@bongos/core 1.19.116 → 1.19.117

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.116",
-  "core_contract": "1.19.116",
-  "source_commit": "be42420efe0538b351e5eed4a355a47e28b430f5",
+  "core_version": "1.19.117",
+  "core_contract": "1.19.117",
+  "source_commit": "195266c548d657ee6924d36607d548a0e712cbf9",
   "source_ref": "HEAD",
-  "built_at": "2026-08-14T18:14:13.252Z",
+  "built_at": "2026-08-14T18:51:25.372Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 302,
     "agent_docs_stubbed": 21,
-    "functional_verbatim": 1236,
+    "functional_verbatim": 1238,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 1559,
-  "tree_sha256": "8ac36ba3efd387f4c72fecb2fde8b6d68ae8c016c5e8336c2f78a24abb5791e1",
+  "file_count": 1561,
+  "tree_sha256": "e8cb405106a8092556a788698759b8a579439a080653ec3d5a5db66d16ec8e6b",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -367,7 +367,7 @@
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "e7bc974c5ea756d1c197c1c8e52b902049af23e335149ff76e1ade248eb623d1"
+      "sha256": "167b7dcd701d2a23eec6dec515778e84cb262d95c070a5a749da642e5aada701"
     },
     {
       "path": "clients/bongos-client/index.mjs",
@@ -1337,12 +1337,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "1a4562c2e0575f8505a22851c63f1cc3ecfd485ae5de6e725810786f692e6457"
+      "sha256": "06954a3b30e235ef61a316d4f7414a2eaf2c0f2d3fe1063698e800f3655d1675"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "3b5917da91883faf736528e7ba5600356f06056228a7c81c7d5e025762253699"
+      "sha256": "3910ea26d65b5afc883d4b3488d605ee5786bda41ef86e280b5a180d6f6fa586"
     },
     {
       "path": "docs/architecture.md",
@@ -3744,6 +3744,11 @@
       "mode": "0000644",
       "sha256": "730de845214d3159cceb779ec3f20cddf2f6662bf2ada787d1c9cec483273afa"
     },
+    {
+      "path": "modules/platform-identity/migrations/platform_identity_006_project_type.sql",
+      "mode": "0000644",
+      "sha256": "4885d452673c2d6170835c8d7f03c101847ddb313a69dfb66c8e640f875ecdc1"
+    },
     {
       "path": "modules/platform-identity/module.json",
       "mode": "0000644",
@@ -3752,7 +3757,7 @@
     {
       "path": "modules/platform-identity/platform-identity.js",
       "mode": "0000644",
-      "sha256": "2a0ee2667f79cbe8eaeb1dfb47b0c518bd969e80a60e42e0f709fa83365f908e"
+      "sha256": "c145e51c02f147b295287b9759d5f44ffc77a533908b151b69d13781d84bc433"
     },
     {
       "path": "modules/platform-identity/pollers/code-sweep.js",
@@ -3772,7 +3777,7 @@
     {
       "path": "modules/platform-identity/routes/projects.js",
       "mode": "0000644",
-      "sha256": "3222e294691563874be9b19dda57fe879b29d0bd174edef06f6db0f483863b11"
+      "sha256": "a3e25369ad9edc6aed1a8a6997d6b6cb794dce14abb3605954d535525af1a93a"
     },
     {
       "path": "modules/platform-identity/routes/scouting.js",
@@ -3787,7 +3792,7 @@
     {
       "path": "modules/platform-identity/tests/platform-identity.mjs",
       "mode": "0000644",
-      "sha256": "7766d918d22a2d73f9275ab07d6273b66fc0cdcdc6d2952986e01bab265344d2"
+      "sha256": "13bd93a19ec0d53642a161a01e4ec2ced6930d96f455c5fcc72fbdc43f72e1ac"
     },
     {
       "path": "modules/platform-identity/ui/.gitkeep",
@@ -3829,6 +3834,11 @@
       "mode": "0000644",
       "sha256": "49dee0b12551089acc0d7f218f1cba00b1377ba581770146734b2c2f71d3bf7c"
     },
+    {
+      "path": "modules/provisioning/migrations/provisioning_007_project_type.sql",
+      "mode": "0000644",
+      "sha256": "ddbc1f7e659e716fcbb3ba3ec6c1237756f46dbd895bcb27a1dc925a7c782e76"
+    },
     {
       "path": "modules/provisioning/module.json",
       "mode": "0000644",
@@ -3847,7 +3857,7 @@
     {
       "path": "modules/provisioning/provisioning.js",
       "mode": "0000644",
-      "sha256": "0363fd616966ec413d3c16bea222622ae0f9cf59a456627946c7cbdb89b7885e"
+      "sha256": "9163b2b0de80a648371d03f89e0da8ff234a1cd4f038a1279f6324ae0921e0f4"
     },
     {
       "path": "modules/provisioning/rate-limit.js",
@@ -3857,7 +3867,7 @@
     {
       "path": "modules/provisioning/routes/provisioning.js",
       "mode": "0000644",
-      "sha256": "1880a5b0812a32feb9dc313024b3a27b1403884316f17fbaad68909872e21535"
+      "sha256": "232d5ce81dc2821b9b953c7596ab385b89e2d5193891735e3220021437fd06db"
     },
     {
       "path": "modules/provisioning/tests/liveness.mjs",
@@ -3867,7 +3877,7 @@
     {
       "path": "modules/provisioning/tests/provisioning.mjs",
       "mode": "0000644",
-      "sha256": "e23faf9471d7d984dc86601b157aeac0518f01f9c72076045b94368aa7490b61"
+      "sha256": "4a5c817d88771a62ccb5d26aea865976b7246a253b2ad7b00e11e3be856586ef"
     },
     {
       "path": "modules/provisioning/ui/.gitkeep",
@@ -4152,12 +4162,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "87bcf76333165f80466bc093e13d0ad6313d63db0e8518b083adf18cfc4c373d"
+      "sha256": "2d570f38602e9cb4ab3417d45f21d61ffb2b9cef5ba9ff9354350a95af8f6190"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "f7a325a5a15a160f72580f8af598cf302a68ec9fc04a03085dcdfa341c52dc89"
+      "sha256": "b9a96ae403012d889fbae5d2bd481f76fa1bc2221e5e8c8a6bd49e7494759ee9"
     },
     {
       "path": "public-docs/index.html",
@@ -4397,7 +4407,7 @@
     {
       "path": "public-landing/assets/cosmos.css",
       "mode": "0000644",
-      "sha256": "b615a392fea969c2b0549476843f26d5185cabc6556036e1f3337aacdeac359e"
+      "sha256": "bd0b17f7a21120a9e754c88206bd718fdda1fce568df15441272af0b9004c7cb"
     },
     {
       "path": "public-landing/buddha.png",
@@ -4412,7 +4422,7 @@
     {
       "path": "public-landing/projects.html",
       "mode": "0000644",
-      "sha256": "961850a566b9fa797036b9ac8b12b3f0eacf5cc6f5fbabbb6230dccd02e836b8"
+      "sha256": "576bc8fe1e3379dd2efa6323f889b65d9c4cbb5164b5e80716a6eee045bad002"
     },
     {
       "path": "public-landing/world/assets/clouds/cloud-island-large.png",
@@ -5067,7 +5077,7 @@
     {
       "path": "scripts/gds/provision.js",
       "mode": "0000644",
-      "sha256": "7ad384495370312a57f7c1f0dab4770888c83afd08b89a8dc27aebae408abfd1"
+      "sha256": "a10501b65207bbd72f9fc039d4cf1ef0be7f85dc832e8e95e1b26aa966e507b8"
     },
     {
       "path": "scripts/gds/publish-credential-check.js",
@@ -5732,7 +5742,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "298ca0ddbe3bcae48f5c360ca66aea09a798f317816cbbb9180142b12a7fb6ae"
+      "sha256": "1c1a8e95f442958ff1476c19e6b68fd2af5475e365e3d5203656bfb2c63f3fa4"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -6237,7 +6247,7 @@
     {
       "path": "tests/cosmos_token_contrast.mjs",
       "mode": "0000644",
-      "sha256": "a133a1ed438dfb589b0e31ce2dacced2e38e1047411d85e0086d4c2ff8b88f16"
+      "sha256": "257acb76f7b7e8bb925b005e8a7bad96d712f0a216201aacee11762a2a2ff328"
     },
     {
       "path": "tests/cost.mjs",
@@ -7257,7 +7267,7 @@
     {
       "path": "tests/projects_hub.mjs",
       "mode": "0000644",
-      "sha256": "8cd0d3f4ce68085f782fbd3e359039ad6d20198bc706481f165c39ee133cea3a"
+      "sha256": "ee5c944f9e3bd3d618c977e76d4e2ba3e663ce59bf7833f9427a0191717ba57d"
     },
     {
       "path": "tests/provision.mjs",

package/clients/bongos-client/index.d.ts

@@ -244,7 +244,7 @@ export interface PostMyProjectsJoinRequest { origin: string }
 export interface PostMyProjectsJoinResponse { ok: boolean; status: unknown; project: unknown; message: unknown }
 export interface PostOverrideRequestsIdDecideRequest { decision: string; note?: string }
 export interface PostProjectsInviteRequest { client_id: string; github_login: string }
-export interface PostProjectsRequest { origin: string; name: string; tagline?: string; art_url?: string }
+export interface PostProjectsRequest { origin: string; name: string; tagline?: string; art_url?: string; type?: string }
 export interface PostProjectsResponse { project: unknown }
 export interface PostProvisioningInstancesIdDomainRequest { domain: string }
 export interface PostProvisioningInstancesIdDomainResponse { ok: boolean; changed: boolean; queued: unknown; domain: unknown; message: unknown }
@@ -252,7 +252,7 @@ export interface PostProvisioningInstancesIdForceTeardownResponse { ok: boolean;
 export interface PostProvisioningInstancesIdGithubAppRequest { account?: string }
 export interface PostProvisioningInstancesIdGithubAppResponse { state: unknown; account: unknown; post_url: unknown; personal_url: unknown; org_url: unknown; org_login: unknown; manifest: unknown; redirect_url: unknown; expires_at: unknown }
 export interface PostProvisioningInstancesIdTeardownResponse { ok: boolean; queued: unknown; action: unknown; status: unknown; superseded: unknown; message: unknown }
-export interface PostProvisioningInstancesRequest { slug: string; target_ref?: string; hosting_shape?: string; domain?: string; tier?: string; onboard_mode?: string }
+export interface PostProvisioningInstancesRequest { slug: string; target_ref?: string; hosting_shape?: string; domain?: string; tier?: string; onboard_mode?: string; type?: string }
 export interface PostSearchMarkRequest { chunk_id?: StringifiableId; useful?: unknown }
 export interface PostSearchRequest { expand?: unknown; q?: string; source_kind?: string; limit?: unknown }
 export interface PostSearchResponse { expand?: unknown; chunk?: unknown; query?: unknown; count?: unknown; total_full_tokens?: unknown; results?: unknown }

package/docs/api/openapi.json

@@ -15676,6 +15676,9 @@
           "art_url": {
             "type": "string",
             "maxLength": 2048
+          },
+          "type": {
+            "type": "string"
           }
         },
         "required": [
@@ -15830,6 +15833,9 @@
           "onboard_mode": {
             "type": "string",
             "maxLength": 20
+          },
+          "type": {
+            "type": "string"
           }
         },
         "required": [

package/docs/api-reference.md

@@ -353,7 +353,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
 | GET | `/api/bongos/projects` | `metic+archon` | — | the full curation list (includes unfeatured + owner attribution). |
-| POST | `/api/bongos/projects` | `metic+archon` | `origin`, `name`, `tagline`, `art_url` | create / update a catalog entry (manual seed for hand-wired instances; federated projects auto-catalogue at registration). |
+| POST | `/api/bongos/projects` | `metic+archon` | `origin`, `name`, `tagline`, `art_url`, `type` | create / update a catalog entry (manual seed for hand-wired instances; federated projects auto-catalogue at registration). |
 | PATCH | `/api/bongos/projects/:id/featured` | `metic+archon` | `featured` | the feature / unfeature control (the ADR 0141 §5 curation gate). |
 | GET | `/api/bongos/projects/featured` | `public` | — | a curated public showcase; no auth by design. |
 | POST | `/api/bongos/projects/invite` | `metic+archon` | `client_id`, `github_login` | invite a builder into a project (ADR 0141 §5, task #1002115). |
@@ -368,7 +368,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | GET | `/api/bongos/provisioning/github-app/status` | `public` | — | GET /provisioning/github-app/status?state=<> — the PUBLIC progress read the onboarding callback page polls (task 2096) to know when setup… |
 | GET | `/api/bongos/provisioning/health` | `public` | — | GET /provisioning/health — liveness + the core version this module mounted against. |
 | GET | `/api/bongos/provisioning/instances` | `any-builder` | — | GET /provisioning/instances — the caller's own instances + each open intent. |
-| POST | `/api/bongos/provisioning/instances` | `any-builder` | `slug`, `target_ref`, `hosting_shape`, `domain`, `tier`, `onboard_mode` | POST /provisioning/instances — request a new instance. |
+| POST | `/api/bongos/provisioning/instances` | `any-builder` | `slug`, `target_ref`, `hosting_shape`, `domain`, `tier`, `onboard_mode`, `type` | POST /provisioning/instances — request a new instance. |
 | GET | `/api/bongos/provisioning/instances/:id` | `any-builder` | — | GET /provisioning/instances/:id — read one of the caller's own instances. |
 | POST | `/api/bongos/provisioning/instances/:id/domain` | `any-builder` | `domain` | POST /provisioning/instances/:id/domain — give the caller's OWN instance its address (task 1002692, gap 5: no path existed to add a domai… |
 | POST | `/api/bongos/provisioning/instances/:id/force-teardown` | `metic+archon` | — | POST /provisioning/instances/:id/force-teardown — Archon tears down ANY instance. |

package/modules/platform-identity/migrations/platform_identity_006_project_type.sql

@@ -0,0 +1,23 @@
+-- platform_identity_006_project_type.sql — a project declares its Type (task 1002772).
+--
+-- Owner decision 2026-08-13: type is DECLARED at creation, never guessed from
+-- module flags. Nullable on purpose: every existing row predates the field and
+-- must not be back-filled with a guess — the hub renders an em dash for
+-- "not declared", which is honest. The closed vocabulary is the owner's:
+-- game / research / business / non-profit / not-sure ("not-sure" is the escape
+-- hatch so nobody is forced into a wrong answer).
+--
+-- Additive + platform_identity_-namespaced (ADR 0083 §5): a new nullable column
+-- plus a CHECK that only constrains non-null values. No existing row changes.
+-- Idempotent: safe to re-run.
+
+BEGIN;
+
+ALTER TABLE platform_identity_projects
+  ADD COLUMN IF NOT EXISTS type text;
+
+ALTER TABLE platform_identity_projects DROP CONSTRAINT IF EXISTS platform_identity_projects_type_check;
+ALTER TABLE platform_identity_projects ADD CONSTRAINT platform_identity_projects_type_check
+  CHECK (type IS NULL OR type IN ('game', 'research', 'business', 'non-profit', 'not-sure'));
+
+COMMIT;

package/modules/platform-identity/platform-identity.js

@@ -146,7 +146,7 @@ async function getAccount(githubId, { pool = defaultPool } = {}) {
 // (task #1002109) calls this with a freshly generated secret; the plaintext is
 // hashed here and never stored. Upsert-on-client_id so re-provisioning rotates
 // the secret + redirect_uris without a duplicate row.
-async function registerClient({ clientId, secret, name, redirectUris, origin, ownerGithubId }, { pool = defaultPool } = {}) {
+async function registerClient({ clientId, secret, name, redirectUris, origin, ownerGithubId, type }, { pool = defaultPool } = {}) {
   const secretHash = sha256hex(secret);
   const uris = Array.isArray(redirectUris) ? redirectUris : [];
   const { rows } = await pool.query(
@@ -167,7 +167,7 @@ async function registerClient({ clientId, secret, name, redirectUris, origin, ow
   // list the moment it federates (ADR 0141 §5). Best-effort — a catalog hiccup must
   // never fail client registration. Only when an origin is known.
   if (origin) {
-    try { await upsertProject({ origin, name, ownerGithubId }, { pool }); }
+    try { await upsertProject({ origin, name, ownerGithubId, type }, { pool }); }
     catch (err) { console.error('[platform-identity] auto-catalogue failed (non-fatal):', err.message); }
   }
   return rows[0];
@@ -207,30 +207,39 @@ async function getClientByOrigin(origin, { pool = defaultPool } = {}) {
 // Projects catalog + Explore (ADR 0141 §5)
 // -------------------------------------------------------------------------
 
+// The closed Type vocabulary (task 1002772, owner decision 2026-08-13): a project
+// DECLARES its type at creation — 'not-sure' is the escape hatch so nobody is
+// forced into a wrong answer. Mirrored by the CHECK in migration 006 (and by
+// provisioning's copy on its own instances table).
+const PROJECT_TYPES = ['game', 'research', 'business', 'non-profit', 'not-sure'];
+
 // Upsert a catalog row (keyed by origin). Called when a client registers (so every
 // federated project is catalogued, unfeatured) and by the Archon create/curate route.
 // Never touches `featured` on update — that is Archon-only via setProjectFeatured.
-async function upsertProject({ origin, name, tagline, artUrl, ownerGithubId }, { pool = defaultPool } = {}) {
+async function upsertProject({ origin, name, tagline, artUrl, ownerGithubId, type }, { pool = defaultPool } = {}) {
   const norm = String(origin || '').replace(/\/+$/, '');
   if (!norm) throw new Error('project origin required');
+  // off-vocabulary → null (the DB CHECK is the backstop; a declaration is never invented)
+  const declaredType = PROJECT_TYPES.includes(type) ? type : null;
   const { rows } = await pool.query(
-    `INSERT INTO platform_identity_projects (origin, name, tagline, art_url, owner_github_id)
-     VALUES ($1, $2, $3, $4, $5)
+    `INSERT INTO platform_identity_projects (origin, name, tagline, art_url, owner_github_id, type)
+     VALUES ($1, $2, $3, $4, $5, $6)
      ON CONFLICT (origin) DO UPDATE SET
        name            = EXCLUDED.name,
        tagline         = COALESCE(EXCLUDED.tagline, platform_identity_projects.tagline),
        art_url         = COALESCE(EXCLUDED.art_url, platform_identity_projects.art_url),
        owner_github_id = COALESCE(EXCLUDED.owner_github_id, platform_identity_projects.owner_github_id),
+       type            = COALESCE(EXCLUDED.type, platform_identity_projects.type),
        updated_at      = now()
-     RETURNING id, origin, name, tagline, art_url, owner_github_id, status, featured`,
-    [norm, name || norm, tagline ?? null, artUrl ?? null, ownerGithubId ?? null],
+     RETURNING id, origin, name, tagline, art_url, owner_github_id, type, status, featured`,
+    [norm, name || norm, tagline ?? null, artUrl ?? null, ownerGithubId ?? null, declaredType],
   );
   return rows[0];
 }
 
 async function getProject(id, { pool = defaultPool } = {}) {
   const { rows } = await pool.query(
-    `SELECT id, origin, name, tagline, art_url, owner_github_id, status, featured
+    `SELECT id, origin, name, tagline, art_url, owner_github_id, type, status, featured
        FROM platform_identity_projects WHERE id = $1`,
     [id],
   );
@@ -245,7 +254,7 @@ async function getProject(id, { pool = defaultPool } = {}) {
 // it, so as a public "last updated" it would lie.
 async function listFeaturedProjects({ pool = defaultPool } = {}) {
   const { rows } = await pool.query(
-    `SELECT origin, name, tagline, art_url, created_at
+    `SELECT origin, name, tagline, art_url, type, created_at
        FROM platform_identity_projects
       WHERE featured = true AND status = 'active'
       ORDER BY updated_at DESC`,
@@ -256,7 +265,7 @@ async function listFeaturedProjects({ pool = defaultPool } = {}) {
 // The Archon curation list — every active project + its featured flag.
 async function listAllProjects({ pool = defaultPool } = {}) {
   const { rows } = await pool.query(
-    `SELECT id, origin, name, tagline, art_url, owner_github_id, status, featured, updated_at
+    `SELECT id, origin, name, tagline, art_url, owner_github_id, type, status, featured, updated_at
        FROM platform_identity_projects
       WHERE status = 'active'
       ORDER BY featured DESC, updated_at DESC`,
@@ -512,6 +521,7 @@ module.exports = {
   setClientStatus,
   // projects catalog + Explore
   upsertProject,
+  PROJECT_TYPES,
   getProject,
   listFeaturedProjects,
   listAllProjects,

package/modules/platform-identity/routes/projects.js

@@ -42,6 +42,7 @@ module.exports = function projectsRoutes() {
       name: { required: true, type: 'string', maxLength: 200 },
       tagline: { type: 'string', maxLength: 400 },
       art_url: { type: 'string', maxLength: 2048 },
+      type: { type: 'string', enum: [...pi.PROJECT_TYPES] },
     })) return;
     try {
       const project = await pi.upsertProject({
@@ -49,6 +50,7 @@ module.exports = function projectsRoutes() {
         name: req.body.name,
         tagline: req.body.tagline,
         artUrl: req.body.art_url,
+        type: req.body.type,
       }, { pool });
       res.status(201).json({ project });
     } catch (err) {

package/modules/platform-identity/tests/platform-identity.mjs

@@ -197,6 +197,19 @@ await ta('upsertProject upserts on normalized origin; update preserves tagline/a
   assert.doesNotMatch(c.text, /featured\s*=/);
 });
 
+await ta('upsertProject carries the declared type, COALESCE-preserved like tagline (task 1002772)', async () => {
+  const pool = mockPool([{ rows: [{ id: '1', origin: 'https://p', type: 'game' }] }]);
+  await P.upsertProject({ origin: 'https://p', name: 'Proj', type: 'game' }, { pool });
+  const c = pool.calls[0];
+  assert.match(c.text, /\btype\b/, 'the declared type joins the upsert');
+  assert.match(c.text, /type\s*=\s*COALESCE/, 'a later typeless upsert must not erase a declaration');
+  assert.ok(c.params.includes('game'), 'the type value is parameterized');
+  // an off-vocabulary value is dropped, not thrown — the DB CHECK is the backstop
+  const pool2 = mockPool([{ rows: [{ id: '2' }] }]);
+  await P.upsertProject({ origin: 'https://q', name: 'Q', type: 'spacefaring' }, { pool: pool2 });
+  assert.ok(!pool2.calls[0].params.includes('spacefaring'), 'unknown types never reach the SQL');
+});
+
 await ta('listFeaturedProjects returns a PUBLIC projection (featured+active only, no owner/status)', async () => {
   const pool = mockPool([{ rows: [{ origin: 'https://p', name: 'Proj', tagline: 't', art_url: null, created_at: '2026-08-01T00:00:00Z' }] }]);
   const out = await P.listFeaturedProjects({ pool });
@@ -210,6 +223,7 @@ await ta('listFeaturedProjects returns a PUBLIC projection (featured+active only
   assert.ok(sel.trim(), 'the projection is an explicit SELECT list');
   assert.doesNotMatch(sel, /\*/, 'no star projection on a public route');
   assert.match(sel, /created_at/, 'the LISTED date (when the row was catalogued) is public');
+  assert.match(sel, /\btype\b/, 'the declared type is public — the hub table reads it (task 1002772)');
   assert.doesNotMatch(c.text, /owner_github_id/, 'public projection must not leak owner id');
   // updated_at may sort (ORDER BY) but never project: it is bumped by feature
   // toggles and client re-registration, so as a public fact it would lie.

package/modules/provisioning/migrations/provisioning_007_project_type.sql

@@ -0,0 +1,24 @@
+-- provisioning_007_project_type.sql — the wizard's declared project Type rides
+-- the provisioning request (task 1002772).
+--
+-- A standalone project never federates into the hub catalog at create time, so
+-- the declaration made in the create wizard has to live SOMEWHERE real the
+-- moment it is filed — this column is that home. The control-plane runner
+-- carries it into platform_identity_projects whenever a catalog row
+-- materializes (federation), so the answer is never thrown away. Vocabulary
+-- mirrors platform_identity_006_project_type.sql — both CHECKs are the
+-- backstop if the two route validators ever drift.
+--
+-- Additive + provisioning_-namespaced (ADR 0083 §5): a new nullable column plus
+-- a CHECK that only constrains non-null values. Idempotent: safe to re-run.
+
+BEGIN;
+
+ALTER TABLE provisioning_instances
+  ADD COLUMN IF NOT EXISTS type text;
+
+ALTER TABLE provisioning_instances DROP CONSTRAINT IF EXISTS provisioning_instances_type_check;
+ALTER TABLE provisioning_instances ADD CONSTRAINT provisioning_instances_type_check
+  CHECK (type IS NULL OR type IN ('game', 'research', 'business', 'non-profit', 'not-sure'));
+
+COMMIT;

package/modules/provisioning/provisioning.js

@@ -29,6 +29,12 @@ const HOSTING_SHAPES = ['co-tenant', 'dedicated', 'standalone'];
 // provision.js ran the greenfield path unconditionally and adopting an existing repo
 // always failed as an unrelated-history non-fast-forward (task 1002562).
 const ONBOARD_MODES = ['greenfield', 'adopt'];
+
+// The declared project Type (task 1002772) — the wizard's answer rides the
+// provisioning request so it survives until a catalog row materializes.
+// Mirrors platform-identity's PROJECT_TYPES; both tables carry a matching
+// CHECK, so a drift between the copies fails loudly at insert time.
+const PROJECT_TYPES = ['game', 'research', 'business', 'non-profit', 'not-sure'];
 // 'oauth-manifest' (task 2080) is queueable too — the GitHub-App-Manifest onboarding
 // conversion. Today the runner drains it by scanning provisioning_oauth_manifests
 // (drainOAuthManifests), not the intent queue, but it stays a valid action so the
@@ -146,6 +152,10 @@ function publicInstance(row) {
     // thing you need when diagnosing a standup (task 1002562). Coalesced for rows read
     // before provisioning_004 added the column.
     onboard_mode: row.onboard_mode || 'greenfield',
+    // The declared project Type (task 1002772) — the hub reads it off owned
+    // instances so a declaration shows before the catalog carries it. Nullable:
+    // rows predating provisioning_007, or a declined answer, project null.
+    type: row.type || null,
     // The verification overlay (task 1002696, redesign direction §3): what the
     // heartbeat last OBSERVED, which is NOT what `status` claims. null = never
     // probed — a different claim from last_verified_up=false, and the UI renders
@@ -359,22 +369,24 @@ async function listAllInstances(db, { status } = {}) {
 // re-fetches the existing row and returns { created:false } so the ROUTE can
 // decide (same owner → idempotent re-request; different owner → 409). Never
 // silently reassigns ownership.
-async function createInstance(db, { ownerBuilderId, slug, targetRef, hostingShape, domain, dbName, port, tier, onboardMode }) {
+async function createInstance(db, { ownerBuilderId, slug, targetRef, hostingShape, domain, dbName, port, tier, onboardMode, type }) {
   const shape = HOSTING_SHAPES.includes(hostingShape) ? hostingShape : 'co-tenant';
   // Unknown/absent → 'greenfield', matching the column default. Falling back to the
   // SAFE mode matters: greenfield refuses to push over existing history (no --force
   // anywhere), whereas defaulting an unknown value to 'adopt' would put the layering
   // path on a repo nobody said was pre-existing.
   const mode = ONBOARD_MODES.includes(onboardMode) ? onboardMode : 'greenfield';
+  // Type is a declaration — off-vocabulary or absent stores null, never a guess.
+  const declaredType = PROJECT_TYPES.includes(type) ? type : null;
   const cost = costEstimateUsd({ hostingShape: shape, tier });
   try {
     const { rows } = await db.query(
       `INSERT INTO provisioning_instances
-         (owner_builder_id, slug, target_ref, hosting_shape, domain, db_name, port, tier, cost_estimate_usd, onboard_mode)
-       VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10)
+         (owner_builder_id, slug, target_ref, hosting_shape, domain, db_name, port, tier, cost_estimate_usd, onboard_mode, type)
+       VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11)
        RETURNING *`,
       [ownerBuilderId, slug, targetRef ?? null, shape, domain ?? null,
-       dbName ?? null, port ?? null, tier ?? null, cost, mode]
+       dbName ?? null, port ?? null, tier ?? null, cost, mode, declaredType]
     );
     return { instance: rows[0], created: true };
   } catch (e) {
@@ -642,7 +654,7 @@ async function costLedger(db, { limit = 500 } = {}) {
 
 module.exports = {
   // constants
-  INSTANCE_STATES, HOSTING_SHAPES, ONBOARD_MODES, INTENT_ACTIONS, TEARDOWN_FROM,
+  INSTANCE_STATES, HOSTING_SHAPES, ONBOARD_MODES, PROJECT_TYPES, INTENT_ACTIONS, TEARDOWN_FROM,
   PROVISION_ENQUEUE_FROM, DOMAIN_ATTACH_FROM, TIER_MONTHLY_USD, CERT_ELIGIBLE_STATES,
   // pure
   isValidSlug, costEstimateUsd, publicInstance, normalizeHostname,

package/modules/provisioning/routes/provisioning.js

@@ -313,6 +313,8 @@ module.exports = function provisioningRoutes() {
       domain: { type: 'string', maxLength: 253 },
       tier: { type: 'string', maxLength: 40 },
       onboard_mode: { type: 'string', maxLength: 20 },
+      // the declared project Type (task 1002772) — optional, closed vocabulary
+      type: { type: 'string', enum: [...provisioning.PROJECT_TYPES] },
     })) return;
     const body = req.body || {};
     const slug = String(body.slug || '').trim().toLowerCase();
@@ -339,6 +341,7 @@ module.exports = function provisioningRoutes() {
         ownerBuilderId: req.builder.id, slug,
         targetRef: body.target_ref, hostingShape: shape,
         domain: body.domain, tier: body.tier, onboardMode,
+        type: body.type,
       });
       // Slug already taken by ANOTHER builder — refuse (never reassign ownership).
       if (!created && String(instance.owner_builder_id) !== String(req.builder.id)) {
@@ -373,12 +376,23 @@ module.exports = function provisioningRoutes() {
           };
         }
       }
+      // Same honesty for a changed Type (task 1002772): a re-request keeps the
+      // original declaration, and unlike domain there is no mutation route yet —
+      // say so rather than silently dropping the new answer.
+      let typeIgnored;
+      if (!created && body.type && body.type !== instance.type) {
+        typeIgnored = {
+          requested: body.type, current: instance.type || null,
+          hint: "a re-request never changes an existing instance's declared type",
+        };
+      }
       res.status(created ? 201 : 200).json({
         instance: provisioning.publicInstance(instance),
         open_intent: intent ? { action: intent.action, state: intent.state } : null,
         queued: intentCreated,
         created,
         ...(domainIgnored ? { domain_ignored: domainIgnored } : {}),
+        ...(typeIgnored ? { type_ignored: typeIgnored } : {}),
       });
     } catch (err) {
       console.error('[provisioning] POST /provisioning/instances', err);

package/modules/provisioning/tests/provisioning.mjs

@@ -228,5 +228,12 @@ await ta('claimNextOAuthManifest flips code_received→converting, gated on an A
   assert.match(sql, /m\.status = 'code_received' AND i\.status = 'active'/);
 });
 
+t('publicInstance projects the declared type — nullable, never silently dropped (task 1002772)', () => {
+  const p = P.publicInstance({ id: 1, slug: 'x', status: 'active', type: 'game' });
+  assert.equal(p.type, 'game', 'the allow-list projection must carry the declaration');
+  const q = P.publicInstance({ id: 2, slug: 'y', status: 'active' });
+  assert.equal(q.type, null, 'a row predating provisioning_007 projects null, not undefined');
+});
+
 console.log(`\nprovisioning module: ${passed} passed, ${failed} failed`);
 process.exit(failed ? 1 : 0);

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.116",
+  "version": "1.19.117",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.116",
+      "version": "1.19.117",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.116",
+  "version": "1.19.117",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/public-landing/assets/cosmos.css

@@ -581,7 +581,11 @@ p.sec-p{font-size:var(--fs-lede);font-weight:500;color:var(--ink-soft);line-heig
 .tbl .colStatus{width:1%;white-space:nowrap;}
 .tbl .colGo{width:1%;white-space:nowrap;padding-left:8px;}
 .tbl .colName{width:auto;}
-@media (max-width:780px){.tbl .colTags{display:none;}}
+.tbl .colType{width:1%;white-space:nowrap;}
+/* the declared-type tag (task 1002772) — its own vocabulary: not the relationship
+   .pill, not the liveness .chip. Two different facts never wear the same chrome. */
+.typeTag{font-family:var(--font-mono);font-size:10.5px;font-weight:500;color:var(--ink-soft);border:1px solid var(--line);border-radius:999px;padding:2px 9px;white-space:nowrap;}
+@media (max-width:780px){.tbl .colTags,.tbl .colType{display:none;}}
 
 /* ── the living sky (task 1002762): camera, spotlight, hover card ──
    The camera is ONE transform on .skyCam; orbs carry only their own physics

package/public-landing/projects.html

@@ -58,7 +58,7 @@ try{var _m=localStorage.getItem('cb-color-mode');if(_m==='light'||_m==='dark')do
    over one, so both modes and a re-brand carry it for free (C1/C2/C4).
    Naming: the wizard's field wrapper is .wizField — cosmos owns .field (the
    orb map) — and its done checklist is .humanSteps — cosmos owns .steps
-   (the four-beat rail). Its inputs are scoped to the view so the glass
+   (the five-beat rail). Its inputs are scoped to the view so the glass
    search pills (#mapQ, #mineQ) keep their own look. */
 .panel{display:none;}
 .panel.on{display:block;animation:fadeStep .3s ease both;}
@@ -248,6 +248,22 @@ h1[tabindex="-1"]:focus{outline:none;}
    and faint ink only reaches 3.96:1 on it (task 1002749). */
 .ghrow .priv{margin-left:auto;font-size:11px;font-weight:600;color:var(--ink-soft);background:color-mix(in srgb,var(--ink) 8%,transparent);border-radius:5px;padding:1px 6px;}
 
+/* the type declaration (task 1002772): five selectable pills + a description
+   card themed per type via a component-scoped custom property (C1 — never a
+   page-local root token). No dark rules of its own: every surface is a token
+   or a color-mix over one, so both modes carry it (C2/C4). */
+.typeCards{display:flex;flex-wrap:wrap;gap:8px;margin-bottom:14px;}
+.tpill{cursor:pointer;font-family:var(--font-body);font-weight:700;font-size:13.5px;color:var(--ink-soft);
+  background:var(--bg-card);border:2px solid var(--line);border-radius:999px;padding:9px 16px;
+  transition:all .12s ease;}
+.tpill:hover{border-color:var(--accent);color:var(--accent-deep);}
+.tpill[aria-pressed=true]{background:var(--accent);border-color:var(--accent);color:#fff;}
+.typeCard{border:2px solid color-mix(in srgb,var(--type-acc) 35%,var(--bg-card));border-radius:18px;
+  padding:16px 18px;margin-bottom:6px;
+  background:linear-gradient(180deg,color-mix(in srgb,var(--type-acc) 9%,var(--bg-card)) 0%,var(--bg-card) 100%);}
+.typeCard b{display:block;font-family:var(--font-display);font-size:17px;color:color-mix(in srgb,var(--type-acc) 40%,var(--ink));margin-bottom:4px;}
+.typeCard p{font-size:13.5px;font-weight:500;color:var(--ink-soft);line-height:1.55;}
+
 /* 840px matches cosmos's createSplit collapse, the breakpoint the old /create
    used (860) — the two-up grids and the bongo cell fold together */
 @media (max-width:840px){.row2,.choices{grid-template-columns:1fr;}}
@@ -384,6 +400,7 @@ h1[tabindex="-1"]:focus{outline:none;}
       <thead>
         <tr>
           <th class="colName" data-sort="name" aria-sort="ascending">Project</th>
+          <th class="colType">Type</th>
           <th class="right" data-sort="builders">Builders</th>
           <th class="colTags">Runs</th>
           <th class="right colStatus">Status</th>
@@ -400,6 +417,7 @@ h1[tabindex="-1"]:focus{outline:none;}
           <td class="colName"><span class="pname"><span class="pdot" style="--acc:var(--accent)"></span>
             <span><span class="ptitle" data-brand-product-inline>Cloud Bongos</span><span id="selfPill"></span><br>
             <span class="ptag">this platform</span></span></span></td>
+          <td class="colType">—</td>
           <td class="right num" id="selfBuilders">—</td>
           <td class="colTags" id="selfTags">—</td>
           <td class="right colStatus"><span class="chip calm"><span class="cdot"></span>—</span></td>
@@ -439,6 +457,7 @@ h1[tabindex="-1"]:focus{outline:none;}
            authoritative-looking element of the page reads as broken, not
            honest (task 1002778). -->
       <dl class="cardMeta" id="cardMeta" hidden>
+        <dt id="cardTypeL" hidden>Type</dt><dd id="cardType" hidden></dd>
         <dt id="cardBuildersL" hidden>Builders</dt><dd id="cardBuilders" hidden></dd>
         <dt id="cardRunsL" hidden>Runs</dt><dd id="cardRuns" hidden></dd>
         <dt id="cardOwnerL" hidden>Owner</dt><dd id="cardOwner" hidden></dd>
@@ -507,7 +526,7 @@ h1[tabindex="-1"]:focus{outline:none;}
 
 <!-- ══════════════════ VIEW · NEW PROJECT ══════════════════════════════════
      The whole create wizard, absorbed from /create (task 1002763; direction
-     §4 — that route now 302s here). Six panels behind the four-beat rail; the
+     §4 — that route now 302s here). Seven panels behind the five-beat rail; the
      wizard block in the script below drives them. Same trust boundary as
      ever: every button here only ENQUEUES a provisioning request (ADR 0111).
      The name panel carries a static `on` so a no-script visitor still reads
@@ -517,9 +536,10 @@ h1[tabindex="-1"]:focus{outline:none;}
     <div class="card">
       <ol class="steps" aria-label="Creation steps">
         <li class="now" data-step="1"><span class="snum">1</span><span class="slbl">Name</span></li>
-        <li data-step="2"><span class="snum">2</span><span class="slbl">Home</span></li>
-        <li data-step="3"><span class="snum">3</span><span class="slbl">Address</span></li>
-        <li data-step="4"><span class="snum">4</span><span class="slbl">Create</span></li>
+        <li data-step="2"><span class="snum">2</span><span class="slbl">Type</span></li>
+        <li data-step="3"><span class="snum">3</span><span class="slbl">Home</span></li>
+        <li data-step="4"><span class="snum">4</span><span class="slbl">Address</span></li>
+        <li data-step="5"><span class="snum">5</span><span class="slbl">Create</span></li>
       </ol>
 
       <div class="createSplit">
@@ -566,11 +586,39 @@ h1[tabindex="-1"]:focus{outline:none;}
               and capture-resistant by design.</p>
           </section>
 
-          <!-- step 2 · home (repo + mode) -->
+          <!-- step 2 · type (task 1002772) — a DECLARATION, closed vocabulary
+               (owner decision 2026-08-13): Game / Research / Business /
+               Non-Profit / Not Sure, selectable buttons with a themed
+               description card. Not Sure is the escape hatch — nobody is
+               forced into a wrong answer, and it can change later. -->
+          <section class="panel" id="panel-type" aria-labelledby="type-h">
+            <h1 id="type-h">What kind of project is it?</h1>
+            <p class="lede">Pick the shape that fits best — it labels the project on the map. Not sure is a fine answer.</p>
+            <form data-next="3">
+              <div class="typeCards" id="typeCards" role="group" aria-label="Project type">
+                <button type="button" class="tpill" data-type="game" aria-pressed="false">Game</button>
+                <button type="button" class="tpill" data-type="research" aria-pressed="false">Research</button>
+                <button type="button" class="tpill" data-type="business" aria-pressed="false">Business</button>
+                <button type="button" class="tpill" data-type="non-profit" aria-pressed="false">Non-Profit</button>
+                <button type="button" class="tpill" data-type="not-sure" aria-pressed="false">Not Sure</button>
+              </div>
+              <div class="typeCard" id="typeCard" hidden aria-live="polite">
+                <b id="typeCardName"></b>
+                <p id="typeCardDesc"></p>
+              </div>
+              <div class="hint" id="h-projtype">&nbsp;</div>
+              <div class="nav">
+                <button type="button" class="btn ghost" data-back="1">← Back</button>
+                <button type="submit" class="btn">Next →</button>
+              </div>
+            </form>
+          </section>
+
+          <!-- step 3 · home (repo + mode) -->
           <section class="panel" id="panel-home" aria-labelledby="home-h">
             <h1 id="home-h">Where the code lives</h1>
             <p class="lede">Every project is a real GitHub repository that you own. Start from a clean slate, or bring a repo you already have.</p>
-            <form data-next="3">
+            <form data-next="4">
               <div class="choices" role="group" aria-label="Starting point">
                 <button type="button" class="choice" id="c-green" aria-pressed="true">
                   <!-- token-built, not platform orange — public-landing/ ships wholesale to
@@ -629,19 +677,19 @@ h1[tabindex="-1"]:focus{outline:none;}
               </div>
               <div class="hint" id="h-home">&nbsp;</div>
               <div class="nav">
-                <button type="button" class="btn ghost" data-back="1">← Back</button>
+                <button type="button" class="btn ghost" data-back="2">← Back</button>
                 <button type="submit" class="btn">Next →</button>
               </div>
             </form>
           </section>
 
-          <!-- step 3 · address — a CONFIRMATION, not a form (task 1002704: every project
+          <!-- step 4 · address — a CONFIRMATION, not a form (task 1002704: every project
                gets its slug subdomain assigned up front; opt-out lives in the disclosure).
                The domainless default was a proven dead-end (QA walk, task 1002702). -->
           <section class="panel" id="panel-address" aria-labelledby="addr-h">
             <h1 id="addr-h">Its address in the sky</h1>
             <p class="lede">The handle names your project on the platform — and its address comes with it. Sign-in, sharing, everything just works from the moment it stands up.</p>
-            <form data-next="4">
+            <form data-next="5">
               <label class="wizField"><span>Project handle</span>
                 <input type="text" id="f-slug" placeholder="mercury" autocomplete="off" maxlength="40" spellcheck="false">
                 <div class="hint" id="h-slug">&nbsp;</div>
@@ -663,13 +711,13 @@ h1[tabindex="-1"]:focus{outline:none;}
                 </details>
               </div>
               <div class="nav">
-                <button type="button" class="btn ghost" data-back="2">← Back</button>
+                <button type="button" class="btn ghost" data-back="3">← Back</button>
                 <button type="submit" class="btn">Next →</button>
               </div>
             </form>
           </section>
 
-          <!-- step 4 · review + create -->
+          <!-- step 5 · review + create -->
           <section class="panel" id="panel-review" aria-labelledby="rev-h">
             <h1 id="rev-h">Ready to roll</h1>
             <p class="lede">One tap files the request and the platform starts standing your project up — server, database, address. Here's the beat you're about to drop:</p>
@@ -677,7 +725,7 @@ h1[tabindex="-1"]:focus{outline:none;}
             <div class="alert" id="createAlert" role="alert"></div>
             <div class="nav" style="flex-direction:column;align-items:stretch;">
               <button type="button" class="btn big" id="doCreate">Create my project</button>
-              <button type="button" class="btn ghost" data-back="3" style="align-self:flex-start;margin-top:10px;">← Back</button>
+              <button type="button" class="btn ghost" data-back="4" style="align-self:flex-start;margin-top:10px;">← Back</button>
             </div>
             <p class="finePrint">This files the request; the control plane does the real standup and nothing touches servers from this page. You'll get the few steps only you can do right after.</p>
           </section>
@@ -1029,6 +1077,25 @@ h1[tabindex="-1"]:focus{outline:none;}
     if (tags.length > TAG_CAP) shown.push('<span>+' + (tags.length - TAG_CAP) + '</span>');
     return '<span class="tags">' + shown.join('') + '</span>';
   }
+  /* The declared-type vocabulary (task 1002772; owner decision 2026-08-13).
+     One formatter for the table cell + the card, like tagsHtml: null means
+     "not declared" and renders an em dash — never a guess. The per-type accent
+     reuses the ORB_ACCENTS five-token palette (component-scoped, C1). */
+  var TYPE_META = {
+    'game':       { label: 'Game',       acc: 'var(--accent)',     desc: 'A world to play in. Agents build the world, the rules, and the play itself.' },
+    'research':   { label: 'Research',   acc: 'var(--sea)',        desc: 'A question being worked. Agents gather the evidence, run the experiments, and write up what holds — the repo is the lab notebook.' },
+    'business':   { label: 'Business',   acc: 'var(--terracotta)', desc: 'A venture with customers. Agents build the product and the plumbing behind it.' },
+    'non-profit': { label: 'Non-Profit', acc: 'var(--gold-soft)',  desc: 'A cause, not a profit line. Agents build for a mission and the community around it.' },
+    'not-sure':   { label: 'Not Sure',   acc: 'var(--rule-soft)',  desc: 'Still finding its shape. Pick this now — nothing depends on it.' }
+  };
+  function typeLabel(t) {
+    var m = TYPE_META[t];
+    return m ? m.label : '';
+  }
+  function typeHtml(t) {
+    var l = typeLabel(t);
+    return l ? '<span class="typeTag">' + l + '</span>' : '—';
+  }
   function matchesMapQuery(p, q) {
     if (!q) return true;
     /* an owned entry also answers by slug and address — the same fields the
@@ -1116,6 +1183,7 @@ h1[tabindex="-1"]:focus{outline:none;}
            unreachable — and an em dash says exactly that. 0 is a real answer and
            renders as 0, because "nobody has joined yet" is a different fact from
            "we could not ask". */
+        '<td class="colType">' + typeHtml(p.type) + '</td>' +
         '<td class="right num">' + (p.builders == null ? '—' : esc(String(p.builders))) + '</td>' +
         '<td class="colTags">' + tagsHtml(p.tags) + '</td>' +
         /* liveness on a CATALOG row is NOT probed by this surface — a chip
@@ -1146,6 +1214,9 @@ h1[tabindex="-1"]:focus{outline:none;}
       var h = hostOf(p.origin);
       catalogHosts[h] = 1;
       p._inst = ownedByHost[h] || null;
+      /* the catalog may predate the declaration the owner filed with the
+         create — their own instance row is a truthful source, never a guess */
+      if (p.type == null && p._inst && p._inst.type) p.type = p._inst.type;
     });
     var browse = catalog.slice();
     ownedInstances.forEach(function (inst) {
@@ -1154,7 +1225,7 @@ h1[tabindex="-1"]:focus{outline:none;}
       browse.push({
         name: inst.slug, tagline: inst.domain || '',
         origin: inst.domain ? 'https://' + inst.domain : '',
-        builders: null, tags: null,
+        builders: null, tags: null, type: inst.type || null,
         _inst: inst, _acc: ORB_ACCENTS[slugAccent(inst.slug)]
       });
     });
@@ -1282,7 +1353,8 @@ h1[tabindex="-1"]:focus{outline:none;}
     /* builders: 0 is a real answer ("nobody has joined yet"), null is "we could
        not ask" and hides. runs: [] is a real answer too — the project declares
        nothing beyond the core set, which the owner voiced as "core". */
-    var any = cardFact('cardBuilders', p.builders == null ? '' : String(p.builders));
+    var any = cardFact('cardType', typeLabel(p.type));
+    any = cardFact('cardBuilders', p.builders == null ? '' : String(p.builders)) || any;
     any = cardFact('cardRuns', Array.isArray(p.tags) ? tagsHtml(p.tags) : '', true) || any;
     /* when the rel chip already says "yours", naming the viewer as Owner is
        noise — the fact answers strangers, not the person it describes */
@@ -1929,9 +2001,13 @@ h1[tabindex="-1"]:focus{outline:none;}
     var root = $('view-new');
 
     /* ── state ── */
-    var DRAFT_KEY = 'cb-create-draft';
+    /* -v2 since task 1002772: the step indices renumbered (Type joined as 2),
+       so a draft written under the five-step numbering must be ignored, not
+       reinterpreted — a stale step 4 would land on Address and skip the Type
+       gate with the rail already marking it done. */
+    var DRAFT_KEY = 'cb-create-draft-v2';
     var CREATED_KEY = 'cb-created-instance';
-    var state = { step: 0, name: '', mode: 'greenfield', owner: '', ownerTouched: false, repo: '', repoTouched: false, slug: '', slugTouched: false, domain: '', noAddress: false };
+    var state = { step: 0, name: '', projType: null, mode: 'greenfield', owner: '', ownerTouched: false, repo: '', repoTouched: false, slug: '', slugTouched: false, domain: '', noAddress: false };
     try { Object.assign(state, JSON.parse(sessionStorage.getItem(DRAFT_KEY) || '{}')); } catch (e) {}
     var authKnown = false;   /* flips true when the boot's /me settles, either way */
 
@@ -1945,7 +2021,7 @@ h1[tabindex="-1"]:focus{outline:none;}
         state.name = handedName.trim().slice(0, 80);
         state.slug = deriveSlug(state.name); state.slugTouched = false;
         state.repo = deriveRepo(state.name); state.repoTouched = false;
-        state.step = state.step >= 1 && state.step <= 4 ? state.step : 1;
+        state.step = state.step >= 1 && state.step <= 5 ? state.step : 1;
         try { sessionStorage.setItem(DRAFT_KEY, JSON.stringify(state)); } catch (e) {}
       }
     } catch (e) {}
@@ -2044,8 +2120,10 @@ h1[tabindex="-1"]:focus{outline:none;}
       try { sessionStorage.setItem(DRAFT_KEY, JSON.stringify(state)); } catch (e) {}
     }
 
-    /* ── step navigation ── */
-    var panels = { 0: 'panel-gate', 1: 'panel-name', 2: 'panel-home', 3: 'panel-address', 4: 'panel-review', 5: 'panel-done' };
+    /* ── step navigation ──
+       Six steps since task 1002772: gate 0 · name 1 · type 2 · home 3 ·
+       address 4 · review 5 · done 6 (the rail shows 1-5; done marks it all). */
+    var panels = { 0: 'panel-gate', 1: 'panel-name', 2: 'panel-type', 3: 'panel-home', 4: 'panel-address', 5: 'panel-review', 6: 'panel-done' };
     function show(step, moveFocus) {
       state.step = step;
       Object.keys(panels).forEach(function (k) {
@@ -2054,11 +2132,11 @@ h1[tabindex="-1"]:focus{outline:none;}
       root.querySelectorAll('.steps li').forEach(function (li) {
         var n = Number(li.getAttribute('data-step'));
         li.classList.toggle('now', n === step);
-        li.classList.toggle('done', n < step || step === 5);
+        li.classList.toggle('done', n < step || step === 6);
       });
       saveDraft();
       /* the done step takes the whole card — the bongo pair steps aside */
-      root.querySelector('.createSplit').classList.toggle('wizDone', step === 5);
+      root.querySelector('.createSplit').classList.toggle('wizDone', step === 6);
       /* focus moves ONLY on a deliberate step (the hub rule setView already
          applies to this view: never on boot, never on a background settle) */
       if (moveFocus) {
@@ -2068,9 +2146,9 @@ h1[tabindex="-1"]:focus{outline:none;}
       /* the repo probe is authenticated — never fire it before /me settles
          (a pre-auth probe 401s for strangers and, worse, could seed the
          draft's owner with myLogin()'s placeholder) */
-      if (step === 2) { syncHome(); if (authKnown) ensureRepoAccess(); }
-      if (step === 3) renderAddrPanel();
-      if (step === 4) renderReview();
+      if (step === 3) { syncHome(); if (authKnown) ensureRepoAccess(); }
+      if (step === 4) renderAddrPanel();
+      if (step === 5) renderReview();
     }
 
     /* ── field wiring ── */
@@ -2118,8 +2196,35 @@ h1[tabindex="-1"]:focus{outline:none;}
     $('c-adopt').addEventListener('click', function () { setMode('adopt'); });
     setMode(state.mode);
 
+    /* ── the type declaration (task 1002772) ── selecting a pill fills the
+       description card, themed per type via --type-acc (component-scoped, C1) */
+    function paintType(t) {
+      root.querySelectorAll('#typeCards .tpill').forEach(function (b) {
+        b.setAttribute('aria-pressed', String(b.getAttribute('data-type') === t));
+      });
+      var card = $('typeCard');
+      var m = t && TYPE_META[t];
+      if (m) {
+        card.hidden = false;
+        card.style.setProperty('--type-acc', m.acc);
+        $('typeCardName').textContent = m.label;
+        $('typeCardDesc').textContent = m.desc;
+      } else {
+        card.hidden = true;
+      }
+    }
+    root.querySelectorAll('#typeCards .tpill').forEach(function (b) {
+      b.addEventListener('click', function () {
+        state.projType = b.getAttribute('data-type');
+        $('h-projtype').innerHTML = '&nbsp;'; $('h-projtype').className = 'hint';
+        paintType(state.projType);
+        saveDraft();
+      });
+    });
+    paintType(state.projType || null);
+
     /* ── GitHub-integrated repo picker (adopt) + auto-create (fresh) — task 1002099 / ADR 0143.
-          Progressive enhancement: probe GET /github/repos once we reach step 2.
+          Progressive enhancement: probe GET /github/repos once we reach the Home step.
             200 → we hold repo access → show the picker (adopt) / name field (fresh);
             403 → offer to grant repo access (a ?repos=1 re-sign-in);
             503 (server can't store the token) or any error → the manual inputs.
@@ -2134,7 +2239,7 @@ h1[tabindex="-1"]:focus{outline:none;}
 
     function connectRepos(e) {
       if (e) e.preventDefault();
-      /* Same-tab navigation so the sessionStorage draft round-trips back to step 2. */
+      /* Same-tab navigation so the sessionStorage draft round-trips back to the Home step. */
       window.location.assign(API + '/auth/web/start?return=/projects%3Fview%3Dnew&repos=1');
     }
     $('ghConnectBtn').addEventListener('click', connectRepos);
@@ -2292,6 +2397,14 @@ h1[tabindex="-1"]:focus{outline:none;}
         return true;
       }
       if (step === 2) {
+        if (!state.projType) {
+          $('h-projtype').textContent = 'Pick one — Not Sure is a fine answer.';
+          $('h-projtype').className = 'hint err';
+          return false;
+        }
+        return true;
+      }
+      if (step === 3) {
         var homeErr = function (msg) { $('h-home').textContent = msg; $('h-home').className = 'hint err'; return false; };
         if (repoAccess === 'need-connect') return homeErr('Allow GitHub repo access to pick or create your repository — or choose “enter it manually”.');
         if (repoAccess === true && state.mode !== 'adopt') {
@@ -2306,7 +2419,7 @@ h1[tabindex="-1"]:focus{outline:none;}
         $('h-home').innerHTML = '&nbsp;'; $('h-home').className = 'hint';
         return true;
       }
-      if (step === 3) {
+      if (step === 4) {
         if (!validSlug(state.slug)) {
           $('h-slug').textContent = '2–40 lowercase letters, numbers, or dashes; no leading/trailing/double dash.';
           $('h-slug').className = 'hint err'; $('f-slug').classList.add('bad');
@@ -2347,6 +2460,7 @@ h1[tabindex="-1"]:focus{outline:none;}
       cb.disabled = false; cb.textContent = 'Create my project';
       var rows = [
         ['Project', esc(state.name)],
+        ['Type', typeLabel(state.projType) || 'Not declared'],
         ['Starting from', state.mode === 'adopt' ? 'A repo you already have' : 'A fresh, empty repo'],
         ['Repository', '<code>' + esc(state.owner + '/' + state.repo) + '</code>'],
         ['Handle', '<code>' + esc(state.slug) + '</code>'],
@@ -2415,6 +2529,7 @@ h1[tabindex="-1"]:focus{outline:none;}
           headers: { 'Content-Type': 'application/json' },
           body: JSON.stringify({
             slug: state.slug,
+            type: state.projType || undefined,
             hosting_shape: 'standalone',
             domain: resolvedDomain() || undefined,
             target_ref: state.owner + '/' + state.repo,
@@ -2444,7 +2559,7 @@ h1[tabindex="-1"]:focus{outline:none;}
           sessionStorage.removeItem(DRAFT_KEY);
         } catch (e) {}
         renderDone();
-        show(5, true);
+        show(6, true);
         startProgress(data.instance && data.instance.id);
       }).catch(function (err) {
         if (String(err && err.message) === 'signing in') return;
@@ -2452,7 +2567,7 @@ h1[tabindex="-1"]:focus{outline:none;}
         if (err && err.gotoHome) {
           /* A repo-creation problem (name taken / reconnect) — bounce back to the Home
              step with the reason, so the user fixes it where the repo is chosen. */
-          show(2, true);
+          show(3, true);
           $('h-home').textContent = err.homeMsg || 'Please revisit the repository step.';
           $('h-home').className = 'hint err';
           return;
@@ -2828,12 +2943,13 @@ h1[tabindex="-1"]:focus{outline:none;}
         live = { instStatus: null, manifest: null, manifestMsg: '' };
         lastStepsHtml = '';
         try { sessionStorage.removeItem(CREATED_KEY); sessionStorage.removeItem(DRAFT_KEY); } catch (e) {}
-        state = { step: 1, name: '', mode: 'greenfield', owner: '', ownerTouched: false, repo: '', repoTouched: false, slug: '', slugTouched: false, domain: '', noAddress: false };
+        state = { step: 1, name: '', projType: null, mode: 'greenfield', owner: '', ownerTouched: false, repo: '', repoTouched: false, slug: '', slugTouched: false, domain: '', noAddress: false };
         $('newName').value = ''; $('f-owner').value = ''; $('f-repo').value = ''; $('f-slug').value = ''; $('f-domain').value = '';
         $('f-noaddr').checked = false;
         /* Re-seed the owner from the signed-in account for the next project. */
         if (me && me.github_login) { state.owner = me.github_login; $('f-owner').value = state.owner; }
         $('h-name').innerHTML = '&nbsp;';
+        paintType(null);
         setMode('greenfield');
         show(1, true);
       });
@@ -2858,15 +2974,15 @@ h1[tabindex="-1"]:focus{outline:none;}
         state.name = created.name || created.slug; state.slug = created.slug || '';
         state.domain = created.domain || ''; state.mode = created.mode || 'greenfield';
         renderDone();
-        show(5, !!focus);
+        show(6, !!focus);
         startProgress(created.id);
         resumePolls();
         return;
       }
       /* before identity settles, never render past the name step: deeper steps
-         carry authenticated side effects (the step-2 repo probe), and onAuth()
+         carry authenticated side effects (the Home-step repo probe), and onAuth()
          re-enters to the real draft step the moment /me answers */
-      var step = authKnown && state.step >= 1 && state.step <= 4 ? state.step : 1;
+      var step = authKnown && state.step >= 1 && state.step <= 5 ? state.step : 1;
       if (step === 1) {
         show(1, false);
         if (focus) $('newName').focus();

package/scripts/gds/provision.js

@@ -1007,7 +1007,9 @@ async function federateInstance(inst, deps) {
     ownerGithubId = rows[0] ? rows[0].github_id : null;
   } catch { /* non-fatal */ }
   await platformIdentity.registerClient(
-    { clientId, secret: clientSecret, name: inst.slug, redirectUris, origin, ownerGithubId },
+    // type: the owner's declaration rides the instance row from the create
+    // wizard (task 1002772) and lands on the catalog row here — never guessed.
+    { clientId, secret: clientSecret, name: inst.slug, redirectUris, origin, ownerGithubId, type: inst.type },
     { pool: db },
   );
   log(`  [federate] registered client '${clientId}' on the hub (origin ${origin})`);

package/src/module-api.js

@@ -659,8 +659,10 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 //         landed since 1.19.114 with no explicit bump. run 31825824596. (task 1002620)
 //   1.19.116 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
 //         landed since 1.19.115 with no explicit bump. run 31827642395. (task 1002620)
+//   1.19.117 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.116 with no explicit bump. run 31830559253. (task 1002620)
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.116'; // CI auto-patch carrier (ADR 0161); see changelog above
+const CORE_VERSION = '1.19.117'; // CI auto-patch carrier (ADR 0161); see changelog above
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/cosmos_token_contrast.mjs

@@ -178,6 +178,13 @@ const PAIRS = [
   // alone do not cover them
   ['?view=new .ghrow .priv 11px',       'var(--ink-soft)',      'color-mix(in srgb,var(--ink) 8%,var(--bg-deep))', 4.5],
   ['--on-ok on an --ok fill',           'var(--on-ok)',         'var(--ok)',            4.5],
+  // the wizard's per-type description card (task 1002772): heading ink is a
+  // 40%-accent ink mix over the card's own 9%-accent tint — one row per type
+  ['typeCard heading · game',           'color-mix(in srgb,var(--accent) 40%,var(--ink))',     'color-mix(in srgb,var(--accent) 9%,var(--bg-card))',     4.5],
+  ['typeCard heading · research',       'color-mix(in srgb,var(--sea) 40%,var(--ink))',        'color-mix(in srgb,var(--sea) 9%,var(--bg-card))',        4.5],
+  ['typeCard heading · business',       'color-mix(in srgb,var(--terracotta) 40%,var(--ink))', 'color-mix(in srgb,var(--terracotta) 9%,var(--bg-card))', 4.5],
+  ['typeCard heading · non-profit',     'color-mix(in srgb,var(--gold-soft) 40%,var(--ink))',  'color-mix(in srgb,var(--gold-soft) 9%,var(--bg-card))',  4.5],
+  ['typeCard heading · not-sure',       'color-mix(in srgb,var(--rule-soft) 40%,var(--ink))',  'color-mix(in srgb,var(--rule-soft) 9%,var(--bg-card))',  4.5],
   ['?view=new input ::placeholder',     'var(--ink-faint)',     CARD,                   4.5],
   ['?view=new .ghlist .hint on deep',   'var(--ink-faint)',     'var(--bg-deep)',       4.5],
   ['--chrome-accent wordmark',          'var(--chrome-accent)', 'var(--page-bg)',       4.5],

package/tests/projects_hub.mjs

@@ -228,11 +228,37 @@ test('/create is absorbed — the wizard lives here and the route only redirects
   const server = fs.readFileSync(path.join(ROOT, 'src', 'platform-server.js'), 'utf8');
   assert.match(server, /res\.redirect\(302, '\/projects\?view=new'/,
     '/create must 302 into the hub (302, not 301: the URL is an OAuth return target in the wild)');
-  for (const id of ['panel-gate', 'panel-name', 'panel-home', 'panel-address', 'panel-review', 'panel-done']) {
+  for (const id of ['panel-gate', 'panel-name', 'panel-type', 'panel-home', 'panel-address', 'panel-review', 'panel-done']) {
     assert.match(HUB, new RegExp(`id="${id}"`), `the wizard's ${id} ships as real markup (C7)`);
   }
 });
 
+test('the wizard step indices stay coupled — data-next lands one past its own panel (task 1002772)', () => {
+  // The whole renumbering turns on validateStep(next - 1): a form's data-next
+  // must sit inside panels[next - 1], or the validator guards the wrong step.
+  const pm = SCRIPT.match(/var panels = \{([^}]*)\}/);
+  assert.ok(pm, 'the panels map must exist');
+  const map = {};
+  for (const m of pm[1].matchAll(/(\d+):\s*'([a-z-]+)'/g)) map[Number(m[1])] = m[2];
+  const nexts = [...HUB.matchAll(/data-next="(\d+)"/g)];
+  assert.ok(nexts.length >= 4, 'every wizard form declares its next step');
+  for (const m of nexts) {
+    const before = HUB.slice(0, m.index);
+    const sec = before.lastIndexOf('id="panel-');
+    assert.ok(sec !== -1, 'a data-next form lives inside a panel');
+    const id = HUB.slice(sec + 4).match(/^(panel-[a-z]+)/)[1];
+    assert.equal(id, map[Number(m[1]) - 1],
+      `data-next="${m[1]}" must live in panels[${Number(m[1]) - 1}] — validateStep(next-1) guards that panel`);
+  }
+  for (const m of HUB.matchAll(/data-back="(\d+)"/g)) {
+    assert.ok(map[Number(m[1])], `data-back="${m[1]}" must point at a mapped panel`);
+  }
+  // the rail numbers every step except the gate and the done panel
+  const beats = [...HUB.matchAll(/data-step="(\d+)"/g)].map((x) => Number(x[1]));
+  assert.equal(Math.max.apply(null, beats), Object.keys(map).length - 2,
+    'the rail shows every numbered step except gate and done');
+});
+
 test('the absorbed wizard sheds its two URL landmines — /gate/ and the whole-query strip', () => {
   // create.html carried a document-level Escape that navigated to the retired
   // /gate/ (a 404 the href-only guard above cannot see: it was a
@@ -475,18 +501,21 @@ test('the row keeps its own Open link working underneath the card', () => {
    The mock's columns shipped whole — Project / Builders / Type / Tags / Status
    — but three of them rendered an em dash for every row, forever, because the
    public projection carries four fields and Type/Tags are not in the catalog
-   schema at all. A header promising a column is a claim like any other. ── */
+   schema at all. A header promising a column is a claim like any other.
+   Builders and Runs came back with a source in task 1002771; Type came back in
+   task 1002772 when a project began DECLARING it at creation — a nullable
+   declared field, so an em dash now means "not declared", never a guess. ── */
 
-test('the table declares no column it has no source for', () => {
+test('every table column has a source — Type is declared, never guessed', () => {
   const thead = (HUB.match(/<thead>([\s\S]*?)<\/thead>/) || [, ''])[1];
-  // Type is still absent: the owner's call is that a project DECLARES its type
-  // at creation, so until that field exists the hub must not guess one.
-  assert.doesNotMatch(thead, />Type</, 'Type has no source until a project declares it');
-  // Builders and Runs came back in task 1002771 WITH a source behind them
+  assert.match(thead, />Type</, 'Type has a source now: the project declares it at creation (task 1002772)');
+  assert.match(SCRIPT, /typeHtml\(p\.type\)/, 'the Type cell must read the declared field through the one formatter');
   assert.match(thead, />Builders</);
   assert.match(thead, />Runs</);
   assert.match(SCRIPT, /p\.builders/, 'the Builders cell must read real data');
   assert.match(SCRIPT, /tagsHtml\(p\.tags\)/, 'the Runs cell must read real data');
+  // the wizard files the declaration with the create — the source end of the pipe
+  assert.match(SCRIPT, /type: state\.projType/, 'the create request carries the declared type');
 });
 
 test('header and body agree on the column count', () => {
@@ -509,11 +538,13 @@ test('no sort control is offered for a column that cannot sort', () => {
   }
 });
 
-test('Type left no styling behind, and the live columns kept theirs', () => {
-  assert.ok(!COSMOS.includes('.colType'), '.colType is dead — the column is gone');
-  for (const live of ['.tbl .num', '.tbl .tags', '.colTags']) {
-    assert.ok(COSMOS.includes(live), `${live} styles a column that now renders real data`);
+test('every live column keeps its styling — .colType included since task 1002772', () => {
+  for (const live of ['.tbl .num', '.tbl .tags', '.colTags', '.colType', '.typeTag']) {
+    assert.ok(COSMOS.includes(live), `${live} styles a column that renders real data`);
   }
+  // the type tag is its own vocabulary: not the relationship .pill, not the
+  // liveness .chip — two different facts must not wear the same chrome
+  assert.doesNotMatch(SCRIPT, /typeHtml[\s\S]{0,80}?class="pill"/, 'type must not wear the relationship pill');
 });
 
 /* ── Real Builders + Runs (task 1002771) ────────────────────────────────────