@bongos/core 1.19.152 → 1.19.153

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.152",
-  "core_contract": "1.19.152",
-  "source_commit": "57dc9f163cb5625cf780805c8beca257e40771a9",
+  "core_version": "1.19.153",
+  "core_contract": "1.19.153",
+  "source_commit": "1c17819c21e41fd19e87ef09db8074217573cfbc",
   "source_ref": "HEAD",
-  "built_at": "2026-08-16T15:32:33.424Z",
+  "built_at": "2026-08-16T15:45:14.904Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 304,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 1579,
-  "tree_sha256": "08344ee3c5fade79cafd7d56d0de9e5a08d542c27b67e1c7362213fb51fe6eb1",
+  "tree_sha256": "37dfe72cba7625d785b1ef4871d14fa1d8427c10d27429fd2fe7bccfe4eb492f",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -4187,12 +4187,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "bd55eac572b5c23a50a7e53328e42984a7b5f14a62bbe038648792c6ddf6b92f"
+      "sha256": "b4eb6ecd20ea8082543a6cc794599b8c4fa46fc6ba15b90823fd8ad98305de05"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "e04229a40fcabca2604e6eec41b7b3c6a1c393701f2191f85b12bce1ac19faa1"
+      "sha256": "36635f9e27784771de1f3630b1a8d304e66cdba1be334a1aeefdf0bdba6f1584"
     },
     {
       "path": "public-docs/index.html",
@@ -5032,7 +5032,7 @@
     {
       "path": "scripts/gds/newcomer-floor.templates.json",
       "mode": "0000644",
-      "sha256": "84abea5b31457611ed8fa27d33e492d513535ba373f47ba1144c06a56923d1d0"
+      "sha256": "71aea42030aaba504d29841b67de74e2c7c58d62d3a2cfc90996734e35c4236b"
     },
     {
       "path": "scripts/gds/newcomer-floor.test.js",
@@ -5782,7 +5782,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "31253b17c39aa10433fe72daffaf8e1591082cb5d8bbac470957be0b2aea125f"
+      "sha256": "1be644246d1a0e4b152aecd23ce219d4315c5aca5b911b5b4ca7738ac92d9bcf"
     },
     {
       "path": "src/module-loader/catalog.js",

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.152",
+  "version": "1.19.153",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.152",
+      "version": "1.19.153",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.152",
+  "version": "1.19.153",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/scripts/gds/newcomer-floor.templates.json

@@ -1,9 +1,9 @@
 {
-  "_doc": "The evergreen newcomer chores, grouped BY DISCIPLINE. Each discipline maps to a LIST of chore templates (was a single object before task 1488 — a discipline can now offer several first-builder chores so newcomers are not funnelled into one). The deterministic replenisher (scripts/gds/newcomer-floor.js) and the on-claim restock (modules/onboarding/newcomer-restock.js) stamp disposable claimable COPIES from each template; the TEMPLATE is never claimed and never ships. Each copy's source_ref is tmpl:<discipline>:<template_id>:<seq> (monotonic), so identical-title copies never collide with the dedup. Per-template `floor` sets that chore’s standing pool depth; if a template omits it, the discipline default in newcomer-floor.config.json applies. credits_reward, est_minutes and floor all live here (per chore). version_id is per-template so each chore lands on the correct track (engineer=internal GDS-V4, artist+ideator=product V2); it MUST point at an open (non-shipped) version — update it at version close. touches[] is intentionally empty so multiple same-discipline newcomers can claim copies concurrently; git-merge is the real collision detector. To ADD a chore: append an entry to the discipline's array. To CHANGE one: edit it here — no code change needed. Engineer offers a SAFE coding chore (add a unit test — touches only tests/, which auto-ships) and the docs-hygiene sweep (constrained to non-protected docs so a sub-Metic ship does not stall on the authority core).",
+  "_doc": "The evergreen newcomer chores, grouped BY DISCIPLINE. Each discipline maps to a LIST of chore templates (was a single object before task 1488 — a discipline can now offer several first-builder chores so newcomers are not funnelled into one). The deterministic replenisher (scripts/gds/newcomer-floor.js) and the on-claim restock (modules/onboarding/newcomer-restock.js) stamp disposable claimable COPIES from each template; the TEMPLATE is never claimed and never ships. Each copy's source_ref is tmpl:<discipline>:<template_id>:<seq> (monotonic), so identical-title copies never collide with the dedup. Per-template `floor` sets that chore’s standing pool depth; if a template omits it, the discipline default in newcomer-floor.config.json applies. credits_reward, est_minutes and floor all live here (per chore). version_id is per-template so each chore lands on the correct track; it MUST point at an open (non-shipped) version — update it at version close, or the replenisher's open-version guard refuses to stamp and the floor silently stops refilling (task 1002958: the engineer pins still read the long-shipped GDS-V4 and artist+ideator read V2, a version this ladder never had, so NO discipline could restock). touches[] is intentionally empty so multiple same-discipline newcomers can claim copies concurrently; git-merge is the real collision detector. To ADD a chore: append an entry to the discipline's array. To CHANGE one: edit it here — no code change needed. Engineer offers a SAFE coding chore (add a unit test — touches only tests/, which auto-ships) and the docs-hygiene sweep (constrained to non-protected docs so a sub-Metic ship does not stall on the authority core).",
   "engineer": [
     {
       "template_id": "unit-test-pass",
-      "version_id": "GDS-V4",
+      "version_id": "BONGOS-V1",
       "discipline": "engineer",
       "kind": "feature",
       "est_minutes": 45,
@@ -22,7 +22,7 @@
     },
     {
       "template_id": "docs-hygiene-pass",
-      "version_id": "GDS-V4",
+      "version_id": "BONGOS-V1",
       "discipline": "engineer",
       "kind": "cleanup",
       "est_minutes": 40,
@@ -43,7 +43,7 @@
   "artist": [
     {
       "template_id": "asset-generate-pass",
-      "version_id": "V2",
+      "version_id": "BONGOS-V1",
       "discipline": "artist",
       "kind": "feature",
       "est_minutes": 55,
@@ -64,7 +64,7 @@
   "ideator": [
     {
       "template_id": "idea-seed-pass",
-      "version_id": "V2",
+      "version_id": "BONGOS-V1",
       "discipline": "ideator",
       "kind": "feature",
       "est_minutes": 45,

package/src/module-api.js

@@ -731,8 +731,10 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 //         landed since 1.19.150 with no explicit bump. run 31953827282. (task 1002620)
 //   1.19.152 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
 //         landed since 1.19.151 with no explicit bump. run 31955923444. (task 1002620)
+//   1.19.153 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.152 with no explicit bump. run 31956560292. (task 1002620)
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.152'; // CI auto-patch carrier (ADR 0161); see changelog above
+const CORE_VERSION = '1.19.153'; // CI auto-patch carrier (ADR 0161); see changelog above
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');