@bongos/core 1.21.175 → 1.21.177

package/scripts/gds/seed-bongos-v1-seo-tasks.js

@@ -1,104 +0,0 @@
-// Seed the tasks for goal 1000048 "SEO & public discoverability — rankable per-project
-// profiles" (BONGOS-V1, internal). Source of truth:
-// docs/specs/bongos-v1-seo-public-discoverability.md (status: final).
-// Idempotent on (source, source_ref). Re-running resolves to the existing rows.
-//
-// Run: node scripts/gds/seed-bongos-v1-seo-tasks.js
-const os = require('os');
-const sess = require(os.homedir() + '/.config/cloudbongos/gds-session.json');
-const BASE = (sess.api_base || 'https://cloudbongos.com').replace(/\/$/, '');
-const TOKEN = sess.token;
-const VER = 'BONGOS-V1';
-const GOAL = 1000048;
-const SRC = 'planning-session';
-const H = { Authorization: `Bearer ${TOKEN}`, 'Content-Type': 'application/json' };
-
-const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
-async function api(method, path, body, _tries = 0) {
-  await sleep(400); // base throttle to stay under the per-IP rate limit
-  const res = await fetch(`${BASE}/api/bongos${path}`, {
-    method, headers: H, body: body ? JSON.stringify(body) : undefined,
-  });
-  const text = await res.text();
-  let json; try { json = JSON.parse(text); } catch { json = { _raw: text.slice(0, 300) }; }
-  if (res.status === 429 && _tries < 8) {
-    const wait = ((json.error && json.error.details && json.error.details.retry_after_seconds) || 30) + 1;
-    console.log(`  …rate-limited, waiting ${wait}s`);
-    await sleep(wait * 1000);
-    return api(method, path, body, _tries + 1);
-  }
-  return { status: res.status, ok: res.ok, json };
-}
-
-// criterion slugs (position-independent — the goal's done_when_criteria.criterion_id)
-const PP = 'seo-project-profile-page', NS = 'seo-toplevel-namespace', PC = 'seo-project-content',
-  PM = 'seo-page-metadata', CC = 'seo-canonical-consolidation', SR = 'seo-sitemap-robots',
-  VG = 'seo-visibility-gated', SB = 'seo-site-baseline';
-
-// disc: engineer (backend/API/spike) | ui (page/markup/meta). kind: spike | feature | refactor | infra | verify (proofs).
-// deps: 'R##' resolve to the just-created id; a NUMBER is a real cross-goal task id, passed through.
-const TASKS = [
-  { ref:'R01', kind:'spike',   disc:'engineer', prio:5, est:180, crit:[PP,NS,PM,CC], deps:[],           title:'R01 · SEO + namespace architecture ADR', desc:'Needs-exploration: profile-page rendering (server-rendered HTML from the Node/Express hub), routing precedence (/<slug> vs /bongos/* vs /api/*), the owner-picked slug model + reserved-word list, the cross-instance canonical mechanism, and how the profile reads goal-1000046 setup content. Output an ADR + confirmed sub-tasks. See docs/specs/bongos-v1-seo-public-discoverability.md.' },
-  { ref:'R02', kind:'feature', disc:'engineer', prio:5, est:240, crit:[PP,NS],       deps:['R01'],      title:'R02 · Owner-picked slug at creation + reserved-name validation + backfill', desc:'Projects get a unique owner-chosen vanity slug at creation (username-style), validated vs a reserved list (bongos, api, sso, gate, create, explore, builders, status, assets, sitemap.xml, robots.txt, ...). Auto-derive + backfill a default slug for existing projects (owner can change). Adds a step to the creation flow — coordinate with goals 1000035/1000046. Deps R01.' },
-  { ref:'R03', kind:'refactor',disc:'engineer', prio:5, est:240, crit:[NS],          deps:['R01'],      title:'R03 · Move platform pages under /bongos/… ; top-level /<slug> resolves to a project', desc:'Serve hall/status/create/explore/gate under /bongos/… with 301 redirects from old paths; never move /api, /sso, /auth, /.well-known. Top-level /<slug> resolves to a project profile after the reserved-word check. Deps R01.' },
-  { ref:'R04', kind:'feature', disc:'ui',       prio:5, est:240, crit:[PP,PM],       deps:['R02','R03'],title:'R04 · Server-rendered project profile page at /<slug>', desc:'Crawlable server-rendered HTML: project name, description, cover art, builders, tech/modules, and a prominent "Open the live app" CTA. This page is the primary shareable destination. Deps R02,R03.' },
-  { ref:'R05', kind:'feature', disc:'ui',       prio:4, est:180, crit:[PC],          deps:['R04'],      title:'R05 · Render goal-1000046 setup content on the profile + auto-derive SEO copy', desc:'Read the project\'s setup content (goal 1000046) and render it on the profile; auto-derive SEO title/description from it. No separate editor (per interview). Coordinate with 1000046 — needs a real description + tags; render current fields (name/tagline) meanwhile and enrich as 1000046 lands. Deps R04.' },
-  { ref:'R06', kind:'feature', disc:'ui',       prio:4, est:150, crit:[PM,CC],       deps:['R04'],      title:'R06 · Per-page SEO metadata (title/description/OG/Twitter/self-canonical)', desc:'Dynamic <title>, meta description, Open Graph + Twitter card tags, and a self-referencing canonical on each profile. Deps R04.' },
-  { ref:'R07', kind:'feature', disc:'ui',       prio:4, est:120, crit:[PM],          deps:['R04'],      title:'R07 · JSON-LD structured data on profiles', desc:'Emit SoftwareApplication/CreativeWork JSON-LD on each profile page. Deps R04.' },
-  { ref:'R08', kind:'feature', disc:'ui',       prio:4, est:150, crit:[PP],          deps:['R04'],      title:'R08 · Route discovery through profiles (orbs + links → /<slug>)', desc:'Make /<slug> the shareable destination: orbs cards and "view project" links point to the profile, which carries the "Open the live app" CTA — maximizing internal links to the ranking page. Deps R04. NOTE: the orbs front door is a separate static site — the orbs-side link change likely lands instance-side.' },
-  { ref:'R09', kind:'feature', disc:'ui',       prio:4, est:180, crit:[PP,SR],       deps:['R04'],      title:'R09 · Crawlable projects directory via the orbs table-view', desc:'Make the orbs page\'s table view a server-rendered, crawlable, indexable HTML index of all Public projects (a plain-link list to each /<slug>), linked from the landing. This IS the directory (no separate directory page, per interview). Deps R04.' },
-  { ref:'R10', kind:'feature', disc:'engineer', prio:4, est:180, crit:[SR],          deps:['R04','R11'],title:'R10 · sitemap.xml (public projects + core pages)', desc:'Auto-generated sitemap.xml at /sitemap.xml listing all Public project profiles + core pages; regenerates on project create/update/visibility-change (cached). Deps R04,R11.' },
-  { ref:'R11', kind:'feature', disc:'engineer', prio:4, est:210, crit:[VG],          deps:['R04'],      title:'R11 · Visibility-gated indexing (visibility metaphor)', desc:'Public→full indexable profile; Private (star)→minimal page + join/request CTA, noindex; Stealth (black hole)→404; Unlisted (dark matter)→no public page until published. HARD conceptual dependency on goal 1000046\'s visibility states (not yet seeded) — coordinate; gate on the state field once it exists. Deps R04.' },
-  { ref:'R12', kind:'feature', disc:'engineer', prio:3, est:120, crit:[SR],          deps:['R10'],      title:'R12 · robots.txt', desc:'Serve robots.txt: allow public pages, disallow /api + internal, reference /sitemap.xml. Deps R10.' },
-  { ref:'R13', kind:'feature', disc:'engineer', prio:3, est:240, crit:[CC],          deps:['R04'],      title:'R13 · Cross-instance canonical (full scope)', desc:'rel=canonical from each live instance back to its hub profile: federated/co-tenant instances emit it; hub-hosted subdomains when that tier lands; publish a documented canonical snippet for self-hosted owners. Touches instance-side core rendering → Metic+ auto-floor. Coordinate with provisioning/federation (goals 1000032/1000041). Deps R04.' },
-  { ref:'R14', kind:'feature', disc:'ui',       prio:3, est:210, crit:[PP,PM],       deps:['R04',1002278], title:'R14 · Public builder-profile SEO page (handle-based path)', desc:'Server-rendered, SEO-optimized public builder profile at a handle path (e.g. /u/<handle>): metadata + Person/ProfilePage JSON-LD, crawlable HTML. Extends goal 1000045\'s builder profiles with a public, rankable rendering. Deps R04 + goal-1000045 profile API (task 1002278).' },
-  { ref:'R15', kind:'feature', disc:'engineer', prio:3, est:150, crit:[SR,VG],       deps:['R14','R10'],title:'R15 · Builder profiles in sitemap, consent-gated', desc:'Add consented/public builder profiles to sitemap.xml; honor goal-1000045\'s hide/opt-out flag (coordinate with 1000045 R03). Non-consented builders excluded/noindex. Deps R14,R10.' },
-  { ref:'R16', kind:'feature', disc:'ui',       prio:2, est:120, crit:[PC],          deps:['R05'],      title:'R16 · SEO content nudges in the setup/edit flow', desc:'Rule-based nudges where owners author content (goal 1000046 setup/edit): description length, tags, cover image — so profiles have enough real text to rank. Coordinate with 1000046. Deps R05.' },
-  { ref:'R17', kind:'feature', disc:'ui',       prio:3, est:150, crit:[SB],          deps:['R01'],      title:'R17 · Landing + Explore SEO metadata', desc:'Give the landing page (goal 1000031) and the Explore page proper title/description/Open Graph/structured data and ensure they are indexable. Coordinate with 1000031. Deps R01.' },
-  { ref:'R18', kind:'infra',   disc:'engineer', prio:2, est:180, crit:[SB],          deps:['R04'],      title:'R18 · Technical-SEO + Core Web Vitals pass', desc:'Audit + fix technical SEO across public pages: mobile-friendly, load speed / Core Web Vitals, indexability. Deps R04.' },
-  { ref:'R19', kind:'verify',  disc:'engineer', prio:2, est:120, crit:[PP,PM,CC,SR,VG,PC], deps:['R04','R06','R07','R10','R11','R14','R15'], title:'R19 · PROOF: a public project + builder profile rank-ready; non-public hidden', desc:'End-to-end proof: a real Public project profile is live at cloudbongos.com/<slug> with correct metadata + JSON-LD, appears in sitemap.xml, passes Google Rich Results + mobile-friendly tests; a public builder profile is likewise rank-ready; and a Private project is noindex + absent from the sitemap (Stealth 404s). Deps R04,R06,R07,R10,R11,R14,R15.' },
-];
-
-const ROOTS = ['R01']; // zero-dep entry task to open for claiming
-
-(async () => {
-  const idByRef = {};
-  let created = 0, existing = 0;
-  console.log(`Seeding ${TASKS.length} tasks under goal ${GOAL} (${VER})…`);
-  for (const t of TASKS) {
-    const r = await api('POST', '/tasks', {
-      version_id: VER, goal_id: GOAL, title: t.title, description: t.desc,
-      kind: t.kind, discipline: t.disc, priority: t.prio, est_minutes: t.est,
-      criterion_ids: t.crit, source: SRC, source_ref: `bv1-seo-${t.ref}`,
-    });
-    if (!r.ok) { console.log(`  ${t.ref}: FAILED ${r.status} ${JSON.stringify(r.json)}`); continue; }
-    const task = r.json.task || r.json;
-    idByRef[t.ref] = task.id;
-    if (r.json.idempotent || r.json.existing) existing++; else created++;
-    console.log(`  ${t.ref} → task ${task.id} (${t.kind}/${t.disc}, P${t.prio}, [${t.crit.join(',')}])`);
-  }
-
-  console.log('Wiring dependencies…');
-  let edges = 0;
-  for (const t of TASKS) {
-    if (!t.deps.length) continue;
-    const id = idByRef[t.ref];
-    const depIds = t.deps.map((d) => (typeof d === 'number' ? d : idByRef[d])).filter(Boolean);
-    if (!id || depIds.length !== t.deps.length) { console.log(`  ${t.ref}: dep resolve gap, skipping`); continue; }
-    const r = await api('POST', `/tasks/${id}/dependencies`, { depends_on_task_ids: depIds });
-    if (!r.ok) { console.log(`  ${t.ref}: dep FAILED ${r.status} ${JSON.stringify(r.json)}`); continue; }
-    edges += (r.json.added || depIds.length);
-    console.log(`  ${t.ref} depends on ${t.deps.join(',')}`);
-  }
-
-  console.log('Promoting root(s) to ready…');
-  for (const ref of ROOTS) {
-    const id = idByRef[ref];
-    if (!id) continue;
-    const r = await api('POST', `/tasks/${id}/promote`, {});
-    console.log(`  ${ref} (task ${id}): ${r.ok ? 'ready' : 'promote note ' + JSON.stringify(r.json).slice(0, 120)}`);
-  }
-
-  console.log(`\nDONE. created=${created} existing=${existing} depEdges=${edges}. Roots opened: ${ROOTS.join(', ')}.`);
-  console.log('ref→id:', JSON.stringify(idByRef));
-})();

package/scripts/gds/seed-bv1-community-tasks.js

@@ -1,131 +0,0 @@
-// Seed the community-tab build tasks the 1002782 spike scoped, into the
-// community-surface goal (created by the spike; pass --goal <id>).
-//
-// Source of truth: docs/specs/bongos-v1-community-tab.md (owner-signed
-// 2026-08-16: own goal; builder-of-week auto-computed). Idempotent on
-// source_ref bv1-community-CTn; safe to re-run (tasks re-home if --goal moves).
-//
-// Run: node scripts/gds/seed-bv1-community-tasks.js --goal 1000065
-
-const { apiCall, arg } = require('./cli-lib');
-
-const VER = 'BONGOS-V1';
-const SRC = 'planning-session';
-const SPEC = 'docs/specs/bongos-v1-community-tab.md';
-
-// Cross-goal dependency: the shared privacy predicate (privacy spike PV2).
-const PV2 = 1002967;
-
-const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
-
-async function api(method, path, body, _tries = 0) {
-  await sleep(1500);
-  const r = await apiCall(method, `/api/bongos${path}`, body);
-  if (r.status === 429 && _tries < 8) {
-    const wait = (r.data?.error?.details?.retry_after_seconds || 30) + 1;
-    console.log(`  …rate-limited, waiting ${wait}s`);
-    await sleep(wait * 1000);
-    return api(method, path, body, _tries + 1);
-  }
-  return r;
-}
-
-const NEW_TASKS = [
-  {
-    ref: 'CT1', kind: 'feature', prio: 3, est: 120, crit: ['CS5'], deps: [], ready: true,
-    title: 'Windowed data plane: activity snapshots appended on changed-totals rollup reports',
-    desc: `New table platform_identity_activity_snapshots (client_id, github_id, credits, tasks_shipped, karma, reported_at) — additive platform_identity_* migration — plus one INSERT on the existing rollup-report path, skipped when totals are unchanged. Window value per builder = latest totals minus last snapshot at-or-before window start, summed across projects; missing baseline counts from zero. Reporting-time (not earning-time) semantics — document honestly, options B/C recorded in ${SPEC} D2. Compaction (daily granularity after 90 days) is a later, volume-triggered task: note it in this task's handoff, do not build it.`,
-  },
-  {
-    ref: 'CT2', kind: 'feature', prio: 3, est: 180, crit: ['CS1', 'CS5'], deps: ['CT1', PV2],
-    title: 'Windowed leaderboard API: GET /community/leaderboard',
-    desc: `Public endpoint: ?window=7d|30d|365d|all&discipline=. All-time reads the existing rollup; windowed reads CT1 deltas. Eligibility via the SHARED privacy predicate (task ${PV2} / privacy spike PV2) — active + public + stats shown; no surface-local variant. Columns: credits (rank), tasks_shipped, karma; response identical for every viewer. ${SPEC} D3.`,
-  },
-  {
-    ref: 'CT3', kind: 'feature', prio: 3, est: 120, crit: ['CS2'], deps: [PV2],
-    title: 'Builder search API: name + discipline under public-profile rules',
-    desc: `Public search over active+public accounts: handle/display-name prefix + trigram, discipline filter. Matrix consequences: hide_stats accounts findable by NAME but excluded from discipline-FILTERED results (disciplines are rollup-derived); private + provisional absent. This is not the recruiting search — the discoverable sliver population never appears here. ${SPEC} D4.`,
-  },
-  {
-    ref: 'CT4', kind: 'feature', prio: 3, est: 180, crit: ['CS1', 'CS2'], deps: ['CT2', 'CT3'],
-    title: 'The /community page: leaderboards + search + feature cards',
-    desc: `The public tab on the hub apex (status-ui, beside Explore): leaderboard windows + discipline tabs, search, builder-of-week + rising-builder card slots, server-render-friendly markup (goal 1000048 indexes later; their specifics). 'community' is already in the reserved slug list (edited by spike 1002782). ${SPEC} D1/D3/D4.`,
-  },
-  {
-    ref: 'CT5', kind: 'feature', prio: 3, est: 120, crit: ['CS3'], deps: ['CT2'],
-    title: 'Builder of the Week: crown-at-render + weekly_features table + archive',
-    desc: `Owner-signed formula: top 7d credit delta among leaderboard-eligible builders, floor one shipped work in window, ties by ships then karma. Crowned at first render after Monday 00:00 UTC and recorded to platform_identity_weekly_features (github_id, week_start, credits_delta, ships_delta) so the crown is pinned and the archive section renders from real rows. No cron. Formula shown on the page. ${SPEC} D5.`,
-  },
-  {
-    ref: 'CT6', kind: 'feature', prio: 4, est: 90, crit: ['CS4'], deps: ['CT4'],
-    title: 'Recruit affordance for project.recruit holders',
-    desc: `Leaderboard rows + search results grow a Recruit button rendered only for holders of project.recruit (the console wave's atom — coordinate spike 1002786 R2/R4), linking into the console invite flow. A door to a gated surface, never a data reveal. ${SPEC} D6.`,
-  },
-  {
-    ref: 'CT7', kind: 'feature', prio: 4, est: 90, crit: ['CS1'], deps: ['CT2'],
-    title: 'Rising builder + most-active-projects cards',
-    desc: `Rising builder: biggest relative 30d delta on a small all-time base (same CT1 snapshots). Most-active projects: the snapshots aggregated on the project axis, a strip on the community tab (orb-sizing reuse is goal 1000044 territory — feed it, don't build it here). ${SPEC} D7 items 1-2.`,
-  },
-  {
-    ref: 'CT8', kind: 'infra', prio: 4, est: 90, crit: ['CS3'], deps: ['CT2', 'CT5'],
-    title: 'Weekly Discord community digest',
-    desc: `A scheduled routine posting top movers + builder of the week via the existing postWebhook plumbing (scripts/discord/lib.js channels). Owner-audience copy, no jargon. ${SPEC} D7 item 4.`,
-  },
-  {
-    ref: 'CT9', kind: 'verify', prio: 3, est: 90, crit: ['CS1', 'CS2', 'CS3'], deps: ['CT2', 'CT3', 'CT4', 'CT5'],
-    title: 'PROOF: matrix enforcement + window math on the community surfaces',
-    desc: `Seed fixture accounts in every privacy state and snapshot rows across window boundaries; assert: private/provisional/hidden absent from every board, search result, feature card; name-vs-discipline search asymmetry for hide_stats; window deltas exact against the seeded snapshots; anonymous and signed-in responses identical. ${SPEC} D8.`,
-  },
-];
-
-(async () => {
-  const goalId = Number(arg('--goal'));
-  if (!goalId) {
-    console.error('usage: node scripts/gds/seed-bv1-community-tasks.js --goal <id>');
-    process.exit(2);
-  }
-  console.log(`Seeding community-tab tasks under goal ${goalId} (${VER})…`);
-  const idByRef = {};
-  let created = 0, existing = 0;
-
-  for (const t of NEW_TASKS) {
-    const r = await api('POST', '/tasks', {
-      version_id: VER,
-      goal_id: goalId,
-      title: t.title,
-      description: t.desc,
-      kind: t.kind,
-      discipline: 'engineer',
-      priority: t.prio,
-      est_minutes: t.est,
-      criterion_ids: t.crit,
-      source: SRC,
-      source_ref: `bv1-community-${t.ref}`,
-    });
-    if (!r.ok) { console.log(`  ${t.ref}: FAILED ${r.status} ${JSON.stringify(r.data)}`); continue; }
-    const task = r.data.task || r.data;
-    idByRef[t.ref] = Number(task.id);
-    if (r.data.idempotent || r.data.existing) existing++; else created++;
-    console.log(`  ${t.ref} → task ${task.id} (${t.kind}, P${t.prio})`);
-  }
-
-  console.log('Wiring dependencies…');
-  for (const t of NEW_TASKS.filter((x) => x.deps.length)) {
-    const id = idByRef[t.ref];
-    const deps = t.deps.map((d) => (typeof d === 'number' ? d : idByRef[d])).filter(Boolean);
-    if (!id || !deps.length) continue;
-    const r = await api('PUT', `/tasks/${id}/dependencies`, { depends_on_task_ids: deps });
-    console.log(`  ${t.ref} (task ${id}) depends on [${deps.join(', ')}]: ${r.ok ? 'ok' : 'FAILED ' + r.status + ' ' + JSON.stringify(r.data).slice(0, 160)}`);
-  }
-
-  console.log('Promoting the zero-dep root…');
-  for (const t of NEW_TASKS.filter((x) => x.ready)) {
-    const id = idByRef[t.ref];
-    if (!id) continue;
-    const r = await api('POST', `/tasks/${id}/promote`, {});
-    console.log(`  ${t.ref} (task ${id}): ${r.ok ? 'ready' : 'promote note ' + JSON.stringify(r.data).slice(0, 120)}`);
-  }
-
-  console.log(`\nDONE. created=${created} existing=${existing}.`);
-  console.log('ref→id:', JSON.stringify(idByRef));
-})();

package/scripts/gds/seed-bv1-privacy-invites-tasks.js

@@ -1,133 +0,0 @@
-// Seed the privacy-model + invite-inbox build tasks the 1002785 spike scoped,
-// under goal 1000045 "Public builder profiles" (BONGOS-V1, internal).
-//
-// Source of truth: docs/specs/bongos-v1-privacy-and-invites.md (owner-signed
-// 2026-08-16 on the sliver + expiry decisions). Idempotent on source_ref
-// bv1-privacy-PVnn; safe to re-run. PV4 stays backlog deliberately — its
-// instance-invite half attaches to the console wave's R2/R6 (spike 1002786),
-// which seeds into its own goal; only PV6 is promoted (fully independent).
-//
-// Run: node scripts/gds/seed-bv1-privacy-invites-tasks.js
-
-const { apiCall } = require('./cli-lib');
-
-const VER = 'BONGOS-V1';
-const GOAL = 1000045;
-const SRC = 'planning-session';
-const SPEC = 'docs/specs/bongos-v1-privacy-and-invites.md';
-
-// Existing tasks referenced by id (seed-bv1-profiles-tasks.js).
-const R02 = 1002278, R03 = 1002279;
-
-const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
-
-// Throttled + 429-aware wrapper (same shape as the sibling seeders).
-async function api(method, path, body, _tries = 0) {
-  await sleep(1500);
-  const r = await apiCall(method, `/api/bongos${path}`, body);
-  if (r.status === 429 && _tries < 8) {
-    const wait = (r.data?.error?.details?.retry_after_seconds || 30) + 1;
-    console.log(`  …rate-limited, waiting ${wait}s`);
-    await sleep(wait * 1000);
-    return api(method, path, body, _tries + 1);
-  }
-  return r;
-}
-
-const NEW_TASKS = [
-  {
-    ref: 'PV1', kind: 'feature', prio: 3, est: 120, crit: ['C2'], deps: [R03],
-    title: 'Privacy flags: account_visibility + recruiter_discoverable on platform accounts',
-    desc: `Add account_visibility ('public'|'private', default 'public') and recruiter_discoverable (boolean NULL — tri-state; effective = COALESCE(flag, visibility='public')) to platform_identity_accounts via an additive platform_identity_* migration. Extend the own-scoped PATCH write path task ${R03} (R03) establishes for hide_stats to cover both, and add the two settings rows to the profile rail (coordinate P04, task 1002800). The discoverable toggle's copy must state exactly what it grants: the D3 sliver (name, disciplines, active-recently), name-only if stats are hidden. Model + defaults: ${SPEC} D1.`,
-  },
-  {
-    ref: 'PV2', kind: 'feature', prio: 3, est: 180, crit: ['C1', 'C2'], deps: [R02],
-    title: 'Effective-visibility enforcement: one shared predicate across every public read',
-    desc: `One helper (SQL predicate + port function, the ADR 0171 D2 "enforced next to the data" pattern) that every public surface uses: /u/<handle> returns 404 (never 403) for private accounts TO EVERYONE INCLUDING SELF on the public read (the page renders self-view via the own-scope side door instead — D2's viewer-independence reconciliation); private accounts absent from search, leaderboards, sitemap; the rollup predicate extends profile_state='active' AND NOT hide_stats with visibility. No surface writes its own variant — drift here is a privacy leak. Matrix: ${SPEC} D2. Also depends on PV1 (bv1-privacy-PV1).`,
-  },
-  {
-    ref: 'PV3', kind: 'feature', prio: 3, est: 120, crit: ['C2', 'C5'], deps: [],
-    title: 'getRecruiterSliver port + recruiting-surface gating (the pre-accept boundary)',
-    desc: `The owner-signed D3 sliver: handle, display name, avatar, disciplines union, active-in-last-30-days boolean — nothing else, name-only when hide_stats is true, never for provisional accounts, never a profile-page link. Authorization-scoped port getRecruiterSliver(githubId) beside getPublicProfileExtras, whitelist-shaped inside platform-identity, its own planted-sentinel leak test (tests/profile_route.mjs pattern), route-gated by project.recruit (the console wave's atom — coordinate spike 1002786 R3). Depends on PV1+PV2 (bv1-privacy-PV1/PV2). Boundary: ${SPEC} D3.`,
-  },
-  {
-    ref: 'PV4', kind: 'feature', prio: 3, est: 120, crit: ['C3'], deps: [],
-    title: 'Invite lifecycle: 30-day read-time expiry, seen_at, decline closes the door',
-    desc: `Owner-signed: a recruit invite's pre-approved sign-in door expires 30 days after creation, enforced READ-TIME (the sign-in gate's invited-check + every queue view compute created_at + 30 days; no sweeper). seen_at lands on the hub notification row (set on first inbox render) and on goal_membership_requests for parity (goal invites get NO expiry — not an admission door). Decline in the inbox relays a door-close to the instance (invite row → dismissed) so no declined invite leaves a live door. COORDINATION: the invite storage itself is the console wave's R2 (access_requests kind='invite') and rescind-cleans-both-sides is its R6 (spike 1002786) — this task lands the states on whatever R2/R6 ship, which is why it stays backlog until that wave seeds. Lifecycle: ${SPEC} D4.`,
-  },
-  {
-    ref: 'PV5', kind: 'feature', prio: 3, est: 90, crit: ['C3'], deps: [],
-    title: 'Hub inbox project slice: recruit invites in the attention card',
-    desc: `A project slice in the EXISTING attention card (goal-inbox.js slice pattern + window.OTBAttention.refresh()), on the hub hall + apex home, fed by the existing GET /my-projects/invites. Accept = "open <project> — sign in" link (clicking through IS acceptance, console D2); Decline = the PV4 door-close path. No parallel inbox; federated instances' halls link out only (V1). Notification path IS the inbox — SSE/email explicitly deferred. Depends on PV4 (bv1-privacy-PV4). Shape: ${SPEC} D5.`,
-  },
-  {
-    ref: 'PV6', kind: 'feature', prio: 4, est: 90, crit: [], deps: [], ready: true,
-    title: 'Private goals: accepting_requests toggle + owner rescind-pending-invite route',
-    desc: `goals.accepting_requests boolean default true — a private goal with it false refuses join-requests with honest copy ("this goal isn't taking requests right now"); invitations unaffected; UI shows the toggle only on private goals. Plus the missing half of core_188's 'cancelled' state: an owner/manager route to rescind a PENDING invitation (only requester-withdraw exists today — modules/lifecycle/routes/goals.js). Design: ${SPEC} D6.`,
-  },
-  {
-    ref: 'PV7', kind: 'feature', prio: 3, est: 90, crit: ['C4'], deps: [],
-    title: 'Applications carry the applicant profile: note through the relay, live render in the queue',
-    desc: `One rule, no new disclosure class: the reviewer sees what the applicant's profile rules would show them + the applicant's note, evaluated LIVE at review time (never a snapshot — hide takes effect on next render, C2). Public account → public profile view; private account → the D3 sliver (the apply UI states "your application shares: …"). Plumbing: POST /my-projects/join gains an applicant-supplied note (capped ~500 chars, sanitized; replaces the hardcoded 'via platform My Projects'), and the reviewer queue (console R4's page — spike 1002786) resolves the profile from the hub at render. Depends on PV3 (bv1-privacy-PV3). Rule: ${SPEC} D7.`,
-  },
-  {
-    ref: 'PV8', kind: 'verify', prio: 3, est: 60, crit: ['C2'], deps: [],
-    title: 'PROOF: the privacy matrix as a test',
-    desc: `The D2 matrix, asserted: a private account's /u/<handle> public read 404s to a stranger AND to its own authenticated session (the page self-view comes from the own-scope endpoint — assert both halves, this is P10 task 1002806 sharpened); hidden stats never appear in any response (planted sentinels); the recruiter sliver is exactly D3's shape (leak test on the port); an expired invite refuses sign-in; a declined invite's door is closed instance-side. Depends on PV2+PV3+PV4 (bv1-privacy-PV2/PV3/PV4). Matrix: ${SPEC} D2.`,
-  },
-];
-
-(async () => {
-  console.log(`Seeding privacy+invites tasks under goal ${GOAL} (${VER})…`);
-  const idByRef = {};
-  let created = 0, existing = 0;
-
-  for (const t of NEW_TASKS) {
-    const r = await api('POST', '/tasks', {
-      version_id: VER,
-      goal_id: GOAL,
-      title: t.title,
-      description: t.desc,
-      kind: t.kind,
-      discipline: 'engineer',
-      priority: t.prio,
-      est_minutes: t.est,
-      criterion_ids: t.crit,
-      source: SRC,
-      source_ref: `bv1-privacy-${t.ref}`,
-    });
-    if (!r.ok) { console.log(`  ${t.ref}: FAILED ${r.status} ${JSON.stringify(r.data)}`); continue; }
-    const task = r.data.task || r.data;
-    idByRef[t.ref] = Number(task.id);
-    if (r.data.idempotent || r.data.existing) existing++; else created++;
-    console.log(`  ${t.ref} → task ${task.id} (${t.kind}, P${t.prio})`);
-  }
-
-  console.log('Wiring dependencies…');
-  const DEP_SETS = [
-    ['PV1', [R03]],
-    ['PV2', [R02, idByRef.PV1]],
-    ['PV3', [idByRef.PV1, idByRef.PV2]],
-    ['PV5', [idByRef.PV4]],
-    ['PV7', [idByRef.PV3]],
-    ['PV8', [idByRef.PV2, idByRef.PV3, idByRef.PV4]],
-  ];
-  for (const [ref, deps] of DEP_SETS) {
-    const id = idByRef[ref];
-    const clean = deps.filter(Boolean);
-    if (!id || !clean.length) continue;
-    const r = await api('PUT', `/tasks/${id}/dependencies`, { depends_on_task_ids: clean });
-    console.log(`  ${ref} (task ${id}) depends on [${clean.join(', ')}]: ${r.ok ? 'ok' : 'FAILED ' + r.status + ' ' + JSON.stringify(r.data).slice(0, 160)}`);
-  }
-
-  console.log('Promoting the independent root…');
-  for (const t of NEW_TASKS.filter((x) => x.ready)) {
-    const id = idByRef[t.ref];
-    if (!id) continue;
-    const r = await api('POST', `/tasks/${id}/promote`, {});
-    console.log(`  ${t.ref} (task ${id}): ${r.ok ? 'ready' : 'promote note ' + JSON.stringify(r.data).slice(0, 120)}`);
-  }
-
-  console.log(`\nDONE. created=${created} existing=${existing}.`);
-  console.log('ref→id:', JSON.stringify(idByRef));
-})();

package/scripts/gds/seed-bv1-profile-page-tasks.js

@@ -1,161 +0,0 @@
-// Seed the delta tasks the profile-page spike (task 1002783) surfaced, under
-// goal 1000045 "Public builder profiles" (BONGOS-V1, internal).
-//
-// Source of truth: docs/specs/bongos-v1-builder-profile-page.md (status: final).
-// The Phase-1 spine (R01-R06) was already seeded by seed-bv1-profiles-tasks.js;
-// this file adds ONLY what that spec found on top of it, so the two seeders are
-// disjoint and both stay re-runnable.
-//
-// Idempotent on (source, source_ref) — re-running resolves to the existing rows
-// and re-asserts the dependency edges.
-//
-// Run: node scripts/gds/seed-bv1-profile-page-tasks.js
-
-const { apiCall } = require('./cli-lib');
-
-const VER = 'BONGOS-V1';
-const GOAL = 1000045;
-const SRC = 'planning-session';
-const SPEC = 'docs/specs/bongos-v1-builder-profile-page.md';
-
-// Tasks that already exist and that these depend on — referenced by id, since
-// they were seeded by the sibling seeder (or by the wave task 1002781).
-const R01 = 1002277;   // spike · design profile↔rollup join + consent model
-const R02 = 1002278;   // feature · profile API returns cross-project record
-const R03 = 1002279;   // feature · hide flag
-const R05 = 1002281;   // feature · shareable-by-login profile URL
-const SETTINGS_SPIKE = 1002784;   // spike · account settings page — inventory + placement
-const PRIVACY_SPIKE = 1002785;    // spike · account privacy model + invite inbox
-
-const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
-
-// Throttled + 429-aware wrapper. The seeder makes ~20 writes in a burst, which
-// is exactly the shape the per-IP limiter is there to catch.
-async function api(method, path, body, _tries = 0) {
-  await sleep(400);
-  const r = await apiCall(method, `/api/bongos${path}`, body);
-  if (r.status === 429 && _tries < 8) {
-    const wait = (r.data?.error?.details?.retry_after_seconds || 30) + 1;
-    console.log(`  …rate-limited, waiting ${wait}s`);
-    await sleep(wait * 1000);
-    return api(method, path, body, _tries + 1);
-  }
-  return r;
-}
-
-// deps entries are either a local ref ('P01') or a numeric id of an existing task.
-const TASKS = [
-  {
-    ref: 'P01', kind: 'feature', disc: 'engineer', prio: 5, est: 180, crit: ['C1'], deps: [R01],
-    title: 'P01 · Builder handle on platform accounts (seed, dedupe, reserved list, rename)',
-    desc: `Add a \`handle\` column to platform_identity_accounts: seeded from github_login at creation, deduped with a numeric suffix on collision, validated against a small reserved list (me, new, edit, settings, admin, api, u), builder-editable at a low rate limit, previous handle retained for a 301 window. github_id stays the join key everywhere — the handle is presentation only. WHY: github_login is mutable, so hanging the canonical profile URL on it means every GitHub rename silently 404s that builder's shared links. Namespaced module migration (ADR 0083). Spec: ${SPEC} (Decision 3).`,
-  },
-  {
-    ref: 'P02', kind: 'feature', disc: 'engineer', prio: 5, est: 180, crit: ['C1'], deps: [R01],
-    title: 'P02 · Profile fields: bio + typed links on the platform account',
-    desc: `Add \`bio\` (plain text, ~280 chars, NO markdown and no auto-linking) and \`links\` (a TYPED, capped set — website, X, LinkedIn, Discord; max 4) to platform_identity_accounts, plus the authenticated write. Server-side validation must enforce https-only AND reject non-http(s) schemes and userinfo/host tricks — do not rely on the client. Render with rel="nofollow ugc noopener". WHY typed-and-capped rather than a free-form link list: a public, indexable page with user-controlled links is an SEO-spam magnet, and this removes the incentive without a moderation queue. Spec: ${SPEC} (Decision 4).`,
-  },
-  {
-    ref: 'P03', kind: 'decision', disc: 'engineer', prio: 5, est: 60, crit: ['C1'], deps: [], ready: true,
-    title: 'P03 · Owner decision: provisional vs active profile state for check-in-created accounts',
-    desc: `Goal 1000045 justifies "public by default" as tied to having a platform account, "which already carries platform T&C consent". That premise is not currently true for every account: POST /sso/membership/check-in and POST /sso/activity/rollup cause the hub to upsert an account for a builder who has never visited the hub and never saw a platform T&C. Under auto-create (see task 1002783) those people would get a public, indexable, cross-project profile from a sign-in they performed on someone else's instance. RECOMMENDATION: a profile_state of 'provisional' (created by check-in — still counted in aggregates, but not publicly listed, not at the handle URL, not in the sitemap, not in hub search) vs 'active' (has signed in at the hub at least once). One column, one branch. This is an owner product/consent call, and it changes the shape of P09. Spec: ${SPEC}.`,
-  },
-  {
-    ref: 'P04', kind: 'feature', disc: 'ui', prio: 4, est: 180, crit: ['C1'], deps: ['P01', 'P02', SETTINGS_SPIKE],
-    title: 'P04 · Settings → Profile rail group (the single profile-edit surface)',
-    desc: `One edit surface for the profile, as a new rail group in the hall Settings page (the RAIL_GROUPS pattern in modules/hall-ui/public/settings.js) — not a separate edit page. Holds handle, bio, links alongside the display-name and disciplines controls that already live there. Account-global fields must be edited where they are stored; final hub-vs-per-project placement is task ${SETTINGS_SPIKE}'s call, which is why this waits on it. Spec: ${SPEC} (Decision 4).`,
-  },
-  {
-    ref: 'P05', kind: 'verify', disc: 'engineer', prio: 5, est: 120, crit: ['C1'], deps: [R02],
-    title: 'P05 · Leak test for the hub profile read (mirror of tests/profile_route.mjs)',
-    desc: `The instance route GET /builders/:id/profile projects an explicit public column whitelist and tests/profile_route.mjs proves the private columns (anthropic_email, anthropic_user_id, monthly_budget_usd, system_role, box_blocked*, deactivated_reason) never appear anywhere in the serialized response. The new cross-project read needs its OWN mirror test over the account + rollup projection before it is public — same sentinel-string technique, same 404-on-unknown-id assertion. Never spread a raw row. Spec: ${SPEC} (Constraints §1).`,
-  },
-  {
-    ref: 'P06', kind: 'feature', disc: 'ui', prio: 3, est: 120, crit: ['C1'], deps: ['P02'],
-    title: 'P06 · "Complete your profile" needs-attention inbox line item (dismissible)',
-    desc: `When bio or preferred_disciplines are empty, nudge the builder — as a DISMISSIBLE line item in the needs-attention inbox (goal-inbox.js / #attention-scroll), never a new Home card. That is the hall placement rule (modules/hall-ui/CLAUDE.md → Placement): an action awaiting the builder is an inbox line. This is the replacement for the profile-setup wizard that task 1002783 rejected. Spec: ${SPEC} (Decision 2).`,
-  },
-  {
-    ref: 'P07', kind: 'feature', disc: 'engineer', prio: 3, est: 210, crit: ['C1'], deps: [R02],
-    title: 'P07 · Hub recent works via push — recent_ships[] on the activity rollup',
-    desc: `The hub has no tasks table for other projects, so "recent works" cannot render there today. The existing PULL pattern (modules/platform-identity/project-stats.js) fans out to each project's public API — right for a builder count on a catalog page, wrong per-profile-view, and it cannot serve a CLI-only project at all. Extend the POST /sso/activity/rollup payload (which already carries credits/ships/karma/rank/disciplines per project) with a capped recent_ships[] — 3 per project: title, id, shipped_at, and a link into that instance — plus the instance-side reporter in core auth.js. Reuses a table and a reporter that already exist; costs no fan-out read; stays descriptive-analytics-only. Spec: ${SPEC} (page spec, section 4).`,
-  },
-  {
-    ref: 'P08', kind: 'feature', disc: 'ui', prio: 4, est: 150, crit: ['C1'], deps: ['P01', R05],
-    title: 'P08 · Canonical profile URL wiring (instance rel=canonical → hub; numeric id redirects)',
-    desc: `One canonical public profile, two render paths: the hub's server-rendered handle URL is canonical, and the hall's own profile page stays the LOCAL view and emits rel=canonical to it when the builder has a platform account. The numeric ?id= form never dies — it is stable and rename-proof, so keep it as a permanent fallback that redirects to the canonical handle URL. Coordinate with goal 1000048 R14 (public builder-profile SEO page) so only ONE page gets built. Spec: ${SPEC} (Decision 1).`,
-  },
-  {
-    ref: 'P09', kind: 'feature', disc: 'engineer', prio: 3, est: 150, crit: ['C1'], deps: ['P01', PRIVACY_SPIKE],
-    title: 'P09 · noindex until first ship + sitemap consent gate for builder profiles',
-    desc: `A public, indexable profile that anyone can mint is a backlink-farming surface. Gate indexing on the builder having at least one shipped work, and gate sitemap inclusion on consent (private accounts and — if the owner accepts P03 — provisional accounts are excluded). Coordinates with goal 1000048 R15 (builder profiles in sitemap, consent-gated). Shape depends on the P03 decision. Spec: ${SPEC} (Visibility rules).`,
-  },
-  {
-    ref: 'P10', kind: 'verify', disc: 'engineer', prio: 3, est: 90, crit: ['C2'], deps: [PRIVACY_SPIKE, R03],
-    title: 'P10 · PROOF: a private account\'s profile 404s to a stranger and renders to its owner',
-    desc: `Verify the profile page honours the privacy model: a private account's handle URL returns 404 — NOT 403, because a 403 confirms the handle exists — to everyone except the account itself, which sees its own profile with a "private" banner. Also assert the stats-hidden case renders no partial numbers (a count beside a hidden total is a leak by subtraction). The authoritative model is task ${PRIVACY_SPIKE}'s; if it lands a different rule, this proof follows it and the spec is the thing that is wrong. Spec: ${SPEC} (Visibility rules).`,
-  },
-];
-
-(async () => {
-  const idByRef = {};
-  let created = 0;
-  let existing = 0;
-  console.log(`Seeding ${TASKS.length} tasks under goal ${GOAL} (${VER})…`);
-  for (const t of TASKS) {
-    const r = await api('POST', '/tasks', {
-      version_id: VER,
-      goal_id: GOAL,
-      title: t.title,
-      description: t.desc,
-      kind: t.kind,
-      discipline: t.disc,
-      priority: t.prio,
-      est_minutes: t.est,
-      criterion_ids: t.crit,
-      source: SRC,
-      source_ref: `bv1-profile-page-${t.ref}`,
-    });
-    if (!r.ok) {
-      console.log(`  ${t.ref}: FAILED ${r.status} ${JSON.stringify(r.data)}`);
-      continue;
-    }
-    const task = r.data.task || r.data;
-    idByRef[t.ref] = task.id;
-    if (r.data.idempotent || r.data.existing) existing++; else created++;
-    console.log(`  ${t.ref} → task ${task.id} (${t.kind}/${t.disc}, P${t.prio}, [${t.crit.join(',')}])`);
-  }
-
-  console.log('Wiring dependencies…');
-  let edges = 0;
-  for (const t of TASKS) {
-    if (!t.deps.length) continue;
-    const id = idByRef[t.ref];
-    // A dep is either a local ref (resolved from this run) or a literal task id.
-    const depIds = t.deps.map((d) => (typeof d === 'number' ? d : idByRef[d])).filter(Boolean);
-    if (!id || depIds.length !== t.deps.length) {
-      console.log(`  ${t.ref}: dep resolve gap, skipping`);
-      continue;
-    }
-    // PUT replaces the full set, so a re-run converges instead of erroring on
-    // an edge that already exists.
-    const r = await api('PUT', `/tasks/${id}/dependencies`, { depends_on_task_ids: depIds });
-    if (!r.ok) {
-      console.log(`  ${t.ref}: dep FAILED ${r.status} ${JSON.stringify(r.data)}`);
-      continue;
-    }
-    edges += depIds.length;
-    console.log(`  ${t.ref} depends on ${t.deps.join(',')}`);
-  }
-
-  console.log('Promoting zero-dep roots to ready…');
-  for (const t of TASKS.filter((x) => x.ready)) {
-    const id = idByRef[t.ref];
-    if (!id) continue;
-    const r = await api('POST', `/tasks/${id}/promote`, {});
-    console.log(`  ${t.ref} (task ${id}): ${r.ok ? 'ready' : 'promote note ' + JSON.stringify(r.data).slice(0, 120)}`);
-  }
-
-  console.log(`\nDONE. created=${created} existing=${existing} depEdges=${edges}.`);
-  console.log('ref→id:', JSON.stringify(idByRef));
-})();