@bongos/core 1.21.96 → 1.21.97

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.21.96",
-  "core_contract": "1.21.96",
-  "source_commit": "7fe8cc68952fc52e5a2f6620ee7f55c89bd72728",
+  "core_version": "1.21.97",
+  "core_contract": "1.21.97",
+  "source_commit": "f75e528433a4bb58d3ecff16d52748224e1ead44",
   "source_ref": "HEAD",
-  "built_at": "2026-10-09T10:00:46.973Z",
+  "built_at": "2026-10-09T11:00:07.681Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 590,
     "agent_docs_stubbed": 28,
-    "functional_verbatim": 3014,
+    "functional_verbatim": 3015,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 3633,
-  "tree_sha256": "3b6bd78cdd3212bf3c1010e59d8d2c6101c0857f1bb1bee230fb85b7f83e51ee",
+  "file_count": 3634,
+  "tree_sha256": "793541d379399349b8c170af11e99e5ad63767b300aadd38e0d1dda2cff9af6b",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -312,12 +312,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "3e9f5bc0b7e0ede71e6ad8b88e6770faa836227d029f0d9e7e1ce5d38d94866c"
+      "sha256": "be92a792c9e31d1e9ed27daa7100b4690d1daf3058696773faa5e027fa1217f9"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "cd0300814bc05a6309264b232aaa6f14ccba9d0b1af5f379f88678c51b50452e"
+      "sha256": "38ce1804582b7c52760bcef0165d8717b12c63ec07458e758c35cfb15cd825cd"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -327,17 +327,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "714ebd69e4d8ab4d1e155e383150e6d293e45f37caea516acff7d3277d2df933"
+      "sha256": "9c53971b3f18dd7e4bc98e76259909bfc992a382bc6f8d1e771856ae88908aa9"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "1f25c3084694cef28c60e61b170cfa7d3c99cacd911a17063085c6b83b0b9eae"
+      "sha256": "eb0e60d817b14b4e301e0cf1356c2df5b4ee3064b28584cd54552a4db88bdd94"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "c8aa4619d61ebd5d3f4c593010bfad32591229de234ffa412443fc1811546926"
+      "sha256": "04f464358035a3d57a7840319acce0012ec5585cab9393a9a8b7ada8dc08acd9"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -2317,12 +2317,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "650244908092826b311d3b87c8943bba0c4d95d2b196698a897de3accbc5f17a"
+      "sha256": "ed7f8d58d6d1524cc80208d6658723d77f78edc612315f7c8e81df8ff77639e6"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "d4a92b1fd93c0a8b9c7e48f89d79766d5e298a2dae1fe3db588ed6fdaeff3ce1"
+      "sha256": "acaf54cda21cff27530cd05bb9fc18dd1137615e1ac3775aa33021cc739f8163"
     },
     {
       "path": "docs/architecture.md",
@@ -2347,12 +2347,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "99d765694dcd9dfcc5343f41f4202a7e24beeac1b8b48574686b0fde7eca5a4e"
+      "sha256": "844ac9beec1b1063734a0655f917edec1b7ab2b4a6782790a7bb5205dd646c5f"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "a0820afa8785e8c5d73f3fc4680939b28b12b51ca44bc67209d390cc6853a6f1"
+      "sha256": "cb771de6591f70b7da6039e8e9d7dcb09294970d782e4f3e378605cf2f032d16"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2432,7 +2432,7 @@
     {
       "path": "docs/design/project-startup-direction.md",
       "mode": "0000644",
-      "sha256": "ab970c9b8903537174d7edd6ba3980480373df9c67d88c6fad81714dfe8c185d"
+      "sha256": "d006cb1befb0fa39530e80af237cc5709ad0957cc6c3ece5909ca12dbe770f5d"
     },
     {
       "path": "docs/design/projects-hub-direction-v2.md",
@@ -2862,7 +2862,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "fe148fd74b342e433645b14587ff11c31faf3bccdedd032335d254bbc5afaa5d"
+      "sha256": "9628e711aed84f14b0ec2d47863e16f2fcaf06aeaf9d30304776fd52332084f5"
     },
     {
       "path": "docs/modules-contract.md",
@@ -2952,7 +2952,7 @@
     {
       "path": "docs/page-readings.json",
       "mode": "0000644",
-      "sha256": "6dafc2854956f0628a7a1ad6fe0c47dd4c530e7e3962c3664b8c87b5e9ba96c3"
+      "sha256": "d029f87b4a829519d2dc9e2fdb71f5d411475302124c919701709f9e6fe8f9f7"
     },
     {
       "path": "docs/project-context.template.md",
@@ -8267,7 +8267,7 @@
     {
       "path": "modules/provisioning/github-setup.js",
       "mode": "0000644",
-      "sha256": "5bce3df9db40089e773d6cf45ae116ccab50b68ecd385df361a09c6aa6c8fe5c"
+      "sha256": "78d6aa74315507f0de80b676858fd2c952cdf1e2038b197326bded06b5708170"
     },
     {
       "path": "modules/provisioning/look.js",
@@ -8577,7 +8577,7 @@
     {
       "path": "modules/provisioning/routes/github-setup.js",
       "mode": "0000644",
-      "sha256": "1551d38419839bc2ad84cb1cbd819419e15d00ead14e3b68e61f65d422dc8629"
+      "sha256": "7d4bd8f7eec5d7f7ca5433a3e0499d53e51553daa3e2fcb1dbac1e346ce90238"
     },
     {
       "path": "modules/provisioning/routes/look.js",
@@ -8587,7 +8587,7 @@
     {
       "path": "modules/provisioning/routes/provisioning.js",
       "mode": "0000644",
-      "sha256": "9e195130cfd5fd1b9ef086f2e33bf1a6a91afe2fcaa234b8e45f0c2bedf198a6"
+      "sha256": "336ac83ef1fcdc91416bd6ca4d0cd040a2b926e0b695a9fbd528a5ab262a4974"
     },
     {
       "path": "modules/provisioning/routes/render-standup.js",
@@ -9337,7 +9337,7 @@
     {
       "path": "modules/public-landing/public/projects.html",
       "mode": "0000644",
-      "sha256": "600e34896afe2f555bf8651a3636a07fbf0156ceda1ad2aa84ab2d2d7b161a77"
+      "sha256": "b74e1e16220642c2a304f7e8cb776e239af14944c1212f4e32a675d840d731e2"
     },
     {
       "path": "modules/public-landing/public/projects.probes.json",
@@ -10117,12 +10117,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "1108a8c0201d8bf012906969b018d65498d9fab8d3d399e9ba86df6388d713b2"
+      "sha256": "6a5e32f5c1227cfa5b6061334c20c2572fc22f1a8e1ce10a4b577f65bef0badf"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "f03398091a4557a6f0347eda8a60d38fa846bb10b9df44fc242ec4b1b0de4ec9"
+      "sha256": "302230285ffd66b8975333bc7a96ab9ab33081eb403ca5b69d0b6ceaa5e47d39"
     },
     {
       "path": "public-docs/index.html",
@@ -10142,7 +10142,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "eb303846cdf391b5bbf69c5a0d5ab480e804a23e15c324e9b1e63aee43f24555"
+      "sha256": "d2fa549fd1baadbf38fc3fafc5aa26ea3719fa183c9d1cf7a4e990c2e23dd169"
     },
     {
       "path": "scripts/cron/style_guide_audit.sh",
@@ -11157,7 +11157,7 @@
     {
       "path": "scripts/gds/provision-github-setup.js",
       "mode": "0000644",
-      "sha256": "aa0927e26143328727f3c752f2ebb337a840ae76bf699bc10930cb6182c51146"
+      "sha256": "03a8b05edf56250283946993eaa429c7063696029fd0f5e23d2e834e90034692"
     },
     {
       "path": "scripts/gds/provision-net.js",
@@ -11207,7 +11207,7 @@
     {
       "path": "scripts/gds/provision.js",
       "mode": "0000644",
-      "sha256": "4f4857e34141db1d78cfec4b0b7f735658893aba946f53348c2430fe852b2a93"
+      "sha256": "772a2586d3601723f096f74f9d8aad82d418c5dce4dc9cb8809525ecd4a005ba"
     },
     {
       "path": "scripts/gds/publish-credential-check.js",
@@ -12412,7 +12412,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "f836e60518d2f8b4e6f54235518d1f4e7bde80d9c226268c8880418fe1008812"
+      "sha256": "2dde4294248b9f01a6955946bf5dd34a6919519ea31ed3a5161081acb4ca88dc"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -14042,12 +14042,17 @@
     {
       "path": "tests/github_one_trip.mjs",
       "mode": "0000644",
-      "sha256": "b04dbcd87504e696367a03db39c0a3c0ae9b647039ab25b354c89884c74d2ba5"
+      "sha256": "74d7041230f6b0f3370093d8417f61b3557b1b4b408fa56fc07968a5e0187f4d"
     },
     {
       "path": "tests/github_org_account.mjs",
       "mode": "0000644",
-      "sha256": "0745d0da6a5bd0494fc067756285ffedff62a6fd946aa1508690321d5f52cee2"
+      "sha256": "576f0f0e5c2cf483ce64de1c444e66999a2a772c5d1cb2b1e56a211549871a6f"
+    },
+    {
+      "path": "tests/github_pick_up.mjs",
+      "mode": "0000644",
+      "sha256": "448de823c452326e4f86bbd3de84180f349f8d81371339590abfae738e1788bf"
     },
     {
       "path": "tests/github_push_ancestry.mjs",
@@ -16437,7 +16442,7 @@
     {
       "path": "tests/projects_hub_pre_uat.mjs",
       "mode": "0000644",
-      "sha256": "e580ed2ea20556cc60f4160ace7316e8691b30f020c0701e783811ae0f134860"
+      "sha256": "5a0a072fbb78010e547cd9c177bd2bfb80c0f5ee9e08e16d8b00094a04b2b83e"
     },
     {
       "path": "tests/projects_hub_render_connect.mjs",
@@ -16602,7 +16607,7 @@
     {
       "path": "tests/provisioning_github_app_routes.mjs",
       "mode": "0000644",
-      "sha256": "c8969d3782cbc6d9b3b4c776cdf8c3f2e0bc5282d6cb7af3a82c5164034416a1"
+      "sha256": "ffbefb8d490fd5dbb2793c6d82afb60b8b900ce4a053be9d5f8db08cace32feb"
     },
     {
       "path": "tests/provisioning_look.mjs",
@@ -18112,7 +18117,7 @@
     {
       "path": "tests/wizard_github_feedback.mjs",
       "mode": "0000644",
-      "sha256": "153932c97b0cfb95c01c19787d7543ce80efe2ef8a8ab813e67c0376b4eb508b"
+      "sha256": "efcdc79ae0d4b2dece25dd483863ce1ad3249f0b836d7e1791c2b61cc4a56939"
     },
     {
       "path": "tests/wizard_intent_resume.mjs",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 538 operations across 76 resource groups
+- 539 operations across 76 resource groups
 
 ## Use it from your project
 

package/clients/bongos-client/bongos-client.global.js

@@ -939,6 +939,8 @@ function createClient(opts = {}) {
       postProvisioningInstancesIdForceTeardown: (args) => request("POST", "/provisioning/instances/{id}/force-teardown", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/github-app — rank: any-builder — POST /provisioning/instances/:id/github-app
       postProvisioningInstancesIdGithubApp: (args) => request("POST", "/provisioning/instances/{id}/github-app", { hasBody: true }, args),
+      // POST /provisioning/instances/{id}/github-app/pick-up — rank: any-builder — POST /provisioning/instances/:id/github-app/pick-up
+      postProvisioningInstancesIdGithubAppPickUp: (args) => request("POST", "/provisioning/instances/{id}/github-app/pick-up", { hasBody: true }, args),
       // GET /provisioning/instances/{id}/invite-suggestions — rank: any-builder — GET /provisioning/instances/:id/invite-suggestions
       getProvisioningInstancesIdInviteSuggestions: (args) => request("GET", "/provisioning/instances/{id}/invite-suggestions", { hasBody: false }, args),
       // DELETE /provisioning/instances/{id}/logo — rank: any-builder — DELETE /provisioning/instances/:id/logo

package/clients/bongos-client/index.cjs

@@ -938,6 +938,8 @@ function createClient(opts = {}) {
       postProvisioningInstancesIdForceTeardown: (args) => request("POST", "/provisioning/instances/{id}/force-teardown", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/github-app — rank: any-builder — POST /provisioning/instances/:id/github-app
       postProvisioningInstancesIdGithubApp: (args) => request("POST", "/provisioning/instances/{id}/github-app", { hasBody: true }, args),
+      // POST /provisioning/instances/{id}/github-app/pick-up — rank: any-builder — POST /provisioning/instances/:id/github-app/pick-up
+      postProvisioningInstancesIdGithubAppPickUp: (args) => request("POST", "/provisioning/instances/{id}/github-app/pick-up", { hasBody: true }, args),
       // GET /provisioning/instances/{id}/invite-suggestions — rank: any-builder — GET /provisioning/instances/:id/invite-suggestions
       getProvisioningInstancesIdInviteSuggestions: (args) => request("GET", "/provisioning/instances/{id}/invite-suggestions", { hasBody: false }, args),
       // DELETE /provisioning/instances/{id}/logo — rank: any-builder — DELETE /provisioning/instances/:id/logo

package/clients/bongos-client/index.d.ts

@@ -134,7 +134,7 @@ export interface GetProjectsFeaturedResponse { projects: unknown; page: PageInfo
 export interface GetProjectsResponse { projects: unknown }
 export interface GetProvisioningFleetResponse { instances: unknown; capacity: unknown }
 export interface GetProvisioningGithubAppResumeResponse { ok: boolean; project: unknown }
-export interface GetProvisioningGithubAppStatusResponse { ok: boolean; status: unknown; failure: unknown; ready: unknown; terminal: unknown; domain: unknown; instance_status: unknown; app_slug: unknown; checklist: unknown; install_url: unknown; repo: unknown; verifying: unknown; app_org: unknown }
+export interface GetProvisioningGithubAppStatusResponse { ok: boolean; status: unknown; failure: unknown; ready: unknown; terminal: unknown; domain: unknown; instance_status: unknown; app_slug: unknown; checklist: unknown; install_url: unknown; repo: unknown; verifying: unknown; app_org: unknown; pick_up: unknown }
 export interface GetProvisioningHealthResponse { module: unknown; ok: boolean; coreVersion: unknown }
 export interface GetProvisioningInstancesIdEnvManifestResponse { instance: unknown; env_vars: unknown; environments: unknown; values_held: boolean; note: unknown }
 export interface GetProvisioningInstancesIdInviteSuggestionsResponse { suggested: unknown; seeking: unknown; reason: unknown; unavailable?: unknown }
@@ -1448,6 +1448,8 @@ export interface BongosClient {
     postProvisioningInstancesIdForceTeardown(args?: RequestArgs): Promise<PostProvisioningInstancesIdForceTeardownResponse>;
     /** POST /provisioning/instances/{id}/github-app — rank: any-builder */
     postProvisioningInstancesIdGithubApp(args?: RequestArgs & { body?: PostProvisioningInstancesIdGithubAppRequest }): Promise<PostProvisioningInstancesIdGithubAppResponse>;
+    /** POST /provisioning/instances/{id}/github-app/pick-up — rank: any-builder */
+    postProvisioningInstancesIdGithubAppPickUp(args?: RequestArgs): Promise<ApiResponse>;
     /** GET /provisioning/instances/{id}/invite-suggestions — rank: any-builder */
     getProvisioningInstancesIdInviteSuggestions(args?: RequestArgs): Promise<GetProvisioningInstancesIdInviteSuggestionsResponse>;
     /** DELETE /provisioning/instances/{id}/logo — rank: any-builder */

package/clients/bongos-client/index.mjs

@@ -935,6 +935,8 @@ export function createClient(opts = {}) {
       postProvisioningInstancesIdForceTeardown: (args) => request("POST", "/provisioning/instances/{id}/force-teardown", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/github-app — rank: any-builder — POST /provisioning/instances/:id/github-app
       postProvisioningInstancesIdGithubApp: (args) => request("POST", "/provisioning/instances/{id}/github-app", { hasBody: true }, args),
+      // POST /provisioning/instances/{id}/github-app/pick-up — rank: any-builder — POST /provisioning/instances/:id/github-app/pick-up
+      postProvisioningInstancesIdGithubAppPickUp: (args) => request("POST", "/provisioning/instances/{id}/github-app/pick-up", { hasBody: true }, args),
       // GET /provisioning/instances/{id}/invite-suggestions — rank: any-builder — GET /provisioning/instances/:id/invite-suggestions
       getProvisioningInstancesIdInviteSuggestions: (args) => request("GET", "/provisioning/instances/{id}/invite-suggestions", { hasBody: false }, args),
       // DELETE /provisioning/instances/{id}/logo — rank: any-builder — DELETE /provisioning/instances/:id/logo

package/docs/api/openapi.json

@@ -17510,6 +17510,51 @@
         ]
       }
     },
+    "/provisioning/instances/{id}/github-app/pick-up": {
+      "post": {
+        "operationId": "post_provisioning_instances_id_github_app_pick_up",
+        "tags": [
+          "provisioning"
+        ],
+        "summary": "POST /provisioning/instances/:id/github-app/pick-up",
+        "description": "POST /provisioning/instances/:id/github-app/pick-up — \"Pick up where it stopped\" and \"Check again\" (task 1004652). It resumes the latest attempt from the step it stopped at, with the app GitHub already made, and never mints a new link: 'convert' puts an approved attempt whose code is still young back in the runner's queue; 'check' records a check request, which re-opens the runner's checking window for sign-in, the install and device flow. Every other pick-up is the page's own ('reopen' and 'fresh' go through the mint route, whose guard reuses or refuses; 'operator' files a blocker), so they are a 409 naming the action. Answers with the fresh read. rank: any authenticated builder (requireBuilder), the project's OWNER only — no Archon override, as with the mint route; anyone else gets the same 404 as a missing project.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/provisioning/routes/github-setup.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/provisioning/instances/{id}/invite-suggestions": {
       "get": {
         "operationId": "get_provisioning_instances_id_invite_suggestions",
@@ -26954,7 +26999,8 @@
           "install_url": {},
           "repo": {},
           "verifying": {},
-          "app_org": {}
+          "app_org": {},
+          "pick_up": {}
         },
         "required": [
           "ok",
@@ -26969,7 +27015,8 @@
           "install_url",
           "repo",
           "verifying",
-          "app_org"
+          "app_org",
+          "pick_up"
         ]
       },
       "GetProvisioningHealthResponse": {
@@ -34427,7 +34474,7 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 538,
+  "x-endpoint-count": 539,
   "x-schema-count": 576,
   "x-undocumented-bodies": 12,
   "x-response-schemas": 382,

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 538 endpoints across 95 route files.
+> **Generated from the live route files** — the route file is authoritative. 539 endpoints across 95 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust-boundary-server-enforced-permissions.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -638,7 +638,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | POST | `/api/bongos/projects/invite` | `metic+archon` | `client_id`, `github_login` | own-or-metic in effect: where to invite a builder into a project, asked by a `project.curate` holder OR the project's OWN OWNER (task 100… |
 | POST | `/api/bongos/projects/invite-guild` | `metic+archon` | `client_id`, `guild` | own-or-metic in effect, the SAME gate as POST /projects/invite above and for the same reasons (a non-inviter gets that route's unchanged … |
 
-## `provisioning` (45)
+## `provisioning` (46)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -666,6 +666,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | DELETE | `/api/bongos/provisioning/instances/:id/env-manifest/:varId` | `any-builder` | — | DELETE — remove one declaration. |
 | POST | `/api/bongos/provisioning/instances/:id/force-teardown` | `metic+archon` | — | POST /provisioning/instances/:id/force-teardown — Archon tears down ANY instance. |
 | POST | `/api/bongos/provisioning/instances/:id/github-app` | `any-builder` | `account`, `org` | POST /provisioning/instances/:id/github-app — mint a GitHub-App-Manifest onboarding link for the caller's OWN instance (task 2080, ADR 01… |
+| POST | `/api/bongos/provisioning/instances/:id/github-app/pick-up` | `any-builder` | — | POST /provisioning/instances/:id/github-app/pick-up — "Pick up where it stopped" and "Check again" (task 1004652). |
 | GET | `/api/bongos/provisioning/instances/:id/invite-suggestions` | `any-builder` | — | ── Who is worth inviting (BV1.R28, task 1002347, goal 1000046 C6) ──────── GET /provisioning/instances/:id/invite-suggestions — turn the … |
 | PUT | `/api/bongos/provisioning/instances/:id/logo` | `any-builder` | `image_b64`, `content_type` | PUT …/logo — rank: any authenticated builder (own resource; archon may change any). |
 | DELETE | `/api/bongos/provisioning/instances/:id/logo` | `any-builder` | validated | DELETE …/logo — rank: any authenticated builder (own resource; archon may change any). |