@bongos/core 1.19.416 → 1.19.418

package/docs/copy-registry.json

@@ -3,17 +3,17 @@
   "generator": "scripts/gds/copy-inventory.js",
   "goal": 1000074,
   "counts": {
-    "strings": 1544,
-    "unique_ids": 1341,
-    "certain": 1544,
+    "strings": 1559,
+    "unique_ids": 1356,
+    "certain": 1559,
     "heuristic": 0,
     "duplicate_ids": 156
   },
   "surfaces": {
     "builders-hall": {
       "at": "modules/hall-ui/public",
-      "files": 71,
-      "strings": 1141
+      "files": 72,
+      "strings": 1156
     },
     "status-dashboard": {
       "at": "modules/status-ui/public",
@@ -1321,8 +1321,8 @@
       "text": "This one",
       "occurrences": 2,
       "at": [
-        "modules/hall-ui/public/settings.html:197",
-        "modules/hall-ui/public/settings.html:198"
+        "modules/hall-ui/public/settings.html:216",
+        "modules/hall-ui/public/settings.html:217"
       ]
     },
     {
@@ -1868,7 +1868,7 @@
       "surface": "builders-hall",
       "text": ", claiming, and shipping show — render as rich in-feed widgets or as plain text. Widgets are prettier but spend tokens; plain text is cheaper with the same information.",
       "file": "modules/hall-ui/public/settings.html",
-      "line": 248,
+      "line": 267,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -2039,7 +2039,7 @@
       "surface": "builders-hall",
       "text": "A small app for your menu bar (Mac) or system tray (Windows): one switch to start and stop your dev box, with a chime when it's ready. It signs in with browser clicks and sets up Claude Desktop for you — no terminal at all.",
       "file": "modules/hall-ui/public/settings.html",
-      "line": 188,
+      "line": 207,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -2048,7 +2048,7 @@
       "surface": "builders-hall",
       "text": "A sound plays at each turn of your work — a gentle chime when Claude finishes, a flourish when a task ships or your rank rises. Turn off any you would rather not hear.",
       "file": "modules/hall-ui/public/settings.html",
-      "line": 283,
+      "line": 302,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -2111,7 +2111,16 @@
       "surface": "builders-hall",
       "text": "Actions apply at once. Closing stops and deletes the box; you can start a fresh one anytime.",
       "file": "modules/hall-ui/public/settings.html",
-      "line": 180,
+      "line": 199,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
+    {
+      "id": "524188fe0078",
+      "surface": "builders-hall",
+      "text": "Active sessions",
+      "file": "modules/hall-ui/public/settings.html",
+      "line": 152,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -2696,7 +2705,7 @@
       "surface": "builders-hall",
       "text": "Changes save at once and take effect the next time you start a session on this machine.",
       "file": "modules/hall-ui/public/settings.html",
-      "line": 295,
+      "line": 314,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -2705,7 +2714,7 @@
       "surface": "builders-hall",
       "text": "Changes save at once. Your new choice plays the next time that event fires.",
       "file": "modules/hall-ui/public/settings.html",
-      "line": 308,
+      "line": 327,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -2714,7 +2723,7 @@
       "surface": "builders-hall",
       "text": "Changes save the moment you pick. “Default” clears your override and falls back to the system's choice.",
       "file": "modules/hall-ui/public/settings.html",
-      "line": 277,
+      "line": 296,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -2777,7 +2786,7 @@
       "surface": "builders-hall",
       "text": "Choose which sound plays for each build event — one when Claude waits for your input, another when a task ships, a coin clink when {{currency}} arrive. Each event offers a small set of choices; more will be added as new audio ships.",
       "file": "modules/hall-ui/public/settings.html",
-      "line": 301,
+      "line": 320,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -3101,7 +3110,7 @@
       "surface": "builders-hall",
       "text": "Connect your Claude Desktop to your dev box with a one-time pairing code — the guided flow lives on its own page.",
       "file": "modules/hall-ui/public/settings.html",
-      "line": 214,
+      "line": 233,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -3411,6 +3420,15 @@
       "origin": "js-notice",
       "confidence": "certain"
     },
+    {
+      "id": "7054cd87b5ec",
+      "surface": "builders-hall",
+      "text": "Could not end that session: {…}",
+      "file": "modules/hall-ui/public/settings-sessions.js",
+      "line": 85,
+      "origin": "js-notice",
+      "confidence": "certain"
+    },
     {
       "id": "01f0308c66e0",
       "surface": "builders-hall",
@@ -3627,6 +3645,15 @@
       "origin": "js-text-assign",
       "confidence": "certain"
     },
+    {
+      "id": "9d533e811dec",
+      "surface": "builders-hall",
+      "text": "Could not load your sessions: {…}",
+      "file": "modules/hall-ui/public/settings-sessions.js",
+      "line": 114,
+      "origin": "js-notice",
+      "confidence": "certain"
+    },
     {
       "id": "64f9d51f0fa2",
       "surface": "builders-hall",
@@ -3915,6 +3942,15 @@
       "origin": "js-text-assign",
       "confidence": "certain"
     },
+    {
+      "id": "d4601887a058",
+      "surface": "builders-hall",
+      "text": "Could not sign out everywhere: {…}",
+      "file": "modules/hall-ui/public/settings-sessions.js",
+      "line": 102,
+      "origin": "js-notice",
+      "confidence": "certain"
+    },
     {
       "id": "b1602d01f4bb",
       "surface": "builders-hall",
@@ -4109,7 +4145,7 @@
       "surface": "builders-hall",
       "text": "Dev box app",
       "file": "modules/hall-ui/public/settings.html",
-      "line": 187,
+      "line": 206,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -4244,7 +4280,7 @@
       "surface": "builders-hall",
       "text": "Download for Mac",
       "file": "modules/hall-ui/public/settings.html",
-      "line": 195,
+      "line": 214,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -4253,7 +4289,7 @@
       "surface": "builders-hall",
       "text": "Download for Windows",
       "file": "modules/hall-ui/public/settings.html",
-      "line": 196,
+      "line": 215,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -4361,7 +4397,7 @@
       "surface": "builders-hall",
       "text": "Each slash-command can run on a different model. The system has a default for every skill; choose another to override it, or leave it on Default.",
       "file": "modules/hall-ui/public/settings.html",
-      "line": 263,
+      "line": 282,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -4374,6 +4410,33 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "daed038e1162",
+      "surface": "builders-hall",
+      "text": "End every session, including this one? You will need to sign in again, and any CLI token will need re-issuing.",
+      "file": "modules/hall-ui/public/settings-sessions.js",
+      "line": 94,
+      "origin": "js-notice",
+      "confidence": "certain"
+    },
+    {
+      "id": "8d2b4f119ee3",
+      "surface": "builders-hall",
+      "text": "End session",
+      "file": "modules/hall-ui/public/settings-sessions.js",
+      "line": 46,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
+    {
+      "id": "8e82771e5b63",
+      "surface": "builders-hall",
+      "text": "Ending a session takes effect immediately; the token stops working on its very next request.",
+      "file": "modules/hall-ui/public/settings.html",
+      "line": 164,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "58d381535285",
       "surface": "builders-hall",
@@ -4415,7 +4478,7 @@
       "surface": "builders-hall",
       "text": "Event sounds",
       "file": "modules/hall-ui/public/settings.html",
-      "line": 300,
+      "line": 319,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -4446,6 +4509,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "bc481184a282",
+      "surface": "builders-hall",
+      "text": "Every place you are currently signed in — this browser, your terminal, any dev box. A session refreshes for another 24 hours each time it is used, so one you have forgotten about can stay alive indefinitely. If a token has leaked, end it here.",
+      "file": "modules/hall-ui/public/settings.html",
+      "line": 153,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "1e05b7fe42c8",
       "surface": "builders-hall",
@@ -4541,7 +4613,7 @@
       "surface": "builders-hall",
       "text": "First open: your computer warns about an unknown developer — expected (we haven't bought the signing certificates yet; the app is ours). Mac: System Settings → Privacy & Security → “Open Anyway”. Windows: “More info” → “Run anyway”.",
       "file": "modules/hall-ui/public/settings.html",
-      "line": 202,
+      "line": 221,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -4973,7 +5045,7 @@
       "surface": "builders-hall",
       "text": "How readily Claude opens a",
       "file": "modules/hall-ui/public/settings.html",
-      "line": 230,
+      "line": 249,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -5171,7 +5243,7 @@
       "surface": "builders-hall",
       "text": "Image-generation key",
       "file": "modules/hall-ui/public/settings.html",
-      "line": 155,
+      "line": 174,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -5207,7 +5279,7 @@
       "surface": "builders-hall",
       "text": "Intel Mac?",
       "file": "modules/hall-ui/public/settings.html",
-      "line": 197,
+      "line": 216,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -5765,7 +5837,7 @@
       "surface": "builders-hall",
       "text": "Master sound volume",
       "file": "modules/hall-ui/public/settings.html",
-      "line": 291,
+      "line": 310,
       "origin": "html-attr:aria-label",
       "confidence": "certain"
     },
@@ -6210,6 +6282,15 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "2a6d7552e21f",
+      "surface": "builders-hall",
+      "text": "No other sessions.",
+      "file": "modules/hall-ui/public/settings-sessions.js",
+      "line": 64,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "706cfcdf795c",
       "surface": "builders-hall",
@@ -6710,7 +6791,7 @@
       "surface": "builders-hall",
       "text": "Open the pairing page",
       "file": "modules/hall-ui/public/settings.html",
-      "line": 219,
+      "line": 238,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -6800,7 +6881,7 @@
       "surface": "builders-hall",
       "text": "Pair Claude Desktop",
       "file": "modules/hall-ui/public/settings.html",
-      "line": 213,
+      "line": 232,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -7646,7 +7727,7 @@
       "surface": "builders-hall",
       "text": "Saves the moment you toggle; applies from your next session.",
       "file": "modules/hall-ui/public/settings.html",
-      "line": 255,
+      "line": 274,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -7866,6 +7947,15 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "d14e8e9acaff",
+      "surface": "builders-hall",
+      "text": "Session ended.",
+      "file": "modules/hall-ui/public/settings-sessions.js",
+      "line": 81,
+      "origin": "js-notice",
+      "confidence": "certain"
+    },
     {
       "id": "3f8f6c62adb8",
       "surface": "builders-hall",
@@ -8100,12 +8190,21 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "8ad669ab2565",
+      "surface": "builders-hall",
+      "text": "Sign out everywhere",
+      "file": "modules/hall-ui/public/settings.html",
+      "line": 161,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "ecc12c1dd4de",
       "surface": "builders-hall",
       "text": "Skill voices",
       "file": "modules/hall-ui/public/settings.html",
-      "line": 262,
+      "line": 281,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -8249,7 +8348,7 @@
       "surface": "builders-hall",
       "text": "Stored encrypted; never shown again after saving — only its last four digits.",
       "file": "modules/hall-ui/public/settings.html",
-      "line": 164,
+      "line": 183,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -8415,6 +8514,15 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "545c59c1deb7",
+      "surface": "builders-hall",
+      "text": "That is the session you are using right now. Ending it signs you out of this page.",
+      "file": "modules/hall-ui/public/settings-sessions.js",
+      "line": 74,
+      "origin": "js-notice",
+      "confidence": "certain"
+    },
     {
       "id": "4a8d1beb6f98",
       "surface": "builders-hall",
@@ -8465,7 +8573,7 @@
       "surface": "builders-hall",
       "text": "The art pipeline draws tiles and sprites with Google AI Studio (Gemini). Needed only if you generate art — your key, your bill, paid only for what you make.",
       "file": "modules/hall-ui/public/settings.html",
-      "line": 156,
+      "line": 175,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -8528,7 +8636,7 @@
       "surface": "builders-hall",
       "text": "The hosted machine your work runs on. Open it in your browser (the online terminal) or connect over SSH — whichever you prefer.",
       "file": "modules/hall-ui/public/settings.html",
-      "line": 175,
+      "line": 194,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -8915,7 +9023,7 @@
       "surface": "builders-hall",
       "text": "This one",
       "file": "modules/hall-ui/public/settings.html",
-      "line": 197,
+      "line": 216,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -8924,7 +9032,7 @@
       "surface": "builders-hall",
       "text": "This one",
       "file": "modules/hall-ui/public/settings.html",
-      "line": 198,
+      "line": 217,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -9365,7 +9473,7 @@
       "surface": "builders-hall",
       "text": "Whether your session cards — what",
       "file": "modules/hall-ui/public/settings.html",
-      "line": 247,
+      "line": 266,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -9635,7 +9743,7 @@
       "surface": "builders-hall",
       "text": "Your choice",
       "file": "modules/hall-ui/public/settings.html",
-      "line": 271,
+      "line": 290,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -9653,7 +9761,7 @@
       "surface": "builders-hall",
       "text": "Your dev box",
       "file": "modules/hall-ui/public/settings.html",
-      "line": 174,
+      "line": 193,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -10197,6 +10305,15 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "12a23cc46ace",
+      "surface": "builders-hall",
+      "text": "ends every session including this one — you will be asked to sign in again.",
+      "file": "modules/hall-ui/public/settings.html",
+      "line": 162,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "5321f9da0841",
       "surface": "builders-hall",
@@ -10467,6 +10584,15 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "9018bf6e99eb",
+      "surface": "builders-hall",
+      "text": "last used {…} · signed in {…}",
+      "file": "modules/hall-ui/public/settings-sessions.js",
+      "line": 46,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "2ce7738b1eb0",
       "surface": "builders-hall",
@@ -10571,7 +10697,7 @@
       "surface": "builders-hall",
       "text": "new thread",
       "file": "modules/hall-ui/public/settings.html",
-      "line": 231,
+      "line": 250,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -10679,7 +10805,7 @@
       "surface": "builders-hall",
       "text": "of work — a tangent, an investigation, an unprompted suggestion — instead of staying on your claimed task. It never limits the work on the task itself. Your rank sets the starting point; newcomers stay locked low.",
       "file": "modules/hall-ui/public/settings.html",
-      "line": 231,
+      "line": 250,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -10944,6 +11070,15 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "632527db5bca",
+      "surface": "builders-hall",
+      "text": "this session",
+      "file": "modules/hall-ui/public/settings-sessions.js",
+      "line": 44,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "ee431f143549",
       "surface": "builders-hall",

package/docs/file-map.md

@@ -226,6 +226,7 @@
 │   │   ├── routes/              ← one file per KERNEL feature so parallel branches stop colliding on routes.js — the domain routes (tasks/claims/versions/cost/leaderboard/memory/learnings/box/inbox/blockers/search/gate-approvals/discord/…) graduated with their domains into `modules/<key>/routes/`, reached only through the loader
 │   │   │   ├── _helpers.js      ← validateOrRespond, parseId, LIMITS, asyncHandler, publicOrigin, corsPublicGet, parseCookie
 │   │   │   ├── healthz.js, auth.js, me.js, builders.js, instance.js
+│   │   │   ├── my-sessions.js   ← GET /me/sessions + POST /me/sessions/revoke{,-all} — the OWN-scoped session self-service (task 1003341, ADR 0206): see and kill your own sessions without an Archon. Kept apart from auth.js's admin-gated cross-builder pair so the no-caller-named-owner rule holds over a WHOLE file (tests/own_session_revoke.mjs)
 │   │   │   ├── modules.js       ← GET /modules — listModules() for the loader's live enablement roster
 │   │   │   ├── audit-log.js, backup.js, optimizer.js
 │   │   │   ├── llm-cache.js     ← POST /llm-cache/{lookup,store} — the ADR 0080 content-addressed cache API transport

package/docs/module-api-changelog.md

@@ -1269,5 +1269,9 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.414 with no explicit bump. run 33262322596. (task 1002620)
   1.19.416 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.415 with no explicit bump. run 33262582879. (task 1002620)
+  1.19.417 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.416 with no explicit bump. run 33263505319. (task 1002620)
+  1.19.418 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.417 with no explicit bump. run 33264139544. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/dev-box/app/src/vendor/bongos-client.cjs

@@ -522,6 +522,12 @@ function createClient(opts = {}) {
       getMeRender: (args) => request("GET", "/me/render", { hasBody: false }, args),
       // PATCH /me/render — rank: any-builder — PATCH /me/render
       patchMeRender: (args) => request("PATCH", "/me/render", { hasBody: true }, args),
+      // GET /me/sessions — rank: any-builder — GET /me/sessions
+      getMeSessions: (args) => request("GET", "/me/sessions", { hasBody: false }, args),
+      // POST /me/sessions/revoke — rank: any-builder — POST /me/sessions/revoke
+      postMeSessionsRevoke: (args) => request("POST", "/me/sessions/revoke", { hasBody: true }, args),
+      // POST /me/sessions/revoke-all — rank: any-builder — POST /me/sessions/revoke-all
+      postMeSessionsRevokeAll: (args) => request("POST", "/me/sessions/revoke-all", { hasBody: true }, args),
       // GET /me/skill-prefs — rank: any-builder — GET /me/skill-prefs
       getMeSkillPrefs: (args) => request("GET", "/me/skill-prefs", { hasBody: false }, args),
       // PATCH /me/skill-prefs — rank: any-builder — PATCH /me/skill-prefs