@bongos/core 1.25.20 → 1.25.22

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 731 operations across 88 resource groups
+- 740 operations across 88 resource groups
 
 ## Use it from your project
 

package/clients/bongos-client/bongos-client.global.js

@@ -497,8 +497,14 @@ function createClient(opts = {}) {
       getFoundingContext: (args) => request("GET", "/founding/context", { hasBody: false }, args),
       // PUT /founding/enabled — rank: any-builder — PUT /founding/enabled
       putFoundingEnabled: (args) => request("PUT", "/founding/enabled", { hasBody: true }, args),
+      // GET /founding/facts — rank: any-builder — GET /founding/facts
+      getFoundingFacts: (args) => request("GET", "/founding/facts", { hasBody: false }, args),
+      // PUT /founding/facts — rank: any-builder — PUT /founding/facts
+      putFoundingFacts: (args) => request("PUT", "/founding/facts", { hasBody: true }, args),
       // GET /founding/genesis — rank: any-builder — GET /founding/genesis
       getFoundingGenesis: (args) => request("GET", "/founding/genesis", { hasBody: false }, args),
+      // GET /founding/legalize/options — rank: any-builder — GET /founding/legalize/options
+      getFoundingLegalizeOptions: (args) => request("GET", "/founding/legalize/options", { hasBody: false }, args),
       // POST /founding/plan — rank: any-builder — POST /founding/plan
       postFoundingPlan: (args) => request("POST", "/founding/plan", { hasBody: true }, args),
       // POST /founding/skip — rank: any-builder — POST /founding/skip
@@ -563,6 +569,8 @@ function createClient(opts = {}) {
       getGithubRepos: (args) => request("GET", "/github/repos", { hasBody: false }, args),
       // POST /github/repos — rank: any-builder — POST /github/repos
       postGithubRepos: (args) => request("POST", "/github/repos", { hasBody: true }, args),
+      // POST /github/repos/upload — rank: any-builder — POST /github/repos/upload
+      postGithubReposUpload: (args) => request("POST", "/github/repos/upload", { hasBody: true }, args),
     },
     "goalTaskRelevance": {
       // POST /goal-task-relevance/{id}/decide — rank: metic+archon — POST /goal-task-relevance/:id/decide
@@ -1317,6 +1325,12 @@ function createClient(opts = {}) {
       postProvisioningInstancesIdGithubApp: (args) => request("POST", "/provisioning/instances/{id}/github-app", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/github-app/pick-up — rank: any-builder — POST /provisioning/instances/:id/github-app/pick-up
       postProvisioningInstancesIdGithubAppPickUp: (args) => request("POST", "/provisioning/instances/{id}/github-app/pick-up", { hasBody: true }, args),
+      // GET /provisioning/instances/{id}/grants — rank: any-builder — GET /provisioning/instances/:id/grants
+      getProvisioningInstancesIdGrants: (args) => request("GET", "/provisioning/instances/{id}/grants", { hasBody: false }, args),
+      // POST /provisioning/instances/{id}/grants — rank: any-builder — POST /provisioning/instances/:id/grants
+      postProvisioningInstancesIdGrants: (args) => request("POST", "/provisioning/instances/{id}/grants", { hasBody: true }, args),
+      // DELETE /provisioning/instances/{id}/grants/{grantId} — rank: any-builder — DELETE /provisioning/instances/:id/grants/:grantId
+      deleteProvisioningInstancesIdGrantsGrantId: (args) => request("DELETE", "/provisioning/instances/{id}/grants/{grantId}", { hasBody: false }, args),
       // GET /provisioning/instances/{id}/invite-suggestions — rank: any-builder — GET /provisioning/instances/:id/invite-suggestions
       getProvisioningInstancesIdInviteSuggestions: (args) => request("GET", "/provisioning/instances/{id}/invite-suggestions", { hasBody: false }, args),
       // DELETE /provisioning/instances/{id}/logo — rank: any-builder — DELETE /provisioning/instances/:id/logo
@@ -1331,6 +1345,10 @@ function createClient(opts = {}) {
       getProvisioningInstancesIdRender: (args) => request("GET", "/provisioning/instances/{id}/render", { hasBody: false }, args),
       // POST /provisioning/instances/{id}/render — rank: any-builder — POST /provisioning/instances/:id/render
       postProvisioningInstancesIdRender: (args) => request("POST", "/provisioning/instances/{id}/render", { hasBody: true }, args),
+      // POST /provisioning/instances/{id}/render/promote — rank: any-builder — POST /provisioning/instances/:id/render/promote
+      postProvisioningInstancesIdRenderPromote: (args) => request("POST", "/provisioning/instances/{id}/render/promote", { hasBody: true }, args),
+      // POST /provisioning/instances/{id}/render/promote/look — rank: any-builder — POST /provisioning/instances/:id/render/promote/look
+      postProvisioningInstancesIdRenderPromoteLook: (args) => request("POST", "/provisioning/instances/{id}/render/promote/look", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/render/sandbox — rank: any-builder — POST /provisioning/instances/:id/render/sandbox
       postProvisioningInstancesIdRenderSandbox: (args) => request("POST", "/provisioning/instances/{id}/render/sandbox", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/repo-private — rank: any-builder — POST /provisioning/instances/:id/repo-private

package/clients/bongos-client/index.cjs

@@ -496,8 +496,14 @@ function createClient(opts = {}) {
       getFoundingContext: (args) => request("GET", "/founding/context", { hasBody: false }, args),
       // PUT /founding/enabled — rank: any-builder — PUT /founding/enabled
       putFoundingEnabled: (args) => request("PUT", "/founding/enabled", { hasBody: true }, args),
+      // GET /founding/facts — rank: any-builder — GET /founding/facts
+      getFoundingFacts: (args) => request("GET", "/founding/facts", { hasBody: false }, args),
+      // PUT /founding/facts — rank: any-builder — PUT /founding/facts
+      putFoundingFacts: (args) => request("PUT", "/founding/facts", { hasBody: true }, args),
       // GET /founding/genesis — rank: any-builder — GET /founding/genesis
       getFoundingGenesis: (args) => request("GET", "/founding/genesis", { hasBody: false }, args),
+      // GET /founding/legalize/options — rank: any-builder — GET /founding/legalize/options
+      getFoundingLegalizeOptions: (args) => request("GET", "/founding/legalize/options", { hasBody: false }, args),
       // POST /founding/plan — rank: any-builder — POST /founding/plan
       postFoundingPlan: (args) => request("POST", "/founding/plan", { hasBody: true }, args),
       // POST /founding/skip — rank: any-builder — POST /founding/skip
@@ -562,6 +568,8 @@ function createClient(opts = {}) {
       getGithubRepos: (args) => request("GET", "/github/repos", { hasBody: false }, args),
       // POST /github/repos — rank: any-builder — POST /github/repos
       postGithubRepos: (args) => request("POST", "/github/repos", { hasBody: true }, args),
+      // POST /github/repos/upload — rank: any-builder — POST /github/repos/upload
+      postGithubReposUpload: (args) => request("POST", "/github/repos/upload", { hasBody: true }, args),
     },
     "goalTaskRelevance": {
       // POST /goal-task-relevance/{id}/decide — rank: metic+archon — POST /goal-task-relevance/:id/decide
@@ -1316,6 +1324,12 @@ function createClient(opts = {}) {
       postProvisioningInstancesIdGithubApp: (args) => request("POST", "/provisioning/instances/{id}/github-app", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/github-app/pick-up — rank: any-builder — POST /provisioning/instances/:id/github-app/pick-up
       postProvisioningInstancesIdGithubAppPickUp: (args) => request("POST", "/provisioning/instances/{id}/github-app/pick-up", { hasBody: true }, args),
+      // GET /provisioning/instances/{id}/grants — rank: any-builder — GET /provisioning/instances/:id/grants
+      getProvisioningInstancesIdGrants: (args) => request("GET", "/provisioning/instances/{id}/grants", { hasBody: false }, args),
+      // POST /provisioning/instances/{id}/grants — rank: any-builder — POST /provisioning/instances/:id/grants
+      postProvisioningInstancesIdGrants: (args) => request("POST", "/provisioning/instances/{id}/grants", { hasBody: true }, args),
+      // DELETE /provisioning/instances/{id}/grants/{grantId} — rank: any-builder — DELETE /provisioning/instances/:id/grants/:grantId
+      deleteProvisioningInstancesIdGrantsGrantId: (args) => request("DELETE", "/provisioning/instances/{id}/grants/{grantId}", { hasBody: false }, args),
       // GET /provisioning/instances/{id}/invite-suggestions — rank: any-builder — GET /provisioning/instances/:id/invite-suggestions
       getProvisioningInstancesIdInviteSuggestions: (args) => request("GET", "/provisioning/instances/{id}/invite-suggestions", { hasBody: false }, args),
       // DELETE /provisioning/instances/{id}/logo — rank: any-builder — DELETE /provisioning/instances/:id/logo
@@ -1330,6 +1344,10 @@ function createClient(opts = {}) {
       getProvisioningInstancesIdRender: (args) => request("GET", "/provisioning/instances/{id}/render", { hasBody: false }, args),
       // POST /provisioning/instances/{id}/render — rank: any-builder — POST /provisioning/instances/:id/render
       postProvisioningInstancesIdRender: (args) => request("POST", "/provisioning/instances/{id}/render", { hasBody: true }, args),
+      // POST /provisioning/instances/{id}/render/promote — rank: any-builder — POST /provisioning/instances/:id/render/promote
+      postProvisioningInstancesIdRenderPromote: (args) => request("POST", "/provisioning/instances/{id}/render/promote", { hasBody: true }, args),
+      // POST /provisioning/instances/{id}/render/promote/look — rank: any-builder — POST /provisioning/instances/:id/render/promote/look
+      postProvisioningInstancesIdRenderPromoteLook: (args) => request("POST", "/provisioning/instances/{id}/render/promote/look", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/render/sandbox — rank: any-builder — POST /provisioning/instances/:id/render/sandbox
       postProvisioningInstancesIdRenderSandbox: (args) => request("POST", "/provisioning/instances/{id}/render/sandbox", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/repo-private — rank: any-builder — POST /provisioning/instances/:id/repo-private

package/clients/bongos-client/index.d.ts

@@ -24,6 +24,7 @@ export interface DeleteMeSignInMethodsProviderResponse { ok: boolean }
 export interface DeleteMemoryFileResponse { deleted: boolean; builder_id: unknown; path: unknown }
 export interface DeleteNotesIdResponse { ok: boolean }
 export interface DeleteProvisioningInstancesIdEnvManifestVarIdResponse { ok: boolean; removed: boolean; message: unknown }
+export interface DeleteProvisioningInstancesIdGrantsGrantIdResponse { ok: boolean; revoked: boolean }
 export interface DeleteSpecialitiesIdDocumentsDocIdResponse { ok: boolean }
 export interface DeleteTasksIdCriteriaCriterionIdResponse { ok: boolean; removed: unknown }
 export interface DeleteTasksIdDependenciesDepIdResponse { ok: boolean; removed: unknown }
@@ -164,10 +165,10 @@ export interface GetProvisioningGithubAppResumeResponse { ok: boolean; project:
 export interface GetProvisioningGithubAppStatusResponse { ok: boolean; status: unknown; failure: unknown; ready: unknown; terminal: unknown; domain: unknown; instance_status: unknown; app_slug: unknown; checklist: unknown; install_url: unknown; repo: unknown; verifying: unknown; app_org: unknown; pick_up: unknown }
 export interface GetProvisioningHealthResponse { module: unknown; ok: boolean; coreVersion: unknown }
 export interface GetProvisioningInstancesIdEnvManifestResponse { instance: unknown; env_vars: unknown; environments: unknown; values_held: boolean; note: unknown }
+export interface GetProvisioningInstancesIdGrantsResponse { grants: unknown; levels: unknown; limit: unknown }
 export interface GetProvisioningInstancesIdInviteSuggestionsResponse { suggested: unknown; seeking: unknown; reason: unknown; unavailable?: unknown }
 export interface GetProvisioningInstancesIdLookResponse { ok: boolean; look: unknown; options: unknown; logo_max_bytes: unknown }
-export interface GetProvisioningInstancesIdRenderResponse { ok: boolean; app: unknown; sandbox: unknown; env_vars: unknown; values_held: boolean }
-export interface GetProvisioningInstancesIdResponse { instance: unknown; open_intent: unknown; github_app: unknown; github_setup: unknown }
+export interface GetProvisioningInstancesIdRenderResponse { ok: boolean; app: unknown; sandbox: unknown; promote: unknown; env_vars: unknown; values_held: boolean }
 export interface GetProvisioningInstancesIdSettingsResponse { ok: boolean; settings: unknown; planet: unknown; options: unknown }
 export interface GetProvisioningInstancesResponse { instances: unknown }
 export interface GetProvisioningOnboardPlanResponse { mode: unknown; steps: unknown }
@@ -406,6 +407,8 @@ export interface PostGithubRepoVisibilityRequest { repo: string; visibility: "pu
 export interface PostGithubRepoVisibilityResponse { ok: boolean; repo: unknown; private_deployable: boolean }
 export interface PostGithubReposRequest { name: string; org?: string }
 export interface PostGithubReposResponse { repo: unknown }
+export interface PostGithubReposUploadRequest { name?: string; org?: string; into?: string; files?: unknown[] }
+export interface PostGithubReposUploadResponse { repo: unknown; uploaded: unknown }
 export interface PostGoalTaskRelevanceIdDecideRequest { decision: "confirmed_gaming" | "false_positive"; note?: string }
 export interface PostGoalTaskRelevanceIdDecideResponse { ok: boolean; flag: unknown }
 export interface PostGoalsIdArchiveRequest { reason?: string; dispositions?: Record<string, unknown> }
@@ -446,19 +449,19 @@ export interface PostGovernmentAsksMatterIdUnclearRequest { note?: string }
 export interface PostGovernmentAsksMatterIdUnclearResponse { ok: boolean; matter_id: unknown; flag: unknown }
 export interface PostGovernmentAssignmentsRequest { builder_id: number; rank_key: string }
 export interface PostGovernmentBoardCharterRequest { form?: string; franchise?: string; council_rank?: string; pass_rule?: string; window_minutes?: unknown; rationale_md?: string; acknowledge_self_removal?: boolean }
-export interface PostGovernmentBoardCharterResponse { ok: boolean; amendment: unknown; item: unknown; reads_as: unknown }
+export interface PostGovernmentBoardCharterResponse { ok: boolean; amendment: unknown; item: unknown; reads_as: unknown; what_happens_next: unknown; decided: unknown }
 export interface PostGovernmentBoardDecisionRulesRequest { rules: unknown[]; rationale_md?: string }
-export interface PostGovernmentBoardDecisionRulesResponse { ok: boolean; amendment: unknown; item: unknown; rules: unknown }
+export interface PostGovernmentBoardDecisionRulesResponse { ok: boolean; amendment: unknown; item: unknown; rules: unknown; decided: unknown }
 export interface PostGovernmentBoardItemsItemIdVotesRequest { direction: string; reason_md?: string; section_key?: string }
 export interface PostGovernmentBoardItemsItemIdWithdrawResponse { ok: boolean; item_closed: boolean; outcome: unknown; item: unknown }
 export interface PostGovernmentBoardItemsRequest { subject_type: string; proposal: Record<string, unknown>; rationale_md?: string; acknowledge_self_removal?: boolean }
-export interface PostGovernmentBoardItemsResponse { ok: boolean; amendment: unknown; item: unknown }
+export interface PostGovernmentBoardItemsResponse { ok: boolean; amendment: unknown; item: unknown; decided: unknown }
 export interface PostGovernmentBoardLawsRequest { enact?: unknown[]; repeal?: unknown[]; rationale_md?: string }
-export interface PostGovernmentBoardLawsResponse { ok: boolean; amendment: unknown; item: unknown; proposal: unknown }
+export interface PostGovernmentBoardLawsResponse { ok: boolean; amendment: unknown; item: unknown; proposal: unknown; decided: unknown }
 export interface PostGovernmentBoardMattersRequest { area: string; title: string; detail_md?: string; action?: Record<string, unknown> }
 export interface PostGovernmentBoardMattersResponse { ok: boolean; matter: unknown; item: unknown; decided: unknown }
 export interface PostGovernmentBoardPresetsRequest { preset: string }
-export interface PostGovernmentBoardPresetsResponse { ok: boolean; preset: unknown; amendment: unknown; item: unknown; proposal: unknown }
+export interface PostGovernmentBoardPresetsResponse { ok: boolean; preset: unknown; amendment: unknown; item: unknown; proposal: unknown; decided: unknown }
 export interface PostGovernmentBuildoutsRequest { building: string; capsule: string; name?: string; line?: string }
 export interface PostGovernmentBuildoutsResponse { ok: boolean; path: unknown; buildout?: unknown; rights: unknown; matter?: unknown; item?: unknown; decided?: unknown }
 export interface PostGovernmentRankSetsApplyRequest { type?: string; headcount: number }
@@ -611,6 +614,10 @@ export interface PostProvisioningInstancesIdEnvManifestRequest { name: string; d
 export interface PostProvisioningInstancesIdForceTeardownResponse { ok: boolean; queued: unknown; action: unknown; status: unknown; superseded: unknown; message: unknown }
 export interface PostProvisioningInstancesIdGithubAppRequest { account?: string; org?: string }
 export interface PostProvisioningInstancesIdGithubAppResponse { state: unknown; account: unknown; post_url: unknown; personal_url: unknown; org_url: unknown; org_login: unknown; manifest: unknown; redirect_url: unknown; expires_at: unknown }
+export interface PostProvisioningInstancesIdGrantsRequest { github_login: string }
+export interface PostProvisioningInstancesIdRenderPromoteLookRequest { key: string }
+export interface PostProvisioningInstancesIdRenderPromoteRequest { key: string; commit_id: string; expect_live_commit?: string }
+export interface PostProvisioningInstancesIdRenderPromoteResponse { ok: boolean; queued: boolean; action: unknown; message: unknown }
 export interface PostProvisioningInstancesIdRenderRequest { key: string; owner_id: string; mode: string; service_id?: string; web_plan?: string; db_plan?: string; region?: string; runtime?: string; build_command?: string; start_command?: string; database?: boolean }
 export interface PostProvisioningInstancesIdRenderResponse { ok: boolean; queued: boolean; action: unknown; mode: unknown; with_setup: boolean; message: unknown }
 export interface PostProvisioningInstancesIdRenderSandboxRequest { key: string }
@@ -736,6 +743,7 @@ export interface PutCopyDeskPagesPageIdDraftResponse { ok: boolean; outcome: unk
 export interface PutDoneWhenCriterionIdBackendOnlyRequest { backend_only: boolean }
 export interface PutDoneWhenCriterionIdBackendOnlyResponse { ok: boolean; criterion_id: unknown; backend_only: unknown }
 export interface PutFoundingEnabledRequest { enabled?: boolean }
+export interface PutFoundingFactsRequest { facts: Record<string, unknown> }
 export interface PutFoundingWorkStageAnswersQuestionRequest { state?: string; text?: string; origin?: string; if_empty?: boolean }
 export interface PutFoundingWorkStageDoorRequest { door: string }
 export interface PutFoundingWorkStageLinkRequest { url?: string }
@@ -1189,8 +1197,14 @@ export interface BongosClient {
     getFoundingContext(args?: RequestArgs): Promise<ApiResponse>;
     /** PUT /founding/enabled — rank: any-builder */
     putFoundingEnabled(args?: RequestArgs & { body?: PutFoundingEnabledRequest }): Promise<ApiResponse>;
+    /** GET /founding/facts — rank: any-builder */
+    getFoundingFacts(args?: RequestArgs): Promise<ApiResponse>;
+    /** PUT /founding/facts — rank: any-builder */
+    putFoundingFacts(args: RequestArgs & { body: PutFoundingFactsRequest }): Promise<ApiResponse>;
     /** GET /founding/genesis — rank: any-builder */
     getFoundingGenesis(args?: RequestArgs): Promise<ApiResponse>;
+    /** GET /founding/legalize/options — rank: any-builder */
+    getFoundingLegalizeOptions(args?: RequestArgs): Promise<ApiResponse>;
     /** POST /founding/plan — rank: any-builder */
     postFoundingPlan(args?: RequestArgs & { body?: PostFoundingPlanRequest }): Promise<ApiResponse>;
     /** POST /founding/skip — rank: any-builder */
@@ -1255,6 +1269,8 @@ export interface BongosClient {
     getGithubRepos(args?: RequestArgs): Promise<GetGithubReposResponse>;
     /** POST /github/repos — rank: any-builder */
     postGithubRepos(args: RequestArgs & { body: PostGithubReposRequest }): Promise<PostGithubReposResponse>;
+    /** POST /github/repos/upload — rank: any-builder */
+    postGithubReposUpload(args?: RequestArgs & { body?: PostGithubReposUploadRequest }): Promise<PostGithubReposUploadResponse>;
   };
   "goalTaskRelevance": {
     /** POST /goal-task-relevance/{id}/decide — rank: metic+archon */
@@ -1982,7 +1998,7 @@ export interface BongosClient {
     /** POST /provisioning/instances — rank: any-builder */
     postProvisioningInstances(args: RequestArgs & { body: PostProvisioningInstancesRequest }): Promise<ApiResponse>;
     /** GET /provisioning/instances/{id} — rank: any-builder */
-    getProvisioningInstancesId(args?: RequestArgs): Promise<GetProvisioningInstancesIdResponse>;
+    getProvisioningInstancesId(args?: RequestArgs): Promise<ApiResponse>;
     /** GET /provisioning/instances/{id}/core-upgrade — rank: archon */
     getProvisioningInstancesIdCoreUpgrade(args?: RequestArgs): Promise<ApiResponse>;
     /** POST /provisioning/instances/{id}/core-upgrade — rank: archon */
@@ -2009,6 +2025,12 @@ export interface BongosClient {
     postProvisioningInstancesIdGithubApp(args?: RequestArgs & { body?: PostProvisioningInstancesIdGithubAppRequest }): Promise<PostProvisioningInstancesIdGithubAppResponse>;
     /** POST /provisioning/instances/{id}/github-app/pick-up — rank: any-builder */
     postProvisioningInstancesIdGithubAppPickUp(args?: RequestArgs): Promise<ApiResponse>;
+    /** GET /provisioning/instances/{id}/grants — rank: any-builder */
+    getProvisioningInstancesIdGrants(args?: RequestArgs): Promise<GetProvisioningInstancesIdGrantsResponse>;
+    /** POST /provisioning/instances/{id}/grants — rank: any-builder */
+    postProvisioningInstancesIdGrants(args: RequestArgs & { body: PostProvisioningInstancesIdGrantsRequest }): Promise<ApiResponse>;
+    /** DELETE /provisioning/instances/{id}/grants/{grantId} — rank: any-builder */
+    deleteProvisioningInstancesIdGrantsGrantId(args?: RequestArgs): Promise<DeleteProvisioningInstancesIdGrantsGrantIdResponse>;
     /** GET /provisioning/instances/{id}/invite-suggestions — rank: any-builder */
     getProvisioningInstancesIdInviteSuggestions(args?: RequestArgs): Promise<GetProvisioningInstancesIdInviteSuggestionsResponse>;
     /** DELETE /provisioning/instances/{id}/logo — rank: any-builder */
@@ -2023,6 +2045,10 @@ export interface BongosClient {
     getProvisioningInstancesIdRender(args?: RequestArgs): Promise<GetProvisioningInstancesIdRenderResponse>;
     /** POST /provisioning/instances/{id}/render — rank: any-builder */
     postProvisioningInstancesIdRender(args: RequestArgs & { body: PostProvisioningInstancesIdRenderRequest }): Promise<PostProvisioningInstancesIdRenderResponse>;
+    /** POST /provisioning/instances/{id}/render/promote — rank: any-builder */
+    postProvisioningInstancesIdRenderPromote(args: RequestArgs & { body: PostProvisioningInstancesIdRenderPromoteRequest }): Promise<PostProvisioningInstancesIdRenderPromoteResponse>;
+    /** POST /provisioning/instances/{id}/render/promote/look — rank: any-builder */
+    postProvisioningInstancesIdRenderPromoteLook(args: RequestArgs & { body: PostProvisioningInstancesIdRenderPromoteLookRequest }): Promise<ApiResponse>;
     /** POST /provisioning/instances/{id}/render/sandbox — rank: any-builder */
     postProvisioningInstancesIdRenderSandbox(args: RequestArgs & { body: PostProvisioningInstancesIdRenderSandboxRequest }): Promise<PostProvisioningInstancesIdRenderSandboxResponse>;
     /** POST /provisioning/instances/{id}/repo-private — rank: any-builder */

package/clients/bongos-client/index.mjs

@@ -493,8 +493,14 @@ export function createClient(opts = {}) {
       getFoundingContext: (args) => request("GET", "/founding/context", { hasBody: false }, args),
       // PUT /founding/enabled — rank: any-builder — PUT /founding/enabled
       putFoundingEnabled: (args) => request("PUT", "/founding/enabled", { hasBody: true }, args),
+      // GET /founding/facts — rank: any-builder — GET /founding/facts
+      getFoundingFacts: (args) => request("GET", "/founding/facts", { hasBody: false }, args),
+      // PUT /founding/facts — rank: any-builder — PUT /founding/facts
+      putFoundingFacts: (args) => request("PUT", "/founding/facts", { hasBody: true }, args),
       // GET /founding/genesis — rank: any-builder — GET /founding/genesis
       getFoundingGenesis: (args) => request("GET", "/founding/genesis", { hasBody: false }, args),
+      // GET /founding/legalize/options — rank: any-builder — GET /founding/legalize/options
+      getFoundingLegalizeOptions: (args) => request("GET", "/founding/legalize/options", { hasBody: false }, args),
       // POST /founding/plan — rank: any-builder — POST /founding/plan
       postFoundingPlan: (args) => request("POST", "/founding/plan", { hasBody: true }, args),
       // POST /founding/skip — rank: any-builder — POST /founding/skip
@@ -559,6 +565,8 @@ export function createClient(opts = {}) {
       getGithubRepos: (args) => request("GET", "/github/repos", { hasBody: false }, args),
       // POST /github/repos — rank: any-builder — POST /github/repos
       postGithubRepos: (args) => request("POST", "/github/repos", { hasBody: true }, args),
+      // POST /github/repos/upload — rank: any-builder — POST /github/repos/upload
+      postGithubReposUpload: (args) => request("POST", "/github/repos/upload", { hasBody: true }, args),
     },
     "goalTaskRelevance": {
       // POST /goal-task-relevance/{id}/decide — rank: metic+archon — POST /goal-task-relevance/:id/decide
@@ -1313,6 +1321,12 @@ export function createClient(opts = {}) {
       postProvisioningInstancesIdGithubApp: (args) => request("POST", "/provisioning/instances/{id}/github-app", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/github-app/pick-up — rank: any-builder — POST /provisioning/instances/:id/github-app/pick-up
       postProvisioningInstancesIdGithubAppPickUp: (args) => request("POST", "/provisioning/instances/{id}/github-app/pick-up", { hasBody: true }, args),
+      // GET /provisioning/instances/{id}/grants — rank: any-builder — GET /provisioning/instances/:id/grants
+      getProvisioningInstancesIdGrants: (args) => request("GET", "/provisioning/instances/{id}/grants", { hasBody: false }, args),
+      // POST /provisioning/instances/{id}/grants — rank: any-builder — POST /provisioning/instances/:id/grants
+      postProvisioningInstancesIdGrants: (args) => request("POST", "/provisioning/instances/{id}/grants", { hasBody: true }, args),
+      // DELETE /provisioning/instances/{id}/grants/{grantId} — rank: any-builder — DELETE /provisioning/instances/:id/grants/:grantId
+      deleteProvisioningInstancesIdGrantsGrantId: (args) => request("DELETE", "/provisioning/instances/{id}/grants/{grantId}", { hasBody: false }, args),
       // GET /provisioning/instances/{id}/invite-suggestions — rank: any-builder — GET /provisioning/instances/:id/invite-suggestions
       getProvisioningInstancesIdInviteSuggestions: (args) => request("GET", "/provisioning/instances/{id}/invite-suggestions", { hasBody: false }, args),
       // DELETE /provisioning/instances/{id}/logo — rank: any-builder — DELETE /provisioning/instances/:id/logo
@@ -1327,6 +1341,10 @@ export function createClient(opts = {}) {
       getProvisioningInstancesIdRender: (args) => request("GET", "/provisioning/instances/{id}/render", { hasBody: false }, args),
       // POST /provisioning/instances/{id}/render — rank: any-builder — POST /provisioning/instances/:id/render
       postProvisioningInstancesIdRender: (args) => request("POST", "/provisioning/instances/{id}/render", { hasBody: true }, args),
+      // POST /provisioning/instances/{id}/render/promote — rank: any-builder — POST /provisioning/instances/:id/render/promote
+      postProvisioningInstancesIdRenderPromote: (args) => request("POST", "/provisioning/instances/{id}/render/promote", { hasBody: true }, args),
+      // POST /provisioning/instances/{id}/render/promote/look — rank: any-builder — POST /provisioning/instances/:id/render/promote/look
+      postProvisioningInstancesIdRenderPromoteLook: (args) => request("POST", "/provisioning/instances/{id}/render/promote/look", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/render/sandbox — rank: any-builder — POST /provisioning/instances/:id/render/sandbox
       postProvisioningInstancesIdRenderSandbox: (args) => request("POST", "/provisioning/instances/{id}/render/sandbox", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/repo-private — rank: any-builder — POST /provisioning/instances/:id/repo-private

package/docs/adr/0406-every-project-gets-a-sandbox-that-follows-main-and-live-moves-only-when-a-person-promotes.md

@@ -114,3 +114,21 @@ Each sibling task's description now opens with a dated note, *"Re-read against A
 - **The live service's switch to manual deploys is left to the promote task** ([task 1005290](https://cloudbongos.com/builders#/task/1005290)), so that live never stops updating before there is a button that moves it.
 - **Teardown needs the owner's key to remove the sandbox**, typed on the teardown screen and used once. The Render client gains one delete, `deleteSandboxService`, which refuses anything not named `…-sandbox` on the free plan. Without the key the sandbox stays on the owner's account and the owner is told exactly what to remove.
 
+## 11. Amendment — how promotion was built (2026-11-13, [task 1005290](https://cloudbongos.com/builders#/task/1005290))
+
+- **Where the owner promotes:** the project's own page on the hub, under the sandbox — where the sandbox's address and state already are. Not the hall's deploy page (`modules/render-deploy`): that module is never turned on in a project's hall today, so a promote button there would be unreachable.
+- **Who may promote: the project's owner, decided on the server** (`POST /provisioning/instances/:id/render/promote`). The key and the live app are the owner's, so an archon on someone else's project gets the same 404 as a stranger — the rule every Render route here already follows (ADR 0327).
+- **What waits, and the read it takes.** The owner sees the change the live app runs and every change that has run on the sandbox since, newest first. Reading that needs Render, so **ADR 0348's read-only exception is widened by exactly one look**: `lookupPromotion` in `modules/provisioning/render-lookup.js` may GET the project's two recorded services (live and sandbox) and their deploy lists, on the owner's key held for that one request. GET only, every service asserted to carry the project's workspace, nothing stored or returned.
+- **The press** queues a `render-promote` intent holding the owner's encrypted key (the borrowed-key rule, ADR 0327 §2). The runner (`scripts/bongos/provision-render-promote.js`) checks the change ran on the sandbox and that live still runs what the owner was shown, **writes the promotion to `provisioning_promotions` before sending anything**, switches the live service to manual deploys, and asks Render to deploy exactly that commit (`triggerDeploy` now takes a `commitId`).
+- **When the live app stops following `main`.** As soon as its sandbox is running (the sandbox setup switches it), and again on every promotion. Not before: a project whose sandbox failed keeps deploying every merge, so finished work always has somewhere to land.
+- **Ship mode is untouched.** No ship, in Auto or Manual mode, reaches the promote leg; landing reaches the sandbox only.
+- **What this cannot stop, said plainly.** The owner can still deploy the live service from Render's own dashboard, or turn its automatic deploys back on there. Bongos does not see or record those. "Nothing reaches the main site without a recorded promotion" holds for everything Bongos does, not for what the owner does in Render directly.
+
+## 12. Amendment — the sandbox's safety, as built (2026-11-13, [task 1005291](https://cloudbongos.com/builders#/task/1005291))
+
+- **Fake by default, by construction.** The sandbox service is created with only `BONGOS_SANDBOX=1` and its own `DATABASE_URL`; none of the live app's keys are copied to it. A sandbox the owner has not touched holds no real key, so nothing it does can reach a real customer. Test keys and test data are added by the owner or seeded by the app (`isSandbox()`).
+- **The gate ships in the core package** as `@bongos/core/sandbox` (`src/sandbox/`). One line at the top of a Node app — `require('@bongos/core/sandbox').install()` — does nothing on the live site and, under `BONGOS_SANDBOX=1`, puts the gate in front of `fetch`, `http` and `https`. For each known provider (payments, email, messaging, code hosting and a few data services) a read passes; a send, a charge or a write is refused, never sent, written to the log as `[bongos-sandbox] refused …` (Render shows it), and kept for the owner. A Stripe **test-mode** key is let through, since it cannot move real money.
+- **Visibly a sandbox.** `sandbox.middleware` puts a fixed "Sandbox" band on every HTML page and serves `/__bongos/sandbox`, which tells anyone what a sandbox is and what the gate cannot catch. The refusals and which real keys are lent (by variable name, never value) show only to a visitor carrying the sandbox's page key — a random value the platform sets on the sandbox (`BONGOS_SANDBOX_PAGE_KEY`) and keeps on the project's row, so only the owner's project page links with it. A passer-by on the sandbox's public address learns nothing about the owner's keys.
+- **The starter says how.** The scaffold's README (`bongos init`) carries the one line, and the advice to lend a read-only key.
+- **What it cannot catch, said plainly — here, on the sandbox page, and on the project page.** Only calls the app makes through Node's own web requests, and only to providers in its table. Code that goes around them, an app not written in Node, or an unknown provider is not stopped. A read-only key is the floor; the gate is the second wall. The free plan also blocks outgoing email ports.
+

package/docs/adr/0407-a-project-grant-is-made-by-the-owner-not-witnessed-at-sign-in.md

@@ -31,7 +31,7 @@ So no value of `membership_kind` means "the owner trusts this person with the ho
 
 ### 1. The grant is its own row, in the provisioning module, with one writer
 
-A new table, `provisioning_project_grants` (migration `<redacted>.sql`, additive, in the module's own namespace):
+A new table, `provisioning_project_grants` (migration `provisioning_039_project_grants.sql`, additive, in the module's own namespace):
 
 | Column | Meaning |
 |---|---|
@@ -99,6 +99,8 @@ The word is documented as "has signed in here" (ADR 0328's amendment already say
 - **How the row is read.** Through a port, `platform-identity.projectMembershipKind` as ADR 0328 named it, and only after the gate has already refused. If the port is unregistered, throws, or answers an unknown value, the answer is the `404`: on doubt, say less. This read only picks the wording of a refusal and can never admit anyone.
 - **A grantee on a route without the opt-in** → `403 owner_only`, "Only the project's owner can do this." They already know the project exists.
 
+**As built (task 1004162), three refinements, none wider than the above:** (1) a `member` or `owner` row on a **private or stealth** project gets the 404, not `project_access_required` — a `member` row comes from any device-flow sign-in, so it is no evidence a person may learn that a closed project's id is real; (2) a person with no row who **applied** inside the 30-day application window is told the owner decides (`project_membership_required`, `apply.state: 'applied'`); (3) a `pending` row is an invitation, so it is told to sign in to the project to accept. The routes that check ownership inline (look, demo, render, repo-private, the GitHub pick-up, core-upgrade) still answer the plain 404.
+
 ## Consequences
 
 - A team can share one hosted project's day-to-day running, once task 1004161 lands, without the owner handing over teardown, the address or their own accounts.