@bongos/core 1.19.750 → 1.19.751

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.750",
-  "core_contract": "1.19.750",
-  "source_commit": "70d84110fa87578e522d55cec0236a0719f25767",
+  "core_version": "1.19.751",
+  "core_contract": "1.19.751",
+  "source_commit": "737b578919a197afeddbf0c94a548290a9161998",
   "source_ref": "HEAD",
-  "built_at": "2026-09-15T22:23:58.558Z",
+  "built_at": "2026-09-15T22:52:21.404Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 482,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 2617,
-  "tree_sha256": "a8d1e331aab73c6da3b924d2defdcf6ac1d55f6a9ccfed12c7922e90314e7417",
+  "tree_sha256": "741bce83585c646386bc2ddbe75a07bf458400bd8ed19f78d47da79ba5c9e5de",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -2507,7 +2507,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "996dff9026c0402289d079b4a3cab9b437def3df20adbc465c841b5064ff1b48"
+      "sha256": "6864b03a8e3bcca555963a85cbd1d3c1ac609b355e61ff4abb60299626979752"
     },
     {
       "path": "docs/modules-contract.md",
@@ -7562,12 +7562,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "f0450a8f923e11ca0b92de0ead3f2b9b49a8c01f721be06ddd2566845a082775"
+      "sha256": "197208273eadd947af33002bde4c49421f0a5f846946b5852fc2422bcf4bdafc"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "4bc87648a58a6f4b15ffe9f9bda38a0edace87d66e9e319317804d3f1ee347ac"
+      "sha256": "c91859f22d3a06e3e9c64c628dff657f7aecbda25afafd287f571a473148bdee"
     },
     {
       "path": "public-docs/index.html",
@@ -8927,7 +8927,7 @@
     {
       "path": "scripts/gds/upgrade.js",
       "mode": "0000644",
-      "sha256": "fe3abe00b43163eb1b24dd2da57d4c8fd51194e79bab8a6683355980787a9e8c"
+      "sha256": "3146778317a4dfd01673553e94966ea40d27add12a7ca6c52ec8581eded085ac"
     },
     {
       "path": "scripts/gds/validate-design.js",
@@ -9367,7 +9367,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "de52088bfb2f473ad6960e60ee94153cdf1b74d4634ed4934d22e977988278a9"
+      "sha256": "e80ba785ccd39c20b2ca31f3c645257f84e72004e75c71ba52fb10647a6b3297"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -12952,7 +12952,7 @@
     {
       "path": "tests/upgrade_persist_pin.mjs",
       "mode": "0000644",
-      "sha256": "864b9471fcd6bfc41e99fd5356a3124c25d288946326c2797cc2bacb86120d05"
+      "sha256": "d30debaa35407998dcdd1949f9bcbf45c09b4a001d22cfdea9541b5bdbaa1274"
     },
     {
       "path": "tests/verify_task_guard.mjs",

package/docs/module-api-changelog.md

@@ -1974,5 +1974,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.748 with no explicit bump. run 35028684745. (task 1002620)
   1.19.750 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.749 with no explicit bump. run 35030717430. (task 1002620)
+  1.19.751 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.750 with no explicit bump. run 35033016299. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.750",
+  "version": "1.19.751",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.750",
+      "version": "1.19.751",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.750",
+  "version": "1.19.751",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/scripts/gds/upgrade.js

@@ -334,7 +334,7 @@ function persistPin({ instanceDir, fromVersion, toVersion, commitPin, push = tru
     err('    On a pull-deploy instance the next push to the repo of record makes deploy.sh');
     err(`    'git reset --hard ${remote}/${branch || 'main'}', which REVERTS this pin and lets npm ci`);
     err(`    reinstall ${fromVersion || 'the previous core'}. Re-run with --commit-pin, or commit + push:`);
-    err(`      ${at} add ${toStage.map(q).join(' ')} &&${at} commit -m ${q(`pin @bongos/core ${toVersion}`)} && ${at} push ${q(remote)} ${q(target)}`);
+    err(`      ${at} add ${toStage.map(q).join(' ')} && ${at} commit -m ${q(`pin @bongos/core ${toVersion}`)} && ${at} push ${q(remote)} ${q(target)}`);
     return { applicable: true, committed: false, pushed: false, dirty, warned: true };
   }
 

package/src/module-api.js

@@ -71,7 +71,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.750'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.751'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/upgrade_persist_pin.mjs

@@ -312,7 +312,7 @@ test('without --commit-pin, the paste-ready fix stages the changed generated fil
   const run = fakeRun({ status: statusOf([...PIN_FILES, 'docs/api/openapi.json']), 'rev-parse': ON_MAIN });
   persistPin({ ...base, commitPin: false, artifactPaths: ARTIFACTS }, run, quiet, (m) => warnings.push(m));
   const cmd = warnings.find((w) => w.includes('git -C'));
-  assert.match(cmd, /add 'package\.json' 'package-lock\.json' 'docs\/api\/openapi\.json' &&/);
+  assert.match(cmd, /add 'package\.json' 'package-lock\.json' 'docs\/api\/openapi\.json' && git -C \S+ commit -m .+ && git -C \S+ push /);
 });
 
 // Real git, no fakes: the task's done-when, reproduced on a scratch repo.