@bongos/core 1.19.670 → 1.19.672

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.670",
-  "core_contract": "1.19.670",
-  "source_commit": "8bd867dda772e1b204c7932e1f386eff9a18955f",
+  "core_version": "1.19.672",
+  "core_contract": "1.19.672",
+  "source_commit": "72bde195eed5440b4cad741c01a811727d96a4d4",
   "source_ref": "HEAD",
-  "built_at": "2026-09-11T16:30:19.479Z",
+  "built_at": "2026-09-11T17:51:22.900Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 474,
     "agent_docs_stubbed": 24,
-    "functional_verbatim": 2117,
+    "functional_verbatim": 2120,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 2615,
-  "tree_sha256": "2b95ae714107f111f69a22dc7453ae4cf4b963a33d811f179fc01dc54b3d80ba",
+  "file_count": 2618,
+  "tree_sha256": "8fafd38c0b191dd28e39e21d624b758762e3316f76c64b203860de48e6539679",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -387,7 +387,7 @@
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "a82dc5f2fdcf44a1abff4bd8ba0aec70cc49004ad5feae72c362e8b45c5f04e5"
+      "sha256": "e1d2929cc1373aca2d24879b9fbbbbfcd1ef77c850565aca7dba0130ff1ac43b"
     },
     {
       "path": "clients/bongos-client/index.mjs",
@@ -1912,12 +1912,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "fe08952e837f4e79243823d66876f2413ca1d743c22bc2a287c18275616692d4"
+      "sha256": "93eeff755bd089165265cf0f2c7f21e36803ff9519266512f834891d1ff6dc60"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "db8be14055cc32b31376585ad954e1e91a8b1cbe77401bad3d5215c1d3b419aa"
+      "sha256": "0d47d92e4e20e0f7d2a9ea9a1a4c643ed2e22103cd6ef5081377b22540993670"
     },
     {
       "path": "docs/architecture.md",
@@ -1942,12 +1942,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "9faae742143a1492fe9bbc3075bb6cfa87efa9eebd2225d98743e708f138110f"
+      "sha256": "2ef3bae15b679d797a2fc7210085c54b527eec3be3b4ec397dc3e043725d3a02"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "fa55c6a5c2a89e7ac27dcbb12b8efe5c7d812e5386aeb4726412419d53ac577f"
+      "sha256": "88b6a409123033b93bfe079e807774acd263ea14739ca8851b4ae24e4a89247a"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2792,7 +2792,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "3ae8c777f5212119f103d906a17893b73817b206b538a212f53dc01001443357"
+      "sha256": "84eeb3cde0e92fb5bf32038fc8cd5abd7f5cc059c71cf0273a50873fc1325abe"
     },
     {
       "path": "docs/modules-contract.md",
@@ -6482,7 +6482,7 @@
     {
       "path": "modules/provisioning/provisioning.js",
       "mode": "0000644",
-      "sha256": "39635718015b8fcb0cf5d21f3769e292e129bfe312b5802d073ef63b0d8b7b1e"
+      "sha256": "32083b07e4c676f9a68e0b78df3e5f5a0cea45fe0cb168a32fe1180165c99fbe"
     },
     {
       "path": "modules/provisioning/rate-limit.js",
@@ -6494,6 +6494,11 @@
       "mode": "0000644",
       "sha256": "4c933aad1307378496d47960e24c9d797a1f122f28aefa27b769f336e4cf2e75"
     },
+    {
+      "path": "modules/provisioning/routes/body-validators.js",
+      "mode": "0000644",
+      "sha256": "c59c59f842a0bab6bc45370a902d6db4a1b0e39a902eb115a12abaa59fc48dc9"
+    },
     {
       "path": "modules/provisioning/routes/callback-page.js",
       "mode": "0000644",
@@ -6502,7 +6507,7 @@
     {
       "path": "modules/provisioning/routes/provisioning.js",
       "mode": "0000644",
-      "sha256": "14fda38bbfd01404c16e48c626247cbfacd956889e25aab6c65cf1b746b5e3e7"
+      "sha256": "202dcfb416317eda72696455ace487d36021377d87a6c122df9561bc087939a8"
     },
     {
       "path": "modules/provisioning/starter-bundles.js",
@@ -6757,7 +6762,7 @@
     {
       "path": "modules/public-landing/public/assets/cosmos.css",
       "mode": "0000644",
-      "sha256": "17637a0fd4eafddcd3235dec51c0ff196a8b39360918ab7a4c0370fc21d3a20f"
+      "sha256": "2e05801f13227c5d6d0b26f9f0c476ad767fd9bbe2c034f82a3e315045781eb9"
     },
     {
       "path": "modules/public-landing/public/assets/verro-medallion.png",
@@ -7017,7 +7022,7 @@
     {
       "path": "modules/public-landing/public/projects.html",
       "mode": "0000644",
-      "sha256": "864b6ee7a8b1866196d6595914f614e388a51c2a160fd86f454ab4a32a4740d5"
+      "sha256": "75de00858d851cb13278bff0fd1fac7b174eca3577d481c91475f83bb1274be7"
     },
     {
       "path": "modules/public-landing/public/projects.probes.json",
@@ -7027,7 +7032,7 @@
     {
       "path": "modules/public-landing/public/projects.states.json",
       "mode": "0000644",
-      "sha256": "a2d3ecc5e893bcaa5632c2d693d5b642c7041cc285e382d572954284ad64e241"
+      "sha256": "53274a02ab69d8fbf602b408ea6aaeb22caaa9031489cc315855067ea956fc7e"
     },
     {
       "path": "modules/public-landing/public/terms.html",
@@ -7762,12 +7767,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "56e1f3d38ea08d502a77017a9ba9722349740d7c3577a7ffb1b9135d87612d62"
+      "sha256": "46ab99aa32c6280e6c1bd7af17f26e534c1bcd45a43e873c9f2526ddd856dfae"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "9ba86a842073a1c0721d3bcbea43ff5a159a243c73b55031ae65ba524f345cbf"
+      "sha256": "c460db604d8c3d230a2a7af526c3bfe9288d5a9d1a4136d728ad81315b1bd177"
     },
     {
       "path": "public-docs/index.html",
@@ -9527,7 +9532,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "06583dcc270fa2f445c15716a48602247303e40769e20cd4332297c2bb6bd9d5"
+      "sha256": "057af9f0fddf1697d3368c2cddee50970b2319da68b2e73df11a3baa84f1be60"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -12009,6 +12014,11 @@
       "mode": "0000644",
       "sha256": "361a8baae6b15efa86bdb366076b6ba2ad237f2fa63d600bee879db19042dbef"
     },
+    {
+      "path": "tests/project_type_editable.mjs",
+      "mode": "0000644",
+      "sha256": "9d2432b2f7ad937415213e3cdbdb98aca5dd8e0c6eff5d73757ca0e873e89b8b"
+    },
     {
       "path": "tests/project_visibility_db.mjs",
       "mode": "0000644",
@@ -12027,7 +12037,7 @@
     {
       "path": "tests/projects_hub_pre_uat.mjs",
       "mode": "0000644",
-      "sha256": "e16e0488e1364a09503cec17a85e19ed6045fd8c6430c472c050934e1cad4013"
+      "sha256": "fb64eb311c363c0b649b2b79ab24627058bc3756ea0616769140793934a717b0"
     },
     {
       "path": "tests/promote_goal_id.mjs",
@@ -13054,6 +13064,11 @@
       "mode": "0000644",
       "sha256": "74ffbc7e4585e651d00ab879ece6f3d23089d7c9ae7acb15483d3752b47bbdc0"
     },
+    {
+      "path": "tests/wizard_intent_resume.mjs",
+      "mode": "0000644",
+      "sha256": "d3d6fe02e18598ea9a146b3af7c3dff96a69a68ca9e95a7227e3c6549bbd6cc4"
+    },
     {
       "path": "tests/wizard_preselect_why.mjs",
       "mode": "0000644",

package/clients/bongos-client/index.d.ts

@@ -178,8 +178,8 @@ export interface PatchProjectsIdFeaturedRequest { featured: boolean }
 export interface PatchProjectsIdFeaturedResponse { project: unknown }
 export interface PatchProjectsIdStatusRequest { status: string }
 export interface PatchProjectsIdStatusResponse { project: unknown }
-export interface PatchProvisioningInstancesIdDetailRequest { description?: string; detail?: Record<string, unknown>; modules?: string[] }
-export interface PatchProvisioningInstancesIdDetailResponse { ok: boolean; description: unknown; detail: unknown; options: unknown; publish: unknown; modules: unknown }
+export interface PatchProvisioningInstancesIdDetailRequest { description?: string; detail?: Record<string, unknown>; modules?: string[]; type?: string }
+export interface PatchProvisioningInstancesIdDetailResponse { ok: boolean; description: unknown; detail: unknown; options: unknown; publish: unknown; modules: unknown; type: unknown }
 export interface PatchProvisioningInstancesIdSettingsResponse { ok: boolean; saved: unknown; planet: unknown; push: unknown }
 export interface PatchTaskRecommendationsIdRequest { status: "declined" | "withdrawn" }
 export interface PatchTaskRecommendationsIdResponse { ok: boolean; recommendation: unknown }

package/docs/api/openapi.json

@@ -11710,7 +11710,7 @@
           "provisioning"
         ],
         "summary": "PATCH /provisioning/instances/:id/detail",
-        "description": "── The optional project detail (task 1002334, goal 1000046) ────────────── PATCH /provisioning/instances/:id/detail — answer (or re-answer) the wizard's OPTIONAL creation steps after creation. Body: any subset of { description, detail, modules }. rank: any authenticated builder (own resource; archon may change any — same gate as settings). THIS ROUTE IS WHAT MAKES THE STEP SKIPPABLE. Skipping at creation leaves the project dark-matter — off the map and un-joinable (ADR 0182 D4) — and that is a supported default only because there is a way back. Without this route \"optional\" would mean \"permanently unpublishable\", i.e. a dead end, which is precisely what criterion `proj-detail-interview` refuses. Deliberately NOT a settings-apply: nothing here is a policy the running instance obeys, so there is no web.env to patch and no restart to queue. The answers live on the platform row until a catalog row materializes (the provisioning_007 `type` precedent), and R16 (task 1002335) is the surface that reads `description` to compute publishability and name what is still missing. `modules` rides the SAME route for the same reason (BV1.R23, task 1002342, ADR 0245): step 4 of the wizard is skippable exactly as step 3 is, so it needs the same way back, and it lands on the same platform row under the same ownership gate. Only an ARRAY is a change — an omitted or null key leaves the column alone, so the \"never asked\" NULL (ADR 0240 §2) can never be written by a later edit. The always-on core stays unremovable by construction: badModuleSelection refuses its keys and `effectiveModules` re-adds it on read. AN ANSWER CAN BE TAKEN BACK (task 1003577). `detail` merges, so before this the first `team_shape` an owner sent was permanent — and \"never answered\" is a state `effectiveModules` reads (ADR 0240), not merely the absence of one. Sending `detail: { <key>: null }` UN-ANSWERS that question: the key is dropped from the jsonb, so the row reads back exactly as one that was never asked and the bundle the answer moved moves back. Only null does it — an empty string or any other value is still refused as off-vocabulary, and `detail: {}` still changes nothing, because a form that collected no answers is not asking for any to be erased.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "description": "── The optional project detail (task 1002334, goal 1000046) ────────────── PATCH /provisioning/instances/:id/detail — answer (or re-answer) the wizard's OPTIONAL creation steps after creation. Body: any subset of { description, detail, modules }. rank: any authenticated builder (own resource; archon may change any — same gate as settings). THIS ROUTE IS WHAT MAKES THE STEP SKIPPABLE. Skipping at creation leaves the project dark-matter — off the map and un-joinable (ADR 0182 D4) — and that is a supported default only because there is a way back. Without this route \"optional\" would mean \"permanently unpublishable\", i.e. a dead end, which is precisely what criterion `proj-detail-interview` refuses. Deliberately NOT a settings-apply: nothing here is a policy the running instance obeys, so there is no web.env to patch and no restart to queue. The answers live on the platform row until a catalog row materializes (the provisioning_007 `type` precedent), and R16 (task 1002335) is the surface that reads `description` to compute publishability and name what is still missing. `modules` rides the SAME route for the same reason (BV1.R23, task 1002342, ADR 0245): step 4 of the wizard is skippable exactly as step 3 is, so it needs the same way back, and it lands on the same platform row under the same ownership gate. Only an ARRAY is a change — an omitted or null key leaves the column alone, so the \"never asked\" NULL (ADR 0240 §2) can never be written by a later edit. The always-on core stays unremovable by construction: badModuleSelection refuses its keys and `effectiveModules` re-adds it on read. `type` RIDES IT TOO (task 1003504), and for the third time the same argument: the wizard's Type step declared something at creation and nothing owner-facing could change it afterwards, so task 1002772 had to narrow the wizard's own promise and stop saying \"you can change it later\". This is the route that earns the sentence back. It belongs here rather than on the settings channel for the mModules reason — a type is a DECLARATION on the platform row, not a policy the running instance obeys, so nothing is pushed to the project and nothing restarts. One consequence is worth naming, because the owner has to be told it: for a project whose picker was SKIPPED, `modules` is NULL and effectiveModules resolves the type's starter bundle at read time (ADR 0240 §2) — so changing the type moves the extras too. A set the owner picked for themselves is stored and never moves. The reply carries `modules` on every patch precisely so the caller learns which happened without a follow-up GET. AN ANSWER CAN BE TAKEN BACK (task 1003577). `detail` merges, so before this the first `team_shape` an owner sent was permanent — and \"never answered\" is a state `effectiveModules` reads (ADR 0240), not merely the absence of one. Sending `detail: { <key>: null }` UN-ANSWERS that question: the key is dropped from the jsonb, so the row reads back exactly as one that was never asked and the bundle the answer moved moves back. Only null does it — an empty string or any other value is still refused as off-vocabulary, and `detail: {}` still changes nothing, because a form that collected no answers is not asking for any to be erased.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
         "x-source": "modules/provisioning/routes/provisioning.js",
         "parameters": [
@@ -18856,6 +18856,10 @@
               "type": "string"
             },
             "maxItems": 50
+          },
+          "type": {
+            "type": "string",
+            "maxLength": 40
           }
         },
         "additionalProperties": false
@@ -18870,7 +18874,8 @@
           "detail": {},
           "options": {},
           "publish": {},
-          "modules": {}
+          "modules": {},
+          "type": {}
         },
         "required": [
           "ok",
@@ -18878,7 +18883,8 @@
           "detail",
           "options",
           "publish",
-          "modules"
+          "modules",
+          "type"
         ]
       },
       "PatchProvisioningInstancesIdSettingsResponse": {

package/docs/api-reference.md

@@ -474,7 +474,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | GET | `/api/bongos/provisioning/instances` | `any-builder` | — | GET /provisioning/instances — the caller's own instances + each open intent. |
 | POST | `/api/bongos/provisioning/instances` | `any-builder` | `slug`, `target_ref`, `hosting_shape`, `domain`, `no_address`, `tier`, `onboard_mode`, `type`, `description`, `detail`, `modules` | POST /provisioning/instances — request a new instance. |
 | GET | `/api/bongos/provisioning/instances/:id` | `any-builder` | — | GET /provisioning/instances/:id — read one instance (the manage page's read). |
-| PATCH | `/api/bongos/provisioning/instances/:id/detail` | `any-builder` | `description`, `detail`, `modules` | ── The optional project detail (task 1002334, goal 1000046) ────────────── PATCH /provisioning/instances/:id/detail — answer (or re-answe… |
+| PATCH | `/api/bongos/provisioning/instances/:id/detail` | `any-builder` | `description`, `detail`, `modules`, `type` | ── The optional project detail (task 1002334, goal 1000046) ────────────── PATCH /provisioning/instances/:id/detail — answer (or re-answe… |
 | POST | `/api/bongos/provisioning/instances/:id/domain` | `any-builder` | `domain` | POST /provisioning/instances/:id/domain — give the caller's OWN instance its address (task 1002692, gap 5: no path existed to add a domai… |
 | POST | `/api/bongos/provisioning/instances/:id/force-teardown` | `metic+archon` | — | POST /provisioning/instances/:id/force-teardown — Archon tears down ANY instance. |
 | POST | `/api/bongos/provisioning/instances/:id/github-app` | `any-builder` | `account` | POST /provisioning/instances/:id/github-app — mint a GitHub-App-Manifest onboarding link for the caller's OWN instance (task 2080, ADR 01… |