@bongos/core 1.19.341 → 1.19.342

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.341",
-  "core_contract": "1.19.341",
-  "source_commit": "395ad8796967381d04b9f5ad9247da0cbf60d419",
+  "core_version": "1.19.342",
+  "core_contract": "1.19.342",
+  "source_commit": "8762dcc095daf67a6ebc7d8f67bee76335f6d718",
   "source_ref": "HEAD",
-  "built_at": "2026-08-25T01:41:39.768Z",
+  "built_at": "2026-08-25T01:51:12.583Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 326,
     "agent_docs_stubbed": 22,
-    "functional_verbatim": 1485,
+    "functional_verbatim": 1487,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 1833,
-  "tree_sha256": "29b405f9216626b6f363e10be67e90f2bde67fdd472151fc4eaf0a6c18384acd",
+  "file_count": 1835,
+  "tree_sha256": "77392f5c78b2253320505f4775d1f72a1dfe9c6c07fb3120ca3cbb91c9a8727d",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -4732,12 +4732,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "7c3952267fd38da7241791d8f5c4e7a2d8226d4cf8d30473fd6fe56ca000a4af"
+      "sha256": "c98fa68956d00010ef831bab66ad73939ee7b86b61a95c2512d4c98b2d284823"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "d2ed11ab8e90eb8293778ce19fe921737158c0ab9d8063a9842383b1cfc59e94"
+      "sha256": "6cd5475e1b29d9ba180f44e88c824eb38291945b3122ae22ff948e481333e513"
     },
     {
       "path": "public-docs/index.html",
@@ -5759,6 +5759,11 @@
       "mode": "0000644",
       "sha256": "23c61159820e8b796bb3c84b399c4d8d9f2b1fc5665be5672ec72a354bcedc2e"
     },
+    {
+      "path": "scripts/gds/push-path-brief.js",
+      "mode": "0000644",
+      "sha256": "cd173e293b1053a4070d2f1c3d51ad28d19d978cd3489efe312dc45e38739553"
+    },
     {
       "path": "scripts/gds/read-session-export.js",
       "mode": "0000644",
@@ -6567,7 +6572,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "96c4cf1842a773983825fb0a8639b3e73eb0a3e7646a38781962530f072f6457"
+      "sha256": "f26225c679194161265e5994e72566604610a0e41a4a2270579cfa6fbce3d0a2"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -8534,6 +8539,11 @@
       "mode": "0000644",
       "sha256": "5a9ea0bf7b4d776a6f9036b8bd060fef76335533274ed748e9b9d742da6960d3"
     },
+    {
+      "path": "tests/push_path_brief.mjs",
+      "mode": "0000644",
+      "sha256": "aea6f9ec053bd9477288025b58ed76c166c2d59a24d7ea3481edadba90113887"
+    },
     {
       "path": "tests/rank_gate.mjs",
       "mode": "0000644",

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.341",
+  "version": "1.19.342",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.341",
+      "version": "1.19.342",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.341",
+  "version": "1.19.342",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/scripts/gds/push-path-brief.js

@@ -0,0 +1,94 @@
+#!/usr/bin/env node
+'use strict';
+//
+// scripts/gds/push-path-brief.js — say out loud, at session start, that this machine
+// cannot push (task 1003259 / idea 1000838).
+//
+// THE GAP. On 2026-08-24 a dev-box agent hit auth failures on every raw git probe,
+// concluded "no push credential exists", and asked the owner to mint a fine-grained
+// PAT and store it in ~/.git-credentials on the box — the exact anti-pattern the
+// server-mediated publish path (ADR 0055) exists to avoid. The agent was not being
+// careless: from inside a box every direct GitHub probe fails BY DESIGN (the clone
+// token is one-shot and scrubbed from .git/config after each fetch — ADR 0031 §6),
+// so "missing credential" is the only story the local evidence supports, and the true
+// state at the time (branch already pushed, PR open, CI red) was invisible to it.
+// Nothing the box session loads says the model out loud. This says it out loud.
+//
+// SO: the third SessionStart truth-teller, beside deploy-divergence.js and
+// strand-watch.js. On the server-publish path (pushVia() 'server' — no authenticated
+// gh, i.e. a dev box or any credential-less checkout) it prints ONE line stating the
+// credential model and where the truth about published work lives
+// (GET /api/gds/tasks/:id/publish-status). On a laptop that pushes locally
+// (pushVia() 'local') it prints NOTHING — a line that fires on every healthy laptop
+// becomes wallpaper and the real one gets scrolled past (the strand-watch lesson).
+//
+// STATIC TEXT ONLY. Nothing builder-authored is interpolated, so this adds no
+// prompt-injection surface (the same trust-boundary rule as strand-watch's
+// no-titles) — the test pins the line to the exported constant.
+//
+// Usage:
+//   node scripts/gds/push-path-brief.js          # human-readable: which path + why
+//   node scripts/gds/push-path-brief.js --line   # ONE line or nothing; always exit 0
+//
+// Detection override (tests / forcing): OTB_PUSH_VIA_SERVER=1 (server) / =0 (local).
+
+const { hasFlag } = require('./cli-lib');
+
+// ---- pure core ---------------------------------------------------------------
+
+const BRIEF = 'This machine holds NO GitHub push credential — BY DESIGN (ADR 0031 §6 / ADR 0055): '
+  + 'git push / ls-remote / fetch against origin fail with auth errors here, and that is not a fault to fix. '
+  + 'Landing is server-mediated — /builder-ship uploads a git bundle and the SERVER pushes, opens the PR, and lands it. '
+  + 'NEVER ask the owner for a PAT or credential; that request is always wrong on this machine. '
+  + 'To see whether work reached GitHub, use GET /api/gds/tasks/:id/publish-status — never raw git probes.';
+
+// briefLine(via) — the unit-testable core: the SessionStart line for this publish
+// path, or null. Null IS the silence (the laptop case, and the undetermined case —
+// a detection failure must not manufacture a warning).
+function briefLine(via) {
+  return via === 'server' ? BRIEF : null;
+}
+
+// ---- detection ---------------------------------------------------------------
+
+// Lazy require so a broken or partial checkout degrades to silence, not a stack
+// trace injected into the session. pushVia() honors OTB_PUSH_VIA_SERVER, else
+// probes for an authenticated gh (absent on every box → 'server' instantly).
+function detectVia() {
+  return require('./ship-deploy-target.js').pushVia();
+}
+
+// ---- rendering ---------------------------------------------------------------
+
+function report(via) {
+  console.log('');
+  console.log('  Publish path');
+  console.log('  ──────────────────────────────────────────────────────────');
+  if (via === 'server') {
+    console.log('  server-mediated (no authenticated gh — a dev box or credential-less checkout).');
+    console.log(`  ${BRIEF}`);
+  } else if (via === 'local') {
+    console.log('  local — this machine pushes with its own git + gh credentials.');
+  } else {
+    console.log('  undetermined — could not probe the publish path on this machine.');
+  }
+  console.log('');
+}
+
+function main() {
+  let via = null;
+  try { via = detectVia(); } catch (_) { via = null; }
+  if (hasFlag('--line')) {
+    // FAIL-OPEN, like the other SessionStart lines: silence on 'local' and on any
+    // detection failure; never a nonzero exit on the path every session rides in on.
+    const l = briefLine(via);
+    if (l) console.log(l);
+    process.exitCode = 0;
+    return;
+  }
+  report(via);
+}
+
+module.exports = { briefLine, BRIEF };
+
+if (require.main === module) main();

package/src/module-api.js

@@ -1112,8 +1112,10 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 //         landed since 1.19.339 with no explicit bump. run 32798342738. (task 1002620)
 //   1.19.341 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
 //         landed since 1.19.340 with no explicit bump. run 32798507686. (task 1002620)
+//   1.19.342 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.341 with no explicit bump. run 32799103427. (task 1002620)
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.341'; // CI auto-patch carrier (ADR 0161); see changelog above
+const CORE_VERSION = '1.19.342'; // CI auto-patch carrier (ADR 0161); see changelog above
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/push_path_brief.mjs

@@ -0,0 +1,90 @@
+// tests/push_path_brief.mjs
+//
+// Task 1003259 / idea 1000838 — a dev-box agent, unable to see WHY its git probes were
+// failing, asked the owner to mint a PAT and store it on the box. push-path-brief.js is
+// the SessionStart line that states the credential model natively so that request never
+// gets made again. These tests pin BOTH halves: the line fires on the server-publish
+// path with the load-bearing phrases intact, and it is SILENT everywhere else — the
+// silence is half the design (a line firing on every healthy laptop becomes wallpaper).
+//
+// DB-free + network-free: briefLine is pure, and the CLI cases force the path with
+// OTB_PUSH_VIA_SERVER so pushVia() never spawns gh. Run:  node tests/push_path_brief.mjs
+
+import { strict as assert } from 'node:assert';
+import { createRequire } from 'node:module';
+import { spawnSync } from 'node:child_process';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const require = createRequire(import.meta.url);
+const brief = require('../scripts/gds/push-path-brief.js');
+
+let passed = 0, failed = 0;
+function t(name, fn) {
+  try { fn(); passed++; console.log(`  PASS  ${name}`); }
+  catch (e) { failed++; console.log(`  FAIL  ${name}\n        ${e.message}`); }
+}
+
+// ---- the pure core -----------------------------------------------------------
+
+t('server path gets the brief, with every load-bearing phrase', () => {
+  const l = brief.briefLine('server');
+  assert.ok(typeof l === 'string' && l.length > 0, 'expected a line on the server path');
+  // Each phrase is one of the three facts the 2026-08-24 incident showed an agent
+  // cannot infer from inside a box. Losing any of them re-opens the gap.
+  for (const must of [
+    'NO GitHub push credential',
+    'BY DESIGN',
+    '/builder-ship',
+    'NEVER ask the owner for a PAT',
+    'publish-status',
+  ]) {
+    assert.ok(l.includes(must), `line must state: ${must}`);
+  }
+});
+
+t('local path is SILENT — null, not an empty string', () => {
+  assert.equal(brief.briefLine('local'), null);
+});
+
+t('undetermined path stays silent (fail-open, exact vocabulary only)', () => {
+  assert.equal(brief.briefLine(null), null);
+  assert.equal(brief.briefLine(undefined), null);
+  assert.equal(brief.briefLine('SERVER'), null);
+  assert.equal(brief.briefLine('ci'), null);
+});
+
+t('the line is the exported static constant — nothing is interpolated', () => {
+  // Trust boundary: this string is injected into every box session's context. Pinning
+  // it to the constant proves no builder-authored text can ever ride along.
+  assert.equal(brief.briefLine('server'), brief.BRIEF);
+});
+
+// ---- the CLI, end-to-end through the pushVia() override -----------------------
+
+const script = path.join(
+  path.dirname(fileURLToPath(import.meta.url)),
+  '..', 'scripts', 'gds', 'push-path-brief.js',
+);
+function runCli(env) {
+  return spawnSync(process.execPath, [script, '--line'], {
+    env: { ...process.env, ...env },
+    encoding: 'utf8',
+    timeout: 15000,
+  });
+}
+
+t('--line on the forced server path prints the brief and exits 0', () => {
+  const r = runCli({ OTB_PUSH_VIA_SERVER: '1' });
+  assert.equal(r.status, 0, `expected exit 0, got ${r.status} (stderr: ${r.stderr})`);
+  assert.ok(r.stdout.includes('publish-status'), 'expected the brief on stdout');
+});
+
+t('--line on the forced local path prints NOTHING and still exits 0', () => {
+  const r = runCli({ OTB_PUSH_VIA_SERVER: '0' });
+  assert.equal(r.status, 0, `expected exit 0, got ${r.status} (stderr: ${r.stderr})`);
+  assert.equal(r.stdout.trim(), '', 'the laptop case must be silent');
+});
+
+console.log(`\npush_path_brief: ${passed} passed, ${failed} failed`);
+process.exit(failed ? 1 : 0);