@bongos/core 1.19.115 → 1.19.117

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.115",
-  "core_contract": "1.19.115",
-  "source_commit": "f98d169e99486bbb55d50e2fb3b18d2d0e035400",
+  "core_version": "1.19.117",
+  "core_contract": "1.19.117",
+  "source_commit": "195266c548d657ee6924d36607d548a0e712cbf9",
   "source_ref": "HEAD",
-  "built_at": "2026-08-14T17:50:49.780Z",
+  "built_at": "2026-08-14T18:51:25.372Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 302,
     "agent_docs_stubbed": 21,
-    "functional_verbatim": 1235,
+    "functional_verbatim": 1238,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 1558,
-  "tree_sha256": "85dc1b669e706f57dd7ae065edc3c04eba737c5875959566b2487e6b01053e59",
+  "file_count": 1561,
+  "tree_sha256": "e8cb405106a8092556a788698759b8a579439a080653ec3d5a5db66d16ec8e6b",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -367,7 +367,7 @@
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "e7bc974c5ea756d1c197c1c8e52b902049af23e335149ff76e1ade248eb623d1"
+      "sha256": "167b7dcd701d2a23eec6dec515778e84cb262d95c070a5a749da642e5aada701"
     },
     {
       "path": "clients/bongos-client/index.mjs",
@@ -1337,12 +1337,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "1a4562c2e0575f8505a22851c63f1cc3ecfd485ae5de6e725810786f692e6457"
+      "sha256": "06954a3b30e235ef61a316d4f7414a2eaf2c0f2d3fe1063698e800f3655d1675"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "3b5917da91883faf736528e7ba5600356f06056228a7c81c7d5e025762253699"
+      "sha256": "3910ea26d65b5afc883d4b3488d605ee5786bda41ef86e280b5a180d6f6fa586"
     },
     {
       "path": "docs/architecture.md",
@@ -3744,6 +3744,11 @@
       "mode": "0000644",
       "sha256": "730de845214d3159cceb779ec3f20cddf2f6662bf2ada787d1c9cec483273afa"
     },
+    {
+      "path": "modules/platform-identity/migrations/platform_identity_006_project_type.sql",
+      "mode": "0000644",
+      "sha256": "4885d452673c2d6170835c8d7f03c101847ddb313a69dfb66c8e640f875ecdc1"
+    },
     {
       "path": "modules/platform-identity/module.json",
       "mode": "0000644",
@@ -3752,7 +3757,7 @@
     {
       "path": "modules/platform-identity/platform-identity.js",
       "mode": "0000644",
-      "sha256": "2a0ee2667f79cbe8eaeb1dfb47b0c518bd969e80a60e42e0f709fa83365f908e"
+      "sha256": "c145e51c02f147b295287b9759d5f44ffc77a533908b151b69d13781d84bc433"
     },
     {
       "path": "modules/platform-identity/pollers/code-sweep.js",
@@ -3772,7 +3777,7 @@
     {
       "path": "modules/platform-identity/routes/projects.js",
       "mode": "0000644",
-      "sha256": "3222e294691563874be9b19dda57fe879b29d0bd174edef06f6db0f483863b11"
+      "sha256": "a3e25369ad9edc6aed1a8a6997d6b6cb794dce14abb3605954d535525af1a93a"
     },
     {
       "path": "modules/platform-identity/routes/scouting.js",
@@ -3787,7 +3792,7 @@
     {
       "path": "modules/platform-identity/tests/platform-identity.mjs",
       "mode": "0000644",
-      "sha256": "7766d918d22a2d73f9275ab07d6273b66fc0cdcdc6d2952986e01bab265344d2"
+      "sha256": "13bd93a19ec0d53642a161a01e4ec2ced6930d96f455c5fcc72fbdc43f72e1ac"
     },
     {
       "path": "modules/platform-identity/ui/.gitkeep",
@@ -3829,6 +3834,11 @@
       "mode": "0000644",
       "sha256": "49dee0b12551089acc0d7f218f1cba00b1377ba581770146734b2c2f71d3bf7c"
     },
+    {
+      "path": "modules/provisioning/migrations/provisioning_007_project_type.sql",
+      "mode": "0000644",
+      "sha256": "ddbc1f7e659e716fcbb3ba3ec6c1237756f46dbd895bcb27a1dc925a7c782e76"
+    },
     {
       "path": "modules/provisioning/module.json",
       "mode": "0000644",
@@ -3847,7 +3857,7 @@
     {
       "path": "modules/provisioning/provisioning.js",
       "mode": "0000644",
-      "sha256": "0363fd616966ec413d3c16bea222622ae0f9cf59a456627946c7cbdb89b7885e"
+      "sha256": "9163b2b0de80a648371d03f89e0da8ff234a1cd4f038a1279f6324ae0921e0f4"
     },
     {
       "path": "modules/provisioning/rate-limit.js",
@@ -3857,7 +3867,7 @@
     {
       "path": "modules/provisioning/routes/provisioning.js",
       "mode": "0000644",
-      "sha256": "1880a5b0812a32feb9dc313024b3a27b1403884316f17fbaad68909872e21535"
+      "sha256": "232d5ce81dc2821b9b953c7596ab385b89e2d5193891735e3220021437fd06db"
     },
     {
       "path": "modules/provisioning/tests/liveness.mjs",
@@ -3867,7 +3877,7 @@
     {
       "path": "modules/provisioning/tests/provisioning.mjs",
       "mode": "0000644",
-      "sha256": "e23faf9471d7d984dc86601b157aeac0518f01f9c72076045b94368aa7490b61"
+      "sha256": "4a5c817d88771a62ccb5d26aea865976b7246a253b2ad7b00e11e3be856586ef"
     },
     {
       "path": "modules/provisioning/ui/.gitkeep",
@@ -4152,12 +4162,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "d7ad6805c0d040d4d14e0f95b7be3fc175b3e89068e8cb17b08be555827fe029"
+      "sha256": "2d570f38602e9cb4ab3417d45f21d61ffb2b9cef5ba9ff9354350a95af8f6190"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "feca9d093739c6fc3c7067bc4fbe725ff7e8cffd9420ddb6d2be632542b03667"
+      "sha256": "b9a96ae403012d889fbae5d2bd481f76fa1bc2221e5e8c8a6bd49e7494759ee9"
     },
     {
       "path": "public-docs/index.html",
@@ -4397,7 +4407,7 @@
     {
       "path": "public-landing/assets/cosmos.css",
       "mode": "0000644",
-      "sha256": "b615a392fea969c2b0549476843f26d5185cabc6556036e1f3337aacdeac359e"
+      "sha256": "bd0b17f7a21120a9e754c88206bd718fdda1fce568df15441272af0b9004c7cb"
     },
     {
       "path": "public-landing/buddha.png",
@@ -4412,7 +4422,7 @@
     {
       "path": "public-landing/projects.html",
       "mode": "0000644",
-      "sha256": "961850a566b9fa797036b9ac8b12b3f0eacf5cc6f5fbabbb6230dccd02e836b8"
+      "sha256": "576bc8fe1e3379dd2efa6323f889b65d9c4cbb5164b5e80716a6eee045bad002"
     },
     {
       "path": "public-landing/world/assets/clouds/cloud-island-large.png",
@@ -5067,7 +5077,7 @@
     {
       "path": "scripts/gds/provision.js",
       "mode": "0000644",
-      "sha256": "7ad384495370312a57f7c1f0dab4770888c83afd08b89a8dc27aebae408abfd1"
+      "sha256": "a10501b65207bbd72f9fc039d4cf1ef0be7f85dc832e8e95e1b26aa966e507b8"
     },
     {
       "path": "scripts/gds/publish-credential-check.js",
@@ -5204,6 +5214,11 @@
       "mode": "0000644",
       "sha256": "5de4203d6a764c8aec374c7802f69f659816d2c0d75bbe70144f7dfb56df2e39"
     },
+    {
+      "path": "scripts/gds/seed-bv1-profile-page-tasks.js",
+      "mode": "0000644",
+      "sha256": "68f6edfcea2eaaf1262dc125d538f2b3806c58864839d6e34c3135235f29ed4b"
+    },
     {
       "path": "scripts/gds/seed-bv1-profiles-tasks.js",
       "mode": "0000644",
@@ -5727,7 +5742,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "e80df1f75bd2a569a72d29eaa00146960390d86ef9a6fd66535d89aac6e6bd39"
+      "sha256": "1c1a8e95f442958ff1476c19e6b68fd2af5475e365e3d5203656bfb2c63f3fa4"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -6232,7 +6247,7 @@
     {
       "path": "tests/cosmos_token_contrast.mjs",
       "mode": "0000644",
-      "sha256": "a133a1ed438dfb589b0e31ce2dacced2e38e1047411d85e0086d4c2ff8b88f16"
+      "sha256": "257acb76f7b7e8bb925b005e8a7bad96d712f0a216201aacee11762a2a2ff328"
     },
     {
       "path": "tests/cost.mjs",
@@ -7252,7 +7267,7 @@
     {
       "path": "tests/projects_hub.mjs",
       "mode": "0000644",
-      "sha256": "8cd0d3f4ce68085f782fbd3e359039ad6d20198bc706481f165c39ee133cea3a"
+      "sha256": "ee5c944f9e3bd3d618c977e76d4e2ba3e663ce59bf7833f9427a0191717ba57d"
     },
     {
       "path": "tests/provision.mjs",

package/clients/bongos-client/index.d.ts

@@ -244,7 +244,7 @@ export interface PostMyProjectsJoinRequest { origin: string }
 export interface PostMyProjectsJoinResponse { ok: boolean; status: unknown; project: unknown; message: unknown }
 export interface PostOverrideRequestsIdDecideRequest { decision: string; note?: string }
 export interface PostProjectsInviteRequest { client_id: string; github_login: string }
-export interface PostProjectsRequest { origin: string; name: string; tagline?: string; art_url?: string }
+export interface PostProjectsRequest { origin: string; name: string; tagline?: string; art_url?: string; type?: string }
 export interface PostProjectsResponse { project: unknown }
 export interface PostProvisioningInstancesIdDomainRequest { domain: string }
 export interface PostProvisioningInstancesIdDomainResponse { ok: boolean; changed: boolean; queued: unknown; domain: unknown; message: unknown }
@@ -252,7 +252,7 @@ export interface PostProvisioningInstancesIdForceTeardownResponse { ok: boolean;
 export interface PostProvisioningInstancesIdGithubAppRequest { account?: string }
 export interface PostProvisioningInstancesIdGithubAppResponse { state: unknown; account: unknown; post_url: unknown; personal_url: unknown; org_url: unknown; org_login: unknown; manifest: unknown; redirect_url: unknown; expires_at: unknown }
 export interface PostProvisioningInstancesIdTeardownResponse { ok: boolean; queued: unknown; action: unknown; status: unknown; superseded: unknown; message: unknown }
-export interface PostProvisioningInstancesRequest { slug: string; target_ref?: string; hosting_shape?: string; domain?: string; tier?: string; onboard_mode?: string }
+export interface PostProvisioningInstancesRequest { slug: string; target_ref?: string; hosting_shape?: string; domain?: string; tier?: string; onboard_mode?: string; type?: string }
 export interface PostSearchMarkRequest { chunk_id?: StringifiableId; useful?: unknown }
 export interface PostSearchRequest { expand?: unknown; q?: string; source_kind?: string; limit?: unknown }
 export interface PostSearchResponse { expand?: unknown; chunk?: unknown; query?: unknown; count?: unknown; total_full_tokens?: unknown; results?: unknown }

package/docs/api/openapi.json

@@ -15676,6 +15676,9 @@
           "art_url": {
             "type": "string",
             "maxLength": 2048
+          },
+          "type": {
+            "type": "string"
           }
         },
         "required": [
@@ -15830,6 +15833,9 @@
           "onboard_mode": {
             "type": "string",
             "maxLength": 20
+          },
+          "type": {
+            "type": "string"
           }
         },
         "required": [

package/docs/api-reference.md

@@ -353,7 +353,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
 | GET | `/api/bongos/projects` | `metic+archon` | — | the full curation list (includes unfeatured + owner attribution). |
-| POST | `/api/bongos/projects` | `metic+archon` | `origin`, `name`, `tagline`, `art_url` | create / update a catalog entry (manual seed for hand-wired instances; federated projects auto-catalogue at registration). |
+| POST | `/api/bongos/projects` | `metic+archon` | `origin`, `name`, `tagline`, `art_url`, `type` | create / update a catalog entry (manual seed for hand-wired instances; federated projects auto-catalogue at registration). |
 | PATCH | `/api/bongos/projects/:id/featured` | `metic+archon` | `featured` | the feature / unfeature control (the ADR 0141 §5 curation gate). |
 | GET | `/api/bongos/projects/featured` | `public` | — | a curated public showcase; no auth by design. |
 | POST | `/api/bongos/projects/invite` | `metic+archon` | `client_id`, `github_login` | invite a builder into a project (ADR 0141 §5, task #1002115). |
@@ -368,7 +368,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | GET | `/api/bongos/provisioning/github-app/status` | `public` | — | GET /provisioning/github-app/status?state=<> — the PUBLIC progress read the onboarding callback page polls (task 2096) to know when setup… |
 | GET | `/api/bongos/provisioning/health` | `public` | — | GET /provisioning/health — liveness + the core version this module mounted against. |
 | GET | `/api/bongos/provisioning/instances` | `any-builder` | — | GET /provisioning/instances — the caller's own instances + each open intent. |
-| POST | `/api/bongos/provisioning/instances` | `any-builder` | `slug`, `target_ref`, `hosting_shape`, `domain`, `tier`, `onboard_mode` | POST /provisioning/instances — request a new instance. |
+| POST | `/api/bongos/provisioning/instances` | `any-builder` | `slug`, `target_ref`, `hosting_shape`, `domain`, `tier`, `onboard_mode`, `type` | POST /provisioning/instances — request a new instance. |
 | GET | `/api/bongos/provisioning/instances/:id` | `any-builder` | — | GET /provisioning/instances/:id — read one of the caller's own instances. |
 | POST | `/api/bongos/provisioning/instances/:id/domain` | `any-builder` | `domain` | POST /provisioning/instances/:id/domain — give the caller's OWN instance its address (task 1002692, gap 5: no path existed to add a domai… |
 | POST | `/api/bongos/provisioning/instances/:id/force-teardown` | `metic+archon` | — | POST /provisioning/instances/:id/force-teardown — Archon tears down ANY instance. |

package/modules/platform-identity/migrations/platform_identity_006_project_type.sql

@@ -0,0 +1,23 @@
+-- platform_identity_006_project_type.sql — a project declares its Type (task 1002772).
+--
+-- Owner decision 2026-08-13: type is DECLARED at creation, never guessed from
+-- module flags. Nullable on purpose: every existing row predates the field and
+-- must not be back-filled with a guess — the hub renders an em dash for
+-- "not declared", which is honest. The closed vocabulary is the owner's:
+-- game / research / business / non-profit / not-sure ("not-sure" is the escape
+-- hatch so nobody is forced into a wrong answer).
+--
+-- Additive + platform_identity_-namespaced (ADR 0083 §5): a new nullable column
+-- plus a CHECK that only constrains non-null values. No existing row changes.
+-- Idempotent: safe to re-run.
+
+BEGIN;
+
+ALTER TABLE platform_identity_projects
+  ADD COLUMN IF NOT EXISTS type text;
+
+ALTER TABLE platform_identity_projects DROP CONSTRAINT IF EXISTS platform_identity_projects_type_check;
+ALTER TABLE platform_identity_projects ADD CONSTRAINT platform_identity_projects_type_check
+  CHECK (type IS NULL OR type IN ('game', 'research', 'business', 'non-profit', 'not-sure'));
+
+COMMIT;

package/modules/platform-identity/platform-identity.js

@@ -146,7 +146,7 @@ async function getAccount(githubId, { pool = defaultPool } = {}) {
 // (task #1002109) calls this with a freshly generated secret; the plaintext is
 // hashed here and never stored. Upsert-on-client_id so re-provisioning rotates
 // the secret + redirect_uris without a duplicate row.
-async function registerClient({ clientId, secret, name, redirectUris, origin, ownerGithubId }, { pool = defaultPool } = {}) {
+async function registerClient({ clientId, secret, name, redirectUris, origin, ownerGithubId, type }, { pool = defaultPool } = {}) {
   const secretHash = sha256hex(secret);
   const uris = Array.isArray(redirectUris) ? redirectUris : [];
   const { rows } = await pool.query(
@@ -167,7 +167,7 @@ async function registerClient({ clientId, secret, name, redirectUris, origin, ow
   // list the moment it federates (ADR 0141 §5). Best-effort — a catalog hiccup must
   // never fail client registration. Only when an origin is known.
   if (origin) {
-    try { await upsertProject({ origin, name, ownerGithubId }, { pool }); }
+    try { await upsertProject({ origin, name, ownerGithubId, type }, { pool }); }
     catch (err) { console.error('[platform-identity] auto-catalogue failed (non-fatal):', err.message); }
   }
   return rows[0];
@@ -207,30 +207,39 @@ async function getClientByOrigin(origin, { pool = defaultPool } = {}) {
 // Projects catalog + Explore (ADR 0141 §5)
 // -------------------------------------------------------------------------
 
+// The closed Type vocabulary (task 1002772, owner decision 2026-08-13): a project
+// DECLARES its type at creation — 'not-sure' is the escape hatch so nobody is
+// forced into a wrong answer. Mirrored by the CHECK in migration 006 (and by
+// provisioning's copy on its own instances table).
+const PROJECT_TYPES = ['game', 'research', 'business', 'non-profit', 'not-sure'];
+
 // Upsert a catalog row (keyed by origin). Called when a client registers (so every
 // federated project is catalogued, unfeatured) and by the Archon create/curate route.
 // Never touches `featured` on update — that is Archon-only via setProjectFeatured.
-async function upsertProject({ origin, name, tagline, artUrl, ownerGithubId }, { pool = defaultPool } = {}) {
+async function upsertProject({ origin, name, tagline, artUrl, ownerGithubId, type }, { pool = defaultPool } = {}) {
   const norm = String(origin || '').replace(/\/+$/, '');
   if (!norm) throw new Error('project origin required');
+  // off-vocabulary → null (the DB CHECK is the backstop; a declaration is never invented)
+  const declaredType = PROJECT_TYPES.includes(type) ? type : null;
   const { rows } = await pool.query(
-    `INSERT INTO platform_identity_projects (origin, name, tagline, art_url, owner_github_id)
-     VALUES ($1, $2, $3, $4, $5)
+    `INSERT INTO platform_identity_projects (origin, name, tagline, art_url, owner_github_id, type)
+     VALUES ($1, $2, $3, $4, $5, $6)
      ON CONFLICT (origin) DO UPDATE SET
        name            = EXCLUDED.name,
        tagline         = COALESCE(EXCLUDED.tagline, platform_identity_projects.tagline),
        art_url         = COALESCE(EXCLUDED.art_url, platform_identity_projects.art_url),
        owner_github_id = COALESCE(EXCLUDED.owner_github_id, platform_identity_projects.owner_github_id),
+       type            = COALESCE(EXCLUDED.type, platform_identity_projects.type),
        updated_at      = now()
-     RETURNING id, origin, name, tagline, art_url, owner_github_id, status, featured`,
-    [norm, name || norm, tagline ?? null, artUrl ?? null, ownerGithubId ?? null],
+     RETURNING id, origin, name, tagline, art_url, owner_github_id, type, status, featured`,
+    [norm, name || norm, tagline ?? null, artUrl ?? null, ownerGithubId ?? null, declaredType],
   );
   return rows[0];
 }
 
 async function getProject(id, { pool = defaultPool } = {}) {
   const { rows } = await pool.query(
-    `SELECT id, origin, name, tagline, art_url, owner_github_id, status, featured
+    `SELECT id, origin, name, tagline, art_url, owner_github_id, type, status, featured
        FROM platform_identity_projects WHERE id = $1`,
     [id],
   );
@@ -245,7 +254,7 @@ async function getProject(id, { pool = defaultPool } = {}) {
 // it, so as a public "last updated" it would lie.
 async function listFeaturedProjects({ pool = defaultPool } = {}) {
   const { rows } = await pool.query(
-    `SELECT origin, name, tagline, art_url, created_at
+    `SELECT origin, name, tagline, art_url, type, created_at
        FROM platform_identity_projects
       WHERE featured = true AND status = 'active'
       ORDER BY updated_at DESC`,
@@ -256,7 +265,7 @@ async function listFeaturedProjects({ pool = defaultPool } = {}) {
 // The Archon curation list — every active project + its featured flag.
 async function listAllProjects({ pool = defaultPool } = {}) {
   const { rows } = await pool.query(
-    `SELECT id, origin, name, tagline, art_url, owner_github_id, status, featured, updated_at
+    `SELECT id, origin, name, tagline, art_url, owner_github_id, type, status, featured, updated_at
        FROM platform_identity_projects
       WHERE status = 'active'
       ORDER BY featured DESC, updated_at DESC`,
@@ -512,6 +521,7 @@ module.exports = {
   setClientStatus,
   // projects catalog + Explore
   upsertProject,
+  PROJECT_TYPES,
   getProject,
   listFeaturedProjects,
   listAllProjects,

package/modules/platform-identity/routes/projects.js

@@ -42,6 +42,7 @@ module.exports = function projectsRoutes() {
       name: { required: true, type: 'string', maxLength: 200 },
       tagline: { type: 'string', maxLength: 400 },
       art_url: { type: 'string', maxLength: 2048 },
+      type: { type: 'string', enum: [...pi.PROJECT_TYPES] },
     })) return;
     try {
       const project = await pi.upsertProject({
@@ -49,6 +50,7 @@ module.exports = function projectsRoutes() {
         name: req.body.name,
         tagline: req.body.tagline,
         artUrl: req.body.art_url,
+        type: req.body.type,
       }, { pool });
       res.status(201).json({ project });
     } catch (err) {

package/modules/platform-identity/tests/platform-identity.mjs

@@ -197,6 +197,19 @@ await ta('upsertProject upserts on normalized origin; update preserves tagline/a
   assert.doesNotMatch(c.text, /featured\s*=/);
 });
 
+await ta('upsertProject carries the declared type, COALESCE-preserved like tagline (task 1002772)', async () => {
+  const pool = mockPool([{ rows: [{ id: '1', origin: 'https://p', type: 'game' }] }]);
+  await P.upsertProject({ origin: 'https://p', name: 'Proj', type: 'game' }, { pool });
+  const c = pool.calls[0];
+  assert.match(c.text, /\btype\b/, 'the declared type joins the upsert');
+  assert.match(c.text, /type\s*=\s*COALESCE/, 'a later typeless upsert must not erase a declaration');
+  assert.ok(c.params.includes('game'), 'the type value is parameterized');
+  // an off-vocabulary value is dropped, not thrown — the DB CHECK is the backstop
+  const pool2 = mockPool([{ rows: [{ id: '2' }] }]);
+  await P.upsertProject({ origin: 'https://q', name: 'Q', type: 'spacefaring' }, { pool: pool2 });
+  assert.ok(!pool2.calls[0].params.includes('spacefaring'), 'unknown types never reach the SQL');
+});
+
 await ta('listFeaturedProjects returns a PUBLIC projection (featured+active only, no owner/status)', async () => {
   const pool = mockPool([{ rows: [{ origin: 'https://p', name: 'Proj', tagline: 't', art_url: null, created_at: '2026-08-01T00:00:00Z' }] }]);
   const out = await P.listFeaturedProjects({ pool });
@@ -210,6 +223,7 @@ await ta('listFeaturedProjects returns a PUBLIC projection (featured+active only
   assert.ok(sel.trim(), 'the projection is an explicit SELECT list');
   assert.doesNotMatch(sel, /\*/, 'no star projection on a public route');
   assert.match(sel, /created_at/, 'the LISTED date (when the row was catalogued) is public');
+  assert.match(sel, /\btype\b/, 'the declared type is public — the hub table reads it (task 1002772)');
   assert.doesNotMatch(c.text, /owner_github_id/, 'public projection must not leak owner id');
   // updated_at may sort (ORDER BY) but never project: it is bumped by feature
   // toggles and client re-registration, so as a public fact it would lie.

package/modules/provisioning/migrations/provisioning_007_project_type.sql

@@ -0,0 +1,24 @@
+-- provisioning_007_project_type.sql — the wizard's declared project Type rides
+-- the provisioning request (task 1002772).
+--
+-- A standalone project never federates into the hub catalog at create time, so
+-- the declaration made in the create wizard has to live SOMEWHERE real the
+-- moment it is filed — this column is that home. The control-plane runner
+-- carries it into platform_identity_projects whenever a catalog row
+-- materializes (federation), so the answer is never thrown away. Vocabulary
+-- mirrors platform_identity_006_project_type.sql — both CHECKs are the
+-- backstop if the two route validators ever drift.
+--
+-- Additive + provisioning_-namespaced (ADR 0083 §5): a new nullable column plus
+-- a CHECK that only constrains non-null values. Idempotent: safe to re-run.
+
+BEGIN;
+
+ALTER TABLE provisioning_instances
+  ADD COLUMN IF NOT EXISTS type text;
+
+ALTER TABLE provisioning_instances DROP CONSTRAINT IF EXISTS provisioning_instances_type_check;
+ALTER TABLE provisioning_instances ADD CONSTRAINT provisioning_instances_type_check
+  CHECK (type IS NULL OR type IN ('game', 'research', 'business', 'non-profit', 'not-sure'));
+
+COMMIT;

package/modules/provisioning/provisioning.js

@@ -29,6 +29,12 @@ const HOSTING_SHAPES = ['co-tenant', 'dedicated', 'standalone'];
 // provision.js ran the greenfield path unconditionally and adopting an existing repo
 // always failed as an unrelated-history non-fast-forward (task 1002562).
 const ONBOARD_MODES = ['greenfield', 'adopt'];
+
+// The declared project Type (task 1002772) — the wizard's answer rides the
+// provisioning request so it survives until a catalog row materializes.
+// Mirrors platform-identity's PROJECT_TYPES; both tables carry a matching
+// CHECK, so a drift between the copies fails loudly at insert time.
+const PROJECT_TYPES = ['game', 'research', 'business', 'non-profit', 'not-sure'];
 // 'oauth-manifest' (task 2080) is queueable too — the GitHub-App-Manifest onboarding
 // conversion. Today the runner drains it by scanning provisioning_oauth_manifests
 // (drainOAuthManifests), not the intent queue, but it stays a valid action so the
@@ -146,6 +152,10 @@ function publicInstance(row) {
     // thing you need when diagnosing a standup (task 1002562). Coalesced for rows read
     // before provisioning_004 added the column.
     onboard_mode: row.onboard_mode || 'greenfield',
+    // The declared project Type (task 1002772) — the hub reads it off owned
+    // instances so a declaration shows before the catalog carries it. Nullable:
+    // rows predating provisioning_007, or a declined answer, project null.
+    type: row.type || null,
     // The verification overlay (task 1002696, redesign direction §3): what the
     // heartbeat last OBSERVED, which is NOT what `status` claims. null = never
     // probed — a different claim from last_verified_up=false, and the UI renders
@@ -359,22 +369,24 @@ async function listAllInstances(db, { status } = {}) {
 // re-fetches the existing row and returns { created:false } so the ROUTE can
 // decide (same owner → idempotent re-request; different owner → 409). Never
 // silently reassigns ownership.
-async function createInstance(db, { ownerBuilderId, slug, targetRef, hostingShape, domain, dbName, port, tier, onboardMode }) {
+async function createInstance(db, { ownerBuilderId, slug, targetRef, hostingShape, domain, dbName, port, tier, onboardMode, type }) {
   const shape = HOSTING_SHAPES.includes(hostingShape) ? hostingShape : 'co-tenant';
   // Unknown/absent → 'greenfield', matching the column default. Falling back to the
   // SAFE mode matters: greenfield refuses to push over existing history (no --force
   // anywhere), whereas defaulting an unknown value to 'adopt' would put the layering
   // path on a repo nobody said was pre-existing.
   const mode = ONBOARD_MODES.includes(onboardMode) ? onboardMode : 'greenfield';
+  // Type is a declaration — off-vocabulary or absent stores null, never a guess.
+  const declaredType = PROJECT_TYPES.includes(type) ? type : null;
   const cost = costEstimateUsd({ hostingShape: shape, tier });
   try {
     const { rows } = await db.query(
       `INSERT INTO provisioning_instances
-         (owner_builder_id, slug, target_ref, hosting_shape, domain, db_name, port, tier, cost_estimate_usd, onboard_mode)
-       VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10)
+         (owner_builder_id, slug, target_ref, hosting_shape, domain, db_name, port, tier, cost_estimate_usd, onboard_mode, type)
+       VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11)
        RETURNING *`,
       [ownerBuilderId, slug, targetRef ?? null, shape, domain ?? null,
-       dbName ?? null, port ?? null, tier ?? null, cost, mode]
+       dbName ?? null, port ?? null, tier ?? null, cost, mode, declaredType]
     );
     return { instance: rows[0], created: true };
   } catch (e) {
@@ -642,7 +654,7 @@ async function costLedger(db, { limit = 500 } = {}) {
 
 module.exports = {
   // constants
-  INSTANCE_STATES, HOSTING_SHAPES, ONBOARD_MODES, INTENT_ACTIONS, TEARDOWN_FROM,
+  INSTANCE_STATES, HOSTING_SHAPES, ONBOARD_MODES, PROJECT_TYPES, INTENT_ACTIONS, TEARDOWN_FROM,
   PROVISION_ENQUEUE_FROM, DOMAIN_ATTACH_FROM, TIER_MONTHLY_USD, CERT_ELIGIBLE_STATES,
   // pure
   isValidSlug, costEstimateUsd, publicInstance, normalizeHostname,

package/modules/provisioning/routes/provisioning.js

@@ -313,6 +313,8 @@ module.exports = function provisioningRoutes() {
       domain: { type: 'string', maxLength: 253 },
       tier: { type: 'string', maxLength: 40 },
       onboard_mode: { type: 'string', maxLength: 20 },
+      // the declared project Type (task 1002772) — optional, closed vocabulary
+      type: { type: 'string', enum: [...provisioning.PROJECT_TYPES] },
     })) return;
     const body = req.body || {};
     const slug = String(body.slug || '').trim().toLowerCase();
@@ -339,6 +341,7 @@ module.exports = function provisioningRoutes() {
         ownerBuilderId: req.builder.id, slug,
         targetRef: body.target_ref, hostingShape: shape,
         domain: body.domain, tier: body.tier, onboardMode,
+        type: body.type,
       });
       // Slug already taken by ANOTHER builder — refuse (never reassign ownership).
       if (!created && String(instance.owner_builder_id) !== String(req.builder.id)) {
@@ -373,12 +376,23 @@ module.exports = function provisioningRoutes() {
           };
         }
       }
+      // Same honesty for a changed Type (task 1002772): a re-request keeps the
+      // original declaration, and unlike domain there is no mutation route yet —
+      // say so rather than silently dropping the new answer.
+      let typeIgnored;
+      if (!created && body.type && body.type !== instance.type) {
+        typeIgnored = {
+          requested: body.type, current: instance.type || null,
+          hint: "a re-request never changes an existing instance's declared type",
+        };
+      }
       res.status(created ? 201 : 200).json({
         instance: provisioning.publicInstance(instance),
         open_intent: intent ? { action: intent.action, state: intent.state } : null,
         queued: intentCreated,
         created,
         ...(domainIgnored ? { domain_ignored: domainIgnored } : {}),
+        ...(typeIgnored ? { type_ignored: typeIgnored } : {}),
       });
     } catch (err) {
       console.error('[provisioning] POST /provisioning/instances', err);

package/modules/provisioning/tests/provisioning.mjs

@@ -228,5 +228,12 @@ await ta('claimNextOAuthManifest flips code_received→converting, gated on an A
   assert.match(sql, /m\.status = 'code_received' AND i\.status = 'active'/);
 });
 
+t('publicInstance projects the declared type — nullable, never silently dropped (task 1002772)', () => {
+  const p = P.publicInstance({ id: 1, slug: 'x', status: 'active', type: 'game' });
+  assert.equal(p.type, 'game', 'the allow-list projection must carry the declaration');
+  const q = P.publicInstance({ id: 2, slug: 'y', status: 'active' });
+  assert.equal(q.type, null, 'a row predating provisioning_007 projects null, not undefined');
+});
+
 console.log(`\nprovisioning module: ${passed} passed, ${failed} failed`);
 process.exit(failed ? 1 : 0);

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.115",
+  "version": "1.19.117",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.115",
+      "version": "1.19.117",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.115",
+  "version": "1.19.117",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/public-landing/assets/cosmos.css

@@ -581,7 +581,11 @@ p.sec-p{font-size:var(--fs-lede);font-weight:500;color:var(--ink-soft);line-heig
 .tbl .colStatus{width:1%;white-space:nowrap;}
 .tbl .colGo{width:1%;white-space:nowrap;padding-left:8px;}
 .tbl .colName{width:auto;}
-@media (max-width:780px){.tbl .colTags{display:none;}}
+.tbl .colType{width:1%;white-space:nowrap;}
+/* the declared-type tag (task 1002772) — its own vocabulary: not the relationship
+   .pill, not the liveness .chip. Two different facts never wear the same chrome. */
+.typeTag{font-family:var(--font-mono);font-size:10.5px;font-weight:500;color:var(--ink-soft);border:1px solid var(--line);border-radius:999px;padding:2px 9px;white-space:nowrap;}
+@media (max-width:780px){.tbl .colTags,.tbl .colType{display:none;}}
 
 /* ── the living sky (task 1002762): camera, spotlight, hover card ──
    The camera is ONE transform on .skyCam; orbs carry only their own physics