@bongos/core 1.24.22 → 1.24.24

package/docs/api/openapi.json

@@ -65,6 +65,10 @@
       "name": "backup",
       "description": "Endpoints under `/api/bongos/backup`."
     },
+    {
+      "name": "balances",
+      "description": "Endpoints under `/api/bongos/balances`."
+    },
     {
       "name": "blockers",
       "description": "Endpoints under `/api/bongos/blockers`."
@@ -3075,6 +3079,130 @@
         ]
       }
     },
+    "/balances/fund-project": {
+      "post": {
+        "operationId": "post_balances_fund_project",
+        "tags": [
+          "balances"
+        ],
+        "summary": "POST /balances/fund-project",
+        "description": "a person funds this project from their own account, on their own web session.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/economy/routes/balances.js",
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/balances/me": {
+      "get": {
+        "operationId": "get_balances_me",
+        "tags": [
+          "balances"
+        ],
+        "summary": "GET /balances/me",
+        "description": "the signed-in person's own balance and their own payments.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/economy/routes/balances.js",
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/balances/pay": {
+      "post": {
+        "operationId": "post_balances_pay",
+        "tags": [
+          "balances"
+        ],
+        "summary": "POST /balances/pay",
+        "description": "a person pays another member of this project from their own account.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/economy/routes/balances.js",
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/balances/project": {
+      "get": {
+        "operationId": "get_balances_project",
+        "tags": [
+          "balances"
+        ],
+        "summary": "GET /balances/project",
+        "description": "the project's balance figure, so a member can see whether it needs funding.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/economy/routes/balances.js",
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/blockers": {
       "get": {
         "operationId": "get_blockers",
@@ -14678,40 +14806,22 @@
         ]
       }
     },
-    "/me/checkout-freshness": {
-      "patch": {
-        "operationId": "patch_me_checkout_freshness",
+    "/me/cash-outs": {
+      "get": {
+        "operationId": "get_me_cash_outs",
         "tags": [
           "me"
         ],
-        "summary": "PATCH /me/checkout-freshness",
-        "description": "How far behind this builder's local project folder is (task 1005021, checkout-freshness.js). Written by their own session start; read back by GET /me, which tells the person (and their agent) when the folder could not update itself. Body: { behind, branch, reason }. rank: any-builder — a builder's own report about their own computer; same posture as /me/core-move-seen.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "summary": "GET /me/cash-outs",
+        "description": "GET /api/bongos/me/cash-outs — my withdrawals and where each stands.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
-        "x-source": "modules/builder-settings/routes/settings.js",
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/PatchMeCheckoutFreshnessRequest"
-              }
-            }
-          },
-          "x-validated": true
-        },
+        "x-source": "src/bongos/routes/my-cash-outs.js",
         "responses": {
           "200": {
-            "description": "Success.",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/PatchMeCheckoutFreshnessResponse"
-                }
-              }
-            }
+            "description": "Success."
           },
           "400": {
-            "$ref": "#/components/responses/ValidationFailed"
+            "$ref": "#/components/responses/BadRequest"
           },
           "401": {
             "$ref": "#/components/responses/Unauthorized"
@@ -14725,24 +14835,22 @@
             "builderSession": []
           }
         ]
-      }
-    },
-    "/me/core-move-seen": {
-      "patch": {
-        "operationId": "patch_me_core_move_seen",
+      },
+      "post": {
+        "operationId": "post_me_cash_outs",
         "tags": [
           "me"
         ],
-        "summary": "PATCH /me/core-move-seen",
-        "description": "The core move this builder has been told about (task 1004731, core-move-seen.js): closing the hall's \"Upgraded to core X\" notice stores that move's ledger id here, so it is not shown to them again on any device. Body: { id: \"<core_upgrades row id>\" }. rank: any-builder — own acknowledgement; same posture as /me/profile-nudge.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "summary": "POST /me/cash-outs",
+        "description": "POST /api/bongos/me/cash-outs — ask to take amount_cents of my balance to my bank.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
-        "x-source": "modules/builder-settings/routes/settings.js",
+        "x-source": "src/bongos/routes/my-cash-outs.js",
         "requestBody": {
           "required": true,
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/PatchMeCoreMoveSeenRequest"
+                "$ref": "#/components/schemas/PostMeCashOutsRequest"
               }
             }
           },
@@ -14750,14 +14858,7 @@
         },
         "responses": {
           "200": {
-            "description": "Success.",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/PatchMeCoreMoveSeenResponse"
-                }
-              }
-            }
+            "description": "Success."
           },
           "400": {
             "$ref": "#/components/responses/ValidationFailed"
@@ -14776,16 +14877,27 @@
         ]
       }
     },
-    "/me/credits": {
-      "get": {
-        "operationId": "get_me_credits",
+    "/me/cash-outs/{id}/cancel": {
+      "post": {
+        "operationId": "post_me_cash_outs_id_cancel",
         "tags": [
           "me"
         ],
-        "summary": "GET /me/credits",
-        "description": "GET /me/credits — the caller's own ledger. rank: any-builder — own-scoped by construction: the builder id comes from the authenticated session and is never read off the request, so there is no parameter here to tamper with. A builder may always read their own ledger; gating this any higher would mean a Xenos cannot see what they were paid.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "summary": "POST /me/cash-outs/:id/cancel",
+        "description": "POST /api/bongos/me/cash-outs/:id/cancel — withdraw one of my requests that has not been sent.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
-        "x-source": "modules/economy/routes/credits.js",
+        "x-source": "src/bongos/routes/my-cash-outs.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
         "responses": {
           "200": {
             "description": "Success."
@@ -14798,6 +14910,9 @@
           },
           "403": {
             "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
           }
         },
         "security": [
@@ -14807,82 +14922,42 @@
         ]
       }
     },
-    "/me/cross-project": {
-      "get": {
-        "operationId": "get_me_cross_project",
+    "/me/cash-outs/{id}/retry": {
+      "post": {
+        "operationId": "post_me_cash_outs_id_retry",
         "tags": [
           "me"
         ],
-        "summary": "GET /me/cross-project",
-        "description": "the caller's OWN cross-project record + privacy flags (own data).\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "summary": "POST /me/cash-outs/:id/retry",
+        "description": "POST /api/bongos/me/cash-outs/:id/retry — try one of my unfinished withdrawals again.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
-        "x-source": "modules/platform-identity/routes/profile.js",
-        "responses": {
-          "200": {
-            "description": "Success.",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/GetMeCrossProjectResponse"
-                }
-              }
-            }
-          },
-          "400": {
-            "$ref": "#/components/responses/BadRequest"
-          },
-          "401": {
-            "$ref": "#/components/responses/Unauthorized"
-          },
-          "403": {
-            "$ref": "#/components/responses/Forbidden"
-          }
-        },
-        "security": [
+        "x-source": "src/bongos/routes/my-cash-outs.js",
+        "parameters": [
           {
-            "builderSession": []
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
           }
-        ]
-      },
-      "patch": {
-        "operationId": "patch_me_cross_project",
-        "tags": [
-          "me"
         ],
-        "summary": "PATCH /me/cross-project",
-        "description": "flip the caller's OWN privacy flags (C2's self-serve opt-out plus the task-1002966 pair; own data, keyed on the authenticated github_id — a builder can never name another account here). Every field is optional and at least one is required, so a client sends only what changed; recruiter_discoverable accepts an explicit null (reset to \"follow visibility\"), which is why it is checked with `in` rather than truthiness.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
-        "x-rank": "any-builder",
-        "x-source": "modules/platform-identity/routes/profile.js",
-        "requestBody": {
-          "required": false,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/PatchMeCrossProjectRequest"
-              }
-            }
-          },
-          "x-validated": true
-        },
         "responses": {
           "200": {
-            "description": "Success.",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/PatchMeCrossProjectResponse"
-                }
-              }
-            }
+            "description": "Success."
           },
           "400": {
-            "$ref": "#/components/responses/ValidationFailed"
+            "$ref": "#/components/responses/BadRequest"
           },
           "401": {
             "$ref": "#/components/responses/Unauthorized"
           },
           "403": {
             "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
           }
         },
         "security": [
@@ -14892,22 +14967,22 @@
         ]
       }
     },
-    "/me/disciplines": {
+    "/me/checkout-freshness": {
       "patch": {
-        "operationId": "patch_me_disciplines",
+        "operationId": "patch_me_checkout_freshness",
         "tags": [
           "me"
         ],
-        "summary": "PATCH /me/disciplines",
-        "description": "Self-service edit of the authenticated builder's preferred disciplines (migrations 027 + 086 / V3.R80). Body: { preferred_disciplines: [\"artist\", ...] }. Valid elements are whatever enabledDisciplines() offers — engineer|ideator core plus any enabled module's (artist, ui); [] clears the preference (a multi-element set just means several lanes). No rank gate — a builder owns their own profile. 422 invalid_discipline if any element is out of range. rank: any-builder — self-service profile edit; documented \"no rank gate\" in the handler comment above (a builder owns their own preference). `main_discipline` (optional, task 1004433): the builder's own MAIN role, one of the crafts in the same body; null clears it, absent keeps it (see db.updateBuilderDisciplines). 422 invalid_main_discipline otherwise.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "summary": "PATCH /me/checkout-freshness",
+        "description": "How far behind this builder's local project folder is (task 1005021, checkout-freshness.js). Written by their own session start; read back by GET /me, which tells the person (and their agent) when the folder could not update itself. Body: { behind, branch, reason }. rank: any-builder — a builder's own report about their own computer; same posture as /me/core-move-seen.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
-        "x-source": "src/bongos/routes/me.js",
+        "x-source": "modules/builder-settings/routes/settings.js",
         "requestBody": {
           "required": true,
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/PatchMeDisciplinesRequest"
+                "$ref": "#/components/schemas/PatchMeCheckoutFreshnessRequest"
               }
             }
           },
@@ -14919,7 +14994,221 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/PatchMeDisciplinesResponse"
+                  "$ref": "#/components/schemas/PatchMeCheckoutFreshnessResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/me/core-move-seen": {
+      "patch": {
+        "operationId": "patch_me_core_move_seen",
+        "tags": [
+          "me"
+        ],
+        "summary": "PATCH /me/core-move-seen",
+        "description": "The core move this builder has been told about (task 1004731, core-move-seen.js): closing the hall's \"Upgraded to core X\" notice stores that move's ledger id here, so it is not shown to them again on any device. Body: { id: \"<core_upgrades row id>\" }. rank: any-builder — own acknowledgement; same posture as /me/profile-nudge.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/builder-settings/routes/settings.js",
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PatchMeCoreMoveSeenRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PatchMeCoreMoveSeenResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/me/credits": {
+      "get": {
+        "operationId": "get_me_credits",
+        "tags": [
+          "me"
+        ],
+        "summary": "GET /me/credits",
+        "description": "GET /me/credits — the caller's own ledger. rank: any-builder — own-scoped by construction: the builder id comes from the authenticated session and is never read off the request, so there is no parameter here to tamper with. A builder may always read their own ledger; gating this any higher would mean a Xenos cannot see what they were paid.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/economy/routes/credits.js",
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/me/cross-project": {
+      "get": {
+        "operationId": "get_me_cross_project",
+        "tags": [
+          "me"
+        ],
+        "summary": "GET /me/cross-project",
+        "description": "the caller's OWN cross-project record + privacy flags (own data).\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/platform-identity/routes/profile.js",
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetMeCrossProjectResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      },
+      "patch": {
+        "operationId": "patch_me_cross_project",
+        "tags": [
+          "me"
+        ],
+        "summary": "PATCH /me/cross-project",
+        "description": "flip the caller's OWN privacy flags (C2's self-serve opt-out plus the task-1002966 pair; own data, keyed on the authenticated github_id — a builder can never name another account here). Every field is optional and at least one is required, so a client sends only what changed; recruiter_discoverable accepts an explicit null (reset to \"follow visibility\"), which is why it is checked with `in` rather than truthiness.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/platform-identity/routes/profile.js",
+        "requestBody": {
+          "required": false,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PatchMeCrossProjectRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PatchMeCrossProjectResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/me/disciplines": {
+      "patch": {
+        "operationId": "patch_me_disciplines",
+        "tags": [
+          "me"
+        ],
+        "summary": "PATCH /me/disciplines",
+        "description": "Self-service edit of the authenticated builder's preferred disciplines (migrations 027 + 086 / V3.R80). Body: { preferred_disciplines: [\"artist\", ...] }. Valid elements are whatever enabledDisciplines() offers — engineer|ideator core plus any enabled module's (artist, ui); [] clears the preference (a multi-element set just means several lanes). No rank gate — a builder owns their own profile. 422 invalid_discipline if any element is out of range. rank: any-builder — self-service profile edit; documented \"no rank gate\" in the handler comment above (a builder owns their own preference). `main_discipline` (optional, task 1004433): the builder's own MAIN role, one of the crafts in the same body; null clears it, absent keeps it (see db.updateBuilderDisciplines). 422 invalid_main_discipline otherwise.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "src/bongos/routes/me.js",
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PatchMeDisciplinesRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PatchMeDisciplinesResponse"
                 }
               }
             }
@@ -19713,14 +20002,221 @@
         ]
       }
     },
-    "/payouts/freezes": {
+    "/payouts/freezes": {
+      "post": {
+        "operationId": "post_payouts_freezes",
+        "tags": [
+          "payouts"
+        ],
+        "summary": "POST /payouts/freezes",
+        "description": "POST /api/bongos/payouts/freezes — a person freezes a builder's payouts by hand. The notice is required: there is no silent freeze. Body: { builder_id, notice_text, owed_cents? }.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `payout.approve` (all required).",
+        "x-rank": "archon",
+        "x-source": "src/bongos/routes/payout-gates.js",
+        "x-permissions": [
+          "payout.approve"
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostPayoutsFreezesRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostPayoutsFreezesResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/payouts/freezes/{id}/decide": {
+      "post": {
+        "operationId": "post_payouts_freezes_id_decide",
+        "tags": [
+          "payouts"
+        ],
+        "summary": "POST /payouts/freezes/:id/decide",
+        "description": "POST /api/bongos/payouts/freezes/:id/decide — uphold or lift a freeze, with the reason the person will read. Body: { decision: upheld|lifted, statement }.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `payout.approve` (all required).",
+        "x-rank": "archon",
+        "x-source": "src/bongos/routes/payout-gates.js",
+        "x-permissions": [
+          "payout.approve"
+        ],
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostPayoutsFreezesIdDecideRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostPayoutsFreezesIdDecideResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/payouts/gates/{builderId}": {
+      "get": {
+        "operationId": "get_payouts_gates_builderId",
+        "tags": [
+          "payouts"
+        ],
+        "summary": "GET /payouts/gates/:builderId",
+        "description": "GET /api/bongos/payouts/gates/:builderId — may this builder be paid now, and why not.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `payout.approve` (all required).",
+        "x-rank": "archon",
+        "x-source": "src/bongos/routes/payout-gates.js",
+        "x-permissions": [
+          "payout.approve"
+        ],
+        "parameters": [
+          {
+            "name": "builderId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `builderId`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetPayoutsGatesBuilderIdResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/payouts/grants": {
+      "post": {
+        "operationId": "post_payouts_grants",
+        "tags": [
+          "payouts"
+        ],
+        "summary": "POST /payouts/grants",
+        "description": "POST /api/bongos/payouts/grants — sign ONE equity grant. Body: { recipient_id, terms: { title, summary, document_ref? }, note? }.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `payout.approve` (all required).",
+        "x-rank": "archon",
+        "x-source": "src/bongos/routes/payout-approvals.js",
+        "x-permissions": [
+          "payout.approve"
+        ],
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/payouts/guardians": {
       "post": {
-        "operationId": "post_payouts_freezes",
+        "operationId": "post_payouts_guardians",
         "tags": [
           "payouts"
         ],
-        "summary": "POST /payouts/freezes",
-        "description": "POST /api/bongos/payouts/freezes — a person freezes a builder's payouts by hand. The notice is required: there is no silent freeze. Body: { builder_id, notice_text, owed_cents? }.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `payout.approve` (all required).",
+        "summary": "POST /payouts/guardians",
+        "description": "POST /api/bongos/payouts/guardians — link (or unlink) a 16-17 builder's guardian and the account the guardian controls. Body: { builder_id, guardian_id, guardian_account?, active }.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `payout.approve` (all required).",
         "x-rank": "archon",
         "x-source": "src/bongos/routes/payout-gates.js",
         "x-permissions": [
@@ -19731,7 +20227,7 @@
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/PostPayoutsFreezesRequest"
+                "$ref": "#/components/schemas/PostPayoutsGuardiansRequest"
               }
             }
           },
@@ -19743,7 +20239,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/PostPayoutsFreezesResponse"
+                  "$ref": "#/components/schemas/PostPayoutsGuardiansResponse"
                 }
               }
             }
@@ -19765,16 +20261,140 @@
         ]
       }
     },
-    "/payouts/freezes/{id}/decide": {
+    "/payouts/module-sales": {
       "post": {
-        "operationId": "post_payouts_freezes_id_decide",
+        "operationId": "post_payouts_module_sales",
         "tags": [
           "payouts"
         ],
-        "summary": "POST /payouts/freezes/:id/decide",
-        "description": "POST /api/bongos/payouts/freezes/:id/decide — uphold or lift a freeze, with the reason the person will read. Body: { decision: upheld|lifted, statement }.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `payout.approve` (all required).",
+        "summary": "POST /payouts/module-sales",
+        "description": "POST /api/bongos/payouts/module-sales — record ONE sale the processor reports, and write every share as owed. Body: { processor_sale_ref }. The price is read from the processor, never the body. Recording the same sale again answers with the one there.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `payout.approve` (all required).",
         "x-rank": "archon",
-        "x-source": "src/bongos/routes/payout-gates.js",
+        "x-source": "src/bongos/routes/module-payouts.js",
+        "x-permissions": [
+          "payout.approve"
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostPayoutsModuleSalesRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/payouts/module-shares": {
+      "get": {
+        "operationId": "get_payouts_module_shares",
+        "tags": [
+          "payouts"
+        ],
+        "summary": "GET /payouts/module-shares",
+        "description": "GET /api/bongos/payouts/module-shares — every share and where it stands.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `payout.approve` (all required).",
+        "x-rank": "archon",
+        "x-source": "src/bongos/routes/module-payouts.js",
+        "x-permissions": [
+          "payout.approve"
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetPayoutsModuleSharesResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/payouts/module-shares/mine": {
+      "get": {
+        "operationId": "get_payouts_module_shares_mine",
+        "tags": [
+          "payouts"
+        ],
+        "summary": "GET /payouts/module-shares/mine",
+        "description": "GET /api/bongos/payouts/module-shares/mine — the signed-in builder's own shares.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "src/bongos/routes/module-payouts.js",
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetPayoutsModuleSharesMineResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/payouts/module-shares/{id}/pay": {
+      "post": {
+        "operationId": "post_payouts_module_shares_id_pay",
+        "tags": [
+          "payouts"
+        ],
+        "summary": "POST /payouts/module-shares/:id/pay",
+        "description": "POST /api/bongos/payouts/module-shares/:id/pay — send ONE share under ONE approval. Body: { approval_id }. The person and the amount come from the share; the approval must name exactly them. Pressing again is safe, as for a task payout.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `payout.approve` (all required).",
+        "x-rank": "archon",
+        "x-source": "src/bongos/routes/module-payouts.js",
         "x-permissions": [
           "payout.approve"
         ],
@@ -19794,7 +20414,7 @@
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/PostPayoutsFreezesIdDecideRequest"
+                "$ref": "#/components/schemas/PostPayoutsModuleSharesIdPayRequest"
               }
             }
           },
@@ -19802,14 +20422,7 @@
         },
         "responses": {
           "200": {
-            "description": "Success.",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/PostPayoutsFreezesIdDecideResponse"
-                }
-              }
-            }
+            "description": "Success."
           },
           "400": {
             "$ref": "#/components/responses/ValidationFailed"
@@ -19831,40 +20444,33 @@
         ]
       }
     },
-    "/payouts/gates/{builderId}": {
+    "/payouts/module-splits/{moduleKey}": {
       "get": {
-        "operationId": "get_payouts_gates_builderId",
+        "operationId": "get_payouts_module_splits_moduleKey",
         "tags": [
           "payouts"
         ],
-        "summary": "GET /payouts/gates/:builderId",
-        "description": "GET /api/bongos/payouts/gates/:builderId — may this builder be paid now, and why not.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `payout.approve` (all required).",
+        "summary": "GET /payouts/module-splits/:moduleKey",
+        "description": "GET /api/bongos/payouts/module-splits/:moduleKey — the module's split rule and the contributors' weights it would use now.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `payout.approve` (all required).",
         "x-rank": "archon",
-        "x-source": "src/bongos/routes/payout-gates.js",
+        "x-source": "src/bongos/routes/module-payouts.js",
         "x-permissions": [
           "payout.approve"
         ],
         "parameters": [
           {
-            "name": "builderId",
+            "name": "moduleKey",
             "in": "path",
             "required": true,
             "schema": {
               "type": "string"
             },
-            "description": "Path parameter `builderId`."
+            "description": "Path parameter `moduleKey`."
           }
         ],
         "responses": {
           "200": {
-            "description": "Success.",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/GetPayoutsGatesBuilderIdResponse"
-                }
-              }
-            }
+            "description": "Success."
           },
           "400": {
             "$ref": "#/components/responses/BadRequest"
@@ -19884,33 +20490,63 @@
             "builderSession": []
           }
         ]
-      }
-    },
-    "/payouts/grants": {
+      },
       "post": {
-        "operationId": "post_payouts_grants",
+        "operationId": "post_payouts_module_splits_moduleKey",
         "tags": [
           "payouts"
         ],
-        "summary": "POST /payouts/grants",
-        "description": "POST /api/bongos/payouts/grants — sign ONE equity grant. Body: { recipient_id, terms: { title, summary, document_ref? }, note? }.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `payout.approve` (all required).",
+        "summary": "POST /payouts/module-splits/:moduleKey",
+        "description": "POST /api/bongos/payouts/module-splits/:moduleKey — record the project's rule. Body: { seller_id, seller_bps, contributors_bps, credit_row_kinds? }.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `payout.approve` (all required).",
         "x-rank": "archon",
-        "x-source": "src/bongos/routes/payout-approvals.js",
+        "x-source": "src/bongos/routes/module-payouts.js",
         "x-permissions": [
           "payout.approve"
         ],
+        "parameters": [
+          {
+            "name": "moduleKey",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `moduleKey`."
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostPayoutsModuleSplitsModuleKeyRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
         "responses": {
           "200": {
-            "description": "Success."
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostPayoutsModuleSplitsModuleKeyResponse"
+                }
+              }
+            }
           },
           "400": {
-            "$ref": "#/components/responses/BadRequest"
+            "$ref": "#/components/responses/ValidationFailed"
           },
           "401": {
             "$ref": "#/components/responses/Unauthorized"
           },
           "403": {
             "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
           }
         },
         "security": [
@@ -19920,14 +20556,14 @@
         ]
       }
     },
-    "/payouts/guardians": {
+    "/payouts/ndas": {
       "post": {
-        "operationId": "post_payouts_guardians",
+        "operationId": "post_payouts_ndas",
         "tags": [
           "payouts"
         ],
-        "summary": "POST /payouts/guardians",
-        "description": "POST /api/bongos/payouts/guardians — link (or unlink) a 16-17 builder's guardian and the account the guardian controls. Body: { builder_id, guardian_id, guardian_account?, active }.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `payout.approve` (all required).",
+        "summary": "POST /payouts/ndas",
+        "description": "POST /api/bongos/payouts/ndas — record that a builder's signed NDA is on file (or withdrawn), and where the signed copy lives. Never the NDA's text. Body: { builder_id, status: on_file|withdrawn, nda_version, reference? }.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `payout.approve` (all required).",
         "x-rank": "archon",
         "x-source": "src/bongos/routes/payout-gates.js",
         "x-permissions": [
@@ -19938,7 +20574,7 @@
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/PostPayoutsGuardiansRequest"
+                "$ref": "#/components/schemas/PostPayoutsNdasRequest"
               }
             }
           },
@@ -19950,7 +20586,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/PostPayoutsGuardiansResponse"
+                  "$ref": "#/components/schemas/PostPayoutsNdasResponse"
                 }
               }
             }
@@ -20261,45 +20897,100 @@
         ]
       }
     },
-    "/payouts/rules/{id}/runs/{runKey}/hold": {
+    "/payouts/rules/{id}/runs/{runKey}/hold": {
+      "post": {
+        "operationId": "post_payouts_rules_id_runs_runKey_hold",
+        "tags": [
+          "payouts"
+        ],
+        "summary": "POST /payouts/rules/:id/runs/:runKey/hold",
+        "description": "POST /api/bongos/payouts/rules/:id/runs/:runKey/hold — a person stops a run in its pause window. Body: { note? }.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `payout.approve` (all required).",
+        "x-rank": "archon",
+        "x-source": "src/bongos/routes/payout-approvals.js",
+        "x-permissions": [
+          "payout.approve"
+        ],
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          },
+          {
+            "name": "runKey",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `runKey`."
+          }
+        ],
+        "requestBody": {
+          "required": false,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostPayoutsRulesIdRunsRunKeyHoldRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostPayoutsRulesIdRunsRunKeyHoldResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/payouts/screenings": {
       "post": {
-        "operationId": "post_payouts_rules_id_runs_runKey_hold",
+        "operationId": "post_payouts_screenings",
         "tags": [
           "payouts"
         ],
-        "summary": "POST /payouts/rules/:id/runs/:runKey/hold",
-        "description": "POST /api/bongos/payouts/rules/:id/runs/:runKey/hold — a person stops a run in its pause window. Body: { note? }.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `payout.approve` (all required).",
+        "summary": "POST /payouts/screenings",
+        "description": "POST /api/bongos/payouts/screenings — record a sanctions screening a person ran. Body: { builder_id, result: clear|match|error, reference?, valid_days? }.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `payout.approve` (all required).",
         "x-rank": "archon",
-        "x-source": "src/bongos/routes/payout-approvals.js",
+        "x-source": "src/bongos/routes/payout-gates.js",
         "x-permissions": [
           "payout.approve"
         ],
-        "parameters": [
-          {
-            "name": "id",
-            "in": "path",
-            "required": true,
-            "schema": {
-              "type": "string"
-            },
-            "description": "Path parameter `id`."
-          },
-          {
-            "name": "runKey",
-            "in": "path",
-            "required": true,
-            "schema": {
-              "type": "string"
-            },
-            "description": "Path parameter `runKey`."
-          }
-        ],
         "requestBody": {
-          "required": false,
+          "required": true,
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/PostPayoutsRulesIdRunsRunKeyHoldRequest"
+                "$ref": "#/components/schemas/PostPayoutsScreeningsRequest"
               }
             }
           },
@@ -20311,7 +21002,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/PostPayoutsRulesIdRunsRunKeyHoldResponse"
+                  "$ref": "#/components/schemas/PostPayoutsScreeningsResponse"
                 }
               }
             }
@@ -20324,9 +21015,6 @@
           },
           "403": {
             "$ref": "#/components/responses/Forbidden"
-          },
-          "404": {
-            "$ref": "#/components/responses/NotFound"
           }
         },
         "security": [
@@ -20336,14 +21024,14 @@
         ]
       }
     },
-    "/payouts/screenings": {
+    "/payouts/tax-details": {
       "post": {
-        "operationId": "post_payouts_screenings",
+        "operationId": "post_payouts_tax_details",
         "tags": [
           "payouts"
         ],
-        "summary": "POST /payouts/screenings",
-        "description": "POST /api/bongos/payouts/screenings — record a sanctions screening a person ran. Body: { builder_id, result: clear|match|error, reference?, valid_days? }.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `payout.approve` (all required).",
+        "summary": "POST /payouts/tax-details",
+        "description": "POST /api/bongos/payouts/tax-details — record that the processor's onboarding has (or has not) collected a builder's identity and tax details, as checked by a person. The tax id itself never comes here: a reference that looks like one is refused. Body: { builder_id, status: collected|incomplete, reference? }.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `payout.approve` (all required).",
         "x-rank": "archon",
         "x-source": "src/bongos/routes/payout-gates.js",
         "x-permissions": [
@@ -20354,7 +21042,7 @@
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/PostPayoutsScreeningsRequest"
+                "$ref": "#/components/schemas/PostPayoutsTaxDetailsRequest"
               }
             }
           },
@@ -20366,7 +21054,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/PostPayoutsScreeningsResponse"
+                  "$ref": "#/components/schemas/PostPayoutsTaxDetailsResponse"
                 }
               }
             }
@@ -20464,6 +21152,74 @@
         ]
       }
     },
+    "/project-account/ledger-checks": {
+      "get": {
+        "operationId": "get_project_account_ledger_checks",
+        "tags": [
+          "project-account"
+        ],
+        "summary": "GET /project-account/ledger-checks",
+        "description": "GET /project-account/ledger-checks?limit=10 — the daily check of our record against the processor's (task 1004912, ADR 0397 D7): each check's outcome and, on a difference, the amounts and processor references. Same gate as the account; the alarm it raises is a public blocker with no numbers in it, so the numbers are read here.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `payout.approve` (all required).",
+        "x-rank": "archon",
+        "x-source": "modules/economy/routes/project-account.js",
+        "x-permissions": [
+          "payout.approve"
+        ],
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/project-account/outflow": {
+      "get": {
+        "operationId": "get_project_account_outflow",
+        "tags": [
+          "project-account"
+        ],
+        "summary": "GET /project-account/outflow",
+        "description": "GET /project-account/outflow?months=12 — where the money went (task 1003184, criterion money-outflow-visible): spend and money out per month, per-builder totals, and what is committed but not yet paid beside the balance left after it. Same gate as the account: who was paid what is the project's own money. Read only, summed from existing records.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `payout.approve` (all required).",
+        "x-rank": "archon",
+        "x-source": "modules/economy/routes/project-account.js",
+        "x-permissions": [
+          "payout.approve"
+        ],
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/project-settings": {
       "get": {
         "operationId": "get_project_settings",
@@ -20505,6 +21261,80 @@
         ]
       }
     },
+    "/project-settings/funding-wall": {
+      "get": {
+        "operationId": "get_project_settings_funding_wall",
+        "tags": [
+          "project-settings"
+        ],
+        "summary": "GET /project-settings/funding-wall",
+        "description": "**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/lifecycle/routes/project-settings.js",
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      },
+      "patch": {
+        "operationId": "patch_project_settings_funding_wall",
+        "tags": [
+          "project-settings"
+        ],
+        "summary": "PATCH /project-settings/funding-wall",
+        "description": "PATCH /project-settings/funding-wall — body { mode: 'hold_at_claim' | 'refuse_at_completion' | 'carry_on' }. rank: project.settings.manage (metic+, government_010), the same atom as the pay-terms write: the funding rule is part of the project's pay policy (ADR 0385 amendment), so every change also lands in the audit log (who, when, from what to what).\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `project.settings.manage` (all required).",
+        "x-rank": "metic+archon",
+        "x-source": "modules/lifecycle/routes/project-settings.js",
+        "x-permissions": [
+          "project.settings.manage"
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PatchProjectSettingsFundingWallRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/project-settings/pay-terms": {
       "patch": {
         "operationId": "patch_project_settings_pay_terms",
@@ -32629,10 +33459,12 @@
       "GetPayTermsResponse": {
         "type": "object",
         "properties": {
-          "pay_terms": {}
+          "pay_terms": {},
+          "funding_wall": {}
         },
         "required": [
-          "pay_terms"
+          "pay_terms",
+          "funding_wall"
         ]
       },
       "GetPayTypeGatesResponse": {
@@ -32675,6 +33507,24 @@
           "gate"
         ]
       },
+      "GetPayoutsModuleSharesMineResponse": {
+        "type": "object",
+        "properties": {
+          "shares": {}
+        },
+        "required": [
+          "shares"
+        ]
+      },
+      "GetPayoutsModuleSharesResponse": {
+        "type": "object",
+        "properties": {
+          "shares": {}
+        },
+        "required": [
+          "shares"
+        ]
+      },
       "GetPayoutsRulesResponse": {
         "type": "object",
         "properties": {
@@ -34280,6 +35130,18 @@
           "updated_at"
         ]
       },
+      "PatchProjectSettingsFundingWallRequest": {
+        "type": "object",
+        "properties": {
+          "mode": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "mode"
+        ],
+        "additionalProperties": false
+      },
       "PatchProjectSettingsPayTermsRequest": {
         "type": "object",
         "properties": {
@@ -37946,6 +38808,20 @@
           "linked"
         ]
       },
+      "PostMeCashOutsRequest": {
+        "type": "object",
+        "properties": {
+          "amount_cents": {},
+          "instruction_id": {
+            "$ref": "#/components/schemas/StringifiableId"
+          }
+        },
+        "required": [
+          "amount_cents",
+          "instruction_id"
+        ],
+        "additionalProperties": false
+      },
       "PostMeFilterViewsRequest": {
         "type": "object",
         "properties": {
@@ -38758,6 +39634,80 @@
           "record"
         ]
       },
+      "PostPayoutsModuleSalesRequest": {
+        "type": "object",
+        "properties": {
+          "processor_sale_ref": {}
+        },
+        "required": [
+          "processor_sale_ref"
+        ],
+        "additionalProperties": false
+      },
+      "PostPayoutsModuleSharesIdPayRequest": {
+        "type": "object",
+        "properties": {
+          "approval_id": {
+            "$ref": "#/components/schemas/StringifiableId"
+          }
+        },
+        "required": [
+          "approval_id"
+        ],
+        "additionalProperties": false
+      },
+      "PostPayoutsModuleSplitsModuleKeyRequest": {
+        "type": "object",
+        "properties": {
+          "seller_id": {
+            "$ref": "#/components/schemas/StringifiableId"
+          },
+          "seller_bps": {},
+          "contributors_bps": {},
+          "credit_row_kinds": {}
+        },
+        "required": [
+          "seller_id",
+          "seller_bps",
+          "contributors_bps"
+        ],
+        "additionalProperties": false
+      },
+      "PostPayoutsModuleSplitsModuleKeyResponse": {
+        "type": "object",
+        "properties": {
+          "rule": {}
+        },
+        "required": [
+          "rule"
+        ]
+      },
+      "PostPayoutsNdasRequest": {
+        "type": "object",
+        "properties": {
+          "builder_id": {
+            "$ref": "#/components/schemas/StringifiableId"
+          },
+          "status": {},
+          "nda_version": {},
+          "reference": {}
+        },
+        "required": [
+          "builder_id",
+          "status",
+          "nda_version"
+        ],
+        "additionalProperties": false
+      },
+      "PostPayoutsNdasResponse": {
+        "type": "object",
+        "properties": {
+          "record": {}
+        },
+        "required": [
+          "record"
+        ]
+      },
       "PostPayoutsRulesIdNarrowRequest": {
         "type": "object",
         "properties": {
@@ -38875,6 +39825,30 @@
           "record"
         ]
       },
+      "PostPayoutsTaxDetailsRequest": {
+        "type": "object",
+        "properties": {
+          "builder_id": {
+            "$ref": "#/components/schemas/StringifiableId"
+          },
+          "status": {},
+          "reference": {}
+        },
+        "required": [
+          "builder_id",
+          "status"
+        ],
+        "additionalProperties": false
+      },
+      "PostPayoutsTaxDetailsResponse": {
+        "type": "object",
+        "properties": {
+          "record": {}
+        },
+        "required": [
+          "record"
+        ]
+      },
       "PostProjectsInviteGuildRequest": {
         "type": "object",
         "properties": {
@@ -41760,9 +42734,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 659,
-  "x-schema-count": 707,
+  "x-endpoint-count": 679,
+  "x-schema-count": 719,
   "x-undocumented-bodies": 12,
-  "x-response-schemas": 452,
+  "x-response-schemas": 457,
   "x-generated-by": "scripts/bongos/gen-api-docs.js"
 }