@bongos/core 1.20.45 → 1.20.47

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.20.45",
-  "core_contract": "1.20.45",
-  "source_commit": "500731f1c26e69eac1e926352f63dd62d7665967",
+  "core_version": "1.20.47",
+  "core_contract": "1.20.47",
+  "source_commit": "4bad9e4d47f893aed715e1bb760f0a289e8d4e91",
   "source_ref": "HEAD",
-  "built_at": "2026-10-01T02:30:19.832Z",
+  "built_at": "2026-10-01T03:14:30.812Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 567,
     "agent_docs_stubbed": 27,
-    "functional_verbatim": 2698,
+    "functional_verbatim": 2701,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 3293,
-  "tree_sha256": "eb4ea6fda587ab5e49faeab142db13463c88c592c9cbdec22dec9d914cb739bf",
+  "file_count": 3296,
+  "tree_sha256": "ffca73ccd54dde7295338ce11784355acdf1e65a73ed59d0a16ece96390b478b",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -317,12 +317,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "567f4e867d2e4e4c8a9848dcc839eabd38131b931d00b1d376d60ea00a9da5b6"
+      "sha256": "babd77a306b2908653f49e176b742a3321428be77accd7514963a0a6543643ae"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "d68299ce87e19a630ff6cd5fffcfc480490bb21be66336282f547bbf75eab57e"
+      "sha256": "6203efb07ef0cfd92639563c0c7b8f3539b0f0d9d57e042f3fb3991de416bef7"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -332,17 +332,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "0a97565f7b9f850c87359dd1e11b66944a1bc5d5aaa55e7e06136d1c330558e7"
+      "sha256": "6bb408bf7d8dc8e10448bbc5a5305bdd3f2edeff59ae3049aac3a56579c7f7f9"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "8aca809dac8482b3015ebc780c7da72943296cc33b7556868b3707ad8b811f52"
+      "sha256": "511a2a545be895971f0122057a93a0f96270be8242ef2131393033d544b887b5"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "3f3ea0f601dcf725794a3b35e1643a5124833e0e6350911b684a9785b4251eb5"
+      "sha256": "de6f684b63139f01844b8fb304489769377205822a461110ab0be4ac78db4b1d"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -2257,12 +2257,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "a9d5356ba4e2dfbffe67abafaf61272ae85f42dd177bbdd912b2abc0b5e6a5a8"
+      "sha256": "4db9e523ef0c4d44f326a733165ddba0d2110d957f3f870d31327b01675cb1e5"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "ab32aee0c20597431aa24f89aac65706af4bc8e73067232b688fab032aebc5b2"
+      "sha256": "168ed8033455dd5bbf2156d7bd656ba88135344a5891c6d1edb8367fb360097f"
     },
     {
       "path": "docs/architecture.md",
@@ -2287,12 +2287,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "a144f3e1169ab018ef174d25bb93051944a2f3599adb2ede5dc2ea428c30ca45"
+      "sha256": "926294fb57435f519379911bf3947a49869bf16eb1f9c38a8a8ccb60302fb224"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "d5e1034fe8d4b7dad849f15b41e1cdbf0c319a8d883b8735322328e905d457cb"
+      "sha256": "755028d59334414d3627ea34ab0393732767eaa366e1ec301081e0c464eee975"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2797,12 +2797,12 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "2f590139a6bc3a910985d58828c98f13ae3813b1a92a510e8ef7719dfab04f05"
+      "sha256": "a98c946c6f0dc4dbc8c37b3b5153dde4eba87e11c9562c01527c1d52aa61d665"
     },
     {
       "path": "docs/modules-contract.md",
       "mode": "0000644",
-      "sha256": "15148b0d5a175c6eaf24fcc54709500e2c036ef966011c8505ecc8988a904b97"
+      "sha256": "5d78d2fa2266bfed7e1034c0649274cb544333aa0c81ecdcb34413524729764f"
     },
     {
       "path": "docs/onboarding/diagrams/01-task-lifecycle.mmd",
@@ -2882,12 +2882,12 @@
     {
       "path": "docs/page-inventory.json",
       "mode": "0000644",
-      "sha256": "0503f35180d448a154bc32e82f71149231c207a2f4120993844cf6aa5cce4419"
+      "sha256": "6670422d3a31ee4cd1f3479b336dc39ec67857d37e0bc989e35e7e56a36a4ffa"
     },
     {
       "path": "docs/page-readings.json",
       "mode": "0000644",
-      "sha256": "4bf5248643bb0656fdb6afdbbf1a2642658e463302fa816e47c0a3c9a08eb03e"
+      "sha256": "5b37b99d13b476f7f5ae84622b4f05774d40d026cf5438de28e482d590828300"
     },
     {
       "path": "docs/project-context.template.md",
@@ -5184,6 +5184,11 @@
       "mode": "0000644",
       "sha256": "2dc6e44e447a83abc9c8c62d44cd284140ee8e85b5d40f0e432956abbbef1107"
     },
+    {
+      "path": "modules/hall-ui/public/bulk-toolbar.js",
+      "mode": "0000644",
+      "sha256": "348af13934029e6f9b8e980e1f6ee97ea5fe39bae064ebcf1d97331318643e43"
+    },
     {
       "path": "modules/hall-ui/public/chime.wav",
       "mode": "0000644",
@@ -5427,12 +5432,12 @@
     {
       "path": "modules/hall-ui/public/goals-page.js",
       "mode": "0000644",
-      "sha256": "14e688e5adbffc9c9d15fb5baa8637a60b8f4536fee7351c9a7e1e10747d80ca"
+      "sha256": "a8e49443dea62c763dcb2cd8534755eb393f0b7227b3bb61be0801da0be01a75"
     },
     {
       "path": "modules/hall-ui/public/goals-render.js",
       "mode": "0000644",
-      "sha256": "b850bb1e3f50c6ba9d6c7e2105d8940d57fe34037c8cc58a45938450bb183261"
+      "sha256": "6ef0116685ebaa6f5d9d74ce5c4e877a3157a1f4fa659214b11a04d1c8ba5e2e"
     },
     {
       "path": "modules/hall-ui/public/goals.css",
@@ -5442,7 +5447,7 @@
     {
       "path": "modules/hall-ui/public/goals.html",
       "mode": "0000644",
-      "sha256": "e7d8c1aa23b767e3e5f754f6e22525569a3bd05f0388a3b32c516eb264b8a89d"
+      "sha256": "71968796e1acc1564cbe2092a1df0db09ab3d3065c5bd79703ce3143bbfe16d5"
     },
     {
       "path": "modules/hall-ui/public/goals.js",
@@ -5562,17 +5567,17 @@
     {
       "path": "modules/hall-ui/public/modules.css",
       "mode": "0000644",
-      "sha256": "9a00c3965acc3defb8d711950ee9a15e941bbd9cc005a48babfa9b0f31a5068d"
+      "sha256": "29b552f18e5b9b02fd633e7d41dd6172b33ee4bd0567740177c6a11774d888ea"
     },
     {
       "path": "modules/hall-ui/public/modules.html",
       "mode": "0000644",
-      "sha256": "4a81932842ef18a9d2f71949ea7f41164d7977c9c6d3875004a864415d057632"
+      "sha256": "9631772bb478c09835ce6277e30e6899599a731a51718a4994d50df1c65a2108"
     },
     {
       "path": "modules/hall-ui/public/modules.js",
       "mode": "0000644",
-      "sha256": "cd2ce2e4116e618e3c9d94ab6caf0d917a0a13d991eddeeedd27f3f04dc29db4"
+      "sha256": "01fbd0bd0ac6910e9deb91599598c5c4aa1f5139b9cdcc05aeed4def50359c55"
     },
     {
       "path": "modules/hall-ui/public/modules.states.json",
@@ -5877,7 +5882,7 @@
     {
       "path": "modules/hall-ui/public/style.css",
       "mode": "0000644",
-      "sha256": "d7b81dd548956ef61302a712b0e616a8b762ae6e4098f1c478ac72b619022202"
+      "sha256": "3b07bddaaa17e2e4ebf1b7528e401c571c8ac17a51430f03654c92964f84f298"
     },
     {
       "path": "modules/hall-ui/public/task-detail.js",
@@ -5987,17 +5992,17 @@
     {
       "path": "modules/hall-ui/public/work.css",
       "mode": "0000644",
-      "sha256": "12b5c9aefa39b8922a5a5a8585a107779bc15678b120cf00239584e28959c604"
+      "sha256": "0591cdd5fb16cc5a649bba22d38ac6166038bed0a312e409c3917cf9445c21ac"
     },
     {
       "path": "modules/hall-ui/public/work.html",
       "mode": "0000644",
-      "sha256": "d6d596955321f0140ed4944c12b5addb74e28c6be274ba7d7bf9abfbb1530a95"
+      "sha256": "bb1f1b59810956d20ddea9a4dbbf8ca32e533d433e397a1ca0bedce1a3990935"
     },
     {
       "path": "modules/hall-ui/public/work.js",
       "mode": "0000644",
-      "sha256": "18b8adc690b10fac08cf16f02b070c363f2287e6e185d89acdc6070ee68385f8"
+      "sha256": "1aa809ae38a696516c34d2e4a77c2ff5ca4706792d4793b25c3f6c43b833b73a"
     },
     {
       "path": "modules/hall-ui/public/work.states.json",
@@ -6017,7 +6022,7 @@
     {
       "path": "modules/hall-ui/records/catalog.md",
       "mode": "0000644",
-      "sha256": "a21149740fc70e2cd07524a83bf61b60c9682c279bfe31430c48612b9668a520"
+      "sha256": "1348a368109f3b5f1f57428f26b1a019bf8b3ec6d3aee967245ced17da5f6ee1"
     },
     {
       "path": "modules/hall-ui/records/collaboration.md",
@@ -9082,12 +9087,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "06b4fc03bee8b756f3b285d27f8e9ffece9608c8ef1e84faafe0cdb23cc25836"
+      "sha256": "dc0ecebe3304eabb2916bf7b697c064d7b86b9323c59e95e1273f879709e200b"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "d36ec2c223737d20c61047828838d16732e7aa9bd1a25069717210c20c514ea8"
+      "sha256": "f872514b82406f84546cb644bbb0288f797b8175bbd659b89029ff250ffe01aa"
     },
     {
       "path": "public-docs/index.html",
@@ -9107,7 +9112,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "88c13089d0db2acf601693be2fee84010e6af2856e32eb4ffecf83746c831790"
+      "sha256": "83234a6455907853605b38685375193470bab12b00f14b0fb2167ba4adf72e2b"
     },
     {
       "path": "scripts/bongos-mcp.js",
@@ -9952,7 +9957,7 @@
     {
       "path": "scripts/gds/module-artifact.js",
       "mode": "0000644",
-      "sha256": "f2d0770ca07105a0555190783cd37ff838babcec337a93a2ebd2a448efc37062"
+      "sha256": "7b10d8fd5146325c218d59eadfb6feaeb8819e14c4b27b166ad9ff714e1caed0"
     },
     {
       "path": "scripts/gds/module-assess-security.js",
@@ -9967,7 +9972,7 @@
     {
       "path": "scripts/gds/module.js",
       "mode": "0000644",
-      "sha256": "8563b7fa47b7c3f00e6c070c496a924875ea49ca41b681c1209c5819d2551f97"
+      "sha256": "7ac7a4234d44c592f51a28d95a91f14379c6271977eb05d1e89700ba72827817"
     },
     {
       "path": "scripts/gds/move-escalation.js",
@@ -10832,7 +10837,7 @@
     {
       "path": "scripts/hall-preview/server.js",
       "mode": "0000644",
-      "sha256": "974c71c0a21d62d5c702d611f1ff26c5e5e8eb58e3bb38271665bd56598b4200"
+      "sha256": "72a4ab518608fb77101e74b38c802af09bbf041f95ba3acdb97b0c9095b499df"
     },
     {
       "path": "scripts/hall-preview/task-visual.js",
@@ -11057,7 +11062,7 @@
     {
       "path": "src/bongos/module-store.js",
       "mode": "0000644",
-      "sha256": "2bc2e05af26a1e416fb083dda7cfce7e7693a56dccd46f7d1f233343ec73d215"
+      "sha256": "6e058031cd08e741f970c6f4a535e36ff96bd61a34d335e72ab82d91e508d21f"
     },
     {
       "path": "src/bongos/module-submissions.js",
@@ -11202,7 +11207,7 @@
     {
       "path": "src/bongos/routes/modules.js",
       "mode": "0000644",
-      "sha256": "3acd1e40da2502d9c69f7260548585f31e35a102c6dcc5cd58a71965a6b8a42c"
+      "sha256": "9a73d17319e72baaf1214bad5b8ae7847c8c11a4caa7cb7db74ef5b5dce1be8d"
     },
     {
       "path": "src/bongos/routes/my-sessions.js",
@@ -11272,7 +11277,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "8962044325961f1bbe248348bc45c6999e6ea90ac2ef51599739a35dc9b1d19f"
+      "sha256": "b96dfe75b5aaab1430ba304c18879668335823842ebd1ff63d51181e61193f50"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -11909,6 +11914,11 @@
       "mode": "0000644",
       "sha256": "7e640af4e5bf8d0b388aa86689c67a10291fefa38b9de2523bf883baf036f503"
     },
+    {
+      "path": "tests/bulk_toolbar.mjs",
+      "mode": "0000644",
+      "sha256": "3c0ed61e6b12548d4b54ac74a62cb1bcbdeec6030688bd917db3b6e9e4aa769d"
+    },
     {
       "path": "tests/bump_version.mjs",
       "mode": "0000644",
@@ -11957,7 +11967,7 @@
     {
       "path": "tests/claim_action.mjs",
       "mode": "0000644",
-      "sha256": "c73443286e121adb46680de2987205e57fcc9766dc8e12d320e14ed7325879e4"
+      "sha256": "b2f78ec755337a285f7b624188a062e726ed966f189d7f8c7fe74641dcb30336"
     },
     {
       "path": "tests/claim_error_surface.mjs",
@@ -12852,7 +12862,7 @@
     {
       "path": "tests/goal_category_ui.mjs",
       "mode": "0000644",
-      "sha256": "53334e44f25bb76cefaef4cedf6e3970484ca74c5bbfbccb18eceb6ecba0bd61"
+      "sha256": "8e56a68a746fb43141abee97fe495f0be6429b302fd1746f25be165311c8f2e4"
     },
     {
       "path": "tests/goal_cli.mjs",
@@ -12877,7 +12887,7 @@
     {
       "path": "tests/goal_criterion_confirm_ui.mjs",
       "mode": "0000644",
-      "sha256": "6e371b777a72fe9385fb836967d3ed8468a20d3659cd7a979d842423de8a2936"
+      "sha256": "5135f32b3c1fa4f210eecbda4d808b982e62bab36b185ed7ac1848d4007e773e"
     },
     {
       "path": "tests/goal_dependencies_read.mjs",
@@ -12897,7 +12907,7 @@
     {
       "path": "tests/goal_forest_page.mjs",
       "mode": "0000644",
-      "sha256": "58c0581889bde9b19eed7de6d40ed47e61d87da55e1ba40e599df196b92a28d4"
+      "sha256": "fdad13a1d265a3506229712816e244ebe026f449beabe3f98a5d652b36d01365"
     },
     {
       "path": "tests/goal_graph.mjs",
@@ -12907,7 +12917,7 @@
     {
       "path": "tests/goal_invite_consent.mjs",
       "mode": "0000644",
-      "sha256": "c936854e2ddb1c18fa2e50e3d5d71e3d2f982670fe1de210b9da719dcad83551"
+      "sha256": "ffbbff6f68c60f9c2ea81ef97d61122e604692ca927335ac06cc07fdc182ef2d"
     },
     {
       "path": "tests/goal_map_page.mjs",
@@ -12927,7 +12937,7 @@
     {
       "path": "tests/goal_mine_lens.mjs",
       "mode": "0000644",
-      "sha256": "77e6608ab7dfa45c26586cddd3c2b8bd63fcbec26535d3400160aa40bb21eb58"
+      "sha256": "a465047f1e25c6cdeedf75f53337851224b7207c95d5135d1353504b3c660087"
     },
     {
       "path": "tests/goal_names.mjs",
@@ -13377,7 +13387,7 @@
     {
       "path": "tests/hall_board_world.mjs",
       "mode": "0000644",
-      "sha256": "48c6176c97d4cc167c57aeaf77baa78667731125c5ff2369564f08cbe9a146c7"
+      "sha256": "c82d6d3aa6ae1f047b2f633d7362a69382781ee51001422ab9c8b1457eac757e"
     },
     {
       "path": "tests/hall_builders_page_pass.mjs",
@@ -13387,7 +13397,7 @@
     {
       "path": "tests/hall_catalog_world.mjs",
       "mode": "0000644",
-      "sha256": "79c8759cbb0d17477139acae6e0057caa70021ff0edfeba9c419c14ad729a1ac"
+      "sha256": "9a2434b3d54cbc23b3874e757d5d2fc6ab5b50e239c07d013f8cfe1409c11806"
     },
     {
       "path": "tests/hall_client_request_shape.mjs",
@@ -13432,7 +13442,7 @@
     {
       "path": "tests/hall_mine_lens.mjs",
       "mode": "0000644",
-      "sha256": "88a784d3641f6a8b00dcba464aa0ef053e63b4c7d8ea836d8802ef57f3616770"
+      "sha256": "592ff060acd73291751165742d7d2967b28b9787f6c1f5eefcc935d9bd21b2f6"
     },
     {
       "path": "tests/hall_nav.mjs",
@@ -14339,6 +14349,11 @@
       "mode": "0000644",
       "sha256": "ba4233ed072c87df9dbc5c75af10655ad8eaaf9d8ccbe69df146052467a1279e"
     },
+    {
+      "path": "tests/module_store_howto.mjs",
+      "mode": "0000644",
+      "sha256": "43828c1a95652180d558e7676cc2053d0599a61c0edf4cd1ab100820fc7de493"
+    },
     {
       "path": "tests/module_store_publish.mjs",
       "mode": "0000644",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 470 operations across 72 resource groups
+- 471 operations across 72 resource groups
 
 ## Use it from your project
 

package/clients/bongos-client/bongos-client.global.js

@@ -1053,6 +1053,8 @@ function createClient(opts = {}) {
       getStoreModulesKeyEntitlement: (args) => request("GET", "/store/modules/{key}/entitlement", { hasBody: false }, args),
       // POST /store/modules/{key}/versions — rank: metic+archon — POST /store/modules/:key/versions
       postStoreModulesKeyVersions: (args) => request("POST", "/store/modules/{key}/versions", { hasBody: true }, args),
+      // GET /store/modules/{key}/versions/{version}/howto — rank: any-builder — GET /store/modules/:key/versions/:version/howto
+      getStoreModulesKeyVersionsVersionHowto: (args) => request("GET", "/store/modules/{key}/versions/{version}/howto", { hasBody: false }, args),
       // GET /store/modules/{key}/versions/{version}/tarball — rank: any-builder — GET /store/modules/:key/versions/:version/tarball
       getStoreModulesKeyVersionsVersionTarball: (args) => request("GET", "/store/modules/{key}/versions/{version}/tarball", { hasBody: false }, args),
     },

package/clients/bongos-client/index.cjs

@@ -1052,6 +1052,8 @@ function createClient(opts = {}) {
       getStoreModulesKeyEntitlement: (args) => request("GET", "/store/modules/{key}/entitlement", { hasBody: false }, args),
       // POST /store/modules/{key}/versions — rank: metic+archon — POST /store/modules/:key/versions
       postStoreModulesKeyVersions: (args) => request("POST", "/store/modules/{key}/versions", { hasBody: true }, args),
+      // GET /store/modules/{key}/versions/{version}/howto — rank: any-builder — GET /store/modules/:key/versions/:version/howto
+      getStoreModulesKeyVersionsVersionHowto: (args) => request("GET", "/store/modules/{key}/versions/{version}/howto", { hasBody: false }, args),
       // GET /store/modules/{key}/versions/{version}/tarball — rank: any-builder — GET /store/modules/:key/versions/:version/tarball
       getStoreModulesKeyVersionsVersionTarball: (args) => request("GET", "/store/modules/{key}/versions/{version}/tarball", { hasBody: false }, args),
     },

package/clients/bongos-client/index.d.ts

@@ -165,6 +165,7 @@ export interface GetSpecialitiesOfferedResponse { suggestions: unknown }
 export interface GetSpecialitiesResponse { specialities: unknown }
 export interface GetSsoPubkeyResponse { alg: unknown; format: unknown; public_key_b64: unknown }
 export interface GetStoreEntitlementsResponse { entitlements: unknown }
+export interface GetStoreModulesKeyVersionsVersionHowtoResponse { module_key: unknown; title: unknown; version: unknown; published_at: unknown; delisted: unknown; markdown: unknown; artifact_url: unknown }
 export interface GetTaskRecommendationsForMeResponse { recommendations: unknown; count: unknown }
 export interface GetTaskRecommendationsMineResponse { recommendations: unknown; count: unknown }
 export interface GetTasksClaimableResponse { claimable: unknown; claimable_total: unknown; active_claims: unknown }
@@ -1488,6 +1489,8 @@ export interface BongosClient {
     getStoreModulesKeyEntitlement(args?: RequestArgs): Promise<ApiResponse>;
     /** POST /store/modules/{key}/versions — rank: metic+archon */
     postStoreModulesKeyVersions(args?: RequestArgs): Promise<PostStoreModulesKeyVersionsResponse>;
+    /** GET /store/modules/{key}/versions/{version}/howto — rank: any-builder */
+    getStoreModulesKeyVersionsVersionHowto(args?: RequestArgs): Promise<GetStoreModulesKeyVersionsVersionHowtoResponse>;
     /** GET /store/modules/{key}/versions/{version}/tarball — rank: any-builder */
     getStoreModulesKeyVersionsVersionTarball(args?: RequestArgs): Promise<ApiResponse>;
   };

package/clients/bongos-client/index.mjs

@@ -1049,6 +1049,8 @@ export function createClient(opts = {}) {
       getStoreModulesKeyEntitlement: (args) => request("GET", "/store/modules/{key}/entitlement", { hasBody: false }, args),
       // POST /store/modules/{key}/versions — rank: metic+archon — POST /store/modules/:key/versions
       postStoreModulesKeyVersions: (args) => request("POST", "/store/modules/{key}/versions", { hasBody: true }, args),
+      // GET /store/modules/{key}/versions/{version}/howto — rank: any-builder — GET /store/modules/:key/versions/:version/howto
+      getStoreModulesKeyVersionsVersionHowto: (args) => request("GET", "/store/modules/{key}/versions/{version}/howto", { hasBody: false }, args),
       // GET /store/modules/{key}/versions/{version}/tarball — rank: any-builder — GET /store/modules/:key/versions/:version/tarball
       getStoreModulesKeyVersionsVersionTarball: (args) => request("GET", "/store/modules/{key}/versions/{version}/tarball", { hasBody: false }, args),
     },

package/docs/api/openapi.json

@@ -19385,6 +19385,67 @@
         ]
       }
     },
+    "/store/modules/{key}/versions/{version}/howto": {
+      "get": {
+        "operationId": "get_store_modules_key_versions_version_howto",
+        "tags": [
+          "store"
+        ],
+        "summary": "GET /store/modules/:key/versions/:version/howto",
+        "description": "GET /api/bongos/store/modules/:key/versions/:version/howto — the how-to a version shipped with (task 1004366, ADR 0347 D1/D3), read from that version's own stored tarball after the install hash check, so it always matches the version and cannot change after publishing. Returns the markdown as TEXT, never HTML: the hall's Modules tab renders it through its one escaping markdown reader (md-reader.js), because the file is author-written and must be treated as untrusted input. rank: any-builder — no entitlement needed, since a buyer reads the how-to before deciding. The one exception is a delisted module: ADR 0338 D2 keeps it readable only for the people who already hold it, so there the caller's own entitlement is checked (own-scoped, like the reads above).\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "src/bongos/routes/modules.js",
+        "parameters": [
+          {
+            "name": "key",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `key`."
+          },
+          {
+            "name": "version",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `version`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetStoreModulesKeyVersionsVersionHowtoResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/store/modules/{key}/versions/{version}/tarball": {
       "get": {
         "operationId": "get_store_modules_key_versions_version_tarball",
@@ -24102,6 +24163,27 @@
           "entitlements"
         ]
       },
+      "GetStoreModulesKeyVersionsVersionHowtoResponse": {
+        "type": "object",
+        "properties": {
+          "module_key": {},
+          "title": {},
+          "version": {},
+          "published_at": {},
+          "delisted": {},
+          "markdown": {},
+          "artifact_url": {}
+        },
+        "required": [
+          "module_key",
+          "title",
+          "version",
+          "published_at",
+          "delisted",
+          "markdown",
+          "artifact_url"
+        ]
+      },
       "GetTaskRecommendationsForMeResponse": {
         "type": "object",
         "properties": {
@@ -30051,9 +30133,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 470,
-  "x-schema-count": 502,
+  "x-endpoint-count": 471,
+  "x-schema-count": 503,
   "x-undocumented-bodies": 12,
-  "x-response-schemas": 338,
+  "x-response-schemas": 339,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 470 endpoints across 85 route files.
+> **Generated from the live route files** — the route file is authoritative. 471 endpoints across 85 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust-boundary-server-enforced-permissions.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -750,7 +750,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | GET | `/api/bongos/sso/pubkey` | `public` | — | GET /sso/pubkey — the hub's Ed25519 assertion-verification key (public). |
 | POST | `/api/bongos/sso/token` | `public` | `client_id`, `client_secret`, `code`, `redirect_uri` | POST /sso/token — server-to-server code redemption. |
 
-## `store` (6)
+## `store` (7)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -759,6 +759,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | POST | `/api/bongos/store/modules/:key/acquired` | `any-builder` | `version` |  |
 | GET | `/api/bongos/store/modules/:key/entitlement` | `any-builder` | — |  |
 | POST | `/api/bongos/store/modules/:key/versions` | `metic+archon` | _undocumented_ | POST /api/bongos/store/modules/:key/versions — publish one module version to the store (task 1004271, ADR 0338 D1). |
+| GET | `/api/bongos/store/modules/:key/versions/:version/howto` | `any-builder` | — | GET /api/bongos/store/modules/:key/versions/:version/howto — the how-to a version shipped with (task 1004366, ADR 0347 D1/D3), read from … |
 | GET | `/api/bongos/store/modules/:key/versions/:version/tarball` | `any-builder` | — |  |
 
 ## `task-recommendations` (4)