@bongos/core 1.19.978 → 1.19.979

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.978",
-  "core_contract": "1.19.978",
-  "source_commit": "07b4598f521bd18dea921d1f707ab68214f85278",
+  "core_version": "1.19.979",
+  "core_contract": "1.19.979",
+  "source_commit": "ee45fc71b6ae43fb6472ac38f34d0e9dec14404d",
   "source_ref": "HEAD",
-  "built_at": "2026-09-23T15:32:43.462Z",
+  "built_at": "2026-09-23T16:19:27.558Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 517,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 2929,
-  "tree_sha256": "e4b9a04a3018488400611b2d2bc6029ec350c267a483e351233d87a8f0a55948",
+  "tree_sha256": "8713bc7853b04fa457c4d48cbc0c13dc443de6dd160e398ad5c02723c17961bb",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -2707,7 +2707,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "8d5ba6662f56dc81bf49320bc07c18445e5097f3e40ed0e53f5af4a24a96f39b"
+      "sha256": "fa27fc84bcbf5bb7c86dc1fc4ff9aaa72ba27a1716c78e62cce7a1c3ce8b3f30"
     },
     {
       "path": "docs/modules-contract.md",
@@ -4927,7 +4927,7 @@
     {
       "path": "modules/hall-ui/public/goal-inbox.js",
       "mode": "0000644",
-      "sha256": "8e8d581eb99bbff050e088b727266b9f4c0ab957d1c98fd407e2c4d592a5c8b3"
+      "sha256": "b64ea71dc70993e2d3f8e728a0c3ff6450ffb14d8bc84ea7fb6825f9758aa089"
     },
     {
       "path": "modules/hall-ui/public/goal-map-lib.js",
@@ -8147,12 +8147,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "1250bd983d6fae46de399b17b3a04dc4ffd89acb0c259b814b820fbedcedce35"
+      "sha256": "f3b5649999aab68e1fce91958eaaca189b5416153cf2ec03e875270af08201fb"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "36026f4837ffb4ce421f652247a82f1e632039142f154f8d5803de9425523c94"
+      "sha256": "35ae208891acb8d39254b253897becb92a3a7edc7723088cd567f235b23ea75b"
     },
     {
       "path": "public-docs/index.html",
@@ -10177,7 +10177,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "92413d2fc4ee3c637dd738d498afb53fdbae34119ba940b9fb72c46c391dc0d6"
+      "sha256": "3401e9932ded1fa4ee698228b446607fc67a82978f9c2bb31c6e4e5377876f03"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -13652,7 +13652,7 @@
     {
       "path": "tests/rot_inbox.mjs",
       "mode": "0000644",
-      "sha256": "382ddf61536d7fb738d99127cee03fa06df8ca79e53f876f702676189d900a67"
+      "sha256": "7611e8595f5ea2b314d92d756c15ba8dfc6843daf32c0130e00ed13a24fe38b8"
     },
     {
       "path": "tests/route_permission_check.mjs",

package/docs/module-api-changelog.md

@@ -2430,5 +2430,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.976 with no explicit bump. run 35880930697. (task 1002620)
   1.19.978 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.977 with no explicit bump. run 35882259144. (task 1002620)
+  1.19.979 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.978 with no explicit bump. run 35887876013. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/hall-ui/public/goal-inbox.js

@@ -278,7 +278,7 @@
       const more = count > 5 ? `<p class="ginbox__pending">…${count - 5} more awaiting a nod.</p>` : '';
       box.innerHTML = '<h3 class="ginbox__sec-h">Reported work awaiting a nod '
         + `<span class="count-pill">${count}</span></h3>`
-        + `<ul class="ginbox__list">${rows.slice(0, 5).map(nodRowHtml).join('')}</ul>${more}`;
+        + `<ul class="ginbox">${rows.slice(0, 5).map(nodRowHtml).join('')}</ul>${more}`;
     }
     window.OTBAttention?.refresh();
   }
@@ -358,7 +358,7 @@
       const more = count > 5 ? `<p class="ginbox__pending">…${count - 5} more awaiting an answer.</p>` : '';
       box.innerHTML = '<h3 class="ginbox__sec-h">Was this removed? '
         + `<span class="count-pill">${count}</span></h3>`
-        + `<ul class="ginbox__list">${rows.slice(0, 5).map(removalRowHtml).join('')}</ul>${more}`;
+        + `<ul class="ginbox">${rows.slice(0, 5).map(removalRowHtml).join('')}</ul>${more}`;
     }
     window.OTBAttention?.refresh();
   }
@@ -457,7 +457,7 @@
       : `<span class="ginbox__sub"> — untouched ${escapeHtml(String(t.rot_days ?? '?'))}+ days</span>`;
     box.innerHTML = '<h3 class="ginbox__sec-h">Going quiet '
       + `<span class="count-pill">${rows.length}</span>${timerNote}</h3>`
-      + `<ul class="ginbox__list">${shown.map(rotRowHtml).join('')}</ul>${more}`;
+      + `<ul class="ginbox">${shown.map(rotRowHtml).join('')}</ul>${more}`;
     window.OTBAttention?.refresh();
   }
 

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.978",
+  "version": "1.19.979",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.978",
+      "version": "1.19.979",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.978",
+  "version": "1.19.979",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/src/module-api.js

@@ -71,7 +71,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.978'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.979'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/rot_inbox.mjs

@@ -616,6 +616,16 @@ test('row builders emit the CSS classes style.css actually defines, not ginbox__
     'rotRowHtml must emit the defined ginbox__body/ginbox__actions classes');
 });
 
+test('the nod, removal and rot lists use the defined .ginbox list class, not ginbox__list (task 1003982)', () => {
+  assert.match(STYLE_SRC, /^\.ginbox\s*\{[^}]*list-style:\s*none/m, 'style.css must define .ginbox with list-style: none');
+  assert.doesNotMatch(GOAL_INBOX_SRC, /ginbox__list/,
+    '.ginbox__list is undefined in style.css — with it the browser default bullets and 40px indent leak through');
+  for (const fn of ['nodRowHtml', 'removalRowHtml', 'rotRowHtml']) {
+    assert.match(GOAL_INBOX_SRC, new RegExp(`<ul class="ginbox">\\$\\{[^\\n]*?map\\(${fn}\\)`),
+      `the list built from ${fn} must be <ul class="ginbox">`);
+  }
+});
+
 test('acting on a rot line refreshes the ROT slice, not the goals list', () => {
   assert.match(GOAL_INBOX_SRC, /ROT_TOASTS\[verb\] \|\| 'Done\.', loadRot\)/,
     'refreshing the wrong slice leaves the acted-on row sitting there — the task-1003066 lesson');