@bongos/core 1.21.175 → 1.21.177

package/tests/executed_closure.mjs

@@ -2,15 +2,15 @@
 //
 // THE DEFECT. resolveBranchConflicts and refreshStaleGenerated clone a builder's branch
 // and run code out of it with the live server's environment. The audit prescribed
-// restoring scripts/gds/ and .gitattributes from origin/main after the merge and before
+// restoring scripts/bongos/ and .gitattributes from origin/main after the merge and before
 // runGenerators. Building it that way would have left the hole open TWICE, and both of
 // those are what these tests pin:
 //
 //   TOO NARROW — the generators require ../../src/instance-config, and gen-api-docs also
 //     requires src/bongos/route-rank-check, api-prefix and routes/_helpers. A restore
-//     scoped to scripts/gds/ leaves those builder-controlled and still executed.
+//     scoped to scripts/bongos/ leaves those builder-controlled and still executed.
 //   TOO LATE   — `git merge` runs the otb-regen driver, whose registered command is
-//     `node scripts/gds/git-merge-regen.js` by RELATIVE path with cwd at the clone root.
+//     `node scripts/bongos/git-merge-regen.js` by RELATIVE path with cwd at the clone root.
 //     That is the clone's copy, and it runs at the merge, before any post-merge step.
 //
 // So the assertions below care about two things: that the closure reaches past
@@ -89,14 +89,14 @@ test('every computed require inside the closure is one we have accounted for', (
   // ever loads modules, this closure must grow to cover modules/**/routes/*.js.
   const ACCOUNTED = new Map([
     ['src/module-loader/loader.js', 2],   // routes/<key>.js + pollerPath, from loadModules()
-    ['scripts/gds/onboard.js', 3],        // provision/oauth-secret/onboardPlan, inside the verb
+    ['scripts/bongos/onboard.js', 3],        // provision/oauth-secret/onboardPlan, inside the verb
     // 6th added by task 1003869: leak-scan-allowlist.js. Unlike the others this one IS
     // top-level, so it resolves whenever package-core is required — but it does not widen
     // the closure: the module is pure data plus three predicates, does no I/O, dispatches
     // nothing dynamically, and its single require (back to package-core, for the literal
     // floor) is lazy and inside a function.
-    ['scripts/gds/package-core.js', 6],   // publish-manifest/mirror-redact/secret-scrub/leak-scan-allowlist/…
-    ['scripts/gds/upgrade.js', 1],        // a `node -e` child, not a require in this process
+    ['scripts/bongos/package-core.js', 6],   // publish-manifest/mirror-redact/secret-scrub/leak-scan-allowlist/…
+    ['scripts/bongos/upgrade.js', 1],        // a `node -e` child, not a require in this process
     // Added by task 1003081: upgrade.js's pin push needs the owner-credential helpers,
     // and requiring provision.js for them would have pulled provision-config/-repo/-units
     // (7/1/1 unaccounted computed requires) into the closure. This LEAF is the whole of
@@ -104,8 +104,14 @@ test('every computed require inside the closure is one we have accounted for', (
     // modules/provisioning + src/bongos/pool in lookupInstanceRow — each inside a function
     // body reached only from the pin push, which no generator calls. Its top level requires
     // node builtins only, so it drags nothing else in behind it.
-    ['scripts/gds/provision-repo-auth.js', 3],
-    ['scripts/gds/gen-api-docs.js', 1],   // require(path.join(CORE_ROOT,'package.json')) — JSON
+    ['scripts/bongos/provision-repo-auth.js', 3],
+    ['scripts/bongos/gen-api-docs.js', 1],   // require(path.join(CORE_ROOT,'package.json')) — JSON
+    // Added by task 1004848: the forwarder runtime the old-path ENTRYPOINTS reach. Its one
+    // computed require is `require(path.join(__dirname, rel))`, where `rel` is the string
+    // literal the forwarder itself passes — so it can only ever load scripts/bongos/<same
+    // name>, and every such name on this path is already an ENTRYPOINT. Run as a merge
+    // driver it does not require at all: it re-execs that same file as a child process.
+    ['scripts/bongos/forwarder.js', 1],
   ]);
 
   // Strip line comments and single/double-quoted strings first: prose and message strings
@@ -157,10 +163,10 @@ test('ENTRYPOINTS covers every generator the resolver actually runs', () => {
 });
 
 test('both script-tree spellings are entrypoints while the compat shim exists', () => {
-  // Task 1003705 moves these to scripts/bongos/ and leaves scripts/gds/ holding WORKING
+  // Task 1003705 moves these to scripts/bongos/ and leaves scripts/bongos/ holding WORKING
   // forwarders. The driver command is a relative path, so the old spelling still
   // executes; a guard that knew only one name would stop seeing edits to live code.
-  for (const tree of ['scripts/gds', 'scripts/bongos']) {
+  for (const tree of ['scripts/bongos', 'scripts/bongos']) {
     assert.ok(ec.ENTRYPOINTS.some((p) => p === `${tree}/git-merge-regen.js`),
       `${tree}/git-merge-regen.js must be an entrypoint while both trees can execute`);
   }
@@ -206,7 +212,7 @@ function mkDeps(touched, over = {}) {
   const exec = mkExec(touched);
   return {
     exec,
-    executedClosure: ['.gitattributes', 'src/instance-config.js', 'scripts/gds/git-merge-regen.js'],
+    executedClosure: ['.gitattributes', 'src/instance-config.js', 'scripts/bongos/git-merge-regen.js'],
     runGenerators: async () => ({ code: 0 }),
     githubPush: {
       isConfigured: () => true,
@@ -245,7 +251,7 @@ for (const [label, fn, okKey] of [
   test(`${label} refuses BEFORE running git merge`, async () => {
     // The assertion that distinguishes this fix from the one the audit prescribed. A
     // post-merge restore would already have run the branch's merge driver by now.
-    const deps = mkDeps(['scripts/gds/git-merge-regen.js']);
+    const deps = mkDeps(['scripts/bongos/git-merge-regen.js']);
     const r = await fn(deps);
     assert.equal(r.skipped, 'branch_modifies_executed_code');
     assert.equal(ranMerge(deps._exec), false,

package/tests/file_map.mjs

@@ -11,7 +11,7 @@ import path from 'node:path';
 
 const require = createRequire(import.meta.url);
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
-const GEN = path.join(ROOT, 'scripts', 'gds', 'gen-file-map.js');
+const GEN = path.join(ROOT, 'scripts', 'bongos', 'gen-file-map.js');
 const gen = require(GEN); // require.main-guarded → importing runs no main()
 
 function run(args) {

package/tests/find_untested.mjs

@@ -1,6 +1,6 @@
 // tests/find_untested.mjs
 //
-// Unit test for scripts/gds/find-untested.js (task 1002458) — the finder the newcomer
+// Unit test for scripts/bongos/find-untested.js (task 1002458) — the finder the newcomer
 // "add a unit test" chore runs instead of a hardcoded target list. The cases pin the two
 // failures that made the naive scans unusable, measured before it was built:
 //   - BASENAME matching falsely marks a common-word module (settings.js) as tested because
@@ -15,7 +15,7 @@ import { strict as assert } from 'node:assert';
 import { createRequire } from 'node:module';
 
 const require = createRequire(import.meta.url);
-const fu = require('../scripts/gds/find-untested.js');
+const fu = require('../scripts/bongos/find-untested.js');
 
 let passed = 0;
 let failed = 0;
@@ -28,8 +28,8 @@ const MODS = new Set([
   'modules/hall-ui/settings.js',
   'modules/government/db.js',
   'modules/government/board.js',
-  'scripts/gds/memory-map.js',
-  'scripts/gds/grade-smoke.js',
+  'scripts/bongos/memory-map.js',
+  'scripts/bongos/grade-smoke.js',
   'modules/lifecycle/index.js',
 ]);
 const hits = (src, file) => [...fu.extractPathRefs(src, file)].map((r) => fu.resolveRef(r, MODS)).filter(Boolean).sort();
@@ -49,9 +49,9 @@ test('path.join(ROOT, …) segments, and a const prefix, are evaluated (the memo
     "const ROOT = path.resolve(__dirname, '..');",
     "const GOV = path.join(ROOT, 'modules', 'government');",
     "const db = require(path.join(GOV, 'db.js'));",
-    "const mm = require(path.join(ROOT, 'scripts', 'gds', 'memory-map.js'));",
+    "const mm = require(path.join(ROOT, 'scripts', 'bongos', 'memory-map.js'));",
   ].join('\n');
-  assert.deepEqual(hits(src, 'tests/x.mjs'), ['modules/government/db.js', 'scripts/gds/memory-map.js']);
+  assert.deepEqual(hits(src, 'tests/x.mjs'), ['modules/government/db.js', 'scripts/bongos/memory-map.js']);
 });
 
 test('an unknown leading identifier stands for the repo root; one in the middle does not', () => {
@@ -60,14 +60,14 @@ test('an unknown leading identifier stands for the repo root; one in the middle
 });
 
 test('a spawned script, new URL(…, import.meta.url) and a directory index all count', () => {
-  assert.deepEqual(hits("spawnSync(process.execPath, ['scripts/gds/grade-smoke.js', '--dry'])", 'tests/x.mjs'), ['scripts/gds/grade-smoke.js']);
-  assert.deepEqual(hits("await import(new URL('../scripts/gds/memory-map.js', import.meta.url))", 'tests/x.mjs'), ['scripts/gds/memory-map.js']);
+  assert.deepEqual(hits("spawnSync(process.execPath, ['scripts/bongos/grade-smoke.js', '--dry'])", 'tests/x.mjs'), ['scripts/bongos/grade-smoke.js']);
+  assert.deepEqual(hits("await import(new URL('../scripts/bongos/memory-map.js', import.meta.url))", 'tests/x.mjs'), ['scripts/bongos/memory-map.js']);
   assert.deepEqual(hits("require('../modules/lifecycle')", 'tests/x.mjs'), ['modules/lifecycle/index.js']);
 });
 
 test('template literals with interpolation and URLs are ignored, not mis-resolved', () => {
   assert.deepEqual(hits('require(`../modules/${k}/settings.js`)', 'tests/x.mjs'), []);
-  assert.deepEqual(hits("fetch('https://example.com/scripts/gds/memory-map.js')", 'tests/x.mjs'), []);
+  assert.deepEqual(hits("fetch('https://example.com/scripts/bongos/memory-map.js')", 'tests/x.mjs'), []);
 });
 
 test('extractRequires separates packages from local edges and ignores comment mentions', () => {
@@ -92,8 +92,8 @@ test('ownImpurity: pg, a db module, child_process and fetch are hard; fs is soft
 test('isTestPath covers every test root and *.test.js siblings, and nothing else', () => {
   assert.equal(fu.isTestPath('tests/a.mjs'), true);
   assert.equal(fu.isTestPath('modules/lifecycle/tests/a.mjs'), true);
-  assert.equal(fu.isTestPath('scripts/gds/newcomer-floor.test.js'), true);
-  assert.equal(fu.isTestPath('scripts/gds/latest.js'), false);
+  assert.equal(fu.isTestPath('scripts/bongos/newcomer-floor.test.js'), true);
+  assert.equal(fu.isTestPath('scripts/bongos/latest.js'), false);
 });
 
 test('hasExports / countExports read CommonJS and ESM', () => {
@@ -104,7 +104,7 @@ test('hasExports / countExports read CommonJS and ESM', () => {
 });
 
 test('normRel clamps a climb above the root instead of escaping it', () => {
-  assert.equal(fu.normRel('tests/../../../scripts/gds/x.js'), 'scripts/gds/x.js');
+  assert.equal(fu.normRel('tests/../../../scripts/bongos/x.js'), 'scripts/bongos/x.js');
   assert.equal(fu.normRel('./a//b/./c'), 'a/b/c');
   assert.equal(fu.normRel('..'), '');
 });
@@ -124,7 +124,7 @@ test('the live tree: tested modules the naive scans got wrong are NOT candidates
   const by = new Map(rows.map((r) => [r.path, r]));
   // A scan that finds nothing looks exactly like a clean tree, so assert it found a lot.
   assert.ok(rows.length > 300, `expected hundreds of exported modules, scanned ${rows.length}`);
-  for (const p of ['scripts/gds/memory-map.js', 'modules/grading/grader-workers/worker-verdict.js', 'scripts/gds/find-untested.js']) {
+  for (const p of ['scripts/bongos/memory-map.js', 'modules/grading/grader-workers/worker-verdict.js', 'scripts/bongos/find-untested.js']) {
     assert.ok(by.has(p), `${p} should be scanned`);
     assert.equal(by.get(p).tested, true, `${p} has a test naming it`);
   }

package/tests/first_admin_bootstrap.mjs

@@ -19,7 +19,7 @@ test('firstAdminLogin: resolves from the branding pack when no env override', ()
   // Asserts the RESOLUTION, not one instance's owner. This used to hardcode the OTB
   // founder's login, which both broke on any other instance (the neutral pack sets
   // firstAdmin: "") and put a founder identity in a test — the thing
-  // scripts/gds/audit-authorship.sh exists to keep out (task 1002470).
+  // scripts/bongos/audit-authorship.sh exists to keep out (task 1002470).
   clearEnv();
   const configured = (branding().firstAdmin || '').trim() || null;
   assert.equal(firstAdminLogin(), configured,

package/tests/fitness.mjs

@@ -10,7 +10,7 @@ import { onDiskModuleKeys } from './helpers.mjs';
 
 const require = createRequire(import.meta.url);
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
-const fitness = require(path.join(ROOT, 'scripts', 'gds', 'fitness.js'));
+const fitness = require(path.join(ROOT, 'scripts', 'bongos', 'fitness.js'));
 
 
 test('all fitness checks pass with no hard failures (the CI gate)', () => {
@@ -89,7 +89,7 @@ test('a pointer at a missing rule file hard-fails', () => {
   const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'charter-ptr-'));
   fs.writeFileSync(path.join(dir, 'CLAUDE.md'), `${CHARTER_HEADING}\ncharter: ${CHARTER_RULE_REL}\n`);
   const out = require('node:child_process').execFileSync(process.execPath,
-    ['-e', `const f=require(${JSON.stringify(path.join(ROOT, 'scripts/gds/fitness.js'))});process.stdout.write(JSON.stringify(f.checkClaudeMdBudget()))`],
+    ['-e', `const f=require(${JSON.stringify(path.join(ROOT, 'scripts/bongos/fitness.js'))});process.stdout.write(JSON.stringify(f.checkClaudeMdBudget()))`],
     { env: { ...process.env, BONGOS_INSTANCE_ROOT: dir }, encoding: 'utf8' });
   const r = JSON.parse(out);
   assert.equal(r.hardFail, true, 'a pointer to nothing is worse than no pointer');
@@ -111,7 +111,7 @@ test('CLAUDE.md char budget is ratcheted and ordered (target < ceiling, live fil
 // so an untested guard would undermine its own rationale. Hence both legs, the same
 // pair every sibling guard here carries: the live tree is clean, AND the check
 // actually catches the failure rather than being a no-op.
-const rolePacks = require(path.join(ROOT, 'scripts', 'gds', 'role-pack-guard.js'));
+const rolePacks = require(path.join(ROOT, 'scripts', 'bongos', 'role-pack-guard.js'));
 
 test('role packs: the live registry resolves and every pack is under budget', () => {
   const r = rolePacks.checkRolePacks();
@@ -189,7 +189,7 @@ test('role pack guard actually CATCHES a missing pack, a pointerless entry, and
 // shared source they cannot have: rename a pack and this fails instead of the hall
 // shipping a button that opens nothing.
 test('ship-card routing agrees with the role registry, entry for entry', () => {
-  const registry = JSON.parse(fs.readFileSync(path.join(ROOT, 'scripts', 'gds', 'discipline-modes.json'), 'utf8')).modes;
+  const registry = JSON.parse(fs.readFileSync(path.join(ROOT, 'scripts', 'bongos', 'discipline-modes.json'), 'utf8')).modes;
   const card = require(path.join(ROOT, 'modules', 'lifecycle', 'ship-card.js'));
   for (const [discipline, mode] of Object.entries(registry)) {
     const cmd = card.buildCardModel({ stage: 'claimed', taskId: 1, discipline, brand: { currency: 'credits' } }).action.cmd;
@@ -201,7 +201,7 @@ test('ship-card routing agrees with the role registry, entry for entry', () => {
 test('nested CLAUDE.md present for every high-traffic dir', () => {
   const r = fitness.checkNestedDocsPresent();
   assert.equal(r.hardFail, false, r.violations.join('\n'));
-  assert.deepEqual(fitness.HIGH_TRAFFIC, ['src/bongos', 'src/bongos/routes', 'scripts/gds']);
+  assert.deepEqual(fitness.HIGH_TRAFFIC, ['src/bongos', 'src/bongos/routes', 'scripts/bongos']);
 });
 
 test('no route bypasses server-side rank checks (ADR 0016)', () => {
@@ -361,7 +361,7 @@ test('the migration checks keep the BROAD definition — narrowing would lose co
   // still be namespace/stem-checked, because schema_migrations is stem-keyed and
   // a collision is SILENTLY skipped. So discoveredModuleKeys stays broad, and the
   // migration checks must still be calling it.
-  const src = fs.readFileSync(path.join(ROOT, 'scripts/gds/fitness.js'), 'utf8');
+  const src = fs.readFileSync(path.join(ROOT, 'scripts/bongos/fitness.js'), 'utf8');
   const additive = src.slice(src.indexOf('function checkModuleMigrationsAdditive'));
   assert.match(
     additive.slice(0, 600),
@@ -512,14 +512,14 @@ test('migration-namespacing actually CATCHES a new bare core migration (not a no
   // The pure helper the check is built on: a bare core migration ABOVE the legacy cutoff
   // must be flagged as needing the core_ prefix (else it could collide with an instance/
   // module migration across repos). Proves the gate has teeth without polluting the tree.
-  const migNs = require(path.join(ROOT, 'scripts', 'gds', 'migration-namespace.js'));
+  const migNs = require(path.join(ROOT, 'scripts', 'bongos', 'migration-namespace.js'));
   const v = migNs.filenameViolation('core', '188_new_bare.sql');
   assert.ok(v && /core_-prefixed/.test(v), 'a new bare core migration must be flagged');
   assert.equal(migNs.filenameViolation('core', 'core_188_new_bare.sql'), null, 'the namespaced form passes');
 });
 
 test('migration-namespacing actually CATCHES a cross-source stem collision (the silent-skip bug)', () => {
-  const migNs = require(path.join(ROOT, 'scripts', 'gds', 'migration-namespace.js'));
+  const migNs = require(path.join(ROOT, 'scripts', 'bongos', 'migration-namespace.js'));
   const collisions = migNs.stemCollisions([
     { source: 'core', basename: '188_x.sql' },
     { source: 'instance', basename: '188_x.sql' },
@@ -534,7 +534,7 @@ test('migration-namespacing actually CATCHES a cross-source stem collision (the
 // branches each landed an ADR numbered 0181 under different slugs, so git saw no path
 // collision, README.md auto-merged into two rows, and every gate passed.
 
-const adrNs = require(path.join(ROOT, 'scripts', 'gds', 'adr-namespace.js'));
+const adrNs = require(path.join(ROOT, 'scripts', 'bongos', 'adr-namespace.js'));
 
 test('ADR numbering: the live tree is clean (all 20 known duplicates grandfathered)', () => {
   const r = fitness.checkAdrNumbering();
@@ -893,7 +893,7 @@ test('identity gate: comment markers inside strings and regex literals are inert
   assert.equal(scanPromptIdentity('x.js', 'const x = a / b / c;\nconst leak = "amazonprimea";').length, 1);
 });
 
-test('identity gate scans the WHOLE scripts/ root, not just scripts/gds (task 1002756)', () => {
+test('identity gate scans the WHOLE scripts/ root, not just scripts/bongos (task 1002756)', () => {
   const r = fitness.checkKernelPromptsNoHardcodedIdentity();
   assert.match(r.note, /scripts\/\*\* \(whole root/, 'note must document the widened root');
   assert.equal(r.hardFail, false, 'live tree must be clean under the widened scan:\n' + r.violations.join('\n'));
@@ -969,7 +969,7 @@ test('KERNEL_FILES is exported exactly ONCE and still resolves (task 1002795)',
   // moment the two diverge. Task 1002795 removed the duplicate. Two grader
   // rounds read that `-  KERNEL_FILES,` line as "the export was removed", so pin
   // the actual behaviour here rather than arguing it in a ship note.
-  const src = fs.readFileSync(path.join(ROOT, 'scripts/gds/fitness.js'), 'utf8');
+  const src = fs.readFileSync(path.join(ROOT, 'scripts/bongos/fitness.js'), 'utf8');
   const decls = src.split('\n').filter((l) => l.trim() === 'KERNEL_FILES,');
   assert.equal(decls.length, 1, 'exactly one export entry — no duplicate key');
   assert.ok(Array.isArray(fitness.KERNEL_FILES), 'and it still resolves to an array');
@@ -978,12 +978,12 @@ test('KERNEL_FILES is exported exactly ONCE and still resolves (task 1002795)',
 
 // ---- the dev box stays retired (task 1003899, ADR 0346) ---------------------
 //
-// scripts/gds/dev-box-guard.js fails CI when a retired dev-box name reappears.
+// scripts/bongos/dev-box-guard.js fails CI when a retired dev-box name reappears.
 // Each rule is proven by PLANTING a violation through the injectable files/read
 // seam, never by assuming the regex is right. The retired names are assembled at
 // runtime (KEY = 'dev' + '-box', …) so this file never contains them literally and
 // needs no exemption of its own.
-const devBoxGuard = require(path.join(ROOT, 'scripts', 'gds', 'dev-box-guard.js'));
+const devBoxGuard = require(path.join(ROOT, 'scripts', 'bongos', 'dev-box-guard.js'));
 const KEY = 'dev' + '-box';
 const TABLE = 'builder' + '_boxes';
 const COLUMN = 'box' + '_blocked_reason';
@@ -1001,7 +1001,7 @@ test('dev-box guard: the clean tree passes, and it scans the real tracked files'
 });
 
 test('dev-box guard: it is wired into the fitness CHECKS that CI runs', () => {
-  const src = fs.readFileSync(path.join(ROOT, 'scripts', 'gds', 'fitness.js'), 'utf8');
+  const src = fs.readFileSync(path.join(ROOT, 'scripts', 'bongos', 'fitness.js'), 'utf8');
   assert.match(src, /require\('\.\/dev-box-guard\.js'\)\.checkNoDevBox/);
   const names = fitness.runAll().map((r) => r.name);
   assert.ok(names.includes('the dev box stays retired (ADR 0346)'), 'runAll() includes the guard');
@@ -1021,12 +1021,12 @@ test('dev-box guard: each rule FAILS on a planted violation', () => {
     const r = plant(rel, text);
     assert.equal(r.hardFail, true, `${label}: a planted violation must fail the check`);
     assert.match(r.violations[0], /ADR 0346/, `${label}: the failure names the ADR`);
-    assert.match(r.note, /DEV_BOX_EXEMPT in scripts\/gds\/dev-box-guard\.js/, `${label}: and the one exemption list`);
+    assert.match(r.note, /DEV_BOX_EXEMPT in scripts\/(?:gds|bongos)\/dev-box-guard\.js/, `${label}: and the one exemption list`);
   }
 });
 
 test('dev-box guard: a retired PATH fails even with harmless contents', () => {
-  for (const rel of [`scripts/gds/${BOX}.js`, `infra/${BOX}-provision.sh`, `modules/${KEY}/module.json`, '.devcontainer/devcontainer.json']) {
+  for (const rel of [`scripts/bongos/${BOX}.js`, `infra/${BOX}-provision.sh`, `modules/${KEY}/module.json`, '.devcontainer/devcontainer.json']) {
     const r = plant(rel, '{}');
     assert.equal(r.hardFail, true, `${rel} must fail`);
     assert.match(r.violations.join('\n'), /path: a retired dev-box location/);

package/tests/fitness_gds_ratchet.mjs

@@ -19,8 +19,8 @@ import { fileURLToPath } from 'node:url';
 
 const require = createRequire(import.meta.url);
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
-const scan = require(path.join(ROOT, 'scripts', 'gds', 'gds-literal-scan.js'));
-const ratchets = require(path.join(ROOT, 'scripts', 'gds', 'fitness-ratchets.js'));
+const scan = require(path.join(ROOT, 'scripts', 'bongos', 'gds-literal-scan.js'));
+const ratchets = require(path.join(ROOT, 'scripts', 'bongos', 'fitness-ratchets.js'));
 
 const LITERAL = ['G', 'D', 'S'].join(''); // built, not written, so this file needs no exemption of its own
 

package/tests/fitness_installed_core.mjs

@@ -5,7 +5,7 @@
 // own, just an ignored folder inside the project's repo. Every fitness check guards the
 // core's own source and enumerates it with git, so each scan found nothing and either
 // threw ("docs-entropy: scan defect — enumerated 0 tracked markdown files") or reported
-// a scan defect — `bongos exec scripts/gds/fitness.js` crashed on toast, on 1.21.20 and
+// a scan defect — `bongos exec scripts/bongos/fitness.js` crashed on toast, on 1.21.20 and
 // again on 1.21.115. The core repo's CI already ran this gate before publishing, so in an
 // installed core it steps aside, and says so.
 import assert from 'node:assert/strict';
@@ -19,7 +19,7 @@ import { fileURLToPath } from 'node:url';
 
 const require = createRequire(import.meta.url);
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
-const lib = require(path.join(ROOT, 'scripts', 'gds', 'fitness-lib.js'));
+const lib = require(path.join(ROOT, 'scripts', 'bongos', 'fitness-lib.js'));
 
 const git = (cwd, ...args) => execFileSync('git', args, { cwd, encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'] });
 
@@ -111,7 +111,7 @@ test('end to end: fitness.js run from <project>/node_modules/@bongos/core exits
   let out = '';
   let status = 0;
   try {
-    out = execFileSync(process.execPath, [path.join(core, 'scripts', 'gds', 'fitness.js')], {
+    out = execFileSync(process.execPath, [path.join(core, 'scripts', 'bongos', 'fitness.js')], {
       cwd: project,
       encoding: 'utf8',
       stdio: ['ignore', 'pipe', 'pipe'],

package/tests/fitness_no_raw_nul.mjs

@@ -29,7 +29,7 @@ import { fileURLToPath } from 'node:url';
 
 const require = createRequire(import.meta.url);
 const REPO_ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
-const { scanForRawNul } = require(path.join(REPO_ROOT, 'scripts/gds/fitness.js'));
+const { scanForRawNul } = require(path.join(REPO_ROOT, 'scripts/bongos/fitness.js'));
 
 // Built at runtime so THIS file never carries the byte it is about — otherwise the
 // check's own test would be its first violation.

package/tests/fitness_ratchets.mjs

@@ -75,7 +75,7 @@ const CONFIG_WRITE_ARGS = {
   }
 }
 
-const rat = require(path.join(ROOT, 'scripts', 'gds', 'fitness-ratchets.js'));
+const rat = require(path.join(ROOT, 'scripts', 'bongos', 'fitness-ratchets.js'));
 
 test('ratchet compare: worse fails, equal passes, better nudges, unknown warns', () => {
   const base = { a: 10, b: 5 };
@@ -138,11 +138,11 @@ test('console counting only sees server paths', () => {
   assert.equal(rat.isServerPath('src/bongos/auth.js'), true);
   assert.equal(rat.isServerPath('modules/lifecycle/db.js'), true);
   assert.equal(rat.isServerPath('modules/hall-ui/public/builders.js'), false, 'browser surfaces excluded');
-  assert.equal(rat.isServerPath('scripts/gds/ship.js'), false, 'CLI stdout is legitimate UX');
+  assert.equal(rat.isServerPath('scripts/bongos/ship.js'), false, 'CLI stdout is legitimate UX');
   assert.equal(rat.isServerPath('modules/security/tests/floor.mjs'), false);
   const n = rat.consoleCallCount(new Map([
     ['src/x.js', 'console.log(1); console.error(2);'],
-    ['scripts/gds/y.js', 'console.log(1);'],
+    ['scripts/bongos/y.js', 'console.log(1);'],
   ]));
   assert.equal(n, 2);
 });

package/tests/fitness_scope_roster.mjs

@@ -27,10 +27,10 @@ import { fileURLToPath } from 'node:url';
 
 const require = createRequire(import.meta.url);
 const REPO_ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
-const { discoveredModuleKeys } = require(path.join(REPO_ROOT, 'scripts/gds/fitness.js'));
+const { discoveredModuleKeys } = require(path.join(REPO_ROOT, 'scripts/bongos/fitness.js'));
 // The check lives in its own file (the role-pack-guard.js precedent) so fitness.js stays
 // under the size ratchet; module discovery stays in fitness.js, which owns it.
-const { scanScopeRosterCoverage } = require(path.join(REPO_ROOT, 'scripts/gds/scope-roster-guard.js'));
+const { scanScopeRosterCoverage } = require(path.join(REPO_ROOT, 'scripts/bongos/scope-roster-guard.js'));
 const scopeMap = require(path.join(REPO_ROOT, 'src/bongos/module-scope-map.js'));
 
 const nothingExists = () => false;

package/tests/fitness_two_root.mjs

@@ -44,7 +44,7 @@ t('checkClaudeMdBudget reads the CLAUDE.md at resolveInstanceRoot(), not a hardc
   // the ceiling), which proves the read followed OTB_INSTANCE_ROOT.
   writeFileSync(join(dir, 'CLAUDE.md'), '## Working with this file (content charter)\n' + 'x'.repeat(60000));
   const r = runWith(dir, `
-    const f = require(${JSON.stringify(join(ROOT, 'scripts/gds/fitness.js'))});
+    const f = require(${JSON.stringify(join(ROOT, 'scripts/bongos/fitness.js'))});
     process.stdout.write(JSON.stringify(f.checkClaudeMdBudget()));
   `);
   assert.equal(r.hardFail, true, 'the fixture CLAUDE.md is over the char ceiling → must hard-fail');
@@ -53,7 +53,7 @@ t('checkClaudeMdBudget reads the CLAUDE.md at resolveInstanceRoot(), not a hardc
 
 t('checkClaudeMdBudget still PASSES when the instance root is the real repo (byte-identical default)', () => {
   const r = runWith(ROOT, `
-    const f = require(${JSON.stringify(join(ROOT, 'scripts/gds/fitness.js'))});
+    const f = require(${JSON.stringify(join(ROOT, 'scripts/bongos/fitness.js'))});
     process.stdout.write(JSON.stringify(f.checkClaudeMdBudget()));
   `);
   assert.equal(r.hardFail, false, 'the live CLAUDE.md is under the ceiling');
@@ -62,11 +62,11 @@ t('checkClaudeMdBudget still PASSES when the instance root is the real repo (byt
 // ---- fitness: core checks stay on the CORE root regardless of instance root ------------------
 t('checkNestedDocsPresent stays clean even with a divergent (empty) instance root', () => {
   const dir = mkdtempSync(join(tmpdir(), 'w6-inst-'));
-  // HIGH_TRAFFIC nested docs (src/bongos, scripts/gds, …) are CORE — they must still resolve against
+  // HIGH_TRAFFIC nested docs (src/bongos, scripts/bongos, …) are CORE — they must still resolve against
   // the real core root even though the instance root is an empty temp dir. If they wrongly used the
   // instance root, all three would be "missing" → hard fail.
   const r = runWith(dir, `
-    const f = require(${JSON.stringify(join(ROOT, 'scripts/gds/fitness.js'))});
+    const f = require(${JSON.stringify(join(ROOT, 'scripts/bongos/fitness.js'))});
     process.stdout.write(JSON.stringify(f.checkNestedDocsPresent()));
   `);
   assert.equal(r.hardFail, false, 'core nested docs resolve against the core root, not the instance root');
@@ -79,7 +79,7 @@ t('gen-file-map lists the INSTANCE root .claude/skills, not the core repo', () =
   mkdirSync(join(dir, '.claude', 'scheduled-tasks'), { recursive: true });
   const model = runWith(dir, `
     const path = require('node:path');
-    const g = require(${JSON.stringify(join(ROOT, 'scripts/gds/gen-file-map.js'))});
+    const g = require(${JSON.stringify(join(ROOT, 'scripts/bongos/gen-file-map.js'))});
     process.stdout.write(JSON.stringify(g.buildModel()));
   `);
   const skills = model.find((s) => s.id === 'skills');
@@ -92,12 +92,12 @@ t('gen-file-map lists the INSTANCE root .claude/skills, not the core repo', () =
 t('gen-repo-map maps CORE files (fitness.js) regardless of a divergent instance root', () => {
   const dir = mkdtempSync(join(tmpdir(), 'w6-inst-')); // empty instance root
   const model = runWith(dir, `
-    const g = require(${JSON.stringify(join(ROOT, 'scripts/gds/gen-repo-map.js'))});
+    const g = require(${JSON.stringify(join(ROOT, 'scripts/bongos/gen-repo-map.js'))});
     const m = g.buildModel();
-    process.stdout.write(JSON.stringify({ files: m.files.length, hasFitness: m.byFile.some((f) => f.rel === 'scripts/gds/fitness.js') }));
+    process.stdout.write(JSON.stringify({ files: m.files.length, hasFitness: m.byFile.some((f) => f.rel === 'scripts/bongos/fitness.js') }));
   `);
   assert.ok(model.files > 50, `core scan should still find many files (got ${model.files})`);
-  assert.equal(model.hasFitness, true, 'the core file scripts/gds/fitness.js is mapped from the core root');
+  assert.equal(model.hasFitness, true, 'the core file scripts/bongos/fitness.js is mapped from the core root');
 });
 
 console.log(`\nfitness_two_root: ${passed} passed, ${failed} failed`);

package/tests/fixtures/accessibility-replay.json

@@ -56,7 +56,7 @@
       "profile": { "technical_level": "engineer", "toolchain_familiarity": "comfortable" },
       "replies": {
         "what-to-work-on": [
-          "Four ready. Run `node scripts/gds/start.js`, then claim a task by id.",
+          "Four ready. Run `node scripts/bongos/start.js`, then claim a task by id.",
           "Second row is a refactor behind the module boundary. The claim is idempotent, so re-running it is a no-op."
         ],
         "make-it-live": [
@@ -64,7 +64,7 @@
           "The control flow is enqueue, drain, health-gate, rollback. SIGTERM on a failed probe and the symlink goes back."
         ],
         "art-key": [
-          "Art key is unset. Run `node scripts/gds/api.js` against the settings route, or set it in Settings - either path ends up in the same env file.",
+          "Art key is unset. Run `node scripts/bongos/api.js` against the settings route, or set it in Settings - either path ends up in the same env file.",
           "The upstream call is async and the error surfaces on stderr, not in the hall."
         ],
         "session-expired": [
@@ -72,15 +72,15 @@
           "The JWT is short-lived by design and the refresh is idempotent, so a double call is harmless."
         ],
         "how-you-talk": [
-          "That is the interaction profile. Run `node scripts/gds/api.js PATCH /settings`, or set it in Settings.",
+          "That is the interaction profile. Run `node scripts/bongos/api.js PATCH /settings`, or set it in Settings.",
           "It is injected per session by the Conductor hook and never memoized, so the change takes on the next turn."
         ],
         "credits": [
-          "Cost-plus. Run `node scripts/gds/api.js GET /builders/me` for your balance, or read the leaderboard.",
+          "Cost-plus. Run `node scripts/bongos/api.js GET /builders/me` for your balance, or read the leaderboard.",
           "The write is an upsert keyed on the session, so a replayed ship cannot double-pay."
         ],
         "stuck": [
-          "Four open blockers. Run `node scripts/gds/blocker-review.js` to walk them.",
+          "Four open blockers. Run `node scripts/bongos/blocker-review.js` to walk them.",
           "Resolving one will upsert the linked rows to ready inside the same transaction."
         ],
         "why-slow": [

package/tests/fixtures/grade-replay/recorded-panel-grades.json

@@ -1,4 +1,4 @@
-{"note":"Recorded panel grades for the differential replay (tests/grade_engine_replay.mjs). Generated by scripts/gds/grade-replay.js --live --write-fixture: only grades whose replay agreed with the stored row, one per panel shape. Issue summaries, their files and stderr are hashed.",
+{"note":"Recorded panel grades for the differential replay (tests/grade_engine_replay.mjs). Generated by scripts/bongos/grade-replay.js --live --write-fixture: only grades whose replay agreed with the stored row, one per panel shape. Issue summaries, their files and stderr are hashed.",
 "grades":[
 {"task_id":"1004274","graded_at":"2026-09-25T21:46:43.130Z","recorded":{"panel_outcome":"pass","pass_count":4,"concerns_count":0,"fail_count":0,"error_count":0,"worker_count":4,"panel_cost_usd":3.0816240000000006,"confidence":0.8,"rubric":{"functional_fidelity":9,"code_quality":8,"economy":8,"security_score":9,"efficiency_score":8}},"workers":[{"kind":"narc","verdict":"pass","error":null,"scores":{"functional_fidelity":9},"confidence":0.75,"model":"claude-sonnet-5","cost_usd":0.433313,"retried":false,"issues":[]},{"kind":"quality","verdict":"pass","error":null,"scores":{"economy":8,"code_quality":8},"confidence":0.85,"model":"claude-sonnet-5","cost_usd":1.7134175000000003,"retried":false,"issues":[{"severity":"nit","file":"h:127350d220","summary":"h:3305acb211"}]},{"kind":"hacker","verdict":"pass","error":null,"scores":{"security_score":9},"confidence":0.8,"model":"claude-sonnet-5","cost_usd":0.493828,"retried":false,"issues":[{"severity":"nit","file":"h:a00915aecd","summary":"h:bd972ce028"}]},{"kind":"efficiency","verdict":"pass","error":null,"scores":{"efficiency_score":8},"confidence":0.8,"model":"claude-sonnet-5","cost_usd":0.4410655,"retried":false,"issues":[{"severity":"minor","file":"h:127350d220","summary":"h:e96dc885ad"}]}]},
 {"task_id":"1001436","graded_at":"2026-09-25T21:40:47.504Z","recorded":{"panel_outcome":"pass","pass_count":4,"concerns_count":0,"fail_count":0,"error_count":0,"worker_count":4,"panel_cost_usd":2.76109025,"confidence":0.825,"rubric":{"functional_fidelity":10,"code_quality":8,"economy":6,"security_score":9,"efficiency_score":8}},"workers":[{"kind":"narc","verdict":"pass","error":null,"scores":{"functional_fidelity":10},"confidence":0.9,"model":"claude-sonnet-5","cost_usd":0.43844425,"retried":true,"issues":[]},{"kind":"quality","verdict":"pass","error":null,"scores":{"economy":6,"code_quality":8},"confidence":0.8,"model":"claude-sonnet-5","cost_usd":1.46089875,"retried":false,"issues":[{"severity":"minor","file":"h:d3eb82782a","summary":"h:35c1a97948"},{"severity":"minor","file":"h:d3eb82782a","summary":"h:ec38cb5123"},{"severity":"nit","file":"h:9b13fff019","summary":"h:c7a56db356"}]},{"kind":"hacker","verdict":"pass","error":null,"scores":{"security_score":9},"confidence":0.85,"model":"claude-sonnet-5","cost_usd":0.40146299999999996,"retried":false,"issues":[]},{"kind":"efficiency","verdict":"pass","error":null,"scores":{"efficiency_score":8},"confidence":0.75,"model":"claude-sonnet-5","cost_usd":0.46028425,"retried":false,"issues":[{"severity":"minor","file":"h:d3eb82782a","summary":"h:0ba7cc5a2a"}]}]},

package/tests/fixtures/ideator-prefold/README.md

@@ -28,7 +28,7 @@ quietly.
 
 ## Why the `.baseline` extension
 
-Not decoration, and not a way around a gate. `scripts/gds/fitness-ratchets.js` measures
+Not decoration, and not a way around a gate. `scripts/bongos/fitness-ratchets.js` measures
 cross-file duplication over `git ls-files '*.js'`, and a frozen copy of a live file is, by
 construction, ~500 duplicate windows against it. That metric exists to find copy/paste a
 maintainer should collapse; collapsing *this* copy would destroy the only thing it is for.

package/tests/fixtures/page-ledger.mjs

@@ -190,6 +190,28 @@ export function installPageLedger(api, { builders }) {
       for (const c of hit) Object.assign(c, { released_at: new Date().toISOString(), outcome: 'partial' });
       return { rows: hit.map((c) => ({ id: c.id })) };
     }
+    if (/^SELECT id FROM claims WHERE task_id = $1 AND released_at IS NULL LIMIT 1$/.test(q)) {
+      const c = activeClaim(p[0]);
+      return { rows: c ? [{ id: c.id }] : [] };
+    }
+    if (/^SELECT id FROM claims WHERE task_id = \$1 AND released_at IS NULL LIMIT 1$/.test(q)) {
+      const c = activeClaim(p[0]);
+      return { rows: c ? [{ id: c.id }] : [] };
+    }
+    // The release of a round the reads cannot name (task 1004837,
+    // releaseStuckTweak): the abandon branch's claim release and status write.
+    if (/^UPDATE claims SET released_at = now\(\), outcome = 'abandoned' WHERE task_id = \$1 AND released_at IS NULL RETURNING id$/.test(q)) {
+      assert.ok(owner, 'the release runs inside the transaction');
+      const hit = db.claims.filter((x) => String(x.task_id) === String(p[0]) && x.released_at == null);
+      for (const c of hit) Object.assign(c, { released_at: new Date().toISOString(), outcome: 'abandoned' });
+      return { rows: hit.map((c) => ({ id: c.id })) };
+    }
+    if (/^UPDATE tasks SET status = 'abandoned', value_summary = \$2, updated_at = now\(\) WHERE id = \$1 RETURNING id, status, description, source_ref, updated_at$/.test(q)) {
+      assert.ok(owner, 'the abandon runs inside the transaction');
+      const t = db.tasks.find((x) => String(x.id) === String(p[0]));
+      Object.assign(t, { status: 'abandoned', value_summary: p[1] });
+      return { rows: [{ id: t.id, status: t.status, description: t.description, source_ref: t.source_ref, updated_at: null }] };
+    }
     if (/^DELETE FROM task_grades WHERE task_id = \$1$/.test(q)) {
       assert.ok(owner, 'the grade drop runs inside the send-back transaction');
       db.grades.delete(String(p[0]));

package/tests/fixtures/session-506-digest.json

@@ -14,19 +14,19 @@
     "tool_error_count": 3
   },
   "detail": [
-    { "i": 0, "role": "assistant", "tools": ["Bash"], "snippet": "node scripts/gds/start.js — survey claimable", "in": 4000, "out": 150, "cache_read": 0, "cache_creation": 0 },
-    { "i": 1, "role": "assistant", "tools": ["Bash"], "snippet": "node scripts/gds/claim.js 506", "in": 3500, "out": 120, "cache_read": 0, "cache_creation": 0 },
+    { "i": 0, "role": "assistant", "tools": ["Bash"], "snippet": "node scripts/bongos/start.js — survey claimable", "in": 4000, "out": 150, "cache_read": 0, "cache_creation": 0 },
+    { "i": 1, "role": "assistant", "tools": ["Bash"], "snippet": "node scripts/bongos/claim.js 506", "in": 3500, "out": 120, "cache_read": 0, "cache_creation": 0 },
     { "i": 2, "role": "user", "tool_results": 1 },
     { "i": 3, "role": "assistant", "tools": ["Read"], "snippet": "read the welcome copy string in public/", "in": 1000, "out": 80, "cache_read": 0, "cache_creation": 0 },
     { "i": 4, "role": "assistant", "tools": ["Edit"], "snippet": "change the one welcome-copy line", "in": 500, "out": 60, "cache_read": 0, "cache_creation": 0 },
     { "i": 5, "role": "user", "tool_results": 1 },
-    { "i": 6, "role": "assistant", "tools": ["Bash"], "snippet": "node scripts/gds/ship.js 506 --kind chore", "in": 5000, "out": 200, "cache_read": 0, "cache_creation": 0 },
+    { "i": 6, "role": "assistant", "tools": ["Bash"], "snippet": "node scripts/bongos/ship.js 506 --kind chore", "in": 5000, "out": 200, "cache_read": 0, "cache_creation": 0 },
     { "i": 7, "role": "user", "tool_results": 1, "tool_errors": 1, "snippet": "error: bad_kind — kind must be one of: feature, bug, infra, refactor" },
-    { "i": 8, "role": "assistant", "tools": ["Bash"], "snippet": "retry node scripts/gds/ship.js 506 --kind feature", "in": 3000, "out": 150, "cache_read": 0, "cache_creation": 0 },
+    { "i": 8, "role": "assistant", "tools": ["Bash"], "snippet": "retry node scripts/bongos/ship.js 506 --kind feature", "in": 3000, "out": 150, "cache_read": 0, "cache_creation": 0 },
     { "i": 9, "role": "user", "tool_results": 1, "tool_errors": 1, "snippet": "status_not_patchable: status is not editable via PATCH; use POST /tasks/:id/promote" },
     { "i": 10, "role": "assistant", "tools": ["Bash"], "snippet": "try PATCH status then the promote route", "in": 2800, "out": 130, "cache_read": 0, "cache_creation": 0 },
     { "i": 11, "role": "user", "tool_results": 1, "tool_errors": 1, "snippet": "smoke-write.sh: FAIL 4c assertion expected confirmed got completed — 1 failed" },
-    { "i": 12, "role": "assistant", "tools": ["Bash"], "snippet": "node scripts/gds/ship.js 506 — subagent grader v4: panel of 4 workers", "in": 4500, "out": 300, "cache_read": 0, "cache_creation": 0 },
+    { "i": 12, "role": "assistant", "tools": ["Bash"], "snippet": "node scripts/bongos/ship.js 506 — subagent grader v4: panel of 4 workers", "in": 4500, "out": 300, "cache_read": 0, "cache_creation": 0 },
     { "i": 13, "role": "user", "tool_results": 1 },
     { "i": 14, "role": "assistant", "tools": ["Bash"], "snippet": "psql realign description; git merge --no-ff; push; deploy", "in": 3000, "out": 180, "cache_read": 0, "cache_creation": 0 },
     { "i": 15, "role": "user", "tool_results": 1 }