@bongos/core 1.21.92 → 1.21.94

package/docs/api/openapi.json

@@ -16460,6 +16460,27 @@
         "security": []
       }
     },
+    "/provisioning/github-app/setup": {
+      "get": {
+        "operationId": "get_provisioning_github_app_setup",
+        "tags": [
+          "provisioning"
+        ],
+        "summary": "GET /provisioning/github-app/setup",
+        "description": "GET /provisioning/github-app/setup?installation_id=&setup_action=&state= — the App's setup_url (task 1004649). GitHub sends the founder's BROWSER here after they install the app (or change its repos), carrying the state we put on the install link. GitHub's own docs warn the installation_id can be spoofed, so this route trusts NOTHING it is handed: it records only that an install was REPORTED for the attempt — which makes the runner ask GitHub, with the app's own key, whether the app really is on the repo — and hands the founder back to the project page. A missing or unknown state gets the same way back, without the attempt. rank: public — a browser redirect with no session; no secret revealed, no authority changed, the only write an audit row.\n\n**Rank:** `public` — No authentication — any caller.",
+        "x-rank": "public",
+        "x-source": "modules/provisioning/routes/github-setup.js",
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          }
+        },
+        "security": []
+      }
+    },
     "/provisioning/github-app/status": {
       "get": {
         "operationId": "get_provisioning_github_app_status",
@@ -16467,9 +16488,9 @@
           "provisioning"
         ],
         "summary": "GET /provisioning/github-app/status",
-        "description": "GET /provisioning/github-app/status?state=<> — the PUBLIC progress read the onboarding setup checklist polls (task 1004548) to know when setup is done + where to send the owner. Same public-by-state model as the callback: the unguessable, single-use `state` token is the only key, and the response reveals only the manifest lifecycle status + the instance's own (already-public) domain — never a secret. Per-IP rate-limited because the page polls it every ~3s. `ready` is true iff the manifest reached 'done' (creds placed + /healthz verified) — the setup checklist then opens https://<domain>. rank: public — no session, no mutation, no secret; an unknown state is a 404 no-op.\n\n**Rank:** `public` — No authentication — any caller.",
+        "description": "GET /provisioning/github-app/status?state=<> — the PUBLIC progress read (task 1004548; the checklist since task 1004649). Reveals the manifest lifecycle status, the instance's own (already-public) domain and repo, the App's public slug, and the four-step checklist with the one-trip install link — never a secret. `ready` is true iff sign-in is verified (the auto-open signal). `terminal` now waits for the install too: a finished sign-in with the app not yet installed is not the end of the trip. rank: public — no session, no mutation, no secret; an unknown state is a 404 no-op.\n\n**Rank:** `public` — No authentication — any caller.",
         "x-rank": "public",
-        "x-source": "modules/provisioning/routes/provisioning.js",
+        "x-source": "modules/provisioning/routes/github-setup.js",
         "responses": {
           "200": {
             "description": "Success.",
@@ -26764,7 +26785,11 @@
           "terminal": {},
           "domain": {},
           "instance_status": {},
-          "app_slug": {}
+          "app_slug": {},
+          "checklist": {},
+          "install_url": {},
+          "repo": {},
+          "verifying": {}
         },
         "required": [
           "ok",
@@ -26774,7 +26799,11 @@
           "terminal",
           "domain",
           "instance_status",
-          "app_slug"
+          "app_slug",
+          "checklist",
+          "install_url",
+          "repo",
+          "verifying"
         ]
       },
       "GetProvisioningHealthResponse": {
@@ -26866,12 +26895,14 @@
         "properties": {
           "instance": {},
           "open_intent": {},
-          "github_app": {}
+          "github_app": {},
+          "github_setup": {}
         },
         "required": [
           "instance",
           "open_intent",
-          "github_app"
+          "github_app",
+          "github_setup"
         ]
       },
       "GetProvisioningInstancesIdSettingsResponse": {
@@ -34222,7 +34253,7 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 533,
+  "x-endpoint-count": 534,
   "x-schema-count": 574,
   "x-undocumented-bodies": 12,
   "x-response-schemas": 380,

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 533 endpoints across 94 route files.
+> **Generated from the live route files** — the route file is authoritative. 534 endpoints across 95 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust-boundary-server-enforced-permissions.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -636,7 +636,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | POST | `/api/bongos/projects/invite` | `metic+archon` | `client_id`, `github_login` | own-or-metic in effect: where to invite a builder into a project, asked by a `project.curate` holder OR the project's OWN OWNER (task 100… |
 | POST | `/api/bongos/projects/invite-guild` | `metic+archon` | `client_id`, `guild` | own-or-metic in effect, the SAME gate as POST /projects/invite above and for the same reasons (a non-inviter gets that route's unchanged … |
 
-## `provisioning` (42)
+## `provisioning` (43)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -644,7 +644,8 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | GET | `/api/bongos/provisioning/fleet` | `metic+archon` | — | GET /provisioning/fleet — the full instance roster across all owners. |
 | GET | `/api/bongos/provisioning/fleet/cost-ledger` | `metic+archon` | — | GET /provisioning/fleet/cost-ledger — per-instance monthly cost to us + estimated cost to its owner, with totals. |
 | GET | `/api/bongos/provisioning/github-app/callback` | `public` | — | GET /provisioning/github-app/callback?code=&state= — GitHub redirects the owner's BROWSER here after they approve the App Manifest (task … |
-| GET | `/api/bongos/provisioning/github-app/status` | `public` | — | GET /provisioning/github-app/status?state=<> — the PUBLIC progress read the onboarding setup checklist polls (task 1004548) to know when … |
+| GET | `/api/bongos/provisioning/github-app/setup` | `public` | — | GET /provisioning/github-app/setup?installation_id=&setup_action=&state= — the App's setup_url (task 1004649). |
+| GET | `/api/bongos/provisioning/github-app/status` | `public` | — | GET /provisioning/github-app/status?state=<> — the PUBLIC progress read (task 1004548; the checklist since task 1004649). |
 | GET | `/api/bongos/provisioning/health` | `public` | — | GET /provisioning/health — liveness + the core version this module mounted against. |
 | GET | `/api/bongos/provisioning/instances` | `any-builder` | — | GET /provisioning/instances — the caller's own instances + each open intent. |
 | POST | `/api/bongos/provisioning/instances` | `any-builder` | `slug`, `target_ref`, `hosting_shape`, `domain`, `no_address`, `tier`, `onboard_mode`, `type`, `description`, `detail`, `modules`, `terms_acknowledged`, `demo`, `ship_mode` | POST /provisioning/instances — request a new instance. |