@bongos/core 1.19.1011 → 1.19.1012

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.1011",
-  "core_contract": "1.19.1011",
-  "source_commit": "24339084e27e496ab04322675456dc4d428df08a",
+  "core_version": "1.19.1012",
+  "core_contract": "1.19.1012",
+  "source_commit": "67c8c7ea6e9225abe84f04ee97d072e125b78671",
   "source_ref": "HEAD",
-  "built_at": "2026-09-24T22:18:21.675Z",
+  "built_at": "2026-09-24T22:32:49.600Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 523,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 2975,
-  "tree_sha256": "ceac975ccace002c6914b47746ed15c8c76eb5f1919ebab13fafe0cf8b0c860d",
+  "tree_sha256": "43775a7c655de35e08a0b90ecee94c1ccad0cc2e460df21d0b3b5d463e6fb7e2",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -2727,7 +2727,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "a6d72a65cf5f1ae3f4b317e0684b642b01ad8c3944b2d4db0feddbbd49e54974"
+      "sha256": "6a78c943439f5d8b591f285c69db81d7a468e4e18656d04330685885ed2cbbd8"
     },
     {
       "path": "docs/modules-contract.md",
@@ -8242,12 +8242,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "2534d0c2e37f998d9e0ab7bb505469b9c10d4b22f0e65317a75a79769a344b98"
+      "sha256": "b26e2dff351ba48f806de1851a00dc5657a52ceb0f6c2ec66bf0b407f074ca49"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "989026ca4569325ebd370b4e8b3956a199ecb50951f13539a362894ebcabc7e7"
+      "sha256": "05dadaedb82b7aac68954714ab5dba673cc5e19adc0bea7109c2951bfe8692c3"
     },
     {
       "path": "public-docs/index.html",
@@ -8897,7 +8897,7 @@
     {
       "path": "scripts/gds/gen-file-map.js",
       "mode": "0000644",
-      "sha256": "ac2308077104c2ff899f4b12ff9da7baa965a9c0d3e4ef2f92e6bdf9d3613fb6"
+      "sha256": "38505bcbacd92114abbbd06cbc41bc841e1269cb11ebaace395f3ad22104ba1a"
     },
     {
       "path": "scripts/gds/gen-freshness.js",
@@ -10292,7 +10292,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "4f83439e8988caf0153a289fc10ba2c9aca89837322ac94158d70e21dad1aaf5"
+      "sha256": "d575c9f71dfced09c23cf793d5e0d048d240621a588e65f375d47bf96cd6e006"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -11562,7 +11562,7 @@
     {
       "path": "tests/file_map.mjs",
       "mode": "0000644",
-      "sha256": "c6a7da467336246652fae6db5b5d7faa147e71ac1db89a66ec143dcf03bf8013"
+      "sha256": "b4bdd09b0c11bb8d12677b48d1758603d3bc210511b090d7cc6de2f6d2b37cc0"
     },
     {
       "path": "tests/filing_abuse_matrix.mjs",

package/docs/module-api-changelog.md

@@ -2496,5 +2496,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.1009 with no explicit bump. run 36064558803. (task 1002620)
   1.19.1011 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.1010 with no explicit bump. run 36066617514. (task 1002620)
+  1.19.1012 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.1011 with no explicit bump. run 36067980398. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.1011",
+  "version": "1.19.1012",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.1011",
+      "version": "1.19.1012",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.1011",
+  "version": "1.19.1012",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/scripts/gds/gen-file-map.js

@@ -91,16 +91,31 @@ function materializedNames(absDir) { return new Set(Object.keys(readModuleSkills
 // The subdirs of `relDir` holding at least one TRACKED file (task 1004213). An untracked one is the
 // builder's own — a locally-installed plugin skill, or the empty husk a plugin extract leaves — and
 // listing it would publish one machine's tooling into a shared doc on every post-merge regen.
-// null when `root` is not the top of a git work tree (a packaged install, ADR 0108 §1): nothing to ask.
+// tracked: null when `root` is not the top of a git work tree (a packaged install, ADR 0108 §1).
+// gitError: git COULD not answer (task 1004222) — a safe.directory refusal, git off PATH, a broken
+// GIT_DIR, ENOBUFS. That also falls back to the disk listing, but loudly: main() warns and fails --check.
+const GIT_MAX_BUFFER = 64 * 1024 * 1024;
+// Discovery's own refusal. A broken GIT_DIR also exits 128 "not a git repository: '<dir>'", without this tail.
+const NOT_A_REPO = /not a git repository \(or any (of the )?parent/;
 function trackedSubdirs(root, relDir) {
-  const git = (args) => execFileSync('git', args, { cwd: root, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] });
+  // LC_ALL=C: the refusal is matched by its text, which a translated git would not print.
+  const git = (args) => execFileSync('git', args, {
+    cwd: root, encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'], maxBuffer: GIT_MAX_BUFFER, env: { ...process.env, LC_ALL: 'C' },
+  });
   try {
-    if (git(['rev-parse', '--show-prefix']).trim() !== '') return null;
-    return new Set(git(['ls-files', '-z', '--', relDir]).split('\0')
-      .map((p) => p.slice(relDir.length + 1).split('/'))
-      .filter((segs) => segs.length > 1)
-      .map((segs) => segs[0]));
-  } catch { return null; }
+    if (git(['rev-parse', '--show-prefix']).trim() !== '') return { tracked: null, gitError: null };
+    return {
+      tracked: new Set(git(['ls-files', '-z', '--', relDir]).split('\0')
+        .map((p) => p.slice(relDir.length + 1).split('/'))
+        .filter((segs) => segs.length > 1)
+        .map((segs) => segs[0])),
+      gitError: null,
+    };
+  } catch (err) {
+    const stderr = String(err.stderr || '').trim();
+    if (err.status === 128 && NOT_A_REPO.test(stderr)) return { tracked: null, gitError: null };
+    return { tracked: null, gitError: stderr.split('\n')[0] || err.code || err.message };
+  }
 }
 
 // Immediate subdirectories of an absolute dir, sorted by name (deterministic); materialised
@@ -120,7 +135,7 @@ function listSubdirs(absDir) {
 function buildSection(section, notes) {
   const absDir = path.join(REPO_ROOT, section.dir);
   const present = listSubdirs(absDir);
-  const tracked = trackedSubdirs(REPO_ROOT, section.dir);
+  const { tracked, gitError } = trackedSubdirs(REPO_ROOT, section.dir);
   const names = tracked ? present.filter((n) => tracked.has(n)) : present;
   const sectionNotes = (notes && notes[section.notesKey]) || {};
   const entries = names.map((name) => {
@@ -135,7 +150,7 @@ function buildSection(section, notes) {
   // A note is a ghost only when its dir is gone from disk — one not yet `git add`ed is not.
   const onDisk = new Set(present);
   const stale = Object.keys(sectionNotes).filter((k) => !onDisk.has(k)).map((k) => `${section.notesKey}.${k}`);
-  return { ...section, absDir, entries, missing, stale };
+  return { ...section, absDir, entries, missing, stale, gitError };
 }
 
 function buildModel() {
@@ -244,6 +259,7 @@ function computeWrites() {
   const model = buildModel();
   const missing = model.flatMap((m) => m.missing);
   const stale = model.flatMap((m) => m.stale);
+  const gitErrors = [...new Set(model.map((m) => m.gitError).filter(Boolean))];
   const writes = [];
   let markersMissing = [];
   let mapText = '';
@@ -258,7 +274,7 @@ function computeWrites() {
     mapText = next; // coverage reads the POST-generation text, so a regen never changes the verdict
   }
   const modules = moduleCoverage(mapText);
-  return { model, writes, missing, stale, markersMissing, modules };
+  return { model, writes, missing, stale, gitErrors, markersMissing, modules };
 }
 
 function main() {
@@ -267,7 +283,7 @@ function main() {
     process.stdout.write(JSON.stringify(buildModel(), null, 2) + '\n');
     return;
   }
-  const { writes, missing, stale, markersMissing, modules } = computeWrites();
+  const { writes, missing, stale, gitErrors, markersMissing, modules } = computeWrites();
 
   // A missing note (dir without a note) or a stale note (note without a dir) is a hard failure in
   // BOTH modes: in --check it fails CI; in write mode we still report it (and render a visible
@@ -275,6 +291,7 @@ function main() {
   const problems = [];
   if (missing.length) problems.push(`notes MISSING for: ${missing.join(', ')} — add a one-line note to docs/file-map.notes.json`);
   if (stale.length) problems.push(`notes are STALE (no such dir) — remove from docs/file-map.notes.json: ${stale.join(', ')}`);
+  for (const e of gitErrors) problems.push(`git could not list tracked files (${e}) — every dir on disk was listed, untracked plugin installs included; fix git (PATH, safe.directory) and re-run (task 1004222)`);
   if (markersMissing.length) problems.push(`docs/file-map.md is missing generated markers for: ${markersMissing.join(', ')}`);
   if (modules.undocumented.length) problems.push(`modules with NO docs/file-map.md entry: ${modules.undocumented.map((k) => `${MODULES_DIR}/${k}`).join(', ')} — add an entry to the modules/ block of docs/file-map.md (task 1004066)`);
   for (const d of modules.defects) problems.push(`module-coverage SCAN DEFECT — ${d}`);

package/src/module-api.js

@@ -71,7 +71,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.1011'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.1012'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/file_map.mjs

@@ -2,7 +2,7 @@
 // (task 1276 / ADR 0066). Mirrors tests/session_index.mjs + tests/repo_map.mjs.
 import assert from 'node:assert/strict';
 import { test } from 'node:test';
-import { execFileSync } from 'node:child_process';
+import { execFileSync, spawnSync } from 'node:child_process';
 import { readFileSync, existsSync, readdirSync, mkdirSync, writeFileSync, rmSync, mkdtempSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { createRequire } from 'node:module';
@@ -90,10 +90,19 @@ function fixtureRoot({ git }) {
   }
   return root;
 }
-const skillsSectionAt = (cwd) => JSON.parse(execFileSync(process.execPath,
+const skillsSectionAt = (cwd, env) => JSON.parse(execFileSync(process.execPath,
   ['-e', `process.stdout.write(JSON.stringify(require(${JSON.stringify(GEN)}).buildModel()))`],
-  { cwd, encoding: 'utf8' })).find((s) => s.id === 'skills');
+  { cwd, encoding: 'utf8', env })).find((s) => s.id === 'skills');
 const skillNamesAt = (cwd) => skillsSectionAt(cwd).entries.map((e) => e.name);
+function genAt(cwd, args, env) {
+  const r = spawnSync(process.execPath, [GEN, ...args], { cwd, encoding: 'utf8', env });
+  return { code: r.status, stderr: r.stderr };
+}
+// Two ways git fails to answer inside a real work tree (task 1004222): no git on PATH (ENOENT), and a
+// GIT_DIR naming nothing — exit 128 like "not a repository", but not discovery's own refusal.
+// PATH is dropped under every casing: Windows spells it `Path`, and a copy of both keys is ambiguous.
+const withoutGit = (root) => ({ ...Object.fromEntries(Object.entries(process.env).filter(([k]) => k.toUpperCase() !== 'PATH')), PATH: path.join(root, 'no-bin') });
+const brokenGitDir = (root) => ({ ...process.env, GIT_DIR: path.join(root, 'no-such-git-dir') });
 
 test('--check FAILS (exit 2) when a new tracked skill has no note — a skill can no longer land undescribed', () => {
   const root = fixtureRoot({ git: true });
@@ -128,15 +137,38 @@ test('outside a git work tree (a packaged install) every dir on disk is still li
   const nested = path.join(parent, 'instance');
   try {
     assert.deepEqual(skillNamesAt(root), ['empty-husk', 'local-plugin', 'new-skill']);
+    // Silently: not being in a repository is the packaged install's normal state, not a git failure.
+    assert.equal(skillsSectionAt(root).gitError, null);
+    assert.doesNotMatch(genAt(root, ['--check']).stderr, /git could not/);
     // A root that is a SUBDIR of some repo is not that repo's top: its files are not the repo's to judge.
     mkdirSync(path.join(nested, '.claude', 'skills', 'inner'), { recursive: true });
     assert.deepEqual(skillNamesAt(nested), ['inner']);
+    assert.equal(skillsSectionAt(nested).gitError, null);
   } finally {
     rmSync(root, { recursive: true, force: true });
     rmSync(parent, { recursive: true, force: true });
   }
 });
 
+test('a git failure inside a work tree is NOT "not a repository" — it warns in write mode and fails --check', () => {
+  const root = fixtureRoot({ git: true });
+  try {
+    for (const [shape, env, named] of [['git missing from PATH', withoutGit(root), /ENOENT/], ['GIT_DIR naming nothing', brokenGitDir(root), /not a git repository: /]]) {
+      assert.match(skillsSectionAt(root, env).gitError || '', named, `${shape}: the model names the git error`);
+      const check = genAt(root, ['--check'], env);
+      assert.equal(check.code, 2, `${shape}: --check must fail rather than pass on an unfiltered listing`);
+      assert.match(check.stderr, /gen-file-map --check: git could not list tracked files/, shape);
+      const write = genAt(root, [], env);
+      assert.equal(write.code, 2, `${shape}: write mode exits non-zero`);
+      assert.match(write.stderr, /gen-file-map: WARN git could not list tracked files/, shape);
+    }
+    // The same root with git answering carries no git error: the failure above is the env, not the fixture.
+    assert.equal(skillsSectionAt(root).gitError, null);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
 test('generation is deterministic + idempotent (a second run is a no-op)', () => {
   const r1 = run([]);
   assert.equal(r1.code, 0);