@bongos/core 1.19.1073 → 1.19.1075

package/.claude/skills/feedback/SKILL.md

@@ -26,8 +26,8 @@ You are pulling in the **latest Bongos feedback bundle** — a self-contained ca
 
 - **Read-only + local.** The helper only reads files under `~/CloudBongos/feedback/`; it needs no Bongos session and no network.
 - **"Latest" = most recently produced.** The Bongos app updates a `latest` pointer every time a capture is stopped, so this always loads the newest walkthrough. To act on an older one, point the user at the specific dir under `~/CloudBongos/feedback/`.
-- **The frames are file paths, never base64** — that's the whole point of the bundle format (it keeps the text prompt tiny and lets your Read tool load the images). See `bongos-app/README.md` for the full bundle contract.
+- **The frames are file paths, never base64** — that's the whole point of the bundle format (it keeps the text prompt tiny and lets your Read tool load the images). See [ADR 0087](../../../docs/adr/0087-bongos-app-architecture-and-handoff-contract.md) for the full bundle contract.
 
 ## Files this skill touches
 
-- Runs: `node scripts/gds/feedback-latest.js` (resolves via `bongos-app/src/handoff.js`).
+- Runs: `node scripts/gds/feedback-latest.js` (resolves the ADR 0087 `latest` pointer itself — the app source is off-repo, ADR 0098).

package/bin/bongos.js

@@ -12,9 +12,7 @@
 // scripts/gds/cli-lib.js.
 //
 // Phases 2-4 extend this same CLI with a one-line installer + standalone binary
-// and instance-agnostic `login`/`init`/`upgrade`. (They also added `shell`/`code`,
-// VS Code Remote-SSH into a per-builder dev box; the dev box was retired and
-// those verbs removed with it — task 1003889.)
+// and instance-agnostic `login`/`init`/`upgrade`.
 
 'use strict';
 

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 460 operations across 68 resource groups
+- 433 operations across 67 resource groups
 
 ## Use it from your project
 

package/clients/bongos-client/bongos-client.global.js

@@ -137,14 +137,6 @@ function createClient(opts = {}) {
       getAuditLog: (args) => request("GET", "/audit-log", { hasBody: false }, args),
     },
     "auth": {
-      // POST /auth/app-pair/approve — rank: any-builder — POST /auth/app-pair/approve
-      postAuthAppPairApprove: (args) => request("POST", "/auth/app-pair/approve", { hasBody: true }, args),
-      // GET /auth/app-pair/info — rank: any-builder — GET /auth/app-pair/info
-      getAuthAppPairInfo: (args) => request("GET", "/auth/app-pair/info", { hasBody: false }, args),
-      // POST /auth/app-pair/poll — rank: public — POST /auth/app-pair/poll
-      postAuthAppPairPoll: (args) => request("POST", "/auth/app-pair/poll", { hasBody: true }, args),
-      // POST /auth/app-pair/start — rank: public — POST /auth/app-pair/start
-      postAuthAppPairStart: (args) => request("POST", "/auth/app-pair/start", { hasBody: true }, args),
       // POST /auth/backchannel-logout — rank: public — POST /auth/backchannel-logout
       postAuthBackchannelLogout: (args) => request("POST", "/auth/backchannel-logout", { hasBody: true }, args),
       // POST /auth/cli-token/issue — rank: any-builder — POST /auth/cli-token/issue
@@ -212,58 +204,6 @@ function createClient(opts = {}) {
       // POST /blockers/{id}/resolve — rank: metic+archon — POST /blockers/:id/resolve
       postBlockersIdResolve: (args) => request("POST", "/blockers/{id}/resolve", { hasBody: true }, args),
     },
-    "box": {
-      // GET /box/authorized-keys — rank: any-builder — GET /box/authorized-keys
-      getBoxAuthorizedKeys: (args) => request("GET", "/box/authorized-keys", { hasBody: false }, args),
-      // POST /box/close — rank: any-builder — POST /box/close
-      postBoxClose: (args) => request("POST", "/box/close", { hasBody: true }, args),
-      // GET /box/connect — rank: public — GET /box/connect
-      getBoxConnect: (args) => request("GET", "/box/connect", { hasBody: false }, args),
-      // GET /box/connect.ps1 — rank: public — GET /box/connect.ps1
-      getBoxConnectPs1: (args) => request("GET", "/box/connect.ps1", { hasBody: false }, args),
-      // GET /box/connect.sh — rank: public — GET /box/connect.sh
-      getBoxConnectSh: (args) => request("GET", "/box/connect.sh", { hasBody: false }, args),
-      // POST /box/ensure — rank: any-builder — POST /box/ensure
-      postBoxEnsure: (args) => request("POST", "/box/ensure", { hasBody: true }, args),
-      // POST /box/heartbeat — rank: any-builder — POST /box/heartbeat
-      postBoxHeartbeat: (args) => request("POST", "/box/heartbeat", { hasBody: true }, args),
-      // POST /box/host-keys — rank: any-builder — POST /box/host-keys
-      postBoxHostKeys: (args) => request("POST", "/box/host-keys", { hasBody: true }, args),
-      // GET /box/managed-settings — rank: any-builder — GET /box/managed-settings
-      getBoxManagedSettings: (args) => request("GET", "/box/managed-settings", { hasBody: false }, args),
-      // GET /box/me — rank: any-builder — GET /box/me
-      getBoxMe: (args) => request("GET", "/box/me", { hasBody: false }, args),
-      // GET /box/scope — rank: any-builder — GET /box/scope
-      getBoxScope: (args) => request("GET", "/box/scope", { hasBody: false }, args),
-      // GET /box/source-access — rank: any-builder — GET /box/source-access
-      getBoxSourceAccess: (args) => request("GET", "/box/source-access", { hasBody: false }, args),
-      // GET /box/ssh-key — rank: any-builder — GET /box/ssh-key
-      getBoxSshKey: (args) => request("GET", "/box/ssh-key", { hasBody: false }, args),
-      // POST /box/ssh-key — rank: any-builder — POST /box/ssh-key
-      postBoxSshKey: (args) => request("POST", "/box/ssh-key", { hasBody: true }, args),
-      // DELETE /box/ssh-key/{id} — rank: any-builder — DELETE /box/ssh-key/:id
-      deleteBoxSshKeyId: (args) => request("DELETE", "/box/ssh-key/{id}", { hasBody: false }, args),
-      // GET /box/terminal — rank: any-builder — GET /box/terminal
-      getBoxTerminal: (args) => request("GET", "/box/terminal", { hasBody: false }, args),
-      // POST /box/terminal — rank: any-builder — POST /box/terminal
-      postBoxTerminal: (args) => request("POST", "/box/terminal", { hasBody: true }, args),
-      // POST /box/version — rank: any-builder — POST /box/version
-      postBoxVersion: (args) => request("POST", "/box/version", { hasBody: true }, args),
-      // GET /box/widen — rank: any-builder — GET /box/widen
-      getBoxWiden: (args) => request("GET", "/box/widen", { hasBody: false }, args),
-      // POST /box/widen — rank: any-builder — POST /box/widen
-      postBoxWiden: (args) => request("POST", "/box/widen", { hasBody: true }, args),
-    },
-    "boxes": {
-      // GET /boxes — rank: metic+archon — GET /boxes
-      getBoxes: (args) => request("GET", "/boxes", { hasBody: false }, args),
-      // PATCH /boxes/{builderId}/block — rank: metic+archon — PATCH /boxes/:builderId/block
-      patchBoxesBuilderIdBlock: (args) => request("PATCH", "/boxes/{builderId}/block", { hasBody: true }, args),
-      // POST /boxes/{builderId}/close — rank: metic+archon — POST /boxes/:builderId/close
-      postBoxesBuilderIdClose: (args) => request("POST", "/boxes/{builderId}/close", { hasBody: true }, args),
-      // GET /boxes/cost-ledger — rank: metic+archon — GET /boxes/cost-ledger
-      getBoxesCostLedger: (args) => request("GET", "/boxes/cost-ledger", { hasBody: false }, args),
-    },
     "bugAttachments": {
       // GET /bug-attachments/{name} — rank: any-builder — GET /bug-attachments/:name
       getBugAttachmentsName: (args) => request("GET", "/bug-attachments/{name}", { hasBody: false }, args),
@@ -1028,6 +968,10 @@ function createClient(opts = {}) {
       // POST /sso/token — rank: public — POST /sso/token
       postSsoToken: (args) => request("POST", "/sso/token", { hasBody: true }, args),
     },
+    "store": {
+      // POST /store/modules/{key}/versions — rank: metic+archon — POST /store/modules/:key/versions
+      postStoreModulesKeyVersions: (args) => request("POST", "/store/modules/{key}/versions", { hasBody: true }, args),
+    },
     "taskRecommendations": {
       // POST /task-recommendations — rank: any-builder — POST /task-recommendations
       postTaskRecommendations: (args) => request("POST", "/task-recommendations", { hasBody: true }, args),

package/clients/bongos-client/index.cjs

@@ -136,14 +136,6 @@ function createClient(opts = {}) {
       getAuditLog: (args) => request("GET", "/audit-log", { hasBody: false }, args),
     },
     "auth": {
-      // POST /auth/app-pair/approve — rank: any-builder — POST /auth/app-pair/approve
-      postAuthAppPairApprove: (args) => request("POST", "/auth/app-pair/approve", { hasBody: true }, args),
-      // GET /auth/app-pair/info — rank: any-builder — GET /auth/app-pair/info
-      getAuthAppPairInfo: (args) => request("GET", "/auth/app-pair/info", { hasBody: false }, args),
-      // POST /auth/app-pair/poll — rank: public — POST /auth/app-pair/poll
-      postAuthAppPairPoll: (args) => request("POST", "/auth/app-pair/poll", { hasBody: true }, args),
-      // POST /auth/app-pair/start — rank: public — POST /auth/app-pair/start
-      postAuthAppPairStart: (args) => request("POST", "/auth/app-pair/start", { hasBody: true }, args),
       // POST /auth/backchannel-logout — rank: public — POST /auth/backchannel-logout
       postAuthBackchannelLogout: (args) => request("POST", "/auth/backchannel-logout", { hasBody: true }, args),
       // POST /auth/cli-token/issue — rank: any-builder — POST /auth/cli-token/issue
@@ -211,58 +203,6 @@ function createClient(opts = {}) {
       // POST /blockers/{id}/resolve — rank: metic+archon — POST /blockers/:id/resolve
       postBlockersIdResolve: (args) => request("POST", "/blockers/{id}/resolve", { hasBody: true }, args),
     },
-    "box": {
-      // GET /box/authorized-keys — rank: any-builder — GET /box/authorized-keys
-      getBoxAuthorizedKeys: (args) => request("GET", "/box/authorized-keys", { hasBody: false }, args),
-      // POST /box/close — rank: any-builder — POST /box/close
-      postBoxClose: (args) => request("POST", "/box/close", { hasBody: true }, args),
-      // GET /box/connect — rank: public — GET /box/connect
-      getBoxConnect: (args) => request("GET", "/box/connect", { hasBody: false }, args),
-      // GET /box/connect.ps1 — rank: public — GET /box/connect.ps1
-      getBoxConnectPs1: (args) => request("GET", "/box/connect.ps1", { hasBody: false }, args),
-      // GET /box/connect.sh — rank: public — GET /box/connect.sh
-      getBoxConnectSh: (args) => request("GET", "/box/connect.sh", { hasBody: false }, args),
-      // POST /box/ensure — rank: any-builder — POST /box/ensure
-      postBoxEnsure: (args) => request("POST", "/box/ensure", { hasBody: true }, args),
-      // POST /box/heartbeat — rank: any-builder — POST /box/heartbeat
-      postBoxHeartbeat: (args) => request("POST", "/box/heartbeat", { hasBody: true }, args),
-      // POST /box/host-keys — rank: any-builder — POST /box/host-keys
-      postBoxHostKeys: (args) => request("POST", "/box/host-keys", { hasBody: true }, args),
-      // GET /box/managed-settings — rank: any-builder — GET /box/managed-settings
-      getBoxManagedSettings: (args) => request("GET", "/box/managed-settings", { hasBody: false }, args),
-      // GET /box/me — rank: any-builder — GET /box/me
-      getBoxMe: (args) => request("GET", "/box/me", { hasBody: false }, args),
-      // GET /box/scope — rank: any-builder — GET /box/scope
-      getBoxScope: (args) => request("GET", "/box/scope", { hasBody: false }, args),
-      // GET /box/source-access — rank: any-builder — GET /box/source-access
-      getBoxSourceAccess: (args) => request("GET", "/box/source-access", { hasBody: false }, args),
-      // GET /box/ssh-key — rank: any-builder — GET /box/ssh-key
-      getBoxSshKey: (args) => request("GET", "/box/ssh-key", { hasBody: false }, args),
-      // POST /box/ssh-key — rank: any-builder — POST /box/ssh-key
-      postBoxSshKey: (args) => request("POST", "/box/ssh-key", { hasBody: true }, args),
-      // DELETE /box/ssh-key/{id} — rank: any-builder — DELETE /box/ssh-key/:id
-      deleteBoxSshKeyId: (args) => request("DELETE", "/box/ssh-key/{id}", { hasBody: false }, args),
-      // GET /box/terminal — rank: any-builder — GET /box/terminal
-      getBoxTerminal: (args) => request("GET", "/box/terminal", { hasBody: false }, args),
-      // POST /box/terminal — rank: any-builder — POST /box/terminal
-      postBoxTerminal: (args) => request("POST", "/box/terminal", { hasBody: true }, args),
-      // POST /box/version — rank: any-builder — POST /box/version
-      postBoxVersion: (args) => request("POST", "/box/version", { hasBody: true }, args),
-      // GET /box/widen — rank: any-builder — GET /box/widen
-      getBoxWiden: (args) => request("GET", "/box/widen", { hasBody: false }, args),
-      // POST /box/widen — rank: any-builder — POST /box/widen
-      postBoxWiden: (args) => request("POST", "/box/widen", { hasBody: true }, args),
-    },
-    "boxes": {
-      // GET /boxes — rank: metic+archon — GET /boxes
-      getBoxes: (args) => request("GET", "/boxes", { hasBody: false }, args),
-      // PATCH /boxes/{builderId}/block — rank: metic+archon — PATCH /boxes/:builderId/block
-      patchBoxesBuilderIdBlock: (args) => request("PATCH", "/boxes/{builderId}/block", { hasBody: true }, args),
-      // POST /boxes/{builderId}/close — rank: metic+archon — POST /boxes/:builderId/close
-      postBoxesBuilderIdClose: (args) => request("POST", "/boxes/{builderId}/close", { hasBody: true }, args),
-      // GET /boxes/cost-ledger — rank: metic+archon — GET /boxes/cost-ledger
-      getBoxesCostLedger: (args) => request("GET", "/boxes/cost-ledger", { hasBody: false }, args),
-    },
     "bugAttachments": {
       // GET /bug-attachments/{name} — rank: any-builder — GET /bug-attachments/:name
       getBugAttachmentsName: (args) => request("GET", "/bug-attachments/{name}", { hasBody: false }, args),
@@ -1027,6 +967,10 @@ function createClient(opts = {}) {
       // POST /sso/token — rank: public — POST /sso/token
       postSsoToken: (args) => request("POST", "/sso/token", { hasBody: true }, args),
     },
+    "store": {
+      // POST /store/modules/{key}/versions — rank: metic+archon — POST /store/modules/:key/versions
+      postStoreModulesKeyVersions: (args) => request("POST", "/store/modules/{key}/versions", { hasBody: true }, args),
+    },
     "taskRecommendations": {
       // POST /task-recommendations — rank: any-builder — POST /task-recommendations
       postTaskRecommendations: (args) => request("POST", "/task-recommendations", { hasBody: true }, args),

package/clients/bongos-client/index.d.ts

@@ -7,7 +7,6 @@ export declare const DEFAULT_BASE_URL: string;
 export interface ApiErrorObject { code: string; message: string; details?: unknown }
 export interface DeleteAgentsNameResponse { ok: boolean; deleted: unknown }
 export interface DeleteBlockersIdLinkTaskIdResponse { ok: boolean; unlinked: boolean; released: unknown }
-export interface DeleteBoxSshKeyIdResponse { ok: boolean; deleted: unknown }
 export interface DeleteConnectionsIdResponse { outcome: unknown }
 export interface DeleteDependenciesResponse { ok: boolean }
 export interface DeleteGovernmentAssignmentsBuilderIdRankKeyResponse { ok: boolean; builder_id: unknown; rank_key: unknown; removed: unknown }
@@ -34,19 +33,12 @@ export interface GetAgentsNameResponse { ok: boolean; agent: unknown }
 export interface GetAgentsResponse { ok: boolean; agents: unknown; counts: unknown; vocabulary: unknown }
 export interface GetArtistGateResponse { ok: boolean; mode: unknown; since: unknown; holds: boolean; truncated: unknown; reviews: unknown; halt: unknown }
 export interface GetAuditLogResponse { rows: unknown; page: unknown }
-export interface GetAuthAppPairInfoResponse { pair_code: unknown; device_name: unknown; platform: unknown; status: unknown }
 export interface GetAuthWebAdmissionStatusResponse { admitted: boolean }
 export interface GetAutonomyRunnersResponse { runners: unknown; none: unknown }
 export interface GetAutonomyRunsResponse { routine: unknown; limit: unknown; runs: unknown }
 export interface GetBackupStatusResponse { backup_dir: unknown; db_name: unknown; latest_dump: unknown; stale: unknown; age_hours: unknown; trigger_running: unknown }
 export interface GetBlockersIdResponse { blocker: unknown }
 export interface GetBlockersResponse { blockers: unknown; page: unknown }
-export interface GetBoxMeResponse { box: unknown; open_intent: unknown; cost: unknown }
-export interface GetBoxSourceAccessResponse { scope: unknown; mode: unknown; sparse_paths: unknown; repo_url: unknown; credential: unknown; configured: unknown; separate_starter_repo: unknown; expires_at: unknown; ttl_seconds: unknown; guidance: unknown }
-export interface GetBoxSshKeyResponse { keys: unknown }
-export interface GetBoxTerminalResponse { state: unknown; url: unknown; credential: unknown; hint: unknown; warming_up?: boolean; terminal_at?: unknown }
-export interface GetBoxWidenResponse { widen_paths: unknown; admitted: unknown; ignored: unknown; max: unknown }
-export interface GetBoxesResponse { boxes: unknown }
 export interface GetBuildersDirectoryResponse { builders: unknown }
 export interface GetBuildersIdActiveClaimsResponse { builder_id: unknown; claims: unknown; stale_hours: unknown; stale_hours_source: unknown }
 export interface GetBuildersIdActivityResponse { builder_id: unknown; section: unknown; role: unknown; rows: unknown; total: unknown }
@@ -183,8 +175,6 @@ export interface PageInfo { limit: number; offset: number; total?: number }
 export interface PatchAccessRequestsIdRequest { status: string }
 export interface PatchAccessRequestsIdResponse { ok: boolean; request: unknown; unchanged?: boolean }
 export interface PatchAgentsNameResponse { ok: boolean; agent: unknown }
-export interface PatchBoxesBuilderIdBlockRequest { blocked: boolean; reason?: string; close_current?: boolean }
-export interface PatchBoxesBuilderIdBlockResponse { ok: boolean; blocked: unknown; close_queued: unknown }
 export interface PatchBuildersIdBudgetRequest { monthly_budget_usd?: unknown }
 export interface PatchBuildersIdBudgetResponse { builder: unknown }
 export interface PatchBuildersIdRankRequest { rank: string }
@@ -240,11 +230,6 @@ export interface PostAgentsNameEnableResponse { ok: boolean; agent: unknown }
 export interface PostAgentsNameInvokeRequest { input?: string }
 export interface PostAgentsNameInvokeResponse { ok: boolean; run_id: unknown; poll: unknown; message: unknown }
 export interface PostAgentsResponse { ok: boolean; agent: unknown }
-export interface PostAuthAppPairApproveRequest { pair_code: string }
-export interface PostAuthAppPairApproveResponse { ok: boolean }
-export interface PostAuthAppPairPollRequest { poll_token: string }
-export interface PostAuthAppPairStartRequest { device_name?: string; platform?: string }
-export interface PostAuthAppPairStartResponse { pair_code: unknown; poll_token: unknown; verify_path: unknown; verify_url: unknown; expires_in: unknown; interval: unknown }
 export interface PostAuthBackchannelLogoutRequest { logout_token: string }
 export interface PostAuthBackchannelLogoutResponse { ok: boolean }
 export interface PostAuthCliTokenIssueResponse { ok: boolean; token: unknown; expires_at: unknown; builder_login: unknown; api_base: unknown; paste_command: unknown }
@@ -268,21 +253,6 @@ export interface PostBlockersIdLinkResponse { ok: boolean; blocked: unknown }
 export interface PostBlockersIdResolveRequest { resolution_note?: string }
 export interface PostBlockersRequest { title: string; body_md?: string; source?: string; source_ref?: string }
 export interface PostBlockersResponse { skipped?: boolean; reason?: unknown; blocker?: unknown }
-export interface PostBoxCloseResponse { ok: boolean; queued: unknown; action: unknown; message: unknown }
-export interface PostBoxEnsureResponse { state: unknown; action: unknown; queued: boolean; intent?: unknown }
-export interface PostBoxHeartbeatRequest { claude_active?: boolean; attached?: boolean }
-export interface PostBoxHeartbeatResponse { ok: boolean; state: unknown }
-export interface PostBoxHostKeysRequest { host_keys: string }
-export interface PostBoxHostKeysResponse { ok: boolean; state: unknown; count: unknown }
-export interface PostBoxSshKeyRequest { public_key: string; label?: string }
-export interface PostBoxSshKeyResponse { ok: boolean; key: unknown }
-export interface PostBoxTerminalRequest { url: string; credential?: string }
-export interface PostBoxTerminalResponse { ok: boolean; state: unknown }
-export interface PostBoxVersionRequest { sha: string; committed_at?: string }
-export interface PostBoxVersionResponse { ok: boolean; state: unknown }
-export interface PostBoxWidenRequest { add?: unknown[]; remove?: unknown[]; clear?: boolean }
-export interface PostBoxWidenResponse { ok: boolean; widen_paths: unknown; admitted: unknown; ignored: unknown; max: unknown }
-export interface PostBoxesBuilderIdCloseResponse { ok: boolean; queued: unknown; action: unknown; state: unknown; message: unknown }
 export interface PostClaimsBatchReleaseRequest { claim_ids: unknown[]; force?: boolean }
 export interface PostClaimsBatchReleaseResponse { released: unknown; failures: unknown }
 export interface PostClaimsBatchRequest { task_ids: unknown[]; worktree_name?: string; bind_session?: boolean }
@@ -459,6 +429,7 @@ export interface PostSsoMembershipCheckInRequest { client_id: string; client_sec
 export interface PostSsoMembershipCheckInResponse { ok: boolean }
 export interface PostSsoTokenRequest { client_id: string; client_secret: string; code: string; redirect_uri: string }
 export interface PostSsoTokenResponse { github_id: unknown; github_login: unknown; display_name: unknown; avatar_url: unknown }
+export interface PostStoreModulesKeyVersionsResponse { ok: boolean; created_module: unknown; version: unknown }
 export interface PostTaskRecommendationsRequest { task_id: number; recommended_to: number; reason: string }
 export interface PostTaskRecommendationsResponse { ok: boolean; recommendation: unknown }
 export interface PostTasksIdAttestGateRequest { head_sha: string }
@@ -565,14 +536,6 @@ export interface BongosClient {
     getAuditLog(args?: RequestArgs): Promise<GetAuditLogResponse>;
   };
   "auth": {
-    /** POST /auth/app-pair/approve — rank: any-builder */
-    postAuthAppPairApprove(args: RequestArgs & { body: PostAuthAppPairApproveRequest }): Promise<PostAuthAppPairApproveResponse>;
-    /** GET /auth/app-pair/info — rank: any-builder */
-    getAuthAppPairInfo(args?: RequestArgs): Promise<GetAuthAppPairInfoResponse>;
-    /** POST /auth/app-pair/poll — rank: public */
-    postAuthAppPairPoll(args: RequestArgs & { body: PostAuthAppPairPollRequest }): Promise<ApiResponse>;
-    /** POST /auth/app-pair/start — rank: public */
-    postAuthAppPairStart(args?: RequestArgs & { body?: PostAuthAppPairStartRequest }): Promise<PostAuthAppPairStartResponse>;
     /** POST /auth/backchannel-logout — rank: public */
     postAuthBackchannelLogout(args: RequestArgs & { body: PostAuthBackchannelLogoutRequest }): Promise<PostAuthBackchannelLogoutResponse>;
     /** POST /auth/cli-token/issue — rank: any-builder */
@@ -640,58 +603,6 @@ export interface BongosClient {
     /** POST /blockers/{id}/resolve — rank: metic+archon */
     postBlockersIdResolve(args?: RequestArgs & { body?: PostBlockersIdResolveRequest }): Promise<ApiResponse>;
   };
-  "box": {
-    /** GET /box/authorized-keys — rank: any-builder */
-    getBoxAuthorizedKeys(args?: RequestArgs): Promise<ApiResponse>;
-    /** POST /box/close — rank: any-builder */
-    postBoxClose(args?: RequestArgs): Promise<PostBoxCloseResponse>;
-    /** GET /box/connect — rank: public */
-    getBoxConnect(args?: RequestArgs): Promise<ApiResponse>;
-    /** GET /box/connect.ps1 — rank: public */
-    getBoxConnectPs1(args?: RequestArgs): Promise<ApiResponse>;
-    /** GET /box/connect.sh — rank: public */
-    getBoxConnectSh(args?: RequestArgs): Promise<ApiResponse>;
-    /** POST /box/ensure — rank: any-builder */
-    postBoxEnsure(args?: RequestArgs): Promise<PostBoxEnsureResponse>;
-    /** POST /box/heartbeat — rank: any-builder */
-    postBoxHeartbeat(args?: RequestArgs & { body?: PostBoxHeartbeatRequest }): Promise<PostBoxHeartbeatResponse>;
-    /** POST /box/host-keys — rank: any-builder */
-    postBoxHostKeys(args: RequestArgs & { body: PostBoxHostKeysRequest }): Promise<PostBoxHostKeysResponse>;
-    /** GET /box/managed-settings — rank: any-builder */
-    getBoxManagedSettings(args?: RequestArgs): Promise<ApiResponse>;
-    /** GET /box/me — rank: any-builder */
-    getBoxMe(args?: RequestArgs): Promise<GetBoxMeResponse>;
-    /** GET /box/scope — rank: any-builder */
-    getBoxScope(args?: RequestArgs): Promise<ApiResponse>;
-    /** GET /box/source-access — rank: any-builder */
-    getBoxSourceAccess(args?: RequestArgs): Promise<GetBoxSourceAccessResponse>;
-    /** GET /box/ssh-key — rank: any-builder */
-    getBoxSshKey(args?: RequestArgs): Promise<GetBoxSshKeyResponse>;
-    /** POST /box/ssh-key — rank: any-builder */
-    postBoxSshKey(args: RequestArgs & { body: PostBoxSshKeyRequest }): Promise<PostBoxSshKeyResponse>;
-    /** DELETE /box/ssh-key/{id} — rank: any-builder */
-    deleteBoxSshKeyId(args?: RequestArgs): Promise<DeleteBoxSshKeyIdResponse>;
-    /** GET /box/terminal — rank: any-builder */
-    getBoxTerminal(args?: RequestArgs): Promise<GetBoxTerminalResponse>;
-    /** POST /box/terminal — rank: any-builder */
-    postBoxTerminal(args: RequestArgs & { body: PostBoxTerminalRequest }): Promise<PostBoxTerminalResponse>;
-    /** POST /box/version — rank: any-builder */
-    postBoxVersion(args: RequestArgs & { body: PostBoxVersionRequest }): Promise<PostBoxVersionResponse>;
-    /** GET /box/widen — rank: any-builder */
-    getBoxWiden(args?: RequestArgs): Promise<GetBoxWidenResponse>;
-    /** POST /box/widen — rank: any-builder */
-    postBoxWiden(args?: RequestArgs & { body?: PostBoxWidenRequest }): Promise<PostBoxWidenResponse>;
-  };
-  "boxes": {
-    /** GET /boxes — rank: metic+archon */
-    getBoxes(args?: RequestArgs): Promise<GetBoxesResponse>;
-    /** PATCH /boxes/{builderId}/block — rank: metic+archon */
-    patchBoxesBuilderIdBlock(args: RequestArgs & { body: PatchBoxesBuilderIdBlockRequest }): Promise<PatchBoxesBuilderIdBlockResponse>;
-    /** POST /boxes/{builderId}/close — rank: metic+archon */
-    postBoxesBuilderIdClose(args?: RequestArgs): Promise<PostBoxesBuilderIdCloseResponse>;
-    /** GET /boxes/cost-ledger — rank: metic+archon */
-    getBoxesCostLedger(args?: RequestArgs): Promise<ApiResponse>;
-  };
   "bugAttachments": {
     /** GET /bug-attachments/{name} — rank: any-builder */
     getBugAttachmentsName(args?: RequestArgs): Promise<ApiResponse>;
@@ -1456,6 +1367,10 @@ export interface BongosClient {
     /** POST /sso/token — rank: public */
     postSsoToken(args: RequestArgs & { body: PostSsoTokenRequest }): Promise<PostSsoTokenResponse>;
   };
+  "store": {
+    /** POST /store/modules/{key}/versions — rank: metic+archon */
+    postStoreModulesKeyVersions(args?: RequestArgs): Promise<PostStoreModulesKeyVersionsResponse>;
+  };
   "taskRecommendations": {
     /** POST /task-recommendations — rank: any-builder */
     postTaskRecommendations(args: RequestArgs & { body: PostTaskRecommendationsRequest }): Promise<PostTaskRecommendationsResponse>;

package/clients/bongos-client/index.mjs

@@ -133,14 +133,6 @@ export function createClient(opts = {}) {
       getAuditLog: (args) => request("GET", "/audit-log", { hasBody: false }, args),
     },
     "auth": {
-      // POST /auth/app-pair/approve — rank: any-builder — POST /auth/app-pair/approve
-      postAuthAppPairApprove: (args) => request("POST", "/auth/app-pair/approve", { hasBody: true }, args),
-      // GET /auth/app-pair/info — rank: any-builder — GET /auth/app-pair/info
-      getAuthAppPairInfo: (args) => request("GET", "/auth/app-pair/info", { hasBody: false }, args),
-      // POST /auth/app-pair/poll — rank: public — POST /auth/app-pair/poll
-      postAuthAppPairPoll: (args) => request("POST", "/auth/app-pair/poll", { hasBody: true }, args),
-      // POST /auth/app-pair/start — rank: public — POST /auth/app-pair/start
-      postAuthAppPairStart: (args) => request("POST", "/auth/app-pair/start", { hasBody: true }, args),
       // POST /auth/backchannel-logout — rank: public — POST /auth/backchannel-logout
       postAuthBackchannelLogout: (args) => request("POST", "/auth/backchannel-logout", { hasBody: true }, args),
       // POST /auth/cli-token/issue — rank: any-builder — POST /auth/cli-token/issue
@@ -208,58 +200,6 @@ export function createClient(opts = {}) {
       // POST /blockers/{id}/resolve — rank: metic+archon — POST /blockers/:id/resolve
       postBlockersIdResolve: (args) => request("POST", "/blockers/{id}/resolve", { hasBody: true }, args),
     },
-    "box": {
-      // GET /box/authorized-keys — rank: any-builder — GET /box/authorized-keys
-      getBoxAuthorizedKeys: (args) => request("GET", "/box/authorized-keys", { hasBody: false }, args),
-      // POST /box/close — rank: any-builder — POST /box/close
-      postBoxClose: (args) => request("POST", "/box/close", { hasBody: true }, args),
-      // GET /box/connect — rank: public — GET /box/connect
-      getBoxConnect: (args) => request("GET", "/box/connect", { hasBody: false }, args),
-      // GET /box/connect.ps1 — rank: public — GET /box/connect.ps1
-      getBoxConnectPs1: (args) => request("GET", "/box/connect.ps1", { hasBody: false }, args),
-      // GET /box/connect.sh — rank: public — GET /box/connect.sh
-      getBoxConnectSh: (args) => request("GET", "/box/connect.sh", { hasBody: false }, args),
-      // POST /box/ensure — rank: any-builder — POST /box/ensure
-      postBoxEnsure: (args) => request("POST", "/box/ensure", { hasBody: true }, args),
-      // POST /box/heartbeat — rank: any-builder — POST /box/heartbeat
-      postBoxHeartbeat: (args) => request("POST", "/box/heartbeat", { hasBody: true }, args),
-      // POST /box/host-keys — rank: any-builder — POST /box/host-keys
-      postBoxHostKeys: (args) => request("POST", "/box/host-keys", { hasBody: true }, args),
-      // GET /box/managed-settings — rank: any-builder — GET /box/managed-settings
-      getBoxManagedSettings: (args) => request("GET", "/box/managed-settings", { hasBody: false }, args),
-      // GET /box/me — rank: any-builder — GET /box/me
-      getBoxMe: (args) => request("GET", "/box/me", { hasBody: false }, args),
-      // GET /box/scope — rank: any-builder — GET /box/scope
-      getBoxScope: (args) => request("GET", "/box/scope", { hasBody: false }, args),
-      // GET /box/source-access — rank: any-builder — GET /box/source-access
-      getBoxSourceAccess: (args) => request("GET", "/box/source-access", { hasBody: false }, args),
-      // GET /box/ssh-key — rank: any-builder — GET /box/ssh-key
-      getBoxSshKey: (args) => request("GET", "/box/ssh-key", { hasBody: false }, args),
-      // POST /box/ssh-key — rank: any-builder — POST /box/ssh-key
-      postBoxSshKey: (args) => request("POST", "/box/ssh-key", { hasBody: true }, args),
-      // DELETE /box/ssh-key/{id} — rank: any-builder — DELETE /box/ssh-key/:id
-      deleteBoxSshKeyId: (args) => request("DELETE", "/box/ssh-key/{id}", { hasBody: false }, args),
-      // GET /box/terminal — rank: any-builder — GET /box/terminal
-      getBoxTerminal: (args) => request("GET", "/box/terminal", { hasBody: false }, args),
-      // POST /box/terminal — rank: any-builder — POST /box/terminal
-      postBoxTerminal: (args) => request("POST", "/box/terminal", { hasBody: true }, args),
-      // POST /box/version — rank: any-builder — POST /box/version
-      postBoxVersion: (args) => request("POST", "/box/version", { hasBody: true }, args),
-      // GET /box/widen — rank: any-builder — GET /box/widen
-      getBoxWiden: (args) => request("GET", "/box/widen", { hasBody: false }, args),
-      // POST /box/widen — rank: any-builder — POST /box/widen
-      postBoxWiden: (args) => request("POST", "/box/widen", { hasBody: true }, args),
-    },
-    "boxes": {
-      // GET /boxes — rank: metic+archon — GET /boxes
-      getBoxes: (args) => request("GET", "/boxes", { hasBody: false }, args),
-      // PATCH /boxes/{builderId}/block — rank: metic+archon — PATCH /boxes/:builderId/block
-      patchBoxesBuilderIdBlock: (args) => request("PATCH", "/boxes/{builderId}/block", { hasBody: true }, args),
-      // POST /boxes/{builderId}/close — rank: metic+archon — POST /boxes/:builderId/close
-      postBoxesBuilderIdClose: (args) => request("POST", "/boxes/{builderId}/close", { hasBody: true }, args),
-      // GET /boxes/cost-ledger — rank: metic+archon — GET /boxes/cost-ledger
-      getBoxesCostLedger: (args) => request("GET", "/boxes/cost-ledger", { hasBody: false }, args),
-    },
     "bugAttachments": {
       // GET /bug-attachments/{name} — rank: any-builder — GET /bug-attachments/:name
       getBugAttachmentsName: (args) => request("GET", "/bug-attachments/{name}", { hasBody: false }, args),
@@ -1024,6 +964,10 @@ export function createClient(opts = {}) {
       // POST /sso/token — rank: public — POST /sso/token
       postSsoToken: (args) => request("POST", "/sso/token", { hasBody: true }, args),
     },
+    "store": {
+      // POST /store/modules/{key}/versions — rank: metic+archon — POST /store/modules/:key/versions
+      postStoreModulesKeyVersions: (args) => request("POST", "/store/modules/{key}/versions", { hasBody: true }, args),
+    },
     "taskRecommendations": {
       // POST /task-recommendations — rank: any-builder — POST /task-recommendations
       postTaskRecommendations: (args) => request("POST", "/task-recommendations", { hasBody: true }, args),

package/config/branding.neutral.json

@@ -17,11 +17,7 @@
     "statusDataUrl": "",
     "cookieDomain": "",
     "oauthOrigin": "http://localhost:3000",
-    "devBoxBase": "",
-    "sshBoxBase": "",
-    "instanceBase": "",
-    "sandboxPrefix": "sandbox-",
-    "termPrefix": "term-"
+    "instanceBase": ""
   },
   "auth": {
     "_note": "Cross-site identity (ADR 0141). idp=false → this instance owns its auth outright (its own GitHub app; the default + the self-hosted path). A HOSTED instance sets idp=true and gets its hub origin + client credentials from env (<PREFIX>_HUB_ORIGIN / _HUB_CLIENT_ID / _HUB_CLIENT_SECRET, written by provisioning) so web + CLI sign-in federate through the Cloud Bongos hub with no GitHub app of its own. Identity is federated; authority stays local.",

package/config/modules.neutral.json

@@ -1,9 +1,8 @@
 {
-  "_note": "Feature-module selection — the VANILLA (customer-0) default: every optional feature OFF. A fresh Cloud Bongos instance is the methodology core only (builders/tasks/claims/credits/grading/memory/recall) with the engineer discipline. To enable a module on an instance, copy this to config/modules.json and flip flags (or set <ENVPREFIX>_MODULE_<NAME>=1). Sibling of config/branding.neutral.json. Owned by R54 / task 1193 (src/modules.js, ADR 0062 §4). Known modules: game, art-pipeline, discord. RETIRED: dev-box (goal 1000091, task 1003886) — no longer offered in any starter bundle and not in the creation picker's catalog. The flag stays declared and false until modules/dev-box/ is deleted, so an instance carrying an older config/modules.json cannot silently re-enable it.",
+  "_note": "Feature-module selection — the VANILLA (customer-0) default: every optional feature OFF. A fresh Cloud Bongos instance is the methodology core only (builders/tasks/claims/credits/grading/memory/recall) with the engineer discipline. To enable a module on an instance, copy this to config/modules.json and flip flags (or set <ENVPREFIX>_MODULE_<NAME>=1). Sibling of config/branding.neutral.json. Owned by R54 / task 1193 (src/modules.js, ADR 0062 §4). Known modules: game, art-pipeline, discord.",
   "modules": {
     "game": false,
     "art-pipeline": false,
-    "discord": false,
-    "dev-box": false
+    "discord": false
   }
 }

package/config/scheduled-routines.json

@@ -6,8 +6,6 @@
     "artifact-staleness":    { "scope": "instance-wide", "enabled": true,  "cadence": "daily",   "requiresAutonomy": false, "note": "deterministic; task 1001930 / ADR 0110 pt.5. INSTANCE-SIDE ONLY, and the opposite of artifact-audit above: it reads the gitignored deploy-generated files on the serving machine's disk, which a CI checkout legitimately does not have — so it declares no cadence in its SKILL.md and no workflow fires it. This cadence is the hint the operator's own scheduler reads." },
     "bfg":                    { "scope": "instance-wide", "builderAware": true, "enabled": true,  "cadence": "nightly", "requiresAutonomy": false, "note": "Parts A+B read-only + always-on; Part C (cross-builder write) is separately gated by BFG_WRITE_ENABLED + a provisioned principal token." },
     "bfg-session-eval":       { "scope": "instance-wide", "builderAware": true, "enabled": true,  "cadence": "nightly", "requiresAutonomy": false },
-    "box-dormant-reclaim":    { "scope": "instance-wide", "enabled": false, "cadence": "daily",  "requiresAutonomy": false, "note": "RETIRED with the dev-box module (goal 1000091, task 1003886). Held OFF so the fleet is inert while the removal lands; the routine body is deleted by the dev-box teardown tasks." },
-    "box-idle-suspend":       { "scope": "instance-wide", "enabled": false, "cadence": "hourly", "requiresAutonomy": false, "note": "RETIRED with the dev-box module (goal 1000091, task 1003886). Held OFF so the fleet is inert while the removal lands; the routine body is deleted by the dev-box teardown tasks." },
     "core-update-subscription": { "scope": "instance-wide", "enabled": true, "cadence": "15min", "requiresAutonomy": true, "note": "Patch-only auto-upgrade of subscribed consumer instances (ADR 0136 / task 2150). Default OFF + opt-in: the roster (config/update-subscriptions.json) ships empty, so this is a no-op until an operator arms autonomy AND lists an instance. Every upgrade is health-gated with auto-rollback (task 2149). CADENCE (task 1003674): this is the knob that decides how long a published release waits before a subscribed instance takes it — at 'daily' a builder's ship reached the live site up to 24h late, because everything upstream is already fast (CI publishes to npm within ~2 min of merge) and this sweep was the only slow step. 15min is the worst-case lag, not a re-check cost: the sweep exits immediately when the registry has nothing newer. FLOOR ~5min: an upgrading run takes ~2 min, and runs must not overlap. Installing the period is the operator's half — see docs/recipes/upgrading-the-core.md." },
     "dep-audit-nightly":      { "scope": "instance-wide", "enabled": true,  "cadence": "nightly", "requiresAutonomy": false },
     "diagram-drift":          { "scope": "instance-wide", "enabled": true,  "cadence": "daily",  "requiresAutonomy": false },

package/docs/adr/0145-free-hosted-project-tier-isolation-and-domain-separation.md

@@ -1,5 +1,6 @@
 # 0145 — A free "own-repo" hosted project tier needs domain separation + per-project isolation (not a bare cloudbongos.com subdomain)
 
+- **Status update 2026-09-28 — Finding 1 is OPEN again, and permanently ([ADR 0345](0345-we-host-every-projects-hall-and-its-app-deploys-where-the-owner-chooses.md) decision 6).** Project halls now stay hosted on our box, so ADR 0323's "closed by removing its precondition" below no longer holds. Measured: the hub still sets `Domain=.cloudbongos.com`, and a hall loads modules from its own repository, so a hall at one of our addresses can read a visiting hub builder's session. The sign-in hardening is a **blocking prerequisite again** for any new hall at one of our addresses, filed as [task 1004357](https://cloudbongos.com/builders#/task/1004357). A hall on the owner's own domain is not exposed.
 - **Status:** **Superseded in part by [ADR 0323](0323-hosting-is-three-shapes-and-we-are-not-the-landlord.md)** (2026-09-21). Three of this ADR's decisions are replaced: the free tier becomes a **capped trial**, not all-free; customer projects leave the shared box for a managed platform, so **container isolation on our own box is no longer the plan**; and **Finding 1 is closed by removing its precondition** — with no customer code on a `cloudbongos.com` subdomain there is no tenant to receive the hub session cookie, so the sign-in hardening in the build sequence below is no longer a blocking prerequisite (it remains worth doing on its own merits). The two security FINDINGS below stand as analysis and are the reason the new direction is safe.
 - **Status:** Accepted — owner decided 2026-07-15: **keep `cloudbongos.com`** (no separate domain), **container** isolation, **all-free** for now. Choosing the literal same domain makes hardening core sign-in a required prerequisite (see "Decisions" + "Required build sequence"). Build unblocked ([task 1002251](https://cloudbongos.com/builders#/task/1002251)); blocker 1000080 resolved.
 - **Date:** 2026-07-15

package/docs/adr/0285-a-shared-box-holds-about-twelve-projects-per-gb-and-memory-is-the-wall.md

@@ -1,5 +1,6 @@
 # ADR 0285 — A shared box holds about twelve projects per GB, and memory is the wall
 
+- **Status update 2026-09-28 — load-bearing again ([ADR 0345](0345-we-host-every-projects-hall-and-its-app-deploys-where-the-owner-chooses.md) decision 7).** Project halls stay on the shared box, so the ceiling below gates project creation again: at the ceiling the create route refuses `box_full` up front. The resize ([task 1003923](https://cloudbongos.com/builders#/task/1003923)) is not a prerequisite today, and becomes the next step when the project count nears the ceiling. The "no longer load-bearing" status below is superseded.
 - **Status:** accepted; **no longer load-bearing as of [ADR 0323](0323-hosting-is-three-shapes-and-we-are-not-the-landlord.md)** (2026-09-21). The measurements below are correct and still describe the box — it simply stops holding customer projects, so the ceiling no longer gates project creation and the queued resize ([task 1003923](https://cloudbongos.com/builders#/task/1003923)) is held rather than spent.
 - **Date:** 2026-09-15
 - **Task:** [1003877](https://cloudbongos.com/builders#/task/1003877) (goal 1000106), a spike. Informs [1003923](https://cloudbongos.com/builders#/task/1003923) (the resize) and [1001949](https://cloudbongos.com/builders#/task/1001949) (managed billing).

package/docs/adr/0323-hosting-is-three-shapes-and-we-are-not-the-landlord.md

@@ -1,6 +1,6 @@
 # ADR 0323 — Hosting is three shapes, and we are not the landlord
 
-- **Status:** accepted, **superseded in part by [ADR 0327](0327-a-cloud-host-runs-on-the-owners-account-and-the-key-is-borrowed.md)** (2026-09-22) — the platform choice, the not-the-landlord posture and decisions 2, 4, 5 and 6 STAND. Changed: §1 drops `dedicated-cloud-host` (two shapes, not three); §3's ~$14/project is the **owner's** cost, not ours, because a `cloud-host` now runs on the owner's own account; §7's capped free tier is retired with its premise — we no longer pay for customer compute.
+- **Status:** accepted, **§2 superseded by [ADR 0345](0345-we-host-every-projects-hall-and-its-app-deploys-where-the-owner-chooses.md)** (2026-09-28): project halls stay on the shared box, hosted by us, and only the owner's app goes to a platform of their choosing. Also **superseded in part by [ADR 0327](0327-a-cloud-host-runs-on-the-owners-account-and-the-key-is-borrowed.md)** (2026-09-22) — the platform choice, the not-the-landlord posture and decisions 2, 4, 5 and 6 STAND. Changed: §1 drops `dedicated-cloud-host` (two shapes, not three); §3's ~$14/project is the **owner's** cost, not ours, because a `cloud-host` now runs on the owner's own account; §7's capped free tier is retired with its premise — we no longer pay for customer compute.
 - **Date:** 2026-09-21
 - **Task:** [task 1004140](https://cloudbongos.com/builders#/task/1004140) (goal 1000106 — working area 1, Project creation)
 - **Deciders:** Lars (Archon) — every numbered decision below is the owner's; Claude ran the audit and the platform comparison.

package/docs/adr/0327-a-cloud-host-runs-on-the-owners-account-and-the-key-is-borrowed.md

@@ -1,6 +1,6 @@
 # ADR 0327 — A cloud-host runs on the owner's own account, and the key is borrowed, not stored
 
-- **Status:** accepted — **one Context finding retracted 2026-09-23** ([task 1004186](https://cloudbongos.com/builders#/task/1004186)): `mercury` was *not* already on Render, and the first Consequences bullet that rested on it is retracted with it. Decisions 1–5 are unaffected and stand. See the correction in Context.
+- **Status:** accepted, **superseded in part by [ADR 0345](0345-we-host-every-projects-hall-and-its-app-deploys-where-the-owner-chooses.md)** (2026-09-28): what a cloud-host puts on the owner's Render account is their **app**, not the hall, which we host. The borrowed-key mechanism (§2) and never destroying an owner's infrastructure (§3) stand. Also **one Context finding retracted 2026-09-23** ([task 1004186](https://cloudbongos.com/builders#/task/1004186)): `mercury` was *not* already on Render, and the first Consequences bullet that rested on it is retracted with it. Decisions 1–5 are unaffected and stand. See the correction in Context.
 - **Date:** 2026-09-22
 - **Task:** [task 1004175](https://cloudbongos.com/builders#/task/1004175) (goal 1000106 — working area 1, Project creation)
 - **Deciders:** Lars (Archon) — decisions 1, 3 and 4 are the owner's. Decision 2 is Claude's design answer to the owner's question "is there a simpler way", and decision 5 records a measurement.

package/docs/adr/0341-the-page-is-the-unit-of-tweak-mode.md

@@ -181,6 +181,8 @@ The lifecycle port gains what these need: `updateTaskDescription`, `webClaimTask
 - `wrong_page`: the file's `page_id` is not the page;
 - `reading_moved`: the file's `reading_hash` is not the draft's, because the page changed since the download. The artist is asked to download again, so no stale line is merged by position.
 
+**Amended 2026-09-28 ([task 1004354](https://cloudbongos.com/builders#/task/1004354), BV2.TW23): a file that lost its page details.** A Google Docs "download as .docx" keeps the words, the Title and Heading 2 styles and the comments, but drops the custom properties, the shown-text part and every content control. Such a file (no `page_id`) is no longer refused on that alone. It is identified by what the download wrote: its Title must be this page's title and its section headings must be this reading's, in order (quotes folded, spacing ignored). A mismatch is `wrong_page`, naming what did not match (`mismatched: ['title', 'headings']`, `page_details: false`). A match maps by position against the current reading as above, so an added or dropped line is still `structure_changed`, named. With no `reading_hash` there is no reading to have moved from: the structure matching THIS reading is the check. With no shown-text part the file is the whole state (TW09's `baseline: false`), and the answer's `merge.page_details` says the file was matched by title and headings. The untagged paragraphs above the first heading (the Title and the note) are never lines, even when the note lost its custom style. In the editor a refused upload opens a panel over the page naming what happened and the next step, and the notice on the paper stays after it closes.
+
 ## Decided by the builder, confirmed by the owner
 
 **Confirmed 2026-09-28:** the owner accepted every pick below as written (recorded under [task 1004313](https://cloudbongos.com/builders#/task/1004313)).