@bongos/core 1.19.202 → 1.19.203

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.202",
-  "core_contract": "1.19.202",
-  "source_commit": "241b029c800ce3bdb38f7d581e44d95d27656007",
+  "core_version": "1.19.203",
+  "core_contract": "1.19.203",
+  "source_commit": "3596d383ae4955438fc6ab7f9599e680ddafb570",
   "source_ref": "HEAD",
-  "built_at": "2026-08-17T19:15:32.076Z",
+  "built_at": "2026-08-17T19:20:16.116Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 310,
     "agent_docs_stubbed": 21,
-    "functional_verbatim": 1294,
+    "functional_verbatim": 1295,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 1625,
-  "tree_sha256": "d0af1afec31904ff2d8c0ba6a68c5960c6b333ef65c66938843f2a7bd681f4f0",
+  "file_count": 1626,
+  "tree_sha256": "d4a2fd8d4540f54177859f2312a5a48c6539b34b12e1e61757d0b242f92be615",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -4272,12 +4272,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "28f5946694aefef1201397cdb8962d38b2b1d5d0904ef6f76b5b1591f0f6a2e8"
+      "sha256": "30f113e605eea7d404a3393045402c6234a6822724656d0830a5a553a6215fac"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "cbf3b235c2ed444a8bf84a0719df6fbe81f8ad98dcbbf5eaf3740338af1e53a3"
+      "sha256": "fa8341a0a90d43e710d3f9e04589ce7f055c8f180cf915f28fa074b0b9206977"
     },
     {
       "path": "public-docs/index.html",
@@ -4727,7 +4727,7 @@
     {
       "path": "scripts/gds/capture.js",
       "mode": "0000644",
-      "sha256": "63eb148a4a8ec5c511e1c9d23b0178b357c295227e0c748a5e9e7e3f3959ef93"
+      "sha256": "208bfd6c6a73f4234c06bb26e3319ec43ecf865927333bc810ca99efa9745e90"
     },
     {
       "path": "scripts/gds/cf-tunnel.js",
@@ -5887,7 +5887,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "2cd85c33fc8008eec96025eeaaa528590157902642653819bf20b580e1d031a5"
+      "sha256": "f5b425d9be5b552f40d72f31cd96dbcb901b15478ed7a60a35221aaeb09b4fb7"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -6289,6 +6289,11 @@
       "mode": "0000644",
       "sha256": "5cd314c415b3e4e0b89a762cd622d9b0eb58e3659df76e78c816ca501368febf"
     },
+    {
+      "path": "tests/capture_error_format.mjs",
+      "mode": "0000644",
+      "sha256": "bf8b5407d5e1234a74399f3a1e80acc44f9fabdfcfbccc3d64ca57d66f8e3085"
+    },
     {
       "path": "tests/cascade-dispatch.mjs",
       "mode": "0000644",

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.202",
+  "version": "1.19.203",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.202",
+      "version": "1.19.203",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.202",
+  "version": "1.19.203",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/scripts/gds/capture.js

@@ -47,6 +47,18 @@ async function resolveDefaultVersion() {
   return building[0].id;
 }
 
+// Full JSON, not console.error's depth-2 inspect — a validation 400's nested
+// details otherwise print as "[ [Object] ]" and hide which field failed.
+function formatCaptureFailure(status, data) {
+  let rendered;
+  try {
+    rendered = JSON.stringify(data, null, 2);
+  } catch {
+    rendered = String(data);
+  }
+  return `capture failed (${status}): ${rendered}`;
+}
+
 async function main() {
   await requireSession();
   const args = process.argv.slice(2);
@@ -94,7 +106,7 @@ async function main() {
   const api = await cliClient();
   const r = await api.inbox.postInbox({ body: payload });
   if (!r.ok) {
-    console.error(`capture failed (${r.status}):`, r.data);
+    console.error(formatCaptureFailure(r.status, r.data));
     process.exit(1);
   }
 
@@ -115,6 +127,8 @@ async function main() {
   // referred to; promotion to a task re-runs the detection automatically.
 }
 
+module.exports = { resolveDefaultVersion, formatCaptureFailure };
+
 if (require.main === module) {
   main().catch((err) => {
     console.error('fatal:', err);

package/src/module-api.js

@@ -831,8 +831,10 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 //         landed since 1.19.200 with no explicit bump. run 32058666256. (task 1002620)
 //   1.19.202 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
 //         landed since 1.19.201 with no explicit bump. run 32059276345. (task 1002620)
+//   1.19.203 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.202 with no explicit bump. run 32059705946. (task 1002620)
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.202'; // CI auto-patch carrier (ADR 0161); see changelog above
+const CORE_VERSION = '1.19.203'; // CI auto-patch carrier (ADR 0161); see changelog above
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/capture_error_format.mjs

@@ -0,0 +1,40 @@
+// capture.js error formatting (task 1003056, idea 1000780): a 400 from POST
+// /inbox must print the nested validation details, not util.inspect's
+// depth-clipped "[ [Object] ]" — the caller needs to see WHICH field failed.
+import assert from 'node:assert/strict';
+import { createRequire } from 'node:module';
+
+const require = createRequire(import.meta.url);
+const { formatCaptureFailure } = require('../scripts/gds/capture.js');
+
+let passed = 0;
+let failed = 0;
+async function test(name, fn) {
+  try { await fn(); passed++; console.log(`  ok  ${name}`); }
+  catch (err) { failed++; console.log(`  FAIL ${name}`); console.log(`     ${err.stack || err.message}`); }
+}
+
+await test('nested validation details are fully rendered, never [Object]', () => {
+  const out = formatCaptureFailure(400, {
+    error: {
+      code: 'validation_failed',
+      message: 'validation_failed',
+      details: [{ field: 'title', reason: 'exceeds max length 200' }],
+    },
+  });
+  assert.match(out, /capture failed \(400\)/);
+  assert.match(out, /exceeds max length 200/);
+  assert.match(out, /"field": "title"/);
+  assert.doesNotMatch(out, /\[Object\]/);
+});
+
+await test('non-JSON-serializable data still produces a printable line', () => {
+  const circular = {};
+  circular.self = circular;
+  const out = formatCaptureFailure(500, circular);
+  assert.match(out, /capture failed \(500\)/);
+  assert.equal(typeof out, 'string');
+});
+
+console.log(`\ncapture_error_format: ${passed} passed, ${failed} failed`);
+if (failed > 0) process.exit(1);