@bongos/core 1.21.74 → 1.21.76

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.21.74",
-  "core_contract": "1.21.74",
-  "source_commit": "e1a614cc89edf2e1f13bf098fe70e5d6909887f9",
+  "core_version": "1.21.76",
+  "core_contract": "1.21.76",
+  "source_commit": "9c4b1108bd7a24860a6930f12aca420b7ee9b0be",
   "source_ref": "HEAD",
-  "built_at": "2026-10-08T17:20:42.399Z",
+  "built_at": "2026-10-08T18:10:15.254Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 589,
     "agent_docs_stubbed": 28,
-    "functional_verbatim": 2980,
+    "functional_verbatim": 2986,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 3598,
-  "tree_sha256": "a36fc59cee5bf88f0f473a9967f3a2a30e9ab3d59e59ef3d5b91df49789fc855",
+  "file_count": 3604,
+  "tree_sha256": "45682ea4dfeffad41faf22225f3a80e13b3c1c61ffea341e4c0d7751aafb5cf1",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -312,12 +312,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "92ec02892192cb3ec336b8feb68516981334c6c5e9951d6983855296b6d79dfc"
+      "sha256": "6c9fc5a5e89e3b196679ef4a9e96e33e79b3a384ee90ca8330aac23c76c6877f"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "16b666c57928d55b8c5b8b96f90e77e3d1702ea2b601d43a118853ae7d6f5f10"
+      "sha256": "7136899ccb015ba71580b5d53374fdb0016110a7c12dc2a6e22b8e0f92c71799"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -327,17 +327,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "cac495a3acbe96e8036f79dd772cce00372bac4c3a162c7a050d572cabccb464"
+      "sha256": "c8ae05e328390f5673c04ac650e55ff4ae6f00384d46921765bb15337454c281"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "4ecbd807e9ddbd35f4c076b6daa559fa4a6eeaab80e3f03065d61e4ca139f6dd"
+      "sha256": "70ff8de140a220d9ad31ad9b70f0c3e2f257b2eaded5b1ffdc6382c89e2f165d"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "6217699f613e7839e12aee3465717863397243daf741c022d43a704993c9023d"
+      "sha256": "547ece2f9152c8d50cc1f3df559a42272c73cae4dee82e1d109920962d9d6b75"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -2172,7 +2172,7 @@
     {
       "path": "docs/adr/0343-a-module-score-is-a-security-gate-then-an-average-of-visible-parts.md",
       "mode": "0000644",
-      "sha256": "668d76cffbfaeb9662fc84b4d2c185bc7cd0109a403e6b9bf3032ebe3b569457"
+      "sha256": "db41e62093dd09e5ed3f9bb4628c98ea0255b487bb5b94191bbb4adc0651636b"
     },
     {
       "path": "docs/adr/0344-a-tester-is-a-project-that-opts-in-once.md",
@@ -2312,12 +2312,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "7ee0c370728c049634024bb204f60667a3a975f7d42dc0a714d14a1feb24f7f5"
+      "sha256": "73697d7500113c6523249a7157d22d6e4a4d87ecb5d225239db7172b51684ef0"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "3e3bcaac1dbdd052ad5e7c44ec77bf057faf71c76202bb6d43bd7852b0b1999a"
+      "sha256": "0c6a4e21c41043e582aa2e1b8a181568ced5d4b331f4e39173ea93cfa69770dc"
     },
     {
       "path": "docs/architecture.md",
@@ -2342,12 +2342,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "6b9b8e7d611dd3a8785b752670304ce584bba798f45c905e76b220900bf88664"
+      "sha256": "72f6603ffa1e26dc66ac6625f9e00dc8dea40add9b447e7cd83b4c60bdd53f2d"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "259281afa0ea0362844df697c796adab5287a13caee6aa8e87c3a99850992d61"
+      "sha256": "066f9c2905f62afbf25e892406aa20fe73d1fb9e122e4906cf58e65cb9904bab"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2857,12 +2857,12 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "6028080759e4c92a71ed09f4bbe67d8bfae0152377c4f3a635d02841b29fa2c7"
+      "sha256": "acf2b1336d5f4699edc722ebf237bff53902b282de64bebf6498d5c64ebecd96"
     },
     {
       "path": "docs/modules-contract.md",
       "mode": "0000644",
-      "sha256": "33eb2665aea5cc00feb1de80b673f6063f98b2a8bd2caeb6fa4b09e41965c1df"
+      "sha256": "55a964846d438df4265777244e046b5b86deaebda3a6081c6f10a4a5a7a0dbf3"
     },
     {
       "path": "docs/onboarding/diagrams/01-task-lifecycle.mmd",
@@ -2942,12 +2942,12 @@
     {
       "path": "docs/page-inventory.json",
       "mode": "0000644",
-      "sha256": "dab7f6dc5248e3be4e1c13d06eff8f430fa26b7932b4800733cbd4caa7bf4b61"
+      "sha256": "b5acf06f82c96d161e637f4c40ee0c8546dc2f74da8ea30145447e8627789450"
     },
     {
       "path": "docs/page-readings.json",
       "mode": "0000644",
-      "sha256": "3850e40624d9840ed56e9572fe99210c0f864d6a176abb99b45244cd4a89b195"
+      "sha256": "0019239e987680f5da515f40ba34c2f76cd937c0ac0e7afdd4fdcfd07276483c"
     },
     {
       "path": "docs/project-context.template.md",
@@ -5527,7 +5527,7 @@
     {
       "path": "modules/hall-ui/public/craft-mode.js",
       "mode": "0000644",
-      "sha256": "bc9939a029775431314b7992ebffacaf6141017f6e2af7ec1cd3015267692d14"
+      "sha256": "f3fc9dee7175e0484c7864bf11b8c074296f0023369e583f91ed821c6e669a2f"
     },
     {
       "path": "modules/hall-ui/public/criterion-uat-ui.js",
@@ -5934,10 +5934,15 @@
       "mode": "0000644",
       "sha256": "582ab7d5151e8125537f7a2d969485a446ed7b69b4c4dba1e6b43168afaf1a0e"
     },
+    {
+      "path": "modules/hall-ui/public/page-notes.css",
+      "mode": "0000644",
+      "sha256": "9e79075c1f86fdd69d39465c8fa7a940e56a1a7f3eb7c67f00638db18a3e4b62"
+    },
     {
       "path": "modules/hall-ui/public/page-notes.js",
       "mode": "0000644",
-      "sha256": "f41d7f3424b2f1a8c1b74274a47e53e06bb184f3cd2102616589cbd7fdc534c9"
+      "sha256": "976ac3dadc7fab3e936c134bd53da01e834645ebb3cfb141925a1a778ef69cea"
     },
     {
       "path": "modules/hall-ui/public/paintbrush.js",
@@ -6292,17 +6297,17 @@
     {
       "path": "modules/hall-ui/public/studio.css",
       "mode": "0000644",
-      "sha256": "00e6407bb6109710424b34468edbbf697ef43ee56d7397a0150881f9c2aaafdd"
+      "sha256": "65f5dea97cb00594b3158b9147456f973a744d36c2cc5bbc557e858d4398a810"
     },
     {
       "path": "modules/hall-ui/public/studio.html",
       "mode": "0000644",
-      "sha256": "1368664902744fe2cb83444f94820b44948372981126ed76d4959c7919d22f69"
+      "sha256": "9cda6d75293d489c813385b2465869dd430ca240d8560e2b97d0af1b7ce582cd"
     },
     {
       "path": "modules/hall-ui/public/studio.js",
       "mode": "0000644",
-      "sha256": "286be76fa46b07f100defbdb3c8426201730aadb3a22fa549aa8b26d860e4dfb"
+      "sha256": "5e94a4cd19f2e29bd4f7125473568887e3d9782e50221fb478825aef177d70d7"
     },
     {
       "path": "modules/hall-ui/public/studio.states.json",
@@ -6312,7 +6317,7 @@
     {
       "path": "modules/hall-ui/public/style.css",
       "mode": "0000644",
-      "sha256": "b290866a2b8b8b084b1f27889cc03a17f446c366e6a7a78f42511609646fd34f"
+      "sha256": "04c84e355efce753015a734f1dace60402c72d1cdaea3796e4bde8d631a0fa65"
     },
     {
       "path": "modules/hall-ui/public/task-detail.js",
@@ -7667,13 +7672,18 @@
     {
       "path": "modules/page-notes/db.js",
       "mode": "0000644",
-      "sha256": "d8383ae6340c0d9a3276cb2ce66da5552aed8d4ed0cbae63102279355052160a"
+      "sha256": "24733b20f6c97aeac9922f55a24df2b3640070d9d0b96164207b6c1db5c17c7d"
     },
     {
       "path": "modules/page-notes/migrations/page_notes_001_notes.sql",
       "mode": "0000644",
       "sha256": "78a7c8606abf1f489bad3627ccdf679741257ccac32361795eeae753eed1f218"
     },
+    {
+      "path": "modules/page-notes/migrations/page_notes_002_surface_index.sql",
+      "mode": "0000644",
+      "sha256": "b60db7954850ccf22d6403a3da6be47e9273c3903c1000a826b32477f4649c20"
+    },
     {
       "path": "modules/page-notes/module.json",
       "mode": "0000644",
@@ -7682,12 +7692,12 @@
     {
       "path": "modules/page-notes/notes.js",
       "mode": "0000644",
-      "sha256": "5777e44b96b020eb65ae47baaa089116f5e4de44edff40072c478e2fc13f4c55"
+      "sha256": "d3a8d4aa671a45c55389f81131f467227d93a29fd5bf06efd88cb11dfbc0387b"
     },
     {
       "path": "modules/page-notes/routes/page-notes.js",
       "mode": "0000644",
-      "sha256": "ac2c6438181aa093e6b059f9563a1592775458b5cfe5e90d8d40ba06b988227b"
+      "sha256": "53076193efecd197a262ecd58c4ef4c0ad3ba1a89fc3631e25850d8d7b084d16"
     },
     {
       "path": "modules/page-notes/split.js",
@@ -8617,7 +8627,7 @@
     {
       "path": "modules/public-landing/public/account.html",
       "mode": "0000644",
-      "sha256": "165599120b503458ae3d315e6cf74dde9af3da0234f2661ed4bca9e215e3c0f0"
+      "sha256": "cb827c07f00e5dbe88007a47ced82c766ab36faaa9d488383d638b005bb9a0ab"
     },
     {
       "path": "modules/public-landing/public/account.probes.json",
@@ -8849,6 +8859,11 @@
       "mode": "0000644",
       "sha256": "69d603ee6e73411d11716ee567d844aa4b467ab31168c1f7a6c106b397084e10"
     },
+    {
+      "path": "modules/public-landing/public/assets/artist-review.js",
+      "mode": "0000644",
+      "sha256": "a05437ac99c075645ba36770a079ddefd1d36956c4164e7214b7095d0a45158a"
+    },
     {
       "path": "modules/public-landing/public/assets/cosmos.css",
       "mode": "0000644",
@@ -9182,12 +9197,12 @@
     {
       "path": "modules/public-landing/public/contact.html",
       "mode": "0000644",
-      "sha256": "8918c864d3a33de6b6bd6f133670ceaebde602ac63275ef60a1084b9f8b0e77a"
+      "sha256": "a325d4c99a10614f864dcaff0b60fd5b5ed442707dacafe35b1a0a069177356e"
     },
     {
       "path": "modules/public-landing/public/guild.html",
       "mode": "0000644",
-      "sha256": "2911f496d2b843c0fb3afe59822e4c5c9c89a9ca6b34cd97ed4f2c2f03eddf1f"
+      "sha256": "6919f10dc3d6115e13ef18daeda6eadc10ab8cfd4fdb8fd18e06498b4ec908c6"
     },
     {
       "path": "modules/public-landing/public/guild.probes.json",
@@ -9207,7 +9222,7 @@
     {
       "path": "modules/public-landing/public/index.html",
       "mode": "0000644",
-      "sha256": "8aff9c2ed0db538eba044720d11a4c52e8b4927aeab5f7a4ad5d39b1ed599029"
+      "sha256": "9b6967276cbdb8b6c9ae5644308873241007cfd954ad479da4c02a7c1506205f"
     },
     {
       "path": "modules/public-landing/public/index.probes.json",
@@ -9232,7 +9247,7 @@
     {
       "path": "modules/public-landing/public/invitations.html",
       "mode": "0000644",
-      "sha256": "5b0b779c53f00f20d298c168e680b0f95334d6919869b4b4560e2dab534f4bdd"
+      "sha256": "7506f0101eb8ad4354438266e7b2941093f1a11eb14d8fb11179c3ea0ec6ed6e"
     },
     {
       "path": "modules/public-landing/public/invitations.probes.json",
@@ -9247,7 +9262,7 @@
     {
       "path": "modules/public-landing/public/privacy.html",
       "mode": "0000644",
-      "sha256": "f5bf15fa5169796e847f5b4d9f3e078b9a57b8513990e72e4e61c9c335d43258"
+      "sha256": "bff74e46096c052412a5266bbc2a9176f86fe9b9f917f171855c20df7afa4bac"
     },
     {
       "path": "modules/public-landing/public/projects-demo.states.json",
@@ -9277,7 +9292,7 @@
     {
       "path": "modules/public-landing/public/projects.html",
       "mode": "0000644",
-      "sha256": "de3345dd157fe180f0b5cf8ed36d448f2241620d30ec349ec0d3ff988f2ba8c1"
+      "sha256": "4434728240fab851ae41cd0897f56f48212a8b3a9c7208641ad820a842d5049a"
     },
     {
       "path": "modules/public-landing/public/projects.probes.json",
@@ -9292,7 +9307,7 @@
     {
       "path": "modules/public-landing/public/terms.html",
       "mode": "0000644",
-      "sha256": "dec1c3ddceb0a9e4e7fb488ae601b6f822a6b0d49ea842414d5265df5f10e0d8"
+      "sha256": "5efafcb91ee1a008d8869f85606e00f39e924b45d57939bf6598ddfe5ea77aea"
     },
     {
       "path": "modules/render-deploy/deploys.js",
@@ -9922,7 +9937,7 @@
     {
       "path": "modules/ui-design/kit/serve.js",
       "mode": "0000644",
-      "sha256": "a46336b4777bcfa78d560b3d72204ed54f6b422df4f0c918223d1b612d96aff0"
+      "sha256": "389e7f9ccdf590b4c988c5742e3627f67b1e98e028c6c4fdfea16b1ec2f75402"
     },
     {
       "path": "modules/ui-design/kit/tells.js",
@@ -10057,12 +10072,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "ebda74c3eebe46d4e8a441c4b63a195fc9d6aa911edfffdca7d9a5189ce29014"
+      "sha256": "dd170c1d4daa9970e96fec2d475b133cf29e67ed65313ee20fcc8de8f718c5ae"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "5c6a09991c3531cf64543c466ed124dc5f19825906c42e176c00e5cdae44c0d5"
+      "sha256": "9503183ef90c89351c15f488a32a988471968d9d4a04174b5b6495b7d75a5682"
     },
     {
       "path": "public-docs/index.html",
@@ -10082,7 +10097,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "b64964b1e7abbaa7a3f508f4ae02c06928e4e59d61adf1c6402584a6e681e710"
+      "sha256": "48793bfee9b2b0bdd9e6907d36aa3bac89fec594e6a80951e94032ba3fb8514b"
     },
     {
       "path": "scripts/cron/style_guide_audit.sh",
@@ -12069,6 +12084,11 @@
       "mode": "0000644",
       "sha256": "917f364b804f25437dea7fe507abe50e9b64cac79b6cc29ac786de0e24350d33"
     },
+    {
+      "path": "src/bongos/module-listing.js",
+      "mode": "0000644",
+      "sha256": "15047b229ce7c3633d74597fb8f971db00fac2ddae5fb0038666fa0896b25574"
+    },
     {
       "path": "src/bongos/module-overrides.js",
       "mode": "0000644",
@@ -12237,7 +12257,7 @@
     {
       "path": "src/bongos/routes/modules.js",
       "mode": "0000644",
-      "sha256": "fb935713e6d817c5b3ea16edd620ad50c7c0ff5992c4b70de5ccf14eac73192d"
+      "sha256": "6c20741df0b1395355abf58146ad6753197dcfde928e532b43f69ecf1ce7a325"
     },
     {
       "path": "src/bongos/routes/my-sessions.js",
@@ -12317,7 +12337,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "f0769084872b98cacd871ea7e0b062dd1fcaad8c759e38acad6393f94084b418"
+      "sha256": "03f964ccadfdd4676b59a970a32c05a182bd6d139d7739aae4091506b2500af1"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -12664,6 +12684,11 @@
       "mode": "0000644",
       "sha256": "df3266f78209e0ca45fa9cc6be2b52bc299bfb4bf93dd360196054812166e5cc"
     },
+    {
+      "path": "tests/artist_review.mjs",
+      "mode": "0000644",
+      "sha256": "370b54d4e323e144ef8f9e382b873a4ff803b7727844c0e2d6b9e5cdfeb0fbe1"
+    },
     {
       "path": "tests/asset_version.mjs",
       "mode": "0000644",
@@ -14782,7 +14807,7 @@
     {
       "path": "tests/hall_studio_home.mjs",
       "mode": "0000644",
-      "sha256": "5a1d6b276d928a49f6182c08632b684786767d23a0e3919a80219db549cd5131"
+      "sha256": "ff68748598091253bb643deb47ca73023e188a5320f21536489f62ac69cd2cbb"
     },
     {
       "path": "tests/hall_studio_world.mjs",
@@ -15292,7 +15317,7 @@
     {
       "path": "tests/landing_legal_pages.mjs",
       "mode": "0000644",
-      "sha256": "6d5cf3da83e23c457cb15daa3243463f3b5aa86acda06ea28df310798258c6c5"
+      "sha256": "b236e043fec938152e9e4cc6f19895fab39c514a109189186fec921a95fb2924"
     },
     {
       "path": "tests/landing_page.mjs",
@@ -15674,6 +15699,11 @@
       "mode": "0000644",
       "sha256": "43828c1a95652180d558e7676cc2053d0599a61c0edf4cd1ab100820fc7de493"
     },
+    {
+      "path": "tests/module_store_listing.mjs",
+      "mode": "0000644",
+      "sha256": "289478dfc8666527e919a28db3127807aefe87c19849001f133780bb8a8ac816"
+    },
     {
       "path": "tests/module_store_publish.mjs",
       "mode": "0000644",
@@ -15927,12 +15957,12 @@
     {
       "path": "tests/page_notes_db.mjs",
       "mode": "0000644",
-      "sha256": "e1e2ea0e604d289f488f6ae0df35261a09f3f1f69ac3d98220aa517ecbbd97dc"
+      "sha256": "9c8e0bf1f3f8914738fb36b3181880b2dbf00403c2ef07a510bb37c88e5fbe58"
     },
     {
       "path": "tests/page_notes_panel.mjs",
       "mode": "0000644",
-      "sha256": "5833eaf30a7ace8a946ed51ec25aa2658ecfd1bd0b9d78aec02854c3c26a554e"
+      "sha256": "0be8365d3f45e42d98817aef289ab95880fc4c0ff0101ed98ea4a0722d432426"
     },
     {
       "path": "tests/page_reader.mjs",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 525 operations across 75 resource groups
+- 527 operations across 75 resource groups
 
 ## Use it from your project
 

package/clients/bongos-client/bongos-client.global.js

@@ -841,6 +841,8 @@ function createClient(opts = {}) {
       postPageNotesIdeas: (args) => request("POST", "/page-notes/ideas", { hasBody: true }, args),
       // GET /page-notes/images/{id} — rank: any-builder — GET /page-notes/images/:id
       getPageNotesImagesId: (args) => request("GET", "/page-notes/images/{id}", { hasBody: false }, args),
+      // GET /page-notes/site — rank: any-builder — GET /page-notes/site
+      getPageNotesSite: (args) => request("GET", "/page-notes/site", { hasBody: false }, args),
     },
     "profiles": {
       // GET /profiles/{handle} — rank: public — GET /profiles/:handle
@@ -1149,6 +1151,8 @@ function createClient(opts = {}) {
     "store": {
       // GET /store/entitlements — rank: any-builder — GET /store/entitlements
       getStoreEntitlements: (args) => request("GET", "/store/entitlements", { hasBody: false }, args),
+      // GET /store/modules — rank: any-builder — GET /store/modules
+      getStoreModules: (args) => request("GET", "/store/modules", { hasBody: false }, args),
       // POST /store/modules/{key}/acquire — rank: any-builder — POST /store/modules/:key/acquire
       postStoreModulesKeyAcquire: (args) => request("POST", "/store/modules/{key}/acquire", { hasBody: true }, args),
       // POST /store/modules/{key}/acquired — rank: any-builder — POST /store/modules/:key/acquired

package/clients/bongos-client/index.cjs

@@ -840,6 +840,8 @@ function createClient(opts = {}) {
       postPageNotesIdeas: (args) => request("POST", "/page-notes/ideas", { hasBody: true }, args),
       // GET /page-notes/images/{id} — rank: any-builder — GET /page-notes/images/:id
       getPageNotesImagesId: (args) => request("GET", "/page-notes/images/{id}", { hasBody: false }, args),
+      // GET /page-notes/site — rank: any-builder — GET /page-notes/site
+      getPageNotesSite: (args) => request("GET", "/page-notes/site", { hasBody: false }, args),
     },
     "profiles": {
       // GET /profiles/{handle} — rank: public — GET /profiles/:handle
@@ -1148,6 +1150,8 @@ function createClient(opts = {}) {
     "store": {
       // GET /store/entitlements — rank: any-builder — GET /store/entitlements
       getStoreEntitlements: (args) => request("GET", "/store/entitlements", { hasBody: false }, args),
+      // GET /store/modules — rank: any-builder — GET /store/modules
+      getStoreModules: (args) => request("GET", "/store/modules", { hasBody: false }, args),
       // POST /store/modules/{key}/acquire — rank: any-builder — POST /store/modules/:key/acquire
       postStoreModulesKeyAcquire: (args) => request("POST", "/store/modules/{key}/acquire", { hasBody: true }, args),
       // POST /store/modules/{key}/acquired — rank: any-builder — POST /store/modules/:key/acquired

package/clients/bongos-client/index.d.ts

@@ -123,6 +123,7 @@ export interface GetOverrideRequestsResponse { requests: unknown }
 export interface GetPageNotesIdResponse { note: unknown; images: unknown; ideas: unknown }
 export interface GetPageNotesIdeasResponse { page_path: unknown; ideas: unknown }
 export interface GetPageNotesResponse { page_id: unknown; notes: unknown }
+export interface GetPageNotesSiteResponse { notes: unknown }
 export interface GetProfilesHandleResponse { account: unknown; cross_project: unknown }
 export interface GetProjectManageLinkResponse { ok: boolean; link: unknown }
 export interface GetProjectSettingsResponse { rows: unknown }
@@ -1341,6 +1342,8 @@ export interface BongosClient {
     postPageNotesIdeas(args: RequestArgs & { body: PostPageNotesIdeasRequest }): Promise<PostPageNotesIdeasResponse>;
     /** GET /page-notes/images/{id} — rank: any-builder */
     getPageNotesImagesId(args?: RequestArgs): Promise<ApiResponse>;
+    /** GET /page-notes/site — rank: any-builder */
+    getPageNotesSite(args?: RequestArgs): Promise<GetPageNotesSiteResponse>;
   };
   "profiles": {
     /** GET /profiles/{handle} — rank: public */
@@ -1649,6 +1652,8 @@ export interface BongosClient {
   "store": {
     /** GET /store/entitlements — rank: any-builder */
     getStoreEntitlements(args?: RequestArgs): Promise<GetStoreEntitlementsResponse>;
+    /** GET /store/modules — rank: any-builder */
+    getStoreModules(args?: RequestArgs): Promise<ApiResponse>;
     /** POST /store/modules/{key}/acquire — rank: any-builder */
     postStoreModulesKeyAcquire(args?: RequestArgs & { body?: PostStoreModulesKeyAcquireRequest }): Promise<PostStoreModulesKeyAcquireResponse>;
     /** POST /store/modules/{key}/acquired — rank: any-builder */

package/clients/bongos-client/index.mjs

@@ -837,6 +837,8 @@ export function createClient(opts = {}) {
       postPageNotesIdeas: (args) => request("POST", "/page-notes/ideas", { hasBody: true }, args),
       // GET /page-notes/images/{id} — rank: any-builder — GET /page-notes/images/:id
       getPageNotesImagesId: (args) => request("GET", "/page-notes/images/{id}", { hasBody: false }, args),
+      // GET /page-notes/site — rank: any-builder — GET /page-notes/site
+      getPageNotesSite: (args) => request("GET", "/page-notes/site", { hasBody: false }, args),
     },
     "profiles": {
       // GET /profiles/{handle} — rank: public — GET /profiles/:handle
@@ -1145,6 +1147,8 @@ export function createClient(opts = {}) {
     "store": {
       // GET /store/entitlements — rank: any-builder — GET /store/entitlements
       getStoreEntitlements: (args) => request("GET", "/store/entitlements", { hasBody: false }, args),
+      // GET /store/modules — rank: any-builder — GET /store/modules
+      getStoreModules: (args) => request("GET", "/store/modules", { hasBody: false }, args),
       // POST /store/modules/{key}/acquire — rank: any-builder — POST /store/modules/:key/acquire
       postStoreModulesKeyAcquire: (args) => request("POST", "/store/modules/{key}/acquire", { hasBody: true }, args),
       // POST /store/modules/{key}/acquired — rank: any-builder — POST /store/modules/:key/acquired

package/docs/adr/0343-a-module-score-is-a-security-gate-then-an-average-of-visible-parts.md

@@ -66,6 +66,18 @@ couldn't have yet. The floor and the ranking decide how New modules are placed (
 Price is never an input. The Metic+ override (task 1003796) and delist (task 1003797) sit on
 top of the computed score and never replace how it is computed. Every override is recorded.
 
+## Implementation note — the floor (task 1003807, 2026-10-03)
+
+The owner set the floor on 2026-10-01: **50 out of 100**, fixed in Bongos itself
+(`QUALITY_FLOOR` in `src/bongos/module-listing.js`). It is not a live setting and no new
+permission moves it; changing it is an owner-approved, reviewed task, so no author can
+move it. `GET /store/modules` lists each listed module's newest version by its current
+score: the Security gate must have passed (failed or not yet run means not listed); a
+version still labelled New (D5) is listed under "new", never ranked, and the floor does
+not apply to it until it has a real score; any other version is listed only at or above
+the floor. Below the bar is not listed at all. Authors read the rule in
+`docs/modules-contract.md` ("Getting listed").
+
 ## Consequences
 
 - **Day one, only Tests counts toward the overall score**, behind the Security gate. The number

package/docs/api/openapi.json

@@ -15295,6 +15295,44 @@
         ]
       }
     },
+    "/page-notes/site": {
+      "get": {
+        "operationId": "get_page_notes_site",
+        "tags": [
+          "page-notes"
+        ],
+        "summary": "GET /page-notes/site",
+        "description": "The public site's reviews (task 1004499), for the Studio's list. Mounted before /page-notes/:id so 'site' is never read as a doc id.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/page-notes/routes/page-notes.js",
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetPageNotesSiteResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/page-notes/{id}": {
       "get": {
         "operationId": "get_page_notes_id",
@@ -21492,6 +21530,37 @@
         ]
       }
     },
+    "/store/modules": {
+      "get": {
+        "operationId": "get_store_modules",
+        "tags": [
+          "store"
+        ],
+        "summary": "GET /store/modules",
+        "description": "The store catalog under the quality floor (task 1003807, ADR 0343 D2/D5): each listed module's newest version, if it passed the Security gate and scores at or above the floor, or under \"new\" if it has no real-world data yet. Below the bar is not listed at all. The floor is fixed in module-listing.js and returned here. rank: any-builder — a read of public store metadata, like /store/modules/latest: no entitlement taken, nothing changed.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "src/bongos/routes/modules.js",
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/store/modules/latest": {
       "get": {
         "operationId": "get_store_modules_latest",
@@ -26269,6 +26338,15 @@
           "notes"
         ]
       },
+      "GetPageNotesSiteResponse": {
+        "type": "object",
+        "properties": {
+          "notes": {}
+        },
+        "required": [
+          "notes"
+        ]
+      },
       "GetProfilesHandleResponse": {
         "type": "object",
         "properties": {
@@ -33747,9 +33825,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 525,
-  "x-schema-count": 567,
+  "x-endpoint-count": 527,
+  "x-schema-count": 568,
   "x-undocumented-bodies": 12,
-  "x-response-schemas": 376,
+  "x-response-schemas": 377,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }