@bongos/core 1.19.816 → 1.19.818

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.816",
-  "core_contract": "1.19.816",
-  "source_commit": "aa1a7485bebfc27a8b19c0acbff29287f1212828",
+  "core_version": "1.19.818",
+  "core_contract": "1.19.818",
+  "source_commit": "7f98428f5e6532100482d729716d92638bee2eb5",
   "source_ref": "HEAD",
-  "built_at": "2026-09-17T08:14:24.758Z",
+  "built_at": "2026-09-17T08:43:53.963Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
-    "docs_redacted": 489,
+    "docs_redacted": 490,
     "agent_docs_stubbed": 26,
-    "functional_verbatim": 2215,
+    "functional_verbatim": 2217,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 2730,
-  "tree_sha256": "78e804a2a5bda8a926f2f33af27c70ca3a6e0b4b5b3aa9a5b3bd8c66dd5cec24",
+  "file_count": 2733,
+  "tree_sha256": "35b8712820d4287686e4a01a9a497c386fd32f24a5109b691a39892d4aeaa964",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -252,7 +252,7 @@
     {
       "path": ".claude/skills/worktree-clean/SKILL.md",
       "mode": "0000644",
-      "sha256": "4819fe448f4e35c3c7c3f4784718d51a7a4469f3c644d1b6c57b693b79da129e"
+      "sha256": "6548fe1de89c6909def02b76f022cae739c5b129d179a63538b9a1ab252e5030"
     },
     {
       "path": ".devcontainer/Dockerfile",
@@ -347,12 +347,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "1921cca49d6df56968c7def2350d5b3bc2497d8ca1a7b616fccebf40c1cb16b1"
+      "sha256": "3db2ef5abdfe42a0e950339728759742ac017fdbcae1ed1b8e8b00798773df09"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "5753830b87cce7612cb6c6799ea3807fa5c2e9eaf1b1e5f137af21fb3692a3c4"
+      "sha256": "cd6c84faa0f4d65498108d2681fff1b7089c6ee80212af6d7bf29c5d29c77ee1"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -362,17 +362,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "233ade028d8fb2334e0cd2e17d10d695a5c873a8ebe5589407cccac6dd023bd5"
+      "sha256": "0b9c1a362adc59ce61f6b0b6f92f47103f6060810cbcf90ee87391b255a1d96f"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "e713625480afabdcda10f665beabb91cccaa3bce0268371a6ee780daea626b6d"
+      "sha256": "d2b1b59658899d95484cea739fad158009c1d5365881854b117e8350e09521d3"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "e8592cf9783404ce849e1c234a06c716993ef9c9f4d5b066a456eeeec002b0c0"
+      "sha256": "9cf6c38c64ba9a7f753ba393daddd7c3f76e246f34b713130eb81e77973e23de"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -1974,20 +1974,25 @@
       "mode": "0000644",
       "sha256": "4e6d5268c58e905c86acc1bbd4c66778e3695ecd37cbc1c9e0f1448cd67f26a9"
     },
+    {
+      "path": "docs/adr/0298-the-reader-lens-is-advisory-and-waits-on-a-voice-guide.md",
+      "mode": "0000644",
+      "sha256": "8fcac086f276e57b59ba635cdf34600bf78bfb69d80177d43065dfc6776b0611"
+    },
     {
       "path": "docs/adr/README.md",
       "mode": "0000644",
-      "sha256": "9e305c448d390efbfd7f4b5521284a8dc452d43a106d4686a0176433e2d1a3a7"
+      "sha256": "14c4e2e04bba4a0438375364a88e41eca44983ab0fb2c3ecd13bf0190f0ad151"
     },
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "16b812b3d5df71ecd9c8908fcd724345cee9ebe36bdf445fedd623e8d3572498"
+      "sha256": "74c345407b073635a4b9eaa54b72a92e543a1d4e9a893b0a3c688ef32bdc86b0"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "d062ab3925ae7919f1f0e32a2da4974cae41ee409d914ea6fb49bfd3591b91d2"
+      "sha256": "28a4aec3929aefa72cfdffc1bcad6eba5ce1d3bb00518e28eddee631f219dfe5"
     },
     {
       "path": "docs/architecture.md",
@@ -2012,12 +2017,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "b0fb481aa86ab8ad8b2bf37bfdf09e6aba00f611156d92002632384cddc40cb2"
+      "sha256": "4e21dfe9140f8da88b5ba49d7d2c380196408073253e915198ab5f9cdbeab933"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "a21e7da139c5593f452509692e3f17b945f99eb5013f9a0e7ec4ceedc8c8b50e"
+      "sha256": "cb8da77e04f8fa238c513bf2fc04f4f00a13527022e2fbb34dd607ddced16bdd"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2542,7 +2547,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "c86194915e38b871c476151bdf00719d190411407942cfc8dd9f0a7734630ab0"
+      "sha256": "0b561d6587c66805edf357a97265aa313ab4cf1610e23c63efbb30fc0f1fdf78"
     },
     {
       "path": "docs/modules-contract.md",
@@ -4077,7 +4082,7 @@
     {
       "path": "modules/dev-box/app/src/vendor/bongos-client.cjs",
       "mode": "0000644",
-      "sha256": "233ade028d8fb2334e0cd2e17d10d695a5c873a8ebe5589407cccac6dd023bd5"
+      "sha256": "0b9c1a362adc59ce61f6b0b6f92f47103f6060810cbcf90ee87391b255a1d96f"
     },
     {
       "path": "modules/dev-box/app/test/unit.mjs",
@@ -4327,7 +4332,7 @@
     {
       "path": "modules/government/catalog.js",
       "mode": "0000644",
-      "sha256": "409e2309bdfcf4b3bb60cfde69e8854af9cd280a205cca2f7640103e08a56c84"
+      "sha256": "da48187e485a7528bdd705c49df7a28c4ce6a3aad3c2885589f06dd4c8214840"
     },
     {
       "path": "modules/government/config.js",
@@ -5257,7 +5262,7 @@
     {
       "path": "modules/hall-ui/public/settings-specialities.js",
       "mode": "0000644",
-      "sha256": "194358e6da084b0ed61af334ec5caa50cff64ae2d74b55291d48a2ed98c519d2"
+      "sha256": "384aa465d951e97d8d3e2b7633eff49d1d82e63bdd63baf0b38cf81482c4716d"
     },
     {
       "path": "modules/hall-ui/public/settings.css",
@@ -5267,7 +5272,7 @@
     {
       "path": "modules/hall-ui/public/settings.html",
       "mode": "0000644",
-      "sha256": "88ce1d42d1a40fccb87da1c353a2649e01c7f6ef6241d34a53b7260cb46cec31"
+      "sha256": "4bea1273047e2fbb90f76f01892cb82da7aeaa1417f91a267249512a5e216993"
     },
     {
       "path": "modules/hall-ui/public/settings.js",
@@ -5497,7 +5502,7 @@
     {
       "path": "modules/lifecycle/cascade.js",
       "mode": "0000644",
-      "sha256": "0f7c3c6b75216ddca36d49e9a112fce98de2e4123e9756879ba51b44b77c0f06"
+      "sha256": "acc9cf557aabc3fe10efc8c7272162cf288428e8077a24f5df06648e30881337"
     },
     {
       "path": "modules/lifecycle/claim-eligibility.js",
@@ -5842,7 +5847,7 @@
     {
       "path": "modules/lifecycle/routes/task-route-helpers.js",
       "mode": "0000644",
-      "sha256": "e7e709127d13bdbe0333adaae6c9ed97afc6ca66d9476ccc0239c3ec2bbeacce"
+      "sha256": "c82bfa19da18a2b952ad4e2a0311ef983050fd0a4c8a095c8fb3f3581f3a4801"
     },
     {
       "path": "modules/lifecycle/routes/task-write-routes.js",
@@ -5917,7 +5922,7 @@
     {
       "path": "modules/lifecycle/tests/cascade.mjs",
       "mode": "0000644",
-      "sha256": "84deb32ae65e5b6ea1dca1e3a1a8ea6ed3d0ba113cae9dfe13a04893e47fed3d"
+      "sha256": "0734ad734ac5ef05c86fa81493c12fed08ffe421781d9ceeebe413c876bf9cf1"
     },
     {
       "path": "modules/lifecycle/version-autoclose.js",
@@ -7297,13 +7302,18 @@
     {
       "path": "modules/specialities/db.js",
       "mode": "0000644",
-      "sha256": "9fbd7dea94f5e4dae305f453961ad896c97113109d196dd42d077cfd6dd3b44a"
+      "sha256": "3e060dfa1aa11f4ca6c1949bb36599e24c33cfca6ba983c1ce740de67f6e1152"
     },
     {
       "path": "modules/specialities/migrations/specialities_001_specialities.sql",
       "mode": "0000644",
       "sha256": "055210da2726c1d17457900a9b44566c58f371b3206365c5352474114be57251"
     },
+    {
+      "path": "modules/specialities/migrations/specialities_002_offered.sql",
+      "mode": "0000644",
+      "sha256": "5d2c6a648b0a7eb85893c2a3302af721206cc0ca0f58420cb4281e427b86de7a"
+    },
     {
       "path": "modules/specialities/module.json",
       "mode": "0000644",
@@ -7312,12 +7322,12 @@
     {
       "path": "modules/specialities/routes/specialities.js",
       "mode": "0000644",
-      "sha256": "0454b2f40cd8c08ee49af494dd46ec94045a3a19a1c788341fe94048b6b67d0b"
+      "sha256": "132b28199202c742045c17bd930889d1a3327af1b17445d45d592bfc472bed76"
     },
     {
       "path": "modules/specialities/specialities.js",
       "mode": "0000644",
-      "sha256": "af69cd2808d9abc16a8d611348a632132f37876f4688e76ab244eab81afecb23"
+      "sha256": "413477a716f3a60abc0763bccfb10a593c4eb19301131de0230eb3d72ffee299"
     },
     {
       "path": "modules/status-ui/CLAUDE.md",
@@ -7792,12 +7802,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "aa6749d880220869386e00488652da7ae32a0116855dba519e6b943c47f7180c"
+      "sha256": "c314948249345b2ef9e9c43e7dc32287f3901882cbc0c4d51a475d568ed0fb76"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "966ab00e5b62d0280043e13e156ce400cd3afa3f7c5bc04f02eea79392fd26f3"
+      "sha256": "8be1abd0cb53633278698edda8b8b78edf57224e89eb3b08806ede49014dab6d"
     },
     {
       "path": "public-docs/index.html",
@@ -8062,7 +8072,7 @@
     {
       "path": "scripts/gds/category-advisory-guard.js",
       "mode": "0000644",
-      "sha256": "008fc7268a1e58b7e87b5454d0ca698e25cba3229172031587e934fe73fc33da"
+      "sha256": "a71ac076299b9e37bf8e0a6ff8761f8ba3059271b2596b6ee8941fc24533357d"
     },
     {
       "path": "scripts/gds/cf-tunnel.js",
@@ -8507,7 +8517,7 @@
     {
       "path": "scripts/gds/linkify-refs.js",
       "mode": "0000644",
-      "sha256": "40b8eff40117c1e62025c83afa1a3cfb91919935701b13b29b0b335c3f2ef323"
+      "sha256": "16e9c92e2466f92de1339eac911193807678c4c7d2c6b837ecd1195c102ebf56"
     },
     {
       "path": "scripts/gds/lint-infra-exec.js",
@@ -8822,7 +8832,7 @@
     {
       "path": "scripts/gds/run-unit-tests.js",
       "mode": "0000644",
-      "sha256": "c7ea33433208b0835808028fb81853509d97331b919a70314e1a02718e8ca0c0"
+      "sha256": "be80f6ea38abdbc71f5f718b51db9a54b931745859e885ea1a97ff9465a81596"
     },
     {
       "path": "scripts/gds/sandbox-stage.js",
@@ -9182,7 +9192,7 @@
     {
       "path": "scripts/gds/stale-worktrees.js",
       "mode": "0000644",
-      "sha256": "b615f8cdf4b1e74d997fff9e8eaa7f5c77276eefaa02f1a0c0becd80f8697620"
+      "sha256": "9f6ce80e5325f4cfe68cfa6cb82bec52d594af7e461b6734724819b23cbb0d37"
     },
     {
       "path": "scripts/gds/start.js",
@@ -9687,7 +9697,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "575b32eed8f62dad0302816f97e77604488891d13188bf5b690a867c37a962ac"
+      "sha256": "d26e3a559beac4c6431a5cf5476c7a0976798ec8b9174814c06f7d64fd1f6f91"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -11287,7 +11297,7 @@
     {
       "path": "tests/government_require_permission.mjs",
       "mode": "0000644",
-      "sha256": "8ae3eaaf0b7d9a0e93d58eda3d877abe4f59bed25ffbcdc4e42a67497398debf"
+      "sha256": "95a5215153c5d98f4fe9ecd3d36ca1ce76d9c486abef8f69dfca0ce3d5cfb006"
     },
     {
       "path": "tests/government_resolver.mjs",
@@ -11862,7 +11872,7 @@
     {
       "path": "tests/linkify_refs.mjs",
       "mode": "0000644",
-      "sha256": "f4e905823f8c3b7f540d3dbc6a9873198a26e022810b21194b2ae45ef9437954"
+      "sha256": "d072512abdd464716a6880a528da08bc3abb06fd7c69d59d075a699c665229a8"
     },
     {
       "path": "tests/live_channel.mjs",
@@ -11977,7 +11987,7 @@
     {
       "path": "tests/migration_allocation.mjs",
       "mode": "0000644",
-      "sha256": "e9271b1a67d201cfd075ce272b1a5a4f3b66c80dcfa5798ca3ea0d3f5048be43"
+      "sha256": "adc1a84f0b251a99471bd4f14367d949432476b0d504bff4de3ae0167eadfb30"
     },
     {
       "path": "tests/migration_namespace.mjs",
@@ -13239,6 +13249,11 @@
       "mode": "0000644",
       "sha256": "9de6fbffd858190096bc22d556ccae101a6206adeee05bb146bd2a0a1a59d15c"
     },
+    {
+      "path": "tests/speciality_offered.mjs",
+      "mode": "0000644",
+      "sha256": "13d7be30c41855ac4a39689bc88ea2be2c896ca071b884bbd0e81cc9c29bc180"
+    },
     {
       "path": "tests/spike_task_map.mjs",
       "mode": "0000644",
@@ -13267,7 +13282,7 @@
     {
       "path": "tests/stale_worktrees.mjs",
       "mode": "0000644",
-      "sha256": "97ca351bc03b3d56b99239739818c11fea384691ee597b54a0c4bef60be196f6"
+      "sha256": "3cc48273341fe8e71ba928ec7c474533d510b74d5b107cad6e3af278219ccd41"
     },
     {
       "path": "tests/start_env_guard.mjs",

package/.claude/skills/worktree-clean/SKILL.md

@@ -8,8 +8,9 @@ description: >-
 
 ## What this skill does
 
-1. `node scripts/gds/stale-worktrees.js` — the list. A worktree is **stale** when its branch is an ancestor of `origin/main` (the land happened) or the branch is gone (the ship deleted it). Detached worktrees and unmerged branches are **live** and never touched. Run `git fetch origin` first so "merged into main" reflects today's main, not the last fetch. The same call also names **husks** — directories under `.claude/worktrees/` that git does not list as worktrees at all (step 6).
-2. Show the stale list to the builder (names + why). The worktree holding the **current claim** is never stale by construction (its branch is unmerged), but say so if the builder asks.
+1. `node scripts/gds/stale-worktrees.js` — the list. A worktree is **stale** when its branch is an ancestor of `origin/main` (the land happened) or the branch is gone (the ship deleted it). Detached worktrees, unmerged branches, and branches sitting exactly at `origin/main` (a claim worktree with no commits yet — task 1003912) are **live** and never touched. Run `git fetch origin` first so "merged into main" reflects today's main, not the last fetch. The same call also names **husks** — directories under `.claude/worktrees/` that git does not list as worktrees at all (step 6).
+2. Show the stale list to the builder (names + why). A worktree holding a **live claim** should not appear: an unmerged branch is live, and since task 1003912 so is a branch still sitting exactly at `origin/main` — the window between `worktree.js add` and the builder's first commit, during which a live claim's tree really did read as "merged into main".
+   - Do not treat that as a guarantee. This list is derived from git alone, with no knowledge of who holds what, so **if a name on it looks like someone's live claim, ask before removing it.** The assurance this replaced — that a current claim could not possibly be listed — is exactly what would stop an agent double-checking.
 3. For each stale name: `node scripts/gds/worktree.js remove <name>`. That helper unlinks any node_modules junction BEFORE `git worktree remove`, which is the whole reason raw git is off-limits here (learning in `scripts/gds/CLAUDE.md` → "Gotchas / invariants"; the `git-guard.js` PreToolUse hook blocks the raw form).
    - A worktree with untracked leftovers (`.playwright-mcp/`, a stray screenshot) refuses without `--force`. Show the `git -C <path> status --porcelain` output; if it is only untracked junk, re-run with `--force`. If it shows **modified tracked files**, skip it and report — someone's uncommitted work is not this skill's to delete.
 4. `git worktree prune` — clears any registrations whose directory is already gone.

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 390 operations across 59 resource groups
+- 393 operations across 59 resource groups
 
 ## Use it from your project
 

package/clients/bongos-client/bongos-client.global.js

@@ -857,6 +857,12 @@ function createClient(opts = {}) {
       postSpecialitiesIdDocuments: (args) => request("POST", "/specialities/{id}/documents", { hasBody: true }, args),
       // DELETE /specialities/{id}/documents/{docId} — rank: any-builder — DELETE /specialities/:id/documents/:docId
       deleteSpecialitiesIdDocumentsDocId: (args) => request("DELETE", "/specialities/{id}/documents/{docId}", { hasBody: false }, args),
+      // POST /specialities/{id}/offer — rank: metic+archon — POST /specialities/:id/offer
+      postSpecialitiesIdOffer: (args) => request("POST", "/specialities/{id}/offer", { hasBody: true }, args),
+      // POST /specialities/{id}/unoffer — rank: metic+archon — POST /specialities/:id/unoffer
+      postSpecialitiesIdUnoffer: (args) => request("POST", "/specialities/{id}/unoffer", { hasBody: true }, args),
+      // GET /specialities/offered — rank: any-builder — GET /specialities/offered
+      getSpecialitiesOffered: (args) => request("GET", "/specialities/offered", { hasBody: false }, args),
     },
     "sso": {
       // POST /sso/activity/rollup — rank: public — POST /sso/activity/rollup

package/clients/bongos-client/index.cjs

@@ -856,6 +856,12 @@ function createClient(opts = {}) {
       postSpecialitiesIdDocuments: (args) => request("POST", "/specialities/{id}/documents", { hasBody: true }, args),
       // DELETE /specialities/{id}/documents/{docId} — rank: any-builder — DELETE /specialities/:id/documents/:docId
       deleteSpecialitiesIdDocumentsDocId: (args) => request("DELETE", "/specialities/{id}/documents/{docId}", { hasBody: false }, args),
+      // POST /specialities/{id}/offer — rank: metic+archon — POST /specialities/:id/offer
+      postSpecialitiesIdOffer: (args) => request("POST", "/specialities/{id}/offer", { hasBody: true }, args),
+      // POST /specialities/{id}/unoffer — rank: metic+archon — POST /specialities/:id/unoffer
+      postSpecialitiesIdUnoffer: (args) => request("POST", "/specialities/{id}/unoffer", { hasBody: true }, args),
+      // GET /specialities/offered — rank: any-builder — GET /specialities/offered
+      getSpecialitiesOffered: (args) => request("GET", "/specialities/offered", { hasBody: false }, args),
     },
     "sso": {
       // POST /sso/activity/rollup — rank: public — POST /sso/activity/rollup

package/clients/bongos-client/index.d.ts

@@ -137,6 +137,7 @@ export interface GetSessionsMineResponse { sessions: unknown; count: unknown }
 export interface GetSessionsSearchResponse { sessions: unknown; count: unknown; total: unknown; totals: unknown; limit: unknown; offset: unknown }
 export interface GetSpecialitiesIdDocumentsResponse { documents: unknown }
 export interface GetSpecialitiesIdResponse { speciality: unknown }
+export interface GetSpecialitiesOfferedResponse { suggestions: unknown }
 export interface GetSpecialitiesResponse { specialities: unknown }
 export interface GetSsoPubkeyResponse { alg: unknown; format: unknown; public_key_b64: unknown }
 export interface GetTaskRecommendationsForMeResponse { recommendations: unknown; count: unknown }
@@ -385,6 +386,8 @@ export interface PostSpecialitiesIdAbandonResponse { ok: boolean; was_active: un
 export interface PostSpecialitiesIdAdoptResponse { adoption: unknown }
 export interface PostSpecialitiesIdDocumentsRequest { title: string; body_md: string; source?: string }
 export interface PostSpecialitiesIdDocumentsResponse { skipped?: boolean; reason?: unknown; document?: unknown }
+export interface PostSpecialitiesIdOfferResponse { speciality: unknown }
+export interface PostSpecialitiesIdUnofferResponse { speciality: unknown }
 export interface PostSpecialitiesRequest { name: string; discipline: string; summary?: string; contract_md?: string; visibility?: string; sellable?: boolean }
 export interface PostSpecialitiesResponse { speciality: unknown }
 export interface PostSsoActivityRollupRequest { client_id: string; client_secret: string; github_id: StringifiableId; credits?: number; tasks_shipped?: number; karma?: number; rank?: string; disciplines?: unknown; recent_ships?: unknown }
@@ -1219,6 +1222,12 @@ export interface BongosClient {
     postSpecialitiesIdDocuments(args: RequestArgs & { body: PostSpecialitiesIdDocumentsRequest }): Promise<PostSpecialitiesIdDocumentsResponse>;
     /** DELETE /specialities/{id}/documents/{docId} — rank: any-builder */
     deleteSpecialitiesIdDocumentsDocId(args?: RequestArgs): Promise<DeleteSpecialitiesIdDocumentsDocIdResponse>;
+    /** POST /specialities/{id}/offer — rank: metic+archon */
+    postSpecialitiesIdOffer(args?: RequestArgs): Promise<PostSpecialitiesIdOfferResponse>;
+    /** POST /specialities/{id}/unoffer — rank: metic+archon */
+    postSpecialitiesIdUnoffer(args?: RequestArgs): Promise<PostSpecialitiesIdUnofferResponse>;
+    /** GET /specialities/offered — rank: any-builder */
+    getSpecialitiesOffered(args?: RequestArgs): Promise<GetSpecialitiesOfferedResponse>;
   };
   "sso": {
     /** POST /sso/activity/rollup — rank: public */

package/clients/bongos-client/index.mjs

@@ -853,6 +853,12 @@ export function createClient(opts = {}) {
       postSpecialitiesIdDocuments: (args) => request("POST", "/specialities/{id}/documents", { hasBody: true }, args),
       // DELETE /specialities/{id}/documents/{docId} — rank: any-builder — DELETE /specialities/:id/documents/:docId
       deleteSpecialitiesIdDocumentsDocId: (args) => request("DELETE", "/specialities/{id}/documents/{docId}", { hasBody: false }, args),
+      // POST /specialities/{id}/offer — rank: metic+archon — POST /specialities/:id/offer
+      postSpecialitiesIdOffer: (args) => request("POST", "/specialities/{id}/offer", { hasBody: true }, args),
+      // POST /specialities/{id}/unoffer — rank: metic+archon — POST /specialities/:id/unoffer
+      postSpecialitiesIdUnoffer: (args) => request("POST", "/specialities/{id}/unoffer", { hasBody: true }, args),
+      // GET /specialities/offered — rank: any-builder — GET /specialities/offered
+      getSpecialitiesOffered: (args) => request("GET", "/specialities/offered", { hasBody: false }, args),
     },
     "sso": {
       // POST /sso/activity/rollup — rank: public — POST /sso/activity/rollup

package/docs/adr/0298-the-reader-lens-is-advisory-and-waits-on-a-voice-guide.md

@@ -0,0 +1,121 @@
+# ADR 0298 — The grader gets a reader lens: advisory, scoped to copy-bearing diffs, and it waits on a written voice
+
+**Status:** accepted · **Date:** 2026-09-17 · **Task:** [task 1003937](https://cloudbongos.com/builders#/task/1003937) (goal 1000095 — Working area 6, the artist experience)
+
+**Related:** [ADR 0241](0241-the-artist-gate-is-a-per-project-deploy-gate-that-reads-a-state.md) (the artist holds a deploy, never a ship) · [ADR 0242](0242-a-cascade-is-a-declaration-table-on-the-event-that-already-exists.md) (a cascade is a row, not a runner edit) · [ADR 0024](0024-multi-agent-system-architecture.md) (the panel) · [ADR 0233](0233-a-copy-proposal-is-a-task-carrying-a-patch.md) (there is no live CMS)
+
+## Context
+
+Every artist review the cascade files opens with the same instruction:
+
+> STEP 1 — REVIEW THE GRADER, not only the work. Read how the grader judged task N's copy
+> and visuals, and coach it: where was it right, and where did it miss what an artist would
+> catch? … this step is the one that compounds.
+
+It cannot be followed, and [task 1003937](https://cloudbongos.com/builders#/task/1003937)
+established why across four reviews worked on 2026-09-15 — 1003621 (of
+[task 1003583](https://cloudbongos.com/builders#/task/1003583)), 1003831 (of
+[task 1003761](https://cloudbongos.com/builders#/task/1003761)), 1003833 (of
+[task 1003828](https://cloudbongos.com/builders#/task/1003828)) and 1003836 (of
+[task 1003829](https://cloudbongos.com/builders#/task/1003829)). The grade itself reads back
+fine; `GET /tasks/:id?include=grade` returns scores, verdict, rubric and per-worker notes. The
+problem is what comes back. `modules/grading/grader-rubric.json` v4.0 runs four lenses:
+
+| worker | judges |
+|---|---|
+| `narc` | semantic completion — description vs diff |
+| `quality` | code quality (idiom, dead code, tests) + economy |
+| `hacker` | security red-team |
+| `efficiency` | runtime cost, hot paths |
+
+None of them reads a sentence for whether it is true, clear, in the project's voice, or worth
+a person's attention. There is no axis an artist can coach. All four graded tasks passed, and
+all four deserved to pass on the axes that were measured — the gate is not too lenient, it is
+not pointed at this.
+
+**One partial mechanism already exists, and its limit is the shape of the gap.**
+`modules/grading/grader-prompt.js` injects the craft's written responsibility into the panel
+prompt — *"No slop in the appearance and text of the project; the story, emotion and ideology
+of the project are communicated effectively; project purpose and gravitas are upheld"* — but
+only when `task.discipline === 'artist'`. All four graded tasks were engineer ships. So the
+unjudged case is exactly **copy shipped by someone whose craft is not the copy**, which is
+most of it.
+
+## Decision
+
+A fifth panel worker — the **reader** — scoring a copy/voice axis. Three things were open;
+the owner settled all three on 2026-09-17.
+
+### 1. It runs on copy-bearing diffs only, not on every ship
+
+The panel already runs four subagents per ship. A fifth on every ship is a standing spend
+increase on the large majority of ships that change no visible string.
+
+The predicate is not new work: `hasCopyOrVisualWork(task)` in `modules/lifecycle/cascade.js`
+already decides, for the artist-review cascade, whether a shipped task put copy or visuals in
+front of a person — `source === 'copy-proposal'`, `discipline === 'artist'`, or a
+`module_key` in the explicit `COPY_VISUAL_MODULES` set. **The reader lens keys off the same
+predicate.** One definition of "this ship is copy-bearing", used by both the after-the-fact
+review and the at-ship lens, so the two can never disagree about what they cover. Widening
+that set widens both at once, deliberately.
+
+Where the predicate says no, the panel is exactly what it is today and costs exactly what it
+costs today.
+
+### 2. It is advisory — findings, never a verdict
+
+The reader records `issues[]` and a `copy_score`. It **cannot** verdict `fail`, and it cannot
+drag the panel to `concerns`.
+
+This is not caution, it is [ADR 0241](0241-the-artist-gate-is-a-per-project-deploy-gate-that-reads-a-state.md)
+applied as written. That ADR settled that an artist's judgement may hold a **deploy**, decided
+per project, and never a **builder's ship** — after ADR 0162 retired review gates for stranding
+graded-PASS work. A reader worker that could verdict `fail` would put an artist-shaped
+judgement back on the ship path, which is the precise thing 0241 removed. Gating it would
+require amending 0241 first, and nothing here justifies that.
+
+Advisory is also what makes STEP 1 answerable: the artist's review reads the reader's findings
+and coaches *them*, which is a real conversation with a real counterpart, rather than coaching
+four lenses that were never looking.
+
+### 3. It waits on a written voice, and does not ship before one exists
+
+A copy lens needs a standard to judge against or it is a second model's taste wearing a
+score. The instance's voice is, today, almost entirely unwritten:
+
+| source | what it actually carries |
+|---|---|
+| `DESIGN.md` | one hard copy rule — no em/en dash in visible copy, no emoji |
+| `config/branding.neutral.json` | a tagline and a handful of fixed strings |
+| `docs/copy-registry.json` | which 1,860 strings exist — not what good is |
+| `src/role-responsibilities.js` | one sentence, and it only reaches artist-discipline ships |
+
+So the build order is fixed: **voice guide first, reader second.** The reader worker is not
+started until the guide is written, and the guide is the artist's own work, not an agent's
+draft of it. A lens built against the four rows above would be recording opinions and calling
+them findings, and that residue would be worse than the silence it replaced — a score nobody
+can appeal to a standard is harder to remove than a missing score.
+
+### 4. Until the reader exists, the cascade brief says something an artist can do
+
+STEP 1 stays — the instinct behind it is right and this ADR is the proof that it compounds —
+but it stops asking for coaching that has no recipient. In the interim it asks the artist to
+record *where the grade missed what an artist would catch*, naming that the record is the
+evidence this lens is being built from. That is followable today, it produces exactly the
+corpus the voice guide needs, and it converts back into true coaching the moment the reader
+lands.
+
+## Consequences
+
+- `modules/lifecycle/cascade.js` — STEP 1 rewritten to an instruction that can be carried out,
+  pointing at this ADR. No change to the predicate, the trigger, the anti-recursion guard, or
+  the fact that the review blocks nothing.
+- Two follow-up tasks are filed at `backlog`, in order, with the dependency edge wired:
+  [task 1003976](https://cloudbongos.com/builders#/task/1003976) — the **voice guide** (artist) —
+  then [task 1003977](https://cloudbongos.com/builders#/task/1003977) — the **reader worker**
+  (engineer, `depends_on` 1003976, so it cannot reach `ready` until the guide ships).
+  Neither is started by this ADR.
+- The rubric, the active panel, and every existing worker are untouched. No ship's cost or
+  verdict changes as of this decision.
+- If the voice guide is never written, the reader is never built, and STEP 1 is still honest —
+  which is the outcome this ADR is careful to leave standing rather than forcing.

package/docs/adr/README.md

@@ -389,3 +389,4 @@ This keeps the decision history honest and traceable.
 | 0295 | [**The registry is the witness the publish lane cannot be** ([task 1003916](https://cloudbongos.com/builders#/task/1003916), goal 1000090). On 2026-09-13 eight publish runs failed over three hours and NOTHING reported it; it was found by a person idly reading the npm version list. Task 1003914 fixed the lossiness and left the silence, which is structural: a failed run is one red row nobody watches, `main` self-heals on the next merge and **erases the evidence**, and the lane's own verdict step writes to a job summary no one reads. Same shape as the nightly upgrade sweep that died reporting `failed=0`. **Decision: a separate reader compares what the lane ANNOUNCED (release commits) against what the registry HOLDS**; the difference is a phantom. The publisher infers from git because OIDC trusted publishing carries no read credential — **that never bound a reader**, and since task 1003872 the package is public, so an anonymous read needs none. Keeping witness and publisher separate IS the point. Daily not hourly (billable minutes, against a failure measured in hours), cadence pinned to the cron by `routine-schedule.js`; deliberately NOT on the session-start path (a third-party call behind a hook timeout). Healthy days are SILENT in Discord — findings to stdout, the all-clear to stderr — because a channel of reassurances stops being read. Two false-alarm sources, each guarded: a closed incident is permanent history (a 3-day window, by TIME not commit count, which a release burst would outrun), and **npm acknowledges a publish before its listing shows it** — found by RUNNING the check, which flagged 1.19.794 fifteen minutes after a publish whose log ended `published @bongos/core@1.19.794` and whose per-version endpoint answered 200; hence a 30-minute grace period plus per-version confirmation, with the listing only ever nominating suspects. A failed read throws rather than reading as "nothing missing". Proven by replaying the REAL outage from git + the live registry, not a synthetic failure. Does NOT detect a lane that stopped being triggered.](0295-the-registry-is-the-witness-the-lane-cannot-be.md) | release / observability |
 | 0296 | [**A role speciality is data over three existing surfaces, not a fourth mechanism** ([task 1003855](https://cloudbongos.com/builders#/task/1003855), goal 1000095). A craft says HOW you work; nothing said what you work ON. A speciality is a named bundle of knowledge, skills and an interaction contract sitting under a craft — an ideator with an Economics speciality. **Decision: it is DATA, not an ADR 0083 code module** — a subject-matter expert authors one, and requiring them to ship a package puts the mechanism out of reach of exactly the person it exists for. It layers over three surfaces that already exist (discipline-modes.json, the `behavior_prefs.interaction` contract path, the manifest contribution seam); only the knowledge bundle is new. The contract **rides the existing GET /me -> Conductor injection path rather than adding a second one**, and is CRAFT-SCOPED: the hook injects only the contract matching the claim in hand (which needed `t.discipline` on the active-claims read), and with no claim there is no craft and **nothing is injected** — silence beats guessing which expertise applies. Training is two-fold per the owner's 2026-09-17 ruling: documents they supplied, plus learnings captured from sessions worked in it (pointing at existing `learnings` rows, never a second corpus). The corpus is **inventoried, never inlined** — a document may run to 100k chars — so `speciality_documents` joins the recall ingester, because otherwise the contract's "search it with /recall" is a lie whose failure is silent. **`sellable` is recorded with no storefront behind it**: ADR 0107 defers the marketplace and explicitly rejected building one, so the flag captures the owner's decision when they make it and grants nothing — a deliberate partial implementation, recorded rather than silently made. Index scoping errs toward UNDER-sharing: only a public speciality's documents are corpus-wide, because `project` names a set the index cannot express.](0296-a-role-speciality-is-data-over-three-existing-surfaces.md) | roles / modules |
 | 0297 | [**A task’s creator may retire it, and that is the ownership axis’s first route** ([task 1002443](https://cloudbongos.com/builders#/task/1002443), goal 1000095 — owner request 2026-07-25: *"the creator of that task should be able to abandon that task directly inside of the UI"*). Attribution itself shipped earlier and elsewhere (`core_227`, [task 1003278](https://cloudbongos.com/builders#/task/1003278)); what had not moved is that **retiring a task was a rank power and nothing else** — `task.abandon` floors at `metic` (ADR 0152), so a sub-Metic builder could file a task and then could not withdraw their own proposal. The model already had the vocabulary and had never used it: ADR 0151 §3 defines an **ownership axis** where a `scope:'own'` key authorizes nothing until a handler supplies the row's owner, R100 made `requirePermission` refuse such a key outright so `.own` can never degrade into `.any`, and it recorded that **zero call sites passed one**. This is that axis’s first real consumer. **Decision: two authorities, only one rank-shaped** — `task.abandon` (metic, any task) OR new `task.abandon.own` (xenos, a task you created, while it is still backlog/ready/blocked). Route becomes `requireBuilder` + an in-handler decision (the `POST /goals/:id/members` shape), pin `metic+archon`→`any-builder` so it now catches an accidental **tightening** as loudly as a gate removal. **The two facts resolve in two places on purpose:** the RANK fact is request-scoped and resolves before the transaction (uncached, ADR 0016); the OWNER fact is a column that can change under us, so `created_by` joins `abandonTask`’s existing `FOR UPDATE` SELECT and a new optional `authorize` callback decides under that lock. Reading `created_by` in the route would be a TOCTOU window; resolving permissions inside the transaction would hold a row lock across a second pool acquire. The decision is a PURE module (`abandon-authz.js`, the `goal-route-authz.js` precedent) so every branch is pinned DB-free and the hall hint and server verdict provably read one rule. **A creator’s window stops at the grader** — completed/confirmed stay cross-owner, because past the grader a retire is a ledger correction, not an author changing their mind; nothing is subtracted from `task.abandon`, pinned by a test. `counterpart: ['task.abandon']` is declared not derived, verb `act` not `manage` — `manage` would silently dominate every future narrower `task.*.own` key (the verb-blind escalation task 1003195 closed). **A null creator belongs to nobody and that is load-bearing:** ~1,357 pre-`core_227` tasks plus seed/restock/discord vectors are unattributed, so the owner comparison is the government resolver’s own — injected, never re-implemented, since a duplicated ownership comparison is how one quietly widens — and one slip would open every historical task to a xenos grant at once. Fail-closed throughout: a missing `government` port, a throwing resolver, and anything but an explicit `{ok:true}` all deny, and `authorize` runs BEFORE the idempotent already-abandoned return and the shipped/active-claim guards so an unauthorized caller cannot probe a row through a 200. No guard removed. Does NOT widen edit/promote/dependency (still Metic), does not touch `task.merge`, and does not backfill attribution — the control simply does not appear on tasks predating `core_227`.](0297-a-tasks-creator-may-retire-it.md) | authority / lifecycle / ownership |
+| 0298 | [**The grader gets a reader lens: advisory, scoped to copy-bearing diffs, and it waits on a written voice** ([task 1003937](https://cloudbongos.com/builders#/task/1003937), goal 1000095 — Working area 6; owner decision 2026-09-17). Every artist review the cascade files opened with *“REVIEW THE GRADER … coach it”*, and it could not be followed: the v4 panel runs narc, quality, hacker and efficiency — completion, code quality, security, runtime cost — and not one of them reads a sentence for whether it is true, clear, in the project’s voice or worth a person’s attention. Four consecutive reviews hit the same wall and all four graded ships deservedly PASSED on the axes that were measured; the gate is not lenient, it is not pointed at this. `grader-prompt.js` already injects the craft’s written responsibility, but only when `discipline === ‘artist’`, so the unjudged case is copy shipped by someone whose craft is not the copy. **Decision: a fifth ADVISORY `reader` worker, on three settled terms.** It runs only where `modules/lifecycle/cascade.js`’s existing `hasCopyOrVisualWork` says the ship is copy-bearing — the same predicate the after-the-fact review uses, so the two can never disagree about coverage, and every other ship costs exactly what it costs today. It records `issues[]` and a `copy_score` and can never verdict `fail` or drag the panel to `concerns`, because [ADR 0241](0241-the-artist-gate-is-a-per-project-deploy-gate-that-reads-a-state.md) put the artist’s judgement on the DEPLOY and off the ship path; gating would need that ADR amended first. And it is NOT BUILT until the instance writes a voice guide — today the whole written standard is one dash rule in `DESIGN.md`, a tagline, a registry of which 1,860 strings exist, and one responsibility sentence, so a lens built now would record taste and call it a finding. Until the reader exists, STEP 1 asks the artist to WRITE DOWN what the grade could not see rather than to coach a lens that is not listening — followable today, and the corpus both the guide and the lens get written from. Nothing in the rubric, the active panel or any existing worker changes.](0298-the-reader-lens-is-advisory-and-waits-on-a-voice-guide.md) | grading / the artist’s loop / voice |