@bongos/core 1.19.295 → 1.19.297

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.295",
-  "core_contract": "1.19.295",
-  "source_commit": "a9c6feaf0d724e69e2c74fae890f66887a1f6052",
+  "core_version": "1.19.297",
+  "core_contract": "1.19.297",
+  "source_commit": "1f1b380614ecad230b7399a63883dd4aa65a5c51",
   "source_ref": "HEAD",
-  "built_at": "2026-08-22T18:22:26.661Z",
+  "built_at": "2026-08-22T19:02:34.784Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 321,
     "agent_docs_stubbed": 22,
-    "functional_verbatim": 1397,
+    "functional_verbatim": 1400,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 1740,
-  "tree_sha256": "0d0f553d620644b95da343b98d6a1bb50e5e934ea015e43de5f7630c1d505842",
+  "file_count": 1743,
+  "tree_sha256": "39da631b7c0c17d3b63eb793e9e7b624bf55dbe877a2bdd2a568608076258bf7",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -347,12 +347,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "c5008815c70e20b7bbc49668082bd6886f1ac406d948a4d27f5f9fd4ff70188e"
+      "sha256": "6e44e5da05194cc5aae1784d591d5f560dc36527939eda359de794e3d29fdb37"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "91cc8b99c22e82ef7bbcb93f4b1596e88d772bc50f1baafdd373c8fe0e9c8ce5"
+      "sha256": "b05f34f719999b987f9ea6dcecec7bed016a0486ffb43a2ba95fcabbbe7457db"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -362,17 +362,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "a7cd2351a67f71cf889601718f792b299bbbf663c62d0fbdb43babc83a83b8ba"
+      "sha256": "5fbf0ea8c5b9eba86cc1d471407d8f4bb1df23af72d4fe7a618576bf67233a14"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "57dc78f1c14c72595b1efe6b269161732be2e84caa7823ebd82f045e26e4d76f"
+      "sha256": "db6c391a39f2caea99486c5f03993b0cc52e3506835d750a28a4a0b2108bb441"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "a077e8810feaa0efbfe25234b4153db206089deaed9071b45c2ae2f42f06fdaa"
+      "sha256": "5ef5dcc11f3713394c6a6225c4206ef8955b27b17c95a47fd51ca43b7965729f"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -1412,12 +1412,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "d501dff7e10bbb0cee28717f652c26fca962f8f756a98b3be6ff7f361a92d967"
+      "sha256": "0c2b5d0fd5e05cbe3b3c06ab10baf7e6af0414d85599519e3ef2eb289008b672"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "ebef1d04e8bc3e299c24a6113b2bc0ec43a92a0e93ff60fc801087bbdbb08fab"
+      "sha256": "ef7e4fbdb912b077c49b15e7ba0dd6333196fe0d82d4462a83c507669fd82767"
     },
     {
       "path": "docs/architecture.md",
@@ -1552,7 +1552,7 @@
     {
       "path": "docs/file-map.md",
       "mode": "0000644",
-      "sha256": "a1c109f23cb4916b89bbc5ba522ebee6413bcb812569a30cbc1e0a7a00f8e9bc"
+      "sha256": "b017e7a4425f92cc5cbec8d0a5fc192e3225794fb97955acb3689b12dc0de667"
     },
     {
       "path": "docs/handoff-template.md",
@@ -2807,7 +2807,7 @@
     {
       "path": "modules/dev-box/app/src/vendor/bongos-client.cjs",
       "mode": "0000644",
-      "sha256": "a7cd2351a67f71cf889601718f792b299bbbf663c62d0fbdb43babc83a83b8ba"
+      "sha256": "5fbf0ea8c5b9eba86cc1d471407d8f4bb1df23af72d4fe7a618576bf67233a14"
     },
     {
       "path": "modules/dev-box/app/test/unit.mjs",
@@ -3707,7 +3707,7 @@
     {
       "path": "modules/ideas/inbox.js",
       "mode": "0000644",
-      "sha256": "19af72245517260ac6ee670c93fa3cda99a678da25a7fa6a5d6ec565995201ce"
+      "sha256": "ceaa172a8e0338dd9202dae6abea8a5278594937bd980ddaf9ac2b2017b555a4"
     },
     {
       "path": "modules/ideas/migrations/ideas_001_grades.sql",
@@ -3729,6 +3729,11 @@
       "mode": "0000644",
       "sha256": "eb1393f0ee8dccc57efcfe0acd0fdac7857389b74e0cb734042bb4293768b8e8"
     },
+    {
+      "path": "modules/ideas/migrations/ideas_005_grade_developed_by.sql",
+      "mode": "0000644",
+      "sha256": "3c7a48505c922bd0742888bc9c0598d776a4de0cc3d2745bd08d6452e07f34b9"
+    },
     {
       "path": "modules/ideas/module.json",
       "mode": "0000644",
@@ -3742,7 +3747,7 @@
     {
       "path": "modules/ideas/routes/inbox.js",
       "mode": "0000644",
-      "sha256": "8b832303a87a6caf9fd4f7779967576bb615bcb893640171beeef175c8783174"
+      "sha256": "eafc7ff6f4d9567813cefe2b47333caa4ab79b77ab979e77eb65ac88102a78f1"
     },
     {
       "path": "modules/ideas/routing.js",
@@ -4537,12 +4542,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "930aad90fce5c0ac0d66ec5e44c4948f3b704a790037b9b4856fe4a022e9a08f"
+      "sha256": "9fea7a7292ec0de1ea5fea27ec984796c150ed75f0e94e30eca8837f55cbcee6"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "cbd88d46d805881d4eb8cb4f35b34b77bb1d0b22be90682bc8cd47699b445a58"
+      "sha256": "8b60b6155a3fd2c2d0110df0404319a6a5da35eeed3ee8d60f61ae009672ed35"
     },
     {
       "path": "public-docs/index.html",
@@ -5782,7 +5787,7 @@
     {
       "path": "scripts/gds/spark.js",
       "mode": "0000755",
-      "sha256": "27a98a84ad1682bc9d17286c675fb75d14e2ff529d7ce43f848f54a631ee99bc"
+      "sha256": "dfd5aa72caa26eb2c8cf3063e1b4f51e1f4bcd7fddcdd93d243279c130850628"
     },
     {
       "path": "scripts/gds/start.js",
@@ -6197,7 +6202,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "e7b52e29073dcbe62ed6c069753c22f9c7cf3a69cf8987bc2f91a7b4b9571d99"
+      "sha256": "2bfcc90c50b5fd0945b97179e4445602f145896dd1821066cabcd411a8d7a9d9"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -7484,6 +7489,11 @@
       "mode": "0000644",
       "sha256": "7e2024b3f1fa79a6bdec55b134be6337d4867df0a77fedb205f32b783a3d6193"
     },
+    {
+      "path": "tests/idea_develop_spark.mjs",
+      "mode": "0000644",
+      "sha256": "03d2f692eaa02e85a5f53e89527d4ea1a20c032d4801e2a7acd421eda12ce76c"
+    },
     {
       "path": "tests/idea_full_capture.mjs",
       "mode": "0000644",
@@ -7519,6 +7529,11 @@
       "mode": "0000644",
       "sha256": "fb5af0aa1b34116114a1c734c548cafaa52eefda57bd145c0008995bc69addee"
     },
+    {
+      "path": "tests/idea_spark_queue.mjs",
+      "mode": "0000644",
+      "sha256": "43f801610e37062c54e631904aecaa10aa2486139aba3aa9eeb820d84fd32368"
+    },
     {
       "path": "tests/idea_task_lineage.mjs",
       "mode": "0000644",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 296 operations across 47 resource groups
+- 298 operations across 47 resource groups
 
 ## Install
 

package/clients/bongos-client/bongos-client.global.js

@@ -405,6 +405,8 @@ function createClient(opts = {}) {
       patchInboxId: (args) => request("PATCH", "/inbox/{id}", { hasBody: true }, args),
       // PATCH /inbox/{id}/body — rank: any-builder — PATCH /inbox/:id/body
       patchInboxIdBody: (args) => request("PATCH", "/inbox/{id}/body", { hasBody: true }, args),
+      // POST /inbox/{id}/develop — rank: any-builder — POST /inbox/:id/develop
+      postInboxIdDevelop: (args) => request("POST", "/inbox/{id}/develop", { hasBody: true }, args),
       // POST /inbox/{id}/ratify — rank: metic+archon — POST /inbox/:id/ratify
       postInboxIdRatify: (args) => request("POST", "/inbox/{id}/ratify", { hasBody: true }, args),
       // POST /inbox/{id}/resubmit — rank: any-builder — POST /inbox/:id/resubmit
@@ -415,6 +417,8 @@ function createClient(opts = {}) {
       postInboxIdSpark: (args) => request("POST", "/inbox/{id}/spark", { hasBody: true }, args),
       // GET /inbox/awaiting-nod — rank: metic+archon — GET /inbox/awaiting-nod
       getInboxAwaitingNod: (args) => request("GET", "/inbox/awaiting-nod", { hasBody: false }, args),
+      // GET /inbox/sparks — rank: any-builder — GET /inbox/sparks
+      getInboxSparks: (args) => request("GET", "/inbox/sparks", { hasBody: false }, args),
     },
     "instance": {
       // GET /instance — rank: public — GET /instance

package/clients/bongos-client/index.cjs

@@ -404,6 +404,8 @@ function createClient(opts = {}) {
       patchInboxId: (args) => request("PATCH", "/inbox/{id}", { hasBody: true }, args),
       // PATCH /inbox/{id}/body — rank: any-builder — PATCH /inbox/:id/body
       patchInboxIdBody: (args) => request("PATCH", "/inbox/{id}/body", { hasBody: true }, args),
+      // POST /inbox/{id}/develop — rank: any-builder — POST /inbox/:id/develop
+      postInboxIdDevelop: (args) => request("POST", "/inbox/{id}/develop", { hasBody: true }, args),
       // POST /inbox/{id}/ratify — rank: metic+archon — POST /inbox/:id/ratify
       postInboxIdRatify: (args) => request("POST", "/inbox/{id}/ratify", { hasBody: true }, args),
       // POST /inbox/{id}/resubmit — rank: any-builder — POST /inbox/:id/resubmit
@@ -414,6 +416,8 @@ function createClient(opts = {}) {
       postInboxIdSpark: (args) => request("POST", "/inbox/{id}/spark", { hasBody: true }, args),
       // GET /inbox/awaiting-nod — rank: metic+archon — GET /inbox/awaiting-nod
       getInboxAwaitingNod: (args) => request("GET", "/inbox/awaiting-nod", { hasBody: false }, args),
+      // GET /inbox/sparks — rank: any-builder — GET /inbox/sparks
+      getInboxSparks: (args) => request("GET", "/inbox/sparks", { hasBody: false }, args),
     },
     "instance": {
       // GET /instance — rank: public — GET /instance

package/clients/bongos-client/index.d.ts

@@ -50,6 +50,7 @@ export interface GetHealthzResponse { ok: boolean; auth_configured: unknown }
 export interface GetInboxAwaitingNodResponse { awaiting: unknown; count: unknown }
 export interface GetInboxIdResponse { idea: unknown }
 export interface GetInboxResponse { ideas: unknown; open_count: unknown }
+export interface GetInboxSparksResponse { sparks: unknown; count: unknown }
 export interface GetLeaderboardResponse { leaderboard: unknown; page: unknown }
 export interface GetLearningsResponse { learnings: unknown }
 export interface GetMeAchievementsResponse { unlocked: unknown }
@@ -245,6 +246,7 @@ export interface PostGovernmentBoardItemsResponse { ok: boolean; amendment: unkn
 export interface PostGovernmentRanksRankKeyResetResponse { ok: boolean; rank_key: unknown; seeded_rank: unknown; permission_count: unknown }
 export interface PostGovernmentRanksRequest { rank_key: string; label: string; description?: string }
 export interface PostGovernmentRanksResponse { rank: unknown }
+export interface PostInboxIdDevelopRequest { field_values: Record<string, unknown>; template_key?: string }
 export interface PostInboxIdRatifyRequest { notes_md?: string }
 export interface PostInboxIdResubmitRequest { field_values: Record<string, unknown>; template_key?: string }
 export interface PostInboxIdSparkResponse { idea: unknown; sparked: boolean; unchanged: boolean }
@@ -667,6 +669,8 @@ export interface BongosClient {
     patchInboxId(args?: RequestArgs & { body?: PatchInboxIdRequest }): Promise<PatchInboxIdResponse>;
     /** PATCH /inbox/{id}/body — rank: any-builder */
     patchInboxIdBody(args: RequestArgs & { body: PatchInboxIdBodyRequest }): Promise<PatchInboxIdBodyResponse>;
+    /** POST /inbox/{id}/develop — rank: any-builder */
+    postInboxIdDevelop(args: RequestArgs & { body: PostInboxIdDevelopRequest }): Promise<ApiResponse>;
     /** POST /inbox/{id}/ratify — rank: metic+archon */
     postInboxIdRatify(args?: RequestArgs & { body?: PostInboxIdRatifyRequest }): Promise<ApiResponse>;
     /** POST /inbox/{id}/resubmit — rank: any-builder */
@@ -677,6 +681,8 @@ export interface BongosClient {
     postInboxIdSpark(args?: RequestArgs): Promise<PostInboxIdSparkResponse>;
     /** GET /inbox/awaiting-nod — rank: metic+archon */
     getInboxAwaitingNod(args?: RequestArgs): Promise<GetInboxAwaitingNodResponse>;
+    /** GET /inbox/sparks — rank: any-builder */
+    getInboxSparks(args?: RequestArgs): Promise<GetInboxSparksResponse>;
   };
   "instance": {
     /** GET /instance — rank: public */

package/clients/bongos-client/index.mjs

@@ -401,6 +401,8 @@ export function createClient(opts = {}) {
       patchInboxId: (args) => request("PATCH", "/inbox/{id}", { hasBody: true }, args),
       // PATCH /inbox/{id}/body — rank: any-builder — PATCH /inbox/:id/body
       patchInboxIdBody: (args) => request("PATCH", "/inbox/{id}/body", { hasBody: true }, args),
+      // POST /inbox/{id}/develop — rank: any-builder — POST /inbox/:id/develop
+      postInboxIdDevelop: (args) => request("POST", "/inbox/{id}/develop", { hasBody: true }, args),
       // POST /inbox/{id}/ratify — rank: metic+archon — POST /inbox/:id/ratify
       postInboxIdRatify: (args) => request("POST", "/inbox/{id}/ratify", { hasBody: true }, args),
       // POST /inbox/{id}/resubmit — rank: any-builder — POST /inbox/:id/resubmit
@@ -411,6 +413,8 @@ export function createClient(opts = {}) {
       postInboxIdSpark: (args) => request("POST", "/inbox/{id}/spark", { hasBody: true }, args),
       // GET /inbox/awaiting-nod — rank: metic+archon — GET /inbox/awaiting-nod
       getInboxAwaitingNod: (args) => request("GET", "/inbox/awaiting-nod", { hasBody: false }, args),
+      // GET /inbox/sparks — rank: any-builder — GET /inbox/sparks
+      getInboxSparks: (args) => request("GET", "/inbox/sparks", { hasBody: false }, args),
     },
     "instance": {
       // GET /instance — rank: public — GET /instance

package/docs/api/openapi.json

@@ -6307,6 +6307,44 @@
         ]
       }
     },
+    "/inbox/sparks": {
+      "get": {
+        "operationId": "get_inbox_sparks",
+        "tags": [
+          "inbox"
+        ],
+        "summary": "GET /inbox/sparks",
+        "description": "GET /inbox/sparks — THE SPARK QUEUE (task 1002921 / BV1.R145, goal 1000062). Big Idea Sparks awaiting development: the ideator craft's pickup surface, and the first place one craft sources work from another craft's output. READABLE BY ANY BUILDER, by design and by the done-when. A pickup surface that only trusted builders could read would defeat its own purpose — the whole point is that someone OTHER than the author comes along and develops the thought. The author's consent is already recorded (the R144 mark is what put the row here), so no further gate belongs on the read. Contrast /inbox/awaiting-nod directly above, which IS gated: that queue exists to be ACTED on by a triager, this one to be BROWSED by anyone. DECLARED BEFORE `GET /inbox/:id` DELIBERATELY — and this ordering is load-bearing, not stylistic. Express matches in declaration order, so with the routes the other way round `/inbox/sparks` binds `:id = 'sparks'` and parseId turns the whole queue into a 400 bad_id. Same reason /inbox/awaiting-nod sits above it. tests/idea_spark_queue.mjs pins the relative order so a future insertion cannot quietly re-shadow it. rank: any-builder — a pickup surface is public to builders (the R144 mark is the consent). Deliberately NOT pinned in route-rank-check: a read with no gate to protect has no downgrade to catch, and pinning it would only assert that a read stays open.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/ideas/routes/inbox.js",
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetInboxSparksResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/inbox/{id}": {
       "get": {
         "operationId": "get_inbox_id",
@@ -6486,6 +6524,62 @@
         ]
       }
     },
+    "/inbox/{id}/develop": {
+      "post": {
+        "operationId": "post_inbox_id_develop",
+        "tags": [
+          "inbox"
+        ],
+        "summary": "POST /inbox/:id/develop",
+        "description": "POST /inbox/:id/develop — DEVELOP A SPARK INTO A FULL IDEA (task 1002922 / BV1.R146, goal 1000062). The pickup half of the handoff R144 and R145 set up: the author consented by marking the spark, the queue made it findable, and now another builder fills in the five template fields and the thought becomes a Full Idea. OPEN TO ANY BUILDER, INCLUDING THE AUTHOR. Cross-builder development is the entire point, so there is no author check here — the mirror image of R144, where the gate was the whole feature. The consent was already given and is already recorded (this row is a spark BECAUSE its author said so), and re-asking for it would make the queue unpickable. Self-development is likewise legal: an author may mark a thought and come back to it themselves. ONLY A SPARK CAN BE DEVELOPED, and \"only once\" is enforced by the DATABASE, not by this handler. developSpark's UPDATE carries `AND grade = 'spark'`, so two builders picking the same spark off the queue at the same instant cannot both succeed — the second matches zero rows. The pre-read below exists ONLY to tell a 404 apart from a 409 and to give a useful message; it is not the guard, and it deliberately does not try to be. WHAT THIS ROUTE DELIBERATELY DOES NOT DO: pay the stream-2 \"Full Idea passed\" credit. Capture and resubmit both fire it, but on those paths the recipient is unambiguously the author. Here there are two people, and choosing between them is R147's job (task 1002923 — \"karma for a ratified Full Idea, scaled by completeness and SPLIT WITH THE SPARK AUTHOR\"). Firing it here would not just pre-empt that decision, it would corrupt it: awardIdeaFullPassCredit's idempotency predicate is (builder_id, `idea.credit.full_pass:<id>`), so a payment to the DEVELOPER does not block a later payment to the AUTHOR — one idea would pay twice. The credit is idempotent per idea+builder, so R147 can still pay it at the right time, to the right people, in the right shares. The board window IS opened, because it is recipient-agnostic (it takes an idea and a score, not a builder) and without it a developed Full Idea could never reach ratification — the handoff would dead-end one step from done. Fail-open like every other caller of that port. rank: any-builder — development is the pickup, and the author's mark is the consent. Deliberately NOT pinned in route-rank-check: there is no gate here to protect, and pinning it would only assert that an open route stays open.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/ideas/routes/inbox.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostInboxIdDevelopRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/inbox/{id}/ratify": {
       "post": {
         "operationId": "post_inbox_id_ratify",
@@ -14028,6 +14122,17 @@
           "open_count"
         ]
       },
+      "GetInboxSparksResponse": {
+        "type": "object",
+        "properties": {
+          "sparks": {},
+          "count": {}
+        },
+        "required": [
+          "sparks",
+          "count"
+        ]
+      },
       "GetLeaderboardResponse": {
         "type": "object",
         "properties": {
@@ -16948,6 +17053,22 @@
           "rank"
         ]
       },
+      "PostInboxIdDevelopRequest": {
+        "type": "object",
+        "properties": {
+          "field_values": {
+            "type": "object"
+          },
+          "template_key": {
+            "type": "string",
+            "maxLength": 64
+          }
+        },
+        "required": [
+          "field_values"
+        ],
+        "additionalProperties": false
+      },
       "PostInboxIdRatifyRequest": {
         "type": "object",
         "properties": {
@@ -18707,9 +18828,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 296,
-  "x-schema-count": 329,
+  "x-endpoint-count": 298,
+  "x-schema-count": 331,
   "x-undocumented-bodies": 8,
-  "x-response-schemas": 220,
+  "x-response-schemas": 221,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 296 endpoints across 47 route files.
+> **Generated from the live route files** — the route file is authoritative. 298 endpoints across 47 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -258,7 +258,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 |---|---|---|---|---|
 | GET | `/api/bongos/healthz` | `public` | — | liveness probe; status.example.com hits this anonymously. |
 
-## `inbox` (10)
+## `inbox` (12)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -267,11 +267,13 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | GET | `/api/bongos/inbox/:id` | `any-builder` | — | single idea read for the "#NNN" deep-link resolver (task 1047). |
 | PATCH | `/api/bongos/inbox/:id` | `metic+archon` | `status`, `kind`, `promoted_to_task_id`, `reviewed_at`, `merged_into_idea_id`, `triage_note` |  |
 | PATCH | `/api/bongos/inbox/:id/body` | `any-builder` | `body_md` | Metic+ (task 360 / ADR 0018): idea triage (promote/discard/merge) shapes the backlog. |
+| POST | `/api/bongos/inbox/:id/develop` | `any-builder` | `field_values`, `template_key` | POST /inbox/:id/develop — DEVELOP A SPARK INTO A FULL IDEA (task 1002922 / BV1.R146, goal 1000062). |
 | POST | `/api/bongos/inbox/:id/ratify` | `metic+archon` | `notes_md` | V3.R31 (task 252) — Archon ratifies a criterion-proposal idea, atomically: - INSERT done_when_criteria row on the target version - UPDATE… |
 | POST | `/api/bongos/inbox/:id/resubmit` | `any-builder` | `field_values`, `template_key` | RESUBMIT a Full Idea after a rejection (R13 of goal 1000069, criterion C2: an idea never dies and never stalls). |
 | POST | `/api/bongos/inbox/:id/spark` | `any-builder` | — | Mark a Quick Idea as a Big Idea Spark — "I have the spark but not the full picture, someone develop this". |
 | DELETE | `/api/bongos/inbox/:id/spark` | `any-builder` | — | Withdraw the Big Idea Spark mark — the reversibility half of R144. |
 | GET | `/api/bongos/inbox/awaiting-nod` | `metic+archon` | — | GET /inbox/awaiting-nod — the NOD QUEUE (task 1003066, BV1.R05). |
+| GET | `/api/bongos/inbox/sparks` | `any-builder` | — | GET /inbox/sparks — THE SPARK QUEUE (task 1002921 / BV1.R145, goal 1000062). |
 
 ## `instance` (1)
 

package/docs/file-map.md

@@ -175,7 +175,7 @@
 │       ├── smoke-box.sh         ← (#598) hermetic box-lifecycle smoke (no DB/DO/network): runs tests/boxes.mjs + tests/cf_tunnel.mjs (#771 named tunnel) + route-rank + module-load
 │       ├── recall.js            ← `/recall` CLI: two-call progressive-disclosure search (summary → `--expand <id>`) over Bongos retrieval layer (ADR 0060); `node scripts/gds/recall.js <query>`
 │       ├── capture.js           ← file an idea_inbox row from the CLI (the ideas.capture kernel port); backs the "capture a tangent" flow across skills
-│       ├── spark.js            ← (task 1002920 / R144) mark one of your OWN quick ideas as a Big Idea Spark — "someone develop this"; `--undo` withdraws it. Author-only server-side (the mark is the consent); its own command because sparking acts on an EXISTING idea, which is why capture.js refuses grade='spark'
+│       ├── spark.js            ← (tasks 1002920 / R144 + 1002921 / R145 + 1002922 / R146) the whole spark handoff from the terminal: mark one of your OWN quick ideas as a Big Idea Spark (`--undo` withdraws it), `--list` is the SPARK QUEUE, `--template` prints the five Full Idea fields, `--develop <id> --fields-file <json>` is the PICKUP (any builder; author + developer both recorded). Author-only server-side for the mark (it is the consent); its own command because sparking acts on an EXISTING idea, which is why capture.js refuses grade='spark'
 │       ├── worktree.js          ← (task 1002809) junction-safe worktree add/remove/list — outside-repo worktrees get a node_modules junction via node (no shell quoting), removed BEFORE `git worktree remove`
 │       ├── learning-capture.js  ← file a `learnings` row (DB-backed short-form rule capture, replacing hand-edited recipe files for a single gotcha)
 │       ├── docs-entropy.js      ← ([#…] docs-entropy) markdown-corpus linter: broken internal links + cross-file duplicate-prose detector across every tracked `.md`; `--verbose` / `--file-ideas`

package/modules/dev-box/app/src/vendor/bongos-client.cjs

@@ -404,6 +404,8 @@ function createClient(opts = {}) {
       patchInboxId: (args) => request("PATCH", "/inbox/{id}", { hasBody: true }, args),
       // PATCH /inbox/{id}/body — rank: any-builder — PATCH /inbox/:id/body
       patchInboxIdBody: (args) => request("PATCH", "/inbox/{id}/body", { hasBody: true }, args),
+      // POST /inbox/{id}/develop — rank: any-builder — POST /inbox/:id/develop
+      postInboxIdDevelop: (args) => request("POST", "/inbox/{id}/develop", { hasBody: true }, args),
       // POST /inbox/{id}/ratify — rank: metic+archon — POST /inbox/:id/ratify
       postInboxIdRatify: (args) => request("POST", "/inbox/{id}/ratify", { hasBody: true }, args),
       // POST /inbox/{id}/resubmit — rank: any-builder — POST /inbox/:id/resubmit
@@ -414,6 +416,8 @@ function createClient(opts = {}) {
       postInboxIdSpark: (args) => request("POST", "/inbox/{id}/spark", { hasBody: true }, args),
       // GET /inbox/awaiting-nod — rank: metic+archon — GET /inbox/awaiting-nod
       getInboxAwaitingNod: (args) => request("GET", "/inbox/awaiting-nod", { hasBody: false }, args),
+      // GET /inbox/sparks — rank: any-builder — GET /inbox/sparks
+      getInboxSparks: (args) => request("GET", "/inbox/sparks", { hasBody: false }, args),
     },
     "instance": {
       // GET /instance — rank: public — GET /instance