@bongos/core 1.17.3 → 1.18.3

package/docs/api/openapi.json

@@ -1,7 +1,7 @@
 {
   "openapi": "3.1.0",
   "info": {
-    "title": "Off the Boats — GDS API",
+    "title": "Cloud Bongos — GDS API",
     "version": "0.0.2",
     "license": {
       "name": "AGPL-3.0-or-later",
@@ -77,10 +77,6 @@
       "name": "cost",
       "description": "Endpoints under `/api/bongos/cost`."
     },
-    {
-      "name": "demo",
-      "description": "Endpoints under `/api/bongos/demo`."
-    },
     {
       "name": "dependencies",
       "description": "Endpoints under `/api/bongos/dependencies`."
@@ -97,6 +93,10 @@
       "name": "gate-approvals",
       "description": "Endpoints under `/api/bongos/gate-approvals`."
     },
+    {
+      "name": "github",
+      "description": "Endpoints under `/api/bongos/github`."
+    },
     {
       "name": "goals",
       "description": "Endpoints under `/api/bongos/goals`."
@@ -145,10 +145,18 @@
       "name": "modules",
       "description": "Endpoints under `/api/bongos/modules`."
     },
+    {
+      "name": "my-projects",
+      "description": "Endpoints under `/api/bongos/my-projects`."
+    },
     {
       "name": "override-requests",
       "description": "Endpoints under `/api/bongos/override-requests`."
     },
+    {
+      "name": "projects",
+      "description": "Endpoints under `/api/bongos/projects`."
+    },
     {
       "name": "provisioning",
       "description": "Endpoints under `/api/bongos/provisioning`."
@@ -157,6 +165,10 @@
       "name": "public",
       "description": "Endpoints under `/api/bongos/public`."
     },
+    {
+      "name": "scouting",
+      "description": "Endpoints under `/api/bongos/scouting`."
+    },
     {
       "name": "search",
       "description": "Endpoints under `/api/bongos/search`."
@@ -173,6 +185,10 @@
       "name": "sessions",
       "description": "Endpoints under `/api/bongos/sessions`."
     },
+    {
+      "name": "sso",
+      "description": "Endpoints under `/api/bongos/sso`."
+    },
     {
       "name": "tasks",
       "description": "Endpoints under `/api/bongos/tasks`."
@@ -666,6 +682,45 @@
         ]
       }
     },
+    "/auth/device/exchange": {
+      "post": {
+        "operationId": "post_auth_device_exchange",
+        "tags": [
+          "auth"
+        ],
+        "summary": "POST /auth/device/exchange",
+        "description": "POST /auth/device/exchange — CLI federation (ADR 0141 §1). The CLI ran the device flow against the HUB and got a hub-signed assertion; it presents it here. The instance verifies the Ed25519 signature OFFLINE against the provisioned hub public key (aud must equal this instance's client_id, unexpired), then runs the instance's OWN admission gate + upsertBuilder + createSession(source='cli') and returns the existing { token, builder }. Only reachable when auth.idp is set. rank: public — an auth-establishment endpoint; the hub-signed assertion IS the bearer and is cryptographically verified before any session is minted.\n\n**Rank:** `public` — No authentication — any caller.",
+        "x-rank": "public",
+        "x-source": "src/bongos/routes/auth.js",
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostAuthDeviceExchangeRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostAuthDeviceExchangeResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          }
+        },
+        "security": []
+      }
+    },
     "/auth/device/poll": {
       "post": {
         "operationId": "post_auth_device_poll",
@@ -3007,83 +3062,6 @@
         ]
       }
     },
-    "/demo/health": {
-      "get": {
-        "operationId": "get_demo_health",
-        "tags": [
-          "demo"
-        ],
-        "summary": "GET /demo/health",
-        "description": "READ — liveness + the core version this module was mounted against. No rank gate beyond the requireBuilder the loader composes around every module route. rank: public\n\n**Rank:** `public` — No authentication — any caller.",
-        "x-rank": "public",
-        "x-source": "modules/demo/routes/demo.js",
-        "responses": {
-          "200": {
-            "description": "Success.",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/GetDemoHealthResponse"
-                }
-              }
-            }
-          },
-          "400": {
-            "$ref": "#/components/responses/BadRequest"
-          }
-        },
-        "security": []
-      }
-    },
-    "/demo/ping": {
-      "post": {
-        "operationId": "post_demo_ping",
-        "tags": [
-          "demo"
-        ],
-        "summary": "POST /demo/ping",
-        "description": "WRITE — EVERY module write route MUST be rank-gated (the BV1.R44 fitness check reds the build on an ungated module write route). `requireRank('metic', 'archon')` is Metic-and-above (the route-rank classifier records it as metic+archon). This records a ping into the module's own namespaced table (demo_pings) via the doorway pool.\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).",
-        "x-rank": "metic+archon",
-        "x-source": "modules/demo/routes/demo.js",
-        "requestBody": {
-          "required": false,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/PostDemoPingRequest"
-              }
-            }
-          },
-          "x-validated": true
-        },
-        "responses": {
-          "200": {
-            "description": "Success.",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/PostDemoPingResponse"
-                }
-              }
-            }
-          },
-          "400": {
-            "$ref": "#/components/responses/ValidationFailed"
-          },
-          "401": {
-            "$ref": "#/components/responses/Unauthorized"
-          },
-          "403": {
-            "$ref": "#/components/responses/Forbidden"
-          }
-        },
-        "security": [
-          {
-            "builderSession": []
-          }
-        ]
-      }
-    },
     "/dependencies": {
       "post": {
         "operationId": "post_dependencies",
@@ -3470,6 +3448,91 @@
         ]
       }
     },
+    "/github/repos": {
+      "get": {
+        "operationId": "get_github_repos",
+        "tags": [
+          "github"
+        ],
+        "summary": "GET /github/repos",
+        "description": "acts only on the caller's OWN GitHub identity (the token they granted). No rank gate beyond being a signed-in builder.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "src/bongos/routes/github.js",
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetGithubReposResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      },
+      "post": {
+        "operationId": "post_github_repos",
+        "tags": [
+          "github"
+        ],
+        "summary": "POST /github/repos",
+        "description": "creates a repo in the caller's OWN account.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "src/bongos/routes/github.js",
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostGithubReposRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostGithubReposResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/goals": {
       "get": {
         "operationId": "get_goals",
@@ -5475,22 +5538,40 @@
         ]
       }
     },
-    "/me/art-key": {
-      "get": {
-        "operationId": "get_me_art_key",
+    "/me/disciplines": {
+      "patch": {
+        "operationId": "patch_me_disciplines",
         "tags": [
           "me"
         ],
-        "summary": "GET /me/art-key",
-        "description": "Shared art key for newcomers (task 1281 / ADR 0068). Hands a SHARED Google AI Studio (Gemini) key to rank=xenos builders so their first art task works without their own key — we pay up front. The session-start sync (scripts/gds/fetch-art-key.js) calls this and writes/removes the local shared_gemini_api_key slot from the response. Thetes+ get a 200 with entitled:false (NOT a 403) — the sync needs an unambiguous \"remove the shared key\" signal it can tell apart from an auth failure, and the rank is the gate, not the route. The secret is attached ONLY when entitled && configured; the response is no-store and the key is never logged. Rank is read live from the DB (no caching, per ADR 0016). rank: any-builder — any authenticated builder may ask; `entitled` in the body is the server-enforced gate. A non-newcomer never receives the secret.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "summary": "PATCH /me/disciplines",
+        "description": "Self-service edit of the authenticated builder's preferred disciplines (migrations 027 + 086 / V3.R80). Body: { preferred_disciplines: [\"artist\", ...] }. Valid elements are engineer|artist|ideator; [] clears the preference (a multi-element set just means several lanes). No rank gate — a builder owns their own profile. 422 invalid_discipline if any element is out of range. rank: any-builder — self-service profile edit; documented \"no rank gate\" in the handler comment above (a builder owns their own preference).\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
-        "x-source": "modules/art-pipeline/routes/art-key.js",
+        "x-source": "src/bongos/routes/me.js",
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PatchMeDisciplinesRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
         "responses": {
           "200": {
-            "description": "Success."
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PatchMeDisciplinesResponse"
+                }
+              }
+            }
           },
           "400": {
-            "$ref": "#/components/responses/BadRequest"
+            "$ref": "#/components/responses/ValidationFailed"
           },
           "401": {
             "$ref": "#/components/responses/Unauthorized"
@@ -5506,23 +5587,23 @@
         ]
       }
     },
-    "/me/art-key/own": {
+    "/me/display-name": {
       "get": {
-        "operationId": "get_me_art_key_own",
+        "operationId": "get_me_display_name",
         "tags": [
           "me"
         ],
-        "summary": "GET /me/art-key/own",
-        "description": "Masked metadata for the browser: { set, last4, set_at, storage_configured }.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "summary": "GET /me/display-name",
+        "description": "Per-builder DISPLAY NAME (task 1669). The free label shown next to a builder's work in the hall (header, leaderboard, work feed — all already read display_name, so a DB update propagates). Seeded once from GitHub at account creation; these routes are the only way to change it afterward. Stable identity stays github_login/id — the display name is just the rendered label. rank: any-builder — own profile config; mirrors the skill/sound/render routes.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
-        "x-source": "modules/art-pipeline/routes/art-key.js",
+        "x-source": "modules/builder-settings/routes/settings.js",
         "responses": {
           "200": {
             "description": "Success.",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/GetMeArtKeyOwnResponse"
+                  "$ref": "#/components/schemas/GetMeDisplayNameResponse"
                 }
               }
             }
@@ -5543,32 +5624,41 @@
           }
         ]
       },
-      "put": {
-        "operationId": "put_me_art_key_own",
+      "patch": {
+        "operationId": "patch_me_display_name",
         "tags": [
           "me"
         ],
-        "summary": "PUT /me/art-key/own",
-        "description": "Set or replace the builder's own key. Body: { key }. Validates the key with one cheap call to Google (catches typos), encrypts it, stores it. Returns the masked metadata — never the key.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "summary": "PATCH /me/display-name",
+        "description": "PATCH the display name. Body: { display_name: \"<new name>\" }. Validated + trimmed by display-name.js: empty/whitespace-only, control chars, and names over the length ceiling → 422 with an errors array; nothing is written when validation fails. Own-scoped — only the AUTHENTICATED builder's row is touched (api.requireBuilder + req.builder.id), never another builder. Uniqueness is NOT required (display names may collide).\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
-        "x-source": "modules/art-pipeline/routes/art-key.js",
+        "x-source": "modules/builder-settings/routes/settings.js",
         "requestBody": {
-          "required": true,
+          "required": false,
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/PutMeArtKeyOwnRequest"
+                "type": "object",
+                "additionalProperties": true
               }
             }
           },
-          "x-validated": true
+          "x-validated": false,
+          "x-body-undocumented": true
         },
         "responses": {
           "200": {
-            "description": "Success."
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PatchMeDisplayNameResponse"
+                }
+              }
+            }
           },
           "400": {
-            "$ref": "#/components/responses/ValidationFailed"
+            "$ref": "#/components/responses/BadRequest"
           },
           "401": {
             "$ref": "#/components/responses/Unauthorized"
@@ -5582,231 +5672,28 @@
             "builderSession": []
           }
         ]
-      },
-      "delete": {
-        "operationId": "delete_me_art_key_own",
+      }
+    },
+    "/me/event-sound-prefs": {
+      "get": {
+        "operationId": "get_me_event_sound_prefs",
         "tags": [
           "me"
         ],
-        "summary": "DELETE /me/art-key/own",
-        "description": "Remove the builder's own key (back to \"not set\"). The session-start sync then withdraws the managed local copy on its next run.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "summary": "GET /me/event-sound-prefs",
+        "description": "Per-builder per-event sound variant selection (task 582, migration 164). Returns each of the 5 build events with their available world-themed variants, the builder's current selection (or the default), and the resolved .wav file name. The local player uses a mirror written by fetch-sound-prefs.js. rank: any-builder — own profile config; mirrors the sound-prefs route.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
-        "x-source": "modules/art-pipeline/routes/art-key.js",
+        "x-source": "modules/builder-settings/routes/settings.js",
         "responses": {
           "200": {
-            "description": "Success."
-          },
-          "400": {
-            "$ref": "#/components/responses/BadRequest"
-          },
-          "401": {
-            "$ref": "#/components/responses/Unauthorized"
-          },
-          "403": {
-            "$ref": "#/components/responses/Forbidden"
-          }
-        },
-        "security": [
-          {
-            "builderSession": []
-          }
-        ]
-      }
-    },
-    "/me/art-key/storage-init": {
-      "post": {
-        "operationId": "post_me_art_key_storage_init",
-        "tags": [
-          "me"
-        ],
-        "summary": "POST /me/art-key/storage-init",
-        "description": "Archon-only: provision the server's secret-box master key so per-builder key storage can turn on (task 1398, blocker 41). Idempotent — NEVER overwrites an existing key. Lives under /me/art-key/* for client locality, but is a server-wide admin action — hence the requireRank('archon') gate.\n\n**Rank:** `archon` — Archon only (the single owner — ratification, infra, rank changes).",
-        "x-rank": "archon",
-        "x-source": "modules/art-pipeline/routes/art-key.js",
-        "responses": {
-          "200": {
-            "description": "Success.",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/PostMeArtKeyStorageInitResponse"
-                }
-              }
-            }
-          },
-          "400": {
-            "$ref": "#/components/responses/BadRequest"
-          },
-          "401": {
-            "$ref": "#/components/responses/Unauthorized"
-          },
-          "403": {
-            "$ref": "#/components/responses/Forbidden"
-          }
-        },
-        "security": [
-          {
-            "builderSession": []
-          }
-        ]
-      }
-    },
-    "/me/disciplines": {
-      "patch": {
-        "operationId": "patch_me_disciplines",
-        "tags": [
-          "me"
-        ],
-        "summary": "PATCH /me/disciplines",
-        "description": "Self-service edit of the authenticated builder's preferred disciplines (migrations 027 + 086 / V3.R80). Body: { preferred_disciplines: [\"artist\", ...] }. Valid elements are engineer|artist|ideator; [] clears the preference (a multi-element set just means several lanes). No rank gate — a builder owns their own profile. 422 invalid_discipline if any element is out of range. rank: any-builder — self-service profile edit; documented \"no rank gate\" in the handler comment above (a builder owns their own preference).\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
-        "x-rank": "any-builder",
-        "x-source": "src/bongos/routes/me.js",
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/PatchMeDisciplinesRequest"
-              }
-            }
-          },
-          "x-validated": true
-        },
-        "responses": {
-          "200": {
-            "description": "Success.",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/PatchMeDisciplinesResponse"
-                }
-              }
-            }
-          },
-          "400": {
-            "$ref": "#/components/responses/ValidationFailed"
-          },
-          "401": {
-            "$ref": "#/components/responses/Unauthorized"
-          },
-          "403": {
-            "$ref": "#/components/responses/Forbidden"
-          }
-        },
-        "security": [
-          {
-            "builderSession": []
-          }
-        ]
-      }
-    },
-    "/me/display-name": {
-      "get": {
-        "operationId": "get_me_display_name",
-        "tags": [
-          "me"
-        ],
-        "summary": "GET /me/display-name",
-        "description": "Per-builder DISPLAY NAME (task 1669). The free label shown next to a builder's work in the hall (header, leaderboard, work feed — all already read display_name, so a DB update propagates). Seeded once from GitHub at account creation; these routes are the only way to change it afterward. Stable identity stays github_login/id — the display name is just the rendered label. rank: any-builder — own profile config; mirrors the skill/sound/render routes.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
-        "x-rank": "any-builder",
-        "x-source": "modules/builder-settings/routes/settings.js",
-        "responses": {
-          "200": {
-            "description": "Success.",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/GetMeDisplayNameResponse"
-                }
-              }
-            }
-          },
-          "400": {
-            "$ref": "#/components/responses/BadRequest"
-          },
-          "401": {
-            "$ref": "#/components/responses/Unauthorized"
-          },
-          "403": {
-            "$ref": "#/components/responses/Forbidden"
-          }
-        },
-        "security": [
-          {
-            "builderSession": []
-          }
-        ]
-      },
-      "patch": {
-        "operationId": "patch_me_display_name",
-        "tags": [
-          "me"
-        ],
-        "summary": "PATCH /me/display-name",
-        "description": "PATCH the display name. Body: { display_name: \"<new name>\" }. Validated + trimmed by display-name.js: empty/whitespace-only, control chars, and names over the length ceiling → 422 with an errors array; nothing is written when validation fails. Own-scoped — only the AUTHENTICATED builder's row is touched (api.requireBuilder + req.builder.id), never another builder. Uniqueness is NOT required (display names may collide).\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
-        "x-rank": "any-builder",
-        "x-source": "modules/builder-settings/routes/settings.js",
-        "requestBody": {
-          "required": false,
-          "content": {
-            "application/json": {
-              "schema": {
-                "type": "object",
-                "additionalProperties": true
-              }
-            }
-          },
-          "x-validated": false,
-          "x-body-undocumented": true
-        },
-        "responses": {
-          "200": {
-            "description": "Success.",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/PatchMeDisplayNameResponse"
-                }
-              }
-            }
-          },
-          "400": {
-            "$ref": "#/components/responses/BadRequest"
-          },
-          "401": {
-            "$ref": "#/components/responses/Unauthorized"
-          },
-          "403": {
-            "$ref": "#/components/responses/Forbidden"
-          }
-        },
-        "security": [
-          {
-            "builderSession": []
-          }
-        ]
-      }
-    },
-    "/me/event-sound-prefs": {
-      "get": {
-        "operationId": "get_me_event_sound_prefs",
-        "tags": [
-          "me"
-        ],
-        "summary": "GET /me/event-sound-prefs",
-        "description": "Per-builder per-event sound variant selection (task 582, migration 164). Returns each of the 5 build events with their available world-themed variants, the builder's current selection (or the default), and the resolved .wav file name. The local player uses a mirror written by fetch-sound-prefs.js. rank: any-builder — own profile config; mirrors the sound-prefs route.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
-        "x-rank": "any-builder",
-        "x-source": "modules/builder-settings/routes/settings.js",
-        "responses": {
-          "200": {
-            "description": "Success.",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/GetMeEventSoundPrefsResponse"
-                }
-              }
-            }
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetMeEventSoundPrefsResponse"
+                }
+              }
+            }
           },
           "400": {
             "$ref": "#/components/responses/BadRequest"
@@ -6913,23 +6800,23 @@
         ]
       }
     },
-    "/override-requests": {
+    "/my-projects": {
       "get": {
-        "operationId": "get_override_requests",
+        "operationId": "get_my_projects",
         "tags": [
-          "override-requests"
+          "my-projects"
         ],
-        "summary": "GET /override-requests",
-        "description": "GET /override-requests?status=open — Archon queue. Status defaults to open; pass ?status=approved or ?status=denied for the resolved history. rank: archon — same gate as the audit log + Archon view.\n\n**Rank:** `archon` — Archon only (the single owner — ratification, infra, rank changes).",
-        "x-rank": "archon",
-        "x-source": "modules/lifecycle/routes/tasks.js",
+        "summary": "GET /my-projects",
+        "description": "the caller's OWN cross-project memberships (own data).\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/platform-identity/routes/my-projects.js",
         "responses": {
           "200": {
             "description": "Success.",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/GetOverrideRequestsResponse"
+                  "$ref": "#/components/schemas/GetMyProjectsResponse"
                 }
               }
             }
@@ -6951,25 +6838,517 @@
         ]
       }
     },
-    "/override-requests/{id}/decide": {
+    "/my-projects/invites": {
+      "get": {
+        "operationId": "get_my_projects_invites",
+        "tags": [
+          "my-projects"
+        ],
+        "summary": "GET /my-projects/invites",
+        "description": "the caller's OWN pending invitations (ADR 0141 §5).\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/platform-identity/routes/my-projects.js",
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetMyProjectsInvitesResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/my-projects/invites/{clientId}/accept": {
       "post": {
-        "operationId": "post_override_requests_id_decide",
+        "operationId": "post_my_projects_invites_clientId_accept",
         "tags": [
-          "override-requests"
+          "my-projects"
         ],
-        "summary": "POST /override-requests/:id/decide",
-        "description": "POST /override-requests/:id/decide — body: { decision: 'approve'|'deny', note? } On approve, atomically flips the task completed→confirmed and awards the credits to the original requester (NOT the Archon). On deny, only the row updates; the task stays at completed and the builder must release or re-ship after fixing whatever the grader caught. rank: archon — grader-bypass authority; same gate as POST /tasks/:id/confirm.\n\n**Rank:** `archon` — Archon only (the single owner — ratification, infra, rank changes).",
-        "x-rank": "archon",
-        "x-source": "modules/lifecycle/routes/tasks.js",
+        "summary": "POST /my-projects/invites/:clientId/accept",
+        "description": "accept an invite (pending → builder) for the caller's OWN account.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/platform-identity/routes/my-projects.js",
         "parameters": [
           {
-            "name": "id",
+            "name": "clientId",
             "in": "path",
             "required": true,
             "schema": {
               "type": "string"
             },
-            "description": "Path parameter `id`."
+            "description": "Path parameter `clientId`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostMyProjectsInvitesClientIdAcceptResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/my-projects/invites/{clientId}/decline": {
+      "post": {
+        "operationId": "post_my_projects_invites_clientId_decline",
+        "tags": [
+          "my-projects"
+        ],
+        "summary": "POST /my-projects/invites/:clientId/decline",
+        "description": "decline an invite (delete the pending row) for the caller's OWN account.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/platform-identity/routes/my-projects.js",
+        "parameters": [
+          {
+            "name": "clientId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `clientId`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostMyProjectsInvitesClientIdDeclineResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/my-projects/join": {
+      "post": {
+        "operationId": "post_my_projects_join",
+        "tags": [
+          "my-projects"
+        ],
+        "summary": "POST /my-projects/join",
+        "description": "request to join a project. The hub RELAYS the request to the target project's own admission surface (it does NOT admit locally — authority stays local). SSRF guard: only relay to an origin that is a REGISTERED, active client — never an arbitrary builder-supplied URL.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/platform-identity/routes/my-projects.js",
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostMyProjectsJoinRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostMyProjectsJoinResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/my-projects/{clientId}/leave": {
+      "post": {
+        "operationId": "post_my_projects_clientId_leave",
+        "tags": [
+          "my-projects"
+        ],
+        "summary": "POST /my-projects/:clientId/leave",
+        "description": "leave a project from the caller's OWN membership list.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/platform-identity/routes/my-projects.js",
+        "parameters": [
+          {
+            "name": "clientId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `clientId`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostMyProjectsClientIdLeaveResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/override-requests": {
+      "get": {
+        "operationId": "get_override_requests",
+        "tags": [
+          "override-requests"
+        ],
+        "summary": "GET /override-requests",
+        "description": "GET /override-requests?status=open — Archon queue. Status defaults to open; pass ?status=approved or ?status=denied for the resolved history. rank: archon — same gate as the audit log + Archon view.\n\n**Rank:** `archon` — Archon only (the single owner — ratification, infra, rank changes).",
+        "x-rank": "archon",
+        "x-source": "modules/lifecycle/routes/tasks.js",
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetOverrideRequestsResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/override-requests/{id}/decide": {
+      "post": {
+        "operationId": "post_override_requests_id_decide",
+        "tags": [
+          "override-requests"
+        ],
+        "summary": "POST /override-requests/:id/decide",
+        "description": "POST /override-requests/:id/decide — body: { decision: 'approve'|'deny', note? } On approve, atomically flips the task completed→confirmed and awards the credits to the original requester (NOT the Archon). On deny, only the row updates; the task stays at completed and the builder must release or re-ship after fixing whatever the grader caught. rank: archon — grader-bypass authority; same gate as POST /tasks/:id/confirm.\n\n**Rank:** `archon` — Archon only (the single owner — ratification, infra, rank changes).",
+        "x-rank": "archon",
+        "x-source": "modules/lifecycle/routes/tasks.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostOverrideRequestsIdDecideRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/projects": {
+      "get": {
+        "operationId": "get_projects",
+        "tags": [
+          "projects"
+        ],
+        "summary": "GET /projects",
+        "description": "the full curation list (includes unfeatured + owner attribution).\n\n**Rank:** `archon` — Archon only (the single owner — ratification, infra, rank changes).",
+        "x-rank": "archon",
+        "x-source": "modules/platform-identity/routes/projects.js",
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetProjectsResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      },
+      "post": {
+        "operationId": "post_projects",
+        "tags": [
+          "projects"
+        ],
+        "summary": "POST /projects",
+        "description": "create / update a catalog entry (manual seed for hand-wired instances; federated projects auto-catalogue at registration).\n\n**Rank:** `archon` — Archon only (the single owner — ratification, infra, rank changes).",
+        "x-rank": "archon",
+        "x-source": "modules/platform-identity/routes/projects.js",
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostProjectsRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostProjectsResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/projects/featured": {
+      "get": {
+        "operationId": "get_projects_featured",
+        "tags": [
+          "projects"
+        ],
+        "summary": "GET /projects/featured",
+        "description": "a curated public showcase; no auth by design.\n\n**Rank:** `public` — No authentication — any caller.",
+        "x-rank": "public",
+        "x-source": "modules/platform-identity/routes/projects.js",
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetProjectsFeaturedResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          }
+        },
+        "security": []
+      }
+    },
+    "/projects/invite": {
+      "post": {
+        "operationId": "post_projects_invite",
+        "tags": [
+          "projects"
+        ],
+        "summary": "POST /projects/invite",
+        "description": "invite a builder into a project (ADR 0141 §5, task #1002115). Pre-seeds a 'pending' membership the invitee accepts from My Projects. V1 invites by github_login and requires the invitee to already have a platform account (they build on some project); inviting someone entirely new to the platform (GitHub-id resolution) is a follow-up.\n\n**Rank:** `archon` — Archon only (the single owner — ratification, infra, rank changes).",
+        "x-rank": "archon",
+        "x-source": "modules/platform-identity/routes/projects.js",
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostProjectsInviteRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/projects/{id}/featured": {
+      "patch": {
+        "operationId": "patch_projects_id_featured",
+        "tags": [
+          "projects"
+        ],
+        "summary": "PATCH /projects/:id/featured",
+        "description": "the feature / unfeature control (the ADR 0141 §5 curation gate).\n\n**Rank:** `archon` — Archon only (the single owner — ratification, infra, rank changes).",
+        "x-rank": "archon",
+        "x-source": "modules/platform-identity/routes/projects.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
           }
         ],
         "requestBody": {
@@ -6977,7 +7356,7 @@
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/PostOverrideRequestsIdDecideRequest"
+                "$ref": "#/components/schemas/PatchProjectsIdFeaturedRequest"
               }
             }
           },
@@ -6985,7 +7364,14 @@
         },
         "responses": {
           "200": {
-            "description": "Success."
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PatchProjectsIdFeaturedResponse"
+                }
+              }
+            }
           },
           "400": {
             "$ref": "#/components/responses/ValidationFailed"
@@ -7979,53 +8365,319 @@
             "$ref": "#/components/responses/BadRequest"
           }
         },
-        "security": []
+        "security": []
+      }
+    },
+    "/public/versions": {
+      "get": {
+        "operationId": "get_public_versions",
+        "tags": [
+          "public"
+        ],
+        "summary": "GET /public/versions",
+        "description": "read-only surface for status.amazonprimea.com.\n\n**Rank:** `public` — No authentication — any caller.",
+        "x-rank": "public",
+        "x-source": "src/bongos/routes/public.js",
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetPublicVersionsResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          }
+        },
+        "security": []
+      }
+    },
+    "/scouting": {
+      "get": {
+        "operationId": "get_scouting",
+        "tags": [
+          "scouting"
+        ],
+        "summary": "GET /scouting",
+        "description": "the internal talent directory across every project. The Archon gate here is the load-bearing protection (\"NOT shown to builders\"): a non-Archon is 403'd before any cross-builder data is read.\n\n**Rank:** `archon` — Archon only (the single owner — ratification, infra, rank changes).",
+        "x-rank": "archon",
+        "x-source": "modules/platform-identity/routes/scouting.js",
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetScoutingResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/search": {
+      "post": {
+        "operationId": "post_search",
+        "tags": [
+          "search"
+        ],
+        "summary": "POST /search",
+        "description": "POST /search — two modes (ADR 0095 C1 / task 1658, progressive disclosure): 1. SUMMARY (default): body { q: string, limit?: 1..50, source_kind? }. Returns the ranked compact layer — each hit carries a snippet plus `snippet_tokens` (what you already see) and `full_tokens` (what a full expansion would COST), so the caller sees the price before paying it. 2. EXPAND: body { expand: <chunkId> } (with q optional). Returns that one chunk's FULL body + `body_tokens`, scoped exactly like search (rank + owner from the session), so expand can't widen visibility. Both shapes stay backward-compatible: the old { q } request still returns { query, count, results } — the new per-hit fields are additive. Single-line opener so the deterministic route-rank auditor classifies the chain (requireBuilder → 'any-builder') — ADR 0016 / route-rank-check.js.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/memory/routes/search.js",
+        "requestBody": {
+          "required": false,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostSearchRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostSearchResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/search/mark": {
+      "post": {
+        "operationId": "post_search_mark",
+        "tags": [
+          "search"
+        ],
+        "summary": "POST /search/mark",
+        "description": "POST /search/mark — the write half of the memory-usefulness feedback loop (ADR 0095 C3, task 1660). Body { chunk_id: int, useful?: bool }. Records that a recalled chunk did (useful=true, the default) or did NOT (useful=false) help, so the ranker lifts the useful and fades the dead-end. SCOPING (ADR 0016): the caller's id + rank come ONLY from the session, never the body — searchChunks-equivalent scope is re-applied in the UPDATE WHERE, so a chunk the caller couldn't have seen can't be voted on (→ updated:false). Single-line opener so the route-rank auditor classifies the chain.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/memory/routes/search.js",
+        "requestBody": {
+          "required": false,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostSearchMarkRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/security/docs": {
+      "get": {
+        "operationId": "get_security_docs",
+        "tags": [
+          "security"
+        ],
+        "summary": "GET /security/docs",
+        "description": "GET /api/gds/security/docs — list doc METADATA (no content). rank: archon — index of exploit-detail engagement reports.\n\n**Rank:** `archon` — Archon only (the single owner — ratification, infra, rank changes).",
+        "x-rank": "archon",
+        "x-source": "src/bongos/routes/security.js",
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetSecurityDocsResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      },
+      "post": {
+        "operationId": "post_security_docs",
+        "tags": [
+          "security"
+        ],
+        "summary": "POST /security/docs",
+        "description": "POST /api/gds/security/docs — upsert a doc by slug. The director uploads each dated engagement report here after deploy. Body: { slug, title, content_md }. content_md uses a large explicit cap (full reports), NOT the small LIMITS.DESCRIPTION. Returns 201 + the row. rank: archon — writes exploit-detail report bodies.\n\n**Rank:** `archon` — Archon only (the single owner — ratification, infra, rank changes).",
+        "x-rank": "archon",
+        "x-source": "src/bongos/routes/security.js",
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostSecurityDocsRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostSecurityDocsResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
       }
     },
-    "/public/versions": {
+    "/security/docs/{slug}": {
       "get": {
-        "operationId": "get_public_versions",
+        "operationId": "get_security_docs_slug",
         "tags": [
-          "public"
+          "security"
+        ],
+        "summary": "GET /security/docs/:slug",
+        "description": "GET /api/gds/security/docs/:slug — one doc WITH content, or 404. rank: archon — reads the full exploit-detail report body.\n\n**Rank:** `archon` — Archon only (the single owner — ratification, infra, rank changes).",
+        "x-rank": "archon",
+        "x-source": "src/bongos/routes/security.js",
+        "parameters": [
+          {
+            "name": "slug",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `slug`."
+          }
         ],
-        "summary": "GET /public/versions",
-        "description": "read-only surface for status.amazonprimea.com.\n\n**Rank:** `public` — No authentication — any caller.",
-        "x-rank": "public",
-        "x-source": "src/bongos/routes/public.js",
         "responses": {
           "200": {
             "description": "Success.",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/GetPublicVersionsResponse"
+                  "$ref": "#/components/schemas/GetSecurityDocsSlugResponse"
                 }
               }
             }
           },
           "400": {
             "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
           }
         },
-        "security": []
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
       }
     },
-    "/search": {
+    "/session/optimize": {
       "post": {
-        "operationId": "post_search",
+        "operationId": "post_session_optimize",
         "tags": [
-          "search"
+          "session"
         ],
-        "summary": "POST /search",
-        "description": "POST /search — two modes (ADR 0095 C1 / task 1658, progressive disclosure): 1. SUMMARY (default): body { q: string, limit?: 1..50, source_kind? }. Returns the ranked compact layer — each hit carries a snippet plus `snippet_tokens` (what you already see) and `full_tokens` (what a full expansion would COST), so the caller sees the price before paying it. 2. EXPAND: body { expand: <chunkId> } (with q optional). Returns that one chunk's FULL body + `body_tokens`, scoped exactly like search (rank + owner from the session), so expand can't widen visibility. Both shapes stay backward-compatible: the old { q } request still returns { query, count, results } — the new per-hit fields are additive. Single-line opener so the deterministic route-rank auditor classifies the chain (requireBuilder → 'any-builder') — ADR 0016 / route-rank-check.js.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "summary": "POST /session/optimize",
+        "description": "pick own next work; the optimizer reads/recommends only.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
-        "x-source": "modules/memory/routes/search.js",
+        "x-source": "src/bongos/routes/optimizer.js",
         "requestBody": {
           "required": false,
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/PostSearchRequest"
+                "$ref": "#/components/schemas/PostSessionOptimizeRequest"
               }
             }
           },
@@ -8033,14 +8685,7 @@
         },
         "responses": {
           "200": {
-            "description": "Success.",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/PostSearchResponse"
-                }
-              }
-            }
+            "description": "Success."
           },
           "400": {
             "$ref": "#/components/responses/ValidationFailed"
@@ -8059,22 +8704,22 @@
         ]
       }
     },
-    "/search/mark": {
+    "/sessions": {
       "post": {
-        "operationId": "post_search_mark",
+        "operationId": "post_sessions",
         "tags": [
-          "search"
+          "sessions"
         ],
-        "summary": "POST /search/mark",
-        "description": "POST /search/mark — the write half of the memory-usefulness feedback loop (ADR 0095 C3, task 1660). Body { chunk_id: int, useful?: bool }. Records that a recalled chunk did (useful=true, the default) or did NOT (useful=false) help, so the ranker lifts the useful and fades the dead-end. SCOPING (ADR 0016): the caller's id + rank come ONLY from the session, never the body — searchChunks-equivalent scope is re-applied in the UPDATE WHERE, so a chunk the caller couldn't have seen can't be voted on (→ updated:false). Single-line opener so the route-rank auditor classifies the chain.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "summary": "POST /sessions",
+        "description": "upload your OWN session digest. Owner is forced to the authenticated caller; the body cannot attribute a record to another builder.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
-        "x-source": "modules/memory/routes/search.js",
+        "x-source": "modules/sessions/routes/sessions.js",
         "requestBody": {
-          "required": false,
+          "required": true,
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/PostSearchMarkRequest"
+                "$ref": "#/components/schemas/PostSessionsRequest"
               }
             }
           },
@@ -8082,7 +8727,14 @@
         },
         "responses": {
           "200": {
-            "description": "Success."
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostSessionsResponse"
+                }
+              }
+            }
           },
           "400": {
             "$ref": "#/components/responses/ValidationFailed"
@@ -8101,23 +8753,23 @@
         ]
       }
     },
-    "/security/docs": {
+    "/sessions/mine": {
       "get": {
-        "operationId": "get_security_docs",
+        "operationId": "get_sessions_mine",
         "tags": [
-          "security"
+          "sessions"
         ],
-        "summary": "GET /security/docs",
-        "description": "GET /api/gds/security/docs — list doc METADATA (no content). rank: archon — index of exploit-detail engagement reports.\n\n**Rank:** `archon` — Archon only (the single owner — ratification, infra, rank changes).",
-        "x-rank": "archon",
-        "x-source": "src/bongos/routes/security.js",
+        "summary": "GET /sessions/mine",
+        "description": "your OWN sessions (self-serve; no audit needed).\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/sessions/routes/sessions.js",
         "responses": {
           "200": {
             "description": "Success.",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/GetSecurityDocsResponse"
+                  "$ref": "#/components/schemas/GetSessionsMineResponse"
                 }
               }
             }
@@ -8137,40 +8789,31 @@
             "builderSession": []
           }
         ]
-      },
-      "post": {
-        "operationId": "post_security_docs",
+      }
+    },
+    "/sessions/search": {
+      "get": {
+        "operationId": "get_sessions_search",
         "tags": [
-          "security"
+          "sessions"
         ],
-        "summary": "POST /security/docs",
-        "description": "POST /api/gds/security/docs — upsert a doc by slug. The director uploads each dated engagement report here after deploy. Body: { slug, title, content_md }. content_md uses a large explicit cap (full reports), NOT the small LIMITS.DESCRIPTION. Returns 201 + the row. rank: archon — writes exploit-detail report bodies.\n\n**Rank:** `archon` — Archon only (the single owner — ratification, infra, rank changes).",
+        "summary": "GET /sessions/search",
+        "description": "cross-builder corpus search (BFG-principal posture until 6C.1).\n\n**Rank:** `archon` — Archon only (the single owner — ratification, infra, rank changes).",
         "x-rank": "archon",
-        "x-source": "src/bongos/routes/security.js",
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/PostSecurityDocsRequest"
-              }
-            }
-          },
-          "x-validated": true
-        },
+        "x-source": "modules/sessions/routes/sessions.js",
         "responses": {
           "200": {
             "description": "Success.",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/PostSecurityDocsResponse"
+                  "$ref": "#/components/schemas/GetSessionsSearchResponse"
                 }
               }
             }
           },
           "400": {
-            "$ref": "#/components/responses/ValidationFailed"
+            "$ref": "#/components/responses/BadRequest"
           },
           "401": {
             "$ref": "#/components/responses/Unauthorized"
@@ -8186,25 +8829,25 @@
         ]
       }
     },
-    "/security/docs/{slug}": {
+    "/sessions/{id}": {
       "get": {
-        "operationId": "get_security_docs_slug",
+        "operationId": "get_sessions_id",
         "tags": [
-          "security"
+          "sessions"
         ],
-        "summary": "GET /security/docs/:slug",
-        "description": "GET /api/gds/security/docs/:slug — one doc WITH content, or 404. rank: archon — reads the full exploit-detail report body.\n\n**Rank:** `archon` — Archon only (the single owner — ratification, infra, rank changes).",
-        "x-rank": "archon",
-        "x-source": "src/bongos/routes/security.js",
+        "summary": "GET /sessions/:id",
+        "description": "own session full detail (deep-dive); cross-builder fetch requires Archon + a fail-closed audit row (BFG-principal posture until 6C.1).\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/sessions/routes/sessions.js",
         "parameters": [
           {
-            "name": "slug",
+            "name": "id",
             "in": "path",
             "required": true,
             "schema": {
               "type": "string"
             },
-            "description": "Path parameter `slug`."
+            "description": "Path parameter `id`."
           }
         ],
         "responses": {
@@ -8213,7 +8856,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/GetSecurityDocsSlugResponse"
+                  "$ref": "#/components/schemas/GetSessionsIdResponse"
                 }
               }
             }
@@ -8238,22 +8881,22 @@
         ]
       }
     },
-    "/session/optimize": {
+    "/sso/activity/rollup": {
       "post": {
-        "operationId": "post_session_optimize",
+        "operationId": "post_sso_activity_rollup",
         "tags": [
-          "session"
+          "sso"
         ],
-        "summary": "POST /session/optimize",
-        "description": "pick own next work; the optimizer reads/recommends only.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
-        "x-rank": "any-builder",
-        "x-source": "src/bongos/routes/optimizer.js",
+        "summary": "POST /sso/activity/rollup",
+        "description": "POST /sso/activity/rollup — a federated instance reports a builder's activity snapshot (ADR 0141 §4). Server-to-server, client_id+client_secret auth. Keyed to the AUTHENTICATED client_id. Descriptive analytics for the Archon-only scouting view — never authority. rank: public — authenticated by client_id + client_secret, not a builder rank.\n\n**Rank:** `public` — No authentication — any caller.",
+        "x-rank": "public",
+        "x-source": "modules/platform-identity/routes/sso.js",
         "requestBody": {
-          "required": false,
+          "required": true,
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/PostSessionOptimizeRequest"
+                "$ref": "#/components/schemas/PostSsoActivityRollupRequest"
               }
             }
           },
@@ -8261,41 +8904,123 @@
         },
         "responses": {
           "200": {
-            "description": "Success."
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostSsoActivityRollupResponse"
+                }
+              }
+            }
           },
           "400": {
             "$ref": "#/components/responses/ValidationFailed"
+          }
+        },
+        "security": []
+      }
+    },
+    "/sso/authorize": {
+      "get": {
+        "operationId": "get_sso_authorize",
+        "tags": [
+          "sso"
+        ],
+        "summary": "GET /sso/authorize",
+        "description": "GET /sso/authorize?client_id=&redirect_uri=&state= — the browser authorize leg. rank: public — this is an authentication entry point, not an authorization surface. It is gated on a LIVE HUB SESSION (resolved inline via resolveSession; a missing session 302s to the hub's own web sign-in and returns here), NOT on a builder RANK. It mints identity-only codes.\n\n**Rank:** `public` — No authentication — any caller.",
+        "x-rank": "public",
+        "x-source": "modules/platform-identity/routes/sso.js",
+        "responses": {
+          "200": {
+            "description": "Success."
           },
-          "401": {
-            "$ref": "#/components/responses/Unauthorized"
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          }
+        },
+        "security": []
+      }
+    },
+    "/sso/device/poll": {
+      "post": {
+        "operationId": "post_sso_device_poll",
+        "tags": [
+          "sso"
+        ],
+        "summary": "POST /sso/device/poll",
+        "description": "POST /sso/device/poll — poll the hub device flow. On GitHub approval, upsert the platform account and mint an audience-scoped EdDSA assertion for the client that was BOUND at start (from the origin) — the poll takes NO client_id, so the CLI cannot influence the audience. Returns the SAME poll states as the core device flow, plus { state:'ok', assertion } on success. rank: public — the device_code (GitHub's) is the bearer; the assertion carries identity ONLY and is useless to anyone but the origin-bound client (aud-scoped).\n\n**Rank:** `public` — No authentication — any caller.",
+        "x-rank": "public",
+        "x-source": "modules/platform-identity/routes/sso.js",
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostSsoDevicePollRequest"
+              }
+            }
           },
-          "403": {
-            "$ref": "#/components/responses/Forbidden"
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
           }
         },
-        "security": [
-          {
-            "builderSession": []
+        "security": []
+      }
+    },
+    "/sso/device/start": {
+      "post": {
+        "operationId": "post_sso_device_start",
+        "tags": [
+          "sso"
+        ],
+        "summary": "POST /sso/device/start",
+        "description": "POST /sso/device/start — begin CLI federation. The client is resolved from the USER-TYPED instance ORIGIN via the registry (getClientByOrigin) and BOUND to the device flow — the CLI never names the audience. This closes the confused-deputy where a malicious instance manifest could steer the mint at a victim client_id (ADR 0141 §1 security fix). Runs the GitHub device flow against the HUB's app and returns the codes. Identity is established as a platform ACCOUNT at poll time — never a hub-builder session (ADR 0141: identity federated, authority local). rank: public — an authentication entry point; the origin is public, and the poll's GitHub approval is the real gate.\n\n**Rank:** `public` — No authentication — any caller.",
+        "x-rank": "public",
+        "x-source": "modules/platform-identity/routes/sso.js",
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostSsoDeviceStartRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
           }
-        ]
+        },
+        "security": []
       }
     },
-    "/sessions": {
+    "/sso/membership/check-in": {
       "post": {
-        "operationId": "post_sessions",
+        "operationId": "post_sso_membership_check_in",
         "tags": [
-          "sessions"
+          "sso"
         ],
-        "summary": "POST /sessions",
-        "description": "upload your OWN session digest. Owner is forced to the authenticated caller; the body cannot attribute a record to another builder.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
-        "x-rank": "any-builder",
-        "x-source": "modules/sessions/routes/sessions.js",
+        "summary": "POST /sso/membership/check-in",
+        "description": "POST /sso/membership/check-in — a federated instance reports, on every sign-in, that a builder builds on its project (ADR 0141 §3). Server-to-server, authed by client_id + client_secret (same constant-time check as /sso/token). Upserts the account (so a CLI-only builder still appears in My Projects) + the membership with a COARSE role. The client_id is taken from the AUTHENTICATED client — the caller cannot report membership for a project it doesn't hold the secret for. rank: public — authenticated by client_id + client_secret, not a builder rank.\n\n**Rank:** `public` — No authentication — any caller.",
+        "x-rank": "public",
+        "x-source": "modules/platform-identity/routes/sso.js",
         "requestBody": {
           "required": true,
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/PostSessionsRequest"
+                "$ref": "#/components/schemas/PostSsoMembershipCheckInRequest"
               }
             }
           },
@@ -8307,154 +9032,83 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/PostSessionsResponse"
+                  "$ref": "#/components/schemas/PostSsoMembershipCheckInResponse"
                 }
               }
             }
           },
           "400": {
             "$ref": "#/components/responses/ValidationFailed"
-          },
-          "401": {
-            "$ref": "#/components/responses/Unauthorized"
-          },
-          "403": {
-            "$ref": "#/components/responses/Forbidden"
           }
         },
-        "security": [
-          {
-            "builderSession": []
-          }
-        ]
+        "security": []
       }
     },
-    "/sessions/mine": {
+    "/sso/pubkey": {
       "get": {
-        "operationId": "get_sessions_mine",
+        "operationId": "get_sso_pubkey",
         "tags": [
-          "sessions"
+          "sso"
         ],
-        "summary": "GET /sessions/mine",
-        "description": "your OWN sessions (self-serve; no audit needed).\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
-        "x-rank": "any-builder",
-        "x-source": "modules/sessions/routes/sessions.js",
+        "summary": "GET /sso/pubkey",
+        "description": "GET /sso/pubkey — the hub's Ed25519 assertion-verification key (public). An instance provisioned WITHOUT the key in env can fetch it here; the value is public by design (it only VERIFIES assertions, never signs). rank: public — a public key is not a secret; no auth needed.\n\n**Rank:** `public` — No authentication — any caller.",
+        "x-rank": "public",
+        "x-source": "modules/platform-identity/routes/sso.js",
         "responses": {
           "200": {
             "description": "Success.",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/GetSessionsMineResponse"
+                  "$ref": "#/components/schemas/GetSsoPubkeyResponse"
                 }
               }
             }
           },
           "400": {
             "$ref": "#/components/responses/BadRequest"
-          },
-          "401": {
-            "$ref": "#/components/responses/Unauthorized"
-          },
-          "403": {
-            "$ref": "#/components/responses/Forbidden"
           }
         },
-        "security": [
-          {
-            "builderSession": []
-          }
-        ]
+        "security": []
       }
     },
-    "/sessions/search": {
-      "get": {
-        "operationId": "get_sessions_search",
+    "/sso/token": {
+      "post": {
+        "operationId": "post_sso_token",
         "tags": [
-          "sessions"
+          "sso"
         ],
-        "summary": "GET /sessions/search",
-        "description": "cross-builder corpus search (BFG-principal posture until 6C.1).\n\n**Rank:** `archon` — Archon only (the single owner — ratification, infra, rank changes).",
-        "x-rank": "archon",
-        "x-source": "modules/sessions/routes/sessions.js",
-        "responses": {
-          "200": {
-            "description": "Success.",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/GetSessionsSearchResponse"
-                }
+        "summary": "POST /sso/token",
+        "description": "POST /sso/token — server-to-server code redemption. rank: public — authenticated by client_id + client_secret (constant-time hash compare in clientSecretValid), NOT a builder session/rank. This is the confidential-client leg; the instance calls it from its server, never the browser. Returns IDENTITY ONLY (github_id, login, display_name, avatar_url).\n\n**Rank:** `public` — No authentication — any caller.",
+        "x-rank": "public",
+        "x-source": "modules/platform-identity/routes/sso.js",
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostSsoTokenRequest"
               }
             }
           },
-          "400": {
-            "$ref": "#/components/responses/BadRequest"
-          },
-          "401": {
-            "$ref": "#/components/responses/Unauthorized"
-          },
-          "403": {
-            "$ref": "#/components/responses/Forbidden"
-          }
+          "x-validated": true
         },
-        "security": [
-          {
-            "builderSession": []
-          }
-        ]
-      }
-    },
-    "/sessions/{id}": {
-      "get": {
-        "operationId": "get_sessions_id",
-        "tags": [
-          "sessions"
-        ],
-        "summary": "GET /sessions/:id",
-        "description": "own session full detail (deep-dive); cross-builder fetch requires Archon + a fail-closed audit row (BFG-principal posture until 6C.1).\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
-        "x-rank": "any-builder",
-        "x-source": "modules/sessions/routes/sessions.js",
-        "parameters": [
-          {
-            "name": "id",
-            "in": "path",
-            "required": true,
-            "schema": {
-              "type": "string"
-            },
-            "description": "Path parameter `id`."
-          }
-        ],
         "responses": {
           "200": {
             "description": "Success.",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/GetSessionsIdResponse"
+                  "$ref": "#/components/schemas/PostSsoTokenResponse"
                 }
               }
             }
           },
           "400": {
-            "$ref": "#/components/responses/BadRequest"
-          },
-          "401": {
-            "$ref": "#/components/responses/Unauthorized"
-          },
-          "403": {
-            "$ref": "#/components/responses/Forbidden"
-          },
-          "404": {
-            "$ref": "#/components/responses/NotFound"
+            "$ref": "#/components/responses/ValidationFailed"
           }
         },
-        "security": [
-          {
-            "builderSession": []
-          }
-        ]
+        "security": []
       }
     },
     "/tasks": {
@@ -10456,21 +11110,6 @@
           "stale_hours"
         ]
       },
-      "GetDemoHealthResponse": {
-        "type": "object",
-        "properties": {
-          "module": {},
-          "ok": {
-            "type": "boolean"
-          },
-          "coreVersion": {}
-        },
-        "required": [
-          "module",
-          "ok",
-          "coreVersion"
-        ]
-      },
       "GetDiscordChannelsPlanResponse": {
         "type": "object",
         "properties": {
@@ -10501,6 +11140,15 @@
           "count"
         ]
       },
+      "GetGithubReposResponse": {
+        "type": "object",
+        "properties": {
+          "repos": {}
+        },
+        "required": [
+          "repos"
+        ]
+      },
       "GetGoalsIdConflictsResponse": {
         "type": "object",
         "properties": {
@@ -10635,21 +11283,6 @@
           "unlocked"
         ]
       },
-      "GetMeArtKeyOwnResponse": {
-        "type": "object",
-        "properties": {
-          "set": {},
-          "last4": {},
-          "set_at": {},
-          "storage_configured": {}
-        },
-        "required": [
-          "set",
-          "last4",
-          "set_at",
-          "storage_configured"
-        ]
-      },
       "GetMeDisplayNameResponse": {
         "type": "object",
         "properties": {
@@ -10827,6 +11460,26 @@
           "submissions"
         ]
       },
+      "GetMyProjectsInvitesResponse": {
+        "type": "object",
+        "properties": {
+          "invites": {}
+        },
+        "required": [
+          "invites"
+        ]
+      },
+      "GetMyProjectsResponse": {
+        "type": "object",
+        "properties": {
+          "owned": {},
+          "building": {}
+        },
+        "required": [
+          "owned",
+          "building"
+        ]
+      },
       "GetOverrideRequestsResponse": {
         "type": "object",
         "properties": {
@@ -10836,6 +11489,24 @@
           "requests"
         ]
       },
+      "GetProjectsFeaturedResponse": {
+        "type": "object",
+        "properties": {
+          "projects": {}
+        },
+        "required": [
+          "projects"
+        ]
+      },
+      "GetProjectsResponse": {
+        "type": "object",
+        "properties": {
+          "projects": {}
+        },
+        "required": [
+          "projects"
+        ]
+      },
       "GetProvisioningFleetResponse": {
         "type": "object",
         "properties": {
@@ -11063,6 +11734,15 @@
           "page"
         ]
       },
+      "GetScoutingResponse": {
+        "type": "object",
+        "properties": {
+          "builders": {}
+        },
+        "required": [
+          "builders"
+        ]
+      },
       "GetSecurityDocsResponse": {
         "type": "object",
         "properties": {
@@ -11120,6 +11800,19 @@
           "offset"
         ]
       },
+      "GetSsoPubkeyResponse": {
+        "type": "object",
+        "properties": {
+          "alg": {},
+          "format": {},
+          "public_key_b64": {}
+        },
+        "required": [
+          "alg",
+          "format",
+          "public_key_b64"
+        ]
+      },
       "GetTasksClaimableResponse": {
         "type": "object",
         "properties": {
@@ -11545,6 +12238,27 @@
           "known_sounds"
         ]
       },
+      "PatchProjectsIdFeaturedRequest": {
+        "type": "object",
+        "properties": {
+          "featured": {
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "featured"
+        ],
+        "additionalProperties": false
+      },
+      "PatchProjectsIdFeaturedResponse": {
+        "type": "object",
+        "properties": {
+          "project": {}
+        },
+        "required": [
+          "project"
+        ]
+      },
       "PatchTasksIdRequest": {
         "type": "object",
         "properties": {
@@ -11714,6 +12428,30 @@
           "paste_command"
         ]
       },
+      "PostAuthDeviceExchangeRequest": {
+        "type": "object",
+        "properties": {
+          "assertion": {
+            "type": "string",
+            "maxLength": 4096
+          }
+        },
+        "required": [
+          "assertion"
+        ],
+        "additionalProperties": false
+      },
+      "PostAuthDeviceExchangeResponse": {
+        "type": "object",
+        "properties": {
+          "token": {},
+          "builder": {}
+        },
+        "required": [
+          "token",
+          "builder"
+        ]
+      },
       "PostAuthDevicePollRequest": {
         "type": "object",
         "properties": {
@@ -12314,30 +13052,6 @@
           "recorded_at": {}
         }
       },
-      "PostDemoPingRequest": {
-        "type": "object",
-        "properties": {
-          "note": {
-            "type": "string"
-          }
-        },
-        "additionalProperties": false
-      },
-      "PostDemoPingResponse": {
-        "type": "object",
-        "properties": {
-          "module": {},
-          "ok": {
-            "type": "boolean"
-          },
-          "ping": {}
-        },
-        "required": [
-          "module",
-          "ok",
-          "ping"
-        ]
-      },
       "PostDependenciesResponse": {
         "type": "object",
         "properties": {
@@ -12420,9 +13134,31 @@
           "recheck": {}
         },
         "required": [
-          "ok",
-          "pr",
-          "message"
+          "ok",
+          "pr",
+          "message"
+        ]
+      },
+      "PostGithubReposRequest": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string",
+            "maxLength": 100
+          }
+        },
+        "required": [
+          "name"
+        ],
+        "additionalProperties": false
+      },
+      "PostGithubReposResponse": {
+        "type": "object",
+        "properties": {
+          "repo": {}
+        },
+        "required": [
+          "repo"
         ]
       },
       "PostGoalsIdArchiveResponse": {
@@ -13048,23 +13784,6 @@
           "linked"
         ]
       },
-      "PostMeArtKeyStorageInitResponse": {
-        "type": "object",
-        "properties": {
-          "ok": {
-            "type": "boolean"
-          },
-          "created": {},
-          "reason": {},
-          "storage_configured": {}
-        },
-        "required": [
-          "ok",
-          "created",
-          "reason",
-          "storage_configured"
-        ]
-      },
       "PostMemoryBuildersBuilderIdBfgWriteRequest": {
         "type": "object",
         "properties": {
@@ -13172,6 +13891,79 @@
           "submission"
         ]
       },
+      "PostMyProjectsClientIdLeaveResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "left": {}
+        },
+        "required": [
+          "ok",
+          "left"
+        ]
+      },
+      "PostMyProjectsInvitesClientIdAcceptResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "accepted": {
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "ok",
+          "accepted"
+        ]
+      },
+      "PostMyProjectsInvitesClientIdDeclineResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "accepted": {
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "ok",
+          "accepted"
+        ]
+      },
+      "PostMyProjectsJoinRequest": {
+        "type": "object",
+        "properties": {
+          "origin": {
+            "type": "string",
+            "maxLength": 512
+          }
+        },
+        "required": [
+          "origin"
+        ],
+        "additionalProperties": false
+      },
+      "PostMyProjectsJoinResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "status": {},
+          "project": {},
+          "message": {}
+        },
+        "required": [
+          "ok",
+          "status",
+          "project",
+          "message"
+        ]
+      },
       "PostOverrideRequestsIdDecideRequest": {
         "type": "object",
         "properties": {
@@ -13188,6 +13980,59 @@
         ],
         "additionalProperties": false
       },
+      "PostProjectsInviteRequest": {
+        "type": "object",
+        "properties": {
+          "client_id": {
+            "type": "string",
+            "maxLength": 200
+          },
+          "github_login": {
+            "type": "string",
+            "maxLength": 200
+          }
+        },
+        "required": [
+          "client_id",
+          "github_login"
+        ],
+        "additionalProperties": false
+      },
+      "PostProjectsRequest": {
+        "type": "object",
+        "properties": {
+          "origin": {
+            "type": "string",
+            "maxLength": 512
+          },
+          "name": {
+            "type": "string",
+            "maxLength": 200
+          },
+          "tagline": {
+            "type": "string",
+            "maxLength": 400
+          },
+          "art_url": {
+            "type": "string",
+            "maxLength": 2048
+          }
+        },
+        "required": [
+          "origin",
+          "name"
+        ],
+        "additionalProperties": false
+      },
+      "PostProjectsResponse": {
+        "type": "object",
+        "properties": {
+          "project": {}
+        },
+        "required": [
+          "project"
+        ]
+      },
       "PostProvisioningInstancesIdForceTeardownResponse": {
         "type": "object",
         "properties": {
@@ -13433,6 +14278,172 @@
           "token_reward": {}
         }
       },
+      "PostSsoActivityRollupRequest": {
+        "type": "object",
+        "properties": {
+          "client_id": {
+            "type": "string",
+            "maxLength": 200
+          },
+          "client_secret": {
+            "type": "string",
+            "maxLength": 512
+          },
+          "github_id": {
+            "$ref": "#/components/schemas/StringifiableId"
+          },
+          "credits": {
+            "type": "number"
+          },
+          "tasks_shipped": {
+            "type": "number"
+          },
+          "karma": {
+            "type": "number"
+          },
+          "rank": {
+            "type": "string",
+            "maxLength": 32
+          },
+          "disciplines": {}
+        },
+        "required": [
+          "client_id",
+          "client_secret",
+          "github_id"
+        ],
+        "additionalProperties": false
+      },
+      "PostSsoActivityRollupResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "ok"
+        ]
+      },
+      "PostSsoDevicePollRequest": {
+        "type": "object",
+        "properties": {
+          "device_code": {
+            "type": "string",
+            "maxLength": 512
+          }
+        },
+        "required": [
+          "device_code"
+        ],
+        "additionalProperties": false
+      },
+      "PostSsoDeviceStartRequest": {
+        "type": "object",
+        "properties": {
+          "origin": {
+            "type": "string",
+            "maxLength": 512
+          }
+        },
+        "required": [
+          "origin"
+        ],
+        "additionalProperties": false
+      },
+      "PostSsoMembershipCheckInRequest": {
+        "type": "object",
+        "properties": {
+          "client_id": {
+            "type": "string",
+            "maxLength": 200
+          },
+          "client_secret": {
+            "type": "string",
+            "maxLength": 512
+          },
+          "github_id": {
+            "$ref": "#/components/schemas/StringifiableId"
+          },
+          "github_login": {
+            "type": "string",
+            "maxLength": 200
+          },
+          "display_name": {
+            "type": "string",
+            "maxLength": 400
+          },
+          "avatar_url": {
+            "type": "string",
+            "maxLength": 2048
+          },
+          "role": {
+            "type": "string",
+            "maxLength": 16
+          }
+        },
+        "required": [
+          "client_id",
+          "client_secret",
+          "github_id",
+          "github_login"
+        ],
+        "additionalProperties": false
+      },
+      "PostSsoMembershipCheckInResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "ok"
+        ]
+      },
+      "PostSsoTokenRequest": {
+        "type": "object",
+        "properties": {
+          "client_id": {
+            "type": "string",
+            "maxLength": 200
+          },
+          "client_secret": {
+            "type": "string",
+            "maxLength": 512
+          },
+          "code": {
+            "type": "string",
+            "maxLength": 512
+          },
+          "redirect_uri": {
+            "type": "string",
+            "maxLength": 2048
+          }
+        },
+        "required": [
+          "client_id",
+          "client_secret",
+          "code",
+          "redirect_uri"
+        ],
+        "additionalProperties": false
+      },
+      "PostSsoTokenResponse": {
+        "type": "object",
+        "properties": {
+          "github_id": {},
+          "github_login": {},
+          "display_name": {},
+          "avatar_url": {}
+        },
+        "required": [
+          "github_id",
+          "github_login",
+          "display_name",
+          "avatar_url"
+        ]
+      },
       "PostTasksIdAbandonRequest": {
         "type": "object",
         "properties": {
@@ -13896,19 +14907,6 @@
           "criteria"
         ]
       },
-      "PutMeArtKeyOwnRequest": {
-        "type": "object",
-        "properties": {
-          "key": {
-            "type": "string",
-            "maxLength": 400
-          }
-        },
-        "required": [
-          "key"
-        ],
-        "additionalProperties": false
-      },
       "PutTasksIdDependenciesRequest": {
         "type": "object",
         "properties": {
@@ -14060,9 +15058,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 230,
-  "x-schema-count": 250,
+  "x-endpoint-count": 245,
+  "x-schema-count": 273,
   "x-undocumented-bodies": 8,
-  "x-response-schemas": 170,
+  "x-response-schemas": 184,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }