@bongos/core 1.21.16 → 1.21.18

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.21.16",
-  "core_contract": "1.21.16",
-  "source_commit": "abd20c4cc71e944d231ab474f59cd6aa2c66ccc8",
+  "core_version": "1.21.18",
+  "core_contract": "1.21.18",
+  "source_commit": "bee4e7e04fad8517d87346783aa3f49b9d03a0f3",
   "source_ref": "HEAD",
-  "built_at": "2026-10-02T20:09:34.296Z",
+  "built_at": "2026-10-02T20:35:35.964Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 580,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 3501,
-  "tree_sha256": "59790b289cc2c7e077c0537945281043f1dbdabad4c82124fe1f4f807edf26db",
+  "tree_sha256": "3721b79de240e047a71c788ce6a9954cb1d1a0e633c23110eecdd53bf3d7c8e1",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -2282,7 +2282,7 @@
     {
       "path": "docs/adr/0364-repo-access-is-asked-at-sign-in-and-held-for-the-session.md",
       "mode": "0000644",
-      "sha256": "ed10b87275d0c3fbaa665467dfd0305274adbbc85556a5162346b3a2537a78ee"
+      "sha256": "882a01ac32ecddcb9b6f3dd88792e34164d7daafae4413eb3f64b502c0c59ddd"
     },
     {
       "path": "docs/adr/README.md",
@@ -2322,12 +2322,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "12ef21f6a7c67a603fe0fe2f7a67b461aa6823b930b2119aedd0330412a4245e"
+      "sha256": "8c9519abd611e1cc8594886dbad00c943cd489a11abce7426d2dcfb2be1c85d9"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "a0000bd2fe2852e37582c2ff0232364b77d84a5056d80deaa713799b080ce49d"
+      "sha256": "f79b4771fdf0c0dd9f0269b47cdcf7bd0ae671c3c9ff5def984b995d1509849b"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2832,7 +2832,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "f833fe8a3166735f427b7b8b6d22ed6ce751bc815262edf04b11572b25c680ba"
+      "sha256": "068a0ab9e6411f8ea5048c8ca46a3b211b2fadbfc6187d7731efb192936257b1"
     },
     {
       "path": "docs/modules-contract.md",
@@ -2922,7 +2922,7 @@
     {
       "path": "docs/page-readings.json",
       "mode": "0000644",
-      "sha256": "536c5bbddab40e047204586e55f23057e9a8b4ae7a3c8cb9f96926df543ad423"
+      "sha256": "a2597727f6b5a706107cef3f248d1f568d7ceb5c4bc08a7111e2a1cf36e6d806"
     },
     {
       "path": "docs/project-context.template.md",
@@ -6082,12 +6082,12 @@
     {
       "path": "modules/hall-ui/public/settings.html",
       "mode": "0000644",
-      "sha256": "f3b84c412ff16b8c0f83f423b9486fddffdd66211d7057bff2f796943790bce2"
+      "sha256": "44da21a466633f96c2eca5515a679fad31421b5442adbec9fc2a5c59b152e42b"
     },
     {
       "path": "modules/hall-ui/public/settings.js",
       "mode": "0000644",
-      "sha256": "16de94af6ec2f43e8096e1b9c85826863391193539e40f4b813b240689e2aa2b"
+      "sha256": "bb282ae096d880185aeb8f0e954286743f49fb256f52a598302d43333e54c56c"
     },
     {
       "path": "modules/hall-ui/public/settings.states.json",
@@ -9042,7 +9042,7 @@
     {
       "path": "modules/public-landing/public/projects.html",
       "mode": "0000644",
-      "sha256": "0e6ba49becc74c5a73f3e0b1babec2521d6a84a3b8c48e116c675c05005c2d1e"
+      "sha256": "b1fabd6091511bdaefe83dea9bf49ba4da6da366f111c818b1143b007c0daf8c"
     },
     {
       "path": "modules/public-landing/public/projects.probes.json",
@@ -9767,12 +9767,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "84060eaa86f290bb1362b6223dbab18a5427344ae4fd40069ec8d9322d20062c"
+      "sha256": "336b585cbe4f1ea50ab26d5109b24b5474da730864c8801b8681703e460a1885"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "d0ffbee20f0738db3b4dc2d0b3a898e33b934081b9d6dff66020589764b7f432"
+      "sha256": "673e0110ef2d204c6f44f53c420a9b9e7f2a9d277c549ec5638783325bcf65a2"
     },
     {
       "path": "public-docs/index.html",
@@ -9792,7 +9792,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "e8042901e3e7969c68c77ba31cced93dce76e589df6fa7ca44816e8de56c4d0b"
+      "sha256": "63ff995ad35f74beb22b5c0215e5b53ce3c7b8f8a7574eb60e32c62b333581a2"
     },
     {
       "path": "scripts/bongos-mcp.js",
@@ -12017,7 +12017,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "c818a54f4b5f23114851245f6f5882fbd37a09a2692ec5cc96e252df65241911"
+      "sha256": "3f8a4cc467a3b8c79a19b98c8c13fc2b8263f1c2eda1f1b053398fd54c476a76"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -16892,7 +16892,7 @@
     {
       "path": "tests/sound_player.mjs",
       "mode": "0000644",
-      "sha256": "8d65bc64902312731e6b194af5be6336bcb59882adb930299cf43cf083977ca1"
+      "sha256": "d18a3314b7780d09cd221a5791d9a9fb0243f16b2197f4c5de0777c691ae3d02"
     },
     {
       "path": "tests/sound_prefs.mjs",
@@ -17452,7 +17452,7 @@
     {
       "path": "tests/wizard_draft_resume.mjs",
       "mode": "0000644",
-      "sha256": "2a5891107a8ad920ec3badff34ddd1ab96a7685a11884c2709747f944b0d5916"
+      "sha256": "bbdd02a33a1d9536d928429b3656a0bfbce2ef1ee6d35c42423882b334c15b1d"
     },
     {
       "path": "tests/wizard_front_door.mjs",
@@ -17482,7 +17482,7 @@
     {
       "path": "tests/wizard_six_screens.mjs",
       "mode": "0000644",
-      "sha256": "127cb59c2c7db6f17e1818451f937b908dd5e142abc11c47105b856ca76d5f92"
+      "sha256": "380e8482baef96564479e551c85454a6354ea3939f7deefc0349dde2e3c2d53d"
     },
     {
       "path": "tests/work_title_wrap.mjs",

package/docs/adr/0364-repo-access-is-asked-at-sign-in-and-held-for-the-session.md

@@ -19,7 +19,7 @@ The owner reported that "Allow repo access" in the create wizard's review step t
 
 **D2 — The token lives as long as the session it arrived with.** The callback passes the web session's remaining life (30 days today) to `upsertGithubToken` as its TTL. The one-hour constant remains only as the fallback for when no session expiry is known. A **web** sign-out deletes the token. A CLI logout (bearer header) leaves it alone, because the browser session that granted it is still live. Offboarding and a GitHub-side revocation (401) still delete it, as before.
 
-**D3 — A GitHub round-trip never loses the founder's place.** If a draft sits at a wizard step (1–5) beside a stored create, the draft wins on any non-deliberate arrival: a reload, or a return from GitHub. The earlier project stays one click away on the resume line. A deliberate nav and the resume link still go through `enterCreated()` exactly as task 1003503 built it. The review step's "Allow repo access" offer remains as the backup for a session that predates this change.
+**D3 — A GitHub round-trip never loses the founder's place.** If a draft sits at a wizard step (1–5) beside a stored create, the draft wins on any non-deliberate arrival: a reload, or a return from GitHub. The earlier project stays one click away on the resume line. A deliberate nav and the resume link still go through `enterCreated()` exactly as task 1003503 built it. The review step's "Allow repo access" offer was kept as a backup at first. The amendment below removes it.
 
 ## Consequences
 
@@ -28,3 +28,7 @@ The owner reported that "Allow repo access" in the create wizard's review step t
 - Tests: `tests/github_token_session_life.mjs` (D2, over the real auth router), `tests/wizard_draft_resume.mjs` slice 4 (D3), and the updated sign-in href pins in `landing_page`, `hub_account_page` and `projects_hub_pre_uat`.
 
 Rejected: keeping the ask inside the wizard and moving it to the first screen. That is still a stop in the middle of a flow, and the owner preferred sign-in. Silently refreshing the token in the background: it needs a GitHub round-trip, which is a navigation, not a background call.
+
+## Amendment — no repo-access button at all ([task 1004555](https://cloudbongos.com/builders#/task/1004555), owner 2026-10-02)
+
+The owner did not want to see the review step's "Allow repo access" box at all. When the repo probe finds no stored token, the wizard now saves the draft and makes **one** automatic repo sign-in round-trip. For anyone who has already approved the scope, GitHub answers at once, and the founder lands back on the same step (D3). The hop is marked once per tab session: a second miss falls back to the manual owner/repo fields with one plain line, rather than looping, and a probe that finds access clears the mark. The `#ghConnect` box, its explanation, the "enter it manually" toggle and its way back are gone. The plain-words explanation of the scope now lives only on GitHub's own screen at sign-in.