@bongos/core 1.24.76 → 1.24.77

package/scripts/bongos/autobongos-run.js

@@ -265,6 +265,10 @@ const WORKER_ENV_ALLOW = [
   // missing here would be set on the host and silently absent in the worker.
   ...claudeBinEnvNames(),
   'XDG_CONFIG_HOME',
+  // The runner's own config root (task 1005095): its login, heartbeat and run log
+  // sit apart from the builder's own CLI session on the same device, and a worker
+  // that did not inherit this would claim and ship as the wrong session.
+  'BONGOS_CONFIG_ROOT',
   // THE WORKER'S OWN CREDENTIAL, and it has to be here (task 1003907, found by
   // running it). On a desktop, the claude CLI authenticates from the credential
   // store under USERPROFILE/HOME, which are already allowed - so this list looked
@@ -545,7 +549,9 @@ function queueGatedRow(queueGate, now) {
 async function iteration(opts, deps = {}) {
   const runCmd = deps.run || run;
   const spawnWork = deps.spawnWorker || spawnWorker;
-  const readGauge = deps.gauge || (() => gauge.evaluate());
+  // absentMeansGo: a device with no gauge file at all works until the usage limit
+  // stops it (task 1005095) — see decideCapacity in modules/autonomy/gauge.js.
+  const readGauge = deps.gauge || (() => gauge.evaluate(undefined, { absentMeansGo: true }));
   const pick = deps.pickTask || pickTask;
   const log = deps.record || record;
 

package/scripts/bongos/autonomy-gauge.js

@@ -26,9 +26,14 @@ function gaugePath() {
   catch (_) { return null; }
 }
 
+// null means there is NO file. A file that exists but cannot be read or parsed
+// comes back as the string 'unreadable', which the decision treats as a bad
+// reading (unknown) and never as "this device has no gauge" (task 1005095).
 function loadGauge(p) {
   if (!p) return null;
-  try { return JSON.parse(fs.readFileSync(p, 'utf8')); } catch (_) { return null; }
+  let text;
+  try { text = fs.readFileSync(p, 'utf8'); } catch (e) { return e && e.code === 'ENOENT' ? null : 'unreadable'; }
+  try { return JSON.parse(text); } catch (_) { return 'unreadable'; }
 }
 
 function readConfig() {
@@ -47,9 +52,12 @@ function readConfig() {
   return c;
 }
 
-function evaluate(nowEpochS = Math.floor(Date.now() / 1000)) {
+// `overrides` is merged over the env config. The supervisor passes
+// { absentMeansGo: true } (task 1005095); this CLI passes nothing, so a missing
+// file is still UNKNOWN here.
+function evaluate(nowEpochS = Math.floor(Date.now() / 1000), overrides = {}) {
   const p = gaugePath();
-  return { path: p, decision: decideCapacity({ gauge: loadGauge(p), now: nowEpochS, config: readConfig() }) };
+  return { path: p, decision: decideCapacity({ gauge: loadGauge(p), now: nowEpochS, config: { ...readConfig(), ...overrides } }) };
 }
 
 async function main(argv) {

package/scripts/bongos/cli-lib.js

@@ -333,7 +333,11 @@ function sessionStoreDir() {
   // Directory name deliberately NOT 'sessions': that is a live module key, and ADR 0083
   // §Decision #4 forbids naming one in shared machinery. 'instances' is the truer name anyway —
   // one file per instance is exactly what this holds.
-  return path.join(os.homedir(), '.config', ic.FALLBACK_DIR, 'instances');
+  // Under the config ROOT, which is ~/.config unless BONGOS_CONFIG_ROOT moves it
+  // (task 1005095) — so an Autobongos runner's login is never filed into, or read
+  // out of, the builder's own store. The root is not the brand: the anchor is
+  // still the same fixed dir name for every checkout that shares a root.
+  return path.join(ic.configRoot(), ic.FALLBACK_DIR, 'instances');
 }
 
 // The store's filename for an instance, derived from its api_base host. Returns null when the base

package/scripts/gds/autobongos-bootstrap.ps1

@@ -0,0 +1,8 @@
+# scripts/gds/autobongos-bootstrap.ps1 -- @bongos-forwarder (task 1004848). Generated by
+# scripts/bongos/codemod-rename-scripts-gds.js; do not edit.
+# The real script is scripts/bongos/autobongos-bootstrap.ps1. This forwarder keeps callers that still name
+# the old path working, and warns once so they get repointed. Task 1003706 removes it.
+if (-not $env:BONGOS_FORWARDER_WARNED) { Write-Warning '[bongos] scripts/gds/autobongos-bootstrap.ps1 has moved to scripts/bongos/autobongos-bootstrap.ps1. This old path still works for now, but update whatever called it. The forwarders in scripts/gds/ are removed in a later release.' }
+$env:BONGOS_FORWARDER_WARNED = '1'
+& (Join-Path $PSScriptRoot '..\bongos\autobongos-bootstrap.ps1') @args
+exit $LASTEXITCODE

package/scripts/gds/autobongos-bootstrap.sh

@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+# scripts/gds/autobongos-bootstrap.sh — @bongos-forwarder (task 1004848). Generated by
+# scripts/bongos/codemod-rename-scripts-gds.js; do not edit.
+# The real script is scripts/bongos/autobongos-bootstrap.sh. This forwarder keeps callers that still name
+# the old path working, and warns once so they get repointed. Task 1003706 removes it.
+if [ -z "${BONGOS_FORWARDER_WARNED:-}" ]; then echo "[bongos] scripts/gds/autobongos-bootstrap.sh has moved to scripts/bongos/autobongos-bootstrap.sh. This old path still works for now, but update whatever called it. The forwarders in scripts/gds/ are removed in a later release." >&2; fi
+export BONGOS_FORWARDER_WARNED=1
+exec bash "$(dirname "$0")/../bongos/autobongos-bootstrap.sh" "$@"

package/scripts/gds/autobongos-host.js

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+// scripts/gds/autobongos-host.js — @bongos-forwarder (task 1004848). Generated by
+// scripts/bongos/codemod-rename-scripts-gds.js; do not edit.
+// The real script is scripts/bongos/autobongos-host.js. This forwarder keeps callers that still name
+// the old path working, and warns once so they get repointed. Task 1003706 removes it.
+'use strict';
+require('../bongos/forwarder.js').forward(module, 'autobongos-host.js');

package/src/instance-config.js

@@ -112,17 +112,35 @@ function resolveApiBase({ session, env = process.env, b = safeBrand() } = {}) {
   return fromSession || defaultApiBase(b);
 }
 
+// The folder every config dir lives under: ~/.config, unless BONGOS_CONFIG_ROOT
+// names another one (task 1005095).
+//
+// WHY AN OVERRIDE. An Autobongos runner on a builder's own laptop holds a login
+// of its own (src/bongos/runner-login.js), and it must not share a session file
+// with the builder's CLI: one slot means adding the laptop as a runner signs the
+// builder's own tools out, and removing the runner signs them out again. The
+// runner's device program (scripts/bongos/autobongos-host.js) sets this for the
+// supervisor and every worker it starts, so their session, heartbeat and run log
+// sit apart — and with a root of its own the LEGACY dirs below are not found
+// either, so the runner can never fall back to the builder's own session.
+// One fixed name, read directly: the branded-prefix lookup needs the brand, and
+// this decides where the brand's own dir goes.
+function configRoot(env = process.env) {
+  const over = typeof env.BONGOS_CONFIG_ROOT === 'string' ? env.BONGOS_CONFIG_ROOT.trim() : '';
+  return over ? path.resolve(over) : path.join(os.homedir(), '.config');
+}
+
 // Absolute path to the instance config dir — the WRITE target and first read.
 function configHome(b = safeBrand()) {
-  return path.join(os.homedir(), '.config', configDirName(b));
+  return path.join(configRoot(), configDirName(b));
 }
 
 // All config dirs to try on READ, configured first then legacy, de-duped.
 function configReadDirs(b = safeBrand()) {
-  const home = os.homedir();
+  const root = configRoot();
   const dirs = [configHome(b)];
   for (const d of LEGACY_DIRS) {
-    const p = path.join(home, '.config', d);
+    const p = path.join(root, d);
     if (!dirs.includes(p)) dirs.push(p);
   }
   return dirs;
@@ -367,6 +385,7 @@ module.exports = {
   envPrefix,
   defaultApiBase,
   resolveApiBase,
+  configRoot,
   configHome,
   configReadDirs,
   configPath,

package/src/module-api.js

@@ -81,7 +81,7 @@ const { sleep } = require('./sleep');
 // MAJOR (see allowBoxScope below): passes the request through untouched.
 function deprecatedNoopMiddleware(_req, _res, next) { next(); }
 
-const CORE_VERSION = '1.24.76'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.24.77'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('discord'); log.info('mounted');