@bongos/core 1.19.893 → 1.19.894

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.893",
-  "core_contract": "1.19.893",
-  "source_commit": "99f7250a5cc9e39e16d1869281d1fd2660a466ad",
+  "core_version": "1.19.894",
+  "core_contract": "1.19.894",
+  "source_commit": "a62eeb34dfae8175f0ff3586f38460f044b6bc2b",
   "source_ref": "HEAD",
-  "built_at": "2026-09-19T22:26:15.995Z",
+  "built_at": "2026-09-19T22:40:59.707Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 498,
     "agent_docs_stubbed": 26,
-    "functional_verbatim": 2272,
+    "functional_verbatim": 2274,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 2796,
-  "tree_sha256": "1ffd95b16bdf5a9986639f6ea5452817996a270f6274f1195d3330fc915fe900",
+  "file_count": 2798,
+  "tree_sha256": "22cc76ae6f3b3fe04849fa744d2d7b43b859f159332e23bee866c374a82b15a7",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -242,7 +242,7 @@
     {
       "path": ".claude/skills/status/SKILL.md",
       "mode": "0000644",
-      "sha256": "38cad84f41dbebc255a379a102db5c27d9fa5f0173dd08ea0ca0ac19365a47c7"
+      "sha256": "2613bd488e5ec83681effe72b40d7b9c9152bfae401c9ca484c6b84f6d349373"
     },
     {
       "path": ".claude/skills/strand-fix/SKILL.md",
@@ -2612,7 +2612,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "adada9ba37f56cd06bbb497540a86710002658b4160a9c0e31f5a3ae36fb1ddb"
+      "sha256": "6fb5bea1a5ba196287323307cc7272e869defbaa91d4f5ef522a92436064847f"
     },
     {
       "path": "docs/modules-contract.md",
@@ -2682,7 +2682,7 @@
     {
       "path": "docs/onboarding/slash-commands.md",
       "mode": "0000644",
-      "sha256": "748df9bec7434093e32f70915f151b9cc6ac67beebbe226b997d81eba327de31"
+      "sha256": "92ce9c4de763330c4ac877a1ba79d0b11d88797c711b3517adebe8604bdf59ea"
     },
     {
       "path": "docs/packs/artist.md",
@@ -5409,6 +5409,11 @@
       "mode": "0000644",
       "sha256": "107dec0deb790b7439da27761235631ab79a29a6cfcea58db9a57460e04df1bd"
     },
+    {
+      "path": "modules/lifecycle/criterion-ref.js",
+      "mode": "0000644",
+      "sha256": "c79a34e577df14c4c54d426e60789c5e30bc2e81fd4005a283f21936b9f0aba7"
+    },
     {
       "path": "modules/lifecycle/criterion-suggest.js",
       "mode": "0000644",
@@ -5432,7 +5437,7 @@
     {
       "path": "modules/lifecycle/db-deps-criteria.js",
       "mode": "0000644",
-      "sha256": "76ffab3052ce0b48d0b78451a2e34d5cd3c5300410f0856b4a6667cbe708ba2b"
+      "sha256": "e921d48860af27f836252fa7e44e1bdae25be5b940c25e9272f1cf368805d132"
     },
     {
       "path": "modules/lifecycle/db-executor.js",
@@ -7712,12 +7717,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "4439b27f55c654d0758f704b1225fb25509949f048e9292b5c54af9c047c59a2"
+      "sha256": "5a7c7abe37561006b741b013bd299d254bac0267a5da69e05c15bd5df7f804ba"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "3c2e6c91f071304b4464dfa845786eb5037631d1dff4cdad6c9560201dfc9bb6"
+      "sha256": "78a3e6e4967ac1ffcd9fef0be950247551d3c739763d30cfc98aad8dd0dd5168"
     },
     {
       "path": "public-docs/index.html",
@@ -8022,7 +8027,7 @@
     {
       "path": "scripts/gds/build-cli-package.js",
       "mode": "0000644",
-      "sha256": "ca0566c509fb1ea81e7c874e2676bbcb965803509c0289c577bc8f15791e6f5c"
+      "sha256": "fcb5bdfe3341b177018a080c2cd7295bad3b1772696e61bef6154ec1e5767300"
     },
     {
       "path": "scripts/gds/bump-version.js",
@@ -9212,7 +9217,7 @@
     {
       "path": "scripts/gds/status.js",
       "mode": "0000644",
-      "sha256": "191b49e9ccbcfc7b855d834535ad5e9de0970d6e91126c7a0591e7790d196a89"
+      "sha256": "cdf231a4804965b5cd4ca6218893573319d318b51356bf87c2cddeeccd523dd2"
     },
     {
       "path": "scripts/gds/strand-watch.js",
@@ -9722,7 +9727,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "f5e01142842ee5a6d8c2cb8870eb8bd41e9de63d4e3621a07a69fc2c095597c7"
+      "sha256": "61c6a9f0360af4f9f936786eacffe6b231db6f0f0339b7ba206511136823d2ee"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -10719,6 +10724,11 @@
       "mode": "0000644",
       "sha256": "80ce711abf62a78dc4f36b513b852a5396173a2ff50e5deab2460531d17911e4"
     },
+    {
+      "path": "tests/criterion_ref_status.mjs",
+      "mode": "0000644",
+      "sha256": "a441876b05922aeebb5fa122a679a836ccf322e8d96e8a28acf0c7c076283741"
+    },
     {
       "path": "tests/criterion_suggest.mjs",
       "mode": "0000644",
@@ -13167,7 +13177,7 @@
     {
       "path": "tests/session-cards.mjs",
       "mode": "0000644",
-      "sha256": "9035468dcf1b6ef0bc0aaf5a665196a0eab321563ab84aa1133b1446ff1ce9cd"
+      "sha256": "62dbeb24b93c9680ee2cf4427ca64da2532588cdfb75deaa329c1cfc9c122085"
     },
     {
       "path": "tests/session_506_regression.mjs",

package/.claude/skills/status/SKILL.md

@@ -12,19 +12,19 @@ Rolls up a version's done-when criteria → gating tasks → live statuses → w
 
 ## How to render it
 
-Delivery is deterministic (task 1288, same methodology as `/builder-start`). The **card-delivery hook** (`.claude/hooks/session-cards.js`) runs `status.js` for you on a `/status` (or "what's left for C8" / "status of GDS-V4") prompt — pulling any version + `Cn` out of the prompt — and injects the **finished card + a one-step directive** into your context, a block beginning `[otb card — the status card below was pre-rendered …]`.
+Delivery is deterministic (task 1288, same methodology as `/builder-start`). The **card-delivery hook** (`.claude/hooks/session-cards.js`) runs `status.js` for you on a `/status` (or "what's left for C8" / "status of GDS-V4") prompt — pulling any version + criterion ref (a slug or a positional `Cn`) out of the prompt — and injects the **finished card + a one-step directive** into your context, a block beginning `[otb card — the status card below was pre-rendered …]`.
 
 1. **Normal path — follow the injected directive.** If that `[otb card …]` block is present, do exactly what it says: `show_widget` with the fenced HTML if you have `mcp__visualize` (call `mcp__visualize__read_me` once first, silently), otherwise output the fenced markdown **verbatim**. Render **once** — don't run `status.js`, don't lead with your own headline, don't rebuild the table, don't add a recommendation or recap. The card now owns the headline, the remaining-task list, and the unattributed-tasks note (this replaces the old freeform "interpret + relay" summary).
 
 2. **Fallback — no directive present** (hook disabled/failed, or an older checkout). Run it yourself:
-   - **If you have `show_widget`**: `node scripts/gds/status.js --widget [--version ID] [Cn]` → render the HTML verbatim with `title: "status_card"` (call `read_me` once first).
-   - **No widget renderer**: `node scripts/gds/status.js [--version ID] [Cn]` → print its stdout verbatim.
-   - `Cn` is positional (C8 = the 8th criterion); `--version` defaults to the live internal version; `--json` is the machine interface; `--hook` is the envelope the hook consumes — don't render those for the user unless asked.
+   - **If you have `show_widget`**: `node scripts/gds/status.js --widget [--version ID] [--criterion REF]` → render the HTML verbatim with `title: "status_card"` (call `read_me` once first).
+   - **No widget renderer**: `node scripts/gds/status.js [--version ID] [--criterion REF]` → print its stdout verbatim.
+   - A criterion is named by its **slug** (`/status wa6-kernel-and-packs`) or, as an affordance, by position (`/status C8`); `--criterion REF` is the exact form for either. `--version` defaults to the live internal version; `--json` is the machine interface; `--hook` is the envelope the hook consumes — don't render those for the user unless asked.
 
 ## Constraints
 
 - **Read-only.** This skill never claims, ships, or mutates anything. If the user then wants to act on a remaining task, hand off to `/builder-claim N`.
-- **`Cn` is positional**, computed live from the criteria ordering — so it stays correct even if criteria are added or reordered. Don't hardcode a Cn→slug mapping.
+- **The SLUG is the criterion's identity; `Cn` is a position, and positions move** (task 1004069). `Cn` is `ROW_NUMBER()` over a reorderable `sort_order`, recomputed on every read: adding `wa6-noise-limited` on 2026-09-19 moved `<redacted>` from C11 to C13, and everything still quoting C11 silently began naming a different criterion. The write path (`resolveCriterionIds`) **refuses** a positional ref on a multi-goal version for that reason. So: **quote the slug** in anything durable — a note, a task description, a handoff, a card you expect someone to read tomorrow. Repeat a `Cn` back only alongside the slug it resolved to; `status.js` prints that line for you whenever a drill-in came in positionally.
 - If `--version X` returns no criteria, say so plainly (that version may not have done-when criteria seeded) rather than implying 0% done.
 
 ## Files this skill touches

package/docs/module-api-changelog.md

@@ -2260,5 +2260,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.891 with no explicit bump. run 35471773244. (task 1002620)
   1.19.893 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.892 with no explicit bump. run 35473299957. (task 1002620)
+  1.19.894 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.893 with no explicit bump. run 35473999345. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/docs/onboarding/slash-commands.md

@@ -32,7 +32,7 @@ Every one of these talks to the build system. They're grouped by when you'd reac
 | `/builder-release` | Cancel a claim — the task returns to `ready`, no credits |
 | `/builder-stage` | Preview your work-in-progress on your own sandbox before shipping |
 | `/builder-end` | Close out the session safely — resolve the claim, seal the log |
-| `/status` | Version / criterion progress — "what's left for C8?" |
+| `/status` | Version / criterion progress — "what's left for `wa6-kernel-and-packs`?" (a criterion's slug is its name; `C8` is its current position and moves) |
 | `/recall` | Search the docs + project knowledge before re-solving something |
 
 ### Your account and your machine

package/modules/lifecycle/criterion-ref.js

@@ -0,0 +1,107 @@
+// modules/lifecycle/criterion-ref.js — the ONE vocabulary for naming a done-when
+// criterion, shared by the write path and the read path (task 1004069).
+//
+// WHY THIS FILE EXISTS. `parseCriterionRef` lived inside db-deps-criteria.js,
+// which requires ../../src/module-api and therefore a database pool. The read
+// side — scripts/gds/status.js, which is public, unauthenticated, and shipped in
+// the @cloudbongos/cli package with no server present — could not require it, so
+// it grew its own parser: `Number(ref.slice(1))`, positional only. The system
+// ended up PRINTING an identifier its own write path refuses as unsafe, because
+// the two sides never shared a definition of what a ref is. Carving the pure
+// half out is what stops that from happening again; this file requires nothing,
+// touches no I/O, and both sides import it.
+//
+// THE VOCABULARY. A ref is one of three things:
+//   - a positional "Cn" token  → { kind: 'cnum', n }   C8 = the 8th criterion by
+//     (sort_order, criterion_id) WITHIN one version.
+//   - bare digits              → { kind: 'id', id }    done_when_criteria.id.
+//   - anything else            → { kind: 'slug', slug } the criterion_id slug.
+//
+// WHICH ONE IS THE IDENTITY. The slug. `Cn` is a presentation ordinal computed
+// live (ROW_NUMBER over a user-reorderable sort_order), so inserting a criterion
+// renumbers every criterion after it, version-wide, with no record: creating
+// `wa6-noise-limited` on 2026-09-19 moved `wa10-execution-integrity` from C11 to
+// C13 while every doc, card and click handler quoting C11 kept pointing at a row
+// that had moved. `resolveCriterionIds` already REFUSES a positional ref on any
+// version holding more than one goal, for the same reason (a positional ref
+// mislinked all 15 tasks of goal 1000071 — learning 1000188). So `Cn` is an
+// affordance for a human reading a numbered list, never the thing to quote or
+// store. Do not "fix" the instability by persisting cnum as a column: that is a
+// second source of truth over a reorderable ordering, and it drifts the first
+// time someone reorders.
+
+'use strict';
+
+// PURE: classify a single criterion ref. Returns { kind:'cnum', n } |
+// { kind:'id', id } | { kind:'slug', slug }.
+// A leading C/c + digits is positional; bare digits are a numeric id; anything
+// else is treated as a criterion_id slug. Anchored on purpose — prose like
+// "see C8 above" is a slug, never a silent position match.
+
+function parseCriterionRef(raw) {
+  const ref = String(raw == null ? '' : raw).trim();
+  const cMatch = /^C(\d+)$/i.exec(ref);
+  if (cMatch) return { kind: 'cnum', n: Number(cMatch[1]) };
+  if (/^\d+$/.test(ref)) return { kind: 'id', id: Number(ref) };
+  return { kind: 'slug', slug: ref };
+}
+
+// A version id as this project writes them: an uppercase prefix (possibly none)
+// followed by V + digits — V1, PMS-V2, GDS-V4, BONGOS-V2, CB-V1.
+//
+// Used ONLY to tell a bare CLI token apart from a criterion ref, because
+// `status.js BONGOS-V2` and `status.js wa6-kernel-and-packs` are both legal and
+// positional. Deliberately case-SENSITIVE: every version id in the versions
+// table is uppercase and every criterion_id slug is lowercase kebab, so casing
+// is the one signal that does not require a round trip — and a lowercase
+// `bongos-v2` was never a working version id anyway (the progress endpoint
+// path-matches the id verbatim). A caller that does not want to be guessed at
+// passes the exact form: `--version ID` and `--criterion REF` skip this entirely.
+const VERSION_ID_RE = /^(?:[A-Z][A-Z0-9]*-)*V\d+(?:\.\d+)?$/;
+
+function looksLikeVersionId(token) {
+  return VERSION_ID_RE.test(String(token == null ? '' : token).trim());
+}
+
+// Resolve a ref against criteria rows already fetched for ONE version. Rows need
+// `cnum`, `criterion_id`, and (for the numeric form) `id` — the shape
+// GET /versions/:id/progress returns.
+//
+// Version scope is the CALLER's job and is not optional: `Cn` numbers
+// independently per version (BONGOS-V1 C8 is `money-one-unit`, BONGOS-V2 C8 is
+// `wa6-kernel-and-packs`), so resolving a bare `Cn` without a version in hand
+// answers a different question than the one asked. Passing rows from a single
+// version's payload is what makes that structurally impossible here.
+//
+// Returns { criterion, kind } on a hit, or { criterion: null, kind } on a miss.
+// Slug matching is case-insensitive so a slug pasted from a title still lands.
+function resolveCriterionIn(criteria, ref) {
+  const rows = Array.isArray(criteria) ? criteria : [];
+  const p = parseCriterionRef(ref);
+  let criterion = null;
+  if (p.kind === 'cnum') {
+    criterion = rows.find((c) => Number(c.cnum) === p.n) || null;
+  } else if (p.kind === 'id') {
+    criterion = rows.find((c) => String(c.id) === String(p.id)) || null;
+  } else {
+    const want = p.slug.toLowerCase();
+    criterion = rows.find((c) => String(c.criterion_id || '').toLowerCase() === want) || null;
+  }
+  return { criterion, kind: p.kind };
+}
+
+// How a criterion is NAMED in output: the slug leads, the position trails in
+// parentheses as the affordance it is. Never "C8" alone — that is the form that
+// goes stale between the printing and the reading.
+function criterionLabel(c) {
+  if (!c) return '';
+  const slug = String(c.criterion_id || '');
+  return c.cnum == null ? slug : `${slug} (C${c.cnum})`;
+}
+
+module.exports = {
+  parseCriterionRef,
+  looksLikeVersionId,
+  resolveCriterionIn,
+  criterionLabel,
+};

package/modules/lifecycle/db-deps-criteria.js

@@ -278,17 +278,17 @@ async function removeDependency(fromKind, fromId, toKind, toId) {
 // ---------------------------------------------------------------------------
 
 // PURE: classify a single criterion ref. Returns { kind:'cnum', n } |
-// { kind:'id', id } | { kind:'slug', slug }. Exported for unit tests (no DB).
-// A leading C/c + digits is positional; bare digits are a numeric id; anything
-// else is treated as a criterion_id slug.
-
-function parseCriterionRef(raw) {
-  const ref = String(raw == null ? '' : raw).trim();
-  const cMatch = /^C(\d+)$/i.exec(ref);
-  if (cMatch) return { kind: 'cnum', n: Number(cMatch[1]) };
-  if (/^\d+$/.test(ref)) return { kind: 'id', id: Number(ref) };
-  return { kind: 'slug', slug: ref };
-}
+// { kind:'id', id } | { kind:'slug', slug }. Re-exported below for unit tests.
+//
+// The DEFINITION lives in ./criterion-ref.js, which requires nothing at all —
+// because the READ side needs the same vocabulary and cannot pay for a pool.
+// scripts/gds/status.js is public, unauthenticated and shipped inside the
+// server-free @cloudbongos/cli, so while this classifier sat behind
+// ../../src/module-api it was unreachable from there and the CLI grew its own
+// positional-only parser (`Number(ref.slice(1))`). The system ended up PRINTING
+// and REQUIRING the very ref shape resolveCriterionIds below refuses as unsafe
+// (task 1004069). One vocabulary, two importers, no second definition.
+const { parseCriterionRef } = require('./criterion-ref.js');
 
 // Resolve an array of refs to done_when_criteria.id values within a version.
 // Returns { ids: [unique numeric ids, first-appearance order], unresolved: [refs],

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.893",
+  "version": "1.19.894",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.893",
+      "version": "1.19.894",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.893",
+  "version": "1.19.894",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/scripts/gds/build-cli-package.js

@@ -85,6 +85,11 @@ const FILES = [
   // Module files the above touch. Each imports nothing from the kernel at load time.
   'modules/lifecycle/task-classifier.js',
   'modules/lifecycle/task-visuals.js',
+  // The criterion-ref vocabulary status.js resolves a `Cn` or a slug through
+  // (task 1004069). It is in modules/ because the WRITE path uses the same
+  // definition; it requires nothing, which is the whole reason it could be
+  // carved out of db-deps-criteria.js (that file needs a pool) and shipped here.
+  'modules/lifecycle/criterion-ref.js',
   'modules/economy/reward-policy.js',
 
   // The only core files in the package: config/branding readers and one constant table.

package/scripts/gds/status.js

@@ -8,11 +8,26 @@
 // GET /api/bongos/versions/:id/progress.
 //
 // Usage:
-//   node scripts/gds/status.js                  # all criteria, default version
-//   node scripts/gds/status.js C8               # drill into one criterion
-//   node scripts/gds/status.js --version V1     # another version
+//   node scripts/gds/status.js                          # all criteria, default version
+//   node scripts/gds/status.js wa6-kernel-and-packs     # drill in by SLUG (the identity)
+//   node scripts/gds/status.js C8                       # …or by position (an affordance)
+//   node scripts/gds/status.js --criterion C8           # exact form, no guessing
+//   node scripts/gds/status.js --version V1             # another version
 //   node scripts/gds/status.js --version GDS-V3 C8
-//   node scripts/gds/status.js --json           # machine-readable
+//   node scripts/gds/status.js --json                   # machine-readable
+//
+// WHICH NAME IS THE IDENTITY (task 1004069). The SLUG. `Cn` is a presentation
+// ordinal recomputed live from a reorderable sort_order, so inserting one
+// criterion renumbers every criterion after it, version-wide, silently — and
+// the write path (`resolveCriterionIds`) already REFUSES a positional ref on any
+// multi-goal version for exactly that reason. This CLI used to print `Cn` as
+// each row's identity and accept nothing else, so the one documented way to
+// drill in was the one form the rest of the system calls unsafe. Now the slug
+// leads in every output mode and BOTH forms resolve on input; a positional ref
+// answers with the slug it landed on, so the reader can quote the stable name.
+// The ref vocabulary itself is ../../modules/lifecycle/criterion-ref.js — one
+// definition, shared with the write path, which is what stops the two drifting
+// apart again.
 //
 // Read-only and UNAUTHENTICATED (the endpoint is public, same posture as
 // /versions/:id/done-when), so it works before /builder-setup too.
@@ -22,6 +37,11 @@
 const { API_BASE, cliClient, assertInstanceMatch, cliExit } = require('./cli-lib');
 const { resolveEnv } = require('../../src/instance-config');
 const { resolveDefaultVersion } = require('./version-select.js');
+const {
+  looksLikeVersionId,
+  resolveCriterionIn,
+  criterionLabel,
+} = require('../../modules/lifecycle/criterion-ref.js');
 
 // The active internal version is RESOLVED, never named here. Override with
 // <PREFIX>_STATUS_DEFAULT_VERSION or --version.
@@ -53,20 +73,32 @@ function parseArgs(argv) {
     if (a === '--version' || a === '-v') {
       version = args[++i];
       if (version == null) return { error: '--version requires a value' };
+    } else if (a === '--criterion' || a === '-c') {
+      criterion = args[++i];
+      if (criterion == null) return { error: '--criterion requires a value' };
     } else if (a === '--json') json = true;
     else if (a === '--widget') widget = true;
     else if (a === '--hook') hook = true;
     else if (a === '--help' || a === '-h') return { help: true };
-    else if (/^[Cc]\d+$/.test(a)) criterion = a.toUpperCase();
     else if (a.startsWith('-')) return { error: `unknown flag: ${a}` };
-    else if (!version) version = a; // bare token → version id
-    else if (!criterion) criterion = a.toUpperCase();
+    // A bare token is a VERSION only if it is shaped like one (V1, GDS-V4,
+    // BONGOS-V2); everything else is a criterion ref, so a slug can be typed
+    // where only `Cn` used to fit. Shape, not order: `status.js
+    // wa6-kernel-and-packs` used to be swallowed as a version id and 404 the
+    // progress fetch. `--version` / `--criterion` are the exact forms that skip
+    // this test entirely, for a caller who will not be guessed at.
+    else if (!version && looksLikeVersionId(a)) version = a;
+    else if (!criterion) criterion = a;
+    else if (!version) version = a;
     else return { error: `unexpected argument: ${a}` };
   }
   // No `versionExplicit` companion flag: `version !== null` already IS that
   // fact, and resolveVersion returns `defaulted`/`source` for anyone who needs
   // to act on it. A second field carrying the same truth is one that can drift.
-  return { version: version || null, criterion, json, widget, hook };
+  // `criterion` is kept VERBATIM — never uppercased, which is what made a slug
+  // unrepresentable here. Case-folding belongs to the resolver, which matches
+  // slugs case-insensitively and `Cn` case-insensitively too.
+  return { version: version || null, criterion: criterion || null, json, widget, hook };
 }
 
 // Resolve which version this invocation is about. Precedence: an explicit
@@ -95,6 +127,18 @@ function defaultedVersionNote(r) {
   return `(no version given — showing ${r.version}, ${why}. Pass --version to pick another.)`;
 }
 
+// One line naming the STABLE name a positional ref landed on, so whatever the
+// reader quotes next survives the next criterion anyone inserts. `Cn` is
+// recomputed from sort_order on every read: creating `wa6-noise-limited` moved
+// `wa10-execution-integrity` from C11 to C13, and every note, doc and click
+// handler still saying C11 now points at a different criterion. Empty when the
+// user already named the slug — they are holding the durable form.
+function positionalRefNote(c, kind) {
+  if (!c || kind !== 'cnum') return '';
+  return `(C${c.cnum} is a position, recomputed whenever a criterion is added or reordered.`
+    + ` The stable name is \`${c.criterion_id}\` — quote that.)`;
+}
+
 async function fetchProgress(version) {
   let res;
   try {
@@ -145,6 +189,8 @@ function bar(shipped, total, width = 10) {
   return '█'.repeat(filled) + '░'.repeat(width - filled);
 }
 
+// The POSITION column only. It is deliberately narrow and deliberately not the
+// row's name: the criterion_id beside it is what a reader should carry away.
 function clabel(c) {
   return `C${c.cnum}`.padEnd(3);
 }
@@ -160,6 +206,13 @@ function clabel(c) {
 // or the ship card's `.cc-*`.
 const sesc = (s) => String(s == null ? '' : s).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;');
 
+// A value going inside a single-quoted JS string inside an HTML attribute needs
+// BOTH escapes, in that order. Task ids are digits so the existing handlers get
+// away with `sesc` alone; a criterion_id is free text from the DB, and an
+// apostrophe in one would close the sendPrompt argument early and break every
+// row's click. Escape for JS first, then for the attribute.
+const jsq = (s) => sesc(String(s == null ? '' : s).replace(/\\/g, '\\\\').replace(/'/g, "\\'"));
+
 const STATUS_WIDGET_STYLE = `<style>
 .st-sr{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);white-space:nowrap;border:0;}
 .st-card{background:var(--color-background-primary);border:0.5px solid var(--color-border-tertiary);border-radius:var(--border-radius-lg);padding:1rem 1.25rem;font-family:var(--font-sans);}
@@ -207,9 +260,9 @@ function renderStatusWidget(data, criterion) {
       : `<div class="st-crit">No tasks linked to this criterion yet.</div>`;
     const claimHint = c.tasks.some((t) => t.status === 'ready') ? ' · click a ready task to claim it' : '';
     return `${STATUS_WIDGET_STYLE}
-<h2 class="st-sr">${sesc(data.version_id)} criterion C${c.cnum} ${c.satisfied ? 'is satisfied' : 'is not yet satisfied'}: ${c.counts.shipped} of ${c.counts.total} gating tasks shipped.</h2>
+<h2 class="st-sr">${sesc(data.version_id)} criterion ${sesc(criterionLabel(c))} ${c.satisfied ? 'is satisfied' : 'is not yet satisfied'}: ${c.counts.shipped} of ${c.counts.total} gating tasks shipped.</h2>
 <div class="st-card">
-  <div class="st-head"><span class="st-title"><i class="ti ti-checklist" aria-hidden="true"></i>${sesc(data.version_id)} · C${c.cnum}</span><span class="st-meta">${c.satisfied ? '<span class="st-ok">satisfied</span>' : 'not satisfied'} · ${c.counts.shipped}/${c.counts.total} shipped</span></div>
+  <div class="st-head"><span class="st-title"><i class="ti ti-checklist" aria-hidden="true"></i>${sesc(data.version_id)} · ${sesc(criterionLabel(c))}</span><span class="st-meta">${c.satisfied ? '<span class="st-ok">satisfied</span>' : 'not satisfied'} · ${c.counts.shipped}/${c.counts.total} shipped</span></div>
   <div class="st-crit">${sesc(c.criterion_md.replace(/\*\*/g, '').slice(0, 160))}</div>
   ${body}
   <div class="st-foot">remaining: ${sesc(remainingSummary(c.remaining))}${claimHint}</div>
@@ -219,8 +272,13 @@ function renderStatusWidget(data, criterion) {
   // Version → Goals → Criteria (ADR 0086 §2 / BV1.R58). Render each criterion
   // row under its goal's header. Fall back to a flat list if the rollup carries
   // no goals (older payload).
+  // The click sends the SLUG, never the position. A rendered card outlives the
+  // ordering it was rendered from: every handler here used to carry `/status
+  // C11`, so one criterion inserted anywhere above turned every drill-in on a
+  // card already in someone's transcript into a different criterion, silently.
+  // The slug survives an insert, a reorder, and a card read tomorrow.
   const critRow = (c) =>
-    `<tr class="st-tr" role="button" tabindex="0" title="Drill into C${c.cnum}: ${sesc(c.criterion_id)}" onclick="sendPrompt('/status C${c.cnum}')" onkeydown="if(event.key==='Enter'||event.key===' '){event.preventDefault();sendPrompt('/status C${c.cnum}')}"><td class="st-td st-ok st-nowrap">${c.satisfied ? '✓' : ''}</td><td class="st-td st-id">C${c.cnum}</td><td class="st-td st-ellip" title="${sesc(c.criterion_id)}">${sesc(c.criterion_id)}</td><td class="st-td st-nowrap">${widgetBar(c.counts.shipped, c.counts.total)}${c.counts.shipped}/${c.counts.total}</td><td class="st-td st-ellip st-sub">${c.remaining.length ? sesc(remainingSummary(c.remaining)) : '—'}</td></tr>`;
+    `<tr class="st-tr" role="button" tabindex="0" title="Drill into ${sesc(c.criterion_id)} (C${c.cnum})" onclick="sendPrompt('/status ${jsq(c.criterion_id)}')" onkeydown="if(event.key==='Enter'||event.key===' '){event.preventDefault();sendPrompt('/status ${jsq(c.criterion_id)}')}"><td class="st-td st-ok st-nowrap">${c.satisfied ? '✓' : ''}</td><td class="st-td st-ellip" title="${sesc(c.criterion_id)}">${sesc(c.criterion_id)}</td><td class="st-td st-id">C${c.cnum}</td><td class="st-td st-nowrap">${widgetBar(c.counts.shipped, c.counts.total)}${c.counts.shipped}/${c.counts.total}</td><td class="st-td st-ellip st-sub">${c.remaining.length ? sesc(remainingSummary(c.remaining)) : '—'}</td></tr>`;
   const goals = (data.goals && data.goals.length) ? data.goals : null;
   const rows = goals
     ? goals.map((g) => {
@@ -237,7 +295,7 @@ function renderStatusWidget(data, criterion) {
 <h2 class="st-sr">${sesc(data.version_id)} status: ${satisfied} of ${data.criteria.length} done-when criteria satisfied across ${goals ? data.goals_total : 0} goal(s). Click a criterion to drill in.</h2>
 <div class="st-card">
   <div class="st-head"><span class="st-title"><i class="ti ti-checklist" aria-hidden="true"></i>${sesc(data.version_id)} status</span><span class="st-meta">${satisfied}/${data.criteria.length} criteria${goalMeta}</span></div>
-  <table class="st-table"><colgroup><col style="width:24px;"><col style="width:44px;"><col><col style="width:96px;"><col style="width:120px;"></colgroup><thead><tr class="st-thead"><th class="st-th"></th><th class="st-th">#</th><th class="st-th">Criterion</th><th class="st-th">Shipped</th><th class="st-th">Remaining</th></tr></thead><tbody>${rows}</tbody></table>
+  <table class="st-table"><colgroup><col style="width:24px;"><col><col style="width:44px;"><col style="width:96px;"><col style="width:120px;"></colgroup><thead><tr class="st-thead"><th class="st-th"></th><th class="st-th">Criterion</th><th class="st-th">Pos</th><th class="st-th">Shipped</th><th class="st-th">Remaining</th></tr></thead><tbody>${rows}</tbody></table>
   ${foot}
 </div>`;
 }
@@ -248,7 +306,7 @@ function renderStatusMarkdown(data, criterion) {
   const lines = [];
   if (criterion) {
     const c = criterion;
-    lines.push(`**/status · ${data.version_id} · C${c.cnum}** — ${c.satisfied ? 'satisfied ✓' : 'not satisfied'}`);
+    lines.push(`**/status · ${data.version_id} · ${criterionLabel(c)}** — ${c.satisfied ? 'satisfied ✓' : 'not satisfied'}`);
     lines.push(`_${c.criterion_md.replace(/\*\*/g, '').slice(0, 160)}_`);
     lines.push('');
     if (c.tasks.length) {
@@ -272,8 +330,10 @@ function renderStatusMarkdown(data, criterion) {
   lines.push('');
   // Version → Goals → Criteria (ADR 0086 §2): a subheading per goal, its criteria
   // beneath. Falls back to a single flat table if the payload carries no goals.
-  const critRow = (c) => `| ${c.satisfied ? '✓' : ''} | C${c.cnum} | ${c.criterion_id} | ${bar(c.counts.shipped, c.counts.total)} ${c.counts.shipped}/${c.counts.total} | ${c.remaining.length ? remainingSummary(c.remaining) : '—'} |`;
-  const tableHeader = () => { lines.push('| | # | Criterion | Shipped | Remaining |'); lines.push('|---|---|---|---|---|'); };
+  // Slug first, position second — the column a reader copies out of a card is
+  // the one that still means the same thing next week.
+  const critRow = (c) => `| ${c.satisfied ? '✓' : ''} | ${c.criterion_id} | C${c.cnum} | ${bar(c.counts.shipped, c.counts.total)} ${c.counts.shipped}/${c.counts.total} | ${c.remaining.length ? remainingSummary(c.remaining) : '—'} |`;
+  const tableHeader = () => { lines.push('| | Criterion | Pos | Shipped | Remaining |'); lines.push('|---|---|---|---|---|'); };
   if (goals) {
     for (const g of goals) {
       lines.push(`**🎯 ${g.title}** — ${g.status === 'achieved' ? 'achieved ✓' : g.status}${g.criteria.length ? '' : ' · no criteria yet'}`);
@@ -289,7 +349,10 @@ function renderStatusMarkdown(data, criterion) {
     lines.push(`_${data.unattributed_tasks} task(s) not linked to any criterion._`);
   }
   lines.push('');
-  lines.push('→ Drill into one: `/status C8`');
+  // The hint quotes a REAL slug off this payload rather than a frozen `C8`,
+  // which is both an example of the stable form and immune to going stale.
+  const example = data.criteria.length ? data.criteria[0].criterion_id : 'wa6-kernel-and-packs';
+  lines.push(`→ Drill into one: \`/status ${example}\``);
   return lines.join('\n');
 }
 
@@ -313,7 +376,7 @@ function printAll(data) {
   // Version → Goals → Criteria (ADR 0086 §2): a heading per goal, criteria beneath.
   const printCrit = (c) => {
     const flag = c.satisfied ? '✓' : ' ';
-    const line = `${flag} ${clabel(c)} ${c.criterion_id.padEnd(34)} ${bar(c.counts.shipped, c.counts.total)} `
+    const line = `${flag} ${c.criterion_id.padEnd(34)} ${clabel(c)} ${bar(c.counts.shipped, c.counts.total)} `
       + `${c.counts.shipped}/${c.counts.total} shipped`;
     const rem = c.remaining.length ? `   remaining: ${remainingSummary(c.remaining)}` : '';
     console.log(line + rem);
@@ -328,13 +391,13 @@ function printAll(data) {
     for (const c of data.criteria) printCrit(c);
   }
   if (data.unattributed_tasks > 0) {
-    console.log(`\n${data.unattributed_tasks} task(s) in ${data.version_id} not linked to any criterion (run /status <Cn> to drill in).`);
+    console.log(`\n${data.unattributed_tasks} task(s) in ${data.version_id} not linked to any criterion (run /status <criterion> to drill in).`);
   }
   console.log('');
 }
 
 function printOne(data, c) {
-  console.log(`\n${data.version_id} · C${c.cnum}  ${c.criterion_id}   [${c.satisfied ? 'satisfied ✓' : 'not satisfied'}]`);
+  console.log(`\n${data.version_id} · ${c.criterion_id}  (C${c.cnum})   [${c.satisfied ? 'satisfied ✓' : 'not satisfied'}]`);
   console.log(`"${c.criterion_md.replace(/\*\*/g, '').slice(0, 120)}"\n`);
   if (c.tasks.length === 0) {
     console.log('  (no tasks linked — this criterion has no structured gating tasks yet)\n');
@@ -352,11 +415,11 @@ async function main() {
   const opts = parseArgs(process.argv);
   if (opts.error) {
     console.error(`status: ${opts.error}`);
-    console.error('Usage: node scripts/gds/status.js [--version ID] [Cn] [--json]');
+    console.error('Usage: node scripts/gds/status.js [--version ID] [<criterion-slug>|Cn] [--json]');
     process.exit(2);
   }
   if (opts.help) {
-    console.log('Usage: node scripts/gds/status.js [--version ID] [Cn] [--json]');
+    console.log('Usage: node scripts/gds/status.js [--version ID] [<criterion-slug>|Cn] [--json]');
     process.exit(0);
   }
   // Fail closed if this repo's configured instance != the signed-in session's (task
@@ -398,16 +461,31 @@ async function main() {
   const data = await fetchProgress(picked.version);
 
   // Resolve the requested criterion (if any) once — every output mode needs it.
+  // Slug, positional `Cn`, or numeric id, through the SAME vocabulary the write
+  // path uses. The rows come from ONE version's payload, which is what makes the
+  // version scoping structural rather than remembered: a bare `Cn` can only ever
+  // rank inside the version we just fetched, and the versions number
+  // independently (BONGOS-V1 C8 ≠ BONGOS-V2 C8).
   let c = null;
+  let refKind = null;
   if (opts.criterion) {
-    const n = Number(opts.criterion.slice(1));
-    c = data.criteria.find((x) => x.cnum === n);
+    const hit = resolveCriterionIn(data.criteria, opts.criterion);
+    c = hit.criterion;
+    refKind = hit.kind;
     if (!c) {
       // Name the version, not just the criterion: on a DEFAULTED version this is
       // the reader's only clue that C13 was looked up somewhere they didn't pick.
-      console.error(`status: ${picked.version} has no criterion ${opts.criterion} (it has C1–C${data.criteria.length}).`);
+      console.error(`status: ${picked.version} has no criterion "${opts.criterion}".`);
+      if (refKind === 'cnum') {
+        console.error(`  It has C1–C${data.criteria.length}. Positions shift when a criterion is added — prefer the slug.`);
+      } else {
+        // A miss on a slug is usually a typo or the wrong version, and the cure
+        // is the list of legal names, not a count.
+        const names = data.criteria.map((x) => x.criterion_id);
+        console.error(`  Known criteria: ${names.join(', ')}`);
+      }
       if (picked.defaulted) console.error(`  ${defaultedVersionNote(picked)}`);
-      process.exit(3);
+      return cliExit(3);
     }
   }
 
@@ -433,8 +511,9 @@ async function main() {
   // the version was resolved rather than chosen (--json/--widget/--hook are
   // machine interfaces and stay byte-identical).
   if (c) printOne(data, c); else printAll(data);
-  const note = defaultedVersionNote(picked);
-  if (note) console.log(`  ${note}\n`);
+  const notes = [positionalRefNote(c, refKind), defaultedVersionNote(picked)].filter(Boolean);
+  for (const note of notes) console.log(`  ${note}`);
+  if (notes.length) console.log('');
 }
 
 if (require.main === module) {
@@ -444,4 +523,4 @@ if (require.main === module) {
   });
 }
 
-module.exports = { parseArgs, resolveVersion, defaultedVersionNote, renderStatusWidget, renderStatusMarkdown };
+module.exports = { parseArgs, resolveVersion, defaultedVersionNote, positionalRefNote, renderStatusWidget, renderStatusMarkdown };

package/src/module-api.js

@@ -71,7 +71,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.893'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.894'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/criterion_ref_status.mjs

@@ -0,0 +1,202 @@
+// tests/criterion_ref_status.mjs
+//
+// The READ side of the criterion-ref vocabulary (task 1004069): what
+// scripts/gds/status.js accepts on input and what it calls a criterion in
+// output. The write half is tests/criterion_ref_parse.mjs.
+//
+// WHY THESE CASES. `Cn` is ROW_NUMBER() over a reorderable sort_order, so it is
+// a presentation ordinal, not a name — inserting a criterion renumbers every one
+// after it, version-wide, silently. `resolveCriterionIds` has refused a
+// positional ref on a multi-goal version since task 1003108, while status.js
+// PRINTED that same form as each row's identity and accepted nothing else. So
+// the assertions below are about the two halves agreeing: a slug must resolve, a
+// position must still resolve but say what it landed on, and nothing the
+// renderers emit may carry a bare position where a reader will copy it.
+//
+// Run: node tests/criterion_ref_status.mjs
+
+import { strict as assert } from 'node:assert';
+import { createRequire } from 'node:module';
+
+const require = createRequire(import.meta.url);
+const status = require('../scripts/gds/status.js');
+const refs = require('../modules/lifecycle/criterion-ref.js');
+
+let passed = 0;
+let failed = 0;
+function test(name, fn) {
+  try { fn(); passed++; console.log(`  ok  ${name}`); }
+  catch (err) { failed++; console.log(`  FAIL ${name}`); console.log(`     ${err.message}`); }
+}
+
+// A miniature version payload in the shape GET /versions/:id/progress returns.
+const crit = (cnum, criterion_id, id) => ({
+  cnum,
+  id,
+  criterion_id,
+  criterion_md: `**${criterion_id}** — prose`,
+  satisfied: false,
+  goal_id: '1000095',
+  tasks: [],
+  counts: { shipped: 0, total: 0 },
+  remaining: [],
+});
+const DATA = {
+  version_id: 'BONGOS-V2',
+  criteria: [
+    crit(1, 'wa10-security-enforced', '1000364'),
+    crit(8, 'wa6-kernel-and-packs', '1000369'),
+    crit(11, 'wa6-noise-limited', '1000380'),
+  ],
+  goals: [],
+  goals_achieved: 0,
+  goals_total: 0,
+  unattributed_tasks: 0,
+};
+
+// ---------- input: a bare token is a version or a criterion by SHAPE ----------
+
+test('a bare SLUG is a criterion, not a version id', () => {
+  // The whole defect in one case: this used to set version='wa6-kernel-and-packs'
+  // and 404 the progress fetch, because the first bare token was always a version.
+  const o = status.parseArgs(['node', 'status.js', 'wa6-kernel-and-packs']);
+  assert.equal(o.criterion, 'wa6-kernel-and-packs');
+  assert.equal(o.version, null);
+});
+
+test('a bare version-shaped token is still a version', () => {
+  for (const v of ['V1', 'PMS-V2', 'GDS-V4', 'BONGOS-V2', 'CB-V1']) {
+    const o = status.parseArgs(['node', 'status.js', v]);
+    assert.equal(o.version, v, `${v} should parse as a version`);
+    assert.equal(o.criterion, null, `${v} should not parse as a criterion`);
+  }
+});
+
+test('a bare Cn is a criterion even though it is neither lowercase nor kebab', () => {
+  assert.equal(status.parseArgs(['node', 'status.js', 'C8']).criterion, 'C8');
+  assert.equal(status.parseArgs(['node', 'status.js', 'C8']).version, null);
+});
+
+test('version and criterion together, in either order', () => {
+  const a = status.parseArgs(['node', 'status.js', 'BONGOS-V2', 'wa6-noise-limited']);
+  assert.equal(a.version, 'BONGOS-V2');
+  assert.equal(a.criterion, 'wa6-noise-limited');
+  const b = status.parseArgs(['node', 'status.js', 'wa6-noise-limited', 'BONGOS-V2']);
+  assert.equal(b.version, 'BONGOS-V2');
+  assert.equal(b.criterion, 'wa6-noise-limited');
+});
+
+test('--criterion is the EXACT form and skips the shape test entirely', () => {
+  // A criterion whose slug happens to be version-shaped is unreachable by the
+  // bare-token path by construction; the flag is how a caller refuses to be guessed at.
+  const o = status.parseArgs(['node', 'status.js', '--criterion', 'V2', '--version', 'BONGOS-V2']);
+  assert.equal(o.criterion, 'V2');
+  assert.equal(o.version, 'BONGOS-V2');
+  assert.deepEqual(status.parseArgs(['node', 'status.js', '--criterion']), { error: '--criterion requires a value' });
+});
+
+test('a criterion ref is NOT uppercased on the way through', () => {
+  // The old parser did `a.toUpperCase()`, which is what made a slug
+  // unrepresentable: 'WA6-KERNEL-AND-PACKS' matches no row.
+  assert.equal(status.parseArgs(['node', 'status.js', 'wa6-kernel-and-packs']).criterion, 'wa6-kernel-and-packs');
+});
+
+// ---------- resolution: both forms land, only one is stable ----------
+
+test('a slug resolves, case-insensitively', () => {
+  assert.equal(refs.resolveCriterionIn(DATA.criteria, 'wa6-kernel-and-packs').criterion.cnum, 8);
+  assert.equal(refs.resolveCriterionIn(DATA.criteria, 'WA6-Kernel-And-Packs').criterion.cnum, 8);
+});
+
+test('a positional Cn resolves BY POSITION, not by the number in the slug', () => {
+  const hit = refs.resolveCriterionIn(DATA.criteria, 'C11');
+  assert.equal(hit.kind, 'cnum');
+  assert.equal(hit.criterion.criterion_id, 'wa6-noise-limited');
+});
+
+test('a numeric done_when id resolves', () => {
+  assert.equal(refs.resolveCriterionIn(DATA.criteria, '1000369').criterion.criterion_id, 'wa6-kernel-and-packs');
+});
+
+test('a miss is a miss, and carries the kind so the caller can say the right thing', () => {
+  assert.equal(refs.resolveCriterionIn(DATA.criteria, 'C99').criterion, null);
+  assert.equal(refs.resolveCriterionIn(DATA.criteria, 'C99').kind, 'cnum');
+  assert.equal(refs.resolveCriterionIn(DATA.criteria, 'no-such-thing').criterion, null);
+  assert.equal(refs.resolveCriterionIn(DATA.criteria, 'no-such-thing').kind, 'slug');
+});
+
+test('resolution is scoped to the rows handed in — it cannot reach another version', () => {
+  // BONGOS-V1 and BONGOS-V2 both have a C8 and they are different criteria. The
+  // scoping is structural: there is no argument by which a caller could ask this
+  // function about a version it was not given the rows for.
+  assert.equal(refs.resolveCriterionIn([], 'C8').criterion, null);
+});
+
+// ---------- the note: a position must announce what it landed on ----------
+
+test('a positional drill-in names the stable slug', () => {
+  const note = status.positionalRefNote(DATA.criteria[1], 'cnum');
+  assert.match(note, /wa6-kernel-and-packs/);
+  assert.match(note, /position/i);
+});
+
+test('a slug drill-in emits NO note — the reader already holds the durable form', () => {
+  assert.equal(status.positionalRefNote(DATA.criteria[1], 'slug'), '');
+  assert.equal(status.positionalRefNote(null, 'cnum'), '');
+});
+
+// ---------- output: the slug is the identity everywhere ----------
+
+test('criterionLabel leads with the slug and trails the position', () => {
+  assert.equal(refs.criterionLabel(DATA.criteria[1]), 'wa6-kernel-and-packs (C8)');
+  assert.equal(refs.criterionLabel({ criterion_id: 'x' }), 'x');
+  assert.equal(refs.criterionLabel(null), '');
+});
+
+test('every widget drill-in click sends the SLUG, never a position', () => {
+  // The case that made this worth a task: a rendered card outlives the ordering
+  // it was rendered from, so a handler carrying `/status C11` starts naming a
+  // different criterion the moment anyone inserts one above it.
+  const html = status.renderStatusWidget(DATA, null);
+  for (const c of DATA.criteria) {
+    assert.ok(html.includes(`sendPrompt('/status ${c.criterion_id}')`),
+      `expected a slug click handler for ${c.criterion_id}`);
+  }
+  assert.equal(/sendPrompt\('\/status C\d+'\)/.test(html), false,
+    'a positional click handler survived in the widget');
+});
+
+test('the markdown card never suggests a positional drill-in', () => {
+  const md = status.renderStatusMarkdown(DATA, null);
+  assert.equal(/`\/status C\d+`/.test(md), false, 'the drill-in hint quotes a position');
+  assert.match(md, /`\/status wa10-security-enforced`/);
+});
+
+test('the markdown table puts the criterion before the position', () => {
+  const md = status.renderStatusMarkdown(DATA, null);
+  assert.match(md, /\| \| Criterion \| Pos \|/);
+  // …and every row follows the header it declares.
+  assert.match(md, /\|\s*\|\s*wa6-kernel-and-packs\s*\|\s*C8\s*\|/);
+});
+
+test('a criterion card headlines the slug', () => {
+  const md = status.renderStatusMarkdown(DATA, DATA.criteria[1]);
+  assert.match(md, /BONGOS-V2 · wa6-kernel-and-packs \(C8\)/);
+  const html = status.renderStatusWidget(DATA, DATA.criteria[1]);
+  assert.match(html, /wa6-kernel-and-packs \(C8\)/);
+});
+
+// ---------- the escaping the slug column newly needs ----------
+
+test('a slug carrying an apostrophe cannot break the click handler', () => {
+  // Task ids are digits, so the existing handlers get away with HTML-escaping
+  // alone; a criterion_id is free text from the DB and goes inside a
+  // single-quoted JS string inside an HTML attribute.
+  const odd = { ...crit(2, "o'hara-rule", '1000999') };
+  const html = status.renderStatusWidget({ ...DATA, criteria: [odd] }, null);
+  assert.ok(html.includes("sendPrompt('/status o\\'hara-rule')"),
+    'the apostrophe was not escaped for the JS string');
+});
+
+console.log(`\ncriterion ref — read side (task 1004069): ${passed} passed, ${failed} failed`);
+process.exitCode = failed > 0 ? 1 : 0;

package/tests/session-cards.mjs

@@ -78,12 +78,45 @@ test('status args extract an explicit version', () => {
   assert.deepEqual(statusCard.args("what's left in PMS-V1"), ['--hook', '--version', 'PMS-V1']);
 });
 
-test('status args extract a criterion token', () => {
-  assert.deepEqual(statusCard.args("what's left for C8"), ['--hook', 'C8']);
+// Both criterion forms ride the EXACT flag (task 1004069) — status.js then never
+// has to guess whether a bare token was a version id or a criterion ref.
+test('status args extract a positional criterion token', () => {
+  assert.deepEqual(statusCard.args("what's left for C8"), ['--hook', '--criterion', 'C8']);
 });
 
 test('status args extract version AND criterion together', () => {
-  assert.deepEqual(statusCard.args('status of GDS-V4 C2'), ['--hook', '--version', 'GDS-V4', 'C2']);
+  assert.deepEqual(statusCard.args('status of GDS-V4 C2'), ['--hook', '--version', 'GDS-V4', '--criterion', 'C2']);
+});
+
+// A card's own click handler sends the SLUG, so the hook that feeds the card has
+// to recognise the form its own output produces — otherwise every drill-in click
+// on a rendered card falls back to the whole-version overview.
+test('status args extract a criterion SLUG after the slash command', () => {
+  assert.deepEqual(statusCard.args('/status wa6-kernel-and-packs'),
+    ['--hook', '--criterion', 'wa6-kernel-and-packs']);
+  assert.deepEqual(statusCard.args('please run /status `wa11-legible`'),
+    ['--hook', '--criterion', 'wa11-legible']);
+});
+
+test('a slug after the word "criterion" is picked up too', () => {
+  assert.deepEqual(statusCard.args('how far along is criterion wa6-noise-limited'),
+    ['--hook', '--criterion', 'wa6-noise-limited']);
+});
+
+test('the SLUG wins over a positional token in the same prompt', () => {
+  // The slug cannot have gone stale; C11 may name a different criterion than it
+  // did when whatever the builder is quoting was written.
+  assert.deepEqual(statusCard.args('/status wa6-noise-limited (was C11)'),
+    ['--hook', '--criterion', 'wa6-noise-limited']);
+});
+
+test('hyphenated ENGLISH in a status prompt is not read as a slug', () => {
+  // The pattern only fires where a prompt actually POINTS at a criterion. A
+  // loose one would 404 the drill-in on ordinary prose — and a status card
+  // answering about nothing is worse than one answering about the version.
+  assert.deepEqual(statusCard.args("what's left for the half-finished work"), ['--hook']);
+  assert.deepEqual(statusCard.args('what tasks remain on the module-economy side of things'), ['--hook']);
+  assert.equal(hook.criterionSlugIn('status of the multi-goal version'), null);
 });
 
 // ---------- buildAdditionalContext: widgets ON ----------