@bongos/core 1.20.58 → 1.20.59

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.20.58",
-  "core_contract": "1.20.58",
-  "source_commit": "51686b250c9118e24398778927083ad1cd0a3335",
+  "core_version": "1.20.59",
+  "core_contract": "1.20.59",
+  "source_commit": "1e24a0934c9535d15896e642111367f8e6505c7c",
   "source_ref": "HEAD",
-  "built_at": "2026-10-01T06:39:29.444Z",
+  "built_at": "2026-10-01T07:04:49.482Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 571,
     "agent_docs_stubbed": 27,
-    "functional_verbatim": 2762,
+    "functional_verbatim": 2770,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 3361,
-  "tree_sha256": "8c6aa4c50502f2c98ecbdcf08c3fdbe56c82b738296aafcda5f59cb608e9b824",
+  "file_count": 3369,
+  "tree_sha256": "82f155ef0e853ff6a69419f1f46c8d65f8f70faef5ac21f42f34dd05b4395fae",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -337,7 +337,7 @@
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "6a35d8232a386a4cac5fd7f4368cf09a849268e56703f65531de8d7ef8e73707"
+      "sha256": "db3f3a76c1ae512e4b1e4d2613aa8d98ac2d9b1ae8656af6c810e2a8873652b0"
     },
     {
       "path": "clients/bongos-client/index.mjs",
@@ -2257,17 +2257,17 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "acec6fe87d01bf03183c437c948d6ac524c67a871a79b1310dc3ec1cb8a24ec6"
+      "sha256": "c25dbda737f9bcc02e4a8092d7bb38a67be9ef2aba93b1bfc590c52814469c06"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "99a0e5d88844589d1239035827e97e5049d825dce7177f605d153a38bcde3a7f"
+      "sha256": "62f196e3a1b8fb7e3dfd507fb8e86465afe94cba73af4b9690755f34e1300361"
     },
     {
       "path": "docs/architecture.md",
       "mode": "0000644",
-      "sha256": "345ab85b3665ae561a435cf1eccfa5ddb0464176153a12d85c84ddbc9f5cfc82"
+      "sha256": "8b0fe800a7b4d60f4cb7f5eccd4fcab98d3e080a978ba3125dd9171c63cb5c78"
     },
     {
       "path": "docs/branding-contract.md",
@@ -2287,12 +2287,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "fb27b97c3f82bffcbe68536b334f7397907e36bcc3978b6578451f6efe5124a6"
+      "sha256": "4ec1c7120ed5e50105c399a93cbf8c77fc918f16e13aefcb340f4d96b3108c4d"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "f3067fb3aa1876c804898bb57c16e85c7bff3e362254259f658fcb112c94d6db"
+      "sha256": "95d3bee797fdd81d6f0b09a1b421e9145c37495f6b775f10cddc55ee975626d9"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2797,7 +2797,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "738e8133bb79609db71fb74862b1c7d1588848944e8b066c5ecb9b18a1b010c7"
+      "sha256": "60f7e5066cd8cc5a362b2dc7173e20e2879e1f28bdc1334b4c3d0761c5d815bb"
     },
     {
       "path": "docs/modules-contract.md",
@@ -2887,7 +2887,7 @@
     {
       "path": "docs/page-readings.json",
       "mode": "0000644",
-      "sha256": "d40368d1f677a49d2cf7d0b1c685e8e7413136a5e57f613ab0c3004453cfcdd0"
+      "sha256": "65c17b70d8590d4031ba8f082813ac30bff416360bc78a734e4532a532d44f20"
     },
     {
       "path": "docs/project-context.template.md",
@@ -3989,6 +3989,11 @@
       "mode": "0000644",
       "sha256": "09070e79b3e4781a185263d1bb2be364dd1225dcf6f79bdf9c21cc498fb009dd"
     },
+    {
+      "path": "migrations/core_268_builders_main_discipline.sql",
+      "mode": "0000644",
+      "sha256": "f5fadebea5921e58f918952d66eaae69d40016bd5782483daf4070bfa2996898"
+    },
     {
       "path": "modules/agents/CLAUDE.md",
       "mode": "0000644",
@@ -4214,6 +4219,11 @@
       "mode": "0000644",
       "sha256": "7cb9dac9cb87b679e1ae50e4112b3a7928a38ebb9902c8947a74d17bec4d9009"
     },
+    {
+      "path": "modules/copy-desk/artist-stats.js",
+      "mode": "0000644",
+      "sha256": "d1b8113341aa855a00ded9c59d916ed944c4ea92ef68150f492c21e7cc355082"
+    },
     {
       "path": "modules/copy-desk/docx.js",
       "mode": "0000644",
@@ -4237,7 +4247,7 @@
     {
       "path": "modules/copy-desk/module.json",
       "mode": "0000644",
-      "sha256": "2375fb0cfa929963d11cc135ad3a3bbb592c5e2474942229c1eecc5b839e19f3"
+      "sha256": "418298167fa848e1e6f0a339d27922d6008daf5769b1534522a51a7f88b3f9c6"
     },
     {
       "path": "modules/copy-desk/page-data.js",
@@ -4252,7 +4262,7 @@
     {
       "path": "modules/copy-desk/page-status.js",
       "mode": "0000644",
-      "sha256": "0b96c931e6e0f8a22a3c4de287f698b9f74a45183f1b4314f66b8dfe643d33f2"
+      "sha256": "b83e22529e561fad1e8e63632ef6ffd2642d861c3c0277f14c4286d07f6abbdb"
     },
     {
       "path": "modules/copy-desk/pages.js",
@@ -4272,7 +4282,7 @@
     {
       "path": "modules/copy-desk/routes/copy-desk.js",
       "mode": "0000644",
-      "sha256": "66cd7509e186e980b6d00e5ced844d66689e3e10fa1bb30068f3e2355fe8fcb7"
+      "sha256": "b54ec33524894db892f81aa57d6feec568af3feea2d06b6dd85df0a1894ae256"
     },
     {
       "path": "modules/copy-desk/skills/tweak/SKILL.md",
@@ -4292,7 +4302,7 @@
     {
       "path": "modules/copy-desk/tests/copy_no_cms.mjs",
       "mode": "0000644",
-      "sha256": "68e3e04bc0330bfd86e895ace1f998e73591f3882e5e6bf15084556890e30d73"
+      "sha256": "d5d01b650a04a01eabfb45cfbb8065616031482354652cbef2126f250854a6aa"
     },
     {
       "path": "modules/copy-desk/tests/copy_page_draft.mjs",
@@ -4649,6 +4659,11 @@
       "mode": "0000644",
       "sha256": "ce3ce114f5315c78a2feb810bce09cde84941765629f0e5a10a44aced2c34210"
     },
+    {
+      "path": "modules/economy/credits-by-craft.js",
+      "mode": "0000644",
+      "sha256": "fbfd7d8f0fb20c08eced9697c7d4d41653b784e5738886207cdbcb0517c29849"
+    },
     {
       "path": "modules/economy/credits.js",
       "mode": "0000644",
@@ -4692,7 +4707,7 @@
     {
       "path": "modules/economy/reward.js",
       "mode": "0000644",
-      "sha256": "4c54857aea9bc12c59e712410b0b98124d0274dece739bfbd844f52dc6ac6880"
+      "sha256": "5474fb3b913f084c93e12cbfb3e729b829181230d099274d9a15d74711286c2a"
     },
     {
       "path": "modules/economy/routes/cost.js",
@@ -5562,7 +5577,7 @@
     {
       "path": "modules/hall-ui/public/hall-render.js",
       "mode": "0000644",
-      "sha256": "a4e56cc0090f87d1debe306dd9caa48bdfbe63bd4b328169a4a4cbb4708d3cca"
+      "sha256": "6256119e6aa53ddde4f9a6d5e218685ef5730fc4a305ce6f3d2b90c12de9a187"
     },
     {
       "path": "modules/hall-ui/public/hall-visual.js",
@@ -5742,7 +5757,7 @@
     {
       "path": "modules/hall-ui/public/profile.js",
       "mode": "0000644",
-      "sha256": "bc7230ecfae6376cd0e4b6dcf46e43f7b60aa5dcd166aea808aa97d831ddadbb"
+      "sha256": "d5ccda2a84c90610c322e9918b87bfdc743ae3b06e47a009b1dca45cc395c07d"
     },
     {
       "path": "modules/hall-ui/public/profile.states.json",
@@ -6249,6 +6264,11 @@
       "mode": "0000644",
       "sha256": "e516f7951b91234c1f9dc6e327dc7365b6f6c9aad69bb3a85835061e2d072253"
     },
+    {
+      "path": "modules/ideas/ideator-stats.js",
+      "mode": "0000644",
+      "sha256": "5ff7f5494eab6b16494e2f83048a72e71870de82ee6b3ec58394c559f035ef75"
+    },
     {
       "path": "modules/ideas/inbox.js",
       "mode": "0000644",
@@ -6312,7 +6332,7 @@
     {
       "path": "modules/ideas/module.json",
       "mode": "0000644",
-      "sha256": "bd0d6a232b4156b5a1fac8d3ddc543a1c0ac9aa886ca303364fdea5161342e53"
+      "sha256": "207f21d62eb9c12ebf1bcd1c6c5c717a70546519a8c9cc66071b146a2b071c29"
     },
     {
       "path": "modules/ideas/pollers/descent-writer.js",
@@ -6342,7 +6362,7 @@
     {
       "path": "modules/ideas/routes/inbox.js",
       "mode": "0000644",
-      "sha256": "2539c5e536465066243061d7cb38137e64fc6dc434287aa6f59167d9aa0badc5"
+      "sha256": "2363d8ac91b5da2e70c9c1c02b4ad39044fbe95d21d15f214b08aed5cb135aed"
     },
     {
       "path": "modules/ideas/routes/ratify-goal.js",
@@ -6412,7 +6432,7 @@
     {
       "path": "modules/lifecycle/activity.js",
       "mode": "0000644",
-      "sha256": "38bbb1b0f0992c655cd48f95476fbbdac11381bb929999b6da0f68fbbf802b16"
+      "sha256": "e7c7db8a6faf50f3b75cb26ac33caa8357c462293e64318212ace69b0b654507"
     },
     {
       "path": "modules/lifecycle/cascade.js",
@@ -6477,7 +6497,7 @@
     {
       "path": "modules/lifecycle/db-analytics.js",
       "mode": "0000644",
-      "sha256": "8e8aedb44b8773760ebe0ea87b8c4f0aa98b838a69be6ae1a40c3c2e7e28b656"
+      "sha256": "f17262a004d2c9d1157bdbb1a1747a59d5458364674baebec89e9a22e74f90b8"
     },
     {
       "path": "modules/lifecycle/db-claim-reads.js",
@@ -6537,7 +6557,7 @@
     {
       "path": "modules/lifecycle/db-tasks.js",
       "mode": "0000644",
-      "sha256": "bf527e80db47d586361be82ef568842e011484313f09cc6405d1c351f9e15df7"
+      "sha256": "5f58f89cdf7055461a62c17209fbca84b11bcacc0100ec18ad6f12db3884ce06"
     },
     {
       "path": "modules/lifecycle/db-versions.js",
@@ -6547,7 +6567,7 @@
     {
       "path": "modules/lifecycle/db.js",
       "mode": "0000644",
-      "sha256": "d49c3a69786769c83326a0dbe31b4cb59fca5bd1ee9be222ce6445f60df99996"
+      "sha256": "84b448dccaaaac7f74c91dec7aa4fc3b32f3a451e691e02d70a9113f0c5bd01c"
     },
     {
       "path": "modules/lifecycle/dead-deps.js",
@@ -6787,7 +6807,7 @@
     {
       "path": "modules/lifecycle/page-tweak-reads.js",
       "mode": "0000644",
-      "sha256": "7606154d0aa95475e0cd59b753d38bd00c2ce65928d843191738dcf9bdd93f72"
+      "sha256": "9cc7843677c42d50d2c1a9a75e8b895fc50a2245d3baa8242076c5a67788e308"
     },
     {
       "path": "modules/lifecycle/page-tweak-write.js",
@@ -9367,12 +9387,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "1c34881ef988aef1daaca7d1f9f63d20783813fc1ddcf79da9a64f59bf49a438"
+      "sha256": "604495a696c73437808848cc0c6b083f60a38d9c9599589e7d5107ec3a150c65"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "6c32b8c4acba62273ec9f209a2c1393b02383647f339d3909734bdec901eb9ac"
+      "sha256": "6278722e681a62f37f21dd320837e605cb2f27daf434091e5cc12bc199c3831d"
     },
     {
       "path": "public-docs/index.html",
@@ -9392,7 +9412,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "3fe71d941f2e39b8c1ce5cc87aadeb68cf60b33808fec3dfe00394c0c65e7225"
+      "sha256": "e5f5830287bcd6ea12b800a170ae7ad45e7f0ef359ef5d734fb8378e63aa2e91"
     },
     {
       "path": "scripts/bongos-mcp.js",
@@ -10577,7 +10597,7 @@
     {
       "path": "scripts/gds/run-unit-tests.js",
       "mode": "0000644",
-      "sha256": "1060c8a67619c8e6c0d8168d6a26644b799ed8053ab4995fd9386b55af3660c9"
+      "sha256": "90c8029f97db125917048f0dbd274a127c5819e823b1bf431670bbb66d3a2817"
     },
     {
       "path": "scripts/gds/runner-drift.js",
@@ -11262,7 +11282,7 @@
     {
       "path": "src/bongos/db.js",
       "mode": "0000644",
-      "sha256": "c0fd77dd355dfb859c67dd802fd2f4418c41942366979cce01560e9d94bb11c4"
+      "sha256": "d05a22912d5d0f21b1cc6b7231108b42d9de2686deeee8439db9f4cb518ac4ed"
     },
     {
       "path": "src/bongos/github-repos.js",
@@ -11399,6 +11419,11 @@
       "mode": "0000644",
       "sha256": "38c98f7cdb9dbc9d73dc53d0ad29466bc2fc8f762cd8db3961ab40df44dae11c"
     },
+    {
+      "path": "src/bongos/role-stats.js",
+      "mode": "0000644",
+      "sha256": "193a0b046fb321bcdb268392443fa1f37b92e7064ab5905776b6efd6ee1ea63a"
+    },
     {
       "path": "src/bongos/route-rank-check.js",
       "mode": "0000644",
@@ -11437,7 +11462,7 @@
     {
       "path": "src/bongos/routes/builders.js",
       "mode": "0000644",
-      "sha256": "1de0a5c1cf48064964d3dec79cd8b6c44d389b6485ea18a63a8b386091bb48bd"
+      "sha256": "8a6b26f85dc9743ce5197e5c2458d7e44db26c45d5a8a2ca01519ed503ac381e"
     },
     {
       "path": "src/bongos/routes/cli-commands.js",
@@ -11482,7 +11507,7 @@
     {
       "path": "src/bongos/routes/me.js",
       "mode": "0000644",
-      "sha256": "382c8bfbc436f157dc3d1ee297b6ab87a94d1f27837618d2b47d844033af86e0"
+      "sha256": "2324e52c2c134f2914de78a6988841065d21f14e262828a48e8d291a6d11f94d"
     },
     {
       "path": "src/bongos/routes/modules.js",
@@ -11557,7 +11582,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "4d6b2a28545380876fc0d03e74be48db1eca8320778c846e778632162ce186f5"
+      "sha256": "f5eb53c5fdb1bba7c172dcf262ad5b8f624f2d881fcd4b269ed6297b6688f60a"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -12482,7 +12507,7 @@
     {
       "path": "tests/copy_desk_page_reads.mjs",
       "mode": "0000644",
-      "sha256": "29c591eb22b17fb86a3bff894d362f1372e41d1d0e06e3751f36da90184a425a"
+      "sha256": "b84c47c44aa602c6cb13c5cbb21c27316a30297ab192301b1a4dddd9e38c98c0"
     },
     {
       "path": "tests/copy_desk_page_submit.mjs",
@@ -13022,7 +13047,7 @@
     {
       "path": "tests/fixtures/page-ledger.mjs",
       "mode": "0000644",
-      "sha256": "b3a9a8cb1f396760302b0b85e53ccca66145061002dabda1c1d94254a2ded399"
+      "sha256": "334af36c6207995d2fa55023ba43c47cd00d41f09cfbb6a86416b4f785e85a5b"
     },
     {
       "path": "tests/fixtures/session-506-digest.json",
@@ -14429,6 +14454,11 @@
       "mode": "0000644",
       "sha256": "e7d7420279a2c2264268544552423406006a0e1ed3accf680ba814161cdb0e41"
     },
+    {
+      "path": "tests/main_discipline.mjs",
+      "mode": "0000644",
+      "sha256": "15c31505586a586701dc1a78e80f4baa98a302d56249d896aaac36847429e095"
+    },
     {
       "path": "tests/main_worktree_busy_reason.mjs",
       "mode": "0000644",
@@ -15059,6 +15089,11 @@
       "mode": "0000644",
       "sha256": "f5e664627bf60830c241539cd001b5eebc55a5786c191154bdd6b6f3dbd745ed"
     },
+    {
+      "path": "tests/profile_role_stats.mjs",
+      "mode": "0000644",
+      "sha256": "f19d360e648c15576818313f80ea3079b933ccfc1f4ecb710198d993f2fa4054"
+    },
     {
       "path": "tests/profile_rollup_consent.mjs",
       "mode": "0000644",
@@ -15669,6 +15704,11 @@
       "mode": "0000644",
       "sha256": "9c8ecadb5ffdd9dc8a7632d432f40364fde9ab21c390cbb4530005b990601c87"
     },
+    {
+      "path": "tests/role_stats_db.mjs",
+      "mode": "0000644",
+      "sha256": "5fb457f7a1c4f4920575dce9ed284f2b26f6fe7139f09d6a9db73e0dc5143c6e"
+    },
     {
       "path": "tests/rot_inbox.mjs",
       "mode": "0000644",
@@ -16577,7 +16617,7 @@
     {
       "path": "tests/tweak_replaces_artist_review.mjs",
       "mode": "0000644",
-      "sha256": "aa114120d8a0dcbe8bfeadf6e359c4fa9a636a1aa7a3d8f120451a8cfe575777"
+      "sha256": "16e4eb3977e7b5c2f09a402740b92ebb376a91199766034fa93f6ef34833b8a2"
     },
     {
       "path": "tests/ui_design_kit.mjs",

package/clients/bongos-client/index.d.ts

@@ -43,7 +43,7 @@ export interface GetBuildersDirectoryResponse { builders: unknown }
 export interface GetBuildersIdActiveClaimsResponse { builder_id: unknown; claims: unknown; stale_hours: unknown; stale_hours_source: unknown }
 export interface GetBuildersIdActivityResponse { builder_id: unknown; section: unknown; role: unknown; rows: unknown; total: unknown }
 export interface GetBuildersIdOnboardingResponse { builder_id: unknown; onboarding: unknown }
-export interface GetBuildersIdProfileResponse { builder: unknown; shipped_count: unknown; recent_ships: unknown; achievements: unknown; cross_project?: unknown; handle?: unknown }
+export interface GetBuildersIdProfileResponse { builder: unknown; shipped_count: unknown; recent_ships: unknown; achievements: unknown; roles: unknown; cross_project?: unknown; handle?: unknown }
 export interface GetBuildersMePendingRankChangeResponse { change: unknown; greeting?: unknown }
 export interface GetBuildersRosterResponse { builders: unknown; stale_hours: unknown; stale_hours_source: unknown }
 export interface GetCliCommandsResponse { version: unknown; groups: unknown }
@@ -204,7 +204,7 @@ export interface PatchInboxIdRequest { status?: "open" | "promoted" | "discarded
 export interface PatchInboxIdResponse { idea: unknown }
 export interface PatchMeCrossProjectRequest { hide_stats?: boolean; account_visibility?: string; recruiter_discoverable?: boolean }
 export interface PatchMeCrossProjectResponse { hide_stats: boolean; account_visibility: unknown; recruiter_discoverable: unknown; recruiter_discoverable_effective: unknown }
-export interface PatchMeDisciplinesRequest { preferred_disciplines: string[] }
+export interface PatchMeDisciplinesRequest { preferred_disciplines: string[]; main_discipline?: string }
 export interface PatchMeDisciplinesResponse { builder: unknown; onboarding: unknown }
 export interface PatchMeDisplayNameResponse { display_name: unknown; max_length: unknown }
 export interface PatchMeEventSoundPrefsResponse { prefs: unknown; effective: unknown; effective_wav: unknown; events: unknown }

package/docs/api/openapi.json

@@ -2939,7 +2939,7 @@
           "builders"
         ],
         "summary": "GET /builders/:id/profile",
-        "description": "GET /builders/:id/profile — the viewable builder profile page's read (task 1467, goal 25 \"bx-identity\"). Returns ONE builder's public portfolio: identity + rank + economy counters + shipped-work count + recent ships + unlocked achievements. Backs the shareable /builders/profile page. rank: public — every field returned here is ALREADY world-readable: the leaderboard (GET /public/leaderboard, no auth) exposes rank, total_credits, karma, and the top achievement ids; GET /builders/:id/onboarding is likewise an unauthenticated roster-visible read. This route is a per-builder re- presentation of the SAME already-public data, so a portfolio link is shareable without a sign-in wall (that IS the feature). It deliberately WHITELISTS the public column subset off the full builder row — the private columns getBuilderById also returns (anthropic_email / anthropic_user_id / monthly_budget_usd / system_role) are NEVER spread into the JSON. A leak-prevention unit test (tests/profile_route.mjs) asserts their absence + the 404-on-unknown-id behaviour. THROTTLED since task 1002804. The global limiter meters WRITES only (rateLimitMiddleware returns early for GET) and the public read limiter is mounted under /public/*, which this is not — so this route answered at line rate. That was tolerable while it re-presented leaderboard data; it is not now that it also carries `handle`, because an id walk then yields the builder → canonical-profile-handle map in one call per builder. modules/platform-identity/routes/public-profile.js caps /profiles/:handle for exactly that mapping, so the two routes that publish it get the same ceiling. The EXISTING shared /public/* budget (120/60s per IP), not a new one — ADR 0209's rule that routes answering one question spend one budget.\n\n**Rank:** `public` — No authentication — any caller.",
+        "description": "GET /builders/:id/profile — the viewable builder profile page's read (task 1467, goal 25 \"bx-identity\"). Returns ONE builder's public portfolio: identity + rank + economy counters + shipped-work count + recent ships + unlocked achievements. Backs the shareable /builders/profile page. rank: public — every field returned here is ALREADY world-readable: the leaderboard (GET /public/leaderboard, no auth) exposes rank, total_credits, karma, and the top achievement ids; GET /builders/:id/onboarding is likewise an unauthenticated roster-visible read. This route is a per-builder re- presentation of the SAME already-public data, so a portfolio link is shareable without a sign-in wall (that IS the feature). It deliberately WHITELISTS the public column subset off the full builder row — the private columns getBuilderById also returns (anthropic_email / anthropic_user_id / monthly_budget_usd / system_role) are NEVER spread into the JSON. A leak-prevention unit test (tests/profile_route.mjs) asserts their absence + the 404-on-unknown-id behaviour. `roles` (task 1004433) is the one block that is NOT a re-presentation of the leaderboard: per-craft counts and sums. The owner made them public on 2026-09-30 (RP01 decision (a): the tally and By the numbers stay public, the trail, the earnings and every Activity tab need a sign-in), so the block carries counts only — no idea title, no page wording, no task list. THROTTLED since task 1002804. The global limiter meters WRITES only (rateLimitMiddleware returns early for GET) and the public read limiter is mounted under /public/*, which this is not — so this route answered at line rate. That was tolerable while it re-presented leaderboard data; it is not now that it also carries `handle`, because an id walk then yields the builder → canonical-profile-handle map in one call per builder. modules/platform-identity/routes/public-profile.js caps /profiles/:handle for exactly that mapping, so the two routes that publish it get the same ceiling. The EXISTING shared /public/* budget (120/60s per IP), not a new one — ADR 0209's rule that routes answering one question spend one budget.\n\n**Rank:** `public` — No authentication — any caller.",
         "x-rank": "public",
         "x-source": "src/bongos/routes/builders.js",
         "parameters": [
@@ -11561,7 +11561,7 @@
           "me"
         ],
         "summary": "PATCH /me/disciplines",
-        "description": "Self-service edit of the authenticated builder's preferred disciplines (migrations 027 + 086 / V3.R80). Body: { preferred_disciplines: [\"artist\", ...] }. Valid elements are whatever enabledDisciplines() offers — engineer|ideator core plus any enabled module's (artist, ui); [] clears the preference (a multi-element set just means several lanes). No rank gate — a builder owns their own profile. 422 invalid_discipline if any element is out of range. rank: any-builder — self-service profile edit; documented \"no rank gate\" in the handler comment above (a builder owns their own preference).\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "description": "Self-service edit of the authenticated builder's preferred disciplines (migrations 027 + 086 / V3.R80). Body: { preferred_disciplines: [\"artist\", ...] }. Valid elements are whatever enabledDisciplines() offers — engineer|ideator core plus any enabled module's (artist, ui); [] clears the preference (a multi-element set just means several lanes). No rank gate — a builder owns their own profile. 422 invalid_discipline if any element is out of range. rank: any-builder — self-service profile edit; documented \"no rank gate\" in the handler comment above (a builder owns their own preference). `main_discipline` (optional, task 1004433): the builder's own MAIN role, one of the crafts in the same body; null clears it, absent keeps it (see db.updateBuilderDisciplines). 422 invalid_main_discipline otherwise.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
         "x-source": "src/bongos/routes/me.js",
         "requestBody": {
@@ -22844,6 +22844,7 @@
           "shipped_count": {},
           "recent_ships": {},
           "achievements": {},
+          "roles": {},
           "cross_project": {},
           "handle": {}
         },
@@ -22851,7 +22852,8 @@
           "builder",
           "shipped_count",
           "recent_ships",
-          "achievements"
+          "achievements",
+          "roles"
         ]
       },
       "GetBuildersMePendingRankChangeResponse": {
@@ -24972,6 +24974,10 @@
               "type": "string"
             },
             "maxItems": 16
+          },
+          "main_discipline": {
+            "type": "string",
+            "maxLength": 32
           }
         },
         "required": [

package/docs/api-reference.md

@@ -471,7 +471,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | GET | `/api/bongos/me/credits` | `any-builder` | — | GET /me/credits — the caller's own ledger. |
 | GET | `/api/bongos/me/cross-project` | `any-builder` | — | the caller's OWN cross-project record + privacy flags (own data). |
 | PATCH | `/api/bongos/me/cross-project` | `any-builder` | `hide_stats`, `account_visibility`, `recruiter_discoverable` | flip the caller's OWN privacy flags (C2's self-serve opt-out plus the task-1002966 pair; own data, keyed on the authenticated github_id —… |
-| PATCH | `/api/bongos/me/disciplines` | `any-builder` | `preferred_disciplines` | Self-service edit of the authenticated builder's preferred disciplines (migrations 027 + 086 / V3.R80). |
+| PATCH | `/api/bongos/me/disciplines` | `any-builder` | `preferred_disciplines`, `main_discipline` | Self-service edit of the authenticated builder's preferred disciplines (migrations 027 + 086 / V3.R80). |
 | GET | `/api/bongos/me/display-name` | `any-builder` | — | Per-builder DISPLAY NAME (task 1669). |
 | PATCH | `/api/bongos/me/display-name` | `any-builder` | _undocumented_ | PATCH the display name. |
 | GET | `/api/bongos/me/event-sound-prefs` | `any-builder` | — | Per-builder per-event sound variant selection (task 582, migration 164). |

package/docs/architecture.md

@@ -101,6 +101,7 @@ builders(id, github_id UNIQUE, github_login, display_name, avatar_url, total_cre
        (system: can't claim/earn/log-in). The cross-builder memory WRITE gate keys on this
        EXACT value, not on rank (ADR 0026 §6C) — an Archon token is rejected.
   + skill_model_prefs jsonb (mig 037), preferred_disciplines text[] (mig 027), timezone (PMS-V2),
+    main_discipline text NULL (core_268 — the builder chosen MAIN role; NULL = not chosen, inferred from credits),
     deactivated_at/reactivated_at/deactivated_reason (mig 025 — the /builder-exit flow; #307 guard)
 tasks ... + xenos_claimable boolean NOT NULL DEFAULT false (mig 029) -- Xenos may claim only these
 versions(id PK 'V1'|'PMS-V1'..., name, track, status, scope_doc_path, ...)  -- track is free text (the product|internal CHECK was dropped in mig 112, task 1191); the valid set is instance config (config/branding.json "tracks"), not a DB constraint

package/docs/copy-inventory.md

@@ -1739,9 +1739,9 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `d73256fbc395` | certain | {…} · who votes, and how it {…} | `modules/hall-ui/public/board-room.js:449` |
 | `cab2a4296aec` | certain | {…} · {…} · {…}{…} | `modules/hall-ui/public/goal-inbox.js:458` |
 | `1ac723849449` | certain | {…} · {…}{…} | `modules/hall-ui/public/sky-interaction.js:33` |
+| `f9958dc71904` | certain | {…} — everything earned: shipped work, approved pages and ideas. | `modules/hall-ui/public/profile.js:94` |
 | `ddd2bfc1fb60` | certain | {…} — how to use it | `modules/hall-ui/public/modules.js:385` |
 | `085f93f3f775` | certain | {…} — see all standings | `modules/hall-ui/public/hall-render.js:80` |
-| `f75ee96a7511` | certain | {…} — total payout from shipped work. | `modules/hall-ui/public/profile.js:94` |
 | `2a2728a4ec4f` | certain | {…}% of tasks complete | `modules/hall-ui/public/roadmap.js:63` |
 | `15e545eb3ce2` | certain | {…}, no such task | `modules/hall-ui/public/task.js:1015` |
 | `8944d0dcf563` | certain | {…}, on the {…} page, is where you left it. | `modules/hall-ui/public/studio.js:658` |

package/docs/copy-registry.json

@@ -17259,6 +17259,15 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "f9958dc71904",
+      "surface": "builders-hall",
+      "text": "{…} — everything earned: shipped work, approved pages and ideas.",
+      "file": "modules/hall-ui/public/profile.js",
+      "line": 94,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "ddd2bfc1fb60",
       "surface": "builders-hall",
@@ -17277,15 +17286,6 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
-    {
-      "id": "f75ee96a7511",
-      "surface": "builders-hall",
-      "text": "{…} — total payout from shipped work.",
-      "file": "modules/hall-ui/public/profile.js",
-      "line": 94,
-      "origin": "js-markup",
-      "confidence": "certain"
-    },
     {
       "id": "2a2728a4ec4f",
       "surface": "builders-hall",

package/docs/module-api-changelog.md

@@ -2773,5 +2773,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.20.56 with no explicit bump. run 36823118111. (task 1002620)
   1.20.58 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.20.57 with no explicit bump. run 36825877084. (task 1002620)
+  1.20.59 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.20.58 with no explicit bump. run 36828212808. (task 1002620)
 ---------------------------------------------------------------------------
 ```