@bongos/core 1.19.591 → 1.19.593

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.591",
-  "core_contract": "1.19.591",
-  "source_commit": "1a5d5f0eb546f0430b57a3ca5446be6ebd135fe9",
+  "core_version": "1.19.593",
+  "core_contract": "1.19.593",
+  "source_commit": "ea0ad212050a06465dc2c1b43a8a1a2af240498a",
   "source_ref": "HEAD",
-  "built_at": "2026-09-08T02:46:21.428Z",
+  "built_at": "2026-09-08T03:36:57.554Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 457,
     "agent_docs_stubbed": 24,
-    "functional_verbatim": 2063,
+    "functional_verbatim": 2069,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 2544,
-  "tree_sha256": "8c944ccd379b18b96ad8d347ecc09ae1d5a3d163d40ca3c446e9bce07f86a002",
+  "file_count": 2550,
+  "tree_sha256": "0e4a8cf83cd59f8a25dbc37a5e8382998f3b2c20793ad712b851687be1ef4e81",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -232,7 +232,7 @@
     {
       "path": ".claude/skills/planning-session/SKILL.md",
       "mode": "0000644",
-      "sha256": "02aea92c35c8ae64eff029bb3dc9579a871cb47321a058693c71206af993132e"
+      "sha256": "4213c550b3a05adbecdd65542d7615f9f8c90756d91fd1ee6b9f03c8c046e478"
     },
     {
       "path": ".claude/skills/priority-session/SKILL.md",
@@ -372,12 +372,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "48a76d533215b8c0885fa77f59fc0e8915262db6b57029f6850692882e6e7455"
+      "sha256": "7486f9978e473b0adf09f8bfcbe2a029eb2833636ae3bd55fc307ccb3e773963"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "c7fe87ceb18e7e1c10e629d002fb6f322ee540606c3ec9f6d38741dac7a55e0f"
+      "sha256": "ea404e8d932d396796888692651965072cb8d828b3d6e9ebb93bc205fb00f7b9"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -387,17 +387,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "d80b05be7a602fa825f5f45e5b7f2bc002473a4731e2530df19fa3043f0c07fc"
+      "sha256": "a6fb1af25ba5d2ef74cee69f2e126811d535b193422d44ee6f2f4efb787d7584"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "3865a914bd9e50df23960dbad5783bd1584157ff2b2bfcd2b8e597a620e81c01"
+      "sha256": "16af99cbe6df845f0f7a90f4569f77550635af0967dce552e2ef07a7b4ef0080"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "47ae66627693378c276031754aca717ecc01e8e5038c4cf98ed844e5c03ee524"
+      "sha256": "0b96a51d69f2aeb6485eea84d80254ee1a4f90a8292c6b33e9bb89075f8cc187"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -1282,7 +1282,7 @@
     {
       "path": "docs/adr/0157-archon-is-rank-and-identity-only.md",
       "mode": "0000644",
-      "sha256": "157988982ea304d6147e62960f9bb6ebf7f99291d8a5d1ce51d1c8473a8ee8bc"
+      "sha256": "5320037ffa19c48b548c4d199af684640657f28d80aa3c7a991450ad68dee9c3"
     },
     {
       "path": "docs/adr/0158-choke-point-verdict-taxonomy.md",
@@ -1847,12 +1847,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "5e2031bf695567cb4318ef792395150b7032604e0e4cd7cafee99f05e1d3cb01"
+      "sha256": "b430ecad01c7458dc893c11d976d3ae35f2dd5b8310e451a38af387908f64659"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "597f489b67a88154ee771baa8b378bf681594534cf7690c2ffd9c109cb26092d"
+      "sha256": "f2433a337aed6aa2f0f1a1c2d61b17103b493a028fa03c2944b92b5f3bb5e609"
     },
     {
       "path": "docs/architecture.md",
@@ -1877,12 +1877,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "9357061e4e1046ee48fc227ed0b837fc32d950f7ceb5fccb4a549d310c19e5ee"
+      "sha256": "8b804ce68d2c06220133ad408d97683211859389d73612c15a0c1818bd2333d4"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "34c8e1786455cbf5c76dc5ad2fffb407d4d51e4009d5455545571c415d83afaa"
+      "sha256": "ecaec2aa40662c54a136bcf8c41b95b45a497d02265ca2f229f9cfa440a39f44"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2727,7 +2727,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "32f8765fbbc0999a25b5abfc0f58a5dc5980db09c03ff4ee127b6774387c865a"
+      "sha256": "bf5970e301d96ec4fd5c7a449da179edb4fb509f6430dec81d19b9680eaabe4c"
     },
     {
       "path": "docs/modules-contract.md",
@@ -3729,6 +3729,11 @@
       "mode": "0000644",
       "sha256": "5ed2ff8117e6650de621a1576062b27f2d6e84faf8860f9cb2aed45323a85aa6"
     },
+    {
+      "path": "migrations/core_233_versions_one_planning_idx.sql",
+      "mode": "0000644",
+      "sha256": "ca03e583bc418f600c1b1ba464bcaf4e380916033ec06cd68990cf153184d883"
+    },
     {
       "path": "modules/agents/lib/validate.js",
       "mode": "0000644",
@@ -4127,7 +4132,7 @@
     {
       "path": "modules/dev-box/app/src/vendor/bongos-client.cjs",
       "mode": "0000644",
-      "sha256": "d80b05be7a602fa825f5f45e5b7f2bc002473a4731e2530df19fa3043f0c07fc"
+      "sha256": "a6fb1af25ba5d2ef74cee69f2e126811d535b193422d44ee6f2f4efb787d7584"
     },
     {
       "path": "modules/dev-box/app/test/unit.mjs",
@@ -4372,7 +4377,7 @@
     {
       "path": "modules/government/catalog.js",
       "mode": "0000644",
-      "sha256": "e2d8d2a3187598fe0c647d30cd333627feeb1aa5352fac8bafc922cf40750e12"
+      "sha256": "3d6d6ced85b69bd6086533a0d118e4032037de66a10931cb3fc4a75bd8b6dbdc"
     },
     {
       "path": "modules/government/config.js",
@@ -4479,6 +4484,11 @@
       "mode": "0000644",
       "sha256": "ccd2cd14103bae00957227d037d41f76adaaddc639bd09808f244b0bc514e702"
     },
+    {
+      "path": "modules/government/migrations/government_012_version_create_archon.sql",
+      "mode": "0000644",
+      "sha256": "e963028286a7f8a0a55c9fae2f73f203a6ae7c7770f73a265aefdcc026829625"
+    },
     {
       "path": "modules/government/module.json",
       "mode": "0000644",
@@ -4852,12 +4862,12 @@
     {
       "path": "modules/hall-ui/public/goals-render.js",
       "mode": "0000644",
-      "sha256": "b494bec38dc6eaa4812a59b6405e7bfd2cc58688d3725b095956a4e1f7e0b4b7"
+      "sha256": "09fd6317b9a3c142ca7b51bd270631987284a96e5b89e64e58cedc3f8eec29ae"
     },
     {
       "path": "modules/hall-ui/public/goals.css",
       "mode": "0000644",
-      "sha256": "cdf23538a1fcd121af3159bdd928c6823aa02f10912143a5af64327724eaff58"
+      "sha256": "d9c890274864184dd777e52ab6df12960b758eaf5e79cdc50a122bf70dd84bbc"
     },
     {
       "path": "modules/hall-ui/public/goals.html",
@@ -5172,7 +5182,7 @@
     {
       "path": "modules/hall-ui/public/roadmap.css",
       "mode": "0000644",
-      "sha256": "ad9786e7fb4aafc2dfa4e62f79a630c4d29bdac8d8410e11b2bd9e879294efd0"
+      "sha256": "94aa72d38991e04def83c19ec2ce232f8c2f7d4fb0f51e499c24284f28526236"
     },
     {
       "path": "modules/hall-ui/public/roadmap.html",
@@ -5182,7 +5192,7 @@
     {
       "path": "modules/hall-ui/public/roadmap.js",
       "mode": "0000644",
-      "sha256": "2c4503bba23e3673eaeda8fa1f06cbee6ed6803ba74a5bb1feb0b47cd49509b4"
+      "sha256": "65f39048e4fda07ddfec5bcf5262ca76ea1bd186ad8452ac6a3f0c9b1b6e1a62"
     },
     {
       "path": "modules/hall-ui/public/roadmap.states.json",
@@ -5292,7 +5302,7 @@
     {
       "path": "modules/hall-ui/public/task-detail.js",
       "mode": "0000644",
-      "sha256": "5a88cd76fb6da7058ba109c3467f11c20c973daff8b03f4ed1b4be67b8807a87"
+      "sha256": "2884b3c0652e4b74a680215854cf6b329f94c0dcd7bb43764de117d51f828ca3"
     },
     {
       "path": "modules/hall-ui/public/task-lib.js",
@@ -5512,7 +5522,7 @@
     {
       "path": "modules/lifecycle/db-goals.js",
       "mode": "0000644",
-      "sha256": "392970a48349421c000de9581cfcc63969152179feb3406f1057571d9b68c0ee"
+      "sha256": "6e8235a4025951f82644f4a058a56ee4052d33e3b8b68a7c27d8ce42a0b81b19"
     },
     {
       "path": "modules/lifecycle/db-grade.js",
@@ -5547,12 +5557,12 @@
     {
       "path": "modules/lifecycle/db-versions.js",
       "mode": "0000644",
-      "sha256": "8214d4a7c2e97b12e8cd9ba866b6560ac6e67446af5dcf28a0055838e32897f5"
+      "sha256": "09513924d1a97c4e5c2c84c3e55bcadb91159bf309ece479555b6b7a833188c7"
     },
     {
       "path": "modules/lifecycle/db.js",
       "mode": "0000644",
-      "sha256": "c3318a8473ccc9b41bff5eb94fe4096032c2d5c5a7819d0777c4d41db0e4d695"
+      "sha256": "75a42d39fe676e0447cead0717a4f832b5296308e786037f5d44ee35593234c6"
     },
     {
       "path": "modules/lifecycle/dead-deps.js",
@@ -5737,7 +5747,7 @@
     {
       "path": "modules/lifecycle/routes/goals.js",
       "mode": "0000644",
-      "sha256": "28874a1b4d3e748866fa59d510c3c62656ad48039dae8ca7ce5b0ca5d47b357d"
+      "sha256": "eb3137c30f6471aa0900f98f0fa45752808609e4e1e99f9ecb1f6df0d3e7c5ab"
     },
     {
       "path": "modules/lifecycle/routes/help-requests.js",
@@ -5792,12 +5802,12 @@
     {
       "path": "modules/lifecycle/routes/version-route-authz.js",
       "mode": "0000644",
-      "sha256": "5db4f94ca52f634f41cdb489572e43eb6785744220d2565a716cff47bfa72b30"
+      "sha256": "d4e7b2d1ecaa1f5ceaabf9b6c62e649e139b25d74a50c98e0dfc734871b86b98"
     },
     {
       "path": "modules/lifecycle/routes/versions.js",
       "mode": "0000644",
-      "sha256": "5efe819220f9128844793a0c068babcd402860b434aab322fd9a99f8d2d26167"
+      "sha256": "e13f46e32e43c84bfb2a4d3bc46a90da191c04f516fb7493cfe0cc19d05726d7"
     },
     {
       "path": "modules/lifecycle/routes/visuals.js",
@@ -7602,12 +7612,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "b89e31e9693695643d5effcfe1386164ec4b8759e50fec6d86fe4edf19f09cb6"
+      "sha256": "be3914ecf700403c201cc59bfc3eda9bc1494e12a5b44b04fec6e97892e4f05f"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "09428614577361d939096da4a4a91a0f742a0504d97168cdea6d169ccb8931be"
+      "sha256": "560bc9c97a89ffd8c58c70da7a39467537a678525dfe2ebb8bfbc2d5c1cb0c17"
     },
     {
       "path": "public-docs/index.html",
@@ -8877,7 +8887,7 @@
     {
       "path": "scripts/gds/triage.js",
       "mode": "0000644",
-      "sha256": "dc494030979bf60de1d1423c68a07e36667e816d7e2a1652960cfbd17be4bfcc"
+      "sha256": "739aac4b9ec1cc413c21cc53076f66782a120173eaae5f579aa24b6936e28164"
     },
     {
       "path": "scripts/gds/turn-end-sound.js",
@@ -9322,7 +9332,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "5c9d16a923a0cb30e18960d8714e1e8454940d1c4d6cef4d22fa8096a98237ab"
+      "sha256": "5a2a37804d21f51fb5a4433b4f2c39ecdb91f6fe29de0d0802902bf38f981217"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -10444,6 +10454,11 @@
       "mode": "0000644",
       "sha256": "bf0baad459ee2e103079a53570ca4998bb3ba66451ad0257478dd236118c8ce6"
     },
+    {
+      "path": "tests/goal_archive_hall.mjs",
+      "mode": "0000644",
+      "sha256": "993a280b9900d40145e1913a6a404a23293e241d63ddaadb605ebe27309c58c8"
+    },
     {
       "path": "tests/goal_archive_route_e2e.mjs",
       "mode": "0000644",
@@ -10692,7 +10707,7 @@
     {
       "path": "tests/government_require_permission.mjs",
       "mode": "0000644",
-      "sha256": "a2711b93fcb7e6a602d22fbc864676f5dfdc6c503cc6551badc32e36facb723c"
+      "sha256": "eff61f5299bcaaf21e19dfa84eb4ff6b92d480f708568bc243e784953d1db40a"
     },
     {
       "path": "tests/government_resolver.mjs",
@@ -10707,7 +10722,7 @@
     {
       "path": "tests/government_seed.mjs",
       "mode": "0000644",
-      "sha256": "ab6404171b072748798728cba7c5b1a6f759170996d8fea8be5ab26a033b7ac1"
+      "sha256": "f798fe7edf69245324938587dca3682874495b7bf950f0c0e5165b2bb0eadd4e"
     },
     {
       "path": "tests/government_session_scope.mjs",
@@ -11517,7 +11532,7 @@
     {
       "path": "tests/one_planning_version.mjs",
       "mode": "0000644",
-      "sha256": "1f8c6924dac2c922a1f88c22693b4386ec16d5f0ae346609b3d1dc0003308a70"
+      "sha256": "347d8856d88246e08abcdfcaf744b491821f95f0daaab0291c4f9bb2a427ed6b"
     },
     {
       "path": "tests/origin_containment.mjs",
@@ -11752,7 +11767,7 @@
     {
       "path": "tests/promote_goal_id.mjs",
       "mode": "0000644",
-      "sha256": "29d69119eb019e74e5f5407855080c908820f06fca70b93146694d4b57d1e25d"
+      "sha256": "5444df365780c33d61ca9a18de08ed89ed2ff74d8af198d51edbaed19d6010c2"
     },
     {
       "path": "tests/prose_edits.mjs",
@@ -11892,7 +11907,7 @@
     {
       "path": "tests/publish_reconciler.mjs",
       "mode": "0000644",
-      "sha256": "5a9ea0bf7b4d776a6f9036b8bd060fef76335533274ed748e9b9d742da6960d3"
+      "sha256": "4c7c58a1fd28427fbcace0d20a9446f88c2a90cc19eb5fd4826236207732be26"
     },
     {
       "path": "tests/push_path_brief.mjs",
@@ -12502,7 +12517,7 @@
     {
       "path": "tests/task_detail_ui.mjs",
       "mode": "0000644",
-      "sha256": "d7b12d56b50a0412d50f3558065c681d92c0c631edfef5553164e646979e6fa5"
+      "sha256": "0bc0d93696b5ce80fb4307b7991bff640316e46fd6fcdebf0ba5a62397ffbe8f"
     },
     {
       "path": "tests/task_goal_link.mjs",
@@ -12654,16 +12669,31 @@
       "mode": "0000644",
       "sha256": "808a5fb2e14fb03ded6ed5ea0b3c0a0a7f53bfb885e853acb225f7b439a06ac3"
     },
+    {
+      "path": "tests/version_build_slot.mjs",
+      "mode": "0000644",
+      "sha256": "795946106f5e562a55f0ad04f3226884ee7815a86f8c20b94220e8069e192c41"
+    },
     {
       "path": "tests/version_close.mjs",
       "mode": "0000644",
       "sha256": "372c80d42e122a70a4fae8fcfbaaa47459575d3e0a2b80fff8876dfc512c5aeb"
     },
+    {
+      "path": "tests/version_close_route.mjs",
+      "mode": "0000644",
+      "sha256": "11c77cc535ecd86bc50ea962835b74672ff3a0d8093d8ce3007586a5873b4201"
+    },
     {
       "path": "tests/version_literals.mjs",
       "mode": "0000644",
       "sha256": "17e872131c17bae7a061debc1fd3ee354ab704678b475edd6a8b1dfdd63ceb2f"
     },
+    {
+      "path": "tests/version_override_visibility.mjs",
+      "mode": "0000644",
+      "sha256": "692261c26e3da46519757733a7fcf9a9998e0942bc5890688b66b79590d82c27"
+    },
     {
       "path": "tests/versions_route.mjs",
       "mode": "0000644",

package/.claude/skills/planning-session/SKILL.md

@@ -30,7 +30,7 @@ This mirrors GDS-V3 criterion C2 (`three-ranks-gate-everything`) and matches the
 
 1. Call `GET /api/gds/me` and read `builder.rank`. Compare case-insensitively (lowercase it before testing).
 2. **If `rank` is present and lowercases to `xenos`** → stop immediately. Tell the builder: *"Planning sessions set the scope-truth of a version — they're a Metic+ operation. You're currently Xenos. You can still **file** a criterion proposal or task idea via `POST /api/gds/inbox` (which lands in idea_inbox for a Metic+ builder to ratify at the next planning session); ask an Archon for promotion if you need to run sessions directly."* Do not pull state, do not present criteria, do not propose tasks.
-3. **If `rank` lowercases to `metic`** → proceed in **Metic-mode**: run the five-phase structure below conversationally, but in Phase 5 write proposals to `idea_inbox` (kind=`criterion-proposal` for criteria, kind=`feature` for tasks) tagged with the target version. Any Metic+ builder ratifies them (`idea.ratify`, metic-floored since ADR 0157) — typically at the next planning session. Since [ADR 0090](../../../docs/adr/<redacted>.md) a Metic MAY `POST /tasks` directly, since [ADR 0154](../../../docs/adr/<redacted>.md) a Metic MAY write a `done_when_criteria` row for a goal they own or manage, and since ADR 0157 a Metic MAY create a version (`version.create`, `POST /versions`). What still needs an Archon is a VERSION-level criterion (no `goal_id`) and one in a goal you don't hold. The spec-draft (Phase 3) and the in-depth interview (Phase 4) run identically in Metic-mode — the only difference is the Phase-5 write (you file proposals, you don't seed tasks directly).
+3. **If `rank` lowercases to `metic`** → proceed in **Metic-mode**: run the five-phase structure below conversationally, but in Phase 5 write proposals to `idea_inbox` (kind=`criterion-proposal` for criteria, kind=`feature` for tasks) tagged with the target version. Any Metic+ builder ratifies them (`idea.ratify`, metic-floored since ADR 0157) — typically at the next planning session. Since [ADR 0090](../../../docs/adr/<redacted>.md) a Metic MAY `POST /tasks` directly, and since [ADR 0154](../../../docs/adr/<redacted>.md) a Metic MAY write a `done_when_criteria` row for a goal they own or manage. What needs an Archon is a VERSION-level criterion (no `goal_id`), one in a goal you don't hold, and — since [ADR 0250](../../../docs/adr/<redacted>.md) §6 (task 1003608) — **creating a version at all**: `version.create` returned to the Archon floor, because once the version boundary carries the scope gate, cutting a version is the way around it rather than authoring. ADR 0157 had briefly delegated it to Metic; it no longer is. The spec-draft (Phase 3) and the in-depth interview (Phase 4) run identically in Metic-mode — the only difference is the Phase-5 write (you file proposals, you don't seed tasks directly).
 
    **For each criterion proposal**, write `body_md` as a JSON object with this exact shape so the `POST /api/gds/inbox/:id/ratify` endpoint (V3.R31 / #252) can parse it cleanly:
 
@@ -44,7 +44,7 @@ This mirrors GDS-V3 criterion C2 (`three-ranks-gate-everything`) and matches the
 
    `target_version` is required and must match an existing `versions.id`. `criterion_md` is required and is the user-visible criterion text. `sort_order_hint` is optional — omit or pass `null` to let the ratify endpoint default it to `max(existing sort_order) + 1` on the target version. On ratify, the proposer earns +5 karma (`reason='proposal_ratified'`) and the audit row in `criterion_proposal_audit` captures the full provenance.
 
-   **Net-new version (idea 425).** The Metic-mode path above assumes the target version *already exists* — its criterion proposals carry `suggested_version` (an FK to a `versions` row) and a `target_version` that must match `versions.id`. Since ADR 0157 `version.create` is **metic-floored** (`POST /versions`), so a Metic planning a *brand-new* version normally just creates the version row first and proceeds against it. Against a deployment that predates that delegation (`POST /versions` → `403`), the Metic has no valid FK to point at, so the normal proposal can't land. When that's the case, run the session in Metic-mode as usual through Phases 1–4, then in Phase 5 file the proposals like this instead:
+   **Net-new version (idea 425).** The Metic-mode path above assumes the target version *already exists* — its criterion proposals carry `suggested_version` (an FK to a `versions` row) and a `target_version` that must match `versions.id`. **A Metic cannot create one:** `version.create` is **Archon-floored** ([ADR 0250](../../../docs/adr/<redacted>.md) §6, task 1003608 — ADR 0157 had briefly lowered it to Metic and that is reversed). So `POST /versions` returns `403` and the Metic has no valid FK to point at. Ask an Archon to cut the version — or, when that is not available, run the session in Metic-mode as usual through Phases 1–4 and in Phase 5 file the proposals like this instead:
 
    1. **OMIT `suggested_version` on every proposal row.** It is an FK to a version row that doesn't exist yet; leaving it set would fail the constraint (or worse, attach the proposal to the wrong existing version). Leave it `null`/absent.
    2. **Keep `target_version` INSIDE the criterion-proposal `body_md` JSON as plain text** (the version's intended id/slug, e.g. `"V4"`). It is *not* validated as an FK there — it's a label the Archon reads at ratify time. Once the Archon creates the real version row, the proposal is ratifiable as-is: `POST /api/gds/inbox/:id/ratify` resolves `target_version` against the now-existing `versions.id`.

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 359 operations across 55 resource groups
+- 360 operations across 55 resource groups
 
 ## Install
 

package/clients/bongos-client/bongos-client.global.js

@@ -891,8 +891,10 @@ function createClient(opts = {}) {
     "versions": {
       // GET /versions — rank: public — GET /versions
       getVersions: (args) => request("GET", "/versions", { hasBody: false }, args),
-      // POST /versions — rank: metic+archon — POST /versions
+      // POST /versions — rank: archon — POST /versions
       postVersions: (args) => request("POST", "/versions", { hasBody: true }, args),
+      // POST /versions/{id}/close — rank: archon — POST /versions/:id/close
+      postVersionsIdClose: (args) => request("POST", "/versions/{id}/close", { hasBody: true }, args),
       // GET /versions/{id}/done-when — rank: public — GET /versions/:id/done-when
       getVersionsIdDoneWhen: (args) => request("GET", "/versions/{id}/done-when", { hasBody: false }, args),
       // POST /versions/{id}/done-when — rank: metic+archon — POST /versions/:id/done-when

package/clients/bongos-client/index.cjs

@@ -890,8 +890,10 @@ function createClient(opts = {}) {
     "versions": {
       // GET /versions — rank: public — GET /versions
       getVersions: (args) => request("GET", "/versions", { hasBody: false }, args),
-      // POST /versions — rank: metic+archon — POST /versions
+      // POST /versions — rank: archon — POST /versions
       postVersions: (args) => request("POST", "/versions", { hasBody: true }, args),
+      // POST /versions/{id}/close — rank: archon — POST /versions/:id/close
+      postVersionsIdClose: (args) => request("POST", "/versions/{id}/close", { hasBody: true }, args),
       // GET /versions/{id}/done-when — rank: public — GET /versions/:id/done-when
       getVersionsIdDoneWhen: (args) => request("GET", "/versions/{id}/done-when", { hasBody: false }, args),
       // POST /versions/{id}/done-when — rank: metic+archon — POST /versions/:id/done-when

package/clients/bongos-client/index.d.ts

@@ -49,7 +49,7 @@ export interface GetGithubRepoResponse { ok: boolean; repo: unknown; private_dep
 export interface GetGithubReposResponse { repos: unknown }
 export interface GetGoalsIdConflictsResponse { ok: boolean; goal_id: unknown; conflicts: unknown; cross_goals_considered: unknown }
 export interface GetGoalsIdRequestsResponse { requests: unknown }
-export interface GetGoalsIdResponse { goal: unknown; members: unknown; criteria: unknown; dependencies: unknown; criterionless_task_count: unknown; admitted: unknown }
+export interface GetGoalsIdResponse { goal: unknown; members: unknown; criteria: unknown; dependencies: unknown; criterionless_task_count: unknown; admitted: unknown; open_tasks: unknown }
 export interface GetGoalsResponse { goals: unknown }
 export interface GetGoalsRollupsResponse { rollups: unknown }
 export interface GetGovernmentAssignmentsResponse { assignments: unknown }
@@ -389,6 +389,8 @@ export interface PostTasksIdVoteResponse { ok: boolean; task_id: unknown; my_vot
 export interface PostTasksNewcomerRestockResponse { ok: boolean; stamped: unknown; results: unknown }
 export interface PostTasksRequest { version_id: string; title: string; description?: string; status?: string; touches?: string[]; est_minutes?: number; est_cost_usd?: number; manual_degree?: number; priority?: number; automation_tag?: string; credits_reward?: number; source?: string; source_ref?: string; value_summary?: string; kind?: string; discipline?: string; parallel_safe?: unknown; newcomer_friendly?: boolean; security_sensitive?: boolean; requires_rank?: string; auto_detect_touches?: boolean; criterion_ids?: unknown[]; module_key?: string; goal_id?: number }
 export interface PostTasksResponse { task: unknown; needs_migration: unknown; criteria: unknown; idempotent: boolean }
+export interface PostVersionsIdCloseRequest { reason?: string; dispositions?: Record<string, unknown> }
+export interface PostVersionsIdCloseResponse { ok: boolean; version: unknown; applied: unknown }
 export interface PostVersionsIdDoneWhenRequest { criterion_id: string; criterion_md: string; goal_id?: number; sort_order?: number }
 export interface PostVersionsIdDoneWhenResponse { ok: boolean; criterion: unknown }
 export interface PostVersionsRequest { id: string; name: string; status?: string; track?: string; done_when?: string; scope_doc_path?: string; criteria?: unknown[] }
@@ -1220,8 +1222,10 @@ export interface BongosClient {
   "versions": {
     /** GET /versions — rank: public */
     getVersions(args?: RequestArgs): Promise<GetVersionsResponse>;
-    /** POST /versions — rank: metic+archon */
+    /** POST /versions — rank: archon */
     postVersions(args: RequestArgs & { body: PostVersionsRequest }): Promise<PostVersionsResponse>;
+    /** POST /versions/{id}/close — rank: archon */
+    postVersionsIdClose(args?: RequestArgs & { body?: PostVersionsIdCloseRequest }): Promise<PostVersionsIdCloseResponse>;
     /** GET /versions/{id}/done-when — rank: public */
     getVersionsIdDoneWhen(args?: RequestArgs): Promise<GetVersionsIdDoneWhenResponse>;
     /** POST /versions/{id}/done-when — rank: metic+archon */

package/clients/bongos-client/index.mjs

@@ -887,8 +887,10 @@ export function createClient(opts = {}) {
     "versions": {
       // GET /versions — rank: public — GET /versions
       getVersions: (args) => request("GET", "/versions", { hasBody: false }, args),
-      // POST /versions — rank: metic+archon — POST /versions
+      // POST /versions — rank: archon — POST /versions
       postVersions: (args) => request("POST", "/versions", { hasBody: true }, args),
+      // POST /versions/{id}/close — rank: archon — POST /versions/:id/close
+      postVersionsIdClose: (args) => request("POST", "/versions/{id}/close", { hasBody: true }, args),
       // GET /versions/{id}/done-when — rank: public — GET /versions/:id/done-when
       getVersionsIdDoneWhen: (args) => request("GET", "/versions/{id}/done-when", { hasBody: false }, args),
       // POST /versions/{id}/done-when — rank: metic+archon — POST /versions/:id/done-when

package/docs/adr/0157-archon-is-rank-and-identity-only.md

@@ -8,6 +8,8 @@
 
 **Track:** `internal` (GDS / methodology). Task [1002584](https://cloudbongos.com/builders#/task/1002584).
 
+> **Amended by [ADR 0250](<redacted>.md) §6 for exactly one key** (2026-09-07, task [1003608](https://cloudbongos.com/builders#/task/1003608)): **`version.create` returns to the Archon floor.** The argument below — *authoring delegates, disposition does not* — was right about what a version **was**. ADR 0250 D1 makes the version boundary the scope gate, and once it does, cutting a new version is no longer authoring: it is the way **around** the gate, because a builder refused a goal on a building version need only cut a fresh version to put it somewhere. Create therefore joins `version.close` as a disposition over scope. **Every other key in this ADR stands.**
+
 ---
 
 ## Context

package/docs/api/openapi.json

@@ -16025,8 +16025,8 @@
           "versions"
         ],
         "summary": "POST /versions",
-        "description": "POST /versions — create a version + its done-when criteria in one call. The seed primitive `bongos init` (task 1204 / R65) uses so a fresh instance needs no hand-written seed-*.js script. Archon-only: creating a version is a plan/scope mutation, same gate as POST /tasks (ADR 0016). rank: archon — creates a version + its done-when criteria.\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `version.create` (all required).",
-        "x-rank": "metic+archon",
+        "description": "POST /versions — create a version + its done-when criteria in one call. The seed primitive `bongos init` (task 1204 / R65) uses so a fresh instance needs no hand-written seed-*.js script. Archon-only: creating a version is a plan/scope mutation, same gate as POST /tasks (ADR 0016). rank: archon — creates a version + its done-when criteria.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `version.create` (all required).",
+        "x-rank": "archon",
         "x-source": "modules/lifecycle/routes/versions.js",
         "x-permissions": [
           "version.create"
@@ -16126,6 +16126,72 @@
         "security": []
       }
     },
+    "/versions/{id}/close": {
+      "post": {
+        "operationId": "post_versions_id_close",
+        "tags": [
+          "versions"
+        ],
+        "summary": "POST /versions/:id/close",
+        "description": "POST /versions/:id/close — the move a version has never had (BV1.R12, task 1003599, goal 1000086, ADR 0250 D5, ADR 0263 §5). The hierarchy had a bottom and no top: tasks close, criteria close, goals close, and a version only ever moved by hand-run SQL on the droplet — `scripts/gds/version-close.js` still PRINTS that the API cannot do this (task 1003610, R23, points it here). A thing with no closing move does not close, which is how two versions ended up building at once. Archon-only, behind the `version.close` permission that has existed at that floor since BV1.R105 and that, until now, NOTHING referenced. THE TWO-STEP IS R14's ARCHIVE, in spirit and in shape: call it bare and a version holding open goals refuses with the GOALS ATTACHED; re-submit with a total `dispositions` map and it closes. Agents already know that interaction, and a second idiom for the same thing is how two surfaces drift apart. Auto-close (task 1003603, R16) reaches `db.closeVersion` with an EMPTY plan and never touches this route: by construction it fires only when the last non-maintenance goal achieved, so nothing is left to disposition (ADR 0263 §3). rank: archon — the disposition that finalises a version's scope-truth.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `version.close` (all required).",
+        "x-rank": "archon",
+        "x-source": "modules/lifecycle/routes/versions.js",
+        "x-permissions": [
+          "version.close"
+        ],
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "requestBody": {
+          "required": false,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostVersionsIdCloseRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostVersionsIdCloseResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/versions/{id}/done-when": {
       "get": {
         "operationId": "get_versions_id_done_when",
@@ -17006,7 +17072,8 @@
           "criteria": {},
           "dependencies": {},
           "criterionless_task_count": {},
-          "admitted": {}
+          "admitted": {},
+          "open_tasks": {}
         },
         "required": [
           "goal",
@@ -17014,7 +17081,8 @@
           "criteria",
           "dependencies",
           "criterionless_task_count",
-          "admitted"
+          "admitted",
+          "open_tasks"
         ]
       },
       "GetGoalsResponse": {
@@ -22406,6 +22474,34 @@
           "idempotent"
         ]
       },
+      "PostVersionsIdCloseRequest": {
+        "type": "object",
+        "properties": {
+          "reason": {
+            "type": "string",
+            "maxLength": 2000
+          },
+          "dispositions": {
+            "type": "object"
+          }
+        },
+        "additionalProperties": false
+      },
+      "PostVersionsIdCloseResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "version": {},
+          "applied": {}
+        },
+        "required": [
+          "ok",
+          "version",
+          "applied"
+        ]
+      },
       "PostVersionsIdDoneWhenRequest": {
         "type": "object",
         "properties": {
@@ -22701,9 +22797,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 359,
-  "x-schema-count": 396,
+  "x-endpoint-count": 360,
+  "x-schema-count": 398,
   "x-undocumented-bodies": 9,
-  "x-response-schemas": 267,
+  "x-response-schemas": 268,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }