@bongos/core 1.19.323 → 1.19.325

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.323",
-  "core_contract": "1.19.323",
-  "source_commit": "6b1fb52bfb9b8d899ffc44c0b8a22fd08cab9379",
+  "core_version": "1.19.325",
+  "core_contract": "1.19.325",
+  "source_commit": "9a1a1c67f80e8d01c562568c4565b9c2b4fb9420",
   "source_ref": "HEAD",
-  "built_at": "2026-08-24T01:33:26.263Z",
+  "built_at": "2026-08-24T14:28:39.280Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 324,
     "agent_docs_stubbed": 22,
-    "functional_verbatim": 1457,
+    "functional_verbatim": 1460,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 1803,
-  "tree_sha256": "6534c0e9c341ea8d670e2f26984693052bc41041c70f99e671d5abd7ca3448dc",
+  "file_count": 1806,
+  "tree_sha256": "d455b7b84d748804468edea9e50ab188ef60da26a3538ede625b0766ca673f9b",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -4652,12 +4652,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "670e665f41fbb4d1c4154b2e2a08dcb64383583a8162188101dd0807ae849caa"
+      "sha256": "1a460f0c695ba6d590ee9bab9b281626de4747e164ca416098658ae054843ad6"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "27ab832e2bac7f7baac4016571d5536ac884b4b0f125a4b6f6a2dbae9b73112f"
+      "sha256": "7cc398a8e7f341aee2272da252afc4abd5213349ece88962764c6bde65f27f25"
     },
     {
       "path": "public-docs/index.html",
@@ -5017,7 +5017,7 @@
     {
       "path": "scripts/gds/architect-audit.js",
       "mode": "0000644",
-      "sha256": "bb4d1723f6668116e5c4783bb39efbfe5249e3dd8ed9e1739f3488f92fd37b00"
+      "sha256": "62c32c421cc02af44ca47aab58ff857dcf6791450acd5b36e83fe175906e21f6"
     },
     {
       "path": "scripts/gds/audit-authorship.sh",
@@ -5027,7 +5027,7 @@
     {
       "path": "scripts/gds/audit-deps.js",
       "mode": "0000644",
-      "sha256": "84275f8b3c8981717c1648f346954a55742a0fecd2f6617257c4f77894609e12"
+      "sha256": "f0905213e5e8ba18ea4c3eab7e11bb7c00401a5653ac00990be15c65f361959d"
     },
     {
       "path": "scripts/gds/audit-exports.js",
@@ -5112,7 +5112,7 @@
     {
       "path": "scripts/gds/capture.js",
       "mode": "0000644",
-      "sha256": "950a65cf4766f795622c6780dcfa9a1b3f9aefe38f406ec6759b129028958aa9"
+      "sha256": "946fa97d020eb481b7da559f0b5c99bfa16dc24b680a01e0ff3d3faeaf5bd701"
     },
     {
       "path": "scripts/gds/cf-tunnel.js",
@@ -5182,7 +5182,7 @@
     {
       "path": "scripts/gds/control-manifest.js",
       "mode": "0000644",
-      "sha256": "0d5b0c5e4bc15ff914d34849607ad2f01d1843d4dafeafdaf4191c2f365300bb"
+      "sha256": "189caa1e5c263beb5d2c251d924abfe6ea84b7f8b26409a93633c8466bd5801c"
     },
     {
       "path": "scripts/gds/copy-inventory.js",
@@ -5267,7 +5267,7 @@
     {
       "path": "scripts/gds/doc-cli-guard.js",
       "mode": "0000644",
-      "sha256": "6f157f0b3a5618bcc2372b6d3a2805ff212013b421720470b443da35aa72cf26"
+      "sha256": "9cf6c8ead8129799d17a18eadedf0423828cb457fa07fd317dcf2853254861e9"
     },
     {
       "path": "scripts/gds/docs-entropy.js",
@@ -5307,7 +5307,7 @@
     {
       "path": "scripts/gds/fitness.js",
       "mode": "0000644",
-      "sha256": "2de9f3b0e2c488ac1170aa90eab53c850b37c332676e36c4c8f214b219019352"
+      "sha256": "b5432b114aa075f790d056bc8cb090d3ba83fb52498d9dbee4a81161ac5bc019"
     },
     {
       "path": "scripts/gds/gate-review.js",
@@ -5862,7 +5862,7 @@
     {
       "path": "scripts/gds/session-eval.js",
       "mode": "0000644",
-      "sha256": "6e236a05fa0a6459104bd16e8f2da5092c412b0c518511823eae0b39570eb678"
+      "sha256": "9cdf1b5c6834568169cbe130cb2d28361baa747aa5bf7f358cc8e8631080790d"
     },
     {
       "path": "scripts/gds/session.js",
@@ -5892,7 +5892,7 @@
     {
       "path": "scripts/gds/ship-flow.js",
       "mode": "0000644",
-      "sha256": "efad88d4ead86356f27650b81c5ee28362bc94695dede92958e5398e9e71748c"
+      "sha256": "c63d7bcdf4c25de60ad4106495e09bccfd98a19b223111988e4339a4460558b8"
     },
     {
       "path": "scripts/gds/ship-git.js",
@@ -5977,12 +5977,12 @@
     {
       "path": "scripts/gds/smoke-batch-claim.sh",
       "mode": "0000644",
-      "sha256": "d27deba8997676ed2224d2261316b3e60c0668bcde585f7efd0443d6ab150d89"
+      "sha256": "53d3f4e28514aa6a3966e7a3db6223d4abe19074aaf44c39f61b920a0bdc35b0"
     },
     {
       "path": "scripts/gds/smoke-batch-release.sh",
       "mode": "0000644",
-      "sha256": "57e6f1ce66cd4e5cb7d6bbbd409f074b137344ba7c281a122f8ad42243d76029"
+      "sha256": "68ea957b3e9e82917e1c1a2a870b4ebbd0e5ef80d101afa3cff39858c98a3a0f"
     },
     {
       "path": "scripts/gds/smoke-box.sh",
@@ -5992,7 +5992,7 @@
     {
       "path": "scripts/gds/smoke-claim-consistency.sh",
       "mode": "0000644",
-      "sha256": "55aa25f1d7143edec57833dcd582f05d1a1b7261bd73d51044fc48dff3532ee1"
+      "sha256": "337d3f957cab32166b235a17c2604f9890d14067e31440a1400f345b21918eab"
     },
     {
       "path": "scripts/gds/smoke-dependencies.sh",
@@ -6007,7 +6007,7 @@
     {
       "path": "scripts/gds/smoke-write.sh",
       "mode": "0000644",
-      "sha256": "9c3a382def8c074a37bad66d7e3deef41c7f2bb9406f02f107be0e9a7dc7bfb3"
+      "sha256": "5468e6fdf5330fa2a67aa9a027d747efdf09908f9d676c567f2e324fd55a5155"
     },
     {
       "path": "scripts/gds/spark.js",
@@ -6037,7 +6037,7 @@
     {
       "path": "scripts/gds/triage.js",
       "mode": "0000644",
-      "sha256": "5255bafa71699cadd345c5bb2ba6e99700cdd5d90fd165b949ef6595c5a83386"
+      "sha256": "831de1914642a7dcf7c591c9cc69b37c917122e04428cb1e28fc00b07170b603"
     },
     {
       "path": "scripts/gds/update-channel.js",
@@ -6059,6 +6059,16 @@
       "mode": "0000644",
       "sha256": "32e0c1f2a955d4cabeae00d3749b283abd70f05f34b5fcbd84be3f35e2e655c8"
     },
+    {
+      "path": "scripts/gds/version-literal-guard.js",
+      "mode": "0000644",
+      "sha256": "7e27012820d6e2fb43c84140ae6f90d4ca9345658937aa75cc9f2c28cfdaf41e"
+    },
+    {
+      "path": "scripts/gds/version-select.js",
+      "mode": "0000644",
+      "sha256": "be4fec619d5a0c76ba05bcc75042c1497f70da21b54a3d646884e2228f90b2ba"
+    },
     {
       "path": "scripts/gds/worktree.js",
       "mode": "0000644",
@@ -6427,7 +6437,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "8624156a5587eaca3430325ef66420fb96b9567ed19af27dce361dc8af08611f"
+      "sha256": "cc999c875729b68c2b78cf1f16a34184412b4d2b87b82be7b182627d313e9628"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -6977,7 +6987,7 @@
     {
       "path": "tests/control_manifest.mjs",
       "mode": "0000644",
-      "sha256": "2465159282594723a49d03ed2ca9dbb10e95ddb7af96d145c45f7d7c2a8b8cee"
+      "sha256": "46ec55dbdb06b33cbe4b3dff44580cbb90d2daa0b225b810352a887e941e4798"
     },
     {
       "path": "tests/copy_desk_flags_db.mjs",
@@ -8994,6 +9004,11 @@
       "mode": "0000644",
       "sha256": "372c80d42e122a70a4fae8fcfbaaa47459575d3e0a2b80fff8876dfc512c5aeb"
     },
+    {
+      "path": "tests/version_literals.mjs",
+      "mode": "0000644",
+      "sha256": "17e872131c17bae7a061debc1fd3ee354ab704678b475edd6a8b1dfdd63ceb2f"
+    },
     {
       "path": "tests/versions_route.mjs",
       "mode": "0000644",

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.323",
+  "version": "1.19.325",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.323",
+      "version": "1.19.325",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.323",
+  "version": "1.19.325",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/scripts/gds/architect-audit.js

@@ -32,6 +32,7 @@ const fs = require('node:fs');
 const path = require('node:path');
 const { execFileSync } = require('node:child_process');
 const { apiCall, cliClient, arg } = require('./cli-lib');
+const { resolveDefaultVersion } = require('./version-select.js');
 const grader = require('../../modules/grading/grader');
 const llmCache = require('../../src/bongos/llm-cache'); // System 5 (task 1360): cache identical audits over an unchanged tree
 const { branding } = require('../../src/branding');
@@ -183,7 +184,12 @@ async function main() {
   const args = process.argv.slice(2);
   const scope = arg('--scope', args);
   const paths = arg('--paths', args);
-  const version = arg('--version', args) || 'GDS-V3';
+  // task 1003166 (G02): was 'GDS-V3', long since shipped.
+  const version = arg('--version', args) || await resolveDefaultVersion();
+  if (!version) {
+    console.error('architect-audit: no version is building; pass --version <id>.');
+    process.exit(1);
+  }
   const dryRun = args.includes('--dry-run');
 
   if (!scope || !paths) {

package/scripts/gds/audit-deps.js

@@ -21,6 +21,7 @@
 
 const { touchesOverlap } = require('../../src/bongos/path-match.js');
 const { cliClient } = require('./cli-lib');
+const { resolveDefaultVersion } = require('./version-select.js');
 // task 1003153 — the DEAD-edge detector core, shared with the claim refusal so
 // "abandoned dependency" means one thing across the CLI, the route and this audit.
 const { findStrandedTasks } = require('../../modules/lifecycle/dead-deps.js');
@@ -128,7 +129,16 @@ async function main() {
     process.exitCode = await reportStranded({ asJson: argv.includes('--json') });
     return;
   }
-  const ver = argv.includes('--version') ? argv[argv.indexOf('--version') + 1] : 'GDS-V3';
+  // task 1003166 (G02): the default was 'GDS-V3', which has shipped — so a bare
+  // `audit-deps` audited a closed version and reported nothing useful.
+  const ver = argv.includes('--version')
+    ? argv[argv.indexOf('--version') + 1]
+    : await resolveDefaultVersion();
+  if (!ver) {
+    console.error('audit-deps: no version is building; pass --version <id>.');
+    process.exitCode = 1;
+    return;
+  }
   const minRank = argv.includes('--min') ? argv[argv.indexOf('--min') + 1] : 'low';
   const asJson = argv.includes('--json');
   const order = { high: 3, medium: 2, low: 1 };

package/scripts/gds/capture.js

@@ -54,22 +54,10 @@ const readline = require('node:readline');
 const { cliClient, requireSession, arg, hasFlag } = require('./cli-lib');
 
 
-async function resolveDefaultVersion() {
-  const api = await cliClient();
-  const r = await api.versions.getVersions();
-  if (!r.ok) return null;
-  const versions = r.data?.versions ?? [];
-  // Most recent building version. Fall back to any building version if
-  // started_at is null on all of them.
-  const building = versions.filter((v) => v.status === 'building');
-  if (building.length === 0) return null;
-  building.sort((a, b) => {
-    const ta = a.started_at ? new Date(a.started_at).getTime() : 0;
-    const tb = b.started_at ? new Date(b.started_at).getTime() : 0;
-    return tb - ta;
-  });
-  return building[0].id;
-}
+// task 1003166 (G02): the selection rule moved to version-select.js so the nine
+// scripts that used to hardcode a version id share ONE implementation. Kept as a
+// local name so every call site below reads unchanged.
+const { resolveDefaultVersion } = require('./version-select.js');
 
 // Full JSON, not console.error's depth-2 inspect — a validation 400's nested
 // details otherwise print as "[ [Object] ]" and hide which field failed.

package/scripts/gds/control-manifest.js

@@ -74,6 +74,47 @@ const CONTROLS = [
     wiredIn: { file: '.claude/scheduled-tasks/redteam-weekly/SKILL.md', needle: 'redteam-patrol.js' },
     alsoExists: ['scripts/gds/redteam-patrol.js'],
   },
+
+  // ── goal 1000077's four guards (task 1003169 / G05) ──────────────────────
+  //
+  // Same reasoning as the goal-1000076 controls above, applied to the goal that
+  // exists BECAUSE prose documented four failure modes and nothing refused them.
+  // A guard that can silently stop existing is not a guard — and these four are
+  // exactly the kind that can: three are one line in fitness.js's CHECKS array
+  // (delete the line and the check simply never runs, with nothing red), and the
+  // fourth is a module the ship pipeline requires.
+  //
+  // `alsoExists` names each guard's TEST on purpose. A check whose test is gone
+  // still runs, but nothing then proves it can still fail — and this session
+  // produced three tests that were green for the wrong reason, so an untested
+  // guard is a guard on trust.
+  {
+    label: 'guard: a doc that names a CLI matches the real CLI (G01)',
+    file: 'scripts/gds/doc-cli-guard.js',
+    wiredIn: { file: 'scripts/gds/fitness.js', needle: 'doc-cli-guard' },
+    alsoExists: ['tests/doc_cli_guard.mjs'],
+  },
+  {
+    label: 'guard: no ops script hardcodes a version id (G02)',
+    file: 'scripts/gds/version-literal-guard.js',
+    wiredIn: { file: 'scripts/gds/fitness.js', needle: 'version-literal-guard' },
+    alsoExists: ['tests/version_literals.mjs', 'scripts/gds/version-select.js'],
+  },
+  {
+    label: 'guard: an ops skill declares the machine it needs (G03)',
+    file: 'scripts/gds/skill-preflight.js',
+    wiredIn: { file: 'scripts/gds/fitness.js', needle: 'skill-preflight' },
+    alsoExists: ['tests/skill_preflight.mjs'],
+  },
+  {
+    // Not a fitness check: a module the ship pipeline requires. Wired in
+    // ship-flow.js, which is where the carve left the resume path — and where a
+    // missing import silently broke every regrade until task 1003166 hit it.
+    label: 'guard: a ship cannot lie about how far it got (G04)',
+    file: 'scripts/gds/ship-honesty.js',
+    wiredIn: { file: 'scripts/gds/ship-flow.js', needle: 'ship-honesty' },
+    alsoExists: ['tests/ship_cannot_lie.mjs'],
+  },
 ];
 
 // Pure evaluation — exported for the test. deps.exists/deps.read override fs.
@@ -107,7 +148,7 @@ function checkControlsExist() {
     warnings: [],
     note: violations.length
       ? 'a shipped security/quality control disappeared or came unwired — restore it or update control-manifest.js in the same change'
-      : `all ${CONTROLS.length} goal-1000076 controls present and wired (the assurance-of-assurance the ADR 0022 audit found missing)`,
+      : `all ${CONTROLS.length} controls present and wired — goal 1000076's plus goal 1000077's four guards (task 1003169). The assurance-of-assurance the ADR 0022 audit found missing.`,
   };
 }
 

package/scripts/gds/doc-cli-guard.js

@@ -33,34 +33,9 @@ const { execFileSync } = require('node:child_process');
 
 const REPO_ROOT = path.resolve(__dirname, '..', '..');
 
-// ---------------------------------------------------------------------------
-// Check 22 — a doc that NAMES a CLI invocation must match the real CLI
-// (task 1003165 / G01, goal 1000077).
-//
-// WHY. Task 1002931 shipped a skill instructing `capture.js --full --fields-file`
-// while those flags lived on an unlanded branch. Its test passed, because the test
-// pinned the skill's PROSE — it asserted the file said the words, never that the
-// words worked. So the skill confidently told agents to run a command that
-// silently ignored both flags and filed the wrong thing. That is the whole class:
-// AN UNRECOGNISED FLAG IS NOT AN ERROR. `arg('--x')`/`hasFlag('--x')` just return
-// null and the command proceeds, so a doc can name a flag that does nothing and
-// every test stays green (learning 1000198).
-//
-// It happened TWICE in one session: the second time, /workspace ran an older
-// capture.js and the same documented flags were dropped on the floor again.
-//
-// WHAT IT CHECKS, deliberately narrow: for every `node scripts/gds/<x>.js` in a
-// tracked .md, (a) the script exists, and (b) each `--flag` written next to it is
-// parsed by that script. Nothing else — this is not a linter for prose.
-//
-// STATIC ONLY, NEVER EXECUTED. The task says so and the reason matters: running
-// every documented CLI from a fitness check would be slow, would need a session,
-// and a command that blocks on a prompt would hang CI forever — the exact failure
-// R151's TTY gate exists to prevent.
-// Key is `<doc path>::<token>`, where token is either the script path (the whole
-// invocation is tolerated) or `--flag` (just that flag). Every entry carries its
-// reason on the same line: an unexplained entry is a silent hole, and the point of
-// this check is that a doc's claims are checkable.
+// Check 22 in fitness.js's CHECKS. The why, the narrowness and the static-only
+// rule are all in the file header above — not restated here.
+
 const DOC_CLI_ALLOW = new Map([
   ['.claude/skills/paint/SKILL.md::scripts/gds/art-stage.js',
     'art-stage.js ships with the art-pipeline HOST module, which publish-manifest.js excludes from core — absent from a core-only checkout by design; the skill says so inline.'],
@@ -120,6 +95,14 @@ function scanDocs(docs, { readDoc, readScript, allow = DOC_CLI_ALLOW } = {}) {
     if (!srcCache.has(rel)) srcCache.set(rel, readScript(rel));
     return srcCache.get(rel);
   };
+  // Memoized alongside srcCache: stripLineComments is two regex passes over a
+  // whole script, and it was being recomputed for EVERY flag on every invocation
+  // of that script. Invariant per file, so compute it once (grader, task 1003165).
+  const codeCache = new Map();
+  const codeOnly = (rel, src) => {
+    if (!codeCache.has(rel)) codeCache.set(rel, stripLineComments(src));
+    return codeCache.get(rel);
+  };
 
   for (const doc of docs) {
     const text = readDoc(doc);
@@ -156,7 +139,7 @@ function scanDocs(docs, { readDoc, readScript, allow = DOC_CLI_ALLOW } = {}) {
           // rather than failing is the deliberate choice: a usage banner is the
           // ONLY place some scripts name a flag they genuinely handle via a helper,
           // so failing here would resurrect the false positives that sank draft 1.
-          if (!scriptMentionsFlag(stripLineComments(src), flag)) {
+          if (!scriptMentionsFlag(codeOnly(scriptRel, src), flag)) {
             warnings.push(
               `${doc} → \`node ${scriptRel} --${flag}\`: ${scriptRel} names \`--${flag}\` only in comments/usage text, `
               + 'never in code — it may be a flag whose implementation was deleted. Verify it is still handled.'

package/scripts/gds/fitness.js

@@ -1910,7 +1910,7 @@ const CHECKS = [
   checkWriteRoutesValidated, // Check 18 — BV1 R12 / task 1999: every body-reading write route validates (ADR 0118)
   require('./fitness-ratchets.js').checkQualityRatchets, // Check 20 — task 1003129: quality budgets only tighten (mechanics + knip CI step live in fitness-ratchets.js)
   require('./doc-cli-guard.js').checkDocNamesRealCli, // Check 22 — task 1003165 / G01: a doc that names a CLI invocation must match the real CLI
-  require('./skill-preflight.js').checkOpsSkillsDeclareMachine, // Check 23 — task 1003167 / G03: an ops skill declares the machine it needs
+  require('./skill-preflight.js').checkOpsSkillsDeclareMachine, require('./version-literal-guard.js').checkNoVersionLiterals, // Checks 23 (task 1003167/G03: a skill declares its machine) + 24 (task 1003166/G02: no script hardcodes a version id) — one line because fitness.js is 500 over the excess-lines ratchet and a new check must not cost a line (idea 1000810)
   require('./control-manifest.js').checkControlsExist, // Check 21 — task 1003131: goal-1000076 controls assert their own existence (the ADR 0022 assurance-of-assurance)
 ];
 

package/scripts/gds/session-eval.js

@@ -19,6 +19,7 @@
 // Pure helper (no I/O) — resolves the per-rank wandering default so the
 // off-task signal below only fires for the CONSTRAINING ranks (task 1268).
 const wanderingPrefs = require('../../modules/builder-settings/wandering-prefs'); // carved → modules/builder-settings/ (BV1.R80 / ADR 0093 §1)
+const { resolveDefaultVersion } = require('./version-select.js');
 
 // ---- classification vocabularies -----------------------------------------
 
@@ -547,6 +548,9 @@ if (require.main === module) {
         : []);
       let filed = 0;
       let skipped = 0;
+      // task 1003166 (G02): resolved ONCE — it is invariant for the run, and this
+      // is a network round trip. The first version of this called it per finding.
+      const suggestedVersion = await resolveDefaultVersion();
       for (const s of systemic) {
         const tmpl = FINDING_TEMPLATES[s.type] || { title: s.type, body: '' };
         const title = `${PREFIX} ${tmpl.title}`.slice(0, 200);
@@ -561,7 +565,8 @@ if (require.main === module) {
           body: {
             title,
             body_md: bodyMd,
-            suggested_version: 'GDS-V4',
+            // task 1003166 (G02): was 'GDS-V4', which has shipped.
+            suggested_version: suggestedVersion,
           },
         }).catch(() => null);
         if (r && r.ok) filed++;

package/scripts/gds/ship-flow.js

@@ -20,6 +20,10 @@ const { autoLinkifyChangedDocs, mergeMainIntoBranch, preflight } = require('./sh
 const { applyBaseOverride, computeChangedFiles, computeGraderBaseline, runSmokeAsync } = require('./ship-grade.js');
 const { buildPriorRoundContext, computeGradeResult, gradeAndRecord, printCreditsAndAchievements, printGradeOutcome } = require('./ship-grade-steps.js');
 const { apiErrorLine, normalizeApiError } = require('./ship-io.js');
+// task 1003205's carve left pushVia() used at regradeMain but never imported, so
+// EVERY resume of a 'completed' task died with ReferenceError before resolving.
+const { pushVia } = require('./ship-deploy-target.js');
+
 const { diffstatFor, finishShip } = require('./ship-finish.js');
 const { evaluateRegradeEligibility, evaluateResumeAction, resumeMerge } = require('./ship-resume.js');
 const { noteServerReward } = require('./ship-state.js');

package/scripts/gds/smoke-batch-claim.sh

@@ -24,6 +24,14 @@ source "$(dirname "$0")/lib.sh"
 API="$(gds_api_base)"
 TOKEN="$(gds_resolve_token)" || exit $?
 
+# task 1003166 (G02): resolve the version at RUNTIME rather than naming one. A
+# literal works until that version ships, then `version_closed` refuses every
+# create and the smoke fails as if the code broke (idea 1000823).
+VERSION_ID=$(node "$(dirname "$0")/version-select.js") || {
+  echo "FAIL: could not resolve a building version — see version-select.js" >&2
+  exit 1
+}
+
 ts=$(date +%Y%m%d-%H%M%S)
 
 # Wrapper: METHOD PATH [BODY] → echoes "HTTP_CODE\nPAYLOAD". Never exits.
@@ -49,7 +57,7 @@ mk_task() {
 import json,sys
 t = '${touches_csv}'.split(',')
 print(json.dumps({
-  'version_id': 'BONGOS-V1',
+  'version_id': '${VERSION_ID}',
   'title': '__smoke__ batch-claim ${ts}-${suffix}',
   'description': 'smoke',
   'status': 'ready',

package/scripts/gds/smoke-batch-release.sh

@@ -31,6 +31,14 @@ source "$(dirname "$0")/lib.sh"
 API="$(gds_api_base)"
 TOKEN="$(gds_resolve_token)" || exit $?
 
+# task 1003166 (G02): resolve the version at RUNTIME rather than naming one. A
+# literal works until that version ships, then `version_closed` refuses every
+# create and the smoke fails as if the code broke (idea 1000823).
+VERSION_ID=$(node "$(dirname "$0")/version-select.js") || {
+  echo "FAIL: could not resolve a building version — see version-select.js" >&2
+  exit 1
+}
+
 ts=$(date +%Y%m%d-%H%M%S)
 
 # Wrapper: METHOD PATH [BODY] → echoes "PAYLOAD\nHTTP_CODE". Never exits.
@@ -55,7 +63,7 @@ mk_task() {
 import json,sys
 t = '${touches_csv}'.split(',')
 print(json.dumps({
-  'version_id': 'BONGOS-V1',
+  'version_id': '${VERSION_ID}',
   'title': '__smoke__ batch-release ${ts}-${suffix}',
   'description': 'smoke',
   'status': 'ready',

package/scripts/gds/smoke-claim-consistency.sh

@@ -86,7 +86,7 @@ create_task() {
   body=$(python3 -c "
 import json
 print(json.dumps({
-  'version_id': 'PMS-V2',
+  'version_id': '${VERSION_ID}',
   'title': '${title}',
   'description': 'Synthetic smoke task. Auto-cleaned by smoke-claim-consistency.sh.',
   'status': 'ready',
@@ -124,6 +124,15 @@ echo "API: ${API}"
 echo "Titles: ${SMOKE_TITLE_A} | ${SMOKE_TITLE_B}"
 echo
 
+# task 1003166 (G02): resolve the version at RUNTIME. This file used to hardcode
+# one; that version shipped, `version_closed` refused every create, and the smoke
+# could not pass while /merge-mode still advertised it green (idea 1000823).
+VERSION_ID=$(node "$(dirname "$0")/version-select.js") || {
+  echo "FAIL: could not resolve a building version — see version-select.js" >&2
+  exit 1
+}
+echo "Version: ${VERSION_ID}"
+
 echo "--- 1. create 2 smoke tasks ---"
 TASK_A=$(create_task "${SMOKE_TITLE_A}" "A")
 TASK_B=$(create_task "${SMOKE_TITLE_B}" "B")

package/scripts/gds/smoke-write.sh

@@ -58,6 +58,15 @@ echo "API: ${API}"
 echo "Title: ${SMOKE_TITLE}"
 echo
 
+# task 1003166 (G02): resolve the version at RUNTIME. This file used to hardcode
+# one; that version shipped, `version_closed` refused every create, and the smoke
+# could not pass while /merge-mode still advertised it green (idea 1000823).
+VERSION_ID=$(node "$(dirname "$0")/version-select.js") || {
+  echo "FAIL: could not resolve a building version — see version-select.js" >&2
+  exit 1
+}
+echo "Version: ${VERSION_ID}"
+
 echo "--- 0. snapshot progress before ---"
 PROGRESS_BEFORE=$(snapshot_progress)
 echo "${PROGRESS_BEFORE}"
@@ -67,7 +76,7 @@ echo "--- 1. create task ---"
 CREATE_BODY=$(python3 -c "
 import json
 print(json.dumps({
-  'version_id': 'PMS-V1',
+  'version_id': '${VERSION_ID}',
   'title': '${SMOKE_TITLE}',
   'description': 'Synthetic smoke task. Auto-shipped by smoke-write.sh.',
   'status': 'ready',

package/scripts/gds/triage.js

@@ -38,6 +38,7 @@
 const readline = require('node:readline');
 const fs = require('node:fs');
 const { cliClient, requireSession } = require('./cli-lib');
+const { resolveDefaultVersion } = require('./version-select.js');
 
 function prompt(rl, question) {
   return new Promise((resolve) => rl.question(question, (a) => resolve(a)));
@@ -384,7 +385,9 @@ async function main() {
 
         if (ans === 'p' || ans === 'promote') {
           // Promote: version, priority, title, goal — each defaulted from the idea.
-          const defaultVersion = idea.suggested_version || 'PMS-V2';
+          // task 1003166 (G02): the fallback was 'PMS-V2', which has shipped —
+          // promoting into it would have been refused as version_closed.
+          const defaultVersion = idea.suggested_version || await resolveDefaultVersion();
           const versionAns = (await prompt(rl, `  version [${defaultVersion}]: `)).trim();
           const versionId = versionAns || defaultVersion;
 

package/scripts/gds/version-literal-guard.js

@@ -0,0 +1,122 @@
+#!/usr/bin/env node
+// scripts/gds/version-literal-guard.js — no ops script names a version id
+// (task 1003166 / G02, goal 1000077; criterion guards-no-hardcoded-version).
+//
+// THE INCIDENT. smoke-write.sh hardcoded 'PMS-V1'. That version shipped, so
+// `version_closed` refused every create and the write-path smoke COULD NOT PASS
+// — while /merge-mode Step 5 went on telling the operator "4/4 expected". The
+// failure reads as a broken smoke, not a stale constant, which is why it sat
+// (idea 1000823). Nine scripts carried the same bomb; four of the versions they
+// named (PMS-V1, PMS-V2, GDS-V3, GDS-V4) had ALREADY shipped when this ran.
+//
+// WHAT IT CHECKS, narrowly: a version-shaped literal ASSIGNED TO A VERSION FIELD
+// or used as a version DEFAULT, in an executable script. Not any mention of a
+// version anywhere — smoke-claim-consistency.sh legitimately says "PMS-V2 P6 not
+// live yet" in a comment and an echo, and flagging that would be the over-broad
+// source assertion this repo has learned to avoid (learning 1000196). Comment
+// lines are stripped before matching for the same reason.
+//
+// EXCLUDED BY PATH, not by allowlist: seeders and tests. A seeder's whole subject
+// IS a specific historical version — `seed-v3-tasks.js` naming GDS-V3 is correct,
+// and asking it to resolve one at runtime would break it.
+
+'use strict';
+
+const fs = require('fs');
+const path = require('path');
+const { execFileSync } = require('node:child_process');
+
+const REPO_ROOT = path.resolve(__dirname, '..', '..');
+
+// Any prefix, so a version scheme invented next year is covered too — better
+// than enumerating PMS/GDS/BONGOS/CB and finding out later that OTB-V2 slipped.
+const VERSION_LITERAL = String.raw`['"][A-Z][A-Z0-9]*-V\d+['"]`;
+// A version FIELD or a version DEFAULT — the two shapes that actually rot.
+const VERSION_FIELD = String.raw`version_id|versionId|suggested_version|target_version|DEFAULT_VERSION|VERSION_ID`;
+const ASSIGNED = new RegExp(`(?:${VERSION_FIELD})\\s*['"]?\\s*[:=][^,;)]*${VERSION_LITERAL}`);
+const DEFAULTED = new RegExp(`--version[^\\n]*?\\|\\|\\s*${VERSION_LITERAL}`);
+
+// path::reason. A justified entry, one line, like every other guard here.
+const VERSION_LITERAL_ALLOW = new Map([
+  ['scripts/gds/grade-smoke.js',
+    'GOOD_TASK / BAD_TASK are in-memory fixtures handed to grader.gradeSubagent; they are never POSTed, so no version_closed can refuse them and the literal cannot rot into a failure.'],
+  ['scripts/gds/status.js',
+    'DEFAULT_VERSION is an owner-facing dashboard default with an env override, and TWO versions are currently building — so "most recent building" is not a derivable answer here. Retargeting what /status shows by default is an owner decision, not a refactor.'],
+]);
+
+function isExempt(rel) {
+  return /(^|\/)seed-[^/]*\.js$/.test(rel)         // a seeder's subject IS that version
+    || /\.test\.js$/.test(rel)                     // fixtures pinned to a historical version
+    || /(^|\/)fixtures\//.test(rel)
+    || /(^|\/)version-literal-guard\.js$/.test(rel); // this file names the shapes it hunts
+}
+
+// Drop comment lines only — never inline content, which is where real code lives.
+function stripComments(src, rel) {
+  const lineComment = rel.endsWith('.sh') ? /^\s*#/ : /^\s*(\/\/|\*|\/\*)/;
+  return String(src).split('\n').map((l) => (lineComment.test(l) ? '' : l));
+}
+
+function scanScripts(files, read) {
+  const violations = [];
+  let scanned = 0;
+  for (const rel of files) {
+    if (isExempt(rel)) continue;
+    const src = read(rel);
+    if (src === null) continue;
+    scanned += 1;
+    if (VERSION_LITERAL_ALLOW.has(rel)) continue;
+    stripComments(src, rel).forEach((line, i) => {
+      if (ASSIGNED.test(line) || DEFAULTED.test(line)) {
+        violations.push(
+          `${rel}:${i + 1} names a version id where one should be RESOLVED: ${line.trim().slice(0, 90)}`
+          + ' — a literal works until that version ships, then version_closed refuses every write and the'
+          + ' failure reads as broken code. Use resolveDefaultVersion() from version-select.js'
+          + ' (bash: VERSION_ID=$(node scripts/gds/version-select.js)), or allowlist it with a reason.'
+        );
+      }
+    });
+  }
+  return { violations, scanned };
+}
+
+function trackedScripts() {
+  const out = execFileSync('git', ['ls-files', 'scripts/*.js', 'scripts/*.sh', 'scripts/**/*.js', 'scripts/**/*.sh'], {
+    cwd: REPO_ROOT, encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'],
+  });
+  return String(out || '').split('\n').map((f) => f.trim()).filter(Boolean);
+}
+
+const NAME = 'no ops script hardcodes a version id (G02)';
+
+function checkNoVersionLiterals({ files = null, read = null } = {}) {
+  const list = files || trackedScripts();
+  if (!list.length) {
+    return { name: NAME, ok: false, hardFail: true,
+      violations: ['scan defect — enumerated 0 tracked scripts; a broken enumeration, not a clean result.'],
+      warnings: [], note: 'static scan of scripts/ for hardcoded version ids.' };
+  }
+  const reader = read || ((rel) => {
+    try { return fs.readFileSync(path.join(REPO_ROOT, rel), 'utf8'); } catch { return null; }
+  });
+  const { violations, scanned } = scanScripts(list, reader);
+  return {
+    name: NAME,
+    ok: violations.length === 0,
+    hardFail: violations.length > 0,
+    violations,
+    warnings: [],
+    note: `${scanned} executable script(s) under scripts/ scanned: none may assign a version-shaped literal to a version field or use one as a --version default. Seeders, *.test.js and fixtures are exempt by path (their subject IS a historical version); ${VERSION_LITERAL_ALLOW.size} justified allowlist entr${VERSION_LITERAL_ALLOW.size === 1 ? 'y' : 'ies'}.`,
+  };
+}
+
+function main() {
+  const r = checkNoVersionLiterals();
+  for (const v of r.violations) console.error(`✗ ${v}`);
+  console.log(`${r.hardFail ? 'FAIL' : 'PASS'}  ${r.note}`);
+  process.exit(r.hardFail ? 1 : 0);
+}
+
+if (require.main === module) main();
+
+module.exports = { checkNoVersionLiterals, scanScripts, stripComments, isExempt, VERSION_LITERAL_ALLOW, ASSIGNED, DEFAULTED };

package/scripts/gds/version-select.js

@@ -0,0 +1,79 @@
+#!/usr/bin/env node
+// scripts/gds/version-select.js — resolve "the version to use" at RUNTIME
+// (task 1003166 / G02, goal 1000077; criterion guards-no-hardcoded-version).
+//
+// THE BUG THIS ENDS. scripts/gds/smoke-write.sh hardcoded 'PMS-V1'. That version
+// shipped, so `version_closed` correctly refuses the create — meaning the
+// write-path smoke CANNOT pass — while /merge-mode Step 5 still tells the
+// operator "4/4 expected". A literal version id is a time bomb with a long fuse:
+// it works until the version ships, and then it fails in a way that reads as a
+// broken smoke rather than a stale constant (idea 1000823).
+//
+// Nine scripts carried one. The rule they now share is capture.js's, which was
+// already right: the most recent BUILDING version. Extracted here so there is one
+// implementation rather than nine, and exposed as a CLI so the bash smokes get
+// the same answer as the JS callers instead of reimplementing the sort in python.
+//
+//   const { resolveDefaultVersion } = require('./version-select.js');   // JS
+//   VERSION_ID=$(node scripts/gds/version-select.js) || exit 1          # bash
+
+'use strict';
+
+const { cliExit } = require('./cli-lib');
+
+// PURE, so the selection rule is unit-tested without a session or a network.
+// Returns a version id, or null when nothing is building — never a guess.
+function pickDefaultVersion(versions) {
+  if (!Array.isArray(versions)) return null;
+  const building = versions.filter((v) => v && v.status === 'building');
+  if (building.length === 0) return null;
+  // Most recent by started_at. A null started_at sorts last rather than
+  // throwing, so a half-filled row cannot decide the answer (capture.js's
+  // original behaviour, kept deliberately).
+  building.sort((a, b) => {
+    const ta = a.started_at ? new Date(a.started_at).getTime() : 0;
+    const tb = b.started_at ? new Date(b.started_at).getTime() : 0;
+    return tb - ta;
+  });
+  return building[0].id;
+}
+
+async function resolveDefaultVersion(deps = {}) {
+  const client = deps.cliClient || require('./cli-lib').cliClient;
+  const api = await client();
+  const r = await api.versions.getVersions();
+  if (!r.ok) return null;
+  return pickDefaultVersion(r.data?.versions ?? []);
+}
+
+// A version id is interpolated by bash callers into a quoted Python string, so
+// the ONE place that can guarantee it is safe is here, at the source, rather than
+// four escaping fixes downstream. Ids are `[A-Za-z][A-Za-z0-9._-]*` in practice;
+// anything else is refused rather than printed. Defense in depth: writing a
+// versions.id is already a privileged operation.
+const SAFE_ID = /^[A-Za-z][A-Za-z0-9._-]*$/;
+
+async function main() {
+  const id = await resolveDefaultVersion();
+  if (!id) {
+    // Exit non-zero rather than printing something a caller would interpolate:
+    // a smoke that creates a task against the empty string is worse than one
+    // that stops and says why.
+    console.error('version-select: no version is currently `building` — cannot resolve a default.');
+    console.error('  Open one, or pass an explicit --version to the caller.');
+    return cliExit(1);
+  }
+  if (!SAFE_ID.test(id)) {
+    console.error(`version-select: refusing to emit ${JSON.stringify(id)} — not a plain version id.`);
+    console.error('  Callers splice this into a quoted string; an id with a quote or backslash could break out.');
+    return cliExit(1);
+  }
+  process.stdout.write(id);
+  return cliExit(0);
+}
+
+if (require.main === module) {
+  main().catch((err) => { console.error(`version-select: ${err && err.message}`); cliExit(1); });
+}
+
+module.exports = { pickDefaultVersion, resolveDefaultVersion, SAFE_ID };

package/src/module-api.js

@@ -1073,8 +1073,12 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 //         landed since 1.19.321 with no explicit bump. run 32679604360. (task 1002620)
 //   1.19.323 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
 //         landed since 1.19.322 with no explicit bump. run 32680138776. (task 1002620)
+//   1.19.324 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.323 with no explicit bump. run 32737868129. (task 1002620)
+//   1.19.325 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.324 with no explicit bump. run 32738897943. (task 1002620)
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.323'; // CI auto-patch carrier (ADR 0161); see changelog above
+const CORE_VERSION = '1.19.325'; // CI auto-patch carrier (ADR 0161); see changelog above
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/control_manifest.mjs

@@ -58,3 +58,63 @@ test('all-present + all-wired yields zero violations', () => {
   const v = cm.evaluate(controls, { exists: () => true, read: () => 'has NEEDLE inside' });
   assert.deepEqual(v, []);
 });
+
+// ── goal 1000077's four guards (task 1003169 / G05) ────────────────────────
+// The goal exists because prose documented four failure modes and nothing
+// refused them. These assert the guards themselves cannot quietly vanish —
+// three are ONE LINE in fitness.js's CHECKS array, so deleting that line makes
+// the check never run with nothing going red.
+
+const GUARD_LABELS = ['G01', 'G02', 'G03', 'G04'];
+
+test('all four goal-1000077 guards are in the manifest', () => {
+  for (const g of GUARD_LABELS) {
+    const row = cm.CONTROLS.find((c) => c.label.includes(`(${g})`));
+    assert.ok(row, `${g} has a manifest entry`);
+    assert.ok(row.file, `${g} names its file`);
+    assert.ok(row.wiredIn && row.wiredIn.file && row.wiredIn.needle, `${g} names where it is wired`);
+    assert.ok(Array.isArray(row.alsoExists) && row.alsoExists.some((f) => f.startsWith('tests/')),
+      `${g} names its TEST — a check whose test is gone still runs, but nothing proves it can fail`);
+  }
+});
+
+test('each guard file really exists and is really wired', () => {
+  // Not a source-text assertion: run the manifest's own evaluator over the
+  // real tree for just these rows.
+  const rows = cm.CONTROLS.filter((c) => GUARD_LABELS.some((g) => c.label.includes(`(${g})`)));
+  assert.equal(rows.length, 4);
+  assert.deepEqual(cm.evaluate(rows), [], 'no violations on the live tree');
+});
+
+test('a DELETED guard file is caught', () => {
+  const row = cm.CONTROLS.find((c) => c.label.includes('(G01)'));
+  const out = cm.evaluate([row], { exists: () => false, read: () => '' });
+  assert.equal(out.length, 1);
+  assert.match(out[0], /missing/i);
+});
+
+test('a guard UNWIRED from fitness.js is caught — the one-line deletion', () => {
+  // The realistic rot: someone removes the CHECKS entry and the guard sits on
+  // disk, never running, with a green build.
+  for (const g of ['G01', 'G02', 'G03']) {
+    const row = cm.CONTROLS.find((c) => c.label.includes(`(${g})`));
+    const out = cm.evaluate([row], { exists: () => true, read: () => 'const CHECKS = [];' });
+    assert.equal(out.length, 1, `${g} must be caught when unwired`);
+  }
+});
+
+test("G04 is wired via ship-flow, not fitness — it is a module, not a check", () => {
+  const row = cm.CONTROLS.find((c) => c.label.includes('(G04)'));
+  assert.equal(row.wiredIn.file, 'scripts/gds/ship-flow.js');
+  const out = cm.evaluate([row], { exists: () => true, read: () => 'nothing requires it' });
+  assert.equal(out.length, 1, 'an unrequired ship-honesty is caught');
+});
+
+test('a guard whose TEST vanished is caught', () => {
+  const row = cm.CONTROLS.find((c) => c.label.includes('(G02)'));
+  const out = cm.evaluate([row], {
+    exists: (f) => !String(f).startsWith('tests/'),
+    read: () => "require('./version-literal-guard.js')",
+  });
+  assert.ok(out.length >= 1, 'a missing test is a violation, not a shrug');
+});

package/tests/version_literals.mjs

@@ -0,0 +1,201 @@
+// tests/version_literals.mjs — no ops script hardcodes a version id
+// (task 1003166 / G02, goal 1000077, criterion guards-no-hardcoded-version).
+//
+// THE INCIDENT: smoke-write.sh named 'PMS-V1'. That version shipped, so
+// version_closed refused every create and the write-path smoke could not pass —
+// while /merge-mode Step 5 still said "4/4 expected". FOUR of the versions the
+// nine offending scripts named had already shipped when this was written.
+//
+// The tests care as much about what the guard must NOT flag as what it must: a
+// scan that fires on a comment mentioning an old version would be the over-broad
+// source assertion this repo keeps relearning (learning 1000196).
+import { strict as assert } from 'node:assert';
+import { test } from 'node:test';
+import { createRequire } from 'node:module';
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const require = createRequire(import.meta.url);
+const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
+const g = require(path.join(ROOT, 'scripts', 'gds', 'version-literal-guard.js'));
+const { pickDefaultVersion } = require(path.join(ROOT, 'scripts', 'gds', 'version-select.js'));
+const read = (...p) => fs.readFileSync(path.join(ROOT, ...p), 'utf8');
+const scan = (files) => g.scanScripts(Object.keys(files), (f) => files[f]);
+
+// ---- the selection rule ---------------------------------------------------
+test('the newest BUILDING version wins; shipped ones are never chosen', () => {
+  const vs = [
+    { id: 'PMS-V1', status: 'shipped', started_at: '2026-05-09' },
+    { id: 'GDS-V4', status: 'shipped', started_at: '2026-05-30' },
+    { id: 'BONGOS-V1', status: 'building', started_at: '2026-06-20' },
+    { id: 'CB-V1', status: 'building', started_at: '2026-06-21' },
+  ];
+  assert.equal(pickDefaultVersion(vs), 'CB-V1');
+});
+
+test('no building version yields NULL, never a guess', () => {
+  // The caller must stop and say so; interpolating '' into a create is worse.
+  assert.equal(pickDefaultVersion([{ id: 'X', status: 'shipped', started_at: '2026-01-01' }]), null);
+  assert.equal(pickDefaultVersion([]), null);
+  assert.equal(pickDefaultVersion(null), null);
+});
+
+test('a null started_at cannot decide the answer', () => {
+  const vs = [
+    { id: 'OLD', status: 'building', started_at: null },
+    { id: 'NEW', status: 'building', started_at: '2026-06-21' },
+  ];
+  assert.equal(pickDefaultVersion(vs), 'NEW', 'a half-filled row sorts last, it does not win');
+});
+
+// ---- what the guard MUST catch -------------------------------------------
+test('THE INCIDENT: a version field assigned a literal is caught', () => {
+  const r = scan({ 'scripts/gds/smoke.sh': "  'version_id': 'PMS-V1'," });
+  assert.equal(r.violations.length, 1);
+  assert.match(r.violations[0], /RESOLVED/);
+  assert.match(r.violations[0], /version-select/, 'and it names the remedy');
+});
+
+test('a --version default is caught', () => {
+  const r = scan({ 'scripts/gds/a.js': "  const v = arg('--version', args) || 'GDS-V3';" });
+  assert.equal(r.violations.length, 1);
+});
+
+test('a DEFAULT_VERSION constant is caught', () => {
+  const r = scan({ 'scripts/gds/b.js': "const DEFAULT_VERSION = process.env.X || 'BONGOS-V1';" });
+  assert.equal(r.violations.length, 1);
+});
+
+test('an unknown future prefix is caught too', () => {
+  // Enumerating PMS/GDS/BONGOS/CB would let the next scheme through.
+  const r = scan({ 'scripts/gds/c.js': "  version_id: 'ACME-V7'," });
+  assert.equal(r.violations.length, 1, 'the shape is matched, not a fixed list');
+});
+
+// ---- what the guard must NOT catch ---------------------------------------
+test('a COMMENT naming an old version is not a violation', () => {
+  // smoke-claim-consistency.sh legitimately says "PMS-V2 P6 not live yet".
+  const r = scan({
+    'scripts/gds/d.sh': '# TODO: once PMS-V2 P6 ships, drop this',
+    'scripts/gds/e.js': "// version_id: 'GDS-V3' used to live here",
+  });
+  assert.deepEqual(r.violations, []);
+});
+
+test('prose printed to the operator is not a violation', () => {
+  const r = scan({ 'scripts/gds/f.sh': '  echo "SKIP — PMS-V2 P6 not live yet"' });
+  assert.deepEqual(r.violations, []);
+});
+
+test('a RESOLVED assignment is not a violation', () => {
+  const r = scan({ 'scripts/gds/g.js': '  version_id: await resolveDefaultVersion(),' });
+  assert.deepEqual(r.violations, []);
+});
+
+test('seeders and tests are exempt BY PATH, not by allowlist', () => {
+  // A seeder's whole subject IS a historical version; asking it to resolve one
+  // at runtime would break it.
+  for (const p of ['scripts/gds/seed-v3-tasks.js', 'scripts/gds/newcomer-floor.test.js', 'scripts/hall-preview/fixtures/x.js']) {
+    assert.equal(g.isExempt(p), true, `${p} must be exempt`);
+  }
+  assert.equal(g.isExempt('scripts/gds/smoke-write.sh'), false, 'an ops script is not exempt');
+});
+
+// ---- the live tree --------------------------------------------------------
+test('the live tree passes', () => {
+  const r = g.checkNoVersionLiterals();
+  assert.equal(r.hardFail, false, `unexpected:\n  ${r.violations.join('\n  ')}`);
+});
+
+test('an empty enumeration FAILS rather than reporting all-clear', () => {
+  const r = g.checkNoVersionLiterals({ files: [] });
+  assert.equal(r.hardFail, true);
+  assert.match(r.violations[0], /scan defect/);
+});
+
+test('every allowlist entry carries a real justification', () => {
+  assert.ok(g.VERSION_LITERAL_ALLOW.size > 0);
+  for (const [k, why] of g.VERSION_LITERAL_ALLOW) {
+    assert.match(k, /^scripts\//, `${k} is a script path`);
+    assert.ok(String(why).length > 60, `${k} needs a reason, not a label`);
+  }
+});
+
+// ---- the reported bug is actually fixed ----------------------------------
+test('smoke-write.sh resolves its version instead of naming one', () => {
+  const sh = read('scripts', 'gds', 'smoke-write.sh');
+  assert.ok(!/'version_id': '[A-Z]/.test(sh), 'no literal remains');
+  // The invocation is `$(node "$(dirname "$0")/version-select.js")`, so the
+  // closing paren is preceded by a quote AND the inner $(dirname "$0") contains
+  // its own ')', so neither `.js)` nor [^)]* matches. Match to end-of-line.
+  assert.match(sh, /VERSION_ID=\$\(node[^\n]*version-select\.js/, 'it resolves at runtime');
+  assert.match(sh, /exit 1/, 'and stops if it cannot');
+});
+
+test('all four bash smokes resolve, and none names a version', () => {
+  for (const f of ['smoke-write.sh', 'smoke-claim-consistency.sh', 'smoke-batch-release.sh', 'smoke-batch-claim.sh']) {
+    const sh = read('scripts', 'gds', f);
+    assert.match(sh, /version-select\.js/, `${f} resolves`);
+    assert.match(sh, /'version_id': '\$\{VERSION_ID\}'/, `${f} uses the resolved id`);
+  }
+});
+
+test('capture.js no longer keeps its own copy of the rule', () => {
+  // It was the precedent; now it is a caller, so there is ONE implementation.
+  const src = read('scripts', 'gds', 'capture.js');
+  assert.match(src, /require\('\.\/version-select\.js'\)/);
+  assert.ok(!/async function resolveDefaultVersion/.test(src), 'the private copy is gone');
+});
+
+// ---- the four grader findings from the first pass -------------------------
+test('an unsafe version id is REFUSED, not printed', () => {
+  // Bash callers splice this into a quoted Python string, so the one place that
+  // can guarantee safety is the source. Ids with a quote or backslash could
+  // otherwise break out of the literal (the grader's defense-in-depth finding).
+  const { SAFE_ID } = require(path.join(ROOT, 'scripts', 'gds', 'version-select.js'));
+  for (const bad of ["CB-V1'; import os", 'CB\\V1', "'", '', '1-V1', 'a b']) {
+    assert.equal(SAFE_ID.test(bad), false, `${JSON.stringify(bad)} must be refused`);
+  }
+  for (const good of ['CB-V1', 'BONGOS-V1', 'GDS-V3', 'v2.1_beta']) {
+    assert.equal(SAFE_ID.test(good), true, `${good} must be accepted`);
+  }
+});
+
+test('session-eval resolves the version ONCE, not per finding', () => {
+  // It was called inside `for (const s of systemic)` — a network round trip per
+  // finding, for a value invariant across the run.
+  const src = read('scripts', 'gds', 'session-eval.js');
+  // Anchored on the CALL COUNT rather than on a loop position: the file has TWO
+  // `for (const s of systemic)` loops, so an indexOf-based test picked the wrong
+  // one and passed vacuously. Exactly one call site is the real invariant.
+  const calls = src.match(/await resolveDefaultVersion\(\)/g) || [];
+  assert.equal(calls.length, 1, `resolved once per run, not per finding (found ${calls.length})`);
+  assert.match(src, /const suggestedVersion = await resolveDefaultVersion\(\)/, 'hoisted to a const');
+  assert.match(src, /suggested_version: suggestedVersion,/, 'and the filing uses it');
+});
+
+test('version-select exits through cliExit, not process.exit', () => {
+  // CLAUDE.md: cliExit is the always-correct move for handle closure.
+  const src = read('scripts', 'gds', 'version-select.js');
+  assert.match(src, /require\('\.\/cli-lib'\)/);
+  assert.ok(!/process\.exit\(/.test(src), 'no raw process.exit remains');
+});
+
+test('ship-flow.js imports every cross-module function it calls', () => {
+  // task 1003205's carve left pushVia() called in regradeMain but never imported,
+  // so EVERY resume of a task at 'completed' died with ReferenceError before the
+  // claim resolved — found by hitting it while shipping this task. Guarding the
+  // one name is not enough; assert the import exists for anything it calls from
+  // its sibling deploy-target module.
+  const src = read('scripts', 'gds', 'ship-flow.js');
+  const deployTargetExports = ['pushVia', 'resolveDeployMode', 'mainIsProtected', 'resolveDeployTarget'];
+  const imported = /require\('\.\/ship-deploy-target\.js'\)/.test(src)
+    ? (src.match(/const \{([^}]*)\} = require\('\.\/ship-deploy-target\.js'\)/) || [, ''])[1]
+    : '';
+  for (const name of deployTargetExports) {
+    if (new RegExp(`(?<![\\w.])${name}\\(`).test(src)) {
+      assert.ok(imported.includes(name), `ship-flow.js calls ${name}() but does not import it`);
+    }
+  }
+});