@bongos/core 1.23.13 → 1.23.15

package/modules/hall-ui/public/welcome-boot.js

@@ -10,9 +10,11 @@
 // hall underneath.
 //
 // Rules:
-//   - Once per builder per LOCAL day, remembered in localStorage. Storage that throws cannot
-//     remember, so such a browser is never shown it (it would replay on every visit).
-//   - Never for a visitor who is not signed in, and never over a deep link (#/task/N, #/idea/N).
+//   - A signed-in builder sees it once per LOCAL day, and again after every fresh sign-in (the
+//     sign-in click leaves a flag in localStorage that the return visit consumes). Storage that
+//     throws cannot remember, so such a browser is never shown it (it would replay on every visit).
+//   - A visitor who is not signed in sees the Welcome on Home, every visit, with a "Sign in with
+//     GitHub" button in place of the role choices. Only on Home, never over a deep link (#/task/N, #/idea/N).
 //   - shell.js asks onAccess() BEFORE the craft picker; a load where the welcome showed marks the
 //     picker asked (OTBCraftMode.markAsked), so the two never stack.
 //   - Picking a role also sets the hall's craft mode. Governing is a seat (craft-mode.js), so the
@@ -26,6 +28,8 @@
   'use strict';
 
   var DAY_KEY = 'hall-welcome-day:';
+  var SIGNIN_KEY = 'hall-welcome-signin';
+  var SIGNIN_HREF = '/api/bongos/auth/web/start';
   var ART = { day: '/builders/welcome-day.webp', night: '/builders/welcome-night.webp' };
   var ART_WAIT = 1500;       // the veil lifts once the painting is in, or after this long
   var RUN_MS = 3400;         // the city powering up before the greeting
@@ -159,15 +163,25 @@
         '<span class="wb__version" id="wb-version" hidden></span></div>' +
       '<div class="wb__veil" aria-hidden="true"></div>' +
       '<button class="wb__skip" type="button" data-wb-skip>Skip</button>' +
-      '<div class="wb__after">' +
-        '<h2 class="wb__hi" id="wb-hi">' + esc(greetingFor(now) + ', ' + nameOf(builder)) + '</h2>' +
+      '<div class="wb__after">' + (builder ? signedInHtml(builder, now) : signedOutHtml()) + '</div>';
+  }
+  function signedInHtml(builder, now) {
+    return '<h2 class="wb__hi" id="wb-hi">' + esc(greetingFor(now) + ', ' + nameOf(builder)) + '</h2>' +
         '<p class="wb__lede">Where do you want to start the day?</p>' +
         '<div class="wb__choices">' +
           '<button class="wb__choice" type="button" data-wb-roles aria-expanded="false" aria-controls="wb-roles"><b>Start with your role</b><span>Pick today’s craft and go straight to its room.</span></button>' +
           '<button class="wb__choice" type="button" data-wb-home><b>Your home page</b><span>Your work, what needs you, and what shipped.</span></button>' +
         '</div>' +
-        '<div class="wb__roles" id="wb-roles" hidden></div>' +
-      '</div>';
+        '<div class="wb__roles" id="wb-roles" hidden></div>';
+  }
+  // A visitor who is not signed in: the same scene, one way in.
+  function signedOutHtml() {
+    return '<h2 class="wb__hi" id="wb-hi">Welcome to ' + esc(projectName(window.__BRANDING__)) + '</h2>' +
+        '<p class="wb__lede">Sign in to see your work, what needs you, and what shipped.</p>' +
+        '<div class="wb__choices">' +
+          '<button class="wb__choice" type="button" data-wb-signin><b>Sign in with GitHub</b><span>Pick up where you left off.</span></button>' +
+          '<button class="wb__choice" type="button" data-wb-home><b>Look around first</b><span>See the public side of the project.</span></button>' +
+        '</div>';
   }
   function rolesHtml() {
     return rolesFor(craft()).map(function (r) {
@@ -250,6 +264,7 @@
     if (!btn || !root || leaving) return;
     if (btn.hasAttribute('data-wb-skip')) { begin(); finish(); return; }
     if (btn.hasAttribute('data-wb-home')) { leave(); return; }
+    if (btn.hasAttribute('data-wb-signin')) { markSigningIn(); go(SIGNIN_HREF); return; }
     if (btn.hasAttribute('data-wb-roles')) {
       var box = root.querySelector('#wb-roles');
       var open = box.hidden;
@@ -299,19 +314,54 @@
     at(ART_WAIT, begin);
     var skip = root.querySelector('[data-wb-skip]');
     if (skip && skip.focus) skip.focus();
-    loadVersion();
+    if (builder) loadVersion();   // an anonymous visit costs no request
   }
 
   // A link straight to an overlay (#/task/N, #/idea/N, #/blocker/N) is not greeted over.
   function deepLink() { return /^#\//.test((window.location && window.location.hash) || ''); }
 
+  // Home is the bare hall URL with no routed view; a signed-out visitor is only greeted there.
+  function onHome() {
+    var p = String((window.location && window.location.pathname) || '/').replace(/\/+$/, '');
+    var h = (window.location && window.location.hash) || '';
+    return (p === '' || p === '/builders') && (h === '' || h === '#' || h === '#home');
+  }
+
+  // A sign-in in flight is remembered, so the welcome greets the builder when they come back signed in.
+  function markSigningIn() { try { window.localStorage.setItem(SIGNIN_KEY, '1'); } catch (_) { /* cannot remember */ } }
+  function takeSignedIn() {
+    try {
+      var was = window.localStorage.getItem(SIGNIN_KEY) === '1';
+      if (was) window.localStorage.removeItem(SIGNIN_KEY);
+      return was;
+    } catch (_) { return false; }
+  }
+  // Any sign-in link on the page (the shell's own, in the top bar) counts the same as the welcome's button.
+  function watchSignInLinks() {
+    if (!document.addEventListener) return;
+    document.addEventListener('click', function (e) {
+      var a = e.target && e.target.closest && e.target.closest('a[href]');
+      // Same-origin only: the href must START with the sign-in path, not merely mention it.
+      if (a && String(a.getAttribute('href')).indexOf(SIGNIN_HREF) === 0) markSigningIn();
+    }, true);
+  }
+
   // shell.js's call, before the craft picker's. True when the welcome is (or was) up on this load.
   function onAccess(access, builder) {
     if (shown) return true;
-    if (!access || access.authed !== true || !builder || builder.id == null || deepLink()) return false;
+    if (deepLink()) return false;
+    if (access && access.authed === false) {
+      if (!onHome()) return false;
+      shown = true;
+      show(null);
+      return true;
+    }
+    if (!access || access.authed !== true || !builder || builder.id == null) return false;
     var key = DAY_KEY + builder.id, now = new Date();
     try {
-      if (!firstVisitToday(window.localStorage.getItem(key), now)) return false;
+      // Every fresh sign-in is greeted; otherwise only the day's first visit.
+      var fresh = takeSignedIn();
+      if (!fresh && !firstVisitToday(window.localStorage.getItem(key), now)) return false;
       window.localStorage.setItem(key, localDay(now));
     } catch (_) { return false; }
     shown = true;
@@ -322,11 +372,11 @@
   }
 
   var api = {
-    DAY_KEY: DAY_KEY, ROLES: ROLES, ART: ART, TOWERS: TOWERS, BEACONS: BEACONS, LANES: LANES, AW: AW, AH: AH,
+    DAY_KEY: DAY_KEY, SIGNIN_KEY: SIGNIN_KEY, ROLES: ROLES, ART: ART, TOWERS: TOWERS, BEACONS: BEACONS, LANES: LANES, AW: AW, AH: AH,
     localDay: localDay, firstVisitToday: firstVisitToday, greetingFor: greetingFor, nameOf: nameOf, timeOfDay: timeOfDay,
     artFor: artFor, projectName: projectName, bannerText: bannerText, rolesFor: rolesFor, pulseRuns: pulseRuns,
     onAccess: onAccess, finish: finish, close: close,
   };
-  if (typeof window !== 'undefined') window.OTBWelcome = api;
+  if (typeof window !== 'undefined') { window.OTBWelcome = api; watchSignInLinks(); }
   if (typeof module !== 'undefined' && module.exports) module.exports = api;
 })();

package/modules/platform-identity/builder-of-the-week.js

@@ -0,0 +1,180 @@
+// modules/platform-identity/builder-of-the-week.js — Builder of the Week (community
+// spec D5, docs/specs/bongos-v1-community-tab.md; task 1002981, goal 1000110 CT5).
+// The read behind GET /community/builder-of-the-week, for the hub's /community/week
+// page and the line above the leaderboard.
+//
+// THE RULE (owner-signed 2026-08-16; the week decided 2026-10-27): of the builders
+// the leaderboard may show (rollupVisibleSql), the one who earned the most credits
+// across every project in the last FULL week — Monday 00:00 to Monday 00:00 UTC —
+// among those who shipped at least one work in it. Ties go to more works shipped,
+// then more karma, then handle/login so the answer is stable.
+//
+// THE WEEK IS READ FROM HISTORY, NOT FROM THE LIVE ROWS. Per (project, builder) it is
+// the last snapshot at-or-before the week's end minus the last at-or-before its start
+// (activity-snapshots.js), summed across projects. With no snapshot before the week, a
+// row counts from zero only if the hub first saw it during the week (first_seen_at,
+// migration 032; owner 2026-10-27): the leaderboard's missing-baseline rule would let a
+// builder last seen before snapshots began win one week with their whole lifetime, and
+// a crown is never corrected. A returning builder's first week back is the cost. A snapshot's reported_at never runs
+// backwards, so once the week has ended its numbers cannot move, and whoever asks
+// first gets the same answer.
+//
+// CROWNED AT RENDER, NO CRON (spec D5). The first read after Monday 00:00 UTC decides
+// the week and writes it to platform_identity_weekly_features (migration 032) with
+// ON CONFLICT DO NOTHING; every later read finds the row. A week nobody won is written
+// too (github_id NULL), so it stays empty. Nothing updates a row.
+//
+// WHO IS SHOWN is decided again on every read: a winner who has since hidden their
+// numbers or gone private is not drawn, on the crown or in the past weeks, and their
+// week is not given to anyone else (spec D8). A hidden winner and an empty week look
+// the same. Viewer-independent; github_id never crosses the projection.
+'use strict';
+
+const { pool: defaultPool } = require('../../src/module-api');
+const { rollupVisibleSql } = require('./account-visibility');
+
+const DAY_MS = 24 * 60 * 60 * 1000;
+const WEEK_MS = 7 * DAY_MS;
+// How many weeks before the current one the past-weeks list shows.
+const ARCHIVE_WEEKS = 12;
+
+// The Monday 00:00 UTC that opens the week `now` is in.
+function mondayOf(now) {
+  const midnight = Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), now.getUTCDate());
+  const sinceMonday = (new Date(midnight).getUTCDay() + 6) % 7;
+  return new Date(midnight - sinceMonday * DAY_MS);
+}
+
+// The week the crown covers at `now`: the last full week before `now`'s own.
+function crownedWeek(now = new Date()) {
+  const end = mondayOf(now);
+  return { start: new Date(end.getTime() - WEEK_MS), end };
+}
+
+const isoDate = (d) => d.toISOString().slice(0, 10);
+
+// The week's winner among eligible builders, or null. Arithmetic is bigint for the
+// leaderboard's reason: the columns are instance-reported int4.
+async function computeWinner(start, end, pool) {
+  const { rows } = await pool.query(
+    `WITH act AS (
+       SELECT a.client_id, a.github_id, a.first_seen_at, pa.handle, pa.github_login
+         FROM platform_identity_builder_project_activity a
+         JOIN platform_identity_accounts pa ON pa.github_id = a.github_id
+        WHERE ${rollupVisibleSql('pa')}
+     ), per_project AS (
+       SELECT act.github_id, act.handle, act.github_login,
+              COALESCE(e.credits, 0)::bigint - COALESCE(b.credits, 0)             AS credits,
+              COALESCE(e.tasks_shipped, 0)::bigint - COALESCE(b.tasks_shipped, 0) AS tasks_shipped,
+              COALESCE(e.karma, 0)::bigint - COALESCE(b.karma, 0)                 AS karma
+         FROM act
+         LEFT JOIN LATERAL (
+           SELECT s.credits, s.tasks_shipped, s.karma
+             FROM platform_identity_activity_snapshots s
+            WHERE s.client_id = act.client_id AND s.github_id = act.github_id
+              AND s.reported_at <= $2::timestamptz
+            ORDER BY s.reported_at DESC, s.id DESC
+            LIMIT 1
+         ) e ON true
+         LEFT JOIN LATERAL (
+           SELECT s.credits, s.tasks_shipped, s.karma
+             FROM platform_identity_activity_snapshots s
+            WHERE s.client_id = act.client_id AND s.github_id = act.github_id
+              AND s.reported_at <= $1::timestamptz
+            ORDER BY s.reported_at DESC, s.id DESC
+            LIMIT 1
+         ) b ON true
+        WHERE b.credits IS NOT NULL OR act.first_seen_at >= $1::timestamptz
+     )
+     SELECT github_id, sum(credits)::bigint AS credits, sum(tasks_shipped)::bigint AS tasks_shipped
+       FROM per_project
+      GROUP BY github_id, handle, github_login
+     HAVING sum(tasks_shipped) >= 1
+      ORDER BY sum(credits) DESC, sum(tasks_shipped) DESC, sum(karma) DESC,
+               handle COLLATE "C", github_login COLLATE "C"
+      LIMIT 1`,
+    [start, end],
+  );
+  return rows[0] || null;
+}
+
+// One crowning per week per process: concurrent first reads share it, and a week
+// already on record is not asked about again.
+const crowning = new Map();
+let lastCrowned = null;
+
+async function crownWeek(start, end, pool) {
+  const week = isoDate(start);
+  const { rows } = await pool.query(
+    'SELECT 1 FROM platform_identity_weekly_features WHERE week_start = $1::date',
+    [week],
+  );
+  if (rows.length) return;
+  const winner = await computeWinner(start, end, pool);
+  await pool.query(
+    `INSERT INTO platform_identity_weekly_features (week_start, github_id, credits_delta, ships_delta)
+     VALUES ($1::date, $2::bigint, $3::bigint, $4::bigint)
+     ON CONFLICT (week_start) DO NOTHING`,
+    [week, winner ? winner.github_id : null, winner ? winner.credits : 0, winner ? winner.tasks_shipped : 0],
+  );
+}
+
+function ensureCrowned(start, end, pool) {
+  const week = isoDate(start);
+  if (lastCrowned && lastCrowned.week === week && lastCrowned.pool === pool) return Promise.resolve();
+  const inFlight = crowning.get(week);
+  if (inFlight && inFlight.pool === pool) return inFlight.promise;
+  const entry = { pool };
+  entry.promise = crownWeek(start, end, pool)
+    .then(() => { lastCrowned = { week, pool }; })
+    .finally(() => { if (crowning.get(week) === entry) crowning.delete(week); });
+  crowning.set(week, entry);
+  return entry.promise;
+}
+
+function clearCrownMemo() {
+  crowning.clear();
+  lastCrowned = null;
+}
+
+// readBuilderOfTheWeek — crowns the last full week if nobody has yet, then reads it and
+// the weeks before it. Returns { week: { start, end }, winner, past }: dates as
+// YYYY-MM-DD (end is the Monday the week closed on), winner null when nobody is to be
+// shown, past newest first. `now` is injectable so a test can pin the week.
+async function readBuilderOfTheWeek({ now = new Date(), pool = defaultPool } = {}) {
+  const { start, end } = crownedWeek(now);
+  await ensureCrowned(start, end, pool);
+  const { rows } = await pool.query(
+    `SELECT to_char(f.week_start, 'YYYY-MM-DD') AS week_start, f.credits_delta, f.ships_delta,
+            pa.handle, pa.github_login, pa.display_name, pa.avatar_url
+       FROM platform_identity_weekly_features f
+       JOIN platform_identity_accounts pa ON pa.github_id = f.github_id
+      WHERE f.week_start <= $1::date
+        AND ${rollupVisibleSql('pa')}
+      ORDER BY f.week_start DESC
+      LIMIT $2`,
+    [isoDate(start), ARCHIVE_WEEKS + 1],
+  );
+  const shown = rows.map((r) => ({
+    week_start: r.week_start,
+    handle: r.handle,
+    github_login: r.github_login,
+    display_name: r.display_name,
+    avatar_url: r.avatar_url,
+    credits: Number(r.credits_delta),
+    tasks_shipped: Number(r.ships_delta),
+  }));
+  const isThisWeek = shown.length > 0 && shown[0].week_start === isoDate(start);
+  return {
+    week: { start: isoDate(start), end: isoDate(end) },
+    winner: isThisWeek ? shown[0] : null,
+    past: (isThisWeek ? shown.slice(1) : shown).slice(0, ARCHIVE_WEEKS),
+  };
+}
+
+module.exports = {
+  readBuilderOfTheWeek,
+  crownedWeek,
+  clearCrownMemo,
+  ARCHIVE_WEEKS,
+};

package/modules/platform-identity/migrations/platform_identity_032_weekly_features.sql

@@ -0,0 +1,53 @@
+-- platform_identity_032_weekly_features.sql — Builder of the Week, one row per crowned
+-- week (community spec D5, docs/specs/bongos-v1-community-tab.md; task 1002981).
+--
+-- WHY. The crown is computed at render, with no cron: the first read of
+-- GET /community/builder-of-the-week after Monday 00:00 UTC decides the week that just
+-- ended and writes it here. The row is what pins the crown — a builder who goes public
+-- or reports late cannot take a week that was already decided — and what the page's
+-- past-weeks list reads.
+--
+-- THE SHAPE CARRIES THE RULES (owner, 2026-10-27):
+--   * THE KEY IS week_start, the Monday (UTC) the crowned week began, so a week has one
+--     row. The writer is INSERT ... ON CONFLICT (week_start) DO NOTHING, and nothing
+--     updates a row: the first decision stands.
+--   * github_id IS NULL when nobody qualified (no eligible builder shipped a work that
+--     week). The empty week is recorded too, so it stays empty.
+--   * credits_delta / ships_delta are the week's numbers as decided, bigint like the
+--     leaderboard's arithmetic (builder-of-the-week.js).
+--   * NO FOREIGN KEY to platform_identity_accounts, like every github_id column in this
+--     module. Whether a winner may be SHOWN is decided at read time by
+--     rollupVisibleSql (account-visibility.js), never by this row.
+--
+-- AND first_seen_at ON THE ACTIVITY ROWS (owner, 2026-10-27). A week counts a
+-- (project, builder) with no snapshot before it only if the hub first saw that row
+-- during the week: otherwise a builder last seen before snapshots began would bring
+-- their whole lifetime into one week and keep the crown for good. Added with NO
+-- default first, so every existing row stays NULL ("seen before this, history
+-- unknown"); only then the default, so a new row stamps its own first sighting.
+--
+-- NOTHING HERE IS AUTHORITY (ADR 0016 / ADR 0141): descriptive, public analytics.
+--
+-- Additive + platform_identity_-namespaced (ADR 0083 §5). A CREATE and a nullable ADD COLUMN, so the
+-- previous release still runs against this schema. Idempotent.
+
+BEGIN;
+
+CREATE TABLE IF NOT EXISTS platform_identity_weekly_features (
+  week_start    date PRIMARY KEY,
+  github_id     bigint,
+  credits_delta bigint NOT NULL,
+  ships_delta   bigint NOT NULL,
+  crowned_at    timestamptz NOT NULL DEFAULT now()
+);
+
+ALTER TABLE platform_identity_builder_project_activity ADD COLUMN IF NOT EXISTS first_seen_at timestamptz;
+ALTER TABLE platform_identity_builder_project_activity ALTER COLUMN first_seen_at SET DEFAULT now();
+
+COMMENT ON COLUMN platform_identity_builder_project_activity.first_seen_at IS
+  'When the hub first saw this (project, builder) row; NULL for rows older than migration 032. Builder of the Week counts a row with no snapshot before the week only if it was first seen during the week (task 1002981).';
+
+COMMENT ON TABLE platform_identity_weekly_features IS
+  'Builder of the Week, one row per week, keyed on the Monday (UTC) it began (community spec D5, task 1002981). Written once by the first read after the week ends, never updated; github_id NULL = nobody qualified. Whether a winner is shown is decided at read time by the leaderboard''s eligibility predicate.';
+
+COMMIT;

package/modules/platform-identity/routes/community-leaderboard.js

@@ -6,6 +6,8 @@
 // ../community-leaderboard.js; this file is the HTTP shell — validation, the
 // per-IP read cap, the response envelope. It never reads a session, so the
 // board is the same for every viewer.
+// It also serves GET /community/builder-of-the-week (spec D5, task 1002981), the
+// board's weekly crown, from ../builder-of-the-week.js on the same terms.
 //
 // Reaches core only through the doorway (ADR 0083).
 'use strict';
@@ -13,6 +15,7 @@
 const express = require('express');
 const api = require('../../../src/module-api');
 const leaderboard = require('../community-leaderboard');
+const builderOfTheWeek = require('../builder-of-the-week');
 const { createReadRateLimit } = require('../read-rate-limit');
 
 const { pool, corsPublicGet } = api;
@@ -20,6 +23,9 @@ const { pool, corsPublicGet } = api;
 const READ_RATE_LIMIT = 60; // per IP per minute — the community-search budget
 const READ_RATE_SCOPE = 'community-leaderboard-read';
 const leaderboardReadRateLimit = createReadRateLimit({ scope: READ_RATE_SCOPE, limit: READ_RATE_LIMIT });
+// Builder of the Week spends its own budget (ADR 0209: never a shared one).
+const WEEK_READ_RATE_SCOPE = 'builder-of-the-week-read';
+const weekReadRateLimit = createReadRateLimit({ scope: WEEK_READ_RATE_SCOPE, limit: READ_RATE_LIMIT });
 
 module.exports = function communityLeaderboardRoutes() {
   const router = express.Router();
@@ -63,7 +69,25 @@ module.exports = function communityLeaderboardRoutes() {
     }
   });
 
+  router.use('/community/builder-of-the-week', corsPublicGet('/community/builder-of-the-week'));
+
+  // rank: public — Builder of the Week (spec D5; task 1002981): the last full
+  // week's winner and the weeks before it. Takes no parameters. The first read
+  // after Monday 00:00 UTC also records the week (crown at render, no cron), at
+  // most one row per week. Viewer-independent; no-store so a winner who hides
+  // leaves the page on the next read (ADR 0171 D5).
+  router.get('/community/builder-of-the-week', weekReadRateLimit, async (req, res) => {
+    try {
+      const out = await builderOfTheWeek.readBuilderOfTheWeek({ pool });
+      res.set('Cache-Control', 'no-store');
+      res.json(out);
+    } catch (err) {
+      api.logger('platform-identity').error({ err: err && err.message }, 'GET /community/builder-of-the-week failed');
+      res.fail('builder_of_the_week_failed', { status: 500, message: 'internal error' });
+    }
+  });
+
   return router;
 };
 
-module.exports._internals = { READ_RATE_LIMIT, READ_RATE_SCOPE };
+module.exports._internals = { READ_RATE_LIMIT, READ_RATE_SCOPE, WEEK_READ_RATE_SCOPE };

package/modules/public-landing/public/account.html

@@ -118,6 +118,7 @@
   <div class="bandIn">
     <ul class="bandRow">
       <li class="bandCell"><a class="bandT" href="/community">Leaderboard</a><span class="bandC">who earned the most, across every project</span></li>
+      <li class="bandCell"><a class="bandT" href="/community/week">Builder of the week</a><span class="bandC">the top earner of each week, and how it is chosen</span></li>
       <li class="bandCell"><a class="bandT" href="/community/find">Find a builder</a><span class="bandC">anyone building here, by name or role</span></li>
       <li class="bandCell"><a class="bandT" href="/community/recruiters">Open to recruiters</a><span class="bandC">who is open to recruiting, for project owners</span></li>
       <li class="bandCell knowCell" hidden><a class="bandT" href="/connections#connSuggest">Builders you may know</a><span class="bandC">connections or projects in common</span></li>
@@ -131,7 +132,7 @@
       <li class="bandCell"><a class="bandT" href="/projects?view=map&amp;sub=table">Table</a><span class="bandC">the same projects as rows</span></li>
       <li class="bandCell" id="mineCell"><a class="bandT" href="/projects?view=mine">Your projects</a><span class="bandC">the ones you own</span></li>
       <li class="bandCell"><a class="bandT" href="/projects?view=new">New project</a><span class="bandC">five questions and a home</span></li>
-      <li class="bandCell bandFold"><a class="bandT" href="/community">Leaderboard</a><span class="bandC">who earned the most, across every project</span></li><li class="bandCell bandFold"><a class="bandT" href="/community/find">Find a builder</a><span class="bandC">anyone building here, by name or role</span></li><li class="bandCell bandFold"><a class="bandT" href="/community/recruiters">Open to recruiters</a><span class="bandC">who is open to recruiting, for project owners</span></li><li class="bandCell bandFold knowCell" hidden><a class="bandT" href="/connections#connSuggest">Builders you may know</a><span class="bandC">connections or projects in common</span></li>
+      <li class="bandCell bandFold"><a class="bandT" href="/community">Leaderboard</a><span class="bandC">who earned the most, across every project</span></li><li class="bandCell bandFold"><a class="bandT" href="/community/week">Builder of the week</a><span class="bandC">the top earner of each week, and how it is chosen</span></li><li class="bandCell bandFold"><a class="bandT" href="/community/find">Find a builder</a><span class="bandC">anyone building here, by name or role</span></li><li class="bandCell bandFold"><a class="bandT" href="/community/recruiters">Open to recruiters</a><span class="bandC">who is open to recruiting, for project owners</span></li><li class="bandCell bandFold knowCell" hidden><a class="bandT" href="/connections#connSuggest">Builders you may know</a><span class="bandC">connections or projects in common</span></li>
     </ul>
   </div>
 </div>

package/modules/public-landing/public/community-week-none.states.json

@@ -0,0 +1,16 @@
+{
+  "_": "The builder of the week when the last week has no one to show (task 1002981): nobody qualified, or the winner hides their numbers — the two look the same (spec D8). A hub's first week, so no past weeks either (fixtures/community-week-none.json). The page says so in one line; the board draws no crown line.",
+  "page": "/community",
+  "surface": "public-landing",
+  "modes": ["dark"],
+  "modeQuery": false,
+  "stub": { "fixtures": { "community-week": "community-week-none" } },
+  "ignoreRequests": ["/api/(gds|bongos)/me$", "/my-projects", "/me/guild-", "/scouting$"],
+  "ignoreConsole": ["/api/(gds|bongos)/me", "/scouting", "\\b40[13]\\b", "Unauthorized", "Forbidden"],
+  "ignoreControls": [".vh"],
+  "states": {
+    "out-week-none": { "auth": false, "url": "/community/week", "actions": [["wait", 400]], "expect": { "visible": ["#week", "#weekNone", "#weekRuleH"], "hidden": ["#weekCrown", "#weekLoading", "#weekFailed", "#pastH"], "count": [["#weekPast .commRow", 0]], "text": [["#weekNone", "No builder of the week for 19–25 Oct 2026."]] } },
+    "out-board-no-crown": { "auth": false, "actions": [["wait", 400]], "expect": { "visible": ["#board", "#boardList"], "hidden": ["#boardCrown"] } }
+  },
+  "reducedMotion": { "auth": false, "actions": [["wait", 400]] }
+}