@bongos/core 1.19.1024 → 1.19.1025

package/docs/copy-inventory.md

@@ -4,7 +4,7 @@
 > Deterministic on a given tree — regenerate and commit rather than hand-editing.
 > Machine-readable twin: [`copy-registry.json`](copy-registry.json).
 
-**2038 strings** across 3 surfaces · 1739 distinct pieces of copy · 2038 certain, 0 heuristic · 212 shown in more than one place.
+**2040 strings** across 3 surfaces · 1741 distinct pieces of copy · 2040 certain, 0 heuristic · 212 shown in more than one place.
 
 ## Surfaces
 
@@ -12,7 +12,7 @@
 |---|---|---|---|
 | `builders-hall` | `modules/hall-ui/public` | 102 | 1547 |
 | `status-dashboard` | `modules/status-ui/public` | 4 | 100 |
-| `landing` | `modules/public-landing/public` | 5 | 391 |
+| `landing` | `modules/public-landing/public` | 5 | 393 |
 
 ## Confidence, and why it is on every row
 
@@ -1735,7 +1735,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `7667eb552781` | certain | {…}: {…}% ({…}/{…} checks) | `modules/status-ui/public/status.js:468` |
 | `6d0d64f10bd9` | certain | ‹ earlier page | `modules/status-ui/public/index.html:321` |
 
-## `landing` — 391 strings
+## `landing` — 393 strings
 
 | id | conf | text | where |
 |---|---|---|---|
@@ -1758,7 +1758,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `afe83bbbd0d4` | certain | A non-profit, capture-resistant commons. | `modules/public-landing/public/index.html:900` |
 | `afe83bbbd0d4` | certain | A non-profit, capture-resistant commons. | `modules/public-landing/public/privacy.html:80` |
 | `afe83bbbd0d4` | certain | A non-profit, capture-resistant commons. | `modules/public-landing/public/projects.html:1406` |
-| `afe83bbbd0d4` | certain | A non-profit, capture-resistant commons. | `modules/public-landing/public/terms.html:84` |
+| `afe83bbbd0d4` | certain | A non-profit, capture-resistant commons. | `modules/public-landing/public/terms.html:85` |
 | `2363998aa2be` | certain | A pair of bongo drums | `modules/public-landing/public/projects.html:1335` |
 | `407982c3d4ff` | certain | A project as a codebase, regardless of function. | `modules/public-landing/public/index.html:762` |
 | `c3504a900b0f` | certain | A project stood up from the hub runs on the platform's servers at your request. Any cost is shown before you c | `modules/public-landing/public/terms.html:61` |
@@ -1766,6 +1766,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `bc0a81fdaa8a` | certain | A small team | `modules/public-landing/public/projects.html:1104` |
 | `632b49062d74` | certain | AI agents claim tasks and ship the code. You set the direction and the gates. | `modules/public-landing/public/index.html:722` |
 | `245d6bdb5100` | certain | About your data | `modules/public-landing/public/contact.html:58` |
+| `9b02ec8a2e21` | certain | Accounts from before these terms. | `modules/public-landing/public/terms.html:71` |
 | `e7f2a4b93816` | certain | Adopt a repo I have | `modules/public-landing/public/projects.html:1173` |
 | `d07902ff5ee1` | certain | Adopting never overwrites your files: you get a conflict pre-flight first, nothing is written until you accept | `modules/public-landing/public/projects.html:1177` |
 | `6308ff336f73` | certain | Allow repo access | `modules/public-landing/public/projects.html:1186` |
@@ -1787,7 +1788,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `bd315dd71ea7` | certain | Built by agents, on Cloud Bongos. | `modules/public-landing/public/contact.html:71` |
 | `bd315dd71ea7` | certain | Built by agents, on Cloud Bongos. | `modules/public-landing/public/index.html:900` |
 | `bd315dd71ea7` | certain | Built by agents, on Cloud Bongos. | `modules/public-landing/public/privacy.html:80` |
-| `bd315dd71ea7` | certain | Built by agents, on Cloud Bongos. | `modules/public-landing/public/terms.html:84` |
+| `bd315dd71ea7` | certain | Built by agents, on Cloud Bongos. | `modules/public-landing/public/terms.html:85` |
 | `78fd8d18ba64` | certain | Built on Cloud Bongos | `modules/public-landing/public/index.html:736` |
 | `8639cc7fcada` | certain | Buttons here ask the platform to act; each row reports only what was verified, and when. A standup keeps going | `modules/public-landing/public/projects.html:657` |
 | `101339c676b4` | certain | Buy microtransaction packages of code modules on our marketplace. | `modules/public-landing/public/index.html:866` |
@@ -1810,7 +1811,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `86e7699c0737` | certain | Disconnect from Bongos entirely | `modules/public-landing/public/projects.html:954` |
 | `86e7699c0737` | certain | Disconnect from Bongos entirely | `modules/public-landing/public/projects.html:962` |
 | `47d1558b17a3` | certain | Domain you own | `modules/public-landing/public/projects.html:1257` |
-| `8d812912c392` | certain | Don't use {{productName}} to break the law, to attack this site or other people's projects, to mine, spam or o | `modules/public-landing/public/terms.html:73` |
+| `8d812912c392` | certain | Don't use {{productName}} to break the law, to attack this site or other people's projects, to mine, spam or o | `modules/public-landing/public/terms.html:74` |
 | `d919980d2ca5` | certain | Download our core code and protocols, and build instantly with your team. | `modules/public-landing/public/index.html:862` |
 | `18b6b56edc93` | certain | Each sign-in creates a session: a random token, whether it came from the browser or the command line, the brow | `modules/public-landing/public/privacy.html:54` |
 | `9a4a940d2a56` | certain | Emersonian Circles | `modules/public-landing/public/index.html:751` |
@@ -1823,7 +1824,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `478bc7f0e492` | certain | Every project you own: what it is, whether it is answering, and the controls that matter. Each row says what t | `modules/public-landing/public/projects.html:611` |
 | `1b5a6cfc494c` | certain | Example World | `modules/public-landing/public/index.html:741` |
 | `7c8dcf228e70` | certain | Extras for this project | `modules/public-landing/public/projects.html:1134` |
-| `2585087f4873` | certain | Fair use | `modules/public-landing/public/terms.html:72` |
+| `2585087f4873` | certain | Fair use | `modules/public-landing/public/terms.html:73` |
 | `fec69b6c7458` | certain | Filter by state | `modules/public-landing/public/projects.html:641` |
 | `0208e4bbba9c` | certain | Find a project | `modules/public-landing/public/index.html:892` |
 | `0208e4bbba9c` | certain | Find a project | `modules/public-landing/public/projects.html:412` |
@@ -1849,6 +1850,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `485c565b5745` | certain | How people join | `modules/public-landing/public/projects.html:801` |
 | `4b542b000afa` | certain | How this project is drawn: on the sky, in your list, at the top of this page and on its card. A planet is a | `modules/public-landing/public/projects.html:921` |
 | `9f31eaed8252` | certain | If you grant repository access while creating a project, that permission is used to create or adopt your repos | `modules/public-landing/public/privacy.html:55` |
+| `2a1b87d28a9c` | certain | If your account already existed when this version took effect, the platform accepted it on your behalf, rather | `modules/public-landing/public/terms.html:71` |
 | `607551ae732b` | certain | Invite a builder | `modules/public-landing/public/projects.html:894` |
 | `20786b02f47a` | certain | Invite builders | `modules/public-landing/public/projects.html:1305` |
 | `a1256030d879` | certain | Invite only | `modules/public-landing/public/projects.html:805` |
@@ -1891,7 +1893,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `d6314ddcc1d0` | certain | Open source | `modules/public-landing/public/index.html:900` |
 | `d6314ddcc1d0` | certain | Open source | `modules/public-landing/public/privacy.html:80` |
 | `d6314ddcc1d0` | certain | Open source | `modules/public-landing/public/projects.html:1406` |
-| `d6314ddcc1d0` | certain | Open source | `modules/public-landing/public/terms.html:84` |
+| `d6314ddcc1d0` | certain | Open source | `modules/public-landing/public/terms.html:85` |
 | `275ca0d5ce65` | certain | Open source. | `modules/public-landing/public/index.html:862` |
 | `74cdcd87d1fa` | certain | Open the map | `modules/public-landing/public/index.html:755` |
 | `a226469fc575` | certain | Optional — invite people by GitHub username. Each one gets an invitation to accept from their own projects pag | `modules/public-landing/public/projects.html:1306` |
@@ -1908,9 +1910,9 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `edab0ed81a40` | certain | Project name | `modules/public-landing/public/projects.html:1043` |
 | `9685afcf24b1` | certain | Project type | `modules/public-landing/public/projects.html:1066` |
 | `b76fce69822b` | certain | Projects aren’t created from this instance — this is a project, not the platform that hosts them. | `modules/public-landing/public/projects.html:1398` |
-| `351a61f190a6` | certain | Questions go through the | `modules/public-landing/public/terms.html:80` |
+| `351a61f190a6` | certain | Questions go through the | `modules/public-landing/public/terms.html:81` |
 | `664f5731ddc3` | certain | Read the source. | `modules/public-landing/public/privacy.html:75` |
-| `664f5731ddc3` | certain | Read the source. | `modules/public-landing/public/terms.html:79` |
+| `664f5731ddc3` | certain | Read the source. | `modules/public-landing/public/terms.html:80` |
 | `45f7bea67776` | certain | Reading the project’s settings… | `modules/public-landing/public/projects.html:787` |
 | `45f7bea67776` | certain | Reading the project’s settings… | `modules/public-landing/public/projects.html:802` |
 | `45f7bea67776` | certain | Reading the project’s settings… | `modules/public-landing/public/projects.html:821` |
@@ -1979,7 +1981,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `fb416bf1a26b` | certain | The handle names your project on the platform — and its address comes with it. Once it stands up, a few GitHub | `modules/public-landing/public/projects.html:1245` |
 | `a954f0dce9a3` | certain | The platform | `modules/public-landing/public/contact.html:65` |
 | `4fd8f5746cc5` | certain | The platform is run as a non-profit, capture-resistant commons. | `modules/public-landing/public/terms.html:50` |
-| `198f1eac5a95` | certain | The platform stores the date you accepted these terms, and which version, on your account. It is written only  | `modules/public-landing/public/terms.html:70` |
+| `666291db6ac3` | certain | The platform stores the date you accepted these terms, and which version, on your account. It is written by si | `modules/public-landing/public/terms.html:70` |
 | `20fcebaa85c4` | certain | The project hub needs JavaScript — the map, your projects, and starting a new one all live here. You can read  | `modules/public-landing/public/projects.html:472` |
 | `4a740b5afe73` | certain | The project map | `modules/public-landing/public/projects.html:482` |
 | `345fec12e5d8` | certain | The repository | `modules/public-landing/public/contact.html:50` |
@@ -1988,13 +1990,13 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `62377d81c52c` | certain | The six most recent, straight from the ledger. | `modules/public-landing/public/index.html:798` |
 | `2b193468bbb5` | certain | These are the same steps however a project is created — nothing here is special to this page. | `modules/public-landing/public/projects.html:1326` |
 | `02e596cc4569` | certain | These numbers describe; they do not govern. | `modules/public-landing/public/terms.html:67` |
-| `ea7de26ce2f0` | certain | These terms ship with the software and change with it. The version served on this page is the one that applies | `modules/public-landing/public/terms.html:79` |
+| `ea7de26ce2f0` | certain | These terms ship with the software and change with it. The version served on this page is the one that applies | `modules/public-landing/public/terms.html:80` |
 | `e6c859147ba4` | certain | This cannot be undone. To stop the project and keep everything, use | `modules/public-landing/public/projects.html:968` |
 | `1eff94c94b66` | certain | This files the request; the control plane does the real standup and nothing touches servers from this page. Yo | `modules/public-landing/public/projects.html:1284` |
 | `d83b739afb1e` | certain | This is a project’s management page — it answers only to the person who owns it. Sign in with GitHub to open y | `modules/public-landing/public/projects.html:691` |
 | `11c244aec5c3` | certain | This statement describes the software as it ships and changes when the software does. Revised August 2026. | `modules/public-landing/public/privacy.html:76` |
 | `e34d363aa4a4` | certain | To have your account records, or a torn-down project's data, cleared for good, ask the owner through either do | `modules/public-landing/public/contact.html:59` |
-| `1652025c0635` | certain | To the extent the law allows, the people running {{productName}} are not liable for loss arising from its use. | `modules/public-landing/public/terms.html:76` |
+| `1652025c0635` | certain | To the extent the law allows, the people running {{productName}} are not liable for loss arising from its use. | `modules/public-landing/public/terms.html:77` |
 | `9b514fce13d7` | certain | Torn down | `modules/public-landing/public/projects.html:646` |
 | `b1dd149424ea` | certain | Turn the filter off to see what everyone else is building — or start your own. | `modules/public-landing/public/projects.html:508` |
 | `6ca9f17bdfb5` | certain | Two doors. Both are public, and both are how {{productName}} itself works day to day. | `modules/public-landing/public/contact.html:47` |
@@ -2062,7 +2064,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `50d4abf343dd` | certain | buy you: anyone building on the project — you, a teammate, or an AI builder writing code — can see the exact n | `modules/public-landing/public/projects.html:882` |
 | `2735c2eb8bc6` | certain | click a project | `modules/public-landing/public/projects.html:511` |
 | `c9435fd3a8c0` | certain | contact page | `modules/public-landing/public/privacy.html:72` |
-| `c9435fd3a8c0` | certain | contact page | `modules/public-landing/public/terms.html:80` |
+| `c9435fd3a8c0` | certain | contact page | `modules/public-landing/public/terms.html:81` |
 | `cce8a45fd1ad` | certain | erase the project: it stays in your list marked | `modules/public-landing/public/projects.html:954` |
 | `b55e0a82615f` | certain | every project | `modules/public-landing/public/projects.html:526` |
 | `94a3462373d2` | certain | five questions and a home | `modules/public-landing/public/index.html:692` |
@@ -2080,7 +2082,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `54b2ecb33701` | certain | or enter it manually | `modules/public-landing/public/projects.html:1187` |
 | `af9fcc3a4124` | certain | paid only once it lands | `modules/public-landing/public/index.html:788` |
 | `7a053a51ee5f` | certain | privacy page | `modules/public-landing/public/contact.html:59` |
-| `7a053a51ee5f` | certain | privacy page | `modules/public-landing/public/terms.html:80` |
+| `7a053a51ee5f` | certain | privacy page | `modules/public-landing/public/terms.html:81` |
 | `370e51d318b8` | certain | project: its own repository, its own home on the web, and a hall of AI builders who do the building. You set t | `modules/public-landing/public/projects.html:1000` |
 | `646b1e72622d` | certain | read by a panel | `modules/public-landing/public/index.html:778` |
 | `cb0b8873d563` | certain | repo — projects here are open by design. Want private code? Create the repo yourself on GitHub and “adopt” it  | `modules/public-landing/public/projects.html:1205` |

package/docs/copy-registry.json

@@ -3,9 +3,9 @@
   "generator": "scripts/gds/copy-inventory.js",
   "goal": 1000074,
   "counts": {
-    "strings": 2038,
-    "unique_ids": 1739,
-    "certain": 2038,
+    "strings": 2040,
+    "unique_ids": 1741,
+    "certain": 2040,
     "heuristic": 0,
     "duplicate_ids": 212
   },
@@ -23,7 +23,7 @@
     "landing": {
       "at": "modules/public-landing/public",
       "files": 5,
-      "strings": 391
+      "strings": 393
     }
   },
   "blind_spots": [
@@ -153,7 +153,7 @@
         "modules/public-landing/public/index.html:900",
         "modules/public-landing/public/privacy.html:80",
         "modules/public-landing/public/projects.html:1406",
-        "modules/public-landing/public/terms.html:84"
+        "modules/public-landing/public/terms.html:85"
       ]
     },
     {
@@ -179,7 +179,7 @@
         "modules/public-landing/public/index.html:900",
         "modules/public-landing/public/privacy.html:80",
         "modules/public-landing/public/projects.html:1406",
-        "modules/public-landing/public/terms.html:84"
+        "modules/public-landing/public/terms.html:85"
       ]
     },
     {
@@ -216,7 +216,7 @@
         "modules/public-landing/public/contact.html:71",
         "modules/public-landing/public/index.html:900",
         "modules/public-landing/public/privacy.html:80",
-        "modules/public-landing/public/terms.html:84"
+        "modules/public-landing/public/terms.html:85"
       ]
     },
     {
@@ -1412,7 +1412,7 @@
       "occurrences": 2,
       "at": [
         "modules/public-landing/public/privacy.html:75",
-        "modules/public-landing/public/terms.html:79"
+        "modules/public-landing/public/terms.html:80"
       ]
     },
     {
@@ -1842,7 +1842,7 @@
       "occurrences": 2,
       "at": [
         "modules/public-landing/public/privacy.html:72",
-        "modules/public-landing/public/terms.html:80"
+        "modules/public-landing/public/terms.html:81"
       ]
     },
     {
@@ -1972,7 +1972,7 @@
       "occurrences": 2,
       "at": [
         "modules/public-landing/public/contact.html:59",
-        "modules/public-landing/public/terms.html:80"
+        "modules/public-landing/public/terms.html:81"
       ]
     },
     {
@@ -16346,7 +16346,7 @@
       "surface": "landing",
       "text": "A non-profit, capture-resistant commons.",
       "file": "modules/public-landing/public/terms.html",
-      "line": 84,
+      "line": 85,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -16413,6 +16413,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "9b02ec8a2e21",
+      "surface": "landing",
+      "text": "Accounts from before these terms.",
+      "file": "modules/public-landing/public/terms.html",
+      "line": 71,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "e7f2a4b93816",
       "surface": "landing",
@@ -16607,7 +16616,7 @@
       "surface": "landing",
       "text": "Built by agents, on Cloud Bongos.",
       "file": "modules/public-landing/public/terms.html",
-      "line": 84,
+      "line": 85,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -16814,7 +16823,7 @@
       "surface": "landing",
       "text": "Don't use {{productName}} to break the law, to attack this site or other people's projects, to mine, spam or otherwise abuse hosted resources, or to harass other builders. The owner may deactivate a builder or take a project offline for breaking these, and may set further house rules inside the hall.",
       "file": "modules/public-landing/public/terms.html",
-      "line": 73,
+      "line": 74,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -16931,7 +16940,7 @@
       "surface": "landing",
       "text": "Fair use",
       "file": "modules/public-landing/public/terms.html",
-      "line": 72,
+      "line": 73,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -17160,6 +17169,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "2a1b87d28a9c",
+      "surface": "landing",
+      "text": "If your account already existed when this version took effect, the platform accepted it on your behalf, rather than waiting for you to sign in, and dated it the day that was done. The record marks that acceptance as grandfathered, so it is never mistaken for one you gave, and your own acceptance replaces it the next time you sign in.",
+      "file": "modules/public-landing/public/terms.html",
+      "line": 71,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "607551ae732b",
       "surface": "landing",
@@ -17543,7 +17561,7 @@
       "surface": "landing",
       "text": "Open source",
       "file": "modules/public-landing/public/terms.html",
-      "line": 84,
+      "line": 85,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -17696,7 +17714,7 @@
       "surface": "landing",
       "text": "Questions go through the",
       "file": "modules/public-landing/public/terms.html",
-      "line": 80,
+      "line": 81,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -17714,7 +17732,7 @@
       "surface": "landing",
       "text": "Read the source.",
       "file": "modules/public-landing/public/terms.html",
-      "line": 79,
+      "line": 80,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -18331,9 +18349,9 @@
       "confidence": "certain"
     },
     {
-      "id": "198f1eac5a95",
+      "id": "666291db6ac3",
       "surface": "landing",
-      "text": "The platform stores the date you accepted these terms, and which version, on your account. It is written only by signing in here, and only once — signing in again does not change the original date. This is version",
+      "text": "The platform stores the date you accepted these terms, and which version, on your account. It is written by signing in here, and only once — signing in again does not change the original date. This is version",
       "file": "modules/public-landing/public/terms.html",
       "line": 70,
       "origin": "html-text",
@@ -18416,7 +18434,7 @@
       "surface": "landing",
       "text": "These terms ship with the software and change with it. The version served on this page is the one that applies; the repository keeps the history.",
       "file": "modules/public-landing/public/terms.html",
-      "line": 79,
+      "line": 80,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -18470,7 +18488,7 @@
       "surface": "landing",
       "text": "To the extent the law allows, the people running {{productName}} are not liable for loss arising from its use. It is free software, offered without warranty, as the AGPL-3.0 states.",
       "file": "modules/public-landing/public/terms.html",
-      "line": 76,
+      "line": 77,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -19082,7 +19100,7 @@
       "surface": "landing",
       "text": "contact page",
       "file": "modules/public-landing/public/terms.html",
-      "line": 80,
+      "line": 81,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -19244,7 +19262,7 @@
       "surface": "landing",
       "text": "privacy page",
       "file": "modules/public-landing/public/terms.html",
-      "line": 80,
+      "line": 81,
       "origin": "html-text",
       "confidence": "certain"
     },

package/docs/module-api-changelog.md

@@ -2526,6 +2526,8 @@ is load-bearing: the script throws rather than guess if it is missing, and
   1.19.1023 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.1022 with no explicit bump. run 36178875275. (task 1002620)
   1.19.1024 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
-        landed since 1.19.1023 with no explicit bump. run 36182843374. (task 1002620)
+        landed since 1.19.1023 with no explicit bump. run 36183325302. (task 1002620)
+  1.19.1025 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.1024 with no explicit bump. run 36185386905. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/migrations/core_255_access_requests_invite_kind.sql

@@ -0,0 +1,52 @@
+-- core_255_access_requests_invite_kind.sql — an invite can be told apart from an
+-- approved application, and keeps who sent it (task 1002814, R2 of the project
+-- admin console wave; ADR 0335 D2).
+--
+-- An archon's invite (POST /access-requests/invite) writes the same
+-- status='invited' row an approved application ends in, because that row is what
+-- the sign-in gate reads. Until now nothing else distinguished the two, and the
+-- only trace of the inviter was resolved_by_builder_id — which a rescind
+-- overwrites with whoever rescinded (ADR 0201 D4.2).
+--
+--   kind        'application' (the default — the public POST names neither
+--               column) or 'invite'. An invite that approves a pending
+--               application in place leaves it 'application': it was one.
+--   created_by  the sender, set on invite rows only; a rescind never touches it.
+--   note        no new column — on an invite row it holds the inviter's words,
+--               and `kind` says whose.
+--
+-- THE BACKFILL IS EXACT (D2.4). The invite route has always inserted with
+-- resolved_at = now() beside created_at's now() default, so every row it wrote
+-- has created_at = resolved_at, and no approved application can (it is resolved
+-- after it was filed). The one miss is an old invite later rescinded — the
+-- rescind moved resolved_at — which stays 'application' and admits nobody either
+-- way. Guarded on kind, so a replay touches nothing.
+--
+-- NOT AUTHORITY (D2.5, ADR 0016). No admission read looks at either column: an
+-- invite and an approved application admit through the identical
+-- status = 'invited' read. tests/project_admin_console_model.mjs pins that.
+--
+-- Purely additive + idempotent (IF NOT EXISTS skips the column AND its CHECK on a
+-- replay). The previous release never names either column, and its inserts take
+-- the defaults, so a rollback runs unchanged. access_requests is CORE-owned
+-- (060_access_requests), so this is a core_ migration (ADR 0108 §5); migrate.sh
+-- records the stem.
+
+BEGIN;
+
+ALTER TABLE access_requests
+  ADD COLUMN IF NOT EXISTS kind text NOT NULL DEFAULT 'application'
+    CONSTRAINT access_requests_kind_check CHECK (kind IN ('application', 'invite')),
+  ADD COLUMN IF NOT EXISTS created_by bigint REFERENCES builders(id);
+
+UPDATE access_requests
+   SET kind = 'invite', created_by = resolved_by_builder_id
+ WHERE status = 'invited' AND kind = 'application' AND created_at = resolved_at;
+
+COMMENT ON COLUMN access_requests.kind IS
+  'application (the default: filed through the public POST) or invite (sent by a builder via POST /access-requests/invite) — ADR 0335 D2. An invite that approved a pending application in place stays application. DESCRIPTIVE ONLY — no admission path reads it (ADR 0016): status=''invited'' is the whole gate.';
+
+COMMENT ON COLUMN access_requests.created_by IS
+  'The builder who sent an invite (kind=invite rows only; NULL on applications). Its own column because a rescind overwrites resolved_by_builder_id (ADR 0201 D4.2, ADR 0335 D2.2). DESCRIPTIVE ONLY — no admission path reads it (ADR 0016).';
+
+COMMIT;

package/modules/government/catalog.js

@@ -179,7 +179,7 @@ const PERMISSIONS = [
   // one of them would make this delegation self-reversible.
   { key: 'builder.status.set', system: false, floor: 'archon', guards: 'PATCH /builders/:id/status — offboard / (de)activate' },
   { key: 'auth.session.revoke', system: false, floor: 'archon', guards: 'POST /auth/revoke, /auth/revoke-all' },
-  { key: 'access_request.review', system: false, floor: 'archon', guards: 'GET/PATCH /access-requests/:id, POST /access-requests/invite — admit a builder' },
+  { key: 'access_request.review', system: false, floor: 'archon', guards: 'GET/PATCH /access-requests/:id, POST /access-requests/invite, GET /access-requests/invites — admit a builder' },
 
   // ── operational — floor metic (the working rank's review/triage/authoring) ────
   { key: 'idea.triage', system: false, floor: 'metic', guards: 'PATCH /inbox/:id' },

package/modules/onboarding/routes/access-requests.js

@@ -25,6 +25,11 @@
 //   POST /api/bongos/access-requests/invite   Archon-only — invite a GitHub
 //                                          username before any request exists:
 //                                          the way in on an invite-only project.
+//                                          The row says it is an invite (`kind`)
+//                                          and who sent it (`created_by`).
+//   GET  /api/bongos/access-requests/invites  Archon-only — the outstanding
+//                                          invites: sent, not rescinded, and not
+//                                          yet signed in (ADR 0335 D2).
 //
 // Which door a project runs — open / apply / invite_only / locked — is the
 // COMPOSITION of three owner-set knobs, read through the doorway's
@@ -300,24 +305,34 @@ module.exports = function buildAccessRequestsRouter() {
       return res.fail('bad_status', 400);
     }
     try {
+      // `kind` + `invited_by_login` let the invited history tell an invite from
+      // an approved application (ADR 0335 D2) — descriptive, like the vouch.
       const { rows } = await pool.query(
         `SELECT ar.id, ar.github_login, ar.display_name, ar.note, ar.status,
-                ar.created_at, ar.resolved_at,
+                ar.created_at, ar.resolved_at, ar.kind,
                 ar.applicant_github_id, ar.applicant_handle, ar.vouched_at,
                 (ar.applicant_github_id IS NOT NULL) AS vouched,
-                rb.github_login AS resolved_by_login
+                rb.github_login AS resolved_by_login,
+                ib.github_login AS invited_by_login
            FROM access_requests ar
            LEFT JOIN builders rb ON rb.id = ar.resolved_by_builder_id
+           LEFT JOIN builders ib ON ib.id = ar.created_by
           WHERE ar.status = $1
           ORDER BY ar.created_at DESC
           LIMIT 200`,
         [status]
       );
+      // On an invite row the stored note is the INVITER's words, but this read's
+      // `note` has always meant the applicant's (the hall quotes it as theirs),
+      // so an invite's note travels as `invite_note` instead.
+      const shaped = rows.map(({ note, ...r }) => (r.kind === 'invite'
+        ? { ...r, note: null, invite_note: note }
+        : { ...r, note, invite_note: null }));
       // C4's other half (privacy spec D7, task 1002972): the applicant's own
       // profile, as their OWN privacy rules would show it, resolved from the hub
       // at render. See attachApplicantProfiles — it is keyed on the vouch, never
       // on the login, and every row it cannot resolve carries `profile: null`.
-      res.json({ requests: await attachApplicantProfiles(rows) });
+      res.json({ requests: await attachApplicantProfiles(shaped) });
     } catch (err) {
       log.error('[gds] GET /access-requests', err);
       res.fail('list_failed', { status: 500, message: 'internal error' });
@@ -451,18 +466,25 @@ module.exports = function buildAccessRequestsRouter() {
   // Archons inviting the same login at once can each insert a row (the unique
   // index covers pending only): harmless — the gate reads "any invited row" —
   // and it shows as two lines in the invited history, so no lock is taken.
-  // body: { github_login }. 201 with a new row; 200 with the row when a pending
-  // request was resolved; 200 already_invited when an invite already stands;
-  // 409 already_member when they have an account.
+  //
+  // A fresh row is marked kind='invite' with created_by = the sender (a rescind
+  // overwrites resolved_by) and the optional note as the inviter's words. A pending
+  // request resolved in place stays an application with its applicant's own note
+  // (ADR 0335 D2.1–D2.3; task 1002814).
+  // body: { github_login, note? }. 201 with a new row; 200 with the row when a
+  // pending request was resolved; 200 already_invited when an invite already
+  // stands; 409 already_member when they have an account.
   // rank: archon — the same gate as resolving a request.
   router.post('/access-requests/invite', auth.requireBuilder, auth.requirePermission('access_request.review'), async (req, res) => {
     if (validateOrRespond(req, res, {
       github_login: { required: true, type: 'string', minLength: 1, maxLength: 60 },
+      note: { type: 'string', maxLength: 500 },
     })) return;
     const login = normalizeLogin(req.body.github_login);
     if (!GITHUB_LOGIN_RE.test(login)) {
       return res.fail('bad_github_login', { status: 400, message: 'That does not look like a GitHub username.' });
     }
+    const note = (req.body.note || '').trim() || null;
     try {
       const member = await pool.query(
         `SELECT 1 FROM builders WHERE lower(github_login) = lower($1) LIMIT 1`,
@@ -485,17 +507,17 @@ module.exports = function buildAccessRequestsRouter() {
                 resolved_by_builder_id = $1,
                 resolved_at = now()
           WHERE lower(github_login) = lower($2) AND status = 'pending'
-          RETURNING id, github_login, status, resolved_at`,
+          RETURNING id, github_login, status, kind, resolved_at`,
         [req.builder.id, login]
       );
       if (resolved.rows.length > 0) {
         return res.json({ ok: true, request: resolved.rows[0] });
       }
       const { rows } = await pool.query(
-        `INSERT INTO access_requests (github_login, status, resolved_by_builder_id, resolved_at)
-         VALUES ($1, 'invited', $2, now())
-         RETURNING id, github_login, status, resolved_at`,
-        [login, req.builder.id]
+        `INSERT INTO access_requests (github_login, note, kind, created_by, status, resolved_by_builder_id, resolved_at)
+         VALUES ($1, $2, 'invite', $3, 'invited', $3, now())
+         RETURNING id, github_login, status, kind, resolved_at`,
+        [login, note, req.builder.id]
       );
       return res.status(201).json({ ok: true, request: rows[0] });
     } catch (err) {
@@ -504,5 +526,34 @@ module.exports = function buildAccessRequestsRouter() {
     }
   });
 
+  // GET /access-requests/invites[?mine=1] — the outstanding invites: kind='invite',
+  // still 'invited' (not rescinded), and no builder row yet (not yet accepted by
+  // signing in), each naming its sender; ?mine=1 keeps only the caller's own
+  // (ADR 0335 D2; task 1002814). Rescind one with PATCH /access-requests/:id.
+  // rank: archon — it names logins that are not members yet.
+  router.get('/access-requests/invites', auth.requireBuilder, auth.requirePermission('access_request.review'), async (req, res) => {
+    const mine = req.query.mine === '1';
+    const mineClause = mine ? 'AND ar.created_by = $1' : '';
+    try {
+      const { rows } = await pool.query(
+        `SELECT ar.id, ar.github_login, ar.note, ar.created_at,
+                ib.github_login AS invited_by_login
+           FROM access_requests ar
+           LEFT JOIN builders ib ON ib.id = ar.created_by
+          WHERE ar.kind = 'invite' AND ar.status = 'invited'
+            AND NOT EXISTS (SELECT 1 FROM builders b
+                             WHERE lower(b.github_login) = lower(ar.github_login))
+            ${mineClause}
+          ORDER BY ar.created_at DESC
+          LIMIT 200`,
+        mine ? [req.builder.id] : []
+      );
+      res.json({ invites: rows });
+    } catch (err) {
+      log.error('[gds] GET /access-requests/invites', err);
+      res.fail('list_invites_failed', { status: 500, message: 'internal error' });
+    }
+  });
+
   return router;
 };

package/modules/platform-identity/connection-suggestions.js

@@ -137,7 +137,7 @@ async function identityById(githubIds, { pool = defaultPool } = {}) {
 }
 
 function mutualReason(n) {
-  return `${n} mutual connection${n === 1 ? '' : 's'}`;
+  return `${n} connection${n === 1 ? '' : 's'} in common`;
 }
 
 // listConnectionSuggestions({ githubId, pool }) → [{ handle, display_name,