@bongos/core 1.21.74 → 1.21.76

package/docs/copy-registry.json

@@ -3,9 +3,9 @@
   "generator": "scripts/gds/copy-inventory.js",
   "goal": 1000074,
   "counts": {
-    "strings": 2604,
-    "unique_ids": 2211,
-    "certain": 2604,
+    "strings": 2607,
+    "unique_ids": 2214,
+    "certain": 2607,
     "heuristic": 0,
     "duplicate_ids": 231
   },
@@ -13,7 +13,7 @@
     "builders-hall": {
       "at": "modules/hall-ui/public",
       "files": 133,
-      "strings": 1836
+      "strings": 1839
     },
     "status-dashboard": {
       "at": "modules/status-ui/public",
@@ -652,7 +652,7 @@
       "at": [
         "modules/hall-ui/public/lightbulb.js:87",
         "modules/hall-ui/public/lightbulb.js:163",
-        "modules/hall-ui/public/page-notes.js:107"
+        "modules/hall-ui/public/page-notes.js:130"
       ]
     },
     {
@@ -1447,7 +1447,7 @@
       "occurrences": 2,
       "at": [
         "modules/hall-ui/public/lightbulb.js:94",
-        "modules/hall-ui/public/page-notes.js:120"
+        "modules/hall-ui/public/page-notes.js:143"
       ]
     },
     {
@@ -1536,8 +1536,8 @@
       "text": "Opening your doc…",
       "occurrences": 2,
       "at": [
-        "modules/hall-ui/public/page-notes.js:89",
-        "modules/hall-ui/public/page-notes.js:273"
+        "modules/hall-ui/public/page-notes.js:112",
+        "modules/hall-ui/public/page-notes.js:296"
       ]
     },
     {
@@ -1967,7 +1967,7 @@
       "occurrences": 2,
       "at": [
         "modules/hall-ui/public/studio.html:117",
-        "modules/hall-ui/public/studio.html:141"
+        "modules/hall-ui/public/studio.html:147"
       ]
     },
     {
@@ -2216,7 +2216,7 @@
       "text": "pick another",
       "occurrences": 2,
       "at": [
-        "modules/hall-ui/public/studio.js:682",
+        "modules/hall-ui/public/studio.js:693",
         "modules/hall-ui/public/tweak-editor.html:107"
       ]
     },
@@ -3120,7 +3120,7 @@
       "surface": "builders-hall",
       "text": "Add images",
       "file": "modules/hall-ui/public/page-notes.js",
-      "line": 97,
+      "line": 120,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -3444,7 +3444,7 @@
       "surface": "builders-hall",
       "text": "Artists start on Artistry.",
       "file": "modules/hall-ui/public/craft-mode.js",
-      "line": 426,
+      "line": 428,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -3489,7 +3489,7 @@
       "surface": "builders-hall",
       "text": "Ask me again next session",
       "file": "modules/hall-ui/public/craft-mode.js",
-      "line": 425,
+      "line": 427,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -3678,7 +3678,7 @@
       "surface": "builders-hall",
       "text": "Being split into ideas…",
       "file": "modules/hall-ui/public/page-notes.js",
-      "line": 137,
+      "line": 160,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -3840,7 +3840,7 @@
       "surface": "builders-hall",
       "text": "Builders hall · this session",
       "file": "modules/hall-ui/public/craft-mode.js",
-      "line": 420,
+      "line": 422,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -4254,7 +4254,7 @@
       "surface": "builders-hall",
       "text": "Choose your mode",
       "file": "modules/hall-ui/public/craft-mode.js",
-      "line": 339,
+      "line": 341,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -4416,7 +4416,7 @@
       "surface": "builders-hall",
       "text": "Close without choosing",
       "file": "modules/hall-ui/public/craft-mode.js",
-      "line": 418,
+      "line": 420,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -5874,7 +5874,7 @@
       "surface": "builders-hall",
       "text": "Each was filed when a ship changed copy or visuals. No new ones arrive; answer these and the door goes.",
       "file": "modules/hall-ui/public/studio.html",
-      "line": 156,
+      "line": 162,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -6036,7 +6036,7 @@
       "surface": "builders-hall",
       "text": "Every page is taken or on its way to the site right now. Come back soon.",
       "file": "modules/hall-ui/public/studio.js",
-      "line": 679,
+      "line": 690,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -6526,6 +6526,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "edced5d528c3",
+      "surface": "builders-hall",
+      "text": "From the live site",
+      "file": "modules/hall-ui/public/studio.html",
+      "line": 131,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "d32c5e058d1e",
       "surface": "builders-hall",
@@ -6576,7 +6585,7 @@
       "surface": "builders-hall",
       "text": "Gathering the reviews and flagged copy that wait for you.",
       "file": "modules/hall-ui/public/studio.html",
-      "line": 160,
+      "line": 166,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -9037,6 +9046,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "2dd1beb3b2ab",
+      "surface": "builders-hall",
+      "text": "None yet. A signed-in builder on the live site sees a Review button in its top bar; what they write lands here.",
+      "file": "modules/hall-ui/public/studio.js",
+      "line": 731,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "36c97d6094bf",
       "surface": "builders-hall",
@@ -9051,7 +9069,7 @@
       "surface": "builders-hall",
       "text": "None yet. Yours will be the first.",
       "file": "modules/hall-ui/public/page-notes.js",
-      "line": 120,
+      "line": 143,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -9708,7 +9726,7 @@
       "surface": "builders-hall",
       "text": "Opening the doc…",
       "file": "modules/hall-ui/public/page-notes.js",
-      "line": 256,
+      "line": 279,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -9726,7 +9744,7 @@
       "surface": "builders-hall",
       "text": "Opening the reviews…",
       "file": "modules/hall-ui/public/studio.html",
-      "line": 159,
+      "line": 165,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -9735,7 +9753,7 @@
       "surface": "builders-hall",
       "text": "Opening your doc…",
       "file": "modules/hall-ui/public/page-notes.js",
-      "line": 89,
+      "line": 112,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -9744,7 +9762,7 @@
       "surface": "builders-hall",
       "text": "Opening your doc…",
       "file": "modules/hall-ui/public/page-notes.js",
-      "line": 273,
+      "line": 296,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -9933,7 +9951,7 @@
       "surface": "builders-hall",
       "text": "Pick one. You can switch any time from the top bar.",
       "file": "modules/hall-ui/public/craft-mode.js",
-      "line": 422,
+      "line": 424,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10968,7 +10986,7 @@
       "surface": "builders-hall",
       "text": "Reviews from before Tweak Mode",
       "file": "modules/hall-ui/public/studio.html",
-      "line": 153,
+      "line": 159,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -10977,7 +10995,7 @@
       "surface": "builders-hall",
       "text": "Rewrite it in the editor",
       "file": "modules/hall-ui/public/studio.js",
-      "line": 796,
+      "line": 828,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -11967,7 +11985,7 @@
       "surface": "builders-hall",
       "text": "Splitting your feedback into ideas…",
       "file": "modules/hall-ui/public/page-notes.js",
-      "line": 222,
+      "line": 245,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -12057,7 +12075,7 @@
       "surface": "builders-hall",
       "text": "Still splitting. It will appear in this page's docs when it is done.",
       "file": "modules/hall-ui/public/page-notes.js",
-      "line": 232,
+      "line": 255,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -12633,7 +12651,7 @@
       "surface": "builders-hall",
       "text": "The copy desk — every flagged string",
       "file": "modules/hall-ui/public/studio.html",
-      "line": 165,
+      "line": 171,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -12669,7 +12687,7 @@
       "surface": "builders-hall",
       "text": "The doc is now this page's reference. Every idea links back to it.",
       "file": "modules/hall-ui/public/page-notes.js",
-      "line": 142,
+      "line": 165,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -12723,7 +12741,7 @@
       "surface": "builders-hall",
       "text": "The full queues",
       "file": "modules/hall-ui/public/studio.html",
-      "line": 164,
+      "line": 170,
       "origin": "html-attr:aria-label",
       "confidence": "certain"
     },
@@ -13326,7 +13344,7 @@
       "surface": "builders-hall",
       "text": "The studio page is yours, but its words could not be read just now. Open it in the editor.",
       "file": "modules/hall-ui/public/studio.js",
-      "line": 862,
+      "line": 894,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -13344,7 +13362,7 @@
       "surface": "builders-hall",
       "text": "The task board — all work",
       "file": "modules/hall-ui/public/studio.html",
-      "line": 166,
+      "line": 172,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -13713,7 +13731,7 @@
       "surface": "builders-hall",
       "text": "This page's reference docs",
       "file": "modules/hall-ui/public/page-notes.js",
-      "line": 113,
+      "line": 136,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -13929,7 +13947,7 @@
       "surface": "builders-hall",
       "text": "Turn into ideas",
       "file": "modules/hall-ui/public/page-notes.js",
-      "line": 107,
+      "line": 130,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -14019,7 +14037,7 @@
       "surface": "builders-hall",
       "text": "Tweak/CopyWrite Flow",
       "file": "modules/hall-ui/public/studio.html",
-      "line": 141,
+      "line": 147,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -14370,7 +14388,7 @@
       "surface": "builders-hall",
       "text": "What are you doing now?",
       "file": "modules/hall-ui/public/craft-mode.js",
-      "line": 421,
+      "line": 423,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -14541,7 +14559,7 @@
       "surface": "builders-hall",
       "text": "What should this page be?",
       "file": "modules/hall-ui/public/page-notes.js",
-      "line": 85,
+      "line": 108,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -14685,7 +14703,7 @@
       "surface": "builders-hall",
       "text": "When you submit, an AI splits this into separate ideas, filed under your name. The doc stays here as this page's reference.",
       "file": "modules/hall-ui/public/page-notes.js",
-      "line": 106,
+      "line": 129,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -14937,7 +14955,7 @@
       "surface": "builders-hall",
       "text": "Write another",
       "file": "modules/hall-ui/public/page-notes.js",
-      "line": 143,
+      "line": 166,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -14973,7 +14991,7 @@
       "surface": "builders-hall",
       "text": "Write what you see on this page and what it should be. Long is fine: each separate point becomes its own idea.",
       "file": "modules/hall-ui/public/page-notes.js",
-      "line": 95,
+      "line": 118,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -15171,7 +15189,7 @@
       "surface": "builders-hall",
       "text": "Your feedback",
       "file": "modules/hall-ui/public/page-notes.js",
-      "line": 94,
+      "line": 117,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -16899,7 +16917,7 @@
       "surface": "builders-hall",
       "text": "pick another",
       "file": "modules/hall-ui/public/studio.js",
-      "line": 682,
+      "line": 693,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -17007,7 +17025,16 @@
       "surface": "builders-hall",
       "text": "reviews from before Tweak Mode",
       "file": "modules/hall-ui/public/studio.html",
-      "line": 131,
+      "line": 137,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
+    {
+      "id": "0d677ab4868a",
+      "surface": "builders-hall",
+      "text": "reviews written on the live site",
+      "file": "modules/hall-ui/public/studio.html",
+      "line": 132,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -17205,7 +17232,7 @@
       "surface": "builders-hall",
       "text": "submit it in the editor",
       "file": "modules/hall-ui/public/studio.js",
-      "line": 797,
+      "line": 829,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -17241,7 +17268,7 @@
       "surface": "builders-hall",
       "text": "take it",
       "file": "modules/hall-ui/public/studio.js",
-      "line": 685,
+      "line": 696,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -18897,7 +18924,7 @@
       "surface": "builders-hall",
       "text": "← Back",
       "file": "modules/hall-ui/public/page-notes.js",
-      "line": 260,
+      "line": 283,
       "origin": "js-markup",
       "confidence": "certain"
     },

package/docs/module-api-changelog.md

@@ -2980,5 +2980,9 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.21.72 with no explicit bump. run 37803458577. (task 1002620)
   1.21.74 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.21.73 with no explicit bump. run 37815719494. (task 1002620)
+  1.21.75 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.21.74 with no explicit bump. run 37817454172. (task 1002620)
+  1.21.76 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.21.75 with no explicit bump. run 37822098196. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/docs/modules-contract.md

@@ -362,6 +362,7 @@ Run `bongos upgrade` to confirm coreVersion compatibility, then `node scripts/gd
 - The publish denylist applies (ADR 0098), plus a refusal of credential-named files (`.env*`, `*.pem`, `*.key`, `id_rsa`, …) anywhere in the module. The store re-checks every hash and the denylist itself.
 - Gate: Metic+ (`module.submit`) for now. This is not `bongos module submit`, which proposes a module *into* core.
 - **A how-to is required** ([ADR 0347](adr/0347-every-store-module-ships-a-how-to.md)). `modules/<key>/HOWTO.md` is what a buyer reads — the store shows it as the module's page — so it is written for the person who installs the module, not for an AI working inside it (that is `CLAUDE.md`). It is plain Markdown: any AI or person can write it. Publish refuses the version unless it has these five level-2 headings, in any order and any case, each with some text under it: `## What it does`, `## Install and enable`, `## How to use it` (with one worked example), `## Configuration` ("None." is fine) and `## Limits and known issues` ("None known." is fine). HTML comments don't count as text, so the scaffold's prompts must be replaced. The refusal names each failing section. The check is one function, `checkHowto` in `scripts/gds/module-artifact.js`; the CLI runs it before uploading and the store runs it again on upload, so a hand-built upload can't skip it. `bongos module check` reports it as advice only — an upstream submit is not gated by it. Install and update don't re-check it, so a version published before the gate still installs. The file travels in the tarball, so its hash pins it to the version. An optional `howto.artifactUrl` in `module.json` (an `https://` link on `claude.ai`) is shown as an extra, never graded.
+- **Getting listed** (task 1003807, [ADR 0343](adr/0343-a-module-score-is-a-security-gate-then-an-average-of-visible-parts.md)). Publishing a version does not by itself put it in the store's catalog, `GET /store/modules`. The catalog shows each module's newest version, judged by its current score. It must pass the Security gate first; a version that failed it, or has not been checked yet, is not listed. A new version with no install or reliability data yet is listed with a **New** label and is not ranked; the floor does not apply to it until it has a real score. Every other version is listed only if its overall score is **at least 50 out of 100**. Below that it is not listed at all. The floor is fixed in Bongos itself (`QUALITY_FLOOR` in `src/bongos/module-listing.js`) and returned in the catalog response; no author or instance setting moves it, and changing it is an owner-approved, reviewed task.
 
 ### 7. Install from the store
 

package/docs/page-inventory.json

@@ -1320,7 +1320,8 @@
       "files": [
         "modules/public-landing/public/account.html",
         "modules/public-landing/public/assets/cosmos.css",
-        "modules/public-landing/public/assets/hub-bar.js"
+        "modules/public-landing/public/assets/hub-bar.js",
+        "modules/public-landing/public/assets/artist-review.js"
       ],
       "states_files": [
         "modules/public-landing/public/account.states.json",
@@ -1349,7 +1350,8 @@
       "files": [
         "modules/public-landing/public/contact.html",
         "modules/public-landing/public/assets/cosmos.css",
-        "modules/public-landing/public/assets/hub-bar.js"
+        "modules/public-landing/public/assets/hub-bar.js",
+        "modules/public-landing/public/assets/artist-review.js"
       ],
       "states_files": [],
       "states": []
@@ -1367,7 +1369,8 @@
       "files": [
         "modules/public-landing/public/guild.html",
         "modules/public-landing/public/assets/cosmos.css",
-        "modules/public-landing/public/assets/hub-bar.js"
+        "modules/public-landing/public/assets/hub-bar.js",
+        "modules/public-landing/public/assets/artist-review.js"
       ],
       "states_files": [
         "modules/public-landing/public/guild.states.json"
@@ -1396,7 +1399,8 @@
       "url": "https://{apex}/",
       "files": [
         "modules/public-landing/public/index.html",
-        "modules/public-landing/public/assets/world.css"
+        "modules/public-landing/public/assets/world.css",
+        "modules/public-landing/public/assets/artist-review.js"
       ],
       "states_files": [
         "modules/public-landing/public/index.states.json",
@@ -1423,7 +1427,8 @@
       "files": [
         "modules/public-landing/public/invitations.html",
         "modules/public-landing/public/assets/cosmos.css",
-        "modules/public-landing/public/assets/hub-bar.js"
+        "modules/public-landing/public/assets/hub-bar.js",
+        "modules/public-landing/public/assets/artist-review.js"
       ],
       "states_files": [
         "modules/public-landing/public/invitations.states.json",
@@ -1460,7 +1465,8 @@
       "files": [
         "modules/public-landing/public/privacy.html",
         "modules/public-landing/public/assets/cosmos.css",
-        "modules/public-landing/public/assets/hub-bar.js"
+        "modules/public-landing/public/assets/hub-bar.js",
+        "modules/public-landing/public/assets/artist-review.js"
       ],
       "states_files": [],
       "states": []
@@ -1477,7 +1483,8 @@
       "url": "https://{apex}/projects",
       "files": [
         "modules/public-landing/public/projects.html",
-        "modules/public-landing/public/assets/cosmos.css"
+        "modules/public-landing/public/assets/cosmos.css",
+        "modules/public-landing/public/assets/artist-review.js"
       ],
       "states_files": [
         "modules/public-landing/public/projects.states.json",
@@ -1567,7 +1574,8 @@
       "files": [
         "modules/public-landing/public/terms.html",
         "modules/public-landing/public/assets/cosmos.css",
-        "modules/public-landing/public/assets/hub-bar.js"
+        "modules/public-landing/public/assets/hub-bar.js",
+        "modules/public-landing/public/assets/artist-review.js"
       ],
       "states_files": [],
       "states": []