@bongos/core 1.19.647 → 1.19.649

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.647",
-  "core_contract": "1.19.647",
-  "source_commit": "8fa0f8d28d7d61f52297185e5c669d70a60480de",
+  "core_version": "1.19.649",
+  "core_contract": "1.19.649",
+  "source_commit": "10ae5631783d03386a93457958ac7846e3ad4b83",
   "source_ref": "HEAD",
-  "built_at": "2026-09-10T18:40:35.458Z",
+  "built_at": "2026-09-10T19:54:28.577Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 470,
     "agent_docs_stubbed": 24,
-    "functional_verbatim": 2107,
+    "functional_verbatim": 2109,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 2601,
-  "tree_sha256": "7cebbe4108e45c224a38f2068e1e7a1d00552500b0b6f6d7f5c111d45f63a037",
+  "file_count": 2603,
+  "tree_sha256": "05f4d97454a0e6f6d8eadf6c13d88c68d8619b32269b20409e5a79505dad4596",
   "files": [
     {
       "path": ".claude/skills/backlog-review/SKILL.md",
@@ -382,7 +382,7 @@
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "a6b15120b937f2a73d47ef180956068560eb3ac3efe5cf58f3a021b544ff9bc0"
+      "sha256": "5ef1befd1a1b30e8ef9e8b8ca08f768361d2422f6ddba2160a5395d46a84d443"
     },
     {
       "path": "clients/bongos-client/index.mjs",
@@ -1892,12 +1892,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "0fa07d5f61ab66a43e0c51e51cfac8223afcb1aa12ea7342a226cb1832c0be62"
+      "sha256": "6c5f26c9c00387ecc84ed80726a4d62eca0f017f1d75c304d758961749fe616f"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "02c082bff4c5bebbf13cefeeb46a6b9cdff430cc32b65dd4e78a72248c6fd74f"
+      "sha256": "d63a4ab6e92a24d339a632360fb92246512e09eabbc5bff632881bda6d4abf50"
     },
     {
       "path": "docs/architecture.md",
@@ -2772,7 +2772,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "0f1d4f5ea01f97e24ee83708c35267828f6d7fb2c64a47db9b7b94c43205951a"
+      "sha256": "454e5258c7dccd1013445f290acf0cfbd0cf396c9cb5bbcf8a08b911770bfa07"
     },
     {
       "path": "docs/modules-contract.md",
@@ -5662,7 +5662,7 @@
     {
       "path": "modules/lifecycle/db-tasks.js",
       "mode": "0000644",
-      "sha256": "d8cce5b44106009987d3d32b711a114e4505b4e504bbc6fdfc84f161024ee0cd"
+      "sha256": "fb6503bdaf013a13752968844693cbf957484f033b9df27a66f93eacb91c2cfa"
     },
     {
       "path": "modules/lifecycle/db-versions.js",
@@ -5672,7 +5672,7 @@
     {
       "path": "modules/lifecycle/db.js",
       "mode": "0000644",
-      "sha256": "95ff6bc6e9f4ad652dc2aa6bc2c7c520409a2115c714cb4ba867fc80413691e8"
+      "sha256": "a568b425560d8d8f4523995442454233b69016a31934810c5d4b7d83baab0b09"
     },
     {
       "path": "modules/lifecycle/dead-deps.js",
@@ -5902,7 +5902,7 @@
     {
       "path": "modules/lifecycle/routes/task-write-routes.js",
       "mode": "0000644",
-      "sha256": "cc86b3c05885c733cc28ba6e41f1b08cb8f0fe652e3181c1c88be4caabf18d61"
+      "sha256": "25bfb492572d553dbd19595addc0c337706ac2c83df71fb04d7fa199b07b715b"
     },
     {
       "path": "modules/lifecycle/routes/tasks.js",
@@ -7727,12 +7727,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "b271a576a07b28caf13c7d64f1ba8407e3a4d5e53d13accf0da4ad461f94382e"
+      "sha256": "356482b30a64a35a5ae0a670d0b26e0b10dcdd71ae106e8b22fb8f5843282c05"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "e6e4d441aab1b961398eb377d6ac1e4cb9f072efcfa26bd5f51b878b116a8a3e"
+      "sha256": "30e3bed231acb41d36332cae243423aee74a09604e87c966908543fefde74b65"
     },
     {
       "path": "public-docs/index.html",
@@ -8867,7 +8867,7 @@
     {
       "path": "scripts/gds/ship-flow.js",
       "mode": "0000644",
-      "sha256": "9853e719e4a695cc52ec9089298d05163210ed3b51ca9eceb7553bc0ed9c65bd"
+      "sha256": "8bf28a3d4d15e83a1e94416ec2519d39bc2a3faa71303a4f2d22d429b6afaa95"
     },
     {
       "path": "scripts/gds/ship-git.js",
@@ -9487,7 +9487,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "5394603956c3ec34e8377f82a7f493d7c029f0db1d99b236a0e024fd619fe869"
+      "sha256": "eaa8edfbeec057365723ebfc9d148061b96be50cc37a1ad51b7d050f6e2906c4"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -9497,7 +9497,7 @@
     {
       "path": "src/module-loader/loader.js",
       "mode": "0000644",
-      "sha256": "7c03edea5abee5cce4dfb2f22626e15ee2257ba44f6024e0bf74ff35e8ed0f42"
+      "sha256": "5e417760b49f19d48af3dbd72a90edb53b6a9710ce54ca33052f4fbe86cb9229"
     },
     {
       "path": "src/module-loader/manifest-schema.js",
@@ -9517,7 +9517,7 @@
     {
       "path": "src/module-seams.js",
       "mode": "0000644",
-      "sha256": "60cdc1e4ffb22a843a1581909e742b9672fca776bfe5716e72aab77c63df6099"
+      "sha256": "34378efdff13b7e44e38f248026aa927073e0c0c15db670cabaea7aa939c4959"
     },
     {
       "path": "src/modules.js",
@@ -11147,7 +11147,7 @@
     {
       "path": "tests/home_bounded_reads.mjs",
       "mode": "0000644",
-      "sha256": "186a8ebd04cd4dc8021b3a36699468e9c0bcf78ca61ce9f7be7c3e25c632fb3e"
+      "sha256": "6853241b64b5f71dfb782956a4fab468a05aa2a9ee41d5159a4cbea5f0424f38"
     },
     {
       "path": "tests/hook_core_resolve.mjs",
@@ -11434,6 +11434,11 @@
       "mode": "0000644",
       "sha256": "7fa36152b6dbb17b2855d261ddbea96af63d26f97001273cd131104235ea431d"
     },
+    {
+      "path": "tests/lifecycle_facade_surface.mjs",
+      "mode": "0000644",
+      "sha256": "cc14604bf130022ce2533247d29187da6260a791f850f73051bd522252d1b115"
+    },
     {
       "path": "tests/linkify_check.mjs",
       "mode": "0000644",
@@ -11552,7 +11557,7 @@
     {
       "path": "tests/migration_allocation.mjs",
       "mode": "0000644",
-      "sha256": "0d1bc299555d98aa2ad8571e0a5a185776ca727f95577c3308a7e4b36efbfd97"
+      "sha256": "e9271b1a67d201cfd075ce272b1a5a4f3b66c80dcfa5798ca3ea0d3f5048be43"
     },
     {
       "path": "tests/migration_namespace.mjs",
@@ -11627,7 +11632,7 @@
     {
       "path": "tests/module_loader.mjs",
       "mode": "0000644",
-      "sha256": "24aed55c34771eb1bdaec9a51b1e818549298455d50a9ade96db3cc1f06c034b"
+      "sha256": "5d09d5ccedf777c55509dc98365b46c443848c854158ace66fa17c99ba538737"
     },
     {
       "path": "tests/module_manifest.mjs",
@@ -11792,7 +11797,12 @@
     {
       "path": "tests/patch_gate_ordering.mjs",
       "mode": "0000644",
-      "sha256": "27a3b5023b6857f3f53734966bc7685757383f2b8dadfa3c0bf1aca2e7db5517"
+      "sha256": "db5e934ef61ddc8dc5804f25a9c84c04f30570db708fd6c77a157e101c69b4d4"
+    },
+    {
+      "path": "tests/patch_value_summary_e2e.mjs",
+      "mode": "0000644",
+      "sha256": "86f60e682284c5f36fa23c6df0ec8b137f40cc548562d6c4496d11d200edb9bf"
     },
     {
       "path": "tests/path_match.mjs",
@@ -11817,7 +11827,7 @@
     {
       "path": "tests/platform_boot.mjs",
       "mode": "0000644",
-      "sha256": "fb28eed2a6933805d2af7dc0f8d8e966f921c6556683e1f22b440c2f4a32760d"
+      "sha256": "02a3d4540ddecfe530022df0c6cab4f48258b78efd44224c097622e45b8cc0d5"
     },
     {
       "path": "tests/platform_visibility_gate.mjs",
@@ -12522,7 +12532,7 @@
     {
       "path": "tests/ship_cannot_lie.mjs",
       "mode": "0000644",
-      "sha256": "d8d99b6cd465b04eaf13790b0bdfe9a76ce36d77660407d3a2c6a17ac7852e8c"
+      "sha256": "18a3bb613fff3dcc0dfbffb2283a866726af4347c161fc28853b36b5bdd75512"
     },
     {
       "path": "tests/ship_card.mjs",

package/clients/bongos-client/index.d.ts

@@ -183,7 +183,7 @@ export interface PatchProvisioningInstancesIdDetailResponse { ok: boolean; descr
 export interface PatchProvisioningInstancesIdSettingsResponse { ok: boolean; saved: unknown; planet: unknown; push: unknown }
 export interface PatchTaskRecommendationsIdRequest { status: "declined" | "withdrawn" }
 export interface PatchTaskRecommendationsIdResponse { ok: boolean; recommendation: unknown }
-export interface PatchTasksIdRequest { kind?: string; discipline?: string; requires_rank?: string; module_key?: string; goal_id?: number; parent_task_id?: StringifiableId; parallel_safe?: unknown; newcomer_friendly?: boolean; xenos_claimable?: boolean; security_sensitive?: boolean; automation_tag?: string; needs_migration?: boolean; description?: string; title?: string; priority?: unknown; status?: unknown }
+export interface PatchTasksIdRequest { kind?: string; discipline?: string; requires_rank?: string; module_key?: string; goal_id?: number; parent_task_id?: StringifiableId; parallel_safe?: unknown; newcomer_friendly?: boolean; xenos_claimable?: boolean; security_sensitive?: boolean; automation_tag?: string; needs_migration?: boolean; description?: string; title?: string; priority?: unknown; value_summary?: string; status?: unknown }
 export interface PostAccessRequestsInviteRequest { github_login: string }
 export interface PostAccessRequestsInviteResponse { ok: boolean; already_invited?: boolean; github_login?: unknown; request?: unknown }
 export interface PostAccessRequestsRequest { github_login: string; display_name?: string; note?: string }

package/docs/api/openapi.json

@@ -18981,6 +18981,11 @@
             "maxLength": 200
           },
           "priority": {},
+          "value_summary": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 1000
+          },
           "status": {}
         },
         "additionalProperties": false

package/docs/api-reference.md

@@ -593,7 +593,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | GET | `/api/bongos/tasks` | `any-builder` | — |  |
 | POST | `/api/bongos/tasks` | `metic+archon` | `version_id`, `title`, `description`, `status`, `touches`, `est_minutes`, `est_cost_usd`, `manual_degree`, `priority`, `automation_tag`, `credits_reward`, `source`, `source_ref`, `value_summary`, `kind`, `discipline`, `parallel_safe`, `newcomer_friendly`, `security_sensitive`, `requires_rank`, `auto_detect_touches`, `criterion_ids`, `module_key`, `goal_id` | Task create/promote/edit (plan/scope mutation) is Metic+ as of ADR 0090 (owner decision 2026-06-26): a Metic who can run idea-triage may … |
 | GET | `/api/bongos/tasks/:id` | `any-builder` | — | single-task read; preserved per CRITICAL §4 (supervisor hot path). |
-| PATCH | `/api/bongos/tasks/:id` | `metic+archon` | `kind`, `discipline`, `requires_rank`, `module_key`, `goal_id`, `parent_task_id`, `parallel_safe`, `newcomer_friendly`, `xenos_claimable`, `security_sensitive`, `automation_tag`, `needs_migration`, `description`, `title`, `priority`, `status` | PATCH /tasks/:id — supports body.parent_task_id (V2 C2), body.kind (V2 B1), body.discipline (mig 014), body.parallel_safe (mig 028), and … |
+| PATCH | `/api/bongos/tasks/:id` | `metic+archon` | `kind`, `discipline`, `requires_rank`, `module_key`, `goal_id`, `parent_task_id`, `parallel_safe`, `newcomer_friendly`, `xenos_claimable`, `security_sensitive`, `automation_tag`, `needs_migration`, `description`, `title`, `priority`, `value_summary`, `status` | PATCH /tasks/:id — supports body.parent_task_id (V2 C2), body.kind (V2 B1), body.discipline (mig 014), body.parallel_safe (mig 028), and … |
 | POST | `/api/bongos/tasks/:id/abandon` | `metic+archon` | `reason` | POST /tasks/:id/abandon — terminal "retire this task" transition (task 987). |
 | POST | `/api/bongos/tasks/:id/attest-gate` | `any-builder` | `head_sha` | POST /tasks/:id/attest-gate — body: { head_sha }. |
 | POST | `/api/bongos/tasks/:id/confirm` | `any-builder` | `verified` |  |

package/docs/module-api-changelog.md

@@ -1743,5 +1743,9 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.645 with no explicit bump. run 34512629504. (task 1002620)
   1.19.647 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.646 with no explicit bump. run 34515733973. (task 1002620)
+  1.19.648 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.647 with no explicit bump. run 34518387614. (task 1002620)
+  1.19.649 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.648 with no explicit bump. run 34523111338. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/lifecycle/db-tasks.js

@@ -308,7 +308,7 @@ async function findTaskBySourceRef({ source, sourceRef } = {}, deps = {}) {
 
 const TASK_SETTER_COLUMNS = new Set([
   'kind', 'discipline', 'newcomer_friendly', 'security_sensitive', 'parallel_safe', 'automation_tag',
-  'needs_migration', 'module_key', 'description', 'title', 'priority',
+  'needs_migration', 'module_key', 'description', 'title', 'priority', 'value_summary',
 ]);
 
 async function updateTaskColumn(id, column, value) {
@@ -383,6 +383,17 @@ async function updateTaskTitle(id, title) { return updateTaskColumn(id, 'title',
 // 1 = most urgent, 5 = least; null clears it back to unset (weighted as 5).
 async function updateTaskPriority(id, priority) { return updateTaskColumn(id, 'priority', priority); }
 
+// task 1003817: the shipped-value sentence — what the hall, /status and the
+// Discord #ship-news line all read. It was written in exactly ONE place, the
+// claim-resolve route, so a re-grade (which has no claim — regradeMain
+// synthesizes a claimLike precisely because the claim is gone) could correct
+// the summary in the PR and the merge commit and still leave the RECORD holding
+// the first ship's sentence forever. This is the write vector that path uses.
+// Rewritable, never blankable: the route refuses an empty or whitespace-only
+// value, which is this column's form of the COALESCE/NULLIF posture db-ship.js
+// keeps on every other value_summary write.
+async function updateTaskValueSummary(id, valueSummary) { return updateTaskColumn(id, 'value_summary', valueSummary); }
+
 
 async function updateTaskDiscipline(id, discipline) { return updateTaskColumn(id, 'discipline', discipline); }
 
@@ -1037,5 +1048,6 @@ module.exports = {
   updateTaskRequiresRank,
   updateTaskSecuritySensitive,
   updateTaskStatus,
+  updateTaskValueSummary,
   versionAcceptsNewWork,
 };

package/modules/lifecycle/db.js

@@ -30,10 +30,16 @@
 // FACADE (task 1003204, goal 1000079). This file was a 5,748-line monolith; the
 // R03 de-monolith plan carved it into the twelve db-*.js units required below,
 // each cohesive and well under the 1,500-line ratchet. The carve was STRUCTURAL:
-// no function body changed, and the module.exports block at the bottom is the
-// original one verbatim — so every `require('./db')` call site, and every name
+// no function body changed, and every `require('./db')` call site, and every name
 // reachable through it, behaves exactly as before.
 //
+// The module.exports block was the carve's ORIGINAL list verbatim until task
+// 1003817, which replaced the db-tasks.js third of it with a spread — see the
+// long note above `const dbTasks` for why, and tests/lifecycle_facade_surface.mjs
+// for the assertion that keeps that surface identical. The other eleven units
+// are still re-listed by name; giving one of them a spread means giving it an
+// omit list and a surface pin too, because a bare spread publishes internals.
+//
 // The units form a DAG (no require cycles), in dependency order:
 //   db-shared → db-rank-authz → {db-versions, db-goals, db-tasks} → db-analytics
 //   → db-ship → db-claims;  db-deps-criteria and db-claim-reads stand alone.
@@ -100,38 +106,37 @@ const {
   setGoalVisibility,
   transferGoalOwnership,
 } = require('./db-goals.js');
-const {
-  REWARD_SUGGESTION_CAP,
-  createCriterion,
-  createTask,
-  findTaskBySourceRef,
-  generalGoalIdForVersion,
-  getTask,
-  listActiveClaims,
-  listClaimableTasks,
-  listTasks,
-  rankCrossDisciplineRecommendations,
-  rewardGateAssignment,
-  rewardGateError,
-  rewardMissing,
-  setCreditsReward,
-  suggestCreditsReward,
-  taskTouchesProtectedPath,
-  updateTaskAutomationTag,
-  updateTaskDescription,
-  updateTaskTitle,
-  updateTaskDiscipline,
-  updateTaskGoal,
-  updateTaskKind,
-  updateTaskModuleKey,
-  updateTaskNeedsMigration,
-  updateTaskNewcomerFriendly,
-  updateTaskParallelSafe,
-  updateTaskPriority,
-  updateTaskRequiresRank,
-  updateTaskSecuritySensitive,
-  updateTaskStatus,
-} = require('./db-tasks.js');
+// task 1003817: db-tasks.js's exports ARE this facade's task surface, so they are
+// spread into module.exports below instead of being re-listed name by name.
+//
+// WHY THE TWIN LIST HAD TO GO. What stood here was 31 sorted names destructured
+// from db-tasks.js purely so module.exports could name them again — not one was
+// called anywhere inside this file. Two hand-maintained copies of one list is
+// real duplication, and the `duplicate_window_count` ratchet reads it as such:
+// the lists were 29 identical normalized lines, one under the 30-line window, so
+// task 1003750 adding `updateTaskPriority` to both pushed the run to 30 and cost
+// an owner-decided baseline raise (59 → 60). That decision is recorded in
+// config/fitness-baselines.json along with the instruction for whoever added the
+// NEXT db-tasks function — this task, adding updateTaskValueSummary: fix the
+// facade, do not raise the baseline again. Spreading removes the whole class, so
+// the next setter costs nothing.
+//
+// TASK_FACADE_OMIT is what keeps this surface-PRESERVING rather than quietly
+// wider. Two of db-tasks.js's 33 exports were deliberately never re-exported
+// here, and a bare spread would publish them — which ADR 0091 §3 treats as a
+// real surface change, not a tidy-up. Naming them means dropping one has to be
+// somebody's decision. tests/lifecycle_facade_surface.mjs pins the resulting key
+// set, so this can never silently widen or narrow.
+const dbTasks = require('./db-tasks.js');
+const TASK_FACADE_OMIT = new Set([
+  // Internal to db-tasks.js's own queries — a SQL fragment, not a callable.
+  'CREDITS_AWARDED_SUBQUERY',
+  // The version-gate predicate; routes reach it through db-versions, not here.
+  'versionAcceptsNewWork',
+]);
+const dbTasksFacade = Object.fromEntries(
+  Object.entries(dbTasks).filter(([name]) => !TASK_FACADE_OMIT.has(name))
+);
 const {
   addDependency,
   addTaskCriterion,
@@ -214,6 +219,7 @@ const {
 } = require('./db-claims.js');
 
 module.exports = {
+  ...dbTasksFacade,
   tallyPeerVotes,
   PEER_VOTE_KARMA_LAG_DAYS,
   RANKS,
@@ -263,19 +269,6 @@ module.exports = {
   listCriteriaForGoal,
   archiveGoalWithDispositions,
   openTasksInGoal,
-  createTask,
-  generalGoalIdForVersion,
-  findTaskBySourceRef,
-  getTask,
-  listTasks,
-  updateTaskGoal,
-  createCriterion,
-  updateTaskKind,
-  updateTaskDescription,
-  updateTaskTitle,
-  updateTaskDiscipline,
-  updateTaskNewcomerFriendly,
-  updateTaskRequiresRank,
   xenosClaimAllowed,
   rankAllowsTask,
   REQUIRES_RANK_TIER,
@@ -290,31 +283,14 @@ module.exports = {
   LIVE_RANK_LADDER,
   deriveRequiredRank,
   highestRank,
-  rewardMissing,
-  suggestCreditsReward,
-  REWARD_SUGGESTION_CAP,
-  rewardGateAssignment,
-  rewardGateError,
-  setCreditsReward,
   THETES_GRADUATION_THRESHOLD,
   qualifiesForThetesGraduation,
   countShippedTasksForBuilder,
   singleRungPromotionError,
   disambiguateWorktreeName,
   foldWorktreeName,
-  updateTaskParallelSafe,
-  updateTaskPriority,
-  updateTaskSecuritySensitive,
-  updateTaskAutomationTag,
-  updateTaskNeedsMigration,
-  updateTaskModuleKey,
-  listClaimableTasks,
   capNewcomerTasks,
-  taskTouchesProtectedPath, // SR-12 / G2 (task 994): autonomous-fit protected-path exclusion (pure, testable)
   decorateGoalMembership, // task 1003137: feed-side joinable flag (pure, testable)
-  rankCrossDisciplineRecommendations,
-  listActiveClaims,
-  updateTaskStatus,
   getTaskDependencies,
   getTaskDependents,
   attachTaskDepSummaries,

package/modules/lifecycle/routes/task-write-routes.js

@@ -326,6 +326,14 @@ module.exports = function registerTaskWriteRoutes(router) {
       // A whole-goal re-rank (needed-vs-nice) had no route and had to run as SQL.
       // null clears it back to unset; the 1..5 bounds mirror tasks_priority_check.
       priority: {},                                      // 1..5 or null — checked inline
+      // task 1003817: the shipped-value sentence. Written in exactly one place
+      // before this — the claim-resolve route — so `ship.js --regrade --summary`
+      // (no claim, by definition) could correct it in the PR and the merge commit
+      // and still leave the hall, /status and the Discord ship line reading the
+      // FIRST ship's text forever. Same task.edit permission and audit_log trail
+      // as the title/description/priority edits above; minLength 1 (plus the
+      // whitespace check below) so the record can be rewritten, never blanked.
+      value_summary: { type: 'string', minLength: 1, maxLength: LIMITS.VALUE_SUMMARY },
       // task 1002614 (map D-18): DECLARED so strict-mode admits the request far
       // enough to reach the deliberate status_not_patchable hint below (#514) —
       // the hint had been unreachable dead code behind unknown_field since the
@@ -354,6 +362,7 @@ module.exports = function registerTaskWriteRoutes(router) {
     const hasDescription = Object.prototype.hasOwnProperty.call(body, 'description');
     const hasTitle = Object.prototype.hasOwnProperty.call(body, 'title');
     const hasPriority = Object.prototype.hasOwnProperty.call(body, 'priority');
+    const hasValueSummary = Object.prototype.hasOwnProperty.call(body, 'value_summary');
     // #514: status is a lifecycle field, not a PATCH-able column — it moves only
     // through the dedicated transition routes. The #506 session tried
     // `PATCH status=ready`, got the generic no_supported_fields error, and had
@@ -365,8 +374,8 @@ module.exports = function registerTaskWriteRoutes(router) {
     if (Object.prototype.hasOwnProperty.call(body, 'status')) {
       return res.fail('status_not_patchable', { status: 400, message: STATUS_HINT });
     }
-    if (!hasParent && !hasKind && !hasDiscipline && !hasNewcomerOrXenos && !hasParallelSafe && !hasSecuritySensitive && !hasAutomationTag && !hasNeedsMigration && !hasRequiresRank && !hasModuleKey && !hasGoalId && !hasDescription && !hasTitle && !hasPriority) {
-      return res.fail('no_supported_fields', { status: 400, message: 'PATCH /tasks/:id supports parent_task_id, kind, discipline, title, description, priority, parallel_safe, security_sensitive, automation_tag, needs_migration, requires_rank, module_key, goal_id, and newcomer_friendly (alias: xenos_claimable). ' + STATUS_HINT });
+    if (!hasParent && !hasKind && !hasDiscipline && !hasNewcomerOrXenos && !hasParallelSafe && !hasSecuritySensitive && !hasAutomationTag && !hasNeedsMigration && !hasRequiresRank && !hasModuleKey && !hasGoalId && !hasDescription && !hasTitle && !hasPriority && !hasValueSummary) {
+      return res.fail('no_supported_fields', { status: 400, message: 'PATCH /tasks/:id supports parent_task_id, kind, discipline, title, description, value_summary, priority, parallel_safe, security_sensitive, automation_tag, needs_migration, requires_rank, module_key, goal_id, and newcomer_friendly (alias: xenos_claimable). ' + STATUS_HINT });
     }
     // ---- task 1002609 (G-22): settle EVERY gate and validation before the ----
     // ---- FIRST write. The previous shape validated-and-wrote per field in ----
@@ -393,6 +402,14 @@ module.exports = function registerTaskWriteRoutes(router) {
         return res.fail('bad_priority', { status: 400, message: `priority must be an integer ${TASK_FIELD_BOUNDS.priority.min}-${TASK_FIELD_BOUNDS.priority.max} (1 = most urgent), or null to clear` });
       }
     }
+    // task 1003817: minLength 1 refuses "" but not "   ", and the write trims —
+    // so without this a whitespace-only body would blank the shipped-value
+    // record through the one field whose whole point is that it survives. An
+    // omitted field writes nothing at all (hasValueSummary is false), which is
+    // this route's form of the COALESCE/NULLIF posture db-ship.js keeps.
+    if (hasValueSummary && body.value_summary.trim() === '') {
+      return res.fail('bad_value_summary', { status: 400, message: 'value_summary must be a non-empty sentence — the shipped-value record can be rewritten, never blanked. Omit the field to leave it unchanged.' });
+    }
     if (hasSecuritySensitive) {
       // task 990: explicit Archon-only-broadcast flag. Boolean only (no null) —
       // it gates whether ship.js routes the broadcast to the Archon-only
@@ -556,6 +573,15 @@ module.exports = function registerTaskWriteRoutes(router) {
         return res.fail('patch_failed', { status: 500, message: 'internal error' });
       }
     }
+    if (hasValueSummary) {
+      try {
+        updated = await db.updateTaskValueSummary(id, body.value_summary.trim());
+        if (!updated) return res.fail('task_not_found', 404);
+      } catch (err) {
+        log.error('[gds] PATCH /tasks/:id value_summary', err);
+        return res.fail('patch_failed', { status: 500, message: 'internal error' });
+      }
+    }
     if (hasGoalId) {
       try {
         updated = await db.updateTaskGoal(id, body.goal_id);

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.647",
+  "version": "1.19.649",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.647",
+      "version": "1.19.649",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.647",
+  "version": "1.19.649",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/scripts/gds/ship-flow.js

@@ -659,6 +659,58 @@ async function shipMain() {
   });
 }
 
+// persistRegradeSummary — store a re-grade's corrected --summary on the task row
+// (task 1003817). A re-grade has no claim, so it cannot reach claim-resolve, the
+// only writer of tasks.value_summary before this; PATCH /tasks/:id is the route
+// it uses instead.
+//
+// WHY PATCH AND NOT publish-branch, which already RECEIVES value_summary and
+// could have persisted it with a one-line change: publish-branch is only called
+// when pushVia() === 'server'. A laptop land goes through ciLandLocal (gh), and
+// --no-merge / --db-only / --allow-empty never land at all — so persisting there
+// would have fixed one path of four and left the defect standing on the rest. It
+// would also have made publish-branch a SECOND writer racing claim-resolve on
+// the normal ship path, which sends the same field. Writing from here keeps one
+// writer per ship: the claim on a first ship, this on a re-grade.
+//
+// Three deliberate postures:
+//   - OMITTED --summary writes NOTHING. The stored value is the fallback the
+//     grader was already handed, so a re-grade that omits the flag must leave
+//     the row exactly as it was — the COALESCE/NULLIF posture every other
+//     value_summary write in db-ship.js keeps. This is acceptance 2.
+//   - UNCHANGED text writes nothing either, so a no-op edit mints no audit_log row.
+//   - A FAILURE is LOUD BUT NON-BLOCKING. The grade is the expensive step and it
+//     has not run yet; discarding a re-grade over a summary that did not persist
+//     would trade the cheap problem for the costly one. The builder is told
+//     plainly that the row still holds the old sentence, so nothing is silent.
+//     An older pinned core that has not learned the field is named as exactly
+//     that rather than reported as a generic error — the same forward-compat
+//     posture the resolve call in shipMain documents at length (task 1003767),
+//     because @cloudbongos/cli ships separately from the core and an instance
+//     pins its own core version.
+async function persistRegradeSummary({ taskId, summaryArg, task }) {
+  const next = (summaryArg || '').trim();
+  if (!next) return { written: false, reason: 'omitted' };
+  if (next === (task.value_summary || '').trim()) return { written: false, reason: 'unchanged' };
+  let r;
+  try {
+    r = await (await cliClient()).tasks.patchTasksId({ id: taskId, body: { value_summary: next } });
+  } catch (err) {
+    console.error(`  ⚠ value_summary NOT stored (${err && err.message ? err.message : 'request failed'}) — task #${taskId} keeps its previous summary. The grade below is unaffected.`);
+    return { written: false, reason: 'error' };
+  }
+  if (!r.ok) {
+    if (isUnknownFieldRejection(r.status, r.data, 'value_summary')) {
+      console.error(`  ⚠ value_summary NOT stored: this instance's core predates PATCH /tasks/:id accepting the field. Upgrade the core, or edit the summary in the hall. The grade below is unaffected.`);
+    } else {
+      console.error(`  ⚠ value_summary NOT stored (${apiErrorLine(r.data, r.status)}) — task #${taskId} keeps its previous summary. The grade below is unaffected.`);
+    }
+    return { written: false, reason: 'refused' };
+  }
+  console.log(`  value_summary updated on task #${taskId} — the hall, /status and the ship broadcast now read the corrected sentence.`);
+  return { written: true };
+}
+
 // ---------- Re-grade flow (#678) ----------
 //
 // `node scripts/gds/ship.js <id> --regrade` closes the task-595-regrade-gap
@@ -676,6 +728,7 @@ async function shipMain() {
 //   - grade: gradeAndRecord → POST /tasks/:id/grade (rank-open; applyGrade
 //     promotes completed→confirmed + awards credits on pass, idempotent)
 //   - on pass: the normal confirmed→shipped merge + sync tail runs.
+
 async function regradeMain() {
   await requireSession();
   const args = process.argv.slice(2);
@@ -764,16 +817,14 @@ async function regradeMain() {
   // task's stored value_summary so the merge commit + Discord #ship-news post
   // carry meaningful text even when --summary is omitted.
   //
-  // AND IT NEVER REACHES THE TASK ROW — task 1003702's acceptance 3 asked this
-  // question; the answer is a real, separate defect, filed as task 1003817.
-  // `summary` from here feeds the grader prompt, the merge commit message and
-  // the PR title/body, and NOTHING writes it back to tasks.value_summary. All
-  // three candidate write paths were read and ruled out: publish-branch accepts
-  // value_summary but uses it only for PR text; PATCH /tasks/:id does not accept
-  // the field at all; the claim-resolve route is the sole writer and a re-grade
-  // has no claim (which is why claimLike is synthesized above). Fixing it needs
-  // a server route change, so it is deliberately NOT folded into this CLI fix.
-  // tests/ship_cannot_lie.mjs pins both halves of that so the answer cannot rot.
+  // AND IT NOW REACHES THE TASK ROW TOO — task 1003817. It did not before: this
+  // `summary` fed the grader prompt, the merge commit message and the PR
+  // title/body and stopped there, so a builder who re-graded with a CORRECTED
+  // --summary saw it applied everywhere except the place that is the record —
+  // the hall, /status and the Discord #ship-news line all kept the first ship's
+  // sentence forever. persistRegradeSummary (below the preflight) is the write;
+  // PATCH /tasks/:id is the route it uses, and `value_summary` was added to that
+  // schema by this same task. tests/ship_cannot_lie.mjs pins the wiring.
   const summary = summaryArg || task.value_summary || '';
 
   // The grader helpers want a claim-like object for touches[] (preflight's
@@ -804,6 +855,14 @@ async function regradeMain() {
     process.exit(1);
   }
 
+  // ---- Persist a corrected --summary to the task row (task 1003817) ----
+  // Placed HERE deliberately: after the guards that can still abort the re-grade
+  // (so a refused run writes nothing), and BEFORE the grade — which is the order
+  // the normal ship already has, where claim-resolve stores value_summary and
+  // the panel runs afterwards. The row, the grader prompt, the merge commit and
+  // the PR then all carry the same sentence.
+  await persistRegradeSummary({ taskId, summaryArg, task });
+
   // ---- Delta-aware prior-round context (task 1002662) ----
   // The prior grade's findings + the builder's response + the interim fix diff
   // ride to the panel so an already-answered finding can't re-veto on

package/src/module-api.js

@@ -71,7 +71,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.647'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.649'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');