@bongos/core 1.20.49 → 1.20.50

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.20.49",
-  "core_contract": "1.20.49",
-  "source_commit": "09a34ff77a83359f31b5f355298622f25edc492b",
+  "core_version": "1.20.50",
+  "core_contract": "1.20.50",
+  "source_commit": "77776cc1c6f04547fb61fd93028687742fb279dc",
   "source_ref": "HEAD",
-  "built_at": "2026-10-01T04:16:18.934Z",
+  "built_at": "2026-10-01T04:30:46.581Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 568,
     "agent_docs_stubbed": 27,
-    "functional_verbatim": 2707,
+    "functional_verbatim": 2711,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 3303,
-  "tree_sha256": "2ca42f50c6f783c599487ec15cf508f6a562170d02ea9e59c78658d8166dbb0d",
+  "file_count": 3307,
+  "tree_sha256": "cad902c0031e78805f52c5d0d42081b635ad477c2fcdac67592dbf22a1311cd7",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -202,7 +202,7 @@
     {
       "path": ".claude/skills/new-project/SKILL.md",
       "mode": "0000644",
-      "sha256": "32468ba275eb89f62ad48bf11a41362d8190dd34e22a4c63a6c4b27ecef9d2cf"
+      "sha256": "daa71376ca8924cb51ca5bff6719adbe3fbf4fd686ac2f71b7fc07479bd5eb23"
     },
     {
       "path": ".claude/skills/owner-review/SKILL.md",
@@ -337,7 +337,7 @@
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "511a2a545be895971f0122057a93a0f96270be8242ef2131393033d544b887b5"
+      "sha256": "9986db1d37ffb6bae1c47b321caa4a57398e8dbbb30218712c72dca1ae5d52fd"
     },
     {
       "path": "clients/bongos-client/index.mjs",
@@ -2257,12 +2257,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "4db9e523ef0c4d44f326a733165ddba0d2110d957f3f870d31327b01675cb1e5"
+      "sha256": "b95ae7083b019e732e55cb9cea570bacb7202cf227da5ee092b617c62257acb7"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "168ed8033455dd5bbf2156d7bd656ba88135344a5891c6d1edb8367fb360097f"
+      "sha256": "8f242ce551fcf340404763af7ea4cdf479597ced1d0aee2b793f61bdfc49b481"
     },
     {
       "path": "docs/architecture.md",
@@ -2287,12 +2287,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "c5599a32ef2981f5e568ceeb5ccf182f1948e60001eb1486d357e888d060462b"
+      "sha256": "0cf7b92a8a0588dfe9a78fd08a678281f28941a81f50388aecbea86e6c7eb1c7"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "b8ed2b89861e7d07153107a893843e0ca95fd22102632e31600f0051e5e68c03"
+      "sha256": "a851650f5c347d65918f5309bd4f4acb04a7b49cb8e72527794ebc62a7d22f68"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2797,7 +2797,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "66624c1216862e6bb95bb631696cdf721fc5aa837b72a747ffc1ab83343b1490"
+      "sha256": "5b1b9ccb22a72989e5be7ce12c654414d6030cc7bd87e96184103f9cd8b4309d"
     },
     {
       "path": "docs/modules-contract.md",
@@ -2882,12 +2882,12 @@
     {
       "path": "docs/page-inventory.json",
       "mode": "0000644",
-      "sha256": "f018929b09f091ca974b68c19c43be8d83464b8e4cd254a9ebeb61a05c349ef2"
+      "sha256": "39d2b93d3c03fd6a90fa0e16fc2db3996c2ae9519502a47217c2c4380ab6307a"
     },
     {
       "path": "docs/page-readings.json",
       "mode": "0000644",
-      "sha256": "8c0b47288bdff5ea476b4d28d75d7147ce154d93770c63271b7e640cfaea5579"
+      "sha256": "84698b47c37bf0a6d997568b7c485d26eb0363bf9ebcd5efe905391936b73b79"
     },
     {
       "path": "docs/project-context.template.md",
@@ -7497,7 +7497,7 @@
     {
       "path": "modules/platform-identity/routes/sso.js",
       "mode": "0000644",
-      "sha256": "cf94bb0b9cfd0c274d23c93a7a27b70f02f343c847ffaf8514e29375e7fd4582"
+      "sha256": "927897f303a28b8304b53107feb0787cfd4457b1091544d21d76be21b22d47c9"
     },
     {
       "path": "modules/platform-identity/scouting-authz.js",
@@ -7764,6 +7764,11 @@
       "mode": "0000644",
       "sha256": "73794821e3beca0129a435747e89dd5755b26f054dca0d8ca0b421392abf7127"
     },
+    {
+      "path": "modules/provisioning/migrations/provisioning_033_terms_ack.sql",
+      "mode": "0000644",
+      "sha256": "2563a68ccd1b9f6f78e7691872031a2100eec824cbe0f627742b7c9e3660f3b6"
+    },
     {
       "path": "modules/provisioning/module.json",
       "mode": "0000644",
@@ -7772,7 +7777,7 @@
     {
       "path": "modules/provisioning/onboard-plan.js",
       "mode": "0000644",
-      "sha256": "770f90649764ff54a36ab43554edbca542d9fba1684f4fa70ff4b023dd677177"
+      "sha256": "41ce865922a36dfbc9f228cdc936b0fa2c383d4d87bebfb44285c75777c0192b"
     },
     {
       "path": "modules/provisioning/paid-shape-gate.js",
@@ -7812,7 +7817,7 @@
     {
       "path": "modules/provisioning/provisioning.js",
       "mode": "0000644",
-      "sha256": "fb4f09b621654eebe595dcbca305773ea11ed063506a6e4116391e43566a540d"
+      "sha256": "37131973568839e1856ea8a95f1ae0ccb0cb689cefc69a5c58f8f87771d965c7"
     },
     {
       "path": "modules/provisioning/public-refusal.js",
@@ -7872,7 +7877,7 @@
     {
       "path": "modules/provisioning/routes/provisioning.js",
       "mode": "0000644",
-      "sha256": "6269c57fd10238a0660beae9df2ab686ea62a8e777eee04bc64d15e03ca503b0"
+      "sha256": "8da00b1a9056750636d6c49d251c87e814591414638c60b574f86df9bf89d906"
     },
     {
       "path": "modules/provisioning/routes/render-standup.js",
@@ -7904,6 +7909,11 @@
       "mode": "0000644",
       "sha256": "77c78cb641c5504bf3595d33f78bc8045e78f5d6e48151f542803e9cc6060363"
     },
+    {
+      "path": "modules/provisioning/terms-ack.js",
+      "mode": "0000644",
+      "sha256": "ef37433dc4e22636fc1c581b098e73cd1a13c769cae85b496b2f4bb001745cec"
+    },
     {
       "path": "modules/provisioning/tests/liveness-notify.mjs",
       "mode": "0000644",
@@ -8437,17 +8447,17 @@
     {
       "path": "modules/public-landing/public/projects.html",
       "mode": "0000644",
-      "sha256": "e9ba493a5969fb4e544ea578a5ebd913885e30945b3ef08b76077620fda3b357"
+      "sha256": "2b1a8a657893cf3b70c9d6ca20ab998948eaa05f668e2ebaf1da053a7814d64b"
     },
     {
       "path": "modules/public-landing/public/projects.probes.json",
       "mode": "0000644",
-      "sha256": "50282b02d4b6158c9c6d1a9516da596c0af4ae4dcbff2966091a48f866a38b07"
+      "sha256": "b6ccdcd835d2501164202bdfca5e67ab63d5dd2d23915542d0c85e3ec4c0524a"
     },
     {
       "path": "modules/public-landing/public/projects.states.json",
       "mode": "0000644",
-      "sha256": "5ce71b5f4c9cf3b9c955bd6e86a8f9b2c8fc53a917955a57577272972ab31693"
+      "sha256": "a326185c4502b835c4defbb4365b94070a6e6a90f824e5841a321193ed8aaefd"
     },
     {
       "path": "modules/public-landing/public/terms.html",
@@ -8977,7 +8987,7 @@
     {
       "path": "modules/ui-design/kit/serve.js",
       "mode": "0000644",
-      "sha256": "6ece4f313e572e79bc3ed748b43a8d98be1b70f134b6c0aae603dc236ea2ffb3"
+      "sha256": "31b7bca095aa946bb7c03e5b674eb6dbc46b006d1b895dc5386183841ae5193d"
     },
     {
       "path": "modules/ui-design/kit/tells.js",
@@ -9112,12 +9122,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "614cec1013edb843876052b8109cf50c2de0a86ace5c5e0eb428e76355af60a2"
+      "sha256": "e98bd608798dcbe736425fb3c7f393b79cb6a937bc73638470c224bc1ed35c3d"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "ee3a093df5f2319def47f82f50a1da0a1ae0e41b04bd8cb6988e31e639ccd818"
+      "sha256": "0591e41d90e6294064fc08146c250ef23a9b870126fad6f6d6210a58ff96cc05"
     },
     {
       "path": "public-docs/index.html",
@@ -9137,7 +9147,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "cbf964eef2d6f15a744b4b6977d4ca32ef7cdaa5d034e2b8a4224e9889fd30b7"
+      "sha256": "181b85decdd35dffa70d9506483db542372eb568eca7428cb822c6f8bbf207a9"
     },
     {
       "path": "scripts/bongos-mcp.js",
@@ -11302,7 +11312,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "5cae9a1648e9be91948c78e68e09622c9779c3f5e42464ab347c939f40375a26"
+      "sha256": "1a7432fc1ee93a620bddd1aa291de2f279fc7df8d66ad91d1edf9df65991f4f6"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -14882,27 +14892,27 @@
     {
       "path": "tests/projects_hub.mjs",
       "mode": "0000644",
-      "sha256": "ba6e898d0b910e61a8a17b1640dee7cdfacff89a00d2ba5111d3b862bbf2f3ba"
+      "sha256": "f930032b644be131793d61f664a65a338fc127c60cafaca1213d38ca04768b51"
     },
     {
       "path": "tests/projects_hub_app_status.mjs",
       "mode": "0000644",
-      "sha256": "c37555e61445445a2be5671a775532389d4b368595e24c138694735b6a76310c"
+      "sha256": "ce5e42848d72ca26f7328e56c8919433592120629aa2f2078f74878afa7f1962"
     },
     {
       "path": "tests/projects_hub_app_step.mjs",
       "mode": "0000644",
-      "sha256": "c3d744459af82c770b04158b0cd3ec41cd2bb2f458c57992d80fde67d03565f4"
+      "sha256": "c091c34792140e1583f0d391a6b8148889f4545fcb8d429f9a6c026d07138c0d"
     },
     {
       "path": "tests/projects_hub_module_picker.mjs",
       "mode": "0000644",
-      "sha256": "be86a090157d31daa3b23cc347683b66fa5a9b82238b3461cba7b06b9c8a60cd"
+      "sha256": "e0273a4ba666fc8590f53b68bdd4bc4a958cf680049369b88d237c7d171a2e1a"
     },
     {
       "path": "tests/projects_hub_pre_uat.mjs",
       "mode": "0000644",
-      "sha256": "5a2d7c53cf71d22dc7a7f4547c9dc59746002e35330a92c7047e4742c1977073"
+      "sha256": "00f0adb1a3aa0add4d908fc41c9eb4f2925b6ee139da570e2edd2a2a6af319dc"
     },
     {
       "path": "tests/projects_hub_render_connect.mjs",
@@ -15149,6 +15159,11 @@
       "mode": "0000644",
       "sha256": "1b5decd026e6487c9477b87f533852dd93821b6688c3c76e694041b3918ee420"
     },
+    {
+      "path": "tests/provisioning_terms_ack.mjs",
+      "mode": "0000644",
+      "sha256": "31f7a766772450f2f79a43126154f9840d9a22972f0fcc9399f71dfbf95c43a2"
+    },
     {
       "path": "tests/provisioning_wizard_create_xenos.mjs",
       "mode": "0000644",
@@ -16482,12 +16497,17 @@
     {
       "path": "tests/wizard_draft_resume.mjs",
       "mode": "0000644",
-      "sha256": "125def7a5d217e8a81b72165703142c67c55ffa1813767a96037ea54a88c5aba"
+      "sha256": "78416f15210b4931308f6462954e2d278b93ce010350a66e920ae59862306016"
+    },
+    {
+      "path": "tests/wizard_front_door.mjs",
+      "mode": "0000644",
+      "sha256": "fd4ad79b245e6f021a13348b61088a4e2d3424d9732ff72e144af69f128bb86a"
     },
     {
       "path": "tests/wizard_intent_resume.mjs",
       "mode": "0000644",
-      "sha256": "402f34f5d986d975a8f3a5557cf5fd661c499c76c82ec48b98ae6611067e294a"
+      "sha256": "3a6eb4237025ed523b33a66ed28c927890e251dc2c44e8ee023024a2b6525324"
     },
     {
       "path": "tests/wizard_preselect_why.mjs",

package/.claude/skills/new-project/SKILL.md

@@ -21,6 +21,10 @@ Six steps are **irreducibly human** and must be rendered as **precise, UI-first,
 
 ## The canonical sequence
 
+### 0. Before the rail — the front door (task 1004417)
+
+The hub's wizard opens on two screens before step 1, after sign-in. **The terms:** the owner ticks that they can sign legally (or get a signature) for the platform's use and acknowledge the terms. The create request carries only `terms_acknowledged: true`; the server records WHICH terms version on the project (`provisioning_instances.terms_ack_at` / `terms_ack_version`, read from the platform's own `TERMS_VERSION`, never from the body). **Demo or create:** two equal doors. The demo route is not built yet (BV2.PS09), so walk the create door. When you guide an owner through the CLI or by hand, send the owner to `/terms` and get the same acknowledgement from them in words before you file anything. The CLI does not record it yet, so a project filed that way stores none.
+
 ### 1. Decide name + address
 
 Interview the owner for: product name, world name, company; the **GitHub repo** (`owner/name`); the **domain** they will use (bring-your-own — ADR 0111 §4); and a DNS/db-safe **instance slug** (lowercase `[a-z0-9-]`, e.g. `mercury`).
@@ -183,6 +187,7 @@ Steps 12 and 13 are **not** part of that criterion and must never gate it. They
 ## Constraints
 
 - **This skill is the source of truth for the sequence.** If a step changes, change it here; `bongos onboard` (task 1982) and the hall wizard (task 1983) must render the same sequence. The machine-readable twin is [`modules/provisioning/onboard-plan.js`](../../../modules/provisioning/onboard-plan.js), served at `GET /provisioning/onboard-plan` — a **rail** step added here gets a step there in the same change, or the two drift and each claims to be canonical.
+- **Step 0 (the front door) is not in that plan either**, for the opposite reason: it comes before the rail, is a hub-screen acknowledgement rather than a creation step, and carries no step of the machine setup. Its record is the project's terms columns, not a rail key.
 - **Steps 12 and 13 are deliberately NOT in that plan**, and that is the distinction to keep: the plan is the creation rail, and both of those run only once the project exists. A step that can only run after the terminal step is not a step in the rail ([ADR 0249](../../../docs/adr/0249-the-invite-step-is-the-done-panel-s-first-act-not-a-rail-step.md)) — it belongs to the done panel and the project's own page, each of which carries its own way back.
 - **Standalone only** (ADR 0108) — do not fall back to editing this monorepo's checkout for a new project.
 - **Never weaken the trust boundary** — the web tier enqueues; only the control-plane runner (`provision.js`) touches cloud tokens (ADR 0016 / 0111 §2).

package/clients/bongos-client/index.d.ts

@@ -412,7 +412,7 @@ export interface PostProvisioningInstancesIdRenderResponse { ok: boolean; queued
 export interface PostProvisioningInstancesIdRepoPrivateResponse { ok: boolean; queued: unknown; action: unknown; status: unknown; message: unknown }
 export interface PostProvisioningInstancesIdRestartResponse { ok: boolean; queued: unknown; action: unknown; status: unknown; message: unknown }
 export interface PostProvisioningInstancesIdTeardownResponse { ok: boolean; queued: unknown; action: unknown; status: unknown; superseded: unknown; message: unknown }
-export interface PostProvisioningInstancesRequest { slug: string; target_ref?: string; hosting_shape?: string; domain?: string; no_address?: boolean; tier?: string; onboard_mode?: string; type?: string; description?: string; detail?: Record<string, unknown>; modules?: string[] }
+export interface PostProvisioningInstancesRequest { slug: string; target_ref?: string; hosting_shape?: string; domain?: string; no_address?: boolean; tier?: string; onboard_mode?: string; type?: string; description?: string; detail?: Record<string, unknown>; modules?: string[]; terms_acknowledged?: boolean }
 export interface PostProvisioningRenderLookupRequest { key: string; owner_id?: string }
 export interface PostRemovalProposalsIdDecideRequest { verdict: string; note?: string }
 export interface PostRenderDeployActRequest { action?: string; deployId?: string; confirm?: unknown; expectLiveDeployId?: unknown }

package/docs/api/openapi.json

@@ -28310,6 +28310,9 @@
               "type": "string"
             },
             "maxItems": 50
+          },
+          "terms_acknowledged": {
+            "type": "boolean"
           }
         },
         "required": [

package/docs/api-reference.md

@@ -586,7 +586,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | GET | `/api/bongos/provisioning/github-app/status` | `public` | — | GET /provisioning/github-app/status?state=<> — the PUBLIC progress read the onboarding callback page polls (task 2096) to know when setup… |
 | GET | `/api/bongos/provisioning/health` | `public` | — | GET /provisioning/health — liveness + the core version this module mounted against. |
 | GET | `/api/bongos/provisioning/instances` | `any-builder` | — | GET /provisioning/instances — the caller's own instances + each open intent. |
-| POST | `/api/bongos/provisioning/instances` | `any-builder` | `slug`, `target_ref`, `hosting_shape`, `domain`, `no_address`, `tier`, `onboard_mode`, `type`, `description`, `detail`, `modules` | POST /provisioning/instances — request a new instance. |
+| POST | `/api/bongos/provisioning/instances` | `any-builder` | `slug`, `target_ref`, `hosting_shape`, `domain`, `no_address`, `tier`, `onboard_mode`, `type`, `description`, `detail`, `modules`, `terms_acknowledged` | POST /provisioning/instances — request a new instance. |
 | GET | `/api/bongos/provisioning/instances/:id` | `any-builder` | — | GET /provisioning/instances/:id — read one instance (the manage page's read). |
 | GET | `/api/bongos/provisioning/instances/:id/core-upgrade` | `archon` | — | GET the same path — step ONE of the two-step (ADR 0293 D4): what a move would do. |
 | POST | `/api/bongos/provisioning/instances/:id/core-upgrade` | `archon` | — | POST /provisioning/instances/:id/core-upgrade — move the core pin. |