@bongos/core 1.19.142 → 1.19.144

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.142",
-  "core_contract": "1.19.142",
-  "source_commit": "34ee06f88922e1b277d1d8780b0da9c9fa7edd2a",
+  "core_version": "1.19.144",
+  "core_contract": "1.19.144",
+  "source_commit": "36beb6c51bf7da7c8677cd6cf29d3b3739b1fc86",
   "source_ref": "HEAD",
-  "built_at": "2026-08-15T15:39:26.241Z",
+  "built_at": "2026-08-15T16:06:10.087Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 303,
     "agent_docs_stubbed": 21,
-    "functional_verbatim": 1250,
+    "functional_verbatim": 1251,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 1574,
-  "tree_sha256": "c544fb023102eaf104fa988b33f2cb9c70a2d8817edf0549e3e5608ba47be6e4",
+  "file_count": 1575,
+  "tree_sha256": "5c594013e8ee432b685ee793f28efedacd67b463904cda4eb9942dd7dd6b62d3",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -347,12 +347,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "36eb537043097dc8e05307adc06d893a2c5ceb8cceb63f24b64ade001a0a2640"
+      "sha256": "0942508db8fb6f31b9e095d197f8b4cdd4efdc4e754c46629ea299ff10d895a1"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "ad598bf38511e3e7bd9f25a82987126cd71cfe76ac8275ddee2bcd90eb8e6a11"
+      "sha256": "5a4a95386b5a2ec9bc59334a35b09b5701b2ca5eabc99baf2305c7b82d920342"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -362,17 +362,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "43823273ec587b104f3e0296614ae8ea6c4dc5c96261dbbb359ae39c21cf4e79"
+      "sha256": "2c199a1ad61c8ca8a015b0918368da4c3bf4a8e6196edfd46b93048dda8e9eb5"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "eeb9b7bdf6054c92e3c605201c846d67ea20dd927355d2dc72479477c073fc7c"
+      "sha256": "e1359174cf948616e95a03232a8fe3f7a56e66aa94d578c786b6e7a258ce0221"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "6d441799f948513f840394bd382dba7e601e79a07fb7591bcb0e05aea2edd2a9"
+      "sha256": "e0e5672aafc56bfec2b6d0b3d90a73c984a5f3cf6b745025f5d9a37d8f09d7e6"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -1337,12 +1337,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "b9af2341b7017c6e21b53a611a824b8d3a59653f967e6f83218c9f1d25d0ff58"
+      "sha256": "e88714b1178d43ff8aea451807a0a6095a3e90d4a592babc4ffb5c1baccac4ba"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "35762381d39e1943558131e97d3541e28d47161a56ec0a3d664942c90fb9fa9b"
+      "sha256": "0a3bf7cc757082f1764b926f72e24a14e8f22e07f0e0a5085ab6ff9d64e74ba8"
     },
     {
       "path": "docs/architecture.md",
@@ -2652,7 +2652,7 @@
     {
       "path": "modules/dev-box/app/src/vendor/bongos-client.cjs",
       "mode": "0000644",
-      "sha256": "43823273ec587b104f3e0296614ae8ea6c4dc5c96261dbbb359ae39c21cf4e79"
+      "sha256": "2c199a1ad61c8ca8a015b0918368da4c3bf4a8e6196edfd46b93048dda8e9eb5"
     },
     {
       "path": "modules/dev-box/app/test/unit.mjs",
@@ -3877,12 +3877,12 @@
     {
       "path": "modules/provisioning/rate-limit.js",
       "mode": "0000644",
-      "sha256": "7741c4ba99f687fd02e33682a541320064aecb4fb7a7dc6b492583acc20db9a3"
+      "sha256": "27046325beffad5d1edfcc91c331048038900ef7d32f1d38796755c7990ba202"
     },
     {
       "path": "modules/provisioning/routes/provisioning.js",
       "mode": "0000644",
-      "sha256": "903a3324337f8c1f123f81ca176550df0afbdeeea1f18254d41489dc3c4fed5d"
+      "sha256": "17f6adb4edd7dee2ab339f5d302b61ecfbcf45db2ba4d0315eeeffbad87a9dce"
     },
     {
       "path": "modules/provisioning/tests/liveness.mjs",
@@ -4177,12 +4177,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "9c082e0279aa72767e3167df6277a3f34247a7d600bc184f00a4ca9380b97da5"
+      "sha256": "a315183a94657af4ee558bc70eb2860782fa07576b9c55d0a028295f4287e2fc"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "b3d152773025a6478d933888ade55e094a55016f8260989361ef426838700d03"
+      "sha256": "385cb6e8816fd2bfefa4a04d5a8bc4a9dac9e4d540903d9f736883b8d8abbc5c"
     },
     {
       "path": "public-docs/index.html",
@@ -4422,7 +4422,7 @@
     {
       "path": "public-landing/assets/cosmos.css",
       "mode": "0000644",
-      "sha256": "0e023e2e98babfd7d748b2f7542af13c41be96cbcc84f2853110410a57fe7816"
+      "sha256": "4641a5c0c0222c0948ecdf57db9bb3cd88b5500089bbbbe735597abd4d44d4da"
     },
     {
       "path": "public-landing/buddha.png",
@@ -4437,7 +4437,7 @@
     {
       "path": "public-landing/projects.html",
       "mode": "0000644",
-      "sha256": "eb36261b21198d9217d96408de5ee898083aaf0d5f62368f1be3b4af9a908dcb"
+      "sha256": "deae8db82f897ee77633ffb2b7f5144960d9961ba4cdb9e052346c6cb127b0c9"
     },
     {
       "path": "public-landing/world/assets/clouds/cloud-island-large.png",
@@ -5767,7 +5767,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "6eaa713a395bf793d4e07c0d68ae86a29473e410d393b859dcfd1d52bacb2811"
+      "sha256": "8b8d833fa63b772e134faf867ad771f33293f81d8af3dd695221489217dd7c89"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -6277,7 +6277,7 @@
     {
       "path": "tests/cosmos_token_contrast.mjs",
       "mode": "0000644",
-      "sha256": "15ebf10ea627a32e943d139f1a713ff46cfda14fa1a39a12d87bcc78934516c0"
+      "sha256": "dfb0f0b083a118c2bf8f424232f1e36e96f48aa962921649c487c93d5ce4eda2"
     },
     {
       "path": "tests/cost.mjs",
@@ -7339,6 +7339,11 @@
       "mode": "0000644",
       "sha256": "7749df454ac3cca7c7e5ea1acc94ead15d1c9f87b38fe2028a1c93c8adf31bcf"
     },
+    {
+      "path": "tests/provisioning_slug_available.mjs",
+      "mode": "0000644",
+      "sha256": "1623d2dff20d7b5843f9fd39dd91c35e4a8ebe10b60cf798e01a7fbc4b0202cf"
+    },
     {
       "path": "tests/provisioning_teardown_intent.mjs",
       "mode": "0000644",
@@ -7352,7 +7357,7 @@
     {
       "path": "tests/public_landing_projects.mjs",
       "mode": "0000644",
-      "sha256": "d7998f770254f2c0179a6269d408f571c8757a97defd2543462b8496cb5f3e23"
+      "sha256": "ea3fc3b311115c765e7734e11cc33750a5ffde9f492d4635460b04cfc2108ad3"
     },
     {
       "path": "tests/public_mirror_export.mjs",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 269 operations across 45 resource groups
+- 270 operations across 45 resource groups
 
 ## Install
 

package/clients/bongos-client/bongos-client.global.js

@@ -533,6 +533,8 @@ function createClient(opts = {}) {
       postProvisioningInstancesIdTeardown: (args) => request("POST", "/provisioning/instances/{id}/teardown", { hasBody: true }, args),
       // GET /provisioning/onboard-plan — rank: public — GET /provisioning/onboard-plan
       getProvisioningOnboardPlan: (args) => request("GET", "/provisioning/onboard-plan", { hasBody: false }, args),
+      // GET /provisioning/slug-available — rank: any-builder — GET /provisioning/slug-available
+      getProvisioningSlugAvailable: (args) => request("GET", "/provisioning/slug-available", { hasBody: false }, args),
       // GET /provisioning/tls-check — rank: public — GET /provisioning/tls-check
       getProvisioningTlsCheck: (args) => request("GET", "/provisioning/tls-check", { hasBody: false }, args),
     },

package/clients/bongos-client/index.cjs

@@ -532,6 +532,8 @@ function createClient(opts = {}) {
       postProvisioningInstancesIdTeardown: (args) => request("POST", "/provisioning/instances/{id}/teardown", { hasBody: true }, args),
       // GET /provisioning/onboard-plan — rank: public — GET /provisioning/onboard-plan
       getProvisioningOnboardPlan: (args) => request("GET", "/provisioning/onboard-plan", { hasBody: false }, args),
+      // GET /provisioning/slug-available — rank: any-builder — GET /provisioning/slug-available
+      getProvisioningSlugAvailable: (args) => request("GET", "/provisioning/slug-available", { hasBody: false }, args),
       // GET /provisioning/tls-check — rank: public — GET /provisioning/tls-check
       getProvisioningTlsCheck: (args) => request("GET", "/provisioning/tls-check", { hasBody: false }, args),
     },

package/clients/bongos-client/index.d.ts

@@ -75,6 +75,7 @@ export interface GetProvisioningHealthResponse { module: unknown; ok: boolean; c
 export interface GetProvisioningInstancesIdResponse { instance: unknown; open_intent: unknown }
 export interface GetProvisioningInstancesResponse { instances: unknown }
 export interface GetProvisioningOnboardPlanResponse { mode: unknown; steps: unknown }
+export interface GetProvisioningSlugAvailableResponse { slug: unknown; available: unknown; reason: unknown; address: unknown }
 export interface GetPublicBlockersIdResponse { blocker: unknown }
 export interface GetPublicBountyTableResponse { table: unknown; currency: unknown }
 export interface GetPublicGradesResponse { window_days: unknown; rolling: unknown; trend: unknown; attempts: unknown; threshold: unknown; grader_version: unknown }
@@ -768,6 +769,8 @@ export interface BongosClient {
     postProvisioningInstancesIdTeardown(args?: RequestArgs): Promise<PostProvisioningInstancesIdTeardownResponse>;
     /** GET /provisioning/onboard-plan — rank: public */
     getProvisioningOnboardPlan(args?: RequestArgs): Promise<GetProvisioningOnboardPlanResponse>;
+    /** GET /provisioning/slug-available — rank: any-builder */
+    getProvisioningSlugAvailable(args?: RequestArgs): Promise<GetProvisioningSlugAvailableResponse>;
     /** GET /provisioning/tls-check — rank: public */
     getProvisioningTlsCheck(args?: RequestArgs): Promise<ApiResponse>;
   };

package/clients/bongos-client/index.mjs

@@ -529,6 +529,8 @@ export function createClient(opts = {}) {
       postProvisioningInstancesIdTeardown: (args) => request("POST", "/provisioning/instances/{id}/teardown", { hasBody: true }, args),
       // GET /provisioning/onboard-plan — rank: public — GET /provisioning/onboard-plan
       getProvisioningOnboardPlan: (args) => request("GET", "/provisioning/onboard-plan", { hasBody: false }, args),
+      // GET /provisioning/slug-available — rank: any-builder — GET /provisioning/slug-available
+      getProvisioningSlugAvailable: (args) => request("GET", "/provisioning/slug-available", { hasBody: false }, args),
       // GET /provisioning/tls-check — rank: public — GET /provisioning/tls-check
       getProvisioningTlsCheck: (args) => request("GET", "/provisioning/tls-check", { hasBody: false }, args),
     },

package/docs/api/openapi.json

@@ -8754,6 +8754,44 @@
         "security": []
       }
     },
+    "/provisioning/slug-available": {
+      "get": {
+        "operationId": "get_provisioning_slug_available",
+        "tags": [
+          "provisioning"
+        ],
+        "summary": "GET /provisioning/slug-available",
+        "description": "GET /provisioning/slug-available?slug=<handle> — is this handle free to create under? rank: any authenticated builder (same gate as the create route it previews; deliberately NOT public — the answer is a yes/no about every project slug on the instance, so it is an enumeration oracle and carries its own per-IP limiter). It ADVISORY-previews the create route and must agree with it exactly, so the normalization and the bar below are lifted from POST /provisioning/instances: trim+lowercase → isValidSlug → getInstanceBySlug (the byte-exact `slug text UNIQUE` in provisioning_001_tables.sql, which is what the 23505 catch in createInstance reflects — so no lower(slug) here, or we would over-report taken). The three refusals mirror the three ways create actually answers: 'taken' — another builder holds it → create 409s slug_taken 'yours' — the CALLER holds it → create is an idempotent re-request (200, created:false), not a new project, so it is not free to create under 'reserved' — the row is free but <slug>.<apex> is a platform-reserved address → create 400s domain_reserved on the DEFAULT (assigned-address) path. A no_address create would still succeed; the wizard only asks about the default path, and reporting it distinctly keeps that recoverable. NARROWS the TOCTOU window, never closes it: another builder can take the slug between this answer and the create. The 409 at POST /provisioning/instances remains the ONLY authority — this exists so a collision is seen while the owner is still typing instead of at the final Create click.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/provisioning/routes/provisioning.js",
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetProvisioningSlugAvailableResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/provisioning/tls-check": {
       "get": {
         "operationId": "get_provisioning_tls_check",
@@ -13109,6 +13147,21 @@
           "steps"
         ]
       },
+      "GetProvisioningSlugAvailableResponse": {
+        "type": "object",
+        "properties": {
+          "slug": {},
+          "available": {},
+          "reason": {},
+          "address": {}
+        },
+        "required": [
+          "slug",
+          "available",
+          "reason",
+          "address"
+        ]
+      },
       "GetPublicBlockersIdResponse": {
         "type": "object",
         "properties": {
@@ -16983,9 +17036,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 269,
-  "x-schema-count": 302,
+  "x-endpoint-count": 270,
+  "x-schema-count": 303,
   "x-undocumented-bodies": 8,
-  "x-response-schemas": 204,
+  "x-response-schemas": 205,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 269 endpoints across 44 route files.
+> **Generated from the live route files** — the route file is authoritative. 270 endpoints across 44 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -358,7 +358,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | GET | `/api/bongos/projects/featured` | `public` | — | a curated public showcase; no auth by design. |
 | POST | `/api/bongos/projects/invite` | `metic+archon` | `client_id`, `github_login` | invite a builder into a project (ADR 0141 §5, task #1002115). |
 
-## `provisioning` (14)
+## `provisioning` (15)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -375,6 +375,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | POST | `/api/bongos/provisioning/instances/:id/github-app` | `any-builder` | `account` | POST /provisioning/instances/:id/github-app — mint a GitHub-App-Manifest onboarding link for the caller's OWN instance (task 2080, ADR 01… |
 | POST | `/api/bongos/provisioning/instances/:id/teardown` | `any-builder` | — | POST /provisioning/instances/:id/teardown — request teardown of the caller's OWN instance. |
 | GET | `/api/bongos/provisioning/onboard-plan` | `public` | — | GET /provisioning/onboard-plan?mode=greenfield\|adopt&domain=<host> — the CANONICAL onboarding step sequence (task 2085; goal 35 / criteri… |
+| GET | `/api/bongos/provisioning/slug-available` | `any-builder` | — | GET /provisioning/slug-available?slug=<handle> — is this handle free to create under? rank: any authenticated builder (same gate as the c… |
 | GET | `/api/bongos/provisioning/tls-check` | `public` | — | GET /provisioning/tls-check?domain=<host> — the Caddy on-demand-TLS ALLOW-LIST (ADR 0111 §4, task P4 task 1945). |
 
 ## `public` (18)

package/modules/dev-box/app/src/vendor/bongos-client.cjs

@@ -532,6 +532,8 @@ function createClient(opts = {}) {
       postProvisioningInstancesIdTeardown: (args) => request("POST", "/provisioning/instances/{id}/teardown", { hasBody: true }, args),
       // GET /provisioning/onboard-plan — rank: public — GET /provisioning/onboard-plan
       getProvisioningOnboardPlan: (args) => request("GET", "/provisioning/onboard-plan", { hasBody: false }, args),
+      // GET /provisioning/slug-available — rank: any-builder — GET /provisioning/slug-available
+      getProvisioningSlugAvailable: (args) => request("GET", "/provisioning/slug-available", { hasBody: false }, args),
       // GET /provisioning/tls-check — rank: public — GET /provisioning/tls-check
       getProvisioningTlsCheck: (args) => request("GET", "/provisioning/tls-check", { hasBody: false }, args),
     },

package/modules/provisioning/rate-limit.js

@@ -12,14 +12,24 @@
 //
 // In-memory + per-process (the core limiter's model too). `now` is injectable so the
 // window logic is unit-testable without a real clock.
+//
+// `key` picks the bucket, and defaults to the caller's IP — the only identity a PUBLIC
+// endpoint has. An AUTHENTICATED route should key on the builder instead (task 1002898):
+// per-IP starves co-located builders behind one office/CGNAT address for each other,
+// and it is the weaker key anyway once a session is required, since an attacker rotates
+// IPs far more easily than accounts. Keying on a bounded id also bounds the Map.
 'use strict';
 
-function makeAskRateLimiter({ windowMs = 60_000, max = 60, now = Date.now } = {}) {
-  const buckets = new Map(); // ip -> array of recent hit timestamps within the window
+function clientIp(req) {
+  return req.ip || (req.socket && req.socket.remoteAddress) || 'unknown';
+}
+
+function makeAskRateLimiter({ windowMs = 60_000, max = 60, now = Date.now, key = clientIp } = {}) {
+  const buckets = new Map(); // key -> array of recent hit timestamps within the window
   return function askRateLimit(req, res, next) {
     const t = now();
-    const ip = req.ip || (req.socket && req.socket.remoteAddress) || 'unknown';
-    // Prune this IP's bucket to the window, then decide.
+    const ip = key(req) || 'unknown';
+    // Prune this caller's bucket to the window, then decide.
     const hits = (buckets.get(ip) || []).filter((ts) => ts > t - windowMs);
     if (hits.length >= max) {
       const retryAfter = Math.max(1, Math.ceil((hits[0] + windowMs - t) / 1000));
@@ -32,4 +42,4 @@ function makeAskRateLimiter({ windowMs = 60_000, max = 60, now = Date.now } = {}
   };
 }
 
-module.exports = { makeAskRateLimiter };
+module.exports = { makeAskRateLimiter, clientIp };

package/modules/provisioning/routes/provisioning.js

@@ -33,7 +33,7 @@ const auth = api;
 const { pool, validateOrRespond, parseId } = api;
 const provisioning = require('../provisioning');
 const { onboardPlan, stepsForShape } = require('../onboard-plan');
-const { makeAskRateLimiter } = require('../rate-limit');
+const { makeAskRateLimiter, clientIp } = require('../rate-limit');
 
 // How long a GitHub-App-Manifest `state` token is valid — the owner must click the
 // pre-filled link + approve on GitHub within this window (task 2080). Comfortably
@@ -242,6 +242,18 @@ module.exports = function provisioningRoutes() {
   // higher than tls-check's one-shot ask. 120/min/IP gives comfortable headroom while
   // still shedding a flood; in-memory, own bucket (does not share tls-check's budget).
   const statusRateLimit = makeAskRateLimiter({ max: 120 });
+  // Limiter for the slug-availability check (task 1002898 N10). Signed-in-only, but a
+  // session is cheap and the route answers a yes/no about EVERY project slug on the
+  // instance — an enumeration oracle if left unthrottled. A wizard debouncing one handle
+  // field fires a handful per minute, so 30 is roomy for a human and tight for a crawler.
+  // Keyed on the BUILDER, not the IP (unlike the public limiters above): the route is
+  // authenticated, so per-IP would starve co-located builders behind one office address
+  // for each other while an attacker just rotates IPs. Own bucket either way — it must
+  // not spend, or be starved by, tls-check's budget.
+  const slugCheckRateLimit = makeAskRateLimiter({
+    max: 30,
+    key: (req) => (req.builder ? `b:${req.builder.id}` : clientIp(req)),
+  });
 
   // Route ORDER is deliberate (the box.js precedent): the Archon-gated routes are
   // declared FIRST, then the any-builder routes. The route-rank auditor
@@ -358,6 +370,16 @@ module.exports = function provisioningRoutes() {
         reason: 'adopt layers onto an existing repo, so target_ref (owner/repo) is required',
       });
     }
+    // KNOWN GAP — the credential preflight belongs HERE, and is deliberately absent.
+    // This route validates that target_ref is PRESENT but never that the owner holds a
+    // usable repo credential for it, so an API caller can queue a standup that dies
+    // ~2 minutes later in raw git stderr (the task-1002697 walk did exactly that; the
+    // web wizard is only incidentally protected because it 403s earlier). Carved out of
+    // task 1002898 as N3 and tracked by task 1002909, which is BLOCKED on task 1002735
+    // deciding what credential a private-repo standup actually needs: written against
+    // the wrong definition, a preflight would refuse valid creates or keep admitting
+    // doomed ones. Greenfield must stay exempt when it lands — the platform creates
+    // that repo itself, so there is no pre-existing repo to hold a credential for.
     try {
       // A re-request must not re-litigate the address: createInstance never updates
       // an existing row's domain, so for one the guards below could only misfire —
@@ -479,6 +501,54 @@ module.exports = function provisioningRoutes() {
     }
   });
 
+  // GET /provisioning/slug-available?slug=<handle> — is this handle free to create
+  // under? rank: any authenticated builder (same gate as the create route it previews;
+  // deliberately NOT public — the answer is a yes/no about every project slug on the
+  // instance, so it is an enumeration oracle and carries its own per-IP limiter).
+  //
+  // It ADVISORY-previews the create route and must agree with it exactly, so the
+  // normalization and the bar below are lifted from POST /provisioning/instances:
+  // trim+lowercase → isValidSlug → getInstanceBySlug (the byte-exact `slug text
+  // UNIQUE` in provisioning_001_tables.sql, which is what the 23505 catch in
+  // createInstance reflects — so no lower(slug) here, or we would over-report taken).
+  // The three refusals mirror the three ways create actually answers:
+  //   'taken'    — another builder holds it → create 409s slug_taken
+  //   'yours'    — the CALLER holds it → create is an idempotent re-request (200,
+  //                created:false), not a new project, so it is not free to create under
+  //   'reserved' — the row is free but <slug>.<apex> is a platform-reserved address →
+  //                create 400s domain_reserved on the DEFAULT (assigned-address) path.
+  //                A no_address create would still succeed; the wizard only asks about
+  //                the default path, and reporting it distinctly keeps that recoverable.
+  //
+  // NARROWS the TOCTOU window, never closes it: another builder can take the slug
+  // between this answer and the create. The 409 at POST /provisioning/instances
+  // remains the ONLY authority — this exists so a collision is seen while the owner
+  // is still typing instead of at the final Create click.
+  router.get('/provisioning/slug-available', auth.requireBuilder, slugCheckRateLimit, async (req, res) => {
+    const slug = String((req.query && req.query.slug) || '').trim().toLowerCase();
+    if (!provisioning.isValidSlug(slug)) {
+      return res.fail('bad_slug', 400, { reason: 'lowercase, 2–40 chars of [a-z0-9-], no leading/trailing/double dash' });
+    }
+    try {
+      const apex = instanceApex();
+      const address = provisioning.defaultDomainForSlug(slug, apex);
+      const holder = await provisioning.getInstanceBySlug(pool, slug);
+      let reason = null;
+      if (holder) {
+        reason = String(holder.owner_builder_id) === String(req.builder.id) ? 'yours' : 'taken';
+      } else if (address && provisioning.isReservedHostname(address, apex)) {
+        reason = 'reserved';
+      }
+      // Only the verdict travels — never the holder's row. A signed-in stranger
+      // learning WHO owns a handle (or anything about their instance) would be a
+      // disclosure this route has no reason to make.
+      res.json({ slug, available: reason === null, reason, address: address || null });
+    } catch (err) {
+      console.error('[provisioning] GET /provisioning/slug-available', err);
+      res.fail('check_failed', { status: 500, message: 'internal error' });
+    }
+  });
+
   // GET /provisioning/instances — the caller's own instances + each open intent.
   // rank: any authenticated builder (own resource read).
   router.get('/provisioning/instances', auth.requireBuilder, async (req, res) => {

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.142",
+  "version": "1.19.144",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.142",
+      "version": "1.19.144",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.142",
+  "version": "1.19.144",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/public-landing/assets/cosmos.css

@@ -171,6 +171,18 @@
      navy pack accent falls under 4.5:1 on --bg-deep. Chrome keeps --accent-deep;
      only rules that paint a link inside prose take this. */
   --link-ink:var(--accent-deep);
+  /* CONTROL BOUNDARIES ONLY (task 1002824) — the edge that tells you a text
+     field IS a field. --line is a CARD hairline and measures 1.16:1 light /
+     1.09:1 dark, so a resting input drawn with it was invisible until focus
+     (its fill is 1.02:1 on the card too, so the border is the ONLY boundary
+     there is); WCAG 1.4.11 asks 3:1. --line itself must not move — it also
+     draws .review, .humanSteps>li, .kv, .ghlist, the unselected .tpill and the
+     .choice cards, and darkening it globally would restyle every card in both
+     modes. Ink-derived on purpose, never accent-derived: a boundary that
+     changed hue with a re-theme would read as a state. 55% clears 3:1 with
+     headroom in the binding (light) mode — 3.75:1 on --card, 3.82:1 on the
+     input's own --bg-card fill; dark lands at 5.41/5.35. */
+  --ctl-line:color-mix(in srgb, var(--ink) 55%, var(--bg-card));
   --neutral-soft:color-mix(in srgb, var(--ink) 8%, var(--bg-card));
   /* ink-derived so the shadow is a WARM brown on the marigold ground instead of
      the cold navy it used to cast. The dark blocks override it with a plain black
@@ -273,7 +285,16 @@ h1{font-family:var(--font-display);font-weight:700;font-size:clamp(24px,3.4vw,32
 /* ── project cards ── */
 .projects{list-style:none;display:flex;flex-direction:column;gap:18px;}
 .proj{border:2px solid var(--line);border-radius:18px;padding:18px 20px;background:var(--bg-card);display:flex;gap:16px;align-items:flex-start;}
-.proj.gone{opacity:0.78;}
+/* torn down = muted TOKENS, not a subtree dim. opacity multiplies AFTER every
+   token resolves, so .78 dimmed the WHOLE card — meta to 3.72:1 light / 4.16:1
+   dark, address to 4.35:1 light, and the chips and buttons with them (task
+   1002823, the .humanSteps>li.slocked pattern from 1002751). Only the name needs
+   an override: .projMeta is already --ink-faint and measures once the multiply
+   is gone. The chip, the "Torn down" line and the actions keep full strength —
+   a dead project's last known state and its Bring-it-back button are what the
+   card is there for — and the ghosted .orb stays the graphic cue. */
+.proj.gone{border-color:color-mix(in srgb,var(--line) 55%,var(--bg-card));}
+.proj.gone .projName{color:var(--ink-soft);}
 /* click-to-manage landing glow: the sky's owned orb hands focus to this card */
 .proj.anchored{border-color:var(--accent);box-shadow:0 0 0 3px color-mix(in srgb,var(--accent) 30%,transparent);}
 .projBody{flex:1;min-width:0;}
@@ -287,7 +308,7 @@ h1{font-family:var(--font-display);font-weight:700;font-size:clamp(24px,3.4vw,32
 .addr .none{color:var(--ink-faint);font-style:italic;}
 .addr code{font-family:var(--font-mono);font-size:13px;background:var(--bg-deep);border-radius:6px;padding:1px 7px;color:var(--accent-deep);}
 .attach{display:flex;gap:10px;margin-top:10px;flex-wrap:wrap;}
-.attach input[type=text]{flex:1;min-width:220px;font-family:var(--font-body);font-size:15px;font-weight:600;color:var(--ink);background:var(--bg-card);border:2px solid var(--line);border-radius:12px;padding:9px 14px;outline:none;transition:border-color .15s ease, box-shadow .15s ease;}
+.attach input[type=text]{flex:1;min-width:220px;font-family:var(--font-body);font-size:15px;font-weight:600;color:var(--ink);background:var(--bg-card);border:2px solid var(--ctl-line);border-radius:12px;padding:9px 14px;outline:none;transition:border-color .15s ease, box-shadow .15s ease;}
 .attach input[type=text]::placeholder{color:var(--ink-faint);font-weight:500;}
 .attach input[type=text]:focus{border-color:var(--accent);box-shadow:0 0 0 4px color-mix(in srgb,var(--accent) 13%,transparent);}
 .projMsg{font-size:13.5px;font-weight:600;margin-top:10px;min-height:18px;color:var(--ink-soft);line-height:1.5;}
@@ -651,7 +672,7 @@ p.sec-p{font-size:var(--fs-lede);font-weight:500;color:var(--ink-soft);line-heig
    the chip outcomes; it never relabels them — "Live" holds both `live` and
    `live?` because neither is known-down, and each card still says which. ── */
 .mineBar{display:flex;align-items:center;gap:12px;flex-wrap:wrap;margin-bottom:20px;}
-.mineBar .search{background:var(--bg-card);border-color:var(--line);}
+.mineBar .search{background:var(--bg-card);border-color:var(--ctl-line);}
 .mineBar .search input{color:var(--ink);}
 .mineBar .search input::placeholder{color:var(--ink-faint);}
 .mineBar .search svg{stroke:var(--ink-faint);}
@@ -662,7 +683,14 @@ p.sec-p{font-size:var(--fs-lede);font-weight:500;color:var(--ink-soft);line-heig
   border:2px solid var(--line);border-radius:999px;padding:7px 14px;white-space:nowrap;}
 .filters button:hover{border-color:var(--accent);color:var(--accent-deep);}
 .filters button[aria-pressed="true"]{background:var(--accent);border-color:var(--accent);color:#fff;}
-.filters .n{font-family:var(--font-mono);font-weight:500;font-size:11.5px;opacity:.75;}
+/* muted by TOKEN, not opacity — .75 multiplied after the ink resolved and took
+   the count to 4.05:1 on a resting pill and 3.23:1 on the pressed one (task
+   1002823). The pressed pill is excluded on purpose: its ground is the saturated
+   --accent fill, where no ink token clears 4.5:1 (--ink is the best at 3.70
+   light / 4.05 dark) — only the button's own #fff does, at 4.61, so the count
+   inherits it there. Size, weight and the mono face already say "secondary". */
+.filters .n{font-family:var(--font-mono);font-weight:500;font-size:11.5px;}
+.filters button:not([aria-pressed="true"]) .n{color:var(--ink-faint);}
 .mineEmpty{font-size:14.5px;font-weight:600;color:var(--ink-soft);padding:10px 0 22px;}
 
 /* ── the create rail ── */