@bongos/core 1.19.294 → 1.19.296

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.294",
-  "core_contract": "1.19.294",
-  "source_commit": "fffe6738492ac7d113228cc4f9b1d5eae0ed16d3",
+  "core_version": "1.19.296",
+  "core_contract": "1.19.296",
+  "source_commit": "a0c264baf117184273d9a83f7c158844920f1d48",
   "source_ref": "HEAD",
-  "built_at": "2026-08-22T17:51:40.637Z",
+  "built_at": "2026-08-22T18:35:34.578Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 321,
     "agent_docs_stubbed": 22,
-    "functional_verbatim": 1395,
+    "functional_verbatim": 1398,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 1738,
-  "tree_sha256": "70e835883854335f17289f54d647911185cfc4cfb1ec5b17424a88e6bbd8156f",
+  "file_count": 1741,
+  "tree_sha256": "a34c536a2753b233ccd552b62e7fcfbe3768304013f4130c641a9bb51d7e51d5",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -347,12 +347,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "aaf0bb7dae10d271e9999093935fef5ae8d85c3a2e3d5b4c52e0c11fed8c581e"
+      "sha256": "cc15a1c79d2dd761b8b50190f72d69b2ccec0a56bdd812a82913213a4b811da6"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "372a5584ddad52fb524815fc7b50d1aab9163e974aac6f2c64f479e4034914a1"
+      "sha256": "b2add6cdda6bf67a34a33864f5c6c0a1bdaf7f3ac21314800d222b5f4be55eb5"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -362,17 +362,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "7faac7fc48e714c76c2b19feaaf9c730b2c9b10ab71ddc5697c21497d02f10ef"
+      "sha256": "b6f803fa3594804e6781eab762eb91241c9146c1e3aa09a8883dd8015a55dc3b"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "7aba0fe1d782cb6308f57dc2e5f6fe0d5ffe0f537d4ffe846bdc7a03e0f8064d"
+      "sha256": "ee350739d64eb2ddce22fa0378ece2eebc363eae96c7755f087363b87e9581fe"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "5f1d221bfbf8d329f883a5dc3e84414728c67201d66faceff04d48732e44b13c"
+      "sha256": "9f4db5e5579a3e401a9d56ee473436b8c6cd00e82f209de784c321131f6e420d"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -1412,12 +1412,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "8fb83f272ef8810df2c517d9514495f44016da2e23cdd67937463f40c0d1605d"
+      "sha256": "f7102579bfe64bb798e9ebc826849857218da439113c6f7b049cfc9a580f863f"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "f51be43a281c9609980fca57d2fa11cafb460a414e506174715d53c08cef6965"
+      "sha256": "a3d866c17cdb60660fb7603de26faccb0fd0fa345e47c26d9703e2fc1fdbfd40"
     },
     {
       "path": "docs/architecture.md",
@@ -1552,7 +1552,7 @@
     {
       "path": "docs/file-map.md",
       "mode": "0000644",
-      "sha256": "9762b7f69397c28e103cdb39a9987483e23bd800a827f0d83983b62ef962616b"
+      "sha256": "9a2f67ab5989d068060bfe336d17ae88a33484fa8cbb5a92f23534b1c6de6289"
     },
     {
       "path": "docs/handoff-template.md",
@@ -2807,7 +2807,7 @@
     {
       "path": "modules/dev-box/app/src/vendor/bongos-client.cjs",
       "mode": "0000644",
-      "sha256": "7faac7fc48e714c76c2b19feaaf9c730b2c9b10ab71ddc5697c21497d02f10ef"
+      "sha256": "b6f803fa3594804e6781eab762eb91241c9146c1e3aa09a8883dd8015a55dc3b"
     },
     {
       "path": "modules/dev-box/app/test/unit.mjs",
@@ -3707,7 +3707,7 @@
     {
       "path": "modules/ideas/inbox.js",
       "mode": "0000644",
-      "sha256": "19af72245517260ac6ee670c93fa3cda99a678da25a7fa6a5d6ec565995201ce"
+      "sha256": "33a25e6bd24ee0952c03e2aeab3e1edb68f8cf84989ee04206c9efdb7d202fa7"
     },
     {
       "path": "modules/ideas/migrations/ideas_001_grades.sql",
@@ -3742,7 +3742,7 @@
     {
       "path": "modules/ideas/routes/inbox.js",
       "mode": "0000644",
-      "sha256": "47c2a3beb6bed3b206ec36344950fe115189debf75a38cf202bfafaa5dbb2adb"
+      "sha256": "7de2735020ddd526ded8ca252fbfba157ee5eb174895660d37ac713b9d0d6fd2"
     },
     {
       "path": "modules/ideas/routing.js",
@@ -4537,12 +4537,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "4555259c80ad21945412441d859ab9ff5f68be5adb28d7c02b2d405b42339398"
+      "sha256": "b937444a6338c17ae2692d47f126d612f87c2429783a3d9a95e4c5d6076f3f5b"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "26ce6a3328f57b80487d9b5fd31db9cb1c200c93d8f5ec307f763b39e8b28e6e"
+      "sha256": "ce72a3e5a70ae07f431f223dccf12d2c896474bcb1f0d62724aea22206b23dde"
     },
     {
       "path": "public-docs/index.html",
@@ -5779,6 +5779,11 @@
       "mode": "0000644",
       "sha256": "9c3a382def8c074a37bad66d7e3deef41c7f2bb9406f02f107be0e9a7dc7bfb3"
     },
+    {
+      "path": "scripts/gds/spark.js",
+      "mode": "0000755",
+      "sha256": "61ad614ec3fb8cbfc98d815629fd3ccafd179a8f2c058539103c9bf4e23e9504"
+    },
     {
       "path": "scripts/gds/start.js",
       "mode": "0000644",
@@ -6057,7 +6062,7 @@
     {
       "path": "src/bongos/route-rank-check.js",
       "mode": "0000644",
-      "sha256": "97b8345a1d891151c3bc134926124a0ac929db661e0cfb26c6760c8c6030bafc"
+      "sha256": "f2d893e0de84433cc99411e59aba98c1ca392fa8d5bd24449e1e9200f06d9ff8"
     },
     {
       "path": "src/bongos/routes.js",
@@ -6192,7 +6197,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "ea4af468628d2a5b45ee1e1916622975f263fc4059cff13a49cadb898f35a4db"
+      "sha256": "e5f489e0d2b9cc6d9c73cc853132a8a7a7e3fbcd8ea2325284d58143d4020a05"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -7509,6 +7514,16 @@
       "mode": "0000644",
       "sha256": "7bea2d388fad9a6b186c4712d6921a554f1d24c70dcae5760b381782149068e7"
     },
+    {
+      "path": "tests/idea_spark_mark.mjs",
+      "mode": "0000644",
+      "sha256": "fb5af0aa1b34116114a1c734c548cafaa52eefda57bd145c0008995bc69addee"
+    },
+    {
+      "path": "tests/idea_spark_queue.mjs",
+      "mode": "0000644",
+      "sha256": "6bea289f0473d07e21acd0b45b50511f061d8d1f0d09b7437a909081ea83344a"
+    },
     {
       "path": "tests/idea_task_lineage.mjs",
       "mode": "0000644",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 294 operations across 47 resource groups
+- 297 operations across 47 resource groups
 
 ## Install
 

package/clients/bongos-client/bongos-client.global.js

@@ -409,8 +409,14 @@ function createClient(opts = {}) {
       postInboxIdRatify: (args) => request("POST", "/inbox/{id}/ratify", { hasBody: true }, args),
       // POST /inbox/{id}/resubmit — rank: any-builder — POST /inbox/:id/resubmit
       postInboxIdResubmit: (args) => request("POST", "/inbox/{id}/resubmit", { hasBody: true }, args),
+      // DELETE /inbox/{id}/spark — rank: any-builder — DELETE /inbox/:id/spark
+      deleteInboxIdSpark: (args) => request("DELETE", "/inbox/{id}/spark", { hasBody: false }, args),
+      // POST /inbox/{id}/spark — rank: any-builder — POST /inbox/:id/spark
+      postInboxIdSpark: (args) => request("POST", "/inbox/{id}/spark", { hasBody: true }, args),
       // GET /inbox/awaiting-nod — rank: metic+archon — GET /inbox/awaiting-nod
       getInboxAwaitingNod: (args) => request("GET", "/inbox/awaiting-nod", { hasBody: false }, args),
+      // GET /inbox/sparks — rank: any-builder — GET /inbox/sparks
+      getInboxSparks: (args) => request("GET", "/inbox/sparks", { hasBody: false }, args),
     },
     "instance": {
       // GET /instance — rank: public — GET /instance

package/clients/bongos-client/index.cjs

@@ -408,8 +408,14 @@ function createClient(opts = {}) {
       postInboxIdRatify: (args) => request("POST", "/inbox/{id}/ratify", { hasBody: true }, args),
       // POST /inbox/{id}/resubmit — rank: any-builder — POST /inbox/:id/resubmit
       postInboxIdResubmit: (args) => request("POST", "/inbox/{id}/resubmit", { hasBody: true }, args),
+      // DELETE /inbox/{id}/spark — rank: any-builder — DELETE /inbox/:id/spark
+      deleteInboxIdSpark: (args) => request("DELETE", "/inbox/{id}/spark", { hasBody: false }, args),
+      // POST /inbox/{id}/spark — rank: any-builder — POST /inbox/:id/spark
+      postInboxIdSpark: (args) => request("POST", "/inbox/{id}/spark", { hasBody: true }, args),
       // GET /inbox/awaiting-nod — rank: metic+archon — GET /inbox/awaiting-nod
       getInboxAwaitingNod: (args) => request("GET", "/inbox/awaiting-nod", { hasBody: false }, args),
+      // GET /inbox/sparks — rank: any-builder — GET /inbox/sparks
+      getInboxSparks: (args) => request("GET", "/inbox/sparks", { hasBody: false }, args),
     },
     "instance": {
       // GET /instance — rank: public — GET /instance

package/clients/bongos-client/index.d.ts

@@ -9,6 +9,7 @@ export interface DeleteBoxSshKeyIdResponse { ok: boolean; deleted: unknown }
 export interface DeleteDependenciesResponse { ok: boolean }
 export interface DeleteGovernmentAssignmentsBuilderIdRankKeyResponse { ok: boolean; builder_id: unknown; rank_key: unknown; removed: unknown }
 export interface DeleteGovernmentRanksRankKeyPermissionsPermissionKeyResponse { ok: boolean; rank_key: unknown; permission_key: unknown; removed: unknown }
+export interface DeleteInboxIdSparkResponse { idea: unknown; sparked: boolean; unchanged: boolean }
 export interface DeleteMemoryFileResponse { deleted: boolean; builder_id: unknown; path: unknown }
 export interface DeleteTasksIdCriteriaCriterionIdResponse { ok: boolean; removed: unknown }
 export interface DeleteTasksIdDependenciesDepIdResponse { ok: boolean; removed: unknown }
@@ -49,6 +50,7 @@ export interface GetHealthzResponse { ok: boolean; auth_configured: unknown }
 export interface GetInboxAwaitingNodResponse { awaiting: unknown; count: unknown }
 export interface GetInboxIdResponse { idea: unknown }
 export interface GetInboxResponse { ideas: unknown; open_count: unknown }
+export interface GetInboxSparksResponse { sparks: unknown; count: unknown }
 export interface GetLeaderboardResponse { leaderboard: unknown; page: unknown }
 export interface GetLearningsResponse { learnings: unknown }
 export interface GetMeAchievementsResponse { unlocked: unknown }
@@ -246,6 +248,7 @@ export interface PostGovernmentRanksRequest { rank_key: string; label: string; d
 export interface PostGovernmentRanksResponse { rank: unknown }
 export interface PostInboxIdRatifyRequest { notes_md?: string }
 export interface PostInboxIdResubmitRequest { field_values: Record<string, unknown>; template_key?: string }
+export interface PostInboxIdSparkResponse { idea: unknown; sparked: boolean; unchanged: boolean }
 export interface PostInboxRequest { title: string; body_md?: string; kind?: string; suggested_version?: string; suggested_priority?: number; goal_id?: number; grade?: string; template_key?: string; field_values?: Record<string, unknown> }
 export interface PostLearningsRequest { title: string; body_md: string; tags?: string[]; related_files?: string[]; source?: string; source_ref?: string; task_id?: number }
 export interface PostLearningsResponse { skipped?: boolean; reason?: unknown; learning?: unknown }
@@ -669,8 +672,14 @@ export interface BongosClient {
     postInboxIdRatify(args?: RequestArgs & { body?: PostInboxIdRatifyRequest }): Promise<ApiResponse>;
     /** POST /inbox/{id}/resubmit — rank: any-builder */
     postInboxIdResubmit(args: RequestArgs & { body: PostInboxIdResubmitRequest }): Promise<ApiResponse>;
+    /** DELETE /inbox/{id}/spark — rank: any-builder */
+    deleteInboxIdSpark(args?: RequestArgs): Promise<DeleteInboxIdSparkResponse>;
+    /** POST /inbox/{id}/spark — rank: any-builder */
+    postInboxIdSpark(args?: RequestArgs): Promise<PostInboxIdSparkResponse>;
     /** GET /inbox/awaiting-nod — rank: metic+archon */
     getInboxAwaitingNod(args?: RequestArgs): Promise<GetInboxAwaitingNodResponse>;
+    /** GET /inbox/sparks — rank: any-builder */
+    getInboxSparks(args?: RequestArgs): Promise<GetInboxSparksResponse>;
   };
   "instance": {
     /** GET /instance — rank: public */

package/clients/bongos-client/index.mjs

@@ -405,8 +405,14 @@ export function createClient(opts = {}) {
       postInboxIdRatify: (args) => request("POST", "/inbox/{id}/ratify", { hasBody: true }, args),
       // POST /inbox/{id}/resubmit — rank: any-builder — POST /inbox/:id/resubmit
       postInboxIdResubmit: (args) => request("POST", "/inbox/{id}/resubmit", { hasBody: true }, args),
+      // DELETE /inbox/{id}/spark — rank: any-builder — DELETE /inbox/:id/spark
+      deleteInboxIdSpark: (args) => request("DELETE", "/inbox/{id}/spark", { hasBody: false }, args),
+      // POST /inbox/{id}/spark — rank: any-builder — POST /inbox/:id/spark
+      postInboxIdSpark: (args) => request("POST", "/inbox/{id}/spark", { hasBody: true }, args),
       // GET /inbox/awaiting-nod — rank: metic+archon — GET /inbox/awaiting-nod
       getInboxAwaitingNod: (args) => request("GET", "/inbox/awaiting-nod", { hasBody: false }, args),
+      // GET /inbox/sparks — rank: any-builder — GET /inbox/sparks
+      getInboxSparks: (args) => request("GET", "/inbox/sparks", { hasBody: false }, args),
     },
     "instance": {
       // GET /instance — rank: public — GET /instance

package/docs/api/openapi.json

@@ -6307,6 +6307,44 @@
         ]
       }
     },
+    "/inbox/sparks": {
+      "get": {
+        "operationId": "get_inbox_sparks",
+        "tags": [
+          "inbox"
+        ],
+        "summary": "GET /inbox/sparks",
+        "description": "GET /inbox/sparks — THE SPARK QUEUE (task 1002921 / BV1.R145, goal 1000062). Big Idea Sparks awaiting development: the ideator craft's pickup surface, and the first place one craft sources work from another craft's output. READABLE BY ANY BUILDER, by design and by the done-when. A pickup surface that only trusted builders could read would defeat its own purpose — the whole point is that someone OTHER than the author comes along and develops the thought. The author's consent is already recorded (the R144 mark is what put the row here), so no further gate belongs on the read. Contrast /inbox/awaiting-nod directly above, which IS gated: that queue exists to be ACTED on by a triager, this one to be BROWSED by anyone. DECLARED BEFORE `GET /inbox/:id` DELIBERATELY — and this ordering is load-bearing, not stylistic. Express matches in declaration order, so with the routes the other way round `/inbox/sparks` binds `:id = 'sparks'` and parseId turns the whole queue into a 400 bad_id. Same reason /inbox/awaiting-nod sits above it. tests/idea_spark_queue.mjs pins the relative order so a future insertion cannot quietly re-shadow it. rank: any-builder — a pickup surface is public to builders (the R144 mark is the consent). Deliberately NOT pinned in route-rank-check: a read with no gate to protect has no downgrade to catch, and pinning it would only assert that a read stays open.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/ideas/routes/inbox.js",
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetInboxSparksResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/inbox/{id}": {
       "get": {
         "operationId": "get_inbox_id",
@@ -6601,6 +6639,108 @@
         ]
       }
     },
+    "/inbox/{id}/spark": {
+      "post": {
+        "operationId": "post_inbox_id_spark",
+        "tags": [
+          "inbox"
+        ],
+        "summary": "POST /inbox/:id/spark",
+        "description": "Mark a Quick Idea as a Big Idea Spark — \"I have the spark but not the full picture, someone develop this\". AUTHOR-ONLY: the mark is the author's consent to have their idea developed, so only they can set it. A Full Idea is refused (409) and a non-open idea cannot be newly marked; re-marking is a 200 no-op.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/ideas/routes/inbox.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostInboxIdSparkResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      },
+      "delete": {
+        "operationId": "delete_inbox_id_spark",
+        "tags": [
+          "inbox"
+        ],
+        "summary": "DELETE /inbox/:id/spark",
+        "description": "Withdraw the Big Idea Spark mark — the reversibility half of R144. AUTHOR-ONLY like the mark itself, and legal at ANY status so a stale mark on a promoted or discarded idea can always be cleared. Writes an explicit grade='quick' row, which reads identically to no grade row at all. Un-marking a quick idea is a 200 no-op; a Full Idea is refused (409) — it is not a withdrawn spark.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/ideas/routes/inbox.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/DeleteInboxIdSparkResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/instance": {
       "get": {
         "operationId": "get_instance",
@@ -13412,6 +13552,23 @@
           "removed"
         ]
       },
+      "DeleteInboxIdSparkResponse": {
+        "type": "object",
+        "properties": {
+          "idea": {},
+          "sparked": {
+            "type": "boolean"
+          },
+          "unchanged": {
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "idea",
+          "sparked",
+          "unchanged"
+        ]
+      },
       "DeleteMemoryFileResponse": {
         "type": "object",
         "properties": {
@@ -13909,6 +14066,17 @@
           "open_count"
         ]
       },
+      "GetInboxSparksResponse": {
+        "type": "object",
+        "properties": {
+          "sparks": {},
+          "count": {}
+        },
+        "required": [
+          "sparks",
+          "count"
+        ]
+      },
       "GetLeaderboardResponse": {
         "type": "object",
         "properties": {
@@ -16855,6 +17023,23 @@
         ],
         "additionalProperties": false
       },
+      "PostInboxIdSparkResponse": {
+        "type": "object",
+        "properties": {
+          "idea": {},
+          "sparked": {
+            "type": "boolean"
+          },
+          "unchanged": {
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "idea",
+          "sparked",
+          "unchanged"
+        ]
+      },
       "PostInboxRequest": {
         "type": "object",
         "properties": {
@@ -18571,9 +18756,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 294,
-  "x-schema-count": 327,
+  "x-endpoint-count": 297,
+  "x-schema-count": 330,
   "x-undocumented-bodies": 8,
-  "x-response-schemas": 218,
+  "x-response-schemas": 221,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 294 endpoints across 47 route files.
+> **Generated from the live route files** — the route file is authoritative. 297 endpoints across 47 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -258,7 +258,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 |---|---|---|---|---|
 | GET | `/api/bongos/healthz` | `public` | — | liveness probe; status.example.com hits this anonymously. |
 
-## `inbox` (8)
+## `inbox` (11)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -269,7 +269,10 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | PATCH | `/api/bongos/inbox/:id/body` | `any-builder` | `body_md` | Metic+ (task 360 / ADR 0018): idea triage (promote/discard/merge) shapes the backlog. |
 | POST | `/api/bongos/inbox/:id/ratify` | `metic+archon` | `notes_md` | V3.R31 (task 252) — Archon ratifies a criterion-proposal idea, atomically: - INSERT done_when_criteria row on the target version - UPDATE… |
 | POST | `/api/bongos/inbox/:id/resubmit` | `any-builder` | `field_values`, `template_key` | RESUBMIT a Full Idea after a rejection (R13 of goal 1000069, criterion C2: an idea never dies and never stalls). |
+| POST | `/api/bongos/inbox/:id/spark` | `any-builder` | — | Mark a Quick Idea as a Big Idea Spark — "I have the spark but not the full picture, someone develop this". |
+| DELETE | `/api/bongos/inbox/:id/spark` | `any-builder` | — | Withdraw the Big Idea Spark mark — the reversibility half of R144. |
 | GET | `/api/bongos/inbox/awaiting-nod` | `metic+archon` | — | GET /inbox/awaiting-nod — the NOD QUEUE (task 1003066, BV1.R05). |
+| GET | `/api/bongos/inbox/sparks` | `any-builder` | — | GET /inbox/sparks — THE SPARK QUEUE (task 1002921 / BV1.R145, goal 1000062). |
 
 ## `instance` (1)
 

package/docs/file-map.md

@@ -175,6 +175,7 @@
 │       ├── smoke-box.sh         ← (#598) hermetic box-lifecycle smoke (no DB/DO/network): runs tests/boxes.mjs + tests/cf_tunnel.mjs (#771 named tunnel) + route-rank + module-load
 │       ├── recall.js            ← `/recall` CLI: two-call progressive-disclosure search (summary → `--expand <id>`) over Bongos retrieval layer (ADR 0060); `node scripts/gds/recall.js <query>`
 │       ├── capture.js           ← file an idea_inbox row from the CLI (the ideas.capture kernel port); backs the "capture a tangent" flow across skills
+│       ├── spark.js            ← (tasks 1002920 / R144 + 1002921 / R145) mark one of your OWN quick ideas as a Big Idea Spark — "someone develop this"; `--undo` withdraws it; `--list` is the SPARK QUEUE (what awaits development, readable by any builder). Author-only server-side for the mark (it is the consent); its own command because sparking acts on an EXISTING idea, which is why capture.js refuses grade='spark'
 │       ├── worktree.js          ← (task 1002809) junction-safe worktree add/remove/list — outside-repo worktrees get a node_modules junction via node (no shell quoting), removed BEFORE `git worktree remove`
 │       ├── learning-capture.js  ← file a `learnings` row (DB-backed short-form rule capture, replacing hand-edited recipe files for a single gotcha)
 │       ├── docs-entropy.js      ← ([#…] docs-entropy) markdown-corpus linter: broken internal links + cross-file duplicate-prose detector across every tracked `.md`; `--verbose` / `--file-ideas`

package/modules/dev-box/app/src/vendor/bongos-client.cjs

@@ -408,8 +408,14 @@ function createClient(opts = {}) {
       postInboxIdRatify: (args) => request("POST", "/inbox/{id}/ratify", { hasBody: true }, args),
       // POST /inbox/{id}/resubmit — rank: any-builder — POST /inbox/:id/resubmit
       postInboxIdResubmit: (args) => request("POST", "/inbox/{id}/resubmit", { hasBody: true }, args),
+      // DELETE /inbox/{id}/spark — rank: any-builder — DELETE /inbox/:id/spark
+      deleteInboxIdSpark: (args) => request("DELETE", "/inbox/{id}/spark", { hasBody: false }, args),
+      // POST /inbox/{id}/spark — rank: any-builder — POST /inbox/:id/spark
+      postInboxIdSpark: (args) => request("POST", "/inbox/{id}/spark", { hasBody: true }, args),
       // GET /inbox/awaiting-nod — rank: metic+archon — GET /inbox/awaiting-nod
       getInboxAwaitingNod: (args) => request("GET", "/inbox/awaiting-nod", { hasBody: false }, args),
+      // GET /inbox/sparks — rank: any-builder — GET /inbox/sparks
+      getInboxSparks: (args) => request("GET", "/inbox/sparks", { hasBody: false }, args),
     },
     "instance": {
       // GET /instance — rank: public — GET /instance