@bongos/core 1.21.60 → 1.21.62

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.21.60",
-  "core_contract": "1.21.60",
-  "source_commit": "f242547f33f6cb7c91b81be063c9d9ce0bce4648",
+  "core_version": "1.21.62",
+  "core_contract": "1.21.62",
+  "source_commit": "105061dd47a96f0d628fd6ef926fd3f325d76ac3",
   "source_ref": "HEAD",
-  "built_at": "2026-10-05T10:09:34.107Z",
+  "built_at": "2026-10-05T21:53:01.352Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
-    "docs_redacted": 584,
+    "docs_redacted": 586,
     "agent_docs_stubbed": 28,
-    "functional_verbatim": 2947,
+    "functional_verbatim": 2949,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 3560,
-  "tree_sha256": "cf332330884125ea55d7f5de3e76ac2c535fbda3af90b65aef10eadd21d63f91",
+  "file_count": 3564,
+  "tree_sha256": "293671547d32416cc06202a1b95675be164a603b599e65c19cc5df0e8d577288",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -312,12 +312,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "6e9faf8d79f1bbe23b6fc333fbc0bd82f206efd8d3d758f2b7f6e735e37bd888"
+      "sha256": "64898ab4e4c50f816f893db4d935ac04bee0e674129b10840d0ac88b5fe6ce0b"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "0845514179564cd46ac7f98d6c7710ef367920c8fa3798dd9c94b2f42eae38cc"
+      "sha256": "71502f60514d4e9dfc93a8c812302423d776db48d8035ca9e0ce0ef0a5bb2dce"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -327,17 +327,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "cb0511d8ceb50bde3f5dbf8309fc9896da18144436f5d30bd871fdf699a8b476"
+      "sha256": "ca9bacfcb336995f72080cc7d6574c7a6a6a22ae38f5c3ae226299471551f60d"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "6045310d25df1eb4e12f2de1e00450490a3fb147ef940e84909f53cfde81c386"
+      "sha256": "2e250be34d7de5f2b98a835d054ec301c88bac96538509f51074c9c5382b781d"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "5040a138144170d1d09551a4559450cd2e2374323eeda41fc86fab24bc5cb904"
+      "sha256": "968533c3b36431c47ff8dc6a0b0f8719e10fd24f979d54531227195535d95d56"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -2284,20 +2284,25 @@
       "mode": "0000644",
       "sha256": "93c863a7f961cd91c052eee2188b16b9f360cec26478dde6225b304ee0e59f7d"
     },
+    {
+      "path": "docs/adr/0366-hall-planning-is-forms-and-a-goal-made-there-carries-its-own-spec-task.md",
+      "mode": "0000644",
+      "sha256": "29c841d193efa7b6f6479e14a6056057138574fcd7b526f667da6f219dece5a7"
+    },
     {
       "path": "docs/adr/README.md",
       "mode": "0000644",
-      "sha256": "a81d1eeeb26ce4fde1731485e943d82ddb320bc60a5f1782f7a207b94da5fff5"
+      "sha256": "08f66fecefc58d9c09e45841dd9d47514e807934cfcd4621a8bfeaa390afb334"
     },
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "919140b571f69e967979d342989941eebc0f9763d2692d12f1fbdfef95e45f71"
+      "sha256": "3943fbe1d9661c16ee6f4f455312312359fe4b1e59da88b37858e76e302aae45"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "802fcb4f13e73a2ecd5298230086662babff613ebde80c2dbba85163d083cb5d"
+      "sha256": "f0d70cbc5227c426ffa47c245ac281575459943e9fef2c196d325620574a91bb"
     },
     {
       "path": "docs/architecture.md",
@@ -2322,12 +2327,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "9e3e8a3df860c5fc66ec8354b710a2d912fe810bdcee96a12a4e087b7ef14160"
+      "sha256": "38102e6280c4560deab4ec5c65e5bfba0f423a9bb71a9a101a3a41246a5a7078"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "cae812e91e12e2d2a924cea3677619a4ff8572bc726abfe66003c5b7b219b9a3"
+      "sha256": "d843d30609d3e1391b89702e79e3bc9dc765f5ed332b1861a918a7179671e2f1"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2837,7 +2842,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "82085f2e66962702781a9211e1829b1872dbdeb6265ffd04c9fa3f378f9e4e59"
+      "sha256": "469982519512666ef5e4f36e65446397b1305c6367446c2fd177c2942d70e334"
     },
     {
       "path": "docs/modules-contract.md",
@@ -2877,7 +2882,7 @@
     {
       "path": "docs/onboarding/diagrams/assertions.json",
       "mode": "0000644",
-      "sha256": "b2e8855cbc2acc539dbd060093a15bdd0a9d073fe8006736552d07676f3d6899"
+      "sha256": "1cda1da05b0a74bc5532e478acbf3d625c49d1a1fac3b75ed967626d95a022bc"
     },
     {
       "path": "docs/onboarding/diagrams/puppeteer-config.json",
@@ -2927,7 +2932,7 @@
     {
       "path": "docs/page-readings.json",
       "mode": "0000644",
-      "sha256": "db48a9632304ef4b95b169f62c7a830976d0264a8d392a5fb5e1062294111a98"
+      "sha256": "db5cba7d0748f9a961561190f819ef6f23b55b2ddab6fdd86522be37dbd67ceb"
     },
     {
       "path": "docs/project-context.template.md",
@@ -6002,17 +6007,17 @@
     {
       "path": "modules/hall-ui/public/project-settings.css",
       "mode": "0000644",
-      "sha256": "2bb7029e5a4e1e704f76ce91f2ee65a6d06abdc459952c0f5d1d020e9702e228"
+      "sha256": "bc2d2bcf19334eff2232e716ca9c7961dbe84502a935238d4808dabd1d9e8454"
     },
     {
       "path": "modules/hall-ui/public/project-settings.html",
       "mode": "0000644",
-      "sha256": "c3f5de6a3f4953068e160aed6744b0a32840f98bd4e52dda782502c64272d860"
+      "sha256": "3fbb0181a5d4b8e947970f42983a0334526030cea636a6195a20570ce8ac5ebe"
     },
     {
       "path": "modules/hall-ui/public/project-settings.js",
       "mode": "0000644",
-      "sha256": "5f042e8ca4059ea3d60440b8887416a29835ebb79ddae08742fc145a6dd4d3b4"
+      "sha256": "6b814a44f884b4ae4fca13336cf9caf83da8c21a2317ea09b24d02f514cfb6fa"
     },
     {
       "path": "modules/hall-ui/public/ranks-founding.states.json",
@@ -6509,6 +6514,11 @@
       "mode": "0000644",
       "sha256": "c28b5b3917a951c5ff3e4247283f91f500971988d297f172a1ed74af65d86777"
     },
+    {
+      "path": "modules/hall-ui/records/project-danger-zone.md",
+      "mode": "0000644",
+      "sha256": "e10d215a458ba2347be709e9abbd50ac15c1755474b7ac37a0f70f51f678c14f"
+    },
     {
       "path": "modules/hall-ui/records/reading-rooms.md",
       "mode": "0000644",
@@ -7042,7 +7052,7 @@
     {
       "path": "modules/lifecycle/merge-lock.js",
       "mode": "0000644",
-      "sha256": "aaa5171275b156b67ed9767c341fda462fd6e6e44e4591d9fd21ba1aece996ac"
+      "sha256": "16667b27f462627277da092dd0cf8905cf7144f1a959fdaf3174a9fb41a91da4"
     },
     {
       "path": "modules/lifecycle/migrations/lifecycle_001_goal_first_leads.sql",
@@ -7362,7 +7372,7 @@
     {
       "path": "modules/lifecycle/ship-preflight.js",
       "mode": "0000644",
-      "sha256": "3b08535b9a680b6f0eaf0ab2d5e38f8ae77ff5563b517a97c1ab34402f5c7a06"
+      "sha256": "99de217d003dd0a837e8604a7a6fedc28be8e5e589c0e4d70b7f46eca1b4432e"
     },
     {
       "path": "modules/lifecycle/sky.js",
@@ -9212,7 +9222,7 @@
     {
       "path": "modules/public-landing/public/projects.html",
       "mode": "0000644",
-      "sha256": "1749ebaa1148f1288559f93c5edf9ca27f0a8a26eccee8f01ebbd92208d14f95"
+      "sha256": "bef16bab1080297b50cf1783bd3df23fe0310aabca2b4376b502256f5d4fe436"
     },
     {
       "path": "modules/public-landing/public/projects.probes.json",
@@ -9952,12 +9962,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "08e7743f0a208b3a0dcd3fa2ffd95a379eaa46d0681f742c93f4912b226123a3"
+      "sha256": "32077bf55d5b87cb987c0d64e579df513a72248dc79d719f878d1cfb41f4090d"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "31801e0376a10be78177cefda27a3f6f10d1d691eaccdd6d4f93129042648fac"
+      "sha256": "a33111b7630688dd0840cf123940fc0c7efdb751056b554d6cf439831f9813c9"
     },
     {
       "path": "public-docs/index.html",
@@ -9977,7 +9987,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "410c3524a5614140b46c1f92073d5aab8613c6ac03435247c9855114101b4e54"
+      "sha256": "68623d6dac838274578a99dd42d1a684e1a6369e2fd7bcb53a2af3778f3b2b68"
     },
     {
       "path": "scripts/cron/style_guide_audit.sh",
@@ -11452,7 +11462,7 @@
     {
       "path": "scripts/gds/ship-grade.js",
       "mode": "0000644",
-      "sha256": "eb0740f3cdc3dc91038320dd9044dc81c05e31212059d772d5c8bf6e9f44b474"
+      "sha256": "5fd40df43c942eb3fcbd24a22c22743e63d2b32efba3c612c7e2fa791ad0f087"
     },
     {
       "path": "scripts/gds/ship-honesty.js",
@@ -11477,12 +11487,12 @@
     {
       "path": "scripts/gds/ship-merge-gate.js",
       "mode": "0000644",
-      "sha256": "34c28500eb2c4324f44c5b3604049c305d7b7921b57557ee325ece88b6293252"
+      "sha256": "fba341724c94b1ab9a56b1b43cda608eaa477f50c6f8e65ec287632367d603a9"
     },
     {
       "path": "scripts/gds/ship-merge.js",
       "mode": "0000644",
-      "sha256": "7b877a3a3cb63c41923b9e6410f042b13263afe88429ade6b32f6d4e90d4fadd"
+      "sha256": "8d37d5c6cbaa1ca0e8363fab6c34159d1e16922fdae11d4ffc17b4d9e2c7f795"
     },
     {
       "path": "scripts/gds/ship-preflight-steps.js",
@@ -11507,7 +11517,7 @@
     {
       "path": "scripts/gds/ship-state.js",
       "mode": "0000644",
-      "sha256": "a22377162ea9449249ee338e434c2b595a4de88743e6dacc290138f0ea9799dc"
+      "sha256": "e465cb391d4518258290d6f53be3a31353e701fb21935f8e1f9ff7b4f38e00a6"
     },
     {
       "path": "scripts/gds/ship-surprise.js",
@@ -12082,7 +12092,7 @@
     {
       "path": "src/bongos/routes/core-update.js",
       "mode": "0000644",
-      "sha256": "0eea4e7d95fe85c12f23e0ec06f56412eeb94ed83bd92ae788978ad83fd108fe"
+      "sha256": "cc6bb5e7a69278083d834af70c1963c1d535bf1dc9321b543e3440609cd24502"
     },
     {
       "path": "src/bongos/routes/feedback.js",
@@ -12197,7 +12207,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "ddc256bcf0cc3ce7b253cc4d1c1573b3c96dbc568ed47d90af060d2841e8a2f5"
+      "sha256": "b5dc083bafe5265707463d0de6a151f21dd83a2849d7e8eeded08215ddce59cb"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -15327,7 +15337,7 @@
     {
       "path": "tests/merge_lock.mjs",
       "mode": "0000644",
-      "sha256": "5617e46b1e07ceb5fd537ae1192a27c88e8ce5d1fd06f219190f90aaebd64a5a"
+      "sha256": "03888ba034c0af2af764575b4b6c2b37e1f1eb54c7dc02b39ce4590e5a4b5451"
     },
     {
       "path": "tests/metrics.mjs",
@@ -16044,6 +16054,11 @@
       "mode": "0000644",
       "sha256": "9da8c3416b4d06f82fdf8254aec216d8e7a7368b697f151f5d58f1c286f86639"
     },
+    {
+      "path": "tests/project_manage_link.mjs",
+      "mode": "0000644",
+      "sha256": "b2b14c23e972735db76833c133214e977f4ab6b0c1009fd3946cebae4346e4a5"
+    },
     {
       "path": "tests/project_modules_ui.mjs",
       "mode": "0000644",
@@ -17012,7 +17027,7 @@
     {
       "path": "tests/ship_merge_gate.mjs",
       "mode": "0000644",
-      "sha256": "b498d2820f6e17948cb8a86637d16b248a3349ebd9933343dd4b335a239497b7"
+      "sha256": "28ad67a5ee8be6807f8d16149ea42cb837b7bc4e4084068b74d8e944db09d291"
     },
     {
       "path": "tests/ship_post_land_verify.mjs",
@@ -17022,7 +17037,7 @@
     {
       "path": "tests/ship_preflight.mjs",
       "mode": "0000644",
-      "sha256": "b86e826355cf786328a7d1301abebd9c7c8b5c5b7ad82b9d2ebcb3d6e35285a9"
+      "sha256": "325980877dc43ea902de03cf938a85f29700f0443ca040efe75873b5f4f210b9"
     },
     {
       "path": "tests/ship_premerge.mjs",
@@ -17064,6 +17079,11 @@
       "mode": "0000644",
       "sha256": "46856ed6c15ec0cca70e9d2541b4e17331de3c2336eb45dc1e36de1241b5440a"
     },
+    {
+      "path": "tests/ship_vendored_instance.mjs",
+      "mode": "0000644",
+      "sha256": "75aa59accad12d197202457ed36281e5d3eca1040762a5045972c4b10cf09006"
+    },
     {
       "path": "tests/ship_zero_commit.mjs",
       "mode": "0000644",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 519 operations across 74 resource groups
+- 520 operations across 75 resource groups
 
 ## Use it from your project
 

package/clients/bongos-client/bongos-client.global.js

@@ -844,6 +844,10 @@ function createClient(opts = {}) {
       // GET /profiles/{handle} — rank: public — GET /profiles/:handle
       getProfilesHandle: (args) => request("GET", "/profiles/{handle}", { hasBody: false }, args),
     },
+    "project": {
+      // GET /project/manage-link — rank: archon — GET /project/manage-link
+      getProjectManageLink: (args) => request("GET", "/project/manage-link", { hasBody: false }, args),
+    },
     "projectSettings": {
       // GET /project-settings — rank: metic+archon — GET /project-settings
       getProjectSettings: (args) => request("GET", "/project-settings", { hasBody: false }, args),

package/clients/bongos-client/index.cjs

@@ -843,6 +843,10 @@ function createClient(opts = {}) {
       // GET /profiles/{handle} — rank: public — GET /profiles/:handle
       getProfilesHandle: (args) => request("GET", "/profiles/{handle}", { hasBody: false }, args),
     },
+    "project": {
+      // GET /project/manage-link — rank: archon — GET /project/manage-link
+      getProjectManageLink: (args) => request("GET", "/project/manage-link", { hasBody: false }, args),
+    },
     "projectSettings": {
       // GET /project-settings — rank: metic+archon — GET /project-settings
       getProjectSettings: (args) => request("GET", "/project-settings", { hasBody: false }, args),

package/clients/bongos-client/index.d.ts

@@ -124,6 +124,7 @@ export interface GetPageNotesIdResponse { note: unknown; images: unknown; ideas:
 export interface GetPageNotesIdeasResponse { page_path: unknown; ideas: unknown }
 export interface GetPageNotesResponse { page_id: unknown; notes: unknown }
 export interface GetProfilesHandleResponse { account: unknown; cross_project: unknown }
+export interface GetProjectManageLinkResponse { ok: boolean; link: unknown }
 export interface GetProjectSettingsResponse { rows: unknown }
 export interface GetProjectsFeaturedResponse { projects: unknown; page: PageInfo }
 export interface GetProjectsResponse { projects: unknown }
@@ -1337,6 +1338,10 @@ export interface BongosClient {
     /** GET /profiles/{handle} — rank: public */
     getProfilesHandle(args?: RequestArgs): Promise<GetProfilesHandleResponse>;
   };
+  "project": {
+    /** GET /project/manage-link — rank: archon */
+    getProjectManageLink(args?: RequestArgs): Promise<GetProjectManageLinkResponse>;
+  };
   "projectSettings": {
     /** GET /project-settings — rank: metic+archon */
     getProjectSettings(args?: RequestArgs): Promise<GetProjectSettingsResponse>;

package/clients/bongos-client/index.mjs

@@ -840,6 +840,10 @@ export function createClient(opts = {}) {
       // GET /profiles/{handle} — rank: public — GET /profiles/:handle
       getProfilesHandle: (args) => request("GET", "/profiles/{handle}", { hasBody: false }, args),
     },
+    "project": {
+      // GET /project/manage-link — rank: archon — GET /project/manage-link
+      getProjectManageLink: (args) => request("GET", "/project/manage-link", { hasBody: false }, args),
+    },
     "projectSettings": {
       // GET /project-settings — rank: metic+archon — GET /project-settings
       getProjectSettings: (args) => request("GET", "/project-settings", { hasBody: false }, args),

package/docs/adr/0366-hall-planning-is-forms-and-a-goal-made-there-carries-its-own-spec-task.md

@@ -0,0 +1,85 @@
+# ADR 0366 — Hall planning is forms; a goal made there carries its own spec task, and the interviews stay in the CLI
+
+- **Status:** accepted
+- **Date:** 2026-10-05
+- **Task:** [task 1003461](https://cloudbongos.com/builders#/task/1003461) (spike, goal 1000089 — Working area 3, BONGOS-V2)
+- **Builds on:** [ADR 0086](0086-goal-scoped-work-hierarchy.md) (goals and the scope wall), [ADR 0154](0154-goal-owner-criterion-authoring.md) (a goal's owner authors its criteria), [ADR 0264](0264-the-ten-working-areas.md) §1 (working area 3: "users edit, scope and manage work without ever prompting Claude")
+- **Decided with:** the owner, 2026-10-05 — two questions; the scope answer was the owner's own (D3), the hand-off answer was the recommended option (D4).
+
+## Context
+
+Goal 1000089 wants the hall to plan work: create a task, a goal, a criterion. Two CLI flows do this today, and both are **interviews**, not forms:
+
+- **`/goal-create`** (`.claude/skills/goal-create/SKILL.md`). Phases 1–3 are marked *"autonomous; ask nothing"*: Claude picks the version, decides **reuse vs create** against the live goal board, infers the **scope wall** from the planned work's file paths and checks it against the live module roster, drafts 2–4 criteria and 3–8 seed tasks with dependencies. Phase 4 asks the human only the grey areas (at most 4 questions) and one approval. Phase 5 writes goal → criteria → tasks.
+- **`/planning-session`** (`.claude/skills/planning-session/SKILL.md`). A whole version: a written spec file under `docs/specs/`, a multi-round interview that runs *"until nothing material is left"*, then a migration, a seed script, dependency ranking and promotion. Creating a version is Archon-only (ADR 0250 §6).
+
+The spike's question: which of these steps are form-shaped, which must stay interviews (named, so nobody half-builds them), and whether anything wants a third shape. The constraint: every write already exists behind a server rank floor (`task.create`, `goal.create`, `criterion.create`, the Archon wall on a protected scope); the spike decides **surface only**.
+
+### The evidence
+
+Read the two flows for which inputs a person can **know** versus which Claude **infers**:
+
+| Input | Who supplies it today | Shape |
+|---|---|---|
+| A task's title, description, goal | the person | form — and the goal picker already exists: `GET /goals/suggestions` feeds the hall composer (`sky-composer.js`, task 1003069) |
+| A task's kind, criterion link | the server already infers it: `POST /tasks` auto-classifies kind; `GET /goals/:id/suggest-criteria` ranks criteria | form, with the server's suggestion shown |
+| A goal's name, subtitle, description, version, category | the person (goal-create *drafts* them, but they are statements of intent, and `GET /work-categories` is a plain list) | form |
+| A criterion's outcome text | the person, for a goal they own (ADR 0154) | form — the slug `criterion_id` is derivable from the text, and a 409 collision is a sentence, not a judgement |
+| Satisfying a criterion | already in the hall (`goals-page.js`) | form (exists) |
+| Reuse vs create a goal | Claude reads the board and judges | **interview** — though a form can *show* the suggester's candidates and let the person choose |
+| A goal's **scope wall** | Claude infers from file paths, checks the roster | **interview** — and the roster is not readable by the hall at all (`module-scope-map` is server-only; the hall gets only a derived `scope_protected` flag, `goal-route-authz.js` `decorateGoalScope`) |
+| Criteria drafted from a description; seed tasks and their dependency edges | Claude | **interview** |
+| A version: spec, multi-round interview, migration, seed script, ranking | Claude with the owner, Archon-only to create | **interview** |
+
+And two precedents show the in-between shape already exists in the hall: the idea composer asks a **server-defined question sequence** with skip and cancel and no Claude (`sky-composer.js`, the base-v2 template), and the hall already **composes a prompt for a session to finish** (`task-lib.js` `buildPromptForTask`, the bulk toolbar's sequential and parallel prompts, collab's "Copy for Session Start").
+
+## Decision
+
+**D1 — Form-shaped; build in the hall.** Every step whose inputs the person knows:
+1. Create a task under a goal (title, description, goal via the existing suggester; kind and criterion offered from the server's own suggestions). → [task 1003462](https://cloudbongos.com/builders#/task/1003462).
+2. Create a goal: a **name** field and a separate **subtitle/description** (goal 1000072's convention — a title is a name, not its own explanation), version, category. **No scope field** (D3). Before the name is submitted the form shows the suggester's matching open goals, so "reuse instead" is a click and the judgement stays the person's. → [task 1003463](https://cloudbongos.com/builders#/task/1003463).
+3. Attach a criterion to a goal the person owns or manages: the outcome text; the slug is derived from it. → task 1003463.
+
+Every refusal the server already makes — `task.create` / `goal.create` / `criterion.create` floors, the Archon wall on a protected scope, ADR 0154's `bad_goal_id` for a goal the actor does not hold — is rendered as copy. The forms never pre-filter themselves into a shape that hides one (1003463's own rule).
+
+**D2 — Interview-shaped; stays in the CLI, deliberately absent from the hall.** Named so nobody half-builds them:
+- planning a **version** (`/planning-session`) — the spec file, the multi-round interview, the migration, the seed script, the ranking, and creating a version at all;
+- **inferring a goal's scope wall** from the work it will do;
+- **drafting criteria** from a description, and **decomposing a goal into seed tasks** with dependency edges;
+- **judging reuse vs create** beyond showing the suggester's candidates;
+- **carrying achieved goals forward** across a version boundary (the planning session's rescope).
+
+A hall form for any of these would be the title-field-and-textarea the spike warned against: worse than the CLI it replaces, because the CLI's value *is* the inference.
+
+**D3 — The third shape: a goal made in the hall carries its own spec task (the owner's answer).** A goal created from the hall form is created with a task inside it — **"Spec goal N: its scope, criteria and first tasks"** — and the goal's other work waits behind that task until it ships. Someone claims it like any task and does the interview half in a session (`/goal-create`, finishing an existing goal rather than creating one). This is the "draft the hall composes and a session finishes" shape, but recorded in the ledger as a claimable, creditable task rather than a prompt on someone's clipboard. Concretely:
+- `POST /goals` grows an opt-in `spec_task: true` (the hall form sends it; `/goal-create`, which specs inline, does not). The server creates the spec task in the same request, `source_ref = goal-<id>-spec` so a retry is idempotent, promoted to `ready` so it can be claimed.
+- While that task is unshipped, every task created in the goal gets a **dependency** on it, so a claim is refused `DEPS_NOT_SHIPPED` — the existing gate, not a new one. Once it ships, the dependents auto-promote as they do today.
+- The walls do not move. Setting the scope uses the existing `POST /goals/:id/scope` (`goal.scope.widen`, owner or manager, Archon for a protected key) and criteria use `criterion.create` under ADR 0154. A claimer who does not hold the goal drafts the scope and criteria and hands them to the owner — `/goal-create`'s existing off-ramp — rather than gaining anything.
+
+No new permission and no migration: the spec task is identified by its `source_ref`, and blocking is an ordinary dependency.
+
+**D4 — An optional hand-off button.** On a goal's page, a **"Plan with Claude"** button copies a prompt that continues from that goal (its open spec task when there is one, else `/goal-create` against the goal for seed tasks). It is an extra, never a requirement: every D1 step works without it, so ADR 0264's "without ever prompting Claude" holds.
+
+## Consequences
+
+- Goal 1000089's remaining planning work is five tasks (below; the three new ones were filed by this spike as tasks 1004585, 1004586 and 1004587). The CLI flows are unchanged except that `/goal-create` learns to finish an existing goal's spec task.
+- A hall-made goal is visibly **unspecced** until its spec task ships, and its work cannot be claimed early. That is the intent: a goal with no wall and no criteria is the state `/goal-create` exists to prevent, and D3 makes the gap a task instead of a silence.
+- The hall never needs the module roster, so the protected list stays server-only.
+- Risk: a spec task nobody claims stalls its goal. It is an ordinary ready task, visible on the board and in the goal; if this proves common, an age nudge is the follow-up, not a softer block.
+
+## The task list for the rest of the criterion
+
+| Task | Shape | Depends on |
+|---|---|---|
+| [task 1003462](https://cloudbongos.com/builders#/task/1003462) — Create a task from the hall, attached to its goal | form (D1.1) | — |
+| [task 1004585](https://cloudbongos.com/builders#/task/1004585) — A goal made in the hall carries a spec task that gates its other work (server: `spec_task`, the dependency) | D3 | — |
+| [task 1003463](https://cloudbongos.com/builders#/task/1003463) — Author a goal and a done-when criterion from the hall | form (D1.2, D1.3) | task 1004585 |
+| [task 1004586](https://cloudbongos.com/builders#/task/1004586) — `/goal-create` finishes an existing goal's spec task | D3, CLI | task 1004585 |
+| [task 1004587](https://cloudbongos.com/builders#/task/1004587) — "Plan with Claude" hand-off button on a goal | D4 | task 1004585 |
+
+## Alternatives considered
+
+- **A scope picker in the goal form** (checkboxes of code areas, protected ones marked). Rejected in favour of D3 by the owner: scope is inferred from the work, and a person ticking boxes before the work is understood is the half-built interview D2 forbids. It would also have needed a new roster read.
+- **No scope at all for hall goals.** Rejected: an open wall with no criteria and nobody responsible for fixing it is the catch-all failure ADR 0086 retired.
+- **Port `/goal-create` into the hall as a guided form** (the idea composer's question sequence). Rejected: the composer's questions are fixed; goal-create's are decided by what it reads, which is exactly the part a script cannot do.
+- **The hand-off as the only path** (every hall planning action copies a prompt). Rejected: it breaks working area 3's thesis outright.

package/docs/adr/README.md

@@ -484,3 +484,4 @@ These 20 numbers are each shared by exactly two files. They are **accepted histo
 | 0363 | [**Who decides what is a per-project table, changed only by a passed amendment** ([task 1004529](https://cloudbongos.com/builders#/task/1004529), goal 1000125). **D1:** `government_decision_rules`, one row per building: `gate` (as today), `board` (the charter only), `nobody` (vacant) or a membership predicate with decide / first / consent / majority / unanimous / sign-off. **D2:** the seeded defaults are today, and a malformed row reads as its default. **D3:** written only inside the transaction that closes a `decision_rules` amendment as passed; JS guard + SQL condition + trigger; no settings route. **D4:** eight building matters join the board's three subjects, openable only where a row names a sitting; sign-off is the author rule. **D5:** People's rank assignments defer to People's row (`checkActAlone`); a passed People matter acts. **D6:** the docket's buildings carry who decides.](0363-who-decides-what-is-a-table-changed-only-by-amendment.md) | government / Governor City |
 | 0364 | [**Repo access is asked at sign-in on the hub, and held for as long as the builder stays signed in** ([task 1004549](https://cloudbongos.com/builders#/task/1004549)). Amends ADR 0143 and 0155. **D1:** every sign-in door on the hub's own pages carries `repos=1`; the hall and CLI stay identity-only. **D2:** the repo token's TTL is the web session's remaining life; a web sign-out deletes it, a CLI logout does not. **D3:** a draft at a wizard step beside a stored create keeps its place on a reload or a GitHub round-trip.](0364-repo-access-is-asked-at-sign-in-and-held-for-the-session.md) | auth / GitHub / create wizard |
 | 0365 | [**A guild engages a project through each member's own door** ([task 1002303](https://cloudbongos.com/builders#/task/1002303)). Amends ADR 0336 D7's invite half after ADR 0353. **D1:** the engagement row as D7 specified, plus `guild_id` on the echo (the latest application decides the label). **D2:** a guild applies = each member applies as themselves through the relay, naming the engagement. **D3:** a project invites a guild = the hub records it and returns one hall hand-off link per public-roster member; no hub-written invites, the one-step relay stays deferred. **D4:** a project is named only when on the map and public, for both kinds. **D5:** the label rides the applicant-profile read; the queue is R28's. **D6:** the D4.4 guild cards are their own task.](0365-a-guild-engages-a-project-through-each-members-own-door.md) | guilds / invites / applications |
+| 0366 | [**Hall planning is forms; a goal made there carries its own spec task, and the interviews stay in the CLI** ([task 1003461](https://cloudbongos.com/builders#/task/1003461), goal 1000089). Spike answer. **D1:** form-shaped, build in the hall: create a task under a goal, create a goal (name + subtitle, version, category, no scope field), attach a criterion to a goal you hold; every server refusal rendered as copy. **D2:** interview-shaped, deliberately absent from the hall: version planning, scope inference, drafting criteria and seed tasks, reuse-vs-create judgement, carry-forward. **D3 (owner):** a hall-made goal is created with a "Spec goal N" task (`POST /goals` `spec_task: true`, `source_ref goal-<id>-spec`) and every task in the goal depends on it until it ships; no new permission, no migration. **D4:** an optional "Plan with Claude" hand-off button.](0366-hall-planning-is-forms-and-a-goal-made-there-carries-its-own-spec-task.md) | lifecycle / planning |

package/docs/api/openapi.json

@@ -233,6 +233,10 @@
       "name": "profiles",
       "description": "Endpoints under `/api/bongos/profiles`."
     },
+    {
+      "name": "project",
+      "description": "Endpoints under `/api/bongos/project`."
+    },
     {
       "name": "project-settings",
       "description": "Endpoints under `/api/bongos/project-settings`."
@@ -15612,6 +15616,44 @@
         ]
       }
     },
+    "/project/manage-link": {
+      "get": {
+        "operationId": "get_project_manage_link",
+        "tags": [
+          "project"
+        ],
+        "summary": "GET /project/manage-link",
+        "description": "GET /project/manage-link — the hub's page for THIS project, where its owner takes it offline or disconnects it (task 1004570). On a hosted project the owner is its Archon, so the read is Archon-only: a builder below that is refused and the hall draws no section. { link: null } on a self-hosted instance (no hub to link to). rank: archon — the project's owner; it names where the project can be ended.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).",
+        "x-rank": "archon",
+        "x-source": "src/bongos/routes/core-update.js",
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetProjectManageLinkResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/projects": {
       "get": {
         "operationId": "get_projects",
@@ -26031,6 +26073,19 @@
           "cross_project"
         ]
       },
+      "GetProjectManageLinkResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "link": {}
+        },
+        "required": [
+          "ok",
+          "link"
+        ]
+      },
       "GetProjectSettingsResponse": {
         "type": "object",
         "properties": {
@@ -33375,9 +33430,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 519,
-  "x-schema-count": 560,
+  "x-endpoint-count": 520,
+  "x-schema-count": 561,
   "x-undocumented-bodies": 12,
-  "x-response-schemas": 371,
+  "x-response-schemas": 372,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 519 endpoints across 93 route files.
+> **Generated from the live route files** — the route file is authoritative. 520 endpoints across 93 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust-boundary-server-enforced-permissions.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -599,6 +599,12 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 |---|---|---|---|---|
 | GET | `/api/bongos/profiles/:handle` | `public` | — | a handle-addressed public profile. |
 
+## `project` (1)
+
+| Method | Path | Rank | Body | Description |
+|---|---|---|---|---|
+| GET | `/api/bongos/project/manage-link` | `archon` | — | GET /project/manage-link — the hub's page for THIS project, where its owner takes it offline or disconnects it (task 1004570). |
+
 ## `project-settings` (2)
 
 | Method | Path | Rank | Body | Description |