@bongos/core 1.19.1026 → 1.19.1027

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.1026",
-  "core_contract": "1.19.1026",
-  "source_commit": "7c884f0248b594a73ef78097031ee52706b2ab4d",
+  "core_version": "1.19.1027",
+  "core_contract": "1.19.1027",
+  "source_commit": "6ba25af665a2f544e86c0fafd73c402ca5716cad",
   "source_ref": "HEAD",
-  "built_at": "2026-09-25T20:35:40.664Z",
+  "built_at": "2026-09-25T20:46:56.140Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 529,
     "agent_docs_stubbed": 26,
-    "functional_verbatim": 2451,
+    "functional_verbatim": 2457,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 3006,
-  "tree_sha256": "ad4178b0a78588ad05270cd003c975b5e6bf842c523807dca0830bc39bb4e228",
+  "file_count": 3012,
+  "tree_sha256": "850a42b363b6a246877f08bb5cede160376f9e87f453846139ba8351fa666b97",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -352,12 +352,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "799e58c1a74db1a78f39ba5d0344a9e8b24345a1d6f789d2a3ba3af7b72bf1fe"
+      "sha256": "217dec95a590eee3d3b3e7e7670882ff4851d596b9a3329215d563ab9509f5f7"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "09f0016d9dab256d7e7964f41baca3cee29522ff0a6897aae97d5c3ce666b9f4"
+      "sha256": "f96abe3e0fad14745f5aa2f578e28316cf1c24cffa32aa389db2671ec0daa4b7"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -367,17 +367,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "09a9eb70bfc1249ad9a184613a3e8f17441a85c339deda809d980799c84be5f0"
+      "sha256": "c4a5ecc76df6099d9e1bd3e76ed0164b460e61aaf34de46fa023e22c8781a122"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "aa1e1f51220283664f065f090129af0f45c04343b2f0d0452b6b6d4c4bc894d1"
+      "sha256": "5f6b4bc9bb1f216cdedc6a74679d2e38f72ad9a1c561411e39a571d632dccf3d"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "4a6ae5ad6edbe36cc099bda8df7bf6d3086661c8703d01637a1ac9adbc73679c"
+      "sha256": "de19e3ed58c7ba6792de3c1781e3b7fa8342643c35daf713a9cf4290ae61fbbd"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -1562,7 +1562,7 @@
     {
       "path": "docs/adr/0213-platform-terms-acceptance-is-the-hubs-own-witness.md",
       "mode": "0000644",
-      "sha256": "039edd287f0aeb2d64e85bddad1c83436357b77ce087d1dbd5f6d19885303f75"
+      "sha256": "fd6c8d2e3868f2ba42262406b9fbd9ba12cb547a9eac61ddb7b9422afde6b3ab"
     },
     {
       "path": "docs/adr/0214-canonical-profile-url-one-resolver-dark-until-the-page-exists.md",
@@ -2192,12 +2192,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "628c6ce6d0dfdaf518081069699a04b32c37eff61ef51b43f849fd1febfe9873"
+      "sha256": "d6cad3e0d4212d9e595905f44b506e6d656526288b93e00631438c81a829f9bf"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "a8d09e50133db28d1af1c6214984cd474cc064996252812ab4cdc56e8abcdc02"
+      "sha256": "41bfca24af08bc206253d9288e14c71d6a92e2ccc3669af3752319e86ea42831"
     },
     {
       "path": "docs/architecture.md",
@@ -2222,12 +2222,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "d35a354da2a802369f229f078ecad6af4e9795e3b8c3c33cde5baddad6fe29cb"
+      "sha256": "7d0160679343e6b05d78c9cd1fcfa56c214020d5360ee11385f008e829a16d71"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "aa10b864198f56d4f8dbe86b1e89f340e43bd3f03159b89282fb1ce008aadc3b"
+      "sha256": "28f74fca91a4b66a70d996c953073e1c01cd3a8c2ca90fdde915ccbdc4294cbf"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2757,7 +2757,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "99f4d160094c9387e0ecd96f36e18d5ff8338714c64ad1bba2aa826a6cc5f618"
+      "sha256": "27d5ece78124b128720d5b52d545efd8c5dae978931f254e59ef5f4abeb5e375"
     },
     {
       "path": "docs/modules-contract.md",
@@ -6487,7 +6487,12 @@
     {
       "path": "modules/platform-identity/connections.js",
       "mode": "0000644",
-      "sha256": "b58280a24ff5eb364aa95bf97bb80b75c8a4fe0a4d0cc224072663cb8687edd0"
+      "sha256": "793e96feacef39ec52166dd7372c894a25679c7137c9c3c5e9df38ec323f1c4a"
+    },
+    {
+      "path": "modules/platform-identity/guilds.js",
+      "mode": "0000644",
+      "sha256": "5f1189de2d33fe550b4a84b8105ccb0a0b60a08d342fde6c9bfcec30b969d4ff"
     },
     {
       "path": "modules/platform-identity/hub-device.js",
@@ -6629,10 +6634,15 @@
       "mode": "0000644",
       "sha256": "1a1a2a8861a11e93da73db38362353409edf988fdb7b1c025c1030acb29da937"
     },
+    {
+      "path": "modules/platform-identity/migrations/platform_identity_025_guilds.sql",
+      "mode": "0000644",
+      "sha256": "72be4f7e3aa3afa47dd78de7a57dcdf57b877675b44fbdf02f6607a8632e1787"
+    },
     {
       "path": "modules/platform-identity/module.json",
       "mode": "0000644",
-      "sha256": "3fc51261ee5262a5a9442e514e3706a055f9994723bd33f83e567ec881e9f6b6"
+      "sha256": "bb9a7c6bc98e138dd49634e72bf04fcff80b7d0625106ea752da9d89311bc3f5"
     },
     {
       "path": "modules/platform-identity/origin-containment.js",
@@ -6677,7 +6687,7 @@
     {
       "path": "modules/platform-identity/read-rate-limit.js",
       "mode": "0000644",
-      "sha256": "50469113a1305d83b418fc7c7bc4438d9d7992aaca2e96ba8df0b2ed240c0158"
+      "sha256": "db17891c79447950b68d55e6e81db6f3c524491bac5ee1caa375b0611c3248c7"
     },
     {
       "path": "modules/platform-identity/recruiter-sliver.js",
@@ -6699,6 +6709,16 @@
       "mode": "0000644",
       "sha256": "6132e21ae24783f11796b5084067622742dd5c05b17a2c74780d734e337f8dfc"
     },
+    {
+      "path": "modules/platform-identity/routes/guilds-public.js",
+      "mode": "0000644",
+      "sha256": "1a8d2d70d4b9f5e4cfc93bd1f6d83911ab625463866527838d74944162f978de"
+    },
+    {
+      "path": "modules/platform-identity/routes/guilds.js",
+      "mode": "0000644",
+      "sha256": "96ca33e6753cbacc40af0c1b766ec637fa6168692a5c6260ff25882d27beb6a2"
+    },
     {
       "path": "modules/platform-identity/routes/my-projects.js",
       "mode": "0000644",
@@ -6742,7 +6762,7 @@
     {
       "path": "modules/platform-identity/terms-acceptance.js",
       "mode": "0000644",
-      "sha256": "e72b73f528149d438150e26c02e5b4b8d14a4b03941c5e917c5775506dcb0e0b"
+      "sha256": "00d3d1460d1fa0d224e487a1701309b4725f2872a36a0cfe283cbd21b96d1e53"
     },
     {
       "path": "modules/platform-identity/tests/activity-snapshots.mjs",
@@ -7582,7 +7602,7 @@
     {
       "path": "modules/public-landing/public/terms.html",
       "mode": "0000644",
-      "sha256": "440fb5159b45e03c5743c93068a54f81ad1a67e9d863a32b15a0cc554024585a"
+      "sha256": "5f03b04a5e3d02c24941c7223a39e749e4123aabbbadf966c2c0da9b25788104"
     },
     {
       "path": "modules/security/CLAUDE.md",
@@ -8337,12 +8357,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "170293a219ad01cf0472d65b0e34ca7bcad8f55ab9375cda9374662160dd5774"
+      "sha256": "6ace585be8981c530bb44df30385a399e2c6bc4ef4611ec01f3139884e9ea4dd"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "95cc86daa3d8a830540662ff083d2f00c0ae82fecd12546c6523a1ddc29a8b4b"
+      "sha256": "29c0b258397c7ddee59eb7de9466c98c842865e84c6272b4c262580477217f13"
     },
     {
       "path": "public-docs/index.html",
@@ -9467,7 +9487,7 @@
     {
       "path": "scripts/gds/run-unit-tests.js",
       "mode": "0000644",
-      "sha256": "7b884397d2ed141c3f2cea55689517a350c68eee8f543fb6eb88dfbe60d116d8"
+      "sha256": "fa6c19a9c41d9613af2980cd6f16193cd8aef8621fb517eb2372db042e69dd41"
     },
     {
       "path": "scripts/gds/runner-drift.js",
@@ -10387,7 +10407,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "9d40b263991898abf849c1825b81673dc2a0e8663f5775cd62c6c312441691d6"
+      "sha256": "2eff6ba98309a16a555bef613cae5f9be68bfe516f60f8e6862c6313f171a4b6"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -12314,6 +12334,16 @@
       "mode": "0000644",
       "sha256": "8298006ae35010d726bcac8a2d351a5aa932d2ee6d5b53ed7b8a5c095ca5e54f"
     },
+    {
+      "path": "tests/guilds_api.mjs",
+      "mode": "0000644",
+      "sha256": "9124d0f1e8edfd91b97fc7226a0f4f68638261c5dfa36954bedf6af95d24ec07"
+    },
+    {
+      "path": "tests/guilds_db.mjs",
+      "mode": "0000644",
+      "sha256": "f4d974c9fd565ff6b81f3a3183e2c933e93b35d731b87505513b32ddd3daf337"
+    },
     {
       "path": "tests/hall_audit.mjs",
       "mode": "0000644",
@@ -13302,7 +13332,7 @@
     {
       "path": "tests/own_scope_guard.mjs",
       "mode": "0000644",
-      "sha256": "4eb0b6dc31b0945b47979253bc39a4bcaa0fbe6ac538ceb2565ce9cd4563b221"
+      "sha256": "e9ad80ce9837076d550dbb4b77a4c0f01f087ad3e515f8af8a672221af995ca4"
     },
     {
       "path": "tests/own_session_revoke.mjs",
@@ -14747,12 +14777,12 @@
     {
       "path": "tests/terms_acceptance.mjs",
       "mode": "0000644",
-      "sha256": "3dba45ebddb94b2f7d656f53c2d303cda08455738df42e9be78d75d41b2bae2e"
+      "sha256": "3478460c1ac70d6cef984688f513251b5e090c4324190db9895e014a54666e2b"
     },
     {
       "path": "tests/terms_grandfather_db.mjs",
       "mode": "0000644",
-      "sha256": "bfaac6724700e7e2bbe2914bb3c456fa1b0fd25990764b15008f187a40d4c791"
+      "sha256": "48502dc0bbf19d679faadde8bd7fa5a811957808a3e4d41cc661d3f69d88ced8"
     },
     {
       "path": "tests/test_path_guard.mjs",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 420 operations across 63 resource groups
+- 437 operations across 65 resource groups
 
 ## Use it from your project
 

package/clients/bongos-client/bongos-client.global.js

@@ -494,6 +494,40 @@ function createClient(opts = {}) {
       // GET /grades/by-builder — rank: metic+archon — GET /grades/by-builder
       getGradesByBuilder: (args) => request("GET", "/grades/by-builder", { hasBody: false }, args),
     },
+    "guildRequests": {
+      // DELETE /guild-requests/{id} — rank: any-builder — DELETE /guild-requests/:id
+      deleteGuildRequestsId: (args) => request("DELETE", "/guild-requests/{id}", { hasBody: false }, args),
+      // POST /guild-requests/{id}/accept — rank: any-builder — POST /guild-requests/:id/accept
+      postGuildRequestsIdAccept: (args) => request("POST", "/guild-requests/{id}/accept", { hasBody: true }, args),
+      // POST /guild-requests/{id}/decline — rank: any-builder — POST /guild-requests/:id/decline
+      postGuildRequestsIdDecline: (args) => request("POST", "/guild-requests/{id}/decline", { hasBody: true }, args),
+    },
+    "guilds": {
+      // POST /guilds — rank: any-builder — POST /guilds
+      postGuilds: (args) => request("POST", "/guilds", { hasBody: true }, args),
+      // DELETE /guilds/{slug} — rank: any-builder — DELETE /guilds/:slug
+      deleteGuildsSlug: (args) => request("DELETE", "/guilds/{slug}", { hasBody: false }, args),
+      // GET /guilds/{slug} — rank: public — GET /guilds/:slug
+      getGuildsSlug: (args) => request("GET", "/guilds/{slug}", { hasBody: false }, args),
+      // PATCH /guilds/{slug} — rank: any-builder — PATCH /guilds/:slug
+      patchGuildsSlug: (args) => request("PATCH", "/guilds/{slug}", { hasBody: true }, args),
+      // POST /guilds/{slug}/invites — rank: any-builder — POST /guilds/:slug/invites
+      postGuildsSlugInvites: (args) => request("POST", "/guilds/{slug}/invites", { hasBody: true }, args),
+      // GET /guilds/{slug}/members — rank: any-builder — GET /guilds/:slug/members
+      getGuildsSlugMembers: (args) => request("GET", "/guilds/{slug}/members", { hasBody: false }, args),
+      // DELETE /guilds/{slug}/members/{handle} — rank: any-builder — DELETE /guilds/:slug/members/:handle
+      deleteGuildsSlugMembersHandle: (args) => request("DELETE", "/guilds/{slug}/members/{handle}", { hasBody: false }, args),
+      // DELETE /guilds/{slug}/membership — rank: any-builder — DELETE /guilds/:slug/membership
+      deleteGuildsSlugMembership: (args) => request("DELETE", "/guilds/{slug}/membership", { hasBody: false }, args),
+      // PATCH /guilds/{slug}/membership — rank: any-builder — PATCH /guilds/:slug/membership
+      patchGuildsSlugMembership: (args) => request("PATCH", "/guilds/{slug}/membership", { hasBody: true }, args),
+      // GET /guilds/{slug}/requests — rank: any-builder — GET /guilds/:slug/requests
+      getGuildsSlugRequests: (args) => request("GET", "/guilds/{slug}/requests", { hasBody: false }, args),
+      // POST /guilds/{slug}/requests — rank: any-builder — POST /guilds/:slug/requests
+      postGuildsSlugRequests: (args) => request("POST", "/guilds/{slug}/requests", { hasBody: true }, args),
+      // POST /guilds/{slug}/transfer — rank: any-builder — POST /guilds/:slug/transfer
+      postGuildsSlugTransfer: (args) => request("POST", "/guilds/{slug}/transfer", { hasBody: true }, args),
+    },
     "healthz": {
       // GET /healthz — rank: public — GET /healthz
       getHealthz: (args) => request("GET", "/healthz", { hasBody: false }, args),
@@ -601,6 +635,10 @@ function createClient(opts = {}) {
       getMeEventSoundPrefs: (args) => request("GET", "/me/event-sound-prefs", { hasBody: false }, args),
       // PATCH /me/event-sound-prefs — rank: any-builder — PATCH /me/event-sound-prefs
       patchMeEventSoundPrefs: (args) => request("PATCH", "/me/event-sound-prefs", { hasBody: true }, args),
+      // GET /me/guild-requests — rank: any-builder — GET /me/guild-requests
+      getMeGuildRequests: (args) => request("GET", "/me/guild-requests", { hasBody: false }, args),
+      // GET /me/guilds — rank: any-builder — GET /me/guilds
+      getMeGuilds: (args) => request("GET", "/me/guilds", { hasBody: false }, args),
       // PATCH /me/handle — rank: any-builder — PATCH /me/handle
       patchMeHandle: (args) => request("PATCH", "/me/handle", { hasBody: true }, args),
       // GET /me/interaction — rank: any-builder — GET /me/interaction

package/clients/bongos-client/index.cjs

@@ -493,6 +493,40 @@ function createClient(opts = {}) {
       // GET /grades/by-builder — rank: metic+archon — GET /grades/by-builder
       getGradesByBuilder: (args) => request("GET", "/grades/by-builder", { hasBody: false }, args),
     },
+    "guildRequests": {
+      // DELETE /guild-requests/{id} — rank: any-builder — DELETE /guild-requests/:id
+      deleteGuildRequestsId: (args) => request("DELETE", "/guild-requests/{id}", { hasBody: false }, args),
+      // POST /guild-requests/{id}/accept — rank: any-builder — POST /guild-requests/:id/accept
+      postGuildRequestsIdAccept: (args) => request("POST", "/guild-requests/{id}/accept", { hasBody: true }, args),
+      // POST /guild-requests/{id}/decline — rank: any-builder — POST /guild-requests/:id/decline
+      postGuildRequestsIdDecline: (args) => request("POST", "/guild-requests/{id}/decline", { hasBody: true }, args),
+    },
+    "guilds": {
+      // POST /guilds — rank: any-builder — POST /guilds
+      postGuilds: (args) => request("POST", "/guilds", { hasBody: true }, args),
+      // DELETE /guilds/{slug} — rank: any-builder — DELETE /guilds/:slug
+      deleteGuildsSlug: (args) => request("DELETE", "/guilds/{slug}", { hasBody: false }, args),
+      // GET /guilds/{slug} — rank: public — GET /guilds/:slug
+      getGuildsSlug: (args) => request("GET", "/guilds/{slug}", { hasBody: false }, args),
+      // PATCH /guilds/{slug} — rank: any-builder — PATCH /guilds/:slug
+      patchGuildsSlug: (args) => request("PATCH", "/guilds/{slug}", { hasBody: true }, args),
+      // POST /guilds/{slug}/invites — rank: any-builder — POST /guilds/:slug/invites
+      postGuildsSlugInvites: (args) => request("POST", "/guilds/{slug}/invites", { hasBody: true }, args),
+      // GET /guilds/{slug}/members — rank: any-builder — GET /guilds/:slug/members
+      getGuildsSlugMembers: (args) => request("GET", "/guilds/{slug}/members", { hasBody: false }, args),
+      // DELETE /guilds/{slug}/members/{handle} — rank: any-builder — DELETE /guilds/:slug/members/:handle
+      deleteGuildsSlugMembersHandle: (args) => request("DELETE", "/guilds/{slug}/members/{handle}", { hasBody: false }, args),
+      // DELETE /guilds/{slug}/membership — rank: any-builder — DELETE /guilds/:slug/membership
+      deleteGuildsSlugMembership: (args) => request("DELETE", "/guilds/{slug}/membership", { hasBody: false }, args),
+      // PATCH /guilds/{slug}/membership — rank: any-builder — PATCH /guilds/:slug/membership
+      patchGuildsSlugMembership: (args) => request("PATCH", "/guilds/{slug}/membership", { hasBody: true }, args),
+      // GET /guilds/{slug}/requests — rank: any-builder — GET /guilds/:slug/requests
+      getGuildsSlugRequests: (args) => request("GET", "/guilds/{slug}/requests", { hasBody: false }, args),
+      // POST /guilds/{slug}/requests — rank: any-builder — POST /guilds/:slug/requests
+      postGuildsSlugRequests: (args) => request("POST", "/guilds/{slug}/requests", { hasBody: true }, args),
+      // POST /guilds/{slug}/transfer — rank: any-builder — POST /guilds/:slug/transfer
+      postGuildsSlugTransfer: (args) => request("POST", "/guilds/{slug}/transfer", { hasBody: true }, args),
+    },
     "healthz": {
       // GET /healthz — rank: public — GET /healthz
       getHealthz: (args) => request("GET", "/healthz", { hasBody: false }, args),
@@ -600,6 +634,10 @@ function createClient(opts = {}) {
       getMeEventSoundPrefs: (args) => request("GET", "/me/event-sound-prefs", { hasBody: false }, args),
       // PATCH /me/event-sound-prefs — rank: any-builder — PATCH /me/event-sound-prefs
       patchMeEventSoundPrefs: (args) => request("PATCH", "/me/event-sound-prefs", { hasBody: true }, args),
+      // GET /me/guild-requests — rank: any-builder — GET /me/guild-requests
+      getMeGuildRequests: (args) => request("GET", "/me/guild-requests", { hasBody: false }, args),
+      // GET /me/guilds — rank: any-builder — GET /me/guilds
+      getMeGuilds: (args) => request("GET", "/me/guilds", { hasBody: false }, args),
       // PATCH /me/handle — rank: any-builder — PATCH /me/handle
       patchMeHandle: (args) => request("PATCH", "/me/handle", { hasBody: true }, args),
       // GET /me/interaction — rank: any-builder — GET /me/interaction

package/clients/bongos-client/index.d.ts

@@ -11,6 +11,10 @@ export interface DeleteConnectionsIdResponse { outcome: unknown }
 export interface DeleteDependenciesResponse { ok: boolean }
 export interface DeleteGovernmentAssignmentsBuilderIdRankKeyResponse { ok: boolean; builder_id: unknown; rank_key: unknown; removed: unknown }
 export interface DeleteGovernmentRanksRankKeyPermissionsPermissionKeyResponse { ok: boolean; rank_key: unknown; permission_key: unknown; removed: unknown }
+export interface DeleteGuildRequestsIdResponse { outcome: unknown }
+export interface DeleteGuildsSlugMembersHandleResponse { outcome: unknown }
+export interface DeleteGuildsSlugMembershipResponse { outcome: unknown }
+export interface DeleteGuildsSlugResponse { outcome: unknown }
 export interface DeleteInboxIdSparkResponse { idea: unknown; sparked: boolean; unchanged: boolean }
 export interface DeleteMemoryFileResponse { deleted: boolean; builder_id: unknown; path: unknown }
 export interface DeleteProvisioningInstancesIdEnvManifestVarIdResponse { ok: boolean; removed: boolean; message: unknown }
@@ -71,6 +75,9 @@ export interface GetGovernmentAssignmentsResponse { assignments: unknown }
 export interface GetGovernmentPermissionsResponse { permissions: unknown; principals: unknown }
 export interface GetGovernmentRanksResponse { ranks: unknown }
 export interface GetGradesByBuilderResponse { window_days: unknown; builders: unknown }
+export interface GetGuildsSlugMembersResponse { guild: unknown; you: unknown; members: unknown; count: unknown }
+export interface GetGuildsSlugRequestsResponse { incoming: unknown; outgoing: unknown; incoming_count: unknown; outgoing_count: unknown }
+export interface GetGuildsSlugResponse { guild: unknown; members: unknown; size: unknown }
 export interface GetHealthzResponse { ok: boolean; auth_configured: unknown }
 export interface GetHelpRequestsArchiveResponse { asked_of_you: unknown; asked_of_others: unknown; count: unknown; crafts: unknown }
 export interface GetHelpRequestsForMeResponse { help_requests: unknown; count: unknown; crafts: unknown }
@@ -90,6 +97,8 @@ export interface GetMeAchievementsResponse { unlocked: unknown }
 export interface GetMeCrossProjectResponse { hide_stats: boolean; profile_state: unknown; handle: unknown; display_name: unknown; bio: unknown; links: unknown; cross_project: unknown; account_visibility: unknown; recruiter_discoverable: unknown; recruiter_discoverable_effective: unknown }
 export interface GetMeDisplayNameResponse { display_name: unknown; max_length: unknown }
 export interface GetMeEventSoundPrefsResponse { prefs: unknown; effective: unknown; effective_wav: unknown; events: unknown }
+export interface GetMeGuildRequestsResponse { incoming: unknown; outgoing: unknown; incoming_count: unknown; outgoing_count: unknown }
+export interface GetMeGuildsResponse { guilds: unknown; count: unknown }
 export interface GetMeRecentShipsResponse { ships: unknown }
 export interface GetMeSessionsResponse { sessions: unknown }
 export interface GetMeSkillPrefsResponse { prefs: unknown; effective: unknown; defaults: unknown; known_skills: unknown; allowed_models: unknown }
@@ -179,6 +188,9 @@ export interface PatchDoneWhenCriterionIdRequest { criterion_md?: string; goal_i
 export interface PatchDoneWhenCriterionIdResponse { ok: boolean; criterion: unknown; deltas: unknown; unchanged: unknown; achieved_goals: unknown }
 export interface PatchGoalsIdMembersBuilderIdRequest { membership_kind: string }
 export interface PatchGoalsIdMembersBuilderIdResponse { ok: boolean; member: unknown; changed: boolean }
+export interface PatchGuildsSlugMembershipRequest { shown_publicly?: boolean; counted_in_totals?: unknown }
+export interface PatchGuildsSlugRequest { name?: string; description?: string; visibility?: string }
+export interface PatchGuildsSlugResponse { guild: unknown }
 export interface PatchHelpRequestsIdRequest { status: "answered" | "withdrawn" }
 export interface PatchHelpRequestsIdResponse { ok: boolean; help_request: unknown }
 export interface PatchInboxIdBodyRequest { body_md: string }
@@ -330,6 +342,16 @@ export interface PostGovernmentBoardItemsResponse { ok: boolean; amendment: unkn
 export interface PostGovernmentRanksRankKeyResetResponse { ok: boolean; rank_key: unknown; seeded_rank: unknown; permission_count: unknown }
 export interface PostGovernmentRanksRequest { rank_key: string; label: string; description?: string }
 export interface PostGovernmentRanksResponse { rank: unknown }
+export interface PostGuildRequestsIdAcceptRequest { visibility?: string; counted_in_totals?: unknown }
+export interface PostGuildRequestsIdAcceptResponse { status: unknown }
+export interface PostGuildsRequest { slug: string; name: string; description?: string; visibility: string }
+export interface PostGuildsResponse { guild: unknown }
+export interface PostGuildsSlugInvitesRequest { handles: string[] }
+export interface PostGuildsSlugInvitesResponse { results: unknown; count: unknown }
+export interface PostGuildsSlugRequestsRequest { counted_in_totals?: unknown }
+export interface PostGuildsSlugRequestsResponse { status: unknown }
+export interface PostGuildsSlugTransferRequest { handle: string }
+export interface PostGuildsSlugTransferResponse { outcome: unknown }
 export interface PostHelpRequestsIdRepliesRequest { body: string }
 export interface PostHelpRequestsIdRepliesResponse { ok: boolean; reply: unknown }
 export interface PostHelpRequestsRequest { needs_craft?: string; needs_builder_id?: number; what_is_stuck: string; task_id?: number; goal_id?: number }
@@ -884,6 +906,40 @@ export interface BongosClient {
     /** GET /grades/by-builder — rank: metic+archon */
     getGradesByBuilder(args?: RequestArgs): Promise<GetGradesByBuilderResponse>;
   };
+  "guildRequests": {
+    /** DELETE /guild-requests/{id} — rank: any-builder */
+    deleteGuildRequestsId(args?: RequestArgs): Promise<DeleteGuildRequestsIdResponse>;
+    /** POST /guild-requests/{id}/accept — rank: any-builder */
+    postGuildRequestsIdAccept(args?: RequestArgs & { body?: PostGuildRequestsIdAcceptRequest }): Promise<PostGuildRequestsIdAcceptResponse>;
+    /** POST /guild-requests/{id}/decline — rank: any-builder */
+    postGuildRequestsIdDecline(args?: RequestArgs): Promise<ApiResponse>;
+  };
+  "guilds": {
+    /** POST /guilds — rank: any-builder */
+    postGuilds(args: RequestArgs & { body: PostGuildsRequest }): Promise<PostGuildsResponse>;
+    /** DELETE /guilds/{slug} — rank: any-builder */
+    deleteGuildsSlug(args?: RequestArgs): Promise<DeleteGuildsSlugResponse>;
+    /** GET /guilds/{slug} — rank: public */
+    getGuildsSlug(args?: RequestArgs): Promise<GetGuildsSlugResponse>;
+    /** PATCH /guilds/{slug} — rank: any-builder */
+    patchGuildsSlug(args?: RequestArgs & { body?: PatchGuildsSlugRequest }): Promise<PatchGuildsSlugResponse>;
+    /** POST /guilds/{slug}/invites — rank: any-builder */
+    postGuildsSlugInvites(args: RequestArgs & { body: PostGuildsSlugInvitesRequest }): Promise<PostGuildsSlugInvitesResponse>;
+    /** GET /guilds/{slug}/members — rank: any-builder */
+    getGuildsSlugMembers(args?: RequestArgs): Promise<GetGuildsSlugMembersResponse>;
+    /** DELETE /guilds/{slug}/members/{handle} — rank: any-builder */
+    deleteGuildsSlugMembersHandle(args?: RequestArgs): Promise<DeleteGuildsSlugMembersHandleResponse>;
+    /** DELETE /guilds/{slug}/membership — rank: any-builder */
+    deleteGuildsSlugMembership(args?: RequestArgs): Promise<DeleteGuildsSlugMembershipResponse>;
+    /** PATCH /guilds/{slug}/membership — rank: any-builder */
+    patchGuildsSlugMembership(args?: RequestArgs & { body?: PatchGuildsSlugMembershipRequest }): Promise<ApiResponse>;
+    /** GET /guilds/{slug}/requests — rank: any-builder */
+    getGuildsSlugRequests(args?: RequestArgs): Promise<GetGuildsSlugRequestsResponse>;
+    /** POST /guilds/{slug}/requests — rank: any-builder */
+    postGuildsSlugRequests(args?: RequestArgs & { body?: PostGuildsSlugRequestsRequest }): Promise<PostGuildsSlugRequestsResponse>;
+    /** POST /guilds/{slug}/transfer — rank: any-builder */
+    postGuildsSlugTransfer(args: RequestArgs & { body: PostGuildsSlugTransferRequest }): Promise<PostGuildsSlugTransferResponse>;
+  };
   "healthz": {
     /** GET /healthz — rank: public */
     getHealthz(args?: RequestArgs): Promise<GetHealthzResponse>;
@@ -991,6 +1047,10 @@ export interface BongosClient {
     getMeEventSoundPrefs(args?: RequestArgs): Promise<GetMeEventSoundPrefsResponse>;
     /** PATCH /me/event-sound-prefs — rank: any-builder */
     patchMeEventSoundPrefs(args?: RequestArgs): Promise<PatchMeEventSoundPrefsResponse>;
+    /** GET /me/guild-requests — rank: any-builder */
+    getMeGuildRequests(args?: RequestArgs): Promise<GetMeGuildRequestsResponse>;
+    /** GET /me/guilds — rank: any-builder */
+    getMeGuilds(args?: RequestArgs): Promise<GetMeGuildsResponse>;
     /** PATCH /me/handle — rank: any-builder */
     patchMeHandle(args: RequestArgs & { body: PatchMeHandleRequest }): Promise<PatchMeHandleResponse>;
     /** GET /me/interaction — rank: any-builder */

package/clients/bongos-client/index.mjs

@@ -490,6 +490,40 @@ export function createClient(opts = {}) {
       // GET /grades/by-builder — rank: metic+archon — GET /grades/by-builder
       getGradesByBuilder: (args) => request("GET", "/grades/by-builder", { hasBody: false }, args),
     },
+    "guildRequests": {
+      // DELETE /guild-requests/{id} — rank: any-builder — DELETE /guild-requests/:id
+      deleteGuildRequestsId: (args) => request("DELETE", "/guild-requests/{id}", { hasBody: false }, args),
+      // POST /guild-requests/{id}/accept — rank: any-builder — POST /guild-requests/:id/accept
+      postGuildRequestsIdAccept: (args) => request("POST", "/guild-requests/{id}/accept", { hasBody: true }, args),
+      // POST /guild-requests/{id}/decline — rank: any-builder — POST /guild-requests/:id/decline
+      postGuildRequestsIdDecline: (args) => request("POST", "/guild-requests/{id}/decline", { hasBody: true }, args),
+    },
+    "guilds": {
+      // POST /guilds — rank: any-builder — POST /guilds
+      postGuilds: (args) => request("POST", "/guilds", { hasBody: true }, args),
+      // DELETE /guilds/{slug} — rank: any-builder — DELETE /guilds/:slug
+      deleteGuildsSlug: (args) => request("DELETE", "/guilds/{slug}", { hasBody: false }, args),
+      // GET /guilds/{slug} — rank: public — GET /guilds/:slug
+      getGuildsSlug: (args) => request("GET", "/guilds/{slug}", { hasBody: false }, args),
+      // PATCH /guilds/{slug} — rank: any-builder — PATCH /guilds/:slug
+      patchGuildsSlug: (args) => request("PATCH", "/guilds/{slug}", { hasBody: true }, args),
+      // POST /guilds/{slug}/invites — rank: any-builder — POST /guilds/:slug/invites
+      postGuildsSlugInvites: (args) => request("POST", "/guilds/{slug}/invites", { hasBody: true }, args),
+      // GET /guilds/{slug}/members — rank: any-builder — GET /guilds/:slug/members
+      getGuildsSlugMembers: (args) => request("GET", "/guilds/{slug}/members", { hasBody: false }, args),
+      // DELETE /guilds/{slug}/members/{handle} — rank: any-builder — DELETE /guilds/:slug/members/:handle
+      deleteGuildsSlugMembersHandle: (args) => request("DELETE", "/guilds/{slug}/members/{handle}", { hasBody: false }, args),
+      // DELETE /guilds/{slug}/membership — rank: any-builder — DELETE /guilds/:slug/membership
+      deleteGuildsSlugMembership: (args) => request("DELETE", "/guilds/{slug}/membership", { hasBody: false }, args),
+      // PATCH /guilds/{slug}/membership — rank: any-builder — PATCH /guilds/:slug/membership
+      patchGuildsSlugMembership: (args) => request("PATCH", "/guilds/{slug}/membership", { hasBody: true }, args),
+      // GET /guilds/{slug}/requests — rank: any-builder — GET /guilds/:slug/requests
+      getGuildsSlugRequests: (args) => request("GET", "/guilds/{slug}/requests", { hasBody: false }, args),
+      // POST /guilds/{slug}/requests — rank: any-builder — POST /guilds/:slug/requests
+      postGuildsSlugRequests: (args) => request("POST", "/guilds/{slug}/requests", { hasBody: true }, args),
+      // POST /guilds/{slug}/transfer — rank: any-builder — POST /guilds/:slug/transfer
+      postGuildsSlugTransfer: (args) => request("POST", "/guilds/{slug}/transfer", { hasBody: true }, args),
+    },
     "healthz": {
       // GET /healthz — rank: public — GET /healthz
       getHealthz: (args) => request("GET", "/healthz", { hasBody: false }, args),
@@ -597,6 +631,10 @@ export function createClient(opts = {}) {
       getMeEventSoundPrefs: (args) => request("GET", "/me/event-sound-prefs", { hasBody: false }, args),
       // PATCH /me/event-sound-prefs — rank: any-builder — PATCH /me/event-sound-prefs
       patchMeEventSoundPrefs: (args) => request("PATCH", "/me/event-sound-prefs", { hasBody: true }, args),
+      // GET /me/guild-requests — rank: any-builder — GET /me/guild-requests
+      getMeGuildRequests: (args) => request("GET", "/me/guild-requests", { hasBody: false }, args),
+      // GET /me/guilds — rank: any-builder — GET /me/guilds
+      getMeGuilds: (args) => request("GET", "/me/guilds", { hasBody: false }, args),
       // PATCH /me/handle — rank: any-builder — PATCH /me/handle
       patchMeHandle: (args) => request("PATCH", "/me/handle", { hasBody: true }, args),
       // GET /me/interaction — rank: any-builder — GET /me/interaction

package/docs/adr/0213-platform-terms-acceptance-is-the-hubs-own-witness.md

@@ -27,6 +27,8 @@ Three things were found on picking the task up, and they changed its shape:
 
 This is deliberately the ADR 0205 D3 property, reused. An acceptance record a caller could assert is evidence of nothing; the only thing that makes the record mean "this human accepted" is that no request-controlled value can reach the statement that writes it. `ensureAccount` — the federated check-in / device-poll path, which takes an *unproven* `github_id` from a request body — writes NULL, exactly as it writes `provisional`.
 
+> **Amended 2026-09-25 ([task 1003353](https://cloudbongos.com/builders#/task/1003353); [blocker 1000124](https://cloudbongos.com/builders#/blocker/1000124)) — what "the hub's own sign-in" means.** `GET /sso/authorize` is reached when a builder uses their platform account to sign in to a **project**; the only builder of that URL is a child instance's `idpAuthorizeUrl`. Signing in to the hub itself creates a hub session and never touches `platform_identity_accounts`, so it records no acceptance. `/terms` said "signed in here"; it now names a project sign-in. The owner chose to also capture the hub's own sign-in ([task 1003361](https://cloudbongos.com/builders#/task/1003361)), which will make this a second capture point rather than a wording fix. Two smaller corrections to the text above: the device poll does not go through `ensureAccount`, it is a non-activating `upsertAccount`, and so is `PATCH /me/handle`; `ensureAccount` is the federated membership check-in alone. The outcome was always the same (neither writes an acceptance), and both paths are now executed in `tests/terms_acceptance.mjs` rather than asserted as text.
+
 ### D2 — Written once. The first acceptance is the one that stands
 
 The conflict branch writes `COALESCE(platform_identity_accounts.terms_accepted_at, now())`. Signing in again re-reads the terms but does not restamp them, so the column keeps meaning *when consent was given* rather than *when this account was last seen*. `terms_version` is COALESCE'd the same way and always written in the same statement, so the pair cannot diverge.
@@ -58,10 +60,10 @@ The mechanism ships complete. The text of the new section is a draft on [blocker
 ## Consequences
 
 - The premise the public-profile surfaces rest on becomes true for every account activated from here, and fail-closed for every account that predates it.
-- **Every currently-`active` account is unpublished until its next hub sign-in** (D4). Reversible in one line; on the owner's blocker.
+- ~~**Every currently-`active` account is unpublished until its next hub sign-in** (D4).~~ Superseded by the grandfather (amendment under D4): nothing went dark after migration 024.
 - `platform-identity.js` sat at 1497 lines against a hard `oversized_file_count: 0` ratchet, so the write-side SQL lives in a new `terms-acceptance.js` — the fifth instance of the "new file beside it" precedent (`account-visibility.js`, `application-echo.js`, `routes/connections.js`, `src/bongos/routes/my-sessions.js`). The file now measures exactly 1500 and **has no headroom left**; the next change to it must shrink it.
 - The read/write split is load-bearing: `terms-acceptance.js` owns only statements that SET the columns, `account-visibility.js` owns the one that TESTS them. The guard's spelling rules deliberately do not match writes, which is what lets both files exist without one of them being a drift copy.
-- **Settings will read wrong for a legacy account under D4** until someone closes it: `GET /me/cross-project` returns `profile_state` raw and the Settings consent note branches on it alone, so an account that signed in before the terms existed reads "active" while its profile is published nowhere. One own-scope boolean plus a copy change fixes it - filed as idea 1000875, and it disappears entirely if the owner grandfathers on blocker 1000123.
+- *(Superseded by the grandfather, amendment under D4: after migration 024 every `active` account has an acceptance, so the case below no longer arises.)* **Settings will read wrong for a legacy account under D4** until someone closes it: `GET /me/cross-project` returns `profile_state` raw and the Settings consent note branches on it alone, so an account that signed in before the terms existed reads "active" while its profile is published nowhere. One own-scope boolean plus a copy change fixes it - filed as idea 1000875, and it disappears entirely if the owner grandfathers on blocker 1000123.
 - `docs/specs/<redacted>.md`'s standing note that the consent premise "is not currently true for every account" is now addressed rather than outstanding.
 
 ## Rejected alternatives