@bongos/core 1.21.92 → 1.21.94

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.21.92",
-  "core_contract": "1.21.92",
-  "source_commit": "ac78d5a2c74cee8a20316c57da690eddc3570a5b",
+  "core_version": "1.21.94",
+  "core_contract": "1.21.94",
+  "source_commit": "04eb025dc97e59ea5197b03ace52613f7c994568",
   "source_ref": "HEAD",
-  "built_at": "2026-10-09T06:43:20.649Z",
+  "built_at": "2026-10-09T07:52:21.563Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 590,
     "agent_docs_stubbed": 28,
-    "functional_verbatim": 3006,
+    "functional_verbatim": 3012,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 3625,
-  "tree_sha256": "66720407767d9b1a1ebe740e2f1ab6fe6e7aab62efd10b5390a61dafba847979",
+  "file_count": 3631,
+  "tree_sha256": "8388b6818944b7acc6215a9cd5b9f18ba7dc84a7afdeffecd68793d74bdbcd21",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -312,12 +312,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "dcf1cdc17f4d1d51341528d4048705d4be394f6187e1c643f8380f264ba8a6a4"
+      "sha256": "2d0587d4dc0cc403c9cf13d907dba3532cf5db972a0203e2bd3c15ae5e723f19"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "d61265ccb120da7888b3b46af4cfdf1ce237a254c585e66066c9c3c514cd508e"
+      "sha256": "6f18acc228869c7c96dfaf533ceef9d76d56736a9d576e7b55ee5dcc0e65d158"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -327,17 +327,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "75047820355916932baf6b8bb75c22d4f2a6550231dd13f007b5747c78709d23"
+      "sha256": "901215b9d2a3119b36e58087fa6657a0869c7a06d78cd5e088210f5e091e8bd8"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "f07e2e8d492facff691af7f75f3aa79e0b2eedb10dcf64a85a50ff9ae65b0e87"
+      "sha256": "4eae2c37e7ff4af282a4b397535ca59b8cc38c90cf42a99d62e417ffa0abdc69"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "527bd7e60247b932b85793d9cf27e1e2e907f99646ae8642d3b560fed63338b3"
+      "sha256": "728ec9a7b74aa8f775a3d3355694ad240f6a7a5180bb045a986c1d5f84518303"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -2272,7 +2272,7 @@
     {
       "path": "docs/adr/0363-who-decides-what-is-a-table-changed-only-by-amendment.md",
       "mode": "0000644",
-      "sha256": "4feed5892da4fe2fbe148cdf56edeacd2bf7e6c3886a880a4246811e500e6973"
+      "sha256": "9668a578579f0f38cc24b1eaa3a87a7306f4cf8ef62df64a7938f07c249954e2"
     },
     {
       "path": "docs/adr/0364-repo-access-is-asked-at-sign-in-and-held-for-the-session.md",
@@ -2317,12 +2317,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "d8b883f06a11a6b7fceab24a610d5ff7a51b3608c39bb776a4c50c27c8a26d2b"
+      "sha256": "9040a7fc570772b0d28d0db07fa603b31647a1958bdc2cf98b787992e189596b"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "ec3d2d57bebe8ba74b74fb8e47f36f411729099b662feeaf9ac5c6590ba94c79"
+      "sha256": "8ff2cb4c702848e15e2baf0e92ef055a9bd060d10ebd0991f3d6ee131a399c9f"
     },
     {
       "path": "docs/architecture.md",
@@ -2347,12 +2347,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "d866d91fd677266103f6ca61042cb1ad2d4e2912545259764cf5caa27f9aaa39"
+      "sha256": "d9eb86aa5d3c208883783df0deef2ad776e403fa5896a422d88adc5e11079e6d"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "33e0605886cc8554d1fed3ed4904ec9e2c2ea5a926f1adc0eed689d395a18953"
+      "sha256": "d5af39196ca0a235dcb225c0966f2df4d930417c109298f86e03429cdc4d7a91"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2432,7 +2432,7 @@
     {
       "path": "docs/design/project-startup-direction.md",
       "mode": "0000644",
-      "sha256": "8cac194bfa4e7e0cfa6785ff72fd141980eb2abed6497ce56e42585c2f4a918c"
+      "sha256": "1948e880f19c1bb2ee973e816455449c0170acee2c59bc070054760bc32ae867"
     },
     {
       "path": "docs/design/projects-hub-direction-v2.md",
@@ -2862,7 +2862,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "5807d793684e3ef4b0973dada791efe1edace1ec4f51803ad5688ac32edf612b"
+      "sha256": "68fbc54195d7fb5acd38c28fc5690b3e62fad65b18daa5530fadf3fc86ad4ff4"
     },
     {
       "path": "docs/modules-contract.md",
@@ -2952,7 +2952,7 @@
     {
       "path": "docs/page-readings.json",
       "mode": "0000644",
-      "sha256": "3ec786d4af42a799f66a9cb11c8fc5cb6ebb2c0d1e5479a6437a6b511f96a5ee"
+      "sha256": "156f2ba353e667857b5573f4ba333af3796dea1d1042e5faa35316369e3aa114"
     },
     {
       "path": "docs/project-context.template.md",
@@ -4247,7 +4247,7 @@
     {
       "path": "modules/autonomy/routes/autonomy.js",
       "mode": "0000644",
-      "sha256": "872875e93429b0d7de6b322811a9a86e5698e8bb6717e89bcf769d5fde4ce82b"
+      "sha256": "3def3840ed0dd842fa08ef59df0b6af68d3d44ef33b13b3a2ab83c4a3a82c9ed"
     },
     {
       "path": "modules/autonomy/runner-health.js",
@@ -4927,12 +4927,12 @@
     {
       "path": "modules/government/decision-board.js",
       "mode": "0000644",
-      "sha256": "af3c46850f40b8119bc514c2289d697e9b7c4a6c9fc0c389721600dcfccb2968"
+      "sha256": "d3fbff112e2da86a12498be1b87904071b556c4939525ccf9bc906a66deb8b72"
     },
     {
       "path": "modules/government/decision-rules.js",
       "mode": "0000644",
-      "sha256": "577921791cf32ad8a824f78e534bf26d608eaf32401ed31cc555554bc8e411eb"
+      "sha256": "942304d1b77cc7f428a5f4f2462e28a96accc23de2e081ba7c62d9a8a61f44cf"
     },
     {
       "path": "modules/government/docket-floors.js",
@@ -7297,12 +7297,12 @@
     {
       "path": "modules/lifecycle/routes/done-when.js",
       "mode": "0000644",
-      "sha256": "7d4e83a96c0c4fc4e3c7cdd8abc0c46607ef7fde28201bad37de72970cf7e26c"
+      "sha256": "22d015052c9d4870491101ad1170f5e784a372de6e49732b39f449dee1cf2b8e"
     },
     {
       "path": "modules/lifecycle/routes/gate-approvals.js",
       "mode": "0000644",
-      "sha256": "b532f0cc111640d5b7b658b9a465969666129ac9b9144d37a4f2dd5459961b59"
+      "sha256": "7dd64c54a5b35ec849a91361dc5cdc3cba86e0dc102ea283ee86c28caf60efe7"
     },
     {
       "path": "modules/lifecycle/routes/goal-move.js",
@@ -7322,7 +7322,7 @@
     {
       "path": "modules/lifecycle/routes/goals.js",
       "mode": "0000644",
-      "sha256": "88cd70b4b1912c40bb9a40af9dd499f28461175e33a3c0a702ce35d4f805de79"
+      "sha256": "3179f77a1117e54c13d75d7af5248cb28a434e1bcce938fb88b2edbe27cd5aac"
     },
     {
       "path": "modules/lifecycle/routes/help-requests.js",
@@ -7352,7 +7352,7 @@
     {
       "path": "modules/lifecycle/routes/project-settings.js",
       "mode": "0000644",
-      "sha256": "069f431d53ff1219d15e81dbf6c6a0e58413b97ba0b116f6113f6e41755b2aca"
+      "sha256": "e892c118488d028f5a0203b5560fb8efa0047e2a4bbac9faafe5ee2132027c54"
     },
     {
       "path": "modules/lifecycle/routes/recommendations.js",
@@ -7387,7 +7387,7 @@
     {
       "path": "modules/lifecycle/routes/tasks.js",
       "mode": "0000644",
-      "sha256": "efd442d161d9b212d1e9aa4cad06aa428b1e4c74ac67d22658591ca7c28f2621"
+      "sha256": "564dabb3de1eee96e374160d39f57c61100bca843ebac2b2267aa4693ec5038f"
     },
     {
       "path": "modules/lifecycle/routes/version-route-authz.js",
@@ -7397,7 +7397,7 @@
     {
       "path": "modules/lifecycle/routes/versions.js",
       "mode": "0000644",
-      "sha256": "882403ac8a51cd660b8251c1be7aabefa26688fa78882e71567df1e6e136e365"
+      "sha256": "161c9f5928ff2ba5ec7733e150c8ba86217b428588e2d0322e971c989ce0d71f"
     },
     {
       "path": "modules/lifecycle/routes/visuals.js",
@@ -7602,7 +7602,7 @@
     {
       "path": "modules/npm-release/routes/release.js",
       "mode": "0000644",
-      "sha256": "8f8fa94eafbe428628da850f62e19b845b2098df5392d9028e6e5d30b51c3a56"
+      "sha256": "e1736b4252f720fd2f8d1d42b56e0099fbd3a82f257d96c4aad4ffe8eef982bf"
     },
     {
       "path": "modules/npm-release/routes/task-where.js",
@@ -7682,7 +7682,7 @@
     {
       "path": "modules/onboarding/routes/access-requests.js",
       "mode": "0000644",
-      "sha256": "5a498b7b0a5f5b67fdfce415eeafbc54426752360c716451d22d180e3f6e8c54"
+      "sha256": "e54866a2398da3a4f39bd31a9fd122a6045568da1e67c26450121d67456bc769"
     },
     {
       "path": "modules/onboarding/routes/onboarding.js",
@@ -8264,6 +8264,11 @@
       "mode": "0000644",
       "sha256": "82b9f7ee39820735ca4d0f55b12fd72903b9909d3c9f0abedb684dcc98ac77c6"
     },
+    {
+      "path": "modules/provisioning/github-setup.js",
+      "mode": "0000644",
+      "sha256": "e97ee19b2ba5e607557d0794e528f2e7e19d68cbe6e208ab88af7a9dba92d06b"
+    },
     {
       "path": "modules/provisioning/look.js",
       "mode": "0000644",
@@ -8457,7 +8462,7 @@
     {
       "path": "modules/provisioning/module.json",
       "mode": "0000644",
-      "sha256": "6faff6cecb10f65437819c8dc79e22dc8d2317b5cfe3c107d4b803e2a3760c13"
+      "sha256": "6ae32503a3950dffd68187a02a9918bdfb51582e715f552c4c421fbea55c9f8c"
     },
     {
       "path": "modules/provisioning/onboard-plan.js",
@@ -8507,7 +8512,7 @@
     {
       "path": "modules/provisioning/provisioning.js",
       "mode": "0000644",
-      "sha256": "436287030388ae105372d864460e50ca6380bb5a5ea3d9d6d140e9b2345feae6"
+      "sha256": "b45bcb38497d8999ea0e5e3d0844785a7514a829cfd6cbb58c9b3167ccce37f9"
     },
     {
       "path": "modules/provisioning/public-refusal.js",
@@ -8547,12 +8552,12 @@
     {
       "path": "modules/provisioning/routes/callback-page.js",
       "mode": "0000644",
-      "sha256": "2fede95d3be1859e99df1f1e616be6a7744b15379ae9c2b800bf4b1014997f32"
+      "sha256": "b81fa153fe693e8a734d028f67cab629e2b90a148bffbd92cd9023e29428a558"
     },
     {
       "path": "modules/provisioning/routes/core-upgrade.js",
       "mode": "0000644",
-      "sha256": "109ab7dc8f2662301b9216ed1778d1beaea19a1e2e6e73481f7ba0c6c6fb45ad"
+      "sha256": "48bb22ee49d10e74fd4c01a56f46ca0d19d57eeb3228c1b797e2ba05854b3400"
     },
     {
       "path": "modules/provisioning/routes/demo.js",
@@ -8569,6 +8574,11 @@
       "mode": "0000644",
       "sha256": "dbc156fa4cb2c74132a8034c481ec676f818f4f19139cb10d7d5d669e2e4bbd9"
     },
+    {
+      "path": "modules/provisioning/routes/github-setup.js",
+      "mode": "0000644",
+      "sha256": "ba653473e0a1fa0b4e5a62308de8be9a2a8a1d1b4f838bf9dafd8508429e9da8"
+    },
     {
       "path": "modules/provisioning/routes/look.js",
       "mode": "0000644",
@@ -8577,7 +8587,7 @@
     {
       "path": "modules/provisioning/routes/provisioning.js",
       "mode": "0000644",
-      "sha256": "9a2d62d388e0b6051ea222d5254bb8e0bd986702f52b9cdda32475ba2a508d67"
+      "sha256": "a4ab4c1f5c98f5fe85489f0f2f7e23e6897c178b62f2bcc9b2d9e5502fd26458"
     },
     {
       "path": "modules/provisioning/routes/render-standup.js",
@@ -9327,7 +9337,7 @@
     {
       "path": "modules/public-landing/public/projects.html",
       "mode": "0000644",
-      "sha256": "48bdc97c32c116c89fe9461b49cc2814bd6b43d5ba3f89673e625555d01e2d98"
+      "sha256": "f461704616f4b6a4c50dd1b8da5441a12786268b26fab1e31c941720abb82bc4"
     },
     {
       "path": "modules/public-landing/public/projects.probes.json",
@@ -9377,7 +9387,7 @@
     {
       "path": "modules/render-deploy/routes/act.js",
       "mode": "0000644",
-      "sha256": "0d62a8bf0050b680bf0b79b8f6be1748dd39d7ecd23a270eea8f02cfe802d524"
+      "sha256": "8a986f38de7fa3d62b27459d12e1d304344bb1575968a445c483f6e3ca5cf0c1"
     },
     {
       "path": "modules/render-deploy/routes/app.js",
@@ -9517,7 +9527,7 @@
     {
       "path": "modules/security/routes/reports.js",
       "mode": "0000644",
-      "sha256": "f4d0dad797101b9cb23e9d5b20b0bf7caf78eeed6043e93852535fc86eddc3fb"
+      "sha256": "f38c00f7da0106db5a39fb207206276f1c4c8b6ded3b33f25f3c894fc1558fb7"
     },
     {
       "path": "modules/security/routes/scans.js",
@@ -10107,12 +10117,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "c6a00151a026a942ae23e1440ee403b96260c9dcb40dd580740391a2f95fd8dc"
+      "sha256": "7998607661e397160f9bbed3c39e5d25a1f8e339a33e1583b7d8c7b61fcd981b"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "18bf0866e76fd3b70f4b5cbfefed40ba4b429abf21bab389306f33b5a5865e75"
+      "sha256": "e12d7b166a78fcf82c456218fa12967a566f73a5c2d919708e6b504c0143a789"
     },
     {
       "path": "public-docs/index.html",
@@ -10132,7 +10142,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "20f8bfb8624ecfa5e9c42ed12bb663ea6b8590de3213172aae00c415e1c70838"
+      "sha256": "2f02fecacd57c662ec2439823135a4ae81bdf1535da9e2538550e9c929f68d60"
     },
     {
       "path": "scripts/cron/style_guide_audit.sh",
@@ -10702,7 +10712,7 @@
     {
       "path": "scripts/gds/fitness.js",
       "mode": "0000644",
-      "sha256": "36c3593ea85bafa7d53a5d4a257cdd5748deb7eb3886d4faabfab3cc435be969"
+      "sha256": "0ea1beb8b23148696f9a88cfbca1b303d9299e1e8dc2da21bf86ea21b9d035e0"
     },
     {
       "path": "scripts/gds/gate-review.js",
@@ -11042,7 +11052,7 @@
     {
       "path": "scripts/gds/oauth-secret.js",
       "mode": "0000644",
-      "sha256": "39e8a37e623a8a5746fd83c9a572f1a5435e93afe5e0bd185f8760b4ef9ad31a"
+      "sha256": "34863bef7688e5a0341fea4bd869cfa4e606ac02ce1b08e4fb7fd1089e1e7be3"
     },
     {
       "path": "scripts/gds/onboard.js",
@@ -11144,6 +11154,11 @@
       "mode": "0000644",
       "sha256": "43aabd985e5ec2b2eff12b5d624158c3240e7777887705228945fedf691d95c3"
     },
+    {
+      "path": "scripts/gds/provision-github-setup.js",
+      "mode": "0000644",
+      "sha256": "aa0927e26143328727f3c752f2ebb337a840ae76bf699bc10930cb6182c51146"
+    },
     {
       "path": "scripts/gds/provision-net.js",
       "mode": "0000644",
@@ -11192,7 +11207,7 @@
     {
       "path": "scripts/gds/provision.js",
       "mode": "0000644",
-      "sha256": "f58a7db598467d02e496688f71327a2c39b0e680a4b3c24fc0d7dd6346e07c8b"
+      "sha256": "4f4857e34141db1d78cfec4b0b7f735658893aba946f53348c2430fe852b2a93"
     },
     {
       "path": "scripts/gds/publish-credential-check.js",
@@ -11989,6 +12004,11 @@
       "mode": "0000644",
       "sha256": "7cb9dac9cb87b679e1ae50e4112b3a7928a38ebb9902c8947a74d17bec4d9009"
     },
+    {
+      "path": "src/bongos/act-alone.js",
+      "mode": "0000644",
+      "sha256": "5d7f7b434b8aa8ab5782e7902f42b7103a697a71c95cc6f61beb4f3f0ea561f4"
+    },
     {
       "path": "src/bongos/api-errors.js",
       "mode": "0000644",
@@ -12262,7 +12282,7 @@
     {
       "path": "src/bongos/routes/builders.js",
       "mode": "0000644",
-      "sha256": "110b46f7cbb7921dd7144162cb372cb43f8d6c4959cd6c52fc38527995697f0f"
+      "sha256": "0511897ded470ced36f21645685f0757b3c77ad8b8a50e043b05a9b59fff480d"
     },
     {
       "path": "src/bongos/routes/cli-commands.js",
@@ -12392,7 +12412,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "ecc4b760892e24a3017377ffe19d6e3a8f5683dda2d1ecaae7e3e52e7bf7f33c"
+      "sha256": "3f71efbd68543de424e2d6eea488e0f6167890b28bfbd99f936a22f89a37268e"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -12912,7 +12932,7 @@
     {
       "path": "tests/autonomy_fence_priority.mjs",
       "mode": "0000644",
-      "sha256": "5bb8707d762967e77100e531fc8914f76d9401393ecbaa354beb31956a133c66"
+      "sha256": "050fb46d4db451ded339caa6de865410ea7a0357688f15d558e25335c83a0d22"
     },
     {
       "path": "tests/autonomy_gate.mjs",
@@ -14014,6 +14034,11 @@
       "mode": "0000644",
       "sha256": "79208b90f1b785af56ab057c858e96cea4e67ebf247858457addedce55e71b06"
     },
+    {
+      "path": "tests/github_one_trip.mjs",
+      "mode": "0000644",
+      "sha256": "b04dbcd87504e696367a03db39c0a3c0ae9b647039ab25b354c89884c74d2ba5"
+    },
     {
       "path": "tests/github_push_ancestry.mjs",
       "mode": "0000644",
@@ -14284,6 +14309,11 @@
       "mode": "0000644",
       "sha256": "47d5e7db2bdab4504fca424d20588d4b0857e3246cd0376f5e111e6ca409632e"
     },
+    {
+      "path": "tests/government_act_alone_buildings.mjs",
+      "mode": "0000644",
+      "sha256": "22ee46f430e4443cb4946aa27608a442c23599c338602b70f0de602635257f77"
+    },
     {
       "path": "tests/government_board_amendment.mjs",
       "mode": "0000644",
@@ -15672,7 +15702,7 @@
     {
       "path": "tests/module_api.mjs",
       "mode": "0000644",
-      "sha256": "9244fee28297a30d3effb01db58772ccb4ab234d180beaaf14a4bded5f9841f1"
+      "sha256": "9e282a1e2de543831d164a78a160735d37dd956a4751f2d26c74beddc41319cc"
     },
     {
       "path": "tests/module_api_lazy.mjs",
@@ -15937,7 +15967,7 @@
     {
       "path": "tests/npm_release_release.mjs",
       "mode": "0000644",
-      "sha256": "308beb34056741040b24cc954cf3e644f1a0c9f61876b0e5c509996f52780db2"
+      "sha256": "1bf138c9a88e23989255548a6aec0205da7f9c1787dbf872271c1b01575f065c"
     },
     {
       "path": "tests/npm_release_where.mjs",
@@ -16382,7 +16412,7 @@
     {
       "path": "tests/projects_hub_dns_ready.mjs",
       "mode": "0000644",
-      "sha256": "867a98a8f9c51d2f5ad24cafbf3bcf49118690edb8fbe96a29f44d6e164b27db"
+      "sha256": "532af0a1c9e4961888b1ba1dae29af053c43dc166c14962d2318b04d1baa6d3c"
     },
     {
       "path": "tests/projects_hub_look.mjs",
@@ -16397,7 +16427,7 @@
     {
       "path": "tests/projects_hub_pre_uat.mjs",
       "mode": "0000644",
-      "sha256": "99cee166dc5f2a1656bcf78461c420d321d3f1915d2fea163042cd069bf94c33"
+      "sha256": "e580ed2ea20556cc60f4160ace7316e8691b30f020c0701e783811ae0f134860"
     },
     {
       "path": "tests/projects_hub_render_connect.mjs",
@@ -16442,7 +16472,7 @@
     {
       "path": "tests/provision.mjs",
       "mode": "0000644",
-      "sha256": "4ffddc6128eb9860d6b48493c4d9b6fd9e108f7c0e656f003bbbe32866b97675"
+      "sha256": "64ffc593089622c6901669a29eee6a0d75ae6b47cbfc0729e2c8eae09e8386e1"
     },
     {
       "path": "tests/provision_account_identity.mjs",
@@ -16562,7 +16592,7 @@
     {
       "path": "tests/provisioning_github_app_routes.mjs",
       "mode": "0000644",
-      "sha256": "a223db1dfa5a34f28b5303dd672b39a1dbfa20dc88801c5c4b0941c846c004c3"
+      "sha256": "e80789df044437fa96306063343889e9378e337b7753e208ae9cea86c28ea457"
     },
     {
       "path": "tests/provisioning_look.mjs",
@@ -17307,7 +17337,7 @@
     {
       "path": "tests/ship_mode.mjs",
       "mode": "0000644",
-      "sha256": "b545f8efbf7ae42b5db2b22e275fac2de65a268e46331bd018b515c69b274f25"
+      "sha256": "aee20a5f6e2998d18f605b91d1eb1019e8ada824135759b29633caa3153d9255"
     },
     {
       "path": "tests/ship_post_land_verify.mjs",
@@ -18072,7 +18102,7 @@
     {
       "path": "tests/wizard_github_feedback.mjs",
       "mode": "0000644",
-      "sha256": "c22b6d452db01032541444c5782618af5e4b3d960fcf58692d22f0ad893f793c"
+      "sha256": "0e9aae041edc457202b40ae2228720fcf99a60c6ad0dfd82ad76302e077fd7f0"
     },
     {
       "path": "tests/wizard_intent_resume.mjs",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 533 operations across 76 resource groups
+- 534 operations across 76 resource groups
 
 ## Use it from your project
 

package/clients/bongos-client/bongos-client.global.js

@@ -895,6 +895,8 @@ function createClient(opts = {}) {
       getProvisioningFleetCostLedger: (args) => request("GET", "/provisioning/fleet/cost-ledger", { hasBody: false }, args),
       // GET /provisioning/github-app/callback — rank: public — GET /provisioning/github-app/callback
       getProvisioningGithubAppCallback: (args) => request("GET", "/provisioning/github-app/callback", { hasBody: false }, args),
+      // GET /provisioning/github-app/setup — rank: public — GET /provisioning/github-app/setup
+      getProvisioningGithubAppSetup: (args) => request("GET", "/provisioning/github-app/setup", { hasBody: false }, args),
       // GET /provisioning/github-app/status — rank: public — GET /provisioning/github-app/status
       getProvisioningGithubAppStatus: (args) => request("GET", "/provisioning/github-app/status", { hasBody: false }, args),
       // GET /provisioning/health — rank: public — GET /provisioning/health

package/clients/bongos-client/index.cjs

@@ -894,6 +894,8 @@ function createClient(opts = {}) {
       getProvisioningFleetCostLedger: (args) => request("GET", "/provisioning/fleet/cost-ledger", { hasBody: false }, args),
       // GET /provisioning/github-app/callback — rank: public — GET /provisioning/github-app/callback
       getProvisioningGithubAppCallback: (args) => request("GET", "/provisioning/github-app/callback", { hasBody: false }, args),
+      // GET /provisioning/github-app/setup — rank: public — GET /provisioning/github-app/setup
+      getProvisioningGithubAppSetup: (args) => request("GET", "/provisioning/github-app/setup", { hasBody: false }, args),
       // GET /provisioning/github-app/status — rank: public — GET /provisioning/github-app/status
       getProvisioningGithubAppStatus: (args) => request("GET", "/provisioning/github-app/status", { hasBody: false }, args),
       // GET /provisioning/health — rank: public — GET /provisioning/health

package/clients/bongos-client/index.d.ts

@@ -132,13 +132,13 @@ export interface GetProjectSettingsShipModeResponse { mode: unknown; chosen: unk
 export interface GetProjectsFeaturedResponse { projects: unknown; page: PageInfo }
 export interface GetProjectsResponse { projects: unknown }
 export interface GetProvisioningFleetResponse { instances: unknown; capacity: unknown }
-export interface GetProvisioningGithubAppStatusResponse { ok: boolean; status: unknown; failure: unknown; ready: unknown; terminal: unknown; domain: unknown; instance_status: unknown; app_slug: unknown }
+export interface GetProvisioningGithubAppStatusResponse { ok: boolean; status: unknown; failure: unknown; ready: unknown; terminal: unknown; domain: unknown; instance_status: unknown; app_slug: unknown; checklist: unknown; install_url: unknown; repo: unknown; verifying: unknown }
 export interface GetProvisioningHealthResponse { module: unknown; ok: boolean; coreVersion: unknown }
 export interface GetProvisioningInstancesIdEnvManifestResponse { instance: unknown; env_vars: unknown; environments: unknown; values_held: boolean; note: unknown }
 export interface GetProvisioningInstancesIdInviteSuggestionsResponse { suggested: unknown; seeking: unknown; reason: unknown; unavailable?: unknown }
 export interface GetProvisioningInstancesIdLookResponse { ok: boolean; look: unknown; options: unknown; logo_max_bytes: unknown }
 export interface GetProvisioningInstancesIdRenderResponse { ok: boolean; app: unknown; env_vars: unknown; values_held: boolean }
-export interface GetProvisioningInstancesIdResponse { instance: unknown; open_intent: unknown; github_app: unknown }
+export interface GetProvisioningInstancesIdResponse { instance: unknown; open_intent: unknown; github_app: unknown; github_setup: unknown }
 export interface GetProvisioningInstancesIdSettingsResponse { ok: boolean; settings: unknown; planet: unknown; options: unknown }
 export interface GetProvisioningInstancesResponse { instances: unknown }
 export interface GetProvisioningOnboardPlanResponse { mode: unknown; steps: unknown }
@@ -1402,6 +1402,8 @@ export interface BongosClient {
     getProvisioningFleetCostLedger(args?: RequestArgs): Promise<ApiResponse>;
     /** GET /provisioning/github-app/callback — rank: public */
     getProvisioningGithubAppCallback(args?: RequestArgs): Promise<ApiResponse>;
+    /** GET /provisioning/github-app/setup — rank: public */
+    getProvisioningGithubAppSetup(args?: RequestArgs): Promise<ApiResponse>;
     /** GET /provisioning/github-app/status — rank: public */
     getProvisioningGithubAppStatus(args?: RequestArgs): Promise<GetProvisioningGithubAppStatusResponse>;
     /** GET /provisioning/health — rank: public */

package/clients/bongos-client/index.mjs

@@ -891,6 +891,8 @@ export function createClient(opts = {}) {
       getProvisioningFleetCostLedger: (args) => request("GET", "/provisioning/fleet/cost-ledger", { hasBody: false }, args),
       // GET /provisioning/github-app/callback — rank: public — GET /provisioning/github-app/callback
       getProvisioningGithubAppCallback: (args) => request("GET", "/provisioning/github-app/callback", { hasBody: false }, args),
+      // GET /provisioning/github-app/setup — rank: public — GET /provisioning/github-app/setup
+      getProvisioningGithubAppSetup: (args) => request("GET", "/provisioning/github-app/setup", { hasBody: false }, args),
       // GET /provisioning/github-app/status — rank: public — GET /provisioning/github-app/status
       getProvisioningGithubAppStatus: (args) => request("GET", "/provisioning/github-app/status", { hasBody: false }, args),
       // GET /provisioning/health — rank: public — GET /provisioning/health

package/docs/adr/0363-who-decides-what-is-a-table-changed-only-by-amendment.md

@@ -47,6 +47,7 @@ The council, tester, lead, trustee, maintainer and treasurer seats are the proje
 ## Consequences
 
 - Owning modules adopt `checkActAlone` on their own direct acts, one at a time: admission and goal join requests (People), goal creation (Planning), report judging (Disputes), settings (Rules), the fence (Automation), criteria (Review), the pin move (Release) and budgets (Treasury). Until then, a row for those buildings decides that building's board matters, and the direct page still decides alone. The docket says so honestly (D6). Widening, where a row lets a seat that does not hold the permission act, is deliberately not done here. It would put the table inside the permission resolver, which is a trust-boundary change of its own.
+- **Done by [task 1004657](https://cloudbongos.com/builders#/task/1004657):** every building's direct routes now ask their row, through one doorway gate, `requireActAlone(area)` (`src/bongos/act-alone.js`), mounted after the permission gate and refusing with D5's exact shape. The routes per building are listed in `decision-rules.js` `AREAS[].acts`, and a test holds that list equal to the source. Three things are never refused: a brake (switching unattended building off, pausing one runner), because stopping must not wait for a meeting; a dry run, which only reads; and a passed matter's own act, which never goes through a route. The charter has no direct route. Goal join-request answers stay with the goal's owner.
 - An objection on a matter still names a Full Idea section (the vote CHECK is unchanged), the same position as a genesis stage.
 - Opening a matter needs `board.item.open` (metic floor). A project where everyone votes still has its matters put up by metics and above.
 - Rejected: a settings route for the table (it would let a rank gate rewrite the government); a separate amendments table (a second pass path to keep in step); storing the rows in the instance config file like the board block (a row must be a database fact the trigger can guard).