@bongos/core 1.20.27 → 1.20.29

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 465 endpoints across 83 route files.
+> **Generated from the live route files** — the route file is authoritative. 466 endpoints across 83 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust-boundary-server-enforced-permissions.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -562,7 +562,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | GET | `/api/bongos/projects/featured` | `public` | — | the public map of projects; no auth by design. |
 | POST | `/api/bongos/projects/invite` | `metic+archon` | `client_id`, `github_login` | own-or-metic in effect: where to invite a builder into a project, asked by a `project.curate` holder OR the project's OWN OWNER (task 100… |
 
-## `provisioning` (34)
+## `provisioning` (35)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -594,6 +594,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | GET | `/api/bongos/provisioning/instances/:id/settings` | `any-builder` | — | GET /provisioning/instances/:id/settings — read a project's effective settings + the allowed values (so a form can render its choices). |
 | PATCH | `/api/bongos/provisioning/instances/:id/settings` | `any-builder` | validated | PATCH /provisioning/instances/:id/settings — change a project's settings. |
 | POST | `/api/bongos/provisioning/instances/:id/teardown` | `any-builder` | — | POST /provisioning/instances/:id/teardown — request teardown of the caller's OWN instance. |
+| POST | `/api/bongos/provisioning/instances/:id/update-channel` | `archon` | — | POST /provisioning/instances/:id/update-channel — set the project's update rule (task 1004445). |
 | GET | `/api/bongos/provisioning/onboard-plan` | `public` | — | GET /provisioning/onboard-plan?mode=greenfield\|adopt&domain=<host> — the CANONICAL onboarding step sequence (task 2085; goal 35 / criteri… |
 | GET | `/api/bongos/provisioning/recommendations` | `public` | — | GET /provisioning/recommendations?type=<project type>&team_shape=<interview answer> — the RULE-BASED recommendation for one set of creati… |
 | POST | `/api/bongos/provisioning/render/lookup` | `any-builder` | `key`, `owner_id` | POST /provisioning/render/lookup — rank: any authenticated builder. |

package/docs/copy-inventory.md

@@ -4,13 +4,13 @@
 > Deterministic on a given tree — regenerate and commit rather than hand-editing.
 > Machine-readable twin: [`copy-registry.json`](copy-registry.json).
 
-**2188 strings** across 3 surfaces · 1888 distinct pieces of copy · 2188 certain, 0 heuristic · 207 shown in more than one place.
+**2189 strings** across 3 surfaces · 1889 distinct pieces of copy · 2189 certain, 0 heuristic · 207 shown in more than one place.
 
 ## Surfaces
 
 | surface | lives at | files | strings |
 |---|---|---|---|
-| `builders-hall` | `modules/hall-ui/public` | 109 | 1617 |
+| `builders-hall` | `modules/hall-ui/public` | 109 | 1618 |
 | `status-dashboard` | `modules/status-ui/public` | 4 | 100 |
 | `landing` | `modules/public-landing/public` | 6 | 471 |
 
@@ -78,7 +78,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `064c72453555` | 3x | goals · | modules/hall-ui/public/roadmap.js:218, modules/hall-ui/public/sky-interaction.js:38, modules/hall-ui/public/sky-interaction.js:129 |
 | … | | _167 more in the JSON registry_ | |
 
-## `builders-hall` — 1617 strings
+## `builders-hall` — 1618 strings
 
 | id | conf | text | where |
 |---|---|---|---|
@@ -190,7 +190,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `688cc6dd38ee` | certain | Asked of you | `modules/hall-ui/public/collab.html:48` |
 | `688cc6dd38ee` | certain | Asked of you | `modules/hall-ui/public/collab.html:122` |
 | `b2656d0b2402` | certain | Asked {…} | `modules/hall-ui/public/collab.js:91` |
-| `b2656d0b2402` | certain | Asked {…} | `modules/hall-ui/public/watch.js:511` |
+| `b2656d0b2402` | certain | Asked {…} | `modules/hall-ui/public/watch.js:517` |
 | `8c8ec2597036` | certain | Assigned {…} to builder {…}. | `modules/hall-ui/public/government.js:463` |
 | `46714066f2da` | certain | Audit log | `modules/hall-ui/public/watch.html:141` |
 | `d7c574ba6b2a` | certain | Autobongos runner | `modules/hall-ui/public/gate.html:53` |
@@ -309,8 +309,8 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `e269ff7b3144` | certain | Could not add that builder just now. | `modules/hall-ui/public/goals-render.js:1311` |
 | `7bcaeffb742f` | certain | Could not approve: {…} | `modules/hall-ui/public/gate.js:123` |
 | `c922293e668c` | certain | Could not assign: {…} | `modules/hall-ui/public/government.js:468` |
-| `e1fc7cedf4e7` | certain | Could not change rank: {…} | `modules/hall-ui/public/watch.js:883` |
-| `b9e53fbd90e6` | certain | Could not change standing: {…} | `modules/hall-ui/public/watch.js:909` |
+| `e1fc7cedf4e7` | certain | Could not change rank: {…} | `modules/hall-ui/public/watch.js:889` |
+| `b9e53fbd90e6` | certain | Could not change standing: {…} | `modules/hall-ui/public/watch.js:915` |
 | `1ef1efc15b6c` | certain | Could not change that just now. | `modules/hall-ui/public/goals-render.js:1357` |
 | `6214998a5ebe` | certain | Could not check for a newer version: {…}. | `modules/hall-ui/public/settings-software-update.js:135` |
 | `9ab613a308d6` | certain | Could not check for updates: {…}. | `modules/hall-ui/public/settings-software-update.js:180` |
@@ -334,7 +334,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `8b69e445592a` | certain | Could not load the question labels; showing the answers as stored. | `modules/hall-ui/public/idea.js:458` |
 | `edd5bafbe075` | certain | Could not load the queue just now. | `modules/hall-ui/public/ideas.js:885` |
 | `02bb0570996a` | certain | Could not load the ranks. | `modules/hall-ui/public/ranks.js:197` |
-| `2878778cf9f3` | certain | Could not load this page. | `modules/hall-ui/public/watch.js:1345` |
+| `2878778cf9f3` | certain | Could not load this page. | `modules/hall-ui/public/watch.js:1351` |
 | `df4c2f78a3f6` | certain | Could not load this project’s skills — {…} | `modules/hall-ui/public/settings-specialities.js:311` |
 | `4b0c8d94541c` | certain | Could not load your account. Reload the page to try again. | `modules/hall-ui/public/settings.js:1156` |
 | `2a9fb4046bc4` | certain | Could not load your rank. Return to the hall and try again. | `modules/hall-ui/public/ranks.js:196` |
@@ -343,7 +343,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `de244c45d916` | certain | Could not load {…} | `modules/hall-ui/public/task.js:1027` |
 | `2366356926b4` | certain | Could not mark the primer just now. Try again. | `modules/hall-ui/public/primer.js:259` |
 | `753987b5da13` | certain | Could not reach the submit endpoint. | `modules/hall-ui/public/modules.js:298` |
-| `6f500726f0ac` | certain | Could not read the report: {…} | `modules/hall-ui/public/watch.js:663` |
+| `6f500726f0ac` | certain | Could not read the report: {…} | `modules/hall-ui/public/watch.js:669` |
 | `21c2f33168a3` | certain | Could not read this project's deploy state: {…} | `modules/hall-ui/public/deploy.js:449` |
 | `21a782f1af26` | certain | Could not read what this would bring in: {…}. The check below still applies. | `modules/hall-ui/public/deploy.js:368` |
 | `8b470cebf53d` | certain | Could not remove your key. Try again. | `modules/hall-ui/public/settings.js:977` |
@@ -375,7 +375,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `e65b392144ac` | certain | Could not set up storage. Try again. | `modules/hall-ui/public/settings.js:956` |
 | `d4601887a058` | certain | Could not sign out everywhere: {…} | `modules/hall-ui/public/settings-sessions.js:102` |
 | `3db890b074a7` | certain | Could not update visibility just now. | `modules/hall-ui/public/goals-render.js:1341` |
-| `112d12b24879` | certain | Could not verify your access. Go back and try again. | `modules/hall-ui/public/watch.js:1344` |
+| `112d12b24879` | certain | Could not verify your access. Go back and try again. | `modules/hall-ui/public/watch.js:1350` |
 | `6bd74fd20311` | certain | Could not verify your access. Try again. | `modules/hall-ui/public/sessions.js:436` |
 | `278e8281c82f` | certain | Could not vote: {…} | `modules/hall-ui/public/board-room.js:396` |
 | `a48e9f098392` | certain | Could not {…} just now. | `modules/hall-ui/public/goals-render.js:1327` |
@@ -574,6 +574,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `dad3388b49c9` | certain | Invitation rescinded. | `modules/hall-ui/public/goals-page.js:689` |
 | `12561be47da9` | certain | Invitation sent — they join once they accept. | `modules/hall-ui/public/goals-render.js:1270` |
 | `24f9e88c21f6` | certain | Invite by GitHub username | `modules/hall-ui/public/watch.js:295` |
+| `33a35c77d372` | certain | Invite expired {…} — invite them again to reopen the door | `modules/hall-ui/public/watch.js:501` |
 | `b9cb720ad5d1` | certain | Invited? Sign in | `modules/hall-ui/public/hall-render.js:286` |
 | `0e48bb2c8c94` | certain | Island index | `modules/hall-ui/public/atlas.html:76` |
 | `2170b74c6526` | certain | Isometric map of the repository | `modules/hall-ui/public/atlas.html:54` |
@@ -801,7 +802,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `a2bd76ae030d` | certain | Opens this project's upgrade{…}: you see what would move, confirm it, and it installs, checks itself, and roll | `modules/hall-ui/public/settings-software-update.js:85` |
 | `569980a263ae` | certain | Optional. This is the ledger link — a copy change ships as a task like every other change. | `modules/hall-ui/public/copy-desk.html:130` |
 | `f2e9e8f21e8e` | certain | Or add someone without asking… | `modules/hall-ui/public/goals-render.js:1234` |
-| `d89d1923ecf9` | certain | Over the last {…} days | `modules/hall-ui/public/watch.js:1182` |
+| `d89d1923ecf9` | certain | Over the last {…} days | `modules/hall-ui/public/watch.js:1188` |
 | `695ffff13730` | certain | Over time | `modules/hall-ui/public/profile.html:72` |
 | `5ded44da0cc5` | certain | Override requests | `modules/hall-ui/public/watch.html:136` |
 | `0046e08db06a` | certain | Owner’s bill / month (est.) | `modules/hall-ui/public/fleet-costs.js:70` |
@@ -852,7 +853,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `3f85bdc47099` | certain | Protected module scope — join by request; an Archon admits members | `modules/hall-ui/public/goals-render.js:856` |
 | `e5c292c8b361` | certain | Provides (seams) | `modules/hall-ui/public/atlas.js:288` |
 | `4de232a05888` | certain | Raise after | `modules/hall-ui/public/project-settings.js:113` |
-| `b9c6def6b120` | certain | Rank set to {…}. | `modules/hall-ui/public/watch.js:877` |
+| `b9c6def6b120` | certain | Rank set to {…}. | `modules/hall-ui/public/watch.js:883` |
 | `ff50a1395cbc` | certain | Rank: {…} | `modules/hall-ui/public/profile.js:50` |
 | `6824ec470f99` | certain | Ranks — {{worldName}} | `modules/hall-ui/public/ranks.html:6` |
 | `6824ec470f99` | certain | Ranks — {{worldName}} | `modules/hall-ui/public/ranks.html:6` |
@@ -860,7 +861,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `101a51902f53` | certain | Re-issue failed: {…} | `modules/hall-ui/public/settings.js:780` |
 | `fae2f90927bd` | certain | Read an idea, then decide. An objection needs a reason and the section it faults. | `modules/hall-ui/public/board-room.html:51` |
 | `b03e17693dcd` | certain | Read it as a table | `modules/hall-ui/public/drachmae.js:148` |
-| `b03e17693dcd` | certain | Read it as a table | `modules/hall-ui/public/watch.js:1155` |
+| `b03e17693dcd` | certain | Read it as a table | `modules/hall-ui/public/watch.js:1161` |
 | `b6fcfdd652a7` | certain | Read it here | `modules/hall-ui/public/work.html:45` |
 | `053df132e22c` | certain | Read the full ask | `modules/hall-ui/public/collab.js:133` |
 | `c5f19a888a15` | certain | Read the handoff notes | `modules/hall-ui/public/task.js:490` |
@@ -897,7 +898,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `7d4149cee474` | certain | Repo Atlas — a self-drawing map of the codebase | `modules/hall-ui/public/atlas.html:6` |
 | `4d40a68605e1` | certain | Repo atlas | `modules/hall-ui/public/atlas.html:30` |
 | `52d7d4309540` | certain | Repo health | `modules/hall-ui/public/watch.html:104` |
-| `e6629398d47c` | certain | Report {…}. | `modules/hall-ui/public/watch.js:597` |
+| `e6629398d47c` | certain | Report {…}. | `modules/hall-ui/public/watch.js:603` |
 | `ab456f09c0f6` | certain | Request access | `modules/hall-ui/public/hall-render.js:294` |
 | `ab456f09c0f6` | certain | Request access | `modules/hall-ui/public/hall-render.js:470` |
 | `820f47ce5f16` | certain | Request sent | `modules/hall-ui/public/profile-connections.js:95` |
@@ -916,7 +917,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `0887725744f2` | certain | Restricted. | `modules/hall-ui/public/board-room.js:526` |
 | `0887725744f2` | certain | Restricted. | `modules/hall-ui/public/gate.js:234` |
 | `0887725744f2` | certain | Restricted. | `modules/hall-ui/public/government.js:890` |
-| `0887725744f2` | certain | Restricted. | `modules/hall-ui/public/watch.js:1294` |
+| `0887725744f2` | certain | Restricted. | `modules/hall-ui/public/watch.js:1300` |
 | `b99a71747432` | certain | Retire task {…}? It leaves the claimable queue. Promote restores it to the backlog. | `modules/hall-ui/public/task.js:966` |
 | `b33dde402434` | certain | Retire this goal — you will be asked what happens to any unfinished work | `modules/hall-ui/public/goals-render.js:936` |
 | `d0d5b4300f28` | certain | Retire this task | `modules/hall-ui/public/task.js:802` |
@@ -1030,7 +1031,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `a1482eff4ead` | certain | Suggested for you | `modules/hall-ui/public/settings-specialities.js:384` |
 | `1e40f33483eb` | certain | Switch theme | `modules/hall-ui/public/shell.js:491` |
 | `93fa2e97dd35` | certain | System default for this skill | `modules/hall-ui/public/settings.js:72` |
-| `4894b1d9b0de` | certain | System oversight: people, operations and security. | `modules/hall-ui/public/watch.js:1358` |
+| `4894b1d9b0de` | certain | System oversight: people, operations and security. | `modules/hall-ui/public/watch.js:1364` |
 | `aa8da34fe237` | certain | Take the next page, or pick one from the studio. | `modules/hall-ui/public/tweak-editor.js:564` |
 | `e604fc3ace79` | certain | Task # | `modules/hall-ui/public/blockers.js:139` |
 | `a0f384b022fd` | certain | Task dependencies | `modules/hall-ui/public/goals.html:140` |
@@ -1057,7 +1058,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `c0e28f30524d` | certain | That project's own standing, as reported by that project. | `modules/hall-ui/public/profile.js:314` |
 | `e99d4a811e92` | certain | That request is no longer available. | `modules/hall-ui/public/profile-connections.js:314` |
 | `34017119ce22` | certain | That work is genuinely gone | `modules/hall-ui/public/goal-inbox.js:374` |
-| `6e5a324b2972` | certain | That's you | `modules/hall-ui/public/watch.js:826` |
+| `6e5a324b2972` | certain | That's you | `modules/hall-ui/public/watch.js:832` |
 | `50198c465225` | certain | The 16-value rank enum in three bands, which ranks are live, and the permissions each rank holds. | `modules/hall-ui/public/diagrams.html:59` |
 | `c5e6bdd32fe3` | certain | The Board Room is open to the builders this project’s constitution seats on its board. | `modules/hall-ui/public/board-room.js:529` |
 | `6e93ef49d63f` | certain | The adversarial panel. Each worker reports pass, concerns or fail on its own; the gating workers must all pass | `modules/hall-ui/public/task.js:440` |
@@ -1313,7 +1314,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `6dadadffa36e` | certain | Your name cannot be blank. | `modules/hall-ui/public/settings.js:606` |
 | `bd77210a8c90` | certain | Your name must be {…} characters or fewer. | `modules/hall-ui/public/settings.js:611` |
 | `c0a01a95e97e` | certain | Your own idea. You may vote, but it can’t be decided by your vote alone, and a vote on your own idea earns no  | `modules/hall-ui/public/board-room.js:366` |
-| `5e0ec4cd1cfe` | certain | Your own row carries no controls. Nobody can change their own rank or standing — that guard is what stops the  | `modules/hall-ui/public/watch.js:858` |
+| `5e0ec4cd1cfe` | certain | Your own row carries no controls. Nobody can change their own rank or standing — that guard is what stops the  | `modules/hall-ui/public/watch.js:864` |
 | `8fc605026acf` | certain | Your pending join {…}: {…} — awaiting approval. | `modules/hall-ui/public/goal-inbox.js:88` |
 | `e91418db3962` | certain | Your preferences, {…}. | `modules/hall-ui/public/settings.js:630` |
 | `e91418db3962` | certain | Your preferences, {…}. | `modules/hall-ui/public/settings.js:1173` |
@@ -1526,7 +1527,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `4d8ee7d68974` | certain | task {…} | `modules/hall-ui/public/idea.js:234` |
 | `4d8ee7d68974` | certain | task {…} | `modules/hall-ui/public/ideas.js:201` |
 | `4d8ee7d68974` | certain | task {…} | `modules/hall-ui/public/ideas.js:782` |
-| `4d8ee7d68974` | certain | task {…} | `modules/hall-ui/public/watch.js:1265` |
+| `4d8ee7d68974` | certain | task {…} | `modules/hall-ui/public/watch.js:1271` |
 | `e4e423344746` | certain | task · {…} | `modules/hall-ui/public/sky-interaction.js:36` |
 | `e4e423344746` | certain | task · {…} | `modules/hall-ui/public/sky-panel.js:95` |
 | `a41659dc2bee` | certain | tasks remaining | `modules/hall-ui/public/roadmap.js:298` |
@@ -1634,7 +1635,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `1a8a6267e490` | certain | {…} unfinished task{…} — say what happens to each | `modules/hall-ui/public/goals-render.js:1015` |
 | `3ad8f32dd43b` | certain | {…} you have sent | `modules/hall-ui/public/profile-connections.js:146` |
 | `8186b562553a` | certain | {…} {…} waiting | `modules/hall-ui/public/work.js:432` |
-| `0d4016a5531c` | certain | {…} {…}{…} | `modules/hall-ui/public/watch.js:497` |
+| `0d4016a5531c` | certain | {…} {…}{…} | `modules/hall-ui/public/watch.js:503` |
 | `0d4016a5531c` | certain | {…} {…}{…} | `modules/hall-ui/public/work.js:265` |
 | `b3757ba3bb46` | certain | {…} · Stored encrypted; never shown again after saving. | `modules/hall-ui/public/settings.js:834` |
 | `a6e4ed98fbea` | certain | {…} · revoke it any time under Active sessions. | `modules/hall-ui/public/settings.js:766` |

package/docs/copy-registry.json

@@ -3,9 +3,9 @@
   "generator": "scripts/gds/copy-inventory.js",
   "goal": 1000074,
   "counts": {
-    "strings": 2188,
-    "unique_ids": 1888,
-    "certain": 2188,
+    "strings": 2189,
+    "unique_ids": 1889,
+    "certain": 2189,
     "heuristic": 0,
     "duplicate_ids": 207
   },
@@ -13,7 +13,7 @@
     "builders-hall": {
       "at": "modules/hall-ui/public",
       "files": 109,
-      "strings": 1617
+      "strings": 1618
     },
     "status-dashboard": {
       "at": "modules/status-ui/public",
@@ -182,7 +182,7 @@
         "modules/hall-ui/public/idea.js:234",
         "modules/hall-ui/public/ideas.js:201",
         "modules/hall-ui/public/ideas.js:782",
-        "modules/hall-ui/public/watch.js:1265"
+        "modules/hall-ui/public/watch.js:1271"
       ]
     },
     {
@@ -268,7 +268,7 @@
         "modules/hall-ui/public/board-room.js:526",
         "modules/hall-ui/public/gate.js:234",
         "modules/hall-ui/public/government.js:890",
-        "modules/hall-ui/public/watch.js:1294"
+        "modules/hall-ui/public/watch.js:1300"
       ]
     },
     {
@@ -638,7 +638,7 @@
       "occurrences": 2,
       "at": [
         "modules/hall-ui/public/collab.js:91",
-        "modules/hall-ui/public/watch.js:511"
+        "modules/hall-ui/public/watch.js:517"
       ]
     },
     {
@@ -1378,7 +1378,7 @@
       "occurrences": 2,
       "at": [
         "modules/hall-ui/public/drachmae.js:148",
-        "modules/hall-ui/public/watch.js:1155"
+        "modules/hall-ui/public/watch.js:1161"
       ]
     },
     {
@@ -2187,7 +2187,7 @@
       "text": "{…} {…}{…}",
       "occurrences": 2,
       "at": [
-        "modules/hall-ui/public/watch.js:497",
+        "modules/hall-ui/public/watch.js:503",
         "modules/hall-ui/public/work.js:265"
       ]
     },
@@ -3180,7 +3180,7 @@
       "surface": "builders-hall",
       "text": "Asked {…}",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 511,
+      "line": 517,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -4251,7 +4251,7 @@
       "surface": "builders-hall",
       "text": "Could not change rank: {…}",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 883,
+      "line": 889,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -4260,7 +4260,7 @@
       "surface": "builders-hall",
       "text": "Could not change standing: {…}",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 909,
+      "line": 915,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -4476,7 +4476,7 @@
       "surface": "builders-hall",
       "text": "Could not load this page.",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 1345,
+      "line": 1351,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -4557,7 +4557,7 @@
       "surface": "builders-hall",
       "text": "Could not read the report: {…}",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 663,
+      "line": 669,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -4845,7 +4845,7 @@
       "surface": "builders-hall",
       "text": "Could not verify your access. Go back and try again.",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 1344,
+      "line": 1350,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -6631,6 +6631,15 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "33a35c77d372",
+      "surface": "builders-hall",
+      "text": "Invite expired {…} — invite them again to reopen the door",
+      "file": "modules/hall-ui/public/watch.js",
+      "line": 501,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "b9cb720ad5d1",
       "surface": "builders-hall",
@@ -8679,7 +8688,7 @@
       "surface": "builders-hall",
       "text": "Over the last {…} days",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 1182,
+      "line": 1188,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -9138,7 +9147,7 @@
       "surface": "builders-hall",
       "text": "Rank set to {…}.",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 877,
+      "line": 883,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -9210,7 +9219,7 @@
       "surface": "builders-hall",
       "text": "Read it as a table",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 1155,
+      "line": 1161,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -9543,7 +9552,7 @@
       "surface": "builders-hall",
       "text": "Report {…}.",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 597,
+      "line": 603,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -9714,7 +9723,7 @@
       "surface": "builders-hall",
       "text": "Restricted.",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 1294,
+      "line": 1300,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -10740,7 +10749,7 @@
       "surface": "builders-hall",
       "text": "System oversight: people, operations and security.",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 1358,
+      "line": 1364,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -10983,7 +10992,7 @@
       "surface": "builders-hall",
       "text": "That's you",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 826,
+      "line": 832,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -13287,7 +13296,7 @@
       "surface": "builders-hall",
       "text": "Your own row carries no controls. Nobody can change their own rank or standing — that guard is what stops the last {…} locking everyone out — so another {…} does it.",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 858,
+      "line": 864,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -15204,7 +15213,7 @@
       "surface": "builders-hall",
       "text": "task {…}",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 1265,
+      "line": 1271,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -16176,7 +16185,7 @@
       "surface": "builders-hall",
       "text": "{…} {…}{…}",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 497,
+      "line": 503,
       "origin": "js-markup",
       "confidence": "certain"
     },

package/docs/module-api-changelog.md

@@ -2710,6 +2710,10 @@ is load-bearing: the script throws rather than guess if it is missing, and
   1.20.26 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.20.25 with no explicit bump. run 36764011836. (task 1002620)
   1.20.27 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
-        landed since 1.20.26 with no explicit bump. run 36767793137. (task 1002620)
+        landed since 1.20.26 with no explicit bump. run 36768642814. (task 1002620)
+  1.20.28 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.20.27 with no explicit bump. run 36772266063. (task 1002620)
+  1.20.29 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.20.28 with no explicit bump. run 36775277990. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/docs/page-readings.json

@@ -2980,7 +2980,7 @@
       "surface": "builders",
       "title": "Watch",
       "states_read": ["board","out","operations","security"],
-      "files_hash": "4139b4721a06ea62",
+      "files_hash": "4b89e8960b706953",
       "reading_hash": "de49e347cca76e41",
       "counts": {"lines":156,"placed":44,"shared":5,"unplaced":107},
       "omitted": {"data":123},
@@ -2991,7 +2991,7 @@
         {"key":"L0003","section":"top bar","text":"Jump to…","placement":"shared","file":"modules/hall-ui/public/shell.js","line":487,"string_id":"eba610d25523"},
         {"key":"L0004","section":"top bar","text":"Ctrl K","placement":"shared"},
         {"key":"L0005","section":"Watch","text":"Watch","placement":"unplaced"},
-        {"key":"L0006","section":"Watch","text":"System oversight: people, operations and security.","placement":"placed","file":"modules/hall-ui/public/watch.js","line":1358,"string_id":"4894b1d9b0de"},
+        {"key":"L0006","section":"Watch","text":"System oversight: people, operations and security.","placement":"placed","file":"modules/hall-ui/public/watch.js","line":1364,"string_id":"4894b1d9b0de"},
         {"key":"L0007","section":"Watch","text":"Access requests","placement":"placed","file":"modules/hall-ui/public/watch.html","line":46,"string_id":"996edffc1966"},
         {"key":"L0008","section":"Watch","text":"pending, on the People tab","placement":"placed","file":"modules/hall-ui/public/watch.html","line":46,"string_id":"2fb1dad96280"},
         {"key":"L0009","section":"Watch","text":"Security reports","placement":"placed","file":"modules/hall-ui/public/watch.html","line":47,"string_id":"ab8af800f2bb"},
@@ -3029,7 +3029,7 @@
         {"key":"L0041","section":"Security","text":"Requester","placement":"unplaced","state":"security"},
         {"key":"L0042","section":"Security","text":"Rationale","placement":"unplaced","state":"security"},
         {"key":"L0043","section":"Security","text":"Reward","placement":"unplaced","state":"security"},
-        {"key":"L0044","section":"Security","text":"Asked","placement":"placed","file":"modules/hall-ui/public/watch.js","line":511,"string_id":"b2656d0b2402","state":"security"},
+        {"key":"L0044","section":"Security","text":"Asked","placement":"placed","file":"modules/hall-ui/public/watch.js","line":517,"string_id":"b2656d0b2402","state":"security"},
         {"key":"L0045","section":"Security","text":"Decide","placement":"unplaced","state":"security"},
         {"key":"L0046","section":"Security","text":"Approve","placement":"unplaced","state":"security"},
         {"key":"L0047","section":"Security","text":"Deny","placement":"unplaced","state":"security"},
@@ -3061,7 +3061,7 @@
         {"key":"L0073","section":"Sessions","text":"Earned","placement":"unplaced","state":"operations"},
         {"key":"L0074","section":"Sessions","text":"Duration","placement":"unplaced","state":"operations"},
         {"key":"L0075","section":"Sessions","text":"Uploaded","placement":"unplaced","state":"operations"},
-        {"key":"L0076","section":"Sessions","text":"task {…}","placement":"placed","file":"modules/hall-ui/public/watch.js","line":1265,"string_id":"4d8ee7d68974","state":"operations","occurrences":5},
+        {"key":"L0076","section":"Sessions","text":"task {…}","placement":"placed","file":"modules/hall-ui/public/watch.js","line":1271,"string_id":"4d8ee7d68974","state":"operations","occurrences":5},
         {"key":"L0077","section":"Sessions","text":"412.0k","placement":"unplaced","state":"operations"},
         {"key":"L0078","section":"Sessions","text":"1h 31m","placement":"unplaced","state":"operations"},
         {"key":"L0079","section":"Sessions","text":"1.2M","placement":"unplaced","state":"operations"},
@@ -3082,8 +3082,8 @@
         {"key":"L0094","section":"Repo health","text":"Dead Files","placement":"unplaced","state":"operations"},
         {"key":"L0095","section":"Repo health","text":"Stale Branches","placement":"unplaced","state":"operations"},
         {"key":"L0096","section":"Repo health","text":"Confirmed Unshipped","placement":"unplaced","state":"operations"},
-        {"key":"L0097","section":"Repo health","text":"Over the last {…} days","placement":"placed","file":"modules/hall-ui/public/watch.js","line":1182,"string_id":"d89d1923ecf9","state":"operations"},
-        {"key":"L0098","section":"Repo health","text":"Read it as a table","placement":"placed","file":"modules/hall-ui/public/watch.js","line":1155,"string_id":"b03e17693dcd","state":"operations","occurrences":4},
+        {"key":"L0097","section":"Repo health","text":"Over the last {…} days","placement":"placed","file":"modules/hall-ui/public/watch.js","line":1188,"string_id":"d89d1923ecf9","state":"operations"},
+        {"key":"L0098","section":"Repo health","text":"Read it as a table","placement":"placed","file":"modules/hall-ui/public/watch.js","line":1161,"string_id":"b03e17693dcd","state":"operations","occurrences":4},
         {"key":"L0099","section":"Repo health","text":"{…} of {…}","placement":"placed","file":"modules/hall-ui/public/sky-panel.js","line":120,"string_id":"73c1372b43d9","state":"operations"},
         {"key":"L0100","section":"Repo health","text":"Dead exports","placement":"unplaced","state":"operations"},
         {"key":"L0101","section":"Repo health","text":"Exported symbols nothing imports — the knip scan, run daily. 0 – 3 across 28 snapshots.","placement":"unplaced","state":"operations"},
@@ -3111,7 +3111,7 @@
         {"key":"L0123","section":"Access requests","text":"Admitted","placement":"unplaced"},
         {"key":"L0124","section":"Access requests","text":"Declined","placement":"unplaced"},
         {"key":"L0125","section":"Access requests","text":"Name unvouched","placement":"placed","file":"modules/hall-ui/public/watch.js","line":397,"string_id":"5e8199266a8a","occurrences":2},
-        {"key":"L0126","section":"Access requests","text":"Asked {…}","placement":"placed","file":"modules/hall-ui/public/watch.js","line":511,"string_id":"b2656d0b2402","occurrences":2},
+        {"key":"L0126","section":"Access requests","text":"Asked {…}","placement":"placed","file":"modules/hall-ui/public/watch.js","line":517,"string_id":"b2656d0b2402","occurrences":2},
         {"key":"L0127","section":"Access requests","text":"Dismiss","placement":"unplaced","occurrences":2},
         {"key":"L0128","section":"Roster","text":"Roster","placement":"unplaced"},
         {"key":"L0129","section":"Roster","text":"Every builder in {{worldName}} — rank, {{currency}}, karma, and active claims.","placement":"placed","file":"modules/hall-ui/public/watch.html","line":69,"string_id":"8690c6424585"},
@@ -3124,9 +3124,9 @@
         {"key":"L0136","section":"Roster","text":"Action","placement":"unplaced"},
         {"key":"L0137","section":"Roster","text":"Offboard","placement":"unplaced","occurrences":3},
         {"key":"L0138","section":"Roster","text":"stale","placement":"unplaced"},
-        {"key":"L0139","section":"Roster","text":"That's you","placement":"placed","file":"modules/hall-ui/public/watch.js","line":826,"string_id":"6e5a324b2972"},
+        {"key":"L0139","section":"Roster","text":"That's you","placement":"placed","file":"modules/hall-ui/public/watch.js","line":832,"string_id":"6e5a324b2972"},
         {"key":"L0140","section":"Roster","text":"Reactivate","placement":"unplaced"},
-        {"key":"L0141","section":"Roster","text":"Your own row carries no controls. Nobody can change their own rank or standing — that guard is what stops the last {…} locking everyone out — so another {…} does it.","placement":"placed","file":"modules/hall-ui/public/watch.js","line":858,"string_id":"5e0ec4cd1cfe"},
+        {"key":"L0141","section":"Roster","text":"Your own row carries no controls. Nobody can change their own rank or standing — that guard is what stops the last {…} locking everyone out — so another {…} does it.","placement":"placed","file":"modules/hall-ui/public/watch.js","line":864,"string_id":"5e0ec4cd1cfe"},
         {"key":"L0142","section":"Reviews by builder","text":"Reviews by builder","placement":"placed","file":"modules/hall-ui/public/watch.html","line":75,"string_id":"4e062d4f8d69"},
         {"key":"L0143","section":"Reviews by builder","text":"How each builder's shipped work has been graded over the past thirty days.","placement":"placed","file":"modules/hall-ui/public/watch.html","line":76,"string_id":"0bab9286ea38"},
         {"key":"L0144","section":"Reviews by builder","text":"Builder","placement":"unplaced"},

package/migrations/core_266_access_requests_invited_login_idx.sql

@@ -0,0 +1,31 @@
+-- core_266 — index the invited rows by login (task 1002969, the owner's go-ahead
+-- on a grader finding)
+--
+-- access_requests had two indexes, both partial on status = 'pending' (060). Every
+-- read of an INVITED row therefore scanned the table:
+--
+--   the sign-in gate       hasInvitedAccessRequest / accessStateByLogin
+--                          (lower(github_login) = lower($1) AND status = 'invited')
+--   the standing invite    the onboarding routes' STANDING_INVITE_SQL: re-invite,
+--                          rescind-clears-notice, the public POST's already-approved check
+--   the outstanding list   GET /access-requests/invites (status = 'invited', windowed
+--                          by lower(github_login) since the invite expiry, ADR 0356)
+--
+-- Invite and approved rows are kept as history, so the scan grew with the table's
+-- lifetime rather than with one login's rows. One partial index on the expression
+-- every one of those reads already uses serves them all, and it stays small:
+-- it holds invited rows only.
+--
+-- Additive and idempotent: an index only, no column, constraint or data. Safe to
+-- run forward against a live database, and an older release running against it
+-- just has an unused index. Rollback is DROP INDEX.
+
+CREATE INDEX IF NOT EXISTS idx_access_requests_invited_login
+  ON access_requests (lower(github_login))
+  WHERE status = 'invited';
+
+COMMENT ON INDEX idx_access_requests_invited_login IS
+  'Every read of an invited row: the sign-in gate (hasInvitedAccessRequest), the standing-invite probe, and the outstanding-invite list (ADR 0356). 060''s indexes are partial on pending and cannot serve them.';
+
+INSERT INTO schema_migrations (version) VALUES ('core_266_access_requests_invited_login_idx')
+  ON CONFLICT DO NOTHING;

package/modules/hall-ui/public/watch.js

@@ -474,6 +474,9 @@
   // invite form above, which is what the server's own refusal names.
   function gateRowActions(r) {
     const id = escapeHtml(r.id);
+    // An expired invite's door is already shut: inviting again (the form above) is
+    // the only move, so the row offers none.
+    if (r.expired) return '';
     if (r.status === 'invited') {
       return ghost(`data-gate-action="dismissed" data-gate-from="invited" data-id="${id}"`, 'Rescind', true);
     }
@@ -493,9 +496,12 @@
     // A rescind overwrites the approver with the rescinder (ADR 0208), so this
     // names who put the row in the state it is in now — which is what it says.
     const by = r.resolved_by_login ? ` by <span class="ov-mono">@${escapeHtml(r.resolved_by_login)}</span>` : '';
-    const decided = r.resolved_at
-      ? `<span class="ov-row__when">${r.status === 'invited' ? 'Admitted' : 'Declined'} ${escapeHtml(fmtDate(r.resolved_at))}${by}</span>`
-      : '';
+    // An invite past its 30 days is still 'invited' in storage, but no longer admits.
+    const decided = r.expired
+      ? `<span class="ov-row__when">Invite expired ${escapeHtml(fmtDate(r.expires_at))} — invite them again to reopen the door</span>`
+      : r.resolved_at
+        ? `<span class="ov-row__when">${r.status === 'invited' ? 'Admitted' : 'Declined'} ${escapeHtml(fmtDate(r.resolved_at))}${by}</span>`
+        : '';
     const actions = gateRowActions(r);
     return (
       `<li class="ov-row" data-req-id="${escapeHtml(r.id)}">` +