@bongos/core 1.19.485 → 1.19.486

package/docs/api/openapi.json

@@ -6298,6 +6298,51 @@
         ]
       }
     },
+    "/goals/{id}/water": {
+      "post": {
+        "operationId": "post_goals_id_water",
+        "tags": [
+          "goals"
+        ],
+        "summary": "POST /goals/:id/water",
+        "description": "POST /goals/:id/water — reset a rotting goal's clock.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/lifecycle/routes/rot.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/government/assignments": {
       "get": {
         "operationId": "get_government_assignments",
@@ -7364,6 +7409,44 @@
         ]
       }
     },
+    "/inbox/rotting": {
+      "get": {
+        "operationId": "get_inbox_rotting",
+        "tags": [
+          "inbox"
+        ],
+        "summary": "GET /inbox/rotting",
+        "description": "GET /inbox/rotting — what is quietly rotting, for this caller. rank: any-builder — own-scoped by default. The builder id comes from the authenticated session and is never read off the request, so a caller can only ever widen the result by HOLDING an atom, never by naming a different builder. A Xenos sees exactly the things they created and nothing else. ?rot_days= is a LENS, not a setting: it answers \"what would 7 days show me?\" without reconfiguring the project, and is never written back. The response reports the timer and where the number came from, so a reader can always tell a lens apart from the project's real answer (the src/stale-timer.js receipt convention — a number with no provenance is what let 6h and 24h coexist).\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/lifecycle/routes/rot.js",
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetInboxRottingResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/inbox/score": {
       "post": {
         "operationId": "post_inbox_score",
@@ -15191,6 +15274,51 @@
         ]
       }
     },
+    "/tasks/{id}/water": {
+      "post": {
+        "operationId": "post_tasks_id_water",
+        "tags": [
+          "tasks"
+        ],
+        "summary": "POST /tasks/:id/water",
+        "description": "POST /tasks/:id/water — reset a rotting task's clock.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/lifecycle/routes/rot.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/versions": {
       "get": {
         "operationId": "get_versions",
@@ -16307,6 +16435,22 @@
           "open_count"
         ]
       },
+      "GetInboxRottingResponse": {
+        "type": "object",
+        "properties": {
+          "rows": {},
+          "count": {},
+          "scope": {},
+          "timer": {},
+          "cutoff": {},
+          "ok": {
+            "type": "boolean"
+          },
+          "tier": {},
+          "id": {},
+          "watered_at": {}
+        }
+      },
       "GetInboxSparksResponse": {
         "type": "object",
         "properties": {
@@ -21505,9 +21649,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 341,
-  "x-schema-count": 374,
+  "x-endpoint-count": 344,
+  "x-schema-count": 375,
   "x-undocumented-bodies": 9,
-  "x-response-schemas": 255,
+  "x-response-schemas": 256,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 341 endpoints across 55 route files.
+> **Generated from the live route files** — the route file is authoritative. 344 endpoints across 56 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -220,7 +220,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | GET | `/api/bongos/github/repos` | `any-builder` | — | acts only on the caller's OWN GitHub identity (the token they granted). |
 | POST | `/api/bongos/github/repos` | `any-builder` | `name` | creates a repo in the caller's OWN account. |
 
-## `goals` (30)
+## `goals` (31)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -250,6 +250,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | POST | `/api/bongos/goals/:id/tasks` | `any-builder` | `title`, `description`, `touches`, `est_minutes`, `priority`, `kind`, `discipline`, `value_summary`, `parent_task_id` | POST /goals/:id/tasks — bounded task authoring within a goal's scope (BV1.R60 / ADR 0086 §3). |
 | POST | `/api/bongos/goals/:id/transfer` | `any-builder` | `builder_id` | POST /goals/:id/transfer — hand the goal to a new owner (task 1735). |
 | PATCH | `/api/bongos/goals/:id/visibility` | `any-builder` | — | PATCH /goals/:id/visibility — make a goal public\|private (task 1952 / ADR 0112). |
+| POST | `/api/bongos/goals/:id/water` | `any-builder` | — | POST /goals/:id/water — reset a rotting goal's clock. |
 | GET | `/api/bongos/goals/inbox` | `any-builder` | — | GET /goals/inbox — the caller's private-goals inbox (task 1952 / ADR 0112): { invitations: invites addressed to me (accept/decline); join… |
 | POST | `/api/bongos/goals/reorder` | `metic+archon` | `version_id`, `ordered_ids` | POST /goals/reorder — Archon drag-to-reorder: set the priority order of every goal WITHIN one version (task 1760). |
 | GET | `/api/bongos/goals/rollups` | `any-builder` | — | GET /goals/rollups?version= — one small row per goal: readiness counters, the last-activity timestamp, the craft set, and the next claima… |
@@ -294,7 +295,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | GET | `/api/bongos/help-requests/for-me` | `any-builder` | — | The addressed read — C01's answer to "and fires a notification". |
 | GET | `/api/bongos/help-requests/mine` | `any-builder` | — | your own asks, so you can settle them. |
 
-## `inbox` (15)
+## `inbox` (16)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -310,6 +311,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | DELETE | `/api/bongos/inbox/:id/spark` | `any-builder` | — | Withdraw the Big Idea Spark mark — the reversibility half of R144. |
 | GET | `/api/bongos/inbox/awaiting-nod` | `metic+archon` | — | GET /inbox/awaiting-nod — the NOD QUEUE (task 1003066, BV1.R05). |
 | GET | `/api/bongos/inbox/by-builder/:id` | `any-builder` | — | THE IDEA TRAIL: every idea one builder filed, newest first, with what became of each (task 1003281, goal 1000072, criterion legibility-ac… |
+| GET | `/api/bongos/inbox/rotting` | `any-builder` | — | GET /inbox/rotting — what is quietly rotting, for this caller. |
 | POST | `/api/bongos/inbox/score` | `any-builder` | `field_values`, `template_key` |  |
 | GET | `/api/bongos/inbox/sparks` | `any-builder` | — | GET /inbox/sparks — THE SPARK QUEUE (task 1002921 / BV1.R145, goal 1000062). |
 | GET | `/api/bongos/inbox/template` | `any-builder` | — | ----------------------------------------------------------------------- The two reads the hall's Full Idea composer is built from (task 1… |
@@ -559,7 +561,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 |---|---|---|---|---|
 | GET | `/api/bongos/task-visuals/:name` | `public` | — | the WIDEST path this route can take, declared honestly. |
 
-## `tasks` (30)
+## `tasks` (31)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -588,6 +590,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | POST | `/api/bongos/tasks/:id/visual` | `any-builder` | `image_b64`, `content_type`, `alt` | POST /tasks/:id/visual — attach (or replace) this task's ship-time visual. |
 | DELETE | `/api/bongos/tasks/:id/visual` | `any-builder` | — | DELETE /tasks/:id/visual — remove it again. |
 | POST | `/api/bongos/tasks/:id/vote` | `metic+archon` | `vote` | POST /tasks/:id/vote { vote: 1 \| -1 \| 0 } — cast/change/clear a peer vote on a confirmed/shipped task. |
+| POST | `/api/bongos/tasks/:id/water` | `any-builder` | — | POST /tasks/:id/water — reset a rotting task's clock. |
 | GET | `/api/bongos/tasks/claimable` | `any-builder` | — | NOTE: /tasks/claimable must come BEFORE /tasks/:id or Express will route 'claimable' to the :id param. |
 | GET | `/api/bongos/tasks/newcomer-floor` | `any-builder` | — | GET /tasks/newcomer-floor — supply gauge for the newcomer queue (task 614). |
 | POST | `/api/bongos/tasks/newcomer-restock` | `metic+archon` | — | POST /tasks/newcomer-restock (task 1168) — bring every evergreen newcomer chore's standing pool up to its configured floor. |

package/docs/copy-inventory.md

@@ -4,13 +4,13 @@
 > Deterministic on a given tree — regenerate and commit rather than hand-editing.
 > Machine-readable twin: [`copy-registry.json`](copy-registry.json).
 
-**1576 strings** across 3 surfaces · 1369 distinct pieces of copy · 1576 certain, 0 heuristic · 148 shown in more than one place.
+**1579 strings** across 3 surfaces · 1372 distinct pieces of copy · 1579 certain, 0 heuristic · 148 shown in more than one place.
 
 ## Surfaces
 
 | surface | lives at | files | strings |
 |---|---|---|---|
-| `builders-hall` | `modules/hall-ui/public` | 72 | 1133 |
+| `builders-hall` | `modules/hall-ui/public` | 72 | 1136 |
 | `status-dashboard` | `modules/status-ui/public` | 4 | 98 |
 | `landing` | `modules/public-landing/public` | 5 | 345 |
 
@@ -78,7 +78,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `563d29ed86d8` | 2x | Bulk actions | modules/hall-ui/public/goals.html:172, modules/hall-ui/public/work.html:129 |
 | … | | _108 more in the JSON registry_ | |
 
-## `builders-hall` — 1133 strings
+## `builders-hall` — 1136 strings
 
 | id | conf | text | where |
 |---|---|---|---|
@@ -421,7 +421,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `2ae2114b61db` | certain | Get a free key ↗ | `modules/hall-ui/public/settings.js:1020` |
 | `4794a991de3d` | certain | Getting started | `modules/hall-ui/public/hall-widgets.js:59` |
 | `a28b1a567f1a` | certain | GitHub username | `modules/hall-ui/public/hall-render.js:278` |
-| `79934b879a12` | certain | Give the nod | `modules/hall-ui/public/goal-inbox.js:231` |
+| `79934b879a12` | certain | Give the nod | `modules/hall-ui/public/goal-inbox.js:244` |
 | `9e70797b7e97` | certain | Goal id | `modules/hall-ui/public/goals-render.js:768` |
 | `529460e82058` | certain | Goal invitations to you | `modules/hall-ui/public/goal-inbox.js:113` |
 | `e2a9e33abe60` | certain | Goal tasks | `modules/hall-ui/public/goals.html:136` |
@@ -551,7 +551,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `f14a91b3f625` | certain | Most recent first. Each row is one recorded work session; every id on it opens its record. | `modules/hall-ui/public/sessions.html:56` |
 | `ae84ebe1d735` | certain | Name cannot be blank. | `modules/hall-ui/public/settings.js:830` |
 | `31e91ee6ce03` | certain | Name must be {…} characters or fewer. | `modules/hall-ui/public/settings.js:835` |
-| `7def635421ea` | certain | Needs your attention | `modules/hall-ui/public/goal-inbox.js:274` |
+| `7def635421ea` | certain | Needs your attention | `modules/hall-ui/public/goal-inbox.js:385` |
 | `d427d9dab01c` | certain | New claims are paused: {…} confirmed {…} can't land yet, so {…} reward is pending. Rebase and re-ship, or rele | `modules/hall-ui/public/hall-render.js:604` |
 | `7fcc2583c372` | certain | New custom rank | `modules/hall-ui/public/government.html:81` |
 | `9e06c14d155a` | certain | New here — request access | `modules/hall-ui/public/hall-render.js:278` |
@@ -1176,6 +1176,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `b3757ba3bb46` | certain | {…} · Stored encrypted; never shown again after saving. | `modules/hall-ui/public/settings.js:1054` |
 | `94445e6ed5e8` | certain | {…} · code | `modules/hall-ui/public/pair.js:53` |
 | `d73256fbc395` | certain | {…} · who votes, and how it {…} | `modules/hall-ui/public/government.js:1043` |
+| `cab2a4296aec` | certain | {…} · {…} · {…}{…} | `modules/hall-ui/public/goal-inbox.js:326` |
 | `085f93f3f775` | certain | {…} — see all standings | `modules/hall-ui/public/hall-render.js:80` |
 | `f75ee96a7511` | certain | {…} — total payout from shipped work. | `modules/hall-ui/public/profile.js:58` |
 | `2a2728a4ec4f` | certain | {…}% of tasks complete | `modules/hall-ui/public/roadmap.js:70` |
@@ -1194,9 +1195,11 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `e5c5e94152b3` | certain | — that's all the tooling you need up front. | `modules/hall-ui/public/hall-render.js:811` |
 | `a63451a6db06` | certain | — to start and stop your dev box on your behalf. | `modules/hall-ui/public/pair.js:53` |
 | `392afc533191` | certain | — type | `modules/hall-ui/public/hall-render.js:744` |
+| `ff7514f48a7b` | certain | — untouched {…}+ days | `modules/hall-ui/public/goal-inbox.js:363` |
 | `68b547166d48` | certain | — {…} confirmed {…} can't land yet, so {…} reward is pending (it lands on ship). Rebase + re-ship or release { | `modules/hall-ui/public/hall-render.js:488` |
 | `5b9fa7cb4fb0` | certain | …and {…} more waiting — | `modules/hall-ui/public/goal-inbox.js:121` |
-| `b2a04abfead0` | certain | …{…} more awaiting a nod. | `modules/hall-ui/public/goal-inbox.js:251` |
+| `b2a04abfead0` | certain | …{…} more awaiting a nod. | `modules/hall-ui/public/goal-inbox.js:264` |
+| `616fb9adf3cf` | certain | …{…} more going quiet. | `modules/hall-ui/public/goal-inbox.js:353` |
 | `e35f11bdc5d7` | certain | …{…} more open ideas — triage clears them one at a time. | `modules/hall-ui/public/builders.js:853` |
 | `de8fa5223aee` | certain | ‹ Prev | `modules/hall-ui/public/hall-kit.js:71` |
 | `d4b84b7fbdeb` | certain | ← All goals | `modules/hall-ui/public/goals.html:80` |

package/docs/copy-registry.json

@@ -3,9 +3,9 @@
   "generator": "scripts/gds/copy-inventory.js",
   "goal": 1000074,
   "counts": {
-    "strings": 1576,
-    "unique_ids": 1369,
-    "certain": 1576,
+    "strings": 1579,
+    "unique_ids": 1372,
+    "certain": 1579,
     "heuristic": 0,
     "duplicate_ids": 148
   },
@@ -13,7 +13,7 @@
     "builders-hall": {
       "at": "modules/hall-ui/public",
       "files": 72,
-      "strings": 1133
+      "strings": 1136
     },
     "status-dashboard": {
       "at": "modules/status-ui/public",
@@ -4635,7 +4635,7 @@
       "surface": "builders-hall",
       "text": "Give the nod",
       "file": "modules/hall-ui/public/goal-inbox.js",
-      "line": 231,
+      "line": 244,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -5805,7 +5805,7 @@
       "surface": "builders-hall",
       "text": "Needs your attention",
       "file": "modules/hall-ui/public/goal-inbox.js",
-      "line": 274,
+      "line": 385,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -11425,6 +11425,15 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "cab2a4296aec",
+      "surface": "builders-hall",
+      "text": "{…} · {…} · {…}{…}",
+      "file": "modules/hall-ui/public/goal-inbox.js",
+      "line": 326,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "085f93f3f775",
       "surface": "builders-hall",
@@ -11587,6 +11596,15 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "ff7514f48a7b",
+      "surface": "builders-hall",
+      "text": "— untouched {…}+ days",
+      "file": "modules/hall-ui/public/goal-inbox.js",
+      "line": 363,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "68b547166d48",
       "surface": "builders-hall",
@@ -11610,7 +11628,16 @@
       "surface": "builders-hall",
       "text": "…{…} more awaiting a nod.",
       "file": "modules/hall-ui/public/goal-inbox.js",
-      "line": 251,
+      "line": 264,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
+    {
+      "id": "616fb9adf3cf",
+      "surface": "builders-hall",
+      "text": "…{…} more going quiet.",
+      "file": "modules/hall-ui/public/goal-inbox.js",
+      "line": 353,
       "origin": "js-markup",
       "confidence": "certain"
     },

package/docs/module-api-changelog.md

@@ -1407,5 +1407,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.483 with no explicit bump. run 33675143968. (task 1002620)
   1.19.485 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.484 with no explicit bump. run 33681828446. (task 1002620)
+  1.19.486 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.485 with no explicit bump. run 33682949187. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/migrations/core_231_project_settings_and_attention_water.sql

@@ -0,0 +1,163 @@
+-- core_231_project_settings_and_attention_water.sql — the rot clock and the knob
+-- that sets it (task 1003279, goal 1000072, criterion legibility-sort-and-staleness).
+--
+-- THE GAP. Goal 1000072's rotting half asks that "untouched-for-X triggers a
+-- configured action rather than a silent decay". Two things were missing to make
+-- that sentence true, and this migration adds exactly those two:
+--
+--   1. X had nowhere to live. src/stale-timer.js (task 1003476, ADR 0226) owns the
+--      CLAIM-silence timer — hours, env-configured, and the sweep that ACTS on it
+--      releases someone's claim. The rot timer is a different measurement with a
+--      different unit and a different consequence (days; it asks a human a
+--      question), and task 1003280 requires it be "live, DB-backed" and warns
+--      "do not fork a second store". So: one generic project_settings table, with
+--      the rot timer as its first key.
+--
+--   2. "Water" had nothing to write. The owner's four verbs are prune, kill,
+--      prioritise and WATER — leave the thing alone and reset its clock. Without
+--      somewhere to record that, watering would have to fake a real edit, and the
+--      same line would come back on the next read; the inbox teaches people to
+--      ignore it within a week. attention_watered_at IS the reset.
+--
+-- WHY A COLUMN AND NOT AN ITEMS TABLE. There is deliberately no `attention_items`
+-- row anywhere in this design. The inbox line is DERIVED on read from the rot clock
+-- (below) vs the timer, which makes "exactly one open item per stale thing, not one
+-- per sweep" true by construction rather than by a de-duplicating sweep that has to
+-- be got right.
+-- Acting on the line (prune/kill/prioritise) changes status and the row stops
+-- matching; watering pushes the clock forward and it stops matching. Nothing to
+-- reconcile, nothing to garbage-collect, and no way to accrete duplicates.
+--
+-- Additive + forward-safe: every column is nullable with no backfill, nothing is
+-- renamed, and no existing reader changes meaning (tests/migrations_forward_safe.mjs).
+
+BEGIN;
+
+-- ---------------------------------------------------------------------------
+-- 1. project_settings — the instance's live, DB-backed knobs.
+-- ---------------------------------------------------------------------------
+--
+-- Deliberately a generic key/value table rather than one column per knob: task
+-- 1003280 puts five project fundamentals on one page, and a table that grows a
+-- migration per knob would make that page a schema change every time. Values are
+-- stored as TEXT and parsed by a typed accessor at the read edge
+-- (src/bongos/project-settings.js), the same shape src/stale-timer.js already uses
+-- for env values — one parser, one range check, one documented default.
+--
+-- A key that has never been set has NO ROW. Absence means "use the code default",
+-- which is what lets a fresh instance boot correctly with an empty table, and what
+-- lets a settings page distinguish "never configured" from "deliberately set to
+-- the same value the default happens to be".
+CREATE TABLE IF NOT EXISTS project_settings (
+  key         text PRIMARY KEY,
+  value       text NOT NULL,
+  updated_at  timestamptz NOT NULL DEFAULT now(),
+  updated_by  bigint REFERENCES builders(id)
+);
+
+COMMENT ON TABLE project_settings IS
+  'Live, DB-backed per-project knobs (task 1003279). Key/value so task 1003280''s settings page can grow a row without a migration. No row = never configured = use the code default; that absence is meaningful, so do not seed defaults here.';
+COMMENT ON COLUMN project_settings.value IS
+  'Stored as text and parsed by a typed accessor at the read edge (src/bongos/project-settings.js). A value that fails its range check is IGNORED with a receipt, never coerced silently — the ADR 0226 posture.';
+COMMENT ON COLUMN project_settings.updated_by IS
+  'The builder who last set this knob. NULL = set by a system path with no builder in the request (the goals.created_by convention, migration 160).';
+
+-- ---------------------------------------------------------------------------
+-- 2. The water mark, on both tiers that can rot.
+-- ---------------------------------------------------------------------------
+--
+-- NULL = never watered, and the thing's own activity timestamp is the whole clock.
+-- This is why the read expression is a GREATEST and not a bare COALESCE: a real edit
+-- after a watering must move the clock forward again, and a watering must never make
+-- a thing look OLDER than its last genuine touch.
+--
+-- THE ROT CLOCK, AND WHY IT IS SHAPED LIKE THIS:
+--
+--   tasks:  GREATEST(updated_at, COALESCE(shipped_at, updated_at),
+--                    COALESCE(attention_watered_at, updated_at))
+--   goals:  GREATEST(updated_at, COALESCE(attention_watered_at, updated_at))
+--
+-- The first two terms are NOT a new definition of "touched" — they are exactly the
+-- one modules/hall-ui/public/task-lib.js already publishes for the Tasks board and
+-- the Goals page (`taskActivityMs = max(updated_at, shipped_at)`, task 1003278, this
+-- same criterion), which folds in shipped_at because a ship path can stamp it
+-- without touching updated_at. This migration adds a THIRD term to that definition
+-- and nothing else. Had the server invented its own two-term clock, the board and
+-- the inbox would disagree about which rows are stale — which is the 6h-vs-24h
+-- failure of ADR 0226 reappearing one tier up, and the reason the indexes below
+-- spell the expression out in full rather than approximating it.
+-- (Goals carry no shipped_at column, so their clock has two terms, not three.)
+ALTER TABLE tasks
+  ADD COLUMN IF NOT EXISTS attention_watered_at timestamptz,
+  ADD COLUMN IF NOT EXISTS attention_watered_by bigint REFERENCES builders(id);
+
+ALTER TABLE goals
+  ADD COLUMN IF NOT EXISTS attention_watered_at timestamptz,
+  ADD COLUMN IF NOT EXISTS attention_watered_by bigint REFERENCES builders(id);
+
+COMMENT ON COLUMN tasks.attention_watered_at IS
+  'When a human last said "leave it, it is fine" about this task rotting (task 1003279). Resets the rot clock without touching the work. NULL = never watered.';
+COMMENT ON COLUMN goals.attention_watered_at IS
+  'When a human last said "leave it, it is fine" about this goal rotting (task 1003279). Resets the rot clock without touching the work. NULL = never watered.';
+
+-- The rot read is "open things whose clock is older than N days", so the index is
+-- on (status, clock) — status first because it is the equality predicate and it
+-- cuts the table to the open rows before the range scan ever runs.
+CREATE INDEX IF NOT EXISTS idx_tasks_attention_rot
+  ON tasks (status, (GREATEST(updated_at,
+                              COALESCE(shipped_at, updated_at),
+                              COALESCE(attention_watered_at, updated_at))));
+CREATE INDEX IF NOT EXISTS idx_goals_attention_rot
+  ON goals (status, (GREATEST(updated_at, COALESCE(attention_watered_at, updated_at))));
+
+-- ---------------------------------------------------------------------------
+-- 3. Rebuild the two `t.*` views so the new columns are projected.
+-- ---------------------------------------------------------------------------
+--
+-- A Postgres view created with `SELECT t.*` pins its column list at CREATE VIEW
+-- time. core_227's header records six columns that silently never reached the claim
+-- feed exactly this way; bodies below are identical to core_227's (the wildcard
+-- re-expands to every current column).
+
+DROP VIEW IF EXISTS claimable_tasks;
+CREATE VIEW claimable_tasks AS
+SELECT t.*,
+       pms_calibrated_minutes(t.est_minutes, t.kind) AS est_minutes_calibrated
+  FROM tasks t
+ WHERE t.status = 'ready'
+   AND t.title NOT LIKE '\_\_smoke\_\_%' ESCAPE '\'
+   AND NOT EXISTS (
+     SELECT 1 FROM task_blockers tb WHERE tb.task_id = t.id
+   )
+   AND NOT EXISTS (
+     SELECT 1 FROM claims c
+       JOIN tasks t2 ON t2.id = c.task_id
+      WHERE c.released_at IS NULL
+        AND t2.touches && t.touches
+   );
+
+DROP VIEW IF EXISTS tasks_session_fit;
+CREATE VIEW tasks_session_fit AS
+SELECT t.*,
+  CASE
+    WHEN t.automation_tag = 'overnight-safe' AND COALESCE(t.manual_degree, 5) <= 2
+         AND NOT EXISTS (SELECT 1 FROM task_blockers tb WHERE tb.task_id = t.id)
+      THEN ARRAY['autonomous','check-in','active']
+    WHEN t.automation_tag = 'live-only' OR COALESCE(t.manual_degree, 5) >= 4
+      THEN ARRAY['active']
+    ELSE ARRAY['check-in','active']
+  END AS fits_session_modes,
+  pms_calibrated_minutes(t.est_minutes, t.kind) AS est_minutes_calibrated,
+  CASE
+    WHEN t.credits_reward > 0
+     AND pms_calibrated_minutes(t.est_minutes, t.kind) IS NOT NULL
+     AND pms_calibrated_minutes(t.est_minutes, t.kind) > 0
+    THEN ROUND(t.credits_reward::numeric / pms_calibrated_minutes(t.est_minutes, t.kind), 3)
+    ELSE NULL
+  END AS credits_per_minute
+FROM tasks t;
+
+COMMIT;
+
+INSERT INTO schema_migrations (version) VALUES ('core_231_project_settings_and_attention_water')
+ON CONFLICT (version) DO NOTHING;

package/modules/dev-box/app/src/vendor/bongos-client.cjs

@@ -386,6 +386,8 @@ function createClient(opts = {}) {
       postGoalsIdTransfer: (args) => request("POST", "/goals/{id}/transfer", { hasBody: true }, args),
       // PATCH /goals/{id}/visibility — rank: any-builder — PATCH /goals/:id/visibility
       patchGoalsIdVisibility: (args) => request("PATCH", "/goals/{id}/visibility", { hasBody: true }, args),
+      // POST /goals/{id}/water — rank: any-builder — POST /goals/:id/water
+      postGoalsIdWater: (args) => request("POST", "/goals/{id}/water", { hasBody: true }, args),
       // GET /goals/inbox — rank: any-builder — GET /goals/inbox
       getGoalsInbox: (args) => request("GET", "/goals/inbox", { hasBody: false }, args),
       // POST /goals/reorder — rank: metic+archon — POST /goals/reorder
@@ -466,6 +468,8 @@ function createClient(opts = {}) {
       getInboxAwaitingNod: (args) => request("GET", "/inbox/awaiting-nod", { hasBody: false }, args),
       // GET /inbox/by-builder/{id} — rank: any-builder — GET /inbox/by-builder/:id
       getInboxByBuilderId: (args) => request("GET", "/inbox/by-builder/{id}", { hasBody: false }, args),
+      // GET /inbox/rotting — rank: any-builder — GET /inbox/rotting
+      getInboxRotting: (args) => request("GET", "/inbox/rotting", { hasBody: false }, args),
       // POST /inbox/score — rank: any-builder — POST /inbox/score
       postInboxScore: (args) => request("POST", "/inbox/score", { hasBody: true }, args),
       // GET /inbox/sparks — rank: any-builder — GET /inbox/sparks
@@ -838,6 +842,8 @@ function createClient(opts = {}) {
       postTasksIdVisual: (args) => request("POST", "/tasks/{id}/visual", { hasBody: true }, args),
       // POST /tasks/{id}/vote — rank: metic+archon — POST /tasks/:id/vote
       postTasksIdVote: (args) => request("POST", "/tasks/{id}/vote", { hasBody: true }, args),
+      // POST /tasks/{id}/water — rank: any-builder — POST /tasks/:id/water
+      postTasksIdWater: (args) => request("POST", "/tasks/{id}/water", { hasBody: true }, args),
       // GET /tasks/claimable — rank: any-builder — GET /tasks/claimable
       getTasksClaimable: (args) => request("GET", "/tasks/claimable", { hasBody: false }, args),
       // GET /tasks/newcomer-floor — rank: any-builder — GET /tasks/newcomer-floor