@bongos/core 1.19.380 → 1.19.382

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.380",
-  "core_contract": "1.19.380",
-  "source_commit": "9ac31cfa402b87da10f79f47ebd3853ea094ade1",
+  "core_version": "1.19.382",
+  "core_contract": "1.19.382",
+  "source_commit": "e25777564172174924d9ee444d920a7c1b6dee44",
   "source_ref": "HEAD",
-  "built_at": "2026-08-27T15:01:57.285Z",
+  "built_at": "2026-08-27T16:42:17.638Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 336,
     "agent_docs_stubbed": 22,
-    "functional_verbatim": 1595,
+    "functional_verbatim": 1598,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 1953,
-  "tree_sha256": "2def5dd84550a7068c137514fb8fa1fcbb7631e2f817a841738ff3ef6d0c634f",
+  "file_count": 1956,
+  "tree_sha256": "0f3a95aa9c80905da7b7ec21e7cf6edfa3208ae622fe0674fcdb36cbc9319dd5",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -347,12 +347,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "c35dae1d34955947517c4481105267b0153f921a8db4b4c5d3b5293ab4b7987d"
+      "sha256": "838e52897ec1b7642d7cc9d3955c0a8b123caa2bc17bf323422eed7b5f2c9322"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "05629fc4ba2d8b3c965a1e8eadee5aece7ffbb446fb473d720df890d28b2ccba"
+      "sha256": "c04c5b4959c3bd6ddf7247a5f9b2ff07078384af505ece4de7932b1108bafd50"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -362,17 +362,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "e72156a07def001a8ac5ca95920f079c55a49bd0fd713fd22a06a6b84d7957d3"
+      "sha256": "0d92a14fe49b6d9b82aa8611c83d23c89dccdf22f68802c129624b924cb6daf6"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "e9a6dd8d60741347814d184016bb3eaae1b319ba299121e7a39a55367bc12e56"
+      "sha256": "4b36b46a77832a0f4fb56f627691e396e519ba886addcb9624db2301d67d5006"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "7332b346c70cf367f441ba15aa19a0c35180d98239b3525bc2c26285e94c6eb7"
+      "sha256": "d0cee5f3378977180a8b7de8ef657a5fd258f81e183074dbd02220f169d7cd49"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -1477,12 +1477,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "1d40e3666f05b4b28d7b9433e84c0ae4bfccc907660053006694814799365bf0"
+      "sha256": "01f4d002d3ea1b02c204b48674125deae8e0ffabdd77384852cc51348ecbd18b"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "57b66bbfe0c1d7aa8274a43d813c77c83986a3e4cf43046e9e0a637ac4fe308d"
+      "sha256": "246192acc035ea58448701176e6f98f6d2f0a01cf27930efcbc58c019291cd3e"
     },
     {
       "path": "docs/architecture.md",
@@ -1507,12 +1507,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "d33a88dc1e00b39960e7e92fadeae3017ed44381eeccdb0a2c104bc01c015da2"
+      "sha256": "80311a873183c3480b49014b5b7a2f6ae9383348941e529c9a9e61a21cf4d6e3"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "6c208eae7de91f25b52939cb23933a7e5d5b1ae9fac835c87826530460a01270"
+      "sha256": "02d3c0b762c635d55febb7510d6aebdbb56213eb2841bd703b5eff1a044aa5e7"
     },
     {
       "path": "docs/design-contract.md",
@@ -2674,6 +2674,11 @@
       "mode": "0000644",
       "sha256": "b3fbc5d91adf6c6021859bdd8050015c0449360eb33d70c71fdeda0cc1276dd3"
     },
+    {
+      "path": "migrations/core_228_idea_inbox_captured_by_idx.sql",
+      "mode": "0000644",
+      "sha256": "031f739e4e22e2bf9fa3480147f4b0f280d4ed8610d71d8d8a828a83b9cabca2"
+    },
     {
       "path": "modules/agents/migrations/agents_001_definitions.sql",
       "mode": "0000644",
@@ -3057,7 +3062,7 @@
     {
       "path": "modules/dev-box/app/src/vendor/bongos-client.cjs",
       "mode": "0000644",
-      "sha256": "e72156a07def001a8ac5ca95920f079c55a49bd0fd713fd22a06a6b84d7957d3"
+      "sha256": "0d92a14fe49b6d9b82aa8611c83d23c89dccdf22f68802c129624b924cb6daf6"
     },
     {
       "path": "modules/dev-box/app/test/unit.mjs",
@@ -3757,7 +3762,7 @@
     {
       "path": "modules/hall-ui/public/hall-kit.js",
       "mode": "0000644",
-      "sha256": "eea1102877233794d84a6f76187a9fbd26c4a58cf523df3bf0a31c041ead9933"
+      "sha256": "e392af98c2d310bfe80ccc560895dc2729abbe416087fcc7609d22dd4593484c"
     },
     {
       "path": "modules/hall-ui/public/hall-render.js",
@@ -3912,12 +3917,12 @@
     {
       "path": "modules/hall-ui/public/profile.html",
       "mode": "0000644",
-      "sha256": "b40e046ca91cb99f0f8a701bd4cc96c03b23432691e256c97cd55527c0be604b"
+      "sha256": "437a1d29edb129f2c21aaa842a57e06058e4355c14c8b0deba6576c83672a90d"
     },
     {
       "path": "modules/hall-ui/public/profile.js",
       "mode": "0000644",
-      "sha256": "a63cb32c0c8b8fa5628e80bcf1d27b8a556340d585c38f98a7c3bee629eb6804"
+      "sha256": "d1e73a781b88743c5cfe21452d738989e631d30f12e38a2589a6519fc7b4b81e"
     },
     {
       "path": "modules/hall-ui/public/ranks.html",
@@ -4072,7 +4077,7 @@
     {
       "path": "modules/ideas/inbox.js",
       "mode": "0000644",
-      "sha256": "edb3fc66ff0c89fde112b691bd761478ccf621bacb0bb91f7ae94ec63c2546c7"
+      "sha256": "72b69185c90131cc8004ad28f24e9d5bfb7eaf4cc01b8d13ad898019a6f58f39"
     },
     {
       "path": "modules/ideas/migrations/ideas_001_grades.sql",
@@ -4112,7 +4117,7 @@
     {
       "path": "modules/ideas/routes/inbox.js",
       "mode": "0000644",
-      "sha256": "cfe139439ef93d42718354fd10781e0aa11f5f8a730d64dbf09c7232305daaaf"
+      "sha256": "a092eea43d9030eb55a23b60bd1ad5673132b83a3a2649961413cd505fd685ef"
     },
     {
       "path": "modules/ideas/routing.js",
@@ -4129,6 +4134,11 @@
       "mode": "0000644",
       "sha256": "7cb9dac9cb87b679e1ae50e4112b3a7928a38ebb9902c8947a74d17bec4d9009"
     },
+    {
+      "path": "modules/lifecycle/activity.js",
+      "mode": "0000644",
+      "sha256": "38bbb1b0f0992c655cd48f95476fbbdac11381bb929999b6da0f68fbbf802b16"
+    },
     {
       "path": "modules/lifecycle/claim-eligibility.js",
       "mode": "0000644",
@@ -4302,7 +4312,7 @@
     {
       "path": "modules/lifecycle/lifecycle.js",
       "mode": "0000644",
-      "sha256": "ba8f6356c8ec9f908878d592d294033db1c9ff9403306a2ae5099df7aa466e72"
+      "sha256": "2d683f62f6813d7894dd54657a70b027cf686dfa76879541adc84544f03d4b51"
     },
     {
       "path": "modules/lifecycle/merge-lock.js",
@@ -5077,12 +5087,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "05f2e731a6530add843687946f4d1a183df137883aa72b0f5e05fbcd245a9606"
+      "sha256": "b29fad739b5ae1c818f7974aaffa1a2c9cdcd468a96fdd5cf557e669539a26ea"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "aefb29c1023e56ba909de7085ef2fabc5235bc5281698ebe6b7f02db20b48b56"
+      "sha256": "d0986bb5a781bc56402c86519e1c293f7672c0b52938574913356eceba838dfb"
     },
     {
       "path": "public-docs/index.html",
@@ -6452,7 +6462,7 @@
     {
       "path": "scripts/gds/ship-memory-sync.js",
       "mode": "0000644",
-      "sha256": "3eb7d979b1d1706b532cd93e272e254e166bdc27d18101e0d4b7b1a0f7b51346"
+      "sha256": "85d3fae0872110a184650e3b45ee7ea5f5fc45d0dfc41374bca0926231dba4b8"
     },
     {
       "path": "scripts/gds/ship-merge.js",
@@ -6477,7 +6487,7 @@
     {
       "path": "scripts/gds/ship-session-upload.js",
       "mode": "0000644",
-      "sha256": "f340c466aa2eb2b7e79fb8626f687de3f85f3631a103e36f0ca91a27787efb7f"
+      "sha256": "8a700110c7e13249dc16991b481c6abf385c9c4ee7d1e683b7d495f6aef5f708"
     },
     {
       "path": "scripts/gds/ship-state.js",
@@ -6627,7 +6637,7 @@
     {
       "path": "scripts/hall-preview/server.js",
       "mode": "0000644",
-      "sha256": "384b6ee204f1ca1bb0f352d6a879f7674c9e7741999e584b72dfe4bf1983d0d1"
+      "sha256": "eb2c9bde186fcd050c41d68697945f46b9d891e545cc65f81db71b647a7cb3d9"
     },
     {
       "path": "scripts/migrate.sh",
@@ -6887,7 +6897,7 @@
     {
       "path": "src/bongos/routes/builders.js",
       "mode": "0000644",
-      "sha256": "38760c782a379b7a977b9ed4e0af00726d4080ebedf9ea071cefe8d90ceb69b1"
+      "sha256": "a5250b0ff33a42087c2546ab74b68cc7decdd3a08fda7a2f0ad56bcbf51837cd"
     },
     {
       "path": "src/bongos/routes/github.js",
@@ -6987,7 +6997,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "01bd9ccb349c0ae53bcf4ea71094aebb92ba90c5a21b75eace035f75a6ddfc32"
+      "sha256": "9a9f751f0b8da59f2e74a6ee3ea8f57c3ddbd0be971b97d5c654d7ef02d6b322"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -8944,6 +8954,11 @@
       "mode": "0000644",
       "sha256": "3c85d28ecc55e375988f3e55aee993c8c84220889678262d8207146c2772f3f5"
     },
+    {
+      "path": "tests/profile_activity.mjs",
+      "mode": "0000644",
+      "sha256": "013df2528c4998588c1d3f89a9a25f8fa1e912b8abc2d8e95c26c250869a386f"
+    },
     {
       "path": "tests/profile_fields.mjs",
       "mode": "0000644",
@@ -9352,7 +9367,7 @@
     {
       "path": "tests/session_records.mjs",
       "mode": "0000644",
-      "sha256": "8c62fe0bec07aea4c30f84d296eb7b40c9550606aacf6cb63f9644ca34f12069"
+      "sha256": "1beb0554d1e29b853d54d17e4345ca7c62f1cd34c72fe6a20b9e2d712e7f2dce"
     },
     {
       "path": "tests/session_reward_on_land.mjs",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 322 operations across 52 resource groups
+- 324 operations across 52 resource groups
 
 ## Install
 

package/clients/bongos-client/bongos-client.global.js

@@ -223,6 +223,8 @@ function createClient(opts = {}) {
     "builders": {
       // GET /builders/{id}/active-claims — rank: metic+archon — GET /builders/:id/active-claims
       getBuildersIdActiveClaims: (args) => request("GET", "/builders/{id}/active-claims", { hasBody: false }, args),
+      // GET /builders/{id}/activity — rank: any-builder — GET /builders/:id/activity
+      getBuildersIdActivity: (args) => request("GET", "/builders/{id}/activity", { hasBody: false }, args),
       // PATCH /builders/{id}/budget — rank: metic+archon — PATCH /builders/:id/budget
       patchBuildersIdBudget: (args) => request("PATCH", "/builders/{id}/budget", { hasBody: true }, args),
       // GET /builders/{id}/onboarding — rank: public — GET /builders/:id/onboarding
@@ -441,6 +443,8 @@ function createClient(opts = {}) {
       postInboxIdSpark: (args) => request("POST", "/inbox/{id}/spark", { hasBody: true }, args),
       // GET /inbox/awaiting-nod — rank: metic+archon — GET /inbox/awaiting-nod
       getInboxAwaitingNod: (args) => request("GET", "/inbox/awaiting-nod", { hasBody: false }, args),
+      // GET /inbox/by-builder/{id} — rank: any-builder — GET /inbox/by-builder/:id
+      getInboxByBuilderId: (args) => request("GET", "/inbox/by-builder/{id}", { hasBody: false }, args),
       // POST /inbox/score — rank: any-builder — POST /inbox/score
       postInboxScore: (args) => request("POST", "/inbox/score", { hasBody: true }, args),
       // GET /inbox/sparks — rank: any-builder — GET /inbox/sparks

package/clients/bongos-client/index.cjs

@@ -222,6 +222,8 @@ function createClient(opts = {}) {
     "builders": {
       // GET /builders/{id}/active-claims — rank: metic+archon — GET /builders/:id/active-claims
       getBuildersIdActiveClaims: (args) => request("GET", "/builders/{id}/active-claims", { hasBody: false }, args),
+      // GET /builders/{id}/activity — rank: any-builder — GET /builders/:id/activity
+      getBuildersIdActivity: (args) => request("GET", "/builders/{id}/activity", { hasBody: false }, args),
       // PATCH /builders/{id}/budget — rank: metic+archon — PATCH /builders/:id/budget
       patchBuildersIdBudget: (args) => request("PATCH", "/builders/{id}/budget", { hasBody: true }, args),
       // GET /builders/{id}/onboarding — rank: public — GET /builders/:id/onboarding
@@ -440,6 +442,8 @@ function createClient(opts = {}) {
       postInboxIdSpark: (args) => request("POST", "/inbox/{id}/spark", { hasBody: true }, args),
       // GET /inbox/awaiting-nod — rank: metic+archon — GET /inbox/awaiting-nod
       getInboxAwaitingNod: (args) => request("GET", "/inbox/awaiting-nod", { hasBody: false }, args),
+      // GET /inbox/by-builder/{id} — rank: any-builder — GET /inbox/by-builder/:id
+      getInboxByBuilderId: (args) => request("GET", "/inbox/by-builder/{id}", { hasBody: false }, args),
       // POST /inbox/score — rank: any-builder — POST /inbox/score
       postInboxScore: (args) => request("POST", "/inbox/score", { hasBody: true }, args),
       // GET /inbox/sparks — rank: any-builder — GET /inbox/sparks

package/clients/bongos-client/index.d.ts

@@ -31,6 +31,7 @@ export interface GetBoxTerminalResponse { state: unknown; url: unknown; credenti
 export interface GetBoxesResponse { boxes: unknown }
 export interface GetBuildersDirectoryResponse { builders: unknown }
 export interface GetBuildersIdActiveClaimsResponse { builder_id: unknown; claims: unknown; stale_hours: unknown }
+export interface GetBuildersIdActivityResponse { builder_id: unknown; section: unknown; role: unknown; rows: unknown; total: unknown }
 export interface GetBuildersIdOnboardingResponse { builder_id: unknown; onboarding: unknown }
 export interface GetBuildersIdProfileResponse { builder: unknown; shipped_count: unknown; recent_ships: unknown; achievements: unknown; cross_project?: unknown }
 export interface GetBuildersMePendingRankChangeResponse { change: unknown; greeting?: unknown }
@@ -55,6 +56,7 @@ export interface GetHealthzResponse { ok: boolean; auth_configured: unknown }
 export interface GetHelpRequestsForMeResponse { help_requests: unknown; count: unknown; crafts: unknown }
 export interface GetHelpRequestsMineResponse { help_requests: unknown; count: unknown }
 export interface GetInboxAwaitingNodResponse { awaiting: unknown; count: unknown }
+export interface GetInboxByBuilderIdResponse { builder_id: unknown; ideas: unknown; total: unknown; limit: unknown; offset: unknown }
 export interface GetInboxIdResponse { idea: unknown }
 export interface GetInboxResponse { ideas: unknown; open_count: unknown }
 export interface GetInboxSparksResponse { sparks: unknown; count: unknown }
@@ -513,6 +515,8 @@ export interface BongosClient {
   "builders": {
     /** GET /builders/{id}/active-claims — rank: metic+archon */
     getBuildersIdActiveClaims(args?: RequestArgs): Promise<GetBuildersIdActiveClaimsResponse>;
+    /** GET /builders/{id}/activity — rank: any-builder */
+    getBuildersIdActivity(args?: RequestArgs): Promise<GetBuildersIdActivityResponse>;
     /** PATCH /builders/{id}/budget — rank: metic+archon */
     patchBuildersIdBudget(args?: RequestArgs & { body?: PatchBuildersIdBudgetRequest }): Promise<PatchBuildersIdBudgetResponse>;
     /** GET /builders/{id}/onboarding — rank: public */
@@ -731,6 +735,8 @@ export interface BongosClient {
     postInboxIdSpark(args?: RequestArgs): Promise<PostInboxIdSparkResponse>;
     /** GET /inbox/awaiting-nod — rank: metic+archon */
     getInboxAwaitingNod(args?: RequestArgs): Promise<GetInboxAwaitingNodResponse>;
+    /** GET /inbox/by-builder/{id} — rank: any-builder */
+    getInboxByBuilderId(args?: RequestArgs): Promise<GetInboxByBuilderIdResponse>;
     /** POST /inbox/score — rank: any-builder */
     postInboxScore(args: RequestArgs & { body: PostInboxScoreRequest }): Promise<PostInboxScoreResponse>;
     /** GET /inbox/sparks — rank: any-builder */

package/clients/bongos-client/index.mjs

@@ -219,6 +219,8 @@ export function createClient(opts = {}) {
     "builders": {
       // GET /builders/{id}/active-claims — rank: metic+archon — GET /builders/:id/active-claims
       getBuildersIdActiveClaims: (args) => request("GET", "/builders/{id}/active-claims", { hasBody: false }, args),
+      // GET /builders/{id}/activity — rank: any-builder — GET /builders/:id/activity
+      getBuildersIdActivity: (args) => request("GET", "/builders/{id}/activity", { hasBody: false }, args),
       // PATCH /builders/{id}/budget — rank: metic+archon — PATCH /builders/:id/budget
       patchBuildersIdBudget: (args) => request("PATCH", "/builders/{id}/budget", { hasBody: true }, args),
       // GET /builders/{id}/onboarding — rank: public — GET /builders/:id/onboarding
@@ -437,6 +439,8 @@ export function createClient(opts = {}) {
       postInboxIdSpark: (args) => request("POST", "/inbox/{id}/spark", { hasBody: true }, args),
       // GET /inbox/awaiting-nod — rank: metic+archon — GET /inbox/awaiting-nod
       getInboxAwaitingNod: (args) => request("GET", "/inbox/awaiting-nod", { hasBody: false }, args),
+      // GET /inbox/by-builder/{id} — rank: any-builder — GET /inbox/by-builder/:id
+      getInboxByBuilderId: (args) => request("GET", "/inbox/by-builder/{id}", { hasBody: false }, args),
       // POST /inbox/score — rank: any-builder — POST /inbox/score
       postInboxScore: (args) => request("POST", "/inbox/score", { hasBody: true }, args),
       // GET /inbox/sparks — rank: any-builder — GET /inbox/sparks

package/docs/api/openapi.json

@@ -2676,6 +2676,58 @@
         ]
       }
     },
+    "/builders/{id}/activity": {
+      "get": {
+        "operationId": "get_builders_id_activity",
+        "tags": [
+          "builders"
+        ],
+        "summary": "GET /builders/:id/activity",
+        "description": "GET /builders/:id/activity — the profile's PER-CRAFT activity log (task 1003281, goal 1000072, criterion legibility-activity-by-role). WHAT IT ADDS OVER /profile. The profile answers \"how much has this person shipped\" — one count and the last five works, craft-blind. A person's artist track record is a different question from their engineer one, so this route serves ONE section (`tasks` or `goals`) for ONE craft, paged. It EXTENDS the profile surface rather than forking it: the page is the same page, the identity band and the achievement shelf are unchanged, and this fills the ledger below them. The third section of that log — the IDEA TRAIL — is served by the ideas module's GET /inbox/by-builder/:id, because an idea is its domain's row, not a lifecycle one. ONE SECTION PER CALL, not all three in one payload: each ledger pages independently, and a single response carrying three page windows would need three limit/offset pairs on one query string to say anything at all. rank: any-builder, NOT owner-only — a track record is a thing other people read; that is what makes the profile a portfolio rather than a dashboard, and it is the same posture /profile, /builders/roster and the leaderboard already take toward the same rows. The per-viewer filtering that DOES matter is the private-goal wall below, and it is applied to the DATA, not to the caller. But, unlike /profile directly above, this read IS gated to a sign-in. The goals half is viewer-dependent: a private goal's title is exactly what ADR 0112 says a non-member must not learn, so the read needs to know who is asking. Serving it publicly would mean either leaking private goals or silently omitting the viewer's own — both worse than a sign-in. The tasks half is the same already-public shipped-work data /profile returns.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "src/bongos/routes/builders.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetBuildersIdActivityResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/builders/{id}/budget": {
       "patch": {
         "operationId": "patch_builders_id_budget",
@@ -6778,6 +6830,58 @@
         ]
       }
     },
+    "/inbox/by-builder/{id}": {
+      "get": {
+        "operationId": "get_inbox_by_builder_id",
+        "tags": [
+          "inbox"
+        ],
+        "summary": "GET /inbox/by-builder/:id",
+        "description": "THE IDEA TRAIL: every idea one builder filed, newest first, with what became of each (task 1003281, goal 1000072, criterion legibility-activity-by-role). Backs the ideator view of the profile's activity log; the tasks and goals halves of that log are served by the core GET /builders/:id/activity, because they are lifecycle rows, not ideas. WHY IT IS A LIST ROUTE AND NOT A FIELD ON THE PROFILE: the trail is paged. A prolific filer's trail is long, and the criterion asks for \"every idea you submitted\", so it cannot be a top-N attached to another response. Gated to any signed-in builder, matching GET /inbox/:id directly below: idea TITLES and triage notes are builder-visible, not world-visible, and the public profile route deliberately carries none of them. The viewer's rank rides into the read so the skill-friction gate holds here as it does on every other idea list. DECLARED BEFORE `GET /inbox/:id` DELIBERATELY — the fourth route in this file to need that. `/inbox/by-builder/41` would otherwise bind `:id='by-builder'` and parseId would 400 the whole trail. tests/profile_activity.mjs pins the relative order.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/ideas/routes/inbox.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetInboxByBuilderIdResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/inbox/score": {
       "post": {
         "operationId": "post_inbox_score",
@@ -14986,6 +15090,23 @@
           "stale_hours"
         ]
       },
+      "GetBuildersIdActivityResponse": {
+        "type": "object",
+        "properties": {
+          "builder_id": {},
+          "section": {},
+          "role": {},
+          "rows": {},
+          "total": {}
+        },
+        "required": [
+          "builder_id",
+          "section",
+          "role",
+          "rows",
+          "total"
+        ]
+      },
       "GetBuildersIdOnboardingResponse": {
         "type": "object",
         "properties": {
@@ -15272,6 +15393,23 @@
           "count"
         ]
       },
+      "GetInboxByBuilderIdResponse": {
+        "type": "object",
+        "properties": {
+          "builder_id": {},
+          "ideas": {},
+          "total": {},
+          "limit": {},
+          "offset": {}
+        },
+        "required": [
+          "builder_id",
+          "ideas",
+          "total",
+          "limit",
+          "offset"
+        ]
+      },
       "GetInboxIdResponse": {
         "type": "object",
         "properties": {
@@ -20310,9 +20448,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 322,
-  "x-schema-count": 357,
+  "x-endpoint-count": 324,
+  "x-schema-count": 359,
   "x-undocumented-bodies": 9,
-  "x-response-schemas": 240,
+  "x-response-schemas": 242,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 322 endpoints across 52 route files.
+> **Generated from the live route files** — the route file is authoritative. 324 endpoints across 52 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -119,11 +119,12 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 |---|---|---|---|---|
 | GET | `/api/bongos/bug-attachments/:name` | `any-builder` | — | GET /api/bongos/bug-attachments/:name — stream one stored image. |
 
-## `builders` (9)
+## `builders` (10)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
 | GET | `/api/bongos/builders/:id/active-claims` | `metic+archon` | — | GET /builders/:id/active-claims — V3.R14 (task 238). |
+| GET | `/api/bongos/builders/:id/activity` | `any-builder` | — | GET /builders/:id/activity — the profile's PER-CRAFT activity log (task 1003281, goal 1000072, criterion legibility-activity-by-role). |
 | PATCH | `/api/bongos/builders/:id/budget` | `metic+archon` | `monthly_budget_usd` | PATCH /builders/:id/budget — set or clear a builder's monthly spend ceiling (V3.R84 task 302, criterion C3). |
 | GET | `/api/bongos/builders/:id/onboarding` | `public` | — | GET /builders/:id/onboarding — V3.R75 (task 294) onboarding checklist read. |
 | GET | `/api/bongos/builders/:id/profile` | `public` | — | GET /builders/:id/profile — the viewable builder profile page's read (task 1467, goal 25 "bx-identity"). |
@@ -278,7 +279,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | GET | `/api/bongos/help-requests/for-me` | `any-builder` | — | The addressed read — C01's answer to "and fires a notification". |
 | GET | `/api/bongos/help-requests/mine` | `any-builder` | — | your own asks, so you can settle them. |
 
-## `inbox` (14)
+## `inbox` (15)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -293,6 +294,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | POST | `/api/bongos/inbox/:id/spark` | `any-builder` | — | Mark a Quick Idea as a Big Idea Spark — "I have the spark but not the full picture, someone develop this". |
 | DELETE | `/api/bongos/inbox/:id/spark` | `any-builder` | — | Withdraw the Big Idea Spark mark — the reversibility half of R144. |
 | GET | `/api/bongos/inbox/awaiting-nod` | `metic+archon` | — | GET /inbox/awaiting-nod — the NOD QUEUE (task 1003066, BV1.R05). |
+| GET | `/api/bongos/inbox/by-builder/:id` | `any-builder` | — | THE IDEA TRAIL: every idea one builder filed, newest first, with what became of each (task 1003281, goal 1000072, criterion legibility-ac… |
 | POST | `/api/bongos/inbox/score` | `any-builder` | `field_values`, `template_key` |  |
 | GET | `/api/bongos/inbox/sparks` | `any-builder` | — | GET /inbox/sparks — THE SPARK QUEUE (task 1002921 / BV1.R145, goal 1000062). |
 | GET | `/api/bongos/inbox/template` | `any-builder` | — | ----------------------------------------------------------------------- The two reads the hall's Full Idea composer is built from (task 1… |