@bongos/core 1.19.1026 → 1.19.1027

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 420 endpoints across 72 route files.
+> **Generated from the live route files** — the route file is authoritative. 437 endpoints across 74 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust-boundary-server-enforced-permissions.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -332,6 +332,31 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 |---|---|---|---|---|
 | GET | `/api/bongos/grades/by-builder` | `metic+archon` | — | GET /grades/by-builder?days=30 — per-builder grade breakdown (task 726). |
 
+## `guild-requests` (3)
+
+| Method | Path | Rank | Body | Description |
+|---|---|---|---|---|
+| DELETE | `/api/bongos/guild-requests/:id` | `any-builder` | — | cancel a row I opened: my request, or (as owner) an invite my guild sent. |
+| POST | `/api/bongos/guild-requests/:id/accept` | `any-builder` | `visibility`, `counted_in_totals` | accept an invite addressed to ME, or (as the guild's owner) a request to join it. |
+| POST | `/api/bongos/guild-requests/:id/decline` | `any-builder` | — | decline an invite to ME, or (as owner) a request to my guild. |
+
+## `guilds` (12)
+
+| Method | Path | Rank | Body | Description |
+|---|---|---|---|---|
+| POST | `/api/bongos/guilds` | `any-builder` | `slug`, `name`, `description`, `visibility` | create a guild. |
+| GET | `/api/bongos/guilds/:slug` | `public` | — | a public guild's page data. |
+| PATCH | `/api/bongos/guilds/:slug` | `any-builder` | `name`, `description`, `visibility` | owner: edit name, description or visibility. |
+| DELETE | `/api/bongos/guilds/:slug` | `any-builder` | — | owner: dissolve. |
+| POST | `/api/bongos/guilds/:slug/invites` | `any-builder` | `handles` | owner: invite up to INVITE_BATCH_MAX builders by handle, each an ordinary individual invite (ADR 0336 D3). |
+| GET | `/api/bongos/guilds/:slug/members` | `any-builder` | — | the members' roster, for members only (the own-scope door to an unlisted guild, ADR 0336 D4). |
+| DELETE | `/api/bongos/guilds/:slug/members/:handle` | `any-builder` | — | owner: remove a member (never the owner). |
+| PATCH | `/api/bongos/guilds/:slug/membership` | `any-builder` | `shown_publicly`, `counted_in_totals` | MY switches in one guild: shown on its public page (ADR 0336 D4) and counted in its totals (ADR 0337 D4.4). |
+| DELETE | `/api/bongos/guilds/:slug/membership` | `any-builder` | — | leave. |
+| GET | `/api/bongos/guilds/:slug/requests` | `any-builder` | — | owner: the join requests to decide and the invites still out. |
+| POST | `/api/bongos/guilds/:slug/requests` | `any-builder` | `counted_in_totals` | ask to join. |
+| POST | `/api/bongos/guilds/:slug/transfer` | `any-builder` | `handle` | owner: hand ownership to an existing member. |
+
 ## `healthz` (1)
 
 | Method | Path | Rank | Body | Description |
@@ -406,7 +431,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | POST | `/api/bongos/llm-cache/lookup` | `metic+archon` | `cache_key`, `tokens_saved_est` | POST /llm-cache/lookup — hit/miss + atomic hit_count bump. |
 | POST | `/api/bongos/llm-cache/store` | `metic+archon` | `spec`, `result_stdout`, `result_cost_usd` | POST /llm-cache/store — upsert a freshly-produced result. |
 
-## `me` (32)
+## `me` (34)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -421,6 +446,8 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | PATCH | `/api/bongos/me/display-name` | `any-builder` | _undocumented_ | PATCH the display name. |
 | GET | `/api/bongos/me/event-sound-prefs` | `any-builder` | — | Per-builder per-event sound variant selection (task 582, migration 164). |
 | PATCH | `/api/bongos/me/event-sound-prefs` | `any-builder` | _undocumented_ | PATCH a partial set of event sound overrides. |
+| GET | `/api/bongos/me/guild-requests` | `any-builder` | — | MY queue: invites addressed to me, each carrying the card (the guild's current visibility, which an accept must echo back), and the join … |
+| GET | `/api/bongos/me/guilds` | `any-builder` | — | MY guilds, each with my own two switches. |
 | PATCH | `/api/bongos/me/handle` | `any-builder` | `handle` | rename the caller's OWN handle (own data, keyed on the authenticated github_id). |
 | GET | `/api/bongos/me/interaction` | `any-builder` | — | Per-builder INTERACTION PROFILE (task 2010, shares the behavior_prefs jsonb / migration 119). |
 | PATCH | `/api/bongos/me/interaction` | `any-builder` | _undocumented_ | PATCH the interaction profile. |

package/docs/copy-inventory.md

@@ -1850,7 +1850,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `485c565b5745` | certain | How people join | `modules/public-landing/public/projects.html:801` |
 | `4b542b000afa` | certain | How this project is drawn: on the sky, in your list, at the top of this page and on its card. A planet is a | `modules/public-landing/public/projects.html:921` |
 | `9f31eaed8252` | certain | If you grant repository access while creating a project, that permission is used to create or adopt your repos | `modules/public-landing/public/privacy.html:55` |
-| `2a1b87d28a9c` | certain | If your account already existed when this version took effect, the platform accepted it on your behalf, rather | `modules/public-landing/public/terms.html:71` |
+| `3b1cbe9e33aa` | certain | If your account already existed when this version took effect, the platform accepted it on your behalf, rather | `modules/public-landing/public/terms.html:71` |
 | `607551ae732b` | certain | Invite a builder | `modules/public-landing/public/projects.html:894` |
 | `20786b02f47a` | certain | Invite builders | `modules/public-landing/public/projects.html:1305` |
 | `a1256030d879` | certain | Invite only | `modules/public-landing/public/projects.html:805` |
@@ -1885,7 +1885,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `837fdaa0936a` | certain | Nothing matches that. | `modules/public-landing/public/projects.html:649` |
 | `1bc11853e893` | certain | On the map | `modules/public-landing/public/projects.html:820` |
 | `b4ac8f44710c` | certain | On the public map | `modules/public-landing/public/projects.html:742` |
-| `69400ca12477` | certain | Once you have signed in here and accepted these terms, your profile and that record are public by default: at  | `modules/public-landing/public/terms.html:68` |
+| `7fe31ce20c09` | certain | Once you have signed in to a project with your platform account and accepted these terms, your profile and tha | `modules/public-landing/public/terms.html:68` |
 | `8329bb1a3693` | certain | One tap files the request and the platform starts standing your project up — server, database, address. Here's | `modules/public-landing/public/projects.html:1277` |
 | `86cde1930d84` | certain | Only mine | `modules/public-landing/public/projects.html:419` |
 | `f82fe1982ab3` | certain | Open an issue on the repository | `modules/public-landing/public/contact.html:52` |
@@ -1981,7 +1981,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `fb416bf1a26b` | certain | The handle names your project on the platform — and its address comes with it. Once it stands up, a few GitHub | `modules/public-landing/public/projects.html:1245` |
 | `a954f0dce9a3` | certain | The platform | `modules/public-landing/public/contact.html:65` |
 | `4fd8f5746cc5` | certain | The platform is run as a non-profit, capture-resistant commons. | `modules/public-landing/public/terms.html:50` |
-| `666291db6ac3` | certain | The platform stores the date you accepted these terms, and which version, on your account. It is written by si | `modules/public-landing/public/terms.html:70` |
+| `dede132846fe` | certain | The platform stores the date you accepted these terms, and which version, on your account. It is written when  | `modules/public-landing/public/terms.html:70` |
 | `20fcebaa85c4` | certain | The project hub needs JavaScript — the map, your projects, and starting a new one all live here. You can read  | `modules/public-landing/public/projects.html:472` |
 | `4a740b5afe73` | certain | The project map | `modules/public-landing/public/projects.html:482` |
 | `345fec12e5d8` | certain | The repository | `modules/public-landing/public/contact.html:50` |

package/docs/copy-registry.json

@@ -17160,9 +17160,9 @@
       "confidence": "certain"
     },
     {
-      "id": "2a1b87d28a9c",
+      "id": "3b1cbe9e33aa",
       "surface": "landing",
-      "text": "If your account already existed when this version took effect, the platform accepted it on your behalf, rather than waiting for you to sign in, and dated it the day that was done. The record marks that acceptance as grandfathered, so it is never mistaken for one you gave, and your own acceptance replaces it the next time you sign in.",
+      "text": "If your account already existed when this version took effect, the platform accepted it on your behalf, rather than waiting for you to sign in, and dated it the day that was done. The record marks that acceptance as grandfathered, so it is never mistaken for one you gave, and your own acceptance replaces it the next time you sign in to a project.",
       "file": "modules/public-landing/public/terms.html",
       "line": 71,
       "origin": "html-text",
@@ -17475,9 +17475,9 @@
       "confidence": "certain"
     },
     {
-      "id": "69400ca12477",
+      "id": "7fe31ce20c09",
       "surface": "landing",
-      "text": "Once you have signed in here and accepted these terms, your profile and that record are public by default: at your handle’s page, in the people directory, to project owners looking for people to work with, and to search engines. An account that has never signed in here stays provisional and is published nowhere.",
+      "text": "Once you have signed in to a project with your platform account and accepted these terms, your profile and that record are public by default: at your handle’s page, in the people directory, to project owners looking for people to work with, and to search engines. An account that has never signed in to a project that way stays provisional and is published nowhere.",
       "file": "modules/public-landing/public/terms.html",
       "line": 68,
       "origin": "html-text",
@@ -18339,9 +18339,9 @@
       "confidence": "certain"
     },
     {
-      "id": "666291db6ac3",
+      "id": "dede132846fe",
       "surface": "landing",
-      "text": "The platform stores the date you accepted these terms, and which version, on your account. It is written by signing in here, and only once — signing in again does not change the original date. This is version",
+      "text": "The platform stores the date you accepted these terms, and which version, on your account. It is written when you sign in to a project with your platform account, and only once — signing in again does not change the date you accepted. This is version",
       "file": "modules/public-landing/public/terms.html",
       "line": 70,
       "origin": "html-text",

package/docs/module-api-changelog.md

@@ -2531,5 +2531,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.1024 with no explicit bump. run 36185386905. (task 1002620)
   1.19.1026 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.1025 with no explicit bump. run 36186644421. (task 1002620)
+  1.19.1027 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.1026 with no explicit bump. run 36187742785. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/platform-identity/connections.js

@@ -561,6 +561,7 @@ module.exports = {
   DEGREE_MAX,
   FANOUT_1,
   FANOUT_2,
+  neighboursSql,
   findAccountByHandle,
   isConnectedTo,
   requestConnection,