@bongos/core 1.19.105 → 1.19.106

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.105",
-  "core_contract": "1.19.105",
-  "source_commit": "e17befb90a1b0010369b049bfe92c597f46feaa1",
+  "core_version": "1.19.106",
+  "core_contract": "1.19.106",
+  "source_commit": "9c4d81635ba2c3b6781454fef02a2b4fd03c313a",
   "source_ref": "HEAD",
-  "built_at": "2026-08-14T00:47:52.457Z",
+  "built_at": "2026-08-14T01:02:38.447Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 301,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 1558,
-  "tree_sha256": "0bd2c06a8df30c32d74aae5a437dc8e71707e2201560e7275d066136aa1f0a63",
+  "tree_sha256": "8dc050d8d7110c73665132a52cad7e280ab1b8db7053b35778cd87c03a4d9b6e",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -4147,12 +4147,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "1180a81b8034f5e25bb1da6370b91e69575b653dc6f459e16d20dc6764c38e71"
+      "sha256": "5ac251e031cc6f47a48545e288edb4c894b5832a1a27f80c4ff39abf23f17517"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "ebcbf2f1c4b4479c82525349cb2f2aacf659c80eab6876112947bff44600b718"
+      "sha256": "ecc9e5581a436fcf4bafb8d8d9d64f688884d0344f7c484e5cfeadace6f4a198"
     },
     {
       "path": "public-docs/index.html",
@@ -4412,7 +4412,7 @@
     {
       "path": "public-landing/projects.html",
       "mode": "0000644",
-      "sha256": "9e6d99f0a54a6189f7295b799c3061c4b23b69569d15e0dd1e1d2e6e8c8671fc"
+      "sha256": "e9fd91527dd347041b35701f67fe4b245e99ec0cbe015a98bbae24cb9fcfea52"
     },
     {
       "path": "public-landing/world/assets/clouds/cloud-island-large.png",
@@ -5727,7 +5727,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "452383073e87173fa0a4f56df5a3a126ab888807dd416df4939ba951a0a0cf43"
+      "sha256": "20c85ad2a6dc6be87060b034fb9aaa10712463f9f12164d836588f8a28cf3caf"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -7252,7 +7252,7 @@
     {
       "path": "tests/projects_hub.mjs",
       "mode": "0000644",
-      "sha256": "d57dbc4d5b06d2302211d73d1d41c7edf025b38fca433b30df37cf8afc898da9"
+      "sha256": "1671466fb3301b1b549835ff7e7466a1374079a470f58773cdeddbe81ba3b478"
     },
     {
       "path": "tests/provision.mjs",

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.105",
+  "version": "1.19.106",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.105",
+      "version": "1.19.106",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.105",
+  "version": "1.19.106",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/public-landing/projects.html

@@ -185,7 +185,7 @@ try{var _m=localStorage.getItem('cb-color-mode');if(_m==='light'||_m==='dark')do
           <td class="right num" id="selfBuilders">—</td>
           <td class="colTags" id="selfTags">—</td>
           <td class="right colStatus"><span class="chip calm"><span class="cdot"></span>—</span></td>
-          <td class="colGo"><a class="btn small ghost" href="#" data-self-open>Open →</a></td>
+          <td class="colGo"><a class="btn small ghost" href="/">Open →</a></td>
         </tr>
         <!--apex-only:end-->
       </tbody>

package/src/module-api.js

@@ -637,8 +637,10 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 //         landed since 1.19.103 with no explicit bump. run 31756625919. (task 1002620)
 //   1.19.105 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
 //         landed since 1.19.104 with no explicit bump. run 31758526405. (task 1002620)
+//   1.19.106 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.105 with no explicit bump. run 31759315328. (task 1002620)
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.105'; // CI auto-patch carrier (ADR 0161); see changelog above
+const CORE_VERSION = '1.19.106'; // CI auto-patch carrier (ADR 0161); see changelog above
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/projects_hub.mjs

@@ -517,3 +517,27 @@ test('the table body is a sibling of the sky wrapper, not nested inside it', ()
   assert.ok(!ancestors.includes('sub-sky-body'),
     'the table must not sit inside the sky wrapper. open: ' + ancestors.join(' > '));
 });
+
+/* ── The self row's Open goes somewhere (task 1002777) ──────────────────────
+   Task 1002760's static self row shipped its action cell as href="#" with a
+   `data-self-open` hook nobody ever wired. The row-click handler deliberately
+   ignores clicks inside an <a> so real links keep their jobs — but this link
+   had no job, so the click was swallowed AND went nowhere. ── */
+
+test('the self row Open is a real link home, not an unwired hook', () => {
+  const selfRow = (HUB.match(/<tr id="selfRow">([\s\S]*?)<\/tr>/) || [, ''])[1];
+  assert.match(selfRow, /<a[^>]*href="\/"[^>]*>Open/,
+    'the platform project IS this site — its Open navigates to /');
+  assert.doesNotMatch(selfRow, /target=/,
+    'a new tab for the page you are already on is a bug, not a courtesy');
+  assert.doesNotMatch(HUB, /data-self-open/, 'the never-wired hook must not survive');
+});
+
+test('no anchor in the table ships a placeholder href', () => {
+  // href="#" is the shape of this bug: a dead link wearing button clothes
+  const table = (HUB.match(/<table[\s\S]*?<\/table>/) || [''])[0];
+  assert.ok(table, 'the table must be findable');
+  assert.doesNotMatch(table, /href="#"/, 'no anchor in the table may ship href="#"');
+  const generated = (SCRIPT.match(/return '<tr data-generated([\s\S]*?)'<\/tr>';/) || [, ''])[1];
+  assert.doesNotMatch(generated, /href="#"/, 'generated rows must not ship placeholders either');
+});