@bongos/core 1.24.8 → 1.24.9

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/bongos/package-core.js",
-  "core_version": "1.24.8",
-  "core_contract": "1.24.8",
-  "source_commit": "e1928e4e0a2c1ac1a87f42e26dd675bb88a3c1a0",
+  "core_version": "1.24.9",
+  "core_contract": "1.24.9",
+  "source_commit": "1b5c6e80de03e26ccb4ce09080054aac86172d7e",
   "source_ref": "HEAD",
-  "built_at": "2026-10-30T09:10:40.062Z",
+  "built_at": "2026-10-30T09:42:10.366Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 628,
     "agent_docs_stubbed": 32,
-    "functional_verbatim": 3739,
+    "functional_verbatim": 3740,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 4400,
-  "tree_sha256": "1d028c48c3869754ab8e877d8fb880e796c69671039e6ef7cb480eec228b780a",
+  "file_count": 4401,
+  "tree_sha256": "6f0633b8a3983da6d58049a76d4c7523f8ad952b6e0e02365e13ef71d80b9d31",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -347,7 +347,7 @@
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "87282327820749848cd6f0295a02206728a483c55671d2748d5938cd9cb50877"
+      "sha256": "17c1abcb02f5eee9ad383682cc353258c15b0ef6619617896c2b742cb8fa9b46"
     },
     {
       "path": "clients/bongos-client/index.mjs",
@@ -2397,7 +2397,7 @@
     {
       "path": "docs/adr/0385-money-lives-with-a-processor-credits-stay-a-project-meter.md",
       "mode": "0000644",
-      "sha256": "b5d24f25bfccaab2ac39eaeb857690b52f00bc2c2bd04c0e270d5aff3e3f82c0"
+      "sha256": "64b515ddb44362fe436c38043e63d951a21dcf0795d78990ab3a0940142712dc"
     },
     {
       "path": "docs/adr/0386-the-funding-wall-is-a-per-project-rule-claim-time-hold-by-default.md",
@@ -2447,17 +2447,17 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "062569424f3cbdd9edd3f992956a28a92957e27be176914cff99edd20002f952"
+      "sha256": "48d2e2335df2e5bfa4dfa561988013bf3cf794ad9d6dac541e50677b1f328fb3"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "2bf47c975ae69a1cb7d78c894dac554a9343e4aa15141a581f92497d804b7da7"
+      "sha256": "05b6f5307ace68399b4d2c91863d31205f428a434053a2eb3f140ecb7285f611"
     },
     {
       "path": "docs/architecture.md",
       "mode": "0000644",
-      "sha256": "0aabfcc47e98930f5a9aad919145e986335dbbdd6cd21aa63c5f5593310025a4"
+      "sha256": "95f3a2b4c7bbbf3527c59cc176732022dfc98238c191c00dab1e0857461fbc34"
     },
     {
       "path": "docs/branding-contract.md",
@@ -2477,12 +2477,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "0138b011fbec3aa37fa9a41e0bc632e21e9d4df3a47fcc8855f87ea6ee801857"
+      "sha256": "50d530e4016468678f266c6bda1662f5287d099a0f5421a552c09e658fc55295"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "de6dc54e4cc8b5a5d61174c422eefdd9c773a026a039eda7dc3b8881e5b1580f"
+      "sha256": "e888d2e28d7dcf2c6bfde6fc4e7969dce3f768df01c925e6c5668a0dea4583ce"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2992,12 +2992,12 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "2b545339b5bfcb895fe16d8219ebefa46bcc486488cc99316c9ef633e22e8ad6"
+      "sha256": "a07235622a5b4dfdab6bca44f9dce66031bd1b34f263d701fa6dd6bebb2b5c64"
     },
     {
       "path": "docs/modules-contract.md",
       "mode": "0000644",
-      "sha256": "1ca002715220c25f7d270c3d87d3a5827454f4abec0f6ea813f9935d1b4ced2c"
+      "sha256": "f5d2f87333d7fb5768d19819fb3d4888c4d887b3bbdb3fdac4b4be37d965749a"
     },
     {
       "path": "docs/onboarding/diagrams/01-task-lifecycle.mmd",
@@ -3082,7 +3082,7 @@
     {
       "path": "docs/page-readings.json",
       "mode": "0000644",
-      "sha256": "936ed9ec72c32a878ad28f7825aef8a3c5c4901d4a5931f09bb51693893c2380"
+      "sha256": "4fae3561898b1a33d286d04c6055e998398bc381773359ea8e306817aa3f92ce"
     },
     {
       "path": "docs/project-context.template.md",
@@ -4284,6 +4284,11 @@
       "mode": "0000644",
       "sha256": "5b0f9d39bc66732b3bc2ad53562c8238152904a1d71790bcba9f8fae3386ccb3"
     },
+    {
+      "path": "migrations/core_287_module_prices_cash_only.sql",
+      "mode": "0000644",
+      "sha256": "f33f68b1bb9e40102fb605d85c822ac18243a2975fa446d6028f75b36f397372"
+    },
     {
       "path": "modules/agents/CLAUDE.md",
       "mode": "0000644",
@@ -6562,7 +6567,7 @@
     {
       "path": "modules/hall-ui/public/modules.js",
       "mode": "0000644",
-      "sha256": "33841de9baea493a540f1b8361d8cb08c71ce599cb8da963930fc3d1d7ba5c13"
+      "sha256": "f4a4f27bd6031760a2e1e5d64199c37f5b148ae5d6bcb50f1fd0b4aa8afdc13e"
     },
     {
       "path": "modules/hall-ui/public/modules.states.json",
@@ -11487,12 +11492,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "fe8bbe7d7e7bf8e8b666d2527bbff2f1dc3617ab9bc472fffe5683f3e5ce1858"
+      "sha256": "61dc454826a6c5cee6748531cc76c77a16b52d7d4732a3e4de6ee16f54060874"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "7db5714cd191277d9bfd584bf80a6f0f0cf5b5fcdae31a61305d57ea36191c64"
+      "sha256": "a79803cbff9be4db907e5f3a17493566a6a3dbab2edffb6eca10f1e2e3f18c76"
     },
     {
       "path": "public-docs/index.html",
@@ -11512,7 +11517,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "652511c01f9993927babd2528806249a3eef0d95a4981dd66adb9ae24d7d399e"
+      "sha256": "adfa51edc97c79e4db9f89ad2060aaf64fdb41970b2322e9f0f626b3a3d9e85d"
     },
     {
       "path": "scripts/bongos/CLAUDE.md",
@@ -12367,7 +12372,7 @@
     {
       "path": "scripts/bongos/module-store-cli.js",
       "mode": "0000644",
-      "sha256": "9634332ab9995fbb906d856fbf575cad3ad83923e4e724e888af5fd25d82b047"
+      "sha256": "d978c68f72bcf812cbe01e463b4c761760a8bc0310963b7429d0d8331ae97067"
     },
     {
       "path": "scripts/bongos/module-test-runner.js",
@@ -12387,7 +12392,7 @@
     {
       "path": "scripts/bongos/module.js",
       "mode": "0000644",
-      "sha256": "34b1c30a3192d28f0260950e88f27a2bb44077d7917987697b9cdbb4093b590b"
+      "sha256": "49cc1f89c692540ceb04245e681a5e498313ab30e40c95881632c70551a76a19"
     },
     {
       "path": "scripts/bongos/move-escalation.js",
@@ -15022,7 +15027,7 @@
     {
       "path": "src/bongos/module-listing.js",
       "mode": "0000644",
-      "sha256": "ef63c8be3af54a23b36647b2402517fe2fca4c6c1b0ba5a75d07a85cd39abc92"
+      "sha256": "1acc85a43757e6c4e084bbd9fee1f144bda81a3c3cde2cdc519876d75db2777f"
     },
     {
       "path": "src/bongos/module-overrides.js",
@@ -15047,7 +15052,7 @@
     {
       "path": "src/bongos/module-store.js",
       "mode": "0000644",
-      "sha256": "75c7e86fc1c0c9d6cffaa63a4c6654fe5191dab919dd988dc04903ca84c84382"
+      "sha256": "b77d2d9dfcc30d5e236cf869c892c4e4a2efe88e7391ca2c168907fc3164fb55"
     },
     {
       "path": "src/bongos/module-subcategories.js",
@@ -15242,7 +15247,7 @@
     {
       "path": "src/bongos/routes/modules.js",
       "mode": "0000644",
-      "sha256": "e7e9c57d4b5c1513425c9349d477e5b1b07c5538cabc74f30d9f899c7962384e"
+      "sha256": "a43cb435b9dddc3a9d3b0ab60a033b6e1dc5e80c37ff567b808d96ca69f8dd9a"
     },
     {
       "path": "src/bongos/routes/my-passkeys.js",
@@ -15357,7 +15362,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "14a0c1c875df0982dff9b066fbd0b2c657f685ccc86a924cab434a91f520e0ca"
+      "sha256": "dc3cc079f64b152bd0ef1728b3cc12e5f6bacfd77f60c63086e019431c828c12"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -19382,7 +19387,7 @@
     {
       "path": "tests/module_store_cli.mjs",
       "mode": "0000644",
-      "sha256": "7b57aafabc5d9c3fa568c88157e3049befde2abaa1d54c69ac69520d6cea6efd"
+      "sha256": "2bdf1a496ac6f13c2d3d39ecd999285cc73db22e1da655c420ee2932ad8f3f0a"
     },
     {
       "path": "tests/module_store_delist.mjs",
@@ -19402,12 +19407,12 @@
     {
       "path": "tests/module_store_listing.mjs",
       "mode": "0000644",
-      "sha256": "5f0cb9cb6e3faf90d342e1d9e1767699b677b8630d874f1c2af9cb7f713ef530"
+      "sha256": "5ca05585dc9a80774af2dd3680ed4872741ae952a9f186e827b63739edba77c3"
     },
     {
       "path": "tests/module_store_price.mjs",
       "mode": "0000644",
-      "sha256": "52fe692c1991fa33388b15ff5622f5207b5314fb05d0aa474543d888bda36e66"
+      "sha256": "5293407a7af26d8aa76eccb7641462ffc01010abe68915d4d1f3b56127998b77"
     },
     {
       "path": "tests/module_store_publish.mjs",
@@ -19427,7 +19432,7 @@
     {
       "path": "tests/module_store_registry_migration.mjs",
       "mode": "0000644",
-      "sha256": "9ed254da26adabfa05a766d8e4dc7f69da9364ca477b19b88c3c76314b94937e"
+      "sha256": "21902767d18aac1aa28c15f951668db9ffcc567de6496c179822123903d73dd0"
     },
     {
       "path": "tests/module_store_subcategories.mjs",

package/clients/bongos-client/index.d.ts

@@ -623,7 +623,7 @@ export interface PostStoreModulesKeyAcquiredRequest { version: string }
 export interface PostStoreModulesKeyAcquiredResponse { ok: boolean; entitlement: unknown }
 export interface PostStoreModulesKeyDelistRequest { reason?: string }
 export interface PostStoreModulesKeyDelistResponse { ok: boolean; module_key: unknown; status: unknown; delisted_at: unknown }
-export interface PostStoreModulesKeyPriceRequest { cents?: unknown; credits?: unknown }
+export interface PostStoreModulesKeyPriceRequest { cents?: number }
 export interface PostStoreModulesKeyPriceResponse { ok: boolean; module_key: unknown; previous: unknown; price: unknown }
 export interface PostStoreModulesKeyVersionsResponse { ok: boolean; created_module: unknown; version: unknown; channel: unknown; category: unknown }
 export interface PostStoreModulesKeyVersionsVersionErrorCountRequest { day: string; count: number }

package/docs/adr/0385-money-lives-with-a-processor-credits-stay-a-project-meter.md

@@ -69,7 +69,7 @@ The owner answered the questions left open by the payments build plan ([task 100
 - **Decision 2, "a project may change or replace it", is narrowed.** For now a project may change and tune the Bongos Standard Credit System's settings. It may not switch credits off, and there is no plug-in formula.
 - **The credit reward stays required by default.** [ADR 0096](0096-require-reward-before-workable.md)'s rule stays on for every new project, not only for projects that pick the standard system.
 - **Decision 3: a project's pay policy lives in the database.** It is changed on the project's settings page, and every change is kept in an audit trail (who, when, what). It does not live in the branding pack. [Task 1004990](https://cloudbongos.com/builders#/task/1004990) builds to this.
-- **Modules already priced in credits are not hidden.** Each author is asked to set a cash price, and the listing stays up meanwhile. [Task 1004989](https://cloudbongos.com/builders#/task/1004989) builds to this. One question is still open. Decision 2 says credits are not spendable as money, so whether an interim listing may still be bought *with credits* (rather than only shown) needs the owner's word before that task ships.
+- **Modules already priced in credits are not hidden.** Each author is asked to set a cash price, and the listing stays up meanwhile. The owner answered the follow-up question on 2026-10-29: an interim credit-priced module stays **visible with a "price coming" note, and it can NOT be bought with credits**. Credits are never spent like money. [Task 1004989](https://cloudbongos.com/builders#/task/1004989) built this: new prices are cash only (the database refuses a credit price on a new row), and old credit prices show as "price coming".
 - **"Verro" is Verro Labs**, the planned holding company of Cloud Bongos LLC and related entities, as now named in the EU labour row above.
 - **ADR 0054's "credits are equity" framing is formally superseded**, as recorded in ADR 0054 itself ([task 1004967](https://cloudbongos.com/builders#/task/1004967)).
 

package/docs/api/openapi.json

@@ -26132,7 +26132,7 @@
           "store"
         ],
         "summary": "GET /store/modules",
-        "description": "The store catalog under the quality floor (task 1003807, ADR 0343 D2/D5): each listed module's newest version, if it passed the Security gate and scores at or above the floor, or under \"new\" if it has no real-world data yet. Below the bar is not listed at all. The floor is fixed in module-listing.js and returned here. `?sort=<part>` orders the listed modules by the part a buyer cares about (task 1003800, sortByPart); the parts it accepts come back as sort_parts. Without it the listed modules are ranked quality first, price breaking ties (task 1003808, rankListed); `?max_cents=` / `?max_credits=` leave out modules that cost more. rank: any-builder — a read of public store metadata, like /store/modules/latest: no entitlement taken, nothing changed.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "description": "The store catalog under the quality floor (task 1003807, ADR 0343 D2/D5): each listed module's newest version, if it passed the Security gate and scores at or above the floor, or under \"new\" if it has no real-world data yet. Below the bar is not listed at all. The floor is fixed in module-listing.js and returned here. `?sort=<part>` orders the listed modules by the part a buyer cares about (task 1003800, sortByPart); the parts it accepts come back as sort_parts. Without it the listed modules are ranked quality first, price breaking ties (task 1003808, rankListed); `?max_cents=` leaves out modules that cost more. rank: any-builder — a read of public store metadata, like /store/modules/latest: no entitlement taken, nothing changed.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
         "x-source": "src/bongos/routes/modules.js",
         "responses": {
@@ -26483,7 +26483,7 @@
           "store"
         ],
         "summary": "POST /store/modules/:key/price",
-        "description": "POST /api/bongos/store/modules/:key/price — the module's author sets its price (task 1004894, criterion wa5-module-economy). Body: { cents?, credits? }, each a whole number of 0 or more, or null for \"not offered in that currency\"; at least one is given, and 0 in either is free. Appends a row to the price history; the newest is what the catalog shows and what acquire charges. A paid price may be set before buying exists (owner, 2026-10-26): the catalog marks it not yet buyable. Price never moves the score (ADR 0343 D6). The audit middleware records who changed it and to what. rank: metic+archon — the same gate as publishing (module.submit), plus the author check inside setPrice: only the person who published the module prices it.\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `module.submit` (all required).",
+        "description": "POST /api/bongos/store/modules/:key/price — the module's author sets its price (task 1004894, criterion wa5-module-economy). Body: { cents }, a whole number of 0 or more; 0 is free. A credit price is refused (task 1004989, ADR 0385 decision 2: credits never price or buy a module). Appends a row to the price history; the newest is what the catalog shows and what acquire charges. A paid price may be set before buying exists (owner, 2026-10-26): the catalog marks it not yet buyable. Price never moves the score (ADR 0343 D6). The audit middleware records who changed it and to what. rank: metic+archon — the same gate as publishing (module.submit), plus the author check inside setPrice: only the person who published the module prices it.\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `module.submit` (all required).",
         "x-rank": "metic+archon",
         "x-source": "src/bongos/routes/modules.js",
         "x-permissions": [
@@ -39520,8 +39520,11 @@
       "PostStoreModulesKeyPriceRequest": {
         "type": "object",
         "properties": {
-          "cents": {},
-          "credits": {}
+          "cents": {
+            "type": "integer",
+            "minimum": 0,
+            "maximum": 100000000
+          }
         },
         "additionalProperties": false
       },

package/docs/api-reference.md

@@ -953,7 +953,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | POST | `/api/bongos/store/modules/:key/delist` | `metic+archon` | `reason` | POST /api/bongos/store/modules/:key/delist — a Metic+ person takes a module out of the store (task 1003797, ADR 0338 D2). |
 | GET | `/api/bongos/store/modules/:key/entitlement` | `any-builder` | — |  |
 | GET | `/api/bongos/store/modules/:key/listing` | `any-builder` | — | GET /api/bongos/store/modules/:key/listing — whether one module is in the catalog and why (task 1003810): the reason in a sentence, what … |
-| POST | `/api/bongos/store/modules/:key/price` | `metic+archon` | `cents`, `credits` | POST /api/bongos/store/modules/:key/price — the module's author sets its price (task 1004894, criterion wa5-module-economy). |
+| POST | `/api/bongos/store/modules/:key/price` | `metic+archon` | `cents` | POST /api/bongos/store/modules/:key/price — the module's author sets its price (task 1004894, criterion wa5-module-economy). |
 | POST | `/api/bongos/store/modules/:key/versions` | `metic+archon` | _undocumented_ | POST /api/bongos/store/modules/:key/versions — publish one module version to the store (task 1004271, ADR 0338 D1). |
 | GET | `/api/bongos/store/modules/:key/versions/:version/channel` | `any-builder` | — | GET /api/bongos/store/modules/:key/versions/:version/channel — where a version stands on the promotion gate (task 1003804, ADR 0344 D3): … |
 | POST | `/api/bongos/store/modules/:key/versions/:version/error-count` | `any-builder` | `day`, `count` |  |

package/docs/architecture.md

@@ -253,8 +253,8 @@ store_module_versions(id, module_key, version exact X.Y.Z, core_version, manifes
               tree_sha256, tarball_sha256, tarball_bytes, artifact_path, published_by,
               published_at, UNIQUE(module_key, version))  -- immutable; a fix is a new version
 store_module_prices(id, module_key, price_cents, price_credits, set_by, set_at)
-              -- history; newest row per module is current. 0 = free, NULL = not offered
-              -- in that currency, at least one must be set.
+              -- history; newest row per module is current. Cash only since core_287 (task 1004989):
+              -- price_credits is historical, a credit-only newest row reads "price coming". 0 cents = free.
 ```
 
 Passkey foundation (migration `core_277`, task 1004750, [ADR 0382](adr/0382-a-hardware-card-is-a-passkey-step-up-an-archon-switches-on-per-builder.md) D1/D6 — storage only; the ceremonies and routes are their own tasks; code in `src/bongos/passkeys.js`):

package/docs/copy-inventory.md

@@ -4,13 +4,13 @@
 > Deterministic on a given tree — regenerate and commit rather than hand-editing.
 > Machine-readable twin: [`copy-registry.json`](copy-registry.json).
 
-**3143 strings** across 3 surfaces · 2477 distinct pieces of copy · 3143 certain, 0 heuristic · 264 shown in more than one place.
+**3145 strings** across 3 surfaces · 2479 distinct pieces of copy · 3145 certain, 0 heuristic · 264 shown in more than one place.
 
 ## Surfaces
 
 | surface | lives at | files | strings |
 |---|---|---|---|
-| `builders-hall` | `modules/hall-ui/public` | 163 | 2041 |
+| `builders-hall` | `modules/hall-ui/public` | 163 | 2043 |
 | `status-dashboard` | `modules/status-ui/public` | 4 | 91 |
 | `landing` | `modules/public-landing/public` | 10 | 1011 |
 
@@ -78,7 +78,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `ed394c66d49c` | 4x | What the choice changes | modules/public-landing/public/projects.html:1342, modules/public-landing/public/projects.html:1430, modules/public-landing/public/projects.html:1442 |
 | … | | _224 more in the JSON registry_ | |
 
-## `builders-hall` — 2041 strings
+## `builders-hall` — 2043 strings
 
 | id | conf | text | where |
 |---|---|---|---|
@@ -376,7 +376,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `71da00d47492` | certain | Could not invite: {…} | `modules/hall-ui/public/watch.js:344` |
 | `90691bceaf68` | certain | Could not load | `modules/hall-ui/public/task.js:1042` |
 | `589a4cfc5442` | certain | Could not load idea {…}. | `modules/hall-ui/public/ideas.js:1019` |
-| `192c893fc64e` | certain | Could not load modules. | `modules/hall-ui/public/modules.js:602` |
+| `192c893fc64e` | certain | Could not load modules. | `modules/hall-ui/public/modules.js:607` |
 | `9912c3835136` | certain | Could not load requests — reload to try again. | `modules/hall-ui/public/collab.js:845` |
 | `7775fec0fa85` | certain | Could not load sessions. | `modules/hall-ui/public/sessions.js:504` |
 | `7775fec0fa85` | certain | Could not load sessions. | `modules/hall-ui/public/sessions.js:542` |
@@ -397,7 +397,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `64f9d51f0fa2` | certain | Could not load your settings. | `modules/hall-ui/public/settings.js:1208` |
 | `de244c45d916` | certain | Could not load {…} | `modules/hall-ui/public/task.js:1035` |
 | `2366356926b4` | certain | Could not mark the primer just now. Try again. | `modules/hall-ui/public/primer.js:259` |
-| `753987b5da13` | certain | Could not reach the submit endpoint. | `modules/hall-ui/public/modules.js:579` |
+| `753987b5da13` | certain | Could not reach the submit endpoint. | `modules/hall-ui/public/modules.js:584` |
 | `6f500726f0ac` | certain | Could not read the report: {…} | `modules/hall-ui/public/watch.js:768` |
 | `21c2f33168a3` | certain | Could not read this project's deploy state: {…} | `modules/hall-ui/public/deploy.js:636` |
 | `21a782f1af26` | certain | Could not read what this would bring in: {…}. The check below still applies. | `modules/hall-ui/public/deploy.js:542` |
@@ -685,6 +685,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `d751fe51e178` | certain | It shipped and it is live. Your review coaches the grader on how it judged the work, then remakes or tweaks th | `modules/hall-ui/public/studio.js:237` |
 | `a21788f84e29` | certain | Its author gave no scope recommendation. | `modules/hall-ui/public/board-room.js:311` |
 | `a21788f84e29` | certain | Its author gave no scope recommendation. | `modules/hall-ui/public/idea.js:162` |
+| `49dc6885e5ff` | certain | Its author has been asked to set a cash price. Credits cannot buy a module. | `modules/hall-ui/public/modules.js:348` |
 | `b0bcb3f844ec` | certain | Its author marked this as needing development — anyone can turn it into a Full Idea, and they keep the credit  | `modules/hall-ui/public/idea.js:473` |
 | `680491549e47` | certain | Its author recommends this becomes | `modules/hall-ui/public/board-room.js:310` |
 | `680491549e47` | certain | Its author recommends this becomes | `modules/hall-ui/public/idea.js:166` |
@@ -938,7 +939,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `43626cff7071` | certain | Nothing of that kind in your sky. | `modules/hall-ui/public/sky-panel.js:123` |
 | `b05a5f8cb074` | certain | Nothing personal is sent. | `modules/hall-ui/public/my-agents.js:452` |
 | `ad9a17a8a5eb` | certain | Nothing shipped yet. | `modules/hall-ui/public/profile.js:292` |
-| `f326632f2013` | certain | Nothing to submit — every module here ships with the core. | `modules/hall-ui/public/modules.js:540` |
+| `f326632f2013` | certain | Nothing to submit — every module here ships with the core. | `modules/hall-ui/public/modules.js:545` |
 | `8d0e0cbaa5ff` | certain | Nothing yet this month. | `modules/hall-ui/public/ai-studio.js:475` |
 | `27c0d872db2d` | certain | Nothing you have typed above is lost by opening this. | `modules/hall-ui/public/ideas.html:155` |
 | `26a07b64f49d` | certain | Now running core {…} | `modules/hall-ui/public/deploy.js:400` |
@@ -1829,7 +1830,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `7b5ad068dc26` | certain | not graded | `modules/hall-ui/public/hall-render.js:349` |
 | `01a3d68d80c1` | certain | not graded (grader outage) | `modules/hall-ui/public/builders.js:544` |
 | `d43b9bbb8d4d` | certain | not graded (quality lens unavailable) | `modules/hall-ui/public/builders.js:546` |
-| `380177c47d89` | certain | not measured yet | `modules/hall-ui/public/modules.js:360` |
+| `380177c47d89` | certain | not measured yet | `modules/hall-ui/public/modules.js:365` |
 | `c04e4491af67` | certain | not now | `modules/hall-ui/public/studio.html:110` |
 | `3916a3dc8e98` | certain | not started | `modules/hall-ui/public/roadmap.js:120` |
 | `3916a3dc8e98` | certain | not started | `modules/hall-ui/public/roadmap.js:311` |
@@ -1865,6 +1866,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `2fb1dad96280` | certain | pending, on the People tab | `modules/hall-ui/public/watch.html:47` |
 | `b6ceacaad5e5` | certain | pick another | `modules/hall-ui/public/studio.js:740` |
 | `b6ceacaad5e5` | certain | pick another | `modules/hall-ui/public/tweak-editor.html:107` |
+| `67bf0a6043f4` | certain | price coming | `modules/hall-ui/public/modules.js:348` |
 | `ddda5cb71c36` | certain | proposal sent | `modules/hall-ui/public/market-watch-rules.js:94` |
 | `cc7d093fdd53` | certain | propose a change | `modules/hall-ui/public/market-watch-rules-lib.js:127` |
 | `3b22c5af029b` | certain | rank or above, or that it is your own. | `modules/hall-ui/public/copy-desk.html:47` |
@@ -1904,7 +1906,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `c8c2551006dc` | certain | skip the tour | `modules/hall-ui/public/thinking.html:122` |
 | `36c07e16519a` | certain | so far | `modules/hall-ui/public/ai-studio.js:377` |
 | `1e737a57eb20` | certain | start governing | `modules/hall-ui/public/city.html:99` |
-| `e294c3429c2e` | certain | strong at {…} | `modules/hall-ui/public/modules.js:349` |
+| `e294c3429c2e` | certain | strong at {…} | `modules/hall-ui/public/modules.js:354` |
 | `0215b2cdca8c` | certain | submit for review | `modules/hall-ui/public/modules.js:295` |
 | `43e6f1592ae3` | certain | submit it in the editor | `modules/hall-ui/public/studio.js:920` |
 | `9ec19e32f86f` | certain | submit page | `modules/hall-ui/public/tweak-editor.html:68` |
@@ -1975,7 +1977,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `18cf722bdd7e` | certain | waiting · | `modules/hall-ui/public/sky-interaction.js:128` |
 | `354861d3c2ce` | certain | waits for a restart | `modules/hall-ui/public/modules.js:148` |
 | `35be9e0923da` | certain | walks the whole path in plain language. | `modules/hall-ui/public/hall-render.js:841` |
-| `20318b6da94e` | certain | weak at {…} | `modules/hall-ui/public/modules.js:351` |
+| `20318b6da94e` | certain | weak at {…} | `modules/hall-ui/public/modules.js:356` |
 | `db42054582ed` | certain | wells · | `modules/hall-ui/public/sky-interaction.js:129` |
 | `17705daf7b85` | certain | what counts as passing | `modules/hall-ui/public/government.html:53` |
 | `96a8971a5c44` | certain | what got un-stuck | `modules/hall-ui/public/blockers.js:131` |
@@ -2049,7 +2051,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `1a8a6267e490` | certain | {…} unfinished task{…} — say what happens to each | `modules/hall-ui/public/goals-render.js:1036` |
 | `2f75f69cdb2f` | certain | {…} {…} changed | `modules/hall-ui/public/profile-crafts.js:216` |
 | `8186b562553a` | certain | {…} {…} waiting | `modules/hall-ui/public/work.js:438` |
-| `a9216af9b05e` | certain | {…} {…} — how-to | `modules/hall-ui/public/modules.js:655` |
+| `a9216af9b05e` | certain | {…} {…} — how-to | `modules/hall-ui/public/modules.js:660` |
 | `0d4016a5531c` | certain | {…} {…}{…} | `modules/hall-ui/public/watch.js:514` |
 | `0d4016a5531c` | certain | {…} {…}{…} | `modules/hall-ui/public/work.js:279` |
 | `23872e0af7a4` | certain | {…} · Optional. Without one, generations run on ours and are charged to your balance. | `modules/hall-ui/public/settings-ai-keys.js:45` |
@@ -2058,7 +2060,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `d73256fbc395` | certain | {…} · who votes, and how it {…} | `modules/hall-ui/public/board-room.js:480` |
 | `1ac723849449` | certain | {…} · {…}{…} | `modules/hall-ui/public/notes-panel.js:39` |
 | `1ac723849449` | certain | {…} · {…}{…} | `modules/hall-ui/public/sky-interaction.js:33` |
-| `ddd2bfc1fb60` | certain | {…} — how to use it | `modules/hall-ui/public/modules.js:657` |
+| `ddd2bfc1fb60` | certain | {…} — how to use it | `modules/hall-ui/public/modules.js:662` |
 | `085f93f3f775` | certain | {…} — see all standings | `modules/hall-ui/public/hall-render.js:80` |
 | `7609b97aec22` | certain | {…}% complete | `modules/hall-ui/public/hall-render.js:741` |
 | `2a2728a4ec4f` | certain | {…}% of tasks complete | `modules/hall-ui/public/roadmap.js:63` |
@@ -2072,7 +2074,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `1e275ee0299c` | certain | {…}s only | `modules/hall-ui/public/government.js:1067` |
 | `97e27ab169ae` | certain | {…}{…} session{…} across {…} builder{…}. | `modules/hall-ui/public/sessions.js:443` |
 | `3d74668f69e5` | certain | {…}{…} · {…} | `modules/hall-ui/public/task.js:655` |
-| `1026fd5f68b7` | certain | · version | `modules/hall-ui/public/modules.js:660` |
+| `1026fd5f68b7` | certain | · version | `modules/hall-ui/public/modules.js:665` |
 | `a6ae9cbdee30` | certain | — all builders — | `modules/hall-ui/public/builders.js:698` |
 | `729d4ce22b99` | certain | — any — | `modules/hall-ui/public/hall-widgets.js:173` |
 | `d2c30a1ee74e` | certain | — decide — | `modules/hall-ui/public/goals-render.js:1000` |

package/docs/copy-registry.json

@@ -3,9 +3,9 @@
   "generator": "scripts/bongos/copy-inventory.js",
   "goal": 1000074,
   "counts": {
-    "strings": 3143,
-    "unique_ids": 2477,
-    "certain": 3143,
+    "strings": 3145,
+    "unique_ids": 2479,
+    "certain": 3145,
     "heuristic": 0,
     "duplicate_ids": 264
   },
@@ -13,7 +13,7 @@
     "builders-hall": {
       "at": "modules/hall-ui/public",
       "files": 163,
-      "strings": 2041
+      "strings": 2043
     },
     "status-dashboard": {
       "at": "modules/status-ui/public",
@@ -5733,7 +5733,7 @@
       "surface": "builders-hall",
       "text": "Could not load modules.",
       "file": "modules/hall-ui/public/modules.js",
-      "line": 602,
+      "line": 607,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -5922,7 +5922,7 @@
       "surface": "builders-hall",
       "text": "Could not reach the submit endpoint.",
       "file": "modules/hall-ui/public/modules.js",
-      "line": 579,
+      "line": 584,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -8509,6 +8509,15 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "49dc6885e5ff",
+      "surface": "builders-hall",
+      "text": "Its author has been asked to set a cash price. Credits cannot buy a module.",
+      "file": "modules/hall-ui/public/modules.js",
+      "line": 348,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "b0bcb3f844ec",
       "surface": "builders-hall",
@@ -10791,7 +10800,7 @@
       "surface": "builders-hall",
       "text": "Nothing to submit — every module here ships with the core.",
       "file": "modules/hall-ui/public/modules.js",
-      "line": 540,
+      "line": 545,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -18810,7 +18819,7 @@
       "surface": "builders-hall",
       "text": "not measured yet",
       "file": "modules/hall-ui/public/modules.js",
-      "line": 360,
+      "line": 365,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -19129,6 +19138,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "67bf0a6043f4",
+      "surface": "builders-hall",
+      "text": "price coming",
+      "file": "modules/hall-ui/public/modules.js",
+      "line": 348,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "ddda5cb71c36",
       "surface": "builders-hall",
@@ -19485,7 +19503,7 @@
       "surface": "builders-hall",
       "text": "strong at {…}",
       "file": "modules/hall-ui/public/modules.js",
-      "line": 349,
+      "line": 354,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -20124,7 +20142,7 @@
       "surface": "builders-hall",
       "text": "weak at {…}",
       "file": "modules/hall-ui/public/modules.js",
-      "line": 351,
+      "line": 356,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -20790,7 +20808,7 @@
       "surface": "builders-hall",
       "text": "{…} {…} — how-to",
       "file": "modules/hall-ui/public/modules.js",
-      "line": 655,
+      "line": 660,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -20871,7 +20889,7 @@
       "surface": "builders-hall",
       "text": "{…} — how to use it",
       "file": "modules/hall-ui/public/modules.js",
-      "line": 657,
+      "line": 662,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -20997,7 +21015,7 @@
       "surface": "builders-hall",
       "text": "· version",
       "file": "modules/hall-ui/public/modules.js",
-      "line": 660,
+      "line": 665,
       "origin": "js-markup",
       "confidence": "certain"
     },

package/docs/module-api-changelog.md

@@ -3274,5 +3274,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.24.6 with no explicit bump. run 41030210485. (task 1002620)
   1.24.8 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.24.7 with no explicit bump. run 41031365595. (task 1002620)
+  1.24.9 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.24.8 with no explicit bump. run 41035048464. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/docs/modules-contract.md

@@ -176,7 +176,7 @@ closed on every unknown, including a ledger read it cannot complete.
 
 **Attribution (`author`/`origin`/`license`/`maintainer`) is portable metadata, not a cross-Bongos link** — each repo runs its own Bongos with its own builder identities ([ADR 0100](adr/0100-two-repo-instance-model.md) §3), so credit travels *with the module* rather than through a foreign key ([ADR 0107](adr/0107-module-upstreaming-contribution-to-core-catalog.md) §2). `bongos module new` stamps all four as TODO placeholders (license defaults to `AGPL-3.0`) so a module carries its authorship from the day it's scaffolded, not bolted on later at upstream-submit time.
 
-**`bongos module store [--sort <part>] [--max-cents N] [--max-credits N] [--json]`** (task 1003811) is the **store** from the terminal: what the catalog lists, in its order — listed modules ranked, then New ones, unranked — with each module's score, price and place (parent, and sub-category once approved). It asks `GET /store/modules`, the same read the hall's "In the store" group makes, and filters, ranks and caps nothing itself: the quality floor, the ranking and the cap of ten per sub-category live only in `src/bongos/module-listing.js`, so the hall and the terminal cannot disagree about which modules are the best. `tests/module_store_cli.mjs` sends the same queries through the API and the CLI and requires the same modules in the same order.
+**`bongos module store [--sort <part>] [--max-cents N] [--json]`** (task 1003811) is the **store** from the terminal: what the catalog lists, in its order — listed modules ranked, then New ones, unranked — with each module's score, price and place (parent, and sub-category once approved). It asks `GET /store/modules`, the same read the hall's "In the store" group makes, and filters, ranks and caps nothing itself: the quality floor, the ranking and the cap of ten per sub-category live only in `src/bongos/module-listing.js`, so the hall and the terminal cannot disagree about which modules are the best. `tests/module_store_cli.mjs` sends the same queries through the API and the CLI and requires the same modules in the same order.
 
 **`bongos module list [--catalog] [--search <text>] [--json]`** ([ADR 0107](adr/0107-module-upstreaming-contribution-to-core-catalog.md) §2/§3, [ADR 0167](adr/0167-module-catalog-source-vs-provenance.md)) is the browsable catalog from the terminal: every module on disk with its enabled state, its author + origin credit, and its upkeep posture. `--catalog` narrows to the **core-shipped** modules — the shared catalog an instance opts into (§6, default-off). Two axes travel on each row and they are *not* the same question: **`source`** (which tree ships it — the core package or this instance's own repo, read structurally from the loader's discovery root, [ADR 0108](adr/0108-instance-composition-configurable-root.md) §1) and **`provenance`** (who built it, derived from the declared `origin`). A core module that declares no attribution is credited to the platform and the credit is **marked inferred** (`*`) rather than left blank or silently invented. The hall's Modules tab renders the same model (`src/module-loader/catalog.js`) via `GET /modules`, so the two surfaces cannot drift.
 
@@ -400,8 +400,8 @@ Run `bongos upgrade` to confirm coreVersion compatibility, then `node scripts/bo
 - **Tester feedback** (task 1003806, ADR 0344 D5). While a version is on the tester channel, what tester projects report about it becomes its Tester feedback part: the share of testers whose install worked and who hit no runtime errors, blended with ten neutral testers so a small sample cannot score high — `round(100 × (went well + 5) / (testers + 10))`. Reports from after the version left the tester channel, and the author's own, never count; under 3 testers it is not scored yet. The rule is `assessTesterFeedback` in `scripts/bongos/module-assess-installs.js`.
 - **What a module is strong and weak at** (task 1003799, ADR 0343 D4). Each catalog entry also carries `parts` (the current result of Tests, Clean installs, Reliability, Tester feedback and How-to) and a reading of them: `strengths` (a part scored **80 or more**), `weaknesses` (a part scored **below the floor**) and `unmeasured` (a part with no score yet, which is never counted as weak). Each strength and weakness has a one-sentence `detail` saying what the number rests on. Security is not among them: every listed version has passed it. The reading is `readParts` in `src/bongos/module-listing.js`; the hall's Modules tab shows it in its "In the store" group, so two modules with the same overall score can be told apart.
 - **Sorting by a part** (task 1003800). `GET /store/modules?sort=<part>` orders the listed modules by one part a buyer cares about: `tests`, `install`, `reliability`, `tester_feedback` or `docs` (the response lists them as `sort_parts`, and says which one it applied as `sort`). Modules with a score for that part come first, highest first; a tie goes to the higher overall score, then the module key. A module with no score for that part goes last, so missing data never wins or loses a place on its own. New modules are not sorted: they are never ranked. Any other `sort` value is refused with a 400. Without `sort`, the listed modules are in the ranking below; New stays in key order. The rule is `sortByPart` in `src/bongos/module-listing.js`.
-- **Setting a price** (task 1004894). A module's author sets its price with `bongos module price <key> [--cents N] [--credits N]` (or the same two flags on `bongos module publish`, which sets the price right after the upload), or `POST /store/modules/:key/price { cents?, credits? }` (the `module.submit` permission, the same one that publishes, and only the author passes; a delisted module takes no new price). Each amount is a whole number of 0 or more, or null for "not offered in that currency"; at least one is given, and 0 in either makes the module free. Every change appends a row to the price history (in one transaction, the module row locked) naming who set it and when, so the history is the audit of what each price replaced, and the newest is current: it is what the catalog shows and what acquire charges. A paid price may be set before buying exists (owner, 2026-10-26): the catalog lists the module with its price and `buyable: false`, `bongos module store` prints it as not yet buyable, and acquire keeps refusing it without an entitlement. When buying ships (task 1003788), `BUYING_OPEN` in `src/bongos/module-listing.js` is the one switch to flip. Price is never an input to the score (ADR 0343 D6).
-- **The ranking, and a maximum price** (task 1003808, owner decision 2026-10-23). Without `sort`, listed modules are ranked **quality first**: highest overall score first; between equal scores, free modules first, then the lowest cash price, then the lowest credit price, then the module key. Price never buys a better place, it only orders modules the score could not tell apart (and it is never an input to the score, ADR 0343 D6). The response states the rule as `ranking`, and each entry carries its current `price` (`cents`, `credits`, `free`). A buyer may add `?max_cents=` and/or `?max_credits=` (whole numbers, 0 or more): modules that cost more are left out of both lists, free modules always stay, and a priced module stays when it is offered at or under a cap the buyer set. The applied caps come back as `max_price`. The rules are `rankListed` and `withinMaxPrice` in `src/bongos/module-listing.js`.
+- **Setting a price** (task 1004894; cash only since task 1004989). A module's author sets its price with `bongos module price <key> --cents N` (or `--cents N` on `bongos module publish`, which sets the price right after the upload), or `POST /store/modules/:key/price { cents }` (the `module.submit` permission, the same one that publishes, and only the author passes; a delisted module takes no new price). The amount is a whole number of cents, 0 or more; 0 makes the module free. **Credits never price or buy a module** ([ADR 0385](adr/0385-money-lives-with-a-processor-credits-stay-a-project-meter.md) decision 2): the route refuses a `credits` field by name (`credit_price_refused`), the CLI refuses `--credits`, and `migrations/core_287_module_prices_cash_only.sql` refuses `price_credits` on any new row in the database (NOT VALID, so the old rows stay readable). An old row priced only in credits reads as **price coming** (`price.coming: true`): the module stays listed, is never buyable with credits, and its author sees `price_prompt` on `GET /store/modules/:key/listing` asking for a cash price (owner, 2026-10-29). An old row that offered the module at 0 credits stays free, as it was. Every change appends a row to the price history (in one transaction, the module row locked) naming who set it and when, so the history is the audit of what each price replaced, and the newest is current: it is what the catalog shows and what acquire charges. A paid price may be set before buying exists (owner, 2026-10-26): the catalog lists the module with its price and `buyable: false`, `bongos module store` prints it as not yet buyable, and acquire keeps refusing it without an entitlement. When buying ships (task 1003788), `BUYING_OPEN` in `src/bongos/module-listing.js` is the one switch to flip; a price-coming module stays unbuyable even then. Price is never an input to the score (ADR 0343 D6).
+- **The ranking, and a maximum price** (task 1003808, owner decision 2026-10-23). Without `sort`, listed modules are ranked **quality first**: highest overall score first; between equal scores, free modules first, then the lowest cash price, a price still coming last, then the module key. Price never buys a better place, it only orders modules the score could not tell apart (and it is never an input to the score, ADR 0343 D6). The response states the rule as `ranking`, and each entry carries its current `price` (`cents`, `free`, `coming`) — never a credit amount. A buyer may add `?max_cents=` (a whole number, 0 or more): modules that cost more are left out of both lists, free modules always stay, and a module whose price is still coming has no cash price to compare, so a cap leaves it out. There is no credit cap; `?max_credits=` is refused. The applied cap comes back as `max_price`. The rules are `rankListed` and `withinMaxPrice` in `src/bongos/module-listing.js`.
 - **The cap: at most ten per sub-category** (task 1003809, [ADR 0342](adr/0342-module-categories-are-eight-parents-with-approved-sub-categories.md) D2). Above the floor, at most **ten** modules are listed in each approved sub-category: the first ten in the ranking above, so a buyer's `sort` or maximum price reorders or narrows those ten but never lets the eleventh in. The cap is never applied to a parent. A module whose sub-category is only proposed is listed under its parent and counts toward no cap, and a New module is not ranked, so it neither takes a slot nor is held by one. The catalog returns the cap as `cap`. The rule is `applyCap` in `src/bongos/module-listing.js`.
 - **Why a module is not listed** (task 1003810). `GET /store/modules/:key/listing` says where one module stands, judging the same newest version the catalog does: `listed` (true or false), a `reason` (`not_assessed`, `security_not_passed`, `no_score`, `below_floor`, `delisted`, `no_version`, `over_cap`, `new` or `at_or_above_floor`), `why` in a sentence and `next_step` saying what would change it. A failed Security gate is told apart from one that has not finished, and names what it found to the module's author only (to anyone else it would point at a weakness not fixed yet); below the floor names the score, the floor and the weakest parts. It carries the same `parts`, `strengths`, `weaknesses` and `unmeasured` as the catalog, plus `security`. Any signed-in builder can read it. Past the cap it is `over_cap`, which names the score, the module's place in its sub-category and the cap, so an author can tell being eleventh apart from being below the floor. Both responses carry the module's `category` (`parent`, `parent_title`, and `sub` and `label` once its sub-category is approved). The rule is `explainPlacement` in `src/bongos/module-listing.js`.
 - **Sub-categories are approved before they count** (task 1004355, ADR 0342 D3). A module names `category: { parent, sub }` in `module.json`; `GET /store/subcategories` lists the approved ones under each of the eight parents. A `sub` the store has not seen under that parent is **proposed** at publish (labelled from its key) and the publish answer's `category` says so (`status: "proposed"`, `live: false`): until a Metic+ person decides, the module sits under its parent only and counts toward no cap. The review queue (`GET /store/subcategories/queue`, atom `module.subcategory.review`, metic + archon via `government_033`) shows each proposal with the modules that named it and its near-duplicate names; `POST /store/subcategories/:id/approve { label?, sub_key? }` makes it live, renamed first if asked (a rename onto an existing key is refused — merge instead), and `POST /store/subcategories/:id/merge { into }` folds it into an approved one and moves its modules there. A later publish naming a merged key lands on its target. Where a module sits is `store_module_categories` (core_278), apart from the manifest; `readModuleCategories` in `src/bongos/module-subcategories.js` is the read the cap uses.