@bongos/core 1.20.8 → 1.20.9

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.20.8",
-  "core_contract": "1.20.8",
-  "source_commit": "fb1af293583380a02ab4fa8df4a06e31a89c73cc",
+  "core_version": "1.20.9",
+  "core_contract": "1.20.9",
+  "source_commit": "2b36b101931a77f890370e4ca5bfe3c52380aa86",
   "source_ref": "HEAD",
-  "built_at": "2026-09-30T04:32:44.486Z",
+  "built_at": "2026-09-30T04:43:40.633Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 556,
     "agent_docs_stubbed": 25,
-    "functional_verbatim": 2623,
+    "functional_verbatim": 2624,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 3205,
-  "tree_sha256": "4b5867abb42ec4c580d94333e13d9f029d81da62bf68a26c753511d54082f26c",
+  "file_count": 3206,
+  "tree_sha256": "da9805685f777ab35786f149befb6dbcacca93c0a0e53c2ffee30b11544aa62d",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -2772,7 +2772,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "4bcc9fffeff37ae0b087af39c16e3cf8f381a066b2e70019fe8b1f30f49bce3c"
+      "sha256": "030b3fb4cd9862ccb5e1d96644271f79485912b6b6abba869dafde16715c4d84"
     },
     {
       "path": "docs/modules-contract.md",
@@ -3939,6 +3939,11 @@
       "mode": "0000644",
       "sha256": "b80e47e3a9d27909521d8a9adca0376381705fc6618435b91c9f5ee585135afa"
     },
+    {
+      "path": "migrations/core_263_closeness_history_indexes.sql",
+      "mode": "0000644",
+      "sha256": "6f502903c02f48a65370d2ca167b42a5ea514bed38bb9862d34465ea627191f2"
+    },
     {
       "path": "modules/agents/CLAUDE.md",
       "mode": "0000644",
@@ -6042,7 +6047,7 @@
     {
       "path": "modules/lifecycle/closeness.js",
       "mode": "0000644",
-      "sha256": "4ea4fe1c93ffe6d6f42af31d96dfe402d7dbccb4a5825b71c571024548a87c25"
+      "sha256": "d464e808e8854e68f4796cd92be96a326104375bb7b82c570291939910e48c39"
     },
     {
       "path": "modules/lifecycle/collab-settle.js",
@@ -8852,12 +8857,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "3a10ecd6f93e42f1792e7edb0a406edaefb3377506afb359cde35e3fdd901296"
+      "sha256": "51e46a6ba6eb82e2c829d8c5a220cdc835fe959e0b73f12dcffa69b61de3325c"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "065257986765387a5b632092aab054e6a9d8299b9c27473a9b0e306dec3d73cc"
+      "sha256": "131c787425281094366c5871f082c5b8340e593eaa7c5d9aaf779ceb906da786"
     },
     {
       "path": "public-docs/index.html",
@@ -8877,7 +8882,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "3c69418a8c305f1aa08dd13193ee4489ac818f9723147c218e8f5745dfae1e8b"
+      "sha256": "7c9e016bd4bcc8e7f702fb3dc2aa9112cf6b7c27f27ed638b2d357a906f30088"
     },
     {
       "path": "scripts/bongos-mcp.js",
@@ -10992,7 +10997,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "fdb2e5eb052bbdc4698fdb5cde2da471036c90c52f7f105cd8b057ae330ee8c1"
+      "sha256": "154bd9ea1d7f6ea701c30fcfc8b2c4f26133710f2c2b30f0a1942894fb07c357"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -11767,7 +11772,7 @@
     {
       "path": "tests/closeness.mjs",
       "mode": "0000644",
-      "sha256": "be10e63b6a424914ba71537dbfa653dcb247b28b3e6a9a8caf4696268e4500cf"
+      "sha256": "a1d1e2a77e0ad6b1a00c187775859dfcd646389959062b8b78173fc27c2c02ed"
     },
     {
       "path": "tests/cloud_bongos_pack.mjs",

package/docs/module-api-changelog.md

@@ -2673,5 +2673,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.20.6 with no explicit bump. run 36668328505. (task 1002620)
   1.20.8 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.20.7 with no explicit bump. run 36669272909. (task 1002620)
+  1.20.9 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.20.8 with no explicit bump. run 36669791458. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/migrations/core_263_closeness_history_indexes.sql

@@ -0,0 +1,56 @@
+-- core_263 — index the history the closeness signals join on (task 1003268)
+--
+-- modules/lifecycle/closeness.js builds a builder's "who have I worked near" graph
+-- from three self-joins (task 1003174): overlapping CLAIMS in a shared goal,
+-- SESSION LOGS on a shared goal's tasks, and SHIPS in a shared goal. The grader of
+-- 1003174 flagged that the join keys might be unindexed, which would make each
+-- query scale with the whole table instead of with one builder's goals. Checked
+-- against the tree, key by key:
+--
+--   tasks.goal_id      — ALREADY COVERED. The task was filed before core_228 added
+--                        idx_tasks_goal ON tasks (goal_id). A second index on the
+--                        same column would only cost writes, so none is added.
+--   claims.builder_id  — only idx_claims_builder_active (003), partial on
+--                        released_at IS NULL. Closeness reads SETTLED claims
+--                        (`mine.builder_id = $1 AND mine.claimed_at > now() - …`),
+--                        which a partial-on-active index cannot serve. Added below,
+--                        with claimed_at second so the time window is a range scan.
+--   claims.task_id     — only the partial UNIQUE on active claims (003). The join
+--                        `other.task_id = t_other.id` walks every claim, settled
+--                        ones included. Added below.
+--   tasks.shipped_by   — idx_tasks_needs_rebase (core_193) is partial on
+--                        needs_rebase, and idx_tasks_shipped_by_shipped_at
+--                        (core_228) is partial on status = 'shipped'. The ship
+--                        signal filters `shipped_by = $1 AND goal_id IS NOT NULL`
+--                        with no status predicate, so the planner can use neither.
+--                        Added below, partial on exactly that query's predicates.
+--   session_logs       — covered by idx_session_logs_task / _builder (003).
+--
+-- Not urgent at today's size (a few thousand tasks, fifteen builders); this closes
+-- the gap before it grows rather than after it hurts.
+--
+-- Additive and idempotent: indexes only, no column, no constraint, no data. Safe
+-- to run forward against a live database, and an older release running against it
+-- just has unused indexes. Rollback is DROP INDEX.
+--
+-- NOT a lifecycle_* module migration: `tasks` and `claims` are CORE tables, and a
+-- module migration may only touch its own namespaced tables (fitness.js
+-- checkModuleMigrationsAdditive, ADR 0083 Decision #5). That boundary is why this
+-- was split out of task 1003174 in the first place.
+
+CREATE INDEX IF NOT EXISTS idx_claims_builder_history
+  ON claims (builder_id, claimed_at);
+
+CREATE INDEX IF NOT EXISTS idx_claims_task_all
+  ON claims (task_id);
+
+CREATE INDEX IF NOT EXISTS idx_tasks_shipped_by_goal
+  ON tasks (shipped_by, goal_id)
+  WHERE shipped_by IS NOT NULL AND goal_id IS NOT NULL;
+
+COMMENT ON INDEX idx_claims_builder_history IS
+  'Closeness (modules/lifecycle/closeness.js): a builder''s settled claims in a time window. idx_claims_builder_active is partial on active claims and cannot serve history.';
+COMMENT ON INDEX idx_claims_task_all IS
+  'Closeness: joins every claim (settled too) on task_id. The 003 unique index covers active claims only.';
+COMMENT ON INDEX idx_tasks_shipped_by_goal IS
+  'Closeness ship signal: shipped_by = $1 AND goal_id IS NOT NULL, no status predicate, so core_228''s status-partial index does not apply.';

package/modules/lifecycle/closeness.js

@@ -37,13 +37,13 @@
 // The gate FAILS CLOSED: a consent read that throws or returns null yields the
 // empty set, and so the empty graph.
 //
-// A KNOWN PERFORMANCE GAP, measured rather than assumed. The signal joins key on
-// tasks.goal_id (NO index), claims.builder_id and claims.task_id (indexed only
-// partially, on ACTIVE claims — closeness reads history) and tasks.shipped_by
-// (partial too). At today's size that is fine; it scales with total table size
-// rather than goal size. The indexes belong in a core_ migration, not here — a
-// module migration may only touch its own lifecycle_ tables (ADR 0083 §5), and
-// the fitness check enforces it. Filed with the SQL as task 1003268.
+// INDEXES. The signal joins key on tasks.goal_id (idx_tasks_goal, core_228),
+// claims.builder_id + claimed_at and claims.task_id over HISTORY, not just active
+// claims, and tasks.shipped_by + goal_id with no status predicate. The last three
+// were unindexed for this shape and are added by migrations/core_263 (from
+// task 1003268). They live in a core_ migration, not here — a module migration may only
+// touch its own lifecycle_ tables (ADR 0083 §5), and the fitness check enforces it.
+// Change a join key or predicate here and re-check that migration still serves it.
 //
 // Reaches core only through the doorway (ADR 0083). The core tables it reads
 // (claims, tasks, session_logs, builders) are read-only here.

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.20.8",
+  "version": "1.20.9",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.20.8",
+      "version": "1.20.9",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.20.8",
+  "version": "1.20.9",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -8100,5 +8100,11 @@
       "id": "1002992",
       "text": "When you claim a task, your assistant is now told on its own which playbook to work from: engineer, artist, ideator or UI. Before, the instructions only reached it if someone read the claim output. Each workspace gets only its"
     }
+  ],
+  "1.20.9": [
+    {
+      "id": "1003268",
+      "text": "Added three database lookups so the 'who have I worked near' view stays fast as the project grows. Nothing changes on screen today."
+    }
   ]
 }

package/src/module-api.js

@@ -75,7 +75,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // MAJOR (see allowBoxScope below): passes the request through untouched.
 function deprecatedNoopMiddleware(_req, _res, next) { next(); }
 
-const CORE_VERSION = '1.20.8'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.20.9'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('discord'); log.info('mounted');

package/tests/closeness.mjs

@@ -434,10 +434,25 @@ test('the index gap the grader raised is ANSWERED, not left open', () => {
   // and these are core tables. That makes it a core_ migration, which needs a
   // reserved number and human eyes. Filed as task 1003268 with the SQL.
   //
-  // This test pins the REFERENCE so the finding cannot be quietly dropped: if
-  // someone lands the indexes and deletes the note, they should delete this too.
+  // Task 1003268 then landed them as migrations/core_263 — minus a goal_id index,
+  // because core_228 had already added idx_tasks_goal. This test now pins that the
+  // source still points at the migration and that the migration carries every
+  // index the three signals need, so a later edit cannot drop one quietly.
   assert.match(SRC, /task 1003268/,
-    'the closeness source cites the follow-up that carries the indexes');
+    'the closeness source cites the task that carries the indexes');
+  assert.match(SRC, /core_263/, 'and names the migration that serves its joins');
+  const core = fs.readFileSync(path.join(ROOT, 'migrations', 'core_263_closeness_history_indexes.sql'), 'utf8');
+  for (const [name, shape] of [
+    ['idx_claims_builder_history', /ON claims \(builder_id, claimed_at\)/],
+    ['idx_claims_task_all', /ON claims \(task_id\)/],
+    ['idx_tasks_shipped_by_goal', /ON tasks \(shipped_by, goal_id\)/],
+  ]) {
+    assert.match(core, new RegExp(`CREATE INDEX IF NOT EXISTS ${name}\\b`), `${name} is created`);
+    assert.match(core, shape, `${name} has the shape the closeness join needs`);
+  }
+  const goalIdx = fs.readFileSync(path.join(ROOT, 'migrations', 'core_228_idea_inbox_captured_by_idx.sql'), 'utf8');
+  assert.match(goalIdx, /CREATE INDEX IF NOT EXISTS idx_tasks_goal ON tasks \(goal_id\)/,
+    'tasks.goal_id is served by core_228, which is why core_263 does not repeat it');
   const files = fs.readdirSync(path.join(ROOT, 'modules', 'lifecycle', 'migrations'));
   assert.ok(!files.some((f) => /closeness/i.test(f)),
     'and no module migration tries to index a core table again');