@bongos/core 1.19.980 → 1.19.982

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.980",
-  "core_contract": "1.19.980",
-  "source_commit": "7e92e28e22b7fc66cf188d2f089c9824fc3c2c4f",
+  "core_version": "1.19.982",
+  "core_contract": "1.19.982",
+  "source_commit": "a5257c54873e65bbbc155ed297456b95d5fc6dba",
   "source_ref": "HEAD",
-  "built_at": "2026-09-23T16:31:15.535Z",
+  "built_at": "2026-09-23T17:16:41.214Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 517,
     "agent_docs_stubbed": 26,
-    "functional_verbatim": 2386,
+    "functional_verbatim": 2389,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 2929,
-  "tree_sha256": "c520e6934b708166a12bcdce8eb65bec32d14c3141823739f4e11ca7a4ccf0e0",
+  "file_count": 2932,
+  "tree_sha256": "4fe68956083c075cc0d1a986e3f70788f301484ede1ca13cbea6736f8aa0207f",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -347,12 +347,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "d1f7b1bdb4daf98ee7e0c11fd8bd51d202413fb8c1d2cf684d9389d58974b24f"
+      "sha256": "11c3f5d462872cf65a44f18df3962f305f9ad74b26342240ae8905587964c82d"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "c3e0241775c4cad76f8bc17edcc131bfdf649b6280b1ae9559bccf863a8b2658"
+      "sha256": "f06b1cdeaecb450c800d108227c26755f311593f75a3d15d2023df217a87a310"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -362,17 +362,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "7a788085abb4096f48136d5908affd272da6c0b4129ed4de073b0934451e3028"
+      "sha256": "9090588dea0d315cf37dd4333d2d8785989681b1380518fe831cfbd9b1545457"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "692a295c1c9602f09da7f296b5e0550f7ae381a2f9fe34a060019cee6443287e"
+      "sha256": "01c1f524af646a8dfceb37f5c25748b05da851891dff06d66d7c42659531af78"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "d420a781a25d4d4b8f038894b7829a1e024aafbd51a6d32266ed120cbb7a50c9"
+      "sha256": "0ed448c51d0d65b288cd8c38cf8cbd480791abd10c198c0e15cd52d31f7021b2"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -1362,7 +1362,7 @@
     {
       "path": "docs/adr/0176-private-repo-deploy-keys.md",
       "mode": "0000644",
-      "sha256": "a397741f6fcbf88fe3a05fabe74c5fa0e6464d810e812ae7981700b13a0f1806"
+      "sha256": "6a3e592b377ec23a9de965834f27234bd818956c05435c9e56258b54edc436d8"
     },
     {
       "path": "docs/adr/0177-goal-membership-kind.md",
@@ -2142,12 +2142,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "8873738d997a6674e1e441d84ab099f50f771c4878cef4f179624269124d9617"
+      "sha256": "84d9a8e9b4616bf051529a4788e30553716c576a8b6daf268e754fabe038a2ad"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "4149767d635c42bbe1b4d4e44c18c017e188871cd3445887262ee1df1106061f"
+      "sha256": "b227cab471090f0e961366e0299ad4ac7195c9123e46215f4af7b3bd7cf7713b"
     },
     {
       "path": "docs/architecture.md",
@@ -2172,12 +2172,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "ba0cec7ca155cae33a729aeed1bc960396f62f24119b4189070ae0ed1720e7f6"
+      "sha256": "f30f0e6d96320996a43c9dc1e86259cdee14017ffc382c520915e5e45bd2fbfc"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "fa6b7f4460cd63dcd37fe69928707e6281a32a36a6a2ce1f18d430961ec51039"
+      "sha256": "47d8ce9cf66304fa6e7fb6afd0066d639ee36a2224c7d14d58fbfb2c73682150"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2707,7 +2707,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "b0b20c2d38f39b2de54cdc173285f2e37b582a6e94bc4b46244eed8ec5eca1cc"
+      "sha256": "5b812786a676f9c4d5a8a50dbaf9d9b6ef8fd836e8967f90ff4d29548637d0ee"
     },
     {
       "path": "docs/modules-contract.md",
@@ -4712,7 +4712,7 @@
     {
       "path": "modules/hall-ui/public/blockers-lib.js",
       "mode": "0000644",
-      "sha256": "3780d533a99f3418fe1f1c5486258ee105cdbe7320264bfbc08e3a88bb539150"
+      "sha256": "c251924697bf5f1157f3660b4b236c21c73d6b30394d6a3385dc8a4426c64d59"
     },
     {
       "path": "modules/hall-ui/public/blockers.html",
@@ -4722,7 +4722,7 @@
     {
       "path": "modules/hall-ui/public/blockers.js",
       "mode": "0000644",
-      "sha256": "756983ad538385f5992d088d781bffadf495cc866ed3fca6df56ef734c53f50f"
+      "sha256": "ad3e3ea63283c31a6602a06695a9248444bd7306fa3624b53f8687c4534e4171"
     },
     {
       "path": "modules/hall-ui/public/board-lib.js",
@@ -4927,7 +4927,7 @@
     {
       "path": "modules/hall-ui/public/goal-inbox.js",
       "mode": "0000644",
-      "sha256": "b64ea71dc70993e2d3f8e728a0c3ff6450ffb14d8bc84ea7fb6825f9758aa089"
+      "sha256": "d5466b9d9717ed3bcb4919b1d05c338945d73ad185fdfc7efffea5db382a2f7e"
     },
     {
       "path": "modules/hall-ui/public/goal-map-lib.js",
@@ -6742,7 +6742,7 @@
     {
       "path": "modules/provisioning/module.json",
       "mode": "0000644",
-      "sha256": "7b8f3cd100c15c8aaf16bf8d0d173993f4215cb58590a6e2f517a57bc099d240"
+      "sha256": "cfe235ec6835cc7fa101642dff2d0757806a45b27bdf0823059d3c3d11587c5e"
     },
     {
       "path": "modules/provisioning/onboard-plan.js",
@@ -6824,6 +6824,11 @@
       "mode": "0000644",
       "sha256": "a10d9ac50f6be584c33a6bb559ad9d0431c2ac7f4655c23fcdf47baedf540cd2"
     },
+    {
+      "path": "modules/provisioning/routes/repo-private.js",
+      "mode": "0000644",
+      "sha256": "d3e027abebdf6e799bf63bd18aa5958bbe212c8da73b20055b62f7250cd83927"
+    },
     {
       "path": "modules/provisioning/seams.js",
       "mode": "0000644",
@@ -7347,7 +7352,7 @@
     {
       "path": "modules/public-landing/public/projects.html",
       "mode": "0000644",
-      "sha256": "a9c38198d1491112e83ae135ac59f1318e6beb076d551677e9a239ce0ed6a335"
+      "sha256": "1f8f6bdbe6c4ef451acd357c1ad277132ec2bee4d688c2f700da2ed582d1e50b"
     },
     {
       "path": "modules/public-landing/public/projects.probes.json",
@@ -8147,12 +8152,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "d0620eae73bba11cd42473b163ad3eb1fc066cb17e4c9bbe8445517a57b20beb"
+      "sha256": "eace0d80d6fa83b011c78c5fd079d1cae88ae901e67df3a33be0031b9e222d4f"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "fe13c610a08748c99ae43a611bddad1709f43163c8c107b85fb6d8690fddbb97"
+      "sha256": "b41e008a0dadf8ab96c9801153e0075950bb415881784369df2c96b5963b68e5"
     },
     {
       "path": "public-docs/index.html",
@@ -10082,7 +10087,7 @@
     {
       "path": "src/bongos/routes/github.js",
       "mode": "0000644",
-      "sha256": "d8674cd2358b63f8463d91484495feaa38219fafdc0d925ad52ddb206a2cc84a"
+      "sha256": "752056364c7a826bdd4d6da2f14a0ce48284c93621ccdf5bea10bac3bbb2941f"
     },
     {
       "path": "src/bongos/routes/healthz.js",
@@ -10177,7 +10182,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "6c31da122ca01487eb9d0e70dc06fd77f36d60d2333d0b1f8f24c2660c86c7df"
+      "sha256": "6eb9e78bf371f8206b07336bf485fefc822966b2e13200a3b0dd688f1aa8967a"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -10707,7 +10712,7 @@
     {
       "path": "tests/blockers_lib.mjs",
       "mode": "0000644",
-      "sha256": "2b35127281fd8a932386e406b4dd36c6d95575c2f71853bec02d65c4ff904d00"
+      "sha256": "74ace2b06e545cf110094ad46e141e545dc00daff63292bdfeda9fa286e45c43"
     },
     {
       "path": "tests/blockers_page_ui.mjs",
@@ -11562,7 +11567,7 @@
     {
       "path": "tests/github_repo_visibility.mjs",
       "mode": "0000644",
-      "sha256": "c2c428ade3a7cf802dfc46415c1d3c1e09fe826e223df71101e81d014cb5d69e"
+      "sha256": "18b0bcd5a8b9a91ae7301b13816d1ea05cf940669b9c6cb50ba5b3cf5d186533"
     },
     {
       "path": "tests/github_repos_helpers.mjs",
@@ -13247,7 +13252,7 @@
     {
       "path": "tests/projects_hub.mjs",
       "mode": "0000644",
-      "sha256": "8898b1a4458b0d76c071c901f89eacc21fb64cbfed37614afad5bdea16bef4b3"
+      "sha256": "70f6f093aeec0c995cfa377511921c81a014ba6833751cd2ad661ce767e58c4e"
     },
     {
       "path": "tests/projects_hub_module_picker.mjs",
@@ -13257,7 +13262,12 @@
     {
       "path": "tests/projects_hub_pre_uat.mjs",
       "mode": "0000644",
-      "sha256": "b0aa7ed3cbc5a205942dbfb8a34344574a9a350c07dcda816ac70b8f36c5af38"
+      "sha256": "5e85019ba86c519e01b2f58f18f8b7af7d8250c1a3319109f625df1fc989369c"
+    },
+    {
+      "path": "tests/projects_hub_repo_private.mjs",
+      "mode": "0000644",
+      "sha256": "f4447800f87257cf6bb6c438293fee0762e693fdb97ea557af08b5928c1a27ce"
     },
     {
       "path": "tests/promote_deps_gate.mjs",
@@ -13409,6 +13419,11 @@
       "mode": "0000644",
       "sha256": "587c6e640493939be17f6f293ceba8d22d125c79e43c070793b0325458132c71"
     },
+    {
+      "path": "tests/provisioning_repo_private_route.mjs",
+      "mode": "0000644",
+      "sha256": "d7bdf82b4196f7037af476353ec562dc2e661bae0163526827413981ef61f438"
+    },
     {
       "path": "tests/provisioning_restart.mjs",
       "mode": "0000644",
@@ -13462,7 +13477,7 @@
     {
       "path": "tests/public_landing_projects.mjs",
       "mode": "0000644",
-      "sha256": "d361a8616065d668363f6bd05f10e3e018a263595d12fb514f194c6d06667094"
+      "sha256": "0e694ff6b1b2281fcc5a2d13a5099b9802f22589425d9cdb7b9a7f4cc08d696e"
     },
     {
       "path": "tests/public_mirror_export.mjs",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 410 operations across 61 resource groups
+- 411 operations across 61 resource groups
 
 ## Use it from your project
 

package/clients/bongos-client/bongos-client.global.js

@@ -759,6 +759,8 @@ function createClient(opts = {}) {
       postProvisioningInstancesIdGithubApp: (args) => request("POST", "/provisioning/instances/{id}/github-app", { hasBody: true }, args),
       // GET /provisioning/instances/{id}/invite-suggestions — rank: any-builder — GET /provisioning/instances/:id/invite-suggestions
       getProvisioningInstancesIdInviteSuggestions: (args) => request("GET", "/provisioning/instances/{id}/invite-suggestions", { hasBody: false }, args),
+      // POST /provisioning/instances/{id}/repo-private — rank: any-builder — POST /provisioning/instances/:id/repo-private
+      postProvisioningInstancesIdRepoPrivate: (args) => request("POST", "/provisioning/instances/{id}/repo-private", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/restart — rank: any-builder — POST /provisioning/instances/:id/restart
       postProvisioningInstancesIdRestart: (args) => request("POST", "/provisioning/instances/{id}/restart", { hasBody: true }, args),
       // GET /provisioning/instances/{id}/settings — rank: any-builder — GET /provisioning/instances/:id/settings

package/clients/bongos-client/index.cjs

@@ -758,6 +758,8 @@ function createClient(opts = {}) {
       postProvisioningInstancesIdGithubApp: (args) => request("POST", "/provisioning/instances/{id}/github-app", { hasBody: true }, args),
       // GET /provisioning/instances/{id}/invite-suggestions — rank: any-builder — GET /provisioning/instances/:id/invite-suggestions
       getProvisioningInstancesIdInviteSuggestions: (args) => request("GET", "/provisioning/instances/{id}/invite-suggestions", { hasBody: false }, args),
+      // POST /provisioning/instances/{id}/repo-private — rank: any-builder — POST /provisioning/instances/:id/repo-private
+      postProvisioningInstancesIdRepoPrivate: (args) => request("POST", "/provisioning/instances/{id}/repo-private", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/restart — rank: any-builder — POST /provisioning/instances/:id/restart
       postProvisioningInstancesIdRestart: (args) => request("POST", "/provisioning/instances/{id}/restart", { hasBody: true }, args),
       // GET /provisioning/instances/{id}/settings — rank: any-builder — GET /provisioning/instances/:id/settings

package/clients/bongos-client/index.d.ts

@@ -376,6 +376,7 @@ export interface PostProvisioningInstancesIdEnvManifestRequest { name: string; d
 export interface PostProvisioningInstancesIdForceTeardownResponse { ok: boolean; queued: unknown; action: unknown; status: unknown; superseded: unknown; message: unknown }
 export interface PostProvisioningInstancesIdGithubAppRequest { account?: string }
 export interface PostProvisioningInstancesIdGithubAppResponse { state: unknown; account: unknown; post_url: unknown; personal_url: unknown; org_url: unknown; org_login: unknown; manifest: unknown; redirect_url: unknown; expires_at: unknown }
+export interface PostProvisioningInstancesIdRepoPrivateResponse { ok: boolean; queued: unknown; action: unknown; status: unknown; message: unknown }
 export interface PostProvisioningInstancesIdRestartResponse { ok: boolean; queued: unknown; action: unknown; status: unknown; message: unknown }
 export interface PostProvisioningInstancesIdTeardownResponse { ok: boolean; queued: unknown; action: unknown; status: unknown; superseded: unknown; message: unknown }
 export interface PostProvisioningInstancesRequest { slug: string; target_ref?: string; hosting_shape?: string; domain?: string; no_address?: boolean; tier?: string; onboard_mode?: string; type?: string; description?: string; detail?: Record<string, unknown>; modules?: string[] }
@@ -1140,6 +1141,8 @@ export interface BongosClient {
     postProvisioningInstancesIdGithubApp(args?: RequestArgs & { body?: PostProvisioningInstancesIdGithubAppRequest }): Promise<PostProvisioningInstancesIdGithubAppResponse>;
     /** GET /provisioning/instances/{id}/invite-suggestions — rank: any-builder */
     getProvisioningInstancesIdInviteSuggestions(args?: RequestArgs): Promise<GetProvisioningInstancesIdInviteSuggestionsResponse>;
+    /** POST /provisioning/instances/{id}/repo-private — rank: any-builder */
+    postProvisioningInstancesIdRepoPrivate(args?: RequestArgs): Promise<PostProvisioningInstancesIdRepoPrivateResponse>;
     /** POST /provisioning/instances/{id}/restart — rank: any-builder */
     postProvisioningInstancesIdRestart(args?: RequestArgs): Promise<PostProvisioningInstancesIdRestartResponse>;
     /** GET /provisioning/instances/{id}/settings — rank: any-builder */

package/clients/bongos-client/index.mjs

@@ -755,6 +755,8 @@ export function createClient(opts = {}) {
       postProvisioningInstancesIdGithubApp: (args) => request("POST", "/provisioning/instances/{id}/github-app", { hasBody: true }, args),
       // GET /provisioning/instances/{id}/invite-suggestions — rank: any-builder — GET /provisioning/instances/:id/invite-suggestions
       getProvisioningInstancesIdInviteSuggestions: (args) => request("GET", "/provisioning/instances/{id}/invite-suggestions", { hasBody: false }, args),
+      // POST /provisioning/instances/{id}/repo-private — rank: any-builder — POST /provisioning/instances/:id/repo-private
+      postProvisioningInstancesIdRepoPrivate: (args) => request("POST", "/provisioning/instances/{id}/repo-private", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/restart — rank: any-builder — POST /provisioning/instances/:id/restart
       postProvisioningInstancesIdRestart: (args) => request("POST", "/provisioning/instances/{id}/restart", { hasBody: true }, args),
       // GET /provisioning/instances/{id}/settings — rank: any-builder — GET /provisioning/instances/:id/settings

package/docs/adr/0176-private-repo-deploy-keys.md

@@ -53,10 +53,11 @@ best-effort revokes the key by title. Pushes keep preferring the owner-token HTT
   origin still rides the shared alias.
   **Progress (2026-09-23):** the runner half has landed — task 1004167 let the wiring run
   before a flip (`intendedPrivate`), and task 1004193 added the `repo-private` intent whose
-  runner leg wires the key and only then flips. The refusal stays until task 1003078 adds the
-  route and the manage-page control that enqueue it. **That route is owner-only** (owner
-  decision, task 1004194): the runner acts with the owner's stored GitHub token whoever
-  queued the intent, so an archon override would act on another person's GitHub account.
+  runner leg wires the key and only then flips. Task 1003078 then added the route
+  (`POST /provisioning/instances/:id/repo-private`) and the manage-page control that enqueue it,
+  and the refusal is gone. **That route is owner-only** (owner decision, task 1004194): the
+  runner acts with the owner's stored GitHub token whoever queued the intent, so an archon
+  override would act on another person's GitHub account.
 - Builder **dev boxes** of a private-repo project were parked here as out of scope.
   **Answered on hardware 2026-08-25 (task 1003247): a box CAN read the private repo, and the
   auth design needed no change.** The GDS-backed credential helper (`otb-git-credential`,

package/docs/api/openapi.json

@@ -5582,7 +5582,7 @@
           "github"
         ],
         "summary": "POST /github/repo/visibility",
-        "description": "flips one of the caller's repos PUBLIC, with their own credential. The private direction is REFUSED here, before GitHub is ever called: the deploy pull still runs as the shared deploy key that cannot read a private repo (walk finding N4), so flipping private would break the project's next deploy — the refusal is the honest leg task 1003045 ships.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "description": "flips one of the caller's repos PUBLIC, with their own credential. The private direction is REFUSED here, before GitHub is ever called: a project stood up public reads its code with the shared key, which cannot read a private repo (walk finding N4), so a bare flip would break its next deploy. Making it private is POST /provisioning/instances/:id/repo-private (task 1003078), which wires the project's own deploy key before it flips.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
         "x-source": "src/bongos/routes/github.js",
         "requestBody": {
@@ -13630,6 +13630,70 @@
         ]
       }
     },
+    "/provisioning/instances/{id}/repo-private": {
+      "post": {
+        "operationId": "post_provisioning_instances_id_repo_private",
+        "tags": [
+          "provisioning"
+        ],
+        "summary": "POST /provisioning/instances/:id/repo-private",
+        "description": "POST /provisioning/instances/:id/repo-private — rank: any authenticated builder, and OWNER ONLY: no archon override, because the runner flips with the owner's stored GitHub token whoever asked (owner decision, task 1004194). 404 for everyone else, so another owner's id is never confirmed. Takes no body. The reply is a receipt — the repository is still public when it is sent; the manage page re-reads GitHub once the intent settles.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/provisioning/routes/repo-private.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "requestBody": {
+          "required": false,
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "additionalProperties": true
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostProvisioningInstancesIdRepoPrivateResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/provisioning/instances/{id}/restart": {
       "post": {
         "operationId": "post_provisioning_instances_id_restart",
@@ -24519,6 +24583,25 @@
           "expires_at"
         ]
       },
+      "PostProvisioningInstancesIdRepoPrivateResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "queued": {},
+          "action": {},
+          "status": {},
+          "message": {}
+        },
+        "required": [
+          "ok",
+          "queued",
+          "action",
+          "status",
+          "message"
+        ]
+      },
       "PostProvisioningInstancesIdRestartResponse": {
         "type": "object",
         "properties": {
@@ -26060,9 +26143,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 410,
-  "x-schema-count": 448,
+  "x-endpoint-count": 411,
+  "x-schema-count": 449,
   "x-undocumented-bodies": 9,
-  "x-response-schemas": 304,
+  "x-response-schemas": 305,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 410 endpoints across 67 route files.
+> **Generated from the live route files** — the route file is authoritative. 411 endpoints across 68 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust-boundary-server-enforced-permissions.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -507,7 +507,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | GET | `/api/bongos/projects/featured` | `public` | — | the public map of projects; no auth by design. |
 | POST | `/api/bongos/projects/invite` | `metic+archon` | `client_id`, `github_login` | own-or-metic in effect: invite a builder into a project (ADR 0141 §5, task #1002115), called by a `project.curate` holder OR the project'… |
 
-## `provisioning` (30)
+## `provisioning` (31)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -532,6 +532,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | POST | `/api/bongos/provisioning/instances/:id/force-teardown` | `metic+archon` | — | POST /provisioning/instances/:id/force-teardown — Archon tears down ANY instance. |
 | POST | `/api/bongos/provisioning/instances/:id/github-app` | `any-builder` | `account` | POST /provisioning/instances/:id/github-app — mint a GitHub-App-Manifest onboarding link for the caller's OWN instance (task 2080, ADR 01… |
 | GET | `/api/bongos/provisioning/instances/:id/invite-suggestions` | `any-builder` | — | ── Who is worth inviting (BV1.R28, task 1002347, goal 1000046 C6) ──────── GET /provisioning/instances/:id/invite-suggestions — turn the … |
+| POST | `/api/bongos/provisioning/instances/:id/repo-private` | `any-builder` | validated | POST /provisioning/instances/:id/repo-private — rank: any authenticated builder, and OWNER ONLY: no archon override, because the runner f… |
 | POST | `/api/bongos/provisioning/instances/:id/restart` | `any-builder` | — | POST /provisioning/instances/:id/restart — restart an ACTIVE project the heartbeat cannot reach (task 1003238). |
 | GET | `/api/bongos/provisioning/instances/:id/settings` | `any-builder` | — | GET /provisioning/instances/:id/settings — read a project's effective settings + the allowed values (so a form can render its choices). |
 | PATCH | `/api/bongos/provisioning/instances/:id/settings` | `any-builder` | validated | PATCH /provisioning/instances/:id/settings — change a project's settings. |