@bongos/core 1.21.174 → 1.21.176

package/docs/api/openapi.json

@@ -7,7 +7,7 @@
       "name": "AGPL-3.0-or-later",
       "url": "https://www.gnu.org/licenses/agpl-3.0.html"
     },
-    "description": "The Bongos API — the build-methodology backend\n(builders, tasks, claims, credits, grading, memory).\n\n**API version:** `v1` — served at `/api/bongos/v1`. The\nunversioned `/api/bongos` and legacy `/api/gds` are permanent aliases\npinned to this version; pin to `/api/bongos/v1` for a stable\ncontract (breaking changes ship a new `/vN`, ADR 0117). This is the\nCONTRACT version, distinct from the package build in `info.version`.\n\n**Base path:** `/api/bongos` (every path below is relative to it).\n\n**Auth:** a builder session — the `gds_session` cookie (web) or\n`Authorization: Bearer <token>` (CLI). **Ranks** gate writes and are\nenforced server-side per request, never cached (ADR 0016):\n`public` < `any-builder` < `metic+archon` < `archon`.\nEach operation carries its required rank in `x-rank`.\n\nGenerated from the live route files by `scripts/gds/gen-api-docs.js` —\ndo not hand-edit; it regenerates on every ship."
+    "description": "The Bongos API — the build-methodology backend\n(builders, tasks, claims, credits, grading, memory).\n\n**API version:** `v1` — served at `/api/bongos/v1`. The\nunversioned `/api/bongos` and legacy `/api/gds` are permanent aliases\npinned to this version; pin to `/api/bongos/v1` for a stable\ncontract (breaking changes ship a new `/vN`, ADR 0117). This is the\nCONTRACT version, distinct from the package build in `info.version`.\n\n**Base path:** `/api/bongos` (every path below is relative to it).\n\n**Auth:** a builder session — the `gds_session` cookie (web) or\n`Authorization: Bearer <token>` (CLI). **Ranks** gate writes and are\nenforced server-side per request, never cached (ADR 0016):\n`public` < `any-builder` < `metic+archon` < `archon`.\nEach operation carries its required rank in `x-rank`.\n\nGenerated from the live route files by `scripts/bongos/gen-api-docs.js` —\ndo not hand-edit; it regenerates on every ship."
   },
   "x-api-version": "v1",
   "servers": [
@@ -257,6 +257,10 @@
       "name": "public",
       "description": "Endpoints under `/api/bongos/public`."
     },
+    {
+      "name": "raise",
+      "description": "Endpoints under `/api/bongos/raise`."
+    },
     {
       "name": "removal-proposals",
       "description": "Endpoints under `/api/bongos/removal-proposals`."
@@ -3308,6 +3312,72 @@
         ]
       }
     },
+    "/builders/{id}/tester": {
+      "patch": {
+        "operationId": "patch_builders_id_tester",
+        "tags": [
+          "builders"
+        ],
+        "summary": "PATCH /builders/:id/tester",
+        "description": "PATCH /builders/:id/tester — mark or unmark an account as a tester (task 1004845). Body: { is_tester: boolean }. A tester keeps everything it has and only drops out of the public leaderboard and the any-builder directory, so an account that exists to try the product need not be merged or archived to stay off the lists. Refuses your own account (403 cannot_change_own_tester, as PATCH /status does) and a machine principal (403 target_is_system_principal). rank: archon — changes who the public lists show. Gate: requirePermission('builder.status.set'), the same atom as deactivating an account.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `builder.status.set` (all required).",
+        "x-rank": "archon",
+        "x-source": "src/bongos/routes/builders.js",
+        "x-permissions": [
+          "builder.status.set"
+        ],
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PatchBuildersIdTesterRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PatchBuildersIdTesterResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/claims": {
       "post": {
         "operationId": "post_claims",
@@ -4888,6 +4958,72 @@
         ]
       }
     },
+    "/copy-desk/pages/{pageId}/release": {
+      "post": {
+        "operationId": "post_copy_desk_pages_pageId_release",
+        "tags": [
+          "copy-desk"
+        ],
+        "summary": "POST /copy-desk/pages/:pageId/release",
+        "description": "POST /copy-desk/pages/:pageId/release — release a page round the reads cannot name: back to the /tweak queue with a note when it still holds its batch, otherwise closed so the page can start fresh. Metic and up; body { note, task_id? }.\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `task.abandon` (all required).",
+        "x-rank": "metic+archon",
+        "x-source": "modules/copy-desk/routes/copy-desk-release.js",
+        "x-permissions": [
+          "task.abandon"
+        ],
+        "parameters": [
+          {
+            "name": "pageId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `pageId`."
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostCopyDeskPagesPageIdReleaseRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostCopyDeskPagesPageIdReleaseResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/copy-desk/pages/{pageId}/send-back": {
       "post": {
         "operationId": "post_copy_desk_pages_pageId_send_back",
@@ -5015,7 +5151,7 @@
           "copy-desk"
         ],
         "summary": "POST /copy-desk/proposals",
-        "description": "------------------------------------------------------------------------- POST /copy-desk/proposals — an artist proposes new wording, and it becomes a TASK (task 1003114 / R03 of goal 1000074). Body: { string_id, proposed_text, why, file?, line?, flag_id? } rank: any signed-in builder — the same floor as filing, for the same reason (an artist is a craft, not a rank; see the header). THIS IS THE ROUTE THE NON-GOAL IS ABOUT, so read what it does NOT do. It writes no file. It stores no wording in any table of this module — ADR 0178 §3 pins that copy_desk_flags can never hold replacement text, and this route's whole design is what makes that pin survivable rather than merely strict. What it produces is a TASK carrying a patch, in the ledger every change already has to pass through, which nothing renders from. The wording reaches a person only after somebody claims that task, runs `node scripts/gds/copy-apply.js --task <id>`, and ships the resulting diff through the normal pipeline with the grader reading it. The shape is borrowed, not invented: it is `adapter.export()` from the design half (ADR 0081) applied to text. See modules/copy-desk/proposals.js. -------------------------------------------------------------------------\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "description": "------------------------------------------------------------------------- POST /copy-desk/proposals — an artist proposes new wording, and it becomes a TASK (task 1003114 / R03 of goal 1000074). Body: { string_id, proposed_text, why, file?, line?, flag_id? } rank: any signed-in builder — the same floor as filing, for the same reason (an artist is a craft, not a rank; see the header). THIS IS THE ROUTE THE NON-GOAL IS ABOUT, so read what it does NOT do. It writes no file. It stores no wording in any table of this module — ADR 0178 §3 pins that copy_desk_flags can never hold replacement text, and this route's whole design is what makes that pin survivable rather than merely strict. What it produces is a TASK carrying a patch, in the ledger every change already has to pass through, which nothing renders from. The wording reaches a person only after somebody claims that task, runs `node scripts/bongos/copy-apply.js --task <id>`, and ships the resulting diff through the normal pipeline with the grader reading it. The shape is borrowed, not invented: it is `adapter.export()` from the design half (ADR 0081) applied to text. See modules/copy-desk/proposals.js. -------------------------------------------------------------------------\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
         "x-source": "modules/copy-desk/routes/copy-desk.js",
         "requestBody": {
@@ -12027,6 +12163,44 @@
         ]
       }
     },
+    "/inbox/votes": {
+      "get": {
+        "operationId": "get_inbox_votes",
+        "tags": [
+          "inbox"
+        ],
+        "summary": "GET /inbox/votes",
+        "description": "single idea read for the \"#NNN\" deep-link resolver (task 1047). Mirrors GET /blockers/:id. The hall resolves /#/idea/N by id, but the /inbox LIST returns only the open-first-50, so a closed/older idea ref would dead-end at a \"no such idea\" card. getIdea() reads any idea by id. Authed: a logged-out resolve hits the hall's softAuth \"sign in\" card, so no idea text is exposed publicly (the linked refs are public, the bodies aren't). GET /inbox/votes?ids=1,2,3 — net votes and the caller's own vote for every idea row on a page, in one call, for the hall's shared list vote control (vote-control.js, task 1004727): { votes: { [id]: { net, mine } } }. Declared above /inbox/:id. At most 200 ids.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/ideas/routes/inbox.js",
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetInboxVotesResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/inbox/{id}": {
       "get": {
         "operationId": "get_inbox_id",
@@ -12034,7 +12208,7 @@
           "inbox"
         ],
         "summary": "GET /inbox/:id",
-        "description": "single idea read for the \"#NNN\" deep-link resolver (task 1047). Mirrors GET /blockers/:id. The hall resolves /#/idea/N by id, but the /inbox LIST returns only the open-first-50, so a closed/older idea ref would dead-end at a \"no such idea\" card. getIdea() reads any idea by id. Authed: a logged-out resolve hits the hall's softAuth \"sign in\" card, so no idea text is exposed publicly (the linked refs are public, the bodies aren't).\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "description": "**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
         "x-source": "modules/ideas/routes/inbox.js",
         "parameters": [
@@ -12538,6 +12712,65 @@
         ]
       }
     },
+    "/inbox/{id}/vote": {
+      "post": {
+        "operationId": "post_inbox_id_vote",
+        "tags": [
+          "inbox"
+        ],
+        "summary": "POST /inbox/:id/vote",
+        "description": "POST /inbox/:id/vote { vote: 1 | -1 | 0 } — a karma vote on an idea (task 1004727). Earns karma for the idea's SUBMITTER through the same weekly fold as task votes, after the same 7-day lag, weighing the same (owner, 2026-10-23). The same guards as POST /tasks/:id/vote: Metic+ by default, via its own idea.vote permission (task 1004834; seeded wherever task.vote is), 403 on your own idea, 409 once the vote has been folded into karma; 0 clears an untallied vote. rank: metic+archon — a trusted-builder reputation action.\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `idea.vote` (all required).",
+        "x-rank": "metic+archon",
+        "x-source": "modules/ideas/routes/inbox.js",
+        "x-permissions": [
+          "idea.vote"
+        ],
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostInboxIdVoteRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/instance": {
       "get": {
         "operationId": "get_instance",
@@ -12814,7 +13047,7 @@
           "me"
         ],
         "summary": "GET /me",
-        "description": "PMS-V2 task 188: response now also carries `unlocked` (server-joined achievement metadata) + `locked_with_progress` (server-computed human-readable progress hint per locked achievement) so the /builders UI can render achievements without a follow-up API call. Additive only — existing keys preserved for back-compat with scripts/gds/me.js and the /builders web client. V3.R24 (task 244): the `builder` payload now carries `karma` (migration 040 added the column + karma_log table). The field is surfaced by db.getBuilderById() — no shape change here, just documenting that the /api/bongos/me response is the canonical place clients read karma from. rank: any-builder — own identity + own contributions; preserved per CRITICAL §4.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "description": "PMS-V2 task 188: response now also carries `unlocked` (server-joined achievement metadata) + `locked_with_progress` (server-computed human-readable progress hint per locked achievement) so the /builders UI can render achievements without a follow-up API call. Additive only — existing keys preserved for back-compat with scripts/bongos/me.js and the /builders web client. V3.R24 (task 244): the `builder` payload now carries `karma` (migration 040 added the column + karma_log table). The field is surfaced by db.getBuilderById() — no shape change here, just documenting that the /api/bongos/me response is the canonical place clients read karma from. rank: any-builder — own identity + own contributions; preserved per CRITICAL §4.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
         "x-source": "src/bongos/routes/me.js",
         "responses": {
@@ -14330,7 +14563,7 @@
           "me"
         ],
         "summary": "GET /me/recent-ships",
-        "description": "Tasks this builder has shipped, most recent first. ?limit=all returns every shipped task for this builder (the /builders UI uses this to render the full \"Works Wrought by Thy Hand\" ledger). Numeric limits are clamped to 1..500. rank: any-builder — own shipped-task ledger.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "description": "Tasks this builder has shipped, most recent first, plus `total` — how many there are in all. Numeric limits are clamped to 1..500. Home asks for a handful and shows `total` as its count (task 1004854: it used to download the whole history on every load and live refresh, and each row carries a per-session credits subquery). ?limit=all returns every shipped task; only the Accomplishments ledger asks for it, and only when that view is open. rank: any-builder — own shipped-task ledger.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
         "x-source": "src/bongos/routes/me.js",
         "responses": {
@@ -14665,7 +14898,7 @@
           "me"
         ],
         "summary": "GET /me/sound-prefs",
-        "description": "Per-builder per-sound on/off preferences (V3.R91 / task 786, migration 075). The toggle list shows every sound from sound-prefs.KNOWN_SOUNDS with its label/description, system default (ON), the builder's override if any, and the effective enabled-state. The local player (.claude/sounds/play.js) reads a mirror of these prefs written by scripts/gds/fetch-sound-prefs.js at session start — this endpoint is the source of truth. rank: any-builder — own profile config; mirrors the skill-prefs route.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "description": "Per-builder per-sound on/off preferences (V3.R91 / task 786, migration 075). The toggle list shows every sound from sound-prefs.KNOWN_SOUNDS with its label/description, system default (ON), the builder's override if any, and the effective enabled-state. The local player (.claude/sounds/play.js) reads a mirror of these prefs written by scripts/bongos/fetch-sound-prefs.js at session start — this endpoint is the source of truth. rank: any-builder — own profile config; mirrors the skill-prefs route.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
         "x-source": "modules/builder-settings/routes/settings.js",
         "responses": {
@@ -18271,7 +18504,7 @@
           "provisioning"
         ],
         "summary": "POST /provisioning/instances/:id/core-upgrade",
-        "description": "POST /provisioning/instances/:id/core-upgrade — move the core pin. rank: `core.pin.move` — archon floor AND system:true, so the catalog's own invariant forbids granting it to metic and no custom rank can be handed it without a deliberate, visible edit. BV1.R105 / ADR 0151 is why this is an atom and not `requireRank`: tests/government_require_permission.mjs fails the build on a new requireRank in a modules/*/routes gate. OR THE PROJECT'S OWN OWNER (task 1004174, ADR 0339 — the owner's ruling that only a project's owner upgrades it). Ownership of a TENANT row is asked first; any other caller meets the unmodified `core.pin.move` gate and its unchanged refusal. The platform's own row is not an owner's to move here — it stays on the atom. Body: { to: \"1.19.757\" } — and requiring it IS the second step of the two-step the owner asked for (ADR 0293 D4). A request that cannot fire without naming its target cannot fire from a stray click, and \"move to whatever is newest\", resolved at drain time, would be a different act from the one previewed: main moves between the preview and the confirm. What this does NOT check: whether the version is PUBLISHED, and whether the channel policy admits it. Both need the registry, and the only tool that reads it (update-channel.js `listAvailableVersions`) shells out synchronously — it would block the event loop for every other request on this process. It also lives in scripts/gds/, which a module may not require (ADR 0083). The runner enforces both, where it is a CLI and both are free. See ../core-upgrade.js.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `core.pin.move` (all required).",
+        "description": "POST /provisioning/instances/:id/core-upgrade — move the core pin. rank: `core.pin.move` — archon floor AND system:true, so the catalog's own invariant forbids granting it to metic and no custom rank can be handed it without a deliberate, visible edit. BV1.R105 / ADR 0151 is why this is an atom and not `requireRank`: tests/government_require_permission.mjs fails the build on a new requireRank in a modules/*/routes gate. OR THE PROJECT'S OWN OWNER (task 1004174, ADR 0339 — the owner's ruling that only a project's owner upgrades it). Ownership of a TENANT row is asked first; any other caller meets the unmodified `core.pin.move` gate and its unchanged refusal. The platform's own row is not an owner's to move here — it stays on the atom. Body: { to: \"1.19.757\" } — and requiring it IS the second step of the two-step the owner asked for (ADR 0293 D4). A request that cannot fire without naming its target cannot fire from a stray click, and \"move to whatever is newest\", resolved at drain time, would be a different act from the one previewed: main moves between the preview and the confirm. What this does NOT check: whether the version is PUBLISHED, and whether the channel policy admits it. Both need the registry, and the only tool that reads it (update-channel.js `listAvailableVersions`) shells out synchronously — it would block the event loop for every other request on this process. It also lives in scripts/bongos/, which a module may not require (ADR 0083). The runner enforces both, where it is a CLI and both are free. See ../core-upgrade.js.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `core.pin.move` (all required).",
         "x-rank": "archon",
         "x-source": "modules/provisioning/routes/core-upgrade.js",
         "x-permissions": [
@@ -19718,7 +19951,7 @@
           "provisioning"
         ],
         "summary": "GET /provisioning/onboard-plan",
-        "description": "GET /provisioning/onboard-plan?mode=greenfield|adopt&domain=<host> — the CANONICAL onboarding step sequence (task 2085; goal 35 / criterion 165: \"the canonical step sequence is the source of truth; skill/CLI/hall are forms over it\"). The hub's ?view=new wizard fetches it so its human-steps checklist can't drift from the CLI's (scripts/gds/onboard.js reads the same modules/provisioning/onboard-plan.js). `domain` relabels the terminal enter-hall step with the instance's own hall address (task 1002703); a non-hostname is dropped — clients render these labels, so unvalidated input must never be echoed back. rank: public — the signed-out hub wizard (/projects?view=new) reads it; it is the same public runbook the /new-project skill documents (no write, no secret).\n\n**Rank:** `public` — No authentication — any caller.",
+        "description": "GET /provisioning/onboard-plan?mode=greenfield|adopt&domain=<host> — the CANONICAL onboarding step sequence (task 2085; goal 35 / criterion 165: \"the canonical step sequence is the source of truth; skill/CLI/hall are forms over it\"). The hub's ?view=new wizard fetches it so its human-steps checklist can't drift from the CLI's (scripts/bongos/onboard.js reads the same modules/provisioning/onboard-plan.js). `domain` relabels the terminal enter-hall step with the instance's own hall address (task 1002703); a non-hostname is dropped — clients render these labels, so unvalidated input must never be echoed back. rank: public — the signed-out hub wizard (/projects?view=new) reads it; it is the same public runbook the /new-project skill documents (no write, no secret).\n\n**Rank:** `public` — No authentication — any caller.",
         "x-rank": "public",
         "x-source": "modules/provisioning/routes/provisioning.js",
         "responses": {
@@ -20281,7 +20514,7 @@
           "public"
         ],
         "summary": "GET /public/ref-ids",
-        "description": "The id allow-list the doc-ref linkifier (scripts/gds/linkify-refs.js) and its CI gate consult to decide which bare \"#NNN\" are real references worth rewriting — and to WHICH resolver (task 629: task vs idea vs blocker, since the hall resolves /#/task/N, /#/idea/N, /#/blocker/N). IDs only — no titles or bodies — so it exposes nothing beyond what a number already implies, and it needs no builder token (so CI can call it). Cached longer than the live feeds: the id sets grow slowly and a few minutes of staleness only delays linkifying a brand-new reference. `tasks` stays the first key for back-compat with the pre-task 629 linkifier shape. rank: public — task/idea/blocker id allow-lists for the linkifier + CI gate.\n\n**Rank:** `public` — No authentication — any caller.",
+        "description": "The id allow-list the doc-ref linkifier (scripts/bongos/linkify-refs.js) and its CI gate consult to decide which bare \"#NNN\" are real references worth rewriting — and to WHICH resolver (task 629: task vs idea vs blocker, since the hall resolves /#/task/N, /#/idea/N, /#/blocker/N). IDs only — no titles or bodies — so it exposes nothing beyond what a number already implies, and it needs no builder token (so CI can call it). Cached longer than the live feeds: the id sets grow slowly and a few minutes of staleness only delays linkifying a brand-new reference. `tasks` stays the first key for back-compat with the pre-task 629 linkifier shape. rank: public — task/idea/blocker id allow-lists for the linkifier + CI gate.\n\n**Rank:** `public` — No authentication — any caller.",
         "x-rank": "public",
         "x-source": "src/bongos/routes/public.js",
         "responses": {
@@ -20309,7 +20542,7 @@
           "public"
         ],
         "summary": "GET /public/repo-health",
-        "description": "V3.R91 task 352: repo-health substrate. Latest daily snapshot from repo_health_snapshots (written by scripts/gds/repo-metrics.js) + a small trailing trend so the status page can draw LOC / dead-exports / stale- branch lines over time. Same auth-free + cached + JSON-shape contract as the other public surfaces above. `?days=N` (1..90, default 30) sizes the trend window. rank: public — repo-health substrate (LOC, dead exports, stale branches).\n\n**Rank:** `public` — No authentication — any caller.",
+        "description": "V3.R91 task 352: repo-health substrate. Latest daily snapshot from repo_health_snapshots (written by scripts/bongos/repo-metrics.js) + a small trailing trend so the status page can draw LOC / dead-exports / stale- branch lines over time. Same auth-free + cached + JSON-shape contract as the other public surfaces above. `?days=N` (1..90, default 30) sizes the trend window. rank: public — repo-health substrate (LOC, dead exports, stale branches).\n\n**Rank:** `public` — No authentication — any caller.",
         "x-rank": "public",
         "x-source": "src/bongos/routes/public.js",
         "responses": {
@@ -20400,14 +20633,14 @@
         "security": []
       }
     },
-    "/public/uptime": {
+    "/public/versions": {
       "get": {
-        "operationId": "get_public_uptime",
+        "operationId": "get_public_versions",
         "tags": [
           "public"
         ],
-        "summary": "GET /public/uptime",
-        "description": "Uptime: current status + 90-day history bucketed by hour. Returns per-service: current_status, uptime_pct_90d, history (array of { hour: ISO string, up: n, total: n } for the last 90*24 hours). rank: public — uptime feed (90-day hourly history).\n\n**Rank:** `public` — No authentication — any caller.",
+        "summary": "GET /public/versions",
+        "description": "read-only surface for the status dashboard (status.<apex>).\n\n**Rank:** `public` — No authentication — any caller.",
         "x-rank": "public",
         "x-source": "src/bongos/routes/public.js",
         "responses": {
@@ -20416,7 +20649,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/GetPublicUptimeResponse"
+                  "$ref": "#/components/schemas/GetPublicVersionsResponse"
                 }
               }
             }
@@ -20428,29 +20661,121 @@
         "security": []
       }
     },
-    "/public/versions": {
-      "get": {
-        "operationId": "get_public_versions",
+    "/raise/edit": {
+      "post": {
+        "operationId": "post_raise_edit",
         "tags": [
-          "public"
+          "raise"
         ],
-        "summary": "GET /public/versions",
-        "description": "read-only surface for the status dashboard (status.<apex>).\n\n**Rank:** `public` — No authentication — any caller.",
+        "summary": "POST /raise/edit",
+        "description": "Any active builder may edit (owner, 2026-10-25) — requireRank at the lowest rank is \"signed in and active\", with the full deny gates of requireBuilder. The custom header + JSON body mean a form on another site cannot submit it.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/raise/routes/raise.js",
+        "requestBody": {
+          "required": false,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostRaiseEditRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostRaiseEditResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/raise/enter": {
+      "post": {
+        "operationId": "post_raise_enter",
+        "tags": [
+          "raise"
+        ],
+        "summary": "POST /raise/enter",
+        "description": "the investor sign-in: an authentication entry point gated by the shared password itself (scrypt-checked, attempts limited per address).\n\n**Rank:** `public` — No authentication — any caller.",
         "x-rank": "public",
-        "x-source": "src/bongos/routes/public.js",
+        "x-source": "modules/raise/routes/raise.js",
+        "requestBody": {
+          "required": false,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostRaiseEnterRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          }
+        },
+        "security": []
+      }
+    },
+    "/raise/interest": {
+      "post": {
+        "operationId": "post_raise_interest",
+        "tags": [
+          "raise"
+        ],
+        "summary": "POST /raise/interest",
+        "description": "a signed-in INVESTOR's non-binding indication; investors are not builders, so the gate is the raise session cookie, checked here.\n\n**Rank:** `public` — No authentication — any caller.",
+        "x-rank": "public",
+        "x-source": "modules/raise/routes/raise.js",
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostRaiseInterestRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
         "responses": {
           "200": {
             "description": "Success.",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/GetPublicVersionsResponse"
+                  "$ref": "#/components/schemas/PostRaiseInterestResponse"
                 }
               }
             }
           },
           "400": {
-            "$ref": "#/components/responses/BadRequest"
+            "$ref": "#/components/responses/ValidationFailed"
           }
         },
         "security": []
@@ -23543,6 +23868,51 @@
         ]
       }
     },
+    "/store/modules/{key}/listing": {
+      "get": {
+        "operationId": "get_store_modules_key_listing",
+        "tags": [
+          "store"
+        ],
+        "summary": "GET /store/modules/:key/listing",
+        "description": "GET /api/bongos/store/modules/:key/listing — whether one module is in the catalog and why (task 1003810): the reason in a sentence, what would change it, and its parts reading, weakest first. Judges the newest version, as the catalog does (readListing in module-listing.js), so an author held below the floor is never left guessing. What the Security gate found is shown to the author only. rank: any-builder — the same public store metadata the catalog and the channel read show; nothing changed, no entitlement taken.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "src/bongos/routes/modules.js",
+        "parameters": [
+          {
+            "name": "key",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `key`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/store/modules/{key}/versions": {
       "post": {
         "operationId": "post_store_modules_key_versions",
@@ -23550,7 +23920,7 @@
           "store"
         ],
         "summary": "POST /store/modules/:key/versions",
-        "description": "POST /api/bongos/store/modules/:key/versions — publish one module version to the store (task 1004271, ADR 0338 D1). Body: the gzip tarball `bongos module publish` builds (scripts/gds/module-artifact.js), sent as application/gzip. The route trusts nothing but the bytes: it recomputes every hash, re-runs the publish denylist, validates module.json and checks that HOWTO.md has its required sections (ADR 0347 D4) itself (verifyModuleArtifact), then keeps the tarball on the control plane's disk and INSERTs the version row in one transaction (module-store.js). A key's first publish makes the caller its author; after that only the author may publish, a delisted key takes nothing new, and a version is published once and never changed. Every new version lands on the tester channel; the body names no channel, so nothing here can skip testers (task 1003803, ADR 0344 D2). rank: metic+archon — it puts code in a shared store other instances install from. Gate: requirePermission('module.submit') — the atom that already guards filing a module into a shared queue; a dedicated `module.publish` atom is a follow-up once who-may-sell is decided.\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `module.submit` (all required).",
+        "description": "POST /api/bongos/store/modules/:key/versions — publish one module version to the store (task 1004271, ADR 0338 D1). Body: the gzip tarball `bongos module publish` builds (scripts/bongos/module-artifact.js), sent as application/gzip. The route trusts nothing but the bytes: it recomputes every hash, re-runs the publish denylist, validates module.json and checks that HOWTO.md has its required sections (ADR 0347 D4) itself (verifyModuleArtifact), then keeps the tarball on the control plane's disk and INSERTs the version row in one transaction (module-store.js). A key's first publish makes the caller its author; after that only the author may publish, a delisted key takes nothing new, and a version is published once and never changed. Every new version lands on the tester channel; the body names no channel, so nothing here can skip testers (task 1003803, ADR 0344 D2). rank: metic+archon — it puts code in a shared store other instances install from. Gate: requirePermission('module.submit') — the atom that already guards filing a module into a shared queue; a dedicated `module.publish` atom is a follow-up once who-may-sell is decided.\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `module.submit` (all required).",
         "x-rank": "metic+archon",
         "x-source": "src/bongos/routes/modules.js",
         "x-permissions": [
@@ -24501,7 +24871,7 @@
           "tasks"
         ],
         "summary": "GET /tasks/newcomer-floor",
-        "description": "GET /tasks/newcomer-floor — supply gauge for the newcomer queue (task 614). Per-discipline counts of newcomer_friendly tasks in the two unclaimed live statuses: `ready` (claimable now — what the floor is measured against, per the canonical query in task 614) and `backlog` (held / pending review — proposals an Archon hasn't promoted yet). The AI floor replenisher (scripts/gds/newcomer-floor.js) reads this to decide which disciplines are under-supplied, counting `ready + backlog` so a re-run never piles fresh proposals on top of ones already awaiting review (idempotency). The hall can also render it as a live gauge. Global across open versions on purpose — a Xenos can claim any newcomer_friendly ready task regardless of version, so the floor is a project-wide promise, not a per-version one. Read-only, any-builder; the inline SQL follows the same self-contained-feature-locality call as the peer-vote queries above (kept out of the shared db.js). MUST stay registered before '/tasks/:id' or Express routes the literal 'newcomer-floor' into the :id param (same ordering constraint as /claimable).\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "description": "GET /tasks/newcomer-floor — supply gauge for the newcomer queue (task 614). Per-discipline counts of newcomer_friendly tasks in the two unclaimed live statuses: `ready` (claimable now — what the floor is measured against, per the canonical query in task 614) and `backlog` (held / pending review — proposals an Archon hasn't promoted yet). The AI floor replenisher (scripts/bongos/newcomer-floor.js) reads this to decide which disciplines are under-supplied, counting `ready + backlog` so a re-run never piles fresh proposals on top of ones already awaiting review (idempotency). The hall can also render it as a live gauge. Global across open versions on purpose — a Xenos can claim any newcomer_friendly ready task regardless of version, so the floor is a project-wide promise, not a per-version one. Read-only, any-builder; the inline SQL follows the same self-contained-feature-locality call as the peer-vote queries above (kept out of the shared db.js). MUST stay registered before '/tasks/:id' or Express routes the literal 'newcomer-floor' into the :id param (same ordering constraint as /claimable).\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
         "x-source": "modules/lifecycle/routes/tasks.js",
         "responses": {
@@ -24611,6 +24981,44 @@
         ]
       }
     },
+    "/tasks/peer-votes/lookup": {
+      "get": {
+        "operationId": "get_tasks_peer_votes_lookup",
+        "tags": [
+          "tasks"
+        ],
+        "summary": "GET /tasks/peer-votes/lookup",
+        "description": "GET /tasks/peer-votes/lookup?ids=1,2,3 — { votes: { [id]: { net, mine } } } for the hall's list vote control (task 1004727). At most 200 ids. rank: any-builder — a read; casting is gated on POST /tasks/:id/vote.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/lifecycle/routes/task-votes.js",
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetTasksPeerVotesLookupResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/tasks/peer-votes/tally": {
       "post": {
         "operationId": "post_tasks_peer_votes_tally",
@@ -26469,7 +26877,7 @@
           "versions"
         ],
         "summary": "POST /versions/:id/close",
-        "description": "POST /versions/:id/close — the move a version has never had (BV1.R12, task 1003599, goal 1000086, ADR 0250 D5, ADR 0263 §5). The hierarchy had a bottom and no top: tasks close, criteria close, goals close, and a version only ever moved by hand-run SQL on the droplet — `scripts/gds/version-close.js` still PRINTS that the API cannot do this (task 1003610, R23, points it here). A thing with no closing move does not close, which is how two versions ended up building at once. Archon-only, behind the `version.close` permission that has existed at that floor since BV1.R105 and that, until now, NOTHING referenced. THE TWO-STEP IS R14's ARCHIVE, in spirit and in shape: call it bare and a version holding open goals refuses with the GOALS ATTACHED; re-submit with a total `dispositions` map and it closes. Agents already know that interaction, and a second idiom for the same thing is how two surfaces drift apart. Auto-close (task 1003603, R16) reaches `db.closeVersion` with an EMPTY plan and never touches this route: by construction it fires only when the last non-maintenance goal achieved, so nothing is left to disposition (ADR 0263 §3). rank: archon — the disposition that finalises a version's scope-truth.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `version.close` (all required).",
+        "description": "POST /versions/:id/close — the move a version has never had (BV1.R12, task 1003599, goal 1000086, ADR 0250 D5, ADR 0263 §5). The hierarchy had a bottom and no top: tasks close, criteria close, goals close, and a version only ever moved by hand-run SQL on the droplet — `scripts/bongos/version-close.js` still PRINTS that the API cannot do this (task 1003610, R23, points it here). A thing with no closing move does not close, which is how two versions ended up building at once. Archon-only, behind the `version.close` permission that has existed at that floor since BV1.R105 and that, until now, NOTHING referenced. THE TWO-STEP IS R14's ARCHIVE, in spirit and in shape: call it bare and a version holding open goals refuses with the GOALS ATTACHED; re-submit with a total `dispositions` map and it closes. Agents already know that interaction, and a second idiom for the same thing is how two surfaces drift apart. Auto-close (task 1003603, R16) reaches `db.closeVersion` with an EMPTY plan and never touches this route: by construction it fires only when the last non-maintenance goal achieved, so nothing is left to disposition (ADR 0263 §3). rank: archon — the disposition that finalises a version's scope-truth.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `version.close` (all required).",
         "x-rank": "archon",
         "x-source": "modules/lifecycle/routes/versions.js",
         "x-permissions": [
@@ -26641,7 +27049,7 @@
           "versions"
         ],
         "summary": "GET /versions/:id/progress",
-        "description": "Per-criterion progress rollup: each done-when criterion → the tasks that gate it (task_criteria, migration 055) → live statuses → what remains. Powers `scripts/gds/status.js` + the /status skill (task 435) and is reusable by the public status dashboard. Registered AFTER the static /versions/* routes above so ':id' can't swallow them. rank: public — read-only aggregate, same posture as /versions/:id/done-when. Public endpoint — asyncHandler logs the detail server-side but, with message:false, never leaks err.message (SQL/internal text) to unauthenticated callers (preserves the leak-safe 500 the hand-written catch produced).\n\n**Rank:** `public` — No authentication — any caller.",
+        "description": "Per-criterion progress rollup: each done-when criterion → the tasks that gate it (task_criteria, migration 055) → live statuses → what remains. Powers `scripts/bongos/status.js` + the /status skill (task 435) and is reusable by the public status dashboard. Registered AFTER the static /versions/* routes above so ':id' can't swallow them. rank: public — read-only aggregate, same posture as /versions/:id/done-when. Public endpoint — asyncHandler logs the detail server-side but, with message:false, never leaks err.message (SQL/internal text) to unauthenticated callers (preserves the leak-safe 500 the hand-written catch produced).\n\n**Rank:** `public` — No authentication — any caller.",
         "x-rank": "public",
         "x-source": "modules/lifecycle/routes/versions.js",
         "parameters": [
@@ -26676,7 +27084,7 @@
           "work-categories"
         ],
         "summary": "GET /work-categories",
-        "description": "---- the ADVISORY human category (task 1003275, criterion legibility-categories) ---- A category ORIENTS a person and steers Claude; it authorises nothing. Nothing in this file, in claim eligibility, or in the claimable feed may branch on it — scripts/gds/category-advisory-guard.js fails the build if that changes (ADR 0192). GET /work-categories — the project's set. rank: any-builder; it is a vocabulary, and a client that cannot read it hard-codes the labels instead.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "description": "---- the ADVISORY human category (task 1003275, criterion legibility-categories) ---- A category ORIENTS a person and steers Claude; it authorises nothing. Nothing in this file, in claim eligibility, or in the claimable feed may branch on it — scripts/bongos/category-advisory-guard.js fails the build if that changes (ADR 0192). GET /work-categories — the project's set. rank: any-builder; it is a vocabulary, and a client that cannot read it hard-codes the labels instead.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
         "x-source": "modules/lifecycle/routes/goals.js",
         "responses": {
@@ -27998,6 +28406,15 @@
           "template"
         ]
       },
+      "GetInboxVotesResponse": {
+        "type": "object",
+        "properties": {
+          "votes": {}
+        },
+        "required": [
+          "votes"
+        ]
+      },
       "GetLeaderboardResponse": {
         "type": "object",
         "properties": {
@@ -28146,10 +28563,12 @@
       "GetMeRecentShipsResponse": {
         "type": "object",
         "properties": {
-          "ships": {}
+          "ships": {},
+          "total": {}
         },
         "required": [
-          "ships"
+          "ships",
+          "total"
         ]
       },
       "GetMeSessionsResponse": {
@@ -28889,15 +29308,6 @@
           "task"
         ]
       },
-      "GetPublicUptimeResponse": {
-        "type": "object",
-        "properties": {
-          "services": {}
-        },
-        "required": [
-          "services"
-        ]
-      },
       "GetPublicVersionsResponse": {
         "type": "object",
         "properties": {
@@ -29287,6 +29697,15 @@
           "can_vote"
         ]
       },
+      "GetTasksPeerVotesLookupResponse": {
+        "type": "object",
+        "properties": {
+          "votes": {}
+        },
+        "required": [
+          "votes"
+        ]
+      },
       "GetTasksResponse": {
         "type": "object",
         "properties": {
@@ -29478,6 +29897,27 @@
         ],
         "additionalProperties": false
       },
+      "PatchBuildersIdTesterRequest": {
+        "type": "object",
+        "properties": {
+          "is_tester": {
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "is_tester"
+        ],
+        "additionalProperties": false
+      },
+      "PatchBuildersIdTesterResponse": {
+        "type": "object",
+        "properties": {
+          "builder": {}
+        },
+        "required": [
+          "builder"
+        ]
+      },
       "PatchDoneWhenCriterionIdRequest": {
         "type": "object",
         "properties": {
@@ -31187,6 +31627,45 @@
           "merge"
         ]
       },
+      "PostCopyDeskPagesPageIdReleaseRequest": {
+        "type": "object",
+        "properties": {
+          "note": {
+            "type": "string",
+            "minLength": 1
+          },
+          "task_id": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 20
+          }
+        },
+        "required": [
+          "note"
+        ],
+        "additionalProperties": false
+      },
+      "PostCopyDeskPagesPageIdReleaseResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "outcome": {},
+          "page_id": {},
+          "round": {},
+          "released": {},
+          "pr": {}
+        },
+        "required": [
+          "ok",
+          "outcome",
+          "page_id",
+          "round",
+          "released",
+          "pr"
+        ]
+      },
       "PostCopyDeskPagesPageIdSendBackRequest": {
         "type": "object",
         "properties": {
@@ -33018,6 +33497,23 @@
           "unchanged"
         ]
       },
+      "PostInboxIdVoteRequest": {
+        "type": "object",
+        "properties": {
+          "vote": {
+            "type": "integer",
+            "enum": [
+              -1,
+              0,
+              1
+            ]
+          }
+        },
+        "required": [
+          "vote"
+        ],
+        "additionalProperties": false
+      },
       "PostInboxPreviewLandingRequest": {
         "type": "object",
         "properties": {
@@ -34405,6 +34901,72 @@
         ],
         "additionalProperties": false
       },
+      "PostRaiseEditRequest": {
+        "type": "object",
+        "properties": {
+          "copy": {
+            "type": "object"
+          },
+          "settings": {
+            "type": "object"
+          }
+        },
+        "additionalProperties": false
+      },
+      "PostRaiseEditResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "changed": {}
+        },
+        "required": [
+          "ok",
+          "changed"
+        ]
+      },
+      "PostRaiseEnterRequest": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string",
+            "maxLength": 200
+          },
+          "linkedin": {
+            "type": "string",
+            "maxLength": 500
+          },
+          "password": {
+            "type": "string",
+            "maxLength": 200
+          }
+        },
+        "additionalProperties": false
+      },
+      "PostRaiseInterestRequest": {
+        "type": "object",
+        "properties": {
+          "amount": {
+            "type": "number"
+          }
+        },
+        "required": [
+          "amount"
+        ],
+        "additionalProperties": false
+      },
+      "PostRaiseInterestResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "ok"
+        ]
+      },
       "PostRemovalProposalsIdDecideRequest": {
         "type": "object",
         "properties": {
@@ -36504,9 +37066,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 572,
-  "x-schema-count": 611,
+  "x-endpoint-count": 580,
+  "x-schema-count": 622,
   "x-undocumented-bodies": 12,
-  "x-response-schemas": 399,
-  "x-generated-by": "scripts/gds/gen-api-docs.js"
+  "x-response-schemas": 404,
+  "x-generated-by": "scripts/bongos/gen-api-docs.js"
 }