@bongos/core 1.21.57 → 1.21.58

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.21.57",
-  "core_contract": "1.21.57",
-  "source_commit": "e85bc7459856816a1e927e51239711329c526ae9",
+  "core_version": "1.21.58",
+  "core_contract": "1.21.58",
+  "source_commit": "4bbf8bc0f626440da1b55c5674814cce6b291a23",
   "source_ref": "HEAD",
-  "built_at": "2026-10-05T01:33:26.432Z",
+  "built_at": "2026-10-05T03:05:29.962Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
-    "docs_redacted": 582,
+    "docs_redacted": 583,
     "agent_docs_stubbed": 28,
-    "functional_verbatim": 2938,
+    "functional_verbatim": 2944,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 3549,
-  "tree_sha256": "8b1747874fec46f77cfeeadf4f6b65372980ac6879db27476ff85911d2edfe46",
+  "file_count": 3556,
+  "tree_sha256": "27538316c32493f9657a6695546fb3b58073c51a47552755662d5f7f2c870864",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -312,12 +312,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "b22841ad3eebf8cddb58a5779d390608b0a6fc059199e9d00eac4654e537b7ab"
+      "sha256": "45f27ed681b4c56568ad5f7fcfe9aecddc32ab45d90f5b6321d641521995e981"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "daad891d3dc1b2bd80fed03e0811a707f05e4e6c149f08a0f2985e4a92472627"
+      "sha256": "a39ac01b75f7ad11b421497e2f1b7945befe18503be785b80978c25720c531ee"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -327,17 +327,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "6a5c2c56d6b7f34a7976716b9982356f8ae7f3375d22301a36a8f1c431a244fc"
+      "sha256": "61c036ef4314deac3cfba830feba172a6b5f3c02bd5752cb10d8f1e378061ca7"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "fce8f2221f75cd49325c58c0281162696871b3f8668c88e718192db2f025f11d"
+      "sha256": "f43a89f67674a49e86864acb0b91d7f8450200da3d84c657eb5bfefe0affcb0e"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "cd7c7fdf282d9f07851ce685bf2e51a80ff10b0a8a376ebba011bfda4df87350"
+      "sha256": "c6a9b382965b4ccf32df9e296662cb2d7c628184d34a974cef8b384fdfdf54e1"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -2137,7 +2137,7 @@
     {
       "path": "docs/adr/0336-a-guilds-record-is-the-sum-of-what-its-members-already-show.md",
       "mode": "0000644",
-      "sha256": "d62d6550483fe11386ce097cb37112adf76111dabcd898291ff3d5ce5b63f69d"
+      "sha256": "d84323171525d785f9909f53bd554f6c7e42d46616e92010c43b142be8db2cc4"
     },
     {
       "path": "docs/adr/0337-the-hub-account-is-the-person-a-hall-account-is-their-seat-in-one-project.md",
@@ -2279,20 +2279,25 @@
       "mode": "0000644",
       "sha256": "882a01ac32ecddcb9b6f3dd88792e34164d7daafae4413eb3f64b502c0c59ddd"
     },
+    {
+      "path": "docs/adr/0365-a-guild-engages-a-project-through-each-members-own-door.md",
+      "mode": "0000644",
+      "sha256": "93c863a7f961cd91c052eee2188b16b9f360cec26478dde6225b304ee0e59f7d"
+    },
     {
       "path": "docs/adr/README.md",
       "mode": "0000644",
-      "sha256": "037b81d2507eba161cd12c7daafb32071e6c65bc3383d0174e4ac96aa6ab6dc4"
+      "sha256": "a81d1eeeb26ce4fde1731485e943d82ddb320bc60a5f1782f7a207b94da5fff5"
     },
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "1c3a511a87a8fd967251ee153657a969f186c4fd971c4f7a8724253c6dc63fba"
+      "sha256": "07e654a8305093748950d3dba7fa861a989c0302cb941743a805d5a4a70cbd8c"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "5c6a55cfd49fd5a9f82efffa43f9602f3f5da0f8fe5df5d0bfbcad8f31a4984f"
+      "sha256": "3297e2694c5be1302ea4114a1e82a5864fcb09740d84b17aa837b7421d3f34c5"
     },
     {
       "path": "docs/architecture.md",
@@ -2317,12 +2322,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "0d3d82339cda4cd2102010fbf7017b7c724798ab7fd4e9ebddb8c6f0572619c3"
+      "sha256": "efc5c678e20b7e06959619777502cd728465076521f49a4b935a17559ce7de7b"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "fff05b0e2a0afd9767a29852caa72f15021b5f6fed1c0c0c771aebc44f773475"
+      "sha256": "47b5f1e5c33600905dbbaf62b70d5092b92e610e29f602d85621a0d027bad3b7"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2822,7 +2827,7 @@
     {
       "path": "docs/file-map.md",
       "mode": "0000644",
-      "sha256": "dcdc9999d1a24ab87392081fec9e771fe49524755a9b9240fc98b012a1189886"
+      "sha256": "f9943f6b4d4859358b4d2d71af9f043d47b2f5a70532bbb9489f34423c596ff8"
     },
     {
       "path": "docs/handoff-template.md",
@@ -2832,7 +2837,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "fc76227315637a590d97039b852294406b7b9a99f1e18199c98b62b1d7acdbae"
+      "sha256": "afe46e7c8c0e7cf4206fb794b6da671f0e575b63161d0ae8754431bd3762f519"
     },
     {
       "path": "docs/modules-contract.md",
@@ -2917,12 +2922,12 @@
     {
       "path": "docs/page-inventory.json",
       "mode": "0000644",
-      "sha256": "137e6c7b5f0519c93d5bfbc5883eb034183326ff4a21d6730bead3e855e0534c"
+      "sha256": "8f3f9d5bad79803f5bbf96ee25bbbe4bb4915455107bdf9adcc23c2ea04e7cd8"
     },
     {
       "path": "docs/page-readings.json",
       "mode": "0000644",
-      "sha256": "9a43e953250550351f757573806fd18776f8f67076942b5afb563626b330889a"
+      "sha256": "aee98576821a49cc9fb3f7346ccced59ed6fe89c4d2672ef69ee9c9616589c0a"
     },
     {
       "path": "docs/project-context.template.md",
@@ -7702,7 +7707,7 @@
     {
       "path": "modules/platform-identity/application-echo.js",
       "mode": "0000644",
-      "sha256": "8217660dc23b57ba0fb54d6375aca9aec190c7abb1d70f9d44d4e290da272c64"
+      "sha256": "ef065b3fbd898a8d16de176904bd04eb1a56a6b005705387d020fa6c6c888321"
     },
     {
       "path": "modules/platform-identity/builder-search.js",
@@ -7734,6 +7739,11 @@
       "mode": "0000644",
       "sha256": "3a0d3e28351c81b9b46d14073dc65eb2372b05d73ccbbe161ea7c9c0ba5c9f87"
     },
+    {
+      "path": "modules/platform-identity/guild-engagements.js",
+      "mode": "0000644",
+      "sha256": "7ad59a1bd96e9f8873a5110f00c34caa22ce1ff513b7454b970c3c67c2f89e78"
+    },
     {
       "path": "modules/platform-identity/guild-map.js",
       "mode": "0000644",
@@ -7747,7 +7757,7 @@
     {
       "path": "modules/platform-identity/guilds.js",
       "mode": "0000644",
-      "sha256": "e048e674b087eae9035da5b3449d8f4029ec329a42333980eb21ac3e6c13a297"
+      "sha256": "9f3231c4ae89a72742ba460224068fa34850fbe284a105ed5142d5a32f3572f3"
     },
     {
       "path": "modules/platform-identity/hub-device.js",
@@ -7924,6 +7934,11 @@
       "mode": "0000644",
       "sha256": "616c64ad4caa3579672ffcefe12badb83c6525ec45dcb68f15254da8b995fc25"
     },
+    {
+      "path": "modules/platform-identity/migrations/platform_identity_030_guild_engagements.sql",
+      "mode": "0000644",
+      "sha256": "ee1d7a42517c978a771dd418d61b783b4d34629497718a1ea9340a94a94aabce"
+    },
     {
       "path": "modules/platform-identity/module.json",
       "mode": "0000644",
@@ -8007,12 +8022,12 @@
     {
       "path": "modules/platform-identity/routes/guilds.js",
       "mode": "0000644",
-      "sha256": "96ca33e6753cbacc40af0c1b766ec637fa6168692a5c6260ff25882d27beb6a2"
+      "sha256": "63442c19efe41269fde8d7f3f114d24d508baaf602b5998d73ab112bdbca30c3"
     },
     {
       "path": "modules/platform-identity/routes/my-projects.js",
       "mode": "0000644",
-      "sha256": "c9a3541f976aa872d4645dccb6101b5ca046a7ea963b1665e9cb6ed9d3796f5c"
+      "sha256": "d62b44c9d13310388b4015a273c9003664c56440295b780cc66a01d9496a5597"
     },
     {
       "path": "modules/platform-identity/routes/profile.js",
@@ -8022,7 +8037,7 @@
     {
       "path": "modules/platform-identity/routes/projects.js",
       "mode": "0000644",
-      "sha256": "094c1d54e11794acb09066d0d95b18dbe9100f8b87a67cd7eb1f56be30026f8e"
+      "sha256": "8f309c8b0a02e82eca0fa5873a62f1f6b221c282af23d4f13911cb9e15313f92"
     },
     {
       "path": "modules/platform-identity/routes/public-profile.js",
@@ -8042,7 +8057,7 @@
     {
       "path": "modules/platform-identity/routes/sso.js",
       "mode": "0000644",
-      "sha256": "98e481e400429bfcb4170bd069d1853c8c7ee11a150806fa0d0fdfdb31725d12"
+      "sha256": "0ecc3f416dbd03ee47a2c18a64faa6e0e0fac1d19c10a5246f7c77aa313d8264"
     },
     {
       "path": "modules/platform-identity/scouting-authz.js",
@@ -8792,7 +8807,7 @@
     {
       "path": "modules/public-landing/public/assets/cosmos.css",
       "mode": "0000644",
-      "sha256": "9b1ea823e7982bbb912940812bff37245dfc18a3326a8322418f164310aded06"
+      "sha256": "399fa97b3a03a1ef99c6be925822fc36ab0d4a2b712dbe7cf7453efe9509e00e"
     },
     {
       "path": "modules/public-landing/public/assets/hub-bar.js",
@@ -9127,17 +9142,17 @@
     {
       "path": "modules/public-landing/public/guild.html",
       "mode": "0000644",
-      "sha256": "8bbea7ebd2cab44439bb79629f04d8d40129bf47699f0a33f08fd47853729a70"
+      "sha256": "583ac74502bc63ed808b7cad4867dbd4712a3ad04bb7995636f9f50103b48a35"
     },
     {
       "path": "modules/public-landing/public/guild.probes.json",
       "mode": "0000644",
-      "sha256": "cbc7db7816bfbd0c01841260f86bb2e2e52fbe1afc9737ce3f88080b2afdbda9"
+      "sha256": "a8e148626bc48c41b248105fff61dc8d20c694755ad8812a8a773c3e147352c1"
     },
     {
       "path": "modules/public-landing/public/guild.states.json",
       "mode": "0000644",
-      "sha256": "3ff55485a36c8de60839f682c9d3f4eeb97682286366a913c2ce16587863d6ba"
+      "sha256": "ec1df640ebf9047c817a65badd28a41167fd53e00399452b537b9b5035c6215e"
     },
     {
       "path": "modules/public-landing/public/index.html",
@@ -9187,17 +9202,17 @@
     {
       "path": "modules/public-landing/public/projects.html",
       "mode": "0000644",
-      "sha256": "7c29e1a79202f3b1c52491ae612aa66980d3f3b129cddb6fc73f38e8cbe50ccf"
+      "sha256": "1749ebaa1148f1288559f93c5edf9ca27f0a8a26eccee8f01ebbd92208d14f95"
     },
     {
       "path": "modules/public-landing/public/projects.probes.json",
       "mode": "0000644",
-      "sha256": "c0fa8801a87054b8183b685512ba3d6e8a2170192e32b4eb729415cc0ee025c5"
+      "sha256": "d0681e889c1536ba24e038187b7c18db15aa0ccdcd71152e53f03390d2181b8f"
     },
     {
       "path": "modules/public-landing/public/projects.states.json",
       "mode": "0000644",
-      "sha256": "b895863eab617e0daf172ae3448f25e2e791ec12920f0ec719befaffce1f7319"
+      "sha256": "ca468df0378d929b5332c282b64084aefa186cfc0d22cc2510611d6055477165"
     },
     {
       "path": "modules/public-landing/public/terms.html",
@@ -9714,6 +9729,11 @@
       "mode": "0000644",
       "sha256": "4dff6353b7fe0ed5769cdeb5daf16ac36afb707103126c432a1176568c451c41"
     },
+    {
+      "path": "modules/ui-design/kit/fixtures/me__guild-engagements.json",
+      "mode": "0000644",
+      "sha256": "162489516c87175269bf43a018fd97fa4acb199dd947897fad4d3d0a8900076f"
+    },
     {
       "path": "modules/ui-design/kit/fixtures/my-projects.json",
       "mode": "0000644",
@@ -9787,7 +9807,7 @@
     {
       "path": "modules/ui-design/kit/serve.js",
       "mode": "0000644",
-      "sha256": "a96aafad02caf3068bb70b7ca49b0cb9385ab3913f4713e70ef05d4365f7429d"
+      "sha256": "7bfca5557ddb82596cd1d0b9a1023f4f1fe81bd99fccbb7abee102b931549498"
     },
     {
       "path": "modules/ui-design/kit/tells.js",
@@ -9922,12 +9942,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "aefa624b44d47a0ce091d37560a2f3f7cbf5fd1f78b186d014f32b90d58b1234"
+      "sha256": "9329d96fc868bbb58efc9641f6e3de8051b4c3dcc6fd0f6ff5df1c4d4351c682"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "ea3997d82de221415b5a0201ea77428c8a2fabb7ab6b1071c7a00244dcedc80e"
+      "sha256": "cf36cdd408c878e2bc602c110ba1ed09984d1a7e80fcfa9dc605960cc8db321c"
     },
     {
       "path": "public-docs/index.html",
@@ -9947,7 +9967,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "7e506e8ba89e3db6a57fe10008a37f0191605cc80641a8e595c86a9f07658e0b"
+      "sha256": "6219c16245804220029443b8e5c1aee4893e05aa32a2a7830cb21e6e3de158f4"
     },
     {
       "path": "scripts/cron/style_guide_audit.sh",
@@ -11152,7 +11172,7 @@
     {
       "path": "scripts/gds/run-unit-tests.js",
       "mode": "0000644",
-      "sha256": "90c8029f97db125917048f0dbd274a127c5819e823b1bf431670bbb66d3a2817"
+      "sha256": "bd2c9b3fc469feda913bc58db6106b6bcc2c59bfacfc90fe23cb89c076ac1762"
     },
     {
       "path": "scripts/gds/runner-drift.js",
@@ -12167,7 +12187,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "ab5e20cb1ba3c299ebd9d87cd5eed42745629cc58785c6f51c45e8ea1edfe581"
+      "sha256": "d2a7932b2b85110bb59fb6e3724b18c139d08b6463a060fe570d5a53a6acc23f"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -12452,7 +12472,7 @@
     {
       "path": "tests/applicant_profile_boundary.mjs",
       "mode": "0000644",
-      "sha256": "beefe27f5f753185cf3513f6576e55ee44680760ff2d8eed4ced93d56ec92b77"
+      "sha256": "f7c94079d3c85cc6513dba591111f81fa45115e25d32469d67e949a8e7abee3d"
     },
     {
       "path": "tests/applicant_profile_read_bounds.mjs",
@@ -12462,7 +12482,7 @@
     {
       "path": "tests/application_echo.mjs",
       "mode": "0000644",
-      "sha256": "eec3a0404674e2a02d3ba7f38ec9fee92e5f06870240161d98986d525cb03d3f"
+      "sha256": "29224350f0699a66f9cd96860519d159f707bc48d68f154ae86742ca1377e9ea"
     },
     {
       "path": "tests/application_lifecycle.mjs",
@@ -14359,6 +14379,16 @@
       "mode": "0000644",
       "sha256": "6e834f3cf75dd34ba30795c46bc401098053a56c967da8661128f34db71ff8c3"
     },
+    {
+      "path": "tests/guild_engagement.mjs",
+      "mode": "0000644",
+      "sha256": "739cff88d954b74aaaf93a66c9409fea248b36724700f6916898fd2b4c126769"
+    },
+    {
+      "path": "tests/guild_engagement_db.mjs",
+      "mode": "0000644",
+      "sha256": "ba38bcb529ae53d08287e774abe156da5c7ea52c5428a32ef006b2be7445da85"
+    },
     {
       "path": "tests/guild_map_db.mjs",
       "mode": "0000644",
@@ -14689,10 +14719,15 @@
       "mode": "0000644",
       "sha256": "5daff8488df269752d2e5992e60a03bb75cf85a5b8d5fcaa15703b12a5bb6b94"
     },
+    {
+      "path": "tests/hub_engagement_cards.mjs",
+      "mode": "0000644",
+      "sha256": "04d3965899d39c3771ff5c55d6bac5482d66d5f0c9e38a12b7b0b751a5bd37f9"
+    },
     {
       "path": "tests/hub_guild_page.mjs",
       "mode": "0000644",
-      "sha256": "177180c9e2fc74ca459e98b2903b1c7b4937928e32bd42572776f19428c73cf4"
+      "sha256": "77f2e01830dc84f486e75731e3db38f513fdca34c1449fa376497d3565852de4"
     },
     {
       "path": "tests/hub_invite_notices.mjs",
@@ -15862,7 +15897,7 @@
     {
       "path": "tests/privacy_matrix.mjs",
       "mode": "0000644",
-      "sha256": "32b1344c31e3067b3578a9f304f50a9279a0a984a8c2e531ea96a144c7ad4d6d"
+      "sha256": "3a71c46b775910958f38b10cf0c8131cf07ac623e348e80444af65ac7e74ebf7"
     },
     {
       "path": "tests/probe_cache.mjs",
@@ -15977,7 +16012,7 @@
     {
       "path": "tests/project_invite_ui.mjs",
       "mode": "0000644",
-      "sha256": "0a0390f0801c3151a707a9b2c3cad3dc11d7455f6a7e01602eab8630ed08fb44"
+      "sha256": "d95712f34de59acf31b8b78ad811786a26039ed9f051fd142d718049fe8e270f"
     },
     {
       "path": "tests/project_join_door.mjs",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 512 operations across 74 resource groups
+- 515 operations across 74 resource groups
 
 ## Use it from your project
 

package/clients/bongos-client/bongos-client.global.js

@@ -559,6 +559,8 @@ function createClient(opts = {}) {
       getGuildsSlug: (args) => request("GET", "/guilds/{slug}", { hasBody: false }, args),
       // PATCH /guilds/{slug} — rank: any-builder — PATCH /guilds/:slug
       patchGuildsSlug: (args) => request("PATCH", "/guilds/{slug}", { hasBody: true }, args),
+      // POST /guilds/{slug}/engagements — rank: any-builder — POST /guilds/:slug/engagements
+      postGuildsSlugEngagements: (args) => request("POST", "/guilds/{slug}/engagements", { hasBody: true }, args),
       // POST /guilds/{slug}/invites — rank: any-builder — POST /guilds/:slug/invites
       postGuildsSlugInvites: (args) => request("POST", "/guilds/{slug}/invites", { hasBody: true }, args),
       // GET /guilds/{slug}/members — rank: any-builder — GET /guilds/:slug/members
@@ -683,6 +685,8 @@ function createClient(opts = {}) {
       getMeEventSoundPrefs: (args) => request("GET", "/me/event-sound-prefs", { hasBody: false }, args),
       // PATCH /me/event-sound-prefs — rank: any-builder — PATCH /me/event-sound-prefs
       patchMeEventSoundPrefs: (args) => request("PATCH", "/me/event-sound-prefs", { hasBody: true }, args),
+      // GET /me/guild-engagements — rank: any-builder — GET /me/guild-engagements
+      getMeGuildEngagements: (args) => request("GET", "/me/guild-engagements", { hasBody: false }, args),
       // GET /me/guild-requests — rank: any-builder — GET /me/guild-requests
       getMeGuildRequests: (args) => request("GET", "/me/guild-requests", { hasBody: false }, args),
       // GET /me/guilds — rank: any-builder — GET /me/guilds
@@ -853,6 +857,8 @@ function createClient(opts = {}) {
       getProjectsFeatured: (args) => request("GET", "/projects/featured", { hasBody: false }, args),
       // POST /projects/invite — rank: metic+archon — POST /projects/invite
       postProjectsInvite: (args) => request("POST", "/projects/invite", { hasBody: true }, args),
+      // POST /projects/invite-guild — rank: metic+archon — POST /projects/invite-guild
+      postProjectsInviteGuild: (args) => request("POST", "/projects/invite-guild", { hasBody: true }, args),
     },
     "provisioning": {
       // GET /provisioning/control-plane — rank: archon — GET /provisioning/control-plane

package/clients/bongos-client/index.cjs

@@ -558,6 +558,8 @@ function createClient(opts = {}) {
       getGuildsSlug: (args) => request("GET", "/guilds/{slug}", { hasBody: false }, args),
       // PATCH /guilds/{slug} — rank: any-builder — PATCH /guilds/:slug
       patchGuildsSlug: (args) => request("PATCH", "/guilds/{slug}", { hasBody: true }, args),
+      // POST /guilds/{slug}/engagements — rank: any-builder — POST /guilds/:slug/engagements
+      postGuildsSlugEngagements: (args) => request("POST", "/guilds/{slug}/engagements", { hasBody: true }, args),
       // POST /guilds/{slug}/invites — rank: any-builder — POST /guilds/:slug/invites
       postGuildsSlugInvites: (args) => request("POST", "/guilds/{slug}/invites", { hasBody: true }, args),
       // GET /guilds/{slug}/members — rank: any-builder — GET /guilds/:slug/members
@@ -682,6 +684,8 @@ function createClient(opts = {}) {
       getMeEventSoundPrefs: (args) => request("GET", "/me/event-sound-prefs", { hasBody: false }, args),
       // PATCH /me/event-sound-prefs — rank: any-builder — PATCH /me/event-sound-prefs
       patchMeEventSoundPrefs: (args) => request("PATCH", "/me/event-sound-prefs", { hasBody: true }, args),
+      // GET /me/guild-engagements — rank: any-builder — GET /me/guild-engagements
+      getMeGuildEngagements: (args) => request("GET", "/me/guild-engagements", { hasBody: false }, args),
       // GET /me/guild-requests — rank: any-builder — GET /me/guild-requests
       getMeGuildRequests: (args) => request("GET", "/me/guild-requests", { hasBody: false }, args),
       // GET /me/guilds — rank: any-builder — GET /me/guilds
@@ -852,6 +856,8 @@ function createClient(opts = {}) {
       getProjectsFeatured: (args) => request("GET", "/projects/featured", { hasBody: false }, args),
       // POST /projects/invite — rank: metic+archon — POST /projects/invite
       postProjectsInvite: (args) => request("POST", "/projects/invite", { hasBody: true }, args),
+      // POST /projects/invite-guild — rank: metic+archon — POST /projects/invite-guild
+      postProjectsInviteGuild: (args) => request("POST", "/projects/invite-guild", { hasBody: true }, args),
     },
     "provisioning": {
       // GET /provisioning/control-plane — rank: archon — GET /provisioning/control-plane

package/clients/bongos-client/index.d.ts

@@ -98,6 +98,7 @@ export interface GetMeAchievementsResponse { unlocked: unknown }
 export interface GetMeCrossProjectResponse { hide_stats: boolean; profile_state: unknown; handle: unknown; display_name: unknown; bio: unknown; links: unknown; cross_project: unknown; account_visibility: unknown; recruiter_discoverable: unknown; recruiter_discoverable_effective: unknown }
 export interface GetMeDisplayNameResponse { display_name: unknown; max_length: unknown }
 export interface GetMeEventSoundPrefsResponse { prefs: unknown; effective: unknown; effective_wav: unknown; events: unknown }
+export interface GetMeGuildEngagementsResponse { engagements: unknown; count: unknown }
 export interface GetMeGuildRequestsResponse { incoming: unknown; outgoing: unknown; incoming_count: unknown; outgoing_count: unknown }
 export interface GetMeGuildsResponse { guilds: unknown; count: unknown }
 export interface GetMeRecentShipsResponse { ships: unknown }
@@ -369,6 +370,8 @@ export interface PostGuildRequestsIdAcceptRequest { visibility?: string; counted
 export interface PostGuildRequestsIdAcceptResponse { status: unknown }
 export interface PostGuildsRequest { slug: string; name: string; description?: string; visibility: string }
 export interface PostGuildsResponse { guild: unknown }
+export interface PostGuildsSlugEngagementsRequest { origin: string }
+export interface PostGuildsSlugEngagementsResponse { engagement: unknown }
 export interface PostGuildsSlugInvitesRequest { handles: string[] }
 export interface PostGuildsSlugInvitesResponse { results: unknown; count: unknown }
 export interface PostGuildsSlugRequestsRequest { counted_in_totals?: unknown }
@@ -412,7 +415,7 @@ export interface PostModulesKeySubmitRequest { signed_by?: string }
 export interface PostModulesKeySubmitResponse { ok: boolean; submission: unknown }
 export interface PostMyProjectsClientIdLeaveResponse { ok: boolean; left: unknown }
 export interface PostMyProjectsInvitesClientIdDeclineResponse { ok: boolean; accepted: boolean }
-export interface PostMyProjectsJoinRequest { origin: string; note?: string }
+export interface PostMyProjectsJoinRequest { origin: string; note?: string; guild?: string }
 export interface PostMyProjectsJoinResponse { ok: boolean; status: unknown; project: unknown; message: unknown }
 export interface PostNpmReleasePreviewRequest { version: string }
 export interface PostNpmReleaseReleaseRequest { version: string }
@@ -424,6 +427,8 @@ export interface PostPageNotesIdeasRequest { page_id: string; page_path?: string
 export interface PostPageNotesIdeasResponse { ideas: unknown; split_by: unknown }
 export interface PostPageNotesRequest { page_id: string; page_path?: string; page_title?: string }
 export interface PostPageNotesResponse { note: unknown; images: unknown }
+export interface PostProjectsInviteGuildRequest { client_id: string; guild: string }
+export interface PostProjectsInviteGuildResponse { invited: boolean; guild: unknown; invites: unknown; count: unknown }
 export interface PostProjectsInviteRequest { client_id: string; github_login: string }
 export interface PostProjectsInviteResponse { invited: boolean; invite_url: unknown }
 export interface PostProjectsProjectIdSpecialitiesRequest { name: string; discipline: string; summary?: string; contract_md?: string; visibility?: string; sellable?: boolean; skills?: string[] }
@@ -481,7 +486,7 @@ export interface PostSpecialitiesResponse { speciality: unknown }
 export interface PostSsoActivityRollupRequest { client_id: string; client_secret: string; github_id: StringifiableId; credits?: number; tasks_shipped?: number; karma?: number; rank?: string; disciplines?: unknown; recent_ships?: unknown; crafts?: unknown }
 export interface PostSsoActivityRollupResponse { ok: boolean }
 export interface PostSsoApplicantProfileRequest { client_id: string; client_secret: string; github_id: StringifiableId }
-export interface PostSsoApplicantProfileResponse { profile: unknown }
+export interface PostSsoApplicantProfileResponse { profile: unknown; guild: unknown }
 export interface PostSsoDevicePollRequest { device_code: string }
 export interface PostSsoDeviceStartRequest { origin: string }
 export interface PostSsoFeedbackRequest { client_id: string; client_secret: string; github_id: StringifiableId; message: string; kind?: string; context?: unknown }
@@ -1041,6 +1046,8 @@ export interface BongosClient {
     getGuildsSlug(args?: RequestArgs): Promise<GetGuildsSlugResponse>;
     /** PATCH /guilds/{slug} — rank: any-builder */
     patchGuildsSlug(args?: RequestArgs & { body?: PatchGuildsSlugRequest }): Promise<PatchGuildsSlugResponse>;
+    /** POST /guilds/{slug}/engagements — rank: any-builder */
+    postGuildsSlugEngagements(args: RequestArgs & { body: PostGuildsSlugEngagementsRequest }): Promise<PostGuildsSlugEngagementsResponse>;
     /** POST /guilds/{slug}/invites — rank: any-builder */
     postGuildsSlugInvites(args: RequestArgs & { body: PostGuildsSlugInvitesRequest }): Promise<PostGuildsSlugInvitesResponse>;
     /** GET /guilds/{slug}/members — rank: any-builder */
@@ -1165,6 +1172,8 @@ export interface BongosClient {
     getMeEventSoundPrefs(args?: RequestArgs): Promise<GetMeEventSoundPrefsResponse>;
     /** PATCH /me/event-sound-prefs — rank: any-builder */
     patchMeEventSoundPrefs(args?: RequestArgs): Promise<PatchMeEventSoundPrefsResponse>;
+    /** GET /me/guild-engagements — rank: any-builder */
+    getMeGuildEngagements(args?: RequestArgs): Promise<GetMeGuildEngagementsResponse>;
     /** GET /me/guild-requests — rank: any-builder */
     getMeGuildRequests(args?: RequestArgs): Promise<GetMeGuildRequestsResponse>;
     /** GET /me/guilds — rank: any-builder */
@@ -1335,6 +1344,8 @@ export interface BongosClient {
     getProjectsFeatured(args?: RequestArgs): Promise<GetProjectsFeaturedResponse>;
     /** POST /projects/invite — rank: metic+archon */
     postProjectsInvite(args: RequestArgs & { body: PostProjectsInviteRequest }): Promise<PostProjectsInviteResponse>;
+    /** POST /projects/invite-guild — rank: metic+archon */
+    postProjectsInviteGuild(args: RequestArgs & { body: PostProjectsInviteGuildRequest }): Promise<PostProjectsInviteGuildResponse>;
   };
   "provisioning": {
     /** GET /provisioning/control-plane — rank: archon */

package/clients/bongos-client/index.mjs

@@ -555,6 +555,8 @@ export function createClient(opts = {}) {
       getGuildsSlug: (args) => request("GET", "/guilds/{slug}", { hasBody: false }, args),
       // PATCH /guilds/{slug} — rank: any-builder — PATCH /guilds/:slug
       patchGuildsSlug: (args) => request("PATCH", "/guilds/{slug}", { hasBody: true }, args),
+      // POST /guilds/{slug}/engagements — rank: any-builder — POST /guilds/:slug/engagements
+      postGuildsSlugEngagements: (args) => request("POST", "/guilds/{slug}/engagements", { hasBody: true }, args),
       // POST /guilds/{slug}/invites — rank: any-builder — POST /guilds/:slug/invites
       postGuildsSlugInvites: (args) => request("POST", "/guilds/{slug}/invites", { hasBody: true }, args),
       // GET /guilds/{slug}/members — rank: any-builder — GET /guilds/:slug/members
@@ -679,6 +681,8 @@ export function createClient(opts = {}) {
       getMeEventSoundPrefs: (args) => request("GET", "/me/event-sound-prefs", { hasBody: false }, args),
       // PATCH /me/event-sound-prefs — rank: any-builder — PATCH /me/event-sound-prefs
       patchMeEventSoundPrefs: (args) => request("PATCH", "/me/event-sound-prefs", { hasBody: true }, args),
+      // GET /me/guild-engagements — rank: any-builder — GET /me/guild-engagements
+      getMeGuildEngagements: (args) => request("GET", "/me/guild-engagements", { hasBody: false }, args),
       // GET /me/guild-requests — rank: any-builder — GET /me/guild-requests
       getMeGuildRequests: (args) => request("GET", "/me/guild-requests", { hasBody: false }, args),
       // GET /me/guilds — rank: any-builder — GET /me/guilds
@@ -849,6 +853,8 @@ export function createClient(opts = {}) {
       getProjectsFeatured: (args) => request("GET", "/projects/featured", { hasBody: false }, args),
       // POST /projects/invite — rank: metic+archon — POST /projects/invite
       postProjectsInvite: (args) => request("POST", "/projects/invite", { hasBody: true }, args),
+      // POST /projects/invite-guild — rank: metic+archon — POST /projects/invite-guild
+      postProjectsInviteGuild: (args) => request("POST", "/projects/invite-guild", { hasBody: true }, args),
     },
     "provisioning": {
       // GET /provisioning/control-plane — rank: archon — GET /provisioning/control-plane

package/docs/adr/0336-a-guilds-record-is-the-sum-of-what-its-members-already-show.md

@@ -143,6 +143,8 @@ The guild page lives at **`/g/<slug>`** on the hub, the sibling of `/u/<handle>`
 
 ### D7 — A guild engages a project only through the individual door, one person at a time
 
+> **Amended by [ADR 0365](0365-a-guild-engages-a-project-through-each-members-own-door.md) (2026-10-05):** after ADR 0353 the hub writes no invites, so "a project invites a guild" returns one hall hand-off link per public-roster member instead of fanning out hub invites; the guild label reaches the queue in R28.
+
 A project still admits **people**, through the one door ADR 0201 built, so no new admission path exists. The hub holds a guild-level **engagement** row: `(guild_id, client_id, kind ∈ {'apply','invited'}, created_at)`. It records no filer, for the same reason the guild row keeps no creator. It is **statusless**, for the ADR 0201 D1.3 reason (the hub may not hold an admission fact about someone else's project), and it ages out read-time at 30 days.
 
 - **A guild applies** (the owner files it). Each member sees "G is applying to P — apply with them?" in their own inbox. **Opting in is applying as yourself** through the existing relay (`POST /my-projects/join`, vouched, echoed), with the engagement attached to that member's application echo. Nobody reaches P without their own act. P receives ordinary vouched applications and approves each with `access_request.review`, exactly as today. The **guild label reaches P's queue through the live applicant-profile read** (ADR 0260's `POST /sso/applicant-profile`, which already reads the echo), returning `guild: { slug, name }` when the echo carries an engagement. There is no new body field, header or instance column, so a project on any core pin keeps working (the ADR 0201 D2.2 compatibility rule). For a public guild, the reviewer may open its public page. For an unlisted guild, the reviewer sees its name and the applying members' own applicant views, and nothing else.

package/docs/adr/0365-a-guild-engages-a-project-through-each-members-own-door.md

@@ -0,0 +1,58 @@
+# ADR 0365 — A guild engages a project through each member's own door: an application is each member's, an invite is hand-off links
+
+- **Status:** accepted
+- **Date:** 2026-10-05
+- **Task:** [task 1002303](https://cloudbongos.com/builders#/task/1002303) (R27, goal 1000110 — BONGOS-V2)
+- **Amends:** [ADR 0336](0336-a-guilds-record-is-the-sum-of-what-its-members-already-show.md) D7 (the invite half)
+- **Builds on:** [ADR 0353](0353-a-hub-invite-is-a-notice-of-the-projects-own-invite.md) D3 (the hub's own invite writes nothing; it hands the inviter to the project's hall), [ADR 0201](0201-cross-project-application-vouched-row-live-record.md) D1.3 (the application echo), [ADR 0260](0260-the-application-is-the-consent-and-the-echo-is-the-gate.md) (the echo gates the live applicant-profile read)
+- **Decided with:** the owner, 2026-10-05, choosing each recommended option in four questions (recorded on the task).
+
+## Context
+
+ADR 0336 D7 (2026-09-24) said a guild engages a project only through the individual door, and gave the invite half a mechanism: the hub "fans out ordinary individual invites, through the same primitive used to invite one builder (today `inviteToProject`)". Six days later ADR 0353 changed what that primitive is. The hub's own invite now writes nothing, because a hub `pending` row with no `invited` row on the project leads the invitee to a locked door — on an `apply` door, the default. `inviteToProject` survives only as the call a project makes to tell the hub about its OWN invite (`invite-notices.js`).
+
+Built as D7 reads, the fan-out would recreate exactly the state ADR 0353 removed, once per guild member. And a one-step fan-out that writes real invites needs the hub to ask the project to pre-approve people — the signed hub→project assertion ADR 0335 deferred, which is its own design.
+
+Two further gaps showed when the task was planned. Projects read only `body.profile` from the applicant-profile response, so a guild label the hub returns is discarded by every project today. And ADR 0337 D4.4's notice ("your numbers count toward the guild's rounded totals") was asked of guild invite, request and accept cards that do not exist yet: R24 built their routes, but no UI calls them.
+
+## Decision
+
+### D1 — The engagement row is as D7 specified
+
+`platform_identity_guild_engagements (guild_id, client_id, kind ∈ {'apply','invited'}, created_at)`: no filer, no status, ageing out when read at 30 days. Re-filing restarts the window. The echo gains a nullable `guild_id`, so the most recent application decides the label: applying again on your own clears it.
+
+### D2 — A guild applies: unchanged from D7
+
+The guild owner files the engagement. Each member sees "G is applying to P — apply with them?" in their own invitations, and applying is applying as yourself through the existing relay, with `guild` naming the engagement. A `guild` that no longer resolves for the caller (left the guild, engagement aged out) refuses with 409 and relays nothing. Filing does not apply on the owner's behalf; the owner applies like every other member.
+
+### D3 — A project invites a guild: hand-off links, not hub-written invites
+
+Whoever passes the project's inviter gate names a public guild. The hub records the `invited` engagement and returns one hall hand-off link per member on the guild's **public roster at that moment** — the people the inviter could see — through the same `hallInviteUrl` ADR 0353 D3 uses for one builder. The inviter sends each invite from the project's hall, so every invite is the project's own `invited` row and every acceptance is signing in. Members who join later inherit nothing; members the inviter could not see get the "P invited this guild" notice and may apply themselves. An unlisted guild cannot be invited (it answers like an unknown one).
+
+A member who opted out of recruiting is still listed (owner, 2026-10-05): the inviter named the guild and sees only what its public page already shows, and each member still accepts or ignores their own invite — this is not the recruiting reach ADR 0251 governs.
+
+The one-step fan-out — the hub asking the project to pre-approve N people — stays deferred with ADR 0335's signed-assertion relay.
+
+### D4 — A project is named only when it is on the map and public, for both kinds
+
+The naming rule (`onMapSql AND visibility = 'public'`, the ADR 0171 D2 amendment) gates the `invited` notice AND guild applications, at filing and again at read. A private or stealth project's engagement is not shown at all, rather than shown anonymised: otherwise the hub would be the one telling a roster that a project it never chose to name is recruiting. Filing against an unknown, inactive or non-public project answers one identical 404.
+
+### D5 — The label rides the applicant-profile read; the queue is R28's
+
+`POST /sso/applicant-profile` answers `{ profile, guild }` — `guild: { slug, name }` while the applicant is still a member (slug null for an unlisted guild), null otherwise, best-effort after the existing gate. Old projects ignore the extra field (the ADR 0201 D2.2 compatibility rule). Passing it through core and showing it in the queue is [task 1002304](https://cloudbongos.com/builders#/task/1002304) (R28).
+
+### D6 — The D4.4 cards are their own task
+
+The guild invite and join-request cards, with the totals notice and switch, are [task 1004583](https://cloudbongos.com/builders#/task/1004583). This task's cards are engagements: they ask a member to apply to a project, not to join a guild.
+
+## Consequences
+
+- No new hub→project call and no new instance field, so every project on any core pin keeps working.
+- Inviting a guild is N clicks from the project's hall, not one. That is the honest cost of keeping admission on the project.
+- No withdraw route: an engagement simply ages out.
+
+## Alternatives considered
+
+- **D7 as written (the hub calls `inviteToProject` per member).** Rejected: recreates ADR 0353's locked door per member.
+- **Build the signed hub→project relay now.** Rejected for this task: security-sensitive, and it only works once every project upgrades.
+- **An anonymised "a private project invited this guild" notice.** Rejected: it still widens a private project's reach to people it never saw.