@bongos/core 1.19.419 → 1.19.421

package/modules/provisioning/routes/provisioning.js

@@ -86,6 +86,30 @@ function ownerFromTargetRef(ref) {
   return m ? m[1] : null;
 }
 
+// The project-detail answers, validated LOUDLY (task 1002334). `detail` arrives as
+// a nested object, and the strict body validator only reaches top-level fields — so
+// without this a typo'd answer key would be dropped by normalizeProjectDetail and
+// the caller would be told nothing, which is exactly the silent-drop failure the
+// strict validator exists to prevent (and that a re-request's type_ignored receipt
+// was written to avoid). Returns null when clean, or a { code, message } to fail
+// with. Both the create route and PATCH …/detail run it, so they cannot drift.
+function badProjectDetail(detail) {
+  if (detail === undefined || detail === null) return null;
+  if (typeof detail !== 'object' || Array.isArray(detail)) {
+    return { code: 'bad_detail', message: 'detail must be an object of answers.' };
+  }
+  const vocab = provisioning.PROJECT_DETAIL_VOCAB;
+  for (const [key, value] of Object.entries(detail)) {
+    if (!Object.prototype.hasOwnProperty.call(vocab, key)) {
+      return { code: 'bad_detail', message: `Unknown detail answer "${key}" — the interview asks: ${Object.keys(vocab).join(', ')}.` };
+    }
+    if (!vocab[key].includes(value)) {
+      return { code: 'bad_detail', message: `"${key}" must be one of: ${vocab[key].join(', ')}.` };
+    }
+  }
+  return null;
+}
+
 // Minimal HTML escaper for the callback landing page (no template engine here).
 function esc(s) {
   return String(s == null ? '' : s).replace(/[&<>"']/g, (c) => (
@@ -388,8 +412,16 @@ module.exports = function provisioningRoutes() {
       onboard_mode: { type: 'string', maxLength: 20 },
       // the declared project Type (task 1002772) — optional, closed vocabulary
       type: { type: 'string', enum: [...provisioning.PROJECT_TYPES] },
+      // The optional project-detail step (task 1002334) — "tell us about your
+      // project", skippable everywhere. Absent means SKIPPED, which is a supported
+      // default: the project simply stays dark-matter until a description exists
+      // (ADR 0182 D4), and PATCH …/detail is the way back.
+      description: { type: 'string', maxLength: provisioning.DESCRIPTION_MAX },
+      detail: { type: 'object' },
     })) return;
     const body = req.body || {};
+    const detailFault = badProjectDetail(body.detail);
+    if (detailFault) return res.fail(detailFault.code, { status: 400, message: detailFault.message });
     const slug = String(body.slug || '').trim().toLowerCase();
     if (!provisioning.isValidSlug(slug)) {
       return res.fail('bad_slug', 400, { reason: 'lowercase, 2–40 chars of [a-z0-9-], no leading/trailing/double dash' });
@@ -472,6 +504,9 @@ module.exports = function provisioningRoutes() {
         targetRef: body.target_ref, hostingShape: shape,
         domain, tier: body.tier, onboardMode,
         type: body.type,
+        // The optional detail step's answers (task 1002334) — absent means the
+        // owner skipped it, which is the supported default, not an error.
+        description: body.description, detail: body.detail,
       });
       // Slug already taken by ANOTHER builder — refuse (never reassign ownership).
       if (!created && String(instance.owner_builder_id) !== String(req.builder.id)) {
@@ -525,6 +560,16 @@ module.exports = function provisioningRoutes() {
           hint: "a re-request never changes an existing instance's declared type",
         };
       }
+      // …and the same for the detail answers (task 1002334). Unlike type this one
+      // HAS a mutation route, so the receipt names it instead of just refusing —
+      // otherwise an owner who came back to fill in the description they skipped
+      // would be told nothing and left dark-matter with no idea why.
+      let detailIgnored;
+      if (!created && (body.description !== undefined || body.detail !== undefined)) {
+        detailIgnored = {
+          hint: `a re-request never changes an existing instance's project detail — PATCH /provisioning/instances/${instance.id}/detail instead`,
+        };
+      }
       res.status(created ? 201 : 200).json({
         instance: provisioning.publicInstance(instance),
         open_intent: intent ? { action: intent.action, state: intent.state } : null,
@@ -533,6 +578,7 @@ module.exports = function provisioningRoutes() {
         ...(domainIgnored ? { domain_ignored: domainIgnored } : {}),
         ...(noAddressIgnored ? { no_address_ignored: noAddressIgnored } : {}),
         ...(typeIgnored ? { type_ignored: typeIgnored } : {}),
+        ...(detailIgnored ? { detail_ignored: detailIgnored } : {}),
       });
     } catch (err) {
       log.error('[provisioning] POST /provisioning/instances', err);
@@ -644,6 +690,65 @@ module.exports = function provisioningRoutes() {
     }
   });
 
+  // ── The optional project detail (task 1002334, goal 1000046) ──────────────
+  // PATCH /provisioning/instances/:id/detail — answer (or re-answer) the
+  // "tell us about your project" step after creation. Body: any subset of
+  // { description, detail }. rank: any authenticated builder (own resource;
+  // archon may change any — same gate as settings).
+  //
+  // THIS ROUTE IS WHAT MAKES THE STEP SKIPPABLE. Skipping at creation leaves the
+  // project dark-matter — off the map and un-joinable (ADR 0182 D4) — and that is
+  // a supported default only because there is a way back. Without this route
+  // "optional" would mean "permanently unpublishable", i.e. a dead end, which is
+  // precisely what criterion `proj-detail-interview` refuses.
+  //
+  // Deliberately NOT a settings-apply: nothing here is a policy the running
+  // instance obeys, so there is no web.env to patch and no restart to queue. The
+  // answers live on the platform row until a catalog row materializes (the
+  // provisioning_007 `type` precedent), and R16 (task 1002335) is the surface that
+  // reads `description` to compute publishability and name what is still missing.
+  router.patch('/provisioning/instances/:id/detail', auth.requireBuilder, async (req, res) => {
+    const id = parseId(req, res); // (req, res) — parseId sends 400 bad_id + returns null on failure
+    if (!id) return;
+    if (validateOrRespond(req, res, {
+      description: { type: 'string', maxLength: provisioning.DESCRIPTION_MAX },
+      detail: { type: 'object' },
+    })) return;
+    const body = req.body || {};
+    const detailFault = badProjectDetail(body.detail);
+    if (detailFault) return res.fail(detailFault.code, { status: 400, message: detailFault.message });
+    if (body.description === undefined && body.detail === undefined) {
+      return res.fail('bad_detail', { status: 400,
+        message: 'The body carries nothing to change — send description, detail, or both.' });
+    }
+    try {
+      const inst = await provisioning.getInstanceById(pool, id);
+      if (instanceAccessDenied(inst, req.builder)) return res.fail('instance_not_found', 404);
+      const actor = String(inst.owner_builder_id) === String(req.builder.id) ? 'api:self' : `api:archon:${req.builder.id}`;
+      // An empty description is CLEARING it, not a no-op string: normalize here so
+      // the column never holds '' — a blank string would read as answered to a
+      // `description IS NOT NULL` publish check and put an empty husk on the map.
+      const patch = {};
+      if (body.description !== undefined) patch.description = provisioning.normalizeDescription(body.description);
+      if (body.detail !== undefined) patch.detail = body.detail;
+      const updated = await provisioning.updateInstanceDetail(pool, id, patch);
+      await provisioning.recordEvent(pool, {
+        instanceId: id, ownerBuilderId: inst.owner_builder_id, event: 'detail',
+        detail: `project detail changed: ${Object.keys(patch).join(', ')}`,
+        actor,
+      }).catch(() => {});
+      res.json({
+        ok: true,
+        description: updated.description || null,
+        detail: provisioning.projectDetail(updated),
+        options: provisioning.PROJECT_DETAIL_VOCAB,
+      });
+    } catch (err) {
+      log.error('[provisioning] PATCH /provisioning/instances/:id/detail', err);
+      res.fail('detail_update_failed', { status: 500, message: 'internal error' });
+    }
+  });
+
   // ── Per-project settings (task 1003040, goal 1000058) ─────────────────────
   // The foundation the manage-page wave hangs off: effective settings are the
   // DEFAULTS (today's behavior — public surfaces, apply-to-join) overlaid with

package/modules/provisioning/tests/provisioning.mjs

@@ -298,5 +298,89 @@ await ta('updateInstanceSettings: jsonb MERGE (||) + updated_at, parameterized,
   assert.deepEqual(params, [18, JSON.stringify({ joinability: 'open' })]);
 });
 
+console.log('');
+console.log('the optional project-detail interview (BV1.R15, task 1002334):');
+
+t('normalizeDescription: collapses whitespace, caps, and empty means ABSENT (never an empty string)', () => {
+  const NL = String.fromCharCode(10);
+  assert.equal(P.normalizeDescription('  A co-op   farming' + NL + '  game.  '), 'A co-op farming game.');
+  // null, not '' — the publish gate reads `description IS NOT NULL`, so a blank
+  // string stored in a nullable column would publish an empty husk (ADR 0182 D4)
+  assert.equal(P.normalizeDescription('   '), null);
+  assert.equal(P.normalizeDescription(''), null);
+  assert.equal(P.normalizeDescription(null), null);
+  assert.equal(P.normalizeDescription(42), null);
+  assert.equal(P.normalizeDescription('x'.repeat(P.DESCRIPTION_MAX + 50)).length, P.DESCRIPTION_MAX);
+});
+
+t('normalizeProjectDetail: on-vocabulary keys only — an unknown key or value is DROPPED, never defaulted', () => {
+  assert.deepEqual(P.normalizeProjectDetail({ team_shape: 'community' }), { team_shape: 'community' });
+  assert.deepEqual(P.normalizeProjectDetail({ team_shape: 'enormous' }), {}, 'an off-vocabulary answer is not stored');
+  assert.deepEqual(P.normalizeProjectDetail({ favourite_colour: 'blue' }), {}, 'an unknown question is not stored');
+  // skipping is the supported default, so every not-an-object shape reads as {}
+  for (const skipped of [undefined, null, 'solo', ['solo'], 7]) {
+    assert.deepEqual(P.normalizeProjectDetail(skipped), {}, 'a skipped interview stores {}');
+  }
+});
+
+t('projectDetail: a stored value that has since LEFT the vocabulary never leaks out of the read surface', () => {
+  assert.deepEqual(P.projectDetail({ detail: { team_shape: 'solo' } }), { team_shape: 'solo' });
+  assert.deepEqual(P.projectDetail({ detail: { team_shape: 'guild' } }), {});
+  assert.deepEqual(P.projectDetail({}), {}, 'a row predating the migration reads as skipped');
+  assert.deepEqual(P.projectDetail(null), {});
+});
+
+t('PROJECT_DETAIL_VOCAB carries NO defaults — an unanswered question stays unanswered', () => {
+  // The deliberate asymmetry with SETTINGS_VOCAB: a setting is a policy the
+  // instance must obey, so it needs a default; a detail answer is something the
+  // owner SAID, and a default would feed R17 a recommendation nobody asked for.
+  assert.equal(P.DEFAULT_PROJECT_DETAIL, undefined, 'there is no defaults table to drift from');
+  for (const vocab of Object.values(P.PROJECT_DETAIL_VOCAB)) {
+    assert.ok(Array.isArray(vocab) && vocab.length, 'every question has a closed answer list');
+  }
+});
+
+t('publicInstance surfaces both halves, and both are legitimately empty when skipped', () => {
+  const answered = P.publicInstance({ id: 1, slug: 'mercury', description: 'A thing.', detail: { team_shape: 'solo' } });
+  assert.equal(answered.description, 'A thing.');
+  assert.deepEqual(answered.detail, { team_shape: 'solo' });
+  const skipped = P.publicInstance({ id: 2, slug: 'venus' });
+  assert.equal(skipped.description, null, 'no description is null — what keeps the project dark-matter');
+  assert.deepEqual(skipped.detail, {}, 'and a skipped interview reads as {}, never undefined');
+});
+
+await ta('createInstance: the answers ride the INSERT, and a skipped interview inserts null + {}', async () => {
+  let params = null;
+  const db = { query: async (q, p) => { params = p; return { rows: [{ id: 3 }] }; } };
+  await P.createInstance(db, {
+    ownerBuilderId: 1, slug: 'mercury', description: '  A co-op  game. ',
+    detail: { team_shape: 'community', bogus: 'x' },
+  });
+  assert.equal(params[11], 'A co-op game.', 'the description is normalized before it is stored');
+  assert.equal(params[12], JSON.stringify({ team_shape: 'community' }), 'and off-vocabulary keys never reach the column');
+  await P.createInstance(db, { ownerBuilderId: 1, slug: 'venus' });
+  assert.equal(params[11], null, 'a skipped interview stores null — not an empty string');
+  assert.equal(params[12], '{}');
+});
+
+await ta('updateInstanceDetail: detail MERGES, description REPLACES, and neither is written unasked', async () => {
+  let sql = '', params = null;
+  const db = { query: async (q, p) => { sql = q; params = p; return { rows: [{ id: 18 }] }; } };
+
+  await P.updateInstanceDetail(db, 18, { detail: { team_shape: 'small-team' } });
+  assert.ok(sql.includes('detail = detail || $2::jsonb'), 'one answer does not erase the others');
+  assert.ok(!sql.includes('description ='), 'an unsent description is left alone, never nulled');
+  assert.deepEqual(params, [18, JSON.stringify({ team_shape: 'small-team' })]);
+
+  await P.updateInstanceDetail(db, 18, { description: 'Filled in later.' });
+  assert.ok(sql.includes('description = $2'), 'the way back for a skipped step');
+  assert.ok(!sql.includes('detail = detail'), 'and it touches no answers it was not given');
+
+  // clearing is allowed and un-publishes — the honest consequence of deleting
+  // half the identity gate, not a bug to guard against
+  await P.updateInstanceDetail(db, 18, { description: null });
+  assert.deepEqual(params, [18, null]);
+});
+
 console.log(`\nprovisioning module: ${passed} passed, ${failed} failed`);
 process.exit(failed ? 1 : 0);

package/modules/ui-design/kit/fixtures/featured-hub.json

@@ -0,0 +1 @@
+{"_":"The hub's catalog (task 1003345): the landing's featured.json plus Tidewater, an all-null row nobody owns — the card-floor state opens ITS card, because Demo is owned by the signed-in stub (provisioning-instances.json) and an owned orb's plain click opens the manage view, never the card. Served under the name \"featured\" by projects.states.json's stub.fixtures alias; the landing keeps featured.json.","projects":[{"origin":"https://amazonprimea.com","name":"Off the Boats","tagline":"A singular shop, and a broader videogame in a persistent ancient Greek world that collides with modern day commerce & products.","art_url":"/assets/world/r2-chrome-blob-one.jpg","type":"game","template":"bead-wash","created_at":"2026-07-15T22:12:57.732Z","builders":11,"tags":["art-pipeline","character-anim","demo","game"],"owner":"lars589","owner_avatar":"https://avatars.githubusercontent.com/u/283020391?v=4","faces":["https://avatars.githubusercontent.com/u/283020391?v=4","https://avatars.githubusercontent.com/u/64553469?v=4","https://avatars.githubusercontent.com/u/290184380?v=4","https://avatars.githubusercontent.com/u/295990394?v=4","https://avatars.githubusercontent.com/u/35337514?v=4"],"shipped_30d":0,"shipped_30d_capped":false,"hall_origin":"https://builders.amazonprimea.com"},{"origin":"https://demo.cloudbongos.com","name":"Demo","tagline":"A live demo instance on Cloud Bongos.","art_url":null,"type":null,"template":"pair-gold-wash","created_at":"2026-07-14T19:16:38.160Z","builders":null,"tags":null,"owner":null,"owner_avatar":null,"faces":null,"shipped_30d":null,"shipped_30d_capped":null,"hall_origin":null},{"origin":"https://emersonian-circles.cloudbongos.com","name":"Emersonian Circles","tagline":"An independent project built on Cloud Bongos.","art_url":null,"type":null,"template":null,"created_at":"2026-07-25T02:21:55.641Z","builders":1,"tags":[],"owner":"lars589","owner_avatar":"https://avatars.githubusercontent.com/u/283020391?v=4","faces":[],"shipped_30d":30,"shipped_30d_capped":true,"hall_origin":null},{"origin":"https://tidewater.cloudbongos.com","name":"Tidewater","tagline":"A project that has declared nothing yet.","art_url":null,"type":null,"template":null,"created_at":"2026-07-20T08:00:00.000Z","builders":null,"tags":null,"owner":null,"owner_avatar":null,"faces":null,"shipped_30d":null,"shipped_30d_capped":null,"hall_origin":null}]}

package/modules/ui-design/kit/fixtures/provisioning-instances-empty.json

@@ -0,0 +1,4 @@
+{
+  "_": "The empty mine view (task 1003345): an owner with no projects yet. Named by a states file's stub.fixtures alias.",
+  "instances": []
+}

package/modules/ui-design/kit/fixtures/provisioning-instances.json

@@ -0,0 +1,99 @@
+{
+  "_": "The owner's projects for the kit (task 1003345): four states the mine list and the manage page render — live, standing up, snagged, torn down. Timestamps written \"$now-3m\" / \"$now-1d\" are resolved by the stub at request time so \"checked 3m ago\" stays true. Mooring (task 1003345, the grade's finding): live but unreachable since its last probe, so the restart door renders and the restart probe has a row to drive.",
+  "instances": [
+    {
+      "id": 101,
+      "slug": "demo",
+      "status": "active",
+      "domain": "demo.cloudbongos.com",
+      "target_ref": "builder/demo",
+      "hosting_shape": "co-tenant",
+      "onboard_mode": "scaffold",
+      "created_at": "2026-08-01T10:00:00.000Z",
+      "provisioned_at": "2026-08-01T10:20:00.000Z",
+      "updated_at": "$now-3m",
+      "last_verified_at": "$now-3m",
+      "last_verified_up": true,
+      "error_note": null,
+      "dns_note": null,
+      "torn_down_at": null,
+      "open_intent": null
+    },
+    {
+      "id": 102,
+      "slug": "harbor",
+      "status": "provisioning",
+      "domain": null,
+      "target_ref": "builder/harbor",
+      "hosting_shape": "standalone",
+      "onboard_mode": "scaffold",
+      "created_at": "$now-6m",
+      "provisioned_at": null,
+      "updated_at": "$now-2m",
+      "last_verified_at": null,
+      "last_verified_up": null,
+      "error_note": null,
+      "dns_note": null,
+      "torn_down_at": null,
+      "open_intent": {
+        "action": "standup",
+        "state": "running",
+        "created_at": "$now-6m"
+      }
+    },
+    {
+      "id": 103,
+      "slug": "tidepool",
+      "status": "error",
+      "domain": "tidepool.cloudbongos.com",
+      "target_ref": "builder/tidepool",
+      "hosting_shape": "co-tenant",
+      "onboard_mode": "adopt",
+      "created_at": "2026-08-20T09:00:00.000Z",
+      "provisioned_at": null,
+      "updated_at": "$now-1d",
+      "last_verified_at": null,
+      "last_verified_up": null,
+      "error_note": "The deploy could not read the repository: it is private, and the deploy key only reads public ones.",
+      "dns_note": null,
+      "torn_down_at": null,
+      "open_intent": null
+    },
+    {
+      "id": 104,
+      "slug": "old-lantern",
+      "status": "torn_down",
+      "domain": "old-lantern.cloudbongos.com",
+      "target_ref": "builder/old-lantern",
+      "hosting_shape": "co-tenant",
+      "onboard_mode": "scaffold",
+      "created_at": "2026-07-02T09:00:00.000Z",
+      "provisioned_at": "2026-07-02T09:30:00.000Z",
+      "updated_at": "2026-08-15T12:00:00.000Z",
+      "last_verified_at": "2026-08-15T11:50:00.000Z",
+      "last_verified_up": true,
+      "error_note": null,
+      "dns_note": null,
+      "torn_down_at": "2026-08-15T12:00:00.000Z",
+      "open_intent": null
+    },
+    {
+      "id": 105,
+      "slug": "mooring",
+      "status": "active",
+      "domain": "mooring.cloudbongos.com",
+      "target_ref": "builder/mooring",
+      "hosting_shape": "co-tenant",
+      "onboard_mode": "scaffold",
+      "created_at": "2026-08-10T09:00:00.000Z",
+      "provisioned_at": "2026-08-10T09:20:00.000Z",
+      "updated_at": "$now-20m",
+      "last_verified_at": "$now-20m",
+      "last_verified_up": false,
+      "error_note": null,
+      "dns_note": null,
+      "torn_down_at": null,
+      "open_intent": null
+    }
+  ]
+}

package/modules/ui-design/kit/lib.js

@@ -237,6 +237,8 @@ function reducedMotionProblems({ running = [], frames = 0 } = {}) {
 // { "page": "/projects", "surface"?: "public-landing", "stub"?: { prefix?, child? },
 //   "modes"?: ["dark" | "light", …] (the modes the page renders; default both — a page that pins
 //   one mode declares it here), "modeQuery"?: "mode" | false, "ignoreRequests"?: [regex strings], "ignoreConsole"?: [...],
+//   stub.fixtures?: { "<fixture name>": "<other fixture file>" } (serve another file under a name — an empty list, a
+//   failure shape — for the states in THIS file; task 1003345),
 //   "ignoreControls"?: [selectors], "states": { name: { url?, auth?, actions?, expect? } },
 //   "reducedMotion"?: { auth?, url?, actions? } }
 function validateStatesFile(json) {
@@ -269,10 +271,11 @@ function validateStatesFile(json) {
 }
 function validateStub(stub, at) {
   if (stub === undefined) return [];
-  if (!stub || typeof stub !== 'object' || Array.isArray(stub)) return [`${at}: an object { prefix?, child? }`];
+  if (!stub || typeof stub !== 'object' || Array.isArray(stub)) return [`${at}: an object { prefix?, child?, fixtures? }`];
   const errors = [];
   if (stub.prefix !== undefined && (typeof stub.prefix !== 'string' || !stub.prefix.startsWith('/') || !stub.prefix.endsWith('/'))) errors.push(`${at}.prefix: a URL prefix like "/builders/"`);
   if (stub.child !== undefined && typeof stub.child !== 'boolean') errors.push(`${at}.child: boolean (serve the child-instance shape)`);
+  if (stub.fixtures !== undefined && !(stub.fixtures && typeof stub.fixtures === 'object' && !Array.isArray(stub.fixtures) && Object.values(stub.fixtures).every((v) => typeof v === 'string' && /^[a-z0-9-]+$/.test(v)))) errors.push(`${at}.fixtures: an object of fixture name → the fixture file to serve under it (kebab-case names)`);
   return errors;
 }
 
@@ -339,11 +342,12 @@ function freePort() {
     s.listen(0, '127.0.0.1', () => { const p = s.address().port; s.close(() => resolve(p)); });
   });
 }
-async function startStub({ surface, auth = false, port, prefix, child = false } = {}) {
+async function startStub({ surface, auth = false, port, prefix, child = false, fixtures } = {}) {
   const p = port || await freePort();
   const env = { ...process.env, STUB_PORT: String(p), AUTH: auth ? '1' : '0', CHILD: child ? '1' : '0' };
   if (surface) env.SURFACE = surface;
   if (prefix) env.PREFIX = prefix;
+  if (fixtures) env.FIXTURE_ALIAS = JSON.stringify(fixtures);
   const proc = spawn(process.execPath, [path.join(KIT_DIR, 'serve.js')], { env, stdio: ['ignore', 'pipe', 'pipe'] });
   await new Promise((resolve, reject) => {
     let out = '';

package/modules/ui-design/kit/probe.js

@@ -52,7 +52,7 @@ async function main() {
 
   const stubs = [];
   let baseOut = lib.argOf(args, '--base-out', null), baseIn = lib.argOf(args, '--base-in', null);
-  const stubOpts = { surface, prefix: json.stub && json.stub.prefix, child: json.stub && json.stub.child };
+  const stubOpts = { surface, prefix: json.stub && json.stub.prefix, child: json.stub && json.stub.child, fixtures: json.stub && json.stub.fixtures };
   if (!baseOut) { const s = await lib.startStub({ ...stubOpts, auth: false }); stubs.push(s); baseOut = s.base; }
   if (!baseIn) { const s = await lib.startStub({ ...stubOpts, auth: true }); stubs.push(s); baseIn = s.base; }
   const stop = () => stubs.forEach((s) => s.stop());

package/modules/ui-design/kit/render.js

@@ -76,7 +76,7 @@ async function main() {
 
   const stubs = [];
   let baseOut = lib.argOf(args, '--base-out', null), baseIn = lib.argOf(args, '--base-in', null);
-  const stubOpts = { surface, prefix: json.stub && json.stub.prefix, child: json.stub && json.stub.child };
+  const stubOpts = { surface, prefix: json.stub && json.stub.prefix, child: json.stub && json.stub.child, fixtures: json.stub && json.stub.fixtures };
   if (!baseOut) { const s = await lib.startStub({ ...stubOpts, auth: false }); stubs.push(s); baseOut = s.base; }
   if (!baseIn) { const s = await lib.startStub({ ...stubOpts, auth: true }); stubs.push(s); baseIn = s.base; }
   const stop = () => stubs.forEach((s) => s.stop());

package/modules/ui-design/kit/serve.js

@@ -40,6 +40,9 @@ const AUTH = process.env.AUTH === '1';
 const CHILD = process.env.CHILD === '1';
 const LIVE = process.env.LIVE || '';
 const FAIL = new Set(String(process.env.FAIL || '').split(',').map((s) => s.trim()).filter(Boolean));
+// a states file may point a fixture NAME at another FILE (stub.fixtures, task 1003345) — the
+// way the mine view's empty state is rendered without a second stub shape
+const ALIAS = JSON.parse(process.env.FIXTURE_ALIAS || '{}');
 const FIXTURES = path.join(__dirname, 'fixtures');
 const DOCS = path.join(ROOT, 'docs');
 const TRANSFORM = path.join(ROOT, 'scripts', 'gds', 'ui-kit-transform.js');
@@ -101,11 +104,59 @@ const UNAUTH = { error: { code: 'unauthenticated', message: 'unauthenticated' }
 function json(res, status, body) { res.writeHead(status, { 'content-type': 'application/json', 'cache-control': 'no-store' }); res.end(JSON.stringify(body)); }
 function fixture(name, res, origin) {
   if (FAIL.has(name)) return json(res, 500, { error: { code: 'stub_failure', message: `FAIL=${name}` } });
-  const file = path.join(FIXTURES, name + '.json');
+  const file = path.join(FIXTURES, (ALIAS[name] || name) + '.json');
   if (!fs.existsSync(file)) return json(res, 404, { error: { code: 'no_fixture', message: name } });
   res.writeHead(200, { 'content-type': 'application/json', 'cache-control': 'no-store' });
   res.end(name === 'featured' ? JSON.stringify(featured(file, origin)) : fs.readFileSync(file));
 }
+// The owner's projects (task 1003345): the list, one project ({ instance, open_intent }: a
+// wrong id answers 404, the route's own shape), and its settings row. "$now-3m" strings are
+// resolved per request so a "live" chip reads "checked 3m ago" on every render.
+function stamp(v) {
+  if (Array.isArray(v)) return v.map(stamp);
+  if (v && typeof v === 'object') { const o = {}; for (const [k, x] of Object.entries(v)) o[k] = stamp(x); return o; }
+  const m = typeof v === 'string' && v.match(/^\$now(?:([+-]\d+)([smhd]))?$/);
+  if (!m) return v;
+  const unit = { s: 1e3, m: 6e4, h: 36e5, d: 864e5 }[m[2] || 's'];
+  return new Date(Date.now() + (m[1] ? Number(m[1]) * unit : 0)).toISOString();
+}
+// the receipt each ask gets: the message the page shows verbatim, so a probe can pin it
+const FLOW_RECEIPTS = {
+  teardown: { queued: true, message: 'Teardown queued.' },
+  restart: { queued: true, message: 'Restart queued.' },
+  domain: { recorded: true, queued: true, message: 'Address recorded.' },
+  provision: { queued: true, message: 'Queued. The platform picks it up from here.' },
+  settings: { settings: { platform_visibility: 'public', joinability: 'open' }, push: { queued: true, message: 'Saved. The project restarts to apply it.' } },
+};
+// a teardown or restart ask is REMEMBERED for the run: the page re-reads the project right
+// after a receipt (doDelete → loadManage), and what it must then see is the queued intent —
+// the same open_intent shape the route stamps — not the untouched fixture row
+const ASKED = new Map();
+function flowReceipt(rest, method) {
+  if (method === 'POST' && rest === '/provisioning/instances') return FLOW_RECEIPTS.provision;
+  const m = rest.match(/^\/provisioning\/instances\/(\d+)\/(teardown|restart|domain|settings)$/);
+  if (!m) return null;
+  if (m[2] === 'settings') return method === 'PATCH' ? FLOW_RECEIPTS.settings : null;
+  if (method !== 'POST') return null;
+  if (m[2] === 'teardown' || m[2] === 'restart') ASKED.set(m[1], m[2]);
+  return FLOW_RECEIPTS[m[2]];
+}
+function withAsk(inst) {
+  const action = ASKED.get(String(inst.id));
+  return action ? { ...inst, open_intent: { action, state: 'queued', created_at: '$now' } } : inst;
+}
+function instances(res, id, settings) {
+  const name = 'provisioning-instances';
+  if (FAIL.has(name)) return json(res, 500, { error: { code: 'stub_failure', message: `FAIL=${name}` } });
+  const file = path.join(FIXTURES, (ALIAS[name] || name) + '.json');
+  if (!fs.existsSync(file)) return json(res, 404, { error: { code: 'no_fixture', message: name } });
+  const list = stamp((JSON.parse(fs.readFileSync(file, 'utf8')).instances || []).map(withAsk));
+  if (id === null) return json(res, 200, { instances: list });
+  const inst = list.find((i) => String(i.id) === String(id));
+  if (!inst) return json(res, 404, { error: { code: 'not_found', message: 'no such instance' } });
+  if (settings) return json(res, 200, { settings: { platform_visibility: 'public', joinability: 'open' }, options: { platform_visibility: ['public', 'gated'], joinability: ['open', 'apply', 'invite_only'] } });
+  return json(res, 200, { instance: inst, open_intent: inst.open_intent || null });
+}
 // A project's art in the featured fixture may be root-relative (the surface's
 // own /assets/…, served by this stub) — the page accepts only an http(s) art
 // URL, so it is absolutised to this origin per request, as the builder's
@@ -156,7 +207,17 @@ const server = http.createServer((req, res) => {
     if (FEEDS[rest]) return LIVE ? proxy(req, res) : fixture(FEEDS[rest], res, origin);
     if (rest === '/me') return AUTH ? json(res, 200, me(origin)) : json(res, 401, UNAUTH);
     if (AUTHED[rest]) return AUTH ? fixture(AUTHED[rest], res) : json(res, 401, UNAUTH);
-    if (rest === '/provisioning/instances') return AUTH ? json(res, 200, { instances: [] }) : json(res, 401, UNAUTH);
+    if (rest === '/provisioning/instances' && req.method === 'GET') return AUTH ? instances(res, null, false) : json(res, 401, UNAUTH);
+    const one = rest.match(/^\/provisioning\/instances\/(\d+)(\/settings)?$/);
+    if (one && req.method === 'GET') return AUTH ? instances(res, one[1], !!one[2]) : json(res, 401, UNAUTH);
+    // the manage flows (task 1003345): every door on a row and on the manage page only ASKS
+    // (ADR 0111) — the stub answers each ask with the route's receipt so the probes can drive
+    // attach / restart / teardown / revive / join end to end; nothing changes in the fixture
+    if (req.method !== 'GET') {
+      const flow = flowReceipt(rest, req.method);
+      if (flow) return AUTH ? json(res, 200, flow) : json(res, 401, UNAUTH);
+    }
+    if (rest.startsWith('/github/repo')) return AUTH ? json(res, 200, { repo: { private: false, admin: true } }) : json(res, 401, UNAUTH);
     if (rest === '/auth/logout') return json(res, 200, { ok: true });
     if (rest.startsWith('/auth/web/start')) { res.writeHead(302, { location: PREFIX }); return res.end(); }
     if (rest === '/instance') { const b = pages.size ? pages.values().next().value.brand : {}; return json(res, 200, { brand: { productName: (b && b.productName) || '', project: {} }, modules: {} }); }

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.419",
+  "version": "1.19.421",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.419",
+      "version": "1.19.421",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.419",
+  "version": "1.19.421",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",