@bongos/core 1.19.429 → 1.19.430

package/modules/provisioning/provisioning.js

@@ -124,6 +124,26 @@ const SETTINGS_VOCAB = Object.freeze({
 });
 const DEFAULT_SETTINGS = Object.freeze({ platform_visibility: 'public', joinability: 'apply' });
 
+// The project's PLANET (task 1003347, direction record §16): how the platform
+// DRAWS it on the sky, in the owner's list and on the card — its template
+// (shape × material × style, the thirty-six names platform-identity's
+// PROJECT_TEMPLATES pins; mirrored here so provisioning never imports the hub's
+// module, the PROJECT_TYPES precedent) and its accent (one of the world's five
+// TOKEN NAMES — a name, never a colour: the Fifteen Rule). Stored in the same
+// jsonb `settings` column, but deliberately NOT in SETTINGS_VOCAB: a setting is a
+// policy the instance obeys (it rides web.env and a restart applies it); the
+// planet is the platform's to draw, so it has no default (null = the platform's
+// own pick: a curated template, else the walk), never rides the env transport,
+// and never restarts anything.
+const PLANET_SHAPES = ['blob', 'pair', 'bead'];
+const PLANET_MATERIALS = ['frost', 'gold', 'obsidian'];
+const PLANET_TEMPLATES = Object.freeze([
+  ...PLANET_SHAPES.flatMap((s) => ['tint', 'wash', 'chrome'].map((y) => `${s}-${y}`)),
+  ...PLANET_SHAPES.flatMap((s) => PLANET_MATERIALS.flatMap((m) => ['tint', 'wash', 'plain'].map((y) => `${s}-${m}-${y}`))),
+]);
+const PLANET_ACCENTS = Object.freeze(['sea', 'terracotta', 'gold-soft', 'sun-lit', 'accent']);
+const PLANET_VOCAB = Object.freeze({ planet_template: PLANET_TEMPLATES, planet_accent: PLANET_ACCENTS });
+
 // The optional project-detail interview (BV1.R15, task 1002334) — the "tell us
 // about your project" step every creation form offers and every owner may skip.
 // The interview asks two things, and the vocabulary is the contract for the
@@ -285,6 +305,10 @@ function publicInstance(row) {
     // instances so a declaration shows before the catalog carries it. Nullable:
     // rows predating provisioning_007, or a declined answer, project null.
     type: row.type || null,
+    // The owner's planet (task 1003347): how the platform draws this project —
+    // null = the platform's own pick. Public by nature (the sky shows it), so
+    // the list and the manage page read it off the row, no second read.
+    ...planetChoice(row),
     // The optional project-detail interview (task 1002334): what the owner said
     // they are building, and the answers that feed R17's recommendations. Both
     // are legitimately empty — the step is skippable by design — and `description`
@@ -366,6 +390,18 @@ function effectiveSettings(row) {
   return out;
 }
 
+// The owner's planet choice as READ (task 1003347): each key its stored
+// on-vocabulary value or null — unset, or a name that has since left the
+// vocabulary, which never leaks. PURE; the shape is constant so a wire never
+// drops a key.
+function planetChoice(row) {
+  const stored = row && row.settings && typeof row.settings === 'object' && !Array.isArray(row.settings)
+    ? row.settings : {};
+  const out = {};
+  for (const [key, vocab] of Object.entries(PLANET_VOCAB)) out[key] = vocab.includes(stored[key]) ? stored[key] : null;
+  return out;
+}
+
 // A description as it may be STORED: trimmed, collapsed of runaway whitespace,
 // capped, and empty-means-absent. Returns null for anything that isn't real prose,
 // because null is what leaves the project dark-matter — an empty string stored in a
@@ -1033,6 +1069,30 @@ async function instanceStateForSlug(db, slug) {
   };
 }
 
+// The `provisioning.projectPlanets` port (task 1003347): the owners' planet
+// choices for a set of HOSTS (the catalog's origins, host-matched — the join the
+// hub's sky makes), so platform-identity's public featured feed can carry them
+// without importing this module. The newest row per host wins; a host with no
+// row, or no choice, is absent. Read-only.
+async function planetChoicesForHosts(db, hosts) {
+  const wanted = [...new Set((hosts || []).map((h) => String(h || '').toLowerCase()).filter(Boolean))];
+  if (!wanted.length) return {};
+  const { rows } = await db.query(
+    `SELECT lower(domain) AS host, settings
+       FROM provisioning_instances
+      WHERE domain IS NOT NULL AND lower(domain) = ANY($1)
+      ORDER BY updated_at DESC`,
+    [wanted],
+  );
+  const out = {};
+  for (const r of rows) {
+    if (out[r.host]) continue;
+    const choice = planetChoice(r);
+    if (choice.planet_template || choice.planet_accent) out[r.host] = choice;
+  }
+  return out;
+}
+
 // Fleet cost ledger (Archon): per-instance monthly estimate + a total, over the
 // instances that still cost something (not torn_down). VISIBILITY only (ADR 0111 §6).
 async function costLedger(db, { limit = 500 } = {}) {
@@ -1066,9 +1126,10 @@ module.exports = {
   RESTART_FROM, RESTART_SHAPES,
   TIER_MONTHLY_USD, CERT_ELIGIBLE_STATES,
   SETTINGS_VOCAB, DEFAULT_SETTINGS, PROJECT_DETAIL_VOCAB, DESCRIPTION_MAX,
+  PLANET_TEMPLATES, PLANET_ACCENTS, PLANET_VOCAB,
   // pure
   isValidSlug, costEstimateUsd, publicInstance, normalizeHostname,
-  defaultDomainForSlug, isReservedHostname, effectiveSettings,
+  defaultDomainForSlug, isReservedHostname, effectiveSettings, planetChoice,
   normalizeDescription, normalizeProjectDetail, projectDetail,
   // pure — GitHub App Manifest flow (task 2080)
   githubAppName, buildGithubAppManifest, manifestPostUrl, publicGithubApp,
@@ -1080,7 +1141,7 @@ module.exports = {
   createInstance, setInstanceStatus, updateInstanceDomain, updateInstanceSettings, updateInstanceDetail,
   createInstance, setInstanceStatus, updateInstanceDomain, clearReleasedDomains, updateInstanceSettings,
   enqueueIntent, enqueueTeardown, enqueueSettingsApply, enqueueRestart, getOpenIntent, claimNextIntent, resolveIntent,
-  recordEvent, instanceStateForSlug, costLedger,
+  recordEvent, instanceStateForSlug, planetChoicesForHosts, costLedger,
   // data access — GitHub App Manifest attempts (task 2080)
   createOAuthManifest, getOAuthManifestByState, attachManifestCode,
   getLatestOAuthManifestForInstance, claimNextOAuthManifest, resolveOAuthManifest,

package/modules/provisioning/routes/provisioning.js

@@ -253,9 +253,13 @@ function callbackPage({ ok, title, body, state, domain }) {
 //   • PROVIDES port `provisioning.instanceState` (slug) → { status, … } | null.
 //     Lets other code read an instance's provisioning status via
 //     resolveOptional without importing this module (box.hasEverConnected pattern).
+//   • PROVIDES port `provisioning.projectPlanets` (hosts[]) → { host: { planet_template,
+//     planet_accent } } — the owners' planet choices (task 1003347), so the hub's
+//     public featured feed can carry them without importing this module.
 function registerProvisioningSeams() {
   if (api.hasProvider('provisioning.instanceState')) return;
   api.registerProvider('provisioning.instanceState', (slug) => provisioning.instanceStateForSlug(pool, slug));
+  api.registerProvider('provisioning.projectPlanets', (hosts) => provisioning.planetChoicesForHosts(pool, hosts));
 }
 
 // Project an instance row for the fleet view — the owner identity + the same
@@ -764,7 +768,10 @@ module.exports = function provisioningRoutes() {
     try {
       const inst = await provisioning.getInstanceById(pool, id);
       if (instanceAccessDenied(inst, req.builder)) return res.fail('instance_not_found', 404);
-      res.json({ ok: true, settings: provisioning.effectiveSettings(inst), options: provisioning.SETTINGS_VOCAB });
+      // `planet` rides beside `settings` (task 1003347): the same row, read by a
+      // different rule — no defaults, null = the platform's own pick.
+      res.json({ ok: true, settings: provisioning.effectiveSettings(inst), planet: provisioning.planetChoice(inst),
+        options: { ...provisioning.SETTINGS_VOCAB, ...provisioning.PLANET_VOCAB } });
     } catch (err) {
       log.error('[provisioning] GET /provisioning/instances/:id/settings', err);
       res.fail('settings_read_failed', { status: 500, message: 'internal error' });
@@ -792,14 +799,18 @@ module.exports = function provisioningRoutes() {
     if (validateOrRespond(req, res, {
       platform_visibility: { type: 'string', enum: provisioning.SETTINGS_VOCAB.platform_visibility },
       joinability: { type: 'string', enum: provisioning.SETTINGS_VOCAB.joinability },
+      // the planet (task 1003347): nullable on purpose — null hands the pick back to the platform
+      planet_template: { type: 'string', enum: provisioning.PLANET_VOCAB.planet_template },
+      planet_accent: { type: 'string', enum: provisioning.PLANET_VOCAB.planet_accent },
     })) return;
+    const settingKeys = [...Object.keys(provisioning.SETTINGS_VOCAB), ...Object.keys(provisioning.PLANET_VOCAB)];
     const patch = {};
-    for (const key of Object.keys(provisioning.SETTINGS_VOCAB)) {
+    for (const key of settingKeys) {
       if ((req.body || {})[key] !== undefined) patch[key] = req.body[key];
     }
     if (!Object.keys(patch).length) {
       return res.fail('bad_settings', { status: 400,
-        message: `The body carries no settings to change — send any of: ${Object.keys(provisioning.SETTINGS_VOCAB).join(', ')}.` });
+        message: `The body carries no settings to change — send any of: ${settingKeys.join(', ')}.` });
     }
     try {
       const inst = await provisioning.getInstanceById(pool, id);
@@ -811,8 +822,17 @@ module.exports = function provisioningRoutes() {
       // whole-form save or a retried request must not bounce a live project. The
       // one exception is the owner re-kick (the domain route's F19 shape): the same
       // values re-sent while a retired push left its error_note re-queue the push.
-      const before = provisioning.effectiveSettings(inst);
+      const before = { ...provisioning.effectiveSettings(inst), ...provisioning.planetChoice(inst) };
       const changed = Object.entries(patch).some(([k, v]) => before[k] !== v);
+      // The planet is the platform's to draw (task 1003347): a change to it
+      // alone is applied the moment it is read back — the sky, the list and the
+      // card repaint from the row — so it queues no push and restarts nothing.
+      // Only a POLICY key (SETTINGS_VOCAB) reaches the instance, and only a
+      // policy key re-sent over a retired push's error_note re-kicks that push.
+      const policyKeys = Object.keys(provisioning.SETTINGS_VOCAB);
+      const policyTouched = policyKeys.some((k) => patch[k] !== undefined);
+      const policyChanged = policyKeys.some((k) => patch[k] !== undefined && before[k] !== patch[k]);
+      const policyResent = !!inst.error_note && policyTouched;
       const updated = changed ? await provisioning.updateInstanceSettings(pool, id, patch) : inst;
       if (changed) {
         await provisioning.recordEvent(pool, {
@@ -834,8 +854,10 @@ module.exports = function provisioningRoutes() {
       const reachable = provisioning.SETTINGS_APPLY_SHAPES.has(inst.hosting_shape);
       const receipt = (fields) => ({ reachable, ...fields });
       let push;
-      if (!changed && !inst.error_note) {
+      if (!changed && !policyResent) {
         push = receipt({ queued: false, restart: false, message: 'No change — this project already has these settings.' });
+      } else if (!policyChanged && !policyResent) {
+        push = receipt({ queued: false, restart: false, message: 'Saved. The sky, your list and the card draw it this way from here; nothing on your project restarts for it.' });
       } else if (!provisioning.SETTINGS_APPLY_FROM.has(inst.status)) {
         const offline = inst.status === 'torn_down' || inst.status === 'tearing_down';
         push = receipt({ queued: false, restart: false, message: offline
@@ -867,7 +889,7 @@ module.exports = function provisioningRoutes() {
             : 'Saved. A restart is already queued for this project and will carry this change.' });
         }
       }
-      res.json({ ok: true, saved: provisioning.effectiveSettings(updated), push });
+      res.json({ ok: true, saved: provisioning.effectiveSettings(updated), planet: provisioning.planetChoice(updated), push });
     } catch (err) {
       log.error('[provisioning] PATCH /provisioning/instances/:id/settings', err);
       res.fail('settings_update_failed', { status: 500, message: 'internal error' });

package/modules/provisioning/tests/provisioning.mjs

@@ -330,6 +330,40 @@ t('projectDetail: a stored value that has since LEFT the vocabulary never leaks
   assert.deepEqual(P.projectDetail(null), {});
 });
 
+t('the planet (task 1003347): PLANET_TEMPLATES mirrors platform-identity\'s PROJECT_TEMPLATES name for name; the accents are the world\'s five token names', () => {
+  const pi = require('../../platform-identity/platform-identity.js');
+  assert.deepEqual([...P.PLANET_TEMPLATES], [...pi.PROJECT_TEMPLATES], 'the two modules never import each other — the mirror is pinned instead (the PROJECT_TYPES precedent)');
+  assert.equal(P.PLANET_TEMPLATES.length, 36);
+  assert.deepEqual([...P.PLANET_ACCENTS], ['sea', 'terracotta', 'gold-soft', 'sun-lit', 'accent']);
+  for (const a of P.PLANET_ACCENTS) assert.doesNotMatch(a, /^#|rgb|hsl/, 'a name, never a colour (the Fifteen Rule)');
+  assert.deepEqual(Object.keys(P.PLANET_VOCAB), ['planet_template', 'planet_accent']);
+  // the deliberate asymmetry: the planet is NOT a setting — no default, never in SETTINGS_VOCAB
+  for (const k of Object.keys(P.PLANET_VOCAB)) {
+    assert.ok(!(k in P.SETTINGS_VOCAB), `${k} is not a policy the instance obeys`);
+    assert.ok(!(k in P.DEFAULT_SETTINGS), `${k} has no default — null is the platform's own pick`);
+  }
+});
+
+t('planetChoice: null for a bare row or an unset key; a stored on-vocabulary value reads back; junk reads null, never leaks', () => {
+  assert.deepEqual(P.planetChoice(null), { planet_template: null, planet_accent: null });
+  assert.deepEqual(P.planetChoice({}), { planet_template: null, planet_accent: null });
+  assert.deepEqual(P.planetChoice({ settings: { platform_visibility: 'gated' } }), { planet_template: null, planet_accent: null });
+  assert.deepEqual(P.planetChoice({ settings: { planet_template: 'pair-frost-tint', planet_accent: 'sun-lit' } }), { planet_template: 'pair-frost-tint', planet_accent: 'sun-lit' });
+  assert.deepEqual(P.planetChoice({ settings: { planet_template: 'cube', planet_accent: '#fff' } }), { planet_template: null, planet_accent: null });
+  assert.deepEqual(P.planetChoice({ settings: ['nope'] }), { planet_template: null, planet_accent: null });
+});
+
+t('publicInstance carries the planet — both keys, null when unset — so the list and the manage page read it off the row', () => {
+  const chosen = P.publicInstance({ id: 1, slug: 'x', status: 'active', settings: { planet_template: 'bead-gold-tint', planet_accent: 'sea' } });
+  assert.equal(chosen.planet_template, 'bead-gold-tint');
+  assert.equal(chosen.planet_accent, 'sea');
+  const unset = P.publicInstance({ id: 2, slug: 'y', status: 'active' });
+  assert.ok('planet_template' in unset && 'planet_accent' in unset, 'the keys are always present');
+  assert.equal(unset.planet_template, null);
+  assert.equal(unset.planet_accent, null);
+  assert.ok(!('settings' in unset), 'the raw jsonb never rides the projection');
+});
+
 t('PROJECT_DETAIL_VOCAB carries NO defaults — an unanswered question stays unanswered', () => {
   // The deliberate asymmetry with SETTINGS_VOCAB: a setting is a policy the
   // instance must obey, so it needs a default; a detail answer is something the

package/modules/ui-design/kit/fixtures/featured-hub.json

@@ -1 +1 @@
-{"_":"The hub's catalog (task 1003345): the landing's featured.json plus Tidewater, an all-null row nobody owns — the card-floor state opens ITS card, because Demo is owned by the signed-in stub (provisioning-instances.json) and an owned orb's plain click opens the manage view, never the card. Served under the name \"featured\" by projects.states.json's stub.fixtures alias; the landing keeps featured.json.","projects":[{"origin":"https://amazonprimea.com","name":"Off the Boats","tagline":"A singular shop, and a broader videogame in a persistent ancient Greek world that collides with modern day commerce & products.","art_url":"/assets/world/r2-chrome-blob-one.jpg","type":"game","template":"bead-wash","created_at":"2026-07-15T22:12:57.732Z","builders":11,"tags":["art-pipeline","character-anim","demo","game"],"owner":"lars589","owner_avatar":"https://avatars.githubusercontent.com/u/283020391?v=4","faces":["https://avatars.githubusercontent.com/u/283020391?v=4","https://avatars.githubusercontent.com/u/64553469?v=4","https://avatars.githubusercontent.com/u/290184380?v=4","https://avatars.githubusercontent.com/u/295990394?v=4","https://avatars.githubusercontent.com/u/35337514?v=4"],"shipped_30d":0,"shipped_30d_capped":false,"hall_origin":"https://builders.amazonprimea.com"},{"origin":"https://demo.cloudbongos.com","name":"Demo","tagline":"A live demo instance on Cloud Bongos.","art_url":null,"type":null,"template":"pair-gold-wash","created_at":"2026-07-14T19:16:38.160Z","builders":null,"tags":null,"owner":null,"owner_avatar":null,"faces":null,"shipped_30d":null,"shipped_30d_capped":null,"hall_origin":null},{"origin":"https://emersonian-circles.cloudbongos.com","name":"Emersonian Circles","tagline":"An independent project built on Cloud Bongos.","art_url":null,"type":null,"template":null,"created_at":"2026-07-25T02:21:55.641Z","builders":1,"tags":[],"owner":"lars589","owner_avatar":"https://avatars.githubusercontent.com/u/283020391?v=4","faces":[],"shipped_30d":30,"shipped_30d_capped":true,"hall_origin":null},{"origin":"https://tidewater.cloudbongos.com","name":"Tidewater","tagline":"A project that has declared nothing yet.","art_url":null,"type":null,"template":null,"created_at":"2026-07-20T08:00:00.000Z","builders":null,"tags":null,"owner":null,"owner_avatar":null,"faces":null,"shipped_30d":null,"shipped_30d_capped":null,"hall_origin":null}]}
+{"_":"The hub's catalog (task 1003345): the landing's featured.json plus Tidewater, an all-null row nobody owns — the card-floor state opens ITS card, because Demo is owned by the signed-in stub (provisioning-instances.json) and an owned orb's plain click opens the manage view, never the card. Served under the name \"featured\" by projects.states.json's stub.fixtures alias; the landing keeps featured.json.","projects":[{"origin":"https://amazonprimea.com","name":"Off the Boats","tagline":"A singular shop, and a broader videogame in a persistent ancient Greek world that collides with modern day commerce & products.","art_url":"/assets/world/r2-chrome-blob-one.jpg","type":"game","template":"bead-wash","planet_template":null,"planet_accent":null,"created_at":"2026-07-15T22:12:57.732Z","builders":11,"tags":["art-pipeline","character-anim","demo","game"],"owner":"lars589","owner_avatar":"https://avatars.githubusercontent.com/u/283020391?v=4","faces":["https://avatars.githubusercontent.com/u/283020391?v=4","https://avatars.githubusercontent.com/u/64553469?v=4","https://avatars.githubusercontent.com/u/290184380?v=4","https://avatars.githubusercontent.com/u/295990394?v=4","https://avatars.githubusercontent.com/u/35337514?v=4"],"shipped_30d":0,"shipped_30d_capped":false,"hall_origin":"https://builders.amazonprimea.com"},{"origin":"https://demo.cloudbongos.com","name":"Demo","tagline":"A live demo instance on Cloud Bongos.","art_url":null,"type":null,"template":"pair-gold-wash","planet_template":"pair-obsidian-tint","planet_accent":"sea","created_at":"2026-07-14T19:16:38.160Z","builders":null,"tags":null,"owner":null,"owner_avatar":null,"faces":null,"shipped_30d":null,"shipped_30d_capped":null,"hall_origin":null},{"origin":"https://emersonian-circles.cloudbongos.com","name":"Emersonian Circles","tagline":"An independent project built on Cloud Bongos.","art_url":null,"type":null,"template":null,"planet_template":null,"planet_accent":null,"created_at":"2026-07-25T02:21:55.641Z","builders":1,"tags":[],"owner":"lars589","owner_avatar":"https://avatars.githubusercontent.com/u/283020391?v=4","faces":[],"shipped_30d":30,"shipped_30d_capped":true,"hall_origin":null},{"origin":"https://tidewater.cloudbongos.com","name":"Tidewater","tagline":"A project that has declared nothing yet.","art_url":null,"type":null,"template":null,"planet_template":null,"planet_accent":null,"created_at":"2026-07-20T08:00:00.000Z","builders":null,"tags":null,"owner":null,"owner_avatar":null,"faces":null,"shipped_30d":null,"shipped_30d_capped":null,"hall_origin":null}]}

package/modules/ui-design/kit/fixtures/featured.json

@@ -1 +1 @@
-{"projects":[{"origin":"https://amazonprimea.com","name":"Off the Boats","tagline":"A singular shop, and a broader videogame in a persistent ancient Greek world that collides with modern day commerce & products.","art_url":"/assets/world/r2-chrome-blob-one.jpg","type":"game","template":"bead-wash","created_at":"2026-07-15T22:12:57.732Z","builders":11,"tags":["art-pipeline","character-anim","demo","game"],"owner":"lars589","owner_avatar":"https://avatars.githubusercontent.com/u/283020391?v=4","faces":["https://avatars.githubusercontent.com/u/283020391?v=4","https://avatars.githubusercontent.com/u/64553469?v=4","https://avatars.githubusercontent.com/u/290184380?v=4","https://avatars.githubusercontent.com/u/295990394?v=4","https://avatars.githubusercontent.com/u/35337514?v=4"],"shipped_30d":0,"shipped_30d_capped":false,"hall_origin":"https://builders.amazonprimea.com"},{"origin":"https://demo.cloudbongos.com","name":"Demo","tagline":"A live demo instance on Cloud Bongos.","art_url":null,"type":null,"template":"pair-gold-wash","created_at":"2026-07-14T19:16:38.160Z","builders":null,"tags":null,"owner":null,"owner_avatar":null,"faces":null,"shipped_30d":null,"shipped_30d_capped":null,"hall_origin":null},{"origin":"https://emersonian-circles.cloudbongos.com","name":"Emersonian Circles","tagline":"An independent project built on Cloud Bongos.","art_url":null,"type":null,"template":null,"created_at":"2026-07-25T02:21:55.641Z","builders":1,"tags":[],"owner":"lars589","owner_avatar":"https://avatars.githubusercontent.com/u/283020391?v=4","faces":[],"shipped_30d":30,"shipped_30d_capped":true,"hall_origin":null}]}
+{"projects":[{"origin":"https://amazonprimea.com","name":"Off the Boats","tagline":"A singular shop, and a broader videogame in a persistent ancient Greek world that collides with modern day commerce & products.","art_url":"/assets/world/r2-chrome-blob-one.jpg","type":"game","template":"bead-wash","planet_template":null,"planet_accent":null,"created_at":"2026-07-15T22:12:57.732Z","builders":11,"tags":["art-pipeline","character-anim","demo","game"],"owner":"lars589","owner_avatar":"https://avatars.githubusercontent.com/u/283020391?v=4","faces":["https://avatars.githubusercontent.com/u/283020391?v=4","https://avatars.githubusercontent.com/u/64553469?v=4","https://avatars.githubusercontent.com/u/290184380?v=4","https://avatars.githubusercontent.com/u/295990394?v=4","https://avatars.githubusercontent.com/u/35337514?v=4"],"shipped_30d":0,"shipped_30d_capped":false,"hall_origin":"https://builders.amazonprimea.com"},{"origin":"https://demo.cloudbongos.com","name":"Demo","tagline":"A live demo instance on Cloud Bongos.","art_url":null,"type":null,"template":"pair-gold-wash","planet_template":"pair-obsidian-tint","planet_accent":"sea","created_at":"2026-07-14T19:16:38.160Z","builders":null,"tags":null,"owner":null,"owner_avatar":null,"faces":null,"shipped_30d":null,"shipped_30d_capped":null,"hall_origin":null},{"origin":"https://emersonian-circles.cloudbongos.com","name":"Emersonian Circles","tagline":"An independent project built on Cloud Bongos.","art_url":null,"type":null,"template":null,"planet_template":null,"planet_accent":null,"created_at":"2026-07-25T02:21:55.641Z","builders":1,"tags":[],"owner":"lars589","owner_avatar":"https://avatars.githubusercontent.com/u/283020391?v=4","faces":[],"shipped_30d":30,"shipped_30d_capped":true,"hall_origin":null}]}

package/modules/ui-design/kit/fixtures/provisioning-instances.json

@@ -22,7 +22,7 @@
     {
       "id": 102,
       "slug": "harbor",
-      "status": "provisioning",
+      "status": "provisioning", "planet_template": "blob-frost-tint", "planet_accent": "sun-lit",
       "domain": null,
       "target_ref": "builder/harbor",
       "hosting_shape": "standalone",

package/modules/ui-design/kit/serve.js

@@ -133,11 +133,33 @@ const FLOW_RECEIPTS = {
 // after a receipt (doDelete → loadManage), and what it must then see is the queued intent —
 // the same open_intent shape the route stamps — not the untouched fixture row
 const ASKED = new Map();
+// the planet picker (task 1003347): a settings PATCH that carries planet_* is REMEMBERED for
+// the run — the page repaints from the row it re-reads, so the row must carry the choice; a
+// PATCH with only planet keys gets the route's no-restart receipt, a policy key the push
+const PLANETS = new Map();
+const PLANET_KEYS = ['planet_template', 'planet_accent'];
+const NO_PLANET = { planet_template: null, planet_accent: null };
+function readBody(req, cb) {
+  let d = '';
+  req.on('data', (c) => { d += c; });
+  req.on('end', () => { let b = {}; try { b = JSON.parse(d || '{}'); } catch { b = {}; } cb(b); });
+}
+function settingsPatch(res, id, body) {
+  if (PLANET_KEYS.some((k) => k in body)) PLANETS.set(String(id), { planet_template: body.planet_template || null, planet_accent: body.planet_accent || null });
+  const policy = ['platform_visibility', 'joinability'].some((k) => k in body);
+  const push = policy ? FLOW_RECEIPTS.settings.push
+    : { queued: false, restart: false, message: 'Saved. The sky, your list and the card draw it this way from here; nothing on your project restarts for it.' };
+  return json(res, 200, { ok: true, saved: FLOW_RECEIPTS.settings.settings, planet: PLANETS.get(String(id)) || NO_PLANET, push });
+}
+// the row carries its planet: a saved pick for the run, else the fixture's own (or null)
+function withPlanet(inst) {
+  const saved = PLANETS.get(String(inst.id));
+  return { ...inst, planet_template: inst.planet_template || null, planet_accent: inst.planet_accent || null, ...(saved || {}) };
+}
 function flowReceipt(rest, method) {
   if (method === 'POST' && rest === '/provisioning/instances') return FLOW_RECEIPTS.provision;
-  const m = rest.match(/^\/provisioning\/instances\/(\d+)\/(teardown|restart|domain|settings)$/);
+  const m = rest.match(/^\/provisioning\/instances\/(\d+)\/(teardown|restart|domain)$/);
   if (!m) return null;
-  if (m[2] === 'settings') return method === 'PATCH' ? FLOW_RECEIPTS.settings : null;
   if (method !== 'POST') return null;
   if (m[2] === 'teardown' || m[2] === 'restart') ASKED.set(m[1], m[2]);
   return FLOW_RECEIPTS[m[2]];
@@ -151,11 +173,11 @@ function instances(res, id, settings) {
   if (FAIL.has(name)) return json(res, 500, { error: { code: 'stub_failure', message: `FAIL=${name}` } });
   const file = path.join(FIXTURES, (ALIAS[name] || name) + '.json');
   if (!fs.existsSync(file)) return json(res, 404, { error: { code: 'no_fixture', message: name } });
-  const list = stamp((JSON.parse(fs.readFileSync(file, 'utf8')).instances || []).map(withAsk));
+  const list = stamp((JSON.parse(fs.readFileSync(file, 'utf8')).instances || []).map(withAsk).map(withPlanet));
   if (id === null) return json(res, 200, { instances: list });
   const inst = list.find((i) => String(i.id) === String(id));
   if (!inst) return json(res, 404, { error: { code: 'not_found', message: 'no such instance' } });
-  if (settings) return json(res, 200, { settings: { platform_visibility: 'public', joinability: 'open' }, options: { platform_visibility: ['public', 'gated'], joinability: ['open', 'apply', 'invite_only'] } });
+  if (settings) return json(res, 200, { settings: { platform_visibility: 'public', joinability: 'open' }, planet: PLANETS.get(String(id)) || NO_PLANET, options: { platform_visibility: ['public', 'gated'], joinability: ['open', 'apply', 'invite_only'] } });
   return json(res, 200, { instance: inst, open_intent: inst.open_intent || null });
 }
 // A project's art in the featured fixture may be root-relative (the surface's
@@ -215,6 +237,8 @@ const server = http.createServer((req, res) => {
     // (ADR 0111) — the stub answers each ask with the route's receipt so the probes can drive
     // attach / restart / teardown / revive / join end to end; nothing changes in the fixture
     if (req.method !== 'GET') {
+      const ps = rest.match(/^\/provisioning\/instances\/(\d+)\/settings$/);
+      if (ps && req.method === 'PATCH') return AUTH ? readBody(req, (body) => settingsPatch(res, ps[1], body)) : json(res, 401, UNAUTH);
       const flow = flowReceipt(rest, req.method);
       if (flow) return AUTH ? json(res, 200, flow) : json(res, 401, UNAUTH);
     }

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.429",
+  "version": "1.19.430",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.429",
+      "version": "1.19.430",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.429",
+  "version": "1.19.430",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/public-landing/assets/cosmos.css

@@ -1357,6 +1357,29 @@ p.sec-p{font-size:var(--fs-lede);font-weight:500;color:var(--ink-soft);line-heig
 #view-manage .visOpt:has(input:checked) b::before{background:var(--accent);border-color:var(--accent);outline:4px solid color-mix(in srgb,var(--accent) 22%,transparent);}
 #view-manage .visOpt:focus-within{outline:2px solid var(--accent);outline-offset:3px;}
 #view-manage #mVisRuns b,#view-manage #mJoinRuns b{color:var(--ok);font-weight:500;}
+/* ── its planet (task 1003347; direction record §16, v1 the bands): the preview
+   planet left; four bands right — shape · material · style as hairline cells of
+   one band, a word each, the chosen one carrying the dot; the colour as five
+   swatches, the chosen one ringed by a hairline of the ink. The cells outrank
+   the section's generic radiogroup rule by their class. ── */
+#view-manage .pick{display:grid;grid-template-columns:168px 1fr;gap:0 34px;align-items:start;}
+#view-manage .pickPreview{display:grid;gap:12px;justify-items:center;padding-top:6px;}
+#view-manage .pickWords{margin:0;font-size:14px;font-weight:400;line-height:1.45;color:var(--ink);text-align:center;max-width:168px;}
+#view-manage .pickWords small{display:block;font-size:12.5px;color:var(--ink-soft);}
+#view-manage .pickBands{display:grid;border-bottom:1px solid var(--rule);}
+#view-manage .pickBand{display:grid;grid-template-columns:88px 1fr;gap:0 18px;align-items:center;border-top:1px solid var(--rule);}
+#view-manage .pickLabel{font-family:var(--label-face);font-size:var(--label-size);letter-spacing:var(--label-space);text-transform:uppercase;color:var(--ink-faint);padding:14px 0;}
+#view-manage .pickCells[role="radiogroup"]{display:grid;grid-template-columns:none;grid-auto-flow:column;grid-auto-columns:1fr;border:0;}
+#view-manage .pickCell{position:relative;display:flex;align-items:center;gap:10px;min-height:48px;margin:0;padding:10px 16px;border:0;border-left:1px solid var(--rule-soft);border-radius:0;cursor:pointer;font-family:var(--font-body);font-weight:400;font-size:14.5px;color:var(--ink-soft);}
+#view-manage .pickCell::before{content:"";width:7px;height:7px;border-radius:50%;border:1px solid var(--rule);background:var(--bg);flex:none;}
+#view-manage .pickCell:hover,#view-manage .pickCell.on{color:var(--ink);}
+#view-manage .pickCell.on::before{background:var(--accent);border-color:var(--accent);outline:4px solid color-mix(in srgb,var(--accent) 22%,transparent);}
+#view-manage .pickCell input,#view-manage .pickSw input,#view-manage .pickSw span{position:absolute;width:1px;height:1px;margin:0;overflow:hidden;clip-path:inset(50%);}
+#view-manage .pickCell:focus-within,#view-manage .pickSw:focus-within{outline:2px solid var(--accent);outline-offset:3px;}
+#view-manage .pickSwatches[role="radiogroup"]{display:flex;gap:14px;align-items:center;padding:12px 0 12px 16px;border:0;border-left:1px solid var(--rule-soft);}
+#view-manage .pickSw{position:relative;display:block;width:28px;height:28px;margin:0;padding:0;border-radius:50%;border:1px solid var(--rule);background:var(--sw);cursor:pointer;}
+#view-manage .pickSw.on{outline:1px solid var(--ink);outline-offset:3px;}
+#view-manage #mPick .actions{gap:14px;align-items:center;}
 
 /* this block stays HERE, after the rules it narrows: a same-specificity mobile
    override only wins by source order, so folding it into the hub's earlier
@@ -1382,6 +1405,20 @@ p.sec-p{font-size:var(--fs-lede);font-weight:500;color:var(--ink-soft);line-heig
   #view-manage [role="radiogroup"]{grid-template-columns:1fr;}
   #view-manage .visOpt{border-left:0;padding-left:0;border-top:1px solid var(--rule-soft);}
   #view-manage .visOpt:first-child{border-top:0;}
+  /* the picker stacks: the preview above; each band's label above its choices; the
+     cells become the list's filter pills (the chosen one inverted to ink), so the
+     four bands stay one screen */
+  #view-manage .pick{grid-template-columns:1fr;gap:22px 0;}
+  #view-manage .pickPreview{justify-items:start;}
+  #view-manage .pickWords{text-align:left;max-width:none;}
+  #view-manage .pickBand{grid-template-columns:1fr;gap:0;}
+  #view-manage .pickLabel{padding:14px 0 6px;}
+  #view-manage .pickCells[role="radiogroup"]{display:flex;flex-wrap:wrap;gap:8px;padding:0 0 14px;}
+  #view-manage .pickCell{min-height:36px;padding:0 14px;border:1px solid var(--rule);border-radius:var(--radius-pill);gap:0;font-size:14px;}
+  #view-manage .pickCell::before{display:none;}
+  #view-manage .pickCell.on{background:var(--ink);color:var(--bg);border-color:var(--ink);}
+  #view-manage .pickSwatches[role="radiogroup"]{padding:6px 0 14px;border-left:0;}
+  #view-manage #mPick .actions{justify-content:flex-start;}
 }
 @media (prefers-reduced-motion:reduce){
   *,*::before,*::after{animation:none !important;transition:none !important;}