@bongos/core 1.19.286 → 1.19.287

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.286",
-  "core_contract": "1.19.286",
-  "source_commit": "340b919c505ff5fc5c7701cff26cc21dc237aa65",
+  "core_version": "1.19.287",
+  "core_contract": "1.19.287",
+  "source_commit": "0e9c40ea9f9cbd3b8d38d4b84d2cbca469e939e2",
   "source_ref": "HEAD",
-  "built_at": "2026-08-21T22:36:56.458Z",
+  "built_at": "2026-08-22T00:14:41.365Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 319,
     "agent_docs_stubbed": 22,
-    "functional_verbatim": 1383,
+    "functional_verbatim": 1385,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 1724,
-  "tree_sha256": "b9e4aeff64c00012240dbc9966201e7e8d6d1068ce7a1c91e7112d9234c5c305",
+  "file_count": 1726,
+  "tree_sha256": "fc0bf7930e91aebc3ad1c590e667763ca5008d9a2d5edbc91957ae352762443d",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -347,12 +347,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "28ea93104b710162845534c03881affa2ebfa5e9e622c195ef5332fb919762c4"
+      "sha256": "75389c8fbcfeb39ce0320d182ea25cc97d2292814743521f834bd98de0ff83da"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "8b6c0691763e21272008f0cb5c24e40d7bc65b297d81e4d1c1b2f58d5f1ab657"
+      "sha256": "f008fd2b92e818e1734bbbd4388af483730050780d14822daf16ca5e05110401"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -362,17 +362,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "3b7b24b5ced8eead07e1d758e4c1b59321b0fb0f2108aefefd0e4b73bb7cc78b"
+      "sha256": "ac7eba0af25322341547f46f9daa385bd557e52c1f580d4873a5d4b35a633ca7"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "183d88c492aae87e1a06a1cb69ba5227db6b023057676637025fee0a77bddd88"
+      "sha256": "6d151ca60431e5346007c1939f10f711111c7b7a38f9914be7c8a6ff12d6a75d"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "0348faad8b08aefdc42d7bdff79a97a94f547f824c3ec37ed7642cde357a6950"
+      "sha256": "60a6ec5d2b7a41e8727769953bd5b38a6746e2373cd8a271ee7b0ba750b84f34"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -1402,12 +1402,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "1f499b7f98aba5e51d30f7e3a76c00a3c1b535fe676eb03a31f1eb559d9a0f13"
+      "sha256": "ae992fbebcc171bbc4e669a45f01d3a5dd840bcaad334262136a2060fc362a43"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "7fa333bb7864fa72672b463f5c53ae9340bd5ecad808bbfe193e835e57ae3e8d"
+      "sha256": "55c2cbd3c8473ed041d0df0c6d9eebe16ed3d333afae9f7dbe3b0ef1a211b4c6"
     },
     {
       "path": "docs/architecture.md",
@@ -3692,7 +3692,7 @@
     {
       "path": "modules/ideas/inbox.js",
       "mode": "0000644",
-      "sha256": "379a6e51a8865dcf52061d858e7e2f3b572f16bc04473aba163e52cadcaf1873"
+      "sha256": "19af72245517260ac6ee670c93fa3cda99a678da25a7fa6a5d6ec565995201ce"
     },
     {
       "path": "modules/ideas/migrations/ideas_001_grades.sql",
@@ -3727,7 +3727,7 @@
     {
       "path": "modules/ideas/routes/inbox.js",
       "mode": "0000644",
-      "sha256": "9c7027f70daba8cb956ab540567972afcec96900ce8d7f7793647bc58c13abdd"
+      "sha256": "47c2a3beb6bed3b206ec36344950fe115189debf75a38cf202bfafaa5dbb2adb"
     },
     {
       "path": "modules/ideas/routing.js",
@@ -3804,6 +3804,11 @@
       "mode": "0000644",
       "sha256": "ff30d2749a0f6b17beb776be2d862967cdea2ad03488e7ab499d2f9d093e8805"
     },
+    {
+      "path": "modules/lifecycle/goal-edits.js",
+      "mode": "0000644",
+      "sha256": "0367f88aefa890d8d7f2472dd847467d632150a93db8a96b85717b5fb1cc8c9e"
+    },
     {
       "path": "modules/lifecycle/hierarchy.js",
       "mode": "0000644",
@@ -3862,7 +3867,7 @@
     {
       "path": "modules/lifecycle/routes/done-when.js",
       "mode": "0000644",
-      "sha256": "c81e1474e237dfa2e3be5f80df56344cf7f9ca50dc7b84e45b2fec64509b900f"
+      "sha256": "7fb4a74237c1f84a5c20591663e634a7b190861e6a3f1c5804e22145ef58f6be"
     },
     {
       "path": "modules/lifecycle/routes/gate-approvals.js",
@@ -3872,7 +3877,7 @@
     {
       "path": "modules/lifecycle/routes/goals.js",
       "mode": "0000644",
-      "sha256": "a986f861d919aec81e58683782ceae902e8590cb581710842113a04439984c16"
+      "sha256": "a94284db44e4108b21ff3a5f60ac25c0b16ff4330839f9d37045e90e763d430e"
     },
     {
       "path": "modules/lifecycle/routes/lifecycle.js",
@@ -4507,12 +4512,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "ade48bed2ae2a0e3019f7937eefa6eff80495f6bb0fa7de7cda033b7e6acee2c"
+      "sha256": "ceaff2d7728751d980cf1e01c3342de37baa727b682bb70a75792f9825752851"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "7eb6abceda41293042967ce827a4fa252646a35b45e60bae9ba1a6a348d320a1"
+      "sha256": "d2d685a112ab41f0698b9fc2436ff0e534bbc3441de3a0ef9c3e1821a92ba37d"
     },
     {
       "path": "public-docs/index.html",
@@ -6022,7 +6027,7 @@
     {
       "path": "src/bongos/route-rank-check.js",
       "mode": "0000644",
-      "sha256": "93b2a09220f4d96f69294531cbca274b1132d164cf32be2f66d40d30e1953551"
+      "sha256": "be8bc6ecd3ab1dbec4d3224d684b64d100920ad2cf7d08c51898160fefdaf534"
     },
     {
       "path": "src/bongos/routes.js",
@@ -6157,7 +6162,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "32e103cd07c81ccc0a2137ef31b3824e5085a93ebf95f9cca7c107d58b25da3c"
+      "sha256": "4d7fa01bf03ea2b91130272d141e16ac4f11aca831b7e6df8fb54eea7ccc8c1f"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -7939,6 +7944,11 @@
       "mode": "0000644",
       "sha256": "211aa868b86a2b663f5525c3d2ddfa406498d608363d28c0786219d3c0b6e249"
     },
+    {
+      "path": "tests/prose_edits.mjs",
+      "mode": "0000644",
+      "sha256": "d5918a7f47e989355e2b78083710736278c6d5f75c13ac8434d5ad6fac6a3d03"
+    },
     {
       "path": "tests/provision.mjs",
       "mode": "0000644",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 290 operations across 47 resource groups
+- 293 operations across 47 resource groups
 
 ## Install
 

package/clients/bongos-client/bongos-client.global.js

@@ -279,6 +279,8 @@ function createClient(opts = {}) {
       postDiscordChannelsReconcile: (args) => request("POST", "/discord/channels/reconcile", { hasBody: true }, args),
     },
     "doneWhen": {
+      // PATCH /done-when/{criterionId} — rank: metic+archon — PATCH /done-when/:criterionId
+      patchDoneWhenCriterionId: (args) => request("PATCH", "/done-when/{criterionId}", { hasBody: true }, args),
       // POST /done-when/{criterionId}/satisfy — rank: metic+archon — POST /done-when/:criterionId/satisfy
       postDoneWhenCriterionIdSatisfy: (args) => request("POST", "/done-when/{criterionId}/satisfy", { hasBody: true }, args),
       // POST /done-when/{criterionId}/unsatisfy — rank: metic+archon — POST /done-when/:criterionId/unsatisfy
@@ -309,6 +311,8 @@ function createClient(opts = {}) {
       postGoals: (args) => request("POST", "/goals", { hasBody: true }, args),
       // GET /goals/{id} — rank: any-builder — GET /goals/:id
       getGoalsId: (args) => request("GET", "/goals/{id}", { hasBody: false }, args),
+      // PATCH /goals/{id} — rank: any-builder — PATCH /goals/:id
+      patchGoalsId: (args) => request("PATCH", "/goals/{id}", { hasBody: true }, args),
       // POST /goals/{id}/archive — rank: metic+archon — POST /goals/:id/archive
       postGoalsIdArchive: (args) => request("POST", "/goals/{id}/archive", { hasBody: true }, args),
       // GET /goals/{id}/conflicts — rank: any-builder — GET /goals/:id/conflicts
@@ -397,6 +401,8 @@ function createClient(opts = {}) {
       getInboxId: (args) => request("GET", "/inbox/{id}", { hasBody: false }, args),
       // PATCH /inbox/{id} — rank: metic+archon — PATCH /inbox/:id
       patchInboxId: (args) => request("PATCH", "/inbox/{id}", { hasBody: true }, args),
+      // PATCH /inbox/{id}/body — rank: any-builder — PATCH /inbox/:id/body
+      patchInboxIdBody: (args) => request("PATCH", "/inbox/{id}/body", { hasBody: true }, args),
       // POST /inbox/{id}/ratify — rank: metic+archon — POST /inbox/:id/ratify
       postInboxIdRatify: (args) => request("POST", "/inbox/{id}/ratify", { hasBody: true }, args),
       // POST /inbox/{id}/resubmit — rank: any-builder — POST /inbox/:id/resubmit

package/clients/bongos-client/index.cjs

@@ -278,6 +278,8 @@ function createClient(opts = {}) {
       postDiscordChannelsReconcile: (args) => request("POST", "/discord/channels/reconcile", { hasBody: true }, args),
     },
     "doneWhen": {
+      // PATCH /done-when/{criterionId} — rank: metic+archon — PATCH /done-when/:criterionId
+      patchDoneWhenCriterionId: (args) => request("PATCH", "/done-when/{criterionId}", { hasBody: true }, args),
       // POST /done-when/{criterionId}/satisfy — rank: metic+archon — POST /done-when/:criterionId/satisfy
       postDoneWhenCriterionIdSatisfy: (args) => request("POST", "/done-when/{criterionId}/satisfy", { hasBody: true }, args),
       // POST /done-when/{criterionId}/unsatisfy — rank: metic+archon — POST /done-when/:criterionId/unsatisfy
@@ -308,6 +310,8 @@ function createClient(opts = {}) {
       postGoals: (args) => request("POST", "/goals", { hasBody: true }, args),
       // GET /goals/{id} — rank: any-builder — GET /goals/:id
       getGoalsId: (args) => request("GET", "/goals/{id}", { hasBody: false }, args),
+      // PATCH /goals/{id} — rank: any-builder — PATCH /goals/:id
+      patchGoalsId: (args) => request("PATCH", "/goals/{id}", { hasBody: true }, args),
       // POST /goals/{id}/archive — rank: metic+archon — POST /goals/:id/archive
       postGoalsIdArchive: (args) => request("POST", "/goals/{id}/archive", { hasBody: true }, args),
       // GET /goals/{id}/conflicts — rank: any-builder — GET /goals/:id/conflicts
@@ -396,6 +400,8 @@ function createClient(opts = {}) {
       getInboxId: (args) => request("GET", "/inbox/{id}", { hasBody: false }, args),
       // PATCH /inbox/{id} — rank: metic+archon — PATCH /inbox/:id
       patchInboxId: (args) => request("PATCH", "/inbox/{id}", { hasBody: true }, args),
+      // PATCH /inbox/{id}/body — rank: any-builder — PATCH /inbox/:id/body
+      patchInboxIdBody: (args) => request("PATCH", "/inbox/{id}/body", { hasBody: true }, args),
       // POST /inbox/{id}/ratify — rank: metic+archon — POST /inbox/:id/ratify
       postInboxIdRatify: (args) => request("POST", "/inbox/{id}/ratify", { hasBody: true }, args),
       // POST /inbox/{id}/resubmit — rank: any-builder — POST /inbox/:id/resubmit

package/clients/bongos-client/index.d.ts

@@ -123,10 +123,12 @@ export interface PatchBuildersIdBudgetResponse { builder: unknown }
 export interface PatchBuildersIdRankRequest { rank: string }
 export interface PatchBuildersIdRankResponse { builder: unknown; previous_rank: unknown; direction: unknown; credit_delta: unknown; broadcast: unknown }
 export interface PatchBuildersIdStatusRequest { status: "active" | "inactive"; reason?: string }
+export interface PatchDoneWhenCriterionIdRequest { criterion_md: string }
+export interface PatchDoneWhenCriterionIdResponse { ok: boolean; criterion: unknown; deltas: unknown; unchanged: boolean }
 export interface PatchGoalsIdMembersBuilderIdRequest { membership_kind: string }
 export interface PatchGoalsIdMembersBuilderIdResponse { ok: boolean; member: unknown; changed: boolean }
-export interface PatchGoalsIdVisibilityRequest { visibility: string }
-export interface PatchGoalsIdVisibilityResponse { ok: boolean; goal: unknown }
+export interface PatchInboxIdBodyRequest { body_md: string }
+export interface PatchInboxIdBodyResponse { ok: boolean; idea: unknown; delta: unknown; unchanged: unknown }
 export interface PatchInboxIdRequest { status?: "open" | "promoted" | "discarded" | "merged"; kind?: string; promoted_to_task_id?: number; reviewed_at?: unknown; merged_into_idea_id?: number; triage_note?: string }
 export interface PatchInboxIdResponse { idea: unknown }
 export interface PatchMeCrossProjectRequest { hide_stats: boolean }
@@ -538,6 +540,8 @@ export interface BongosClient {
     postDiscordChannelsReconcile(args?: RequestArgs): Promise<PostDiscordChannelsReconcileResponse>;
   };
   "doneWhen": {
+    /** PATCH /done-when/{criterionId} — rank: metic+archon */
+    patchDoneWhenCriterionId(args: RequestArgs & { body: PatchDoneWhenCriterionIdRequest }): Promise<PatchDoneWhenCriterionIdResponse>;
     /** POST /done-when/{criterionId}/satisfy — rank: metic+archon */
     postDoneWhenCriterionIdSatisfy(args?: RequestArgs & { body?: PostDoneWhenCriterionIdSatisfyRequest }): Promise<PostDoneWhenCriterionIdSatisfyResponse>;
     /** POST /done-when/{criterionId}/unsatisfy — rank: metic+archon */
@@ -568,6 +572,8 @@ export interface BongosClient {
     postGoals(args: RequestArgs & { body: PostGoalsRequest }): Promise<PostGoalsResponse>;
     /** GET /goals/{id} — rank: any-builder */
     getGoalsId(args?: RequestArgs): Promise<GetGoalsIdResponse>;
+    /** PATCH /goals/{id} — rank: any-builder */
+    patchGoalsId(args?: RequestArgs): Promise<ApiResponse>;
     /** POST /goals/{id}/archive — rank: metic+archon */
     postGoalsIdArchive(args?: RequestArgs): Promise<PostGoalsIdArchiveResponse>;
     /** GET /goals/{id}/conflicts — rank: any-builder */
@@ -605,7 +611,7 @@ export interface BongosClient {
     /** POST /goals/{id}/transfer — rank: any-builder */
     postGoalsIdTransfer(args?: RequestArgs & { body?: PostGoalsIdTransferRequest }): Promise<PostGoalsIdTransferResponse>;
     /** PATCH /goals/{id}/visibility — rank: any-builder */
-    patchGoalsIdVisibility(args: RequestArgs & { body: PatchGoalsIdVisibilityRequest }): Promise<PatchGoalsIdVisibilityResponse>;
+    patchGoalsIdVisibility(args?: RequestArgs): Promise<ApiResponse>;
     /** GET /goals/inbox — rank: any-builder */
     getGoalsInbox(args?: RequestArgs): Promise<ApiResponse>;
     /** POST /goals/reorder — rank: metic+archon */
@@ -656,6 +662,8 @@ export interface BongosClient {
     getInboxId(args?: RequestArgs): Promise<GetInboxIdResponse>;
     /** PATCH /inbox/{id} — rank: metic+archon */
     patchInboxId(args?: RequestArgs & { body?: PatchInboxIdRequest }): Promise<PatchInboxIdResponse>;
+    /** PATCH /inbox/{id}/body — rank: any-builder */
+    patchInboxIdBody(args: RequestArgs & { body: PatchInboxIdBodyRequest }): Promise<PatchInboxIdBodyResponse>;
     /** POST /inbox/{id}/ratify — rank: metic+archon */
     postInboxIdRatify(args?: RequestArgs & { body?: PostInboxIdRatifyRequest }): Promise<ApiResponse>;
     /** POST /inbox/{id}/resubmit — rank: any-builder */

package/clients/bongos-client/index.mjs

@@ -275,6 +275,8 @@ export function createClient(opts = {}) {
       postDiscordChannelsReconcile: (args) => request("POST", "/discord/channels/reconcile", { hasBody: true }, args),
     },
     "doneWhen": {
+      // PATCH /done-when/{criterionId} — rank: metic+archon — PATCH /done-when/:criterionId
+      patchDoneWhenCriterionId: (args) => request("PATCH", "/done-when/{criterionId}", { hasBody: true }, args),
       // POST /done-when/{criterionId}/satisfy — rank: metic+archon — POST /done-when/:criterionId/satisfy
       postDoneWhenCriterionIdSatisfy: (args) => request("POST", "/done-when/{criterionId}/satisfy", { hasBody: true }, args),
       // POST /done-when/{criterionId}/unsatisfy — rank: metic+archon — POST /done-when/:criterionId/unsatisfy
@@ -305,6 +307,8 @@ export function createClient(opts = {}) {
       postGoals: (args) => request("POST", "/goals", { hasBody: true }, args),
       // GET /goals/{id} — rank: any-builder — GET /goals/:id
       getGoalsId: (args) => request("GET", "/goals/{id}", { hasBody: false }, args),
+      // PATCH /goals/{id} — rank: any-builder — PATCH /goals/:id
+      patchGoalsId: (args) => request("PATCH", "/goals/{id}", { hasBody: true }, args),
       // POST /goals/{id}/archive — rank: metic+archon — POST /goals/:id/archive
       postGoalsIdArchive: (args) => request("POST", "/goals/{id}/archive", { hasBody: true }, args),
       // GET /goals/{id}/conflicts — rank: any-builder — GET /goals/:id/conflicts
@@ -393,6 +397,8 @@ export function createClient(opts = {}) {
       getInboxId: (args) => request("GET", "/inbox/{id}", { hasBody: false }, args),
       // PATCH /inbox/{id} — rank: metic+archon — PATCH /inbox/:id
       patchInboxId: (args) => request("PATCH", "/inbox/{id}", { hasBody: true }, args),
+      // PATCH /inbox/{id}/body — rank: any-builder — PATCH /inbox/:id/body
+      patchInboxIdBody: (args) => request("PATCH", "/inbox/{id}/body", { hasBody: true }, args),
       // POST /inbox/{id}/ratify — rank: metic+archon — POST /inbox/:id/ratify
       postInboxIdRatify: (args) => request("POST", "/inbox/{id}/ratify", { hasBody: true }, args),
       // POST /inbox/{id}/resubmit — rank: any-builder — POST /inbox/:id/resubmit

package/docs/api/openapi.json

@@ -3609,6 +3609,72 @@
         ]
       }
     },
+    "/done-when/{criterionId}": {
+      "patch": {
+        "operationId": "patch_done_when_criterionId",
+        "tags": [
+          "done-when"
+        ],
+        "summary": "PATCH /done-when/:criterionId",
+        "description": "PATCH /done-when/:criterionId — correct a criterion's TEXT (task 1003102). Was write-once: this file exposed create, satisfy and unsatisfy and nothing else, so wrong text had no API repair path. The incident that forced it: a shell-quoting error stripped backtick-wrapped literals out of three criteria on goal 1000073 at CREATION time — the intent was recorded, the text was wrong, and the only channels were prod SQL or archiving the goal (worse: criteria are version-level rows, so an archived goal's criteria linger in the version rollup). A SATISFIED criterion is REFUSED, by name — see prose-edits.criterionProseRefusal for why that is a decision and not a limitation: a satisfied criterion is a claim someone verified, and re-wording it re-points that verification at text nobody checked. Unsatisfy → edit → re-satisfy makes the undo a recorded act. Gated like criterion CREATION — BOTH HALVES. The permission `criterion.create` is only the RANK floor; the sibling POST /versions/:id/done-when also runs authorizeCriterionCreate, the per-goal owner|manager wall (ADR 0154). Copying just the rank half would let any Metic rewrite criteria on a goal they neither own, manage, nor belong to — reusing the SAME pure gate is the only way the claim \"gated like creation\" is true. (Caught by the grader on the first cut of task 1003102: the comment said it, the code did half of it.) rank: metic+archon — matches POST /versions/:id/done-when.\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `criterion.create` (all required).",
+        "x-rank": "metic+archon",
+        "x-source": "modules/lifecycle/routes/done-when.js",
+        "x-permissions": [
+          "criterion.create"
+        ],
+        "parameters": [
+          {
+            "name": "criterionId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `criterionId`."
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PatchDoneWhenCriterionIdRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PatchDoneWhenCriterionIdResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/done-when/{criterionId}/satisfy": {
       "post": {
         "operationId": "post_done_when_criterionId_satisfy",
@@ -4212,6 +4278,49 @@
             "builderSession": []
           }
         ]
+      },
+      "patch": {
+        "operationId": "patch_goals_id",
+        "tags": [
+          "goals"
+        ],
+        "summary": "PATCH /goals/:id",
+        "description": "PATCH /goals/:id — correct a goal's own title/description (task 1003102). Handler + rationale + rank note: ../goal-edits.js. Pinned in route-rank-check.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/lifecycle/routes/goals.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
       }
     },
     "/goals/{id}/archive": {
@@ -5324,30 +5433,12 @@
             "description": "Path parameter `id`."
           }
         ],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/PatchGoalsIdVisibilityRequest"
-              }
-            }
-          },
-          "x-validated": true
-        },
         "responses": {
           "200": {
-            "description": "Success.",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/PatchGoalsIdVisibilityResponse"
-                }
-              }
-            }
+            "description": "Success."
           },
           "400": {
-            "$ref": "#/components/responses/ValidationFailed"
+            "$ref": "#/components/responses/BadRequest"
           },
           "401": {
             "$ref": "#/components/responses/Unauthorized"
@@ -6249,7 +6340,7 @@
           "inbox"
         ],
         "summary": "PATCH /inbox/:id",
-        "description": "Metic+ (task 360 / ADR 0018): idea triage (promote/discard/merge) shapes the backlog. Criterion C2 assigns triage to Metic, so this widened from archon-only to metic+archon when the three-rank model went live. Any builder can still FILE an idea (POST /inbox above); a Xenos cannot triage. rank: metic+archon — idea triage shapes the backlog; criterion C2 / task 360 / ADR 0018.\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `idea.triage` (all required).",
+        "description": "**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `idea.triage` (all required).",
         "x-rank": "metic+archon",
         "x-source": "modules/ideas/routes/inbox.js",
         "x-permissions": [
@@ -6308,6 +6399,69 @@
         ]
       }
     },
+    "/inbox/{id}/body": {
+      "patch": {
+        "operationId": "patch_inbox_id_body",
+        "tags": [
+          "inbox"
+        ],
+        "summary": "PATCH /inbox/:id/body",
+        "description": "Metic+ (task 360 / ADR 0018): idea triage (promote/discard/merge) shapes the backlog. Criterion C2 assigns triage to Metic, so this widened from archon-only to metic+archon when the three-rank model went live. Any builder can still FILE an idea (POST /inbox above); a Xenos cannot triage. rank: metic+archon — idea triage shapes the backlog; criterion C2 / task 360 / ADR 0018. PATCH /inbox/:id/body — correct an idea's own TEXT (task 1003102 / idea 1000740). A SEPARATE route rather than a new field on PATCH /inbox/:id, deliberately. That route is gated `requirePermission('idea.triage')`, and the ask here is that an idea's AUTHOR can fix their own words. Adding body_md there would have meant dropping the whole triage route to requireBuilder and re-authorizing every field in-handler — widening a pinned route's classified rank to reach one field. A new route with its own pin widens nothing: triage keeps its gate, and this one carries its own, narrower rule. AUTHOR (idea_inbox.captured_by) or a triager. The author case is the point: fixing your own typo must not require escalating to a Metic. rank: any-builder (requireBuilder) + the in-handler author|triage gate. Pinned in route-rank-check.MODULE_EXPECTED_RANKS['ideas']. asyncHandler (the doorway wrapper) owns the catch + the 500 log, so this route carries no console.error of its own — one central log site instead of a 16th copy of the same two lines in this file.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/ideas/routes/inbox.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PatchInboxIdBodyRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PatchInboxIdBodyResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/inbox/{id}/ratify": {
       "post": {
         "operationId": "post_inbox_id_ratify",
@@ -14674,6 +14828,39 @@
         ],
         "additionalProperties": false
       },
+      "PatchDoneWhenCriterionIdRequest": {
+        "type": "object",
+        "properties": {
+          "criterion_md": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 10000
+          }
+        },
+        "required": [
+          "criterion_md"
+        ],
+        "additionalProperties": false
+      },
+      "PatchDoneWhenCriterionIdResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "criterion": {},
+          "deltas": {},
+          "unchanged": {
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "ok",
+          "criterion",
+          "deltas",
+          "unchanged"
+        ]
+      },
       "PatchGoalsIdMembersBuilderIdRequest": {
         "type": "object",
         "properties": {
@@ -14703,29 +14890,35 @@
           "changed"
         ]
       },
-      "PatchGoalsIdVisibilityRequest": {
+      "PatchInboxIdBodyRequest": {
         "type": "object",
         "properties": {
-          "visibility": {
-            "type": "string"
+          "body_md": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 50000
           }
         },
         "required": [
-          "visibility"
+          "body_md"
         ],
         "additionalProperties": false
       },
-      "PatchGoalsIdVisibilityResponse": {
+      "PatchInboxIdBodyResponse": {
         "type": "object",
         "properties": {
           "ok": {
             "type": "boolean"
           },
-          "goal": {}
+          "idea": {},
+          "delta": {},
+          "unchanged": {}
         },
         "required": [
           "ok",
-          "goal"
+          "idea",
+          "delta",
+          "unchanged"
         ]
       },
       "PatchInboxIdRequest": {
@@ -18353,9 +18546,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 290,
-  "x-schema-count": 326,
+  "x-endpoint-count": 293,
+  "x-schema-count": 328,
   "x-undocumented-bodies": 8,
-  "x-response-schemas": 218,
+  "x-response-schemas": 219,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }