@bongos/core 1.21.175 → 1.21.177

package/tests/memory_pull.mjs

@@ -24,10 +24,26 @@ import fs from 'node:fs';
 import path from 'node:path';
 import os from 'node:os';
 import { spawnSync } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
 
 const require = createRequire(import.meta.url);
 const pull = require('../.claude/hooks/pull-memory.js');
 const hookPath = require.resolve('../.claude/hooks/pull-memory.js');
+// The checkout this file lives in, NOT process.cwd(). The hook keys its memory dir to the
+// checkout it is started from, so a cwd-relative start resolved a different dir (or none at
+// all) depending on where the runner was launched (task 1004865).
+const REPO_ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
+// The hook calls /api/bongos/* since the gds-to-bongos rename. A stub still answering only
+// /api/gds/* 404'd every call, so pullMemory returned null and wrote nothing (task 1004865).
+const isMemoryRoute = (pathname, leaf) => pathname === `/api/bongos/memory/${leaf}`;
+// ONE throwaway HOME holding the fake session, shared by every in-process pullMemory case.
+// cli-lib freezes its session-file paths the first time it is required (see the no-session
+// case below), so a per-case HOME only worked for the FIRST case: every later one looked for
+// its session in the first case's deleted home, found none, and pulled nothing (task 1004865).
+// Each case still gets its own CLAUDE_CONFIG_DIR, so the memory dirs stay isolated.
+const SESSION_HOME = fs.mkdtempSync(path.join(os.tmpdir(), 'otb-pull-session-'));
+fs.mkdirSync(path.join(SESSION_HOME, '.config', 'otb'), { recursive: true });
+fs.writeFileSync(path.join(SESSION_HOME, '.config', 'otb', 'gds-session.json'), JSON.stringify({ token: 'fake-token', api_base: 'https://example.test' }));
 
 let passed = 0;
 let failed = 0;
@@ -191,7 +207,7 @@ test('encodeProjectPath: replaces / and . with -', () => {
 // The old /[/.]/ class silently no-opped on a Windows path — separator, drive
 // colon and spaces all survived, so resolveMemoryDir built a path with a drive
 // letter buried mid-string that no mkdir could create and every file "failed"
-// (task 1003567). Must match the encoder in scripts/gds/ship-memory-sync.js.
+// (task 1003567). Must match the encoder in scripts/bongos/ship-memory-sync.js.
 test('encodeProjectPath: Windows path — separator, drive colon and spaces all become -', () => {
   assert.equal(
     pull.encodeProjectPath(String.raw`C:\Users\x\Desktop\Cloud Bongos\cloud-bongos`),
@@ -213,19 +229,16 @@ await testAsync('pullMemory: restores missing, skips identical/local-newer, reje
   // Build a throwaway HOME with a session token + an empty memory dir keyed to
   // a real git checkout (this repo's main worktree).
   const tmpHome = fs.mkdtempSync(path.join(os.tmpdir(), 'otb-pull-home-'));
-  const cfgDir = path.join(tmpHome, '.config', 'otb');
-  fs.mkdirSync(cfgDir, { recursive: true });
-  fs.writeFileSync(path.join(cfgDir, 'gds-session.json'), JSON.stringify({ token: 'fake-token', api_base: 'https://example.test' }));
 
   const origHome = process.env.HOME;
   const origConfig = process.env.CLAUDE_CONFIG_DIR;
   const origFetch = globalThis.fetch;
-  process.env.HOME = tmpHome;
+  process.env.HOME = SESSION_HOME;
   // Pin the memory base into the throwaway home so we don't touch the real one.
   process.env.CLAUDE_CONFIG_DIR = path.join(tmpHome, '.claude');
 
   // Resolve the memDir the hook will use (keyed to this repo's main worktree).
-  const memDir = pull.resolveMemoryDir(process.cwd());
+  const memDir = pull.resolveMemoryDir(REPO_ROOT);
   assert.ok(memDir, 'memDir resolved');
   fs.mkdirSync(memDir, { recursive: true });
 
@@ -261,13 +274,13 @@ await testAsync('pullMemory: restores missing, skips identical/local-newer, reje
   let contentFetches = 0;
   globalThis.fetch = async (urlStr) => {
     const u = new URL(urlStr);
-    if (u.pathname === '/api/gds/memory/files') {
+    if (isMemoryRoute(u.pathname, 'files')) {
       const files = Object.entries(serverFiles).map(([p, v]) => ({
         path: p, sha256: v.sha256, byte_len: Buffer.byteLength(v.content), mtime: v.mtime, updated_at: v.updated_at,
       }));
       return new Response(JSON.stringify({ count: files.length, files }), { status: 200 });
     }
-    if (u.pathname === '/api/gds/memory/file') {
+    if (isMemoryRoute(u.pathname, 'file')) {
       contentFetches += 1;
       const p = u.searchParams.get('path');
       const v = serverFiles[p];
@@ -279,7 +292,7 @@ await testAsync('pullMemory: restores missing, skips identical/local-newer, reje
 
   let summary;
   try {
-    summary = await pull.pullMemory({ startCwd: process.cwd() });
+    summary = await pull.pullMemory({ startCwd: REPO_ROOT });
   } finally {
     process.env.HOME = origHome;
     if (origConfig === undefined) delete process.env.CLAUDE_CONFIG_DIR; else process.env.CLAUDE_CONFIG_DIR = origConfig;
@@ -314,17 +327,14 @@ await testAsync('pullMemory: integrity — correct sha writes, mismatched/missin
   // "pull" candidates. Only the one whose served content matches its advertised
   // sha256 gets written; the mismatch and the missing-sha are both skipped.
   const tmpHome = fs.mkdtempSync(path.join(os.tmpdir(), 'otb-pull-integrity-'));
-  const cfgDir = path.join(tmpHome, '.config', 'otb');
-  fs.mkdirSync(cfgDir, { recursive: true });
-  fs.writeFileSync(path.join(cfgDir, 'gds-session.json'), JSON.stringify({ token: 'fake-token', api_base: 'https://example.test' }));
 
   const origHome = process.env.HOME;
   const origConfig = process.env.CLAUDE_CONFIG_DIR;
   const origFetch = globalThis.fetch;
-  process.env.HOME = tmpHome;
+  process.env.HOME = SESSION_HOME;
   process.env.CLAUDE_CONFIG_DIR = path.join(tmpHome, '.claude');
 
-  const memDir = pull.resolveMemoryDir(process.cwd());
+  const memDir = pull.resolveMemoryDir(REPO_ROOT);
   assert.ok(memDir, 'memDir resolved');
   fs.mkdirSync(memDir, { recursive: true });
 
@@ -342,13 +352,13 @@ await testAsync('pullMemory: integrity — correct sha writes, mismatched/missin
   let contentFetches = 0;
   globalThis.fetch = async (urlStr) => {
     const u = new URL(urlStr);
-    if (u.pathname === '/api/gds/memory/files') {
+    if (isMemoryRoute(u.pathname, 'files')) {
       const files = Object.entries(serverFiles).map(([p, v]) => ({
         path: p, sha256: v.sha256, byte_len: Buffer.byteLength(v.content), mtime: v.mtime, updated_at: v.updated_at,
       }));
       return new Response(JSON.stringify({ count: files.length, files }), { status: 200 });
     }
-    if (u.pathname === '/api/gds/memory/file') {
+    if (isMemoryRoute(u.pathname, 'file')) {
       contentFetches += 1;
       const p = u.searchParams.get('path');
       const v = serverFiles[p];
@@ -360,7 +370,7 @@ await testAsync('pullMemory: integrity — correct sha writes, mismatched/missin
 
   let summary;
   try {
-    summary = await pull.pullMemory({ startCwd: process.cwd() });
+    summary = await pull.pullMemory({ startCwd: REPO_ROOT });
   } finally {
     process.env.HOME = origHome;
     if (origConfig === undefined) delete process.env.CLAUDE_CONFIG_DIR; else process.env.CLAUDE_CONFIG_DIR = origConfig;
@@ -387,22 +397,19 @@ await testAsync('pullMemory: 0 written + skips → summary does not read like a
   // lead with "pulled 0 memory files" (reads like the pull failed). One server
   // file, no local copy, but its sha is missing → rejected, 0 written.
   const tmpHome = fs.mkdtempSync(path.join(os.tmpdir(), 'otb-pull-zero-'));
-  const cfgDir = path.join(tmpHome, '.config', 'otb');
-  fs.mkdirSync(cfgDir, { recursive: true });
-  fs.writeFileSync(path.join(cfgDir, 'gds-session.json'), JSON.stringify({ token: 'fake-token', api_base: 'https://example.test' }));
 
   const origHome = process.env.HOME;
   const origConfig = process.env.CLAUDE_CONFIG_DIR;
   const origFetch = globalThis.fetch;
-  process.env.HOME = tmpHome;
+  process.env.HOME = SESSION_HOME;
   process.env.CLAUDE_CONFIG_DIR = path.join(tmpHome, '.claude');
 
-  const memDir = pull.resolveMemoryDir(process.cwd());
+  const memDir = pull.resolveMemoryDir(REPO_ROOT);
   fs.mkdirSync(memDir, { recursive: true });
 
   globalThis.fetch = async (urlStr) => {
     const u = new URL(urlStr);
-    if (u.pathname === '/api/gds/memory/files') {
+    if (isMemoryRoute(u.pathname, 'files')) {
       const files = [{ path: 'orphan.md', byte_len: 3, mtime: '2026-05-30T12:00:00Z', updated_at: '2026-05-30T12:00:00Z' }];
       return new Response(JSON.stringify({ count: files.length, files }), { status: 200 });
     }
@@ -411,7 +418,7 @@ await testAsync('pullMemory: 0 written + skips → summary does not read like a
 
   let summary;
   try {
-    summary = await pull.pullMemory({ startCwd: process.cwd() });
+    summary = await pull.pullMemory({ startCwd: REPO_ROOT });
   } finally {
     process.env.HOME = origHome;
     if (origConfig === undefined) delete process.env.CLAUDE_CONFIG_DIR; else process.env.CLAUDE_CONFIG_DIR = origConfig;
@@ -434,7 +441,7 @@ await testAsync('pullMemory: no session → silent null', async () => {
   try {
     const child = spawnSync(
       process.execPath,
-      ['-e', 'require(process.argv[1]).pullMemory({ startCwd: process.argv[2] }).then((r) => console.log(JSON.stringify(r)))', hookPath, process.cwd()],
+      ['-e', 'require(process.argv[1]).pullMemory({ startCwd: process.argv[2] }).then((r) => console.log(JSON.stringify(r)))', hookPath, REPO_ROOT],
       { env: { ...process.env, HOME: tmpHome, USERPROFILE: tmpHome }, encoding: 'utf8' },
     );
     assert.equal(child.status, 0, `child exited ${child.status}: ${child.stderr}`);
@@ -444,5 +451,6 @@ await testAsync('pullMemory: no session → silent null', async () => {
   }
 });
 
+fs.rmSync(SESSION_HOME, { recursive: true, force: true });
 console.log(`\n${passed} passed, ${failed} failed`);
 if (failed > 0) process.exit(1);

package/tests/merge_driver_register.mjs

@@ -34,7 +34,7 @@ const require = createRequire(import.meta.url);
 // a usable path. Enforced by fitness.js (task 1002889).
 const REPO_ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
 const { classifyMergeDriverState, registerMergeDriver, MERGE_DRIVER_NAME } =
-  require(path.join(REPO_ROOT, 'scripts/gds/install-git-hooks.js'));
+  require(path.join(REPO_ROOT, 'scripts/bongos/install-git-hooks.js'));
 
 // A throwaway repo with one file attributed to the driver and two divergent branches,
 // so `git merge` actually has to consult the driver config.
@@ -106,9 +106,9 @@ test('registerMergeDriver: default command stays relative, driverScript pins an
   const commands = [];
   const run = (_bin, args) => { if (args[1] === `merge.${MERGE_DRIVER_NAME}.driver`) commands.push(args[2]); };
   registerMergeDriver('/nowhere', { run });
-  assert.equal(commands[0], 'node scripts/gds/git-merge-regen.js %O %A %B %P');
+  assert.equal(commands[0], 'node scripts/bongos/git-merge-regen.js %O %A %B %P');
 
-  const script = path.join(REPO_ROOT, 'scripts', 'gds', 'git-merge-regen.js');
+  const script = path.join(REPO_ROOT, 'scripts', 'bongos', 'git-merge-regen.js');
   registerMergeDriver('/nowhere', { run, driverScript: script });
   const pinned = commands[1];
   const m = pinned.match(/^node "([^"]+)" %O %A %B %P$/);

package/tests/migration_allocation.mjs

@@ -54,7 +54,7 @@ const migrationSql = read('migrations', '081_tasks_needs_migration.sql');
 const dbSrc = lifecycleDbSource();
 // task 1003206: the task router is tasks.js + task-*.js now — read the family.
 const routesSrc = taskRoutesSource();
-const captureSrc = read('scripts', 'gds', 'capture.js');
+const captureSrc = read('scripts', 'bongos', 'capture.js');
 
 // The allocator's trigger, reproduced as a pure predicate. This is the exact
 // condition both claimTask and batchClaim now branch on.
@@ -129,7 +129,7 @@ function shouldReserveMigrationNumber(task) {
   await test('capture.js no longer mirrors the migration regex', () => {
     assert.ok(
       !/MIGRATION_KEYWORD_RE/.test(captureSrc),
-      'the scripts/gds/capture.js keyword mirror must be deleted (server-side detection only)'
+      'the scripts/bongos/capture.js keyword mirror must be deleted (server-side detection only)'
     );
   });
 

package/tests/migration_namespace.mjs

@@ -17,7 +17,7 @@ import { strict as assert } from 'node:assert';
 import { createRequire } from 'node:module';
 
 const require = createRequire(import.meta.url);
-const ns = require('../scripts/gds/migration-namespace.js');
+const ns = require('../scripts/bongos/migration-namespace.js');
 
 let passed = 0;
 let failed = 0;

package/tests/migrations_forward_safe.mjs

@@ -15,7 +15,7 @@ import { join, dirname } from 'node:path';
 import { fileURLToPath } from 'node:url';
 
 const require = createRequire(import.meta.url);
-const lint = require('../scripts/gds/lint-migrations.js');
+const lint = require('../scripts/bongos/lint-migrations.js');
 const REPO_ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
 
 let passed = 0, failed = 0;

package/tests/mingle.mjs

@@ -326,7 +326,7 @@ test('NOTHING in the module reaches a penalty surface', () => {
   // render, WHICH standing a decline does not touch. Naming a surface in order to
   // disclaim it is the opposite of reaching for it, so both are stripped before
   // the scan. This is the codebase's standing convention: a line that CITES a rule
-  // is the only thing exempt from it (scripts/gds/fitness.js says so of the
+  // is the only thing exempt from it (scripts/bongos/fitness.js says so of the
   // category-advisory guard). Everything else — every identifier, every line of
   // SQL — is scanned.
   const code = SRC

package/tests/mirror_lineage_fulltree.mjs

@@ -19,9 +19,9 @@ import { test } from 'node:test';
 import { createRequire } from 'node:module';
 
 const require = createRequire(import.meta.url);
-const { runSimulation } = require('../scripts/gds/mirror-lineage-check.js');
-const { migrationNumberOf } = require('../scripts/gds/migration-namespace.js');
-const { nextFree } = require('../scripts/gds/next-number.js');
+const { runSimulation } = require('../scripts/bongos/mirror-lineage-check.js');
+const { migrationNumberOf } = require('../scripts/bongos/migration-namespace.js');
+const { nextFree } = require('../scripts/bongos/next-number.js');
 
 const MIGRATIONS_DIR = path.join(path.dirname(fileURLToPath(import.meta.url)), '..', 'migrations');
 

package/tests/mirror_lineage_proof.mjs

@@ -9,8 +9,8 @@ const require = createRequire(import.meta.url);
 const {
   migrationNumbersFromPaths, parseEnumChecks, numberingDivergence, enumDrift,
   proveLineage, buildRedactionContext,
-} = require('../scripts/gds/mirror-lineage-check.js');
-const { nextFree } = require('../scripts/gds/next-number.js');
+} = require('../scripts/bongos/mirror-lineage-check.js');
+const { nextFree } = require('../scripts/bongos/next-number.js');
 
 test('migrationNumbersFromPaths picks CORE migrations only (not module/ADR numbers)', () => {
   const set = migrationNumbersFromPaths([

package/tests/mirror_redact.mjs

@@ -1,7 +1,7 @@
 // tests/mirror_redact.mjs
 //
 // GDS-V4 R72 (task 1211) — locks the public-mirror FILE-LEVEL redactor
-// (scripts/gds/mirror-redact.js, ADR 0098 §6). A silent leak from a publish boundary is
+// (scripts/bongos/mirror-redact.js, ADR 0098 §6). A silent leak from a publish boundary is
 // catastrophic, so this proves:
 //   1. instance literals (domain + subdomains, repo/db/world token, owner login + alias,
 //      company) are redacted; localhost/private/RFC-5737 IPs are KEPT, public IPv4/IPv6
@@ -27,7 +27,7 @@ import path from 'node:path';
 import { fileURLToPath } from 'node:url';
 
 const require = createRequire(import.meta.url);
-const R = require('../scripts/gds/mirror-redact.js');
+const R = require('../scripts/bongos/mirror-redact.js');
 const {
   buildRedactionRules, collectSensitiveLiterals, redactText, findLeaks, findSecretLeak,
   deriveInstanceLiterals, isPublicRoutableIPv4, isPublicRoutableIPv6, parseIPv6, registrableLabel,
@@ -213,7 +213,7 @@ t('mirror-redact.js source contains none of THIS instance\'s literals (sourced a
   const brandingPath = path.join(REPO_ROOT, 'config/branding.json');
   if (!fs.existsSync(brandingPath)) { console.log('       (no config/branding.json — vanilla instance, skipping)'); return; }
   const branding = JSON.parse(fs.readFileSync(brandingPath, 'utf8'));
-  const src = fs.readFileSync(path.join(REPO_ROOT, 'scripts/gds/mirror-redact.js'), 'utf8').toLowerCase();
+  const src = fs.readFileSync(path.join(REPO_ROOT, 'scripts/bongos/mirror-redact.js'), 'utf8').toLowerCase();
   const reals = collectSensitiveLiterals(branding);
   // Also check the registrable domain label explicitly.
   const domLabel = registrableLabel(branding?.domains?.publicOrigin);
@@ -226,7 +226,7 @@ t('mirror-redact.js source contains none of THIS instance\'s literals (sourced a
 });
 
 // ── IPv6 boundary guard (task 1688) ─────────────────────────────────────────────────
-// The core packager (scripts/gds/package-core.js) redacts 900+ SOURCE files, exposing
+// The core packager (scripts/bongos/package-core.js) redacts 900+ SOURCE files, exposing
 // a code-vs-prose false positive the prose-heavy mirror rarely hit: a Postgres cast
 // like `$9::bigint` was misread as the address 9:: and CORRUPTED to `$REDACTED_IPbigint`.
 // The guard must kill that false positive with ZERO recall loss on a genuine IPv6.

package/tests/missing_dep_classify.mjs

@@ -1,5 +1,5 @@
 // tests/missing_dep_classify.mjs — the PURE missing-dependency detector core
-// (task 1002827), moved out of scripts/gds/audit-deps.js so a live route can
+// (task 1002827), moved out of scripts/bongos/audit-deps.js so a live route can
 // reuse it without pulling that script's CLI-only machinery into the server
 // process.
 //
@@ -98,8 +98,8 @@ await test('the module reaches touchesOverlap through the module-api doorway, ne
   assert.equal(/require\(['"]\.\.\/\.\.\/src\/bongos\//.test(src), false, 'never a direct src/bongos/* require (ADR 0083)');
 });
 
-await test('scripts/gds/audit-deps.js delegates to this module rather than redefining the pure core', () => {
-  const src = readFileSync(new URL('../scripts/gds/audit-deps.js', import.meta.url), 'utf8');
+await test('scripts/bongos/audit-deps.js delegates to this module rather than redefining the pure core', () => {
+  const src = readFileSync(new URL('../scripts/bongos/audit-deps.js', import.meta.url), 'utf8');
   assert.match(src, /require\('\.\.\/\.\.\/modules\/lifecycle\/missing-dep-classify\.js'\)/);
   assert.equal(/^function classify/m.test(src), false, 'classify is no longer redefined here');
   assert.equal(/^function findMissingDeps/m.test(src), false, 'findMissingDeps is no longer redefined here');

package/tests/module-scope-map.mjs

@@ -134,9 +134,9 @@ test('narrowing the module roster must not narrow the PATH wall', () => {
   // what makes the scope wall pass, leaving the path wall as the only thing that
   // can refuse — which is exactly the claim under test.
   const owned = [
-    ['onboarding', 'scripts/gds/setup.js'],
-    ['autonomy', 'scripts/gds/conductor-dispatch.js'],
-    ['copy-desk', 'scripts/gds/copy-inventory.js'],
+    ['onboarding', 'scripts/bongos/setup.js'],
+    ['autonomy', 'scripts/bongos/conductor-dispatch.js'],
+    ['copy-desk', 'scripts/bongos/copy-inventory.js'],
   ];
   for (const [mod, f] of owned) {
     assert.ok(PROTECTED_GLOBS.includes(f), `fixture assumption: ${f} is a protected surface`);
@@ -165,9 +165,9 @@ test('isProtected actually consults PROTECTED_GLOBS (overlap, prefix-aware both
 // path. Owning the command is not owning the authority. They are asserted by
 // name rather than by count because a count passes on the wrong three.
 const COMMAND_ONLY_MODULES = [
-  ['onboarding', 'scripts/gds/setup.js'],
-  ['autonomy', 'scripts/gds/conductor-dispatch.js'],
-  ['copy-desk', 'scripts/gds/copy-inventory.js'],
+  ['onboarding', 'scripts/bongos/setup.js'],
+  ['autonomy', 'scripts/bongos/conductor-dispatch.js'],
+  ['copy-desk', 'scripts/bongos/copy-inventory.js'],
 ];
 
 test('a module protected ONLY by a CLI entrypoint it owns now derives non-protected', () => {
@@ -202,14 +202,14 @@ test('protected TERRITORY still protects — a directory, and a non-command file
   // path test has to get right, since both start with 'scripts/'.
   assert.ok(PROTECTED_GLOBS.includes('scripts/deploy/'), 'fixture assumption: scripts/deploy/ is protected');
   assert.equal(scope.isProtected(['scripts/deploy/']), true, 'a protected directory under scripts/ is territory');
-  assert.ok(PROTECTED_GLOBS.includes('scripts/gds/hooks/'), 'fixture assumption: scripts/gds/hooks/ is protected');
-  assert.equal(scope.isProtected(['scripts/gds/hooks/']), true, 'scripts/gds/hooks/ is a directory, not a command');
+  assert.ok(PROTECTED_GLOBS.includes('scripts/bongos/hooks/'), 'fixture assumption: scripts/bongos/hooks/ is protected');
+  assert.equal(scope.isProtected(['scripts/bongos/hooks/']), true, 'scripts/bongos/hooks/ is a directory, not a command');
 });
 
 test('a lone protected CLI computes non-protected, but a CLI PLUS territory does not', () => {
-  assert.equal(scope.isProtected(['scripts/gds/setup.js']), false, 'a lone protected CLI does not protect');
+  assert.equal(scope.isProtected(['scripts/bongos/setup.js']), false, 'a lone protected CLI does not protect');
   assert.equal(
-    scope.isProtected(['scripts/gds/setup.js', 'migrations/']), true,
+    scope.isProtected(['scripts/bongos/setup.js', 'migrations/']), true,
     'one command must not mask owned territory — the mixed case is still protected',
   );
 });
@@ -267,7 +267,7 @@ test('provisioning + public-landing joined the roster (task 1002690) — territo
   }
   const prov = scope.globsForModules(['provisioning']);
   assert.ok(prov.includes('modules/provisioning/'), 'provisioning owns its module directory');
-  assert.ok(prov.includes('scripts/gds/provision.js'), 'the control-plane runner travels with its domain');
+  assert.ok(prov.includes('scripts/bongos/provision.js'), 'the control-plane runner travels with its domain');
   assert.ok(scope.globsForModules(['public-landing']).includes('modules/public-landing/'), 'public-landing owns its surface directory');
 });
 
@@ -334,7 +334,7 @@ test('agents joined the roster (task 1002736) — the territory goals 1000038/39
     'modules/agents/module.json',
     'modules/agents/migrations/agents_001_definitions.sql',
     '.claude/agents/reviewer.md',
-    'scripts/gds/agents-sync.js',
+    'scripts/bongos/agents-sync.js',
   ]) {
     assert.equal(covers(touch), true, `wall does not cover ${touch}`);
   }
@@ -351,7 +351,7 @@ test('devsecops joined the roster (task 1003124) — the enforcement territory g
   const globs = scope.globsForModules(['devsecops']);
   assert.ok(globs.includes('.github/'), 'devsecops owns the CI workflow surface');
   assert.ok(globs.includes('.claude/hooks/'), 'devsecops owns the agent hook surface');
-  assert.ok(globs.includes('scripts/gds/fitness.js'), 'the fitness tool travels with the domain');
+  assert.ok(globs.includes('scripts/bongos/fitness.js'), 'the fitness tool travels with the domain');
   // Derived, not hand-set: .github/, package.json, .husky/, .claude/hooks/ and
   // .claude/settings.json all sit in the ADR 0043 protected-surfaces registry, so
   // this key MUST derive protected — creating/widening a goal into it is Archon-only.
@@ -370,8 +370,8 @@ test('devsecops joined the roster (task 1003124) — the enforcement territory g
     '.npmrc',                            // the install-script policy R04 lands
     'package.json',                      // dependency manifest (R04/R07)
     '.gitleaks.toml',                    // the scanner config R03 lands
-    'scripts/gds/fitness.js',            // the ratchet pack R06 extends
-    'scripts/gds/docs-entropy.js',       // the entropy scanner behind the ratchet
+    'scripts/bongos/fitness.js',            // the ratchet pack R06 extends
+    'scripts/bongos/docs-entropy.js',       // the entropy scanner behind the ratchet
   ]) {
     assert.equal(covers(touch), true, `wall does not cover ${touch}`);
   }
@@ -380,7 +380,7 @@ test('devsecops joined the roster (task 1003124) — the enforcement territory g
   assert.equal(covers('src/bongos/auth.js'), false, 'the wall must not cover the kernel auth core');
   assert.equal(covers('.claude/scheduled-tasks/bfg/SKILL.md'), false, 'scheduled-tasks belongs to autonomy, not devsecops');
   assert.equal(covers('.claude/skills/builder-ship/SKILL.md'), false, 'skills stay with the module that ships them');
-  assert.equal(covers('scripts/gds/ship.js'), false, 'the ship pipeline belongs to lifecycle, not devsecops');
+  assert.equal(covers('scripts/bongos/ship.js'), false, 'the ship pipeline belongs to lifecycle, not devsecops');
 });
 
 test('methodology joined the roster (task 1002989) — the instruction surfaces working area 6 walls', () => {
@@ -393,7 +393,7 @@ test('methodology joined the roster (task 1002989) — the instruction surfaces
   assert.ok(globs.includes('CLAUDE.md'), 'methodology owns the always-loaded instruction root');
   assert.ok(globs.includes('docs/'), 'methodology owns the docs library');
   assert.ok(globs.includes('.claude/skills/'), 'the slash-command skills are the methodology definition surface');
-  assert.ok(globs.includes('scripts/gds/start.js'), 'the session-opening composer travels with the domain');
+  assert.ok(globs.includes('scripts/bongos/start.js'), 'the session-opening composer travels with the domain');
   // Derived, not hand-set: CLAUDE.md, docs/canonical-permissions.md and the two trust
   // ADRs sit in the ADR 0043 protected-surfaces registry, so this key MUST derive
   // protected — creating or widening a goal into it is Archon-only (BV1.R57).
@@ -414,8 +414,8 @@ test('methodology joined the roster (task 1002989) — the instruction surfaces
     '.claude/rules/content-charter.md',       // pre-carved for task 1003687
     'docs/adr/0264-the-ten-working-areas.md', // the ADR library
     'docs/handoff-template.md',
-    'scripts/gds/start.js',                   // composes a session's opening context
-    'scripts/gds/discipline-modes.json',      // the discipline→mode table it routes on
+    'scripts/bongos/start.js',                   // composes a session's opening context
+    'scripts/bongos/discipline-modes.json',      // the discipline→mode table it routes on
   ]) {
     assert.equal(covers(touch), true, `wall does not cover ${touch}`);
   }
@@ -425,8 +425,8 @@ test('methodology joined the roster (task 1002989) — the instruction surfaces
   assert.equal(covers('.claude/settings.json'), false, 'the agent settings belong to devsecops');
   assert.equal(covers('.claude/scheduled-tasks/bfg/SKILL.md'), false, 'scheduled-tasks belongs to autonomy, not methodology');
   assert.equal(covers('.claude/agents/reviewer.md'), false, 'agent definitions belong to agents, not methodology');
-  assert.equal(covers('scripts/gds/fitness.js'), false, 'the fitness tool stayed with devsecops (task 1003124)');
-  assert.equal(covers('scripts/gds/ship.js'), false, 'the ship pipeline belongs to lifecycle');
+  assert.equal(covers('scripts/bongos/fitness.js'), false, 'the fitness tool stayed with devsecops (task 1003124)');
+  assert.equal(covers('scripts/bongos/ship.js'), false, 'the ship pipeline belongs to lifecycle');
 });
 
 test('SHARED_GLOBS: the ownerless floor every goal wall includes (task 1003655, ADR 0288)', () => {
@@ -544,7 +544,7 @@ test('devsecops is deliberately NOT cross-cutting (task 1003770)', () => {
   // .github/ or fitness.js while scoped elsewhere IS the confusion being surfaced,
   // so this stays a signal. Widening the cross-cutting roster to devsecops would
   // red these, which is the point: it should take a deliberate edit, not a shrug.
-  for (const f of ['.github/workflows/unit.yml', 'scripts/gds/fitness.js', 'package.json']) {
+  for (const f of ['.github/workflows/unit.yml', 'scripts/bongos/fitness.js', 'package.json']) {
     assert.deepEqual(scope.moduleDriftFiles('lifecycle', [f]), [f], `${f} must still read as drift`);
   }
   // And exactly one module is cross-cutting: every other key's territory still

package/tests/module_api_lazy.mjs

@@ -136,7 +136,7 @@ test('the two lifecycle modules the CLI imports boot no server', () => {
 
 test('every CLI subcommand loads without the server', () => {
   for (const cmd of ['start', 'claim', 'ship', 'task', 'status', 'login', 'setup', 'release', 'cost', 'recall']) {
-    const heavy = loadedAfter(`scripts/gds/${cmd}.js`).filter((f) => HEAVY.test(f));
+    const heavy = loadedAfter(`scripts/bongos/${cmd}.js`).filter((f) => HEAVY.test(f));
     assert.deepEqual(heavy, [], `bongos ${cmd} booted ${heavy.join(', ')}`);
   }
 });

package/tests/module_assess_docs.mjs

@@ -9,8 +9,8 @@ import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
 const require = createRequire(import.meta.url);
-const { CRITERIA, MAX_HOWTO_CHARS, buildDocsPrompt, parseDocsGrade, gradeHowto, recordDocsSignal } = require('../scripts/gds/module-assess-docs.js');
-const { packModule } = require('../scripts/gds/module-artifact.js');
+const { CRITERIA, MAX_HOWTO_CHARS, buildDocsPrompt, parseDocsGrade, gradeHowto, recordDocsSignal } = require('../scripts/bongos/module-assess-docs.js');
+const { packModule } = require('../scripts/bongos/module-artifact.js');
 const { relativeArtifactPath } = require('../src/bongos/module-store.js');
 
 const HOWTO = [

package/tests/module_assess_installs.mjs

@@ -20,11 +20,11 @@ import { fileURLToPath } from 'node:url';
 
 const require = createRequire(import.meta.url);
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
-const { MIN_HOLDERS, PRIOR_TESTERS, assessInstall, assessReliability, assessTesterFeedback, recordInstallSignals } = require('../scripts/gds/module-assess-installs.js');
+const { MIN_HOLDERS, PRIOR_TESTERS, assessInstall, assessReliability, assessTesterFeedback, recordInstallSignals } = require('../scripts/bongos/module-assess-installs.js');
 const reports = require('../src/bongos/module-usage-reports.js');
 const { ERROR_CODE_RE } = require('../src/bongos/module-usage-reports.js');
-const { cmdInstall } = require('../scripts/gds/module.js');
-const { packModule, verifyModuleArtifact } = require('../scripts/gds/module-artifact.js');
+const { cmdInstall } = require('../scripts/bongos/module.js');
+const { packModule, verifyModuleArtifact } = require('../scripts/bongos/module-artifact.js');
 
 const read = (rel) => fs.readFileSync(path.join(ROOT, rel), 'utf8').replace(/\r\n/g, '\n');
 

package/tests/module_assess_price_parity.mjs

@@ -3,7 +3,7 @@
 // on criterion wa5-quality-assessed; ADR 0343 D6).
 //
 // Two proofs, like the update-parity test proves its own criterion:
-//   1. STATIC — no file on the assessment path (scripts/gds/module-assess-*.js)
+//   1. STATIC — no file on the assessment path (scripts/bongos/module-assess-*.js)
 //      names a price, a currency amount, free/paid or an entitlement in its code
 //      (comments are allowed to explain the rule). A price-conditional branch
 //      added anywhere there fails this test, naming the file and line.
@@ -23,8 +23,8 @@ import { fileURLToPath } from 'node:url';
 
 const require = createRequire(import.meta.url);
 const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
-const { composeScore, recomposeScore } = require('../scripts/gds/module-assess-score.js');
-const { assessVersion } = require('../scripts/gds/module-assess-version.js');
+const { composeScore, recomposeScore } = require('../scripts/bongos/module-assess-score.js');
+const { assessVersion } = require('../scripts/bongos/module-assess-version.js');
 
 // ---------------------------------------------------------------------------
 // 1. static — the assessment path never reads price
@@ -41,7 +41,7 @@ function priceHits(src) {
   return codeLines(src).flatMap((l, i) => (PRICE_WORD.test(l) ? [`${i + 1}: ${l.trim()}`] : []));
 }
 
-const ASSESS_DIR = path.join(root, 'scripts', 'gds');
+const ASSESS_DIR = path.join(root, 'scripts', 'bongos');
 const assessFiles = fs.readdirSync(ASSESS_DIR).filter((f) => /^module-assess-.*\.js$/.test(f)).sort();
 
 test('the scan sees the whole assessment path', () => {
@@ -60,7 +60,7 @@ test('the scanner catches a price branch and ignores a comment about price', ()
 });
 
 test('no assessment file names a price in its code', () => {
-  const found = assessFiles.flatMap((f) => priceHits(fs.readFileSync(path.join(ASSESS_DIR, f), 'utf8')).map((h) => `scripts/gds/${f}:${h}`));
+  const found = assessFiles.flatMap((f) => priceHits(fs.readFileSync(path.join(ASSESS_DIR, f), 'utf8')).map((h) => `scripts/bongos/${f}:${h}`));
   assert.deepEqual(found, [], `price must never gate or excuse a score (ADR 0343 D6):\n${found.join('\n')}`);
 });
 

package/tests/module_assess_score.mjs

@@ -14,8 +14,8 @@ import os from 'node:os';
 import path from 'node:path';
 
 const require = createRequire(import.meta.url);
-const { composeScore, recomposeScore } = require('../scripts/gds/module-assess-score.js');
-const { assessVersion, queueAssessment, QUEUE_MAX } = require('../scripts/gds/module-assess-version.js');
+const { composeScore, recomposeScore } = require('../scripts/bongos/module-assess-score.js');
+const { assessVersion, queueAssessment, QUEUE_MAX } = require('../scripts/bongos/module-assess-version.js');
 
 const sig = (id, part, outcome, score = null) => ({ id, part, outcome, score });
 // Every assessVersion call here stubs the test-runner dispatch, so a shell with
@@ -85,7 +85,7 @@ test('New until Install or Reliability is scored (D5) — Tests and Tester feedb
 
 test('price is never an input: nothing in the composer reads one (D6)', () => {
   for (const f of ['module-assess-score.js', 'module-assess-version.js']) {
-    const src = fs.readFileSync(new URL(`../scripts/gds/${f}`, import.meta.url), 'utf8').replace(/\/\/.*$/gm, '');
+    const src = fs.readFileSync(new URL(`../scripts/bongos/${f}`, import.meta.url), 'utf8').replace(/\/\/.*$/gm, '');
     assert.doesNotMatch(src, /price|credits|cents/i, f);
   }
 });
@@ -260,13 +260,13 @@ test('publishing a version re-assesses that version, after the author has their
   };
   const poolPath = require.resolve('../src/bongos/pool.js');
   require.cache[poolPath] = { id: poolPath, filename: poolPath, loaded: true, exports: { pool: { connect: async () => client, query: client.query } } };
-  const score = require('../scripts/gds/module-assess-version.js');
+  const score = require('../scripts/bongos/module-assess-version.js');
   const real = score.queueAssessment;
   const calls = [];
   score.queueAssessment = (id) => { calls.push(id); return true; };
   try {
     const buildModulesRouter = require('../src/bongos/routes/modules.js');
-    const artifact = require('../scripts/gds/module-artifact.js');
+    const artifact = require('../scripts/bongos/module-artifact.js');
     const src = fs.mkdtempSync(path.join(os.tmpdir(), 'mod-assess-score-src-'));
     fs.mkdirSync(path.join(src, 'weather'));
     fs.writeFileSync(path.join(src, 'weather', 'module.json'), JSON.stringify({ key: 'weather', title: 'Weather', description: 'd', version: '1.0.0', coreVersion: '^1.0.0', contributes: {} }));

package/tests/module_assess_security.mjs

@@ -17,8 +17,8 @@ import os from 'node:os';
 import path from 'node:path';
 
 const require = createRequire(import.meta.url);
-const { assessSecurity, auditDependencies, recordSecuritySignal, insertSecuritySignal, maintenancePosture, registrySpec } = require('../scripts/gds/module-assess-security.js');
-const { packModule } = require('../scripts/gds/module-artifact.js');
+const { assessSecurity, auditDependencies, recordSecuritySignal, insertSecuritySignal, maintenancePosture, registrySpec } = require('../scripts/bongos/module-assess-security.js');
+const { packModule } = require('../scripts/bongos/module-artifact.js');
 const { relativeArtifactPath } = require('../src/bongos/module-store.js');
 
 const file = (p, text = '') => ({ path: p, buf: Buffer.from(text) });
@@ -206,11 +206,11 @@ test('insertSecuritySignal writes the security part with no score', async () =>
 });
 
 test('a core script never requires a module file (the one-way rule)', () => {
-  const src = fs.readFileSync(new URL('../scripts/gds/module-assess-security.js', import.meta.url), 'utf8').replace(/\/\/.*$/gm, '');
+  const src = fs.readFileSync(new URL('../scripts/bongos/module-assess-security.js', import.meta.url), 'utf8').replace(/\/\/.*$/gm, '');
   assert.doesNotMatch(src, /require\([^)]*modules\//);
 });
 
 test('the gate never runs the module\'s own code', () => {
-  const src = fs.readFileSync(new URL('../scripts/gds/module-assess-security.js', import.meta.url), 'utf8').replace(/\/\/.*$/gm, '');
+  const src = fs.readFileSync(new URL('../scripts/bongos/module-assess-security.js', import.meta.url), 'utf8').replace(/\/\/.*$/gm, '');
   assert.doesNotMatch(src, /process\.execPath|require\(\s*path\.join|import\(/, 'no node process or require over module files');
 });

package/tests/module_assess_tests.mjs

@@ -19,8 +19,8 @@ import os from 'node:os';
 import path from 'node:path';
 
 const require = createRequire(import.meta.url);
-const { discoverTestFiles, assessTests, recordTestsSignal, insertSignal, runRefusal, testEnv, SANDBOX_PREFIX } = require('../scripts/gds/module-assess-tests.js');
-const { packModule, verifyModuleArtifact } = require('../scripts/gds/module-artifact.js');
+const { discoverTestFiles, assessTests, recordTestsSignal, insertSignal, runRefusal, testEnv, SANDBOX_PREFIX } = require('../scripts/bongos/module-assess-tests.js');
+const { packModule, verifyModuleArtifact } = require('../scripts/bongos/module-artifact.js');
 const { relativeArtifactPath } = require('../src/bongos/module-store.js');
 
 const PASS = "import assert from 'node:assert'; assert.equal(1 + 1, 2); console.log('1 passed, 0 failed');\n";
@@ -194,7 +194,7 @@ test('an unknown version writes nothing', async () => {
 });
 
 test('the runner never consults whether the module is enabled', () => {
-  const src = fs.readFileSync(new URL('../scripts/gds/module-assess-tests.js', import.meta.url), 'utf8').replace(/\/\/.*$/gm, '');
+  const src = fs.readFileSync(new URL('../scripts/bongos/module-assess-tests.js', import.meta.url), 'utf8').replace(/\/\/.*$/gm, '');
   assert.doesNotMatch(src, /isModuleEnabled/);
 });