@bongos/core 1.19.673 → 1.19.675

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.673",
-  "core_contract": "1.19.673",
-  "source_commit": "9798ad8423cf89ef3bad579911f1f5ca8505e800",
+  "core_version": "1.19.675",
+  "core_contract": "1.19.675",
+  "source_commit": "1341cb9d37a0965db7f80483f7f1cb8f3622b2c5",
   "source_ref": "HEAD",
-  "built_at": "2026-09-11T18:16:55.232Z",
+  "built_at": "2026-09-11T19:32:52.079Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 474,
     "agent_docs_stubbed": 24,
-    "functional_verbatim": 2121,
+    "functional_verbatim": 2123,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 2619,
-  "tree_sha256": "3be80c1f6787508e21f11f1b391ce342ad0c0e3b570a6360bd00d3e5b5cfa417",
+  "file_count": 2621,
+  "tree_sha256": "554ecf20aaad28b8461021791d1e5c4d2c890a860a458885227f20429b946339",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -367,12 +367,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "03379a98721207feab9a9b4c03862051ee6d52a29a0bc467ed73ae1d36bf49cd"
+      "sha256": "b15290057c38e4b80db4136d7fdd32549718e31f5975484e77098c66050c4366"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "ec75333abb0ee49b89320a86e73b56f2f3872c13c596b1e67f36e705b8ba1210"
+      "sha256": "bdf715d3196df99d675570748f7ac054522046cbe89d78b84c27eef89a52d18f"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -382,17 +382,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "bce3dcdbe37505e0fa526e02b7b379ca9ab378f6c34b41345621d55170d9f19d"
+      "sha256": "2fbbab84a89021945a707fd21d72acbad7f03b77c5fb6eb39abce44a64d4cc1b"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "e1d2929cc1373aca2d24879b9fbbbbfcd1ef77c850565aca7dba0130ff1ac43b"
+      "sha256": "22523f2527d8849445122c5a03332d777a63d849a5806e33d387cbd83c54fb2f"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "3fbcb50de89350e95b86180e828a16b897be32a1f8b4cdf78cc060e1c5afff86"
+      "sha256": "eeb72bda7a89900279647d6d999d2a920a986bf2f4ed3a63782cd4e36b1b3dfc"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -1912,12 +1912,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "93eeff755bd089165265cf0f2c7f21e36803ff9519266512f834891d1ff6dc60"
+      "sha256": "6b681ad5de20a67efa1d6d024d5cb5dbe5313add4ec51d94a30a0025fa567ba2"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "0d47d92e4e20e0f7d2a9ea9a1a4c643ed2e22103cd6ef5081377b22540993670"
+      "sha256": "301cf1db00b9f18b84cb765bbaa359329a665b1ef754dff4c21c1550ec60cae5"
     },
     {
       "path": "docs/architecture.md",
@@ -2792,7 +2792,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "e1eb4883d1a25ac4b5b90ba00150f280c004569abeba0f9c0c4099982e587c6e"
+      "sha256": "af50f99c27d85db0067d45e5e6eba133edcae8b3dd7388041b6824f4cb192e22"
     },
     {
       "path": "docs/modules-contract.md",
@@ -4242,7 +4242,7 @@
     {
       "path": "modules/dev-box/app/src/vendor/bongos-client.cjs",
       "mode": "0000644",
-      "sha256": "bce3dcdbe37505e0fa526e02b7b379ca9ab378f6c34b41345621d55170d9f19d"
+      "sha256": "2fbbab84a89021945a707fd21d72acbad7f03b77c5fb6eb39abce44a64d4cc1b"
     },
     {
       "path": "modules/dev-box/app/test/unit.mjs",
@@ -4332,7 +4332,7 @@
     {
       "path": "modules/discord/discord-channels.js",
       "mode": "0000644",
-      "sha256": "e910fb46a97b5d25338477a609eed045862020f1634e7ba4312a5b3857605d04"
+      "sha256": "aeeb86c5d61b4a06ae5429fb69bb4720d54f4782ead5d23cdce640344a568246"
     },
     {
       "path": "modules/discord/discord-inbound.js",
@@ -4382,7 +4382,7 @@
     {
       "path": "modules/discord/routes/discord.js",
       "mode": "0000644",
-      "sha256": "eeb7c7165f18e33216bff0bb8b846a1674f537a95e8853c0b88fc101c336fb53"
+      "sha256": "2229a563e11bd05f0eb047f0afc0e1d66eaddb6a7fa2fb07c429e162684246f0"
     },
     {
       "path": "modules/discord/ship-broadcast.js",
@@ -5692,7 +5692,7 @@
     {
       "path": "modules/lifecycle/db-tasks.js",
       "mode": "0000644",
-      "sha256": "fb6503bdaf013a13752968844693cbf957484f033b9df27a66f93eacb91c2cfa"
+      "sha256": "5b2df46e54dbeb0694a805d9743df5da6fde90b73a76989e917257b7f78f8ed9"
     },
     {
       "path": "modules/lifecycle/db-versions.js",
@@ -5747,7 +5747,7 @@
     {
       "path": "modules/lifecycle/goal-edits.js",
       "mode": "0000644",
-      "sha256": "09ca2631bfa979f5948b6b669cfe478cc67db3d4e1fbacd4c6f2bbd5ce0ec618"
+      "sha256": "f00d1bb6bd57624679295f33d55ad1d81a9479789a78d4325f13948b9559f9f5"
     },
     {
       "path": "modules/lifecycle/goal-rollup.js",
@@ -5872,7 +5872,7 @@
     {
       "path": "modules/lifecycle/routes/done-when.js",
       "mode": "0000644",
-      "sha256": "25b18aa82f5b2951f3a9560fa5285dc2793556303ed68ae0aa9ea781ec2d45c9"
+      "sha256": "9370fd1fc8a4a1ff864c1e85321b05a74bb45150ef8eb92cefdbbd85524bbe27"
     },
     {
       "path": "modules/lifecycle/routes/gate-approvals.js",
@@ -7767,12 +7767,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "dfc25c3b8365e868e5119aff5e8447d41b1983dbb9db9c2669e13f9259726629"
+      "sha256": "795b9955321b5ecffd9d78f515649442016285cb21f728c4001ee97ebcc32ac5"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "98edbd2fab2c33a96eebabd87c3c0c4dbd2f563fda40ca37bc737b186726fade"
+      "sha256": "33bcb1180ab5e54281e7c50d39a712d142b259f77f37b685f2bb4512b1c010fa"
     },
     {
       "path": "public-docs/index.html",
@@ -8152,7 +8152,7 @@
     {
       "path": "scripts/gds/discord-channels.js",
       "mode": "0000644",
-      "sha256": "395ad654afa348b1b00e40aa1f685ac66e9ce5961213a4d4c35c132759527ecb"
+      "sha256": "e142b2d64e919adc4781ea6a55796113ebde3a3645bd4c4ed113ff9f13cd7f6a"
     },
     {
       "path": "scripts/gds/do-api.js",
@@ -9532,7 +9532,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "6aaa55e88d207f52ea930ba86d7d292c06326cdcb7c08823dd225df4bff15e2f"
+      "sha256": "35f42575db36eb956e2479c681562e18a93d2d4973c8df0d79ac5a54048d4542"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -10284,6 +10284,11 @@
       "mode": "0000644",
       "sha256": "970db80cf43dba855bf9bd331434add458ab16e719f06710487094a3a578ec53"
     },
+    {
+      "path": "tests/criterion_goal_attach.mjs",
+      "mode": "0000644",
+      "sha256": "979589fd08dc41da3c837513452353aa87f7653620fad22c8a9115d4d7d13b90"
+    },
     {
       "path": "tests/criterion_progress.mjs",
       "mode": "0000644",
@@ -10434,6 +10439,11 @@
       "mode": "0000644",
       "sha256": "981d34c2fb5ecb6e9b9f38ece947c6c7a400dceadf8bbcf09546c8b3a92eb899"
     },
+    {
+      "path": "tests/discord_channels_snapshot.mjs",
+      "mode": "0000644",
+      "sha256": "d4e43501ac29ea920c0c064afe601bd9fc24f87808f10986a51d981b3111946b"
+    },
     {
       "path": "tests/discord_foundation.mjs",
       "mode": "0000644",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 362 operations across 55 resource groups
+- 363 operations across 55 resource groups
 
 ## Use it from your project
 

package/clients/bongos-client/bongos-client.global.js

@@ -313,6 +313,8 @@ function createClient(opts = {}) {
       getDiscordChannelsPlan: (args) => request("GET", "/discord/channels/plan", { hasBody: false }, args),
       // POST /discord/channels/reconcile — rank: metic+archon — POST /discord/channels/reconcile
       postDiscordChannelsReconcile: (args) => request("POST", "/discord/channels/reconcile", { hasBody: true }, args),
+      // GET /discord/channels/snapshot — rank: metic+archon — GET /discord/channels/snapshot
+      getDiscordChannelsSnapshot: (args) => request("GET", "/discord/channels/snapshot", { hasBody: false }, args),
     },
     "doneWhen": {
       // PATCH /done-when/{criterionId} — rank: metic+archon — PATCH /done-when/:criterionId

package/clients/bongos-client/index.cjs

@@ -312,6 +312,8 @@ function createClient(opts = {}) {
       getDiscordChannelsPlan: (args) => request("GET", "/discord/channels/plan", { hasBody: false }, args),
       // POST /discord/channels/reconcile — rank: metic+archon — POST /discord/channels/reconcile
       postDiscordChannelsReconcile: (args) => request("POST", "/discord/channels/reconcile", { hasBody: true }, args),
+      // GET /discord/channels/snapshot — rank: metic+archon — GET /discord/channels/snapshot
+      getDiscordChannelsSnapshot: (args) => request("GET", "/discord/channels/snapshot", { hasBody: false }, args),
     },
     "doneWhen": {
       // PATCH /done-when/{criterionId} — rank: metic+archon — PATCH /done-when/:criterionId

package/clients/bongos-client/index.d.ts

@@ -45,6 +45,7 @@ export interface GetConnectionsDegreeHandleResponse { handle: unknown; degree: u
 export interface GetConnectionsRequestsResponse { incoming: unknown; outgoing: unknown; incoming_count: unknown; outgoing_count: unknown }
 export interface GetConnectionsResponse { connections: unknown; count: unknown }
 export interface GetDiscordChannelsPlanResponse { ok: boolean; guild_id: unknown; op_count: unknown; ops: unknown; warnings: unknown }
+export interface GetDiscordChannelsSnapshotResponse { ok: boolean; guild_id: unknown; config: unknown; warnings: unknown }
 export interface GetDoneWhenPendingReviewResponse { criteria: unknown; count: unknown }
 export interface GetGithubRepoResponse { ok: boolean; repo: unknown; private_deployable: boolean }
 export interface GetGithubReposResponse { repos: unknown }
@@ -150,8 +151,8 @@ export interface PatchBuildersIdBudgetResponse { builder: unknown }
 export interface PatchBuildersIdRankRequest { rank: string }
 export interface PatchBuildersIdRankResponse { builder: unknown; previous_rank: unknown; direction: unknown; credit_delta: unknown; broadcast: unknown }
 export interface PatchBuildersIdStatusRequest { status: "active" | "inactive"; reason?: string }
-export interface PatchDoneWhenCriterionIdRequest { criterion_md: string }
-export interface PatchDoneWhenCriterionIdResponse { ok: boolean; criterion: unknown; deltas: unknown; unchanged: boolean }
+export interface PatchDoneWhenCriterionIdRequest { criterion_md?: string; goal_id?: number }
+export interface PatchDoneWhenCriterionIdResponse { ok: boolean; criterion: unknown; deltas: unknown; unchanged: unknown; achieved_goals: unknown }
 export interface PatchGoalsIdMembersBuilderIdRequest { membership_kind: string }
 export interface PatchGoalsIdMembersBuilderIdResponse { ok: boolean; member: unknown; changed: boolean }
 export interface PatchHelpRequestsIdRequest { status: "answered" | "withdrawn" }
@@ -647,10 +648,12 @@ export interface BongosClient {
     getDiscordChannelsPlan(args?: RequestArgs): Promise<GetDiscordChannelsPlanResponse>;
     /** POST /discord/channels/reconcile — rank: metic+archon */
     postDiscordChannelsReconcile(args?: RequestArgs): Promise<PostDiscordChannelsReconcileResponse>;
+    /** GET /discord/channels/snapshot — rank: metic+archon */
+    getDiscordChannelsSnapshot(args?: RequestArgs): Promise<GetDiscordChannelsSnapshotResponse>;
   };
   "doneWhen": {
     /** PATCH /done-when/{criterionId} — rank: metic+archon */
-    patchDoneWhenCriterionId(args: RequestArgs & { body: PatchDoneWhenCriterionIdRequest }): Promise<PatchDoneWhenCriterionIdResponse>;
+    patchDoneWhenCriterionId(args?: RequestArgs & { body?: PatchDoneWhenCriterionIdRequest }): Promise<PatchDoneWhenCriterionIdResponse>;
     /** POST /done-when/{criterionId}/satisfy — rank: metic+archon */
     postDoneWhenCriterionIdSatisfy(args?: RequestArgs & { body?: PostDoneWhenCriterionIdSatisfyRequest }): Promise<ApiResponse>;
     /** POST /done-when/{criterionId}/unsatisfy — rank: metic+archon */

package/clients/bongos-client/index.mjs

@@ -309,6 +309,8 @@ export function createClient(opts = {}) {
       getDiscordChannelsPlan: (args) => request("GET", "/discord/channels/plan", { hasBody: false }, args),
       // POST /discord/channels/reconcile — rank: metic+archon — POST /discord/channels/reconcile
       postDiscordChannelsReconcile: (args) => request("POST", "/discord/channels/reconcile", { hasBody: true }, args),
+      // GET /discord/channels/snapshot — rank: metic+archon — GET /discord/channels/snapshot
+      getDiscordChannelsSnapshot: (args) => request("GET", "/discord/channels/snapshot", { hasBody: false }, args),
     },
     "doneWhen": {
       // PATCH /done-when/{criterionId} — rank: metic+archon — PATCH /done-when/:criterionId

package/docs/api/openapi.json

@@ -4338,6 +4338,47 @@
         ]
       }
     },
+    "/discord/channels/snapshot": {
+      "get": {
+        "operationId": "get_discord_channels_snapshot",
+        "tags": [
+          "discord"
+        ],
+        "summary": "GET /discord/channels/snapshot",
+        "description": "GET /api/bongos/discord/channels/snapshot — what docs/discord/channels.json WOULD say if it described the guild exactly as it is right now (task 1003510). Read-only in both directions: it writes nothing to Discord and nothing to the repo — the operator reviews the output and commits it, so the layout stays Archon-gated by merge, which is the property ADR 0037 §1 rests on. 503 when the bot is disabled / not connected to a guild. rank: archon — channel administration command.\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `discord.channels.manage` (all required).",
+        "x-rank": "metic+archon",
+        "x-source": "modules/discord/routes/discord.js",
+        "x-permissions": [
+          "discord.channels.manage"
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetDiscordChannelsSnapshotResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/done-when/pending-review": {
       "get": {
         "operationId": "get_done_when_pending_review",
@@ -4386,7 +4427,7 @@
           "done-when"
         ],
         "summary": "PATCH /done-when/:criterionId",
-        "description": "PATCH /done-when/:criterionId — correct a criterion's TEXT (task 1003102). Was write-once: this file exposed create, satisfy and unsatisfy and nothing else, so wrong text had no API repair path. The incident that forced it: a shell-quoting error stripped backtick-wrapped literals out of three criteria on goal 1000073 at CREATION time — the intent was recorded, the text was wrong, and the only channels were prod SQL or archiving the goal (worse: criteria are version-level rows, so an archived goal's criteria linger in the version rollup). A SATISFIED criterion is REFUSED, by name — see prose-edits.criterionProseRefusal for why that is a decision and not a limitation: a satisfied criterion is a claim someone verified, and re-wording it re-points that verification at text nobody checked. Unsatisfy → edit → re-satisfy makes the undo a recorded act. Gated like criterion CREATION — BOTH HALVES. The permission `criterion.create` is only the RANK floor; the sibling POST /versions/:id/done-when also runs authorizeCriterionCreate, the per-goal owner|manager wall (ADR 0154). Copying just the rank half would let any Metic rewrite criteria on a goal they neither own, manage, nor belong to — reusing the SAME pure gate is the only way the claim \"gated like creation\" is true. (Caught by the grader on the first cut of task 1003102: the comment said it, the code did half of it.) rank: metic+archon — matches POST /versions/:id/done-when.\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `criterion.create` (all required).",
+        "description": "PATCH /done-when/:criterionId — amend a criterion's TEXT (task 1003102) and/or MOVE it between goals (task 1003509). Was write-once: this file exposed create, satisfy and unsatisfy and nothing else, so wrong text had no API repair path. The incident that forced it: a shell-quoting error stripped backtick-wrapped literals out of three criteria on goal 1000073 at CREATION time — the intent was recorded, the text was wrong, and the only channels were prod SQL or archiving the goal (worse: criteria are version-level rows, so an archived goal's criteria linger in the version rollup). A SATISFIED criterion is REFUSED, by name — see prose-edits.criterionProseRefusal for why that is a decision and not a limitation: a satisfied criterion is a claim someone verified, and re-wording it re-points that verification at text nobody checked. Unsatisfy → edit → re-satisfy makes the undo a recorded act. Gated like criterion CREATION — BOTH HALVES. The permission `criterion.create` is only the RANK floor; the sibling POST /versions/:id/done-when also runs authorizeCriterionCreate, the per-goal owner|manager wall (ADR 0154). Copying just the rank half would let any Metic rewrite criteria on a goal they neither own, manage, nor belong to — reusing the SAME pure gate is the only way the claim \"gated like creation\" is true. (Caught by the grader on the first cut of task 1003102: the comment said it, the code did half of it.) rank: metic+archon — matches POST /versions/:id/done-when. THE GOAL MOVE (task 1003509 — walk finding W5). `goal_id` used to be writable only by createCriterion's INSERT, so a criterion was born linked and stayed that way for life. The runner seeds a fresh instance's V1 criterion with NO goal — at standup there is no goal yet to name (provision-repo.js seedFirstVersionCmd) — so the owner's first goal could never adopt it: /progress showed the criterion \"(ungrouped)\" forever beside the goal it obviously belonged to, reporting `criteria: []`. Amending it took SQL, and a hub-provisioned owner has no SQL access at all. BOTH ENDS OF A MOVE ARE GATED, not just the goal it leaves. A move is a criterion write on the DESTINATION every bit as much as on the source, and gating only the source would let a goal's own owner push their criterion into a goal they have no authority over — a criterion being, per the CREATE route above, a thing that permanently blocks version close and goal auto-achieve with no delete route to undo it. So authorizeCriterionCreate runs against both and both must pass. DETACH (`goal_id: null`) has no destination, so it lands on that gate's goal-less branch and is Archon-only — the same wall that makes version-level criteria Archon-only at creation (ADR 0154), reached without a rule of its own. A SATISFIED criterion may still MOVE. criterionProseRefusal freezes the text of a verified claim, and that reasoning is about re-wording: moving one between goals changes how it is grouped, never what was checked. It is refused here only when the prose is what is changing. WHO CAN ADOPT THE SEEDED CRITERION. Because a goal-LESS criterion is version-level, the source gate's own goal-less branch makes ANY write to one Archon-only — which predates this task (a non-Archon could not edit an ungrouped criterion's prose either). That is not a wall in front of W5: the founder of a wizard-born instance IS its Archon, so the one criterion this was filed for is theirs to place. A Metic is unaffected where it matters — regrouping between two goals they already hold needs no escalation.\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `criterion.create` (all required).",
         "x-rank": "metic+archon",
         "x-source": "modules/lifecycle/routes/done-when.js",
         "x-permissions": [
@@ -4404,7 +4445,7 @@
           }
         ],
         "requestBody": {
-          "required": true,
+          "required": false,
           "content": {
             "application/json": {
               "schema": {
@@ -17101,6 +17142,23 @@
           "warnings"
         ]
       },
+      "GetDiscordChannelsSnapshotResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "guild_id": {},
+          "config": {},
+          "warnings": {}
+        },
+        "required": [
+          "ok",
+          "guild_id",
+          "config",
+          "warnings"
+        ]
+      },
       "GetDoneWhenPendingReviewResponse": {
         "type": "object",
         "properties": {
@@ -18447,11 +18505,12 @@
             "type": "string",
             "minLength": 1,
             "maxLength": 10000
+          },
+          "goal_id": {
+            "type": "integer",
+            "minimum": 1
           }
         },
-        "required": [
-          "criterion_md"
-        ],
         "additionalProperties": false
       },
       "PatchDoneWhenCriterionIdResponse": {
@@ -18462,15 +18521,15 @@
           },
           "criterion": {},
           "deltas": {},
-          "unchanged": {
-            "type": "boolean"
-          }
+          "unchanged": {},
+          "achieved_goals": {}
         },
         "required": [
           "ok",
           "criterion",
           "deltas",
-          "unchanged"
+          "unchanged",
+          "achieved_goals"
         ]
       },
       "PatchGoalsIdMembersBuilderIdRequest": {
@@ -22954,9 +23013,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 362,
-  "x-schema-count": 401,
+  "x-endpoint-count": 363,
+  "x-schema-count": 402,
   "x-undocumented-bodies": 9,
-  "x-response-schemas": 270,
+  "x-response-schemas": 271,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 362 endpoints across 58 route files.
+> **Generated from the live route files** — the route file is authoritative. 363 endpoints across 58 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -191,18 +191,19 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | POST | `/api/bongos/dependencies` | `archon` | — | POST /dependencies — create an edge "from is blocked until to is done". |
 | DELETE | `/api/bongos/dependencies` | `archon` | — | DELETE /dependencies — remove an edge (body carries the 4-tuple). |
 
-## `discord` (2)
+## `discord` (3)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
 | GET | `/api/bongos/discord/channels/plan` | `metic+archon` | — | GET /api/bongos/discord/channels/plan — dry run. |
 | POST | `/api/bongos/discord/channels/reconcile` | `metic+archon` | — | POST /api/bongos/discord/channels/reconcile — apply the config to Discord now. |
+| GET | `/api/bongos/discord/channels/snapshot` | `metic+archon` | — | GET /api/bongos/discord/channels/snapshot — what docs/discord/channels.json WOULD say if it described the guild exactly as it is right no… |
 
 ## `done-when` (4)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
-| PATCH | `/api/bongos/done-when/:criterionId` | `metic+archon` | `criterion_md` | PATCH /done-when/:criterionId — correct a criterion's TEXT (task 1003102). |
+| PATCH | `/api/bongos/done-when/:criterionId` | `metic+archon` | `criterion_md`, `goal_id` | PATCH /done-when/:criterionId — amend a criterion's TEXT (task 1003102) and/or MOVE it between goals (task 1003509). |
 | POST | `/api/bongos/done-when/:criterionId/satisfy` | `metic+archon` | `satisfied_by_task_id` | Auth (Metic+): confirm a criterion — flip it to satisfied. |
 | POST | `/api/bongos/done-when/:criterionId/unsatisfy` | `metic+archon` | — | Auth: flip a criterion back to unsatisfied (rare; for corrections). |
 | GET | `/api/bongos/done-when/pending-review` | `metic+archon` | — | Auth (Metic+): the criterion review queue — every criterion auto-flagged "met — pending review" (≥1 linked task, all shipped, not yet con… |

package/docs/module-api-changelog.md

@@ -1805,5 +1805,9 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.671 with no explicit bump. run 34629971417. (task 1002620)
   1.19.673 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.672 with no explicit bump. run 34632328471. (task 1002620)
+  1.19.674 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.673 with no explicit bump. run 34634515595. (task 1002620)
+  1.19.675 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.674 with no explicit bump. run 34639371461. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/dev-box/app/src/vendor/bongos-client.cjs

@@ -312,6 +312,8 @@ function createClient(opts = {}) {
       getDiscordChannelsPlan: (args) => request("GET", "/discord/channels/plan", { hasBody: false }, args),
       // POST /discord/channels/reconcile — rank: metic+archon — POST /discord/channels/reconcile
       postDiscordChannelsReconcile: (args) => request("POST", "/discord/channels/reconcile", { hasBody: true }, args),
+      // GET /discord/channels/snapshot — rank: metic+archon — GET /discord/channels/snapshot
+      getDiscordChannelsSnapshot: (args) => request("GET", "/discord/channels/snapshot", { hasBody: false }, args),
     },
     "doneWhen": {
       // PATCH /done-when/{criterionId} — rank: metic+archon — PATCH /done-when/:criterionId

package/modules/discord/discord-channels.js

@@ -178,6 +178,98 @@ function viewOverwritesEqual(a, b, ctx) {
 //   categories: [{ id, name }],
 //   channels:   [{ id, name, type, parentId, topic, overwrites:[{id,type,allow,deny}] }]
 // }
+// viewFromOverwrites — the INVERSE of resolveViewRoles + mergeViewOverwrites:
+// read a channel's real permission overwrites and say which `view` value would
+// produce them. Pure (task 1003510).
+//
+// `view: R` grants R and every rank ABOVE it, so the answer is the LOWEST rank
+// on the ladder holding an explicit VIEW allow. @everyone allowed outranks all
+// of it and means "everyone".
+//
+// Returns null for "cannot tell" — no @everyone overwrite AND no rank role
+// allowed, which is a channel the bot has never touched and which simply
+// inherits its category. Null is the honest answer there, and the caller emits
+// no `view` key so the channel inherits in the config exactly as it does in the
+// guild. Do NOT collapse null to 'everyone': that would write a claim the guild
+// never made, and a later reconcile would act on it.
+function viewFromOverwrites(overwrites, ctx) {
+  const { everyoneId, roleMap = {} } = ctx || {};
+  const has = (o, field) => (BigInt((o && o[field]) || 0) & VIEW_CHANNEL) !== 0n;
+  const byId = new Map((overwrites || []).map((o) => [String(o.id), o]));
+
+  const everyone = byId.get(String(everyoneId));
+  if (everyone && has(everyone, 'allow')) return 'everyone';
+
+  for (const rank of RANK_LADDER) {           // low -> high: first allow wins
+    const rid = roleMap[rank] ? String(roleMap[rank]) : null;
+    if (rid && has(byId.get(rid), 'allow')) return rank;
+  }
+  // @everyone explicitly DENIED but no rank allowed: restricted to nobody we
+  // manage. resolveViewRoles fails safe to archon, so mirror that rather than
+  // inventing wider access.
+  if (everyone && has(everyone, 'deny')) return 'archon';
+  return null;
+}
+
+// configFromSnapshot — turn a LIVE guild snapshot into channels.json shape, so
+// the file can be seeded from what the guild really is instead of from a guess
+// (task 1003510; ADR 0037 §1 calls channels.json the single source of truth, and
+// that is only true once the channels actually in the guild are written down).
+//
+// THE CORRECTNESS PROPERTY, and the reason this is worth having as a pure
+// function: feeding the result straight back to planChannelReconcile against the
+// SAME snapshot must produce ZERO ops. If any field is inverted wrongly — a view,
+// a topic, a name, a parent — the planner emits an op for it, so the round trip
+// is a total test of this function rather than a field-by-field restatement of it.
+//
+// That zero-ops guarantee holds for a guild the bot has already reconciled. On a
+// guild it has NOT, a channel may carry no @everyone overwrite at all; the config
+// then omits its `view`, it inherits the category, and the planner may rightly
+// emit an edit. That difference is real and belongs in the operator's review, not
+// hidden here — which is why `warnings` is returned rather than swallowed.
+//
+// Channels with no parent category are REPORTED, never invented: channels.json
+// can only express a channel nested in a category, and the omitted-is-untouched
+// rule (see the file's own header) makes leaving them out the safe default.
+function configFromSnapshot(snapshot, ctx) {
+  const warnings = [];
+  const cats = (snapshot.categories || []).map((c) => ({
+    id: String(c.id),
+    name: c.name,
+    view: viewFromOverwrites(c.overwrites, ctx),
+    channels: [],
+  }));
+  const byId = new Map(cats.map((c) => [c.id, c]));
+
+  for (const ch of snapshot.channels || []) {
+    if (ch.type !== 0) continue;                       // text channels only, as snapshotFromGuild already filters
+    const parent = ch.parentId ? byId.get(String(ch.parentId)) : null;
+    if (!parent) {
+      warnings.push(`channel "${ch.name}" has no category — channels.json cannot express an uncategorised channel, so it is omitted (and therefore left untouched).`);
+      continue;
+    }
+    const view = viewFromOverwrites(ch.overwrites, ctx);
+    const entry = { key: slugify(ch.name), name: ch.name, topic: ch.topic || '' };
+    // Emit `view` only when it DIFFERS from the category's — the planner reads
+    // `ch.view || cat.view`, so an identical value is noise that drifts later.
+    if (view !== null && view !== parent.view) entry.view = view;
+    if (view === null) {
+      warnings.push(`channel "${ch.name}" carries no VIEW overwrite the bot manages — it inherits category "${parent.name}"; confirm that is intended before applying.`);
+    }
+    parent.channels.push(entry);
+  }
+
+  const categories = cats.map((c) => ({
+    name: c.name,
+    view: c.view === null ? 'everyone' : c.view,
+    channels: c.channels,
+  }));
+  for (const c of cats) {
+    if (c.view === null) warnings.push(`category "${c.name}" carries no VIEW overwrite the bot manages — recorded as "everyone"; confirm before applying.`);
+  }
+  return { config: { categories }, warnings };
+}
+
 // Ops never include deletions. Categories are planned before their channels so
 // the apply step can resolve a freshly-created parent id.
 function planChannelReconcile(snapshot, config, ctx) {
@@ -323,6 +415,18 @@ function computePlan(deps = realDeps) {
   return { ok: true, ops, warnings, guildId: String(guild.id) };
 }
 
+// computeSnapshotConfig — what channels.json WOULD say if it described the guild
+// as it is right now (task 1003510). Read-only: it touches Discord only through
+// the same getGuild() the planner uses, and writes nothing anywhere.
+function computeSnapshotConfig(deps = realDeps) {
+  const guild = deps.getGuild();
+  if (!guild) return { ok: false, reason: 'no_guild', config: null, warnings: [] };
+  const roleMap = deps.loadRoleMap();
+  const ctx = { everyoneId: String(guild.id), roleMap, botId: botIdFromGuild(guild) };
+  const { config, warnings } = configFromSnapshot(snapshotFromGuild(guild), ctx);
+  return { ok: true, config, warnings, guildId: String(guild.id) };
+}
+
 // Apply the plan to Discord. Best-effort, never throws. Returns a summary.
 // Categories are created first so child channels can resolve their parent id.
 async function reconcileChannels(deps = realDeps) {
@@ -398,6 +502,8 @@ module.exports = {
   // pure (tested)
   slugify,
   resolveViewRoles,
+  viewFromOverwrites,
+  configFromSnapshot,
   mergeViewOverwrites,
   viewOverwritesEqual,
   planChannelReconcile,
@@ -405,6 +511,7 @@ module.exports = {
   loadConfig,
   snapshotFromGuild,
   computePlan,
+  computeSnapshotConfig,
   reconcileChannels,
   CONFIG_PATH,
   VIEW_CHANNEL,