@bongos/core 1.24.57 → 1.24.58

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/bongos/package-core.js",
-  "core_version": "1.24.57",
-  "core_contract": "1.24.57",
-  "source_commit": "44d3648a8e5f49130f5b03eae054a58469a673b6",
+  "core_version": "1.24.58",
+  "core_contract": "1.24.58",
+  "source_commit": "5d0373a2fc9f96cfacd4488757826a5ebd6942b4",
   "source_ref": "HEAD",
-  "built_at": "2026-11-07T14:00:36.333Z",
+  "built_at": "2026-11-07T14:15:06.231Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
-    "docs_redacted": 637,
+    "docs_redacted": 638,
     "agent_docs_stubbed": 32,
-    "functional_verbatim": 3899,
+    "functional_verbatim": 3897,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 4569,
-  "tree_sha256": "adb31b4e84d4eec610bda1bf4acabaea7bec731c264105eea81c5fbeb9a20728",
+  "file_count": 4568,
+  "tree_sha256": "e12981ebf9b882c4a0e83b648d1b5319525ddb38ab10765143743eef0b9a1f2e",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -332,12 +332,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "3d9e7c4316d2a75319841e91a44387572d56bdb3505ca41d4df90ff774630a18"
+      "sha256": "6669b8bc0f8302da25638519d1dd8d139260c0132c7a5a16747d63cd21d3383d"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "d02a6a7a648171ad94ddb29a834abd73c94c4fd5290d5ce3d7940fb3d26f42b2"
+      "sha256": "41d196d2203252be03a416fb271a9d88a61615e0a1d9babad0802e7e85151b44"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -347,17 +347,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "d4f9375867374bcbd59e6f5ef9fd1907c4477551e956c068f66634df7ba548c3"
+      "sha256": "5b76a04d9fba93c2900a1484cf997825804c4708c43228a6dbc541d3ea2c82f2"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "39b24313ade8715e6f52da5ce30c8e895a0e9745cd3a31a562a1f942f24325b3"
+      "sha256": "77166efc6944d67f1ffe5b2bc9202ab72ae8331acdf341dffebe4cb034abe56d"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "a358b48c56cb5c5781a377a0f6e18e99341889591af420c608d0d44c05897188"
+      "sha256": "25a84c2dfa874511575d8aca0f9102fb7c63c3e9ad7195907bd63f7d24e6a112"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -2449,20 +2449,25 @@
       "mode": "0000644",
       "sha256": "286df23c58b4d03f62b0ce1bca17bd15b1fc41a145d6493fb26a74d099a16ea3"
     },
+    {
+      "path": "docs/adr/0398-every-hosted-project-takes-its-own-update-and-nobody-asks-for-one.md",
+      "mode": "0000644",
+      "sha256": "72c24b0e5d9afcbb2c4dff2f359f79e086f49f38b6b8727456b7e4734002cec5"
+    },
     {
       "path": "docs/adr/README.md",
       "mode": "0000644",
-      "sha256": "bd34b72731c3b8bacb6c59813757a4d01316c7de452a0d2fe9e1e54eac2fc5d5"
+      "sha256": "c960c4d3ebb30bd8bdc870eb5da41f57d3d7bbb6ba176f012452a75b7efdb525"
     },
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "2c2d020cde1de1f5b147fa795c71be735154e0278f4738005a566e22d1b5f297"
+      "sha256": "349d9ab67b126f0415285109bc80ee0099ef8aa5ca435a28b14f361ff8671282"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "1b043058b84436b47e60a2bb45c9c7fe8e6fcabd5a8cdb42ae79ceca288b3eca"
+      "sha256": "eef94b4f6e03a937b12238548480a9a9b86d4703e43c9488c58dda8deb3b0fe7"
     },
     {
       "path": "docs/architecture.md",
@@ -2487,12 +2492,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "af7d920dba1f214de7425d23dc0e43656a1e00b9c035c8af8ad51721df985c21"
+      "sha256": "9f6c2622a044bc47c67ce6e1555af9a956f4189c2057ee80ba969744cd194aed"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "54dc89911c3e57510b3b2657bcb963322fa527a8b1409f162e266bb63aa87fcf"
+      "sha256": "1503133709b601acaf90536389f65a6ba32725867e79ad210432538c641382e7"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -3002,7 +3007,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "780027478174931510aba4ef73db541e20a10227b036f5edff87c43b3d2f47f6"
+      "sha256": "51ac2ca6bc7322d551ec3374877f213009191c23df9f967f5a7b0996a17fb7d3"
     },
     {
       "path": "docs/modules-contract.md",
@@ -3092,7 +3097,7 @@
     {
       "path": "docs/page-readings.json",
       "mode": "0000644",
-      "sha256": "16d2b36b149e3039f994b893e77b643d3041343144c8a147237451affac5dfaf"
+      "sha256": "73b2e41788d1a41b8ccc2bdda733cf9cd136aeb44b7b5f972184dc807ff4e5a2"
     },
     {
       "path": "docs/project-context.template.md",
@@ -6267,7 +6272,7 @@
     {
       "path": "modules/hall-ui/public/deploy-handoff.js",
       "mode": "0000644",
-      "sha256": "73e7166e9ea4b74a92ceb0947f7d569ae3e98b0ad4c45e8374e84c0c56b39920"
+      "sha256": "250b9e36ae9d5d0db02d7c9aaed94859c506e7c6a6180c9c799332b7416cc4f7"
     },
     {
       "path": "modules/hall-ui/public/deploy.html",
@@ -6277,7 +6282,7 @@
     {
       "path": "modules/hall-ui/public/deploy.js",
       "mode": "0000644",
-      "sha256": "364fd448908b79585442874aa2afd78c726fa0802e9ae0d3a222f0876074b7a5"
+      "sha256": "5c86121ff03d82c4052976b7add9b5248d20123753fd0ddb333709fec712aa29"
     },
     {
       "path": "modules/hall-ui/public/deploy.states.json",
@@ -7002,7 +7007,7 @@
     {
       "path": "modules/hall-ui/public/settings-software-update.js",
       "mode": "0000644",
-      "sha256": "0cb803a2b4efcfc002da554d92b5df7cd01b0c158f49cf1b83fa28079d2f6fc1"
+      "sha256": "b075408f41ba786800ce0a21b6aae1ebe3e43119be1a208d5305784ba23803d4"
     },
     {
       "path": "modules/hall-ui/public/settings-usage-reports.js",
@@ -7282,7 +7287,7 @@
     {
       "path": "modules/hall-ui/public/update-pill.js",
       "mode": "0000644",
-      "sha256": "c80e8e99e48c15a06085ef6643844c8aadc9b7ef511e3b00a1416379896fe6a8"
+      "sha256": "62c03b8e1ac7b5597888c89395a5a6c763978db7a31ea585d00c0e1e04d1bfcb"
     },
     {
       "path": "modules/hall-ui/public/vote-control.js",
@@ -11892,12 +11897,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "37727eb36eab08c102913443e700669b003d0df27b2f9fcc092812ad49f63d65"
+      "sha256": "ff15a28e3b58b826fdf033ea0320275c687447782431dfe1e0932d36731af282"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "62583c855b89326986ebc92dbc8c8747539c95544cdc1520156db7be2b42674a"
+      "sha256": "8e6ce0901458e4035f4387b5bccff0893029342324492322e44f00a5be1689db"
     },
     {
       "path": "public-docs/index.html",
@@ -11917,7 +11922,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "32c9fa02b48190ec780fcb6b24fca04cbb96a1d31c48256dface2f8d9c57ab22"
+      "sha256": "6fc3843a52303a6b7759157432db6166ef692a9d5fba2b51cb2d078788caa3f1"
     },
     {
       "path": "scripts/bongos/CLAUDE.md",
@@ -12952,7 +12957,7 @@
     {
       "path": "scripts/bongos/provision-core-upgrade.js",
       "mode": "0000644",
-      "sha256": "d521f1e393198df1fa840321629cd012e6c8a7c8d8d68515b5ef6ccd0a512349"
+      "sha256": "0b20f0ffe3c099475edda3db0ef2fb25cc8f1ec8b213428942c393e0b5c9d565"
     },
     {
       "path": "scripts/bongos/provision-disconnect.js",
@@ -13012,7 +13017,7 @@
     {
       "path": "scripts/bongos/provision-units.js",
       "mode": "0000644",
-      "sha256": "2a5b06ffa72846053847baf0b51a55dcf5217a22f26e31065437ba3657b89889"
+      "sha256": "19d736382407853ab57ca4bcedc74272d47ad8b5c0a4aed4c1b0b23a84533846"
     },
     {
       "path": "scripts/bongos/provision.js",
@@ -15257,7 +15262,7 @@
     {
       "path": "scripts/hall-preview/server.js",
       "mode": "0000644",
-      "sha256": "b98b9c88ad2a27dea5caf567ed2f1afe766ee50133dde48b580bd8b32ac8a98d"
+      "sha256": "b97ba8be895dbc109eb091d59d56531711c1a379417768c521bca96f8e2f2f8a"
     },
     {
       "path": "scripts/hall-preview/task-visual.js",
@@ -15687,12 +15692,12 @@
     {
       "path": "src/bongos/routes/core-update.js",
       "mode": "0000644",
-      "sha256": "dbb6cc64939a87b3f6c79727d90e3a9948c2c04e650235a3f1d3446c36716685"
+      "sha256": "fba9ac0bd6950ee87ef7cd1005f1e852f9346e6fa240e5e6e1e086781f226254"
     },
     {
       "path": "src/bongos/routes/feedback.js",
       "mode": "0000644",
-      "sha256": "4d050c4d37596b87a67727a4f38997d57170045dbf4a6ac769b91978aff4874b"
+      "sha256": "bf2fdd18f238a93cde23838da6f9bbed89f6d4aad13902bc6d86b18efb2099c3"
     },
     {
       "path": "src/bongos/routes/github.js",
@@ -15824,11 +15829,6 @@
       "mode": "0000644",
       "sha256": "8aec44e5e47e94e4539475a109e999913dd4f3e9a0276ba0ff3b04bfd1c79b0e"
     },
-    {
-      "path": "src/bongos/upgrade-request.js",
-      "mode": "0000644",
-      "sha256": "afa7ce2a38cc86bcf934902f65913fd03af58942da2d0777569fe71319900e63"
-    },
     {
       "path": "src/brand-mark.js",
       "mode": "0000644",
@@ -15872,7 +15872,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "8995b2b62fbd8e2b5104180a8deb25dd69963c37d66c1b27ceb41adf3c4a3d31"
+      "sha256": "fda44df6daf88d610dcbfb9d9c9f98e4da9d00cc09759adebfe7e598daa845b4"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -17387,7 +17387,7 @@
     {
       "path": "tests/deploy_handoff.mjs",
       "mode": "0000644",
-      "sha256": "bd5c313c770e4a7e3462b488cc99b43cc892b8ed8cd08869cdae5d4ac3d6fb2e"
+      "sha256": "248f615467d2162f89ec77a0dd30f6def8c91dc5d1487fb00a182878976ef647"
     },
     {
       "path": "tests/deploy_instance.mjs",
@@ -17397,7 +17397,7 @@
     {
       "path": "tests/deploy_page_projects.mjs",
       "mode": "0000644",
-      "sha256": "7a492f806c867e71e52a9d90b3c0b30d47327c83d95e989ad09377c958457dd5"
+      "sha256": "7e0885c8fcf9d69bbfda03433323be29fccc000e78299ba55c413ae1444943c8"
     },
     {
       "path": "tests/design_counts_ratchet.mjs",
@@ -20997,7 +20997,7 @@
     {
       "path": "tests/provision_settings_apply.mjs",
       "mode": "0000644",
-      "sha256": "cc5a5c1eabf6bf4ebbda9726798393114c543b49d5df533a8e3c6f9d0c800295"
+      "sha256": "1651459df066829006f209a34ded9e11181fe7f1ebf75bb68817e403ae1dcb08"
     },
     {
       "path": "tests/provision_teardown_address.mjs",
@@ -22112,7 +22112,7 @@
     {
       "path": "tests/software_update.mjs",
       "mode": "0000644",
-      "sha256": "a568c4779491e129e10fc1d4a9c04d66b2f763d517be5f2d49a064646f21d73c"
+      "sha256": "fa4eca1e1a69a50ad2a3ed4eb06342e50b39757561ae306dd5cd88dd08b812ba"
     },
     {
       "path": "tests/sound_player.mjs",
@@ -22582,7 +22582,7 @@
     {
       "path": "tests/update_pill.mjs",
       "mode": "0000644",
-      "sha256": "102f77ea45c3702736dcdcdbe5d2622b504fb28193a37b3a2b3504224315d8de"
+      "sha256": "6870e95062d1691e733f393a66c7392e5d7599503f498543eda6a5a9ea5a27f4"
     },
     {
       "path": "tests/update_subscription_engine.mjs",
@@ -22634,11 +22634,6 @@
       "mode": "0000644",
       "sha256": "9268c4dbadc4b6fda3ac9505cf699e1fec7b9de6093cfa31c96d0b3a652b79bb"
     },
-    {
-      "path": "tests/upgrade_request.mjs",
-      "mode": "0000644",
-      "sha256": "5ff095b7fba7e04ee1fee01ee3096a627b80f2100d0fcae94314efcf3928c4cb"
-    },
     {
       "path": "tests/upkeep_home.mjs",
       "mode": "0000644",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 686 operations across 85 resource groups
+- 685 operations across 85 resource groups
 
 ## Use it from your project
 

package/clients/bongos-client/bongos-client.global.js

@@ -1395,8 +1395,6 @@ function createClient(opts = {}) {
     "softwareUpdate": {
       // GET /software-update — rank: any-builder — GET /software-update
       getSoftwareUpdate: (args) => request("GET", "/software-update", { hasBody: false }, args),
-      // POST /software-update/request — rank: archon — POST /software-update/request
-      postSoftwareUpdateRequest: (args) => request("POST", "/software-update/request", { hasBody: true }, args),
     },
     "specialities": {
       // GET /specialities — rank: any-builder — GET /specialities

package/clients/bongos-client/index.cjs

@@ -1394,8 +1394,6 @@ function createClient(opts = {}) {
     "softwareUpdate": {
       // GET /software-update — rank: any-builder — GET /software-update
       getSoftwareUpdate: (args) => request("GET", "/software-update", { hasBody: false }, args),
-      // POST /software-update/request — rank: archon — POST /software-update/request
-      postSoftwareUpdateRequest: (args) => request("POST", "/software-update/request", { hasBody: true }, args),
     },
     "specialities": {
       // GET /specialities — rank: any-builder — GET /specialities

package/clients/bongos-client/index.d.ts

@@ -194,7 +194,7 @@ export interface GetSessionsIdResponse { session: unknown }
 export interface GetSessionsIdTranscriptResponse { transcript: unknown }
 export interface GetSessionsMineResponse { sessions: unknown; count: unknown }
 export interface GetSessionsSearchResponse { sessions: unknown; count: unknown; total: unknown; totals: unknown; limit: unknown; offset: unknown; session_types: unknown }
-export interface GetSoftwareUpdateResponse { ok: boolean; update: unknown; door: unknown; can_update: unknown; ask: unknown; held: unknown; history: unknown }
+export interface GetSoftwareUpdateResponse { ok: boolean; update: unknown; door: unknown; can_update: unknown; held: unknown; history: unknown }
 export interface GetSpecialitiesIdDocumentsResponse { documents: unknown }
 export interface GetSpecialitiesIdResponse { speciality: unknown }
 export interface GetSpecialitiesIdSkillsResponse { speciality: unknown; adopted: boolean; enabled: unknown; skills: unknown }
@@ -2051,8 +2051,6 @@ export interface BongosClient {
   "softwareUpdate": {
     /** GET /software-update — rank: any-builder */
     getSoftwareUpdate(args?: RequestArgs): Promise<GetSoftwareUpdateResponse>;
-    /** POST /software-update/request — rank: archon */
-    postSoftwareUpdateRequest(args?: RequestArgs): Promise<ApiResponse>;
   };
   "specialities": {
     /** GET /specialities — rank: any-builder */

package/clients/bongos-client/index.mjs

@@ -1391,8 +1391,6 @@ export function createClient(opts = {}) {
     "softwareUpdate": {
       // GET /software-update — rank: any-builder — GET /software-update
       getSoftwareUpdate: (args) => request("GET", "/software-update", { hasBody: false }, args),
-      // POST /software-update/request — rank: archon — POST /software-update/request
-      postSoftwareUpdateRequest: (args) => request("POST", "/software-update/request", { hasBody: true }, args),
     },
     "specialities": {
       // GET /specialities — rank: any-builder — GET /specialities

package/docs/adr/0398-every-hosted-project-takes-its-own-update-and-nobody-asks-for-one.md

@@ -0,0 +1,45 @@
+# ADR 0398 — Every hosted project takes its own update, and nobody asks for one
+
+- **Status:** Accepted
+- **Date:** 2026-11-07
+- **Task:** [task 1005128](https://cloudbongos.com/builders#/task/1005128) (goal 1000090 — BONGOS-V2)
+- **Deciders:** the owner, Lars. On 2026-11-07, looking at toast's Settings → Software update, which said "Ask for this upgrade": "There has to be a better way to deploy upgrades, asking the team for them is a bit brutal, if the update is generally available then they should be able to download it. Lets keep this the same for all accounts."
+- **Amends:** [ADR 0340](0340-every-hall-takes-its-update-from-settings-and-deploy-is-the-platform-halls-page.md) D2 (how a hosted hall finds its door) and [ADR 0339](0339-a-projects-owner-upgrades-it-and-a-hosted-project-hands-off-to-the-hub-door.md) D3 (the hub's `/deploy` scope). Retires task 1004595's "Ask for this upgrade". Who may move a pin, and how the move runs, are unchanged.
+
+## Context
+
+A hosted project's owner already upgrades it themselves: the hub's door admits the owner (ADR 0339), and since task 1005041 the Update button takes the update in place. The button needs the hall to know where its door is. It learned that from the sign-in federation block or, since task 1004608, from `<PREFIX>_HUB_UPGRADE_URL` in its `web.env`.
+
+Only a settings-apply ever wrote that line, and a settings-apply runs only when a setting changes. A project provisioned before task 1004608 (toast) never got it. Its hall fell to the `cli` answer and, because its name sat under the hub's domain, offered "Ask for this upgrade": a request filed in the maintainers' backlog for a move the owner was allowed to make.
+
+## Decision
+
+### D1 — No project offers to ask
+
+The panel, the Update pill, `POST /software-update/request` and `src/bongos/upgrade-request.js` are gone. A viewer who may update sees the Update button (`local` or `hub`) or, on a server they run themselves, the `bongos upgrade` instruction (`cli`). Nothing else.
+
+### D2 — A hosted hall always names its hub door
+
+`updateDoor` gains a last fallback. When the hall has neither the federation block nor the line, and it answers on a name under its hub's own domain (the hub's own rule for "a project we host", which the ask used), its door is `<hub>/deploy?host=<that name>`. The hub is the feedback door's (`feedbackHub`), and the name comes from the project's own branding pack, never from a request header.
+
+A self-hosted instance on its own domain stays `cli`: nobody at the hub can reach its server.
+
+### D3 — The hub's door takes `?host=` as it takes `?project=`
+
+`/deploy` and the hand-off window resolve `?host=` against the visitor's own projects by registered address (`domain`), exactly as they resolve a slug. It is a lookup, never a listing. The hand-off still accepts a message only from the project's registered origin, and the move route still checks ownership per request.
+
+### D4 — Every core move writes the line
+
+Before it runs, the core-upgrade leg writes `<PREFIX>_HUB_UPGRADE_URL` into the project's `web.env` when it is missing or wrong. The move restarts the service, so the new core reads it. This is best-effort: an unreadable file or a refused write is logged, and the move goes on. A project on its own domain gets the Update button from its next move onward, including automatic ones.
+
+## Rejected
+
+- **Keeping the ask as a fallback behind the button.** The owner asked for it to be the same for every account, and the ask was only ever reached because the address was missing. D2 and D4 remove that cause.
+- **A sweep that re-applies settings to every tenant.** It restarts every hosted project once for a single env line. Riding the move restarts nothing extra.
+- **Guessing the slug from the host.** A project on its own domain has no slug in its name, and a wrong guess opens another project's page. `?host=` matches the address the hub registered.
+
+## Consequences
+
+- **A hosted project gets this once it runs a core carrying it.** Toast runs 1.21.115, which is older, so its first move is made from the hub (`https://cloudbongos.com/deploy?project=toast`). After that its Settings carries the button.
+- **The request history task 1004595 stored** (`software_update.request` in project settings) is no longer read. It is left in place and harms nothing.
+- **Proof:** `tests/software_update.mjs` (the `?host=` door and every case that stays `cli`, and the source checks that the ask is gone), `tests/update_pill.mjs` (no ask plan; a `?host=` door draws the button), `tests/deploy_handoff.mjs` (`?host=` resolves by address, and an unknown or bare-slug host moves nothing), and `tests/provision_settings_apply.mjs` (the backfill patch, and a failed read or write never stopping the move).

package/docs/adr/README.md

@@ -513,3 +513,4 @@ These 20 numbers are each shared by exactly two files. They are **accepted histo
 | 0394 | [**Market Watch searches the web through the Messages API on the project's own key, and runs from its own clock-anchored poller** ([task 1004934](https://cloudbongos.com/builders#/task/1004934) · goal 1000137). Not the grade port: the server image has no `claude` CLI, and a measured tool-enabled run costs the same ($0.106 per item). One Sonnet 5 call per item with bounded web search and fetch, on an owner-set key in Settings (the project pays the provider; Bongos holds no money); an hourly, ledger-due, resumable poller on the daily-checks pattern, not the abandoned cron-router; capped per item before it starts and fail closed; about $4–5 per weekly 40-item run.](0394-market-watch-searches-through-the-messages-api-on-the-projects-key-and-runs-from-its-own-poller.md) | modules / economy |
 | 0395 | [**A task says what it needs, and each person's lists show only what they can do** ([task 1004950](https://cloudbongos.com/builders#/task/1004950)). `tasks.needs` ⊆ {owner, server} is its own set, not an `automation_tag` value (that one says whether work runs unattended). Capabilities are read fresh like rank: `owner` from the owner seat (founding builder fallback, the UAT reading), `server` from `builders.capability_grants`, set only by the owner. The recommend lists (claimable feed, optimizer, autonomous runner) show only tasks whose needs the viewer holds; the runner never holds owner. The claim refuses only `server` (`NEEDS_SERVER_ACCESS`, all three surfaces). Visibility elsewhere is unchanged; the board filters by need.](0395-a-task-says-what-it-needs-and-lists-show-only-what-you-can-do.md) | lifecycle / work tracking |
 | 0397 | [**The payment rail is Stripe Connect, one connected account per project; J.P. Morgan Payments is the fallback** ([task 1004906](https://cloudbongos.com/builders#/task/1004906), goal 1000092). The owner chose Stripe on 2026-10-30. Each project holds its money in its own connected account and each payee has one, so Cloud Bongos holds nothing (ADR 0385). Every flow in the ADR 0385 map is named against a Stripe primitive; a processor adapter module is the only place that names Stripe, so the fallback replaces one adapter. The processor is the party that monitors the money it holds. Test mode first; no live key is created, and counsel items 1 to 4 still gate real money.](0397-the-payment-rail-is-stripe-connect-with-one-connected-account-per-project.md) | economy / payments |
+| 0398 | [**Every hosted project takes its own update, and nobody asks for one** ([task 1005128](https://cloudbongos.com/builders#/task/1005128)). "Ask for this upgrade" is gone from every hall. A hosted hall with no upgrade address still names its hub door, by its own web address (`/deploy?host=`), which the hub resolves among the visitor's own projects; every core move writes the missing address into the project's settings. A self-hosted instance keeps the `bongos upgrade` instruction.](0398-every-hosted-project-takes-its-own-update-and-nobody-asks-for-one.md) | upgrades / hosting |

package/docs/api/openapi.json

@@ -26626,40 +26626,6 @@
         ]
       }
     },
-    "/software-update/request": {
-      "post": {
-        "operationId": "post_software_update_request",
-        "tags": [
-          "software-update"
-        ],
-        "summary": "POST /software-update/request",
-        "description": "POST /software-update/request — \"Ask for this upgrade\" (task 1004595). On a project the hub's operator runs, sends one request for the version this project is offered to the operator, through the direct feedback door, and remembers it so the page can say it is pending. The version is the server's own reading, never the caller's. Idempotent per version; a different version waits out a 24h cooldown (429). rank: core.pin.move — the same atom as the Update button the panel draws.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `core.pin.move` (all required).",
-        "x-rank": "archon",
-        "x-source": "src/bongos/routes/core-update.js",
-        "x-permissions": [
-          "core.pin.move"
-        ],
-        "responses": {
-          "200": {
-            "description": "Success."
-          },
-          "400": {
-            "$ref": "#/components/responses/BadRequest"
-          },
-          "401": {
-            "$ref": "#/components/responses/Unauthorized"
-          },
-          "403": {
-            "$ref": "#/components/responses/Forbidden"
-          }
-        },
-        "security": [
-          {
-            "builderSession": []
-          }
-        ]
-      }
-    },
     "/specialities": {
       "get": {
         "operationId": "get_specialities",
@@ -34386,7 +34352,6 @@
           "update": {},
           "door": {},
           "can_update": {},
-          "ask": {},
           "held": {},
           "history": {}
         },
@@ -34395,7 +34360,6 @@
           "update",
           "door",
           "can_update",
-          "ask",
           "held",
           "history"
         ]
@@ -43056,7 +43020,7 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 686,
+  "x-endpoint-count": 685,
   "x-schema-count": 723,
   "x-undocumented-bodies": 12,
   "x-response-schemas": 459,

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 686 endpoints across 117 route files.
+> **Generated from the live route files** — the route file is authoritative. 685 endpoints across 117 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust-boundary-server-enforced-permissions.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -965,12 +965,11 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | GET | `/api/bongos/sky` | `any-builder` | — | GET /sky, the whole project sky (task 1004230, ADR 0331). |
 | GET | `/api/bongos/sky/mine` | `any-builder` | — | GET /sky/mine, every thought the SIGNED-IN builder filed with its state, size and descent, capped at 1000 (task 1004230). |
 
-## `software-update` (2)
+## `software-update` (1)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
 | GET | `/api/bongos/software-update` | `any-builder` | — | GET /software-update — Settings → Software update (task 1004296): this project's core, the newest release its channel allows, what the ve… |
-| POST | `/api/bongos/software-update/request` | `archon` | — | POST /software-update/request — "Ask for this upgrade" (task 1004595). |
 
 ## `specialities` (15)