@bongos/core 1.19.293 → 1.19.295

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.293",
-  "core_contract": "1.19.293",
-  "source_commit": "d37d65e03910c166c3a3af9827ffa2a2d8f8a204",
+  "core_version": "1.19.295",
+  "core_contract": "1.19.295",
+  "source_commit": "a9c6feaf0d724e69e2c74fae890f66887a1f6052",
   "source_ref": "HEAD",
-  "built_at": "2026-08-22T16:56:18.512Z",
+  "built_at": "2026-08-22T18:22:26.661Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 321,
     "agent_docs_stubbed": 22,
-    "functional_verbatim": 1393,
+    "functional_verbatim": 1397,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 1736,
-  "tree_sha256": "a7ed89984671394923e64db2b93e69efd81ef112f856a58f58009bf4bc0c4b1d",
+  "file_count": 1740,
+  "tree_sha256": "0d0f553d620644b95da343b98d6a1bb50e5e934ea015e43de5f7630c1d505842",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -347,12 +347,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "aaf0bb7dae10d271e9999093935fef5ae8d85c3a2e3d5b4c52e0c11fed8c581e"
+      "sha256": "c5008815c70e20b7bbc49668082bd6886f1ac406d948a4d27f5f9fd4ff70188e"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "372a5584ddad52fb524815fc7b50d1aab9163e974aac6f2c64f479e4034914a1"
+      "sha256": "91cc8b99c22e82ef7bbcb93f4b1596e88d772bc50f1baafdd373c8fe0e9c8ce5"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -362,17 +362,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "7faac7fc48e714c76c2b19feaaf9c730b2c9b10ab71ddc5697c21497d02f10ef"
+      "sha256": "a7cd2351a67f71cf889601718f792b299bbbf663c62d0fbdb43babc83a83b8ba"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "7aba0fe1d782cb6308f57dc2e5f6fe0d5ffe0f537d4ffe846bdc7a03e0f8064d"
+      "sha256": "57dc78f1c14c72595b1efe6b269161732be2e84caa7823ebd82f045e26e4d76f"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "5f1d221bfbf8d329f883a5dc3e84414728c67201d66faceff04d48732e44b13c"
+      "sha256": "a077e8810feaa0efbfe25234b4153db206089deaed9071b45c2ae2f42f06fdaa"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -1412,12 +1412,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "8fb83f272ef8810df2c517d9514495f44016da2e23cdd67937463f40c0d1605d"
+      "sha256": "d501dff7e10bbb0cee28717f652c26fca962f8f756a98b3be6ff7f361a92d967"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "f51be43a281c9609980fca57d2fa11cafb460a414e506174715d53c08cef6965"
+      "sha256": "ebef1d04e8bc3e299c24a6113b2bc0ec43a92a0e93ff60fc801087bbdbb08fab"
     },
     {
       "path": "docs/architecture.md",
@@ -1552,7 +1552,7 @@
     {
       "path": "docs/file-map.md",
       "mode": "0000644",
-      "sha256": "9762b7f69397c28e103cdb39a9987483e23bd800a827f0d83983b62ef962616b"
+      "sha256": "a1c109f23cb4916b89bbc5ba522ebee6413bcb812569a30cbc1e0a7a00f8e9bc"
     },
     {
       "path": "docs/handoff-template.md",
@@ -2807,7 +2807,7 @@
     {
       "path": "modules/dev-box/app/src/vendor/bongos-client.cjs",
       "mode": "0000644",
-      "sha256": "7faac7fc48e714c76c2b19feaaf9c730b2c9b10ab71ddc5697c21497d02f10ef"
+      "sha256": "a7cd2351a67f71cf889601718f792b299bbbf663c62d0fbdb43babc83a83b8ba"
     },
     {
       "path": "modules/dev-box/app/test/unit.mjs",
@@ -3742,7 +3742,7 @@
     {
       "path": "modules/ideas/routes/inbox.js",
       "mode": "0000644",
-      "sha256": "47c2a3beb6bed3b206ec36344950fe115189debf75a38cf202bfafaa5dbb2adb"
+      "sha256": "8b832303a87a6caf9fd4f7779967576bb615bcb893640171beeef175c8783174"
     },
     {
       "path": "modules/ideas/routing.js",
@@ -4537,12 +4537,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "090cb33345196e3e3d42d1d6b81a591095b1f3c622becfff8e1eed4ce3f0577f"
+      "sha256": "930aad90fce5c0ac0d66ec5e44c4948f3b704a790037b9b4856fe4a022e9a08f"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "78db3e19a56e9aa909f0fa6314315c2cec90439bb3cc82111b974937d05f3fb2"
+      "sha256": "cbd88d46d805881d4eb8cb4f35b34b77bb1d0b22be90682bc8cd47699b445a58"
     },
     {
       "path": "public-docs/index.html",
@@ -5779,6 +5779,11 @@
       "mode": "0000644",
       "sha256": "9c3a382def8c074a37bad66d7e3deef41c7f2bb9406f02f107be0e9a7dc7bfb3"
     },
+    {
+      "path": "scripts/gds/spark.js",
+      "mode": "0000755",
+      "sha256": "27a98a84ad1682bc9d17286c675fb75d14e2ff529d7ce43f848f54a631ee99bc"
+    },
     {
       "path": "scripts/gds/start.js",
       "mode": "0000644",
@@ -5789,6 +5794,11 @@
       "mode": "0000644",
       "sha256": "5cc69c5f3301912325aa48481e63141523ad75241f021e0e8f1a6dc592048bdd"
     },
+    {
+      "path": "scripts/gds/strand-watch.js",
+      "mode": "0000644",
+      "sha256": "abcf87286fa3b3be81c18e5927495f64c140322a83223c4dc673d8325c08121f"
+    },
     {
       "path": "scripts/gds/task.js",
       "mode": "0000644",
@@ -6052,7 +6062,7 @@
     {
       "path": "src/bongos/route-rank-check.js",
       "mode": "0000644",
-      "sha256": "97b8345a1d891151c3bc134926124a0ac929db661e0cfb26c6760c8c6030bafc"
+      "sha256": "f2d893e0de84433cc99411e59aba98c1ca392fa8d5bd24449e1e9200f06d9ff8"
     },
     {
       "path": "src/bongos/routes.js",
@@ -6187,7 +6197,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "d9155f571379dfbb8e352671aad7a062e52027b225fe615d61a18c1452dde5a0"
+      "sha256": "e7b52e29073dcbe62ed6c069753c22f9c7cf3a69cf8987bc2f91a7b4b9571d99"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -7504,6 +7514,11 @@
       "mode": "0000644",
       "sha256": "7bea2d388fad9a6b186c4712d6921a554f1d24c70dcae5760b381782149068e7"
     },
+    {
+      "path": "tests/idea_spark_mark.mjs",
+      "mode": "0000644",
+      "sha256": "fb5af0aa1b34116114a1c734c548cafaa52eefda57bd145c0008995bc69addee"
+    },
     {
       "path": "tests/idea_task_lineage.mjs",
       "mode": "0000644",
@@ -8534,6 +8549,11 @@
       "mode": "0000644",
       "sha256": "2ddc5ada648e7eabb41d3ae0afd39f885f3840c8ec14483f83330e8eade11330"
     },
+    {
+      "path": "tests/strand_watch.mjs",
+      "mode": "0000644",
+      "sha256": "bba2bde5b7a4a25ccddff58fb2fde0ef84ef67224e63819232221a461234a30f"
+    },
     {
       "path": "tests/streak.mjs",
       "mode": "0000644",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 294 operations across 47 resource groups
+- 296 operations across 47 resource groups
 
 ## Install
 

package/clients/bongos-client/bongos-client.global.js

@@ -409,6 +409,10 @@ function createClient(opts = {}) {
       postInboxIdRatify: (args) => request("POST", "/inbox/{id}/ratify", { hasBody: true }, args),
       // POST /inbox/{id}/resubmit — rank: any-builder — POST /inbox/:id/resubmit
       postInboxIdResubmit: (args) => request("POST", "/inbox/{id}/resubmit", { hasBody: true }, args),
+      // DELETE /inbox/{id}/spark — rank: any-builder — DELETE /inbox/:id/spark
+      deleteInboxIdSpark: (args) => request("DELETE", "/inbox/{id}/spark", { hasBody: false }, args),
+      // POST /inbox/{id}/spark — rank: any-builder — POST /inbox/:id/spark
+      postInboxIdSpark: (args) => request("POST", "/inbox/{id}/spark", { hasBody: true }, args),
       // GET /inbox/awaiting-nod — rank: metic+archon — GET /inbox/awaiting-nod
       getInboxAwaitingNod: (args) => request("GET", "/inbox/awaiting-nod", { hasBody: false }, args),
     },

package/clients/bongos-client/index.cjs

@@ -408,6 +408,10 @@ function createClient(opts = {}) {
       postInboxIdRatify: (args) => request("POST", "/inbox/{id}/ratify", { hasBody: true }, args),
       // POST /inbox/{id}/resubmit — rank: any-builder — POST /inbox/:id/resubmit
       postInboxIdResubmit: (args) => request("POST", "/inbox/{id}/resubmit", { hasBody: true }, args),
+      // DELETE /inbox/{id}/spark — rank: any-builder — DELETE /inbox/:id/spark
+      deleteInboxIdSpark: (args) => request("DELETE", "/inbox/{id}/spark", { hasBody: false }, args),
+      // POST /inbox/{id}/spark — rank: any-builder — POST /inbox/:id/spark
+      postInboxIdSpark: (args) => request("POST", "/inbox/{id}/spark", { hasBody: true }, args),
       // GET /inbox/awaiting-nod — rank: metic+archon — GET /inbox/awaiting-nod
       getInboxAwaitingNod: (args) => request("GET", "/inbox/awaiting-nod", { hasBody: false }, args),
     },

package/clients/bongos-client/index.d.ts

@@ -9,6 +9,7 @@ export interface DeleteBoxSshKeyIdResponse { ok: boolean; deleted: unknown }
 export interface DeleteDependenciesResponse { ok: boolean }
 export interface DeleteGovernmentAssignmentsBuilderIdRankKeyResponse { ok: boolean; builder_id: unknown; rank_key: unknown; removed: unknown }
 export interface DeleteGovernmentRanksRankKeyPermissionsPermissionKeyResponse { ok: boolean; rank_key: unknown; permission_key: unknown; removed: unknown }
+export interface DeleteInboxIdSparkResponse { idea: unknown; sparked: boolean; unchanged: boolean }
 export interface DeleteMemoryFileResponse { deleted: boolean; builder_id: unknown; path: unknown }
 export interface DeleteTasksIdCriteriaCriterionIdResponse { ok: boolean; removed: unknown }
 export interface DeleteTasksIdDependenciesDepIdResponse { ok: boolean; removed: unknown }
@@ -246,6 +247,7 @@ export interface PostGovernmentRanksRequest { rank_key: string; label: string; d
 export interface PostGovernmentRanksResponse { rank: unknown }
 export interface PostInboxIdRatifyRequest { notes_md?: string }
 export interface PostInboxIdResubmitRequest { field_values: Record<string, unknown>; template_key?: string }
+export interface PostInboxIdSparkResponse { idea: unknown; sparked: boolean; unchanged: boolean }
 export interface PostInboxRequest { title: string; body_md?: string; kind?: string; suggested_version?: string; suggested_priority?: number; goal_id?: number; grade?: string; template_key?: string; field_values?: Record<string, unknown> }
 export interface PostLearningsRequest { title: string; body_md: string; tags?: string[]; related_files?: string[]; source?: string; source_ref?: string; task_id?: number }
 export interface PostLearningsResponse { skipped?: boolean; reason?: unknown; learning?: unknown }
@@ -669,6 +671,10 @@ export interface BongosClient {
     postInboxIdRatify(args?: RequestArgs & { body?: PostInboxIdRatifyRequest }): Promise<ApiResponse>;
     /** POST /inbox/{id}/resubmit — rank: any-builder */
     postInboxIdResubmit(args: RequestArgs & { body: PostInboxIdResubmitRequest }): Promise<ApiResponse>;
+    /** DELETE /inbox/{id}/spark — rank: any-builder */
+    deleteInboxIdSpark(args?: RequestArgs): Promise<DeleteInboxIdSparkResponse>;
+    /** POST /inbox/{id}/spark — rank: any-builder */
+    postInboxIdSpark(args?: RequestArgs): Promise<PostInboxIdSparkResponse>;
     /** GET /inbox/awaiting-nod — rank: metic+archon */
     getInboxAwaitingNod(args?: RequestArgs): Promise<GetInboxAwaitingNodResponse>;
   };

package/clients/bongos-client/index.mjs

@@ -405,6 +405,10 @@ export function createClient(opts = {}) {
       postInboxIdRatify: (args) => request("POST", "/inbox/{id}/ratify", { hasBody: true }, args),
       // POST /inbox/{id}/resubmit — rank: any-builder — POST /inbox/:id/resubmit
       postInboxIdResubmit: (args) => request("POST", "/inbox/{id}/resubmit", { hasBody: true }, args),
+      // DELETE /inbox/{id}/spark — rank: any-builder — DELETE /inbox/:id/spark
+      deleteInboxIdSpark: (args) => request("DELETE", "/inbox/{id}/spark", { hasBody: false }, args),
+      // POST /inbox/{id}/spark — rank: any-builder — POST /inbox/:id/spark
+      postInboxIdSpark: (args) => request("POST", "/inbox/{id}/spark", { hasBody: true }, args),
       // GET /inbox/awaiting-nod — rank: metic+archon — GET /inbox/awaiting-nod
       getInboxAwaitingNod: (args) => request("GET", "/inbox/awaiting-nod", { hasBody: false }, args),
     },

package/docs/api/openapi.json

@@ -6601,6 +6601,108 @@
         ]
       }
     },
+    "/inbox/{id}/spark": {
+      "post": {
+        "operationId": "post_inbox_id_spark",
+        "tags": [
+          "inbox"
+        ],
+        "summary": "POST /inbox/:id/spark",
+        "description": "Mark a Quick Idea as a Big Idea Spark — \"I have the spark but not the full picture, someone develop this\". AUTHOR-ONLY: the mark is the author's consent to have their idea developed, so only they can set it. A Full Idea is refused (409) and a non-open idea cannot be newly marked; re-marking is a 200 no-op.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/ideas/routes/inbox.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostInboxIdSparkResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      },
+      "delete": {
+        "operationId": "delete_inbox_id_spark",
+        "tags": [
+          "inbox"
+        ],
+        "summary": "DELETE /inbox/:id/spark",
+        "description": "Withdraw the Big Idea Spark mark — the reversibility half of R144. AUTHOR-ONLY like the mark itself, and legal at ANY status so a stale mark on a promoted or discarded idea can always be cleared. Writes an explicit grade='quick' row, which reads identically to no grade row at all. Un-marking a quick idea is a 200 no-op; a Full Idea is refused (409) — it is not a withdrawn spark.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/ideas/routes/inbox.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/DeleteInboxIdSparkResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/instance": {
       "get": {
         "operationId": "get_instance",
@@ -13412,6 +13514,23 @@
           "removed"
         ]
       },
+      "DeleteInboxIdSparkResponse": {
+        "type": "object",
+        "properties": {
+          "idea": {},
+          "sparked": {
+            "type": "boolean"
+          },
+          "unchanged": {
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "idea",
+          "sparked",
+          "unchanged"
+        ]
+      },
       "DeleteMemoryFileResponse": {
         "type": "object",
         "properties": {
@@ -16855,6 +16974,23 @@
         ],
         "additionalProperties": false
       },
+      "PostInboxIdSparkResponse": {
+        "type": "object",
+        "properties": {
+          "idea": {},
+          "sparked": {
+            "type": "boolean"
+          },
+          "unchanged": {
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "idea",
+          "sparked",
+          "unchanged"
+        ]
+      },
       "PostInboxRequest": {
         "type": "object",
         "properties": {
@@ -18571,9 +18707,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 294,
-  "x-schema-count": 327,
+  "x-endpoint-count": 296,
+  "x-schema-count": 329,
   "x-undocumented-bodies": 8,
-  "x-response-schemas": 218,
+  "x-response-schemas": 220,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 294 endpoints across 47 route files.
+> **Generated from the live route files** — the route file is authoritative. 296 endpoints across 47 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -258,7 +258,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 |---|---|---|---|---|
 | GET | `/api/bongos/healthz` | `public` | — | liveness probe; status.example.com hits this anonymously. |
 
-## `inbox` (8)
+## `inbox` (10)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -269,6 +269,8 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | PATCH | `/api/bongos/inbox/:id/body` | `any-builder` | `body_md` | Metic+ (task 360 / ADR 0018): idea triage (promote/discard/merge) shapes the backlog. |
 | POST | `/api/bongos/inbox/:id/ratify` | `metic+archon` | `notes_md` | V3.R31 (task 252) — Archon ratifies a criterion-proposal idea, atomically: - INSERT done_when_criteria row on the target version - UPDATE… |
 | POST | `/api/bongos/inbox/:id/resubmit` | `any-builder` | `field_values`, `template_key` | RESUBMIT a Full Idea after a rejection (R13 of goal 1000069, criterion C2: an idea never dies and never stalls). |
+| POST | `/api/bongos/inbox/:id/spark` | `any-builder` | — | Mark a Quick Idea as a Big Idea Spark — "I have the spark but not the full picture, someone develop this". |
+| DELETE | `/api/bongos/inbox/:id/spark` | `any-builder` | — | Withdraw the Big Idea Spark mark — the reversibility half of R144. |
 | GET | `/api/bongos/inbox/awaiting-nod` | `metic+archon` | — | GET /inbox/awaiting-nod — the NOD QUEUE (task 1003066, BV1.R05). |
 
 ## `instance` (1)

package/docs/file-map.md

@@ -175,6 +175,7 @@
 │       ├── smoke-box.sh         ← (#598) hermetic box-lifecycle smoke (no DB/DO/network): runs tests/boxes.mjs + tests/cf_tunnel.mjs (#771 named tunnel) + route-rank + module-load
 │       ├── recall.js            ← `/recall` CLI: two-call progressive-disclosure search (summary → `--expand <id>`) over Bongos retrieval layer (ADR 0060); `node scripts/gds/recall.js <query>`
 │       ├── capture.js           ← file an idea_inbox row from the CLI (the ideas.capture kernel port); backs the "capture a tangent" flow across skills
+│       ├── spark.js            ← (task 1002920 / R144) mark one of your OWN quick ideas as a Big Idea Spark — "someone develop this"; `--undo` withdraws it. Author-only server-side (the mark is the consent); its own command because sparking acts on an EXISTING idea, which is why capture.js refuses grade='spark'
 │       ├── worktree.js          ← (task 1002809) junction-safe worktree add/remove/list — outside-repo worktrees get a node_modules junction via node (no shell quoting), removed BEFORE `git worktree remove`
 │       ├── learning-capture.js  ← file a `learnings` row (DB-backed short-form rule capture, replacing hand-edited recipe files for a single gotcha)
 │       ├── docs-entropy.js      ← ([#…] docs-entropy) markdown-corpus linter: broken internal links + cross-file duplicate-prose detector across every tracked `.md`; `--verbose` / `--file-ideas`

package/modules/dev-box/app/src/vendor/bongos-client.cjs

@@ -408,6 +408,10 @@ function createClient(opts = {}) {
       postInboxIdRatify: (args) => request("POST", "/inbox/{id}/ratify", { hasBody: true }, args),
       // POST /inbox/{id}/resubmit — rank: any-builder — POST /inbox/:id/resubmit
       postInboxIdResubmit: (args) => request("POST", "/inbox/{id}/resubmit", { hasBody: true }, args),
+      // DELETE /inbox/{id}/spark — rank: any-builder — DELETE /inbox/:id/spark
+      deleteInboxIdSpark: (args) => request("DELETE", "/inbox/{id}/spark", { hasBody: false }, args),
+      // POST /inbox/{id}/spark — rank: any-builder — POST /inbox/:id/spark
+      postInboxIdSpark: (args) => request("POST", "/inbox/{id}/spark", { hasBody: true }, args),
       // GET /inbox/awaiting-nod — rank: metic+archon — GET /inbox/awaiting-nod
       getInboxAwaitingNod: (args) => request("GET", "/inbox/awaiting-nod", { hasBody: false }, args),
     },

package/modules/ideas/routes/inbox.js

@@ -443,6 +443,119 @@ module.exports = function buildInboxRouter() {
     }
   });
 
+  // -----------------------------------------------------------------------
+  // The Big Idea Spark mark (task 1002920 / BV1.R144, goal 1000062)
+  //
+  // "I have the spark but not the full picture — someone develop this."
+  //
+  // AUTHOR-ONLY, AND THAT IS THE WHOLE POINT. The owner's decision: this mark IS
+  // the consent that makes cross-builder development fair. Without it a Quick
+  // Idea is simply NOT available for someone else to develop — a quick idea is
+  // for turning a thought into a task fast, and it is explicitly *not* an
+  // unfinished Full Idea waiting to be finished by a stranger. So the gate is
+  // not "who is senior enough", it is "whose thought is this": enforced
+  // in-handler against `captured_by`, the same ownership posture as
+  // POST /inbox/:id/resubmit above and PATCH /inbox/:id/body below.
+  //
+  // A MARK, MODELLED AS A RESOURCE: POST puts it on, DELETE takes it off. The
+  // done-when requires the mark be REVERSIBLE, and un-sparking is the plain
+  // reading of that — an author who marked a thought as needing development may
+  // decide they had the full picture after all. Un-sparking writes an EXPLICIT
+  // grade='quick' row, which the R140 design states reads identically to having
+  // no row at all, so a reversal leaves no residue a reader has to interpret.
+  //
+  // ONLY A QUICK IDEA CAN BE SPARKED. A Full Idea already carries the developed
+  // picture (the five template fields + a score); asking for it to be developed
+  // is a contradiction, and sparking it would hand setIdeaGrade a `spark` write
+  // whose empty fieldValues would WIPE that work — exactly the stale/lost-field
+  // hazard setIdeaGrade's whole-row contract warns about. Refused 409, before
+  // any write.
+  //
+  // Both directions are IDEMPOTENT: sparking a spark, or un-sparking a quick,
+  // reports `unchanged` at 200 rather than erroring. A double-click on the R154
+  // hall control is not a failure, and the caller's intent is already satisfied.
+  //
+  // rank: any-builder (requireBuilder) + the in-handler author gate.
+  // Pinned in route-rank-check.MODULE_EXPECTED_RANKS['ideas'].
+
+  // Shared by both directions: load the idea, prove ownership, and refuse a
+  // grade this mark has no business touching. Returns the idea, or null when it
+  // has already answered the request (so the caller just returns).
+  async function loadSparkable(req, res, { requireOpen }) {
+    const id = parseId(req, res, { code: 'bad_id', positiveInt: true });
+    if (id === null) return null;
+    const idea = await inbox.getIdea(id);
+    if (!idea) { res.fail('idea_not_found', 404); return null; }
+    // Authority first, and it leaks nothing: any builder can already read this
+    // idea from the inbox, so a 403 here reveals only that they are not its author.
+    if (idea.captured_by == null || String(idea.captured_by) !== String(req.builder.id)) {
+      res.fail('not_your_idea', 403, {
+        reason: 'the spark mark is the AUTHOR\'s consent to have their idea developed; only they can give or withdraw it',
+      });
+      return null;
+    }
+    if (idea.grade === 'full') {
+      res.fail('not_a_quick_idea', 409, {
+        grade: idea.grade,
+        reason: 'a Full Idea already carries the developed picture; the spark mark asks for one',
+      });
+      return null;
+    }
+    // Only MARKING requires an open idea. A promoted or discarded idea is not
+    // awaiting development, and admitting it would seed the R145 spark queue
+    // with work nobody can pick up. WITHDRAWING the mark stays legal at any
+    // status — clearing a stale mark is housekeeping, and blocking it would be
+    // the one way to leave a permanent spark on a dead idea.
+    if (requireOpen && idea.status !== 'open') {
+      res.fail('idea_not_open', 409, {
+        status: idea.status,
+        reason: 'only an open idea can be marked as awaiting development',
+      });
+      return null;
+    }
+    return idea;
+  }
+
+  // Mark a Quick Idea as a Big Idea Spark — "I have the spark but not the full
+  // picture, someone develop this". AUTHOR-ONLY: the mark is the author's consent
+  // to have their idea developed, so only they can set it. A Full Idea is refused
+  // (409) and a non-open idea cannot be newly marked; re-marking is a 200 no-op.
+  router.post('/inbox/:id/spark', api.requireBuilder, api.asyncHandler('POST /inbox/:id/spark', async (req, res) => {
+    const idea = await loadSparkable(req, res, { requireOpen: true });
+    if (!idea) return;
+    if (idea.grade === 'spark') {
+      return res.json({ idea, sparked: true, unchanged: true });
+    }
+    // grade only — a spark carries no template fields and no score (the R140
+    // migration's own shape: field_values is for a Full Idea). setIdeaGrade's
+    // defaults say exactly that, so they are left to speak for themselves.
+    const row = await inbox.setIdeaGrade(idea.id, { grade: 'spark' });
+    return res.json({
+      idea: { ...idea, grade: row.grade, template_key: row.template_key, field_values: row.field_values, completeness_score: row.completeness_score },
+      sparked: true,
+      unchanged: false,
+    });
+  }, { errorCode: 'idea_spark_failed' }));
+
+  // Withdraw the Big Idea Spark mark — the reversibility half of R144. AUTHOR-ONLY
+  // like the mark itself, and legal at ANY status so a stale mark on a promoted or
+  // discarded idea can always be cleared. Writes an explicit grade='quick' row,
+  // which reads identically to no grade row at all. Un-marking a quick idea is a
+  // 200 no-op; a Full Idea is refused (409) — it is not a withdrawn spark.
+  router.delete('/inbox/:id/spark', api.requireBuilder, api.asyncHandler('DELETE /inbox/:id/spark', async (req, res) => {
+    const idea = await loadSparkable(req, res, { requireOpen: false });
+    if (!idea) return;
+    if (idea.grade !== 'spark') {
+      return res.json({ idea, sparked: false, unchanged: true });
+    }
+    const row = await inbox.setIdeaGrade(idea.id, { grade: 'quick' });
+    return res.json({
+      idea: { ...idea, grade: row.grade, template_key: row.template_key, field_values: row.field_values, completeness_score: row.completeness_score },
+      sparked: false,
+      unchanged: false,
+    });
+  }, { errorCode: 'idea_unspark_failed' }));
+
   // Metic+ (#360 / ADR 0018): idea triage (promote/discard/merge) shapes the
   // backlog. Criterion C2 assigns triage to Metic, so this widened from
   // archon-only to metic+archon when the three-rank model went live. Any

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.293",
+  "version": "1.19.295",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.293",
+      "version": "1.19.295",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.293",
+  "version": "1.19.295",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",