@bongos/core 1.19.209 → 1.19.211

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.209",
-  "core_contract": "1.19.209",
-  "source_commit": "7163dda884c4ff7ab746790988dd3612e1271681",
+  "core_version": "1.19.211",
+  "core_contract": "1.19.211",
+  "source_commit": "348da70b502ddf8be58aa20aeb71dcf7be94ec7c",
   "source_ref": "HEAD",
-  "built_at": "2026-08-17T21:40:11.933Z",
+  "built_at": "2026-08-17T23:14:01.398Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 310,
     "agent_docs_stubbed": 21,
-    "functional_verbatim": 1300,
+    "functional_verbatim": 1301,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 1631,
-  "tree_sha256": "f933ba33ff7212d28d0d1b4447b760177e211576e00658e3050a7a72528c3bc5",
+  "file_count": 1632,
+  "tree_sha256": "5d3eac725354ec0e3bd3c1d91f38bcc539a355b8e2b137de56de74ddfbe2572f",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -347,12 +347,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "2755203dec4a1450c5950c39a767bc093d1d1227f952193001cdfa94205e995f"
+      "sha256": "81ffa13d3b249b46c4ed62be26cf8e985102697f090a3cfbe7491ff728976028"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "7b4e5ecf6c6d12a3c9e603a0f5b4bd28ba8cd991399ed8941181b6aeae53772d"
+      "sha256": "23b9f9be8ed1276fa2422cb74ae185c0e37813672e83196aeb6810f091815c12"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -362,17 +362,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "a92355ef21073634500f6806f1e495c955a0b67e889cf07264ed8d1169b119be"
+      "sha256": "0e38267f075a54b3695a40da4a54f366d5b42827027e4e3614713e6bcc19ca4a"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "8fe97a3daefdceb9bf40a15a19dffb81fb6387c0acbe20041e58e63b24e80dd1"
+      "sha256": "004ad81d92eab45d5384876ce355b8f9208c32e202289f5c4fb1117932d27a14"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "adb2a36a9598c543adbf7c8011f36585f7c394bac7f4961718359ee7a29cb1dd"
+      "sha256": "661cd90af7bd8d0190cf9cef5614fee48dc48858d3cf9dea681da8b3fc99d170"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -1367,12 +1367,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "52554cf7c8e5355c59594c872f30975581eb6c1b9a5bcb63efa1a1a19f2d3877"
+      "sha256": "43f6538485af5153a0ce0fb82f103431fa869cc7d996f5b6694577c474b0f0fe"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "825af2c499836301a34cff79192e41556cc863fe9a5378d9e5134c862769c2fa"
+      "sha256": "274bd57fc6c0b83aba02cedb5cc6daa2fca4a9d74ae5268e527a81ebc10b50e0"
     },
     {
       "path": "docs/architecture.md",
@@ -2682,7 +2682,7 @@
     {
       "path": "modules/dev-box/app/src/vendor/bongos-client.cjs",
       "mode": "0000644",
-      "sha256": "a92355ef21073634500f6806f1e495c955a0b67e889cf07264ed8d1169b119be"
+      "sha256": "0e38267f075a54b3695a40da4a54f366d5b42827027e4e3614713e6bcc19ca4a"
     },
     {
       "path": "modules/dev-box/app/test/unit.mjs",
@@ -3982,7 +3982,7 @@
     {
       "path": "modules/provisioning/routes/provisioning.js",
       "mode": "0000644",
-      "sha256": "78c89017e17dfba57ade2330fce293e6422aab316e9311f8215ff3eb9fdc3fe5"
+      "sha256": "a4419bdd0693d0e1168051bd640721b615bf400b25f26478d786b9aac908ab5e"
     },
     {
       "path": "modules/provisioning/tests/liveness.mjs",
@@ -4282,12 +4282,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "9a096a5f5cadd3f8dab6e2c958402e36c857ff560a14364c756161c41d573ed3"
+      "sha256": "aa3d213f3f3548f655bee0361f01e43ee380b54e958f8d11683ba7d94a098d2b"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "9b699cde73691611630459b846d40b8a887cb51099b8d4193d775fd76f1b9749"
+      "sha256": "368f9931ba9dc39483dc3a9c488fb8df45342cccccab65d34b9a4d083fa530ed"
     },
     {
       "path": "public-docs/index.html",
@@ -4527,7 +4527,7 @@
     {
       "path": "public-landing/assets/cosmos.css",
       "mode": "0000644",
-      "sha256": "611050e8599be5791e89f9711b76ef6efc5b1e8bd703e2badc6a6418a9ed432b"
+      "sha256": "bb8a74eaadebf0adf8e59dd03cab87f9c3cbd7faf21d1d6a5d47b460c032c28b"
     },
     {
       "path": "public-landing/assets/verro-medallion.png",
@@ -4547,7 +4547,7 @@
     {
       "path": "public-landing/projects.html",
       "mode": "0000644",
-      "sha256": "20dd4fcb471c8d5a4dced2788ca6fffecaba241207bc0087d918d15b60bcc1a1"
+      "sha256": "790034f4256a31da114969853e14fdf47b43b0ad35907b4fcc14ff98897ec7d1"
     },
     {
       "path": "public-landing/world/assets/clouds/cloud-island-large.png",
@@ -5682,7 +5682,7 @@
     {
       "path": "src/bongos/github-repos.js",
       "mode": "0000644",
-      "sha256": "893a2eb6f2658942cee2043ff130a5ae38538007e47e2ec2665548e0d286e211"
+      "sha256": "f34518361f15a20c4dc60a936878e72b4c81d99e41e00180270919dcbbd83008"
     },
     {
       "path": "src/bongos/goal-scope-check.js",
@@ -5807,7 +5807,7 @@
     {
       "path": "src/bongos/routes/github.js",
       "mode": "0000644",
-      "sha256": "2895aa72fbcef361a5edf07166e64e9902edcb5971eb2e496705b3bfddeabda1"
+      "sha256": "d8674cd2358b63f8463d91484495feaa38219fafdc0d925ad52ddb206a2cc84a"
     },
     {
       "path": "src/bongos/routes/healthz.js",
@@ -5902,7 +5902,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "efbf7edd3c80dbce81da9aa7473ae1903674c9018da9803e6ab0e807bcb616f0"
+      "sha256": "5998d6f2561e88ca21f3f764a48fd496767d0b2f16aeaf1a1e7cf981333c4faf"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -6734,10 +6734,15 @@
       "mode": "0000644",
       "sha256": "850113ed91babc9eb54dc22231f194d283fd3f94cee9deef1e6e0bf6f3a969c2"
     },
+    {
+      "path": "tests/github_repo_visibility.mjs",
+      "mode": "0000644",
+      "sha256": "c2c428ade3a7cf802dfc46415c1d3c1e09fe826e223df71101e81d014cb5d69e"
+    },
     {
       "path": "tests/github_repos_helpers.mjs",
       "mode": "0000644",
-      "sha256": "14d68c064218655bdbc04fe95dd7d03a8ac0d152301ac65c8c2c7b9fd93926ef"
+      "sha256": "a450e5248b3b97ddaa11b1b9c79d768779df24b11cd1177174390ae80f5fe624"
     },
     {
       "path": "tests/github_token_store.mjs",
@@ -7522,7 +7527,7 @@
     {
       "path": "tests/projects_hub.mjs",
       "mode": "0000644",
-      "sha256": "5a3f724b4e84324d7560254517612b45fd4e4e31e57ebbb0b35a4021d712df6b"
+      "sha256": "963b745e4b4ecd6a786f88758d57aee8680edd49d25f0cc84e3b563a5125be3b"
     },
     {
       "path": "tests/provision.mjs",
@@ -7552,7 +7557,7 @@
     {
       "path": "tests/provisioning_settings.mjs",
       "mode": "0000644",
-      "sha256": "bb800d2e15045efbac4fadbc62996054d33e163eb86e6a5e09087d409cc7fbfa"
+      "sha256": "a525fdcfa2fde8edd2be3198ca7213b9b6bc43a12f748a718a570b7f993972b6"
     },
     {
       "path": "tests/provisioning_slug_available.mjs",
@@ -7572,7 +7577,7 @@
     {
       "path": "tests/public_landing_projects.mjs",
       "mode": "0000644",
-      "sha256": "ea3fc3b311115c765e7734e11cc33750a5ffde9f492d4635460b04cfc2108ad3"
+      "sha256": "266f5936675c0f6eb8d64af713d215edea2b88bcab50153497ef2d23fec1ff65"
     },
     {
       "path": "tests/public_mirror_export.mjs",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 278 operations across 46 resource groups
+- 280 operations across 46 resource groups
 
 ## Install
 

package/clients/bongos-client/bongos-client.global.js

@@ -283,6 +283,10 @@ function createClient(opts = {}) {
       postGateApprovalsPrApprove: (args) => request("POST", "/gate-approvals/{pr}/approve", { hasBody: true }, args),
     },
     "github": {
+      // GET /github/repo — rank: any-builder — GET /github/repo
+      getGithubRepo: (args) => request("GET", "/github/repo", { hasBody: false }, args),
+      // POST /github/repo/visibility — rank: any-builder — POST /github/repo/visibility
+      postGithubRepoVisibility: (args) => request("POST", "/github/repo/visibility", { hasBody: true }, args),
       // GET /github/repos — rank: any-builder — GET /github/repos
       getGithubRepos: (args) => request("GET", "/github/repos", { hasBody: false }, args),
       // POST /github/repos — rank: any-builder — POST /github/repos

package/clients/bongos-client/index.cjs

@@ -282,6 +282,10 @@ function createClient(opts = {}) {
       postGateApprovalsPrApprove: (args) => request("POST", "/gate-approvals/{pr}/approve", { hasBody: true }, args),
     },
     "github": {
+      // GET /github/repo — rank: any-builder — GET /github/repo
+      getGithubRepo: (args) => request("GET", "/github/repo", { hasBody: false }, args),
+      // POST /github/repo/visibility — rank: any-builder — POST /github/repo/visibility
+      postGithubRepoVisibility: (args) => request("POST", "/github/repo/visibility", { hasBody: true }, args),
       // GET /github/repos — rank: any-builder — GET /github/repos
       getGithubRepos: (args) => request("GET", "/github/repos", { hasBody: false }, args),
       // POST /github/repos — rank: any-builder — POST /github/repos

package/clients/bongos-client/index.d.ts

@@ -35,6 +35,7 @@ export interface GetBuildersMePendingRankChangeResponse { change: unknown; greet
 export interface GetBuildersRosterResponse { builders: unknown; stale_hours: unknown }
 export interface GetDiscordChannelsPlanResponse { ok: boolean; guild_id: unknown; op_count: unknown; ops: unknown; warnings: unknown }
 export interface GetDoneWhenPendingReviewResponse { criteria: unknown; count: unknown }
+export interface GetGithubRepoResponse { ok: boolean; repo: unknown; private_deployable: boolean }
 export interface GetGithubReposResponse { repos: unknown }
 export interface GetGoalsIdConflictsResponse { ok: boolean; goal_id: unknown; conflicts: unknown; cross_goals_considered: unknown }
 export interface GetGoalsIdRequestsResponse { requests: unknown }
@@ -199,6 +200,8 @@ export interface PostDoneWhenCriterionIdSatisfyRequest { satisfied_by_task_id?:
 export interface PostDoneWhenCriterionIdSatisfyResponse { criterion: unknown; goal_achieved: unknown; goal: unknown }
 export interface PostDoneWhenCriterionIdUnsatisfyResponse { criterion: unknown }
 export interface PostGateApprovalsPrApproveResponse { ok: boolean; pr: unknown; already_clear?: boolean; message: unknown; head_sha?: unknown; status_set?: boolean; recheck?: unknown }
+export interface PostGithubRepoVisibilityRequest { repo: string; visibility: "public" | "private" }
+export interface PostGithubRepoVisibilityResponse { ok: boolean; repo: unknown; private_deployable: boolean }
 export interface PostGithubReposRequest { name: string }
 export interface PostGithubReposResponse { repo: unknown }
 export interface PostGoalsIdArchiveResponse { ok: boolean; goal: unknown }
@@ -530,6 +533,10 @@ export interface BongosClient {
     postGateApprovalsPrApprove(args?: RequestArgs): Promise<PostGateApprovalsPrApproveResponse>;
   };
   "github": {
+    /** GET /github/repo — rank: any-builder */
+    getGithubRepo(args?: RequestArgs): Promise<GetGithubRepoResponse>;
+    /** POST /github/repo/visibility — rank: any-builder */
+    postGithubRepoVisibility(args: RequestArgs & { body: PostGithubRepoVisibilityRequest }): Promise<PostGithubRepoVisibilityResponse>;
     /** GET /github/repos — rank: any-builder */
     getGithubRepos(args?: RequestArgs): Promise<GetGithubReposResponse>;
     /** POST /github/repos — rank: any-builder */

package/clients/bongos-client/index.mjs

@@ -279,6 +279,10 @@ export function createClient(opts = {}) {
       postGateApprovalsPrApprove: (args) => request("POST", "/gate-approvals/{pr}/approve", { hasBody: true }, args),
     },
     "github": {
+      // GET /github/repo — rank: any-builder — GET /github/repo
+      getGithubRepo: (args) => request("GET", "/github/repo", { hasBody: false }, args),
+      // POST /github/repo/visibility — rank: any-builder — POST /github/repo/visibility
+      postGithubRepoVisibility: (args) => request("POST", "/github/repo/visibility", { hasBody: true }, args),
       // GET /github/repos — rank: any-builder — GET /github/repos
       getGithubRepos: (args) => request("GET", "/github/repos", { hasBody: false }, args),
       // POST /github/repos — rank: any-builder — POST /github/repos

package/docs/api/openapi.json

@@ -3641,6 +3641,93 @@
         ]
       }
     },
+    "/github/repo": {
+      "get": {
+        "operationId": "get_github_repo",
+        "tags": [
+          "github"
+        ],
+        "summary": "GET /github/repo",
+        "description": "reads one repo AS the caller's own GitHub credential sees it (the manage page's repo-visibility read, task 1003045). GitHub's 404 covers both \"no such repo\" and \"no access\" — forwarded as-is, no existence leak.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "src/bongos/routes/github.js",
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetGithubRepoResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/github/repo/visibility": {
+      "post": {
+        "operationId": "post_github_repo_visibility",
+        "tags": [
+          "github"
+        ],
+        "summary": "POST /github/repo/visibility",
+        "description": "flips one of the caller's repos PUBLIC, with their own credential. The private direction is REFUSED here, before GitHub is ever called: the deploy pull still runs as the shared deploy key that cannot read a private repo (walk finding N4), so flipping private would break the project's next deploy — the refusal is the honest leg task 1003045 ships.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "src/bongos/routes/github.js",
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostGithubRepoVisibilityRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostGithubRepoVisibilityResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/github/repos": {
       "get": {
         "operationId": "get_github_repos",
@@ -8725,7 +8812,7 @@
           "provisioning"
         ],
         "summary": "GET /provisioning/instances/:id",
-        "description": "GET /provisioning/instances/:id — read one of the caller's own instances. rank: any authenticated builder (own resource). 404 when the id isn't the caller's (own-scoped; does not leak another owner's instance existence).\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "description": "GET /provisioning/instances/:id — read one instance (the manage page's read). rank: any authenticated builder (own resource; archon may read any — task 1003041). 404 otherwise — does not leak another owner's instance existence.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
         "x-source": "modules/provisioning/routes/provisioning.js",
         "parameters": [
@@ -13020,6 +13107,23 @@
           "count"
         ]
       },
+      "GetGithubRepoResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "repo": {},
+          "private_deployable": {
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "ok",
+          "repo",
+          "private_deployable"
+        ]
+      },
       "GetGithubReposResponse": {
         "type": "object",
         "properties": {
@@ -15323,6 +15427,44 @@
           "message"
         ]
       },
+      "PostGithubRepoVisibilityRequest": {
+        "type": "object",
+        "properties": {
+          "repo": {
+            "type": "string",
+            "maxLength": 140
+          },
+          "visibility": {
+            "type": "string",
+            "enum": [
+              "public",
+              "private"
+            ]
+          }
+        },
+        "required": [
+          "repo",
+          "visibility"
+        ],
+        "additionalProperties": false
+      },
+      "PostGithubRepoVisibilityResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "repo": {},
+          "private_deployable": {
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "ok",
+          "repo",
+          "private_deployable"
+        ]
+      },
       "PostGithubReposRequest": {
         "type": "object",
         "properties": {
@@ -17587,9 +17729,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 278,
-  "x-schema-count": 314,
+  "x-endpoint-count": 280,
+  "x-schema-count": 317,
   "x-undocumented-bodies": 8,
-  "x-response-schemas": 212,
+  "x-response-schemas": 214,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 278 endpoints across 46 route files.
+> **Generated from the live route files** — the route file is authoritative. 280 endpoints across 46 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -178,10 +178,12 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | GET | `/api/bongos/gate-approvals` | `metic+archon` | — | GET /gate-approvals — open PRs awaiting owner approval (gate-review red), with the verdict + per-file reasons + changed files + diff link. |
 | POST | `/api/bongos/gate-approvals/:pr/approve` | `archon` | — | POST /gate-approvals/:pr/approve — record owner approval for a stuck gate PR and re-run the gate-review check so it clears. |
 
-## `github` (2)
+## `github` (4)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
+| GET | `/api/bongos/github/repo` | `any-builder` | — | reads one repo AS the caller's own GitHub credential sees it (the manage page's repo-visibility read, task 1003045). |
+| POST | `/api/bongos/github/repo/visibility` | `any-builder` | `repo`, `visibility` | flips one of the caller's repos PUBLIC, with their own credential. |
 | GET | `/api/bongos/github/repos` | `any-builder` | — | acts only on the caller's OWN GitHub identity (the token they granted). |
 | POST | `/api/bongos/github/repos` | `any-builder` | `name` | creates a repo in the caller's OWN account. |
 
@@ -380,7 +382,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | GET | `/api/bongos/provisioning/health` | `public` | — | GET /provisioning/health — liveness + the core version this module mounted against. |
 | GET | `/api/bongos/provisioning/instances` | `any-builder` | — | GET /provisioning/instances — the caller's own instances + each open intent. |
 | POST | `/api/bongos/provisioning/instances` | `any-builder` | `slug`, `target_ref`, `hosting_shape`, `domain`, `no_address`, `tier`, `onboard_mode`, `type` | POST /provisioning/instances — request a new instance. |
-| GET | `/api/bongos/provisioning/instances/:id` | `any-builder` | — | GET /provisioning/instances/:id — read one of the caller's own instances. |
+| GET | `/api/bongos/provisioning/instances/:id` | `any-builder` | — | GET /provisioning/instances/:id — read one instance (the manage page's read). |
 | POST | `/api/bongos/provisioning/instances/:id/domain` | `any-builder` | `domain` | POST /provisioning/instances/:id/domain — give the caller's OWN instance its address (task 1002692, gap 5: no path existed to add a domai… |
 | POST | `/api/bongos/provisioning/instances/:id/force-teardown` | `metic+archon` | — | POST /provisioning/instances/:id/force-teardown — Archon tears down ANY instance. |
 | POST | `/api/bongos/provisioning/instances/:id/github-app` | `any-builder` | `account` | POST /provisioning/instances/:id/github-app — mint a GitHub-App-Manifest onboarding link for the caller's OWN instance (task 2080, ADR 01… |

package/modules/dev-box/app/src/vendor/bongos-client.cjs

@@ -282,6 +282,10 @@ function createClient(opts = {}) {
       postGateApprovalsPrApprove: (args) => request("POST", "/gate-approvals/{pr}/approve", { hasBody: true }, args),
     },
     "github": {
+      // GET /github/repo — rank: any-builder — GET /github/repo
+      getGithubRepo: (args) => request("GET", "/github/repo", { hasBody: false }, args),
+      // POST /github/repo/visibility — rank: any-builder — POST /github/repo/visibility
+      postGithubRepoVisibility: (args) => request("POST", "/github/repo/visibility", { hasBody: true }, args),
       // GET /github/repos — rank: any-builder — GET /github/repos
       getGithubRepos: (args) => request("GET", "/github/repos", { hasBody: false }, args),
       // POST /github/repos — rank: any-builder — POST /github/repos

package/modules/provisioning/routes/provisioning.js

@@ -569,15 +569,25 @@ module.exports = function provisioningRoutes() {
     }
   });
 
-  // GET /provisioning/instances/:id — read one of the caller's own instances.
-  // rank: any authenticated builder (own resource). 404 when the id isn't the
-  // caller's (own-scoped; does not leak another owner's instance existence).
+  // Own-scoped with an Archon override: an owner manages their own project; an
+  // Archon may act on any (fleet support). 404 for everyone else — no existence
+  // leak. Guards the per-id read (the manage page, task 1003041) and both
+  // settings routes (task 1003040).
+  function instanceAccessDenied(inst, builder) {
+    if (!inst) return true;
+    if (builder.rank === 'archon') return false;
+    return String(inst.owner_builder_id) !== String(builder.id);
+  }
+
+  // GET /provisioning/instances/:id — read one instance (the manage page's read).
+  // rank: any authenticated builder (own resource; archon may read any — task
+  // 1003041). 404 otherwise — does not leak another owner's instance existence.
   router.get('/provisioning/instances/:id', auth.requireBuilder, async (req, res) => {
     const id = parseId(req, res); // (req, res) — parseId sends 400 bad_id + returns null on failure
     if (!id) return;
     try {
       const inst = await provisioning.getInstanceById(pool, id);
-      if (!inst || String(inst.owner_builder_id) !== String(req.builder.id)) {
+      if (instanceAccessDenied(inst, req.builder)) {
         return res.fail('instance_not_found', 404);
       }
       const open = await provisioning.getOpenIntent(pool, id);
@@ -594,14 +604,8 @@ module.exports = function provisioningRoutes() {
   // ── Per-project settings (task 1003040, goal 1000058) ─────────────────────
   // The foundation the manage-page wave hangs off: effective settings are the
   // DEFAULTS (today's behavior — public surfaces, apply-to-join) overlaid with
-  // the instance's stored keys. Own-scoped with an Archon override: the owner
-  // manages their own project; an Archon may act on any (fleet support). 404
-  // for everyone else — no existence leak (the GET-by-id precedent).
-  function settingsAccessDenied(inst, builder) {
-    if (!inst) return true;
-    if (builder.rank === 'archon') return false;
-    return String(inst.owner_builder_id) !== String(builder.id);
-  }
+  // the instance's stored keys. Access: instanceAccessDenied above (own-scoped,
+  // Archon override, 404 otherwise — no existence leak).
 
   // GET /provisioning/instances/:id/settings — read a project's effective
   // settings + the allowed values (so a form can render its choices).
@@ -611,7 +615,7 @@ module.exports = function provisioningRoutes() {
     if (!id) return;
     try {
       const inst = await provisioning.getInstanceById(pool, id);
-      if (settingsAccessDenied(inst, req.builder)) return res.fail('instance_not_found', 404);
+      if (instanceAccessDenied(inst, req.builder)) return res.fail('instance_not_found', 404);
       res.json({ ok: true, settings: provisioning.effectiveSettings(inst), options: provisioning.SETTINGS_VOCAB });
     } catch (err) {
       console.error('[provisioning] GET /provisioning/instances/:id/settings', err);
@@ -640,7 +644,7 @@ module.exports = function provisioningRoutes() {
     }
     try {
       const inst = await provisioning.getInstanceById(pool, id);
-      if (settingsAccessDenied(inst, req.builder)) return res.fail('instance_not_found', 404);
+      if (instanceAccessDenied(inst, req.builder)) return res.fail('instance_not_found', 404);
       const updated = await provisioning.updateInstanceSettings(pool, id, patch);
       await provisioning.recordEvent(pool, {
         instanceId: id, ownerBuilderId: inst.owner_builder_id, event: 'settings',

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.209",
+  "version": "1.19.211",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.209",
+      "version": "1.19.211",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.209",
+  "version": "1.19.211",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/public-landing/assets/cosmos.css

@@ -299,8 +299,6 @@ h1{font-family:var(--font-display);font-weight:700;font-size:clamp(24px,3.4vw,32
    card is there for — and the ghosted .orb stays the graphic cue. */
 .proj.gone{border-color:color-mix(in srgb,var(--line) 55%,var(--bg-card));}
 .proj.gone .projName{color:var(--ink-soft);}
-/* click-to-manage landing glow: the sky's owned orb hands focus to this card */
-.proj.anchored{border-color:var(--accent);box-shadow:0 0 0 3px color-mix(in srgb,var(--accent) 30%,transparent);}
 .projBody{flex:1;min-width:0;}
 .projHead{display:flex;align-items:center;gap:12px;flex-wrap:wrap;}
 .projName{font-family:var(--font-display);font-weight:700;font-size:19px;letter-spacing:-0.3px;}
@@ -319,6 +317,11 @@ h1{font-family:var(--font-display);font-weight:700;font-size:clamp(24px,3.4vw,32
 .projMsg.ok{color:var(--ok);}
 .projMsg.err{color:var(--err);}
 .projMsg a{color:var(--link-ink);font-weight:700;text-decoration:none;}
+/* the manage view (task 1003041): its back link, meta repo link and the
+   honest empty-state links speak the same link ink as every other surface */
+.projMeta a{color:var(--link-ink);font-weight:700;text-decoration:none;}
+.backRow a{color:var(--link-ink);font-weight:700;text-decoration:none;}
+.empty p a{color:var(--link-ink);font-weight:700;text-decoration:none;}
 .projMsg a:hover{text-decoration:underline;}
 .projMsg details{margin-top:8px;}
 .projMsg summary{cursor:pointer;font-size:12.5px;font-weight:700;color:var(--ink-faint);}