@bongos/core 1.19.1024 → 1.19.1026

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.1024",
-  "core_contract": "1.19.1024",
-  "source_commit": "1f872aa1aae41740fd237a96d918a44b10a7eb37",
+  "core_version": "1.19.1026",
+  "core_contract": "1.19.1026",
+  "source_commit": "7c884f0248b594a73ef78097031ee52706b2ab4d",
   "source_ref": "HEAD",
-  "built_at": "2026-09-25T19:58:25.153Z",
+  "built_at": "2026-09-25T20:35:40.664Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 529,
     "agent_docs_stubbed": 26,
-    "functional_verbatim": 2443,
+    "functional_verbatim": 2451,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 2998,
-  "tree_sha256": "10c61e80a11ff4a40f7719f719f309183eaa139cfef10e0d768b48cb5b5aba2d",
+  "file_count": 3006,
+  "tree_sha256": "ad4178b0a78588ad05270cd003c975b5e6bf842c523807dca0830bc39bb4e228",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -352,12 +352,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "6a43336383cc459524609f6dee6fa8dc5af5f53393869ca09964ab37bda2a9f9"
+      "sha256": "799e58c1a74db1a78f39ba5d0344a9e8b24345a1d6f789d2a3ba3af7b72bf1fe"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "b63d94b37df14283ea04512e281163c1f027995c08b5f052aa2f062d7632a686"
+      "sha256": "09f0016d9dab256d7e7964f41baca3cee29522ff0a6897aae97d5c3ce666b9f4"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -367,17 +367,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "01e49d4c9dd29cd7c312b637e013dcbb69e9bb0f12aee3ff6b5aaf5caeb1539a"
+      "sha256": "09a9eb70bfc1249ad9a184613a3e8f17441a85c339deda809d980799c84be5f0"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "0ccdf87aa5ce77f34dde4ed9d7a3f9ab38aee7be4c3d81f6ab64311cc68feefc"
+      "sha256": "aa1e1f51220283664f065f090129af0f45c04343b2f0d0452b6b6d4c4bc894d1"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "29f5d849eb791886672584d5f258b306a237c774b83b33b68e7ad4990cb68ead"
+      "sha256": "4a6ae5ad6edbe36cc099bda8df7bf6d3086661c8703d01637a1ac9adbc73679c"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -1562,7 +1562,7 @@
     {
       "path": "docs/adr/0213-platform-terms-acceptance-is-the-hubs-own-witness.md",
       "mode": "0000644",
-      "sha256": "6c30a59cb4b4b5ed378e7103e1cdd8ecbdf135e4a1d51ce8a11787b40d4ec159"
+      "sha256": "039edd287f0aeb2d64e85bddad1c83436357b77ce087d1dbd5f6d19885303f75"
     },
     {
       "path": "docs/adr/0214-canonical-profile-url-one-resolver-dark-until-the-page-exists.md",
@@ -2192,12 +2192,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "cedc612f059cc0923f438b9836d7b90e249aca8245b8864dbda094752df258a0"
+      "sha256": "628c6ce6d0dfdaf518081069699a04b32c37eff61ef51b43f849fd1febfe9873"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "3f65db9aa5ef67ceed4ecca08e083208a44413e7e69363f26ca60ea48b905005"
+      "sha256": "a8d09e50133db28d1af1c6214984cd474cc064996252812ab4cdc56e8abcdc02"
     },
     {
       "path": "docs/architecture.md",
@@ -2222,12 +2222,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "c43c114a44d0b4f5956e619e5248fcc67473f094c1aa9f58af0b877666a6821a"
+      "sha256": "d35a354da2a802369f229f078ecad6af4e9795e3b8c3c33cde5baddad6fe29cb"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "5a0786f9cba9d26c3dc3ef41197a0ea1a00e95a068407305b86a1d880d8fd31e"
+      "sha256": "aa10b864198f56d4f8dbe86b1e89f340e43bd3f03159b89282fb1ce008aadc3b"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2757,7 +2757,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "fef4b48a53826405914b6b5f88bd39087b2c89791d0c22c4b807ad21a0000d7a"
+      "sha256": "99f4d160094c9387e0ecd96f36e18d5ff8338714c64ad1bba2aa826a6cc5f618"
     },
     {
       "path": "docs/modules-contract.md",
@@ -3884,6 +3884,11 @@
       "mode": "0000644",
       "sha256": "040de8cddf1a8740ac7e97fb35572e56494a5a3b51ce8873887f71759f6a3b9d"
     },
+    {
+      "path": "migrations/core_255_access_requests_invite_kind.sql",
+      "mode": "0000644",
+      "sha256": "14924b5db9c9620e17a4cd5baa4c7821aa97db3d11711831faeb45fbfb035213"
+    },
     {
       "path": "modules/agents/CLAUDE.md",
       "mode": "0000644",
@@ -4422,7 +4427,7 @@
     {
       "path": "modules/government/catalog.js",
       "mode": "0000644",
-      "sha256": "65ff329fd00c94ed4571d852079515e173339ee070d5489ce10d5cabe219b20b"
+      "sha256": "6d1895c276755d7a3cbec780f35e20ee9cc6cfee5557a48142bc5dcffb9d3f19"
     },
     {
       "path": "modules/government/config.js",
@@ -5017,7 +5022,7 @@
     {
       "path": "modules/hall-ui/public/goal-map.html",
       "mode": "0000644",
-      "sha256": "f230e51c324addf66291be36feb5d7aa85a6c61b8ccbcbae043c79ca159a6e3c"
+      "sha256": "bde630116cf4d35cb5fa489a2a4add8a1dd9906b597647f206b740dcc8d1affe"
     },
     {
       "path": "modules/hall-ui/public/goal-map.states.json",
@@ -6427,7 +6432,7 @@
     {
       "path": "modules/onboarding/routes/access-requests.js",
       "mode": "0000644",
-      "sha256": "301c45e4f72024c7b1507245a9fccf4388224bb544ad747712c69155d41d1861"
+      "sha256": "b2f786d816222879ec37670688c0a291c81a9552584b5045616eb4f3ead7fe33"
     },
     {
       "path": "modules/onboarding/routes/onboarding.js",
@@ -6469,10 +6474,15 @@
       "mode": "0000644",
       "sha256": "2aa433ba293545a313972f88b1143d74551cb6ec4e06747906ff7e3c365f4e6a"
     },
+    {
+      "path": "modules/platform-identity/community-leaderboard.js",
+      "mode": "0000644",
+      "sha256": "9a13f35faafbeee1186a3cc2056aec1169cf3d5b6bc3a80dd9202aa999757c67"
+    },
     {
       "path": "modules/platform-identity/connection-suggestions.js",
       "mode": "0000644",
-      "sha256": "73beb598013b1ddd6364b2c97f1b346505c9c909934d8b3b9fc3b3117ad09786"
+      "sha256": "4224c3706dfdebe63ddf769a056c5039707218e7502b8409cd2e882da702c9c5"
     },
     {
       "path": "modules/platform-identity/connections.js",
@@ -6614,10 +6624,15 @@
       "mode": "0000644",
       "sha256": "f119d0d4f8775e2ec1e0e30702ba9564d7f4f712853751e2e66bb3c103cf1da4"
     },
+    {
+      "path": "modules/platform-identity/migrations/platform_identity_024_terms_grandfathered.sql",
+      "mode": "0000644",
+      "sha256": "1a1a2a8861a11e93da73db38362353409edf988fdb7b1c025c1030acb29da937"
+    },
     {
       "path": "modules/platform-identity/module.json",
       "mode": "0000644",
-      "sha256": "a0f4d7143929eee513926111a314c5687005c95ebff998d0d59dd498bb5c62f2"
+      "sha256": "3fc51261ee5262a5a9442e514e3706a055f9994723bd33f83e567ec881e9f6b6"
     },
     {
       "path": "modules/platform-identity/origin-containment.js",
@@ -6659,15 +6674,25 @@
       "mode": "0000644",
       "sha256": "233b2479304b45339b2e31529b47cb1af1ccb48b77a7f6845dd8ef6af52031e0"
     },
+    {
+      "path": "modules/platform-identity/read-rate-limit.js",
+      "mode": "0000644",
+      "sha256": "50469113a1305d83b418fc7c7bc4438d9d7992aaca2e96ba8df0b2ed240c0158"
+    },
     {
       "path": "modules/platform-identity/recruiter-sliver.js",
       "mode": "0000644",
       "sha256": "4f6854050e3c7459f698c550577fa97958a573d7f1981c9de4d29417af2669c0"
     },
+    {
+      "path": "modules/platform-identity/routes/community-leaderboard.js",
+      "mode": "0000644",
+      "sha256": "fa8b8a0d99edcf443700cd8f93ea7c198e21b5150524da126d31cb1ef1bd393e"
+    },
     {
       "path": "modules/platform-identity/routes/community-search.js",
       "mode": "0000644",
-      "sha256": "f2f8f4f7a94b7f3a917b583a71fcaf482d110ed06e22a1c1aaad6d9a71a34cad"
+      "sha256": "cc0482e44f10940000e1a83885d805fbb20c890969dd9449f8525363f05b5cf3"
     },
     {
       "path": "modules/platform-identity/routes/connections.js",
@@ -6687,7 +6712,7 @@
     {
       "path": "modules/platform-identity/routes/projects.js",
       "mode": "0000644",
-      "sha256": "7db130e5fe698bc133475d5c7ab90583fbe3683ac1d11b2542c56e76a7da4cfd"
+      "sha256": "575d89666362e57e04ac0fd6dcd13b3f5125ba46e5cdb371cb3456f9ee383d88"
     },
     {
       "path": "modules/platform-identity/routes/public-profile.js",
@@ -6717,7 +6742,7 @@
     {
       "path": "modules/platform-identity/terms-acceptance.js",
       "mode": "0000644",
-      "sha256": "85aa2a81a80d09031282926bc5f63cef25e85630233fcbd7899ba783b2a62d59"
+      "sha256": "e72b73f528149d438150e26c02e5b4b8d14a4b03941c5e917c5775506dcb0e0b"
     },
     {
       "path": "modules/platform-identity/tests/activity-snapshots.mjs",
@@ -7557,7 +7582,7 @@
     {
       "path": "modules/public-landing/public/terms.html",
       "mode": "0000644",
-      "sha256": "b39a1dc189c251abe3cc60dfb2d5fb997f1b51e577d8250460cb48522f857d80"
+      "sha256": "440fb5159b45e03c5743c93068a54f81ad1a67e9d863a32b15a0cc554024585a"
     },
     {
       "path": "modules/security/CLAUDE.md",
@@ -8312,12 +8337,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "36328e51d05e9c402d841cb01fb8c71ebc3fb1ac9ab4980d92157019d0390f74"
+      "sha256": "170293a219ad01cf0472d65b0e34ca7bcad8f55ab9375cda9374662160dd5774"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "7f5cea69d8281535703f3803703b34c4df2196e19284415e59152007b257208e"
+      "sha256": "95cc86daa3d8a830540662ff083d2f00c0ae82fecd12546c6523a1ddc29a8b4b"
     },
     {
       "path": "public-docs/index.html",
@@ -9442,7 +9467,7 @@
     {
       "path": "scripts/gds/run-unit-tests.js",
       "mode": "0000644",
-      "sha256": "42c429a77230af4722a5a5bf23d8a75582e792c5e8c9df753327aad4423300b7"
+      "sha256": "7b884397d2ed141c3f2cea55689517a350c68eee8f543fb6eb88dfbe60d116d8"
     },
     {
       "path": "scripts/gds/runner-drift.js",
@@ -10362,7 +10387,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "e9218e1f21e4706d02bdd26c6c348c571996a23515d3b57295a71b97be5ff193"
+      "sha256": "9d40b263991898abf849c1825b81673dc2a0e8663f5775cd62c6c312441691d6"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -10437,7 +10462,7 @@
     {
       "path": "tests/access_requests_invite.mjs",
       "mode": "0000644",
-      "sha256": "7229451a9a9cb74049b7fea808458423d8a2754c213e6974593811cd1b4322b1"
+      "sha256": "4148ce39a074fa16cb6360027a7fd6c1ea9b26cea6423209591ee45f23ec894f"
     },
     {
       "path": "tests/accessibility_replay.mjs",
@@ -10637,7 +10662,7 @@
     {
       "path": "tests/application_lifecycle.mjs",
       "mode": "0000644",
-      "sha256": "975389846058a123344a6cd56d2355b606c86e2ce59a48981782f61204090096"
+      "sha256": "c13c0a4b5244b72ec093a2d80029bc3b1ceb8f0828aaad69274054be9e927afe"
     },
     {
       "path": "tests/architect.mjs",
@@ -11224,6 +11249,16 @@
       "mode": "0000644",
       "sha256": "654e70af16092ed0dc76c058b245863c8470b8c3441c39e4c4f5bfd40f60c138"
     },
+    {
+      "path": "tests/community_leaderboard_db.mjs",
+      "mode": "0000644",
+      "sha256": "01ab453d5031d6a1d1f61f1739c2818e4a2c708bb772a71487ecaba8f0c952ce"
+    },
+    {
+      "path": "tests/community_leaderboard_route.mjs",
+      "mode": "0000644",
+      "sha256": "2422db729a9c4ad27d19d2fba5dff50b0f1a6730b3f68cb854a4f810f893445a"
+    },
     {
       "path": "tests/community_search_route.mjs",
       "mode": "0000644",
@@ -11252,12 +11287,12 @@
     {
       "path": "tests/connection_suggestions.mjs",
       "mode": "0000644",
-      "sha256": "c85a26355952c1d201838dbe569727c54d81d79d62d9e9d784182bc60fb743f7"
+      "sha256": "598201479b8f32a809da06c4381ed842ee981cb67ef829bf9616a831be506e6d"
     },
     {
       "path": "tests/connections_api.mjs",
       "mode": "0000644",
-      "sha256": "377a1cb8cc9eaeeb86bd033a02a8f7ecfd499ceb0d09718533a3a7bb4ed014ec"
+      "sha256": "691eab40b511c32a25dbc9941912128bb4311359276cec3aefaa0c24dfa8409a"
     },
     {
       "path": "tests/connections_ownership.mjs",
@@ -11912,7 +11947,7 @@
     {
       "path": "tests/goal_map_page.mjs",
       "mode": "0000644",
-      "sha256": "9ba4b54b3d4f959f2e073c9fb1b0655b82f0b9cb12990f0cc91e2f3723fcc34d"
+      "sha256": "8a9b5128b2b86acc42b023f7ef86ff777139575921bbf153b1e0bd48b39c224b"
     },
     {
       "path": "tests/goal_member_kinds.mjs",
@@ -12417,7 +12452,7 @@
     {
       "path": "tests/handle_machinery.mjs",
       "mode": "0000644",
-      "sha256": "209c1ebf3e57c6fed05eda28ef57033c7ed7da3e1a41670fc9aae05497b29698"
+      "sha256": "ca7fbfcca238b4ffed576ca1b3fca5d848f4d9d3eab8321353325d54ff505810"
     },
     {
       "path": "tests/help_requests.mjs",
@@ -13407,7 +13442,7 @@
     {
       "path": "tests/profile_connections_ui.mjs",
       "mode": "0000644",
-      "sha256": "d2c415317244457f575c985fff3ba2645fc5da97253357eaecd373dba33b14f9"
+      "sha256": "566e7a937337f753d45f32e1cdc8b1c63e76ab2bfadedfde46c669cddad543a0"
     },
     {
       "path": "tests/profile_fields.mjs",
@@ -13427,7 +13462,7 @@
     {
       "path": "tests/profile_rollup_consent.mjs",
       "mode": "0000644",
-      "sha256": "d5849ac1b2c25c4055994a50e0698ff306a393556cd304ad8c4d8a2ce9438e88"
+      "sha256": "dcda4f837c6c0122901a67edadecf9eea8989515367fd39a5c9a4afa82fd18a1"
     },
     {
       "path": "tests/profile_route.mjs",
@@ -14712,7 +14747,12 @@
     {
       "path": "tests/terms_acceptance.mjs",
       "mode": "0000644",
-      "sha256": "404bc664d8007b00077dd897642499ab5413c40c8d107dd1f20bdf387abcecbb"
+      "sha256": "3dba45ebddb94b2f7d656f53c2d303cda08455738df42e9be78d75d41b2bae2e"
+    },
+    {
+      "path": "tests/terms_grandfather_db.mjs",
+      "mode": "0000644",
+      "sha256": "bfaac6724700e7e2bbe2914bb3c456fa1b0fd25990764b15008f187a40d4c791"
     },
     {
       "path": "tests/test_path_guard.mjs",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 418 operations across 63 resource groups
+- 420 operations across 63 resource groups
 
 ## Use it from your project
 

package/clients/bongos-client/bongos-client.global.js

@@ -93,6 +93,8 @@ function createClient(opts = {}) {
       patchAccessRequestsId: (args) => request("PATCH", "/access-requests/{id}", { hasBody: true }, args),
       // POST /access-requests/invite — rank: archon — POST /access-requests/invite
       postAccessRequestsInvite: (args) => request("POST", "/access-requests/invite", { hasBody: true }, args),
+      // GET /access-requests/invites — rank: archon — GET /access-requests/invites
+      getAccessRequestsInvites: (args) => request("GET", "/access-requests/invites", { hasBody: false }, args),
       // GET /access-requests/status — rank: public — GET /access-requests/status
       getAccessRequestsStatus: (args) => request("GET", "/access-requests/status", { hasBody: false }, args),
     },
@@ -309,6 +311,8 @@ function createClient(opts = {}) {
       getClosenessWithBuilderId: (args) => request("GET", "/closeness/with/{builderId}", { hasBody: false }, args),
     },
     "community": {
+      // GET /community/leaderboard — rank: public — GET /community/leaderboard
+      getCommunityLeaderboard: (args) => request("GET", "/community/leaderboard", { hasBody: false }, args),
       // GET /community/search — rank: public — GET /community/search
       getCommunitySearch: (args) => request("GET", "/community/search", { hasBody: false }, args),
     },

package/clients/bongos-client/index.cjs

@@ -92,6 +92,8 @@ function createClient(opts = {}) {
       patchAccessRequestsId: (args) => request("PATCH", "/access-requests/{id}", { hasBody: true }, args),
       // POST /access-requests/invite — rank: archon — POST /access-requests/invite
       postAccessRequestsInvite: (args) => request("POST", "/access-requests/invite", { hasBody: true }, args),
+      // GET /access-requests/invites — rank: archon — GET /access-requests/invites
+      getAccessRequestsInvites: (args) => request("GET", "/access-requests/invites", { hasBody: false }, args),
       // GET /access-requests/status — rank: public — GET /access-requests/status
       getAccessRequestsStatus: (args) => request("GET", "/access-requests/status", { hasBody: false }, args),
     },
@@ -308,6 +310,8 @@ function createClient(opts = {}) {
       getClosenessWithBuilderId: (args) => request("GET", "/closeness/with/{builderId}", { hasBody: false }, args),
     },
     "community": {
+      // GET /community/leaderboard — rank: public — GET /community/leaderboard
+      getCommunityLeaderboard: (args) => request("GET", "/community/leaderboard", { hasBody: false }, args),
       // GET /community/search — rank: public — GET /community/search
       getCommunitySearch: (args) => request("GET", "/community/search", { hasBody: false }, args),
     },

package/clients/bongos-client/index.d.ts

@@ -19,6 +19,7 @@ export interface DeleteTasksIdCriteriaCriterionIdResponse { ok: boolean; removed
 export interface DeleteTasksIdDependenciesDepIdResponse { ok: boolean; removed: unknown }
 export interface DeleteTasksIdVisualResponse { ok: boolean; visual_url: unknown }
 export interface ErrorEnvelope { error: ApiErrorObject }
+export interface GetAccessRequestsInvitesResponse { invites: unknown }
 export interface GetAccessRequestsResponse { requests: unknown }
 export interface GetAccessRequestsStatusResponse { github_login: unknown; status: unknown; admitted: unknown }
 export interface GetAchievementsResponse { achievements: unknown }
@@ -49,6 +50,7 @@ export interface GetBuildersRosterResponse { builders: unknown; stale_hours: unk
 export interface GetClosenessForMeResponse { closeness: unknown; count: unknown; returned: unknown }
 export interface GetClosenessWeightsResponse { weights: unknown; window_days: unknown; note: unknown }
 export interface GetClosenessWithBuilderIdResponse { closeness: unknown; why: unknown }
+export interface GetCommunityLeaderboardResponse { window: unknown; since: unknown; discipline: unknown; count: unknown; results: unknown; page: unknown }
 export interface GetCommunitySearchResponse { query: unknown; discipline: unknown; count: unknown; results: unknown; page: unknown }
 export interface GetConnectionsDegreeHandleResponse { handle: unknown; degree: unknown; mutuals: unknown; mutual_count: unknown; truncated: unknown }
 export interface GetConnectionsRequestsResponse { incoming: unknown; outgoing: unknown; incoming_count: unknown; outgoing_count: unknown }
@@ -211,7 +213,7 @@ export interface PatchSpecialitiesIdResponse { speciality: unknown }
 export interface PatchTaskRecommendationsIdRequest { status: "declined" | "withdrawn" }
 export interface PatchTaskRecommendationsIdResponse { ok: boolean; recommendation: unknown }
 export interface PatchTasksIdRequest { kind?: string; discipline?: string; requires_rank?: string; module_key?: string; goal_id?: number; parent_task_id?: StringifiableId; parallel_safe?: unknown; newcomer_friendly?: boolean; xenos_claimable?: boolean; security_sensitive?: boolean; automation_tag?: string; needs_migration?: boolean; description?: string; title?: string; priority?: unknown; value_summary?: string; status?: unknown }
-export interface PostAccessRequestsInviteRequest { github_login: string }
+export interface PostAccessRequestsInviteRequest { github_login: string; note?: string }
 export interface PostAccessRequestsInviteResponse { ok: boolean; already_invited?: boolean; github_login?: unknown; request?: unknown }
 export interface PostAccessRequestsRequest { github_login: string; display_name?: string; note?: string }
 export interface PostAccessRequestsResponse { ok: boolean; request?: unknown; already_pending?: boolean }
@@ -481,6 +483,8 @@ export interface BongosClient {
     patchAccessRequestsId(args: RequestArgs & { body: PatchAccessRequestsIdRequest }): Promise<PatchAccessRequestsIdResponse>;
     /** POST /access-requests/invite — rank: archon */
     postAccessRequestsInvite(args: RequestArgs & { body: PostAccessRequestsInviteRequest }): Promise<PostAccessRequestsInviteResponse>;
+    /** GET /access-requests/invites — rank: archon */
+    getAccessRequestsInvites(args?: RequestArgs): Promise<GetAccessRequestsInvitesResponse>;
     /** GET /access-requests/status — rank: public */
     getAccessRequestsStatus(args?: RequestArgs): Promise<GetAccessRequestsStatusResponse>;
   };
@@ -697,6 +701,8 @@ export interface BongosClient {
     getClosenessWithBuilderId(args?: RequestArgs): Promise<GetClosenessWithBuilderIdResponse>;
   };
   "community": {
+    /** GET /community/leaderboard — rank: public */
+    getCommunityLeaderboard(args?: RequestArgs): Promise<GetCommunityLeaderboardResponse>;
     /** GET /community/search — rank: public */
     getCommunitySearch(args?: RequestArgs): Promise<GetCommunitySearchResponse>;
   };

package/clients/bongos-client/index.mjs

@@ -89,6 +89,8 @@ export function createClient(opts = {}) {
       patchAccessRequestsId: (args) => request("PATCH", "/access-requests/{id}", { hasBody: true }, args),
       // POST /access-requests/invite — rank: archon — POST /access-requests/invite
       postAccessRequestsInvite: (args) => request("POST", "/access-requests/invite", { hasBody: true }, args),
+      // GET /access-requests/invites — rank: archon — GET /access-requests/invites
+      getAccessRequestsInvites: (args) => request("GET", "/access-requests/invites", { hasBody: false }, args),
       // GET /access-requests/status — rank: public — GET /access-requests/status
       getAccessRequestsStatus: (args) => request("GET", "/access-requests/status", { hasBody: false }, args),
     },
@@ -305,6 +307,8 @@ export function createClient(opts = {}) {
       getClosenessWithBuilderId: (args) => request("GET", "/closeness/with/{builderId}", { hasBody: false }, args),
     },
     "community": {
+      // GET /community/leaderboard — rank: public — GET /community/leaderboard
+      getCommunityLeaderboard: (args) => request("GET", "/community/leaderboard", { hasBody: false }, args),
       // GET /community/search — rank: public — GET /community/search
       getCommunitySearch: (args) => request("GET", "/community/search", { hasBody: false }, args),
     },

package/docs/adr/0213-platform-terms-acceptance-is-the-hubs-own-witness.md

@@ -45,6 +45,8 @@ Accounts that are already `active` get `terms_accepted_at IS NULL`, because no p
 
 This is ADR 0171 D3's own backfill rule applied to its own sentence (*"all existing accounts start provisional and lazily upgrade on their next hub-session authorize"*), and it is what P03 ratified ([task 1002799](https://cloudbongos.com/builders#/task/1002799), owner, 2026-08-16): no backfill activation, on the rationale that a builder passes through the hub anyway. **This is the one consequence with a visible product effect, and it is on [blocker 1000123](https://cloudbongos.com/builders#/blocker/1000123) for the owner** — grandfathering is one line in the migration if they prefer it.
 
+> **Amended 2026-09-25 ([task 1003360](https://cloudbongos.com/builders#/task/1003360) / `<redacted>`) — D4 is reversed, D2 narrowed.** The owner chose to grandfather ([blocker 1000123](https://cloudbongos.com/builders#/blocker/1000123); the decision is recorded in [ADR 0217](0217-rank-gates-inviting-not-viewing.md) D3) and to mark it. A third column, `terms_accepted_source` (`signin` | `grandfathered`, CHECK-constrained), records HOW an acceptance was given. Migration 024 marks every acceptance already on record `signin`, then stamps each `active` account without one as `grandfathered` at the moment it ran, with the version then in force; it runs once, in the transaction that creates the column, and never touches `profile_state`. D2 now reads "the first acceptance **a human gave** stands": the conflict branch still COALESCEs, except that a `grandfathered` row is replaced outright, so a grandfather gives way to its owner's own acceptance at their next hub sign-in, and every sign-in sets the source to `signin`. The replacement is keyed on the marker, not on "no `signin` recorded": an acceptance with no source (the pre-024 code can write one in the deploy window) is a real sign-in and keeps its date. No runtime code writes `grandfathered`; `tests/terms_acceptance.mjs` fails any server file that does, and any second acceptance write site. D3's predicate is unchanged — it asks whether an acceptance exists, never its source — so the ledger distinguishes the two and visibility does not. `/terms` says so.
+
 ### D5 — Re-acceptance on a later revision is out of scope, and visible rather than silent
 
 Because the version is recorded and never overwritten, publishing a new `TERMS_VERSION` leaves every row naming the text it actually agreed to, so the platform can see who has not accepted the new one. What to *do* about that — re-prompt, re-gate, or nothing — is a product flow, not a storage shape, and is not built here.