@bongos/core 1.25.19 → 1.25.21

package/docs/api/openapi.json

@@ -8312,7 +8312,7 @@
           "founding"
         ],
         "summary": "GET /founding/work",
-        "description": "The read path for every door and for AI sessions planning a goal or task.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "description": "**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
         "x-source": "modules/onboarding/routes/genesis-work.js",
         "responses": {
@@ -9070,6 +9070,37 @@
         ]
       }
     },
+    "/front-door-guide/mine/handoff.md": {
+      "get": {
+        "operationId": "get_front_door_guide_mine_handoff_md",
+        "tags": [
+          "front-door-guide"
+        ],
+        "summary": "GET /front-door-guide/mine/handoff.md",
+        "description": "my plan as the hand-off file (task 1005274), offered as a download on the creation page. 404 with no plan. The name is only the file's title; it is never stored.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/front-door-guide/routes/front-door-guide-plan.js",
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/front-door-guide/status": {
       "get": {
         "operationId": "get_front_door_guide_status",
@@ -24627,14 +24658,7 @@
         ],
         "responses": {
           "200": {
-            "description": "Success.",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/GetProvisioningInstancesIdResponse"
-                }
-              }
-            }
+            "description": "Success."
           },
           "400": {
             "$ref": "#/components/responses/BadRequest"
@@ -25402,6 +25426,173 @@
         ]
       }
     },
+    "/provisioning/instances/{id}/grants": {
+      "get": {
+        "operationId": "get_provisioning_instances_id_grants",
+        "tags": [
+          "provisioning"
+        ],
+        "summary": "GET /provisioning/instances/:id/grants",
+        "description": "GET /provisioning/instances/:id/grants — the project's live grants. rank: any authenticated builder, own resource (owner; archon may read any). 404 otherwise.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/provisioning/routes/grants.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetProvisioningInstancesIdGrantsResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      },
+      "post": {
+        "operationId": "post_provisioning_instances_id_grants",
+        "tags": [
+          "provisioning"
+        ],
+        "summary": "POST /provisioning/instances/:id/grants",
+        "description": "POST /provisioning/instances/:id/grants { github_login } — give a person access. rank: any authenticated builder, own resource, OWNER ONLY (no archon override). 404 for anyone else, so a stranger learns nothing about the id.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/provisioning/routes/grants.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostProvisioningInstancesIdGrantsRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/provisioning/instances/{id}/grants/{grantId}": {
+      "delete": {
+        "operationId": "delete_provisioning_instances_id_grants_grantId",
+        "tags": [
+          "provisioning"
+        ],
+        "summary": "DELETE /provisioning/instances/:id/grants/:grantId",
+        "description": "DELETE /provisioning/instances/:id/grants/:grantId — take access back. rank: any authenticated builder: the project's owner, an archon, or the grantee removing their OWN grant — decided in the handler, because \"whose grant is it\" is a fact of the row. Anyone else gets the same 404 a missing project gets.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/provisioning/routes/grants.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          },
+          {
+            "name": "grantId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `grantId`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/DeleteProvisioningInstancesIdGrantsGrantIdResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/provisioning/instances/{id}/invite-suggestions": {
       "get": {
         "operationId": "get_provisioning_instances_id_invite_suggestions",
@@ -25784,6 +25975,125 @@
         ]
       }
     },
+    "/provisioning/instances/{id}/render/promote": {
+      "post": {
+        "operationId": "post_provisioning_instances_id_render_promote",
+        "tags": [
+          "provisioning"
+        ],
+        "summary": "POST /provisioning/instances/:id/render/promote",
+        "description": "POST /provisioning/instances/:id/render/promote — rank: any authenticated builder, and OWNER ONLY: the key and the live app are the owner's, so the server decides only the owner may move it (an archon on someone else's project gets the stranger's 404). Takes the change the owner chose (`commit_id`) and the change live ran when they looked (`expect_live_commit`); the runner refuses if either moved. This is the ONLY way Bongos moves a live app that has a sandbox, and the reply is a receipt: nothing is live yet.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/provisioning/routes/render-standup.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostProvisioningInstancesIdRenderPromoteRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostProvisioningInstancesIdRenderPromoteResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/provisioning/instances/{id}/render/promote/look": {
+      "post": {
+        "operationId": "post_provisioning_instances_id_render_promote_look",
+        "tags": [
+          "provisioning"
+        ],
+        "summary": "POST /provisioning/instances/:id/render/promote/look",
+        "description": "POST /provisioning/instances/:id/render/promote/look — rank: any authenticated builder, and OWNER ONLY. What is waiting on the sandbox to go live (ADR 0406 §2, task 1005290): the change the live app runs, and every change that has run on the sandbox since, newest first. A read-only look at Render on the owner's key held for this one request (ADR 0348 as widened by ADR 0406 §11): GET only, never stored, logged or sent back.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/provisioning/routes/render-standup.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostProvisioningInstancesIdRenderPromoteLookRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/provisioning/instances/{id}/render/sandbox": {
       "post": {
         "operationId": "post_provisioning_instances_id_render_sandbox",
@@ -34193,6 +34503,21 @@
           "message"
         ]
       },
+      "DeleteProvisioningInstancesIdGrantsGrantIdResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "revoked": {
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "ok",
+          "revoked"
+        ]
+      },
       "DeleteSpecialitiesIdDocumentsDocIdResponse": {
         "type": "object",
         "properties": {
@@ -36048,6 +36373,19 @@
           "note"
         ]
       },
+      "GetProvisioningInstancesIdGrantsResponse": {
+        "type": "object",
+        "properties": {
+          "grants": {},
+          "levels": {},
+          "limit": {}
+        },
+        "required": [
+          "grants",
+          "levels",
+          "limit"
+        ]
+      },
       "GetProvisioningInstancesIdInviteSuggestionsResponse": {
         "type": "object",
         "properties": {
@@ -36087,6 +36425,7 @@
           },
           "app": {},
           "sandbox": {},
+          "promote": {},
           "env_vars": {},
           "values_held": {
             "type": "boolean"
@@ -36096,25 +36435,11 @@
           "ok",
           "app",
           "sandbox",
+          "promote",
           "env_vars",
           "values_held"
         ]
       },
-      "GetProvisioningInstancesIdResponse": {
-        "type": "object",
-        "properties": {
-          "instance": {},
-          "open_intent": {},
-          "github_app": {},
-          "github_setup": {}
-        },
-        "required": [
-          "instance",
-          "open_intent",
-          "github_app",
-          "github_setup"
-        ]
-      },
       "GetProvisioningInstancesIdSettingsResponse": {
         "type": "object",
         "properties": {
@@ -40366,13 +40691,17 @@
           },
           "amendment": {},
           "item": {},
-          "reads_as": {}
+          "reads_as": {},
+          "what_happens_next": {},
+          "decided": {}
         },
         "required": [
           "ok",
           "amendment",
           "item",
-          "reads_as"
+          "reads_as",
+          "what_happens_next",
+          "decided"
         ]
       },
       "PostGovernmentBoardDecisionRulesRequest": {
@@ -40399,13 +40728,15 @@
           },
           "amendment": {},
           "item": {},
-          "rules": {}
+          "rules": {},
+          "decided": {}
         },
         "required": [
           "ok",
           "amendment",
           "item",
-          "rules"
+          "rules",
+          "decided"
         ]
       },
       "PostGovernmentBoardItemsItemIdVotesRequest": {
@@ -40479,12 +40810,14 @@
             "type": "boolean"
           },
           "amendment": {},
-          "item": {}
+          "item": {},
+          "decided": {}
         },
         "required": [
           "ok",
           "amendment",
-          "item"
+          "item",
+          "decided"
         ]
       },
       "PostGovernmentBoardLawsRequest": {
@@ -40511,13 +40844,15 @@
           },
           "amendment": {},
           "item": {},
-          "proposal": {}
+          "proposal": {},
+          "decided": {}
         },
         "required": [
           "ok",
           "amendment",
           "item",
-          "proposal"
+          "proposal",
+          "decided"
         ]
       },
       "PostGovernmentBoardMattersRequest": {
@@ -40584,14 +40919,16 @@
           "preset": {},
           "amendment": {},
           "item": {},
-          "proposal": {}
+          "proposal": {},
+          "decided": {}
         },
         "required": [
           "ok",
           "preset",
           "amendment",
           "item",
-          "proposal"
+          "proposal",
+          "decided"
         ]
       },
       "PostGovernmentBuildoutsRequest": {
@@ -42850,6 +43187,73 @@
           "expires_at"
         ]
       },
+      "PostProvisioningInstancesIdGrantsRequest": {
+        "type": "object",
+        "properties": {
+          "github_login": {
+            "type": "string",
+            "maxLength": 39
+          }
+        },
+        "required": [
+          "github_login"
+        ],
+        "additionalProperties": false
+      },
+      "PostProvisioningInstancesIdRenderPromoteLookRequest": {
+        "type": "object",
+        "properties": {
+          "key": {
+            "type": "string",
+            "maxLength": 200
+          }
+        },
+        "required": [
+          "key"
+        ],
+        "additionalProperties": false
+      },
+      "PostProvisioningInstancesIdRenderPromoteRequest": {
+        "type": "object",
+        "properties": {
+          "key": {
+            "type": "string",
+            "maxLength": 200
+          },
+          "commit_id": {
+            "type": "string",
+            "maxLength": 64
+          },
+          "expect_live_commit": {
+            "type": "string",
+            "maxLength": 64
+          }
+        },
+        "required": [
+          "key",
+          "commit_id"
+        ],
+        "additionalProperties": false
+      },
+      "PostProvisioningInstancesIdRenderPromoteResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "queued": {
+            "type": "boolean"
+          },
+          "action": {},
+          "message": {}
+        },
+        "required": [
+          "ok",
+          "queued",
+          "action",
+          "message"
+        ]
+      },
       "PostProvisioningInstancesIdRenderRequest": {
         "type": "object",
         "properties": {
@@ -43119,6 +43523,9 @@
           },
           "test": {
             "type": "boolean"
+          },
+          "from_guide": {
+            "type": "boolean"
           }
         },
         "required": [
@@ -45588,9 +45995,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 730,
-  "x-schema-count": 759,
+  "x-endpoint-count": 736,
+  "x-schema-count": 764,
   "x-undocumented-bodies": 12,
-  "x-response-schemas": 473,
+  "x-response-schemas": 475,
   "x-generated-by": "scripts/bongos/gen-api-docs.js"
 }