@bongos/core 1.19.438 → 1.19.440

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.438",
-  "core_contract": "1.19.438",
-  "source_commit": "c2a43c1cb58424038a4b4f8876d0d50640ffbb45",
+  "core_version": "1.19.440",
+  "core_contract": "1.19.440",
+  "source_commit": "29d61ed488414313116924179b42a740d181ebcd",
   "source_ref": "HEAD",
-  "built_at": "2026-08-30T03:25:35.542Z",
+  "built_at": "2026-08-30T15:59:08.854Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 369,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 2136,
-  "tree_sha256": "4a2e873477ef29bc7b68f35a86b59e85043e8b397c87b84e2a486930919d3d10",
+  "tree_sha256": "51a2bdc32e62c4fff1478fe6968c65c444d4e9c93175b89d1f7e33bb95266d6b",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -262,7 +262,7 @@
     {
       "path": ".claude/skills/strand-fix/SKILL.md",
       "mode": "0000644",
-      "sha256": "9a0b4f5bebdf780c4bfadde487146cb8ab5d08b3a748ee8623f336d7cbec5291"
+      "sha256": "1444494f4a8f4168c025ef5ac0fd45f88c5217ec3293921cde3ae47b339b3699"
     },
     {
       "path": ".claude/skills/worktree-clean/SKILL.md",
@@ -1632,12 +1632,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "cd0071623f3a81620e356ad59ff90d68ab4f5a5630dff9399856bfd8ab0de508"
+      "sha256": "e714e2e001cafbe9d8340979f11c10e6b9a155331c62b545f43604efc3911d5f"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "c4ebb37c87a7416aa4005812702980a084f39f69fe336d3676baf3dc8f0e6530"
+      "sha256": "f1e8015a9e6f001176800a537fd1dcd6b73d383415ec2d759beecb44b0aec086"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -1937,7 +1937,7 @@
     {
       "path": "docs/design/projects-hub-direction-v2.md",
       "mode": "0000644",
-      "sha256": "b72f9c3989e6c66e275124b43ad0d36aa718bd2d670696d0053cb2e0653c0632"
+      "sha256": "2d559909621658c31888d9870b28a92b5eb13a26000233725ae67e5ec10de77e"
     },
     {
       "path": "docs/design/projects-hub-direction.md",
@@ -1997,7 +1997,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "5eeb368487db6157e3ff6e729c0a0d193081e62934e5c2c2d69c7c56d901380b"
+      "sha256": "6a0067e49dc6a66805aab72003b1655c89439200684a8d166b98d99115b0d637"
     },
     {
       "path": "docs/modules-contract.md",
@@ -4712,7 +4712,7 @@
     {
       "path": "modules/lifecycle/ship-assurance.js",
       "mode": "0000644",
-      "sha256": "2938d8ea651af09b3c73d294057c153ce079170ae34a42e3e94025daab097dcf"
+      "sha256": "9bbbabd157420ffc7ed8c323436a27045da0d7bc7c8bfd7f4c44f300855556b1"
     },
     {
       "path": "modules/lifecycle/ship-card.js",
@@ -5607,12 +5607,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "9825b36c3afc725b8d8b25b3b3cd5ddd882905327cac8741de44fbd249df4eef"
+      "sha256": "565d5a09ff14474d026fe61b0b01af8327b769ebe9950cdacd5cf5736fd1ef31"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "f784ade5e8fe1d320fe0cec64c9913530c173dd78c9f2b3d7672620862c8cc50"
+      "sha256": "a79052529b2cef0cd3bf85657bb29c27e4bfc9dc0905a855caa251a955f3eb25"
     },
     {
       "path": "public-docs/index.html",
@@ -5852,7 +5852,7 @@
     {
       "path": "public-landing/assets/cosmos.css",
       "mode": "0000644",
-      "sha256": "761b196a29b7d25d0ff1b2480e9462fd01ea2a4c57d889cd1689c6f4fbe9ca4d"
+      "sha256": "9471075f75a270de4b3825e7b3b3d75da16b670d43aeb5f5e23bbd9addecf79f"
     },
     {
       "path": "public-landing/assets/verro-medallion.png",
@@ -6072,17 +6072,17 @@
     {
       "path": "public-landing/projects.html",
       "mode": "0000644",
-      "sha256": "5cdf9caf7e376f89d0092f289cf8430211e3f1ac3bbbfdb1f0e516babc970851"
+      "sha256": "776564ff536b3b75ce127c20124832dfec9e1e6a8596c0b604e5c977e5ebdcc5"
     },
     {
       "path": "public-landing/projects.probes.json",
       "mode": "0000644",
-      "sha256": "3bc7cea614031e2c04246274adc8375b5f54d0a043e1bf4da0a564a10964db82"
+      "sha256": "75b6673887042501a49d89845df695e727724d0d75e24ca921631ba7861e1a91"
     },
     {
       "path": "public-landing/projects.states.json",
       "mode": "0000644",
-      "sha256": "3217f46d975bd4bed7c17ee6d87b5150e81130f75a780371cb4cffb558a07373"
+      "sha256": "e2ccd397a406ead9fa962e45594d2ad4e7a96ceb345dc4b0cb559d4ed52012f5"
     },
     {
       "path": "public-landing/terms.html",
@@ -7747,7 +7747,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "858a06eaac3220a29515fe2b6d1ffd3f457e55916517c203b677378b17db4ce0"
+      "sha256": "23472d4ed18033e70751ebadeae94868388568886a265ca5554c06e34c978a33"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -9832,12 +9832,12 @@
     {
       "path": "tests/projects_hub.mjs",
       "mode": "0000644",
-      "sha256": "293c92d90457da1a3bd164f96bc897409275a7772c92c76b0b5b9bb6db8337e1"
+      "sha256": "faadd9ff3776d8a8c3aac3490b159f8be83398cd4018d397ec8aff289b7ab6c2"
     },
     {
       "path": "tests/projects_hub_pre_uat.mjs",
       "mode": "0000644",
-      "sha256": "48b314b096c67793dba8f5faeec5b03d043c42a17a38466e072e6bf9c7ae9ec5"
+      "sha256": "5ee89090c78781e5801265a82d958bf4caa685d33e461e146855f2d54c8d33e7"
     },
     {
       "path": "tests/promote_goal_id.mjs",
@@ -10272,7 +10272,7 @@
     {
       "path": "tests/ship_assurance.mjs",
       "mode": "0000644",
-      "sha256": "7257c4041ba48300172bbacbed4b0727ebd222e3626c7e871d845c048646dc12"
+      "sha256": "63f7b9e24126449b55d8c4fd0c5d8ff4dc11fea2e4eeb7b60d87d66722d5f518"
     },
     {
       "path": "tests/ship_autolinkify.mjs",

package/.claude/skills/strand-fix/SKILL.md

@@ -32,7 +32,7 @@ node scripts/gds/skill-preflight.js strand-fix   # exits 1 naming what is MISSIN
    gh pr list --search "N" --state all --json number,state,mergeable,url
    ```
 2. **Pick the ONE matching case.**
-   - **A. A main commit carries `(task N` and the post-merge `unit` + `main-audit` on main are green** (`gh run list --branch main --limit 4`): the land happened; only the proof failed (the ship deleted the branch before the reconciler probed — task 1002724). Flip it: `node scripts/gds/api.js POST /api/gds/tasks/N/ship --body '{}'`. Credits land here (ADR 0120).
+   - **A. A main commit carries `(task N` and the post-merge `unit` + `main-audit` on main are green** (`gh run list --branch main --limit 4`): the land happened; only the proof failed. The proof is the claim's recorded tip (`claims.published_head_sha`, task 1547) being an ancestor of main — and a `no_branch_no_tip` claim has none (the work rode in on another branch, e.g. a cloud-agent batch, or a `--here` claim). **Record the tip first**: the owner (Archon) sets that column on the task's latest claim to the full 40-char SHA of the main commit — a direct DB write on the box as the DB owner, so it runs under this task's own ledger with the SQL in the ship note (`UPDATE claims SET published_head_sha = '<sha>' WHERE id = (SELECT id FROM claims WHERE task_id = N ORDER BY claimed_at DESC, id DESC LIMIT 1)`). Then the reconciler proves it within ≤5 min, or flip it yourself: `node scripts/gds/api.js POST /api/gds/tasks/N/ship --body '{}'`. Never `no_artifact: true` here — the artifact exists, and the ledger would record a falsehood. Credits land on the flip (ADR 0120). (Before task 1003434 the manual POST refused even with a tip when the claim had no branch; the reconciler path always worked.)
    - **B. A local branch exists with commits ahead of `origin/main` and no PR**: the ship never pushed. From that worktree: `git push -u origin <branch>` then `gh pr create --base main --head <branch> --fill`. Green `unit` → server auto-merge → the reconciler flips it within ~5 min. If it merges but does not flip, do **A**.
    - **C. A PR exists but is `CONFLICTING`**: the branch owner rebases it (`git merge origin/main`, resolve, push) — not this skill, and never `--force`. Report the PR URL and stop.
    - **D. Nothing anywhere** — no branch, no PR, no commit: a codeless confirm. Ask what the task delivered. Work done outside this repo (on the box's instance checkout, a DB-only change captured in the ship note) is legitimately artifact-free → **A** with the reason in the ship body: `--body '{"note":"codeless: <where the work lives>"}'`. If the work was never done, release it instead so it returns to `ready`: `node scripts/gds/release.js N --reason "stranded codeless confirm; nothing delivered"`.