@bongos/core 1.24.78 → 1.24.79

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/bongos/package-core.js",
-  "core_version": "1.24.78",
-  "core_contract": "1.24.78",
-  "source_commit": "5669446151f5810f23c227cbf1ea4ceccd3a332c",
+  "core_version": "1.24.79",
+  "core_contract": "1.24.79",
+  "source_commit": "405acb3b1cc879b556f7ddb1e967e06b62d233b2",
   "source_ref": "HEAD",
-  "built_at": "2026-11-10T02:56:51.808Z",
+  "built_at": "2026-11-10T03:09:43.494Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 642,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 4608,
-  "tree_sha256": "99fde7f5962423cd5cce767bb2aa3861f688cb5f8ac5b7ad4e734ff75bd40647",
+  "tree_sha256": "d19920ebcb60573097ef6c5da63bba71f63d3de057ef78e0dc8e7a099b8cca7e",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -3007,7 +3007,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "ceb89d34ddaa5b27edd58306e04e150318644c31a77931cc2959a2312b26c7c2"
+      "sha256": "2d49ce9988bbc0a073d7ad7fe21d2c58b5fc941a66a479effc4d2390985ddb46"
     },
     {
       "path": "docs/modules-contract.md",
@@ -11977,12 +11977,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "f2c44c87ee45ef37d685bab5b1f94253855a89e0678bb2a0f8ca6dd6fc327509"
+      "sha256": "a8db2c589cc13f77ad9776d4d3dc47f32a750429107b7cfb9dba7966e846ad0c"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "830e97c57efe4aa5ed3c314e3ed963b901f64003993035c31684c7ce02b95d56"
+      "sha256": "790dafb2905894c20eaeab34117e51fd70e13a003ffa11041629bf74f6a1c6a1"
     },
     {
       "path": "public-docs/index.html",
@@ -12002,7 +12002,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "0059d6b66925ee0437087a29c3eb94544ed06dbc503921b41f8cbb1b90804ebc"
+      "sha256": "a411e653e79bf2669e0b39e09df38d5add210e641ab2019fd2b1fc254ed80274"
     },
     {
       "path": "scripts/bongos/CLAUDE.md",
@@ -12142,7 +12142,7 @@
     {
       "path": "scripts/bongos/autobongos-host.js",
       "mode": "0000755",
-      "sha256": "bfd216c8093cceffd1f3b76798acecc0a7cea25905613531ded01eca0763905f"
+      "sha256": "fa8cc6245fb0e6f5bd63e15314de796e396e5a0a8b7ab7817aefac2d69b26d95"
     },
     {
       "path": "scripts/bongos/autobongos-loop.js",
@@ -12282,7 +12282,7 @@
     {
       "path": "scripts/bongos/claude-materialize.js",
       "mode": "0000644",
-      "sha256": "7ed637b2fd547598334f71dff445e1db0859cf577c3f68eb5ef25a19b0f98cd4"
+      "sha256": "a57c52758fb1e135bf907ac5e8eadf8c5cb0bd24d0da2fecc4aac07d6d567fab"
     },
     {
       "path": "scripts/bongos/claude-md-template.js",
@@ -15997,7 +15997,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "c94b5a1e3ebdafc087668c3ebebaf71f1608229b384bc0b7d2486c4a3e8e71a7"
+      "sha256": "5aac32d3d3b7dceb4c3d8d83409290bbe01dacfa08029fc33b53db5df0c1b444"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -16557,7 +16557,7 @@
     {
       "path": "tests/autobongos_host.mjs",
       "mode": "0000644",
-      "sha256": "49d6efa36ed5389624317fa33119af28f4b7e87a9eaa3b4d4319f255dee7a4f2"
+      "sha256": "76bef425e2b3adcc4317b383636bdb3e81de64ae3e9fd2ae3ab09c5483bd8171"
     },
     {
       "path": "tests/autobongos_host_access.mjs",
@@ -17002,7 +17002,7 @@
     {
       "path": "tests/claude_materialize.mjs",
       "mode": "0000644",
-      "sha256": "60853c01b033364a69a6440a20486b818698b96c376c70bd03f9ffd0e4c2c00c"
+      "sha256": "f37bebbff686710507474f4de7d74856f56f9698ae82b45319a2005cc29979b1"
     },
     {
       "path": "tests/clawback_confirmed_backlog.mjs",

package/docs/module-api-changelog.md

@@ -3406,5 +3406,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.24.76 with no explicit bump. run 42735935883. (task 1002620)
   1.24.78 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.24.77 with no explicit bump. run 42746012589. (task 1002620)
+  1.24.79 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.24.78 with no explicit bump. run 42747422335. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.24.78",
+  "version": "1.24.79",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.24.78",
+      "version": "1.24.79",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.24.78",
+  "version": "1.24.79",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -11507,5 +11507,11 @@
       "id": "1005094",
       "text": "Running Autobongos on a device is now one button. In Settings, Add a device gives you one line to paste on any Windows PC or Mac; its card then appears by itself with a Run button. The button's face tells you what the device i"
     }
+  ],
+  "1.24.79": [
+    {
+      "id": "1005186",
+      "text": "Closed a gap opened by letting Autobongos run on any device. The runner now keeps its own sign-in in its own folder, and the rule that stops an AI session from opening sign-in files did not yet cover that folder. It does now,"
+    }
   ]
 }

package/scripts/bongos/autobongos-host.js

@@ -74,16 +74,31 @@ const LOG_ROTATE_BYTES = 20 * 1024 * 1024;
 function runnerHome(env = process.env, home = os.homedir(), repoRoot = REPO_ROOT) {
   if (env.AUTOBONGOS_HOME) return path.resolve(env.AUTOBONGOS_HOME);
   if (path.basename(repoRoot) === 'repo' && isRunnerCopy(repoRoot)) return path.dirname(repoRoot);
-  return path.join(home, '.cloudbongos-runner');
+  return path.join(home, RUNNER_DIR);
 }
 
-// hostPaths — every file this program owns, from one root. `config` is handed to
-// the supervisor as BONGOS_CONFIG_ROOT, which is what keeps its login apart.
+// The runner's folder in the person's home. Named once: the read-deny rule that
+// keeps agents out of the runner's login names this same folder
+// (scripts/bongos/claude-materialize.js RUNNER_CONFIG_DENY), and a test holds the
+// two together.
+const RUNNER_DIR = '.cloudbongos-runner';
+
+// hostPaths — every file this program owns. `configRoot` is handed to the
+// supervisor as BONGOS_CONFIG_ROOT, which is what keeps its login apart.
+//
+// THE LOGIN LIVES IN ONE PLACE ON EVERY DEVICE (task 1005186): configRoot is always
+// <home>/.cloudbongos-runner/config, WHATEVER AUTOBONGOS_HOME says. That variable
+// moves the runner's copy of the project, its logs and its lock; it does not move
+// the login. The reason is the deny rule: agents are refused reads under exactly
+// that folder, and a login that could be put somewhere else by an environment
+// variable would be a login the rule does not cover — on precisely the device
+// someone had customised. One runner per device already, so there is nothing a
+// second config folder would be for.
 function hostPaths(env = process.env, home = os.homedir()) {
   const root = runnerHome(env, home);
   return {
     root,
-    configRoot: path.join(root, 'config'),
+    configRoot: path.join(home, RUNNER_DIR, 'config'),
     logDir: path.join(root, 'logs'),
     log: path.join(root, 'logs', 'autobongos.log'),
     lock: path.join(root, 'host.json'),

package/scripts/bongos/claude-materialize.js

@@ -481,10 +481,29 @@ const STARTER_DENY_SECRETS = [
   'Read(**/*.pem)', 'Read(**/id_rsa*)', 'Read(**/id_ed25519*)',
 ];
 const SESSION_STORE_DENY = `Read(~/.config/${ic.FALLBACK_DIR}/instances/**)`;
+// An Autobongos runner keeps ITS OWN login and files in a folder of its own (task 1005095:
+// BONGOS_CONFIG_ROOT, so adding a laptop as a runner never touches the builder's CLI session).
+// That put the runner's session file, and the session store beside it, outside every rule above,
+// which all stop at ~/.config — so on a runner device a worker could open the file and read the
+// runner's login (task 1005186). The whole folder is denied rather than one file name: the
+// runner's heartbeat and run log sit there too and no agent has a reason to read any of it, and
+// a rule on the folder cannot be stepped around by a session file under a new name.
+// The folder name is the device program's (scripts/bongos/autobongos-host.js hostPaths); it is
+// spelled here rather than required from there because this file is the installer and must not
+// load the runner, and tests/claude_materialize.mjs fails if the two ever name different places.
+const RUNNER_CONFIG_DENY = 'Read(~/.cloudbongos-runner/config/**)';
+
+// The rules that name a FIXED place, whatever the instance is called.
+const FIXED_PLACE_DENY = [SESSION_STORE_DENY, RUNNER_CONFIG_DENY];
 
 // A checkout's settings.json takes the identity rebrand like every copied file, and the store's
 // dir is one of the core's `.config/<dir>` literals it rewrites. The store does not move with the
 // brand (task 1003741), so its rule is put back where the CLI reads it (task 1004155).
+//
+// The runner rule needs no putting back: the rebrand rewrites `.config/<core dir>` literals, and
+// the runner's folder is not one (measured: with the put-back removed, the three-brand case in
+// tests/claude_materialize.mjs still holds). That case is what would notice a future rebrand
+// rule broad enough to carry it off.
 function rebrandSettings(text, rebrand) {
   const moved = rebrand(SESSION_STORE_DENY);
   return rebrand(text).split(JSON.stringify(moved)).join(JSON.stringify(SESSION_STORE_DENY));
@@ -504,7 +523,7 @@ function credentialDeny(branding = {}) {
   return [
     ...STARTER_DENY_SECRETS,
     ...dirs.flatMap((dir) => credentialFiles.map((file) => `Read(~/.config/${dir}/${file})`)),
-    SESSION_STORE_DENY,
+    ...FIXED_PLACE_DENY,
   ];
 }
 

package/src/module-api.js

@@ -81,7 +81,7 @@ const { sleep } = require('./sleep');
 // MAJOR (see allowBoxScope below): passes the request through untouched.
 function deprecatedNoopMiddleware(_req, _res, next) { next(); }
 
-const CORE_VERSION = '1.24.78'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.24.79'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('discord'); log.info('mounted');

package/tests/autobongos_host.mjs

@@ -221,6 +221,21 @@ test('the supervisor runs under the runner\'s own config root, and keeps a gauge
   assert.equal(host.supervisorEnv({ AUTOBONGOS_GAUGE_FILE: '/set/by/hand' }, paths).AUTOBONGOS_GAUGE_FILE, '/set/by/hand');
 });
 
+test('AUTOBONGOS_HOME moves the runner\'s copy, logs and lock, and never the login', () => {
+  // The login must stay where the read-deny rule looks for it (task 1005186): a
+  // device someone customised is the last one that should fall outside the rule.
+  const home = path.join(tmp, 'fixed-login-home');
+  const standard = host.hostPaths({}, home);
+  const custom = host.hostPaths({ AUTOBONGOS_HOME: path.join(tmp, 'somewhere-else') }, home);
+  assert.equal(standard.configRoot, path.join(home, '.cloudbongos-runner', 'config'));
+  assert.equal(custom.configRoot, standard.configRoot, 'the same folder under the person\'s home, whatever the variable says');
+  assert.equal(custom.root, path.join(tmp, 'somewhere-else'));
+  assert.equal(custom.log, path.join(tmp, 'somewhere-else', 'logs', 'autobongos.log'));
+  assert.equal(custom.lock, path.join(tmp, 'somewhere-else', 'host.json'));
+  // And that is the folder the supervisor and its workers are pointed at.
+  assert.equal(host.supervisorEnv({ AUTOBONGOS_HOME: path.join(tmp, 'somewhere-else') }, custom).BONGOS_CONFIG_ROOT, standard.configRoot);
+});
+
 test('under BONGOS_CONFIG_ROOT every session path moves, and the builder\'s own session is not a fallback', () => {
   const root = fresh('cfgroot');
   const probe = `
@@ -636,7 +651,10 @@ test('the digest is read from the RUNNER’s run log: bare, the digest CLI looks
   assert.deepEqual(argv.slice(1), ['--all', '--json'], 'whatever the person passed is handed through');
 
   // Through the device program: the runner's night.
-  const viaHost = spawnSync(process.execPath, [HOST_JS, 'digest', '--all', '--json'], { encoding: 'utf8', env: { ...process.env, AUTOBONGOS_HOME: home, AUTOBONGOS_LOG_FILE: '' } });
+  // The login folder is always under the person's home (task 1005186), so the
+  // child is given this test's stand-in home: HOME on a Mac or Linux, USERPROFILE
+  // on Windows. Otherwise it would read the real one.
+  const viaHost = spawnSync(process.execPath, [HOST_JS, 'digest', '--all', '--json'], { encoding: 'utf8', env: { ...process.env, HOME: home, USERPROFILE: home, AUTOBONGOS_HOME: home, AUTOBONGOS_LOG_FILE: '' } });
   assert.equal(viaHost.status, 0, viaHost.stderr);
   assert.ok(viaHost.stdout.includes('424242'), 'the task the runner built is in it');
 

package/tests/claude_materialize.mjs

@@ -951,6 +951,69 @@ t("the core's OWN deny list covers every file the CLI reads a session from, and
   }
 });
 
+// ---- task 1005186: the runner's own login file is denied like the builder's ----
+// Task 1005095 moved an Autobongos runner's session, heartbeat and run log under a folder of its
+// own, so every deny rule above (all under ~/.config) stopped short of it and a worker on a
+// runner device could read the runner's login.
+const hostProgram = require('../scripts/bongos/autobongos-host.js');
+const RUNNER_RULE = 'Read(~/.cloudbongos-runner/config/**)';
+
+t('the runner deny rule names the folder the device program actually uses, however the runner was installed', () => {
+  // Asked of the device program with a stand-in home, so a renamed folder fails HERE rather
+  // than leaving a rule that guards a place nothing writes to.
+  const home = join(tmpdir(), 'runner-deny-home');
+  const ruleFor = (env) => `Read(~/${relative(home, hostProgram.hostPaths(env, home).configRoot).split(sep).join('/')}/**)`;
+  assert.equal(ruleFor({}), RUNNER_RULE, 'the default install');
+  // AUTOBONGOS_HOME moves the runner's copy, logs and lock. It must NOT move the login:
+  // a login an environment variable can relocate is one the rule does not cover.
+  for (const custom of [join(home, 'elsewhere'), join(tmpdir(), 'not-even-under-home'), join(home, '.cloudbongos-runner')]) {
+    const env = { AUTOBONGOS_HOME: custom };
+    assert.equal(ruleFor(env), RUNNER_RULE, `AUTOBONGOS_HOME=${custom}`);
+    assert.equal(hostProgram.hostPaths(env, home).root, custom, 'while the rest of the runner does move');
+  }
+});
+
+t('the runner deny rule covers the files a runner keeps there: its session, the store, its heartbeat', () => {
+  // The same cli-lib and supervisor a runner runs, under the runner's config root.
+  const home = join(tmpdir(), 'runner-deny-home');
+  const root = hostProgram.hostPaths({}, home).configRoot;
+  const probe = `
+    const cli = require(${JSON.stringify(join(ROOT, 'scripts', 'bongos', 'cli-lib.js'))});
+    const run = require(${JSON.stringify(join(ROOT, 'scripts', 'bongos', 'autobongos-run.js'))});
+    process.stdout.write(JSON.stringify([...cli.SESSION_READ_PATHS, cli.sessionStoreDir(), run.heartbeatPath(), run.logPath()]));`;
+  const r = require('node:child_process').spawnSync(process.execPath, ['-e', probe], { encoding: 'utf8', env: { ...process.env, BONGOS_CONFIG_ROOT: root, AUTOBONGOS_HEARTBEAT_FILE: '', AUTOBONGOS_LOG_FILE: '' } });
+  assert.equal(r.status, 0, r.stderr);
+  const files = JSON.parse(r.stdout);
+  assert.ok(files.length >= 5);
+  const guarded = `${root}${sep}`;   // what Read(<root>/**) matches
+  for (const f of files) assert.ok(f.startsWith(guarded), `${f} sits outside the denied folder`);
+});
+
+t("the core's own deny list and the starter both carry the runner rule", () => {
+  const core = JSON.parse(readFileSync(join(ROOT, '.claude', 'settings.json'), 'utf8')).permissions.deny;
+  assert.ok(core.includes(RUNNER_RULE), 'the core checkout is itself where a runner works');
+  assert.ok(starterDenyFor({}).includes(RUNNER_RULE));
+  assert.ok(starterDenyFor({ configDir: 'acme', envPrefix: 'ACME' }).includes(RUNNER_RULE), 'at the same fixed place whatever the instance is called');
+});
+
+t('a checkout-materialized instance keeps the runner rule at its fixed place through the rebrand', () => {
+  // An instance whose own name is the word in the folder's name: the rebrand must not
+  // carry the rule off to a folder no runner uses.
+  for (const branding of [{ configDir: 'acme', envPrefix: 'ACME' }, { configDir: 'cloudbongos' }, { configDir: 'otb', envPrefix: 'OTB' }]) {
+    const core = mkdtempSync(join(tmpdir(), 'w3-runner-core-'));
+    const inst = mkdtempSync(join(tmpdir(), 'w3-runner-inst-'));
+    mkdirSync(join(core, '.claude', 'skills'), { recursive: true });
+    writeFileSync(join(core, '.claude', 'settings.json'), JSON.stringify({ permissions: { deny: [RUNNER_RULE] } }));
+    mkdirSync(join(inst, 'config'), { recursive: true });
+    writeFileSync(join(inst, 'config', 'branding.json'), JSON.stringify(branding));
+    m.materializeClaude({ coreRoot: core, instanceDir: inst, dryRun: false });
+    const deny = JSON.parse(readFileSync(join(inst, '.claude', 'settings.json'), 'utf8')).permissions.deny;
+    assert.deepEqual(deny, [RUNNER_RULE], JSON.stringify(branding));
+    rmSync(core, { recursive: true, force: true });
+    rmSync(inst, { recursive: true, force: true });
+  }
+});
+
 t('a checkout-materialized instance keeps the session-store rule at its fixed anchor', () => {
   // The rebrand rewrites every `.config/<core dir>` literal, and the store's dir is one of them —
   // but the store does not move with the brand, so a rebranded rule guards a dir nothing reads.
@@ -1011,6 +1074,17 @@ t('an instance still on the allow-only starter GAINS the deny rules on its next
   f.cleanup();
 });
 
+t('an instance that already has a deny list gains the runner rule at its next upgrade (task 1005186)', () => {
+  // Every rule it had before this task, and not the new one.
+  const had = topUpDenyFor({ configDir: 'acme' }).filter((r) => r !== RUNNER_RULE);
+  const f = topUpFixture({ permissions: { allow: m.STARTER_ALLOW, deny: had } });
+  const res = m.materializeClaude({ coreRoot: f.core, instanceDir: f.inst, dryRun: false });
+  const after = JSON.parse(f.read());
+  assert.deepEqual(res.settingsDenyAdded, [RUNNER_RULE], 'the one rule it was missing, and it is named');
+  assert.deepEqual(after.permissions.deny, [...had, RUNNER_RULE], 'appended; nothing it had is moved or dropped');
+  f.cleanup();
+});
+
 t("an owner-edited settings.json keeps every rule of its own and only gains what's missing", () => {
   const f = topUpFixture({
     permissions: { allow: ['Bash(npm test:*)'], deny: ['Read(secrets/**)', 'Read(**/*.pem)'], ask: ['Bash(rm:*)'] },