@bongos/core 1.19.94 → 1.19.95

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.94",
-  "core_contract": "1.19.94",
-  "source_commit": "0cb9335f414dd38da9513afb83d4f586487afc56",
+  "core_version": "1.19.95",
+  "core_contract": "1.19.95",
+  "source_commit": "e6e718ed6edb6fc01565339760fd0fd14cffa2fc",
   "source_ref": "HEAD",
-  "built_at": "2026-08-13T20:44:31.359Z",
+  "built_at": "2026-08-13T21:44:20.853Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 298,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 1549,
-  "tree_sha256": "e78f55085c024125bc8e59fdd5107848d77da545252bded46be5fe7b9efba9b0",
+  "tree_sha256": "cb89e58c1034e1681a97ac75f367935e745215ceb83b1aa393639904a0d861db",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -1227,7 +1227,7 @@
     {
       "path": "docs/adr/0152-landing-gate-served-by-the-core-app.md",
       "mode": "0000644",
-      "sha256": "fab7be360b4c2cf74cf4e86599af5a0574716bb3df619514afda36e904305f4e"
+      "sha256": "b7375d8e9367b348a0f085df14ca719a26dafb67029f0cbe0218ad30efef7743"
     },
     {
       "path": "docs/adr/0152-metic-task-abandonment.md",
@@ -4127,12 +4127,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "3af0b7170f8713fa3e96f762befe3cd02188e8b41baa412e8d093713f8676da2"
+      "sha256": "0ebfc1c5594ff344281bfc92013bb8cf8f871c7f02152c91ae847cde36f2de3d"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "9b931ac6c7b39d940c6d2aeed6d9b7ffa4896bc7023dcbb5823225b537021c1e"
+      "sha256": "b192fbde61e9428fff6a9b7077f341abe1f6d930e009496b93c6fb44eca2a45c"
     },
     {
       "path": "public-docs/index.html",
@@ -5702,7 +5702,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "6fedde140c003b0ac3e1514bf4b3330fb6b1332a60ee6e135007b90603953305"
+      "sha256": "401742f230ab25aa8dbb410a1b8bf1bfbe02257a360362fa7488f3965a88c5ca"
     },
     {
       "path": "src/module-loader/loader.js",

package/docs/adr/0152-landing-gate-served-by-the-core-app.md

@@ -1,6 +1,6 @@
 # 0152 — The landing gate is served by the core app, not by the front proxy
 
-- **Status:** Accepted
+- **Status:** Accepted — *amended 2026-08-13 at launch, see [§Amendment](#<redacted>)*
 - **Date:** 2026-07-27
 - **Deciders:** Lars (owner / Archon), Claude
 - **Track:** `internal` (platform serving / instance infra)
@@ -54,6 +54,19 @@ example.com, www.example.com {
 }
 ```
 
+### Amendment — 2026-08-13: the lock and the apex `redir` come out at launch
+
+The block above carries a comment that was true when written and is **no longer true**: *"The app issues the same 302, so this line stays correct after the lock is removed."* The gate-navigation work ([#1002743](https://example.com/builders#/task/1002743)) retired the entry ritual — `/gate/` is gone, `GET /` on the apex now serves the landing page directly (200, not a 302), and the projects hub at `/projects` became the signed-in front door. So at launch, `redir / /gate/ 302` does not "stay correct": it points the apex at a path the app now 404s.
+
+**The launch edit is therefore a delete of the whole `@gate` block, not just its `basic_auth`.** Both the lock *and* the `redir` come out together, and every path the matcher covered (`/`, `/gate`, `/gate/*`, `/world/*`) falls through to the catch-all — which is byte-identical in its proxy config, so the only behavioural deltas are "no password" and "no apex redirect". Performed on the reference instance 2026-08-13 ([#1002768](https://example.com/builders#/task/1002768), closing blocker [#1000111](https://example.com/builders#/blocker/1000111)).
+
+Two things about §Decision survive the amendment intact, and they are why the edit was a one-block delete rather than a re-plumb:
+
+- **The `@hidden` guard is independent.** It is matched *above* the gate block, so removing the gate does not widen exposure — `*.md`/`*.json`/`*.py` and the `proof`/`refs`/`references` paths still `respond 404`.
+- **"Lifting the lock is a one-block delete, not a re-plumb"** — the load-bearing claim of §Decision — held exactly as designed. What changed is only its *scope*: the delete takes the `redir` with it.
+
+Generalised for any instance: the pre-launch lock and the apex redirect are **one removable unit**, and an instance that has retired its gate must drop both at once. Leaving the `redir` behind after the app stops serving `/gate/` sends every apex visitor to a 404 — the exact failure this amendment records.
+
 Three consequences follow, and they are the actual decision:
 
 **1. There is no separate Caddy config to "give" the landing.** The block above is the *generic* instance block — the same pure-proxy shape `provision.js`'s `caddyBlock()` already writes for every provisioned instance ([ADR 0111](<redacted>.md) §4). The landing stopped being a special case in the proxy the moment the app could serve it. Host-specific values (hostnames, cert paths, whether a lock exists) stay on the host, per [ADR 0062](<redacted>.md) §7 — the core ships the *shape*, not an instance's hostnames.

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.94",
+  "version": "1.19.95",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.94",
+      "version": "1.19.95",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.94",
+  "version": "1.19.95",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/src/module-api.js

@@ -615,8 +615,10 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 //         landed since 1.19.92 with no explicit bump. run 31735192921. (task 1002620)
 //   1.19.94 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
 //         landed since 1.19.93 with no explicit bump. run 31742308532. (task 1002620)
+//   1.19.95 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.94 with no explicit bump. run 31746921919. (task 1002620)
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.94'; // CI auto-patch carrier (ADR 0161); see changelog above
+const CORE_VERSION = '1.19.95'; // CI auto-patch carrier (ADR 0161); see changelog above
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');