@bongos/core 1.25.17 → 1.25.19

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 725 endpoints across 122 route files.
+> **Generated from the live route files** — the route file is authoritative. 730 endpoints across 124 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust-boundary-server-enforced-permissions.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -66,6 +66,12 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 |---|---|---|---|---|
 | GET | `/api/bongos/analytics/builder/:id` | `any-builder` | — | a builder's historical AI dev curve. |
 
+## `app-host` (1)
+
+| Method | Path | Rank | Body | Description |
+|---|---|---|---|---|
+| GET | `/api/bongos/app-host` | `any-builder` | — | GET /app-host — rank: any signed-in builder; owner-only parts gated on core.pin.move. |
+
 ## `artist-gate` (1)
 
 | Method | Path | Rank | Body | Description |
@@ -315,17 +321,19 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | POST | `/api/bongos/feedback/receipt` | `any-builder` | `sha256`, `kind` | signed-in builder — a receipt only says "this builder sent this text"; it grants nothing here, and the hub files every report behind a nod. |
 | GET | `/api/bongos/feedback/receipt/:id` | `public` | — | the hub redeems a receipt with no session of its own. |
 
-## `first-read` (5)
+## `first-read` (7)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
+| GET | `/api/bongos/first-read/catalog` | `any-builder` | — | the modules this project can switch on, the only ones a map may recommend. |
 | POST | `/api/bongos/first-read/maps` | `metic+archon` | `map` | .create — a map is a planning proposal for this project. |
 | GET | `/api/bongos/first-read/maps/:id` | `metic+archon` | — | .create — the review is for whoever may accept or reject it. |
 | POST | `/api/bongos/first-read/maps/:id/accept` | `metic+archon` | `all`, `items` | .create + act-alone planning — the owner's yes. |
+| POST | `/api/bongos/first-read/maps/:id/dismiss` | `metic+archon` | `items` | .create — the owner's no to named items (a module recommendation, usually). |
 | POST | `/api/bongos/first-read/maps/:id/reject` | `metic+archon` | — | .create — the owner's no. |
 | GET | `/api/bongos/first-read/prompt` | `any-builder` | — | the prompt and the shape are instructions, not project data. |
 
-## `founding` (18)
+## `founding` (19)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -344,6 +352,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | DELETE | `/api/bongos/founding/work/:stage/answers/:question` | `any-builder` | — | Un-answer: back to empty, which is not the same as skipped. |
 | GET | `/api/bongos/founding/work/:stage/answers/:question/history` | `any-builder` | — |  |
 | GET | `/api/bongos/founding/work/:stage/assist` | `any-builder` | — |  |
+| GET | `/api/bongos/founding/work/:stage/document` | `any-builder` | — | The stage's document (task 1005115): its record read as one named page, editable through the writes below at any time, without reopening … |
 | PUT | `/api/bongos/founding/work/:stage/door` | `any-builder` | `door` | The founder's writes. |
 | PUT | `/api/bongos/founding/work/:stage/link` | `any-builder` | `url` |  |
 | PUT | `/api/bongos/founding/work/:stage/page` | `any-builder` | `page` |  |
@@ -1041,11 +1050,12 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | GET | `/api/bongos/specialities/installed-skills` | `any-builder` | — | GET /specialities/installed-skills — every skill THIS instance has, each explained the way the adoption walkthrough explains it, so a spe… |
 | GET | `/api/bongos/specialities/offered` | `any-builder` | — | GET /specialities/offered — the suggestions for THIS builder. |
 
-## `sso` (12)
+## `sso` (13)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
 | POST | `/api/bongos/sso/activity/rollup` | `public` | `client_id`, `client_secret`, `github_id`, `credits`, `tasks_shipped`, `karma`, `rank`, `disciplines`, `recent_ships`, `crafts` | POST /sso/activity/rollup — a federated instance reports a builder's activity snapshot (ADR 0141 §4). |
+| POST | `/api/bongos/sso/app-status` | `public` | `client_id`, `client_secret` | authenticated by client_id + client_secret, not a builder rank. |
 | POST | `/api/bongos/sso/applicant-profile` | `public` | `client_id`, `client_secret`, `github_id` | POST /sso/applicant-profile — a federated instance resolves ONE applicant's profile view for its own reviewer queue, LIVE at render (priv… |
 | GET | `/api/bongos/sso/authorize` | `public` | — | GET /sso/authorize?client_id=&redirect_uri=&state= — the browser authorize leg. |
 | POST | `/api/bongos/sso/device/poll` | `public` | `device_code` | POST /sso/device/poll — poll the hub device flow. |