@bongos/core 1.19.954 → 1.19.955

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.954",
-  "core_contract": "1.19.954",
-  "source_commit": "acad663f4e19b39380709991fde4ca44b3b0200f",
+  "core_version": "1.19.955",
+  "core_contract": "1.19.955",
+  "source_commit": "3595ab322a25adbfb15980ecfbf3277c095e0d4b",
   "source_ref": "HEAD",
-  "built_at": "2026-09-22T04:43:18.772Z",
+  "built_at": "2026-09-22T05:17:25.737Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 514,
     "agent_docs_stubbed": 26,
-    "functional_verbatim": 2351,
+    "functional_verbatim": 2355,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 2891,
-  "tree_sha256": "3d3005d5554ab55a3c5c06fae24e85cd42682f858f0718688453770daed146a2",
+  "file_count": 2895,
+  "tree_sha256": "cb656bb0b99f15d870988930f28520127a84bbc30f2c897df885ef8139504e4a",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -347,12 +347,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "b97934444510d6fe817b4ef822c9325a81e9f65bb366835c24ba6733a63329d0"
+      "sha256": "7d0b5d24baaf5f06e7fafe32a7c7cd1ea6c69746fb92c95a0a611ad776432cd8"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "afe7215c4f9f87d238ffe2039994567f1268391bda6ef0c62d0dc753084ef24e"
+      "sha256": "71e5d4495bd293695bf42331bc20a6a3283fad8703663718209bd257953014f1"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -362,17 +362,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "b7e63a0281b7a20415b8731a7524c7cc129a50a00295a6fc84324b9adc7110d3"
+      "sha256": "525d496a716e92467593447bcbb71369d6bdb817605631023d9b081cd75ce4c1"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "bab205e1f4848b1ec807b179725cc066334a28d6c93c163b4ea93e5f6714d3b8"
+      "sha256": "f134e3ba8380879dae51531cd0867bbda06c5229a5d0dd8b29fa2e0f026490e5"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "80a61456e92b1f91f995b7f6b2f6c053d629661be7590bc3e31c123dff1468df"
+      "sha256": "2fe6fa6938205dce4bd1f48a3adc21b0898b78d3f125a9ee8c743497eaae6d22"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -2127,12 +2127,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "dbf692c4a6124cf43bed69819c4b07b6b9f58629ff81d355180e7772dd5ab23c"
+      "sha256": "9b60667dcf534053345a0de7ced96b840718de0ac89c7a4099a5a2c1ec24f17f"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "b5b14b94b2a9e57359f13a123720c0be8436ced73a034d706686a52cf086d248"
+      "sha256": "dd53ef353bb82815a0d5de1959065ebcfd021584577257837990ec85ec8294b0"
     },
     {
       "path": "docs/architecture.md",
@@ -2157,12 +2157,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "a1d0f320a0dd6522670f2e4b85e6075f5e268b140c807a6eb01fd2623f22ddb8"
+      "sha256": "ea08a06744310c312420c4af1e0f67154e324fe2be552b6d5c2fc683e18a63e8"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "d2119612d5f77597ed7e59a61824ceeb5a4bcdadcbe75b4dac918d098c450b42"
+      "sha256": "45091c4acfe82fa8968be566f8b14f414ee3df68772b13617cba55735de93d1e"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2692,7 +2692,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "7371d2bd9ef4a41117ed7ba1d80ba4bf9c603d0dbf3faad1f4c44abf59b1b834"
+      "sha256": "e153e8b45c3cda248dfa42e233d2650353711b41650e7066287d94a43a347fc8"
     },
     {
       "path": "docs/modules-contract.md",
@@ -6554,6 +6554,11 @@
       "mode": "0000644",
       "sha256": "29dea0e1c5b5f320bb4c03caab3d8834bc8797f86e63692536c58f36502c032b"
     },
+    {
+      "path": "modules/provisioning/env-manifest.js",
+      "mode": "0000644",
+      "sha256": "a99596f5d3780a426ce9a5fcb287123dc860a04dfa08ce32a9ab81b2e06938ef"
+    },
     {
       "path": "modules/provisioning/migrations/provisioning_001_tables.sql",
       "mode": "0000644",
@@ -6664,10 +6669,15 @@
       "mode": "0000644",
       "sha256": "c00e4b64ebb875dc58a42d6b28ce3915ac03d0f22478610e031b87b5b9e435aa"
     },
+    {
+      "path": "modules/provisioning/migrations/provisioning_023_env_manifest.sql",
+      "mode": "0000644",
+      "sha256": "1fb60b17c411d9529f4c0ecd0b3d1efc9b2061567a1b31bf74fa706e2e83b3d7"
+    },
     {
       "path": "modules/provisioning/module.json",
       "mode": "0000644",
-      "sha256": "b5aa91b7a12b3d0852c59057b8c5bf2207962d6245014ab13dc7d3bc3388c432"
+      "sha256": "7b8f3cd100c15c8aaf16bf8d0d173993f4215cb58590a6e2f517a57bc099d240"
     },
     {
       "path": "modules/provisioning/onboard-plan.js",
@@ -6729,6 +6739,11 @@
       "mode": "0000644",
       "sha256": "3969c5ace3225593a06baddaef7d7b92cb51fd18e34f2d290d4645fa517eecb8"
     },
+    {
+      "path": "modules/provisioning/routes/env-manifest.js",
+      "mode": "0000644",
+      "sha256": "e7e85fb30fc6ac32b926902e5e064736ee65eb47ad90838f906f5fb21fbbec76"
+    },
     {
       "path": "modules/provisioning/routes/provisioning.js",
       "mode": "0000644",
@@ -7257,7 +7272,7 @@
     {
       "path": "modules/public-landing/public/projects.html",
       "mode": "0000644",
-      "sha256": "dab97906f2db723c0ec00aaf1a7930b7e0051098e6102704f65a6d0c705543ff"
+      "sha256": "3465b462b09b49a93b4e6dcd4a2ec23753bf270b5a1a9d8d92f2013c7d2e3bf8"
     },
     {
       "path": "modules/public-landing/public/projects.probes.json",
@@ -8057,12 +8072,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "e1ddc2e150ccc6532cee7a00874b024e1fc96c457bff45794713935b59a8e0e3"
+      "sha256": "4e5b09dee33c9b46fdc4e4e0a1025df50e79bdcad9ed6be9aee8d81a52d14953"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "19283a39f9d8e4e368fe3685c0121445caeb1de9846f724e0fd4729dc6bee351"
+      "sha256": "e8b75ca994f900a282dedd9e5c0589c151f3e8b0eab513e4c51b4ed254ab34f2"
     },
     {
       "path": "public-docs/index.html",
@@ -10067,7 +10082,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "289cae7ca43fc84cd0f7e655c86f6f8613b8bed78d3997d6d49bdfb544555b6a"
+      "sha256": "a3909e0963c8f56e17bca596d30f27ee3e10100cefb055bf8a2f3506139a18ed"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -13199,6 +13214,11 @@
       "mode": "0000644",
       "sha256": "d1c9456ad442caf2485c5c38e5bad98ef6c834589e405eade59cbeffec534ea0"
     },
+    {
+      "path": "tests/provisioning_env_manifest.mjs",
+      "mode": "0000644",
+      "sha256": "1c6ea2d8ec4a8b3836a1976511ac3727fd158ac88db373efe89950bbadf4296f"
+    },
     {
       "path": "tests/provisioning_github_app_routes.mjs",
       "mode": "0000644",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 405 operations across 61 resource groups
+- 409 operations across 61 resource groups
 
 ## Use it from your project
 

package/clients/bongos-client/bongos-client.global.js

@@ -743,6 +743,14 @@ function createClient(opts = {}) {
       postProvisioningInstancesIdDisconnect: (args) => request("POST", "/provisioning/instances/{id}/disconnect", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/domain — rank: any-builder — POST /provisioning/instances/:id/domain
       postProvisioningInstancesIdDomain: (args) => request("POST", "/provisioning/instances/{id}/domain", { hasBody: true }, args),
+      // GET /provisioning/instances/{id}/env-manifest — rank: any-builder — GET /provisioning/instances/:id/env-manifest
+      getProvisioningInstancesIdEnvManifest: (args) => request("GET", "/provisioning/instances/{id}/env-manifest", { hasBody: false }, args),
+      // POST /provisioning/instances/{id}/env-manifest — rank: any-builder — POST /provisioning/instances/:id/env-manifest
+      postProvisioningInstancesIdEnvManifest: (args) => request("POST", "/provisioning/instances/{id}/env-manifest", { hasBody: true }, args),
+      // DELETE /provisioning/instances/{id}/env-manifest/{varId} — rank: any-builder — DELETE /provisioning/instances/:id/env-manifest/:varId
+      deleteProvisioningInstancesIdEnvManifestVarId: (args) => request("DELETE", "/provisioning/instances/{id}/env-manifest/{varId}", { hasBody: false }, args),
+      // PATCH /provisioning/instances/{id}/env-manifest/{varId} — rank: any-builder — PATCH /provisioning/instances/:id/env-manifest/:varId
+      patchProvisioningInstancesIdEnvManifestVarId: (args) => request("PATCH", "/provisioning/instances/{id}/env-manifest/{varId}", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/force-teardown — rank: metic+archon — POST /provisioning/instances/:id/force-teardown
       postProvisioningInstancesIdForceTeardown: (args) => request("POST", "/provisioning/instances/{id}/force-teardown", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/github-app — rank: any-builder — POST /provisioning/instances/:id/github-app

package/clients/bongos-client/index.cjs

@@ -742,6 +742,14 @@ function createClient(opts = {}) {
       postProvisioningInstancesIdDisconnect: (args) => request("POST", "/provisioning/instances/{id}/disconnect", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/domain — rank: any-builder — POST /provisioning/instances/:id/domain
       postProvisioningInstancesIdDomain: (args) => request("POST", "/provisioning/instances/{id}/domain", { hasBody: true }, args),
+      // GET /provisioning/instances/{id}/env-manifest — rank: any-builder — GET /provisioning/instances/:id/env-manifest
+      getProvisioningInstancesIdEnvManifest: (args) => request("GET", "/provisioning/instances/{id}/env-manifest", { hasBody: false }, args),
+      // POST /provisioning/instances/{id}/env-manifest — rank: any-builder — POST /provisioning/instances/:id/env-manifest
+      postProvisioningInstancesIdEnvManifest: (args) => request("POST", "/provisioning/instances/{id}/env-manifest", { hasBody: true }, args),
+      // DELETE /provisioning/instances/{id}/env-manifest/{varId} — rank: any-builder — DELETE /provisioning/instances/:id/env-manifest/:varId
+      deleteProvisioningInstancesIdEnvManifestVarId: (args) => request("DELETE", "/provisioning/instances/{id}/env-manifest/{varId}", { hasBody: false }, args),
+      // PATCH /provisioning/instances/{id}/env-manifest/{varId} — rank: any-builder — PATCH /provisioning/instances/:id/env-manifest/:varId
+      patchProvisioningInstancesIdEnvManifestVarId: (args) => request("PATCH", "/provisioning/instances/{id}/env-manifest/{varId}", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/force-teardown — rank: metic+archon — POST /provisioning/instances/:id/force-teardown
       postProvisioningInstancesIdForceTeardown: (args) => request("POST", "/provisioning/instances/{id}/force-teardown", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/github-app — rank: any-builder — POST /provisioning/instances/:id/github-app

package/clients/bongos-client/index.d.ts

@@ -13,6 +13,7 @@ export interface DeleteGovernmentAssignmentsBuilderIdRankKeyResponse { ok: boole
 export interface DeleteGovernmentRanksRankKeyPermissionsPermissionKeyResponse { ok: boolean; rank_key: unknown; permission_key: unknown; removed: unknown }
 export interface DeleteInboxIdSparkResponse { idea: unknown; sparked: boolean; unchanged: boolean }
 export interface DeleteMemoryFileResponse { deleted: boolean; builder_id: unknown; path: unknown }
+export interface DeleteProvisioningInstancesIdEnvManifestVarIdResponse { ok: boolean; removed: boolean; message: unknown }
 export interface DeleteSpecialitiesIdDocumentsDocIdResponse { ok: boolean }
 export interface DeleteTasksIdCriteriaCriterionIdResponse { ok: boolean; removed: unknown }
 export interface DeleteTasksIdDependenciesDepIdResponse { ok: boolean; removed: unknown }
@@ -107,6 +108,7 @@ export interface GetProjectsResponse { projects: unknown }
 export interface GetProvisioningFleetResponse { instances: unknown; capacity: unknown }
 export interface GetProvisioningGithubAppStatusResponse { ok: boolean; status: unknown; ready: unknown; terminal: unknown; domain: unknown; instance_status: unknown; app_slug: unknown }
 export interface GetProvisioningHealthResponse { module: unknown; ok: boolean; coreVersion: unknown }
+export interface GetProvisioningInstancesIdEnvManifestResponse { instance: unknown; env_vars: unknown; environments: unknown; values_held: boolean; note: unknown }
 export interface GetProvisioningInstancesIdInviteSuggestionsResponse { suggested: unknown; seeking: unknown; reason: unknown; unavailable?: unknown }
 export interface GetProvisioningInstancesIdResponse { instance: unknown; open_intent: unknown; github_app: unknown }
 export interface GetProvisioningInstancesIdSettingsResponse { ok: boolean; settings: unknown; planet: unknown; options: unknown }
@@ -197,6 +199,8 @@ export interface PatchProjectsIdStatusRequest { status: string }
 export interface PatchProjectsIdStatusResponse { project: unknown }
 export interface PatchProvisioningInstancesIdDetailRequest { description?: string; detail?: Record<string, unknown>; modules?: string[]; type?: string }
 export interface PatchProvisioningInstancesIdDetailResponse { ok: boolean; description: unknown; detail: unknown; options: unknown; publish: unknown; modules: unknown; type: unknown }
+export interface PatchProvisioningInstancesIdEnvManifestVarIdRequest { name?: string; description?: string; environments?: unknown[]; required?: boolean }
+export interface PatchProvisioningInstancesIdEnvManifestVarIdResponse { ok: boolean; env_var: unknown; values_held: boolean }
 export interface PatchProvisioningInstancesIdSettingsResponse { ok: boolean; saved: unknown; planet: unknown; push: unknown }
 export interface PatchSpecialitiesIdRequest { name?: string; summary?: string; contract_md?: string; visibility?: string; sellable?: boolean }
 export interface PatchSpecialitiesIdResponse { speciality: unknown }
@@ -368,6 +372,7 @@ export interface PostProvisioningInstancesIdDisconnectRequest { confirm_slug: st
 export interface PostProvisioningInstancesIdDisconnectResponse { ok: boolean; queued: unknown; action: unknown; status: unknown; message: unknown }
 export interface PostProvisioningInstancesIdDomainRequest { domain: string }
 export interface PostProvisioningInstancesIdDomainResponse { ok: boolean; changed: boolean; queued: unknown; domain: unknown; message: unknown; replaced?: unknown }
+export interface PostProvisioningInstancesIdEnvManifestRequest { name: string; description?: string; environments?: unknown[]; required?: boolean }
 export interface PostProvisioningInstancesIdForceTeardownResponse { ok: boolean; queued: unknown; action: unknown; status: unknown; superseded: unknown; message: unknown }
 export interface PostProvisioningInstancesIdGithubAppRequest { account?: string }
 export interface PostProvisioningInstancesIdGithubAppResponse { state: unknown; account: unknown; post_url: unknown; personal_url: unknown; org_url: unknown; org_login: unknown; manifest: unknown; redirect_url: unknown; expires_at: unknown }
@@ -1119,6 +1124,14 @@ export interface BongosClient {
     postProvisioningInstancesIdDisconnect(args: RequestArgs & { body: PostProvisioningInstancesIdDisconnectRequest }): Promise<PostProvisioningInstancesIdDisconnectResponse>;
     /** POST /provisioning/instances/{id}/domain — rank: any-builder */
     postProvisioningInstancesIdDomain(args: RequestArgs & { body: PostProvisioningInstancesIdDomainRequest }): Promise<PostProvisioningInstancesIdDomainResponse>;
+    /** GET /provisioning/instances/{id}/env-manifest — rank: any-builder */
+    getProvisioningInstancesIdEnvManifest(args?: RequestArgs): Promise<GetProvisioningInstancesIdEnvManifestResponse>;
+    /** POST /provisioning/instances/{id}/env-manifest — rank: any-builder */
+    postProvisioningInstancesIdEnvManifest(args: RequestArgs & { body: PostProvisioningInstancesIdEnvManifestRequest }): Promise<ApiResponse>;
+    /** DELETE /provisioning/instances/{id}/env-manifest/{varId} — rank: any-builder */
+    deleteProvisioningInstancesIdEnvManifestVarId(args?: RequestArgs): Promise<DeleteProvisioningInstancesIdEnvManifestVarIdResponse>;
+    /** PATCH /provisioning/instances/{id}/env-manifest/{varId} — rank: any-builder */
+    patchProvisioningInstancesIdEnvManifestVarId(args?: RequestArgs & { body?: PatchProvisioningInstancesIdEnvManifestVarIdRequest }): Promise<PatchProvisioningInstancesIdEnvManifestVarIdResponse>;
     /** POST /provisioning/instances/{id}/force-teardown — rank: metic+archon */
     postProvisioningInstancesIdForceTeardown(args?: RequestArgs): Promise<PostProvisioningInstancesIdForceTeardownResponse>;
     /** POST /provisioning/instances/{id}/github-app — rank: any-builder */

package/clients/bongos-client/index.mjs

@@ -739,6 +739,14 @@ export function createClient(opts = {}) {
       postProvisioningInstancesIdDisconnect: (args) => request("POST", "/provisioning/instances/{id}/disconnect", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/domain — rank: any-builder — POST /provisioning/instances/:id/domain
       postProvisioningInstancesIdDomain: (args) => request("POST", "/provisioning/instances/{id}/domain", { hasBody: true }, args),
+      // GET /provisioning/instances/{id}/env-manifest — rank: any-builder — GET /provisioning/instances/:id/env-manifest
+      getProvisioningInstancesIdEnvManifest: (args) => request("GET", "/provisioning/instances/{id}/env-manifest", { hasBody: false }, args),
+      // POST /provisioning/instances/{id}/env-manifest — rank: any-builder — POST /provisioning/instances/:id/env-manifest
+      postProvisioningInstancesIdEnvManifest: (args) => request("POST", "/provisioning/instances/{id}/env-manifest", { hasBody: true }, args),
+      // DELETE /provisioning/instances/{id}/env-manifest/{varId} — rank: any-builder — DELETE /provisioning/instances/:id/env-manifest/:varId
+      deleteProvisioningInstancesIdEnvManifestVarId: (args) => request("DELETE", "/provisioning/instances/{id}/env-manifest/{varId}", { hasBody: false }, args),
+      // PATCH /provisioning/instances/{id}/env-manifest/{varId} — rank: any-builder — PATCH /provisioning/instances/:id/env-manifest/:varId
+      patchProvisioningInstancesIdEnvManifestVarId: (args) => request("PATCH", "/provisioning/instances/{id}/env-manifest/{varId}", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/force-teardown — rank: metic+archon — POST /provisioning/instances/:id/force-teardown
       postProvisioningInstancesIdForceTeardown: (args) => request("POST", "/provisioning/instances/{id}/force-teardown", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/github-app — rank: any-builder — POST /provisioning/instances/:id/github-app