@bongos/core 1.24.78 → 1.24.80

package/modules/page-notes/split.js

@@ -76,7 +76,7 @@ async function fileNote(note, { grade, capture, db, log } = {}) {
 // an empty list means nothing filed and the caller says so.
 async function fileIdeatorNotes(submit, { grade, capture, log, authorId, authorName } = {}) {
   const page = { page_id: submit.page_id, page_path: submit.page_path, page_title: submit.page_title, body_md: submit.body_md };
-  let ideas = await aiIdeas({ note: page, grade, voice: 'ideator', timeoutMs: IDEATOR_TIMEOUT_MS });
+  let ideas = await aiIdeas({ note: page, grade, voice: 'notes', timeoutMs: IDEATOR_TIMEOUT_MS });
   let splitBy = 'ai';
   if (!ideas) { ideas = [N.wholeDocIdea({ pageTitle: page.page_title, pageId: page.page_id, bodyMd: page.body_md })]; splitBy = 'whole'; }
   const filed = [];

package/modules/platform-identity/craft-rollup.js

@@ -5,15 +5,16 @@
 // A reporting instance sends, per craft the builder has EARNED credits in, that
 // craft's headline counts (src/bongos/auth-admission.js readCraftRollup):
 //
-//   engineer  { shipped, credits }
-//   artist    { pages_approved, credits }
-//   ideator   { filed, full_ideas, ratified, credits }
+//   artisan   { shipped, credits }
+//   artist    { pages_approved, filed, full_ideas, ratified, credits }
+//
+// (the old engineer / artist / ideator shape is folded in at ingest, foldLegacy)
 //
 // Two halves live here, next to each other so they cannot disagree on the shape:
 //
 //   sanitizeCrafts — what upsertActivity BINDS. The report is third-party
 //     self-report (ADR 0171 D7), so the shape and the caps are the hub's, not
-//     the sender's: only the three crafts, only the named counts, each a
+//     the sender's: only the two crafts, only the named counts, each a
 //     non-negative integer under a ceiling or null. Anything else is dropped.
 //     A count is never text, so nothing here can carry a title or wording.
 //
@@ -30,10 +31,36 @@
 'use strict';
 
 const CRAFT_FIELDS = Object.freeze({
-  engineer: Object.freeze(['shipped', 'credits']),
-  artist: Object.freeze(['pages_approved', 'credits']),
-  ideator: Object.freeze(['filed', 'full_ideas', 'ratified', 'credits']),
+  artisan: Object.freeze(['shipped', 'credits']),
+  artist: Object.freeze(['pages_approved', 'filed', 'full_ideas', 'ratified', 'credits']),
 });
+
+// A reporting instance on a core older than task 1005141 still sends the old
+// crafts: `engineer`, and `artist` + `ideator` as two blocks. They are folded
+// into today's shape BEFORE the hub's caps run, so an old report and a new one
+// land identically: engineer becomes artisan, and the ideator's counts join the
+// artist block with the two credit figures summed. A craft already reported under
+// its new name wins over an old-name block for the same craft.
+function foldLegacy(raw) {
+  const out = { ...raw };
+  if (out.engineer && !out.artisan) out.artisan = out.engineer;
+  delete out.engineer;
+  const ideator = out.ideator;
+  delete out.ideator;
+  if (ideator && typeof ideator === 'object' && !Array.isArray(ideator)) {
+    const art = out.artist && typeof out.artist === 'object' && !Array.isArray(out.artist) ? out.artist : {};
+    // Each half is capped BEFORE the sum: a hostile -3 on one side must not
+    // quietly shave the other side's honest count.
+    const a = cleanCount(art.credits);
+    const i = cleanCount(ideator.credits);
+    out.artist = {
+      ...art,
+      filed: ideator.filed, full_ideas: ideator.full_ideas, ratified: ideator.ratified,
+      credits: a == null && i == null ? null : (a || 0) + (i || 0),
+    };
+  }
+  return out;
+}
 // Far above any honest count, low enough that a sum over every project stays a
 // safe integer and a hostile report cannot dominate a profile by one number.
 const MAX_CRAFT_COUNT = 10_000_000;
@@ -45,6 +72,7 @@ function cleanCount(v) {
 function sanitizeCrafts(raw) {
   const out = {};
   if (!raw || typeof raw !== 'object' || Array.isArray(raw)) return out;
+  raw = foldLegacy(raw);
   for (const [craft, fields] of Object.entries(CRAFT_FIELDS)) {
     const block = raw[craft];
     if (!block || typeof block !== 'object' || Array.isArray(block)) continue;

package/modules/platform-identity/migrations/platform_identity_036_crafts_artisan_artist.sql

@@ -0,0 +1,45 @@
+-- platform_identity_036 — the hub's per-project activity rollup follows core_296's craft
+-- rename (task 1005141, BONGOS-V3 C1): engineer → artisan, ideator → artist.
+--
+-- `disciplines` is mapped and deduped. `crafts` (platform_identity_029) is keyed by
+-- craft: the engineer block becomes the artisan block, and the ideator block's counts
+-- (filed, full_ideas, ratified) merge into the artist block, with credits summed —
+-- the shape modules/platform-identity/craft-rollup.js now sanitizes. A report from an
+-- instance still on an older core is folded the same way at ingest, so these rows and
+-- fresh reports agree.
+
+BEGIN;
+
+UPDATE platform_identity_builder_project_activity a
+   SET disciplines = ARRAY(
+         SELECT m.craft FROM (
+           SELECT CASE d WHEN 'engineer' THEN 'artisan' WHEN 'ideator' THEN 'artist' ELSE d END AS craft,
+                  min(ord) AS first_seen
+             FROM unnest(a.disciplines) WITH ORDINALITY AS u(d, ord)
+            GROUP BY 1
+         ) m ORDER BY m.first_seen)
+ WHERE a.disciplines && ARRAY['engineer', 'ideator']::text[];
+
+UPDATE platform_identity_builder_project_activity
+   SET crafts = (crafts - 'engineer') || jsonb_build_object('artisan', crafts -> 'engineer')
+ WHERE crafts ? 'engineer' AND NOT crafts ? 'artisan';
+
+UPDATE platform_identity_builder_project_activity
+   SET crafts = (crafts - 'ideator') || jsonb_build_object('artist',
+         coalesce(crafts -> 'artist', '{}'::jsonb)
+         || jsonb_strip_nulls(jsonb_build_object(
+              'filed',      crafts -> 'ideator' -> 'filed',
+              'full_ideas', crafts -> 'ideator' -> 'full_ideas',
+              'ratified',   crafts -> 'ideator' -> 'ratified'))
+         || jsonb_build_object('credits',
+              CASE WHEN jsonb_typeof(crafts -> 'artist' -> 'credits') = 'number'
+                     OR jsonb_typeof(crafts -> 'ideator' -> 'credits') = 'number'
+                   THEN to_jsonb(coalesce((crafts -> 'artist' ->> 'credits')::bigint, 0)
+                               + coalesce((crafts -> 'ideator' ->> 'credits')::bigint, 0))
+                   ELSE 'null'::jsonb END))
+ WHERE crafts ? 'ideator';
+
+INSERT INTO schema_migrations (version) VALUES ('platform_identity_036_crafts_artisan_artist')
+ON CONFLICT (version) DO NOTHING;
+
+COMMIT;

package/modules/platform-identity/platform-identity.js

@@ -671,8 +671,8 @@ async function upsertActivity({ clientId, githubId, credits = 0, tasksShipped =
   // api.LIVE_RANK_LADDER is a published doorway export (src/module-api.js, a
   // lazy getter over db-kernel's canonical four-rank ladder).
   const safeRank = api.LIVE_RANK_LADDER.includes(rank) ? rank : null;
-  const disc = (Array.isArray(disciplines) ? disciplines : [])
-    .filter((d) => typeof d === 'string' && d.length > 0 && d.length <= MAX_DISCIPLINE_LENGTH)
+  const disc = api.crafts.normalizeCrafts((Array.isArray(disciplines) ? disciplines : []) // an older core's engineer/ideator → today's crafts, as foldLegacy (task 1005193)
+    .filter((d) => typeof d === 'string' && d.length > 0 && d.length <= MAX_DISCIPLINE_LENGTH))
     .slice(0, MAX_ROLLUP_DISCIPLINES);
   const ships = sanitizeRecentShips(recentShips, clientOrigin);
   // Each craft's own counts (task 1004440), shaped and capped here — see craft-rollup.js.

package/modules/platform-identity/routes/community-leaderboard.js

@@ -55,7 +55,8 @@ module.exports = function communityLeaderboardRoutes() {
     if (!leaderboard.isWindow(window)) {
       return res.fail('bad_window', { status: 400, message: `window must be one of: ${leaderboard.WINDOWS.join(', ')}` });
     }
-    const discipline = (typeof req.query.discipline === 'string' ? req.query.discipline : '').trim();
+    // An old link's engineer/ideator reads as today's craft (task 1005141).
+    const discipline = require('../../../src/module-api').crafts.normalizeCraft((typeof req.query.discipline === 'string' ? req.query.discipline : '').trim());
     if (discipline.length > leaderboard.MAX_DISCIPLINE_CHARS) {
       return res.fail('discipline_too_long', { status: 400, message: `discipline must be at most ${leaderboard.MAX_DISCIPLINE_CHARS} characters` });
     }

package/modules/platform-identity/routes/community-search.js

@@ -63,7 +63,8 @@ module.exports = function communitySearchRoutes() {
     if (q.length > builderSearch.MAX_QUERY_CHARS) {
       return res.fail('query_too_long', { status: 400, message: `q must be at most ${builderSearch.MAX_QUERY_CHARS} characters` });
     }
-    const discipline = (typeof req.query.discipline === 'string' ? req.query.discipline : '').trim();
+    // An old link's engineer/ideator reads as today's craft (task 1005141).
+    const discipline = require('../../../src/module-api').crafts.normalizeCraft((typeof req.query.discipline === 'string' ? req.query.discipline : '').trim());
     if (discipline.length > builderSearch.MAX_DISCIPLINE_CHARS) {
       return res.fail('discipline_too_long', { status: 400, message: `discipline must be at most ${builderSearch.MAX_DISCIPLINE_CHARS} characters` });
     }

package/modules/platform-identity/routes/sso.js

@@ -691,7 +691,8 @@ module.exports = function ssoRoutes() {
         tasksShipped: b.tasks_shipped,
         karma: b.karma,
         rank: b.rank || null,
-        disciplines: Array.isArray(b.disciplines) ? b.disciplines : [],
+        // An instance on an older core still reports engineer/ideator (task 1005141).
+        disciplines: Array.isArray(b.disciplines) ? api.crafts.normalizeCrafts(b.disciplines) : [],
         recentShips: b.recent_ships,
         crafts: b.crafts,
         // The AUTHENTICATED client's registered origin — the bound every pushed

package/modules/platform-identity/tests/platform-identity.mjs

@@ -606,14 +606,14 @@ const upsertCall = (pool) => pool.calls.find((c) => /INSERT INTO platform_identi
 
 await ta('upsertActivity upserts per (client_id, github_id) with the talent snapshot', async () => {
   const pool = activityPool();
-  await P.upsertActivity({ clientId: 'c1', githubId: 42, credits: 100, tasksShipped: 5, karma: 3, rank: 'metic', disciplines: ['engineer'] }, { pool });
+  await P.upsertActivity({ clientId: 'c1', githubId: 42, credits: 100, tasksShipped: 5, karma: 3, rank: 'metic', disciplines: ['artisan'] }, { pool });
   const c = upsertCall(pool);
   assert.match(c.text, /ON CONFLICT \(client_id, github_id\) DO UPDATE/);
   // recent_ships (task 1002803) rides the same row as a jsonb STRING param —
   // an empty list when the sender reported none, never NULL. Its own cap,
   // shape and link bound are covered by tests/hub_recent_ships.mjs. The last param
   // is the report's as-of stamp (task 1004268): null when the sender gave none.
-  assert.deepEqual(c.params, ['c1', 42, 100, 5, 3, 'metic', ['engineer'], '[]', null, '{}']);
+  assert.deepEqual(c.params, ['c1', 42, 100, 5, 3, 'metic', ['artisan'], '[]', null, '{}']);
 });
 
 await ta('upsertActivity sanitizes third-party self-report (ADR 0171 D7): off-ladder rank → null, disciplines validated + capped', async () => {
@@ -622,7 +622,7 @@ await ta('upsertActivity sanitizes third-party self-report (ADR 0171 D7): off-la
     clientId: 'c1', githubId: 42,
     rank: 'Supreme Overlord', // not one of the four core rank keys → stored null
     disciplines: [
-      'engineer', 42, null, { evil: true }, // non-strings dropped
+      'artisan', 42, null, { evil: true }, // non-strings dropped
       'x'.repeat(33),                        // over-length dropped
       'a', 'b', 'c', 'd', 'e', 'f', 'g', 'h', 'i', // valid tail — capped to 8 total
     ],
@@ -633,7 +633,7 @@ await ta('upsertActivity sanitizes third-party self-report (ADR 0171 D7): off-la
   assert.ok(disc.length <= 8, `disciplines capped at 8 (got ${disc.length})`);
   assert.ok(disc.every((d) => typeof d === 'string' && d.length > 0 && d.length <= 32),
     'only bounded string elements survive');
-  assert.equal(disc[0], 'engineer', 'valid elements pass through in order');
+  assert.equal(disc[0], 'artisan', 'valid elements pass through in order');
 });
 
 await ta('upsertActivity keeps a legitimate core rank key', async () => {
@@ -733,7 +733,7 @@ await ta('getRollupForBuilder guards non-numeric github_id BEFORE any query (no
 
 await ta('getRollupForBuilder aggregates un-fanned + names only publicly-catalogued projects', async () => {
   const pool = mockPool([
-    { rows: [{ projects: 2, credits: 150, works_shipped: 7, karma: 4, last_active: 'T', disciplines: ['engineer', 'ui'] }] },
+    { rows: [{ projects: 2, credits: 150, works_shipped: 7, karma: 4, last_active: 'T', disciplines: ['artisan', 'ui'] }] },
     { rows: [
       { name: 'Public Proj', origin: 'https://pub.example', rank_held: 'metic', is_public: true },
       { name: 'Secret Proj', origin: 'https://sec.example', rank_held: 'archon', is_public: false },
@@ -741,7 +741,7 @@ await ta('getRollupForBuilder aggregates un-fanned + names only publicly-catalog
   ]);
   const out = await P.getRollupForBuilder(42, { pool });
   assert.deepEqual(out.totals, { projects: 2, credits: 150, works_shipped: 7, karma: 4 });
-  assert.deepEqual(out.disciplines, ['engineer', 'ui']);
+  assert.deepEqual(out.disciplines, ['artisan', 'ui']);
   assert.equal(out.projects.length, 1, 'only the public catalog row is named');
   // recent_ships rides the project row it belongs to (task 1002803), so a work
   // title can only surface where the project name already may.

package/modules/public-landing/public/community.html

@@ -262,9 +262,8 @@
       <div class="commFilters">
         <div class="commTabs" id="craftTabs" role="group" aria-label="Role">
           <button class="commTab" type="button" data-craft="" aria-pressed="true">Everyone</button>
-          <button class="commTab" type="button" data-craft="engineer" aria-pressed="false">Engineers</button>
+          <button class="commTab" type="button" data-craft="artisan" aria-pressed="false">Artisans</button>
           <button class="commTab" type="button" data-craft="artist" aria-pressed="false">Artists</button>
-          <button class="commTab" type="button" data-craft="ideator" aria-pressed="false">Ideators</button>
           <button class="commTab" type="button" data-craft="ui" aria-pressed="false">Designers</button>
         </div>
         <div class="commWhen">
@@ -314,9 +313,8 @@
         <label class="vh" for="findCraft">Role</label>
         <select id="findCraft">
           <option value="">Any role</option>
-          <option value="engineer">Engineers</option>
+          <option value="artisan">Artisans</option>
           <option value="artist">Artists</option>
-          <option value="ideator">Ideators</option>
           <option value="ui">Designers</option>
         </select>
         <button id="findBtn" type="submit" class="btn small">Search</button>
@@ -365,7 +363,7 @@
   var WINDOWS = ['7d', '30d', '365d', 'all'];
   var QUERY_MIN = 2;
   var QUERY_MAX = 100;
-  var CRAFT_WORD = { engineer: 'engineer', artist: 'artist', ideator: 'ideator', ui: 'designer' };
+  var CRAFT_WORD = { artisan: 'artisan', artist: 'artist', ui: 'designer' };
   // The five sub-pages this file is served as (platform-server.js's /community routes);
   // the path picks one, and its menu items are marked current. The home adds no title.
   var VIEWS = {

package/modules/public-landing/public/index.html

@@ -774,7 +774,7 @@ composition A; landing composition v3, picked by the owner 2026-08-27. No roll,
     <div class="layer">
       <h1 data-brand-tagline><span class="l1">Building Digitally,</span><span class="l2">as simple as Bongos.</span></h1>
 
-      <p class="lede">Bringing AI to the builder, ideator, and artist in everyone.</p>
+      <p class="lede">Bringing AI to the artisan and the artist in everyone.</p>
 
       <div class="doors">
         <div class="doorbar">

package/modules/public-landing/public/projects.html

@@ -1389,7 +1389,7 @@ summary{min-height:24px;padding:3px 0;}
       <div class="card mSec" id="mInvite">
         <h2>Invite a builder</h2>
         <div id="mInv">
-          <p class="finePrint">By GitHub username. The invite is sent from your project’s own hall — that is the invite that lets them in — and they see it on their projects page here too.</p>
+          <p class="finePrint">By GitHub username. The invite is sent from your project’s own hall — that is the invite that lets them in — and they see it on their projects page here too. The hall’s invite box can also invite them to the project’s GitHub repository, which is a separate invite they accept on GitHub.</p>
           <div class="attach">
             <label class="vh" for="mInviteWho">GitHub username</label>
             <input type="text" id="mInviteWho" placeholder="GitHub username" autocomplete="off" autocapitalize="off" spellcheck="false" maxlength="200">

package/modules/specialities/migrations/specialities_004_crafts_artisan_artist.sql

@@ -0,0 +1,30 @@
+-- specialities_004 — specialities follow core_296's craft rename (task 1005141,
+-- BONGOS-V3 C1): engineer → artisan, ideator → artist.
+--
+-- A speciality's discipline is immutable to its OWNER (the update path refuses a
+-- change); this is a vocabulary rename, not a move between crafts, so it rewrites the
+-- catalog and the adoption copy together.
+--
+-- The fold has one collision: specialities_adoptions allows ONE active adoption per
+-- builder per craft. A builder with an active artist speciality AND an active ideator
+-- one would hold two artist adoptions after the rename, so the ideator adoption is
+-- deactivated first (deactivating is how a builder switches; nothing is deleted, and
+-- they can re-adopt it from their speciality page).
+
+BEGIN;
+
+UPDATE specialities_adoptions i
+   SET active = FALSE
+ WHERE i.active AND i.discipline = 'ideator'
+   AND EXISTS (SELECT 1 FROM specialities_adoptions a
+                WHERE a.builder_id = i.builder_id AND a.active AND a.discipline = 'artist');
+
+UPDATE specialities_catalog   SET discipline = 'artisan' WHERE discipline = 'engineer';
+UPDATE specialities_catalog   SET discipline = 'artist'  WHERE discipline = 'ideator';
+UPDATE specialities_adoptions SET discipline = 'artisan' WHERE discipline = 'engineer';
+UPDATE specialities_adoptions SET discipline = 'artist'  WHERE discipline = 'ideator';
+
+INSERT INTO schema_migrations (version) VALUES ('specialities_004_crafts_artisan_artist')
+ON CONFLICT (version) DO NOTHING;
+
+COMMIT;

package/modules/specialities/routes/specialities.js

@@ -192,7 +192,7 @@ module.exports = function buildSpecialitiesRouter() {
 
     const draft = {
       name: String(b.name).trim(),
-      discipline: b.discipline,
+      discipline: api.crafts.normalizeCraft(b.discipline), // old spellings read as today's (task 1005141)
       summary: b.summary || '',
       contract_md: b.contract_md || '',
       visibility: b.visibility || 'private',
@@ -247,7 +247,7 @@ module.exports = function buildSpecialitiesRouter() {
     const b = req.body || {};
     const draft = {
       name: String(b.name).trim(),
-      discipline: b.discipline,
+      discipline: api.crafts.normalizeCraft(b.discipline), // old spellings read as today's (task 1005141)
       summary: b.summary || '',
       contract_md: b.contract_md || '',
       visibility: b.visibility || 'private',

package/modules/status-ui/public/status.js

@@ -987,7 +987,7 @@ function renderAchievementRow(ids) {
 // task 1004437 (WA6.RP07): each row names its roles, main first — the crafts
 // the builder has EARNED in, from the row's own `roles.shown`, not only what
 // they declared. The same words the hall's roster uses. Text only, never markup.
-const ROLE_WORD = { engineer: 'Engineer', artist: 'Artist', ideator: 'Ideator' };
+const ROLE_WORD = { artisan: 'Artisan', artist: 'Artist' };
 function renderRoles(roles) {
   const shown = roles && Array.isArray(roles.shown) ? roles.shown.filter((c) => ROLE_WORD[c]) : [];
   if (!shown.length) return null;

package/modules/ui-design/kit/fixtures/community-leaderboard.json

@@ -2,27 +2,27 @@
   "_": "GET /community/leaderboard for the kit stub (task 1003363): one ranked list per window, already in the route's order (credits, ships, karma, handle). The stub filters by discipline and numbers `place`. Names are invented; the long one tests the row's wrap.",
   "boards": {
     "all": [
-      { "handle": "priya-nair", "github_login": "priyanair", "display_name": "Priya Nair", "avatar_url": "/__kit/avatar.svg", "credits": 18420, "tasks_shipped": 212, "karma": 64, "disciplines": ["engineer", "ui"] },
-      { "handle": "tomas-ek", "github_login": "tomasek", "display_name": "Tomas Ek", "avatar_url": "/__kit/avatar.svg", "credits": 9310, "tasks_shipped": 131, "karma": 40, "disciplines": ["engineer"] },
+      { "handle": "priya-nair", "github_login": "priyanair", "display_name": "Priya Nair", "avatar_url": "/__kit/avatar.svg", "credits": 18420, "tasks_shipped": 212, "karma": 64, "disciplines": ["artisan", "ui"] },
+      { "handle": "tomas-ek", "github_login": "tomasek", "display_name": "Tomas Ek", "avatar_url": "/__kit/avatar.svg", "credits": 9310, "tasks_shipped": 131, "karma": 40, "disciplines": ["artisan"] },
       { "handle": "ada-okafor", "github_login": "adaokafor", "display_name": "Ada Okafor", "avatar_url": "/__kit/avatar.svg", "credits": 6125, "tasks_shipped": 77, "karma": 52, "disciplines": ["artist"] },
-      { "handle": "lin-wei", "github_login": "linwei", "display_name": "Lin Wei", "avatar_url": null, "credits": 2480, "tasks_shipped": 31, "karma": 18, "disciplines": ["ideator", "engineer"] },
+      { "handle": "lin-wei", "github_login": "linwei", "display_name": "Lin Wei", "avatar_url": null, "credits": 2480, "tasks_shipped": 31, "karma": 18, "disciplines": ["artist", "artisan"] },
       { "handle": "maximiliana-van-der-berghe-lindqvist", "github_login": "mvdbl", "display_name": "Maximiliana van der Berghe-Lindqvist", "avatar_url": "/__kit/avatar.svg", "credits": 940, "tasks_shipped": 12, "karma": 7, "disciplines": ["ui"] },
-      { "handle": "jo-park", "github_login": "jopark", "display_name": null, "avatar_url": "/__kit/avatar.svg", "credits": 310, "tasks_shipped": 1, "karma": 0, "disciplines": ["ideator"] }
+      { "handle": "jo-park", "github_login": "jopark", "display_name": null, "avatar_url": "/__kit/avatar.svg", "credits": 310, "tasks_shipped": 1, "karma": 0, "disciplines": ["artist"] }
     ],
     "365d": [
-      { "handle": "priya-nair", "github_login": "priyanair", "display_name": "Priya Nair", "avatar_url": "/__kit/avatar.svg", "credits": 12200, "tasks_shipped": 150, "karma": 41, "disciplines": ["engineer", "ui"] },
+      { "handle": "priya-nair", "github_login": "priyanair", "display_name": "Priya Nair", "avatar_url": "/__kit/avatar.svg", "credits": 12200, "tasks_shipped": 150, "karma": 41, "disciplines": ["artisan", "ui"] },
       { "handle": "ada-okafor", "github_login": "adaokafor", "display_name": "Ada Okafor", "avatar_url": "/__kit/avatar.svg", "credits": 6125, "tasks_shipped": 77, "karma": 52, "disciplines": ["artist"] },
-      { "handle": "tomas-ek", "github_login": "tomasek", "display_name": "Tomas Ek", "avatar_url": "/__kit/avatar.svg", "credits": 4020, "tasks_shipped": 58, "karma": 22, "disciplines": ["engineer"] },
-      { "handle": "lin-wei", "github_login": "linwei", "display_name": "Lin Wei", "avatar_url": null, "credits": 2480, "tasks_shipped": 31, "karma": 18, "disciplines": ["ideator", "engineer"] }
+      { "handle": "tomas-ek", "github_login": "tomasek", "display_name": "Tomas Ek", "avatar_url": "/__kit/avatar.svg", "credits": 4020, "tasks_shipped": 58, "karma": 22, "disciplines": ["artisan"] },
+      { "handle": "lin-wei", "github_login": "linwei", "display_name": "Lin Wei", "avatar_url": null, "credits": 2480, "tasks_shipped": 31, "karma": 18, "disciplines": ["artist", "artisan"] }
     ],
     "30d": [
       { "handle": "ada-okafor", "github_login": "adaokafor", "display_name": "Ada Okafor", "avatar_url": "/__kit/avatar.svg", "credits": 1340, "tasks_shipped": 19, "karma": 9, "disciplines": ["artist"] },
-      { "handle": "priya-nair", "github_login": "priyanair", "display_name": "Priya Nair", "avatar_url": "/__kit/avatar.svg", "credits": 880, "tasks_shipped": 11, "karma": 4, "disciplines": ["engineer", "ui"] },
-      { "handle": "jo-park", "github_login": "jopark", "display_name": null, "avatar_url": "/__kit/avatar.svg", "credits": 310, "tasks_shipped": 1, "karma": 0, "disciplines": ["ideator"] }
+      { "handle": "priya-nair", "github_login": "priyanair", "display_name": "Priya Nair", "avatar_url": "/__kit/avatar.svg", "credits": 880, "tasks_shipped": 11, "karma": 4, "disciplines": ["artisan", "ui"] },
+      { "handle": "jo-park", "github_login": "jopark", "display_name": null, "avatar_url": "/__kit/avatar.svg", "credits": 310, "tasks_shipped": 1, "karma": 0, "disciplines": ["artist"] }
     ],
     "7d": [
       { "handle": "ada-okafor", "github_login": "adaokafor", "display_name": "Ada Okafor", "avatar_url": "/__kit/avatar.svg", "credits": 420, "tasks_shipped": 6, "karma": 3, "disciplines": ["artist"] },
-      { "handle": "tomas-ek", "github_login": "tomasek", "display_name": "Tomas Ek", "avatar_url": "/__kit/avatar.svg", "credits": -15, "tasks_shipped": 0, "karma": 1, "disciplines": ["engineer"] }
+      { "handle": "tomas-ek", "github_login": "tomasek", "display_name": "Tomas Ek", "avatar_url": "/__kit/avatar.svg", "credits": -15, "tasks_shipped": 0, "karma": 1, "disciplines": ["artisan"] }
     ]
   }
 }

package/modules/ui-design/kit/fixtures/community-search.json

@@ -1,9 +1,9 @@
 {
   "_": "GET /community/search for the kit stub (task 1003363): the public, existence-visible builders the stub matches by name or handle. Sam Rivera hides their numbers, so `disciplines` is null: found by name, dropped by any craft filter (builder-search.js).",
   "directory": [
-    { "handle": "priya-nair", "github_login": "priyanair", "display_name": "Priya Nair", "avatar_url": "/__kit/avatar.svg", "disciplines": ["engineer", "ui"] },
+    { "handle": "priya-nair", "github_login": "priyanair", "display_name": "Priya Nair", "avatar_url": "/__kit/avatar.svg", "disciplines": ["artisan", "ui"] },
     { "handle": "priyanka-shah", "github_login": "pshah", "display_name": "Priyanka Shah", "avatar_url": "/__kit/avatar.svg", "disciplines": ["artist"] },
-    { "handle": "tomas-ek", "github_login": "tomasek", "display_name": "Tomas Ek", "avatar_url": "/__kit/avatar.svg", "disciplines": ["engineer"] },
+    { "handle": "tomas-ek", "github_login": "tomasek", "display_name": "Tomas Ek", "avatar_url": "/__kit/avatar.svg", "disciplines": ["artisan"] },
     { "handle": "ada-okafor", "github_login": "adaokafor", "display_name": "Ada Okafor", "avatar_url": "/__kit/avatar.svg", "disciplines": ["artist"] },
     { "handle": "sam-rivera", "github_login": "samrivera", "display_name": "Sam Rivera", "avatar_url": "/__kit/avatar.svg", "disciplines": null }
   ]

package/modules/ui-design/kit/fixtures/scouting-recruiter.json

@@ -1,7 +1,7 @@
 {
   "_": "GET /scouting for a viewer the recruiting door admits — a project owner (task 1003363). `builders` is the ranked tier, which the community page never draws (the leaderboard already shows those numbers to everyone); `name_only` is ADR 0334's hidden-but-open-to-recruiters tier, login, name and avatar only, alphabetical by login as listScoutingNameOnly sends it.",
   "builders": [
-    { "github_id": "9001", "github_login": "priyanair", "display_name": "Priya Nair", "avatar_url": "/__kit/avatar.svg", "project_count": 3, "total_credits": 18420, "total_tasks_shipped": 212, "total_karma": 64, "last_active": "2026-10-20T10:00:00Z", "disciplines": ["engineer", "ui"] }
+    { "github_id": "9001", "github_login": "priyanair", "display_name": "Priya Nair", "avatar_url": "/__kit/avatar.svg", "project_count": 3, "total_credits": 18420, "total_tasks_shipped": 212, "total_karma": 64, "last_active": "2026-10-20T10:00:00Z", "disciplines": ["artisan", "ui"] }
   ],
   "name_only": [
     { "github_login": "kemi-a", "display_name": "Kemi Adeyemi", "avatar_url": "/__kit/avatar.svg" },

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.24.78",
+  "version": "1.24.80",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.24.78",
+      "version": "1.24.80",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.24.78",
+  "version": "1.24.80",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -11507,5 +11507,81 @@
       "id": "1005094",
       "text": "Running Autobongos on a device is now one button. In Settings, Add a device gives you one line to paste on any Windows PC or Mac; its card then appears by itself with a Run button. The button's face tells you what the device i"
     }
+  ],
+  "1.24.79": [
+    {
+      "id": "1005186",
+      "text": "Closed a gap opened by letting Autobongos run on any device. The runner now keeps its own sign-in in its own folder, and the rule that stops an AI session from opening sign-in files did not yet cover that folder. It does now,"
+    }
+  ],
+  "1.24.80": [
+    {
+      "id": "1005193",
+      "text": "New versions can be published again: the checks broken by the craft rename pass, and projects on older versions no longer show the old craft name on the hub."
+    },
+    {
+      "id": "1005148",
+      "text": "In game mode, each builder now sees the project through a visor: their character's actions on the glass, their own character and credits in the corner, and a list of every action on the A key."
+    },
+    {
+      "id": "1005145",
+      "text": "Checked and locked in: after signing in and pressing Start there is no sidebar, and sound, the command-line key and module switches are all reached inside the one options menu; the old settings pages now only send you there."
+    },
+    {
+      "id": "1004794",
+      "text": "Modules can now say what language they are written in, and one naming a language Bongos cannot run yet is turned away with a clear reason."
+    },
+    {
+      "id": "1004793",
+      "text": "Work on the module store can now be planned under a goal, because its code finally has an owner in the project map."
+    },
+    {
+      "id": "1005147",
+      "text": "Builders now pick one of three characters (Artisan, Artist or Patron, drawn from the owner's art) when they join; the pick follows them to every device and shows as their sprite in the top bar."
+    },
+    {
+      "id": "1005144",
+      "text": "Every setting now lives in one options menu with a search box, and in game mode Escape opens it and closes it again."
+    },
+    {
+      "id": "1005191",
+      "text": "A project that is behind now asks its owner, in a clear pop-up, whether to update the builders hall."
+    },
+    {
+      "id": "1005143",
+      "text": "Signing in now opens a start screen (Start, Options, Achievements, Extras, Quit). Start plays a short load screen where the project city builds up week by week with a tip, then the hall opens full screen."
+    },
+    {
+      "id": "1005158",
+      "text": "Design written for claiming work as a chain: a chain reserves a run of tasks for you and your party, while each task inside it is still claimed on its own through the same safety checks as today. Nobody outside the party can g"
+    },
+    {
+      "id": "1005190",
+      "text": "A project owner can now skip the setup stages and open the full hall straight away, with the skip recorded."
+    },
+    {
+      "id": "1005189",
+      "text": "Setting up as a new builder no longer stops to ask for an optional image-generation key."
+    },
+    {
+      "id": "1005146",
+      "text": "Decided how the game's first-person visor sits over the city and the sky, and what the Escape key closes first. Also found a small bug where closing a city card brings the sidebar back."
+    },
+    {
+      "id": "1005066",
+      "text": "Project owners can now invite someone to the project's GitHub repository from the hall's invite box, always read-only, so a person who signs in to the hall can also see the code on their own GitHub once they accept GitHub's em"
+    },
+    {
+      "id": "1005185",
+      "text": "Making a new worktree on a hosted project now tells you the claim command that actually works there (npx bongos claim), instead of one that fails."
+    },
+    {
+      "id": "1005183",
+      "text": "The notes that guide agents around the claim rules pointed at the wrong lines of code. They now name the code directly, and a test stops them going stale again."
+    },
+    {
+      "id": "1005141",
+      "text": "The builders' crafts now carry their game names: Engineers are Artisans, Ideators join the Artists, and Patron is the third character; old links and old records keep working."
+    }
   ]
 }

package/scripts/bongos/autobongos-host.js

@@ -74,16 +74,31 @@ const LOG_ROTATE_BYTES = 20 * 1024 * 1024;
 function runnerHome(env = process.env, home = os.homedir(), repoRoot = REPO_ROOT) {
   if (env.AUTOBONGOS_HOME) return path.resolve(env.AUTOBONGOS_HOME);
   if (path.basename(repoRoot) === 'repo' && isRunnerCopy(repoRoot)) return path.dirname(repoRoot);
-  return path.join(home, '.cloudbongos-runner');
+  return path.join(home, RUNNER_DIR);
 }
 
-// hostPaths — every file this program owns, from one root. `config` is handed to
-// the supervisor as BONGOS_CONFIG_ROOT, which is what keeps its login apart.
+// The runner's folder in the person's home. Named once: the read-deny rule that
+// keeps agents out of the runner's login names this same folder
+// (scripts/bongos/claude-materialize.js RUNNER_CONFIG_DENY), and a test holds the
+// two together.
+const RUNNER_DIR = '.cloudbongos-runner';
+
+// hostPaths — every file this program owns. `configRoot` is handed to the
+// supervisor as BONGOS_CONFIG_ROOT, which is what keeps its login apart.
+//
+// THE LOGIN LIVES IN ONE PLACE ON EVERY DEVICE (task 1005186): configRoot is always
+// <home>/.cloudbongos-runner/config, WHATEVER AUTOBONGOS_HOME says. That variable
+// moves the runner's copy of the project, its logs and its lock; it does not move
+// the login. The reason is the deny rule: agents are refused reads under exactly
+// that folder, and a login that could be put somewhere else by an environment
+// variable would be a login the rule does not cover — on precisely the device
+// someone had customised. One runner per device already, so there is nothing a
+// second config folder would be for.
 function hostPaths(env = process.env, home = os.homedir()) {
   const root = runnerHome(env, home);
   return {
     root,
-    configRoot: path.join(root, 'config'),
+    configRoot: path.join(home, RUNNER_DIR, 'config'),
     logDir: path.join(root, 'logs'),
     log: path.join(root, 'logs', 'autobongos.log'),
     lock: path.join(root, 'host.json'),

package/scripts/bongos/autobongos-loop.js

@@ -82,7 +82,7 @@ function buildWorkerArgs({ sessionId, model = DEFAULT_MODEL, isRoot = false } =
 // runs unattended with the power to ship, so that text must never be able to
 // instruct it. Reuses the grader's hardened fence rather than re-typing one, so
 // there is a single place this class of text is scrubbed and delimited.
-function buildWorkerPrompt({ task, packPath = 'docs/packs/engineer.md' } = {}) {
+function buildWorkerPrompt({ task, packPath = 'docs/packs/artisan.md' } = {}) {
   if (!task || !task.id) throw new Error('buildWorkerPrompt: a task with an id is required');
   return [
     `You are an autonomous builder working ONE claimed task end to end. Read CLAUDE.md and ${packPath} for context. The task is ${task.id}.`,

package/scripts/bongos/claude-materialize.js

@@ -481,10 +481,29 @@ const STARTER_DENY_SECRETS = [
   'Read(**/*.pem)', 'Read(**/id_rsa*)', 'Read(**/id_ed25519*)',
 ];
 const SESSION_STORE_DENY = `Read(~/.config/${ic.FALLBACK_DIR}/instances/**)`;
+// An Autobongos runner keeps ITS OWN login and files in a folder of its own (task 1005095:
+// BONGOS_CONFIG_ROOT, so adding a laptop as a runner never touches the builder's CLI session).
+// That put the runner's session file, and the session store beside it, outside every rule above,
+// which all stop at ~/.config — so on a runner device a worker could open the file and read the
+// runner's login (task 1005186). The whole folder is denied rather than one file name: the
+// runner's heartbeat and run log sit there too and no agent has a reason to read any of it, and
+// a rule on the folder cannot be stepped around by a session file under a new name.
+// The folder name is the device program's (scripts/bongos/autobongos-host.js hostPaths); it is
+// spelled here rather than required from there because this file is the installer and must not
+// load the runner, and tests/claude_materialize.mjs fails if the two ever name different places.
+const RUNNER_CONFIG_DENY = 'Read(~/.cloudbongos-runner/config/**)';
+
+// The rules that name a FIXED place, whatever the instance is called.
+const FIXED_PLACE_DENY = [SESSION_STORE_DENY, RUNNER_CONFIG_DENY];
 
 // A checkout's settings.json takes the identity rebrand like every copied file, and the store's
 // dir is one of the core's `.config/<dir>` literals it rewrites. The store does not move with the
 // brand (task 1003741), so its rule is put back where the CLI reads it (task 1004155).
+//
+// The runner rule needs no putting back: the rebrand rewrites `.config/<core dir>` literals, and
+// the runner's folder is not one (measured: with the put-back removed, the three-brand case in
+// tests/claude_materialize.mjs still holds). That case is what would notice a future rebrand
+// rule broad enough to carry it off.
 function rebrandSettings(text, rebrand) {
   const moved = rebrand(SESSION_STORE_DENY);
   return rebrand(text).split(JSON.stringify(moved)).join(JSON.stringify(SESSION_STORE_DENY));
@@ -504,7 +523,7 @@ function credentialDeny(branding = {}) {
   return [
     ...STARTER_DENY_SECRETS,
     ...dirs.flatMap((dir) => credentialFiles.map((file) => `Read(~/.config/${dir}/${file})`)),
-    SESSION_STORE_DENY,
+    ...FIXED_PLACE_DENY,
   ];
 }