@bongos/core 1.21.101 → 1.21.102

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.21.101",
-  "core_contract": "1.21.101",
-  "source_commit": "7858ffa1199248ca5c40837b5f21f0e8ef19d47f",
+  "core_version": "1.21.102",
+  "core_contract": "1.21.102",
+  "source_commit": "f552db78c82ef1ca4418a9de313e150bb29ce4b1",
   "source_ref": "HEAD",
-  "built_at": "2026-10-09T13:00:03.202Z",
+  "built_at": "2026-10-09T13:15:03.097Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 592,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 3640,
-  "tree_sha256": "02e0d13b4633dbacbe287ad2057cb25994404d346b87f7f87f013d0f367ee8c2",
+  "tree_sha256": "834d88c63001764c8ed72f393a6c49d3d123469f268cf129a13cab0b342e5ebe",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -2872,7 +2872,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "cf3cee3fb9bea331857c69de667438a0c83137849f262712af3de7172e701e26"
+      "sha256": "b44e9230778cf7b2aafd8d7971fb862c00ab3c8c667da525dc83ceb6238a0908"
     },
     {
       "path": "docs/modules-contract.md",
@@ -10132,12 +10132,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "dd270ec93485ddb27786d87ba9eb34a588c39492310114df6c22efb4a99ee447"
+      "sha256": "4abc8512ca8578d3a43a7d915574dc473061e2e77cd20e3902c5478af77a671f"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "888c5c97454286a61cc39bbe0c14547d92765fa057195303f3f3352410edcfa6"
+      "sha256": "7b6b52ae08358107e824752af2427b6efaa33d7ea5bcf9a0b464584eef6708a5"
     },
     {
       "path": "public-docs/index.html",
@@ -10157,7 +10157,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "d1156f6a018933ff1c6f4f4481a4089ac754815318468fa5ce6bdd880105bbdb"
+      "sha256": "947800c2b145b25a07f38bdfc1274ba9316de0b1bccc35e43de3ea2ddc44f7a3"
     },
     {
       "path": "scripts/cron/style_guide_audit.sh",
@@ -12432,7 +12432,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "515c7e51fc93bf9b5fe62e46252650d733818c4e9fd6e7ab3e310fbd6593564a"
+      "sha256": "090a1a041a5e03ddfd2bb4c93ff9e28407a1cb662da2492e3741450900282f44"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -14752,7 +14752,7 @@
     {
       "path": "tests/guilds_db.mjs",
       "mode": "0000644",
-      "sha256": "8d8847a10fb1930a1c64acd66efb372acef0e742b0b5d804a994d003759f5248"
+      "sha256": "e964c8a42a1703eb4b9edb45ad16d99340fcb08c5d28b0cbc24f5e94313f5b61"
     },
     {
       "path": "tests/hall_approval_queue.mjs",

package/docs/module-api-changelog.md

@@ -3039,5 +3039,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.21.99 with no explicit bump. run 37931583687. (task 1002620)
   1.21.101 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.21.100 with no explicit bump. run 37933684016. (task 1002620)
+  1.21.102 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.21.101 with no explicit bump. run 37935415352. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.101",
+  "version": "1.21.102",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.21.101",
+      "version": "1.21.102",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.101",
+  "version": "1.21.102",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -9444,5 +9444,11 @@
       "id": "1004582",
       "text": "Cleaning up a finished worktree no longer crashes on Linux and Mac machines. It used to stop halfway and leave the old workspace registered; now it removes the shortcut to the shared packages safely and carries on."
     }
+  ],
+  "1.21.102": [
+    {
+      "id": "1004588",
+      "text": "The guilds test now sets up everything it needs on a brand-new database, so it runs all the way through instead of stopping early. It also checks, without needing a database, that its setup keeps up with the tables the guild c"
+    }
   ]
 }

package/src/module-api.js

@@ -75,7 +75,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // MAJOR (see allowBoxScope below): passes the request through untouched.
 function deprecatedNoopMiddleware(_req, _res, next) { next(); }
 
-const CORE_VERSION = '1.21.101'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.21.102'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('discord'); log.info('mounted');

package/tests/guilds_db.mjs

@@ -28,6 +28,56 @@ const here = dirname(fileURLToPath(import.meta.url));
 const MIG_DIR = join(here, '..', 'modules', 'platform-identity', 'migrations');
 const migrationSql = (f) => readFileSync(join(MIG_DIR, f), 'utf8');
 
+// The migrations this domain reads, all idempotent: accounts + consent,
+// handles, privacy, terms, connections (addressing), guilds, and the stored
+// guild totals getPublicGuild joins (027 — missing until task 1004588, so a
+// fresh Postgres died on "relation platform_identity_guild_totals does not
+// exist" before most assertions ran). 030 (engagements) is not read by guilds.js.
+const SETUP_MIGRATIONS = [
+  'platform_identity_001_tables.sql', 'platform_identity_007_profile_consent.sql',
+  'platform_identity_008_handle.sql', 'platform_identity_012_account_privacy.sql',
+  'platform_identity_015_connections.sql', 'platform_identity_019_terms_acceptance.sql',
+  'platform_identity_025_guilds.sql', 'platform_identity_027_guild_totals.sql',
+];
+
+// DB-FREE GUARD, run before the Postgres probe so it holds even where this file
+// skips (task 1004588). Every platform_identity_ table guilds.js reads or
+// writes — itself, plus the bodies of the functions it imports from ./guild-*
+// siblings — must be CREATEd by a setup migration; otherwise a fresh DB fails
+// mid-run, and a shared dev DB that already has the table hides it. Scoped to
+// the imported FUNCTIONS on purpose: guild-totals.js also holds the poller,
+// whose tables this test never exercises. A scan that finds nothing fails.
+{
+  const MOD_DIR = join(here, '..', 'modules', 'platform-identity');
+  const guildsSrc = readFileSync(join(MOD_DIR, 'guilds.js'), 'utf8');
+  const sources = [['guilds.js', guildsSrc]];
+  const reqRe = /const\s*\{([^}]+)\}\s*=\s*require\(\s*'\.\/(guild-[a-z-]+)(?:\.js)?'\s*\)/g;
+  for (const [, names, file] of guildsSrc.matchAll(reqRe)) {
+    const src = readFileSync(join(MOD_DIR, `${file}.js`), 'utf8');
+    for (const name of names.split(',').map((n) => n.trim()).filter(Boolean)) {
+      const start = src.search(new RegExp(`\\n(?:async\\s+)?function\\s+${name}\\b`));
+      assert.ok(start >= 0, `guard scan found function ${name} in ${file}.js`);
+      const rest = src.slice(start + 1);
+      const end = rest.search(/\n(?:async\s+)?function\s|\nmodule\.exports/);
+      sources.push([`${file}.js:${name}`, end < 0 ? rest : rest.slice(0, end)]);
+    }
+  }
+  const used = new Set();
+  const useRe = /\b(?:FROM|JOIN|INTO|UPDATE)\s+(platform_identity_[a-z0-9_]+)/gi;
+  for (const [, src] of sources) for (const m of src.matchAll(useRe)) used.add(m[1]);
+  const created = new Set();
+  const createRe = /CREATE TABLE IF NOT EXISTS\s+(platform_identity_[a-z0-9_]+)/gi;
+  for (const f of SETUP_MIGRATIONS) for (const m of migrationSql(f).matchAll(createRe)) created.add(m[1]);
+  const scanned = sources.map(([n]) => n);
+  assert.ok(scanned.includes('guild-totals.js:readGuildTotals'), `guard scan followed guilds.js's imports: ${scanned.join(', ')}`);
+  for (const t of ['platform_identity_guilds', 'platform_identity_guild_totals']) {
+    assert.ok(used.has(t), `guard scan saw ${t} (found: ${[...used].join(', ')})`);
+  }
+  const missing = [...used].filter((t) => !created.has(t));
+  assert.deepEqual(missing, [], `SETUP_MIGRATIONS creates no table for: ${missing.join(', ')}`);
+  console.log(`  ok  setup migrations create every table guilds.js uses (${used.size} tables; ${scanned.join(' + ')})`);
+}
+
 const pool = new Pool({ connectionString: process.env.DATABASE_URL || undefined });
 try {
   await pool.query('SELECT 1');
@@ -74,14 +124,8 @@ const openRows = async (slug, gid) => (await q(
 const pendingId = async (slug, gid) => (await openRows(slug, gid)).find((r) => r.status === 'pending')?.id;
 
 try {
-  // The migrations this domain reads, all idempotent: accounts + consent,
-  // handles, privacy, terms, connections (addressing), and guilds.
-  for (const f of [
-    'platform_identity_001_tables.sql', 'platform_identity_007_profile_consent.sql',
-    'platform_identity_008_handle.sql', 'platform_identity_012_account_privacy.sql',
-    'platform_identity_015_connections.sql', 'platform_identity_019_terms_acceptance.sql',
-    'platform_identity_025_guilds.sql',
-  ]) await q(migrationSql(f));
+  // The migrations this domain reads — see SETUP_MIGRATIONS above.
+  for (const f of SETUP_MIGRATIONS) await q(migrationSql(f));
   await q(migrationSql('platform_identity_025_guilds.sql')); // re-runnable
   await cleanup();