@bongos/core 1.18.18 → 1.19.2

package/clients/bongos-client/index.cjs

@@ -102,7 +102,7 @@ function createClient(opts = {}) {
       getAnalyticsBuilderId: (args) => request("GET", "/analytics/builder/{id}", { hasBody: false }, args),
     },
     "auditLog": {
-      // GET /audit-log — rank: archon — GET /audit-log
+      // GET /audit-log — rank: metic+archon — GET /audit-log
       getAuditLog: (args) => request("GET", "/audit-log", { hasBody: false }, args),
     },
     "auth": {
@@ -144,7 +144,7 @@ function createClient(opts = {}) {
       getAuthWebStart: (args) => request("GET", "/auth/web/start", { hasBody: false }, args),
     },
     "autonomy": {
-      // GET /autonomy/precheck — rank: archon — GET /autonomy/precheck
+      // GET /autonomy/precheck — rank: metic+archon — GET /autonomy/precheck
       getAutonomyPrecheck: (args) => request("GET", "/autonomy/precheck", { hasBody: false }, args),
     },
     "backup": {
@@ -204,13 +204,13 @@ function createClient(opts = {}) {
       postBoxVersion: (args) => request("POST", "/box/version", { hasBody: true }, args),
     },
     "boxes": {
-      // GET /boxes — rank: archon — GET /boxes
+      // GET /boxes — rank: metic+archon — GET /boxes
       getBoxes: (args) => request("GET", "/boxes", { hasBody: false }, args),
-      // PATCH /boxes/{builderId}/block — rank: archon — PATCH /boxes/:builderId/block
+      // PATCH /boxes/{builderId}/block — rank: metic+archon — PATCH /boxes/:builderId/block
       patchBoxesBuilderIdBlock: (args) => request("PATCH", "/boxes/{builderId}/block", { hasBody: true }, args),
-      // POST /boxes/{builderId}/close — rank: archon — POST /boxes/:builderId/close
+      // POST /boxes/{builderId}/close — rank: metic+archon — POST /boxes/:builderId/close
       postBoxesBuilderIdClose: (args) => request("POST", "/boxes/{builderId}/close", { hasBody: true }, args),
-      // GET /boxes/cost-ledger — rank: archon — GET /boxes/cost-ledger
+      // GET /boxes/cost-ledger — rank: metic+archon — GET /boxes/cost-ledger
       getBoxesCostLedger: (args) => request("GET", "/boxes/cost-ledger", { hasBody: false }, args),
     },
     "bugAttachments": {
@@ -218,9 +218,9 @@ function createClient(opts = {}) {
       getBugAttachmentsName: (args) => request("GET", "/bug-attachments/{name}", { hasBody: false }, args),
     },
     "builders": {
-      // GET /builders/{id}/active-claims — rank: archon — GET /builders/:id/active-claims
+      // GET /builders/{id}/active-claims — rank: metic+archon — GET /builders/:id/active-claims
       getBuildersIdActiveClaims: (args) => request("GET", "/builders/{id}/active-claims", { hasBody: false }, args),
-      // PATCH /builders/{id}/budget — rank: archon — PATCH /builders/:id/budget
+      // PATCH /builders/{id}/budget — rank: metic+archon — PATCH /builders/:id/budget
       patchBuildersIdBudget: (args) => request("PATCH", "/builders/{id}/budget", { hasBody: true }, args),
       // GET /builders/{id}/onboarding — rank: public — GET /builders/:id/onboarding
       getBuildersIdOnboarding: (args) => request("GET", "/builders/{id}/onboarding", { hasBody: false }, args),
@@ -234,13 +234,13 @@ function createClient(opts = {}) {
       getBuildersDirectory: (args) => request("GET", "/builders/directory", { hasBody: false }, args),
       // GET /builders/me/pending-rank-change — rank: any-builder — GET /builders/me/pending-rank-change
       getBuildersMePendingRankChange: (args) => request("GET", "/builders/me/pending-rank-change", { hasBody: false }, args),
-      // GET /builders/roster — rank: archon — GET /builders/roster
+      // GET /builders/roster — rank: metic+archon — GET /builders/roster
       getBuildersRoster: (args) => request("GET", "/builders/roster", { hasBody: false }, args),
     },
     "claims": {
       // POST /claims — rank: any-builder — POST /claims
       postClaims: (args) => request("POST", "/claims", { hasBody: true }, args),
-      // POST /claims/{id}/release-on-behalf — rank: archon — POST /claims/:id/release-on-behalf
+      // POST /claims/{id}/release-on-behalf — rank: metic+archon — POST /claims/:id/release-on-behalf
       postClaimsIdReleaseOnBehalf: (args) => request("POST", "/claims/{id}/release-on-behalf", { hasBody: true }, args),
       // POST /claims/{id}/resolve — rank: any-builder — POST /claims/:id/resolve
       postClaimsIdResolve: (args) => request("POST", "/claims/{id}/resolve", { hasBody: true }, args),
@@ -262,21 +262,21 @@ function createClient(opts = {}) {
       postDependencies: (args) => request("POST", "/dependencies", { hasBody: true }, args),
     },
     "discord": {
-      // GET /discord/channels/plan — rank: archon — GET /discord/channels/plan
+      // GET /discord/channels/plan — rank: metic+archon — GET /discord/channels/plan
       getDiscordChannelsPlan: (args) => request("GET", "/discord/channels/plan", { hasBody: false }, args),
-      // POST /discord/channels/reconcile — rank: archon — POST /discord/channels/reconcile
+      // POST /discord/channels/reconcile — rank: metic+archon — POST /discord/channels/reconcile
       postDiscordChannelsReconcile: (args) => request("POST", "/discord/channels/reconcile", { hasBody: true }, args),
     },
     "doneWhen": {
       // POST /done-when/{criterionId}/satisfy — rank: metic+archon — POST /done-when/:criterionId/satisfy
       postDoneWhenCriterionIdSatisfy: (args) => request("POST", "/done-when/{criterionId}/satisfy", { hasBody: true }, args),
-      // POST /done-when/{criterionId}/unsatisfy — rank: archon — POST /done-when/:criterionId/unsatisfy
+      // POST /done-when/{criterionId}/unsatisfy — rank: metic+archon — POST /done-when/:criterionId/unsatisfy
       postDoneWhenCriterionIdUnsatisfy: (args) => request("POST", "/done-when/{criterionId}/unsatisfy", { hasBody: true }, args),
       // GET /done-when/pending-review — rank: metic+archon — GET /done-when/pending-review
       getDoneWhenPendingReview: (args) => request("GET", "/done-when/pending-review", { hasBody: false }, args),
     },
     "gateApprovals": {
-      // GET /gate-approvals — rank: archon — GET /gate-approvals
+      // GET /gate-approvals — rank: metic+archon — GET /gate-approvals
       getGateApprovals: (args) => request("GET", "/gate-approvals", { hasBody: false }, args),
       // POST /gate-approvals/{pr}/approve — rank: archon — POST /gate-approvals/:pr/approve
       postGateApprovalsPrApprove: (args) => request("POST", "/gate-approvals/{pr}/approve", { hasBody: true }, args),
@@ -334,11 +334,29 @@ function createClient(opts = {}) {
       patchGoalsIdVisibility: (args) => request("PATCH", "/goals/{id}/visibility", { hasBody: true }, args),
       // GET /goals/inbox — rank: any-builder — GET /goals/inbox
       getGoalsInbox: (args) => request("GET", "/goals/inbox", { hasBody: false }, args),
-      // POST /goals/reorder — rank: archon — POST /goals/reorder
+      // POST /goals/reorder — rank: metic+archon — POST /goals/reorder
       postGoalsReorder: (args) => request("POST", "/goals/reorder", { hasBody: true }, args),
     },
+    "governance": {
+      // GET /governance/assignments — rank: archon — GET /governance/assignments
+      getGovernanceAssignments: (args) => request("GET", "/governance/assignments", { hasBody: false }, args),
+      // POST /governance/assignments — rank: archon — POST /governance/assignments
+      postGovernanceAssignments: (args) => request("POST", "/governance/assignments", { hasBody: true }, args),
+      // DELETE /governance/assignments/{builderId}/{roleKey} — rank: archon — DELETE /governance/assignments/:builderId/:roleKey
+      deleteGovernanceAssignmentsBuilderIdRoleKey: (args) => request("DELETE", "/governance/assignments/{builderId}/{roleKey}", { hasBody: false }, args),
+      // GET /governance/permissions — rank: archon — GET /governance/permissions
+      getGovernancePermissions: (args) => request("GET", "/governance/permissions", { hasBody: false }, args),
+      // GET /governance/roles — rank: archon — GET /governance/roles
+      getGovernanceRoles: (args) => request("GET", "/governance/roles", { hasBody: false }, args),
+      // POST /governance/roles — rank: archon — POST /governance/roles
+      postGovernanceRoles: (args) => request("POST", "/governance/roles", { hasBody: true }, args),
+      // DELETE /governance/roles/{roleKey}/permissions/{permissionKey} — rank: archon — DELETE /governance/roles/:roleKey/permissions/:permissionKey
+      deleteGovernanceRolesRoleKeyPermissionsPermissionKey: (args) => request("DELETE", "/governance/roles/{roleKey}/permissions/{permissionKey}", { hasBody: false }, args),
+      // PUT /governance/roles/{roleKey}/permissions/{permissionKey} — rank: archon — PUT /governance/roles/:roleKey/permissions/:permissionKey
+      putGovernanceRolesRoleKeyPermissionsPermissionKey: (args) => request("PUT", "/governance/roles/{roleKey}/permissions/{permissionKey}", { hasBody: true }, args),
+    },
     "grades": {
-      // GET /grades/by-builder — rank: archon — GET /grades/by-builder
+      // GET /grades/by-builder — rank: metic+archon — GET /grades/by-builder
       getGradesByBuilder: (args) => request("GET", "/grades/by-builder", { hasBody: false }, args),
     },
     "healthz": {
@@ -354,7 +372,7 @@ function createClient(opts = {}) {
       getInboxId: (args) => request("GET", "/inbox/{id}", { hasBody: false }, args),
       // PATCH /inbox/{id} — rank: metic+archon — PATCH /inbox/:id
       patchInboxId: (args) => request("PATCH", "/inbox/{id}", { hasBody: true }, args),
-      // POST /inbox/{id}/ratify — rank: archon — POST /inbox/:id/ratify
+      // POST /inbox/{id}/ratify — rank: metic+archon — POST /inbox/:id/ratify
       postInboxIdRatify: (args) => request("POST", "/inbox/{id}/ratify", { hasBody: true }, args),
     },
     "instance": {
@@ -432,9 +450,9 @@ function createClient(opts = {}) {
       getMemoryBfgBuildersBuilderIdFiles: (args) => request("GET", "/memory/bfg/builders/{builderId}/files", { hasBody: false }, args),
       // POST /memory/builders/{builderId}/bfg-write — rank: bfg-principal — POST /memory/builders/:builderId/bfg-write
       postMemoryBuildersBuilderIdBfgWrite: (args) => request("POST", "/memory/builders/{builderId}/bfg-write", { hasBody: true }, args),
-      // GET /memory/builders/{builderId}/file — rank: archon — GET /memory/builders/:builderId/file
+      // GET /memory/builders/{builderId}/file — rank: metic+archon — GET /memory/builders/:builderId/file
       getMemoryBuildersBuilderIdFile: (args) => request("GET", "/memory/builders/{builderId}/file", { hasBody: false }, args),
-      // GET /memory/builders/{builderId}/files — rank: archon — GET /memory/builders/:builderId/files
+      // GET /memory/builders/{builderId}/files — rank: metic+archon — GET /memory/builders/:builderId/files
       getMemoryBuildersBuilderIdFiles: (args) => request("GET", "/memory/builders/{builderId}/files", { hasBody: false }, args),
       // DELETE /memory/file — rank: any-builder — DELETE /memory/file
       deleteMemoryFile: (args) => request("DELETE", "/memory/file", { hasBody: true }, args),
@@ -470,27 +488,27 @@ function createClient(opts = {}) {
       postMyProjectsJoin: (args) => request("POST", "/my-projects/join", { hasBody: true }, args),
     },
     "overrideRequests": {
-      // GET /override-requests — rank: archon — GET /override-requests
+      // GET /override-requests — rank: metic+archon — GET /override-requests
       getOverrideRequests: (args) => request("GET", "/override-requests", { hasBody: false }, args),
-      // POST /override-requests/{id}/decide — rank: archon — POST /override-requests/:id/decide
+      // POST /override-requests/{id}/decide — rank: metic+archon — POST /override-requests/:id/decide
       postOverrideRequestsIdDecide: (args) => request("POST", "/override-requests/{id}/decide", { hasBody: true }, args),
     },
     "projects": {
-      // GET /projects — rank: archon — GET /projects
+      // GET /projects — rank: metic+archon — GET /projects
       getProjects: (args) => request("GET", "/projects", { hasBody: false }, args),
-      // POST /projects — rank: archon — POST /projects
+      // POST /projects — rank: metic+archon — POST /projects
       postProjects: (args) => request("POST", "/projects", { hasBody: true }, args),
-      // PATCH /projects/{id}/featured — rank: archon — PATCH /projects/:id/featured
+      // PATCH /projects/{id}/featured — rank: metic+archon — PATCH /projects/:id/featured
       patchProjectsIdFeatured: (args) => request("PATCH", "/projects/{id}/featured", { hasBody: true }, args),
       // GET /projects/featured — rank: public — GET /projects/featured
       getProjectsFeatured: (args) => request("GET", "/projects/featured", { hasBody: false }, args),
-      // POST /projects/invite — rank: archon — POST /projects/invite
+      // POST /projects/invite — rank: metic+archon — POST /projects/invite
       postProjectsInvite: (args) => request("POST", "/projects/invite", { hasBody: true }, args),
     },
     "provisioning": {
-      // GET /provisioning/fleet — rank: archon — GET /provisioning/fleet
+      // GET /provisioning/fleet — rank: metic+archon — GET /provisioning/fleet
       getProvisioningFleet: (args) => request("GET", "/provisioning/fleet", { hasBody: false }, args),
-      // GET /provisioning/fleet/cost-ledger — rank: archon — GET /provisioning/fleet/cost-ledger
+      // GET /provisioning/fleet/cost-ledger — rank: metic+archon — GET /provisioning/fleet/cost-ledger
       getProvisioningFleetCostLedger: (args) => request("GET", "/provisioning/fleet/cost-ledger", { hasBody: false }, args),
       // GET /provisioning/github-app/callback — rank: public — GET /provisioning/github-app/callback
       getProvisioningGithubAppCallback: (args) => request("GET", "/provisioning/github-app/callback", { hasBody: false }, args),
@@ -504,7 +522,7 @@ function createClient(opts = {}) {
       postProvisioningInstances: (args) => request("POST", "/provisioning/instances", { hasBody: true }, args),
       // GET /provisioning/instances/{id} — rank: any-builder — GET /provisioning/instances/:id
       getProvisioningInstancesId: (args) => request("GET", "/provisioning/instances/{id}", { hasBody: false }, args),
-      // POST /provisioning/instances/{id}/force-teardown — rank: archon — POST /provisioning/instances/:id/force-teardown
+      // POST /provisioning/instances/{id}/force-teardown — rank: metic+archon — POST /provisioning/instances/:id/force-teardown
       postProvisioningInstancesIdForceTeardown: (args) => request("POST", "/provisioning/instances/{id}/force-teardown", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/github-app — rank: any-builder — POST /provisioning/instances/:id/github-app
       postProvisioningInstancesIdGithubApp: (args) => request("POST", "/provisioning/instances/{id}/github-app", { hasBody: true }, args),
@@ -554,7 +572,7 @@ function createClient(opts = {}) {
       getPublicVersions: (args) => request("GET", "/public/versions", { hasBody: false }, args),
     },
     "scouting": {
-      // GET /scouting — rank: archon — GET /scouting
+      // GET /scouting — rank: metic+archon — GET /scouting
       getScouting: (args) => request("GET", "/scouting", { hasBody: false }, args),
     },
     "search": {
@@ -566,24 +584,28 @@ function createClient(opts = {}) {
     "security": {
       // GET /security/adr — rank: metic+archon — GET /security/adr
       getSecurityAdr: (args) => request("GET", "/security/adr", { hasBody: false }, args),
-      // GET /security/docs — rank: archon — GET /security/docs
+      // GET /security/docs — rank: metic+archon — GET /security/docs
       getSecurityDocs: (args) => request("GET", "/security/docs", { hasBody: false }, args),
-      // POST /security/docs — rank: archon — POST /security/docs
+      // POST /security/docs — rank: metic+archon — POST /security/docs
       postSecurityDocs: (args) => request("POST", "/security/docs", { hasBody: true }, args),
-      // GET /security/docs/{slug} — rank: archon — GET /security/docs/:slug
+      // GET /security/docs/{slug} — rank: metic+archon — GET /security/docs/:slug
       getSecurityDocsSlug: (args) => request("GET", "/security/docs/{slug}", { hasBody: false }, args),
-      // GET /security/reports — rank: archon — GET /security/reports
+      // GET /security/reports — rank: metic+archon — GET /security/reports
       getSecurityReports: (args) => request("GET", "/security/reports", { hasBody: false }, args),
       // POST /security/reports — rank: metic+archon — POST /security/reports
       postSecurityReports: (args) => request("POST", "/security/reports", { hasBody: true }, args),
-      // POST /security/reports/{id}/confirm — rank: archon — POST /security/reports/:id/confirm
+      // POST /security/reports/{id}/confirm — rank: metic+archon — POST /security/reports/:id/confirm
       postSecurityReportsIdConfirm: (args) => request("POST", "/security/reports/{id}/confirm", { hasBody: true }, args),
-      // POST /security/reports/{id}/dispute — rank: archon — POST /security/reports/:id/dispute
+      // POST /security/reports/{id}/dispute — rank: metic+archon — POST /security/reports/:id/dispute
       postSecurityReportsIdDispute: (args) => request("POST", "/security/reports/{id}/dispute", { hasBody: true }, args),
-      // POST /security/reports/{id}/fix — rank: archon — POST /security/reports/:id/fix
+      // POST /security/reports/{id}/fix — rank: metic+archon — POST /security/reports/:id/fix
       postSecurityReportsIdFix: (args) => request("POST", "/security/reports/{id}/fix", { hasBody: true }, args),
-      // POST /security/reports/{id}/link-fix — rank: archon — POST /security/reports/:id/link-fix
+      // POST /security/reports/{id}/link-fix — rank: metic+archon — POST /security/reports/:id/link-fix
       postSecurityReportsIdLinkFix: (args) => request("POST", "/security/reports/{id}/link-fix", { hasBody: true }, args),
+      // GET /security/scans — rank: any-builder — GET /security/scans
+      getSecurityScans: (args) => request("GET", "/security/scans", { hasBody: false }, args),
+      // POST /security/scans — rank: metic+archon — POST /security/scans
+      postSecurityScans: (args) => request("POST", "/security/scans", { hasBody: true }, args),
     },
     "session": {
       // POST /session/optimize — rank: any-builder — POST /session/optimize
@@ -596,7 +618,7 @@ function createClient(opts = {}) {
       getSessionsId: (args) => request("GET", "/sessions/{id}", { hasBody: false }, args),
       // GET /sessions/mine — rank: any-builder — GET /sessions/mine
       getSessionsMine: (args) => request("GET", "/sessions/mine", { hasBody: false }, args),
-      // GET /sessions/search — rank: archon — GET /sessions/search
+      // GET /sessions/search — rank: metic+archon — GET /sessions/search
       getSessionsSearch: (args) => request("GET", "/sessions/search", { hasBody: false }, args),
     },
     "sso": {
@@ -664,17 +686,17 @@ function createClient(opts = {}) {
       getTasksClaimable: (args) => request("GET", "/tasks/claimable", { hasBody: false }, args),
       // GET /tasks/newcomer-floor — rank: any-builder — GET /tasks/newcomer-floor
       getTasksNewcomerFloor: (args) => request("GET", "/tasks/newcomer-floor", { hasBody: false }, args),
-      // POST /tasks/newcomer-restock — rank: archon — POST /tasks/newcomer-restock
+      // POST /tasks/newcomer-restock — rank: metic+archon — POST /tasks/newcomer-restock
       postTasksNewcomerRestock: (args) => request("POST", "/tasks/newcomer-restock", { hasBody: true }, args),
       // GET /tasks/peer-votes/feed — rank: any-builder — GET /tasks/peer-votes/feed
       getTasksPeerVotesFeed: (args) => request("GET", "/tasks/peer-votes/feed", { hasBody: false }, args),
-      // POST /tasks/peer-votes/tally — rank: archon — POST /tasks/peer-votes/tally
+      // POST /tasks/peer-votes/tally — rank: metic+archon — POST /tasks/peer-votes/tally
       postTasksPeerVotesTally: (args) => request("POST", "/tasks/peer-votes/tally", { hasBody: true }, args),
     },
     "versions": {
       // GET /versions — rank: public — GET /versions
       getVersions: (args) => request("GET", "/versions", { hasBody: false }, args),
-      // POST /versions — rank: archon — POST /versions
+      // POST /versions — rank: metic+archon — POST /versions
       postVersions: (args) => request("POST", "/versions", { hasBody: true }, args),
       // GET /versions/{id}/done-when — rank: public — GET /versions/:id/done-when
       getVersionsIdDoneWhen: (args) => request("GET", "/versions/{id}/done-when", { hasBody: false }, args),

package/clients/bongos-client/index.d.ts

@@ -7,6 +7,8 @@ export declare const DEFAULT_BASE_URL: string;
 export interface ApiErrorObject { code: string; message: string; details?: unknown }
 export interface DeleteBoxSshKeyIdResponse { ok: boolean; deleted: unknown }
 export interface DeleteDependenciesResponse { ok: boolean }
+export interface DeleteGovernanceAssignmentsBuilderIdRoleKeyResponse { ok: boolean; builder_id: unknown; role_key: unknown; removed: unknown }
+export interface DeleteGovernanceRolesRoleKeyPermissionsPermissionKeyResponse { ok: boolean; role_key: unknown; permission_key: unknown; removed: unknown }
 export interface DeleteMemoryFileResponse { deleted: boolean; builder_id: unknown; path: unknown }
 export interface DeleteTasksIdCriteriaCriterionIdResponse { ok: boolean; removed: unknown }
 export interface DeleteTasksIdDependenciesDepIdResponse { ok: boolean; removed: unknown }
@@ -39,6 +41,9 @@ export interface GetGoalsIdRequestsResponse { requests: unknown }
 export interface GetGoalsIdResponse { goal: unknown; members: unknown; criteria: unknown; dependencies: unknown }
 export interface GetGoalsIdSuggestCriteriaResponse { goal_id: unknown; suggestions: unknown }
 export interface GetGoalsResponse { goals: unknown }
+export interface GetGovernanceAssignmentsResponse { assignments: unknown }
+export interface GetGovernancePermissionsResponse { permissions: unknown; principals: unknown }
+export interface GetGovernanceRolesResponse { roles: unknown }
 export interface GetGradesByBuilderResponse { window_days: unknown; builders: unknown }
 export interface GetHealthzResponse { ok: boolean; auth_configured: unknown }
 export interface GetInboxIdResponse { idea: unknown }
@@ -87,6 +92,7 @@ export interface GetScoutingResponse { builders: unknown }
 export interface GetSecurityDocsResponse { docs: unknown }
 export interface GetSecurityDocsSlugResponse { doc: unknown }
 export interface GetSecurityReportsResponse { reports: unknown; bounty_table: unknown; statuses: unknown }
+export interface GetSecurityScansResponse { scans: unknown }
 export interface GetSessionsIdResponse { session: unknown }
 export interface GetSessionsMineResponse { sessions: unknown; count: unknown }
 export interface GetSessionsSearchResponse { sessions: unknown; count: unknown; total: unknown; totals: unknown; limit: unknown; offset: unknown }
@@ -147,7 +153,7 @@ export interface PostAuthRevokeRequest { session_id?: StringifiableId }
 export interface PostAuthRevokeResponse { ok: boolean; revoked: unknown }
 export interface PostBackupTriggerResponse { ok: boolean; message: unknown; started_at: unknown }
 export interface PostBlockersIdLinkRequest { task_id: StringifiableId }
-export interface PostBlockersIdLinkResponse { ok: boolean }
+export interface PostBlockersIdLinkResponse { ok: boolean; blocked: unknown }
 export interface PostBlockersIdResolveRequest { resolution_note?: string }
 export interface PostBlockersRequest { title: string; body_md?: string; source?: string; source_ref?: string }
 export interface PostBlockersResponse { skipped?: boolean; reason?: unknown; blocker?: unknown }
@@ -210,6 +216,9 @@ export interface PostGoalsReorderRequest { version_id: string; ordered_ids: numb
 export interface PostGoalsReorderResponse { ok: boolean; goals: unknown }
 export interface PostGoalsRequest { version_id: string; title: string; description?: string; scope_modules?: string[]; succeeds_goal_id?: number }
 export interface PostGoalsResponse { ok: boolean; goal: unknown; succeeds_goal_id: unknown }
+export interface PostGovernanceAssignmentsRequest { builder_id: number; role_key: string }
+export interface PostGovernanceRolesRequest { role_key: string; label: string; description?: string }
+export interface PostGovernanceRolesResponse { role: unknown }
 export interface PostInboxIdRatifyRequest { notes_md?: string }
 export interface PostInboxRequest { title: string; body_md?: string; kind?: string; suggested_version?: string; suggested_priority?: number }
 export interface PostInboxResponse { idea: unknown; open_count: unknown; kind_auto: unknown }
@@ -241,7 +250,7 @@ export interface PostProvisioningInstancesIdForceTeardownResponse { ok: boolean;
 export interface PostProvisioningInstancesIdGithubAppRequest { account?: string }
 export interface PostProvisioningInstancesIdGithubAppResponse { state: unknown; account: unknown; post_url: unknown; personal_url: unknown; org_url: unknown; org_login: unknown; manifest: unknown; redirect_url: unknown; expires_at: unknown }
 export interface PostProvisioningInstancesIdTeardownResponse { ok: boolean; queued: unknown; action: unknown; status: unknown; message: unknown }
-export interface PostProvisioningInstancesRequest { slug: string; target_ref?: string; hosting_shape?: string; domain?: string; tier?: string }
+export interface PostProvisioningInstancesRequest { slug: string; target_ref?: string; hosting_shape?: string; domain?: string; tier?: string; onboard_mode?: string }
 export interface PostSearchMarkRequest { chunk_id?: StringifiableId; useful?: unknown }
 export interface PostSearchRequest { expand?: unknown; q?: string; source_kind?: string; limit?: unknown }
 export interface PostSearchResponse { expand?: unknown; chunk?: unknown; query?: unknown; count?: unknown; total_full_tokens?: unknown; results?: unknown }
@@ -255,6 +264,8 @@ export interface PostSecurityReportsIdLinkFixRequest { task_id: StringifiableId
 export interface PostSecurityReportsIdLinkFixResponse { report: unknown }
 export interface PostSecurityReportsRequest { target: string; severity: string; title: string; description?: string; repro_steps_md?: string }
 export interface PostSecurityReportsResponse { ok: boolean; report: unknown; bounty_table: unknown }
+export interface PostSecurityScansRequest { target_url: string; artifact_kind: string; resolved_sha?: string; content_hash?: string; file_count?: number; total_bytes?: number; tier: string; verdict?: string; completion: string; abort_code?: string; findings_critical?: number; findings_high?: number; findings_medium?: number; findings_low?: number; findings_summary?: unknown[]; action_taken?: string; engine_version: string }
+export interface PostSecurityScansResponse { ok: boolean; scan: unknown }
 export interface PostSessionOptimizeRequest { mode?: string; time_budget_min?: unknown; max_parallel?: unknown }
 export interface PostSessionsRequest { session_id: string; task_ids?: number[]; total_tokens?: number; duration_seconds?: number; started_at?: string; ended_at?: string; detail?: unknown[]; metrics?: Record<string, unknown>; model_usage?: Record<string, unknown> }
 export interface PostSessionsResponse { skipped?: boolean; reason?: unknown; session?: unknown; token_reward?: unknown }
@@ -287,8 +298,9 @@ export interface PostTasksNewcomerRestockResponse { ok: boolean; stamped: unknow
 export interface PostTasksRequest { version_id: string; title: string; description?: string; status?: string; touches?: string[]; est_minutes?: number; est_cost_usd?: number; manual_degree?: number; priority?: number; automation_tag?: string; credits_reward?: number; source?: string; source_ref?: string; value_summary?: string; kind?: string; discipline?: string; parallel_safe?: unknown; newcomer_friendly?: boolean; security_sensitive?: boolean; requires_rank?: string; auto_detect_touches?: boolean; criterion_ids?: unknown[]; module_key?: string; goal_id?: number }
 export interface PostVersionsIdDoneWhenRequest { criterion_id: string; criterion_md: string; goal_id?: number; sort_order?: number }
 export interface PostVersionsIdDoneWhenResponse { ok: boolean; criterion: unknown }
-export interface PostVersionsRequest { id: string; name: string; status?: string; done_when?: string; scope_doc_path?: string; criteria?: unknown[] }
+export interface PostVersionsRequest { id: string; name: string; status?: string; track?: string; done_when?: string; scope_doc_path?: string; criteria?: unknown[] }
 export interface PostVersionsResponse { version: unknown; criteria: unknown }
+export interface PutGovernanceRolesRoleKeyPermissionsPermissionKeyResponse { ok: boolean; role_key: unknown; permission_key: unknown; granted: unknown }
 export interface PutTasksIdDependenciesRequest { depends_on_task_ids: unknown[] }
 export interface PutTasksIdDependenciesResponse { ok: boolean; written: unknown; dependencies: unknown }
 export type StringifiableId = number | string;
@@ -324,7 +336,7 @@ export interface BongosClient {
     getAnalyticsBuilderId(args?: RequestArgs): Promise<ApiResponse>;
   };
   "auditLog": {
-    /** GET /audit-log — rank: archon */
+    /** GET /audit-log — rank: metic+archon */
     getAuditLog(args?: RequestArgs): Promise<GetAuditLogResponse>;
   };
   "auth": {
@@ -366,7 +378,7 @@ export interface BongosClient {
     getAuthWebStart(args?: RequestArgs): Promise<ApiResponse>;
   };
   "autonomy": {
-    /** GET /autonomy/precheck — rank: archon */
+    /** GET /autonomy/precheck — rank: metic+archon */
     getAutonomyPrecheck(args?: RequestArgs): Promise<ApiResponse>;
   };
   "backup": {
@@ -426,13 +438,13 @@ export interface BongosClient {
     postBoxVersion(args: RequestArgs & { body: PostBoxVersionRequest }): Promise<PostBoxVersionResponse>;
   };
   "boxes": {
-    /** GET /boxes — rank: archon */
+    /** GET /boxes — rank: metic+archon */
     getBoxes(args?: RequestArgs): Promise<GetBoxesResponse>;
-    /** PATCH /boxes/{builderId}/block — rank: archon */
+    /** PATCH /boxes/{builderId}/block — rank: metic+archon */
     patchBoxesBuilderIdBlock(args: RequestArgs & { body: PatchBoxesBuilderIdBlockRequest }): Promise<PatchBoxesBuilderIdBlockResponse>;
-    /** POST /boxes/{builderId}/close — rank: archon */
+    /** POST /boxes/{builderId}/close — rank: metic+archon */
     postBoxesBuilderIdClose(args?: RequestArgs): Promise<PostBoxesBuilderIdCloseResponse>;
-    /** GET /boxes/cost-ledger — rank: archon */
+    /** GET /boxes/cost-ledger — rank: metic+archon */
     getBoxesCostLedger(args?: RequestArgs): Promise<ApiResponse>;
   };
   "bugAttachments": {
@@ -440,9 +452,9 @@ export interface BongosClient {
     getBugAttachmentsName(args?: RequestArgs): Promise<ApiResponse>;
   };
   "builders": {
-    /** GET /builders/{id}/active-claims — rank: archon */
+    /** GET /builders/{id}/active-claims — rank: metic+archon */
     getBuildersIdActiveClaims(args?: RequestArgs): Promise<GetBuildersIdActiveClaimsResponse>;
-    /** PATCH /builders/{id}/budget — rank: archon */
+    /** PATCH /builders/{id}/budget — rank: metic+archon */
     patchBuildersIdBudget(args?: RequestArgs & { body?: PatchBuildersIdBudgetRequest }): Promise<PatchBuildersIdBudgetResponse>;
     /** GET /builders/{id}/onboarding — rank: public */
     getBuildersIdOnboarding(args?: RequestArgs): Promise<GetBuildersIdOnboardingResponse>;
@@ -456,13 +468,13 @@ export interface BongosClient {
     getBuildersDirectory(args?: RequestArgs): Promise<GetBuildersDirectoryResponse>;
     /** GET /builders/me/pending-rank-change — rank: any-builder */
     getBuildersMePendingRankChange(args?: RequestArgs): Promise<GetBuildersMePendingRankChangeResponse>;
-    /** GET /builders/roster — rank: archon */
+    /** GET /builders/roster — rank: metic+archon */
     getBuildersRoster(args?: RequestArgs): Promise<GetBuildersRosterResponse>;
   };
   "claims": {
     /** POST /claims — rank: any-builder */
     postClaims(args: RequestArgs & { body: PostClaimsRequest }): Promise<PostClaimsResponse>;
-    /** POST /claims/{id}/release-on-behalf — rank: archon */
+    /** POST /claims/{id}/release-on-behalf — rank: metic+archon */
     postClaimsIdReleaseOnBehalf(args: RequestArgs & { body: PostClaimsIdReleaseOnBehalfRequest }): Promise<ApiResponse>;
     /** POST /claims/{id}/resolve — rank: any-builder */
     postClaimsIdResolve(args: RequestArgs & { body: PostClaimsIdResolveRequest }): Promise<ApiResponse>;
@@ -484,21 +496,21 @@ export interface BongosClient {
     postDependencies(args?: RequestArgs): Promise<PostDependenciesResponse>;
   };
   "discord": {
-    /** GET /discord/channels/plan — rank: archon */
+    /** GET /discord/channels/plan — rank: metic+archon */
     getDiscordChannelsPlan(args?: RequestArgs): Promise<GetDiscordChannelsPlanResponse>;
-    /** POST /discord/channels/reconcile — rank: archon */
+    /** POST /discord/channels/reconcile — rank: metic+archon */
     postDiscordChannelsReconcile(args?: RequestArgs): Promise<PostDiscordChannelsReconcileResponse>;
   };
   "doneWhen": {
     /** POST /done-when/{criterionId}/satisfy — rank: metic+archon */
     postDoneWhenCriterionIdSatisfy(args?: RequestArgs & { body?: PostDoneWhenCriterionIdSatisfyRequest }): Promise<PostDoneWhenCriterionIdSatisfyResponse>;
-    /** POST /done-when/{criterionId}/unsatisfy — rank: archon */
+    /** POST /done-when/{criterionId}/unsatisfy — rank: metic+archon */
     postDoneWhenCriterionIdUnsatisfy(args?: RequestArgs): Promise<PostDoneWhenCriterionIdUnsatisfyResponse>;
     /** GET /done-when/pending-review — rank: metic+archon */
     getDoneWhenPendingReview(args?: RequestArgs): Promise<GetDoneWhenPendingReviewResponse>;
   };
   "gateApprovals": {
-    /** GET /gate-approvals — rank: archon */
+    /** GET /gate-approvals — rank: metic+archon */
     getGateApprovals(args?: RequestArgs): Promise<ApiResponse>;
     /** POST /gate-approvals/{pr}/approve — rank: archon */
     postGateApprovalsPrApprove(args?: RequestArgs): Promise<PostGateApprovalsPrApproveResponse>;
@@ -556,11 +568,29 @@ export interface BongosClient {
     patchGoalsIdVisibility(args: RequestArgs & { body: PatchGoalsIdVisibilityRequest }): Promise<PatchGoalsIdVisibilityResponse>;
     /** GET /goals/inbox — rank: any-builder */
     getGoalsInbox(args?: RequestArgs): Promise<ApiResponse>;
-    /** POST /goals/reorder — rank: archon */
+    /** POST /goals/reorder — rank: metic+archon */
     postGoalsReorder(args: RequestArgs & { body: PostGoalsReorderRequest }): Promise<PostGoalsReorderResponse>;
   };
+  "governance": {
+    /** GET /governance/assignments — rank: archon */
+    getGovernanceAssignments(args?: RequestArgs): Promise<GetGovernanceAssignmentsResponse>;
+    /** POST /governance/assignments — rank: archon */
+    postGovernanceAssignments(args: RequestArgs & { body: PostGovernanceAssignmentsRequest }): Promise<ApiResponse>;
+    /** DELETE /governance/assignments/{builderId}/{roleKey} — rank: archon */
+    deleteGovernanceAssignmentsBuilderIdRoleKey(args?: RequestArgs): Promise<DeleteGovernanceAssignmentsBuilderIdRoleKeyResponse>;
+    /** GET /governance/permissions — rank: archon */
+    getGovernancePermissions(args?: RequestArgs): Promise<GetGovernancePermissionsResponse>;
+    /** GET /governance/roles — rank: archon */
+    getGovernanceRoles(args?: RequestArgs): Promise<GetGovernanceRolesResponse>;
+    /** POST /governance/roles — rank: archon */
+    postGovernanceRoles(args: RequestArgs & { body: PostGovernanceRolesRequest }): Promise<PostGovernanceRolesResponse>;
+    /** DELETE /governance/roles/{roleKey}/permissions/{permissionKey} — rank: archon */
+    deleteGovernanceRolesRoleKeyPermissionsPermissionKey(args?: RequestArgs): Promise<DeleteGovernanceRolesRoleKeyPermissionsPermissionKeyResponse>;
+    /** PUT /governance/roles/{roleKey}/permissions/{permissionKey} — rank: archon */
+    putGovernanceRolesRoleKeyPermissionsPermissionKey(args?: RequestArgs): Promise<PutGovernanceRolesRoleKeyPermissionsPermissionKeyResponse>;
+  };
   "grades": {
-    /** GET /grades/by-builder — rank: archon */
+    /** GET /grades/by-builder — rank: metic+archon */
     getGradesByBuilder(args?: RequestArgs): Promise<GetGradesByBuilderResponse>;
   };
   "healthz": {
@@ -576,7 +606,7 @@ export interface BongosClient {
     getInboxId(args?: RequestArgs): Promise<GetInboxIdResponse>;
     /** PATCH /inbox/{id} — rank: metic+archon */
     patchInboxId(args?: RequestArgs & { body?: PatchInboxIdRequest }): Promise<PatchInboxIdResponse>;
-    /** POST /inbox/{id}/ratify — rank: archon */
+    /** POST /inbox/{id}/ratify — rank: metic+archon */
     postInboxIdRatify(args?: RequestArgs & { body?: PostInboxIdRatifyRequest }): Promise<ApiResponse>;
   };
   "instance": {
@@ -654,9 +684,9 @@ export interface BongosClient {
     getMemoryBfgBuildersBuilderIdFiles(args?: RequestArgs): Promise<GetMemoryBfgBuildersBuilderIdFilesResponse>;
     /** POST /memory/builders/{builderId}/bfg-write — rank: bfg-principal */
     postMemoryBuildersBuilderIdBfgWrite(args?: RequestArgs & { body?: PostMemoryBuildersBuilderIdBfgWriteRequest }): Promise<PostMemoryBuildersBuilderIdBfgWriteResponse>;
-    /** GET /memory/builders/{builderId}/file — rank: archon */
+    /** GET /memory/builders/{builderId}/file — rank: metic+archon */
     getMemoryBuildersBuilderIdFile(args?: RequestArgs): Promise<GetMemoryBuildersBuilderIdFileResponse>;
-    /** GET /memory/builders/{builderId}/files — rank: archon */
+    /** GET /memory/builders/{builderId}/files — rank: metic+archon */
     getMemoryBuildersBuilderIdFiles(args?: RequestArgs): Promise<GetMemoryBuildersBuilderIdFilesResponse>;
     /** DELETE /memory/file — rank: any-builder */
     deleteMemoryFile(args?: RequestArgs): Promise<DeleteMemoryFileResponse>;
@@ -692,27 +722,27 @@ export interface BongosClient {
     postMyProjectsJoin(args: RequestArgs & { body: PostMyProjectsJoinRequest }): Promise<PostMyProjectsJoinResponse>;
   };
   "overrideRequests": {
-    /** GET /override-requests — rank: archon */
+    /** GET /override-requests — rank: metic+archon */
     getOverrideRequests(args?: RequestArgs): Promise<GetOverrideRequestsResponse>;
-    /** POST /override-requests/{id}/decide — rank: archon */
+    /** POST /override-requests/{id}/decide — rank: metic+archon */
     postOverrideRequestsIdDecide(args: RequestArgs & { body: PostOverrideRequestsIdDecideRequest }): Promise<ApiResponse>;
   };
   "projects": {
-    /** GET /projects — rank: archon */
+    /** GET /projects — rank: metic+archon */
     getProjects(args?: RequestArgs): Promise<GetProjectsResponse>;
-    /** POST /projects — rank: archon */
+    /** POST /projects — rank: metic+archon */
     postProjects(args: RequestArgs & { body: PostProjectsRequest }): Promise<PostProjectsResponse>;
-    /** PATCH /projects/{id}/featured — rank: archon */
+    /** PATCH /projects/{id}/featured — rank: metic+archon */
     patchProjectsIdFeatured(args: RequestArgs & { body: PatchProjectsIdFeaturedRequest }): Promise<PatchProjectsIdFeaturedResponse>;
     /** GET /projects/featured — rank: public */
     getProjectsFeatured(args?: RequestArgs): Promise<GetProjectsFeaturedResponse>;
-    /** POST /projects/invite — rank: archon */
+    /** POST /projects/invite — rank: metic+archon */
     postProjectsInvite(args: RequestArgs & { body: PostProjectsInviteRequest }): Promise<ApiResponse>;
   };
   "provisioning": {
-    /** GET /provisioning/fleet — rank: archon */
+    /** GET /provisioning/fleet — rank: metic+archon */
     getProvisioningFleet(args?: RequestArgs): Promise<GetProvisioningFleetResponse>;
-    /** GET /provisioning/fleet/cost-ledger — rank: archon */
+    /** GET /provisioning/fleet/cost-ledger — rank: metic+archon */
     getProvisioningFleetCostLedger(args?: RequestArgs): Promise<ApiResponse>;
     /** GET /provisioning/github-app/callback — rank: public */
     getProvisioningGithubAppCallback(args?: RequestArgs): Promise<ApiResponse>;
@@ -726,7 +756,7 @@ export interface BongosClient {
     postProvisioningInstances(args: RequestArgs & { body: PostProvisioningInstancesRequest }): Promise<ApiResponse>;
     /** GET /provisioning/instances/{id} — rank: any-builder */
     getProvisioningInstancesId(args?: RequestArgs): Promise<GetProvisioningInstancesIdResponse>;
-    /** POST /provisioning/instances/{id}/force-teardown — rank: archon */
+    /** POST /provisioning/instances/{id}/force-teardown — rank: metic+archon */
     postProvisioningInstancesIdForceTeardown(args?: RequestArgs): Promise<PostProvisioningInstancesIdForceTeardownResponse>;
     /** POST /provisioning/instances/{id}/github-app — rank: any-builder */
     postProvisioningInstancesIdGithubApp(args?: RequestArgs & { body?: PostProvisioningInstancesIdGithubAppRequest }): Promise<PostProvisioningInstancesIdGithubAppResponse>;
@@ -776,7 +806,7 @@ export interface BongosClient {
     getPublicVersions(args?: RequestArgs): Promise<GetPublicVersionsResponse>;
   };
   "scouting": {
-    /** GET /scouting — rank: archon */
+    /** GET /scouting — rank: metic+archon */
     getScouting(args?: RequestArgs): Promise<GetScoutingResponse>;
   };
   "search": {
@@ -788,24 +818,28 @@ export interface BongosClient {
   "security": {
     /** GET /security/adr — rank: metic+archon */
     getSecurityAdr(args?: RequestArgs): Promise<ApiResponse>;
-    /** GET /security/docs — rank: archon */
+    /** GET /security/docs — rank: metic+archon */
     getSecurityDocs(args?: RequestArgs): Promise<GetSecurityDocsResponse>;
-    /** POST /security/docs — rank: archon */
+    /** POST /security/docs — rank: metic+archon */
     postSecurityDocs(args: RequestArgs & { body: PostSecurityDocsRequest }): Promise<PostSecurityDocsResponse>;
-    /** GET /security/docs/{slug} — rank: archon */
+    /** GET /security/docs/{slug} — rank: metic+archon */
     getSecurityDocsSlug(args?: RequestArgs): Promise<GetSecurityDocsSlugResponse>;
-    /** GET /security/reports — rank: archon */
+    /** GET /security/reports — rank: metic+archon */
     getSecurityReports(args?: RequestArgs): Promise<GetSecurityReportsResponse>;
     /** POST /security/reports — rank: metic+archon */
     postSecurityReports(args: RequestArgs & { body: PostSecurityReportsRequest }): Promise<PostSecurityReportsResponse>;
-    /** POST /security/reports/{id}/confirm — rank: archon */
+    /** POST /security/reports/{id}/confirm — rank: metic+archon */
     postSecurityReportsIdConfirm(args?: RequestArgs & { body?: PostSecurityReportsIdConfirmRequest }): Promise<PostSecurityReportsIdConfirmResponse>;
-    /** POST /security/reports/{id}/dispute — rank: archon */
+    /** POST /security/reports/{id}/dispute — rank: metic+archon */
     postSecurityReportsIdDispute(args?: RequestArgs): Promise<PostSecurityReportsIdDisputeResponse>;
-    /** POST /security/reports/{id}/fix — rank: archon */
+    /** POST /security/reports/{id}/fix — rank: metic+archon */
     postSecurityReportsIdFix(args?: RequestArgs): Promise<PostSecurityReportsIdFixResponse>;
-    /** POST /security/reports/{id}/link-fix — rank: archon */
+    /** POST /security/reports/{id}/link-fix — rank: metic+archon */
     postSecurityReportsIdLinkFix(args: RequestArgs & { body: PostSecurityReportsIdLinkFixRequest }): Promise<PostSecurityReportsIdLinkFixResponse>;
+    /** GET /security/scans — rank: any-builder */
+    getSecurityScans(args?: RequestArgs): Promise<GetSecurityScansResponse>;
+    /** POST /security/scans — rank: metic+archon */
+    postSecurityScans(args: RequestArgs & { body: PostSecurityScansRequest }): Promise<PostSecurityScansResponse>;
   };
   "session": {
     /** POST /session/optimize — rank: any-builder */
@@ -818,7 +852,7 @@ export interface BongosClient {
     getSessionsId(args?: RequestArgs): Promise<GetSessionsIdResponse>;
     /** GET /sessions/mine — rank: any-builder */
     getSessionsMine(args?: RequestArgs): Promise<GetSessionsMineResponse>;
-    /** GET /sessions/search — rank: archon */
+    /** GET /sessions/search — rank: metic+archon */
     getSessionsSearch(args?: RequestArgs): Promise<GetSessionsSearchResponse>;
   };
   "sso": {
@@ -886,17 +920,17 @@ export interface BongosClient {
     getTasksClaimable(args?: RequestArgs): Promise<GetTasksClaimableResponse>;
     /** GET /tasks/newcomer-floor — rank: any-builder */
     getTasksNewcomerFloor(args?: RequestArgs): Promise<GetTasksNewcomerFloorResponse>;
-    /** POST /tasks/newcomer-restock — rank: archon */
+    /** POST /tasks/newcomer-restock — rank: metic+archon */
     postTasksNewcomerRestock(args?: RequestArgs): Promise<PostTasksNewcomerRestockResponse>;
     /** GET /tasks/peer-votes/feed — rank: any-builder */
     getTasksPeerVotesFeed(args?: RequestArgs): Promise<GetTasksPeerVotesFeedResponse>;
-    /** POST /tasks/peer-votes/tally — rank: archon */
+    /** POST /tasks/peer-votes/tally — rank: metic+archon */
     postTasksPeerVotesTally(args?: RequestArgs): Promise<ApiResponse>;
   };
   "versions": {
     /** GET /versions — rank: public */
     getVersions(args?: RequestArgs): Promise<GetVersionsResponse>;
-    /** POST /versions — rank: archon */
+    /** POST /versions — rank: metic+archon */
     postVersions(args: RequestArgs & { body: PostVersionsRequest }): Promise<PostVersionsResponse>;
     /** GET /versions/{id}/done-when — rank: public */
     getVersionsIdDoneWhen(args?: RequestArgs): Promise<GetVersionsIdDoneWhenResponse>;