@bongos/core 1.19.358 → 1.19.359

package/docs/api/openapi.json

@@ -205,6 +205,10 @@
       "name": "sso",
       "description": "Endpoints under `/api/bongos/sso`."
     },
+    {
+      "name": "task-recommendations",
+      "description": "Endpoints under `/api/bongos/task-recommendations`."
+    },
     {
       "name": "task-visuals",
       "description": "Endpoints under `/api/bongos/task-visuals`."
@@ -12092,6 +12096,194 @@
         "security": []
       }
     },
+    "/task-recommendations": {
+      "post": {
+        "operationId": "post_task_recommendations",
+        "tags": [
+          "task-recommendations"
+        ],
+        "summary": "POST /task-recommendations",
+        "description": "recommending is not a privileged act. It grants the recipient nothing they did not already have (the task was claimable by them or it was not), so gating it by rank would only stop newcomers from pointing at something useful.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/lifecycle/routes/recommendations.js",
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostTaskRecommendationsRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostTaskRecommendationsResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/task-recommendations/for-me": {
+      "get": {
+        "operationId": "get_task_recommendations_for_me",
+        "tags": [
+          "task-recommendations"
+        ],
+        "summary": "GET /task-recommendations/for-me",
+        "description": "you only ever see what is addressed to you. NOTE WHAT THIS RESPONSE DOES NOT CONTAIN: any signal that the recipient now holds the task. It carries the task's own status so the recipient can judge, and that is all. Claiming is a separate, deliberate act on their part.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/lifecycle/routes/recommendations.js",
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetTaskRecommendationsForMeResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/task-recommendations/mine": {
+      "get": {
+        "operationId": "get_task_recommendations_mine",
+        "tags": [
+          "task-recommendations"
+        ],
+        "summary": "GET /task-recommendations/mine",
+        "description": "what I recommended, and what became of it. Unfiltered by default: a declined recommendation stays readable, which is the criterion's \"the recommendation and its author are readable afterwards\".\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/lifecycle/routes/recommendations.js",
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetTaskRecommendationsMineResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/task-recommendations/{id}": {
+      "patch": {
+        "operationId": "patch_task_recommendations_id",
+        "tags": [
+          "task-recommendations"
+        ],
+        "summary": "PATCH /task-recommendations/:id",
+        "description": "Decline. Costs nothing, and this route is where that is visible: it flips a status and returns the row. No karma call, no counter, no notification to the sender beyond the row itself turning up in their own list. rank: any-builder — ownership is enforced in the UPDATE's WHERE, not by rank.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/lifecycle/routes/recommendations.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PatchTaskRecommendationsIdRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PatchTaskRecommendationsIdResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/task-visuals/{name}": {
       "get": {
         "operationId": "get_task_visuals_name",
@@ -13431,6 +13623,58 @@
         ]
       }
     },
+    "/tasks/{id}/recommendations": {
+      "get": {
+        "operationId": "get_tasks_id_recommendations",
+        "tags": [
+          "tasks"
+        ],
+        "summary": "GET /tasks/:id/recommendations",
+        "description": "The per-task audit read: who recommended this task, to whom, and why. rank: any-builder, and deliberately NOT scoped to the two parties. The criterion's argument for a ledger is that an untraced recommendation is indistinguishable from a task quietly changing hands — a trace only the two people involved can read does not answer that. Tasks are already visible to every builder, and a recommendation says nothing more private than \"this person thought that person should look at this\".\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/lifecycle/routes/recommendations.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetTasksIdRecommendationsResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/tasks/{id}/ship": {
       "post": {
         "operationId": "post_tasks_id_ship",
@@ -15307,6 +15551,28 @@
           "public_key_b64"
         ]
       },
+      "GetTaskRecommendationsForMeResponse": {
+        "type": "object",
+        "properties": {
+          "recommendations": {},
+          "count": {}
+        },
+        "required": [
+          "recommendations",
+          "count"
+        ]
+      },
+      "GetTaskRecommendationsMineResponse": {
+        "type": "object",
+        "properties": {
+          "recommendations": {},
+          "count": {}
+        },
+        "required": [
+          "recommendations",
+          "count"
+        ]
+      },
       "GetTasksClaimableResponse": {
         "type": "object",
         "properties": {
@@ -15338,6 +15604,17 @@
           "dependents"
         ]
       },
+      "GetTasksIdRecommendationsResponse": {
+        "type": "object",
+        "properties": {
+          "recommendations": {},
+          "count": {}
+        },
+        "required": [
+          "recommendations",
+          "count"
+        ]
+      },
       "GetTasksNewcomerFloorResponse": {
         "type": "object",
         "properties": {
@@ -15925,6 +16202,35 @@
           "push"
         ]
       },
+      "PatchTaskRecommendationsIdRequest": {
+        "type": "object",
+        "properties": {
+          "status": {
+            "type": "string",
+            "enum": [
+              "declined",
+              "withdrawn"
+            ]
+          }
+        },
+        "required": [
+          "status"
+        ],
+        "additionalProperties": false
+      },
+      "PatchTaskRecommendationsIdResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "recommendation": {}
+        },
+        "required": [
+          "ok",
+          "recommendation"
+        ]
+      },
       "PatchTasksIdRequest": {
         "type": "object",
         "properties": {
@@ -18777,6 +19083,42 @@
           "avatar_url"
         ]
       },
+      "PostTaskRecommendationsRequest": {
+        "type": "object",
+        "properties": {
+          "task_id": {
+            "type": "integer",
+            "minimum": 1
+          },
+          "recommended_to": {
+            "type": "integer",
+            "minimum": 1
+          },
+          "reason": {
+            "type": "string",
+            "minLength": 1
+          }
+        },
+        "required": [
+          "task_id",
+          "recommended_to",
+          "reason"
+        ],
+        "additionalProperties": false
+      },
+      "PostTaskRecommendationsResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "recommendation": {}
+        },
+        "required": [
+          "ok",
+          "recommendation"
+        ]
+      },
       "PostTasksIdAbandonRequest": {
         "type": "object",
         "properties": {
@@ -19452,9 +19794,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 307,
-  "x-schema-count": 343,
+  "x-endpoint-count": 312,
+  "x-schema-count": 350,
   "x-undocumented-bodies": 8,
-  "x-response-schemas": 229,
+  "x-response-schemas": 234,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 307 endpoints across 50 route files.
+> **Generated from the live route files** — the route file is authoritative. 312 endpoints across 51 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -507,13 +507,22 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | GET | `/api/bongos/sso/pubkey` | `public` | — | GET /sso/pubkey — the hub's Ed25519 assertion-verification key (public). |
 | POST | `/api/bongos/sso/token` | `public` | `client_id`, `client_secret`, `code`, `redirect_uri` | POST /sso/token — server-to-server code redemption. |
 
+## `task-recommendations` (4)
+
+| Method | Path | Rank | Body | Description |
+|---|---|---|---|---|
+| POST | `/api/bongos/task-recommendations` | `any-builder` | `task_id`, `recommended_to`, `reason` | recommending is not a privileged act. |
+| PATCH | `/api/bongos/task-recommendations/:id` | `any-builder` | `status` | Decline. |
+| GET | `/api/bongos/task-recommendations/for-me` | `any-builder` | — | you only ever see what is addressed to you. |
+| GET | `/api/bongos/task-recommendations/mine` | `any-builder` | — | what I recommended, and what became of it. |
+
 ## `task-visuals` (1)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
 | GET | `/api/bongos/task-visuals/:name` | `public` | — | the WIDEST path this route can take, declared honestly. |
 
-## `tasks` (29)
+## `tasks` (30)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -537,6 +546,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | POST | `/api/bongos/tasks/:id/promote` | `metic+archon` | — | backlog→ready promotion; scope mutation; ADR 0090 (was archon). |
 | POST | `/api/bongos/tasks/:id/publish-branch` | `any-builder` | `branch`, `head_sha`, `bundle_b64`, `value_summary` |  |
 | GET | `/api/bongos/tasks/:id/publish-status` | `any-builder` | — | GET /tasks/:id/publish-status?branch=<branch> — poll the PR + prod-deploy state for a server-mediated publish so ship.js can confirm the … |
+| GET | `/api/bongos/tasks/:id/recommendations` | `any-builder` | — | The per-task audit read: who recommended this task, to whom, and why. |
 | POST | `/api/bongos/tasks/:id/ship` | `any-builder` | validated | confirmed → shipped. |
 | POST | `/api/bongos/tasks/:id/visual` | `any-builder` | `image_b64`, `content_type`, `alt` | POST /tasks/:id/visual — attach (or replace) this task's ship-time visual. |
 | DELETE | `/api/bongos/tasks/:id/visual` | `any-builder` | — | DELETE /tasks/:id/visual — remove it again. |

package/modules/builder-settings/builder-needs.js

@@ -121,7 +121,34 @@ function helpRequestsNeed(ctx) {
 
 // The registry. To add a future input the system needs from a builder, append a
 // pure (ctx) => need|null function here — every renderer picks it up for free.
-const NEEDS = [artKeyNeed, helpRequestsNeed];
+// Open task RECOMMENDATIONS waiting on this builder (task 1003173 / C03, goal
+// 1000075; criterion collab-pass-a-task). Sibling of helpRequestsNeed above, and
+// here for the same reason C01's grader round put that one here: a recommendation
+// nobody surfaces is merely stored, and the criterion's whole argument is that a
+// recommendation must be a visible, traceable judgement rather than a task
+// quietly changing hands.
+//
+// 'info', NOT a demand, and the message says so. A recommendation grants the
+// recipient nothing and obliges them to nothing — they still claim it themselves
+// if they want it, and declining costs nothing (ADR 0187 §3). Wording that
+// pressured the reader would BE the penalty the decision forbids.
+function taskRecommendationsNeed(ctx) {
+  const n = Number(ctx.openTaskRecommendations) || 0;
+  if (n <= 0) return null;
+  const subject = n === 1 ? 'A task' : `${n} tasks`;
+  const verb = n === 1 ? 'was' : 'were';
+  return {
+    id: 'task_recommendations',
+    title: n === 1 ? 'Someone recommended a task to you' : 'Tasks were recommended to you',
+    what: 'Another builder thought you should look at a task, and said why. It is a suggestion, not an assignment.',
+    state: 'action_needed',
+    severity: 'info',
+    message: `${subject} ${verb} recommended to you. Nothing has been assigned — you would still claim it yourself, and declining costs nothing.`,
+    action: { label: n === 1 ? 'See the recommendation' : 'See the recommendations', href: '/#/collab' },
+  };
+}
+
+const NEEDS = [artKeyNeed, helpRequestsNeed, taskRecommendationsNeed];
 
 // ---- founding grace (task 1002739 / direction §5.6, idea 1000701) -----------
 //
@@ -199,7 +226,7 @@ module.exports = {
   computeNeeds,
   // exported for tests / direct reuse
   artKeyNeed,
-  helpRequestsNeed,
+  helpRequestsNeed, taskRecommendationsNeed,
   foundingGraceActive,
   FOUNDING_GRACE_DAYS,
   SETTINGS_PATH,

package/modules/dev-box/app/src/vendor/bongos-client.cjs

@@ -715,6 +715,16 @@ function createClient(opts = {}) {
       // POST /sso/token — rank: public — POST /sso/token
       postSsoToken: (args) => request("POST", "/sso/token", { hasBody: true }, args),
     },
+    "taskRecommendations": {
+      // POST /task-recommendations — rank: any-builder — POST /task-recommendations
+      postTaskRecommendations: (args) => request("POST", "/task-recommendations", { hasBody: true }, args),
+      // PATCH /task-recommendations/{id} — rank: any-builder — PATCH /task-recommendations/:id
+      patchTaskRecommendationsId: (args) => request("PATCH", "/task-recommendations/{id}", { hasBody: true }, args),
+      // GET /task-recommendations/for-me — rank: any-builder — GET /task-recommendations/for-me
+      getTaskRecommendationsForMe: (args) => request("GET", "/task-recommendations/for-me", { hasBody: false }, args),
+      // GET /task-recommendations/mine — rank: any-builder — GET /task-recommendations/mine
+      getTaskRecommendationsMine: (args) => request("GET", "/task-recommendations/mine", { hasBody: false }, args),
+    },
     "taskVisuals": {
       // GET /task-visuals/{name} — rank: public — GET /task-visuals/:name
       getTaskVisualsName: (args) => request("GET", "/task-visuals/{name}", { hasBody: false }, args),
@@ -760,6 +770,8 @@ function createClient(opts = {}) {
       postTasksIdPublishBranch: (args) => request("POST", "/tasks/{id}/publish-branch", { hasBody: true }, args),
       // GET /tasks/{id}/publish-status — rank: any-builder — GET /tasks/:id/publish-status
       getTasksIdPublishStatus: (args) => request("GET", "/tasks/{id}/publish-status", { hasBody: false }, args),
+      // GET /tasks/{id}/recommendations — rank: any-builder — GET /tasks/:id/recommendations
+      getTasksIdRecommendations: (args) => request("GET", "/tasks/{id}/recommendations", { hasBody: false }, args),
       // POST /tasks/{id}/ship — rank: any-builder — POST /tasks/:id/ship
       postTasksIdShip: (args) => request("POST", "/tasks/{id}/ship", { hasBody: true }, args),
       // DELETE /tasks/{id}/visual — rank: any-builder — DELETE /tasks/:id/visual

package/modules/lifecycle/lifecycle.js

@@ -19,6 +19,7 @@
 const db = require('./db');
 const classifier = require('./task-classifier');
 const helpRequests = require('./help-requests');
+const taskRecommendations = require('./task-recommendations');
 
 module.exports = {
   // --- retired doorway leaks (ADR 0093 §3) ---------------------------------
@@ -39,6 +40,10 @@ module.exports = {
   // task 1003171 (C01): the count of open help requests addressed to a builder,
   // so the kernel's /me can put it in the needs ctx WITHOUT importing this module.
   openHelpRequestsFor: (...a) => helpRequests.countOpenForBuilder(...a),
+  // task 1003173 (C03): the count of open task recommendations waiting on a
+  // builder, exposed the same way and for the same reason — a recommendation
+  // nobody surfaces is merely stored.
+  openTaskRecommendationsFor: (...a) => taskRecommendations.countOpenForRecipient(...a),
   getTask: (...a) => db.getTask(...a),
   listVersions: (...a) => db.listVersions(...a),
   versionProgress: (...a) => db.versionProgress(...a),

package/modules/lifecycle/migrations/lifecycle_005_task_recommendations.sql

@@ -0,0 +1,90 @@
+-- lifecycle_005_task_recommendations.sql — "you should look at this": recommending
+-- a task to someone, which is NOT handing it to them (task 1003173 / C03,
+-- goal 1000075; criterion collab-pass-a-task, ADR 0187 §3).
+--
+-- THE DECISION THIS TABLE ENCODES. Passing a task RECOMMENDS it; it never
+-- transfers the claim. The recipient still claims it themselves, so claim/release
+-- stays the single path to holding a task and nobody acquires work without opting
+-- in. There is deliberately NO transfer column, NO 'accepted' status that grants
+-- anything, and no seam for a future transfer: the decision was recommend-only,
+-- and an unused seam is a cost that later reads as an intention.
+--
+-- WHY THE REASON IS NOT NULLABLE. The criterion's own argument is that a
+-- recommendation which leaves no trace is indistinguishable from a task quietly
+-- changing hands. A reason the sender must write is what makes the ledger a
+-- record of a judgement rather than a nudge — so it is NOT NULL with a non-blank
+-- CHECK, the same shape lifecycle_help_requests gives what_is_stuck.
+--
+-- DECLINING COSTS NOTHING, and that is why 'declined' is just a status here and
+-- nothing else in the schema references it. There is no counter, no cooldown, no
+-- penalty column on either party, and no karma or credit link — a table that
+-- recorded a decline anywhere but here would be the penalty the criterion forbids.
+--
+-- MODULE-OWNED and `lifecycle_`-prefixed, so fitness check 11 permits it: a NEW
+-- table the lifecycle module owns outright, unlike `tasks`/`builders` which are
+-- core tables it only references (ADR 0083 §Decision #5). Mirrors
+-- lifecycle_004_help_requests, its sibling under this goal.
+
+CREATE TABLE IF NOT EXISTS lifecycle_task_recommendations (
+  id                bigserial PRIMARY KEY,
+
+  task_id           bigint NOT NULL REFERENCES tasks(id),
+  recommended_by    bigint NOT NULL REFERENCES builders(id),
+  recommended_to    bigint NOT NULL REFERENCES builders(id),
+
+  -- Required, per the criterion. See the header: this column IS the trace.
+  reason            text NOT NULL,
+
+  -- 'open'      — sent, not yet acted on
+  -- 'declined'  — the recipient said no. Terminal, and carries no consequence.
+  -- 'withdrawn' — the sender took it back. Also terminal.
+  --
+  -- There is NO 'accepted'. Accepting a recommendation is CLAIMING THE TASK, which
+  -- is the claims table's job and the recipient's own action; a status here saying
+  -- "accepted" would be a second, weaker record of holding work and would make this
+  -- table look like the place claims come from. Whether the recipient went on to
+  -- claim it is answered by joining tasks/claims, not by a column here.
+  status            text NOT NULL DEFAULT 'open',
+
+  created_at        timestamptz NOT NULL DEFAULT now(),
+  updated_at        timestamptz NOT NULL DEFAULT now(),
+
+  CONSTRAINT lifecycle_task_recommendations_reason_chk
+    CHECK (length(btrim(reason)) > 0),
+
+  CONSTRAINT lifecycle_task_recommendations_status_chk
+    CHECK (status IN ('open', 'declined', 'withdrawn')),
+
+  -- Recommending a task to yourself is not a recommendation.
+  CONSTRAINT lifecycle_task_recommendations_not_self_chk
+    CHECK (recommended_by <> recommended_to)
+);
+
+-- One OPEN recommendation of a given task to a given person. A second send is the
+-- same judgement repeated, and two identical open rows would make the recipient's
+-- list lie about how many distinct things are waiting on them. Partial, so the
+-- same task CAN be recommended again after a decline or a withdrawal — the
+-- decision was that declining costs nothing, and a permanent unique key would
+-- quietly make a decline final.
+CREATE UNIQUE INDEX IF NOT EXISTS lifecycle_task_recommendations_open_uniq
+  ON lifecycle_task_recommendations (task_id, recommended_to) WHERE status = 'open';
+
+-- The recipient's read: "what has been recommended to me". Partial — a settled
+-- recommendation is history and never needs routing again (the 004 pattern).
+CREATE INDEX IF NOT EXISTS lifecycle_task_recommendations_open_to_idx
+  ON lifecycle_task_recommendations (recommended_to) WHERE status = 'open';
+
+-- The sender's read, and the audit read the criterion asks for: the recommendation
+-- and its author are readable AFTERWARDS, so this one is not filtered by status.
+CREATE INDEX IF NOT EXISTS lifecycle_task_recommendations_by_idx
+  ON lifecycle_task_recommendations (recommended_by, created_at DESC);
+
+-- "Who recommended this task, and why" — the per-task history.
+CREATE INDEX IF NOT EXISTS lifecycle_task_recommendations_task_idx
+  ON lifecycle_task_recommendations (task_id, created_at DESC);
+
+COMMENT ON TABLE lifecycle_task_recommendations IS
+  'A recommendation that someone look at a task (task 1003173). It NEVER transfers a claim: there is no accepted status and no transfer column, because claiming remains the recipient''s own action.';
+
+INSERT INTO schema_migrations (version) VALUES ('lifecycle_005_task_recommendations')
+ON CONFLICT (version) DO NOTHING;

package/modules/lifecycle/module.json

@@ -19,6 +19,7 @@
       "analytics",
       "lifecycle",
       "help-requests",
+      "recommendations",
       "visuals"
     ],
     "pollers": [