@bongos/core 1.19.844 → 1.19.845

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.844",
-  "core_contract": "1.19.844",
-  "source_commit": "980c92b65de8a99f2772b86fb7f69e365eed4dc6",
+  "core_version": "1.19.845",
+  "core_contract": "1.19.845",
+  "source_commit": "5b6a49f8f6e903a829ce733c7fa198fc5fb56341",
   "source_ref": "HEAD",
-  "built_at": "2026-09-17T18:59:26.454Z",
+  "built_at": "2026-09-17T19:09:03.983Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 495,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 2793,
-  "tree_sha256": "af2219bd2cdea4b5ebb159bd2cc60e9d015182c15121196f16e1cbb9b4ac7bf5",
+  "tree_sha256": "7082ae84102704894dfb0addd6bd5f72c3e3fb82767acdeda4c8489543d67aaa",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -2577,7 +2577,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "185ae1211c5c546bf5d0a57acd5c97ad56b4e98133ba2aceded36bf2cc95c4ca"
+      "sha256": "86ddda19705a19edeadcdb048bdcaa429534f4cc9033fcf730f31663dc06b2e7"
     },
     {
       "path": "docs/modules-contract.md",
@@ -7902,12 +7902,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "a6133e7d6f098080ea0b2d2d21d3bbf35c90a716dc20a4436a68c74c6416da84"
+      "sha256": "359df85b8fed3ee87c46b3eedb3c194f6d2bdd617577172ddf8f3ba21583d4a3"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "65a0092e9c2f20b87c7de5d89e552e005820a70cc5c00fb228d904363d842b22"
+      "sha256": "35c760c7bc338c24c0f71075f5c578cb0b75a0d5bf2663f091e2a77722c5bcf9"
     },
     {
       "path": "public-docs/index.html",
@@ -9842,7 +9842,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "a97295bdd0b3f0fe6b6c903b910a2512e7fffcc4a98f6d2844096cbc6015d7a7"
+      "sha256": "af8e3015ca7eeb60f3c6ee804d7212fdd17fe7010c81d84de453fb1ad60f6598"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -13437,7 +13437,7 @@
     {
       "path": "tests/skill_friction_kind.mjs",
       "mode": "0000644",
-      "sha256": "baaf5935cc748e7eb9596d1c96c3c20aa2ee3917377d32b9104408b7b07165a4"
+      "sha256": "28d88f97e66c1ca8728d311a3cc8c58bb6df058dd9ee91aa632028faa5b5bdcf"
     },
     {
       "path": "tests/skill_grade_audit.mjs",

package/docs/module-api-changelog.md

@@ -2162,5 +2162,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.842 with no explicit bump. run 35259608793. (task 1002620)
   1.19.844 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.843 with no explicit bump. run 35262101669. (task 1002620)
+  1.19.845 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.844 with no explicit bump. run 35263096514. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.844",
+  "version": "1.19.845",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.844",
+      "version": "1.19.845",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.844",
+  "version": "1.19.845",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/src/module-api.js

@@ -71,7 +71,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.844'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.845'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/skill_friction_kind.mjs

@@ -158,6 +158,40 @@ test('the legacy title prefix is still exported and still the nightly routine\'s
   );
 });
 
+// ---- the flip itself (task 1003963) ----------------------------------------
+//
+// The routine filed `--kind cleanup` for as long as the deployed core pin ran
+// behind the migration that made `skill-friction` a real kind. That window is
+// closed and the flip has landed — but the flip lives in prose inside a SKILL.md
+// that an agent reads and follows, so nothing but this assertion stops a later
+// edit from reverting it by accident. Both halves matter: that the new kind IS
+// the one the worked example passes, and that the two pre-`core_244` stand-ins
+// are NOT offered as alternatives beside it (a `--kind cleanup` left in the
+// example would split these rows across kinds again, which is the bug 1003105
+// and 1003963 together exist to close).
+
+test('the nightly routine files --kind skill-friction, not the pre-core_244 stand-ins', () => {
+  const routine = fs.readFileSync(
+    path.join(ROOT, '.claude', 'scheduled-tasks', 'skill-usage-review', 'SKILL.md'), 'utf8'
+  );
+  // Scope BOTH assertions to the runnable example, not to the whole file: the
+  // note above it explains the old stand-ins on purpose and must stay free to
+  // name them — and, the other way round, a `--kind skill-friction` sitting in
+  // that prose would satisfy a file-wide positive match while the example the
+  // agent actually copies still said `cleanup`. (Verified: reverting only the
+  // example left a file-wide match green.)
+  const example = routine.slice(routine.indexOf('node scripts/gds/capture.js'));
+  const block = example.slice(0, example.indexOf('```'));
+  assert.match(
+    block, /--kind skill-friction/,
+    'the capture.js example must pass the real kind'
+  );
+  assert.doesNotMatch(
+    block, /--kind (cleanup|bug)\b/,
+    'the example must not still offer cleanup/bug — that is the split this closed'
+  );
+});
+
 console.log('');
 console.log(`skill-friction kind + visibility gate (task 1003105): ${passed} passed, ${failed} failed`);
 if (failed > 0) process.exit(1);