@bongos/core 1.19.784 → 1.19.785

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.784",
-  "core_contract": "1.19.784",
-  "source_commit": "f02324ac698997d8c553a1d4f1287effd81c09e7",
+  "core_version": "1.19.785",
+  "core_contract": "1.19.785",
+  "source_commit": "022d941502640ca75c63a0fb7d13ae42233b583f",
   "source_ref": "HEAD",
-  "built_at": "2026-09-16T21:59:58.914Z",
+  "built_at": "2026-09-16T22:11:28.177Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 483,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 2668,
-  "tree_sha256": "1352898105cb24c3ed7bc555a9f5b3c7ec497b80ee9e62999118b530e63d23aa",
+  "tree_sha256": "e71aafdc39bbf2b01c233a16c86515be287220faecbb7afaa6f874ffb6dbd9fa",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -207,7 +207,7 @@
     {
       "path": ".claude/skills/planning-session/SKILL.md",
       "mode": "0000644",
-      "sha256": "cae7be7bf857da01fea4ce74122a7c586b182ff7ec2de38a8f79c85793bba8fa"
+      "sha256": "8ed3e62213268015e49ad180d9f9c0c3c875867b392e93430a9850962a70455b"
     },
     {
       "path": ".claude/skills/priority-session/SKILL.md",
@@ -2512,7 +2512,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "de0c1251e540e53625585facc59f8034a58db77bbc8e17c8156b0cb9a6f10e46"
+      "sha256": "37d573a87561b4c12d3b3d1d416ad720fa4286a57fd2e30f906f0262cb70ad4d"
     },
     {
       "path": "docs/modules-contract.md",
@@ -2597,7 +2597,7 @@
     {
       "path": "docs/packs/ideator.md",
       "mode": "0000644",
-      "sha256": "3437355c1c891f5dd62b0d826e73c82c6e8dc691864e7f470734bd855ef74492"
+      "sha256": "93cef9d530a668d750d6cba4789fda25b15d176c35366240cb72187e272fa141"
     },
     {
       "path": "docs/project-context.template.md",
@@ -7622,12 +7622,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "a8ffb2e66575892ab8a245db29ba6c58b0e8ab04a9771ecb206ef5d653f1d669"
+      "sha256": "39247eaf1ee78994bb9f1be1d50c320bbf7a1184efe408bec6458a8450638036"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "a9c4baca9ba7278c89fa2988bb4a79482da95eff23940e14a55c102e590df6ce"
+      "sha256": "6ce05e6b15c23da646d860f0c9d2c5a84cbee1fac61af6c807cefe7e2b743eae"
     },
     {
       "path": "public-docs/index.html",
@@ -9492,7 +9492,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "adec7c6bb4200142251c5e927030fa8cd3673d12e63efdfcbc78ffdfeaaa71c8"
+      "sha256": "0f2dbf8705fbe60f6a38db6c2e40c5b671576645a092902706e5251d78758784"
     },
     {
       "path": "src/module-loader/catalog.js",

package/.claude/skills/planning-session/SKILL.md

@@ -15,6 +15,10 @@ The first planning session — V3 Planning Session #1, 2026-05-12 — is the tem
 - A version is in `status='planning'` and needs scope locked before tasks start landing in earnest
 - A previous planning session left proposals in `idea_inbox` tagged `kind='criterion-proposal'` that need ratification
 
+**Run an ideation pass first when the goal's SHAPE is not yet settled.** An ideator session (the [Ideator pack](../../../docs/packs/ideator.md)) inverts this skill's stance: there the human drives and you are the sounding board, so *their* framing sets the shape of the thing. Carry its output into Phase 1 and the Phase-4 interview is left with genuine residue instead of first-pass design.
+
+Not a gate — a session for work whose shape is already settled should open directly. But **Phase 4 is a poor instrument for a first pass**: an `AskUserQuestion` round must author its options before the owner has said anything, so every option encodes *your* framing, and a proposal you believe is correct never becomes a question at all. The 2026-08-16 Board Room session is the evidence — three agent proposals (a role-based voting chamber, a tiered standard-of-review override ledger, Discord reaction-voting) died in the ideation half that would otherwise have been baked into the spec as defaults, none of which would have surfaced as an interview question.
+
 ## When NOT to invoke
 
 - Mid-version: planning sessions set scope, they don't refine it. For mid-version adjustments, use `/idea-triage`.

package/docs/module-api-changelog.md

@@ -2042,5 +2042,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.782 with no explicit bump. run 35152631705. (task 1002620)
   1.19.784 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.783 with no explicit bump. run 35155326585. (task 1002620)
+  1.19.785 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.784 with no explicit bump. run 35156349018. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/docs/packs/ideator.md

@@ -101,6 +101,12 @@ That is the **same route** the hall form uses, so the record is identical — sa
 
 The command reports what the server **stored**. If it says the idea landed as *quick*, say so plainly — capture is fail-open on grading, and telling someone they filed a Full Idea when they did not is the one outcome worse than the failure itself.
 
+### When the thread is bigger than one idea
+
+Some developed threads are not an idea — they are the shape of a whole goal or version: several interlocking pieces, a scope someone would have to *plan* rather than just build. When that is what you are looking at, **say so and offer the handoff to `/planning-session`**, which turns a settled shape into criteria, a written spec and a seeded task list. Arriving there with the shape already agreed is the point: its interview is then about residue, not about inventing the thing.
+
+File the idea first either way, and treat the handoff as an offer rather than a gate — a thread they would rather leave as an idea stays one. Planning is a trusted-builder step, so if they cannot open one themselves, the filed idea *is* the handoff: it queues for whoever runs the next session.
+
 ### Developing someone else's spark
 
 The same conversation works on a **Big Idea Spark** — a quick idea whose author marked it as needing development. `node scripts/gds/spark.js --list` shows what is waiting; develop one with `spark.js --develop <id> --fields-file <path>`. The author keeps the credit for having had the thought and the payout splits with them (ADR 0185), so the never-invent rule applies with *more* force, not less: those five answers go out under two people's names.

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.784",
+  "version": "1.19.785",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.784",
+      "version": "1.19.785",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.784",
+  "version": "1.19.785",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/src/module-api.js

@@ -71,7 +71,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.784'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.785'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');