@bongos/core 1.25.15 → 1.25.17

package/modules/public-landing/public/index.html

@@ -43,6 +43,9 @@
      then styles new markup with an old sheet). -->
 <link rel="stylesheet" href="/modules/ui-design/public/tokens.css">
 <link rel="stylesheet" href="/assets/world.css">
+<!-- the start-a-project guide, as a scene in the game (task 1005275): drawn only when the
+     front-door-guide module is on and its server can talk -->
+<link rel="stylesheet" href="/assets/guide-scene.css">
 <style>
 /* ── PAGE-LOCAL SHEET ────────────────────────────────────────────────────
    The composition: how this page arranges the world's sculpture, and nothing
@@ -574,6 +577,12 @@ body{
     --orb-x:4vw;
     --orb-y:-6vh;
     --doors-cx:0;--doors-cy:0;
+    /* the start-a-project guide (assets/guide-scene.css, task 1005275): one column, the
+       frame the whole screen, the plan over the talk from its Plan button */
+    --gd-pad:0;--gd-frame-w:100%;--gd-frame-h:100%;--gd-cols:minmax(0,1fr);--gd-side:0px;
+    --gd-gutter:var(--ds-space-gutter-narrow);--gd-face:56px;--gd-face-img:48px;
+    --gd-planbtn:inline-flex;--gd-planx:inline-grid;--gd-go-w:100%;
+    --gd-plan-show:none;--gd-plan-pos:absolute;--gd-plan-edge:0px;--gd-talk-under-plan:hidden;
   }
   :root[data-mode="dark"] body{
     --layer-pos:relative;
@@ -779,7 +788,7 @@ composition A; landing composition v3, picked by the owner 2026-08-27. No roll,
       <div class="doors">
         <div class="doorbar">
           <a class="door" href="/projects">Find a project to join</a>
-          <a class="door door--go" href="/projects?view=new">Start a project</a>
+          <a class="door door--go" href="/projects?view=new" data-guide-door>Start a project</a>
         </div>
       </div>
     </div>
@@ -945,7 +954,7 @@ composition A; landing composition v3, picked by the owner 2026-08-27. No roll,
     <div class="wrap">
       <div class="closemark" aria-hidden="true"></div>
       <div class="doorbar">
-        <a class="door door--go" href="/projects?view=new">Start a project</a>
+        <a class="door door--go" href="/projects?view=new" data-guide-door>Start a project</a>
         <a class="door" href="/projects">Find a project</a>
       </div>
       <div class="cli" data-cli hidden>
@@ -957,6 +966,53 @@ composition A; landing composition v3, picked by the owner 2026-08-27. No roll,
   </section>
 </main>
 
+<!-- THE GUIDE (task 1005275): the start-a-project conversation as a scene in the game.
+     Hidden, and never opened, unless the front-door-guide module is on and its status read
+     says it can talk (assets/guide-scene.js); with it off the doors above are plain links. -->
+<div class="gd" id="guide" role="dialog" aria-modal="true" aria-labelledby="gdTitle" hidden>
+  <div class="gd__frame">
+    <section class="gd__talk" aria-labelledby="gdTitle">
+      <div class="gd__head">
+        <h2 class="gd__title" id="gdTitle">Start a project</h2>
+        <button type="button" class="gd__x" data-gd="close" aria-label="Close"><svg viewBox="0 0 20 20" aria-hidden="true"><path d="M5 5l10 10M15 5L5 15"/></svg></button>
+      </div>
+      <div class="gd__who-row">
+        <span class="gd__face"><img src="/modules/hall-ui/public/characters/patron.png" alt="" width="64" height="64"></span>
+        <div class="gd__meta">
+          <p class="gd__name">Your guide</p>
+          <p class="gd__left" data-gd="left" aria-live="polite" hidden></p>
+          <span class="gd__segs" data-gd="segs" aria-hidden="true" hidden></span>
+        </div>
+        <button type="button" class="gd__planbtn" data-gd="plan-toggle" aria-expanded="false" aria-controls="gdPlan">Plan</button>
+      </div>
+      <ol class="gd__log" data-gd="log" aria-live="polite" aria-label="Conversation"></ol>
+      <p class="gd__err" data-gd="err" role="alert" hidden></p>
+      <form class="gd__say" data-gd="form" hidden>
+        <label class="vh" for="gdText">Your message</label>
+        <textarea class="gd__text" id="gdText" data-gd="text" rows="2" maxlength="1000" placeholder="What do you want to build?"></textarea>
+        <input class="gd__hp" type="text" name="website" data-gd="website" tabindex="-1" autocomplete="off" aria-hidden="true">
+        <button type="submit" class="gd__send" data-gd="send">Send</button>
+        <div class="gd__sayfoot">
+          <button type="button" class="gd__more" data-gd="make-plan" hidden>Make my plan</button>
+          <a class="gd__skip" data-gd="skip" href="/projects?view=new">Skip to sign up</a>
+        </div>
+      </form>
+      <div class="gd__end" data-gd="end" hidden>
+        <button type="button" class="gd__more" data-gd="plan-again" hidden>Make my plan</button>
+        <a class="gd__go" data-gd="go" href="/projects?view=new">Sign up and get started</a>
+      </div>
+    </section>
+    <aside class="gd__plan" id="gdPlan" aria-labelledby="gdPlanH">
+      <div class="gd__planhead">
+        <h3 class="gd__planh" id="gdPlanH">Your plan</h3>
+        <button type="button" class="gd__x" data-gd="plan-close" aria-label="Back to the chat"><svg viewBox="0 0 20 20" aria-hidden="true"><path d="M5 5l10 10M15 5L5 15"/></svg></button>
+      </div>
+      <div class="gd__planbody" data-gd="plan-body"><p class="gd__planwait">When the chat ends, your guide writes your plan here.</p></div>
+      <p class="gd__saved" data-gd="saved" hidden></p>
+    </aside>
+  </div>
+</div>
+
 <footer>
   <div class="footrow">
     <p><!--apex-only:start-->A non-profit, capture-resistant commons. <!--apex-only:end-->Built by agents, on Cloud&nbsp;Bongos. <a href="https://www.npmjs.com/package/@bongos/core" target="_blank" rel="noopener">Open source</a> (<a href="https://www.gnu.org/licenses/agpl-3.0.html" target="_blank" rel="noopener">AGPL-3.0</a>).</p>
@@ -1035,6 +1091,8 @@ composition A; landing composition v3, picked by the owner 2026-08-27. No roll,
   json(API + '/me').then(function (data) {
     var me = data && (data.builder || data.me);
     if (!me || !me.github_login) return;
+    /* the start-a-project guide is for a visitor who has not signed up (task 1005275) */
+    document.querySelectorAll('[data-guide-door]').forEach(function (d) { d.removeAttribute('data-guide-door'); });
     var slot = document.getElementById('who');
     if (!slot) return;
     slot.textContent = '';
@@ -1302,6 +1360,8 @@ composition A; landing composition v3, picked by the owner 2026-08-27. No roll,
   });
 })();
 </script>
+<!-- the start-a-project guide (task 1005275) -->
+<script src="/assets/guide-scene.js"></script>
 <!-- the Artist review button: signed-in builders only (task 1004499) -->
 <script src="/assets/artist-review.js" data-hall="{{buildersOrigin}}"></script>
 </body>

package/modules/public-landing/public/projects.html

@@ -2250,7 +2250,13 @@ summary{min-height:24px;padding:3px 0;}
      wires. null when there is nothing to show (no platform chosen). */
   function appStatusView(data) {
     var app = data && data.app;
-    if (!app) return null;
+    if (!app) {
+      /* no app on Render yet: the sandbox says plainly why it has none (task 1005289) */
+      if (!data || !data.sandbox || data.sandbox.state !== 'none') return null;
+      var nv = { root: appEl('div', 'appStat') };
+      sandboxView(data.sandbox, nv);
+      return nv;
+    }
     var v = { root: appEl('div', 'appStat') };
     if (app.state === 'disconnected') {
       v.root.appendChild(appPara(['This project is no longer connected to Render. Its services there are still yours; remove them in Render if you want to stop paying.']));
@@ -2304,6 +2310,7 @@ summary{min-height:24px;padding:3px 0;}
       }
     }
     if (app.links) v.root.appendChild(appPara([appLink(app.links.service, 'Open it on Render')]));
+    sandboxView(data.sandbox, v);
     var vars = (data.env_vars || []).filter(function (x) { return !x.set_for_you; });
     if (vars.length) {
       v.root.appendChild(appEl('h3', null, 'Still to set on Render'));
@@ -2320,7 +2327,59 @@ summary{min-height:24px;padding:3px 0;}
     }
     return v;
   }
-  function appTerminal(data) { var a = data && data.app; return !a || a.state === 'disconnected' || !!a.error || a.stage === 'live'; }
+  /* ── the project's sandbox (task 1005289, ADR 0406) ──
+     A free copy of the app on the owner's Render account that takes every finished change
+     first; the live app moves only when a person promotes. Same server-shaped answer as
+     the app's (`data.sandbox`), drawn beside it, node by node. "Add a sandbox" asks for the
+     key once, like every Render action, and never keeps it. */
+  var mSandboxOn = {};   /* project id → has a sandbox to remove, so the teardown asks for the key only then */
+  /* the stage word is the app's own (APP_STAGES), so one page never names one stage two ways */
+  function stageWord(stage) {
+    var s = stage === 'quiet' ? 'building' : stage;
+    for (var i = 0; i < APP_STAGES.length; i++) if (APP_STAGES[i][0] === s) return APP_STAGES[i][1];
+    return APP_STAGES[0][1];
+  }
+  function sandboxView(sb, v) {
+    if (!sb) return;
+    var box = appEl('div', 'appSandbox');
+    box.appendChild(appEl('h3', null, 'Sandbox'));
+    box.appendChild(appPara(['A free test copy of your app. Every finished change reaches it first; your live app only changes when you promote it.'], 'finePrint'));
+    if (sb.state === 'none' || sb.state === 'requested' || sb.state === 'left') {
+      box.appendChild(appPara([String(sb.error || sb.message || '')], sb.state === 'left' ? 'err' : null));
+    } else if (sb.error) {
+      box.appendChild(appPara([String(sb.error)], 'err'));
+    } else {
+      var line = [stageWord(sb.stage)];
+      if (sb.url) line.push(' at ', appLink(sb.url, String(sb.url).replace(/^https:\/\//, '')));
+      line.push('. It sleeps when nobody visits and takes about a minute to wake.');
+      box.appendChild(appPara(line));
+      if (sb.links) box.appendChild(appPara([appLink(sb.links.service, 'Open the sandbox on Render')]));
+    }
+    if (sb.database && sb.database.note) box.appendChild(appPara([String(sb.database.note)], 'finePrint'));
+    if (sb.can_add) {
+      v.sbBtn = appEl('button', 'btn ghost small appSbBtn', sb.state === 'none' ? 'Add a sandbox' : 'Try the sandbox again');
+      v.sbBtn.type = 'button';
+      box.appendChild(v.sbBtn);
+      v.sbForm = appEl('div', 'appRetry appSbForm');
+      v.sbForm.hidden = true;
+      var lab = appEl('label', 'wizField');
+      lab.appendChild(appEl('span', null, 'Render API key'));
+      v.sbKey = appEl('input', 'appRetryKey');
+      v.sbKey.type = 'password'; v.sbKey.autocomplete = 'off'; v.sbKey.spellcheck = false; v.sbKey.maxLength = 200; v.sbKey.placeholder = 'rnd_…';
+      lab.appendChild(v.sbKey);
+      v.sbForm.appendChild(lab);
+      v.sbSend = appEl('button', 'btn small', 'Add the sandbox');
+      v.sbSend.type = 'button';
+      v.sbForm.appendChild(v.sbSend);
+      v.sbHint = appEl('div', 'hint appRetryHint', 'Free on Render. Your key is used once and thrown away.');
+      v.sbHint.setAttribute('role', 'status');
+      v.sbForm.appendChild(v.sbHint);
+      box.appendChild(v.sbForm);
+    }
+    v.root.appendChild(box);
+  }
+  function sandboxSettled(sb) { return !sb || ['none', 'left', 'removed'].indexOf(sb.state) >= 0 || !!sb.error || sb.stage === 'live' || sb.stage === 'quiet'; }
+  function appTerminal(data) { var a = data && data.app; return (!a || a.state === 'disconnected' || !!a.error || a.stage === 'live') && sandboxSettled(data && data.sandbox); }
   function fetchAppStatus(id) {
     return fetch(API + '/provisioning/instances/' + encodeURIComponent(id) + '/render', { credentials: 'same-origin' })
       .then(function (res) { return res.ok ? res.json() : null; })
@@ -2337,6 +2396,8 @@ summary{min-height:24px;padding:3px 0;}
     function paint(data) {
       if (stopped || !alive()) return;
       last = data;
+      var sbNow = data && data.sandbox;
+      mSandboxOn[String(id)] = !!(sbNow && (sbNow.links || sbNow.url));
       /* never repaint over a Retry the owner has opened — it holds a key they are typing */
       /* …whether this watch opened it or an earlier one on the same box did (the project
          page starts a fresh watch on every reload of the project) */
@@ -2352,6 +2413,7 @@ summary{min-height:24px;padding:3px 0;}
     }
     function tick() { fetchAppStatus(id).then(paint); }
     function wire(v) {
+      if (v.sbBtn) wireSandbox(v);
       if (!v.retryBtn) return;
       v.retryBtn.addEventListener('click', function () {
         v.retryForm.hidden = false; v.retryBtn.hidden = true; v.keyEl.focus();
@@ -2381,6 +2443,30 @@ summary{min-height:24px;padding:3px 0;}
         });
       });
     }
+    function wireSandbox(v) {
+      v.sbBtn.addEventListener('click', function () { v.sbForm.hidden = false; v.sbBtn.hidden = true; v.sbKey.focus(); });
+      v.sbSend.addEventListener('click', function () {
+        var key = String(v.sbKey.value || '').trim();
+        if (!/^rnd_[A-Za-z0-9]{16,128}$/.test(key)) {
+          v.sbHint.textContent = 'That doesn’t look like a Render API key. It starts with “rnd_”.'; v.sbHint.className = 'hint appRetryHint err'; return;
+        }
+        var body = JSON.stringify({ key: key });
+        v.sbKey.value = ''; key = '';
+        v.sbSend.disabled = true; v.sbHint.textContent = 'Handing it to Render…'; v.sbHint.className = 'hint appRetryHint';
+        fetch(API + '/provisioning/instances/' + encodeURIComponent(id) + '/render/sandbox', {
+          method: 'POST', credentials: 'same-origin', headers: { 'Content-Type': 'application/json' }, body: body
+        }).then(function (res) {
+          body = '';
+          return res.json().catch(function () { return {}; }).then(function (d) {
+            if (!res.ok) throw new Error((d.error && d.error.message) || 'The sandbox could not be queued.');
+            v.sbForm.hidden = true; view = null; clearTimeout(t); ticks = 0; tick();
+          });
+        }).catch(function (err) {
+          body = '';
+          v.sbSend.disabled = false; v.sbHint.textContent = err.message; v.sbHint.className = 'hint appRetryHint err';
+        });
+      });
+    }
     tick();
     return function stop() { stopped = true; clearTimeout(t); };
   }
@@ -11095,7 +11181,12 @@ summary{min-height:24px;padding:3px 0;}
       '<input type="text" id="mDelName" autocomplete="off" spellcheck="false" maxlength="40" ' +
       'aria-label="Type the project name to confirm" placeholder="' + esc(inst.slug) + '">' +
       '<button type="button" class="btn small danger" data-del-yes disabled>Yes, tear it down</button>' +
-      '<button type="button" class="linklike" data-del-no>Keep it</button></div>');
+      '<button type="button" class="linklike" data-del-no>Keep it</button></div>' +
+      (mSandboxOn[String(inst.id)]
+        ? '<label class="wizField"><span>Render API key, to remove its sandbox too (optional)</span>' +
+          '<input type="password" id="mDelRenderKey" autocomplete="off" spellcheck="false" maxlength="200" placeholder="rnd_…"></label>' +
+          '<p class="finePrint">Only the free sandbox is removed. Your live app on Render is left as it is. The key is used once and thrown away; without it the sandbox stays on your Render account for you to remove.</p>'
+        : ''));
     var field = $('mDelName');
     if (field) field.focus();
   }
@@ -11126,11 +11217,17 @@ summary{min-height:24px;padding:3px 0;}
     /* the typed name is this page's own gate, never the server's — so a click
        on a button that only LOOKS enabled cannot act */
     if (!inst || !delTypedMatches()) return;
+    var rkField = $('mDelRenderKey');
+    var rk = rkField ? String(rkField.value || '').trim() : '';
+    var headers = { 'Content-Type': 'application/json' };
+    if (/^rnd_[A-Za-z0-9]{16,128}$/.test(rk)) headers['x-render-key'] = rk;
+    rk = '';
     mDelAsking = null;
     delMsg('<p class="finePrint">Asking…</p>');
     fetch(API + '/provisioning/instances/' + encodeURIComponent(inst.id) + '/teardown', {
-      method: 'POST', credentials: 'same-origin', headers: { 'Content-Type': 'application/json' }, body: '{}'
+      method: 'POST', credentials: 'same-origin', headers: headers, body: '{}'
     }).then(function (res) {
+      delete headers['x-render-key'];
       return jsonOrEmpty(res).then(function (data) {
         if (res.ok) {
           var note = esc(data.message || 'Teardown requested.');

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.25.15",
+  "version": "1.25.17",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.25.15",
+      "version": "1.25.17",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.25.15",
+  "version": "1.25.17",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -11807,10 +11807,32 @@
       "text": "The project guide now asks whether you are starting fresh or already have something, and for an existing project plans from your own description, without ever reading your files or code."
     }
   ],
-  "1.25.15": [
+  "1.25.16": [
+    {
+      "id": "1005110",
+      "text": "Genesis setup now shows each stage's work as a checklist that fills in as tasks ship, and a step that must wait for the one before it is clearly locked until then."
+    },
+    {
+      "id": "1005114",
+      "text": "The project's first setup step now asks the founder real questions — what they are making and why, who it is for, what success looks like in two years, and what others in the area get wrong. Answers are saved as answers, 'not"
+    },
+    {
+      "id": "1005275",
+      "text": "Visitors pressing Start a project can now talk with a game-style guide about their idea, see a plan form and their messages left, then sign up; when the guide is off it works exactly as before."
+    },
     {
       "id": "1005116",
       "text": "Founders now write their own strategy. Each setup stage can be done three ways: answer guided questions, write it freely, or get help from your own AI — and you can switch at any time without losing anything. Your answers are"
     }
+  ],
+  "1.25.17": [
+    {
+      "id": "1005289",
+      "text": "Every project on Render now gets a free test copy of its app that takes each finished change first, shown beside the live site, added in one click for existing projects and removed when the project is taken down."
+    },
+    {
+      "id": "1005280",
+      "text": "Owners bringing in an existing project get a prompt for their own AI to read the code and map goals, tasks and what's broken; they then choose what Bongos files as drafts."
+    }
   ]
 }

package/scripts/bongos/first-read.js

@@ -0,0 +1,116 @@
+#!/usr/bin/env node
+// scripts/bongos/first-read.js — `bongos first-read`: the command the owner's own AI
+// session runs during the first read-through of a project that already exists (task
+// 1005280, goal 1000106).
+//
+// The session reads the repository on the owner's computer and subscription, writes a
+// map, and uses this to hand it to Bongos. Nothing here sends repository content: only
+// the map file the session wrote, which `check` validates locally first with the same
+// rules the server applies (modules/lifecycle/first-read.js).
+//
+//   bongos first-read prompt                 print the prompt and the map's shape
+//   bongos first-read check  <map.json>      validate locally (no network)
+//   bongos first-read submit <map.json>      send it for review — files nothing
+//   bongos first-read show   [<map id>]      the newest map (or one), with what is filed
+//   bongos first-read accept <map id> --all | --items <ref>,<ref>   ONLY with the owner's yes
+//   bongos first-read reject <map id>        the owner's no — files nothing
+
+'use strict';
+
+const fs = require('node:fs');
+const fr = require('../../modules/lifecycle/first-read');
+
+function readMap(file) {
+  if (!file) { console.error(`usage: bongos first-read check|submit <${fr.MAP_FILE}>`); process.exit(2); }
+  let text;
+  try { text = fs.readFileSync(file, 'utf8').replace(/^/, ''); } catch (e) { console.error(`Cannot read ${file}: ${e.message}`); process.exit(2); }
+  try { return JSON.parse(text); } catch (e) { console.error(`${file} is not valid JSON: ${e.message}`); process.exit(1); }
+}
+
+function printErrors(errors) {
+  console.error('The map needs fixing:');
+  for (const e of errors) console.error(`  - ${e}`);
+}
+
+function printItems(items) {
+  for (const i of items) {
+    const mark = i.filed ? '  [already in Bongos]' : '';
+    const indent = i.type === 'goal' ? '' : '    ';
+    console.log(`${indent}${i.type.padEnd(4)}  ${i.title}${mark}\n${indent}      ref: ${i.ref}`);
+  }
+}
+
+// A refusal prints and returns null; the caller then ends with cliExit — never a hard
+// process.exit after a request (the Windows abort in scripts/bongos/CLAUDE.md).
+async function call(method, path, body) {
+  const { apiCall } = require('./cli-lib');
+  const res = await apiCall(method, path, body);
+  if (!res.ok) {
+    const d = res.data || {};
+    console.error(`Bongos refused (${res.status}): ${d.error || d.code || 'error'}`);
+    if (Array.isArray(d.errors)) printErrors(d.errors);
+    if (d.unknown) console.error(`  unknown refs: ${d.unknown.join(', ')}`);
+    if (d.hint || d.message) console.error(`  ${d.hint || d.message}`);
+    return null;
+  }
+  return res.data;
+}
+
+const fail = () => require('./cli-lib').cliExit(1);
+const flag = (name) => { const i = process.argv.indexOf(name); return i === -1 ? null : (process.argv[i + 1] || ''); };
+
+(async () => {
+  const [verb, arg] = process.argv.slice(2);
+  switch (verb) {
+    case 'prompt':
+      console.log(fr.firstReadPrompt());
+      return;
+    case 'check': {
+      const v = fr.validateRepoMap(readMap(arg));
+      if (!v.ok) { printErrors(v.errors); process.exit(1); }
+      console.log(`The map is in the right shape: ${v.items.length} items.`);
+      printItems(v.items);
+      return;
+    }
+    case 'submit': {
+      const raw = readMap(arg);
+      const v = fr.validateRepoMap(raw);
+      if (!v.ok) { printErrors(v.errors); process.exit(1); }
+      const out = await call('POST', '/api/bongos/first-read/maps', { map: raw });
+      if (!out) return fail();
+      console.log(`Sent as map ${out.map_id}. Nothing is filed yet.`);
+      printItems(out.items);
+      console.log(`\nWalk the owner through it. Only with their yes:\n  bongos first-read accept ${out.map_id} --all\n  bongos first-read accept ${out.map_id} --items <ref>,<ref>\nor, if they want none of it:\n  bongos first-read reject ${out.map_id}`);
+      return;
+    }
+    case 'show': {
+      const out = await call('GET', `/api/bongos/first-read/maps/${arg || 'latest'}`);
+      if (!out) return fail();
+      console.log(`Map ${out.map_id} (${out.status})\n${out.summary}\n`);
+      printItems(out.items);
+      return;
+    }
+    case 'accept': {
+      if (!arg) { console.error('usage: bongos first-read accept <map id> --all | --items <ref>,<ref>'); process.exit(2); }
+      const list = flag('--items');
+      const items = process.argv.includes('--all') ? 'all' : (list ? list.split(',').map((s) => s.trim()).filter(Boolean) : null);
+      if (!items || (Array.isArray(items) && !items.length)) { console.error('Say what the owner accepted: --all, or --items <ref>,<ref>.'); process.exit(2); }
+      const out = await call('POST', `/api/bongos/first-read/maps/${arg}/accept`, items === 'all' ? { all: true } : { items });
+      if (!out) return fail();
+      console.log(`Filed as drafts: ${out.filed.goals.length} goals, ${out.filed.tasks.length} tasks (tasks wait in backlog until promoted).`);
+      for (const g of out.filed.goals) console.log(`  goal ${g.id}  ${g.title}`);
+      for (const t of out.filed.tasks) console.log(`  task ${t.id}  ${t.title}`);
+      for (const s of out.skipped) console.log(`  skipped ${s.ref} (${s.reason.replace('_', ' ')})`);
+      return;
+    }
+    case 'reject': {
+      if (!arg) { console.error('usage: bongos first-read reject <map id>'); process.exit(2); }
+      if (!(await call('POST', `/api/bongos/first-read/maps/${arg}/reject`, {}))) return fail();
+      console.log(`Map ${arg} rejected. Nothing was filed.`);
+      return;
+    }
+    default:
+      console.log('usage: bongos first-read prompt | check <file> | submit <file> | show [id] | accept <id> --all|--items a,b | reject <id>');
+      process.exit(verb ? 2 : 0);
+  }
+})().catch((e) => { console.error(e.message || e); process.exitCode = 1; });

package/scripts/bongos/genesis.js

@@ -37,7 +37,9 @@ const ORIGIN_LABEL = { assisted: ' (with AI help)', carried_over: ' (carried ove
 function formatStage(s) {
   const out = [`${s.stage[0].toUpperCase()}${s.stage.slice(1)} — working ${s.door}` +
     (s.adopted ? ` · ${s.counts.answered} answered, ${s.counts.not_sure} not sure, ${s.counts.skipped} skipped, ${s.counts.empty} empty` : '')];
+  let group = null;
   for (const q of s.questions) {
+    if (q.group && q.group !== group) { group = q.group; out.push(`  — ${group} —`); }
     out.push(`  ${q.id}: ${q.ask}`);
     if (!q.answer) { out.push('    (empty)'); continue; }
     const a = q.answer;

package/scripts/bongos/government-walk.js

@@ -73,10 +73,8 @@ const ACTIVE_IDS = BUILDERS.filter((b) => b.status === 'active').map((b) => b.id
 const FOUNDER = '42';
 const COUNCIL = ['43', '44'];
 
-// Each bound route as a request that, as today, stops in its handler's own first
-// check (a bad id or body) before any database write — the same requests as
-// tests/government_act_alone_buildings.mjs, with People's two carrying a real
-// custom rank and builder of this project.
+// Each bound route as a request that stops in its handler's first check (bad id or body),
+// before any DB write — as tests/government_act_alone_buildings.mjs; People's two carry a real rank + builder.
 const BAD = 'x';
 const REQUESTS = Object.freeze({
   'PATCH /project-settings/rot-days': ['PATCH', '/project-settings/rot-days', { days: 'soon' }],
@@ -98,6 +96,7 @@ const REQUESTS = Object.freeze({
   'POST /goals/reorder': ['POST', '/goals/reorder', {}],
   'POST /work-categories': ['POST', '/work-categories', {}],
   'PUT /versions/focus': ['PUT', '/versions/focus', { version_id: '   ' }],
+  'POST /first-read/maps/:id/accept': ['POST', `/first-read/maps/${BAD}/accept`, { all: true }],
   'POST /autonomy/fence': ['POST', '/autonomy/fence', { enabled: 'yes' }],
   'POST /autonomy/fence/goals': ['POST', '/autonomy/fence/goals', { goal_id: 0 }],
   'DELETE /autonomy/fence/goals/:goalId': ['DELETE', `/autonomy/fence/goals/${BAD}`],
@@ -141,6 +140,7 @@ const ROUTERS = Object.freeze([
   'modules/lifecycle/routes/goals.js',
   'modules/lifecycle/routes/versions.js',
   'modules/lifecycle/routes/project-settings.js',
+  'modules/lifecycle/routes/first-read.js',
   'modules/render-deploy/routes/act.js',
   'modules/npm-release/routes/release.js',
   'modules/provisioning/routes/core-upgrade.js',