@bongos/core 1.19.588 → 1.19.590

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.588",
-  "core_contract": "1.19.588",
-  "source_commit": "1833a4d18085bddf05b12c89aea4381e5ac5207e",
+  "core_version": "1.19.590",
+  "core_contract": "1.19.590",
+  "source_commit": "250f70f068d2406d49d2b57306a8f3f1ebf0f1ab",
   "source_ref": "HEAD",
-  "built_at": "2026-09-08T02:03:26.993Z",
+  "built_at": "2026-09-08T02:32:23.112Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
-    "docs_redacted": 456,
+    "docs_redacted": 457,
     "agent_docs_stubbed": 24,
-    "functional_verbatim": 2060,
+    "functional_verbatim": 2061,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 2540,
-  "tree_sha256": "c1fc62840116ec8d78c3841c8a17e3172d902aadea6e084717199ab6bf5af95c",
+  "file_count": 2542,
+  "tree_sha256": "ff91f93bb16afd98f8d2130615c602425ac4d133c4b01c83fbe94e6d8015f2cc",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -392,7 +392,7 @@
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "e5cfa78c545e60771166ae4118e18f5c7bcf911db649c115c2831a028de3562b"
+      "sha256": "3865a914bd9e50df23960dbad5783bd1584157ff2b2bfcd2b8e597a620e81c01"
     },
     {
       "path": "clients/bongos-client/index.mjs",
@@ -1834,20 +1834,25 @@
       "mode": "0000644",
       "sha256": "07a3561c7bc7f55bb2077925df4df6a24b68a1f0c8d4052ac50278edd9d4eba1"
     },
+    {
+      "path": "docs/adr/0264-the-ten-working-areas.md",
+      "mode": "0000644",
+      "sha256": "03f1cf19a181d6726066ba6fb72156add0cb8ede004ebc7ddf8ac3859a335596"
+    },
     {
       "path": "docs/adr/README.md",
       "mode": "0000644",
-      "sha256": "fce8c6fab919a332b83cd467b2c0548499c58a2e032ca8e8d4da4b06d35bb715"
+      "sha256": "b38a32c8557012f9e5e761c5e219901ad628af9b63d2cb190d32e783dbf9aaa9"
     },
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "450613589b6b480ba2d6789731003794749c0dd972fcd8636380fa5814d68807"
+      "sha256": "5e2031bf695567cb4318ef792395150b7032604e0e4cd7cafee99f05e1d3cb01"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "75ba055326939ec1c827d01cdf088f564e94f372d9906759483fd1bad2328375"
+      "sha256": "597f489b67a88154ee771baa8b378bf681594534cf7690c2ffd9c109cb26092d"
     },
     {
       "path": "docs/architecture.md",
@@ -2722,7 +2727,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "44d532bc6f634ef0730d4f5d3a778c67516143ea202f126c48aed43ffc8e8664"
+      "sha256": "c2736a86c941e12d08b38f798ab18eddf8a365ef709ed952778629d13ebf4e1d"
     },
     {
       "path": "docs/modules-contract.md",
@@ -5507,7 +5512,7 @@
     {
       "path": "modules/lifecycle/db-goals.js",
       "mode": "0000644",
-      "sha256": "f50a54a0e0f0cdeac5a2321b14757e52d9d9507417b1d1962aa09cdc6a222832"
+      "sha256": "392970a48349421c000de9581cfcc63969152179feb3406f1057571d9b68c0ee"
     },
     {
       "path": "modules/lifecycle/db-grade.js",
@@ -5547,7 +5552,7 @@
     {
       "path": "modules/lifecycle/db.js",
       "mode": "0000644",
-      "sha256": "6d69634ad12510f81727eeed0a8fdde4eac618fedc23e43e2c1aa5835aaf0388"
+      "sha256": "c3318a8473ccc9b41bff5eb94fe4096032c2d5c5a7819d0777c4d41db0e4d695"
     },
     {
       "path": "modules/lifecycle/dead-deps.js",
@@ -5727,12 +5732,12 @@
     {
       "path": "modules/lifecycle/routes/goal-route-authz.js",
       "mode": "0000644",
-      "sha256": "5022ec9cdd2ba5087bc0b4607691c21d361f4a4edbf029ff3dea37ade373e890"
+      "sha256": "3b4fb0168b29fb0df1260c23c5b14d96576f00f587dd5c188fe17a712e3dffaa"
     },
     {
       "path": "modules/lifecycle/routes/goals.js",
       "mode": "0000644",
-      "sha256": "d408d89cf736a7d4cdf45ccff44c2038bbc64b13be42dd1b460198dfc8112535"
+      "sha256": "28874a1b4d3e748866fa59d510c3c62656ad48039dae8ca7ce5b0ca5d47b357d"
     },
     {
       "path": "modules/lifecycle/routes/help-requests.js",
@@ -7597,12 +7602,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "93ff5dd9e6965597f8af514e41a02d0c5149e31e6a456576f6dc9b1bd1a773fc"
+      "sha256": "035ec486f26d0a18ffcc578a861b2758f79ea279371c4f88dfe5fdfa1b04fefe"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "ed02b11ea51fdadd43ceb8fcaa9c3613ca172bf8c06caeeb0a351b8c65405900"
+      "sha256": "05c57c598f80ce768e83bc0040feb275732545150cbcb3cd01341ff3633ea96f"
     },
     {
       "path": "public-docs/index.html",
@@ -9312,7 +9317,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "d1b45d7bf6ca9667e8ef78fbb8dc255eda9bb60a27a74e48f59fb067e882d8d4"
+      "sha256": "b2b2d8c9ccf065e7bbc7b984ff9acda5f4400c9db4e9063678e6d996616f7d1c"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -10432,7 +10437,12 @@
     {
       "path": "tests/goal_archive_disposition.mjs",
       "mode": "0000644",
-      "sha256": "d2056a3ae84b79d64409e6e43c477f6b160f202903be61710b40bc4fd06c00c9"
+      "sha256": "bf0baad459ee2e103079a53570ca4998bb3ba66451ad0257478dd236118c8ce6"
+    },
+    {
+      "path": "tests/goal_archive_route_e2e.mjs",
+      "mode": "0000644",
+      "sha256": "ffefb97db455e2b6656f5c26933312572102e3a8aa37605545ae9b425d616be0"
     },
     {
       "path": "tests/goal_category.mjs",

package/clients/bongos-client/index.d.ts

@@ -252,7 +252,8 @@ export interface PostGithubRepoVisibilityRequest { repo: string; visibility: "pu
 export interface PostGithubRepoVisibilityResponse { ok: boolean; repo: unknown; private_deployable: boolean }
 export interface PostGithubReposRequest { name: string }
 export interface PostGithubReposResponse { repo: unknown }
-export interface PostGoalsIdArchiveResponse { ok: boolean; goal: unknown }
+export interface PostGoalsIdArchiveRequest { reason?: string; dispositions?: Record<string, unknown> }
+export interface PostGoalsIdArchiveResponse { ok: boolean; goal: unknown; applied: unknown }
 export interface PostGoalsIdConflictsResolveRequest { action: string; note?: string; touches?: string[]; first_task_id?: StringifiableId; then_task_id?: StringifiableId; task_id?: StringifiableId }
 export interface PostGoalsIdConflictsResolveResponse { ok: boolean; action: unknown; first_task_id?: unknown; then_task_id?: unknown; dependencies?: unknown; claim?: unknown; task_id?: unknown; touches?: unknown; requires_rank?: unknown }
 export interface PostGoalsIdInvitationsReqIdRescindResponse { ok: boolean; request: unknown }
@@ -676,7 +677,7 @@ export interface BongosClient {
     /** PATCH /goals/{id}/accepting-requests — rank: any-builder */
     patchGoalsIdAcceptingRequests(args?: RequestArgs): Promise<ApiResponse>;
     /** POST /goals/{id}/archive — rank: metic+archon */
-    postGoalsIdArchive(args?: RequestArgs): Promise<PostGoalsIdArchiveResponse>;
+    postGoalsIdArchive(args?: RequestArgs & { body?: PostGoalsIdArchiveRequest }): Promise<PostGoalsIdArchiveResponse>;
     /** PATCH /goals/{id}/category — rank: any-builder */
     patchGoalsIdCategory(args?: RequestArgs): Promise<ApiResponse>;
     /** GET /goals/{id}/conflicts — rank: any-builder */

package/docs/adr/0264-the-ten-working-areas.md

@@ -0,0 +1,144 @@
+# 0264 — The ten working areas: one goal per area, held until 5,000 builders
+
+- **Status:** Accepted
+- **Date:** 2026-09-07
+- **Tasks:** [#1003696](https://cloudbongos.com/builders#/task/1003696) (this record). Executed by BV1.R25 ([#1003612](https://cloudbongos.com/builders#/task/1003612)), R26 ([#1003613](https://cloudbongos.com/builders#/task/1003613)), R27 ([#1003614](https://cloudbongos.com/builders#/task/1003614)), R28 ([#1003615](https://cloudbongos.com/builders#/task/1003615)) and R29 ([#1003617](https://cloudbongos.com/builders#/task/1003617)).
+- **Goal:** [#1000086](https://cloudbongos.com/builders#/goal/1000086) — Strict versioning, criterion `sv-cutover-proven-live`.
+- **Decided by:** the owner and the full team, in a manual goal review on 2026-09-07.
+- **Builds on:** [ADR 0250](<redacted>.md) (the version boundary is the scope gate — this is the scope that boundary will hold), [ADR 0086](<redacted>.md) (the goal tier).
+
+## 1. The decision
+
+**The platform runs on exactly ten goals — one per working area — until it has
+5,000 builders.** Each area has a named owner and a description of what "done"
+looks like at that scale. Thirty-eight goals are open today; they collapse into
+these ten.
+
+| # | Working area | Owner | The 5,000-builder state |
+|---|---|---|---|
+| 1 | **Project creation** | Rini | Any new user, developer or not, can create a project from an existing folder or code repository whatever it already contains. |
+| 2 | **Account creation, management & community** | Rini | — |
+| 3 | **Human project management** | Scott | A project-management system with scalable levels of hierarchy — not infinitely configurable. Users edit, scope and manage work without ever prompting Claude. |
+| 4 | **Bongos Core distribution** (staging of updates) | Lars / Will | Core updates are offered in every project's UI, and via the update CLI or skill. Approved users decide whether to take an update. A changelog is visible inside the update. |
+| 5 | **Module distribution & economy** | Will | Modules are bought with money or credits and update the same way. Bongos assesses and ranks module quality; willing users test before mass deployment; only the best modules are listed, on price and assessed quality. |
+| 6 | **Governor / Builder / Artist / Ideator experience** (incl. agents) | Masterqua / Rini | Each role gets a tailored experience that cannot break into the others. Noise is limited at every human interface. Agents are designed to aid all these roles. |
+| 7 | **Government** | Will / Masterqua | Fully customizable creation of ranks and what each entails for project access. Recommended base ranks and governments ship for different project types and sizes. |
+| 8 | **Platform credit economy** | Scott | Real money reaches users for completed work, without fail. Users hold platform balances, fund projects and pay each other with no fees. Bongos banks project funds and delivers them on cash-out. |
+| 9 | **Platform analytics** | Lars | Bongos gathers as much user data as it can to improve itself — session transcripts as an efficiency signal, plus every user action and work delivery across the ecosystem through the Bongos API. |
+| 10 | **Security** | all except Nils and Scott | Ranks are enforced. The Bongos server is not hackable by Claude's latest model. Red-teaming is consistent. |
+
+## 2. Why ten, and why now
+
+Thirty-eight open goals is not a plan; it is a list of everything anyone has ever
+wanted. [ADR 0250](<redacted>.md) measured what that costs — 523 open tasks, fourteen goals
+reporting done while holding thirty-five unfinished tasks — and built the
+machinery to stop the drift. But **enforcement alone cannot shrink a scope that
+is already too large**: D1 closes the goal set of a *building* version, which
+freezes thirty-eight goals in place just as effectively as it would freeze ten.
+
+So the rules and the cut are two halves of one move. This ADR is the cut. Ten is
+chosen to be small enough that every area has a single owner who can hold its
+whole shape in their head, and the horizon is **5,000 builders** rather than a
+date, because the point at which this set stops being the right set is a scale
+question, not a calendar one.
+
+## 3. The disposition of all 38 open goals
+
+Nothing on this list is a guess. Every row below the horizontal rule was named in
+the review; the three rows above it were not, and are marked as such.
+
+### Not covered by the review — open questions
+
+| Goal | Note |
+|---|---|
+| [#1000003](https://cloudbongos.com/builders#/goal/1000003) — Work with no goal yet | The per-version catch-all. Already R25's target: drained and archived there. No separate decision needed. |
+| [#1000065](https://cloudbongos.com/builders#/goal/1000065) — Community surface | Reads as the community half of area 2 and is treated as such below, but the review did not say so. **Confirm before executing R25.** |
+| [#1000088](https://cloudbongos.com/builders#/goal/1000088) — Repo cleanup: everything justifies itself | Genuinely unmentioned, and maps to no area. **Needs an owner decision: fold, keep as an eleventh, or close.** |
+
+### Becomes an area, or folds into one
+
+| Goal | Disposition | Area |
+|---|---|---|
+| [#1000046](https://cloudbongos.com/builders#/goal/1000046) — Project creation | **becomes the area** (active; Rini building, Lars on the npm package) | 1 |
+| [#1000065](https://cloudbongos.com/builders#/goal/1000065) — Community surface | becomes the area *(assumed — see above)* | 2 |
+| [#1000045](https://cloudbongos.com/builders#/goal/1000045) — Public builder profiles | fold — relevant, active | 2 |
+| [#1000075](https://cloudbongos.com/builders#/goal/1000075) — Collaboration & the social hall | fold — Niels almost done; builder collaboration is refined under community | 2 |
+| [#1000085](https://cloudbongos.com/builders#/goal/1000085) — The operable hall | fold | 3 |
+| [#1000054](https://cloudbongos.com/builders#/goal/1000054) — Public distribution | fold — Rini and Lars, relevant | 4 |
+| [#1000029](https://cloudbongos.com/builders#/goal/1000029) — Module upstreaming & catalog | fold — looped into the module goal | 5 |
+| [#1000066](https://cloudbongos.com/builders#/goal/1000066) — Role-composed context | fold — this is the working-area goal | 6 |
+| [#1000038](https://cloudbongos.com/builders#/goal/1000038) — Agent framework & registry | fold — stays, needs cleanup from Rini; dedicated agents for specific tasks | 6 |
+| [#1000039](https://cloudbongos.com/builders#/goal/1000039) — Agent authoring & first roster | fold into the agents one | 6 |
+| [#1000040](https://cloudbongos.com/builders#/goal/1000040) — Agent scheduling & spend limits | fold into the agents one | 6 |
+| [#1000025](https://cloudbongos.com/builders#/goal/1000025) — Builder experience | review first, close out solid tasks, then fold | 6 |
+| [#1000068](https://cloudbongos.com/builders#/goal/1000068) — Government, not governance | **becomes the area** — Lars blitzes it; bugs and a rename | 7 |
+| [#1000057](https://cloudbongos.com/builders#/goal/1000057) — Rank blocker matrix | fold into government | 7 |
+| [#1000078](https://cloudbongos.com/builders#/goal/1000078) — Project money out | merge into builder compensation | 8 |
+| [#1000067](https://cloudbongos.com/builders#/goal/1000067) — Ideator compensation | merge into builder payout | 8 |
+| [#1000084](https://cloudbongos.com/builders#/goal/1000084) — Execution integrity & tenant isolation | bring into the security goal | 10 |
+| [#1000070](https://cloudbongos.com/builders#/goal/1000070) — Scan-before-install | fold — Rini does the bug task | 10 |
+
+Areas **3** (human project management), **4** (core distribution), **5** (module
+distribution & economy), **8** (credit economy), **9** (platform analytics) and
+**10** (security) have no single existing goal to promote and are **created** by
+R29, taking the folds listed against them.
+
+### Finish, then close
+
+| Goal | Disposition |
+|---|---|
+| [#1000086](https://cloudbongos.com/builders#/goal/1000086) — Strict versioning | *"EVERYONE DO THIS NOW."* Finish, then close — it is the enabling work for the cut itself. |
+| [#1000073](https://cloudbongos.com/builders#/goal/1000073) — Finish the GDS→Bongos rename | Niels finishes; small. |
+| [#1000082](https://cloudbongos.com/builders#/goal/1000082) — Status ledger in the world | Lars deletes the status page, then closes it out. |
+| [#1000024](https://cloudbongos.com/builders#/goal/1000024) — Build-pipeline integrity | A pile of bugs — check relevance, then fold or close. |
+| [#1000032](https://cloudbongos.com/builders#/goal/1000032) — Instance hosting + domains | Clean out, then close. |
+| [#1000058](https://cloudbongos.com/builders#/goal/1000058) — Non-cloudbongos project lifecycle | All bugs — fold into another goal. |
+
+### Deleted
+
+Twelve goals are cut outright:
+
+[#1000037](https://cloudbongos.com/builders#/goal/1000037) Pay-on-land incentive alignment ·
+[#1000043](https://cloudbongos.com/builders#/goal/1000043) Platform security: safe multi-tenant hosting ·
+[#1000044](https://cloudbongos.com/builders#/goal/1000044) Living project sky ·
+[#1000047](https://cloudbongos.com/builders#/goal/1000047) Project pricing & hosting revenue ·
+[#1000048](https://cloudbongos.com/builders#/goal/1000048) SEO & public discoverability ·
+[#1000049](https://cloudbongos.com/builders#/goal/1000049) Orb Physics ·
+[#1000050](https://cloudbongos.com/builders#/goal/1000050) Self-hosted project analytics ·
+[#1000052](https://cloudbongos.com/builders#/goal/1000052) First-run onboarding ·
+[#1000053](https://cloudbongos.com/builders#/goal/1000053) Sessions start knowing ·
+[#1000063](https://cloudbongos.com/builders#/goal/1000063) The front door ·
+[#1000064](https://cloudbongos.com/builders#/goal/1000064) The hall as the room ·
+[#4](https://cloudbongos.com/builders#/goal/4) CB-V1 — general (the old general bucket).
+
+**"Delete" means `archived`, not a row removal.** `goals.status` is
+`open|achieved|archived` (migration 160) and nothing deletes a goal — archiving is
+the disposition, and it is reversible via `POST /goals/:id/reopen`. Preserving the
+rows is deliberate: shipped tasks under a cut goal keep their attribution and
+credit history, which a delete would strand.
+
+## 4. The consequence that reorders the goal: R14 is the keystone
+
+**None of section 3 can be executed today, and the reason is a rule this goal
+shipped four tasks ago.**
+
+R10 ([task #1003597](https://cloudbongos.com/builders#/task/1003597)) made
+`POST /goals/:id/archive` refuse a goal that still holds unfinished tasks, returning
+the tasks and demanding a disposition. That was correct and is exactly ADR 0250 D3.
+But **the vector that supplies a disposition is R14** ([task #1003601](https://cloudbongos.com/builders#/task/1003601)), which has not shipped. So right now the
+archive door is closed and the key has not been cut.
+
+Every one of the twelve deletes and every fold in section 3 goes through that
+door. That makes R14 the **keystone of the entire cut**, not one feature among
+thirteen, and it should be built before the rest of the version-close chain
+rather than in rank order.
+
+This is worth stating plainly because it looks like a bug and is not: the refusal
+is the system working as designed, one task ahead of its own remedy.
+
+## 5. What this does not decide
+
+- **It does not renumber or re-rank the ten areas.** The order in §1 is the review's order, not a priority.
+- **It does not set criteria for the six new goals.** R29 scopes them; an area without done-when criteria cannot close, and inventing criteria for someone else's area is how a goal acquires scope its owner never agreed to.
+- **It does not move any task.** Rehoming is R25 (the catch-alls) and R26 (the closed goals holding open work).
+- **It does not decide the three open questions in §3.** They are surfaced, not guessed.

package/docs/adr/README.md

@@ -355,3 +355,4 @@ This keeps the decision history honest and traceable.
 | 0261 | [**A preselect always carries a reason; the bundle’s summary is the floor** ([task 1003684](https://cloudbongos.com/builders#/task/1003684) · goal 1000046 — *Project creation*). Resolves a collision between two rules that were each right alone. [ADR 0243](<redacted>.md) made `adjustments` a **delta** — a team-shape rule that fires without moving anything claims nothing, because a sentence explaining a change that did not happen is a claim the owner cannot check. [ADR 0237](<redacted>.md) says a preselect the owner cannot see a reason for is one they must audit, which is worse than no preselect at all. The two collide whenever a type’s bundle **already contains** what a rule would add: `game` is `[dev-box, discord]` and the `small-team` rule adds `dev-box`, so the rule fires, moves nothing, and correctly reports `adjustments: []`. Confirmed on live core 1.19.580 — `byTeamShape[small-team]` = `{"bundle":["dev-box","discord"],"adjustments":[]}`. The owner then reached step 4 and saw **two extras switched on with no reason beside them**, `#modWhy` an empty hidden div: exactly what 0237 exists to prevent, produced by 0243 behaving correctly. Filed as a dropped adjustment; it was not — the engine is right, and the panel simply had ONE voice and fell silent when the rule had nothing to say. **Decision: the why-line has two voices and the type’s is the floor.** A real adjustment still speaks for itself and is never displaced; when none moved, the type’s own curated `summary` explains the preselect; when the owner has answered the picker themselves the panel stays silent (unchanged — a reason handed back for a toggle they just flipped reads as the panel arguing with them); a bundle with no summary still says nothing, because a floor is not an invention. **No new copy, endpoint or field** — the summary was authored for this job in `starter-bundles.js`, served on every row of `GET /provisioning/starter-bundles`, and rendered NOWHERE in the product until now. 0243 is not weakened: the delta stays a delta and no rule is credited with a change it did not make. The pin `tests/projects_hub_module_picker.mjs` carried a fixture with **no `summary` field**, which made four “no adjustment, no sentence” cases pass for the wrong reason; the fixture now carries the real summaries and those cases assert the new contract, including explicitly that no RULE sentence is invented for a change that did not happen. Rejected: making the rule claim a no-op change (re-introduces the unverifiable claim 0243 removed); widening the bundles so no rule is ever redundant (contorts curated presets for a rendering concern, and the redundancy returns on the next edit); and leaving it silent, declined by the owner once the trade-off was put to them directly.](<redacted>.md) | provisioning / starter bundles / owner-facing copy |
 | 0262 | [**A bug never lands in the inbox: the system names the home the reporter didn't** ([task 1003691](https://cloudbongos.com/builders#/task/1003691) · goal 1000086 — *Strict versioning*). `routing.js` returned early on a goal-less filing, so its own `kind='bug'` hard-land branch was UNREACHABLE without a goal — `kind` only ever chose a routed task's STATUS, never whether it routed — and a reported defect sat in `idea_inbox` awaiting the triage pass criterion C1 exists to remove. The premise that [ADR 0250](<redacted>.md) D4 and [ADR 0235](<redacted>.md) contradict each other is FALSE: 0235's exemption is an advisory silence in `goal-advisory.adviseGoal`, and its actual decision already requires a real `goal_id`. So nothing is amended; this is the explicit decision 0235 §6 said would be needed. **D1** a homeless bug gets the version's MAINTENANCE goal (R18's design), find-or-created under an advisory lock inside the route's own transaction — not the catch-all R11 is deleting, and adding no `allowCatchAll` caller. **D2** the gate is the VECTOR (`api`, `discord-bugs`), not the kind: `#ideas` passes no kind, so the classifier guesses one from keywords, and gating on kind alone would silently overturn [ADR 0234](<redacted>.md)'s owner-interview decision. Rejected: goal-less bug tasks (breaks D4 a day after it landed); rejecting the filing (Discord cannot retry, so the report is lost); the catch-all (repopulates the bucket being drained); building R18 whole first.](<redacted>.md) | work intake / idea routing / the version-goal invariant |
 | 0263 | [**How a version closes: auto, early, roll-forward, and the maintenance exemption** ([task 1003593](https://cloudbongos.com/builders#/task/1003593) · goal 1000086 — *Strict versioning*). [ADR 0250](<redacted>.md) D5 decided a version *can* close; this is the design pass that makes its five build tasks mechanical, so they do not each invent their own refusal codes and payload shapes and meet only in production. **The asymmetry that shrinks the feature:** auto-close fires when the last non-maintenance goal achieves — so by construction every non-maintenance goal is already closed and the set needing a disposition is EMPTY. All the machinery (the disposition map, the refusal that returns the goals, successor lineage) belongs to EARLY close alone; R16 is small and R12 carries the weight. **Auto-close hangs off BOTH achievement writers** (`db-goals.achieveGoalIfComplete` and the `done-when` cascade — the deliberate duplicate D2 already governs, a require cycle being the reason they are not one helper), on the caller `exec` so it sees the ship's uncommitted flip, and **may never fail a ship**: wrapped and swallowed like `closeCompletedWorkForShip`, idempotent under `WHERE status='building'`, so a failure leaves a version un-closed (self-healing on the next reconciler sweep) and never half-closed. **Early close** is the R10 archive two-step verbatim in spirit — refuse with `version_holds_open_goals` **returning the goals**, then proceed with a per-goal `roll_forward`/`abandon` map and a required `reason`; six named codes, because the callers are agents. **Two briefs are corrected by measurement:** the lineage column is `succeeded_by_goal_id` (migration 160, on the OLD row pointing forward) — not the `succeeds_goal_id` both 0250 and R17's brief name, so R17 needs NO migration; and R18's `is_maintenance` flag is load-bearing rather than cosmetic, because answering the close count with a `title NOT LIKE` would let a hand-titled goal silently exempt itself from the gate that decides when a VERSION closes. Promotion runs inside the close txn and BEFORE roll-forward (`ensureMaintenanceGoal` returns null for a non-`building` version, so a carry-over run first silently carries nothing); zero planning versions is not an error; R19's one migration should carry the `building` AND `planning` partial unique indexes so the promotion race resolves like a 23505 rather than a prayer. Rejected: auto-creating the successor version inside a close (the "fake hotfix version" escape hatch 0250 built the override counter to prevent), writing `limitations/<version>-shipped.md` from the route (file I/O in a ship transaction — it stays R23's CLI work), and a version reopen.](<redacted>.md) | version lifecycle / scope closure |
+| 0264 | [**The ten working areas: one goal per area, held until 5,000 builders** ([task 1003696](https://cloudbongos.com/builders#/task/1003696) · goal 1000086 — *Strict versioning*, criterion `sv-cutover-proven-live`). The owner and the full team ran a manual goal review on 2026-09-07 and cut **38 open goals down to 10**, one per working area, each with a named owner and a described 5,000-builder end state: project creation (Rini), account/community (Rini), human project management (Scott), core distribution (Lars/Will), module distribution & economy (Will), the four-role experience incl. agents (Masterqua/Rini), government (Will/Masterqua), the credit economy (Scott), platform analytics (Lars), security (everyone bar Nils and Scott). **Why the rules were not enough on their own:** [ADR 0250](<redacted>.md) D1 closes the goal set of a BUILDING version — which freezes 38 goals exactly as effectively as it would freeze 10. Enforcement cannot shrink a scope that is already too large, so the rules and the cut are two halves of one move; the horizon is a SCALE (5,000 builders), not a date, because that is the question that decides when this set stops being the right set. **The finding that reorders the goal:** none of the cut can be executed today. R10 ([task 1003597](https://cloudbongos.com/builders#/task/1003597)) made `POST /goals/:id/archive` refuse a goal holding unfinished tasks and demand a disposition — correct, and exactly D3 — but the vector that SUPPLIES a disposition is R14 ([task 1003601](https://cloudbongos.com/builders#/task/1003601)), unshipped. Every one of the 12 deletes and every fold goes through that door, so **R14 is the keystone of the whole cut**, not one feature among thirteen, and is built before the rest of the version-close chain rather than in rank order. It looks like a bug and is not: the refusal is the design, landed one task ahead of its own remedy. "Delete" means `archived`, never a row removal (`goals.status` is open|achieved|archived, migration 160; reversible via `/reopen`) — preserving the rows keeps shipped-task attribution and credit history a delete would strand. Three open goals were NOT covered by the review and are surfaced as open questions rather than guessed: 1000003 (the catch-all — already R25's target), 1000065 (assumed to be area 2's community half), and 1000088 (repo cleanup — maps to no area, needs an owner decision). Deliberately does not decide: the areas' priority order, criteria for the six goals R29 must create (inventing criteria for someone else's area is how a goal acquires scope its owner never agreed to), or any task rehoming (R25/R26).](<redacted>.md) | scope / goal set / owner decision |

package/docs/api/openapi.json

@@ -5139,6 +5139,17 @@
             "description": "Path parameter `id`."
           }
         ],
+        "requestBody": {
+          "required": false,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostGoalsIdArchiveRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
         "responses": {
           "200": {
             "description": "Success.",
@@ -5151,7 +5162,7 @@
             }
           },
           "400": {
-            "$ref": "#/components/responses/BadRequest"
+            "$ref": "#/components/responses/ValidationFailed"
           },
           "401": {
             "$ref": "#/components/responses/Unauthorized"
@@ -19912,17 +19923,32 @@
           "repo"
         ]
       },
+      "PostGoalsIdArchiveRequest": {
+        "type": "object",
+        "properties": {
+          "reason": {
+            "type": "string",
+            "maxLength": 2000
+          },
+          "dispositions": {
+            "type": "object"
+          }
+        },
+        "additionalProperties": false
+      },
       "PostGoalsIdArchiveResponse": {
         "type": "object",
         "properties": {
           "ok": {
             "type": "boolean"
           },
-          "goal": {}
+          "goal": {},
+          "applied": {}
         },
         "required": [
           "ok",
-          "goal"
+          "goal",
+          "applied"
         ]
       },
       "PostGoalsIdConflictsResolveRequest": {
@@ -22676,7 +22702,7 @@
     }
   },
   "x-endpoint-count": 359,
-  "x-schema-count": 395,
+  "x-schema-count": 396,
   "x-undocumented-bodies": 9,
   "x-response-schemas": 267,
   "x-generated-by": "scripts/gds/gen-api-docs.js"

package/docs/api-reference.md

@@ -230,7 +230,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | GET | `/api/bongos/goals/:id` | `any-builder` | — | GET /goals/:id — one goal with its members + linked criteria (read). |
 | PATCH | `/api/bongos/goals/:id` | `any-builder` | — | PATCH /goals/:id — correct a goal's own title/subtitle/description (tasks 1003102, 1003224). |
 | PATCH | `/api/bongos/goals/:id/accepting-requests` | `any-builder` | — | PATCH /goals/:id/accepting-requests { accepting_requests } — a private goal's lead closes or re-opens it to join-requests (task 1002971, … |
-| POST | `/api/bongos/goals/:id/archive` | `metic+archon` | — | POST /goals/:id/archive — retire a goal (open\|achieved → archived). |
+| POST | `/api/bongos/goals/:id/archive` | `metic+archon` | `reason`, `dispositions` | POST /goals/:id/archive — retire a goal (open\|achieved → archived). |
 | PATCH | `/api/bongos/goals/:id/category` | `any-builder` | — | PATCH /goals/:id/category — body { category_id } (null clears it). |
 | GET | `/api/bongos/goals/:id/conflicts` | `any-builder` | — | GET /goals/:id/conflicts — the server-side task-conflict view (task 1736). |
 | POST | `/api/bongos/goals/:id/conflicts/resolve` | `any-builder` | `action`, `note`, `touches`, `first_task_id`, `then_task_id`, `task_id` | POST /goals/:id/conflicts/resolve — the owner/manager resolution actions for a detected conflict (task 1736; authority model ADR 0106): s… |

package/docs/module-api-changelog.md

@@ -1625,5 +1625,9 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.586 with no explicit bump. run 34172785860. (task 1002620)
   1.19.588 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.587 with no explicit bump. run 34178696372. (task 1002620)
+  1.19.589 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.588 with no explicit bump. run 34179479729. (task 1002620)
+  1.19.590 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.589 with no explicit bump. run 34180363432. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/lifecycle/db-goals.js

@@ -14,7 +14,7 @@ const api = require('../../src/module-api');
 const { pool } = api;
 const doneWhen = require('./done-when.js');
 const { deriveRequiredRank, highestRank } = require('./db-rank-authz.js');
-const { nonTerminalSql } = require('./task-status');
+const { nonTerminalSql, isTerminalStatus } = require('./task-status');
 const { maintenanceGoalTitle } = require('./goal-advisory.js');
 const { SMOKE_NOT_LIKE } = require('./db-shared.js');
 
@@ -487,6 +487,130 @@ async function openTasksInGoal(goalId, { cap = 50 } = {}, deps = {}) {
   );
   return { total: rows[0]?.total ?? 0, tasks: rows.map(({ total, ...t }) => t) };
 }
+// archiveGoalWithDispositions — apply the caller's decision about each unfinished
+// task, then archive the goal, in ONE transaction (BV1.R14, task 1003601, goal
+// 1000086, ADR 0250 D3). The write half of the archive two-step whose refusal
+// R10 (task 1003597) built and whose plan `planGoalArchiveDispositions` validates.
+//
+// ATOMIC IS THE WHOLE POINT, not a nicety. The failure this replaces is a goal
+// reported closed while its work is still open; a partially-applied disposition
+// produces the mirror of it — some tasks abandoned, some moved, the goal still
+// open — and leaves the caller unable to tell from outside which half ran. One
+// transaction means the call is safe to retry verbatim after any error.
+//
+// The goal row is locked FOR UPDATE first, so a concurrent create-task-in-goal
+// cannot slip a new task in between the plan being validated and the archive
+// landing. The final re-count inside the same transaction is the belt to that
+// braces: it asserts the invariant the whole goal exists to protect (an archived
+// goal holds no non-terminal work) against the committed state rather than
+// against the plan, and rolls back if it does not hold. Cheap, and it is the one
+// check that cannot be fooled by a bug in the planner.
+//
+// `plan` is the validated output of planGoalArchiveDispositions: [{ taskId, verb,
+// toGoalId }]. Move targets are resolved and checked open BY THE ROUTE via
+// goalNotOpenRefusal — the ONE definition of "this goal takes no new work"
+// (BV1.R05) — and are re-read here under lock only to guard the interval between
+// that check and this write.
+//
+// ABANDON MIRRORS abandonTask (db-ship.js) rather than calling it: that function
+// opens its own connection and commits, which cannot join this transaction. The
+// two behaviours kept identical on purpose are the `value_summary` stamp
+// (`Abandoned: <reason>`) and the refusal on an active claim — a task someone is
+// actively working must not be abandoned out from under them by a goal archive.
+async function archiveGoalWithDispositions({ goalId, plan = [], reason }, deps = {}) {
+  const activePool = (deps.pool && process.env.NODE_ENV === 'test') ? deps.pool : pool;
+  const client = await activePool.connect();
+  try {
+    await client.query('BEGIN');
+
+    const { rows: goalRows } = await client.query(
+      `SELECT ${GOAL_COLS} FROM goals WHERE id = $1 FOR UPDATE`, [goalId]
+    );
+    if (!goalRows[0]) throw Object.assign(new Error('goal not found'), { code: 'GOAL_NOT_FOUND' });
+    if (goalRows[0].status === 'archived') {
+      await client.query('ROLLBACK');
+      return { goal: goalRows[0], applied: [], alreadyArchived: true };
+    }
+
+    const applied = [];
+    for (const step of plan) {
+      const { rows: tRows } = await client.query(
+        `SELECT id, title, status FROM tasks WHERE id = $1 AND goal_id = $2 FOR UPDATE`,
+        [step.taskId, goalId]
+      );
+      // The task left this goal (or shipped) while the caller was deciding. Not an
+      // error: the disposition is moot, and the final re-count is what actually
+      // guards the invariant. Recorded as 'skipped' so the response tells the
+      // truth about what this call did rather than claiming a write it never made.
+      if (!tRows[0]) { applied.push({ task_id: String(step.taskId), verb: step.verb, result: 'skipped_not_in_goal' }); continue; }
+      if (isTerminalStatus(tRows[0].status)) {
+        applied.push({ task_id: String(step.taskId), verb: step.verb, result: 'skipped_already_terminal', status: tRows[0].status });
+        continue;
+      }
+
+      const { rows: claimed } = await client.query(
+        `SELECT id FROM claims WHERE task_id = $1 AND released_at IS NULL LIMIT 1`, [step.taskId]
+      );
+      if (claimed[0]) {
+        throw Object.assign(new Error('task has an active claim'), {
+          code: 'TASK_HAS_ACTIVE_CLAIM', taskId: String(step.taskId), taskTitle: tRows[0].title,
+        });
+      }
+
+      if (step.verb === 'abandon') {
+        await client.query(
+          `UPDATE tasks SET status = 'abandoned',
+                            value_summary = COALESCE(NULLIF($2, ''), value_summary),
+                            updated_at = now()
+            WHERE id = $1`,
+          [step.taskId, `Abandoned: ${reason}`]
+        );
+        applied.push({ task_id: String(step.taskId), verb: 'abandon', result: 'abandoned' });
+      } else {
+        const { rows: dest } = await client.query(
+          `SELECT id, status FROM goals WHERE id = $1 FOR SHARE`, [step.toGoalId]
+        );
+        if (!dest[0]) {
+          throw Object.assign(new Error('move target not found'), { code: 'MOVE_TARGET_NOT_FOUND', toGoalId: String(step.toGoalId) });
+        }
+        if (dest[0].status !== 'open') {
+          throw Object.assign(new Error('move target is not open'), {
+            code: 'MOVE_TARGET_NOT_OPEN', toGoalId: String(step.toGoalId), targetStatus: dest[0].status,
+          });
+        }
+        await client.query(`UPDATE tasks SET goal_id = $2, updated_at = now() WHERE id = $1`, [step.taskId, step.toGoalId]);
+        applied.push({ task_id: String(step.taskId), verb: 'move', result: 'moved', to_goal_id: String(step.toGoalId) });
+      }
+    }
+
+    // The invariant, asserted against committed-in-this-txn state rather than
+    // against the plan. If anything is still non-terminal here, the archive would
+    // recreate exactly the condition goal 1000086 exists to make impossible.
+    const { rows: left } = await client.query(
+      `SELECT count(*)::int AS n FROM tasks t
+        WHERE t.goal_id = $1 AND ${nonTerminalSql()} AND ${SMOKE_NOT_LIKE.replace(/title/, 't.title')}`,
+      [goalId]
+    );
+    if ((left[0]?.n ?? 0) > 0) {
+      throw Object.assign(new Error('goal still holds unfinished tasks after dispositions'), {
+        code: 'DISPOSITION_INCOMPLETE_AFTER_APPLY', remaining: left[0].n,
+      });
+    }
+
+    const { rows: archived } = await client.query(
+      `UPDATE goals SET status = 'archived', updated_at = now() WHERE id = $1 RETURNING ${GOAL_COLS}`,
+      [goalId]
+    );
+    await client.query('COMMIT');
+    return { goal: archived[0], applied, alreadyArchived: false };
+  } catch (err) {
+    try { await client.query('ROLLBACK'); } catch { /* the original error is the one that matters */ }
+    throw err;
+  } finally {
+    client.release();
+  }
+}
+
 async function listCriteriaForGoal(goalId, deps = {}) {
   const activePool = (deps.pool && process.env.NODE_ENV === 'test') ? deps.pool : pool;
   // task 1002164: carry the linked-task counts so the caller can derive the
@@ -937,6 +1061,7 @@ module.exports = {
   acceptMembershipRequestAndAddMember,
   ensureMaintenanceGoal,
   achieveGoalIfComplete,
+  archiveGoalWithDispositions,
   addGoalMember,
   addGoalScopeModules,
   createGoal,

package/modules/lifecycle/db.js

@@ -81,6 +81,7 @@ const {
   isGoalMember,
   listActiveClaimsForTasks,
   listCriteriaForGoal,
+  archiveGoalWithDispositions,
   openTasksInGoal,
   listGoalMembers,
   listGoals,
@@ -252,6 +253,7 @@ module.exports = {
   listInboxFor,
   listPendingRequestsForGoal,
   listCriteriaForGoal,
+  archiveGoalWithDispositions,
   openTasksInGoal,
   createTask,
   generalGoalIdForVersion,