@bongos/core 1.21.4 → 1.21.6

package/modules/provisioning/core-upgrade.js

@@ -250,14 +250,22 @@ function makeCoreUpgradeHandler({ provisioning, pool, parseId, validateOrRespond
  * and not asking it is what keeps the one comparison in the system (the runner's channel
  * resolution) the only one that can be wrong.
  *
- * An unknown `recommended` — the registry could not be read — leaves a failure STANDING.
- * Not knowing what is on offer is not evidence that the box recovered, and the direction
- * to fail in is showing an old failure, never hiding a live one.
+ * An UNREAD registry — `registryRead` false, the snapshot's `available` empty — leaves a
+ * failure STANDING. Not knowing what is on offer is not evidence that the box recovered,
+ * and the direction to fail in is showing an old failure, never hiding a live one. A
+ * registry that answered with nothing on offer is different: the box is current, and a
+ * failure about some other version is history (task 1004534).
  */
-function lastMoveSuperseded(target, served, recommended) {
+function lastMoveSuperseded(target, served, recommended, registryRead = false) {
   if (!target) return false;
   if (served && String(served) === String(target)) return true;
-  return !!(recommended && String(recommended) !== String(target));
+  if (recommended) return String(recommended) !== String(target);
+  // NOTHING ON OFFER FROM A REGISTRY THAT ANSWERED is an up-to-date box, not an unknown
+  // (task 1004534). The snapshot stores an empty `available` when the registry could not
+  // be read, so only that case leaves the failure standing. On 2026-10-02 cloudbongos
+  // served 1.21.5 with nothing newer in its rule, and a day-old failure about 1.20.73
+  // still led its /deploy page because a null recommendation was read as "unknown".
+  return !!(registryRead && served);
 }
 
 /**
@@ -371,7 +379,7 @@ function previewFromSnapshot(inst, snap, openIntent, lastMove) {
       // already moved past (task 1004172 — lastMoveSuperseded says why at length). The
       // CLIENT must not work this out: the page's standing rule is that it compares no
       // versions, and this is a version question wearing a different hat.
-      superseded: lastMoveSuperseded(lastMove.target_version, served, recommended),
+      superseded: lastMoveSuperseded(lastMove.target_version, served, recommended, available.length > 0),
       // Truncated because it reaches a DOM and upgrade.js's refusals can carry a whole
       // `git status` (the dirty-tree one lists every file). Never set on a DONE move:
       // a done row's last_error is the note below, and a move that worked is not an error.
@@ -468,6 +476,25 @@ function updateChannelOf(inst) {
   return UPDATE_CHANNELS.includes(c) ? c : DEFAULT_UPDATE_CHANNEL;
 }
 
+/**
+ * THIS hall's own update rule — the control-plane row's — for the offers the core makes
+ * outside /deploy: Settings → Software update and the hall's update banner (task 1004535).
+ * Those live in the core, which cannot read a module's table, so this is handed to them
+ * through the `provisioning.selfUpdateChannel` seam. Before it they asked with the platform
+ * default (patch) while the runner and the sweep followed the stored rule (minor on
+ * cloudbongos), so a step-up release would have read "up to date" there as it installed.
+ * null — no row, an unknown value, a failed read — means "use the default"; never throws.
+ */
+async function selfUpdateChannel(db) {
+  try {
+    const { rows } = await db.query("SELECT update_channel FROM provisioning_instances WHERE hosting_shape = 'control-plane' LIMIT 1");
+    const c = rows[0] && rows[0].update_channel;
+    return UPDATE_CHANNELS.includes(c) ? c : null;
+  } catch {
+    return null;
+  }
+}
+
 /**
  * POST /provisioning/instances/:id/update-channel — set how far this project's core
  * may move (task 1004445). Body: { channel: 'pinned' | 'patch' | 'minor' }.
@@ -518,5 +545,5 @@ function makeUpdateChannelHandler({ provisioning, pool, parseId, validateOrRespo
   };
 }
 
-module.exports = { UPDATE_CHANNELS, DEFAULT_UPDATE_CHANNEL, updateChannelOf, makeUpdateChannelHandler, CORE_UPGRADE_FROM, lastCoreMove, lastMoveSuperseded, parseRepoNote, preflightForOffer, UPGRADE_SHAPES, VERSION_RE, isCoreVersion, coreUpgradeFault, enqueueCoreUpgrade, makeCoreUpgradeHandler, previewFromSnapshot, makeCoreUpgradePreviewHandler, makeControlPlaneHandler };
+module.exports = { UPDATE_CHANNELS, DEFAULT_UPDATE_CHANNEL, updateChannelOf, selfUpdateChannel, makeUpdateChannelHandler, CORE_UPGRADE_FROM, lastCoreMove, lastMoveSuperseded, parseRepoNote, preflightForOffer, UPGRADE_SHAPES, VERSION_RE, isCoreVersion, coreUpgradeFault, enqueueCoreUpgrade, makeCoreUpgradeHandler, previewFromSnapshot, makeCoreUpgradePreviewHandler, makeControlPlaneHandler };
 

package/modules/provisioning/module.json

@@ -35,7 +35,8 @@
     "provisioning.instanceState",
     "provisioning.projectPlanets",
     "provisioning.projectOwnedBy",
-    "provisioning.projectPublishIdentity"
+    "provisioning.projectPublishIdentity",
+    "provisioning.selfUpdateChannel"
   ],
   "consumes": []
 }

package/modules/provisioning/seams.js

@@ -6,6 +6,7 @@
 const api = require('../../src/module-api');
 const { pool } = api;
 const provisioning = require('./provisioning');
+const { selfUpdateChannel } = require('./core-upgrade');
 
 // The `provisioning.projectPublishIdentity` port (task 1003578, ADR 0247 D4): the name and
 // description the publish gate judges, for the control-plane project a hub catalog row was
@@ -49,6 +50,7 @@ function registerProvisioningSeams() {
   api.registerProvider('provisioning.projectPlanets', (hosts) => provisioning.planetChoicesForHosts(pool, hosts));
   api.registerProvider('provisioning.projectOwnedBy', (target) => provisioning.projectOwnedBy(pool, target));
   api.registerProvider('provisioning.projectPublishIdentity', (target) => projectPublishIdentity(pool, target));
+  api.registerProvider('provisioning.selfUpdateChannel', () => selfUpdateChannel(pool));
 }
 
 module.exports = { registerProvisioningSeams, projectPublishIdentity };

package/modules/public-landing/public/assets/cosmos.css

@@ -1232,27 +1232,7 @@ p.sec-p{font-size:var(--fs-lede);font-weight:500;color:var(--ink-soft);line-heig
 .filters button:not([aria-pressed="true"]) .n{color:var(--ink-faint);}
 .mineEmpty{font-size:14.5px;font-weight:600;color:var(--ink-soft);padding:10px 0 22px;}
 
-/* ── the create rail ── */
-.steps{display:flex;align-items:flex-start;margin-bottom:26px;}
-.steps li{flex:1;display:flex;flex-direction:column;align-items:center;gap:8px;position:relative;list-style:none;}
-.steps li:not(:first-child)::before{content:"";position:absolute;top:15px;right:50%;width:100%;height:3px;
-  background:var(--line);margin-right:15px;border-radius:2px;}
-/* the rail's marks are NON-TEXT at WCAG 1.4.11's 3:1, and the chrome world's
-   --accent measures 2.10:1 on the card — so the ring and the connector take
-   --accent-deep (5.77:1 on the card, and the derived bright twin in dark). The
-   done step's FILL stays --accent with --accent-on ink on it (task 1003298). */
-.steps li.done:not(:first-child)::before{background:var(--accent-deep);}
-.steps .snum{width:32px;height:32px;border-radius:50%;border:3px solid var(--line);background:var(--bg-card);
-  display:flex;align-items:center;justify-content:center;font-family:var(--font-display);font-weight:700;
-  font-size:14px;color:var(--ink-faint);position:relative;z-index:1;}
-.steps li.done .snum{border-color:var(--accent-deep);background:var(--accent);color:var(--accent-on);}
-.steps li.now .snum{border-color:var(--accent-deep);color:var(--accent-deep);}
-.steps .slbl{font-size:12.5px;font-weight:700;color:var(--ink-faint);}
-.steps li.now .slbl,.steps li.done .slbl{color:var(--ink-soft);}
-.steps li[role=button]{cursor:pointer;}
-.steps li[role=button]:focus-visible{outline:2px solid var(--accent);outline-offset:3px;border-radius:8px;}
-.createSplit{display:grid;grid-template-columns:1fr 300px;gap:var(--pad-md);align-items:center;}
-@media (max-width:840px){.createSplit{grid-template-columns:1fr;}.createSplit .bongoCell{display:none;}}
+.createSplit{display:block;}
 
 /* ── the honest empty / not-available-here state. A child instance does not
    provision, so it must SAY so rather than fall into the generic alert. ── */
@@ -1600,28 +1580,10 @@ p.sec-p{font-size:var(--fs-lede);font-weight:500;color:var(--ink-soft);line-heig
    ═══════════════════════════════════════════════════════════════════════ */
 #view-new .wrap{max-width:1180px;}
 #view-new .card{background:none;border-radius:0;box-shadow:none;padding:34px 0 60px;margin:0;}
-/* the six-step strip as the rail: six hairlines, a 7px dot, one lit step on the
-   accent with its halo, the number in the display voice, the name in the label
-   face; a step already answered (role=button) stays a way back */
-#view-new .steps{display:grid;grid-template-columns:repeat(10,1fr);gap:0 10px;align-items:start;margin:0 0 40px;}
-#view-new .steps li{display:block;position:relative;border-top:1px solid var(--rule);padding:12px 0 0;gap:0;}
-#view-new .steps li::before{content:"";position:absolute;top:-4px;left:0;right:auto;width:7px;height:7px;margin:0;border-radius:50%;border:1px solid var(--rule);background:var(--bg);}
-#view-new .steps .snum{display:block;width:auto;height:auto;border:0;border-radius:0;background:none;font-family:var(--font-display);font-weight:300;font-size:22px;letter-spacing:-.02em;line-height:1.1;color:var(--ink-faint);margin-bottom:2px;}
-#view-new .steps .slbl{display:block;font-family:var(--label-face);font-size:var(--label-size);font-weight:400;letter-spacing:var(--label-space);text-transform:uppercase;line-height:1.3;color:var(--ink-faint);}
-#view-new .steps li.done{border-top-color:var(--ink-soft);}
-#view-new .steps li.done::before{background:var(--ink-soft);border-color:var(--ink-soft);}
-#view-new .steps li.done .snum,#view-new .steps li.done .slbl{color:var(--ink-soft);background:none;}
-#view-new .steps li.now{border-top-color:var(--accent);}
-#view-new .steps li.now::before{background:var(--accent);border-color:var(--accent);outline:4px solid color-mix(in srgb,var(--accent) 22%,transparent);}
-#view-new .steps li.now .snum,#view-new .steps li.now .slbl{color:var(--ink);}
-#view-new .steps li[role=button]:hover .slbl{color:var(--ink);}
-/* the step: the title lowercase in the display voice, one clause, the fine
-   print in the body face; the bongo pair beside it (the owner's one mark on
-   every surface), its halo gone */
-#view-new .createSplit{align-items:start;gap:48px;}
-#view-new .bongoCell{padding-top:60px;}
-#view-new .bongos .glow{display:none;}
-#view-new .panel h1{font-weight:300;font-size:clamp(28px,3.4vw,44px);letter-spacing:-.035em;line-height:1.04;text-transform:lowercase;color:var(--ink);text-shadow:none;margin:0 0 10px;max-width:18ch;text-wrap:balance;}
+/* the screen: the title in the display voice at the design of record's light weight and
+   sentence case (task 1004504), one clause, the fine print in the body face — over the
+   night room the page draws behind it */
+#view-new .panel h1{font-weight:200;font-size:clamp(32px,3.8vw,52px);letter-spacing:-.035em;line-height:1.05;text-transform:none;color:var(--ink);text-shadow:none;margin:0 0 10px;max-width:18ch;text-wrap:balance;}
 #view-new .panel .lede{font-size:15.5px;font-weight:400;line-height:1.5;color:var(--ink-soft);margin:0 0 26px;max-width:62ch;}
 #view-new .panel .lede strong,#view-new .panel .lede em{color:var(--ink);font-weight:500;font-style:normal;}
 /* the done clause's link to Your projects clears the 24px hit floor as a box (an inline's rect is its content box) */
@@ -1640,7 +1602,7 @@ p.sec-p{font-size:var(--fs-lede);font-weight:500;color:var(--ink-soft);line-heig
 #view-new .linklike:hover{color:var(--ink);}
 /* the doors: pills, lowercase, the accent only on the one that acts; back and
    skip as hairline pills; the GitHub sign-in inverted; no lift, no shadow */
-#view-new .btn{min-height:44px;padding:0 22px;font-family:var(--font-body);font-weight:500;font-size:15px;text-transform:lowercase;white-space:nowrap;box-shadow:none;transition:border-color .15s ease,background .15s ease,color .15s ease;}
+#view-new .btn{min-height:44px;padding:0 22px;font-family:var(--font-body);font-weight:500;font-size:15px;text-transform:none;white-space:nowrap;box-shadow:none;transition:border-color .15s ease,background .15s ease,color .15s ease;}
 #view-new .btn:hover{transform:none;box-shadow:none;background:color-mix(in srgb,var(--accent) 88%,var(--ink));}
 #view-new .btn:active{transform:none;}
 #view-new .btn:disabled{background:none;border:1px solid var(--rule-soft);color:var(--ink-faint);}
@@ -1659,9 +1621,3 @@ p.sec-p{font-size:var(--fs-lede);font-weight:500;color:var(--ink-soft);line-heig
 #view-new .inviteBox{margin-top:34px;}
 #view-new .inviteBox .finePrint{margin-top:10px;}
 #view-new #wizInviteLater{margin-top:14px;}
-/* one fold for the whole wizard: 840 is where the page's bands and ledger stack
-   (cosmos's createSplit collapse), so the rail folds with them, not before them */
-@media (max-width:840px){
-  #view-new .steps{grid-template-columns:repeat(3,1fr);gap:18px 10px;margin-bottom:30px;}
-  #view-new .steps .snum{font-size:18px;}
-}