@bongos/core 1.23.17 → 1.23.19

package/modules/copy-desk/auto-close.js

@@ -13,8 +13,11 @@
 //                     rewrite left the batch for an engineer task at submit
 //                     (unplaced, shared or removed lines), so /tweak has no line
 //                     to apply and the round can never move on its own.
+//   draft_expired     `ready` with a draft and no batch, untouched for
+//                     page-status's DRAFT_EXPIRES_AFTER (14 days, task 1004901):
+//                     its artist was reminded at 7 days and never came back.
 //
-// Both are abandoned through the lifecycle port's releaseStuckTweak (no compose,
+// All three are abandoned through the lifecycle port's releaseStuckTweak (no compose,
 // so the note is the reason and nothing is written to the description). The
 // engineer tasks a submit filed are untouched: they carry the artist's words.
 //
@@ -24,20 +27,23 @@
 
 const api = require('../../src/module-api');
 const pages = require('./pages');
+const pageStatus = require('./page-status');
 
 const GRACE_MS = Number(process.env.COPY_AUTO_CLOSE_GRACE_MS) || 60 * 60_000;
 
 const NOTES = Object.freeze({
   blank: 'Closed by itself: the round was opened but nothing was written in it.',
   nothing_to_apply: 'Closed by itself: every rewritten line went to an engineer task, so nothing was left to apply on the page.',
+  draft_expired: 'Closed by itself: the draft sat untouched for two weeks. Its words stay on this task; claim the page again to start over.',
 });
 
-function closeReason(task, { now = Date.now(), graceMs = GRACE_MS } = {}) {
+function closeReason(task, { now = Date.now(), graceMs = GRACE_MS, draftExpiresMs = pageStatus.DRAFT_EXPIRES_AFTER } = {}) {
   if (!task || task.status !== 'ready' || task.holder_id != null) return null;
   const touched = Date.parse(task.updated_at || task.created_at || '');
   if (!Number.isFinite(touched) || now - touched < graceMs) return null;
   const p = pages.blockPresence(task.description);
-  if (!p.batch) return p.draft ? null : 'blank';
+  // task 1004901: a draft its artist left untouched for two weeks expires.
+  if (!p.batch) return p.draft ? (now - touched >= draftExpiresMs ? 'draft_expired' : null) : 'blank';
   const b = pages.parseBatchBlock(task.description);
   if (b.ok && b.batch.lines.length === 0) return 'nothing_to_apply';
   return null;

package/modules/copy-desk/page-status.js

@@ -306,22 +306,29 @@ function orderedSurfaces(inventory) {
 // (applied rounds only) stayed empty: the artist's finished work looked lost.
 // This is every page with an open round, where it is, since when (the round's
 // last update), and whether it has sat there too long. Waiting for review is
-// the artist's own move and a draft is theirs to finish; a draft is never stuck,
-// and a review is stuck only after 3 days (task 1004777, so its artist is told);
-// a state the reads cannot name always needs to be reviewed.
+// the artist's own move and a draft is theirs to finish: a draft or a page
+// being written is stuck after 7 days and a draft expires after 14 (task
+// 1004901); a review is stuck after 3 days (task 1004777, so its artist is
+// told); a state the reads cannot name always needs to be reviewed.
 // ---------------------------------------------------------------------------
 
 const DAY_MS = 24 * 60 * 60 * 1000;
+// task 1004901: every state names WHO moves it next (waits_on: 'artist' is the
+// round's own artist, 'appliers' the Metic and up builders who apply and land
+// work) and WHEN it is overdue (stuck_after: then it is pushed to that person on
+// Home and in the daily digest). A draft nobody touches also EXPIRES
+// (expires_after): the auto-close sweep abandons it, its words kept on the task.
+const DRAFT_EXPIRES_AFTER = 14 * DAY_MS;
 const IN_FLIGHT = Object.freeze({
-  draft: { word: 'Being written', stuck_after: null },
-  writing: { word: 'Being written', stuck_after: null },
-  words_review: { word: 'Words waiting for review', stuck_after: 3 * DAY_MS },
-  submitted: { word: 'Approved, waiting to be applied', stuck_after: 3 * DAY_MS },
-  applying: { word: 'Being applied', stuck_after: DAY_MS },
+  draft: { word: 'Being written', stuck_after: 7 * DAY_MS, waits_on: 'artist', expires_after: DRAFT_EXPIRES_AFTER },
+  writing: { word: 'Being written', stuck_after: 7 * DAY_MS, waits_on: 'artist' },
+  words_review: { word: 'Words waiting for review', stuck_after: 3 * DAY_MS, waits_on: 'artist' },
+  submitted: { word: 'Approved, waiting to be applied', stuck_after: 3 * DAY_MS, waits_on: 'appliers' },
+  applying: { word: 'Being applied', stuck_after: DAY_MS, waits_on: 'appliers' },
   // task 1004777: a review left 3 days is stuck too, so its artist is told on Home.
-  waiting_for_artist: { word: 'Waiting for your review', stuck_after: 3 * DAY_MS },
-  landing: { word: 'Approved, going live', stuck_after: DAY_MS },
-  unknown: { word: 'Needs to be reviewed', stuck_after: 0 },
+  waiting_for_artist: { word: 'Waiting for your review', stuck_after: 3 * DAY_MS, waits_on: 'artist' },
+  landing: { word: 'Approved, going live', stuck_after: DAY_MS, waits_on: 'appliers' },
+  unknown: { word: 'Needs to be reviewed', stuck_after: 0, waits_on: 'appliers' },
 });
 const IN_FLIGHT_ORDER = ['unknown', 'landing', 'applying', 'submitted', 'waiting_for_artist', 'words_review', 'writing', 'draft'];
 
@@ -344,6 +351,9 @@ function inFlightFor(list, byPage, nowMs) {
       state_word: kind.word,
       since,
       stuck: kind.stuck_after != null && (kind.stuck_after === 0 || (age != null && age > kind.stuck_after)),
+      waits_on: kind.waits_on,
+      due_at: since && kind.stuck_after != null ? new Date(Date.parse(since) + kind.stuck_after).toISOString() : null,
+      expires_at: since && kind.expires_after != null ? new Date(Date.parse(since) + kind.expires_after).toISOString() : null,
       holder: o.holder,
       artist_id: r.artist_id != null ? String(r.artist_id) : null,
     });
@@ -380,8 +390,8 @@ function stuckPageTweaks({ inventory, tasks, now = Date.now() }) {
       state_word: f.state_word,
       since: f.since,
       days: ms == null ? null : Math.max(0, Math.floor(ms / DAY_MS)),
-      // Submitted words (task 1004900) wait on their artist's review, like an applied page.
-      waits_on: f.state === 'waiting_for_artist' || f.state === 'words_review' ? 'artist' : 'appliers',
+      // The state's own owner (task 1004901), one table for the Studio and the pushes.
+      waits_on: f.waits_on,
       artist_id: f.artist_id,
     };
   });
@@ -968,4 +978,6 @@ module.exports = {
   stuckPageTweaks,
   stuckPageTweaksFor,
   stuckDigestText,
+  // task 1004901: when an untouched draft expires (the auto-close sweep reads it).
+  DRAFT_EXPIRES_AFTER,
 };

package/modules/copy-desk/tests/copy_page_auto_close.mjs

@@ -56,6 +56,14 @@ await test('a blank round and an empty batch are the only two that close', () =>
   });
 });
 
+await test('a draft left untouched for two weeks expires; a younger one stays (task 1004901)', () => {
+  const D = 86400000;
+  const at = (days) => round({ description: draft, updated_at: new Date(NOW - days * D).toISOString() });
+  assert.equal(autoClose.closeReason(at(13.9), { now: NOW }), null);
+  assert.equal(autoClose.closeReason(at(14.1), { now: NOW }), 'draft_expired');
+  assert.equal(autoClose.closeReason({ ...at(30), holder_id: '7' }, { now: NOW }), null, 'a held draft is being written, never expired');
+});
+
 await test('the grace period is honoured: a round touched within it stays', () => {
   const t = round({ updated_at: new Date(NOW - 59 * 60_000).toISOString() });
   assert.equal(autoClose.closeReason(t, { now: NOW, graceMs: 60 * 60_000 }), null);

package/modules/copy-desk/tests/copy_page_status.mjs

@@ -257,7 +257,7 @@ ${pages.composeWordsApprovedBlock({ at: ago(9), by: '7' })}`;
     round(2, 'landing:b', { status: 'ready', description: `${pages.roundTaskBody(pg('landing:b'), 1)}\n\n${batch('landing:b')}`, updated_at: ago(1) }),
     round(3, 'landing:c', { status: 'confirmed', updated_at: ago(17) }),
     round(4, 'builders:d', { status: 'completed', grade_passed: true, updated_at: ago(20) }),
-    round(5, 'builders:e', { status: 'active', holder_id: '7', holder_login: 'me', holder_worktree: false, updated_at: ago(30) }),
+    round(5, 'builders:e', { status: 'active', holder_id: '7', holder_login: 'me', holder_worktree: false, updated_at: ago(5) }),
     round(6, 'builders:f', { status: 'ready', updated_at: ago(0.2) }),
     round(7, 'builders:g', { status: 'shipped', shipped_at: ago(3), updated_at: ago(3) }),
     round(8, 'status:h', { status: 'active', holder_id: '8', holder_worktree: true, updated_at: ago(2) }),
@@ -271,7 +271,7 @@ ${pages.composeWordsApprovedBlock({ at: ago(9), by: '7' })}`;
     ['builders:d', 'waiting_for_artist', 'Waiting for your review', true],
     ['landing:b', 'submitted', 'Approved, waiting to be applied', false],
     ['builders:e', 'writing', 'Being written', false],
-  ], 'a shipped round is not in flight; writing is never stuck, and a review left 20 days is (task 1004777)');
+  ], 'a shipped round is not in flight; writing is not overdue before 7 days (task 1004901), and a review left 20 days is (task 1004777)');
   assert.equal(out.in_flight[1].since, ago(17));
   assert.equal(out.in_flight[1].task_id, '3');
   assert.equal(out.pages.find((p) => p.id === 'landing:a').status_label, 'Untweaked', 'the status still counts only what shipped');

package/modules/platform-identity/builder-of-the-week.js

@@ -53,9 +53,27 @@ function crownedWeek(now = new Date()) {
 
 const isoDate = (d) => d.toISOString().slice(0, 10);
 
-// The week's winner among eligible builders, or null. Arithmetic is bigint for the
-// leaderboard's reason: the columns are instance-reported int4.
-async function computeWinner(start, end, pool) {
+// The winner of [start, end) among eligible builders, or null; the week's, and the month's
+// and year's (community-crowns.js). Arithmetic is bigint for the leaderboard's reason: the
+// columns are instance-reported int4. `fromFirstSnapshot` is the YEAR's rule (owner,
+// 2026-10-27): a row with no snapshot before the start, and not first seen inside, counts
+// from its first snapshot inside instead of not at all, since history began in late
+// September 2026 and the rule above would leave that year to new builders alone.
+async function computeWinner(start, end, pool, { fromFirstSnapshot = false } = {}) {
+  const base = (col) => (fromFirstSnapshot
+    ? `COALESCE(b.${col}, CASE WHEN act.first_seen_at >= $1::timestamptz THEN 0 ELSE f.${col} END, 0)`
+    : `COALESCE(b.${col}, 0)`);
+  const firstInside = fromFirstSnapshot
+    ? `
+         LEFT JOIN LATERAL (
+           SELECT s.credits, s.tasks_shipped, s.karma
+             FROM platform_identity_activity_snapshots s
+            WHERE s.client_id = act.client_id AND s.github_id = act.github_id
+              AND s.reported_at > $1::timestamptz AND s.reported_at <= $2::timestamptz
+            ORDER BY s.reported_at ASC, s.id ASC
+            LIMIT 1
+         ) f ON true`
+    : '';
   const { rows } = await pool.query(
     `WITH act AS (
        SELECT a.client_id, a.github_id, a.first_seen_at, pa.handle, pa.github_login
@@ -64,9 +82,9 @@ async function computeWinner(start, end, pool) {
         WHERE ${rollupVisibleSql('pa')}
      ), per_project AS (
        SELECT act.github_id, act.handle, act.github_login,
-              COALESCE(e.credits, 0)::bigint - COALESCE(b.credits, 0)             AS credits,
-              COALESCE(e.tasks_shipped, 0)::bigint - COALESCE(b.tasks_shipped, 0) AS tasks_shipped,
-              COALESCE(e.karma, 0)::bigint - COALESCE(b.karma, 0)                 AS karma
+              COALESCE(e.credits, 0)::bigint - ${base('credits')}             AS credits,
+              COALESCE(e.tasks_shipped, 0)::bigint - ${base('tasks_shipped')} AS tasks_shipped,
+              COALESCE(e.karma, 0)::bigint - ${base('karma')}                 AS karma
          FROM act
          LEFT JOIN LATERAL (
            SELECT s.credits, s.tasks_shipped, s.karma
@@ -83,8 +101,8 @@ async function computeWinner(start, end, pool) {
               AND s.reported_at <= $1::timestamptz
             ORDER BY s.reported_at DESC, s.id DESC
             LIMIT 1
-         ) b ON true
-        WHERE b.credits IS NOT NULL OR act.first_seen_at >= $1::timestamptz
+         ) b ON true${firstInside}
+        WHERE b.credits IS NOT NULL OR act.first_seen_at >= $1::timestamptz${fromFirstSnapshot ? ' OR f.credits IS NOT NULL' : ''}
      )
      SELECT github_id, sum(credits)::bigint AS credits, sum(tasks_shipped)::bigint AS tasks_shipped
        FROM per_project
@@ -98,10 +116,11 @@ async function computeWinner(start, end, pool) {
   return rows[0] || null;
 }
 
-// One crowning per week per process: concurrent first reads share it, and a week
-// already on record is not asked about again.
+// One crowning per period per process: concurrent first reads share it, and a period
+// already on record is not asked about again. Keyed 'week:', 'month:' or 'year:' plus the
+// period's first day, so community-crowns.js shares it.
 const crowning = new Map();
-let lastCrowned = null;
+const crowned = new Map(); // key → the pool it was crowned on
 
 async function crownWeek(start, end, pool) {
   const week = isoDate(start);
@@ -119,22 +138,27 @@ async function crownWeek(start, end, pool) {
   );
 }
 
-function ensureCrowned(start, end, pool) {
-  const week = isoDate(start);
-  if (lastCrowned && lastCrowned.week === week && lastCrowned.pool === pool) return Promise.resolve();
-  const inFlight = crowning.get(week);
+// Runs `crown()` unless `key` is already crowned on this pool; a failed one is not
+// remembered, so the next read tries again.
+function crownOnce(key, pool, crown) {
+  if (crowned.get(key) === pool) return Promise.resolve();
+  const inFlight = crowning.get(key);
   if (inFlight && inFlight.pool === pool) return inFlight.promise;
   const entry = { pool };
-  entry.promise = crownWeek(start, end, pool)
-    .then(() => { lastCrowned = { week, pool }; })
-    .finally(() => { if (crowning.get(week) === entry) crowning.delete(week); });
-  crowning.set(week, entry);
+  entry.promise = crown()
+    .then(() => { crowned.set(key, pool); })
+    .finally(() => { if (crowning.get(key) === entry) crowning.delete(key); });
+  crowning.set(key, entry);
   return entry.promise;
 }
 
+function ensureCrowned(start, end, pool) {
+  return crownOnce(`week:${isoDate(start)}`, pool, () => crownWeek(start, end, pool));
+}
+
 function clearCrownMemo() {
   crowning.clear();
-  lastCrowned = null;
+  crowned.clear();
 }
 
 // readBuilderOfTheWeek — crowns the last full week if nobody has yet, then reads it and
@@ -177,4 +201,8 @@ module.exports = {
   crownedWeek,
   clearCrownMemo,
   ARCHIVE_WEEKS,
+  // for community-crowns.js (the month and the year)
+  computeWinner,
+  crownOnce,
+  isoDate,
 };

package/modules/platform-identity/community-crowns.js

@@ -0,0 +1,176 @@
+// modules/platform-identity/community-crowns.js — the builders of the week, the month and
+// the year, the read behind GET /community/crowns for the hub's /community page (task
+// 1004902, goal 1000110). The week is builder-of-the-week.js's; this file adds the other two
+// and answers all three at once.
+//
+// THE RULE is the week's (owner, 2026-10-27): of the builders the leaderboard may show
+// (rollupVisibleSql), the most credits across every project in the period among those who
+// shipped at least one work in it; ties to works, then karma, then handle/login. Read from
+// the snapshot history through builder-of-the-week.js computeWinner, never the live rows.
+//
+// THE MONTH is the last full calendar month (UTC), crowned at the first read on or after
+// the 1st and pinned in platform_identity_period_features (migration 033), exactly as the
+// week is: ON CONFLICT DO NOTHING, never updated, an empty month recorded too. A month that
+// began before snapshot history did is not crowned at all (it would be "nobody" for want of
+// data, not of work); the answer names the day the first month will be.
+//
+// THE YEAR is live: the leader from 1 January (UTC) to now, recomputed at most every 30s. History
+// began in late September 2026, so the year counts a row with no snapshot before 1 January
+// from its first snapshot inside it (computeWinner's fromFirstSnapshot), and `since` says
+// when history began while that is inside the year. The first read on or after 1 January
+// crowns the year that ended, by the same rule, and `last` shows it.
+//
+// WHO IS SHOWN is decided again on every read, as for the week: a pinned winner who has
+// since hidden or gone private is drawn nowhere and their period goes to nobody else (spec
+// D8). Viewer-independent; github_id never crosses the projection.
+'use strict';
+
+const { pool: defaultPool } = require('../../src/module-api');
+const { rollupVisibleSql } = require('./account-visibility');
+const { readBuilderOfTheWeek, computeWinner, crownOnce, isoDate } = require('./builder-of-the-week');
+
+const monthStart = (y, m) => new Date(Date.UTC(y, m, 1));
+
+// The month the crown covers at `now`: the last full month before `now`'s own.
+function crownedMonth(now = new Date()) {
+  const end = monthStart(now.getUTCFullYear(), now.getUTCMonth());
+  return { start: monthStart(now.getUTCFullYear(), now.getUTCMonth() - 1), end };
+}
+
+// The first month that began at or after `history`: the first one there is data for.
+function firstFullMonth(history) {
+  const m = monthStart(history.getUTCFullYear(), history.getUTCMonth());
+  return m.getTime() === history.getTime() ? m : monthStart(history.getUTCFullYear(), history.getUTCMonth() + 1);
+}
+
+// When snapshot history began: the first snapshot ever written (its primary key, so one
+// index probe). Never changes once there is one, so it is remembered per pool.
+const historyMemo = new Map();
+async function historyStart(pool) {
+  if (historyMemo.has(pool)) return historyMemo.get(pool);
+  const { rows } = await pool.query(
+    'SELECT reported_at FROM platform_identity_activity_snapshots ORDER BY id ASC LIMIT 1',
+  );
+  const at = rows[0] ? new Date(rows[0].reported_at) : null;
+  if (at) historyMemo.set(pool, at);
+  return at;
+}
+
+async function crownPeriod(period, start, end, pool, opts) {
+  const day = isoDate(start);
+  const { rows } = await pool.query(
+    'SELECT 1 FROM platform_identity_period_features WHERE period = $1 AND period_start = $2::date',
+    [period, day],
+  );
+  if (rows.length) return;
+  const winner = await computeWinner(start, end, pool, opts);
+  await pool.query(
+    `INSERT INTO platform_identity_period_features (period, period_start, github_id, credits_delta, ships_delta)
+     VALUES ($1, $2::date, $3::bigint, $4::bigint, $5::bigint)
+     ON CONFLICT (period, period_start) DO NOTHING`,
+    [period, day, winner ? winner.github_id : null, winner ? winner.credits : 0, winner ? winner.tasks_shipped : 0],
+  );
+}
+
+const shown = (r, credits, ships) => ({
+  handle: r.handle,
+  github_login: r.github_login,
+  display_name: r.display_name,
+  avatar_url: r.avatar_url,
+  credits: Number(credits),
+  tasks_shipped: Number(ships),
+});
+
+// A crowned period's winner, if they may still be shown.
+async function readCrowned(period, start, pool) {
+  const { rows } = await pool.query(
+    `SELECT f.credits_delta, f.ships_delta, pa.handle, pa.github_login, pa.display_name, pa.avatar_url
+       FROM platform_identity_period_features f
+       JOIN platform_identity_accounts pa ON pa.github_id = f.github_id
+      WHERE f.period = $1 AND f.period_start = $2::date
+        AND ${rollupVisibleSql('pa')}`,
+    [period, isoDate(start)],
+  );
+  return rows[0] ? shown(rows[0], rows[0].credits_delta, rows[0].ships_delta) : null;
+}
+
+async function readMonth(now, history, pool) {
+  const { start, end } = crownedMonth(now);
+  const out = { start: isoDate(start), end: isoDate(end), winner: null, first_crown: null };
+  if (!history) return out;
+  if (start < history) {
+    const first = firstFullMonth(history);
+    out.first_crown = isoDate(monthStart(first.getUTCFullYear(), first.getUTCMonth() + 1));
+    return out;
+  }
+  await crownOnce(`month:${out.start}`, pool, () => crownPeriod('month', start, end, pool));
+  out.winner = await readCrowned('month', start, pool);
+  return out;
+}
+
+// The year so far is the one answer computed on a read rather than pinned, so its leader is
+// memoised per pool for LEADER_TTL_MS, as the leaderboard memoises its totals; whether that
+// leader may be shown is still asked on every read, so a hide beats the memo.
+const LEADER_TTL_MS = 30 * 1000;
+const leaderMemo = new Map(); // pool → { start, at, leader }
+async function yearLeader(start, now, pool) {
+  const m = leaderMemo.get(pool);
+  const at = now.getTime();
+  if (m && m.start === isoDate(start) && at >= m.at && at - m.at < LEADER_TTL_MS) return m.leader;
+  const leader = await computeWinner(start, now, pool, { fromFirstSnapshot: true });
+  leaderMemo.set(pool, { start: isoDate(start), at, leader });
+  return leader;
+}
+
+async function readYear(now, history, pool) {
+  const start = monthStart(now.getUTCFullYear(), 0);
+  const out = { start: isoDate(start), since: isoDate(history && history > start ? history : start), winner: null, last: null };
+  if (!history) return out;
+  const leader = await yearLeader(start, now, pool);
+  if (leader) {
+    const { rows } = await pool.query(
+      `SELECT pa.handle, pa.github_login, pa.display_name, pa.avatar_url
+         FROM platform_identity_accounts pa
+        WHERE pa.github_id = $1::bigint AND ${rollupVisibleSql('pa')}`,
+      [leader.github_id],
+    );
+    if (rows[0]) out.winner = shown(rows[0], leader.credits, leader.tasks_shipped);
+  }
+  if (history < start) {
+    const prev = monthStart(now.getUTCFullYear() - 1, 0);
+    await crownOnce(`year:${isoDate(prev)}`, pool, () => crownPeriod('year', prev, start, pool, { fromFirstSnapshot: true }));
+    const winner = await readCrowned('year', prev, pool);
+    if (winner) out.last = { start: isoDate(prev), winner };
+  }
+  return out;
+}
+
+// readCrowns — { week: { start, end, winner }, month: { start, end, winner, first_crown },
+// year: { start, since, winner, last } }: dates YYYY-MM-DD, an end the day the period
+// closed on, a winner null when nobody is to be shown. `now` is injectable for tests.
+async function readCrowns({ now = new Date(), pool = defaultPool } = {}) {
+  const history = historyStart(pool);
+  const [week, month, year] = await Promise.all([
+    readBuilderOfTheWeek({ now, pool }),
+    history.then((h) => readMonth(now, h, pool)),
+    history.then((h) => readYear(now, h, pool)),
+  ]);
+  const w = week.winner;
+  return {
+    week: { start: week.week.start, end: week.week.end, winner: w ? shown(w, w.credits, w.tasks_shipped) : null },
+    month,
+    year,
+  };
+}
+
+function clearCrownsMemo() {
+  historyMemo.clear();
+  leaderMemo.clear();
+}
+
+module.exports = {
+  readCrowns,
+  crownedMonth,
+  clearCrownsMemo,
+  LEADER_TTL_MS,
+};

package/modules/platform-identity/community-leaderboard.js

@@ -2,7 +2,7 @@
 // leaderboard (D3, docs/specs/bongos-v1-community-tab.md; task 1002978, goal
 // 1000110 CT2): "who earned the most across every project, this week / month /
 // year / ever", optionally narrowed to one discipline. The read behind
-// GET /community/leaderboard, for the hub's /community page (task 1003363).
+// GET /community/leaderboard, for the hub's /community/leaderboard page (tasks 1003363, 1004902).
 //
 // WHO: rollupVisibleSql — active + public + NOT hide_stats, the privacy matrix's
 // NUMBERS predicate, imported from account-visibility.js and never restated. A

package/modules/platform-identity/migrations/platform_identity_033_period_features.sql

@@ -0,0 +1,43 @@
+-- platform_identity_033_period_features.sql — Builder of the month and of the year, one
+-- row per crowned month or year (task 1004902; the week is migration 032's own table).
+--
+-- WHY. The hub's /community page shows a builder of the week, of the month and of the
+-- year (owner, 2026-10-27). The month is decided like the week: the first read of
+-- GET /community/crowns after the 1st (UTC) decides the month that just ended and writes
+-- it here. The year is shown live as "so far", and the first read on or after 1 January
+-- decides the year that just ended and writes it here. The row is what pins the crown:
+-- a late report or a builder going public cannot take a period already decided.
+--
+-- THE SHAPE CARRIES THE RULES (owner, 2026-10-27):
+--   * THE KEY IS (period, period_start), the first day (UTC) of the month or year, so a
+--     period has one row. The writer is INSERT ... ON CONFLICT DO NOTHING, and nothing
+--     updates a row: the first decision stands.
+--   * github_id IS NULL when nobody qualified. The empty period is recorded too, so it
+--     stays empty.
+--   * credits_delta / ships_delta are the period's numbers as decided, bigint like the
+--     leaderboard's arithmetic (builder-of-the-week.js computeWinner).
+--   * NO FOREIGN KEY to platform_identity_accounts, like every github_id column in this
+--     module. Whether a winner may be SHOWN is decided at read time by rollupVisibleSql
+--     (account-visibility.js), never by this row.
+--
+-- NOTHING HERE IS AUTHORITY (ADR 0016 / ADR 0141): descriptive, public analytics.
+--
+-- Additive + platform_identity_-namespaced (ADR 0083 §5). A CREATE only, so the previous
+-- release still runs against this schema. Idempotent.
+
+BEGIN;
+
+CREATE TABLE IF NOT EXISTS platform_identity_period_features (
+  period        text NOT NULL CHECK (period IN ('month', 'year')),
+  period_start  date NOT NULL,
+  github_id     bigint,
+  credits_delta bigint NOT NULL,
+  ships_delta   bigint NOT NULL,
+  crowned_at    timestamptz NOT NULL DEFAULT now(),
+  PRIMARY KEY (period, period_start)
+);
+
+COMMENT ON TABLE platform_identity_period_features IS
+  'Builder of the month and of the year, one row per period, keyed on its first day (UTC) (task 1004902). Written once by the first read after the period ends, never updated; github_id NULL = nobody qualified. Whether a winner is shown is decided at read time by the leaderboard''s eligibility predicate.';
+
+COMMIT;

package/modules/platform-identity/routes/community-leaderboard.js

@@ -1,13 +1,15 @@
 // modules/platform-identity/routes/community-leaderboard.js — GET
 // /community/leaderboard, the PUBLIC windowed leaderboard behind the hub's
-// /community page (D3, docs/specs/bongos-v1-community-tab.md; task 1002978,
+// /community/leaderboard page (D3, docs/specs/bongos-v1-community-tab.md; task 1002978,
 // goal 1000110 CT2). The sibling of routes/community-search.js: same module,
 // same public posture. Who appears and how a window is counted live entirely in
 // ../community-leaderboard.js; this file is the HTTP shell — validation, the
 // per-IP read cap, the response envelope. It never reads a session, so the
 // board is the same for every viewer.
 // It also serves GET /community/builder-of-the-week (spec D5, task 1002981), the
-// board's weekly crown, from ../builder-of-the-week.js on the same terms.
+// board's weekly crown, from ../builder-of-the-week.js on the same terms, and GET
+// /community/crowns (task 1004902), the week, month and year for the hub's /community
+// page, from ../community-crowns.js.
 //
 // Reaches core only through the doorway (ADR 0083).
 'use strict';
@@ -16,6 +18,7 @@ const express = require('express');
 const api = require('../../../src/module-api');
 const leaderboard = require('../community-leaderboard');
 const builderOfTheWeek = require('../builder-of-the-week');
+const communityCrowns = require('../community-crowns');
 const { createReadRateLimit } = require('../read-rate-limit');
 
 const { pool, corsPublicGet } = api;
@@ -26,6 +29,8 @@ const leaderboardReadRateLimit = createReadRateLimit({ scope: READ_RATE_SCOPE, l
 // Builder of the Week spends its own budget (ADR 0209: never a shared one).
 const WEEK_READ_RATE_SCOPE = 'builder-of-the-week-read';
 const weekReadRateLimit = createReadRateLimit({ scope: WEEK_READ_RATE_SCOPE, limit: READ_RATE_LIMIT });
+const CROWNS_READ_RATE_SCOPE = 'community-crowns-read';
+const crownsReadRateLimit = createReadRateLimit({ scope: CROWNS_READ_RATE_SCOPE, limit: READ_RATE_LIMIT });
 
 module.exports = function communityLeaderboardRoutes() {
   const router = express.Router();
@@ -87,7 +92,24 @@ module.exports = function communityLeaderboardRoutes() {
     }
   });
 
+  router.use('/community/crowns', corsPublicGet('/community/crowns'));
+
+  // rank: public — the builders of the week, the month and the year (task 1004902): the
+  // week and month as crowned, the year so far. Takes no parameters; the first read after
+  // a week, month or year ends also records it (one row per period). Viewer-independent;
+  // no-store so a winner who hides leaves the page on the next read (ADR 0171 D5).
+  router.get('/community/crowns', crownsReadRateLimit, async (req, res) => {
+    try {
+      const out = await communityCrowns.readCrowns({ pool });
+      res.set('Cache-Control', 'no-store');
+      res.json(out);
+    } catch (err) {
+      api.logger('platform-identity').error({ err: err && err.message }, 'GET /community/crowns failed');
+      res.fail('community_crowns_failed', { status: 500, message: 'internal error' });
+    }
+  });
+
   return router;
 };
 
-module.exports._internals = { READ_RATE_LIMIT, READ_RATE_SCOPE, WEEK_READ_RATE_SCOPE };
+module.exports._internals = { READ_RATE_LIMIT, READ_RATE_SCOPE, WEEK_READ_RATE_SCOPE, CROWNS_READ_RATE_SCOPE };

package/modules/public-landing/public/account.html

@@ -117,7 +117,8 @@
 <div class="menuBand" id="menuCommunity" data-menu="community" hidden>
   <div class="bandIn">
     <ul class="bandRow">
-      <li class="bandCell"><a class="bandT" href="/community">Leaderboard</a><span class="bandC">who earned the most, across every project</span></li>
+      <li class="bandCell"><a class="bandT" href="/community">Community home</a><span class="bandC">the builders of the week, month and year</span></li>
+      <li class="bandCell"><a class="bandT" href="/community/leaderboard">Leaderboard</a><span class="bandC">who earned the most, across every project</span></li>
       <li class="bandCell"><a class="bandT" href="/community/week">Builder of the week</a><span class="bandC">the top earner of each week, and how it is chosen</span></li>
       <li class="bandCell"><a class="bandT" href="/community/find">Find a builder</a><span class="bandC">anyone building here, by name or role</span></li>
       <li class="bandCell"><a class="bandT" href="/community/recruiters">Open to recruiters</a><span class="bandC">who is open to recruiting, for project owners</span></li>
@@ -132,7 +133,7 @@
       <li class="bandCell"><a class="bandT" href="/projects?view=map&amp;sub=table">Table</a><span class="bandC">the same projects as rows</span></li>
       <li class="bandCell" id="mineCell"><a class="bandT" href="/projects?view=mine">Your projects</a><span class="bandC">the ones you own</span></li>
       <li class="bandCell"><a class="bandT" href="/projects?view=new">New project</a><span class="bandC">five questions and a home</span></li>
-      <li class="bandCell bandFold"><a class="bandT" href="/community">Leaderboard</a><span class="bandC">who earned the most, across every project</span></li><li class="bandCell bandFold"><a class="bandT" href="/community/week">Builder of the week</a><span class="bandC">the top earner of each week, and how it is chosen</span></li><li class="bandCell bandFold"><a class="bandT" href="/community/find">Find a builder</a><span class="bandC">anyone building here, by name or role</span></li><li class="bandCell bandFold"><a class="bandT" href="/community/recruiters">Open to recruiters</a><span class="bandC">who is open to recruiting, for project owners</span></li><li class="bandCell bandFold knowCell" hidden><a class="bandT" href="/connections#connSuggest">Builders you may know</a><span class="bandC">connections or projects in common</span></li>
+      <li class="bandCell bandFold"><a class="bandT" href="/community">Community home</a><span class="bandC">the builders of the week, month and year</span></li><li class="bandCell bandFold"><a class="bandT" href="/community/leaderboard">Leaderboard</a><span class="bandC">who earned the most, across every project</span></li><li class="bandCell bandFold"><a class="bandT" href="/community/week">Builder of the week</a><span class="bandC">the top earner of each week, and how it is chosen</span></li><li class="bandCell bandFold"><a class="bandT" href="/community/find">Find a builder</a><span class="bandC">anyone building here, by name or role</span></li><li class="bandCell bandFold"><a class="bandT" href="/community/recruiters">Open to recruiters</a><span class="bandC">who is open to recruiting, for project owners</span></li><li class="bandCell bandFold knowCell" hidden><a class="bandT" href="/connections#connSuggest">Builders you may know</a><span class="bandC">connections or projects in common</span></li>
     </ul>
   </div>
 </div>

package/modules/public-landing/public/community-crowns-first.states.json

@@ -0,0 +1,15 @@
+{
+  "_": "The community home before the first month is crowned (task 1004902; fixtures/community-crowns-first.json): what the hub shows in late October 2026. September began before snapshot history did, so the month card names the day October is crowned; the year counts since history began.",
+  "page": "/community",
+  "surface": "public-landing",
+  "modes": ["dark"],
+  "modeQuery": false,
+  "stub": { "fixtures": { "community-crowns": "community-crowns-first" } },
+  "ignoreRequests": ["/api/(gds|bongos)/me$", "/my-projects", "/me/guild-", "/scouting$"],
+  "ignoreConsole": ["/api/(gds|bongos)/me", "/scouting", "\\b40[13]\\b", "Unauthorized", "Forbidden"],
+  "ignoreControls": [".vh"],
+  "states": {
+    "out-home-first": { "auth": false, "actions": [["wait", 400]], "expect": { "visible": ["#home", "#homeCrowns", "#crownWeek .crownName", "#crownMonth .commMsg", "#crownYear .crownName"], "hidden": ["#homeFailed", "#crownYearLast"], "text": [["#crownWeekWhen", "19–25 Oct 2026"], ["#crownMonthWhen", "September 2026"], ["#crownMonth .commMsg", "The first builder of the month is named on 1 Nov 2026."], ["#crownYearWhen", "2026 so far, since 27 Sep 2026"], ["#crownYear .crownName", "Priya Nair"]] } }
+  },
+  "reducedMotion": { "auth": false, "actions": [["wait", 400]] }
+}

package/modules/public-landing/public/community-crowns-new-year.states.json

@@ -0,0 +1,15 @@
+{
+  "_": "The community home in early January 2027 (task 1004902; fixtures/community-crowns-new-year.json): 2026 crowned for good and named under the new year so far; history began before 2027, so no 'since'.",
+  "page": "/community",
+  "surface": "public-landing",
+  "modes": ["dark"],
+  "modeQuery": false,
+  "stub": { "fixtures": { "community-crowns": "community-crowns-new-year" } },
+  "ignoreRequests": ["/api/(gds|bongos)/me$", "/my-projects", "/me/guild-", "/scouting$"],
+  "ignoreConsole": ["/api/(gds|bongos)/me", "/scouting", "\\b40[13]\\b", "Unauthorized", "Forbidden"],
+  "ignoreControls": [".vh"],
+  "states": {
+    "out-home-new-year": { "auth": false, "actions": [["wait", 400]], "expect": { "visible": ["#home", "#homeCrowns", "#crownYearLast"], "hidden": ["#homeFailed"], "text": [["#crownMonthWhen", "December 2026"], ["#crownYearWhen", "2027 so far"], ["#crownYear .crownName", "Lin Wei"], ["#crownYearLast", "2026: Maximiliana van der Berghe-Lindqvist, 11,250 credits"]] } }
+  },
+  "reducedMotion": { "auth": false, "actions": [["wait", 400]] }
+}

package/modules/public-landing/public/community-crowns-none.states.json

@@ -0,0 +1,15 @@
+{
+  "_": "The community home with no one to show (task 1004902; fixtures/community-crowns-none.json): nobody qualified, or each winner hides their numbers — the two look the same (spec D8). Each card says so in one line.",
+  "page": "/community",
+  "surface": "public-landing",
+  "modes": ["dark"],
+  "modeQuery": false,
+  "stub": { "fixtures": { "community-crowns": "community-crowns-none" } },
+  "ignoreRequests": ["/api/(gds|bongos)/me$", "/my-projects", "/me/guild-", "/scouting$"],
+  "ignoreConsole": ["/api/(gds|bongos)/me", "/scouting", "\\b40[13]\\b", "Unauthorized", "Forbidden"],
+  "ignoreControls": [".vh"],
+  "states": {
+    "out-home-none": { "auth": false, "actions": [["wait", 400]], "expect": { "visible": ["#home", "#homeCrowns", "#crownWeek .commMsg", "#crownMonth .commMsg", "#crownYear .commMsg"], "hidden": ["#homeFailed", "#crownYearLast"], "count": [["#homeCrowns .crownName", 0]], "text": [["#crownWeek .commMsg", "No builder of the week for 26 Oct – 1 Nov 2026."], ["#crownMonth .commMsg", "No builder of the month for October 2026."], ["#crownYear .commMsg", "No builder of 2026 yet."]] } }
+  },
+  "reducedMotion": { "auth": false, "actions": [["wait", 400]] }
+}