@bongos/core 1.19.1026 → 1.19.1028

package/docs/api/openapi.json

@@ -141,6 +141,14 @@
       "name": "grades",
       "description": "Endpoints under `/api/bongos/grades`."
     },
+    {
+      "name": "guild-requests",
+      "description": "Endpoints under `/api/bongos/guild-requests`."
+    },
+    {
+      "name": "guilds",
+      "description": "Endpoints under `/api/bongos/guilds`."
+    },
     {
       "name": "healthz",
       "description": "Endpoints under `/api/bongos/healthz`."
@@ -8276,51 +8284,34 @@
         ]
       }
     },
-    "/healthz": {
-      "get": {
-        "operationId": "get_healthz",
+    "/guild-requests/{id}": {
+      "delete": {
+        "operationId": "delete_guild_requests_id",
         "tags": [
-          "healthz"
+          "guild-requests"
         ],
-        "summary": "GET /healthz",
-        "description": "liveness probe; the status dashboard (status.<apex>) hits this anonymously.\n\n**Rank:** `public` — No authentication — any caller.",
-        "x-rank": "public",
-        "x-source": "src/bongos/routes/healthz.js",
-        "responses": {
-          "200": {
-            "description": "Success.",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/GetHealthzResponse"
-                }
-              }
-            }
-          },
-          "400": {
-            "$ref": "#/components/responses/BadRequest"
+        "summary": "DELETE /guild-requests/:id",
+        "description": "cancel a row I opened: my request, or (as owner) an invite my guild sent.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/platform-identity/routes/guilds.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
           }
-        },
-        "security": []
-      }
-    },
-    "/help-requests": {
-      "get": {
-        "operationId": "get_help_requests",
-        "tags": [
-          "help-requests"
         ],
-        "summary": "GET /help-requests",
-        "description": "The BOARD read (task 1003942): every open ask in the project, newest first, for the Collab page's \"all open asks\" block. rank: any-builder — an ask is addressed inside this project and every reader here is a member; the route takes no craft and no builder from the caller, so there is nothing to widen.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
-        "x-rank": "any-builder",
-        "x-source": "modules/lifecycle/routes/help-requests.js",
         "responses": {
           "200": {
             "description": "Success.",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/GetHelpRequestsResponse"
+                  "$ref": "#/components/schemas/DeleteGuildRequestsIdResponse"
                 }
               }
             }
@@ -8333,6 +8324,9 @@
           },
           "403": {
             "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
           }
         },
         "security": [
@@ -8340,22 +8334,35 @@
             "builderSession": []
           }
         ]
-      },
+      }
+    },
+    "/guild-requests/{id}/accept": {
       "post": {
-        "operationId": "post_help_requests",
+        "operationId": "post_guild_requests_id_accept",
         "tags": [
-          "help-requests"
+          "guild-requests"
         ],
-        "summary": "POST /help-requests",
-        "description": "asking for help is not a privileged act, and gating it would exclude exactly the newcomers most likely to be stuck.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "summary": "POST /guild-requests/:id/accept",
+        "description": "accept an invite addressed to ME, or (as the guild's owner) a request to join it. An invite accept must echo the visibility its card showed; if the guild changed since, 409 and the card re-renders (ADR 0336 D4 §3). Any row the caller may not accept is 404.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
-        "x-source": "modules/lifecycle/routes/help-requests.js",
+        "x-source": "modules/platform-identity/routes/guilds.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
         "requestBody": {
-          "required": true,
+          "required": false,
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/PostHelpRequestsRequest"
+                "$ref": "#/components/schemas/PostGuildRequestsIdAcceptRequest"
               }
             }
           },
@@ -8367,7 +8374,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/PostHelpRequestsResponse"
+                  "$ref": "#/components/schemas/PostGuildRequestsIdAcceptResponse"
                 }
               }
             }
@@ -8380,6 +8387,9 @@
           },
           "403": {
             "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
           }
         },
         "security": [
@@ -8389,26 +8399,30 @@
         ]
       }
     },
-    "/help-requests/archive": {
-      "get": {
-        "operationId": "get_help_requests_archive",
+    "/guild-requests/{id}/decline": {
+      "post": {
+        "operationId": "post_guild_requests_id_decline",
         "tags": [
-          "help-requests"
+          "guild-requests"
         ],
-        "summary": "GET /help-requests/archive",
-        "description": "THE ARCHIVE (task 1004224, owner direction): what a settled ask becomes. Until now a settled ask simply vanished from Collab. That was tolerable while settling meant a person had decided the ask was done — they knew. It stops being tolerable the moment the LEDGER settles asks on its own: a row can now leave the page without anybody having watched it go, and a surface that silently disappears its own history is asking to be distrusted. TWO LISTS, NOT ONE, and the split is the owner's: asks made OF YOU and asks you made OF OTHERS are different questions with different follow-ups, and a merged list would need a per-row label to say which it was — which is the same information, said worse. ONE ROUTE FOR BOTH. They share a settle, a bound and a shape, and the page draws them side by side in one section; two routes would be two round trips for one collapsed block and two places for the projection to drift. rank: any-builder, and the scoping matches the open reads exactly — you see what was addressed to you and what you asked, and nothing else. `crafts` comes from `builders.preferred_disciplines` through craftsForBuilder, NEVER from the query string. That is not caution: a ?craft= param validated only against the enum is precisely the hole C01's grader found on the open read, and an archive is the larger prize because it is the whole history rather than today's board. This route accepts no craft, no builder and no status from the caller, so there is nothing here to narrow or widen.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "summary": "POST /guild-requests/:id/decline",
+        "description": "decline an invite to ME, or (as owner) a request to my guild. SILENT: 204, and the other side is never told.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
-        "x-source": "modules/lifecycle/routes/help-requests.js",
+        "x-source": "modules/platform-identity/routes/guilds.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
         "responses": {
           "200": {
-            "description": "Success.",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/GetHelpRequestsArchiveResponse"
-                }
-              }
-            }
+            "description": "Success."
           },
           "400": {
             "$ref": "#/components/responses/BadRequest"
@@ -8418,6 +8432,9 @@
           },
           "403": {
             "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
           }
         },
         "security": [
@@ -8427,29 +8444,40 @@
         ]
       }
     },
-    "/help-requests/for-me": {
-      "get": {
-        "operationId": "get_help_requests_for_me",
+    "/guilds": {
+      "post": {
+        "operationId": "post_guilds",
         "tags": [
-          "help-requests"
+          "guilds"
         ],
-        "summary": "GET /help-requests/for-me",
-        "description": "The addressed read — C01's answer to \"and fires a notification\". A request is immediately visible to the person or craft it names. A true PUSH lives in the builder-needs feed (`builder-settings`), which is outside this goal's scope wall, so it is recorded as a gap rather than reached for. rank: any-builder — you only ever see what is addressed to you.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "summary": "POST /guilds",
+        "description": "create a guild. The creator becomes its one owner, and chooses its visibility: there is no default (ADR 0336 D1).\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
-        "x-source": "modules/lifecycle/routes/help-requests.js",
+        "x-source": "modules/platform-identity/routes/guilds.js",
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostGuildsRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
         "responses": {
           "200": {
             "description": "Success.",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/GetHelpRequestsForMeResponse"
+                  "$ref": "#/components/schemas/PostGuildsResponse"
                 }
               }
             }
           },
           "400": {
-            "$ref": "#/components/responses/BadRequest"
+            "$ref": "#/components/responses/ValidationFailed"
           },
           "401": {
             "$ref": "#/components/responses/Unauthorized"
@@ -8465,23 +8493,34 @@
         ]
       }
     },
-    "/help-requests/mine": {
+    "/guilds/{slug}": {
       "get": {
-        "operationId": "get_help_requests_mine",
+        "operationId": "get_guilds_slug",
         "tags": [
-          "help-requests"
+          "guilds"
+        ],
+        "summary": "GET /guilds/:slug",
+        "description": "a public guild's page data. The roster is the members who agreed to be shown AND whose own accounts are publicly visible (ADR 0336 D4); size is that roster's length. no-store: a hide or a visibility flip must beat every cache (ADR 0171 D5).\n\n**Rank:** `public` — No authentication — any caller.",
+        "x-rank": "public",
+        "x-source": "modules/platform-identity/routes/guilds-public.js",
+        "parameters": [
+          {
+            "name": "slug",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `slug`."
+          }
         ],
-        "summary": "GET /help-requests/mine",
-        "description": "your own asks, so you can settle them.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
-        "x-rank": "any-builder",
-        "x-source": "modules/lifecycle/routes/help-requests.js",
         "responses": {
           "200": {
             "description": "Success.",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/GetHelpRequestsMineResponse"
+                  "$ref": "#/components/schemas/GetGuildsSlugResponse"
                 }
               }
             }
@@ -8489,47 +8528,38 @@
           "400": {
             "$ref": "#/components/responses/BadRequest"
           },
-          "401": {
-            "$ref": "#/components/responses/Unauthorized"
-          },
-          "403": {
-            "$ref": "#/components/responses/Forbidden"
+          "404": {
+            "$ref": "#/components/responses/NotFound"
           }
         },
-        "security": [
-          {
-            "builderSession": []
-          }
-        ]
-      }
-    },
-    "/help-requests/{id}": {
+        "security": []
+      },
       "patch": {
-        "operationId": "patch_help_requests_id",
+        "operationId": "patch_guilds_slug",
         "tags": [
-          "help-requests"
+          "guilds"
         ],
-        "summary": "PATCH /help-requests/:id",
-        "description": "THE ASKER OR THE ADDRESSEE settles the request: 'answered' when it has been dealt with, 'withdrawn' when the asker no longer needs it. ADR 0330 widened 'answered' to the person the request NAMES — once a reply puts the answer on the row itself, an addressee who has answered in the open and still cannot close it is a surface arguing with itself. 'withdrawn' stays the asker's alone: only the person who needed something can say they no longer need it. Nobody is assigned by being asked — closing an ask ends a question, it does not accept work (ADR 0187 §3). rank: any-builder — who may settle is enforced in the UPDATE's WHERE, not by rank. The caller's crafts come from THEIR OWN profile, never from the body, for the same reason the addressed read refuses a ?craft= it was handed.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "summary": "PATCH /guilds/:slug",
+        "description": "owner: edit name, description or visibility. The slug is fixed at creation (ADR 0336 D6), so it is not a field here.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
-        "x-source": "modules/lifecycle/routes/help-requests.js",
+        "x-source": "modules/platform-identity/routes/guilds.js",
         "parameters": [
           {
-            "name": "id",
+            "name": "slug",
             "in": "path",
             "required": true,
             "schema": {
               "type": "string"
             },
-            "description": "Path parameter `id`."
+            "description": "Path parameter `slug`."
           }
         ],
         "requestBody": {
-          "required": true,
+          "required": false,
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/PatchHelpRequestsIdRequest"
+                "$ref": "#/components/schemas/PatchGuildsSlugRequest"
               }
             }
           },
@@ -8541,7 +8571,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/PatchHelpRequestsIdResponse"
+                  "$ref": "#/components/schemas/PatchGuildsSlugResponse"
                 }
               }
             }
@@ -8564,27 +8594,25 @@
             "builderSession": []
           }
         ]
-      }
-    },
-    "/help-requests/{id}/replies": {
-      "get": {
-        "operationId": "get_help_requests_id_replies",
+      },
+      "delete": {
+        "operationId": "delete_guilds_slug",
         "tags": [
-          "help-requests"
+          "guilds"
         ],
-        "summary": "GET /help-requests/:id/replies",
-        "description": ", matching the board read this hangs under. AN UNKNOWN ID ANSWERS `[]`, NOT 404, and that asymmetry with the POST above is deliberate rather than an oversight (raised by the grader). This surface has already had one lesson about existence lookups: PATCH used to look a row up to say WHICH of three things was wrong, which let a caller enumerate ids by watching the refusal change. A 404 here would rebuild exactly that oracle on the cheapest possible request — a GET, repeatable, with nothing written. The POST can afford the 404 because it is a WRITE: it costs an attempt, it is rate-limited by being a write, and a reply to a phantom ask has to fail with a reason or fail as an FK 500 that tells the caller nothing useful. A read has no such excuse, and \"no replies\" is a true answer about an ask that does not exist.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "summary": "DELETE /guilds/:slug",
+        "description": "owner: dissolve. Hard delete, cascading to every membership and open request (ADR 0336 D2).\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
-        "x-source": "modules/lifecycle/routes/help-requests.js",
+        "x-source": "modules/platform-identity/routes/guilds.js",
         "parameters": [
           {
-            "name": "id",
+            "name": "slug",
             "in": "path",
             "required": true,
             "schema": {
               "type": "string"
             },
-            "description": "Path parameter `id`."
+            "description": "Path parameter `slug`."
           }
         ],
         "responses": {
@@ -8593,7 +8621,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/GetHelpRequestsIdRepliesResponse"
+                  "$ref": "#/components/schemas/DeleteGuildsSlugResponse"
                 }
               }
             }
@@ -8616,25 +8644,27 @@
             "builderSession": []
           }
         ]
-      },
+      }
+    },
+    "/guilds/{slug}/invites": {
       "post": {
-        "operationId": "post_help_requests_id_replies",
+        "operationId": "post_guilds_slug_invites",
         "tags": [
-          "help-requests"
+          "guilds"
         ],
-        "summary": "POST /help-requests/:id/replies",
-        "description": "---- replies (task 1004216, ADR 0330) ------------------------------------- THE HALF THIS SURFACE SHIPPED WITHOUT. A builder could ask, and the asker could mark their own row answered; the person being ASKED had no write at all, so the answer happened somewhere Bongos could not see it. ANY BUILDER MAY REPLY, deliberately. The board read (GET /help-requests) is already project-wide, so every member can see every open ask — and a reply says nothing more private than the ask it hangs under. Restricting replies to the addressee would also break the common good case: somebody who is not who you asked turns out to know the answer. APPEND-ONLY, with no edit and no delete route. That is not an omission to fill in later: the table's own trigger refuses an UPDATE or a DELETE, and the restraint is what keeps this an answer surface rather than the chat surface ADR 0187 §4a declined to build here.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "summary": "POST /guilds/:slug/invites",
+        "description": "owner: invite up to INVITE_BATCH_MAX builders by handle, each an ordinary individual invite (ADR 0336 D3). Unlisted guilds take invites. count is the array's own length.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
-        "x-source": "modules/lifecycle/routes/help-requests.js",
+        "x-source": "modules/platform-identity/routes/guilds.js",
         "parameters": [
           {
-            "name": "id",
+            "name": "slug",
             "in": "path",
             "required": true,
             "schema": {
               "type": "string"
             },
-            "description": "Path parameter `id`."
+            "description": "Path parameter `slug`."
           }
         ],
         "requestBody": {
@@ -8642,7 +8672,7 @@
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/PostHelpRequestsIdRepliesRequest"
+                "$ref": "#/components/schemas/PostGuildsSlugInvitesRequest"
               }
             }
           },
@@ -8654,7 +8684,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/PostHelpRequestsIdRepliesResponse"
+                  "$ref": "#/components/schemas/PostGuildsSlugInvitesResponse"
                 }
               }
             }
@@ -8679,23 +8709,34 @@
         ]
       }
     },
-    "/inbox": {
+    "/guilds/{slug}/members": {
       "get": {
-        "operationId": "get_inbox",
+        "operationId": "get_guilds_slug_members",
         "tags": [
-          "inbox"
+          "guilds"
         ],
-        "summary": "GET /inbox",
-        "description": "read open ideas; skill-friction rows filtered by viewer rank.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "summary": "GET /guilds/:slug/members",
+        "description": "the members' roster, for members only (the own-scope door to an unlisted guild, ADR 0336 D4). A private member is listed here, to fellow members, and on no public page.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
-        "x-source": "modules/ideas/routes/inbox.js",
+        "x-source": "modules/platform-identity/routes/guilds.js",
+        "parameters": [
+          {
+            "name": "slug",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `slug`."
+          }
+        ],
         "responses": {
           "200": {
             "description": "Success.",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/GetInboxResponse"
+                  "$ref": "#/components/schemas/GetGuildsSlugMembersResponse"
                 }
               }
             }
@@ -8708,6 +8749,9 @@
           },
           "403": {
             "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
           }
         },
         "security": [
@@ -8715,30 +8759,814 @@
             "builderSession": []
           }
         ]
-      },
-      "post": {
-        "operationId": "post_inbox",
+      }
+    },
+    "/guilds/{slug}/members/{handle}": {
+      "delete": {
+        "operationId": "delete_guilds_slug_members_handle",
         "tags": [
-          "inbox"
+          "guilds"
         ],
-        "summary": "POST /inbox",
-        "description": "for ordinary ideas; metic+ for kind='criterion-proposal'. Anyone can file a general contribution (the open-to-all path that idea-triage's \"Xenos can still file\" line guarantees). But kind= 'criterion-proposal' is the marker the /planning-session skill writes from Metic-mode, and a planning-session proposal reshapes the next version's scope-truth — that's a trusted-builder operation (V3.R87 / task 306). Gate it here so a Xenos can't slip a criterion proposal in via raw curl after the skill itself refuses to run for them.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "summary": "DELETE /guilds/:slug/members/:handle",
+        "description": "owner: remove a member (never the owner). Hard delete.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
-        "x-source": "modules/ideas/routes/inbox.js",
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/PostInboxRequest"
-              }
-            }
-          },
-          "x-validated": true
-        },
-        "responses": {
-          "200": {
-            "description": "Success."
+        "x-source": "modules/platform-identity/routes/guilds.js",
+        "parameters": [
+          {
+            "name": "slug",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `slug`."
+          },
+          {
+            "name": "handle",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `handle`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/DeleteGuildsSlugMembersHandleResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/guilds/{slug}/membership": {
+      "patch": {
+        "operationId": "patch_guilds_slug_membership",
+        "tags": [
+          "guilds"
+        ],
+        "summary": "PATCH /guilds/:slug/membership",
+        "description": "MY switches in one guild: shown on its public page (ADR 0336 D4) and counted in its totals (ADR 0337 D4.4). Each optional, at least one required, both keyed on the session.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/platform-identity/routes/guilds.js",
+        "parameters": [
+          {
+            "name": "slug",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `slug`."
+          }
+        ],
+        "requestBody": {
+          "required": false,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PatchGuildsSlugMembershipRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      },
+      "delete": {
+        "operationId": "delete_guilds_slug_membership",
+        "tags": [
+          "guilds"
+        ],
+        "summary": "DELETE /guilds/:slug/membership",
+        "description": "leave. The owner must transfer first unless they are the last member, when leaving dissolves the guild (ADR 0336 D2).\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/platform-identity/routes/guilds.js",
+        "parameters": [
+          {
+            "name": "slug",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `slug`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/DeleteGuildsSlugMembershipResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/guilds/{slug}/requests": {
+      "get": {
+        "operationId": "get_guilds_slug_requests",
+        "tags": [
+          "guilds"
+        ],
+        "summary": "GET /guilds/:slug/requests",
+        "description": "owner: the join requests to decide and the invites still out. Stamps seen_at on the requests only.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/platform-identity/routes/guilds.js",
+        "parameters": [
+          {
+            "name": "slug",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `slug`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetGuildsSlugRequestsResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      },
+      "post": {
+        "operationId": "post_guilds_slug_requests",
+        "tags": [
+          "guilds"
+        ],
+        "summary": "POST /guilds/:slug/requests",
+        "description": "ask to join. Only a PUBLIC guild takes requests, so an unlisted guild and an unknown slug are one 404 (ADR 0336 D3/D4). A request written and one swallowed by a decline cooldown answer identically.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/platform-identity/routes/guilds.js",
+        "parameters": [
+          {
+            "name": "slug",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `slug`."
+          }
+        ],
+        "requestBody": {
+          "required": false,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostGuildsSlugRequestsRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostGuildsSlugRequestsResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/guilds/{slug}/transfer": {
+      "post": {
+        "operationId": "post_guilds_slug_transfer",
+        "tags": [
+          "guilds"
+        ],
+        "summary": "POST /guilds/:slug/transfer",
+        "description": "owner: hand ownership to an existing member. Two statements in one transaction (ADR 0336 D2).\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/platform-identity/routes/guilds.js",
+        "parameters": [
+          {
+            "name": "slug",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `slug`."
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostGuildsSlugTransferRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostGuildsSlugTransferResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/healthz": {
+      "get": {
+        "operationId": "get_healthz",
+        "tags": [
+          "healthz"
+        ],
+        "summary": "GET /healthz",
+        "description": "liveness probe; the status dashboard (status.<apex>) hits this anonymously.\n\n**Rank:** `public` — No authentication — any caller.",
+        "x-rank": "public",
+        "x-source": "src/bongos/routes/healthz.js",
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetHealthzResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          }
+        },
+        "security": []
+      }
+    },
+    "/help-requests": {
+      "get": {
+        "operationId": "get_help_requests",
+        "tags": [
+          "help-requests"
+        ],
+        "summary": "GET /help-requests",
+        "description": "The BOARD read (task 1003942): every open ask in the project, newest first, for the Collab page's \"all open asks\" block. rank: any-builder — an ask is addressed inside this project and every reader here is a member; the route takes no craft and no builder from the caller, so there is nothing to widen.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/lifecycle/routes/help-requests.js",
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetHelpRequestsResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      },
+      "post": {
+        "operationId": "post_help_requests",
+        "tags": [
+          "help-requests"
+        ],
+        "summary": "POST /help-requests",
+        "description": "asking for help is not a privileged act, and gating it would exclude exactly the newcomers most likely to be stuck.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/lifecycle/routes/help-requests.js",
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostHelpRequestsRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostHelpRequestsResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/help-requests/archive": {
+      "get": {
+        "operationId": "get_help_requests_archive",
+        "tags": [
+          "help-requests"
+        ],
+        "summary": "GET /help-requests/archive",
+        "description": "THE ARCHIVE (task 1004224, owner direction): what a settled ask becomes. Until now a settled ask simply vanished from Collab. That was tolerable while settling meant a person had decided the ask was done — they knew. It stops being tolerable the moment the LEDGER settles asks on its own: a row can now leave the page without anybody having watched it go, and a surface that silently disappears its own history is asking to be distrusted. TWO LISTS, NOT ONE, and the split is the owner's: asks made OF YOU and asks you made OF OTHERS are different questions with different follow-ups, and a merged list would need a per-row label to say which it was — which is the same information, said worse. ONE ROUTE FOR BOTH. They share a settle, a bound and a shape, and the page draws them side by side in one section; two routes would be two round trips for one collapsed block and two places for the projection to drift. rank: any-builder, and the scoping matches the open reads exactly — you see what was addressed to you and what you asked, and nothing else. `crafts` comes from `builders.preferred_disciplines` through craftsForBuilder, NEVER from the query string. That is not caution: a ?craft= param validated only against the enum is precisely the hole C01's grader found on the open read, and an archive is the larger prize because it is the whole history rather than today's board. This route accepts no craft, no builder and no status from the caller, so there is nothing here to narrow or widen.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/lifecycle/routes/help-requests.js",
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetHelpRequestsArchiveResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/help-requests/for-me": {
+      "get": {
+        "operationId": "get_help_requests_for_me",
+        "tags": [
+          "help-requests"
+        ],
+        "summary": "GET /help-requests/for-me",
+        "description": "The addressed read — C01's answer to \"and fires a notification\". A request is immediately visible to the person or craft it names. A true PUSH lives in the builder-needs feed (`builder-settings`), which is outside this goal's scope wall, so it is recorded as a gap rather than reached for. rank: any-builder — you only ever see what is addressed to you.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/lifecycle/routes/help-requests.js",
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetHelpRequestsForMeResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/help-requests/mine": {
+      "get": {
+        "operationId": "get_help_requests_mine",
+        "tags": [
+          "help-requests"
+        ],
+        "summary": "GET /help-requests/mine",
+        "description": "your own asks, so you can settle them.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/lifecycle/routes/help-requests.js",
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetHelpRequestsMineResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/help-requests/{id}": {
+      "patch": {
+        "operationId": "patch_help_requests_id",
+        "tags": [
+          "help-requests"
+        ],
+        "summary": "PATCH /help-requests/:id",
+        "description": "THE ASKER OR THE ADDRESSEE settles the request: 'answered' when it has been dealt with, 'withdrawn' when the asker no longer needs it. ADR 0330 widened 'answered' to the person the request NAMES — once a reply puts the answer on the row itself, an addressee who has answered in the open and still cannot close it is a surface arguing with itself. 'withdrawn' stays the asker's alone: only the person who needed something can say they no longer need it. Nobody is assigned by being asked — closing an ask ends a question, it does not accept work (ADR 0187 §3). rank: any-builder — who may settle is enforced in the UPDATE's WHERE, not by rank. The caller's crafts come from THEIR OWN profile, never from the body, for the same reason the addressed read refuses a ?craft= it was handed.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/lifecycle/routes/help-requests.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PatchHelpRequestsIdRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PatchHelpRequestsIdResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/help-requests/{id}/replies": {
+      "get": {
+        "operationId": "get_help_requests_id_replies",
+        "tags": [
+          "help-requests"
+        ],
+        "summary": "GET /help-requests/:id/replies",
+        "description": ", matching the board read this hangs under. AN UNKNOWN ID ANSWERS `[]`, NOT 404, and that asymmetry with the POST above is deliberate rather than an oversight (raised by the grader). This surface has already had one lesson about existence lookups: PATCH used to look a row up to say WHICH of three things was wrong, which let a caller enumerate ids by watching the refusal change. A 404 here would rebuild exactly that oracle on the cheapest possible request — a GET, repeatable, with nothing written. The POST can afford the 404 because it is a WRITE: it costs an attempt, it is rate-limited by being a write, and a reply to a phantom ask has to fail with a reason or fail as an FK 500 that tells the caller nothing useful. A read has no such excuse, and \"no replies\" is a true answer about an ask that does not exist.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/lifecycle/routes/help-requests.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetHelpRequestsIdRepliesResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      },
+      "post": {
+        "operationId": "post_help_requests_id_replies",
+        "tags": [
+          "help-requests"
+        ],
+        "summary": "POST /help-requests/:id/replies",
+        "description": "---- replies (task 1004216, ADR 0330) ------------------------------------- THE HALF THIS SURFACE SHIPPED WITHOUT. A builder could ask, and the asker could mark their own row answered; the person being ASKED had no write at all, so the answer happened somewhere Bongos could not see it. ANY BUILDER MAY REPLY, deliberately. The board read (GET /help-requests) is already project-wide, so every member can see every open ask — and a reply says nothing more private than the ask it hangs under. Restricting replies to the addressee would also break the common good case: somebody who is not who you asked turns out to know the answer. APPEND-ONLY, with no edit and no delete route. That is not an omission to fill in later: the table's own trigger refuses an UPDATE or a DELETE, and the restraint is what keeps this an answer surface rather than the chat surface ADR 0187 §4a declined to build here.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/lifecycle/routes/help-requests.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostHelpRequestsIdRepliesRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostHelpRequestsIdRepliesResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/inbox": {
+      "get": {
+        "operationId": "get_inbox",
+        "tags": [
+          "inbox"
+        ],
+        "summary": "GET /inbox",
+        "description": "read open ideas; skill-friction rows filtered by viewer rank.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/ideas/routes/inbox.js",
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetInboxResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      },
+      "post": {
+        "operationId": "post_inbox",
+        "tags": [
+          "inbox"
+        ],
+        "summary": "POST /inbox",
+        "description": "for ordinary ideas; metic+ for kind='criterion-proposal'. Anyone can file a general contribution (the open-to-all path that idea-triage's \"Xenos can still file\" line guarantees). But kind= 'criterion-proposal' is the marker the /planning-session skill writes from Metic-mode, and a planning-session proposal reshapes the next version's scope-truth — that's a trusted-builder operation (V3.R87 / task 306). Gate it here so a Xenos can't slip a criterion proposal in via raw curl after the skill itself refuses to run for them.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/ideas/routes/inbox.js",
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostInboxRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success."
           },
           "400": {
             "$ref": "#/components/responses/ValidationFailed"
@@ -10156,12 +10984,99 @@
         ]
       },
       "patch": {
-        "operationId": "patch_me_display_name",
+        "operationId": "patch_me_display_name",
+        "tags": [
+          "me"
+        ],
+        "summary": "PATCH /me/display-name",
+        "description": "PATCH the display name. Body: { display_name: \"<new name>\" }. Validated + trimmed by display-name.js: empty/whitespace-only, control chars, and names over the length ceiling → 422 with an errors array; nothing is written when validation fails. Own-scoped — only the AUTHENTICATED builder's row is touched (api.requireBuilder + req.builder.id), never another builder. Uniqueness is NOT required (display names may collide).\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/builder-settings/routes/settings.js",
+        "requestBody": {
+          "required": false,
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "additionalProperties": true
+              }
+            }
+          },
+          "x-validated": false,
+          "x-body-undocumented": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PatchMeDisplayNameResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/me/event-sound-prefs": {
+      "get": {
+        "operationId": "get_me_event_sound_prefs",
+        "tags": [
+          "me"
+        ],
+        "summary": "GET /me/event-sound-prefs",
+        "description": "Per-builder per-event sound variant selection (task 582, migration 164). Returns each of the 5 build events with their available world-themed variants, the builder's current selection (or the default), and the resolved .wav file name. The local player uses a mirror written by fetch-sound-prefs.js. rank: any-builder — own profile config; mirrors the sound-prefs route.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/builder-settings/routes/settings.js",
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetMeEventSoundPrefsResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      },
+      "patch": {
+        "operationId": "patch_me_event_sound_prefs",
         "tags": [
           "me"
         ],
-        "summary": "PATCH /me/display-name",
-        "description": "PATCH the display name. Body: { display_name: \"<new name>\" }. Validated + trimmed by display-name.js: empty/whitespace-only, control chars, and names over the length ceiling → 422 with an errors array; nothing is written when validation fails. Own-scoped — only the AUTHENTICATED builder's row is touched (api.requireBuilder + req.builder.id), never another builder. Uniqueness is NOT required (display names may collide).\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "summary": "PATCH /me/event-sound-prefs",
+        "description": "PATCH a partial set of event sound overrides. Body shape: { \"<event-id>\": \"<variant-id>\" | null, ... } null clears the override (falls back to the event's default). Unknown event IDs, non-string variants, or variants that don't belong to the event → 422. rank: any-builder — self-service profile edit; mirrors the sound-prefs route.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
         "x-source": "modules/builder-settings/routes/settings.js",
         "requestBody": {
@@ -10183,7 +11098,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/PatchMeDisplayNameResponse"
+                  "$ref": "#/components/schemas/PatchMeEventSoundPrefsResponse"
                 }
               }
             }
@@ -10205,23 +11120,23 @@
         ]
       }
     },
-    "/me/event-sound-prefs": {
+    "/me/guild-requests": {
       "get": {
-        "operationId": "get_me_event_sound_prefs",
+        "operationId": "get_me_guild_requests",
         "tags": [
           "me"
         ],
-        "summary": "GET /me/event-sound-prefs",
-        "description": "Per-builder per-event sound variant selection (task 582, migration 164). Returns each of the 5 build events with their available world-themed variants, the builder's current selection (or the default), and the resolved .wav file name. The local player uses a mirror written by fetch-sound-prefs.js. rank: any-builder — own profile config; mirrors the sound-prefs route.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "summary": "GET /me/guild-requests",
+        "description": "MY queue: invites addressed to me, each carrying the card (the guild's current visibility, which an accept must echo back), and the join requests I sent. Stamps seen_at on the invites.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
-        "x-source": "modules/builder-settings/routes/settings.js",
+        "x-source": "modules/platform-identity/routes/guilds.js",
         "responses": {
           "200": {
             "description": "Success.",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/GetMeEventSoundPrefsResponse"
+                  "$ref": "#/components/schemas/GetMeGuildRequestsResponse"
                 }
               }
             }
@@ -10241,36 +11156,25 @@
             "builderSession": []
           }
         ]
-      },
-      "patch": {
-        "operationId": "patch_me_event_sound_prefs",
+      }
+    },
+    "/me/guilds": {
+      "get": {
+        "operationId": "get_me_guilds",
         "tags": [
           "me"
         ],
-        "summary": "PATCH /me/event-sound-prefs",
-        "description": "PATCH a partial set of event sound overrides. Body shape: { \"<event-id>\": \"<variant-id>\" | null, ... } null clears the override (falls back to the event's default). Unknown event IDs, non-string variants, or variants that don't belong to the event → 422. rank: any-builder — self-service profile edit; mirrors the sound-prefs route.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "summary": "GET /me/guilds",
+        "description": "MY guilds, each with my own two switches. count is the array's own length.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
-        "x-source": "modules/builder-settings/routes/settings.js",
-        "requestBody": {
-          "required": false,
-          "content": {
-            "application/json": {
-              "schema": {
-                "type": "object",
-                "additionalProperties": true
-              }
-            }
-          },
-          "x-validated": false,
-          "x-body-undocumented": true
-        },
+        "x-source": "modules/platform-identity/routes/guilds.js",
         "responses": {
           "200": {
             "description": "Success.",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/PatchMeEventSoundPrefsResponse"
+                  "$ref": "#/components/schemas/GetMeGuildsResponse"
                 }
               }
             }
@@ -19429,6 +20333,42 @@
           "removed"
         ]
       },
+      "DeleteGuildRequestsIdResponse": {
+        "type": "object",
+        "properties": {
+          "outcome": {}
+        },
+        "required": [
+          "outcome"
+        ]
+      },
+      "DeleteGuildsSlugMembersHandleResponse": {
+        "type": "object",
+        "properties": {
+          "outcome": {}
+        },
+        "required": [
+          "outcome"
+        ]
+      },
+      "DeleteGuildsSlugMembershipResponse": {
+        "type": "object",
+        "properties": {
+          "outcome": {}
+        },
+        "required": [
+          "outcome"
+        ]
+      },
+      "DeleteGuildsSlugResponse": {
+        "type": "object",
+        "properties": {
+          "outcome": {}
+        },
+        "required": [
+          "outcome"
+        ]
+      },
       "DeleteInboxIdSparkResponse": {
         "type": "object",
         "properties": {
@@ -20237,6 +21177,49 @@
           "builders"
         ]
       },
+      "GetGuildsSlugMembersResponse": {
+        "type": "object",
+        "properties": {
+          "guild": {},
+          "you": {},
+          "members": {},
+          "count": {}
+        },
+        "required": [
+          "guild",
+          "you",
+          "members",
+          "count"
+        ]
+      },
+      "GetGuildsSlugRequestsResponse": {
+        "type": "object",
+        "properties": {
+          "incoming": {},
+          "outgoing": {},
+          "incoming_count": {},
+          "outgoing_count": {}
+        },
+        "required": [
+          "incoming",
+          "outgoing",
+          "incoming_count",
+          "outgoing_count"
+        ]
+      },
+      "GetGuildsSlugResponse": {
+        "type": "object",
+        "properties": {
+          "guild": {},
+          "members": {},
+          "size": {}
+        },
+        "required": [
+          "guild",
+          "members",
+          "size"
+        ]
+      },
       "GetHealthzResponse": {
         "type": "object",
         "properties": {
@@ -20479,6 +21462,32 @@
           "events"
         ]
       },
+      "GetMeGuildRequestsResponse": {
+        "type": "object",
+        "properties": {
+          "incoming": {},
+          "outgoing": {},
+          "incoming_count": {},
+          "outgoing_count": {}
+        },
+        "required": [
+          "incoming",
+          "outgoing",
+          "incoming_count",
+          "outgoing_count"
+        ]
+      },
+      "GetMeGuildsResponse": {
+        "type": "object",
+        "properties": {
+          "guilds": {},
+          "count": {}
+        },
+        "required": [
+          "guilds",
+          "count"
+        ]
+      },
       "GetMeRecentShipsResponse": {
         "type": "object",
         "properties": {
@@ -21630,6 +22639,41 @@
           "changed"
         ]
       },
+      "PatchGuildsSlugMembershipRequest": {
+        "type": "object",
+        "properties": {
+          "shown_publicly": {
+            "type": "boolean"
+          },
+          "counted_in_totals": {}
+        },
+        "additionalProperties": false
+      },
+      "PatchGuildsSlugRequest": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string",
+            "minLength": 1
+          },
+          "description": {
+            "type": "string"
+          },
+          "visibility": {
+            "type": "string"
+          }
+        },
+        "additionalProperties": false
+      },
+      "PatchGuildsSlugResponse": {
+        "type": "object",
+        "properties": {
+          "guild": {}
+        },
+        "required": [
+          "guild"
+        ]
+      },
       "PatchHelpRequestsIdRequest": {
         "type": "object",
         "properties": {
@@ -24133,6 +25177,125 @@
           "rank"
         ]
       },
+      "PostGuildRequestsIdAcceptRequest": {
+        "type": "object",
+        "properties": {
+          "visibility": {
+            "type": "string"
+          },
+          "counted_in_totals": {}
+        },
+        "additionalProperties": false
+      },
+      "PostGuildRequestsIdAcceptResponse": {
+        "type": "object",
+        "properties": {
+          "status": {}
+        },
+        "required": [
+          "status"
+        ]
+      },
+      "PostGuildsRequest": {
+        "type": "object",
+        "properties": {
+          "slug": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 39
+          },
+          "name": {
+            "type": "string",
+            "minLength": 1
+          },
+          "description": {
+            "type": "string"
+          },
+          "visibility": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "slug",
+          "name",
+          "visibility"
+        ],
+        "additionalProperties": false
+      },
+      "PostGuildsResponse": {
+        "type": "object",
+        "properties": {
+          "guild": {}
+        },
+        "required": [
+          "guild"
+        ]
+      },
+      "PostGuildsSlugInvitesRequest": {
+        "type": "object",
+        "properties": {
+          "handles": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          }
+        },
+        "required": [
+          "handles"
+        ],
+        "additionalProperties": false
+      },
+      "PostGuildsSlugInvitesResponse": {
+        "type": "object",
+        "properties": {
+          "results": {},
+          "count": {}
+        },
+        "required": [
+          "results",
+          "count"
+        ]
+      },
+      "PostGuildsSlugRequestsRequest": {
+        "type": "object",
+        "properties": {
+          "counted_in_totals": {}
+        },
+        "additionalProperties": false
+      },
+      "PostGuildsSlugRequestsResponse": {
+        "type": "object",
+        "properties": {
+          "status": {}
+        },
+        "required": [
+          "status"
+        ]
+      },
+      "PostGuildsSlugTransferRequest": {
+        "type": "object",
+        "properties": {
+          "handle": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 39
+          }
+        },
+        "required": [
+          "handle"
+        ],
+        "additionalProperties": false
+      },
+      "PostGuildsSlugTransferResponse": {
+        "type": "object",
+        "properties": {
+          "outcome": {}
+        },
+        "required": [
+          "outcome"
+        ]
+      },
       "PostHelpRequestsIdRepliesRequest": {
         "type": "object",
         "properties": {
@@ -26619,9 +27782,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 420,
-  "x-schema-count": 457,
+  "x-endpoint-count": 437,
+  "x-schema-count": 479,
   "x-undocumented-bodies": 9,
-  "x-response-schemas": 312,
+  "x-response-schemas": 327,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }