@bongos/core 1.19.45 → 1.19.46

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.45",
-  "core_contract": "1.19.45",
-  "source_commit": "290f271a1fb465184f1e30a82938dbb9fc0edd7f",
+  "core_version": "1.19.46",
+  "core_contract": "1.19.46",
+  "source_commit": "435360b40bbcf1f8b67e811825d20c78a80fd441",
   "source_ref": "HEAD",
-  "built_at": "2026-08-11T17:49:40.375Z",
+  "built_at": "2026-08-11T18:01:18.461Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 290,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 1525,
-  "tree_sha256": "0722aab68f68291e412986ff75bc5c9e53914d42248afd4dd8f3fddef07c1d82",
+  "tree_sha256": "3a3587819ec4fe0e5609aee28a9d9b8bd3bc11af62addc3d85d760946f0882f0",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -2672,7 +2672,7 @@
     {
       "path": "modules/discord/ship-broadcast.js",
       "mode": "0000644",
-      "sha256": "5c1273de955d5559e549603d7c60a6987f88696631c7536c429c04d55c2fdf5c"
+      "sha256": "a6250569de6838b1769768491ed2c9bc1da30cd8cd0ebda697ea142df7d902b8"
     },
     {
       "path": "modules/discord/webhook.js",
@@ -4032,12 +4032,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "b2fc08b1d386c093629982f52a456c2b79c9f3824a22a696ed6fdb37a9073def"
+      "sha256": "aed2f26ebe4fe2b47756e44e59e7860370bc7915772c5cd8dcf409861e87f6c7"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "d955953100c62b9b03bec90b70122f0a35d18bed91e60af2ae78f0573509a852"
+      "sha256": "615ec3ed94ced936891d834826b98bbfeae529dad7c1886d13c6230c6d63d88a"
     },
     {
       "path": "public-docs/index.html",
@@ -5657,7 +5657,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "ef3fa14314f284d7e93062ddc0b9ee7a046885bb13b20e41f62c7ef66eb29a24"
+      "sha256": "430e72a0dc3b4e87e8a1edee33314295aae624c736065d69f5c9ea5efbb7c41b"
     },
     {
       "path": "src/module-loader/loader.js",
@@ -7422,7 +7422,7 @@
     {
       "path": "tests/ship_broadcast_server.mjs",
       "mode": "0000644",
-      "sha256": "72507f8192bc95ac1c3a92714d2280a43ed588820ce409586a9dad88c5677b09"
+      "sha256": "2bb81a2649402bc2c17b04d17a4d749ff674f1bf5ac101d168412e709bea8550"
     },
     {
       "path": "tests/ship_card.mjs",

package/modules/discord/ship-broadcast.js

@@ -87,9 +87,14 @@ async function postShipBroadcast(task, deps = {}) {
 // NOT start with `#<taskId>` — a LEADING task marker is what the applause bot maps
 // 👍 reactions onto (discord-reaction.parseShipMarker), and a strand is not
 // applaudable shipped work.
-function chooseStrandTargets({ securitySensitive, taskId, reason }) {
+function chooseStrandTargets({ securitySensitive, taskId, title, reason }) {
   if (taskId == null) return [];
-  const line = `⚠️ task ${taskId} stranded at 'confirmed' (${reason || 'unknown'}) — its builder must fix + re-land it, or release it.`;
+  // Title folds in so the notice is self-contained (task 1002638) — a builder
+  // shouldn't have to look the id up to know which work died. Degrades to the
+  // id-only line when the payload carries none. Titles are bounded (LIMITS.TITLE
+  // = 200) so the line stays well under Discord's message cap.
+  const what = title ? `task ${taskId} — "${title}"` : `task ${taskId}`;
+  const line = `⚠️ ${what} stranded at 'confirmed' (${reason || 'unknown'}) — its builder must fix + re-land it, or release it.`;
   if (securitySensitive) {
     return [{ channel: 'security_ship_feed', line }];
   }
@@ -110,7 +115,7 @@ async function postStrandNotice(info, deps = {}) {
 
   const postWebhook = deps.postWebhook || require('./webhook').postWebhook;
   const log = deps.log || console.log;
-  const targets = chooseStrandTargets({ securitySensitive: sec, taskId: info.id, reason: info.reason });
+  const targets = chooseStrandTargets({ securitySensitive: sec, taskId: info.id, title: info.title, reason: info.reason });
   for (const { channel, line } of targets) {
     try {
       await postWebhook(channel, line);

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.45",
+  "version": "1.19.46",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.45",
+      "version": "1.19.46",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.45",
+  "version": "1.19.46",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/src/module-api.js

@@ -517,8 +517,10 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 //         landed since 1.19.43 with no explicit bump. run 31518312009. (task 1002620)
 //   1.19.45 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
 //         landed since 1.19.44 with no explicit bump. run 31519500533. (task 1002620)
+//   1.19.46 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.45 with no explicit bump. run 31520432748. (task 1002620)
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.45'; // CI auto-patch carrier (ADR 0161); see changelog above
+const CORE_VERSION = '1.19.46'; // CI auto-patch carrier (ADR 0161); see changelog above
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/ship_broadcast_server.mjs

@@ -194,15 +194,36 @@ test('1002606 chooseStrandTargets: security strand → ONLY #security-ship-feed
   for (const { channel } of t) assert.ok(!PUBLIC_CHANNELS.has(channel));
 });
 
-await atest('1002606 postStrandNotice: posts to #ship-feed for a plain strand', async () => {
+test('1002638 chooseStrandTargets: title folds into the line so the notice is self-contained', () => {
+  const t = shipBroadcast.chooseStrandTargets({
+    securitySensitive: false, taskId: 88, title: 'Fix the widget frobnicator', reason: 'strand:pr_closed_unmerged',
+  });
+  assert.equal(t.length, 1);
+  assert.match(t[0].line, /task 88/);
+  assert.match(t[0].line, /Fix the widget frobnicator/);
+  assert.match(t[0].line, /strand:pr_closed_unmerged/);
+  assert.ok(!/^\s*#\d/.test(t[0].line), 'strand line must not start with a #<id> ship marker');
+});
+
+test('1002638 chooseStrandTargets: missing title degrades to the id-only line (no "undefined")', () => {
+  for (const title of [undefined, null, '']) {
+    const t = shipBroadcast.chooseStrandTargets({ securitySensitive: false, taskId: 88, title, reason: 'strand:x' });
+    assert.equal(t.length, 1);
+    assert.match(t[0].line, /task 88/);
+    assert.ok(!/undefined|null/.test(t[0].line), `title=${String(title)} must not leak into the line`);
+  }
+});
+
+await atest('1002606 postStrandNotice: posts to #ship-feed for a plain strand (title carried through — 1002638)', async () => {
   const { fn, calls } = fakePoster();
   const res = await shipBroadcast.postStrandNotice(
-    { id: 88, builder_id: 7, security_sensitive: false, reason: 'strand:pr_closed_unmerged' },
+    { id: 88, builder_id: 7, title: 'Fix the widget frobnicator', security_sensitive: false, reason: 'strand:pr_closed_unmerged' },
     { postWebhook: fn, log: quietLog }
   );
   assert.deepEqual(res.posted, ['ship_feed']);
   assert.equal(calls.length, 1);
   assert.match(calls[0].line, /task 88/);
+  assert.match(calls[0].line, /Fix the widget frobnicator/);
 });
 
 await atest('1002606 postStrandNotice: indeterminate security flag → FAIL CLOSED (no post)', async () => {