@bongos/core 1.19.375 → 1.19.376

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.375",
-  "core_contract": "1.19.375",
-  "source_commit": "75b8de1c408ddd51e9e44d88a1fab7eee51cf017",
+  "core_version": "1.19.376",
+  "core_contract": "1.19.376",
+  "source_commit": "a431d7ef6e3018eeb8b16fbf2616b7b99ec4d5d5",
   "source_ref": "HEAD",
-  "built_at": "2026-08-25T23:12:43.870Z",
+  "built_at": "2026-08-25T23:21:03.279Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 335,
     "agent_docs_stubbed": 22,
-    "functional_verbatim": 1554,
+    "functional_verbatim": 1557,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 1911,
-  "tree_sha256": "6f58b38b0e6751d8cbf0fbaecae632da6dd95061c28e22fd950e182471f7ea57",
+  "file_count": 1914,
+  "tree_sha256": "6c7b5981caac40dce57dfecbee01587f18c3b4e5b4cb8fa65ebde70c9869ef53",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -347,12 +347,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "663c0e020d58d131bd1311d3cee1ee2b09b27287f59f0f301f89ecac3452a9dd"
+      "sha256": "c35dae1d34955947517c4481105267b0153f921a8db4b4c5d3b5293ab4b7987d"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "e2454e2affc5a2f9203d7dacbe10423264e2c3ff1a45f4d8d5c3bf805c658484"
+      "sha256": "05629fc4ba2d8b3c965a1e8eadee5aece7ffbb446fb473d720df890d28b2ccba"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -362,17 +362,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "2c353c9b91dcb8c0afbc961e5b5f383aee69569c05cf7a03fabac02b34d06760"
+      "sha256": "e72156a07def001a8ac5ca95920f079c55a49bd0fd713fd22a06a6b84d7957d3"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "b19f0435cf2a0124d9e568ad6daac87b54220ea3f170f65fda54ed391058f480"
+      "sha256": "28f456a1b259b898b4bfc0d353c9877b5f10828beae478c2ee6aa1a66e64c33a"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "f6d8b1a0ba6b2868204aabda309594e3c25f092611972dbd32753a257a095bd3"
+      "sha256": "7332b346c70cf367f441ba15aa19a0c35180d98239b3525bc2c26285e94c6eb7"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -1477,12 +1477,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "3fca3c9ed9fe092266ac1b4c721094cd0d50792e1b17a0821f7135d65fb89a57"
+      "sha256": "96e9749fd1a6061c3ae96edf1da81a42fc6f89144bca6844870e5abcc7aeb7fe"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "72f2236c4123dd96be29c778df0b6b2b8531923cd394f193cf80b221b9bb8bdb"
+      "sha256": "a743ea7c9fbe29419a6efc5978472c8fa27da2178eef34edbc988574990733f8"
     },
     {
       "path": "docs/architecture.md",
@@ -1507,12 +1507,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "fd5277bcf4ea80591a81d0b321d67f51380e0db35d0c08e237d95477f02d93b3"
+      "sha256": "0b1369b8f91cd2058ff958fb7dbc97d223eaf740b779123ba1485d6473bcf652"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "24955cb19ef7ef3b24783f58e9a8b403bdd43c8845b4a800b992191d6872dc01"
+      "sha256": "08a804d711a6345dd89bfc0a0b908b0e40ee7fe5c563bf7ba9bd12dad0123735"
     },
     {
       "path": "docs/design-contract.md",
@@ -2534,6 +2534,11 @@
       "mode": "0000644",
       "sha256": "322578d3d22b87eb07c4b9b4b521c66b0c986a937c3657d0b90123f73867461d"
     },
+    {
+      "path": "migrations/core_227_task_created_by.sql",
+      "mode": "0000644",
+      "sha256": "b3fbc5d91adf6c6021859bdd8050015c0449360eb33d70c71fdeda0cc1276dd3"
+    },
     {
       "path": "modules/agents/migrations/agents_001_definitions.sql",
       "mode": "0000644",
@@ -2917,7 +2922,7 @@
     {
       "path": "modules/dev-box/app/src/vendor/bongos-client.cjs",
       "mode": "0000644",
-      "sha256": "2c353c9b91dcb8c0afbc961e5b5f383aee69569c05cf7a03fabac02b34d06760"
+      "sha256": "e72156a07def001a8ac5ca95920f079c55a49bd0fd713fd22a06a6b84d7957d3"
     },
     {
       "path": "modules/dev-box/app/test/unit.mjs",
@@ -3572,17 +3577,17 @@
     {
       "path": "modules/hall-ui/public/goals-lib.js",
       "mode": "0000644",
-      "sha256": "a7a0385c3c8026e6b21ac5793bdf5b48fa31968f176ebe891c43ad5c867df1c8"
+      "sha256": "c3c4774664474b245a9eae081e41e9d9659cfbefa68b97651f58d5331b1f601b"
     },
     {
       "path": "modules/hall-ui/public/goals-page.js",
       "mode": "0000644",
-      "sha256": "0855874df7337e46cc17251dd98155f69eb3469c59a8622cfdcaf7aa4c3941e8"
+      "sha256": "968063dbbdbe060a855dde61d3e2db8ade8869f09ab1024dfb20582b1a15ceeb"
     },
     {
       "path": "modules/hall-ui/public/goals-render.js",
       "mode": "0000644",
-      "sha256": "52f00a63296f8f2068980d86e2bbd70a966d06da4b8adf42a7caa987a5a5704a"
+      "sha256": "99c81d1ea257d64c312e0917379b4437ba9b645ae8ba74809a1a05a095280bba"
     },
     {
       "path": "modules/hall-ui/public/goals.css",
@@ -3867,7 +3872,7 @@
     {
       "path": "modules/hall-ui/public/task-lib.js",
       "mode": "0000644",
-      "sha256": "c2cc0c75f660312f543c84138bc5b82652b710682bc86ae8fd517d7ee1d9e661"
+      "sha256": "dde9fe5cc1d80829c45aa6ef4f486697345a122cf0a7054991b7c7ebc390754f"
     },
     {
       "path": "modules/hall-ui/public/task.html",
@@ -3912,7 +3917,7 @@
     {
       "path": "modules/hall-ui/public/work.js",
       "mode": "0000644",
-      "sha256": "5492625cba8e190637faee5bf74fbc868ecb2e6e21833d10dc8210cac7a19510"
+      "sha256": "a9a33001c0cd788926c50c670718ac52552690f67a9de7a07999600907555b9f"
     },
     {
       "path": "modules/ideas/CLAUDE.md",
@@ -3932,7 +3937,7 @@
     {
       "path": "modules/ideas/inbox.js",
       "mode": "0000644",
-      "sha256": "d862199e649f817cc95e95bb57a0a5d7262acac37d3315df1ec916b983547e0d"
+      "sha256": "edb3fc66ff0c89fde112b691bd761478ccf621bacb0bb91f7ae94ec63c2546c7"
     },
     {
       "path": "modules/ideas/migrations/ideas_001_grades.sql",
@@ -4072,7 +4077,7 @@
     {
       "path": "modules/lifecycle/db-tasks.js",
       "mode": "0000644",
-      "sha256": "43748950aee899125bc40b8fb6f26a7df5645746e23fcbe6bbe3ea486f0b7248"
+      "sha256": "94b785f970615056c9c3e896009868ef762fe78ab9f640889b9286ccef46fcf0"
     },
     {
       "path": "modules/lifecycle/db-versions.js",
@@ -4129,6 +4134,11 @@
       "mode": "0000644",
       "sha256": "7115a27272fe2594b65e2e56a796f5bf97600cb94ba301bc21599c6bc4e60175"
     },
+    {
+      "path": "modules/lifecycle/goal-rollup.js",
+      "mode": "0000644",
+      "sha256": "cd3c3c28e9e1361b1f02a8de7a973d0d4d87b916477af98b9032de87dfbc588d"
+    },
     {
       "path": "modules/lifecycle/goal-suggest.js",
       "mode": "0000644",
@@ -4227,7 +4237,7 @@
     {
       "path": "modules/lifecycle/routes/goals.js",
       "mode": "0000644",
-      "sha256": "db587e3a79c76671cdba1900bfdce156d62d0ef270319adb82a3b0805f3d091c"
+      "sha256": "22c4d71ae825dc0601532d45c22d37bcd656cdd408ec2fc3e8e668a916541687"
     },
     {
       "path": "modules/lifecycle/routes/help-requests.js",
@@ -4252,12 +4262,12 @@
     {
       "path": "modules/lifecycle/routes/task-write-routes.js",
       "mode": "0000644",
-      "sha256": "d4b1eb471d334fdf164acd76814cc19358030b8d02146f51481d61a990925e41"
+      "sha256": "4ef343018b69528ab9518683ba0c6878bfcf5b9398ee7a2ade21780c20218538"
     },
     {
       "path": "modules/lifecycle/routes/tasks.js",
       "mode": "0000644",
-      "sha256": "e27a8ce945d8d7e68d618e60b3cac72af9722588affb876fa22df0f525ec3dc5"
+      "sha256": "87b2e23ceedac103b61007348976c257a2961954a4853ce5ff3be0e2f74a4ede"
     },
     {
       "path": "modules/lifecycle/routes/versions.js",
@@ -4917,12 +4927,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "63450349ce8f5c64c960a3f83c7f217324c1a7ee61f28e5ff06e8972021b53d3"
+      "sha256": "0cdd9747593cc2fb83327041cf2d869234271cf7e3dcc7ecfb626c43ed262155"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "e7deabfda7d0840b92653973c68e280bbe64ded769d1dd8fa94db95a21cc0ba6"
+      "sha256": "00ff5e9289bc25cc0e6d1a7226259b52b906eaf887c9dd417067d41193877d7c"
     },
     {
       "path": "public-docs/index.html",
@@ -6807,7 +6817,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "8d822b226b35e7226e3678e7e1e53e0c4da9d27be845bfe69d6832c976d2ffcb"
+      "sha256": "94c29ffd7acffe072f72060e6bf7deb322031a3521e935f77f4069cf7da1a699"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -7839,10 +7849,15 @@
       "mode": "0000644",
       "sha256": "447e6376ae5f5e2bedf1a80b3355604544a5e349da87d110fc0135cc3cd98fac"
     },
+    {
+      "path": "tests/goal_sort_staleness.mjs",
+      "mode": "0000644",
+      "sha256": "1c34a429a1e96c409e8f6e2199d79a0f75b95f25a2cd5f1a86b6f2e254d6ac40"
+    },
     {
       "path": "tests/goal_subtitle.mjs",
       "mode": "0000644",
-      "sha256": "b963d8a8e5d5a405de841a5f965b99e5f4d34bdb33bdbf7964f961f0901c1cc8"
+      "sha256": "d3f104c710cecd545c9999149a5f02c54ba43ba8ea1e8bcd7e1659eaa2b21f33"
     },
     {
       "path": "tests/goal_suggest.mjs",
@@ -7867,7 +7882,7 @@
     {
       "path": "tests/goals_lib.mjs",
       "mode": "0000644",
-      "sha256": "5377b04f5c2153d1edcd5f38604a24195a2da8e4f7dcbc95692ceb7a1079354a"
+      "sha256": "92aa5dbf8eba0a0aaa34bf5d25aa439ef5a9265f5e8cd374c2334670a3cdc28d"
     },
     {
       "path": "tests/government_abuse_matrix.mjs",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 321 operations across 52 resource groups
+- 322 operations across 52 resource groups
 
 ## Install
 

package/clients/bongos-client/bongos-client.global.js

@@ -367,6 +367,8 @@ function createClient(opts = {}) {
       getGoalsInbox: (args) => request("GET", "/goals/inbox", { hasBody: false }, args),
       // POST /goals/reorder — rank: metic+archon — POST /goals/reorder
       postGoalsReorder: (args) => request("POST", "/goals/reorder", { hasBody: true }, args),
+      // GET /goals/rollups — rank: any-builder — GET /goals/rollups
+      getGoalsRollups: (args) => request("GET", "/goals/rollups", { hasBody: false }, args),
       // GET /goals/suggestions — rank: any-builder — GET /goals/suggestions
       getGoalsSuggestions: (args) => request("GET", "/goals/suggestions", { hasBody: false }, args),
     },

package/clients/bongos-client/index.cjs

@@ -366,6 +366,8 @@ function createClient(opts = {}) {
       getGoalsInbox: (args) => request("GET", "/goals/inbox", { hasBody: false }, args),
       // POST /goals/reorder — rank: metic+archon — POST /goals/reorder
       postGoalsReorder: (args) => request("POST", "/goals/reorder", { hasBody: true }, args),
+      // GET /goals/rollups — rank: any-builder — GET /goals/rollups
+      getGoalsRollups: (args) => request("GET", "/goals/rollups", { hasBody: false }, args),
       // GET /goals/suggestions — rank: any-builder — GET /goals/suggestions
       getGoalsSuggestions: (args) => request("GET", "/goals/suggestions", { hasBody: false }, args),
     },

package/clients/bongos-client/index.d.ts

@@ -46,6 +46,7 @@ export interface GetGoalsIdConflictsResponse { ok: boolean; goal_id: unknown; co
 export interface GetGoalsIdRequestsResponse { requests: unknown }
 export interface GetGoalsIdResponse { goal: unknown; members: unknown; criteria: unknown; dependencies: unknown }
 export interface GetGoalsResponse { goals: unknown }
+export interface GetGoalsRollupsResponse { rollups: unknown }
 export interface GetGovernmentAssignmentsResponse { assignments: unknown }
 export interface GetGovernmentPermissionsResponse { permissions: unknown; principals: unknown }
 export interface GetGovernmentRanksResponse { ranks: unknown }
@@ -351,6 +352,7 @@ export interface PostTasksIdVoteRequest { vote: -1 | 0 | 1 }
 export interface PostTasksIdVoteResponse { ok: boolean; task_id: unknown; my_vote: unknown; net_votes: unknown; total_votes: unknown }
 export interface PostTasksNewcomerRestockResponse { ok: boolean; stamped: unknown; results: unknown }
 export interface PostTasksRequest { version_id: string; title: string; description?: string; status?: string; touches?: string[]; est_minutes?: number; est_cost_usd?: number; manual_degree?: number; priority?: number; automation_tag?: string; credits_reward?: number; source?: string; source_ref?: string; value_summary?: string; kind?: string; discipline?: string; parallel_safe?: unknown; newcomer_friendly?: boolean; security_sensitive?: boolean; requires_rank?: string; auto_detect_touches?: boolean; criterion_ids?: unknown[]; module_key?: string; goal_id?: number }
+export interface PostTasksResponse { task: unknown; needs_migration: unknown; criteria: unknown; idempotent: boolean }
 export interface PostVersionsIdDoneWhenRequest { criterion_id: string; criterion_md: string; goal_id?: number; sort_order?: number }
 export interface PostVersionsIdDoneWhenResponse { ok: boolean; criterion: unknown }
 export interface PostVersionsRequest { id: string; name: string; status?: string; track?: string; done_when?: string; scope_doc_path?: string; criteria?: unknown[] }
@@ -655,6 +657,8 @@ export interface BongosClient {
     getGoalsInbox(args?: RequestArgs): Promise<ApiResponse>;
     /** POST /goals/reorder — rank: metic+archon */
     postGoalsReorder(args: RequestArgs & { body: PostGoalsReorderRequest }): Promise<PostGoalsReorderResponse>;
+    /** GET /goals/rollups — rank: any-builder */
+    getGoalsRollups(args?: RequestArgs): Promise<GetGoalsRollupsResponse>;
     /** GET /goals/suggestions — rank: any-builder */
     getGoalsSuggestions(args?: RequestArgs): Promise<ApiResponse>;
   };
@@ -1038,7 +1042,7 @@ export interface BongosClient {
     /** GET /tasks — rank: any-builder */
     getTasks(args?: RequestArgs): Promise<GetTasksResponse>;
     /** POST /tasks — rank: metic+archon */
-    postTasks(args: RequestArgs & { body: PostTasksRequest }): Promise<ApiResponse>;
+    postTasks(args: RequestArgs & { body: PostTasksRequest }): Promise<PostTasksResponse>;
     /** GET /tasks/{id} — rank: any-builder */
     getTasksId(args?: RequestArgs): Promise<ApiResponse>;
     /** PATCH /tasks/{id} — rank: metic+archon */

package/clients/bongos-client/index.mjs

@@ -363,6 +363,8 @@ export function createClient(opts = {}) {
       getGoalsInbox: (args) => request("GET", "/goals/inbox", { hasBody: false }, args),
       // POST /goals/reorder — rank: metic+archon — POST /goals/reorder
       postGoalsReorder: (args) => request("POST", "/goals/reorder", { hasBody: true }, args),
+      // GET /goals/rollups — rank: any-builder — GET /goals/rollups
+      getGoalsRollups: (args) => request("GET", "/goals/rollups", { hasBody: false }, args),
       // GET /goals/suggestions — rank: any-builder — GET /goals/suggestions
       getGoalsSuggestions: (args) => request("GET", "/goals/suggestions", { hasBody: false }, args),
     },

package/docs/api/openapi.json

@@ -4428,6 +4428,44 @@
         ]
       }
     },
+    "/goals/rollups": {
+      "get": {
+        "operationId": "get_goals_rollups",
+        "tags": [
+          "goals"
+        ],
+        "summary": "GET /goals/rollups",
+        "description": "GET /goals/rollups?version= — one small row per goal: readiness counters, the last-activity timestamp, the craft set, and the next claimable task (task 1003278). It replaces the Goals page's whole-version task fetch, which measured 5,229,455 bytes for ~1,400 tasks on 2026-08-25 to produce ~40 counter objects. Registered BEFORE /goals/:id or Express routes 'rollups' to the param. rank: any-builder — the same read as the goal board it feeds.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/lifecycle/routes/goals.js",
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetGoalsRollupsResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/goals/suggestions": {
       "get": {
         "operationId": "get_goals_suggestions",
@@ -12632,7 +12670,7 @@
           "tasks"
         ],
         "summary": "GET /tasks",
-        "description": "reads (filtered task list); preserved per CRITICAL §4.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "description": "**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
         "x-source": "modules/lifecycle/routes/tasks.js",
         "responses": {
@@ -12687,7 +12725,14 @@
         },
         "responses": {
           "200": {
-            "description": "Success."
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostTasksResponse"
+                }
+              }
+            }
           },
           "400": {
             "$ref": "#/components/responses/ValidationFailed"
@@ -15130,6 +15175,15 @@
           "goals"
         ]
       },
+      "GetGoalsRollupsResponse": {
+        "type": "object",
+        "properties": {
+          "rollups": {}
+        },
+        "required": [
+          "rollups"
+        ]
+      },
       "GetGovernmentAssignmentsResponse": {
         "type": "object",
         "properties": {
@@ -19974,6 +20028,23 @@
         ],
         "additionalProperties": false
       },
+      "PostTasksResponse": {
+        "type": "object",
+        "properties": {
+          "task": {},
+          "needs_migration": {},
+          "criteria": {},
+          "idempotent": {
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "task",
+          "needs_migration",
+          "criteria",
+          "idempotent"
+        ]
+      },
       "PostVersionsIdDoneWhenRequest": {
         "type": "object",
         "properties": {
@@ -20234,9 +20305,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 321,
-  "x-schema-count": 355,
+  "x-endpoint-count": 322,
+  "x-schema-count": 357,
   "x-undocumented-bodies": 9,
-  "x-response-schemas": 238,
+  "x-response-schemas": 240,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 321 endpoints across 52 route files.
+> **Generated from the live route files** — the route file is authoritative. 322 endpoints across 52 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -206,7 +206,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | GET | `/api/bongos/github/repos` | `any-builder` | — | acts only on the caller's OWN GitHub identity (the token they granted). |
 | POST | `/api/bongos/github/repos` | `any-builder` | `name` | creates a repo in the caller's OWN account. |
 
-## `goals` (27)
+## `goals` (28)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -236,6 +236,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | PATCH | `/api/bongos/goals/:id/visibility` | `any-builder` | — | PATCH /goals/:id/visibility — make a goal public\|private (task 1952 / ADR 0112). |
 | GET | `/api/bongos/goals/inbox` | `any-builder` | — | GET /goals/inbox — the caller's private-goals inbox (task 1952 / ADR 0112): { invitations: invites addressed to me (accept/decline); join… |
 | POST | `/api/bongos/goals/reorder` | `metic+archon` | `version_id`, `ordered_ids` | POST /goals/reorder — Archon drag-to-reorder: set the priority order of every goal WITHIN one version (task 1760). |
+| GET | `/api/bongos/goals/rollups` | `any-builder` | — | GET /goals/rollups?version= — one small row per goal: readiness counters, the last-activity timestamp, the craft set, and the next claima… |
 | GET | `/api/bongos/goals/suggestions` | `any-builder` | — | GET /goals/suggestions — "which goal should this draft live in?", answered before anything is created (task 1003062 / R07). |
 
 ## `government` (13)
@@ -538,7 +539,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
-| GET | `/api/bongos/tasks` | `any-builder` | — | reads (filtered task list); preserved per CRITICAL §4. |
+| GET | `/api/bongos/tasks` | `any-builder` | — |  |
 | POST | `/api/bongos/tasks` | `metic+archon` | `version_id`, `title`, `description`, `status`, `touches`, `est_minutes`, `est_cost_usd`, `manual_degree`, `priority`, `automation_tag`, `credits_reward`, `source`, `source_ref`, `value_summary`, `kind`, `discipline`, `parallel_safe`, `newcomer_friendly`, `security_sensitive`, `requires_rank`, `auto_detect_touches`, `criterion_ids`, `module_key`, `goal_id` | Task create/promote/edit (plan/scope mutation) is Metic+ as of ADR 0090 (owner decision 2026-06-26): a Metic who can run idea-triage may … |
 | GET | `/api/bongos/tasks/:id` | `any-builder` | — | single-task read; preserved per CRITICAL §4 (supervisor hot path). |
 | PATCH | `/api/bongos/tasks/:id` | `metic+archon` | `kind`, `discipline`, `requires_rank`, `module_key`, `goal_id`, `parent_task_id`, `parallel_safe`, `newcomer_friendly`, `xenos_claimable`, `security_sensitive`, `automation_tag`, `needs_migration`, `description`, `status` | PATCH /tasks/:id — supports body.parent_task_id (V2 C2), body.kind (V2 B1), body.discipline (mig 014), body.parallel_safe (mig 028), and … |