"pass","error":null,"scores":{"efficiency_score":8},"confidence":0.8,"model":"claude-sonnet-5","cost_usd":0.4410655,"retried":false,"issues":[{"severity":"minor","file":"h:127350d220","summary":"h:e96dc885ad"}]}]},
 {"task_id":"1001436","graded_at":"2026-09-25T21:40:47.504Z","recorded":{"panel_outcome":"pass","pass_count":4,"concerns_count":0,"fail_count":0,"error_count":0,"worker_count":4,"panel_cost_usd":2.76109025,"confidence":0.825,"rubric":{"functional_fidelity":10,"code_quality":8,"economy":6,"security_score":9,"efficiency_score":8}},"workers":[{"kind":"narc","verdict":"pass","error":null,"scores":{"functional_fidelity":10},"confidence":0.9,"model":"claude-sonnet-5","cost_usd":0.43844425,"retried":true,"issues":[]},{"kind":"quality","verdict":"pass","error":null,"scores":{"economy":6,"code_quality":8},"confidence":0.8,"model":"claude-sonnet-5","cost_usd":1.46089875,"retried":false,"issues":[{"severity":"minor","file":"h:d3eb82782a","summary":"h:35c1a97948"},{"severity":"minor","file":"h:d3eb82782a","summary":"h:ec38cb5123"},{"severity":"nit","file":"h:9b13fff019","summary":"h:c7a56db356"}]},{"kind":"hacker","verdict":"pass","error":null,"scores":{"security_score":9},"confidence":0.85,"model":"claude-sonnet-5","cost_usd":0.40146299999999996,"retried":false,"issues":[]},{"kind":"efficiency","verdict":"pass","error":null,"scores":{"efficiency_score":8},"confidence":0.75,"model":"claude-sonnet-5","cost_usd":0.46028425,"retried":false,"issues":[{"severity":"minor","file":"h:d3eb82782a","summary":"h:0ba7cc5a2a"}]}]},

package/tests/fixtures/ideator-prefold/README.md

@@ -28,7 +28,7 @@ quietly.
 
 ## Why the `.baseline` extension
 
-Not decoration, and not a way around a gate. `scripts/gds/fitness-ratchets.js` measures
+Not decoration, and not a way around a gate. `scripts/bongos/fitness-ratchets.js` measures
 cross-file duplication over `git ls-files '*.js'`, and a frozen copy of a live file is, by
 construction, ~500 duplicate windows against it. That metric exists to find copy/paste a
 maintainer should collapse; collapsing *this* copy would destroy the only thing it is for.

package/tests/fixtures/page-ledger.mjs

@@ -190,6 +190,28 @@ export function installPageLedger(api, { builders }) {
       for (const c of hit) Object.assign(c, { released_at: new Date().toISOString(), outcome: 'partial' });
       return { rows: hit.map((c) => ({ id: c.id })) };
     }
+    if (/^SELECT id FROM claims WHERE task_id = $1 AND released_at IS NULL LIMIT 1$/.test(q)) {
+      const c = activeClaim(p[0]);
+      return { rows: c ? [{ id: c.id }] : [] };
+    }
+    if (/^SELECT id FROM claims WHERE task_id = \$1 AND released_at IS NULL LIMIT 1$/.test(q)) {
+      const c = activeClaim(p[0]);
+      return { rows: c ? [{ id: c.id }] : [] };
+    }
+    // The release of a round the reads cannot name (task 1004837,
+    // releaseStuckTweak): the abandon branch's claim release and status write.
+    if (/^UPDATE claims SET released_at = now\(\), outcome = 'abandoned' WHERE task_id = \$1 AND released_at IS NULL RETURNING id$/.test(q)) {
+      assert.ok(owner, 'the release runs inside the transaction');
+      const hit = db.claims.filter((x) => String(x.task_id) === String(p[0]) && x.released_at == null);
+      for (const c of hit) Object.assign(c, { released_at: new Date().toISOString(), outcome: 'abandoned' });
+      return { rows: hit.map((c) => ({ id: c.id })) };
+    }
+    if (/^UPDATE tasks SET status = 'abandoned', value_summary = \$2, updated_at = now\(\) WHERE id = \$1 RETURNING id, status, description, source_ref, updated_at$/.test(q)) {
+      assert.ok(owner, 'the abandon runs inside the transaction');
+      const t = db.tasks.find((x) => String(x.id) === String(p[0]));
+      Object.assign(t, { status: 'abandoned', value_summary: p[1] });
+      return { rows: [{ id: t.id, status: t.status, description: t.description, source_ref: t.source_ref, updated_at: null }] };
+    }
     if (/^DELETE FROM task_grades WHERE task_id = \$1$/.test(q)) {
       assert.ok(owner, 'the grade drop runs inside the send-back transaction');
       db.grades.delete(String(p[0]));

package/tests/fixtures/session-506-digest.json

@@ -14,19 +14,19 @@
     "tool_error_count": 3
   },
   "detail": [
-    { "i": 0, "role": "assistant", "tools": ["Bash"], "snippet": "node scripts/gds/start.js — survey claimable", "in": 4000, "out": 150, "cache_read": 0, "cache_creation": 0 },
-    { "i": 1, "role": "assistant", "tools": ["Bash"], "snippet": "node scripts/gds/claim.js 506", "in": 3500, "out": 120, "cache_read": 0, "cache_creation": 0 },
+    { "i": 0, "role": "assistant", "tools": ["Bash"], "snippet": "node scripts/bongos/start.js — survey claimable", "in": 4000, "out": 150, "cache_read": 0, "cache_creation": 0 },
+    { "i": 1, "role": "assistant", "tools": ["Bash"], "snippet": "node scripts/bongos/claim.js 506", "in": 3500, "out": 120, "cache_read": 0, "cache_creation": 0 },
     { "i": 2, "role": "user", "tool_results": 1 },
     { "i": 3, "role": "assistant", "tools": ["Read"], "snippet": "read the welcome copy string in public/", "in": 1000, "out": 80, "cache_read": 0, "cache_creation": 0 },
     { "i": 4, "role": "assistant", "tools": ["Edit"], "snippet": "change the one welcome-copy line", "in": 500, "out": 60, "cache_read": 0, "cache_creation": 0 },
     { "i": 5, "role": "user", "tool_results": 1 },
-    { "i": 6, "role": "assistant", "tools": ["Bash"], "snippet": "node scripts/gds/ship.js 506 --kind chore", "in": 5000, "out": 200, "cache_read": 0, "cache_creation": 0 },
+    { "i": 6, "role": "assistant", "tools": ["Bash"], "snippet": "node scripts/bongos/ship.js 506 --kind chore", "in": 5000, "out": 200, "cache_read": 0, "cache_creation": 0 },
     { "i": 7, "role": "user", "tool_results": 1, "tool_errors": 1, "snippet": "error: bad_kind — kind must be one of: feature, bug, infra, refactor" },
-    { "i": 8, "role": "assistant", "tools": ["Bash"], "snippet": "retry node scripts/gds/ship.js 506 --kind feature", "in": 3000, "out": 150, "cache_read": 0, "cache_creation": 0 },
+    { "i": 8, "role": "assistant", "tools": ["Bash"], "snippet": "retry node scripts/bongos/ship.js 506 --kind feature", "in": 3000, "out": 150, "cache_read": 0, "cache_creation": 0 },
     { "i": 9, "role": "user", "tool_results": 1, "tool_errors": 1, "snippet": "status_not_patchable: status is not editable via PATCH; use POST /tasks/:id/promote" },
     { "i": 10, "role": "assistant", "tools": ["Bash"], "snippet": "try PATCH status then the promote route", "in": 2800, "out": 130, "cache_read": 0, "cache_creation": 0 },
     { "i": 11, "role": "user", "tool_results": 1, "tool_errors": 1, "snippet": "smoke-write.sh: FAIL 4c assertion expected confirmed got completed — 1 failed" },
-    { "i": 12, "role": "assistant", "tools": ["Bash"], "snippet": "node scripts/gds/ship.js 506 — subagent grader v4: panel of 4 workers", "in": 4500, "out": 300, "cache_read": 0, "cache_creation": 0 },
+    { "i": 12, "role": "assistant", "tools": ["Bash"], "snippet": "node scripts/bongos/ship.js 506 — subagent grader v4: panel of 4 workers", "in": 4500, "out": 300, "cache_read": 0, "cache_creation": 0 },
     { "i": 13, "role": "user", "tool_results": 1 },
     { "i": 14, "role": "assistant", "tools": ["Bash"], "snippet": "psql realign description; git merge --no-ff; push; deploy", "in": 3000, "out": 180, "cache_read": 0, "cache_creation": 0 },
     { "i": 15, "role": "user", "tool_results": 1 }

package/tests/gate_approvals.mjs

@@ -557,5 +557,55 @@ await t('closePullRequest (github-pr-close.js): one PATCH to state=closed, and a
     (e) => e.code === 'PR_PATCH_FAILED'
   );
 });
+// ===========================================================================
+// task 1004829 — viewer_may_approve: the hall draws the Approve card only on true,
+// so the list says whether THIS viewer's approval would be let through — the same
+// two checks the approve route mounts (gate_approval.decide, then act-alone at
+// release), fail-closed.
+// ===========================================================================
+{
+  const seams = require('../src/module-seams.js');
+  const gov = { held: true, actAlone: { ok: true }, throws: false };
+  if (!seams.hasProvider('government')) {
+    seams.registerProvider('government', {
+      builderHasPermissions: async (id, keys) => {
+        if (gov.throws) throw new Error('resolver down');
+        return gov.held && keys.every((k) => k === 'gate_approval.decide');
+      },
+      checkActAlone: async (area) => {
+        assert.equal(area, 'release', 'the approve route\'s building');
+        return gov.actAlone;
+      },
+    });
+  }
+  const listFor = async () => withStubs({
+    isConfigured: () => true,
+    listOpenPullRequests: async () => [pr({ number: 301 })],
+    getPullRequestFiles: async () => [{ path: 'src/bongos/route-rank-check.js', status: 'modified' }],
+  }, async () => {
+    const res = fakeRes();
+    await routeHandler(buildGateApprovalsRouter(), 'get', '/gate-approvals')({ builder: ARCHON, params: {}, body: {} }, res);
+    return res.body;
+  });
+  await t('GET /gate-approvals: viewer_may_approve is true for a holder of gate_approval.decide who may act alone', async () => {
+    Object.assign(gov, { held: true, actAlone: { ok: true }, throws: false });
+    assert.equal((await listFor()).viewer_may_approve, true);
+  });
+  await t('GET /gate-approvals: viewer_may_approve is false without gate_approval.decide', async () => {
+    Object.assign(gov, { held: false, actAlone: { ok: true }, throws: false });
+    assert.equal((await listFor()).viewer_may_approve, false);
+  });
+  await t('GET /gate-approvals: viewer_may_approve is false when the board decides at release', async () => {
+    Object.assign(gov, { held: true, actAlone: { ok: false, reason: 'decided_by_sitting' }, throws: false });
+    assert.equal((await listFor()).viewer_may_approve, false);
+  });
+  await t('GET /gate-approvals: viewer_may_approve is false (and the list still answers) when authority cannot be read', async () => {
+    Object.assign(gov, { held: true, actAlone: { ok: true }, throws: true });
+    const body = await listFor();
+    assert.equal(body.viewer_may_approve, false);
+    assert.equal(body.awaiting.length, 1, 'the read itself is unharmed');
+  });
+}
+
 console.log(`\n${pass} passed, ${fail} failed`);
 process.exit(fail === 0 ? 0 : 1);

package/tests/gate_review.mjs

@@ -14,7 +14,7 @@ import { strict as assert } from 'node:assert';
 import { createRequire } from 'node:module';
 
 const require = createRequire(import.meta.url);
-const gk = require('../scripts/gds/gate-review.js');
+const gk = require('../scripts/bongos/gate-review.js');
 const permPath = require('../src/bongos/permission-path-check.js');
 
 let passed = 0, failed = 0;
@@ -41,9 +41,9 @@ test('adding a new test file → pass', () => {
 test('run-unit-tests.js REMOVING from INTEGRATION (un-mute) → pass (AUTO)', () => {
   const base = `const INTEGRATION = new Set(['a','b']);\nconst KNOWN_FAILING = new Set(['x']);\nconst Z=1;`;
   const head = `const INTEGRATION = new Set(['a']);\nconst KNOWN_FAILING = new Set(['x']);\nconst Z=1;`;
-  const r = classify([{ path: 'scripts/gds/run-unit-tests.js' }], { 'base:scripts/gds/run-unit-tests.js': base, 'head:scripts/gds/run-unit-tests.js': head });
+  const r = classify([{ path: 'scripts/bongos/run-unit-tests.js' }], { 'base:scripts/bongos/run-unit-tests.js': base, 'head:scripts/bongos/run-unit-tests.js': head });
   assert.equal(r.verdict, 'pass');
-  assert.deepEqual(r.autoPassed, ['scripts/gds/run-unit-tests.js']);
+  assert.deepEqual(r.autoPassed, ['scripts/bongos/run-unit-tests.js']);
 });
 test('secrets-allowlist.txt REMOVING a line (narrow) → pass (AUTO)', () => {
   const r = classify([{ path: '.husky/secrets-allowlist.txt' }], { 'base:.husky/secrets-allowlist.txt': 'aaa\nbbb\n', 'head:.husky/secrets-allowlist.txt': 'aaa\n' });
@@ -55,7 +55,7 @@ test('new migration → needs_trust', () => assert.equal(verdictOf([{ path: 'mig
 test('package.json bump → needs_trust', () => assert.equal(verdictOf([{ path: 'package.json' }]), 'needs_trust'));
 test('a route file → needs_trust', () => assert.equal(verdictOf([{ path: 'src/bongos/routes/tasks.js' }]), 'needs_trust'));
 test('server.js → needs_trust', () => assert.equal(verdictOf([{ path: 'server.js' }]), 'needs_trust'));
-test('ship.js → needs_trust', () => assert.equal(verdictOf([{ path: 'scripts/gds/ship.js' }]), 'needs_trust'));
+test('ship.js → needs_trust', () => assert.equal(verdictOf([{ path: 'scripts/bongos/ship.js' }]), 'needs_trust'));
 test('db.js change OUTSIDE the rank-tier region → needs_trust', () => {
   const base = `const REQUIRES_RANK_TIER = { foo: 1 };\nfunction q(){ return 1 }`;
   const head = `const REQUIRES_RANK_TIER = { foo: 1 };\nfunction q(){ return 2 }`;
@@ -68,9 +68,9 @@ test('shrinking a test file → needs_trust', () => {
 
 // --- ESCALATE: HARD FLOOR (rank-independent) -----------------------------------------
 for (const p of [
-  'scripts/gds/gate-review.js', 'src/bongos/permission-path-check.js', 'src/bongos/auth.js',
+  'scripts/bongos/gate-review.js', 'src/bongos/permission-path-check.js', 'src/bongos/auth.js',
   'src/bongos/route-rank-check.js', 'modules/grading/grader.js', 'modules/grading/grader-workers/narc.js',
-  'scripts/gds/main-audit.js', 'scripts/migrate.sh', 'scripts/deploy/deploy-prod.sh',
+  'scripts/bongos/main-audit.js', 'scripts/migrate.sh', 'scripts/deploy/deploy-prod.sh',
   'config/deploy.json', 'infra/branch-protection.json', '.github/workflows/gate-review.yml',
   'CODEOWNERS', '.husky/pre-push', '.claude/hooks/stop-sound.js', '.claude/settings.json',
 ]) {
@@ -86,12 +86,12 @@ test('db.js with the rank-tier region CHANGED → escalate', () => {
 test('Hole(mute): run-unit-tests.js ADDING to KNOWN_FAILING → escalate (AUTO cert fails → floor)', () => {
   const base = `const INTEGRATION = new Set(['a']);\nconst KNOWN_FAILING = new Set(['x']);`;
   const head = `const INTEGRATION = new Set(['a']);\nconst KNOWN_FAILING = new Set(['x','grader_panel']);`;
-  assert.equal(verdictOf([{ path: 'scripts/gds/run-unit-tests.js' }], { 'base:scripts/gds/run-unit-tests.js': base, 'head:scripts/gds/run-unit-tests.js': head }), 'escalate');
+  assert.equal(verdictOf([{ path: 'scripts/bongos/run-unit-tests.js' }], { 'base:scripts/bongos/run-unit-tests.js': base, 'head:scripts/bongos/run-unit-tests.js': head }), 'escalate');
 });
 test('Hole(mute): run-unit-tests.js non-set code changed → escalate', () => {
   const base = `const INTEGRATION = new Set(['a']);\nconst KNOWN_FAILING = new Set([]);\nconst TIMEOUT=90000;`;
   const head = `const INTEGRATION = new Set(['a']);\nconst KNOWN_FAILING = new Set([]);\nconst TIMEOUT=1;`;
-  assert.equal(verdictOf([{ path: 'scripts/gds/run-unit-tests.js' }], { 'base:scripts/gds/run-unit-tests.js': base, 'head:scripts/gds/run-unit-tests.js': head }), 'escalate');
+  assert.equal(verdictOf([{ path: 'scripts/bongos/run-unit-tests.js' }], { 'base:scripts/bongos/run-unit-tests.js': base, 'head:scripts/bongos/run-unit-tests.js': head }), 'escalate');
 });
 test('Hole(allowlist): secrets-allowlist.txt ADDING a broadening line → escalate', () => {
   assert.equal(verdictOf([{ path: '.husky/secrets-allowlist.txt' }], { 'base:.husky/secrets-allowlist.txt': 'aaa\n', 'head:.husky/secrets-allowlist.txt': 'aaa\nLEAKED_KEY=.*\n' }), 'escalate');

package/tests/gating_review_retired.mjs

@@ -20,7 +20,7 @@ import path from 'node:path';
 import { fileURLToPath } from 'node:url';
 
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
-const GATING = fs.readFileSync(path.join(ROOT, 'scripts', 'gds', 'gating.js'), 'utf8');
+const GATING = fs.readFileSync(path.join(ROOT, 'scripts', 'bongos', 'gating.js'), 'utf8');
 
 // The retirement invariant, as a checkable predicate over the source.
 function reviewGateRetired(src) {
@@ -43,7 +43,7 @@ test('cmdOn normalizes BOTH restore paths — a pre-retirement snapshot cannot r
 
 test('the CODEOWNERS file is gone; its GLOB guards remain where they enforce', () => {
   assert.ok(!fs.existsSync(path.join(ROOT, 'CODEOWNERS')), 'CODEOWNERS must not exist (ADR 0162)');
-  const gateReview = fs.readFileSync(path.join(ROOT, 'scripts', 'gds', 'gate-review.js'), 'utf8');
+  const gateReview = fs.readFileSync(path.join(ROOT, 'scripts', 'bongos', 'gate-review.js'), 'utf8');
   assert.match(gateReview, /'CODEOWNERS'/, 'the HARD_FLOOR glob stays — reintroducing the file is itself gate-flagged');
 });
 

package/tests/gen_freshness.mjs

@@ -21,7 +21,7 @@ import { fileURLToPath } from 'node:url';
 
 const require = createRequire(import.meta.url);
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
-const { sameContent, normalizeEol } = require(path.join(ROOT, 'scripts', 'gds', 'gen-freshness.js'));
+const { sameContent, normalizeEol } = require(path.join(ROOT, 'scripts', 'bongos', 'gen-freshness.js'));
 
 const LF = '# Title\n\n- one\n- two\n';
 const CRLF = '# Title\r\n\r\n- one\r\n- two\r\n';
@@ -68,7 +68,7 @@ const GENERATORS = ['gen-repo-map.js', 'gen-session-index.js', 'gen-file-map.js'
 
 test('every gated generator compares freshness through sameContent()', () => {
   for (const g of GENERATORS) {
-    const src = fs.readFileSync(path.join(ROOT, 'scripts', 'gds', g), 'utf8');
+    const src = fs.readFileSync(path.join(ROOT, 'scripts', 'bongos', g), 'utf8');
     assert.match(src, /require\('\.\/gen-freshness'\)/, `${g} must import the shared comparison`);
     assert.match(src, /sameContent\(/, `${g} must use sameContent() for freshness`);
   }
@@ -79,7 +79,7 @@ test('no gated generator byte-compares a file read against rendered content', ()
   // (and the idx*/map* variants) directly on strings read from disk.
   const BYTEWISE = /\b(cur|next|idxCur|idxNext|mapCur|mapNext)\s*!==\s*(cur|next|idxCur|idxNext|mapCur|mapNext)\b/;
   for (const g of GENERATORS) {
-    const src = fs.readFileSync(path.join(ROOT, 'scripts', 'gds', g), 'utf8');
+    const src = fs.readFileSync(path.join(ROOT, 'scripts', 'bongos', g), 'utf8');
     const offenders = src.split('\n')
       .map((line, i) => ({ line: line.trim(), n: i + 1 }))
       .filter(({ line }) => BYTEWISE.test(line));

package/tests/git_guard.mjs

@@ -63,7 +63,7 @@ test('blocks git worktree remove and points at the supported remover', () => {
   ]) {
     const r = bash(cmd);
     assert.equal(r.status, 2, `expected block for: ${cmd}`);
-    assert.match(r.stderr, /scripts\/gds\/worktree\.js remove/);
+    assert.match(r.stderr, /scripts\/(?:gds|bongos)\/worktree\.js remove/);
   }
 });
 
@@ -97,7 +97,7 @@ test('allows the read-only, the supported, and the ordinary', () => {
     'git push origin task-1003346',
     'git branch -d merged-branch',
     'git worktree list --porcelain',
-    'node scripts/gds/worktree.js remove wt-1003346',
+    'node scripts/bongos/worktree.js remove wt-1003346',
     'npm test',
   ]) {
     assert.equal(bash(cmd).status, 0, `false positive on: ${cmd}`);
@@ -178,7 +178,7 @@ test('the widened executable keeps the false-positive floor in every spelling',
     'git.exe worktree list --porcelain',
     'Github Actions rerun',
     'gitk --all',
-    'node scripts/gds/worktree.js remove wt-1',
+    'node scripts/bongos/worktree.js remove wt-1',
   ]) {
     for (const run of [bash, pwsh]) {
       assert.equal(run(cmd).status, 0, `false positive on: ${cmd}`);