@bongos/core 1.20.61 → 1.20.62

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.20.61",
-  "core_contract": "1.20.61",
-  "source_commit": "dfbe913b447708d16a0e3bd1b01f22a3423078ca",
+  "core_version": "1.20.62",
+  "core_contract": "1.20.62",
+  "source_commit": "38acba884eac9c41b8648a84e81fd1bf405afa4f",
   "source_ref": "HEAD",
-  "built_at": "2026-10-01T10:03:11.617Z",
+  "built_at": "2026-10-01T10:28:21.912Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 572,
     "agent_docs_stubbed": 27,
-    "functional_verbatim": 2781,
+    "functional_verbatim": 2790,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 3381,
-  "tree_sha256": "de019aef7d57c2169e2176dd4ee7d0461fbd0c1ec64e475bbca8b3afc13c9eae",
+  "file_count": 3390,
+  "tree_sha256": "b152eccd4354d5a51a47a32cbe58eddabe889dcdc3771178d70814e05f61c58c",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -317,12 +317,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "d137d96453edbc8bf09172c0d5add927b959a955e5f96ea8731b494e05eb7b47"
+      "sha256": "87352a8f884ec57b9263ac7596f8c66a5f353b633658304f2b531d31b9cf9b44"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "2fed74a6107444442f9cf5e4f3a70d89d2a7b7d9e0fbe6aa6ca4b590888ae095"
+      "sha256": "0a2e5d5157aeecb5ba74d68533e8267bc733f06eff2a72025c2fefce196c4c4e"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -332,17 +332,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "f7cd89f1be93a934044ffb1c340f505cf23ecb24e16e68441dc0734a1c9ec890"
+      "sha256": "1b62998873e5e55e5ddd827b48b4698e851859c667f2993d2552b79fae4e9009"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "d4bb4d0fc24c4ad077f939eb4e899d6b0eeeceef7d922ef35ce55bb2c8db4c41"
+      "sha256": "425cfa53b1e0bf7d7ff08675e7732312fe14e6b6bf84bb3d627beffbebbd73ad"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "99703d803eb5dcf43363f149faa49e324d1d1d95948062f0cee2d2a5f13ae3f3"
+      "sha256": "1a73be7803ba716ee5e03cdffdb807d2700d8cd398ce4f22a07a3fe809c3aa76"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -2247,7 +2247,7 @@
     {
       "path": "docs/adr/0357-the-update-rule-set-on-deploy-is-the-one-the-sweep-follows.md",
       "mode": "0000644",
-      "sha256": "ed4576baf4e8938faad5c78197206b56ed242670e512e5607024f38b546363a2"
+      "sha256": "9568e163768299f434d73ef57b6083114f59f54b6d8c9771adb1a0b6abf471cf"
     },
     {
       "path": "docs/adr/0358-a-hall-wears-a-look-and-its-night-takes-a-tint.md",
@@ -2262,12 +2262,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "f527f77fcc1957831e89e46991a2916966dca81ffcf5a63832bf3cb6a23ef38f"
+      "sha256": "630d2344ea6f8a380f99022dfab1d2c4a79b2c1804259f42f6954cb769536407"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "4411ebb2e8bf4dbdd6d403671af60d030294a9171807e466b611acb3274eda2b"
+      "sha256": "bbfc9546a939b4472a734d121f4db659667ad2e647e005b882a7a7c76589a287"
     },
     {
       "path": "docs/architecture.md",
@@ -2292,12 +2292,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "2daaf44779e2c5870d95d87f76a1e03f96d51e9e24e49ba88dedafde3b041554"
+      "sha256": "787cd75e8ff90d5c0f0b1f14141a5f12d2101379192a26040066707b21980747"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "c2c3e3a91b2f005cea4795176fef9065db8b617126dafb6f9f9fe0b06183a376"
+      "sha256": "adf4a052f6fc6a9065c54cd02abed6725c5d56b7c17eee8a54ad369f78f078fc"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2802,7 +2802,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "2c33e494daebf6147d0587edb3f3125cc3cc5a5f647c3a1db2d7968f05fa4184"
+      "sha256": "6ba77376f4f8ea0daa6090fe16135a131e9b90b8c5d3559c5932db2bab541016"
     },
     {
       "path": "docs/modules-contract.md",
@@ -2887,12 +2887,12 @@
     {
       "path": "docs/page-inventory.json",
       "mode": "0000644",
-      "sha256": "48b0d35787a589f8e61a744ae1976017e8d1515c8f4da4ebbe7ede132a7cab44"
+      "sha256": "f18cea3a73ad3f88f57dabb5562bc9ef8a84a882b1d7f7a99375a53259785d38"
     },
     {
       "path": "docs/page-readings.json",
       "mode": "0000644",
-      "sha256": "b9606273995e2ffc2079ee7c93dc1b13177ecdeded8e2a2e2a7e0bb1d768cdab"
+      "sha256": "186fe20dbcfecd7bdeefc5fcdd2aecbe5eab805145d6a36b82c0fe7b2d1d388a"
     },
     {
       "path": "docs/project-context.template.md",
@@ -3057,7 +3057,7 @@
     {
       "path": "docs/recipes/upgrading-the-core.md",
       "mode": "0000644",
-      "sha256": "ff36e779516cbba9bf1d455d478f27f4541de65be4f3b0bdc96dce6e46e5bf53"
+      "sha256": "dfb8a97fc8955bdea090dcb673c0a1b8ea890ae1aa15dff1d22a5db8d0477429"
     },
     {
       "path": "docs/recipes/windows-builders.md",
@@ -7734,6 +7734,11 @@
       "mode": "0000644",
       "sha256": "83e174333fbe6a2e9d11b46bfd5755fbd6314b1ccd09d8b8cefb01973a69fc37"
     },
+    {
+      "path": "modules/provisioning/demo.js",
+      "mode": "0000644",
+      "sha256": "c79ebfafd1bec36e968c287e521eb47e10560bfa1dea51a0d412e1ae6aa94e3c"
+    },
     {
       "path": "modules/provisioning/disconnect.js",
       "mode": "0000644",
@@ -7929,10 +7934,15 @@
       "mode": "0000644",
       "sha256": "ee9911846df8d47bd1152996c6e6497831daefb5e5647c4fb22c91be78fce2c2"
     },
+    {
+      "path": "modules/provisioning/migrations/provisioning_035_demo.sql",
+      "mode": "0000644",
+      "sha256": "d5eeedcd23121a7db92d0a20986c75866d195523a8467a66df4e6cc7d1c3db22"
+    },
     {
       "path": "modules/provisioning/module.json",
       "mode": "0000644",
-      "sha256": "412dd7eed5293511627940aa7845a3b5fe35801213a799ea63a2354b95acb24f"
+      "sha256": "f5de0b6e3b30f853d3623e0b88c605ddbae3c0e0898575d4d617bd27500d69ec"
     },
     {
       "path": "modules/provisioning/onboard-plan.js",
@@ -7959,6 +7969,11 @@
       "mode": "0000644",
       "sha256": "bf4a392ce4c545feb246b818ad2b37dd5e92050538d5202fb8980941d0ec52c9"
     },
+    {
+      "path": "modules/provisioning/pollers/demo-archive.js",
+      "mode": "0000644",
+      "sha256": "fb47238eac4aef12ca1e30f4c95af8f1b705fbf0158378e7926e048b79fec6a7"
+    },
     {
       "path": "modules/provisioning/pollers/liveness-notify.js",
       "mode": "0000644",
@@ -7977,7 +7992,7 @@
     {
       "path": "modules/provisioning/provisioning.js",
       "mode": "0000644",
-      "sha256": "674f5c8092b9b85430c49a82bdeb19012144ba03bf63a19929faf62949c517df"
+      "sha256": "99c89cd077446d601eedb9f4c403228962c89ba9e991c7b22cf48de777194db3"
     },
     {
       "path": "modules/provisioning/public-refusal.js",
@@ -8024,6 +8039,11 @@
       "mode": "0000644",
       "sha256": "980f25a157dfde5bda6ed903c727fab944b922abdc34be05dc0ccdb5fb3650cc"
     },
+    {
+      "path": "modules/provisioning/routes/demo.js",
+      "mode": "0000644",
+      "sha256": "142e64536d3d23f081249b8898afadfe4d3e69a0f22425a7664b25003de92541"
+    },
     {
       "path": "modules/provisioning/routes/disconnect.js",
       "mode": "0000644",
@@ -8042,7 +8062,7 @@
     {
       "path": "modules/provisioning/routes/provisioning.js",
       "mode": "0000644",
-      "sha256": "27cbc4187169387d060fcf35ae76085cbe1e7eaeadd0c51842fe29d8353e82da"
+      "sha256": "d0efd18cd1774d02434b974ee4214bb310fd2392170d3767e0e17bdc4b76cb77"
     },
     {
       "path": "modules/provisioning/routes/render-standup.js",
@@ -8704,6 +8724,11 @@
       "mode": "0000644",
       "sha256": "ed91b3f8410daea0273cbaeaa9afe08ee212093ef76b3d2961bfe419a93712f1"
     },
+    {
+      "path": "modules/public-landing/public/projects-demo.states.json",
+      "mode": "0000644",
+      "sha256": "829b6cd756d34ab4e2590681f3071447d102381ac46f4953d89bd4aaa438b6b1"
+    },
     {
       "path": "modules/public-landing/public/projects-empty.states.json",
       "mode": "0000644",
@@ -8717,17 +8742,17 @@
     {
       "path": "modules/public-landing/public/projects.html",
       "mode": "0000644",
-      "sha256": "81fc1af5cd46618af1ecf677c9cc56bce3faef5137bc4eea7e7c793823232b94"
+      "sha256": "cb725d5bbdedf22f8404eb5ebd67a4c0195a98847785fec4e2e3582739682ec0"
     },
     {
       "path": "modules/public-landing/public/projects.probes.json",
       "mode": "0000644",
-      "sha256": "f9d98996e26a59e0d2316ff97558ea503d16f97851cd69081915e8344ed9cb7e"
+      "sha256": "0495d05bc905faf1f0ef669d3403c4de656f9e8c2784cdae4e439a70185c8ac6"
     },
     {
       "path": "modules/public-landing/public/projects.states.json",
       "mode": "0000644",
-      "sha256": "ce5e0b64c65c3989e49770cc18269f7b7d0ae87a88e15a3b293e5d3459829988"
+      "sha256": "73fbf81a0608fd266fd8389fcc1f6edba48eaccfd04c8b43068eaed3cc7dc8de"
     },
     {
       "path": "modules/public-landing/public/terms.html",
@@ -9244,6 +9269,11 @@
       "mode": "0000644",
       "sha256": "ffa63e050308f9d65960c8b38a0abe17d987cf948f2d0b099ca58e0014a95bbf"
     },
+    {
+      "path": "modules/ui-design/kit/fixtures/provisioning-instances-demo.json",
+      "mode": "0000644",
+      "sha256": "c3c66d05a94a71937a43bcf15d7de187d085c213ad161ff4f84d6094bed377ba"
+    },
     {
       "path": "modules/ui-design/kit/fixtures/provisioning-instances-empty.json",
       "mode": "0000644",
@@ -9417,12 +9447,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "ab6fcfd7d4d42e1528dd531ec990be71b3b4d2221654c735ae4e1301726bb8a8"
+      "sha256": "8d6ab41ffe14567ae2027926260eda90e96ffb4c98737f1e14409c699003aab3"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "24ea0d2cdd97a8a47824d23c4dabce026af3fe98273b3df4c07427466d983866"
+      "sha256": "185364d802ce214a78623d07f59be243499b5f854efe3447a62c2dc023f7fa1e"
     },
     {
       "path": "public-docs/index.html",
@@ -9442,7 +9472,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "027d1fbff3c739f12f9de1f3853a4e8cdb3f2dd7acc50e5a6b623a208186eeac"
+      "sha256": "2d0a6e7f73b17f7eae1cdd2e621ae2880082141195a1cfd0bfe88d6eaa879622"
     },
     {
       "path": "scripts/bongos-mcp.js",
@@ -11082,7 +11112,12 @@
     {
       "path": "scripts/gds/update-channel.js",
       "mode": "0000644",
-      "sha256": "94e04c6e946efe4e820c01851452c4b35b164bebc4f60beda33573bd2be4f53c"
+      "sha256": "41f23f17789e9d02ff4885b9fb74e24f6b903fb1b9ff89a54e822306806096f0"
+    },
+    {
+      "path": "scripts/gds/update-sweep.js",
+      "mode": "0000644",
+      "sha256": "bd9513492975cd50a8e6ad45d387afba91efa78c94f3ad251ddc3bbca69aff23"
     },
     {
       "path": "scripts/gds/upgrade-artist-gate.js",
@@ -11617,7 +11652,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "54e3ec3b65078a04894736e6f52c1bf1d31b0f56fa9d9d4b439fdf60623b7a11"
+      "sha256": "46631e7f30bf1f9056e310e5ebf8cb0c88001eb043a93a725be8513638e90ac6"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -16722,12 +16757,17 @@
     {
       "path": "tests/update_channel_db.mjs",
       "mode": "0000644",
-      "sha256": "c9d4d413e2731338882b90cb39303af799b36d7e7bff59b20c7335e6ee28f592"
+      "sha256": "7e2ac6e3aef93636db7542e0a2c6af7337b1d62aa5e5db4a7e0c56451f994193"
     },
     {
       "path": "tests/update_subscription_engine.mjs",
       "mode": "0000644",
-      "sha256": "636c22e03dfa436c4cb30b59bdeb2d5085cb38e027b32dfc77cc000e4fd6569c"
+      "sha256": "6e0f160998cf026c02df6f82492ea430300ce7142b42dde3fd200c20164ddf1b"
+    },
+    {
+      "path": "tests/update_sweep_home.mjs",
+      "mode": "0000644",
+      "sha256": "0a67352de1cb4be131a6a3c8f41620b455acd74246ef33508683345e5d85268b"
     },
     {
       "path": "tests/upgrade.mjs",
@@ -16864,6 +16904,11 @@
       "mode": "0000644",
       "sha256": "7a5260e3e09388bc59ea1752f3296cb2a58e7b81a2ebeb723ef916512fc89db7"
     },
+    {
+      "path": "tests/wizard_demo.mjs",
+      "mode": "0000644",
+      "sha256": "2654d5dad8d1d7ada929ed2107406ddc59094145a2c1d2be1598e93db692b497"
+    },
     {
       "path": "tests/wizard_draft_resume.mjs",
       "mode": "0000644",
@@ -16872,7 +16917,7 @@
     {
       "path": "tests/wizard_front_door.mjs",
       "mode": "0000644",
-      "sha256": "927b17c9578c99c5237e2b1762e5899ca25d8ecfc27fe7eb29d6028314d4a588"
+      "sha256": "ba94f9a0c317357facdccc94b954a388302c4983094e712c27ddff246dda3a11"
     },
     {
       "path": "tests/wizard_intent_resume.mjs",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 483 operations across 73 resource groups
+- 484 operations across 73 resource groups
 
 ## Use it from your project
 

package/clients/bongos-client/bongos-client.global.js

@@ -835,6 +835,8 @@ function createClient(opts = {}) {
       getProvisioningInstancesIdCoreUpgrade: (args) => request("GET", "/provisioning/instances/{id}/core-upgrade", { hasBody: false }, args),
       // POST /provisioning/instances/{id}/core-upgrade — rank: archon — POST /provisioning/instances/:id/core-upgrade
       postProvisioningInstancesIdCoreUpgrade: (args) => request("POST", "/provisioning/instances/{id}/core-upgrade", { hasBody: true }, args),
+      // POST /provisioning/instances/{id}/demo — rank: any-builder — POST /provisioning/instances/:id/demo
+      postProvisioningInstancesIdDemo: (args) => request("POST", "/provisioning/instances/{id}/demo", { hasBody: true }, args),
       // PATCH /provisioning/instances/{id}/detail — rank: any-builder — PATCH /provisioning/instances/:id/detail
       patchProvisioningInstancesIdDetail: (args) => request("PATCH", "/provisioning/instances/{id}/detail", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/disconnect — rank: any-builder — POST /provisioning/instances/:id/disconnect

package/clients/bongos-client/index.cjs

@@ -834,6 +834,8 @@ function createClient(opts = {}) {
       getProvisioningInstancesIdCoreUpgrade: (args) => request("GET", "/provisioning/instances/{id}/core-upgrade", { hasBody: false }, args),
       // POST /provisioning/instances/{id}/core-upgrade — rank: archon — POST /provisioning/instances/:id/core-upgrade
       postProvisioningInstancesIdCoreUpgrade: (args) => request("POST", "/provisioning/instances/{id}/core-upgrade", { hasBody: true }, args),
+      // POST /provisioning/instances/{id}/demo — rank: any-builder — POST /provisioning/instances/:id/demo
+      postProvisioningInstancesIdDemo: (args) => request("POST", "/provisioning/instances/{id}/demo", { hasBody: true }, args),
       // PATCH /provisioning/instances/{id}/detail — rank: any-builder — PATCH /provisioning/instances/:id/detail
       patchProvisioningInstancesIdDetail: (args) => request("PATCH", "/provisioning/instances/{id}/detail", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/disconnect — rank: any-builder — POST /provisioning/instances/:id/disconnect

package/clients/bongos-client/index.d.ts

@@ -404,6 +404,8 @@ export interface PostProjectsProjectIdSpecialitiesRequest { name: string; discip
 export interface PostProjectsProjectIdSpecialitiesResponse { speciality: unknown }
 export interface PostProjectsRequest { origin: string; name: string; tagline?: string; description?: string; art_url?: string; type?: string; template?: string }
 export interface PostProjectsResponse { project: unknown }
+export interface PostProvisioningInstancesIdDemoRequest { outcome: string }
+export interface PostProvisioningInstancesIdDemoResponse { ok: boolean; outcome: unknown; demo: unknown }
 export interface PostProvisioningInstancesIdDisconnectRequest { confirm_slug: string }
 export interface PostProvisioningInstancesIdDisconnectResponse { ok: boolean; queued: unknown; action: unknown; status: unknown; message: unknown }
 export interface PostProvisioningInstancesIdDomainRequest { domain: string }
@@ -417,7 +419,7 @@ export interface PostProvisioningInstancesIdRenderResponse { ok: boolean; queued
 export interface PostProvisioningInstancesIdRepoPrivateResponse { ok: boolean; queued: unknown; action: unknown; status: unknown; message: unknown }
 export interface PostProvisioningInstancesIdRestartResponse { ok: boolean; queued: unknown; action: unknown; status: unknown; message: unknown }
 export interface PostProvisioningInstancesIdTeardownResponse { ok: boolean; queued: unknown; action: unknown; status: unknown; superseded: unknown; message: unknown }
-export interface PostProvisioningInstancesRequest { slug: string; target_ref?: string; hosting_shape?: string; domain?: string; no_address?: boolean; tier?: string; onboard_mode?: string; type?: string; description?: string; detail?: Record<string, unknown>; modules?: string[]; terms_acknowledged?: boolean }
+export interface PostProvisioningInstancesRequest { slug: string; target_ref?: string; hosting_shape?: string; domain?: string; no_address?: boolean; tier?: string; onboard_mode?: string; type?: string; description?: string; detail?: Record<string, unknown>; modules?: string[]; terms_acknowledged?: boolean; demo?: Record<string, unknown> }
 export interface PostProvisioningRenderLookupRequest { key: string; owner_id?: string }
 export interface PostRemovalProposalsIdDecideRequest { verdict: string; note?: string }
 export interface PostRenderDeployActRequest { action?: string; deployId?: string; confirm?: unknown; expectLiveDeployId?: unknown }
@@ -1277,6 +1279,8 @@ export interface BongosClient {
     getProvisioningInstancesIdCoreUpgrade(args?: RequestArgs): Promise<ApiResponse>;
     /** POST /provisioning/instances/{id}/core-upgrade — rank: archon */
     postProvisioningInstancesIdCoreUpgrade(args?: RequestArgs): Promise<ApiResponse>;
+    /** POST /provisioning/instances/{id}/demo — rank: any-builder */
+    postProvisioningInstancesIdDemo(args: RequestArgs & { body: PostProvisioningInstancesIdDemoRequest }): Promise<PostProvisioningInstancesIdDemoResponse>;
     /** PATCH /provisioning/instances/{id}/detail — rank: any-builder */
     patchProvisioningInstancesIdDetail(args?: RequestArgs & { body?: PatchProvisioningInstancesIdDetailRequest }): Promise<PatchProvisioningInstancesIdDetailResponse>;
     /** POST /provisioning/instances/{id}/disconnect — rank: any-builder */

package/clients/bongos-client/index.mjs

@@ -831,6 +831,8 @@ export function createClient(opts = {}) {
       getProvisioningInstancesIdCoreUpgrade: (args) => request("GET", "/provisioning/instances/{id}/core-upgrade", { hasBody: false }, args),
       // POST /provisioning/instances/{id}/core-upgrade — rank: archon — POST /provisioning/instances/:id/core-upgrade
       postProvisioningInstancesIdCoreUpgrade: (args) => request("POST", "/provisioning/instances/{id}/core-upgrade", { hasBody: true }, args),
+      // POST /provisioning/instances/{id}/demo — rank: any-builder — POST /provisioning/instances/:id/demo
+      postProvisioningInstancesIdDemo: (args) => request("POST", "/provisioning/instances/{id}/demo", { hasBody: true }, args),
       // PATCH /provisioning/instances/{id}/detail — rank: any-builder — PATCH /provisioning/instances/:id/detail
       patchProvisioningInstancesIdDetail: (args) => request("PATCH", "/provisioning/instances/{id}/detail", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/disconnect — rank: any-builder — POST /provisioning/instances/:id/disconnect

package/docs/adr/0357-the-update-rule-set-on-deploy-is-the-one-the-sweep-follows.md

@@ -23,6 +23,8 @@ That left two rules for one project. On 2026-09-30 cloudbongos.com was set to `m
 
 **D4. It reads the control plane's database, over psql, from the sweep's own environment** — `DATABASE_URL`, else `PGDATABASE` (socket + peer auth). These are the two variables `upgrade.js` `recordLedger` reads. Unlike recordLedger, it hands a `DATABASE_URL` to `psql -d` rather than the pg driver, because the sweep is synchronous. An entry's `env` is never used, because it names *that instance's* database. A core too old to carry the reader keeps the roster behaviour unchanged. A failure is logged as a fixed class (unreachable, login refused, table missing…), never psql's own text, which can name a user or host.
 
+**D4a. `UPDATE_CHANNEL_DB` comes first** (task 1004307, 2026-10-01). The sweep spawns every upgrade with its own env underneath the entry's, so a unit-level `PGDATABASE` would reach any tenant entry that names no database and point its migrate at the control plane's. A control-plane unit therefore sets `UPDATE_CHANNEL_DB`, which only this reader consults; `DATABASE_URL` / `PGDATABASE` remain the fallback.
+
 **D1a. Why not slug *or* directory.** The task brief suggested matching by slug or dir. `provisioning_instances` stores no directory, so there is nothing to match a dir against, and a roster slug that differs from its row's slug falls back to the roster, visibly (D3).
 
 **D5. Nothing is migrated or copied.** Every row already has a channel (the column defaults to `patch`, the old behaviour). So once this is live, an entry the roster listed as `minor` but whose row was never changed on /deploy is swept as `patch`. That is the ruling applied, not a regression, and D3 makes it visible in the log.

package/docs/api/openapi.json

@@ -15085,6 +15085,69 @@
         ]
       }
     },
+    "/provisioning/instances/{id}/demo": {
+      "post": {
+        "operationId": "post_provisioning_instances_id_demo",
+        "tags": [
+          "provisioning"
+        ],
+        "summary": "POST /provisioning/instances/:id/demo",
+        "description": "**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/provisioning/routes/demo.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostProvisioningInstancesIdDemoRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostProvisioningInstancesIdDemoResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/provisioning/instances/{id}/detail": {
       "patch": {
         "operationId": "patch_provisioning_instances_id_detail",
@@ -28623,6 +28686,33 @@
           "project"
         ]
       },
+      "PostProvisioningInstancesIdDemoRequest": {
+        "type": "object",
+        "properties": {
+          "outcome": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "outcome"
+        ],
+        "additionalProperties": false
+      },
+      "PostProvisioningInstancesIdDemoResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "outcome": {},
+          "demo": {}
+        },
+        "required": [
+          "ok",
+          "outcome",
+          "demo"
+        ]
+      },
       "PostProvisioningInstancesIdDisconnectRequest": {
         "type": "object",
         "properties": {
@@ -28954,6 +29044,9 @@
           },
           "terms_acknowledged": {
             "type": "boolean"
+          },
+          "demo": {
+            "type": "object"
           }
         },
         "required": [
@@ -30797,9 +30890,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 483,
-  "x-schema-count": 509,
+  "x-endpoint-count": 484,
+  "x-schema-count": 511,
   "x-undocumented-bodies": 12,
-  "x-response-schemas": 341,
+  "x-response-schemas": 342,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 483 endpoints across 87 route files.
+> **Generated from the live route files** — the route file is authoritative. 484 endpoints across 88 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust-boundary-server-enforced-permissions.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -587,7 +587,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | GET | `/api/bongos/projects/featured` | `public` | — | the public map of projects; no auth by design. |
 | POST | `/api/bongos/projects/invite` | `metic+archon` | `client_id`, `github_login` | own-or-metic in effect: where to invite a builder into a project, asked by a `project.curate` holder OR the project's OWN OWNER (task 100… |
 
-## `provisioning` (40)
+## `provisioning` (41)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -598,10 +598,11 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | GET | `/api/bongos/provisioning/github-app/status` | `public` | — | GET /provisioning/github-app/status?state=<> — the PUBLIC progress read the onboarding callback page polls (task 2096) to know when setup… |
 | GET | `/api/bongos/provisioning/health` | `public` | — | GET /provisioning/health — liveness + the core version this module mounted against. |
 | GET | `/api/bongos/provisioning/instances` | `any-builder` | — | GET /provisioning/instances — the caller's own instances + each open intent. |
-| POST | `/api/bongos/provisioning/instances` | `any-builder` | `slug`, `target_ref`, `hosting_shape`, `domain`, `no_address`, `tier`, `onboard_mode`, `type`, `description`, `detail`, `modules`, `terms_acknowledged` | POST /provisioning/instances — request a new instance. |
+| POST | `/api/bongos/provisioning/instances` | `any-builder` | `slug`, `target_ref`, `hosting_shape`, `domain`, `no_address`, `tier`, `onboard_mode`, `type`, `description`, `detail`, `modules`, `terms_acknowledged`, `demo` | POST /provisioning/instances — request a new instance. |
 | GET | `/api/bongos/provisioning/instances/:id` | `any-builder` | — | GET /provisioning/instances/:id — read one instance (the manage page's read). |
 | GET | `/api/bongos/provisioning/instances/:id/core-upgrade` | `archon` | — | GET the same path — step ONE of the two-step (ADR 0293 D4): what a move would do. |
 | POST | `/api/bongos/provisioning/instances/:id/core-upgrade` | `archon` | — | POST /provisioning/instances/:id/core-upgrade — move the core pin. |
+| POST | `/api/bongos/provisioning/instances/:id/demo` | `any-builder` | `outcome` |  |
 | PATCH | `/api/bongos/provisioning/instances/:id/detail` | `any-builder` | `description`, `detail`, `modules`, `type` | ── The optional project detail (task 1002334, goal 1000046) ────────────── PATCH /provisioning/instances/:id/detail — answer (or re-answe… |
 | POST | `/api/bongos/provisioning/instances/:id/disconnect` | `any-builder` | `confirm_slug` | POST /provisioning/instances/:id/disconnect — rank: any authenticated builder (own resource); an archon may disconnect any project. |
 | POST | `/api/bongos/provisioning/instances/:id/domain` | `any-builder` | `domain` | POST /provisioning/instances/:id/domain — give the caller's OWN instance its address (task 1002692, gap 5: no path existed to add a domai… |