@bongos/core 1.19.110 → 1.19.112

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.110",
-  "core_contract": "1.19.110",
-  "source_commit": "79edae113d503dfa316b70b73aa3a7f46e47c826",
+  "core_version": "1.19.112",
+  "core_contract": "1.19.112",
+  "source_commit": "060901938a9d425466e02e3a732496f693f0146e",
   "source_ref": "HEAD",
-  "built_at": "2026-08-14T14:33:11.900Z",
+  "built_at": "2026-08-14T15:24:06.248Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 302,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 1559,
-  "tree_sha256": "58c1d6a96e05ab0a595fd590e99d4e11ca615200feb67b546999e3d45c6659af",
+  "tree_sha256": "61bc79cdb069c28bb054e5381fbe8931ac59f5614a68bc9f9fdf0b9611ce89a9",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -4152,12 +4152,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "11349cbb742f6c35dae25caab63b6c8f8baa8dff40c3dd111efb5d7805cf64eb"
+      "sha256": "4ab513ebfd260a1e036a9d5897e508d3f796c3a5a1ed0e8aef60e69dc21ba03f"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "d8f6c0bd00562e5abb9513b1f76a00f7b172c53666184fc5211448fb61e23e2b"
+      "sha256": "cd8e55222fbd9342b3f68cfd42ada15a68c05084077ad255c8cbc98f6ac5538b"
     },
     {
       "path": "public-docs/index.html",
@@ -5562,7 +5562,7 @@
     {
       "path": "src/bongos/module-scope-map.js",
       "mode": "0000644",
-      "sha256": "61817b4fa47b01ae1df612fcb7b82a28ff23b6265f6513eb0a28bc3aca6ea8d3"
+      "sha256": "c42e08fd814524fd022f74ba651393cd8b3e5ac1418b7cb7c5ea647251af3dc2"
     },
     {
       "path": "src/bongos/module-submissions.js",
@@ -5732,7 +5732,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "02dac8c896c2b6ff65af8c69ccca22979cfe4ca5519976a43154827fe640907e"
+      "sha256": "f93e99235eac1f9b0a61ae6eebbfe8f83c6317cb8830555b18e9cbd3ebb235e3"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -7032,7 +7032,7 @@
     {
       "path": "tests/module-scope-map.mjs",
       "mode": "0000644",
-      "sha256": "a1059f1995ba2b98436df0c4965a87b20e7553b6b72e80bb724c0b861e347ecf"
+      "sha256": "f52f1f92215b6352b90faafb32d7b9ae546724d28172196cdf6137630df2d569"
     },
     {
       "path": "tests/module_api.mjs",

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.110",
+  "version": "1.19.112",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.110",
+      "version": "1.19.112",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.110",
+  "version": "1.19.112",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/src/bongos/module-scope-map.js

@@ -207,6 +207,19 @@ const MODULE_GLOBS = {
     'modules/game/', 'src/preview-server.js',
   ],
   'art-pipeline': ['modules/art-pipeline/'],
+  // --- the hub identity provider + the PROJECTS CATALOG it owns (ADR 0141): platform
+  //     accounts, the SSO client registry, project memberships/invites, and the
+  //     platform_identity_projects rows the Explore feed reads. Carved already, so the
+  //     glob is just its module home. Covers the visibility & customization work (goal
+  //     1000046) — visibility state, join/apply policy, and the catalog feed all live on
+  //     this module's tables + routes; previously NO key resolved them, so the goal's
+  //     scope wall was empty (task 1002322, the 1002690 precedent).
+  //     The RENDERING surfaces stay with their own web-surface keys — Explore is
+  //     modules/status-ui/public/explore.*, My Projects / scouting are
+  //     modules/hall-ui/public/* — per the one-key-per-surface precedent (hall-ui/status-ui).
+  //     The instance-side CLIENT half of federation is woven into core auth.js and is
+  //     kernel territory (ADR 0141 §Packaging), NOT this key.
+  'platform-identity': ['modules/platform-identity/'],
   // --- instance provisioning: the web-tier REQUEST + STATE surface (module home)
   //     plus the control-plane runner CLI — a command travels with its domain (the
   //     lifecycle/dev-box precedent). Covers the projects-surface work (goal

package/src/module-api.js

@@ -647,8 +647,12 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 //         landed since 1.19.108 with no explicit bump. run 31809188532. (task 1002620)
 //   1.19.110 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
 //         landed since 1.19.109 with no explicit bump. run 31810003558. (task 1002620)
+//   1.19.111 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.110 with no explicit bump. run 31810638191. (task 1002620)
+//   1.19.112 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.111 with no explicit bump. run 31814245230. (task 1002620)
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.110'; // CI auto-patch carrier (ADR 0161); see changelog above
+const CORE_VERSION = '1.19.112'; // CI auto-patch carrier (ADR 0161); see changelog above
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/module-scope-map.mjs

@@ -9,6 +9,9 @@ const require = createRequire(import.meta.url);
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
 const scope = require(path.join(ROOT, 'src', 'bongos', 'module-scope-map.js'));
 const { PROTECTED_GLOBS } = require(path.join(ROOT, 'src', 'bongos', 'permission-path-check.js'));
+// the REAL consumer of the roster — asserted against directly so a wall assertion
+// here can never diverge from what the live goal-task-create gate computes.
+const gsc = require(path.join(ROOT, 'src', 'bongos', 'goal-scope-check.js'));
 
 test('roster covers the decided ~16 modules + kernel, each with non-empty globs', () => {
   const keys = scope.moduleKeys();
@@ -99,3 +102,37 @@ test('provisioning + public-landing joined the roster (task 1002690) — territo
   assert.ok(prov.includes('scripts/gds/provision.js'), 'the control-plane runner travels with its domain');
   assert.ok(scope.globsForModules(['public-landing']).includes('public-landing/'), 'public-landing owns its surface directory');
 });
+
+test('platform-identity joined the roster (task 1002322) — the catalog territory goal 1000046 walls', () => {
+  // Before this, modules/platform-identity/ was covered by NO key, so goal 1000046
+  // (project visibility & customization) had an empty — i.e. authorize-nothing —
+  // scope wall: goal-scope-check denies with `empty_scope`/`unknown_scope`.
+  assert.ok(scope.isModuleKey('platform-identity'), 'roster missing module "platform-identity"');
+  const globs = scope.globsForModules(['platform-identity']);
+  assert.ok(globs.includes('modules/platform-identity/'), 'platform-identity owns its module directory');
+  // Derived, not hand-set: modules/platform-identity/ is absent from PROTECTED_GLOBS.
+  assert.equal(scope.isProtectedModule('platform-identity'), false);
+  assert.equal(
+    scope.scopeForModule('platform-identity').protected,
+    scope.isProtected(['modules/platform-identity/']),
+    'protected must be the faithful derivation, never a literal',
+  );
+  // The wall now COVERS the goal-1000046 catalog/visibility paths. Asserted through
+  // goal-scope-check.scopeSubset — the REAL consumer (directional containment), not a
+  // re-implementation here, so this can't pass while the live gate denies.
+  const wall = ['platform-identity', 'status-ui', 'hall-ui', 'public-landing', 'provisioning'];
+  const covers = (touch) => gsc.scopeSubset(wall, [touch]).ok;
+  for (const touch of [
+    'modules/platform-identity/platform-identity.js',   // visibility column + catalog domain
+    'modules/platform-identity/routes/projects.js',     // the feed + invite routes
+    'modules/status-ui/public/explore.js',              // orb render-type surface
+    'modules/hall-ui/public/my-projects.js',            // owner settings / applications queue
+    'public-landing/create.html',                       // the project-detail creation step
+    'modules/provisioning/',                            // module-bundle selection at provision time
+  ]) {
+    assert.equal(covers(touch), true, `wall does not cover ${touch}`);
+  }
+  // …and still BOUNDS: the trust core stays outside it (the wall is a wall).
+  assert.equal(covers('src/bongos/auth.js'), false, 'the wall must not cover the kernel auth core');
+  assert.equal(scope.scopeIncludesProtected(wall), false, 'goal 1000046 wall stays non-protected (governance widens it later)');
+});