@bongos/core 1.19.514 → 1.19.516

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.514",
-  "core_contract": "1.19.514",
-  "source_commit": "b092f2a3e4ee99d6f856ae4d1440ed723f1dcba8",
+  "core_version": "1.19.516",
+  "core_contract": "1.19.516",
+  "source_commit": "b92f5957bf6d2995db7633b965ea029192fb05df",
   "source_ref": "HEAD",
-  "built_at": "2026-09-03T19:32:24.004Z",
+  "built_at": "2026-09-03T19:52:58.155Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
-    "docs_redacted": 430,
+    "docs_redacted": 431,
     "agent_docs_stubbed": 24,
-    "functional_verbatim": 1958,
+    "functional_verbatim": 1966,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 2412,
-  "tree_sha256": "4ea8c8583161c137a8be9e3d96b1db2589a64bd504a47f7e75ebeb15232753d2",
+  "file_count": 2421,
+  "tree_sha256": "d9225673c69711642ce6ca8ae5ec201351c431974565132d756573f715a2c62e",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -362,12 +362,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "546f5670b4637aa1d4c492a8616d5189a971c79e8e2e163d12fe11276292faa6"
+      "sha256": "7a346b2474cdde1c10c16c55defddb37ea43f462cee07b6b0bb8262114fa4296"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "ae151ff268d04dced73fae1136c682215a02e59bae5edb68a3d6001c0143dd57"
+      "sha256": "1ca4f95d1d9dbd9edacdee3731182fcd7bee8f5fe247d681028657c3a4481cb5"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -377,17 +377,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "72d841c53787c5ad83b214c2ac816fd4cb9c97b47329eb0417b80e660a9f6b02"
+      "sha256": "8243bbb4887f66a4e6f25ed22b664d3ee123ebaa015271d01ae61dbc7d05112c"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "07554254c8559f81ec5cf45807ddccd8488732b228a618167455c932e7f05750"
+      "sha256": "2f810adf74673288b2c564c1624f06c5c320e4fe050af55b0cc8bc671ec10143"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "c4b04368e61803e2fe36f26ba3757aa75ada7e465384baf3e53cd012c9ce8423"
+      "sha256": "c64f0c9b8f785680f2f2ee47307dde71c69d8b0f05bcffc1777d55a059b63fd5"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -1704,20 +1704,25 @@
       "mode": "0000644",
       "sha256": "42b20cd6d2e8a8d76c980df73087fd404487e4c479034dbe34d8297677bd9387"
     },
+    {
+      "path": "docs/adr/0240-a-skipped-module-picker-stores-nothing-and-resolves-the-bundle-on-read.md",
+      "mode": "0000644",
+      "sha256": "d8bffd4c66cfddfeadd3c734d029e357f05a8eb804a79e5c3cad4014c9417b56"
+    },
     {
       "path": "docs/adr/README.md",
       "mode": "0000644",
-      "sha256": "cef542ef427dd81632465f17c6343c6b27f3ab69436eba2130c4fa4b5c9bc4ae"
+      "sha256": "e3bb2c282df45ec41150fd041df3c2525d653184858c2bb0a6c7fff670f4b85c"
     },
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "36baedec0a98a17dd013bf264cdb5502624de9529ed62e69aa88590574b1b236"
+      "sha256": "b137673ee16cd6f7d32b0b24d12b6c8e844a2e6e415a8118a4d458c382e5724f"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "718e7ab37e024cce51fb82da0b3a535aff961d04fb0dc5e25b8ec31a61e64851"
+      "sha256": "fd2bf9ee3b86b31bff72933594b984324c4387b36a369a6cbb3998389aaa2bcf"
     },
     {
       "path": "docs/architecture.md",
@@ -1742,12 +1747,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "0cc8ccfda8d8e3e7b518fae7a7584bb368d7d2eac6703518404d30f0b6ead30d"
+      "sha256": "e6aba956f5d6f056788f8d43f52dfcf4e242a9dff3bc348f312c875b4cd04be2"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "1003ea51740a5f71af49e05c66ba088c337185680dd92a391c959e8ea76a3f40"
+      "sha256": "5d0fca4e1e8b63e3679fe656ad773e914f944fa93fac66defeb46bb3642a6d74"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2592,7 +2597,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "decebcba9ee02ff15412e119309d9a37203ee82159922157b37c7cd7ddc21926"
+      "sha256": "98e8b564cdaccd042553e8337d0d67222911bdf7958f02e168f1b200da2183a9"
     },
     {
       "path": "docs/modules-contract.md",
@@ -3962,7 +3967,7 @@
     {
       "path": "modules/dev-box/app/src/vendor/bongos-client.cjs",
       "mode": "0000644",
-      "sha256": "72d841c53787c5ad83b214c2ac816fd4cb9c97b47329eb0417b80e660a9f6b02"
+      "sha256": "8243bbb4887f66a4e6f25ed22b664d3ee123ebaa015271d01ae61dbc7d05112c"
     },
     {
       "path": "modules/dev-box/app/test/unit.mjs",
@@ -4202,7 +4207,7 @@
     {
       "path": "modules/government/catalog.js",
       "mode": "0000644",
-      "sha256": "89c03f4af6b1a2bfef8c6820621b977d4872cd7fd4432e4f5ab506063c9acf96"
+      "sha256": "36914d187c0dfe9d87d8d82b19111aa1d338de15b64724275dd8ecc005eead13"
     },
     {
       "path": "modules/government/config.js",
@@ -4294,6 +4299,11 @@
       "mode": "0000644",
       "sha256": "2392050b4295f9fdb4105b8434a4c44833b5f0e850f11b41afe82ea1860fef34"
     },
+    {
+      "path": "modules/government/migrations/government_009_mingle_manage.sql",
+      "mode": "0000644",
+      "sha256": "986be40845d7a5d786d088dc9c0b8d6f9990062299418edb648c246c5a49fb07"
+    },
     {
       "path": "modules/government/module.json",
       "mode": "0000644",
@@ -5429,10 +5439,20 @@
       "mode": "0000644",
       "sha256": "52c140f39410d4feaf6facd9b2c53b6a5d93ac12d44a0a71fcb81fc5aa1b5c3a"
     },
+    {
+      "path": "modules/lifecycle/migrations/lifecycle_007_mingle.sql",
+      "mode": "0000644",
+      "sha256": "0d17971d88c2f75a61a5646325ebab121fd4406cdd39324a1128a5e610ce6d7d"
+    },
+    {
+      "path": "modules/lifecycle/mingle.js",
+      "mode": "0000644",
+      "sha256": "0b64c29f05955182bb0b767cd09d48d80143016ffc77bc16ff56a8b7fde1ebd9"
+    },
     {
       "path": "modules/lifecycle/module.json",
       "mode": "0000644",
-      "sha256": "c18bea123294d549c14b33d121c911e737fa10d12b62d9fe25d73d2387b2f4c1"
+      "sha256": "41da723fe35c3ca3db6226a1ff2208c5256c71eebe3a3768437aeff1fb070312"
     },
     {
       "path": "modules/lifecycle/pollers/publish-reconciler.js",
@@ -5504,6 +5524,11 @@
       "mode": "0000644",
       "sha256": "637c442875fbe297e3aba54f4b6b16f9d06b740782e3506f65c58f34b67ea81d"
     },
+    {
+      "path": "modules/lifecycle/routes/mingle.js",
+      "mode": "0000644",
+      "sha256": "a68f85eb06a620ae7cacd2d04d3056a46191c347e0d975681ab594f7316e8cd6"
+    },
     {
       "path": "modules/lifecycle/routes/recommendations.js",
       "mode": "0000644",
@@ -5969,6 +5994,11 @@
       "mode": "0000644",
       "sha256": "7abe41633cd7f98712c39960fba7175f0bb3340c4568bfbfdc640af911a31e15"
     },
+    {
+      "path": "modules/provisioning/migrations/provisioning_014_module_selection.sql",
+      "mode": "0000644",
+      "sha256": "f4562bd90fdae26c5f7c51851bd2ad7752535bd0dcfb62dd567c11e76330c42b"
+    },
     {
       "path": "modules/provisioning/module.json",
       "mode": "0000644",
@@ -5987,7 +6017,7 @@
     {
       "path": "modules/provisioning/provisioning.js",
       "mode": "0000644",
-      "sha256": "67eb2963688cba73fe846b354070e1e43333971425f603b1e84b45552b5381f0"
+      "sha256": "8745258599d655b34204e5878b413308ae48a012b0306bde3297e98e452b3686"
     },
     {
       "path": "modules/provisioning/rate-limit.js",
@@ -6002,12 +6032,12 @@
     {
       "path": "modules/provisioning/routes/provisioning.js",
       "mode": "0000644",
-      "sha256": "9285f3f2d426305c060eef4b3b98ae64fc386e4ce487f99d9ad59d9921dc493e"
+      "sha256": "6e78e87a2112974db6db804280c346daa7c38684adace638e3c5734fe6d1ca72"
     },
     {
       "path": "modules/provisioning/starter-bundles.js",
       "mode": "0000644",
-      "sha256": "760382a3e361692f9d8457f88122fda498eb6bccecd37b351837fa5c4fa5e6f4"
+      "sha256": "9dd1fe5bd16d22245d62dae05aefb0c74c82772a937da155f1e8d2403f911886"
     },
     {
       "path": "modules/provisioning/tests/liveness.mjs",
@@ -6257,7 +6287,7 @@
     {
       "path": "modules/public-landing/public/assets/cosmos.css",
       "mode": "0000644",
-      "sha256": "bb2fa6d0a1c87aeb3e08038faf1d3ae0f06a1a41f9fe6d83f357146bc7e73045"
+      "sha256": "f10975893b3522accc6592246af0b07645c8d910c7637ecc5a006064a0988057"
     },
     {
       "path": "modules/public-landing/public/assets/verro-medallion.png",
@@ -6517,17 +6547,17 @@
     {
       "path": "modules/public-landing/public/projects.html",
       "mode": "0000644",
-      "sha256": "8af95785b813eb27e6356fa717a4f20cb73f1220dd9ce15de2d62a18631afdd3"
+      "sha256": "a93dbf381a39bde8d4424bd3f241d24a72d9ed915e7da48bdb125d15085f6fef"
     },
     {
       "path": "modules/public-landing/public/projects.probes.json",
       "mode": "0000644",
-      "sha256": "856e0a8a9c4f8b19a05bf1e5e0c0f848a94038e933fa10bbbf35529edbaa9ae9"
+      "sha256": "5801951d08323e2f59aa4e9435e0a7d82c712714a6d1c925768dcfd2bd9a6525"
     },
     {
       "path": "modules/public-landing/public/projects.states.json",
       "mode": "0000644",
-      "sha256": "dfe69ecaa3923669bd0c07d440886410e4f67c843e13a1fac4e7b2a1429c3ba3"
+      "sha256": "16fbd27a36c9c32696539c74a815dc9b3f187f5b539b393e3bee7f7dabc4e2a6"
     },
     {
       "path": "modules/public-landing/public/terms.html",
@@ -6952,7 +6982,7 @@
     {
       "path": "modules/ui-design/kit/serve.js",
       "mode": "0000644",
-      "sha256": "efb50e76596a5ad009dab58d8e12b590382cc6bf1f819d0ab447cb14a4b4d6a3"
+      "sha256": "4c52462cf61559e9a424107398eca58aa56b3783338827dda6110200fcdfd00a"
     },
     {
       "path": "modules/ui-design/kit/tells.js",
@@ -7262,12 +7292,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "9c126ed4b632afd9452b01fa9e08eb97295699e99efc9c7d4040a761cac7f58d"
+      "sha256": "d137b5fec77d066d3e93b56a0af042e80252513dfa759872ae352a99b92170f6"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "7cc213de070341042dae24c32b6fc458ae6912399a715d50b18dd92c52548fd8"
+      "sha256": "a212fc90527071642d6693ca0ea6dae91c8ad9c9452a8c19d550f2bf452d1e92"
     },
     {
       "path": "public-docs/index.html",
@@ -8937,7 +8967,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "ace7f9365df0b8019d1fbc1758832db878c9b00ff59583a5ddcd839bbb69b1eb"
+      "sha256": "ec17c796e1498bc12b3ecce4d194f7a4026081373d7d209fbfb49343368b5498"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -10227,7 +10257,7 @@
     {
       "path": "tests/government_seed.mjs",
       "mode": "0000644",
-      "sha256": "cd67c76a30e1c69838f99afbb8edd17a0ec2109a8105b61805b9564e27464137"
+      "sha256": "ab6404171b072748798728cba7c5b1a6f759170996d8fea8be5ab26a033b7ac1"
     },
     {
       "path": "tests/government_session_scope.mjs",
@@ -10824,6 +10854,11 @@
       "mode": "0000644",
       "sha256": "db4bbcfea38c91611947c99ca057c15b5e567d04ad9d267b9eee41981bc9418a"
     },
+    {
+      "path": "tests/mingle.mjs",
+      "mode": "0000644",
+      "sha256": "ec5aaf634a70a100b6acb0f28b5b5256865d6d71d1a310dc7384295e133303ed"
+    },
     {
       "path": "tests/mirror_lineage_fulltree.mjs",
       "mode": "0000644",
@@ -11142,7 +11177,12 @@
     {
       "path": "tests/projects_hub.mjs",
       "mode": "0000644",
-      "sha256": "22461d4febf616202af96aa37fc940a686841bbf68155094526455ae85ab9886"
+      "sha256": "f8e557372a86d42dc0433414a1d5821a350dc545056fcc8104aa151b51e939f7"
+    },
+    {
+      "path": "tests/projects_hub_module_picker.mjs",
+      "mode": "0000644",
+      "sha256": "5eaa61295f2a22f5b10cb365cee58e485390ccb763a14be15fec00f23aa23087"
     },
     {
       "path": "tests/projects_hub_pre_uat.mjs",
@@ -11189,6 +11229,11 @@
       "mode": "0000644",
       "sha256": "dd53361cf8bd7e517e886701753d64c05c3235995785991558805f493cde529c"
     },
+    {
+      "path": "tests/provisioning_module_selection.mjs",
+      "mode": "0000644",
+      "sha256": "48fc7c59efae4b7d1b9ab565882473483d7b4d8a40635583a789d0749da16578"
+    },
     {
       "path": "tests/provisioning_onboard_mode.mjs",
       "mode": "0000644",
@@ -11227,7 +11272,7 @@
     {
       "path": "tests/provisioning_starter_bundles.mjs",
       "mode": "0000644",
-      "sha256": "0d3dadff4425e8d014cca29c66c31ff094e78ffbf2fd246f56ba11c5e1cefc93"
+      "sha256": "9ecf7cda8e47a6e17bbc73afdb0c30c867ab967cea66943082cbe15502fd63bc"
     },
     {
       "path": "tests/provisioning_teardown_intent.mjs",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 347 operations across 53 resource groups
+- 352 operations across 54 resource groups
 
 ## Install
 

package/clients/bongos-client/bongos-client.global.js

@@ -588,6 +588,18 @@ function createClient(opts = {}) {
       // POST /memory/sync — rank: any-builder — POST /memory/sync
       postMemorySync: (args) => request("POST", "/memory/sync", { hasBody: true }, args),
     },
+    "mingle": {
+      // GET /mingle — rank: any-builder — GET /mingle
+      getMingle: (args) => request("GET", "/mingle", { hasBody: false }, args),
+      // PUT /mingle/opt-in — rank: any-builder — PUT /mingle/opt-in
+      putMingleOptIn: (args) => request("PUT", "/mingle/opt-in", { hasBody: true }, args),
+      // POST /mingle/pairs/{id}/decide — rank: any-builder — POST /mingle/pairs/:id/decide
+      postMinglePairsIdDecide: (args) => request("POST", "/mingle/pairs/{id}/decide", { hasBody: true }, args),
+      // PUT /mingle/project — rank: metic+archon — PUT /mingle/project
+      putMingleProject: (args) => request("PUT", "/mingle/project", { hasBody: true }, args),
+      // POST /mingle/round — rank: metic+archon — POST /mingle/round
+      postMingleRound: (args) => request("POST", "/mingle/round", { hasBody: true }, args),
+    },
     "modules": {
       // GET /modules — rank: any-builder — GET /modules
       getModules: (args) => request("GET", "/modules", { hasBody: false }, args),

package/clients/bongos-client/index.cjs

@@ -587,6 +587,18 @@ function createClient(opts = {}) {
       // POST /memory/sync — rank: any-builder — POST /memory/sync
       postMemorySync: (args) => request("POST", "/memory/sync", { hasBody: true }, args),
     },
+    "mingle": {
+      // GET /mingle — rank: any-builder — GET /mingle
+      getMingle: (args) => request("GET", "/mingle", { hasBody: false }, args),
+      // PUT /mingle/opt-in — rank: any-builder — PUT /mingle/opt-in
+      putMingleOptIn: (args) => request("PUT", "/mingle/opt-in", { hasBody: true }, args),
+      // POST /mingle/pairs/{id}/decide — rank: any-builder — POST /mingle/pairs/:id/decide
+      postMinglePairsIdDecide: (args) => request("POST", "/mingle/pairs/{id}/decide", { hasBody: true }, args),
+      // PUT /mingle/project — rank: metic+archon — PUT /mingle/project
+      putMingleProject: (args) => request("PUT", "/mingle/project", { hasBody: true }, args),
+      // POST /mingle/round — rank: metic+archon — POST /mingle/round
+      postMingleRound: (args) => request("POST", "/mingle/round", { hasBody: true }, args),
+    },
     "modules": {
       // GET /modules — rank: any-builder — GET /modules
       getModules: (args) => request("GET", "/modules", { hasBody: false }, args),

package/clients/bongos-client/index.d.ts

@@ -82,6 +82,7 @@ export interface GetMemoryBuildersBuilderIdFileResponse { builder_id: unknown; f
 export interface GetMemoryBuildersBuilderIdFilesResponse { builder_id: unknown; forensic: boolean; count: unknown; files: unknown }
 export interface GetMemoryFileResponse { builder_id: unknown; path: unknown; content: unknown; sha256: unknown; byte_len: unknown; mtime: unknown; updated_at: unknown; created_at: unknown }
 export interface GetMemoryFilesResponse { builder_id: unknown; count: unknown; files: unknown }
+export interface GetMingleResponse { mingle: unknown; open_pairs: unknown; matching: unknown }
 export interface GetModulesResponse { modules: unknown; own_built: unknown; core_loaded: unknown; catalog: unknown; submit_pipeline_live: boolean }
 export interface GetModulesSubmissionsResponse { submissions: unknown }
 export interface GetMyProjectsInvitesResponse { invites: unknown }
@@ -99,7 +100,7 @@ export interface GetProvisioningInstancesResponse { instances: unknown }
 export interface GetProvisioningOnboardPlanResponse { mode: unknown; steps: unknown }
 export interface GetProvisioningRecommendationsResponse { recommendations: unknown }
 export interface GetProvisioningSlugAvailableResponse { slug: unknown; available: unknown; reason: unknown; address: unknown }
-export interface GetProvisioningStarterBundlesResponse { core: unknown; bundles: unknown }
+export interface GetProvisioningStarterBundlesResponse { core: unknown; bundles: unknown; optional: unknown }
 export interface GetPublicBlockersIdResponse { blocker: unknown }
 export interface GetPublicBountyTableResponse { table: unknown; currency: unknown }
 export interface GetPublicGradesResponse { window_days: unknown; rolling: unknown; trend: unknown; attempts: unknown; threshold: unknown; grader_version: unknown }
@@ -304,6 +305,10 @@ export interface PostMeSessionsRevokeResponse { ok: boolean; revoked: unknown }
 export interface PostMemoryBuildersBuilderIdBfgWriteRequest { kind?: string; slug?: string; title?: string; body_md?: string; rationale?: string; karma_delta?: unknown }
 export interface PostMemoryBuildersBuilderIdBfgWriteResponse { ok: boolean; builder_id: unknown; path: unknown; kind: unknown; author: unknown; audit_id: unknown; karma_id: unknown; sha256: unknown; byte_len: unknown; updated_at: unknown }
 export interface PostMemorySyncRequest { files?: unknown[] }
+export interface PostMinglePairsIdDecideRequest { decision: "accepted" | "declined" }
+export interface PostMinglePairsIdDecideResponse { pair: unknown }
+export interface PostMingleRoundRequest { limit?: number }
+export interface PostMingleRoundResponse { paired: unknown; count: unknown; skipped: unknown }
 export interface PostModulesKeyEnableRequest { enabled?: unknown }
 export interface PostModulesKeyEnableResponse { ok: boolean; key: unknown; enabled: unknown; note: unknown }
 export interface PostModulesKeySubmitRequest { signed_by?: string }
@@ -324,7 +329,7 @@ export interface PostProvisioningInstancesIdGithubAppRequest { account?: string
 export interface PostProvisioningInstancesIdGithubAppResponse { state: unknown; account: unknown; post_url: unknown; personal_url: unknown; org_url: unknown; org_login: unknown; manifest: unknown; redirect_url: unknown; expires_at: unknown }
 export interface PostProvisioningInstancesIdRestartResponse { ok: boolean; queued: unknown; action: unknown; status: unknown; message: unknown }
 export interface PostProvisioningInstancesIdTeardownResponse { ok: boolean; queued: unknown; action: unknown; status: unknown; superseded: unknown; message: unknown }
-export interface PostProvisioningInstancesRequest { slug: string; target_ref?: string; hosting_shape?: string; domain?: string; no_address?: boolean; tier?: string; onboard_mode?: string; type?: string; description?: string; detail?: Record<string, unknown> }
+export interface PostProvisioningInstancesRequest { slug: string; target_ref?: string; hosting_shape?: string; domain?: string; no_address?: boolean; tier?: string; onboard_mode?: string; type?: string; description?: string; detail?: Record<string, unknown>; modules?: string[] }
 export interface PostSearchMarkRequest { chunk_id?: StringifiableId; useful?: unknown }
 export interface PostSearchRequest { expand?: unknown; q?: string; source_kind?: string; limit?: unknown }
 export interface PostSearchResponse { expand?: unknown; chunk?: unknown; query?: unknown; count?: unknown; total_full_tokens?: unknown; results?: unknown; corpus?: unknown }
@@ -380,6 +385,9 @@ export interface PostVersionsIdDoneWhenResponse { ok: boolean; criterion: unknow
 export interface PostVersionsRequest { id: string; name: string; status?: string; track?: string; done_when?: string; scope_doc_path?: string; criteria?: unknown[] }
 export interface PostVersionsResponse { version: unknown; criteria: unknown }
 export interface PutGovernmentRanksRankKeyPermissionsPermissionKeyResponse { ok: boolean; rank_key: unknown; permission_key: unknown; granted: unknown }
+export interface PutMingleOptInRequest { opted_in: boolean }
+export interface PutMingleOptInResponse { opted_in: unknown; updated_at: unknown }
+export interface PutMingleProjectRequest { enabled: boolean }
 export interface PutTasksIdDependenciesRequest { depends_on_task_ids: unknown[] }
 export interface PutTasksIdDependenciesResponse { ok: boolean; written: unknown; dependencies: unknown }
 export type StringifiableId = number | string;
@@ -900,6 +908,18 @@ export interface BongosClient {
     /** POST /memory/sync — rank: any-builder */
     postMemorySync(args?: RequestArgs & { body?: PostMemorySyncRequest }): Promise<ApiResponse>;
   };
+  "mingle": {
+    /** GET /mingle — rank: any-builder */
+    getMingle(args?: RequestArgs): Promise<GetMingleResponse>;
+    /** PUT /mingle/opt-in — rank: any-builder */
+    putMingleOptIn(args: RequestArgs & { body: PutMingleOptInRequest }): Promise<PutMingleOptInResponse>;
+    /** POST /mingle/pairs/{id}/decide — rank: any-builder */
+    postMinglePairsIdDecide(args: RequestArgs & { body: PostMinglePairsIdDecideRequest }): Promise<PostMinglePairsIdDecideResponse>;
+    /** PUT /mingle/project — rank: metic+archon */
+    putMingleProject(args: RequestArgs & { body: PutMingleProjectRequest }): Promise<ApiResponse>;
+    /** POST /mingle/round — rank: metic+archon */
+    postMingleRound(args?: RequestArgs & { body?: PostMingleRoundRequest }): Promise<PostMingleRoundResponse>;
+  };
   "modules": {
     /** GET /modules — rank: any-builder */
     getModules(args?: RequestArgs): Promise<GetModulesResponse>;

package/clients/bongos-client/index.mjs

@@ -584,6 +584,18 @@ export function createClient(opts = {}) {
       // POST /memory/sync — rank: any-builder — POST /memory/sync
       postMemorySync: (args) => request("POST", "/memory/sync", { hasBody: true }, args),
     },
+    "mingle": {
+      // GET /mingle — rank: any-builder — GET /mingle
+      getMingle: (args) => request("GET", "/mingle", { hasBody: false }, args),
+      // PUT /mingle/opt-in — rank: any-builder — PUT /mingle/opt-in
+      putMingleOptIn: (args) => request("PUT", "/mingle/opt-in", { hasBody: true }, args),
+      // POST /mingle/pairs/{id}/decide — rank: any-builder — POST /mingle/pairs/:id/decide
+      postMinglePairsIdDecide: (args) => request("POST", "/mingle/pairs/{id}/decide", { hasBody: true }, args),
+      // PUT /mingle/project — rank: metic+archon — PUT /mingle/project
+      putMingleProject: (args) => request("PUT", "/mingle/project", { hasBody: true }, args),
+      // POST /mingle/round — rank: metic+archon — POST /mingle/round
+      postMingleRound: (args) => request("POST", "/mingle/round", { hasBody: true }, args),
+    },
     "modules": {
       // GET /modules — rank: any-builder — GET /modules
       getModules: (args) => request("GET", "/modules", { hasBody: false }, args),

package/docs/adr/0240-a-skipped-module-picker-stores-nothing-and-resolves-the-bundle-on-read.md

@@ -0,0 +1,157 @@
+# 0240 — A skipped module picker stores nothing, and the bundle is resolved on read
+
+- **Status:** Accepted
+- **Date:** 2026-09-03
+- **Tasks:** [#1002339](https://cloudbongos.com/builders#/task/1002339) (this decision — BV1.R20)
+- **Goal:** [#1000046](https://cloudbongos.com/builders#/goal/1000046) — Project creation: visibility and
+  customization, criterion `proj-module-select` ("during setup a default set of modules is pre-selected…")
+- **Related:** [ADR 0237](<redacted>.md)
+  (R19 — the bundles this picker renders, and the file that closed with "where a chosen selection lands
+  is R20's decision"), [ADR 0182](<redacted>.md) D4 (the publish bar a module set
+  may not join), [ADR 0083](<redacted>.md) (the one-way import rule),
+  [ADR 0111](<redacted>.md) (the enqueue-only web tier), migration
+  `provisioning_013` (the `detail` column this deliberately does not use)
+
+## 1. The problem
+
+R19 declared the starter bundles and served them; nothing rendered them. R20 is the
+picker: the owner sees what their declared project type preselects, switches
+individual modules on or off, and the answer has to survive into the project.
+
+Three questions had no answer yet, and the first is the one everything else hangs
+off:
+
+1. **Where does a chosen selection live?** ADR 0237 §6: *"Nothing is stored yet…
+   there is still no module-selection column on any table."*
+2. **What does *skipping* mean?** The picker is optional like the About step
+   before it. "Skip = you get the preselect" is easy to say and easy to get
+   subtly wrong.
+3. **Where does the picker learn what may be chosen?** A bundle names module
+   keys; a picker has to render a name and a sentence per key, for an owner who
+   has met none of them.
+
+## 2. Three-valued, or the skip is unreadable forever
+
+A new nullable `modules jsonb` column on `provisioning_instances`
+(`provisioning_014`), read through `effectiveModules(row)`:
+
+| stored | means | what the project gets |
+|---|---|---|
+| `NULL` | nobody answered — the picker was skipped, or the caller does not ask | the declared type's starter bundle, resolved at read time |
+| `[]` | the owner switched them all off | the always-on core, and nothing else |
+| `["dev-box",…]` | what they picked | exactly that |
+
+The temptation was `NOT NULL DEFAULT '[]'`, and it is the mistake: it collapses
+rows 1 and 2, so a project that skipped and a project that deliberately declined
+everything become the same row and no later surface can tell them apart. That is
+the rule `PROJECT_DETAIL_VOCAB` already states out loud — *"a detail answer is
+something the owner SAID… Absent stays absent, and skipped stays skipped"* — and
+it applies here for the same reason: R23 ("add modules later") and R24 (the proof
+walk) both need to know whether an owner has ever been asked.
+
+**Skipping is safe because the preselect and the fallback are the same
+declaration.** The panel preselects `bundleForProjectType(type).bundle`; an
+omitted `modules` key makes the server resolve `bundleForProjectType(type).bundle`.
+Not two lists kept in agreement — one function, called twice. That is what lets
+the panel promise "skip and you get the suggested set" without the promise being
+a thing anyone has to maintain.
+
+It also means **`bongos onboard` and any API caller inherit the bundle for free**.
+Neither asks the question, both omit the field, and both get the type's preselect.
+So the canonical onboarding sequence (`onboard-plan.js`) grows **no new step** —
+the picker is a refinement of an answer already in the sequence (`type`), not a
+new question in it. `tests/onboard.mjs` says one optional step keeps that flag
+meaningful; it still does.
+
+## 3. Not `detail`, not `settings`
+
+`provisioning_013`'s own comment named R19 as a reason `detail` was jsonb, so
+`detail.modules` was the obvious home. It is the wrong one:
+
+- `detail` holds the **interview's** answers under `PROJECT_DETAIL_VOCAB`, a
+  closed map of scalar vocabularies that `normalizeProjectDetail` filters
+  key-by-value and `badProjectDetail` 400s on. A list of module keys is not that
+  shape. Carrying it there means teaching a normalizer, a route guard and a read
+  projection about a value type none of them have — in order to store something
+  ADR 0237 §2 already ruled the interview must not ask.
+- `settings` is worse: a setting is a **policy the running instance obeys**. It
+  rides `web.env`, queues a `settings-apply` intent and restarts the service.
+  A module selection is a declaration made before the instance exists.
+
+A column is the honest shape, and it is additive + namespaced (ADR 0083 §5), so
+the previous release still runs against the schema and every pre-existing row
+reads as its bundle rather than as an error.
+
+## 4. The picker's catalog is declared beside the bundles
+
+The picker needs, per opt-in module, a label and one owner-facing line. Neither
+existing source can give it:
+
+- `module.json`'s `title`/`description` are written for a builder reading a
+  module list. *"Outbound ship broadcast + the inbound #ideas/#bugs bot +
+  role-sync + channel management + account-link state. Mirror only, never
+  authority (ADR 0033)"* is true, and it is not copy you put in front of someone
+  who has not built anything yet.
+- `GET /modules` needs a session and imports the live catalog; the create wizard
+  is read **signed out**, and a module may not import `src/module-loader/catalog.js`
+  (ADR 0083's one-way rule).
+- `GET /public/modules` serves booleans, not copy.
+
+So `OPTIONAL_MODULES` joins `STARTER_BUNDLES` in `starter-bundles.js` — the same
+decision ADR 0237 §3 made for the bundle keys, extended to the choices, and kept
+honest the same way: `tests/provisioning_starter_bundles.mjs` reads every
+`modules/*/module.json` and fails the build if the declared opt-in set drifts from
+the on-disk `default: false` set (minus the two hub-only modules). **A new opt-in
+module therefore cannot ship without owner-facing copy**, which is the property
+worth buying.
+
+`GET /provisioning/starter-bundles` gains `optional` alongside `core` and
+`bundles`. **One read, one declaration**: a picker that fetched its preselect and
+its catalog separately could preselect a key it has no row for.
+
+## 5. Loud at the boundary, quiet at the store
+
+`normalizeModuleSelection` drops an unknown, always-on or hub-only key on the way
+to storage. The **route refuses it** (`400 bad_modules`, naming the choices)
+rather than dropping it silently — `badProjectDetail`'s rule, for `badProjectDetail`'s
+reason: a caller who names a module that does not exist has made a mistake, and
+being told nothing and handed a project without it is the silent-drop failure the
+strict validator exists to prevent. A re-request reports `modules_ignored`, the
+same honesty `type_ignored` carries.
+
+## 6. Consequences
+
+- **The picker cannot block a create.** A failed catalog fetch renders a
+  "couldn't load" clause, leaves the answer unsaid, and the create still files —
+  the server applies the bundle. A picker that could stop a project from existing
+  would be worse than no picker.
+- **A module selection is still not a publish precondition** (ADR 0182 D4,
+  restated by ADR 0237 §6). Taking or declining a bundle cannot move a project's
+  dark-matter state.
+- **The column is a DECLARATION, not yet an input to the runner.** It is held on
+  the platform row exactly as `type` and `description` are, until a catalog row
+  materializes. `provisioning_intents` carries no payload, and turning a stored
+  selection into the child instance's own `config/modules.json` is separate work —
+  named here so nobody reads the stored array as already-provisioned.
+- **The wizard renumbered a third time** (gate 0 · name 1 · type 2 · about 3 ·
+  **modules 4** · home 5 · address 6 · review 7 · done 8), so `DRAFT_KEY` moved to
+  `-v4`: a draft replayed under the old numbering lands on the wrong panel.
+
+## 7. Rejected
+
+- **`NOT NULL DEFAULT '[]'`** — collapses "skipped" into "declined everything",
+  permanently.
+- **Storing the preselect when the owner skips** — it writes down an answer
+  nobody gave, and freezes today's bundle onto a project whose owner never
+  expressed a view. Read-time resolution is what `effectiveSettings` already does
+  for the same reason.
+- **`detail.modules`** — the interview's vocabulary is scalar by construction, and
+  ADR 0237 §2 ruled the interview does not ask this question.
+- **A new step in `onboardPlan`** — the CLI and the skill would have to ask a
+  question whose answer they already get by omission. The sequence gains nothing;
+  `tests/onboard.mjs`'s "one optional step keeps the flag meaningful" stands.
+- **Rendering the always-on core as sixteen disabled toggles** — a disabled
+  control reads as a choice the owner failed to make. The core was never a
+  choice, so it is a clause: visible, counted, and outside the band.
+- **Reading the manifests at request time to build the catalog** — costs the
+  purity ADR 0237 §3 bought, for copy that is fixed at build time anyway.