@bongos/core 1.24.13 → 1.24.15

package/.claude/skills/blocker-review/SKILL.md

@@ -47,6 +47,8 @@ node scripts/bongos/api.js GET /api/bongos/blockers
 
 If the list is empty, print "no open blockers — nothing to review today" and exit.
 
+Each blocker's `blocking_tasks` lists the tasks it holds with their `short_name`; name them to the person as "task N - <name>", never a bare number.
+
 **"What's stuck on me" reads the per-person list instead (task 1004999).** A blocker has no assignee; who it waits on is the seat its ask names (owner, a building's Lead, a board), resolved to people by the same routing the City uses. When the builder asks what is stuck on THEM, fetch only theirs, and name each one's seat ("as the owner", "as the Planning Lead"):
 
 ```

package/.claude/skills/session-board/SKILL.md

@@ -0,0 +1,29 @@
+---
+name: session-board
+description: >-
+  Show every session the builder has going and where they are jammed, as a board in chat. Triggers: "/session-board", "what are my sessions doing", "where are things stuck", "why is everything waiting", "show my sessions".
+plain: >-
+  Shows, in the chat, every piece of work you have going at once: what each one is doing, what is waiting to land, and what is stuck and holding the rest up.
+reach-for: >-
+  When you run several sessions and things seem to be waiting on each other, or you want to know which one to look at first.
+cost: >-
+  Free. It only reads; nothing changes.
+---
+
+You are showing the builder a board of everything they have in flight (task 1004957). It reads only.
+
+## Run it
+
+```bash
+node scripts/bongos/sessions-board.js
+```
+
+It prints markdown: a **Jams** list first, then one table — each session's folder, its task, its stage (building, waiting to land, back from review, stuck) and what it is waiting on. Paste it into your reply as it is; it is already written for the builder.
+
+## Then say what to do about the jams, in one or two lines
+
+- **"New work is paused for every one of your sessions"** is the one that matters most: too many finished pieces are stuck, so no session can start new work until one comes down. Say which stuck ship nobody is fixing yet and offer `/strand-fix N` for it. Never send more than one session at the same stuck ship — a ship marked "<session> is fixing it" is that session's.
+- **A single stuck ship** that is not pausing anything can wait; mention it, do not lead with it.
+- **Nothing jammed**: say so in one line and stop.
+
+`--json` prints the same as data if you need to reason over it. The startup line (`--line`) is silent unless new work is paused; this skill is how the builder sees the whole picture.

package/.claude/skills/strand-fix/SKILL.md

@@ -33,7 +33,7 @@ node scripts/bongos/strand-lease.js take N   # exit 0: it is yours · exit 3: an
 
 ## Which shape is this? (read first)
 
-`node scripts/bongos/strand-watch.js --json` — find the task. Three shapes, three owners:
+`node scripts/bongos/strand-watch.js --json` — find the task. Each strand carries its `name`; to the builder, write it as "task N - <name>", never the bare number. Three shapes, three owners:
 
 | shape | status | reason | this skill? |
 |---|---|---|---|

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 652 operations across 81 resource groups
+- 657 operations across 83 resource groups
 
 ## Use it from your project
 

package/clients/bongos-client/bongos-client.global.js

@@ -793,6 +793,8 @@ function createClient(opts = {}) {
       getMeAchievements: (args) => request("GET", "/me/achievements", { hasBody: false }, args),
       // POST /me/anthropic-link — rank: any-builder — POST /me/anthropic-link
       postMeAnthropicLink: (args) => request("POST", "/me/anthropic-link", { hasBody: true }, args),
+      // PATCH /me/checkout-freshness — rank: any-builder — PATCH /me/checkout-freshness
+      patchMeCheckoutFreshness: (args) => request("PATCH", "/me/checkout-freshness", { hasBody: true }, args),
       // PATCH /me/core-move-seen — rank: any-builder — PATCH /me/core-move-seen
       patchMeCoreMoveSeen: (args) => request("PATCH", "/me/core-move-seen", { hasBody: true }, args),
       // GET /me/credits — rank: any-builder — GET /me/credits
@@ -1022,6 +1024,12 @@ function createClient(opts = {}) {
       // GET /pay-terms — rank: any-builder — GET /pay-terms
       getPayTerms: (args) => request("GET", "/pay-terms", { hasBody: false }, args),
     },
+    "payTypeGates": {
+      // GET /pay-type-gates — rank: any-builder — GET /pay-type-gates
+      getPayTypeGates: (args) => request("GET", "/pay-type-gates", { hasBody: false }, args),
+      // PUT /pay-type-gates/{payType}/{requirement} — rank: archon — PUT /pay-type-gates/:payType/:requirement
+      putPayTypeGatesPayTypeRequirement: (args) => request("PUT", "/pay-type-gates/{payType}/{requirement}", { hasBody: true }, args),
+    },
     "payouts": {
       // POST /payouts/age-records — rank: archon — POST /payouts/age-records
       postPayoutsAgeRecords: (args) => request("POST", "/payouts/age-records", { hasBody: true }, args),
@@ -1064,6 +1072,10 @@ function createClient(opts = {}) {
       // GET /project/manage-link — rank: archon — GET /project/manage-link
       getProjectManageLink: (args) => request("GET", "/project/manage-link", { hasBody: false }, args),
     },
+    "projectAccount": {
+      // GET /project-account — rank: archon — GET /project-account
+      getProjectAccount: (args) => request("GET", "/project-account", { hasBody: false }, args),
+    },
     "projectSettings": {
       // GET /project-settings — rank: metic+archon — GET /project-settings
       getProjectSettings: (args) => request("GET", "/project-settings", { hasBody: false }, args),
@@ -1493,6 +1505,8 @@ function createClient(opts = {}) {
       getTasksIdRecommendations: (args) => request("GET", "/tasks/{id}/recommendations", { hasBody: false }, args),
       // POST /tasks/{id}/ship — rank: any-builder — POST /tasks/:id/ship
       postTasksIdShip: (args) => request("POST", "/tasks/{id}/ship", { hasBody: true }, args),
+      // PATCH /tasks/{id}/short-name — rank: any-builder — PATCH /tasks/:id/short-name
+      patchTasksIdShortName: (args) => request("PATCH", "/tasks/{id}/short-name", { hasBody: true }, args),
       // DELETE /tasks/{id}/visual — rank: any-builder — DELETE /tasks/:id/visual
       deleteTasksIdVisual: (args) => request("DELETE", "/tasks/{id}/visual", { hasBody: false }, args),
       // POST /tasks/{id}/visual — rank: any-builder — POST /tasks/:id/visual

package/clients/bongos-client/index.cjs

@@ -792,6 +792,8 @@ function createClient(opts = {}) {
       getMeAchievements: (args) => request("GET", "/me/achievements", { hasBody: false }, args),
       // POST /me/anthropic-link — rank: any-builder — POST /me/anthropic-link
       postMeAnthropicLink: (args) => request("POST", "/me/anthropic-link", { hasBody: true }, args),
+      // PATCH /me/checkout-freshness — rank: any-builder — PATCH /me/checkout-freshness
+      patchMeCheckoutFreshness: (args) => request("PATCH", "/me/checkout-freshness", { hasBody: true }, args),
       // PATCH /me/core-move-seen — rank: any-builder — PATCH /me/core-move-seen
       patchMeCoreMoveSeen: (args) => request("PATCH", "/me/core-move-seen", { hasBody: true }, args),
       // GET /me/credits — rank: any-builder — GET /me/credits
@@ -1021,6 +1023,12 @@ function createClient(opts = {}) {
       // GET /pay-terms — rank: any-builder — GET /pay-terms
       getPayTerms: (args) => request("GET", "/pay-terms", { hasBody: false }, args),
     },
+    "payTypeGates": {
+      // GET /pay-type-gates — rank: any-builder — GET /pay-type-gates
+      getPayTypeGates: (args) => request("GET", "/pay-type-gates", { hasBody: false }, args),
+      // PUT /pay-type-gates/{payType}/{requirement} — rank: archon — PUT /pay-type-gates/:payType/:requirement
+      putPayTypeGatesPayTypeRequirement: (args) => request("PUT", "/pay-type-gates/{payType}/{requirement}", { hasBody: true }, args),
+    },
     "payouts": {
       // POST /payouts/age-records — rank: archon — POST /payouts/age-records
       postPayoutsAgeRecords: (args) => request("POST", "/payouts/age-records", { hasBody: true }, args),
@@ -1063,6 +1071,10 @@ function createClient(opts = {}) {
       // GET /project/manage-link — rank: archon — GET /project/manage-link
       getProjectManageLink: (args) => request("GET", "/project/manage-link", { hasBody: false }, args),
     },
+    "projectAccount": {
+      // GET /project-account — rank: archon — GET /project-account
+      getProjectAccount: (args) => request("GET", "/project-account", { hasBody: false }, args),
+    },
     "projectSettings": {
       // GET /project-settings — rank: metic+archon — GET /project-settings
       getProjectSettings: (args) => request("GET", "/project-settings", { hasBody: false }, args),
@@ -1492,6 +1504,8 @@ function createClient(opts = {}) {
       getTasksIdRecommendations: (args) => request("GET", "/tasks/{id}/recommendations", { hasBody: false }, args),
       // POST /tasks/{id}/ship — rank: any-builder — POST /tasks/:id/ship
       postTasksIdShip: (args) => request("POST", "/tasks/{id}/ship", { hasBody: true }, args),
+      // PATCH /tasks/{id}/short-name — rank: any-builder — PATCH /tasks/:id/short-name
+      patchTasksIdShortName: (args) => request("PATCH", "/tasks/{id}/short-name", { hasBody: true }, args),
       // DELETE /tasks/{id}/visual — rank: any-builder — DELETE /tasks/:id/visual
       deleteTasksIdVisual: (args) => request("DELETE", "/tasks/{id}/visual", { hasBody: false }, args),
       // POST /tasks/{id}/visual — rank: any-builder — POST /tasks/:id/visual

package/clients/bongos-client/index.d.ts

@@ -40,7 +40,7 @@ export interface GetAiStudioBalanceResponse { payments: unknown; test_mode: bool
 export interface GetAiStudioKeysResponse { storage_configured: unknown; keys: unknown }
 export interface GetAiStudioRequestsIdResponse { request: unknown }
 export interface GetAiStudioRequestsResponse { requests: unknown }
-export interface GetAiStudioStatusResponse { ok: boolean; module: unknown }
+export interface GetAiStudioStatusResponse { ok: boolean; module: unknown; terms: unknown; adult: unknown }
 export interface GetAiStudioTopupQuoteResponse { quote: unknown; min_micro: unknown; max_micro: unknown }
 export interface GetArtistGateResponse { ok: boolean; mode: unknown; since: unknown; holds: boolean; truncated: unknown; reviews: unknown; halt: unknown }
 export interface GetAuditLogResponse { rows: unknown; page: unknown }
@@ -142,6 +142,7 @@ export interface GetPageNotesIdeasResponse { page_path: unknown; ideas: unknown
 export interface GetPageNotesResponse { page_id: unknown; notes: unknown }
 export interface GetPageNotesSiteResponse { notes: unknown }
 export interface GetPayTermsResponse { pay_terms: unknown }
+export interface GetPayTypeGatesResponse { gates: unknown }
 export interface GetPayoutsApprovalsResponse { approvals: unknown }
 export interface GetPayoutsGatesBuilderIdResponse { gate: unknown }
 export interface GetPayoutsRulesResponse { rules: unknown }
@@ -245,6 +246,8 @@ export interface PatchInboxIdBodyResponse { ok: boolean; idea: unknown; delta: u
 export interface PatchInboxIdRequest { status?: "open" | "promoted" | "discarded" | "merged"; kind?: string; promoted_to_task_id?: number; reviewed_at?: unknown; merged_into_idea_id?: number; triage_note?: string }
 export interface PatchInboxIdResponse { idea: unknown }
 export interface PatchMarketWatchSettingsRequest { enabled?: unknown; monthly_cap_usd?: unknown; cadence?: unknown }
+export interface PatchMeCheckoutFreshnessRequest { behind: number; branch?: string; reason: string }
+export interface PatchMeCheckoutFreshnessResponse { ok: boolean; checkout: unknown }
 export interface PatchMeCoreMoveSeenRequest { id: string }
 export interface PatchMeCoreMoveSeenResponse { ok: boolean; seen: unknown }
 export interface PatchMeCrossProjectRequest { hide_stats?: boolean; account_visibility?: string; recruiter_discoverable?: boolean }
@@ -289,6 +292,8 @@ export interface PatchSpecialitiesIdResponse { speciality: unknown }
 export interface PatchTaskRecommendationsIdRequest { status: "declined" | "withdrawn" }
 export interface PatchTaskRecommendationsIdResponse { ok: boolean; recommendation: unknown }
 export interface PatchTasksIdRequest { kind?: string; discipline?: string; requires_rank?: string; module_key?: string; goal_id?: number; parent_task_id?: StringifiableId; parallel_safe?: unknown; newcomer_friendly?: boolean; xenos_claimable?: boolean; security_sensitive?: boolean; automation_tag?: string; needs?: unknown; needs_migration?: boolean; description?: string; title?: string; priority?: unknown; value_summary?: string; status?: unknown; pay_terms?: unknown }
+export interface PatchTasksIdShortNameRequest { short_name: string }
+export interface PatchTasksIdShortNameResponse { task: unknown }
 export interface PostAccessRequestsInviteRequest { github_login: string; note?: string }
 export interface PostAccessRequestsInviteResponse { ok: boolean; already_invited?: boolean; github_login?: unknown; request?: unknown }
 export interface PostAccessRequestsRequest { github_login: string; display_name?: string; note?: string }
@@ -470,7 +475,7 @@ export interface PostLlmCacheStoreResponse { stored: boolean; result_cost_usd?:
 export interface PostMarketWatchAskAnswerRequest { week_of?: string; picks?: unknown[]; names?: unknown[]; nothing?: boolean; builder_id?: number }
 export interface PostMarketWatchProposalsIdDecideRequest { decision: "approve" | "decline" }
 export interface PostMarketWatchProposalsIdVoteResponse { ok: boolean; matter_id: unknown; item_id: unknown }
-export interface PostMarketWatchProposalsRequest { kind: string; reason?: string; item_id?: StringifiableId; dimension?: string; value?: unknown; url?: string; log_entry_id?: StringifiableId; scout?: string; name?: string }
+export interface PostMarketWatchProposalsRequest { kind: string; reason?: string; item_id?: StringifiableId; dimension?: string; value?: unknown; url?: string; log_entry_id?: StringifiableId; takeaway?: string; wrong?: unknown; scout?: string; name?: string }
 export interface PostMarketWatchProposalsResponse { proposal: unknown }
 export interface PostMarketWatchRulesProposalsRequest { step: string; change: Record<string, unknown>; reason: string }
 export interface PostMarketWatchRulesProposalsResponse { ok: boolean; proposal: unknown }
@@ -690,6 +695,8 @@ export interface PutMarketWatchSettingsKeyRequest { key: string }
 export interface PutMingleOptInRequest { opted_in: boolean }
 export interface PutMingleOptInResponse { opted_in: unknown; updated_at: unknown }
 export interface PutMingleProjectRequest { enabled: boolean }
+export interface PutPayTypeGatesPayTypeRequirementRequest { state?: unknown; evidence_ref?: unknown; acknowledged?: unknown }
+export interface PutPayTypeGatesPayTypeRequirementResponse { ok: boolean; gate: unknown }
 export interface PutProvisioningInstancesIdLogoRequest { image_b64: string; content_type: string }
 export interface PutRenderDeployAppRequest { ownerId?: string; serviceId?: string }
 export interface PutRenderDeployAppResponse { app: unknown }
@@ -1424,6 +1431,8 @@ export interface BongosClient {
     getMeAchievements(args?: RequestArgs): Promise<GetMeAchievementsResponse>;
     /** POST /me/anthropic-link — rank: any-builder */
     postMeAnthropicLink(args: RequestArgs & { body: PostMeAnthropicLinkRequest }): Promise<PostMeAnthropicLinkResponse>;
+    /** PATCH /me/checkout-freshness — rank: any-builder */
+    patchMeCheckoutFreshness(args: RequestArgs & { body: PatchMeCheckoutFreshnessRequest }): Promise<PatchMeCheckoutFreshnessResponse>;
     /** PATCH /me/core-move-seen — rank: any-builder */
     patchMeCoreMoveSeen(args: RequestArgs & { body: PatchMeCoreMoveSeenRequest }): Promise<PatchMeCoreMoveSeenResponse>;
     /** GET /me/credits — rank: any-builder */
@@ -1653,6 +1662,12 @@ export interface BongosClient {
     /** GET /pay-terms — rank: any-builder */
     getPayTerms(args?: RequestArgs): Promise<GetPayTermsResponse>;
   };
+  "payTypeGates": {
+    /** GET /pay-type-gates — rank: any-builder */
+    getPayTypeGates(args?: RequestArgs): Promise<GetPayTypeGatesResponse>;
+    /** PUT /pay-type-gates/{payType}/{requirement} — rank: archon */
+    putPayTypeGatesPayTypeRequirement(args?: RequestArgs & { body?: PutPayTypeGatesPayTypeRequirementRequest }): Promise<PutPayTypeGatesPayTypeRequirementResponse>;
+  };
   "payouts": {
     /** POST /payouts/age-records — rank: archon */
     postPayoutsAgeRecords(args: RequestArgs & { body: PostPayoutsAgeRecordsRequest }): Promise<PostPayoutsAgeRecordsResponse>;
@@ -1695,6 +1710,10 @@ export interface BongosClient {
     /** GET /project/manage-link — rank: archon */
     getProjectManageLink(args?: RequestArgs): Promise<GetProjectManageLinkResponse>;
   };
+  "projectAccount": {
+    /** GET /project-account — rank: archon */
+    getProjectAccount(args?: RequestArgs): Promise<ApiResponse>;
+  };
   "projectSettings": {
     /** GET /project-settings — rank: metic+archon */
     getProjectSettings(args?: RequestArgs): Promise<GetProjectSettingsResponse>;
@@ -2124,6 +2143,8 @@ export interface BongosClient {
     getTasksIdRecommendations(args?: RequestArgs): Promise<GetTasksIdRecommendationsResponse>;
     /** POST /tasks/{id}/ship — rank: any-builder */
     postTasksIdShip(args?: RequestArgs): Promise<PostTasksIdShipResponse>;
+    /** PATCH /tasks/{id}/short-name — rank: any-builder */
+    patchTasksIdShortName(args: RequestArgs & { body: PatchTasksIdShortNameRequest }): Promise<PatchTasksIdShortNameResponse>;
     /** DELETE /tasks/{id}/visual — rank: any-builder */
     deleteTasksIdVisual(args?: RequestArgs): Promise<DeleteTasksIdVisualResponse>;
     /** POST /tasks/{id}/visual — rank: any-builder */

package/clients/bongos-client/index.mjs

@@ -789,6 +789,8 @@ export function createClient(opts = {}) {
       getMeAchievements: (args) => request("GET", "/me/achievements", { hasBody: false }, args),
       // POST /me/anthropic-link — rank: any-builder — POST /me/anthropic-link
       postMeAnthropicLink: (args) => request("POST", "/me/anthropic-link", { hasBody: true }, args),
+      // PATCH /me/checkout-freshness — rank: any-builder — PATCH /me/checkout-freshness
+      patchMeCheckoutFreshness: (args) => request("PATCH", "/me/checkout-freshness", { hasBody: true }, args),
       // PATCH /me/core-move-seen — rank: any-builder — PATCH /me/core-move-seen
       patchMeCoreMoveSeen: (args) => request("PATCH", "/me/core-move-seen", { hasBody: true }, args),
       // GET /me/credits — rank: any-builder — GET /me/credits
@@ -1018,6 +1020,12 @@ export function createClient(opts = {}) {
       // GET /pay-terms — rank: any-builder — GET /pay-terms
       getPayTerms: (args) => request("GET", "/pay-terms", { hasBody: false }, args),
     },
+    "payTypeGates": {
+      // GET /pay-type-gates — rank: any-builder — GET /pay-type-gates
+      getPayTypeGates: (args) => request("GET", "/pay-type-gates", { hasBody: false }, args),
+      // PUT /pay-type-gates/{payType}/{requirement} — rank: archon — PUT /pay-type-gates/:payType/:requirement
+      putPayTypeGatesPayTypeRequirement: (args) => request("PUT", "/pay-type-gates/{payType}/{requirement}", { hasBody: true }, args),
+    },
     "payouts": {
       // POST /payouts/age-records — rank: archon — POST /payouts/age-records
       postPayoutsAgeRecords: (args) => request("POST", "/payouts/age-records", { hasBody: true }, args),
@@ -1060,6 +1068,10 @@ export function createClient(opts = {}) {
       // GET /project/manage-link — rank: archon — GET /project/manage-link
       getProjectManageLink: (args) => request("GET", "/project/manage-link", { hasBody: false }, args),
     },
+    "projectAccount": {
+      // GET /project-account — rank: archon — GET /project-account
+      getProjectAccount: (args) => request("GET", "/project-account", { hasBody: false }, args),
+    },
     "projectSettings": {
       // GET /project-settings — rank: metic+archon — GET /project-settings
       getProjectSettings: (args) => request("GET", "/project-settings", { hasBody: false }, args),
@@ -1489,6 +1501,8 @@ export function createClient(opts = {}) {
       getTasksIdRecommendations: (args) => request("GET", "/tasks/{id}/recommendations", { hasBody: false }, args),
       // POST /tasks/{id}/ship — rank: any-builder — POST /tasks/:id/ship
       postTasksIdShip: (args) => request("POST", "/tasks/{id}/ship", { hasBody: true }, args),
+      // PATCH /tasks/{id}/short-name — rank: any-builder — PATCH /tasks/:id/short-name
+      patchTasksIdShortName: (args) => request("PATCH", "/tasks/{id}/short-name", { hasBody: true }, args),
       // DELETE /tasks/{id}/visual — rank: any-builder — DELETE /tasks/:id/visual
       deleteTasksIdVisual: (args) => request("DELETE", "/tasks/{id}/visual", { hasBody: false }, args),
       // POST /tasks/{id}/visual — rank: any-builder — POST /tasks/:id/visual

package/docs/adr/0385-money-lives-with-a-processor-credits-stay-a-project-meter.md

@@ -73,6 +73,10 @@ The owner answered the questions left open by the payments build plan ([task 100
 - **"Verro" is Verro Labs**, the planned holding company of Cloud Bongos LLC and related entities, as now named in the EU labour row above.
 - **ADR 0054's "credits are equity" framing is formally superseded**, as recorded in ADR 0054 itself ([task 1004967](https://cloudbongos.com/builders#/task/1004967)).
 
+## Amendment, 2026-10-30: the processor is chosen
+
+[ADR 0397](0397-the-payment-rail-is-stripe-connect-with-one-connected-account-per-project.md) picks Stripe Connect (fallback J.P. Morgan Payments) and fills in the per-flow map above with a primitive for each flow. The counsel items below are unchanged. [Task 1003182](https://cloudbongos.com/builders#/task/1003182) builds the project account as decided here: an append-only record of each movement and its cause, and a read-only owner view, with no money held (see `modules/economy/project-account.js`).
+
 ## Held for counsel (these block building the money-moving tasks)
 
 1. Whether a standing signed payout rule satisfies the attributable-action requirement (Art. I).

package/docs/adr/0397-the-payment-rail-is-stripe-connect-with-one-connected-account-per-project.md

@@ -0,0 +1,71 @@
+# 0397 — The payment rail is Stripe Connect, one connected account per project; J.P. Morgan Payments is the written fallback
+
+- **Status:** Accepted for the choice of rail. Nothing is bought or opened by this record, and the counsel items below still gate every task that moves real money.
+- **Date:** 2026-10-30
+- **Deciders:** The owner chose Stripe on 2026-10-30, after the two options the legal framework names were set side by side. The fallback is the builder's recommendation, recorded because the task asks for one.
+- **Tasks:** [task 1004906](https://cloudbongos.com/builders#/task/1004906) (this decision). Unblocks the money tasks behind it in goal 1000092.
+- **Interacts with:** [ADR 0385](0385-money-lives-with-a-processor-credits-stay-a-project-meter.md) (the per-flow map and the pay-type gates this fills in), [ADR 0388](0388-a-module-sale-is-split-by-the-project-the-buyer-pays-the-platform-fee.md) (the buyer-paid fee), [ADR 0392](0392-ai-generation-runs-on-a-processor-held-balance-and-the-builders-own-keys.md) (processor-held balance for AI generation).
+
+The owner's legal framework is a confidential draft. This record cites it by Article only. It is a product constraint for building, not legal advice, and it does not answer the counsel items listed at the end.
+
+## Context
+
+[ADR 0385](0385-money-lives-with-a-processor-credits-stay-a-project-meter.md) decided that a licensed processor, never Bongos, holds all user and project money, and left the processor itself to this task. The framework names two: Stripe Connect and J.P. Morgan Payments. The task asks for the cheapest option the framework permits, a fallback, and a comparison on cost, payout speed, failure handling and who files suspicious-activity reports. Nothing here is purchased without the owner's go-ahead.
+
+## Decision
+
+**1. The rail is Stripe Connect.** Both options keep funds with a licensed institution and so both satisfy Art. II. Stripe is chosen because it is the cheaper and faster one to start: no sales process or minimum volume to open, the marketplace pieces ADR 0385 needs already exist as products (below), and a builder can be built against it with the platform's own test mode before any account is opened.
+
+**2. Account structure: one connected account per project, and one per payee.** A project's money sits in that project's own connected account, held by Stripe, not in a balance owned by Cloud Bongos. A builder or contributor who is paid gets their own connected account, onboarded through the processor's hosted flow, which is also where identity, tax details, age and sanctions screening are collected (Art. VII, X, XI). Bongos stores the processor's account and transfer identifiers and its own append-only record of each movement and its cause, and never a balance it could spend. A balance on screen is a read of the processor's figure.
+
+**3. Each ADR 0385 flow maps to a Stripe Connect primitive.** The exact product for each row is confirmed against Stripe's current documentation when its build task starts; this table names the intended primitive so a flow with none is redesigned, not custom-built.
+
+| Flow | Stripe Connect primitive |
+| --- | --- |
+| Project funding | A charge to the funder, settled into the project's connected account |
+| Balance view | A read of the connected account's balance |
+| User-to-user payment | A transfer between connected accounts, on the payer's instruction |
+| Builder payout | A transfer from the project's connected account to the builder's, under the signed rule |
+| Contractor pay (our own) | The same transfer, with Cloud Bongos acting as a project through its own connected account |
+| Cash-out | A payout from the connected account to the user's bank |
+| Module sale | A charge to the buyer with an application fee, then transfers to the seller and contributors (ADR 0388) |
+
+**4. The cheapest permitted option is Stripe's standard published pricing at account opening.** The rates are not recorded here, because they change and because opening an account is the owner's act. The build tasks must read the rate from the account, never copy a number into code. J.P. Morgan Payments is priced by negotiation, so no cheaper figure can be shown for it without a sales conversation, and none was started.
+
+**5. Fallback: J.P. Morgan Payments.** It is the framework's other named rail and suits large volumes and bank-grade requirements. It is not the start because it normally comes with an onboarding process and volume expectations that the first payouts do not meet. The fallback applies if Stripe declines or restricts the platform, if payout reach or fees stop working for the volume, or if counsel's answer to item 3 needs a structure Stripe's account types do not offer. Every money-moving task keeps its processor calls behind one module boundary so a rail change replaces one adapter, not the product.
+
+**6. Who watches for suspicious activity.** The processor is the licensed party that monitors its accounts and files any required reports on money it holds. Bongos does not file on the processor's behalf and does not claim to. Bongos's own duties, such as holding a payout when a screen flags it and telling the person, stay as ADR 0385 decision 8 and the payout-gate tasks define them. Counsel confirms this split (item 3).
+
+**7. Failure handling.** A failed or returned transfer is a recorded movement with its reason, never a silent retry or a deletion. Bongos keeps its record and the processor's record side by side and checks them daily (a later task), with an alarm on drift. A payout the processor holds or rejects is shown to the person as held, with the reason the processor gives, and nothing is re-sent on its own.
+
+## Comparison
+
+| | Stripe Connect | J.P. Morgan Payments |
+| --- | --- | --- |
+| Cost to start | Standard published rates, no minimum to open | Negotiated; typically a sales process first |
+| Payout speed | Standard payouts in days by default; faster options exist | Strong bank rails; set by the agreement |
+| Marketplace pieces (connected accounts, hosted onboarding, application fees, transfers) | Built in | Possible, with more integration work |
+| Who monitors the held money | Stripe | JPMorgan |
+| Fit for first payouts | Yes | Later, at volume |
+
+Cost and speed rows describe how the two are generally offered. They were not quoted live for this record, and the first Stripe account's actual terms win over this table.
+
+## Consequences
+
+- [task 1003182](https://cloudbongos.com/builders#/task/1003182), [task 1003183](https://cloudbongos.com/builders#/task/1003183), [task 1004907](https://cloudbongos.com/builders#/task/1004907), [task 1004910](https://cloudbongos.com/builders#/task/1004910) and [task 1004911](https://cloudbongos.com/builders#/task/1004911) now name Stripe Connect as the primitive they map to.
+- No money-moving task ships before the owner opens the account and counsel clears items 1 to 4 of ADR 0385.
+- A processor adapter module is the only place that may name Stripe. Nothing else calls it directly.
+- Test mode first. No live key is created or stored by this task.
+
+## Held for counsel (unchanged by this record)
+
+1. Whether a standing signed payout rule satisfies the attributable-action requirement (Art. I).
+2. Whether a credit-weighted pool distribution creates stored value, a security or a wage-style fee problem.
+3. Agent-of-payee versus full pass-through, which account type that implies, and the exact split of monitoring duties in decision 6.
+4. Which entity collects the fee and which is the payee's agent.
+
+## Rejected
+
+- **J.P. Morgan Payments first.** Slower and dearer to start for volumes this small; kept as the fallback.
+- **One platform-owned Stripe balance for every project.** Makes Cloud Bongos the holder of project money (Art. II).
+- **Building our own ledger of user balances.** Same custody problem, and a second source of truth that can drift from the processor's.

package/docs/adr/README.md

@@ -512,3 +512,4 @@ These 20 numbers are each shared by exactly two files. They are **accepted histo
 | 0396 | [**Google sign-in: a stand-in login, one chooser, and a CLI sign-in approved in the browser** ([task 1004993](https://cloudbongos.com/builders#/task/1004993)). A Google-only person gets `~<handle>` as the core builder login, a value no GitHub login can be, and never on the hub record; they are found by Google's own id through the hub, never an email. Every sign-in link shows Continue with GitHub / Continue with Google; the CLI sign-in is approved on this site's own page from the browser cookie. Projects cannot take a Google-only person until task 1004994.](0396-google-sign-in-a-stand-in-login-and-a-browser-approved-cli-sign-in.md) | identity / sign-in |
 | 0394 | [**Market Watch searches the web through the Messages API on the project's own key, and runs from its own clock-anchored poller** ([task 1004934](https://cloudbongos.com/builders#/task/1004934) · goal 1000137). Not the grade port: the server image has no `claude` CLI, and a measured tool-enabled run costs the same ($0.106 per item). One Sonnet 5 call per item with bounded web search and fetch, on an owner-set key in Settings (the project pays the provider; Bongos holds no money); an hourly, ledger-due, resumable poller on the daily-checks pattern, not the abandoned cron-router; capped per item before it starts and fail closed; about $4–5 per weekly 40-item run.](0394-market-watch-searches-through-the-messages-api-on-the-projects-key-and-runs-from-its-own-poller.md) | modules / economy |
 | 0395 | [**A task says what it needs, and each person's lists show only what they can do** ([task 1004950](https://cloudbongos.com/builders#/task/1004950)). `tasks.needs` ⊆ {owner, server} is its own set, not an `automation_tag` value (that one says whether work runs unattended). Capabilities are read fresh like rank: `owner` from the owner seat (founding builder fallback, the UAT reading), `server` from `builders.capability_grants`, set only by the owner. The recommend lists (claimable feed, optimizer, autonomous runner) show only tasks whose needs the viewer holds; the runner never holds owner. The claim refuses only `server` (`NEEDS_SERVER_ACCESS`, all three surfaces). Visibility elsewhere is unchanged; the board filters by need.](0395-a-task-says-what-it-needs-and-lists-show-only-what-you-can-do.md) | lifecycle / work tracking |
+| 0397 | [**The payment rail is Stripe Connect, one connected account per project; J.P. Morgan Payments is the fallback** ([task 1004906](https://cloudbongos.com/builders#/task/1004906), goal 1000092). The owner chose Stripe on 2026-10-30. Each project holds its money in its own connected account and each payee has one, so Cloud Bongos holds nothing (ADR 0385). Every flow in the ADR 0385 map is named against a Stripe primitive; a processor adapter module is the only place that names Stripe, so the fallback replaces one adapter. The processor is the party that monitors the money it holds. Test mode first; no live key is created, and counsel items 1 to 4 still gate real money.](0397-the-payment-rail-is-stripe-connect-with-one-connected-account-per-project.md) | economy / payments |