@bongos/core 1.20.42 → 1.20.44

package/docs/onboarding/slash-commands.md

@@ -42,29 +42,31 @@ Every one of these talks to the build system. They're grouped by when you'd reac
 | `/builder-setup` | One-time enrolment — signs you in and registers you |
 | `/builder-reauth` | Refresh an expired session |
 | `/builder-key` | Check / set your own API key status |
-| `/builder-cost` | Log a cost entry against your claim |
-| `/builder-backup` | Check or trigger a database backup before risky work |
-| `/builder-exit` | Offboard or reactivate a builder *(Archon only)* |
+| `/builder-cost` † | Log or read project spend |
+| `/builder-backup` † | Check or trigger a database backup before risky work |
+| `/builder-exit` † | Offboard or reactivate a builder *(Archon only)* |
 
 ### Triage and planning *(Metic and above)*
 
 | Command | What it does |
 |---|---|
-| `/idea-triage` | Walk the idea inbox — promote, discard, or merge each |
+| `/owner-review` | One walk through everything waiting on a decision: backlog → bugs → ideas → priorities. Say *"triage ideas"* or *"review the backlog"* and it opens at that step |
 | `/blocker-review` · `/blocker-solve` | Walk open blockers, or drive one to done |
 | `/goal-create` | Plan and create one goal — scope wall, criteria, seed tasks |
-| `/goal-review` | Confirm criteria that are flagged met-pending-review |
-| `/planning-session` | Scope an upcoming version and seed its task list |
-| `/priority-session` | Reweight the inbox from a few plain-speech answers |
+| `/goal-close` † | Close a goal's criteria: test them on the live site and sign off, then decide the ones nothing was delivered for |
+| `/planning-session` † | Scope an upcoming version and seed its task list |
+| `/grade-sweep` † | Check the grader is healthy, then audit what shipped past it |
 | `/merge-mode` | Manual fallback when a confirmed task didn't land |
 
+The four steps of `/owner-review` still answer to their old names — `/backlog-review`, `/bug-triage`, `/idea-triage`, `/priority-session` — and so do `/goal-uat` · `/goal-review` (now the two parts of `/goal-close`) and `/grader-health` · `/grade-audit` (now the two parts of `/grade-sweep`). All of those are typed-only (†).
+
 ### Discipline modes — not slash commands any more
 
 The three core crafts no longer have a slash command. `/dev`, `/paint` and `/ideate` were **deleted** when the root instructions split into a role-neutral kernel (`CLAUDE.md`) plus one **role pack** per craft: `docs/packs/engineer.md`, `docs/packs/artist.md`, `docs/packs/ideator.md`. A claimed task's discipline routes you to your pack — the Conductor injects its path into your session on the next prompt, and `claim.js` prints a one-line reminder — and you read it. A module-contributed discipline can still ship a skill, which is how `ui` → `/design` below works.
 
 ### Design and art pipeline
 
-`/design` is the ui-discipline playbook (world-first, show-first — shipped by the `ui-design` module, ADR 0197); `/design-sync` and `/figma-design-sync` round-trip the UI design system. The `/otb-*` family — `otb-tile-generate`, `otb-design-review`, `otb-character-review`, `otb-feedback-capture`, `otb-figma-sync` — is the reference instance's pixel-art pipeline; it's only meaningful on an instance that runs that pipeline, so it ships in the `pixel-art` module, which is off unless the project turns it on. The design-style skills (`/impeccable`, `/style`, the taste and look skills) are the same: the `design-styles` module, off unless turned on — `/design` tells you which.
+`/design` is the ui-discipline playbook (world-first, show-first — shipped by the `ui-design` module, ADR 0197); `/design-sync` † and `/figma-design-sync` † round-trip the UI design system. `/tweak` † applies the next page an artist rewrote in the studio; it ships in the `copy-desk` module, where the studio lives. The `/otb-*` family — `otb-tile-generate`, `otb-design-review`, `otb-character-review`, `otb-feedback-capture`, `otb-figma-sync` — is the reference instance's pixel-art pipeline; it's only meaningful on an instance that runs that pipeline, so it ships in the `pixel-art` module, which is off unless the project turns it on. The design-style skills (`/impeccable`, `/style`, the taste and look skills) are the same: the `design-styles` module, off unless turned on — `/design` tells you which.
 
 ### Session and meta
 
@@ -73,9 +75,13 @@ The three core crafts no longer have a slash command. `/dev`, `/paint` and `/ide
 | `/session-handoff` | Emit a paste-ready prompt to start a fresh session with |
 | `/read-session-export` | Read a past session's `/export` zip |
 | `/feedback` | Pull in the latest recorded walkthrough bundle |
-| `/new-project` | Zero-to-live runbook for a brand-new instance |
+| `/new-project` † | Zero-to-live runbook for a brand-new instance |
 | `/builder-redteam` | File a security / vulnerability report |
 
+### † Typed-only commands
+
+A command marked † is **hidden from Claude's own menu but still works when you type it**. Every listed command's description sits in every session's context whether it is used or not, so the rarely-used admin ones carry `disable-model-invocation: true` in their `SKILL.md`: Claude Code leaves them out of what the model sees, and only a person typing `/name` runs them (task 1004471). The catch: plain English will not reach them, and Claude will not start one on its own — type the slash form.
+
 ## Claude Code's own commands
 
 These work in **any** repository — they have nothing to do with this project. `/help` prints the live, authoritative list for your version; the ones below are simply the ones you'll actually meet.
@@ -111,11 +117,11 @@ These are the ones that actually cause confusion.
 
 **`/export` vs `/read-session-export`.** Claude's `/export` *writes* a transcript zip; our `/read-session-export` *reads* one back.
 
-**`/review` reviews a GitHub PR.** The project's review commands are `/goal-review`, `/blocker-review`, and `/idea-triage` — different jobs entirely.
+**`/review` reviews a GitHub PR.** The project's review commands are `/owner-review`, `/blocker-review`, and `/goal-close` — different jobs entirely.
 
 ## Two more things worth knowing
 
-**Every command has a plain-English twin.** Each skill lists trigger phrases, so *"what can I work on"* reaches `/builder-start` and *"ship it"* reaches `/builder-ship`. You never have to memorise the slash form.
+**Every listed command has a plain-English twin.** Each skill lists trigger phrases, so *"what can I work on"* reaches `/builder-start` and *"ship it"* reaches `/builder-ship`. You never have to memorise the slash form — except for the typed-only † commands above.
 
 **Same commands, outside Claude.** The work-loop commands are also a terminal CLI: `bongos start`, `bongos claim N`, `bongos ship`. Same actions, same API — usable from any terminal, a Chromebook, or CI. Run `bongos help` for the verb list.
 

package/docs/packs/artist.md

@@ -27,7 +27,7 @@ The studio's own words (the greeting and its sub-line) are the studio page itsel
 
 Only the holder writes. A page someone else holds is read-only and names them. A draft left unsubmitted keeps its words and can be taken up again.
 
-**Between submit and approval, a session applies it.** Submitted pages wait for a builder session running `/tweak` ([the skill](../../.claude/skills/tweak/SKILL.md), Metic+). It transcribes every line, renders the page before and after, and parks it. **It never lands the page.**
+**Between submit and approval, a session applies it.** Submitted pages wait for a builder session running `/tweak` ([the skill](../../modules/copy-desk/skills/tweak/SKILL.md), Metic+). It transcribes every line, renders the page before and after, and parks it. **It never lands the page.**
 
 **The Approval queue.** Pictures of the applied page, desktop or phone, light or dark, flipped **before / after**. Beside them, the changed lines ("was:" / "becomes:"); a line the applier could not apply says why. Then:
 

package/docs/packs/engineer.md

@@ -74,7 +74,7 @@ If this is an autonomous, bypass-permissions, or scheduled run and no one will a
 
 1. **Resolve your claim** — `/builder-ship` with handoff notes and a value summary, or `/builder-release` on abandonment. Bongos records the session-log row and awards credits.
 2. **Write a session log** as its own file at `docs/session-logs/YYYY-MM-DD-<slug>.md`, using [`docs/handoff-template.md`](../handoff-template.md). Do not hand-edit the kernel's §13 index or `docs/session-log-index.md` — both regenerate from your file at ship. For a single-task session the Bongos `session_logs` row is enough and a separate file isn't needed.
-3. **Review the `idea_inbox`** via `GET /api/bongos/inbox`, or run `/idea-triage`.
+3. **Review the `idea_inbox`** via `GET /api/bongos/inbox`, or run `/owner-review ideas`.
 4. **Update the detail files** if anything changed: a new gotcha → a recipe or a captured learning; a new blocker → `POST /api/bongos/blockers`; a decision → a new ADR.
 5. **Update [`docs/architecture.md`](../architecture.md)** if the live system changed, and [`docs/file-map.md`](../file-map.md) if files or folders moved.
 
@@ -82,13 +82,12 @@ If nothing changed in a section, leave it alone — don't churn.
 
 ### Daily cadence (once per day, not per session)
 
-Three manual slash-commands keep the methodology surfaces from accumulating drift. Any session can pick them up; it only matters that they happen.
+Two manual slash-commands keep the methodology surfaces from accumulating drift. Any session can pick them up; it only matters that they happen.
 
-- **`/idea-triage`** — walk the open `idea_inbox` rows: promote, discard, merge, or defer. Deferring is fine; the cadence is the discipline.
+- **`/owner-review`** — one walk through backlog → bugs → ideas → priorities (task 1004471); each step is still typeable alone (`/backlog-review`, `/bug-triage`, `/idea-triage`, `/priority-session`). Ideas: promote, discard, merge, or defer — deferring is fine; the cadence is the discipline. Backlog: rows waiting on a **person** get walked (promote / kill / water); rows waiting on a **trigger** are counted, never walked (a satisfied dep auto-promotes), and rows stranded behind an abandoned dep are surfaced. `/demote` is invalid on a backlog row (409 `cannot_demote` — it requires `ready`).
 - **`/blocker-review`** — walk the open blockers: resolved (which auto-promotes linked tasks via a DB trigger), still blocked with a note, or escalate.
-- **`/backlog-review`** — walk `status='backlog'`, the pre-workable state a human must say go on. Rows waiting on a **person** get walked (promote / kill / water); rows waiting on a **trigger** are counted, never walked (a satisfied dep auto-promotes). It also surfaces rows stranded behind an abandoned dep, which the trigger can never fire for. `/demote` is invalid on a backlog row (409 `cannot_demote` — it requires `ready`).
 
-**`/tweak`** (Metic+) works a fourth queue: pages an artist submitted from the studio wait there until a session applies them. It never lands one; the artist approves first (ADR 0341).
+**`/tweak`** (Metic+, typed-only, in the `copy-desk` module) works a fourth queue: pages an artist submitted from the studio wait there until a session applies them. It never lands one; the artist approves first (ADR 0341).
 
 If a day passes without them, the queues quietly grow. Running them is the structural cure for the markdown-graveyard pattern.
 

package/docs/page-readings.json

@@ -12,7 +12,7 @@
       "surface": "builders",
       "title": "Repo Atlas",
       "states_read": ["map","truth","detail","index","out"],
-      "files_hash": "dba137b09374d2e6",
+      "files_hash": "6ad36383395e3de3",
       "reading_hash": "411161b0a6167a1e",
       "counts": {"lines":13,"placed":8,"shared":5,"unplaced":0},
       "omitted": {"data":1},
@@ -38,7 +38,7 @@
       "surface": "builders",
       "title": "Blockers",
       "states_read": ["default"],
-      "files_hash": "afabc8607665ad52",
+      "files_hash": "632c93f4db32b846",
       "reading_hash": "c8c742437a2c76c2",
       "counts": {"lines":16,"placed":6,"shared":5,"unplaced":5},
       "omitted": {"data":4},
@@ -67,7 +67,7 @@
       "surface": "builders",
       "title": "Board Room",
       "states_read": ["room","out","sitting-meta","objection-form"],
-      "files_hash": "c1978638f2ef9558",
+      "files_hash": "2d1d695b800e13bc",
       "reading_hash": "202a0cbb6bc54aac",
       "counts": {"lines":56,"placed":26,"shared":5,"unplaced":25},
       "omitted": {"data":9},
@@ -136,7 +136,7 @@
       "surface": "builders",
       "title": "Collab",
       "states_read": ["board","out"],
-      "files_hash": "793b7af1446ab69e",
+      "files_hash": "2acb05affd061ce7",
       "reading_hash": "cedb8171693a308e",
       "counts": {"lines":68,"placed":23,"shared":4,"unplaced":41},
       "omitted": {"data":12},
@@ -145,7 +145,7 @@
         {"key":"L0001","section":"skip link","text":"Skip to content","placement":"shared","file":"modules/hall-ui/public/shell.js","line":767,"string_id":"87cee78ca134"},
         {"key":"L0002","section":"top bar","text":"Collab","placement":"shared"},
         {"key":"L0003","section":"top bar","text":"Jump to…","placement":"shared","file":"modules/hall-ui/public/shell.js","line":487,"string_id":"eba610d25523"},
-        {"key":"L0004","section":"top bar","text":"⌘K","placement":"shared"},
+        {"key":"L0004","section":"top bar","text":"Ctrl K","placement":"shared"},
         {"key":"L0005","section":"Collab","text":"Collab","placement":"unplaced"},
         {"key":"L0006","section":"Collab","text":"{…} and {…}","placement":"placed","file":"modules/hall-ui/public/profile-nudge.js","line":77,"string_id":"56b00d773232"},
         {"key":"L0007","section":"Collab","text":"Waiting on you","placement":"unplaced"},
@@ -217,7 +217,7 @@
       "surface": "builders",
       "title": "Copy desk",
       "states_read": ["queue","out","search","composer","closer","proposer"],
-      "files_hash": "d96a711bf72a38ae",
+      "files_hash": "8631e59378897edf",
       "reading_hash": "8d8433d27c7405a0",
       "counts": {"lines":106,"placed":71,"shared":5,"unplaced":30},
       "omitted": {"data":117},
@@ -260,7 +260,7 @@
         {"key":"L0035","section":"Flagged","text":"said, when flagged:","placement":"placed","file":"modules/hall-ui/public/copy-desk.js","line":124,"string_id":"2a42549b34ae"},
         {"key":"L0036","section":"Flagged","text":"{…} of {…}","placement":"placed","file":"modules/hall-ui/public/sky-panel.js","line":120,"string_id":"73c1372b43d9"},
         {"key":"L0037","section":"Flagged","text":"target {…}","placement":"unplaced"},
-        {"key":"L0038","section":"Flagged","text":"Restricted.","placement":"placed","file":"modules/hall-ui/public/board-room.js","line":521,"string_id":"0887725744f2"},
+        {"key":"L0038","section":"Flagged","text":"Restricted.","placement":"placed","file":"modules/hall-ui/public/board-room.js","line":526,"string_id":"0887725744f2"},
         {"key":"L0039","section":"Flagged","text":"off voice","placement":"unplaced"},
         {"key":"L0040","section":"Flagged","text":"moved","placement":"unplaced"},
         {"key":"L0041","section":"Flagged","text":"whole {…}","placement":"unplaced"},
@@ -278,7 +278,7 @@
         {"key":"L0053","section":"Said more than once","text":"Available from the {…} rank up.","placement":"placed","file":"modules/hall-ui/public/gate.js","line":237,"string_id":"1de02052abf2"},
         {"key":"L0054","section":"Said more than once","text":"Could not save. Try again.","placement":"placed","file":"modules/hall-ui/public/settings-interaction.js","line":96,"string_id":"8c234d5c8bd4"},
         {"key":"L0055","section":"Said more than once","text":"already flagged","placement":"unplaced","occurrences":2},
-        {"key":"L0056","section":"Said more than once","text":"Restricted.","placement":"placed","file":"modules/hall-ui/public/board-room.js","line":521,"string_id":"0887725744f2"},
+        {"key":"L0056","section":"Said more than once","text":"Restricted.","placement":"placed","file":"modules/hall-ui/public/board-room.js","line":526,"string_id":"0887725744f2"},
         {"key":"L0057","section":"Said more than once","text":"looked at","placement":"unplaced"},
         {"key":"L0058","section":"Find something to flag","text":"Find something to flag","placement":"placed","file":"modules/hall-ui/public/copy-desk.html","line":64,"string_id":"1def0e7c716e"},
         {"key":"L0059","section":"Find something to flag","text":"Search every string the product shows a person, by what it says or the file it lives in.","placement":"placed","file":"modules/hall-ui/public/copy-desk.html","line":65,"string_id":"46711f7bc3df"},
@@ -336,7 +336,7 @@
       "surface": "builders",
       "title": "Deploy",
       "states_read": ["work","out"],
-      "files_hash": "786235bca48a981a",
+      "files_hash": "d06badab7642ea93",
       "reading_hash": "eb5acd9bd5fc73e9",
       "counts": {"lines":7,"placed":0,"shared":5,"unplaced":2},
       "omitted": {"data":1},
@@ -838,7 +838,7 @@
       "surface": "builders",
       "title": "Fleet costs",
       "states_read": ["ledger","out"],
-      "files_hash": "23ae0ec03adc9b80",
+      "files_hash": "5056fa71f75d5c6d",
       "reading_hash": "9493385a64bb0e9f",
       "counts": {"lines":22,"placed":6,"shared":5,"unplaced":11},
       "omitted": {"data":11},
@@ -873,7 +873,7 @@
       "surface": "builders",
       "title": "Gate",
       "states_read": ["queue","out","approve"],
-      "files_hash": "14ac6944f79fb3cb",
+      "files_hash": "ec25d2c025db0abd",
       "reading_hash": "08d3e5d3657e5afb",
       "counts": {"lines":41,"placed":17,"shared":5,"unplaced":19},
       "omitted": {"data":34},
@@ -884,7 +884,7 @@
         {"key":"L0003","section":"top bar","text":"Jump to…","placement":"shared","file":"modules/hall-ui/public/shell.js","line":487,"string_id":"eba610d25523"},
         {"key":"L0004","section":"top bar","text":"Ctrl K","placement":"shared"},
         {"key":"L0005","section":"Gate","text":"Gate","placement":"unplaced"},
-        {"key":"L0006","section":"Gate","text":"Changes touching protected build surfaces, held for your approval.","placement":"placed","file":"modules/hall-ui/public/gate.js","line":431,"string_id":"4b714191b423"},
+        {"key":"L0006","section":"Gate","text":"Changes touching protected build surfaces, held for your approval.","placement":"placed","file":"modules/hall-ui/public/gate.js","line":432,"string_id":"4b714191b423"},
         {"key":"L0007","section":"Gate","text":"Awaiting your approval","placement":"unplaced"},
         {"key":"L0008","section":"Gate","text":"held at the gate check","placement":"unplaced"},
         {"key":"L0009","section":"Gate","text":"Hard-floor holds","placement":"unplaced"},
@@ -997,7 +997,7 @@
       "surface": "builders",
       "title": "Goals",
       "states_read": ["list","filters","cards","detail","out"],
-      "files_hash": "c0cc109370ca958c",
+      "files_hash": "968230876b9152ba",
       "reading_hash": "cf7f8688bcae4dd5",
       "counts": {"lines":146,"placed":36,"shared":5,"unplaced":105},
       "omitted": {"data":250},
@@ -1008,14 +1008,14 @@
         {"key":"L0003","section":"top bar","text":"Jump to…","placement":"shared","file":"modules/hall-ui/public/shell.js","line":487,"string_id":"eba610d25523"},
         {"key":"L0004","section":"top bar","text":"Ctrl K","placement":"shared"},
         {"key":"L0005","section":"Goals","text":"Goals","placement":"unplaced"},
-        {"key":"L0006","section":"Goals","text":"Goal {…}","placement":"placed","file":"modules/hall-ui/public/gate.js","line":280,"string_id":"ec88b946ad16","state":"detail"},
+        {"key":"L0006","section":"Goals","text":"Goal {…}","placement":"placed","file":"modules/hall-ui/public/gate.js","line":288,"string_id":"ec88b946ad16","state":"detail"},
         {"key":"L0007","section":"Goals","text":"{…} and {…}","placement":"placed","file":"modules/hall-ui/public/profile-nudge.js","line":77,"string_id":"56b00d773232","occurrences":8},
         {"key":"L0008","section":"Goals","text":"See which goals wait on each other →","placement":"placed","file":"modules/hall-ui/public/goals.html","line":47,"string_id":"292761c89fae"},
         {"key":"L0009","section":"Goals","text":"← All goals","placement":"placed","file":"modules/hall-ui/public/goals.html","line":83,"string_id":"d4b84b7fbdeb","state":"detail"},
         {"key":"L0010","section":"#1000081 {…}","text":"Claude's notes on this goal","placement":"placed","file":"modules/hall-ui/public/goals.html","line":94,"string_id":"5b3b75ee0596","state":"detail"},
         {"key":"L0011","section":"Completion3","text":"Completion","placement":"unplaced","state":"detail"},
         {"key":"L0012","section":"Completion3","text":"{…} of {…} criteria satisfied","placement":"placed","file":"modules/hall-ui/public/goals-lib.js","line":32,"string_id":"cc5106af4b35","state":"detail"},
-        {"key":"L0013","section":"Completion3","text":"Goal {…}","placement":"placed","file":"modules/hall-ui/public/gate.js","line":280,"string_id":"ec88b946ad16","state":"detail"},
+        {"key":"L0013","section":"Completion3","text":"Goal {…}","placement":"placed","file":"modules/hall-ui/public/gate.js","line":288,"string_id":"ec88b946ad16","state":"detail"},
         {"key":"L0014","section":"Completion3","text":"{…} — harness fixture text","placement":"unplaced","state":"detail","occurrences":3},
         {"key":"L0015","section":"Members0","text":"Members","placement":"unplaced","state":"detail"},
         {"key":"L0016","section":"Members0","text":"No {…} assigned yet — an Archon can appoint one.","placement":"unplaced","state":"detail"},
@@ -1156,7 +1156,7 @@
       "surface": "builders",
       "title": "Government",
       "states_read": ["constitution","out","permissions","board","constitution-tab"],
-      "files_hash": "5181c9903bdea83f",
+      "files_hash": "c1c4058d40d669d2",
       "reading_hash": "f7f7466cabdf5569",
       "counts": {"lines":71,"placed":24,"shared":5,"unplaced":42},
       "omitted": {"data":10},
@@ -1185,7 +1185,7 @@
         {"key":"L0021","section":"Constitution","text":"Every {…} builder at","placement":"unplaced"},
         {"key":"L0022","section":"Constitution","text":"or above","placement":"placed","file":"modules/hall-ui/public/government.js","line":564,"string_id":"c38db02adb61"},
         {"key":"L0023","section":"Constitution","text":"sits on the board — that is","placement":"unplaced"},
-        {"key":"L0024","section":"Constitution","text":"and","placement":"placed","file":"modules/hall-ui/public/deploy.js","line":375,"string_id":"084748fd85b4"},
+        {"key":"L0024","section":"Constitution","text":"and","placement":"placed","file":"modules/hall-ui/public/deploy.js","line":541,"string_id":"084748fd85b4"},
         {"key":"L0025","section":"Constitution","text":". Membership follows the rank, live.","placement":"unplaced"},
         {"key":"L0026","section":"Constitution","text":"What counts as passing","placement":"unplaced"},
         {"key":"L0027","section":"Constitution","text":"Items pass by","placement":"unplaced"},
@@ -1584,7 +1584,7 @@
       "surface": "builders",
       "title": "Modules",
       "states_read": ["browse","search-empty","lens","details","out"],
-      "files_hash": "38f79e90abc42a25",
+      "files_hash": "e02acc87a87fbb67",
       "reading_hash": "165201cda2af2264",
       "counts": {"lines":42,"placed":14,"shared":5,"unplaced":23},
       "omitted": {"data":77},
@@ -2222,7 +2222,7 @@
       "surface": "builders",
       "title": "Project settings",
       "states_read": ["default"],
-      "files_hash": "f3007d41f4f59d9f",
+      "files_hash": "01c19996a012a0d3",
       "reading_hash": "940a00917a01cd2e",
       "counts": {"lines":10,"placed":5,"shared":5,"unplaced":0},
       "omitted": {"data":1},
@@ -2388,7 +2388,7 @@
       "surface": "builders",
       "title": "Sessions",
       "states_read": ["ledger","out"],
-      "files_hash": "794fdcbab2e44337",
+      "files_hash": "ad46927c48018cef",
       "reading_hash": "b8315ec3484a1431",
       "counts": {"lines":54,"placed":15,"shared":5,"unplaced":34},
       "omitted": {"data":16},
@@ -2980,7 +2980,7 @@
       "surface": "builders",
       "title": "Watch",
       "states_read": ["board","out","operations","security"],
-      "files_hash": "4b89e8960b706953",
+      "files_hash": "3acbd4398dd35520",
       "reading_hash": "de49e347cca76e41",
       "counts": {"lines":156,"placed":44,"shared":5,"unplaced":107},
       "omitted": {"data":123},

package/modules/copy-desk/module.json

@@ -6,7 +6,7 @@
   "coreVersion": "^1.8.0",
   "default": true,
   "maintenance": { "status": "core-maintained" },
-  "contributes": { "routes": ["copy-desk"], "migrations": true },
+  "contributes": { "routes": ["copy-desk"], "migrations": true, "skills": ["tweak"] },
   "provides": [],
   "consumes": ["lifecycle"]
 }

package/{.claude → modules/copy-desk}/skills/tweak/SKILL.md

@@ -2,6 +2,7 @@
 name: tweak
 description: >-
   Apply the next submitted page tweak: claim the round, apply every line, render the page before and after, attach the renders and ship it to wait for the artist. Metic+. Triggers: "/tweak", "apply the next page tweak", "work the tweak queue".
+disable-model-invocation: true
 plain: >-
   Applies the next set of change requests someone made to a page, and shows before and after pictures for the artist to approve.
 reach-for: >-

package/modules/hall-ui/public/collab.css

@@ -4,7 +4,7 @@
    feel collaborative" — asked of you left, your asks right, every open ask
    below, each condensed to the newest three with a show-all). The panel is the
    shell's .scroll, the two-up is the shell's .view-zone--band, the row is
-   oversight.css's .ov-row--lead (a face, then the words, then the state), the
+   the .ov-row--lead below (a face, then the words, then the state), the
    age is a .fact-pill, the context a .fact-chip, the expander the shell's
    .btn-ghost. This sheet holds only what Collab has and no other page does: the
    colour of each age band, the faces, the block head, the lit personal call, and
@@ -168,6 +168,13 @@
    entirely (task 1004041): the age pill says how long in words and carries the
    exact timestamp on its title, so a date beside it was the same fact twice —
    which is what the "All open asks" rows were doing at full width. */
+/* The --lead row: a face, then the words, then the state. Only Collab renders it,
+   so the rule lives here (it was in oversight.css, unused by any oversight page). */
+.ov-row--lead { grid-template-columns: auto minmax(0, 1fr) auto; }
+@media (max-width: 640px) {
+  .ov-row--lead { grid-template-columns: auto minmax(0, 1fr); }
+  .ov-row--lead > .ov-row__right { grid-column: 2; }
+}
 .cb-band .ov-row--lead { grid-template-columns: auto minmax(0, 1fr); row-gap: 8px; }
 .cb-band .ov-row--lead > .ov-row__right {
   grid-column: 2;

package/modules/hall-ui/public/oversight.css

@@ -94,7 +94,6 @@
   border-top: var(--line) solid var(--rule-soft);
 }
 .ov-rows > .ov-row:first-child, .ov-group__head + .ov-rows > .ov-row:first-child, .ov-group__head + .ov-row { border-top: 0; }
-.ov-row--lead { grid-template-columns: auto minmax(0, 1fr) auto; }
 /* A dense row: a permission, a voter, a machine principal — sixty of them in
    one panel is the ordinary case, so the air tightens. */
 .ov-row--dense { padding: 10px 0; }
@@ -131,8 +130,6 @@ a.ov-row__title:hover { color: var(--accent-ink); text-decoration: underline; te
 .ov-row__when { font-size: 12.5px; color: var(--ink-faint); font-variant-numeric: tabular-nums; white-space: nowrap; }
 @media (max-width: 640px) {
   .ov-row { grid-template-columns: minmax(0, 1fr); }
-  .ov-row--lead { grid-template-columns: auto minmax(0, 1fr); }
-  .ov-row--lead > .ov-row__right { grid-column: 2; }
   .ov-row__right { align-items: flex-start; text-align: left; }
   .ov-row__actions { justify-content: flex-start; }
 }

package/modules/lifecycle/dependency-advisory.js

@@ -17,9 +17,9 @@
 //   1. POST /tasks attaches `dependency_advisory` to its 201 body (this
 //      file's `buildDependencyAdvisory`), read by the /goal-create skill's
 //      "sibling advisory" section (.claude/skills/goal-create/SKILL.md).
-//   2. The periodic sweep: `/goal-review`'s daily walk runs
+//   2. The periodic sweep: `/goal-close`'s residue walk (was `/goal-review`) runs
 //      `node scripts/gds/audit-deps.js --min high` as one more housekeeping
-//      step (idea 1000276's half — see .claude/skills/goal-review/SKILL.md).
+//      step (idea 1000276's half — see .claude/skills/goal-close/SKILL.md, Part 2).
 //
 // HARD CONSTRAINT, same as goal-advisory.js: advisory only (a finding addressed
 // to a human never acts by itself — ADR 0158 §2). This

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.20.42",
+  "version": "1.20.44",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.20.42",
+      "version": "1.20.44",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.20.42",
+  "version": "1.20.44",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -8361,5 +8361,21 @@
       "id": "1003792",
       "text": "The module store can now run a security check on each module version: it fails a version that ships a secret file, pulls code from outside the official package registry, or depends on a package with a known serious vulnerabili"
     }
+  ],
+  "1.20.43": [
+    {
+      "id": "1004471",
+      "text": "Claude's list of project commands is now short enough to read in full every session: the rarely used admin commands still work when you type them but no longer take up room, and one new /owner-review walks the backlog, bugs, i"
+    }
+  ],
+  "1.20.44": [
+    {
+      "id": "1003637",
+      "text": "The collab page's row layout rule now lives in the collab stylesheet instead of the shared oversight one."
+    },
+    {
+      "id": "1004365",
+      "text": "Every store module now comes with a how-to page, and the store refuses to publish one without it."
+    }
   ]
 }

package/scripts/gds/fitness-ratchets.js

@@ -423,6 +423,8 @@ function skillListingMetrics() {
     const lint = require('./skill-lint.js');
     // Resident skills only (task 1004470): a skill owned by a module this checkout leaves
     // off (pixel-art, design-styles — both default: false) is in no session's listing here.
+    // listingChars also leaves out HIDDEN skills (disable-model-invocation: true, task 1004471):
+    // Claude Code keeps their descriptions out of the model's context entirely.
     const files = lint.listSkillFiles();
     return { skill_listing_chars: lint.lintSkills(files, { resident: lint.residentSkillFiles(undefined, { files }) }).listingChars };
   } catch (e) {

package/scripts/gds/module-artifact.js

@@ -22,6 +22,13 @@
 // secrets), plus credential-named files anywhere in the module (SECRET_FILE_RE). Anything the denylist catches refuses the whole publish rather than being
 // silently dropped: a module that ships without a file it expected is a broken module.
 //
+// THE HOW-TO GATE (ADR 0347 D4, task 1004365). A store version must carry HOWTO.md
+// with the five required sections, each with some text. checkHowto is the ONE checker:
+// `bongos module publish` runs it before uploading and the store's upload route runs
+// it again through verifyModuleArtifact({ requireHowto: true }), so a hand-built upload
+// can't skip it. It is opt-in there because install and update verify with the same
+// function, and a version published before the gate existed must still install.
+//
 // Both halves live here so the CLI (packModule) and the store route
 // (verifyModuleArtifact) cannot disagree about the format. Pure apart from reading the
 // module directory in packModule; never touches the network or the database.
@@ -47,6 +54,42 @@ const NEVER_PACKED = new Set(['.upstream-signoff.json', INNER_MANIFEST_PATH]);
 const MAX_TARBALL_BYTES = 5 * 1024 * 1024;
 const READ_LIMITS = { maxUnpackedBytes: 16 * 1024 * 1024, maxFiles: 2000 };
 
+const HOWTO_FILE = 'HOWTO.md';
+// ADR 0347 D2 — level-2 headings, matched case-insensitively, in any order.
+const HOWTO_SECTIONS = ['What it does', 'Install and enable', 'How to use it', 'Configuration', 'Limits and known issues'];
+
+// Judge HOWTO.md's text (null = the file is absent). Reads headings only, never the
+// writing: a section counts as filled when it holds any text once HTML comments (the
+// scaffold's prompts) are removed. A heading inside a fenced code block doesn't count.
+// Returns { ok, problems: [a plain sentence naming the file or the section] }.
+function checkHowto(text) {
+  if (text == null) return { ok: false, problems: [`${HOWTO_FILE} is missing — every store module ships one (ADR 0347)`] };
+  const bodies = new Map();
+  let current = null;
+  let fence = null;
+  for (const line of String(text).replace(/<!--[\s\S]*?-->/g, '').split(/\r?\n/)) {
+    const f = line.match(/^\s*(```|~~~)/);
+    if (f) fence = fence === f[1] ? null : (fence || f[1]);
+    const h = !fence && !f && line.match(/^(#{1,6})\s+(.*?)\s*#*\s*$/);
+    if (h) {
+      // A level-1/2 heading starts a new section; a deeper one is structure, not text.
+      if (h[1].length <= 2) {
+        current = h[1].length === 2 ? h[2].toLowerCase() : null;
+        if (current !== null && !bodies.has(current)) bodies.set(current, '');
+      }
+      continue;
+    }
+    if (current !== null) bodies.set(current, bodies.get(current) + line.trim());
+  }
+  const problems = [];
+  for (const name of HOWTO_SECTIONS) {
+    const body = bodies.get(name.toLowerCase());
+    if (body === undefined) problems.push(`${HOWTO_FILE}: section "${name}" is missing`);
+    else if (!body) problems.push(`${HOWTO_FILE}: section "${name}" is empty`);
+  }
+  return { ok: problems.length === 0, problems };
+}
+
 function tarballName(key, version) { return `${ARTIFACT_NAME}-${key}-${version}.tgz`; }
 
 // Every file under dir, as module-relative forward-slash paths, sorted. Skips
@@ -144,7 +187,9 @@ function packModule(key, { modulesDir, now = () => new Date(), modeOf } = {}) {
 // `includeFiles: true` (install, task 1003785) also returns `files`: the module's own
 // files — [{ path, mode, buf }], the inner manifest left out — from the SAME parse the
 // hashes were checked against, so a caller that places them never re-reads the bytes.
-async function verifyModuleArtifact(tgz, { key, maxBytes = MAX_TARBALL_BYTES, includeFiles = false } = {}) {
+// `requireHowto: true` (the store's upload route, ADR 0347 D4) also refuses a version
+// whose HOWTO.md fails checkHowto.
+async function verifyModuleArtifact(tgz, { key, maxBytes = MAX_TARBALL_BYTES, includeFiles = false, requireHowto = false } = {}) {
   const fail = (code, message) => ({ ok: false, code, message });
   if (!Buffer.isBuffer(tgz) || tgz.length === 0) return fail('empty_artifact', 'the upload is empty');
   if (tgz.length > maxBytes) return fail('artifact_too_large', `the tarball is over ${maxBytes} bytes`);
@@ -204,6 +249,11 @@ async function verifyModuleArtifact(tgz, { key, maxBytes = MAX_TARBALL_BYTES, in
   if (manifest.module_version !== moduleJson.version || manifest.core_version !== moduleJson.coreVersion) {
     return fail('bad_manifest', 'the manifest version does not match module.json');
   }
+  if (requireHowto) {
+    const howto = byName.get(HOWTO_FILE);
+    const h = checkHowto(howto ? howto.buf.toString('utf8') : null);
+    if (!h.ok) return fail('howto_incomplete', h.problems.join('; '));
+  }
 
   const out = {
     ok: true, manifest, moduleJson,
@@ -216,4 +266,4 @@ async function verifyModuleArtifact(tgz, { key, maxBytes = MAX_TARBALL_BYTES, in
   return out;
 }
 
-module.exports = { MAX_TARBALL_BYTES, packModule, verifyModuleArtifact, deniedFiles };
+module.exports = { MAX_TARBALL_BYTES, HOWTO_FILE, HOWTO_SECTIONS, packModule, verifyModuleArtifact, deniedFiles, checkHowto };