@bongos/core 1.20.37 → 1.20.39

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 466 endpoints across 83 route files.
+> **Generated from the live route files** — the route file is authoritative. 469 endpoints across 84 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust-boundary-server-enforced-permissions.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -81,7 +81,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | GET | `/api/bongos/auth/web/handoff` | `public` | — | GET /auth/web/handoff?code=&return= — the far side of the one-time session handoff (task 1004357). |
 | GET | `/api/bongos/auth/web/start` | `public` | — | /auth/web — browser flow (used by the /builders page). |
 
-## `autonomy` (8)
+## `autonomy` (9)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -89,7 +89,8 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | POST | `/api/bongos/autonomy/fence` | `archon` | `enabled`, `reason` | The kill switch. |
 | POST | `/api/bongos/autonomy/fence/goals` | `archon` | `goal_id`, `note` | Add a goal to the allowlist. |
 | DELETE | `/api/bongos/autonomy/fence/goals/:goalId` | `archon` | — | Revoke one. |
-| POST | `/api/bongos/autonomy/heartbeat` | `any-builder` | `host`, `pid`, `started_at`, `mode`, `consecutive_failures`, `last_event`, `working_task_id` | The runner's check-in, once per loop. |
+| POST | `/api/bongos/autonomy/fence/priority` | `archon` | `goal_id` | The priority goal (task 1004453): which allowlisted goal the runner works first. |
+| POST | `/api/bongos/autonomy/heartbeat` | `any-builder` | `host`, `pid`, `started_at`, `mode`, `consecutive_failures`, `last_event`, `working_task_id`, `working_goal_id` | The runner's check-in, once per loop. |
 | GET | `/api/bongos/autonomy/precheck` | `metic+archon` | — |  |
 | GET | `/api/bongos/autonomy/runners` | `any-builder` | — | What the hall renders: the CALLER'S OWN runners, with the pure verdict attached so the page and any future alert cannot disagree about wh… |
 | GET | `/api/bongos/autonomy/runs` | `metic+archon` | — | The gate's past decisions — did a routine fire, and what did it decide, and why (task 1002669). |
@@ -249,6 +250,12 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | POST | `/api/bongos/done-when/:criterionId/unsatisfy` | `metic+archon` | — | Auth: flip a criterion back to unsatisfied (rare; for corrections). |
 | GET | `/api/bongos/done-when/pending-review` | `metic+archon` | — | Auth (Metic+): the criterion review queue — every criterion auto-flagged "met — pending review" (≥1 linked task, all shipped, not yet con… |
 
+## `feedback` (1)
+
+| Method | Path | Rank | Body | Description |
+|---|---|---|---|---|
+| POST | `/api/bongos/feedback` | `any-builder` | `message`, `kind`, `context` | signed-in builder — reporting a problem with Bongos grants nothing here, and the hub files every report at 'backlog' behind a Metic+ nod. |
+
 ## `gate-approvals` (2)
 
 | Method | Path | Rank | Body | Description |
@@ -721,7 +728,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | GET | `/api/bongos/specialities/installed-skills` | `any-builder` | — | GET /specialities/installed-skills — every skill THIS instance has, each explained the way the adoption walkthrough explains it, so a spe… |
 | GET | `/api/bongos/specialities/offered` | `any-builder` | — | GET /specialities/offered — the suggestions for THIS builder. |
 
-## `sso` (10)
+## `sso` (11)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -730,6 +737,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | GET | `/api/bongos/sso/authorize` | `public` | — | GET /sso/authorize?client_id=&redirect_uri=&state= — the browser authorize leg. |
 | POST | `/api/bongos/sso/device/poll` | `public` | `device_code` | POST /sso/device/poll — poll the hub device flow. |
 | POST | `/api/bongos/sso/device/start` | `public` | `origin` | POST /sso/device/start — begin CLI federation. |
+| POST | `/api/bongos/sso/feedback` | `public` | `client_id`, `client_secret`, `github_id`, `message`, `kind`, `context` | POST /sso/feedback — a federated project relays one builder's feedback about Bongos itself (task 1004462). |
 | POST | `/api/bongos/sso/invites/clear` | `public` | `client_id`, `client_secret`, `github_login` | authenticated by client_id + client_secret, not a builder rank. |
 | POST | `/api/bongos/sso/invites/notify` | `public` | `client_id`, `client_secret`, `github_login` | authenticated by client_id + client_secret, not a builder rank. |
 | POST | `/api/bongos/sso/membership/check-in` | `public` | `client_id`, `client_secret`, `github_id`, `github_login`, `display_name`, `avatar_url`, `membership_kind` | POST /sso/membership/check-in — a federated instance reports, on every sign-in, that a builder builds on its project (ADR 0141 §3). |

package/docs/copy-inventory.md

@@ -164,10 +164,10 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `bea7817e57a4` | certain | All surfaces | `modules/hall-ui/public/copy-desk.js:301` |
 | `627c683a5e5d` | certain | All time | `modules/hall-ui/public/hall-widgets.js:130` |
 | `b38c01691857` | certain | All your work → | `modules/hall-ui/public/hall-widgets.js:110` |
-| `efa803555625` | certain | Allow goal | `modules/hall-ui/public/gate.js:288` |
+| `efa803555625` | certain | Allow goal | `modules/hall-ui/public/gate.js:303` |
 | `375b0e67bc30` | certain | Allow new releases and move to {…} | `modules/hall-ui/public/deploy.js:249` |
 | `375b0e67bc30` | certain | Allow new releases and move to {…} | `modules/hall-ui/public/deploy.js:677` |
-| `86ea8d57d34e` | certain | Allowlisted goals | `modules/hall-ui/public/gate.js:286` |
+| `86ea8d57d34e` | certain | Allowlisted goals | `modules/hall-ui/public/gate.js:300` |
 | `e99cc5d37404` | certain | Already a member? | `modules/hall-ui/public/hall-render.js:367` |
 | `da5368d10f85` | certain | Amendment {…} passed{…}, and the constitution below is not the one it decided: | `modules/hall-ui/public/government.js:633` |
 | `2ca420e19dbb` | certain | An earlier attempt did not land. | `modules/hall-ui/public/deploy.js:366` |
@@ -249,7 +249,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `906c2947dfc1` | certain | Changes save at once and take effect the next time you start a session on this machine. | `modules/hall-ui/public/settings.html:346` |
 | `52384bdc035c` | certain | Changes save at once. Your new choice plays the next time that event fires. | `modules/hall-ui/public/settings.html:359` |
 | `cab7a9526ca1` | certain | Changes save the moment you pick. “Default” clears your override and falls back to the system's choice. | `modules/hall-ui/public/settings.html:329` |
-| `4b714191b423` | certain | Changes touching protected build surfaces, held for your approval. | `modules/hall-ui/public/gate.js:403` |
+| `4b714191b423` | certain | Changes touching protected build surfaces, held for your approval. | `modules/hall-ui/public/gate.js:432` |
 | `864503935eca` | certain | Changing the rule… | `modules/hall-ui/public/deploy.js:671` |
 | `55ad21bd03eb` | certain | Chart the routes | `modules/hall-ui/public/goal-map.html:91` |
 | `55ad21bd03eb` | certain | Chart the routes | `modules/hall-ui/public/thinking.html:108` |
@@ -430,7 +430,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `8d2b4f119ee3` | certain | End session | `modules/hall-ui/public/settings-sessions.js:46` |
 | `8e82771e5b63` | certain | Ending a session takes effect immediately; the token stops working on its very next request. | `modules/hall-ui/public/settings.html:163` |
 | `58d381535285` | certain | Engagement reports | `modules/hall-ui/public/watch.html:130` |
-| `690609c8e9a9` | certain | Enter a goal number. | `modules/hall-ui/public/gate.js:300` |
+| `690609c8e9a9` | certain | Enter a goal number. | `modules/hall-ui/public/gate.js:315` |
 | `1825c9c467d8` | certain | Enter the id of the task this one should wait for. | `modules/hall-ui/public/task.js:928` |
 | `bd7a40639a1c` | certain | Estimate (min) | `modules/hall-ui/public/task-detail.js:460` |
 | `c15d1f0ddfb6` | certain | Estimation accuracy | `modules/hall-ui/public/watch.html:148` |
@@ -506,9 +506,9 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `9e70797b7e97` | certain | Goal id | `modules/hall-ui/public/goals-render.js:832` |
 | `529460e82058` | certain | Goal invitations to you | `modules/hall-ui/public/goal-inbox.js:150` |
 | `e2a9e33abe60` | certain | Goal tasks | `modules/hall-ui/public/goals.html:151` |
-| `ec88b946ad16` | certain | Goal {…} | `modules/hall-ui/public/gate.js:280` |
-| `7b02827535c2` | certain | Goal {…} allowlisted. | `modules/hall-ui/public/gate.js:303` |
-| `8a421ae268e6` | certain | Goal {…} removed. | `modules/hall-ui/public/gate.js:313` |
+| `ec88b946ad16` | certain | Goal {…} | `modules/hall-ui/public/gate.js:288` |
+| `7b02827535c2` | certain | Goal {…} allowlisted. | `modules/hall-ui/public/gate.js:318` |
+| `8a421ae268e6` | certain | Goal {…} removed. | `modules/hall-ui/public/gate.js:341` |
 | `e0bc28d10785` | certain | Goals could not be loaded. Refresh to try again. | `modules/hall-ui/public/goals-page.js:893` |
 | `4517f2253d0f` | certain | Goals couldn’t be loaded just now. Refresh to try again. | `modules/hall-ui/public/goals.js:121` |
 | `6a85997bda21` | certain | Goals created | `modules/hall-ui/public/profile.html:145` |
@@ -1438,7 +1438,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `6b530a7007bc` | certain | jump to a goal or a thought | `modules/hall-ui/public/goal-map.html:75` |
 | `6b530a7007bc` | certain | jump to a goal or a thought | `modules/hall-ui/public/thinking.html:92` |
 | `9328033a890a` | certain | land every shuttle | `modules/hall-ui/public/sky-interaction.js:45` |
-| `966b32c8af7e` | certain | last check-in {…} ago | `modules/hall-ui/public/gate.js:360` |
+| `966b32c8af7e` | certain | last check-in {…} ago | `modules/hall-ui/public/gate.js:391` |
 | `9018bf6e99eb` | certain | last used {…} · signed in {…} | `modules/hall-ui/public/settings-sessions.js:46` |
 | `2ce7738b1eb0` | certain | loading goals… | `modules/hall-ui/public/task-detail.js:482` |
 | `754bdec368ed` | certain | lowest credits | `modules/hall-ui/public/hall-widgets.js:136` |
@@ -1594,7 +1594,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `81f05d9b2bbf` | certain | what's wrong, or what you'd like to see | `modules/hall-ui/public/ideas.html:65` |
 | `c3959ea9d43b` | certain | where my thoughts are | `modules/hall-ui/public/sky-layout.js:50` |
 | `1651cb1876f5` | certain | who sits on the board | `modules/hall-ui/public/government.html:55` |
-| `57f45f7812ba` | certain | why (optional) | `modules/hall-ui/public/gate.js:288` |
+| `57f45f7812ba` | certain | why (optional) | `modules/hall-ui/public/gate.js:303` |
 | `143f77e2b782` | certain | why these are the same | `modules/hall-ui/public/task-detail.js:565` |
 | `ec7c228cb4ce` | certain | why this isn’t worth doing | `modules/hall-ui/public/task-detail.js:616` |
 | `c612ab426c2f` | certain | your sky | `modules/hall-ui/public/thinking.html:72` |
@@ -2276,9 +2276,9 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `d22564a81b18` | certain | {{productName}} — projects | `modules/public-landing/public/projects.html:6` |
 | `2fd83f9a5669` | certain | {{productName}}: {{tagline}} | `modules/public-landing/public/index.html:22` |
 | `2fd83f9a5669` | certain | {{productName}}: {{tagline}} | `modules/public-landing/public/index.html:22` |
+| `2609873e46a5` | certain | — Render needs one; the usual one is filled in | `modules/public-landing/public/projects.html:1436` |
 | `5ee1b494eec3` | certain | — for signing in, and for the repositories your projects ship to. | `modules/public-landing/public/privacy.html:63` |
 | `39b7e60d327e` | certain | — it is on the map under its name, but nobody joins on their own: people ask, and you decide. | `modules/public-landing/public/projects.html:933` |
-| `ee96978f8d1b` | certain | — leave empty if there is none | `modules/public-landing/public/projects.html:1436` |
 | `5becfcad07c3` | certain | — people ask from the project’s hall, you approve each one from the hall’s Watch page, and then they sign in. | `modules/public-landing/public/projects.html:914` |
 | `9ac56aa4e540` | certain | — projects hosted by the platform run on servers rented from DigitalOcean, with their web address and traffic  | `modules/public-landing/public/privacy.html:65` |
 | `210963315141` | certain | — the place where the project gets built — at the address you just chose. There is nothing for you to set up. | `modules/public-landing/public/projects.html:1395` |

package/docs/copy-registry.json

@@ -2976,7 +2976,7 @@
       "surface": "builders-hall",
       "text": "Allow goal",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 288,
+      "line": 303,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -3003,7 +3003,7 @@
       "surface": "builders-hall",
       "text": "Allowlisted goals",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 286,
+      "line": 300,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -3741,7 +3741,7 @@
       "surface": "builders-hall",
       "text": "Changes touching protected build surfaces, held for your approval.",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 403,
+      "line": 432,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -5370,7 +5370,7 @@
       "surface": "builders-hall",
       "text": "Enter a goal number.",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 300,
+      "line": 315,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -6054,7 +6054,7 @@
       "surface": "builders-hall",
       "text": "Goal {…}",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 280,
+      "line": 288,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -6063,7 +6063,7 @@
       "surface": "builders-hall",
       "text": "Goal {…} allowlisted.",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 303,
+      "line": 318,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -6072,7 +6072,7 @@
       "surface": "builders-hall",
       "text": "Goal {…} removed.",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 313,
+      "line": 341,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -14442,7 +14442,7 @@
       "surface": "builders-hall",
       "text": "last check-in {…} ago",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 360,
+      "line": 391,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -15846,7 +15846,7 @@
       "surface": "builders-hall",
       "text": "why (optional)",
       "file": "modules/hall-ui/public/gate.js",
-      "line": 288,
+      "line": 303,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -20989,6 +20989,15 @@
       "origin": "html-title",
       "confidence": "certain"
     },
+    {
+      "id": "2609873e46a5",
+      "surface": "landing",
+      "text": "— Render needs one; the usual one is filled in",
+      "file": "modules/public-landing/public/projects.html",
+      "line": 1436,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "5ee1b494eec3",
       "surface": "landing",
@@ -21007,15 +21016,6 @@
       "origin": "html-text",
       "confidence": "certain"
     },
-    {
-      "id": "ee96978f8d1b",
-      "surface": "landing",
-      "text": "— leave empty if there is none",
-      "file": "modules/public-landing/public/projects.html",
-      "line": 1436,
-      "origin": "html-text",
-      "confidence": "certain"
-    },
     {
       "id": "5becfcad07c3",
       "surface": "landing",

package/docs/file-map.md

@@ -365,6 +365,7 @@ tests/
 ├── backlog-review/SKILL.md        ← /backlog-review — daily walk of status=backlog, the pre-workable state a human must say go on: splits rows waiting on a PERSON (promote / kill / water) from rows waiting on a live dep TRIGGER (counted, never walked, migration 163) and surfaces rows stranded behind an abandoned dep; runs scripts/gds/backlog-review.js (task 1003746); Metic+
 ├── blocker-review/SKILL.md        ← /blocker-review — daily review of open Bongos blockers (resolve / escalate / note); Metic+
 ├── blocker-solve/SKILL.md         ← /blocker-solve N — drive ONE blocker to done: do the doable parts, hand back owner-only steps, verify, auto-resolve (auto-promotes waiters); Metic+
+├── bongos-feedback/SKILL.md       ← /bongos-feedback — send feedback about Bongos itself upstream to the Cloud Bongos maintainers via `bongos feedback` (a bug lands as a backlog task in the maintenance goal, an idea in the hub inbox); backed by scripts/gds/feedback-send.js (task 1004462)
 ├── bug-triage/SKILL.md            ← /bug-triage — daily walk through open kind=bug tasks (batch-cluster near-dups, merge / won't-fix); the idea-triage counterpart built on the new tasks.merge primitive (task 1001478); Metic+
 ├── builder-backup/SKILL.md        ← /builder-backup — check DB backup status or trigger a fresh local dump before risky changes (migrations, destructive SQL); no SSH required
 ├── builder-claim/SKILL.md         ← /builder-claim N — atomic claim; prints the claim-time context pack + discipline playbook routing

package/docs/module-api-changelog.md

@@ -2731,5 +2731,9 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.20.35 with no explicit bump. run 36788696388. (task 1002620)
   1.20.37 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.20.36 with no explicit bump. run 36790298715. (task 1002620)
+  1.20.38 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.20.37 with no explicit bump. run 36794921587. (task 1002620)
+  1.20.39 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.20.38 with no explicit bump. run 36796243918. (task 1002620)
 ---------------------------------------------------------------------------
 ```