@bongos/core 1.25.20 → 1.25.21

package/docs/api/openapi.json

@@ -24658,14 +24658,7 @@
         ],
         "responses": {
           "200": {
-            "description": "Success.",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/GetProvisioningInstancesIdResponse"
-                }
-              }
-            }
+            "description": "Success."
           },
           "400": {
             "$ref": "#/components/responses/BadRequest"
@@ -25433,6 +25426,173 @@
         ]
       }
     },
+    "/provisioning/instances/{id}/grants": {
+      "get": {
+        "operationId": "get_provisioning_instances_id_grants",
+        "tags": [
+          "provisioning"
+        ],
+        "summary": "GET /provisioning/instances/:id/grants",
+        "description": "GET /provisioning/instances/:id/grants — the project's live grants. rank: any authenticated builder, own resource (owner; archon may read any). 404 otherwise.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/provisioning/routes/grants.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetProvisioningInstancesIdGrantsResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      },
+      "post": {
+        "operationId": "post_provisioning_instances_id_grants",
+        "tags": [
+          "provisioning"
+        ],
+        "summary": "POST /provisioning/instances/:id/grants",
+        "description": "POST /provisioning/instances/:id/grants { github_login } — give a person access. rank: any authenticated builder, own resource, OWNER ONLY (no archon override). 404 for anyone else, so a stranger learns nothing about the id.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/provisioning/routes/grants.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostProvisioningInstancesIdGrantsRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/provisioning/instances/{id}/grants/{grantId}": {
+      "delete": {
+        "operationId": "delete_provisioning_instances_id_grants_grantId",
+        "tags": [
+          "provisioning"
+        ],
+        "summary": "DELETE /provisioning/instances/:id/grants/:grantId",
+        "description": "DELETE /provisioning/instances/:id/grants/:grantId — take access back. rank: any authenticated builder: the project's owner, an archon, or the grantee removing their OWN grant — decided in the handler, because \"whose grant is it\" is a fact of the row. Anyone else gets the same 404 a missing project gets.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/provisioning/routes/grants.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          },
+          {
+            "name": "grantId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `grantId`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/DeleteProvisioningInstancesIdGrantsGrantIdResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/provisioning/instances/{id}/invite-suggestions": {
       "get": {
         "operationId": "get_provisioning_instances_id_invite_suggestions",
@@ -25815,6 +25975,125 @@
         ]
       }
     },
+    "/provisioning/instances/{id}/render/promote": {
+      "post": {
+        "operationId": "post_provisioning_instances_id_render_promote",
+        "tags": [
+          "provisioning"
+        ],
+        "summary": "POST /provisioning/instances/:id/render/promote",
+        "description": "POST /provisioning/instances/:id/render/promote — rank: any authenticated builder, and OWNER ONLY: the key and the live app are the owner's, so the server decides only the owner may move it (an archon on someone else's project gets the stranger's 404). Takes the change the owner chose (`commit_id`) and the change live ran when they looked (`expect_live_commit`); the runner refuses if either moved. This is the ONLY way Bongos moves a live app that has a sandbox, and the reply is a receipt: nothing is live yet.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/provisioning/routes/render-standup.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostProvisioningInstancesIdRenderPromoteRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostProvisioningInstancesIdRenderPromoteResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/provisioning/instances/{id}/render/promote/look": {
+      "post": {
+        "operationId": "post_provisioning_instances_id_render_promote_look",
+        "tags": [
+          "provisioning"
+        ],
+        "summary": "POST /provisioning/instances/:id/render/promote/look",
+        "description": "POST /provisioning/instances/:id/render/promote/look — rank: any authenticated builder, and OWNER ONLY. What is waiting on the sandbox to go live (ADR 0406 §2, task 1005290): the change the live app runs, and every change that has run on the sandbox since, newest first. A read-only look at Render on the owner's key held for this one request (ADR 0348 as widened by ADR 0406 §11): GET only, never stored, logged or sent back.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/provisioning/routes/render-standup.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostProvisioningInstancesIdRenderPromoteLookRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/provisioning/instances/{id}/render/sandbox": {
       "post": {
         "operationId": "post_provisioning_instances_id_render_sandbox",
@@ -34224,6 +34503,21 @@
           "message"
         ]
       },
+      "DeleteProvisioningInstancesIdGrantsGrantIdResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "revoked": {
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "ok",
+          "revoked"
+        ]
+      },
       "DeleteSpecialitiesIdDocumentsDocIdResponse": {
         "type": "object",
         "properties": {
@@ -36079,6 +36373,19 @@
           "note"
         ]
       },
+      "GetProvisioningInstancesIdGrantsResponse": {
+        "type": "object",
+        "properties": {
+          "grants": {},
+          "levels": {},
+          "limit": {}
+        },
+        "required": [
+          "grants",
+          "levels",
+          "limit"
+        ]
+      },
       "GetProvisioningInstancesIdInviteSuggestionsResponse": {
         "type": "object",
         "properties": {
@@ -36118,6 +36425,7 @@
           },
           "app": {},
           "sandbox": {},
+          "promote": {},
           "env_vars": {},
           "values_held": {
             "type": "boolean"
@@ -36127,25 +36435,11 @@
           "ok",
           "app",
           "sandbox",
+          "promote",
           "env_vars",
           "values_held"
         ]
       },
-      "GetProvisioningInstancesIdResponse": {
-        "type": "object",
-        "properties": {
-          "instance": {},
-          "open_intent": {},
-          "github_app": {},
-          "github_setup": {}
-        },
-        "required": [
-          "instance",
-          "open_intent",
-          "github_app",
-          "github_setup"
-        ]
-      },
       "GetProvisioningInstancesIdSettingsResponse": {
         "type": "object",
         "properties": {
@@ -40397,13 +40691,17 @@
           },
           "amendment": {},
           "item": {},
-          "reads_as": {}
+          "reads_as": {},
+          "what_happens_next": {},
+          "decided": {}
         },
         "required": [
           "ok",
           "amendment",
           "item",
-          "reads_as"
+          "reads_as",
+          "what_happens_next",
+          "decided"
         ]
       },
       "PostGovernmentBoardDecisionRulesRequest": {
@@ -40430,13 +40728,15 @@
           },
           "amendment": {},
           "item": {},
-          "rules": {}
+          "rules": {},
+          "decided": {}
         },
         "required": [
           "ok",
           "amendment",
           "item",
-          "rules"
+          "rules",
+          "decided"
         ]
       },
       "PostGovernmentBoardItemsItemIdVotesRequest": {
@@ -40510,12 +40810,14 @@
             "type": "boolean"
           },
           "amendment": {},
-          "item": {}
+          "item": {},
+          "decided": {}
         },
         "required": [
           "ok",
           "amendment",
-          "item"
+          "item",
+          "decided"
         ]
       },
       "PostGovernmentBoardLawsRequest": {
@@ -40542,13 +40844,15 @@
           },
           "amendment": {},
           "item": {},
-          "proposal": {}
+          "proposal": {},
+          "decided": {}
         },
         "required": [
           "ok",
           "amendment",
           "item",
-          "proposal"
+          "proposal",
+          "decided"
         ]
       },
       "PostGovernmentBoardMattersRequest": {
@@ -40615,14 +40919,16 @@
           "preset": {},
           "amendment": {},
           "item": {},
-          "proposal": {}
+          "proposal": {},
+          "decided": {}
         },
         "required": [
           "ok",
           "preset",
           "amendment",
           "item",
-          "proposal"
+          "proposal",
+          "decided"
         ]
       },
       "PostGovernmentBuildoutsRequest": {
@@ -42881,6 +43187,73 @@
           "expires_at"
         ]
       },
+      "PostProvisioningInstancesIdGrantsRequest": {
+        "type": "object",
+        "properties": {
+          "github_login": {
+            "type": "string",
+            "maxLength": 39
+          }
+        },
+        "required": [
+          "github_login"
+        ],
+        "additionalProperties": false
+      },
+      "PostProvisioningInstancesIdRenderPromoteLookRequest": {
+        "type": "object",
+        "properties": {
+          "key": {
+            "type": "string",
+            "maxLength": 200
+          }
+        },
+        "required": [
+          "key"
+        ],
+        "additionalProperties": false
+      },
+      "PostProvisioningInstancesIdRenderPromoteRequest": {
+        "type": "object",
+        "properties": {
+          "key": {
+            "type": "string",
+            "maxLength": 200
+          },
+          "commit_id": {
+            "type": "string",
+            "maxLength": 64
+          },
+          "expect_live_commit": {
+            "type": "string",
+            "maxLength": 64
+          }
+        },
+        "required": [
+          "key",
+          "commit_id"
+        ],
+        "additionalProperties": false
+      },
+      "PostProvisioningInstancesIdRenderPromoteResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "queued": {
+            "type": "boolean"
+          },
+          "action": {},
+          "message": {}
+        },
+        "required": [
+          "ok",
+          "queued",
+          "action",
+          "message"
+        ]
+      },
       "PostProvisioningInstancesIdRenderRequest": {
         "type": "object",
         "properties": {
@@ -45622,9 +45995,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 731,
-  "x-schema-count": 759,
+  "x-endpoint-count": 736,
+  "x-schema-count": 764,
   "x-undocumented-bodies": 12,
-  "x-response-schemas": 473,
+  "x-response-schemas": 475,
   "x-generated-by": "scripts/bongos/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 731 endpoints across 124 route files.
+> **Generated from the live route files** — the route file is authoritative. 736 endpoints across 125 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust-boundary-server-enforced-permissions.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -870,7 +870,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | POST | `/api/bongos/projects/invite` | `metic+archon` | `client_id`, `github_login` | own-or-metic in effect: where to invite a builder into a project, asked by a `project.curate` holder OR the project's OWN OWNER (task 100… |
 | POST | `/api/bongos/projects/invite-guild` | `metic+archon` | `client_id`, `guild` | own-or-metic in effect, the SAME gate as POST /projects/invite above and for the same reasons (a non-inviter gets that route's unchanged … |
 
-## `provisioning` (48)
+## `provisioning` (53)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -899,6 +899,9 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | POST | `/api/bongos/provisioning/instances/:id/force-teardown` | `metic+archon` | — | POST /provisioning/instances/:id/force-teardown — Archon tears down ANY instance. |
 | POST | `/api/bongos/provisioning/instances/:id/github-app` | `any-builder` | `account`, `org` | POST /provisioning/instances/:id/github-app — mint a GitHub-App-Manifest onboarding link for the caller's OWN instance (task 2080, ADR 01… |
 | POST | `/api/bongos/provisioning/instances/:id/github-app/pick-up` | `any-builder` | — | POST /provisioning/instances/:id/github-app/pick-up — "Pick up where it stopped" and "Check again" (task 1004652). |
+| GET | `/api/bongos/provisioning/instances/:id/grants` | `any-builder` | — | GET /provisioning/instances/:id/grants — the project's live grants. |
+| POST | `/api/bongos/provisioning/instances/:id/grants` | `any-builder` | `github_login` | POST /provisioning/instances/:id/grants { github_login } — give a person access. |
+| DELETE | `/api/bongos/provisioning/instances/:id/grants/:grantId` | `any-builder` | — | DELETE /provisioning/instances/:id/grants/:grantId — take access back. |
 | GET | `/api/bongos/provisioning/instances/:id/invite-suggestions` | `any-builder` | — | ── Who is worth inviting (BV1.R28, task 1002347, goal 1000046 C6) ──────── GET /provisioning/instances/:id/invite-suggestions — turn the … |
 | PUT | `/api/bongos/provisioning/instances/:id/logo` | `any-builder` | `image_b64`, `content_type` | PUT …/logo — rank: any authenticated builder (own resource; archon may change any). |
 | DELETE | `/api/bongos/provisioning/instances/:id/logo` | `any-builder` | validated | DELETE …/logo — rank: any authenticated builder (own resource; archon may change any). |
@@ -906,6 +909,8 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | PATCH | `/api/bongos/provisioning/instances/:id/look` | `any-builder` | `look`, `night_tint`, `accent` | PATCH — rank: any authenticated builder (own resource; archon may change any). |
 | GET | `/api/bongos/provisioning/instances/:id/render` | `any-builder` | — | GET /provisioning/instances/:id/render — rank: any authenticated builder, and OWNER ONLY, like the POST (task 1004353). |
 | POST | `/api/bongos/provisioning/instances/:id/render` | `any-builder` | `key`, `owner_id`, `mode`, `service_id`, `web_plan`, `db_plan`, `region`, `runtime`, `build_command`, `start_command`, `database` | POST /provisioning/instances/:id/render — rank: any authenticated builder, and OWNER ONLY: the key is the owner's and so is the account i… |
+| POST | `/api/bongos/provisioning/instances/:id/render/promote` | `any-builder` | `key`, `commit_id`, `expect_live_commit` | POST /provisioning/instances/:id/render/promote — rank: any authenticated builder, and OWNER ONLY: the key and the live app are the owner… |
+| POST | `/api/bongos/provisioning/instances/:id/render/promote/look` | `any-builder` | `key` | POST /provisioning/instances/:id/render/promote/look — rank: any authenticated builder, and OWNER ONLY. |
 | POST | `/api/bongos/provisioning/instances/:id/render/sandbox` | `any-builder` | `key` | POST /provisioning/instances/:id/render/sandbox — rank: any authenticated builder, and OWNER ONLY, like every Render route. |
 | POST | `/api/bongos/provisioning/instances/:id/repo-private` | `any-builder` | validated | POST /provisioning/instances/:id/repo-private — rank: any authenticated builder, and OWNER ONLY: no archon override, because the runner f… |
 | POST | `/api/bongos/provisioning/instances/:id/restart` | `any-builder` | — | POST /provisioning/instances/:id/restart — restart an ACTIVE project the heartbeat cannot reach (task 1003238). |