@bongos/core 1.20.10 → 1.20.12

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.20.10",
-  "core_contract": "1.20.10",
-  "source_commit": "9d6a15fa234ae02da2d1d9b4b7196777bfe168b1",
+  "core_version": "1.20.12",
+  "core_contract": "1.20.12",
+  "source_commit": "157de30a7a166f1941ba54aaa8f57964f7f73362",
   "source_ref": "HEAD",
-  "built_at": "2026-09-30T04:50:43.194Z",
+  "built_at": "2026-09-30T11:33:34.437Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 556,
     "agent_docs_stubbed": 25,
-    "functional_verbatim": 2624,
+    "functional_verbatim": 2626,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 3206,
-  "tree_sha256": "e9c9cad3c2cb4ca49d04f623e63dac7a691ad9536524b1c7dbdabf8cfdcfa6b9",
+  "file_count": 3208,
+  "tree_sha256": "0da694c2943c85befcb0d6d52c1d9ae4480c66b425a0393140773878b4483763",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -327,12 +327,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "655edd2659cc7ea8267529eb86f3a9454df4765f84ab5090208bab74b9befc93"
+      "sha256": "e02ae1f840ce2b9ba26906d22a71251f99093c1be99b7585d8d5492de6828247"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "1b5dfe77f736f8da7059734b1e38b7ae991810245799678235866ce7c2a02494"
+      "sha256": "d2eddb6398add51948e7facc2b3752a4bc9c2a1c5826cdade034328529389dd2"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -342,17 +342,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "5fa483ccc721ed1b1ed715bfd01fe432486397eeb6d0ae8f6e504b3f28a8b72d"
+      "sha256": "aef980f7c979cf57ce9cba684e370301f0343e3e72a4ce9076875fa0efd4287e"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "bb4de29e1723e57afe52bccbd86b22c768272917951551ac3612ba732efa8d07"
+      "sha256": "2fb562be1e4db7d2471f9ed6b7284d8b95071d9a365982c4721ff72febdfba63"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "bc339a45e590e5e5e1d3f75abb63e10304d2a980e20122bf8d1f44f1ee315277"
+      "sha256": "b99063352bcd42be68be647d30b838fdedcb0aef3c39a2b7a7849e9f80208fdd"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -2237,12 +2237,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "822f6c627d3bf4b7470740dd6a6f37cfeaef934d88bd44cd8616534481d8c1cf"
+      "sha256": "73b9c0372c8d6ddf88b0eec04695defbc219a826b8be9da71a24b5a1eb6ff060"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "6dea7c163c31d7b5128ebaea93d97c03262a560f489fd68f0edba551dc46403b"
+      "sha256": "c1360ad6a6659819a5a2db72cef07fd3631a3052745ef4fcf20075e9849f7fbd"
     },
     {
       "path": "docs/architecture.md",
@@ -2267,12 +2267,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "3efebbe96dcf76fa9e6f30e66594641b906c8b04b1d9c4c3ea57a8634dc143d8"
+      "sha256": "f4485fd6eecabff171add19c577d0c94b90b1e5e4e90e71f0af23bbd84085791"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "efd6dd52270465cfc046d2283321e7513769807fe795c57e2207ac284dcf4a0b"
+      "sha256": "f8b6e13542de4d3fe03cbfc6a4873c8a7fd7c3ea29e9b535d80c70d2d986340a"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2772,7 +2772,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "e8cdec0878fd4a4d01b317e417565a6b4eba969ddee1edc43b612df18882331c"
+      "sha256": "86429e308db13d625c1255ae509c712448f405ada592fc1ea1c2fe6fe8866d46"
     },
     {
       "path": "docs/modules-contract.md",
@@ -2857,12 +2857,12 @@
     {
       "path": "docs/page-inventory.json",
       "mode": "0000644",
-      "sha256": "d5242323bc5db540dfa190d5b89c92af0bf6e0a36419d141705fb4d7f51ea39c"
+      "sha256": "9e3397a30b8fa81b392a32b65f275209cb67021b7e74a4700e0ae9ff6d3c5e6b"
     },
     {
       "path": "docs/page-readings.json",
       "mode": "0000644",
-      "sha256": "3a08cbdaca08161fd7db132153a0e43badc9b7b156ad24825d38e2e760193226"
+      "sha256": "b959e7b3c6b623f81e4f5752fa6573621c79d6e8948d18b2b4c939101e65930b"
     },
     {
       "path": "docs/project-context.template.md",
@@ -3944,6 +3944,11 @@
       "mode": "0000644",
       "sha256": "6f502903c02f48a65370d2ca167b42a5ea514bed38bb9862d34465ea627191f2"
     },
+    {
+      "path": "migrations/core_264_claimable_respects_dependencies.sql",
+      "mode": "0000644",
+      "sha256": "2f578b536ed624b204fc201c0a5e8033a2417c189c9caaa8f2148408f76ae481"
+    },
     {
       "path": "modules/agents/CLAUDE.md",
       "mode": "0000644",
@@ -5327,7 +5332,7 @@
     {
       "path": "modules/hall-ui/public/panel.css",
       "mode": "0000644",
-      "sha256": "1e7d898054a987276450779ce2c265809fa51bc888e012e8a40a1d12b1f9afc9"
+      "sha256": "1c4ed23b0f464fcac39b9c2c22badee7173da55e406a712087ff0b7610428f66"
     },
     {
       "path": "modules/hall-ui/public/primer.css",
@@ -5517,17 +5522,17 @@
     {
       "path": "modules/hall-ui/public/settings-specialities.js",
       "mode": "0000644",
-      "sha256": "9bc109f2e947f1db1525b937d350f46e5231cc14a9dd5db8fa1c97a2b46fe6d1"
+      "sha256": "21ae179ba1c4ec8685d6d396a6f4c2b425255deae63c432408654d5b81ececc6"
     },
     {
       "path": "modules/hall-ui/public/settings.css",
       "mode": "0000644",
-      "sha256": "d73ab35cd887285813fe8d3f3f13ec8b0e2d179b1a9fb3cc910ea6caa7131607"
+      "sha256": "7cbb7284616c451918169126d9dc691db3018c2b1cdc489097b551eb3a6854c6"
     },
     {
       "path": "modules/hall-ui/public/settings.html",
       "mode": "0000644",
-      "sha256": "da40973f4e06deeef7fb08d1b150ec189abd9e9d34e455f8003b19125d6cdb20"
+      "sha256": "7c014effec71b2d13e8baa51ed0f96593128c2b06afd52f788af1cf63c0b4275"
     },
     {
       "path": "modules/hall-ui/public/settings.js",
@@ -5537,7 +5542,7 @@
     {
       "path": "modules/hall-ui/public/settings.states.json",
       "mode": "0000644",
-      "sha256": "54f12d63deb961cfe6d13ad0d9ccd6ca1defbc3a4bce1c036e2d93ed4281951b"
+      "sha256": "02471f2612f2ac00d0324a316be17506455629333397f8d1a2a33b0fce24c8e6"
     },
     {
       "path": "modules/hall-ui/public/shell.js",
@@ -5772,7 +5777,7 @@
     {
       "path": "modules/hall-ui/records/panel-family.md",
       "mode": "0000644",
-      "sha256": "42e0d8cbb266e912c5ab034d2a88f11da310d4a4a8f61a87ce86a08b154d32d9"
+      "sha256": "ea6521eec734a0c8d20ad8128398c5d9c85cf074060fdb9a85181dff2270ef5c"
     },
     {
       "path": "modules/hall-ui/records/reading-rooms.md",
@@ -6142,7 +6147,7 @@
     {
       "path": "modules/lifecycle/db-tasks.js",
       "mode": "0000644",
-      "sha256": "d0844d8f53c003e6026918ad2c132262a358b8c64951aa7927eace1e37fcd41f"
+      "sha256": "bf527e80db47d586361be82ef568842e011484313f09cc6405d1c351f9e15df7"
     },
     {
       "path": "modules/lifecycle/db-versions.js",
@@ -8352,7 +8357,7 @@
     {
       "path": "modules/specialities/routes/specialities.js",
       "mode": "0000644",
-      "sha256": "2b5983c0014f6e103d6bee21256f696364498ed6f955db3043c12b69c84ac3c6"
+      "sha256": "8e876e35e476b0954e0fa7a8e436f6835e6db5406fd791a8463bc0d030da421c"
     },
     {
       "path": "modules/specialities/skills.js",
@@ -8857,12 +8862,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "0660350e6576f3d4adf6ba443f6fb89ea1ca051bd032f76fab13c3eb30c05a0d"
+      "sha256": "464fd91cbcd4c95177dde0d4e40720505686cfd677a575c0f7d7a8415f9a957b"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "574d3bd16219942073c8ddd9cc6dcf55d8a5836622a7291751af2f4f2ced739f"
+      "sha256": "2f825d119f8d7b46e1f4ffab61515532848aa2634b53b6b66adbf1581bffc3b3"
     },
     {
       "path": "public-docs/index.html",
@@ -8882,7 +8887,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "1e3144f4283ef6be4c94cb49c513ab3bbbbac00ed89ae8a4946d06314bff0564"
+      "sha256": "fdb871eaf32d4f1b1525a225cc5b28207359df70e1714f735eb060fac12743aa"
     },
     {
       "path": "scripts/bongos-mcp.js",
@@ -10572,7 +10577,7 @@
     {
       "path": "scripts/hall-preview/server.js",
       "mode": "0000644",
-      "sha256": "4529909a899a52180c5876d926be2ef2dc42a8bffef43d84c38dd9d399f2c5d2"
+      "sha256": "974c71c0a21d62d5c702d611f1ff26c5e5e8eb58e3bb38271665bd56598b4200"
     },
     {
       "path": "scripts/hall-preview/task-visual.js",
@@ -10802,7 +10807,7 @@
     {
       "path": "src/bongos/optimizer.js",
       "mode": "0000644",
-      "sha256": "eaa5ba49269f8188222b0c979ea60e05f1e6ddc1a0ba8064f735a3f8ac25e0ce"
+      "sha256": "70b093c1a7d3b9b7c169694a3dba463221297c14efde12efccf23b0a0a94dc4e"
     },
     {
       "path": "src/bongos/package-registry.js",
@@ -10997,7 +11002,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "a0f39869818bd1f03c2aa67fe2d2dfcd62fab4a7f4c9c5ef2f69d91ab2325f08"
+      "sha256": "159b8f961396d15ce8bf1a5589ec100b0b9b1d0bc02ccb8b1c37a8ce82512dd7"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -11697,7 +11702,7 @@
     {
       "path": "tests/claimable_blocker_status.mjs",
       "mode": "0000644",
-      "sha256": "1aae622cb425a287309bc68f5537d754ff9e31b2c4cd8506c7ec72288da69220"
+      "sha256": "9106c65ea3c157953660a7e1af006724be9e781e1f74e95b36ccd76e20ffe987"
     },
     {
       "path": "tests/claims_bind_session.mjs",
@@ -15499,6 +15504,11 @@
       "mode": "0000644",
       "sha256": "9de6fbffd858190096bc22d556ccae101a6206adeee05bb146bd2a0a1a59d15c"
     },
+    {
+      "path": "tests/speciality_offer_ui.mjs",
+      "mode": "0000644",
+      "sha256": "31df61df6d4224cfe75c522d845d9baa004e627cd660e7770bf5ccc3ff4680df"
+    },
     {
       "path": "tests/speciality_offered.mjs",
       "mode": "0000644",
@@ -15512,7 +15522,7 @@
     {
       "path": "tests/speciality_skills.mjs",
       "mode": "0000644",
-      "sha256": "391044e79f7ee0ef7b0f4c4fcf919c058d5cbe0c808162ad0d7e58004bf7404d"
+      "sha256": "961eb1a8edc81d84eb567827998e0c5c3de1d288921b8ee70b1265ded4badf38"
     },
     {
       "path": "tests/speciality_walkthrough_ui.mjs",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 460 operations across 70 resource groups
+- 461 operations across 70 resource groups
 
 ## Use it from your project
 

package/clients/bongos-client/bongos-client.global.js

@@ -997,6 +997,8 @@ function createClient(opts = {}) {
       putSpecialitiesIdSkills: (args) => request("PUT", "/specialities/{id}/skills", { hasBody: true }, args),
       // POST /specialities/{id}/unoffer — rank: metic+archon — POST /specialities/:id/unoffer
       postSpecialitiesIdUnoffer: (args) => request("POST", "/specialities/{id}/unoffer", { hasBody: true }, args),
+      // GET /specialities/installed-skills — rank: any-builder — GET /specialities/installed-skills
+      getSpecialitiesInstalledSkills: (args) => request("GET", "/specialities/installed-skills", { hasBody: false }, args),
       // GET /specialities/offered — rank: any-builder — GET /specialities/offered
       getSpecialitiesOffered: (args) => request("GET", "/specialities/offered", { hasBody: false }, args),
     },

package/clients/bongos-client/index.cjs

@@ -996,6 +996,8 @@ function createClient(opts = {}) {
       putSpecialitiesIdSkills: (args) => request("PUT", "/specialities/{id}/skills", { hasBody: true }, args),
       // POST /specialities/{id}/unoffer — rank: metic+archon — POST /specialities/:id/unoffer
       postSpecialitiesIdUnoffer: (args) => request("POST", "/specialities/{id}/unoffer", { hasBody: true }, args),
+      // GET /specialities/installed-skills — rank: any-builder — GET /specialities/installed-skills
+      getSpecialitiesInstalledSkills: (args) => request("GET", "/specialities/installed-skills", { hasBody: false }, args),
       // GET /specialities/offered — rank: any-builder — GET /specialities/offered
       getSpecialitiesOffered: (args) => request("GET", "/specialities/offered", { hasBody: false }, args),
     },

package/clients/bongos-client/index.d.ts

@@ -158,6 +158,7 @@ export interface GetSoftwareUpdateResponse { ok: boolean; update: unknown; door:
 export interface GetSpecialitiesIdDocumentsResponse { documents: unknown }
 export interface GetSpecialitiesIdResponse { speciality: unknown }
 export interface GetSpecialitiesIdSkillsResponse { speciality: unknown; adopted: boolean; enabled: unknown; skills: unknown }
+export interface GetSpecialitiesInstalledSkillsResponse { skills: unknown }
 export interface GetSpecialitiesOfferedResponse { suggestions: unknown }
 export interface GetSpecialitiesResponse { specialities: unknown }
 export interface GetSsoPubkeyResponse { alg: unknown; format: unknown; public_key_b64: unknown }
@@ -1422,6 +1423,8 @@ export interface BongosClient {
     putSpecialitiesIdSkills(args: RequestArgs & { body: PutSpecialitiesIdSkillsRequest }): Promise<PutSpecialitiesIdSkillsResponse>;
     /** POST /specialities/{id}/unoffer — rank: metic+archon */
     postSpecialitiesIdUnoffer(args?: RequestArgs): Promise<PostSpecialitiesIdUnofferResponse>;
+    /** GET /specialities/installed-skills — rank: any-builder */
+    getSpecialitiesInstalledSkills(args?: RequestArgs): Promise<GetSpecialitiesInstalledSkillsResponse>;
     /** GET /specialities/offered — rank: any-builder */
     getSpecialitiesOffered(args?: RequestArgs): Promise<GetSpecialitiesOfferedResponse>;
   };

package/clients/bongos-client/index.mjs

@@ -993,6 +993,8 @@ export function createClient(opts = {}) {
       putSpecialitiesIdSkills: (args) => request("PUT", "/specialities/{id}/skills", { hasBody: true }, args),
       // POST /specialities/{id}/unoffer — rank: metic+archon — POST /specialities/:id/unoffer
       postSpecialitiesIdUnoffer: (args) => request("POST", "/specialities/{id}/unoffer", { hasBody: true }, args),
+      // GET /specialities/installed-skills — rank: any-builder — GET /specialities/installed-skills
+      getSpecialitiesInstalledSkills: (args) => request("GET", "/specialities/installed-skills", { hasBody: false }, args),
       // GET /specialities/offered — rank: any-builder — GET /specialities/offered
       getSpecialitiesOffered: (args) => request("GET", "/specialities/offered", { hasBody: false }, args),
     },

package/docs/api/openapi.json

@@ -17805,6 +17805,44 @@
         ]
       }
     },
+    "/specialities/installed-skills": {
+      "get": {
+        "operationId": "get_specialities_installed_skills",
+        "tags": [
+          "specialities"
+        ],
+        "summary": "GET /specialities/installed-skills",
+        "description": "GET /specialities/installed-skills — every skill THIS instance has, each explained the way the adoption walkthrough explains it, so a speciality's owner can choose what it offers from the hall (task 1004404). The CHOICES only: the POST/PATCH `skills` check (unknown_skill) is still the rule, so a stale page that sends a name removed since is refused, not trusted. Nothing here is per-builder and the list is public knowledge of the install — every name is already materialised into each checkout's .claude/skills/. Mounted before '/specialities/:id' would capture it as an id. Read-only; rank: any builder.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/specialities/routes/specialities.js",
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetSpecialitiesInstalledSkillsResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/specialities/offered": {
       "get": {
         "operationId": "get_specialities_offered",
@@ -23643,6 +23681,15 @@
           "skills"
         ]
       },
+      "GetSpecialitiesInstalledSkillsResponse": {
+        "type": "object",
+        "properties": {
+          "skills": {}
+        },
+        "required": [
+          "skills"
+        ]
+      },
       "GetSpecialitiesOfferedResponse": {
         "type": "object",
         "properties": {
@@ -29474,9 +29521,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 460,
-  "x-schema-count": 492,
+  "x-endpoint-count": 461,
+  "x-schema-count": 493,
   "x-undocumented-bodies": 12,
-  "x-response-schemas": 334,
+  "x-response-schemas": 335,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 460 endpoints across 82 route files.
+> **Generated from the live route files** — the route file is authoritative. 461 endpoints across 82 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust-boundary-server-enforced-permissions.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -698,7 +698,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 |---|---|---|---|---|
 | GET | `/api/bongos/software-update` | `any-builder` | — | GET /software-update — Settings → Software update (task 1004296): this project's core, the newest release its channel allows, what the ve… |
 
-## `specialities` (14)
+## `specialities` (15)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -715,6 +715,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | GET | `/api/bongos/specialities/:id/skills` | `any-builder` | — | GET /specialities/:id/skills — what the adoption WALKTHROUGH shows (task 1004073, ADR 0310 §3): each skill the speciality offers, explain… |
 | PUT | `/api/bongos/specialities/:id/skills` | `any-builder` | `enabled_skills` | PUT /specialities/:id/skills — the caller's ENABLED set for a speciality they hold (task 1004072, ADR 0310 §2). |
 | POST | `/api/bongos/specialities/:id/unoffer` | `metic+archon` | — |  |
+| GET | `/api/bongos/specialities/installed-skills` | `any-builder` | — | GET /specialities/installed-skills — every skill THIS instance has, each explained the way the adoption walkthrough explains it, so a spe… |
 | GET | `/api/bongos/specialities/offered` | `any-builder` | — | GET /specialities/offered — the suggestions for THIS builder. |
 
 ## `sso` (8)