@bongos/core 1.19.804 → 1.19.805

package/scripts/gds/box.js

@@ -197,14 +197,14 @@ async function resolveBuilder(pool, ref) {
 // 1002466). Split out of cmdProvision so GDS_BASE — and the named-tunnel block
 // baked in beside it — can be unit-tested without DB/DO/Cloudflare.
 //
-// GDS_BASE is the FULL api base (origin + /api/gds), matching what
+// GDS_BASE is the FULL api base (origin + /api/bongos), matching what
 // infra/box-report-*.sh already derive from the session file when the env var is
 // absent (`"$GDS_BASE/box/host-keys"` with no further path inserted) — every box
 // used to get this only as a fallback derived on-box; baking it explicitly closes
 // the one on-box script (box-source-fetch.sh, out-of-repo) that skips that
 // derivation entirely and hardcodes a different instance's origin instead.
 function buildBoxEnv({ apiOrigin, namedTunnel }) {
-  let env = `# /etc/otb/box.env — baked by box.js provision\nGDS_BASE=${String(apiOrigin).replace(/\/+$/, '')}/api/gds\n`;
+  let env = `# /etc/otb/box.env — baked by box.js provision\nGDS_BASE=${String(apiOrigin).replace(/\/+$/, '')}/api/bongos\n`;
   if (namedTunnel) {
     const { token, hostname, credential, previewHostname } = namedTunnel;
     env += `# named tunnel (#771/#774, ADR 0038)\nBOX_TUNNEL_TOKEN=${token}\nBOX_TERMINAL_HOSTNAME=${hostname}\nBOX_TERMINAL_CREDENTIAL=${credential}\nBOX_PREVIEW_HOSTNAME=${previewHostname}\n`;
@@ -506,16 +506,16 @@ function printWelcomePacket(login, scope) {
   console.log('own Mac/Windows (it signs you in, makes + registers your SSH key, and');
   console.log('installs the Claude Desktop connection file):');
   console.log('');
-  console.log(`  macOS/Linux:  curl -fsSL ${base}/api/gds/box/connect.sh | bash`);
-  console.log(`  Windows:      irm ${base}/api/gds/box/connect.ps1 | iex`);
-  console.log(`  (guide:       ${base}/api/gds/box/connect )`);
+  console.log(`  macOS/Linux:  curl -fsSL ${base}/api/bongos/box/connect.sh | bash`);
+  console.log(`  Windows:      irm ${base}/api/bongos/box/connect.ps1 | iex`);
+  console.log(`  (guide:       ${base}/api/bongos/box/connect )`);
   console.log('');
   console.log(`Then: restart Claude Desktop → Code → Environment → "${boxEnvLabel()} Dev Box".`);
   console.log('');
   console.log('On a Chromebook / browser-only device (no Claude Desktop)? Skip the above —');
   console.log('your box serves its own terminal in a browser tab (ADR 0038). Once it is');
   console.log('active, get the URL + password and open it:');
-  console.log(`  GET ${base}/api/gds/box/terminal   (or run /builder-box)`);
+  console.log(`  GET ${base}/api/bongos/box/terminal   (or run /builder-box)`);
   console.log('In that terminal, type `claude` to start working.');
   console.log('');
   console.log(`Your box:  ${host}  (scope=${scope})`);
@@ -532,8 +532,8 @@ async function cmdOnboard(pool, boxes, boxOnboard, ref, { apply, allowNoKeys })
     console.error(`✖ @${builder.github_login} has no registered SSH key yet — the box would have no way in.`);
     console.error('');
     console.error('  Ask the builder to connect FIRST (this registers their key), then re-run onboard:');
-    console.error(`    macOS/Linux:  curl -fsSL ${gdsBase()}/api/gds/box/connect.sh | bash`);
-    console.error(`    Windows:      irm ${gdsBase()}/api/gds/box/connect.ps1 | iex`);
+    console.error(`    macOS/Linux:  curl -fsSL ${gdsBase()}/api/bongos/box/connect.sh | bash`);
+    console.error(`    Windows:      irm ${gdsBase()}/api/bongos/box/connect.ps1 | iex`);
     console.error('');
     console.error('  (Override with --allow-no-keys to provision a keyless box anyway — you will');
     console.error('   then have to re-provision once they register a key.)');
@@ -890,7 +890,7 @@ async function cmdSweepDormant(pool, boxes, { apply }) {
 
   const sendWarning = async (box, days) => {
     const left = Math.max(CONFIG.dormantDays - days, 0);
-    const ping = postReclaimPing(`@${box.github_login} — your dev box has been parked ${days} days. Its saved disk image will be reclaimed in ${left} day(s) to save cost, and anything on it you haven't pushed will be gone with it. Wake it any time with POST /api/gds/box/ensure to keep it.`);
+    const ping = postReclaimPing(`@${box.github_login} — your dev box has been parked ${days} days. Its saved disk image will be reclaimed in ${left} day(s) to save cost, and anything on it you haven't pushed will be gone with it. Wake it any time with POST /api/bongos/box/ensure to keep it.`);
     if (!ping.ok) { pingFailed++; return false; }
     await boxes.recordEvent(pool, {
       boxId: box.id, builderId: box.builder_id, event: 'dormant_warning',
@@ -921,7 +921,7 @@ async function cmdSweepDormant(pool, boxes, { apply }) {
     try {
       await deprovisionOne(pool, boxes, needDo(), box, { actor: 'sweep:dormant' });
       reclaimed++;
-      const ping = postReclaimPing(`@${box.github_login} — your dev box was parked for ${days} days and has now been reclaimed to save cost, as warned. Queue a fresh one anytime with POST /api/gds/box/ensure (no operator needed); your memory is server-side and unaffected.`);
+      const ping = postReclaimPing(`@${box.github_login} — your dev box was parked for ${days} days and has now been reclaimed to save cost, as warned. Queue a fresh one anytime with POST /api/bongos/box/ensure (no operator needed); your memory is server-side and unaffected.`);
       if (!ping.ok) pingFailed++;
       console.log(`  ✓ reclaimed @${box.github_login} (parked ${days}d)${ping.ok ? '' : ' [chat ping failed]'}`);
     } catch (e) { errors++; await markErrorUnlessDestroyed(pool, boxes, box.builder_id, e.message); console.log(`  ✖ @${box.github_login}: ${e.message}`); }

package/scripts/gds/build-cli-package.js

@@ -131,7 +131,7 @@ const VERBS = {
   login:   { script: 'login.js',   group: 'account', summary: 'Sign in to an instance  (bongos login <url> — browser click, no paste)' },
   reauth:  { script: 'reauth.js',  group: 'account', summary: 'Refresh your session' },
   setup:   { script: 'setup.js',   group: 'account', summary: 'Finish builder setup on this instance (disciplines, consent)' },
-  box:     { script: 'api.js', prefixArgs: ['POST', '/api/gds/box/ensure'], group: 'account', summary: 'Turn on / wake your cloud dev box' },
+  box:     { script: 'api.js', prefixArgs: ['POST', '/api/bongos/box/ensure'], group: 'account', summary: 'Turn on / wake your cloud dev box' },
   shell:   { script: 'shell.js',   group: 'account', summary: 'Open a terminal on your dev box' },
   code:    { script: 'code.js',    group: 'account', summary: 'Open VS Code on your dev box over Remote-SSH' },
 
@@ -142,7 +142,7 @@ const VERBS = {
   cost:    { script: 'cost.js',    group: 'work', summary: 'Log a cost entry' },
   release: { script: 'release.js', group: 'work', summary: 'Cancel a claim — task returns to ready' },
 
-  api:     { script: 'api.js',     group: 'work', summary: 'Call any instance endpoint  (bongos api GET /api/gds/me)' },
+  api:     { script: 'api.js',     group: 'work', summary: 'Call any instance endpoint  (bongos api GET /api/bongos/me)' },
 };
 
 // Verbs that exist in the full core CLI and are deliberately absent here. The dispatcher prints
@@ -419,7 +419,7 @@ Run \`bongos help\` for the current list. In short: \`login\`, \`reauth\`, \`set
 the web hall can do is reachable from the terminal:
 
 \`\`\`sh
-bongos api GET /api/gds/me
+bongos api GET /api/bongos/me
 \`\`\`
 
 ## Writing code

package/scripts/gds/capture.js

@@ -37,7 +37,7 @@
 //   --kind     → server auto-classifies from title+body (keyword heuristics
 //                today; replaced by the real classifier when task B1 ships)
 //   --version  → most recent version with status='building' (queried from
-//                /api/gds/versions); leave null if there isn't one
+//                /api/bongos/versions); leave null if there isn't one
 //   --priority → null (set later at triage time)
 //   --goal     → capture-time ROUTING (task 1003070, R09 of goal 1000071,
 //                interview decision 4). Naming a goal turns this filing into a
@@ -396,7 +396,7 @@ async function main() {
     await offerToDevelop(idea.id);
   }
 
-  // Migration detection lives only on the server now (POST /api/gds/tasks sets
+  // Migration detection lives only on the server now (POST /api/bongos/tasks sets
   // tasks.needs_migration from the title/description on create — migration 081,
   // task 876). Ideas carry no touches[] and aren't tasks, so the old CLI-side
   // "keep 'migrations/' in touches[]" hint was removed with the sentinel it

package/scripts/gds/ci-grade.js

@@ -3,7 +3,7 @@
 // gate (#855, ADR 0042). This is the security KEYSTONE for the ci deploy mode.
 //
 // WHY it must run in CI (not "read the recorded grade"):
-//   POST /api/gds/tasks/:id/grade records the grader scores FROM THE REQUEST
+//   POST /api/bongos/tasks/:id/grade records the grader scores FROM THE REQUEST
 //   BODY — the server does not independently recompute them. In laptop mode the
 //   grader runs on the OPERATOR's trusted machine, so that's fine. In ci mode the
 //   merge trigger moves to an UNTRUSTED builder machine; a tampered local ship.js

package/scripts/gds/claim-recall.js

@@ -2,11 +2,11 @@
 // Claim-time recall hits (#956 / V4.R18 — criterion sessions-start-knowing).
 //
 // When a builder claims a task, surface the top project-knowledge sources for it
-// (POST /api/gds/search — the rank/owner-scoped lexical recall layer, ADR 0060) so
+// (POST /api/bongos/search — the rank/owner-scoped lexical recall layer, ADR 0060) so
 // the work starts already pointed at the relevant ADRs / recipes / session-logs /
 // learnings instead of re-discovering them. This is the claim-time half of the
 // recall surface the V4.R04 context pack (#942) promised; #963 added the
-// resumed-session (SessionStart) half. The two share the same /api/gds/search call
+// resumed-session (SessionStart) half. The two share the same /api/bongos/search call
 // and the same title-cleaning, so a session sees the same knowledge whether it
 // claims fresh or resumes.
 //

package/scripts/gds/cli-lib.js

@@ -810,7 +810,7 @@ async function cliClient(opts = {}) {
 // ---- does this instance even HAVE dev boxes? (task 1003730) -----------------
 // The dev-box module is a CONTROL-PLANE capability: it provisions DigitalOcean droplets, so a
 // hosted co-tenant instance runs without it. The instance manifest has always said so —
-// GET /api/gds/instance carries modules.enabled — but no CLI script read it, so `bongos shell`
+// GET /api/bongos/instance carries modules.enabled — but no CLI script read it, so `bongos shell`
 // on such an instance died with a bare `POST /box/ensure failed (HTTP 404: not_found)`.
 //
 // That mattered far more than a bad error string: the public CLI (ADR 0258) answers
@@ -956,7 +956,7 @@ function tableTask(t) {
 
 // V3.R13 (#237): one-line "next: <stage>" nudge for newcomers.
 //
-// Given the /api/gds/me response, print a banner pointing at the next
+// Given the /api/bongos/me response, print a banner pointing at the next
 // uncleared onboarding stage. Silent when the builder has graduated or has
 // already cleared first_ship (the post-newcomer threshold) — gates lift
 // after the first ship, so the nudge is too. Also silent when the
@@ -1038,7 +1038,7 @@ function printCostWarning(meBody) {
 }
 
 // task 1013 / ADR 0073: the CLI half of the consistent "the system needs an input
-// from you" signal. Given the /api/gds/me response, print a short line for each
+// from you" signal. Given the /api/bongos/me response, print a short line for each
 // `needs` item in the action_needed state — the builder's private surface is the
 // right place to tell them an input is missing (mirrors printCostWarning). Silent
 // when nothing needs action (covered / satisfied items don't nag) or when the

package/scripts/gds/context-pack.js

@@ -184,7 +184,7 @@ function osFacts({ platform, runWhich }) {
   };
 }
 
-// Normalize active claims (from /api/gds/me) into {id, title, current} rows.
+// Normalize active claims (from /api/bongos/me) into {id, title, current} rows.
 // currentTaskId marks the one just claimed so the print can say "(this one)".
 function normalizeClaims(activeClaims, currentTaskId) {
   const rows = Array.isArray(activeClaims) ? activeClaims : [];

package/scripts/gds/copy-apply.js

@@ -219,7 +219,7 @@ function refuse(result) {
 // answered from the same source of truth — the shape of bug where a rule is
 // enforced on one path and merely stated on the other (task 1003493).
 async function activeClaims() {
-  const me = await apiCall('GET', '/api/gds/me');
+  const me = await apiCall('GET', '/api/bongos/me');
   if (!me.ok) return { ok: false, code: 'no_session', detail: { status: me.status, run: 'node scripts/gds/setup.js' } };
   return { ok: true, claims: me.data.active_claims || (me.data.active_claim ? [me.data.active_claim] : []) };
 }
@@ -295,7 +295,7 @@ async function loadPatch({ taskId, patchFile }) {
       ? ['```' + proposals.FENCE, raw.trim(), '```'].join('\n')
       : raw);
   }
-  const res = await apiCall('GET', `/api/gds/tasks/${taskId}`);
+  const res = await apiCall('GET', `/api/bongos/tasks/${taskId}`);
   if (!res.ok) {
     return { ok: false, code: 'task_unreadable', detail: { task: taskId, status: res.status } };
   }

package/scripts/gds/dev-lib.js

@@ -261,7 +261,7 @@ function stop(params, deps = {}) {
 }
 
 // Probe the running server. Returns { up, authConfigured }. `up` = the plain
-// /healthz (needs no DB); authConfigured comes from /api/gds/healthz.
+// /healthz (needs no DB); authConfigured comes from /api/bongos/healthz.
 async function health(params, deps = {}) {
   const fetchImpl = deps.fetchImpl || fetch;
   const base = `http://${probeHost(params)}:${params.port}`;
@@ -273,7 +273,7 @@ async function health(params, deps = {}) {
   } catch { return { up: false, authConfigured: false }; }
   let authConfigured = false;
   try {
-    const r = await fetchImpl(`${base}/api/gds/healthz`, { signal: AbortSignal.timeout(timeout) });
+    const r = await fetchImpl(`${base}/api/bongos/healthz`, { signal: AbortSignal.timeout(timeout) });
     const j = await r.json();
     authConfigured = j && j.auth_configured === true;
   } catch { /* leave false */ }

package/scripts/gds/fetch-art-key.js

@@ -3,7 +3,7 @@
 // the local session file so a newcomer's art pipeline can use it (task 1281).
 //
 // The art pipeline (modules/art-pipeline/pipeline/gen_api.py) runs LOCALLY and can't call the API
-// per generation, so SessionStart runs this once: GET /api/gds/me/art-key and,
+// per generation, so SessionStart runs this once: GET /api/bongos/me/art-key and,
 // based on the builder's live rank, write or remove the `shared_gemini_api_key`
 // field in ~/.config/otb/bongos-session.json. gen_api.py reads that field as a
 // fallback BELOW the builder's own key — so own key always wins, and a newcomer
@@ -43,7 +43,7 @@ async function main() {
   const timer = setTimeout(() => ctrl.abort(), FETCH_TIMEOUT_MS);
   let data = null;
   try {
-    const res = await fetch(`${base}/api/gds/me/art-key`, {
+    const res = await fetch(`${base}/api/bongos/me/art-key`, {
       headers: {
         Authorization: `Bearer ${session.token}`,
         'User-Agent': require('../../src/branding').userAgent(),

package/scripts/gds/fetch-sound-prefs.js

@@ -5,7 +5,7 @@
 // The toggle lives server-side (builders.sound_prefs), but the sound plays from
 // a LOCAL Stop hook + ship.js via .claude/sounds/play.js — which can't make a
 // network call on every turn. So SessionStart runs this once: fetch
-// GET /api/gds/me/sound-prefs and write its effective_map to
+// GET /api/bongos/me/sound-prefs and write its effective_map to
 // ~/.config/otb/sound-prefs.json. play.js reads that file and skips muted sounds.
 //
 // Best-effort by construction:
@@ -48,11 +48,11 @@ async function main() {
     // Fetch both prefs in parallel; a failure on either leaves both at their
     // existing cached state (fail-open).
     const [soundRes, eventRes] = await Promise.all([
-      fetch(`${sess.apiBase}/api/gds/me/sound-prefs`, {
+      fetch(`${sess.apiBase}/api/bongos/me/sound-prefs`, {
         headers: { Authorization: `Bearer ${sess.token}`, 'User-Agent': require('../../src/branding').userAgent() },
         signal: ctrl.signal,
       }),
-      fetch(`${sess.apiBase}/api/gds/me/event-sound-prefs`, {
+      fetch(`${sess.apiBase}/api/bongos/me/event-sound-prefs`, {
         headers: { Authorization: `Bearer ${sess.token}`, 'User-Agent': require('../../src/branding').userAgent() },
         signal: ctrl.signal,
       }),

package/scripts/gds/grade-smoke.js

@@ -78,7 +78,7 @@ const BAD_TASK = {
 Acceptance:
 - New table billing_charges captures one row per art-pipeline ship with
   stripe_charge_id, amount_cents, currency, status.
-- POST /api/gds/cost on art-pipeline tasks creates a Stripe charge against
+- POST /api/bongos/cost on art-pipeline tasks creates a Stripe charge against
   the configured Hermeslines customer and writes the billing_charges row.
 - A failure to charge rolls the cost-log insert back so we never claim a
   charge that didn't happen.

package/scripts/gds/hooks/pre-push.js

@@ -92,7 +92,7 @@ async function liveRank() {
   try {
     const timeout = new Promise((resolve) => { timer = setTimeout(() => resolve('__timeout__'), LIVE_RANK_TIMEOUT_MS); });
     const res = await Promise.race([
-      apiCall('GET', '/api/gds/me', null, { allowUnauthenticated: true }),
+      apiCall('GET', '/api/bongos/me', null, { allowUnauthenticated: true }),
       timeout,
     ]);
     // The loser of the race must be cleared. This used to leak: process.exit()

package/scripts/gds/init.js

@@ -8,7 +8,7 @@
 //   1. gathers a spec (interactive interview, or --from <spec.json>),
 //   2. writes the instance config — config/branding.json + config/modules.json
 //      (lean OVERRIDES; config/*.neutral.json fills the rest, src/branding.js),
-//   3. seeds the first version + its done-when goal via POST /api/gds/versions
+//   3. seeds the first version + its done-when goal via POST /api/bongos/versions
 //      (the primitive added in this same task), then files the starter task and
 //      the human-only KICKOFF steps as real, tracked tasks via POST /tasks,
 //   4. points the owner at docs/branding-fill-prompt.md for the LOOK (a locked
@@ -200,7 +200,7 @@ function provisioningSlug(spec) {
   return slugify(base, 'instance').slice(0, 40).replace(/-+$/, '');
 }
 
-// The POST /api/gds/provisioning/instances body built from the interview's infra
+// The POST /api/bongos/provisioning/instances body built from the interview's infra
 // answers — or null when the owner didn't opt into provisioning (no spec.provisioning
 // block). THE ADR 0111 §3 ARM: infra answers become a real provisioning REQUEST (a
 // provisioning_intents row the control-plane runner drains) instead of only a manual
@@ -382,7 +382,7 @@ function validateSpec(spec, { adopt = false, noSeed = false } = {}) {
   return errs;
 }
 
-// Build the POST /api/gds/versions body from the spec (pure). The first version's
+// Build the POST /api/bongos/versions body from the spec (pure). The first version's
 // done_when goal becomes both the version blurb and one done-when criterion, so
 // /status has a finish line to roll up from day one.
 function versionPayload(spec) {
@@ -701,11 +701,11 @@ async function seedViaApi(spec, { dryRun, log = console.log, api = apiCall } = {
   const pr = provisioningRequest(spec); // ADR 0111 §3 — null unless the owner opted in
 
   if (dryRun) {
-    log(`\n[dry-run] would POST /api/gds/versions:`);
+    log(`\n[dry-run] would POST /api/bongos/versions:`);
     log(JSON.stringify(vp, null, 2));
     log(`\n[dry-run] would create ${starters.length} starter + ${kickoff.length} kickoff task(s) under ${vp.id}.`);
     if (pr) {
-      log(`\n[dry-run] would POST /api/gds/provisioning/instances:`);
+      log(`\n[dry-run] would POST /api/bongos/provisioning/instances:`);
       log(JSON.stringify(pr, null, 2));
       log(`  (queues a 'provision' intent; the control-plane runner stands up hosting — ADR 0111 §2/§3.`);
       log(`   production-topology is left OFF the kickoff list since it's now automated.)`);
@@ -714,7 +714,7 @@ async function seedViaApi(spec, { dryRun, log = console.log, api = apiCall } = {
   }
 
   // 1. version + first goal
-  const vres = await api('POST', '/api/gds/versions', vp);
+  const vres = await api('POST', '/api/bongos/versions', vp);
   if (!vres.ok && vres.status !== 409) {
     throw new Error(`POST /versions failed (${vres.status}): ${JSON.stringify(vres.data)}`);
   }
@@ -726,7 +726,7 @@ async function seedViaApi(spec, { dryRun, log = console.log, api = apiCall } = {
   let goalId = vres.ok && vres.data && vres.data.goal ? vres.data.goal.id : null;
   if (vres.status === 409) {
     log(`  • version ${vp.id} already exists — continuing.`);
-    const gres = await api('GET', `/api/gds/goals?version=${encodeURIComponent(vp.id)}`);
+    const gres = await api('GET', `/api/bongos/goals?version=${encodeURIComponent(vp.id)}`);
     const goals = gres.ok ? (Array.isArray(gres.data) ? gres.data : (gres.data && gres.data.goals) || []) : [];
     const open = goals.find((g) => g && g.status === 'open' && !g.is_maintenance) || goals.find((g) => g && g.status === 'open');
     goalId = open ? open.id : null;
@@ -752,7 +752,7 @@ async function seedViaApi(spec, { dryRun, log = console.log, api = apiCall } = {
   const failures = [];
   const postTask = async (t, extra = {}) => {
     attempted++;
-    const res = await api('POST', '/api/gds/tasks', {
+    const res = await api('POST', '/api/bongos/tasks', {
       version_id: vp.id, goal_id: goalId, title: t.title, description: t.description || '', status: 'ready',
       kind: t.kind || 'infra', discipline: t.discipline || 'engineer', source: 'bongos-init', ...extra,
     });
@@ -777,7 +777,7 @@ async function seedViaApi(spec, { dryRun, log = console.log, api = apiCall } = {
   // re-file that manual step here so the leg is never silently dropped.
   let provisioned = false;
   if (pr) {
-    const pres = await api('POST', '/api/gds/provisioning/instances', pr);
+    const pres = await api('POST', '/api/bongos/provisioning/instances', pr);
     if (pres.ok) {
       provisioned = true;
       const inst = (pres.data && pres.data.instance) || {};

package/scripts/gds/key-card.js

@@ -187,7 +187,7 @@ async function resolveWidgetsEnabled() {
     const ctrl = new AbortController();
     const timer = setTimeout(() => ctrl.abort(), 3000);
     try {
-      const res = await fetch(`${base}/api/gds/me`, {
+      const res = await fetch(`${base}/api/bongos/me`, {
         headers: { Authorization: `Bearer ${session.token}`, 'User-Agent': require('../../src/branding').userAgent() },
         signal: ctrl.signal,
       });

package/scripts/gds/learning-capture.js

@@ -100,7 +100,7 @@ function autoDetectFiles() {
 
   if (dryRun) {
     console.log('=== DRY RUN ===');
-    console.log('POST /api/gds/learnings:');
+    console.log('POST /api/bongos/learnings:');
     console.log(JSON.stringify({
       title, body_md: body, tags, related_files: relatedFiles, source, source_ref: sourceRef, task_id: taskId,
     }, null, 2));
@@ -135,7 +135,7 @@ function autoDetectFiles() {
   if (learning.related_files?.length) {
     console.log(`Related files: ${learning.related_files.join(', ')}`);
   }
-  console.log('Stored in GDS DB. Query with: node scripts/gds/learning-list.js (TBD) or GET /api/gds/learnings');
+  console.log('Stored in GDS DB. Query with: node scripts/gds/learning-list.js (TBD) or GET /api/bongos/learnings');
   // Phase 2b — the per-tag markdown append was removed. The DB is now the
   // canonical store for short-form learnings; long-form operational recipes
   // live separately under docs/recipes/.

package/scripts/gds/linkify-refs.js

@@ -24,7 +24,7 @@
 // recreates the complaint. So the classifier is deliberately conservative —
 // it links a "#NNN" ONLY when ALL of these hold:
 //   • NNN is a real id of the classified kind (fetched live from the public
-//     /api/gds/public/ref-ids allow-list; PR-only numbers are therefore never
+//     /api/bongos/public/ref-ids allow-list; PR-only numbers are therefore never
 //     touched, and an idea id is never linked as a task).
 //   • It is a bare reference — NOT a markdown heading anchor like
 //     `](#12-session-update-protocol)` (digits followed by `-`/word chars), and
@@ -520,7 +520,7 @@ function linkifyText(text, ids, stats) {
 // Token-free: the public id allow-list, so this script (and the CI gate) work
 // with no builder session. Override the host with GDS_API_BASE for local dev.
 async function fetchRefIds() {
-  const res = await fetch(`${API_BASE}/api/gds/public/ref-ids`);
+  const res = await fetch(`${API_BASE}/api/bongos/public/ref-ids`);
   if (!res.ok) throw new Error(`/public/ref-ids fetch failed (HTTP ${res.status})`);
   const data = await res.json();
   const toSet = (a) => new Set((a || []).map(Number).filter(Number.isInteger));

package/scripts/gds/local-preview-lib.js

@@ -4,7 +4,7 @@
 // preview a dev box gets at sandbox-<login>.example.com (ADR 0044/0046/0052)
 // — but served at http://localhost:<port> on their OWN machine: no Cloudflare
 // tunnel, no public URL, $0. It runs the ADR 0052 game-only entry
-// (src/preview-server.js), which serves ONLY the playable game (no /api/gds, no
+// (src/preview-server.js), which serves ONLY the playable game (no /api/bongos, no
 // BuildersHall), degraded-DB exactly like the box sandbox.
 //
 // The preview is a long-running DETACHED background process (the laptop analogue

package/scripts/gds/login.js

@@ -32,13 +32,14 @@ const { branding } = require('../../src/branding');
 // --- pure helpers (unit-tested) ---------------------------------------------
 
 // Normalize whatever the user pastes into an origin: add https:// if no scheme,
-// drop trailing slashes, and tolerate a pasted /api/gds suffix.
+// drop trailing slashes, and tolerate a pasted API base — the canonical
+// /api/bongos or the permanent /api/gds alias, with or without the /v1 segment.
 function normalizeInstanceBase(raw) {
   let s = String(raw || '').trim();
   if (!s) throw new Error('missing instance URL');
   if (!/^https?:\/\//i.test(s)) s = `https://${s}`;
   s = s.replace(/\/+$/, '');
-  s = s.replace(/\/api\/gds\/?$/i, '');
+  s = s.replace(/\/api\/(?:bongos|gds)(?:\/v1)?\/?$/i, '');
   return s;
 }
 
@@ -95,7 +96,7 @@ const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
 // The instance's OWN admission gate runs at poll (direct) or exchange (federated),
 // so the stranger path is identical for both.
 async function runDeviceFlow(base, { log, idp = null }) {
-  const startUrl = idp ? `${idp.origin}/api/gds/sso/device/start` : `${base}/api/gds/auth/device/start`;
+  const startUrl = idp ? `${idp.origin}/api/bongos/sso/device/start` : `${base}/api/bongos/auth/device/start`;
   const start = await fetchJson(startUrl, {
     method: 'POST',
     // Federated: the hub resolves + binds the client from the USER-TYPED origin
@@ -136,7 +137,7 @@ async function runDeviceFlow(base, { log, idp = null }) {
   openBrowser(verification_uri);
   log('  Waiting for you to approve in the browser…');
 
-  const pollUrl = idp ? `${idp.origin}/api/gds/sso/device/poll` : `${base}/api/gds/auth/device/poll`;
+  const pollUrl = idp ? `${idp.origin}/api/bongos/sso/device/poll` : `${base}/api/bongos/auth/device/poll`;
   const deadline = Date.now() + expires * 1000;
   while (Date.now() < deadline) {
     await sleep(interval * 1000);
@@ -150,7 +151,7 @@ async function runDeviceFlow(base, { log, idp = null }) {
     if (st === 'ok') {
       if (!idp) return { state: 'ok', token: poll.data.token, builder: poll.data.builder };
       // Federated: exchange the hub assertion at the instance for a real session.
-      const ex = await fetchJson(`${base}/api/gds/auth/device/exchange`, {
+      const ex = await fetchJson(`${base}/api/bongos/auth/device/exchange`, {
         method: 'POST',
         body: JSON.stringify({ assertion: poll.data.assertion }),
       });
@@ -200,9 +201,9 @@ async function main() {
   // 1. Manifest — brand + admission posture, and a check that this really is a
   //    Cloud Bongos instance before we start a device flow.
   log(`▸ Connecting to ${base}…`);
-  const man = await fetchJson(`${base}/api/gds/instance`);
+  const man = await fetchJson(`${base}/api/bongos/instance`);
   if (!man.ok || !man.data || man.data.schema !== 'instance-manifest/v1') {
-    console.error(`✖ ${base} does not look like a Cloud Bongos instance (no /api/gds/instance manifest).`);
+    console.error(`✖ ${base} does not look like a Cloud Bongos instance (no /api/bongos/instance manifest).`);
     process.exit(1);
   }
   const instanceName = man.data.name || base;
@@ -230,7 +231,7 @@ async function main() {
     let stored = null;
     try { stored = await loadStoredSession(base); } catch (_) { stored = null; }
     if (stored && stored.token) {
-      const me = await fetchJson(`${base}/api/gds/me`, { headers: { Authorization: `Bearer ${stored.token}` } });
+      const me = await fetchJson(`${base}/api/bongos/me`, { headers: { Authorization: `Bearer ${stored.token}` } });
       if (me.ok && me.data && me.data.builder) {
         await saveSession({ ...stored, builder: me.data.builder, api_base: base,
           instance: { name: instanceName, origin: base } });
@@ -265,7 +266,7 @@ async function main() {
       console.error('✖ need your GitHub username to request access.');
       process.exit(2);
     }
-    const reqRes = await fetchJson(`${base}/api/gds/access-requests`, {
+    const reqRes = await fetchJson(`${base}/api/bongos/access-requests`, {
       method: 'POST',
       body: JSON.stringify({ github_login: ghLogin, note: 'via bongos login' }),
     });
@@ -287,7 +288,7 @@ async function main() {
     const admitDeadline = Date.now() + 30 * 60 * 1000; // 30 min
     for (;;) {
       await sleep(5000);
-      const s = await fetchJson(`${base}/api/gds/access-requests/status?github_login=${encodeURIComponent(ghLogin)}`);
+      const s = await fetchJson(`${base}/api/bongos/access-requests/status?github_login=${encodeURIComponent(ghLogin)}`);
       const decision = pollDecision(s.data);
       if (decision === 'admitted') {
         log('\n  ✓ Approved! Finishing sign-in — approve once more in your browser.');

package/scripts/gds/main-audit.js

@@ -282,7 +282,7 @@ async function fetchRankMap({ useDb = false } = {}) {
   // Caveat: a zero-activity builder may be absent → resolves as UNRESOLVED
   // ('review' finding), never as falsely-trusted.
   try {
-    const res = await fetch(`${API_BASE}/api/gds/public/leaderboard`);
+    const res = await fetch(`${API_BASE}/api/bongos/public/leaderboard`);
     if (res.ok) {
       const data = await res.json();
       return rowsToMap(data?.leaderboard || []);

package/scripts/gds/newcomer-floor.config.json

@@ -1,6 +1,6 @@
 {
   "_doc": "Supply knob for the deterministic newcomer-task floor replenisher (scripts/gds/newcomer-floor.js) and the on-claim restock (src/bongos/newcomer-restock.js). As of task 1488 each discipline holds a LIST of chore templates, and each chore keeps its OWN standing pool to its OWN `floor` (declared per-template in newcomer-floor.templates.json). The `floor` in this disciplines map is now the DEFAULT applied to any template that omits its own — i.e. a fallback, not the primary knob. The pool is measured in READY copies of each template (source_ref tmpl:<discipline>:<template_id>:<seq>); when a chore's ready copies drop below its floor, fresh identical copies are stamped — deterministic, no AI subagent, no 401. The CHORE definitions (and their per-template floors) live in templates.json (edit there to add/change a chore or tune its pool depth).",
-  "_review_gate": "`auto_promote` is the review toggle for the CLI seeder. true -> stamped copies land at status='ready' (claimable immediately). Safe here because output is deterministic and the templates are pre-approved (set true 2026-06-16, owner decision). false -> copies land at status='backlog' (NOT Xenos-claimable) for an Archon to promote via POST /api/gds/tasks/:id/promote. (The on-claim restock always stamps 'ready' — it tops a just-claimed chore's pool back up so the shelf is never empty.)",
+  "_review_gate": "`auto_promote` is the review toggle for the CLI seeder. true -> stamped copies land at status='ready' (claimable immediately). Safe here because output is deterministic and the templates are pre-approved (set true 2026-06-16, owner decision). false -> copies land at status='backlog' (NOT Xenos-claimable) for an Archon to promote via POST /api/bongos/tasks/:id/promote. (The on-claim restock always stamps 'ready' — it tops a just-claimed chore's pool back up so the shelf is never empty.)",
   "_floor_note": "Per-template `floor` lives in newcomer-floor.templates.json (next to each chore's credits_reward + est_minutes). The disciplines map below is only the per-discipline DEFAULT used when a template omits its own floor. credits_reward is never read from here.",
   "templates_path": "newcomer-floor.templates.json",
   "auto_promote": true,

package/scripts/gds/newcomer-floor.js

@@ -37,7 +37,7 @@
 //                      deterministic and the templates are pre-approved.
 //   false           -> copies land status='backlog' for an Archon to promote.
 //
-// AUTH: POST /api/gds/tasks is archon-gated (creating work is scope-shaping —
+// AUTH: POST /api/bongos/tasks is archon-gated (creating work is scope-shaping —
 // ADR 0016). Run under an Archon session (on the droplet, the operator's).
 //
 // Usage:
@@ -393,7 +393,7 @@ function report(summary, FLAGS, { checkOnly }) {
   }
   if (!summary.autoPromote && !FLAGS.dryRun && summary.stamped.some((g) => g.task_id)) {
     console.log('\nNext: a Metic+ builder promotes the new backlog copies to ready:');
-    console.log('  node scripts/gds/api.js POST /api/gds/tasks/<id>/promote   (or the builders\' hall)');
+    console.log('  node scripts/gds/api.js POST /api/bongos/tasks/<id>/promote   (or the builders\' hall)');
   }
 }
 

package/scripts/gds/newcomer-floor.templates.json

@@ -70,13 +70,13 @@
       "est_minutes": 45,
       "credits_reward": 12,
       "title": "Idea-seed pass: file 5-8 fresh in-world ideas (names, lore, or builder-UX) into the idea inbox",
-      "description": "## What you'll do\n\nThe seed of almost everything built here is the **idea_inbox** — a queue anyone can drop ideas into, which trusted builders later triage into real tasks. Your first ship as an ideator is simple and concrete: **add a small batch of fresh ideas to that inbox.** You write no code, touch no game, change no system — you think, write a few short well-shaped ideas, and file them with one command each.\n\nIt is identical for every newcomer and **always valuable**: the inbox is never \"done\" — every triage pass consumes ideas (promote/discard/merge), so it is permanently hungry for fresh input, and a growing world always wants more names, more lore, more texture. Your batch is brand-new content, so it can never duplicate \"the work\" — the supply IS the work.\n\n## Pick ONE branch\n\n- **Branch A — PRODUCT flavour (default).** Ideas that grow the world players see: **names + one line of lore** for a character, structure, landmark, district, ship, or festival; or a world-background snippet (a custom, a superstition, a line a named NPC says). Tone: mythic, mysterious, a \"discovered secret\"; Mediterranean ancient-Greek coast (just south of Athens); NOT modern, NOT tongue-in-cheek-modern. Ground it in CLAUDE.md §3/§6/§7.\n- **Branch B — INTERNAL / builder-UX.** Small user-experience improvement ideas for the GDS / builders' hall (the surfaces builders use, not the game): a clearer label, a confusing onboarding message, a quality-of-life tweak to a status page or a slash-command's output. See `docs/TRACKS.md` for product vs internal.\n\n## How to find your way in\n\n1. (Branch A) Read CLAUDE.md §3/§6/§7 for tone. (Branch B) Skim `docs/TRACKS.md` and click around your instance's /builders hall for the rough edge you'll write up.\n2. See what's already filed so you don't repeat it: `node scripts/gds/api.js GET /api/gds/inbox`.\n3. File each idea with `node scripts/gds/capture.js \"<title>\" --body-file <path>` (filing an idea is the open-to-all path — a Xenos/Thetes session is allowed to do it; you just can't triage them). Put one line of detail + a `track: product` or `track: internal` line in each body file.",
+      "description": "## What you'll do\n\nThe seed of almost everything built here is the **idea_inbox** — a queue anyone can drop ideas into, which trusted builders later triage into real tasks. Your first ship as an ideator is simple and concrete: **add a small batch of fresh ideas to that inbox.** You write no code, touch no game, change no system — you think, write a few short well-shaped ideas, and file them with one command each.\n\nIt is identical for every newcomer and **always valuable**: the inbox is never \"done\" — every triage pass consumes ideas (promote/discard/merge), so it is permanently hungry for fresh input, and a growing world always wants more names, more lore, more texture. Your batch is brand-new content, so it can never duplicate \"the work\" — the supply IS the work.\n\n## Pick ONE branch\n\n- **Branch A — PRODUCT flavour (default).** Ideas that grow the world players see: **names + one line of lore** for a character, structure, landmark, district, ship, or festival; or a world-background snippet (a custom, a superstition, a line a named NPC says). Tone: mythic, mysterious, a \"discovered secret\"; Mediterranean ancient-Greek coast (just south of Athens); NOT modern, NOT tongue-in-cheek-modern. Ground it in CLAUDE.md §3/§6/§7.\n- **Branch B — INTERNAL / builder-UX.** Small user-experience improvement ideas for the GDS / builders' hall (the surfaces builders use, not the game): a clearer label, a confusing onboarding message, a quality-of-life tweak to a status page or a slash-command's output. See `docs/TRACKS.md` for product vs internal.\n\n## How to find your way in\n\n1. (Branch A) Read CLAUDE.md §3/§6/§7 for tone. (Branch B) Skim `docs/TRACKS.md` and click around your instance's /builders hall for the rough edge you'll write up.\n2. See what's already filed so you don't repeat it: `node scripts/gds/api.js GET /api/bongos/inbox`.\n3. File each idea with `node scripts/gds/capture.js \"<title>\" --body-file <path>` (filing an idea is the open-to-all path — a Xenos/Thetes session is allowed to do it; you just can't triage them). Put one line of detail + a `track: product` or `track: internal` line in each body file.",
       "done_when": [
         "You filed 5–8 fresh ideas into the idea_inbox via `node scripts/gds/capture.js` (each prints a `Captured idea #N` confirmation), all in ONE branch (A product, or B internal/UX).",
         "Each idea has a clear title and a body with at least one sentence of detail — for Branch A, one line of in-world lore (who/what it is); for Branch B, what the rough edge is and what 'better' looks like.",
         "Branch A ideas are in the world's voice and consistent with CLAUDE.md §3/§6/§7 (ancient-Greek coast, Example, mythic 'discovered secret' tone — not modern/anachronistic).",
         "Each idea body declares its track on a `track: product` or `track: internal` line so triage can route it.",
-        "Before filing you ran `GET /api/gds/inbox` and confirmed your ideas are not near-duplicates of open ones.",
+        "Before filing you ran `GET /api/bongos/inbox` and confirmed your ideas are not near-duplicates of open ones.",
         "You touched only the idea_inbox via capture.js — no code, no migrations, no infra, no permission/pipeline files; nothing committed to the repo."
       ],
       "touches": [],

package/scripts/gds/onboarding-ship.js

@@ -11,7 +11,7 @@
 // realized as a privacy-preserving two-step: this script gzips completed
 // transcripts into a local spool, and onboarding-analyze.js then ships only
 // the *distilled friction signal* (not the raw transcript) to the shared GDS
-// via POST /api/gds/inbox. The raw transcript never leaves the machine — a
+// via POST /api/bongos/inbox. The raw transcript never leaves the machine — a
 // deliberate privacy choice given transcripts can contain anything the builder
 // typed. A dedicated upload endpoint would need a new route + storage table
 // (migration), both outside this task's touches[].

package/scripts/gds/paste-token.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 // scripts/gds/paste-token.js — V3.R91 / #401.
 //
-// Accept a CLI bearer minted by the builders' hall (POST /api/gds/auth/cli-token/issue)
+// Accept a CLI bearer minted by the builders' hall (POST /api/bongos/auth/cli-token/issue)
 // and write it into ~/.config/otb/bongos-session.json. Preserves any existing
 // fields (notably gemini_api_key registered via /builder-setup) so a token
 // paste never silently un-registers a builder's Gemini key.
@@ -14,7 +14,7 @@
 // builder can copy + paste a single line.
 //
 // Safety contract:
-//   1. The token is verified against /api/gds/me BEFORE the session file is
+//   1. The token is verified against /api/bongos/me BEFORE the session file is
 //      touched. A bad paste exits non-zero with a clear message and leaves
 //      the existing session intact.
 //   2. The file is written with mode 0600, same as setup.js.
@@ -70,7 +70,7 @@ async function main() {
   //    paste was meant to REPLACE, not destroy.
   let me;
   try {
-    const res = await fetch(`${API_BASE}/api/gds/me`, {
+    const res = await fetch(`${API_BASE}/api/bongos/me`, {
       headers: { Authorization: `Bearer ${token}` },
     });
     if (res.status === 401) {