@bongos/core 1.25.20 → 1.25.22

package/docs/api/openapi.json

@@ -8125,6 +8125,77 @@
         ]
       }
     },
+    "/founding/facts": {
+      "get": {
+        "operationId": "get_founding_facts",
+        "tags": [
+          "founding"
+        ],
+        "summary": "GET /founding/facts",
+        "description": "The project's own facts and the legalize stage's options (task 1005129, ../project-facts.js): any builder reads them; the facts are the owner's to change, like every genesis write.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/onboarding/routes/genesis-work.js",
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      },
+      "put": {
+        "operationId": "put_founding_facts",
+        "tags": [
+          "founding"
+        ],
+        "summary": "PUT /founding/facts",
+        "description": "**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/onboarding/routes/genesis-work.js",
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PutFoundingFactsRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/founding/genesis": {
       "get": {
         "operationId": "get_founding_genesis",
@@ -8156,6 +8227,37 @@
         ]
       }
     },
+    "/founding/legalize/options": {
+      "get": {
+        "operationId": "get_founding_legalize_options",
+        "tags": [
+          "founding"
+        ],
+        "summary": "GET /founding/legalize/options",
+        "description": "**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/onboarding/routes/genesis-work.js",
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/founding/plan": {
       "post": {
         "operationId": "post_founding_plan",
@@ -9454,6 +9556,55 @@
         ]
       }
     },
+    "/github/repos/upload": {
+      "post": {
+        "operationId": "post_github_repos_upload",
+        "tags": [
+          "github"
+        ],
+        "summary": "POST /github/repos/upload",
+        "description": "create a project's repository FROM A FOLDER the person uploaded (task 1005282): papers, artwork or scaffolding, for someone with no repository. The whole upload is checked first (folder-upload.js: sizes, refused types, path safety), and a refusal comes back with each file's plain reason BEFORE the repo exists. Then the private repo is made exactly as POST /github/repos makes it, and the files go in as one commit on main, pushed with the caller's OWN token. The files are never read for meaning and never sent to an AI service. If the push fails after the repo was made, the same builder may retry into THAT repo (`into`), and no other.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "src/bongos/routes/github.js",
+        "requestBody": {
+          "required": false,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostGithubReposUploadRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostGithubReposUploadResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/goal-task-relevance/pending": {
       "get": {
         "operationId": "get_goal_task_relevance_pending",
@@ -24658,14 +24809,7 @@
         ],
         "responses": {
           "200": {
-            "description": "Success.",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/GetProvisioningInstancesIdResponse"
-                }
-              }
-            }
+            "description": "Success."
           },
           "400": {
             "$ref": "#/components/responses/BadRequest"
@@ -25433,6 +25577,173 @@
         ]
       }
     },
+    "/provisioning/instances/{id}/grants": {
+      "get": {
+        "operationId": "get_provisioning_instances_id_grants",
+        "tags": [
+          "provisioning"
+        ],
+        "summary": "GET /provisioning/instances/:id/grants",
+        "description": "GET /provisioning/instances/:id/grants — the project's live grants. rank: any authenticated builder, own resource (owner; archon may read any). 404 otherwise.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/provisioning/routes/grants.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetProvisioningInstancesIdGrantsResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      },
+      "post": {
+        "operationId": "post_provisioning_instances_id_grants",
+        "tags": [
+          "provisioning"
+        ],
+        "summary": "POST /provisioning/instances/:id/grants",
+        "description": "POST /provisioning/instances/:id/grants { github_login } — give a person access. rank: any authenticated builder, own resource, OWNER ONLY (no archon override). 404 for anyone else, so a stranger learns nothing about the id.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/provisioning/routes/grants.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostProvisioningInstancesIdGrantsRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/provisioning/instances/{id}/grants/{grantId}": {
+      "delete": {
+        "operationId": "delete_provisioning_instances_id_grants_grantId",
+        "tags": [
+          "provisioning"
+        ],
+        "summary": "DELETE /provisioning/instances/:id/grants/:grantId",
+        "description": "DELETE /provisioning/instances/:id/grants/:grantId — take access back. rank: any authenticated builder: the project's owner, an archon, or the grantee removing their OWN grant — decided in the handler, because \"whose grant is it\" is a fact of the row. Anyone else gets the same 404 a missing project gets.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/provisioning/routes/grants.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          },
+          {
+            "name": "grantId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `grantId`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/DeleteProvisioningInstancesIdGrantsGrantIdResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/provisioning/instances/{id}/invite-suggestions": {
       "get": {
         "operationId": "get_provisioning_instances_id_invite_suggestions",
@@ -25512,61 +25823,167 @@
             "application/json": {
               "schema": {
                 "$ref": "#/components/schemas/PutProvisioningInstancesIdLogoRequest"
-              }
-            }
-          },
-          "x-validated": true
-        },
-        "responses": {
-          "200": {
-            "description": "Success."
-          },
-          "400": {
-            "$ref": "#/components/responses/ValidationFailed"
-          },
-          "401": {
-            "$ref": "#/components/responses/Unauthorized"
-          },
-          "403": {
-            "$ref": "#/components/responses/Forbidden"
-          },
-          "404": {
-            "$ref": "#/components/responses/NotFound"
-          }
-        },
-        "security": [
-          {
-            "builderSession": []
-          }
-        ]
-      },
-      "delete": {
-        "operationId": "delete_provisioning_instances_id_logo",
-        "tags": [
-          "provisioning"
-        ],
-        "summary": "DELETE /provisioning/instances/:id/logo",
-        "description": "DELETE …/logo — rank: any authenticated builder (own resource; archon may change any).\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
-        "x-rank": "any-builder",
-        "x-source": "modules/provisioning/routes/look.js",
-        "parameters": [
-          {
-            "name": "id",
-            "in": "path",
-            "required": true,
-            "schema": {
-              "type": "string"
-            },
-            "description": "Path parameter `id`."
-          }
-        ],
-        "requestBody": {
-          "required": false,
-          "content": {
-            "application/json": {
-              "schema": {
-                "type": "object",
-                "additionalProperties": true
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      },
+      "delete": {
+        "operationId": "delete_provisioning_instances_id_logo",
+        "tags": [
+          "provisioning"
+        ],
+        "summary": "DELETE /provisioning/instances/:id/logo",
+        "description": "DELETE …/logo — rank: any authenticated builder (own resource; archon may change any).\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/provisioning/routes/look.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "requestBody": {
+          "required": false,
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "additionalProperties": true
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/provisioning/instances/{id}/look": {
+      "get": {
+        "operationId": "get_provisioning_instances_id_look",
+        "tags": [
+          "provisioning"
+        ],
+        "summary": "GET /provisioning/instances/:id/look",
+        "description": "GET — rank: any authenticated builder (own resource; archon may read any).\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/provisioning/routes/look.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetProvisioningInstancesIdLookResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      },
+      "patch": {
+        "operationId": "patch_provisioning_instances_id_look",
+        "tags": [
+          "provisioning"
+        ],
+        "summary": "PATCH /provisioning/instances/:id/look",
+        "description": "PATCH — rank: any authenticated builder (own resource; archon may change any). A custom look needs an accent, sent now or already stored; the stored one is the ADJUSTED colour, and `adjusted` in the reply says when it differs from what came in.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/provisioning/routes/look.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "requestBody": {
+          "required": false,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PatchProvisioningInstancesIdLookRequest"
               }
             }
           },
@@ -25596,16 +26013,16 @@
         ]
       }
     },
-    "/provisioning/instances/{id}/look": {
+    "/provisioning/instances/{id}/render": {
       "get": {
-        "operationId": "get_provisioning_instances_id_look",
+        "operationId": "get_provisioning_instances_id_render",
         "tags": [
           "provisioning"
         ],
-        "summary": "GET /provisioning/instances/:id/look",
-        "description": "GET — rank: any authenticated builder (own resource; archon may read any).\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "summary": "GET /provisioning/instances/:id/render",
+        "description": "GET /provisioning/instances/:id/render — rank: any authenticated builder, and OWNER ONLY, like the POST (task 1004353). Where the project's app setup on Render stands: the stage, the app's address, the Render links, a failure as one sentence with the answers a Retry re-sends, and the env var NAMES still to set there (task 1004062's manifest — never a value; this platform holds none). Read from the row alone: nothing here calls Render, and there is no key to hold. `app` is null when the project's app has no platform chosen.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
-        "x-source": "modules/provisioning/routes/look.js",
+        "x-source": "modules/provisioning/routes/render-standup.js",
         "parameters": [
           {
             "name": "id",
@@ -25623,7 +26040,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/GetProvisioningInstancesIdLookResponse"
+                  "$ref": "#/components/schemas/GetProvisioningInstancesIdRenderResponse"
                 }
               }
             }
@@ -25647,15 +26064,15 @@
           }
         ]
       },
-      "patch": {
-        "operationId": "patch_provisioning_instances_id_look",
+      "post": {
+        "operationId": "post_provisioning_instances_id_render",
         "tags": [
           "provisioning"
         ],
-        "summary": "PATCH /provisioning/instances/:id/look",
-        "description": "PATCH — rank: any authenticated builder (own resource; archon may change any). A custom look needs an accent, sent now or already stored; the stored one is the ADJUSTED colour, and `adjusted` in the reply says when it differs from what came in.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "summary": "POST /provisioning/instances/:id/render",
+        "description": "POST /provisioning/instances/:id/render — rank: any authenticated builder, and OWNER ONLY: the key is the owner's and so is the account it acts in, so an archon on someone else's project gets the same 404 as a stranger. The reply is a receipt; nothing has happened on Render when it is sent.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
-        "x-source": "modules/provisioning/routes/look.js",
+        "x-source": "modules/provisioning/routes/render-standup.js",
         "parameters": [
           {
             "name": "id",
@@ -25668,11 +26085,11 @@
           }
         ],
         "requestBody": {
-          "required": false,
+          "required": true,
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/PatchProvisioningInstancesIdLookRequest"
+                "$ref": "#/components/schemas/PostProvisioningInstancesIdRenderRequest"
               }
             }
           },
@@ -25680,7 +26097,14 @@
         },
         "responses": {
           "200": {
-            "description": "Success."
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostProvisioningInstancesIdRenderResponse"
+                }
+              }
+            }
           },
           "400": {
             "$ref": "#/components/responses/ValidationFailed"
@@ -25702,14 +26126,14 @@
         ]
       }
     },
-    "/provisioning/instances/{id}/render": {
-      "get": {
-        "operationId": "get_provisioning_instances_id_render",
+    "/provisioning/instances/{id}/render/promote": {
+      "post": {
+        "operationId": "post_provisioning_instances_id_render_promote",
         "tags": [
           "provisioning"
         ],
-        "summary": "GET /provisioning/instances/:id/render",
-        "description": "GET /provisioning/instances/:id/render — rank: any authenticated builder, and OWNER ONLY, like the POST (task 1004353). Where the project's app setup on Render stands: the stage, the app's address, the Render links, a failure as one sentence with the answers a Retry re-sends, and the env var NAMES still to set there (task 1004062's manifest — never a value; this platform holds none). Read from the row alone: nothing here calls Render, and there is no key to hold. `app` is null when the project's app has no platform chosen.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "summary": "POST /provisioning/instances/:id/render/promote",
+        "description": "POST /provisioning/instances/:id/render/promote — rank: any authenticated builder, and OWNER ONLY: the key and the live app are the owner's, so the server decides only the owner may move it (an archon on someone else's project gets the stranger's 404). Takes the change the owner chose (`commit_id`) and the change live ran when they looked (`expect_live_commit`); the runner refuses if either moved. This is the ONLY way Bongos moves a live app that has a sandbox, and the reply is a receipt: nothing is live yet.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
         "x-source": "modules/provisioning/routes/render-standup.js",
         "parameters": [
@@ -25723,19 +26147,30 @@
             "description": "Path parameter `id`."
           }
         ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostProvisioningInstancesIdRenderPromoteRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
         "responses": {
           "200": {
             "description": "Success.",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/GetProvisioningInstancesIdRenderResponse"
+                  "$ref": "#/components/schemas/PostProvisioningInstancesIdRenderPromoteResponse"
                 }
               }
             }
           },
           "400": {
-            "$ref": "#/components/responses/BadRequest"
+            "$ref": "#/components/responses/ValidationFailed"
           },
           "401": {
             "$ref": "#/components/responses/Unauthorized"
@@ -25752,14 +26187,16 @@
             "builderSession": []
           }
         ]
-      },
+      }
+    },
+    "/provisioning/instances/{id}/render/promote/look": {
       "post": {
-        "operationId": "post_provisioning_instances_id_render",
+        "operationId": "post_provisioning_instances_id_render_promote_look",
         "tags": [
           "provisioning"
         ],
-        "summary": "POST /provisioning/instances/:id/render",
-        "description": "POST /provisioning/instances/:id/render — rank: any authenticated builder, and OWNER ONLY: the key is the owner's and so is the account it acts in, so an archon on someone else's project gets the same 404 as a stranger. The reply is a receipt; nothing has happened on Render when it is sent.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "summary": "POST /provisioning/instances/:id/render/promote/look",
+        "description": "POST /provisioning/instances/:id/render/promote/look — rank: any authenticated builder, and OWNER ONLY. What is waiting on the sandbox to go live (ADR 0406 §2, task 1005290): the change the live app runs, and every change that has run on the sandbox since, newest first. A read-only look at Render on the owner's key held for this one request (ADR 0348 as widened by ADR 0406 §11): GET only, never stored, logged or sent back.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
         "x-source": "modules/provisioning/routes/render-standup.js",
         "parameters": [
@@ -25778,7 +26215,7 @@
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/PostProvisioningInstancesIdRenderRequest"
+                "$ref": "#/components/schemas/PostProvisioningInstancesIdRenderPromoteLookRequest"
               }
             }
           },
@@ -25786,14 +26223,7 @@
         },
         "responses": {
           "200": {
-            "description": "Success.",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/PostProvisioningInstancesIdRenderResponse"
-                }
-              }
-            }
+            "description": "Success."
           },
           "400": {
             "$ref": "#/components/responses/ValidationFailed"
@@ -34224,6 +34654,21 @@
           "message"
         ]
       },
+      "DeleteProvisioningInstancesIdGrantsGrantIdResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "revoked": {
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "ok",
+          "revoked"
+        ]
+      },
       "DeleteSpecialitiesIdDocumentsDocIdResponse": {
         "type": "object",
         "properties": {
@@ -36079,6 +36524,19 @@
           "note"
         ]
       },
+      "GetProvisioningInstancesIdGrantsResponse": {
+        "type": "object",
+        "properties": {
+          "grants": {},
+          "levels": {},
+          "limit": {}
+        },
+        "required": [
+          "grants",
+          "levels",
+          "limit"
+        ]
+      },
       "GetProvisioningInstancesIdInviteSuggestionsResponse": {
         "type": "object",
         "properties": {
@@ -36118,6 +36576,7 @@
           },
           "app": {},
           "sandbox": {},
+          "promote": {},
           "env_vars": {},
           "values_held": {
             "type": "boolean"
@@ -36127,25 +36586,11 @@
           "ok",
           "app",
           "sandbox",
+          "promote",
           "env_vars",
           "values_held"
         ]
       },
-      "GetProvisioningInstancesIdResponse": {
-        "type": "object",
-        "properties": {
-          "instance": {},
-          "open_intent": {},
-          "github_app": {},
-          "github_setup": {}
-        },
-        "required": [
-          "instance",
-          "open_intent",
-          "github_app",
-          "github_setup"
-        ]
-      },
       "GetProvisioningInstancesIdSettingsResponse": {
         "type": "object",
         "properties": {
@@ -39686,6 +40131,38 @@
           "repo"
         ]
       },
+      "PostGithubReposUploadRequest": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string",
+            "maxLength": 100
+          },
+          "org": {
+            "type": "string",
+            "maxLength": 39
+          },
+          "into": {
+            "type": "string",
+            "maxLength": 140
+          },
+          "files": {
+            "type": "array"
+          }
+        },
+        "additionalProperties": false
+      },
+      "PostGithubReposUploadResponse": {
+        "type": "object",
+        "properties": {
+          "repo": {},
+          "uploaded": {}
+        },
+        "required": [
+          "repo",
+          "uploaded"
+        ]
+      },
       "PostGoalTaskRelevanceIdDecideRequest": {
         "type": "object",
         "properties": {
@@ -40397,13 +40874,17 @@
           },
           "amendment": {},
           "item": {},
-          "reads_as": {}
+          "reads_as": {},
+          "what_happens_next": {},
+          "decided": {}
         },
         "required": [
           "ok",
           "amendment",
           "item",
-          "reads_as"
+          "reads_as",
+          "what_happens_next",
+          "decided"
         ]
       },
       "PostGovernmentBoardDecisionRulesRequest": {
@@ -40430,13 +40911,15 @@
           },
           "amendment": {},
           "item": {},
-          "rules": {}
+          "rules": {},
+          "decided": {}
         },
         "required": [
           "ok",
           "amendment",
           "item",
-          "rules"
+          "rules",
+          "decided"
         ]
       },
       "PostGovernmentBoardItemsItemIdVotesRequest": {
@@ -40510,12 +40993,14 @@
             "type": "boolean"
           },
           "amendment": {},
-          "item": {}
+          "item": {},
+          "decided": {}
         },
         "required": [
           "ok",
           "amendment",
-          "item"
+          "item",
+          "decided"
         ]
       },
       "PostGovernmentBoardLawsRequest": {
@@ -40542,13 +41027,15 @@
           },
           "amendment": {},
           "item": {},
-          "proposal": {}
+          "proposal": {},
+          "decided": {}
         },
         "required": [
           "ok",
           "amendment",
           "item",
-          "proposal"
+          "proposal",
+          "decided"
         ]
       },
       "PostGovernmentBoardMattersRequest": {
@@ -40615,14 +41102,16 @@
           "preset": {},
           "amendment": {},
           "item": {},
-          "proposal": {}
+          "proposal": {},
+          "decided": {}
         },
         "required": [
           "ok",
           "preset",
           "amendment",
           "item",
-          "proposal"
+          "proposal",
+          "decided"
         ]
       },
       "PostGovernmentBuildoutsRequest": {
@@ -42881,6 +43370,73 @@
           "expires_at"
         ]
       },
+      "PostProvisioningInstancesIdGrantsRequest": {
+        "type": "object",
+        "properties": {
+          "github_login": {
+            "type": "string",
+            "maxLength": 39
+          }
+        },
+        "required": [
+          "github_login"
+        ],
+        "additionalProperties": false
+      },
+      "PostProvisioningInstancesIdRenderPromoteLookRequest": {
+        "type": "object",
+        "properties": {
+          "key": {
+            "type": "string",
+            "maxLength": 200
+          }
+        },
+        "required": [
+          "key"
+        ],
+        "additionalProperties": false
+      },
+      "PostProvisioningInstancesIdRenderPromoteRequest": {
+        "type": "object",
+        "properties": {
+          "key": {
+            "type": "string",
+            "maxLength": 200
+          },
+          "commit_id": {
+            "type": "string",
+            "maxLength": 64
+          },
+          "expect_live_commit": {
+            "type": "string",
+            "maxLength": 64
+          }
+        },
+        "required": [
+          "key",
+          "commit_id"
+        ],
+        "additionalProperties": false
+      },
+      "PostProvisioningInstancesIdRenderPromoteResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "queued": {
+            "type": "boolean"
+          },
+          "action": {},
+          "message": {}
+        },
+        "required": [
+          "ok",
+          "queued",
+          "action",
+          "message"
+        ]
+      },
       "PostProvisioningInstancesIdRenderRequest": {
         "type": "object",
         "properties": {
@@ -45177,6 +45733,18 @@
         },
         "additionalProperties": false
       },
+      "PutFoundingFactsRequest": {
+        "type": "object",
+        "properties": {
+          "facts": {
+            "type": "object"
+          }
+        },
+        "required": [
+          "facts"
+        ],
+        "additionalProperties": false
+      },
       "PutFoundingWorkStageAnswersQuestionRequest": {
         "type": "object",
         "properties": {
@@ -45622,9 +46190,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 731,
-  "x-schema-count": 759,
+  "x-endpoint-count": 740,
+  "x-schema-count": 767,
   "x-undocumented-bodies": 12,
-  "x-response-schemas": 473,
+  "x-response-schemas": 476,
   "x-generated-by": "scripts/bongos/gen-api-docs.js"
 }