@bongos/core 1.19.684 → 1.19.685

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.684",
-  "core_contract": "1.19.684",
-  "source_commit": "3cf0cdf9f887f9b33631e0bcfb3b7290cd935b06",
+  "core_version": "1.19.685",
+  "core_contract": "1.19.685",
+  "source_commit": "b1f9d9ab3a9892d6ccca5a2624ffbe732f23b98b",
   "source_ref": "HEAD",
-  "built_at": "2026-09-12T20:55:49.945Z",
+  "built_at": "2026-09-12T21:13:17.682Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 477,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 2626,
-  "tree_sha256": "dc96d8a5eb830704ee772fe1cee19ce1c4ec39575c4fafbbfe46012f5a2cd4b9",
+  "tree_sha256": "39b75c53e1b9736b4820105974401f9c9a67a3b5ed629b7434c0272f0a64d5eb",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -2802,7 +2802,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "d441eb881efdcff2c6afedfa6d93799fdd64ac323422f12b54bf2c94df2b8d4a"
+      "sha256": "aa474c62aed632c8ff75731a38bf22b286866cb6aa30953a64f2ea46e3c83ee2"
     },
     {
       "path": "docs/modules-contract.md",
@@ -7782,12 +7782,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "130314108dd59672172778afcb5eedb0b8d605a983329a0d0a878ce9c59fa9c9"
+      "sha256": "e1896f085954a25abf57b98c3e16dc53825a88f657cb70f0839e65cf45960cdc"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "d5281482b1e0da7cd0cab8f475fc71345776694e8b457b2f96d241a315902ee4"
+      "sha256": "4f32692ff1a262f499c156645e05890e5814346a1ddbe081846bfbebaf3c6f20"
     },
     {
       "path": "public-docs/index.html",
@@ -9547,7 +9547,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "927d43875de79a0923fc0997262fd7a0106c6f56626a89ed5ede0c6c74945eec"
+      "sha256": "50802a77ae69160c8c739f40a02cae66c61bfd200e3d9a6d6be4024baa382793"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -9972,7 +9972,7 @@
     {
       "path": "tests/box_infra_resolve.mjs",
       "mode": "0000644",
-      "sha256": "99209d0e407333bdd00236f0efe9ea63a94678bc206e1c5ae2995f76381f87fd"
+      "sha256": "cf261fa549f36d47ee42343bac2a297b132638aedf03beb8f521370b0c45c0e3"
     },
     {
       "path": "tests/box_onboard.mjs",

package/docs/module-api-changelog.md

@@ -1827,5 +1827,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.682 with no explicit bump. run 34706984747. (task 1002620)
   1.19.684 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.683 with no explicit bump. run 34718471740. (task 1002620)
+  1.19.685 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.684 with no explicit bump. run 34719298791. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.684",
+  "version": "1.19.685",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.684",
+      "version": "1.19.685",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.684",
+  "version": "1.19.685",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/src/module-api.js

@@ -71,7 +71,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.684'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.685'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/box_infra_resolve.mjs

@@ -69,22 +69,30 @@ function makeInfra({ template = true, inlined = INLINED } = {}) {
 // ===========================================================================
 // boxInfraCandidates — ordering (pure, injected; ADR 0150 prong A)
 // ===========================================================================
+// Expected candidates are built with path.join/path.resolve — the same calls
+// boxInfraCandidates makes — never as literal POSIX strings (task 1003821). A
+// hardcoded '/inst/infra' is 'C:\inst\infra' once the code has run it through
+// path.resolve, so these two tests were permanently red for every Windows builder
+// while ubuntu CI stayed green. A known-noise entry in a local baseline is the
+// thing that teaches a reader to skim the fail list instead of diffing it by name.
+const VENDORED_ROOT = '/srv/app/node_modules/@bongos/core';
+
 await test('candidate order: override → explicit instance root → repoRoot → node_modules walk-up', () => {
-  const env = { CLOUDBONGOS_BOX_INFRA_DIR: '/ovr', CLOUDBONGOS_INSTANCE_ROOT: '/inst' };
-  const c = box.boxInfraCandidates({ env, repoRoot: '/srv/app/node_modules/@bongos/core' });
+  const env = { BONGOS_BOX_INFRA_DIR: '/ovr', BONGOS_INSTANCE_ROOT: '/inst' };
+  const c = box.boxInfraCandidates({ env, repoRoot: VENDORED_ROOT });
   assert.equal(c[0], path.resolve('/ovr'), 'explicit override is first');
-  assert.equal(c[1], path.join('/inst', 'infra'), 'then the explicit instance root');
-  assert.equal(c[2], '/srv/app/node_modules/@bongos/core/infra', 'then REPO_ROOT/infra');
+  assert.equal(c[1], path.join(path.resolve('/inst'), 'infra'), 'then the explicit instance root');
+  assert.equal(c[2], path.join(VENDORED_ROOT, 'infra'), 'then REPO_ROOT/infra');
   // the load-bearing case: a vendored core walks UP out of node_modules to its host
   // instance root, so infra/ is found with no pointer at all.
-  assert.ok(c.includes('/srv/app/infra'), 'walk-up recovers the host instance root infra/');
+  assert.ok(c.includes(path.join('/srv/app', 'infra')), 'walk-up recovers the host instance root infra/');
 });
 
 await test('repoRoot/infra precedes its ancestors in the walk-up (robust to any cwd pointer)', () => {
   const c = box.boxInfraCandidates({ env: {}, repoRoot: '/x/y/z' });
-  const i0 = c.indexOf('/x/y/z/infra');
-  const i1 = c.indexOf('/x/y/infra');
-  const i2 = c.indexOf('/x/infra');
+  const i0 = c.indexOf(path.join('/x/y/z', 'infra'));
+  const i1 = c.indexOf(path.join('/x/y', 'infra'));
+  const i2 = c.indexOf(path.join('/x', 'infra'));
   assert.ok(i0 >= 0 && i1 > i0 && i2 > i1, 'repoRoot/infra, then /x/y/infra, then /x/infra — in order');
 });
 
@@ -93,7 +101,7 @@ await test('repoRoot/infra precedes its ancestors in the walk-up (robust to any
 // ===========================================================================
 await test('resolveBoxInfraDir picks the override dir when it holds the template', () => {
   const { infra } = makeInfra();
-  const got = box.resolveBoxInfraDir({ env: { CLOUDBONGOS_BOX_INFRA_DIR: infra }, repoRoot: '/nope/does/not/exist' });
+  const got = box.resolveBoxInfraDir({ env: { BONGOS_BOX_INFRA_DIR: infra }, repoRoot: '/nope/does/not/exist' });
   assert.equal(got, infra);
 });
 
@@ -103,7 +111,7 @@ await test('resolveBoxInfraDir falls THROUGH a template-less override to the ins
   const { infra } = makeInfra();                    // a real infra/ to fall through to
   const instRoot = path.dirname(infra);             // <root>, so <root>/infra === the real one
   const got = box.resolveBoxInfraDir({
-    env: { CLOUDBONGOS_BOX_INFRA_DIR: emptyOverride, CLOUDBONGOS_INSTANCE_ROOT: instRoot },
+    env: { BONGOS_BOX_INFRA_DIR: emptyOverride, BONGOS_INSTANCE_ROOT: instRoot },
     repoRoot: '/nope',
   });
   assert.equal(got, infra, 'skips the template-less override, takes the instance-root infra/');