@bongos/core 1.24.4 → 1.24.6

package/docs/page-readings.json

@@ -5,7 +5,7 @@
   "adr": "0341 D3",
   "reread": "node scripts/bongos/page-reader.js --stale",
   "how": ["Generated by node scripts/bongos/page-reader.js (BV2.TW04, task 1004315; ADR 0341 D3). Do not hand-edit.","One entry per page of docs/page-inventory.json. Lines are in page order: the default state first, and a line only another state shows sits where that state shows it, with its state named.","placement: placed = a docs/copy-registry.json row renders it (file, line, string_id); shared = shell text every page of the surface carries (top bar, sidebar, footer), with its row when the registry has one; unplaced = the registry cannot place it (a rewrite becomes an engineer task, ADR 0341 D4).","text keeps {…} where the registry row has a hole, or where a value the page read from its API was filled in. A string that is only such data is counted under omitted.data, not listed.","reading_hash is over the non-shared lines (key, section, text); files_hash is over the page's inventory files. --check compares files_hash only and never opens a browser.","Rendered through the hall-preview harness (hall) and the ui-design kit stub (landing, status), at 1280x800 with the clock pinned, so a reading is the fixture world's page."],
-  "counts": {"pages":48,"lines":5456,"placed":1683,"shared":427,"unplaced":3346,"omitted_data":3731},
+  "counts": {"pages":48,"lines":5464,"placed":1686,"shared":427,"unplaced":3351,"omitted_data":3732},
   "pages": [
     {
       "id": "builders:ai-studio",
@@ -4300,7 +4300,7 @@
       "surface": "builders",
       "title": "Tweak a page",
       "states_read": ["doc","typed","chrome","submitted","picking","out"],
-      "files_hash": "a2b68a2fa0504a35",
+      "files_hash": "6ea8b7ad13d0121d",
       "reading_hash": "711c540ebc7ef977",
       "counts": {"lines":23,"placed":15,"shared":1,"unplaced":7},
       "omitted": {"data":35},
@@ -4568,11 +4568,11 @@
       "id": "landing:account",
       "surface": "landing",
       "title": "{{productName}} — Your account",
-      "states_read": ["out","in","in-projects-band","in-profile-band","in-building","in-privacy","in-private"],
-      "files_hash": "17592a0e1f31e6f5",
-      "reading_hash": "2d52a85995d05f90",
-      "counts": {"lines":92,"placed":43,"shared":12,"unplaced":37},
-      "omitted": {"data":9},
+      "states_read": ["out","in","in-projects-band","in-profile-band","in-building","in-ways","in-privacy","in-private"],
+      "files_hash": "62466bd448aefdf7",
+      "reading_hash": "a50818bf29267425",
+      "counts": {"lines":100,"placed":46,"shared":12,"unplaced":42},
+      "omitted": {"data":10},
       "notes": [],
       "lines": [
         {"key":"L0001","section":"top bar","text":"Community","placement":"shared"},
@@ -4618,55 +4618,63 @@
         {"key":"L0041","section":"your handle","text":"your-handle","placement":"unplaced","attr":"placeholder","state":"in"},
         {"key":"L0042","section":"your handle","text":"Lowercase letters, numbers and hyphens, up to 39. You can change it once a week, and your old handle keeps leading to you until you change it again.","placement":"placed","file":"modules/public-landing/public/account.html","line":211,"string_id":"5ceffa7b9d7e","state":"in"},
         {"key":"L0043","section":"your handle","text":"change handle","placement":"placed","file":"modules/public-landing/public/account.html","line":212,"string_id":"0a22c9a537b4","state":"in"},
-        {"key":"L0044","section":"who can find you","text":"who can find you","placement":"placed","file":"modules/public-landing/public/account.html","line":224,"string_id":"7322eee6b8b4","state":"in"},
-        {"key":"L0045","section":"who can find you","text":"Your profile page can be public or private, and recruiters are let in separately — so a private profile can still be reachable for work, and a public one can stay out of recruiting entirely.","placement":"placed","file":"modules/public-landing/public/account.html","line":225,"string_id":"38f40fb26117","state":"in"},
-        {"key":"L0046","section":"who can find you","text":"Your profile page","placement":"placed","file":"modules/public-landing/public/account.html","line":228,"string_id":"2df3e63e4761","state":"in"},
-        {"key":"L0047","section":"who can find you","text":"Public","placement":"unplaced","state":"in"},
-        {"key":"L0048","section":"who can find you","text":"Anyone find you.","placement":"placed","file":"modules/public-landing/public/account.html","line":230,"string_id":"525a9aa1dd71","state":"in"},
-        {"key":"L0049","section":"who can find you","text":"Private","placement":"unplaced","state":"in"},
-        {"key":"L0050","section":"who can find you","text":"you are a ninja. Private hides the page from everyone — including you. You see your record here.","placement":"placed","file":"modules/public-landing/public/account.html","line":231,"string_id":"8caf52240833","state":"in"},
-        {"key":"L0051","section":"who can find you","text":"Every guild you belong to counts your numbers in its rounded totals unless you leave them out — even while your profile page is {…}. They are never shown on their own: only inside totals rounded down to a band (10+, 20+, 50+ …) and counted once a week. Each guild’s page has the switch:","placement":"unplaced","state":"in-privacy"},
-        {"key":"L0052","section":"who can find you","text":"· counted","placement":"unplaced","state":"in-privacy"},
-        {"key":"L0053","section":"who can find you","text":"· left out","placement":"unplaced","state":"in-privacy"},
-        {"key":"L0054","section":"who can find you","text":"Recruiters","placement":"unplaced","state":"in"},
-        {"key":"L0055","section":"who can find you","text":"Can find me","placement":"placed","file":"modules/public-landing/public/account.html","line":238,"string_id":"50d493f08964","state":"in"},
-        {"key":"L0056","section":"who can find you","text":"Recruiters looking for builders can find you.","placement":"placed","file":"modules/public-landing/public/account.html","line":238,"string_id":"604f5274ae98","state":"in"},
-        {"key":"L0057","section":"who can find you","text":"Can’t find me","placement":"placed","file":"modules/public-landing/public/account.html","line":239,"string_id":"48d721eb2ed7","state":"in"},
-        {"key":"L0058","section":"who can find you","text":"You stay out of the recruiting directory and a recruiter’s look-up.","placement":"placed","file":"modules/public-landing/public/account.html","line":239,"string_id":"af2177106d7c","state":"in"},
-        {"key":"L0059","section":"who can find you","text":"Because your cross-project record is hidden, they will see your name and your picture, and nothing else. This is the one thing a recruiter can see while your profile page is {…}. Turning this off removes you from both recruiting surfaces — the recruiting directory, and a recruiter’s look-up of one {…} — straight away.","placement":"unplaced","state":"in-private"},
-        {"key":"L0060","section":"who can find you","text":"They will see your name, your picture, your roles, and whether you have been {…} in the last 30 days — never your {…}, works shipped, karma, or the projects you build on. This is the one thing a recruiter can see while your profile page is {…}. Turning this off removes you from both recruiting surfaces — the recruiting directory, and a recruiter’s look-up of one {…} — straight away.","placement":"unplaced","state":"in-privacy"},
-        {"key":"L0061","section":"who can find you","text":"They will see your name, your picture, your roles, and whether you have been {…} in the last 30 days — never your {…}, works shipped, karma, or the projects you build on. Turning this off removes you from both recruiting surfaces — the recruiting directory, and a recruiter’s look-up of one {…} — straight away.","placement":"unplaced","state":"in"},
-        {"key":"L0062","section":"who can find you","text":"· For now this follows your profile page setting.","placement":"unplaced","state":"in"},
-        {"key":"L0063","section":"who can find you","text":"Your profile page setting applies now — private already answers “not found” everywhere your profile is read. Recruiter discoverability applies now too — switching it off removes you from both recruiting surfaces immediately, and back on puts you there again.","placement":"placed","file":"modules/public-landing/public/account.html","line":243,"string_id":"e0d6e4196161","state":"in"},
-        {"key":"L0064","section":"who can find you","text":"save","placement":"unplaced","state":"in"},
-        {"key":"L0065","section":"your record","text":"your record","placement":"placed","file":"modules/public-landing/public/account.html","line":255,"string_id":"b494287ce724","state":"in"},
-        {"key":"L0066","section":"your record","text":"Your track record across every project you build on. Hiding it takes effect immediately everywhere — your profile, the recruiting directory, and a recruiter’s look-up of one builder.","placement":"placed","file":"modules/public-landing/public/account.html","line":256,"string_id":"f18600e9cff1","state":"in"},
-        {"key":"L0067","section":"your record","text":"No cross-project activity reported yet. Your profile is not published yet; it publishes after your next sign-in.","placement":"unplaced","state":"in-private"},
-        {"key":"L0068","section":"your record","text":"Your record: 3 projects · 1000 {…} · 19 works shipped · 10 karma.","placement":"unplaced","state":"in"},
-        {"key":"L0069","section":"your record","text":"Cross-project Record","placement":"placed","file":"modules/public-landing/public/account.html","line":260,"string_id":"d5c4a0e0f864","state":"in"},
-        {"key":"L0070","section":"your record","text":"Show it","placement":"placed","file":"modules/public-landing/public/account.html","line":262,"string_id":"960b894c0ea1","state":"in"},
-        {"key":"L0071","section":"your record","text":"Your stats appear on your profile and in the directories.","placement":"placed","file":"modules/public-landing/public/account.html","line":262,"string_id":"edf1c4f5e0c5","state":"in"},
-        {"key":"L0072","section":"your record","text":"Hide it","placement":"placed","file":"modules/public-landing/public/account.html","line":263,"string_id":"ccd4861996eb","state":"in"},
-        {"key":"L0073","section":"your record","text":"Your stats are hidden.","placement":"placed","file":"modules/public-landing/public/account.html","line":263,"string_id":"44c8b76631bf","state":"in"},
-        {"key":"L0074","section":"your record","text":"Every guild you belong to counts your numbers in its rounded totals unless you leave them out — even while your record is hidden. They are never shown on their own: only inside totals rounded down to a band (10+, 20+, 50+ …) and counted once a week. Each guild’s page has the switch:","placement":"unplaced","state":"in-private"},
-        {"key":"L0075","section":"your record","text":"· counted","placement":"unplaced","state":"in-private"},
-        {"key":"L0076","section":"your record","text":"· left out","placement":"unplaced","state":"in-private"},
-        {"key":"L0077","section":"your record","text":"save","placement":"unplaced","state":"in"},
-        {"key":"L0078","section":"projects you build on","text":"projects you build on","placement":"placed","file":"modules/public-landing/public/account.html","line":280,"string_id":"f8aa3ff34a10","state":"in"},
-        {"key":"L0079","section":"projects you build on","text":"The projects you have joined as a builder. Only you see this list.","placement":"placed","file":"modules/public-landing/public/account.html","line":281,"string_id":"d466ee6b6e30","state":"in"},
-        {"key":"L0080","section":"projects you build on","text":"example.com","placement":"unplaced","state":"in"},
-        {"key":"L0081","section":"projects you build on","text":"Leave","placement":"unplaced","state":"in","occurrences":2},
-        {"key":"L0082","section":"projects you build on","text":"{…}-circles.cloudbongos.com","placement":"unplaced","state":"in"},
-        {"key":"L0083","section":"footer","text":"A non-profit, capture-resistant commons.","placement":"shared","file":"modules/public-landing/public/account.html","line":292,"string_id":"afe83bbbd0d4","state":"in","occurrences":2},
-        {"key":"L0084","section":"footer","text":"Built by agents, on Cloud Bongos.","placement":"shared","file":"modules/public-landing/public/account.html","line":292,"string_id":"bd315dd71ea7","state":"in","occurrences":2},
-        {"key":"L0085","section":"footer","text":"Open source","placement":"shared","file":"modules/public-landing/public/account.html","line":292,"string_id":"d6314ddcc1d0","state":"in","occurrences":2},
-        {"key":"L0086","section":"footer","text":"AGPL-3.0","placement":"shared","state":"in","occurrences":2},
-        {"key":"L0087","section":"navigation","text":"Privacy","placement":"shared","state":"in","occurrences":2},
-        {"key":"L0088","section":"navigation","text":"Terms","placement":"shared","state":"in","occurrences":2},
-        {"key":"L0089","section":"navigation","text":"Contact","placement":"shared","state":"in","occurrences":2},
-        {"key":"L0090","section":"navigation","text":"Builders' hall","placement":"shared","file":"modules/public-landing/public/account.html","line":292,"string_id":"90a128c97eae","state":"in","occurrences":2},
-        {"key":"L0091","section":"your account","text":"Sign in to change your handle, your bio and links, and who can find you.","placement":"placed","file":"modules/public-landing/public/account.html","line":159,"string_id":"d9eefaa86565"},
-        {"key":"L0092","section":"your account","text":"Sign in","placement":"placed","file":"modules/public-landing/public/account.html","line":113,"string_id":"ad80586f802a"}
+        {"key":"L0044","section":"ways to sign in","text":"ways to sign in","placement":"placed","file":"modules/public-landing/public/account.html","line":223,"string_id":"667fd4617840","state":"in"},
+        {"key":"L0045","section":"ways to sign in","text":"GitHub, Google or both. Each one opens this same account, with the same credits, ranks and history.","placement":"placed","file":"modules/public-landing/public/account.html","line":224,"string_id":"8c815a28df30","state":"in"},
+        {"key":"L0046","section":"ways to sign in","text":"GitHub","placement":"unplaced","state":"in"},
+        {"key":"L0047","section":"ways to sign in","text":"linked","placement":"unplaced","state":"in"},
+        {"key":"L0048","section":"ways to sign in","text":"Your account was made with GitHub, so GitHub stays linked.","placement":"unplaced","state":"in"},
+        {"key":"L0049","section":"ways to sign in","text":"Google","placement":"unplaced","state":"in"},
+        {"key":"L0050","section":"ways to sign in","text":"Remove","placement":"unplaced","state":"in"},
+        {"key":"L0051","section":"ways to sign in","text":"Linking never joins two accounts. If the other one already has its own account here, we say so and change nothing.","placement":"placed","file":"modules/public-landing/public/account.html","line":228,"string_id":"62bf4cd7f215","state":"in"},
+        {"key":"L0052","section":"who can find you","text":"who can find you","placement":"placed","file":"modules/public-landing/public/account.html","line":240,"string_id":"7322eee6b8b4","state":"in"},
+        {"key":"L0053","section":"who can find you","text":"Your profile page can be public or private, and recruiters are let in separately — so a private profile can still be reachable for work, and a public one can stay out of recruiting entirely.","placement":"placed","file":"modules/public-landing/public/account.html","line":241,"string_id":"38f40fb26117","state":"in"},
+        {"key":"L0054","section":"who can find you","text":"Your profile page","placement":"placed","file":"modules/public-landing/public/account.html","line":244,"string_id":"2df3e63e4761","state":"in"},
+        {"key":"L0055","section":"who can find you","text":"Public","placement":"unplaced","state":"in"},
+        {"key":"L0056","section":"who can find you","text":"Anyone find you.","placement":"placed","file":"modules/public-landing/public/account.html","line":246,"string_id":"525a9aa1dd71","state":"in"},
+        {"key":"L0057","section":"who can find you","text":"Private","placement":"unplaced","state":"in"},
+        {"key":"L0058","section":"who can find you","text":"you are a ninja. Private hides the page from everyone — including you. You see your record here.","placement":"placed","file":"modules/public-landing/public/account.html","line":247,"string_id":"8caf52240833","state":"in"},
+        {"key":"L0059","section":"who can find you","text":"Every guild you belong to counts your numbers in its rounded totals unless you leave them out — even while your profile page is {…}. They are never shown on their own: only inside totals rounded down to a band (10+, 20+, 50+ …) and counted once a week. Each guild’s page has the switch:","placement":"unplaced","state":"in-privacy"},
+        {"key":"L0060","section":"who can find you","text":"· counted","placement":"unplaced","state":"in-privacy"},
+        {"key":"L0061","section":"who can find you","text":"· left out","placement":"unplaced","state":"in-privacy"},
+        {"key":"L0062","section":"who can find you","text":"Recruiters","placement":"unplaced","state":"in"},
+        {"key":"L0063","section":"who can find you","text":"Can find me","placement":"placed","file":"modules/public-landing/public/account.html","line":254,"string_id":"50d493f08964","state":"in"},
+        {"key":"L0064","section":"who can find you","text":"Recruiters looking for builders can find you.","placement":"placed","file":"modules/public-landing/public/account.html","line":254,"string_id":"604f5274ae98","state":"in"},
+        {"key":"L0065","section":"who can find you","text":"Can’t find me","placement":"placed","file":"modules/public-landing/public/account.html","line":255,"string_id":"48d721eb2ed7","state":"in"},
+        {"key":"L0066","section":"who can find you","text":"You stay out of the recruiting directory and a recruiter’s look-up.","placement":"placed","file":"modules/public-landing/public/account.html","line":255,"string_id":"af2177106d7c","state":"in"},
+        {"key":"L0067","section":"who can find you","text":"Because your cross-project record is hidden, they will see your name and your picture, and nothing else. This is the one thing a recruiter can see while your profile page is {…}. Turning this off removes you from both recruiting surfaces — the recruiting directory, and a recruiter’s look-up of one {…} — straight away.","placement":"unplaced","state":"in-private"},
+        {"key":"L0068","section":"who can find you","text":"They will see your name, your picture, your roles, and whether you have been {…} in the last 30 days — never your {…}, works shipped, karma, or the projects you build on. This is the one thing a recruiter can see while your profile page is {…}. Turning this off removes you from both recruiting surfaces — the recruiting directory, and a recruiter’s look-up of one {…} — straight away.","placement":"unplaced","state":"in-privacy"},
+        {"key":"L0069","section":"who can find you","text":"They will see your name, your picture, your roles, and whether you have been {…} in the last 30 days — never your {…}, works shipped, karma, or the projects you build on. Turning this off removes you from both recruiting surfaces — the recruiting directory, and a recruiter’s look-up of one {…} — straight away.","placement":"unplaced","state":"in"},
+        {"key":"L0070","section":"who can find you","text":"· For now this follows your profile page setting.","placement":"unplaced","state":"in"},
+        {"key":"L0071","section":"who can find you","text":"Your profile page setting applies now — private already answers “not found” everywhere your profile is read. Recruiter discoverability applies now too — switching it off removes you from both recruiting surfaces immediately, and back on puts you there again.","placement":"placed","file":"modules/public-landing/public/account.html","line":259,"string_id":"e0d6e4196161","state":"in"},
+        {"key":"L0072","section":"who can find you","text":"save","placement":"unplaced","state":"in"},
+        {"key":"L0073","section":"your record","text":"your record","placement":"placed","file":"modules/public-landing/public/account.html","line":271,"string_id":"b494287ce724","state":"in"},
+        {"key":"L0074","section":"your record","text":"Your track record across every project you build on. Hiding it takes effect immediately everywhere — your profile, the recruiting directory, and a recruiter’s look-up of one builder.","placement":"placed","file":"modules/public-landing/public/account.html","line":272,"string_id":"f18600e9cff1","state":"in"},
+        {"key":"L0075","section":"your record","text":"No cross-project activity reported yet. Your profile is not published yet; it publishes after your next sign-in.","placement":"unplaced","state":"in-private"},
+        {"key":"L0076","section":"your record","text":"Your record: 3 projects · 1000 {…} · 19 works shipped · 10 karma.","placement":"unplaced","state":"in"},
+        {"key":"L0077","section":"your record","text":"Cross-project Record","placement":"placed","file":"modules/public-landing/public/account.html","line":276,"string_id":"d5c4a0e0f864","state":"in"},
+        {"key":"L0078","section":"your record","text":"Show it","placement":"placed","file":"modules/public-landing/public/account.html","line":278,"string_id":"960b894c0ea1","state":"in"},
+        {"key":"L0079","section":"your record","text":"Your stats appear on your profile and in the directories.","placement":"placed","file":"modules/public-landing/public/account.html","line":278,"string_id":"edf1c4f5e0c5","state":"in"},
+        {"key":"L0080","section":"your record","text":"Hide it","placement":"placed","file":"modules/public-landing/public/account.html","line":279,"string_id":"ccd4861996eb","state":"in"},
+        {"key":"L0081","section":"your record","text":"Your stats are hidden.","placement":"placed","file":"modules/public-landing/public/account.html","line":279,"string_id":"44c8b76631bf","state":"in"},
+        {"key":"L0082","section":"your record","text":"Every guild you belong to counts your numbers in its rounded totals unless you leave them out — even while your record is hidden. They are never shown on their own: only inside totals rounded down to a band (10+, 20+, 50+ …) and counted once a week. Each guild’s page has the switch:","placement":"unplaced","state":"in-private"},
+        {"key":"L0083","section":"your record","text":"· counted","placement":"unplaced","state":"in-private"},
+        {"key":"L0084","section":"your record","text":"· left out","placement":"unplaced","state":"in-private"},
+        {"key":"L0085","section":"your record","text":"save","placement":"unplaced","state":"in"},
+        {"key":"L0086","section":"projects you build on","text":"projects you build on","placement":"placed","file":"modules/public-landing/public/account.html","line":296,"string_id":"f8aa3ff34a10","state":"in"},
+        {"key":"L0087","section":"projects you build on","text":"The projects you have joined as a builder. Only you see this list.","placement":"placed","file":"modules/public-landing/public/account.html","line":297,"string_id":"d466ee6b6e30","state":"in"},
+        {"key":"L0088","section":"projects you build on","text":"example.com","placement":"unplaced","state":"in"},
+        {"key":"L0089","section":"projects you build on","text":"Leave","placement":"unplaced","state":"in","occurrences":2},
+        {"key":"L0090","section":"projects you build on","text":"{…}-circles.cloudbongos.com","placement":"unplaced","state":"in"},
+        {"key":"L0091","section":"footer","text":"A non-profit, capture-resistant commons.","placement":"shared","file":"modules/public-landing/public/account.html","line":308,"string_id":"afe83bbbd0d4","state":"in","occurrences":2},
+        {"key":"L0092","section":"footer","text":"Built by agents, on Cloud Bongos.","placement":"shared","file":"modules/public-landing/public/account.html","line":308,"string_id":"bd315dd71ea7","state":"in","occurrences":2},
+        {"key":"L0093","section":"footer","text":"Open source","placement":"shared","file":"modules/public-landing/public/account.html","line":308,"string_id":"d6314ddcc1d0","state":"in","occurrences":2},
+        {"key":"L0094","section":"footer","text":"AGPL-3.0","placement":"shared","state":"in","occurrences":2},
+        {"key":"L0095","section":"navigation","text":"Privacy","placement":"shared","state":"in","occurrences":2},
+        {"key":"L0096","section":"navigation","text":"Terms","placement":"shared","state":"in","occurrences":2},
+        {"key":"L0097","section":"navigation","text":"Contact","placement":"shared","state":"in","occurrences":2},
+        {"key":"L0098","section":"navigation","text":"Builders' hall","placement":"shared","file":"modules/public-landing/public/account.html","line":308,"string_id":"90a128c97eae","state":"in","occurrences":2},
+        {"key":"L0099","section":"your account","text":"Sign in to change your handle, your bio and links, and who can find you.","placement":"placed","file":"modules/public-landing/public/account.html","line":159,"string_id":"d9eefaa86565"},
+        {"key":"L0100","section":"your account","text":"Sign in","placement":"placed","file":"modules/public-landing/public/account.html","line":113,"string_id":"ad80586f802a"}
       ]
     },
     {

package/migrations/core_286_credit_log_no_spend.sql

@@ -0,0 +1,128 @@
+-- core_286_credit_log_no_spend.sql — task 1004988 (goal 1000092; ADR 0385
+-- decision 2, ADR 0387).
+--
+-- Credits measure contribution. They are never spent, transferred or redeemed,
+-- so the ledger has no row that takes credits away for something in return.
+-- Until now that was a convention: credit_log's own column notes listed
+-- 'redemption' as a reason and called a negative delta "spent (future)", and
+-- nothing in Postgres stopped a negative spend row. This makes the DATABASE
+-- refuse it, so no code path — present or future, ours or a module's — can
+-- book one.
+--
+-- WHAT IS ADMITTED. A row with delta >= 0 is admitted as before (earning, and the
+-- delta-0 audit rows rank changes and builder exits write). A NEGATIVE row is
+-- admitted only as a REVERSAL of an existing positive row, in one of two shapes:
+--
+--   1. reason = 'reversal:<credit_log id>' — the general shape. The named row
+--      must exist, belong to the same builder and be positive, and all the
+--      reversals of it together may not exceed it.
+--   2. reason = '<original reason>_reversal' with task_id set — the shape
+--      core_194 (ADR 0120's one-time clawback, reason 'task.confirmed_reversal')
+--      already wrote. The reference is the (builder, task, original reason)
+--      rows, which must exist and sum positive; reversals may not exceed them.
+--      Kept so that migration, and the integration test that re-runs it, stay
+--      valid on a database that carries this trigger.
+--
+-- Any other negative row is refused. A row whose reason names a spend,
+-- redemption or transfer is refused at any sign: a positive "transfer in" is
+-- the other half of a transfer, and decision 2 forbids the transfer itself.
+--
+-- WHAT IS NOT CHANGED (ADR 0387). No column is added and no existing row is
+-- read, converted or rewritten: the trigger is BEFORE INSERT only, so history —
+-- including core_194's reversal rows — stays exactly as booked. This does not
+-- contradict ADR 0387's "the only schema change is the money record": that
+-- sentence is about the SHAPE of credit_log (no money column, no backfill), and
+-- this adds none. It enforces ADR 0387 decision 1 ("never redeemable") in the
+-- database rather than in the code that writes the ledger.
+--
+-- Concurrency: the reversed row(s) are locked FOR UPDATE before the reversal
+-- total is summed, so two reversals racing for the same row cannot both pass
+-- the "may not exceed" check.
+--
+-- Cost: a positive row (every normal earning) pays one regex test and returns.
+-- Only a negative row reads the ledger, and every read is indexed: the reversed
+-- row by its primary key (shape 1), the original rows by idx_credit_log_task
+-- (core_189, shape 2), and the reversals already booked by the PARTIAL index
+-- below, which holds negative rows only — so it stays as small as the number of
+-- reversals ever made, not the size of the ledger.
+--
+-- The refused names match as whole words: the name, then a separator (. _ : -)
+-- or the end. So 'spend', 'spend.x' and 'transfer:3' are refused, and a reason
+-- that merely starts with the letters ('spender-of-the-month') is not.
+
+CREATE INDEX IF NOT EXISTS idx_credit_log_reversals
+  ON credit_log (builder_id, reason) WHERE delta < 0;
+
+CREATE OR REPLACE FUNCTION credit_log_refuse_spend() RETURNS trigger AS $$
+DECLARE
+  ref_id      bigint;
+  orig_rec    record;
+  orig_reason text;
+  orig_total  bigint;
+  reversed    bigint;
+BEGIN
+  IF NEW.reason ~* '^(redemption|redeem|spend|spent|transfer)([._:-]|$)' THEN
+    RAISE EXCEPTION 'credit_log refuses %: credits are never spent, transferred or redeemed (ADR 0385 decision 2)', NEW.reason
+      USING ERRCODE = 'check_violation';
+  END IF;
+
+  IF NEW.delta >= 0 THEN
+    RETURN NEW;
+  END IF;
+
+  -- Shape 1: 'reversal:<credit_log id>'.
+  IF NEW.reason ~ '^reversal:[0-9]{1,18}$' THEN
+    ref_id := substring(NEW.reason FROM 10)::bigint;
+    SELECT id, builder_id, delta INTO orig_rec FROM credit_log WHERE id = ref_id FOR UPDATE;
+    -- Two IFs, not one OR: plpgsql does not promise to short-circuit, and the
+    -- fields of a record no row was selected into must not be read.
+    IF NOT FOUND THEN
+      RAISE EXCEPTION 'credit_log refuses a reversal of row %: no such row', ref_id
+        USING ERRCODE = 'check_violation';
+    END IF;
+    IF orig_rec.builder_id <> NEW.builder_id OR orig_rec.delta <= 0 THEN
+      RAISE EXCEPTION 'credit_log refuses a reversal of row %: it must name an existing positive row of the same builder', ref_id
+        USING ERRCODE = 'check_violation';
+    END IF;
+    SELECT COALESCE(SUM(delta), 0) INTO reversed
+      FROM credit_log WHERE builder_id = NEW.builder_id AND reason = NEW.reason AND delta < 0;
+    IF orig_rec.delta + reversed + NEW.delta < 0 THEN
+      RAISE EXCEPTION 'credit_log refuses a reversal of row %: it would reverse more than the row booked', ref_id
+        USING ERRCODE = 'check_violation';
+    END IF;
+    RETURN NEW;
+  END IF;
+
+  -- Shape 2: '<original reason>_reversal' against the same builder and task.
+  IF NEW.reason ~ '^[a-z0-9_.]+_reversal$' AND NEW.task_id IS NOT NULL THEN
+    orig_reason := left(NEW.reason, length(NEW.reason) - length('_reversal'));
+    PERFORM 1 FROM credit_log
+      WHERE builder_id = NEW.builder_id AND task_id = NEW.task_id AND reason = orig_reason
+      FOR UPDATE;
+    SELECT COALESCE(SUM(delta), 0) INTO orig_total
+      FROM credit_log WHERE builder_id = NEW.builder_id AND task_id = NEW.task_id AND reason = orig_reason;
+    SELECT COALESCE(SUM(delta), 0) INTO reversed
+      FROM credit_log WHERE builder_id = NEW.builder_id AND task_id = NEW.task_id AND reason = NEW.reason AND delta < 0;
+    IF orig_total <= 0 OR orig_total + reversed + NEW.delta < 0 THEN
+      RAISE EXCEPTION 'credit_log refuses %: it must reverse existing % credit on the same task, and no more than was booked', NEW.reason, orig_reason
+        USING ERRCODE = 'check_violation';
+    END IF;
+    RETURN NEW;
+  END IF;
+
+  RAISE EXCEPTION 'credit_log refuses a negative row (reason %): credits are never spent or redeemed; only a reversal of an existing row may be negative (ADR 0385 decision 2)', NEW.reason
+    USING ERRCODE = 'check_violation';
+END;
+$$ LANGUAGE plpgsql;
+
+DROP TRIGGER IF EXISTS trg_credit_log_refuse_spend ON credit_log;
+CREATE TRIGGER trg_credit_log_refuse_spend
+  BEFORE INSERT ON credit_log
+  FOR EACH ROW EXECUTE FUNCTION credit_log_refuse_spend();
+
+COMMENT ON TABLE credit_log IS
+  'Append-only contribution ledger (ADR 0385, ADR 0387). Credits measure work: they are never money, never spent, transferred or redeemed. builders.total_credits is a cache kept by trg_credit_log_apply.';
+COMMENT ON COLUMN credit_log.delta IS
+  'Credits earned (positive), an audit row (0), or a reversal of an earlier row (negative). The trigger trg_credit_log_refuse_spend refuses every other negative row.';
+COMMENT ON COLUMN credit_log.reason IS
+  'What earned the credits, e.g. task.shipped, session.token_reward, idea.credit.*. A negative row must read reversal:<credit_log id> or <original reason>_reversal with its task_id set.';

package/modules/copy-desk/auto-close.js

@@ -8,14 +8,20 @@
 // hand. Two shapes hold nothing:
 //
 //   blank             `ready`, no draft and no frozen batch: opened in the
-//                     studio, nothing written, the claim dropped.
+//                     studio, nothing written, the claim dropped. Closes once
+//                     untouched for page-status's BLANK_CLOSES_AFTER (1 day, the
+//                     owner's answer on task 1004971; task 1004972). Until then
+//                     it reads `blank` ("Opened, nothing written yet"), never
+//                     `unknown`.
 //   nothing_to_apply  `ready` with a frozen batch whose `lines` is empty: every
 //                     rewrite left the batch for an engineer task at submit
 //                     (unplaced, shared or removed lines), so /tweak has no line
 //                     to apply and the round can never move on its own.
 //   draft_expired     `ready` with a draft and no batch, untouched for
-//                     page-status's DRAFT_EXPIRES_AFTER (14 days, task 1004901):
-//                     its artist was reminded at 7 days and never came back.
+//                     page-status's DRAFT_EXPIRES_AFTER (task 1004901; one day
+//                     since task 1004976, the owner's answer on task 1004971,
+//                     with no reminder step first). The draft text stays on
+//                     the task: no compose, so the description is not touched.
 //
 // All three are abandoned through the lifecycle port's releaseStuckTweak (no compose,
 // so the note is the reason and nothing is written to the description). The
@@ -32,18 +38,47 @@ const pageStatus = require('./page-status');
 const GRACE_MS = Number(process.env.COPY_AUTO_CLOSE_GRACE_MS) || 60 * 60_000;
 
 const NOTES = Object.freeze({
-  blank: 'Closed by itself: the round was opened but nothing was written in it.',
+  blank: 'Closed: nothing was written. The round was opened and left blank for a day; claim the page again to start one.',
   nothing_to_apply: 'Closed by itself: every rewritten line went to an engineer task, so nothing was left to apply on the page.',
-  draft_expired: 'Closed by itself: the draft sat untouched for two weeks. Its words stay on this task; claim the page again to start over.',
+  draft_expired: 'Closed by itself: the draft sat untouched for a day. Its words stay on this task; claim the page again to start over.',
+  orphaned_apply: 'Released: the apply stopped without finishing. Nobody holds this round any more, so it is back in the queue.',
 });
 
-function closeReason(task, { now = Date.now(), graceMs = GRACE_MS, draftExpiresMs = pageStatus.DRAFT_EXPIRES_AFTER } = {}) {
+// task 1004972 T2 (task 1004973): an ORPHANED round is `active` with no open
+// claim. The applier's claim was released (the runner's reconcile, a crashed
+// worker, a dropped session) but the status never moved, so it read `unknown`
+// and nothing ever picked it up again. A round someone still holds, a live and
+// heartbeating apply, is never touched: holder_id is the open claim, and the
+// lifecycle port re-checks that no claim was taken under its row lock.
+function orphanReason(task, { now = Date.now(), graceMs = GRACE_MS } = {}) {
+  if (!task || task.status !== 'active' || task.holder_id != null) return null;
+  const touched = Date.parse(task.updated_at || task.created_at || '');
+  if (!Number.isFinite(touched) || now - touched < graceMs) return null;
+  return 'orphaned_apply';
+}
+
+// The orphan goes back to `ready` with its description kept whole plus the
+// reason, as a sent-back block (pages.appendSentBack, the one writer of that
+// block, which only APPENDS). A frozen batch then reads `submitted` again and the
+// next applier reads why; a draft stays a draft. No word of the draft or the
+// batch is changed.
+function releaseKeeping(note, at, by) {
+  return (task) => pages.appendSentBack(task.description, { at, by, note });
+}
+
+function closeReason(task, {
+  now = Date.now(), graceMs = GRACE_MS,
+  draftExpiresMs = pageStatus.DRAFT_EXPIRES_AFTER, blankClosesMs = pageStatus.BLANK_CLOSES_AFTER,
+} = {}) {
   if (!task || task.status !== 'ready' || task.holder_id != null) return null;
   const touched = Date.parse(task.updated_at || task.created_at || '');
   if (!Number.isFinite(touched) || now - touched < graceMs) return null;
   const p = pages.blockPresence(task.description);
-  // task 1004901: a draft its artist left untouched for two weeks expires.
-  if (!p.batch) return p.draft ? (now - touched >= draftExpiresMs ? 'draft_expired' : null) : 'blank';
+  const age = now - touched;
+  // task 1004901: a draft its artist left untouched expires. task 1004972: a
+  // blank round closes after a day. A batch with lines is never touched here,
+  // and a draft only by its own expiry.
+  if (!p.batch) return p.draft ? (age >= draftExpiresMs ? 'draft_expired' : null) : (age >= blankClosesMs ? 'blank' : null);
   const b = pages.parseBatchBlock(task.description);
   if (b.ok && b.batch.lines.length === 0) return 'nothing_to_apply';
   return null;
@@ -58,16 +93,21 @@ async function runAutoClose({ now = Date.now(), resolve = (k) => (api.resolveOpt
     return { closed: [], skipped: 'no_lifecycle' };
   }
   const tasks = await lifecycle.listPageTweakTasks();
-  const due = tasks.map((t) => ({ t, why: closeReason(t, { now }) })).filter((x) => x.why);
+  const due = tasks.map((t) => ({ t, why: closeReason(t, { now }) || orphanReason(t, { now }) })).filter((x) => x.why);
   if (!due.length) return { closed: [] };
   const owner = await founder();
   if (!owner) return { closed: [], skipped: 'no_owner' };
   const closed = [];
+  const at = new Date(now).toISOString();
   for (const { t, why } of due) {
-    const r = await lifecycle.releaseStuckTweak({ taskId: t.id, builderId: owner.id, expectedStatus: 'ready', note: NOTES[why] });
+    const orphan = why === 'orphaned_apply';
+    const r = await lifecycle.releaseStuckTweak({
+      taskId: t.id, builderId: owner.id, expectedStatus: orphan ? 'active' : 'ready', note: NOTES[why],
+      ...(orphan ? { compose: releaseKeeping(NOTES[why], at, String(owner.id)) } : {}),
+    });
     closed.push({ task_id: String(t.id), why, outcome: r.outcome });
   }
   return { closed };
 }
 
-module.exports = { closeReason, runAutoClose };
+module.exports = { closeReason, orphanReason, runAutoClose };

package/modules/copy-desk/page-status.js

@@ -193,7 +193,11 @@ function roundState(round) {
         if (p.last_sent_back_at && (!p.applied_at || p.applied_at <= p.last_sent_back_at)) return 'submitted';
         return 'unknown';
       }
-      return p.draft ? 'draft' : 'unknown';
+      // task 1004972: opened and nothing written is a state of its own, not one
+      // the reads cannot name. It waits on its artist and closes itself after
+      // BLANK_CLOSES_AFTER (the auto-close sweep), so it never reads "Needs to be
+      // reviewed" or asks an applier to release it.
+      return p.draft ? 'draft' : 'blank';
     case 'completed':
       // A held pass waits for the artist; a failed grade stays with the applier.
       return round.grade_passed === true ? 'waiting_for_artist' : 'applying';
@@ -307,8 +311,8 @@ function orderedSurfaces(inventory) {
 // This is every page with an open round, where it is, since when (the round's
 // last update), and whether it has sat there too long. Waiting for review is
 // the artist's own move and a draft is theirs to finish: a draft or a page
-// being written is stuck after 7 days and a draft expires after 14 (task
-// 1004901); a review is stuck after 3 days (task 1004777, so its artist is
+// being written is stuck after 7 days, and a draft left untouched expires after
+// one day (task 1004901, shortened by task 1004976); a review is stuck after 3 days (task 1004777, so its artist is
 // told); a state the reads cannot name always needs to be reviewed.
 // ---------------------------------------------------------------------------
 
@@ -318,9 +322,15 @@ const DAY_MS = 24 * 60 * 60 * 1000;
 // work) and WHEN it is overdue (stuck_after: then it is pushed to that person on
 // Home and in the daily digest). A draft nobody touches also EXPIRES
 // (expires_after): the auto-close sweep abandons it, its words kept on the task.
-const DRAFT_EXPIRES_AFTER = 14 * DAY_MS;
+// task 1004976 (owner, task 1004971): a draft expires after ONE day, and there
+// is no separate reminder step at that length, so the draft is due when it
+// expires (stuck_after = expires_after), not reminded a week before.
+const DRAFT_EXPIRES_AFTER = DAY_MS;
+// task 1004972 (owner, task 1004971): a round opened and left blank closes after a day.
+const BLANK_CLOSES_AFTER = DAY_MS;
 const IN_FLIGHT = Object.freeze({
-  draft: { word: 'Being written', stuck_after: 7 * DAY_MS, waits_on: 'artist', expires_after: DRAFT_EXPIRES_AFTER },
+  blank: { word: 'Opened, nothing written yet', stuck_after: BLANK_CLOSES_AFTER, waits_on: 'artist', expires_after: BLANK_CLOSES_AFTER },
+  draft: { word: 'Being written', stuck_after: DRAFT_EXPIRES_AFTER, waits_on: 'artist', expires_after: DRAFT_EXPIRES_AFTER },
   writing: { word: 'Being written', stuck_after: 7 * DAY_MS, waits_on: 'artist' },
   words_review: { word: 'Words waiting for review', stuck_after: 3 * DAY_MS, waits_on: 'artist' },
   submitted: { word: 'Approved, waiting to be applied', stuck_after: 3 * DAY_MS, waits_on: 'appliers' },
@@ -330,7 +340,7 @@ const IN_FLIGHT = Object.freeze({
   landing: { word: 'Approved, going live', stuck_after: DAY_MS, waits_on: 'appliers' },
   unknown: { word: 'Needs to be reviewed', stuck_after: 0, waits_on: 'appliers' },
 });
-const IN_FLIGHT_ORDER = ['unknown', 'landing', 'applying', 'submitted', 'waiting_for_artist', 'words_review', 'writing', 'draft'];
+const IN_FLIGHT_ORDER = ['unknown', 'landing', 'applying', 'submitted', 'waiting_for_artist', 'words_review', 'writing', 'draft', 'blank'];
 
 function inFlightFor(list, byPage, nowMs) {
   const out = [];
@@ -980,4 +990,6 @@ module.exports = {
   stuckDigestText,
   // task 1004901: when an untouched draft expires (the auto-close sweep reads it).
   DRAFT_EXPIRES_AFTER,
+  // task 1004972: when a blank round closes (the auto-close sweep reads it).
+  BLANK_CLOSES_AFTER,
 };

package/modules/copy-desk/tests/copy_no_cms.mjs

@@ -312,8 +312,15 @@ await test('the module manifest declares no seam another module could write copy
   assert.equal(/writeFile|\.query\(|UPDATE |INSERT /.test(stuckSrc), false, 'the stuck-tweaks port writes nothing');
   // task 1004899: the auto-close sweep only ABANDONS an empty round through the
   // lifecycle port; it never hands a compose, so it cannot write a description.
+  // task 1004973: it may hand ONE compose, for an orphaned apply released back to
+  // the queue, and that compose is pages.appendSentBack: it appends the reason and
+  // changes no word (copy_page_auto_close.mjs proves the description is kept whole).
   const closeSrc = stripComments(read('auto-close.js'));
-  assert.equal(/writeFile|\.query\(|UPDATE |INSERT |compose/.test(closeSrc), false, 'the auto-close sweep abandons and writes nothing');
+  assert.equal(/writeFile|\.query\(|UPDATE |INSERT /.test(closeSrc), false, 'the auto-close sweep writes nothing itself');
+  const composes = closeSrc.match(/\bcompose\b[^\n]*/g) || [];
+  assert.deepEqual(composes.length, 1, 'one compose, for the orphan release');
+  assert.match(closeSrc, /\(task\) => pages\.appendSentBack\(task\.description, \{ at, by, note \}\)/, 'and it only appends the sent-back note');
+  assert.equal(/composeDraftBlock|composeBatchBlock|saveDraftInto|replaceBlock/.test(closeSrc), false, 'no draft or batch writer');
   const stats = read('artist-stats.js');
   assert.equal(/\b(pool|query|writeFile|appendFile|INSERT|UPDATE|DELETE)\b/.test(stats.replace(/\/\/.*$/gm, '')), false,
     'the artist-stats port reads through other ports and writes nothing');