@bongos/core 1.21.52 → 1.21.54

package/docs/copy-registry.json

@@ -3,17 +3,17 @@
   "generator": "scripts/gds/copy-inventory.js",
   "goal": 1000074,
   "counts": {
-    "strings": 2487,
-    "unique_ids": 2134,
-    "certain": 2487,
+    "strings": 2499,
+    "unique_ids": 2143,
+    "certain": 2499,
     "heuristic": 0,
-    "duplicate_ids": 223
+    "duplicate_ids": 225
   },
   "surfaces": {
     "builders-hall": {
       "at": "modules/hall-ui/public",
-      "files": 133,
-      "strings": 1805
+      "files": 134,
+      "strings": 1817
     },
     "status-dashboard": {
       "at": "modules/status-ui/public",
@@ -613,6 +613,17 @@
         "modules/hall-ui/public/goals-render.js:1356"
       ]
     },
+    {
+      "id": "1edc39bc7120",
+      "surface": "builders-hall",
+      "text": "Turn into ideas",
+      "occurrences": 3,
+      "at": [
+        "modules/hall-ui/public/lightbulb.js:87",
+        "modules/hall-ui/public/lightbulb.js:163",
+        "modules/hall-ui/public/page-notes.js:107"
+      ]
+    },
     {
       "id": "0efa2f18bb6c",
       "surface": "builders-hall",
@@ -1368,6 +1379,16 @@
         "modules/hall-ui/public/profile.js:199"
       ]
     },
+    {
+      "id": "36c97d6094bf",
+      "surface": "builders-hall",
+      "text": "None yet. Yours will be the first.",
+      "occurrences": 2,
+      "at": [
+        "modules/hall-ui/public/lightbulb.js:94",
+        "modules/hall-ui/public/page-notes.js:120"
+      ]
+    },
     {
       "id": "8226c979db4d",
       "surface": "builders-hall",
@@ -3323,7 +3344,7 @@
       "surface": "builders-hall",
       "text": "Artists start on Artistry.",
       "file": "modules/hall-ui/public/craft-mode.js",
-      "line": 352,
+      "line": 358,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -3350,7 +3371,7 @@
       "surface": "builders-hall",
       "text": "Ask me again next session",
       "file": "modules/hall-ui/public/craft-mode.js",
-      "line": 351,
+      "line": 357,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -3701,7 +3722,7 @@
       "surface": "builders-hall",
       "text": "Builders hall · this session",
       "file": "modules/hall-ui/public/craft-mode.js",
-      "line": 346,
+      "line": 352,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -4115,7 +4136,7 @@
       "surface": "builders-hall",
       "text": "Choose your mode",
       "file": "modules/hall-ui/public/craft-mode.js",
-      "line": 265,
+      "line": 271,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -4277,7 +4298,7 @@
       "surface": "builders-hall",
       "text": "Close without choosing",
       "file": "modules/hall-ui/public/craft-mode.js",
-      "line": 344,
+      "line": 350,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -5658,6 +5679,15 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "3a6916fa79d4",
+      "surface": "builders-hall",
+      "text": "Each one links back to this page.",
+      "file": "modules/hall-ui/public/lightbulb.js",
+      "line": 107,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "77b7e3abfb07",
       "surface": "builders-hall",
@@ -7116,6 +7146,15 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "e1a026cdbccf",
+      "surface": "builders-hall",
+      "text": "Ideas from this page",
+      "file": "modules/hall-ui/public/lightbulb.js",
+      "line": 89,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "379b20d548ad",
       "surface": "builders-hall",
@@ -8817,6 +8856,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "36c97d6094bf",
+      "surface": "builders-hall",
+      "text": "None yet. Yours will be the first.",
+      "file": "modules/hall-ui/public/lightbulb.js",
+      "line": 94,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "36c97d6094bf",
       "surface": "builders-hall",
@@ -9695,7 +9743,7 @@
       "surface": "builders-hall",
       "text": "Pick one. You can switch any time from the top bar.",
       "file": "modules/hall-ui/public/craft-mode.js",
-      "line": 348,
+      "line": 354,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -11697,6 +11745,15 @@
       "origin": "js-notice",
       "confidence": "certain"
     },
+    {
+      "id": "ccca0c49fdc4",
+      "surface": "builders-hall",
+      "text": "Splitting into ideas…",
+      "file": "modules/hall-ui/public/lightbulb.js",
+      "line": 150,
+      "origin": "js-text-assign",
+      "confidence": "certain"
+    },
     {
       "id": "aee9d47c6b99",
       "surface": "builders-hall",
@@ -12408,6 +12465,15 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "784618f83a42",
+      "surface": "builders-hall",
+      "text": "The earlier ideas could not be loaded. Reload the page to try again.",
+      "file": "modules/hall-ui/public/lightbulb.js",
+      "line": 122,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "ffaa4df90f66",
       "surface": "builders-hall",
@@ -13605,6 +13671,24 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "1edc39bc7120",
+      "surface": "builders-hall",
+      "text": "Turn into ideas",
+      "file": "modules/hall-ui/public/lightbulb.js",
+      "line": 87,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
+    {
+      "id": "1edc39bc7120",
+      "surface": "builders-hall",
+      "text": "Turn into ideas",
+      "file": "modules/hall-ui/public/lightbulb.js",
+      "line": 163,
+      "origin": "js-text-assign",
+      "confidence": "certain"
+    },
     {
       "id": "1edc39bc7120",
       "surface": "builders-hall",
@@ -14060,7 +14144,7 @@
       "surface": "builders-hall",
       "text": "What are you doing now?",
       "file": "modules/hall-ui/public/craft-mode.js",
-      "line": 347,
+      "line": 353,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -14073,6 +14157,15 @@
       "origin": "html-attr:placeholder",
       "confidence": "certain"
     },
+    {
+      "id": "c077272746d4",
+      "surface": "builders-hall",
+      "text": "What could this page become?",
+      "file": "modules/hall-ui/public/lightbulb.js",
+      "line": 74,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "f3d93a872a38",
       "surface": "builders-hall",
@@ -14352,6 +14445,15 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "87acf1c05027",
+      "surface": "builders-hall",
+      "text": "When you submit, an AI splits this into separate ideas, filed under your name and linked to this page. The text itself is not kept.",
+      "file": "modules/hall-ui/public/lightbulb.js",
+      "line": 86,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "8320f40edc52",
       "surface": "builders-hall",
@@ -14613,6 +14715,15 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "08f28ecf123f",
+      "surface": "builders-hall",
+      "text": "Write more",
+      "file": "modules/hall-ui/public/lightbulb.js",
+      "line": 108,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "47f61e576454",
       "surface": "builders-hall",
@@ -14622,6 +14733,15 @@
       "origin": "js-text-assign",
       "confidence": "certain"
     },
+    {
+      "id": "da6de9f79bcc",
+      "surface": "builders-hall",
+      "text": "Write what this page made you think of. Each separate point becomes its own idea.",
+      "file": "modules/hall-ui/public/lightbulb.js",
+      "line": 83,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "a9e68066f26c",
       "surface": "builders-hall",
@@ -14847,6 +14967,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "e7df77318625",
+      "surface": "builders-hall",
+      "text": "Your ideas",
+      "file": "modules/hall-ui/public/lightbulb.js",
+      "line": 82,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "a47f15b6a33c",
       "surface": "builders-hall",

package/docs/file-map.md

@@ -358,6 +358,7 @@ tests/
 ├── terms_acceptance.mjs        ← (task 1002913, goal 1000045, ADR 0213): the platform T&C acceptance record. Proves the four properties that make it evidence rather than a claim — the /terms page carries the cross-project consent ADR 0141 §4 deferred to it and it is apex-only; acceptance is written ONLY by the hub's own /sso/authorize (driven over the real router with an attacker-controlled query string, so a forged timestamp/version/activate flag reaches nothing); it is written ONCE (the fake pool interprets the upsert's own column assignments, so COALESCE is executed, not string-matched, and an assignment shape it cannot read throws instead of reading as "unchanged"); and consent is two columns in the shared predicate, so an account the hub witnessed before the terms existed publishes nothing. Plus the projection rule — every read whose row a JS twin judges must select both consent columns, or the twin denies everyone silently. DB-free `unit` lane, asserts its own lane membership.
 ├── applicant_profile_boundary.mjs ← (task 1002972, goal 1000045 C4, privacy spec D7, ADR 0241): THE D7 BOUNDARY proof for the applicant view a reviewer sees. Whitelists read from the MODULES’ own exports — the private branch against `recruiter-sliver`’s `SLIVER_KEYS`/`SLIVER_KEYS_HIDDEN`, the public branch against the public-page payload’s key list — so a third shape (the “new disclosure class” D7 forbids) reds this file. Pins THE CONSENT SWAP in both directions on the same account: a private builder who never opted into recruiting gets an applicant view and gets `null` from `getRecruiterSliver`, so a refactor routing the port through the recruiter sliver cannot pass quietly. `hide_stats` beats the application in both branches; provisional and terms-never-accepted disclose nothing; planted sentinels asserted absent from the whole body with the avatar-embedded `github_id` pinned as the one honest exception. Plus the federated gate (ADR 0205): no echo → 404 and NO account row read (asserted on the statement log), the witness matched against the AUTHENTICATED client, an out-of-window echo stops working, and `Cache-Control: no-store`. Real router + real HTTP over in-memory tables filtered by each statement’s own WHERE clause. DB-free `unit` lane, asserted in the file itself.
 ├── recruiter_sliver_boundary.mjs ← (task 1002968, goal 1000045 C2/C5, privacy spec D3, ADR 0215): THE PRE-ACCEPT BOUNDARY proof for the D3 recruiter sliver. A WHITELIST over the module's own exported key list (a sixth key fails whether or not this file was told about it), planted improbable sentinels asserted absent from the WHOLE response body with two controls against vacuity, the ceiling assertion (the handle a recruiter is handed 404s at `GET /profiles/:handle`, with a 200 control) and the gate (both recruiting routes admit the same two audiences and refuse byte-identically). Real router + real HTTP over an in-memory table filtered by each statement's own WHERE clause. DB-free `unit` lane, asserted in the file itself.
+├── privacy_matrix.mjs            ← (task 1002973, goal 1000110, privacy spec D2/D3/D4): THE PRIVACY MATRIX as one table — a fixture account per D2 row (provisional, public shown, public hidden, private, private+discoverable, private+discoverable+hidden, opted out of recruiting) × every viewer (Anon, Builder, Recruiter, Self) × every cross-project surface that exists (`/profiles/:handle`, `/me/cross-project`, `/community/search`, `/community/leaderboard`, `/scouting`, `/scouting/:handle`), asserted against a literal transcription of the spec's cells; then the rules swept across EVERY recorded response (hidden numbers reach nobody but Self, private/provisional are absent, private+discoverable is named only by the sliver), the D3 key lists pinned, and an expired invite refused by the real `hasInvitedAccessRequest`. Real routers + real HTTP over in-memory tables filtered by each statement's own WHERE (boolean structure read, calibrated against the JS twins). The declined-invite row is task 1004444's. DB-free `unit` lane, asserted in the file itself.
 └── public_task_resolver.mjs      ← (#604): the public `/public/tasks/:id` projection — title/value_summary exposed only for shipped|confirmed; withheld for in-flight so unshipped/security task names can't leak.
 ```
 

package/docs/module-api-changelog.md

@@ -2931,5 +2931,9 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.21.50 with no explicit bump. run 37239909495. (task 1002620)
   1.21.52 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.21.51 with no explicit bump. run 37243572142. (task 1002620)
+  1.21.53 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.21.52 with no explicit bump. run 37244559329. (task 1002620)
+  1.21.54 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.21.53 with no explicit bump. run 37245549793. (task 1002620)
 ---------------------------------------------------------------------------
 ```