@bongos/core 1.21.175 → 1.21.176

package/clients/bongos-client/bongos-client.global.js

@@ -1,10 +1,10 @@
 // @bongos/client (browser-global build) — GENERATED from index.mjs by
-// scripts/gds/gen-api-client.js. DO NOT EDIT BY HAND. Exposes window.BongosClient
+// scripts/bongos/gen-api-client.js. DO NOT EDIT BY HAND. Exposes window.BongosClient
 // for classic <script> pages. Same behavior as the ESM build.
 (function (global) {
 'use strict';
 // @bongos/client — GENERATED from the OpenAPI spec by
-// scripts/gds/gen-api-client.js (task 1995 / ADR 0118). DO NOT EDIT BY HAND —
+// scripts/bongos/gen-api-client.js (task 1995 / ADR 0118). DO NOT EDIT BY HAND —
 // regenerate on spec change. Zero deps; uses the platform fetch.
 
 const API_VERSION = "v1";
@@ -237,6 +237,8 @@ function createClient(opts = {}) {
       patchBuildersIdRank: (args) => request("PATCH", "/builders/{id}/rank", { hasBody: true }, args),
       // PATCH /builders/{id}/status — rank: archon — PATCH /builders/:id/status
       patchBuildersIdStatus: (args) => request("PATCH", "/builders/{id}/status", { hasBody: true }, args),
+      // PATCH /builders/{id}/tester — rank: archon — PATCH /builders/:id/tester
+      patchBuildersIdTester: (args) => request("PATCH", "/builders/{id}/tester", { hasBody: true }, args),
       // GET /builders/directory — rank: any-builder — GET /builders/directory
       getBuildersDirectory: (args) => request("GET", "/builders/directory", { hasBody: false }, args),
       // GET /builders/me/pending-rank-change — rank: any-builder — GET /builders/me/pending-rank-change
@@ -323,6 +325,8 @@ function createClient(opts = {}) {
       getCopyDeskPagesPageIdDraftDocx: (args) => request("GET", "/copy-desk/pages/{pageId}/draft.docx", { hasBody: false }, args),
       // POST /copy-desk/pages/{pageId}/draft.docx — rank: any-builder — POST /copy-desk/pages/:pageId/draft.docx
       postCopyDeskPagesPageIdDraftDocx: (args) => request("POST", "/copy-desk/pages/{pageId}/draft.docx", { hasBody: true }, args),
+      // POST /copy-desk/pages/{pageId}/release — rank: metic+archon — POST /copy-desk/pages/:pageId/release
+      postCopyDeskPagesPageIdRelease: (args) => request("POST", "/copy-desk/pages/{pageId}/release", { hasBody: true }, args),
       // POST /copy-desk/pages/{pageId}/send-back — rank: any-builder — POST /copy-desk/pages/:pageId/send-back
       postCopyDeskPagesPageIdSendBack: (args) => request("POST", "/copy-desk/pages/{pageId}/send-back", { hasBody: true }, args),
       // POST /copy-desk/pages/{pageId}/submit — rank: any-builder — POST /copy-desk/pages/:pageId/submit
@@ -661,6 +665,8 @@ function createClient(opts = {}) {
       deleteInboxIdSpark: (args) => request("DELETE", "/inbox/{id}/spark", { hasBody: false }, args),
       // POST /inbox/{id}/spark — rank: any-builder — POST /inbox/:id/spark
       postInboxIdSpark: (args) => request("POST", "/inbox/{id}/spark", { hasBody: true }, args),
+      // POST /inbox/{id}/vote — rank: metic+archon — POST /inbox/:id/vote
+      postInboxIdVote: (args) => request("POST", "/inbox/{id}/vote", { hasBody: true }, args),
       // GET /inbox/awaiting-nod — rank: metic+archon — GET /inbox/awaiting-nod
       getInboxAwaitingNod: (args) => request("GET", "/inbox/awaiting-nod", { hasBody: false }, args),
       // GET /inbox/by-builder/{id} — rank: any-builder — GET /inbox/by-builder/:id
@@ -675,6 +681,8 @@ function createClient(opts = {}) {
       getInboxSparks: (args) => request("GET", "/inbox/sparks", { hasBody: false }, args),
       // GET /inbox/template — rank: any-builder — GET /inbox/template
       getInboxTemplate: (args) => request("GET", "/inbox/template", { hasBody: false }, args),
+      // GET /inbox/votes — rank: any-builder — GET /inbox/votes
+      getInboxVotes: (args) => request("GET", "/inbox/votes", { hasBody: false }, args),
     },
     "instance": {
       // GET /instance — rank: public — GET /instance
@@ -1079,11 +1087,17 @@ function createClient(opts = {}) {
       getPublicRepoInfo: (args) => request("GET", "/public/repo-info", { hasBody: false }, args),
       // GET /public/tasks/{id} — rank: public — GET /public/tasks/:id
       getPublicTasksId: (args) => request("GET", "/public/tasks/{id}", { hasBody: false }, args),
-      // GET /public/uptime — rank: public — GET /public/uptime
-      getPublicUptime: (args) => request("GET", "/public/uptime", { hasBody: false }, args),
       // GET /public/versions — rank: public — GET /public/versions
       getPublicVersions: (args) => request("GET", "/public/versions", { hasBody: false }, args),
     },
+    "raise": {
+      // POST /raise/edit — rank: any-builder — POST /raise/edit
+      postRaiseEdit: (args) => request("POST", "/raise/edit", { hasBody: true }, args),
+      // POST /raise/enter — rank: public — POST /raise/enter
+      postRaiseEnter: (args) => request("POST", "/raise/enter", { hasBody: true }, args),
+      // POST /raise/interest — rank: public — POST /raise/interest
+      postRaiseInterest: (args) => request("POST", "/raise/interest", { hasBody: true }, args),
+    },
     "removalProposals": {
       // GET /removal-proposals — rank: metic+archon — GET /removal-proposals
       getRemovalProposals: (args) => request("GET", "/removal-proposals", { hasBody: false }, args),
@@ -1241,6 +1255,8 @@ function createClient(opts = {}) {
       postStoreModulesKeyDelist: (args) => request("POST", "/store/modules/{key}/delist", { hasBody: true }, args),
       // GET /store/modules/{key}/entitlement — rank: any-builder — GET /store/modules/:key/entitlement
       getStoreModulesKeyEntitlement: (args) => request("GET", "/store/modules/{key}/entitlement", { hasBody: false }, args),
+      // GET /store/modules/{key}/listing — rank: any-builder — GET /store/modules/:key/listing
+      getStoreModulesKeyListing: (args) => request("GET", "/store/modules/{key}/listing", { hasBody: false }, args),
       // POST /store/modules/{key}/versions — rank: metic+archon — POST /store/modules/:key/versions
       postStoreModulesKeyVersions: (args) => request("POST", "/store/modules/{key}/versions", { hasBody: true }, args),
       // GET /store/modules/{key}/versions/{version}/channel — rank: any-builder — GET /store/modules/:key/versions/:version/channel
@@ -1347,6 +1363,8 @@ function createClient(opts = {}) {
       postTasksNewcomerRestock: (args) => request("POST", "/tasks/newcomer-restock", { hasBody: true }, args),
       // GET /tasks/peer-votes/feed — rank: any-builder — GET /tasks/peer-votes/feed
       getTasksPeerVotesFeed: (args) => request("GET", "/tasks/peer-votes/feed", { hasBody: false }, args),
+      // GET /tasks/peer-votes/lookup — rank: any-builder — GET /tasks/peer-votes/lookup
+      getTasksPeerVotesLookup: (args) => request("GET", "/tasks/peer-votes/lookup", { hasBody: false }, args),
       // POST /tasks/peer-votes/tally — rank: metic+archon — POST /tasks/peer-votes/tally
       postTasksPeerVotesTally: (args) => request("POST", "/tasks/peer-votes/tally", { hasBody: true }, args),
     },

package/clients/bongos-client/index.cjs

@@ -1,8 +1,8 @@
 // @bongos/client (CommonJS build) — GENERATED from index.mjs by
-// scripts/gds/gen-api-client.js. DO NOT EDIT BY HAND. Same behavior as the ESM
+// scripts/bongos/gen-api-client.js. DO NOT EDIT BY HAND. Same behavior as the ESM
 // build; only the module bindings differ. For require()-based consumers.
 // @bongos/client — GENERATED from the OpenAPI spec by
-// scripts/gds/gen-api-client.js (task 1995 / ADR 0118). DO NOT EDIT BY HAND —
+// scripts/bongos/gen-api-client.js (task 1995 / ADR 0118). DO NOT EDIT BY HAND —
 // regenerate on spec change. Zero deps; uses the platform fetch.
 'use strict';
 
@@ -236,6 +236,8 @@ function createClient(opts = {}) {
       patchBuildersIdRank: (args) => request("PATCH", "/builders/{id}/rank", { hasBody: true }, args),
       // PATCH /builders/{id}/status — rank: archon — PATCH /builders/:id/status
       patchBuildersIdStatus: (args) => request("PATCH", "/builders/{id}/status", { hasBody: true }, args),
+      // PATCH /builders/{id}/tester — rank: archon — PATCH /builders/:id/tester
+      patchBuildersIdTester: (args) => request("PATCH", "/builders/{id}/tester", { hasBody: true }, args),
       // GET /builders/directory — rank: any-builder — GET /builders/directory
       getBuildersDirectory: (args) => request("GET", "/builders/directory", { hasBody: false }, args),
       // GET /builders/me/pending-rank-change — rank: any-builder — GET /builders/me/pending-rank-change
@@ -322,6 +324,8 @@ function createClient(opts = {}) {
       getCopyDeskPagesPageIdDraftDocx: (args) => request("GET", "/copy-desk/pages/{pageId}/draft.docx", { hasBody: false }, args),
       // POST /copy-desk/pages/{pageId}/draft.docx — rank: any-builder — POST /copy-desk/pages/:pageId/draft.docx
       postCopyDeskPagesPageIdDraftDocx: (args) => request("POST", "/copy-desk/pages/{pageId}/draft.docx", { hasBody: true }, args),
+      // POST /copy-desk/pages/{pageId}/release — rank: metic+archon — POST /copy-desk/pages/:pageId/release
+      postCopyDeskPagesPageIdRelease: (args) => request("POST", "/copy-desk/pages/{pageId}/release", { hasBody: true }, args),
       // POST /copy-desk/pages/{pageId}/send-back — rank: any-builder — POST /copy-desk/pages/:pageId/send-back
       postCopyDeskPagesPageIdSendBack: (args) => request("POST", "/copy-desk/pages/{pageId}/send-back", { hasBody: true }, args),
       // POST /copy-desk/pages/{pageId}/submit — rank: any-builder — POST /copy-desk/pages/:pageId/submit
@@ -660,6 +664,8 @@ function createClient(opts = {}) {
       deleteInboxIdSpark: (args) => request("DELETE", "/inbox/{id}/spark", { hasBody: false }, args),
       // POST /inbox/{id}/spark — rank: any-builder — POST /inbox/:id/spark
       postInboxIdSpark: (args) => request("POST", "/inbox/{id}/spark", { hasBody: true }, args),
+      // POST /inbox/{id}/vote — rank: metic+archon — POST /inbox/:id/vote
+      postInboxIdVote: (args) => request("POST", "/inbox/{id}/vote", { hasBody: true }, args),
       // GET /inbox/awaiting-nod — rank: metic+archon — GET /inbox/awaiting-nod
       getInboxAwaitingNod: (args) => request("GET", "/inbox/awaiting-nod", { hasBody: false }, args),
       // GET /inbox/by-builder/{id} — rank: any-builder — GET /inbox/by-builder/:id
@@ -674,6 +680,8 @@ function createClient(opts = {}) {
       getInboxSparks: (args) => request("GET", "/inbox/sparks", { hasBody: false }, args),
       // GET /inbox/template — rank: any-builder — GET /inbox/template
       getInboxTemplate: (args) => request("GET", "/inbox/template", { hasBody: false }, args),
+      // GET /inbox/votes — rank: any-builder — GET /inbox/votes
+      getInboxVotes: (args) => request("GET", "/inbox/votes", { hasBody: false }, args),
     },
     "instance": {
       // GET /instance — rank: public — GET /instance
@@ -1078,11 +1086,17 @@ function createClient(opts = {}) {
       getPublicRepoInfo: (args) => request("GET", "/public/repo-info", { hasBody: false }, args),
       // GET /public/tasks/{id} — rank: public — GET /public/tasks/:id
       getPublicTasksId: (args) => request("GET", "/public/tasks/{id}", { hasBody: false }, args),
-      // GET /public/uptime — rank: public — GET /public/uptime
-      getPublicUptime: (args) => request("GET", "/public/uptime", { hasBody: false }, args),
       // GET /public/versions — rank: public — GET /public/versions
       getPublicVersions: (args) => request("GET", "/public/versions", { hasBody: false }, args),
     },
+    "raise": {
+      // POST /raise/edit — rank: any-builder — POST /raise/edit
+      postRaiseEdit: (args) => request("POST", "/raise/edit", { hasBody: true }, args),
+      // POST /raise/enter — rank: public — POST /raise/enter
+      postRaiseEnter: (args) => request("POST", "/raise/enter", { hasBody: true }, args),
+      // POST /raise/interest — rank: public — POST /raise/interest
+      postRaiseInterest: (args) => request("POST", "/raise/interest", { hasBody: true }, args),
+    },
     "removalProposals": {
       // GET /removal-proposals — rank: metic+archon — GET /removal-proposals
       getRemovalProposals: (args) => request("GET", "/removal-proposals", { hasBody: false }, args),
@@ -1240,6 +1254,8 @@ function createClient(opts = {}) {
       postStoreModulesKeyDelist: (args) => request("POST", "/store/modules/{key}/delist", { hasBody: true }, args),
       // GET /store/modules/{key}/entitlement — rank: any-builder — GET /store/modules/:key/entitlement
       getStoreModulesKeyEntitlement: (args) => request("GET", "/store/modules/{key}/entitlement", { hasBody: false }, args),
+      // GET /store/modules/{key}/listing — rank: any-builder — GET /store/modules/:key/listing
+      getStoreModulesKeyListing: (args) => request("GET", "/store/modules/{key}/listing", { hasBody: false }, args),
       // POST /store/modules/{key}/versions — rank: metic+archon — POST /store/modules/:key/versions
       postStoreModulesKeyVersions: (args) => request("POST", "/store/modules/{key}/versions", { hasBody: true }, args),
       // GET /store/modules/{key}/versions/{version}/channel — rank: any-builder — GET /store/modules/:key/versions/:version/channel
@@ -1346,6 +1362,8 @@ function createClient(opts = {}) {
       postTasksNewcomerRestock: (args) => request("POST", "/tasks/newcomer-restock", { hasBody: true }, args),
       // GET /tasks/peer-votes/feed — rank: any-builder — GET /tasks/peer-votes/feed
       getTasksPeerVotesFeed: (args) => request("GET", "/tasks/peer-votes/feed", { hasBody: false }, args),
+      // GET /tasks/peer-votes/lookup — rank: any-builder — GET /tasks/peer-votes/lookup
+      getTasksPeerVotesLookup: (args) => request("GET", "/tasks/peer-votes/lookup", { hasBody: false }, args),
       // POST /tasks/peer-votes/tally — rank: metic+archon — POST /tasks/peer-votes/tally
       postTasksPeerVotesTally: (args) => request("POST", "/tasks/peer-votes/tally", { hasBody: true }, args),
     },

package/clients/bongos-client/index.d.ts

@@ -96,6 +96,7 @@ export interface GetInboxResponse { ideas: unknown; open_count: unknown }
 export interface GetInboxRottingResponse { rows?: unknown; count?: unknown; scope?: unknown; timer?: unknown; cutoff?: unknown; ok?: boolean; tier?: unknown; id?: unknown; watered_at?: unknown }
 export interface GetInboxSparksResponse { sparks: unknown; count: unknown }
 export interface GetInboxTemplateResponse { template: unknown }
+export interface GetInboxVotesResponse { votes: unknown }
 export interface GetLeaderboardResponse { leaderboard: unknown; page: unknown }
 export interface GetLearningsResponse { learnings: unknown }
 export interface GetMeAchievementsResponse { unlocked: unknown }
@@ -107,7 +108,7 @@ export interface GetMeGuildEngagementsResponse { engagements: unknown; count: un
 export interface GetMeGuildRequestsResponse { incoming: unknown; outgoing: unknown; owner_incoming: unknown; incoming_count: unknown; outgoing_count: unknown; owner_incoming_count: unknown }
 export interface GetMeGuildsResponse { guilds: unknown; count: unknown }
 export interface GetMePasskeysResponse { passkeys: unknown }
-export interface GetMeRecentShipsResponse { ships: unknown }
+export interface GetMeRecentShipsResponse { ships: unknown; total: unknown }
 export interface GetMeSessionsResponse { sessions: unknown }
 export interface GetMeSkillPrefsResponse { prefs: unknown; effective: unknown; defaults: unknown; known_skills: unknown; allowed_models: unknown }
 export interface GetMeSoundPrefsResponse { prefs: unknown; effective: unknown; effective_map: unknown; volume: unknown; defaults: unknown; known_sounds: unknown }
@@ -160,7 +161,6 @@ export interface GetPublicRefIdsResponse { tasks: unknown; ideas: unknown; block
 export interface GetPublicRepoHealthResponse { window_days: unknown; latest: unknown; trend: unknown }
 export interface GetPublicRepoInfoResponse { blob_base: unknown; tree_base: unknown; branch: unknown }
 export interface GetPublicTasksIdResponse { task: unknown }
-export interface GetPublicUptimeResponse { services: unknown }
 export interface GetPublicVersionsResponse { versions: unknown; page: PageInfo }
 export interface GetRemovalProposalsResponse { pending: unknown; count: unknown }
 export interface GetRenderDeployAppResponse { app: unknown }
@@ -195,6 +195,7 @@ export interface GetTasksIdRecommendationsResponse { recommendations: unknown; c
 export interface GetTasksIdVisualsResponse { ok: boolean; task_id: unknown; slots: unknown }
 export interface GetTasksNewcomerFloorResponse { disciplines: unknown }
 export interface GetTasksPeerVotesFeedResponse { tasks: unknown; can_vote: unknown }
+export interface GetTasksPeerVotesLookupResponse { votes: unknown }
 export interface GetTasksResponse { tasks: unknown }
 export interface GetVersionsCloseSuggestionsResponse { suggestions: unknown }
 export interface GetVersionsFocusResponse { focus_version_id: unknown; can_set: unknown }
@@ -210,6 +211,8 @@ export interface PatchBuildersIdBudgetResponse { builder: unknown }
 export interface PatchBuildersIdRankRequest { rank: string }
 export interface PatchBuildersIdRankResponse { builder: unknown; previous_rank: unknown; direction: unknown; credit_delta: unknown; broadcast: unknown }
 export interface PatchBuildersIdStatusRequest { status: "active" | "inactive"; reason?: string }
+export interface PatchBuildersIdTesterRequest { is_tester: boolean }
+export interface PatchBuildersIdTesterResponse { builder: unknown }
 export interface PatchDoneWhenCriterionIdRequest { criterion_md?: string; goal_id?: number }
 export interface PatchDoneWhenCriterionIdResponse { ok: boolean; criterion: unknown; deltas: unknown; unchanged: unknown; achieved_goals: unknown }
 export interface PatchGoalsIdMembersBuilderIdRequest { membership_kind: string }
@@ -317,6 +320,8 @@ export interface PostCopyDeskPagesPageIdApproveRequest { task_id?: string }
 export interface PostCopyDeskPagesPageIdApproveResponse { ok: boolean; outcome: unknown; page_id: unknown; round: unknown; status_after: unknown; land: unknown; next: unknown }
 export interface PostCopyDeskPagesPageIdAsksRequest { reason: string }
 export interface PostCopyDeskPagesPageIdDraftDocxResponse { ok: boolean; outcome: unknown; page_id: unknown; round: unknown; draft: unknown; counter: unknown; merge: unknown }
+export interface PostCopyDeskPagesPageIdReleaseRequest { note: string; task_id?: string }
+export interface PostCopyDeskPagesPageIdReleaseResponse { ok: boolean; outcome: unknown; page_id: unknown; round: unknown; released: unknown; pr: unknown }
 export interface PostCopyDeskPagesPageIdSendBackRequest { note: string; task_id?: string }
 export interface PostCopyDeskPagesPageIdSendBackResponse { ok: boolean; outcome: unknown; page_id: unknown; round: unknown; sent_back: unknown; pr: unknown; next: unknown }
 export interface PostCopyDeskProposalsRequest { string_id: string; proposed_text: string; why: string; file?: string; line?: number; flag_id?: number }
@@ -421,6 +426,7 @@ export interface PostInboxIdRatifyGoalRequest { target_version: string; scope_mo
 export interface PostInboxIdRatifyRequest { notes_md?: string }
 export interface PostInboxIdResubmitRequest { field_values: Record<string, unknown>; template_key?: string; recommendation?: string }
 export interface PostInboxIdSparkResponse { idea: unknown; sparked: boolean; unchanged: boolean }
+export interface PostInboxIdVoteRequest { vote: -1 | 0 | 1 }
 export interface PostInboxPreviewLandingRequest { goal_id?: number; kind?: string; grade?: string }
 export interface PostInboxRequest { title: string; body_md?: string; kind?: string; suggested_version?: string; suggested_priority?: number; goal_id?: number; grade?: string; template_key?: string; field_values?: Record<string, unknown>; recommendation?: string; filed_via?: string }
 export interface PostInboxScoreRequest { field_values: Record<string, unknown>; template_key?: string }
@@ -501,6 +507,11 @@ export interface PostProvisioningInstancesRequest { slug: string; target_ref?: s
 export interface PostProvisioningPhysicsCheckRequest { description?: string; detail?: Record<string, unknown> }
 export interface PostProvisioningPhysicsCheckResponse { stop: boolean; message: unknown; soft_limits: unknown }
 export interface PostProvisioningRenderLookupRequest { key: string; owner_id?: string }
+export interface PostRaiseEditRequest { copy?: Record<string, unknown>; settings?: Record<string, unknown> }
+export interface PostRaiseEditResponse { ok: boolean; changed: unknown }
+export interface PostRaiseEnterRequest { name?: string; linkedin?: string; password?: string }
+export interface PostRaiseInterestRequest { amount: number }
+export interface PostRaiseInterestResponse { ok: boolean }
 export interface PostRemovalProposalsIdDecideRequest { verdict: string; note?: string }
 export interface PostRenderDeployActRequest { action?: string; deployId?: string; confirm?: unknown; expectLiveDeployId?: unknown }
 export interface PostRenderDeployActResponse { ok: boolean; action: unknown; started: unknown; render: unknown }
@@ -781,6 +792,8 @@ export interface BongosClient {
     patchBuildersIdRank(args: RequestArgs & { body: PatchBuildersIdRankRequest }): Promise<PatchBuildersIdRankResponse>;
     /** PATCH /builders/{id}/status — rank: archon */
     patchBuildersIdStatus(args: RequestArgs & { body: PatchBuildersIdStatusRequest }): Promise<ApiResponse>;
+    /** PATCH /builders/{id}/tester — rank: archon */
+    patchBuildersIdTester(args: RequestArgs & { body: PatchBuildersIdTesterRequest }): Promise<PatchBuildersIdTesterResponse>;
     /** GET /builders/directory — rank: any-builder */
     getBuildersDirectory(args?: RequestArgs): Promise<GetBuildersDirectoryResponse>;
     /** GET /builders/me/pending-rank-change — rank: any-builder */
@@ -867,6 +880,8 @@ export interface BongosClient {
     getCopyDeskPagesPageIdDraftDocx(args?: RequestArgs): Promise<ApiResponse>;
     /** POST /copy-desk/pages/{pageId}/draft.docx — rank: any-builder */
     postCopyDeskPagesPageIdDraftDocx(args?: RequestArgs): Promise<PostCopyDeskPagesPageIdDraftDocxResponse>;
+    /** POST /copy-desk/pages/{pageId}/release — rank: metic+archon */
+    postCopyDeskPagesPageIdRelease(args: RequestArgs & { body: PostCopyDeskPagesPageIdReleaseRequest }): Promise<PostCopyDeskPagesPageIdReleaseResponse>;
     /** POST /copy-desk/pages/{pageId}/send-back — rank: any-builder */
     postCopyDeskPagesPageIdSendBack(args: RequestArgs & { body: PostCopyDeskPagesPageIdSendBackRequest }): Promise<PostCopyDeskPagesPageIdSendBackResponse>;
     /** POST /copy-desk/pages/{pageId}/submit — rank: any-builder */
@@ -1205,6 +1220,8 @@ export interface BongosClient {
     deleteInboxIdSpark(args?: RequestArgs): Promise<DeleteInboxIdSparkResponse>;
     /** POST /inbox/{id}/spark — rank: any-builder */
     postInboxIdSpark(args?: RequestArgs): Promise<PostInboxIdSparkResponse>;
+    /** POST /inbox/{id}/vote — rank: metic+archon */
+    postInboxIdVote(args: RequestArgs & { body: PostInboxIdVoteRequest }): Promise<ApiResponse>;
     /** GET /inbox/awaiting-nod — rank: metic+archon */
     getInboxAwaitingNod(args?: RequestArgs): Promise<GetInboxAwaitingNodResponse>;
     /** GET /inbox/by-builder/{id} — rank: any-builder */
@@ -1219,6 +1236,8 @@ export interface BongosClient {
     getInboxSparks(args?: RequestArgs): Promise<GetInboxSparksResponse>;
     /** GET /inbox/template — rank: any-builder */
     getInboxTemplate(args?: RequestArgs): Promise<GetInboxTemplateResponse>;
+    /** GET /inbox/votes — rank: any-builder */
+    getInboxVotes(args?: RequestArgs): Promise<GetInboxVotesResponse>;
   };
   "instance": {
     /** GET /instance — rank: public */
@@ -1623,11 +1642,17 @@ export interface BongosClient {
     getPublicRepoInfo(args?: RequestArgs): Promise<GetPublicRepoInfoResponse>;
     /** GET /public/tasks/{id} — rank: public */
     getPublicTasksId(args?: RequestArgs): Promise<GetPublicTasksIdResponse>;
-    /** GET /public/uptime — rank: public */
-    getPublicUptime(args?: RequestArgs): Promise<GetPublicUptimeResponse>;
     /** GET /public/versions — rank: public */
     getPublicVersions(args?: RequestArgs): Promise<GetPublicVersionsResponse>;
   };
+  "raise": {
+    /** POST /raise/edit — rank: any-builder */
+    postRaiseEdit(args?: RequestArgs & { body?: PostRaiseEditRequest }): Promise<PostRaiseEditResponse>;
+    /** POST /raise/enter — rank: public */
+    postRaiseEnter(args?: RequestArgs & { body?: PostRaiseEnterRequest }): Promise<ApiResponse>;
+    /** POST /raise/interest — rank: public */
+    postRaiseInterest(args: RequestArgs & { body: PostRaiseInterestRequest }): Promise<PostRaiseInterestResponse>;
+  };
   "removalProposals": {
     /** GET /removal-proposals — rank: metic+archon */
     getRemovalProposals(args?: RequestArgs): Promise<GetRemovalProposalsResponse>;
@@ -1785,6 +1810,8 @@ export interface BongosClient {
     postStoreModulesKeyDelist(args?: RequestArgs & { body?: PostStoreModulesKeyDelistRequest }): Promise<PostStoreModulesKeyDelistResponse>;
     /** GET /store/modules/{key}/entitlement — rank: any-builder */
     getStoreModulesKeyEntitlement(args?: RequestArgs): Promise<ApiResponse>;
+    /** GET /store/modules/{key}/listing — rank: any-builder */
+    getStoreModulesKeyListing(args?: RequestArgs): Promise<ApiResponse>;
     /** POST /store/modules/{key}/versions — rank: metic+archon */
     postStoreModulesKeyVersions(args?: RequestArgs): Promise<PostStoreModulesKeyVersionsResponse>;
     /** GET /store/modules/{key}/versions/{version}/channel — rank: any-builder */
@@ -1891,6 +1918,8 @@ export interface BongosClient {
     postTasksNewcomerRestock(args?: RequestArgs): Promise<PostTasksNewcomerRestockResponse>;
     /** GET /tasks/peer-votes/feed — rank: any-builder */
     getTasksPeerVotesFeed(args?: RequestArgs): Promise<GetTasksPeerVotesFeedResponse>;
+    /** GET /tasks/peer-votes/lookup — rank: any-builder */
+    getTasksPeerVotesLookup(args?: RequestArgs): Promise<GetTasksPeerVotesLookupResponse>;
     /** POST /tasks/peer-votes/tally — rank: metic+archon */
     postTasksPeerVotesTally(args?: RequestArgs): Promise<ApiResponse>;
   };

package/clients/bongos-client/index.mjs

@@ -1,5 +1,5 @@
 // @bongos/client — GENERATED from the OpenAPI spec by
-// scripts/gds/gen-api-client.js (task 1995 / ADR 0118). DO NOT EDIT BY HAND —
+// scripts/bongos/gen-api-client.js (task 1995 / ADR 0118). DO NOT EDIT BY HAND —
 // regenerate on spec change. Zero deps; uses the platform fetch.
 'use strict';
 
@@ -233,6 +233,8 @@ export function createClient(opts = {}) {
       patchBuildersIdRank: (args) => request("PATCH", "/builders/{id}/rank", { hasBody: true }, args),
       // PATCH /builders/{id}/status — rank: archon — PATCH /builders/:id/status
       patchBuildersIdStatus: (args) => request("PATCH", "/builders/{id}/status", { hasBody: true }, args),
+      // PATCH /builders/{id}/tester — rank: archon — PATCH /builders/:id/tester
+      patchBuildersIdTester: (args) => request("PATCH", "/builders/{id}/tester", { hasBody: true }, args),
       // GET /builders/directory — rank: any-builder — GET /builders/directory
       getBuildersDirectory: (args) => request("GET", "/builders/directory", { hasBody: false }, args),
       // GET /builders/me/pending-rank-change — rank: any-builder — GET /builders/me/pending-rank-change
@@ -319,6 +321,8 @@ export function createClient(opts = {}) {
       getCopyDeskPagesPageIdDraftDocx: (args) => request("GET", "/copy-desk/pages/{pageId}/draft.docx", { hasBody: false }, args),
       // POST /copy-desk/pages/{pageId}/draft.docx — rank: any-builder — POST /copy-desk/pages/:pageId/draft.docx
       postCopyDeskPagesPageIdDraftDocx: (args) => request("POST", "/copy-desk/pages/{pageId}/draft.docx", { hasBody: true }, args),
+      // POST /copy-desk/pages/{pageId}/release — rank: metic+archon — POST /copy-desk/pages/:pageId/release
+      postCopyDeskPagesPageIdRelease: (args) => request("POST", "/copy-desk/pages/{pageId}/release", { hasBody: true }, args),
       // POST /copy-desk/pages/{pageId}/send-back — rank: any-builder — POST /copy-desk/pages/:pageId/send-back
       postCopyDeskPagesPageIdSendBack: (args) => request("POST", "/copy-desk/pages/{pageId}/send-back", { hasBody: true }, args),
       // POST /copy-desk/pages/{pageId}/submit — rank: any-builder — POST /copy-desk/pages/:pageId/submit
@@ -657,6 +661,8 @@ export function createClient(opts = {}) {
       deleteInboxIdSpark: (args) => request("DELETE", "/inbox/{id}/spark", { hasBody: false }, args),
       // POST /inbox/{id}/spark — rank: any-builder — POST /inbox/:id/spark
       postInboxIdSpark: (args) => request("POST", "/inbox/{id}/spark", { hasBody: true }, args),
+      // POST /inbox/{id}/vote — rank: metic+archon — POST /inbox/:id/vote
+      postInboxIdVote: (args) => request("POST", "/inbox/{id}/vote", { hasBody: true }, args),
       // GET /inbox/awaiting-nod — rank: metic+archon — GET /inbox/awaiting-nod
       getInboxAwaitingNod: (args) => request("GET", "/inbox/awaiting-nod", { hasBody: false }, args),
       // GET /inbox/by-builder/{id} — rank: any-builder — GET /inbox/by-builder/:id
@@ -671,6 +677,8 @@ export function createClient(opts = {}) {
       getInboxSparks: (args) => request("GET", "/inbox/sparks", { hasBody: false }, args),
       // GET /inbox/template — rank: any-builder — GET /inbox/template
       getInboxTemplate: (args) => request("GET", "/inbox/template", { hasBody: false }, args),
+      // GET /inbox/votes — rank: any-builder — GET /inbox/votes
+      getInboxVotes: (args) => request("GET", "/inbox/votes", { hasBody: false }, args),
     },
     "instance": {
       // GET /instance — rank: public — GET /instance
@@ -1075,11 +1083,17 @@ export function createClient(opts = {}) {
       getPublicRepoInfo: (args) => request("GET", "/public/repo-info", { hasBody: false }, args),
       // GET /public/tasks/{id} — rank: public — GET /public/tasks/:id
       getPublicTasksId: (args) => request("GET", "/public/tasks/{id}", { hasBody: false }, args),
-      // GET /public/uptime — rank: public — GET /public/uptime
-      getPublicUptime: (args) => request("GET", "/public/uptime", { hasBody: false }, args),
       // GET /public/versions — rank: public — GET /public/versions
       getPublicVersions: (args) => request("GET", "/public/versions", { hasBody: false }, args),
     },
+    "raise": {
+      // POST /raise/edit — rank: any-builder — POST /raise/edit
+      postRaiseEdit: (args) => request("POST", "/raise/edit", { hasBody: true }, args),
+      // POST /raise/enter — rank: public — POST /raise/enter
+      postRaiseEnter: (args) => request("POST", "/raise/enter", { hasBody: true }, args),
+      // POST /raise/interest — rank: public — POST /raise/interest
+      postRaiseInterest: (args) => request("POST", "/raise/interest", { hasBody: true }, args),
+    },
     "removalProposals": {
       // GET /removal-proposals — rank: metic+archon — GET /removal-proposals
       getRemovalProposals: (args) => request("GET", "/removal-proposals", { hasBody: false }, args),
@@ -1237,6 +1251,8 @@ export function createClient(opts = {}) {
       postStoreModulesKeyDelist: (args) => request("POST", "/store/modules/{key}/delist", { hasBody: true }, args),
       // GET /store/modules/{key}/entitlement — rank: any-builder — GET /store/modules/:key/entitlement
       getStoreModulesKeyEntitlement: (args) => request("GET", "/store/modules/{key}/entitlement", { hasBody: false }, args),
+      // GET /store/modules/{key}/listing — rank: any-builder — GET /store/modules/:key/listing
+      getStoreModulesKeyListing: (args) => request("GET", "/store/modules/{key}/listing", { hasBody: false }, args),
       // POST /store/modules/{key}/versions — rank: metic+archon — POST /store/modules/:key/versions
       postStoreModulesKeyVersions: (args) => request("POST", "/store/modules/{key}/versions", { hasBody: true }, args),
       // GET /store/modules/{key}/versions/{version}/channel — rank: any-builder — GET /store/modules/:key/versions/:version/channel
@@ -1343,6 +1359,8 @@ export function createClient(opts = {}) {
       postTasksNewcomerRestock: (args) => request("POST", "/tasks/newcomer-restock", { hasBody: true }, args),
       // GET /tasks/peer-votes/feed — rank: any-builder — GET /tasks/peer-votes/feed
       getTasksPeerVotesFeed: (args) => request("GET", "/tasks/peer-votes/feed", { hasBody: false }, args),
+      // GET /tasks/peer-votes/lookup — rank: any-builder — GET /tasks/peer-votes/lookup
+      getTasksPeerVotesLookup: (args) => request("GET", "/tasks/peer-votes/lookup", { hasBody: false }, args),
       // POST /tasks/peer-votes/tally — rank: metic+archon — POST /tasks/peer-votes/tally
       postTasksPeerVotesTally: (args) => request("POST", "/tasks/peer-votes/tally", { hasBody: true }, args),
     },

package/config/branding.neutral.json

@@ -82,7 +82,7 @@
           "https://fonts.googleapis.com/css2?family=JetBrains+Mono:wght@400&family=Manrope:wght@300;400;500;600&display=swap"
         ]
       },
-      "favicon": "data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'><circle cx='12' cy='17' r='8' fill='%23fb9569'/><circle cx='22' cy='17' r='6' fill='%23c9512c'/><circle cx='12' cy='17' r='3.5' fill='%23fbfafc'/><circle cx='22' cy='17' r='2.5' fill='%23fbfafc'/></svg>",
+      "favicon": "data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 200 200'><style>.r{stroke:%2317181a}.p{fill:%2317181a}@media (prefers-color-scheme:dark){.r{stroke:%23e2e1e4}.p{fill:%23e2e1e4}}</style><path class='r' d='M137 31A78 78 0 1 0 170 66' fill='none' stroke-width='24' stroke-linecap='round'/><circle class='p' cx='100' cy='100' r='50'/><circle cx='156' cy='46' r='18' fill='%23fb9569'/></svg>",
       "backdrop": "var(--bg)"
     }
   },

package/config/design-tokens.schema.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "cloud-bongos/design-tokens",
   "title": "Cloud Bongos design tokens",
-  "description": "Canonical design-token schema for a Cloud Bongos instance. Extends config/branding.json theme.ui. Validated by modules/ui-design/scripts/validate-design.js (node scripts/gds/validate-design.js is its shim). See modules/ui-design/docs/design-contract.md.",
+  "description": "Canonical design-token schema for a Cloud Bongos instance. Extends config/branding.json theme.ui. Validated by modules/ui-design/scripts/validate-design.js (node scripts/bongos/validate-design.js is its shim). See modules/ui-design/docs/design-contract.md.",
   "type": "object",
   "required": ["colors", "fonts"],
   "additionalProperties": false,

package/config/modules.neutral.json

@@ -1,8 +1,6 @@
 {
-  "_note": "Feature-module selection — the VANILLA (customer-0) default: every optional feature OFF. A fresh Cloud Bongos instance is the methodology core only (builders/tasks/claims/credits/grading/memory/recall) with the engineer discipline. To enable a module on an instance, copy this to config/modules.json and flip flags (or set <ENVPREFIX>_MODULE_<NAME>=1). Sibling of config/branding.neutral.json. Owned by R54 / task 1193 (src/modules.js, ADR 0062 §4). Known modules: game, art-pipeline, discord.",
+  "_note": "Feature-module selection — the VANILLA (customer-0) default: every optional feature OFF. A fresh Cloud Bongos instance is the methodology core only (builders/tasks/claims/credits/grading/memory/recall) with the engineer discipline. To enable a module on an instance, copy this to config/modules.json and flip flags (or set <ENVPREFIX>_MODULE_<NAME>=1). Sibling of config/branding.neutral.json. Owned by R54 / task 1193 (src/modules.js, ADR 0062 §4). The full list of known modules is whatever modules/ carries (src/modules.js reports it).",
   "modules": {
-    "game": false,
-    "art-pipeline": false,
     "discord": false
   }
 }

package/docs/adr/0029-status-page-outage-resilience.md

@@ -1,11 +1,11 @@
 # 0029 — Status-page outage resilience: measure from outside, host off-box, prevent at the source
 
-- **Status:** Accepted. **Slice 1 (external prober) built this session** under task **[#565](https://example.com/builders#/task/565)**: `.github/workflows/status-probe.yml` + `scripts/status-probe.mjs` + this ADR. **Follow-up B (page off-box) has since SHIPPED** — `status.example.com` is served off the droplet from GitHub Pages (repo `example-owner/example-status`), synced by `.github/workflows/sync-status-mirror.yml`. Incident-backfill (follow-up C) is **not yet built**.
+- **Status:** Accepted. **Slice 1 (external prober) built this session** under task **[#565](https://example.com/builders#/task/565)**: `.github/workflows/status-probe.yml` + `scripts/status-probe.mjs` + this ADR. **Follow-up B (page off-box) has since SHIPPED** — `status.example.com` is served off the droplet from GitHub Pages (repo `example-owner/example-status`), synced by `.github/workflows/sync-status-mirror.yml`. Incident-backfill (follow-up C) is **not yet built**. **Since removed (task 1004858, 2026-10-25):** the in-process `uptime-poller.js` (nothing started it), the `status-probe.mjs` prober (its workflow was already gone) and the `/public/uptime` feed — the file references below are history.
 - **Date:** 2026-06-03
 - **Deciders:** Lars Kristensen (Archon), Claude
 - **Track:** `internal` (the status dashboard / The Watch)
 - **Context tasks:** **[#565](https://example.com/builders#/task/565)** (slice 1 — external prober + alert + this ADR) · **blocker [#6](https://example.com/builders#/blocker/6)** (DigitalOcean backup payment + billing alerts — root-cause prevention, Lars-only) · follow-up **B** (move `public-status/` off-box + CORS on `/api/gds/public/*` + repoint `status.` DNS) · follow-up **C** (backfill the 2026-06-03 incident into the honest uptime history).
-- **Relates to:** [ADR 0003 — Cloudflare Origin Cert](0003-cloudflare-origin-cert-over-letsencrypt.md) (the CF↔origin leg) · the in-process poller [`src/bongos/uptime-poller.js`](../../src/bongos/uptime-poller.js) (now demoted from public source-of-truth) · [`docs/recipes/ops-gotchas.md`](../recipes/ops-gotchas.md) (the new "status page shared fate" gotcha).
+- **Relates to:** [ADR 0003 — Cloudflare Origin Cert](0003-cloudflare-origin-cert-over-letsencrypt.md) (the CF↔origin leg) · the in-process poller `src/bongos/uptime-poller.js` (now demoted from public source-of-truth) · [`docs/recipes/ops-gotchas.md`](../recipes/ops-gotchas.md) (the new "status page shared fate" gotcha).
 
 ## Context
 
@@ -14,7 +14,7 @@ On **2026-06-03, ~10:00–14:39 UTC (~4h 39m)**, DigitalOcean **powered off the
 Three independent design flaws turned a billing hiccup into a silent, invisible outage:
 
 1. **The status page shares fate with the product.** `status.example.com` is served by the **same Node process on the same droplet** as the game. Whatever kills the product kills the status page. A status page's entire job is to be up when the product is down.
-2. **It measures itself from inside itself.** [`src/bongos/uptime-poller.js`](../../src/bongos/uptime-poller.js) runs *in that Node process* and probes `http://127.0.0.1`. When the droplet died, the poller died — so it wrote **zero rows** during the outage (not "down" rows — *none*). The Watch renders that gap as 100% green. **A monitor that lives inside the thing it monitors can never witness its own death.** It also can't see Cloudflare, DNS, or "is the box reachable from the world" — only "can the server talk to itself."
+2. **It measures itself from inside itself.** `src/bongos/uptime-poller.js` runs *in that Node process* and probes `http://127.0.0.1`. When the droplet died, the poller died — so it wrote **zero rows** during the outage (not "down" rows — *none*). The Watch renders that gap as 100% green. **A monitor that lives inside the thing it monitors can never witness its own death.** It also can't see Cloudflare, DNS, or "is the box reachable from the world" — only "can the server talk to itself."
 3. **Nothing alerted a human.** Detection depended on someone noticing.
 
 The cardinal industry rule (GitHub → `githubstatus.com` on Atlassian's infra; status accounts on a separate platform as a backup channel) is: **a status page must not share fate with the system it reports on, and availability must be measured from outside it.**
@@ -25,8 +25,8 @@ Keep The Watch's custom design (Lars's call), but fix all three flaws as three i
 
 ### 1. Measure from outside (built this session — slice 1, [#565](https://example.com/builders#/task/565))
 An **external prober runs on GitHub-hosted runners** — off our DigitalOcean infrastructure — and probes the **public** URL exactly as a visitor would:
-- [`scripts/status-probe.mjs`](../../scripts/status-probe.mjs) — dependency-free Node; probes `https://example.com/healthz` with in-run confirmation retries (UP if any of 3 attempts is a 200; DOWN only if all fail, which suppresses transient blips). Appends to `history.jsonl`, rewrites `status.json` (snapshot + 24h/7d/90d uptime), prunes to 90 days.
-- [`.github/workflows/status-probe.yml`](../../.github/workflows/status-probe.yml) — `*/5` cron + `workflow_dispatch`; publishes the result to an **orphan `status-data` branch** (off-box, web-readable, survives a droplet outage); **fails the job when the site is confirmed down**, which emails the repo owner — the alert.
+- `scripts/status-probe.mjs` — dependency-free Node; probes `https://example.com/healthz` with in-run confirmation retries (UP if any of 3 attempts is a 200; DOWN only if all fail, which suppresses transient blips). Appends to `history.jsonl`, rewrites `status.json` (snapshot + 24h/7d/90d uptime), prunes to 90 days.
+- `.github/workflows/status-probe.yml` — `*/5` cron + `workflow_dispatch`; publishes the result to an **orphan `status-data` branch** (off-box, web-readable, survives a droplet outage); **fails the job when the site is confirmed down**, which emails the repo owner — the alert.
 
 ### 2. Host the page off-box (follow-up B — SHIPPED)
 `status.example.com` is now served off the droplet from **GitHub Pages** (repo `example-owner/example-status`), synced by [`.github/workflows/sync-status-mirror.yml`](../../.github/workflows/sync-status-mirror.yml); the page no longer shares fate with the product. Original plan, for the record:
@@ -52,7 +52,7 @@ The actual root cause was billing. Add a **backup payment method + billing/balan
 
 ## Consequences
 
-- [`src/bongos/uptime-poller.js`](../../src/bongos/uptime-poller.js) is **no longer the public source of truth** for availability. It stays useful as an *internal* component-liveness signal (can the process reach its own DB?), but The Watch's availability section will read the off-box `status-data` (follow-up B). Whether to retire the in-process poller entirely is decided in B.
+- `src/bongos/uptime-poller.js` is **no longer the public source of truth** for availability. It stays useful as an *internal* component-liveness signal (can the process reach its own DB?), but The Watch's availability section will read the off-box `status-data` (follow-up B). Whether to retire the in-process poller entirely is decided in B.
 - Honest uptime history starts accumulating off-box from the first prober run.
 - The 2026-06-03 incident is backfilled into the record (follow-up C) so The Watch stops claiming 100%.
 - The lesson — "a status page must not share fate with the product, and cannot measure itself" — is captured as **GDS learning `#35`** and a new "Status page + monitoring" section in [`docs/recipes/ops-gotchas.md`](../recipes/ops-gotchas.md) (incl. the 522 / total-outage diagnostic runbook).

package/docs/adr/0227-a-task-network-map-is-refused-the-goal-graph-is-the-map.md

@@ -4,7 +4,7 @@
 - **Date:** 2026-09-02
 - **Tasks:** [#1003282](https://cloudbongos.com/builders#/task/1003282)
 - **Goal:** [#1000072](https://cloudbongos.com/builders#/goal/1000072) — Human legibility, criterion `legibility-project-map`, which gates itself on this spike.
-- **Evidence:** [`docs/research/task-network-map-readability.md`](../research/task-network-map-readability.md) and the figures in [`docs/research/task-network-map/`](../research/task-network-map/), rendered by [`scripts/gds/spike-task-map.js`](../../scripts/gds/spike-task-map.js).
+- **Evidence:** [`docs/research/task-network-map-readability.md`](../research/task-network-map-readability.md) and the figures in [`docs/research/task-network-map/`](../research/task-network-map/), rendered by `scripts/gds/spike-task-map.js` (deleted in [task 1004857](https://cloudbongos.com/builders#/task/1004857); recover it with `git show b8c20cba2:scripts/bongos/spike-task-map.js`).
 - **Sibling goal:** [#1000027](https://cloudbongos.com/builders#/goal/1000027) — Findability, "the grep path" (ADR 0095, ADR 0060).
 
 ## 1. The decision

package/docs/adr/0294-cli-sessions-do-not-expire.md

@@ -1,6 +1,6 @@
 # 0294 — CLI sessions do not expire; revocation is the whole remedy
 
-- **Status:** Accepted
+- **Status:** Superseded by [ADR 0383](0383-sessions-end-after-ten-idle-days.md)
 - **Date:** 2026-09-16
 - **Deciders:** The owner, who asked for the CLI timeout removed entirely after a three-week gap signed him out, and accepted the stated security consequence.
 - **Task:** task 1003956 (goal 1000110 — Working area 2: account creation, management & community)

package/docs/adr/0383-sessions-end-after-ten-idle-days.md

@@ -0,0 +1,35 @@
+# 0383 — Sessions end after ten idle days, CLI included
+
+- **Status:** Accepted
+- **Date:** 2026-10-23
+- **Deciders:** The owner, who asked that Settings → Access & keys stop listing sessions older than 10 days, chose ending them over hiding them, and accepted being signed out of the CLI after 10 days away.
+- **Task:** [task 1004830](https://cloudbongos.com/builders#/task/1004830)
+- **Supersedes:** [ADR 0294](0294-cli-sessions-do-not-expire.md) (CLI sessions do not expire). **Interacts with:** [ADR 0206](0206-own-scoped-session-revocation-no-absolute-ceiling.md).
+
+## Context
+
+ADR 0294 removed the CLI timeout and made the Active sessions list the main control against a leaked or abandoned token. Its "when to revisit" named this case: long-dead sessions pile up on the list faster than people prune them. The owner hit it and asked that the list show nothing older than 10 days.
+
+Hiding old rows alone would make things worse. A hidden session still works, so an abandoned token on an old laptop would be both live and invisible.
+
+## Decision
+
+**A session of any source that has not been used for 10 days stops working.**
+
+1. `SESSION_IDLE_LIMIT_MS` (10 days) lives in `db-kernel.js`. `lookupSession` refuses a row whose `last_used_at` is older than that, before refresh-on-use can touch it.
+2. `listActiveSessionsForBuilder` applies the same cutoff, so the list and authentication agree: what you see is exactly what still works.
+3. It is measured on `last_used_at`, not `created_at`. A session in use never hits it, so this is an idle limit, not the absolute ceiling ADR 0206 rejected.
+4. No migration. Rows already idle past 10 days stop working on deploy; that is the point.
+
+`expires_at` and the 30-day browser expiry are unchanged and still apply on top.
+
+## Consequences
+
+- A builder away for more than 10 days signs in again (`/builder-reauth`, or re-issue under CLI Access). This is the cost ADR 0294 removed, and the owner accepted it back.
+- An abandoned token on a decommissioned machine dies on its own within 10 days.
+- Idle rows are not marked revoked; they simply stop matching. Revocation stays the explicit, audited action.
+
+## Rejected
+
+- **Hide old sessions but keep them live.** Leaves a working token nobody can see to revoke.
+- **Browser sessions only.** Offered; the owner chose to include the CLI.

package/docs/adr/0384-the-raise-page-is-a-hub-module-builders-edit-in-place.md

@@ -0,0 +1,31 @@
+# 0384 — The /raise investor page is a hub module that builders edit in place
+
+- **Status:** Accepted
+- **Date:** 2026-10-25
+- **Task:** [task 1004847](https://cloudbongos.com/builders#/task/1004847)
+- **Deciders:** Lars (owner/Archon); Claude designed and built
+- **Related:** ADR 0016 (trust boundary), 0083 (modules), 0098 (publish manifest), 0141 (hub identity), 0218 (apex web surfaces), 0349 (the `request.divert` port this mirrors)
+
+## Context
+
+Cloud Bongos LLC's pre-seed investor page went live at `cloudbongos.com/raise` on 2026-10-25 as a standalone Node service in the owner's private raise workspace, routed by a Caddy block ahead of the app. It had: a password gate for investors (name + LinkedIn + shared password; signing in accepts the NDA), a non-binding "I'm interested" calculator, and in-place editing of every text block and the raise numbers for the team, signed in through the hub's SSO.
+
+The owner then asked for it to live in the Bongos repo so that **builders can contribute to the page through normal tasks**. Two facts shaped how:
+
+1. **What reaches the hub is the published core.** A path outside the publish allowlist reaches no instance at any version (ADR 0098), and everything inside it is published in the public mirror. There is no "in the repo, on the hub, but private" option. The owner chose (2026-10-25) to put **everything** in — code, the copy, the NDA text and the starting numbers — accepting that it publishes. Only secrets stay out: the investor password is a scrypt hash in the instance env.
+2. **The page is not an API.** It answers on the apex at `/raise`, outside the `/api/bongos` mount every module route lives under, and it must be reachable while the hub is still behind its pre-launch password (investors are not given that password).
+
+## Decision
+
+1. **A `raise` module, `default: false`, enabled only on the hub** — the platform-identity pattern. Allowlisted in `publish-manifest.js`.
+2. **Writes are routes; the page is a port.** Every write (`enter`, `interest`, `edit`) is a module route under `/api/bongos/raise/*`, where the route-rank audit classifies it. The page itself is served by a `raise.web` port provider that answers **GET/HEAD only**, which core mounts at `/raise` on the apex with one generic block in `platform-server.js` — looked up per request, `next()` when absent, exactly as `request.divert` does. A port rather than a webSurface because the page is rendered per visitor (gate vs page vs edit bar), not static bytes.
+3. **Team editing uses the ordinary builder session**, not the SSO client the standalone service needed: the page is on the hub, so the hub's own session cookie already identifies the builder. Editing is `requireBuilder` + `requireRank('xenos')` — **any active builder**, owner's call of 2026-10-25 ("don't rank gate edit access as of now"). Raising the floor is a one-word change in `raise.js` (`RANKS_ANY`).
+4. **Investors are not builders.** They get an opaque session token in a `raise_s` cookie; only its SHA-256 is stored (`raise_sessions`), so a database read cannot be replayed as a sign-in.
+5. **`/raise` is exempt from the pre-launch gate.** It carries its own password and NDA. On an instance without the module the path is a 404, so the exemption opens nothing there.
+6. **The copy is data, not code, and it is the owner's words.** Shipped defaults in `content/copy.json`, edits in `raise_copy` (an edit wins; reverting to the shipped text deletes the row), every change in `raise_edits` with who/before/after. Code must never reword it.
+
+## Consequences
+
+- Builders improve the page through tasks like any other module; content changes happen on the page itself and are logged.
+- The page's copy, NDA text and starting numbers are public once the core publishes. Live edits (the database) and investor records are not.
+- Cutover on the hub: enable the module, set `RAISE_PASSWORD_HASH`, move the standalone service's records into the tables, then retire its systemd unit, its Caddy block and its SSO client registration.

package/docs/adr/README.md

@@ -501,3 +501,5 @@ These 20 numbers are each shared by exactly two files. They are **accepted histo
 | 0380 | [**A strictness preset is a bundle of laws, switched by one laws vote and read from the laws in force** ([task 1004715](https://cloudbongos.com/builders#/task/1004715), goal 1000111). **D1:** Open workshop, Guild, Factory are catalogues of laws in `presets.js`; every lock names a stored personal setting. **D2:** a switch is ONE laws amendment through `board.proposeLaws` (`POST /government/board/presets`); only its passing writes. **D3:** the preset in force is read from the laws in force, never stored; nothing is seeded. **D4:** `GET /government/presets` says what each would lock; My agents and the Charter are real.](0380-a-strictness-preset-is-a-bundle-of-laws-switched-by-one-laws-vote.md) | government / laws / my agents |
 | 0381 | [**The hub moves each hosted project's core on its own, by that project's update rule** ([task 1004729](https://cloudbongos.com/builders#/task/1004729), goal 1000090). Amends ADR 0293's "not automatic" for hosted projects. **D1:** after each snapshot the runner queues a preflight for `recommended`, then the move once that preflight passed. **D2:** through `enqueueIntent` as `runner:auto-upgrade`; never the control-plane row. **D3:** one automatic intent per tick. **D4:** a target that already failed or was refused is held (read from existing rows; task 1004730 is the richer hold). **D5:** `BONGOS_AUTO_CORE_UPGRADE=off` stops it platform-wide; default on; `pinned` is the per-project switch.](0381-the-hub-moves-each-hosted-project-by-its-update-rule.md) | provisioning / core upgrade / automation |
 | 0382 | [**A hardware card is a passkey step-up check, switched on per builder by an Archon** ([task 1004676](https://cloudbongos.com/builders#/task/1004676), proposed). No WebAuthn exists today; sign-in is GitHub OAuth or the hub IdP. **D1:** WebAuthn via a vetted library. **D2:** the card is a second factor, a server-recorded step-up, never the first. **D3:** register first; the requirement needs a registered card. **D4:** an Archon switches it on per builder, default off. **D5:** guards rank changes, deploy, session revoke, payouts. No PC/SC reader needed. Rejected: PC/SC middleware, card as sole login.](0382-a-hardware-card-is-a-passkey-step-up-an-archon-switches-on-per-builder.md) | auth / security |
+| 0383 | [**Sessions end after ten idle days, CLI included** ([task 1004830](https://cloudbongos.com/builders#/task/1004830)). Supersedes ADR 0294. Any session unused for 10 days stops authenticating and drops off the Active sessions list; measured on last_used_at, so it is an idle limit, not a ceiling. Rejected: hiding old sessions while they stay live; browser-only.](0383-sessions-end-after-ten-idle-days.md) | auth / security |
+| 0384 | [**The /raise investor page is a hub module that builders edit in place** ([task 1004847](https://cloudbongos.com/builders#/task/1004847)). A `raise` module, enabled only on the hub: every write is an audited `/api/bongos/raise/*` route, the page itself a GET-only `raise.web` port core mounts at /raise; team editing rides the ordinary builder session (any active builder, owner 2026-10-25); investors get a hashed-token session; /raise is exempt from the pre-launch gate. Everything, copy included, publishes with the core (owner's call); only the password hash stays in env.](0384-the-raise-page-is-a-hub-module-builders-edit-in-place.md) | modules / pages |