@bongos/core 1.19.421 → 1.19.422

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.421",
-  "core_contract": "1.19.421",
-  "source_commit": "ea6e65fb6df2e2ca09fcb0769b194b3ccb407878",
+  "core_version": "1.19.422",
+  "core_contract": "1.19.422",
+  "source_commit": "a2cae68f503e499826a5d0114194b745b5aeb6f9",
   "source_ref": "HEAD",
-  "built_at": "2026-08-29T17:49:20.389Z",
+  "built_at": "2026-08-29T18:07:36.567Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 359,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 2101,
-  "tree_sha256": "9528e100c022a131a7ee286c52e98c8bd5544beec72d013af6aea2a668a8e487",
+  "tree_sha256": "091c6d00cc4a890a35034e201a0cd36ffb7a4a4dcecddf363b744ecf48111124",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -1937,7 +1937,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "54aad52c9bf29c0443c656e9ccc606b886e241bd6f0f1f6ea178d6e0ff4ce46a"
+      "sha256": "68da337fe624beebbb36d6853b7bf812361710787a60d9edfad69f89308d171e"
     },
     {
       "path": "docs/modules-contract.md",
@@ -5497,12 +5497,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "c735a709aeb39ba8d543a0d1a116c6c4c99398fdee629b719228b21dc351e931"
+      "sha256": "a2363ff4df6855d8697c3a70966ba26a1d08de556401c1bcfde19da58ddd135a"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "82dbf5b00684863b19d987b3aed3abbf668b38f2aa8133081993a3dc6ec37b57"
+      "sha256": "7e93fe6cffacf733f52b48c0c96c6ce55ba74c90f8b34d6464a629071ae7265b"
     },
     {
       "path": "public-docs/index.html",
@@ -5742,7 +5742,7 @@
     {
       "path": "public-landing/assets/cosmos.css",
       "mode": "0000644",
-      "sha256": "85797e1405425d852572a796f56fde0928b596af49b04214b576c7e4067fbfcd"
+      "sha256": "282ec017ecdd9ecde6ef3c80df5b7874b392e2b4d97ae29b4222a87c2ed51f3a"
     },
     {
       "path": "public-landing/assets/verro-medallion.png",
@@ -5962,7 +5962,7 @@
     {
       "path": "public-landing/projects.html",
       "mode": "0000644",
-      "sha256": "8f74c9a2d3eda52bc91d04c0b1b13fc4752688fdf864bcc0ae8cb9e242c7b8d3"
+      "sha256": "4174cf9209dd56e38944462d62f178bf684a7fb593d3c20b81620f004e64a57b"
     },
     {
       "path": "public-landing/projects.probes.json",
@@ -7632,7 +7632,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "1dda5c82cffdacd548fa5f46dace55a9967f8b43b3ddd3eff267ddf9002f0020"
+      "sha256": "4427e50f39df281c8381e932a2ede8b4550c8a6fc4582d74a36b4054dfca2e17"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -9682,12 +9682,12 @@
     {
       "path": "tests/projects_hub.mjs",
       "mode": "0000644",
-      "sha256": "27a10d25acbf114ba0939325bf225399503b54149d3c24f25592c82d7bbe5f85"
+      "sha256": "b40e405b673524ad0d33c041730771d1ebf9c95198062ebf307aed5fa1e7d501"
     },
     {
       "path": "tests/projects_hub_pre_uat.mjs",
       "mode": "0000644",
-      "sha256": "ecf1a225759d8d8475bac145727c006fe7341c4b945690ffd47a620e42e8140e"
+      "sha256": "48b314b096c67793dba8f5faeec5b03d043c42a17a38466e072e6bf9c7ae9ec5"
     },
     {
       "path": "tests/promote_goal_id.mjs",

package/docs/module-api-changelog.md

@@ -1279,5 +1279,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.419 with no explicit bump. run 33266034679. (task 1002620)
   1.19.421 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.420 with no explicit bump. run 33266605270. (task 1002620)
+  1.19.422 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.421 with no explicit bump. run 33267393283. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.421",
+  "version": "1.19.422",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.421",
+      "version": "1.19.422",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.421",
+  "version": "1.19.422",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/public-landing/assets/cosmos.css

@@ -903,17 +903,30 @@ p.sec-p{font-size:var(--fs-lede);font-weight:500;color:var(--ink-soft);line-heig
 .tbl td.right{text-align:right;}
 /* Nothing in an action or status cell may wrap: "Manage →" breaking after the
    space and the chip's recency dropping to a second line both read as a broken
-   control rather than a tight column. Those two cells claim their width and the
-   name cell absorbs the slack. */
+   control rather than a tight column. */
 .tbl .btn,.tbl .chip{white-space:nowrap;}
-.tbl .colStatus{width:1%;white-space:nowrap;}
-.tbl .colGo{width:1%;white-space:nowrap;padding-left:8px;}
-.tbl .colName{width:auto;}
-.tbl .colType{width:1%;white-space:nowrap;}
+.tbl .colStatus,.tbl .colGo,.tbl .colType{white-space:nowrap;}
+.tbl .colGo{padding-left:8px;}
+/* ── FIXED tracks (task 1003348; the owner: "the columns don't look aligned").
+   An auto table sized every column by its content, so the status column hugged
+   its widest chip and the headers drifted off their cells. table-layout:fixed
+   takes the widths from the header row — one set of tracks for every row, each
+   column edge one vertical line — and the name column absorbs the slack. The
+   Project header sits over the NAME (past the 10px dot and its 12px gap), and a
+   right-aligned column's header is right-aligned too. Below the table's minimum
+   the wrap scrolls (#sub-table-body), never the page. ── */
+.tbl{table-layout:fixed;min-width:860px;}
+.tbl th.colName{padding-left:22px;}
+.tbl th.right{text-align:right;}
+.tbl th.colType{width:88px;}
+.tbl th.colBuilders{width:96px;}
+.tbl th.colTags{width:168px;}
+.tbl th.colStatus{width:224px;}
+.tbl th.colGo{width:112px;}
 /* the declared-type tag (task 1002772) — its own vocabulary: not the relationship
    .pill, not the liveness .chip. Two different facts never wear the same chrome. */
 .typeTag{font-family:var(--font-mono);font-size:10.5px;font-weight:500;color:var(--ink-soft);border:1px solid var(--rule);border-radius:999px;padding:2px 9px;white-space:nowrap;}
-@media (max-width:780px){.tbl .colTags,.tbl .colType{display:none;}}
+@media (max-width:780px){.tbl .colTags,.tbl .colType{display:none;}.tbl{min-width:600px;}}
 @media (max-width:900px){
   .tblMast{gap:16px;padding:22px 0 20px;}
   .tblTitle{font-size:clamp(28px,7.4vw,34px);}
@@ -1065,7 +1078,6 @@ p.sec-p{font-size:var(--fs-lede);font-weight:500;color:var(--ink-soft);line-heig
 .rowHall{display:inline-flex;align-items:center;justify-content:center;width:28px;height:28px;margin-left:10px;
   vertical-align:middle;color:var(--accent-deep);border-radius:var(--radius-pill);}
 .rowHall:hover{background:var(--glass);}
-.tbl .colGo{white-space:nowrap;}
 @media (max-width:640px){
   .projCard h3{font-size:26px;padding:0 20px;}
   .projCard .cardTag,.projCard .cardRel,.projCard .cardFaces,.projCard .cardFigs,.projCard .cardMeta,
@@ -1154,8 +1166,10 @@ p.sec-p{font-size:var(--fs-lede);font-weight:500;color:var(--ink-soft);line-heig
    structure, the project's own planet as the row's object, the strip drawn
    as the lifecycle rail, the doors as hairline pills with the accent only on
    the one that acts. One set of FIXED tracks across every row, so the list
-   reads as one ledger (task 1003348). Dark only (ADR 0204); every colour a
-   token; halos are outlines, never box-shadow (DESIGN.md).
+   reads as one ledger — the same column grammar the every-project table takes
+   in its `.tbl` rules (table-layout:fixed, the header row's widths; task
+   1003348, both halves pinned together in tests/projects_hub.mjs). Dark only
+   (ADR 0204); every colour a token; halos are outlines, never box-shadow.
    ═══════════════════════════════════════════════════════════════════════ */
 #view-mine .wrap,#view-manage .wrap{max-width:1180px;}
 #view-mine .card,#view-manage .card{background:none;border-radius:0;box-shadow:none;padding:0;margin:0;}

package/public-landing/projects.html

@@ -489,7 +489,7 @@ summary{min-height:24px;padding:3px 0;}
         <tr>
           <th class="colName" data-sort="name" aria-sort="ascending"><button type="button" class="thSort">Project</button></th>
           <th class="colType">Type</th>
-          <th class="right" data-sort="builders"><button type="button" class="thSort">Builders</button></th>
+          <th class="right colBuilders" data-sort="builders"><button type="button" class="thSort">Builders</button></th>
           <th class="colTags">Runs</th>
           <th class="right colStatus">Status</th>
           <th class="colGo"></th>

package/src/module-api.js

@@ -33,7 +33,7 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.421'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.422'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/projects_hub.mjs

@@ -1655,3 +1655,24 @@ test('the kit proves the field path: the fixture carries a curated template and
   assert.ok(attrs.some((a) => a.includes('amazonprimea.com') && a.endsWith('data-template bead-wash')), 'the curated template reaches the orb');
   assert.ok(attrs.some((a) => a.includes('demo.cloudbongos.com') && a.endsWith('data-material gold')), 'the material reaches the orb as its own attribute');
 });
+
+/* ── the table's columns on FIXED tracks (task 1003348; the owner, 2026-08-29: "the
+   columns in that projects table view dont look aligned") ── */
+test('one column grammar: the table lays every row on one set of fixed tracks (each header over its cells), and the mine list shares the rule', () => {
+  assert.match(COSMOS, /\.tbl\{table-layout:fixed;min-width:860px;\}/, 'the header row\'s widths are the table\'s — no per-row content sizing');
+  // the task's other half — the Your projects list — landed with task 1003345 and is pinned above
+  // ('the mine list lays every row on one set of FIXED tracks'); it is asserted here too so the two
+  // halves of the grammar can never drift apart: fixed planet + doors, ratio tracks with no content minimum
+  assert.match(COSMOS, /#view-mine \.proj\{display:grid;grid-template-columns:72px minmax\(0,1fr\);/, 'the mine row: the planet track is a width');
+  assert.match(COSMOS, /#view-mine \.projBody\{display:grid;grid-template-columns:minmax\(0,1\.1fr\) minmax\(0,1\.3fr\) minmax\(0,1fr\) 232px;/, 'the mine row: name, facts and rail by ratio with no content minimum, the doors a width');
+  assert.match(COSMOS, /the same column grammar the every-project table takes/, 'the mine block names the table as its twin');
+  for (const [col, w] of [['colType', 88], ['colBuilders', 96], ['colTags', 168], ['colStatus', 224], ['colGo', 112]]) {
+    assert.match(COSMOS, new RegExp(`\\.tbl th\\.${col}\\{width:${w}px;\\}`), `${col} is a width, not a 1% hug`);
+  }
+  assert.doesNotMatch(COSMOS, /\.tbl \.col\w+\{width:1%/, 'no column hugs its widest cell any more');
+  assert.match(COSMOS, /\.tbl th\.colName\{padding-left:22px;\}/, 'the Project header sits over the name, past the dot and its gap');
+  assert.match(COSMOS, /\.tbl th\.right\{text-align:right;\}/, 'a right-aligned column\'s header is right-aligned too');
+  assert.match(HUB, /<th class="right colBuilders" data-sort="builders">/, 'the builders header names its column so its width can be set');
+  assert.match(COSMOS, /@media \(max-width:780px\)\{\.tbl \.colTags,\.tbl \.colType\{display:none;\}\.tbl\{min-width:600px;\}\}/, 'a phone scrolls the table inside its wrap');
+  assert.match(COSMOS, /#sub-table-body\{overflow-x:auto;\}/, 'the wrap scrolls, never the page');
+});

package/tests/projects_hub_pre_uat.mjs

@@ -560,7 +560,7 @@ test('the done panel’s progress region is stable, change-only, and says each s
 
 test('the map table sorts from the keyboard and an owned row’s name is a real link', () => {
   assert.match(HUB, /<th class="colName" data-sort="name" aria-sort="ascending"><button type="button" class="thSort">Project<\/button><\/th>/);
-  assert.match(HUB, /<th class="right" data-sort="builders"><button type="button" class="thSort">Builders<\/button><\/th>/);
+  assert.match(HUB, /<th class="right colBuilders" data-sort="builders"><button type="button" class="thSort">Builders<\/button><\/th>/);
   assert.match(SCRIPT, /var btn = th\.querySelector\('button'\);\n\s*if \(!btn\) return;\n\s*btn\.addEventListener\('click'/, 'the listener sits on the button, not the th');
   assert.doesNotMatch(SCRIPT, /th\.style\.cursor/, 'no JS-set cursor on the th');
   assert.match(COSMOS, /\.tbl th button\{all:unset;cursor:pointer;\}/);