@bongos/core 1.19.880 → 1.19.882

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.880",
-  "core_contract": "1.19.880",
-  "source_commit": "2f26939ed662da745954ce32fee3595f6dc28c27",
+  "core_version": "1.19.882",
+  "core_contract": "1.19.882",
+  "source_commit": "53773e5b697f506fc84dd9bea64f16a7bf5e3ed7",
   "source_ref": "HEAD",
-  "built_at": "2026-09-19T15:52:14.710Z",
+  "built_at": "2026-09-19T18:55:17.107Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 501,
     "agent_docs_stubbed": 26,
-    "functional_verbatim": 2311,
+    "functional_verbatim": 2312,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 2838,
-  "tree_sha256": "4187118828e287221f1a30eb82e0e90ddf11f6897193719263c1c1f444e0b190",
+  "file_count": 2839,
+  "tree_sha256": "75c8382243dd3244295f5de5f2f89f988899b41aaee0d8f212952a215c78bf00",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -367,7 +367,7 @@
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "b96f7c4b0cebc844c5fab5aa61420f85d9681afd98824aeda0179de871d5d3b9"
+      "sha256": "97df7667d10d5678cfdbdcd496b51bec50add8ce83fb1b642ad7d42fcb362cec"
     },
     {
       "path": "clients/bongos-client/index.mjs",
@@ -2012,7 +2012,7 @@
     {
       "path": "docs/adr/0304-routine-reads-run-without-a-prompt-and-anything-a-flag-can-turn-into-a-write-is-exact-form.md",
       "mode": "0000644",
-      "sha256": "104b5675fe52c1725dbbc78ab6fde9fd676b4020bf0e3f05411733c95d4342e0"
+      "sha256": "07f8739f97ff38414993a4d7e4ca62ad24c540e77e54e3aedb631d584da9ada0"
     },
     {
       "path": "docs/adr/0305-a-recipe-lives-with-what-it-documents.md",
@@ -2042,12 +2042,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "eb881abdd3d46576e6e2ca2993130c897812497b70788449fbfef78ceed51d23"
+      "sha256": "6ea97c68b9346b508489108ef1dde08daea5354ab8276ae0959f25e4528289f9"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "93e072990ee62849e1b8a05e7e006a6327bc749cc5a42b873f6fa339c85297d5"
+      "sha256": "5ca72d280163127bea9ec0867c80023041b22040e47531a290481e15c6e26fba"
     },
     {
       "path": "docs/architecture.md",
@@ -2072,12 +2072,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "b800d3d65303e6c6119b415b4d9cf0b8e4b4e45bab6c8389a7b6b69c65ca67c9"
+      "sha256": "975590f5b51bb0fbdcace395fe2700ebb6113ed463d29e479072ed1b00476053"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "d3711a4d8dad63db8d2e83d7b5ecee2153393a1db817eebe55ff8fe2d6d7c136"
+      "sha256": "5f70fd3dc4880222ab4cf6b98a8ed8a848dd06e4e88b9a0481541a7fc5030cac"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2592,7 +2592,7 @@
     {
       "path": "docs/file-map.md",
       "mode": "0000644",
-      "sha256": "2167e2e5032134519155d0f19fdc691caf0199c76c171a81216daa8aac307d24"
+      "sha256": "89bfd7d8da1430abf5d67caf8cba4bf18be0ea934f656145068a0e5622d8efa5"
     },
     {
       "path": "docs/handoff-template.md",
@@ -2602,7 +2602,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "442827d2f7b350ebebc567a16a8b0b4388acb1e3a29babbeec38a3cd1d62f344"
+      "sha256": "9be0e20f1f760b01e4fdbd63ab26034c7b327be17ffd56898f775d40e12aad1f"
     },
     {
       "path": "docs/modules-contract.md",
@@ -2692,7 +2692,7 @@
     {
       "path": "docs/project-context.template.md",
       "mode": "0000644",
-      "sha256": "2c2ef72ebd04afcaeb34d86176cf9df9d69d31dd42368932ffcea76203f08182"
+      "sha256": "ce903d2f7e9df2b8fb1448e0ef7de4269beb0fa5f509aa5d8aea03d043370684"
     },
     {
       "path": "docs/recipes/README.md",
@@ -5187,7 +5187,7 @@
     {
       "path": "modules/hall-ui/public/primer.js",
       "mode": "0000644",
-      "sha256": "c3abf8c3068756df817dfe5bae84fe8a8e7f8215b394cdfa0e18d194cc820ba3"
+      "sha256": "862be6ec9f2846f7caeabbfd982ec04a7c65a56d4b042dc9fb8e899b4735284e"
     },
     {
       "path": "modules/hall-ui/public/primer.states.json",
@@ -5277,7 +5277,7 @@
     {
       "path": "modules/hall-ui/public/roadmap.css",
       "mode": "0000644",
-      "sha256": "94aa72d38991e04def83c19ec2ce232f8c2f7d4fb0f51e499c24284f28526236"
+      "sha256": "ea64e6904225470e20d8bb4a0d18f39f7a1e70406ecdec67ed9abaaf2880fc85"
     },
     {
       "path": "modules/hall-ui/public/roadmap.html",
@@ -5287,7 +5287,7 @@
     {
       "path": "modules/hall-ui/public/roadmap.js",
       "mode": "0000644",
-      "sha256": "65f39048e4fda07ddfec5bcf5262ca76ea1bd186ad8452ac6a3f0c9b1b6e1a62"
+      "sha256": "cddeb1d315e7222724199fef9a3045f2c7def92a63c56d0151c5e45a38ff7b3d"
     },
     {
       "path": "modules/hall-ui/public/roadmap.states.json",
@@ -5692,7 +5692,7 @@
     {
       "path": "modules/lifecycle/db-versions.js",
       "mode": "0000644",
-      "sha256": "4b0681bf2bc7cd40a0a7bcdc9d2fab033c735390555be54b0a1083e5fa231abd"
+      "sha256": "f5f056b9d8f8147956e7bc088b9cf729d0e5563d0f36cbd260388ea1deba0a8a"
     },
     {
       "path": "modules/lifecycle/db.js",
@@ -5967,7 +5967,7 @@
     {
       "path": "modules/lifecycle/routes/versions.js",
       "mode": "0000644",
-      "sha256": "d69b98e63306141aa01d064b82a249a05b96aa010404cebd00edbc887107e52d"
+      "sha256": "f26de67bbb2bc311e3c258cb8946402006c8705653edbb020435a9e7653945d7"
     },
     {
       "path": "modules/lifecycle/routes/visuals.js",
@@ -6027,7 +6027,7 @@
     {
       "path": "modules/lifecycle/version-autoclose.js",
       "mode": "0000644",
-      "sha256": "06e035b8d1545d68a0e629e707ea7f86d48fac5dc8fe0c5e70ec8704508ecf7c"
+      "sha256": "28b656a9c2688246ca3da7c9eb20da552a3487e2a7412315a49577db9570dc4f"
     },
     {
       "path": "modules/lifecycle/version-close.js",
@@ -7927,12 +7927,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "129e1218c8dc48a738c2def59f546f4c1bc7363fdcc34b4b0df725f37acb4ff6"
+      "sha256": "3062290396748c314e30d2e8d5fc37771f16add79c0a3e2260ff0c4f75fa1244"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "c6f4f3d2c70e591d7cbb6307dc74180dbc95aaa5a15ca37546b253c891ce98bd"
+      "sha256": "1c24014839d73e6c52495564dbf5b7c62a56770849a6985575f7ae6715dd088f"
     },
     {
       "path": "public-docs/index.html",
@@ -8282,7 +8282,7 @@
     {
       "path": "scripts/gds/claude-materialize.js",
       "mode": "0000644",
-      "sha256": "30fa12a96df4e9eda7e81f5abe3886caa0fb7dd277e37c5f6388c9acc429950e"
+      "sha256": "8ac759488eef696a18a0035f51deed3b537c44f28d0191a108692b2399ae1787"
     },
     {
       "path": "scripts/gds/claude-md-template.js",
@@ -8662,7 +8662,7 @@
     {
       "path": "scripts/gds/init.js",
       "mode": "0000644",
-      "sha256": "e1fbe45a7619cd5000b5bb34c80bbd63c2591dcc78a64188870847e5da049448"
+      "sha256": "f24475957efcba217133ef05c297e5a9f11d78ae884a6e7286084723d9daf912"
     },
     {
       "path": "scripts/gds/install-git-hooks.js",
@@ -8907,7 +8907,7 @@
     {
       "path": "scripts/gds/provision-repo.js",
       "mode": "0000644",
-      "sha256": "2ce976a62d123a284172c054bbc378c33977d2efda44e4b94ef2751a2626944d"
+      "sha256": "d0ddb9cbd67fdef45d72d29994e772239044bcfb45ccaf81e3e54783c588d970"
     },
     {
       "path": "scripts/gds/provision-teardown.js",
@@ -9937,7 +9937,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "11746898d037e5ea3386297c7e76ff78e2c8129562e214f801652f949c282e72"
+      "sha256": "8f029fa54f8656711dea16cd051c3c13eb3e6b277d9f8786980bab6361b75bfb"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -10119,6 +10119,11 @@
       "mode": "0000644",
       "sha256": "51274ba95e93269568b1df338fbadd9345bebbe8e09484d821682dd78a72b120"
     },
+    {
+      "path": "tests/allow_rule_guard.mjs",
+      "mode": "0000644",
+      "sha256": "f4c30504e6240d68774e8960d031888616074d90e60e0edb5adddec2c820ac75"
+    },
     {
       "path": "tests/api_alias_exceptions.mjs",
       "mode": "0000644",
@@ -10552,7 +10557,7 @@
     {
       "path": "tests/box_ship_permissions.mjs",
       "mode": "0000644",
-      "sha256": "64f5579330de35b040c73fe87856d135a89769cf8d9c1037b73de7ad41b98acd"
+      "sha256": "19f3547c2ba64e7b965512f2da3bc2689b39e79739b60deee7b4b750b588345c"
     },
     {
       "path": "tests/box_sweep_docs.mjs",
@@ -10712,7 +10717,7 @@
     {
       "path": "tests/claude_materialize.mjs",
       "mode": "0000644",
-      "sha256": "36c52641c98217d42c38853c5dd78d4d4eb51ee97005380318db5adb2aa71d28"
+      "sha256": "6354cd31332b41d64ada0c89363c5a17b9bbb5e5589e3bcf993afc7614591782"
     },
     {
       "path": "tests/clawback_confirmed_backlog.mjs",
@@ -11942,7 +11947,7 @@
     {
       "path": "tests/host_topology_skips.mjs",
       "mode": "0000644",
-      "sha256": "22ac76bc38e6b52262a2afb664b6f883066daaa2864ad71d971f7ff2a6995d28"
+      "sha256": "73d41870f08c804771fff35796fcfab41b67fec27954f9434025e12d8db5fe86"
     },
     {
       "path": "tests/hub_disconnect_ui.mjs",
@@ -12112,7 +12117,7 @@
     {
       "path": "tests/init.mjs",
       "mode": "0000644",
-      "sha256": "945aaac204e9e60772d3e7b361c97c099d236e6be6b4b794cce36ecb391d8a1a"
+      "sha256": "26629f6a3882b35f6844b8f0f9af9221e53a0906bb89401e8e23b3e5aee8d1f0"
     },
     {
       "path": "tests/instance_config.mjs",
@@ -12907,7 +12912,7 @@
     {
       "path": "tests/provision.mjs",
       "mode": "0000644",
-      "sha256": "396c26ec06858534e692d0ce1452d1944ea573743e6955df8e5ac22a655bfcdb"
+      "sha256": "642ba54a20f08df1514f94114d39cdb70427f93542f4c060c83251ad1f46c80a"
     },
     {
       "path": "tests/provision_caddy_wiring.mjs",
@@ -14092,7 +14097,7 @@
     {
       "path": "tests/version_first_goal.mjs",
       "mode": "0000644",
-      "sha256": "52e6115ac6af363db16358c1264b01d3295d013db1a986a9c21fdb8ba58f4119"
+      "sha256": "c1c7f1ecb7bc675f1fef7bdecda8a9116f8f3dc753efdd0805821690c188e160"
     },
     {
       "path": "tests/version_literals.mjs",
@@ -14117,7 +14122,7 @@
     {
       "path": "tests/versions_route.mjs",
       "mode": "0000644",
-      "sha256": "1e439ad083cb9a345fafc952d9527979c59d9ef9ca875e4aa1eb602b5227dc22"
+      "sha256": "e6bb09694e578571273ecf8997776b5b9879fbbb33a90811d24c5d0592d39c41"
     },
     {
       "path": "tests/visibility_pull.mjs",

package/clients/bongos-client/index.d.ts

@@ -434,7 +434,7 @@ export interface PostVersionsIdCloseRequest { reason?: string; dispositions?: Re
 export interface PostVersionsIdCloseResponse { ok: boolean; version: unknown; applied: unknown; promoted: unknown; carried: unknown }
 export interface PostVersionsIdDoneWhenRequest { criterion_id: string; criterion_md: string; goal_id?: number; sort_order?: number }
 export interface PostVersionsIdDoneWhenResponse { ok: boolean; criterion: unknown }
-export interface PostVersionsRequest { id: string; name: string; status?: string; track?: string; done_when?: string; scope_doc_path?: string; criteria?: unknown[]; first_goal?: Record<string, unknown> }
+export interface PostVersionsRequest { id: string; name: string; status?: string; done_when?: string; scope_doc_path?: string; criteria?: unknown[]; first_goal?: Record<string, unknown> }
 export interface PostVersionsResponse { version: unknown; goal: unknown; criteria: unknown }
 export interface PutGovernmentRanksRankKeyPermissionsPermissionKeyResponse { ok: boolean; rank_key: unknown; permission_key: unknown; granted: unknown }
 export interface PutMingleOptInRequest { opted_in: boolean }

package/docs/adr/0304-routine-reads-run-without-a-prompt-and-anything-a-flag-can-turn-into-a-write-is-exact-form.md

@@ -62,13 +62,88 @@ widening it is a deliberate, reviewed edit.
   boundary. That is why the dangerous cases are handled by *not writing the rule* rather than by an
   `ask` or `deny` pattern for `--output` — Claude Code's own docs note such argument patterns are
   evaded by quoting (`--out''put`).
-- Rules are `Bash` only — the evidence is a hosted Linux box. `PowerShell(...)` twins are a
-  follow-up ([task 1004014](https://cloudbongos.com/builders#/task/1004014)), possible now that
-  [task 1003999](https://cloudbongos.com/builders#/task/1003999) has put that tool behind the same
-  guards; allowing first and guarding second was the wrong order.
+- Rules were `Bash` only at first — the evidence was a hosted Linux box. The `PowerShell(...)`
+  twins landed in [task 1004014](https://cloudbongos.com/builders#/task/1004014), once
+  [task 1003999](https://cloudbongos.com/builders#/task/1003999) had put that tool behind the same
+  guards; allowing first and guarding second was the wrong order. See the amendment below.
 - An instance that already has a `.claude/settings.json` keeps its own; only a fresh starter carries
   the new rules (the never-clobber rule of task 1003962).
 
+## Amendment — 2026-09-17: every rule has a `PowerShell(...)` twin ([task 1004014](https://cloudbongos.com/builders#/task/1004014))
+
+On a Windows laptop Claude Code's shell tool is `PowerShell`, and a `Bash(...)` rule says nothing
+about a PowerShell command, so those sessions still met the prompt on every routine read.
+
+**Decision.** One list of commands, carried by every shell tool the guards see
+(`.claude/hooks/shell-tools.js`): 31 commands × `Bash`, `PowerShell`. The twins are the *same*
+commands in the *same* forms — prefix where the Bash rule is a prefix, exact where it is exact,
+and still no `git diff | log | show`. **The six blessed writers are twinned too.** ADR 0104's
+argument is tool-independent (the server decides per request from live rank; the rule grants
+nothing), and twinning only the reads would let a Windows session look around freely and then
+dead-end on `ship.js` — the #1027 failure, moved to a different machine.
+
+**What made it safe to mirror rather than re-derive.** Documented by Claude Code: PowerShell rules
+have the same shape as Bash rules; `|`, `;`, `&&`, `||` split a command and *every* part must
+match, so `gh pr view 1 | Set-Content <path>` and `git status; Remove-Item …` still ask.
+
+Not documented — redirection, `$(…)`, `$env:` assignments — so the installed client (2.1.274) was
+read instead: a string probe of the binary, down to its PowerShell permission function. In order,
+it (1) applies deny rules; (2) collects a list of decisions, where each of these is an **ask**:
+a `$(…)` subexpression, an expandable string, splatting, `--%`, a .NET member call, a script block,
+a command that modifies `$env:`, a write into `.git/`, a `cd` compounded with `git`, and **any
+real file redirection** ("could write to arbitrary paths" — in-tree or not, `$null` and `2>&1`
+excepted); (3) returns the first deny, **else the first ask, and only then an allow**. Prefix
+allow-rules are consulted after all of that, one pipeline element at a time, and a statement that
+is not a command — an assignment — is never "allowed". So `$env:NODE_OPTIONS='…'; node
+scripts/gds/status.js`, `git status $(…)` and `gh pr view 1 > scripts/gds/status.js` all still ask.
+
+That is a reading of one version's minified code, not a contract — so **the repo does not lean on
+it.** The grader's objection to the first cut was exact: nothing here enforced that ordering, and
+nothing would turn red if a release changed it. `.claude/hooks/allow-rule-guard.js` now does, through
+the one part of the contract that IS documented: a PreToolUse hook may answer
+`permissionDecision: "ask"`, the most restrictive hook answer applies, and hooks "can tighten
+restrictions but not loosen them". On the PowerShell tool, a command that names anything this
+project pre-allows is put in front of a person **unless it is plain**: command names, bare-word
+arguments from a fixed alphabet, `$name` reads, literal strings, the separators `; | && ||`, and
+`2>&1` / `> $null`. It never blocks, fails open, and stays silent for commands nobody pre-allowed —
+or every `>` on a Windows laptop would prompt and the prompts this task removed would be back.
+`tests/allow_rule_guard.mjs` runs every PowerShell allow-rule through it, so a new rule cannot
+outrun the guard.
+
+**That hook is an allowlist of shape because the denylist version failed — this ADR's own lesson,
+relearned.** Its first cut listed dangerous constructs (`$(`, `>`, `{`, `env:` …). A security
+review of it found eleven commands that smuggle a write or an exec and still answered "no ask":
+a bare `( … )` runs a pipeline in argument mode; a quote inside a `<# comment #>` blinds a quote
+scanner; PowerShell reads smart quotes as quotes; `> $null\path` is a file, not a discard; a block
+comment can split the command's name. Every one is a disagreement between a pattern and
+PowerShell's tokenizer, which is exactly why this ADR refuses an `ask` pattern for `--output`
+("evaded by quoting"). Recognising the safe case and asking for everything else has no such list
+to keep up with: a `(`, `#`, backtick, `<`, real redirect, lone `&`, newline, smart quote or
+assignment is simply not in the grammar. The eleven are kept as test cases.
+
+Chained and piped commands pass the grammar on purpose — `git status; Remove-Item x` is "plain" —
+because the split on `|`, `;`, `&&`, `||` with every part needing its own match is the DOCUMENTED
+half, and the hook stands in only for the undocumented one.
+
+Today the hook is redundant with the client, which is the point: it pins the behaviour instead of
+trusting it. `allowCovers` in `tests/box_ship_permissions.mjs` still models only rule shape,
+separators and case folding, and says so. NOT traced in the client: how `git.exe` is canonicalized
+before matching — the hook folds case, quotes, backticks, comments, `\` and `.exe` itself, and is
+deliberately loose there, since that step only decides whether it has an opinion at all.
+
+**The restrictive list is twinned too.** `permissions.deny` carried `Bash(git stash:*)` alone — a
+hard stop on a Linux box and nothing on a Windows laptop. It now has its PowerShell twin, and the
+suite fails if any shell rule in `deny` or `ask` exists for one tool and not the other.
+
+**The one PowerShell-specific trap.** Its rules match **case-insensitively**, and git's flags do
+not: `-d` and `-D` are different commands. No rule here sits next to such a pair — `git branch`
+appears only as four exact read forms — and `tests/box_ship_permissions.mjs` now runs every check
+once per tool with the matcher's case folding modelled, plus a twin check: the tools must carry
+identical lists, and a rule for a tool outside `shell-tools.js` fails the suite.
+
+**Left alone.** A session that writes `node .\scripts\gds\status.js` (backslashes) matches no rule
+and asks — fail-safe, and the skills all spell it with forward slashes.
+
 ## Rejected
 
 - **`Bash(git:*)` or `Bash(gh:*)`.** One rule instead of thirteen, and it pre-allows `git push`,

package/docs/api/openapi.json

@@ -25115,10 +25115,6 @@
             "type": "string",
             "maxLength": 32
           },
-          "track": {
-            "type": "string",
-            "maxLength": 16
-          },
           "done_when": {
             "type": "string",
             "maxLength": 8000

package/docs/api-reference.md

@@ -691,7 +691,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
 | GET | `/api/bongos/versions` | `public` | — | read-only version list; mirrors /public/versions. |
-| POST | `/api/bongos/versions` | `archon` | `id`, `name`, `status`, `track`, `done_when`, `scope_doc_path`, `criteria`, `first_goal` | POST /versions — create a version + its done-when criteria in one call. |
+| POST | `/api/bongos/versions` | `archon` | `id`, `name`, `status`, `done_when`, `scope_doc_path`, `criteria`, `first_goal` | POST /versions — create a version + its done-when criteria in one call. |
 | POST | `/api/bongos/versions/:id/close` | `archon` | `reason`, `dispositions` | POST /versions/:id/close — the move a version has never had (BV1.R12, task 1003599, goal 1000086, ADR 0250 D5, ADR 0263 §5). |
 | GET | `/api/bongos/versions/:id/done-when` | `public` | — | Public: the status dashboard (status.<apex>) fetches this every 60s alongside other public/* surfaces. |
 | POST | `/api/bongos/versions/:id/done-when` | `metic+archon` | `criterion_id`, `criterion_md`, `goal_id`, `sort_order` | Auth (Metic+, then the goal's own authority): create a done-when criterion at RUNTIME. |