@bongos/core 1.19.803 → 1.19.805

package/scripts/gds/seed-bv1-community-tasks.js

@@ -20,7 +20,7 @@ const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
 
 async function api(method, path, body, _tries = 0) {
   await sleep(1500);
-  const r = await apiCall(method, `/api/gds${path}`, body);
+  const r = await apiCall(method, `/api/bongos${path}`, body);
   if (r.status === 429 && _tries < 8) {
     const wait = (r.data?.error?.details?.retry_after_seconds || 30) + 1;
     console.log(`  …rate-limited, waiting ${wait}s`);

package/scripts/gds/seed-bv1-privacy-invites-tasks.js

@@ -24,7 +24,7 @@ const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
 // Throttled + 429-aware wrapper (same shape as the sibling seeders).
 async function api(method, path, body, _tries = 0) {
   await sleep(1500);
-  const r = await apiCall(method, `/api/gds${path}`, body);
+  const r = await apiCall(method, `/api/bongos${path}`, body);
   if (r.status === 429 && _tries < 8) {
     const wait = (r.data?.error?.details?.retry_after_seconds || 30) + 1;
     console.log(`  …rate-limited, waiting ${wait}s`);

package/scripts/gds/seed-bv1-profile-page-tasks.js

@@ -33,7 +33,7 @@ const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
 // is exactly the shape the per-IP limiter is there to catch.
 async function api(method, path, body, _tries = 0) {
   await sleep(400);
-  const r = await apiCall(method, `/api/gds${path}`, body);
+  const r = await apiCall(method, `/api/bongos${path}`, body);
   if (r.status === 429 && _tries < 8) {
     const wait = (r.data?.error?.details?.retry_after_seconds || 30) + 1;
     console.log(`  …rate-limited, waiting ${wait}s`);

package/scripts/gds/seed-bv1-profiles-tasks.js

@@ -24,7 +24,7 @@ const H = { Authorization: `Bearer ${TOKEN}`, 'Content-Type': 'application/json'
 const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
 async function api(method, path, body, _tries = 0) {
   await sleep(400); // base throttle to stay under the per-IP rate limit
-  const res = await fetch(`${BASE}/api/gds${path}`, {
+  const res = await fetch(`${BASE}/api/bongos${path}`, {
     method, headers: H, body: body ? JSON.stringify(body) : undefined,
   });
   const text = await res.text();

package/scripts/gds/seed-bv1-r01-delta-tasks.js

@@ -29,7 +29,7 @@ const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
 // Throttled + 429-aware wrapper (same shape as the sibling seeders).
 async function api(method, path, body, _tries = 0) {
   await sleep(1500);
-  const r = await apiCall(method, `/api/gds${path}`, body);
+  const r = await apiCall(method, `/api/bongos${path}`, body);
   if (r.status === 429 && _tries < 8) {
     const wait = (r.data?.error?.details?.retry_after_seconds || 30) + 1;
     console.log(`  …rate-limited, waiting ${wait}s`);

package/scripts/gds/seed-gds-v4-tasks.js

@@ -162,7 +162,7 @@ Nightly sweep (systemd timer modeled on gds-db-backup) indexing: tasks.descripti
   },
   {
     ref: 'R11',
-    title: 'POST /api/gds/search — lexical hybrid (FTS + trgm) fused with RRF',
+    title: 'POST /api/bongos/search — lexical hybrid (FTS + trgm) fused with RRF',
     description: `**Criterion:** one-call-recall. Cross-ref: V4.R06.
 
 requireBuilder-gated search endpoint: websearch_to_tsquery leg + pg_trgm leg fused with Reciprocal Rank Fusion in one SQL CTE; k, filters (source_type, track), source citations in results. Per-builder read limiter (memory.js pattern — the global limiter doesn't cap GETs). Add to smoke-gds.js CHECKS (401 unauth).
@@ -202,7 +202,7 @@ The #1 tool-error class (84 hits): edits/git ops landing in the wrong tree. Add
     title: 'JSON 404 + hint on API-shaped paths; promote-hint on TASK_NOT_READY 409',
     description: `**Criterion:** machine-room-ergonomics.
 
-Two self-describing-error fixes: (1) requests to API-shaped paths (/tasks, /gds/*, /api/*) that miss the /api/gds mount get a JSON 404 with a hint instead of the HTML island page (which today causes a secondary JSON.parse fault); (2) the TASK_NOT_READY 409 names the promote endpoint.
+Two self-describing-error fixes: (1) requests to API-shaped paths (/tasks, /gds/*, /api/*) that miss the /api/bongos mount get a JSON 404 with a hint instead of the HTML island page (which today causes a secondary JSON.parse fault); (2) the TASK_NOT_READY 409 names the promote endpoint.
 
 **Done when:** both error shapes verified by tests; smoke unaffected.`,
     kind: 'feature', discipline: 'engineering', priority: 4,
@@ -238,7 +238,7 @@ tests/grader_panel.mjs fails 2/7 on a clean baseline (noted in the 2026-06-08 se
     title: '/recall skill — one-call project-knowledge search from any session',
     description: `**Criterion:** one-call-recall. Cross-refs: V4.R11, V4.R12.
 
-New slash skill wrapping POST /api/gds/search via the cross-platform scripts/gds/api.js: query in, cited sources out, with guidance to follow up by reading the real source. Works identically on laptop, dev box, and browser-only sessions.
+New slash skill wrapping POST /api/bongos/search via the cross-platform scripts/gds/api.js: query in, cited sources out, with guidance to follow up by reading the real source. Works identically on laptop, dev box, and browser-only sessions.
 
 **Done when:** skill shipped + documented in CLAUDE.md quick-nav; round-trip verified against prod.`,
     kind: 'feature', discipline: 'engineering', priority: 4,

package/scripts/gds/seed-medusa-tasks.js

@@ -56,7 +56,7 @@ Locks: the exact GDS/game boundary; the per-instance branding-contract schema (c
 
 A Medusa-only boot (sibling to src/preview-server.js) that builds the Express app, mounts buildGdsRouter() + public-builders/ + public-status/, and constructs NO Colyseus game server and NO Phaser/tile static mounts. The existing game boot (server.js) stays untouched.
 
-**Done when:** a smoke test boots Medusa, reaches /api/gds/health + the hall, and asserts no game route/asset is reachable in the process.`,
+**Done when:** a smoke test boots Medusa, reaches /api/bongos/health + the hall, and asserts no game route/asset is reachable in the process.`,
     kind: 'infra', discipline: 'engineer', priority: 5,
     est_minutes: 240, manual_degree: 2, credits_reward: 40,
     touches: ['server.js', 'src/'], criteria: ['C8'], deps: ['R50'],

package/scripts/gds/seed-productization-tasks.js

@@ -11,7 +11,7 @@
 // clean" -> C32.
 //
 // Shape mirrors seed-bongos-tasks.js exactly:
-//   - POST /api/gds/tasks   { version_id:'BONGOS-V1', criterion_ids:['C32'], ... }
+//   - POST /api/bongos/tasks   { version_id:'BONGOS-V1', criterion_ids:['C32'], ... }
 //   - idempotent on source_ref (skips already-created)
 //   - display BV1.R## assigned dynamically after the current max (decorative)
 //

package/scripts/gds/seed-project-admin-console-tasks.js

@@ -15,7 +15,7 @@ const SRC = 'planning-session';
 const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
 async function api(method, path, body, _tries = 0) {
   await sleep(400); // base throttle to stay under the per-IP rate limit
-  const r = await apiCall(method, `/api/gds${path}`, body);
+  const r = await apiCall(method, `/api/bongos${path}`, body);
   const json = r.data || {};
   if (r.status === 429 && _tries < 8) {
     const wait = ((json.error && json.error.details && json.error.details.retry_after_seconds) || 30) + 1;

package/scripts/gds/seed-provisioning-tasks.js

@@ -62,7 +62,7 @@ async function post(path, body) {
       est_minutes: t.est, goal_id: GOAL,
       source: 'planning', source_ref: `BONGOS-V1-prov-${t.ref}`,
     };
-    const { status, json } = await post('/api/gds/tasks', body);
+    const { status, json } = await post('/api/bongos/tasks', body);
     const id = json.id || (json.task && json.task.id);
     if (!id) { console.log(`  ${t.ref}: CREATE FAILED — ${status} ${JSON.stringify(json).slice(0, 160)}`); continue; }
     idByRef[t.ref] = id;
@@ -75,7 +75,7 @@ async function post(path, body) {
     if (!id) continue;
     const allDeps = [...t.deps.map((d) => idByRef[d]).filter(Boolean), ...t.extDeps];
     for (const depId of allDeps) {
-      const { status, json } = await post(`/api/gds/tasks/${id}/dependencies`, { depends_on_task_id: depId });
+      const { status, json } = await post(`/api/bongos/tasks/${id}/dependencies`, { depends_on_task_id: depId });
       console.log(`  ${t.ref}(${id}) depends on ${depId} -> ${status === 200 || status === 201 ? 'ok' : (json.error || status)}`);
     }
   }

package/scripts/gds/seed-strict-versioning-tasks.js

@@ -244,7 +244,7 @@ async function main() {
       source_ref: `${PREFIX}-${t.ref}`,
       criterion_ids: t.criteria,
     };
-    const r = await throttledWrite('POST', '/api/gds/tasks', body);
+    const r = await throttledWrite('POST', '/api/bongos/tasks', body);
     const id = r.json?.task?.id;
     if (!id) throw new Error(`No task id back for ${t.ref} (status ${r.status}): ${JSON.stringify(r.json)}`);
     ids[t.ref] = id;
@@ -256,7 +256,7 @@ async function main() {
   for (const t of TASKS) {
     for (const dep of t.deps) {
       if (!ids[dep]) throw new Error(`${t.ref} depends on unknown ref ${dep}`);
-      const r = await throttledWrite('POST', `/api/gds/tasks/${ids[t.ref]}/dependencies`, { depends_on_task_id: ids[dep] });
+      const r = await throttledWrite('POST', `/api/bongos/tasks/${ids[t.ref]}/dependencies`, { depends_on_task_id: ids[dep] });
       console.log(`  ${t.ref} depends on ${dep} (${ids[dep]}) ${r.status}`);
     }
   }
@@ -265,7 +265,7 @@ async function main() {
   await verifySeedCriteriaLinks({
     goalId: GOAL,
     expectedCounts: expectedCriterionCounts(planned),
-    fetchGoal: (goalId) => api('GET', `/api/gds/goals/${goalId}`),
+    fetchGoal: (goalId) => api('GET', `/api/bongos/goals/${goalId}`),
   });
 
   console.log('\nSeed complete. Task ids:');

package/scripts/gds/seed-v2-world-tasks.js

@@ -187,8 +187,8 @@ const TASKS = [
     credits_reward: 40, module_key: 'game', requires_rank: 'metic',
     criterion_ids: ['map-editor'], depends_on_refs: ['ED2', 'E4'] },
 
-  { ref: 'ED4', version: 'V3', title: 'V3.W06 — save: rank-gated POST /api/gds/maps/:id validated by mapFormat',
-    description: 'Save maps back to the game: rank-gated `POST /api/gds/maps/:id`, validated by `mapFormat`, persisted per the S3 (V3.W02) save-model spike. Depends on ED3 (V3.W05) + S3 (V3.W02). Criterion map-editor.',
+  { ref: 'ED4', version: 'V3', title: 'V3.W06 — save: rank-gated POST /api/bongos/maps/:id validated by mapFormat',
+    description: 'Save maps back to the game: rank-gated `POST /api/bongos/maps/:id`, validated by `mapFormat`, persisted per the S3 (V3.W02) save-model spike. Depends on ED3 (V3.W05) + S3 (V3.W02). Criterion map-editor.',
     kind: 'feature', discipline: 'engineer', priority: 2, est_minutes: 180, manual_degree: 3,
     credits_reward: 30, module_key: 'game', requires_rank: 'metic',
     criterion_ids: ['map-editor'], depends_on_refs: ['ED3', 'S3'] },

package/scripts/gds/seed-verify-criteria.js

@@ -5,7 +5,7 @@
 // success; only a manual GET /goals rollup caught it, after the fact). A seed
 // script tallies the criterion_ids it actually POSTed per task into its own
 // plan, then calls verifySeedCriteriaLinks() as its LAST step to fetch
-// GET /api/gds/goals/<id> and diff `criteria[].linked_tasks` against that
+// GET /api/bongos/goals/<id> and diff `criteria[].linked_tasks` against that
 // plan — loud and non-zero-exit on any mismatch, zero included.
 //
 // Transport-agnostic on purpose: seed scripts don't share one HTTP client

package/scripts/gds/session-digest.js

@@ -2,7 +2,7 @@
 // scripts/gds/session-digest.js — BFG 6D session capture on the SessionEnd seam
 // (ADR 0027; follow-up to #608/#617, idea #178).
 //
-// Uploads the FULL session digest to the BFG corpus (POST /api/gds/sessions)
+// Uploads the FULL session digest to the BFG corpus (POST /api/bongos/sessions)
 // when a Claude Code session ENDS. Wired as a SessionEnd hook in
 // .claude/settings.json (sibling to session-cost.js), which pipes
 // { session_id, transcript_path, cwd, reason } as JSON on stdin.

package/scripts/gds/session.js

@@ -11,8 +11,8 @@
 //   --all          show the long-tail (everything else that's claimable)
 //   --json         machine-readable output
 //
-// Calls POST /api/gds/session/optimize when available; falls back to
-// GET /api/gds/tasks/claimable + a deterministic local greedy when the
+// Calls POST /api/bongos/session/optimize when available; falls back to
+// GET /api/bongos/tasks/claimable + a deterministic local greedy when the
 // endpoint isn't deployed yet (P1 #44 ships it in parallel; P2 #45 the
 // batch-claim endpoint is also not in flight). The fallback uses the same
 // scoring rules so the recommendation set is stable either way.

package/scripts/gds/setup.js

@@ -286,7 +286,7 @@ const { isDeviceFlowDisabled, deviceFlowFallbackLines } = require('./device-flow
 async function redeemCliToken(token) {
   let res;
   try {
-    res = await fetch(`${API_BASE}/api/gds/me`, { headers: { Authorization: `Bearer ${token}` } });
+    res = await fetch(`${API_BASE}/api/bongos/me`, { headers: { Authorization: `Bearer ${token}` } });
   } catch (err) {
     console.error(`Could not reach ${API_BASE}: ${err.message}`);
     return { ok: false, status: 0 };
@@ -392,7 +392,7 @@ async function main() {
     console.log('');
     const preExisting = await loadSession();
     if (preExisting && preExisting.token && !forceFlag) {
-      dryRunStep(`Would verify existing session at ${SESSION_PATH} via GET /api/gds/me.`);
+      dryRunStep(`Would verify existing session at ${SESSION_PATH} via GET /api/bongos/me.`);
       dryRunStep('If the token is valid: on an interactive shell, would ASK whether to continue as that builder or set up as a different one ([1] continue / [2] sign in again, replacing the saved session). Non-interactive shells keep the existing session. (--force skips the question and re-auths directly.)');
       dryRunStep('If the token is rejected (401), would fall through to the Device Flow.');
     } else if (preExisting && forceFlag) {
@@ -400,17 +400,17 @@ async function main() {
     } else {
       dryRunStep(`No existing session at ${SESSION_PATH}; would proceed straight to Device Flow.`);
     }
-    dryRunStep('Would POST /api/gds/auth/device/start to get a user_code + verification_uri from GitHub.');
+    dryRunStep('Would POST /api/bongos/auth/device/start to get a user_code + verification_uri from GitHub.');
     dryRunStep('If GitHub refuses with device_flow_disabled (a one-click App whose checkbox is unticked, task 1003051): would print the web sign-in guidance (hall Settings → CLI Access) and prompt for a pasted CLI token instead of dead-ending.');
-    dryRunStep('Would print the verification_uri and user_code, then poll /api/gds/auth/device/poll every few seconds until the user approves or the code expires.');
+    dryRunStep('Would print the verification_uri and user_code, then poll /api/bongos/auth/device/poll every few seconds until the user approves or the code expires.');
     dryRunStep(`On approval, would write the bearer token + builder profile to ${SESSION_PATH} (chmod 600).`);
     if (SKIP_KEYS) {
       dryRunStep('Would skip the Gemini-key prompt (--skip-keys set).');
     } else {
       dryRunStep(`Would prompt for a per-builder GOOGLE_AI_STUDIO_KEY on TTY shells and store it as gemini_api_key in ${SESSION_PATH} (mode 600). Used by modules/art-pipeline/pipeline/gen_api.py for per-builder cost attribution.`);
     }
-    dryRunStep('Would read ~/.claude.json oauthAccount and, on a TTY, prompt to confirm the Anthropic email; on a match would POST /api/gds/me/anthropic-link and store anthropic_user_id in the session (kept as cosmetic attribution; the identity pin was removed — task 1039 / idea 258). On mismatch would REFUSE to link.');
-    dryRunStep('Would prompt for preferred disciplines (creative / engineering / both / skip) and PATCH /api/gds/me/disciplines on TTY shells.');
+    dryRunStep('Would read ~/.claude.json oauthAccount and, on a TTY, prompt to confirm the Anthropic email; on a match would POST /api/bongos/me/anthropic-link and store anthropic_user_id in the session (kept as cosmetic attribution; the identity pin was removed — task 1039 / idea 258). On mismatch would REFUSE to link.');
+    dryRunStep('Would prompt for preferred disciplines (creative / engineering / both / skip) and PATCH /api/bongos/me/disciplines on TTY shells.');
     dryRunStep(`Would prompt for onboarding-friction consent (Y/n) and record the decision to ${onboardingConfig.CONSENT_PATH} on TTY shells.`);
     dryRunStep('Would print "Authenticated as <github_login>" and exit 0.');
     process.exit(0);
@@ -503,7 +503,7 @@ async function main() {
   // GitHub device flow below (auth.idp unset) is untouched — the self-hosted default.
   let idpCfg = null;
   try {
-    const m = await fetch(`${API_BASE}/api/gds/instance`);
+    const m = await fetch(`${API_BASE}/api/bongos/instance`);
     const mj = m.ok ? await m.json() : null;
     idpCfg = (mj && mj.auth && mj.auth.idp) || null;
   } catch (_) { /* manifest unreachable → fall through to the direct flow */ }

package/scripts/gds/ship-flow.js

@@ -563,7 +563,7 @@ async function shipMain() {
         console.error('  grade fails, fix its findings and re-run (unlimited, no attempt cap):');
         console.error(`      node scripts/gds/ship.js ${taskId} --regrade`);
         console.error(`  If the grade genuinely cannot pass, ask a builder whose role holds`);
-        console.error(`  task.confirm.grade_bypass${floorNote} to POST /api/gds/tasks/${taskId}/confirm.`);
+        console.error(`  task.confirm.grade_bypass${floorNote} to POST /api/bongos/tasks/${taskId}/confirm.`);
         process.exit(1);
       }
       console.error(`manual-confirm failed: ${apiErrorLine(confirm.data, confirm.status)}`);
@@ -601,7 +601,7 @@ async function shipMain() {
       console.error('Task stays at completed. Manual options:');
       console.error(`  - Re-run /builder-ship ${taskId} to try grading again, or`);
       console.error(`  - node scripts/gds/ship.js ${taskId} --regrade after fixing findings, or`);
-      console.error(`  - POST /api/gds/tasks/${taskId}/confirm to manual-confirm (last resort —`);
+      console.error(`  - POST /api/bongos/tasks/${taskId}/confirm to manual-confirm (last resort —`);
       console.error('    permission-gated on task.confirm.grade_bypass).');
       process.exit(1);
     }
@@ -896,7 +896,7 @@ async function regradeMain() {
           console.error('');
           console.error(`✖ Confirming without a passing grade is permission-gated: task.confirm.grade_bypass${floor ? ` (floor: ${floor})` : ''}.`);
           console.error('  This is an authorization wall, not a verdict on your work.');
-          console.error(`  Ask a builder whose role holds it to POST /api/gds/tasks/${taskId}/confirm.`);
+          console.error(`  Ask a builder whose role holds it to POST /api/bongos/tasks/${taskId}/confirm.`);
           process.exit(1);
         }
         console.error(`manual-confirm failed: ${apiErrorLine(confirm.data, confirm.status)}`);

package/scripts/gds/ship-grade-steps.js

@@ -293,7 +293,7 @@ function formatGradeOutcome(g, taskId, cliFinding = null) {
     out.push('When the grader is reachable again, re-grade:');
     out.push(`  node scripts/gds/ship.js ${taskId} --regrade`);
     out.push('Or land it now via manual-confirm:');
-    out.push(`  curl -X POST -H "Authorization: Bearer <token>" ${resolveInstanceBase() || '<instance-origin>'}/api/gds/tasks/${taskId}/confirm`);
+    out.push(`  curl -X POST -H "Authorization: Bearer <token>" ${resolveInstanceBase() || '<instance-origin>'}/api/bongos/tasks/${taskId}/confirm`);
     return out.join('\n');
   }
 
@@ -350,7 +350,7 @@ function formatGradeOutcome(g, taskId, cliFinding = null) {
     out.push('When the grader is healthy again, re-grade:');
     out.push(`  node scripts/gds/ship.js ${taskId} --regrade`);
     out.push('Or land it now via manual-confirm:');
-    out.push(`  curl -X POST -H "Authorization: Bearer <token>" ${resolveInstanceBase() || '<instance-origin>'}/api/gds/tasks/${taskId}/confirm`);
+    out.push(`  curl -X POST -H "Authorization: Bearer <token>" ${resolveInstanceBase() || '<instance-origin>'}/api/bongos/tasks/${taskId}/confirm`);
     return out.join('\n');
   }
 
@@ -377,7 +377,7 @@ function formatGradeOutcome(g, taskId, cliFinding = null) {
     out.push('Grade failed — task stays at completed. Fix the issues above, commit, then re-grade:');
     out.push(`  node scripts/gds/ship.js ${taskId} --regrade`);
     out.push('Last resort (only if the grade was wrong):');
-    out.push(`  curl -X POST -H "Authorization: Bearer <token>" ${resolveInstanceBase() || '<instance-origin>'}/api/gds/tasks/${taskId}/confirm`);
+    out.push(`  curl -X POST -H "Authorization: Bearer <token>" ${resolveInstanceBase() || '<instance-origin>'}/api/bongos/tasks/${taskId}/confirm`);
   }
   return out.join('\n');
 }

package/scripts/gds/ship-memory-sync.js

@@ -17,7 +17,7 @@ const { REPO_ROOT } = require('./ship-state.js');
 // ---------- Memory sync-on-ship (Task #274 / V3.R55) ----------
 //
 // After a successful ship, push the builder's local Claude Code memory dir to
-// the server (POST /api/gds/memory/sync), so a builder's MEMORY.md +
+// the server (POST /api/bongos/memory/sync), so a builder's MEMORY.md +
 // feedback_*.md follow them across machines and survive a dead laptop. This is
 // the push half of ADR 0024's cloneable-memory chain; #275 wires the pull side.
 //

package/scripts/gds/ship-session-upload.js

@@ -18,7 +18,7 @@ const { REPO_ROOT } = require('./ship-state.js');
 // ---------- Session upload-on-ship (6D.1 / ADR 0027) ----------
 //
 // After a successful ship, upload a COMPACT, secret-scrubbed digest of this
-// Claude Code session (POST /api/gds/sessions), so the BFG (a local Claude Code
+// Claude Code session (POST /api/bongos/sessions), so the BFG (a local Claude Code
 // routine — 6D.3) can later search the corpus (6D.2) and deep-dive the wasteful
 // sessions. We never upload raw transcript CONTENT — only per-turn metadata
 // (role, tool name, error flag, token usage, length) + short scrubbed snippets
@@ -277,14 +277,14 @@ async function uploadSessionOnShip(taskId) {
       recordUploadSkip(taskId, {
         code: 'session_invalid',
         reason:
-          'POST /api/gds/sessions returned 401 — the GDS session token is missing or invalid, so the ' +
+          'POST /api/bongos/sessions returned 401 — the GDS session token is missing or invalid, so the ' +
           'digest was rejected. Re-auth with /builder-reauth. This ship will NOT appear in the BFG session corpus.',
       });
     } else {
       recordUploadSkip(taskId, {
         code: `http_${r.status}`,
         reason:
-          `POST /api/gds/sessions returned ${r.status}${r.data && r.data.error ? ` (${apiErrorLine(r.data)})` : ''} — ` +
+          `POST /api/bongos/sessions returned ${r.status}${r.data && r.data.error ? ` (${apiErrorLine(r.data)})` : ''} — ` +
           'the API rejected or could not store the digest. This ship will NOT appear in the BFG session corpus.',
       });
     }

package/scripts/gds/smoke-batch-claim.sh

@@ -1,7 +1,7 @@
 #!/usr/bin/env bash
 # GDS batch-claim smoke test. Renamed from PMS in V3.R01.
 #
-# Exercises POST /api/gds/claims/batch:
+# Exercises POST /api/bongos/claims/batch:
 #   Case A: 2 ready tasks, disjoint touches → 201, 2 claim rows.
 #   Case B: 2 ready tasks, OVERLAPPING touches → 409, BATCH_TOUCHES_CONFLICT,
 #           no claims persisted (both tasks stay 'ready').
@@ -70,7 +70,7 @@ print(json.dumps({
   'source': 'smoke',
   'source_ref': '${ts}-${suffix}'
 }))")
-  parse_call "$(call POST /api/gds/tasks "${body}")"
+  parse_call "$(call POST /api/bongos/tasks "${body}")"
   python3 -c "import json,sys; print(json.loads('''${PAYLOAD}''')['task']['id'])"
 }
 
@@ -83,7 +83,7 @@ cleanup() {
   echo "--- cleanup ---"
   for cid in "${CREATED_CLAIMS[@]:-}"; do
     [[ -z "${cid}" ]] && continue
-    call POST "/api/gds/claims/${cid}/resolve" \
+    call POST "/api/bongos/claims/${cid}/resolve" \
       '{"outcome":"abandoned","notes_md":"smoke cleanup"}' >/dev/null || true
   done
   for tid in "${CREATED_TASKS[@]:-}"; do
@@ -94,7 +94,7 @@ cleanup() {
     # failure. Every run since has leaked its fixtures as status='ready'
     # (the 2026-05-11 batch, then 1001920-1001925 from 2026-07-03). The real
     # endpoint is POST /tasks/:id/abandon {"reason": ...}.
-    if ! call POST "/api/gds/tasks/${tid}/abandon" \
+    if ! call POST "/api/bongos/tasks/${tid}/abandon" \
          '{"reason":"smoke cleanup (scripts/gds/smoke-batch-claim.sh)"}' >/dev/null 2>&1; then
       leaked+=("${tid}")
     fi
@@ -127,7 +127,7 @@ CREATED_TASKS+=("${TA1}" "${TA2}")
 echo "  created tasks ${TA1}, ${TA2}"
 
 BODY_A=$(python3 -c "import json; print(json.dumps({'task_ids':[${TA1},${TA2}],'worktree_name':'__smoke_batch__'}))")
-parse_call "$(call POST /api/gds/claims/batch "${BODY_A}")"
+parse_call "$(call POST /api/bongos/claims/batch "${BODY_A}")"
 if [[ "${CODE}" == "201" ]]; then
   N=$(python3 -c "import json,sys; print(len(json.loads('''${PAYLOAD}''')['claims']))")
   if [[ "${N}" == "2" ]]; then
@@ -154,7 +154,7 @@ CREATED_TASKS+=("${TB1}" "${TB2}")
 echo "  created tasks ${TB1}, ${TB2} (both touch __smoke__/batch/${ts}/shared)"
 
 BODY_B=$(python3 -c "import json; print(json.dumps({'task_ids':[${TB1},${TB2}]}))")
-parse_call "$(call POST /api/gds/claims/batch "${BODY_B}")"
+parse_call "$(call POST /api/bongos/claims/batch "${BODY_B}")"
 if [[ "${CODE}" == "409" ]]; then
   REASON=$(python3 -c "
 import json,sys
@@ -170,7 +170,7 @@ print(','.join(reasons))
   fi
   # Confirm neither task got claimed (status still 'ready').
   for tid in "${TB1}" "${TB2}"; do
-    parse_call "$(call GET "/api/gds/tasks/${tid}")"
+    parse_call "$(call GET "/api/bongos/tasks/${tid}")"
     S=$(python3 -c "import json,sys; print(json.loads('''${PAYLOAD}''')['task']['status'])")
     if [[ "${S}" == "ready" ]]; then
       ok "B: task #${tid} stayed 'ready' (rollback worked)"
@@ -191,7 +191,7 @@ CREATED_TASKS+=("${TC1}" "${TC2}")
 echo "  created tasks ${TC1} (will pre-claim), ${TC2} (still ready)"
 
 # Pre-claim TC1 via the single-claim path so it's already 'active'.
-parse_call "$(call POST /api/gds/claims "{\"task_id\":${TC1}}")"
+parse_call "$(call POST /api/bongos/claims "{\"task_id\":${TC1}}")"
 if [[ "${CODE}" == "201" ]]; then
   PRE_CLAIM_ID=$(python3 -c "import json,sys; print(json.loads('''${PAYLOAD}''')['claim']['id'])")
   CREATED_CLAIMS+=("${PRE_CLAIM_ID}")
@@ -201,7 +201,7 @@ else
 fi
 
 BODY_C=$(python3 -c "import json; print(json.dumps({'task_ids':[${TC1},${TC2}]}))")
-parse_call "$(call POST /api/gds/claims/batch "${BODY_C}")"
+parse_call "$(call POST /api/bongos/claims/batch "${BODY_C}")"
 if [[ "${CODE}" == "409" ]]; then
   ENUM=$(python3 -c "
 import json,sys
@@ -217,7 +217,7 @@ print(','.join(str(i) for i in ids))
     bad "C: 409 but failures[] missing #${TC1} (got: ${ENUM})"
   fi
   # Confirm TC2 stayed 'ready' (no partial commit).
-  parse_call "$(call GET "/api/gds/tasks/${TC2}")"
+  parse_call "$(call GET "/api/bongos/tasks/${TC2}")"
   S=$(python3 -c "import json,sys; print(json.loads('''${PAYLOAD}''')['task']['status'])")
   if [[ "${S}" == "ready" ]]; then
     ok "C: task #${TC2} stayed 'ready' (no partial commit)"

package/scripts/gds/smoke-batch-release.sh

@@ -1,13 +1,13 @@
 #!/usr/bin/env bash
 # GDS batch-release + dry-run-validate smoke test (task 1758).
 #
-# Exercises POST /api/gds/claims/batch/release:
+# Exercises POST /api/bongos/claims/batch/release:
 #   Case A: 2 own active claims → 200, both in released[], both tasks 'ready'.
 #   Case B: 1 own active claim + 1 bogus claim id → 200 (NOT all-or-nothing —
 #           the batch has no cross-claim invariant), the good one released,
 #           the bad one enumerated in failures[] with CLAIM_NOT_FOUND.
 #
-# Exercises POST /api/gds/claims/batch/validate:
+# Exercises POST /api/bongos/claims/batch/validate:
 #   Case C: 2 ready tasks, disjoint touches → parallel_safe:true, both valid.
 #   Case D: 2 ready tasks, OVERLAPPING touches → parallel_safe:false, both
 #           marked invalid (BATCH_TOUCHES_CONFLICT) — and, since this is a
@@ -76,7 +76,7 @@ print(json.dumps({
   'source': 'smoke',
   'source_ref': '${ts}-${suffix}'
 }))")
-  parse_call "$(call POST /api/gds/tasks "${body}")"
+  parse_call "$(call POST /api/bongos/tasks "${body}")"
   python3 -c "import json,sys; print(json.loads('''${PAYLOAD}''')['task']['id'])"
 }
 
@@ -90,7 +90,7 @@ claim_task() {
   # can hold as many of these as it needs for fixture setup (NULL sessions are
   # explicitly excluded from the uniq_active_claim_per_session index).
   local tid="$1"
-  parse_call "$(call POST /api/gds/claims/batch "{\"task_ids\":[${tid}],\"bind_session\":false}")"
+  parse_call "$(call POST /api/bongos/claims/batch "{\"task_ids\":[${tid}],\"bind_session\":false}")"
   python3 -c "import json,sys; print(json.loads('''${PAYLOAD}''')['claims'][0]['id'])"
 }
 
@@ -104,7 +104,7 @@ cleanup() {
   echo "--- cleanup ---"
   for cid in "${CREATED_CLAIMS[@]:-}"; do
     [[ -z "${cid}" ]] && continue
-    call POST "/api/gds/claims/${cid}/resolve" \
+    call POST "/api/bongos/claims/${cid}/resolve" \
       '{"outcome":"abandoned","notes_md":"smoke cleanup"}' >/dev/null || true
   done
   for tid in "${CREATED_TASKS[@]:-}"; do
@@ -112,7 +112,7 @@ cleanup() {
     # task 1002856: same bug as smoke-batch-claim.sh — /tasks/:id/promote is the
     # backlog->ready transition and ignores a status field, so this never
     # abandoned anything and the redirect swallowed the failure.
-    if ! call POST "/api/gds/tasks/${tid}/abandon" \
+    if ! call POST "/api/bongos/tasks/${tid}/abandon" \
          '{"reason":"smoke cleanup (scripts/gds/smoke-batch-release.sh)"}' >/dev/null 2>&1; then
       leaked+=("${tid}")
     fi
@@ -145,7 +145,7 @@ CA2=$(claim_task "${TA2}"); CREATED_CLAIMS+=("${CA2}")
 echo "  claimed #${TA1}→claim ${CA1}, #${TA2}→claim ${CA2}"
 
 BODY_A=$(python3 -c "import json; print(json.dumps({'claim_ids':[${CA1},${CA2}]}))")
-parse_call "$(call POST /api/gds/claims/batch/release "${BODY_A}")"
+parse_call "$(call POST /api/bongos/claims/batch/release "${BODY_A}")"
 if [[ "${CODE}" == "200" ]]; then
   N=$(python3 -c "import json,sys; print(len(json.loads('''${PAYLOAD}''')['released']))")
   NF=$(python3 -c "import json,sys; print(len(json.loads('''${PAYLOAD}''')['failures']))")
@@ -159,7 +159,7 @@ else
   bad "A: expected 200, got ${CODE} → ${PAYLOAD}"
 fi
 for tid in "${TA1}" "${TA2}"; do
-  parse_call "$(call GET "/api/gds/tasks/${tid}")"
+  parse_call "$(call GET "/api/bongos/tasks/${tid}")"
   S=$(python3 -c "import json,sys; print(json.loads('''${PAYLOAD}''')['task']['status'])")
   if [[ "${S}" == "ready" ]]; then
     ok "A: task #${tid} back to 'ready'"
@@ -179,7 +179,7 @@ BOGUS_CLAIM_ID=999999999
 echo "  claimed #${TB1}→claim ${CB1}; bogus id ${BOGUS_CLAIM_ID}"
 
 BODY_B=$(python3 -c "import json; print(json.dumps({'claim_ids':[${CB1},${BOGUS_CLAIM_ID}]}))")
-parse_call "$(call POST /api/gds/claims/batch/release "${BODY_B}")"
+parse_call "$(call POST /api/bongos/claims/batch/release "${BODY_B}")"
 if [[ "${CODE}" == "200" ]]; then
   RELEASED_IDS=$(python3 -c "
 import json,sys
@@ -214,7 +214,7 @@ TC1=$(mk_task C1 "__smoke__/batch-release/${ts}/c1"); CREATED_TASKS+=("${TC1}")
 TC2=$(mk_task C2 "__smoke__/batch-release/${ts}/c2"); CREATED_TASKS+=("${TC2}")
 
 BODY_C=$(python3 -c "import json; print(json.dumps({'task_ids':[${TC1},${TC2}]}))")
-parse_call "$(call POST /api/gds/claims/batch/validate "${BODY_C}")"
+parse_call "$(call POST /api/bongos/claims/batch/validate "${BODY_C}")"
 if [[ "${CODE}" == "200" ]]; then
   PS=$(python3 -c "import json,sys; print(json.loads('''${PAYLOAD}''')['parallel_safe'])")
   if [[ "${PS}" == "True" ]]; then
@@ -227,7 +227,7 @@ else
 fi
 # Dry run — confirm NOTHING got claimed.
 for tid in "${TC1}" "${TC2}"; do
-  parse_call "$(call GET "/api/gds/tasks/${tid}")"
+  parse_call "$(call GET "/api/bongos/tasks/${tid}")"
   S=$(python3 -c "import json,sys; print(json.loads('''${PAYLOAD}''')['task']['status'])")
   if [[ "${S}" == "ready" ]]; then
     ok "C: task #${tid} still 'ready' (validate did not claim)"
@@ -244,7 +244,7 @@ TD2=$(mk_task D2 "__smoke__/batch-release/${ts}/shared"); CREATED_TASKS+=("${TD2
 echo "  created tasks ${TD1}, ${TD2} (both touch __smoke__/batch-release/${ts}/shared)"
 
 BODY_D=$(python3 -c "import json; print(json.dumps({'task_ids':[${TD1},${TD2}]}))")
-parse_call "$(call POST /api/gds/claims/batch/validate "${BODY_D}")"
+parse_call "$(call POST /api/bongos/claims/batch/validate "${BODY_D}")"
 if [[ "${CODE}" == "200" ]]; then
   PS=$(python3 -c "import json,sys; print(json.loads('''${PAYLOAD}''')['parallel_safe'])")
   REASONS=$(python3 -c "
@@ -265,7 +265,7 @@ else
   bad "D: expected 200, got ${CODE} → ${PAYLOAD}"
 fi
 for tid in "${TD1}" "${TD2}"; do
-  parse_call "$(call GET "/api/gds/tasks/${tid}")"
+  parse_call "$(call GET "/api/bongos/tasks/${tid}")"
   S=$(python3 -c "import json,sys; print(json.loads('''${PAYLOAD}''')['task']['status'])")
   if [[ "${S}" == "ready" ]]; then
     ok "D: task #${tid} still 'ready' (validate did not claim)"
@@ -283,7 +283,7 @@ CE1=$(claim_task "${TE1}"); CREATED_CLAIMS+=("${CE1}")
 echo "  #${TE1} pre-claimed (claim ${CE1}, now 'active'); #${TE2} stays 'ready'"
 
 BODY_E=$(python3 -c "import json; print(json.dumps({'task_ids':[${TE1},${TE2}]}))")
-parse_call "$(call POST /api/gds/claims/batch/validate "${BODY_E}")"
+parse_call "$(call POST /api/bongos/claims/batch/validate "${BODY_E}")"
 if [[ "${CODE}" == "200" ]]; then
   VALID_E1=$(python3 -c "
 import json,sys