@bongos/core 1.19.825 → 1.19.826

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.825",
-  "core_contract": "1.19.825",
-  "source_commit": "cb729764661db914505acde16e83bf6db16e47fb",
+  "core_version": "1.19.826",
+  "core_contract": "1.19.826",
+  "source_commit": "9871f72043eb86daa58427159fe170b869c6f8b9",
   "source_ref": "HEAD",
-  "built_at": "2026-09-17T13:27:19.562Z",
+  "built_at": "2026-09-17T13:41:33.888Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 491,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 2751,
-  "tree_sha256": "d080ea1d5501cd02f6af8cde89d25b58442a1abf7d282379bbf683df5b00ee33",
+  "tree_sha256": "32197a053d73c55f5800a78d0d66c04463154f6439996ac03cd6079f1e5ca82c",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -2552,7 +2552,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "bc4fb1f646f00a5ac5870be4468a5bcb94c1bc19d6c69eea48c54d63f5d0eb70"
+      "sha256": "819da3ee2c3e79b97d42df736f3bd9af57baffa1d21234532b611acf42a878ac"
     },
     {
       "path": "docs/modules-contract.md",
@@ -4867,7 +4867,7 @@
     {
       "path": "modules/hall-ui/public/goal-inbox.js",
       "mode": "0000644",
-      "sha256": "0e6aacc6e720d1865c45f71b2458f23c5bac8f1643082256f4d7e71d97078994"
+      "sha256": "86aefc97c267f860c931ec000ace7a0a4a4e7e56796891eb5c3fed893446dae5"
     },
     {
       "path": "modules/hall-ui/public/goals-lib.js",
@@ -7817,12 +7817,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "2a7a81e9c97e32cc83b22d74eef060a6829d4e6847dfabaa9a851ebff576b151"
+      "sha256": "639ff75dd31684341558f62220e1a7d358484ab8f994ebe9cc036335f2c7e5bb"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "67e42f1c6c167a0857846b43f877395adc67ce48ae72c31cc4709240906e6432"
+      "sha256": "3f63f0df3e2a39105a2d73c03f418e48b72b303d0aa3d2acd3f34ea8a81c738c"
     },
     {
       "path": "public-docs/index.html",
@@ -8752,7 +8752,7 @@
     {
       "path": "scripts/gds/provision.js",
       "mode": "0000644",
-      "sha256": "b81947c37dccac487771865a699ab0a581b75b1991e0e76b07ce2a1877db414c"
+      "sha256": "d5a8fdc3b79685826c52c9092a6b512c556f0f992c4fc799f5a8e60012f296ab"
     },
     {
       "path": "scripts/gds/publish-credential-check.js",
@@ -9742,7 +9742,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "8f04e8b51652109c0e95424fbc9801ed170b2bc899f91793ac827152e653c07a"
+      "sha256": "204763d74db8bd35283f77922256bafe1885e1d173b36a730053190f6110501d"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -12527,7 +12527,7 @@
     {
       "path": "tests/provision.mjs",
       "mode": "0000644",
-      "sha256": "42fe144a388efe2f5da6068082138f96a18fb8bd209d9babb5b074b0311e8459"
+      "sha256": "1c580b0f1ebd7eca67e7a603c5e10fe2a987e75f60de514dfaf9ac8aff826a12"
     },
     {
       "path": "tests/provision_disconnect.mjs",
@@ -12837,7 +12837,7 @@
     {
       "path": "tests/rot_inbox.mjs",
       "mode": "0000644",
-      "sha256": "48f53c806042de1886e9aed96b41ff7070bb91b93790cdd3c0c7f0a08be4cf1c"
+      "sha256": "382ddf61536d7fb738d99127cee03fa06df8ca79e53f876f702676189d900a67"
     },
     {
       "path": "tests/route_permission_check.mjs",

package/docs/module-api-changelog.md

@@ -2123,6 +2123,8 @@ is load-bearing: the script throws rather than guess if it is missing, and
   1.19.824 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.823 with no explicit bump. run 35220051893. (task 1002620)
   1.19.825 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
-        landed since 1.19.824 with no explicit bump. run 35227106979. (task 1002620)
+        landed since 1.19.824 with no explicit bump. run 35227529838. (task 1002620)
+  1.19.826 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.825 with no explicit bump. run 35228618989. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/hall-ui/public/goal-inbox.js

@@ -242,12 +242,12 @@
     const who = r.filed_by_login ? ` · filed by ${escapeHtml(r.filed_by_login)}` : '';
     const goal = r.goal_title ? escapeHtml(r.goal_title) : `goal ${escapeHtml(String(r.goal_id))}`;
     return `<li class="ginbox__item" data-goal="${escapeHtml(String(r.goal_id))}">
-        <div class="ginbox__main">
+        <div class="ginbox__body">
           <a class="ginbox__goal" href="/task/${encodeURIComponent(r.task_id)}">${title}</a>
           <span class="ginbox__sub">${goal}${who}</span>
         </div>
         ${kind}
-        <div class="ginbox__acts">
+        <div class="ginbox__actions">
           <button class="btn-ghost" type="button" data-nod-task="${escapeHtml(String(r.task_id))}">Give the nod</button>
         </div>
       </li>`;
@@ -322,11 +322,11 @@
         + ` title="${escapeHtml(String(v.hint || ''))}">${escapeHtml(String(v.label || v.verb || '?'))}</button>`;
     }).join('');
     return `<li class="ginbox__item" data-rot-tier="${escapeHtml(String(r.tier))}">
-        <div class="ginbox__main">
+        <div class="ginbox__body">
           <a class="ginbox__goal" href="${href}">${escapeHtml(r.title || `${r.tier} #${r.id}`)}</a>
           <span class="ginbox__sub">${escapeHtml(String(r.status || ''))} · ${where} · ${escapeHtml(untouchedFor(r.last_touched_at))}${again}</span>
         </div>
-        <div class="ginbox__acts">${buttons}</div>
+        <div class="ginbox__actions">${buttons}</div>
       </li>`;
   }
 

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.825",
+  "version": "1.19.826",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.825",
+      "version": "1.19.826",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.825",
+  "version": "1.19.826",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/scripts/gds/provision.js

@@ -659,6 +659,20 @@ async function releaseAbandonedDomains(inst, { controlExec, log, apply, db, prov
   }
   let firstFailed = null;
   for (const host of hosts) {
+    // task 1003954: the route frees a name once this row moves off it, so another
+    // project may have attached it since — parking it now would blackhole THAT
+    // project. A name we cannot check is kept for the next run, never parked on a guess.
+    let holder = null;
+    try { holder = provisioning.getInstanceByDomain ? await provisioning.getInstanceByDomain(db, host) : null; }
+    catch (e) {
+      log(`  ⚠ could not check who holds ${host}: ${(e && e.message) || e} — left for the next run`);
+      if (!firstFailed) firstFailed = host;
+      continue;
+    }
+    if (holder && String(holder.id) !== String(inst.id) && holder.status !== 'torn_down') {
+      log(`  [dns] leave ${host} alone — ${holder.slug} holds it now`);
+      continue;
+    }
     const relEnv = dnsReleaseEnv(host);
     log(`  [dns] release ${host} -> ${relEnv.BOX_IP} (blackhole, zone ${relEnv.CLOUDFLARE_ZONE}) via ${CONFIG.dnsHook}`);
     if (!apply) continue;

package/src/module-api.js

@@ -71,7 +71,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.825'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.826'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/provision.mjs

@@ -2010,6 +2010,48 @@ await ta('domainAttachInstance(--apply): a release the hook REFUSES keeps the qu
   } finally { P.CONFIG.publicIp = savedPub; P.CONFIG.dnsHook = savedHook; }
 });
 
+// task 1003954: the route frees a BYO name the moment its row moves off it, so
+// another project can attach it before this row's release drains.
+await ta('domainAttachInstance(--apply): an address ANOTHER live project now holds is never parked — and the queue still clears', async () => {
+  const savedPub = P.CONFIG.publicIp, savedHook = P.CONFIG.dnsHook;
+  P.CONFIG.publicIp = '203.0.113.5';
+  P.CONFIG.dnsHook = '/opt/infra/box-dns-cloudflare.sh';
+  try {
+    const { deps, cmds, envs, cleared } = attachRecorder({ apply: true });
+    const holders = {
+      'typo.example.com': { id: 42, slug: 'other', status: 'active' },
+      'gone.example.com': { id: 43, slug: 'retired', status: 'torn_down' },
+    };
+    deps.provisioning.getInstanceByDomain = async (_db, host) => holders[host] || null;
+    const r = await P.domainAttachInstance(
+      { ...activeStandalone, released_domains: ['TYPO.example.com', 'gone.example.com', 'free.example.com'] }, deps);
+    assert.equal(r.ok, true);
+    assert.equal(r.releaseFailed, undefined, 'a name someone else took is not a failed release');
+    const parked = cmds.map((c, i) => i)
+      .filter((i) => cmds[i] === '/opt/infra/box-dns-cloudflare.sh' && envs[i].BOX_IP === '192.0.2.1')
+      .map((i) => envs[i].BOX_HOSTNAME);
+    assert.deepEqual(parked, ['gone.example.com', 'free.example.com'],
+      "the live holder's address is left alone; a torn-down holder's and a free one are parked");
+    assert.deepEqual(cleared, [18], 'the queue clears — the skipped name is no longer this row\'s to release');
+  } finally { P.CONFIG.publicIp = savedPub; P.CONFIG.dnsHook = savedHook; }
+});
+
+await ta('domainAttachInstance(--apply): a holder lookup that FAILS parks nothing for that name and keeps the queue', async () => {
+  const savedPub = P.CONFIG.publicIp, savedHook = P.CONFIG.dnsHook;
+  P.CONFIG.publicIp = '203.0.113.5';
+  P.CONFIG.dnsHook = '/opt/infra/box-dns-cloudflare.sh';
+  try {
+    const { deps, cmds, envs, cleared } = attachRecorder({ apply: true });
+    deps.provisioning.getInstanceByDomain = async () => { throw new Error('connection reset'); };
+    const r = await P.domainAttachInstance({ ...activeStandalone, released_domains: ['typo.example.com'] }, deps);
+    assert.equal(r.ok, true, 'a failed release must never fail a re-point that already landed');
+    assert.equal(r.releaseFailed, 'typo.example.com');
+    assert.ok(!envs.some((e, i) => cmds[i] === '/opt/infra/box-dns-cloudflare.sh' && e.BOX_IP === '192.0.2.1'),
+      'an unknown holder is never blackholed on a guess');
+    assert.deepEqual(cleared, [], 'the queue survives, so the next run asks again');
+  } finally { P.CONFIG.publicIp = savedPub; P.CONFIG.dnsHook = savedHook; }
+});
+
 await ta('domainAttachInstance(--apply): no DNS hook → the release is named for the operator, and the queue is kept', async () => {
   const savedHook = P.CONFIG.dnsHook; P.CONFIG.dnsHook = '';
   try {

package/tests/rot_inbox.mjs

@@ -48,6 +48,7 @@ const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
 const MIGRATION_SRC = readFileSync(join(ROOT, 'migrations/core_231_project_settings_and_attention_water.sql'), 'utf8');
 const TASK_LIB_SRC = readFileSync(join(ROOT, 'modules/hall-ui/public/task-lib.js'), 'utf8');
 const GOAL_INBOX_SRC = readFileSync(join(ROOT, 'modules/hall-ui/public/goal-inbox.js'), 'utf8');
+const STYLE_SRC = readFileSync(join(ROOT, 'modules/hall-ui/public/style.css'), 'utf8');
 
 // ---- the recording fake pool ----------------------------------------------
 let queued = [];
@@ -602,6 +603,19 @@ test('the client renders SERVER-declared verbs rather than a hardcoded button li
   assert.match(GOAL_INBOX_SRC, /data-rot-path=/, 'each button carries the server-declared path');
 });
 
+test('row builders emit the CSS classes style.css actually defines, not ginbox__main/ginbox__acts (task 1003284)', () => {
+  assert.match(STYLE_SRC, /\.ginbox__body\s*\{/, 'style.css must define .ginbox__body');
+  assert.match(STYLE_SRC, /\.ginbox__actions\s*\{/, 'style.css must define .ginbox__actions');
+  assert.doesNotMatch(GOAL_INBOX_SRC, /ginbox__main\b/,
+    '.ginbox__main is undefined in style.css — with it the row title and sub-line run together inline instead of stacking');
+  assert.doesNotMatch(GOAL_INBOX_SRC, /ginbox__acts\b/,
+    '.ginbox__acts is undefined in style.css — with it the action button loses its flex sizing');
+  assert.match(GOAL_INBOX_SRC, /function nodRowHtml[\s\S]*?class="ginbox__body"[\s\S]*?class="ginbox__actions"/,
+    'nodRowHtml must emit the defined ginbox__body/ginbox__actions classes');
+  assert.match(GOAL_INBOX_SRC, /function rotRowHtml[\s\S]*?class="ginbox__body"[\s\S]*?class="ginbox__actions"/,
+    'rotRowHtml must emit the defined ginbox__body/ginbox__actions classes');
+});
+
 test('acting on a rot line refreshes the ROT slice, not the goals list', () => {
   assert.match(GOAL_INBOX_SRC, /ROT_TOASTS\[verb\] \|\| 'Done\.', loadRot\)/,
     'refreshing the wrong slice leaves the acted-on row sitting there — the task-1003066 lesson');