@bongos/core 1.19.972 → 1.19.973

package/docs/copy-registry.json

@@ -3,9 +3,9 @@
   "generator": "scripts/gds/copy-inventory.js",
   "goal": 1000074,
   "counts": {
-    "strings": 1929,
-    "unique_ids": 1669,
-    "certain": 1929,
+    "strings": 1936,
+    "unique_ids": 1676,
+    "certain": 1936,
     "heuristic": 0,
     "duplicate_ids": 178
   },
@@ -13,7 +13,7 @@
     "builders-hall": {
       "at": "modules/hall-ui/public",
       "files": 96,
-      "strings": 1434
+      "strings": 1441
     },
     "status-dashboard": {
       "at": "modules/status-ui/public",
@@ -156,9 +156,9 @@
       ]
     },
     {
-      "id": "cbfdd6ac4ec8",
+      "id": "d6314ddcc1d0",
       "surface": "landing",
-      "text": "Open source (AGPL-3.0)",
+      "text": "Open source",
       "occurrences": 5,
       "at": [
         "modules/public-landing/public/contact.html:71",
@@ -1066,8 +1066,8 @@
       "text": "Move to {…}",
       "occurrences": 2,
       "at": [
-        "modules/hall-ui/public/deploy.js:269",
-        "modules/hall-ui/public/deploy.js:383"
+        "modules/hall-ui/public/deploy.js:360",
+        "modules/hall-ui/public/deploy.js:472"
       ]
     },
     {
@@ -1970,7 +1970,7 @@
       "surface": "builders-hall",
       "text": "(checked {…})",
       "file": "modules/hall-ui/public/deploy.js",
-      "line": 203,
+      "line": 256,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -2262,6 +2262,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "0c611f5a76af",
+      "surface": "builders-hall",
+      "text": "A move to core {…} failed{…} — this project has moved on since, and is serving {…} now. Whatever stopped that one may or may not still apply; the check above is the live answer.",
+      "file": "modules/hall-ui/public/deploy.js",
+      "line": 193,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "a07c7b335a66",
       "surface": "builders-hall",
@@ -2640,6 +2649,15 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "2ca420e19dbb",
+      "surface": "builders-hall",
+      "text": "An earlier attempt did not land.",
+      "file": "modules/hall-ui/public/deploy.js",
+      "line": 193,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "69f0ca4a4d84",
       "surface": "builders-hall",
@@ -3311,7 +3329,7 @@
       "surface": "builders-hall",
       "text": "Checked against {…} — nothing blocks this move.{…}",
       "file": "modules/hall-ui/public/deploy.js",
-      "line": 206,
+      "line": 259,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -3334,11 +3352,11 @@
       "confidence": "certain"
     },
     {
-      "id": "69da40d030b0",
+      "id": "ac7cf27bd7de",
       "surface": "builders-hall",
-      "text": "Checking what this would do…",
+      "text": "Checking what this would do, and what it would bring in. The answer comes from the machine itself, so it can take a couple of minutes.",
       "file": "modules/hall-ui/public/deploy.js",
-      "line": 196,
+      "line": 248,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -4112,7 +4130,16 @@
       "surface": "builders-hall",
       "text": "Could not read this project's deploy state: {…}",
       "file": "modules/hall-ui/public/deploy.js",
-      "line": 322,
+      "line": 414,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
+    {
+      "id": "21a782f1af26",
+      "surface": "builders-hall",
+      "text": "Could not read what this would bring in: {…}. The check below still applies.",
+      "file": "modules/hall-ui/public/deploy.js",
+      "line": 333,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -4562,7 +4589,7 @@
       "surface": "builders-hall",
       "text": "Database behind.",
       "file": "modules/hall-ui/public/deploy.js",
-      "line": 286,
+      "line": 378,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -6799,11 +6826,11 @@
       "confidence": "certain"
     },
     {
-      "id": "dce0546c9e34",
+      "id": "f3ba5b1b7849",
       "surface": "builders-hall",
-      "text": "Merging work does not put it in front of anyone. This is the step that does: it moves this platform — or any project it hosts — onto a newer core, waits for that box to answer, and puts it back if it does not.",
+      "text": "Merging work does not put it in front of anyone. This is the step that does: it moves this project onto a newer core, waits for its box to answer, and puts it back if it does not. Every project has this control in its own hall, this platform included — so what you see below is one project, the one whose hall you are in.",
       "file": "modules/hall-ui/public/deploy.html",
-      "line": 39,
+      "line": 42,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -6929,7 +6956,7 @@
       "surface": "builders-hall",
       "text": "Move to {…}",
       "file": "modules/hall-ui/public/deploy.js",
-      "line": 269,
+      "line": 360,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -6938,7 +6965,7 @@
       "surface": "builders-hall",
       "text": "Move to {…}",
       "file": "modules/hall-ui/public/deploy.js",
-      "line": 383,
+      "line": 472,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -6947,7 +6974,7 @@
       "surface": "builders-hall",
       "text": "Moving to core",
       "file": "modules/hall-ui/public/deploy.js",
-      "line": 140,
+      "line": 157,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -7280,7 +7307,7 @@
       "surface": "builders-hall",
       "text": "No running box to deploy.",
       "file": "modules/hall-ui/public/deploy.js",
-      "line": 360,
+      "line": 450,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -7302,6 +7329,15 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "084748fd85b4",
+      "surface": "builders-hall",
+      "text": "No shipped work is recorded between core {…} and {…}.",
+      "file": "modules/hall-ui/public/deploy.js",
+      "line": 340,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "4485497d87bb",
       "surface": "builders-hall",
@@ -7397,7 +7433,7 @@
       "surface": "builders-hall",
       "text": "Not checked yet — the runner takes this reading on its own tick.",
       "file": "modules/hall-ui/public/deploy.js",
-      "line": 201,
+      "line": 254,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -7568,7 +7604,7 @@
       "surface": "builders-hall",
       "text": "Nothing newer is published that this box can take. There is nothing to deploy.",
       "file": "modules/hall-ui/public/deploy.js",
-      "line": 303,
+      "line": 395,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -7604,7 +7640,7 @@
       "surface": "builders-hall",
       "text": "Now running core {…}",
       "file": "modules/hall-ui/public/deploy.js",
-      "line": 162,
+      "line": 211,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -9206,7 +9242,7 @@
       "surface": "builders-hall",
       "text": "See what would change",
       "file": "modules/hall-ui/public/deploy.js",
-      "line": 172,
+      "line": 221,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -9287,7 +9323,7 @@
       "surface": "builders-hall",
       "text": "Serving {…} — read from the box itself, {…}.",
       "file": "modules/hall-ui/public/deploy.js",
-      "line": 306,
+      "line": 398,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -9782,7 +9818,7 @@
       "surface": "builders-hall",
       "text": "Still working on core {…}. It keeps going without this page — reload to see where it got to.",
       "file": "modules/hall-ui/public/deploy.js",
-      "line": 419,
+      "line": 506,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -10331,7 +10367,7 @@
       "surface": "builders-hall",
       "text": "The move to core {…} did not land",
       "file": "modules/hall-ui/public/deploy.js",
-      "line": 154,
+      "line": 203,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10637,7 +10673,7 @@
       "surface": "builders-hall",
       "text": "The upgrade checked {…} and refused:{…}",
       "file": "modules/hall-ui/public/deploy.js",
-      "line": 211,
+      "line": 264,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10947,21 +10983,12 @@
       "origin": "html-text",
       "confidence": "certain"
     },
-    {
-      "id": "f93fcb24c6ba",
-      "surface": "builders-hall",
-      "text": "This platform",
-      "file": "modules/hall-ui/public/deploy.js",
-      "line": 352,
-      "origin": "js-markup",
-      "confidence": "certain"
-    },
     {
       "id": "3c8aaec39c40",
       "surface": "builders-hall",
       "text": "This project's code expects {…} database change{…} that its database has not applied yet. Anything that relies on {…} may fail until the migrations run.",
       "file": "modules/hall-ui/public/deploy.js",
-      "line": 286,
+      "line": 378,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10970,7 +10997,7 @@
       "surface": "builders-hall",
       "text": "This restarts {…} onto core",
       "file": "modules/hall-ui/public/deploy.js",
-      "line": 269,
+      "line": 360,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -11015,7 +11042,7 @@
       "surface": "builders-hall",
       "text": "This would fail.",
       "file": "modules/hall-ui/public/deploy.js",
-      "line": 211,
+      "line": 264,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -11406,6 +11433,24 @@
       "origin": "html-attr:title",
       "confidence": "certain"
     },
+    {
+      "id": "515f3c6023a9",
+      "surface": "builders-hall",
+      "text": "What the upgrade said",
+      "file": "modules/hall-ui/public/deploy.js",
+      "line": 189,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
+    {
+      "id": "5a58392783fd",
+      "surface": "builders-hall",
+      "text": "What this brings in",
+      "file": "modules/hall-ui/public/deploy.js",
+      "line": 349,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "a444ad812e4f",
       "surface": "builders-hall",
@@ -11744,7 +11789,7 @@
       "surface": "builders-hall",
       "text": "You can still press Move — the runner will refuse it the same way, and the box is left where it is.",
       "file": "modules/hall-ui/public/deploy.js",
-      "line": 211,
+      "line": 264,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -12905,7 +12950,7 @@
       "surface": "builders-hall",
       "text": "is published and this box is not on it yet.",
       "file": "modules/hall-ui/public/deploy.js",
-      "line": 172,
+      "line": 221,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -13049,7 +13094,7 @@
       "surface": "builders-hall",
       "text": "no reading",
       "file": "modules/hall-ui/public/deploy.js",
-      "line": 113,
+      "line": 130,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -13364,7 +13409,7 @@
       "surface": "builders-hall",
       "text": "reads the control plane's own observation · ADR 0293 · every move is recorded with who asked",
       "file": "modules/hall-ui/public/deploy.js",
-      "line": 364,
+      "line": 454,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -14493,6 +14538,15 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "13c0414d2a10",
+      "surface": "builders-hall",
+      "text": "— attempted{…}. This project is still running core {…}.",
+      "file": "modules/hall-ui/public/deploy.js",
+      "line": 203,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "d2c30a1ee74e",
       "surface": "builders-hall",
@@ -14525,7 +14579,7 @@
       "surface": "builders-hall",
       "text": "— moved {…}, and the box confirmed it.",
       "file": "modules/hall-ui/public/deploy.js",
-      "line": 162,
+      "line": 211,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -14556,15 +14610,6 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
-    {
-      "id": "38c40179ec06",
-      "surface": "builders-hall",
-      "text": "— this project was put back on {…} and is running.",
-      "file": "modules/hall-ui/public/deploy.js",
-      "line": 154,
-      "origin": "js-markup",
-      "confidence": "certain"
-    },
     {
       "id": "392afc533191",
       "surface": "builders-hall",
@@ -14601,12 +14646,21 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "8f2eba6e0da8",
+      "surface": "builders-hall",
+      "text": "— {…} {…} of work landed between core {…} and {…}{…}:",
+      "file": "modules/hall-ui/public/deploy.js",
+      "line": 349,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "28fef677706c",
       "surface": "builders-hall",
       "text": "— {…}. The project restarts as part of this, and puts itself back on {…} if the new core does not answer. This page is watching and will say when it lands.",
       "file": "modules/hall-ui/public/deploy.js",
-      "line": 140,
+      "line": 157,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -14619,6 +14673,15 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "b797996b2e4f",
+      "surface": "builders-hall",
+      "text": "…and {…} more, not listed.",
+      "file": "modules/hall-ui/public/deploy.js",
+      "line": 347,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "b2a04abfead0",
       "surface": "builders-hall",
@@ -16141,45 +16204,45 @@
       "confidence": "certain"
     },
     {
-      "id": "cbfdd6ac4ec8",
+      "id": "d6314ddcc1d0",
       "surface": "landing",
-      "text": "Open source (AGPL-3.0)",
+      "text": "Open source",
       "file": "modules/public-landing/public/contact.html",
       "line": 71,
       "origin": "html-text",
       "confidence": "certain"
     },
     {
-      "id": "cbfdd6ac4ec8",
+      "id": "d6314ddcc1d0",
       "surface": "landing",
-      "text": "Open source (AGPL-3.0)",
+      "text": "Open source",
       "file": "modules/public-landing/public/index.html",
       "line": 900,
       "origin": "html-text",
       "confidence": "certain"
     },
     {
-      "id": "cbfdd6ac4ec8",
+      "id": "d6314ddcc1d0",
       "surface": "landing",
-      "text": "Open source (AGPL-3.0)",
+      "text": "Open source",
       "file": "modules/public-landing/public/privacy.html",
       "line": 80,
       "origin": "html-text",
       "confidence": "certain"
     },
     {
-      "id": "cbfdd6ac4ec8",
+      "id": "d6314ddcc1d0",
       "surface": "landing",
-      "text": "Open source (AGPL-3.0)",
+      "text": "Open source",
       "file": "modules/public-landing/public/projects.html",
       "line": 1410,
       "origin": "html-text",
       "confidence": "certain"
     },
     {
-      "id": "cbfdd6ac4ec8",
+      "id": "d6314ddcc1d0",
       "surface": "landing",
-      "text": "Open source (AGPL-3.0)",
+      "text": "Open source",
       "file": "modules/public-landing/public/terms.html",
       "line": 84,
       "origin": "html-text",

package/docs/design/projects-hub-direction-v2.md

@@ -85,7 +85,7 @@ Every item is tagged as the builders tagged it: **given** (one of the eight), **
 These were found by the test and page mappers and confirmed against the feeds; they belong to tasks 1003300 / 1003301, not to this round.
 
 - **No feed carries a per-project hall address.** `clientBranding()` deliberately withholds domains and `{{buildersOrigin}}` is one value per instance, so "hall entry only where the hall address differs from the site address" needs a new field on `/api/bongos/projects/featured` (or `/my-projects`), e.g. `hall_origin`, null where the hall is at `<site>/builders`. On the apex the hall is `builders.cloudbongos.com` (differs); on a child it is `<site>/builders` (same).
-- **No feed carries faces or a 30-day count.** The enrichment (`modules/platform-identity/project-stats.js`) returns `builders`, `tags`, `owner`, `owner_avatar`; the faces need the remote leaderboard's avatar rows kept (the count already comes from them), and `shipped_30d` needs the remote `/api/gds/public/recent-shipped` (row-capped at 30, hence the `N+` rule). `art_url` is already on the feed and is read by nothing.
+- **No feed carries faces or a 30-day count.** The enrichment (`modules/platform-identity/project-stats.js`) returns `builders`, `tags`, `owner`, `owner_avatar`; the faces need the remote leaderboard's avatar rows kept (the count already comes from them), and `shipped_30d` needs the remote `/api/bongos/public/recent-shipped` (row-capped at 30, hence the `N+` rule). `art_url` is already on the feed and is read by nothing.
 - **Tests that pin the retired chrome and must be retargeted in the build** (from `tests/projects_hub.mjs`, `tests/projects_hub_pre_uat.mjs`, `tests/landing_page.mjs`): the `Home` link (`projects_hub.mjs:40, 46, 48`), the hall pill's `data-link-hall href="{{buildersOrigin}}"` (`landing_page.mjs:214-220`, `projects_hub.mjs:105`), the `.shell .navrow` rule in cosmos (`projects_hub_pre_uat.mjs:203`), the card's slice rule (`projects_hub.mjs:487`: the first adjacent `</div></div>` ends the slice, so every new card region must be a direct child and the banner a bare `<img>`), the `<td>` count across the header, `#selfRow` and the row template if the glyph becomes a cell (`projects_hub.mjs:531-535`), and the singular `querySelector('[data-nav="mine"]')` at `projects.html:5307` (a `My projects` item with `data-nav="mine"` would be a second node; hide by `querySelectorAll` or hook it differently). The dropdown items keep `href="?view=map" data-nav="map"` (etc.) as adjacent attributes so `projects_hub.mjs:42-43` holds unchanged. A new bar-ground token goes into cosmos with both dark twins and a `PAIRS` row in `tests/cosmos_token_contrast.mjs`.
 - **Copy.** Every string that changes on the built page re-runs `node scripts/gds/copy-inventory.js` (CI checks the registry).
 

package/docs/design/vanilla-hall-ui-redesign-scope.md

@@ -82,7 +82,7 @@ One shell wraps every page, replacing both the header text-link stack and the pe
 | **Content** | Scrollable view region | Right of sidebar, below top bar | max 1120px, gutter 24–32 | Only region that scrolls. One view at a time; centers past max. |
 | **Footer** | Minimal meta line | End of content flow | auto | Reduced to sign-out + instance name; no lore. |
 
-> **Seam preserved.** The shell is chrome only. The hall-widget registry (`dom-utils.js` · `contributeHallWidget`) and the `/api/gds/*` reads are unchanged — widgets mount into view containers instead of one `<main>`.
+> **Seam preserved.** The shell is chrome only. The hall-widget registry (`dom-utils.js` · `contributeHallWidget`) and the `/api/bongos/*` reads are unchanged — widgets mount into view containers instead of one `<main>`.
 
 ---
 
@@ -268,7 +268,7 @@ Not layout, but it rides along. Most of this already flows through the brand pac
 The hall has hard architectural constraints (see `modules/hall-ui/CLAUDE.md`). Placement changes are cheap only if they respect these.
 
 - **Widget registry is the source of truth.** A fitness check (`scripts/gds/fitness.js checkHallSectionRegistry`) reds the build if a `<section class="scroll">` is hardcoded into `<main>`. Views must mount registered widgets, not inline them.
-- **No framework, no build step.** Static HTML/CSS/JS polling `/api/gds/*`. The shell is hand-rolled CSS + a small amount of JS — no framework may be introduced.
+- **No framework, no build step.** Static HTML/CSS/JS polling `/api/bongos/*`. The shell is hand-rolled CSS + a small amount of JS — no framework may be introduced.
 - **Dedicated serving block.** `src/bongos/serve-internal.js` serves this from `BUILDERS_DIR` with the subdomain rewrite shim, canonical redirects, page gates, and asset-stamping. New assets must carry the content-hash `?v=` stamp.
 - **Server-side gates stay authoritative.** Hiding a sidebar item is cosmetic; `requireGovernancePage` and the sign-in redirects remain the real access control.
 - **Brand pack drives copy.** Neutralizing voice = a neutral default pack + removing hardcoded lore, not English strings baked into markup.

package/docs/file-map.md

@@ -86,8 +86,8 @@
 │   ├── box-dormant-reclaim.{service,timer} ← (#598) daily CONTROL-PLANE sweep: deprovision long-parked dev boxes
 │   ├── box-intent-runner.{service,timer}   ← (#701) 1-min CONTROL-PLANE runner: drain box_intents (auto-provision + wake-on-connect) via `box.js run-intents --apply`
 │   ├── box-drift-reconcile.{service,timer}  ← (#1289/ADR 0071) hourly CONTROL-PLANE sweep: repair DO⇄DB drift via `box.js reconcile-drift --apply` (kill zombie droplets, mark ghost rows destroyed)
-│   ├── box-heartbeat.sh         ← (#598) runs ON THE BOX: pings /api/gds/box/heartbeat while in use, so the idle sweep measures activity not uptime
-│   ├── box-report-terminal.sh   ← (#760/ADR 0038) runs ON THE BOX: POSTs the box's web-terminal URL + basic-auth credential UP to /api/gds/box/terminal so a Chromebook builder reads them from the web
+│   ├── box-heartbeat.sh         ← (#598) runs ON THE BOX: pings /api/bongos/box/heartbeat while in use, so the idle sweep measures activity not uptime
+│   ├── box-report-terminal.sh   ← (#760/ADR 0038) runs ON THE BOX: POSTs the box's web-terminal URL + basic-auth credential UP to /api/bongos/box/terminal so a Chromebook builder reads them from the web
 │   ├── box-source-fetch.sh      ← (#600/#898/ADR 0052) runs ON THE BOX post-clone: scope-aware source fetch (sparse starter / full) + idempotently installs & enables the box units (box-game-preview, box-terminal, close-box) on every fetch so existing boxes self-heal; also self-tests (task 843) — every cycle it black-box-probes box-terminal/cloudflared/box-game-preview + the terminal credential and restarts whatever's unhealthy, not just what's absent
 │   ├── builder-box-cloud-init.yaml ← (#598/#599/#760) first-boot bootstrap: Docker + devcontainer up, Claude Code + ttyd + cloudflared on host, box-terminal.service + cloudflared.service + heartbeat cron wired (substituted by box.js)
 │   ├── managed-settings.template.json ← (#599) Claude Desktop sshConfigs template (locked to one approved box); filled per-builder by gen-managed-settings.sh
@@ -164,7 +164,7 @@
 │       ├── discord-channels.js  ← Archon CLI: plan/apply the Discord channel layout via the API (ADR 0036, #727)
 │       ├── setup.js             ← one-time GitHub Device Flow → ~/.config/otb/gds-session.json
 │       ├── start.js             ← list claimable tasks + active claims (`/builder-start`)
-│       ├── claim.js             ← atomic POST /api/gds/claims (`/builder-claim`); runs the worktree-per-claim guard (worktree-claim-guard.js) BEFORE the session check and the POST; prints the claim-time context pack incl. next-free ADR/migration numbers (V4.R26); printDisciplineMode() reads discipline-modes.json to route a claimed task to its playbook skill
+│       ├── claim.js             ← atomic POST /api/bongos/claims (`/builder-claim`); runs the worktree-per-claim guard (worktree-claim-guard.js) BEFORE the session check and the POST; prints the claim-time context pack incl. next-free ADR/migration numbers (V4.R26); printDisciplineMode() reads discipline-modes.json to route a claimed task to its playbook skill
 │       ├── discipline-modes.json ← the ROLE REGISTRY read by claim.js: engineer/artist/ideator → their role pack under docs/packs/, module-contributed ui → the /design skill; absence of an entry = the default build-and-ship loop, fail-open at claim time — but scripts/gds/role-pack-guard.js hard-fails CI if an entry names a pack that is not in the tree ([#1267](https://example.com/builders#/task/1267))
 │       ├── next-number.js       ← deterministic next-free ADR + migration number from origin/main ∪ local working tree; supersedes the drift-prone claim-time DB counter (V4.R26, [#964](https://example.com/builders#/task/964)). `node scripts/gds/next-number.js [--json]`
 │       ├── gen-repo-map.js      ← Path B (ADR 0063, [#1224](https://example.com/builders#/task/1224)): zero-dep, deterministic symbol-skeleton generator → docs/repo-map.md + the generated factual block in each nested CLAUDE.md; ranks exported symbols by reference frequency. `--check` = CI gate; regenerated on deploy by ship.js regenerateRepoMap()
@@ -187,7 +187,7 @@
 │       ├── me.js                ← current builder profile + leaderboard
 │       ├── goal.js              ← goal board CLI: `list` (rollup per goal) + `show <id>` (criteria, tasks, waits-on, next claimable)
 │       ├── seed-v3-tasks.js     ← V3 Planning Session #1: 80 net-new GDS-V3 tasks (V3.R01–V3.R89) + 10 idea_inbox promotions; idempotent on source_ref
-│       ├── backfill-cost.js     ← read art ledger → POST /api/gds/cost (idempotent)
+│       ├── backfill-cost.js     ← read art ledger → POST /api/bongos/cost (idempotent)
 │       ├── smoke-write.sh       ← write-path smoke (create→claim→ship round-trip)
 │       ├── backup-dropin-sweep.sh ← (task 1003930) control-plane sweep: retires the temporary task-1003925 backup drop-in from each project whose pinned core carries the fix (1.19.750+), proving one backup succeeds without it first; survey by default, `--apply` to act; re-run after each pin moves
 │       ├── stray-unit-sweep.sh  ← (task 1003939) control-plane sweep: the ledger's torn-down slugs that still have a service/backup unit loaded or on disk (a torn-down project holding memory outside the ADR 0285 count); survey by default, `--apply` disables, removes, reloads, reset-failed's; DB/dumps/checkout/Caddy left alone
@@ -229,7 +229,7 @@
 │   │   ├── catalog.js          ← the browsable module catalog model (ADR 0167 / ADR 0107 §2/§3): `source` (which TREE ships it — core package vs instance, read off the loader's discovery root) + resolved author/origin `credit` with an `inferred` flag. The ONE builder behind both `GET /api/bongos/modules` and `bongos module list --catalog`, so the hall + CLI can't drift.
 │   │   └── semver.js           ← minimal semver `satisfies(version, range)` used by the loader (no npm dep).
 │   ├── platform-server.js       ← BONGOS-ONLY entrypoint (ADR 0062 R51, task 1190): boots Express + the shared internal surface (API + hall + status) with NO game in the process; the inverse of preview-server.js. `node src/platform-server.js`
-│   ├── preview-server.js        ← GAME-ONLY entrypoint for the per-box sandbox (ADR 0052): Phaser/Colyseus + tiles, NO /api/gds
+│   ├── preview-server.js        ← GAME-ONLY entrypoint for the per-box sandbox (ADR 0052): Phaser/Colyseus + tiles, NO /api/bongos
 │   ├── seats.js                 ← in-process seat counter + EventEmitter
 │   ├── rooms/
 │   │   ├── WorldRoom.js         ← singleton room: move + interact + identity
@@ -401,7 +401,7 @@ tests/
 ├── builder-exit/SKILL.md          ← /builder-exit — gracefully offboard (or reactivate) a builder: release claims, seal session logs, drop rank to xenos
 ├── builder-key/SKILL.md           ← /builder-key — list API-key status, render the visual 'key needed' callout for anything missing, drive the UI-first Settings add-flow + re-sync/confirm; never accepts a key pasted in chat (task 1391)
 ├── builder-reauth/SKILL.md        ← /builder-reauth — refresh an expired Bongos CLI session the UI-first way (no terminal Device Flow)
-├── builder-redteam/SKILL.md       ← /builder-redteam — file a red-team / vulnerability report (severity, target, repro) to /api/gds/security
+├── builder-redteam/SKILL.md       ← /builder-redteam — file a red-team / vulnerability report (severity, target, repro) to /api/bongos/security
 ├── builder-release/SKILL.md       ← /builder-release — abandon a claim (task returns to ready, no credits)
 ├── builder-sequence/SKILL.md      ← /builder-sequence N — walk a whole dependency chain from one kickoff (claim → build → ship → next), one claim at a time; halts and reports on migration/security/protected-path/thin-spec/judgement tasks (scripts/gds/sequence.js, task 1002484)
 ├── builder-setup/SKILL.md         ← /builder-setup — one-time GitHub Device Flow auth (Bongos); multi-builder-on-one-device gate
@@ -489,7 +489,7 @@ To install on a new machine, symlink each routine's directory under `~/.claude/s
 ├── session-start.js          ← SessionStart: <redacted> .env.local into a fresh worktree, then chains onboarding-ship + rank-change greeting + memory pull
 ├── rank-change-greeting.js   ← promotion/demotion greeting (V3.R28 #249); spawned by session-start.js, also runnable standalone
 ├── pull-memory.js            ← memory pull-on-session-start (V3.R56 #275); spawned by session-start.js (kill-switches: OTB_MEMORY_PULL_OFF / OTB_SUBAGENT)
-├── recall-hints.js           ← SessionStart: when the session opens holding a claim, surface the top project-knowledge hits for that task via POST /api/gds/search (#963/V4.R25, ADR 0060)
+├── recall-hints.js           ← SessionStart: when the session opens holding a claim, surface the top project-knowledge hits for that task via POST /api/bongos/search (#963/V4.R25, ADR 0060)
 ├── conductor.js              ← UserPromptSubmit: MAS Conductor advisory + dispatch directive (#427/#439); self-gates on OTB_CONDUCTOR_OFF / OTB_SUBAGENT
 ├── session-cards.js          ← UserPromptSubmit: deterministic delivery of READ-ONLY in-session cards (builder-start, status) — pre-renders the card + injects a one-step render directive (task 1288)
 ├── lifecycle-card.js         ← PostToolUse (Bash|PowerShell): deterministic delivery of MUTATING lifecycle cards (claim/ship/release) — the write-side mirror of session-cards.js (task 1288)

package/docs/handoff-template.md

@@ -27,7 +27,7 @@
 **New limitations / risks / blockers introduced this session:**
 - {new V1 architecture limitation → added to limitations/current-version.md}
 - {new ops gotcha → long-form recipe under docs/recipes/, OR short rule via `node scripts/gds/learning-capture.js`}
-- {new blocker for Lars → POST /api/gds/blockers (the markdown file is frozen archive only)}
+- {new blocker for Lars → POST /api/bongos/blockers (the markdown file is frozen archive only)}
 - {(or "none")}
 
 **Generative ideas captured this session:**

package/docs/module-api-changelog.md

@@ -2418,5 +2418,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.970 with no explicit bump. run 35805746484. (task 1002620)
   1.19.972 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.971 with no explicit bump. run 35806478158. (task 1002620)
+  1.19.973 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.972 with no explicit bump. run 35813381436. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/docs/modules-contract.md

@@ -296,7 +296,7 @@ Each module's `modules/<key>/CLAUDE.md` is the authoritative per-module referenc
 | `isModuleEnabled(name)` | Gate a mount or feature. Throws on an unknown name (programmer error). |
 | `enabledModules()` | The resolved on-set (an array of enabled module keys). |
 | `enabledDisciplines()` | The union of `contributes.disciplines` across enabled modules. |
-| `clientModules()` | `{ enabled: {…booleans}, disciplines: […] }` — injected into hall/status HTML as `window.__MODULES__` and served at `GET /api/gds/public/modules`. Front-ends read it to hide UI sections for off modules. |
+| `clientModules()` | `{ enabled: {…booleans}, disciplines: […] }` — injected into hall/status HTML as `window.__MODULES__` and served at `GET /api/bongos/public/modules`. Front-ends read it to hide UI sections for off modules. |
 | `resolveModules(opts)` | The pure resolver (unit-tested, zero I/O). |
 
 ---

package/docs/onboarding/drachmae-and-karma.md

@@ -118,7 +118,7 @@ Builders are **uncapped by default** ([ADR 0085](../adr/0085-remove-default-per-
 
 - **No default cap.** `monthly_budget_usd` is unset for most builders, which means uncapped. The MTD figure still resets at the start of each calendar month.
 - A cap, when set, is there to **catch a runaway**, not to ration normal work — the **$50 default was removed** ([ADR 0085](../adr/0085-remove-default-per-builder-spend-cap.md)) because a new builder's own session cost crossed it within a day or two, freezing the very work it was meant to enable.
-- An **Archon** can set or clear a specific builder's ceiling (`PATCH /api/gds/builders/:id/budget`); clearing it (`null`) returns the builder to uncapped.
+- An **Archon** can set or clear a specific builder's ceiling (`PATCH /api/bongos/builders/:id/budget`); clearing it (`null`) returns the builder to uncapped.
 
 If a cap is set and you hit `over`, you're not in trouble — you've just reached the month's ceiling. Ask an Archon to raise or clear it if the work justifies it.
 
@@ -130,7 +130,7 @@ Karma (added in migration 040) is a **completely separate** counter from example
 
 ### How karma is earned (and lost)
 
-- **Peer votes on confirmed work.** Builders upvote/downvote each other's confirmed tasks. Only **Metic-and-above** can cast a vote (`POST /api/gds/tasks/:id/vote` is rank-gated). Votes are **tallied weekly** into one net `peer_vote_weekly` karma entry per builder. There's an **anti-self-vote** guard and an anti-retaliation rule (a downvote can't dent your karma within the same week).
+- **Peer votes on confirmed work.** Builders upvote/downvote each other's confirmed tasks. Only **Metic-and-above** can cast a vote (`POST /api/bongos/tasks/:id/vote` is rank-gated). Votes are **tallied weekly** into one net `peer_vote_weekly` karma entry per builder. There's an **anti-self-vote** guard and an anti-retaliation rule (a downvote can't dent your karma within the same week).
 - **Proposal ratification.** When a criterion-proposal you made is ratified, you get **+3 karma** (`proposal_ratified`).
 - **Idea promotion.** Promoting an idea into a real task awards karma to the capturer.
 - **It can go down.** The [BFG](../adr/0026-bfg-memory-hygiene-and-cross-builder-learning.md) good-citizenship corrections can apply a *non-positive* karma delta. Karma is a slower, more reflective signal than example — you can ship fast and still lose karma if you break things.