@bongos/core 1.25.16 → 1.25.18

package/docs/api/openapi.json

@@ -45,6 +45,10 @@
       "name": "analytics",
       "description": "Endpoints under `/api/bongos/analytics`."
     },
+    {
+      "name": "app-host",
+      "description": "Endpoints under `/api/bongos/app-host`."
+    },
     {
       "name": "artist-gate",
       "description": "Endpoints under `/api/bongos/artist-gate`."
@@ -137,6 +141,10 @@
       "name": "feedback",
       "description": "Endpoints under `/api/bongos/feedback`."
     },
+    {
+      "name": "first-read",
+      "description": "Endpoints under `/api/bongos/first-read`."
+    },
     {
       "name": "founding",
       "description": "Endpoints under `/api/bongos/founding`."
@@ -1744,6 +1752,37 @@
         ]
       }
     },
+    "/app-host": {
+      "get": {
+        "operationId": "get_app_host",
+        "tags": [
+          "app-host"
+        ],
+        "summary": "GET /app-host",
+        "description": "GET /app-host — rank: any signed-in builder; owner-only parts gated on core.pin.move.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/app-host/routes/app-host.js",
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/artist-gate": {
       "get": {
         "operationId": "get_artist_gate",
@@ -7609,19 +7648,26 @@
         "security": []
       }
     },
-    "/founding/alive": {
-      "post": {
-        "operationId": "post_founding_alive",
+    "/first-read/catalog": {
+      "get": {
+        "operationId": "get_first_read_catalog",
         "tags": [
-          "founding"
+          "first-read"
         ],
-        "summary": "POST /founding/alive",
-        "description": "**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "summary": "GET /first-read/catalog",
+        "description": "the modules this project can switch on, the only ones a map may recommend. `available: false` when the list cannot be read here.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
-        "x-source": "modules/onboarding/routes/onboarding.js",
+        "x-source": "modules/lifecycle/routes/first-read.js",
         "responses": {
           "200": {
-            "description": "Success."
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetFirstReadCatalogResponse"
+                }
+              }
+            }
           },
           "400": {
             "$ref": "#/components/responses/BadRequest"
@@ -7640,22 +7686,43 @@
         ]
       }
     },
-    "/founding/builders": {
-      "get": {
-        "operationId": "get_founding_builders",
+    "/first-read/maps": {
+      "post": {
+        "operationId": "post_first_read_maps",
         "tags": [
-          "founding"
+          "first-read"
         ],
-        "summary": "GET /founding/builders",
-        "description": "The founding mark (task 1004424): who joined while the project was founding, in join order, with the stage each joined at. Read by the roster, the profile, the ranks page and the home's founding wall; an empty list on a project that was never founded, so those surfaces render exactly as before. Signed-in, like the hall pages that read it; it carries nothing the roster does not already show.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
-        "x-rank": "any-builder",
-        "x-source": "modules/onboarding/routes/onboarding.js",
+        "summary": "POST /first-read/maps",
+        "description": ".create — a map is a planning proposal for this project. Stores it pending; files nothing. A malformed map is refused with every error named.\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `goal.create` (all required).",
+        "x-rank": "metic+archon",
+        "x-source": "modules/lifecycle/routes/first-read.js",
+        "x-permissions": [
+          "goal.create"
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostFirstReadMapsRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
         "responses": {
           "200": {
-            "description": "Success."
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostFirstReadMapsResponse"
+                }
+              }
+            }
           },
           "400": {
-            "$ref": "#/components/responses/BadRequest"
+            "$ref": "#/components/responses/ValidationFailed"
           },
           "401": {
             "$ref": "#/components/responses/Unauthorized"
@@ -7671,16 +7738,30 @@
         ]
       }
     },
-    "/founding/context": {
+    "/first-read/maps/{id}": {
       "get": {
-        "operationId": "get_founding_context",
+        "operationId": "get_first_read_maps_id",
         "tags": [
-          "founding"
+          "first-read"
+        ],
+        "summary": "GET /first-read/maps/:id",
+        "description": ".create — the review is for whoever may accept or reject it.\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `goal.create` (all required).",
+        "x-rank": "metic+archon",
+        "x-source": "modules/lifecycle/routes/first-read.js",
+        "x-permissions": [
+          "goal.create"
+        ],
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
         ],
-        "summary": "GET /founding/context",
-        "description": "**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
-        "x-rank": "any-builder",
-        "x-source": "modules/onboarding/routes/genesis-work.js",
         "responses": {
           "200": {
             "description": "Success."
@@ -7693,6 +7774,9 @@
           },
           "403": {
             "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
           }
         },
         "security": [
@@ -7702,22 +7786,36 @@
         ]
       }
     },
-    "/founding/enabled": {
-      "put": {
-        "operationId": "put_founding_enabled",
+    "/first-read/maps/{id}/accept": {
+      "post": {
+        "operationId": "post_first_read_maps_id_accept",
         "tags": [
-          "founding"
+          "first-read"
+        ],
+        "summary": "POST /first-read/maps/:id/accept",
+        "description": ".create + act-alone planning — the owner's yes. Files the chosen items as draft goals (open) and tasks (backlog); an item already filed is skipped.\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `goal.create` (all required).",
+        "x-rank": "metic+archon",
+        "x-source": "modules/lifecycle/routes/first-read.js",
+        "x-permissions": [
+          "goal.create"
+        ],
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
         ],
-        "summary": "PUT /founding/enabled",
-        "description": "The Test features panel's genesis switch (task 1005036): a test project only, the owner's call.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
-        "x-rank": "any-builder",
-        "x-source": "modules/onboarding/routes/onboarding.js",
         "requestBody": {
           "required": false,
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/PutFoundingEnabledRequest"
+                "$ref": "#/components/schemas/PostFirstReadMapsIdAcceptRequest"
               }
             }
           },
@@ -7735,6 +7833,9 @@
           },
           "403": {
             "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
           }
         },
         "security": [
@@ -7744,53 +7845,36 @@
         ]
       }
     },
-    "/founding/genesis": {
-      "get": {
-        "operationId": "get_founding_genesis",
+    "/first-read/maps/{id}/dismiss": {
+      "post": {
+        "operationId": "post_first_read_maps_id_dismiss",
         "tags": [
-          "founding"
+          "first-read"
         ],
-        "summary": "GET /founding/genesis",
-        "description": "A project born through the startup flow enters genesis on its first founding read (founding-birth.js, task 1004506) — here and on GET /me through the port.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
-        "x-rank": "any-builder",
-        "x-source": "modules/onboarding/routes/onboarding.js",
-        "responses": {
-          "200": {
-            "description": "Success."
-          },
-          "400": {
-            "$ref": "#/components/responses/BadRequest"
-          },
-          "401": {
-            "$ref": "#/components/responses/Unauthorized"
-          },
-          "403": {
-            "$ref": "#/components/responses/Forbidden"
-          }
-        },
-        "security": [
+        "summary": "POST /first-read/maps/:id/dismiss",
+        "description": ".create — the owner's no to named items (a module recommendation, usually). Files nothing; a later \"accept all\" passes them by.\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `goal.create` (all required).",
+        "x-rank": "metic+archon",
+        "x-source": "modules/lifecycle/routes/first-read.js",
+        "x-permissions": [
+          "goal.create"
+        ],
+        "parameters": [
           {
-            "builderSession": []
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
           }
-        ]
-      }
-    },
-    "/founding/plan": {
-      "post": {
-        "operationId": "post_founding_plan",
-        "tags": [
-          "founding"
         ],
-        "summary": "POST /founding/plan",
-        "description": "The plan's ranges and vocabularies are genesis-home.js parsePlan's (one source); this schema only names the fields so an unknown one is refused.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
-        "x-rank": "any-builder",
-        "x-source": "modules/onboarding/routes/onboarding.js",
         "requestBody": {
-          "required": false,
+          "required": true,
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/PostFoundingPlanRequest"
+                "$ref": "#/components/schemas/PostFirstReadMapsIdDismissRequest"
               }
             }
           },
@@ -7808,6 +7892,9 @@
           },
           "403": {
             "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
           }
         },
         "security": [
@@ -7817,16 +7904,30 @@
         ]
       }
     },
-    "/founding/skip": {
+    "/first-read/maps/{id}/reject": {
       "post": {
-        "operationId": "post_founding_skip",
+        "operationId": "post_first_read_maps_id_reject",
         "tags": [
-          "founding"
+          "first-read"
+        ],
+        "summary": "POST /first-read/maps/:id/reject",
+        "description": ".create — the owner's no. Files nothing.\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `goal.create` (all required).",
+        "x-rank": "metic+archon",
+        "x-source": "modules/lifecycle/routes/first-read.js",
+        "x-permissions": [
+          "goal.create"
+        ],
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
         ],
-        "summary": "POST /founding/skip",
-        "description": "Skip genesis: the owner opens the full hall from any stage, no sitting, no gate.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
-        "x-rank": "any-builder",
-        "x-source": "modules/onboarding/routes/onboarding.js",
         "responses": {
           "200": {
             "description": "Success."
@@ -7839,6 +7940,9 @@
           },
           "403": {
             "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
           }
         },
         "security": [
@@ -7848,30 +7952,26 @@
         ]
       }
     },
-    "/founding/stages/{stage}/close": {
-      "post": {
-        "operationId": "post_founding_stages_stage_close",
+    "/first-read/prompt": {
+      "get": {
+        "operationId": "get_first_read_prompt",
         "tags": [
-          "founding"
+          "first-read"
         ],
-        "summary": "POST /founding/stages/:stage/close",
-        "description": "task 1005121: one call. 200 { closed: true, next_stage } when the stage closed; 202 { ok: false, closed: false, reason: 'sitting_open', waiting, next } when a real sitting is deciding it — never a success for a stage that did not close.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "summary": "GET /first-read/prompt",
+        "description": "the prompt and the shape are instructions, not project data. The prompt carries the live module list (task 1005281), so a session recommends from it.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
-        "x-source": "modules/onboarding/routes/onboarding.js",
-        "parameters": [
-          {
-            "name": "stage",
-            "in": "path",
-            "required": true,
-            "schema": {
-              "type": "string"
-            },
-            "description": "Path parameter `stage`."
-          }
-        ],
+        "x-source": "modules/lifecycle/routes/first-read.js",
         "responses": {
           "200": {
-            "description": "Success."
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetFirstReadPromptResponse"
+                }
+              }
+            }
           },
           "400": {
             "$ref": "#/components/responses/BadRequest"
@@ -7881,9 +7981,6 @@
           },
           "403": {
             "$ref": "#/components/responses/Forbidden"
-          },
-          "404": {
-            "$ref": "#/components/responses/NotFound"
           }
         },
         "security": [
@@ -7893,13 +7990,13 @@
         ]
       }
     },
-    "/founding/start": {
+    "/founding/alive": {
       "post": {
-        "operationId": "post_founding_start",
+        "operationId": "post_founding_alive",
         "tags": [
           "founding"
         ],
-        "summary": "POST /founding/start",
+        "summary": "POST /founding/alive",
         "description": "**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
         "x-source": "modules/onboarding/routes/onboarding.js",
@@ -7924,16 +8021,300 @@
         ]
       }
     },
-    "/founding/work": {
+    "/founding/builders": {
       "get": {
-        "operationId": "get_founding_work",
+        "operationId": "get_founding_builders",
         "tags": [
           "founding"
         ],
-        "summary": "GET /founding/work",
-        "description": "The read path for every door and for AI sessions planning a goal or task.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "summary": "GET /founding/builders",
+        "description": "The founding mark (task 1004424): who joined while the project was founding, in join order, with the stage each joined at. Read by the roster, the profile, the ranks page and the home's founding wall; an empty list on a project that was never founded, so those surfaces render exactly as before. Signed-in, like the hall pages that read it; it carries nothing the roster does not already show.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
-        "x-source": "modules/onboarding/routes/genesis-work.js",
+        "x-source": "modules/onboarding/routes/onboarding.js",
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/founding/context": {
+      "get": {
+        "operationId": "get_founding_context",
+        "tags": [
+          "founding"
+        ],
+        "summary": "GET /founding/context",
+        "description": "**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/onboarding/routes/genesis-work.js",
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/founding/enabled": {
+      "put": {
+        "operationId": "put_founding_enabled",
+        "tags": [
+          "founding"
+        ],
+        "summary": "PUT /founding/enabled",
+        "description": "The Test features panel's genesis switch (task 1005036): a test project only, the owner's call.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/onboarding/routes/onboarding.js",
+        "requestBody": {
+          "required": false,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PutFoundingEnabledRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/founding/genesis": {
+      "get": {
+        "operationId": "get_founding_genesis",
+        "tags": [
+          "founding"
+        ],
+        "summary": "GET /founding/genesis",
+        "description": "A project born through the startup flow enters genesis on its first founding read (founding-birth.js, task 1004506) — here and on GET /me through the port.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/onboarding/routes/onboarding.js",
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/founding/plan": {
+      "post": {
+        "operationId": "post_founding_plan",
+        "tags": [
+          "founding"
+        ],
+        "summary": "POST /founding/plan",
+        "description": "The plan's ranges and vocabularies are genesis-home.js parsePlan's (one source); this schema only names the fields so an unknown one is refused.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/onboarding/routes/onboarding.js",
+        "requestBody": {
+          "required": false,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostFoundingPlanRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/founding/skip": {
+      "post": {
+        "operationId": "post_founding_skip",
+        "tags": [
+          "founding"
+        ],
+        "summary": "POST /founding/skip",
+        "description": "Skip genesis: the owner opens the full hall from any stage, no sitting, no gate.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/onboarding/routes/onboarding.js",
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/founding/stages/{stage}/close": {
+      "post": {
+        "operationId": "post_founding_stages_stage_close",
+        "tags": [
+          "founding"
+        ],
+        "summary": "POST /founding/stages/:stage/close",
+        "description": "task 1005121: one call. 200 { closed: true, next_stage } when the stage closed; 202 { ok: false, closed: false, reason: 'sitting_open', waiting, next } when a real sitting is deciding it — never a success for a stage that did not close.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/onboarding/routes/onboarding.js",
+        "parameters": [
+          {
+            "name": "stage",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `stage`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/founding/start": {
+      "post": {
+        "operationId": "post_founding_start",
+        "tags": [
+          "founding"
+        ],
+        "summary": "POST /founding/start",
+        "description": "**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/onboarding/routes/onboarding.js",
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/founding/work": {
+      "get": {
+        "operationId": "get_founding_work",
+        "tags": [
+          "founding"
+        ],
+        "summary": "GET /founding/work",
+        "description": "The read path for every door and for AI sessions planning a goal or task.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/onboarding/routes/genesis-work.js",
         "responses": {
           "200": {
             "description": "Success."
@@ -25358,6 +25739,69 @@
         ]
       }
     },
+    "/provisioning/instances/{id}/render/sandbox": {
+      "post": {
+        "operationId": "post_provisioning_instances_id_render_sandbox",
+        "tags": [
+          "provisioning"
+        ],
+        "summary": "POST /provisioning/instances/:id/render/sandbox",
+        "description": "POST /provisioning/instances/:id/render/sandbox — rank: any authenticated builder, and OWNER ONLY, like every Render route. An app already on Render adds its sandbox with one action (ADR 0406, task 1005289): the owner lends the key once, and the runner sets up a free app that follows main, beside the live one, which it does not touch. A project with no app on Render is told why it has none. The reply is a receipt.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/provisioning/routes/render-standup.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostProvisioningInstancesIdRenderSandboxRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostProvisioningInstancesIdRenderSandboxResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/provisioning/instances/{id}/repo-private": {
       "post": {
         "operationId": "post_provisioning_instances_id_repo_private",
@@ -28970,6 +29414,45 @@
         "security": []
       }
     },
+    "/sso/app-status": {
+      "post": {
+        "operationId": "post_sso_app_status",
+        "tags": [
+          "sso"
+        ],
+        "summary": "POST /sso/app-status",
+        "description": "authenticated by client_id + client_secret, not a builder rank.\n\n**Rank:** `public` — No authentication — any caller.",
+        "x-rank": "public",
+        "x-source": "modules/platform-identity/routes/sso-app-status.js",
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostSsoAppStatusRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostSsoAppStatusResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          }
+        },
+        "security": []
+      }
+    },
     "/sso/applicant-profile": {
       "post": {
         "operationId": "post_sso_applicant_profile",
@@ -34352,6 +34835,36 @@
           "count"
         ]
       },
+      "GetFirstReadCatalogResponse": {
+        "type": "object",
+        "properties": {
+          "available": {},
+          "modules": {}
+        },
+        "required": [
+          "available",
+          "modules"
+        ]
+      },
+      "GetFirstReadPromptResponse": {
+        "type": "object",
+        "properties": {
+          "schema": {},
+          "file": {},
+          "prompt": {},
+          "example": {},
+          "limits": {},
+          "catalog": {}
+        },
+        "required": [
+          "schema",
+          "file",
+          "prompt",
+          "example",
+          "limits",
+          "catalog"
+        ]
+      },
       "GetFrontDoorGuideMineResponse": {
         "type": "object",
         "properties": {
@@ -35528,6 +36041,7 @@
             "type": "boolean"
           },
           "app": {},
+          "sandbox": {},
           "env_vars": {},
           "values_held": {
             "type": "boolean"
@@ -35536,6 +36050,7 @@
         "required": [
           "ok",
           "app",
+          "sandbox",
           "env_vars",
           "values_held"
         ]
@@ -38845,6 +39360,65 @@
           "hub"
         ]
       },
+      "PostFirstReadMapsIdAcceptRequest": {
+        "type": "object",
+        "properties": {
+          "all": {
+            "type": "boolean"
+          },
+          "items": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "maxItems": 500
+          }
+        },
+        "additionalProperties": false
+      },
+      "PostFirstReadMapsIdDismissRequest": {
+        "type": "object",
+        "properties": {
+          "items": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "maxItems": 500
+          }
+        },
+        "required": [
+          "items"
+        ],
+        "additionalProperties": false
+      },
+      "PostFirstReadMapsRequest": {
+        "type": "object",
+        "properties": {
+          "map": {
+            "type": "object"
+          }
+        },
+        "required": [
+          "map"
+        ],
+        "additionalProperties": false
+      },
+      "PostFirstReadMapsResponse": {
+        "type": "object",
+        "properties": {
+          "map_id": {},
+          "status": {},
+          "items": {},
+          "next": {}
+        },
+        "required": [
+          "map_id",
+          "status",
+          "items",
+          "next"
+        ]
+      },
       "PostFoundingPlanRequest": {
         "type": "object",
         "properties": {
@@ -42310,6 +42884,42 @@
           "message"
         ]
       },
+      "PostProvisioningInstancesIdRenderSandboxRequest": {
+        "type": "object",
+        "properties": {
+          "key": {
+            "type": "string",
+            "maxLength": 200
+          }
+        },
+        "required": [
+          "key"
+        ],
+        "additionalProperties": false
+      },
+      "PostProvisioningInstancesIdRenderSandboxResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "queued": {
+            "type": "boolean"
+          },
+          "action": {},
+          "sandbox": {
+            "type": "boolean"
+          },
+          "message": {}
+        },
+        "required": [
+          "ok",
+          "queued",
+          "action",
+          "sandbox",
+          "message"
+        ]
+      },
       "PostProvisioningInstancesIdRepoPrivateResponse": {
         "type": "object",
         "properties": {
@@ -42358,6 +42968,7 @@
           "action": {},
           "status": {},
           "superseded": {},
+          "sandbox_key_lent": {},
           "message": {}
         },
         "required": [
@@ -42366,6 +42977,7 @@
           "action",
           "status",
           "superseded",
+          "sandbox_key_lent",
           "message"
         ]
       },
@@ -43132,6 +43744,43 @@
           "ok"
         ]
       },
+      "PostSsoAppStatusRequest": {
+        "type": "object",
+        "properties": {
+          "client_id": {
+            "type": "string",
+            "maxLength": 200
+          },
+          "client_secret": {
+            "type": "string",
+            "maxLength": 512
+          }
+        },
+        "required": [
+          "client_id",
+          "client_secret"
+        ],
+        "additionalProperties": false
+      },
+      "PostSsoAppStatusResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "known": {
+            "type": "boolean"
+          },
+          "app": {},
+          "sandbox": {}
+        },
+        "required": [
+          "ok",
+          "known",
+          "app",
+          "sandbox"
+        ]
+      },
       "PostSsoApplicantProfileRequest": {
         "type": "object",
         "properties": {
@@ -44894,9 +45543,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 719,
-  "x-schema-count": 749,
+  "x-endpoint-count": 729,
+  "x-schema-count": 759,
   "x-undocumented-bodies": 12,
-  "x-response-schemas": 468,
+  "x-response-schemas": 473,
   "x-generated-by": "scripts/bongos/gen-api-docs.js"
 }