@bongos/core 1.21.176 → 1.21.178

package/docs/copy-registry.json

@@ -3,9 +3,9 @@
   "generator": "scripts/bongos/copy-inventory.js",
   "goal": 1000074,
   "counts": {
-    "strings": 2749,
-    "unique_ids": 2336,
-    "certain": 2749,
+    "strings": 2735,
+    "unique_ids": 2323,
+    "certain": 2735,
     "heuristic": 0,
     "duplicate_ids": 239
   },
@@ -13,7 +13,7 @@
     "builders-hall": {
       "at": "modules/hall-ui/public",
       "files": 153,
-      "strings": 1930
+      "strings": 1916
     },
     "status-dashboard": {
       "at": "modules/status-ui/public",
@@ -349,26 +349,12 @@
       "at": [
         "modules/hall-ui/public/deploy.html:33",
         "modules/hall-ui/public/fleet.html:32",
-        "modules/hall-ui/public/gate.html:36",
+        "modules/hall-ui/public/gate.html:35",
         "modules/hall-ui/public/government.html:35",
         "modules/hall-ui/public/project-settings.html:35",
         "modules/hall-ui/public/watch.html:41"
       ]
     },
-    {
-      "id": "4d8ee7d68974",
-      "surface": "builders-hall",
-      "text": "task {…}",
-      "occurrences": 6,
-      "at": [
-        "modules/hall-ui/public/gate.js:117",
-        "modules/hall-ui/public/hall-render.js:679",
-        "modules/hall-ui/public/idea.js:234",
-        "modules/hall-ui/public/ideas.js:201",
-        "modules/hall-ui/public/ideas.js:782",
-        "modules/hall-ui/public/watch.js:1370"
-      ]
-    },
     {
       "id": "eeda19200aeb",
       "surface": "landing",
@@ -395,6 +381,19 @@
         "modules/hall-ui/public/shell.js:502"
       ]
     },
+    {
+      "id": "4d8ee7d68974",
+      "surface": "builders-hall",
+      "text": "task {…}",
+      "occurrences": 5,
+      "at": [
+        "modules/hall-ui/public/hall-render.js:679",
+        "modules/hall-ui/public/idea.js:234",
+        "modules/hall-ui/public/ideas.js:201",
+        "modules/hall-ui/public/ideas.js:782",
+        "modules/hall-ui/public/watch.js:1370"
+      ]
+    },
     {
       "id": "971f3eb36342",
       "surface": "builders-hall",
@@ -862,13 +861,23 @@
         "modules/hall-ui/public/watch.js:530"
       ]
     },
+    {
+      "id": "9791f92ed0b7",
+      "surface": "builders-hall",
+      "text": "Autobongos — {{worldName}}",
+      "occurrences": 2,
+      "at": [
+        "modules/hall-ui/public/gate.html:6",
+        "modules/hall-ui/public/gate.html:6"
+      ]
+    },
     {
       "id": "1de02052abf2",
       "surface": "builders-hall",
       "text": "Available from the {…} rank up.",
       "occurrences": 2,
       "at": [
-        "modules/hall-ui/public/gate.js:219",
+        "modules/hall-ui/public/gate.js:65",
         "modules/hall-ui/public/government.js:1053"
       ]
     },
@@ -1232,16 +1241,6 @@
         "modules/hall-ui/public/fleet.html:6"
       ]
     },
-    {
-      "id": "ecae3916bf01",
-      "surface": "builders-hall",
-      "text": "Gate — {{worldName}}",
-      "occurrences": 2,
-      "at": [
-        "modules/hall-ui/public/gate.html:6",
-        "modules/hall-ui/public/gate.html:6"
-      ]
-    },
     {
       "id": "36e5a4d78071",
       "surface": "landing",
@@ -2708,7 +2707,7 @@
       "surface": "builders-hall",
       "text": "+ Add goal",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 357,
+      "line": 209,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -2730,15 +2729,6 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
-    {
-      "id": "05da3082c8c5",
-      "surface": "builders-hall",
-      "text": "+{…} more",
-      "file": "modules/hall-ui/public/gate.js",
-      "line": 109,
-      "origin": "js-markup",
-      "confidence": "certain"
-    },
     {
       "id": "9c8aba2b2fa4",
       "surface": "builders-hall",
@@ -3540,15 +3530,6 @@
       "origin": "html-text",
       "confidence": "certain"
     },
-    {
-      "id": "9ece0a6d3b4d",
-      "surface": "builders-hall",
-      "text": "Approved. Re-check pending.",
-      "file": "modules/hall-ui/public/gate.js",
-      "line": 152,
-      "origin": "js-markup",
-      "confidence": "certain"
-    },
     {
       "id": "4160b56d14af",
       "surface": "builders-hall",
@@ -3743,16 +3724,34 @@
       "surface": "builders-hall",
       "text": "Autobongos runner",
       "file": "modules/hall-ui/public/gate.html",
-      "line": 52,
+      "line": 46,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
+    {
+      "id": "9791f92ed0b7",
+      "surface": "builders-hall",
+      "text": "Autobongos — {{worldName}}",
+      "file": "modules/hall-ui/public/gate.html",
+      "line": 6,
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "9791f92ed0b7",
+      "surface": "builders-hall",
+      "text": "Autobongos — {{worldName}}",
+      "file": "modules/hall-ui/public/gate.html",
+      "line": 6,
+      "origin": "html-title",
+      "confidence": "certain"
+    },
     {
       "id": "1de02052abf2",
       "surface": "builders-hall",
       "text": "Available from the {…} rank up.",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 219,
+      "line": 65,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -4260,15 +4259,6 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
-    {
-      "id": "f040fb66f250",
-      "surface": "builders-hall",
-      "text": "Changed files",
-      "file": "modules/hall-ui/public/gate.js",
-      "line": 111,
-      "origin": "js-markup",
-      "confidence": "certain"
-    },
     {
       "id": "906c2947dfc1",
       "surface": "builders-hall",
@@ -4427,7 +4417,7 @@
       "surface": "builders-hall",
       "text": "Choose goals",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 327,
+      "line": 179,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -4998,15 +4988,6 @@
       "origin": "js-notice",
       "confidence": "certain"
     },
-    {
-      "id": "7bcaeffb742f",
-      "surface": "builders-hall",
-      "text": "Could not approve: {…}",
-      "file": "modules/hall-ui/public/gate.js",
-      "line": 85,
-      "origin": "js-notice",
-      "confidence": "certain"
-    },
     {
       "id": "c922293e668c",
       "surface": "builders-hall",
@@ -6119,7 +6100,7 @@
       "surface": "builders-hall",
       "text": "Each builder's runner",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 554,
+      "line": 406,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -6132,15 +6113,6 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
-    {
-      "id": "ec2a68253781",
-      "surface": "builders-hall",
-      "text": "Each one touched a protected surface and stopped at the gate check.",
-      "file": "modules/hall-ui/public/gate.html",
-      "line": 64,
-      "origin": "html-text",
-      "confidence": "certain"
-    },
     {
       "id": "2bd1c7fb3955",
       "surface": "builders-hall",
@@ -6245,7 +6217,7 @@
       "surface": "builders-hall",
       "text": "Enter a goal number.",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 459,
+      "line": 311,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -6834,24 +6806,6 @@
       "origin": "js-text-assign",
       "confidence": "certain"
     },
-    {
-      "id": "ecae3916bf01",
-      "surface": "builders-hall",
-      "text": "Gate — {{worldName}}",
-      "file": "modules/hall-ui/public/gate.html",
-      "line": 6,
-      "origin": "html-text",
-      "confidence": "certain"
-    },
-    {
-      "id": "ecae3916bf01",
-      "surface": "builders-hall",
-      "text": "Gate — {{worldName}}",
-      "file": "modules/hall-ui/public/gate.html",
-      "line": 6,
-      "origin": "html-title",
-      "confidence": "certain"
-    },
     {
       "id": "c93912bbad76",
       "surface": "builders-hall",
@@ -6974,7 +6928,7 @@
       "surface": "builders-hall",
       "text": "Goal number",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 349,
+      "line": 201,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -6992,7 +6946,7 @@
       "surface": "builders-hall",
       "text": "Goal {…}",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 342,
+      "line": 194,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -7001,7 +6955,7 @@
       "surface": "builders-hall",
       "text": "Goal {…} added.",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 462,
+      "line": 314,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -7010,7 +6964,7 @@
       "surface": "builders-hall",
       "text": "Goal {…} removed.",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 486,
+      "line": 338,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -7046,7 +7000,7 @@
       "surface": "builders-hall",
       "text": "Goals it can work on",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 358,
+      "line": 210,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -7149,33 +7103,6 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
-    {
-      "id": "8027d67b9d45",
-      "surface": "builders-hall",
-      "text": "Held by the gate check.",
-      "file": "modules/hall-ui/public/gate.js",
-      "line": 104,
-      "origin": "js-markup",
-      "confidence": "certain"
-    },
-    {
-      "id": "7cdddb5e2332",
-      "surface": "builders-hall",
-      "text": "Held changes summary",
-      "file": "modules/hall-ui/public/gate.html",
-      "line": 43,
-      "origin": "html-attr:aria-label",
-      "confidence": "certain"
-    },
-    {
-      "id": "adac4cd8b973",
-      "surface": "builders-hall",
-      "text": "Held pull requests",
-      "file": "modules/hall-ui/public/gate.html",
-      "line": 63,
-      "origin": "html-text",
-      "confidence": "certain"
-    },
     {
       "id": "3dec722a5f6e",
       "surface": "builders-hall",
@@ -8846,7 +8773,7 @@
       "surface": "builders-hall",
       "text": "Name (optional)",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 349,
+      "line": 201,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10169,7 +10096,7 @@
       "surface": "builders-hall",
       "text": "Open Settings",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 328,
+      "line": 180,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -11276,7 +11203,7 @@
       "surface": "builders-hall",
       "text": "Remove goal {…}",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 342,
+      "line": 194,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -11699,7 +11626,7 @@
       "surface": "builders-hall",
       "text": "Runner allowed to work",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 407,
+      "line": 259,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -11708,7 +11635,7 @@
       "surface": "builders-hall",
       "text": "Runners work only the goals above, and only while the switch is on. Each builder picks which of them their own runner takes, and you can pause any one builder's runner below. All of it lives on the server, so a runner's PC can read it but cannot change it.",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 407,
+      "line": 259,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -13323,6 +13250,15 @@
       "origin": "html-attr:alt",
       "confidence": "certain"
     },
+    {
+      "id": "788f267e4e39",
+      "surface": "builders-hall",
+      "text": "The Autobongos controls are for the {…}.",
+      "file": "modules/hall-ui/public/gate.js",
+      "line": 73,
+      "origin": "js-text-assign",
+      "confidence": "certain"
+    },
     {
       "id": "c5e6bdd32fe3",
       "surface": "builders-hall",
@@ -14444,7 +14380,7 @@
       "surface": "builders-hall",
       "text": "This page opens at a higher rank.",
       "file": "modules/hall-ui/public/gate.html",
-      "line": 36,
+      "line": 35,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -15015,15 +14951,6 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
-    {
-      "id": "f72ed3fc403d",
-      "surface": "builders-hall",
-      "text": "Waiting for approval",
-      "file": "modules/hall-ui/public/gate.js",
-      "line": 153,
-      "origin": "js-markup",
-      "confidence": "certain"
-    },
     {
       "id": "0cb84fd75b50",
       "surface": "builders-hall",
@@ -16545,15 +16472,6 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
-    {
-      "id": "63bd14f73960",
-      "surface": "builders-hall",
-      "text": "author trusted",
-      "file": "modules/hall-ui/public/gate.js",
-      "line": 116,
-      "origin": "js-markup",
-      "confidence": "certain"
-    },
     {
       "id": "daad412fa988",
       "surface": "builders-hall",
@@ -17040,15 +16958,6 @@
       "origin": "html-text",
       "confidence": "certain"
     },
-    {
-      "id": "c5862d055f1a",
-      "surface": "builders-hall",
-      "text": "hard floor",
-      "file": "modules/hall-ui/public/gate.js",
-      "line": 102,
-      "origin": "js-markup",
-      "confidence": "certain"
-    },
     {
       "id": "55d673a5f0ec",
       "surface": "builders-hall",
@@ -18219,15 +18128,6 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
-    {
-      "id": "4d8ee7d68974",
-      "surface": "builders-hall",
-      "text": "task {…}",
-      "file": "modules/hall-ui/public/gate.js",
-      "line": 117,
-      "origin": "js-markup",
-      "confidence": "certain"
-    },
     {
       "id": "4d8ee7d68974",
       "surface": "builders-hall",
@@ -18687,15 +18587,6 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
-    {
-      "id": "007b28a56031",
-      "surface": "builders-hall",
-      "text": "view diff",
-      "file": "modules/hall-ui/public/gate.js",
-      "line": 120,
-      "origin": "js-markup",
-      "confidence": "certain"
-    },
     {
       "id": "18cf722bdd7e",
       "surface": "builders-hall",
@@ -19101,15 +18992,6 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
-    {
-      "id": "3efa67dc6e07",
-      "surface": "builders-hall",
-      "text": "{…} file{…}",
-      "file": "modules/hall-ui/public/gate.js",
-      "line": 111,
-      "origin": "js-markup",
-      "confidence": "certain"
-    },
     {
       "id": "55b949873848",
       "surface": "builders-hall",
@@ -19137,15 +19019,6 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
-    {
-      "id": "30300b87567c",
-      "surface": "builders-hall",
-      "text": "{…} more PR{…} still being checked.",
-      "file": "modules/hall-ui/public/gate.js",
-      "line": 208,
-      "origin": "js-text-assign",
-      "confidence": "certain"
-    },
     {
       "id": "92469c4757f1",
       "surface": "builders-hall",

package/docs/file-map.md

@@ -14,7 +14,7 @@
 ├── .impeccable/                 ← impeccable skill artifacts: config.json (buildPath: code), surfaces/<route>.md (per-route briefs), mocks/world-assets/ (Higgsfield renders + prompt sidecars; the SOURCE of modules/public-landing/public/assets/world/), mocks/decision/ (A1 comps), design.json (DESIGN.md sidecar), review/ (finish captures)
 ├── .gitignore
 ├── package.json / package-lock.json
-├── CODEOWNERS                   ← owner review on the merge-gate surfaces (real since task 1002611, ADR 0159); inert until branch protection is on (scripts/bongos/gating.js) — keep aligned with gate-review.js HARD_FLOOR_GLOBS
+├── CODEOWNERS                   ← owner review on the merge-gate surfaces (real since task 1002611, ADR 0159); inert until branch protection is on (scripts/bongos/gating.js) — keep aligned with scripts/bongos/hard-floor.js HARD_FLOOR_GLOBS
 ├── server.js                    ← game boot: Express + Colyseus + the shared internal surface (mountInternalSurfaces), binds 127.0.0.1:3000
 │
 ├── limitations/                 ← versioning-methodology artifacts
@@ -112,7 +112,7 @@
 │   ├── autonomy/                ← CORE-DOMAIN carve (BV1.R83, default-on): the MAS autonomy surfaces — the $0 deterministic autonomy gate (System 3, inert until armed), the conductor/architect CLIs, and the in-process routine timers (incl. the weekly peer-vote-tally poller). Registers no port; resolves the lifecycle `tallyPeerVotes` doorway. CLAUDE.md, module.json, routes/autonomy.js, autonomy.js.
 │   ├── status-ui/              ← CORE-DOMAIN WEB-SURFACE carve (BV1.R84, default-on): the public status dashboard at status.<apex>, moved from public-status/. NO routes/db/port — declares contributes.webSurfaces:[{host:"status.",dir:"public"}], served by the loader web-surface seam (moduleWebSurfaces → serve-internal). CLAUDE.md, module.json, public/{index.html,status.js,style.css,cursors/,snapshots/}.
 │   ├── hall-ui/                ← CORE-DOMAIN WEB-SURFACE carve (BV1.R85, default-on): the authenticated builders' hall at builders.<apex>, moved from public-builders/ (~13k LOC, the largest). NO routes/db/port — declares contributes.webSurfaces:[{host:"builders.",dir:"public"}] for discovery, but UNLIKE status-ui keeps its DEDICATED serving block in serve-internal (the /builders shim + canonical redirects + citizen/Archon page gates + asset-stamping + hall-widget injection), partitioned out of the generic web-surface loop and served from BUILDERS_DIR. CLAUDE.md, module.json, records/ (one file per page family — what each family's redesign settled; CLAUDE.md points at them, and a new record is a new file there so concurrent hall tasks stop colliding on one insertion point, task 1003499), public/{index.html,builders.js,style.css,work,watch,gate,settings,ranks,sessions,primer,diagrams,atlas,...}.{html,js},cursors/,chime.wav. Four ARCHETYPE sheets sit beside the per-page ones: `record.css` (the task + idea records, task 1003305), `room.css` (the READING ROOMS — the primer + the diagrams index, task 1003306: the reading measure and rhythm, the table of contents, the progress hairline and the framed figure diagram-viewer.js upgrades on both pages), `oversight.css` (the OVERSIGHT family — government, watch, gate, task 1003469 (harbor was its fourth until task 1003890 removed the dev box): the row, the figure band inside a panel, the group head, the inline form, the grant toggle and the shared confirm modal; named oversight because the vocabulary wall bans "governance" on the government surface) and `panel.css` (the PANEL family — settings, profile, task 1003308 (pair was its third until task 1003890 removed the dev box): the row, the switch, the field with its label above, the chip control, the four voices and the sign-in gate; the hall's my-projects page was DELETED in the same task — "my projects" is the hub's user-level page, and the hall keeps no link or redirect; the family's fourth page `not-ready.html` was deleted by task 1003450, along with the emptied `requireNonXenosPage` gate that was the only thing redirecting to it). A page sheet then holds only what one page has and the others do not — `primer.css` the acknowledge gate, `diagrams.css` the legend strip, `gate.css` the hold reasons and file chips, `watch.css` the severities, the report reader and the grade trend, `settings.css` the rail layout, the group head, the token ladder and the voices grid, `profile.css` the identity band and the shelf, `roster.css` the Builders roster's identity cell (was `people.css`, shared with the cross-project `/people` directory until task 1003444 deleted that page — `/people` and its legacy door `/scouting` now 302 to `/roster`), `thinking.css` THE SKY's one sheet (task 1004231 / sky part 3 — `thinking.html` at `/thinking` is the prototype the owner adopted as the design of record, `docs/design/mocks/sky/`, built over `GET /sky` + `GET /sky/mine`; its script is the seven `sky-*.js` files on one shared `window.OTBSky`; it replaced THE ROOM of task 1004098, which survives as the list drawer, and the old `/sky` page, whose URL 301s here; `idea-objects.js` beside it is the shared five-object vocabulary).
-│   ├── lifecycle/               ← CORE-DOMAIN carve (BV1.R86, default-on): the build state machine — tasks · claims · versions · done-when · goals · dependencies · claim→ship→grade→credit · github-push + merge-lock + conflict-resolve + publish-reconciler. The LAST, most-coupled carve; registers the `lifecycle` kernel port (createTask, classifyTaskKind, tallyPeerVotes, work-tracking reads). CLAUDE.md, module.json, routes/{tasks,claims,versions,done-when,goals,dependencies,gate-approvals,analytics}.js, lifecycle.js, github-push.js, merge-lock.js, conflict-resolve.js, publish-reconciler.js, task-visuals.js + task-visual-db.js + routes/visuals.js (the optional ship-time visual, task 1003109 — the route file is NOT named task-*.js on purpose; see the module CLAUDE.md).
+│   ├── lifecycle/               ← CORE-DOMAIN carve (BV1.R86, default-on): the build state machine — tasks · claims · versions · done-when · goals · dependencies · claim→ship→grade→credit · github-push + merge-lock + conflict-resolve + publish-reconciler. The LAST, most-coupled carve; registers the `lifecycle` kernel port (createTask, classifyTaskKind, tallyPeerVotes, work-tracking reads). CLAUDE.md, module.json, routes/{tasks,claims,versions,done-when,goals,dependencies,analytics}.js, lifecycle.js, github-push.js, merge-lock.js, conflict-resolve.js, publish-reconciler.js, task-visuals.js + task-visual-db.js + routes/visuals.js (the optional ship-time visual, task 1003109 — the route file is NOT named task-*.js on purpose; see the module CLAUDE.md).
 │   ├── copy-desk/               ← CORE-DOMAIN module (task 1003113 / R02 of goal 1000074, default-on): the COPY half of the design contract — ADR 0081 gave design TOKENS a repo-owned source of truth, text had none. Owns the FLAG (anyone in any role marks a string or a whole surface as needing an artist's attention, with a reason required in BOTH the route and a CHECK constraint) and the QUEUE an artist reads it from. READS R01's committed registry (docs/copy-registry.json, generated by scripts/bongos/copy-inventory.js) and never writes it. NO LIVE CMS is the hard non-goal: no column here could hold replacement text, and copy_no_cms.mjs pins that. Key is `copy-desk`, not `copy` — the branding contract already owns a `copy` block, so the bare word reds the "core carries no module code" fitness check. R03 (task 1003114, ADR 0233) added the PROPOSAL: an artist writes the replacement wording and it becomes a Bongos task carrying a fenced copy-proposal patch — no row, NO second migration (a proposals table is the forbidden column with extra steps), and scripts/bongos/copy-apply.js lands it as a real diff under a claim. BV2.TW05 (task 1004316, ADR 0341 D8) added Tweak Mode's three derived READS — GET /copy-desk/pages, /copy-desk/pages/:pageId, /copy-desk/tally: page status and count, changelog, drift, "N of M tweaked" per surface, and the artist's tally — over the page-tweak tasks (lifecycle port), docs/page-inventory.json and docs/page-readings.json (both now in the publish manifest), with no status table. BV2.TW06 (task 1004317, ADR 0341 D2, D5, D6) added its first two page WRITES: POST /copy-desk/pages/:pageId/claim (an artist-craft builder opens or takes the page's tweak round as a web-claimed task, through the lifecycle port's webClaimPageTweak, under an advisory lock on the page) and POST /copy-desk/pages/:pageId/asks (anyone files a page ask, a copy_desk_flags row with scope 'page', added by copy_desk_002_page_asks.sql). CLAUDE.md, module.json, registry.js, flags.js, proposals.js, pages.js (the page-tweak block format), page-status.js (the pure derivation), page-data.js (the page artifacts' read side), routes/copy-desk.js, migrations/copy_desk_001_flags.sql, migrations/copy_desk_002_page_asks.sql, tests/{copy_flags,copy_queue,copy_no_cms,copy_proposals,copy_page_status}.mjs + tests/fixtures/page-tweak.cjs. Its hall surface lives with hall-ui (public/copy-desk.{html,js,css}), per the one-key-per-web-surface precedent. skills/tweak/SKILL.md is the /tweak skill (contributes.skills; moved out of .claude/skills/ in task 1004471, hidden from the model listing, typed as /tweak).
 │   ├── page-notes/              ← the artist's page feedback docs (task 1004496, default-on): the Artistry palette button's store. A doc about one hall page, with up to eight reference images (stored in the DB, images only), turned into ideas by an AI split on submit and kept as the page's reference (?note=N). Apart from copy-desk, which may hold no wording. module.json, CLAUDE.md, notes.js (pure), split.js, db.js, routes/, migrations/.
 │   ├── raise/                   ← the /raise investor page (task 1004847, ADR 0384, default-off; hub only): password-gated for investors (signing in accepts the NDA, non-binding interest), edited in place by any active builder with every change logged. The copy in content/ is the owner's words — never reword it in code. module.json, CLAUDE.md, raise.js (pure), page.js, web.js (the GET-only raise.web port core mounts at /raise), db.js, routes/ (every write), migrations/, content/, views/, public/.
@@ -230,7 +230,7 @@
 │   │   ├── api-prefix.js        ← API_PREFIX ('/api/bongos') + LEGACY_API_PREFIXES ('/api/gds' permanent alias) + API_VERSION
 │   │   ├── api-path-404.js      ← recognize Bongos-API-shaped paths that missed the mount → JSON 404 + corrective hint (server.js catch-all; V4.R14, [#952](https://example.com/builders#/task/952))
 │   │   ├── serve-internal.js    ← (ADR 0062 R51, task 1190) the SHARED internal web surface: mountInternalSurfaces(app) wires /healthz + /version + /api/bongos + the `bongos` CLI downloads + the status & builders hosts; called by BOTH server.js (game boot) and platform-server.js (Bongos-only) so the two never drift. Also injects clientBranding() as window.__BRANDING__ into the served hall/status HTML
-│   │   ├── routes/              ← one file per KERNEL feature so parallel branches stop colliding on routes.js — the domain routes (tasks/claims/versions/cost/leaderboard/memory/learnings/inbox/blockers/search/gate-approvals/discord/…) graduated with their domains into `modules/<key>/routes/`, reached only through the loader
+│   │   ├── routes/              ← one file per KERNEL feature so parallel branches stop colliding on routes.js — the domain routes (tasks/claims/versions/cost/leaderboard/memory/learnings/inbox/blockers/search/discord/…) graduated with their domains into `modules/<key>/routes/`, reached only through the loader
 │   │   │   ├── _helpers.js      ← validateOrRespond, parseId, LIMITS, asyncHandler, publicOrigin, corsPublicGet, parseCookie
 │   │   │   ├── healthz.js, auth.js, me.js, builders.js, instance.js
 │   │   │   ├── my-sessions.js   ← GET /me/sessions + POST /me/sessions/revoke{,-all} — the OWN-scoped session self-service (task 1003341, ADR 0206): see and kill your own sessions without an Archon. Kept apart from auth.js's admin-gated cross-builder pair so the no-caller-named-owner rule holds over a WHOLE file (tests/own_session_revoke.mjs)
@@ -431,26 +431,21 @@ tests/
 ```
 .claude/scheduled-tasks/
 ├── artifact-audit/SKILL.md            ← weekly artifact audit (task 1003200): every task at shipped/confirmed/completed that DECLARES a code artifact is checked against main's commit messages AND the content of its tracked files — both, because a fix can land under another branch and be cited only in a comment (task 1003212). Anything unproven is filed as a blocker, deduped on the finding set. Scoped to ships on/after the ship-assurance gate (2026-08-19, ADR 0184), before which a DB-only ship recorded no declaration and silence proves nothing. FIRED BY .github/workflows/artifact-audit.yml, Mondays 06:23 UTC — `cadence: weekly` here and that cron must agree or fitness Check 25 (scripts/bongos/routine-schedule.js) fails the gate (task 1003209, ADR 0188)
-├── artifact-staleness/SKILL.md        ← freshness backstop for the gitignored deploy-generated navigation docs (task 1001930, ADR 0110 pt.5): docs/repo-map.md and docs/session-log-index.md are untracked, so no PR gate can see them and a broken deploy regen step leaves a stale or missing map with only a journald line as the alarm. Asks each artifact's own generator (--check-whole) whether it still matches the served commit, reports absent and stale separately, and posts findings to Discord #ship-news itself. INSTANCE-SIDE ONLY — a fresh CI clone legitimately lacks these files, so it declares no cadence and no workflow fires it; config/scheduled-routines.json records the intended daily cadence.
 ├── bfg/SKILL.md                       ← nightly BFG pass (MAS Phase 6, ADR 0026) — doc/memory hygiene + DB counter-vs-ledger drift (Part A), per-builder interaction scoring into transferable-practice suggestions (Part B), and the audited cross-builder memory write (Part C, OFF unless BFG_WRITE_ENABLED) (restored in task 1003365; unscheduled in core — only redteam-weekly has a firing workflow; config/scheduled-routines.json records the intended cadence)
 ├── bfg-session-eval/SKILL.md          ← nightly session-inefficiency evaluator (MAS Phase 6D, ADR 0027) — mines the session corpus for wasteful sessions and files the fixes as idea_inbox rows plus a docs/audits report (restored in task 1003365; unscheduled in core — only redteam-weekly has a firing workflow; config/scheduled-routines.json records the intended cadence)
 ├── core-update-subscription/SKILL.md  ← daily patch-only auto-upgrade of subscribed consumer instances (ADR 0136) — deterministic `subscribe.js` step, health-gated with auto-rollback; opt-in and autonomy-gated, so a no-op until an operator arms it (restored in task 1003365; unscheduled in core — only redteam-weekly has a firing workflow; config/scheduled-routines.json records the intended cadence)
-├── dep-audit-nightly/SKILL.md         ← nightly dependency-vulnerability scan (`scripts/security/dep-audit.js`) across npm and the droplet's system packages; findings become idea_inbox rows plus one vulnerability_report per high/critical (restored in task 1003365; unscheduled in core — only redteam-weekly has a firing workflow; config/scheduled-routines.json records the intended cadence)
-├── diagram-drift/SKILL.md             ← daily deterministic backstop that re-derives the onboarding diagrams from migrations plus the live version API and files an idea when the committed ones have drifted (`check.js --file-idea`) (restored in task 1003365; unscheduled in core — only redteam-weekly has a firing workflow; config/scheduled-routines.json records the intended cadence)
+├── dep-audit-nightly/SKILL.md         ← daily npm audit of the deployed instance (`scripts/security/dep-audit.js`); high/critical findings become ONE idea_inbox row, re-filed only when the set changes — fired in-process by modules/autonomy/pollers/daily-checks.js (task 1004878)
 ├── idea-triage-nightly/SKILL.md       ← nightly autonomous idea_inbox walk — promotes high-confidence ideas to tasks, discards obvious noise, defers anything ambiguous; autonomy-gated and OFF by default (restored in task 1003365; unscheduled in core — only redteam-weekly has a firing workflow; config/scheduled-routines.json records the intended cadence)
 ├── main-audit/SKILL.md                ← post-merge trust-boundary backstop (ADR 0043 / SEC 863) — audits commits landed on main for sub-Metic edits to permission-sensitive surfaces (restored in task 1003365; unscheduled in core — only redteam-weekly has a firing workflow; config/scheduled-routines.json records the intended cadence)
-├── newcomer-floor/SKILL.md            ← daily check that the three evergreen newcomer chores (engineer / artist / ideator) stay stocked; the server restocks them via modules/onboarding/newcomer-restock.js (restored in task 1003365; unscheduled in core — only redteam-weekly has a firing workflow; config/scheduled-routines.json records the intended cadence)
-├── newcomer-generator/SKILL.md        ← daily deterministic generator (`generate.js`) that tops the newcomer_friendly task queue back up to its floor (criterion C1 — newcomer queue always populated) (restored in task 1003365; unscheduled in core — only redteam-weekly has a firing workflow; config/scheduled-routines.json records the intended cadence)
 ├── overnight-builder/SKILL.md         ← autonomous overnight session-runner — claims the highest-priority safe task, works it end-to-end and ships it; autonomy-gated and OFF by default (restored in task 1003365; unscheduled in core — only redteam-weekly has a firing workflow; config/scheduled-routines.json records the intended cadence)
 ├── overnight-code-review/SKILL.md     ← nightly autonomous code-quality review; each finding lands as its own idea_inbox row so it survives triage; autonomy-gated and OFF by default (restored in task 1003365; unscheduled in core — only redteam-weekly has a firing workflow; config/scheduled-routines.json records the intended cadence)
-├── peer-vote-tally/SKILL.md           ← deterministic tally (`tally.js`) folding builder-on-builder peer votes at least 7 days old into karma_log rows (criterion C2) (restored in task 1003365; unscheduled in core — only redteam-weekly has a firing workflow; config/scheduled-routines.json records the intended cadence)
+├── peer-vote-tally/SKILL.md           ← deterministic tally (`tally.js`) folding builder-on-builder peer votes at least 7 days old into karma_log rows (criterion C2) — fired weekly in-process by modules/autonomy/pollers/routine-timers.js
 ├── publish-watch/SKILL.md             ← daily publish-lane check (task 1003916): compares every version the release lane ANNOUNCED in its own release commits against what the registry actually holds, and posts anything announced-but-never-delivered to Discord #ship-news. Exists because the 2026-09-13 outage (8 failed runs, 3 hours) was found by a person reading the npm version list — a failed run is one red row nobody watches, and the next merge erases the evidence. Silent on a healthy day by design; exit 2 (could not read) is distinct from exit 1 (found one).
-├── rank-roles-audit/SKILL.md          ← nightly deterministic check that every builder holds one of the four live ranks, so none silently resolves to zero permissions under the governance_002 backfill's INNER JOIN; detect-only, files one idea_inbox row and never repairs, and never fatal at boot (task 1002873; unscheduled in core — only redteam-weekly has a firing workflow; config/scheduled-routines.json records the intended cadence)
+├── rank-roles-audit/SKILL.md          ← daily deterministic check that every builder holds one of the four live ranks, so none silently resolves to zero permissions under the governance_002 backfill's INNER JOIN; detect-only, files one idea_inbox row and never repairs (task 1002873) — fired in-process by modules/autonomy/pollers/daily-checks.js (task 1004878)
 ├── redteam-weekly/SKILL.md            ← weekly deterministic red-team patrol (task 1003128): full-history gitleaks scan + dependency drift review (audit delta, cooldown, young pkgs, stale overrides) + action-pin check → files security reports (advisory, ADR 0158 §2). FIRED BY .github/workflows/redteam-patrol.yml, Mondays 06:17 UTC — `cadence: weekly` here and that cron must agree or fitness Check 25 (scripts/bongos/routine-schedule.js) fails the gate (task 1003209, ADR 0188)
 ├── repo-simplify-sweep/SKILL.md       ← weekly repo-cleanliness janitor — runs repo-metrics, files dead-code findings to idea_inbox, and auto-fixes only the narrow safe class (restored in task 1003365; unscheduled in core — only redteam-weekly has a firing workflow; config/scheduled-routines.json records the intended cadence)
 ├── security-review-weekly/SKILL.md    ← weekly security-state review — stale vulnerability_reports, ageing security-tagged tasks, recent high/critical dependency alerts; one Archon broadcast when anything is stale, silent otherwise (restored in task 1003365; unscheduled in core — only redteam-weekly has a firing workflow; config/scheduled-routines.json records the intended cadence)
 ├── skill-usage-review/SKILL.md        ← nightly skill-usage feedback loop — aggregates 24h of skill invocations into friction findings filed as `[skill-friction]` idea_inbox rows (restored in task 1003365; unscheduled in core — only redteam-weekly has a firing workflow; config/scheduled-routines.json records the intended cadence)
-├── stale-claim-release/SKILL.md       ← hourly sweep releasing claims whose session_pulses heartbeat has been silent for GDS_STALE_CLAIM_HOURS, returning the task to ready and pinging the builder (restored in task 1003365; unscheduled in core — only redteam-weekly has a firing workflow; config/scheduled-routines.json records the intended cadence)
 └── stranded-rows/SKILL.md             ← flags an open task whose work ALREADY LANDED on main (task 1003775): a row still in ready/backlog while a commit claims it with a line ending in `(task N)`. Narrower than "mentions N" on purpose — idea 1000807 measured that a mention-scan returns ~44 open rows that merely cite an id. Measured clean at 878 claims vs 434 open rows, and still catches the historical case (task 1002200, whose claim lives in the MERGE commit body). NO cadence declared: nothing schedules it yet, so it is run by hand — wiring a scheduler needs the control plane, and declaring a cadence with no cron firing it fails fitness Check 25 (task 1003209, ADR 0188). Prints ids + fixed vocabulary only, never builder-authored text.
 ```
 <!-- END GENERATED FILE-MAP .claude/scheduled-tasks/ -->

package/docs/handoff-template.md

@@ -70,7 +70,7 @@ If your change touched anything the onboarding diagrams describe — the **rank
 - **All five diagrams are auto-generated** by `scripts/bongos/gen-diagrams.js` — run it (`node scripts/bongos/gen-diagrams.js`) and confirm the result looks right; **do not hand-edit any `.mmd`**. The mechanical three (`01-task-lifecycle`, `02-rank-ladder`, `05-versioning`) regenerate from migrations + the public version API. The conceptual two (`03-example-karma`, `04-architecture`) regenerate from the **authenticated** `/tasks/:id` status of their backing tasks (and 03's seeded-achievement count); if no session is present the generator skips them cleanly. Rendering produces both `.svg` (the pannable viewer asset) and `.png` (fallback).
 - To change a diagram's **layout or wording**, edit the matching template function in `gen-diagrams.js` — not the `.mmd`. `assertions.json` is rebuilt by the generator in lockstep, so you don't hand-maintain it.
 
-The `diagram-drift` routine is a belt-and-braces backstop (it should find nothing once the generator has run), but the point is not to rely on it — running `gen-diagrams.js` is part of the change.
+There is no drift backstop (the `diagram-drift` routine was retired in task 1004878) — running `gen-diagrams.js` is part of the change.
 
 ---
 

package/docs/module-api-changelog.md

@@ -3189,5 +3189,9 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.21.174 with no explicit bump. run 40234506483. (task 1002620)
   1.21.176 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.21.175 with no explicit bump. run 40235567383. (task 1002620)
+  1.21.177 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.21.176 with no explicit bump. run 40241825861. (task 1002620)
+  1.21.178 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.21.177 with no explicit bump. run 40249608959. (task 1002620)
 ---------------------------------------------------------------------------
 ```