@bongos/core 1.18.0 → 1.18.3

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.18.0",
-  "core_contract": "1.18.0",
-  "source_commit": "fa51b219ed7f5c77e5c2f875d78fe9bcefa8aec8",
-  "source_ref": "origin/main",
-  "built_at": "2026-07-13T23:40:27.106Z",
+  "core_version": "1.18.3",
+  "core_contract": "1.18.3",
+  "source_commit": "8711da7b5985389b5c8173ac8a3f8c44c6a37f3c",
+  "source_ref": "HEAD",
+  "built_at": "2026-07-14T10:01:25.173Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 250,
     "agent_docs_stubbed": 19,
-    "functional_verbatim": 948,
-    "rules": 0,
-    "gate_literals": 0,
+    "functional_verbatim": 910,
+    "rules": 3,
+    "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 1217,
-  "tree_sha256": "4d1def85ebd1d002d9b006207185c40afceb460733ead70e6eeb4a39661324f2",
+  "file_count": 1179,
+  "tree_sha256": "d5d434f38694b3ea45a18027dbb9811005bad7f124e0ac5b6246926737ef0bbb",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -264,11 +264,6 @@
       "mode": "0000644",
       "sha256": "b1d775aa60944df06acad586311295763956c8cc3a151c0426f83dcc48509b2b"
     },
-    {
-      "path": ".gitignore",
-      "mode": "0000644",
-      "sha256": "073f88d8e8b5ae4a0f2b0eaaae4e66f6b9f88f54165c608cababc161d73a5208"
-    },
     {
       "path": "CLAUDE.md",
       "mode": "0000644",
@@ -302,7 +297,7 @@
     {
       "path": "README.md",
       "mode": "0000644",
-      "sha256": "57f50d1cfa639a0d20fd17f8ce6b249690c376ded58e11ad38f276afca232791"
+      "sha256": "373161bcd82750aff6484a2571637e1b117129097c45e2b286eaa0396879467d"
     },
     {
       "path": "bin/bongos.js",
@@ -347,7 +342,7 @@
     {
       "path": "config/branding.neutral.json",
       "mode": "0000644",
-      "sha256": "60efc2600a616a3c071edda96d526fd77ca33f2e689582e23617daff7e24afc9"
+      "sha256": "a1023a487f813390ceb50759e27004830270fc918722c9afbdfadf918e97b502"
     },
     {
       "path": "config/design-tokens.neutral.json",
@@ -1125,29 +1120,29 @@
       "sha256": "abffe8e8c20918559fe3af31add9a064d242b45bd472ae26ac00ed427004d6bc"
     },
     {
-      "path": "docs/adr/0139-platform-history-migration-to-cloudbongos.md",
+      "path": "docs/adr/0142-project-context-is-prose-only.md",
       "mode": "0000644",
-      "sha256": "104d94dc217d3316f38b71a1d24de03a6735b23ace7dfc02aa3373a4d87b424a"
+      "sha256": "130e923a80bfdd3e2e9f32932972543823abf387b20a64bc1a1ba0a8ccedd088"
     },
     {
-      "path": "docs/adr/0140-cloudbongos-standalone-reprovision.md",
+      "path": "docs/adr/0143-onboarding-repo-picker-oauth-scope.md",
       "mode": "0000644",
-      "sha256": "41652b1a7936327df51295434d862406bf42927c67d2b37fa0bca344d5e5c0de"
+      "sha256": "d1dd9398825ef9bd9ab613427c5bfeab561d94b0af10abc7ad9041177c88c9b4"
     },
     {
       "path": "docs/adr/README.md",
       "mode": "0000644",
-      "sha256": "ac7dff0ce6bf45855b4e7c4314ea3d3ffc6081b7edfbbc3ca6dd4d2fd845ad47"
+      "sha256": "ab9b9e86a653554bd657d77c216c313e44b9028131f415938e6dc0f4f0a6071c"
     },
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "5c27c6a9a1bc94bedf31b42e045e3c45d42bdd0f4f5c3df0677c1e0e46f87522"
+      "sha256": "d8cfc25fa52177a6fbd071419055a9b366df116bda60a0a33e297b210cb3ac17"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "d817941397780263572eb1a0911a7cd8c3eea87a912cdbca53d9a8c08dc32abd"
+      "sha256": "4971dfa3949c4d0113e607acf4ea9590b90a3bb2f17b1ff3f3ebbf7862a1f0b1"
     },
     {
       "path": "docs/architecture.md",
@@ -1212,7 +1207,7 @@
     {
       "path": "docs/file-map.md",
       "mode": "0000644",
-      "sha256": "216805885a818714954dc28f84136e153c261dcbdabb1266da0e71bdc107a8da"
+      "sha256": "488805607bd585d100f42d1320332fdd34d29547e785fb952015061e95981500"
     },
     {
       "path": "docs/handoff-template.md",
@@ -1382,7 +1377,7 @@
     {
       "path": "docs/recipes/packaging-the-core.md",
       "mode": "0000644",
-      "sha256": "7ea45cf1be668891ff052559217f7086feb36d6b76902db5910e27236c2e3206"
+      "sha256": "ee80d178b14fdaff7a19eb340767325cd93c48b17676c602ae9bf72e0060ae91"
     },
     {
       "path": "docs/recipes/private-npm-distribution.md",
@@ -1412,7 +1407,7 @@
     {
       "path": "docs/recipes/upgrading-the-core.md",
       "mode": "0000644",
-      "sha256": "ee0c2e2228a2de9d49c805328f2e7c5f9692a49250613903163bfde9617e6592"
+      "sha256": "bafef1be5b5369bbe7ef4f41c31b7c1a754dcc3b93d7bd7d7eb1943e06083caf"
     },
     {
       "path": "docs/research/cursor-competitive-analysis.md",
@@ -1587,7 +1582,7 @@
     {
       "path": "migrations/039_newcomer_friendly_column.sql",
       "mode": "0000644",
-      "sha256": "e73cce8d07c7a527717dcf512b1f41bba714a688c830f4f909aebe29decda18c"
+      "sha256": "0a88c0ed68186ccdcd263947310b778e725c345fafc97b1ec99f8995c564b9e5"
     },
     {
       "path": "migrations/040_builder_karma.sql",
@@ -1782,7 +1777,7 @@
     {
       "path": "migrations/102_remove_box_first_provision_approval.sql",
       "mode": "0000644",
-      "sha256": "9407c16c39b716e130f8b7616d202a93db46450e4226bf726e5e6cc8f8191fce"
+      "sha256": "8a02612e1c1ce975bf5a8075e6714f8fad9ed181bca312e4a21c36ae5b53171f"
     },
     {
       "path": "migrations/103_search_chunks.sql",
@@ -1989,6 +1984,11 @@
       "mode": "0000644",
       "sha256": "507615e1b76c19fd29aa999c90f7e84c65fe141edfce2c97f9d4438e6a81dc07"
     },
+    {
+      "path": "migrations/core_192_github_oauth_tokens.sql",
+      "mode": "0000644",
+      "sha256": "227e580c67436abf3a6d1f54720524d7f9d349aeb2f2d983529583f9c0bdc1f1"
+    },
     {
       "path": "modules/autonomy/CLAUDE.md",
       "mode": "0000644",
@@ -2539,6 +2539,16 @@
       "mode": "0000644",
       "sha256": "78082fe1fb59816f531e9efa0ed2fdaba93da855f99aba5129a97046baaf7215"
     },
+    {
+      "path": "modules/hall-ui/public/my-projects.html",
+      "mode": "0000644",
+      "sha256": "9a0fc70a8cabe59d8888a863fa9339d43f3ad2ae7d980f69c9f5fa0c81283d4b"
+    },
+    {
+      "path": "modules/hall-ui/public/my-projects.js",
+      "mode": "0000644",
+      "sha256": "39252c26f1ca28fce403b195868ceae01041daf064507fc5760378c134e9eee5"
+    },
     {
       "path": "modules/hall-ui/public/new-project-wizard.js",
       "mode": "0000644",
@@ -2604,6 +2614,16 @@
       "mode": "0000644",
       "sha256": "5fe8651b8ad2409fbcde246b74fcc024bb29970d3821ab220f80e716232926ed"
     },
+    {
+      "path": "modules/hall-ui/public/scouting.html",
+      "mode": "0000644",
+      "sha256": "ee43e485888979ab7431add208be879526b545d504bd4e0fd2f293f4f765d31c"
+    },
+    {
+      "path": "modules/hall-ui/public/scouting.js",
+      "mode": "0000644",
+      "sha256": "075d4e256fc4bc81bfffc1e8fd02df198d06759a0768b4507d4079751b37edb0"
+    },
     {
       "path": "modules/hall-ui/public/sessions.html",
       "mode": "0000644",
@@ -3084,6 +3104,16 @@
       "mode": "0000644",
       "sha256": "dff75ac98562d74a34de98c570173896cd7ab388fff79fcce5e3ade88a607f69"
     },
+    {
+      "path": "modules/status-ui/public/explore.html",
+      "mode": "0000644",
+      "sha256": "3406def09eaca3f13eaf4dd19bf5e23c12de75d0929a575a1d742f7db430f765"
+    },
+    {
+      "path": "modules/status-ui/public/explore.js",
+      "mode": "0000644",
+      "sha256": "48769902093fa8d7d68ee38ee799eef70a2ac3190242886428fd635bf2a6e9ce"
+    },
     {
       "path": "modules/status-ui/public/index.html",
       "mode": "0000644",
@@ -3107,12 +3137,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "7416d8b3cebbc19b0646cd763efb6934ff70fa07c34765f3979c834f6b2743cc"
+      "sha256": "1c4176b3e72ec128dd29fe0ad0edd1eb7a6534bda12c9e5cd69c78c40fc3296c"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "9a6adee64c46bece051099c0ba4a50b75d66fef77c1e93c5dca1ce9f4bccd262"
+      "sha256": "8efcbc94e2fbfdc5277059dcf81af98ae4476239c23585c20d84b9d00d950626"
     },
     {
       "path": "public-docs/index.html",
@@ -3137,7 +3167,7 @@
     {
       "path": "public-landing/create.html",
       "mode": "0000644",
-      "sha256": "5839c7e5915efe182228ca8725ea4a1041979d36e941c187fe2f0509096655c7"
+      "sha256": "a86e3a96f72f9aaaaf760c6967781e79177faabfc63ee200a1ee742b17b4b375"
     },
     {
       "path": "public-landing/index.html",
@@ -3327,7 +3357,7 @@
     {
       "path": "scripts/gds/cli-lib.js",
       "mode": "0000644",
-      "sha256": "8b681d3cac5dcbc51ce0974bb0975dfc85bf87e193304476e7de78f794476bfb"
+      "sha256": "82e34d43fc2b2a92bf6481ebd43a383a8dc885b2a13e25c5751c607944f8c702"
     },
     {
       "path": "scripts/gds/code.js",
@@ -3574,6 +3604,11 @@
       "mode": "0000644",
       "sha256": "66627530df2a066eab8a4eab7adbbbda4a7aa46dfe5c6974194c5f6673ce1000"
     },
+    {
+      "path": "scripts/gds/lint-migrations.js",
+      "mode": "0000644",
+      "sha256": "c893c007be7f228d903eef732cd43d5a2feb1006c160d765290cf31aea30449d"
+    },
     {
       "path": "scripts/gds/lint-workflow-exec.js",
       "mode": "0000644",
@@ -3592,7 +3627,7 @@
     {
       "path": "scripts/gds/login.js",
       "mode": "0000644",
-      "sha256": "f8706aecb9ed6f54feb9a0da894d4fb24542639ff2043b3069b37cbb44bd6b33"
+      "sha256": "85f82516220a29646ecac9a1a4f1ffdac6cddf01582b40eda50fa8d846e3f0bb"
     },
     {
       "path": "scripts/gds/main-audit.js",
@@ -3627,7 +3662,7 @@
     {
       "path": "scripts/gds/mirror-redact.js",
       "mode": "0000644",
-      "sha256": "a51e017dc5a1eeca67b4c4ef63b1b49b01f63e31023e8be7e2e6ca85fd8f1300"
+      "sha256": "a409ef4841901f027ed9fdcb8762fc8c51b75265c72bb8098f886417f494989e"
     },
     {
       "path": "scripts/gds/module.js",
@@ -3692,7 +3727,7 @@
     {
       "path": "scripts/gds/package-core.js",
       "mode": "0000644",
-      "sha256": "d4a47dbf131077ae2e800565ab79338ea3305f4e1d6241ac74343a0fcb2cbdd4"
+      "sha256": "e33e72278f4bb7b96c2e3f9d911ec55838ea96154327b8f98af3b45439d01590"
     },
     {
       "path": "scripts/gds/paste-token.js",
@@ -3712,12 +3747,12 @@
     {
       "path": "scripts/gds/provision.js",
       "mode": "0000644",
-      "sha256": "d9b9a849fa3e6bb74f200cc92816c87e20b8aee0b25c0de4898ecc4bc7787e33"
+      "sha256": "9e2a7be69c71e527505c0cdbe527b80f3dd51d039a0ea4e6fe36dc073fba8625"
     },
     {
       "path": "scripts/gds/publish-manifest.js",
       "mode": "0000644",
-      "sha256": "4ba22941dacac4429e3f7294e0d8ff51c5ebd7f8e0f5c0e748e31d9bc80043f5"
+      "sha256": "782208647547ff0ca101792121e233876f4650c13ddcf2ed96c323b273c43ee7"
     },
     {
       "path": "scripts/gds/pulse.js",
@@ -3772,7 +3807,7 @@
     {
       "path": "scripts/gds/run-unit-tests.js",
       "mode": "0000644",
-      "sha256": "52f059ecae55400025c0b89e9a12e9cd551e4fa008feeba21bc991746c9e016e"
+      "sha256": "4044cbe63fa73b88cf1ce5388f0991b237353d4cd546d802d995af168c9da0b7"
     },
     {
       "path": "scripts/gds/sandbox-stage.js",
@@ -3902,7 +3937,7 @@
     {
       "path": "scripts/gds/setup.js",
       "mode": "0000644",
-      "sha256": "fcba421e5a794696be92351c850ea48a13468e293ab7605c0b815d13eb1b0429"
+      "sha256": "845e0fb8ac627a1280e52d17abee5dbc80d9a72b66112811e4f0a1f26b5a9847"
     },
     {
       "path": "scripts/gds/shell.js",
@@ -3912,7 +3947,7 @@
     {
       "path": "scripts/gds/ship.js",
       "mode": "0000644",
-      "sha256": "e356cdbb6b842b595860e50ebbf629ba56bb240998e585aaf78468e8b42844e3"
+      "sha256": "07b75d54332a36db7098fa50f1b7476021fc9309b58f18691e4f46f2f2d58979"
     },
     {
       "path": "scripts/gds/smoke-batch-claim.sh",
@@ -3977,7 +4012,7 @@
     {
       "path": "scripts/gds/upgrade.js",
       "mode": "0000644",
-      "sha256": "fca576ad92b8e19ff35f2fa14371ecc73b305b34618cc565072a23338b74d9e8"
+      "sha256": "4585188fb731f485e5aed558c936c99a032bfa6362330fb673d5e77f1950bf3a"
     },
     {
       "path": "scripts/gds/validate-design.js",
@@ -3994,271 +4029,6 @@
       "mode": "0000644",
       "sha256": "12318c5928131ceb5dd7aa1322de0d4fd8116f80f1d41a84c0e1fd6b1f12a2c1"
     },
-    {
-      "path": "scripts/hall-preview/fixtures/access-requests.json",
-      "mode": "0000644",
-      "sha256": "e710ee2c0b4c2b51f1e9b29dbdd5ac27de5fad11677f3fbf4125754ed18828ca"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/achievements.json",
-      "mode": "0000644",
-      "sha256": "50b6a7b5bf227605454e5481280201fbbbc27510e5b822d30ae3f0507a9f7e73"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/analytics__builder.json",
-      "mode": "0000644",
-      "sha256": "7a0013aa9d0b6bad1fca32a65d1e4c46b0ea7342ee3fb1cc67a9cc743184ba79"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/audit-log.json",
-      "mode": "0000644",
-      "sha256": "f665777225fba3cbd95247376e5809dcb4319a7e00bba5c21d072e79b6a04f38"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/blockers__detail.json",
-      "mode": "0000644",
-      "sha256": "06c1392684462324f8129503c72a8f0b37f22a4c1e4837e9520574be64a4fb0e"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/box__me.json",
-      "mode": "0000644",
-      "sha256": "007e52c09e2b22d01f751b4de64e750cae3e118cad2a8d496d110c93a5db10fc"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/boxes__cost-ledger.json",
-      "mode": "0000644",
-      "sha256": "459fcc833d80d64fe867e789456f35ac965fc7fc10605684bce75a599fe2c21f"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/builders__active-claims.json",
-      "mode": "0000644",
-      "sha256": "9d8492a806387665fc71c6216f702e511534e01d302fabbf73e3ced7b2f595ad"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/builders__directory.json",
-      "mode": "0000644",
-      "sha256": "79fae6407e1f632068eeaba82f3d826bd70bb68fcc5abd112f15cc50227c20d3"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/builders__roster.json",
-      "mode": "0000644",
-      "sha256": "128df99f6fd1ec03ac9b04de78893ec5bf9af5d26a34f361e264c7fbf1819909"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/goals.json",
-      "mode": "0000644",
-      "sha256": "4e6c053f0fa2919730b3c1c58c4745db5684a57e77e6dda7586041f57189671c"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/goals__25.json",
-      "mode": "0000644",
-      "sha256": "c043446becd643e52e5d8704f4014d05280f143c3505cdf974e5c3915610888e"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/goals__26.json",
-      "mode": "0000644",
-      "sha256": "ae46e63a7ba81ece40ba5cc90d5ba4af24945f08a33c5eb317b0426fb17574fb"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/goals__3.json",
-      "mode": "0000644",
-      "sha256": "0a509e2fd8999451371d3375c347feb8845b57d8536a1b62251987ad50e36120"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/goals__35.json",
-      "mode": "0000644",
-      "sha256": "0e9eaa3ad484f1ac4228c229c4451e12ab35a26e66641f2159934cd7ad3eb036"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/goals__conflicts.json",
-      "mode": "0000644",
-      "sha256": "f14d82421beade942d3223d7bae1f31e1a728da70413ec6723522ff1753c558a"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/goals__detail.json",
-      "mode": "0000644",
-      "sha256": "c043446becd643e52e5d8704f4014d05280f143c3505cdf974e5c3915610888e"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/goals__inbox.json",
-      "mode": "0000644",
-      "sha256": "e4cd3e25fa4c5631f403e4d538a001eb880b95d98404c37d1d30253b027c3a05"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/goals__requests.json",
-      "mode": "0000644",
-      "sha256": "5824b184c28cf0c23227b846f1229c9a2786e9589f1d0c28158b18c65dd022b3"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/grades__by-builder.json",
-      "mode": "0000644",
-      "sha256": "eba78e030879ba561435a1f765871a67233a7538f4faa4d5ac78956ceeb1b742"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/inbox.json",
-      "mode": "0000644",
-      "sha256": "8f18774ee80673f2d59c093b2c7f7837c9c7bde157d4e3a3e39a1af8323bf2c1"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/inbox__detail.json",
-      "mode": "0000644",
-      "sha256": "876c35023e689773b7dc3a71af0914e946df4dd170501917dd86d74631f51105"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/instance.json",
-      "mode": "0000644",
-      "sha256": "33ecb28e4a07e6e45f055699daefbd78a30e3b080069ba76be6e8dfbb0973af3"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/leaderboard.json",
-      "mode": "0000644",
-      "sha256": "1965d7629c3d026693e5bc69bd96442e6d528def90d434f3fcb11af06fec312b"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/me.json",
-      "mode": "0000644",
-      "sha256": "8c1517277f0f19431d281a3301f9dbf6341eda363dff3d8c4a480ccfb8fd99bc"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/me__art-key__own.json",
-      "mode": "0000644",
-      "sha256": "7c68f8e64403706381bc1c58d862e6e422a4d6ccd4afec84be2ed1630ec7474b"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/me__event-sound-prefs.json",
-      "mode": "0000644",
-      "sha256": "3d954c8aa79f4533ff55c125b45864b4f2241807280873d864d0310dcbd7b051"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/me__recent-ships.json",
-      "mode": "0000644",
-      "sha256": "4287984d08694d80362ca5a869a04898b0f317ebc960b3a790710a5dc9e66282"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/me__render.json",
-      "mode": "0000644",
-      "sha256": "cd7b7f239f2439beef06635d51b4e8843c455c1b07ee1676113ecee9a14d6c18"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/me__skill-prefs.json",
-      "mode": "0000644",
-      "sha256": "fb13e1cf667539d704b657bae7bd928e5fda7c9dfc2c91dd3a505a4dcc0bbd21"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/me__sound-prefs.json",
-      "mode": "0000644",
-      "sha256": "93bb5260c808b74fd4e68077355e3165ca40b80ad81e72da2371a65663cace36"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/me__wandering.json",
-      "mode": "0000644",
-      "sha256": "a15e36d9c4b553882350a6436806206abf306583d05104dcfa6f2c20a75f2cd0"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/override-requests.json",
-      "mode": "0000644",
-      "sha256": "dcf3d7a4485fc0b6870223a3cf389e4bf77761f8cd49dd543e2139c82a49ed2c"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/provisioning__fleet.json",
-      "mode": "0000644",
-      "sha256": "8e07a9099178b5e64e8f48c07c7cb58ae73b4f058d78e0eaa4b769a06203bc3a"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/provisioning__fleet__cost-ledger.json",
-      "mode": "0000644",
-      "sha256": "996ef6ba214b45a315da8d6793ec474de78649075440df9f6ed77c392dab2b76"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/provisioning__instances.json",
-      "mode": "0000644",
-      "sha256": "8e07a9099178b5e64e8f48c07c7cb58ae73b4f058d78e0eaa4b769a06203bc3a"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/public__analytics__ecosystem.json",
-      "mode": "0000644",
-      "sha256": "45321558743b26bed239e8c885c9f468ff42a8d9a24895128217c3700fae3d16"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/public__bounty-table.json",
-      "mode": "0000644",
-      "sha256": "fc2443feef79053049a7894df2b5fdc84c448c27fa671269c236518087e66eeb"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/public__cost-summary.json",
-      "mode": "0000644",
-      "sha256": "ab26e2ca03cd84fa537b17fa5eab64c422da25944a1af1250add8c1851bb996f"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/public__estimation-drift.json",
-      "mode": "0000644",
-      "sha256": "4edd14dd87e41768ee4dfb3938aed9bea90f227b96005c7ebc8fe55933d9ccdb"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/public__grades.json",
-      "mode": "0000644",
-      "sha256": "ac4b65c5714cdcebc20753914b2a6ee57084a7f7871194cb776d0a68c02ba3a9"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/public__progress.json",
-      "mode": "0000644",
-      "sha256": "2ae32217e5117c3062690a916412ee3828e868a0f4bb0465e2b1b871c533c334"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/public__recent-shipped.json",
-      "mode": "0000644",
-      "sha256": "24cd22a6104eb13fba22081867a0281d634254de7b947643e568d95a86ffca28"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/public__repo-health.json",
-      "mode": "0000644",
-      "sha256": "df3c8b68d8fce52c8c6ff0ddbc3ee713759e77e0ad8a719486a2f6f6b41e66c5"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/public__repo-info.json",
-      "mode": "0000644",
-      "sha256": "385362b6554076335a094668c3d8214fa0f869efcaf16cd6470097bc5709bb51"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/security__docs.json",
-      "mode": "0000644",
-      "sha256": "fc018a82e8c274246c73e5fe4b2db62fba9b66665ed2811bcd21164046f1674f"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/security__reports.json",
-      "mode": "0000644",
-      "sha256": "b4a2bbf4d66c5145ee6d176c14f4aa0fe49727b92f7670ed969e4933aa037bf9"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/sessions__search.json",
-      "mode": "0000644",
-      "sha256": "12b6f86b539a59615f7bbac7f55d8b4832454866f4cb95c62e5f8d714757c953"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/tasks.json",
-      "mode": "0000644",
-      "sha256": "e3b66dbced411167b8dc109b9aefe7e788f9e28860695f36276610db48458f0e"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/tasks__claimable.json",
-      "mode": "0000644",
-      "sha256": "d7d237c1ff84fa0c55559c37e074d1333eeacfeee0ccb53e995bf3afa1f4911d"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/tasks__detail.json",
-      "mode": "0000644",
-      "sha256": "8538d5d96c40b80f2f97d535e5c5fc2c09f0f54a73f61490a3e87083964d75b1"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/tasks__peer-votes__feed.json",
-      "mode": "0000644",
-      "sha256": "ed4e845c1f3c561ea7164c6a9cf6d3a4cf97aa081f36b59051859cd489330c4b"
-    },
-    {
-      "path": "scripts/hall-preview/fixtures/versions.json",
-      "mode": "0000644",
-      "sha256": "421ef1b1e555c9a7c6e12fa67e1255bd58ba04cf1564813b5b9d6a3d0e706caa"
-    },
     {
       "path": "scripts/hall-preview/refresh-fixtures.js",
       "mode": "0000644",
@@ -4272,7 +4042,7 @@
     {
       "path": "scripts/migrate.sh",
       "mode": "0000644",
-      "sha256": "2179f13f46ab7326202532a0f42f61b993f8d2a77b5d22ec9d3e03c011d7b3d6"
+      "sha256": "856aaf6ac485e60679309ccbda0d404b74e7e55655ef005583e30231f1f0bce4"
     },
     {
       "path": "scripts/migrate_cost_ledger.sh",
@@ -4372,7 +4142,7 @@
     {
       "path": "src/bongos/auth.js",
       "mode": "0000644",
-      "sha256": "90eed7d88748606db1872dea6be42919b10233d1117ec2bb2430c24b31c93bc3"
+      "sha256": "2653065085f4df50570ed27e4ae13902886eb7077dcef2a2f106dc72e6fc2f2a"
     },
     {
       "path": "src/bongos/cascade-dispatch.js",
@@ -4387,7 +4157,12 @@
     {
       "path": "src/bongos/db.js",
       "mode": "0000644",
-      "sha256": "cdbd34812166f5bc1f17f5f793fd7642e4a85c3d210168bde3b4a9126ddc85d0"
+      "sha256": "e7ee95b9b76716498858aab3c4e08885b5143d505e6b123b654d2291b4fad443"
+    },
+    {
+      "path": "src/bongos/github-repos.js",
+      "mode": "0000644",
+      "sha256": "40d23e16bc96820cb964f81d542c5b4621e6494be7a5b74d25ad554380acf850"
     },
     {
       "path": "src/bongos/goal-scope-check.js",
@@ -4477,7 +4252,7 @@
     {
       "path": "src/bongos/routes.js",
       "mode": "0000644",
-      "sha256": "06d35d5dbca843fdc5e8a1ac6a05b2919287c077589483c4586bff989ab944f4"
+      "sha256": "4787e3b72334369d8d0a5c63bc97e19ef939782ec8fbc0d651dea543ad0dfbf7"
     },
     {
       "path": "src/bongos/routes/CLAUDE.md",
@@ -4497,7 +4272,7 @@
     {
       "path": "src/bongos/routes/auth.js",
       "mode": "0000644",
-      "sha256": "f618bb360d4671e3f6ae9101104d22b4b24445dd0dfde89002583fb95d455615"
+      "sha256": "9a2f99c5b139656c102be949d1383123ea362968c58be64ab2fc87abeffaaf48"
     },
     {
       "path": "src/bongos/routes/backup.js",
@@ -4509,6 +4284,11 @@
       "mode": "0000644",
       "sha256": "67ccaed4dbba0c5d264365bb7c95d88cab63ee1710524db1c97e3dd588a6497f"
     },
+    {
+      "path": "src/bongos/routes/github.js",
+      "mode": "0000644",
+      "sha256": "a57f3cca8aff642c2c52b632cabe33e17229231bc698eaf7f105862901e71866"
+    },
     {
       "path": "src/bongos/routes/healthz.js",
       "mode": "0000644",
@@ -4517,7 +4297,7 @@
     {
       "path": "src/bongos/routes/instance.js",
       "mode": "0000644",
-      "sha256": "1a26196f662033637fa43ed47983f87b3307909ec84513c5b6a34ead09edb9cd"
+      "sha256": "5b85f187b94282cd1ec5ece022238c4b30048f999c4347f19081bbaed32795fb"
     },
     {
       "path": "src/bongos/routes/live.js",
@@ -4577,7 +4357,7 @@
     {
       "path": "src/branding.js",
       "mode": "0000644",
-      "sha256": "5bfad1f9a010d08a306d644a811624af9174c38df6f0db9168cae3672e8e0f05"
+      "sha256": "f9a1f000cb9369c9b0801ff50f70675756fcb60a03d631a207e8b49bc2f942b4"
     },
     {
       "path": "src/build-info.js",
@@ -4592,12 +4372,12 @@
     {
       "path": "src/instance-config.js",
       "mode": "0000644",
-      "sha256": "8abe087c7cc31f6f0e5cc8ff3043961321051563f44084a0727aff2f18c07a77"
+      "sha256": "40ddd31393699928be04066fae1f4b3633b66cf21afdd738cc0a66b59f8ed8d1"
     },
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "1f7ac0c0647149896d66331579412be8c37d0fbf2671f72bbd7a6143598c91a5"
+      "sha256": "648815dbabae03d69d3bc2388b058bd62304aef18384eb4d0b0ba632f43b4a55"
     },
     {
       "path": "src/module-loader/loader.js",
@@ -4912,7 +4692,7 @@
     {
       "path": "tests/branding.mjs",
       "mode": "0000644",
-      "sha256": "4ea531341f7d75cf14883e991a91cc88cf08cf162bf6b38e4dd550bc2acb28d0"
+      "sha256": "d7a4bfeed6b4529ba07d8be8b40e0421a25de1941f49094860dd0da04f0138d4"
     },
     {
       "path": "tests/bug_attachments.mjs",
@@ -5244,6 +5024,16 @@
       "mode": "0000644",
       "sha256": "1e038780532078d8d1a20feebb95ee6762fb300101f71cfff7076d2fa0d38b1b"
     },
+    {
+      "path": "tests/github_repos_helpers.mjs",
+      "mode": "0000644",
+      "sha256": "be8b6dd0c0f956a66759f5c3ad9e0548088c0e3ab14926b3c706c011d13097fe"
+    },
+    {
+      "path": "tests/github_token_store.mjs",
+      "mode": "0000644",
+      "sha256": "4d7de0efaa515422a0f0d8f2f8bd0dd8e6ccb56d7bb91b614e3396e2554d7f65"
+    },
     {
       "path": "tests/goal_abuse_matrix.mjs",
       "mode": "0000644",
@@ -5359,6 +5149,16 @@
       "mode": "0000644",
       "sha256": "d581ae8eec4b219ba4f5ba1839c1bc9bf3b1b5802fa4ae8db72b9bba6cf0263d"
     },
+    {
+      "path": "tests/idp_device_exchange.mjs",
+      "mode": "0000644",
+      "sha256": "4b2b5bd2698dedad5e110d79e00d6e3106b999d81f8aa8a252a5a3dea991eb8d"
+    },
+    {
+      "path": "tests/idp_federation.mjs",
+      "mode": "0000644",
+      "sha256": "09a9ae4a726cec8d0e31bc50dc08db102745c6451fb64f105c2be1b623062986"
+    },
     {
       "path": "tests/infra_exec_paths.mjs",
       "mode": "0000644",
@@ -5499,6 +5299,11 @@
       "mode": "0000644",
       "sha256": "511b7b0129abc708b1cf687f1813affff522cf42e8a70bcff8839f073f566059"
     },
+    {
+      "path": "tests/migrations_forward_safe.mjs",
+      "mode": "0000644",
+      "sha256": "77867e408edbe5fc9c1f4c4cc9f17c91d22b87f3f001ec58dd9a43a278eaf233"
+    },
     {
       "path": "tests/migrations_fresh_replay_guard.mjs",
       "mode": "0000644",
@@ -5532,7 +5337,7 @@
     {
       "path": "tests/module_api.mjs",
       "mode": "0000644",
-      "sha256": "3a5d5c7840f15223c2e61fdbcf646d052e8806ed7dc30d04a629376ee35b3a81"
+      "sha256": "59b10b2e729e652d4e1ded4f53c44c1364631ffc4b7bccd81de271f738e89579"
     },
     {
       "path": "tests/module_cli.mjs",
@@ -5662,7 +5467,7 @@
     {
       "path": "tests/package_core.mjs",
       "mode": "0000644",
-      "sha256": "9628d0c4c2c17eac5ed848dee1babba00ff90365bb1e074d7ab89ded367b65d9"
+      "sha256": "269ebccbc3697af01219f282b91bff138f880054e82eb31fa29ad07800043db0"
     },
     {
       "path": "tests/parallel-load.mjs",
@@ -5702,13 +5507,18 @@
     {
       "path": "tests/provision.mjs",
       "mode": "0000644",
-      "sha256": "d228a0d59399113d8f0ea5c13931c0e6512ccc6cfe65e98aba3df2818a97954c"
+      "sha256": "9951f3143d908b4c5b95911aa06a813ea3ee8c6b9feab20aba9800616d142e61"
     },
     {
       "path": "tests/provisioning_github_app_routes.mjs",
       "mode": "0000644",
       "sha256": "fce4837d4882dcd980bc144a2afeaf04fbce99aa31d7d1a72a277bad0ebfae99"
     },
+    {
+      "path": "tests/pruned_lockfile_integrity.mjs",
+      "mode": "0000644",
+      "sha256": "a2e29941b5275751d37004bbe01a7123f0d11edcd1d34f5a2ee4079f91cd711a"
+    },
     {
       "path": "tests/public_mirror_export.mjs",
       "mode": "0000644",
@@ -5952,7 +5762,7 @@
     {
       "path": "tests/ship_ci_deploy.mjs",
       "mode": "0000644",
-      "sha256": "574b57a28194702cd072c6a0d01099775c87016cd48ce27b8d8a9bbd64d0f3c1"
+      "sha256": "587d9a820c66676a1a0761cb8d8c3899ddad69485d886e5371aa40d8fc7b17fd"
     },
     {
       "path": "tests/ship_preflight.mjs",
@@ -6067,7 +5877,7 @@
     {
       "path": "tests/upgrade.mjs",
       "mode": "0000644",
-      "sha256": "0be8e568daff837296f8f3c670ee02fe43c5c7a05ac6dcbcd46260c70dd4b4ec"
+      "sha256": "a83385acf77cb084c0ec2dbfb495bcddb36924c08b19d513a39a7ba4014246cd"
     },
     {
       "path": "tests/verify_task_guard.mjs",