@bongos/core 1.20.77 → 1.20.78

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.20.77",
-  "core_contract": "1.20.77",
-  "source_commit": "bde90782aff1f49366475c6cc3773f80685ced64",
+  "core_version": "1.20.78",
+  "core_contract": "1.20.78",
+  "source_commit": "54fe45a4edf4789308fc09a05904110b20b555ff",
   "source_ref": "HEAD",
-  "built_at": "2026-10-01T18:51:40.211Z",
+  "built_at": "2026-10-01T20:43:40.208Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
-    "docs_redacted": 574,
+    "docs_redacted": 575,
     "agent_docs_stubbed": 27,
-    "functional_verbatim": 2807,
+    "functional_verbatim": 2811,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 3409,
-  "tree_sha256": "e3714f0d808b87743619137f19a0a727276c3df7c25eaa06aa170e5a5aeffd74",
+  "file_count": 3414,
+  "tree_sha256": "f7d14f92e9dd084e4959190624762c8a22148f6700e48f0ef079e9988a92a5dc",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -317,12 +317,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "4bf36ecd7ca2902d45d201a77871242c61842f882ade087c4f71d96da14bac37"
+      "sha256": "63c9cef50cf602cac2c7b7cb24c878acd07d11d1c4354ef68d75987b9ecae150"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "daf38ceea63ecdc6656b3fa9f9abd061bcd102b8093c55b476cc96f01bb8a8ec"
+      "sha256": "bb9b35d76798248f6e711f5b95af076cac45b1cc373ca02733aad95d3990db27"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -332,17 +332,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "422e9c335817f0efe3b63309ae34a5b8d09989d01a22063e6c0dcdb96fb9d650"
+      "sha256": "89eda37c197dc32fea981b5f07bc6aaafffe67d902117ca212231dd13bef1913"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "1f8f7512aa121a86c11b39b9015257d9bbd0ab74ea68afd3bba783cd7c840177"
+      "sha256": "c71b82943cd6bd76f0740f6da9b44a212a3a4da3f7d7ccdc4d4c6d6e10d20802"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "3c9d7a8facab420b2b6eec54469b04d95ee9e37f9447f81c7700b356d408c11c"
+      "sha256": "2beca96b15c5ac7a97553c3bfd0757bf8c3ec449cc72db760cc8840f2ef68c54"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -1122,7 +1122,7 @@
     {
       "path": "docs/adr/0136-update-channel-subscription-policy.md",
       "mode": "0000644",
-      "sha256": "f6e68a4f7ce8de9e5cc98bb8b6fb875cb11f8679648fe64f005b90b3cbaad1ca"
+      "sha256": "0a34cc18b4c8d18a0f8960dd5fbc09399a58e5ac7cffb4a5c55fd46a65ebb36a"
     },
     {
       "path": "docs/adr/0137-upstream-publish-policy-manual-owner-gated.md",
@@ -2259,20 +2259,25 @@
       "mode": "0000644",
       "sha256": "b9861113cddb698710176c8533b07078b5b63e1995adbb3dafb537c1bc69186a"
     },
+    {
+      "path": "docs/adr/0360-bongos-follows-every-candidate-every-other-project-follows-releases.md",
+      "mode": "0000644",
+      "sha256": "f1f9153e7975f30d7a2e53f31c3bacb15a270affb9c1b119930aa0104e55c4e6"
+    },
     {
       "path": "docs/adr/README.md",
       "mode": "0000644",
-      "sha256": "f4523673c55a6528efa2589ecc997b0192e15318755f0008a82b6d49e5023eb0"
+      "sha256": "504490989f3f23ff00e970f7da9a6b046a7ba94b415c9114d83d660885750c0e"
     },
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "77dcae770dc22649b8ecfffc81e06e912053d4a471cb84f9c14cc33f1ccbc342"
+      "sha256": "c3b52f2ed9dce5b5bf72b8addc90293816837696ae06742e91e5d32ea69f5988"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "2306770ff4d240498043ace210b9476065674c0a953e09f1b1fdc7ccd72ce1cb"
+      "sha256": "94478baadf36dbd303c05548ed6d0a2ff20c1804848602aecfb148b506aa456d"
     },
     {
       "path": "docs/architecture.md",
@@ -2297,12 +2302,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "b699be21189b3df8ca0b3f3fb0588eb7b977de5805b3a6318f1752edf174f303"
+      "sha256": "eebd6b6b3bb1e63d83d4dc322a62d58636c38e07a33f6142078308c54570d432"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "284cca046d9dd6090d87dca26c9f0d293294914ecd435b3e4ae183caa7c0dd26"
+      "sha256": "64f86ed48766b1037311ce998f315d155f0afa9d4c7e698d436b9359091f32d0"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2807,7 +2812,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "0184b420c2b76fb07237381a40494ba34a2ed9d182a7b8906086091b50e743fd"
+      "sha256": "2b7d697f9a5870c16de63e84268ee995f0c1ef7aedc825cf1d7610559744677d"
     },
     {
       "path": "docs/modules-contract.md",
@@ -2892,12 +2897,12 @@
     {
       "path": "docs/page-inventory.json",
       "mode": "0000644",
-      "sha256": "9857486b6ab8f912c966419307bfb99a4172c83c37a2a4384637a9ff8d6b7acb"
+      "sha256": "203a101e6aeb3aefdc417b5afccc795e48bde64c2c8f539580719659b4ad019a"
     },
     {
       "path": "docs/page-readings.json",
       "mode": "0000644",
-      "sha256": "f4b35b508756e6f06539e84d6323c258b14465215e3d837b6c343f74f05d4a50"
+      "sha256": "e4c9820bdc85fbceed58754f3c92a27743a2016e884e42862b88ddc06a6000b2"
     },
     {
       "path": "docs/project-context.template.md",
@@ -3062,7 +3067,7 @@
     {
       "path": "docs/recipes/upgrading-the-core.md",
       "mode": "0000644",
-      "sha256": "d480c1cae6b31e4cc13e662468ca421cc7a57a2be435bba083796dba56b64bc8"
+      "sha256": "d28d1f034a7a87164b780c7320ef36809a024bdd29e1e31a1b9e8e17bb911f49"
     },
     {
       "path": "docs/recipes/windows-builders.md",
@@ -4237,7 +4242,7 @@
     {
       "path": "modules/copy-desk/artist-stats.js",
       "mode": "0000644",
-      "sha256": "d1b8113341aa855a00ded9c59d916ed944c4ea92ef68150f492c21e7cc355082"
+      "sha256": "143357cbcb2a7069c8bde90d428c5cd28b2fc3791f6fb2b41aa5d0bd4b3b82a1"
     },
     {
       "path": "modules/copy-desk/docx.js",
@@ -4262,7 +4267,7 @@
     {
       "path": "modules/copy-desk/module.json",
       "mode": "0000644",
-      "sha256": "418298167fa848e1e6f0a339d27922d6008daf5769b1534522a51a7f88b3f9c6"
+      "sha256": "ffd3793721990c8b733c5855454caacc9b15402c6fa93f1ec009cc740f26624a"
     },
     {
       "path": "modules/copy-desk/page-data.js",
@@ -4277,7 +4282,7 @@
     {
       "path": "modules/copy-desk/page-status.js",
       "mode": "0000644",
-      "sha256": "b83e22529e561fad1e8e63632ef6ffd2642d861c3c0277f14c4286d07f6abbdb"
+      "sha256": "b31f8c94a4768bb690dd2e983b404c8bf022c33c343ee0d15747953359df9d36"
     },
     {
       "path": "modules/copy-desk/pages.js",
@@ -4294,6 +4299,11 @@
       "mode": "0000644",
       "sha256": "d1de5f38dfddae014878adb57021c18266b17884f8c35e798b7f5eea28853ef1"
     },
+    {
+      "path": "modules/copy-desk/routes/copy-desk-artist.js",
+      "mode": "0000644",
+      "sha256": "3cdf349d0906ed3ec398b2f52c1c6b94d950fa39eb2e734237dc265d214ba977"
+    },
     {
       "path": "modules/copy-desk/routes/copy-desk.js",
       "mode": "0000644",
@@ -4317,7 +4327,7 @@
     {
       "path": "modules/copy-desk/tests/copy_no_cms.mjs",
       "mode": "0000644",
-      "sha256": "d5d01b650a04a01eabfb45cfbb8065616031482354652cbef2126f250854a6aa"
+      "sha256": "f8a0eafb8b8a5d8eb2e62d8c25cfc102748fec1ad93a74106409f9bb988dadef"
     },
     {
       "path": "modules/copy-desk/tests/copy_page_draft.mjs",
@@ -5357,7 +5367,7 @@
     {
       "path": "modules/hall-ui/public/deploy.states.json",
       "mode": "0000644",
-      "sha256": "b8818dd51e671769cb84a85d288674571f278a6b6736353288d206156f4fd4c3"
+      "sha256": "c4e86674b894372cd5cb3d818686c3fb90f95751425f250e29b51880ee822a31"
     },
     {
       "path": "modules/hall-ui/public/diagram-viewer.css",
@@ -5759,6 +5769,11 @@
       "mode": "0000644",
       "sha256": "32d227e81b459e067b06ac67c89a53ce0aa6b549749c39ac3adc4e8fb31a9375"
     },
+    {
+      "path": "modules/hall-ui/public/profile-crafts.js",
+      "mode": "0000644",
+      "sha256": "73873641d7a17516f7a8c0c4b1014427db270b219aaa939bdfc17ad2c8a4557b"
+    },
     {
       "path": "modules/hall-ui/public/profile-nudge.js",
       "mode": "0000644",
@@ -5772,22 +5787,22 @@
     {
       "path": "modules/hall-ui/public/profile.css",
       "mode": "0000644",
-      "sha256": "5489cb918f74216e2f5c320bb14cc7390dbb843d8fd382b1ac518434c5f15622"
+      "sha256": "2c320b6a22f7a047f33bb523032da3b671375cb5910df576cff30e70196539ce"
     },
     {
       "path": "modules/hall-ui/public/profile.html",
       "mode": "0000644",
-      "sha256": "6683cf6a41e3569261ff4fd48f39d8fc37f08485e1f07be2e074881da120959d"
+      "sha256": "7ba05777390fa39ed9a19a531668147adb6fa421efeaad36a95926ea46c11062"
     },
     {
       "path": "modules/hall-ui/public/profile.js",
       "mode": "0000644",
-      "sha256": "cecc17d5e89e864be43c15000b34492cb047f14bb701b3f7cb8807b23357fec4"
+      "sha256": "ba8fd7c2df7f46c9fd491c6666a159128b57b894bc09d74e3748c0c3185924a7"
     },
     {
       "path": "modules/hall-ui/public/profile.states.json",
       "mode": "0000644",
-      "sha256": "8da53f3321a0a25b104a2dbeccebbc6d94675071e89431f3f9f83d1741835a6c"
+      "sha256": "82e6a2d240b504c667637254eb25ec14d7afe2d9e5137f4520d6c1b310be17a7"
     },
     {
       "path": "modules/hall-ui/public/project-settings.css",
@@ -5967,12 +5982,12 @@
     {
       "path": "modules/hall-ui/public/sky-draw.js",
       "mode": "0000644",
-      "sha256": "e08a81b99647bbd5af6fbac07001b4d8c7d9002e0a4bfb3e283f49aadf051900"
+      "sha256": "25d4298946c63bab18e6d79041353a8ab794b5652d0ea25b492d84a87367c090"
     },
     {
       "path": "modules/hall-ui/public/sky-interaction.js",
       "mode": "0000644",
-      "sha256": "3cd610d9484f516b207403a1a5af9c0ba1ced9f01fbf3ef5dedc87c60f2dd613"
+      "sha256": "0961b151661f3dd2263b5b34989e9698b2f5dbe379b9f74512686774dfb38d4e"
     },
     {
       "path": "modules/hall-ui/public/sky-layout.js",
@@ -5982,7 +5997,7 @@
     {
       "path": "modules/hall-ui/public/sky-panel.js",
       "mode": "0000644",
-      "sha256": "81fdb9c654b3a1aa51b166c7c8cacf11ebe9e5ec7fde83c06d743d5d273b7cdd"
+      "sha256": "257ec3fa3c0010d93ccddcb29e2ff0f635e566cd79a978307adfc89169ecaafe"
     },
     {
       "path": "modules/hall-ui/public/sky-tour.js",
@@ -6057,7 +6072,7 @@
     {
       "path": "modules/hall-ui/public/thinking.css",
       "mode": "0000644",
-      "sha256": "e4bf7b8ada85269c2606fdabffcda7eda2c99dbbbdb7dcf1066f27bc534b26e6"
+      "sha256": "5d71450a1f566924d18d283d284b4a3f149fd742fb925d2bd310c82d38a5ac89"
     },
     {
       "path": "modules/hall-ui/public/thinking.html",
@@ -6212,7 +6227,7 @@
     {
       "path": "modules/hall-ui/records/profile-roles.md",
       "mode": "0000644",
-      "sha256": "95e79f2a252081ee12acd0faa093460ffe38e0269526693f62d63d632224a635"
+      "sha256": "0fb34cced8e81add68b5204108f07a912d12072d5036a28632c4feddcbfb9a97"
     },
     {
       "path": "modules/hall-ui/records/reading-rooms.md",
@@ -7202,7 +7217,7 @@
     {
       "path": "modules/npm-release/public/work.js",
       "mode": "0000644",
-      "sha256": "7e24e12c9615e6310227a12620dc320777bcef82710d1cad68a0546e66c783c6"
+      "sha256": "73b94334328ea385ddb06090d1a2363b0878ca7be48072ea1361ae279022177e"
     },
     {
       "path": "modules/npm-release/routes/preview.js",
@@ -7222,7 +7237,7 @@
     {
       "path": "modules/npm-release/work.js",
       "mode": "0000644",
-      "sha256": "fc5b52e97baf435dcc090104258209a48aa34e417835754df0a4b17cd73f6605"
+      "sha256": "5c38191935584b8a500b432ea913b4429a72a6c03277a1ff3e8fee4b5ab0a7f6"
     },
     {
       "path": "modules/onboarding/CLAUDE.md",
@@ -9477,12 +9492,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "cebf414b94f8d09aa2fd86cde7e76932b06970f34fecd921cd79fa501465e1f7"
+      "sha256": "f8da6c11ec17d4c4a83d5e070d3ae0c941376a527b4a9a0be7ce1903d7beb482"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "7415d73348289a84557896760219ae769d9e7492628a0073e8aacd26d02867eb"
+      "sha256": "8dfe3adc1e608279f3ffee6a8cdfd3c7c32b7581395ea81bb000dc370afe0035"
     },
     {
       "path": "public-docs/index.html",
@@ -9502,7 +9517,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "3b66092aae603bd505c37a175d96b99de4febc4f1b60dc533226a79c977e4242"
+      "sha256": "e70c626913df104cf096a75eb4b06ff9cabcddda470e063839a4fffd26e78407"
     },
     {
       "path": "scripts/bongos-mcp.js",
@@ -11157,12 +11172,12 @@
     {
       "path": "scripts/gds/update-channel.js",
       "mode": "0000644",
-      "sha256": "41f23f17789e9d02ff4885b9fb74e24f6b903fb1b9ff89a54e822306806096f0"
+      "sha256": "0168e8482e02d74ef59aa53f4874be6ec41e91747651a99009b56b764137bf0c"
     },
     {
       "path": "scripts/gds/update-sweep.js",
       "mode": "0000644",
-      "sha256": "bd9513492975cd50a8e6ad45d387afba91efa78c94f3ad251ddc3bbca69aff23"
+      "sha256": "fe1a6c8c27a40fc522e18946e6ee317604718d18dd8940f974f9e0df1fe92d87"
     },
     {
       "path": "scripts/gds/upgrade-artist-gate.js",
@@ -11257,7 +11272,7 @@
     {
       "path": "scripts/migrate.sh",
       "mode": "0000644",
-      "sha256": "1ba289b008ef4118cfd464ab5eb24ad4b694981942680220f115913691645e08"
+      "sha256": "132e6780d6408ee7ff9d89ac2545aff53fe3c22222d85ad144243646ed495810"
     },
     {
       "path": "scripts/migrate_cost_ledger.sh",
@@ -11697,7 +11712,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "6cdb228a25ce0a0e122c01f3f96c1432f3c90cae69fe25b8bd42f271d51c473e"
+      "sha256": "f11189e9084e5a2b10a2767bfa8166a419fbd202e90252a628a1fc426f7102f9"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -13992,7 +14007,7 @@
     {
       "path": "tests/hall_sky.mjs",
       "mode": "0000644",
-      "sha256": "231d3bb472773495765f2c4a5673727fb5a117622639ac89b518fc9da8000d36"
+      "sha256": "7da2efcf097e1643390a419ac239085724c5f9e127e417c184a2ba20db60961f"
     },
     {
       "path": "tests/hall_states_regex_escapes.mjs",
@@ -14037,7 +14052,7 @@
     {
       "path": "tests/helpers.mjs",
       "mode": "0000644",
-      "sha256": "a9b030d0f3e49f552fa4eb41adf1f6a7c60179c1200c4a723fbaac703f297c5d"
+      "sha256": "8bb8af16fceb108868c6600fd7cb29ee576d13aaedc48e21941b1d75c85cdac9"
     },
     {
       "path": "tests/hierarchy-config.mjs",
@@ -14674,6 +14689,11 @@
       "mode": "0000644",
       "sha256": "a1179788640c3959e21573817e386eece65067ecbe9bda6cd350e16118ac61f1"
     },
+    {
+      "path": "tests/migrate_applied_check.mjs",
+      "mode": "0000644",
+      "sha256": "9a402a5dd952eb8138514206dbe89ea5edcd098b4988ee40a77c0a47b801abf1"
+    },
     {
       "path": "tests/migrate_module_overrides_db.mjs",
       "mode": "0000644",
@@ -14947,7 +14967,7 @@
     {
       "path": "tests/npm_release_page.mjs",
       "mode": "0000644",
-      "sha256": "a6ace0029ba02051b4f8cda015f825b990c62b19754e43ce45c66e03dac35d01"
+      "sha256": "d23af719d635fc2b1cced8d865f6f4613690d9d6f194668224eecacbaef24557"
     },
     {
       "path": "tests/npm_release_preview_commands.mjs",
@@ -14992,7 +15012,7 @@
     {
       "path": "tests/npm_release_work.mjs",
       "mode": "0000644",
-      "sha256": "0db2da910974dbc302b6d5744d3ed3def05b5d57176d515bfaf4ef511faa186d"
+      "sha256": "6ff350a81dba9d4650a6bc98b424b2e49cdb612124d80d7deca9c6819ea79214"
     },
     {
       "path": "tests/oauth_secret.mjs",
@@ -15227,7 +15247,7 @@
     {
       "path": "tests/profile_activity.mjs",
       "mode": "0000644",
-      "sha256": "483d249339dd696809a4d9ac53aa10d7b67a35ce064884ef5590cc7249418047"
+      "sha256": "c8f6337d6b00cf94e2e1f630d26604c3cb93b39e5ed0e277735ec4c72d81bab3"
     },
     {
       "path": "tests/profile_connections_ui.mjs",
@@ -15257,13 +15277,18 @@
     {
       "path": "tests/profile_role_headline.mjs",
       "mode": "0000644",
-      "sha256": "8e2ee205bb812c0d7b8ca5c23f61e7288e2a5fd7ebd19ae8c72c3d5a30f4790c"
+      "sha256": "ff162455701c3ca8a64d679af885a6896811d833e2cde09f9c2b0c3f376dc1ce"
     },
     {
       "path": "tests/profile_role_stats.mjs",
       "mode": "0000644",
       "sha256": "f19d360e648c15576818313f80ea3079b933ccfc1f4ecb710198d993f2fa4054"
     },
+    {
+      "path": "tests/profile_role_tabs.mjs",
+      "mode": "0000644",
+      "sha256": "66b504bccb453e07c0cb0b13d89f313bab4f11aa8f8f61130f21cebe7fc0b582"
+    },
     {
       "path": "tests/profile_rollup_consent.mjs",
       "mode": "0000644",
@@ -16837,7 +16862,7 @@
     {
       "path": "tests/update_channel.mjs",
       "mode": "0000644",
-      "sha256": "f20327544858053dbc1a27a7e1c3dbc40320f4414f057ba6d08647de949b0c10"
+      "sha256": "2ceed0b397697a39ee2ee46f5fed7a0e659d1f18364369d510d6b64704d99f59"
     },
     {
       "path": "tests/update_channel_db.mjs",
@@ -16847,7 +16872,7 @@
     {
       "path": "tests/update_subscription_engine.mjs",
       "mode": "0000644",
-      "sha256": "6e0f160998cf026c02df6f82492ea430300ce7142b42dde3fd200c20164ddf1b"
+      "sha256": "c5dfd770869bf48e1087b1816448c45e0ede0a8b679d64c86a317391a1026a1a"
     },
     {
       "path": "tests/update_sweep_home.mjs",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 488 operations across 73 resource groups
+- 489 operations across 73 resource groups
 
 ## Use it from your project
 

package/clients/bongos-client/bongos-client.global.js

@@ -289,6 +289,8 @@ function createClient(opts = {}) {
     "copyDesk": {
       // GET /copy-desk/approvals — rank: any-builder — GET /copy-desk/approvals
       getCopyDeskApprovals: (args) => request("GET", "/copy-desk/approvals", { hasBody: false }, args),
+      // GET /copy-desk/artists/{id}/pages — rank: any-builder — GET /copy-desk/artists/:id/pages
+      getCopyDeskArtistsIdPages: (args) => request("GET", "/copy-desk/artists/{id}/pages", { hasBody: false }, args),
       // POST /copy-desk/flags — rank: any-builder — POST /copy-desk/flags
       postCopyDeskFlags: (args) => request("POST", "/copy-desk/flags", { hasBody: true }, args),
       // POST /copy-desk/flags/{id}/close — rank: any-builder — POST /copy-desk/flags/:id/close

package/clients/bongos-client/index.cjs

@@ -288,6 +288,8 @@ function createClient(opts = {}) {
     "copyDesk": {
       // GET /copy-desk/approvals — rank: any-builder — GET /copy-desk/approvals
       getCopyDeskApprovals: (args) => request("GET", "/copy-desk/approvals", { hasBody: false }, args),
+      // GET /copy-desk/artists/{id}/pages — rank: any-builder — GET /copy-desk/artists/:id/pages
+      getCopyDeskArtistsIdPages: (args) => request("GET", "/copy-desk/artists/{id}/pages", { hasBody: false }, args),
       // POST /copy-desk/flags — rank: any-builder — POST /copy-desk/flags
       postCopyDeskFlags: (args) => request("POST", "/copy-desk/flags", { hasBody: true }, args),
       // POST /copy-desk/flags/{id}/close — rank: any-builder — POST /copy-desk/flags/:id/close

package/clients/bongos-client/index.d.ts

@@ -56,6 +56,7 @@ export interface GetConnectionsDegreeHandleResponse { handle: unknown; degree: u
 export interface GetConnectionsRequestsResponse { incoming: unknown; outgoing: unknown; incoming_count: unknown; outgoing_count: unknown }
 export interface GetConnectionsResponse { connections: unknown; count: unknown }
 export interface GetConnectionsSuggestionsResponse { suggestions: unknown; count: unknown }
+export interface GetCopyDeskArtistsIdPagesResponse { rows: unknown; total: unknown; inventory_known: unknown; page: unknown }
 export interface GetCoreUpdateResponse { ok: boolean; update: unknown }
 export interface GetCoreUpgradesResponse { ok: boolean; running: unknown; limit: unknown; upgrades: unknown }
 export interface GetDiscordChannelsPlanResponse { ok: boolean; guild_id: unknown; op_count: unknown; ops: unknown; warnings: unknown }
@@ -740,6 +741,8 @@ export interface BongosClient {
   "copyDesk": {
     /** GET /copy-desk/approvals — rank: any-builder */
     getCopyDeskApprovals(args?: RequestArgs): Promise<ApiResponse>;
+    /** GET /copy-desk/artists/{id}/pages — rank: any-builder */
+    getCopyDeskArtistsIdPages(args?: RequestArgs): Promise<GetCopyDeskArtistsIdPagesResponse>;
     /** POST /copy-desk/flags — rank: any-builder */
     postCopyDeskFlags(args: RequestArgs & { body: PostCopyDeskFlagsRequest }): Promise<PostCopyDeskFlagsResponse>;
     /** POST /copy-desk/flags/{id}/close — rank: any-builder */

package/clients/bongos-client/index.mjs

@@ -285,6 +285,8 @@ export function createClient(opts = {}) {
     "copyDesk": {
       // GET /copy-desk/approvals — rank: any-builder — GET /copy-desk/approvals
       getCopyDeskApprovals: (args) => request("GET", "/copy-desk/approvals", { hasBody: false }, args),
+      // GET /copy-desk/artists/{id}/pages — rank: any-builder — GET /copy-desk/artists/:id/pages
+      getCopyDeskArtistsIdPages: (args) => request("GET", "/copy-desk/artists/{id}/pages", { hasBody: false }, args),
       // POST /copy-desk/flags — rank: any-builder — POST /copy-desk/flags
       postCopyDeskFlags: (args) => request("POST", "/copy-desk/flags", { hasBody: true }, args),
       // POST /copy-desk/flags/{id}/close — rank: any-builder — POST /copy-desk/flags/:id/close

package/docs/adr/0136-update-channel-subscription-policy.md

@@ -1,7 +1,7 @@
 # ADR 0136 — Update-channel subscription policy (patch-only, health-gated, opt-in, autonomy-gated)
 
 **Date:** 2026-07-10
-**Status:** Accepted. Amended by [ADR 0357](0357-the-update-rule-set-on-deploy-is-the-one-the-sweep-follows.md) (2026-09-30): a project's channel is now its `provisioning_instances.update_channel`, set on /deploy; the roster's `channel` is only the fallback.
+**Status:** Accepted. Amended by [ADR 0357](0357-the-update-rule-set-on-deploy-is-the-one-the-sweep-follows.md) (2026-09-30): a project's channel is now its `provisioning_instances.update_channel`, set on /deploy; the roster's `channel` is only the fallback. Also amended by **[ADR 0360](0360-bongos-follows-every-candidate-every-other-project-follows-releases.md)** (task 1004297): a per-instance `follow` (`released` by default, `candidates` for the platform's own hall) beside the channel, and a one-day hold on a version that failed on an instance.
 **Context:** [task 2150](https://example.com/builders#/task/2150) (BONGOS-V1, goal 26). The last piece of the update-consumption workstream: [ADR 0100](0100-two-repo-instance-model.md) §2 / [task 1690](https://example.com/builders#/task/1690) gave a consumer the manual `bongos upgrade` channel; [ADR 0134](0134-private-first-npm-distribution.md) / [task 2090](https://example.com/builders#/task/2090) added the private-registry source; [task 2149](https://example.com/builders#/task/2149) added auto-rollback; [task 2157](https://example.com/builders#/task/2157) proved rollback live on the demo instance. What was missing is the **subscription** — how a consumer instance takes new releases *on a cadence, unattended*, rather than a human running `bongos upgrade` each time. Builds on the scheduled-routines portability contract ([ADR 0115](0115-scheduled-routines-portability.md)).
 
 ## Problem

package/docs/adr/0360-bongos-follows-every-candidate-every-other-project-follows-releases.md

@@ -0,0 +1,66 @@
+# ADR 0360 — Bongos follows every candidate; every other project follows releases
+
+- **Status:** Accepted
+- **Date:** 2026-09-26
+- **Task:** [task 1004297](https://cloudbongos.com/builders#/task/1004297) (goal 1000090 — BONGOS-V2), split out of [task 1002622](https://cloudbongos.com/builders#/task/1002622) §4.
+- **Deciders:** the owner, Lars. His decision, confirmed 2026-09-26: "Bongos takes every candidate automatically."
+- **Amends:** [ADR 0136](0136-update-channel-subscription-policy.md) (the update-channel subscription policy). It adds a second axis and a retry hold. The channels, the opt-in roster, autonomy-gating and auto-rollback are unchanged.
+
+## Context
+
+Other projects will soon receive only the versions the owner presses Release on (task 1004298). Bongos must not wait on that button: it is the project every change is built in, and running each version first is what gives Release its evidence.
+
+Today the machinery exists but is slow. The update sweep upgraded cloudbongos.com from 1.19.1030 to 1.19.1033 at 00:22 UTC on 2026-09-26, and nothing else moved it that day. Its timer on the control plane still fires daily, although task 1003674 declared a 15-minute cadence; installing that is [task 1003969](https://cloudbongos.com/builders#/task/1003969), an operator step on the host.
+
+The site served 1.19.1033 all afternoon while 1.19.1034–1.19.1039 were published. The deploy page listed that work as "published, not running here" and did not say that the sweep was the reason.
+
+## Decision
+
+### D1 — A per-instance FOLLOW beside the channel
+
+`config/update-subscriptions.json` entries carry `follow`:
+
+- **`released`**, the default for every project. It takes only versions at or below the registry's `latest` label, which is what the owner has released to other projects.
+- **`candidates`**, for the platform's own hall only. It takes every version as soon as it is published.
+
+The channel still bounds how far a jump may go (patch, minor, never a major). The follow bounds which versions exist to jump to. An unknown value reads as `released`, the follow that takes fewer versions, the same way an unknown channel reads as `patch`.
+
+### D2 — Released means the `latest` label, and an unreadable label moves nobody
+
+`readReleaseTags` reads `npm view @bongos/core dist-tags`. It is a separate read, because `listAvailableVersions`' output shape is relied on by the deploy door and by `bongos upgrade`. An instance that follows releases and whose label cannot be read is **skipped** and logged. It is never upgraded on a guess.
+
+Until task 1004298 publishes candidates under a label of their own, `latest` is the newest version and both follows pick the same target. The axis lands first so that the split changes nothing for Bongos.
+
+### D3 — Cadence is the lag
+
+The sweep's timer period is the delay between a merge and Bongos serving it; CI publishes within about two minutes. The declared cadence is 15 minutes, with a floor of about 5 minutes (ADR 0136, task 1003674). Nothing in the core can install a host timer, so the declaration and the recipe are the core's half. Task 1003969 installs it on the control plane.
+
+### D4 — A version that failed here is held for a day
+
+At a daily cadence a version that failed its health check was retried once a day. At 15 minutes the same version would be installed, fail, restart the service and roll back four times an hour until something newer was published. So when an upgrade fails and the version did not go in, the sweep records it for that instance in its own config home (`~/.config/<instance>/core-update-refused.json`, never inside an instance's tree, where it would wedge the lane).
+
+For a day the sweep skips that version and says so. Any newer version is taken at once, because it is the fix. The hold expires, so a transient failure is retried rather than refused forever.
+
+### D5 — The deploy page says whether it is happening
+
+The npm-release section of the platform hall's `/deploy` gains **Upgrades on this hall**, read from the `core_upgrades` ledger, newest first:
+
+- **Who moved it.** An Upgrade pressed on `/deploy`, the automatic update, or "on the server" when the ledger cannot tell a sweep from a shell.
+- **Rolled-back moves**, flagged with their reason. A rollback as the last move is a warning.
+- **A published version waiting more than 30 minutes**, twice the declared cadence. The page calls it "the automatic update may have stopped", which is what the afternoon of 2026-09-26 was.
+
+## Rejected
+
+- **A second, candidate-only runner.** One sweep over one roster, with the difference expressed as data on the entry, keeps one code path and one set of safety rules.
+- **CI pushing the upgrade to the box.** It would move the act across the trust boundary ADR 0293 D1 keeps on the control plane.
+- **Holding a failed version until a human clears it.** That trades an outage generator for a silently frozen lane. The day-long hold plus "a newer version is taken at once" covers the real case, where the fix is the next merge.
+
+## Consequences
+
+- **Owner or operator step before task 1004298 ships:** set the platform's roster entry to `"follow": "candidates"`. Otherwise, the day candidates stop carrying `latest`, the platform stops taking them.
+- **Operator step (task 1003969):** install the timer at `OnCalendar=*:0/15`. Until then the lane still runs once a day, and the deploy page will say so.
+- **The platform restarts on each new version**, roughly one every merge, with the existing health check and auto-rollback as the net.
+- **Proof:**
+  - `tests/update_channel.mjs`: follow normalisation, `versionsForFollow`, `readReleaseTags`, the roster field, and composition with the channel.
+  - `tests/update_subscription_engine.mjs`: `followTarget` over the real channel math, the fail-closed skip, the old-core fallback, and the hold (skip, expiry, a newer version still taken, the record kept outside the instance tree).
+  - `tests/npm_release_work.mjs` and `tests/npm_release_page.mjs`: the ledger reading, the rollback, the waiting alarm, and their rendering.

package/docs/adr/README.md

@@ -478,3 +478,4 @@ These 20 numbers are each shared by exactly two files. They are **accepted histo
 | 0357 | [**The update rule set on /deploy is the one the sweep follows** ([task 1004468](https://cloudbongos.com/builders#/task/1004468), goal 1000090 — BONGOS-V2, owner's ruling 2026-09-30). Amends [ADR 0136](0136-update-channel-subscription-policy.md)'s rejected DB-column alternative. **D1:** for a roster entry whose slug matches a `provisioning_instances` row, the unattended sweep uses that row's `update_channel` (set on /deploy, task 1004445). **D2:** the roster's `channel` is only the fallback — no matching row, or the database unreadable; enrollment and topology stay in the roster. **D3:** the sweep logs each entry's channel and its source, naming an overridden roster value. **D4:** read over psql from the sweep's own `DATABASE_URL`/`PGDATABASE`, never an entry's `env`. **D5:** nothing is copied; a row never changed is `patch`. Delivery to cloudbongos.com waits on the frozen sweep checkout (task 1004307). Rejected: roster stays in charge; stricter-of-the-two; copying roster values into rows.](0357-the-update-rule-set-on-deploy-is-the-one-the-sweep-follows.md) | distribution / updates |
 | 0358 | [**A hall wears a look, and its night takes a tint of it** ([task 1004421](https://cloudbongos.com/builders#/task/1004421), goal 1000121 — BV2.PS06; owner D2 + D8, 2026-09-30). Amends [ADR 0219](0219-a-look-is-a-branding-pack-the-style-library.md) (a look could not carry a dark ground) and DESIGN.md's pure-black rule, for halls only. **D1:** the night tint is a formula over the thirteen — the four dark grounds take 5–6% of the look's accent (src/night-tint.js), emitted after the sheet as both dark twins; no token added. **D2:** on by default, and only a chosen look turns it on — a hall with no look is unchanged. **D3:** the apex and hub stay pure black (ADR 0204). **D4:** a custom look is ONE accent for both modes, its lightness nudged until every pair the hall paints with it reads (lookAdjustAccent, client copy test-pinned). **D5:** look + night_tint join the provisioning settings vocabulary; the accent and logo address ride as companion env; the instance resolves the look from the style library. **D6:** a logo is PNG/JPEG/WebP ≤256 KB, magic-sniffed, never SVG, served content-addressed; it is the hall mark and the favicon. Rejected: per-look dark palettes, two custom accents, refusing an unreadable accent, sending the palette over env.](0358-a-hall-wears-a-look-and-its-night-takes-a-tint.md) | hall / branding / design world |
 | 0359 | [**Nobody sets a module's score by hand; a Metic+ person can ask for a re-check** ([task 1003796](https://cloudbongos.com/builders#/task/1003796) · goal 1000091, criterion `wa5-quality-assessed`). Amends [ADR 0343](0343-a-module-score-is-a-security-gate-then-an-average-of-visible-parts.md) D6 and [ADR 0347](0347-every-store-module-ships-a-how-to.md) D5 on the owner's ruling: there is no score override. A score only ever comes from its signals. Instead `POST /store/modules/:key/versions/:version/reassess { reason }`, gated by the new `module.assessment.rerun` atom (metic floor, granted to metic + archon by `government_021`), queues the same assessment a publish runs. A reason is required and nothing else is accepted. The delist (task 1003797) is unchanged.](0359-nobody-sets-a-module-score-by-hand-metic-can-ask-for-a-re-check.md) | module store / assessment / permissions |
+| 0360 | [**Bongos follows every candidate; every other project follows releases** ([task 1004297](https://cloudbongos.com/builders#/task/1004297), goal 1000090 — the owner's 2026-09-26 decision that the Bongos hall takes every candidate automatically). Amends ADR 0136. **D1:** a per-instance `follow` beside the channel — `released` (default: at or below the registry's `latest` label) or `candidates` (every version, the platform hall only). **D2:** released is the `latest` dist-tag, read separately; an unreadable label skips the instance, never a guess. **D3:** the timer period is the lag — 15 min declared, installed by task 1003969. **D4:** a version that failed here is held for a day per instance (recorded in the sweep's config home), while any newer version is taken at once — no restart loop at a 15-minute cadence. **D5:** the deploy page's "Upgrades on this hall" — the core_upgrades ledger, rollbacks flagged, and a published version waiting past 30 min said to be the automation stopping. Rejected: a second runner, CI pushing to the box, a hold only a human clears.](0360-bongos-follows-every-candidate-every-other-project-follows-releases.md) | update channel / deploy / core update |