@bongos/core 1.20.62 → 1.20.63

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.20.62",
-  "core_contract": "1.20.62",
-  "source_commit": "38acba884eac9c41b8648a84e81fd1bf405afa4f",
+  "core_version": "1.20.63",
+  "core_contract": "1.20.63",
+  "source_commit": "176bf17dc58ea3cf365fa0243dab4b05784ea5ff",
   "source_ref": "HEAD",
-  "built_at": "2026-10-01T10:28:21.912Z",
+  "built_at": "2026-10-01T10:39:31.324Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 572,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 3390,
-  "tree_sha256": "b152eccd4354d5a51a47a32cbe58eddabe889dcdc3771178d70814e05f61c58c",
+  "tree_sha256": "42a03693b34fa6dd32c78aae2429796822c0abf86e18f4d00a5dd9a250a7bd8e",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -2802,7 +2802,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "6ba77376f4f8ea0daa6090fe16135a131e9b90b8c5d3559c5932db2bab541016"
+      "sha256": "4b74d3eb491a91c4b34c6d6b34433090c11a50e433377eaf6fe3cb1b84d9a7e8"
     },
     {
       "path": "docs/modules-contract.md",
@@ -3057,7 +3057,7 @@
     {
       "path": "docs/recipes/upgrading-the-core.md",
       "mode": "0000644",
-      "sha256": "dfb8a97fc8955bdea090dcb673c0a1b8ea890ae1aa15dff1d22a5db8d0477429"
+      "sha256": "d480c1cae6b31e4cc13e662468ca421cc7a57a2be435bba083796dba56b64bc8"
     },
     {
       "path": "docs/recipes/windows-builders.md",
@@ -9447,12 +9447,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "8d6ab41ffe14567ae2027926260eda90e96ffb4c98737f1e14409c699003aab3"
+      "sha256": "f7863bad94ee203f0202eb82ffcb14eb16169d6d9d468949f9ce10b474bebb48"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "185364d802ce214a78623d07f59be243499b5f854efe3447a62c2dc023f7fa1e"
+      "sha256": "cf1878df111c38785f9cea2ad79345600cb52753c9ee0240557c34c2d5a4ec4d"
     },
     {
       "path": "public-docs/index.html",
@@ -9472,7 +9472,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "2d0a6e7f73b17f7eae1cdd2e621ae2880082141195a1cfd0bfe88d6eaa879622"
+      "sha256": "c20ccbe0a440e41263b90ff1c1ac287293ddad91987e51c54169c53557d58048"
     },
     {
       "path": "scripts/bongos-mcp.js",
@@ -10457,7 +10457,7 @@
     {
       "path": "scripts/gds/provision-core-upgrade.js",
       "mode": "0000644",
-      "sha256": "53904eb7a91f7f0c7c80c3caaceed29d6317652d6830e1f575198b0ba9f5158f"
+      "sha256": "1f63f4b896a235f6c4efc4889d8b94aba4118ab2d7e702d637fd3642f9de1ccc"
     },
     {
       "path": "scripts/gds/provision-disconnect.js",
@@ -11652,7 +11652,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "46631e7f30bf1f9056e310e5ebf8cb0c88001eb043a93a725be8513638e90ac6"
+      "sha256": "fea073232885d1447d4a04887ae94ab788a8879682972c39666cc06bc848f4ff"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -12627,7 +12627,7 @@
     {
       "path": "tests/core_upgrade_runner.mjs",
       "mode": "0000644",
-      "sha256": "525e38bbafc2dd1419f3e41131dd89c6adc4f063f8585b193e2be72801bede5a"
+      "sha256": "756ddbafdf6e1d116c6984a989154c24cdbfb927572b71dc2b9dab27f82b2dab"
     },
     {
       "path": "tests/cosmos_token_contrast.mjs",

package/docs/module-api-changelog.md

@@ -2781,5 +2781,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.20.60 with no explicit bump. run 36846600005. (task 1002620)
   1.20.62 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.20.61 with no explicit bump. run 36849277076. (task 1002620)
+  1.20.63 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.20.62 with no explicit bump. run 36850426143. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/docs/recipes/upgrading-the-core.md

@@ -90,6 +90,8 @@ The sections above are the *manual* `bongos upgrade`. The **subscription** runs
 
 A **major** is never automatic; prereleases are never auto-targeted.
 
+**Crossing a minor from /deploy** (task [1004405](https://cloudbongos.com/builders#/task/1004405)): set the project's update rule to **Fixes and new releases** (`minor`), or press **Allow new releases and move** on the refused move — either is the explicit "this crosses a minor version" choice. That only works once the box runs a core whose runner reads the rule (core 1.20.29 or later, task [1004445](https://cloudbongos.com/builders#/task/1004445)). A box on anything older runs the old runner, which bounds every move to `patch` whatever the rule says, so its **first** crossing is the manual `upgrade.js --to <version>` above; every later one goes through /deploy.
+
 **Where the channel comes from** ([ADR 0357](../adr/0357-the-update-rule-set-on-deploy-is-the-one-the-sweep-follows.md), task [1004468](https://cloudbongos.com/builders#/task/1004468)): the rule set on **/deploy** (`provisioning_instances.update_channel`) wins for any roster entry whose `slug` matches a project row. The roster's `channel` below is only the fallback, used when no row matches or the sweep can't read the database. The sweep reads the control plane's DB from `UPDATE_CHANNEL_DB` (a db name or connection string), else `DATABASE_URL` / `PGDATABASE`. On a control plane, set `UPDATE_CHANNEL_DB`, never `PGDATABASE`: the sweep's env reaches every upgrade it spawns, so a tenant entry with no database of its own would migrate against the control plane's. Every run prints each entry's channel and its source.
 
 **Enrolling an instance** — add it to `config/update-subscriptions.json` (instance-side) (ships empty). `env` carries per-instance vars merged into the upgrade child — set `PGDATABASE` so `migrate` hits the right DB (see the Gotchas):

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.20.62",
+  "version": "1.20.63",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.20.62",
+      "version": "1.20.63",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.20.62",
+  "version": "1.20.63",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -8497,5 +8497,11 @@
       "id": "1004307",
       "text": "The automatic update on cloudbongos.com will now always run the newest version of itself, instead of a copy stuck from August."
     }
+  ],
+  "1.20.63": [
+    {
+      "id": "1004405",
+      "text": "When the Upgrade button refuses a jump to a new release line, it now tells you exactly which setting on /deploy to change, instead of pointing at a setting that didn't exist."
+    }
   ]
 }

package/scripts/gds/provision-core-upgrade.js

@@ -137,11 +137,26 @@ function targetFault(to, available, installed, channel, channelAllows) {
     return `could not read the core version installed at this instance — nothing was changed. An upgrade that cannot say where it is starting from cannot be bounded by the '${channel}' channel.`;
   }
   if (channelAllows && !channelAllows(installed, to, channel)) {
-    return `core ${to} is outside this project's '${channel}' update channel — nothing was changed. Change the channel first if this is deliberate.`;
+    return `core ${to} is outside this project's '${channel}' update channel — nothing was changed. ${channelNextStep(channel)}`;
   }
   return null;
 }
 
+// The step that gets a channel-refused move through, named by the control a person can
+// actually reach (task 1004405). The old line said "change the channel first" while no
+// channel could be changed; the update rule on /deploy (task 1004445) is that control now,
+// and its labels are the words used here. `minor` is the widest rule, so a move it refuses
+// (a major, a prerelease) has no rule to widen to and is named as the by-hand step it is.
+function channelNextStep(channel) {
+  if (channel === 'pinned') {
+    return 'Its update rule on /deploy is "Stay put"; change it to "Fixes only" or "Fixes and new releases", then move again.';
+  }
+  if (channel === 'minor') {
+    return 'No update rule moves a project across a major version or onto a prerelease; that move is made by hand with upgrade.js (docs/recipes/upgrading-the-core.md).';
+  }
+  return 'To take a new release line, set this project\'s update rule on /deploy to "Fixes and new releases" (or press "Allow new releases and move"), then move again.';
+}
+
 // The update channel that bounds a move for THIS instance (task 1004445): the row's own
 // `update_channel`, normalised by update-channel.js so anything unknown or absent (a row
 // read before migration provisioning_029) falls back to DEFAULT_CHANNEL. PURE. One helper

package/src/module-api.js

@@ -75,7 +75,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // MAJOR (see allowBoxScope below): passes the request through untouched.
 function deprecatedNoopMiddleware(_req, _res, next) { next(); }
 
-const CORE_VERSION = '1.20.62'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.20.63'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('discord'); log.info('mounted');

package/tests/core_upgrade_runner.mjs

@@ -219,6 +219,19 @@ await t('a version that is not published yet is refused, and the message says th
   assert.match(f, /tag appears several minutes before/);
 });
 
+await t('the channel refusal names a step that EXISTS on /deploy, never "change the channel first" (task 1004405)', () => {
+  const patch = R.targetFault('1.20.1', ['1.19.1081', '1.20.1'], '1.19.1081', 'patch', () => false);
+  assert.ok(!/Change the channel first/.test(patch), 'the old wording named nothing a person could do');
+  assert.match(patch, /\/deploy/);
+  assert.match(patch, /Fixes and new releases/, 'patch → names the rule that admits a minor jump');
+  const pinned = R.targetFault('1.19.1082', ['1.19.1081', '1.19.1082'], '1.19.1081', 'pinned', () => false);
+  assert.match(pinned, /Stay put/);
+  assert.match(pinned, /Fixes only/);
+  const major = R.targetFault('2.0.0', ['1.19.1081', '2.0.0'], '1.19.1081', 'minor', () => false);
+  assert.match(major, /no update rule/i, 'minor is the widest rule, so pointing at a wider one would be a lie');
+  assert.match(major, /upgrading-the-core\.md/);
+});
+
 await t('a registry that could not be read is refused DIFFERENTLY from a version that does not exist', () => {
   const empty = R.targetFault('1.19.760', [], '1.19.758', 'patch', () => true);
   assert.match(empty, /could not read the published core versions/);