@bongos/core 1.19.816 → 1.19.817

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.816",
-  "core_contract": "1.19.816",
-  "source_commit": "aa1a7485bebfc27a8b19c0acbff29287f1212828",
+  "core_version": "1.19.817",
+  "core_contract": "1.19.817",
+  "source_commit": "2cd2ebaa97da0505de1aa9f67f9c0448f99fb48d",
   "source_ref": "HEAD",
-  "built_at": "2026-09-17T08:14:24.758Z",
+  "built_at": "2026-09-17T08:31:54.468Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 489,
     "agent_docs_stubbed": 26,
-    "functional_verbatim": 2215,
+    "functional_verbatim": 2217,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 2730,
-  "tree_sha256": "78e804a2a5bda8a926f2f33af27c70ca3a6e0b4b5b3aa9a5b3bd8c66dd5cec24",
+  "file_count": 2732,
+  "tree_sha256": "0b07201d08f28e66901393208deb86879c60a66d8729e32a7dd7da80ffdd7aef",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -252,7 +252,7 @@
     {
       "path": ".claude/skills/worktree-clean/SKILL.md",
       "mode": "0000644",
-      "sha256": "4819fe448f4e35c3c7c3f4784718d51a7a4469f3c644d1b6c57b693b79da129e"
+      "sha256": "6548fe1de89c6909def02b76f022cae739c5b129d179a63538b9a1ab252e5030"
     },
     {
       "path": ".devcontainer/Dockerfile",
@@ -347,12 +347,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "1921cca49d6df56968c7def2350d5b3bc2497d8ca1a7b616fccebf40c1cb16b1"
+      "sha256": "3db2ef5abdfe42a0e950339728759742ac017fdbcae1ed1b8e8b00798773df09"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "5753830b87cce7612cb6c6799ea3807fa5c2e9eaf1b1e5f137af21fb3692a3c4"
+      "sha256": "cd6c84faa0f4d65498108d2681fff1b7089c6ee80212af6d7bf29c5d29c77ee1"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -362,17 +362,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "233ade028d8fb2334e0cd2e17d10d695a5c873a8ebe5589407cccac6dd023bd5"
+      "sha256": "0b9c1a362adc59ce61f6b0b6f92f47103f6060810cbcf90ee87391b255a1d96f"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "e713625480afabdcda10f665beabb91cccaa3bce0268371a6ee780daea626b6d"
+      "sha256": "d2b1b59658899d95484cea739fad158009c1d5365881854b117e8350e09521d3"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "e8592cf9783404ce849e1c234a06c716993ef9c9f4d5b066a456eeeec002b0c0"
+      "sha256": "9cf6c38c64ba9a7f753ba393daddd7c3f76e246f34b713130eb81e77973e23de"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -1982,12 +1982,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "16b812b3d5df71ecd9c8908fcd724345cee9ebe36bdf445fedd623e8d3572498"
+      "sha256": "74c345407b073635a4b9eaa54b72a92e543a1d4e9a893b0a3c688ef32bdc86b0"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "d062ab3925ae7919f1f0e32a2da4974cae41ee409d914ea6fb49bfd3591b91d2"
+      "sha256": "28a4aec3929aefa72cfdffc1bcad6eba5ce1d3bb00518e28eddee631f219dfe5"
     },
     {
       "path": "docs/architecture.md",
@@ -2012,12 +2012,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "b0fb481aa86ab8ad8b2bf37bfdf09e6aba00f611156d92002632384cddc40cb2"
+      "sha256": "4e21dfe9140f8da88b5ba49d7d2c380196408073253e915198ab5f9cdbeab933"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "a21e7da139c5593f452509692e3f17b945f99eb5013f9a0e7ec4ceedc8c8b50e"
+      "sha256": "cb8da77e04f8fa238c513bf2fc04f4f00a13527022e2fbb34dd607ddced16bdd"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2542,7 +2542,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "c86194915e38b871c476151bdf00719d190411407942cfc8dd9f0a7734630ab0"
+      "sha256": "7311b40a7f58f9a8e6467a1e97a51154c728ba9e91c1486cd06bd5b1b388371d"
     },
     {
       "path": "docs/modules-contract.md",
@@ -4077,7 +4077,7 @@
     {
       "path": "modules/dev-box/app/src/vendor/bongos-client.cjs",
       "mode": "0000644",
-      "sha256": "233ade028d8fb2334e0cd2e17d10d695a5c873a8ebe5589407cccac6dd023bd5"
+      "sha256": "0b9c1a362adc59ce61f6b0b6f92f47103f6060810cbcf90ee87391b255a1d96f"
     },
     {
       "path": "modules/dev-box/app/test/unit.mjs",
@@ -4327,7 +4327,7 @@
     {
       "path": "modules/government/catalog.js",
       "mode": "0000644",
-      "sha256": "409e2309bdfcf4b3bb60cfde69e8854af9cd280a205cca2f7640103e08a56c84"
+      "sha256": "da48187e485a7528bdd705c49df7a28c4ce6a3aad3c2885589f06dd4c8214840"
     },
     {
       "path": "modules/government/config.js",
@@ -5257,7 +5257,7 @@
     {
       "path": "modules/hall-ui/public/settings-specialities.js",
       "mode": "0000644",
-      "sha256": "194358e6da084b0ed61af334ec5caa50cff64ae2d74b55291d48a2ed98c519d2"
+      "sha256": "384aa465d951e97d8d3e2b7633eff49d1d82e63bdd63baf0b38cf81482c4716d"
     },
     {
       "path": "modules/hall-ui/public/settings.css",
@@ -5267,7 +5267,7 @@
     {
       "path": "modules/hall-ui/public/settings.html",
       "mode": "0000644",
-      "sha256": "88ce1d42d1a40fccb87da1c353a2649e01c7f6ef6241d34a53b7260cb46cec31"
+      "sha256": "4bea1273047e2fbb90f76f01892cb82da7aeaa1417f91a267249512a5e216993"
     },
     {
       "path": "modules/hall-ui/public/settings.js",
@@ -5842,7 +5842,7 @@
     {
       "path": "modules/lifecycle/routes/task-route-helpers.js",
       "mode": "0000644",
-      "sha256": "e7e709127d13bdbe0333adaae6c9ed97afc6ca66d9476ccc0239c3ec2bbeacce"
+      "sha256": "c82bfa19da18a2b952ad4e2a0311ef983050fd0a4c8a095c8fb3f3581f3a4801"
     },
     {
       "path": "modules/lifecycle/routes/task-write-routes.js",
@@ -7297,13 +7297,18 @@
     {
       "path": "modules/specialities/db.js",
       "mode": "0000644",
-      "sha256": "9fbd7dea94f5e4dae305f453961ad896c97113109d196dd42d077cfd6dd3b44a"
+      "sha256": "3e060dfa1aa11f4ca6c1949bb36599e24c33cfca6ba983c1ce740de67f6e1152"
     },
     {
       "path": "modules/specialities/migrations/specialities_001_specialities.sql",
       "mode": "0000644",
       "sha256": "055210da2726c1d17457900a9b44566c58f371b3206365c5352474114be57251"
     },
+    {
+      "path": "modules/specialities/migrations/specialities_002_offered.sql",
+      "mode": "0000644",
+      "sha256": "5d2c6a648b0a7eb85893c2a3302af721206cc0ca0f58420cb4281e427b86de7a"
+    },
     {
       "path": "modules/specialities/module.json",
       "mode": "0000644",
@@ -7312,12 +7317,12 @@
     {
       "path": "modules/specialities/routes/specialities.js",
       "mode": "0000644",
-      "sha256": "0454b2f40cd8c08ee49af494dd46ec94045a3a19a1c788341fe94048b6b67d0b"
+      "sha256": "132b28199202c742045c17bd930889d1a3327af1b17445d45d592bfc472bed76"
     },
     {
       "path": "modules/specialities/specialities.js",
       "mode": "0000644",
-      "sha256": "af69cd2808d9abc16a8d611348a632132f37876f4688e76ab244eab81afecb23"
+      "sha256": "413477a716f3a60abc0763bccfb10a593c4eb19301131de0230eb3d72ffee299"
     },
     {
       "path": "modules/status-ui/CLAUDE.md",
@@ -7792,12 +7797,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "aa6749d880220869386e00488652da7ae32a0116855dba519e6b943c47f7180c"
+      "sha256": "73cd517987ad21a5984113cb38b81cd9221d3247574a773a5f8d1f47a9908921"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "966ab00e5b62d0280043e13e156ce400cd3afa3f7c5bc04f02eea79392fd26f3"
+      "sha256": "1243bf07a179e236a3e11fd4d64c5c4545609883f59448022ac9d36901d9eaca"
     },
     {
       "path": "public-docs/index.html",
@@ -8062,7 +8067,7 @@
     {
       "path": "scripts/gds/category-advisory-guard.js",
       "mode": "0000644",
-      "sha256": "008fc7268a1e58b7e87b5454d0ca698e25cba3229172031587e934fe73fc33da"
+      "sha256": "a71ac076299b9e37bf8e0a6ff8761f8ba3059271b2596b6ee8941fc24533357d"
     },
     {
       "path": "scripts/gds/cf-tunnel.js",
@@ -9182,7 +9187,7 @@
     {
       "path": "scripts/gds/stale-worktrees.js",
       "mode": "0000644",
-      "sha256": "b615f8cdf4b1e74d997fff9e8eaa7f5c77276eefaa02f1a0c0becd80f8697620"
+      "sha256": "9f6ce80e5325f4cfe68cfa6cb82bec52d594af7e461b6734724819b23cbb0d37"
     },
     {
       "path": "scripts/gds/start.js",
@@ -9687,7 +9692,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "575b32eed8f62dad0302816f97e77604488891d13188bf5b690a867c37a962ac"
+      "sha256": "36b08b101d2abb1c85207dedcc0ff4f6893496731afb19b10e6c4680c1c303c4"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -11287,7 +11292,7 @@
     {
       "path": "tests/government_require_permission.mjs",
       "mode": "0000644",
-      "sha256": "8ae3eaaf0b7d9a0e93d58eda3d877abe4f59bed25ffbcdc4e42a67497398debf"
+      "sha256": "95a5215153c5d98f4fe9ecd3d36ca1ce76d9c486abef8f69dfca0ce3d5cfb006"
     },
     {
       "path": "tests/government_resolver.mjs",
@@ -11977,7 +11982,7 @@
     {
       "path": "tests/migration_allocation.mjs",
       "mode": "0000644",
-      "sha256": "e9271b1a67d201cfd075ce272b1a5a4f3b66c80dcfa5798ca3ea0d3f5048be43"
+      "sha256": "adc1a84f0b251a99471bd4f14367d949432476b0d504bff4de3ae0167eadfb30"
     },
     {
       "path": "tests/migration_namespace.mjs",
@@ -13239,6 +13244,11 @@
       "mode": "0000644",
       "sha256": "9de6fbffd858190096bc22d556ccae101a6206adeee05bb146bd2a0a1a59d15c"
     },
+    {
+      "path": "tests/speciality_offered.mjs",
+      "mode": "0000644",
+      "sha256": "13d7be30c41855ac4a39689bc88ea2be2c896ca071b884bbd0e81cc9c29bc180"
+    },
     {
       "path": "tests/spike_task_map.mjs",
       "mode": "0000644",
@@ -13267,7 +13277,7 @@
     {
       "path": "tests/stale_worktrees.mjs",
       "mode": "0000644",
-      "sha256": "97ca351bc03b3d56b99239739818c11fea384691ee597b54a0c4bef60be196f6"
+      "sha256": "3cc48273341fe8e71ba928ec7c474533d510b74d5b107cad6e3af278219ccd41"
     },
     {
       "path": "tests/start_env_guard.mjs",

package/.claude/skills/worktree-clean/SKILL.md

@@ -8,8 +8,9 @@ description: >-
 
 ## What this skill does
 
-1. `node scripts/gds/stale-worktrees.js` — the list. A worktree is **stale** when its branch is an ancestor of `origin/main` (the land happened) or the branch is gone (the ship deleted it). Detached worktrees and unmerged branches are **live** and never touched. Run `git fetch origin` first so "merged into main" reflects today's main, not the last fetch. The same call also names **husks** — directories under `.claude/worktrees/` that git does not list as worktrees at all (step 6).
-2. Show the stale list to the builder (names + why). The worktree holding the **current claim** is never stale by construction (its branch is unmerged), but say so if the builder asks.
+1. `node scripts/gds/stale-worktrees.js` — the list. A worktree is **stale** when its branch is an ancestor of `origin/main` (the land happened) or the branch is gone (the ship deleted it). Detached worktrees, unmerged branches, and branches sitting exactly at `origin/main` (a claim worktree with no commits yet — task 1003912) are **live** and never touched. Run `git fetch origin` first so "merged into main" reflects today's main, not the last fetch. The same call also names **husks** — directories under `.claude/worktrees/` that git does not list as worktrees at all (step 6).
+2. Show the stale list to the builder (names + why). A worktree holding a **live claim** should not appear: an unmerged branch is live, and since task 1003912 so is a branch still sitting exactly at `origin/main` — the window between `worktree.js add` and the builder's first commit, during which a live claim's tree really did read as "merged into main".
+   - Do not treat that as a guarantee. This list is derived from git alone, with no knowledge of who holds what, so **if a name on it looks like someone's live claim, ask before removing it.** The assurance this replaced — that a current claim could not possibly be listed — is exactly what would stop an agent double-checking.
 3. For each stale name: `node scripts/gds/worktree.js remove <name>`. That helper unlinks any node_modules junction BEFORE `git worktree remove`, which is the whole reason raw git is off-limits here (learning in `scripts/gds/CLAUDE.md` → "Gotchas / invariants"; the `git-guard.js` PreToolUse hook blocks the raw form).
    - A worktree with untracked leftovers (`.playwright-mcp/`, a stray screenshot) refuses without `--force`. Show the `git -C <path> status --porcelain` output; if it is only untracked junk, re-run with `--force`. If it shows **modified tracked files**, skip it and report — someone's uncommitted work is not this skill's to delete.
 4. `git worktree prune` — clears any registrations whose directory is already gone.

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 390 operations across 59 resource groups
+- 393 operations across 59 resource groups
 
 ## Use it from your project
 

package/clients/bongos-client/bongos-client.global.js

@@ -857,6 +857,12 @@ function createClient(opts = {}) {
       postSpecialitiesIdDocuments: (args) => request("POST", "/specialities/{id}/documents", { hasBody: true }, args),
       // DELETE /specialities/{id}/documents/{docId} — rank: any-builder — DELETE /specialities/:id/documents/:docId
       deleteSpecialitiesIdDocumentsDocId: (args) => request("DELETE", "/specialities/{id}/documents/{docId}", { hasBody: false }, args),
+      // POST /specialities/{id}/offer — rank: metic+archon — POST /specialities/:id/offer
+      postSpecialitiesIdOffer: (args) => request("POST", "/specialities/{id}/offer", { hasBody: true }, args),
+      // POST /specialities/{id}/unoffer — rank: metic+archon — POST /specialities/:id/unoffer
+      postSpecialitiesIdUnoffer: (args) => request("POST", "/specialities/{id}/unoffer", { hasBody: true }, args),
+      // GET /specialities/offered — rank: any-builder — GET /specialities/offered
+      getSpecialitiesOffered: (args) => request("GET", "/specialities/offered", { hasBody: false }, args),
     },
     "sso": {
       // POST /sso/activity/rollup — rank: public — POST /sso/activity/rollup

package/clients/bongos-client/index.cjs

@@ -856,6 +856,12 @@ function createClient(opts = {}) {
       postSpecialitiesIdDocuments: (args) => request("POST", "/specialities/{id}/documents", { hasBody: true }, args),
       // DELETE /specialities/{id}/documents/{docId} — rank: any-builder — DELETE /specialities/:id/documents/:docId
       deleteSpecialitiesIdDocumentsDocId: (args) => request("DELETE", "/specialities/{id}/documents/{docId}", { hasBody: false }, args),
+      // POST /specialities/{id}/offer — rank: metic+archon — POST /specialities/:id/offer
+      postSpecialitiesIdOffer: (args) => request("POST", "/specialities/{id}/offer", { hasBody: true }, args),
+      // POST /specialities/{id}/unoffer — rank: metic+archon — POST /specialities/:id/unoffer
+      postSpecialitiesIdUnoffer: (args) => request("POST", "/specialities/{id}/unoffer", { hasBody: true }, args),
+      // GET /specialities/offered — rank: any-builder — GET /specialities/offered
+      getSpecialitiesOffered: (args) => request("GET", "/specialities/offered", { hasBody: false }, args),
     },
     "sso": {
       // POST /sso/activity/rollup — rank: public — POST /sso/activity/rollup

package/clients/bongos-client/index.d.ts

@@ -137,6 +137,7 @@ export interface GetSessionsMineResponse { sessions: unknown; count: unknown }
 export interface GetSessionsSearchResponse { sessions: unknown; count: unknown; total: unknown; totals: unknown; limit: unknown; offset: unknown }
 export interface GetSpecialitiesIdDocumentsResponse { documents: unknown }
 export interface GetSpecialitiesIdResponse { speciality: unknown }
+export interface GetSpecialitiesOfferedResponse { suggestions: unknown }
 export interface GetSpecialitiesResponse { specialities: unknown }
 export interface GetSsoPubkeyResponse { alg: unknown; format: unknown; public_key_b64: unknown }
 export interface GetTaskRecommendationsForMeResponse { recommendations: unknown; count: unknown }
@@ -385,6 +386,8 @@ export interface PostSpecialitiesIdAbandonResponse { ok: boolean; was_active: un
 export interface PostSpecialitiesIdAdoptResponse { adoption: unknown }
 export interface PostSpecialitiesIdDocumentsRequest { title: string; body_md: string; source?: string }
 export interface PostSpecialitiesIdDocumentsResponse { skipped?: boolean; reason?: unknown; document?: unknown }
+export interface PostSpecialitiesIdOfferResponse { speciality: unknown }
+export interface PostSpecialitiesIdUnofferResponse { speciality: unknown }
 export interface PostSpecialitiesRequest { name: string; discipline: string; summary?: string; contract_md?: string; visibility?: string; sellable?: boolean }
 export interface PostSpecialitiesResponse { speciality: unknown }
 export interface PostSsoActivityRollupRequest { client_id: string; client_secret: string; github_id: StringifiableId; credits?: number; tasks_shipped?: number; karma?: number; rank?: string; disciplines?: unknown; recent_ships?: unknown }
@@ -1219,6 +1222,12 @@ export interface BongosClient {
     postSpecialitiesIdDocuments(args: RequestArgs & { body: PostSpecialitiesIdDocumentsRequest }): Promise<PostSpecialitiesIdDocumentsResponse>;
     /** DELETE /specialities/{id}/documents/{docId} — rank: any-builder */
     deleteSpecialitiesIdDocumentsDocId(args?: RequestArgs): Promise<DeleteSpecialitiesIdDocumentsDocIdResponse>;
+    /** POST /specialities/{id}/offer — rank: metic+archon */
+    postSpecialitiesIdOffer(args?: RequestArgs): Promise<PostSpecialitiesIdOfferResponse>;
+    /** POST /specialities/{id}/unoffer — rank: metic+archon */
+    postSpecialitiesIdUnoffer(args?: RequestArgs): Promise<PostSpecialitiesIdUnofferResponse>;
+    /** GET /specialities/offered — rank: any-builder */
+    getSpecialitiesOffered(args?: RequestArgs): Promise<GetSpecialitiesOfferedResponse>;
   };
   "sso": {
     /** POST /sso/activity/rollup — rank: public */

package/clients/bongos-client/index.mjs

@@ -853,6 +853,12 @@ export function createClient(opts = {}) {
       postSpecialitiesIdDocuments: (args) => request("POST", "/specialities/{id}/documents", { hasBody: true }, args),
       // DELETE /specialities/{id}/documents/{docId} — rank: any-builder — DELETE /specialities/:id/documents/:docId
       deleteSpecialitiesIdDocumentsDocId: (args) => request("DELETE", "/specialities/{id}/documents/{docId}", { hasBody: false }, args),
+      // POST /specialities/{id}/offer — rank: metic+archon — POST /specialities/:id/offer
+      postSpecialitiesIdOffer: (args) => request("POST", "/specialities/{id}/offer", { hasBody: true }, args),
+      // POST /specialities/{id}/unoffer — rank: metic+archon — POST /specialities/:id/unoffer
+      postSpecialitiesIdUnoffer: (args) => request("POST", "/specialities/{id}/unoffer", { hasBody: true }, args),
+      // GET /specialities/offered — rank: any-builder — GET /specialities/offered
+      getSpecialitiesOffered: (args) => request("GET", "/specialities/offered", { hasBody: false }, args),
     },
     "sso": {
       // POST /sso/activity/rollup — rank: public — POST /sso/activity/rollup

package/docs/api/openapi.json

@@ -14901,6 +14901,44 @@
         ]
       }
     },
+    "/specialities/offered": {
+      "get": {
+        "operationId": "get_specialities_offered",
+        "tags": [
+          "specialities"
+        ],
+        "summary": "GET /specialities/offered",
+        "description": "GET /specialities/offered — the suggestions for THIS builder. Mounted before '/specialities/:id' would otherwise capture 'offered' as an id.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/specialities/routes/specialities.js",
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetSpecialitiesOfferedResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/specialities/{id}": {
       "get": {
         "operationId": "get_specialities_id",
@@ -15292,6 +15330,116 @@
         ]
       }
     },
+    "/specialities/{id}/offer": {
+      "post": {
+        "operationId": "post_specialities_id_offer",
+        "tags": [
+          "specialities"
+        ],
+        "summary": "POST /specialities/:id/offer",
+        "description": "── offering: a project puts its name behind a speciality ───────────────── OFFERING IS CURATION, NOT OWNERSHIP, so it is gated differently from every other write here. Editing your own speciality is yours; recommending one to everybody on the instance is a claim on their attention and their sessions, which is the same act `project.curate` already governs for featuring a project (metic floor). An owner may therefore edit a speciality they cannot offer, and a curator may offer one they do not own — which is correct: the two decisions are about different things.\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `project.curate` (all required).",
+        "x-rank": "metic+archon",
+        "x-source": "modules/specialities/routes/specialities.js",
+        "x-permissions": [
+          "project.curate"
+        ],
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostSpecialitiesIdOfferResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/specialities/{id}/unoffer": {
+      "post": {
+        "operationId": "post_specialities_id_unoffer",
+        "tags": [
+          "specialities"
+        ],
+        "summary": "POST /specialities/:id/unoffer",
+        "description": "**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `project.curate` (all required).",
+        "x-rank": "metic+archon",
+        "x-source": "modules/specialities/routes/specialities.js",
+        "x-permissions": [
+          "project.curate"
+        ],
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostSpecialitiesIdUnofferResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/sso/activity/rollup": {
       "post": {
         "operationId": "post_sso_activity_rollup",
@@ -19685,6 +19833,15 @@
           "speciality"
         ]
       },
+      "GetSpecialitiesOfferedResponse": {
+        "type": "object",
+        "properties": {
+          "suggestions": {}
+        },
+        "required": [
+          "suggestions"
+        ]
+      },
       "GetSpecialitiesResponse": {
         "type": "object",
         "properties": {
@@ -23733,6 +23890,24 @@
           "document": {}
         }
       },
+      "PostSpecialitiesIdOfferResponse": {
+        "type": "object",
+        "properties": {
+          "speciality": {}
+        },
+        "required": [
+          "speciality"
+        ]
+      },
+      "PostSpecialitiesIdUnofferResponse": {
+        "type": "object",
+        "properties": {
+          "speciality": {}
+        },
+        "required": [
+          "speciality"
+        ]
+      },
       "PostSpecialitiesRequest": {
         "type": "object",
         "properties": {
@@ -24759,9 +24934,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 390,
-  "x-schema-count": 429,
+  "x-endpoint-count": 393,
+  "x-schema-count": 432,
   "x-undocumented-bodies": 9,
-  "x-response-schemas": 293,
+  "x-response-schemas": 296,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 390 endpoints across 63 route files.
+> **Generated from the live route files** — the route file is authoritative. 393 endpoints across 63 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust-boundary-server-enforced-permissions.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -592,7 +592,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | GET | `/api/bongos/sessions/search` | `metic+archon` | — | cross-builder corpus search (BFG-principal posture until 6C.1). |
 | GET | `/api/bongos/sessions/upload-health` | `metic+archon` | — | GET /sessions/upload-health — the answer to "has anyone's session upload silently stopped?", which before task 1003865 existed ONLY as a … |
 
-## `specialities` (9)
+## `specialities` (12)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -605,6 +605,9 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | GET | `/api/bongos/specialities/:id/documents` | `any-builder` | — |  |
 | POST | `/api/bongos/specialities/:id/documents` | `any-builder` | `title`, `body_md`, `source` | ── training (a): the owner's own documents ─────────────────────────────── |
 | DELETE | `/api/bongos/specialities/:id/documents/:docId` | `any-builder` | — |  |
+| POST | `/api/bongos/specialities/:id/offer` | `metic+archon` | — | ── offering: a project puts its name behind a speciality ───────────────── OFFERING IS CURATION, NOT OWNERSHIP, so it is gated differentl… |
+| POST | `/api/bongos/specialities/:id/unoffer` | `metic+archon` | — |  |
+| GET | `/api/bongos/specialities/offered` | `any-builder` | — | GET /specialities/offered — the suggestions for THIS builder. |
 
 ## `sso` (8)