@bongos/core 1.19.409 → 1.19.410

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.409",
-  "core_contract": "1.19.409",
-  "source_commit": "752e2e352e3d3819e05eabef5b09b20aeaeeb90b",
+  "core_version": "1.19.410",
+  "core_contract": "1.19.410",
+  "source_commit": "0af744151717afb828e5870e8a17c7c52f5e2f77",
   "source_ref": "HEAD",
-  "built_at": "2026-08-28T22:31:01.892Z",
+  "built_at": "2026-08-28T22:39:19.306Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 352,
     "agent_docs_stubbed": 23,
-    "functional_verbatim": 1666,
+    "functional_verbatim": 1667,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 2041,
-  "tree_sha256": "4b1590fda72bea96890647cd43a22d83b6b988b39e9204eb1d0a29829611f473",
+  "file_count": 2042,
+  "tree_sha256": "c539332813cb188cef63c5f00a3633e3806b219150b0eae2c48ea5179f5a2c0c",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -352,12 +352,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "96114ae5652241ae3bbc07b4b80cf744080d64831afaf684c4f8ec9b6f0da251"
+      "sha256": "80d3bb0a3dc011b0c2b16558b20c1ea2adc3e5345418a8d08f13a7cd2ac5eb9a"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "01949893edb52a4f393c3535159bf5ff8b93c7fad28fe451425cee73ea2a81d2"
+      "sha256": "833fecb6824cb535eb990a8f3a516528c6d560eee856323f5d824afe5bcf7932"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -367,17 +367,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "d20f616bddbd837754dcd8809b4db17d304e94aca5fd001d528b8b50d2358292"
+      "sha256": "bf528220a1990c760111ef291e6d6d6543b62440ab62c3962a8772e897218c69"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "edef54ed26867eacdde4fd852efdca9c5c97dcc046e68ffbcf205a037697155b"
+      "sha256": "dd6fa5d218cefbb27478836ce57a46eb3ca2b2d1639dbf7349240af75af5e65d"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "a08520e80ffa8e11dfedcb83873cd3ad369dd9dcca9c4cf101449f73691fe42c"
+      "sha256": "b07a09551c9af7e526aaf2416e5340b112f7b8b8ffc28c49afe252092a215f9c"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -1522,12 +1522,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "6eb3ca8810c05c7ba1c8756b1694a45872b12ae873bc7ab007ab777405944cae"
+      "sha256": "10be85740e8432f8a1979fc356981f3542aa622f4d001de508e7c7f1c129b832"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "72e10f3ed2ed7c3dca02d80aa6477752af7168548c53ed969aec7ec4a0467a81"
+      "sha256": "cf98b9af848cd0afc56d713ff39e37840b63d4e1548aa184838514e5eec02a64"
     },
     {
       "path": "docs/architecture.md",
@@ -1552,12 +1552,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "f31eb17c518b831422d5685d315378da4078a588b79fc4eeb90dece1db935752"
+      "sha256": "9190ff246dbc8abad78c67e603417e0dc46016f32f45406ba5cdc7904d863658"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "93010c69bf1a366941e7bb226cf25aee4134423fe9bc4a0da5c0e9ce3317342e"
+      "sha256": "9b85ab135b2fc5078dc5ec3d633d84a7700bfd45a6717844ee3475d3602a2282"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2779,6 +2779,11 @@
       "mode": "0000644",
       "sha256": "031f739e4e22e2bf9fa3480147f4b0f280d4ed8610d71d8d8a828a83b9cabca2"
     },
+    {
+      "path": "migrations/core_229_goals_accepting_requests.sql",
+      "mode": "0000644",
+      "sha256": "dd1f70a3414182ac1bfd6ff4a5bd4b18142d55e46d0e67eb708e334d5da6f393"
+    },
     {
       "path": "modules/agents/migrations/agents_001_definitions.sql",
       "mode": "0000644",
@@ -3162,7 +3167,7 @@
     {
       "path": "modules/dev-box/app/src/vendor/bongos-client.cjs",
       "mode": "0000644",
-      "sha256": "d20f616bddbd837754dcd8809b4db17d304e94aca5fd001d528b8b50d2358292"
+      "sha256": "bf528220a1990c760111ef291e6d6d6543b62440ab62c3962a8772e897218c69"
     },
     {
       "path": "modules/dev-box/app/test/unit.mjs",
@@ -3822,12 +3827,12 @@
     {
       "path": "modules/hall-ui/public/goals-page.js",
       "mode": "0000644",
-      "sha256": "968063dbbdbe060a855dde61d3e2db8ade8869f09ab1024dfb20582b1a15ceeb"
+      "sha256": "3f401db6c8dbba4137f1c022e6abddacca6ccf20dfb3ba32eab590893b3e22e9"
     },
     {
       "path": "modules/hall-ui/public/goals-render.js",
       "mode": "0000644",
-      "sha256": "99c81d1ea257d64c312e0917379b4437ba9b645ae8ba74809a1a05a095280bba"
+      "sha256": "709ce7ddbcd7b6964eefc251ef1941ed316002d22df7cba498cb47d187dd060f"
     },
     {
       "path": "modules/hall-ui/public/goals.css",
@@ -4297,7 +4302,7 @@
     {
       "path": "modules/lifecycle/db-goals.js",
       "mode": "0000644",
-      "sha256": "85a87c86496a9f022983a61e7f3642c8f0029c0b07467e27109095a6b98fce61"
+      "sha256": "3ad7f78cbad987307d2203facbc91cec879565f398f9893a0218bbf29fc061bb"
     },
     {
       "path": "modules/lifecycle/db-grade.js",
@@ -4337,7 +4342,7 @@
     {
       "path": "modules/lifecycle/db.js",
       "mode": "0000644",
-      "sha256": "b7f0d36dc13ebad0206b94879262e661e6c2524539732f31e7cec25f61fd9fd6"
+      "sha256": "1bcdab1b402f5222b7e05824fee64f3fbab895f3bd4f8ab17c1c0a5438353c53"
     },
     {
       "path": "modules/lifecycle/dead-deps.js",
@@ -4382,7 +4387,7 @@
     {
       "path": "modules/lifecycle/goal-edits.js",
       "mode": "0000644",
-      "sha256": "7115a27272fe2594b65e2e56a796f5bf97600cb94ba301bc21599c6bc4e60175"
+      "sha256": "09ca2631bfa979f5948b6b669cfe478cc67db3d4e1fbacd4c6f2bbd5ce0ec618"
     },
     {
       "path": "modules/lifecycle/goal-rollup.js",
@@ -4492,12 +4497,12 @@
     {
       "path": "modules/lifecycle/routes/goal-route-authz.js",
       "mode": "0000644",
-      "sha256": "b796c445009803c3567ab1361ca33aed53c00044f7d8959fc72a2044231d15e7"
+      "sha256": "be82985479547bd602dbad544b5e71a3c491cea3c7b0273394c136f1df675b37"
     },
     {
       "path": "modules/lifecycle/routes/goals.js",
       "mode": "0000644",
-      "sha256": "22c4d71ae825dc0601532d45c22d37bcd656cdd408ec2fc3e8e668a916541687"
+      "sha256": "4b24b165d99f165c8407ee403b7abc898c842afc48137695add01fff694ca17b"
     },
     {
       "path": "modules/lifecycle/routes/help-requests.js",
@@ -5352,12 +5357,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "86dacd8d1318040e57b9cdbaba495abd1bcfdac7cf834396d2f3e8d020eddfcc"
+      "sha256": "82095eda38d2b9f3c87a291abd6fd0f8fadec30d215b6745d396e546ebc82f87"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "ab3f6f59ed390c9463e9e3242542791067e7c881ef46cef351030b76a561f24a"
+      "sha256": "c210dfbd1a63b82e3b3f5ef826a029fe363b9bac63dfe428b13b851e6e6e44eb"
     },
     {
       "path": "public-docs/index.html",
@@ -7237,7 +7242,7 @@
     {
       "path": "src/bongos/route-rank-check.js",
       "mode": "0000644",
-      "sha256": "b387d8af3a47e209139f40437c5cd855f58d4e37871869efb23069d575ddd041"
+      "sha256": "ebdf0cb4cb521fbf5aa7809c39e89ad4f776e77b194c734042fae72226511674"
     },
     {
       "path": "src/bongos/routes.js",
@@ -7372,7 +7377,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "c29f8b33a65a1a7ecc1fbe105df9e97c7960be6c785546f32205f1fd612d14a2"
+      "sha256": "1f17103055d4b6493af1e3cc0ac40b6865a844dd3aac8736c45423400f7315b3"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -8382,7 +8387,7 @@
     {
       "path": "tests/goal_membership_requests.mjs",
       "mode": "0000644",
-      "sha256": "bd29e6910bc741ddf18b4592eeeaeac02b45fb1dd321527a8f44203cd78bff18"
+      "sha256": "bb1bc68167bc599082aaf2b582d4907461bdf62fd0d8cf0b6a80cdff75e51449"
     },
     {
       "path": "tests/goal_names.mjs",
@@ -9402,7 +9407,7 @@
     {
       "path": "tests/prose_edits.mjs",
       "mode": "0000644",
-      "sha256": "d5918a7f47e989355e2b78083710736278c6d5f75c13ac8434d5ad6fac6a3d03"
+      "sha256": "a613b7cfa675db5231c44319146333d173d2dfa53da092654d5bd11a141483f4"
     },
     {
       "path": "tests/provision.mjs",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 325 operations across 52 resource groups
+- 327 operations across 52 resource groups
 
 ## Install
 

package/clients/bongos-client/bongos-client.global.js

@@ -325,6 +325,8 @@ function createClient(opts = {}) {
       getGoalsId: (args) => request("GET", "/goals/{id}", { hasBody: false }, args),
       // PATCH /goals/{id} — rank: any-builder — PATCH /goals/:id
       patchGoalsId: (args) => request("PATCH", "/goals/{id}", { hasBody: true }, args),
+      // PATCH /goals/{id}/accepting-requests — rank: any-builder — PATCH /goals/:id/accepting-requests
+      patchGoalsIdAcceptingRequests: (args) => request("PATCH", "/goals/{id}/accepting-requests", { hasBody: true }, args),
       // POST /goals/{id}/archive — rank: metic+archon — POST /goals/:id/archive
       postGoalsIdArchive: (args) => request("POST", "/goals/{id}/archive", { hasBody: true }, args),
       // PATCH /goals/{id}/category — rank: any-builder — PATCH /goals/:id/category
@@ -335,6 +337,8 @@ function createClient(opts = {}) {
       postGoalsIdConflictsResolve: (args) => request("POST", "/goals/{id}/conflicts/resolve", { hasBody: true }, args),
       // POST /goals/{id}/invitations — rank: any-builder — POST /goals/:id/invitations
       postGoalsIdInvitations: (args) => request("POST", "/goals/{id}/invitations", { hasBody: true }, args),
+      // POST /goals/{id}/invitations/{reqId}/rescind — rank: any-builder — POST /goals/:id/invitations/:reqId/rescind
+      postGoalsIdInvitationsReqIdRescind: (args) => request("POST", "/goals/{id}/invitations/{reqId}/rescind", { hasBody: true }, args),
       // POST /goals/{id}/invitations/{reqId}/respond — rank: any-builder — POST /goals/:id/invitations/:reqId/respond
       postGoalsIdInvitationsReqIdRespond: (args) => request("POST", "/goals/{id}/invitations/{reqId}/respond", { hasBody: true }, args),
       // POST /goals/{id}/join — rank: any-builder — POST /goals/:id/join

package/clients/bongos-client/index.cjs

@@ -324,6 +324,8 @@ function createClient(opts = {}) {
       getGoalsId: (args) => request("GET", "/goals/{id}", { hasBody: false }, args),
       // PATCH /goals/{id} — rank: any-builder — PATCH /goals/:id
       patchGoalsId: (args) => request("PATCH", "/goals/{id}", { hasBody: true }, args),
+      // PATCH /goals/{id}/accepting-requests — rank: any-builder — PATCH /goals/:id/accepting-requests
+      patchGoalsIdAcceptingRequests: (args) => request("PATCH", "/goals/{id}/accepting-requests", { hasBody: true }, args),
       // POST /goals/{id}/archive — rank: metic+archon — POST /goals/:id/archive
       postGoalsIdArchive: (args) => request("POST", "/goals/{id}/archive", { hasBody: true }, args),
       // PATCH /goals/{id}/category — rank: any-builder — PATCH /goals/:id/category
@@ -334,6 +336,8 @@ function createClient(opts = {}) {
       postGoalsIdConflictsResolve: (args) => request("POST", "/goals/{id}/conflicts/resolve", { hasBody: true }, args),
       // POST /goals/{id}/invitations — rank: any-builder — POST /goals/:id/invitations
       postGoalsIdInvitations: (args) => request("POST", "/goals/{id}/invitations", { hasBody: true }, args),
+      // POST /goals/{id}/invitations/{reqId}/rescind — rank: any-builder — POST /goals/:id/invitations/:reqId/rescind
+      postGoalsIdInvitationsReqIdRescind: (args) => request("POST", "/goals/{id}/invitations/{reqId}/rescind", { hasBody: true }, args),
       // POST /goals/{id}/invitations/{reqId}/respond — rank: any-builder — POST /goals/:id/invitations/:reqId/respond
       postGoalsIdInvitationsReqIdRespond: (args) => request("POST", "/goals/{id}/invitations/{reqId}/respond", { hasBody: true }, args),
       // POST /goals/{id}/join — rank: any-builder — POST /goals/:id/join

package/clients/bongos-client/index.d.ts

@@ -234,6 +234,7 @@ export interface PostGithubReposResponse { repo: unknown }
 export interface PostGoalsIdArchiveResponse { ok: boolean; goal: unknown }
 export interface PostGoalsIdConflictsResolveRequest { action: string; note?: string; touches?: string[]; first_task_id?: StringifiableId; then_task_id?: StringifiableId; task_id?: StringifiableId }
 export interface PostGoalsIdConflictsResolveResponse { ok: boolean; action: unknown; first_task_id?: unknown; then_task_id?: unknown; dependencies?: unknown; claim?: unknown; task_id?: unknown; touches?: unknown; requires_rank?: unknown }
+export interface PostGoalsIdInvitationsReqIdRescindResponse { ok: boolean; request: unknown }
 export interface PostGoalsIdInvitationsReqIdRespondRequest { action: string }
 export interface PostGoalsIdInvitationsReqIdRespondResponse { ok: boolean; action: unknown; request: unknown; member?: unknown }
 export interface PostGoalsIdInvitationsRequest { note?: string; builder_id?: StringifiableId }
@@ -618,6 +619,8 @@ export interface BongosClient {
     getGoalsId(args?: RequestArgs): Promise<GetGoalsIdResponse>;
     /** PATCH /goals/{id} — rank: any-builder */
     patchGoalsId(args?: RequestArgs): Promise<ApiResponse>;
+    /** PATCH /goals/{id}/accepting-requests — rank: any-builder */
+    patchGoalsIdAcceptingRequests(args?: RequestArgs): Promise<ApiResponse>;
     /** POST /goals/{id}/archive — rank: metic+archon */
     postGoalsIdArchive(args?: RequestArgs): Promise<PostGoalsIdArchiveResponse>;
     /** PATCH /goals/{id}/category — rank: any-builder */
@@ -628,6 +631,8 @@ export interface BongosClient {
     postGoalsIdConflictsResolve(args: RequestArgs & { body: PostGoalsIdConflictsResolveRequest }): Promise<PostGoalsIdConflictsResolveResponse>;
     /** POST /goals/{id}/invitations — rank: any-builder */
     postGoalsIdInvitations(args?: RequestArgs & { body?: PostGoalsIdInvitationsRequest }): Promise<PostGoalsIdInvitationsResponse>;
+    /** POST /goals/{id}/invitations/{reqId}/rescind — rank: any-builder */
+    postGoalsIdInvitationsReqIdRescind(args?: RequestArgs): Promise<PostGoalsIdInvitationsReqIdRescindResponse>;
     /** POST /goals/{id}/invitations/{reqId}/respond — rank: any-builder */
     postGoalsIdInvitationsReqIdRespond(args: RequestArgs & { body: PostGoalsIdInvitationsReqIdRespondRequest }): Promise<PostGoalsIdInvitationsReqIdRespondResponse>;
     /** POST /goals/{id}/join — rank: any-builder */

package/clients/bongos-client/index.mjs

@@ -321,6 +321,8 @@ export function createClient(opts = {}) {
       getGoalsId: (args) => request("GET", "/goals/{id}", { hasBody: false }, args),
       // PATCH /goals/{id} — rank: any-builder — PATCH /goals/:id
       patchGoalsId: (args) => request("PATCH", "/goals/{id}", { hasBody: true }, args),
+      // PATCH /goals/{id}/accepting-requests — rank: any-builder — PATCH /goals/:id/accepting-requests
+      patchGoalsIdAcceptingRequests: (args) => request("PATCH", "/goals/{id}/accepting-requests", { hasBody: true }, args),
       // POST /goals/{id}/archive — rank: metic+archon — POST /goals/:id/archive
       postGoalsIdArchive: (args) => request("POST", "/goals/{id}/archive", { hasBody: true }, args),
       // PATCH /goals/{id}/category — rank: any-builder — PATCH /goals/:id/category
@@ -331,6 +333,8 @@ export function createClient(opts = {}) {
       postGoalsIdConflictsResolve: (args) => request("POST", "/goals/{id}/conflicts/resolve", { hasBody: true }, args),
       // POST /goals/{id}/invitations — rank: any-builder — POST /goals/:id/invitations
       postGoalsIdInvitations: (args) => request("POST", "/goals/{id}/invitations", { hasBody: true }, args),
+      // POST /goals/{id}/invitations/{reqId}/rescind — rank: any-builder — POST /goals/:id/invitations/:reqId/rescind
+      postGoalsIdInvitationsReqIdRescind: (args) => request("POST", "/goals/{id}/invitations/{reqId}/rescind", { hasBody: true }, args),
       // POST /goals/{id}/invitations/{reqId}/respond — rank: any-builder — POST /goals/:id/invitations/:reqId/respond
       postGoalsIdInvitationsReqIdRespond: (args) => request("POST", "/goals/{id}/invitations/{reqId}/respond", { hasBody: true }, args),
       // POST /goals/{id}/join — rank: any-builder — POST /goals/:id/join

package/docs/api/openapi.json

@@ -4644,6 +4644,51 @@
         ]
       }
     },
+    "/goals/{id}/accepting-requests": {
+      "patch": {
+        "operationId": "patch_goals_id_accepting_requests",
+        "tags": [
+          "goals"
+        ],
+        "summary": "PATCH /goals/:id/accepting-requests",
+        "description": "PATCH /goals/:id/accepting-requests { accepting_requests } — a private goal's lead closes or re-opens it to join-requests (task 1002971, spec D6). Closed refuses new asks with honest copy; INVITATIONS ARE UNAFFECTED, so a lead can still reach out. Handler in goal-edits.js beside the visibility toggle (the same gate, the same kind of write); only the registration lives here so route-rank-check still classifies it. rank: any-builder (requireBuilder) + the in-handler owner|manager|Archon gate.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/lifecycle/routes/goals.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/goals/{id}/archive": {
       "post": {
         "operationId": "post_goals_id_archive",
@@ -4922,6 +4967,67 @@
         ]
       }
     },
+    "/goals/{id}/invitations/{reqId}/rescind": {
+      "post": {
+        "operationId": "post_goals_id_invitations_reqId_rescind",
+        "tags": [
+          "goals"
+        ],
+        "summary": "POST /goals/:id/invitations/:reqId/rescind",
+        "description": "POST /goals/:id/invitations/:reqId/rescind — an owner|manager|Archon takes back a PENDING invitation the goal sent (task 1002971): the manager-side mirror of the requester's withdraw, and the missing half of core_188's 'cancelled' state (\"withdrawn/rescinded by the opener\" — only the requester half existed). Sets status='cancelled', kept as the audit trail like a deny's 'rejected'; never touches a join-request row. rank: any-builder (requireBuilder) + the in-handler authorizeRescindInvitation.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/lifecycle/routes/goals.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          },
+          {
+            "name": "reqId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `reqId`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostGoalsIdInvitationsReqIdRescindResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/goals/{id}/invitations/{reqId}/respond": {
       "post": {
         "operationId": "post_goals_id_invitations_reqId_respond",
@@ -18032,6 +18138,19 @@
           "action"
         ]
       },
+      "PostGoalsIdInvitationsReqIdRescindResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "request": {}
+        },
+        "required": [
+          "ok",
+          "request"
+        ]
+      },
       "PostGoalsIdInvitationsReqIdRespondRequest": {
         "type": "object",
         "properties": {
@@ -20532,9 +20651,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 325,
-  "x-schema-count": 360,
+  "x-endpoint-count": 327,
+  "x-schema-count": 361,
   "x-undocumented-bodies": 9,
-  "x-response-schemas": 243,
+  "x-response-schemas": 244,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 325 endpoints across 52 route files.
+> **Generated from the live route files** — the route file is authoritative. 327 endpoints across 52 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -207,7 +207,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | GET | `/api/bongos/github/repos` | `any-builder` | — | acts only on the caller's OWN GitHub identity (the token they granted). |
 | POST | `/api/bongos/github/repos` | `any-builder` | `name` | creates a repo in the caller's OWN account. |
 
-## `goals` (28)
+## `goals` (30)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -215,11 +215,13 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | POST | `/api/bongos/goals` | `metic+archon` | `version_id`, `title`, `subtitle`, `description`, `scope_modules`, `succeeds_goal_id`, `category_id` | POST /goals — create a goal. |
 | GET | `/api/bongos/goals/:id` | `any-builder` | — | GET /goals/:id — one goal with its members + linked criteria (read). |
 | PATCH | `/api/bongos/goals/:id` | `any-builder` | — | PATCH /goals/:id — correct a goal's own title/subtitle/description (tasks 1003102, 1003224). |
+| PATCH | `/api/bongos/goals/:id/accepting-requests` | `any-builder` | — | PATCH /goals/:id/accepting-requests { accepting_requests } — a private goal's lead closes or re-opens it to join-requests (task 1002971, … |
 | POST | `/api/bongos/goals/:id/archive` | `metic+archon` | — | POST /goals/:id/archive — retire a goal (open\|achieved → archived). |
 | PATCH | `/api/bongos/goals/:id/category` | `any-builder` | — | PATCH /goals/:id/category — body { category_id } (null clears it). |
 | GET | `/api/bongos/goals/:id/conflicts` | `any-builder` | — | GET /goals/:id/conflicts — the server-side task-conflict view (task 1736). |
 | POST | `/api/bongos/goals/:id/conflicts/resolve` | `any-builder` | `action`, `note`, `touches`, `first_task_id`, `then_task_id`, `task_id` | POST /goals/:id/conflicts/resolve — the owner/manager resolution actions for a detected conflict (task 1736; authority model ADR 0106): s… |
 | POST | `/api/bongos/goals/:id/invitations` | `any-builder` | `note`, `builder_id` | POST /goals/:id/invitations { builder_id, note? } — an owner\|manager\|Archon invites a builder (task 1952). |
+| POST | `/api/bongos/goals/:id/invitations/:reqId/rescind` | `any-builder` | — | POST /goals/:id/invitations/:reqId/rescind — an owner\|manager\|Archon takes back a PENDING invitation the goal sent (task 1002971): the ma… |
 | POST | `/api/bongos/goals/:id/invitations/:reqId/respond` | `any-builder` | `action` | POST /goals/:id/invitations/:reqId/respond { action: accept\|decline } — ONLY the invited builder resolves their OWN pending invite (task … |
 | POST | `/api/bongos/goals/:id/join` | `any-builder` | — | POST /goals/:id/join — join an open goal. |
 | POST | `/api/bongos/goals/:id/leave` | `any-builder` | — | POST /goals/:id/leave — leave a goal you're in. |