@bongos/core 1.21.175 → 1.21.177

package/scripts/gds/goal-names.js

@@ -1,102 +0,0 @@
-#!/usr/bin/env node
-// scripts/gds/goal-names.js — give every open goal a NAME, and move its
-// explanation into `subtitle` (task 1003225, goal 1000072, criterion
-// legibility-goal-names-and-claude-text).
-//
-// Owner directive: a goal's subtitle should not sit on its title. 28 open goals
-// carried theirs after a dash and 3 more after a colon — the punctuation is not
-// the point, the jamming is. Task 1003224 gave `goals` a `subtitle` column and
-// taught the hall to render name / subtitle / Claude's prose at three weights;
-// this moves the existing text into that shape.
-//
-// WHY A MAPPING FILE AND NOT 31 AD-HOC PATCHES. A rename is a judgment call, and
-// judgment that lives only in a shell history cannot be reviewed, re-run, or
-// argued with. The table below IS the decision: it can be read in a diff, its
-// invariants are unit-tested (no duplicate names, no name still carrying its own
-// explanation, nothing dropped), and re-running is a no-op.
-//
-// IT IS NOT A MECHANICAL SPLIT, which is the whole reason this is its own task.
-// Splitting on the separator works where the head already names the thing
-// ("Findability — the grep path"). It FAILS where the head is not distinctive:
-// goals 1000038/1000039/1000040 all head "Agents module" and differ ONLY in the
-// tail, so a split would leave three identically-named goals — strictly worse
-// than today. Those three, the version catch-all, and three wordy heads get
-// written names; the rest keep theirs verbatim.
-//
-// SAFETY. Dry-run by DEFAULT (`--apply` to write). Every write goes through
-// PATCH /goals/:id, which is authorized (owner|manager|Archon) and records
-// prose-edit deltas — so the rename is audit-trailed, unlike the prod SQL UPDATE
-// that would otherwise be the only channel. It REFUSES to run at all if the
-// server does not yet return `subtitle`, because renaming titles against a
-// server that cannot store the subtitle would DELETE the explanations.
-
-'use strict';
-
-// id → { title, subtitle, why? }. `why` is recorded only where the name is
-// NEW rather than the existing head — i.e. where judgment was applied.
-const GOAL_NAMES = Object.freeze({
-  // ── names written, because the head was not usable ───────────────────────
-  1000003: { title: 'Work with no goal yet',
-    subtitle: 'The version catch-all. Tasks land here when nothing else fits — and nothing here can satisfy a criterion (ADR 0183), so it is a holding pen, not a home.',
-    why: 'was "BONGOS-V1 — general": a version id and the word general name nothing. Named for what it actually is.' },
-  1000038: { title: 'Agent framework & registry',
-    subtitle: 'The foundation — the plugin surface an agent is written against, and the registry that holds the roster.',
-    why: 'one of THREE goals heading "Agents module"; a mechanical split would have left three identically-named goals. Written without a colon on purpose: "Agents: framework" is the same name-plus-qualifier shape this task exists to remove, and the test flagged it.' },
-  1000039: { title: 'Agent authoring & first roster',
-    subtitle: 'Owner and builder authoring, plus the first real roster — event-driven and on-demand agents.',
-    why: 'second of the three "Agents module" goals. Named for what it adds — authoring and the first roster — rather than by a tail no list ever showed.' },
-  1000040: { title: 'Agent scheduling & spend limits',
-    subtitle: 'Scheduled agents, and the guardrails on what they are allowed to spend.',
-    why: 'third of the three "Agents module" goals. Scheduling and spend are what separate it from the framework and authoring goals.' },
-  1000053: { title: 'Sessions start knowing',
-    subtitle: 'Front-load auth, environment and instance facts so a session does not spend its first minutes rediscovering them.',
-    why: 'was "Session efficiency: sessions start knowing" — the head restated the tail. Kept the half that is a name.' },
-  1000064: { title: 'The hall as the room',
-    subtitle: 'Agora, Monitor & Contribute, and chat that does not care which channel it came from.',
-    why: 'colon-separated rather than dashed; same jamming, so treated identically.' },
-  1000075: { title: 'Collaboration & the social hall',
-    subtitle: 'Ask for help by craft, and let the hall become a mode rather than a page.',
-    why: 'was "Collab, then the social hall" — an ordering, not a name.' },
-  1000077: { title: 'Guards, not notes',
-    subtitle: 'The four failure modes that prose already documented and nothing refused.',
-    why: 'colon-separated; the head is already a good name, the tail is the explanation.' },
-  1000078: { title: 'Project money out',
-    subtitle: 'A funded balance, real builder payouts, visible outflows, and work that cannot outrun the money.',
-    why: 'colon-separated rather than dashed. The head is already the name; the tail is a four-part explanation that belongs underneath it.' },
-
-  // ── heads kept verbatim; only the tail moves ─────────────────────────────
-  1000025: { title: 'Builder experience', subtitle: 'Hall, dev box, and skills.' },
-  1000027: { title: 'Findability', subtitle: 'The grep path (ADR 0095).' },
-  1000029: { title: 'Module upstreaming & catalog', subtitle: 'Instances contribute modules back into core.' },
-  1000032: { title: 'Instance hosting + domains', subtitle: 'The `provisioning` module.' },
-  1000044: { title: 'Living project sky', subtitle: 'A shared, persistent, data-driven orb gate.' },
-  1000045: { title: 'Public builder profiles', subtitle: 'Track record, apply-to-project, and owner recruiting.' },
-  1000046: { title: 'Project creation', subtitle: 'Visibility and customization.' },
-  1000048: { title: 'SEO & public discoverability', subtitle: 'Rankable per-project profiles.' },
-  1000049: { title: 'Orb Physics', subtitle: 'Orb motion and space-whale flight.' },
-  1000052: { title: 'First-run onboarding', subtitle: 'From a bare machine to a first ship.' },
-  1000054: { title: 'Public distribution', subtitle: 'CLI installer and Claude plugin.' },
-  1000057: { title: 'Rank blocker matrix', subtitle: 'Empirically verify intended vs unintended blockers across xenos, thetes and metic.' },
-  1000058: { title: 'Non-cloudbongos project lifecycle', subtitle: 'Creation, governance, planning, building — the whole flow works and feels right.' },
-  1000063: { title: 'The front door', subtitle: 'Enter the Future: hero-only landing, wormhole transit, About on the map.' },
-  1000065: { title: 'Community surface', subtitle: 'Builder discovery on the hub.' },
-  1000067: { title: 'Ideator compensation', subtitle: 'The idea credit stream, separate from cost-plus.' },
-  1000068: { title: 'Government, not governance', subtitle: 'Ranks are ranks, and "role" belongs to the crafts.' },
-  1000070: { title: 'Scan-before-install', subtitle: 'First-real-run hardening.' },
-  1000071: { title: 'Idea routing', subtitle: 'Work that has a home lands in it.' },
-  1000072: { title: 'Human legibility', subtitle: 'Seeing, sorting and steering an AI-run project.' },
-  1000073: { title: 'Finish the GDS→Bongos rename', subtitle: 'Retire a legacy Primea term without rewriting history.' },
-  1000074: { title: "The artist's loop", subtitle: 'Review authority, copy an artist can change, and a place to do it.' },
-  // 1000080 already carried a subtitle, so the tail is PREPENDED to it rather than
-  // replacing it — overwriting would delete text, the exact loss this task guards.
-  1000080: { title: 'Apex UI pass 2', subtitle: 'One top bar, two dropdowns, and a project card worth opening — the chrome and the card on cloudbongos.com and /projects.' },
-});
-
-// A name must not carry its own explanation — that is the whole point.
-const SEPARATOR = / [—-] |: /;
-
-// Goals deliberately untouched: their titles are already names. Listed so the
-// coverage test can tell "already fine" from "forgotten".
-const ALREADY_NAMES = Object.freeze([1000009, 1000024, 1000028, 1000037, 1000047, 1000050]);
-
-module.exports = { GOAL_NAMES, ALREADY_NAMES, SEPARATOR };

package/scripts/gds/rename-goals.js

@@ -1,109 +0,0 @@
-#!/usr/bin/env node
-// scripts/gds/rename-goals.js — apply the goal-names.js mapping (task 1003225).
-//
-// Usage:
-//   node scripts/gds/rename-goals.js            # DRY RUN — prints the diff, writes nothing
-//   node scripts/gds/rename-goals.js --apply    # writes, via PATCH /goals/:id
-//
-// Writes go through PATCH /goals/:id, never SQL: that route is authorized
-// (owner|manager|Archon) and records prose-edit deltas, so a rename of somebody's
-// goal is audit-trailed. A prod UPDATE would be invisible.
-//
-// THE GUARD THAT MATTERS: it refuses to run when the server does not return
-// `subtitle`. Renaming a title against a server that cannot store the subtitle
-// would DELETE the explanation — the exact data loss this task exists to avoid.
-// core_224 ships the column; a live instance one release behind does not have it.
-
-'use strict';
-
-const { cliClient, requireSession, hasFlag } = require('./cli-lib');
-const { GOAL_NAMES, SEPARATOR } = require('./goal-names.js');
-
-// Nothing to do when the goal already reads the way the mapping wants.
-function planFor(goal, want) {
-  const patch = {};
-  if ((goal.title || '') !== want.title) patch.title = want.title;
-  if ((goal.subtitle || '') !== want.subtitle) patch.subtitle = want.subtitle;
-  return patch;
-}
-
-async function main() {
-  await requireSession();
-  const apply = hasFlag('--apply');
-  const api = await cliClient();
-
-  const res = await api.goals.getGoals({ query: { version: 'BONGOS-V1' } });
-  if (!res.ok) {
-    console.error(`could not list goals: ${res.status}`);
-    process.exit(1);
-  }
-  const goals = (res.data.goals || []).filter((g) => g.status === 'open');
-  if (!goals.length) {
-    console.error('no open goals returned — refusing to act on an empty read.');
-    process.exit(1);
-  }
-
-  // The refusal above all others.
-  if (!Object.prototype.hasOwnProperty.call(goals[0], 'subtitle')) {
-    console.error('REFUSING: this server does not return `subtitle`, so it cannot store one.');
-    console.error('Renaming titles now would drop every explanation on the floor.');
-    console.error('core_224 adds the column — wait for the release carrying it to DEPLOY, then re-run.');
-    process.exit(2);
-  }
-
-  let changed = 0; let already = 0; let missing = 0; let failed = 0;
-  for (const g of goals.sort((a, b) => Number(a.id) - Number(b.id))) {
-    const want = GOAL_NAMES[Number(g.id)];
-    if (!want) {
-      // Not an error: goals whose titles were already names are deliberately absent.
-      if (SEPARATOR.test(g.title || '')) {
-        console.error(`!  ${g.id} has a jammed title but no mapping entry: ${g.title}`);
-        missing += 1;
-      }
-      continue;
-    }
-    const patch = planFor(g, want);
-    if (!Object.keys(patch).length) { already += 1; continue; }
-    console.log(`${apply ? '→' : '·'}  ${g.id}`);
-    if (patch.title) console.log(`     title    ${JSON.stringify(g.title)}  ->  ${JSON.stringify(patch.title)}`);
-    if (patch.subtitle !== undefined) console.log(`     subtitle ${JSON.stringify(g.subtitle || '')}  ->  ${JSON.stringify(patch.subtitle)}`);
-    if (!apply) { changed += 1; continue; }
-    const r = await api.goals.patchGoalsId({ id: g.id, body: patch });
-    if (!r.ok) {
-      console.error(`     FAILED ${r.status} ${JSON.stringify(r.data)}`);
-      failed += 1;
-    } else {
-      changed += 1;
-    }
-  }
-
-  console.log('');
-  console.log(`${apply ? 'applied' : 'would change'}: ${changed} · already correct: ${already}`
-    + `${missing ? ` · UNMAPPED jammed titles: ${missing}` : ''}${failed ? ` · FAILED: ${failed}` : ''}`);
-  if (!apply) console.log('dry run — re-run with --apply to write.');
-
-  // THE POST-CONDITION, CHECKED AGAINST REAL DATA — not against the mapping.
-  // The task's deliverable is a STATE of the live goal set ("no open goal's title
-  // contains a dash-appended subtitle"), and unit tests over the mapping's internal
-  // consistency cannot witness that: they would pass just as happily if --apply had
-  // never been run. This re-reads what the server actually holds now and reports it,
-  // so the claim is falsifiable by anyone re-running the command.
-  //
-  // SCOPED TO THIS VERSION, deliberately. The read above is `version: BONGOS-V1`;
-  // CB-V1 carries jammed titles of its own (id 4, 1000043, 1000066, 1000079) which
-  // are ANOTHER version's work, and sweeping them in here would rename goals this
-  // task never reviewed.
-  const stillJammed = goals.filter((g) => SEPARATOR.test(g.title || ''));
-  console.log('');
-  console.log(`post-condition (BONGOS-V1 open goals): ${goals.length} checked · `
-    + `${stillJammed.length} still carrying an explanation in the title`);
-  for (const g of stillJammed) console.log(`  ! ${g.id} ${JSON.stringify(g.title)}`);
-
-  process.exit(failed || missing ? 1 : 0);
-}
-
-if (require.main === module) {
-  main().catch((err) => { console.error('fatal:', err); process.exit(1); });
-}
-
-module.exports = { planFor };

package/scripts/gds/resolve-skill-model.js

@@ -1,57 +0,0 @@
-#!/usr/bin/env node
-// Resolve the effective model token for a skill invocation.
-//
-// Usage:
-//   node scripts/gds/resolve-skill-model.js <skill-name>
-//
-// Prints one of: opus | sonnet | haiku | script
-//
-// Each SKILL.md that spawns an Agent tool call should invoke this helper
-// at the top to honour the builder's per-skill model preferences (V3.R85
-// / ADR #304). Without this, the skill-model-preferences matrix is
-// honest but inert — the builder sets a preference, but every Agent call
-// still uses whatever model the parent session inherits.
-//
-// Exit 0 + prints the model token on success.
-// Exit 1 + prints an error on failure (network, no session, unknown
-// skill). Callers should treat exit 1 as "fall back to opus" rather
-// than aborting — a failure in preference resolution should not block
-// the skill itself.
-
-const { cliClient, requireSession } = require('./cli-lib');
-
-(async () => {
-  await requireSession();
-  const skillName = process.argv[2];
-  if (!skillName) {
-    console.error('usage: node scripts/gds/resolve-skill-model.js <skill-name>');
-    process.exit(1);
-  }
-
-  const api = await cliClient();
-  const r = await api.me.getMeSkillPrefs();
-  if (!r.ok) {
-    console.error(`resolve-skill-model: GET /me/skill-prefs failed (${r.status})`);
-    process.exit(1);
-  }
-
-  const effective = r.data?.effective;
-  if (!Array.isArray(effective)) {
-    console.error('resolve-skill-model: unexpected response shape');
-    process.exit(1);
-  }
-
-  const row = effective.find((e) => e.skill === skillName);
-  if (!row) {
-    // Unknown skill — not in KNOWN_SKILLS. Fall back to opus so the
-    // caller can proceed; stderr surfaces the gap for the builder.
-    console.error(`resolve-skill-model: '${skillName}' is not in the known-skills list — defaulting to opus`);
-    console.log('opus');
-    process.exit(0);
-  }
-
-  console.log(row.effective_model);
-})().catch((err) => {
-  console.error('resolve-skill-model: fatal:', err.message || err);
-  process.exit(1);
-});

package/scripts/gds/security-baseline-check.sh

@@ -1,180 +0,0 @@
-#!/usr/bin/env bash
-# scripts/gds/security-baseline-check.sh — V3.R44 (#253).
-#
-# The enforceable read of docs/security-baseline.md. Walks eight categories
-# and prints PASS / FAIL / pending for each. Exit 0 if no FAILs (pendings are
-# OK); exit 1 if any FAIL.
-#
-# Intended caller: the /merge-mode skill, before landing a non-Archon claim.
-# Also runs cleanly by hand: `bash scripts/gds/security-baseline-check.sh`.
-#
-# Pure check — no writes, no network calls. The point is to be cheap enough to
-# run on every merge.
-
-set -uo pipefail
-
-# Anchor to repo root regardless of where the script was invoked from.
-REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
-cd "$REPO_ROOT"
-
-PASS_COUNT=0
-FAIL_COUNT=0
-PENDING_COUNT=0
-FAILED_ITEMS=()
-
-# emit <status> <label> <detail>
-emit() {
-  local status=$1; shift
-  local label=$1;  shift
-  local detail=$*
-  case "$status" in
-    PASS)    PASS_COUNT=$((PASS_COUNT+1));    printf '  \033[32mPASS\033[0m    %s — %s\n' "$label" "$detail" ;;
-    FAIL)    FAIL_COUNT=$((FAIL_COUNT+1));    FAILED_ITEMS+=("$label"); printf '  \033[31mFAIL\033[0m    %s — %s\n' "$label" "$detail" ;;
-    PENDING) PENDING_COUNT=$((PENDING_COUNT+1)); printf '  \033[33mpending\033[0m %s — %s\n' "$label" "$detail" ;;
-  esac
-}
-
-echo "security-baseline-check — walking 8 categories"
-echo "(repo: $REPO_ROOT)"
-echo ""
-
-# ---- 1. input validation on every write route -------------------------------
-# Every router file that defines POST/PATCH/PUT/DELETE must reference
-# validateOrRespond. A router with only GETs is exempt.
-miss=()
-for f in src/bongos/routes/*.js; do
-  if grep -qE "router\.(post|patch|put|delete)\b" "$f"; then
-    if ! grep -q "validateOrRespond" "$f"; then
-      miss+=("$f")
-    fi
-  fi
-done
-if [ ${#miss[@]} -eq 0 ]; then
-  emit PASS "1. input-validation" "every write-bearing router uses validateOrRespond"
-else
-  emit FAIL "1. input-validation" "missing in: ${miss[*]}"
-fi
-
-# ---- 2. auth-token hygiene --------------------------------------------------
-# Schema migration 035 is the floor. db.js must export the revocation helpers.
-if [ -f migrations/035_auth_token_hygiene.sql ] && \
-   grep -q "revokeSessionById" src/bongos/db.js && \
-   grep -q "revokeAllSessionsForBuilder" src/bongos/db.js; then
-  emit PASS "2. auth-token-hygiene" "migration 035 present, revocation helpers exported"
-else
-  emit FAIL "2. auth-token-hygiene" "migration 035 or revocation helpers missing"
-fi
-
-# ---- 3. rate limits on write paths ------------------------------------------
-# Caddy directive + Express middleware file (V3.R34 / #255 — still in flight
-# at the time this script was written; emit pending if not yet shipped).
-caddy_ok=0; mw_ok=0
-[ -f infra/Caddyfile ] && grep -q "rate_limit" infra/Caddyfile && caddy_ok=1
-[ -d src/bongos/middleware ] && find src/bongos/middleware -name "*rate*.js" -print -quit | grep -q . && mw_ok=1
-if [ "$caddy_ok" = "1" ] && [ "$mw_ok" = "1" ]; then
-  emit PASS "3. rate-limits" "Caddyfile + middleware/*rate*.js both present"
-elif [ "$caddy_ok" = "0" ] && [ "$mw_ok" = "0" ]; then
-  emit PENDING "3. rate-limits" "V3.R34 (#255) not yet shipped — neither Caddy directive nor middleware present"
-else
-  emit FAIL "3. rate-limits" "partial implementation (caddy=$caddy_ok middleware=$mw_ok); finish or revert"
-fi
-
-# ---- 4. audit logging on every authenticated write --------------------------
-if [ -f migrations/033_audit_log.sql ] && [ -f src/bongos/middleware/audit.js ]; then
-  emit PASS "4. audit-logging" "migration 033 + middleware/audit.js present"
-elif [ -f migrations/033_audit_log.sql ]; then
-  emit FAIL "4. audit-logging" "migration 033 present but src/bongos/middleware/audit.js missing"
-else
-  emit FAIL "4. audit-logging" "migration 033 missing"
-fi
-
-# ---- 5. dependency scanning in CI + nightly ---------------------------------
-ci_ok=0; cron_ok=0; scan_ok=0
-[ -f .github/workflows/dep-audit.yml ] && ci_ok=1
-[ -f .claude/scheduled-tasks/dep-audit-nightly/SKILL.md ] && cron_ok=1
-[ -f scripts/security/dep-audit.js ] && scan_ok=1
-if [ "$ci_ok" = "1" ] && [ "$cron_ok" = "1" ] && [ "$scan_ok" = "1" ]; then
-  emit PASS "5. dep-scanning" "CI workflow + nightly cron + scan script all present"
-else
-  emit FAIL "5. dep-scanning" "missing: ci=$ci_ok cron=$cron_ok scan=$scan_ok"
-fi
-
-# ---- 6. no secrets in repo --------------------------------------------------
-hook_ok=0
-[ -f .husky/pre-commit ] && grep -qE "secret|trufflehog|gitleaks|secrets-scan" .husky/pre-commit && hook_ok=1
-[ "$hook_ok" = "0" ] && [ -f .git/hooks/pre-commit ] && grep -qE "secret|trufflehog|gitleaks|secrets-scan" .git/hooks/pre-commit && hook_ok=1
-# .env.local must be in .gitignore so it can't be staged accidentally.
-gitignore_ok=0
-[ -f .gitignore ] && grep -qE "^\.env\.local$|^\.env\.local\b" .gitignore && gitignore_ok=1
-if [ "$hook_ok" = "1" ] && [ "$gitignore_ok" = "1" ]; then
-  emit PASS "6. no-secrets-in-repo" "pre-commit secrets scan present + .env.local gitignored"
-elif [ "$gitignore_ok" = "1" ]; then
-  emit FAIL "6. no-secrets-in-repo" ".env.local gitignored OK, but no pre-commit secrets scan detected"
-else
-  emit FAIL "6. no-secrets-in-repo" "missing: pre-commit=$hook_ok gitignore=$gitignore_ok"
-fi
-
-# ---- 7. observability dashboards --------------------------------------------
-# The status dashboard surface moved to modules/status-ui/public/ in BV1.R84.
-status_ok=0; grafana_ok=0
-[ -d modules/status-ui/public ] && status_ok=1
-[ -d docs/grafana ] && find docs/grafana -name "*.json" -print -quit 2>/dev/null | grep -q . && grafana_ok=1
-if [ "$status_ok" = "1" ] && [ "$grafana_ok" = "1" ]; then
-  emit PASS "7. observability" "modules/status-ui/public/ + docs/grafana/*.json present"
-elif [ "$status_ok" = "1" ]; then
-  emit PENDING "7. observability" "V3.R42 (#263) not yet shipped — status dashboard OK, no provisioned grafana JSON yet"
-else
-  emit FAIL "7. observability" "modules/status-ui/public/ missing"
-fi
-
-# ---- 8. rank-check audit on every route -------------------------------------
-# Each router.<verb> declaration must EITHER have a 'rank:' comment within 5
-# lines above OR reference requireBuilder/requireRank in the middleware chain
-# of that declaration line. Routes that fail this surface explicitly so the
-# fix is local to the offending router file.
-ungated=()
-while read -r line; do
-  file="${line%%:*}"
-  rest="${line#*:}"
-  lineno="${rest%%:*}"
-  # capture the verb declaration line
-  decl=$(sed -n "${lineno}p" "$file")
-  # check the declaration line itself for auth.* middleware
-  if echo "$decl" | grep -qE "auth\.(requireBuilder|requireRank)"; then
-    continue
-  fi
-  # otherwise check the 5 lines above for a `rank:` comment OR a multi-line
-  # router definition where the middleware chain spans lines (the closing
-  # paren of router.<verb>(... can be many lines down). Search up to 20 lines
-  # forward for auth.require* in the same router(...) block.
-  start=$((lineno > 5 ? lineno - 5 : 1))
-  before=$(sed -n "${start},${lineno}p" "$file")
-  if echo "$before" | grep -qE "rank:|RANK:"; then
-    continue
-  fi
-  end=$((lineno + 20))
-  after=$(sed -n "${lineno},${end}p" "$file")
-  if echo "$after" | grep -qE "auth\.(requireBuilder|requireRank)"; then
-    continue
-  fi
-  ungated+=("$file:$lineno")
-done < <(grep -nE "router\.(get|post|patch|put|delete)\(" src/bongos/routes/*.js)
-if [ ${#ungated[@]} -eq 0 ]; then
-  emit PASS "8. rank-check-audit" "every route either rank-commented or uses requireBuilder/requireRank"
-else
-  emit FAIL "8. rank-check-audit" "ungated routes: ${ungated[*]}"
-fi
-
-# ---- summary ----------------------------------------------------------------
-echo ""
-echo "summary: PASS=$PASS_COUNT  pending=$PENDING_COUNT  FAIL=$FAIL_COUNT"
-if [ "$FAIL_COUNT" -gt 0 ]; then
-  echo "FAILED items:"
-  for it in "${FAILED_ITEMS[@]}"; do echo "  - $it"; done
-  echo ""
-  echo "Fix the FAILED items (or escalate to Archon for an audit-logged override) before /merge-mode lands a non-Archon claim."
-  exit 1
-fi
-echo ""
-echo "OK — baseline green. Non-Archon merges may proceed."
-exit 0

package/scripts/gds/seed-adopt-tasks.js

@@ -1,75 +0,0 @@
-#!/usr/bin/env node
-// seed-adopt-tasks.js
-// Seeds the brownfield adopt-mode task breakdown for BONGOS-V1 goal 35
-// ("Project creation flow"), criterion `adopt-existing-repo`, per ADR 0121
-// (task 1986). Scope-only deliverable: these are the BUILD tasks for
-// `bongos init --adopt`; they are seeded as `backlog` (NOT promoted) so the
-// owner schedules the adopt build deliberately. See ADR 0121 §Consequences.
-//
-// Idempotent: task create on source_ref (`BONGOS-V1-adopt-A0N`), criterion
-// links on (task_id, criterion_id), dependency edges on (task_id,
-// depends_on_task_id). Safe to re-run. Run: node scripts/gds/seed-adopt-tasks.js
-const { apiCall } = require('./cli-lib.js');
-
-const GOAL_ID = 35;
-const CRIT = 'adopt-existing-repo';
-const RUNBOOK_TASK = 1981; // goal-35 canonical runbook; A05 depends on it (external edge)
-
-// ref → task spec. `deps` are local A0N refs; `extDeps` are literal task ids.
-const TASKS = [
-  { ref: 'A01', kind: 'feature', priority: 4, est: 180, crit: [CRIT], deps: [], extDeps: [],
-    title: 'bongos init --adopt: mode skeleton + additive config layering (no clobber)',
-    description: 'Add an `--adopt` mode to `scripts/gds/init.js` (ADR 0121 §Decision 1-2). Instead of the greenfield "stand up a NEW instance" path (which refuses where config/branding.json exists and whose --force OVERWRITES), --adopt LAYERS onto the existing tree: add the pinned @bongos/core dependency + the lean config/ overrides + .claude/ ADDITIVELY. For any pre-existing file (package.json, an existing .claude/, a CI workflow) it MERGES or LEAVES-AND-REPORTS — it never overwrites, and it must NOT reuse the --force code path. Writes only the lean branding.json overrides (rest resolves from *.neutral.json). Serves criterion adopt-existing-repo. deps: none (the ADR-0108 configurable-root substrate is shipped).' },
-  { ref: 'A02', kind: 'feature', priority: 4, est: 150, crit: [CRIT], deps: [], extDeps: [],
-    title: 'bongos init --adopt: detect the existing stack + layout',
-    description: 'Before writing anything, --adopt inspects the existing tree — language/runtime, package manager, test + CI setup, directory layout — so the enabled modules, the generated repo-map, and the core<->host fitness boundary (ADR 0062 §1) fit what is already there instead of assuming the reference layout (ADR 0121 §Decision 4). Output: a detected-stack summary consumed by A03 (real-state capture) and A04 (pre-flight). Serves criterion adopt-existing-repo. deps: none.' },
-  { ref: 'A03', kind: 'feature', priority: 3, est: 180, crit: [CRIT], deps: ['A01'], extDeps: [],
-    title: 'bongos init --adopt: reflect REAL state — capture version/goal + import backlog',
-    description: 'Replace the synthetic "V1 — Prove the loop" seed with the repo\'s ACTUAL current version/milestone + open goal (by interview + detection), and IMPORT the existing backlog into GDS tasks — GitHub issues (via the auth the flow already establishes), a TODO/ROADMAP/BACKLOG.md, or an interview fallback — so the ledger starts truthful rather than empty (ADR 0121 §Decision 3). Serves criterion adopt-existing-repo. deps: A01.' },
-  { ref: 'A04', kind: 'feature', priority: 3, est: 150, crit: [CRIT], deps: ['A01', 'A02'], extDeps: [],
-    title: 'bongos init --adopt: conflict pre-flight report (--dry-run default, accept-gated)',
-    description: 'Produce the pre-flight report the owner must ACCEPT before anything is written (ADR 0121 §Decision 5): migration-namespace collisions (ADR 0108 §5), core<->host fitness-boundary violations in existing imports (ADR 0062 §1), incoming files that land on protected paths (ADR 0043), and CI collisions between core\'s expected unit/gate check and the repo\'s own workflows. --dry-run is the default first pass; nothing is written until accepted. Serves criterion adopt-existing-repo. deps: A01, A02.' },
-  { ref: 'A05', kind: 'feature', priority: 3, est: 120, crit: [CRIT], deps: ['A01', 'A03', 'A04'], extDeps: [RUNBOOK_TASK],
-    title: 'bongos init --adopt: wire greenfield-vs-adopt into the runbook + both forms',
-    description: 'Offer the greenfield-vs-adopt choice at the SCAFFOLD leg of goal 35\'s canonical step sequence, across all three forms: the /new-project skill (task 1981), the `bongos onboard` CLI (task 1982), and the hall "start a project" wizard (task 1983). Since --adopt is a branch of the same init, the forms inherit it (ADR 0121 §Decision 1). Serves criterion adopt-existing-repo. deps: A01, A03, A04, and the runbook task 1981.' },
-];
-
-(async () => {
-  const idByRef = {};
-  // Phase 1: create tasks (idempotent on source_ref) + link the criterion.
-  for (const t of TASKS) {
-    const create = await apiCall('POST', '/api/bongos/tasks', {
-      version_id: 'BONGOS-V1',
-      goal_id: GOAL_ID,
-      title: t.title,
-      description: t.description,
-      kind: t.kind,
-      discipline: 'engineer',
-      priority: t.priority,
-      est_minutes: t.est,
-      source: 'planning',
-      source_ref: `BONGOS-V1-adopt-${t.ref}`,
-    });
-    const task = create.data && (create.data.task || create.data);
-    const id = task && task.id;
-    if (!id) { console.log(`  ${t.ref}: CREATE FAILED — ${create.status} ${JSON.stringify(create.data).slice(0, 160)}`); continue; }
-    idByRef[t.ref] = id;
-    const link = await apiCall('POST', `/api/bongos/tasks/${id}/criteria`, { criterion_ids: t.crit });
-    console.log(`  ${t.ref} -> task ${id} (${t.kind}, P${t.priority}, goal ${task.goal_id}) · criterion ${link.status === 200 ? 'ok' : (JSON.stringify(link.data).slice(0, 120))}`);
-  }
-  // Phase 2: dependency edges (idempotent on (task_id, depends_on_task_id)).
-  console.log('--- dependencies ---');
-  for (const t of TASKS) {
-    const id = idByRef[t.ref];
-    if (!id) continue;
-    const localDepIds = t.deps.map((d) => idByRef[d]).filter(Boolean);
-    const allDeps = [...localDepIds, ...t.extDeps];
-    for (const depId of allDeps) {
-      const r = await apiCall('POST', `/api/bongos/tasks/${id}/dependencies`, { depends_on_task_id: depId });
-      console.log(`  ${t.ref}(${id}) -> ${depId} ${r.status === 200 || r.status === 201 ? 'ok' : (JSON.stringify(r.data).slice(0, 120))}`);
-    }
-  }
-  // NOTE: intentionally NO promote step — these are backlog until the owner
-  // schedules the adopt build (ADR 0121; task 1986 is scope-only).
-  console.log('refs:', JSON.stringify(idByRef));
-})().catch((e) => console.log('ERR ' + (e && e.message)));