@bongos/core 1.20.83 → 1.21.1

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 494 operations across 73 resource groups
+- 496 operations across 73 resource groups
 
 ## Use it from your project
 

package/clients/bongos-client/bongos-client.global.js

@@ -1013,6 +1013,10 @@ function createClient(opts = {}) {
       postSessions: (args) => request("POST", "/sessions", { hasBody: true }, args),
       // GET /sessions/{id} — rank: any-builder — GET /sessions/:id
       getSessionsId: (args) => request("GET", "/sessions/{id}", { hasBody: false }, args),
+      // GET /sessions/{id}/transcript — rank: any-builder — GET /sessions/:id/transcript
+      getSessionsIdTranscript: (args) => request("GET", "/sessions/{id}/transcript", { hasBody: false }, args),
+      // PUT /sessions/{sid}/transcript — rank: any-builder — PUT /sessions/:sid/transcript
+      putSessionsSidTranscript: (args) => request("PUT", "/sessions/{sid}/transcript", { hasBody: true }, args),
       // GET /sessions/mine — rank: any-builder — GET /sessions/mine
       getSessionsMine: (args) => request("GET", "/sessions/mine", { hasBody: false }, args),
       // GET /sessions/search — rank: metic+archon — GET /sessions/search

package/clients/bongos-client/index.cjs

@@ -1012,6 +1012,10 @@ function createClient(opts = {}) {
       postSessions: (args) => request("POST", "/sessions", { hasBody: true }, args),
       // GET /sessions/{id} — rank: any-builder — GET /sessions/:id
       getSessionsId: (args) => request("GET", "/sessions/{id}", { hasBody: false }, args),
+      // GET /sessions/{id}/transcript — rank: any-builder — GET /sessions/:id/transcript
+      getSessionsIdTranscript: (args) => request("GET", "/sessions/{id}/transcript", { hasBody: false }, args),
+      // PUT /sessions/{sid}/transcript — rank: any-builder — PUT /sessions/:sid/transcript
+      putSessionsSidTranscript: (args) => request("PUT", "/sessions/{sid}/transcript", { hasBody: true }, args),
       // GET /sessions/mine — rank: any-builder — GET /sessions/mine
       getSessionsMine: (args) => request("GET", "/sessions/mine", { hasBody: false }, args),
       // GET /sessions/search — rank: metic+archon — GET /sessions/search

package/clients/bongos-client/index.d.ts

@@ -157,6 +157,7 @@ export interface GetSecurityDocsSlugResponse { doc: unknown }
 export interface GetSecurityReportsResponse { reports: unknown; bounty_table: unknown; statuses: unknown }
 export interface GetSecurityScansResponse { scans: unknown }
 export interface GetSessionsIdResponse { session: unknown }
+export interface GetSessionsIdTranscriptResponse { transcript: unknown }
 export interface GetSessionsMineResponse { sessions: unknown; count: unknown }
 export interface GetSessionsSearchResponse { sessions: unknown; count: unknown; total: unknown; totals: unknown; limit: unknown; offset: unknown; session_types: unknown }
 export interface GetSoftwareUpdateResponse { ok: boolean; update: unknown; door: unknown; can_update: unknown }
@@ -523,6 +524,8 @@ export interface PutMingleProjectRequest { enabled: boolean }
 export interface PutProvisioningInstancesIdLogoRequest { image_b64: string; content_type: string }
 export interface PutRenderDeployAppRequest { ownerId?: string; serviceId?: string }
 export interface PutRenderDeployAppResponse { app: unknown }
+export interface PutSessionsSidTranscriptRequest { turns: unknown[]; truncated?: boolean }
+export interface PutSessionsSidTranscriptResponse { transcript: unknown }
 export interface PutSpecialitiesIdSkillsRequest { enabled_skills: string[] }
 export interface PutSpecialitiesIdSkillsResponse { adoption: unknown }
 export interface PutTasksIdDependenciesRequest { depends_on_task_ids: unknown[] }
@@ -1470,6 +1473,10 @@ export interface BongosClient {
     postSessions(args: RequestArgs & { body: PostSessionsRequest }): Promise<PostSessionsResponse>;
     /** GET /sessions/{id} — rank: any-builder */
     getSessionsId(args?: RequestArgs): Promise<GetSessionsIdResponse>;
+    /** GET /sessions/{id}/transcript — rank: any-builder */
+    getSessionsIdTranscript(args?: RequestArgs): Promise<GetSessionsIdTranscriptResponse>;
+    /** PUT /sessions/{sid}/transcript — rank: any-builder */
+    putSessionsSidTranscript(args: RequestArgs & { body: PutSessionsSidTranscriptRequest }): Promise<PutSessionsSidTranscriptResponse>;
     /** GET /sessions/mine — rank: any-builder */
     getSessionsMine(args?: RequestArgs): Promise<GetSessionsMineResponse>;
     /** GET /sessions/search — rank: metic+archon */

package/clients/bongos-client/index.mjs

@@ -1009,6 +1009,10 @@ export function createClient(opts = {}) {
       postSessions: (args) => request("POST", "/sessions", { hasBody: true }, args),
       // GET /sessions/{id} — rank: any-builder — GET /sessions/:id
       getSessionsId: (args) => request("GET", "/sessions/{id}", { hasBody: false }, args),
+      // GET /sessions/{id}/transcript — rank: any-builder — GET /sessions/:id/transcript
+      getSessionsIdTranscript: (args) => request("GET", "/sessions/{id}/transcript", { hasBody: false }, args),
+      // PUT /sessions/{sid}/transcript — rank: any-builder — PUT /sessions/:sid/transcript
+      putSessionsSidTranscript: (args) => request("PUT", "/sessions/{sid}/transcript", { hasBody: true }, args),
       // GET /sessions/mine — rank: any-builder — GET /sessions/mine
       getSessionsMine: (args) => request("GET", "/sessions/mine", { hasBody: false }, args),
       // GET /sessions/search — rank: metic+archon — GET /sessions/search

package/docs/adr/0051-full-session-transcript-corpus.md

@@ -2,7 +2,7 @@
 
 **Date:** 2026-06-13
 **Context:** GDS-V4, task [#1004](https://example.com/builders#/task/1004) (full-transcript capture) with hard precondition task [#1003](https://example.com/builders#/task/1003) (transcript-grade scrubber, extends [#723](https://example.com/builders#/task/723)) and coverage task [#965](https://example.com/builders#/task/965). **Amends the privacy/size posture of [ADR 0027](0027-bfg-session-inefficiency-evaluator.md)** (BFG session-inefficiency evaluator) and its schema (`migrations/062_session_records.sql`). Companion to [ADR 0026](0026-bfg-memory-hygiene-and-cross-builder-learning.md) (BFG charter + §6C transparency), [ADR 0020](0020-security-model-public-stub.md) (security-model posture), [ADR 0028](0028-honest-llm-spend-accounting.md), and [ADR 0016](0016-trust-boundary-server-enforced-permissions.md) (read access is server-enforced, not a doc claim). Read API: tasks [#541](https://example.com/builders#/task/541)/[#627](https://example.com/builders#/task/627). Coverage history: [#551](https://example.com/builders#/task/551)/[#608](https://example.com/builders#/task/608)/[#617](https://example.com/builders#/task/617)/[#620](https://example.com/builders#/task/620).
-**Status:** Proposed. Directive accepted (Lars, 2026-06-13); the **mechanism awaits review, and capture MUST NOT ship until the scrubber precondition (task 1003) is verified.**
+**Status:** Accepted and implemented (task 1001004, 2026-10-01). Directive accepted (Lars, 2026-06-13); the scrubber precondition (task 1003) shipped before capture, as required.
 **Track:** `internal` (dev-system / BFG).
 
 ## Problem
@@ -22,6 +22,8 @@ Lars's directive (2026-06-13): **the BFG must hold the full transcript of every
 ### 1. Full per-turn content (replaces the thin snippet model)
 Capture the complete per-turn transcript — user prompts, assistant text, tool calls **and** their results — instead of length-bounded snippets. Stored as scrubbed text on each turn in `session_records` (new `transcript jsonb` column, or a widened `detail`; migration **085** reserved on claim 762). The per-turn *metadata* and `metrics` aggregates ADR 0027 relies on are kept — the evaluator logic is unchanged; only the stored fidelity grows.
 
+**As built (task 1001004):** a *third* shape beat both options above — a separate `session_transcripts` table (migration `core_269`), one row per `session_id`, joined to `session_records`. The BFG's hot queries (`searchSessions`, `summarizeSessions`, `/mine`) read `session_records` and its KB-sized rows; putting MB of transcript on that row would make every list query carry or have to exclude it. Upload is `PUT /sessions/:sid/transcript` (own 16 MB parser, so a transcript failure can never block a digest or its reward), read is `GET /sessions/:id/transcript`. Thinking blocks are not captured — the directive is what the builder asked and what they were told. The builder's box caps each field and the whole upload (head + tail kept, `truncated` set) so the server is never handed something it must reject.
+
 ### 2. Every session, no silent gaps
 Coverage is already most of the way there: the `SessionEnd` hook (`scripts/gds/session-digest.js`) fires once per session end (not just on ship) and upserts **one record per `session_id`**, and `ship.js` covers the mid-session tail. This ADR keeps that invariant and pairs it with the coverage-reconciliation work (task 965) + the durable skip-logging (task 617) so a session that fails to upload is *visible*, never silently absent.
 

package/docs/adr/0361-merges-publish-as-candidates-release-decides-what-others-are-offered.md

@@ -29,7 +29,7 @@ Release is a second job in `publish.yml` (`release`, on `workflow_dispatch` with
 
 ### D3 — The button starts the job; the server never holds an npm credential
 
-`POST /api/bongos/npm-release/release` (`core.pin.move`, the deploy page's own atom) dispatches the release job through GitHub's API. The GitHub credential is the server's existing GitHub App; the call reaches it through a one-function port, `lifecycle.workflowDispatch`. The `npm-release` module can start a workflow and do nothing else with that credential. The route applies `releaseDecision` first, the same function the job applies again. So the button cannot promise what the job would refuse, and the job remains the gate.
+`POST /api/bongos/npm-release/release` (`core.pin.move`, the deploy page's own atom) dispatches the release job through GitHub's API. The GitHub credential is whichever one the server already holds: a GitHub App installation token if one is configured, otherwise the `GITHUB_PUSH_TOKEN` access token (cloudbongos.com uses the access token). A permission refusal names the one it used (task 1004518). The call reaches it through a one-function port, `lifecycle.workflowDispatch`. The `npm-release` module can start a workflow and do nothing else with that credential. The route applies `releaseDecision` first, the same function the job applies again. So the button cannot promise what the job would refuse, and the job remains the gate.
 
 ### D4 — The button shows the evidence
 
@@ -45,10 +45,10 @@ The deploy page's **Release** section lists the versions this hall runs that are
 
 1. **Platform hall follows candidates.** On the control plane, set the platform's entry in `config/update-subscriptions.json` to `"follow": "candidates"` (ADR 0360). Otherwise, once D1 is on, cloudbongos.com stops updating itself.
 2. **npm:** on npmjs.com → `@bongos/core` → Settings → Trusted publishing, tick **Allow npm dist-tag** on the `publish.yml` entry.
-3. **GitHub App:** give the server's GitHub App **Actions: Read and write** on this repository, and accept the permission change on the installation.
+3. **GitHub credential:** give the server's GitHub credential **Actions: Read and write** on this repository. For an access token (`GITHUB_PUSH_TOKEN`; on cloudbongos.com the fine-grained token *cloudbongos-publish-reconciler*): Developer settings → Personal access tokens → Edit → Repository permissions. For a GitHub App: the App's Permissions & events, then accept the change on the installation.
 4. **Switch on:** set the repository Actions variable `PUBLISH_AS_CANDIDATE=1`.
 
-Until step 4, every version this hall runs is already `latest`, so the Release section reads "Nothing is waiting" and nothing else changes. A press made before steps 2–3 fails with the reason (no dist-tag permission, or the App lacks Actions: write) and moves nothing.
+Until step 4, every version this hall runs is already `latest`, so the Release section reads "Nothing is waiting" and nothing else changes. A press made before steps 2–3 fails with the reason (no dist-tag permission, or the server's GitHub credential lacks Actions: write) and moves nothing.
 
 ## Consequences
 

package/docs/adr/README.md

@@ -479,4 +479,4 @@ These 20 numbers are each shared by exactly two files. They are **accepted histo
 | 0358 | [**A hall wears a look, and its night takes a tint of it** ([task 1004421](https://cloudbongos.com/builders#/task/1004421), goal 1000121 — BV2.PS06; owner D2 + D8, 2026-09-30). Amends [ADR 0219](0219-a-look-is-a-branding-pack-the-style-library.md) (a look could not carry a dark ground) and DESIGN.md's pure-black rule, for halls only. **D1:** the night tint is a formula over the thirteen — the four dark grounds take 5–6% of the look's accent (src/night-tint.js), emitted after the sheet as both dark twins; no token added. **D2:** on by default, and only a chosen look turns it on — a hall with no look is unchanged. **D3:** the apex and hub stay pure black (ADR 0204). **D4:** a custom look is ONE accent for both modes, its lightness nudged until every pair the hall paints with it reads (lookAdjustAccent, client copy test-pinned). **D5:** look + night_tint join the provisioning settings vocabulary; the accent and logo address ride as companion env; the instance resolves the look from the style library. **D6:** a logo is PNG/JPEG/WebP ≤256 KB, magic-sniffed, never SVG, served content-addressed; it is the hall mark and the favicon. Rejected: per-look dark palettes, two custom accents, refusing an unreadable accent, sending the palette over env.](0358-a-hall-wears-a-look-and-its-night-takes-a-tint.md) | hall / branding / design world |
 | 0359 | [**Nobody sets a module's score by hand; a Metic+ person can ask for a re-check** ([task 1003796](https://cloudbongos.com/builders#/task/1003796) · goal 1000091, criterion `wa5-quality-assessed`). Amends [ADR 0343](0343-a-module-score-is-a-security-gate-then-an-average-of-visible-parts.md) D6 and [ADR 0347](0347-every-store-module-ships-a-how-to.md) D5 on the owner's ruling: there is no score override. A score only ever comes from its signals. Instead `POST /store/modules/:key/versions/:version/reassess { reason }`, gated by the new `module.assessment.rerun` atom (metic floor, granted to metic + archon by `government_021`), queues the same assessment a publish runs. A reason is required and nothing else is accepted. The delist (task 1003797) is unchanged.](0359-nobody-sets-a-module-score-by-hand-metic-can-ask-for-a-re-check.md) | module store / assessment / permissions |
 | 0360 | [**Bongos follows every candidate; every other project follows releases** ([task 1004297](https://cloudbongos.com/builders#/task/1004297), goal 1000090 — the owner's 2026-09-26 decision that the Bongos hall takes every candidate automatically). Amends ADR 0136. **D1:** a per-instance `follow` beside the channel — `released` (default: at or below the registry's `latest` label) or `candidates` (every version, the platform hall only). **D2:** released is the `latest` dist-tag, read separately; an unreadable label skips the instance, never a guess. **D3:** the timer period is the lag — 15 min declared, installed by task 1003969. **D4:** a version that failed here is held for a day per instance (recorded in the sweep's config home), while any newer version is taken at once — no restart loop at a 15-minute cadence. **D5:** the deploy page's "Upgrades on this hall" — the core_upgrades ledger, rollbacks flagged, and a published version waiting past 30 min said to be the automation stopping. Rejected: a second runner, CI pushing to the box, a hold only a human clears.](0360-bongos-follows-every-candidate-every-other-project-follows-releases.md) | update channel / deploy / core update |
-| 0361 | [**Merges publish as candidates; Release on /deploy decides what other projects are offered** ([task 1004298](https://cloudbongos.com/builders#/task/1004298), goal 1000090). Amends ADR 0161. **D1:** merges publish under `next` when `PUBLISH_AS_CANDIDATE=1` (ships inert). **D2:** a `release` job in publish.yml moves `latest` (release-core.js: published, stable, newer than the release) over the same OIDC trusted publisher — no npm token. **D3:** /deploy's Release button (`core.pin.move`) dispatches it through the one-function `lifecycle.workflowDispatch` port. **D4:** evidence beside each button — hours on this hall, ever rolled back. **D5:** the banner and the hosted-project runner offer only released versions; the control-plane row follows candidates. Arming: roster follow → npm dist-tag permission → App Actions: write → the variable.](0361-merges-publish-as-candidates-release-decides-what-others-are-offered.md) | publish / release / update channel |
+| 0361 | [**Merges publish as candidates; Release on /deploy decides what other projects are offered** ([task 1004298](https://cloudbongos.com/builders#/task/1004298), goal 1000090). Amends ADR 0161. **D1:** merges publish under `next` when `PUBLISH_AS_CANDIDATE=1` (ships inert). **D2:** a `release` job in publish.yml moves `latest` (release-core.js: published, stable, newer than the release) over the same OIDC trusted publisher — no npm token. **D3:** /deploy's Release button (`core.pin.move`) dispatches it through the one-function `lifecycle.workflowDispatch` port. **D4:** evidence beside each button — hours on this hall, ever rolled back. **D5:** the banner and the hosted-project runner offer only released versions; the control-plane row follows candidates. Arming: roster follow → npm dist-tag permission → GitHub credential Actions: write → the variable.](0361-merges-publish-as-candidates-release-decides-what-others-are-offered.md) | publish / release / update channel |

package/docs/api/openapi.json

@@ -6092,7 +6092,7 @@
           "founding"
         ],
         "summary": "GET /founding/genesis",
-        "description": "**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "description": "A project born through the startup flow enters genesis on its first founding read (founding-birth.js, task 1004506) — here and on GET /me through the port.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
         "x-source": "modules/onboarding/routes/onboarding.js",
         "responses": {
@@ -18859,6 +18859,121 @@
         ]
       }
     },
+    "/sessions/{id}/transcript": {
+      "get": {
+        "operationId": "get_sessions_id_transcript",
+        "tags": [
+          "sessions"
+        ],
+        "summary": "GET /sessions/:id/transcript",
+        "description": "the FULL transcript of one session (ADR 0051). Same rule as GET /sessions/:id: the owner reads their own; a cross-builder read is Archon-only, 404 (never 403) for everyone else, and the fail-closed audit row is written BEFORE any transcript content is served — transcripts are the most sensitive thing this module holds. Paged (?offset=&limit=, default 500 turns, max 2000): a transcript is MB-scale and the response carries turn_count so the reader knows how far to go.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/sessions/routes/sessions.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetSessionsIdTranscriptResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/sessions/{sid}/transcript": {
+      "put": {
+        "operationId": "put_sessions_sid_transcript",
+        "tags": [
+          "sessions"
+        ],
+        "summary": "PUT /sessions/:sid/transcript",
+        "description": "upload the FULL scrubbed transcript of your OWN session (ADR 0051, task 1001004). Separate from POST /sessions on purpose: the digest is KB and carries the reward/evaluator path under a 4 MB parser; the transcript is MB and gets its own larger parser, so a transcript failure can never block a digest. The row is created only FROM the caller's own session_records row (no digest → 404, someone else's session_id → 404, never a confirmation it exists). The content is scrubbed on the uploader's box; the server bounds SHAPE, not secrets — every turn must be a plain object and the whole body is capped.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/sessions/routes/sessions.js",
+        "parameters": [
+          {
+            "name": "sid",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `sid`."
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PutSessionsSidTranscriptRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PutSessionsSidTranscriptResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/sky": {
       "get": {
         "operationId": "get_sky",
@@ -25177,6 +25292,15 @@
           "session"
         ]
       },
+      "GetSessionsIdTranscriptResponse": {
+        "type": "object",
+        "properties": {
+          "transcript": {}
+        },
+        "required": [
+          "transcript"
+        ]
+      },
       "GetSessionsMineResponse": {
         "type": "object",
         "properties": {
@@ -31417,6 +31541,31 @@
           "app"
         ]
       },
+      "PutSessionsSidTranscriptRequest": {
+        "type": "object",
+        "properties": {
+          "turns": {
+            "type": "array",
+            "maxItems": 20000
+          },
+          "truncated": {
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "turns"
+        ],
+        "additionalProperties": false
+      },
+      "PutSessionsSidTranscriptResponse": {
+        "type": "object",
+        "properties": {
+          "transcript": {}
+        },
+        "required": [
+          "transcript"
+        ]
+      },
       "PutSpecialitiesIdSkillsRequest": {
         "type": "object",
         "properties": {
@@ -31592,9 +31741,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 494,
-  "x-schema-count": 524,
+  "x-endpoint-count": 496,
+  "x-schema-count": 527,
   "x-undocumented-bodies": 12,
-  "x-response-schemas": 349,
+  "x-response-schemas": 351,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 494 endpoints across 92 route files.
+> **Generated from the live route files** — the route file is authoritative. 496 endpoints across 92 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust-boundary-server-enforced-permissions.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -273,7 +273,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 |---|---|---|---|---|
 | POST | `/api/bongos/founding/alive` | `any-builder` | — |  |
 | GET | `/api/bongos/founding/builders` | `any-builder` | — | The founding mark (task 1004424): who joined while the project was founding, in join order, with the stage each joined at. |
-| GET | `/api/bongos/founding/genesis` | `any-builder` | — |  |
+| GET | `/api/bongos/founding/genesis` | `any-builder` | — | A project born through the startup flow enters genesis on its first founding read (founding-birth.js, task 1004506) — here and on GET /me… |
 | POST | `/api/bongos/founding/plan` | `any-builder` | `days`, `passes`, `advisors`, `government`, `expected_builders`, `existing` | The plan's ranges and vocabularies are genesis-home.js parsePlan's (one source); this schema only names the fields so an unknown one is r… |
 | POST | `/api/bongos/founding/stages/:stage/close` | `any-builder` | — |  |
 | POST | `/api/bongos/founding/start` | `any-builder` | — |  |
@@ -717,12 +717,14 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 |---|---|---|---|---|
 | POST | `/api/bongos/session/optimize` | `any-builder` | `mode`, `time_budget_min`, `max_parallel` | pick own next work; the optimizer reads/recommends only. |
 
-## `sessions` (5)
+## `sessions` (7)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
 | POST | `/api/bongos/sessions` | `any-builder` | `session_id`, `task_ids`, `total_tokens`, `duration_seconds`, `started_at`, `ended_at`, `detail`, `metrics`, `model_usage` | upload your OWN session digest. |
 | GET | `/api/bongos/sessions/:id` | `any-builder` | — | own session full detail (deep-dive); cross-builder fetch requires Archon + a fail-closed audit row (BFG-principal posture until 6C.1). |
+| GET | `/api/bongos/sessions/:id/transcript` | `any-builder` | — | the FULL transcript of one session (ADR 0051). |
+| PUT | `/api/bongos/sessions/:sid/transcript` | `any-builder` | `turns`, `truncated` | upload the FULL scrubbed transcript of your OWN session (ADR 0051, task 1001004). |
 | GET | `/api/bongos/sessions/mine` | `any-builder` | — | your OWN sessions (self-serve; no audit needed). |
 | GET | `/api/bongos/sessions/search` | `metic+archon` | — | cross-builder corpus search (BFG-principal posture until 6C.1). |
 | GET | `/api/bongos/sessions/upload-health` | `metic+archon` | — | GET /sessions/upload-health — the answer to "has anyone's session upload silently stopped?", which before task 1003865 existed ONLY as a … |

package/docs/architecture.md

@@ -201,6 +201,9 @@ grade_attempts(id, task_id, builder_id?, passed bool, score NUMERIC(3,1), attemp
             -- read by the correlation audit (served as grade.attempts on GET /tasks/:id?include=grade)
             -- mig 064 (6D.6, ADR 0027): APPEND-ONLY, one row per grade run, so
             -- re-grade thrash is countable (task_grades keeps only the latest)
+session_transcripts(session_id PK, builder_id, turn_count, byte_size, truncated,
+            turns jsonb, uploaded_at)  -- core_269 (ADR 0051): the FULL secret-scrubbed transcript,
+            -- one row per session_records row, in its own table so the BFG's searched rows stay KB
 session_records(id, session_id UNIQUE, builder_id, task_ids bigint[], example_earned,
             total_tokens, duration_seconds, started_at, ended_at, uploaded_at,
             detail jsonb, metrics jsonb)  -- mig 062 (6D.1, ADR 0027): per-shipped-session

package/docs/copy-inventory.md

@@ -291,7 +291,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `f42cb1edcf1e` | certain | Clone the repository | `modules/hall-ui/public/hall-render.js:809` |
 | `70f6a704d504` | certain | Close it | `modules/hall-ui/public/copy-desk.html:140` |
 | `d12a2fb5730d` | certain | Close this flag | `modules/hall-ui/public/copy-desk.html:116` |
-| `9b9c2abeae90` | certain | Close this stage | `modules/hall-ui/public/genesis-home.js:206` |
+| `9b9c2abeae90` | certain | Close this stage | `modules/hall-ui/public/genesis-home.js:209` |
 | `3d148e19e03a` | certain | Closed. | `modules/hall-ui/public/copy-desk.js:510` |
 | `2654dc3ded21` | certain | Closing is a judgement too — say what you decided, so the next person does not re-litigate it. | `modules/hall-ui/public/copy-desk.js:495` |
 | `e5548861ad79` | certain | Coach the grader | `modules/hall-ui/public/studio.js:211` |
@@ -302,7 +302,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `fe4a2b04eda5` | certain | Commands — {{worldName}} | `modules/hall-ui/public/commands.html:6` |
 | `cfc287c42263` | certain | Complete your profile | `modules/hall-ui/public/profile-nudge.js:79` |
 | `2867c85d196d` | certain | Confirm that verification for #{…} actually passed? | `modules/hall-ui/public/task.js:895` |
-| `e74f4442c338` | certain | Confirm this stage | `modules/hall-ui/public/genesis-home.js:197` |
+| `e74f4442c338` | certain | Confirm this stage | `modules/hall-ui/public/genesis-home.js:200` |
 | `9b16a22bf24c` | certain | Connect Discord & join the server | `modules/hall-ui/public/hall-render.js:955` |
 | `9b16a22bf24c` | certain | Connect Discord & join the server | `modules/hall-ui/public/settings.js:683` |
 | `c07898571b24` | certain | Connects to | `modules/hall-ui/public/atlas.js:290` |
@@ -456,7 +456,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `8e82771e5b63` | certain | Ending a session takes effect immediately; the token stops working on its very next request. | `modules/hall-ui/public/settings.html:163` |
 | `58d381535285` | certain | Engagement reports | `modules/hall-ui/public/watch.html:130` |
 | `690609c8e9a9` | certain | Enter a goal number. | `modules/hall-ui/public/gate.js:470` |
-| `4f776bc33d5f` | certain | Enter the builders’ hall | `modules/hall-ui/public/genesis-home.js:219` |
+| `4f776bc33d5f` | certain | Enter the builders’ hall | `modules/hall-ui/public/genesis-home.js:222` |
 | `1825c9c467d8` | certain | Enter the id of the task this one should wait for. | `modules/hall-ui/public/task.js:951` |
 | `bd7a40639a1c` | certain | Estimate (min) | `modules/hall-ui/public/task-detail.js:460` |
 | `c15d1f0ddfb6` | certain | Estimation accuracy | `modules/hall-ui/public/watch.html:148` |
@@ -659,7 +659,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `7c9b7a89353b` | certain | Leave goal | `modules/hall-ui/public/goals-render.js:967` |
 | `6137d2679912` | certain | Leave it off | `modules/hall-ui/public/settings-specialities.js:138` |
 | `f192ff6563f9` | certain | Leave your GitHub username and an Archon will let you in. No coding needed to start — once you're approved, si | `modules/hall-ui/public/hall-render.js:297` |
-| `e14ebcf3eec5` | certain | Legislation has passed. Genesis is complete. | `modules/hall-ui/public/genesis-home.js:188` |
+| `e14ebcf3eec5` | certain | Legislation has passed. Genesis is complete. | `modules/hall-ui/public/genesis-home.js:191` |
 | `d6a78b9e5368` | certain | Let it be for now | `modules/hall-ui/public/studio.js:233` |
 | `d6a78b9e5368` | certain | Let it be for now | `modules/hall-ui/public/studio.js:248` |
 | `b8ba1fa4457c` | certain | Link a task | `modules/hall-ui/public/blockers.js:148` |
@@ -772,7 +772,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `084748fd85b4` | certain | No shipped work is recorded between core {…} and {…}. | `modules/hall-ui/public/deploy.js:541` |
 | `4485497d87bb` | certain | No specialities yet. Create one below — it takes a name and a craft, and you can train it afterwards. | `modules/hall-ui/public/settings-specialities.js:416` |
 | `545dc44ad427` | certain | No task in this goal depends on another task in this goal. | `modules/hall-ui/public/goal-forest-render.js:126` |
-| `da838f6056b1` | certain | No tasks for this stage yet. | `modules/hall-ui/public/genesis-home.js:178` |
+| `da838f6056b1` | certain | No tasks for this stage yet. | `modules/hall-ui/public/genesis-home.js:181` |
 | `712b64d8273f` | certain | No tasks match these filters. Try widening them. | `modules/hall-ui/public/work.js:427` |
 | `2302ee46744e` | certain | No terminal commands found. | `modules/hall-ui/public/commands.js:46` |
 | `78f78d1d1e1f` | certain | No version is in flight right now. | `modules/hall-ui/public/roadmap.js:409` |
@@ -848,8 +848,8 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `855277dff074` | certain | Open task #{…} | `modules/hall-ui/public/work.js:835` |
 | `99c630009152` | certain | Open tasks whose declared files overlap — sequence these before two builders collide. | `modules/hall-ui/public/goals.html:117` |
 | `99c630009152` | certain | Open tasks whose declared files overlap — sequence these before two builders collide. | `modules/hall-ui/public/goals.html:197` |
-| `fe9986a9d821` | certain | Open the Board Room | `modules/hall-ui/public/genesis-home.js:198` |
-| `fe9986a9d821` | certain | Open the Board Room | `modules/hall-ui/public/genesis-home.js:203` |
+| `fe9986a9d821` | certain | Open the Board Room | `modules/hall-ui/public/genesis-home.js:201` |
+| `fe9986a9d821` | certain | Open the Board Room | `modules/hall-ui/public/genesis-home.js:206` |
 | `e073aa0c3847` | certain | Open the conflicts for {…} | `modules/hall-ui/public/goal-inbox.js:112` |
 | `676361254d92` | certain | Open the idea composer | `modules/hall-ui/public/idea.js:504` |
 | `29e1cb2d32fc` | certain | Open the recording | `modules/hall-ui/public/criterion-uat-ui.js:121` |
@@ -915,7 +915,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `abee9a18325d` | certain | Propose wording… | `modules/hall-ui/public/copy-desk.js:179` |
 | `3f85bdc47099` | certain | Protected module scope — join by request; an Archon admits members | `modules/hall-ui/public/goals-render.js:883` |
 | `e5c292c8b361` | certain | Provides (seams) | `modules/hall-ui/public/atlas.js:288` |
-| `93b836382ec7` | certain | Put it to the board again | `modules/hall-ui/public/genesis-home.js:202` |
+| `93b836382ec7` | certain | Put it to the board again | `modules/hall-ui/public/genesis-home.js:205` |
 | `4de232a05888` | certain | Raise after | `modules/hall-ui/public/project-settings.js:113` |
 | `0608f71f78fe` | certain | Rank is earned by shipping work. The founding mark is for good: it is numbered in the order people joined whil | `modules/hall-ui/public/ranks.html:47` |
 | `b9c6def6b120` | certain | Rank set to {…}. | `modules/hall-ui/public/watch.js:883` |
@@ -1150,7 +1150,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `4462dcaaaa7d` | certain | The artist reads this instead of guessing. A pointer with no judgement costs them a look and tells them nothin | `modules/hall-ui/public/copy-desk.html:103` |
 | `195b295d0bf3` | certain | The atlas regenerates itself on the server every time code ships; it has not been generated on this deploy yet | `modules/hall-ui/public/atlas.html:63` |
 | `f38140e472df` | certain | The board ratified a change that is not in force. | `modules/hall-ui/public/government.js:633` |
-| `ecc7215524c0` | certain | The board sent this stage back. Read why in the Board Room, then put it up again. | `modules/hall-ui/public/genesis-home.js:201` |
+| `ecc7215524c0` | certain | The board sent this stage back. Read why in the Board Room, then put it up again. | `modules/hall-ui/public/genesis-home.js:204` |
 | `e8f011fdaa6b` | certain | The complete architecture: your machine (the worker, the code, and local memory), the server (authority and pr | `modules/hall-ui/public/diagrams.html:76` |
 | `2dc061096c48` | certain | The copy desk — every flagged string | `modules/hall-ui/public/studio.html:165` |
 | `325daac25a9a` | certain | The day the sky is drawn for | `modules/hall-ui/public/goal-map.html:127` |
@@ -1359,7 +1359,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `b8743d16eab8` | certain | What {…} unlocks | `modules/hall-ui/public/hall-render.js:82` |
 | `6ff24dd04d46` | certain | What\u2019s this? | `modules/hall-ui/public/shell.js:1027` |
 | `ecfd34bf5e6f` | certain | What’s stuck (optional) | `modules/hall-ui/public/blockers.js:308` |
-| `55ef095fe001` | certain | When every task above is finished, this stage can be put to the board. | `modules/hall-ui/public/genesis-home.js:208` |
+| `55ef095fe001` | certain | When every task above is finished, this stage can be put to the board. | `modules/hall-ui/public/genesis-home.js:211` |
 | `a6e102816e92` | certain | When to reach for it | `modules/hall-ui/public/commands-lib.js:100` |
 | `a6e102816e92` | certain | When to reach for it | `modules/hall-ui/public/settings-specialities.js:130` |
 | `5d73558dae0e` | certain | Where do you begin? | `modules/hall-ui/public/goal-map.html:110` |

package/docs/copy-registry.json

@@ -1482,8 +1482,8 @@
       "text": "Open the Board Room",
       "occurrences": 2,
       "at": [
-        "modules/hall-ui/public/genesis-home.js:198",
-        "modules/hall-ui/public/genesis-home.js:203"
+        "modules/hall-ui/public/genesis-home.js:201",
+        "modules/hall-ui/public/genesis-home.js:206"
       ]
     },
     {
@@ -4324,7 +4324,7 @@
       "surface": "builders-hall",
       "text": "Close this stage",
       "file": "modules/hall-ui/public/genesis-home.js",
-      "line": 206,
+      "line": 209,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -4423,7 +4423,7 @@
       "surface": "builders-hall",
       "text": "Confirm this stage",
       "file": "modules/hall-ui/public/genesis-home.js",
-      "line": 197,
+      "line": 200,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -5809,7 +5809,7 @@
       "surface": "builders-hall",
       "text": "Enter the builders’ hall",
       "file": "modules/hall-ui/public/genesis-home.js",
-      "line": 219,
+      "line": 222,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -7636,7 +7636,7 @@
       "surface": "builders-hall",
       "text": "Legislation has passed. Genesis is complete.",
       "file": "modules/hall-ui/public/genesis-home.js",
-      "line": 188,
+      "line": 191,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -8653,7 +8653,7 @@
       "surface": "builders-hall",
       "text": "No tasks for this stage yet.",
       "file": "modules/hall-ui/public/genesis-home.js",
-      "line": 178,
+      "line": 181,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -9337,7 +9337,7 @@
       "surface": "builders-hall",
       "text": "Open the Board Room",
       "file": "modules/hall-ui/public/genesis-home.js",
-      "line": 198,
+      "line": 201,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -9346,7 +9346,7 @@
       "surface": "builders-hall",
       "text": "Open the Board Room",
       "file": "modules/hall-ui/public/genesis-home.js",
-      "line": 203,
+      "line": 206,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -9940,7 +9940,7 @@
       "surface": "builders-hall",
       "text": "Put it to the board again",
       "file": "modules/hall-ui/public/genesis-home.js",
-      "line": 202,
+      "line": 205,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -12055,7 +12055,7 @@
       "surface": "builders-hall",
       "text": "The board sent this stage back. Read why in the Board Room, then put it up again.",
       "file": "modules/hall-ui/public/genesis-home.js",
-      "line": 201,
+      "line": 204,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -13936,7 +13936,7 @@
       "surface": "builders-hall",
       "text": "When every task above is finished, this stage can be put to the board.",
       "file": "modules/hall-ui/public/genesis-home.js",
-      "line": 208,
+      "line": 211,
       "origin": "js-markup",
       "confidence": "certain"
     },