@bongos/core 1.19.609 → 1.19.611

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.609",
-  "core_contract": "1.19.609",
-  "source_commit": "a3b44617019d6b75c6dcb2d78a64ce3c618b469a",
+  "core_version": "1.19.611",
+  "core_contract": "1.19.611",
+  "source_commit": "2fe1716bf46fd008eb614d9fb317b0e9ee2874eb",
   "source_ref": "HEAD",
-  "built_at": "2026-09-09T00:59:38.836Z",
+  "built_at": "2026-09-09T03:07:36.926Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 458,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 2562,
-  "tree_sha256": "aa867b87dbcc83ba06967ae70ee3aa9de1399ae4109acddb25671cb305dbfa77",
+  "tree_sha256": "c6a3113ed2f20af25a3ebcaee8cb4ff9cd42890d51e890a85c31ddf9d63ff5ea",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -1837,7 +1837,7 @@
     {
       "path": "docs/adr/0264-the-ten-working-areas.md",
       "mode": "0000644",
-      "sha256": "03f1cf19a181d6726066ba6fb72156add0cb8ede004ebc7ddf8ac3859a335596"
+      "sha256": "b6127318d595f9885dbf6c42c1567c926f45200df2e2144dd2bbce9313e67d91"
     },
     {
       "path": "docs/adr/0265-work-with-no-goal-and-the-order-the-cut-needs.md",
@@ -2732,7 +2732,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "73e03a8615bee74963696bf4e2abe77d489a9d5e627b285f1de5d31b18016df5"
+      "sha256": "4cc20b3afc8ec94a1d53e3d3f746269a1a7def4b6798d81402fe9078c002d3b1"
     },
     {
       "path": "docs/modules-contract.md",
@@ -2767,7 +2767,7 @@
     {
       "path": "docs/onboarding/diagrams/05-versioning.mmd",
       "mode": "0000644",
-      "sha256": "4b2cfd55a2dcbcbe6cbadffb4f3f2571fb9e7f767c2a9bd70653a73c78402aa4"
+      "sha256": "e822eff52694781d431e1eee5ac0ca1baf64802c71354ba62599fbc06b0051c2"
     },
     {
       "path": "docs/onboarding/diagrams/README.md",
@@ -2777,7 +2777,7 @@
     {
       "path": "docs/onboarding/diagrams/assertions.json",
       "mode": "0000644",
-      "sha256": "359e6b2e8c18799f6a01f42dcf1b6828f4dc5834b54fcd66107975cc4fd5aa39"
+      "sha256": "e48098a82b39a4ee12e926c1efe3598d202123ae5f381750fa45b3383d494f3b"
     },
     {
       "path": "docs/onboarding/diagrams/puppeteer-config.json",
@@ -7632,12 +7632,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "1340bad0438c46dfb8539a003bb3e05fa44d72a54edbb259383dd2db35b05d6b"
+      "sha256": "73ce6d69717b6ed9e4cf704e12b5578a86a5a9d34baaa1df34df7caa5accbedb"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "74b78e1929e0256f51d4d98d8348a0e590b8aff8c398b7ae1e34fd4d6af7cae1"
+      "sha256": "5ac0729891d64cd779f810b1bf4f98997a7dd8756c8baaa9d82577c7e7e29b60"
     },
     {
       "path": "public-docs/index.html",
@@ -9362,7 +9362,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "0bb791d7848960045050c24d49afa8ca14c5720e7d63afb13f8f6a81ff7ae8d9"
+      "sha256": "790abd4adb2065c87aa21a729b69b33d01ed07be1c5c307a865f2f8942cc9d3f"
     },
     {
       "path": "src/module-loader/catalog.js",

package/docs/adr/0264-the-ten-working-areas.md

@@ -142,3 +142,58 @@ is the system working as designed, one task ahead of its own remedy.
 - **It does not set criteria for the six new goals.** R29 scopes them; an area without done-when criteria cannot close, and inventing criteria for someone else's area is how a goal acquires scope its owner never agreed to.
 - **It does not move any task.** Rehoming is R25 (the catch-alls) and R26 (the closed goals holding open work).
 - **It does not decide the three open questions in §3.** They are surfaced, not guessed.
+
+## 6. What actually executed, 2026-09-08
+
+The cut ran to completion in one pass under [#1003728](https://cloudbongos.com/builders#/task/1003728), in the order [ADR 0265](<redacted>.md) §3 requires. **BONGOS-V1 is `shipped`, BONGOS-V2 is `building`, and the board is eleven rows: the ten working areas plus the maintenance goal.** All six strict-versioning invariants hold; 532 non-terminal tasks are homed and none are orphaned.
+
+**The close** dispositioned all 21 open non-maintenance goals — 20 `roll_forward`, and `abandon` for [#1000067](https://cloudbongos.com/builders#/goal/1000067) (Ideator compensation), which held no unfinished work. 391 tasks moved onto BONGOS-V2 with their goals; the maintenance queue's 50 carried into a fresh goal, [#1000118](https://cloudbongos.com/builders#/goal/1000118).
+
+**The fold** then moved every successor's work into its area and archived it. Areas 1, 2 and 7 are the retitled successors of goals 1000046, 1000065 and 1000068; the other seven already existed.
+
+### The four decisions §3 left open, as the owner settled them
+
+| Question | Decision |
+|---|---|
+| Is [#1000065](https://cloudbongos.com/builders#/goal/1000065) (Community surface) area 2? *(§3 asked this be confirmed)* | **Yes.** Its successor is area 2, and 1000045 folds into it. |
+| [#1000088](https://cloudbongos.com/builders#/goal/1000088) — Repo cleanup, mapped to no area | **Folds into area 6.** Repo hygiene is builder-facing. |
+| [#1000024](https://cloudbongos.com/builders#/goal/1000024) — Build-pipeline integrity | **Folds into area 4.** §3 called it "a pile of bugs"; by execution time it held **zero** — its 45 bugs had already gone to the maintenance goal, leaving 61 infra/feature/decision tasks. The deploy and release pipeline is how a core update reaches an instance, which is area 4's subject. |
+| [#1000082](https://cloudbongos.com/builders#/goal/1000082) — Status ledger | **Closed out**, its 2 tasks abandoned — the disposition §3 already recorded. |
+
+Also folded, where §3 named no destination: [#1000032](https://cloudbongos.com/builders#/goal/1000032) (Instance hosting + domains, 34 tasks) and [#1000058](https://cloudbongos.com/builders#/goal/1000058) (Non-cloudbongos project lifecycle) into **area 1** — provisioning and addressing an instance is the back half of creating a project; and [#1000073](https://cloudbongos.com/builders#/goal/1000073) (the GDS→Bongos rename) into **area 6**.
+
+### Two things §5 said this ADR would not decide, and still doesn't
+
+- **Area 2 has no done-when criterion**, because §1's 5,000-builder column for it is a literal blank and §5 reserves an area's scope to its owner. Every other area's criterion is transcribed verbatim from that table. Filed as **blocker [#1000136](https://cloudbongos.com/builders#/blocker/1000136)** — until it is answered, area 2 can never achieve, and a version closes when its last non-maintenance goal does (R16).
+- **Areas 3 and 8 have no owner assigned.** Both are Scott's in §1, but two candidate accounts exist (`scootermack`, `scottymccormack`) and picking wrong assigns a working area to the wrong person.
+
+### One correction to the execution plan, for whoever closes BONGOS-V2
+
+`roll_forward` **does not carry a goal's done-when criteria** — the successor `INSERT` in [db-versions.js](../../modules/lifecycle/db-versions.js) copies prose, scope, membership and category, and nothing in the close path touches `done_when_criteria`. The pre-execution plan predicted this would drive invariant C4 to 7/27. **It did not**, because the same transaction promotes the planning version to `building` and C4 only measures a planning version — so the criterion-less successors were never counted. The substance still matters even though the invariant stayed green: a successor arrives unable to achieve, and only the fold (which archives it) or a hand-written criterion resolves that.
+
+## 7. The names in §1, mapped to accounts — 2026-09-08
+
+§1 names owners as people; the database knows accounts, and until now nothing wrote
+down which was which. Recorded under [#1003729](https://cloudbongos.com/builders#/task/1003729). The map is evidenced from goal
+membership rather than inferred from spelling — a name that merely *looks* like a login
+is not a match.
+
+| §1 name | Account | How it was established |
+|---|---|---|
+| Rini | `jaxri` (1000095) | Sole **lead** of area 2, which §1 gives to Rini; also a member of area 1, Rini's other area. |
+| Will | `willHermesLines` (1000027) | **Lead** of area 5; member of areas 4 and 10 — the three areas §1 names him in. |
+| Masterqua | `IAMMASTERQUA` (1000025) | Member of areas 7 and 10, both of which name Masterqua. |
+| Lars | `example-owner` (3) | The owner; lead on every area. |
+| Scott | `scootermack` (1000094) | **Owner decision, 2026-09-08.** Two accounts existed — `scootermack` (archon, already a member of area 1) and `scottymccormack` (1000160, xenos, no membership anywhere). Now **lead of areas 3 and 8**, which §1 gives to Scott and which previously carried no membership for him. |
+| Nils | — | **Unmapped.** No roster account matches. |
+| Niels | — | **Unmapped.** §3 says "Niels finishes" the rename; those five tasks carry no assignee (tasks have no assignee field — only `shipped_by`, and they are unshipped). |
+
+**§1 spells the name two ways** — "Nils" in area 10's owner line, "Niels" in §3's rename
+note. Whether that is one person or two is not derivable from the data, and neither
+spelling matches any of the fifteen roster accounts. Worth resolving before anything
+relies on area 10's "all except Nils and Scott".
+
+**An owner in prose is not an owner in the database.** §1's owner column, and the
+`Owner:` line in each area's done-when criterion, are text — they grant nothing and are
+read by no gate. The load-bearing record is `goal_members`, which is why areas 3 and 8
+could read as owned while holding no membership for their owner at all.

package/docs/module-api-changelog.md

@@ -1667,5 +1667,9 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.607 with no explicit bump. run 34293848928. (task 1002620)
   1.19.609 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.608 with no explicit bump. run 34297289824. (task 1002620)
+  1.19.610 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.609 with no explicit bump. run 34305007041. (task 1002620)
+  1.19.611 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.610 with no explicit bump. run 34305857169. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/docs/onboarding/diagrams/05-versioning.mmd

@@ -14,11 +14,11 @@ flowchart TB
         v_PMS_V2 --> v_GDS_V3
         v_GDS_V4["GDS-V4 — shipped"]
         v_GDS_V3 --> v_GDS_V4
-        v_BONGOS_V1["BONGOS-V1 — building"]
+        v_BONGOS_V1["BONGOS-V1 — shipped"]
         v_GDS_V4 --> v_BONGOS_V1
         v_CB_V1["CB-V1 — shipped"]
         v_BONGOS_V1 --> v_CB_V1
-        v_BONGOS_V2["BONGOS-V2 — planning"]
+        v_BONGOS_V2["BONGOS-V2 — building"]
         v_CB_V1 --> v_BONGOS_V2
     end
     VERSIONS --> CLOSE["Version close — all done_when_criteria satisfied"]

package/docs/onboarding/diagrams/assertions.json

@@ -64,7 +64,7 @@
       },
       {
         "id": "BONGOS-V1",
-        "status": "building"
+        "status": "shipped"
       },
       {
         "id": "CB-V1",
@@ -72,7 +72,7 @@
       },
       {
         "id": "BONGOS-V2",
-        "status": "planning"
+        "status": "building"
       }
     ]
   },

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.609",
+  "version": "1.19.611",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.609",
+      "version": "1.19.611",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.609",
+  "version": "1.19.611",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/src/module-api.js

@@ -55,7 +55,7 @@ const { buildInfo } = require('./build-info');
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.609'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.611'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');