@bongos/core 1.19.767 → 1.19.768

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.767",
-  "core_contract": "1.19.767",
-  "source_commit": "eb349d772c37baba9353ce3d7e4fb60ee0c50120",
+  "core_version": "1.19.768",
+  "core_contract": "1.19.768",
+  "source_commit": "ec2107bdda1e0c2ee8404d14e539b83a836f767d",
   "source_ref": "HEAD",
-  "built_at": "2026-09-16T14:32:00.184Z",
+  "built_at": "2026-09-16T14:46:45.582Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 483,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 2631,
-  "tree_sha256": "a176823f439c4744fa68e223d9a6c892eae966f0584eca0fc53b785e65a80bf1",
+  "tree_sha256": "9d2871bffc966902b2a18d7c59fc92a2e5ea137e0bee5675716ca3fbee9e01ef",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -2512,7 +2512,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "758ba4125664158bbbbedce4610178b629d74da7b8defb902caa63750be147f2"
+      "sha256": "5c95283ebfac1200dcabcba2fa712b6b041be345412b92cd1f896e3648d9ecd0"
     },
     {
       "path": "docs/modules-contract.md",
@@ -7577,12 +7577,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "c20cc0b8296799714beb07358a69f4c0c520adcbe121dfe53899cf5ee5dca0b6"
+      "sha256": "4f7ef5cc202176fb1c83a20baea17017b6adb0892051832a4bd6a440d57f1fcc"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "734c747e81d3c512988159903a57a4ce901b67c353ea77fe7e253f4814cab10a"
+      "sha256": "ee2355bc92153c9c139cf79e19f22b80dda73a5a2abdd102b67830cb3bee0d14"
     },
     {
       "path": "public-docs/index.html",
@@ -8442,7 +8442,7 @@
     {
       "path": "scripts/gds/provision.js",
       "mode": "0000644",
-      "sha256": "87a9abe0f4744a0b3a3b5cc2e326ff2adb8cba3e559228cca0798e40feaee8f6"
+      "sha256": "bf403052607f7cce560633fc11d03f51ecf1e9fc1d32e4d6c601c6406787a143"
     },
     {
       "path": "scripts/gds/publish-credential-check.js",
@@ -9402,7 +9402,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "9be4adbc202e2c681d8a2ebba85d6ce541cd8a75d10a8802e1042b43e75f50c0"
+      "sha256": "163989f8fd93a919241ac12e7627303618fc6d2d47b75f79e1b6fb875874a534"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -12062,7 +12062,7 @@
     {
       "path": "tests/provision.mjs",
       "mode": "0000644",
-      "sha256": "245deb7b090f528180dde1457b821a8c8c2bd74a643524f441519859659643e8"
+      "sha256": "5f7ec2483f8564dc9561f0becdfc36166bca5021b7f964db6d6e40d62108e041"
     },
     {
       "path": "tests/provision_restart.mjs",

package/docs/module-api-changelog.md

@@ -2008,5 +2008,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.765 with no explicit bump. run 35104246900. (task 1002620)
   1.19.767 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.766 with no explicit bump. run 35109111074. (task 1002620)
+  1.19.768 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.767 with no explicit bump. run 35110800163. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.767",
+  "version": "1.19.768",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.767",
+      "version": "1.19.768",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.767",
+  "version": "1.19.768",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/scripts/gds/provision.js

@@ -1033,12 +1033,11 @@ async function teardownInstance(inst, deps) {
   if (inst.hosting_shape !== 'dedicated') {
     boxExec(`${sudoP}systemctl disable --now ${inst.slug}`, { allowFail: true });
     boxExec(`${sudoP}rm -f ${serviceUnitPath(inst)}`, { allowFail: true });
-    // Stop + remove the nightly backup units too (task 2213). The backup DIR + its
-    // dumps are left in place — like the DB below, they are precious data a teardown
-    // must not silently destroy.
+    // Stop + remove the nightly backup units too (task 2213; the dir + dumps stay — precious data, like the DB below), then reset-failed (task 1003940): a removed unit's FAILED state outlives its file, so `systemctl --failed` listed torn-down ghosts for weeks.
     boxExec(`${sudoP}systemctl disable --now ${backupUnitName(inst)}.timer`, { allowFail: true });
     boxExec(`${sudoP}rm -f ${backupServicePath(inst)} ${backupTimerPath(inst)}`, { allowFail: true });
     boxExec(`${sudoP}systemctl daemon-reload`, { allowFail: true });
+    boxExec(`${sudoP}systemctl reset-failed ${inst.slug}.service ${backupUnitName(inst)}.service`, { allowFail: true });
     // Left for an operator (data is precious), naming ONLY what this row created —
     // teardown now takes 'requested'/'error'. `port` + `domain` stay held: ADR 0181.
     const dumps = inst.db_name ? [`dropdb ${dbName(inst)}`, `prune ${CONFIG.backupDir}/${dbName(inst)}-*.sql.gz`] : [];

package/src/module-api.js

@@ -71,7 +71,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.767'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.768'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/provision.mjs

@@ -1485,6 +1485,18 @@ await ta('teardownInstance(privileged): systemctl + rm-under-/etc are sudo-prefi
   // task 2213: the backup units come down too (the dumps + dir are left in place)
   assert.match(joined, /sudo systemctl disable --now mercury-db-backup\.timer/);
   assert.match(joined, /sudo rm -f \/etc\/systemd\/system\/mercury-db-backup\.service \/etc\/systemd\/system\/mercury-db-backup\.timer/);
+  // task 1003940: a removed unit's FAILED state outlives its file — clear it, AFTER the rm + reload,
+  // for both the instance unit and its backup unit (the two ghosts task 1003930 found on the box).
+  assert.match(joined, /sudo systemctl reset-failed mercury\.service mercury-db-backup\.service/);
+  const idx = (re) => cmds.findIndex((c) => re.test(c));
+  assert.ok(idx(/rm -f .*mercury-db-backup\.service/) < idx(/daemon-reload/), 'rm before reload');
+  assert.ok(idx(/daemon-reload/) < idx(/reset-failed/), 'reset-failed after the reload that forgets the file — reset first and the stopped unit could fail again');
+});
+
+await ta('teardownInstance(dedicated): no systemd steps at all, so no reset-failed either (its own droplet)', async () => {
+  const { deps, cmds } = recorder();
+  await P.teardownInstance({ ...coTenant, hosting_shape: 'dedicated', droplet_id: 9 }, deps);
+  assert.ok(!cmds.some((c) => /reset-failed|daemon-reload|disable --now/.test(c)), cmds.join(' | '));
 });
 
 await ta('teardownInstance(default): NO sudo (bare, unchanged)', async () => {