@bongos/core 1.24.8 → 1.24.9

package/docs/page-readings.json

@@ -1859,7 +1859,7 @@
       "surface": "builders",
       "title": "Modules",
       "states_read": ["browse","search-empty","lens","details","out"],
-      "files_hash": "5d13e25fdcd22d84",
+      "files_hash": "2c777359d9db9123",
       "reading_hash": "d544f93125c23b24",
       "counts": {"lines":58,"placed":26,"shared":8,"unplaced":24},
       "omitted": {"data":106},
@@ -1910,8 +1910,8 @@
         {"key":"L0043","section":"Module catalog","text":"Name","placement":"unplaced"},
         {"key":"L0044","section":"Module catalog","text":"No store module matches that {…}.","placement":"unplaced","state":"search-empty"},
         {"key":"L0045","section":"Module catalog","text":"scores","placement":"unplaced","occurrences":2},
-        {"key":"L0046","section":"Module catalog","text":"strong at {…}","placement":"placed","file":"modules/hall-ui/public/modules.js","line":349,"string_id":"e294c3429c2e","occurrences":3},
-        {"key":"L0047","section":"Module catalog","text":"weak at {…}","placement":"placed","file":"modules/hall-ui/public/modules.js","line":351,"string_id":"20318b6da94e"},
+        {"key":"L0046","section":"Module catalog","text":"strong at {…}","placement":"placed","file":"modules/hall-ui/public/modules.js","line":354,"string_id":"e294c3429c2e","occurrences":3},
+        {"key":"L0047","section":"Module catalog","text":"weak at {…}","placement":"placed","file":"modules/hall-ui/public/modules.js","line":356,"string_id":"20318b6da94e"},
         {"key":"L0048","section":"Module catalog","text":"A part is strong at 80 of 100 or more, and weak below the listing floor. Missing data never counts against a module, and a new module is not ranked.","placement":"placed","file":"modules/hall-ui/public/modules.html","line":98,"string_id":"01857ee8cbe3"},
         {"key":"L0049","section":"footer","text":"Sign out","placement":"shared","file":"modules/hall-ui/public/shell.js","line":516,"string_id":"1883ad7f07fc"},
         {"key":"L0050","section":"Module catalog","text":"Builders hall · this session","placement":"placed","file":"modules/hall-ui/public/craft-mode.js","line":670,"string_id":"fd1903586e8e"},

package/migrations/core_287_module_prices_cash_only.sql

@@ -0,0 +1,24 @@
+-- core_287_module_prices_cash_only.sql — task 1004989 (goal 1000092; ADR 0385
+-- decision 2 and its 2026-10-29 amendment).
+--
+-- Credits are a contribution meter: they are never spent, transferred or bought
+-- with, so a module cannot carry a price in credits. A credit price would make
+-- credits stored value. From now on a new price row carries cents only.
+--
+-- HISTORY STAYS READABLE. The CHECK is added NOT VALID, so Postgres enforces it
+-- on every NEW row (and on any update) but does not re-check the rows already
+-- there. A module whose newest price was set in credits keeps that row; the
+-- store reads it as "price coming" — still listed, never buyable with credits —
+-- until its author sets a cash price (the owner's ruling, 2026-10-29). Nothing
+-- is converted, deleted or rewritten. Do not VALIDATE this constraint: the old
+-- credit rows are the evidence of what each author asked, and they would fail it.
+--
+-- core_257's own CHECK (price_cents IS NOT NULL OR price_credits IS NOT NULL)
+-- still holds, so with credits refused a new row must name a cash price.
+
+ALTER TABLE store_module_prices DROP CONSTRAINT IF EXISTS store_module_prices_no_new_credit_price;
+ALTER TABLE store_module_prices
+  ADD CONSTRAINT store_module_prices_no_new_credit_price CHECK (price_credits IS NULL) NOT VALID;
+
+COMMENT ON COLUMN store_module_prices.price_credits IS
+  'Historical only. Credits cannot price a module (ADR 0385 decision 2); new rows must leave this NULL (store_module_prices_no_new_credit_price, NOT VALID so old rows stay). A newest row with only credits reads as "price coming".';

package/modules/hall-ui/public/modules.js

@@ -342,6 +342,11 @@
     const facts = [m.is_new
       ? '<span class="fact-pill fact-pill--info" title="No real-world data yet, so it is listed but not ranked.">new</span>'
       : `<span class="ov-fact">scores <b>${escapeHtml(String(m.overall))}</b></span>`];
+    // A module that still carries only an old credit price stays listed, marked
+    // until its author sets a cash price (task 1004989): credits never buy one.
+    if (m.price && m.price.coming) {
+      facts.push('<span class="fact-pill fact-pill--info" title="Its author has been asked to set a cash price. Credits cannot buy a module.">price coming</span>');
+    }
     const sorted = sortedPartFact(m);
     if (sorted) facts.push(sorted);
     const strong = Array.isArray(m.strengths) ? m.strengths : [];

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.24.8",
+  "version": "1.24.9",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.24.8",
+      "version": "1.24.9",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.24.8",
+  "version": "1.24.9",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -10883,5 +10883,11 @@
       "id": "1004941",
       "text": "Every member can now read the Market Watch rules step by step, propose a change with a reason, and the owner (or the government, by vote) approves it into a new rules version that the next weekly run uses."
     }
+  ],
+  "1.24.9": [
+    {
+      "id": "1004989",
+      "text": "Modules can now only be priced in cash: credits can no longer price or buy one, and modules that still have an old credit price stay listed as \"price coming\" while their authors are asked to set a cash price."
+    }
   ]
 }

package/scripts/bongos/module-store-cli.js

@@ -63,13 +63,17 @@ function storeError(res) {
 // bongos module store — what the store lists (task 1003811)
 // ---------------------------------------------------------------------------
 
-const STORE_USAGE = 'usage: bongos module store [--sort <part>] [--max-cents N] [--max-credits N] [--json]';
+const STORE_USAGE = 'usage: bongos module store [--sort <part>] [--max-cents N] [--json]';
+
+// Credits never price or buy a module (task 1004989, ADR 0385 decision 2).
+const NO_CREDIT_PRICE = 'credits do not price modules: use cents';
 
 // The query GET /store/modules takes, from argv. Returns { query } or { error }.
 // The server checks the values too; this only refuses what is not a value at all.
 function storeQuery(args) {
+  if (args.includes('--max-credits')) return { error: NO_CREDIT_PRICE };
   const params = [];
-  for (const [flag, param] of [['--sort', 'sort'], ['--max-cents', 'max_cents'], ['--max-credits', 'max_credits']]) {
+  for (const [flag, param] of [['--sort', 'sort'], ['--max-cents', 'max_cents']]) {
     const i = args.indexOf(flag);
     if (i === -1) continue;
     const v = args[i + 1];
@@ -79,12 +83,12 @@ function storeQuery(args) {
   return { query: params.length ? `?${params.join('&')}` : '' };
 }
 
+// A cash price, "free", or "price coming" for a module that still carries only an
+// old credit price. Never a credit amount.
 function formatPrice(price) {
   if (!price || price.free) return 'free';
-  const parts = [];
-  if (price.cents != null) parts.push(`$${(price.cents / 100).toFixed(2)}`);
-  if (price.credits != null) parts.push(`${price.credits} credits`);
-  return parts.join(' or ') || 'free';
+  if (price.cents != null) return `$${(price.cents / 100).toFixed(2)}`;
+  return 'price coming';
 }
 
 function formatPlace(category) {
@@ -104,7 +108,7 @@ function formatStore(body) {
     out.push(`  sorted by ${part ? part.title : body.sort}`);
   }
   const max = body.max_price;
-  if (max) out.push(`  at most ${[max.cents != null ? `$${(max.cents / 100).toFixed(2)}` : null, max.credits != null ? `${max.credits} credits` : null].filter(Boolean).join(' or ')}`);
+  if (max && max.cents != null) out.push(`  at most $${(max.cents / 100).toFixed(2)}`);
   out.push('');
   const listed = body.listed || [];
   if (!listed.length) out.push('  Nothing is listed yet.');
@@ -141,22 +145,18 @@ async function cmdStore(args, { log = console.log, errlog = console.error, reque
 // bongos module price — the author sets a module's price (task 1004894)
 // ---------------------------------------------------------------------------
 
-const PRICE_USAGE = 'usage: bongos module price <key> [--cents N] [--credits N]   (0 in either makes it free)';
+const PRICE_USAGE = 'usage: bongos module price <key> --cents N   (0 makes it free)';
 
-// argv -> { key, cents, credits } or { error }. Pure.
+// argv -> { key, cents } or { error }. Pure.
 function priceArgs(args) {
   const key = args[0];
   if (!key || key.startsWith('--') || !KEY_RE.test(key)) return { error: 'name the module: a lowercase kebab-case key' };
-  const out = { key, cents: null, credits: null };
-  for (const [flag, field] of [['--cents', 'cents'], ['--credits', 'credits']]) {
-    const i = args.indexOf(flag);
-    if (i === -1) continue;
-    const v = args[i + 1];
-    if (!v || !/^\d{1,9}$/.test(v)) return { error: `${flag} needs a whole number, 0 or more` };
-    out[field] = Number(v);
-  }
-  if (out.cents === null && out.credits === null) return { error: 'give --cents, --credits or both' };
-  return out;
+  if (args.includes('--credits')) return { error: NO_CREDIT_PRICE };
+  const i = args.indexOf('--cents');
+  if (i === -1) return { error: 'give --cents' };
+  const v = args[i + 1];
+  if (!v || !/^\d{1,9}$/.test(v)) return { error: '--cents needs a whole number, 0 or more' };
+  return { key, cents: Number(v) };
 }
 
 async function cmdPrice(args, { log = console.log, errlog = console.error, request } = {}) {
@@ -166,10 +166,10 @@ async function cmdPrice(args, { log = console.log, errlog = console.error, reque
   try { call = request || storeRequest(); }
   catch (e) { errlog(`bongos module price: ${e.message}`); return 1; }
   let res;
-  try { res = await call('POST', `/store/modules/${encodeURIComponent(p.key)}/price`, { json: { cents: p.cents, credits: p.credits } }); }
+  try { res = await call('POST', `/store/modules/${encodeURIComponent(p.key)}/price`, { json: { cents: p.cents } }); }
   catch (e) { errlog(`bongos module price: the store could not be reached — ${e.message}`); return 1; }
   if (!res.ok) { errlog(`bongos module price: the store answered ${storeError(res)}`); return res.status === 400 ? 2 : 1; }
-  const withFree = (p) => ({ ...p, free: p.cents === 0 || p.credits === 0 });
+  const withFree = (p) => ({ ...p, free: p.cents === 0 });
   const shown = formatPrice(withFree(res.data.price));
   const was = res.data.previous ? formatPrice(withFree(res.data.previous)) : 'free (no price set)';
   log(`✓ "${p.key}" now costs ${shown} (was ${was}).`);

package/scripts/bongos/module.js

@@ -31,7 +31,7 @@
 //     model as the hall's Modules tab (src/module-loader/catalog.js), so the two
 //     surfaces cannot disagree about who built what.
 //
-//   bongos module store [--sort <part>] [--max-cents N] [--max-credits N] [--json]
+//   bongos module store [--sort <part>] [--max-cents N] [--json]
 //     Task 1003811 (criterion wa5-curated-listing) — the STORE from the terminal:
 //     what the catalog lists, in its order. It asks GET /store/modules, the same
 //     read the hall's "In the store" group makes, and never filters, ranks or caps
@@ -39,9 +39,9 @@
 //     sub-category live in one place (src/bongos/module-listing.js), so the hall
 //     and the terminal cannot disagree about which modules are the best.
 //
-//   bongos module price <key> [--cents N] [--credits N]
+//   bongos module price <key> --cents N   (credits never price a module)
 //     Task 1004894 — the module's author sets its price in the store, in money
-//     (cents), credits or both; 0 in either makes it free. The store keeps every
+//     (cents); 0 makes it free. A credit price is refused (task 1004989). The store keeps every
 //     change and shows the newest. A paid module is listed as not yet buyable until
 //     buying arrives (task 1003788).
 //
@@ -72,7 +72,7 @@
 //   bongos module new <key>            scaffold modules/<key>/
 //   bongos module new <key> --force    overwrite an existing modules/<key>/
 //   bongos module list [--catalog]     browse the module catalog (author + origin credit)
-//   bongos module store [--sort <part>] [--max-cents N] [--max-credits N]   what the store lists, best first
+//   bongos module store [--sort <part>] [--max-cents N]   what the store lists, best first
 //   bongos upgrade [--no-store]        pre-check enabled modules vs the core version + list store updates
 //   bongos module check <key> [--sign-off "Name <email>"]   AGPL/publish pre-check + DCO sign-off
 //   bongos module install <key> [--version X.Y.Z]   acquire from the store, verify, place (not enabled)
@@ -968,7 +968,7 @@ async function cmdPublish(args, {
   log = console.log, errlog = console.error,
   modulesDir = MODULES_DIR, pack, upload, writeFile = fs.writeFileSync, priceRequest,
 } = {}) {
-  const PUBLISH_USAGE = 'usage: bongos module publish <key> [--dry-run] [--out <dir>] [--cents N] [--credits N]';
+  const PUBLISH_USAGE = 'usage: bongos module publish <key> [--dry-run] [--out <dir>] [--cents N]';
   const VALUED = new Set(['--out', '--cents', '--credits']);
   const key = args.find((a, i) => !a.startsWith('-') && !VALUED.has(args[i - 1]));
   if (!key) {
@@ -1335,9 +1335,9 @@ function printHelp(out = console.log) {
   out('  bongos module new <key>     Scaffold modules/<key>/ (manifest + skeleton + sample route + HOWTO.md + CLAUDE.md)');
   out('  bongos module list [--catalog] [--search <text>] [--json]');
   out('                              Browse the module catalog — what you can enable, with author + origin credit');
-  out('  bongos module store [--sort <part>] [--max-cents N] [--max-credits N] [--json]');
+  out('  bongos module store [--sort <part>] [--max-cents N] [--json]');
   out('                              What the store lists, best first: above the quality floor, ranked, ten per sub-category');
-  out('  bongos module price <key> [--cents N] [--credits N]');
+  out('  bongos module price <key> --cents N');
   out('                              Set your module\'s price in the store (0 in either makes it free)');
   out('  bongos module remove <key>  Take a store module off this project (switch it off first; its folder is kept aside)');
   out('  bongos upgrade [--no-store] Pre-check enabled modules against the core version (fail-closed),');
@@ -1346,7 +1346,7 @@ function printHelp(out = console.log) {
   out('                              AGPL/publish pre-check before upstreaming + record a DCO-style sign-off');
   out('  bongos module submit <key> [--sign-off "Name <email>"]');
   out('                              Pre-check + sign-off, then file into the rank-gated upstreaming review queue');
-  out('  bongos module publish <key> [--dry-run] [--out <dir>] [--cents N] [--credits N]');
+  out('  bongos module publish <key> [--dry-run] [--out <dir>] [--cents N]');
   out('                              Pack a module version (tarball + hash manifest) and upload it to the module store');
   out('  bongos module install <key> [--version X.Y.Z]');
   out('                              Acquire a module from the store, verify it and place it under modules/ (not enabled)');

package/src/bongos/module-listing.js

@@ -135,39 +135,57 @@ function sortByPart(entries, part) {
 // can both check in one sentence:
 //
 //   highest overall score first; between equal scores the cheaper module first
-//   (free first, then the lowest cash price, then the lowest credit price); then
-//   the key.
+//   (free first, then the lowest cash price, a module whose cash price is still
+//   coming last); then the key.
 //
 // Price never buys a better place: it only orders modules the score could not tell
 // apart (price is never an input to the score, ADR 0343 D6). A buyer may also set a
 // maximum price, which leaves out what costs more — a filter, not a ranking.
 const RANKING = 'Highest overall score first; between equal scores, free modules and then the cheapest come first.';
 
-// A module's current price row ({ price_cents, price_credits } or none) as the
-// catalog shows it. No row is free (isFreePrice, module-store.js); 0 in either
-// currency is free; null means not offered in that currency (core_257). Pure.
+// CREDITS NEVER PRICE A MODULE (task 1004989, ADR 0385 decision 2). Credits are a
+// contribution meter: a credit price would make them stored value. New price rows
+// carry cents only (core_287 refuses price_credits). An OLD row may still carry a
+// credit price; the owner's ruling (2026-10-29) is that such a module stays
+// VISIBLE with a "price coming" note and can NOT be bought with credits, while
+// its author is asked to set a cash price.
+//
+// A module's current price row as the catalog shows it: { cents, free, coming }.
+// Never a credit amount. No row is free (isFreePrice, module-store.js); a cash
+// price of 0 is free. An old row that offered it at 0 credits stays free, as it
+// was: its author offered it at nothing, and no credit moves to have it. An old row whose
+// only price was a positive number of credits is `coming` — no cash price yet,
+// so not free and not buyable. Pure.
 function priceOf(row) {
   const cents = row && row.price_cents != null ? Number(row.price_cents) : null;
-  const credits = row && row.price_credits != null ? Number(row.price_credits) : null;
-  return { cents, credits, free: !row || cents === 0 || credits === 0 };
+  const legacyCredits = row && row.price_credits != null ? Number(row.price_credits) : null;
+  const free = !row || cents === 0 || legacyCredits === 0;
+  return { cents, free, coming: !free && cents == null };
 }
 
-// Whether a module can be bought today. Buying arrives with task 1003788 (area 8's
-// wallet); until then only a free module can be had, and a paid one is listed with
-// its price and marked not yet buyable (owner, 2026-10-26). Flip BUYING_OPEN when
-// the buy action ships, and nothing else needs to change. Pure.
+// What the author of a "price coming" module is asked (task 1004989). One string,
+// so the listing read, the CLI and the hall say the same thing.
+const PRICE_COMING_PROMPT = 'This module still has a price in credits, and credits can no longer price or buy a module. '
+  + 'It stays listed with "price coming" until you set a cash price: bongos module price <key> --cents N (0 makes it free).';
+
+// Whether a module can be bought today. Buying arrives with task 1003788; until
+// then only a free module can be had, and a paid one is listed with its price and
+// marked not yet buyable (owner, 2026-10-26). Flip BUYING_OPEN when the buy action
+// ships. A module whose cash price is still coming stays unbuyable even then:
+// there is nothing to pay in but credits, and credits do not buy. Pure.
 const BUYING_OPEN = false;
 function buyableNow(price) {
-  return !!(price && (price.free || BUYING_OPEN));
+  return !!(price && (price.free || (BUYING_OPEN && price.cents != null)));
 }
 
-// Within a buyer's maximum ({ cents, credits }, either may be null): a free module
-// always is; a priced one is when it is offered at or under a cap the buyer set. Pure.
+// Within a buyer's maximum cash price ({ cents }, or null for no cap): a free
+// module always is; a priced one is when its cash price is at or under the cap.
+// A module whose price is still coming has no cash price to compare, so a cap
+// leaves it out. Pure.
 function withinMaxPrice(price, max) {
-  if (!max || (max.cents == null && max.credits == null)) return true;
+  if (!max || max.cents == null) return true;
   if (price.free) return true;
-  return (max.cents != null && price.cents != null && price.cents <= max.cents)
-    || (max.credits != null && price.credits != null && price.credits <= max.credits);
+  return price.cents != null && price.cents <= max.cents;
 }
 
 // The default order of `listed`, per RANKING. Returns a new array. Pure.
@@ -179,7 +197,6 @@ function rankListed(entries) {
     return ((b.overall ?? -1) - (a.overall ?? -1))
       || (Number(pb.free) - Number(pa.free))
       || (cheap(pa.cents) - cheap(pb.cents))
-      || (cheap(pa.credits) - cheap(pb.credits))
       || a.key.localeCompare(b.key);
   });
 }
@@ -292,8 +309,8 @@ async function buildCatalog({ db, floor = QUALITY_FLOOR, sort = null, maxPrice =
       signals.get(k).push(s);
     }
   }
-  const max = maxPrice && (maxPrice.cents != null || maxPrice.credits != null)
-    ? { cents: maxPrice.cents ?? null, credits: maxPrice.credits ?? null } : null;
+  // A cash cap only (task 1004989): credits are never a price, so never a cap.
+  const max = maxPrice && maxPrice.cents != null ? { cents: maxPrice.cents } : null;
   const cats = await readModuleCategories(newest.map((r) => r.module_key), { db: pool });
   const out = { floor, cap: CAP_PER_SUBCATEGORY, ranking: RANKING, sort: sort || null, sort_parts: SORT_PARTS, max_price: max, listed: [], new: [] };
   for (const r of newest.sort((a, b) => a.module_key.localeCompare(b.module_key))) {
@@ -421,14 +438,24 @@ async function readListing(key, { db, floor = QUALITY_FLOOR, viewerId = null } =
     if (held) placed = { placement: 'excluded', reason: 'over_cap' };
   }
   const overall = score && placed.placement !== 'new' ? score.overall : null;
+  // The price as the catalog shows it, and — to the author only — the ask to set a
+  // cash price when the module still carries only an old credit price (task
+  // 1004989; the owner's ruling, 2026-10-29). Read by idx_store_module_prices_current.
+  const { rows: [priceRow] } = await pool.query(
+    `SELECT price_cents, price_credits FROM store_module_prices
+      WHERE module_key = $1 ORDER BY set_at DESC, id DESC LIMIT 1`, [key]);
+  const price = priceOf(priceRow || null);
   return {
     ...head, version: newest.version, version_id: newest.version_id, overall,
     ...explainPlacement(placed, { overall, floor, security, weaknesses: reading.weaknesses, held }),
     security, ...reading,
+    price, buyable: buyableNow(price),
+    price_prompt: isAuthor && price.coming ? PRICE_COMING_PROMPT : null,
   };
 }
 
 module.exports = {
   QUALITY_FLOOR, STRONG_AT, SORT_PARTS, RANKING, CAP_PER_SUBCATEGORY, placeVersion, readParts,
   sortByPart, priceOf, withinMaxPrice, rankListed, applyCap, listCatalog, explainPlacement, readListing,
+  PRICE_COMING_PROMPT,
 };

package/src/bongos/module-store.js

@@ -254,8 +254,11 @@ async function publishVersion(input, { db, beforeCommit } = {}) {
 // A module with NO price row is free. The owner decided this (2026-09-29): nothing
 // sets a price yet and who may sell is still open, so an unpriced module is
 // acquirable at no cost, and an entitlement taken then is kept if a price is added
-// later (ADR 0338 D2). A priced module is free when either currency it is offered in
-// is zero (0 = free, NULL = not offered in that currency; core_257).
+// later (ADR 0338 D2). A priced module is free when its cash price is zero. An old
+// row that offered it at 0 credits also stays free, as it was — its author offered
+// it at nothing and no credit moves to have it (task 1004989; module-listing.js priceOf
+// reads the same rule). An old row priced only in credits above 0 is NOT free:
+// its cash price is still coming, and credits never buy a module.
 function isFreePrice(priceRow) {
   if (!priceRow) return true;
   return priceRow.price_cents === 0 || priceRow.price_credits === 0;
@@ -387,20 +390,25 @@ async function latestVersions(keys, { db, channelsFor = null } = {}) {
 // author may, and a delisted module takes no new price (it can no longer be
 // acquired). The price is a HISTORY: each change appends a row and the newest is
 // current, which is what the catalog (module-listing.js priceOf) and acquire
-// (isFreePrice above) already read. `cents` / `credits`: a whole number of 0 or
-// more, or null for "not offered in that currency"; at least one must be given
-// (core_257's CHECK), and 0 in either is free. A paid price may be set before
+// (isFreePrice above) already read. `cents`: a whole number of 0 or more; 0 is
+// free. A paid price may be set before
 // buying exists (owner, 2026-10-26): the module is listed with it and marked not yet
 // buyable, and acquire keeps refusing it without an entitlement. Price is never an
 // input to the score (ADR 0343 D6). The history IS the audit of price changes:
 // every row names who set it and when, and the row before it is what it changed
 // from (the audit middleware also logs the request). One transaction, the module row
 // locked FOR UPDATE as publishVersion does, so two changes at once each report the
-// price they really replaced. Returns { ok: true, previous, price } (each
-// { cents, credits } or null) or { ok: false, status, code, message }.
-async function setPrice({ key, cents = null, credits = null, builderId }, { db } = {}) {
+// price they really replaced. Returns { ok: true, previous, price } or
+// { ok: false, status, code, message }.
+//
+// CASH ONLY (task 1004989, ADR 0385 decision 2): credits never price a module, so
+// a new row carries cents and nothing else (core_287 refuses price_credits in the
+// database too). `previous` reports the replaced row's cash price, and `coming:
+// true` when that row priced the module in credits only.
+async function setPrice({ key, cents, builderId }, { db } = {}) {
   const pool = db || require('./pool').pool;
   const refuse = (status, code, message) => ({ ok: false, status, code, message });
+  if (!Number.isInteger(cents) || cents < 0) return refuse(400, 'bad_price', 'A price is a whole number of cents, 0 or more. 0 makes the module free.');
   const client = await pool.connect();
   try {
     await client.query('BEGIN');
@@ -415,13 +423,13 @@ async function setPrice({ key, cents = null, credits = null, builderId }, { db }
       `SELECT price_cents, price_credits FROM store_module_prices
         WHERE module_key = $1 ORDER BY set_at DESC, id DESC LIMIT 1`, [key]);
     await client.query(
-      'INSERT INTO store_module_prices (module_key, price_cents, price_credits, set_by) VALUES ($1, $2, $3, $4)',
-      [key, cents, credits, builderId]);
+      'INSERT INTO store_module_prices (module_key, price_cents, set_by) VALUES ($1, $2, $3)',
+      [key, cents, builderId]);
     await client.query('COMMIT');
     return {
       ok: true,
-      previous: prev ? { cents: prev.price_cents, credits: prev.price_credits } : null,
-      price: { cents, credits },
+      previous: prev ? { cents: prev.price_cents, coming: prev.price_cents == null && Number(prev.price_credits) > 0 } : null,
+      price: { cents },
     };
   } catch (e) {
     try { await client.query('ROLLBACK'); } catch { /* the connection may be gone */ }

package/src/bongos/routes/modules.js

@@ -576,9 +576,9 @@ module.exports = function buildModulesRouter() {
     }));
 
   // POST /api/bongos/store/modules/:key/price — the module's author sets its price
-  // (task 1004894, criterion wa5-module-economy). Body: { cents?, credits? }, each a
-  // whole number of 0 or more, or null for "not offered in that currency"; at least
-  // one is given, and 0 in either is free. Appends a row to the price history; the
+  // (task 1004894, criterion wa5-module-economy). Body: { cents }, a whole number of
+  // 0 or more; 0 is free. A credit price is refused (task 1004989, ADR 0385
+  // decision 2: credits never price or buy a module). Appends a row to the price history; the
   // newest is what the catalog shows and what acquire charges. A paid price may be
   // set before buying exists (owner, 2026-10-26): the catalog marks it not yet
   // buyable. Price never moves the score (ADR 0343 D6). The audit middleware records
@@ -588,21 +588,24 @@ module.exports = function buildModulesRouter() {
   // author check inside setPrice: only the person who published the module prices it.
   router.post('/store/modules/:key/price', auth.requireBuilder, auth.requirePermission('module.submit'),
     asyncHandler('POST /store/modules/:key/price', async (req, res) => {
-      const AMOUNT = { type: 'integer', min: 0, max: 100000000 };
-      if (validateOrRespond(req, res, { cents: AMOUNT, credits: AMOUNT })) return;
+      const body = req.body || {};
+      // Refused before anything else, by name, so an older CLI that still sends
+      // credits is told why rather than seeing a generic validation error.
+      if (body.credits != null) {
+        return res.fail('credit_price_refused', { status: 400, message: 'Credits cannot price a module: they measure contribution and are never spent. Set a cash price in cents (0 makes it free).' });
+      }
+      if (validateOrRespond(req, res, { cents: { type: 'integer', min: 0, max: 100000000 } })) return;
       const { key } = req.params;
       if (!KEY_RE.test(key)) {
         return res.fail('bad_module_key', { status: 400, message: 'A module key is lowercase kebab-case.' });
       }
-      const body = req.body || {};
       const cents = body.cents ?? null;
-      const credits = body.credits ?? null;
-      if (cents === null && credits === null) {
-        return res.fail('bad_price', { status: 400, message: 'Give a price in cents, credits or both. 0 in either makes the module free.' });
+      if (cents === null) {
+        return res.fail('bad_price', { status: 400, message: 'Give a price in cents. 0 makes the module free.' });
       }
-      const out = await setPrice({ key, cents, credits, builderId: req.builder.id });
+      const out = await setPrice({ key, cents, builderId: req.builder.id });
       if (!out.ok) return res.fail(out.code, { status: out.status, message: out.message });
-      log.info({ key, builderId: req.builder.id, cents, credits }, `${key} price set`);
+      log.info({ key, builderId: req.builder.id, cents }, `${key} price set`);
       res.json({ ok: true, module_key: key, previous: out.previous, price: out.price });
     }));
 
@@ -772,9 +775,14 @@ module.exports = function buildModulesRouter() {
       let held = await checkEntitlement(holder);
       if (!held.entitled) {
         if (!r.free) {
+          // Never "pay with credits" (task 1004989): credits are never spent. A
+          // module still carrying only an old credit price has no cash price yet.
+          const coming = r.price && r.price.price_cents == null;
           return res.fail('payment_required', {
             status: 402,
-            message: `"${key}" is priced, and buying a module is not available yet (it arrives with the credit economy, area 8).`,
+            message: coming
+              ? `"${key}" has no cash price yet: its author has been asked to set one. Credits cannot buy a module.`
+              : `"${key}" is priced, and buying a module is not available yet.`,
           });
         }
         const g = await grantEntitlement({ ...holder, source: 'free', grantedBy: req.builder.id });
@@ -917,8 +925,7 @@ module.exports = function buildModulesRouter() {
   // `?sort=<part>` orders the listed modules by the part a buyer cares about
   // (task 1003800, sortByPart); the parts it accepts come back as sort_parts.
   // Without it the listed modules are ranked quality first, price breaking ties
-  // (task 1003808, rankListed); `?max_cents=` / `?max_credits=` leave out modules
-  // that cost more.
+  // (task 1003808, rankListed); `?max_cents=` leaves out modules that cost more.
   //
   // rank: any-builder — a read of public store metadata, like /store/modules/latest:
   // no entitlement taken, nothing changed.
@@ -930,16 +937,19 @@ module.exports = function buildModulesRouter() {
         const names = SORT_PARTS.map((p) => `${p.title} (${p.part})`).join(', ');
         return res.fail('bad_request', { status: 400, message: `The store can be sorted by one part of the score: ${names}.` });
       }
-      // An optional maximum price (task 1003808): ?max_cents= and/or ?max_credits=,
-      // each a whole number of at least 0. Free modules always pass.
+      // An optional maximum price (task 1003808): ?max_cents=, a whole number of at
+      // least 0. Free modules always pass. There is no credit cap (task 1004989):
+      // credits never price a module, so ?max_credits= is refused by name.
+      if (req.query && req.query.max_credits != null) {
+        return res.fail('bad_request', { status: 400, message: 'Credits do not price modules, so there is no maximum in credits. Use max_cents.' });
+      }
       const maxPrice = {};
-      for (const [param, field] of [['max_cents', 'cents'], ['max_credits', 'credits']]) {
-        const v = req.query && req.query[param];
-        if (v == null || v === '') continue;
+      const v = req.query && req.query.max_cents;
+      if (v != null && v !== '') {
         if (typeof v !== 'string' || !/^\d{1,9}$/.test(v)) {
-          return res.fail('bad_request', { status: 400, message: `${param} is a maximum price: a whole number, 0 or more.` });
+          return res.fail('bad_request', { status: 400, message: 'max_cents is a maximum price: a whole number, 0 or more.' });
         }
-        maxPrice[field] = Number(v);
+        maxPrice.cents = Number(v);
       }
       const listing = await listCatalog({ sort, maxPrice });
       res.set('Cache-Control', 'no-store');

package/src/module-api.js

@@ -81,7 +81,7 @@ const { sleep } = require('./sleep');
 // MAJOR (see allowBoxScope below): passes the request through untouched.
 function deprecatedNoopMiddleware(_req, _res, next) { next(); }
 
-const CORE_VERSION = '1.24.8'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.24.9'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('discord'); log.info('mounted');

package/tests/module_store_cli.mjs

@@ -133,8 +133,8 @@ test('the same query through both: a sort and a maximum price give the same modu
   for (const [args, query] of [
     [['--sort', 'tests'], { sort: 'tests' }],
     [['--max-cents', '500'], { max_cents: '500' }],
-    [['--max-credits', '0'], { max_credits: '0' }],
-    [['--sort', 'docs', '--max-cents', '1000', '--max-credits', '100'], { sort: 'docs', max_cents: '1000', max_credits: '100' }],
+    [['--max-cents', '0'], { max_cents: '0' }],
+    [['--sort', 'docs', '--max-cents', '1000'], { sort: 'docs', max_cents: '1000' }],
   ]) {
     const api = (await apiGet(query)).body;
     const cli = await cliJson(args);
@@ -144,6 +144,15 @@ test('the same query through both: a sort and a maximum price give the same modu
   }
 });
 
+test('there is no maximum in credits, in the CLI or the API (task 1004989)', async () => {
+  seed();
+  const errs = [];
+  const never = async () => { throw new Error('must not be called'); };
+  assert.equal(await mod.cmdStore(['--max-credits', '100'], { log: () => {}, errlog: (l) => errs.push(l), request: never }), 2);
+  assert.match(errs.join('\n'), /credits do not price modules/);
+  assert.equal((await apiGet({ max_credits: '100' })).statusCode, 400);
+});
+
 test('the text view keeps the API order: listed ranked, then New, and says the floor and the cap', async () => {
   seed();
   const api = (await apiGet({})).body;
@@ -158,7 +167,9 @@ test('the text view keeps the API order: listed ranked, then New, and says the f
   assert.equal(at('stripe-10'), -1, 'the eleventh is not shown');
   assert.match(text, /stripe-00@1\.0\.0 {2}99\/100 {2}free {2}Money › Stripe payments/);
   assert.match(text, /stripe-01@1\.0\.0 {2}98\/100 {2}\$9\.00/);
-  assert.match(text, /loose@1\.0\.0 {2}88\/100 {2}40 credits \(not yet buyable\)$/m, 'no category, no place; paid is not yet buyable (task 1004894)');
+  assert.match(text, /loose@1\.0\.0 {2}88\/100 {2}price coming \(not yet buyable\)$/m,
+    'an old credit-only price shows as price coming, never as credits (task 1004989); no category, no place');
+  assert.doesNotMatch(text, /\d credits/, 'no credit price anywhere in the text view');
   assert.match(text, /waiting@1\.0\.0 {2}60\/100 {2}free {2}Money$/m, 'a proposed sub-category shows its parent only');
   assert.match(text, /New — not ranked[\s\S]*fresh@1\.0\.0/);
 });