@bongos/core 1.19.450 → 1.19.452

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.450",
-  "core_contract": "1.19.450",
-  "source_commit": "51f7db91d5aa247c668f932c8c792afed0c0b690",
+  "core_version": "1.19.452",
+  "core_contract": "1.19.452",
+  "source_commit": "a59941e00bdc972cede45d82263d6bb9a334d59d",
   "source_ref": "HEAD",
-  "built_at": "2026-08-31T16:36:29.965Z",
+  "built_at": "2026-09-01T19:56:39.788Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 371,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 2183,
-  "tree_sha256": "c23220ed7525b84e74efcdd12d8fa798ef9c2ae4b39b5d1a7b97c9eb35634bee",
+  "tree_sha256": "d6e755d26822b3fbb320367835d28cb2e6e317309a6da4985730541e202fec63",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -2092,7 +2092,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "dc1ef1a70ed26e1bfa26b2752b6838c1f7f8871385a6bb1c2a7e55d2164f33fb"
+      "sha256": "1b44d9a28067aee44f6461a6ec2ff31dcbcd1d92aba9b5e5d53ac97dcb782cbe"
     },
     {
       "path": "docs/modules-contract.md",
@@ -4647,7 +4647,7 @@
     {
       "path": "modules/lifecycle/db-tasks.js",
       "mode": "0000644",
-      "sha256": "745663b0a264ae742702919fc9486f49723010dd797e1fe7151de5d65b98bf21"
+      "sha256": "cf646edc2f71e39aee26cb5648cc25915b5688c7d6356345c0365ada37fdb400"
     },
     {
       "path": "modules/lifecycle/db-versions.js",
@@ -6302,12 +6302,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "a31da0642871f1ab2b99bdc8f0d133fb9810e08ba52410ba3029d7437d234d69"
+      "sha256": "a24646cf791a4ef41bf5fbca236cf24a27c9d05ba0f4419483054f38b849688e"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "43a909e803e69e33cda54842705ee13e870f836c5c7966117658577109333a6e"
+      "sha256": "76ba0c0adc1241f0051796e43d8519486163d142b23a57704d60aabd56806cb6"
     },
     {
       "path": "public-docs/index.html",
@@ -6882,7 +6882,7 @@
     {
       "path": "scripts/gds/land-watch.js",
       "mode": "0000644",
-      "sha256": "4b53094a4b69d318196d6913aa40b35bce4058272b124064f2c79adbc1330714"
+      "sha256": "72072f2233fdb4fe228597276421eb616077c723f4cdf1af558a29d23ecfadf4"
     },
     {
       "path": "scripts/gds/learning-capture.js",
@@ -7957,7 +7957,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "a5564186c70f7c4f6f6abe293168cd66e2a563dcf094f8655f9a6db12fe90f53"
+      "sha256": "4b7bee96fc2dfb083dcc43f811b46f135c4103cf719e68546ee2b898569cfc65"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -8977,7 +8977,7 @@
     {
       "path": "tests/goal_advisory.mjs",
       "mode": "0000644",
-      "sha256": "7488d41a0d962f681f9482e4c06f518f38be824e8fa936b5bd7b1c1b70838c3d"
+      "sha256": "1b1c403574132def4c4beb98595987e90b720a851f29e42f643f1f00f285da5c"
     },
     {
       "path": "tests/goal_category.mjs",
@@ -9627,7 +9627,7 @@
     {
       "path": "tests/land_watch.mjs",
       "mode": "0000644",
-      "sha256": "902c84c460d4c3bda61ec80be7da935085a5f66a8a1c508efe747c4366a717e6"
+      "sha256": "b1851f3c0965f1bcfea060675d7e28ec7a0787e99dda7f1c3782ed2c0a6b4454"
     },
     {
       "path": "tests/landing_legal_pages.mjs",
@@ -10747,7 +10747,7 @@
     {
       "path": "tests/task_goal_link.mjs",
       "mode": "0000644",
-      "sha256": "d4f417d485cde211b7664c017f1909eb31bd86539cfc0128a08bf2b474023b80"
+      "sha256": "514be815c0466e4e2865ad85cb7a2ca206e5b46abc7b345da2c36278667c8bb2"
     },
     {
       "path": "tests/task_lib.mjs",

package/docs/module-api-changelog.md

@@ -1337,5 +1337,9 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.448 with no explicit bump. run 33406714743. (task 1002620)
   1.19.450 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.449 with no explicit bump. run 33414986466. (task 1002620)
+  1.19.451 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.450 with no explicit bump. run 33549781105. (task 1002620)
+  1.19.452 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.451 with no explicit bump. run 33552353620. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/lifecycle/db-tasks.js

@@ -23,6 +23,20 @@ const { deriveRequiredRank, highestRank } = require('./db-rank-authz.js');
 // -------------------------------------------------------------------------
 
 
+// The version statuses that can still receive new work. 'shipped' and 'frozen' are
+// closed: a version whose scope is sealed cannot be told about a bug found afterwards.
+// Mirrors the CHECK constraint on versions.status (migrations/003_pms.sql).
+const VERSION_STATUSES_OPEN_TO_WORK = new Set(['planning', 'building']);
+
+// versionAcceptsNewWork — PURE, FAIL-CLOSED. Is this version still a place work can
+// land? Exported so the truth table is pinned by a DB-free unit test, and so a caller
+// that needs the same judgement asks this instead of respelling the status list.
+// Anything unrecognised (null, a typo, a status added later) reads false: filing into
+// a version we cannot vouch for is the failure this predicate exists to prevent.
+function versionAcceptsNewWork(status) {
+  return typeof status === 'string' && VERSION_STATUSES_OPEN_TO_WORK.has(status);
+}
+
 // task 1763: resolve a version's catch-all "<version> — general" goal (created by
 // migration 160, created_by NULL). This is the fallback goal a goal-less task
 // defaults into (see createTask) so the "every task belongs to a goal" invariant
@@ -32,14 +46,39 @@ const { deriveRequiredRank, highestRank } = require('./db-rank-authz.js');
 // unit-testable DB-free. The title mirrors migration 160's insert exactly (a spaced
 // em-dash); it is built by ../goal-advisory.generalGoalTitle so this SQL and the
 // advisory that detects the same goal can never disagree (task 1002539).
+//
+// task 1003061 (BV1.R03): it also refuses a CLOSED version's catch-all. That is the
+// 1000771 failure shape — Discord #bugs hardcoded GDS-V3, a shipped version, so every
+// bug reported through it resolved into "GDS-V3 — general" and was filed somewhere
+// nobody would ever look again. routeIdeaToGoal (BV1.R01) already refuses an EXPLICIT
+// goal on a closed version; this closes the IMPLICIT door that every other create
+// vector walks through. Returning null is deliberately NOT an error: the create still
+// succeeds with goal_id NULL, and the orphan advisory then says so out loud — a task
+// visibly without a home beats one quietly entombed.
+//
+// The status is judged in JS rather than the WHERE clause so the rule is one exported,
+// unit-tested predicate instead of a string list duplicated into SQL. The JOIN is inner
+// on purpose: a goal whose version row is missing is not a home either.
 async function generalGoalIdForVersion(versionId, deps = {}) {
   if (versionId == null) return null;
   const activePool = (deps.pool && process.env.NODE_ENV === 'test') ? deps.pool : pool;
   const { rows } = await activePool.query(
-    'SELECT id FROM goals WHERE version_id = $1 AND title = $2 LIMIT 1',
+    `SELECT g.id, v.status AS version_status
+       FROM goals g
+       JOIN versions v ON v.id = g.version_id
+      WHERE g.version_id = $1 AND g.title = $2
+      LIMIT 1`,
     [versionId, generalGoalTitle(versionId)]
   );
-  return rows[0] ? rows[0].id : null;
+  if (!rows[0]) return null;
+  if (!versionAcceptsNewWork(rows[0].version_status)) {
+    log.debug(
+      { versionId, versionStatus: rows[0].version_status ?? null, goalId: rows[0].id },
+      'catch-all goal refused: version is closed to new work (task 1003061)'
+    );
+    return null;
+  }
+  return rows[0].id;
 }
 
 async function createTask({
@@ -870,4 +909,5 @@ module.exports = {
   updateTaskRequiresRank,
   updateTaskSecuritySensitive,
   updateTaskStatus,
+  versionAcceptsNewWork,
 };

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.450",
+  "version": "1.19.452",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.450",
+      "version": "1.19.452",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.450",
+  "version": "1.19.452",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/scripts/gds/land-watch.js

@@ -78,14 +78,21 @@ function removeBreadcrumb(fileOrId) {
 }
 
 // PURE decision — exported so the truth table is unit-tested with no fs/network.
-//   'emit' → the task has landed (shipped): render the shipped card, then clear.
-//   'drop' → give up watching: stale, OR it left the land path (grade-failed back to
-//            completed, released, …) so the confirmed→shipped transition won't happen.
+//   'emit' → the task landed inside the watch window: render the shipped card, then clear.
+//   'drop' → give up watching: past the window, OR it left the land path (grade-failed back
+//            to completed, released, …) so the confirmed→shipped transition won't happen.
 //   'keep' → still landing (confirmed), or a transient read failure — retry next turn.
-// emit wins over stale so a just-landed breadcrumb still shows even if old.
+//
+// The window wins over EVERY status, 'shipped' included (task 1003466). It used not to:
+// 'emit' was checked first, so a breadcrumb for a task that landed days ago still rendered a
+// "Shipped" banner. That went unnoticed until a dead publish-reconciler (task 1002419) let a
+// backlog build — eleven tasks flipped to shipped at once and the builder paid a prompt-turn
+// of stale news for each. A land the builder has already moved past is not news; it is spam.
+// An unknown/unparseable age is treated as past the window for the same reason: we cannot
+// prove the crumb is fresh, and the safe direction is always silence.
 function classifyLand(task, ageMs, { staleMs = DEFAULT_STALE_MS } = {}) {
+  if (!Number.isFinite(ageMs) || ageMs > staleMs) return 'drop';
   if (task && task.status === 'shipped') return 'emit';
-  if (typeof ageMs === 'number' && ageMs > staleMs) return 'drop';
   if (!task || typeof task.status !== 'string') return 'keep'; // couldn't read → retry
   if (task.status === 'confirmed') return 'keep';               // still landing
   return 'drop';                                                // no longer on the land path
@@ -126,21 +133,33 @@ function buildShippedEnvelope(crumb, task) {
 
 // Walk the breadcrumbs; emit AT MOST ONE shipped card per run (avoid flooding a turn),
 // dropping the give-ups. Returns the envelope to inject, or null. Deps injected for tests.
+//
+// The backlog drains in THIS pass (task 1003466): the newest land gets the card and every
+// other landed crumb is folded into one "also landed" line and cleared. Holding the extras
+// for later turns is what turned a backlog into a card per prompt — the builder had to ask
+// why the session kept showing cards instead of working.
 async function watch({ nowMs = Date.now(), staleMs = DEFAULT_STALE_MS, getTask = fetchTask, readCrumbs = readBreadcrumbs, removeCrumb = removeBreadcrumb } = {}) {
   const crumbs = readCrumbs().sort((a, b) => String(b.at).localeCompare(String(a.at))); // newest first
   let envelope = null;
+  const alsoLanded = [];
   for (const crumb of crumbs) {
-    const ageMs = nowMs - Date.parse(crumb.at || '') || 0;
+    const at = Date.parse(crumb.at || '');
+    const ageMs = Number.isFinite(at) ? nowMs - at : Infinity; // unparseable → past the window
     const task = await getTask(crumb.taskId);
-    const verdict = classifyLand(task, Number.isFinite(ageMs) ? ageMs : 0, { staleMs });
+    const verdict = classifyLand(task, ageMs, { staleMs });
     if (verdict === 'emit') {
-      if (!envelope) { envelope = buildShippedEnvelope(crumb, task); removeCrumb(crumb._file); }
-      // a 2nd shipped crumb waits for the next turn (one card at a time)
+      if (!envelope) envelope = buildShippedEnvelope(crumb, task);
+      else alsoLanded.push(crumb.taskId);
+      removeCrumb(crumb._file);
     } else if (verdict === 'drop') {
       removeCrumb(crumb._file);
     }
     // 'keep' → leave it
   }
+  // Written as `task N`, never `#N` — a bare #NNN autolinks to a GitHub issue and 404s.
+  if (envelope && alsoLanded.length) {
+    envelope.warnings = [`Also landed: ${alsoLanded.map((id) => `task ${id}`).join(', ')}.`];
+  }
   return envelope;
 }
 

package/src/module-api.js

@@ -33,7 +33,7 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.450'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.452'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/goal_advisory.mjs

@@ -108,7 +108,7 @@ await test('candidateGoals is total — non-array, empty, and missing scope_modu
 
 await test('db.js resolves the catch-all through generalGoalTitle — no second spelling', () => {
   assert.match(dbSrc, /require\('\.\/goal-advisory\.js'\)/, 'db.js imports the shared helper');
-  assert.match(dbSrc, /title = \$2 LIMIT 1/, 'the SQL binds the title rather than inlining it');
+  assert.match(dbSrc, /g\.title = \$2/, 'the SQL binds the title rather than inlining it');
   assert.equal(
     (dbSrc.match(/' — general'/g) || []).length, 0,
     'the em-dash literal must exist in exactly ONE place (goal-advisory.js), not in db.js too'

package/tests/land_watch.mjs

@@ -28,9 +28,20 @@ async function ta(name, fn) {
 const STALE = 1000;
 
 // ── classifyLand truth table ─────────────────────────────────────────────────────────
-t('shipped → emit (even when stale)', () => {
+t('shipped inside the watch window → emit', () => {
   assert.equal(classifyLand({ status: 'shipped' }, 10, { staleMs: STALE }), 'emit');
-  assert.equal(classifyLand({ status: 'shipped' }, 999999, { staleMs: STALE }), 'emit');
+});
+// task 1003466 — the card-spam bug. 'emit' used to beat 'stale', so a breadcrumb for a
+// task that landed days ago still rendered a "Shipped" banner. With watch() emitting one
+// card per run, a backlog of N stale crumbs cost the builder N prompt-turns of stale news.
+t('shipped but PAST the watch window → drop (a land the builder moved past is not news)', () => {
+  assert.equal(classifyLand({ status: 'shipped' }, 999999, { staleMs: STALE }), 'drop');
+  assert.equal(classifyLand({ status: 'shipped' }, STALE + 1, { staleMs: STALE }), 'drop');
+  assert.equal(classifyLand({ status: 'shipped' }, STALE, { staleMs: STALE }), 'emit', 'exactly at the boundary still emits');
+});
+t('an unknown age → drop (an unparseable breadcrumb must not be immortal)', () => {
+  assert.equal(classifyLand({ status: 'shipped' }, Infinity, { staleMs: STALE }), 'drop');
+  assert.equal(classifyLand({ status: 'confirmed' }, NaN, { staleMs: STALE }), 'drop');
 });
 t('confirmed (still landing) → keep', () => {
   assert.equal(classifyLand({ status: 'confirmed' }, 10, { staleMs: STALE }), 'keep');
@@ -97,7 +108,41 @@ await ta('emits the NEWEST shipped card, keeps confirmed, drops the rest — one
   assert.equal(env.title, 'task_3_card', 'newest shipped wins');
   assert.ok(removed.includes('f3'), 'the emitted crumb is cleared');
   assert.ok(!removed.includes('f2'), 'the still-confirmed crumb is kept');
-  assert.ok(!removed.includes('f1'), 'the 2nd shipped waits for the next turn (one card per run)');
+  assert.ok(removed.includes('f1'), 'the 2nd shipped is drained in the SAME pass, not held for another turn');
+  assert.ok(/task 1\b/.test((env.warnings || []).join(' ')), 'the 2nd shipped is folded into one warning line');
+});
+// task 1003466 — the whole backlog drains in ONE pass. Before this, five landed tasks cost
+// five prompt-turns of cards; now it is one card plus a single "also landed" line.
+await ta('a backlog of shipped crumbs drains in one pass: one card + one also-landed line', async () => {
+  const removed = [];
+  const crumbs = ['1', '2', '3', '4', '5'].map((id, i) => ({
+    taskId: id, at: `2026-07-01T00:00:0${i + 1}.000Z`, _file: `f${id}`, cardInputs: {},
+  }));
+  const env = await watch({
+    nowMs: Date.parse('2026-07-01T00:00:05.500Z'),
+    staleMs: 60_000,
+    getTask: async () => ({ status: 'shipped' }),
+    readCrumbs: () => crumbs,
+    removeCrumb: (f) => removed.push(f),
+  });
+  assert.equal(env.title, 'task_5_card', 'the newest land is the one that gets a card');
+  assert.equal(removed.length, 5, 'every crumb is cleared in this single pass');
+  const warn = (env.warnings || []).join(' ');
+  for (const id of ['1', '2', '3', '4']) assert.ok(warn.includes(`task ${id}`), `task ${id} named in the warning`);
+  assert.ok(!warn.includes('task 5'), 'the carded task is not repeated in the warning');
+  assert.ok(!/#d/.test(warn), 'never a bare #NNN in emitted prose (it autolinks to a GitHub issue)');
+});
+await ta('stale shipped crumbs are dropped silently — no card, no warning', async () => {
+  const removed = [];
+  const env = await watch({
+    nowMs: Date.parse('2026-07-08T00:00:00.000Z'), // a week later
+    staleMs: 30 * 60 * 1000,
+    getTask: async () => ({ status: 'shipped' }),
+    readCrumbs: () => [{ taskId: '77', at: '2026-07-01T00:00:00.000Z', _file: 'f77', cardInputs: {} }],
+    removeCrumb: (f) => removed.push(f),
+  });
+  assert.equal(env, null, 'a week-old land renders nothing');
+  assert.ok(removed.includes('f77'), 'and the crumb is cleared so it never returns');
 });
 await ta('no shipped → no envelope; drops the give-ups', async () => {
   const removed = [];

package/tests/task_goal_link.mjs

@@ -12,6 +12,8 @@
 //       - null versionId → null and NO SQL (nothing to resolve).
 //       - a version id → exactly one SELECT keyed on (version_id, the spaced
 //         em-dash title match), bound param [versionId], returning the id or null.
+//       - a CLOSED version (shipped/frozen) → null even when the goal exists, so
+//         the create lands goal-less rather than in a tomb (task 1003061).
 //
 //   routes/tasks.js — the router still BUILDS after the PATCH /tasks/:id goal_id
 //     extension (imports resolve; the factory returns a router). The SQL + the
@@ -29,6 +31,10 @@ process.env.NODE_ENV = 'test';
 const require = createRequire(import.meta.url);
 const db = require('../modules/lifecycle/db.js');
 const { generalGoalIdForVersion } = db;
+// versionAcceptsNewWork is INTERNAL to the tasks slice (task 1003061): db.js is the
+// facade for the call sites, and re-exporting a predicate nothing outside this file
+// calls would only widen the facade. Required from where it lives instead.
+const { versionAcceptsNewWork } = require('../modules/lifecycle/db-tasks.js');
 const buildTasksRouter = require('../modules/lifecycle/routes/tasks.js');
 
 const { test, summary } = makeRunner();
@@ -55,17 +61,21 @@ await test('null / undefined versionId → null, and NO SQL is issued', async ()
   }
 });
 
-await test('a version with a general goal → returns its id via one SELECT on the em-dash title', async () => {
-  const pool = fakePool([{ id: 3 }]);
+await test('a BUILDING version with a general goal → returns its id via one SELECT on the em-dash title', async () => {
+  const pool = fakePool([{ id: 3, version_status: 'building' }]);
   const out = await generalGoalIdForVersion('BONGOS-V1', { pool });
 
   assert.equal(out, 3, 'returns the general goal id');
   assert.equal(pool.queries.length, 1, 'exactly one SELECT');
   const q = pool.queries[0];
+  // task 1003061 (BV1.R03): the lookup now JOINs versions and brings the version
+  // status back, so the resolver can refuse a closed version's catch-all.
+  assert.match(q.sql, /JOIN versions/, 'the lookup reaches the version, not just the goal');
+  assert.match(q.sql, /AS version_status/, 'and carries its status back to be judged');
   // task 1002539: the title is no longer inlined in SQL — it is BOUND, built by the
   // shared goal-advisory.generalGoalTitle so this lookup and the orphan advisory that
   // names the same goal cannot drift apart.
-  assert.match(q.sql, /SELECT id FROM goals WHERE version_id = \$1 AND title = \$2/,
+  assert.match(q.sql, /WHERE g\.version_id = \$1 AND g\.title = \$2/,
     'keyed on version_id + a BOUND title (one definition, in goal-advisory.js)');
   assert.match(q.sql, /LIMIT 1/, 'single row');
   assert.deepEqual(q.params, ['BONGOS-V1', 'BONGOS-V1 — general'],
@@ -81,7 +91,7 @@ await test('a version with no general goal → null (caller leaves goal_id NULL,
 });
 
 await test('the em-dash in the title match is U+2014 (not a hyphen/en-dash) — or the backfill silently matches nothing', async () => {
-  const pool = fakePool([{ id: 9 }]);
+  const pool = fakePool([{ id: 9, version_status: 'building' }]);
   await generalGoalIdForVersion('V2', { pool });
   // The em-dash moved from the SQL text into the BOUND param (task 1002539); assert
   // it there, which is stricter — the exact string Postgres compares.
@@ -92,6 +102,54 @@ await test('the em-dash in the title match is U+2014 (not a hyphen/en-dash) —
   assert.ok(!title.includes(' – general'), 'not an en dash');
 });
 
+// =========================================================================
+// task 1003061 (BV1.R03) — the catch-all must never be a TOMB.
+//
+// The 1000771 failure: Discord #bugs hardcoded GDS-V3, a SHIPPED version, so every
+// reported bug resolved into "GDS-V3 — general" and was filed where nobody would look
+// again. routeIdeaToGoal (BV1.R01) already refuses an EXPLICIT goal on a closed
+// version; this closes the IMPLICIT door — the goal-less fallback that every other
+// create vector (POST /tasks, capture, newcomer-restock, seeds) walks through.
+//
+// A closed version's catch-all resolves to null, so createTask leaves goal_id NULL and
+// the orphan advisory (goal-advisory.js) speaks up. Loud silence beats a quiet tomb.
+
+await test('versionAcceptsNewWork: only a version still open for work can receive it', () => {
+  assert.equal(versionAcceptsNewWork('building'), true, 'building — the live case');
+  assert.equal(versionAcceptsNewWork('planning'), true, 'planning — a legitimate future home');
+  assert.equal(versionAcceptsNewWork('shipped'), false, 'shipped — the 1000771 tomb');
+  assert.equal(versionAcceptsNewWork('frozen'), false, 'frozen — closed to new work');
+});
+
+await test('versionAcceptsNewWork fails CLOSED on anything it does not recognise', () => {
+  for (const v of [null, undefined, '', 'BUILDING', 'archived', 42, {}]) {
+    assert.equal(versionAcceptsNewWork(v), false, `refuses ${JSON.stringify(v)}`);
+  }
+});
+
+await test("a SHIPPED version's catch-all does not resolve — the create lands goal-less, not in a tomb", async () => {
+  const pool = fakePool([{ id: 3, version_status: 'shipped' }]);
+  const out = await generalGoalIdForVersion('GDS-V3', { pool });
+  assert.equal(out, null, 'the goal EXISTS and is still refused — that is the whole point');
+  assert.equal(pool.queries.length, 1, 'it did look — it just declined what it found');
+});
+
+await test("a FROZEN version's catch-all does not resolve either", async () => {
+  const pool = fakePool([{ id: 4, version_status: 'frozen' }]);
+  assert.equal(await generalGoalIdForVersion('OLD-V1', { pool }), null);
+});
+
+await test("a PLANNING version's catch-all still resolves (a future home is a real home)", async () => {
+  const pool = fakePool([{ id: 5, version_status: 'planning' }]);
+  assert.equal(await generalGoalIdForVersion('NEXT-V1', { pool }), 5);
+});
+
+await test('a row with no readable version status resolves to null (fail closed)', async () => {
+  const pool = fakePool([{ id: 6 }]);
+  assert.equal(await generalGoalIdForVersion('MYSTERY-V1', { pool }), null,
+    'an unjoinable or absent version is not a home');
+});
+
 // -------------------------------------------------------------------------
 await test('routes/tasks.js still builds after the goal_id PATCH extension', () => {
   assert.equal(typeof buildTasksRouter, 'function', 'module exports the router factory');