@bongos/core 1.20.80 → 1.20.81

package/docs/api/openapi.json

@@ -1728,6 +1728,65 @@
         "security": []
       }
     },
+    "/autonomy/builders/{builderId}/pause": {
+      "post": {
+        "operationId": "post_autonomy_builders_builderId_pause",
+        "tags": [
+          "autonomy"
+        ],
+        "summary": "POST /autonomy/builders/:builderId/pause",
+        "description": "The owner pauses or resumes ONE builder's runner without throwing the master switch. Same atom as the kill switch: stopping a machine is the same act whether it is everyone's or one person's, and the paused builder must not be able to lift it (autonomy.run does not reach this route).\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `autonomy.fence.manage` (all required).",
+        "x-rank": "archon",
+        "x-source": "modules/autonomy/routes/autonomy.js",
+        "x-permissions": [
+          "autonomy.fence.manage"
+        ],
+        "parameters": [
+          {
+            "name": "builderId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `builderId`."
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostAutonomyBuildersBuilderIdPauseRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/autonomy/fence": {
       "get": {
         "operationId": "get_autonomy_fence",
@@ -1735,7 +1794,7 @@
           "autonomy"
         ],
         "summary": "GET /autonomy/fence",
-        "description": "The runner's own read, every iteration. ANY-BUILDER on purpose: learning that you must stop should never require an elevated session, because the failure mode of \"could not read the fence\" is a machine that keeps going. The body carries no secret — it is a boolean, a reason string and a list of goal ids.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "description": "The runner's own read, every iteration. ANY-BUILDER on purpose: learning that you must stop should never require an elevated session, because the failure mode of \"could not read the fence\" is a machine that keeps going. The body carries no secret — it is a boolean, a reason string and a list of goal ids. THE CALLER'S fence, not the project's (task 1004501). The top-level `enabled` and `goals` are what THIS builder's runner may do: the project switch, then `autonomy.run`, then the owner's pause on this builder, and the allowlist narrowed to their own picks (fence.js effectiveFence). Computing it here keeps the runner dumb and means a runner that predates this change is narrowed too. The unnarrowed project fence rides along as `project` for the owner's page.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
         "x-source": "modules/autonomy/routes/autonomy.js",
         "responses": {
@@ -1996,6 +2055,58 @@
         ]
       }
     },
+    "/autonomy/me/goals": {
+      "put": {
+        "operationId": "put_autonomy_me_goals",
+        "tags": [
+          "autonomy"
+        ],
+        "summary": "PUT /autonomy/me/goals",
+        "description": "A builder picks which allowlisted goals THEIR runner works. Replaces the whole list; `[]` means \"my runner takes no work\". Keyed by the session, never the body, so nobody can set another builder's picks. Behind `autonomy.run`: a builder who may not run a runner has nothing to scope. A goal not on the project allowlist is refused with 409 and nothing is written — the pick can narrow the project fence and never widen it.\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `autonomy.run` (all required).",
+        "x-rank": "metic+archon",
+        "x-source": "modules/autonomy/routes/autonomy.js",
+        "x-permissions": [
+          "autonomy.run"
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PutAutonomyMeGoalsRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PutAutonomyMeGoalsResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/autonomy/precheck": {
       "get": {
         "operationId": "get_autonomy_precheck",
@@ -2068,6 +2179,47 @@
         ]
       }
     },
+    "/autonomy/runners/all": {
+      "get": {
+        "operationId": "get_autonomy_runners_all",
+        "tags": [
+          "autonomy"
+        ],
+        "summary": "GET /autonomy/runners/all",
+        "description": "The owner's view of every builder's runners: who, which goals they picked, whether they are paused, and each runner's health — the server's verdict, as GET /autonomy/runners attaches it. Owner-only: a heartbeat names a machine and its hostname, which is each builder's own business (task 1003905), and the owner is the one person who needs every row to run the fence.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `autonomy.fence.manage` (all required).",
+        "x-rank": "archon",
+        "x-source": "modules/autonomy/routes/autonomy.js",
+        "x-permissions": [
+          "autonomy.fence.manage"
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetAutonomyRunnersAllResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/autonomy/runs": {
       "get": {
         "operationId": "get_autonomy_runs",
@@ -23362,6 +23514,15 @@
           "admitted"
         ]
       },
+      "GetAutonomyRunnersAllResponse": {
+        "type": "object",
+        "properties": {
+          "builders": {}
+        },
+        "required": [
+          "builders"
+        ]
+      },
       "GetAutonomyRunnersResponse": {
         "type": "object",
         "properties": {
@@ -26391,6 +26552,22 @@
           "revoked"
         ]
       },
+      "PostAutonomyBuildersBuilderIdPauseRequest": {
+        "type": "object",
+        "properties": {
+          "paused": {
+            "type": "boolean"
+          },
+          "reason": {
+            "type": "string",
+            "maxLength": 500
+          }
+        },
+        "required": [
+          "paused"
+        ],
+        "additionalProperties": false
+      },
       "PostAutonomyFenceGoalsRequest": {
         "type": "object",
         "properties": {
@@ -31015,6 +31192,25 @@
           "criteria"
         ]
       },
+      "PutAutonomyMeGoalsRequest": {
+        "type": "object",
+        "properties": {
+          "goal_ids": {}
+        },
+        "required": [
+          "goal_ids"
+        ],
+        "additionalProperties": false
+      },
+      "PutAutonomyMeGoalsResponse": {
+        "type": "object",
+        "properties": {
+          "goals": {}
+        },
+        "required": [
+          "goals"
+        ]
+      },
       "PutCopyDeskPagesPageIdDraftRequest": {
         "type": "object",
         "properties": {
@@ -31351,9 +31547,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 490,
-  "x-schema-count": 520,
+  "x-endpoint-count": 493,
+  "x-schema-count": 524,
   "x-undocumented-bodies": 12,
-  "x-response-schemas": 347,
+  "x-response-schemas": 349,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 490 endpoints across 91 route files.
+> **Generated from the live route files** — the route file is authoritative. 493 endpoints across 91 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust-boundary-server-enforced-permissions.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -81,18 +81,21 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | GET | `/api/bongos/auth/web/handoff` | `public` | — | GET /auth/web/handoff?code=&return= — the far side of the one-time session handoff (task 1004357). |
 | GET | `/api/bongos/auth/web/start` | `public` | — | /auth/web — browser flow (used by the /builders page). |
 
-## `autonomy` (9)
+## `autonomy` (12)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
+| POST | `/api/bongos/autonomy/builders/:builderId/pause` | `archon` | `paused`, `reason` | The owner pauses or resumes ONE builder's runner without throwing the master switch. |
 | GET | `/api/bongos/autonomy/fence` | `any-builder` | — | The runner's own read, every iteration. |
 | POST | `/api/bongos/autonomy/fence` | `archon` | `enabled`, `reason` | The kill switch. |
 | POST | `/api/bongos/autonomy/fence/goals` | `archon` | `goal_id`, `note` | Add a goal to the allowlist. |
 | DELETE | `/api/bongos/autonomy/fence/goals/:goalId` | `archon` | — | Revoke one. |
 | POST | `/api/bongos/autonomy/fence/priority` | `archon` | `goal_id` | The priority goal (task 1004453): which allowlisted goal the runner works first. |
 | POST | `/api/bongos/autonomy/heartbeat` | `any-builder` | `host`, `pid`, `started_at`, `mode`, `consecutive_failures`, `last_event`, `working_task_id`, `working_goal_id`, `head`, `disk_head`, `main_head`, `claude_account` | The runner's check-in, once per loop. |
+| PUT | `/api/bongos/autonomy/me/goals` | `metic+archon` | `goal_ids` | A builder picks which allowlisted goals THEIR runner works. |
 | GET | `/api/bongos/autonomy/precheck` | `metic+archon` | — |  |
 | GET | `/api/bongos/autonomy/runners` | `any-builder` | — | What the hall renders: the CALLER'S OWN runners, with the pure verdict attached so the page and any future alert cannot disagree about wh… |
+| GET | `/api/bongos/autonomy/runners/all` | `archon` | — | The owner's view of every builder's runners: who, which goals they picked, whether they are paused, and each runner's health — the server… |
 | GET | `/api/bongos/autonomy/runs` | `metic+archon` | — | The gate's past decisions — did a routine fire, and what did it decide, and why (task 1002669). |
 
 ## `backup` (2)