@bongos/core 1.19.122 → 1.19.124

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.122",
-  "core_contract": "1.19.122",
-  "source_commit": "b8e5d6f6d62653ae415e42551ccb3c3c4e6c6f8a",
+  "core_version": "1.19.124",
+  "core_contract": "1.19.124",
+  "source_commit": "1b39368056a8f66b989d44a29bf23106497e1f61",
   "source_ref": "HEAD",
-  "built_at": "2026-08-14T21:05:40.247Z",
+  "built_at": "2026-08-14T21:52:54.130Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 303,
     "agent_docs_stubbed": 21,
-    "functional_verbatim": 1244,
+    "functional_verbatim": 1245,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 1568,
-  "tree_sha256": "03f0574ec4219110a53d6b8faaa4b93bcc96f0371d85d2a2e412d06d21364892",
+  "file_count": 1569,
+  "tree_sha256": "582a4f5e59904421feb7b95deaa1e4c386cf327462d0746b3b27e7160ea67abc",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -4167,12 +4167,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "969a257b3ae8148774d7d64cef01f68be0eec703043a129ae34984f3399208d9"
+      "sha256": "b596ffed4e442327f612e616590c1dc64e53c8b1a0ccca011b29678569f272eb"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "904c4fce25eeb089d80da1a5a0cfced1a96b99aea4f2bc28e5ce07d66bd8a880"
+      "sha256": "ea424af2d952a539697392ddb1467606d5b48417f4093d9ee91eba3a818bfc87"
     },
     {
       "path": "public-docs/index.html",
@@ -5254,6 +5254,11 @@
       "mode": "0000644",
       "sha256": "b937f7d320afc561b5d836d4bb3b5b0a244a6e326e04c13c70d98e787bfc1d59"
     },
+    {
+      "path": "scripts/gds/seed-project-admin-console-tasks.js",
+      "mode": "0000644",
+      "sha256": "0aa529c70605cdaaa43b111a224b189c672da865931637ac33cf7bb300bf806e"
+    },
     {
       "path": "scripts/gds/seed-provisioning-tasks.js",
       "mode": "0000644",
@@ -5752,7 +5757,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "79041166a496039eff11ecc00334671609fadace4a54645cf2b287a5b5ff1a53"
+      "sha256": "64773898c77a0786d85960b90c05b25c5148c3992561284c91d011d703745e22"
     },
     {
       "path": "src/module-loader/catalog.js",

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.122",
+  "version": "1.19.124",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.122",
+      "version": "1.19.124",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.122",
+  "version": "1.19.124",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/scripts/gds/seed-project-admin-console-tasks.js

@@ -0,0 +1,88 @@
+// Seed the build tasks for the project admin console (BONGOS-V1, internal).
+// Source of truth: docs/specs/bongos-v1-project-admin-console.md (status: draft —
+// spike task 1002786's output). Idempotent on (source, source_ref); re-running
+// resolves to the existing rows. The console wave is recommended as its OWN goal
+// (the spec's "where it lives" section): create it with /goal-create, then re-run
+// with --goal <id> to home the rows.
+//
+// Run: node scripts/gds/seed-project-admin-console-tasks.js [--goal <id>]
+const { apiCall, requireSession, cliExit } = require('./cli-lib');
+const VER = 'BONGOS-V1';
+const gIdx = process.argv.indexOf('--goal');
+const GOAL = gIdx >= 0 ? Number(process.argv[gIdx + 1]) : null;
+const SRC = 'planning-session';
+
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+async function api(method, path, body, _tries = 0) {
+  await sleep(400); // base throttle to stay under the per-IP rate limit
+  const r = await apiCall(method, `/api/gds${path}`, body);
+  const json = r.data || {};
+  if (r.status === 429 && _tries < 8) {
+    const wait = ((json.error && json.error.details && json.error.details.retry_after_seconds) || 30) + 1;
+    console.log(`  …rate-limited, waiting ${wait}s`);
+    await sleep(wait * 1000);
+    return api(method, path, body, _tries + 1);
+  }
+  return { status: r.status, ok: r.status >= 200 && r.status < 300, json };
+}
+
+// disc: engineer (backend/API/ADR) | ui (frontend). All refs per the spec's task table.
+const TASKS = [
+  { ref: 'R1', kind: 'spike', disc: 'engineer', prio: 4, est: 120, deps: [],
+    title: 'R1 · ADR: the project admin console model (planes reconciled, authority local)',
+    desc: 'Record the spike decisions as an ADR: the instance IS the project (standalone model) so authority lives on the project instance; a recruit invite is a pre-approved access_requests row (kind=invite, status=invited — sign-in is the acceptance act, firstTimeAdmissionBlocked untouched); a new grantable project.recruit atom (floor archon) carries "which rank may recruit", with the raw admission verdict (access_request.review) staying archon; the hub role is notification/relay only, retiring the authority-less resolveInvite loop. Supersedes the ADR 0141 §5 deferred-slice note. See docs/specs/bongos-v1-project-admin-console.md.' },
+  { ref: 'R2', kind: 'feature', disc: 'engineer', prio: 4, est: 240, deps: ['R1'],
+    title: 'R2 · Instance outbound recruit: invite rows on access_requests + rescind + sender list',
+    desc: 'Additive migration: access_requests gains kind (application|invite), created_by, note-for-invites. POST /access-requests/invite (gated by the new project.recruit atom) inserts kind=invite status=invited so the login can sign straight in; a rescind route re-locks before first sign-in; the sender can list outstanding invites. Done-when: an archon invites a login that never applied, that login signs in; rescind re-locks; tests extend the access-requests suite. Spec: docs/specs/bongos-v1-project-admin-console.md D2.' },
+  { ref: 'R3', kind: 'feature', disc: 'engineer', prio: 4, est: 120, deps: ['R1'],
+    title: 'R3 · Governance: the project.recruit atom (floor archon, grantable) + route pins',
+    desc: 'catalog.js gains project.recruit (floor archon, grantable, guards naming the console routes); a governance grant migration seeds the archon role; src/bongos/route-rank-check.js gets a platform-identity/console pins block (none exists today). Done-when: granting metic via the existing /governance UI lets a metic send an invite on that instance, revoking re-locks. Spec D3.' },
+  { ref: 'R4', kind: 'feature', disc: 'ui', prio: 4, est: 300, deps: ['R2', 'R3'],
+    title: 'R4 · The console page: applications + invites + settings on the project hall',
+    desc: 'New hall page on the project instance following watch.js (page floor + per-section 403-degrade) and settings.html (section rail) patterns: the applications queue (absorbing The Watch\'s access-requests section — Watch keeps the count tile linking over), outgoing invites with rescind, the join-policy toggle, and a "who may recruit" pointer into /governance. Done-when: one page shows both queues with working act buttons. Spec §Where it lives.' },
+  { ref: 'R5', kind: 'feature', disc: 'engineer', prio: 3, est: 120, deps: ['R1'],
+    title: 'R5 · Join policy: open|closed enforced at the public application door',
+    desc: 'An instance setting join_policy (open|closed) read by the public POST /access-requests — closed refuses with honest copy; the hub join relay surfaces the same truth on the button. Flipping takes effect without deploy. Four-state visibility stays with goal 1000046 (deferred per spec). Done-when: a closed project cannot be applied to, and the UI says why, both venues.' },
+  { ref: 'R6', kind: 'feature', disc: 'engineer', prio: 3, est: 180, deps: ['R2'],
+    title: 'R6 · Hub loop repair: invites notify the hub; accept = go sign in; rescind cleans both',
+    desc: 'The instance invite (R2) seeds the hub pending-membership row as a NOTIFICATION so the invitee sees it in My Projects; accepting links to the project sign-in (admission already granted instance-side); rescind cleans both sides. Retire the dead-end resolveInvite accept semantics (today accepting a hub invite admits nobody). Done-when: no state where an accepted invite leads to a locked door. Spec D2.' },
+  { ref: 'R7', kind: 'feature', disc: 'ui', prio: 3, est: 90, deps: ['R4'],
+    title: 'R7 · Apex entry: "Manage members" on the mine-view card links to the console',
+    desc: 'public-landing/projects.html ?view=mine: each owned project card grows a "Manage members" link to that project\'s own hall console (cross-host, riding the ADR 0141 SSO path). The one goal-1000059-surface touch this wave makes. Done-when: an owner clicks from cloudbongos.com/projects into their project\'s console signed in.' },
+];
+
+(async () => {
+  await requireSession(); // friendly guidance (not a stack trace) when signed out
+  const idByRef = {};
+  let created = 0, existing = 0;
+  console.log(`Seeding ${TASKS.length} console tasks (${VER}${GOAL ? `, goal ${GOAL}` : ', no goal — re-run with --goal after /goal-create'})…`);
+  for (const t of TASKS) {
+    const body = {
+      version_id: VER, title: t.title, description: t.desc,
+      kind: t.kind, discipline: t.disc, priority: t.prio, est_minutes: t.est,
+      source: SRC, source_ref: `admin-console-${t.ref}`,
+    };
+    if (GOAL) body.goal_id = GOAL;
+    const r = await api('POST', '/tasks', body);
+    if (!r.ok) { console.log(`  ${t.ref}: FAILED ${r.status} ${JSON.stringify(r.json)}`); continue; }
+    const task = r.json.task || r.json;
+    idByRef[t.ref] = task.id;
+    if (r.json.idempotent || r.json.existing) existing++; else created++;
+    console.log(`  ${t.ref} → task ${task.id} (${t.kind}/${t.disc}, P${t.prio})`);
+  }
+
+  console.log('Wiring dependencies…');
+  let edges = 0;
+  for (const t of TASKS) {
+    if (!t.deps.length) continue;
+    const id = idByRef[t.ref];
+    const depIds = t.deps.map((d) => idByRef[d]).filter(Boolean);
+    if (!id || depIds.length !== t.deps.length) { console.log(`  ${t.ref}: dep resolve gap, skipping`); continue; }
+    const r = await api('POST', `/tasks/${id}/dependencies`, { depends_on_task_ids: depIds });
+    if (!r.ok) { console.log(`  ${t.ref}: dep FAILED ${r.status} ${JSON.stringify(r.json)}`); continue; }
+    edges += depIds.length;
+    console.log(`  ${t.ref} depends on ${t.deps.join(',')}`);
+  }
+  console.log(`Done: ${created} created, ${existing} existing, ${edges} dependency edges.`);
+  cliExit(0); // never process.exit() after a request (scripts/gds/CLAUDE.md — the win/async.c abort)
+})();

package/src/module-api.js

@@ -671,8 +671,12 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 //         landed since 1.19.120 with no explicit bump. run 31838955115. (task 1002620)
 //   1.19.122 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
 //         landed since 1.19.121 with no explicit bump. run 31840810826. (task 1002620)
+//   1.19.123 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.122 with no explicit bump. run 31842559470. (task 1002620)
+//   1.19.124 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.123 with no explicit bump. run 31844281033. (task 1002620)
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.122'; // CI auto-patch carrier (ADR 0161); see changelog above
+const CORE_VERSION = '1.19.124'; // CI auto-patch carrier (ADR 0161); see changelog above
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');