@bongos/core 1.19.498 → 1.19.499

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.498",
-  "core_contract": "1.19.498",
-  "source_commit": "20beae21ee5af0c6929954f91c2a8acaf23aaa67",
+  "core_version": "1.19.499",
+  "core_contract": "1.19.499",
+  "source_commit": "92440689380dd093245f653913e00057ab676868",
   "source_ref": "HEAD",
-  "built_at": "2026-09-03T14:46:19.020Z",
+  "built_at": "2026-09-03T14:54:10.717Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 425,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 2391,
-  "tree_sha256": "a822992243dff9dbc60fd91bf31adbef6c64477f3a30367b06dfeb5aca77e74a",
+  "tree_sha256": "1f214a204898d5d41ef2b9c79430c2cec5608952fa20bc374537fe257d6f2399",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -227,7 +227,7 @@
     {
       "path": ".claude/skills/planning-session/SKILL.md",
       "mode": "0000644",
-      "sha256": "f8aaf5459d893f52fb5f8296d650770344aed8b0193619c47bcf5311bb3d2b74"
+      "sha256": "02aea92c35c8ae64eff029bb3dc9579a871cb47321a058693c71206af993132e"
     },
     {
       "path": ".claude/skills/priority-session/SKILL.md",
@@ -2567,7 +2567,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "8fdf08a8b150af9c3fe543fca4265a81b71fcf42d79baf733865432305204914"
+      "sha256": "2736ad8ab2cd06e48417ccb88beca58bb953d6f68f40fa63a4180a48d6e321ba"
     },
     {
       "path": "docs/modules-contract.md",
@@ -7212,12 +7212,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "38c8a713cccd40594f0d5016517d008c3dd0970517a7b8da6545ac404d48ed79"
+      "sha256": "018f166ff7ebab32a697e6f553676548f805dde401ba5263ab2ee996369d57cf"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "3438a4f78cb41fa0c933447857c76b4a125edf7398de92d3a466ffefc96adbd7"
+      "sha256": "5dd640ce5899ce2a2b2d1001e8ed3a93edf78b1e3b9f6eacfd1797e323d3e125"
     },
     {
       "path": "public-docs/index.html",
@@ -8887,7 +8887,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "164ce624de92bffcb36ceb3f8fb75edfd2bce5fe981166ba653aafdcdf726e0b"
+      "sha256": "143b72cab0ab221d852a32519a476a29cdd9bb6f50fedb29d04cffc0ccf1faf3"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -10982,7 +10982,7 @@
     {
       "path": "tests/planning_session_skill.mjs",
       "mode": "0000644",
-      "sha256": "ee50a6662c9e2771b849e0a33c49fd112166eac1c5fd0f021c5fe12409ea9eb1"
+      "sha256": "1f2d52192e96bc1f2693a4b1a8458bc0f533e9c971c9ac42d9199e11d01eec48"
     },
     {
       "path": "tests/platform_boot.mjs",

package/.claude/skills/planning-session/SKILL.md

@@ -84,6 +84,17 @@ This is where the user sees what they're shaping. Do not skip this — criteria
 
    Surface the list to the user and get a per-goal carry/replace decision before writing criteria — the carry-forward goals shape this version's goal set.
 
+### Phase 1.5 — Map the mechanism (process-change sessions only) — task 1003075
+
+**Run this phase when the session is scoped to CHANGING how an existing mechanism already works** (a redesign, not a net-new feature with nothing live to replace) — skip it for a purely additive version with no prior mechanism in play. The precedent is the 2026-08-17 idea-routing session (goal 1000071): a subagent mapping the LIVE capture→triage→promote path before Phase 2 turned "route bugs to goals" into the capture-time-promotion design and resolved the bugs-vs-features question almost by itself — the session's own retro named it the highest-value step, and until now the skill only implied it.
+
+1. **Input.** Name the subsystem(s) the version is about to change, and the entry points you already know (a route file, a CLI script, a module's public function) as the subagent's starting point.
+2. **Spawn a read-only mapping subagent** (`Explore` or `general-purpose`, `model: sonnet` or higher per CLAUDE.md's subagent routing — this feeds a design decision, not plumbing) with a prompt asking it to trace the CURRENT live mechanism end-to-end: every entry point that touches it, the chokepoint(s) data already funnels through, and any function/route already doing part of what the new design needs. Ask for file:line references, not prose summaries — the output has to be citable in the spec.
+3. **Output artifact — the mechanics map.** A short structured list: each chokepoint or reusable function/route, with a file:line and a one-line note on what it does today. Write it down (in the session, or straight into the spec draft) rather than letting it live only in the subagent's reply.
+4. **Consumed by:**
+   - **Phase 2 (Criteria)** — a chokepoint the map surfaces (e.g. "every capture vector funnels through one function") often turns directly into a criterion, or reframes one that would otherwise be written as a task list.
+   - **Phase 3 (the spec)** — the map becomes the spec's **"Reuse, do not rebuild"** table under *Design decisions & assumptions*: one row per chokepoint/function, `existing → how the new design uses it`. See `docs/specs/<redacted>.md` §Design decisions for the worked example.
+
 ### Phase 2 — Criteria
 
 Criteria are the version's done-when. Strong criteria are **outcomes** (broad enough to anchor many tasks), not **task lists** (so narrow they only anchor a few). Five to nine criteria is the typical band; ours have been 7-9.

package/docs/module-api-changelog.md

@@ -1433,5 +1433,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.496 with no explicit bump. run 33767382661. (task 1002620)
   1.19.498 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.497 with no explicit bump. run 33768753719. (task 1002620)
+  1.19.499 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.498 with no explicit bump. run 33769500709. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.498",
+  "version": "1.19.499",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.498",
+      "version": "1.19.499",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.498",
+  "version": "1.19.499",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/src/module-api.js

@@ -45,7 +45,7 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.498'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.499'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/planning_session_skill.mjs

@@ -53,5 +53,43 @@ test('step 5 (run the seed script) points at the self-check rather than treating
   assert.ok(step5.slice(0, 400).includes('verifySeedCriteriaLinks'), 'step 5 references the self-check by name');
 });
 
+// --- task 1003075: the mechanics-map subagent becomes a named step ---------
+
+test('a named "Map the mechanism" step exists between Phase 1 and Phase 2, in order', () => {
+  const phase1 = SKILL.indexOf('### Phase 1 —');
+  const mapStep = SKILL.indexOf('### Phase 1.5 — Map the mechanism');
+  const phase2 = SKILL.indexOf('### Phase 2 —');
+  assert.ok(phase1 !== -1 && mapStep !== -1 && phase2 !== -1, 'all three headings must exist');
+  assert.ok(phase1 < mapStep && mapStep < phase2, 'Phase 1.5 must sit between Phase 1 and Phase 2');
+});
+
+test('the mechanics-map step names its input, its output artifact, and where the output is consumed', () => {
+  const start = NORM.indexOf('Phase 1.5 — Map the mechanism');
+  const end = NORM.indexOf('Phase 2 — Criteria', start);
+  const section = NORM.slice(start, end === -1 ? undefined : end);
+  assert.ok(section.length > 0, 'the Phase 1.5 section must be non-empty');
+  assert.ok(/\bInput\b/.test(section), 'names its input');
+  assert.ok(section.includes('mechanics map'), 'names its output artifact (the mechanics map)');
+  assert.ok(/\bConsumed by\b/.test(section), 'names where the output is consumed');
+  assert.ok(section.includes('Phase 2') && section.includes('Phase 3'), 'names the specific later steps that consume it');
+});
+
+test('the mechanics-map step names the subagent mechanism and the retro precedent that motivated it', () => {
+  const start = NORM.indexOf('Phase 1.5 — Map the mechanism');
+  const end = NORM.indexOf('Phase 2 — Criteria', start);
+  const section = NORM.slice(start, end === -1 ? undefined : end);
+  assert.ok(section.includes('subagent'), 'names a subagent as the mechanism');
+  assert.ok(section.includes('goal 1000071'), 'cites the idea-routing session as the precedent');
+  assert.ok(section.includes('task 1003075'));
+});
+
+test('the step is scoped to process-change sessions, not every planning session', () => {
+  const start = NORM.indexOf('Phase 1.5 — Map the mechanism');
+  const end = NORM.indexOf('Phase 2 — Criteria', start);
+  const section = NORM.slice(start, end === -1 ? undefined : end);
+  assert.ok(/process-change/i.test(section));
+  assert.ok(/skip/i.test(section), 'says explicitly when to skip it');
+});
+
 console.log(`\nplanning_session_skill: ${passed} passed, ${failed} failed`);
 if (failed > 0) process.exit(1);