@bongos/core 1.19.983 → 1.19.984

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.983",
-  "core_contract": "1.19.983",
-  "source_commit": "4467844d664c49be006efc5773c4e89db5570e04",
+  "core_version": "1.19.984",
+  "core_contract": "1.19.984",
+  "source_commit": "b25c4e8c52129a3c0710d5f8e3c34336fbce056e",
   "source_ref": "HEAD",
-  "built_at": "2026-09-23T17:36:18.826Z",
+  "built_at": "2026-09-23T18:10:46.744Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 518,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 2933,
-  "tree_sha256": "1a1bc09e1ab049a305355706c782395970ccc646d28c9520f91e300c6a19e4b7",
+  "tree_sha256": "859af3630cbdafa3a20f7080579d49e9b45d4b33dda7298c2484900c697b1afa",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -2712,7 +2712,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "8577eca196f0ebd60e4cdc548dd0ea63f1783d0e5b4b6eba53d531632fc74332"
+      "sha256": "c77d5612257b8efc9a4e87537512485f46ddde94cb2709c49d739243cd2cffb3"
     },
     {
       "path": "docs/modules-contract.md",
@@ -5517,7 +5517,7 @@
     {
       "path": "modules/ideas/blockers.js",
       "mode": "0000644",
-      "sha256": "d3feb342ef22f8a3952c249c7d09a2fa1c9d01ac45f4306f4084e2572df5c203"
+      "sha256": "e372a43f0aeff5a83075d83d2db2733b1be6e7e28dc4631901772af82914c9a6"
     },
     {
       "path": "modules/ideas/completeness.js",
@@ -5637,7 +5637,7 @@
     {
       "path": "modules/ideas/routes/blockers.js",
       "mode": "0000644",
-      "sha256": "61c7692449f16ce103762d703f2eb5b0412cf1ba393d9a4d3724a14830747ab5"
+      "sha256": "551b485b7d7ed9d6e8f28b0baea7154ffe9e9cee093c296a2097d585923340c7"
     },
     {
       "path": "modules/ideas/routes/inbox.js",
@@ -8157,12 +8157,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "c61ad7f26668f4a68ae527fd54d8b5b7857f585c5cc912c9d928f01a61554ba1"
+      "sha256": "fcb023f6492a00c6658961aa61c4c6c45ceffc1fa44e31f247560c5da25ba172"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "5123bfe5015cba00f30ba7eb98edc983d5d3be1852fc1a7069b8ca3ce4ed5dca"
+      "sha256": "bfe3f4dd5da3a4007ed4c60941597593a602a47ce324e7b037f0d4fa0e3cad99"
     },
     {
       "path": "public-docs/index.html",
@@ -10187,7 +10187,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "dda8fe2a127133ab14ba6ce2c60dd8ad199f6fca76f0971a418759a9a5f4a959"
+      "sha256": "09853cbe41b452b48612612661f45c506d9841baf8a70aefb052b9afaef79162"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -10692,7 +10692,7 @@
     {
       "path": "tests/blocker_detail_hydration.mjs",
       "mode": "0000644",
-      "sha256": "fac81eb7827820e9e9ad03d4024d8fd9372f6a346a6931ac0a77692805ae2d5c"
+      "sha256": "23a71cf97346c258941210aab9e18cade21aa43e73f48395d8f656fddbaf2e91"
     },
     {
       "path": "tests/blocker_link.mjs",

package/docs/module-api-changelog.md

@@ -2440,5 +2440,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.981 with no explicit bump. run 35894422097. (task 1002620)
   1.19.983 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.982 with no explicit bump. run 35896466235. (task 1002620)
+  1.19.984 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.983 with no explicit bump. run 35900593334. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/ideas/blockers.js

@@ -18,18 +18,33 @@ const BLOCKING_TASK_IDS_SQL = `COALESCE(
               ARRAY[]::bigint[]
             ) AS blocking_task_ids`;
 
-async function listOpenBlockers() {
+// Optional { limit, offset } pushes the page into SQL so a small slice (the Home
+// attention inbox reads limit=5 on every load) never scans the whole open set
+// (task 1003986). No options = the full list, as before.
+async function listOpenBlockers({ limit, offset } = {}) {
+  const params = [];
+  let page = '';
+  if (limit != null) {
+    params.push(limit, offset || 0);
+    page = ' LIMIT $1 OFFSET $2';
+  }
   const { rows } = await pool.query(
     `SELECT b.id, b.title, b.body_md, b.status, b.created_at,
             b.source, b.source_ref,
             ${BLOCKING_TASK_IDS_SQL}
        FROM blockers b
       WHERE b.status = 'open'
-      ORDER BY b.id`
+      ORDER BY b.id${page}`,
+    params
   );
   return rows;
 }
 
+async function countOpenBlockers() {
+  const { rows } = await pool.query(`SELECT count(*)::int AS n FROM blockers WHERE status = 'open'`);
+  return rows[0].n;
+}
+
 async function getBlocker(id) {
   const { rows } = await pool.query(
     `SELECT b.id, b.title, b.body_md, b.status, b.created_at, b.resolved_at, b.resolved_by,
@@ -134,6 +149,7 @@ async function linkBlockerToTask({ blockerId, taskId }) {
 
 module.exports = {
   listOpenBlockers,
+  countOpenBlockers,
   getBlocker,
   createBlocker,
   resolveBlocker,

package/modules/ideas/routes/blockers.js

@@ -41,9 +41,12 @@ module.exports = function buildBlockersRouter() {
       // project — cap it via the shared helper (was unbounded). `page` is additive
       // (readers of .blockers are unchanged); total lets a caller know to page.
       const { limit, offset } = api.parsePagination(req);
-      const all = await blockers.listOpenBlockers();
+      const [rows, total] = await Promise.all([
+        blockers.listOpenBlockers({ limit, offset }),
+        blockers.countOpenBlockers(),
+      ]);
       res.set('Cache-Control', 'public, max-age=60');
-      res.json({ blockers: all.slice(offset, offset + limit), page: api.pageMeta(limit, offset, all.length) });
+      res.json({ blockers: rows, page: api.pageMeta(limit, offset, total) });
     } catch (err) {
       console.error('[gds] GET /blockers', err);
       res.fail('list_failed', { status: 500, message: 'internal error' });

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.983",
+  "version": "1.19.984",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.983",
+      "version": "1.19.984",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.983",
+  "version": "1.19.984",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/src/module-api.js

@@ -71,7 +71,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.983'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.984'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/blocker_detail_hydration.mjs

@@ -124,5 +124,19 @@ await test('getBlocker still returns null for an id with no row', async () => {
   assert.equal(row, null);
 });
 
+await test('listOpenBlockers({limit, offset}) pushes LIMIT/OFFSET into SQL (task 1003986)', async () => {
+  await blockers.listOpenBlockers({ limit: 5, offset: 10 });
+  const q = queries[queries.length - 1];
+  assert.match(q.sql, /ORDER BY b\.id LIMIT \$1 OFFSET \$2/);
+  assert.deepEqual(q.params, [5, 10]);
+});
+
+await test('listOpenBlockers() with no options stays unbounded', async () => {
+  await blockers.listOpenBlockers();
+  const q = queries[queries.length - 1];
+  assert.ok(!/LIMIT/.test(q.sql));
+  assert.deepEqual(q.params, []);
+});
+
 console.log(`\n${passed} passed, ${failed} failed`);
 process.exit(failed ? 1 : 0);