@bongos/core 1.19.116 → 1.19.118

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.116",
-  "core_contract": "1.19.116",
-  "source_commit": "be42420efe0538b351e5eed4a355a47e28b430f5",
+  "core_version": "1.19.118",
+  "core_contract": "1.19.118",
+  "source_commit": "b2c7044681ffb9b34e63677b0487f02dba2111df",
   "source_ref": "HEAD",
-  "built_at": "2026-08-14T18:14:13.252Z",
+  "built_at": "2026-08-14T19:32:31.077Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 302,
     "agent_docs_stubbed": 21,
-    "functional_verbatim": 1236,
+    "functional_verbatim": 1239,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 1559,
-  "tree_sha256": "8ac36ba3efd387f4c72fecb2fde8b6d68ae8c016c5e8336c2f78a24abb5791e1",
+  "file_count": 1562,
+  "tree_sha256": "d14e35ba8094c969d33de804077321c1dd6f7463d0d4a1d77585ebc85e501e7c",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -367,7 +367,7 @@
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "e7bc974c5ea756d1c197c1c8e52b902049af23e335149ff76e1ade248eb623d1"
+      "sha256": "167b7dcd701d2a23eec6dec515778e84cb262d95c070a5a749da642e5aada701"
     },
     {
       "path": "clients/bongos-client/index.mjs",
@@ -387,7 +387,7 @@
     {
       "path": "config/design-tokens.neutral.json",
       "mode": "0000644",
-      "sha256": "16803a2b65d64052f9509b0ff50dbe36aadcc94639d5c6896736b1c9787a022b"
+      "sha256": "ffca38493475ebe55c6ac9513f8b7836162c26d2a532ef0a1cc6a3abc9ffac68"
     },
     {
       "path": "config/design-tokens.schema.json",
@@ -1337,12 +1337,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "1a4562c2e0575f8505a22851c63f1cc3ecfd485ae5de6e725810786f692e6457"
+      "sha256": "06954a3b30e235ef61a316d4f7414a2eaf2c0f2d3fe1063698e800f3655d1675"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "3b5917da91883faf736528e7ba5600356f06056228a7c81c7d5e025762253699"
+      "sha256": "3910ea26d65b5afc883d4b3488d605ee5786bda41ef86e280b5a180d6f6fa586"
     },
     {
       "path": "docs/architecture.md",
@@ -1367,7 +1367,7 @@
     {
       "path": "docs/design-contract.md",
       "mode": "0000644",
-      "sha256": "a86af6a923ed70bb8ea0846266f232f31a5fc9709d286362bcd37104d683342b"
+      "sha256": "8a71b3573c3d9be7e543baa1817d42df81cd546e3cfd544c785533ccaa9da477"
     },
     {
       "path": "docs/design/front-door-and-hub-direction.md",
@@ -3744,6 +3744,11 @@
       "mode": "0000644",
       "sha256": "730de845214d3159cceb779ec3f20cddf2f6662bf2ada787d1c9cec483273afa"
     },
+    {
+      "path": "modules/platform-identity/migrations/platform_identity_006_project_type.sql",
+      "mode": "0000644",
+      "sha256": "4885d452673c2d6170835c8d7f03c101847ddb313a69dfb66c8e640f875ecdc1"
+    },
     {
       "path": "modules/platform-identity/module.json",
       "mode": "0000644",
@@ -3752,7 +3757,7 @@
     {
       "path": "modules/platform-identity/platform-identity.js",
       "mode": "0000644",
-      "sha256": "2a0ee2667f79cbe8eaeb1dfb47b0c518bd969e80a60e42e0f709fa83365f908e"
+      "sha256": "c145e51c02f147b295287b9759d5f44ffc77a533908b151b69d13781d84bc433"
     },
     {
       "path": "modules/platform-identity/pollers/code-sweep.js",
@@ -3772,7 +3777,7 @@
     {
       "path": "modules/platform-identity/routes/projects.js",
       "mode": "0000644",
-      "sha256": "3222e294691563874be9b19dda57fe879b29d0bd174edef06f6db0f483863b11"
+      "sha256": "a3e25369ad9edc6aed1a8a6997d6b6cb794dce14abb3605954d535525af1a93a"
     },
     {
       "path": "modules/platform-identity/routes/scouting.js",
@@ -3787,7 +3792,7 @@
     {
       "path": "modules/platform-identity/tests/platform-identity.mjs",
       "mode": "0000644",
-      "sha256": "7766d918d22a2d73f9275ab07d6273b66fc0cdcdc6d2952986e01bab265344d2"
+      "sha256": "13bd93a19ec0d53642a161a01e4ec2ced6930d96f455c5fcc72fbdc43f72e1ac"
     },
     {
       "path": "modules/platform-identity/ui/.gitkeep",
@@ -3829,6 +3834,11 @@
       "mode": "0000644",
       "sha256": "49dee0b12551089acc0d7f218f1cba00b1377ba581770146734b2c2f71d3bf7c"
     },
+    {
+      "path": "modules/provisioning/migrations/provisioning_007_project_type.sql",
+      "mode": "0000644",
+      "sha256": "ddbc1f7e659e716fcbb3ba3ec6c1237756f46dbd895bcb27a1dc925a7c782e76"
+    },
     {
       "path": "modules/provisioning/module.json",
       "mode": "0000644",
@@ -3847,7 +3857,7 @@
     {
       "path": "modules/provisioning/provisioning.js",
       "mode": "0000644",
-      "sha256": "0363fd616966ec413d3c16bea222622ae0f9cf59a456627946c7cbdb89b7885e"
+      "sha256": "9163b2b0de80a648371d03f89e0da8ff234a1cd4f038a1279f6324ae0921e0f4"
     },
     {
       "path": "modules/provisioning/rate-limit.js",
@@ -3857,7 +3867,7 @@
     {
       "path": "modules/provisioning/routes/provisioning.js",
       "mode": "0000644",
-      "sha256": "1880a5b0812a32feb9dc313024b3a27b1403884316f17fbaad68909872e21535"
+      "sha256": "232d5ce81dc2821b9b953c7596ab385b89e2d5193891735e3220021437fd06db"
     },
     {
       "path": "modules/provisioning/tests/liveness.mjs",
@@ -3867,7 +3877,7 @@
     {
       "path": "modules/provisioning/tests/provisioning.mjs",
       "mode": "0000644",
-      "sha256": "e23faf9471d7d984dc86601b157aeac0518f01f9c72076045b94368aa7490b61"
+      "sha256": "4a5c817d88771a62ccb5d26aea865976b7246a253b2ad7b00e11e3be856586ef"
     },
     {
       "path": "modules/provisioning/ui/.gitkeep",
@@ -4152,12 +4162,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "87bcf76333165f80466bc093e13d0ad6313d63db0e8518b083adf18cfc4c373d"
+      "sha256": "a21e300cabe4c1a3af1b84fcb4b190c8ee109acd79d888e04351cb9064162457"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "f7a325a5a15a160f72580f8af598cf302a68ec9fc04a03085dcdfa341c52dc89"
+      "sha256": "4faa734f756086158c7c1d7983352c08d52961e479c1487aadba9a770007d19e"
     },
     {
       "path": "public-docs/index.html",
@@ -4397,7 +4407,7 @@
     {
       "path": "public-landing/assets/cosmos.css",
       "mode": "0000644",
-      "sha256": "b615a392fea969c2b0549476843f26d5185cabc6556036e1f3337aacdeac359e"
+      "sha256": "bd0b17f7a21120a9e754c88206bd718fdda1fce568df15441272af0b9004c7cb"
     },
     {
       "path": "public-landing/buddha.png",
@@ -4412,7 +4422,7 @@
     {
       "path": "public-landing/projects.html",
       "mode": "0000644",
-      "sha256": "961850a566b9fa797036b9ac8b12b3f0eacf5cc6f5fbabbb6230dccd02e836b8"
+      "sha256": "576bc8fe1e3379dd2efa6323f889b65d9c4cbb5164b5e80716a6eee045bad002"
     },
     {
       "path": "public-landing/world/assets/clouds/cloud-island-large.png",
@@ -5067,7 +5077,7 @@
     {
       "path": "scripts/gds/provision.js",
       "mode": "0000644",
-      "sha256": "7ad384495370312a57f7c1f0dab4770888c83afd08b89a8dc27aebae408abfd1"
+      "sha256": "a10501b65207bbd72f9fc039d4cf1ef0be7f85dc832e8e95e1b26aa966e507b8"
     },
     {
       "path": "scripts/gds/publish-credential-check.js",
@@ -5732,7 +5742,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "298ca0ddbe3bcae48f5c360ca66aea09a798f317816cbbb9180142b12a7fb6ae"
+      "sha256": "2e899e310368c74a25215b99d3dabced0755c87f85569d23a069417dd20c661a"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -5777,7 +5787,7 @@
     {
       "path": "src/ui/adapters/claude-design/index.js",
       "mode": "0000644",
-      "sha256": "04218100d565edf00d822aefa262a001f503bf9f45ae79f4a46a3c2f1756ede5"
+      "sha256": "7489ba1a6612068648359c65d1abeae8faa6de0d16e0cf58d67ce5a1f307e372"
     },
     {
       "path": "src/ui/adapters/figma/index.js",
@@ -6237,7 +6247,7 @@
     {
       "path": "tests/cosmos_token_contrast.mjs",
       "mode": "0000644",
-      "sha256": "a133a1ed438dfb589b0e31ce2dacced2e38e1047411d85e0086d4c2ff8b88f16"
+      "sha256": "257acb76f7b7e8bb925b005e8a7bad96d712f0a216201aacee11762a2a2ff328"
     },
     {
       "path": "tests/cost.mjs",
@@ -6324,6 +6334,11 @@
       "mode": "0000644",
       "sha256": "1abfa6c8bb119d010d2a53f71373508a31a9cc3c28207ca1dbac2138a7eda595"
     },
+    {
+      "path": "tests/design_tokens_sync.mjs",
+      "mode": "0000644",
+      "sha256": "6d1a9dfba7e6ef7606c68abc9df3fb6e479f1a2939b83ad342f907b338f17f2c"
+    },
     {
       "path": "tests/dev_lib.mjs",
       "mode": "0000644",
@@ -7257,7 +7272,7 @@
     {
       "path": "tests/projects_hub.mjs",
       "mode": "0000644",
-      "sha256": "8cd0d3f4ce68085f782fbd3e359039ad6d20198bc706481f165c39ee133cea3a"
+      "sha256": "ee5c944f9e3bd3d618c977e76d4e2ba3e663ce59bf7833f9427a0191717ba57d"
     },
     {
       "path": "tests/provision.mjs",

package/clients/bongos-client/index.d.ts

@@ -244,7 +244,7 @@ export interface PostMyProjectsJoinRequest { origin: string }
 export interface PostMyProjectsJoinResponse { ok: boolean; status: unknown; project: unknown; message: unknown }
 export interface PostOverrideRequestsIdDecideRequest { decision: string; note?: string }
 export interface PostProjectsInviteRequest { client_id: string; github_login: string }
-export interface PostProjectsRequest { origin: string; name: string; tagline?: string; art_url?: string }
+export interface PostProjectsRequest { origin: string; name: string; tagline?: string; art_url?: string; type?: string }
 export interface PostProjectsResponse { project: unknown }
 export interface PostProvisioningInstancesIdDomainRequest { domain: string }
 export interface PostProvisioningInstancesIdDomainResponse { ok: boolean; changed: boolean; queued: unknown; domain: unknown; message: unknown }
@@ -252,7 +252,7 @@ export interface PostProvisioningInstancesIdForceTeardownResponse { ok: boolean;
 export interface PostProvisioningInstancesIdGithubAppRequest { account?: string }
 export interface PostProvisioningInstancesIdGithubAppResponse { state: unknown; account: unknown; post_url: unknown; personal_url: unknown; org_url: unknown; org_login: unknown; manifest: unknown; redirect_url: unknown; expires_at: unknown }
 export interface PostProvisioningInstancesIdTeardownResponse { ok: boolean; queued: unknown; action: unknown; status: unknown; superseded: unknown; message: unknown }
-export interface PostProvisioningInstancesRequest { slug: string; target_ref?: string; hosting_shape?: string; domain?: string; tier?: string; onboard_mode?: string }
+export interface PostProvisioningInstancesRequest { slug: string; target_ref?: string; hosting_shape?: string; domain?: string; tier?: string; onboard_mode?: string; type?: string }
 export interface PostSearchMarkRequest { chunk_id?: StringifiableId; useful?: unknown }
 export interface PostSearchRequest { expand?: unknown; q?: string; source_kind?: string; limit?: unknown }
 export interface PostSearchResponse { expand?: unknown; chunk?: unknown; query?: unknown; count?: unknown; total_full_tokens?: unknown; results?: unknown }

package/config/design-tokens.neutral.json

@@ -2,19 +2,19 @@
   "_note": "Cloud Bongos neutral design tokens — the baseline every instance resolves over. To override, copy values into config/design-tokens.json (the instance pack). These match config/branding.neutral.json theme.ui so a vanilla instance with no instance pack still renders correctly. See docs/design-contract.md.",
 
   "colors": {
-    "bg":         "#fff7ed",
-    "bgCard":     "#ffffff",
-    "bgDeep":     "#ffedd5",
-    "bgFrame":    "#fde4c8",
-    "ink":        "#2a1f17",
-    "inkSoft":    "#6b5d52",
-    "inkFaint":   "#857567",
-    "rule":       "#fdba74",
-    "ruleSoft":   "#fed7aa",
-    "accent":     "#f97316",
-    "accentDeep": "#ea580c",
-    "sea":        "#38bdf8",
-    "terracotta": "#fb7185"
+    "bg":         "#f9d9a8",
+    "bgCard":     "#fffaf2",
+    "bgDeep":     "#f6d8ae",
+    "bgFrame":    "#f0c489",
+    "ink":        "#2b170e",
+    "inkSoft":    "#6d4a33",
+    "inkFaint":   "#785a41",
+    "rule":       "#e8a463",
+    "ruleSoft":   "#f6d8ae",
+    "accent":     "#ce4806",
+    "accentDeep": "#9e3406",
+    "sea":        "#0f7a96",
+    "terracotta": "#855b3d"
   },
 
   "fonts": {

package/docs/api/openapi.json

@@ -15676,6 +15676,9 @@
           "art_url": {
             "type": "string",
             "maxLength": 2048
+          },
+          "type": {
+            "type": "string"
           }
         },
         "required": [
@@ -15830,6 +15833,9 @@
           "onboard_mode": {
             "type": "string",
             "maxLength": 20
+          },
+          "type": {
+            "type": "string"
           }
         },
         "required": [

package/docs/api-reference.md

@@ -353,7 +353,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
 | GET | `/api/bongos/projects` | `metic+archon` | — | the full curation list (includes unfeatured + owner attribution). |
-| POST | `/api/bongos/projects` | `metic+archon` | `origin`, `name`, `tagline`, `art_url` | create / update a catalog entry (manual seed for hand-wired instances; federated projects auto-catalogue at registration). |
+| POST | `/api/bongos/projects` | `metic+archon` | `origin`, `name`, `tagline`, `art_url`, `type` | create / update a catalog entry (manual seed for hand-wired instances; federated projects auto-catalogue at registration). |
 | PATCH | `/api/bongos/projects/:id/featured` | `metic+archon` | `featured` | the feature / unfeature control (the ADR 0141 §5 curation gate). |
 | GET | `/api/bongos/projects/featured` | `public` | — | a curated public showcase; no auth by design. |
 | POST | `/api/bongos/projects/invite` | `metic+archon` | `client_id`, `github_login` | invite a builder into a project (ADR 0141 §5, task #1002115). |
@@ -368,7 +368,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | GET | `/api/bongos/provisioning/github-app/status` | `public` | — | GET /provisioning/github-app/status?state=<> — the PUBLIC progress read the onboarding callback page polls (task 2096) to know when setup… |
 | GET | `/api/bongos/provisioning/health` | `public` | — | GET /provisioning/health — liveness + the core version this module mounted against. |
 | GET | `/api/bongos/provisioning/instances` | `any-builder` | — | GET /provisioning/instances — the caller's own instances + each open intent. |
-| POST | `/api/bongos/provisioning/instances` | `any-builder` | `slug`, `target_ref`, `hosting_shape`, `domain`, `tier`, `onboard_mode` | POST /provisioning/instances — request a new instance. |
+| POST | `/api/bongos/provisioning/instances` | `any-builder` | `slug`, `target_ref`, `hosting_shape`, `domain`, `tier`, `onboard_mode`, `type` | POST /provisioning/instances — request a new instance. |
 | GET | `/api/bongos/provisioning/instances/:id` | `any-builder` | — | GET /provisioning/instances/:id — read one of the caller's own instances. |
 | POST | `/api/bongos/provisioning/instances/:id/domain` | `any-builder` | `domain` | POST /provisioning/instances/:id/domain — give the caller's OWN instance its address (task 1002692, gap 5: no path existed to add a domai… |
 | POST | `/api/bongos/provisioning/instances/:id/force-teardown` | `metic+archon` | — | POST /provisioning/instances/:id/force-teardown — Archon tears down ANY instance. |

package/docs/design-contract.md

@@ -30,7 +30,7 @@ The validator merges both files (deep-merge, instance wins) and validates the re
 
 ### 1.3 Relationship to config/branding.json
 
-`config/branding.json` carries *identity* (product name, domains, currency, tracks). Design tokens carry *presentation* (colors, type, spacing). The two files are siblings; neither owns the other. Where both define overlapping values (e.g. `branding.json theme.ui.colors` and `design-tokens.json colors`), **design-tokens.json is authoritative at render time**. The `src/branding.js` resolver will be updated (task 1377) to expose resolved tokens alongside identity — adapters use `branding.resolveDesignTokens()`.
+`config/branding.json` carries *identity* (product name, domains, currency, tracks). Design tokens carry *presentation* (colors, type, spacing). The two files are siblings; neither owns the other. Where both define overlapping values (e.g. `branding.json theme.ui.colors` and `design-tokens.json colors`), **design-tokens.json is authoritative at render time**. The **neutral pair** is the one exception: `config/branding.neutral.json theme.ui` is the authority and `config/design-tokens.neutral.json` mirrors it key-for-key — CI-asserted by `tests/design_tokens_sync.mjs` (task 1002752), so the design round-trip can never again start prototypes from colours the product stopped painting. Instance packs stay free per §1.2. The `src/branding.js` resolver will be updated (task 1377) to expose resolved tokens alongside identity — adapters use `branding.resolveDesignTokens()`.
 
 ### 1.4 Token schema overview
 
@@ -290,6 +290,8 @@ The `--dt-` prefix is reserved for this design system. Adapters must not emit CS
 6. Every `surfaceId` key in `design-sources.json` has a matching directory under `src/ui/` or `assets/ui/` (if any such directory exists — the file may precede the directories for a new instance).
 7. If `src/ui/adapters/` exists, each adapter directory has an `index.js` that exports `id`, `import`, and `export`.
 
+The neutral-pair lockstep (§1.3) is deliberately not a validator check — it lives in `tests/design_tokens_sync.mjs`, so an instance running only `validate-design.js` is not forced to mirror its own pack.
+
 Usage:
 
 ```

package/modules/platform-identity/migrations/platform_identity_006_project_type.sql

@@ -0,0 +1,23 @@
+-- platform_identity_006_project_type.sql — a project declares its Type (task 1002772).
+--
+-- Owner decision 2026-08-13: type is DECLARED at creation, never guessed from
+-- module flags. Nullable on purpose: every existing row predates the field and
+-- must not be back-filled with a guess — the hub renders an em dash for
+-- "not declared", which is honest. The closed vocabulary is the owner's:
+-- game / research / business / non-profit / not-sure ("not-sure" is the escape
+-- hatch so nobody is forced into a wrong answer).
+--
+-- Additive + platform_identity_-namespaced (ADR 0083 §5): a new nullable column
+-- plus a CHECK that only constrains non-null values. No existing row changes.
+-- Idempotent: safe to re-run.
+
+BEGIN;
+
+ALTER TABLE platform_identity_projects
+  ADD COLUMN IF NOT EXISTS type text;
+
+ALTER TABLE platform_identity_projects DROP CONSTRAINT IF EXISTS platform_identity_projects_type_check;
+ALTER TABLE platform_identity_projects ADD CONSTRAINT platform_identity_projects_type_check
+  CHECK (type IS NULL OR type IN ('game', 'research', 'business', 'non-profit', 'not-sure'));
+
+COMMIT;

package/modules/platform-identity/platform-identity.js

@@ -146,7 +146,7 @@ async function getAccount(githubId, { pool = defaultPool } = {}) {
 // (task #1002109) calls this with a freshly generated secret; the plaintext is
 // hashed here and never stored. Upsert-on-client_id so re-provisioning rotates
 // the secret + redirect_uris without a duplicate row.
-async function registerClient({ clientId, secret, name, redirectUris, origin, ownerGithubId }, { pool = defaultPool } = {}) {
+async function registerClient({ clientId, secret, name, redirectUris, origin, ownerGithubId, type }, { pool = defaultPool } = {}) {
   const secretHash = sha256hex(secret);
   const uris = Array.isArray(redirectUris) ? redirectUris : [];
   const { rows } = await pool.query(
@@ -167,7 +167,7 @@ async function registerClient({ clientId, secret, name, redirectUris, origin, ow
   // list the moment it federates (ADR 0141 §5). Best-effort — a catalog hiccup must
   // never fail client registration. Only when an origin is known.
   if (origin) {
-    try { await upsertProject({ origin, name, ownerGithubId }, { pool }); }
+    try { await upsertProject({ origin, name, ownerGithubId, type }, { pool }); }
     catch (err) { console.error('[platform-identity] auto-catalogue failed (non-fatal):', err.message); }
   }
   return rows[0];
@@ -207,30 +207,39 @@ async function getClientByOrigin(origin, { pool = defaultPool } = {}) {
 // Projects catalog + Explore (ADR 0141 §5)
 // -------------------------------------------------------------------------
 
+// The closed Type vocabulary (task 1002772, owner decision 2026-08-13): a project
+// DECLARES its type at creation — 'not-sure' is the escape hatch so nobody is
+// forced into a wrong answer. Mirrored by the CHECK in migration 006 (and by
+// provisioning's copy on its own instances table).
+const PROJECT_TYPES = ['game', 'research', 'business', 'non-profit', 'not-sure'];
+
 // Upsert a catalog row (keyed by origin). Called when a client registers (so every
 // federated project is catalogued, unfeatured) and by the Archon create/curate route.
 // Never touches `featured` on update — that is Archon-only via setProjectFeatured.
-async function upsertProject({ origin, name, tagline, artUrl, ownerGithubId }, { pool = defaultPool } = {}) {
+async function upsertProject({ origin, name, tagline, artUrl, ownerGithubId, type }, { pool = defaultPool } = {}) {
   const norm = String(origin || '').replace(/\/+$/, '');
   if (!norm) throw new Error('project origin required');
+  // off-vocabulary → null (the DB CHECK is the backstop; a declaration is never invented)
+  const declaredType = PROJECT_TYPES.includes(type) ? type : null;
   const { rows } = await pool.query(
-    `INSERT INTO platform_identity_projects (origin, name, tagline, art_url, owner_github_id)
-     VALUES ($1, $2, $3, $4, $5)
+    `INSERT INTO platform_identity_projects (origin, name, tagline, art_url, owner_github_id, type)
+     VALUES ($1, $2, $3, $4, $5, $6)
      ON CONFLICT (origin) DO UPDATE SET
        name            = EXCLUDED.name,
        tagline         = COALESCE(EXCLUDED.tagline, platform_identity_projects.tagline),
        art_url         = COALESCE(EXCLUDED.art_url, platform_identity_projects.art_url),
        owner_github_id = COALESCE(EXCLUDED.owner_github_id, platform_identity_projects.owner_github_id),
+       type            = COALESCE(EXCLUDED.type, platform_identity_projects.type),
        updated_at      = now()
-     RETURNING id, origin, name, tagline, art_url, owner_github_id, status, featured`,
-    [norm, name || norm, tagline ?? null, artUrl ?? null, ownerGithubId ?? null],
+     RETURNING id, origin, name, tagline, art_url, owner_github_id, type, status, featured`,
+    [norm, name || norm, tagline ?? null, artUrl ?? null, ownerGithubId ?? null, declaredType],
   );
   return rows[0];
 }
 
 async function getProject(id, { pool = defaultPool } = {}) {
   const { rows } = await pool.query(
-    `SELECT id, origin, name, tagline, art_url, owner_github_id, status, featured
+    `SELECT id, origin, name, tagline, art_url, owner_github_id, type, status, featured
        FROM platform_identity_projects WHERE id = $1`,
     [id],
   );
@@ -245,7 +254,7 @@ async function getProject(id, { pool = defaultPool } = {}) {
 // it, so as a public "last updated" it would lie.
 async function listFeaturedProjects({ pool = defaultPool } = {}) {
   const { rows } = await pool.query(
-    `SELECT origin, name, tagline, art_url, created_at
+    `SELECT origin, name, tagline, art_url, type, created_at
        FROM platform_identity_projects
       WHERE featured = true AND status = 'active'
       ORDER BY updated_at DESC`,
@@ -256,7 +265,7 @@ async function listFeaturedProjects({ pool = defaultPool } = {}) {
 // The Archon curation list — every active project + its featured flag.
 async function listAllProjects({ pool = defaultPool } = {}) {
   const { rows } = await pool.query(
-    `SELECT id, origin, name, tagline, art_url, owner_github_id, status, featured, updated_at
+    `SELECT id, origin, name, tagline, art_url, owner_github_id, type, status, featured, updated_at
        FROM platform_identity_projects
       WHERE status = 'active'
       ORDER BY featured DESC, updated_at DESC`,
@@ -512,6 +521,7 @@ module.exports = {
   setClientStatus,
   // projects catalog + Explore
   upsertProject,
+  PROJECT_TYPES,
   getProject,
   listFeaturedProjects,
   listAllProjects,

package/modules/platform-identity/routes/projects.js

@@ -42,6 +42,7 @@ module.exports = function projectsRoutes() {
       name: { required: true, type: 'string', maxLength: 200 },
       tagline: { type: 'string', maxLength: 400 },
       art_url: { type: 'string', maxLength: 2048 },
+      type: { type: 'string', enum: [...pi.PROJECT_TYPES] },
     })) return;
     try {
       const project = await pi.upsertProject({
@@ -49,6 +50,7 @@ module.exports = function projectsRoutes() {
         name: req.body.name,
         tagline: req.body.tagline,
         artUrl: req.body.art_url,
+        type: req.body.type,
       }, { pool });
       res.status(201).json({ project });
     } catch (err) {

package/modules/platform-identity/tests/platform-identity.mjs

@@ -197,6 +197,19 @@ await ta('upsertProject upserts on normalized origin; update preserves tagline/a
   assert.doesNotMatch(c.text, /featured\s*=/);
 });
 
+await ta('upsertProject carries the declared type, COALESCE-preserved like tagline (task 1002772)', async () => {
+  const pool = mockPool([{ rows: [{ id: '1', origin: 'https://p', type: 'game' }] }]);
+  await P.upsertProject({ origin: 'https://p', name: 'Proj', type: 'game' }, { pool });
+  const c = pool.calls[0];
+  assert.match(c.text, /\btype\b/, 'the declared type joins the upsert');
+  assert.match(c.text, /type\s*=\s*COALESCE/, 'a later typeless upsert must not erase a declaration');
+  assert.ok(c.params.includes('game'), 'the type value is parameterized');
+  // an off-vocabulary value is dropped, not thrown — the DB CHECK is the backstop
+  const pool2 = mockPool([{ rows: [{ id: '2' }] }]);
+  await P.upsertProject({ origin: 'https://q', name: 'Q', type: 'spacefaring' }, { pool: pool2 });
+  assert.ok(!pool2.calls[0].params.includes('spacefaring'), 'unknown types never reach the SQL');
+});
+
 await ta('listFeaturedProjects returns a PUBLIC projection (featured+active only, no owner/status)', async () => {
   const pool = mockPool([{ rows: [{ origin: 'https://p', name: 'Proj', tagline: 't', art_url: null, created_at: '2026-08-01T00:00:00Z' }] }]);
   const out = await P.listFeaturedProjects({ pool });
@@ -210,6 +223,7 @@ await ta('listFeaturedProjects returns a PUBLIC projection (featured+active only
   assert.ok(sel.trim(), 'the projection is an explicit SELECT list');
   assert.doesNotMatch(sel, /\*/, 'no star projection on a public route');
   assert.match(sel, /created_at/, 'the LISTED date (when the row was catalogued) is public');
+  assert.match(sel, /\btype\b/, 'the declared type is public — the hub table reads it (task 1002772)');
   assert.doesNotMatch(c.text, /owner_github_id/, 'public projection must not leak owner id');
   // updated_at may sort (ORDER BY) but never project: it is bumped by feature
   // toggles and client re-registration, so as a public fact it would lie.

package/modules/provisioning/migrations/provisioning_007_project_type.sql

@@ -0,0 +1,24 @@
+-- provisioning_007_project_type.sql — the wizard's declared project Type rides
+-- the provisioning request (task 1002772).
+--
+-- A standalone project never federates into the hub catalog at create time, so
+-- the declaration made in the create wizard has to live SOMEWHERE real the
+-- moment it is filed — this column is that home. The control-plane runner
+-- carries it into platform_identity_projects whenever a catalog row
+-- materializes (federation), so the answer is never thrown away. Vocabulary
+-- mirrors platform_identity_006_project_type.sql — both CHECKs are the
+-- backstop if the two route validators ever drift.
+--
+-- Additive + provisioning_-namespaced (ADR 0083 §5): a new nullable column plus
+-- a CHECK that only constrains non-null values. Idempotent: safe to re-run.
+
+BEGIN;
+
+ALTER TABLE provisioning_instances
+  ADD COLUMN IF NOT EXISTS type text;
+
+ALTER TABLE provisioning_instances DROP CONSTRAINT IF EXISTS provisioning_instances_type_check;
+ALTER TABLE provisioning_instances ADD CONSTRAINT provisioning_instances_type_check
+  CHECK (type IS NULL OR type IN ('game', 'research', 'business', 'non-profit', 'not-sure'));
+
+COMMIT;

package/modules/provisioning/provisioning.js

@@ -29,6 +29,12 @@ const HOSTING_SHAPES = ['co-tenant', 'dedicated', 'standalone'];
 // provision.js ran the greenfield path unconditionally and adopting an existing repo
 // always failed as an unrelated-history non-fast-forward (task 1002562).
 const ONBOARD_MODES = ['greenfield', 'adopt'];
+
+// The declared project Type (task 1002772) — the wizard's answer rides the
+// provisioning request so it survives until a catalog row materializes.
+// Mirrors platform-identity's PROJECT_TYPES; both tables carry a matching
+// CHECK, so a drift between the copies fails loudly at insert time.
+const PROJECT_TYPES = ['game', 'research', 'business', 'non-profit', 'not-sure'];
 // 'oauth-manifest' (task 2080) is queueable too — the GitHub-App-Manifest onboarding
 // conversion. Today the runner drains it by scanning provisioning_oauth_manifests
 // (drainOAuthManifests), not the intent queue, but it stays a valid action so the
@@ -146,6 +152,10 @@ function publicInstance(row) {
     // thing you need when diagnosing a standup (task 1002562). Coalesced for rows read
     // before provisioning_004 added the column.
     onboard_mode: row.onboard_mode || 'greenfield',
+    // The declared project Type (task 1002772) — the hub reads it off owned
+    // instances so a declaration shows before the catalog carries it. Nullable:
+    // rows predating provisioning_007, or a declined answer, project null.
+    type: row.type || null,
     // The verification overlay (task 1002696, redesign direction §3): what the
     // heartbeat last OBSERVED, which is NOT what `status` claims. null = never
     // probed — a different claim from last_verified_up=false, and the UI renders
@@ -359,22 +369,24 @@ async function listAllInstances(db, { status } = {}) {
 // re-fetches the existing row and returns { created:false } so the ROUTE can
 // decide (same owner → idempotent re-request; different owner → 409). Never
 // silently reassigns ownership.
-async function createInstance(db, { ownerBuilderId, slug, targetRef, hostingShape, domain, dbName, port, tier, onboardMode }) {
+async function createInstance(db, { ownerBuilderId, slug, targetRef, hostingShape, domain, dbName, port, tier, onboardMode, type }) {
   const shape = HOSTING_SHAPES.includes(hostingShape) ? hostingShape : 'co-tenant';
   // Unknown/absent → 'greenfield', matching the column default. Falling back to the
   // SAFE mode matters: greenfield refuses to push over existing history (no --force
   // anywhere), whereas defaulting an unknown value to 'adopt' would put the layering
   // path on a repo nobody said was pre-existing.
   const mode = ONBOARD_MODES.includes(onboardMode) ? onboardMode : 'greenfield';
+  // Type is a declaration — off-vocabulary or absent stores null, never a guess.
+  const declaredType = PROJECT_TYPES.includes(type) ? type : null;
   const cost = costEstimateUsd({ hostingShape: shape, tier });
   try {
     const { rows } = await db.query(
       `INSERT INTO provisioning_instances
-         (owner_builder_id, slug, target_ref, hosting_shape, domain, db_name, port, tier, cost_estimate_usd, onboard_mode)
-       VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10)
+         (owner_builder_id, slug, target_ref, hosting_shape, domain, db_name, port, tier, cost_estimate_usd, onboard_mode, type)
+       VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11)
        RETURNING *`,
       [ownerBuilderId, slug, targetRef ?? null, shape, domain ?? null,
-       dbName ?? null, port ?? null, tier ?? null, cost, mode]
+       dbName ?? null, port ?? null, tier ?? null, cost, mode, declaredType]
     );
     return { instance: rows[0], created: true };
   } catch (e) {
@@ -642,7 +654,7 @@ async function costLedger(db, { limit = 500 } = {}) {
 
 module.exports = {
   // constants
-  INSTANCE_STATES, HOSTING_SHAPES, ONBOARD_MODES, INTENT_ACTIONS, TEARDOWN_FROM,
+  INSTANCE_STATES, HOSTING_SHAPES, ONBOARD_MODES, PROJECT_TYPES, INTENT_ACTIONS, TEARDOWN_FROM,
   PROVISION_ENQUEUE_FROM, DOMAIN_ATTACH_FROM, TIER_MONTHLY_USD, CERT_ELIGIBLE_STATES,
   // pure
   isValidSlug, costEstimateUsd, publicInstance, normalizeHostname,

package/modules/provisioning/routes/provisioning.js

@@ -313,6 +313,8 @@ module.exports = function provisioningRoutes() {
       domain: { type: 'string', maxLength: 253 },
       tier: { type: 'string', maxLength: 40 },
       onboard_mode: { type: 'string', maxLength: 20 },
+      // the declared project Type (task 1002772) — optional, closed vocabulary
+      type: { type: 'string', enum: [...provisioning.PROJECT_TYPES] },
     })) return;
     const body = req.body || {};
     const slug = String(body.slug || '').trim().toLowerCase();
@@ -339,6 +341,7 @@ module.exports = function provisioningRoutes() {
         ownerBuilderId: req.builder.id, slug,
         targetRef: body.target_ref, hostingShape: shape,
         domain: body.domain, tier: body.tier, onboardMode,
+        type: body.type,
       });
       // Slug already taken by ANOTHER builder — refuse (never reassign ownership).
       if (!created && String(instance.owner_builder_id) !== String(req.builder.id)) {
@@ -373,12 +376,23 @@ module.exports = function provisioningRoutes() {
           };
         }
       }
+      // Same honesty for a changed Type (task 1002772): a re-request keeps the
+      // original declaration, and unlike domain there is no mutation route yet —
+      // say so rather than silently dropping the new answer.
+      let typeIgnored;
+      if (!created && body.type && body.type !== instance.type) {
+        typeIgnored = {
+          requested: body.type, current: instance.type || null,
+          hint: "a re-request never changes an existing instance's declared type",
+        };
+      }
       res.status(created ? 201 : 200).json({
         instance: provisioning.publicInstance(instance),
         open_intent: intent ? { action: intent.action, state: intent.state } : null,
         queued: intentCreated,
         created,
         ...(domainIgnored ? { domain_ignored: domainIgnored } : {}),
+        ...(typeIgnored ? { type_ignored: typeIgnored } : {}),
       });
     } catch (err) {
       console.error('[provisioning] POST /provisioning/instances', err);