@bongos/core 1.25.16 → 1.25.18

package/modules/public-landing/public/projects.html

@@ -2250,7 +2250,13 @@ summary{min-height:24px;padding:3px 0;}
      wires. null when there is nothing to show (no platform chosen). */
   function appStatusView(data) {
     var app = data && data.app;
-    if (!app) return null;
+    if (!app) {
+      /* no app on Render yet: the sandbox says plainly why it has none (task 1005289) */
+      if (!data || !data.sandbox || data.sandbox.state !== 'none') return null;
+      var nv = { root: appEl('div', 'appStat') };
+      sandboxView(data.sandbox, nv);
+      return nv;
+    }
     var v = { root: appEl('div', 'appStat') };
     if (app.state === 'disconnected') {
       v.root.appendChild(appPara(['This project is no longer connected to Render. Its services there are still yours; remove them in Render if you want to stop paying.']));
@@ -2304,6 +2310,7 @@ summary{min-height:24px;padding:3px 0;}
       }
     }
     if (app.links) v.root.appendChild(appPara([appLink(app.links.service, 'Open it on Render')]));
+    sandboxView(data.sandbox, v);
     var vars = (data.env_vars || []).filter(function (x) { return !x.set_for_you; });
     if (vars.length) {
       v.root.appendChild(appEl('h3', null, 'Still to set on Render'));
@@ -2320,7 +2327,59 @@ summary{min-height:24px;padding:3px 0;}
     }
     return v;
   }
-  function appTerminal(data) { var a = data && data.app; return !a || a.state === 'disconnected' || !!a.error || a.stage === 'live'; }
+  /* ── the project's sandbox (task 1005289, ADR 0406) ──
+     A free copy of the app on the owner's Render account that takes every finished change
+     first; the live app moves only when a person promotes. Same server-shaped answer as
+     the app's (`data.sandbox`), drawn beside it, node by node. "Add a sandbox" asks for the
+     key once, like every Render action, and never keeps it. */
+  var mSandboxOn = {};   /* project id → has a sandbox to remove, so the teardown asks for the key only then */
+  /* the stage word is the app's own (APP_STAGES), so one page never names one stage two ways */
+  function stageWord(stage) {
+    var s = stage === 'quiet' ? 'building' : stage;
+    for (var i = 0; i < APP_STAGES.length; i++) if (APP_STAGES[i][0] === s) return APP_STAGES[i][1];
+    return APP_STAGES[0][1];
+  }
+  function sandboxView(sb, v) {
+    if (!sb) return;
+    var box = appEl('div', 'appSandbox');
+    box.appendChild(appEl('h3', null, 'Sandbox'));
+    box.appendChild(appPara(['A free test copy of your app. Every finished change reaches it first; your live app only changes when you promote it.'], 'finePrint'));
+    if (sb.state === 'none' || sb.state === 'requested' || sb.state === 'left') {
+      box.appendChild(appPara([String(sb.error || sb.message || '')], sb.state === 'left' ? 'err' : null));
+    } else if (sb.error) {
+      box.appendChild(appPara([String(sb.error)], 'err'));
+    } else {
+      var line = [stageWord(sb.stage)];
+      if (sb.url) line.push(' at ', appLink(sb.url, String(sb.url).replace(/^https:\/\//, '')));
+      line.push('. It sleeps when nobody visits and takes about a minute to wake.');
+      box.appendChild(appPara(line));
+      if (sb.links) box.appendChild(appPara([appLink(sb.links.service, 'Open the sandbox on Render')]));
+    }
+    if (sb.database && sb.database.note) box.appendChild(appPara([String(sb.database.note)], 'finePrint'));
+    if (sb.can_add) {
+      v.sbBtn = appEl('button', 'btn ghost small appSbBtn', sb.state === 'none' ? 'Add a sandbox' : 'Try the sandbox again');
+      v.sbBtn.type = 'button';
+      box.appendChild(v.sbBtn);
+      v.sbForm = appEl('div', 'appRetry appSbForm');
+      v.sbForm.hidden = true;
+      var lab = appEl('label', 'wizField');
+      lab.appendChild(appEl('span', null, 'Render API key'));
+      v.sbKey = appEl('input', 'appRetryKey');
+      v.sbKey.type = 'password'; v.sbKey.autocomplete = 'off'; v.sbKey.spellcheck = false; v.sbKey.maxLength = 200; v.sbKey.placeholder = 'rnd_…';
+      lab.appendChild(v.sbKey);
+      v.sbForm.appendChild(lab);
+      v.sbSend = appEl('button', 'btn small', 'Add the sandbox');
+      v.sbSend.type = 'button';
+      v.sbForm.appendChild(v.sbSend);
+      v.sbHint = appEl('div', 'hint appRetryHint', 'Free on Render. Your key is used once and thrown away.');
+      v.sbHint.setAttribute('role', 'status');
+      v.sbForm.appendChild(v.sbHint);
+      box.appendChild(v.sbForm);
+    }
+    v.root.appendChild(box);
+  }
+  function sandboxSettled(sb) { return !sb || ['none', 'left', 'removed'].indexOf(sb.state) >= 0 || !!sb.error || sb.stage === 'live' || sb.stage === 'quiet'; }
+  function appTerminal(data) { var a = data && data.app; return (!a || a.state === 'disconnected' || !!a.error || a.stage === 'live') && sandboxSettled(data && data.sandbox); }
   function fetchAppStatus(id) {
     return fetch(API + '/provisioning/instances/' + encodeURIComponent(id) + '/render', { credentials: 'same-origin' })
       .then(function (res) { return res.ok ? res.json() : null; })
@@ -2337,6 +2396,8 @@ summary{min-height:24px;padding:3px 0;}
     function paint(data) {
       if (stopped || !alive()) return;
       last = data;
+      var sbNow = data && data.sandbox;
+      mSandboxOn[String(id)] = !!(sbNow && (sbNow.links || sbNow.url));
       /* never repaint over a Retry the owner has opened — it holds a key they are typing */
       /* …whether this watch opened it or an earlier one on the same box did (the project
          page starts a fresh watch on every reload of the project) */
@@ -2352,6 +2413,7 @@ summary{min-height:24px;padding:3px 0;}
     }
     function tick() { fetchAppStatus(id).then(paint); }
     function wire(v) {
+      if (v.sbBtn) wireSandbox(v);
       if (!v.retryBtn) return;
       v.retryBtn.addEventListener('click', function () {
         v.retryForm.hidden = false; v.retryBtn.hidden = true; v.keyEl.focus();
@@ -2381,6 +2443,30 @@ summary{min-height:24px;padding:3px 0;}
         });
       });
     }
+    function wireSandbox(v) {
+      v.sbBtn.addEventListener('click', function () { v.sbForm.hidden = false; v.sbBtn.hidden = true; v.sbKey.focus(); });
+      v.sbSend.addEventListener('click', function () {
+        var key = String(v.sbKey.value || '').trim();
+        if (!/^rnd_[A-Za-z0-9]{16,128}$/.test(key)) {
+          v.sbHint.textContent = 'That doesn’t look like a Render API key. It starts with “rnd_”.'; v.sbHint.className = 'hint appRetryHint err'; return;
+        }
+        var body = JSON.stringify({ key: key });
+        v.sbKey.value = ''; key = '';
+        v.sbSend.disabled = true; v.sbHint.textContent = 'Handing it to Render…'; v.sbHint.className = 'hint appRetryHint';
+        fetch(API + '/provisioning/instances/' + encodeURIComponent(id) + '/render/sandbox', {
+          method: 'POST', credentials: 'same-origin', headers: { 'Content-Type': 'application/json' }, body: body
+        }).then(function (res) {
+          body = '';
+          return res.json().catch(function () { return {}; }).then(function (d) {
+            if (!res.ok) throw new Error((d.error && d.error.message) || 'The sandbox could not be queued.');
+            v.sbForm.hidden = true; view = null; clearTimeout(t); ticks = 0; tick();
+          });
+        }).catch(function (err) {
+          body = '';
+          v.sbSend.disabled = false; v.sbHint.textContent = err.message; v.sbHint.className = 'hint appRetryHint err';
+        });
+      });
+    }
     tick();
     return function stop() { stopped = true; clearTimeout(t); };
   }
@@ -2680,7 +2766,7 @@ summary{min-height:24px;padding:3px 0;}
       try { id = new URLSearchParams(location.search).get('id'); } catch (e) {}
       if (id) { manageId = String(id); return 'manage'; }
       try { handedProject = new URLSearchParams(location.search).get('project') || null; } catch (e) {}
-      if (handedProject && /^#m(Delete|Disconnect)$/.test(location.hash || '')) handedSection = location.hash.slice(1);
+      if (handedProject && /^#m(Delete|Disconnect|AppCard)$/.test(location.hash || '')) handedSection = location.hash.slice(1);
       return 'mine';
     }
     return VIEWS[v] ? v : 'map';
@@ -9607,7 +9693,16 @@ summary{min-height:24px;padding:3px 0;}
         if (handedSection) {
           var target = $(handedSection);
           handedSection = null;
-          if (target && target.scrollIntoView) target.scrollIntoView({ block: 'start' });
+          /* the app card (#mAppCard, the hall's Connect Render link — task 1004571) is
+             drawn by its own read below, so it is still hidden here: land on it once shown */
+          if (target && target.hidden && typeof MutationObserver === 'function') {
+            var seen = new MutationObserver(function () {
+              if (target.hidden) return;
+              seen.disconnect();
+              if (target.scrollIntoView) target.scrollIntoView({ block: 'start' });
+            });
+            seen.observe(target, { attributes: true, attributeFilter: ['hidden'] });
+          } else if (target && target.scrollIntoView) target.scrollIntoView({ block: 'start' });
         }
         /* the SECOND, GitHub-backed read — fired only here (entry + tab
            return), never from renderManage, which the fetch-free tick calls */
@@ -11095,7 +11190,12 @@ summary{min-height:24px;padding:3px 0;}
       '<input type="text" id="mDelName" autocomplete="off" spellcheck="false" maxlength="40" ' +
       'aria-label="Type the project name to confirm" placeholder="' + esc(inst.slug) + '">' +
       '<button type="button" class="btn small danger" data-del-yes disabled>Yes, tear it down</button>' +
-      '<button type="button" class="linklike" data-del-no>Keep it</button></div>');
+      '<button type="button" class="linklike" data-del-no>Keep it</button></div>' +
+      (mSandboxOn[String(inst.id)]
+        ? '<label class="wizField"><span>Render API key, to remove its sandbox too (optional)</span>' +
+          '<input type="password" id="mDelRenderKey" autocomplete="off" spellcheck="false" maxlength="200" placeholder="rnd_…"></label>' +
+          '<p class="finePrint">Only the free sandbox is removed. Your live app on Render is left as it is. The key is used once and thrown away; without it the sandbox stays on your Render account for you to remove.</p>'
+        : ''));
     var field = $('mDelName');
     if (field) field.focus();
   }
@@ -11126,11 +11226,17 @@ summary{min-height:24px;padding:3px 0;}
     /* the typed name is this page's own gate, never the server's — so a click
        on a button that only LOOKS enabled cannot act */
     if (!inst || !delTypedMatches()) return;
+    var rkField = $('mDelRenderKey');
+    var rk = rkField ? String(rkField.value || '').trim() : '';
+    var headers = { 'Content-Type': 'application/json' };
+    if (/^rnd_[A-Za-z0-9]{16,128}$/.test(rk)) headers['x-render-key'] = rk;
+    rk = '';
     mDelAsking = null;
     delMsg('<p class="finePrint">Asking…</p>');
     fetch(API + '/provisioning/instances/' + encodeURIComponent(inst.id) + '/teardown', {
-      method: 'POST', credentials: 'same-origin', headers: { 'Content-Type': 'application/json' }, body: '{}'
+      method: 'POST', credentials: 'same-origin', headers: headers, body: '{}'
     }).then(function (res) {
+      delete headers['x-render-key'];
       return jsonOrEmpty(res).then(function (data) {
         if (res.ok) {
           var note = esc(data.message || 'Teardown requested.');

package/modules/ui-design/kit/serve.js

@@ -132,7 +132,7 @@ const UNAUTH = { error: { code: 'unauthenticated', message: 'unauthenticated' }
 // only its length matters here; `optional` and `bundles` are byte-for-byte.
 const STARTER_BUNDLES_FIXTURE = {
   core: [
-    'autonomy', 'builder-settings', 'copy-desk', 'economy', 'government', 'grading',
+    'app-host', 'autonomy', 'builder-settings', 'copy-desk', 'economy', 'government', 'grading',
     'hall-ui', 'ideas', 'lifecycle', 'memory', 'onboarding', 'page-notes', 'public-landing',
     'security', 'sessions', 'specialities', 'status-ui', 'ui-design',
   ],

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.25.16",
+  "version": "1.25.18",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.25.16",
+      "version": "1.25.18",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.25.16",
+  "version": "1.25.18",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -11824,5 +11824,33 @@
       "id": "1005116",
       "text": "Founders now write their own strategy. Each setup stage can be done three ways: answer guided questions, write it freely, or get help from your own AI — and you can switch at any time without losing anything. Your answers are"
     }
+  ],
+  "1.25.17": [
+    {
+      "id": "1005289",
+      "text": "Every project on Render now gets a free test copy of its app that takes each finished change first, shown beside the live site, added in one click for existing projects and removed when the project is taken down."
+    },
+    {
+      "id": "1005280",
+      "text": "Owners bringing in an existing project get a prompt for their own AI to read the code and map goals, tasks and what's broken; they then choose what Bongos files as drafts."
+    }
+  ],
+  "1.25.18": [
+    {
+      "id": "1005281",
+      "text": "When an owner's own AI reads their existing project, it can now suggest modules from the project's own list that would do a weak job better; the owner accepts each one as a to-do or dismisses it."
+    },
+    {
+      "id": "1005276",
+      "text": "People who start a project from the front page can now talk with the guide in a plain, simple version instead of the game, and switch between the two mid-chat."
+    },
+    {
+      "id": "1005119",
+      "text": "When founding a project, the charter step now asks how decisions should go and what the founder believes, then recommends a government, a level of strictness, and a first draft of the rules, each with the reason in the founder"
+    },
+    {
+      "id": "1004571",
+      "text": "Inside a project's hall, the options menu now shows where the project's app runs (no platform yet, or Render and its progress and address), and gives the owner a one-click way to connect Render."
+    }
   ]
 }

package/scripts/bongos/first-read.js

@@ -0,0 +1,150 @@
+#!/usr/bin/env node
+// scripts/bongos/first-read.js — `bongos first-read`: the command the owner's own AI
+// session runs during the first read-through of a project that already exists (task
+// 1005280, goal 1000106).
+//
+// The session reads the repository on the owner's computer and subscription, writes a
+// map, and uses this to hand it to Bongos. Nothing here sends repository content: only
+// the map file the session wrote, which `check` validates locally first with the same
+// rules the server applies (modules/lifecycle/first-read.js).
+//
+//   bongos first-read prompt                 print the prompt, with this project's module list
+//   bongos first-read catalog                the modules a map may recommend (task 1005281)
+//   bongos first-read check  <map.json>      validate (asks for the module list only when
+//                                            the map recommends modules)
+//   bongos first-read submit <map.json>      send it for review — files nothing
+//   bongos first-read show   [<map id>]      the newest map (or one), with what is filed
+//   bongos first-read accept <map id> --all | --items <ref>,<ref>   ONLY with the owner's yes
+//   bongos first-read dismiss <map id> --items <ref>,<ref>   the owner's no to some items
+//   bongos first-read reject <map id>        the owner's no to all of it — files nothing
+
+'use strict';
+
+const fs = require('node:fs');
+const fr = require('../../modules/lifecycle/first-read');
+
+function readMap(file) {
+  if (!file) { console.error(`usage: bongos first-read check|submit <${fr.MAP_FILE}>`); process.exit(2); }
+  let text;
+  try { text = fs.readFileSync(file, 'utf8').replace(/^/, ''); } catch (e) { console.error(`Cannot read ${file}: ${e.message}`); process.exit(2); }
+  try { return JSON.parse(text); } catch (e) { console.error(`${file} is not valid JSON: ${e.message}`); process.exit(1); }
+}
+
+function printErrors(errors) {
+  console.error('The map needs fixing:');
+  for (const e of errors) console.error(`  - ${e}`);
+}
+
+function printItems(items) {
+  for (const i of items) {
+    const mark = !i.filed ? '' : i.filed.kind === 'dismissed' ? '  [dismissed]' : '  [already in Bongos]';
+    const indent = i.type === 'goal' || i.type === 'module' ? '' : '    ';
+    console.log(`${indent}${i.type.padEnd(6)}  ${i.title}${mark}\n${indent}        ref: ${i.ref}`);
+    if (i.type === 'module' && i.found) console.log(`${indent}        found: ${i.found}`);
+  }
+}
+
+// A refusal prints and returns null; the caller then ends with cliExit — never a hard
+// process.exit after a request (the Windows abort in scripts/bongos/CLAUDE.md).
+async function call(method, path, body) {
+  const { apiCall } = require('./cli-lib');
+  const res = await apiCall(method, path, body);
+  if (!res.ok) {
+    const d = res.data || {};
+    console.error(`Bongos refused (${res.status}): ${d.error || d.code || 'error'}`);
+    if (Array.isArray(d.errors)) printErrors(d.errors);
+    if (d.unknown) console.error(`  unknown refs: ${d.unknown.join(', ')}`);
+    if (d.hint || d.message) console.error(`  ${d.hint || d.message}`);
+    return null;
+  }
+  return res.data;
+}
+
+const fail = () => require('./cli-lib').cliExit(1);
+
+// The live module list, or null when it cannot be read (no session, or the server says so).
+async function liveCatalog() {
+  const out = await call('GET', '/api/bongos/first-read/catalog');
+  return out && out.available ? out.modules : null;
+}
+const flag = (name) => { const i = process.argv.indexOf(name); return i === -1 ? null : (process.argv[i + 1] || ''); };
+
+(async () => {
+  const [verb, arg] = process.argv.slice(2);
+  switch (verb) {
+    case 'prompt': {
+      // The server's prompt carries the live module list; offline, the fixed text says
+      // how to fetch it later.
+      const out = await call('GET', '/api/bongos/first-read/prompt');
+      console.log(out ? out.prompt : fr.firstReadPrompt());
+      return;
+    }
+    case 'catalog': {
+      const out = await call('GET', '/api/bongos/first-read/catalog');
+      if (!out) return fail();
+      if (!out.available) { console.log('The module list cannot be read on this project. Leave "recommended_modules" out of the map.'); return; }
+      if (!out.modules.length) { console.log('This project has no modules left to switch on. Leave "recommended_modules" out of the map.'); return; }
+      console.log('Modules this project can switch on (recommend only these, by key):');
+      for (const m of out.modules) console.log(`  ${m.key}: ${m.title}. ${m.summary}`.trimEnd());
+      return;
+    }
+    case 'check': {
+      const raw = readMap(arg);
+      const recommends = Array.isArray(raw.recommended_modules) && raw.recommended_modules.length > 0;
+      const v = fr.validateRepoMap(raw, recommends ? { catalog: await liveCatalog() } : {});
+      if (!v.ok) { printErrors(v.errors); process.exit(1); }
+      console.log(`The map is in the right shape: ${v.items.length} items.`);
+      printItems(v.items);
+      return;
+    }
+    case 'submit': {
+      const raw = readMap(arg);
+      const v = fr.validateRepoMap(raw);
+      if (!v.ok) { printErrors(v.errors); process.exit(1); }
+      const out = await call('POST', '/api/bongos/first-read/maps', { map: raw });
+      if (!out) return fail();
+      console.log(`Sent as map ${out.map_id}. Nothing is filed yet.`);
+      printItems(out.items);
+      console.log(`\nWalk the owner through it. Only with their yes:\n  bongos first-read accept ${out.map_id} --all\n  bongos first-read accept ${out.map_id} --items <ref>,<ref>\nwhat they turn down:\n  bongos first-read dismiss ${out.map_id} --items <ref>,<ref>\nor, if they want none of it:\n  bongos first-read reject ${out.map_id}`);
+      return;
+    }
+    case 'show': {
+      const out = await call('GET', `/api/bongos/first-read/maps/${arg || 'latest'}`);
+      if (!out) return fail();
+      console.log(`Map ${out.map_id} (${out.status})\n${out.summary}\n`);
+      printItems(out.items);
+      return;
+    }
+    case 'accept': {
+      if (!arg) { console.error('usage: bongos first-read accept <map id> --all | --items <ref>,<ref>'); process.exit(2); }
+      const list = flag('--items');
+      const items = process.argv.includes('--all') ? 'all' : (list ? list.split(',').map((s) => s.trim()).filter(Boolean) : null);
+      if (!items || (Array.isArray(items) && !items.length)) { console.error('Say what the owner accepted: --all, or --items <ref>,<ref>.'); process.exit(2); }
+      const out = await call('POST', `/api/bongos/first-read/maps/${arg}/accept`, items === 'all' ? { all: true } : { items });
+      if (!out) return fail();
+      console.log(`Filed as drafts: ${out.filed.goals.length} goals, ${out.filed.tasks.length} tasks (tasks wait in backlog until promoted).`);
+      for (const g of out.filed.goals) console.log(`  goal ${g.id}  ${g.title}`);
+      for (const t of out.filed.tasks) console.log(`  task ${t.id}  ${t.title}`);
+      for (const s of out.skipped) console.log(`  skipped ${s.ref} (${s.reason.replace('_', ' ')})`);
+      return;
+    }
+    case 'dismiss': {
+      const list = (flag('--items') || '').split(',').map((x) => x.trim()).filter(Boolean);
+      if (!arg || !list.length) { console.error('usage: bongos first-read dismiss <map id> --items <ref>,<ref>'); process.exit(2); }
+      const out = await call('POST', `/api/bongos/first-read/maps/${arg}/dismiss`, { items: list });
+      if (!out) return fail();
+      console.log(`Dismissed: ${out.dismissed.length ? out.dismissed.join(', ') : 'nothing'}. A later read-through will not raise them again.`);
+      for (const x of out.skipped) console.log(`  skipped ${x.ref} (${x.reason.replace('_', ' ')})`);
+      return;
+    }
+    case 'reject': {
+      if (!arg) { console.error('usage: bongos first-read reject <map id>'); process.exit(2); }
+      if (!(await call('POST', `/api/bongos/first-read/maps/${arg}/reject`, {}))) return fail();
+      console.log(`Map ${arg} rejected. Nothing was filed.`);
+      return;
+    }
+    default:
+      console.log('usage: bongos first-read prompt | catalog | check <file> | submit <file> | show [id] | accept <id> --all|--items a,b | dismiss <id> --items a,b | reject <id>');
+      process.exit(verb ? 2 : 0);
+  }
+})().catch((e) => { console.error(e.message || e); process.exitCode = 1; });

package/scripts/bongos/genesis.js

@@ -41,16 +41,36 @@ function formatStage(s) {
   for (const q of s.questions) {
     if (q.group && q.group !== group) { group = q.group; out.push(`  — ${group} —`); }
     out.push(`  ${q.id}: ${q.ask}`);
+    if (q.choices) out.push(`    choose: ${q.choices.map((c) => `${c.key} (${c.label})`).join(' · ')}`);
     if (!q.answer) { out.push('    (empty)'); continue; }
     const a = q.answer;
-    const words = a.text ? a.text.replace(/\n/g, '\n    ') : '';
+    const said = a.choice_label || a.text;
+    const words = said ? said.replace(/\n/g, '\n    ') : '';
     out.push(`    ${STATE_LABEL[a.state] || ''}${words}${ORIGIN_LABEL[a.origin] || ''}`.trimEnd());
   }
   if (s.page) out.push('  Page:', `    ${s.page.replace(/\n/g, '\n    ')}`);
   if (s.link) out.push(`  Link: ${s.link}`);
+  if (s.advice) out.push('', ...formatAdvice(s.advice));
   return out.join('\n');
 }
 
+// Pure: the charter stage's recommendation from the founder's answers (task 1005119).
+// A recommendation only: choosing is still the founder's.
+function formatAdvice(a) {
+  const out = [`  Recommended government: ${a.charter.name}`, `    Why: ${a.charter.why}`];
+  if (a.charter.council_rank) out.push(`    It is governed by a council rank you create: ${a.charter.council_rank}.`);
+  out.push('    It is a recommendation. Any form, or your own settings, is still yours to choose.');
+  if (a.preset) {
+    out.push(`  Recommended strictness: ${a.preset.name}. ${a.preset.line}`, `    Why: ${a.preset.why}`, `    ${a.preset.is}`);
+    for (const l of a.preset.laws) out.push(`    - ${l.text}: ${l.effect_on_ai}`);
+  } else {
+    out.push('  Strictness: no preset recommended. Written principles with no laws is a fine way to start.');
+  }
+  out.push('  Draft bylaws and code of conduct, from your answers (edit it, then save it with',
+    '  npx bongos genesis page charter --file <path>):', '', ...String(a.draft_md || '').split('\n').map((l) => `    ${l}`));
+  return out;
+}
+
 // Pure: parse `answer` arguments into the PUT body, or { error }.
 function parseAnswer(rest) {
   const args = [...rest];

package/scripts/bongos/government-walk.js

@@ -73,10 +73,8 @@ const ACTIVE_IDS = BUILDERS.filter((b) => b.status === 'active').map((b) => b.id
 const FOUNDER = '42';
 const COUNCIL = ['43', '44'];
 
-// Each bound route as a request that, as today, stops in its handler's own first
-// check (a bad id or body) before any database write — the same requests as
-// tests/government_act_alone_buildings.mjs, with People's two carrying a real
-// custom rank and builder of this project.
+// Each bound route as a request that stops in its handler's first check (bad id or body),
+// before any DB write — as tests/government_act_alone_buildings.mjs; People's two carry a real rank + builder.
 const BAD = 'x';
 const REQUESTS = Object.freeze({
   'PATCH /project-settings/rot-days': ['PATCH', '/project-settings/rot-days', { days: 'soon' }],
@@ -98,6 +96,7 @@ const REQUESTS = Object.freeze({
   'POST /goals/reorder': ['POST', '/goals/reorder', {}],
   'POST /work-categories': ['POST', '/work-categories', {}],
   'PUT /versions/focus': ['PUT', '/versions/focus', { version_id: '   ' }],
+  'POST /first-read/maps/:id/accept': ['POST', `/first-read/maps/${BAD}/accept`, { all: true }],
   'POST /autonomy/fence': ['POST', '/autonomy/fence', { enabled: 'yes' }],
   'POST /autonomy/fence/goals': ['POST', '/autonomy/fence/goals', { goal_id: 0 }],
   'DELETE /autonomy/fence/goals/:goalId': ['DELETE', `/autonomy/fence/goals/${BAD}`],
@@ -141,6 +140,7 @@ const ROUTERS = Object.freeze([
   'modules/lifecycle/routes/goals.js',
   'modules/lifecycle/routes/versions.js',
   'modules/lifecycle/routes/project-settings.js',
+  'modules/lifecycle/routes/first-read.js',
   'modules/render-deploy/routes/act.js',
   'modules/npm-release/routes/release.js',
   'modules/provisioning/routes/core-upgrade.js',