@bongos/core 1.21.32 → 1.21.34

package/modules/hall-ui/public/street.js

@@ -41,6 +41,16 @@
 // request, says the answer in a toast, re-reads the feeds so the pins, the
 // readings and the evening follow, and marks the building that answered (a CSS
 // class for 1.6 s: it rises or lights, and the matter's pin settles).
+//
+// THE FLOOR DESK (task 1004558). The chosen floor's block is the desk from the
+// round 2 board (Desks.dc.html): GovDesk.deskModel() (street-desk.js) gives the
+// header, tiles, rows, quiet state and record line under the line rule, and
+// this file draws it. A row's buttons send the matter card's own request
+// (GovMatterCard.request, the same routes), so acting happens in place. The
+// game layer: the today meter in the street header (one pip per decision, kept
+// for the day in this browser), a row that clears away (a CSS class, then the
+// redraw), a cleared floor that lights its windows and shows a tick in the
+// drawing, and the toast after every act.
 
 (function () {
   'use strict';
@@ -70,6 +80,11 @@
   var data = { docket: null, goals: [], rollups: [], earnings: null, loaded: false, tasks: {}, room: null, constitution: null };
   var card = { cv: null, form: null, error: '', busy: false, fresh: null, answer: null };
   var view = { open: null, opener: null, model: null, scale: 1, mode: null, inside: null, insideModel: null };
+  // the desk's own state: rows you acted on this visit, what you did per floor,
+  // the floors you cleared, the row whose facts or chips are open
+  var desk = { done: {}, mine: {}, cleared: {}, open: null, ask: null, busy: false, roomAsked: false, model: null };
+  var TODAY_KEY = 'gov-desk-today';
+  var today = { day: '', n: 0 };
 
   // ---------- light / dark ----------
   var chosen = null;
@@ -343,6 +358,7 @@
     var eveLine = $('streetEveningLine');
     if (eveLine) eveLine.textContent = m.eveningLine;
 
+    drawToday();
     $('hudNeeds').textContent = m.hud.needs;
     $('hudMoving').textContent = m.hud.moving;
     $('hudShare').textContent = m.hud.share;
@@ -392,7 +408,18 @@
 
   function drawBuilding(mode) {
     var st = view.inside;
-    var bv = I.buildingModel({ key: st.key, docket: data.docket, goals: data.goals, mode: mode, now: Date.now(), floor: st.floor, drawer: st.drawer, picks: st.picks });
+    var D = window.GovDesk;
+    // a building opens on the floor that needs you first (the desk's work)
+    var startFloor = st.floor == null && D && data.docket ? D.firstNeeds(st.key, data.docket) : null;
+    var cleared = [];
+    Object.keys(desk.cleared).forEach(function (k) { var p = k.split(':'); if (p[0] === st.key) cleared.push(Number(p[1])); });
+    var bv = I.buildingModel({ key: st.key, docket: data.docket, goals: data.goals, mode: mode, now: Date.now(), floor: st.floor == null ? startFloor : st.floor, drawer: st.drawer, picks: st.picks, cleared: cleared });
+    // a sitting's ballot is read once, so its row can vote in place
+    var C = window.GovMatterCard;
+    if (!desk.roomAsked && !data.room && C && data.docket && data.docket.matters.some(function (x) { return x && x.building === st.key && C.needsRoom(x); })) {
+      desk.roomAsked = true;
+      loadRoom().then(function () { if (view.inside) draw(); });
+    }
     view.insideModel = bv;
     setText('insideKicker', bv.kicker);
     show('insidePanel', true); show('insideDHead', false); show('insideLegend', false);
@@ -481,7 +508,7 @@
     // the chosen floor: two blocks that take turns, so the block re-enters on every pick
     var on = $(bv.flipA ? 'insideOpenA' : 'insideOpenB'), off = $(bv.flipA ? 'insideOpenB' : 'insideOpenA');
     if (off) { off.hidden = true; clear(off); }
-    if (on) { on.hidden = false; fillOpen(on, bv); }
+    if (on) { on.hidden = false; fillDesk(on, bv); }
     setText('insideOnFile', bv.onFile);
     var drawers = $('insideDrawers'); clear(drawers);
     bv.drawers.forEach(function (dw) {
@@ -505,28 +532,201 @@
     });
   }
 
-  function fillOpen(el, bv) {
+  // ---------- the floor desk (task 1004558) ----------
+  function icon(d, f, size) {
+    var svg = svgEl('svg');
+    svg.setAttribute('width', String(size)); svg.setAttribute('height', String(size)); svg.setAttribute('viewBox', '0 0 24 24'); svg.setAttribute('aria-hidden', 'true');
+    var a = svgEl('path'); a.setAttribute('d', d || '');
+    svg.appendChild(a);
+    if (f != null) { var b = svgEl('path'); b.setAttribute('d', f || ''); svg.appendChild(b); }
+    return svg;
+  }
+  function chipBtn(cls, text, onClick) {
+    var b = node('button', 'desk-chip ' + cls, text);
+    b.setAttribute('type', 'button');
+    if (desk.busy) b.setAttribute('disabled', '');
+    b.addEventListener('click', onClick);
+    return b;
+  }
+  function fillDesk(el, bv) {
     clear(el);
+    var D = window.GovDesk, st = view.inside;
+    if (!D || !st) return;
+    var k = st.key + ':' + bv.selFloor;
+    var dm = D.deskModel({ key: st.key, floor: bv.selFloor, docket: data.docket, goals: (data.goals || []).filter(function (g) { return g && g.status === 'open'; }), now: Date.now(), room: data.room, constitution: data.constitution, done: desk.done, mine: desk.mine[k] || [], cleared: !!desk.cleared[k], today: today.n, sym: bv.sym });
+    desk.model = dm;
+    el.className = 'inside-open desk' + (dm.quiet ? ' desk--quiet' : '');
+    el.setAttribute('data-desk', dm.key);
+    // the header: the floor's sign, its name, its status
     var head = node('div', 'inside-open__head');
     var plate = node('span', 'inside-plate');
-    var svg = svgEl('svg');
-    svg.setAttribute('width', '40'); svg.setAttribute('height', '40'); svg.setAttribute('viewBox', '0 0 24 24'); svg.setAttribute('aria-hidden', 'true');
-    var a = svgEl('path'); a.setAttribute('d', bv.sym.d || '');
-    var b = svgEl('path'); b.setAttribute('d', bv.sym.f || '');
-    svg.appendChild(a); svg.appendChild(b);
-    plate.appendChild(svg);
+    plate.appendChild(icon(bv.sym.d, bv.sym.f, 34));
     head.appendChild(plate);
     var words = node('div', 'inside-open__words');
-    words.appendChild(node('span', 'inside-open__kicker', bv.openKicker));
-    words.appendChild(node('h3', 'inside-open__title', bv.openTitle));
+    words.appendChild(node('span', 'inside-open__kicker', 'floor ' + (bv.selFloor + 1)));
+    words.appendChild(node('h3', 'inside-open__title', dm.name));
+    words.appendChild(node('span', 'desk-status' + (dm.hot ? ' desk-status--hot' : ''), dm.status));
     head.appendChild(words);
     el.appendChild(head);
-    bv.openLines.forEach(function (l) {
-      var row = node('div', 'inside-line');
-      row.appendChild(node('span', '', l.text));
-      row.appendChild(node('span', 'inside-line__meta', l.meta));
-      el.appendChild(row);
+    // up to three tiles, none of them a zero
+    if (dm.tiles.length) {
+      var tiles = node('div', 'desk-tiles');
+      dm.tiles.forEach(function (t) {
+        var tl = node('div', 'desk-tile');
+        tl.appendChild(node('span', 'desk-tile__v', t.v));
+        tl.appendChild(node('span', 'desk-tile__l', t.l));
+        tiles.appendChild(tl);
+      });
+      el.appendChild(tiles);
+    }
+    if (dm.quiet) {
+      // one line, lit: never an empty list
+      var q = node('div', 'desk-quiet' + (dm.cleared ? ' desk-quiet--cleared' : ''));
+      var tick = icon('M7.5 12.2l3 3 6-6.5', null, 44);
+      tick.setAttribute('class', 'desk-quiet__tick');
+      var ring = svgEl('circle'); ring.setAttribute('cx', '12'); ring.setAttribute('cy', '12'); ring.setAttribute('r', '9.5');
+      tick.appendChild(ring);
+      q.appendChild(tick);
+      q.appendChild(node('span', 'desk-quiet__line', dm.clearLine));
+      q.appendChild(node('span', 'desk-quiet__sub', dm.clearSub));
+      el.appendChild(q);
+    } else {
+      var list = node('div', 'desk-rows');
+      dm.rows.forEach(function (r) { list.appendChild(deskRow(r)); });
+      el.appendChild(list);
+    }
+    // the record line: what you just did here, then what this building closed
+    var rec = node('div', 'desk-record');
+    rec.appendChild(node('span', 'desk-record__label', 'record'));
+    if (!dm.record.length) rec.appendChild(node('span', 'desk-record__item', 'nothing yet'));
+    dm.record.forEach(function (x, i) { rec.appendChild(node('span', 'desk-record__item' + (x.mine ? ' desk-record__item--mine' : '') + (x.mine && i === 0 ? ' desk-pop' : ''), x.text)); });
+    el.appendChild(rec);
+  }
+  function deskRow(r) {
+    var row = node('div', 'desk-row' + (r.needs ? ' desk-row--needs' : ''));
+    row.setAttribute('data-row', r.key);
+    var main = node('div', 'desk-row__main');
+    main.appendChild(node('span', 'desk-ini', r.ini));
+    var name = node('button', 'desk-name');
+    name.setAttribute('type', 'button');
+    name.setAttribute('aria-expanded', desk.open === r.key ? 'true' : 'false');
+    name.setAttribute('data-matter', r.matter);
+    name.appendChild(node('span', 'desk-name__t', r.name));
+    name.appendChild(node('span', 'desk-name__f', r.fact));
+    name.addEventListener('click', function () { desk.open = desk.open === r.key ? null : r.key; desk.ask = null; draw(); focusRow(r.key, 'name'); });
+    main.appendChild(name);
+    var acts = node('span', 'desk-acts');
+    if (r.wait) acts.appendChild(node('span', 'desk-wait', r.wait));
+    // the primary button sits rightmost, as on the board
+    r.actions.slice().reverse().forEach(function (a) {
+      acts.appendChild(chipBtn('desk-chip--' + a.tone, a.label, function () {
+        if (a.go) { window.location.href = a.go; return; }
+        if (a.ask) { desk.ask = desk.ask === r.key ? null : r.key; desk.open = null; draw(); focusRow(r.key, 'chip'); return; }
+        deskAct(r, a.key, {});
+      }));
     });
+    main.appendChild(acts);
+    row.appendChild(main);
+    if (desk.open === r.key) {
+      var facts = node('div', 'desk-facts');
+      r.facts.forEach(function (f) { facts.appendChild(node('span', 'desk-fact', f)); });
+      row.appendChild(facts);
+    }
+    if (desk.ask === r.key && r.chips) {
+      var chips = node('div', 'desk-choices');
+      chips.appendChild(node('span', 'desk-choices__ask', r.chips.ask));
+      r.chips.options.forEach(function (c) { chips.appendChild(chipBtn('desk-chip--choice', c.label, function () { deskAct(r, r.chips.for, c.input); })); });
+      row.appendChild(chips);
+    }
+    return row;
+  }
+  function deskRowsEl() {
+    var st = view.insideModel;
+    var on = $(st && st.flipA ? 'insideOpenA' : 'insideOpenB');
+    var kids = on ? on.children : [];
+    for (var i = 0; i < kids.length; i++) if (/\bdesk-rows\b/.test(kids[i].className)) return kids[i];
+    return null;
+  }
+  function focusRow(key, what) {
+    var list = deskRowsEl();
+    var rows = list ? list.children : [];
+    for (var i = 0; i < rows.length; i++) {
+      if (rows[i].getAttribute('data-row') !== key) continue;
+      var main = rows[i].children[0];
+      var target = what === 'chip' && rows[i].children[1] ? rows[i].children[1].children[1] : main && main.children[1];
+      if (target && target.focus) target.focus();
+      return;
+    }
+  }
+  // The row clears away (a class the stylesheet animates), then the desk redraws without it.
+  function clearRow(key, then) {
+    var list = deskRowsEl();
+    var rows = list ? list.children : [];
+    for (var i = 0; i < rows.length; i++) if (rows[i].getAttribute('data-row') === key) rows[i].className += ' desk-row--gone';
+    if (typeof setTimeout !== 'function') return then();
+    setTimeout(then, 320);
+  }
+  var DONE_WORDS = { for: 'voted yes', object: 'voted no', fine: 'let in', refuse: 'turned away', release: 'released', hold: 'held' };
+  // One act from a row: checked, sent through the card's own request (the
+  // server's permission checks decide), then the row clears, the floor counts
+  // it, the meter takes a pip and the toast says what happened. An act that
+  // records nothing (hold) clears the row for this visit and says it still waits.
+  function deskAct(r, key, input) {
+    var C = window.GovMatterCard, st = view.inside;
+    if (!C || !st || !r.card || desk.busy) return Promise.resolve(false);
+    var refused = C.check(r.card, key, input);
+    if (refused) { say(refused); return Promise.resolve(false); }
+    var k = st.key + ':' + (view.insideModel ? view.insideModel.selFloor : 0);
+    var req = C.request(r.card, key, input);
+    var settle = function (body) {
+      var a = C.answer(r.card, key, body);
+      desk.mine[k] = [DONE_WORDS[key] + ' ' + r.name].concat(desk.mine[k] || []);
+      desk.done[r.matter] = true;
+      desk.open = null; desk.ask = null;
+      if (desk.model && !desk.model.rows.some(function (x) { return x.matter !== r.matter; })) desk.cleared[k] = true;
+      if (st.floor == null && view.insideModel) st.floor = view.insideModel.selFloor;
+      bumpToday();
+      if (a.building && a.kind) card.answer = { building: a.building, matter: r.matter, kind: a.kind, at: Date.now() };
+      say(a.toast || 'Done.');
+    };
+    if (!req) return new Promise(function (res) { clearRow(r.key, function () { settle({}); draw(); res(true); }); });
+    desk.busy = true;
+    draw();
+    return send(req).then(function (out) {
+      desk.busy = false;
+      if (!out.ok) { say(C.refusal(out.status, out.body)); draw(); return false; }
+      return new Promise(function (res) {
+        clearRow(r.key, function () {
+          settle(out.body);
+          draw();
+          data.room = null; desk.roomAsked = false;
+          load().then(function () { res(true); });
+        });
+      });
+    });
+  }
+  // the today meter: decisions made today, kept for the day in this browser
+  function dayOf() { return new Date().toISOString().slice(0, 10); }
+  function readToday() {
+    var t = { day: dayOf(), n: 0 };
+    try {
+      var raw = window.localStorage ? JSON.parse(window.localStorage.getItem(TODAY_KEY) || 'null') : null;
+      if (raw && raw.day === t.day && isFinite(raw.n)) t.n = Math.max(0, Math.floor(raw.n));
+    } catch (e) { /* storage blocked: the meter starts at zero */ }
+    return t;
+  }
+  function bumpToday() {
+    if (today.day !== dayOf()) today = { day: dayOf(), n: 0 };
+    today.n += 1;
+    try { if (window.localStorage) window.localStorage.setItem(TODAY_KEY, JSON.stringify(today)); } catch (e) { /* the count still shows for this visit */ }
+  }
+  function drawToday() {
+    var D = window.GovDesk, pipsEl = $('streetTodayPips');
+    if (!D || !pipsEl) return;
+    var t = D.todayPips(today.n);
+    clear(pipsEl);
+    t.pips.forEach(function (p) { pipsEl.appendChild(node('span', 'street-today__pip' + (p.on ? ' street-today__pip--on' : '') + (p.fresh ? ' desk-pop' : ''))); });
+    setText('streetTodayN', t.text);
   }
 
   function pickFloor(i) {
@@ -534,6 +734,7 @@
     if (!st) return;
     st.floor = i;
     st.picks = (st.picks || 0) + 1;
+    desk.open = null; desk.ask = null;
     draw();
     var floors = $('insideFloors');
     var kids = (floors && floors.children) || [];
@@ -929,11 +1130,12 @@
     if (win) win.addEventListener('scroll', placeCard);
     if (media && media.addEventListener) media.addEventListener('change', function () { if (!storedTheme()) { applyTheme(); draw(); } });
     painted = applyTheme();
+    today = readToday();
     draw();
     watchShellTheme();
     return load();
   }
 
-  window.GovStreetPage = { boot: boot, draw: draw, load: load, fit: fit, openCard: openCard, closeCard: closeCard, actOn: actOn, pickFloor: pickFloor, goStreet: goStreet, amend: amend, fileDraft: fileDraft, FEEDS: FEEDS, THEME_KEY: THEME_KEY };
+  window.GovStreetPage = { boot: boot, draw: draw, load: load, fit: fit, openCard: openCard, closeCard: closeCard, actOn: actOn, pickFloor: pickFloor, deskAct: deskAct, goStreet: goStreet, amend: amend, fileDraft: fileDraft, FEEDS: FEEDS, THEME_KEY: THEME_KEY };
   window.GovStreetPage.ready = boot();
 }());

package/modules/hall-ui/public/street.states.json

@@ -373,6 +373,89 @@
           "#insideLegend"
         ]
       }
+    },
+    "desk": {
+      "auth": true,
+      "_": "The floor desk (task 1004558): inside People the building opens on the floor that needs you, and the desk shows its sign, name and orange status, the tiles, the to-do rows with their two buttons, and the record line; the street header carries the today meter.",
+      "url": "/builders/street#building=people",
+      "actions": [
+        [
+          "wait",
+          900
+        ],
+        [
+          "clickIfVisible",
+          "[data-craft-close]"
+        ],
+        [
+          "wait",
+          300
+        ]
+      ],
+      "expect": {
+        "visible": [
+          ".desk-rows",
+          ".desk-status--hot",
+          ".desk-record",
+          "#streetTodayPips"
+        ]
+      }
+    },
+    "desk-facts": {
+      "auth": true,
+      "_": "A row name tapped: at most three facts open in place under it.",
+      "url": "/builders/street#building=people",
+      "actions": [
+        [
+          "wait",
+          900
+        ],
+        [
+          "clickIfVisible",
+          "[data-craft-close]"
+        ],
+        [
+          "wait",
+          300
+        ],
+        [
+          "click",
+          ".desk-name"
+        ],
+        [
+          "wait",
+          500
+        ]
+      ],
+      "expect": {
+        "visible": [
+          ".desk-facts"
+        ]
+      }
+    },
+    "desk-quiet": {
+      "auth": true,
+      "_": "A quiet floor: one line with the lights on, never an empty list.",
+      "url": "/builders/street#building=review",
+      "actions": [
+        [
+          "wait",
+          900
+        ],
+        [
+          "clickIfVisible",
+          "[data-craft-close]"
+        ],
+        [
+          "wait",
+          300
+        ]
+      ],
+      "expect": {
+        "visible": [
+          ".desk-quiet"
+        ]
+      }
     }
   },
   "reducedMotion": {

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.32",
+  "version": "1.21.34",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.21.32",
+      "version": "1.21.34",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.32",
+  "version": "1.21.34",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -8948,5 +8948,21 @@
       "id": "1004551",
       "text": "An Archon can star a version on the Roadmap as the project's focus; it persists across reloads, and everyone else sees the star read-only (the server refuses non-Archons)."
     }
+  ],
+  "1.21.33": [
+    {
+      "id": "1003797",
+      "text": "Senior builders can now take a module out of the store, with a reason. Nobody can newly install or update it, but anyone who already has it keeps it working and is told no more updates will come."
+    },
+    {
+      "id": "1004494",
+      "text": "The look for each craft mode is decided. Artistry, Ideating and Governing each get their own colour (moonlight, star gold, city blue) on the mode switch, the tab you are on and the top bar, the mode's name beside the page titl"
+    }
+  ],
+  "1.21.34": [
+    {
+      "id": "1004558",
+      "text": "Inside every building in the governor city, the floor you pick is now a desk you can act from, built from the new floor desks design. It shows the floor's name and how many things wait on you, up to three short numbers, and on"
+    }
   ]
 }

package/scripts/gds/module.js

@@ -433,7 +433,7 @@ function clip(s, n) {
 
 // Pure renderer — every input arrives as a parameter (the tests pass catalog
 // rows straight in), so it touches no disk and no config.
-function formatCatalog(rows, { catalogOnly = false, query = '', core = null } = {}) {
+function formatCatalog(rows, { catalogOnly = false, query = '', core = null, delisted = new Set() } = {}) {
   const scoped = catalogOnly ? catalog.catalogRows(rows) : rows;
   const shown = catalog.searchCatalog(scoped, query);
   const counts = catalog.summarize(rows);
@@ -458,11 +458,14 @@ function formatCatalog(rows, { catalogOnly = false, query = '', core = null } =
     // An inferred credit is marked so it never reads as something the author
     // typed — the catalog's whole job is honest attribution (ADR 0107 §2).
     const suffix = r.credit.inferred ? '*' : '';
-    const upkeep = (r.maintenance && r.maintenance.status) || 'undeclared';
+    const upkeep = ((r.maintenance && r.maintenance.status) || 'undeclared') + (delisted.has(r.key) ? ' · DELISTED' : '');
     out.push(`  ${pad(mark, 5)}${pad(clip(r.key, 19), 20)}${pad(clip(r.version || '—', 8), 9)}${pad(r.source, 10)}${pad(clip((r.credit.author || '—') + suffix, 19), 20)}${pad(clip((r.credit.origin || '—') + suffix, 25), 26)}${pad(clip(r.license || '—', 11), 12)}${upkeep}`);
   }
   out.push('');
   out.push('  [x] enabled here · [ ] available, not enabled');
+  if (shown.some((r) => delisted.has(r.key))) {
+    out.push('  DELISTED = taken out of the store: your copy keeps working, but no more versions will come.');
+  }
   if (shown.some((r) => r.credit.inferred)) {
     out.push(`  * credit not declared in module.json — shown as the platform (${catalog.CORE_PROJECT_NAME}), which ships it.`);
   }
@@ -470,7 +473,18 @@ function formatCatalog(rows, { catalogOnly = false, query = '', core = null } =
   return out.join('\n');
 }
 
-function cmdList(args, { log = console.log, errlog = console.error, gather = gatherCatalog } = {}) {
+// Which installed store modules the store has delisted (task 1003797). Only modules
+// built into this instance's tree can be store installs, so a core checkout asks
+// nothing. Fail-soft like the upgrade check: offline, or no session, lists as before.
+async function gatherDelisted(rows, { checkStore = gatherUpdates } = {}) {
+  const held = rows.filter((r) => r.source === 'instance');
+  if (!held.length) return new Set();
+  const found = await checkStore(held);
+  if (!found.checked) return new Set();
+  return new Set(Object.keys(found.latest).filter((k) => found.latest[k] && found.latest[k].status === 'delisted'));
+}
+
+async function cmdList(args, { log = console.log, errlog = console.error, gather = gatherCatalog, checkStore = gatherUpdates } = {}) {
   const catalogOnly = args.includes('--catalog');
   const json = args.includes('--json');
   const sIdx = args.indexOf('--search');
@@ -484,14 +498,16 @@ function cmdList(args, { log = console.log, errlog = console.error, gather = gat
   try { data = gather(); }
   catch (e) { errlog(`bongos module list: ${e.message}`); return 1; }
 
+  const delisted = await gatherDelisted(data.rows, { checkStore });
+
   if (json) {
     const scoped = catalogOnly ? catalog.catalogRows(data.rows) : data.rows;
-    const modules = catalog.searchCatalog(scoped, query);
+    const modules = catalog.searchCatalog(scoped, query).map((m) => ({ ...m, store_delisted: delisted.has(m.key) }));
     log(JSON.stringify({ core: data.core, summary: catalog.summarize(data.rows), modules }, null, 2));
     return 0;
   }
 
-  log(formatCatalog(data.rows, { catalogOnly, query, core: data.core }));
+  log(formatCatalog(data.rows, { catalogOnly, query, core: data.core, delisted }));
   for (const s of data.skipped) {
     errlog(`  ! ${s.key}: not listed — ${s.reason}`);
   }

package/src/bongos/module-store.js

@@ -232,6 +232,36 @@ async function latestVersions(keys, { db } = {}) {
   return out;
 }
 
+// Delist a module (task 1003797, ADR 0338 D2): it leaves the catalog, takes no new
+// acquisitions or versions, and serves no further downloads — every read above
+// already refuses on status 'delisted', so this one UPDATE is the whole act. It
+// touches nothing else: no entitlement is revoked, no installed copy is reached,
+// and no score row is written (a delist is not a score, ADR 0359). One-way here;
+// there is no relist route yet.
+// Returns { ok: true, module } or { ok: false, status, code, message }.
+async function delistModule(key, { db } = {}) {
+  const pool = db || require('./pool').pool;
+  const { rows: [mod] } = await pool.query(
+    `UPDATE store_modules SET status = 'delisted', delisted_at = now()
+      WHERE module_key = $1 AND status = 'listed'
+      RETURNING module_key, title, status, delisted_at`, [key]);
+  if (mod) return { ok: true, module: mod };
+  const { rows: [have] } = await pool.query(
+    'SELECT module_key, status, delisted_at FROM store_modules WHERE module_key = $1', [key]);
+  if (!have) return { ok: false, status: 404, code: 'module_not_found', message: `The store has no module "${key}".` };
+  return { ok: false, status: 409, code: 'already_delisted', message: `"${key}" is already delisted.` };
+}
+
+// Which of these module keys the store has delisted, as a Set — so the hall's
+// Modules tab can mark an installed store module that will get no more versions.
+async function delistedKeySet(keys, { db } = {}) {
+  if (!keys.length) return new Set();
+  const pool = db || require('./pool').pool;
+  const { rows } = await pool.query(
+    "SELECT module_key FROM store_modules WHERE module_key = ANY($1) AND status = 'delisted'", [keys]);
+  return new Set(rows.map((r) => r.module_key));
+}
+
 // The tarball on disk for a version row. artifact_path is relative to the store dir
 // (relativeArtifactPath), and artifactPath() re-validates key + version, so a row
 // can never point a read outside the store.
@@ -246,4 +276,5 @@ function versionArtifactFile(row, { dir = storeDir() } = {}) {
 module.exports = {
   stageArtifact, commitArtifact, removeArtifact, relativeArtifactPath, publishVersion,
   isFreePrice, resolveAcquirable, resolveReadable, publishedVersionSet, latestVersions, versionArtifactFile,
+  delistModule, delistedKeySet,
 };

package/src/bongos/route-rank-check.js

@@ -240,6 +240,9 @@ const EXPECTED_RANKS = {
   // Re-running a store version's assessment (task 1003796, ADR 0359) spends a Docs
   // grader call and re-opens the Security gate, so it is pinned to its own atom.
   'POST /store/modules/:key/versions/:version/reassess': 'perm:module.assessment.rerun',
+  // Delisting a store module (task 1003797, ADR 0338 D2) stops every new install of
+  // it for every instance, so it is pinned to its own atom.
+  'POST /store/modules/:key/delist': 'perm:module.delist',
 };
 
 // The authz-core route pins (ADR 0174). Paths and the gating atom were renamed

package/src/bongos/routes/modules.js

@@ -35,6 +35,9 @@
 //   GET  /store/modules/:key/versions/:version/howto
 //                               the HOWTO.md that version shipped with, as text for
 //                               the hall's how-to page (task 1004366, ADR 0347).
+//   POST /store/modules/:key/delist
+//                               Metic+ takes a module out of the store; holders
+//                               keep it (task 1003797, ADR 0338 D2).
 //
 // Read is open to any signed-in builder (same gate as the atlas/primer pages);
 // every write (enable/disable, submit) is metic+archon, same rank as
@@ -85,6 +88,7 @@ const { checkEntitlement, listEntitlements, grantEntitlement, recordAcquired } =
 const {
   stageArtifact, commitArtifact, removeArtifact, relativeArtifactPath, publishVersion,
   resolveAcquirable, resolveReadable, publishedVersionSet, latestVersions, versionArtifactFile,
+  delistModule, delistedKeySet,
 } = require('../module-store');
 const { KEY_RE } = require('../../module-loader/manifest-schema');
 const { parseVersion } = require('../../module-loader/semver');
@@ -204,6 +208,11 @@ module.exports = function buildModulesRouter() {
     let published = new Set();
     try { published = await publishedVersionSet(all.map((m) => m.key)); }
     catch (e) { log.warn({ err: e.message }, 'store versions unreadable for the modules list'); }
+    // Which installed store modules the store has delisted (task 1003797), so the row
+    // says it keeps working but gets no more versions (ADR 0338 D2). Same tolerance.
+    let delistedKeys = new Set();
+    try { delistedKeys = await delistedKeySet(all.filter((m) => m.source === 'instance').map((m) => m.key)); }
+    catch (e) { log.warn({ err: e.message }, 'store status unreadable for the modules list'); }
     for (const m of all) {
       m.enabled_source = sources[m.key] || 'default';
       m.override = byKey.has(m.key)
@@ -214,6 +223,7 @@ module.exports = function buildModulesRouter() {
       m.store_howto = m.source === 'instance' && m.version && published.has(`${m.key}@${m.version}`)
         ? `/builders/modules?howto=${encodeURIComponent(m.key)}&version=${encodeURIComponent(String(m.version))}`
         : null;
+      m.store_delisted = m.source === 'instance' && delistedKeys.has(m.key);
     }
     res.json({
       modules: all,
@@ -446,6 +456,31 @@ module.exports = function buildModulesRouter() {
       res.status(202).json({ ok: true, queued: true, module_key: key, version, version_id: r.version.id });
     }));
 
+  // POST /api/bongos/store/modules/:key/delist — a Metic+ person takes a module out
+  // of the store (task 1003797, ADR 0338 D2). It leaves the catalog, cannot be newly
+  // acquired, takes no new versions and serves no further downloads: every store
+  // read already refuses a delisted key, so this flips the one status. What it never
+  // does: revoke an entitlement, reach into an instance that already holds the
+  // module (that copy keeps working; `bongos upgrade` and the hall tell the holder
+  // no more versions will come), or touch a score (ADR 0359). A reason is required;
+  // the audit middleware records it with who asked. There is no relist route yet.
+  router.post('/store/modules/:key/delist', auth.requireBuilder, auth.requirePermission('module.delist'),
+    asyncHandler('POST /store/modules/:key/delist', async (req, res) => {
+      if (validateOrRespond(req, res, { reason: { type: 'string', maxLength: 2000 } })) return;
+      const { key } = req.params;
+      if (!KEY_RE.test(key)) {
+        return res.fail('bad_module_key', { status: 400, message: 'A module key is lowercase kebab-case.' });
+      }
+      const reason = String(req.body?.reason || '').trim();
+      if (!reason) {
+        return res.fail('reason_required', { status: 400, message: 'Say why this module is leaving the store, in reason. People who already hold it keep it.' });
+      }
+      const r = await delistModule(key);
+      if (!r.ok) return res.fail(r.code, { status: r.status, message: r.message });
+      log.info({ key, builderId: req.builder.id }, `${key} delisted from the store`);
+      res.json({ ok: true, module_key: key, status: r.module.status, delisted_at: r.module.delisted_at });
+    }));
+
   // GET /api/bongos/store/entitlements and /store/modules/:key/entitlement — the
   // read side of the entitlement record (task 1003813, ADR 0338 D1). Own-scoped
   // like /me/sessions: the holder is ALWAYS the caller (holder_kind 'builder',

package/src/module-api.js

@@ -75,7 +75,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // MAJOR (see allowBoxScope below): passes the request through untouched.
 function deprecatedNoopMiddleware(_req, _res, next) { next(); }
 
-const CORE_VERSION = '1.21.32'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.21.34'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('discord'); log.info('mounted');

package/tests/hall_catalog_world.mjs

@@ -58,7 +58,7 @@ test('modules: the row is the oversight row — title with the mono key, clamped
   assert.match(js, /<span class="ov-row__title">\$\{escapeHtml\(m\.title \|\| m\.key\)\}<span class="ov-mono">\$\{escapeHtml\(m\.key\)\}<\/span>/, 'the key rides inside the title in mono');
   assert.match(js, /class="ov-row__sub mod-row__desc"/, 'the description is the sub line');
   assert.match(js, /<details class="mod-more"/, 'a details disclosure opens the rest');
-  assert.match(js, /<div class="ov-row__facts">\$\{provenancePill\(m\)\}\$\{attributionFacts\(m\)\}\$\{upkeepFact\(m\)\}\$\{howtoFact\(m\)\}<\/div>/, 'provenance, credit, upkeep and (for a store version, task 1004366) the how-to link are the facts line');
+  assert.match(js, /<div class="ov-row__facts">\$\{provenancePill\(m\)\}\$\{attributionFacts\(m\)\}\$\{upkeepFact\(m\)\}\$\{howtoFact\(m\)\}\$\{delistedFact\(m\)\}<\/div>/, 'provenance, credit, upkeep, (for a store version, task 1004366) the how-to link and (task 1003797) the delisted pill are the facts line');
   assert.match(js, /<div class="ov-row__right mod-row__right">\$\{rightHtml\(m\)\}<\/div>/, 'the right column is one function');
   const css = read('modules.css');
   assert.match(css, /\.mod-row__desc \{[^}]*-webkit-line-clamp: 2/, 'the description clamps to two lines');