@bongos/core 1.24.23 → 1.24.24

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 659 endpoints across 111 route files.
+> **Generated from the live route files** — the route file is authoritative. 679 endpoints across 114 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust-boundary-server-enforced-permissions.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -128,6 +128,15 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | GET | `/api/bongos/backup/status` | `metic+archon` | — | any working builder may check or trigger a backup. |
 | POST | `/api/bongos/backup/trigger` | `metic+archon` | — | kicks off a fresh dump; same gate as the status read. |
 
+## `balances` (4)
+
+| Method | Path | Rank | Body | Description |
+|---|---|---|---|---|
+| POST | `/api/bongos/balances/fund-project` | `any-builder` | — | a person funds this project from their own account, on their own web session. |
+| GET | `/api/bongos/balances/me` | `any-builder` | — | the signed-in person's own balance and their own payments. |
+| POST | `/api/bongos/balances/pay` | `any-builder` | — | a person pays another member of this project from their own account. |
+| GET | `/api/bongos/balances/project` | `any-builder` | — | the project's balance figure, so a member can see whether it needs funding. |
+
 ## `blockers` (6)
 
 | Method | Path | Rank | Body | Description |
@@ -538,13 +547,17 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | PUT | `/api/bongos/market-watch/settings/key` | `metic+archon` | `key` |  |
 | DELETE | `/api/bongos/market-watch/settings/key` | `metic+archon` | — |  |
 
-## `me` (56)
+## `me` (60)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
 | GET | `/api/bongos/me` | `any-builder` | — | PMS-V2 task 188: response now also carries `unlocked` (server-joined achievement metadata) + `locked_with_progress` (server-computed huma… |
 | GET | `/api/bongos/me/achievements` | `any-builder` | — | The builder's unlocked achievements (joined to achievement metadata). |
 | POST | `/api/bongos/me/anthropic-link` | `any-builder` | `anthropic_email`, `anthropic_user_id` | V3.R10 (task 235), criterion C3 — link the authed builder's Anthropic account. |
+| GET | `/api/bongos/me/cash-outs` | `any-builder` | — | GET /api/bongos/me/cash-outs — my withdrawals and where each stands. |
+| POST | `/api/bongos/me/cash-outs` | `any-builder` | `amount_cents`, `instruction_id` | POST /api/bongos/me/cash-outs — ask to take amount_cents of my balance to my bank. |
+| POST | `/api/bongos/me/cash-outs/:id/cancel` | `any-builder` | — | POST /api/bongos/me/cash-outs/:id/cancel — withdraw one of my requests that has not been sent. |
+| POST | `/api/bongos/me/cash-outs/:id/retry` | `any-builder` | — | POST /api/bongos/me/cash-outs/:id/retry — try one of my unfinished withdrawals again. |
 | PATCH | `/api/bongos/me/checkout-freshness` | `any-builder` | `behind`, `branch`, `reason` | How far behind this builder's local project folder is (task 1005021, checkout-freshness.js). |
 | PATCH | `/api/bongos/me/core-move-seen` | `any-builder` | `id` | The core move this builder has been told about (task 1004731, core-move-seen.js): closing the hall's "Upgraded to core X" notice stores t… |
 | GET | `/api/bongos/me/credits` | `any-builder` | — | GET /me/credits — the caller's own ledger. |
@@ -708,7 +721,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | GET | `/api/bongos/pay-type-gates` | `any-builder` | — | for met/missing (the same pay information `GET /pay-terms` shows, no person's money); the evidence references and who cleared each requir… |
 | PUT | `/api/bongos/pay-type-gates/:payType/:requirement` | `archon` | `state`, `evidence_ref`, `acknowledged` | .approve (archon floor). |
 
-## `payouts` (18)
+## `payouts` (26)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -723,6 +736,13 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | GET | `/api/bongos/payouts/gates/:builderId` | `archon` | — | GET /api/bongos/payouts/gates/:builderId — may this builder be paid now, and why not. |
 | POST | `/api/bongos/payouts/grants` | `archon` | — | POST /api/bongos/payouts/grants — sign ONE equity grant. |
 | POST | `/api/bongos/payouts/guardians` | `archon` | `builder_id`, `guardian_id`, `guardian_account`, `active` | POST /api/bongos/payouts/guardians — link (or unlink) a 16-17 builder's guardian and the account the guardian controls. |
+| POST | `/api/bongos/payouts/module-sales` | `archon` | `processor_sale_ref` | POST /api/bongos/payouts/module-sales — record ONE sale the processor reports, and write every share as owed. |
+| GET | `/api/bongos/payouts/module-shares` | `archon` | — | GET /api/bongos/payouts/module-shares — every share and where it stands. |
+| POST | `/api/bongos/payouts/module-shares/:id/pay` | `archon` | `approval_id` | POST /api/bongos/payouts/module-shares/:id/pay — send ONE share under ONE approval. |
+| GET | `/api/bongos/payouts/module-shares/mine` | `any-builder` | — | GET /api/bongos/payouts/module-shares/mine — the signed-in builder's own shares. |
+| GET | `/api/bongos/payouts/module-splits/:moduleKey` | `archon` | — | GET /api/bongos/payouts/module-splits/:moduleKey — the module's split rule and the contributors' weights it would use now. |
+| POST | `/api/bongos/payouts/module-splits/:moduleKey` | `archon` | `seller_id`, `seller_bps`, `contributors_bps`, `credit_row_kinds` | POST /api/bongos/payouts/module-splits/:moduleKey — record the project's rule. |
+| POST | `/api/bongos/payouts/ndas` | `archon` | `builder_id`, `status`, `nda_version`, `reference` | POST /api/bongos/payouts/ndas — record that a builder's signed NDA is on file (or withdrawn), and where the signed copy lives. |
 | GET | `/api/bongos/payouts/rules` | `archon` | — | GET /api/bongos/payouts/rules — every standing rule with its current terms. |
 | POST | `/api/bongos/payouts/rules` | `archon` | `terms`, `note` | POST /api/bongos/payouts/rules — sign a standing payout rule. |
 | POST | `/api/bongos/payouts/rules/:id/narrow` | `archon` | `terms`, `note` | POST /api/bongos/payouts/rules/:id/narrow — tighten a rule. |
@@ -730,6 +750,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | POST | `/api/bongos/payouts/rules/:id/runs` | `archon` | `run_key`, `payouts`, `note` | POST /api/bongos/payouts/rules/:id/runs — notice a run under a rule, opening its pause window. |
 | POST | `/api/bongos/payouts/rules/:id/runs/:runKey/hold` | `archon` | `note` | POST /api/bongos/payouts/rules/:id/runs/:runKey/hold — a person stops a run in its pause window. |
 | POST | `/api/bongos/payouts/screenings` | `archon` | `builder_id`, `result`, `reference`, `valid_days` | POST /api/bongos/payouts/screenings — record a sanctions screening a person ran. |
+| POST | `/api/bongos/payouts/tax-details` | `archon` | `builder_id`, `status`, `reference` | POST /api/bongos/payouts/tax-details — record that the processor's onboarding has (or has not) collected a builder's identity and tax det… |
 
 ## `profiles` (1)
 
@@ -743,17 +764,21 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 |---|---|---|---|---|
 | GET | `/api/bongos/project/manage-link` | `archon` | — | GET /project/manage-link — the hub's page for THIS project, where its owner takes it offline or disconnects it (task 1004570). |
 
-## `project-account` (1)
+## `project-account` (3)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
 | GET | `/api/bongos/project-account` | `archon` | — | .approve (archon floor) — the owner. |
+| GET | `/api/bongos/project-account/ledger-checks` | `archon` | — | GET /project-account/ledger-checks?limit=10 — the daily check of our record against the processor's (task 1004912, ADR 0397 D7): each che… |
+| GET | `/api/bongos/project-account/outflow` | `archon` | — | GET /project-account/outflow?months=12 — where the money went (task 1003184, criterion money-outflow-visible): spend and money out per mo… |
 
-## `project-settings` (8)
+## `project-settings` (10)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
 | GET | `/api/bongos/project-settings` | `metic+archon` | — | GET /project-settings — all five rows in ONE read. |
+| GET | `/api/bongos/project-settings/funding-wall` | `any-builder` | — |  |
+| PATCH | `/api/bongos/project-settings/funding-wall` | `metic+archon` | `mode` | PATCH /project-settings/funding-wall — body { mode: 'hold_at_claim' \| 'refuse_at_completion' \| 'carry_on' }. |
 | PATCH | `/api/bongos/project-settings/pay-terms` | `metic+archon` | `terms` | PATCH /project-settings/pay-terms — body { terms: [{ pay_type, amount?, unit?, note? }] } (task 1004990; ADR 0385 decision 3 and the owne… |
 | PATCH | `/api/bongos/project-settings/rot-days` | `metic+archon` | `days` | PATCH /project-settings/rot-days — body { days }. |
 | GET | `/api/bongos/project-settings/ship-mode` | `any-builder` | — | GET /project-settings/ship-mode — the ship mode alone, for the CLI and the AI. |

package/docs/architecture.md

@@ -306,6 +306,16 @@ payout_guardian_cosigns(id, builder_id, guardian_id, approval_id | rule_id+run_k
               -- ALL APPEND-ONLY by trigger; latest row wins. Triggers also refuse an appeal
               -- by anyone but the frozen person, a decision by them, anything after a lift,
               -- and a co-signature by anyone but the current guardian.
+payout_ndas(id, builder_id, status on_file|withdrawn, nda_version, reference,
+              recorded_by, recorded_at)                       -- core_291, task 1004908
+payout_tax_details(id, builder_id, status collected|incomplete, collected_by processor:*|person:*,
+              reference, recorded_by, recorded_at)            -- core_291, task 1004908
+              -- contractor papers: no payout until an NDA is on file and the processor's
+              -- onboarding has collected tax details (holds nda_missing / tax_details_missing).
+              -- Records THAT they exist, never their contents: no NDA text, no tax-id
+              -- column, and a reference shaped like a tax id is refused. Neither row may
+              -- be recorded by the person it is about. Approver routes:
+              -- POST /payouts/ndas, POST /payouts/tax-details (payout.approve + web session).
 ```
 
 Builder payouts (migration `core_290`, task 1003183, [ADR 0397](adr/0397-the-payment-rail-is-stripe-connect-with-one-connected-account-per-project.md) D7 — a builder is paid for a task exactly once; `src/bongos/builder-payouts.js`, routes `GET`/`POST /payouts/builder-payouts` gated `payout.approve` plus the person's own web session for the POST; the `payout` movement is booked through the economy module's `economy.account` port in the same transaction. No processor adapter exists yet, so every payout is recorded owed and held `no_processor`):
@@ -323,6 +333,38 @@ builder_payout_attempts(id, owed_id FK, outcome sent|failed|held, processor_ref,
               -- unknown outcome gets the same transfer back.
 ```
 
+The funding wall (task 1003185, [ADR 0386](adr/0386-the-funding-wall-is-a-per-project-rule-claim-time-hold-by-default.md) — no new table): the project's rule is `project_settings['funding.wall']` (`hold_at_claim` default · `refuse_at_completion` · `carry_on`); a held task's cash pay is a `hold` row in `economy_project_account_movements`, counted only while its task is `active`/`completed`/`confirmed` and closed by a `hold_release` row at the next claim or resolve. Only cash pay terms are walled. `modules/lifecycle/funding-wall.js`; routes `GET`/`PATCH /project-settings/funding-wall`.
+
+User balances and fee-free transfers (migration `economy_003`, task 1004907, ADR 0397 D2/D3 — a balance is the processor's figure, never a sum of these rows; `modules/economy/user-balances.js`, routes `GET /balances/me`, `GET /balances/project`, `POST /balances/fund-project`, `POST /balances/pay`, the POSTs on the person's own web session. Isolation is per project database: every account a transfer names is read from this project's table, and a link needs this project's processor to confirm it opened the account. No adapter yet, so instructions are recorded and held `no_processor`):
+
+```
+economy_member_accounts(id, builder_id FK, processor_account UNIQUE, linked_by FK, created_at)
+              -- one account, one person; the latest row per builder is their account.
+economy_user_transfers(id, kind fund_project|pay_user, from_builder_id FK, to_builder_id FK NULL,
+              from_account, to_account, amount_cents, currency='USD', platform_fee_cents=0,
+              instruction_id, note, created_at)
+              -- UNIQUE (from_builder_id, instruction_id); fee CHECKed to 0; no self-payment.
+economy_user_transfer_attempts(id, transfer_id FK, outcome sent|failed|held, processor_ref, reason, created_at)
+              -- at most one `sent`; ALL THREE APPEND-ONLY by trigger. Idempotency key
+              -- `bongos-user-transfer-<id>`; a sent funding also books a project-account `funding` row.
+```
+
+Module-sale payouts (migrations `core_292` + `economy_004`, task 1004910, [ADR 0388](adr/0388-a-module-sale-is-split-by-the-project-the-buyer-pays-the-platform-fee.md) — a module sale is split by the project's own rule and each share is paid exactly once; `src/bongos/module-payouts.js`, routes `/payouts/module-splits/:moduleKey`, `/payouts/module-sales`, `/payouts/module-shares` (+ `/mine`, `/:id/pay`) gated `payout.approve` plus the person's own web session for every write, except `/mine`, which any builder reads for their own shares). Tables `module_split_rules`, `module_sales`, `module_sale_shares_owed`, `module_share_approvals`, `module_share_attempts`, all append-only; one approval pays one thing across task payouts and shares (a trigger on each side, serialised by a per-approval transaction lock). The contributors' weight read is index-served: `idx_tasks_shipped_module`, `idx_session_records_task_ids` (GIN), `idx_credit_log_session`, plus `idx_credit_log_task` (core_189). Nothing moves until the lifecycle's `module_share` pay-type gate (standard licence, takedown contact, payee onboarding) is cleared, read through the `lifecycle.payTypeGates` port. A share's `payout` movement names `module_share_id` instead of a task. No processor adapter exists yet, so no sale can be read and every share is held `no_processor`.
+Cash-out (migration `core_293`, task 1004911, ADR 0397 D2/D7 — a person withdraws their own processor-held balance to their bank; Bongos holds none of it. `src/bongos/cash-outs.js`, routes `GET`/`POST /me/cash-outs`, `POST /me/cash-outs/:id/retry`, `POST /me/cash-outs/:id/cancel`, own-scoped, every POST on the person's own web session. Each withdrawal is the person's own logged `cashout_approved` row in `payout_approvals` (approver = recipient, by CHECK) and passes the N10 gates again at send time; minimum $10. The account it pays from is read through the `economy.account` port's `memberAccount`. No adapter yet, so every withdrawal is recorded and held `no_processor`):
+
+```
+cash_outs(id, builder_id FK, approval_id FK payout_approvals UNIQUE, from_account, amount_cents,
+              currency, instruction_id, created_at)
+              -- UNIQUE (builder_id, instruction_id); a trigger refuses any approval but the person's
+              -- own cashout_approved for exactly this amount.
+cash_out_attempts(id, cash_out_id FK, try_no, outcome held|failed|refused|sent|paid|returned|cancelled,
+              processor_ref, reason, actor_id, created_at)
+              -- BOTH APPEND-ONLY. Key `bongos-cashout-<id>-<try>`; the trigger computes <try> as
+              -- 1 + refused/returned tries, so a timeout (`failed`) retries on the SAME key and
+              -- only a definite no or a bank return gets a new one; while a try is sent, only
+              -- paid/returned may follow; nothing follows a cancel.
+```
+
 Store sub-categories (migration `core_280`, task 1004355, [ADR 0342](adr/0342-module-categories-are-eight-parents-with-approved-sub-categories.md) D3 — an author proposes one at publish, a Metic+ person approves, renames or merges it; `src/bongos/module-subcategories.js`):
 
 ```

package/docs/copy-inventory.md

@@ -4,13 +4,13 @@
 > Deterministic on a given tree — regenerate and commit rather than hand-editing.
 > Machine-readable twin: [`copy-registry.json`](copy-registry.json).
 
-**3282 strings** across 3 surfaces · 2598 distinct pieces of copy · 3282 certain, 0 heuristic · 276 shown in more than one place.
+**3292 strings** across 3 surfaces · 2608 distinct pieces of copy · 3292 certain, 0 heuristic · 276 shown in more than one place.
 
 ## Surfaces
 
 | surface | lives at | files | strings |
 |---|---|---|---|
-| `builders-hall` | `modules/hall-ui/public` | 172 | 2169 |
+| `builders-hall` | `modules/hall-ui/public` | 172 | 2179 |
 | `status-dashboard` | `modules/status-ui/public` | 4 | 91 |
 | `landing` | `modules/public-landing/public` | 10 | 1022 |
 
@@ -78,7 +78,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `72a29648399b` | 4x | Tweak a page | modules/hall-ui/public/tweak-editor.html:32, modules/hall-ui/public/tweak-editor.html:32, modules/hall-ui/public/tweak-editor.html:55 |
 | … | | _236 more in the JSON registry_ | |
 
-## `builders-hall` — 2169 strings
+## `builders-hall` — 2179 strings
 
 | id | conf | text | where |
 |---|---|---|---|
@@ -283,6 +283,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `46b33550d52b` | certain | Bulk claim | `modules/hall-ui/public/work.html:164` |
 | `6d6d626fc518` | certain | Bulk release | `modules/hall-ui/public/goals.html:186` |
 | `6d6d626fc518` | certain | Bulk release | `modules/hall-ui/public/work.html:165` |
+| `fa9356114e6b` | certain | By builder | `modules/hall-ui/public/project-settings.js:493` |
 | `181cfa50b127` | certain | By the numbers | `modules/hall-ui/public/profile.html:64` |
 | `a015a43bfc7f` | certain | CLI access | `modules/hall-ui/public/settings.html:166` |
 | `09e863eb90af` | certain | Can: {…} | `modules/hall-ui/public/government.js:911` |
@@ -479,7 +480,8 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `e91a4d2e3e1c` | certain | Created rank {…}. | `modules/hall-ui/public/government.js:480` |
 | `a55e423263f0` | certain | Cross-project record | `modules/hall-ui/public/profile.html:98` |
 | `24013a074724` | certain | Custom rank | `modules/hall-ui/public/government.html:111` |
-| `13b22e48d9fb` | certain | Danger zone | `modules/hall-ui/public/project-settings.html:56` |
+| `f6c83d014e49` | certain | Daily check against the payment processor | `modules/hall-ui/public/project-settings.js:537` |
+| `13b22e48d9fb` | certain | Danger zone | `modules/hall-ui/public/project-settings.html:69` |
 | `cf7d7d5d5e83` | certain | Database behind. | `modules/hall-ui/public/deploy.js:599` |
 | `6744aed3d15e` | certain | Dated exploit-detail engagement reports — kept out of the repo (threat-model §6.3) and served only to Archons. | `modules/hall-ui/public/watch.html:132` |
 | `d388906f550b` | certain | Declared files overlap: {…} (advisory) | `modules/hall-ui/public/task-lib.js:69` |
@@ -493,7 +495,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `0a4fe7150971` | certain | Develop this idea | `modules/hall-ui/public/ideas.js:921` |
 | `11b8266d6aab` | certain | Developing a Big Idea Spark | `modules/hall-ui/public/ideas.html:164` |
 | `65322ac89221` | certain | Discard draft | `modules/hall-ui/public/ideas.html:197` |
-| `d3efd513694b` | certain | Disconnect from Bongos entirely | `modules/hall-ui/public/project-settings.html:60` |
+| `d3efd513694b` | certain | Disconnect from Bongos entirely | `modules/hall-ui/public/project-settings.html:73` |
 | `0f685daf1bd5` | certain | Discord connected ✓ | `modules/hall-ui/public/settings.js:720` |
 | `d8017b5ca98f` | certain | Discord unlinked. | `modules/hall-ui/public/settings.js:739` |
 | `f3e09453374f` | certain | Dismissed — looked at, leaving it as it is | `modules/hall-ui/public/copy-desk.html:123` |
@@ -512,6 +514,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `39f897eaff3c` | certain | Drop sketches, pictures or a PDF here, paste a picture, | `modules/hall-ui/public/ai-studio.js:180` |
 | `67f09099c2d3` | certain | Duplicate — should be said once, in one place | `modules/hall-ui/public/copy-desk.html:93` |
 | `1de61111bc00` | certain | Each builder's runner | `modules/hall-ui/public/gate.js:406` |
+| `1f3b826a05d4` | certain | Each month is recorded spend ({…} over these {…} months) plus payouts and fees out of the project account. Rea | `modules/hall-ui/public/project-settings.js:513` |
 | `3a6916fa79d4` | certain | Each one links back to this page. | `modules/hall-ui/public/lightbulb.js:103` |
 | `2bd1c7fb3955` | certain | Each rank opens more of the system. Yours and the one above are shown in full; the rest open as you get closer | `modules/hall-ui/public/ranks.html:50` |
 | `7f1b1c32d360` | certain | Each slash-command can run on a different model. The system has a default for every skill; choose another to o | `modules/hall-ui/public/settings.html:414` |
@@ -748,6 +751,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `9be8b839eff8` | certain | Last 7 days | `modules/hall-ui/public/hall-widgets.js:170` |
 | `59f0bc78a28f` | certain | Last 90 days | `modules/hall-ui/public/hall-widgets.js:171` |
 | `13bae4dfb28e` | certain | Last claimed by | `modules/hall-ui/public/task.js:683` |
+| `165c5f26ef60` | certain | Last try | `modules/hall-ui/public/project-settings.js:477` |
 | `9e8828d602bc` | certain | Lay your thoughts over the project map. | `modules/hall-ui/public/goal-map.html:75` |
 | `0f467c1359d7` | certain | Leaderboard place | `modules/hall-ui/public/hall-render.js:626` |
 | `7c9b7a89353b` | certain | Leave goal | `modules/hall-ui/public/goals-render.js:961` |
@@ -847,6 +851,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `9af4b7a3a36f` | certain | Module truth | `modules/hall-ui/public/atlas.html:46` |
 | `319e9db996ea` | certain | Modules — {{worldName}} | `modules/hall-ui/public/modules.html:6` |
 | `319e9db996ea` | certain | Modules — {{worldName}} | `modules/hall-ui/public/modules.html:6` |
+| `8a30ab62ad1d` | certain | Money out, by month | `modules/hall-ui/public/project-settings.js:513` |
 | `3f12fb7c0f79` | certain | Monthly tweak rounds: {…} for the project. | `modules/hall-ui/public/project-settings.js:316` |
 | `e8aa008d01a7` | certain | More detail (optional) | `modules/hall-ui/public/blockers.js:319` |
 | `9dacaf382dc8` | certain | More ways to open the page | `modules/hall-ui/public/tweak-editor.html:59` |
@@ -1061,6 +1066,8 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `d89d1923ecf9` | certain | Over the last {…} days | `modules/hall-ui/public/watch.js:1287` |
 | `695ffff13730` | certain | Over time | `modules/hall-ui/public/profile.html:76` |
 | `5ded44da0cc5` | certain | Override requests | `modules/hall-ui/public/watch.html:137` |
+| `eae3165eaaa0` | certain | Owed but not paid | `modules/hall-ui/public/project-settings.js:477` |
+| `0ba40083f03e` | certain | Owed since | `modules/hall-ui/public/project-settings.js:477` |
 | `0e7cdd7b472c` | certain | Owner only | `modules/hall-ui/public/market-watch-settings.html:31` |
 | `0046e08db06a` | certain | Owner’s bill / month (est.) | `modules/hall-ui/public/fleet-costs.js:71` |
 | `15a49bf15007` | certain | Page {…} of {…} | `modules/hall-ui/public/hall-kit.js:110` |
@@ -1344,6 +1351,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `490f4bbbc75b` | certain | Sounds are switched off for now. Nothing plays when a task ships, when {{currency}} arrive, or when Claude fin | `modules/hall-ui/public/settings.html:435` |
 | `d03aa6752970` | certain | Specialities this project recommends. Nothing here is switched on — read what each one adds to your sessions,  | `modules/hall-ui/public/settings-specialities.js:384` |
 | `01f1d2b03eb4` | certain | Speciality created. | `modules/hall-ui/public/settings-specialities.js:554` |
+| `a553a7f1f108` | certain | Spent is the recorded cost of each builder’s sessions (API, compute). Paid, owed and approved are payouts. | `modules/hall-ui/public/project-settings.js:502` |
 | `ccca0c49fdc4` | certain | Splitting into ideas… | `modules/hall-ui/public/lightbulb.js:146` |
 | `aee9d47c6b99` | certain | Splitting your feedback into ideas… | `modules/hall-ui/public/page-notes.js:275` |
 | `f2a4d855d82d` | certain | Stale claims | `modules/hall-ui/public/watch.html:49` |
@@ -1378,7 +1386,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `59fcf7f5ac27` | certain | Switch to light mode | `modules/hall-ui/public/street.html:95` |
 | `93fa2e97dd35` | certain | System default for this skill | `modules/hall-ui/public/settings.js:72` |
 | `94d60e9e56e6` | certain | Take it | `modules/hall-ui/public/ai-studio.js:180` |
-| `da9da6e866bd` | certain | Take it offline | `modules/hall-ui/public/project-settings.html:59` |
+| `da9da6e866bd` | certain | Take it offline | `modules/hall-ui/public/project-settings.html:72` |
 | `aa8da34fe237` | certain | Take the next page, or pick one from the studio. | `modules/hall-ui/public/tweak-editor.js:576` |
 | `fc53e250e86f` | certain | Take this page | `modules/hall-ui/public/paintbrush.js:116` |
 | `8b3cdb88b0f4` | certain | Taken out of the store. Your copy keeps working, but it will get no more updates. | `modules/hall-ui/public/modules.js:134` |
@@ -1655,6 +1663,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `e179870922a3` | certain | What the session did, derived from its own transcript: whether it wrote files, used tools, and how many prompt | `modules/hall-ui/public/sessions.html:72` |
 | `868cf4bbe616` | certain | What the start-it markers mean | `modules/hall-ui/public/commands.html:32` |
 | `5a58392783fd` | certain | What this brings in | `modules/hall-ui/public/deploy.js:558` |
+| `b857cc458c6f` | certain | What this project has spent, what each builder has been paid, and what it has promised but not paid yet. A bal | `modules/hall-ui/public/project-settings.html:58` |
 | `32d675a2b022` | certain | What this rank is for (optional) | `modules/hall-ui/public/government.html:88` |
 | `04b3ff4c4f4c` | certain | What users can see | `modules/hall-ui/public/deploy.html:49` |
 | `db435ff49441` | certain | What will be true when it is done | `modules/hall-ui/public/goal-author.js:38` |
@@ -1674,6 +1683,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `ec1a438eee3f` | certain | Where each comes from and where each goes. {{Currency}} = credits; karma is a separate peer-trust signal, not  | `modules/hall-ui/public/diagrams.html:65` |
 | `c44892e8870d` | certain | Where it went | `modules/hall-ui/public/drachmae.js:218` |
 | `5999540bb2da` | certain | Where the asks stand | `modules/hall-ui/public/collab.html:43` |
+| `197969e4126a` | certain | Where the money went | `modules/hall-ui/public/project-settings.html:57` |
 | `4052378c3e04` | certain | Where the words stand | `modules/hall-ui/public/copy-desk.html:38` |
 | `158499e38ceb` | certain | Where you stand | `modules/hall-ui/public/ranks.html:30` |
 | `efdd4f022cf0` | certain | Where your pages are | `modules/hall-ui/public/studio.js:777` |
@@ -2202,7 +2212,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `a6ae9cbdee30` | certain | — all builders — | `modules/hall-ui/public/builders.js:698` |
 | `729d4ce22b99` | certain | — any — | `modules/hall-ui/public/hall-widgets.js:173` |
 | `d2c30a1ee74e` | certain | — decide — | `modules/hall-ui/public/goals-render.js:1000` |
-| `d9ad3ee37a88` | certain | — erases the project’s server, its database and every backup, and releases its name and web address. Your repo | `modules/hall-ui/public/project-settings.html:60` |
+| `d9ad3ee37a88` | certain | — erases the project’s server, its database and every backup, and releases its name and web address. Your repo | `modules/hall-ui/public/project-settings.html:73` |
 | `e31a588bb9e1` | certain | — moved {…}, and the box confirmed it. | `modules/hall-ui/public/deploy.js:400` |
 | `417adabd1a00` | certain | — no goal suggested — open the goal board and pick one — | `modules/hall-ui/public/task-detail.js:410` |
 | `1f9504667df5` | certain | — none — | `modules/hall-ui/public/goal-author.js:38` |
@@ -2210,7 +2220,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `b1ca53ebfc10` | certain | — pick a goal — | `modules/hall-ui/public/goal-author.js:38` |
 | `b1ca53ebfc10` | certain | — pick a goal — | `modules/hall-ui/public/goal-author.js:112` |
 | `825930577f01` | certain | — pick a version — | `modules/hall-ui/public/goal-author.js:125` |
-| `61ebc5d684fd` | certain | — stops the project and its nightly backups but keeps everything: its database, its backups and your repositor | `modules/hall-ui/public/project-settings.html:59` |
+| `61ebc5d684fd` | certain | — stops the project and its nightly backups but keeps everything: its database, its backups and your repositor | `modules/hall-ui/public/project-settings.html:72` |
 | `e5c5e94152b3` | certain | — that's all the tooling you need up front. | `modules/hall-ui/public/hall-render.js:841` |
 | `85f1dd2ee732` | certain | — the whole project | `modules/hall-ui/public/goal-map.html:69` |
 | `ff7514f48a7b` | certain | — untouched {…}+ days | `modules/hall-ui/public/goal-inbox.js:479` |

package/docs/copy-registry.json

@@ -3,9 +3,9 @@
   "generator": "scripts/bongos/copy-inventory.js",
   "goal": 1000074,
   "counts": {
-    "strings": 3282,
-    "unique_ids": 2598,
-    "certain": 3282,
+    "strings": 3292,
+    "unique_ids": 2608,
+    "certain": 3292,
     "heuristic": 0,
     "duplicate_ids": 276
   },
@@ -13,7 +13,7 @@
     "builders-hall": {
       "at": "modules/hall-ui/public",
       "files": 172,
-      "strings": 2169
+      "strings": 2179
     },
     "status-dashboard": {
       "at": "modules/status-ui/public",
@@ -5017,6 +5017,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "fa9356114e6b",
+      "surface": "builders-hall",
+      "text": "By builder",
+      "file": "modules/hall-ui/public/project-settings.js",
+      "line": 493,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "181cfa50b127",
       "surface": "builders-hall",
@@ -6781,12 +6790,21 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "f6c83d014e49",
+      "surface": "builders-hall",
+      "text": "Daily check against the payment processor",
+      "file": "modules/hall-ui/public/project-settings.js",
+      "line": 537,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "13b22e48d9fb",
       "surface": "builders-hall",
       "text": "Danger zone",
       "file": "modules/hall-ui/public/project-settings.html",
-      "line": 56,
+      "line": 69,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -6912,7 +6930,7 @@
       "surface": "builders-hall",
       "text": "Disconnect from Bongos entirely",
       "file": "modules/hall-ui/public/project-settings.html",
-      "line": 60,
+      "line": 73,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -7078,6 +7096,15 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "1f3b826a05d4",
+      "surface": "builders-hall",
+      "text": "Each month is recorded spend ({…} over these {…} months) plus payouts and fees out of the project account. Read from the cost log and the account’s own record.",
+      "file": "modules/hall-ui/public/project-settings.js",
+      "line": 513,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "3a6916fa79d4",
       "surface": "builders-hall",
@@ -9202,6 +9229,15 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "165c5f26ef60",
+      "surface": "builders-hall",
+      "text": "Last try",
+      "file": "modules/hall-ui/public/project-settings.js",
+      "line": 477,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "9e8828d602bc",
       "surface": "builders-hall",
@@ -10093,6 +10129,15 @@
       "origin": "html-title",
       "confidence": "certain"
     },
+    {
+      "id": "8a30ab62ad1d",
+      "surface": "builders-hall",
+      "text": "Money out, by month",
+      "file": "modules/hall-ui/public/project-settings.js",
+      "line": 513,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "3f12fb7c0f79",
       "surface": "builders-hall",
@@ -12019,6 +12064,24 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "eae3165eaaa0",
+      "surface": "builders-hall",
+      "text": "Owed but not paid",
+      "file": "modules/hall-ui/public/project-settings.js",
+      "line": 477,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
+    {
+      "id": "0ba40083f03e",
+      "surface": "builders-hall",
+      "text": "Owed since",
+      "file": "modules/hall-ui/public/project-settings.js",
+      "line": 477,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "0e7cdd7b472c",
       "surface": "builders-hall",
@@ -14566,6 +14629,15 @@
       "origin": "js-notice",
       "confidence": "certain"
     },
+    {
+      "id": "a553a7f1f108",
+      "surface": "builders-hall",
+      "text": "Spent is the recorded cost of each builder’s sessions (API, compute). Paid, owed and approved are payouts.",
+      "file": "modules/hall-ui/public/project-settings.js",
+      "line": 502,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "ccca0c49fdc4",
       "surface": "builders-hall",
@@ -14877,7 +14949,7 @@
       "surface": "builders-hall",
       "text": "Take it offline",
       "file": "modules/hall-ui/public/project-settings.html",
-      "line": 59,
+      "line": 72,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -17365,6 +17437,15 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "b857cc458c6f",
+      "surface": "builders-hall",
+      "text": "What this project has spent, what each builder has been paid, and what it has promised but not paid yet. A balance only means something after those promises.",
+      "file": "modules/hall-ui/public/project-settings.html",
+      "line": 58,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "32d675a2b022",
       "surface": "builders-hall",
@@ -17536,6 +17617,15 @@
       "origin": "html-attr:aria-label",
       "confidence": "certain"
     },
+    {
+      "id": "197969e4126a",
+      "surface": "builders-hall",
+      "text": "Where the money went",
+      "file": "modules/hall-ui/public/project-settings.html",
+      "line": 57,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "4052378c3e04",
       "surface": "builders-hall",
@@ -22293,7 +22383,7 @@
       "surface": "builders-hall",
       "text": "— erases the project’s server, its database and every backup, and releases its name and web address. Your repository on GitHub is kept. This cannot be undone.",
       "file": "modules/hall-ui/public/project-settings.html",
-      "line": 60,
+      "line": 73,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -22365,7 +22455,7 @@
       "surface": "builders-hall",
       "text": "— stops the project and its nightly backups but keeps everything: its database, its backups and your repository on GitHub. You can bring it back.",
       "file": "modules/hall-ui/public/project-settings.html",
-      "line": 59,
+      "line": 72,
       "origin": "html-text",
       "confidence": "certain"
     },

package/docs/module-api-changelog.md

@@ -3302,5 +3302,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.24.21 with no explicit bump. run 41366737579. (task 1002620)
   1.24.23 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.24.22 with no explicit bump. run 41370306880. (task 1002620)
+  1.24.24 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.24.23 with no explicit bump. run 41558735984. (task 1002620)
 ---------------------------------------------------------------------------
 ```