@bongos/core 1.17.0 → 1.17.2

package/migrations/instance/080_gds_v4_planning_seed.sql

@@ -1,75 +0,0 @@
--- GDS-V4 Planning Session #1 seed
--- Applied under claim 742 (task 937, V4.R00 — Planning Session #1).
--- Idempotent on re-run.
---
--- What this migration does:
---   1. Updates versions.GDS-V4 name + done_when to match the 6 criteria
---   2. Seeds 6 done_when_criteria rows for version_id='GDS-V4'
---   3. Renames the 2 existing open GDS-V4 carry-over tasks (263, 594) with
---      their V4.R## prefix and sets their priorities per the ranking.
---      Existing descriptions are preserved.
---
--- Net-new tasks (38 of them) are created via scripts/gds/seed-gds-v4-tasks.js
--- which runs after this migration is applied (same split as the V3 planning
--- seed, migration 018: tasks have rich descriptions + dependency wiring that
--- the API handles more cleanly than a long SQL VALUES list).
---
--- Source research: 2026-06-12 retrieval-layer architecture report + BFG
--- session-corpus friction mining (1,349 session_records; ceremony +
--- failed-tool-use taxonomies).
-
-BEGIN;
-
--- ============================================================================
--- 1. Version name + done_when text
--- ============================================================================
-UPDATE versions
-SET name = 'GDS V4 — recall, resumable pipeline, honest measurement',
-    done_when = 'When this is finished, a builder''s session answers "have we done this before?" in one call instead of an afternoon — project knowledge (markdown and database prose alike) is searchable in one rank-scoped query and pushed into sessions at claim time; a failed ship is one command from resume instead of a consumed claim; the recurring tool-error classes (wrong-tree writes, HTML 404s, phantom smoke servers) are engineered away; the BFG''s measurements reflect real friction so the improvement is provable against the 2026-06-12 baseline; and the city watches itself on one pane of glass.'
-WHERE id = 'GDS-V4';
-
--- ============================================================================
--- 2. Seed 6 done_when_criteria rows for GDS-V4
---    UPSERT semantics via ON CONFLICT (version_id, criterion_id).
--- ============================================================================
-INSERT INTO done_when_criteria (version_id, criterion_id, criterion_md, sort_order)
-SELECT * FROM (VALUES
-  ('GDS-V4', 'one-call-recall',
-   '**Project knowledge is answerable in one call.** Any builder session — laptop, dev box, or browser — can ask one question and get back the relevant ADRs, recipes, session logs, learnings, ideas, and task notes, including the database prose nothing can search today. Done when: lexical search is live over repo markdown + DB prose; results are rank- and owner-scoped (Xenos never sees permission-core content; nobody sees another builder''s memory); every result cites its source so the agent can follow up; and a golden-question set mined from real sessions scores ≥80% recall@5 — whether plain text-search or embeddings gets there is decided by measurement, not taste.',
-   1),
-  ('GDS-V4', 'sessions-start-knowing',
-   '**Sessions start knowing, not hunting.** What a session needs to act correctly is pushed at claim time instead of rediscovered: its worktree root, the claims it holds, the GDS API path prefix and field enums, OS environment facts, the next free ADR/migration number, and the top recall hits for the claimed task. Done when: the guess-and-retry API errors and worktree-path floods measured in the June 2026 corpus stop appearing in new sessions.',
-   2),
-  ('GDS-V4', 'failed-ship-never-strands',
-   '**A failed ship never strands work.** Drift fails, grade failures, and merge bails leave the task one command from resume — no consumed claims, no reset-and-re-claim dance, no re-running an already-passing grader panel. Done when: a deliberately failed ship is resumed in one command, and claim_consumed_on_fail (which fired in 11 of 11 deep-dived sessions) goes quiet in new sessions.',
-   3),
-  ('GDS-V4', 'machine-room-ergonomics',
-   '**Sessions stop fighting the machine room.** The recurring tool-error classes are engineered away: cross-tree writes guarded, API 404s/409s answer in JSON with a hint instead of an HTML page, laptop sessions stop smoke-testing against a server that isn''t running. Done when: the wrong-path class (84 hits, #1 in the June 2026 corpus) and its siblings drop measurably in new sessions.',
-   4),
-  ('GDS-V4', 'bfg-measures-what-hurts',
-   '**The BFG measures what actually hurts.** The session evaluator''s numbers reflect real friction: ceremony is visible on cache-dominated marathon sessions (today they score ~99% efficient), the wrong-path footgun — the corpus''s #1 error class — is detected, harness guardrail retries stop inflating tool-error counts, and corpus coverage is reconciled. Done when: re-running the friction analysis produces numbers trustworthy enough to judge the other criteria.',
-   5),
-  ('GDS-V4', 'one-pane-of-glass',
-   '**The city watches itself on one pane of glass.** The observability carry-overs land — Grafana dashboards as code, status surface v2 — plus staleness/health visibility for the new search index. Done when: those surfaces are live and the search index cannot silently go stale.',
-   6)
-) AS v(version_id, criterion_id, criterion_md, sort_order)
-WHERE EXISTS (SELECT 1 FROM versions WHERE id = 'GDS-V4')
-ON CONFLICT (version_id, criterion_id) DO UPDATE
-  SET criterion_md = EXCLUDED.criterion_md,
-      sort_order   = EXCLUDED.sort_order;
-
--- ============================================================================
--- 3. Re-prefix + re-prioritize the 2 existing open carry-over tasks.
---    Guarded so re-runs (and already-renamed rows) are no-ops.
--- ============================================================================
-UPDATE tasks
-SET title = 'V4.R28 — ' || regexp_replace(title, '^V\d+\.R\d+\s*—\s*', ''),
-    priority = 3
-WHERE id = 263 AND version_id = 'GDS-V4' AND title NOT LIKE 'V4.R%';
-
-UPDATE tasks
-SET title = 'V4.R29 — ' || regexp_replace(title, '^V\d+\.R\d+\s*—\s*', ''),
-    priority = 3
-WHERE id = 594 AND version_id = 'GDS-V4' AND title NOT LIKE 'V4.R%';
-
-COMMIT;

package/migrations/instance/110_medusa_planning_seed.sql

@@ -1,70 +0,0 @@
--- GDS-V4 Medusa Planning Session seed (2026-06-17)
--- Applied under claim 982 (task 1188 — "V4 — Medusa Planning Session").
--- Idempotent on re-run.
---
--- Adds the "Medusa" scope to GDS-V4: decouple the GDS from the Amazonprimea
--- game into a standalone, configurable, self-hostable, AGPL open-source,
--- non-profit, AI-first build platform. Amazonprimea becomes instance 1.
---
--- What this migration does:
---   1. Appends a Medusa clause to versions.GDS-V4 done_when (guarded so it
---      only appends once).
---   2. Seeds 2 done_when_criteria rows (C8 + C9) for version_id='GDS-V4'
---      at sort_order 8 and 9 (after the 7 existing criteria).
---
--- Net-new tasks (R50–R73, 24 of them) are created via
--- scripts/gds/seed-medusa-tasks.js which runs AFTER this migration is applied,
--- so the positional "C8"/"C9" criterion refs resolve. Same split as the
--- V4 Planning Session #1 seed (migration 080 + seed-gds-v4-tasks.js).
---
--- Locked owner decisions (this session): one project per install (no
--- multi-tenant project_id retrofit); migrate in place (OTB = instance 1, live
--- prod never breaks); AGPL-3.0 (anti-monopoly); keep the Greek rank ladder
--- (xenos<thetes<metic<archon) as the canonical enum (no rename); branding is a
--- per-instance config layer an owner's own LLM fills; feature-module selection
--- per instance; self-host canonical, managed hosting an optional later layer;
--- mobile contribution deferred to a later version; AI-first as a documented
--- norm (not a technical gate).
---
--- Source: 2026-06-17 Medusa decoupling codebase sweep (8-dimension audit +
--- synthesis + critique).
-
-BEGIN;
-
--- ============================================================================
--- 1. Append a Medusa clause to the version-level done_when (once only).
--- ============================================================================
-UPDATE versions
-SET done_when = done_when ||
-  ' And the build system itself becomes Medusa — a standalone, configurable, self-hostable, AGPL-licensed, non-profit, AI-first platform decoupled from any one project, with Amazonprimea running as its first instance.'
-WHERE id = 'GDS-V4'
-  AND done_when NOT LIKE '%Medusa%';
-
--- ============================================================================
--- 2. Seed the 2 Medusa done_when_criteria rows for GDS-V4 (C8 + C9).
---    UPSERT via ON CONFLICT (version_id, criterion_id).
---    sort_order 8/9 → positional refs "C8"/"C9" for the seed script.
--- ============================================================================
-INSERT INTO done_when_criteria (version_id, criterion_id, criterion_md, sort_order)
-SELECT * FROM (VALUES
-  ('GDS-V4', 'medusa-standalone-instance',
-   '**Medusa runs as a configurable, self-hostable, branded instance — Amazonprimea is instance 1.** The build system is no longer a fixture of the game: it boots with no game code in the process, runs on its own database, and takes its identity, branding, and feature selection from per-instance config — Amazonprimea becomes instance 1, its surfaces (status/builders) unchanged because their look now comes from config rather than hard-coding. Done when: a Medusa-only entrypoint boots with no Colyseus/Phaser/game routes; a fresh instance''s database holds only build-system tables (game tables only when the game module is enabled); one command (docker compose) stands an instance up with zero hard-coded server IP / service name / deploy script; product name, domain, sign-in origin, repo binding, currency label and the full branding pack resolve from one config with a neutral starter an owner''s own LLM fills; the first admin is set at install time, not in a migration; core carries no hard-coded project branding (the deploy-time diagram generator reads instance branding too; Greek rank names stay by decision); an instance turns feature modules (game, art pipeline, Discord, dev boxes) on/off; an instance declares its core version and `medusa upgrade` applies new migrations + code while preserving instance config; and a second, differently-branded non-game instance is created via a generic init flow and ships one task claim->grade->ship end-to-end. Live Amazonprimea is unaffected throughout.',
-   8),
-  ('GDS-V4', 'medusa-open-and-protected',
-   '**Medusa is open, free, and protected from capture.** The platform is released to the public as open source on a deliberate delay so the live edge stays ahead of would-be cloners, under a license that stops a company from running a closed hosted fork, with non-profit, AI-first governance so it cannot be quietly captured. Done when: an AGPL-3.0 LICENSE ships in the repo; a public mirror repository carries only the publishable subset (the build system — not the game, infra secrets, or trust-boundary internals); an automated pipeline publishes to the mirror on a ~6-month delay with a redaction layer that strips secrets and prod topology even from old commits; GOVERNANCE, CONTRIBUTING, and CODE_OF_CONDUCT define the non-profit, AI-first (AI always writes the code) anti-monopoly stance; and the private<->public lineages stay consistent (migration numbering and enum values do not diverge), verified by a no-leak check on the published mirror.',
-   9)
-) AS v(version_id, criterion_id, criterion_md, sort_order)
-WHERE EXISTS (SELECT 1 FROM versions WHERE id = 'GDS-V4')
-ON CONFLICT (version_id, criterion_id) DO UPDATE
-  SET criterion_md = EXCLUDED.criterion_md,
-      sort_order   = EXCLUDED.sort_order;
-
--- ============================================================================
--- 3. Self-register so migrate.sh skips this file on the next deploy (it was
---    hot-applied via psql under the planning session). ON CONFLICT keeps it
---    safe if migrate.sh also registers it.
--- ============================================================================
-INSERT INTO schema_migrations (version) VALUES ('110_medusa_planning_seed')
-ON CONFLICT DO NOTHING;
-
-COMMIT;

package/migrations/instance/120_bongos_v1_planning_seed.sql

@@ -1,69 +0,0 @@
--- Bongos App — V1 planning seed (2026-06-20)
--- Owner-directed (archon). Idempotent on re-run.
---
--- Creates a NEW version line: BONGOS-V1 — the inaugural version of the "bongos"
--- platform line. Strategic intent (owner): bongos is the successor to the GDS;
--- the GDS deprecates after GDS-V4 and its infra/build-out migrates into bongos.
--- What V1 SHIPS is the Cloud Bongos desktop "Feedback Capture" tool: a Zoom-style
--- floating toolbar that captures narrated voice + ~1/sec snapshots and freehand
--- markup over ANY on-screen target, synthesizes them into one cheap, model-agnostic
--- prompt, and hands it to Claude Desktop + Claude Code. The existing Dev Box
--- desktop app (ADR 0045) is absorbed as a module of the bongos app (reusing its
--- Apple cert + distribution pipeline). Visual element-select is deferred to V2.
---
--- What this migration does:
---   1. INSERT the BONGOS-V1 versions row (track=internal, status=planning).
---   2. Seed 4 done_when_criteria (C1..C4) at sort_order 1..4.
--- Net-new tasks (R01..R17) are created AFTER this is applied via
--- scripts/gds/seed-bongos-app-tasks.js, so the positional C1..C4 refs resolve.
--- (Same split as migration 110 + seed-medusa-tasks.js.)
-
-BEGIN;
-
--- ============================================================================
--- 1. Create the BONGOS-V1 version row.
--- ============================================================================
-INSERT INTO versions (id, name, track, status, scope_doc_path, done_when, started_at)
-VALUES (
-  'BONGOS-V1',
-  'Bongos App — V1',
-  'internal',
-  'planning',
-  'limitations/bongos-v1.md',
-  'Bongos App V1 ships the Cloud Bongos desktop feedback tool: a Zoom-style floating toolbar that captures narrated voice + ~1/sec snapshots and freehand markup over any on-screen target, synthesizes them into one cheap, model-agnostic prompt, and hands it to Claude Desktop and Claude Code. The Dev Box desktop app is absorbed as a module of the bongos app. This is the inaugural version of the bongos line, the successor the GDS migrates into after GDS-V4. Visual element-select is deferred to V2.',
-  now()
-)
-ON CONFLICT (id) DO NOTHING;
-
--- ============================================================================
--- 2. Seed the 4 done_when_criteria (C1..C4). UPSERT on (version_id, criterion_id).
---    sort_order 1..4 -> positional refs C1..C4 for the seed script.
--- ============================================================================
-INSERT INTO done_when_criteria (version_id, criterion_id, criterion_md, sort_order)
-SELECT * FROM (VALUES
-  ('BONGOS-V1', 'signed-installable',
-   '**Signed, installable, and permission-guided on Mac + Windows.** A code-signed, notarized macOS build and a signed Windows build install from a branded download and launch as a floating menu-bar/tray app, reusing the existing Dev Box app distribution + Apple Developer ID; the Dev Box switch is absorbed as a module of the bongos app rather than shipping as a separate install. Done when: the bongos app is one Electron app that contains the prior Dev Box functionality as a module; a signed+notarized Mac build and a signed Windows build install from the branded /downloads redirect and auto-update; a first-run permission wizard detects + deep-links Screen Recording and Microphone grants with live grant-state; and an unsigned dev-build path exists for local iteration.',
-   1),
-  ('BONGOS-V1', 'captures-anywhere',
-   '**Captures narrated feedback over any on-screen target.** The floating toolbar overlays any window (the Zoom annotation model) and records the microphone plus time-aligned ~1/sec snapshots of the chosen target, with freehand/box/arrow/text markup and a freeze-frame, on macOS and Windows. Done when: a transparent, always-on-top, click-through overlay draws over arbitrary other apps (surviving macOS fullscreen/Spaces and Windows multi-monitor DPI); a global hotkey summons/dismisses the bar; Record captures mic + the chosen window/screen at ~1/sec with snapshot-on-change + perceptual dedup + a frame cap; and Markup draws and freezes over any pixels.',
-   2),
-  ('BONGOS-V1', 'cheap-complete-synthesis',
-   '**Synthesizes one cheap, complete, model-agnostic prompt.** The capture is fused into a single LLM-ready bundle at a disciplined token envelope — frames dominate cost, so audio is transcribed on-device to text and frames are deduped + salience-escalated rather than sent 1/sec at full resolution. Done when: on-device transcription (whisper.cpp) yields word-timestamped text; transcript and frames are time-aligned and only transcript/markup-flagged frames escalate to full resolution; a deterministic prompt.md is assembled with inlined absolute image paths; and a typical multi-minute session lands at the disciplined envelope (~5-11k tokens), not the ~70k+ naive cost.',
-   3),
-  ('BONGOS-V1', 'lands-in-claude',
-   '**Lands in Claude — Desktop and Code — reliably and model-agnostically.** The synthesized bundle reaches both Claude surfaces without a fragile step, under a documented contract that works for any agent. Done when: a file-bundle handoff (prompt.md + image files) plus clipboard text works for Claude Desktop; a /feedback path injects the prompt and loads the image paths in Claude Code; an optional local stdio MCP server exposes the latest bundle for a hands-free pull; and an ADR + README document the architecture and the model-agnostic prompt/handoff contract.',
-   4)
-) AS v(version_id, criterion_id, criterion_md, sort_order)
-WHERE EXISTS (SELECT 1 FROM versions WHERE id = 'BONGOS-V1')
-ON CONFLICT (version_id, criterion_id) DO UPDATE
-  SET criterion_md = EXCLUDED.criterion_md,
-      sort_order   = EXCLUDED.sort_order;
-
--- ============================================================================
--- 3. Self-register so migrate.sh skips this file on the next deploy (it is
---    hot-applied via psql under this planning seed).
--- ============================================================================
-INSERT INTO schema_migrations (version) VALUES ('120_bongos_v1_planning_seed')
-ON CONFLICT DO NOTHING;
-
-COMMIT;

package/migrations/instance/144_bongos_v1_module_system_criterion.sql

@@ -1,26 +0,0 @@
--- BONGOS-V1 — module-system done-when criterion (C5) — 2026-06-21
--- Owner-directed (archon), task 1405 (BV1.R36) / ADR 0083.
---
--- Adds a 5th done_when_criterion to BONGOS-V1: the project-extensible module
--- system (the design scoped in docs/design/modular-architecture/, epic #1388 /
--- BV1.R34). The module-system child tasks are seeded AFTER this is applied via
--- scripts/gds/seed-bongos-module-system-tasks.js, so the positional ref C5
--- resolves at task-create. (Same migration+seed split as 120 + seed-bongos-app-tasks.js.)
---
--- Idempotent on re-run: UPSERT on (version_id, criterion_id). The companion
--- migration 120 already seeded C1..C4 (sort_order 1..4); this adds sort_order 5.
-
-BEGIN;
-
-INSERT INTO done_when_criteria (version_id, criterion_id, criterion_md, sort_order)
-SELECT * FROM (VALUES
-  ('BONGOS-V1', 'module-system-live',
-   '**The project-extensible module system is live — the whole product is `core + modules`.** Cloud Bongos''s closed four-module registry becomes self-describing packages the platform discovers, validates, and mounts; a host can ADD or CONFIGURE modules without forking core, and the trust boundary (ADR 0016) is ENFORCED across module routes, not trusted. Built as an incremental strangler migration (ADR 0083) — reorganize, not rewrite; single-package, single-process, no-bundler preserved. Done when: (1) `src/module-api.js` is the stable, semver''d doorway and the only core file a module may import; (2) a loader discovers/validates/mounts `modules/*/module.json` behind kernel-composed auth and replaces the hardcoded `KNOWN_MODULES` registry, with a kernel seam registry (ports + events) for cross-module capability; (3) the four feature modules (dev-box, game, discord, art-pipeline) are moved into `modules/<key>/` and the inline `if (isModuleEnabled())` gates are deleted, with OTB behaving byte-identically (the proof); (4) fitness functions fail the build on any boundary violation (core never imports a module, modules import only the published API, every module write-route is rank-gated, core carries no module code, module migrations are additive + namespaced); (5) module-owned migrations generalize the `migrations/game/` precedent to `modules/<key>/migrations/` (enabled-gated apply, disable-preserves-data); (6) `bongos module new <key>` scaffolds a module and `bongos upgrade` pre-checks coreVersion; and (7) docs/modules-contract.md documents the plugin-API contract + a module-author recipe.',
-   5)
-) AS v(version_id, criterion_id, criterion_md, sort_order)
-WHERE EXISTS (SELECT 1 FROM versions WHERE id = 'BONGOS-V1')
-ON CONFLICT (version_id, criterion_id) DO UPDATE
-  SET criterion_md = EXCLUDED.criterion_md,
-      sort_order   = EXCLUDED.sort_order;
-
-COMMIT;

package/migrations/instance/159_bongos_v1_goal_hierarchy_criterion.sql

@@ -1,29 +0,0 @@
--- BONGOS-V1 — goal-scoped-work-hierarchy done-when criterion (C6) — 2026-06-24
--- Owner-directed (archon), task 1507 / ADR 0086 (docs/adr/0086-goal-scoped-work-hierarchy.md).
---
--- Adds a 6th done_when_criterion to BONGOS-V1: the goal-scoped work hierarchy —
--- assign module-scoped GOALS, not individual tasks, and let a goal's members
--- author their own tasks within the goal's module wall, enforced server-side.
--- A criterion cluster ALONGSIDE the ADR 0083 module work (C5). The build tasks
--- (BV1.R54..R66, the ADR's Phases 1-4 + a deferred Phase-5 ADR spike + the live
--- proof) are seeded AFTER this is applied via
--- scripts/gds/seed-bongos-goal-hierarchy-tasks.js, so the positional ref C6
--- resolves at task-create (same migration+seed split as 144 + the module seed).
---
--- Idempotent on re-run: UPSERT on (version_id, criterion_id). Migrations 120/144
--- already seeded C1..C5 (sort_order 1..5); this adds sort_order 6.
-
-BEGIN;
-
-INSERT INTO done_when_criteria (version_id, criterion_id, criterion_md, sort_order)
-SELECT * FROM (VALUES
-  ('BONGOS-V1', 'goal-scoped-work-hierarchy',
-   '**Builders are assigned module-scoped goals, not individual tasks — and can author their own work within a goal''s wall, enforced server-side.** The owner stops hand-authoring every task; a builder joins a shared, module-scoped goal and gains bounded authority to create + organize tasks beneath it, never exceeding the goal''s module scope or touching the protected core. The six-tier hierarchy (Project → Version → Goal → Criteria → Task → Sub-task) is a per-instance config preset; enforcement is core (ADR 0086, building on ADR 0016/0043/0049/0083/0084). Done when: (1) a module-scope map (`module-scope-map.js`, importing `PROTECTED_GLOBS`) + a configurable hierarchy preset (`config/hierarchy.json` + `hierarchy-config.js`, onboarding-edited) exist; (2) a `goals` tier (shared, joinable, `scope_modules`) sits between versions and criteria, `done_when_criteria` re-parent under goals (backfilled under a per-version default goal), and `tasks` carry `goal_id`, with the `/status` rollup running Version → Goals → Criteria → Tasks; (3) a goal member can author a task via `POST /goals/:id/tasks` only if it is scope-subset + clears the protected-path gate + the auto-derived rank floor, with two fitness checks (goal routes pinned in `route-rank-check`; scope code imports `PROTECTED_GLOBS`) and an abuse-matrix test proving the wall holds; (4) a polymorphic dependency edge spans tasks/goals/criteria and resolves at the existing claim gate, a criterion auto-flags "met — pending review" when its tasks ship, a `/goal-review` cadence (Metic+) confirms → auto-achieves goals, and goals archive/reopen/carry-forward at rescope; and (5) a sub-Metic builder demonstrably authors, claims, and ships a task inside an assigned goal while being BLOCKED server-side from authoring one that touches a protected path outside scope (the live proof). Phase 5 of the ADR (an AI relevance judge + sub-Metic membership inside protected-scope goals) is deferred to its own security-reviewed ADR.',
-   6)
-) AS v(version_id, criterion_id, criterion_md, sort_order)
-WHERE EXISTS (SELECT 1 FROM versions WHERE id = 'BONGOS-V1')
-ON CONFLICT (version_id, criterion_id) DO UPDATE
-  SET criterion_md = EXCLUDED.criterion_md,
-      sort_order   = EXCLUDED.sort_order;
-
-COMMIT;

package/migrations/instance/172_v2_world_planning_seed.sql

@@ -1,163 +0,0 @@
--- 172_v2_world_planning_seed.sql
--- Land Builder #25's world-building planning package (idea_inbox 416-427),
--- reviewed + adjusted with Lars, folded into the existing product version V2.
--- Backed by task 1569 (source_ref V2-world-planning-1).
---
--- Decisions baked in here:
---   * World-building folds into V2 — NO new version row.
---   * The warp stays in V2 (criterion connected-warps + its tasks).
---   * The in-house map editor (criterion map-editor + 6 tasks) defers to V3.
---   * Engineering/server lanes are split from design/art lanes (carried by the
---     per-task module_key + requires_rank set in the companion seed script).
---
--- This migration handles DB scope-truth only:
---   1. 4 goals (3 on V2, 1 on V3)
---   2. 7 done_when_criteria (6 on V2, 1 on V3), parented to their goals
---   3. V2 + V3 versions.done_when text
---   4. +5 karma x7 to builder #25 (the proposer), mirroring ratify
---   5. idea_inbox bookkeeping (416-424 resolved; 427 left open as the durable
---      world-expansion reference)
---
--- The 16 V2 + 6 V3 + 2 GDS-V4 tasks (with deps + criterion links) are created
--- by scripts/gds/seed-v2-world-tasks.js, run against the API after this deploys.
---
--- Idempotent: goals guarded by NOT EXISTS (version_id,title); criteria via
--- ON CONFLICT (version_id,criterion_id); karma via NOT EXISTS on a per-idea
--- reason marker; idea updates are naturally idempotent.
-
-BEGIN;
-
--- Vanilla-safe guard (task 1264 / hardware-verify R63): everything below seeds
--- OTB *product* scope-truth (V2/V3 game-world planning). A vanilla Cloud Bongos
--- instance has no V2/V3 version rows — no migration seeds them (they were created
--- via the API on the OTB instance) — so each INSERT below would violate the
--- versions foreign key on a fresh DB. Wrap the seed in a DO block that no-ops
--- unless the product versions exist. (On the OTB instance this migration is
--- already recorded in schema_migrations and never re-runs; the guard only bites
--- on a fresh self-host DB — see docker-compose.yml / self-host.)
-DO $seed$
-BEGIN
-  IF NOT EXISTS (SELECT 1 FROM versions WHERE id IN ('V2','V3')) THEN
-    RAISE NOTICE '172: V2/V3 product versions absent — vanilla instance, skipping OTB world-planning seed.';
-    RETURN;
-  END IF;
-
--- ---------------------------------------------------------------------------
--- 1. Goals (module-scoped workspaces, ADR 0086). created_by = 1 (Archon land).
--- ---------------------------------------------------------------------------
-INSERT INTO goals (version_id, title, description, scope_modules, status, created_by)
-SELECT 'V2', 'World engine (multi-map runtime)',
-       'File-based maps, depth rendering, and per-map warp rooms. Engineering — touches protected game code (Metic+).',
-       ARRAY['game']::text[], 'open', 1
-WHERE NOT EXISTS (SELECT 1 FROM goals WHERE version_id='V2' AND title='World engine (multi-map runtime)');
-
-INSERT INTO goals (version_id, title, description, scope_modules, status, created_by)
-SELECT 'V2', 'Olympia art set',
-       'Terrain, temple kit, and decor for Olympia on the locked 64-color palette. Design — art pipeline, open to any builder.',
-       ARRAY['art-pipeline']::text[], 'open', 1
-WHERE NOT EXISTS (SELECT 1 FROM goals WHERE version_id='V2' AND title='Olympia art set');
-
-INSERT INTO goals (version_id, title, description, scope_modules, status, created_by)
-SELECT 'V2', 'Olympia vertical slice',
-       'Compose the walkable Olympia map from engine + art, second connected map, and score vs the reference.',
-       ARRAY['game']::text[], 'open', 1
-WHERE NOT EXISTS (SELECT 1 FROM goals WHERE version_id='V2' AND title='Olympia vertical slice');
-
-INSERT INTO goals (version_id, title, description, scope_modules, status, created_by)
-SELECT 'V3', 'Map authoring & editor',
-       'In-house map editor that round-trips maps into the game. Deferred out of V2; depends on the V2 engine shipping first.',
-       ARRAY['game']::text[], 'open', 1
-WHERE NOT EXISTS (SELECT 1 FROM goals WHERE version_id='V3' AND title='Map authoring & editor');
-
--- ---------------------------------------------------------------------------
--- 2. done_when_criteria, parented to the goals above. criterion_md text is
---    lifted verbatim from the ratified proposals (ideas 416-422).
--- ---------------------------------------------------------------------------
-INSERT INTO done_when_criteria (version_id, criterion_id, criterion_md, sort_order, goal_id)
-VALUES
- ('V2', 'world-data',
-  E'**The world loads from per-map data files, not hardcoded arrays — one source feeds both client render and server collision.**\n\n*Why:* retires the hand-mirrored map twins (`public/game/world/map.js` ↔ `src/world/map.js`, today''s top drift risk) and makes hand-designed maps possible.\n\n- A documented JSON map format at `public/assets/maps/<id>.json` with layers: ground (dense, drives autotile), decoration, objects, overlay; plus structures, warps, spawns.\n- A single shared parse + collision module (`mapFormat.js`) used by client and server; no duplicated map data.\n- Collision is *derived* from layers + structure solid-cells (generalizes today''s blocking-terrain / blocking-object rule).\n- ADR 0012 invariant intact: objects never pollute the ground autotile picker.\n- Today''s 26×20 room round-trips through the new format with identical render + walkability.',
-  100, (SELECT id FROM goals WHERE version_id='V2' AND title='World engine (multi-map runtime)')),
-
- ('V2', 'walk-olympia',
-  E'**A player can walk the Olympia Sanctuary in-game at the fidelity of the reference art.**\n\n*Why:* the vertical slice that proves the whole art + rendering direction before any expansion.\n\n- Temple of Zeus, Temple of Hera, the Altis grove, the plaza, and the stadium frontage are present and recognizable from the reference sheets.\n- The camera follows the player and scrolls a map larger than the viewport (canvas no longer equals map size).\n- Movement stays client-predicted / server-authoritative.\n- The scene is staged on the sandbox and walkable end-to-end.',
-  200, (SELECT id FROM goals WHERE version_id='V2' AND title='Olympia vertical slice')),
-
- ('V2', 'depth-sort',
-  E'**Tall structures render with correct depth — the player passes behind their tops and in front of their bases.**\n\n*Why:* 3/4-tilt temples, columns, and statues look wrong under today''s flat depth-0/1 layering.\n\n- 2.5D y-sort: player-plane objects and all character sprites share `depth = base*1000 + footY`.\n- An always-above overlay band carries structure tops (column capitals, roof crowns).\n- Reconciled with the existing autotile + interior-tile transform render path.\n- No z-fighting within a single structure''s footprint.',
-  300, (SELECT id FROM goals WHERE version_id='V2' AND title='World engine (multi-map runtime)')),
-
- ('V2', 'connected-warps',
-  E'**At least two connected maps with working warps — the player crosses between areas server-authoritatively.**\n\n*Why:* the classic Pokémon world model (overworld → enterable complex) the reference implies.\n\n- `mapId` in player state; one Colyseus room instance per map; per-map seating + queue.\n- Warp points move the player between maps at named spawns.\n- The 100-cap becomes per-map (overworld overflow can''t block Olympia).\n- Warping into a full destination map degrades gracefully (queue handoff).',
-  400, (SELECT id FROM goals WHERE version_id='V2' AND title='World engine (multi-map runtime)')),
-
- ('V2', 'olympia-art-set',
-  E'**The Olympia art set exists and passes the rubric on the locked 64-color palette.**\n\n*Why:* the slice cannot render without the terrain, building, and decor assets.\n\n- Terrain: marble plaza / flagstone, stone & cliff, river / water, forest + palm, grass variants — as autotile families where they tile.\n- Temple building kit: walls, columns / colonnade, orange-tile roof slopes, steps — authored as Pattern-B continuous illustrations sliced to the structure registry.\n- Decor: Zeus / Hera statues, altar-with-fire, amphorae, fountains.\n- All members land in the packed atlas + manifest; `tests/autotile_xverify.mjs` stays green.',
-  500, (SELECT id FROM goals WHERE version_id='V2' AND title='Olympia art set')),
-
- ('V2', 'scored-vs-reference',
-  E'**The Olympia slice is scored against the reference images, and the reference becomes the durable target.**\n\n*Why:* closes the loop — proves the criterion set actually produced the intended look.\n\n- The four reference sheets are ingested into `art/references/` as the durable target.\n- `otb-design-review` scores the new tiles ≥ the rubric threshold.\n- A before/after writeup lands in `docs/reviews/` with side-by-side screenshots vs the reference.',
-  700, (SELECT id FROM goals WHERE version_id='V2' AND title='Olympia vertical slice')),
-
- ('V3', 'map-editor',
-  E'**A lightweight in-house map editor lets a builder author maps that round-trip into the game.**\n\n*Why:* hand-editing JSON for scenes the size of Olympia doesn''t scale.\n\n- Paint ground with *live autotile preview* (imports the game''s `terrain.js`/`autotile.js` picker — no new autotile code).\n- Place objects + multi-tile structures; set warps, spawns, collision.\n- Save a valid map file (validated by the same `mapFormat` validator), persisted via the deploy-safe path (branch/PR per the save-model spike).\n- A map authored in the editor loads and plays in the game unchanged.',
-  50, (SELECT id FROM goals WHERE version_id='V3' AND title='Map authoring & editor'))
-ON CONFLICT (version_id, criterion_id) DO UPDATE
-  SET criterion_md = EXCLUDED.criterion_md,
-      sort_order   = EXCLUDED.sort_order,
-      goal_id      = EXCLUDED.goal_id;
-
--- ---------------------------------------------------------------------------
--- 3. Version done_when text (broaden V2 to cover the walkable world; note the
---    editor carry on V3).
--- ---------------------------------------------------------------------------
-UPDATE versions
-   SET done_when = 'Other players are visible in a real, walkable world: a player walks the Olympia Sanctuary in-game at reference-art fidelity, with file-based multi-layer maps feeding both client render and server collision, correct depth-sorting on tall structures, at least two connected maps with server-authoritative warps, and the Olympia art set passing the rubric on the locked palette.'
- WHERE id = 'V2';
-
-UPDATE versions
-   SET done_when = COALESCE(done_when, '') ||
-       E'\n\nAlso (folded in from the world-building plan): a lightweight in-house map editor lets a builder author maps that round-trip into the game (depends on the V2 world engine shipping first).'
- WHERE id = 'V3'
-   AND done_when NOT LIKE '%in-house map editor%';
-
--- ---------------------------------------------------------------------------
--- 4. Karma to the proposer (#25), mirroring the ratify path (+5 each, x7).
---    Guarded per-idea so a re-run can't double-credit.
--- ---------------------------------------------------------------------------
-INSERT INTO karma_log (builder_id, delta, reason, granted_by)
-SELECT 25, 5, m.reason, 1
-FROM (VALUES
-  ('proposal_ratified:idea-416'),
-  ('proposal_ratified:idea-417'),
-  ('proposal_ratified:idea-418'),
-  ('proposal_ratified:idea-419'),
-  ('proposal_ratified:idea-420'),
-  ('proposal_ratified:idea-421'),
-  ('proposal_ratified:idea-422')
-) AS m(reason)
-WHERE NOT EXISTS (
-  SELECT 1 FROM karma_log k WHERE k.builder_id = 25 AND k.reason = m.reason
-);
-
--- ---------------------------------------------------------------------------
--- 5. idea_inbox bookkeeping.
---    416-422 (criterion proposals) + 424 (the umbrella) -> promoted.
---    423 (superseded umbrella v1) -> discarded.
---    427 (reference manifest, future world-scale) -> LEFT OPEN on purpose as
---        the durable expansion reference; 425/426 are promoted by the seed.
--- ---------------------------------------------------------------------------
-UPDATE idea_inbox
-   SET status = 'promoted', reviewed_at = now()
- WHERE id IN (416,417,418,419,420,421,422,424)
-   AND status = 'open';
-
-UPDATE idea_inbox
-   SET status = 'discarded', reviewed_at = now()
- WHERE id = 423
-   AND status = 'open';
-
-END
-$seed$;
-
-COMMIT;

package/migrations/instance/173_bongos_v1_c7_core_modularized.sql

@@ -1,33 +0,0 @@
--- 173_bongos_v1_c7_core_modularized.sql
--- Adds BONGOS-V1 criterion C7 (gds-core-modularized) — the "Config B" core
--- decomposition wave seeded by planning session 2026-06-26 (task 1567).
--- The four feature modules (C5) shipped; this criterion owns breaking the GDS
--- *core* into kernel-mediated modules. Parented under goal 10 (GDS core
--- modularization). Idempotent on the (version_id, criterion_id) unique key.
--- Vanilla-safe guard (task 1264 / hardware-verify R63): this criterion parents to
--- goal id 10 (OTB's "GDS core modularization" goal). Goal ids aren't migration-seeded,
--- so a fresh self-host DB has no goal #10 and this INSERT would violate the goal_id
--- foreign key. Skip unless that goal exists. (Already applied on the OTB instance;
--- guard only bites on a fresh vanilla DB.)
-DO $c7$
-BEGIN
-  IF NOT EXISTS (SELECT 1 FROM goals WHERE id = 10) THEN
-    RAISE NOTICE '173: goal 10 (GDS core modularization) absent — vanilla instance, skipping BONGOS-V1 C7 criterion seed.';
-    RETURN;
-  END IF;
-
-INSERT INTO done_when_criteria (version_id, criterion_id, criterion_md, sort_order, goal_id)
-VALUES (
-  'BONGOS-V1',
-  'gds-core-modularized',
-  '**The GDS core is itself decomposed into cohesive, kernel-mediated modules — not just the four feature modules.** A bounded ~3.5k-LOC kernel (auth · rank · pool · audit · trust primitives · loader · seams) is the *only* thing core domains import, through the published doorway; the ~6k-LOC shared `db.js` is carved per-domain so each module owns its SQL; capabilities the lifecycle invokes (grade, reward) resolve through kernel **ports**, never direct imports. **Proven when ≥2 core domains live as modules with their `db.js` slices extracted, the kernel is bounded + fitness-enforced, and OTB behaves byte-identically.** The lifecycle state machine (tasks/claims/versions) is NOT split — only the capabilities it calls are extracted behind seams. (ADR 0083 §"the four module moves" + design doc 02-module-map.md §3/§6; planning 2026-06-26, task 1567.)',
-  7,
-  10
-)
-ON CONFLICT (version_id, criterion_id) DO UPDATE
-  SET criterion_md = EXCLUDED.criterion_md,
-      sort_order  = EXCLUDED.sort_order,
-      goal_id     = EXCLUDED.goal_id;
-
-END
-$c7$;

package/migrations/instance/182_gdsv4_bongos_consolidation.sql

@@ -1,132 +0,0 @@
--- Migration 182 — Consolidate GDS-V4 into BONGOS-V1 + split out the Bongos desktop app
--- ============================================================================
--- Archon-directed project cleanup, 2026-07-02 (task 1709, ADR 0103; with Lars).
---
--- GDS-V4 and BONGOS-V1 were two parallel internal / Cloud-Bongos versions with
--- no clean divide. This migration makes BONGOS-V1 the single go-forward internal
--- (Cloud Bongos platform) version, carries GDS-V4's still-relevant open work
--- into it, splits the Bongos DESKTOP APP into its own goal, prunes superseded
--- work, and freezes GDS-V4.
---
--- REVERSIBLE by construction: no destructive drops — only status / version_id /
--- goal_id / one dependency-edge mutations. The exact before-state is snapshotted
--- in the task-1709 session notes. See ADR 0103 for the full rationale + the
--- ADR-0095 (grep-over-embeddings) decision that retires the C1 recall arm.
---
--- Idempotency: migrate.sh applies each numbered migration once; the goal INSERT
--- is additionally NOT-EXISTS-guarded so a manual re-run cannot double-create it.
--- ============================================================================
-
-BEGIN;
-
--- 1. Create the "Bongos desktop app" goal under BONGOS-V1 and reparent the app
---    tasks (mascot/brand, branded download + auto-update, the cloudbongos.com
---    landing/download page, the feedback-capture app, the absorbed Dev Box
---    switch). scope_modules stays empty until the code carve (bongos-app/ ->
---    modules/bongos-app/) creates the module, at which point the goal is scoped
---    to it. See ADR 0087 (the app absorbs Dev Box).
-DO $$
-DECLARE app_goal_id bigint;
-BEGIN
-  SELECT id INTO app_goal_id
-    FROM goals
-   WHERE version_id = 'BONGOS-V1' AND title = 'Bongos desktop app'
-   LIMIT 1;
-
-  IF app_goal_id IS NULL THEN
-    INSERT INTO goals (version_id, title, description, scope_modules, created_by, status)
-    VALUES (
-      'BONGOS-V1',
-      'Bongos desktop app',
-      'The Cloud Bongos DESKTOP APP (bongos-app/): a Zoom-style feedback-capture '
-      || 'walkthrough tool that produces one model-agnostic prompt bundle for a coding '
-      || 'agent, and the umbrella app that absorbs the Dev Box switch (ADR 0045/0072/0087). '
-      || 'Distinct from the Cloud Bongos PLATFORM (the GDS engine, modules, grader, hosting). '
-      || 'Covers: mascot/brand (Bongo Buddha), branded download + auto-update, the '
-      || 'cloudbongos.com landing/download page, and the dev-box desktop client. The code '
-      || 'carve bongos-app/ -> modules/bongos-app/ is tracked as a task under this goal.',
-      '{}',
-      1,
-      'open'
-    )
-    RETURNING id INTO app_goal_id;
-  END IF;
-
-  -- App tasks currently in GDS-V4: rebind version AND attach to the app goal.
-  --   1523 interactive mascot · 1294 devbox-app go-live bump ·
-  --   1463 devbox-app build workflow · 1484 dev-box host-key / app re-pin
-  UPDATE tasks
-     SET version_id = 'BONGOS-V1', goal_id = app_goal_id, updated_at = now()
-   WHERE id IN (1523, 1294, 1463, 1484)
-     AND version_id = 'GDS-V4';
-
-  -- App tasks already in BONGOS-V1: attach to the app goal.
-  --   1311 branded download + auto-update · 1682/1700/1701 Bongo Buddha anim ·
-  --   1702 cloudbongos.com landing/download page
-  UPDATE tasks
-     SET goal_id = app_goal_id, updated_at = now()
-   WHERE id IN (1311, 1682, 1700, 1701, 1702)
-     AND version_id = 'BONGOS-V1';
-END $$;
-
--- 2. Abandon 19 superseded tasks:
---      C1 recall/embeddings arm (939,962,966-971,1221) — retired by ADR 0095's
---        grep-over-embeddings decision (Anthropic + Sourcegraph removed embedding
---        indexes; the endorsed path is meaning-in-source, tracked separately).
---      Old V3.R## grader tasks (201,202,242,292,388,490,492) — superseded by the
---        shipped 4-worker grader panel + ADR 0089.
---      T-NNN task-ref migration (753,754,755) — the current hall-link convention
---        already works and is enforced.
-UPDATE tasks
-   SET status = 'abandoned', updated_at = now()
- WHERE id IN (939,962,966,967,968,969,970,971,1221,
-              201,202,242,292,388,490,492,
-              753,754,755)
-   AND version_id = 'GDS-V4'
-   AND status IN ('backlog', 'ready');
-
--- 3. Sever the 758 -> 753 dependency edge. 753 (T-NNN ADR) is being abandoned;
---    758 ("document the hall as the canonical doc surface") is kept and must not
---    be left permanently unclaimable (DEPS_NOT_SHIPPED) by a dead dependency.
---    Delete from both the polymorphic table (the gate read) and the legacy one.
-DELETE FROM dependencies
- WHERE from_kind = 'task' AND from_id = 758 AND to_kind = 'task' AND to_id = 753;
-DELETE FROM task_dependencies
- WHERE task_id = 758 AND depends_on_task_id = 753;
-
--- 4. Move two misfiled game-art tasks to product V2 (they are world art, not
---    internal-track work): 586 grass_on_sand variety, 587 player_walk family.
-UPDATE tasks
-   SET version_id = 'V2', updated_at = now()
- WHERE id IN (586, 587)
-   AND version_id = 'GDS-V4';
-
--- 5. Carry every remaining NON-TERMINAL GDS-V4 task (the platform work) forward
---    to BONGOS-V1. Non-terminal = backlog/ready/completed/blocked. This leaves
---    the in-flight tail (10 confirmed + 1 active) and terminal history
---    (shipped/abandoned) attributed to GDS-V4, exactly like a normal
---    version-close carry-over. Runs AFTER steps 1/2/4 so the app / abandoned /
---    product tasks are already out of scope; self-correcting for the remainder.
-UPDATE tasks
-   SET version_id = 'BONGOS-V1', updated_at = now()
- WHERE version_id = 'GDS-V4'
-   AND status IN ('backlog', 'ready', 'completed', 'blocked');
-
--- 6. BONGOS-V1 becomes the single go-forward internal version: rename it off the
---    misleading "Bongos App" title (the app is now a GOAL inside it, step 1) and
---    mark it 'building' (it is actively being built).
-UPDATE versions
-   SET name = 'Cloud Bongos — platform (V1)', status = 'building'
- WHERE id = 'BONGOS-V1';
-
--- 7. Freeze GDS-V4 — sealed to new planning. Its 11 in-flight tasks land as its
---    final shipped history; its 358 shipped + 51 abandoned rows stay as the
---    archive of what GDS-V4 delivered. ('frozen', not 'shipped': GDS-V4 did not
---    ship — it was absorbed — and 'shipped' would falsely read 100% + could gate
---    the in-flight tail.)
-UPDATE versions
-   SET status = 'frozen'
- WHERE id = 'GDS-V4'
-   AND status <> 'shipped';
-
-COMMIT;