@bongos/core 1.19.206 → 1.19.207

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.206",
-  "core_contract": "1.19.206",
-  "source_commit": "6ef49e744b96d37db9a338979fb85bb56fb6aa6f",
+  "core_version": "1.19.207",
+  "core_contract": "1.19.207",
+  "source_commit": "f67179175e23c7d9144c3ede28fd365783eed34f",
   "source_ref": "HEAD",
-  "built_at": "2026-08-17T20:15:14.217Z",
+  "built_at": "2026-08-17T20:29:20.492Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 310,
     "agent_docs_stubbed": 21,
-    "functional_verbatim": 1296,
+    "functional_verbatim": 1298,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 1627,
-  "tree_sha256": "f7017bc51e10af4dd65ab8df53ce22c7a0e611c7fb948ee6598ce8c4f7831a6a",
+  "file_count": 1629,
+  "tree_sha256": "fb6abbc6818ae6e399e4154a08816d3aeeaf4d9cd65ab89ff1bb3ce3f33428b5",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -347,12 +347,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "4801db32c6f4ba6220bce8e664be063f8d8483bc22a57df08205b0fc36788b8b"
+      "sha256": "2755203dec4a1450c5950c39a767bc093d1d1227f952193001cdfa94205e995f"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "c3ff3f8c529ac99fe6f968bd3ec110bb6a03c5788caf4dbbab5f59147af28b4c"
+      "sha256": "7b4e5ecf6c6d12a3c9e603a0f5b4bd28ba8cd991399ed8941181b6aeae53772d"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -362,17 +362,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "9de16e178984c7c9ac9c20de3de8ca074bb904423b20a8459a93ce838c1507ea"
+      "sha256": "a92355ef21073634500f6806f1e495c955a0b67e889cf07264ed8d1169b119be"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "38ef88079d260b67161e680ea77fa6ddecb3cc74a1452796cbe28c0e3601c052"
+      "sha256": "8fe97a3daefdceb9bf40a15a19dffb81fb6387c0acbe20041e58e63b24e80dd1"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "d5f8ca20a0826b3258c909d870da54ebd4c3e757c8c35a306c1fa7a72b8292c4"
+      "sha256": "adb2a36a9598c543adbf7c8011f36585f7c394bac7f4961718359ee7a29cb1dd"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -1367,12 +1367,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "32c6c5fe14cf8684d353f0c73cde4b09d84ba61eabcb13e75c11bd5b7f9be2b7"
+      "sha256": "52554cf7c8e5355c59594c872f30975581eb6c1b9a5bcb63efa1a1a19f2d3877"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "c11ec9dcb0726382e15bb7fc9e74086037ed158256ef16b5efcc81fe2db2d078"
+      "sha256": "825af2c499836301a34cff79192e41556cc863fe9a5378d9e5134c862769c2fa"
     },
     {
       "path": "docs/architecture.md",
@@ -2682,7 +2682,7 @@
     {
       "path": "modules/dev-box/app/src/vendor/bongos-client.cjs",
       "mode": "0000644",
-      "sha256": "9de16e178984c7c9ac9c20de3de8ca074bb904423b20a8459a93ce838c1507ea"
+      "sha256": "a92355ef21073634500f6806f1e495c955a0b67e889cf07264ed8d1169b119be"
     },
     {
       "path": "modules/dev-box/app/test/unit.mjs",
@@ -3949,6 +3949,11 @@
       "mode": "0000644",
       "sha256": "8dc04a18ad77563a2bd73029bf13cab03fb5dadd1b62850fddbde475257e6a76"
     },
+    {
+      "path": "modules/provisioning/migrations/provisioning_009_project_settings.sql",
+      "mode": "0000644",
+      "sha256": "de17cfb74f8684044abfb03e56698f91fa5aa813608f3a19d2ddf81d113e897e"
+    },
     {
       "path": "modules/provisioning/module.json",
       "mode": "0000644",
@@ -3967,7 +3972,7 @@
     {
       "path": "modules/provisioning/provisioning.js",
       "mode": "0000644",
-      "sha256": "e43977d0c5458de4fde91e6ccb784b112187545fdf03ceed2c352b605686a57e"
+      "sha256": "b9d4ee116eb4b213b084408868f727a4587876faa5fae78f4d2f64cb2fe12231"
     },
     {
       "path": "modules/provisioning/rate-limit.js",
@@ -3977,7 +3982,7 @@
     {
       "path": "modules/provisioning/routes/provisioning.js",
       "mode": "0000644",
-      "sha256": "f7cf016e10587302437f5d8ab7b01d8b1be6694e05b9e8c47a6ccb2cdfda8ac4"
+      "sha256": "78c89017e17dfba57ade2330fce293e6422aab316e9311f8215ff3eb9fdc3fe5"
     },
     {
       "path": "modules/provisioning/tests/liveness.mjs",
@@ -3987,7 +3992,7 @@
     {
       "path": "modules/provisioning/tests/provisioning.mjs",
       "mode": "0000644",
-      "sha256": "4c7bb37582485445e947e233c9fbb9c20c9ab55da9dd159c8062fffa4472a5d7"
+      "sha256": "3db404b6ad50e01de0b1d73131cefc01ab8fe939eee18157ba6aa8f28a05fb7f"
     },
     {
       "path": "modules/provisioning/ui/.gitkeep",
@@ -4277,12 +4282,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "8cece7080d6a67c93467f86ee1c02cff85f8b2dbd5e8219519e9bc9df034f895"
+      "sha256": "fc64c06226801735546c101af64db40d30492a4ce855303e538bac1111a18930"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "05a1768a85ccd224b9caa4e388b83f5a1d933b8b46761ebe7ce6f5a06f3c6d6a"
+      "sha256": "d3457496b5c76bab949eb1693518d88745db75eb7bd3afb4299d68e545cdb0bd"
     },
     {
       "path": "public-docs/index.html",
@@ -5892,7 +5897,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "84441072e12b08bf8c5dde09972dc91dd530b586f30f287016d830589476fb5d"
+      "sha256": "167ead50611054c2a0d46ebb14510c993e7c05e9c86428cad2d15d78aae0bad4"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -7539,6 +7544,11 @@
       "mode": "0000644",
       "sha256": "7749df454ac3cca7c7e5ea1acc94ead15d1c9f87b38fe2028a1c93c8adf31bcf"
     },
+    {
+      "path": "tests/provisioning_settings.mjs",
+      "mode": "0000644",
+      "sha256": "bb800d2e15045efbac4fadbc62996054d33e163eb86e6a5e09087d409cc7fbfa"
+    },
     {
       "path": "tests/provisioning_slug_available.mjs",
       "mode": "0000644",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 276 operations across 46 resource groups
+- 278 operations across 46 resource groups
 
 ## Install
 

package/clients/bongos-client/bongos-client.global.js

@@ -543,6 +543,10 @@ function createClient(opts = {}) {
       postProvisioningInstancesIdForceTeardown: (args) => request("POST", "/provisioning/instances/{id}/force-teardown", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/github-app — rank: any-builder — POST /provisioning/instances/:id/github-app
       postProvisioningInstancesIdGithubApp: (args) => request("POST", "/provisioning/instances/{id}/github-app", { hasBody: true }, args),
+      // GET /provisioning/instances/{id}/settings — rank: any-builder — GET /provisioning/instances/:id/settings
+      getProvisioningInstancesIdSettings: (args) => request("GET", "/provisioning/instances/{id}/settings", { hasBody: false }, args),
+      // PATCH /provisioning/instances/{id}/settings — rank: any-builder — PATCH /provisioning/instances/:id/settings
+      patchProvisioningInstancesIdSettings: (args) => request("PATCH", "/provisioning/instances/{id}/settings", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/teardown — rank: any-builder — POST /provisioning/instances/:id/teardown
       postProvisioningInstancesIdTeardown: (args) => request("POST", "/provisioning/instances/{id}/teardown", { hasBody: true }, args),
       // GET /provisioning/onboard-plan — rank: public — GET /provisioning/onboard-plan

package/clients/bongos-client/index.cjs

@@ -542,6 +542,10 @@ function createClient(opts = {}) {
       postProvisioningInstancesIdForceTeardown: (args) => request("POST", "/provisioning/instances/{id}/force-teardown", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/github-app — rank: any-builder — POST /provisioning/instances/:id/github-app
       postProvisioningInstancesIdGithubApp: (args) => request("POST", "/provisioning/instances/{id}/github-app", { hasBody: true }, args),
+      // GET /provisioning/instances/{id}/settings — rank: any-builder — GET /provisioning/instances/:id/settings
+      getProvisioningInstancesIdSettings: (args) => request("GET", "/provisioning/instances/{id}/settings", { hasBody: false }, args),
+      // PATCH /provisioning/instances/{id}/settings — rank: any-builder — PATCH /provisioning/instances/:id/settings
+      patchProvisioningInstancesIdSettings: (args) => request("PATCH", "/provisioning/instances/{id}/settings", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/teardown — rank: any-builder — POST /provisioning/instances/:id/teardown
       postProvisioningInstancesIdTeardown: (args) => request("POST", "/provisioning/instances/{id}/teardown", { hasBody: true }, args),
       // GET /provisioning/onboard-plan — rank: public — GET /provisioning/onboard-plan

package/clients/bongos-client/index.d.ts

@@ -75,6 +75,7 @@ export interface GetProvisioningFleetResponse { instances: unknown }
 export interface GetProvisioningGithubAppStatusResponse { ok: boolean; status: unknown; ready: unknown; terminal: unknown; domain: unknown; instance_status: unknown; app_slug: unknown }
 export interface GetProvisioningHealthResponse { module: unknown; ok: boolean; coreVersion: unknown }
 export interface GetProvisioningInstancesIdResponse { instance: unknown; open_intent: unknown }
+export interface GetProvisioningInstancesIdSettingsResponse { ok: boolean; settings: unknown; options: unknown }
 export interface GetProvisioningInstancesResponse { instances: unknown }
 export interface GetProvisioningOnboardPlanResponse { mode: unknown; steps: unknown }
 export interface GetProvisioningSlugAvailableResponse { slug: unknown; available: unknown; reason: unknown; address: unknown }
@@ -140,6 +141,8 @@ export interface PatchMeSkillPrefsResponse { prefs: unknown; effective: unknown;
 export interface PatchMeSoundPrefsResponse { prefs: unknown; effective: unknown; effective_map: unknown; volume: unknown; defaults: unknown; known_sounds: unknown }
 export interface PatchProjectsIdFeaturedRequest { featured: boolean }
 export interface PatchProjectsIdFeaturedResponse { project: unknown }
+export interface PatchProvisioningInstancesIdSettingsRequest { platform_visibility?: string; joinability?: string }
+export interface PatchProvisioningInstancesIdSettingsResponse { ok: boolean; settings: unknown }
 export interface PatchTasksIdRequest { kind?: string; discipline?: string; requires_rank?: string; module_key?: string; goal_id?: number; parent_task_id?: StringifiableId; parallel_safe?: unknown; newcomer_friendly?: boolean; xenos_claimable?: boolean; security_sensitive?: boolean; automation_tag?: string; needs_migration?: boolean; description?: string; status?: unknown }
 export interface PostAccessRequestsRequest { github_login: string; display_name?: string; note?: string }
 export interface PostAccessRequestsResponse { ok: boolean; request?: unknown; already_pending?: boolean }
@@ -787,6 +790,10 @@ export interface BongosClient {
     postProvisioningInstancesIdForceTeardown(args?: RequestArgs): Promise<PostProvisioningInstancesIdForceTeardownResponse>;
     /** POST /provisioning/instances/{id}/github-app — rank: any-builder */
     postProvisioningInstancesIdGithubApp(args?: RequestArgs & { body?: PostProvisioningInstancesIdGithubAppRequest }): Promise<PostProvisioningInstancesIdGithubAppResponse>;
+    /** GET /provisioning/instances/{id}/settings — rank: any-builder */
+    getProvisioningInstancesIdSettings(args?: RequestArgs): Promise<GetProvisioningInstancesIdSettingsResponse>;
+    /** PATCH /provisioning/instances/{id}/settings — rank: any-builder */
+    patchProvisioningInstancesIdSettings(args?: RequestArgs & { body?: PatchProvisioningInstancesIdSettingsRequest }): Promise<PatchProvisioningInstancesIdSettingsResponse>;
     /** POST /provisioning/instances/{id}/teardown — rank: any-builder */
     postProvisioningInstancesIdTeardown(args?: RequestArgs): Promise<PostProvisioningInstancesIdTeardownResponse>;
     /** GET /provisioning/onboard-plan — rank: public */

package/clients/bongos-client/index.mjs

@@ -539,6 +539,10 @@ export function createClient(opts = {}) {
       postProvisioningInstancesIdForceTeardown: (args) => request("POST", "/provisioning/instances/{id}/force-teardown", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/github-app — rank: any-builder — POST /provisioning/instances/:id/github-app
       postProvisioningInstancesIdGithubApp: (args) => request("POST", "/provisioning/instances/{id}/github-app", { hasBody: true }, args),
+      // GET /provisioning/instances/{id}/settings — rank: any-builder — GET /provisioning/instances/:id/settings
+      getProvisioningInstancesIdSettings: (args) => request("GET", "/provisioning/instances/{id}/settings", { hasBody: false }, args),
+      // PATCH /provisioning/instances/{id}/settings — rank: any-builder — PATCH /provisioning/instances/:id/settings
+      patchProvisioningInstancesIdSettings: (args) => request("PATCH", "/provisioning/instances/{id}/settings", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/teardown — rank: any-builder — POST /provisioning/instances/:id/teardown
       postProvisioningInstancesIdTeardown: (args) => request("POST", "/provisioning/instances/{id}/teardown", { hasBody: true }, args),
       // GET /provisioning/onboard-plan — rank: public — GET /provisioning/onboard-plan

package/docs/api/openapi.json

@@ -8951,6 +8951,119 @@
         ]
       }
     },
+    "/provisioning/instances/{id}/settings": {
+      "get": {
+        "operationId": "get_provisioning_instances_id_settings",
+        "tags": [
+          "provisioning"
+        ],
+        "summary": "GET /provisioning/instances/:id/settings",
+        "description": "GET /provisioning/instances/:id/settings — read a project's effective settings + the allowed values (so a form can render its choices). rank: any authenticated builder (own resource; archon may read any).\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/provisioning/routes/provisioning.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetProvisioningInstancesIdSettingsResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      },
+      "patch": {
+        "operationId": "patch_provisioning_instances_id_settings",
+        "tags": [
+          "provisioning"
+        ],
+        "summary": "PATCH /provisioning/instances/:id/settings",
+        "description": "PATCH /provisioning/instances/:id/settings — change a project's settings. Body: any subset of the known keys; strict validation refuses unknown keys and off-vocabulary values. rank: any authenticated builder (own resource; archon may change any — the override is audited via the event's actor).\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/provisioning/routes/provisioning.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "requestBody": {
+          "required": false,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PatchProvisioningInstancesIdSettingsRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PatchProvisioningInstancesIdSettingsResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/provisioning/instances/{id}/teardown": {
       "post": {
         "operationId": "post_provisioning_instances_id_teardown",
@@ -13441,6 +13554,21 @@
           "open_intent"
         ]
       },
+      "GetProvisioningInstancesIdSettingsResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "settings": {},
+          "options": {}
+        },
+        "required": [
+          "ok",
+          "settings",
+          "options"
+        ]
+      },
       "GetProvisioningInstancesResponse": {
         "type": "object",
         "properties": {
@@ -14253,6 +14381,31 @@
           "project"
         ]
       },
+      "PatchProvisioningInstancesIdSettingsRequest": {
+        "type": "object",
+        "properties": {
+          "platform_visibility": {
+            "type": "string"
+          },
+          "joinability": {
+            "type": "string"
+          }
+        },
+        "additionalProperties": false
+      },
+      "PatchProvisioningInstancesIdSettingsResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "settings": {}
+        },
+        "required": [
+          "ok",
+          "settings"
+        ]
+      },
       "PatchTasksIdRequest": {
         "type": "object",
         "properties": {
@@ -17434,9 +17587,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 276,
-  "x-schema-count": 311,
+  "x-endpoint-count": 278,
+  "x-schema-count": 314,
   "x-undocumented-bodies": 8,
-  "x-response-schemas": 210,
+  "x-response-schemas": 212,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 276 endpoints across 46 route files.
+> **Generated from the live route files** — the route file is authoritative. 278 endpoints across 46 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -369,7 +369,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | GET | `/api/bongos/projects/featured` | `public` | — | a curated public showcase; no auth by design. |
 | POST | `/api/bongos/projects/invite` | `metic+archon` | `client_id`, `github_login` | invite a builder into a project (ADR 0141 §5, task #1002115). |
 
-## `provisioning` (15)
+## `provisioning` (17)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -384,6 +384,8 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | POST | `/api/bongos/provisioning/instances/:id/domain` | `any-builder` | `domain` | POST /provisioning/instances/:id/domain — give the caller's OWN instance its address (task 1002692, gap 5: no path existed to add a domai… |
 | POST | `/api/bongos/provisioning/instances/:id/force-teardown` | `metic+archon` | — | POST /provisioning/instances/:id/force-teardown — Archon tears down ANY instance. |
 | POST | `/api/bongos/provisioning/instances/:id/github-app` | `any-builder` | `account` | POST /provisioning/instances/:id/github-app — mint a GitHub-App-Manifest onboarding link for the caller's OWN instance (task 2080, ADR 01… |
+| GET | `/api/bongos/provisioning/instances/:id/settings` | `any-builder` | — | GET /provisioning/instances/:id/settings — read a project's effective settings + the allowed values (so a form can render its choices). |
+| PATCH | `/api/bongos/provisioning/instances/:id/settings` | `any-builder` | `platform_visibility`, `joinability` | PATCH /provisioning/instances/:id/settings — change a project's settings. |
 | POST | `/api/bongos/provisioning/instances/:id/teardown` | `any-builder` | — | POST /provisioning/instances/:id/teardown — request teardown of the caller's OWN instance. |
 | GET | `/api/bongos/provisioning/onboard-plan` | `public` | — | GET /provisioning/onboard-plan?mode=greenfield\|adopt&domain=<host> — the CANONICAL onboarding step sequence (task 2085; goal 35 / criteri… |
 | GET | `/api/bongos/provisioning/slug-available` | `any-builder` | — | GET /provisioning/slug-available?slug=<handle> — is this handle free to create under? rank: any authenticated builder (same gate as the c… |

package/modules/dev-box/app/src/vendor/bongos-client.cjs

@@ -542,6 +542,10 @@ function createClient(opts = {}) {
       postProvisioningInstancesIdForceTeardown: (args) => request("POST", "/provisioning/instances/{id}/force-teardown", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/github-app — rank: any-builder — POST /provisioning/instances/:id/github-app
       postProvisioningInstancesIdGithubApp: (args) => request("POST", "/provisioning/instances/{id}/github-app", { hasBody: true }, args),
+      // GET /provisioning/instances/{id}/settings — rank: any-builder — GET /provisioning/instances/:id/settings
+      getProvisioningInstancesIdSettings: (args) => request("GET", "/provisioning/instances/{id}/settings", { hasBody: false }, args),
+      // PATCH /provisioning/instances/{id}/settings — rank: any-builder — PATCH /provisioning/instances/:id/settings
+      patchProvisioningInstancesIdSettings: (args) => request("PATCH", "/provisioning/instances/{id}/settings", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/teardown — rank: any-builder — POST /provisioning/instances/:id/teardown
       postProvisioningInstancesIdTeardown: (args) => request("POST", "/provisioning/instances/{id}/teardown", { hasBody: true }, args),
       // GET /provisioning/onboard-plan — rank: public — GET /provisioning/onboard-plan

package/modules/provisioning/migrations/provisioning_009_project_settings.sql

@@ -0,0 +1,19 @@
+-- provisioning_009_project_settings.sql — per-project settings storage (task
+-- 1003040, goal 1000058: the project-management page wave's foundation).
+--
+-- WHY jsonb, not columns: the manage-page wave adds settings one task at a time
+-- (platform visibility, joinability, repo visibility, …) and a new key must not
+-- cost a migration each time. The column is a dumb store; the known keys + their
+-- vocabularies are enforced at the API layer (provisioning.SETTINGS_VOCAB /
+-- the settings routes' validator), and unknown stored values fall back to the
+-- default at read time (effectiveSettings) rather than leaking out.
+--
+-- DEFAULTS = today's behavior: '{}'::jsonb READS as
+-- { platform_visibility: 'public', joinability: 'apply' } — the default lives in
+-- code, applied at read time, so ADD COLUMN backfills every existing row with an
+-- empty object and no instance changes behavior.
+ALTER TABLE provisioning_instances
+  ADD COLUMN IF NOT EXISTS settings jsonb NOT NULL DEFAULT '{}'::jsonb;
+
+INSERT INTO schema_migrations (version) VALUES ('provisioning_009_project_settings')
+ON CONFLICT (version) DO NOTHING;

package/modules/provisioning/provisioning.js

@@ -59,6 +59,17 @@ const PROVISION_ENQUEUE_FROM = new Set(['requested', 'provisioning', 'error', 't
 // itself. Mid-flight or torn-down states refuse truthfully.
 const DOMAIN_ATTACH_FROM = new Set(['requested', 'error', 'active']);
 
+// Per-project settings (task 1003040, goal 1000058): the known keys + their
+// vocabularies, enforced at the API layer — the jsonb `settings` column
+// (migration provisioning_009) is a dumb store with room for future keys.
+// DEFAULT_SETTINGS is TODAY's behavior (public surfaces, apply-to-join),
+// applied at read time so pre-existing rows need no data backfill.
+const SETTINGS_VOCAB = Object.freeze({
+  platform_visibility: ['public', 'gated'],
+  joinability: ['open', 'apply', 'invite_only'],
+});
+const DEFAULT_SETTINGS = Object.freeze({ platform_visibility: 'public', joinability: 'apply' });
+
 // Monthly cost estimate (USD) for a dedicated droplet tier — VISIBILITY only
 // (ADR 0111 §6), never a bill. A small local table so this module needs no
 // sibling-module import; P2 (shared control-plane client extraction) is where a
@@ -210,6 +221,19 @@ function publicInstance(row) {
   };
 }
 
+// The instance's EFFECTIVE settings: the defaults overlaid with the stored,
+// on-vocabulary keys. An off-vocabulary or unknown stored value falls back to
+// its default rather than leaking into the read surface. PURE.
+function effectiveSettings(row) {
+  const stored = row && row.settings && typeof row.settings === 'object' && !Array.isArray(row.settings)
+    ? row.settings : {};
+  const out = { ...DEFAULT_SETTINGS };
+  for (const [key, vocab] of Object.entries(SETTINGS_VOCAB)) {
+    if (vocab.includes(stored[key])) out[key] = stored[key];
+  }
+  return out;
+}
+
 // ---------------------------------------------------------------------------
 // GitHub App Manifest flow — PURE builders (task 2080, ADR 0133).
 // GitHub has no create-an-OAuth-App API, but the App *Manifest* flow lets the owner
@@ -345,6 +369,20 @@ async function getInstanceByDomain(db, domain) {
   return rows[0] || null;
 }
 
+// Merge a VALIDATED settings patch into the instance's settings column (task
+// 1003040). Narrow like updateInstanceDomain: settings + updated_at only — a
+// settings change is a deliberate owner action, so surfacing it in the
+// updated_at-ordered card list is correct (unlike the liveness overlay).
+async function updateInstanceSettings(db, id, patch) {
+  const { rows } = await db.query(
+    `UPDATE provisioning_instances
+        SET settings = settings || $2::jsonb, updated_at = now()
+      WHERE id = $1 RETURNING *`,
+    [id, JSON.stringify(patch)]
+  );
+  return rows[0] || null;
+}
+
 // Record an instance's domain — the ONLY column this touches (task 1002692). Status
 // changes stay setInstanceStatus's job; keeping this narrow means the domain-attach
 // route can never drift an instance's lifecycle as a side effect.
@@ -735,9 +773,10 @@ module.exports = {
   // constants
   INSTANCE_STATES, HOSTING_SHAPES, ONBOARD_MODES, PROJECT_TYPES, INTENT_ACTIONS, TEARDOWN_FROM,
   PROVISION_ENQUEUE_FROM, DOMAIN_ATTACH_FROM, TIER_MONTHLY_USD, CERT_ELIGIBLE_STATES,
+  SETTINGS_VOCAB, DEFAULT_SETTINGS,
   // pure
   isValidSlug, costEstimateUsd, publicInstance, normalizeHostname,
-  defaultDomainForSlug, isReservedHostname,
+  defaultDomainForSlug, isReservedHostname, effectiveSettings,
   // pure — GitHub App Manifest flow (task 2080)
   githubAppName, buildGithubAppManifest, manifestPostUrl,
   // data access
@@ -745,7 +784,7 @@ module.exports = {
   getInstanceById, getInstanceBySlug, getInstanceByDomain, listInstancesForOwner, listAllInstances,
   // data access — verification overlay (task 1002696)
   listActiveInstancesForLiveness, recordLivenessProbe, recordDnsNote, clearErrorNote,
-  createInstance, setInstanceStatus, updateInstanceDomain,
+  createInstance, setInstanceStatus, updateInstanceDomain, updateInstanceSettings,
   enqueueIntent, enqueueTeardown, getOpenIntent, claimNextIntent, resolveIntent,
   recordEvent, instanceStateForSlug, costLedger,
   // data access — GitHub App Manifest attempts (task 2080)

package/modules/provisioning/routes/provisioning.js

@@ -591,6 +591,69 @@ module.exports = function provisioningRoutes() {
     }
   });
 
+  // ── Per-project settings (task 1003040, goal 1000058) ─────────────────────
+  // The foundation the manage-page wave hangs off: effective settings are the
+  // DEFAULTS (today's behavior — public surfaces, apply-to-join) overlaid with
+  // the instance's stored keys. Own-scoped with an Archon override: the owner
+  // manages their own project; an Archon may act on any (fleet support). 404
+  // for everyone else — no existence leak (the GET-by-id precedent).
+  function settingsAccessDenied(inst, builder) {
+    if (!inst) return true;
+    if (builder.rank === 'archon') return false;
+    return String(inst.owner_builder_id) !== String(builder.id);
+  }
+
+  // GET /provisioning/instances/:id/settings — read a project's effective
+  // settings + the allowed values (so a form can render its choices).
+  // rank: any authenticated builder (own resource; archon may read any).
+  router.get('/provisioning/instances/:id/settings', auth.requireBuilder, async (req, res) => {
+    const id = parseId(req, res); // (req, res) — parseId sends 400 bad_id + returns null on failure
+    if (!id) return;
+    try {
+      const inst = await provisioning.getInstanceById(pool, id);
+      if (settingsAccessDenied(inst, req.builder)) return res.fail('instance_not_found', 404);
+      res.json({ ok: true, settings: provisioning.effectiveSettings(inst), options: provisioning.SETTINGS_VOCAB });
+    } catch (err) {
+      console.error('[provisioning] GET /provisioning/instances/:id/settings', err);
+      res.fail('settings_read_failed', { status: 500, message: 'internal error' });
+    }
+  });
+
+  // PATCH /provisioning/instances/:id/settings — change a project's settings.
+  // Body: any subset of the known keys; strict validation refuses unknown keys
+  // and off-vocabulary values. rank: any authenticated builder (own resource;
+  // archon may change any — the override is audited via the event's actor).
+  router.patch('/provisioning/instances/:id/settings', auth.requireBuilder, async (req, res) => {
+    const id = parseId(req, res); // (req, res) — parseId sends 400 bad_id + returns null on failure
+    if (!id) return;
+    if (validateOrRespond(req, res, {
+      platform_visibility: { type: 'string', enum: provisioning.SETTINGS_VOCAB.platform_visibility },
+      joinability: { type: 'string', enum: provisioning.SETTINGS_VOCAB.joinability },
+    })) return;
+    const patch = {};
+    for (const key of Object.keys(provisioning.SETTINGS_VOCAB)) {
+      if ((req.body || {})[key] !== undefined) patch[key] = req.body[key];
+    }
+    if (!Object.keys(patch).length) {
+      return res.fail('bad_settings', { status: 400,
+        message: `The body carries no settings to change — send any of: ${Object.keys(provisioning.SETTINGS_VOCAB).join(', ')}.` });
+    }
+    try {
+      const inst = await provisioning.getInstanceById(pool, id);
+      if (settingsAccessDenied(inst, req.builder)) return res.fail('instance_not_found', 404);
+      const updated = await provisioning.updateInstanceSettings(pool, id, patch);
+      await provisioning.recordEvent(pool, {
+        instanceId: id, ownerBuilderId: inst.owner_builder_id, event: 'settings',
+        detail: `settings changed: ${Object.entries(patch).map(([k, v]) => `${k}=${v}`).join(', ')}`,
+        actor: String(inst.owner_builder_id) === String(req.builder.id) ? 'api:self' : 'api:archon',
+      }).catch(() => {});
+      res.json({ ok: true, settings: provisioning.effectiveSettings(updated) });
+    } catch (err) {
+      console.error('[provisioning] PATCH /provisioning/instances/:id/settings', err);
+      res.fail('settings_update_failed', { status: 500, message: 'internal error' });
+    }
+  });
+
   // POST /provisioning/instances/:id/teardown — request teardown of the caller's
   // OWN instance. rank: any authenticated builder (own resource). Enqueues a
   // 'teardown' intent; the runner executes it (web tier holds no tokens). 404 when

package/modules/provisioning/tests/provisioning.mjs

@@ -260,5 +260,43 @@ await ta('recordDnsNote / clearErrorNote are NARROW single-column updates — no
   assert.doesNotMatch(sql, /status\s*=|updated_at/, 'releasing the latch must not touch the lifecycle');
 });
 
+console.log('\nPer-project settings (task 1003040):');
+
+t('effectiveSettings: defaults for a bare/empty row = today\'s behavior; stored keys overlay; junk falls back', () => {
+  assert.deepEqual(P.effectiveSettings(null), { platform_visibility: 'public', joinability: 'apply' });
+  assert.deepEqual(P.effectiveSettings({}), { platform_visibility: 'public', joinability: 'apply' });
+  assert.deepEqual(P.effectiveSettings({ settings: {} }), { platform_visibility: 'public', joinability: 'apply' });
+  assert.deepEqual(
+    P.effectiveSettings({ settings: { platform_visibility: 'gated' } }),
+    { platform_visibility: 'gated', joinability: 'apply' },
+    'a stored key overlays only itself'
+  );
+  assert.deepEqual(
+    P.effectiveSettings({ settings: { platform_visibility: 'bogus', joinability: 'invite_only', future_key: 'x' } }),
+    { platform_visibility: 'public', joinability: 'invite_only' },
+    'off-vocabulary values fall back to the default; unknown keys never leak out'
+  );
+  assert.deepEqual(P.effectiveSettings({ settings: ['not', 'an', 'object'] }),
+    { platform_visibility: 'public', joinability: 'apply' }, 'a non-object settings value reads as defaults');
+});
+
+t('SETTINGS_VOCAB / DEFAULT_SETTINGS: every default is on its own vocabulary (lockstep guard)', () => {
+  for (const [key, dflt] of Object.entries(P.DEFAULT_SETTINGS)) {
+    assert.ok(P.SETTINGS_VOCAB[key], `default key '${key}' has a vocabulary`);
+    assert.ok(P.SETTINGS_VOCAB[key].includes(dflt), `default '${dflt}' is a legal '${key}' value`);
+  }
+  assert.deepEqual(Object.keys(P.SETTINGS_VOCAB).sort(), Object.keys(P.DEFAULT_SETTINGS).sort(),
+    'every known key has a default (an undefaulted key would read as undefined)');
+});
+
+await ta('updateInstanceSettings: jsonb MERGE (||) + updated_at, parameterized, returns the row', async () => {
+  let sql = '', params = null;
+  const db = { query: async (q, p) => { sql = q; params = p; return { rows: [{ id: 18, settings: { joinability: 'open' } }] }; } };
+  const row = await P.updateInstanceSettings(db, 18, { joinability: 'open' });
+  assert.equal(row.settings.joinability, 'open');
+  assert.match(sql, /SET settings = settings \|\| \$2::jsonb, updated_at = now\(\)/, 'merges — never clobbers other keys');
+  assert.deepEqual(params, [18, JSON.stringify({ joinability: 'open' })]);
+});
+
 console.log(`\nprovisioning module: ${passed} passed, ${failed} failed`);
 process.exit(failed ? 1 : 0);

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.206",
+  "version": "1.19.207",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.206",
+      "version": "1.19.207",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.206",
+  "version": "1.19.207",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/src/module-api.js

@@ -839,8 +839,10 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 //         landed since 1.19.204 with no explicit bump. run 32061149280. (task 1002620)
 //   1.19.206 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
 //         landed since 1.19.205 with no explicit bump. run 32064728346. (task 1002620)
+//   1.19.207 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.206 with no explicit bump. run 32065995444. (task 1002620)
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.206'; // CI auto-patch carrier (ADR 0161); see changelog above
+const CORE_VERSION = '1.19.207'; // CI auto-patch carrier (ADR 0161); see changelog above
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/provisioning_settings.mjs

@@ -0,0 +1,200 @@
+// tests/provisioning_settings.mjs
+//
+// Per-project settings foundation (task 1003040, goal 1000058) — the surface the
+// manage-page wave hangs off:
+//   • GET  /provisioning/instances/:id/settings  — effective settings + options
+//   • PATCH /provisioning/instances/:id/settings — validated, own-scoped change
+//
+// The load-bearing assertions:
+//   • the OWN-SCOPE WALL: another builder's GET/PATCH answers 404 and the write
+//     path is NEVER reached (no existence leak, no cross-owner mutation)
+//   • the Archon override works and is audited as api:archon
+//   • strict validation: off-vocabulary values and unknown keys are 400s
+//   • defaults = today's behavior (public / apply) for rows that predate the column
+//
+// DB-free: data-access fns are stubbed on the cached module object (the
+// provisioning_domain_attach.mjs pattern). No network beyond localhost.
+//
+// Run:  node tests/provisioning_settings.mjs
+
+import { strict as assert } from 'node:assert';
+import { createRequire } from 'node:module';
+import http from 'node:http';
+
+const require = createRequire(import.meta.url);
+const provisioning = require('../modules/provisioning/provisioning.js');
+
+let passed = 0, failed = 0;
+async function ta(name, fn) {
+  try { await fn(); passed++; console.log(`  PASS  ${name}`); }
+  catch (e) { failed++; console.log(`  FAIL  ${name}\n        ${e.message}`); }
+}
+
+// ── stubbed data access on the cached module object ──────────────────────────
+let instance = null;            // the row getInstanceById answers with
+let updateCalls = [];           // recorded updateInstanceSettings calls
+let events = [];                // recorded provisioning_events
+provisioning.getInstanceById = async (_db, id) => (instance ? { ...instance, id } : null);
+provisioning.updateInstanceSettings = async (_db, id, patch) => {
+  updateCalls.push({ id, patch });
+  instance = { ...instance, settings: { ...(instance.settings || {}), ...patch } };
+  return { ...instance, id };
+};
+provisioning.recordEvent = async (_db, e) => { events.push(e); };
+provisioning.getOpenIntent = async () => null;
+
+const api = require('../src/module-api.js');
+let builder = { id: 7, github_login: 'owner', rank: 'thetes' };
+api.requireBuilder = (req, _res, next) => { req.builder = builder; next(); };
+api.requirePermission = () => (_req, _res, next) => next();
+api.branding = () => ({
+  domains: { publicOrigin: 'https://cb.test' },
+  identity: { productName: 'Cloud Bongos' },
+});
+
+const express = require('express');
+const provisioningRoutes = require('../modules/provisioning/routes/provisioning.js');
+const app = express();
+app.use(express.json());
+app.use((_req, res, next) => {
+  res.fail = (code, opts, details) => {
+    const status = typeof opts === 'number' ? opts : (opts && opts.status) || 400;
+    res.status(status).json({ error: { code, ...(typeof opts === 'object' ? opts : {}), ...(details || {}) } });
+  };
+  next();
+});
+app.use('/api/bongos', provisioningRoutes());
+
+const server = app.listen(0);
+await new Promise((r) => server.once('listening', r));
+const base = `http://127.0.0.1:${server.address().port}/api/bongos`;
+
+function call(method, path, body) {
+  return new Promise((resolve, reject) => {
+    const payload = body === undefined ? null : JSON.stringify(body);
+    const req = http.request(`${base}${path}`, {
+      method,
+      headers: payload
+        ? { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) }
+        : {},
+    }, (res) => {
+      let d = '';
+      res.on('data', (c) => { d += c; });
+      res.on('end', () => { let j = null; try { j = JSON.parse(d); } catch { /* non-JSON */ } resolve({ status: res.statusCode, body: j, raw: d }); });
+    });
+    req.on('error', reject);
+    req.end(payload || undefined);
+  });
+}
+const get = (p) => call('GET', p);
+const patch = (p, b) => call('PATCH', p, b);
+
+function reset({ inst, as } = {}) {
+  instance = inst !== undefined ? inst
+    : { owner_builder_id: 7, slug: 'spike', status: 'active', domain: 'spike.cloudbongos.com', settings: {} };
+  builder = as || { id: 7, github_login: 'owner', rank: 'thetes' };
+  updateCalls = [];
+  events = [];
+}
+
+console.log('GET /provisioning/instances/:id/settings:');
+
+await ta('owner reads DEFAULTS (public / apply) on a row with empty settings — today\'s behavior', async () => {
+  reset();
+  const r = await get('/provisioning/instances/18/settings');
+  assert.equal(r.status, 200, r.raw);
+  assert.deepEqual(r.body.settings, { platform_visibility: 'public', joinability: 'apply' });
+  assert.deepEqual(r.body.options, { platform_visibility: ['public', 'gated'], joinability: ['open', 'apply', 'invite_only'] });
+});
+
+await ta('stored keys overlay the defaults', async () => {
+  reset({ inst: { owner_builder_id: 7, slug: 'spike', status: 'active', settings: { joinability: 'invite_only' } } });
+  const r = await get('/provisioning/instances/18/settings');
+  assert.equal(r.status, 200, r.raw);
+  assert.deepEqual(r.body.settings, { platform_visibility: 'public', joinability: 'invite_only' });
+});
+
+await ta('ANOTHER builder\'s GET → 404 (no existence leak)', async () => {
+  reset({ as: { id: 8, github_login: 'stranger', rank: 'thetes' } });
+  const r = await get('/provisioning/instances/18/settings');
+  assert.equal(r.status, 404, r.raw);
+  assert.equal(r.body.error.code, 'instance_not_found');
+});
+
+await ta('an Archon may read ANY instance (the override)', async () => {
+  reset({ as: { id: 999, github_login: 'archon', rank: 'archon' } });
+  const r = await get('/provisioning/instances/18/settings');
+  assert.equal(r.status, 200, r.raw);
+});
+
+await ta('unknown instance id → 404 for everyone', async () => {
+  reset({ inst: null });
+  const r = await get('/provisioning/instances/999/settings');
+  assert.equal(r.status, 404, r.raw);
+});
+
+console.log('\nPATCH /provisioning/instances/:id/settings:');
+
+await ta('owner changes one key — merged, returned effective, audited api:self', async () => {
+  reset();
+  const r = await patch('/provisioning/instances/18/settings', { joinability: 'open' });
+  assert.equal(r.status, 200, r.raw);
+  assert.deepEqual(r.body.settings, { platform_visibility: 'public', joinability: 'open' });
+  assert.deepEqual(updateCalls, [{ id: 18, patch: { joinability: 'open' } }], 'exactly the sent key, nothing else');
+  assert.equal(events.length, 1);
+  assert.equal(events[0].event, 'settings');
+  assert.equal(events[0].actor, 'api:self');
+  assert.match(events[0].detail, /joinability=open/);
+});
+
+await ta('owner changes both keys in one call', async () => {
+  reset();
+  const r = await patch('/provisioning/instances/18/settings', { platform_visibility: 'gated', joinability: 'invite_only' });
+  assert.equal(r.status, 200, r.raw);
+  assert.deepEqual(r.body.settings, { platform_visibility: 'gated', joinability: 'invite_only' });
+});
+
+await ta('the OWN-SCOPE WALL: another builder\'s PATCH → 404 and the write path is never reached', async () => {
+  reset({ as: { id: 8, github_login: 'stranger', rank: 'thetes' } });
+  const r = await patch('/provisioning/instances/18/settings', { joinability: 'open' });
+  assert.equal(r.status, 404, r.raw);
+  assert.equal(r.body.error.code, 'instance_not_found');
+  assert.equal(updateCalls.length, 0, 'no cross-owner mutation');
+  assert.equal(events.length, 0, 'no event for a refused write');
+});
+
+await ta('an Archon may change ANY instance — audited api:archon', async () => {
+  reset({ as: { id: 999, github_login: 'archon', rank: 'archon' } });
+  const r = await patch('/provisioning/instances/18/settings', { platform_visibility: 'gated' });
+  assert.equal(r.status, 200, r.raw);
+  assert.equal(events[0].actor, 'api:archon', 'the override is distinguishable in the audit ledger');
+  assert.equal(events[0].ownerBuilderId, 7, 'the event still belongs to the instance owner');
+});
+
+await ta('an off-vocabulary value → 400 validation_failed (nothing written)', async () => {
+  reset();
+  const r = await patch('/provisioning/instances/18/settings', { joinability: 'closed' });
+  assert.equal(r.status, 400, r.raw);
+  assert.equal(r.body.error.code, 'validation_failed');
+  assert.equal(updateCalls.length, 0);
+});
+
+await ta('an unknown key → 400 (strict: a typo fails loudly, never silently dropped)', async () => {
+  reset();
+  const r = await patch('/provisioning/instances/18/settings', { joinabilty: 'open' });
+  assert.equal(r.status, 400, r.raw);
+  assert.equal(r.body.error.code, 'validation_failed');
+  assert.equal(updateCalls.length, 0);
+});
+
+await ta('an empty body → 400 bad_settings with a plain sentence naming the keys', async () => {
+  reset();
+  const r = await patch('/provisioning/instances/18/settings', {});
+  assert.equal(r.status, 400, r.raw);
+  assert.equal(r.body.error.code, 'bad_settings');
+  assert.match(r.body.error.message, /platform_visibility, joinability/);
+});
+
+server.close();
+console.log(`\nprovisioning_settings: ${passed} passed, ${failed} failed`);
+process.exit(failed ? 1 : 0);