@bongos/core 1.23.4 → 1.23.6

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/bongos/package-core.js",
-  "core_version": "1.23.4",
-  "core_contract": "1.23.4",
-  "source_commit": "b78c52677b921b7b2a6f25834c77b7d516810aa9",
+  "core_version": "1.23.6",
+  "core_contract": "1.23.6",
+  "source_commit": "05ce1a9370fbfc0af9f835a707c5c9ee9988be52",
   "source_ref": "HEAD",
-  "built_at": "2026-10-26T21:43:52.539Z",
+  "built_at": "2026-10-26T23:35:18.876Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 616,
     "agent_docs_stubbed": 29,
-    "functional_verbatim": 3552,
+    "functional_verbatim": 3557,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 4198,
-  "tree_sha256": "e5ed2ca130fbbb98e21c941d9c51e72760f74f72e2d48d6d91a4e789bdd6ce10",
+  "file_count": 4203,
+  "tree_sha256": "4f3b55cbbaaa3543f5aff4f5f6e26626e2fb433745b649921fcea34837f302f2",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -317,12 +317,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "8537c645efe282dc1ee9a620b555ac6bbd8919eaf8747c1be84df7c99007a48a"
+      "sha256": "627dcf2fadbf1ab61e7c6efcf6d343b8b6bdb99864dfb39e5941b3ebcb1cb03a"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "8554475255239e0e2a5c84f1287c09e93d54c4dab513248c13f243f5d21fda1d"
+      "sha256": "0741b0ffb53b7b7622370f516588ee2dc0977b242e86caf403c63d26b8d122d7"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -332,17 +332,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "34b88b9a4038b95a62f4528a83aa5bfe25f504ab545417c8edeea2a2afbfef69"
+      "sha256": "6db6d05c604d48c3afa2915a30156dc48763795f4498467a75d026e49f1f407e"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "a30cb8c16c64fd7b3eba677268411c31b0c98df4a207d5a60745bca5235d8c15"
+      "sha256": "433a4ae717283cb60453bb10c34b1626fc9f0cc696a81ab7b6a884b2708a7e15"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "29badc2ef299498e66224b7ee031be479d10cfcacd8a752c3e06eb05f1d1e64e"
+      "sha256": "3cb6d90344a0642f3be6ceb3385be63e71c8f7e0174bf3dbfc1d2196fac101ac"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -2242,7 +2242,7 @@
     {
       "path": "docs/adr/0356-a-recruit-invite-expires-30-days-after-it-is-sent-read-time.md",
       "mode": "0000644",
-      "sha256": "ccbad5d4326b069381db47ea3fc165f9a4020485e3d6ce346393a2f6711ce1f0"
+      "sha256": "c9bffb1cc48a4f34a20571be61916a5d13f6f1d8bdb50c3c5071eb6ced68efba"
     },
     {
       "path": "docs/adr/0357-the-update-rule-set-on-deploy-is-the-one-the-sweep-follows.md",
@@ -2392,12 +2392,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "fbad9b37dd44c344ef532638550d666cf94de9813c0df8d4f2e004e0b7f62582"
+      "sha256": "4d024afe3537d84fede274feebe91e6d4c8cb668ae5bfbc6788dfdd9bede3f1f"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "10545c86dc834e1c0654ff6da45caecded2e547a00818b221e16c9e60c16b8b5"
+      "sha256": "c94977d1c916fc4e57bd0647463a431f2d5f7ef595803442475ce108c79841c3"
     },
     {
       "path": "docs/architecture.md",
@@ -2422,12 +2422,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "fe7ddc06964ea4f6bf4515778376b3e02f19fff1047d2b3869cb25e8e03667f3"
+      "sha256": "698489ed0ecdf125ef705bbcb953830453c22ae8632edb437d8f3ddd685d3561"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "3bee89d2827b7e92f805aad5d6d296319c82700a4470024122797debb765c99a"
+      "sha256": "aea042d0a416623e897295c7b959d0eeed8c4d2759d859e35e4715d5c18eb936"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2937,12 +2937,12 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "3907ee1e7036c99afa1790df344933c6652b4d9ffe972715551ad9bdb2bb12d9"
+      "sha256": "8d3fd9e42419ebfcd1642f42725dd24c60efc03a8aafc88c9f022ab90c0152d6"
     },
     {
       "path": "docs/modules-contract.md",
       "mode": "0000644",
-      "sha256": "ed7ab0d4799a935bb296457ebdba667c38dcfea5ebaec72e61968cd3ad91a6eb"
+      "sha256": "a54fc56cc901d2580c71138906b4b27eb16529438dbfc3b293a1242cab783477"
     },
     {
       "path": "docs/onboarding/diagrams/01-task-lifecycle.mmd",
@@ -3027,7 +3027,7 @@
     {
       "path": "docs/page-readings.json",
       "mode": "0000644",
-      "sha256": "a7675f3e800076b5122d404884bb217f95120082d3720748b94422d8ece8d6d7"
+      "sha256": "3fa8c79139ee97fb0bc2b7ab3ce5d194984797f294ba9cedb78e322e95d6fa8d"
     },
     {
       "path": "docs/project-context.template.md",
@@ -4194,6 +4194,11 @@
       "mode": "0000644",
       "sha256": "b795f6a5596ebd12a0fbcf8d98f40b24e12fb819ec5abe5d42ca592147db32bc"
     },
+    {
+      "path": "migrations/core_281_module_version_withdraw_note.sql",
+      "mode": "0000644",
+      "sha256": "ff4a3f2e7ba50bc891cfcfa146325f28731086ce4aeab4b1011dc0412f002c68"
+    },
     {
       "path": "modules/agents/CLAUDE.md",
       "mode": "0000644",
@@ -5092,7 +5097,7 @@
     {
       "path": "modules/government/catalog.js",
       "mode": "0000644",
-      "sha256": "9a3d3fee34144d44b5af811fc8e81e7bec74559eae538cf1e6015a2d54321df3"
+      "sha256": "fb54482dcb0771a3eb378fa27afb250c9f8f1f659862af05615c90d95b50d6d7"
     },
     {
       "path": "modules/government/charter.js",
@@ -6267,7 +6272,7 @@
     {
       "path": "modules/hall-ui/public/modules.js",
       "mode": "0000644",
-      "sha256": "6ca8722bbf65ad5aa275f8d26b6df5bff5ff25a5916df54139a365bf5b596d14"
+      "sha256": "33841de9baea493a540f1b8361d8cb08c71ce599cb8da963930fc3d1d7ba5c13"
     },
     {
       "path": "modules/hall-ui/public/modules.states.json",
@@ -8207,7 +8212,7 @@
     {
       "path": "modules/onboarding/routes/access-requests.js",
       "mode": "0000644",
-      "sha256": "de63d8a97156b0079d91c945988baab73f82b50a0a2ed06f792749d21f6afc6d"
+      "sha256": "c472b5060dfd0143275ff6769daac986a6cd46c7d722186653f9adaf641a83be"
     },
     {
       "path": "modules/onboarding/routes/onboarding.js",
@@ -10832,12 +10837,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "793a3d85e023eafb3f0eb63e7a1c1b10f07a66e331adfb63d06a05921ad2f451"
+      "sha256": "d399eed08dca874f7e3a4f6daecaeebbff9d9d7d99896cfbc23c992786d0b9f5"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "db95c78d828b9fd2117b5a7b4e12d741fb21856022a6830b6cd286017a065f6f"
+      "sha256": "91e4472ae55582eec26d9e0c1264e8fd5c4132441fb6bffdf10a3b90c1ddcdbb"
     },
     {
       "path": "public-docs/index.html",
@@ -10857,7 +10862,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "a491785c22b68e414bdf9668ca809f671a8927d06560aabfbc04ce3d56dfc131"
+      "sha256": "20ffa719f32b7a90a464a880922c08e19de95ebee64d5703168ff7d2aa9db69c"
     },
     {
       "path": "scripts/bongos/CLAUDE.md",
@@ -11652,7 +11657,7 @@
     {
       "path": "scripts/bongos/login.js",
       "mode": "0000644",
-      "sha256": "2777903c4d5b5ad4549f87967d34c57b62a264f7990627735ca47d5a8e6b333d"
+      "sha256": "0a13005b8a73dd31b46bdb6f7762f483654e85e060f37eb8e78d9a6088f7245c"
     },
     {
       "path": "scripts/bongos/main-audit.js",
@@ -11729,6 +11734,11 @@
       "mode": "0000644",
       "sha256": "0334f9d2e31559bbc661ae0be5404499719d76e670560fa5f4ba72d7c14d0ac7"
     },
+    {
+      "path": "scripts/bongos/module-store-cli.js",
+      "mode": "0000644",
+      "sha256": "9634332ab9995fbb906d856fbf575cad3ad83923e4e724e888af5fd25d82b047"
+    },
     {
       "path": "scripts/bongos/module-test-runner.js",
       "mode": "0000644",
@@ -11747,7 +11757,7 @@
     {
       "path": "scripts/bongos/module.js",
       "mode": "0000644",
-      "sha256": "6fc19f18daa947837ee09d9d06010380144022ee6f637f3fd444f56cf558bfab"
+      "sha256": "f771cd502f959a281f4aaf60b65b19c240c5a5f7828a030001f7f01fcc75b222"
     },
     {
       "path": "scripts/bongos/move-escalation.js",
@@ -13394,6 +13404,11 @@
       "mode": "0000644",
       "sha256": "053d6df274f015359f4eb52361aae55857f643672fc3746c941bfed348092b21"
     },
+    {
+      "path": "scripts/gds/module-store-cli.js",
+      "mode": "0000644",
+      "sha256": "f7060060ae2ad7f74d3ee43ae3ac7bffe45de976c2ccfbf3ca5e91aecb896b8f"
+    },
     {
       "path": "scripts/gds/module-test-runner.js",
       "mode": "0000644",
@@ -14297,7 +14312,7 @@
     {
       "path": "src/bongos/auth-admission.js",
       "mode": "0000644",
-      "sha256": "e0e8a5b10571aa0248486e8ae6f556439e385938ca5cee9255a93df69f8ba549"
+      "sha256": "1f60d40b8157a9dcc9fcff239123955553ddfe11bb671386f0a0ec4f8ae0ee75"
     },
     {
       "path": "src/bongos/auth-config.js",
@@ -14417,7 +14432,7 @@
     {
       "path": "src/bongos/middleware/rate-limit.js",
       "mode": "0000644",
-      "sha256": "8881220efc4b990a41fc2463dc663a5d2325a28284d2b654f5b3bc453178e3da"
+      "sha256": "8191011bfa63fcfa1a77383fbab08abdfa4a4584ac641fdf382af5423b06b087"
     },
     {
       "path": "src/bongos/module-entitlements.js",
@@ -14427,7 +14442,7 @@
     {
       "path": "src/bongos/module-listing.js",
       "mode": "0000644",
-      "sha256": "3f7013b4e59f72fc89663461d6d5457e412624ae3d4c1df1d2a3b9a8d9168d02"
+      "sha256": "ef63c8be3af54a23b36647b2402517fe2fca4c6c1b0ba5a75d07a85cd39abc92"
     },
     {
       "path": "src/bongos/module-overrides.js",
@@ -14452,7 +14467,7 @@
     {
       "path": "src/bongos/module-store.js",
       "mode": "0000644",
-      "sha256": "1f7fc7251a2b77c80da33b471fcb5ff180bbbd969407a0c636e9085b654dc525"
+      "sha256": "75c7e86fc1c0c9d6cffaa63a4c6654fe5191dab919dd988dc04903ca84c84382"
     },
     {
       "path": "src/bongos/module-subcategories.js",
@@ -14537,7 +14552,7 @@
     {
       "path": "src/bongos/route-rank-check.js",
       "mode": "0000644",
-      "sha256": "249ff48a954c7e904d705e636766b92924203dae3a6c08f688cbc68d0734dcb4"
+      "sha256": "456217f8086f0748d4bf64536cc304b0124dd4d94783b627cfc5d9ed25e3d8b4"
     },
     {
       "path": "src/bongos/routes.js",
@@ -14562,7 +14577,7 @@
     {
       "path": "src/bongos/routes/auth.js",
       "mode": "0000644",
-      "sha256": "dd63e8d821c0c9e0bb0cb2568f41b8df53d10c4fb3e691ef10d5ce798650b752"
+      "sha256": "d5ad4455493abf3777e51b6d82a186b810275ab05f8959a7fc13213dcebe9c3a"
     },
     {
       "path": "src/bongos/routes/backup.js",
@@ -14622,7 +14637,7 @@
     {
       "path": "src/bongos/routes/modules.js",
       "mode": "0000644",
-      "sha256": "4a210c0d6fe7e5f29612c4b7616ed34c1805f69c7618062ebcc50d0586a320dc"
+      "sha256": "e7e9c57d4b5c1513425c9349d477e5b1b07c5538cabc74f30d9f899c7962384e"
     },
     {
       "path": "src/bongos/routes/my-passkeys.js",
@@ -14712,7 +14727,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "e9850d0157caab4215194a5e69e04420b0d9e3b97a8d1867f8f84e9087b88930"
+      "sha256": "9c9c3ae365588e980585b171efb35ea63dcad8d21c8a6b8e3e5a9bf140d7dd34"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -14817,7 +14832,7 @@
     {
       "path": "tests/account_existence_rate_limit.mjs",
       "mode": "0000644",
-      "sha256": "41170e6fa3bc063770a39f4fe5b21e049ae91c8c4115b3b2152a7e464420fb6f"
+      "sha256": "41b8175653a86b79a5dae1e0be041eb4a286720cb41cbcd069afe9bc78b172ac"
     },
     {
       "path": "tests/account_privacy_flags.mjs",
@@ -15032,7 +15047,7 @@
     {
       "path": "tests/application_lifecycle.mjs",
       "mode": "0000644",
-      "sha256": "239566c55a726433ed288dcdcb9728eaeb2d7803d8bbdd26b7bc77c68124334b"
+      "sha256": "42a2fb6dae46ffc7b41ffca65be0014be65b46d73c5167b7299543f59387ee6a"
     },
     {
       "path": "tests/architect.mjs",
@@ -15397,7 +15412,7 @@
     {
       "path": "tests/bongos_login.mjs",
       "mode": "0000644",
-      "sha256": "4cbb034eea342befa92a3388f5e5c97abdee256e6c2b4681abd8c1f008ca2801"
+      "sha256": "468694776fb15978ac7f716b7c7d434085a5da2331ffa28e274310195cf1e7a2"
     },
     {
       "path": "tests/branding.mjs",
@@ -17252,7 +17267,7 @@
     {
       "path": "tests/hall_catalog_world.mjs",
       "mode": "0000644",
-      "sha256": "843039f4e14492045c94c9ce803d22208d0e68d607330da6391e56d75d4c8186"
+      "sha256": "201c7755757f250932472bec09cb36a1c036ac5762fe9f91db7554d8c4268df1"
     },
     {
       "path": "tests/hall_city.mjs",
@@ -17992,7 +18007,7 @@
     {
       "path": "tests/invite_expiry_db.mjs",
       "mode": "0000644",
-      "sha256": "8be6c683c443a6b0f6767fd68a93b22da73c011e009e5abae7872e8c61606054"
+      "sha256": "711b2f2fdf012b9583edbac35f9bf8eac38425bfe794d8253871d2f2d3bfa034"
     },
     {
       "path": "tests/join_application_note.mjs",
@@ -18487,7 +18502,7 @@
     {
       "path": "tests/module_store_cli.mjs",
       "mode": "0000644",
-      "sha256": "cf4df707f62fa142f106822c44404603f8ec32213d61b6707818f5649c443275"
+      "sha256": "7b57aafabc5d9c3fa568c88157e3049befde2abaa1d54c69ac69520d6cea6efd"
     },
     {
       "path": "tests/module_store_delist.mjs",
@@ -18509,6 +18524,11 @@
       "mode": "0000644",
       "sha256": "5f0cb9cb6e3faf90d342e1d9e1767699b677b8630d874f1c2af9cb7f713ef530"
     },
+    {
+      "path": "tests/module_store_price.mjs",
+      "mode": "0000644",
+      "sha256": "52fe692c1991fa33388b15ff5622f5207b5314fb05d0aa474543d888bda36e66"
+    },
     {
       "path": "tests/module_store_publish.mjs",
       "mode": "0000644",
@@ -18534,6 +18554,11 @@
       "mode": "0000644",
       "sha256": "ad29d45c767e14f0dcef7ccd44107545fa3ab54182ad8b0cf7b51bf00243eac5"
     },
+    {
+      "path": "tests/module_store_withdraw.mjs",
+      "mode": "0000644",
+      "sha256": "a1fdcee205b8b8686d915d34ccd0a26debdb5673d957eade23e56bf7686ae638"
+    },
     {
       "path": "tests/module_submissions.mjs",
       "mode": "0000644",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 582 operations across 76 resource groups
+- 584 operations across 76 resource groups
 
 ## Use it from your project
 

package/clients/bongos-client/bongos-client.global.js

@@ -1251,6 +1251,8 @@ function createClient(opts = {}) {
       getStoreModulesKeyEntitlement: (args) => request("GET", "/store/modules/{key}/entitlement", { hasBody: false }, args),
       // GET /store/modules/{key}/listing — rank: any-builder — GET /store/modules/:key/listing
       getStoreModulesKeyListing: (args) => request("GET", "/store/modules/{key}/listing", { hasBody: false }, args),
+      // POST /store/modules/{key}/price — rank: metic+archon — POST /store/modules/:key/price
+      postStoreModulesKeyPrice: (args) => request("POST", "/store/modules/{key}/price", { hasBody: true }, args),
       // POST /store/modules/{key}/versions — rank: metic+archon — POST /store/modules/:key/versions
       postStoreModulesKeyVersions: (args) => request("POST", "/store/modules/{key}/versions", { hasBody: true }, args),
       // GET /store/modules/{key}/versions/{version}/channel — rank: any-builder — GET /store/modules/:key/versions/:version/channel
@@ -1267,6 +1269,8 @@ function createClient(opts = {}) {
       postStoreModulesKeyVersionsVersionRelease: (args) => request("POST", "/store/modules/{key}/versions/{version}/release", { hasBody: true }, args),
       // GET /store/modules/{key}/versions/{version}/tarball — rank: any-builder — GET /store/modules/:key/versions/:version/tarball
       getStoreModulesKeyVersionsVersionTarball: (args) => request("GET", "/store/modules/{key}/versions/{version}/tarball", { hasBody: false }, args),
+      // POST /store/modules/{key}/versions/{version}/withdraw — rank: metic+archon — POST /store/modules/:key/versions/:version/withdraw
+      postStoreModulesKeyVersionsVersionWithdraw: (args) => request("POST", "/store/modules/{key}/versions/{version}/withdraw", { hasBody: true }, args),
       // GET /store/modules/latest — rank: any-builder — GET /store/modules/latest
       getStoreModulesLatest: (args) => request("GET", "/store/modules/latest", { hasBody: false }, args),
       // GET /store/subcategories — rank: any-builder — GET /store/subcategories

package/clients/bongos-client/index.cjs

@@ -1250,6 +1250,8 @@ function createClient(opts = {}) {
       getStoreModulesKeyEntitlement: (args) => request("GET", "/store/modules/{key}/entitlement", { hasBody: false }, args),
       // GET /store/modules/{key}/listing — rank: any-builder — GET /store/modules/:key/listing
       getStoreModulesKeyListing: (args) => request("GET", "/store/modules/{key}/listing", { hasBody: false }, args),
+      // POST /store/modules/{key}/price — rank: metic+archon — POST /store/modules/:key/price
+      postStoreModulesKeyPrice: (args) => request("POST", "/store/modules/{key}/price", { hasBody: true }, args),
       // POST /store/modules/{key}/versions — rank: metic+archon — POST /store/modules/:key/versions
       postStoreModulesKeyVersions: (args) => request("POST", "/store/modules/{key}/versions", { hasBody: true }, args),
       // GET /store/modules/{key}/versions/{version}/channel — rank: any-builder — GET /store/modules/:key/versions/:version/channel
@@ -1266,6 +1268,8 @@ function createClient(opts = {}) {
       postStoreModulesKeyVersionsVersionRelease: (args) => request("POST", "/store/modules/{key}/versions/{version}/release", { hasBody: true }, args),
       // GET /store/modules/{key}/versions/{version}/tarball — rank: any-builder — GET /store/modules/:key/versions/:version/tarball
       getStoreModulesKeyVersionsVersionTarball: (args) => request("GET", "/store/modules/{key}/versions/{version}/tarball", { hasBody: false }, args),
+      // POST /store/modules/{key}/versions/{version}/withdraw — rank: metic+archon — POST /store/modules/:key/versions/:version/withdraw
+      postStoreModulesKeyVersionsVersionWithdraw: (args) => request("POST", "/store/modules/{key}/versions/{version}/withdraw", { hasBody: true }, args),
       // GET /store/modules/latest — rank: any-builder — GET /store/modules/latest
       getStoreModulesLatest: (args) => request("GET", "/store/modules/latest", { hasBody: false }, args),
       // GET /store/subcategories — rank: any-builder — GET /store/subcategories

package/clients/bongos-client/index.d.ts

@@ -184,7 +184,7 @@ export interface GetSpecialitiesResponse { specialities: unknown }
 export interface GetSsoPubkeyResponse { alg: unknown; format: unknown; public_key_b64: unknown }
 export interface GetStoreEntitlementsResponse { entitlements: unknown }
 export interface GetStoreModulesKeyVersionsVersionHowtoResponse { module_key: unknown; title: unknown; version: unknown; published_at: unknown; delisted: unknown; markdown: unknown; artifact_url: unknown }
-export interface GetStoreModulesLatestResponse { latest: unknown }
+export interface GetStoreModulesLatestResponse { latest: unknown; withdrawn: unknown }
 export interface GetStoreUsageReportingResponse { enabled: unknown }
 export interface GetTaskRecommendationsForMeResponse { recommendations: unknown; count: unknown }
 export interface GetTaskRecommendationsMineResponse { recommendations: unknown; count: unknown }
@@ -562,6 +562,8 @@ export interface PostStoreModulesKeyAcquiredRequest { version: string }
 export interface PostStoreModulesKeyAcquiredResponse { ok: boolean; entitlement: unknown }
 export interface PostStoreModulesKeyDelistRequest { reason?: string }
 export interface PostStoreModulesKeyDelistResponse { ok: boolean; module_key: unknown; status: unknown; delisted_at: unknown }
+export interface PostStoreModulesKeyPriceRequest { cents?: unknown; credits?: unknown }
+export interface PostStoreModulesKeyPriceResponse { ok: boolean; module_key: unknown; previous: unknown; price: unknown }
 export interface PostStoreModulesKeyVersionsResponse { ok: boolean; created_module: unknown; version: unknown; channel: unknown; category: unknown }
 export interface PostStoreModulesKeyVersionsVersionErrorCountRequest { day: string; count: number }
 export interface PostStoreModulesKeyVersionsVersionInstallReportRequest { ok: boolean; error_code?: string }
@@ -569,6 +571,8 @@ export interface PostStoreModulesKeyVersionsVersionReassessRequest { reason?: st
 export interface PostStoreModulesKeyVersionsVersionReassessResponse { ok: boolean; queued: boolean; module_key: unknown; version: unknown; version_id: unknown }
 export interface PostStoreModulesKeyVersionsVersionReleaseRequest { reason?: string }
 export interface PostStoreModulesKeyVersionsVersionReleaseResponse { ok: boolean; module_key: unknown; version: unknown; channel: unknown; reason: unknown }
+export interface PostStoreModulesKeyVersionsVersionWithdrawRequest { reason?: string }
+export interface PostStoreModulesKeyVersionsVersionWithdrawResponse { ok: boolean; module_key: unknown; version: unknown; channel: unknown; reason: unknown }
 export interface PostStoreSubcategoriesIdApproveRequest { label?: string; sub_key?: string }
 export interface PostStoreSubcategoriesIdMergeRequest { into?: unknown }
 export interface PostStoreUsageReportingRequest { enabled: boolean }
@@ -1808,6 +1812,8 @@ export interface BongosClient {
     getStoreModulesKeyEntitlement(args?: RequestArgs): Promise<ApiResponse>;
     /** GET /store/modules/{key}/listing — rank: any-builder */
     getStoreModulesKeyListing(args?: RequestArgs): Promise<ApiResponse>;
+    /** POST /store/modules/{key}/price — rank: metic+archon */
+    postStoreModulesKeyPrice(args?: RequestArgs & { body?: PostStoreModulesKeyPriceRequest }): Promise<PostStoreModulesKeyPriceResponse>;
     /** POST /store/modules/{key}/versions — rank: metic+archon */
     postStoreModulesKeyVersions(args?: RequestArgs): Promise<PostStoreModulesKeyVersionsResponse>;
     /** GET /store/modules/{key}/versions/{version}/channel — rank: any-builder */
@@ -1824,6 +1830,8 @@ export interface BongosClient {
     postStoreModulesKeyVersionsVersionRelease(args?: RequestArgs & { body?: PostStoreModulesKeyVersionsVersionReleaseRequest }): Promise<PostStoreModulesKeyVersionsVersionReleaseResponse>;
     /** GET /store/modules/{key}/versions/{version}/tarball — rank: any-builder */
     getStoreModulesKeyVersionsVersionTarball(args?: RequestArgs): Promise<ApiResponse>;
+    /** POST /store/modules/{key}/versions/{version}/withdraw — rank: metic+archon */
+    postStoreModulesKeyVersionsVersionWithdraw(args?: RequestArgs & { body?: PostStoreModulesKeyVersionsVersionWithdrawRequest }): Promise<PostStoreModulesKeyVersionsVersionWithdrawResponse>;
     /** GET /store/modules/latest — rank: any-builder */
     getStoreModulesLatest(args?: RequestArgs): Promise<GetStoreModulesLatestResponse>;
     /** GET /store/subcategories — rank: any-builder */

package/clients/bongos-client/index.mjs

@@ -1247,6 +1247,8 @@ export function createClient(opts = {}) {
       getStoreModulesKeyEntitlement: (args) => request("GET", "/store/modules/{key}/entitlement", { hasBody: false }, args),
       // GET /store/modules/{key}/listing — rank: any-builder — GET /store/modules/:key/listing
       getStoreModulesKeyListing: (args) => request("GET", "/store/modules/{key}/listing", { hasBody: false }, args),
+      // POST /store/modules/{key}/price — rank: metic+archon — POST /store/modules/:key/price
+      postStoreModulesKeyPrice: (args) => request("POST", "/store/modules/{key}/price", { hasBody: true }, args),
       // POST /store/modules/{key}/versions — rank: metic+archon — POST /store/modules/:key/versions
       postStoreModulesKeyVersions: (args) => request("POST", "/store/modules/{key}/versions", { hasBody: true }, args),
       // GET /store/modules/{key}/versions/{version}/channel — rank: any-builder — GET /store/modules/:key/versions/:version/channel
@@ -1263,6 +1265,8 @@ export function createClient(opts = {}) {
       postStoreModulesKeyVersionsVersionRelease: (args) => request("POST", "/store/modules/{key}/versions/{version}/release", { hasBody: true }, args),
       // GET /store/modules/{key}/versions/{version}/tarball — rank: any-builder — GET /store/modules/:key/versions/:version/tarball
       getStoreModulesKeyVersionsVersionTarball: (args) => request("GET", "/store/modules/{key}/versions/{version}/tarball", { hasBody: false }, args),
+      // POST /store/modules/{key}/versions/{version}/withdraw — rank: metic+archon — POST /store/modules/:key/versions/:version/withdraw
+      postStoreModulesKeyVersionsVersionWithdraw: (args) => request("POST", "/store/modules/{key}/versions/{version}/withdraw", { hasBody: true }, args),
       // GET /store/modules/latest — rank: any-builder — GET /store/modules/latest
       getStoreModulesLatest: (args) => request("GET", "/store/modules/latest", { hasBody: false }, args),
       // GET /store/subcategories — rank: any-builder — GET /store/subcategories

package/docs/adr/0356-a-recruit-invite-expires-30-days-after-it-is-sent-read-time.md

@@ -5,6 +5,7 @@
 - **Task:** [task 1002969](https://cloudbongos.com/builders#/task/1002969) (goal 1000110)
 - **Builds on:** privacy spec D4 (`docs/specs/<redacted>.md`; the owner signed the 30 days), [ADR 0335](0335-an-invite-is-a-pre-approved-row-on-the-projects-own-instance.md) D2 (an invite is a `kind='invite'` row on the project's own instance), [ADR 0353](0353-a-hub-invite-is-a-notice-of-the-projects-own-invite.md) (the hub's `pending` row is a notice of that invite)
 - **Amends:** ADR 0335 D2.5 ("no admission path reads `kind`")
+- **Amended by:** [ADR 0217](0217-rank-gates-inviting-not-viewing.md) D4, as built in [task 1003359](https://cloudbongos.com/builders#/task/1003359) — the public status probe answers `not_admitted`, not `expired`, for a lapsed invite, and `bongos login` no longer stops on it. In practice the CLI never saw `expired`: it files a request first, and that newer pending row is what the probe read.
 - **Decided with:** the owner split the original task on 2026-09-30. `seen_at` is [task 1004443](https://cloudbongos.com/builders#/task/1004443); the decline relay is [task 1004444](https://cloudbongos.com/builders#/task/1004444).
 
 ## Context
@@ -23,7 +24,7 @@ An invite writes an `invited` row, and the sign-in gate admits any login holding
 - The gate refuses it. The public "already approved?" check and the standing-invite probe no longer count it, so the invitee may apply and the recruiter can re-invite.
 - A re-invite writes a fresh row, which opens a fresh door. The expired row stays as history.
 - The queue marks it `expired` with `expires_at`. The outstanding-invite list keeps it so the sender knows to invite again, and drops it once a newer invite for that login is live. The hall's queue shows "Invite expired" and offers no rescind.
-- The public status probe answers `expired` (`admitted: false`), and `bongos login` stops waiting on it. An older CLI treats an unknown status as "wait" and times out, which is no worse than before.
+- The public status probe answers `expired` (`admitted: false`), and `bongos login` stops waiting on it. An older CLI treats an unknown status as "wait" and times out, which is no worse than before. *(Superseded: it now answers `not_admitted` — see "Amended by" above.)*
 - A rescind that leaves only expired rows clears the hub notice.
 
 **D5 — The hub's notice follows the door.** `listPendingInvitesForAccount` hides a `pending` notice older than the same 30 days (its `joined_at` is when the project sent the notice). `inviteToProject` restamps `joined_at` only on a `pending` row that is already past the window, so a re-invite shows again. A re-send while the invite is live changes nothing, and a real membership is never touched.