@bongos/core 1.21.156 → 1.21.157

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.21.156",
-  "core_contract": "1.21.156",
-  "source_commit": "3d7b7e8778ed9bcaacf8542d339579e894aa7099",
+  "core_version": "1.21.157",
+  "core_contract": "1.21.157",
+  "source_commit": "93bcf1aad3e309875901549d239f182802ecb1a5",
   "source_ref": "HEAD",
-  "built_at": "2026-10-22T15:52:45.223Z",
+  "built_at": "2026-10-22T22:00:48.501Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 608,
     "agent_docs_stubbed": 28,
-    "functional_verbatim": 3171,
+    "functional_verbatim": 3173,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 3808,
-  "tree_sha256": "7f952b622d438b9624a1b7ad8e02147e56279a2b8c09de61927e8a76808f83ae",
+  "file_count": 3810,
+  "tree_sha256": "7208fdbac3ca1ecbfc01170ccff02b76309f064b711c6b28b8a7e97bfc452af4",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -317,12 +317,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "2d361dfb9ea239a086dbabdfbe44262e92f6d8766a4c1dce5a1ef26f5f758673"
+      "sha256": "8449ac9fed330290274a2809620f86ae24b41c15833c63dd4938eee434c9406b"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "4fcff1fd72a463f337666c75ae28c57390e85e2712e29b8c881e690f52fc6c5e"
+      "sha256": "7b8fb3eb7373d3dbb512d10db0d74c4524c375ba537546ad5d640b0121aecd50"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -332,17 +332,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "c565a985a24c027334eff2a53986ac7c12eee26402ef6f69bd82fdab4fbb0251"
+      "sha256": "131957a708245127065de48df70ac30f415a9e40bb5f7e8e89da04d0a2d25028"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "d581704400491b83af7e34ba1dcaac273fc64cba91408aff7260b1b8c2d83bc2"
+      "sha256": "da5faaa41094a05ac71f09706bae462a5507e7bea5b6faa1ac3963dbe47f3426"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "302078b7781b601dc23abfe5898c6f704a8678dd4594b1b8184cd4d33138ef7e"
+      "sha256": "db8c0c169a4b791270e17eea06fae7a9eb6d1f2aa518549fd93ffab10f61eb40"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -2382,12 +2382,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "ce9f1256a642ab30408d22cc5450aadcfd33bc7ddf9b31fd47b79c5d16403548"
+      "sha256": "53a65b64b100fe4c132fb0ff5e901e5ad8f566e68440563eb0ba36b5a354c8a0"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "9402cb974357bea192c8fd919a1f49cc6e8f514b9948705f37ef5dafebca1278"
+      "sha256": "1545ce6f2f92ca70568121874934ee58a84cbf46c4c93352566b3dc4c92a91d0"
     },
     {
       "path": "docs/architecture.md",
@@ -2412,12 +2412,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "7a18e2783ccdc44546b3577efd98e793879e310b8f5a6e51d87e04e647d1b015"
+      "sha256": "d43848124b1b26942360625f596a09c51d2343f35db2e625130ec500e41d6d72"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "94e12f1ff1a03a4181429dd9d2a97c999bc5b0d18e4f298249212fb658e4aa26"
+      "sha256": "eef0fb3a90caa69b82b9a79abc984a14f7f5845061dce00c5241f4e0283e6bba"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2927,12 +2927,12 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "169c14946a22af455117e50455b311b5e42325bcbc66dbdc2d71371038bf9973"
+      "sha256": "121987b73841075c24382367357b7cab66e45b8d46954442d3ea0f8104bef1ee"
     },
     {
       "path": "docs/modules-contract.md",
       "mode": "0000644",
-      "sha256": "4d0036450b55adc4539a9838f8478848e1cce16fa237b9207c10d08980a3d906"
+      "sha256": "fe1926592aa0572fdcb7fc0352f217762a54292bf8727825d75e2f6799020c13"
     },
     {
       "path": "docs/onboarding/diagrams/01-task-lifecycle.mmd",
@@ -3017,7 +3017,7 @@
     {
       "path": "docs/page-readings.json",
       "mode": "0000644",
-      "sha256": "41ba5190c331fb75c0278f01393ab3c8ababc43d6119b0d8a0b5c2940e243f07"
+      "sha256": "2931c4f99c185cf5075365526ef403967aedefcaeb5a9b2989348ff389836ab5"
     },
     {
       "path": "docs/project-context.template.md",
@@ -5027,7 +5027,7 @@
     {
       "path": "modules/government/catalog.js",
       "mode": "0000644",
-      "sha256": "1592e5e388887cfffc79c69be88e31728d2a44a0c7db70f6b262d2df551aba44"
+      "sha256": "11b32663404c1515f45ba3493816178c227b53ffac731ccbbd6d100232ba7d0b"
     },
     {
       "path": "modules/government/charter.js",
@@ -6162,12 +6162,12 @@
     {
       "path": "modules/hall-ui/public/modules.html",
       "mode": "0000644",
-      "sha256": "75a38104b51ea30550a616c8e709a3ec278bf153dedbd487acf89d247a61b19f"
+      "sha256": "fea68366593532e57e2ea9c989fa57df02778649ba3676ef5d7d453ebfab3311"
     },
     {
       "path": "modules/hall-ui/public/modules.js",
       "mode": "0000644",
-      "sha256": "6b5a48f2bb96e0478a7150265ded185e04d707b51f5ad7d3b813446115eb6142"
+      "sha256": "20b7ee56643f0a95946d93dce3b952f48889ac3f63530c24b8d35a629fed87d5"
     },
     {
       "path": "modules/hall-ui/public/modules.states.json",
@@ -6762,7 +6762,7 @@
     {
       "path": "modules/hall-ui/records/catalog.md",
       "mode": "0000644",
-      "sha256": "e760daf386c9e723843c573afcce713a1b18514684c57f58ad156f3a79d9b557"
+      "sha256": "d3911fb48be461f005561fb69af5ca1124af02db909b751fbe4c2bc98b301850"
     },
     {
       "path": "modules/hall-ui/records/collaboration.md",
@@ -10557,12 +10557,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "7f439214a55ba088bec415094c17fbbf247afa3230f2db5df63a8e10862e58e5"
+      "sha256": "46bee705e46ddb6956d2cf4309854febf36c941657839b8f90a2497fee8ebad0"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "87988ad8d59b6187df370e2c4a9cfa78f28004671c61a720a3b2b8f1850f4f05"
+      "sha256": "3f0a9053c50d3b2e53a7e407db5723204dab8ed240b2d286b264afc063ccf215"
     },
     {
       "path": "public-docs/index.html",
@@ -10582,7 +10582,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "2051714e1c10e7ddd0c66d6ac4e75d4a11d69b2b90145166d806c701f0316697"
+      "sha256": "70d9278d1e69d83e275f178ecd83f2c99dd3639a780851eeb3428063280ac326"
     },
     {
       "path": "scripts/cron/style_guide_audit.sh",
@@ -12719,6 +12719,11 @@
       "mode": "0000644",
       "sha256": "1e939e2e07fc71b6fcf1882cb18627e532103ec01a737406f77f8528190e6215"
     },
+    {
+      "path": "src/bongos/module-testing.js",
+      "mode": "0000644",
+      "sha256": "602867e5709ef0639d7dd4c370852a63a2fd629175d06007bb710b9be25c7336"
+    },
     {
       "path": "src/bongos/module-usage-reports.js",
       "mode": "0000644",
@@ -12772,7 +12777,7 @@
     {
       "path": "src/bongos/project-settings.js",
       "mode": "0000644",
-      "sha256": "987585cfc2938390248a1ea06e814ebcbf125e1b5cc688ea77efc92b3d9b22ae"
+      "sha256": "7cd49e347bfd029edffdaf7f3e99c487813f1e43bdbb6f77a9e3049bfe9ec444"
     },
     {
       "path": "src/bongos/repo-info.js",
@@ -12872,7 +12877,7 @@
     {
       "path": "src/bongos/routes/modules.js",
       "mode": "0000644",
-      "sha256": "051144a0c2235022e7e423b6a48c2203dadb8142dedfb57edbbf6c5ba69206bb"
+      "sha256": "32629fb4c71f974770e9f8e11f2ea9daf9a951520acd00857077e74b201e7126"
     },
     {
       "path": "src/bongos/routes/my-passkeys.js",
@@ -12962,7 +12967,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "b028e469726ba55278411dfb880db64783aafce1b930d197711bf7c64f5900e2"
+      "sha256": "0f74f86dd0e2c80f385d02a49a6713d34aea8f56af8685b1ee92cc9083d79f44"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -15467,7 +15472,7 @@
     {
       "path": "tests/hall_catalog_world.mjs",
       "mode": "0000644",
-      "sha256": "d209d00843af7bab570d02be627761913e03129c80f29f0c036235633b8085a9"
+      "sha256": "843039f4e14492045c94c9ce803d22208d0e68d607330da6391e56d75d4c8186"
     },
     {
       "path": "tests/hall_city.mjs",
@@ -16674,6 +16679,11 @@
       "mode": "0000644",
       "sha256": "328cf836fd45d28ddfc0630f86801037069396dc7cdd066181375ac3c3a81538"
     },
+    {
+      "path": "tests/module_testing.mjs",
+      "mode": "0000644",
+      "sha256": "5aefcc8840da42a300ab4319c09c2844a5f5814ab137f4690b17c31f77335e74"
+    },
     {
       "path": "tests/module_toggle_restart.mjs",
       "mode": "0000644",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 565 operations across 76 resource groups
+- 568 operations across 76 resource groups
 
 ## Use it from your project
 

package/clients/bongos-client/bongos-client.global.js

@@ -833,10 +833,16 @@ function createClient(opts = {}) {
       getModules: (args) => request("GET", "/modules", { hasBody: false }, args),
       // POST /modules/{key}/enable — rank: metic+archon — POST /modules/:key/enable
       postModulesKeyEnable: (args) => request("POST", "/modules/{key}/enable", { hasBody: true }, args),
+      // POST /modules/{key}/general-only — rank: metic+archon — POST /modules/:key/general-only
+      postModulesKeyGeneralOnly: (args) => request("POST", "/modules/{key}/general-only", { hasBody: true }, args),
       // POST /modules/{key}/submit — rank: metic+archon — POST /modules/:key/submit
       postModulesKeySubmit: (args) => request("POST", "/modules/{key}/submit", { hasBody: true }, args),
       // GET /modules/submissions — rank: metic+archon — GET /modules/submissions
       getModulesSubmissions: (args) => request("GET", "/modules/submissions", { hasBody: false }, args),
+      // GET /modules/testing — rank: any-builder — GET /modules/testing
+      getModulesTesting: (args) => request("GET", "/modules/testing", { hasBody: false }, args),
+      // POST /modules/testing — rank: metic+archon — POST /modules/testing
+      postModulesTesting: (args) => request("POST", "/modules/testing", { hasBody: true }, args),
     },
     "moving": {
       // GET /moving — rank: any-builder — GET /moving

package/clients/bongos-client/index.cjs

@@ -832,10 +832,16 @@ function createClient(opts = {}) {
       getModules: (args) => request("GET", "/modules", { hasBody: false }, args),
       // POST /modules/{key}/enable — rank: metic+archon — POST /modules/:key/enable
       postModulesKeyEnable: (args) => request("POST", "/modules/{key}/enable", { hasBody: true }, args),
+      // POST /modules/{key}/general-only — rank: metic+archon — POST /modules/:key/general-only
+      postModulesKeyGeneralOnly: (args) => request("POST", "/modules/{key}/general-only", { hasBody: true }, args),
       // POST /modules/{key}/submit — rank: metic+archon — POST /modules/:key/submit
       postModulesKeySubmit: (args) => request("POST", "/modules/{key}/submit", { hasBody: true }, args),
       // GET /modules/submissions — rank: metic+archon — GET /modules/submissions
       getModulesSubmissions: (args) => request("GET", "/modules/submissions", { hasBody: false }, args),
+      // GET /modules/testing — rank: any-builder — GET /modules/testing
+      getModulesTesting: (args) => request("GET", "/modules/testing", { hasBody: false }, args),
+      // POST /modules/testing — rank: metic+archon — POST /modules/testing
+      postModulesTesting: (args) => request("POST", "/modules/testing", { hasBody: true }, args),
     },
     "moving": {
       // GET /moving — rank: any-builder — GET /moving

package/clients/bongos-client/index.d.ts

@@ -453,8 +453,10 @@ export interface PostMingleRoundRequest { limit?: number }
 export interface PostMingleRoundResponse { paired: unknown; count: unknown; skipped: unknown }
 export interface PostModulesKeyEnableRequest { enabled?: unknown }
 export interface PostModulesKeyEnableResponse { ok: boolean; key: unknown; enabled: unknown; effective: unknown; source: unknown; restart_pending: unknown; note: unknown }
+export interface PostModulesKeyGeneralOnlyRequest { general_only: boolean }
 export interface PostModulesKeySubmitRequest { signed_by?: string }
 export interface PostModulesKeySubmitResponse { ok: boolean; submission: unknown }
+export interface PostModulesTestingRequest { tester: boolean }
 export interface PostMyProjectsClientIdLeaveResponse { ok: boolean; left: unknown }
 export interface PostMyProjectsInvitesClientIdDeclineResponse { ok: boolean; accepted: boolean }
 export interface PostMyProjectsJoinRequest { origin: string; note?: string; guild?: string }
@@ -1370,10 +1372,16 @@ export interface BongosClient {
     getModules(args?: RequestArgs): Promise<GetModulesResponse>;
     /** POST /modules/{key}/enable — rank: metic+archon */
     postModulesKeyEnable(args?: RequestArgs & { body?: PostModulesKeyEnableRequest }): Promise<PostModulesKeyEnableResponse>;
+    /** POST /modules/{key}/general-only — rank: metic+archon */
+    postModulesKeyGeneralOnly(args: RequestArgs & { body: PostModulesKeyGeneralOnlyRequest }): Promise<ApiResponse>;
     /** POST /modules/{key}/submit — rank: metic+archon */
     postModulesKeySubmit(args?: RequestArgs & { body?: PostModulesKeySubmitRequest }): Promise<PostModulesKeySubmitResponse>;
     /** GET /modules/submissions — rank: metic+archon */
     getModulesSubmissions(args?: RequestArgs): Promise<GetModulesSubmissionsResponse>;
+    /** GET /modules/testing — rank: any-builder */
+    getModulesTesting(args?: RequestArgs): Promise<ApiResponse>;
+    /** POST /modules/testing — rank: metic+archon */
+    postModulesTesting(args: RequestArgs & { body: PostModulesTestingRequest }): Promise<ApiResponse>;
   };
   "moving": {
     /** GET /moving — rank: any-builder */

package/clients/bongos-client/index.mjs

@@ -829,10 +829,16 @@ export function createClient(opts = {}) {
       getModules: (args) => request("GET", "/modules", { hasBody: false }, args),
       // POST /modules/{key}/enable — rank: metic+archon — POST /modules/:key/enable
       postModulesKeyEnable: (args) => request("POST", "/modules/{key}/enable", { hasBody: true }, args),
+      // POST /modules/{key}/general-only — rank: metic+archon — POST /modules/:key/general-only
+      postModulesKeyGeneralOnly: (args) => request("POST", "/modules/{key}/general-only", { hasBody: true }, args),
       // POST /modules/{key}/submit — rank: metic+archon — POST /modules/:key/submit
       postModulesKeySubmit: (args) => request("POST", "/modules/{key}/submit", { hasBody: true }, args),
       // GET /modules/submissions — rank: metic+archon — GET /modules/submissions
       getModulesSubmissions: (args) => request("GET", "/modules/submissions", { hasBody: false }, args),
+      // GET /modules/testing — rank: any-builder — GET /modules/testing
+      getModulesTesting: (args) => request("GET", "/modules/testing", { hasBody: false }, args),
+      // POST /modules/testing — rank: metic+archon — POST /modules/testing
+      postModulesTesting: (args) => request("POST", "/modules/testing", { hasBody: true }, args),
     },
     "moving": {
       // GET /moving — rank: any-builder — GET /moving

package/docs/api/openapi.json

@@ -15518,6 +15518,80 @@
         ]
       }
     },
+    "/modules/testing": {
+      "get": {
+        "operationId": "get_modules_testing",
+        "tags": [
+          "modules"
+        ],
+        "summary": "GET /modules/testing",
+        "description": "Testing new module versions first (task 1003802, ADR 0344 D1): whether THIS project gets tester-channel versions, and which modules it keeps on general. A read anyone signed in can make: the switch is meant to be visible. rank: any-builder — a read of this project's own setting; nothing changes.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "src/bongos/routes/modules.js",
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      },
+      "post": {
+        "operationId": "post_modules_testing",
+        "tags": [
+          "modules"
+        ],
+        "summary": "POST /modules/testing",
+        "description": "the project's admin volunteers the whole project, so it takes the same permission that chooses which modules this project runs (module.enable): a builder cannot opt in a project they cannot run modules for.\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `module.enable` (all required).",
+        "x-rank": "metic+archon",
+        "x-source": "src/bongos/routes/modules.js",
+        "x-permissions": [
+          "module.enable"
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostModulesTestingRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/modules/{key}/enable": {
       "post": {
         "operationId": "post_modules_key_enable",
@@ -15584,6 +15658,65 @@
         ]
       }
     },
+    "/modules/{key}/general-only": {
+      "post": {
+        "operationId": "post_modules_key_general_only",
+        "tags": [
+          "modules"
+        ],
+        "summary": "POST /modules/:key/general-only",
+        "description": "same reasoning as POST /modules/testing: which versions a module arrives in is part of choosing the modules this project runs.\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `module.enable` (all required).",
+        "x-rank": "metic+archon",
+        "x-source": "src/bongos/routes/modules.js",
+        "x-permissions": [
+          "module.enable"
+        ],
+        "parameters": [
+          {
+            "name": "key",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `key`."
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostModulesKeyGeneralOnlyRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/modules/{key}/submit": {
       "post": {
         "operationId": "post_modules_key_submit",
@@ -33149,6 +33282,18 @@
           "note"
         ]
       },
+      "PostModulesKeyGeneralOnlyRequest": {
+        "type": "object",
+        "properties": {
+          "general_only": {
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "general_only"
+        ],
+        "additionalProperties": false
+      },
       "PostModulesKeySubmitRequest": {
         "type": "object",
         "properties": {
@@ -33172,6 +33317,18 @@
           "submission"
         ]
       },
+      "PostModulesTestingRequest": {
+        "type": "object",
+        "properties": {
+          "tester": {
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "tester"
+        ],
+        "additionalProperties": false
+      },
       "PostMyProjectsClientIdLeaveResponse": {
         "type": "object",
         "properties": {
@@ -36042,8 +36199,8 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 565,
-  "x-schema-count": 604,
+  "x-endpoint-count": 568,
+  "x-schema-count": 606,
   "x-undocumented-bodies": 12,
   "x-response-schemas": 396,
   "x-generated-by": "scripts/gds/gen-api-docs.js"

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 565 endpoints across 96 route files.
+> **Generated from the live route files** — the route file is authoritative. 568 endpoints across 96 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust-boundary-server-enforced-permissions.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -567,14 +567,17 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | PUT | `/api/bongos/mingle/project` | `metic+archon` | `enabled` | perm: mingle.manage (floor metic) — see the header. |
 | POST | `/api/bongos/mingle/round` | `metic+archon` | `limit` | perm: mingle.manage — running a round writes introductions for other people, so it is an operator action rather than something a builder … |
 
-## `modules` (4)
+## `modules` (7)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
 | GET | `/api/bongos/modules` | `any-builder` | — | list every on-disk module with attribution + provenance (same read gate as the atlas/primer pages). |
 | POST | `/api/bongos/modules/:key/enable` | `metic+archon` | `enabled` | toggling a module changes running behavior for the whole instance, not just the caller. |
+| POST | `/api/bongos/modules/:key/general-only` | `metic+archon` | `general_only` | same reasoning as POST /modules/testing: which versions a module arrives in is part of choosing the modules this project runs. |
 | POST | `/api/bongos/modules/:key/submit` | `metic+archon` | `signed_by` | POST /api/bongos/modules/:key/submit — ADR 0107 §1 upstreaming submission. |
 | GET | `/api/bongos/modules/submissions` | `metic+archon` | — | GET /api/bongos/modules/submissions?status=&module_key= — the upstreaming review queue (task 1771 reads this). |
+| GET | `/api/bongos/modules/testing` | `any-builder` | — | Testing new module versions first (task 1003802, ADR 0344 D1): whether THIS project gets tester-channel versions, and which modules it ke… |
+| POST | `/api/bongos/modules/testing` | `metic+archon` | `tester` | the project's admin volunteers the whole project, so it takes the same permission that chooses which modules this project runs (module.en… |
 
 ## `moving` (1)