@bongos/core 1.21.127 → 1.21.129

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.21.127",
-  "core_contract": "1.21.127",
-  "source_commit": "ea6cb74e9eba8805eb016b8ac0420841e429c290",
+  "core_version": "1.21.129",
+  "core_contract": "1.21.129",
+  "source_commit": "e1853bcff638c4af78b2c735629a68e92b323d41",
   "source_ref": "HEAD",
-  "built_at": "2026-10-15T15:58:58.689Z",
+  "built_at": "2026-10-15T16:58:38.452Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 606,
     "agent_docs_stubbed": 28,
-    "functional_verbatim": 3138,
+    "functional_verbatim": 3146,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 3773,
-  "tree_sha256": "2af5f5b320f78e843791c36c370aa8f198a28c9bd3b085c1875f39869558c2cd",
+  "file_count": 3781,
+  "tree_sha256": "86956dd5cf1f736d879fcefe1c8c370b4b62f58d3e0cb3876a00e8d4d0c25d0c",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -312,17 +312,17 @@
     {
       "path": "bin/bongos.js",
       "mode": "0000755",
-      "sha256": "f2a64dc742bb1f13938840c9f294ea7a60f1895dc9366200e33d53891e5e0fe5"
+      "sha256": "656e91004fc2236dfd121dd3f46848ba5a51331c2eb17095398eb30a5255b7ef"
     },
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "8ec09fb234db73a4cb92ad78c4da3532d5717f48106dd97fbb860fa17b1b1b5b"
+      "sha256": "9aea69205101517f33e85bd80593333deb8a015d6c98ae55d73ddc59c3067d12"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "2f89099d91db14e37dc9d67ef68a81ba410740446758e639cb50de51a6942d79"
+      "sha256": "23208de4f2aa8f0c1c5ec2f7939e637224280c3cf520958148549e2f79c02c9d"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -332,17 +332,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "14f0fa81adc576c014950856f70d6721bb796104e65b3fecadb7d5b1370010b2"
+      "sha256": "25dd808eae862cd02ed9a494f5e0ce2ee8d31bb664f78a23c151a95dc1f0c25f"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "c13884fb0bd175f8bc9745150b2ca5ed254dd0ad14bcaa63511cf892cdbaec36"
+      "sha256": "d98b7b69f7e2db071b9b10e5e039afdf95262b7196450ef56c73c0acac8717a7"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "b77e22573f2d8c9c9f2f1b3a1642e9258cd4fec394d1416ae816c6bf56a3295d"
+      "sha256": "c3a776cd09ddde2c4d1d3ed8b3f90daed304c6cc8d459a688585526360c2b5e5"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -2377,17 +2377,17 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "cda3b2d273704ab0bebe67efe46f0101e1809ec8e8beef2ad3614b6fc5845a31"
+      "sha256": "9ec7dd570500edd3705cd871886734d89780b92df6f185cdc86002288fe7aa7d"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "cd89b6776167172503ef68a77b1cfa68a00bf886d8f586c456f67e3cfef84fba"
+      "sha256": "319fce626080497fdf50a50064f0faa56951b1aa021e97edd6ad481d8ee5c9b9"
     },
     {
       "path": "docs/architecture.md",
       "mode": "0000644",
-      "sha256": "688331d1b50b20cca58d8a3addd72776f9531e5360635f1486f992b9793c0ec2"
+      "sha256": "fca9878d8501b33c0258045f61365a90e60e148c2b730b00a83a6f4f89b79b8d"
     },
     {
       "path": "docs/branding-contract.md",
@@ -2912,7 +2912,7 @@
     {
       "path": "docs/file-map.md",
       "mode": "0000644",
-      "sha256": "ceb857cecd0293bad85a5e2a33f592c4b1e6a025e9fe597af6f70846554fa07c"
+      "sha256": "1735499acdd1ee22b83fc0be539e3371072b289b2b3c1d89e7996ec360190077"
     },
     {
       "path": "docs/handoff-template.md",
@@ -2922,7 +2922,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "de498901b8143d15779aafd30051f97e04ae01f32c880902da3a8234a6e262e7"
+      "sha256": "791b40816885c77100c1ff5ea9773f66a122d0bb6fc1dc2163fe43c5d89b0d1b"
     },
     {
       "path": "docs/modules-contract.md",
@@ -4154,6 +4154,11 @@
       "mode": "0000644",
       "sha256": "75381af0ac96645f2f8fe254f609c75d2fa83bc2fc1f13887c23165fc8eed58e"
     },
+    {
+      "path": "migrations/core_276_module_release_channels.sql",
+      "mode": "0000644",
+      "sha256": "550884fa117e707b65f5c56faca0e4e3850905db94d3f275cad5d520aa68db03"
+    },
     {
       "path": "modules/agents/CLAUDE.md",
       "mode": "0000644",
@@ -7934,10 +7939,25 @@
       "mode": "0000644",
       "sha256": "18984c946d746da66ff7678379e9f49c9cfdcdb8f70d2acd852ab29c820baad0"
     },
+    {
+      "path": "modules/onboarding/howto-moments.js",
+      "mode": "0000644",
+      "sha256": "1f22e2c271c92c2e1e263fab265e73b88ba796b44e519ecd5f3266b10481bf17"
+    },
+    {
+      "path": "modules/onboarding/howto-state.js",
+      "mode": "0000644",
+      "sha256": "9b6d361568feaa4f9a9f299bddcd4bc649861cf79a9a6045ea00389bd86cc01c"
+    },
+    {
+      "path": "modules/onboarding/migrations/onboarding_001_howto_reads.sql",
+      "mode": "0000644",
+      "sha256": "cb5a3a58b4db75c028ccc53ea3316bb733fda650218b16b494d69de58c84e982"
+    },
     {
       "path": "modules/onboarding/module.json",
       "mode": "0000644",
-      "sha256": "5ec905fe4a387bbb26ec157ac8d67a05bd02986fc661aa2621b84df260f45774"
+      "sha256": "363a44b85c87bfbc2bb473656319099c39e7817e47294f3ceb4a33ee6bc85421"
     },
     {
       "path": "modules/onboarding/newcomer-restock.js",
@@ -7967,7 +7987,7 @@
     {
       "path": "modules/onboarding/routes/onboarding.js",
       "mode": "0000644",
-      "sha256": "385deea4dfc4e737f756dc56c1cd6c8891ebdb202e66cf15e235e6b10e498788"
+      "sha256": "011dfc781cbe8c7a17956fa2020e0327cf0e46f537a9057cf2b4911752ba813a"
     },
     {
       "path": "modules/page-notes/CLAUDE.md",
@@ -10482,12 +10502,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "efe64aff087c9fac228bb0502df35fdb706ea66215ba9a7b20a16575b4568a6d"
+      "sha256": "fd49f31fc91c5005e4e306248e0745842d89df367cdb32fd03b04b5bc844bffb"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "65dbc0fd1642caa7dd0907f8ca5f8d6e3808087637f31aaff0b5b3b2e22da1da"
+      "sha256": "da9de77dd1ad1af7aa7a30243b2f0e12b9553e10a15a858cf3e899013769f58e"
     },
     {
       "path": "public-docs/index.html",
@@ -10507,7 +10527,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "b3c808cc70f6d027e4dc58fad374f2dff423b73416eee5c5a96e8779ddd2d04f"
+      "sha256": "7211540da2e00897f888df0f4642fd0d286a04ed3433bb0683d1acb7843d8b77"
     },
     {
       "path": "scripts/cron/style_guide_audit.sh",
@@ -10832,7 +10852,7 @@
     {
       "path": "scripts/gds/claude-md-template.js",
       "mode": "0000644",
-      "sha256": "d8560389c6a72cda1f7fe958af67b943e825b68fdd8f0fa28bf9143e42a1ece9"
+      "sha256": "e783238968b9c1dcac8e7d9e49f0f4520bde8369e95e111dcd086cb77ab28189"
     },
     {
       "path": "scripts/gds/cleanup-orphans.js",
@@ -11239,6 +11259,11 @@
       "mode": "0000644",
       "sha256": "b7c61201d165b8c2b7e51b3a057153c3c7238bfc8bd55412acaf0ba87acd367d"
     },
+    {
+      "path": "scripts/gds/howto.js",
+      "mode": "0000644",
+      "sha256": "febb8812a719ca76ef34b312b387953b723add58357441888183ba1e9577e45f"
+    },
     {
       "path": "scripts/gds/http-api-client.js",
       "mode": "0000644",
@@ -12857,7 +12882,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "8ff71d0200dd2b11afa13be91155669caee7ba000a537df94e37426a6485e7f1"
+      "sha256": "854a2036806028bf527d76593e2c9a5e5b57d7daa1183f18065889afe9f6d373"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -15639,6 +15664,16 @@
       "mode": "0000644",
       "sha256": "8e9b206fdde738f289bc11e204852595e9128b523cfc20cd67e3e83fb60a2fac"
     },
+    {
+      "path": "tests/howto_moments.mjs",
+      "mode": "0000644",
+      "sha256": "6fc5a865345c3db90336748eebd79425ee64496b73dd98f89c87d9da21174e54"
+    },
+    {
+      "path": "tests/howto_state.mjs",
+      "mode": "0000644",
+      "sha256": "8b8d3eeeffd1bb7d0deaec51c91165b06302737b72b1a710547340c7ecadcec6"
+    },
     {
       "path": "tests/html_comment_nesting.mjs",
       "mode": "0000644",
@@ -16459,6 +16494,11 @@
       "mode": "0000644",
       "sha256": "4f5a0c6e24d3883a156798f17c485183cf73be2cf3a0e0c610d5014a142909e5"
     },
+    {
+      "path": "tests/module_release_channels.mjs",
+      "mode": "0000644",
+      "sha256": "8607f9b60a6094296b005def559eb3cfa6861add5bfa473d9264a3dc4025bf44"
+    },
     {
       "path": "tests/module_route_rank.mjs",
       "mode": "0000644",
@@ -16722,7 +16762,7 @@
     {
       "path": "tests/own_scope_guard.mjs",
       "mode": "0000644",
-      "sha256": "e9ad80ce9837076d550dbb4b77a4c0f01f087ad3e515f8af8a672221af995ca4"
+      "sha256": "cdd964e66b9ebe74c504a3916eb3a10b36497af4f5b94924534d2d73f136801a"
     },
     {
       "path": "tests/own_session_revoke.mjs",

package/bin/bongos.js

@@ -82,6 +82,7 @@ const VERBS = {
   status:  { script: 'status.js',  group: 'work', summary: 'Version / criterion progress  (bongos status C8)', selfHelp: true },
   recall:  { script: 'recall.js',  group: 'work', summary: 'Search the docs + project knowledge  (bongos recall "x")' },
   cost:    { script: 'cost.js',    group: 'work', summary: 'Log a cost entry' },
+  howto:   { script: 'howto.js',   group: 'work', summary: 'The how-to guide: show the unread steps for a moment  (bongos howto moment first_open)' },
 
   login:   { script: 'login.js',  group: 'account', summary: 'Sign in to an instance  (bongos login <url> — browser click, no paste)' },
   setup:   { script: 'setup.js',  group: 'account', summary: 'Full builder setup on this instance (art key, disciplines, consent)' },

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 555 operations across 76 resource groups
+- 558 operations across 76 resource groups
 
 ## Use it from your project
 

package/clients/bongos-client/bongos-client.global.js

@@ -735,6 +735,12 @@ function createClient(opts = {}) {
       getMeGuilds: (args) => request("GET", "/me/guilds", { hasBody: false }, args),
       // PATCH /me/handle — rank: any-builder — PATCH /me/handle
       patchMeHandle: (args) => request("PATCH", "/me/handle", { hasBody: true }, args),
+      // GET /me/howto — rank: any-builder — GET /me/howto
+      getMeHowto: (args) => request("GET", "/me/howto", { hasBody: false }, args),
+      // POST /me/howto/read — rank: any-builder — POST /me/howto/read
+      postMeHowtoRead: (args) => request("POST", "/me/howto/read", { hasBody: true }, args),
+      // POST /me/howto/reset — rank: any-builder — POST /me/howto/reset
+      postMeHowtoReset: (args) => request("POST", "/me/howto/reset", { hasBody: true }, args),
       // GET /me/interaction — rank: any-builder — GET /me/interaction
       getMeInteraction: (args) => request("GET", "/me/interaction", { hasBody: false }, args),
       // PATCH /me/interaction — rank: any-builder — PATCH /me/interaction

package/clients/bongos-client/index.cjs

@@ -734,6 +734,12 @@ function createClient(opts = {}) {
       getMeGuilds: (args) => request("GET", "/me/guilds", { hasBody: false }, args),
       // PATCH /me/handle — rank: any-builder — PATCH /me/handle
       patchMeHandle: (args) => request("PATCH", "/me/handle", { hasBody: true }, args),
+      // GET /me/howto — rank: any-builder — GET /me/howto
+      getMeHowto: (args) => request("GET", "/me/howto", { hasBody: false }, args),
+      // POST /me/howto/read — rank: any-builder — POST /me/howto/read
+      postMeHowtoRead: (args) => request("POST", "/me/howto/read", { hasBody: true }, args),
+      // POST /me/howto/reset — rank: any-builder — POST /me/howto/reset
+      postMeHowtoReset: (args) => request("POST", "/me/howto/reset", { hasBody: true }, args),
       // GET /me/interaction — rank: any-builder — GET /me/interaction
       getMeInteraction: (args) => request("GET", "/me/interaction", { hasBody: false }, args),
       // PATCH /me/interaction — rank: any-builder — PATCH /me/interaction

package/clients/bongos-client/index.d.ts

@@ -429,6 +429,8 @@ export interface PostMeAnthropicLinkRequest { anthropic_email: string; anthropic
 export interface PostMeAnthropicLinkResponse { linked: unknown }
 export interface PostMeFilterViewsRequest { page: string; name: string; values: Record<string, unknown>; is_default?: boolean }
 export interface PostMeFilterViewsResponse { page: unknown; view: unknown; views: unknown }
+export interface PostMeHowtoReadRequest { steps?: unknown[]; all?: boolean; how?: string }
+export interface PostMeHowtoResetRequest { steps?: unknown[]; all?: boolean }
 export interface PostMeSessionsRevokeAllResponse { ok: boolean; revoked: unknown }
 export interface PostMeSessionsRevokeRequest { session_id?: StringifiableId }
 export interface PostMeSessionsRevokeResponse { ok: boolean; revoked: unknown }
@@ -1260,6 +1262,12 @@ export interface BongosClient {
     getMeGuilds(args?: RequestArgs): Promise<GetMeGuildsResponse>;
     /** PATCH /me/handle — rank: any-builder */
     patchMeHandle(args: RequestArgs & { body: PatchMeHandleRequest }): Promise<PatchMeHandleResponse>;
+    /** GET /me/howto — rank: any-builder */
+    getMeHowto(args?: RequestArgs): Promise<ApiResponse>;
+    /** POST /me/howto/read — rank: any-builder */
+    postMeHowtoRead(args?: RequestArgs & { body?: PostMeHowtoReadRequest }): Promise<ApiResponse>;
+    /** POST /me/howto/reset — rank: any-builder */
+    postMeHowtoReset(args?: RequestArgs & { body?: PostMeHowtoResetRequest }): Promise<ApiResponse>;
     /** GET /me/interaction — rank: any-builder */
     getMeInteraction(args?: RequestArgs): Promise<ApiResponse>;
     /** PATCH /me/interaction — rank: any-builder */

package/clients/bongos-client/index.mjs

@@ -731,6 +731,12 @@ export function createClient(opts = {}) {
       getMeGuilds: (args) => request("GET", "/me/guilds", { hasBody: false }, args),
       // PATCH /me/handle — rank: any-builder — PATCH /me/handle
       patchMeHandle: (args) => request("PATCH", "/me/handle", { hasBody: true }, args),
+      // GET /me/howto — rank: any-builder — GET /me/howto
+      getMeHowto: (args) => request("GET", "/me/howto", { hasBody: false }, args),
+      // POST /me/howto/read — rank: any-builder — POST /me/howto/read
+      postMeHowtoRead: (args) => request("POST", "/me/howto/read", { hasBody: true }, args),
+      // POST /me/howto/reset — rank: any-builder — POST /me/howto/reset
+      postMeHowtoReset: (args) => request("POST", "/me/howto/reset", { hasBody: true }, args),
       // GET /me/interaction — rank: any-builder — GET /me/interaction
       getMeInteraction: (args) => request("GET", "/me/interaction", { hasBody: false }, args),
       // PATCH /me/interaction — rank: any-builder — PATCH /me/interaction

package/docs/api/openapi.json

@@ -13518,6 +13518,121 @@
         ]
       }
     },
+    "/me/howto": {
+      "get": {
+        "operationId": "get_me_howto",
+        "tags": [
+          "me"
+        ],
+        "summary": "GET /me/howto",
+        "description": "the caller's own read state.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/onboarding/routes/onboarding.js",
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/me/howto/read": {
+      "post": {
+        "operationId": "post_me_howto_read",
+        "tags": [
+          "me"
+        ],
+        "summary": "POST /me/howto/read",
+        "description": "marks the caller's own steps read ({ steps }) or skips the guide ({ all: true, how: 'skipped' }).\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/onboarding/routes/onboarding.js",
+        "requestBody": {
+          "required": false,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostMeHowtoReadRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/me/howto/reset": {
+      "post": {
+        "operationId": "post_me_howto_reset",
+        "tags": [
+          "me"
+        ],
+        "summary": "POST /me/howto/reset",
+        "description": "forgets the caller's own marks ({ steps }, or everything when none are named).\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/onboarding/routes/onboarding.js",
+        "requestBody": {
+          "required": false,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostMeHowtoResetRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/me/interaction": {
       "get": {
         "operationId": "get_me_interaction",
@@ -32403,6 +32518,36 @@
           "views"
         ]
       },
+      "PostMeHowtoReadRequest": {
+        "type": "object",
+        "properties": {
+          "steps": {
+            "type": "array",
+            "maxItems": 100
+          },
+          "all": {
+            "type": "boolean"
+          },
+          "how": {
+            "type": "string",
+            "maxLength": 16
+          }
+        },
+        "additionalProperties": false
+      },
+      "PostMeHowtoResetRequest": {
+        "type": "object",
+        "properties": {
+          "steps": {
+            "type": "array",
+            "maxItems": 100
+          },
+          "all": {
+            "type": "boolean"
+          }
+        },
+        "additionalProperties": false
+      },
       "PostMeSessionsRevokeAllResponse": {
         "type": "object",
         "properties": {
@@ -35469,8 +35614,8 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 555,
-  "x-schema-count": 592,
+  "x-endpoint-count": 558,
+  "x-schema-count": 594,
   "x-undocumented-bodies": 12,
   "x-response-schemas": 390,
   "x-generated-by": "scripts/gds/gen-api-docs.js"

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 555 endpoints across 95 route files.
+> **Generated from the live route files** — the route file is authoritative. 558 endpoints across 95 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust-boundary-server-enforced-permissions.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -489,7 +489,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | POST | `/api/bongos/llm-cache/lookup` | `metic+archon` | `cache_key`, `tokens_saved_est` | POST /llm-cache/lookup — hit/miss + atomic hit_count bump. |
 | POST | `/api/bongos/llm-cache/store` | `metic+archon` | `spec`, `result_stdout`, `result_cost_usd` | POST /llm-cache/store — upsert a freshly-produced result. |
 
-## `me` (39)
+## `me` (42)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -512,6 +512,9 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | GET | `/api/bongos/me/guild-requests` | `any-builder` | — | MY queue: invites addressed to me, each carrying the card (the guild's current visibility, which an accept must echo back), the join requ… |
 | GET | `/api/bongos/me/guilds` | `any-builder` | — | MY guilds, each with my own two switches. |
 | PATCH | `/api/bongos/me/handle` | `any-builder` | `handle` | rename the caller's OWN handle (own data, keyed on the authenticated github_id). |
+| GET | `/api/bongos/me/howto` | `any-builder` | — | the caller's own read state. |
+| POST | `/api/bongos/me/howto/read` | `any-builder` | `steps`, `all`, `how` | marks the caller's own steps read ({ steps }) or skips the guide ({ all: true, how: 'skipped' }). |
+| POST | `/api/bongos/me/howto/reset` | `any-builder` | `steps`, `all` | forgets the caller's own marks ({ steps }, or everything when none are named). |
 | GET | `/api/bongos/me/interaction` | `any-builder` | — | Per-builder INTERACTION PROFILE (task 2010, shares the behavior_prefs jsonb / migration 119). |
 | PATCH | `/api/bongos/me/interaction` | `any-builder` | _undocumented_ | PATCH the interaction profile. |
 | GET | `/api/bongos/me/model-allocation` | `any-builder` | — |  |

package/docs/architecture.md

@@ -251,6 +251,18 @@ store_module_prices(id, module_key, price_cents, price_credits, set_by, set_at)
               -- in that currency, at least one must be set.
 ```
 
+Module release channels (migration `core_276`, task 1003815, [ADR 0344](adr/0344-a-tester-is-a-project-that-opts-in-once.md) — which channel a published version is on; the data only, the tester-first publish, promotion gate and channel-aware install are their own tasks):
+
+```
+store_release_channels(channel PK, description, serves_installs, sort_order, created_at)
+              -- rows, not a CHECK: tester + general serve installs, withdrawn never does;
+              -- a new channel is an INSERT, not a schema change.
+store_module_version_channels(id, version_id FK store_module_versions, channel FK,
+              reason short code, set_by builder | NULL (system), set_at)
+              -- history; newest row per version is current. Pre-existing versions were
+              -- backfilled to general ('predates_staged_rollout').
+```
+
 Module entitlements (migration `core_259`, task 1003813 — who holds which module, at which version; the record install, update and the telemetry signals consult; it records ownership, never payment — area 8 owns money):
 
 ```

package/docs/file-map.md

@@ -169,6 +169,7 @@
 │       ├── linkify-refs.js      ← rewrite bare `#NNN` task refs across ALL docs → status-dashboard permalinks (stops GitHub's PR/issue autolinker mis-linking them); conservative classifier, token-free id list via /public/ref-ids; --apply / --check (CI gate: tests/linkify_check.mjs, in the required `unit` check) / --dry-run default ([#604](https://example.com/builders#/task/604), [#653](https://example.com/builders#/task/653)).
 │       ├── release.js           ← resolve claim as abandoned (`/builder-release`)
 │       ├── cost.js              ← log a cost entry (`/builder-cost`)
+│       ├── howto.js             ← the how-to guide for AI tools without hooks: `bongos howto moment <id>` prints + marks read the person's unread steps for a moment (task 1004635)
 │       ├── me.js                ← current builder profile + leaderboard
 │       ├── goal.js              ← goal board CLI: `list` (rollup per goal) + `show <id>` (criteria, tasks, waits-on, next claimable)
 │       ├── seed-v3-tasks.js     ← V3 Planning Session #1: 80 net-new GDS-V3 tasks (V3.R01–V3.R89) + 10 idea_inbox promotions; idempotent on source_ref
@@ -472,7 +473,7 @@ To install on a new machine, symlink each routine's directory under `~/.claude/s
 ├── rank-change-greeting.js   ← promotion/demotion greeting (V3.R28 #249); spawned by session-start.js, also runnable standalone
 ├── pull-memory.js            ← memory pull-on-session-start (V3.R56 #275); spawned by session-start.js (kill-switches: OTB_MEMORY_PULL_OFF / OTB_SUBAGENT)
 ├── recall-hints.js           ← SessionStart: when the session opens holding a claim, surface the top project-knowledge hits for that task via POST /api/bongos/search (#963/V4.R25, ADR 0060)
-├── conductor.js              ← UserPromptSubmit: MAS Conductor advisory + dispatch directive (#427/#439); self-gates on OTB_CONDUCTOR_OFF / OTB_SUBAGENT
+├── conductor.js              ← UserPromptSubmit: MAS Conductor advisory + dispatch directive (#427/#439); self-gates on OTB_CONDUCTOR_OFF / OTB_SUBAGENT; also delivers the how-to step for the moment and marks it read (task 1004635)
 ├── session-cards.js          ← UserPromptSubmit: deterministic delivery of READ-ONLY in-session cards (builder-start, status) — pre-renders the card + injects a one-step render directive (task 1288)
 ├── lifecycle-card.js         ← PostToolUse (Bash|PowerShell): deterministic delivery of MUTATING lifecycle cards (claim/ship/release) — the write-side mirror of session-cards.js (task 1288)
 ├── stuck-detector.js         ← PostToolUse + PostToolUseFailure (Bash|PowerShell): the third time one session hits the same wall — the same `[otb-plain]` card for the same task id, or the same red check — it injects ONE instruction: stop retrying, diagnose (path named), or /ask-for-help. Never blocks; silent with no card; kill-switch BONGOS_STUCK_DETECTOR_OFF=1 (task 1003990)

package/docs/module-api-changelog.md

@@ -3091,5 +3091,9 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.21.125 with no explicit bump. run 38761052564. (task 1002620)
   1.21.127 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.21.126 with no explicit bump. run 38764985266. (task 1002620)
+  1.21.128 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.21.127 with no explicit bump. run 38770118067. (task 1002620)
+  1.21.129 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.21.128 with no explicit bump. run 38773346540. (task 1002620)
 ---------------------------------------------------------------------------
 ```