@bongos/core 1.24.46 → 1.24.47

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/bongos/package-core.js",
-  "core_version": "1.24.46",
-  "core_contract": "1.24.46",
-  "source_commit": "cac1bfc914c2c32c1d688d639d2e36f22e135c05",
+  "core_version": "1.24.47",
+  "core_contract": "1.24.47",
+  "source_commit": "816b62ec33f75857ddfcfa52c46ce158bb97ca2d",
   "source_ref": "HEAD",
-  "built_at": "2026-11-07T07:25:34.045Z",
+  "built_at": "2026-11-07T08:16:53.782Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 637,
     "agent_docs_stubbed": 32,
-    "functional_verbatim": 3864,
+    "functional_verbatim": 3866,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 4534,
-  "tree_sha256": "72205cc58405e1d3398e11931bd236b9bb09451750d6cb54e056bf013f24b52a",
+  "file_count": 4536,
+  "tree_sha256": "e4985b2bf6f45f1ad5eb8044399df15f306f782c573cd8b5ee82407668324cef",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -372,7 +372,7 @@
     {
       "path": "config/design-tokens.neutral.json",
       "mode": "0000644",
-      "sha256": "50d0705a8e37af0bda238327ba0a09f96bcec3d8d1eb0e090ea5a2fb22d9f928"
+      "sha256": "e6a0956bf4d18316544a94a5dc60ce54efd6917d1c8d539bd0029fbd76034cdf"
     },
     {
       "path": "config/design-tokens.schema.json",
@@ -3002,7 +3002,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "56fda22b3b6bf88c055b1231082c780af284f97d3dd0d90b353d2f16d18c7c50"
+      "sha256": "7e0741cbd3de2eef3830cb9fc9d2320fa222e377cae25b9338ca35da03388c80"
     },
     {
       "path": "docs/modules-contract.md",
@@ -11704,6 +11704,11 @@
       "mode": "0000644",
       "sha256": "5d38655b42d1f0e27607b2a026676d46253a869eae8fdccd1aa6e1bac0c288c7"
     },
+    {
+      "path": "modules/ui-design/scripts/gen-design-tokens.js",
+      "mode": "0000644",
+      "sha256": "a644ec9e894a9e1f57e7e406b00ba3711cd2b35581c449ee91a311bb7432b9a7"
+    },
     {
       "path": "modules/ui-design/scripts/validate-design.js",
       "mode": "0000644",
@@ -11817,12 +11822,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "f32809072fbba42347ce438478332e8ff5fbff37740b1f2ab3f314f5a21478ce"
+      "sha256": "0c6db315913a8bb217d9d1471bdac4a9d5a60b4ce9b2084274bfc65d7c12d063"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "9cd54d421f2089c2c89b348f74ac31dc13d5387338a4f2315331366d744e1be1"
+      "sha256": "68de6f15e7414272a1d127ab7fc2537f877d162cf8e6e5a18a1129bcdde95062"
     },
     {
       "path": "public-docs/index.html",
@@ -11842,7 +11847,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "236eeb742b4f9385a4318f51dfe060ca03348d5ce7c6476b9bccbbda7f6e2151"
+      "sha256": "3de9500808c88490e2021024389877b315c754829e5f478cf17d6be43847da0d"
     },
     {
       "path": "scripts/bongos/CLAUDE.md",
@@ -15752,7 +15757,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "c12d0e9adc7a605515a1ef77aea6fd39fd63880e251a2f1cf447d31ff8011a30"
+      "sha256": "638af2a4f3e8dbec321dc394c74384ebb29acc8e2b214dae528e3e689d40c9db"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -17269,6 +17274,11 @@
       "mode": "0000644",
       "sha256": "7a492f806c867e71e52a9d90b3c0b30d47327c83d95e989ad09377c958457dd5"
     },
+    {
+      "path": "tests/design_tokens_generated.mjs",
+      "mode": "0000644",
+      "sha256": "b412e68c9efbbe4e27f0251af3840a6f456feec8491c9fd5c975681bac194651"
+    },
     {
       "path": "tests/design_tokens_shared.mjs",
       "mode": "0000644",

package/config/design-tokens.neutral.json

@@ -1,5 +1,5 @@
 {
-  "_note": "Cloud Bongos neutral design tokens — the baseline every instance resolves over. To override, copy values into config/design-tokens.json (the instance pack). These match config/branding.neutral.json theme.ui (the chrome world, task 1003298; tests/design_tokens_sync.mjs fails on drift) so a vanilla instance with no instance pack still renders correctly. The world's derived tokens, materials and motion grammar are recorded in DESIGN.md. See modules/ui-design/docs/design-contract.md.",
+  "_note": "GENERATED by node modules/ui-design/scripts/gen-design-tokens.js; do not edit by hand. Colours, font stacks and font links are config/branding.neutral.json theme.ui; scale, radius and motion are the --ds-* steps of modules/ui-design/public/tokens.css (the mapping is in the generator). To override, copy values into config/design-tokens.json (the instance pack). See DESIGN.md \"The hall\" and modules/ui-design/docs/design-contract.md.",
   "colors": {
     "bg": "#edecee",
     "bgCard": "#fbfafc",
@@ -24,12 +24,12 @@
     ]
   },
   "scale": {
-    "xs": "4px",
-    "sm": "8px",
-    "md": "16px",
-    "lg": "24px",
-    "xl": "40px",
-    "2xl": "64px"
+    "xs": "6px",
+    "sm": "10px",
+    "md": "14px",
+    "lg": "22px",
+    "xl": "34px",
+    "2xl": "52px"
   },
   "radius": {
     "sm": "10px",
@@ -38,9 +38,9 @@
     "pill": "999px"
   },
   "motion": {
-    "fast": "200ms",
-    "normal": "250ms",
+    "fast": "150ms",
+    "normal": "200ms",
     "slow": "700ms",
-    "easing": "cubic-bezier(0.16, 1, 0.3, 1)"
+    "easing": "cubic-bezier(.2, .7, .3, 1)"
   }
 }

package/docs/module-api-changelog.md

@@ -3346,5 +3346,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.24.44 with no explicit bump. run 42206962991. (task 1002620)
   1.24.46 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.24.45 with no explicit bump. run 42303836499. (task 1002620)
+  1.24.47 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.24.46 with no explicit bump. run 42354688707. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/ui-design/scripts/gen-design-tokens.js

@@ -0,0 +1,102 @@
+#!/usr/bin/env node
+'use strict';
+// modules/ui-design/scripts/gen-design-tokens.js — build config/design-tokens.neutral.json
+// from the two files that already own its values (task 1005082, goal 1000138).
+//
+// WHY. The design-tool token file (read by the Claude Design and Figma adapters)
+// was hand-written, and its spacing (4/8/16/24/40/64) and motion (200/250ms) had
+// drifted from what every page actually uses (the 6/10/14/22/34/52 rhythm and the
+// 150/200ms durations in the shared token sheet). A designer starting from it got
+// a spacing scale no page has. Now nothing in that file is typed by hand:
+//
+//   colours + font stacks + font links  ← config/branding.neutral.json theme.ui
+//   spacing, corners, motion             ← modules/ui-design/public/tokens.css (--ds-*)
+//
+// The file keeps its existing key names (config/design-tokens.schema.json closes
+// them, and an instance's config/design-tokens.json overrides by those names); each
+// key is mapped to the --ds-* step it means, below.
+//
+//   node modules/ui-design/scripts/gen-design-tokens.js           write the file
+//   node modules/ui-design/scripts/gen-design-tokens.js --check   exit 1 if it is stale
+//
+// Guarded by tests/design_tokens_generated.mjs.
+
+const fs = require('node:fs');
+const path = require('node:path');
+
+const ROOT = path.resolve(__dirname, '..', '..', '..');
+const SHEET = path.join(ROOT, 'modules', 'ui-design', 'public', 'tokens.css');
+const PACK = path.join(ROOT, 'config', 'branding.neutral.json');
+const OUT = path.join(ROOT, 'config', 'design-tokens.neutral.json');
+
+// The schema's key → the --ds-* custom property it is generated from.
+const MAP = Object.freeze({
+  scale: { xs: '--ds-space-hair', sm: '--ds-space-xs', md: '--ds-space-sm', lg: '--ds-space-md', xl: '--ds-space-lg', '2xl': '--ds-space-xl' },
+  radius: { sm: '--ds-radius-tile', md: '--ds-radius-panel', lg: '--ds-radius-panel', pill: '--ds-radius-pill' },
+  motion: { fast: '--ds-dur-fast', normal: '--ds-dur-base', slow: '--ds-dur-arrive', easing: '--ds-ease' },
+});
+
+// The pack carries no mono stack (it is not one of the fifteen), so the design
+// side states the label/mono face DESIGN.md names (typography.label).
+const MONO = '"JetBrains Mono", ui-monospace, "Cascadia Mono", Consolas, monospace';
+
+const NOTE = 'GENERATED by node modules/ui-design/scripts/gen-design-tokens.js; do not edit by hand. '
+  + 'Colours, font stacks and font links are config/branding.neutral.json theme.ui; scale, radius and motion are '
+  + 'the --ds-* steps of modules/ui-design/public/tokens.css (the mapping is in the generator). To override, copy '
+  + 'values into config/design-tokens.json (the instance pack). See DESIGN.md "The hall" and '
+  + 'modules/ui-design/docs/design-contract.md.';
+
+// The first :root { … } block of the sheet: the light/base values. The dark and
+// reduced-motion blocks restate a few of them and are deliberately not read.
+function readSheetVars(css) {
+  const noComments = css.replace(/\/\*[\s\S]*?\*\//g, '');
+  const m = noComments.match(/:root\s*\{([^}]*)\}/);
+  if (!m) throw new Error('tokens.css: no :root block');
+  const vars = {};
+  for (const decl of m[1].split(';')) {
+    const d = decl.match(/^\s*(--[a-z0-9-]+)\s*:\s*([\s\S]+?)\s*$/i);
+    if (d) vars[d[1]] = d[2].replace(/\s+/g, ' ');
+  }
+  return vars;
+}
+
+function build({ sheet = fs.readFileSync(SHEET, 'utf8'), pack = JSON.parse(fs.readFileSync(PACK, 'utf8')) } = {}) {
+  const vars = readSheetVars(sheet);
+  const ui = (pack.theme && pack.theme.ui) || {};
+  const pick = (group) => {
+    const out = {};
+    for (const [key, prop] of Object.entries(MAP[group])) {
+      if (!(prop in vars)) throw new Error(`tokens.css: ${prop} (for ${group}.${key}) is not declared`);
+      out[key] = vars[prop];
+    }
+    return out;
+  };
+  const fonts = { display: ui.fonts.display, body: ui.fonts.body, mono: MONO };
+  if (Array.isArray(ui.fonts.links)) fonts.links = ui.fonts.links.slice();
+  const tokens = {
+    _note: NOTE,
+    colors: Object.assign({}, ui.colors),
+    fonts,
+    scale: pick('scale'),
+    radius: pick('radius'),
+    motion: pick('motion'),
+  };
+  return JSON.stringify(tokens, null, 2) + '\n';
+}
+
+module.exports = { build, readSheetVars, MAP, OUT };
+
+if (require.main === module) {
+  const next = build();
+  const current = fs.existsSync(OUT) ? fs.readFileSync(OUT, 'utf8') : '';
+  if (process.argv.includes('--check')) {
+    if (current === next) { process.stdout.write('design-tokens.neutral.json: current\n'); process.exitCode = 0; }
+    else {
+      process.stderr.write('design-tokens.neutral.json is STALE: run node modules/ui-design/scripts/gen-design-tokens.js\n');
+      process.exitCode = 1;
+    }
+  } else {
+    if (current !== next) fs.writeFileSync(OUT, next);
+    process.stdout.write((current === next ? 'design-tokens.neutral.json: unchanged' : 'design-tokens.neutral.json: written') + '\n');
+  }
+}

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.24.46",
+  "version": "1.24.47",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.24.46",
+      "version": "1.24.47",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.24.46",
+  "version": "1.24.47",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -11247,5 +11247,11 @@
       "id": "1005080",
       "text": "The screenshot checker builders use before shipping a design change shows the real hall pages again, instead of a pop-up covering every page. Two small accessibility fixes came with it: a few tiny links are now big enough to t"
     }
+  ],
+  "1.24.47": [
+    {
+      "id": "1005082",
+      "text": "The design rulebook now describes the builders' hall as it really is, and spells out the name: 'cloud bongos' in the logo, 'Cloud Bongos' in sentences. The design-tool token file is now built automatically from the real styles"
+    }
   ]
 }

package/src/module-api.js

@@ -81,7 +81,7 @@ const { sleep } = require('./sleep');
 // MAJOR (see allowBoxScope below): passes the request through untouched.
 function deprecatedNoopMiddleware(_req, _res, next) { next(); }
 
-const CORE_VERSION = '1.24.46'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.24.47'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('discord'); log.info('mounted');

package/tests/design_tokens_generated.mjs

@@ -0,0 +1,56 @@
+// tests/design_tokens_generated.mjs — config/design-tokens.neutral.json is GENERATED
+// from the branding pack and the shared token sheet, and regenerates byte-identical
+// (task 1005082, goal 1000138).
+//
+// WHY. The hand-written file's spacing and motion had drifted from every page's
+// (4/8/16px against the 6/10/14px rhythm). The generator removes the hand; this
+// test is what notices a hand coming back, or a token-sheet edit nobody regenerated.
+//
+// Run:  node --test tests/design_tokens_generated.mjs
+
+import { strict as assert } from 'node:assert';
+import { test } from 'node:test';
+import fs from 'node:fs';
+import path from 'node:path';
+import { createRequire } from 'node:module';
+import { fileURLToPath } from 'node:url';
+
+const require = createRequire(import.meta.url);
+const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
+const gen = require(path.join(ROOT, 'modules', 'ui-design', 'scripts', 'gen-design-tokens.js'));
+
+test('the committed token file is exactly what the generator writes', () => {
+  const committed = fs.readFileSync(path.join(ROOT, 'config', 'design-tokens.neutral.json'), 'utf8');
+  assert.equal(committed, gen.build(),
+    'config/design-tokens.neutral.json is stale or hand-edited: run node modules/ui-design/scripts/gen-design-tokens.js');
+});
+
+test('every scale, radius and motion value is the shared sheet\'s --ds-* value', () => {
+  const vars = gen.readSheetVars(fs.readFileSync(path.join(ROOT, 'modules', 'ui-design', 'public', 'tokens.css'), 'utf8'));
+  const tokens = JSON.parse(gen.build());
+  for (const group of ['scale', 'radius', 'motion']) {
+    for (const [key, prop] of Object.entries(gen.MAP[group])) {
+      assert.equal(tokens[group][key], vars[prop], `${group}.${key} must be ${prop}`);
+    }
+  }
+  assert.equal(tokens.scale.xs, '6px', 'the rhythm starts at the 6px hair step');
+});
+
+test('a token-sheet change reaches the generated file (the generator reads the sheet, not a copy)', () => {
+  const sheet = ':root { --ds-space-hair: 7px; --ds-space-xs: 10px; --ds-space-sm: 14px; --ds-space-md: 22px;'
+    + ' --ds-space-lg: 34px; --ds-space-xl: 52px; --ds-radius-tile: 10px; --ds-radius-panel: 16px;'
+    + ' --ds-radius-pill: 999px; --ds-dur-fast: 150ms; --ds-dur-base: 200ms; --ds-dur-arrive: 700ms;'
+    + ' --ds-ease: cubic-bezier(.2, .7, .3, 1); }';
+  const pack = JSON.parse(fs.readFileSync(path.join(ROOT, 'config', 'branding.neutral.json'), 'utf8'));
+  assert.equal(JSON.parse(gen.build({ sheet, pack })).scale.xs, '7px');
+});
+
+test('a --ds-* step the mapping needs but the sheet lost is an error, not a silent gap', () => {
+  const pack = JSON.parse(fs.readFileSync(path.join(ROOT, 'config', 'branding.neutral.json'), 'utf8'));
+  assert.throws(() => gen.build({ sheet: ':root { --ds-space-hair: 6px; }', pack }), /is not declared/);
+});
+
+test('only the base :root block is read: the dark and reduced-motion restatements do not leak in', () => {
+  const vars = gen.readSheetVars(':root { --ds-dur-fast: 150ms; } @media (prefers-reduced-motion: reduce) { :root { --ds-dur-fast: 0ms; } }');
+  assert.equal(vars['--ds-dur-fast'], '150ms');
+});