@bongos/core 1.25.16 → 1.25.17

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/bongos/package-core.js",
-  "core_version": "1.25.16",
-  "core_contract": "1.25.16",
-  "source_commit": "87657600284a6e0ae62774b866084e49a53a23a9",
+  "core_version": "1.25.17",
+  "core_contract": "1.25.17",
+  "source_commit": "4d82356e09b31b29523333015523fe298f800e33",
   "source_ref": "HEAD",
-  "built_at": "2026-11-13T20:43:00.195Z",
+  "built_at": "2026-11-13T20:59:20.063Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 658,
     "agent_docs_stubbed": 33,
-    "functional_verbatim": 4030,
+    "functional_verbatim": 4041,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 4722,
-  "tree_sha256": "6d525893d7d0909074a7e205dba47c7573e56466879c9b2cd9270364c31452cb",
+  "file_count": 4733,
+  "tree_sha256": "0877e8afbc0c421516832d1a5816604348309aab2a8cb70ae044e0d7d744101b",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -327,17 +327,17 @@
     {
       "path": "bin/bongos.js",
       "mode": "0000755",
-      "sha256": "b8f304da0098250c62760dcba255fc6cd01850d082d52cf8ae1284eb4bbe02bc"
+      "sha256": "1346261403a377b39588b80034534b3b7871137de84155219b25ca64a11f8726"
     },
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "ce4ff25a43869980ffb784024927a73c20805d804ebf31d8b4a6f7fe64a14a7e"
+      "sha256": "1dc599c062a4797d55110a4a5638a12ebd9aa1621c23f251869f6ad4d6a45258"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "c552be01ea8b1ac046ddd144e8416ca63fcf02a6657bf189a1021a5f952897a2"
+      "sha256": "4166ca6d02c2539f07d759dfaf8de90aef1bf7b2b1c776bec385da8de07eae0f"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -347,17 +347,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "b73ce847b707bc562470adf7df24d88e841d9f4d3d18cbbec78a601d49502f86"
+      "sha256": "9bbb1ca2dcec5cbbfbaeb92f2934dba13243481dc8f08b002337bb499f4042f9"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "0f71811021df44a69be49ff5f6dc42d2d80df6b97019c68b41eecf509135e019"
+      "sha256": "b1056b77b78f13d370cea282a328871adbc79b0e9a5ea559353f3ba6c4398ba6"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "36e2c1964aacc3e49592ec55f483b8dade28d5f0636a0b64d0c58498b67112cf"
+      "sha256": "7b3d2ced71916aadad01c576a53db97c98f8c6b882ebb4d26d8c6c013b8c8abc"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -2492,7 +2492,7 @@
     {
       "path": "docs/adr/0406-every-project-gets-a-sandbox-that-follows-main-and-live-moves-only-when-a-person-promotes.md",
       "mode": "0000644",
-      "sha256": "aedd6b7dc8ba2955c48d44dd6d7ee24b42219b22ef034db1f1b27e23bc04f30c"
+      "sha256": "6061a69b1775f2200c22fdd3c5d657d308d8a14ff51d06ee2b4a2fdb1e628d5f"
     },
     {
       "path": "docs/adr/0407-a-project-grant-is-made-by-the-owner-not-witnessed-at-sign-in.md",
@@ -2512,12 +2512,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "86488f35d4427223edf9788643d9f2065e4bb21616773d9f2ae8f44eda53bda2"
+      "sha256": "19f9416cb37cfc35d9d4c28b34684ff2e1c93c1235bebae4b787d411317cfae3"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "10f998180cc5a4479c6299762280d31933cb30db0bda31137d5b82b4f897e328"
+      "sha256": "0770727270ba1adcc90bfa106a74bfd71ca38839175f69269777101123e0c410"
     },
     {
       "path": "docs/architecture.md",
@@ -3102,7 +3102,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "c0da14c1fc9c48400766725c400c478ff088f8fab63423aec00501bbad4589c3"
+      "sha256": "884a37039834034f7c23f936653eb312b3ad17d483368dc2eeef892c718e5b01"
     },
     {
       "path": "docs/modules-contract.md",
@@ -3187,7 +3187,7 @@
     {
       "path": "docs/page-readings.json",
       "mode": "0000644",
-      "sha256": "97b7de0591ebd5da5a6edd5dc4c538874b2f234e5ed5ca5d8b8fa91bb262aa1d"
+      "sha256": "ce9891e2273f7e7e85689d1c388a6c444e4827d7dce560d9a0025e343593e64e"
     },
     {
       "path": "docs/project-context.template.md",
@@ -5702,7 +5702,7 @@
     {
       "path": "modules/government/decision-rules.js",
       "mode": "0000644",
-      "sha256": "0a7d55d4a6da2253b0cf4a7daf687918e2f58f461218a4f82c9415f297339156"
+      "sha256": "6077bd52297bd1e46359ac63b072775236b5f9a96925eb82d39d46549c568b1b"
     },
     {
       "path": "modules/government/docket-floors.js",
@@ -8409,6 +8409,16 @@
       "mode": "0000644",
       "sha256": "70be81206f577910d250e70ed0841466bbe329691324156b5b15bb75abcd93d3"
     },
+    {
+      "path": "modules/lifecycle/first-read-db.js",
+      "mode": "0000644",
+      "sha256": "a33013f832e43e34bdc2de89071d55eb62ea4f94053311510eedf7b9a5d228ec"
+    },
+    {
+      "path": "modules/lifecycle/first-read.js",
+      "mode": "0000644",
+      "sha256": "63a5314db23312d690d3adeb0a43dc8be53bba11a359516eaff5e9d03acb1f8d"
+    },
     {
       "path": "modules/lifecycle/funding-wall.js",
       "mode": "0000644",
@@ -8532,7 +8542,7 @@
     {
       "path": "modules/lifecycle/kickoff-checklist.js",
       "mode": "0000644",
-      "sha256": "9f610f826d9fcd2dd5785ad9da50feee7f3a07bc0580df67679f794b013e2af9"
+      "sha256": "43d5f3c3bab9c9b3fddab524d111224215d0661a48fce782d0d7980b1c333ee7"
     },
     {
       "path": "modules/lifecycle/kickoff-seed.js",
@@ -8664,6 +8674,11 @@
       "mode": "0000644",
       "sha256": "4607e8fe5207c4854f02a5eca666023c76d5c3890ba8e45e0c3bb034d9cd5486"
     },
+    {
+      "path": "modules/lifecycle/migrations/lifecycle_022_repo_maps.sql",
+      "mode": "0000644",
+      "sha256": "d50075f65fccdf09367421408909072c527c61b8bb1ac0ec61e5803f24385f26"
+    },
     {
       "path": "modules/lifecycle/mingle.js",
       "mode": "0000644",
@@ -8677,7 +8692,7 @@
     {
       "path": "modules/lifecycle/module.json",
       "mode": "0000644",
-      "sha256": "b5ca000540d3d478860271d8206204efc9dc761c3d7fa8b9c9a91ab4632974bf"
+      "sha256": "272b0a6cd073c72894eaa79c00ff1679d05bb8027da9bc743106fedd0c34cc3c"
     },
     {
       "path": "modules/lifecycle/moving.js",
@@ -8819,6 +8834,11 @@
       "mode": "0000644",
       "sha256": "22d015052c9d4870491101ad1170f5e784a372de6e49732b39f449dee1cf2b8e"
     },
+    {
+      "path": "modules/lifecycle/routes/first-read.js",
+      "mode": "0000644",
+      "sha256": "b10e8eed0a419d54aa5194d73d424a4a14612d51063fe9524e5d84fab4de9f13"
+    },
     {
       "path": "modules/lifecycle/routes/goal-move.js",
       "mode": "0000644",
@@ -10282,7 +10302,7 @@
     {
       "path": "modules/provisioning/pollers/app-liveness.js",
       "mode": "0000644",
-      "sha256": "d9e2cc5fe73250ecd1584335bc8364985c2dcc958940efbc5e90d8f2a9ba7b98"
+      "sha256": "773e1b46487d99b0deb1835bb055633d62757f4cc83123d884a364ffc1f91c88"
     },
     {
       "path": "modules/provisioning/pollers/catalog-backfill.js",
@@ -10334,10 +10354,15 @@
       "mode": "0000644",
       "sha256": "c7861ce5ec0fbb8d570842ad3bfaa862d338c94f7fcfab324910c69c0aeefb0d"
     },
+    {
+      "path": "modules/provisioning/render-sandbox.js",
+      "mode": "0000644",
+      "sha256": "4bae78107ff351f73d27162aa9462215f383918a44f5ffda649a01e42ea2c558"
+    },
     {
       "path": "modules/provisioning/render-standup.js",
       "mode": "0000644",
-      "sha256": "dbf5c53e2ce11b517715d476e87171a54a21af1d08de465d150ff0d3bb6b8ad2"
+      "sha256": "b0ca62f43953d381bcd5add2fff27a0a85f50f12c655c033811442a5c2582af2"
     },
     {
       "path": "modules/provisioning/repo-private.js",
@@ -10392,12 +10417,12 @@
     {
       "path": "modules/provisioning/routes/provisioning.js",
       "mode": "0000644",
-      "sha256": "88f82ef09c322fb865b2bad3382baf9844ce9def08ab4e6e87b961b2bf8c6218"
+      "sha256": "9b503fb09ea9dd60e4064e55b7e4fe1c2b8bf72d81a85f1bc52ab6c1f505ac5f"
     },
     {
       "path": "modules/provisioning/routes/render-standup.js",
       "mode": "0000644",
-      "sha256": "e22297ace96f621bf3864316079e00bab4750e5f03e2e9173416b51616d1aa97"
+      "sha256": "866f81b1770ba3851ede919e6504c727c3d44d4aa55bceb18724c127eea46929"
     },
     {
       "path": "modules/provisioning/routes/repo-private.js",
@@ -11297,7 +11322,7 @@
     {
       "path": "modules/public-landing/public/projects.html",
       "mode": "0000644",
-      "sha256": "90ac7326bed042f9bd995d336eebb5701057d45d792227b5990039a8a1fdb261"
+      "sha256": "2a5cdf3d7aec3ecb4a23bdd1761a3beaea5be9cc4fe6029fd7a93282105e3daa"
     },
     {
       "path": "modules/public-landing/public/projects.probes.json",
@@ -12367,12 +12392,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "6371e242fa415e6424d9a5e3212e837354f9de224fc12dc7705057f230fb3317"
+      "sha256": "58a4990b0e8d114b20008738488af69b11be6dd19248145a44a3838e5715bdf7"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "18cf559d07d7ed63be23d55814d2e58695b266b8306a6c8b971268302dd34ef3"
+      "sha256": "814eba9317e16541fab1ec86d72a34ffdf05af7dfdde060ea2bb694a2eb57c01"
     },
     {
       "path": "public-docs/index.html",
@@ -12392,7 +12417,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "6e70870bd035c6647548cd04b4fb3a6b9049603612fbe98db83fb91ad77ddda1"
+      "sha256": "1d456ece9bc57494d1bb9aec0463a1be4bc5af890e33a9615e1a8f517bdd12b8"
     },
     {
       "path": "scripts/bongos/CLAUDE.md",
@@ -12904,6 +12929,11 @@
       "mode": "0000644",
       "sha256": "bb236875f6a505f4db83390f7f47ff5c013e5632621259acfcc84ab9a11207d7"
     },
+    {
+      "path": "scripts/bongos/first-read.js",
+      "mode": "0000644",
+      "sha256": "70bde5984224deebeec889b676979638ac80a4cb659f4a02e332ddfc5bd82772"
+    },
     {
       "path": "scripts/bongos/fitness-checks-error-envelope.js",
       "mode": "0000644",
@@ -13077,7 +13107,7 @@
     {
       "path": "scripts/bongos/government-walk.js",
       "mode": "0000644",
-      "sha256": "f8a788f7e323900d5d9fff48669ebf7243dd259d195c8beab04be851db291627"
+      "sha256": "d1dc26d9761802d80323a4b3ef0546745e8667b3ebceed87e2fa942c5fcf8324"
     },
     {
       "path": "scripts/bongos/grade-correlation-audit.js",
@@ -13484,10 +13514,15 @@
       "mode": "0000644",
       "sha256": "10430a95addbd737df7314663946622029b75fc940f3e939bda5e20b152b5ce7"
     },
+    {
+      "path": "scripts/bongos/provision-render-sandbox.js",
+      "mode": "0000644",
+      "sha256": "6493e4aa80235a76e4f66c867f0ded23da4cc987e62c7313d1d36b22ef121a29"
+    },
     {
       "path": "scripts/bongos/provision-render.js",
       "mode": "0000644",
-      "sha256": "01b85187a3194c29d0c51a9a3fe6b7b7be26034a8528598e53f5d4453668f806"
+      "sha256": "f417261b526290faea34ac462cf5c2eb81dc3feaccf6fbebd566d764ddec6bee"
     },
     {
       "path": "scripts/bongos/provision-repo-auth.js",
@@ -13507,7 +13542,7 @@
     {
       "path": "scripts/bongos/provision-teardown.js",
       "mode": "0000644",
-      "sha256": "eca5ebb6a796e336b3e5c542de171923488a3f4edd24e2e5da07d0a53f239c23"
+      "sha256": "dc96c90dc61b1bab74f7431ddd91086c8c97134dc7e49a868d1bab84059e65e1"
     },
     {
       "path": "scripts/bongos/provision-units.js",
@@ -13607,7 +13642,7 @@
     {
       "path": "scripts/bongos/render-api.js",
       "mode": "0000644",
-      "sha256": "453beaf0828c93570c8cbdb6d0d333850177440dca9592454be387105c3d716f"
+      "sha256": "624be27cc9586657dbe73147e4e2b961368db3bcb9e32062a6f65408a2a74ea2"
     },
     {
       "path": "scripts/bongos/render-check.js",
@@ -13622,7 +13657,7 @@
     {
       "path": "scripts/bongos/render-payload.js",
       "mode": "0000644",
-      "sha256": "5551bcb1a18e2fcee52ab25026d858283aacc37661c8b8a51277d82f3a5b7a51"
+      "sha256": "31b53f494f011ce8eb0de4058b60842eca72a843f885f2619e9db8f99490958a"
     },
     {
       "path": "scripts/bongos/repo-metrics.js",
@@ -14614,6 +14649,11 @@
       "mode": "0000644",
       "sha256": "b010bd3c74f92096d1027a8560f18d1a49e7673f2a6c5717fce97348fbceb0a6"
     },
+    {
+      "path": "scripts/gds/first-read.js",
+      "mode": "0000644",
+      "sha256": "c97f9b873197ad9498af681dbd93653e58385fb72d4961227a2584d2475c3fc7"
+    },
     {
       "path": "scripts/gds/fitness-checks-error-envelope.js",
       "mode": "0000644",
@@ -15149,6 +15189,11 @@
       "mode": "0000644",
       "sha256": "36be61cce43aea708eace29034973bdf4d5c7906d52665ae1d19452f9a67f5a6"
     },
+    {
+      "path": "scripts/gds/provision-render-sandbox.js",
+      "mode": "0000644",
+      "sha256": "934284fea1ea798f1299b767d5181c363b6434421b2414b26f38b1eb222fb0f4"
+    },
     {
       "path": "scripts/gds/provision-render.js",
       "mode": "0000644",
@@ -16412,7 +16457,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "51341bea39ee164dbbca72d02bf722098e078d6b33e2bfb14b2558818ccda566"
+      "sha256": "f7be4952c9b5ddb5facc839689456cdce48be5c758b8d0c912ec9f4bec80a4ef"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -18259,6 +18304,11 @@
       "mode": "0000644",
       "sha256": "88b3d0c7fb278e560850f440ec6721655efb62bcafcd983deb7e9ddb25103b65"
     },
+    {
+      "path": "tests/first_read.mjs",
+      "mode": "0000644",
+      "sha256": "c74c7e7f9972432aef264619f5745581a07ee51c66125fffb8f0cffd597ed180"
+    },
     {
       "path": "tests/first_run_engine_check.mjs",
       "mode": "0000644",
@@ -18832,7 +18882,7 @@
     {
       "path": "tests/government_act_alone_buildings.mjs",
       "mode": "0000644",
-      "sha256": "12a31fab05c763cd26560ba507ded9a635d026b1e7ea0a8d04992061c222988c"
+      "sha256": "f40f57c1a4a11308847afee5ac192e89fedb96b0346f8db83baecd24d48be599"
     },
     {
       "path": "tests/government_agent_asks.mjs",
@@ -21747,7 +21797,7 @@
     {
       "path": "tests/provisioning_app_status.mjs",
       "mode": "0000644",
-      "sha256": "f94e4e42659ce2890b429dfcad95d387d6d618b844857a1368ce4e2ceda42dc5"
+      "sha256": "1686c46bd3eb705cd0897c0f1da09ed5a6aa7b82f9b62e80306192534da7492e"
     },
     {
       "path": "tests/provisioning_callback_page.mjs",
@@ -21862,7 +21912,7 @@
     {
       "path": "tests/provisioning_render_route.mjs",
       "mode": "0000644",
-      "sha256": "e26786c0d12bd322cc7fd407baabe6e73fb33d665f2a112dfdd8aa699289ca92"
+      "sha256": "a95e7524f5f765c3abeb47763fc090180a7d17a4d5cfacef7d672055dba68aa3"
     },
     {
       "path": "tests/provisioning_repo_private_route.mjs",
@@ -21907,7 +21957,7 @@
     {
       "path": "tests/provisioning_teardown_intent.mjs",
       "mode": "0000644",
-      "sha256": "4d06c5fd13f8cc81c050c2ed6940c91db5cdd95dea9f26ad7b8d6a8089c0254a"
+      "sha256": "13251f3878cfb0705d39932684bcb58186eedc52c7e78326a830c450e6f2feb3"
     },
     {
       "path": "tests/provisioning_teardown_states.mjs",
@@ -22137,7 +22187,7 @@
     {
       "path": "tests/render_api.mjs",
       "mode": "0000644",
-      "sha256": "361208df72761e9f7d7d0d67551e9f1035155573665be88ad79dec59b122c27f"
+      "sha256": "1c431675af02a761010d84698b502913f29d85771e09c2ba0fc1fcf018ce50a9"
     },
     {
       "path": "tests/render_check.mjs",
@@ -22154,6 +22204,11 @@
       "mode": "0000644",
       "sha256": "1a73c1fd81f1eb4f3cce98fb1ffd291c2f78ec5ba718a7b9109953565d2d694c"
     },
+    {
+      "path": "tests/render_sandbox.mjs",
+      "mode": "0000644",
+      "sha256": "f861943337808fc8195316aefab2ef1f8fac6448630a21f5087b89ae8a3895f1"
+    },
     {
       "path": "tests/repo_info_binding.mjs",
       "mode": "0000644",

package/bin/bongos.js

@@ -82,6 +82,7 @@ const VERBS = {
   status:  { script: 'status.js',  group: 'work', summary: 'Version / criterion progress  (bongos status C8)', selfHelp: true },
   recall:  { script: 'recall.js',  group: 'work', summary: 'Search the docs + project knowledge  (bongos recall "x")' },
   cost:    { script: 'cost.js',    group: 'work', summary: 'Log a cost entry' },
+  'first-read': { script: 'first-read.js', group: 'work', summary: 'First read-through of an existing project: check, submit and accept the repository map your own AI wrote' },
   howto:   { script: 'howto.js',   group: 'work', summary: 'The how-to guide: show the unread steps for a moment  (bongos howto moment first_open)' },
   genesis: { script: 'genesis.js', group: 'work', summary: 'The founder\'s genesis answers: show, answer, or read them for planning  (bongos genesis context)' },
 

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 719 operations across 86 resource groups
+- 725 operations across 87 resource groups
 
 ## Use it from your project
 

package/clients/bongos-client/bongos-client.global.js

@@ -468,6 +468,18 @@ function createClient(opts = {}) {
       // GET /feedback/receipt/{id} — rank: public — GET /feedback/receipt/:id
       getFeedbackReceiptId: (args) => request("GET", "/feedback/receipt/{id}", { hasBody: false }, args),
     },
+    "firstRead": {
+      // POST /first-read/maps — rank: metic+archon — POST /first-read/maps
+      postFirstReadMaps: (args) => request("POST", "/first-read/maps", { hasBody: true }, args),
+      // GET /first-read/maps/{id} — rank: metic+archon — GET /first-read/maps/:id
+      getFirstReadMapsId: (args) => request("GET", "/first-read/maps/{id}", { hasBody: false }, args),
+      // POST /first-read/maps/{id}/accept — rank: metic+archon — POST /first-read/maps/:id/accept
+      postFirstReadMapsIdAccept: (args) => request("POST", "/first-read/maps/{id}/accept", { hasBody: true }, args),
+      // POST /first-read/maps/{id}/reject — rank: metic+archon — POST /first-read/maps/:id/reject
+      postFirstReadMapsIdReject: (args) => request("POST", "/first-read/maps/{id}/reject", { hasBody: true }, args),
+      // GET /first-read/prompt — rank: any-builder — GET /first-read/prompt
+      getFirstReadPrompt: (args) => request("GET", "/first-read/prompt", { hasBody: false }, args),
+    },
     "founding": {
       // POST /founding/alive — rank: any-builder — POST /founding/alive
       postFoundingAlive: (args) => request("POST", "/founding/alive", { hasBody: true }, args),
@@ -1307,6 +1319,8 @@ function createClient(opts = {}) {
       getProvisioningInstancesIdRender: (args) => request("GET", "/provisioning/instances/{id}/render", { hasBody: false }, args),
       // POST /provisioning/instances/{id}/render — rank: any-builder — POST /provisioning/instances/:id/render
       postProvisioningInstancesIdRender: (args) => request("POST", "/provisioning/instances/{id}/render", { hasBody: true }, args),
+      // POST /provisioning/instances/{id}/render/sandbox — rank: any-builder — POST /provisioning/instances/:id/render/sandbox
+      postProvisioningInstancesIdRenderSandbox: (args) => request("POST", "/provisioning/instances/{id}/render/sandbox", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/repo-private — rank: any-builder — POST /provisioning/instances/:id/repo-private
       postProvisioningInstancesIdRepoPrivate: (args) => request("POST", "/provisioning/instances/{id}/repo-private", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/restart — rank: any-builder — POST /provisioning/instances/:id/restart

package/clients/bongos-client/index.cjs

@@ -467,6 +467,18 @@ function createClient(opts = {}) {
       // GET /feedback/receipt/{id} — rank: public — GET /feedback/receipt/:id
       getFeedbackReceiptId: (args) => request("GET", "/feedback/receipt/{id}", { hasBody: false }, args),
     },
+    "firstRead": {
+      // POST /first-read/maps — rank: metic+archon — POST /first-read/maps
+      postFirstReadMaps: (args) => request("POST", "/first-read/maps", { hasBody: true }, args),
+      // GET /first-read/maps/{id} — rank: metic+archon — GET /first-read/maps/:id
+      getFirstReadMapsId: (args) => request("GET", "/first-read/maps/{id}", { hasBody: false }, args),
+      // POST /first-read/maps/{id}/accept — rank: metic+archon — POST /first-read/maps/:id/accept
+      postFirstReadMapsIdAccept: (args) => request("POST", "/first-read/maps/{id}/accept", { hasBody: true }, args),
+      // POST /first-read/maps/{id}/reject — rank: metic+archon — POST /first-read/maps/:id/reject
+      postFirstReadMapsIdReject: (args) => request("POST", "/first-read/maps/{id}/reject", { hasBody: true }, args),
+      // GET /first-read/prompt — rank: any-builder — GET /first-read/prompt
+      getFirstReadPrompt: (args) => request("GET", "/first-read/prompt", { hasBody: false }, args),
+    },
     "founding": {
       // POST /founding/alive — rank: any-builder — POST /founding/alive
       postFoundingAlive: (args) => request("POST", "/founding/alive", { hasBody: true }, args),
@@ -1306,6 +1318,8 @@ function createClient(opts = {}) {
       getProvisioningInstancesIdRender: (args) => request("GET", "/provisioning/instances/{id}/render", { hasBody: false }, args),
       // POST /provisioning/instances/{id}/render — rank: any-builder — POST /provisioning/instances/:id/render
       postProvisioningInstancesIdRender: (args) => request("POST", "/provisioning/instances/{id}/render", { hasBody: true }, args),
+      // POST /provisioning/instances/{id}/render/sandbox — rank: any-builder — POST /provisioning/instances/:id/render/sandbox
+      postProvisioningInstancesIdRenderSandbox: (args) => request("POST", "/provisioning/instances/{id}/render/sandbox", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/repo-private — rank: any-builder — POST /provisioning/instances/:id/repo-private
       postProvisioningInstancesIdRepoPrivate: (args) => request("POST", "/provisioning/instances/{id}/repo-private", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/restart — rank: any-builder — POST /provisioning/instances/:id/restart

package/clients/bongos-client/index.d.ts

@@ -75,6 +75,7 @@ export interface GetCoreUpgradesResponse { ok: boolean; running: unknown; limit:
 export interface GetDiscordChannelsPlanResponse { ok: boolean; guild_id: unknown; op_count: unknown; ops: unknown; warnings: unknown }
 export interface GetDiscordChannelsSnapshotResponse { ok: boolean; guild_id: unknown; config: unknown; warnings: unknown }
 export interface GetDoneWhenPendingReviewResponse { criteria: unknown; count: unknown }
+export interface GetFirstReadPromptResponse { schema: unknown; file: unknown; prompt: unknown; example: unknown; limits: unknown }
 export interface GetFrontDoorGuideMineResponse { ok: boolean; conversation: unknown }
 export interface GetGithubOrgsOrgResponse { org: unknown }
 export interface GetGithubRepoResponse { ok: boolean; repo: unknown; private_deployable: boolean }
@@ -164,7 +165,7 @@ export interface GetProvisioningHealthResponse { module: unknown; ok: boolean; c
 export interface GetProvisioningInstancesIdEnvManifestResponse { instance: unknown; env_vars: unknown; environments: unknown; values_held: boolean; note: unknown }
 export interface GetProvisioningInstancesIdInviteSuggestionsResponse { suggested: unknown; seeking: unknown; reason: unknown; unavailable?: unknown }
 export interface GetProvisioningInstancesIdLookResponse { ok: boolean; look: unknown; options: unknown; logo_max_bytes: unknown }
-export interface GetProvisioningInstancesIdRenderResponse { ok: boolean; app: unknown; env_vars: unknown; values_held: boolean }
+export interface GetProvisioningInstancesIdRenderResponse { ok: boolean; app: unknown; sandbox: unknown; env_vars: unknown; values_held: boolean }
 export interface GetProvisioningInstancesIdResponse { instance: unknown; open_intent: unknown; github_app: unknown; github_setup: unknown }
 export interface GetProvisioningInstancesIdSettingsResponse { ok: boolean; settings: unknown; planet: unknown; options: unknown }
 export interface GetProvisioningInstancesResponse { instances: unknown }
@@ -389,6 +390,9 @@ export interface PostDoneWhenCriterionIdUnsatisfyRequest { reason?: string }
 export interface PostDoneWhenCriterionIdUnsatisfyResponse { criterion: unknown }
 export interface PostFeedbackReceiptRequest { sha256: string; kind?: "bug" | "idea" }
 export interface PostFeedbackReceiptResponse { ok: boolean; receipt: unknown; hub: unknown }
+export interface PostFirstReadMapsIdAcceptRequest { all?: boolean; items?: string[] }
+export interface PostFirstReadMapsRequest { map: Record<string, unknown> }
+export interface PostFirstReadMapsResponse { map_id: unknown; status: unknown; items: unknown; next: unknown }
 export interface PostFoundingPlanRequest { days?: Record<string, unknown>; passes?: number; advisors?: string; government?: string; expected_builders?: number; existing?: boolean }
 export interface PostFrontDoorGuideConversationsIdAttachRequest { token: string }
 export interface PostFrontDoorGuideConversationsIdAttachResponse { ok: boolean; conversation: unknown }
@@ -607,9 +611,11 @@ export interface PostProvisioningInstancesIdGithubAppRequest { account?: string;
 export interface PostProvisioningInstancesIdGithubAppResponse { state: unknown; account: unknown; post_url: unknown; personal_url: unknown; org_url: unknown; org_login: unknown; manifest: unknown; redirect_url: unknown; expires_at: unknown }
 export interface PostProvisioningInstancesIdRenderRequest { key: string; owner_id: string; mode: string; service_id?: string; web_plan?: string; db_plan?: string; region?: string; runtime?: string; build_command?: string; start_command?: string; database?: boolean }
 export interface PostProvisioningInstancesIdRenderResponse { ok: boolean; queued: boolean; action: unknown; mode: unknown; with_setup: boolean; message: unknown }
+export interface PostProvisioningInstancesIdRenderSandboxRequest { key: string }
+export interface PostProvisioningInstancesIdRenderSandboxResponse { ok: boolean; queued: boolean; action: unknown; sandbox: boolean; message: unknown }
 export interface PostProvisioningInstancesIdRepoPrivateResponse { ok: boolean; queued: unknown; action: unknown; status: unknown; message: unknown }
 export interface PostProvisioningInstancesIdRestartResponse { ok: boolean; queued: unknown; action: unknown; status: unknown; message: unknown }
-export interface PostProvisioningInstancesIdTeardownResponse { ok: boolean; queued: unknown; action: unknown; status: unknown; superseded: unknown; message: unknown }
+export interface PostProvisioningInstancesIdTeardownResponse { ok: boolean; queued: unknown; action: unknown; status: unknown; superseded: unknown; sandbox_key_lent: unknown; message: unknown }
 export interface PostProvisioningInstancesIdUpdateSubscriptionRequest { subscribed: boolean }
 export interface PostProvisioningInstancesIdUpdateSubscriptionResponse { ok: boolean; update_subscribed: unknown; previous: unknown; changed: unknown }
 export interface PostProvisioningInstancesRequest { slug: string; target_ref?: string; hosting_shape?: string; domain?: string; no_address?: boolean; tier?: string; onboard_mode?: string; type?: string; description?: string; detail?: Record<string, unknown>; modules?: string[]; terms_acknowledged?: boolean; demo?: Record<string, unknown>; ship_mode?: "auto" | "manual"; genesis?: boolean; test?: boolean }
@@ -1150,6 +1156,18 @@ export interface BongosClient {
     /** GET /feedback/receipt/{id} — rank: public */
     getFeedbackReceiptId(args?: RequestArgs): Promise<ApiResponse>;
   };
+  "firstRead": {
+    /** POST /first-read/maps — rank: metic+archon */
+    postFirstReadMaps(args: RequestArgs & { body: PostFirstReadMapsRequest }): Promise<PostFirstReadMapsResponse>;
+    /** GET /first-read/maps/{id} — rank: metic+archon */
+    getFirstReadMapsId(args?: RequestArgs): Promise<ApiResponse>;
+    /** POST /first-read/maps/{id}/accept — rank: metic+archon */
+    postFirstReadMapsIdAccept(args?: RequestArgs & { body?: PostFirstReadMapsIdAcceptRequest }): Promise<ApiResponse>;
+    /** POST /first-read/maps/{id}/reject — rank: metic+archon */
+    postFirstReadMapsIdReject(args?: RequestArgs): Promise<ApiResponse>;
+    /** GET /first-read/prompt — rank: any-builder */
+    getFirstReadPrompt(args?: RequestArgs): Promise<GetFirstReadPromptResponse>;
+  };
   "founding": {
     /** POST /founding/alive — rank: any-builder */
     postFoundingAlive(args?: RequestArgs): Promise<ApiResponse>;
@@ -1989,6 +2007,8 @@ export interface BongosClient {
     getProvisioningInstancesIdRender(args?: RequestArgs): Promise<GetProvisioningInstancesIdRenderResponse>;
     /** POST /provisioning/instances/{id}/render — rank: any-builder */
     postProvisioningInstancesIdRender(args: RequestArgs & { body: PostProvisioningInstancesIdRenderRequest }): Promise<PostProvisioningInstancesIdRenderResponse>;
+    /** POST /provisioning/instances/{id}/render/sandbox — rank: any-builder */
+    postProvisioningInstancesIdRenderSandbox(args: RequestArgs & { body: PostProvisioningInstancesIdRenderSandboxRequest }): Promise<PostProvisioningInstancesIdRenderSandboxResponse>;
     /** POST /provisioning/instances/{id}/repo-private — rank: any-builder */
     postProvisioningInstancesIdRepoPrivate(args?: RequestArgs): Promise<PostProvisioningInstancesIdRepoPrivateResponse>;
     /** POST /provisioning/instances/{id}/restart — rank: any-builder */

package/clients/bongos-client/index.mjs

@@ -464,6 +464,18 @@ export function createClient(opts = {}) {
       // GET /feedback/receipt/{id} — rank: public — GET /feedback/receipt/:id
       getFeedbackReceiptId: (args) => request("GET", "/feedback/receipt/{id}", { hasBody: false }, args),
     },
+    "firstRead": {
+      // POST /first-read/maps — rank: metic+archon — POST /first-read/maps
+      postFirstReadMaps: (args) => request("POST", "/first-read/maps", { hasBody: true }, args),
+      // GET /first-read/maps/{id} — rank: metic+archon — GET /first-read/maps/:id
+      getFirstReadMapsId: (args) => request("GET", "/first-read/maps/{id}", { hasBody: false }, args),
+      // POST /first-read/maps/{id}/accept — rank: metic+archon — POST /first-read/maps/:id/accept
+      postFirstReadMapsIdAccept: (args) => request("POST", "/first-read/maps/{id}/accept", { hasBody: true }, args),
+      // POST /first-read/maps/{id}/reject — rank: metic+archon — POST /first-read/maps/:id/reject
+      postFirstReadMapsIdReject: (args) => request("POST", "/first-read/maps/{id}/reject", { hasBody: true }, args),
+      // GET /first-read/prompt — rank: any-builder — GET /first-read/prompt
+      getFirstReadPrompt: (args) => request("GET", "/first-read/prompt", { hasBody: false }, args),
+    },
     "founding": {
       // POST /founding/alive — rank: any-builder — POST /founding/alive
       postFoundingAlive: (args) => request("POST", "/founding/alive", { hasBody: true }, args),
@@ -1303,6 +1315,8 @@ export function createClient(opts = {}) {
       getProvisioningInstancesIdRender: (args) => request("GET", "/provisioning/instances/{id}/render", { hasBody: false }, args),
       // POST /provisioning/instances/{id}/render — rank: any-builder — POST /provisioning/instances/:id/render
       postProvisioningInstancesIdRender: (args) => request("POST", "/provisioning/instances/{id}/render", { hasBody: true }, args),
+      // POST /provisioning/instances/{id}/render/sandbox — rank: any-builder — POST /provisioning/instances/:id/render/sandbox
+      postProvisioningInstancesIdRenderSandbox: (args) => request("POST", "/provisioning/instances/{id}/render/sandbox", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/repo-private — rank: any-builder — POST /provisioning/instances/:id/repo-private
       postProvisioningInstancesIdRepoPrivate: (args) => request("POST", "/provisioning/instances/{id}/repo-private", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/restart — rank: any-builder — POST /provisioning/instances/:id/restart

package/docs/adr/0406-every-project-gets-a-sandbox-that-follows-main-and-live-moves-only-when-a-person-promotes.md

@@ -106,3 +106,11 @@ Each sibling task's description now opens with a dated note, *"Re-read against A
 | [task 1005291](https://cloudbongos.com/builders#/task/1005291) | A read-only key is the floor; the gate is an outbound wrapper in the starter active under `BONGOS_SANDBOX=1`, with its limit said plainly; free plan blocks mail ports. |
 | [task 1005292](https://cloudbongos.com/builders#/task/1005292) | Same rule over the release pin; a second instance takes every release and carries a throwaway test project; owner choice 2 and the patch auto-move question are asked here. |
 | [task 1005293](https://cloudbongos.com/builders#/task/1005293) | Added checks: no live deploy after a ship, promote refuses without the key, the sandbox band shows, sandbox data is fake, and the lent key is confirmed read-only. |
+
+## 10. Amendment — what setting it up found (2026-11-13, [task 1005289](https://cloudbongos.com/builders#/task/1005289))
+
+- **A second database in one server is allowed.** Render's own page ([render.com/docs/postgresql-creating-connecting](https://render.com/docs/postgresql-creating-connecting), section "Adding multiple databases to a single instance", read 2026-11-13) says extra databases can be made in an instance, with plain SQL (`CREATE DATABASE`) over a psql session, and reached on the instance's same addresses with the new name as the last part. Render's API has no call for it, so the runner makes it with SQL over the server's external address. The page names no plan limit and no count limit. **Not yet tried on a real Render account** — no account was available to the session that built it; the walk ([task 1005293](https://cloudbongos.com/builders#/task/1005293)) is the first real run. Owner choice 1 in §6 therefore does not arise unless that run says otherwise; if the database stage fails, the sandbox runs with no database and says why, and nothing paid is bought in its place.
+- **The database starts empty.** The app's own seed fills it (the starter's job under `BONGOS_SANDBOX=1`); the platform cannot know an app's tables.
+- **The live service's switch to manual deploys is left to the promote task** ([task 1005290](https://cloudbongos.com/builders#/task/1005290)), so that live never stops updating before there is a button that moves it.
+- **Teardown needs the owner's key to remove the sandbox**, typed on the teardown screen and used once. The Render client gains one delete, `deleteSandboxService`, which refuses anything not named `…-sandbox` on the free plan. Without the key the sandbox stays on the owner's account and the owner is told exactly what to remove.
+