@bongos/core 1.19.141 → 1.19.143

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.141",
-  "core_contract": "1.19.141",
-  "source_commit": "b945e540f7d2e847172a7d529a393ef7ed3cd181",
+  "core_version": "1.19.143",
+  "core_contract": "1.19.143",
+  "source_commit": "31df926208597154ce684504f0aa15d6b1dde113",
   "source_ref": "HEAD",
-  "built_at": "2026-08-15T15:22:10.867Z",
+  "built_at": "2026-08-15T15:52:12.410Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 303,
     "agent_docs_stubbed": 21,
-    "functional_verbatim": 1250,
+    "functional_verbatim": 1251,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 1574,
-  "tree_sha256": "ebfb642cad8b628d4485648012f4b179c33923d35f37dd4f4be28e87245f99b9",
+  "file_count": 1575,
+  "tree_sha256": "a9a3320aae0cbec4eb5ec01e7b50675d69a50814017d7f4658efa4e52493deb4",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -347,12 +347,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "36eb537043097dc8e05307adc06d893a2c5ceb8cceb63f24b64ade001a0a2640"
+      "sha256": "0942508db8fb6f31b9e095d197f8b4cdd4efdc4e754c46629ea299ff10d895a1"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "ad598bf38511e3e7bd9f25a82987126cd71cfe76ac8275ddee2bcd90eb8e6a11"
+      "sha256": "5a4a95386b5a2ec9bc59334a35b09b5701b2ca5eabc99baf2305c7b82d920342"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -362,17 +362,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "43823273ec587b104f3e0296614ae8ea6c4dc5c96261dbbb359ae39c21cf4e79"
+      "sha256": "2c199a1ad61c8ca8a015b0918368da4c3bf4a8e6196edfd46b93048dda8e9eb5"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "eeb9b7bdf6054c92e3c605201c846d67ea20dd927355d2dc72479477c073fc7c"
+      "sha256": "e1359174cf948616e95a03232a8fe3f7a56e66aa94d578c786b6e7a258ce0221"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "6d441799f948513f840394bd382dba7e601e79a07fb7591bcb0e05aea2edd2a9"
+      "sha256": "e0e5672aafc56bfec2b6d0b3d90a73c984a5f3cf6b745025f5d9a37d8f09d7e6"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -1337,12 +1337,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "b9af2341b7017c6e21b53a611a824b8d3a59653f967e6f83218c9f1d25d0ff58"
+      "sha256": "e88714b1178d43ff8aea451807a0a6095a3e90d4a592babc4ffb5c1baccac4ba"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "35762381d39e1943558131e97d3541e28d47161a56ec0a3d664942c90fb9fa9b"
+      "sha256": "0a3bf7cc757082f1764b926f72e24a14e8f22e07f0e0a5085ab6ff9d64e74ba8"
     },
     {
       "path": "docs/architecture.md",
@@ -2652,7 +2652,7 @@
     {
       "path": "modules/dev-box/app/src/vendor/bongos-client.cjs",
       "mode": "0000644",
-      "sha256": "43823273ec587b104f3e0296614ae8ea6c4dc5c96261dbbb359ae39c21cf4e79"
+      "sha256": "2c199a1ad61c8ca8a015b0918368da4c3bf4a8e6196edfd46b93048dda8e9eb5"
     },
     {
       "path": "modules/dev-box/app/test/unit.mjs",
@@ -3877,12 +3877,12 @@
     {
       "path": "modules/provisioning/rate-limit.js",
       "mode": "0000644",
-      "sha256": "7741c4ba99f687fd02e33682a541320064aecb4fb7a7dc6b492583acc20db9a3"
+      "sha256": "27046325beffad5d1edfcc91c331048038900ef7d32f1d38796755c7990ba202"
     },
     {
       "path": "modules/provisioning/routes/provisioning.js",
       "mode": "0000644",
-      "sha256": "903a3324337f8c1f123f81ca176550df0afbdeeea1f18254d41489dc3c4fed5d"
+      "sha256": "17f6adb4edd7dee2ab339f5d302b61ecfbcf45db2ba4d0315eeeffbad87a9dce"
     },
     {
       "path": "modules/provisioning/tests/liveness.mjs",
@@ -4177,12 +4177,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "e2dbef1b10a02d42af480300fa0be08f86312d8be984a64e1f0522f5f70b1152"
+      "sha256": "5f68e2c2d9e7f46d2884dce06d8bc7a5ed71f7716800c1815d550e43bd896176"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "624eb72a1cc5d8f63b33038e823818c93159c0f92351f011c88202618c2aff45"
+      "sha256": "51affa4342af5f89f0cfda20e74bb4120338ef58c2d0309c706a7dbdb25c4d8f"
     },
     {
       "path": "public-docs/index.html",
@@ -4422,7 +4422,7 @@
     {
       "path": "public-landing/assets/cosmos.css",
       "mode": "0000644",
-      "sha256": "a55b4dd516485060edb4f1cd0be5164bd2026d77186d9b19c1f728a64eda9c7b"
+      "sha256": "06ed45b09cb35cc8b2e20816416c45a07dd6ca47f418ac9c239ab8c949796f8b"
     },
     {
       "path": "public-landing/buddha.png",
@@ -4437,7 +4437,7 @@
     {
       "path": "public-landing/projects.html",
       "mode": "0000644",
-      "sha256": "1823d08908672433c4ef47c9320598fd1e6c949836daf8f874b5b802fc43f9c5"
+      "sha256": "aa37e8e5b14f169f593a55eb71a0c21117c818a07d34d23a35c45219c646a5dd"
     },
     {
       "path": "public-landing/world/assets/clouds/cloud-island-large.png",
@@ -5767,7 +5767,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "851121766a8f979a937d436e38efa09f77dae45687c464d7a5a8185373a0fcbe"
+      "sha256": "7ac4130655324a65c52dfd04a7b57c72371904149e8a126a16d341f82d3d1625"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -6277,7 +6277,7 @@
     {
       "path": "tests/cosmos_token_contrast.mjs",
       "mode": "0000644",
-      "sha256": "3689ce2b23d0baedb5a277676e939af712cea8d0cb3c07857e33f36eb12e1233"
+      "sha256": "6343c10b95c8ed1da86ae32367882a9970f19266bccedb26b3e15b73c5bdd37a"
     },
     {
       "path": "tests/cost.mjs",
@@ -7339,6 +7339,11 @@
       "mode": "0000644",
       "sha256": "7749df454ac3cca7c7e5ea1acc94ead15d1c9f87b38fe2028a1c93c8adf31bcf"
     },
+    {
+      "path": "tests/provisioning_slug_available.mjs",
+      "mode": "0000644",
+      "sha256": "1623d2dff20d7b5843f9fd39dd91c35e4a8ebe10b60cf798e01a7fbc4b0202cf"
+    },
     {
       "path": "tests/provisioning_teardown_intent.mjs",
       "mode": "0000644",
@@ -7352,7 +7357,7 @@
     {
       "path": "tests/public_landing_projects.mjs",
       "mode": "0000644",
-      "sha256": "d7998f770254f2c0179a6269d408f571c8757a97defd2543462b8496cb5f3e23"
+      "sha256": "ea3fc3b311115c765e7734e11cc33750a5ffde9f492d4635460b04cfc2108ad3"
     },
     {
       "path": "tests/public_mirror_export.mjs",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 269 operations across 45 resource groups
+- 270 operations across 45 resource groups
 
 ## Install
 

package/clients/bongos-client/bongos-client.global.js

@@ -533,6 +533,8 @@ function createClient(opts = {}) {
       postProvisioningInstancesIdTeardown: (args) => request("POST", "/provisioning/instances/{id}/teardown", { hasBody: true }, args),
       // GET /provisioning/onboard-plan — rank: public — GET /provisioning/onboard-plan
       getProvisioningOnboardPlan: (args) => request("GET", "/provisioning/onboard-plan", { hasBody: false }, args),
+      // GET /provisioning/slug-available — rank: any-builder — GET /provisioning/slug-available
+      getProvisioningSlugAvailable: (args) => request("GET", "/provisioning/slug-available", { hasBody: false }, args),
       // GET /provisioning/tls-check — rank: public — GET /provisioning/tls-check
       getProvisioningTlsCheck: (args) => request("GET", "/provisioning/tls-check", { hasBody: false }, args),
     },

package/clients/bongos-client/index.cjs

@@ -532,6 +532,8 @@ function createClient(opts = {}) {
       postProvisioningInstancesIdTeardown: (args) => request("POST", "/provisioning/instances/{id}/teardown", { hasBody: true }, args),
       // GET /provisioning/onboard-plan — rank: public — GET /provisioning/onboard-plan
       getProvisioningOnboardPlan: (args) => request("GET", "/provisioning/onboard-plan", { hasBody: false }, args),
+      // GET /provisioning/slug-available — rank: any-builder — GET /provisioning/slug-available
+      getProvisioningSlugAvailable: (args) => request("GET", "/provisioning/slug-available", { hasBody: false }, args),
       // GET /provisioning/tls-check — rank: public — GET /provisioning/tls-check
       getProvisioningTlsCheck: (args) => request("GET", "/provisioning/tls-check", { hasBody: false }, args),
     },

package/clients/bongos-client/index.d.ts

@@ -75,6 +75,7 @@ export interface GetProvisioningHealthResponse { module: unknown; ok: boolean; c
 export interface GetProvisioningInstancesIdResponse { instance: unknown; open_intent: unknown }
 export interface GetProvisioningInstancesResponse { instances: unknown }
 export interface GetProvisioningOnboardPlanResponse { mode: unknown; steps: unknown }
+export interface GetProvisioningSlugAvailableResponse { slug: unknown; available: unknown; reason: unknown; address: unknown }
 export interface GetPublicBlockersIdResponse { blocker: unknown }
 export interface GetPublicBountyTableResponse { table: unknown; currency: unknown }
 export interface GetPublicGradesResponse { window_days: unknown; rolling: unknown; trend: unknown; attempts: unknown; threshold: unknown; grader_version: unknown }
@@ -768,6 +769,8 @@ export interface BongosClient {
     postProvisioningInstancesIdTeardown(args?: RequestArgs): Promise<PostProvisioningInstancesIdTeardownResponse>;
     /** GET /provisioning/onboard-plan — rank: public */
     getProvisioningOnboardPlan(args?: RequestArgs): Promise<GetProvisioningOnboardPlanResponse>;
+    /** GET /provisioning/slug-available — rank: any-builder */
+    getProvisioningSlugAvailable(args?: RequestArgs): Promise<GetProvisioningSlugAvailableResponse>;
     /** GET /provisioning/tls-check — rank: public */
     getProvisioningTlsCheck(args?: RequestArgs): Promise<ApiResponse>;
   };

package/clients/bongos-client/index.mjs

@@ -529,6 +529,8 @@ export function createClient(opts = {}) {
       postProvisioningInstancesIdTeardown: (args) => request("POST", "/provisioning/instances/{id}/teardown", { hasBody: true }, args),
       // GET /provisioning/onboard-plan — rank: public — GET /provisioning/onboard-plan
       getProvisioningOnboardPlan: (args) => request("GET", "/provisioning/onboard-plan", { hasBody: false }, args),
+      // GET /provisioning/slug-available — rank: any-builder — GET /provisioning/slug-available
+      getProvisioningSlugAvailable: (args) => request("GET", "/provisioning/slug-available", { hasBody: false }, args),
       // GET /provisioning/tls-check — rank: public — GET /provisioning/tls-check
       getProvisioningTlsCheck: (args) => request("GET", "/provisioning/tls-check", { hasBody: false }, args),
     },

package/docs/api/openapi.json

@@ -8754,6 +8754,44 @@
         "security": []
       }
     },
+    "/provisioning/slug-available": {
+      "get": {
+        "operationId": "get_provisioning_slug_available",
+        "tags": [
+          "provisioning"
+        ],
+        "summary": "GET /provisioning/slug-available",
+        "description": "GET /provisioning/slug-available?slug=<handle> — is this handle free to create under? rank: any authenticated builder (same gate as the create route it previews; deliberately NOT public — the answer is a yes/no about every project slug on the instance, so it is an enumeration oracle and carries its own per-IP limiter). It ADVISORY-previews the create route and must agree with it exactly, so the normalization and the bar below are lifted from POST /provisioning/instances: trim+lowercase → isValidSlug → getInstanceBySlug (the byte-exact `slug text UNIQUE` in provisioning_001_tables.sql, which is what the 23505 catch in createInstance reflects — so no lower(slug) here, or we would over-report taken). The three refusals mirror the three ways create actually answers: 'taken' — another builder holds it → create 409s slug_taken 'yours' — the CALLER holds it → create is an idempotent re-request (200, created:false), not a new project, so it is not free to create under 'reserved' — the row is free but <slug>.<apex> is a platform-reserved address → create 400s domain_reserved on the DEFAULT (assigned-address) path. A no_address create would still succeed; the wizard only asks about the default path, and reporting it distinctly keeps that recoverable. NARROWS the TOCTOU window, never closes it: another builder can take the slug between this answer and the create. The 409 at POST /provisioning/instances remains the ONLY authority — this exists so a collision is seen while the owner is still typing instead of at the final Create click.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/provisioning/routes/provisioning.js",
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetProvisioningSlugAvailableResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/provisioning/tls-check": {
       "get": {
         "operationId": "get_provisioning_tls_check",
@@ -13109,6 +13147,21 @@
           "steps"
         ]
       },
+      "GetProvisioningSlugAvailableResponse": {
+        "type": "object",
+        "properties": {
+          "slug": {},
+          "available": {},
+          "reason": {},
+          "address": {}
+        },
+        "required": [
+          "slug",
+          "available",
+          "reason",
+          "address"
+        ]
+      },
       "GetPublicBlockersIdResponse": {
         "type": "object",
         "properties": {
@@ -16983,9 +17036,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 269,
-  "x-schema-count": 302,
+  "x-endpoint-count": 270,
+  "x-schema-count": 303,
   "x-undocumented-bodies": 8,
-  "x-response-schemas": 204,
+  "x-response-schemas": 205,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 269 endpoints across 44 route files.
+> **Generated from the live route files** — the route file is authoritative. 270 endpoints across 44 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -358,7 +358,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | GET | `/api/bongos/projects/featured` | `public` | — | a curated public showcase; no auth by design. |
 | POST | `/api/bongos/projects/invite` | `metic+archon` | `client_id`, `github_login` | invite a builder into a project (ADR 0141 §5, task #1002115). |
 
-## `provisioning` (14)
+## `provisioning` (15)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -375,6 +375,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | POST | `/api/bongos/provisioning/instances/:id/github-app` | `any-builder` | `account` | POST /provisioning/instances/:id/github-app — mint a GitHub-App-Manifest onboarding link for the caller's OWN instance (task 2080, ADR 01… |
 | POST | `/api/bongos/provisioning/instances/:id/teardown` | `any-builder` | — | POST /provisioning/instances/:id/teardown — request teardown of the caller's OWN instance. |
 | GET | `/api/bongos/provisioning/onboard-plan` | `public` | — | GET /provisioning/onboard-plan?mode=greenfield\|adopt&domain=<host> — the CANONICAL onboarding step sequence (task 2085; goal 35 / criteri… |
+| GET | `/api/bongos/provisioning/slug-available` | `any-builder` | — | GET /provisioning/slug-available?slug=<handle> — is this handle free to create under? rank: any authenticated builder (same gate as the c… |
 | GET | `/api/bongos/provisioning/tls-check` | `public` | — | GET /provisioning/tls-check?domain=<host> — the Caddy on-demand-TLS ALLOW-LIST (ADR 0111 §4, task P4 task 1945). |
 
 ## `public` (18)

package/modules/dev-box/app/src/vendor/bongos-client.cjs

@@ -532,6 +532,8 @@ function createClient(opts = {}) {
       postProvisioningInstancesIdTeardown: (args) => request("POST", "/provisioning/instances/{id}/teardown", { hasBody: true }, args),
       // GET /provisioning/onboard-plan — rank: public — GET /provisioning/onboard-plan
       getProvisioningOnboardPlan: (args) => request("GET", "/provisioning/onboard-plan", { hasBody: false }, args),
+      // GET /provisioning/slug-available — rank: any-builder — GET /provisioning/slug-available
+      getProvisioningSlugAvailable: (args) => request("GET", "/provisioning/slug-available", { hasBody: false }, args),
       // GET /provisioning/tls-check — rank: public — GET /provisioning/tls-check
       getProvisioningTlsCheck: (args) => request("GET", "/provisioning/tls-check", { hasBody: false }, args),
     },

package/modules/provisioning/rate-limit.js

@@ -12,14 +12,24 @@
 //
 // In-memory + per-process (the core limiter's model too). `now` is injectable so the
 // window logic is unit-testable without a real clock.
+//
+// `key` picks the bucket, and defaults to the caller's IP — the only identity a PUBLIC
+// endpoint has. An AUTHENTICATED route should key on the builder instead (task 1002898):
+// per-IP starves co-located builders behind one office/CGNAT address for each other,
+// and it is the weaker key anyway once a session is required, since an attacker rotates
+// IPs far more easily than accounts. Keying on a bounded id also bounds the Map.
 'use strict';
 
-function makeAskRateLimiter({ windowMs = 60_000, max = 60, now = Date.now } = {}) {
-  const buckets = new Map(); // ip -> array of recent hit timestamps within the window
+function clientIp(req) {
+  return req.ip || (req.socket && req.socket.remoteAddress) || 'unknown';
+}
+
+function makeAskRateLimiter({ windowMs = 60_000, max = 60, now = Date.now, key = clientIp } = {}) {
+  const buckets = new Map(); // key -> array of recent hit timestamps within the window
   return function askRateLimit(req, res, next) {
     const t = now();
-    const ip = req.ip || (req.socket && req.socket.remoteAddress) || 'unknown';
-    // Prune this IP's bucket to the window, then decide.
+    const ip = key(req) || 'unknown';
+    // Prune this caller's bucket to the window, then decide.
     const hits = (buckets.get(ip) || []).filter((ts) => ts > t - windowMs);
     if (hits.length >= max) {
       const retryAfter = Math.max(1, Math.ceil((hits[0] + windowMs - t) / 1000));
@@ -32,4 +42,4 @@ function makeAskRateLimiter({ windowMs = 60_000, max = 60, now = Date.now } = {}
   };
 }
 
-module.exports = { makeAskRateLimiter };
+module.exports = { makeAskRateLimiter, clientIp };

package/modules/provisioning/routes/provisioning.js

@@ -33,7 +33,7 @@ const auth = api;
 const { pool, validateOrRespond, parseId } = api;
 const provisioning = require('../provisioning');
 const { onboardPlan, stepsForShape } = require('../onboard-plan');
-const { makeAskRateLimiter } = require('../rate-limit');
+const { makeAskRateLimiter, clientIp } = require('../rate-limit');
 
 // How long a GitHub-App-Manifest `state` token is valid — the owner must click the
 // pre-filled link + approve on GitHub within this window (task 2080). Comfortably
@@ -242,6 +242,18 @@ module.exports = function provisioningRoutes() {
   // higher than tls-check's one-shot ask. 120/min/IP gives comfortable headroom while
   // still shedding a flood; in-memory, own bucket (does not share tls-check's budget).
   const statusRateLimit = makeAskRateLimiter({ max: 120 });
+  // Limiter for the slug-availability check (task 1002898 N10). Signed-in-only, but a
+  // session is cheap and the route answers a yes/no about EVERY project slug on the
+  // instance — an enumeration oracle if left unthrottled. A wizard debouncing one handle
+  // field fires a handful per minute, so 30 is roomy for a human and tight for a crawler.
+  // Keyed on the BUILDER, not the IP (unlike the public limiters above): the route is
+  // authenticated, so per-IP would starve co-located builders behind one office address
+  // for each other while an attacker just rotates IPs. Own bucket either way — it must
+  // not spend, or be starved by, tls-check's budget.
+  const slugCheckRateLimit = makeAskRateLimiter({
+    max: 30,
+    key: (req) => (req.builder ? `b:${req.builder.id}` : clientIp(req)),
+  });
 
   // Route ORDER is deliberate (the box.js precedent): the Archon-gated routes are
   // declared FIRST, then the any-builder routes. The route-rank auditor
@@ -358,6 +370,16 @@ module.exports = function provisioningRoutes() {
         reason: 'adopt layers onto an existing repo, so target_ref (owner/repo) is required',
       });
     }
+    // KNOWN GAP — the credential preflight belongs HERE, and is deliberately absent.
+    // This route validates that target_ref is PRESENT but never that the owner holds a
+    // usable repo credential for it, so an API caller can queue a standup that dies
+    // ~2 minutes later in raw git stderr (the task-1002697 walk did exactly that; the
+    // web wizard is only incidentally protected because it 403s earlier). Carved out of
+    // task 1002898 as N3 and tracked by task 1002909, which is BLOCKED on task 1002735
+    // deciding what credential a private-repo standup actually needs: written against
+    // the wrong definition, a preflight would refuse valid creates or keep admitting
+    // doomed ones. Greenfield must stay exempt when it lands — the platform creates
+    // that repo itself, so there is no pre-existing repo to hold a credential for.
     try {
       // A re-request must not re-litigate the address: createInstance never updates
       // an existing row's domain, so for one the guards below could only misfire —
@@ -479,6 +501,54 @@ module.exports = function provisioningRoutes() {
     }
   });
 
+  // GET /provisioning/slug-available?slug=<handle> — is this handle free to create
+  // under? rank: any authenticated builder (same gate as the create route it previews;
+  // deliberately NOT public — the answer is a yes/no about every project slug on the
+  // instance, so it is an enumeration oracle and carries its own per-IP limiter).
+  //
+  // It ADVISORY-previews the create route and must agree with it exactly, so the
+  // normalization and the bar below are lifted from POST /provisioning/instances:
+  // trim+lowercase → isValidSlug → getInstanceBySlug (the byte-exact `slug text
+  // UNIQUE` in provisioning_001_tables.sql, which is what the 23505 catch in
+  // createInstance reflects — so no lower(slug) here, or we would over-report taken).
+  // The three refusals mirror the three ways create actually answers:
+  //   'taken'    — another builder holds it → create 409s slug_taken
+  //   'yours'    — the CALLER holds it → create is an idempotent re-request (200,
+  //                created:false), not a new project, so it is not free to create under
+  //   'reserved' — the row is free but <slug>.<apex> is a platform-reserved address →
+  //                create 400s domain_reserved on the DEFAULT (assigned-address) path.
+  //                A no_address create would still succeed; the wizard only asks about
+  //                the default path, and reporting it distinctly keeps that recoverable.
+  //
+  // NARROWS the TOCTOU window, never closes it: another builder can take the slug
+  // between this answer and the create. The 409 at POST /provisioning/instances
+  // remains the ONLY authority — this exists so a collision is seen while the owner
+  // is still typing instead of at the final Create click.
+  router.get('/provisioning/slug-available', auth.requireBuilder, slugCheckRateLimit, async (req, res) => {
+    const slug = String((req.query && req.query.slug) || '').trim().toLowerCase();
+    if (!provisioning.isValidSlug(slug)) {
+      return res.fail('bad_slug', 400, { reason: 'lowercase, 2–40 chars of [a-z0-9-], no leading/trailing/double dash' });
+    }
+    try {
+      const apex = instanceApex();
+      const address = provisioning.defaultDomainForSlug(slug, apex);
+      const holder = await provisioning.getInstanceBySlug(pool, slug);
+      let reason = null;
+      if (holder) {
+        reason = String(holder.owner_builder_id) === String(req.builder.id) ? 'yours' : 'taken';
+      } else if (address && provisioning.isReservedHostname(address, apex)) {
+        reason = 'reserved';
+      }
+      // Only the verdict travels — never the holder's row. A signed-in stranger
+      // learning WHO owns a handle (or anything about their instance) would be a
+      // disclosure this route has no reason to make.
+      res.json({ slug, available: reason === null, reason, address: address || null });
+    } catch (err) {
+      console.error('[provisioning] GET /provisioning/slug-available', err);
+      res.fail('check_failed', { status: 500, message: 'internal error' });
+    }
+  });
+
   // GET /provisioning/instances — the caller's own instances + each open intent.
   // rank: any authenticated builder (own resource read).
   router.get('/provisioning/instances', auth.requireBuilder, async (req, res) => {

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.141",
+  "version": "1.19.143",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.141",
+      "version": "1.19.143",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.141",
+  "version": "1.19.143",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/public-landing/assets/cosmos.css

@@ -98,6 +98,7 @@
   --ink:#fdeedd; --ink-soft:#dcb693; --ink-faint:#b89272;
   --rule:#5e3521; --rule-soft:#3f2317;
   --accent-deep:color-mix(in srgb, var(--accent) 45%, #ffffff);
+  --link-ink:color-mix(in srgb, var(--accent) 51%, #ffffff);
   --sea-ink:color-mix(in srgb, var(--sea) 65%, #ffffff);
   --ok:#4ade80; --warn:#fbbf24; --err:#f87171;
   --on-ok:#0b2e18;
@@ -125,6 +126,7 @@
     --ink:#fdeedd; --ink-soft:#dcb693; --ink-faint:#b89272;
     --rule:#5e3521; --rule-soft:#3f2317;
     --accent-deep:color-mix(in srgb, var(--accent) 45%, #ffffff);
+    --link-ink:color-mix(in srgb, var(--accent) 51%, #ffffff);
     --sea-ink:color-mix(in srgb, var(--sea) 65%, #ffffff);
     --ok:#4ade80; --warn:#fbbf24; --err:#f87171;
     --on-ok:#0b2e18;
@@ -160,6 +162,15 @@
      --sea as-is; dark derives brighter (the --accent-deep pattern) so a pack's
      light-tuned sea clears WCAG 1.4.11's 3:1 on the near-black card too */
   --sea-ink:var(--sea);
+  /* TEXT LINKS ONLY (task 1002822). Light is --accent-deep unchanged; dark needs
+     its own mix because --accent-deep and --ink-soft land 2 lightness points
+     apart there (#e9ad8f vs #dcb693, ΔE76 9.7) — the same colour, and dark links
+     carry no underline until hover, so weight was the only cue left. 51% is the
+     ceiling, not a preference: --accent-deep can't simply be pushed (it also
+     feeds --chrome-accent/--glass-ink/--hero-b/--foot-code), and past 51% a dark
+     navy pack accent falls under 4.5:1 on --bg-deep. Chrome keeps --accent-deep;
+     only rules that paint a link inside prose take this. */
+  --link-ink:var(--accent-deep);
   --neutral-soft:color-mix(in srgb, var(--ink) 8%, var(--bg-card));
   /* ink-derived so the shadow is a WARM brown on the marigold ground instead of
      the cold navy it used to cast. The dark blocks override it with a plain black
@@ -211,7 +222,7 @@ body{font-family:var(--font-body);color:var(--ink);background:var(--page-bg);min
 .card{background:var(--card);border-radius:26px;box-shadow:var(--shadow-card);padding:clamp(22px,3.6vw,40px);}
 h1{font-family:var(--font-display);font-weight:700;font-size:clamp(24px,3.4vw,32px);letter-spacing:-0.5px;line-height:1.15;margin-bottom:8px;}
 .lede{font-size:15.5px;color:var(--ink-soft);font-weight:500;line-height:1.55;margin-bottom:24px;max-width:62ch;}
-.lede a{color:var(--accent-deep);font-weight:700;text-decoration:none;}
+.lede a{color:var(--link-ink);font-weight:700;text-decoration:none;}
 .lede a:hover{text-decoration:underline;}
 
 /* ── buttons ── */
@@ -225,7 +236,7 @@ h1{font-family:var(--font-display);font-weight:700;font-size:clamp(24px,3.4vw,32
 .btn.danger{background:transparent;color:var(--err);box-shadow:none;border:2px solid color-mix(in srgb,var(--err) 35%,transparent);}
 .btn.danger:hover{background:var(--err-soft);border-color:var(--err);}
 .btn .gh{width:17px;height:17px;fill:currentColor;}
-.linklike{background:none;border:none;cursor:pointer;font-family:var(--font-body);font-weight:700;font-size:13.5px;color:var(--accent-deep);text-decoration:underline;padding:6px 4px;}
+.linklike{background:none;border:none;cursor:pointer;font-family:var(--font-body);font-weight:700;font-size:13.5px;color:var(--link-ink);text-decoration:underline;padding:6px 4px;}
 
 /* ── chips: the one status vocabulary (direction §4). Recency rides inside
    (.rec) — "live" always says when it was last verified. ── */
@@ -262,7 +273,16 @@ h1{font-family:var(--font-display);font-weight:700;font-size:clamp(24px,3.4vw,32
 /* ── project cards ── */
 .projects{list-style:none;display:flex;flex-direction:column;gap:18px;}
 .proj{border:2px solid var(--line);border-radius:18px;padding:18px 20px;background:var(--bg-card);display:flex;gap:16px;align-items:flex-start;}
-.proj.gone{opacity:0.78;}
+/* torn down = muted TOKENS, not a subtree dim. opacity multiplies AFTER every
+   token resolves, so .78 dimmed the WHOLE card — meta to 3.72:1 light / 4.16:1
+   dark, address to 4.35:1 light, and the chips and buttons with them (task
+   1002823, the .humanSteps>li.slocked pattern from 1002751). Only the name needs
+   an override: .projMeta is already --ink-faint and measures once the multiply
+   is gone. The chip, the "Torn down" line and the actions keep full strength —
+   a dead project's last known state and its Bring-it-back button are what the
+   card is there for — and the ghosted .orb stays the graphic cue. */
+.proj.gone{border-color:color-mix(in srgb,var(--line) 55%,var(--bg-card));}
+.proj.gone .projName{color:var(--ink-soft);}
 /* click-to-manage landing glow: the sky's owned orb hands focus to this card */
 .proj.anchored{border-color:var(--accent);box-shadow:0 0 0 3px color-mix(in srgb,var(--accent) 30%,transparent);}
 .projBody{flex:1;min-width:0;}
@@ -271,7 +291,7 @@ h1{font-family:var(--font-display);font-weight:700;font-size:clamp(24px,3.4vw,32
 .projMeta{font-size:13px;font-weight:600;color:var(--ink-faint);margin-top:6px;display:flex;gap:14px;flex-wrap:wrap;}
 .projMeta code{font-family:var(--font-mono);font-size:12.5px;background:var(--bg-deep);border-radius:6px;padding:1px 6px;color:var(--accent-deep);}
 .addr{margin-top:12px;font-size:14.5px;font-weight:600;color:var(--ink-soft);}
-.addr a{color:var(--accent-deep);font-weight:700;text-decoration:none;font-family:var(--font-mono);font-size:13.5px;}
+.addr a{color:var(--link-ink);font-weight:700;text-decoration:none;font-family:var(--font-mono);font-size:13.5px;}
 .addr a:hover{text-decoration:underline;}
 .addr .none{color:var(--ink-faint);font-style:italic;}
 .addr code{font-family:var(--font-mono);font-size:13px;background:var(--bg-deep);border-radius:6px;padding:1px 7px;color:var(--accent-deep);}
@@ -282,7 +302,7 @@ h1{font-family:var(--font-display);font-weight:700;font-size:clamp(24px,3.4vw,32
 .projMsg{font-size:13.5px;font-weight:600;margin-top:10px;min-height:18px;color:var(--ink-soft);line-height:1.5;}
 .projMsg.ok{color:var(--ok);}
 .projMsg.err{color:var(--err);}
-.projMsg a{color:var(--accent-deep);font-weight:700;text-decoration:none;}
+.projMsg a{color:var(--link-ink);font-weight:700;text-decoration:none;}
 .projMsg a:hover{text-decoration:underline;}
 .projMsg details{margin-top:8px;}
 .projMsg summary{cursor:pointer;font-size:12.5px;font-weight:700;color:var(--ink-faint);}
@@ -293,7 +313,7 @@ h1{font-family:var(--font-display);font-weight:700;font-size:clamp(24px,3.4vw,32
 .finePrint{font-size:12.5px;color:var(--ink-faint);font-weight:600;margin-top:16px;line-height:1.5;}
 /* a link in fine print still has to look like one — without this it fell back to
    the browser's default blue, the one colour in the page that is not ours */
-.finePrint a{color:var(--accent-deep);font-weight:700;text-decoration:none;}
+.finePrint a{color:var(--link-ink);font-weight:700;text-decoration:none;}
 .finePrint a:hover{text-decoration:underline;}
 
 /* ── progress strips: one visual, per-flow vocabularies (direction §4).
@@ -315,7 +335,7 @@ h1{font-family:var(--font-display);font-weight:700;font-size:clamp(24px,3.4vw,32
 .strip .slbl{font-size:12px;font-weight:700;color:var(--ink-faint);}
 .strip .stages li.now .slbl,.strip .stages li.done .slbl{color:color-mix(in srgb,var(--sea) 40%,var(--ink));}
 .strip .pnote{text-align:center;font-size:13px;font-weight:600;color:var(--ink-soft);min-height:18px;line-height:1.5;}
-.strip .pnote a{color:var(--accent-deep);font-weight:700;text-decoration:none;}
+.strip .pnote a{color:var(--link-ink);font-weight:700;text-decoration:none;}
 .strip.isLive{border-color:var(--ok-soft);background:linear-gradient(180deg,color-mix(in srgb,var(--ok) 8%,var(--bg-card)) 0%,var(--bg-card) 100%);}
 .strip.isLive .stages li.done:not(:first-child)::before{background:var(--ok);}
 .strip.isLive .stages li.done .sdot{border-color:var(--ok);background:var(--ok);}
@@ -651,7 +671,14 @@ p.sec-p{font-size:var(--fs-lede);font-weight:500;color:var(--ink-soft);line-heig
   border:2px solid var(--line);border-radius:999px;padding:7px 14px;white-space:nowrap;}
 .filters button:hover{border-color:var(--accent);color:var(--accent-deep);}
 .filters button[aria-pressed="true"]{background:var(--accent);border-color:var(--accent);color:#fff;}
-.filters .n{font-family:var(--font-mono);font-weight:500;font-size:11.5px;opacity:.75;}
+/* muted by TOKEN, not opacity — .75 multiplied after the ink resolved and took
+   the count to 4.05:1 on a resting pill and 3.23:1 on the pressed one (task
+   1002823). The pressed pill is excluded on purpose: its ground is the saturated
+   --accent fill, where no ink token clears 4.5:1 (--ink is the best at 3.70
+   light / 4.05 dark) — only the button's own #fff does, at 4.61, so the count
+   inherits it there. Size, weight and the mono face already say "secondary". */
+.filters .n{font-family:var(--font-mono);font-weight:500;font-size:11.5px;}
+.filters button:not([aria-pressed="true"]) .n{color:var(--ink-faint);}
 .mineEmpty{font-size:14.5px;font-weight:600;color:var(--ink-soft);padding:10px 0 22px;}
 
 /* ── the create rail ── */