@bongos/core 1.19.279 → 1.19.281

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.279",
-  "core_contract": "1.19.279",
-  "source_commit": "20fdd2b00fa489173ea330aeec453d56dcb6999a",
+  "core_version": "1.19.281",
+  "core_contract": "1.19.281",
+  "source_commit": "8168c84068013951eb10997c907364f83ce75c41",
   "source_ref": "HEAD",
-  "built_at": "2026-08-21T20:04:41.616Z",
+  "built_at": "2026-08-21T20:44:54.338Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 319,
     "agent_docs_stubbed": 22,
-    "functional_verbatim": 1377,
+    "functional_verbatim": 1379,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 1718,
-  "tree_sha256": "98ca3398579326bf1dc3356202895e6911341413dbf4e0238347e3357888565f",
+  "file_count": 1720,
+  "tree_sha256": "25f5890b14cadc545cc56d99e7e6a64a7e56cd5be56619c519a254cbb9d92e75",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -42,7 +42,7 @@
     {
       "path": ".claude/skills/builder-claim/SKILL.md",
       "mode": "0000644",
-      "sha256": "076e3143a87c2257389a710de69e7b5b2c14cd353e0eff4d53b7b01444fc5ae0"
+      "sha256": "057a5bac75084ea29e5dc3da1cf457089d77c882bfb34936f3c0b37889edc1c3"
     },
     {
       "path": ".claude/skills/builder-connect/SKILL.md",
@@ -1432,12 +1432,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "5d38acb7694c5e60631e0ba4ad00f9ce79fd7b761434e6c55de9b1034b62722e"
+      "sha256": "8762a567d25d76bc8980fdfa838415fc57875dbe29a4a61a6a69648bd88764a9"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "6d4123b12211e88f62337fb4f76743459af1af9629a1e6215676fdcc19a2f71f"
+      "sha256": "64002950de1c52d5e2efa686337f63ca487e66acbd3562467062f3b885bbe5ee"
     },
     {
       "path": "docs/design-contract.md",
@@ -3384,10 +3384,15 @@
       "mode": "0000644",
       "sha256": "ede756a5c11c8c6a9eca4c841f2110a5e05293b0fbd6d34a5c90a05dc02943c4"
     },
+    {
+      "path": "modules/hall-ui/public/goals-lib.js",
+      "mode": "0000644",
+      "sha256": "b899d1245f1138bf0e82115b80664eaa68ed2601c940bb0848ce2b784866d3e3"
+    },
     {
       "path": "modules/hall-ui/public/goals-page.js",
       "mode": "0000644",
-      "sha256": "9ab3110d4854ecde5899b8e83180d05d4fc8ac37803354e51963cda1eb79d4ed"
+      "sha256": "5f7f697697f4055ed971290477474a5ea292b689c726fd3640f994274351c74e"
     },
     {
       "path": "modules/hall-ui/public/goals.css",
@@ -3397,7 +3402,7 @@
     {
       "path": "modules/hall-ui/public/goals.html",
       "mode": "0000644",
-      "sha256": "cbcdd371061ec71ba0ad6e9ac9ebff4c07bb66a2534decc8c8dfe0c3c436f2c2"
+      "sha256": "a5c0b76c5b54dfcb4c7b15a33df36915d05f7ebd48af9d5b07764705a9c15ab9"
     },
     {
       "path": "modules/hall-ui/public/goals.js",
@@ -4497,12 +4502,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "66c790ddb5f66b9c7e5961f8402a508bdb36d5dddf35215401eda673a115c003"
+      "sha256": "f34b9127add69e5df54c04f17c000b3ba4f8b9a9e9512ec9693a3b5db13e31ed"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "ea43d45c4c7ef30f10935c5ec6e967e9a1c707a6f9a69ed7f5f6b2e5771fef8e"
+      "sha256": "4812dd4532a848fcd415884d02d9edf9382842cf610b7e2783f3d86f9ef071b4"
     },
     {
       "path": "public-docs/index.html",
@@ -4977,7 +4982,7 @@
     {
       "path": "scripts/gds/claim.js",
       "mode": "0000644",
-      "sha256": "6f09d9344f57039c07d2de943dabb48dbf717226aa2667f4163dab47fb74428a"
+      "sha256": "3e830a3e319c4b67d87547ae4ad2d647ee3ce74725c84d7f64788c094f0974c7"
     },
     {
       "path": "scripts/gds/classify-discipline.js",
@@ -6147,7 +6152,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "e58b6609edc9a144ab403e149a715aebdc324b598244833d1ef3a6aa3713f88a"
+      "sha256": "e0b8de84c67b45231d369c65828a47faa090829545fa61b3cab39b1de700a6b9"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -6582,7 +6587,7 @@
     {
       "path": "tests/claim_error_surface.mjs",
       "mode": "0000644",
-      "sha256": "365f498d290298e0cd74888aff080cfbf3439e5e0cf2dd883291f39dface27e7"
+      "sha256": "33b0bbbb4c1a1f8b44a71c692a40b8a7e9cdde2e32483226484427ccf24238b5"
     },
     {
       "path": "tests/claim_gate_open_blocker.mjs",
@@ -7072,7 +7077,7 @@
     {
       "path": "tests/goal_criterion_confirm_ui.mjs",
       "mode": "0000644",
-      "sha256": "a677104300f3dc266438f342ec9492304827377a55b10e1572491a2eb26eca80"
+      "sha256": "e5d89c6cb1423d1143927b270f456f781a0e0d11ce45f13249e9aba42930db77"
     },
     {
       "path": "tests/goal_dependencies_read.mjs",
@@ -7109,6 +7114,11 @@
       "mode": "0000644",
       "sha256": "412ca7c0bdc10abc90146b777571bcc7a180e19f0e3d058c6998ac2d33941940"
     },
+    {
+      "path": "tests/goals_lib.mjs",
+      "mode": "0000644",
+      "sha256": "5377b04f5c2153d1edcd5f38604a24195a2da8e4f7dcbc95692ceb7a1079354a"
+    },
     {
       "path": "tests/government_abuse_matrix.mjs",
       "mode": "0000644",

package/.claude/skills/builder-claim/SKILL.md

@@ -66,6 +66,11 @@ The server now **enforces** the one-claim half (task 1642): `POST /api/gds/claim
 
 11. **On `session_already_has_active_claim`** (task 1642 — applies to **all ranks**): this *session* already holds an active claim, and a session may hold only one (one worktree → one branch → no commingled ships). The body names `active_task_id` + `active_task_title`. Surface them with `what_to_do`: either `/builder-ship N` (or `/builder-release N`) the in-flight task first, **or** open a fresh worktree/session for this new task and claim there. Do not retry in the same worktree — the refusal is the guard working. (`session_claim_check_failed` is the rare fail-closed variant when the server couldn't verify the session state; same remedy — retry, or use a fresh session/worktree.)
 
+12. **On `GOAL_MEMBERSHIP_REQUIRED`** (task 1003137/1003138): the task lives in a goal the builder hasn't joined. The refusal is resolvable **in-session — never send the builder to the hall UI**. The body carries `goal_id`, `visibility`, and the `action` (`join` | `apply`); the CLI already renders the offer and, on a TTY, prompts `[Y/n]` itself. In an agent session (no TTY) the CLI prints the one-command path instead — narrate the same offer to the user:
+    - **`action: join`** (public goal): offer *"Task N lives in goal G ("title", public) — you're not a member. Join and claim?"* On yes, run `node scripts/gds/claim.js <task-id> --join` — it joins the goal and lands the claim in one command. On no, stop: declining leaves no membership row.
+    - **`action: apply`** (private goal, or a public goal with Archon-mediated protected scope): offer to file the application. On yes, run the same `--join` command — it files exactly one pending request and states plainly that **nothing can be claimed until an owner approves** (do not retry the claim; check the goal inbox later). Re-running reports "already pending", not an error. A private goal's refusal deliberately carries no title or scope — don't guess at them.
+    - **Never pass `--join` without the user's yes.** The owner chose the explicit-join model: the offer is a prompt, not a silent side effect.
+
 ## Constraints
 
 - **Don't retry on conflict.** Failures here are intentional — they protect us from race conditions.