@bongos/core 1.19.95 → 1.19.97

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.95",
-  "core_contract": "1.19.95",
-  "source_commit": "e6e718ed6edb6fc01565339760fd0fd14cffa2fc",
+  "core_version": "1.19.97",
+  "core_contract": "1.19.97",
+  "source_commit": "98de965667e063aac8e2bd2de7a3d05f588aa7b5",
   "source_ref": "HEAD",
-  "built_at": "2026-08-13T21:44:20.853Z",
+  "built_at": "2026-08-13T22:16:31.509Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 298,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 1549,
-  "tree_sha256": "cb89e58c1034e1681a97ac75f367935e745215ceb83b1aa393639904a0d861db",
+  "tree_sha256": "5057e83f784804f0af10e3b926390ed83212d7b23656b12359d5bdfd429caa25",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -4127,12 +4127,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "0ebfc1c5594ff344281bfc92013bb8cf8f871c7f02152c91ae847cde36f2de3d"
+      "sha256": "20f03a27edf41b5de61cd36c58e61d2e0acad8cfc68a4bfa23c19786ead8e1f1"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "b192fbde61e9428fff6a9b7077f341abe1f6d930e009496b93c6fb44eca2a45c"
+      "sha256": "136d49d62b377412dcb7ad5884c8a7ca439bfc41544be3d3a5233a4cd11100e7"
     },
     {
       "path": "public-docs/index.html",
@@ -4392,7 +4392,7 @@
     {
       "path": "public-landing/projects.html",
       "mode": "0000644",
-      "sha256": "6edf67839bd80ba22672ebfb9f5c38a2bbce980157024b50d71ce9bae211c8db"
+      "sha256": "3a77a5f30acaa793ef82b434bf6a87033d580923231f7e66673cdc533a6767d1"
     },
     {
       "path": "public-landing/world/assets/clouds/cloud-island-large.png",
@@ -5702,7 +5702,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "401742f230ab25aa8dbb410a1b8bf1bfbe02257a360362fa7488f3965a88c5ca"
+      "sha256": "4b6c32f29637b84b0e11cd7e0fb7394e4f33d9b520f63c8c34c94de33aa65449"
     },
     {
       "path": "src/module-loader/loader.js",
@@ -7212,7 +7212,7 @@
     {
       "path": "tests/projects_hub.mjs",
       "mode": "0000644",
-      "sha256": "e3e3e3f8164da3f897166dca2b0502fac2519483b36282e91ef5645cfef6c18c"
+      "sha256": "cffae7809fb64eec684987895dc2b82b7de758cd950bea5d013cb210db3c6220"
     },
     {
       "path": "tests/provision.mjs",

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.95",
+  "version": "1.19.97",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.95",
+      "version": "1.19.97",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.95",
+  "version": "1.19.97",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/public-landing/projects.html

@@ -173,7 +173,24 @@ try{var _m=localStorage.getItem('cb-color-mode');if(_m==='light'||_m==='dark')do
           <th class="colGo"></th>
         </tr>
       </thead>
-      <tbody id="mapRows"></tbody>
+      <tbody id="mapRows">
+        <!-- The platform's own row. Static and apex-only for exactly the reason
+             the orb above is (stripApexOnly() is a string transform that cannot
+             reach anything a script renders later), and preserved across
+             re-renders by the same data-generated contract renderOrbs uses. -->
+        <!--apex-only:start-->
+        <tr id="selfRow">
+          <td class="colName"><span class="pname"><span class="pdot" style="--acc:var(--accent)"></span>
+            <span><span class="ptitle" data-brand-product-inline>Cloud Bongos</span><span id="selfPill"></span><br>
+            <span class="ptag">this platform</span></span></span></td>
+          <td class="right num">—</td>
+          <td class="colType">—</td>
+          <td class="colTags">—</td>
+          <td class="right colStatus"><span class="chip calm"><span class="cdot"></span>—</span></td>
+          <td class="colGo"><a class="btn small ghost" href="#" data-self-open>Open →</a></td>
+        </tr>
+        <!--apex-only:end-->
+      </tbody>
     </table>
     <p class="finePrint" style="text-align:center">Click a column to sort.</p>
   </div>
@@ -440,13 +457,30 @@ try{var _m=localStorage.getItem('cb-color-mode');if(_m==='light'||_m==='dark')do
     $('markPrefix').textContent = prefix;
     if (REDUCED || prefix !== 'cloud' || word !== 'bongos') return;
     var PREFIXES = ['cloud', 'claude', 'chatgpt', 'gemini'];
-    var wi = 0, ci = PREFIXES[0].length, dir = -1;
-    setInterval(function () {
-      ci += dir;
-      if (ci <= 0) { dir = 1; wi = (wi + 1) % PREFIXES.length; ci = 0; }
-      else if (ci >= PREFIXES[wi].length) { dir = -1; ci = PREFIXES[wi].length; }
-      $('markPrefix').textContent = PREFIXES[wi].slice(0, ci);
-    }, 190);
+
+    /* Type, HOLD, erase — the landing hero's cadence (index.html), not a
+       symmetric ping-pong. The single reversing interval this replaced turned
+       around on the very tick it completed a word, so `claude bongos` finished
+       and was already being deleted: the reader never got to see the word the
+       whole animation exists to show. A hold is the only part of the cycle that
+       carries meaning; the typing is just how it arrives.
+
+       `cloud` rests longest because it is the real wordmark and the state the
+       mark should sit in most — the others are the joke, and the joke lands
+       once. Same two numbers the hero uses, so the two surfaces read as one
+       system rather than two animations that happen to share a font. */
+    var TYPE = 72, ERASE = 38, HOLD = 900, HOLD_HOME = 2100;
+    var el = $('markPrefix'), wi = 0;
+    (function cycle() {
+      var w = PREFIXES[wi++ % PREFIXES.length], i = 0;
+      (function type() {
+        if (i <= w.length) { el.textContent = w.slice(0, i++); setTimeout(type, TYPE); }
+        else setTimeout(function erase() {
+          if (el.textContent.length) { el.textContent = el.textContent.slice(0, -1); setTimeout(erase, ERASE); }
+          else cycle();
+        }, w === 'cloud' ? HOLD_HOME : HOLD);
+      })();
+    })();
   })();
 
   /* ══ THE MAP ═══════════════════════════════════════════════════════════════
@@ -472,6 +506,13 @@ try{var _m=localStorage.getItem('cb-color-mode');if(_m==='light'||_m==='dark')do
   var ORB_GLOWS = ORB_ACCENTS.map(function (t) { return 'color-mix(in srgb,' + t + ' 45%,transparent)'; });
   var catalog = [];
   var mineOrigins = {};   /* normalized host → 'owner' | 'builder' */
+  /* What the platform's own entry is FOR SEARCH. It is deliberately not pushed
+     into `catalog`: the catalog is the federated directory of other instances,
+     and a synthetic member of it would flow into accent assignment, orb slots
+     and the sort comparator as if a row existed. This keeps the self entry a
+     view-level concern (the owner's call, 2026-08-13) while still letting the
+     search box match it by the same predicate every other project uses. */
+  var SELF_PROJECT = { name: productName, tagline: 'this platform' };
   var mapSort = { key: 'name', dir: 1 };
 
   /* Catalog origins become hrefs, so they are scheme-checked before they are
@@ -500,6 +541,23 @@ try{var _m=localStorage.getItem('cb-color-mode');if(_m==='light'||_m==='dark')do
   }
   function accentOf(p) { return p._acc || ORB_ACCENTS[0]; }
   function relOf(p) { return mineOrigins[hostOf(p.origin)] || 'none'; }
+  /* The platform's own relationship cannot come from mineOrigins, and not
+     because the data is merely missing: platform_identity_project_memberships
+     is written ONLY by the server-to-server check-in a FEDERATED instance posts
+     on sign-in (ADR 0141 §3), and the apex is not a federated client of itself
+     — reportMembershipCheckIn() returns early on the instance that IS the hub,
+     so no amount of signing in here will ever produce a row. Waiting on that
+     table for this one project waits forever.
+
+     The local session is the authority instead, and it is a stronger one: a
+     session on this instance EXISTS because sign-in created a builder row here,
+     so "signed in here" IS "builder here" — not a guess standing in for one.
+     Archon is the instance's owner. Signed out stays 'none' so a stranger's map
+     claims nothing. Membership stays the cross-instance federated view. */
+  function selfRel() {
+    if (!me) return 'none';
+    return me.rank === 'archon' ? 'owner' : 'builder';
+  }
   function matchesMapQuery(p, q) {
     if (!q) return true;
     return (String(p.name || '') + ' ' + String(p.tagline || '')).toLowerCase().indexOf(q) !== -1;
@@ -534,11 +592,17 @@ try{var _m=localStorage.getItem('cb-color-mode');if(_m==='light'||_m==='dark')do
   }
 
   function renderRows(list) {
-    $('mapRows').innerHTML = list.map(function (p) {
+    var body = $('mapRows');
+    /* replace only the generated rows — the platform's own row is static
+       apex-only markup and must survive every re-render, for the same reason
+       #selfOrb does in the sky. It stays pinned first: it is "this platform",
+       not a peer in the catalog's sort order. */
+    body.querySelectorAll('tr[data-generated]').forEach(function (n) { n.remove(); });
+    body.insertAdjacentHTML('beforeend', list.map(function (p) {
       var rel = relOf(p);
       var pill = rel === 'owner' ? ' <span class="pill">yours</span>'
         : rel === 'builder' ? ' <span class="pill">you build here</span>' : '';
-      return '<tr>' +
+      return '<tr data-generated>' +
         '<td class="colName"><span class="pname"><span class="pdot" style="--acc:' +
           accentOf(p) + '"></span>' +
           '<span><span class="ptitle">' + esc(p.name) + '</span>' + pill + '<br>' +
@@ -556,7 +620,7 @@ try{var _m=localStorage.getItem('cb-color-mode');if(_m==='light'||_m==='dark')do
           ? '<a class="btn small ghost" href="' + esc(safeHttpUrl(p.origin)) + '" target="_blank" rel="noopener">Open →</a>'
           : '') + '</td>' +
         '</tr>';
-    }).join('');
+    }).join(''));
   }
 
   function applyMapFilter() {
@@ -571,13 +635,34 @@ try{var _m=localStorage.getItem('cb-color-mode');if(_m==='light'||_m==='dark')do
     });
     renderOrbs(list);
     renderRows(list);
-    var self = $('selfOrb');
-    if (self) self.hidden = onlyMine;   /* the platform is nobody's project */
-    $('orbField').classList.toggle('isEmpty', list.length === 0 && (onlyMine || !!q));
+
+    /* The platform's own entry, in BOTH views from one predicate — it used to
+       be hidden outright under "only mine" ("the platform is nobody's project"),
+       which is what dropped Cloud Bongos out of a signed-in archon's own filter.
+       It is somebody's: see selfRel(). It still answers the search box, and it
+       still vanishes for a signed-out visitor, who owns nothing here. */
+    var rel = selfRel();
+    var selfShown = (rel !== 'none' || !onlyMine) && matchesMapQuery(SELF_PROJECT, q);
+    var badge = rel === 'owner' ? 'yours' : rel === 'builder' ? 'you build here' : '';
+    var orb = $('selfOrb'), row = $('selfRow');
+    if (orb) {
+      orb.hidden = !selfShown;
+      orb.setAttribute('data-rel', rel);
+      var b = orb.querySelector('.badge');
+      if (badge && !b) { b = document.createElement('span'); b.className = 'badge'; orb.insertBefore(b, orb.firstChild); }
+      if (b) { b.textContent = badge; b.hidden = !badge; }
+    }
+    if (row) {
+      row.hidden = !selfShown;
+      $('selfPill').innerHTML = badge ? ' <span class="pill">' + badge + '</span>' : '';
+    }
+
+    var shown = list.length + (selfShown ? 1 : 0);
+    $('orbField').classList.toggle('isEmpty', shown === 0 && (onlyMine || !!q));
     $('emptyMsg').textContent = onlyMine
       ? 'You don’t own or build on anything here yet.'
       : 'Nothing here matches that.';
-    $('mapCount').textContent = list.length + (list.length === 1 ? ' project' : ' projects');
+    $('mapCount').textContent = shown + (shown === 1 ? ' project' : ' projects');
   }
 
   function loadCatalog() {

package/src/module-api.js

@@ -617,8 +617,12 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 //         landed since 1.19.93 with no explicit bump. run 31742308532. (task 1002620)
 //   1.19.95 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
 //         landed since 1.19.94 with no explicit bump. run 31746921919. (task 1002620)
+//   1.19.96 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.95 with no explicit bump. run 31748829423. (task 1002620)
+//   1.19.97 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.96 with no explicit bump. run 31749223878. (task 1002620)
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.95'; // CI auto-patch carrier (ADR 0161); see changelog above
+const CORE_VERSION = '1.19.97'; // CI auto-patch carrier (ADR 0161); see changelog above
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/projects_hub.mjs

@@ -203,3 +203,107 @@ test('/create still answers — the hub links it rather than absorbing it', () =
   assert.match(SCRIPT, /location\.assign\('\/create'/);
   assert.match(HUB, /href="\/create"/, 'the empty state must still point at the wizard');
 });
+
+/* ── The platform's own entry (task 1002760) ────────────────────────────────
+   The apex had an orb for itself but no table row and no membership, so a
+   signed-in archon's own "only mine" filter hid the very project they were
+   standing on. These pin the shape of the fix: the self entry is a VIEW-level
+   concern present in both views, and its relationship comes from the local
+   session because the membership table structurally cannot answer for it. ── */
+
+test('the platform has a self entry in the TABLE, not only in the sky', () => {
+  // the sky's orb and the table's row are both static markup, for the same
+  // reason: stripApexOnly() is a string transform and cannot reach JS output
+  assert.match(HUB, /id="selfOrb"/, 'the sky keeps its self orb');
+  assert.match(HUB, /id="selfRow"/, 'the table needs one too — this is the bug');
+  // and the row must sit INSIDE the tbody the renderer owns
+  const tbody = (HUB.match(/<tbody id="mapRows">([\s\S]*?)<\/tbody>/) || [, ''])[1];
+  assert.match(tbody, /id="selfRow"/, 'the self row belongs in #mapRows');
+});
+
+test('both self entries are apex-only — a child instance has no "this platform"', () => {
+  for (const id of ['selfOrb', 'selfRow']) {
+    const at = HUB.indexOf(`id="${id}"`);
+    const before = HUB.slice(0, at);
+    const opens = (before.match(/<!--apex-only:start-->/g) || []).length;
+    const closes = (before.match(/<!--apex-only:end-->/g) || []).length;
+    assert.equal(opens - closes, 1, `${id} must sit inside an apex-only sentinel pair`);
+  }
+});
+
+test('the renderer preserves the self row exactly as it preserves the self orb', () => {
+  // renderRows used to blow the whole tbody away with innerHTML=, which would
+  // delete a static row on the first catalog paint
+  assert.doesNotMatch(SCRIPT, /\$\('mapRows'\)\.innerHTML\s*=/,
+    'a wholesale innerHTML= on #mapRows destroys the static self row');
+  assert.match(SCRIPT, /querySelectorAll\('tr\[data-generated\]'\)/,
+    'generated rows must be removed selectively, like .worldOrb[data-generated]');
+  assert.match(SCRIPT, /<tr data-generated>/, 'generated rows must be markable');
+});
+
+test('"only mine" no longer hides the platform from a signed-in builder', () => {
+  // the exact regression: `if (self) self.hidden = onlyMine;`
+  assert.doesNotMatch(SCRIPT, /self\.hidden\s*=\s*onlyMine/,
+    'hiding the self entry whenever the filter is on was the bug');
+  assert.match(SCRIPT, /selfRel\s*\(\s*\)/, 'a single predicate decides both views');
+  assert.match(SCRIPT, /selfShown/, 'and both views read the same computed visibility');
+});
+
+test('the self relationship comes from the SESSION, never from mineOrigins', () => {
+  const fn = (SCRIPT.match(/function selfRel\(\)\s*\{([\s\S]*?)\n  \}/) || [, ''])[1];
+  assert.ok(fn, 'selfRel() must exist');
+  assert.doesNotMatch(fn, /mineOrigins/,
+    'memberships are written only by federated check-in; the apex is not a client of itself');
+  assert.match(fn, /if \(!me\) return 'none'/, 'a signed-out stranger owns nothing here');
+  assert.match(fn, /archon/, 'the instance archon is its owner');
+});
+
+test('the self entry is not pushed into the catalog array', () => {
+  // it would flow into accent assignment, orb slots and the sort comparator as
+  // though a federated row existed
+  assert.doesNotMatch(SCRIPT, /catalog\.push|catalog\.unshift|catalog\s*=\s*\[SELF/,
+    'the catalog is the federated directory of OTHER instances');
+  assert.match(SCRIPT, /var SELF_PROJECT\s*=/, 'the self entry is a view-level constant');
+});
+
+test('the count includes the platform when it is shown', () => {
+  assert.doesNotMatch(SCRIPT, /mapCount'\)\.textContent = list\.length/,
+    'the count must not ignore the self entry it is rendering beside');
+  assert.match(SCRIPT, /var shown = list\.length \+ \(selfShown \? 1 : 0\)/);
+});
+
+/* ── The wordmark's cadence (task 1002765) ──────────────────────────────────
+   The mark completed a word and erased it on the same tick, so the word the
+   animation exists to show was never legible. Owner-reported, twice. ── */
+
+test('the wordmark HOLDS the finished word before erasing it', () => {
+  const mark = (SCRIPT.match(/function typeMark\(\)([\s\S]*?)\n  \}\)\(\);/) || [, ''])[1];
+  assert.ok(mark, 'typeMark() must exist');
+  // the regression shape: one interval that flips direction the moment it
+  // completes a word, so there is no dwell at full length
+  assert.doesNotMatch(mark, /setInterval/,
+    'a single reversing interval cannot hold — it turns around on the tick it completes');
+  assert.match(mark, /HOLD\s*=\s*\d+/, 'the hold must be a named duration, not an accident of timing');
+  // and it must actually be a pause worth reading, not a couple of frames
+  const hold = Number((mark.match(/HOLD\s*=\s*(\d+)/) || [, 0])[1]);
+  assert.ok(hold >= 600, `the hold must be legible; got ${hold}ms`);
+});
+
+test('the wordmark rests on the real product name, not on a joke', () => {
+  const mark = (SCRIPT.match(/function typeMark\(\)([\s\S]*?)\n  \}\)\(\);/) || [, ''])[1];
+  assert.match(mark, /w === 'cloud' \? HOLD_HOME : HOLD/,
+    'the canonical prefix should dwell longest — it is the wordmark, the others are the gag');
+  const home = Number((mark.match(/HOLD_HOME\s*=\s*(\d+)/) || [, 0])[1]);
+  const hold = Number((mark.match(/HOLD\s*=\s*(\d+)/) || [, 0])[1]);
+  assert.ok(home > hold, 'the resting state must outlast the alternates');
+});
+
+test('the hub and the landing hero share one typing cadence', () => {
+  // two surfaces, one system — a divergence here is a visible inconsistency
+  const LANDING = fs.readFileSync(path.join(ROOT, 'public-landing', 'index.html'), 'utf8');
+  const heroHolds = [...LANDING.matchAll(/\?\s*(\d+)\s*:\s*(\d+)\)/g)].map(m => [m[1], m[2]]).flat();
+  const mark = (SCRIPT.match(/function typeMark\(\)([\s\S]*?)\n  \}\)\(\);/) || [, ''])[1];
+  for (const n of [mark.match(/HOLD_HOME\s*=\s*(\d+)/)[1], mark.match(/HOLD\s*=\s*(\d+)/)[1]]) {
+    assert.ok(heroHolds.includes(n), `hold ${n}ms should match the hero's cadence (${heroHolds.join('/')})`);
+  }
+});