@bongos/core 1.17.0 → 1.17.1

package/.bongos-core.json

@@ -2,21 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.17.0",
-  "core_contract": "1.17.0",
-  "source_commit": "87e7ce033c4966493e780a0431e0bf485fa0f37f",
+  "core_version": "1.17.1",
+  "core_contract": "1.17.1",
+  "source_commit": "c48e25d409f9c445700300cb6dee038569cbeda6",
   "source_ref": "HEAD",
-  "built_at": "2026-07-07T21:59:31.054Z",
+  "built_at": "2026-07-09T15:22:13.186Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
-    "docs_redacted": 271,
-    "functional_verbatim": 870,
+    "docs_redacted": 255,
+    "agent_docs_stubbed": 18,
+    "functional_verbatim": 882,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 1141,
-  "tree_sha256": "d00f90f93f0f0927bebe7e18ad83d803d47ce11c1df084621560ca0ef8503fef",
+  "file_count": 1155,
+  "tree_sha256": "4bddf744111b966d4e7435bfda7c829ff9ae15d7cd5c15718087d4e668411f76",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -271,7 +272,7 @@
     {
       "path": "CLAUDE.md",
       "mode": "0000644",
-      "sha256": "9c8dd23561fec210557f82d45cf589ff58b8d9c33ba607fda0c4ece6343fd665"
+      "sha256": "7cb9dac9cb87b679e1ae50e4112b3a7928a38ebb9902c8947a74d17bec4d9009"
     },
     {
       "path": "CODE_OF_CONDUCT.md",
@@ -306,17 +307,17 @@
     {
       "path": "bin/bongos.js",
       "mode": "0000755",
-      "sha256": "56bb1de7d362003a76155a4e4c22f9aa8d3b702227116dc8a6a530a1cb8b9b31"
+      "sha256": "cd633da8d9d4ccd8f5e0f8fc91944083b2cd69cc9c28e39c5b7b63550cace8a8"
     },
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "6206d1dfe83b3757ceb9154a80634c8727c21cda324d2b059649c37b26ee2a9f"
+      "sha256": "8319bd3ac7d98e38fdac9934d4acb7406d7f38da61f4f212f8318e9647039352"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "fe2a0c5148ec2242905720b3a4abc923576c306f84045ac2c168969277669833"
+      "sha256": "1d4029fec7828e3886c2bcf9ed855d23f4b1cf2fed43df2c478f5b1be3614b5a"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -326,22 +327,22 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "0d8c7fb7dc6bdb7f4ed012b49c94fe9ec572f22deaa9efebcd49172a2b412c29"
+      "sha256": "1436437a3178cde44675163b640c253f6971f64056a19e698487b99a4874bc6b"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "df7edc769b9fbc03b7bbbc0bd1b9a330f60f1289f48ab78d50b7f73cea0a95ce"
+      "sha256": "e23ff9af7060b6feda9b2edb4fec85f04dbf37d71fc667780e38895996b9002a"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "adab385308e0fbf92cc0345447c1d1750376f69bcaffad397d4f08f476372496"
+      "sha256": "9f33740bd87d347fa5ff0d5512db21e59e2fc81aece38ddd36612a7a27ffaa26"
     },
     {
       "path": "clients/bongos-client/package.json",
       "mode": "0000644",
-      "sha256": "89ca9a74549d1da8cc3057866ac1fb91f9186298dc445cdc7e992e982e286d29"
+      "sha256": "ca32245dc6322f0399058b91f07fe12709fe7b97485fd5d8f5f37cb42f730aae"
     },
     {
       "path": "config/branding.neutral.json",
@@ -1096,32 +1097,37 @@
     {
       "path": "docs/adr/0133-github-app-manifest-onboarding-signin.md",
       "mode": "0000644",
-      "sha256": "fa7c6065739b4dc15b5fd30549db2a8f7640a24693c297bdcbc23e91b01e07a2"
+      "sha256": "23a28176cd5521d75a8179bef7da7d532c252470cf4e88f570f186cd0003015e"
     },
     {
       "path": "docs/adr/0134-private-first-npm-distribution.md",
       "mode": "0000644",
-      "sha256": "6949a35592d78751b357ccbb1185f02a6937a2264b49cb53890df29c09e719b1"
+      "sha256": "ce1345a7de47416745964de31ec0d72cdf37f29fc1d41337b24d0e705710b0d7"
+    },
+    {
+      "path": "docs/adr/0135-module-upstream-submission-interim-queue.md",
+      "mode": "0000644",
+      "sha256": "ee8d518926f569f5599b7feca3d67268edfdef731d6bd1468293c2a04ef2dea0"
     },
     {
       "path": "docs/adr/README.md",
       "mode": "0000644",
-      "sha256": "3352c509a9d44004db259c2512ad3168dcfa9e3bd63d44ba4744073c3ed43dec"
+      "sha256": "9dcf0283584f0ed7abc5ff01cb30ac5dd64f77b430c91f0cb6396d403edc1227"
     },
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "f1d8ed7e02d74137ccd02bb2abcb834dc4ff2c8553433a14798ce34c716e3b68"
+      "sha256": "91e8d86e41ef159a7837c7270389f68cecd11cebb1c2118eceb931d2c30b9c8e"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "cc7e52d43e7914ffefe45a96d1bc1a4ce3ba96d03bcf67b7580865b04a85213b"
+      "sha256": "8989c1956ecc807b56cf22241b9e50d1695b311beb2d733aa1aff3440ceeae73"
     },
     {
       "path": "docs/architecture.md",
       "mode": "0000644",
-      "sha256": "f89fe0d860727759e4f43c59c3aa5a343a158af8360b86810ec547433699c143"
+      "sha256": "84b215b8c85275cd1be6a4512211798cf79a88c194a48783a1d754e2745e1b30"
     },
     {
       "path": "docs/branding-contract.md",
@@ -1201,7 +1207,7 @@
     {
       "path": "docs/file-map.md",
       "mode": "0000644",
-      "sha256": "f3e7bd5c14c286d428f961add94ac4734b15683bb6fce58a3a1a2037cc9f3a15"
+      "sha256": "c8b3a3a0f6f04a8e10ccf113e7a4796d567fc9a0629fb8d58d9123d7625e99f4"
     },
     {
       "path": "docs/handoff-template.md",
@@ -1211,7 +1217,7 @@
     {
       "path": "docs/modules-contract.md",
       "mode": "0000644",
-      "sha256": "d73a478ff40c4b7f6c941b20c3a728ad90143b3039411f4a5eb5edde871f72be"
+      "sha256": "e133772df7723bcbdf72d79b70dad65aeec7eedff772995dc888efdaf60834f8"
     },
     {
       "path": "docs/onboarding/browser-terminal-guide.md",
@@ -1346,7 +1352,12 @@
     {
       "path": "docs/recipes/instance-deploy.md",
       "mode": "0000644",
-      "sha256": "43980163e75f1b2181132efc2d8dd8b5a000cc05ec7a56147b5a9b80766280de"
+      "sha256": "207d05ae2b1c7ecc78de3f55e4cc7b46d69c99f3ecc39c53708a2d214de95c19"
+    },
+    {
+      "path": "docs/recipes/instance-first-run.md",
+      "mode": "0000644",
+      "sha256": "14d2635abe339d001dc7c97af628c9ca685e06ad71d0edd63bfa0a2bef456415"
     },
     {
       "path": "docs/recipes/managed-settings-remote-control.md",
@@ -1381,7 +1392,7 @@
     {
       "path": "docs/recipes/packaging-the-core.md",
       "mode": "0000644",
-      "sha256": "7b6e91dd0c79df2440c4d005d276be171a9c4b4aadc19c695b7b76d32751f591"
+      "sha256": "7ea45cf1be668891ff052559217f7086feb36d6b76902db5910e27236c2e3206"
     },
     {
       "path": "docs/recipes/parallel-load-results-2026-05-30.md",
@@ -1401,7 +1412,7 @@
     {
       "path": "docs/recipes/private-npm-distribution.md",
       "mode": "0000644",
-      "sha256": "e49503457b13d52270d6c3e74faf5008ca8303411820f79c74a3d04e9e16cfc8"
+      "sha256": "fc82f06a9391bf235ced15013a9a3743e23a1973e8297530a3a1f3a144e57921"
     },
     {
       "path": "docs/recipes/search-index-ingestion.md",
@@ -1411,7 +1422,7 @@
     {
       "path": "docs/recipes/self-host.md",
       "mode": "0000644",
-      "sha256": "dc8d50e895090f31da92428cdacef207bea2d23bf8d6efe192a1c94c336c00a6"
+      "sha256": "a44bb6dcf12bac7e104eab82862e8c0a690376652466c898cd1ab6f8e0e9c270"
     },
     {
       "path": "docs/recipes/ship-and-regrade.md",
@@ -1431,7 +1442,7 @@
     {
       "path": "docs/recipes/upgrading-the-core.md",
       "mode": "0000644",
-      "sha256": "b28269cdbeaa6a242f91ae38c781ef223140931abb953127286526a4703c5152"
+      "sha256": "43c5a00f57e5c736dfe07b9a733689977a26e60db793016589f37e988c4710df"
     },
     {
       "path": "docs/research/cursor-competitive-analysis.md",
@@ -2003,6 +2014,11 @@
       "mode": "0000644",
       "sha256": "21b3a3b8d68054e46ef9c283ef4f3adcddba59c6cd5bc47598e8a2ada7530e6a"
     },
+    {
+      "path": "migrations/core_191_module_submissions.sql",
+      "mode": "0000644",
+      "sha256": "507615e1b76c19fd29aa999c90f7e84c65fe141edfce2c97f9d4438e6a81dc07"
+    },
     {
       "path": "migrations/instance/018_pms_v3_planning_seed.sql",
       "mode": "0000644",
@@ -2061,7 +2077,7 @@
     {
       "path": "modules/autonomy/CLAUDE.md",
       "mode": "0000644",
-      "sha256": "671ab2c6859e084da82c712d48422cc0d81924c1ee2bd29ccea960f952ad375f"
+      "sha256": "7cb9dac9cb87b679e1ae50e4112b3a7928a38ebb9902c8947a74d17bec4d9009"
     },
     {
       "path": "modules/autonomy/db.js",
@@ -2086,7 +2102,7 @@
     {
       "path": "modules/builder-settings/CLAUDE.md",
       "mode": "0000644",
-      "sha256": "da04cb11c28faddcdf273477e035f6165bcfa9a277930e785e9534a066ce21d9"
+      "sha256": "7cb9dac9cb87b679e1ae50e4112b3a7928a38ebb9902c8947a74d17bec4d9009"
     },
     {
       "path": "modules/builder-settings/builder-needs.js",
@@ -2156,7 +2172,7 @@
     {
       "path": "modules/dev-box/CLAUDE.md",
       "mode": "0000644",
-      "sha256": "3d329d733b64ed585f3d29da03c54836489276d9cf3d6b2b546ee0b5147e6c7e"
+      "sha256": "7cb9dac9cb87b679e1ae50e4112b3a7928a38ebb9902c8947a74d17bec4d9009"
     },
     {
       "path": "modules/dev-box/box-access.js",
@@ -2196,7 +2212,7 @@
     {
       "path": "modules/discord/CLAUDE.md",
       "mode": "0000644",
-      "sha256": "b67c6f866cf653e650e1f37b7743f2537831cf80c90635d6832ffcaa689061e2"
+      "sha256": "7cb9dac9cb87b679e1ae50e4112b3a7928a38ebb9902c8947a74d17bec4d9009"
     },
     {
       "path": "modules/discord/auth.js",
@@ -2291,7 +2307,7 @@
     {
       "path": "modules/economy/CLAUDE.md",
       "mode": "0000644",
-      "sha256": "db281113de08b2e114fac1693a9337f4b27e74263340b7b467263bbb2db8dc9d"
+      "sha256": "7cb9dac9cb87b679e1ae50e4112b3a7928a38ebb9902c8947a74d17bec4d9009"
     },
     {
       "path": "modules/economy/achievements.js",
@@ -2356,7 +2372,7 @@
     {
       "path": "modules/grading/CLAUDE.md",
       "mode": "0000644",
-      "sha256": "4c2484b1c078dad297df19f7e08b09b278edd0f51326b63f61d1ab679bbbe7a6"
+      "sha256": "7cb9dac9cb87b679e1ae50e4112b3a7928a38ebb9902c8947a74d17bec4d9009"
     },
     {
       "path": "modules/grading/db.js",
@@ -2436,7 +2452,7 @@
     {
       "path": "modules/hall-ui/CLAUDE.md",
       "mode": "0000644",
-      "sha256": "ef5469f2ca19be0e7f458809c6668a0a52ca12cff42a4562b20e229a2f7c7b7a"
+      "sha256": "7cb9dac9cb87b679e1ae50e4112b3a7928a38ebb9902c8947a74d17bec4d9009"
     },
     {
       "path": "modules/hall-ui/module.json",
@@ -2541,12 +2557,12 @@
     {
       "path": "modules/hall-ui/public/goals-page.js",
       "mode": "0000644",
-      "sha256": "836ed4ecde2c457a47751fab18705c91b86c1bf6cc4f17e34bdfd1dc60d0ef28"
+      "sha256": "509c42357baf9e67cdc879f247116771293bd83d313ea99f85efa95990ee7ade"
     },
     {
       "path": "modules/hall-ui/public/goals.html",
       "mode": "0000644",
-      "sha256": "502dd0c6cfce4b9fde24f330ef01b20c7379580263d3c5640b555ade050dbf68"
+      "sha256": "26862125c9b5018ffd0350f67ddd54af3f6eafa21edc77dd9cef8ffcc61aaa93"
     },
     {
       "path": "modules/hall-ui/public/goals.js",
@@ -2596,7 +2612,7 @@
     {
       "path": "modules/hall-ui/public/new-project-wizard.js",
       "mode": "0000644",
-      "sha256": "73a68ec8e463c14592369f9aac2387a3d478c418a0301f1a34902d062680ef33"
+      "sha256": "267078c7093910eb5ab63601de6f7c24beb1a0256af16967a1b68556a699733b"
     },
     {
       "path": "modules/hall-ui/public/not-ready.html",
@@ -2726,7 +2742,7 @@
     {
       "path": "modules/ideas/CLAUDE.md",
       "mode": "0000644",
-      "sha256": "af2941c7997bc0bb56ed37f49d1d8446528e9e46faaef6a240cbd50345bb6cc7"
+      "sha256": "7cb9dac9cb87b679e1ae50e4112b3a7928a38ebb9902c8947a74d17bec4d9009"
     },
     {
       "path": "modules/ideas/blockers.js",
@@ -2756,7 +2772,7 @@
     {
       "path": "modules/lifecycle/CLAUDE.md",
       "mode": "0000644",
-      "sha256": "ee6418cc0a981d9868a33b147dab4fee42ad468575be83046f2e90b0e5d8dec1"
+      "sha256": "7cb9dac9cb87b679e1ae50e4112b3a7928a38ebb9902c8947a74d17bec4d9009"
     },
     {
       "path": "modules/lifecycle/conflict-resolve.js",
@@ -2851,7 +2867,7 @@
     {
       "path": "modules/lifecycle/routes/goals.js",
       "mode": "0000644",
-      "sha256": "62cde6ec4aa7bbc1dd0e067c3fef9096305e142ea0995f5e67e8bfce915760dd"
+      "sha256": "d879f2da9c0abacf64b70362e5f51e09cc8b66d2869b46aac18b7b3969ae0ee8"
     },
     {
       "path": "modules/lifecycle/routes/lifecycle.js",
@@ -2891,7 +2907,7 @@
     {
       "path": "modules/memory/CLAUDE.md",
       "mode": "0000644",
-      "sha256": "79e51486bb025805f5830a4cb62bfd6484b3d7390e689655a86cea0b3f3ef236"
+      "sha256": "7cb9dac9cb87b679e1ae50e4112b3a7928a38ebb9902c8947a74d17bec4d9009"
     },
     {
       "path": "modules/memory/learnings.js",
@@ -2936,7 +2952,7 @@
     {
       "path": "modules/onboarding/CLAUDE.md",
       "mode": "0000644",
-      "sha256": "7a559701de1670ceb3b3e83f813a64bb2b98efef690af510594e2bfc6a570441"
+      "sha256": "7cb9dac9cb87b679e1ae50e4112b3a7928a38ebb9902c8947a74d17bec4d9009"
     },
     {
       "path": "modules/onboarding/approval-broadcast.js",
@@ -2986,7 +3002,7 @@
     {
       "path": "modules/security/CLAUDE.md",
       "mode": "0000644",
-      "sha256": "1db1fe95bdee893865a6f1c7d7a032806d300e93b6d6272731a2ae70d3ebf3c9"
+      "sha256": "7cb9dac9cb87b679e1ae50e4112b3a7928a38ebb9902c8947a74d17bec4d9009"
     },
     {
       "path": "modules/security/module.json",
@@ -3011,7 +3027,7 @@
     {
       "path": "modules/sessions/CLAUDE.md",
       "mode": "0000644",
-      "sha256": "5c56dd07611ff8d0c88ddfd1f5d06bc1b28a9f9fd0452c5254c6c2cd4e37fba0"
+      "sha256": "7cb9dac9cb87b679e1ae50e4112b3a7928a38ebb9902c8947a74d17bec4d9009"
     },
     {
       "path": "modules/sessions/bfg.js",
@@ -3041,7 +3057,7 @@
     {
       "path": "modules/status-ui/CLAUDE.md",
       "mode": "0000644",
-      "sha256": "088bdc1bb42d13bc5c989418031b1667b002c9a53f64332625bd29a9272efd94"
+      "sha256": "7cb9dac9cb87b679e1ae50e4112b3a7928a38ebb9902c8947a74d17bec4d9009"
     },
     {
       "path": "modules/status-ui/module.json",
@@ -3086,12 +3102,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "6993653322c0cb2d3a33f5f2c36a72e18c714b7e8d34c5f38759a70c18fe6e01"
+      "sha256": "3e7f764c64a2fbe73c76bf2c8e3d1ed441ca54191899ebc9ed28449f67fbbe1a"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "f3430f9c20a54e567a43f8952b9157c79b8654259bb33e43a0998cbaa7fd8968"
+      "sha256": "c0b72bf4ba7f36f105801af9788285881b305e55cc156388cb88e87a8aaa8412"
     },
     {
       "path": "public-docs/index.html",
@@ -3116,12 +3132,12 @@
     {
       "path": "public-landing/create.html",
       "mode": "0000644",
-      "sha256": "01270e72469a2fca0fd0e5ceb32467a47be3546fff9e55a65fe9efe3093a0c3c"
+      "sha256": "643002bd7a2cae1e27a4722878d0d3134dbbbaa31d18b87c32171719a71038af"
     },
     {
       "path": "public-landing/index.html",
       "mode": "0000644",
-      "sha256": "8770c322b55da9bcbad76d662eb4eeaf56f42a38ecfc53bb26946f0a07a09180"
+      "sha256": "b76274044f5b348db3b0ee65842318160ab85f65349a0e1dce9848fd183d21c4"
     },
     {
       "path": "scripts/bongos-mcp.js",
@@ -3151,7 +3167,7 @@
     {
       "path": "scripts/gds/CLAUDE.md",
       "mode": "0000644",
-      "sha256": "a9090b1de456b9ff906e792d8c7ef6deb9e6cf6fc09b45b64e667007989914d7"
+      "sha256": "7cb9dac9cb87b679e1ae50e4112b3a7928a38ebb9902c8947a74d17bec4d9009"
     },
     {
       "path": "scripts/gds/abandon.js",
@@ -3296,7 +3312,12 @@
     {
       "path": "scripts/gds/claude-materialize.js",
       "mode": "0000644",
-      "sha256": "eed26b239dbc89cbbd9fe544c427e67b300b78dc32a9b016a4bf010012deb49f"
+      "sha256": "600c0aa237e25413dcd4306bb90e803cab16784a58707b81dc8ff20daaffc71b"
+    },
+    {
+      "path": "scripts/gds/claude-md-template.js",
+      "mode": "0000644",
+      "sha256": "81c4f4795291f9daef800dcc17b65aec8b82f6281434b0f3e52655789a481072"
     },
     {
       "path": "scripts/gds/cleanup-orphans.js",
@@ -3306,7 +3327,7 @@
     {
       "path": "scripts/gds/cli-lib.js",
       "mode": "0000644",
-      "sha256": "e217af7af7049ba43820bba9849421f2e35d7a4da2ec18d4a03e0e96f1928d0a"
+      "sha256": "8b681d3cac5dcbc51ce0974bb0975dfc85bf87e193304476e7de78f794476bfb"
     },
     {
       "path": "scripts/gds/code.js",
@@ -3451,7 +3472,7 @@
     {
       "path": "scripts/gds/gen-api-client.js",
       "mode": "0000644",
-      "sha256": "fa1958897fb68b8f19af1d4c0c11a513fd5cc4ddd5590dbbcad4643381a2a736"
+      "sha256": "e00efe7862cdea0e984ec4b2fb4fdb392dae32a7a5fb06f4e0508579d5244ef6"
     },
     {
       "path": "scripts/gds/gen-api-docs.js",
@@ -3506,7 +3527,7 @@
     {
       "path": "scripts/gds/init.js",
       "mode": "0000644",
-      "sha256": "6b592343c81de56fa5a4d6c8117e6d9f33412036136b57ed5ac607f1989676ab"
+      "sha256": "101fbf0e4450d98cf5664f5be4d4222471f98a0bff456149cf717f7744e1e10c"
     },
     {
       "path": "scripts/gds/install-git-hooks.js",
@@ -3581,7 +3602,7 @@
     {
       "path": "scripts/gds/migration-namespace.js",
       "mode": "0000644",
-      "sha256": "bb95807a75573f5b5a0cd8019bb89f5639e08ce955b4fbca1012d31c08e751c4"
+      "sha256": "bccd4f3935249ce26dd499544c6b72a8137ff5d4f7c9421fd184708c2f95e51e"
     },
     {
       "path": "scripts/gds/mirror-lineage-check.js",
@@ -3596,7 +3617,7 @@
     {
       "path": "scripts/gds/module.js",
       "mode": "0000644",
-      "sha256": "120b3c579cf58bbd112601d6644f39ff5187c347116738aee75eb6223a1a70e5"
+      "sha256": "1f509bd5a7b6eacc85670441c5628c8093fd8b5c7453a25cedc7f4b1c2c3201a"
     },
     {
       "path": "scripts/gds/newcomer-floor.config.json",
@@ -3623,6 +3644,11 @@
       "mode": "0000644",
       "sha256": "d34cbccec1fa3053f960c1ac0950ce7e6b4b05f9d32a23304c4c3abc41c22ef7"
     },
+    {
+      "path": "scripts/gds/npmrc.js",
+      "mode": "0000644",
+      "sha256": "115af471c497515927528927da78793400e7181476c23c724479bccd079baa3c"
+    },
     {
       "path": "scripts/gds/oauth-secret.js",
       "mode": "0000755",
@@ -3631,7 +3657,7 @@
     {
       "path": "scripts/gds/onboard.js",
       "mode": "0000644",
-      "sha256": "59550c9f26ea80723667289053748da4bc91dbe10f9df7b6d35675248c464e98"
+      "sha256": "7c3f2d49cab61833c668e68faac197e2f48400d162a90e3b7fae05e2cca7c63e"
     },
     {
       "path": "scripts/gds/onboarding-analyze.js",
@@ -3651,7 +3677,7 @@
     {
       "path": "scripts/gds/package-core.js",
       "mode": "0000644",
-      "sha256": "86b93380dc19fe001852a47bd2966632af84d730772016910e520a9aa56c3ac9"
+      "sha256": "b7ef88ce853bc37b9a2a9be9944e714dd704342f15662ba4bb91eea28c00133f"
     },
     {
       "path": "scripts/gds/paste-token.js",
@@ -3671,7 +3697,7 @@
     {
       "path": "scripts/gds/provision.js",
       "mode": "0000644",
-      "sha256": "bd760df4f296de398c787a32198903985168af054ce86b87f82756c6ea47c007"
+      "sha256": "101e0f945ab7d2afcd5b00fb819c80e722f0a1132fa6e6afc66662015c9a08f0"
     },
     {
       "path": "scripts/gds/publish-manifest.js",
@@ -3756,7 +3782,7 @@
     {
       "path": "scripts/gds/seed-adopt-tasks.js",
       "mode": "0000644",
-      "sha256": "3088355066878dbc88f461b4c937f1457a1457f105a524abef8c5a8395af96e9"
+      "sha256": "b3c9c94cca2efb8085f4c57264b807e4888523ba2cdd7ab7719c435bac72b5b5"
     },
     {
       "path": "scripts/gds/seed-api-contract-goal-tasks.js",
@@ -3916,7 +3942,12 @@
     {
       "path": "scripts/gds/status.js",
       "mode": "0000644",
-      "sha256": "8245e1f3eb80acced1e33cabba9ac6d0b3844a5d75acbd6b4bef6d82df889989"
+      "sha256": "a0481383e2800c9880dc0b379a8d19ddfb06c1b9b8767cec9bd16e21cf3c404e"
+    },
+    {
+      "path": "scripts/gds/task.js",
+      "mode": "0000644",
+      "sha256": "3abde7739869f26348f9dd624dce50d81beac18f2bde68634bb57d9a078f536f"
     },
     {
       "path": "scripts/gds/triage.js",
@@ -3926,7 +3957,7 @@
     {
       "path": "scripts/gds/upgrade.js",
       "mode": "0000644",
-      "sha256": "a3269523ad375cf5194081d5ebd0652b5b0f979051418d86b7ea200ef9d06f78"
+      "sha256": "f44d91075cdfe39d654b9c6b98b0271e43df95e4a26eb4fef9bb150c2ba3dd24"
     },
     {
       "path": "scripts/gds/validate-design.js",
@@ -4021,7 +4052,7 @@
     {
       "path": "src/bongos/CLAUDE.md",
       "mode": "0000644",
-      "sha256": "6eefea0c17cfa1d7ed7cbfb25084a6dad98959701f1e3841568b52c66592b628"
+      "sha256": "7cb9dac9cb87b679e1ae50e4112b3a7928a38ebb9902c8947a74d17bec4d9009"
     },
     {
       "path": "src/bongos/api-errors.js",
@@ -4046,7 +4077,7 @@
     {
       "path": "src/bongos/auth.js",
       "mode": "0000644",
-      "sha256": "9dc50f9263bb5615f73245760a6bf3e26b37fbb9676a0e9877132da4674efadb"
+      "sha256": "6b0f9d06ac6c54926ceec44925acfc8573ac9277651b0b3d9217d713b56fb31a"
     },
     {
       "path": "src/bongos/cascade-dispatch.js",
@@ -4113,6 +4144,11 @@
       "mode": "0000644",
       "sha256": "50864c412a463bd79779db81cf67089ca94151d22285fea12c922336e4166888"
     },
+    {
+      "path": "src/bongos/module-submissions.js",
+      "mode": "0000644",
+      "sha256": "1e939e2e07fc71b6fcf1882cb18627e532103ec01a737406f77f8528190e6215"
+    },
     {
       "path": "src/bongos/optimizer.js",
       "mode": "0000644",
@@ -4141,7 +4177,7 @@
     {
       "path": "src/bongos/route-rank-check.js",
       "mode": "0000644",
-      "sha256": "2245fd2010490b026240ed74060cae99917df3f75801876a88af33c5cd6c69d7"
+      "sha256": "8be8e5ad6b46ad048088b9b1c197fef139f32d6c514d42075d78aa7a7dc08377"
     },
     {
       "path": "src/bongos/routes.js",
@@ -4151,7 +4187,7 @@
     {
       "path": "src/bongos/routes/CLAUDE.md",
       "mode": "0000644",
-      "sha256": "8346e93b96e75f82e58991564a1c6d8a04c681dbe5025a3b8d691fe5919735b9"
+      "sha256": "7cb9dac9cb87b679e1ae50e4112b3a7928a38ebb9902c8947a74d17bec4d9009"
     },
     {
       "path": "src/bongos/routes/_helpers.js",
@@ -4166,7 +4202,7 @@
     {
       "path": "src/bongos/routes/auth.js",
       "mode": "0000644",
-      "sha256": "d9bbf3f76ed880fa881be7035914ab8a2683765244e90d737e24406c9813fe65"
+      "sha256": "f618bb360d4671e3f6ae9101104d22b4b24445dd0dfde89002583fb95d455615"
     },
     {
       "path": "src/bongos/routes/backup.js",
@@ -4206,7 +4242,7 @@
     {
       "path": "src/bongos/routes/modules.js",
       "mode": "0000644",
-      "sha256": "2806fc10f77a7a28151aac16ff28914353ac85696658c03ac2d97e01730d1978"
+      "sha256": "093f7ce68161ef6948cf9d962ea0abf6c7ce2c8cbc03a6222dba7150985fce30"
     },
     {
       "path": "src/bongos/routes/optimizer.js",
@@ -4261,12 +4297,12 @@
     {
       "path": "src/instance-config.js",
       "mode": "0000644",
-      "sha256": "fa76830622f0991c64a293101f569215ea3b89bcc6134f6457bfa95c830bf0a5"
+      "sha256": "8abe087c7cc31f6f0e5cc8ff3043961321051563f44084a0727aff2f18c07a77"
     },
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "0fa3485a03a5ac854b900c2395cb720e969bfcbbb6676808c0f3c9d555485e1d"
+      "sha256": "36b450dddd3217913fdf247c669576f96df7d348bd009ce03c73fce577118719"
     },
     {
       "path": "src/module-loader/loader.js",
@@ -4631,7 +4667,7 @@
     {
       "path": "tests/claude_materialize.mjs",
       "mode": "0000644",
-      "sha256": "bbaf7dbad7a7c1968f56c368e081a892fee31788cbfc6bc47f5d5c13f08ec718"
+      "sha256": "b494f25b289e9c7a3b3cf06a6cb3ee4467af9164551d731109fadfe0a442f84a"
     },
     {
       "path": "tests/cli_box_scope.mjs",
@@ -4753,6 +4789,11 @@
       "mode": "0000644",
       "sha256": "2cf326039b31fdf88e9b19be180923e754e60e629d667b49c730896b7d08586c"
     },
+    {
+      "path": "tests/device_flow_start.mjs",
+      "mode": "0000644",
+      "sha256": "deb2bbc884683fa2c7efcedaf05341819705b0e89f48060a52887f90f84724e2"
+    },
     {
       "path": "tests/diff_derived_signals.mjs",
       "mode": "0000644",
@@ -4848,6 +4889,11 @@
       "mode": "0000644",
       "sha256": "a85288ae63e220314d3a5a3e649242197bdc47cb1a436113370e71fab42b9b1e"
     },
+    {
+      "path": "tests/first_run_engine_check.mjs",
+      "mode": "0000644",
+      "sha256": "9a56f41889e6a43a740ab9d9d9a162dd6023102a50cadce92db1b0834679aea7"
+    },
     {
       "path": "tests/fitness.mjs",
       "mode": "0000644",
@@ -4921,7 +4967,7 @@
     {
       "path": "tests/goal_membership_requests.mjs",
       "mode": "0000644",
-      "sha256": "e1a1195fa3b3f0186d64031585375b6f6ddbc9c2f5194f13b48d7b945ce3762d"
+      "sha256": "5a90f9030e1e50a62779460788ac6a56374fd36a839adf40433dd6a184a9b787"
     },
     {
       "path": "tests/goal_routes.mjs",
@@ -4998,10 +5044,15 @@
       "mode": "0000644",
       "sha256": "e2d482ca08d151719f61b52bcbb8056d5c91c9447b5bba7c9f7682d9582e34b8"
     },
+    {
+      "path": "tests/hook_user_agents.mjs",
+      "mode": "0000644",
+      "sha256": "d581ae8eec4b219ba4f5ba1839c1bc9bf3b1b5802fa4ae8db72b9bba6cf0263d"
+    },
     {
       "path": "tests/init.mjs",
       "mode": "0000644",
-      "sha256": "0b6f05323e4b7c5f22e36ffe998a087816f9705aa19bf8ad46bf08eabd1ad752"
+      "sha256": "dd77aa4a56a84625ca95240468ba6e7bd741a3303df14db076452823d7c375a8"
     },
     {
       "path": "tests/instance_config.mjs",
@@ -5013,6 +5064,11 @@
       "mode": "0000644",
       "sha256": "11bd1d3fe5050dd8f561499d432c788ab7c786ffaa8e39d9a24d78b9317e3143"
     },
+    {
+      "path": "tests/instance_mismatch_guard.mjs",
+      "mode": "0000644",
+      "sha256": "aaac8139436765efb2824ce0e8708450a46c4b5c9f464848f849d47e12b8b647"
+    },
     {
       "path": "tests/interaction_prefs.mjs",
       "mode": "0000644",
@@ -5161,7 +5217,7 @@
     {
       "path": "tests/module_cli.mjs",
       "mode": "0000644",
-      "sha256": "477aa02c3216b001e1885ab929953cca61782d01a7d602ab943ac8418f537c93"
+      "sha256": "bc309cd6f6670f17ea64eb3fadd8cf6b27ecc00b0dbfca83a26451b43076ea1d"
     },
     {
       "path": "tests/module_contributions.mjs",
@@ -5198,6 +5254,11 @@
       "mode": "0000644",
       "sha256": "ba4233ed072c87df9dbc5c75af10655ad8eaaf9d8ccbe69df146052467a1279e"
     },
+    {
+      "path": "tests/module_submissions.mjs",
+      "mode": "0000644",
+      "sha256": "9a7fb90a7476f5c8a5d2af05b72bb6e82bb673a8578b6e5b35b710c5f8d3cc4b"
+    },
     {
       "path": "tests/modules.mjs",
       "mode": "0000644",
@@ -5223,6 +5284,11 @@
       "mode": "0000644",
       "sha256": "56e2f23e4edbd87f86fde62c40995fe0eb3053925d18156e21fae8c39e1d1c05"
     },
+    {
+      "path": "tests/npmrc.mjs",
+      "mode": "0000644",
+      "sha256": "87cbb8a5fd896f36197957be56c9107f672a49b2ae8afc3ba69fe00bde11c3ca"
+    },
     {
       "path": "tests/oauth_secret.mjs",
       "mode": "0000644",
@@ -5231,7 +5297,7 @@
     {
       "path": "tests/onboard.mjs",
       "mode": "0000644",
-      "sha256": "a7683d9cd80dd0ea039e8e48211678562fc1a644943fa9b07d2e1e198a1b7ddd"
+      "sha256": "42963c2ff818196745a3dc71095f8afb90c9bc99bab5a5971bd4bcc39ce32143"
     },
     {
       "path": "tests/onboarding_gate.mjs",
@@ -5276,7 +5342,7 @@
     {
       "path": "tests/package_core.mjs",
       "mode": "0000644",
-      "sha256": "a2d5bb79498d4ee97b2e8a79727cd87792b5e20fe29d24e766c30c839e1c1494"
+      "sha256": "fc7526c8a38d00efd5cb68c8dfe2478f2b1fcfc1531a508475bd9ddde2b58732"
     },
     {
       "path": "tests/parallel-load.mjs",
@@ -5296,7 +5362,7 @@
     {
       "path": "tests/platform_boot.mjs",
       "mode": "0000644",
-      "sha256": "9950253d708dba8c0e58be7438497ad3535d059ff4b382ee00a739b8b584fb1e"
+      "sha256": "c4cac3e71a7e2c498d15585fdbaadd65b5d70a7672c14c0450fe3e02737c0a04"
     },
     {
       "path": "tests/pre_compact.mjs",
@@ -5316,12 +5382,12 @@
     {
       "path": "tests/provision.mjs",
       "mode": "0000644",
-      "sha256": "f186e3ae3f7c2ca535856d626ef7648eda95c8a2b856357e7e7908d6bd119301"
+      "sha256": "a5d45ea43385c8d35ee41f24cb1f20258c064bee2a9e20b9fbd22a5c8e9d6bfd"
     },
     {
       "path": "tests/provisioning_github_app_routes.mjs",
       "mode": "0000644",
-      "sha256": "09dcc941564e07e12adf2bdd505f7d58ed82ec782487e86b21631979e33ebd35"
+      "sha256": "8c7c2bd504664c03935569b3d76d99b68d5106ffba04d01313cec9a89f33f107"
     },
     {
       "path": "tests/public_mirror_export.mjs",
@@ -5476,7 +5542,7 @@
     {
       "path": "tests/served_paths_shipped.mjs",
       "mode": "0000644",
-      "sha256": "c1205d87d7de216c38815c7a4a64b469c60235c34cc203fd5c61825cae94af0b"
+      "sha256": "bae6e331f44fcebe2300b380a390afef771df9ae5a2cfc27caf1b957f9419713"
     },
     {
       "path": "tests/session-cards.mjs",
@@ -5648,6 +5714,11 @@
       "mode": "0000644",
       "sha256": "6608e86605ccd97418a0018e5cfb62f6d65c2cfe79d8c62115b24df729a44f18"
     },
+    {
+      "path": "tests/task_cli.mjs",
+      "mode": "0000644",
+      "sha256": "6b25f36db1ea4dea28535683dab7bf348975f2848bbd04cb080e25dbf8db180c"
+    },
     {
       "path": "tests/task_create_idempotency.mjs",
       "mode": "0000644",
@@ -5686,7 +5757,7 @@
     {
       "path": "tests/upgrade.mjs",
       "mode": "0000644",
-      "sha256": "aa749fdeab41055fe51f0e4867f5f53726e82791baf958d5b57185d134aac46e"
+      "sha256": "af50303a4e219d4fe2a36ec8ec259e7617b5cb68e6993dc5b619eb553b43f41b"
     },
     {
       "path": "tests/verify_task_guard.mjs",