@bongos/core 1.19.419 → 1.19.421

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.419",
-  "core_contract": "1.19.419",
-  "source_commit": "d433ea7793766e404ce4b09ee9f652d5c09df897",
+  "core_version": "1.19.421",
+  "core_contract": "1.19.421",
+  "source_commit": "ea6e65fb6df2e2ca09fcb0769b194b3ccb407878",
   "source_ref": "HEAD",
-  "built_at": "2026-08-29T17:21:12.343Z",
+  "built_at": "2026-08-29T17:49:20.389Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
-    "docs_redacted": 358,
+    "docs_redacted": 359,
     "agent_docs_stubbed": 23,
-    "functional_verbatim": 1710,
+    "functional_verbatim": 1719,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 2091,
-  "tree_sha256": "95da3db8c2006aa8998116a9f4679ee33c902f365d0aa3904d7af6d3412ac78d",
+  "file_count": 2101,
+  "tree_sha256": "9528e100c022a131a7ee286c52e98c8bd5544beec72d013af6aea2a668a8e487",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -192,7 +192,7 @@
     {
       "path": ".claude/skills/new-project/SKILL.md",
       "mode": "0000644",
-      "sha256": "1d6f60e8fa3cbf06cc5f8901ccf21fd8cac8050f81b3296039b659d700eba242"
+      "sha256": "21ae14d681f0b8a7056b320c764ffbaa88c9cf777afc67589049e4778bf98d3b"
     },
     {
       "path": ".claude/skills/otb-character-review/SKILL.md",
@@ -352,12 +352,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "d80581bbcb2577fe16cba30d6e0e1ff4ede4ca49dd08c306d1a3bcbfdf1d2cdc"
+      "sha256": "f190d3844d06a676480e270b05f14c13bd797915a43619be0a18affa06117000"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "64cccfdbd4d3d86798bdb60dbcf336e474aeb6af3854225c0a87f9d466c86acd"
+      "sha256": "562e26ce56898840c4bacf89ab7b31f7f80b30fa393374a3f8dc9c7ef973e48f"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -367,17 +367,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "b11537927f1268e2e14d8307589fe2eb58ef01e245556decd0251efc17f707d3"
+      "sha256": "a4b6049666626ab1a99c8c30b0e8fa0ce40e11ba3e4ae61e5763c6ce6338a5e5"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "227105130a432d4e7a294b4359455e022beaaac87bcd4014855d9d34e2faeaf4"
+      "sha256": "272b28e3c36e61ad0f7d578679a6c097238807fb284f130dbcd132d618c865fb"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "aaa84ab1bc5fd8054a85d36d6c70dd4667c8103c21e1c5a027de0b3806096029"
+      "sha256": "a8ea6b45b485350bb0190839cd89429706f9a046c9d2be2a7fe99555e691b852"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -1539,20 +1539,25 @@
       "mode": "0000644",
       "sha256": "72c859bdfc70fd4fc0d104439985a43eaf60cce281bbaae8b8faaffb40546973"
     },
+    {
+      "path": "docs/adr/0209-one-budget-for-the-account-existence-oracle.md",
+      "mode": "0000644",
+      "sha256": "bdf26860d1f10413a30a770ab420d49fdf58f922d75e23fb1cf9f174f7e469e4"
+    },
     {
       "path": "docs/adr/README.md",
       "mode": "0000644",
-      "sha256": "0f92a7a74afdf213a1aba92da88ea5348878ba0df67c3fc9e33d06b8f7ebade9"
+      "sha256": "19b8ba0e720f3df34e710c074dfeeabb64729acb4bd42f08c0378470dbfc3c99"
     },
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "e58b3d540eeaa8f38e028c72e64f4a2373c16c4c185edabc2d2538d247da9a29"
+      "sha256": "d4295ad9e1a6e0003f804fd1e9541414b2337d61469b58844e2f8008a893413c"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "091c9eecdbec83a540fc5d92017525dfdfdf192604b39d8cf60ec2cfb3466819"
+      "sha256": "1fff6c12d94b54f129023b50fb469652e2d558b816c7de6d8906f3ae772be47b"
     },
     {
       "path": "docs/architecture.md",
@@ -1577,12 +1582,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "3e70beb03c93a71f5068c407467deeeca3c69d5271372de04399a9094fa32dd9"
+      "sha256": "6ee22a1fc2696aaf41971398e56de006364c31ebc6e5cb8ff6293c91e31afdf8"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "ae4ffbc86e556ea5463b8289754b70e9465a581e93a40f8713204c34d433e00a"
+      "sha256": "eb972d823005bd2c19326d25849afc3beb0b71e37836c23bd8a3bcc34f5ee3c3"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -1669,6 +1674,11 @@
       "mode": "0000644",
       "sha256": "195002c1d320a42f15bcae68d38fd60d49facd339a34a32860b32cbebcbf15a7"
     },
+    {
+      "path": "docs/design/mocks/hub/mine.html",
+      "mode": "0000644",
+      "sha256": "5de484be1af673bdb91eaf9b9221f8dbca9a47f0c8dad098a0898cd10721b497"
+    },
     {
       "path": "docs/design/mocks/hub/planets.html",
       "mode": "0000644",
@@ -1867,7 +1877,7 @@
     {
       "path": "docs/design/projects-hub-direction-v2.md",
       "mode": "0000644",
-      "sha256": "591cc1d627cc64240c02bee54ef1cce0dd9c68207a52365e8423e7630af7c483"
+      "sha256": "14df1ee2e68f7033f5773a7ad3937437e8d61671d9351de8eb529c2822c9e275"
     },
     {
       "path": "docs/design/projects-hub-direction.md",
@@ -1917,7 +1927,7 @@
     {
       "path": "docs/file-map.md",
       "mode": "0000644",
-      "sha256": "2464bcb60656e263ef00002c928a2e6f0d4b812b7a7b8183c634535f1192e58d"
+      "sha256": "602587d11a0df543c964efb5314615865f0d1d9cd576b2d74c65d72f6150410e"
     },
     {
       "path": "docs/handoff-template.md",
@@ -1927,7 +1937,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "793b13d001dfdb2742b623d7f43d1c5850c67df8a8b12ffb469c675f15a109e2"
+      "sha256": "54aad52c9bf29c0443c656e9ccc606b886e241bd6f0f1f6ea178d6e0ff4ce46a"
     },
     {
       "path": "docs/modules-contract.md",
@@ -3237,7 +3247,7 @@
     {
       "path": "modules/dev-box/app/src/vendor/bongos-client.cjs",
       "mode": "0000644",
-      "sha256": "b11537927f1268e2e14d8307589fe2eb58ef01e245556decd0251efc17f707d3"
+      "sha256": "a4b6049666626ab1a99c8c30b0e8fa0ce40e11ba3e4ae61e5763c6ce6338a5e5"
     },
     {
       "path": "modules/dev-box/app/test/unit.mjs",
@@ -4167,12 +4177,12 @@
     {
       "path": "modules/hall-ui/public/settings.html",
       "mode": "0000644",
-      "sha256": "88886109031ceb77f4a4efbe133af5a2ac8e26ec5dd55e2e71a0bbe5152887bc"
+      "sha256": "9e1d4cdf8e6ad78dad96b7f11ec8e3a597150d9e7096ebde5fa614fb981df83c"
     },
     {
       "path": "modules/hall-ui/public/settings.js",
       "mode": "0000644",
-      "sha256": "5e4e3a6ab492d6b6fae46ad5dbd896213825bfc79f8f3928836af609953a5fb0"
+      "sha256": "a4f554bfc9ceeecbbe24ae345103db377f83704c01891ea3ec730f18c3f50f53"
     },
     {
       "path": "modules/hall-ui/public/shell.js",
@@ -4757,7 +4767,7 @@
     {
       "path": "modules/onboarding/routes/access-requests.js",
       "mode": "0000644",
-      "sha256": "060e8c33c5182c3d11b2b39b721f485deecc07b51f735b98f97aafbcc7e7657a"
+      "sha256": "254eaab3d13d796fb19a029ddc00d429ee5e28827003c407cfdd969d9d9aab28"
     },
     {
       "path": "modules/onboarding/routes/onboarding.js",
@@ -4772,7 +4782,7 @@
     {
       "path": "modules/platform-identity/account-visibility.js",
       "mode": "0000644",
-      "sha256": "744a7293bbdf4e2340baf0dc7f789df03a63ba7970741b8aef5922c02cb8910e"
+      "sha256": "e0f58b95aee7e54531928014e851ed74e40ab1262cda6dc4ab13bae156e33d93"
     },
     {
       "path": "modules/platform-identity/connections.js",
@@ -4882,7 +4892,7 @@
     {
       "path": "modules/platform-identity/platform-identity.js",
       "mode": "0000644",
-      "sha256": "16f86cd9b5a4b934b90a0332651b18c8bd8b1ccbfdbf0c5b23fffe50dbe8d8f8"
+      "sha256": "ebc72974b7963ff07331c465a54111f7440158583a1ca9138c730bd8a1709fb1"
     },
     {
       "path": "modules/platform-identity/pollers/code-sweep.js",
@@ -4897,7 +4907,7 @@
     {
       "path": "modules/platform-identity/routes/connections.js",
       "mode": "0000644",
-      "sha256": "d4b7ddb7ec100899e95e73428fba8dc5e3f41005e021fcf887ea80ba8ae0e1b6"
+      "sha256": "bbd846ab2654124005801914764bddd26212e869975f757bbacc7ee559919a65"
     },
     {
       "path": "modules/platform-identity/routes/my-projects.js",
@@ -4932,7 +4942,7 @@
     {
       "path": "modules/platform-identity/tests/platform-identity.mjs",
       "mode": "0000644",
-      "sha256": "5403d391a22cffa58722923beee730db0bf4052ee933a84ab1e11fcbab9ea5e4"
+      "sha256": "6b523f1fbecaaa29310d3439cc1e4164f7dba3d01057812ccb4ac71bca861b68"
     },
     {
       "path": "modules/platform-identity/ui/.gitkeep",
@@ -5004,6 +5014,11 @@
       "mode": "0000644",
       "sha256": "74c46df38eab2b8c0f59b2da423691b170e3e85a7ec9857fad239b912bca99f4"
     },
+    {
+      "path": "modules/provisioning/migrations/provisioning_013_project_detail.sql",
+      "mode": "0000644",
+      "sha256": "7abe41633cd7f98712c39960fba7175f0bb3340c4568bfbfdc640af911a31e15"
+    },
     {
       "path": "modules/provisioning/module.json",
       "mode": "0000644",
@@ -5012,7 +5027,7 @@
     {
       "path": "modules/provisioning/onboard-plan.js",
       "mode": "0000644",
-      "sha256": "9124712dbaa724d03177f1b5779ca3aad639151c7b1ef9721dd65f5374de4afe"
+      "sha256": "31f14cbf3d649c25f1f17c508ae19be2f39d9e1991fde17cdce08cb15837ffa1"
     },
     {
       "path": "modules/provisioning/pollers/liveness-sweep.js",
@@ -5022,7 +5037,7 @@
     {
       "path": "modules/provisioning/provisioning.js",
       "mode": "0000644",
-      "sha256": "82c2502ad0c535a1faa43b167735d988527b54149778e5e796c1306139e760f9"
+      "sha256": "b643caae4ce9e8cfa8d5f3dccbfe41e709b89ce6820ca0422aee3ac184f45a12"
     },
     {
       "path": "modules/provisioning/rate-limit.js",
@@ -5032,7 +5047,7 @@
     {
       "path": "modules/provisioning/routes/provisioning.js",
       "mode": "0000644",
-      "sha256": "bdf000da67e09dfa3bc394d7c3d7dbbd9e65fe4a653cc558291c5806f2ca46ca"
+      "sha256": "100c0f73c26c1c4858009d8ce324b99e632c30725f32df84542ff7862bd339c2"
     },
     {
       "path": "modules/provisioning/tests/liveness.mjs",
@@ -5042,7 +5057,7 @@
     {
       "path": "modules/provisioning/tests/provisioning.mjs",
       "mode": "0000644",
-      "sha256": "3db404b6ad50e01de0b1d73131cefc01ab8fe939eee18157ba6aa8f28a05fb7f"
+      "sha256": "38bc7eb2f1dfd3c03f2c48f42683821ebefbe68fafec95dec491bb3df926b7e0"
     },
     {
       "path": "modules/provisioning/ui/.gitkeep",
@@ -5369,6 +5384,11 @@
       "mode": "0000644",
       "sha256": "057391fcbba1985a234cf1d4f56db36a89a79d1ee44a80b5cd30f51ed7175cdb"
     },
+    {
+      "path": "modules/ui-design/kit/fixtures/featured-hub.json",
+      "mode": "0000644",
+      "sha256": "01de9651237575b29eea5eed816391176c9ed4bca7627b4f096a30f80fa1ceed"
+    },
     {
       "path": "modules/ui-design/kit/fixtures/featured.json",
       "mode": "0000644",
@@ -5394,6 +5414,16 @@
       "mode": "0000644",
       "sha256": "bbc16593ef50e966647f54559834a956778ac59937ef3fc27794d98d1e12a67e"
     },
+    {
+      "path": "modules/ui-design/kit/fixtures/provisioning-instances-empty.json",
+      "mode": "0000644",
+      "sha256": "4e6f5ebcd7a561d9f9e31ad121b5f7090eb73691ddd6134d2e7f4f8c93f6e2e2"
+    },
+    {
+      "path": "modules/ui-design/kit/fixtures/provisioning-instances.json",
+      "mode": "0000644",
+      "sha256": "c26cc842803d08f89a8c1545feb5feb6830159a7e283bcfb9846c7ce8e69ff4a"
+    },
     {
       "path": "modules/ui-design/kit/fixtures/recent-shipped.json",
       "mode": "0000644",
@@ -5402,7 +5432,7 @@
     {
       "path": "modules/ui-design/kit/lib.js",
       "mode": "0000644",
-      "sha256": "657c5ccebb7223aa7cf71f8ac25f18c6f28054931abbe6ac1ad1203733784f66"
+      "sha256": "b567bcd57b53f2d5770855c46af566f88b425e4392c20b3604befbedaf85003f"
     },
     {
       "path": "modules/ui-design/kit/png.js",
@@ -5412,17 +5442,17 @@
     {
       "path": "modules/ui-design/kit/probe.js",
       "mode": "0000644",
-      "sha256": "d38d6168c3bd701a368726fbf53bfb9209711bd2cb68b7df79a3d2505edf2efe"
+      "sha256": "7072b2238e8c89b408de3e5e8e0356d921b3f76a02620d1914713a0a37699ec9"
     },
     {
       "path": "modules/ui-design/kit/render.js",
       "mode": "0000644",
-      "sha256": "872bd51f1b221afa226e113c727ec1a428457e9a4621bcffe605642b7d7731e3"
+      "sha256": "2b559498341675882862ee23dd5d0bd60615db4d2602bcada7be368dd9f0b94a"
     },
     {
       "path": "modules/ui-design/kit/serve.js",
       "mode": "0000644",
-      "sha256": "de42b4d4f908ebdf9b3a181b54d09d8541124a0d35a05d29ddea24233ecca641"
+      "sha256": "1c3b11d74f840c82452244505b8994511584ddb0367bca618b45578b7c8ecc15"
     },
     {
       "path": "modules/ui-design/module.json",
@@ -5467,12 +5497,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "9bcfa46cd421336fba313885ceb399c9f025a85f5c07759abdb9d653bbd34105"
+      "sha256": "c735a709aeb39ba8d543a0d1a116c6c4c99398fdee629b719228b21dc351e931"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "cff6d489fea88ab0fe13b221de09f4bfa4b7d95ce5d8a1386de53ce94236b44e"
+      "sha256": "82dbf5b00684863b19d987b3aed3abbf668b38f2aa8133081993a3dc6ec37b57"
     },
     {
       "path": "public-docs/index.html",
@@ -5712,7 +5742,7 @@
     {
       "path": "public-landing/assets/cosmos.css",
       "mode": "0000644",
-      "sha256": "d65178a447cd76e5d2a7e7ecc675ddf94ad24c9badb3a19112f0c3802462572f"
+      "sha256": "85797e1405425d852572a796f56fde0928b596af49b04214b576c7e4067fbfcd"
     },
     {
       "path": "public-landing/assets/verro-medallion.png",
@@ -5919,20 +5949,30 @@
       "mode": "0000644",
       "sha256": "5af37c9fd5be9c15ac195528764f87c2ade2b63a72a24fadfa87b83183769d28"
     },
+    {
+      "path": "public-landing/projects-empty.states.json",
+      "mode": "0000644",
+      "sha256": "44056fe56d6b819cd003a2d38fcb79fb679609d91316a712e8fd7fdf3f750c5f"
+    },
+    {
+      "path": "public-landing/projects-floor.states.json",
+      "mode": "0000644",
+      "sha256": "7bda7530f3ffb0fdc59ff658ce5163c858c5def4150e746c1480669c7f3156d5"
+    },
     {
       "path": "public-landing/projects.html",
       "mode": "0000644",
-      "sha256": "6d67e17827d007228c41e7d2dc7d823a5c33a81cb904f1a7e4b0849daf290974"
+      "sha256": "8f74c9a2d3eda52bc91d04c0b1b13fc4752688fdf864bcc0ae8cb9e242c7b8d3"
     },
     {
       "path": "public-landing/projects.probes.json",
       "mode": "0000644",
-      "sha256": "f73eb875d55475f3380ee7356212262bfa053c86e072e6943cb77a8d3968af42"
+      "sha256": "59dfbb084dc4f7be7b353681036b9bb06dca10e59e6003f90f379db3607bcf1f"
     },
     {
       "path": "public-landing/projects.states.json",
       "mode": "0000644",
-      "sha256": "3c771c4f139b543c187620f7542970ca0e03c96668716c986ea24385c7090cab"
+      "sha256": "2e30a3a803067fc3e823dd789c869e49ff42ea821fff6cabdf220cd2db4759c0"
     },
     {
       "path": "public-landing/terms.html",
@@ -6377,7 +6417,7 @@
     {
       "path": "scripts/gds/fitness.js",
       "mode": "0000644",
-      "sha256": "2fcc7dfa75a6fcf1ebc0fb75d0e4343dc54b9d75b88fb798f8b16674b919c1b8"
+      "sha256": "ec823ee34e55318a1bee8008658fe44c24158e43a3736065312ae931d0bab796"
     },
     {
       "path": "scripts/gds/gate-review.js",
@@ -6647,7 +6687,7 @@
     {
       "path": "scripts/gds/onboard.js",
       "mode": "0000644",
-      "sha256": "71ee037f1e893a1bcbcaca95e6bdc80c5eb4f5d3e613b59b95e1272d673d3d12"
+      "sha256": "bc169c26bfcddb6789e5fd7f8c2fc53bdaccadf75b7ea4dc2a96ea81d3f92c4d"
     },
     {
       "path": "scripts/gds/onboarding-analyze.js",
@@ -6697,7 +6737,7 @@
     {
       "path": "scripts/gds/provision-net.js",
       "mode": "0000644",
-      "sha256": "18c03ffa9cb4ec417ca527928a2146fa72630eada173c7e207dbad513af70acc"
+      "sha256": "01b6ef89cbef4d898934c1802dec416c6085f0dde5ae49012bd2fa7a14bb9589"
     },
     {
       "path": "scripts/gds/provision-repo.js",
@@ -7407,7 +7447,7 @@
     {
       "path": "src/bongos/middleware/rate-limit.js",
       "mode": "0000644",
-      "sha256": "3c725bd59ff9be82850b1f68ceb5e9d0dfb2ded9371e0623fab816a6b03fc144"
+      "sha256": "cd28f4517614b4b812aba3c051674ebaff8e78fd741a2e464966b687c459a654"
     },
     {
       "path": "src/bongos/module-scope-map.js",
@@ -7477,7 +7517,7 @@
     {
       "path": "src/bongos/routes/auth.js",
       "mode": "0000644",
-      "sha256": "ba9fbc7fb9d210d850578b81dd54bbbe777634988107e8d5791b37acd0fffa0d"
+      "sha256": "4c26db2cae7070a44523053d369da83a41ed38677b46292da927b061a398a4eb"
     },
     {
       "path": "src/bongos/routes/backup.js",
@@ -7592,7 +7632,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "d70b98299c5a454682784d75bed90dc711525c826fb861bf11c8e5126ea0e155"
+      "sha256": "1dda5c82cffdacd548fa5f46dace55a9967f8b43b3ddd3eff267ddf9002f0020"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -7644,10 +7684,15 @@
       "mode": "0000644",
       "sha256": "4d8435e7f8b949715ee40843beddc1868105edd9c67b269cfa8f510a192e9212"
     },
+    {
+      "path": "tests/account_existence_rate_limit.mjs",
+      "mode": "0000644",
+      "sha256": "41170e6fa3bc063770a39f4fe5b21e049ae91c8c4115b3b2152a7e464420fb6f"
+    },
     {
       "path": "tests/account_privacy_flags.mjs",
       "mode": "0000644",
-      "sha256": "274e07580eb23b111fb26e097a85f618cf33b0467a9a2a325cfbdd910a33fab1"
+      "sha256": "fdce121a9c4e9d5b3955c818547fa21fe7180ab9aa056910c4243f72b6716b0a"
     },
     {
       "path": "tests/achievements_reconcile.mjs",
@@ -8439,6 +8484,11 @@
       "mode": "0000644",
       "sha256": "89e05751271dd18b96a2319d624403353bdc710b2e8b5c0cf6181b125cd17b76"
     },
+    {
+      "path": "tests/effective_visibility_predicate.mjs",
+      "mode": "0000644",
+      "sha256": "b8993257de1f8e44d8611fa97b0b9da885998e5e71cc4163cc5c65d8aee12fed"
+    },
     {
       "path": "tests/est_advisory.mjs",
       "mode": "0000644",
@@ -9367,7 +9417,7 @@
     {
       "path": "tests/module_api.mjs",
       "mode": "0000644",
-      "sha256": "e5bb1ae80c818eec08f3f06999037b61d176afecb850fe65e4eab6c34e97b6b1"
+      "sha256": "9b2394ce72e74a96460c6d9ef1cc2ee280dded85523fae2979d56a49fb514b85"
     },
     {
       "path": "tests/module_catalog.mjs",
@@ -9467,7 +9517,7 @@
     {
       "path": "tests/onboard.mjs",
       "mode": "0000644",
-      "sha256": "92dd484634703c5204bc88eeccfdfdf310a2b0984488fb8d065d52a246b9f998"
+      "sha256": "3065c1ef3a57e3cd53b4e18bf7193cc3fe93efa012958628e8c99d6b9bfd8eae"
     },
     {
       "path": "tests/onboarding_gate.mjs",
@@ -9612,7 +9662,7 @@
     {
       "path": "tests/profile_route.mjs",
       "mode": "0000644",
-      "sha256": "5af720ee7c18d4b47630fbbed7cb08901acfbf773960699e312496b8196c9fdc"
+      "sha256": "9c29747faf840a5d0bcd7b09479cccea293155b77b247043aa1d047c7254d73d"
     },
     {
       "path": "tests/profile_ui_cross_project.mjs",
@@ -9632,12 +9682,12 @@
     {
       "path": "tests/projects_hub.mjs",
       "mode": "0000644",
-      "sha256": "16d5ed7e9d6c24b8743996e8de44674297ef1355605f90b60783cd6fba419ea0"
+      "sha256": "27a10d25acbf114ba0939325bf225399503b54149d3c24f25592c82d7bbe5f85"
     },
     {
       "path": "tests/projects_hub_pre_uat.mjs",
       "mode": "0000644",
-      "sha256": "9cf9882d54011ea2284cb709c02abd2228d6a073b207e255b8958e0ca54794ae"
+      "sha256": "ecf1a225759d8d8475bac145727c006fe7341c4b945690ffd47a620e42e8140e"
     },
     {
       "path": "tests/promote_goal_id.mjs",
@@ -9652,7 +9702,7 @@
     {
       "path": "tests/provision.mjs",
       "mode": "0000644",
-      "sha256": "32f6a64ed1da1fcfe703f16ee171592262268b24eb833a171d1b5e289ad3e804"
+      "sha256": "9744b866060ae83fc560f65e579fc30e73957ff21329994ca3d581dbe1726053"
     },
     {
       "path": "tests/provision_restart.mjs",
@@ -10387,7 +10437,7 @@
     {
       "path": "tests/ui_design_kit.mjs",
       "mode": "0000644",
-      "sha256": "25b4f754abb89f4a01237e81199dbcca824045563a2b6dbadca234227ff8ef3c"
+      "sha256": "05f9b33af4826999fd646af204fa7b09b6f30f5637ebef341b86c83c5d008215"
     },
     {
       "path": "tests/ui_design_skills.mjs",

package/.claude/skills/new-project/SKILL.md

@@ -19,7 +19,18 @@ Interview the owner for: product name, world name, company; the **GitHub repo**
 
 **Human-only (UI-first):** have them create an **empty** GitHub repository — github.com → **New repository** → name it, leave it empty (no README), Create. That repo is where the instance's own code will live.
 
-### 2. DNS token preflight — BEFORE you commit the address (task 1980)
+### 2. Tell us about the project — OPTIONAL, and skipping it is fine (task 1002334)
+
+Ask two things, and offer the skip in the same breath — a "you can leave this blank" that arrives *after* the question reads as a test:
+
+- **What are you building?** A sentence or two. This is the project's **description**, and it is half of the publish gate ([ADR 0182](../../../docs/adr/<redacted>.md) D4: a project is on the public map iff it has a name AND a description).
+- **Who's building it?** `solo` / `small-team` / `community`. This is what the platform's setup recommendations read.
+
+Both ride the provisioning request as `description` and `detail: { team_shape }`. **Skipping is a supported default, not a failure:** the project stands up exactly the same, it just stays *dark matter* — off the public map and un-joinable — until a description exists. Say that plainly when the owner skips, and say the way back with it: `PATCH /provisioning/instances/:id/detail` fills either answer in later, and publishes the project the moment the description lands.
+
+Never gate the standup on this step, and never invent an answer the owner didn't give — a recommendation built on a guess is worse than no recommendation.
+
+### 3. DNS token preflight — BEFORE you commit the address (task 1980)
 
 Before anything is provisioned, verify the control-plane's Cloudflare token can actually manage the domain's zone (a mismatched-zone token is exactly what broke the Emersonian standup mid-flow):
 
@@ -30,12 +41,12 @@ node scripts/gds/provision.js dns-check <domain>
 - ✓ reachable → continue.
 - ✗ not reachable → **STOP and resolve it now**, don't push past it. The command prints the fix; usually: widen the Cloudflare API token to include the domain's zone (CF dashboard → My Profile → API Tokens → edit → Zone Resources → Include → the zone), then re-run `dns-check` until green. Only then proceed.
 
-### 3. `bongos init` — scaffold (greenfield) **or** `--adopt` (brownfield)
+### 4. `bongos init` — scaffold (greenfield) **or** `--adopt` (brownfield)
 
 **This is the one leg that branches** (ADR 0121 §Decision 1). Pick the mode that matches the repo:
 
 - **Greenfield** — a NEW, empty repo. The default below.
-- **Brownfield / adopt** — an EXISTING repo (code, history, a backlog). Run `node bin/bongos.js init --adopt` instead. It DETECTS the repo's stack, runs a conflict **pre-flight** (migration-namespace / fitness-boundary / protected-path / CI-check collisions) and writes **nothing until you accept** (interactive y/N, or `--accept`); a genuine BLOCK (e.g. a `core_`-prefixed migration) is a hard stop, not accept-able. On accept it LAYERS the lean config + the pinned `@cloudbongos/core` dep + `.claude/` **additively** (merges-or-leaves-and-reports; never clobbers, never the `--force` path), captures the repo's **REAL** current version/goal, and imports its existing backlog (open GitHub issues via `GITHUB_TOKEN`/`GH_TOKEN`, else a `TODO`/`ROADMAP`/`BACKLOG` file). Then **skip step 4** — adopt layered onto the existing repo, there is no empty repo to scaffold — and continue from step 5 (provision). Every other leg is identical.
+- **Brownfield / adopt** — an EXISTING repo (code, history, a backlog). Run `node bin/bongos.js init --adopt` instead. It DETECTS the repo's stack, runs a conflict **pre-flight** (migration-namespace / fitness-boundary / protected-path / CI-check collisions) and writes **nothing until you accept** (interactive y/N, or `--accept`); a genuine BLOCK (e.g. a `core_`-prefixed migration) is a hard stop, not accept-able. On accept it LAYERS the lean config + the pinned `@cloudbongos/core` dep + `.claude/` **additively** (merges-or-leaves-and-reports; never clobbers, never the `--force` path), captures the repo's **REAL** current version/goal, and imports its existing backlog (open GitHub issues via `GITHUB_TOKEN`/`GH_TOKEN`, else a `TODO`/`ROADMAP`/`BACKLOG` file). Then **skip step 5** — adopt layered onto the existing repo, there is no empty repo to scaffold — and continue from step 6 (provision). Every other leg is identical.
 
 Greenfield:
 
@@ -45,11 +56,11 @@ node bin/bongos.js init          # interview (or: init --from spec.json for non-
 
 It writes lean `config/branding.json` / `config/modules.json` / `config/hierarchy.json`, seeds the first version + its done-when goal, files the human-only kickoff tasks, and — when you opt into hosting — files a **provisioning request** (`POST /provisioning/instances`). Choose **hosting shape `standalone`**. Enable the `provisioning` module on the target so the request is honored (`config/modules.json` → `"provisioning": true`).
 
-### 4. Scaffold the standalone repo
+### 5. Scaffold the standalone repo
 
-Materialize the instance's own repo (ADR 0108): clone the empty GitHub repo to the standalone root (`${PROVISION_STANDALONE_BASE:-/srv/cloudbongos}/<slug>` on the control plane), drop in the `config/` + `.claude/` from step 3, and pin the core as a dependency (`@cloudbongos/core` in the instance `package.json`). Commit + push. This checkout is what the standalone service will run from.
+Materialize the instance's own repo (ADR 0108): clone the empty GitHub repo to the standalone root (`${PROVISION_STANDALONE_BASE:-/srv/cloudbongos}/<slug>` on the control plane), drop in the `config/` + `.claude/` from step 4, and pin the core as a dependency (`@cloudbongos/core` in the instance `package.json`). Commit + push. This checkout is what the standalone service will run from.
 
-### 5. Provision — core + DB + address + service (task 1978)
+### 6. Provision — core + DB + address + service (task 1978)
 
 The web tier only **enqueued** the request; the **control-plane runner** does the real work (it alone holds the DO/Cloudflare tokens):
 
@@ -60,7 +71,7 @@ node scripts/gds/provision.js run-intents --apply     # drains the queue
 
 For `standalone` this composes: allocate a port → `git pull` + `npm ci --omit=dev` (installs the pinned core) → `createdb` + **instance-root** migrate (`node_modules/@cloudbongos/core/scripts/migrate.sh`) → per-instance `/etc/<slug>/web.env` → a **standalone systemd unit** (runs the core package's `platform-server.js` from the instance repo) → DNS A-record UPSERT → per-instance Caddy snippet (on-demand TLS) → `/healthz`. It is idempotent + dry-run-by-default (omit `--apply` to preview). It **fail-fasts on the step-2 DNS preflight** if step 2's token check was skipped.
 
-### 6. GitHub sign-in — ONE click (App Manifest flow), or a manual OAuth app + first sign-in
+### 7. GitHub sign-in — ONE click (App Manifest flow), or a manual OAuth app + first sign-in
 
 **Recommended — one click (task 2080, ADR 0133).** GitHub has no create-an-OAuth-App API, but it *does* let us pre-fill a **GitHub App Manifest**: the owner clicks one link, approves on GitHub, and GitHub hands the control plane the credentials automatically — **no OAuth app to hand-create, no secret to copy-paste ever.** From the control-plane hall, **Start a project → “Set up GitHub sign-in”** (the button appears once the instance is requested; it needs the instance's **domain** set). Under the hood it:
 
@@ -89,7 +100,7 @@ node scripts/gds/oauth-secret.js place <slug> --client-id <id> --client-secret <
 
 **Human-only — first sign-in.** The owner opens `https://<domain>` and signs in with GitHub **once**. This seats the **founding Archon** — config alone seats no one, so this step is inherent and cannot be automated.
 
-### 7. Verify
+### 8. Verify
 
 ```bash
 curl -s https://<domain>/healthz          # → {"ok":true,"auth_configured":true}
@@ -97,11 +108,11 @@ curl -s https://<domain>/healthz          # → {"ok":true,"auth_configured":tru
 
 Confirm the owner is **Archon** (their profile / the hall roster). If `auth_configured` is `false`, re-run the `oauth-secret place` step and recheck the OAuth app values.
 
-### 8. Brand
+### 9. Brand
 
 Fill the instance **look** — theme / palette / fonts in `config/branding.json` (see `docs/branding-fill-prompt.md`). The identity strings were set at init; this is the visual layer. "Brand with your own LLM."
 
-### 9. Enter your builders hall
+### 10. Enter your builders hall
 
 The hall is the point of everything above — end there, not at brand (task 1002703):
 
@@ -118,4 +129,4 @@ A new owner has gone zero → live: their own standalone repo on a pinned core,
 - **Standalone only** (ADR 0108) — do not fall back to editing this monorepo's checkout for a new project.
 - **Never weaken the trust boundary** — the web tier enqueues; only the control-plane runner (`provision.js`) touches cloud tokens (ADR 0016 / 0111 §2).
 - **Live docs are automatic** — a standalone instance's session-log index regenerates on deploy (`provision.js` runs `regen-instance-docs.js` after migrate; `bongos init`/`upgrade` seed+refresh it), and the whole-file nav docs are gitignored so `git reset --hard` never wipes them ([ADR 0147](../../../docs/adr/<redacted>.md)). If you wire a **bespoke** deploy script for an instance, it MUST call `node node_modules/@bongos/core/scripts/gds/regen-instance-docs.js` after `git reset` + migrate — see [`docs/recipes/standalone-live-docs.md`](../../../docs/recipes/standalone-live-docs.md).
-- **Adopting an EXISTING repo** (brownfield) is the other branch of the scaffold leg (step 3) — `bongos init --adopt` ([ADR 0121](../../../docs/adr/<redacted>.md)): detect → accept-gated conflict pre-flight → additive layering (never clobbers) → real version/goal + backlog import. Built; the `bongos onboard` CLI and the hall "start a project" wizard offer the same greenfield-vs-adopt choice.
+- **Adopting an EXISTING repo** (brownfield) is the other branch of the scaffold leg (step 4) — `bongos init --adopt` ([ADR 0121](../../../docs/adr/<redacted>.md)): detect → accept-gated conflict pre-flight → additive layering (never clobbers) → real version/goal + backlog import. Built; the `bongos onboard` CLI and the hall "start a project" wizard offer the same greenfield-vs-adopt choice.

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 337 operations across 53 resource groups
+- 338 operations across 53 resource groups
 
 ## Install
 

package/clients/bongos-client/bongos-client.global.js

@@ -641,6 +641,8 @@ function createClient(opts = {}) {
       postProvisioningInstances: (args) => request("POST", "/provisioning/instances", { hasBody: true }, args),
       // GET /provisioning/instances/{id} — rank: any-builder — GET /provisioning/instances/:id
       getProvisioningInstancesId: (args) => request("GET", "/provisioning/instances/{id}", { hasBody: false }, args),
+      // PATCH /provisioning/instances/{id}/detail — rank: any-builder — PATCH /provisioning/instances/:id/detail
+      patchProvisioningInstancesIdDetail: (args) => request("PATCH", "/provisioning/instances/{id}/detail", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/domain — rank: any-builder — POST /provisioning/instances/:id/domain
       postProvisioningInstancesIdDomain: (args) => request("POST", "/provisioning/instances/{id}/domain", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/force-teardown — rank: metic+archon — POST /provisioning/instances/:id/force-teardown

package/clients/bongos-client/index.cjs

@@ -640,6 +640,8 @@ function createClient(opts = {}) {
       postProvisioningInstances: (args) => request("POST", "/provisioning/instances", { hasBody: true }, args),
       // GET /provisioning/instances/{id} — rank: any-builder — GET /provisioning/instances/:id
       getProvisioningInstancesId: (args) => request("GET", "/provisioning/instances/{id}", { hasBody: false }, args),
+      // PATCH /provisioning/instances/{id}/detail — rank: any-builder — PATCH /provisioning/instances/:id/detail
+      patchProvisioningInstancesIdDetail: (args) => request("PATCH", "/provisioning/instances/{id}/detail", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/domain — rank: any-builder — POST /provisioning/instances/:id/domain
       postProvisioningInstancesIdDomain: (args) => request("POST", "/provisioning/instances/{id}/domain", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/force-teardown — rank: metic+archon — POST /provisioning/instances/:id/force-teardown