@bongos/core 1.19.892 → 1.19.893

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.892",
-  "core_contract": "1.19.892",
-  "source_commit": "10a12417f89994d74e98a3d69ffb32e6c923fcc1",
+  "core_version": "1.19.893",
+  "core_contract": "1.19.893",
+  "source_commit": "99f7250a5cc9e39e16d1869281d1fd2660a466ad",
   "source_ref": "HEAD",
-  "built_at": "2026-09-19T21:54:33.560Z",
+  "built_at": "2026-09-19T22:26:15.995Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 498,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 2796,
-  "tree_sha256": "3a0ce12eaade900074c0776354d30caac78be604f0107b72a537da133fbfc114",
+  "tree_sha256": "1ffd95b16bdf5a9986639f6ea5452817996a270f6274f1195d3330fc915fe900",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -2612,7 +2612,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "9f273320150c23f11a8fae0c8f807ea57a78e35fcee9dde0bd945881fadd6889"
+      "sha256": "adada9ba37f56cd06bbb497540a86710002658b4160a9c0e31f5a3ae36fb1ddb"
     },
     {
       "path": "docs/modules-contract.md",
@@ -4377,7 +4377,7 @@
     {
       "path": "modules/government/protected-surfaces.json",
       "mode": "0000644",
-      "sha256": "aba8a8b1ce22708f5a7c05a64cbb4d1a08db295339a09df3c50a91f2735c1d47"
+      "sha256": "3c70a4abe22d8720a57da14e1f6dbc659cc57b066c1c811c8130f20d6d586e20"
     },
     {
       "path": "modules/government/ranks.js",
@@ -7712,12 +7712,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "3ef1a7c4eafee4e9e92df1e0c1389acf252ff0d0f32689718cf81ee4c46ec04b"
+      "sha256": "4439b27f55c654d0758f704b1225fb25509949f048e9292b5c54af9c047c59a2"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "52b00c86bbde5eb29b9637f15988898313b2e5318ba50d83c30fff24a699021d"
+      "sha256": "3c2e6c91f071304b4464dfa845786eb5037631d1dff4cdad6c9560201dfc9bb6"
     },
     {
       "path": "public-docs/index.html",
@@ -9722,7 +9722,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "c0c018df9a35a17f31c17c566ded5bb5878c5c1189f62cd20ad1ea3e3e43d612"
+      "sha256": "f5e01142842ee5a6d8c2cb8870eb8bd41e9de63d4e3621a07a69fc2c095597c7"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -9897,7 +9897,7 @@
     {
       "path": "tests/agents_sync.mjs",
       "mode": "0000644",
-      "sha256": "f7f6d88fd31a2eb1a81678d883706d2716e6a2ae20159599d3dbe7ed4c267f2e"
+      "sha256": "2e161bf9ef98425974d8295c8227688cd6fde55314fb3b9413df55542d5a109a"
     },
     {
       "path": "tests/agents_validate.mjs",
@@ -11402,7 +11402,7 @@
     {
       "path": "tests/government_protected_surfaces.mjs",
       "mode": "0000644",
-      "sha256": "c3c72c3a2cf970222c80051787df7fd7d155b5abd2f80b797a6a58bf5e95e0eb"
+      "sha256": "fd0cca1a62b8c2ab3bd556aabf4f6949bb6affb66c2fb1fd6258bccfffebc744"
     },
     {
       "path": "tests/government_rank_sync.mjs",
@@ -12202,7 +12202,7 @@
     {
       "path": "tests/module-scope-map.mjs",
       "mode": "0000644",
-      "sha256": "e277e0579dd6c8fea459cc5a3b4adf04dda12c95e69a415eeea5cfd2de52d760"
+      "sha256": "d55b193ee9dcba85a9d51f108352de17f453dfb413b9b391028c9d8f7ff7fab0"
     },
     {
       "path": "tests/module_api.mjs",

package/docs/module-api-changelog.md

@@ -2258,5 +2258,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.890 with no explicit bump. run 35471575521. (task 1002620)
   1.19.892 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.891 with no explicit bump. run 35471773244. (task 1002620)
+  1.19.893 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.892 with no explicit bump. run 35473299957. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/government/protected-surfaces.json

@@ -90,6 +90,11 @@
     { "glob": "CLAUDE.md", "group": "docs", "why": "the methodology core" },
     { "glob": ".claude/hooks/", "group": "automation", "why": "local automation that could weaken a gate" },
     { "glob": ".claude/settings.json", "group": "automation", "why": "local automation that could weaken a gate" },
-    { "glob": "config/scheduled-routines.json", "group": "automation", "why": "task 1002500. The ROUTINE SWITCHBOARD: per routine it decides enabled, cadence and requiresAutonomy — so an edit here can arm overnight-builder (autonomous claim+ship) or silence main-audit, the post-merge trust-boundary backstop ADR 0043 relies on. Sibling of .claude/hooks/ and .claude/settings.json above: the routine BODIES under .claude/scheduled-tasks/ are the autonomy module's source surface and stay unprotected, because protectedness derives per module and walling them is a separate policy decision (the .claude/agents/ precedent recorded in tests/government_protected_surfaces.mjs). This file is kernel-owned territory (module-scope-map's kernel key carries 'config/'), which is already protected, so registering it widens no module wall. The set is computed, not listed: the routine-switch tripwire in tests/government_protected_surfaces.mjs re-detects every config/*.json declaring routine switches and reds if one is unregistered." }
+    { "glob": "config/scheduled-routines.json", "group": "automation", "why": "task 1002500. The ROUTINE SWITCHBOARD: per routine it decides enabled, cadence and requiresAutonomy — so an edit here can arm overnight-builder (autonomous claim+ship) or silence main-audit, the post-merge trust-boundary backstop ADR 0043 relies on. Sibling of .claude/hooks/ and .claude/settings.json above: the routine BODIES under .claude/scheduled-tasks/ are the autonomy module's source surface and stay unprotected, because protectedness derives per module and walling them is a separate policy decision (the .claude/agents/ precedent recorded in tests/government_protected_surfaces.mjs). This file is kernel-owned territory (module-scope-map's kernel key carries 'config/'), which is already protected, so registering it widens no module wall. The set is computed, not listed: the routine-switch tripwire in tests/government_protected_surfaces.mjs re-detects every config/*.json declaring routine switches and reds if one is unregistered." },
+  {
+      "glob": "modules/agents/",
+      "group": "automation",
+      "why": "task 1004006, owner decision 2026-09-19. Who may EDIT the agents module. This is the policy decision the note at the head of tests/government_protected_surfaces.mjs reserved when task 1002492 backed out '.claude/agents/' — not a scope fix and not a side effect. The module fires subagents unattended and SPENDS REAL MONEY doing it (~$0.90 a fire, a per-agent monthly ceiling in agents_004, folded into the global MTD autonomy brake), so editing what may fire and what it may cost is Metic work. The 1002492 note's stated cost was that it walls goals 1000038/39/40; all three are ARCHIVED and re-derived on 2026-09-19 there are ZERO live goals scoped to agents. Of the nine live tasks in the module six already require Metic; the three that did not are the agent secret-file permission rule, the run-ledger column allowlist and the model-provider port — security and spend surfaces that ADR 0043 already keeps sub-Metic builders out of in spirit. Protectedness is DERIVED PER MODULE (module-scope-map isProtected -> touchesOverlap), so this one glob is what flips the whole module, which is the intent here rather than the accident it was in 1002492."
+  }
   ]
 }

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.892",
+  "version": "1.19.893",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.892",
+      "version": "1.19.893",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.892",
+  "version": "1.19.893",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/src/module-api.js

@@ -71,7 +71,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.892'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.893'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/agents_sync.mjs

@@ -328,7 +328,20 @@ t('the wall is wired to the REAL protected-surface registry', () => {
   assert.equal(realMatcher('modules/government/catalog.js'), true, 'the authority surface');
   assert.equal(realMatcher('migrations/001_init.sql'), true, 'schema');
   assert.equal(realMatcher('.claude/hooks/pre-push.js'), true, 'local automation');
-  assert.equal(realMatcher('modules/agents/lib/validate.js'), false, "a module's own code is not protected");
+  // A module's own code is not protected BY DEFAULT — the contrast case that
+  // proves this wall discriminates rather than blanketing everything.
+  //
+  // This used to cite modules/agents/lib/validate.js, which stopped being a
+  // valid example on 2026-09-19 when task 1004006 walled the agents module at
+  // Metic on the owner's decision. The case still needs an unprotected module
+  // file; modules/ideas/ is one, and the assertion below re-states WHY it is the
+  // example rather than leaving the next reader to rediscover that the old one
+  // turned. (A fixture chosen because it is negative can become positive, and
+  // the test then looks untouched by the change that broke it.)
+  assert.equal(realMatcher('modules/ideas/routing.js'), false, "a module's own code is not protected by default");
+  assert.equal(realMatcher('modules/agents/lib/validate.js'), true,
+    'the agents module IS protected since task 1004006 — deliberately, and it is '
+    + 'no longer usable as the unprotected example above');
   // `.claude/agents/` itself is deliberately NOT in the registry — see the note
   // on ADDED_SINCE_R101 in tests/government_protected_surfaces.mjs. Protecting
   // it would rank-wall the whole agents module by derivation, which is a
@@ -358,8 +371,10 @@ t('a path scope onto the authority surface is withheld a rank AND flagged', () =
 t('an unprotected path scope still reconciles normally', () => {
   // The wall is a floor, not a ban — a tightening that refused every path scope
   // would pass the test above and break the feature.
+  // modules/ideas/ rather than modules/agents/lib/ — the latter became a
+  // PROTECTED path in task 1004006, so it can no longer stand for "unprotected".
   const d = sync.parseAgentFile(
-    '---\nname: reader\ntrigger: on-demand\nscope_paths: [modules/agents/lib/]\n---\nbody', {});
+    '---\nname: reader\ntrigger: on-demand\nscope_paths: [modules/ideas/]\n---\nbody', {});
   assert.equal(sync.declaresProtectedScope(d, [], realMatcher), false);
   const p = sync.planOne(d, {
     authorRank: 'metic', allowedModules: ['agents'], isProtectedPath: realMatcher,

package/tests/government_protected_surfaces.mjs

@@ -240,6 +240,29 @@ const ADDED_SINCE_R101 = [
        + 'edit which slipped past the pre-push hook and the grader — the one ADR 0043 '
        + 'layer that does not depend on the builder cooperating.',
   },
+  // task 1004006, owner decision 2026-09-19. THE POLICY DECISION the note at the head of
+  // this file reserved when task 1002492 backed out `.claude/agents/`: who may EDIT the
+  // agents module. Landed deliberately, as that note required — the entry here, the
+  // publish-manifest check (already satisfied: modules/agents/ is on PUBLISH_ALLOWLIST,
+  // verified rather than assumed), and the switchboard tripwire below re-aimed rather
+  // than deleted.
+  //
+  // The note's stated cost was that it walls goals 1000038/39/40. All three are ARCHIVED,
+  // and re-derived on 2026-09-19 there are ZERO live goals scoped to agents — so that
+  // specific cost is gone, which is exactly why the note said to re-derive rather than
+  // trust it. What replaced it: the module now spends real money unattended (~$0.90 a
+  // fire, per-agent monthly ceiling in agents_004, folded into the global MTD brake).
+  {
+    after: 'config/scheduled-routines.json',
+    glob: 'modules/agents/',
+    why: 'the module that fires subagents unattended and SPENDS to do it. Editing what '
+       + 'may fire, and what it may cost, is Metic work. Of the nine live tasks in the '
+       + 'module six already required Metic; the three that did not are the agent '
+       + 'secret-file permission rule, the run-ledger column allowlist and the '
+       + 'model-provider port — security and spend surfaces ADR 0043 already keeps '
+       + 'sub-Metic builders out of in spirit, so the real cost of this entry is three '
+       + 'tasks that arguably should not have been open.',
+  },
 ];
 
 // Surfaces RENAMED since R101 — still protected, under a new path. Distinct from
@@ -731,11 +754,34 @@ test('registering the switchboard widened no module wall', () => {
   assert.ok(protectedNow.includes('kernel'),
     'kernel owns config/ and was already protected before this entry; if it is not, the '
     + 'premise that registering a config/ file widens nothing has changed.');
-  assert.ok(!protectedNow.includes('agents'),
-    'the agents module derived protected:true — a routine entry reached modules/agents/ '
-    + 'or .claude/agents/, which rank-walls every goal scoped to it. Protect the '
-    + 'SWITCHBOARD, not the agent or routine sources; walling that module is the separate '
-    + 'policy decision recorded for .claude/agents/ at the head of this file.');
+  // task 1004006 RE-AIMED THIS, and did not delete it. The assertion used to be
+  // `!includes('agents')`, and its job was never "agents must stay open" — it was "the
+  // SWITCHBOARD entry must not have reached the agents module as a side effect". That job
+  // still exists; agents is now protected for its OWN declared reason (the owner's
+  // 2026-09-19 decision), which is the separate policy act the old message pointed at.
+  //
+  // So the check becomes: agents is protected, and it is protected BY ITS OWN GLOB. If
+  // the switchboard entry — or any future config/ entry — were what reached the module,
+  // surfaceFor would name that file instead, and this still fails.
+  assert.ok(protectedNow.includes('agents'),
+    'the agents module is no longer protected — task 1004006 registered modules/agents/ '
+    + 'on the owner\'s decision (the module fires subagents unattended and spends to do '
+    + 'it). If the entry was removed, that is a policy reversal and belongs in the note '
+    + 'at the head of this file, not a silent deletion.');
+  const agentsSurface = ppc.surfaceFor('modules/agents/lib/validate.js');
+  assert.equal(agentsSurface && agentsSurface.glob, 'modules/agents/',
+    'the agents module is protected by SOMETHING OTHER than its own glob — a config/ or '
+    + 'switchboard entry has widened into it, which is the second-order effect this test '
+    + 'exists to catch. The deliberate entry and an accidental one look identical in '
+    + 'protectedModules(); only the matching glob tells them apart.');
+  // 1002492's rejection still stands: the module SOURCE is walled, agent DEFINITION files
+  // are not. Walling those was a scope fix that the scope_paths wall in
+  // modules/agents/lib/validate.js already does properly, and it is not what 1004006
+  // decided.
+  assert.ok(!ppc.surfaceFor('.claude/agents/historian.md'),
+    '.claude/agents/ became protected — task 1002492 considered and rejected that, and '
+    + 'task 1004006 walled the module SOURCE without reopening it. An agent definition '
+    + 'is scoped by validate.js, not by a rank floor on the file.');
   assert.ok(ppc.surfaceFor('scripts/gds/conductor-dispatch.js'),
     'the autonomy module was protected through conductor-dispatch.js before this entry. '
     + 'If that glob is gone, re-derive which modules this registry walls before trusting '

package/tests/module-scope-map.mjs

@@ -145,8 +145,16 @@ test('agents joined the roster (task 1002736) — the territory goals 1000038/39
   const globs = scope.globsForModules(['agents']);
   assert.ok(globs.includes('modules/agents/'), 'agents owns its module directory');
   assert.ok(globs.includes('.claude/agents/'), 'the committed definitions are the module source surface');
-  // Derived, not hand-set: none of the agents globs appear in PROTECTED_GLOBS.
-  assert.equal(scope.isProtectedModule('agents'), false);
+  // Derived, not hand-set. This flipped to TRUE in task 1004006, when the owner
+  // walled the module at Metic (2026-09-19): modules/agents/ is now a registered
+  // protected surface because the module fires subagents unattended and spends
+  // real money doing it. The assertion below is the point of this pair and is
+  // UNCHANGED — `protected` must still be the faithful derivation rather than a
+  // literal, which is what would break if someone hand-set the flag to match.
+  assert.equal(scope.isProtectedModule('agents'), true,
+    'the agents module lost its Metic floor — task 1004006 registered modules/agents/ '
+    + 'on the owner\'s decision. A reversal is a policy act and belongs in the note at '
+    + 'the head of tests/government_protected_surfaces.mjs.');
   assert.equal(
     scope.scopeForModule('agents').protected,
     scope.isProtected(globs),