@bongos/core 1.19.111 → 1.19.113

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.111",
-  "core_contract": "1.19.111",
-  "source_commit": "e77982e047dbf7159fed056ab3430ea2239ec221",
+  "core_version": "1.19.113",
+  "core_contract": "1.19.113",
+  "source_commit": "4f04a88c84292c94616306d95392485737ed1737",
   "source_ref": "HEAD",
-  "built_at": "2026-08-14T14:40:48.428Z",
+  "built_at": "2026-08-14T15:48:22.422Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 302,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 1559,
-  "tree_sha256": "c69dad030aadde5ef92a03f42c847bcadace866f51fca0b8c8c47613546b137e",
+  "tree_sha256": "52d268079196d1b135c13eab10c51c87c9b1424cad1079ec595591824b0a0daf",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -4152,12 +4152,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "e0f8b3141931cbc2ad8f9713e0331afc6c0276577486a9b821a333ec76623e0e"
+      "sha256": "2c8ecaac1dcae43c85fa2b642e470908f69dfdd6190e0986e06e120220ebe6d2"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "9b5e00c1fd593d1c3bbad4a8d08c6c13e32924ed290b42189f638903b7fadde7"
+      "sha256": "4a7a150717c7a3336a9f72ed5ce773a229850b90cce8314de632067305371394"
     },
     {
       "path": "public-docs/index.html",
@@ -5562,7 +5562,7 @@
     {
       "path": "src/bongos/module-scope-map.js",
       "mode": "0000644",
-      "sha256": "61817b4fa47b01ae1df612fcb7b82a28ff23b6265f6513eb0a28bc3aca6ea8d3"
+      "sha256": "c42e08fd814524fd022f74ba651393cd8b3e5ac1418b7cb7c5ea647251af3dc2"
     },
     {
       "path": "src/bongos/module-submissions.js",
@@ -5732,7 +5732,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "92b3fc46c20ef09f78569a72bcb9a40827e1e2e5cf9a55c1b6f6a1abfc27b999"
+      "sha256": "c19adbd125efe46fba720abdecef683027e607275543b65e971630304d686b75"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -7032,7 +7032,7 @@
     {
       "path": "tests/module-scope-map.mjs",
       "mode": "0000644",
-      "sha256": "a1059f1995ba2b98436df0c4965a87b20e7553b6b72e80bb724c0b861e347ecf"
+      "sha256": "f52f1f92215b6352b90faafb32d7b9ae546724d28172196cdf6137630df2d569"
     },
     {
       "path": "tests/module_api.mjs",

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.111",
+  "version": "1.19.113",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.111",
+      "version": "1.19.113",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.111",
+  "version": "1.19.113",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/src/bongos/module-scope-map.js

@@ -207,6 +207,19 @@ const MODULE_GLOBS = {
     'modules/game/', 'src/preview-server.js',
   ],
   'art-pipeline': ['modules/art-pipeline/'],
+  // --- the hub identity provider + the PROJECTS CATALOG it owns (ADR 0141): platform
+  //     accounts, the SSO client registry, project memberships/invites, and the
+  //     platform_identity_projects rows the Explore feed reads. Carved already, so the
+  //     glob is just its module home. Covers the visibility & customization work (goal
+  //     1000046) — visibility state, join/apply policy, and the catalog feed all live on
+  //     this module's tables + routes; previously NO key resolved them, so the goal's
+  //     scope wall was empty (task 1002322, the 1002690 precedent).
+  //     The RENDERING surfaces stay with their own web-surface keys — Explore is
+  //     modules/status-ui/public/explore.*, My Projects / scouting are
+  //     modules/hall-ui/public/* — per the one-key-per-surface precedent (hall-ui/status-ui).
+  //     The instance-side CLIENT half of federation is woven into core auth.js and is
+  //     kernel territory (ADR 0141 §Packaging), NOT this key.
+  'platform-identity': ['modules/platform-identity/'],
   // --- instance provisioning: the web-tier REQUEST + STATE surface (module home)
   //     plus the control-plane runner CLI — a command travels with its domain (the
   //     lifecycle/dev-box precedent). Covers the projects-surface work (goal

package/src/module-api.js

@@ -649,8 +649,12 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 //         landed since 1.19.109 with no explicit bump. run 31810003558. (task 1002620)
 //   1.19.111 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
 //         landed since 1.19.110 with no explicit bump. run 31810638191. (task 1002620)
+//   1.19.112 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.111 with no explicit bump. run 31814245230. (task 1002620)
+//   1.19.113 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.112 with no explicit bump. run 31816239246. (task 1002620)
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.111'; // CI auto-patch carrier (ADR 0161); see changelog above
+const CORE_VERSION = '1.19.113'; // CI auto-patch carrier (ADR 0161); see changelog above
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/module-scope-map.mjs

@@ -9,6 +9,9 @@ const require = createRequire(import.meta.url);
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
 const scope = require(path.join(ROOT, 'src', 'bongos', 'module-scope-map.js'));
 const { PROTECTED_GLOBS } = require(path.join(ROOT, 'src', 'bongos', 'permission-path-check.js'));
+// the REAL consumer of the roster — asserted against directly so a wall assertion
+// here can never diverge from what the live goal-task-create gate computes.
+const gsc = require(path.join(ROOT, 'src', 'bongos', 'goal-scope-check.js'));
 
 test('roster covers the decided ~16 modules + kernel, each with non-empty globs', () => {
   const keys = scope.moduleKeys();
@@ -99,3 +102,37 @@ test('provisioning + public-landing joined the roster (task 1002690) — territo
   assert.ok(prov.includes('scripts/gds/provision.js'), 'the control-plane runner travels with its domain');
   assert.ok(scope.globsForModules(['public-landing']).includes('public-landing/'), 'public-landing owns its surface directory');
 });
+
+test('platform-identity joined the roster (task 1002322) — the catalog territory goal 1000046 walls', () => {
+  // Before this, modules/platform-identity/ was covered by NO key, so goal 1000046
+  // (project visibility & customization) had an empty — i.e. authorize-nothing —
+  // scope wall: goal-scope-check denies with `empty_scope`/`unknown_scope`.
+  assert.ok(scope.isModuleKey('platform-identity'), 'roster missing module "platform-identity"');
+  const globs = scope.globsForModules(['platform-identity']);
+  assert.ok(globs.includes('modules/platform-identity/'), 'platform-identity owns its module directory');
+  // Derived, not hand-set: modules/platform-identity/ is absent from PROTECTED_GLOBS.
+  assert.equal(scope.isProtectedModule('platform-identity'), false);
+  assert.equal(
+    scope.scopeForModule('platform-identity').protected,
+    scope.isProtected(['modules/platform-identity/']),
+    'protected must be the faithful derivation, never a literal',
+  );
+  // The wall now COVERS the goal-1000046 catalog/visibility paths. Asserted through
+  // goal-scope-check.scopeSubset — the REAL consumer (directional containment), not a
+  // re-implementation here, so this can't pass while the live gate denies.
+  const wall = ['platform-identity', 'status-ui', 'hall-ui', 'public-landing', 'provisioning'];
+  const covers = (touch) => gsc.scopeSubset(wall, [touch]).ok;
+  for (const touch of [
+    'modules/platform-identity/platform-identity.js',   // visibility column + catalog domain
+    'modules/platform-identity/routes/projects.js',     // the feed + invite routes
+    'modules/status-ui/public/explore.js',              // orb render-type surface
+    'modules/hall-ui/public/my-projects.js',            // owner settings / applications queue
+    'public-landing/create.html',                       // the project-detail creation step
+    'modules/provisioning/',                            // module-bundle selection at provision time
+  ]) {
+    assert.equal(covers(touch), true, `wall does not cover ${touch}`);
+  }
+  // …and still BOUNDS: the trust core stays outside it (the wall is a wall).
+  assert.equal(covers('src/bongos/auth.js'), false, 'the wall must not cover the kernel auth core');
+  assert.equal(scope.scopeIncludesProtected(wall), false, 'goal 1000046 wall stays non-protected (governance widens it later)');
+});