@bongos/core 1.19.164 → 1.19.166

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.164",
-  "core_contract": "1.19.164",
-  "source_commit": "779753af3493b89014e91088a53931afe771ec00",
+  "core_version": "1.19.166",
+  "core_contract": "1.19.166",
+  "source_commit": "f0915c151ca43c0539146b5538ab7e5232c0340d",
   "source_ref": "HEAD",
-  "built_at": "2026-08-16T17:05:29.044Z",
+  "built_at": "2026-08-16T17:20:37.651Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 305,
     "agent_docs_stubbed": 21,
-    "functional_verbatim": 1263,
+    "functional_verbatim": 1264,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 1589,
-  "tree_sha256": "ea5a8e73501fb69d4e1d6e808d63a241df8b2ccf76728a49282a328b14b63337",
+  "file_count": 1590,
+  "tree_sha256": "66c7fea0b4a3bc4ad100fbc357028f28c0445c73227a53a90f842938c6e059f8",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -3167,12 +3167,12 @@
     {
       "path": "modules/hall-ui/public/goals-page.js",
       "mode": "0000644",
-      "sha256": "f24cfdca48676d882cfa51754fcf1519ade4646a760cb2be1db71fbc27571bca"
+      "sha256": "7e67230de060927c37ab8680e397c994896250c9e027e920ac997a61edbd14aa"
     },
     {
       "path": "modules/hall-ui/public/goals.css",
       "mode": "0000644",
-      "sha256": "c52de393285c8ba08494799aff501b947635ccbee93c80777e961b78e2a870c5"
+      "sha256": "407e8f21b95faa725d37c5336986d00af734db351bdaaf58aac350114c58f172"
     },
     {
       "path": "modules/hall-ui/public/goals.html",
@@ -4202,12 +4202,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "098af85c69e5a9f9aa4dcfd69292d9bbdecfa6bb4294a344740568344fd36673"
+      "sha256": "99da59c846c54ee93a5cc36d2dd760afd344905469a9a6368388de10ee02c506"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "6efe95b7773147ac8801e5d03fe75b7143f1eda728d123dfa6a19dd41deb5f27"
+      "sha256": "0f77d032953f120415ec207ecc3827fb00156aec357f542614445ed644c4b4a8"
     },
     {
       "path": "public-docs/index.html",
@@ -5259,6 +5259,11 @@
       "mode": "0000644",
       "sha256": "5de4203d6a764c8aec374c7802f69f659816d2c0d75bbe70144f7dfb56df2e39"
     },
+    {
+      "path": "scripts/gds/seed-bv1-privacy-invites-tasks.js",
+      "mode": "0000644",
+      "sha256": "bab0c429d0d194cc5e90bc09d59c338cf85143e0788bc3071f94297982c9a5fe"
+    },
     {
       "path": "scripts/gds/seed-bv1-profile-page-tasks.js",
       "mode": "0000644",
@@ -5802,7 +5807,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "575799bb117e5a9166aabc3abbba42f9b737fda008bc08e1461147a57831683a"
+      "sha256": "b83c5398b0e936e23705d50233c269ede9f36ea85f3c7b98111fbc501fd6d39a"
     },
     {
       "path": "src/module-loader/catalog.js",

package/modules/hall-ui/public/goals-page.js

@@ -91,6 +91,12 @@
     // from GET /tasks?version=…&include=deps. Empty on an older server (the
     // include=deps enrichment 404s gracefully → the list falls back to plain cards).
     rollups: new Map(),
+    // task 1002965 — goal_id → ms of the LAST WORK DONE on the goal: the newest
+    // activity timestamp across its tasks. Filled by loadRollups from the same
+    // per-version task fetch the readiness rollups ride on, so the "recently
+    // active" sort costs no extra request. A goal with no tasks is absent here
+    // and falls back to its own goals.updated_at (see goalActivityMs).
+    activity: new Map(),
   };
 
   async function getJSON(path) {
@@ -174,6 +180,39 @@
   const EMPTY_ROLLUP = { done: 0, active: 0, ready: 0, blocked: 0, backlog: 0, cut: 0, total: 0, nextReady: null };
   const rollupOf = (goalId) => state.rollups.get(String(goalId)) || EMPTY_ROLLUP;
 
+  // ---- goal ordering (task 1002965) -----------------------------------------
+  // The list is ordered by the Archon's within-version priority (sort_order,
+  // task 1760) unless the builder picks a date sort. Two dates are offered:
+  //   created  — goals.created_at, straight off GET /goals (GOAL_COLS)
+  //   activity — the LAST WORK DONE on the goal: the newest task-activity
+  //              timestamp under it (state.activity, filled by loadRollups),
+  //              falling back to the goal row's own updated_at when the goal
+  //              has no tasks at all, so a task-less goal still orders sanely
+  //              instead of sinking to the bottom forever.
+  const msOf = (iso) => { const t = iso ? Date.parse(iso) : NaN; return Number.isNaN(t) ? 0 : t; };
+  const taskActivityMs = (t) => Math.max(msOf(t.updated_at), msOf(t.shipped_at));
+  const goalCreatedMs = (g) => msOf(g.created_at);
+  const goalActivityMs = (g) => state.activity.get(String(g.id)) || msOf(g.updated_at);
+
+  // value → { label, cmp, stamp } — `stamp` is what the row's meta line shows
+  // for that sort (null = show nothing extra, the priority default).
+  const GOAL_SORTS = {
+    priority: { label: 'priority (version order)', cmp: null, stamp: null },
+    newest: { label: 'newest first', cmp: (a, b) => goalCreatedMs(b) - goalCreatedMs(a), stamp: (g) => ({ label: 'created', ms: goalCreatedMs(g) }) },
+    oldest: { label: 'oldest first', cmp: (a, b) => goalCreatedMs(a) - goalCreatedMs(b), stamp: (g) => ({ label: 'created', ms: goalCreatedMs(g) }) },
+    active: { label: 'recently active', cmp: (a, b) => goalActivityMs(b) - goalActivityMs(a), stamp: (g) => ({ label: 'last work', ms: goalActivityMs(g) }) },
+  };
+  const GOAL_SORT_PREF = 'otb.goals.sort';
+  const currentGoalSort = () => GOAL_SORTS[$('#f-goal-order')?.value] || GOAL_SORTS.priority;
+
+  // Stable: filteredGoals already returns the server's priority order, and
+  // Array#sort is stable in every browser this hall supports — so goals sharing
+  // a timestamp (or both missing one) keep their priority order as the tiebreak.
+  function sortGoals(rows) {
+    const { cmp } = currentGoalSort();
+    return cmp ? rows.slice().sort(cmp) : rows;
+  }
+
   // Fetch every task for the versions the goals span (one request each, with dep
   // summaries) and fold into per-goal rollups. Failure-tolerant: an older server
   // that doesn't honor include=deps just yields empty rollups and the list falls
@@ -185,6 +224,7 @@
       getJSON(`${API}/tasks?version=${encodeURIComponent(v)}&include=deps`)
         .then((r) => r.tasks || []).catch(() => [])));
     const roll = new Map();
+    const activity = new Map();
     for (const t of lists.flat()) {
       if (t.goal_id == null) continue;
       const key = String(t.goal_id);
@@ -194,8 +234,16 @@
       r[bucket] += 1;
       if (bucket !== 'cut') r.total += 1;
       if (bucket === 'ready' && !r.nextReady) r.nextReady = t;
+      // task 1002965 — ANY task activity counts (owner call), not just ships: a
+      // goal being worked right now should read as active before anything lands.
+      // updated_at moves on every task write (claim, status flip, edit), so it
+      // dominates in practice; shipped_at is folded in because a task can be
+      // shipped by a path that stamps it without touching updated_at.
+      const ts = taskActivityMs(t);
+      if (ts && ts > (activity.get(key) || 0)) activity.set(key, ts);
     }
     state.rollups = roll;
+    state.activity = activity;
   }
 
   /* ---------------- list view ---------------- */
@@ -263,6 +311,16 @@
   // task 1002439 — one goal, rendered as a rollup row: criteria ring · title +
   // meta + readiness rollup · one next action (claim the next ready task, drill
   // into what's blocking, or a review/achieved note).
+  // task 1002965 — under a date sort, the row states the date it was ordered on
+  // ("created Aug 4" / "last work Aug 16"); under the priority default it shows
+  // nothing extra, so the row is unchanged for anyone who never touches Sort.
+  function goalStampHtml(g) {
+    const { stamp } = currentGoalSort();
+    if (!stamp) return '';
+    const { label, ms } = stamp(g);
+    return ` · ${escapeHtml(label)} ${escapeHtml(ms ? fmtDate(new Date(ms).toISOString()) : '—')}`;
+  }
+
   function goalRowHtml(g) {
     const d = state.details.get(String(g.id));
     const crit = d ? (d.criteria || []) : [];
@@ -292,7 +350,7 @@
       <div class="gr-ringcol">${ringHtml}</div>
       <div class="gr-main">
         <a class="gr-title" href="${goalHref}">${escapeHtml(g.title || 'Untitled goal')}</a>
-        <div class="gr-meta">#${escapeHtml(String(g.id))} · ${escapeHtml(g.version_id || '')}${(achieved || g.status === 'open') ? '' : ' · ' + escapeHtml(g.status)}</div>
+        <div class="gr-meta">#${escapeHtml(String(g.id))} · ${escapeHtml(g.version_id || '')}${(achieved || g.status === 'open') ? '' : ' · ' + escapeHtml(g.status)}${goalStampHtml(g)}</div>
         ${achieved ? '' : goalRollLine(r)}
       </div>
       <div class="gr-right">${right}</div>
@@ -323,11 +381,14 @@
       const r = rollupOf(g.id);
       return g.status === 'open' && r.ready === 0 && r.active === 0 && r.blocked > 0;
     };
-    const achieved = rows.filter((g) => g.status === 'achieved');
-    const archived = rows.filter((g) => g.status === 'archived');
+    // task 1002965 — the Sort choice orders goals WITHIN each group; the
+    // Active / Blocked / Achieved / Archived grouping (task 1002439's momentum
+    // layout) is what the page is for and is never re-ordered away.
+    const achieved = sortGoals(rows.filter((g) => g.status === 'achieved'));
+    const archived = sortGoals(rows.filter((g) => g.status === 'archived'));
     const openRows = rows.filter((g) => g.status !== 'achieved' && g.status !== 'archived');
-    const blocked = openRows.filter(isBlocked);
-    const active = openRows.filter((g) => !isBlocked(g));
+    const blocked = sortGoals(openRows.filter(isBlocked));
+    const active = sortGoals(openRows.filter((g) => !isBlocked(g)));
 
     let R = 0, A = 0, B = 0;
     openRows.forEach((g) => { const r = rollupOf(g.id); R += r.ready; A += r.active; B += r.blocked; });
@@ -339,7 +400,16 @@
 
     const sec = (label, n) => `<div class="gr-sec"><b>${label}</b><span class="gr-sec__n">${n}</span></div>`;
     const listOf = (arr) => `<div class="gr-list">${arr.map(goalRowHtml).join('')}</div>`;
-    const pill = (g) => `<a class="gr-pill" href="#/goal/${escapeHtml(String(g.id))}"><span class="gr-pill__ok">✓</span><b>${escapeHtml(g.title || 'Untitled')}</b><span class="gr-pill__id">#${escapeHtml(String(g.id))}</span></a>`;
+    // task 1002965 — an achieved/archived goal is a compact pill, so its sort
+    // date rides as its own muted span (the row's `gr-meta` equivalent). The
+    // pills row already wraps, so the extra text can't widen the page.
+    const pillWhen = (g) => {
+      const { stamp } = currentGoalSort();
+      if (!stamp) return '';
+      const { label, ms } = stamp(g);
+      return `<span class="gr-pill__when">${escapeHtml(label)} ${escapeHtml(ms ? fmtDate(new Date(ms).toISOString()) : '—')}</span>`;
+    };
+    const pill = (g) => `<a class="gr-pill" href="#/goal/${escapeHtml(String(g.id))}"><span class="gr-pill__ok">✓</span><b>${escapeHtml(g.title || 'Untitled')}</b><span class="gr-pill__id">#${escapeHtml(String(g.id))}</span>${pillWhen(g)}</a>`;
 
     grid.innerHTML = summary
       + (active.length ? sec('Active', active.length) + listOf(active) : '')
@@ -1810,17 +1880,34 @@
   }
 
   // task 1932 — any list filter change re-paginates the grid from page 1.
-  const onListFilterChange = () => { pagers.list.page = 1; renderList(); };
+  // task 1002965 — and the Sort choice is remembered, so a builder who prefers
+  // "recently active" doesn't re-pick it on every visit. localStorage (not the
+  // kit's `url` mode): this page owns the #/goal/N hash route and its own boot
+  // reads it, so keeping the pref off the URL leaves deep links shareable and
+  // unchanged. Private-mode writes throw — swallowed, the pref is a nicety.
+  const onListFilterChange = () => {
+    try { window.localStorage.setItem(GOAL_SORT_PREF, $('#f-goal-order')?.value || 'priority'); } catch (_) { /* private mode */ }
+    pagers.list.page = 1;
+    renderList();
+  };
   // task 2171 — the list filter bar is a kit filterBar: Version / Status /
   // Membership, all primary (no overflow needed). Control ids are unchanged
   // (f-goal-version, f-goal-status, f-goal-mine) so filteredGoals' reads +
   // populateVersionFilter's dynamic option fill keep working untouched.
+  // task 1002965 adds Sort (f-goal-order — NOT f-goal-sort, which is already
+  // taken by the goal-detail To-do bar further down this file).
+  let savedGoalSort = null;
+  try { savedGoalSort = window.localStorage.getItem(GOAL_SORT_PREF); } catch (_) { /* private mode */ }
   makeFilterBar({
     mount: $('#goals-filters'),
     primary: [
       { id: 'f-goal-version', label: 'Version', options: [{ value: '', label: '— any —' }] },
       { id: 'f-goal-status', label: 'Status', options: [{ value: '', label: '— any —' }, 'open', 'achieved', 'archived'] },
       { id: 'f-goal-mine', label: 'Membership', options: [{ value: '', label: 'All goals' }, { value: 'mine', label: 'My goals' }] },
+      { id: 'f-goal-order',
+        label: 'Sort',
+        value: GOAL_SORTS[savedGoalSort] ? savedGoalSort : undefined,
+        options: Object.entries(GOAL_SORTS).map(([value, { label }]) => ({ value, label })) },
     ],
     onChange: onListFilterChange,
   });

package/modules/hall-ui/public/goals.css

@@ -251,6 +251,9 @@ a.goal-card:hover { text-decoration: none; border-color: var(--border-strong); b
 .gr-pill b { color: var(--ink); font-weight: 600; }
 .gr-pill__ok { width: 17px; height: 17px; border-radius: 50%; background: var(--ok-weak); color: var(--ok); display: grid; place-items: center; font-size: 10px; font-weight: 800; }
 .gr-pill__id { color: var(--ink-faint); font-variant-numeric: tabular-nums; }
+/* task 1002965 — the date an achieved/archived pill was ordered on, shown only
+   while a date sort is active (the pill's counterpart to .gr-meta). */
+.gr-pill__when { color: var(--ink-faint); font-variant-numeric: tabular-nums; }
 .gr-pills--muted { opacity: .6; }
 
 @media (max-width: 640px) {

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.164",
+  "version": "1.19.166",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.164",
+      "version": "1.19.166",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.164",
+  "version": "1.19.166",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/scripts/gds/seed-bv1-privacy-invites-tasks.js

@@ -0,0 +1,133 @@
+// Seed the privacy-model + invite-inbox build tasks the 1002785 spike scoped,
+// under goal 1000045 "Public builder profiles" (BONGOS-V1, internal).
+//
+// Source of truth: docs/specs/bongos-v1-privacy-and-invites.md (owner-signed
+// 2026-08-16 on the sliver + expiry decisions). Idempotent on source_ref
+// bv1-privacy-PVnn; safe to re-run. PV4 stays backlog deliberately — its
+// instance-invite half attaches to the console wave's R2/R6 (spike 1002786),
+// which seeds into its own goal; only PV6 is promoted (fully independent).
+//
+// Run: node scripts/gds/seed-bv1-privacy-invites-tasks.js
+
+const { apiCall } = require('./cli-lib');
+
+const VER = 'BONGOS-V1';
+const GOAL = 1000045;
+const SRC = 'planning-session';
+const SPEC = 'docs/specs/bongos-v1-privacy-and-invites.md';
+
+// Existing tasks referenced by id (seed-bv1-profiles-tasks.js).
+const R02 = 1002278, R03 = 1002279;
+
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+
+// Throttled + 429-aware wrapper (same shape as the sibling seeders).
+async function api(method, path, body, _tries = 0) {
+  await sleep(1500);
+  const r = await apiCall(method, `/api/gds${path}`, body);
+  if (r.status === 429 && _tries < 8) {
+    const wait = (r.data?.error?.details?.retry_after_seconds || 30) + 1;
+    console.log(`  …rate-limited, waiting ${wait}s`);
+    await sleep(wait * 1000);
+    return api(method, path, body, _tries + 1);
+  }
+  return r;
+}
+
+const NEW_TASKS = [
+  {
+    ref: 'PV1', kind: 'feature', prio: 3, est: 120, crit: ['C2'], deps: [R03],
+    title: 'Privacy flags: account_visibility + recruiter_discoverable on platform accounts',
+    desc: `Add account_visibility ('public'|'private', default 'public') and recruiter_discoverable (boolean NULL — tri-state; effective = COALESCE(flag, visibility='public')) to platform_identity_accounts via an additive platform_identity_* migration. Extend the own-scoped PATCH write path task ${R03} (R03) establishes for hide_stats to cover both, and add the two settings rows to the profile rail (coordinate P04, task 1002800). The discoverable toggle's copy must state exactly what it grants: the D3 sliver (name, disciplines, active-recently), name-only if stats are hidden. Model + defaults: ${SPEC} D1.`,
+  },
+  {
+    ref: 'PV2', kind: 'feature', prio: 3, est: 180, crit: ['C1', 'C2'], deps: [R02],
+    title: 'Effective-visibility enforcement: one shared predicate across every public read',
+    desc: `One helper (SQL predicate + port function, the ADR 0171 D2 "enforced next to the data" pattern) that every public surface uses: /u/<handle> returns 404 (never 403) for private accounts TO EVERYONE INCLUDING SELF on the public read (the page renders self-view via the own-scope side door instead — D2's viewer-independence reconciliation); private accounts absent from search, leaderboards, sitemap; the rollup predicate extends profile_state='active' AND NOT hide_stats with visibility. No surface writes its own variant — drift here is a privacy leak. Matrix: ${SPEC} D2. Also depends on PV1 (bv1-privacy-PV1).`,
+  },
+  {
+    ref: 'PV3', kind: 'feature', prio: 3, est: 120, crit: ['C2', 'C5'], deps: [],
+    title: 'getRecruiterSliver port + recruiting-surface gating (the pre-accept boundary)',
+    desc: `The owner-signed D3 sliver: handle, display name, avatar, disciplines union, active-in-last-30-days boolean — nothing else, name-only when hide_stats is true, never for provisional accounts, never a profile-page link. Authorization-scoped port getRecruiterSliver(githubId) beside getPublicProfileExtras, whitelist-shaped inside platform-identity, its own planted-sentinel leak test (tests/profile_route.mjs pattern), route-gated by project.recruit (the console wave's atom — coordinate spike 1002786 R3). Depends on PV1+PV2 (bv1-privacy-PV1/PV2). Boundary: ${SPEC} D3.`,
+  },
+  {
+    ref: 'PV4', kind: 'feature', prio: 3, est: 120, crit: ['C3'], deps: [],
+    title: 'Invite lifecycle: 30-day read-time expiry, seen_at, decline closes the door',
+    desc: `Owner-signed: a recruit invite's pre-approved sign-in door expires 30 days after creation, enforced READ-TIME (the sign-in gate's invited-check + every queue view compute created_at + 30 days; no sweeper). seen_at lands on the hub notification row (set on first inbox render) and on goal_membership_requests for parity (goal invites get NO expiry — not an admission door). Decline in the inbox relays a door-close to the instance (invite row → dismissed) so no declined invite leaves a live door. COORDINATION: the invite storage itself is the console wave's R2 (access_requests kind='invite') and rescind-cleans-both-sides is its R6 (spike 1002786) — this task lands the states on whatever R2/R6 ship, which is why it stays backlog until that wave seeds. Lifecycle: ${SPEC} D4.`,
+  },
+  {
+    ref: 'PV5', kind: 'feature', prio: 3, est: 90, crit: ['C3'], deps: [],
+    title: 'Hub inbox project slice: recruit invites in the attention card',
+    desc: `A project slice in the EXISTING attention card (goal-inbox.js slice pattern + window.OTBAttention.refresh()), on the hub hall + apex home, fed by the existing GET /my-projects/invites. Accept = "open <project> — sign in" link (clicking through IS acceptance, console D2); Decline = the PV4 door-close path. No parallel inbox; federated instances' halls link out only (V1). Notification path IS the inbox — SSE/email explicitly deferred. Depends on PV4 (bv1-privacy-PV4). Shape: ${SPEC} D5.`,
+  },
+  {
+    ref: 'PV6', kind: 'feature', prio: 4, est: 90, crit: [], deps: [], ready: true,
+    title: 'Private goals: accepting_requests toggle + owner rescind-pending-invite route',
+    desc: `goals.accepting_requests boolean default true — a private goal with it false refuses join-requests with honest copy ("this goal isn't taking requests right now"); invitations unaffected; UI shows the toggle only on private goals. Plus the missing half of core_188's 'cancelled' state: an owner/manager route to rescind a PENDING invitation (only requester-withdraw exists today — modules/lifecycle/routes/goals.js). Design: ${SPEC} D6.`,
+  },
+  {
+    ref: 'PV7', kind: 'feature', prio: 3, est: 90, crit: ['C4'], deps: [],
+    title: 'Applications carry the applicant profile: note through the relay, live render in the queue',
+    desc: `One rule, no new disclosure class: the reviewer sees what the applicant's profile rules would show them + the applicant's note, evaluated LIVE at review time (never a snapshot — hide takes effect on next render, C2). Public account → public profile view; private account → the D3 sliver (the apply UI states "your application shares: …"). Plumbing: POST /my-projects/join gains an applicant-supplied note (capped ~500 chars, sanitized; replaces the hardcoded 'via platform My Projects'), and the reviewer queue (console R4's page — spike 1002786) resolves the profile from the hub at render. Depends on PV3 (bv1-privacy-PV3). Rule: ${SPEC} D7.`,
+  },
+  {
+    ref: 'PV8', kind: 'verify', prio: 3, est: 60, crit: ['C2'], deps: [],
+    title: 'PROOF: the privacy matrix as a test',
+    desc: `The D2 matrix, asserted: a private account's /u/<handle> public read 404s to a stranger AND to its own authenticated session (the page self-view comes from the own-scope endpoint — assert both halves, this is P10 task 1002806 sharpened); hidden stats never appear in any response (planted sentinels); the recruiter sliver is exactly D3's shape (leak test on the port); an expired invite refuses sign-in; a declined invite's door is closed instance-side. Depends on PV2+PV3+PV4 (bv1-privacy-PV2/PV3/PV4). Matrix: ${SPEC} D2.`,
+  },
+];
+
+(async () => {
+  console.log(`Seeding privacy+invites tasks under goal ${GOAL} (${VER})…`);
+  const idByRef = {};
+  let created = 0, existing = 0;
+
+  for (const t of NEW_TASKS) {
+    const r = await api('POST', '/tasks', {
+      version_id: VER,
+      goal_id: GOAL,
+      title: t.title,
+      description: t.desc,
+      kind: t.kind,
+      discipline: 'engineer',
+      priority: t.prio,
+      est_minutes: t.est,
+      criterion_ids: t.crit,
+      source: SRC,
+      source_ref: `bv1-privacy-${t.ref}`,
+    });
+    if (!r.ok) { console.log(`  ${t.ref}: FAILED ${r.status} ${JSON.stringify(r.data)}`); continue; }
+    const task = r.data.task || r.data;
+    idByRef[t.ref] = Number(task.id);
+    if (r.data.idempotent || r.data.existing) existing++; else created++;
+    console.log(`  ${t.ref} → task ${task.id} (${t.kind}, P${t.prio})`);
+  }
+
+  console.log('Wiring dependencies…');
+  const DEP_SETS = [
+    ['PV1', [R03]],
+    ['PV2', [R02, idByRef.PV1]],
+    ['PV3', [idByRef.PV1, idByRef.PV2]],
+    ['PV5', [idByRef.PV4]],
+    ['PV7', [idByRef.PV3]],
+    ['PV8', [idByRef.PV2, idByRef.PV3, idByRef.PV4]],
+  ];
+  for (const [ref, deps] of DEP_SETS) {
+    const id = idByRef[ref];
+    const clean = deps.filter(Boolean);
+    if (!id || !clean.length) continue;
+    const r = await api('PUT', `/tasks/${id}/dependencies`, { depends_on_task_ids: clean });
+    console.log(`  ${ref} (task ${id}) depends on [${clean.join(', ')}]: ${r.ok ? 'ok' : 'FAILED ' + r.status + ' ' + JSON.stringify(r.data).slice(0, 160)}`);
+  }
+
+  console.log('Promoting the independent root…');
+  for (const t of NEW_TASKS.filter((x) => x.ready)) {
+    const id = idByRef[t.ref];
+    if (!id) continue;
+    const r = await api('POST', `/tasks/${id}/promote`, {});
+    console.log(`  ${t.ref} (task ${id}): ${r.ok ? 'ready' : 'promote note ' + JSON.stringify(r.data).slice(0, 120)}`);
+  }
+
+  console.log(`\nDONE. created=${created} existing=${existing}.`);
+  console.log('ref→id:', JSON.stringify(idByRef));
+})();

package/src/module-api.js

@@ -755,8 +755,12 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 //         landed since 1.19.162 with no explicit bump. run 31959864781. (task 1002620)
 //   1.19.164 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
 //         landed since 1.19.163 with no explicit bump. run 31960518012. (task 1002620)
+//   1.19.165 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.164 with no explicit bump. run 31960929146. (task 1002620)
+//   1.19.166 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.165 with no explicit bump. run 31961272140. (task 1002620)
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.164'; // CI auto-patch carrier (ADR 0161); see changelog above
+const CORE_VERSION = '1.19.166'; // CI auto-patch carrier (ADR 0161); see changelog above
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');