@bongos/core 1.19.95 → 1.19.96

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.95",
-  "core_contract": "1.19.95",
-  "source_commit": "e6e718ed6edb6fc01565339760fd0fd14cffa2fc",
+  "core_version": "1.19.96",
+  "core_contract": "1.19.96",
+  "source_commit": "de62c4bfbfbe46d6479fdfbfb97dc0873611c6a5",
   "source_ref": "HEAD",
-  "built_at": "2026-08-13T21:44:20.853Z",
+  "built_at": "2026-08-13T22:10:53.979Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 298,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 1549,
-  "tree_sha256": "cb89e58c1034e1681a97ac75f367935e745215ceb83b1aa393639904a0d861db",
+  "tree_sha256": "fc9aca20647400c8086abd620cf8832fdc20b5695b0dc56bb6cae9c303d41182",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -4127,12 +4127,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "0ebfc1c5594ff344281bfc92013bb8cf8f871c7f02152c91ae847cde36f2de3d"
+      "sha256": "5e745806419d6f06345f86548e6dab1997086a56087f87e06172fab999df9203"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "b192fbde61e9428fff6a9b7077f341abe1f6d930e009496b93c6fb44eca2a45c"
+      "sha256": "5f0a6df46c69e1584b8ed6a9023858fbb769114c5912dcb87448effd645fe6b4"
     },
     {
       "path": "public-docs/index.html",
@@ -4392,7 +4392,7 @@
     {
       "path": "public-landing/projects.html",
       "mode": "0000644",
-      "sha256": "6edf67839bd80ba22672ebfb9f5c38a2bbce980157024b50d71ce9bae211c8db"
+      "sha256": "a79a9a26b3e33b539d3731c3629a6e4302352f9e89559e42df6bf5801dd86ef6"
     },
     {
       "path": "public-landing/world/assets/clouds/cloud-island-large.png",
@@ -5702,7 +5702,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "401742f230ab25aa8dbb410a1b8bf1bfbe02257a360362fa7488f3965a88c5ca"
+      "sha256": "aae1ee2bdf9de2e173d26cfa7c1ad4af1b2f14e8be763903d70af840a08b1465"
     },
     {
       "path": "src/module-loader/loader.js",
@@ -7212,7 +7212,7 @@
     {
       "path": "tests/projects_hub.mjs",
       "mode": "0000644",
-      "sha256": "e3e3e3f8164da3f897166dca2b0502fac2519483b36282e91ef5645cfef6c18c"
+      "sha256": "59a6bcd44d374802b31e8ccf487b8fbbf6322d6bfac7f079d69f39d7bd8a02db"
     },
     {
       "path": "tests/provision.mjs",

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.95",
+  "version": "1.19.96",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.95",
+      "version": "1.19.96",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.95",
+  "version": "1.19.96",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/public-landing/projects.html

@@ -173,7 +173,24 @@ try{var _m=localStorage.getItem('cb-color-mode');if(_m==='light'||_m==='dark')do
           <th class="colGo"></th>
         </tr>
       </thead>
-      <tbody id="mapRows"></tbody>
+      <tbody id="mapRows">
+        <!-- The platform's own row. Static and apex-only for exactly the reason
+             the orb above is (stripApexOnly() is a string transform that cannot
+             reach anything a script renders later), and preserved across
+             re-renders by the same data-generated contract renderOrbs uses. -->
+        <!--apex-only:start-->
+        <tr id="selfRow">
+          <td class="colName"><span class="pname"><span class="pdot" style="--acc:var(--accent)"></span>
+            <span><span class="ptitle" data-brand-product-inline>Cloud Bongos</span><span id="selfPill"></span><br>
+            <span class="ptag">this platform</span></span></span></td>
+          <td class="right num">—</td>
+          <td class="colType">—</td>
+          <td class="colTags">—</td>
+          <td class="right colStatus"><span class="chip calm"><span class="cdot"></span>—</span></td>
+          <td class="colGo"><a class="btn small ghost" href="#" data-self-open>Open →</a></td>
+        </tr>
+        <!--apex-only:end-->
+      </tbody>
     </table>
     <p class="finePrint" style="text-align:center">Click a column to sort.</p>
   </div>
@@ -472,6 +489,13 @@ try{var _m=localStorage.getItem('cb-color-mode');if(_m==='light'||_m==='dark')do
   var ORB_GLOWS = ORB_ACCENTS.map(function (t) { return 'color-mix(in srgb,' + t + ' 45%,transparent)'; });
   var catalog = [];
   var mineOrigins = {};   /* normalized host → 'owner' | 'builder' */
+  /* What the platform's own entry is FOR SEARCH. It is deliberately not pushed
+     into `catalog`: the catalog is the federated directory of other instances,
+     and a synthetic member of it would flow into accent assignment, orb slots
+     and the sort comparator as if a row existed. This keeps the self entry a
+     view-level concern (the owner's call, 2026-08-13) while still letting the
+     search box match it by the same predicate every other project uses. */
+  var SELF_PROJECT = { name: productName, tagline: 'this platform' };
   var mapSort = { key: 'name', dir: 1 };
 
   /* Catalog origins become hrefs, so they are scheme-checked before they are
@@ -500,6 +524,23 @@ try{var _m=localStorage.getItem('cb-color-mode');if(_m==='light'||_m==='dark')do
   }
   function accentOf(p) { return p._acc || ORB_ACCENTS[0]; }
   function relOf(p) { return mineOrigins[hostOf(p.origin)] || 'none'; }
+  /* The platform's own relationship cannot come from mineOrigins, and not
+     because the data is merely missing: platform_identity_project_memberships
+     is written ONLY by the server-to-server check-in a FEDERATED instance posts
+     on sign-in (ADR 0141 §3), and the apex is not a federated client of itself
+     — reportMembershipCheckIn() returns early on the instance that IS the hub,
+     so no amount of signing in here will ever produce a row. Waiting on that
+     table for this one project waits forever.
+
+     The local session is the authority instead, and it is a stronger one: a
+     session on this instance EXISTS because sign-in created a builder row here,
+     so "signed in here" IS "builder here" — not a guess standing in for one.
+     Archon is the instance's owner. Signed out stays 'none' so a stranger's map
+     claims nothing. Membership stays the cross-instance federated view. */
+  function selfRel() {
+    if (!me) return 'none';
+    return me.rank === 'archon' ? 'owner' : 'builder';
+  }
   function matchesMapQuery(p, q) {
     if (!q) return true;
     return (String(p.name || '') + ' ' + String(p.tagline || '')).toLowerCase().indexOf(q) !== -1;
@@ -534,11 +575,17 @@ try{var _m=localStorage.getItem('cb-color-mode');if(_m==='light'||_m==='dark')do
   }
 
   function renderRows(list) {
-    $('mapRows').innerHTML = list.map(function (p) {
+    var body = $('mapRows');
+    /* replace only the generated rows — the platform's own row is static
+       apex-only markup and must survive every re-render, for the same reason
+       #selfOrb does in the sky. It stays pinned first: it is "this platform",
+       not a peer in the catalog's sort order. */
+    body.querySelectorAll('tr[data-generated]').forEach(function (n) { n.remove(); });
+    body.insertAdjacentHTML('beforeend', list.map(function (p) {
       var rel = relOf(p);
       var pill = rel === 'owner' ? ' <span class="pill">yours</span>'
         : rel === 'builder' ? ' <span class="pill">you build here</span>' : '';
-      return '<tr>' +
+      return '<tr data-generated>' +
         '<td class="colName"><span class="pname"><span class="pdot" style="--acc:' +
           accentOf(p) + '"></span>' +
           '<span><span class="ptitle">' + esc(p.name) + '</span>' + pill + '<br>' +
@@ -556,7 +603,7 @@ try{var _m=localStorage.getItem('cb-color-mode');if(_m==='light'||_m==='dark')do
           ? '<a class="btn small ghost" href="' + esc(safeHttpUrl(p.origin)) + '" target="_blank" rel="noopener">Open →</a>'
           : '') + '</td>' +
         '</tr>';
-    }).join('');
+    }).join(''));
   }
 
   function applyMapFilter() {
@@ -571,13 +618,34 @@ try{var _m=localStorage.getItem('cb-color-mode');if(_m==='light'||_m==='dark')do
     });
     renderOrbs(list);
     renderRows(list);
-    var self = $('selfOrb');
-    if (self) self.hidden = onlyMine;   /* the platform is nobody's project */
-    $('orbField').classList.toggle('isEmpty', list.length === 0 && (onlyMine || !!q));
+
+    /* The platform's own entry, in BOTH views from one predicate — it used to
+       be hidden outright under "only mine" ("the platform is nobody's project"),
+       which is what dropped Cloud Bongos out of a signed-in archon's own filter.
+       It is somebody's: see selfRel(). It still answers the search box, and it
+       still vanishes for a signed-out visitor, who owns nothing here. */
+    var rel = selfRel();
+    var selfShown = (rel !== 'none' || !onlyMine) && matchesMapQuery(SELF_PROJECT, q);
+    var badge = rel === 'owner' ? 'yours' : rel === 'builder' ? 'you build here' : '';
+    var orb = $('selfOrb'), row = $('selfRow');
+    if (orb) {
+      orb.hidden = !selfShown;
+      orb.setAttribute('data-rel', rel);
+      var b = orb.querySelector('.badge');
+      if (badge && !b) { b = document.createElement('span'); b.className = 'badge'; orb.insertBefore(b, orb.firstChild); }
+      if (b) { b.textContent = badge; b.hidden = !badge; }
+    }
+    if (row) {
+      row.hidden = !selfShown;
+      $('selfPill').innerHTML = badge ? ' <span class="pill">' + badge + '</span>' : '';
+    }
+
+    var shown = list.length + (selfShown ? 1 : 0);
+    $('orbField').classList.toggle('isEmpty', shown === 0 && (onlyMine || !!q));
     $('emptyMsg').textContent = onlyMine
       ? 'You don’t own or build on anything here yet.'
       : 'Nothing here matches that.';
-    $('mapCount').textContent = list.length + (list.length === 1 ? ' project' : ' projects');
+    $('mapCount').textContent = shown + (shown === 1 ? ' project' : ' projects');
   }
 
   function loadCatalog() {

package/src/module-api.js

@@ -617,8 +617,10 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 //         landed since 1.19.93 with no explicit bump. run 31742308532. (task 1002620)
 //   1.19.95 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
 //         landed since 1.19.94 with no explicit bump. run 31746921919. (task 1002620)
+//   1.19.96 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.95 with no explicit bump. run 31748829423. (task 1002620)
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.95'; // CI auto-patch carrier (ADR 0161); see changelog above
+const CORE_VERSION = '1.19.96'; // CI auto-patch carrier (ADR 0161); see changelog above
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/projects_hub.mjs

@@ -203,3 +203,71 @@ test('/create still answers — the hub links it rather than absorbing it', () =
   assert.match(SCRIPT, /location\.assign\('\/create'/);
   assert.match(HUB, /href="\/create"/, 'the empty state must still point at the wizard');
 });
+
+/* ── The platform's own entry (task 1002760) ────────────────────────────────
+   The apex had an orb for itself but no table row and no membership, so a
+   signed-in archon's own "only mine" filter hid the very project they were
+   standing on. These pin the shape of the fix: the self entry is a VIEW-level
+   concern present in both views, and its relationship comes from the local
+   session because the membership table structurally cannot answer for it. ── */
+
+test('the platform has a self entry in the TABLE, not only in the sky', () => {
+  // the sky's orb and the table's row are both static markup, for the same
+  // reason: stripApexOnly() is a string transform and cannot reach JS output
+  assert.match(HUB, /id="selfOrb"/, 'the sky keeps its self orb');
+  assert.match(HUB, /id="selfRow"/, 'the table needs one too — this is the bug');
+  // and the row must sit INSIDE the tbody the renderer owns
+  const tbody = (HUB.match(/<tbody id="mapRows">([\s\S]*?)<\/tbody>/) || [, ''])[1];
+  assert.match(tbody, /id="selfRow"/, 'the self row belongs in #mapRows');
+});
+
+test('both self entries are apex-only — a child instance has no "this platform"', () => {
+  for (const id of ['selfOrb', 'selfRow']) {
+    const at = HUB.indexOf(`id="${id}"`);
+    const before = HUB.slice(0, at);
+    const opens = (before.match(/<!--apex-only:start-->/g) || []).length;
+    const closes = (before.match(/<!--apex-only:end-->/g) || []).length;
+    assert.equal(opens - closes, 1, `${id} must sit inside an apex-only sentinel pair`);
+  }
+});
+
+test('the renderer preserves the self row exactly as it preserves the self orb', () => {
+  // renderRows used to blow the whole tbody away with innerHTML=, which would
+  // delete a static row on the first catalog paint
+  assert.doesNotMatch(SCRIPT, /\$\('mapRows'\)\.innerHTML\s*=/,
+    'a wholesale innerHTML= on #mapRows destroys the static self row');
+  assert.match(SCRIPT, /querySelectorAll\('tr\[data-generated\]'\)/,
+    'generated rows must be removed selectively, like .worldOrb[data-generated]');
+  assert.match(SCRIPT, /<tr data-generated>/, 'generated rows must be markable');
+});
+
+test('"only mine" no longer hides the platform from a signed-in builder', () => {
+  // the exact regression: `if (self) self.hidden = onlyMine;`
+  assert.doesNotMatch(SCRIPT, /self\.hidden\s*=\s*onlyMine/,
+    'hiding the self entry whenever the filter is on was the bug');
+  assert.match(SCRIPT, /selfRel\s*\(\s*\)/, 'a single predicate decides both views');
+  assert.match(SCRIPT, /selfShown/, 'and both views read the same computed visibility');
+});
+
+test('the self relationship comes from the SESSION, never from mineOrigins', () => {
+  const fn = (SCRIPT.match(/function selfRel\(\)\s*\{([\s\S]*?)\n  \}/) || [, ''])[1];
+  assert.ok(fn, 'selfRel() must exist');
+  assert.doesNotMatch(fn, /mineOrigins/,
+    'memberships are written only by federated check-in; the apex is not a client of itself');
+  assert.match(fn, /if \(!me\) return 'none'/, 'a signed-out stranger owns nothing here');
+  assert.match(fn, /archon/, 'the instance archon is its owner');
+});
+
+test('the self entry is not pushed into the catalog array', () => {
+  // it would flow into accent assignment, orb slots and the sort comparator as
+  // though a federated row existed
+  assert.doesNotMatch(SCRIPT, /catalog\.push|catalog\.unshift|catalog\s*=\s*\[SELF/,
+    'the catalog is the federated directory of OTHER instances');
+  assert.match(SCRIPT, /var SELF_PROJECT\s*=/, 'the self entry is a view-level constant');
+});
+
+test('the count includes the platform when it is shown', () => {
+  assert.doesNotMatch(SCRIPT, /mapCount'\)\.textContent = list\.length/,
+    'the count must not ignore the self entry it is rendering beside');
+  assert.match(SCRIPT, /var shown = list\.length \+ \(selfShown \? 1 : 0\)/);
+});