@bongos/core 1.19.1023 → 1.19.1025

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.1023",
-  "core_contract": "1.19.1023",
-  "source_commit": "f1709fb9168ad999a9e19c281031097e2c5e7d66",
+  "core_version": "1.19.1025",
+  "core_contract": "1.19.1025",
+  "source_commit": "e6dd17dfbd6585712f80a1bbb7e194cf54542795",
   "source_ref": "HEAD",
-  "built_at": "2026-09-25T19:19:01.574Z",
+  "built_at": "2026-09-25T20:23:11.014Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 529,
     "agent_docs_stubbed": 26,
-    "functional_verbatim": 2443,
+    "functional_verbatim": 2446,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 2998,
-  "tree_sha256": "764165bfe692a37fd3627ba40e362a91f07442b09312055bb843444b529412aa",
+  "file_count": 3001,
+  "tree_sha256": "ba33f498c14c47e5a4a4541b8045beb0ab60673a9e46351106ee1361c284b179",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -352,12 +352,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "6a43336383cc459524609f6dee6fa8dc5af5f53393869ca09964ab37bda2a9f9"
+      "sha256": "d4c80c7f38f3f8a86fb15941c8c8c15810fb692223492eec77853c61a6d783d8"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "b63d94b37df14283ea04512e281163c1f027995c08b5f052aa2f062d7632a686"
+      "sha256": "03d3f40e2e64dcf322de71b3720b37c890a638558d1741cb2858cf110ee15b5d"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -367,17 +367,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "01e49d4c9dd29cd7c312b637e013dcbb69e9bb0f12aee3ff6b5aaf5caeb1539a"
+      "sha256": "8df1123cbc8b830697413b873bfdfecde20664433429ee2d106aacdb5eb7e415"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "0ccdf87aa5ce77f34dde4ed9d7a3f9ab38aee7be4c3d81f6ab64311cc68feefc"
+      "sha256": "a0c55c50fe57c803c704e7bf1d1256ee108c6a9f0c8182ff3c820e2b5d1cba4c"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "29f5d849eb791886672584d5f258b306a237c774b83b33b68e7ad4990cb68ead"
+      "sha256": "db6d60ae1bcaaa086ccb7977fcc76a256ce662eba0632b25cc748535223eafe0"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -1562,7 +1562,7 @@
     {
       "path": "docs/adr/0213-platform-terms-acceptance-is-the-hubs-own-witness.md",
       "mode": "0000644",
-      "sha256": "6c30a59cb4b4b5ed378e7103e1cdd8ecbdf135e4a1d51ce8a11787b40d4ec159"
+      "sha256": "039edd287f0aeb2d64e85bddad1c83436357b77ce087d1dbd5f6d19885303f75"
     },
     {
       "path": "docs/adr/0214-canonical-profile-url-one-resolver-dark-until-the-page-exists.md",
@@ -2192,12 +2192,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "cedc612f059cc0923f438b9836d7b90e249aca8245b8864dbda094752df258a0"
+      "sha256": "609fbffb855fff4a18e58ab3bdac8090605b3679efb893b363c0f1cace9aa8e5"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "3f65db9aa5ef67ceed4ecca08e083208a44413e7e69363f26ca60ea48b905005"
+      "sha256": "039b34432475e7f2044c9ef4926ec3f54de684e36b9e0a37544151b2c495b91f"
     },
     {
       "path": "docs/architecture.md",
@@ -2222,12 +2222,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "5226255c04e9a3207de9e4cf9712cdcaf2a3fde799d76d8ed768497a271ad91b"
+      "sha256": "822455e5a92b4577b42d44f16dcf2c4aee55256672680897b71df37e76cbe543"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "bf7384ef44efc40d16be639400157640c5f1a4dc746bf32bb1f80b43004ceed9"
+      "sha256": "c4cbe7f0aeaec884327a788d14737c626400c224f5e1091533597b3981cb0129"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2757,7 +2757,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "a0b4b728b9f072ef594daec6b954009202a8ed79341de077d8a7f447ebbbb7d7"
+      "sha256": "c8291c65538266b70d72d2fa410a20061430d526e2efdcd2f8d5617c38ea8cc4"
     },
     {
       "path": "docs/modules-contract.md",
@@ -3884,6 +3884,11 @@
       "mode": "0000644",
       "sha256": "040de8cddf1a8740ac7e97fb35572e56494a5a3b51ce8873887f71759f6a3b9d"
     },
+    {
+      "path": "migrations/core_255_access_requests_invite_kind.sql",
+      "mode": "0000644",
+      "sha256": "14924b5db9c9620e17a4cd5baa4c7821aa97db3d11711831faeb45fbfb035213"
+    },
     {
       "path": "modules/agents/CLAUDE.md",
       "mode": "0000644",
@@ -4422,7 +4427,7 @@
     {
       "path": "modules/government/catalog.js",
       "mode": "0000644",
-      "sha256": "65ff329fd00c94ed4571d852079515e173339ee070d5489ce10d5cabe219b20b"
+      "sha256": "6d1895c276755d7a3cbec780f35e20ee9cc6cfee5557a48142bc5dcffb9d3f19"
     },
     {
       "path": "modules/government/config.js",
@@ -5207,7 +5212,7 @@
     {
       "path": "modules/hall-ui/public/people.html",
       "mode": "0000644",
-      "sha256": "4da8ca7dc9321f3d7303332e78ec9caeb6ea65a71fa670b20f593874514585ac"
+      "sha256": "531b5b44da9f8310cdac68f7028651b9faba93537f46a7d62d2d91b534cb60ee"
     },
     {
       "path": "modules/hall-ui/public/people.js",
@@ -6427,7 +6432,7 @@
     {
       "path": "modules/onboarding/routes/access-requests.js",
       "mode": "0000644",
-      "sha256": "301c45e4f72024c7b1507245a9fccf4388224bb544ad747712c69155d41d1861"
+      "sha256": "b2f786d816222879ec37670688c0a291c81a9552584b5045616eb4f3ead7fe33"
     },
     {
       "path": "modules/onboarding/routes/onboarding.js",
@@ -6472,7 +6477,7 @@
     {
       "path": "modules/platform-identity/connection-suggestions.js",
       "mode": "0000644",
-      "sha256": "73beb598013b1ddd6364b2c97f1b346505c9c909934d8b3b9fc3b3117ad09786"
+      "sha256": "4224c3706dfdebe63ddf769a056c5039707218e7502b8409cd2e882da702c9c5"
     },
     {
       "path": "modules/platform-identity/connections.js",
@@ -6614,6 +6619,11 @@
       "mode": "0000644",
       "sha256": "f119d0d4f8775e2ec1e0e30702ba9564d7f4f712853751e2e66bb3c103cf1da4"
     },
+    {
+      "path": "modules/platform-identity/migrations/platform_identity_024_terms_grandfathered.sql",
+      "mode": "0000644",
+      "sha256": "1a1a2a8861a11e93da73db38362353409edf988fdb7b1c025c1030acb29da937"
+    },
     {
       "path": "modules/platform-identity/module.json",
       "mode": "0000644",
@@ -6717,7 +6727,7 @@
     {
       "path": "modules/platform-identity/terms-acceptance.js",
       "mode": "0000644",
-      "sha256": "85aa2a81a80d09031282926bc5f63cef25e85630233fcbd7899ba783b2a62d59"
+      "sha256": "e72b73f528149d438150e26c02e5b4b8d14a4b03941c5e917c5775506dcb0e0b"
     },
     {
       "path": "modules/platform-identity/tests/activity-snapshots.mjs",
@@ -7557,7 +7567,7 @@
     {
       "path": "modules/public-landing/public/terms.html",
       "mode": "0000644",
-      "sha256": "b39a1dc189c251abe3cc60dfb2d5fb997f1b51e577d8250460cb48522f857d80"
+      "sha256": "440fb5159b45e03c5743c93068a54f81ad1a67e9d863a32b15a0cc554024585a"
     },
     {
       "path": "modules/security/CLAUDE.md",
@@ -8312,12 +8322,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "37992bffa6073d8ed94d8e960640e73f6bd128bb24787b50253a1e393b8c91b0"
+      "sha256": "3eb67ddb7f1adcb7dec12c3d29810c79d16d0e8b80016c77877585f249f0dfce"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "97df5c02b04233580f36c9bd8c0bff0be8d0984b148b05ef45f8039ad4a50600"
+      "sha256": "bf055e4e0c223b3a93207d5404f9e9d2b90542aad0186708ac4cc1f17efb8d7b"
     },
     {
       "path": "public-docs/index.html",
@@ -9442,7 +9452,7 @@
     {
       "path": "scripts/gds/run-unit-tests.js",
       "mode": "0000644",
-      "sha256": "42c429a77230af4722a5a5bf23d8a75582e792c5e8c9df753327aad4423300b7"
+      "sha256": "a10caf1133a199539cb2073e9982ca5c281309e486249bed15949e7b2e7d7b82"
     },
     {
       "path": "scripts/gds/runner-drift.js",
@@ -10067,7 +10077,7 @@
     {
       "path": "src/bongos/auth-github.js",
       "mode": "0000644",
-      "sha256": "e2afb2d5f5459ed307be4e6e2d57cbd283b97794f8d1a99f4df5673000270681"
+      "sha256": "9d556b0c6b4891be1aee578daf7bd62347f1dc77fe20af7ffcaeb9f61845c141"
     },
     {
       "path": "src/bongos/auth-idp.js",
@@ -10097,7 +10107,7 @@
     {
       "path": "src/bongos/db-kernel.js",
       "mode": "0000644",
-      "sha256": "dd16328ac569aa8c6af09b2700957634e2c6d368d291b015a74a8dc452dc340a"
+      "sha256": "0e346143160d09d1c9bb5e1977551222bf8d33dce9a1880537b17b1d714f719e"
     },
     {
       "path": "src/bongos/db.js",
@@ -10362,7 +10372,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "97d9786da4519b10d5025fded13c1e8c765f1510f1c7df3ba101f809bb95639c"
+      "sha256": "daef476e1d1b35682eb926967b1ed39b6fe18308ebca71c6111a87ac077f5f1a"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -10437,7 +10447,7 @@
     {
       "path": "tests/access_requests_invite.mjs",
       "mode": "0000644",
-      "sha256": "7229451a9a9cb74049b7fea808458423d8a2754c213e6974593811cd1b4322b1"
+      "sha256": "4148ce39a074fa16cb6360027a7fd6c1ea9b26cea6423209591ee45f23ec894f"
     },
     {
       "path": "tests/accessibility_replay.mjs",
@@ -10637,7 +10647,7 @@
     {
       "path": "tests/application_lifecycle.mjs",
       "mode": "0000644",
-      "sha256": "975389846058a123344a6cd56d2355b606c86e2ce59a48981782f61204090096"
+      "sha256": "c13c0a4b5244b72ec093a2d80029bc3b1ceb8f0828aaad69274054be9e927afe"
     },
     {
       "path": "tests/architect.mjs",
@@ -10742,7 +10752,7 @@
     {
       "path": "tests/auth_inactive_builder.mjs",
       "mode": "0000644",
-      "sha256": "c394d1ec296d556c35f5ce8158bcc5d355774cbd81160349dee5a495a4a6d6ab"
+      "sha256": "521e4175ec619d578fe18dc23395e384f9f35be747918ed04e7d479cb0166da8"
     },
     {
       "path": "tests/auth_page_gate.mjs",
@@ -11252,12 +11262,12 @@
     {
       "path": "tests/connection_suggestions.mjs",
       "mode": "0000644",
-      "sha256": "c85a26355952c1d201838dbe569727c54d81d79d62d9e9d784182bc60fb743f7"
+      "sha256": "598201479b8f32a809da06c4381ed842ee981cb67ef829bf9616a831be506e6d"
     },
     {
       "path": "tests/connections_api.mjs",
       "mode": "0000644",
-      "sha256": "377a1cb8cc9eaeeb86bd033a02a8f7ecfd499ceb0d09718533a3a7bb4ed014ec"
+      "sha256": "691eab40b511c32a25dbc9941912128bb4311359276cec3aefaa0c24dfa8409a"
     },
     {
       "path": "tests/connections_ownership.mjs",
@@ -12417,7 +12427,7 @@
     {
       "path": "tests/handle_machinery.mjs",
       "mode": "0000644",
-      "sha256": "209c1ebf3e57c6fed05eda28ef57033c7ed7da3e1a41670fc9aae05497b29698"
+      "sha256": "ca7fbfcca238b4ffed576ca1b3fca5d848f4d9d3eab8321353325d54ff505810"
     },
     {
       "path": "tests/help_requests.mjs",
@@ -13327,7 +13337,7 @@
     {
       "path": "tests/people_name_only.mjs",
       "mode": "0000644",
-      "sha256": "a94562e7680e7153b065fa5b152e13d9880de477e7e9f2a4c9b8de0224266ead"
+      "sha256": "52885d21c83ba02f0eece097529df861ac2e01c8def1a77d7e55a07638cc076d"
     },
     {
       "path": "tests/permission_path.mjs",
@@ -13407,7 +13417,7 @@
     {
       "path": "tests/profile_connections_ui.mjs",
       "mode": "0000644",
-      "sha256": "d2c415317244457f575c985fff3ba2645fc5da97253357eaecd373dba33b14f9"
+      "sha256": "566e7a937337f753d45f32e1cdc8b1c63e76ab2bfadedfde46c669cddad543a0"
     },
     {
       "path": "tests/profile_fields.mjs",
@@ -13427,7 +13437,7 @@
     {
       "path": "tests/profile_rollup_consent.mjs",
       "mode": "0000644",
-      "sha256": "d5849ac1b2c25c4055994a50e0698ff306a393556cd304ad8c4d8a2ce9438e88"
+      "sha256": "dcda4f837c6c0122901a67edadecf9eea8989515367fd39a5c9a4afa82fd18a1"
     },
     {
       "path": "tests/profile_route.mjs",
@@ -14712,7 +14722,12 @@
     {
       "path": "tests/terms_acceptance.mjs",
       "mode": "0000644",
-      "sha256": "404bc664d8007b00077dd897642499ab5413c40c8d107dd1f20bdf387abcecbb"
+      "sha256": "3dba45ebddb94b2f7d656f53c2d303cda08455738df42e9be78d75d41b2bae2e"
+    },
+    {
+      "path": "tests/terms_grandfather_db.mjs",
+      "mode": "0000644",
+      "sha256": "bfaac6724700e7e2bbe2914bb3c456fa1b0fd25990764b15008f187a40d4c791"
     },
     {
       "path": "tests/test_path_guard.mjs",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 418 operations across 63 resource groups
+- 419 operations across 63 resource groups
 
 ## Use it from your project
 

package/clients/bongos-client/bongos-client.global.js

@@ -93,6 +93,8 @@ function createClient(opts = {}) {
       patchAccessRequestsId: (args) => request("PATCH", "/access-requests/{id}", { hasBody: true }, args),
       // POST /access-requests/invite — rank: archon — POST /access-requests/invite
       postAccessRequestsInvite: (args) => request("POST", "/access-requests/invite", { hasBody: true }, args),
+      // GET /access-requests/invites — rank: archon — GET /access-requests/invites
+      getAccessRequestsInvites: (args) => request("GET", "/access-requests/invites", { hasBody: false }, args),
       // GET /access-requests/status — rank: public — GET /access-requests/status
       getAccessRequestsStatus: (args) => request("GET", "/access-requests/status", { hasBody: false }, args),
     },

package/clients/bongos-client/index.cjs

@@ -92,6 +92,8 @@ function createClient(opts = {}) {
       patchAccessRequestsId: (args) => request("PATCH", "/access-requests/{id}", { hasBody: true }, args),
       // POST /access-requests/invite — rank: archon — POST /access-requests/invite
       postAccessRequestsInvite: (args) => request("POST", "/access-requests/invite", { hasBody: true }, args),
+      // GET /access-requests/invites — rank: archon — GET /access-requests/invites
+      getAccessRequestsInvites: (args) => request("GET", "/access-requests/invites", { hasBody: false }, args),
       // GET /access-requests/status — rank: public — GET /access-requests/status
       getAccessRequestsStatus: (args) => request("GET", "/access-requests/status", { hasBody: false }, args),
     },

package/clients/bongos-client/index.d.ts

@@ -19,6 +19,7 @@ export interface DeleteTasksIdCriteriaCriterionIdResponse { ok: boolean; removed
 export interface DeleteTasksIdDependenciesDepIdResponse { ok: boolean; removed: unknown }
 export interface DeleteTasksIdVisualResponse { ok: boolean; visual_url: unknown }
 export interface ErrorEnvelope { error: ApiErrorObject }
+export interface GetAccessRequestsInvitesResponse { invites: unknown }
 export interface GetAccessRequestsResponse { requests: unknown }
 export interface GetAccessRequestsStatusResponse { github_login: unknown; status: unknown; admitted: unknown }
 export interface GetAchievementsResponse { achievements: unknown }
@@ -211,7 +212,7 @@ export interface PatchSpecialitiesIdResponse { speciality: unknown }
 export interface PatchTaskRecommendationsIdRequest { status: "declined" | "withdrawn" }
 export interface PatchTaskRecommendationsIdResponse { ok: boolean; recommendation: unknown }
 export interface PatchTasksIdRequest { kind?: string; discipline?: string; requires_rank?: string; module_key?: string; goal_id?: number; parent_task_id?: StringifiableId; parallel_safe?: unknown; newcomer_friendly?: boolean; xenos_claimable?: boolean; security_sensitive?: boolean; automation_tag?: string; needs_migration?: boolean; description?: string; title?: string; priority?: unknown; value_summary?: string; status?: unknown }
-export interface PostAccessRequestsInviteRequest { github_login: string }
+export interface PostAccessRequestsInviteRequest { github_login: string; note?: string }
 export interface PostAccessRequestsInviteResponse { ok: boolean; already_invited?: boolean; github_login?: unknown; request?: unknown }
 export interface PostAccessRequestsRequest { github_login: string; display_name?: string; note?: string }
 export interface PostAccessRequestsResponse { ok: boolean; request?: unknown; already_pending?: boolean }
@@ -481,6 +482,8 @@ export interface BongosClient {
     patchAccessRequestsId(args: RequestArgs & { body: PatchAccessRequestsIdRequest }): Promise<PatchAccessRequestsIdResponse>;
     /** POST /access-requests/invite — rank: archon */
     postAccessRequestsInvite(args: RequestArgs & { body: PostAccessRequestsInviteRequest }): Promise<PostAccessRequestsInviteResponse>;
+    /** GET /access-requests/invites — rank: archon */
+    getAccessRequestsInvites(args?: RequestArgs): Promise<GetAccessRequestsInvitesResponse>;
     /** GET /access-requests/status — rank: public */
     getAccessRequestsStatus(args?: RequestArgs): Promise<GetAccessRequestsStatusResponse>;
   };

package/clients/bongos-client/index.mjs

@@ -89,6 +89,8 @@ export function createClient(opts = {}) {
       patchAccessRequestsId: (args) => request("PATCH", "/access-requests/{id}", { hasBody: true }, args),
       // POST /access-requests/invite — rank: archon — POST /access-requests/invite
       postAccessRequestsInvite: (args) => request("POST", "/access-requests/invite", { hasBody: true }, args),
+      // GET /access-requests/invites — rank: archon — GET /access-requests/invites
+      getAccessRequestsInvites: (args) => request("GET", "/access-requests/invites", { hasBody: false }, args),
       // GET /access-requests/status — rank: public — GET /access-requests/status
       getAccessRequestsStatus: (args) => request("GET", "/access-requests/status", { hasBody: false }, args),
     },

package/docs/adr/0213-platform-terms-acceptance-is-the-hubs-own-witness.md

@@ -45,6 +45,8 @@ Accounts that are already `active` get `terms_accepted_at IS NULL`, because no p
 
 This is ADR 0171 D3's own backfill rule applied to its own sentence (*"all existing accounts start provisional and lazily upgrade on their next hub-session authorize"*), and it is what P03 ratified ([task 1002799](https://cloudbongos.com/builders#/task/1002799), owner, 2026-08-16): no backfill activation, on the rationale that a builder passes through the hub anyway. **This is the one consequence with a visible product effect, and it is on [blocker 1000123](https://cloudbongos.com/builders#/blocker/1000123) for the owner** — grandfathering is one line in the migration if they prefer it.
 
+> **Amended 2026-09-25 ([task 1003360](https://cloudbongos.com/builders#/task/1003360) / `<redacted>`) — D4 is reversed, D2 narrowed.** The owner chose to grandfather ([blocker 1000123](https://cloudbongos.com/builders#/blocker/1000123); the decision is recorded in [ADR 0217](0217-rank-gates-inviting-not-viewing.md) D3) and to mark it. A third column, `terms_accepted_source` (`signin` | `grandfathered`, CHECK-constrained), records HOW an acceptance was given. Migration 024 marks every acceptance already on record `signin`, then stamps each `active` account without one as `grandfathered` at the moment it ran, with the version then in force; it runs once, in the transaction that creates the column, and never touches `profile_state`. D2 now reads "the first acceptance **a human gave** stands": the conflict branch still COALESCEs, except that a `grandfathered` row is replaced outright, so a grandfather gives way to its owner's own acceptance at their next hub sign-in, and every sign-in sets the source to `signin`. The replacement is keyed on the marker, not on "no `signin` recorded": an acceptance with no source (the pre-024 code can write one in the deploy window) is a real sign-in and keeps its date. No runtime code writes `grandfathered`; `tests/terms_acceptance.mjs` fails any server file that does, and any second acceptance write site. D3's predicate is unchanged — it asks whether an acceptance exists, never its source — so the ledger distinguishes the two and visibility does not. `/terms` says so.
+
 ### D5 — Re-acceptance on a later revision is out of scope, and visible rather than silent
 
 Because the version is recorded and never overwritten, publishing a new `TERMS_VERSION` leaves every row naming the text it actually agreed to, so the platform can see who has not accepted the new one. What to *do* about that — re-prompt, re-gate, or nothing — is a product flow, not a storage shape, and is not built here.

package/docs/api/openapi.json

@@ -360,7 +360,7 @@
           "access-requests"
         ],
         "summary": "POST /access-requests/invite",
-        "description": "POST /access-requests/invite — an Archon admits a GitHub username BEFORE any request exists (task 1003044): the only way in on an invite-only project, where the public POST refuses, and a shortcut on an apply one. It writes the same access_request row the sign-in gate reads (status 'invited' — hasInvitedAccessRequest), so nothing new is consulted at sign-in; a pending request for that login is resolved in place rather than duplicated. Two Archons inviting the same login at once can each insert a row (the unique index covers pending only): harmless — the gate reads \"any invited row\" — and it shows as two lines in the invited history, so no lock is taken. body: { github_login }. 201 with a new row; 200 with the row when a pending request was resolved; 200 already_invited when an invite already stands; 409 already_member when they have an account. rank: archon — the same gate as resolving a request.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `access_request.review` (all required).",
+        "description": "POST /access-requests/invite — an Archon admits a GitHub username BEFORE any request exists (task 1003044): the only way in on an invite-only project, where the public POST refuses, and a shortcut on an apply one. It writes the same access_request row the sign-in gate reads (status 'invited' — hasInvitedAccessRequest), so nothing new is consulted at sign-in; a pending request for that login is resolved in place rather than duplicated. Two Archons inviting the same login at once can each insert a row (the unique index covers pending only): harmless — the gate reads \"any invited row\" — and it shows as two lines in the invited history, so no lock is taken. A fresh row is marked kind='invite' with created_by = the sender (a rescind overwrites resolved_by) and the optional note as the inviter's words. A pending request resolved in place stays an application with its applicant's own note (ADR 0335 D2.1–D2.3; task 1002814). body: { github_login, note? }. 201 with a new row; 200 with the row when a pending request was resolved; 200 already_invited when an invite already stands; 409 already_member when they have an account. rank: archon — the same gate as resolving a request.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `access_request.review` (all required).",
         "x-rank": "archon",
         "x-source": "modules/onboarding/routes/access-requests.js",
         "x-permissions": [
@@ -405,6 +405,47 @@
         ]
       }
     },
+    "/access-requests/invites": {
+      "get": {
+        "operationId": "get_access_requests_invites",
+        "tags": [
+          "access-requests"
+        ],
+        "summary": "GET /access-requests/invites",
+        "description": "GET /access-requests/invites[?mine=1] — the outstanding invites: kind='invite', still 'invited' (not rescinded), and no builder row yet (not yet accepted by signing in), each naming its sender; ?mine=1 keeps only the caller's own (ADR 0335 D2; task 1002814). Rescind one with PATCH /access-requests/:id. rank: archon — it names logins that are not members yet.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `access_request.review` (all required).",
+        "x-rank": "archon",
+        "x-source": "modules/onboarding/routes/access-requests.js",
+        "x-permissions": [
+          "access_request.review"
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetAccessRequestsInvitesResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/access-requests/status": {
       "get": {
         "operationId": "get_access_requests_status",
@@ -19471,6 +19512,15 @@
         },
         "description": "The single error shape returned by EVERY non-2xx response (ADR 0116). A caller reads `error.code`."
       },
+      "GetAccessRequestsInvitesResponse": {
+        "type": "object",
+        "properties": {
+          "invites": {}
+        },
+        "required": [
+          "invites"
+        ]
+      },
       "GetAccessRequestsResponse": {
         "type": "object",
         "properties": {
@@ -22102,6 +22152,10 @@
             "type": "string",
             "minLength": 1,
             "maxLength": 60
+          },
+          "note": {
+            "type": "string",
+            "maxLength": 500
           }
         },
         "required": [
@@ -26518,9 +26572,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 418,
-  "x-schema-count": 455,
+  "x-endpoint-count": 419,
+  "x-schema-count": 456,
   "x-undocumented-bodies": 9,
-  "x-response-schemas": 310,
+  "x-response-schemas": 311,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,19 +2,20 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 418 endpoints across 71 route files.
+> **Generated from the live route files** — the route file is authoritative. 419 endpoints across 71 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust-boundary-server-enforced-permissions.md)): `public` < `any-builder` < `metic+archon` < `archon`.
 
-## `access-requests` (5)
+## `access-requests` (6)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
 | GET | `/api/bongos/access-requests` | `archon` | — | GET /access-requests?status=pending — the owner's queue. |
 | POST | `/api/bongos/access-requests` | `public` | `github_login`, `display_name`, `note` | POST /access-requests — PUBLIC. |
 | PATCH | `/api/bongos/access-requests/:id` | `archon` | `status` | PATCH /access-requests/:id — the owner resolves a request. |
-| POST | `/api/bongos/access-requests/invite` | `archon` | `github_login` | POST /access-requests/invite — an Archon admits a GitHub username BEFORE any request exists (task 1003044): the only way in on an invite-… |
+| POST | `/api/bongos/access-requests/invite` | `archon` | `github_login`, `note` | POST /access-requests/invite — an Archon admits a GitHub username BEFORE any request exists (task 1003044): the only way in on an invite-… |
+| GET | `/api/bongos/access-requests/invites` | `archon` | — | GET /access-requests/invites[?mine=1] — the outstanding invites: kind='invite', still 'invited' (not rescinded), and no builder row yet (… |
 | GET | `/api/bongos/access-requests/status` | `public` | — | GET /access-requests/status?github_login=X — PUBLIC. |
 
 ## `achievements` (1)