@bongos/core 1.21.93 → 1.21.95

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.21.93",
-  "core_contract": "1.21.93",
-  "source_commit": "4c275841c75ef2bebdaed532f3b5e57c7a789d90",
+  "core_version": "1.21.95",
+  "core_contract": "1.21.95",
+  "source_commit": "1895cbf114f5a8932e751d9208a592dfbbf99ff8",
   "source_ref": "HEAD",
-  "built_at": "2026-10-09T07:16:47.997Z",
+  "built_at": "2026-10-09T08:47:23.210Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 590,
     "agent_docs_stubbed": 28,
-    "functional_verbatim": 3008,
+    "functional_verbatim": 3013,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 3627,
-  "tree_sha256": "49bb2f826dddbdaabbcfe2ace12bc326ab12234fc2ce4514883ad7aa6ca0e018",
+  "file_count": 3632,
+  "tree_sha256": "82e713c766d3a2684a614b15ca98c09c047238193da0dc6be4ab5f95b9dbb975",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -312,12 +312,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "dcf1cdc17f4d1d51341528d4048705d4be394f6187e1c643f8380f264ba8a6a4"
+      "sha256": "ddef69b1dc2ff76269e9f84955ca554ec70f1f18aeb502e408bf20920f694669"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "d61265ccb120da7888b3b46af4cfdf1ce237a254c585e66066c9c3c514cd508e"
+      "sha256": "35ac01d598a9ba76e928f115f5de99e952128d37de311e3bab548d9a74bfe53a"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -327,17 +327,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "75047820355916932baf6b8bb75c22d4f2a6550231dd13f007b5747c78709d23"
+      "sha256": "0793d04a2a43eef50144bc607927c7b3560af4948877926edf24aa3d781e7323"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "f07e2e8d492facff691af7f75f3aa79e0b2eedb10dcf64a85a50ff9ae65b0e87"
+      "sha256": "c4708244379cd28709caf48d817266b184ffe18a65f9590bc62c2b1aeb71d824"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "527bd7e60247b932b85793d9cf27e1e2e907f99646ae8642d3b560fed63338b3"
+      "sha256": "e143421ec34b742f29a21690b81ed8fdf2b01a7c87d380fcea43a56dbba42465"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -2317,12 +2317,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "d8b883f06a11a6b7fceab24a610d5ff7a51b3608c39bb776a4c50c27c8a26d2b"
+      "sha256": "3b3f6ed65d2c90fa08c7a2000862c7c9ffd8b7625420f377b52d132d9b17d8d3"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "ec3d2d57bebe8ba74b74fb8e47f36f411729099b662feeaf9ac5c6590ba94c79"
+      "sha256": "8704ce350de56a1b955a41296cb7fa053128d2b4fc8a76e156a4e8578afef6a3"
     },
     {
       "path": "docs/architecture.md",
@@ -2347,12 +2347,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "d866d91fd677266103f6ca61042cb1ad2d4e2912545259764cf5caa27f9aaa39"
+      "sha256": "d9eb86aa5d3c208883783df0deef2ad776e403fa5896a422d88adc5e11079e6d"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "33e0605886cc8554d1fed3ed4904ec9e2c2ea5a926f1adc0eed689d395a18953"
+      "sha256": "d5af39196ca0a235dcb225c0966f2df4d930417c109298f86e03429cdc4d7a91"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2432,7 +2432,7 @@
     {
       "path": "docs/design/project-startup-direction.md",
       "mode": "0000644",
-      "sha256": "8cac194bfa4e7e0cfa6785ff72fd141980eb2abed6497ce56e42585c2f4a918c"
+      "sha256": "1fc48632ac7af6d55bc62cf0207affb597956c2243febe1faa0b39e22bdef829"
     },
     {
       "path": "docs/design/projects-hub-direction-v2.md",
@@ -2862,7 +2862,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "63e2775e1139816091d9e9629b5e2b1d16a2862ad7caaacfa817cee89eb90809"
+      "sha256": "4b50f866b73e605791b602d3d0dd212aeebc0b406f1f8579a8f3f4625fb9a8f2"
     },
     {
       "path": "docs/modules-contract.md",
@@ -2952,7 +2952,7 @@
     {
       "path": "docs/page-readings.json",
       "mode": "0000644",
-      "sha256": "3ec786d4af42a799f66a9cb11c8fc5cb6ebb2c0d1e5479a6437a6b511f96a5ee"
+      "sha256": "998e448cf903b275a9c44c0f326197963e83929626cce5dc506e980148690b98"
     },
     {
       "path": "docs/project-context.template.md",
@@ -8264,6 +8264,11 @@
       "mode": "0000644",
       "sha256": "82b9f7ee39820735ca4d0f55b12fd72903b9909d3c9f0abedb684dcc98ac77c6"
     },
+    {
+      "path": "modules/provisioning/github-setup.js",
+      "mode": "0000644",
+      "sha256": "e97ee19b2ba5e607557d0794e528f2e7e19d68cbe6e208ab88af7a9dba92d06b"
+    },
     {
       "path": "modules/provisioning/look.js",
       "mode": "0000644",
@@ -8457,7 +8462,7 @@
     {
       "path": "modules/provisioning/module.json",
       "mode": "0000644",
-      "sha256": "6faff6cecb10f65437819c8dc79e22dc8d2317b5cfe3c107d4b803e2a3760c13"
+      "sha256": "6ae32503a3950dffd68187a02a9918bdfb51582e715f552c4c421fbea55c9f8c"
     },
     {
       "path": "modules/provisioning/onboard-plan.js",
@@ -8507,7 +8512,7 @@
     {
       "path": "modules/provisioning/provisioning.js",
       "mode": "0000644",
-      "sha256": "436287030388ae105372d864460e50ca6380bb5a5ea3d9d6d140e9b2345feae6"
+      "sha256": "b45bcb38497d8999ea0e5e3d0844785a7514a829cfd6cbb58c9b3167ccce37f9"
     },
     {
       "path": "modules/provisioning/public-refusal.js",
@@ -8547,7 +8552,7 @@
     {
       "path": "modules/provisioning/routes/callback-page.js",
       "mode": "0000644",
-      "sha256": "2fede95d3be1859e99df1f1e616be6a7744b15379ae9c2b800bf4b1014997f32"
+      "sha256": "a84b6fce647c0902e7c90f5c85185d8ca2939d49fb67650bcca013eed3c90daa"
     },
     {
       "path": "modules/provisioning/routes/core-upgrade.js",
@@ -8569,6 +8574,11 @@
       "mode": "0000644",
       "sha256": "dbc156fa4cb2c74132a8034c481ec676f818f4f19139cb10d7d5d669e2e4bbd9"
     },
+    {
+      "path": "modules/provisioning/routes/github-setup.js",
+      "mode": "0000644",
+      "sha256": "652c1aafba1e38ae46b02b54d3e6cfa8c18a0ceadcf8a94ea67d664d773cce85"
+    },
     {
       "path": "modules/provisioning/routes/look.js",
       "mode": "0000644",
@@ -8577,7 +8587,7 @@
     {
       "path": "modules/provisioning/routes/provisioning.js",
       "mode": "0000644",
-      "sha256": "9a2d62d388e0b6051ea222d5254bb8e0bd986702f52b9cdda32475ba2a508d67"
+      "sha256": "a4ab4c1f5c98f5fe85489f0f2f7e23e6897c178b62f2bcc9b2d9e5502fd26458"
     },
     {
       "path": "modules/provisioning/routes/render-standup.js",
@@ -9327,7 +9337,7 @@
     {
       "path": "modules/public-landing/public/projects.html",
       "mode": "0000644",
-      "sha256": "48bdc97c32c116c89fe9461b49cc2814bd6b43d5ba3f89673e625555d01e2d98"
+      "sha256": "99b6553bb9756a91713c0842510d0dc8545111d0366fd59237968df21e69bf99"
     },
     {
       "path": "modules/public-landing/public/projects.probes.json",
@@ -10107,12 +10117,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "c5cb988b5bb2255930679a818cdcc5cf278646176ef15bbd2dc113f36698af02"
+      "sha256": "8a3f6a8660b0f20118070b8adaad21cbbd3866e6a272720b94c2719fafe53b77"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "4e05f7203accb56a762ab83c6ad71a8c91dcf58218665625ae993c3825f13da7"
+      "sha256": "256622b8d3de980cdb9dc368b115d0259af8e192f43d3757fcbc399ea053b00b"
     },
     {
       "path": "public-docs/index.html",
@@ -10132,7 +10142,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "ccf38aea55687532ade59d10785095bc50b266095c37901865b3e7db6777e16f"
+      "sha256": "f0933c625fe42e498bad837a26383cbd38181bb7dba0f02d33457789fdbac345"
     },
     {
       "path": "scripts/cron/style_guide_audit.sh",
@@ -11042,7 +11052,7 @@
     {
       "path": "scripts/gds/oauth-secret.js",
       "mode": "0000644",
-      "sha256": "39e8a37e623a8a5746fd83c9a572f1a5435e93afe5e0bd185f8760b4ef9ad31a"
+      "sha256": "34863bef7688e5a0341fea4bd869cfa4e606ac02ce1b08e4fb7fd1089e1e7be3"
     },
     {
       "path": "scripts/gds/onboard.js",
@@ -11144,6 +11154,11 @@
       "mode": "0000644",
       "sha256": "43aabd985e5ec2b2eff12b5d624158c3240e7777887705228945fedf691d95c3"
     },
+    {
+      "path": "scripts/gds/provision-github-setup.js",
+      "mode": "0000644",
+      "sha256": "aa0927e26143328727f3c752f2ebb337a840ae76bf699bc10930cb6182c51146"
+    },
     {
       "path": "scripts/gds/provision-net.js",
       "mode": "0000644",
@@ -11192,7 +11207,7 @@
     {
       "path": "scripts/gds/provision.js",
       "mode": "0000644",
-      "sha256": "f58a7db598467d02e496688f71327a2c39b0e680a4b3c24fc0d7dd6346e07c8b"
+      "sha256": "4f4857e34141db1d78cfec4b0b7f735658893aba946f53348c2430fe852b2a93"
     },
     {
       "path": "scripts/gds/publish-credential-check.js",
@@ -12397,7 +12412,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "93548f4008e232c69ca994b86cb82c971d7b3830271e28b5251d60e6a958e777"
+      "sha256": "5cabb78f9a62e76cbe3b084a14f0f4a50c5dc73b9c359cded8b13c64c5158f38"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -14019,6 +14034,16 @@
       "mode": "0000644",
       "sha256": "79208b90f1b785af56ab057c858e96cea4e67ebf247858457addedce55e71b06"
     },
+    {
+      "path": "tests/github_handback_any_device.mjs",
+      "mode": "0000644",
+      "sha256": "7c264331e939bda95029e4448534734a236a59c7b46e44e34bed7a0f13577cd3"
+    },
+    {
+      "path": "tests/github_one_trip.mjs",
+      "mode": "0000644",
+      "sha256": "b04dbcd87504e696367a03db39c0a3c0ae9b647039ab25b354c89884c74d2ba5"
+    },
     {
       "path": "tests/github_push_ancestry.mjs",
       "mode": "0000644",
@@ -16372,7 +16397,7 @@
     {
       "path": "tests/projects_hub.mjs",
       "mode": "0000644",
-      "sha256": "635f36dc6f0134a901307d58f6706a864c31fcf1f0950c9f8cbcf434163b928d"
+      "sha256": "2183ec464cc6ab88d95bb7416a75aef72b674e05677cc6698e4dcb50fde366fb"
     },
     {
       "path": "tests/projects_hub_app_status.mjs",
@@ -16392,7 +16417,7 @@
     {
       "path": "tests/projects_hub_dns_ready.mjs",
       "mode": "0000644",
-      "sha256": "867a98a8f9c51d2f5ad24cafbf3bcf49118690edb8fbe96a29f44d6e164b27db"
+      "sha256": "532af0a1c9e4961888b1ba1dae29af053c43dc166c14962d2318b04d1baa6d3c"
     },
     {
       "path": "tests/projects_hub_look.mjs",
@@ -16407,7 +16432,7 @@
     {
       "path": "tests/projects_hub_pre_uat.mjs",
       "mode": "0000644",
-      "sha256": "99cee166dc5f2a1656bcf78461c420d321d3f1915d2fea163042cd069bf94c33"
+      "sha256": "e580ed2ea20556cc60f4160ace7316e8691b30f020c0701e783811ae0f134860"
     },
     {
       "path": "tests/projects_hub_render_connect.mjs",
@@ -16452,7 +16477,7 @@
     {
       "path": "tests/provision.mjs",
       "mode": "0000644",
-      "sha256": "4ffddc6128eb9860d6b48493c4d9b6fd9e108f7c0e656f003bbbe32866b97675"
+      "sha256": "64ffc593089622c6901669a29eee6a0d75ae6b47cbfc0729e2c8eae09e8386e1"
     },
     {
       "path": "tests/provision_account_identity.mjs",
@@ -16512,7 +16537,7 @@
     {
       "path": "tests/provisioning_callback_page.mjs",
       "mode": "0000644",
-      "sha256": "8886fae6d241f2360c5948d9a243821d6ac20d0021d14ea6477ebf0651e4a712"
+      "sha256": "464edbf5d2095148cf2bc37af1abc22b228eeaf5bd25f39d5d604bae10778688"
     },
     {
       "path": "tests/provisioning_capacity.mjs",
@@ -16572,7 +16597,7 @@
     {
       "path": "tests/provisioning_github_app_routes.mjs",
       "mode": "0000644",
-      "sha256": "a223db1dfa5a34f28b5303dd672b39a1dbfa20dc88801c5c4b0941c846c004c3"
+      "sha256": "c8969d3782cbc6d9b3b4c776cdf8c3f2e0bc5282d6cb7af3a82c5164034416a1"
     },
     {
       "path": "tests/provisioning_look.mjs",
@@ -18072,7 +18097,7 @@
     {
       "path": "tests/wizard_draft_resume.mjs",
       "mode": "0000644",
-      "sha256": "df40c0f2dfae806de973b782e9f693353801881659a39de88ef008de16b9905c"
+      "sha256": "0d87008084384aad7592579f3b9f3e4476e5af12fa7826d1dd77f995b33319b4"
     },
     {
       "path": "tests/wizard_front_door.mjs",
@@ -18082,7 +18107,7 @@
     {
       "path": "tests/wizard_github_feedback.mjs",
       "mode": "0000644",
-      "sha256": "c22b6d452db01032541444c5782618af5e4b3d960fcf58692d22f0ad893f793c"
+      "sha256": "153932c97b0cfb95c01c19787d7543ce80efe2ef8a8ab813e67c0376b4eb508b"
     },
     {
       "path": "tests/wizard_intent_resume.mjs",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 533 operations across 76 resource groups
+- 536 operations across 76 resource groups
 
 ## Use it from your project
 

package/clients/bongos-client/bongos-client.global.js

@@ -895,6 +895,12 @@ function createClient(opts = {}) {
       getProvisioningFleetCostLedger: (args) => request("GET", "/provisioning/fleet/cost-ledger", { hasBody: false }, args),
       // GET /provisioning/github-app/callback — rank: public — GET /provisioning/github-app/callback
       getProvisioningGithubAppCallback: (args) => request("GET", "/provisioning/github-app/callback", { hasBody: false }, args),
+      // GET /provisioning/github-app/resume — rank: any-builder — GET /provisioning/github-app/resume
+      getProvisioningGithubAppResume: (args) => request("GET", "/provisioning/github-app/resume", { hasBody: false }, args),
+      // GET /provisioning/github-app/return — rank: public — GET /provisioning/github-app/return
+      getProvisioningGithubAppReturn: (args) => request("GET", "/provisioning/github-app/return", { hasBody: false }, args),
+      // GET /provisioning/github-app/setup — rank: public — GET /provisioning/github-app/setup
+      getProvisioningGithubAppSetup: (args) => request("GET", "/provisioning/github-app/setup", { hasBody: false }, args),
       // GET /provisioning/github-app/status — rank: public — GET /provisioning/github-app/status
       getProvisioningGithubAppStatus: (args) => request("GET", "/provisioning/github-app/status", { hasBody: false }, args),
       // GET /provisioning/health — rank: public — GET /provisioning/health

package/clients/bongos-client/index.cjs

@@ -894,6 +894,12 @@ function createClient(opts = {}) {
       getProvisioningFleetCostLedger: (args) => request("GET", "/provisioning/fleet/cost-ledger", { hasBody: false }, args),
       // GET /provisioning/github-app/callback — rank: public — GET /provisioning/github-app/callback
       getProvisioningGithubAppCallback: (args) => request("GET", "/provisioning/github-app/callback", { hasBody: false }, args),
+      // GET /provisioning/github-app/resume — rank: any-builder — GET /provisioning/github-app/resume
+      getProvisioningGithubAppResume: (args) => request("GET", "/provisioning/github-app/resume", { hasBody: false }, args),
+      // GET /provisioning/github-app/return — rank: public — GET /provisioning/github-app/return
+      getProvisioningGithubAppReturn: (args) => request("GET", "/provisioning/github-app/return", { hasBody: false }, args),
+      // GET /provisioning/github-app/setup — rank: public — GET /provisioning/github-app/setup
+      getProvisioningGithubAppSetup: (args) => request("GET", "/provisioning/github-app/setup", { hasBody: false }, args),
       // GET /provisioning/github-app/status — rank: public — GET /provisioning/github-app/status
       getProvisioningGithubAppStatus: (args) => request("GET", "/provisioning/github-app/status", { hasBody: false }, args),
       // GET /provisioning/health — rank: public — GET /provisioning/health

package/clients/bongos-client/index.d.ts

@@ -132,13 +132,14 @@ export interface GetProjectSettingsShipModeResponse { mode: unknown; chosen: unk
 export interface GetProjectsFeaturedResponse { projects: unknown; page: PageInfo }
 export interface GetProjectsResponse { projects: unknown }
 export interface GetProvisioningFleetResponse { instances: unknown; capacity: unknown }
-export interface GetProvisioningGithubAppStatusResponse { ok: boolean; status: unknown; failure: unknown; ready: unknown; terminal: unknown; domain: unknown; instance_status: unknown; app_slug: unknown }
+export interface GetProvisioningGithubAppResumeResponse { ok: boolean; project: unknown }
+export interface GetProvisioningGithubAppStatusResponse { ok: boolean; status: unknown; failure: unknown; ready: unknown; terminal: unknown; domain: unknown; instance_status: unknown; app_slug: unknown; checklist: unknown; install_url: unknown; repo: unknown; verifying: unknown }
 export interface GetProvisioningHealthResponse { module: unknown; ok: boolean; coreVersion: unknown }
 export interface GetProvisioningInstancesIdEnvManifestResponse { instance: unknown; env_vars: unknown; environments: unknown; values_held: boolean; note: unknown }
 export interface GetProvisioningInstancesIdInviteSuggestionsResponse { suggested: unknown; seeking: unknown; reason: unknown; unavailable?: unknown }
 export interface GetProvisioningInstancesIdLookResponse { ok: boolean; look: unknown; options: unknown; logo_max_bytes: unknown }
 export interface GetProvisioningInstancesIdRenderResponse { ok: boolean; app: unknown; env_vars: unknown; values_held: boolean }
-export interface GetProvisioningInstancesIdResponse { instance: unknown; open_intent: unknown; github_app: unknown }
+export interface GetProvisioningInstancesIdResponse { instance: unknown; open_intent: unknown; github_app: unknown; github_setup: unknown }
 export interface GetProvisioningInstancesIdSettingsResponse { ok: boolean; settings: unknown; planet: unknown; options: unknown }
 export interface GetProvisioningInstancesResponse { instances: unknown }
 export interface GetProvisioningOnboardPlanResponse { mode: unknown; steps: unknown }
@@ -1402,6 +1403,12 @@ export interface BongosClient {
     getProvisioningFleetCostLedger(args?: RequestArgs): Promise<ApiResponse>;
     /** GET /provisioning/github-app/callback — rank: public */
     getProvisioningGithubAppCallback(args?: RequestArgs): Promise<ApiResponse>;
+    /** GET /provisioning/github-app/resume — rank: any-builder */
+    getProvisioningGithubAppResume(args?: RequestArgs): Promise<GetProvisioningGithubAppResumeResponse>;
+    /** GET /provisioning/github-app/return — rank: public */
+    getProvisioningGithubAppReturn(args?: RequestArgs): Promise<ApiResponse>;
+    /** GET /provisioning/github-app/setup — rank: public */
+    getProvisioningGithubAppSetup(args?: RequestArgs): Promise<ApiResponse>;
     /** GET /provisioning/github-app/status — rank: public */
     getProvisioningGithubAppStatus(args?: RequestArgs): Promise<GetProvisioningGithubAppStatusResponse>;
     /** GET /provisioning/health — rank: public */

package/clients/bongos-client/index.mjs

@@ -891,6 +891,12 @@ export function createClient(opts = {}) {
       getProvisioningFleetCostLedger: (args) => request("GET", "/provisioning/fleet/cost-ledger", { hasBody: false }, args),
       // GET /provisioning/github-app/callback — rank: public — GET /provisioning/github-app/callback
       getProvisioningGithubAppCallback: (args) => request("GET", "/provisioning/github-app/callback", { hasBody: false }, args),
+      // GET /provisioning/github-app/resume — rank: any-builder — GET /provisioning/github-app/resume
+      getProvisioningGithubAppResume: (args) => request("GET", "/provisioning/github-app/resume", { hasBody: false }, args),
+      // GET /provisioning/github-app/return — rank: public — GET /provisioning/github-app/return
+      getProvisioningGithubAppReturn: (args) => request("GET", "/provisioning/github-app/return", { hasBody: false }, args),
+      // GET /provisioning/github-app/setup — rank: public — GET /provisioning/github-app/setup
+      getProvisioningGithubAppSetup: (args) => request("GET", "/provisioning/github-app/setup", { hasBody: false }, args),
       // GET /provisioning/github-app/status — rank: public — GET /provisioning/github-app/status
       getProvisioningGithubAppStatus: (args) => request("GET", "/provisioning/github-app/status", { hasBody: false }, args),
       // GET /provisioning/health — rank: public — GET /provisioning/health

package/docs/api/openapi.json

@@ -16460,6 +16460,86 @@
         "security": []
       }
     },
+    "/provisioning/github-app/resume": {
+      "get": {
+        "operationId": "get_provisioning_github_app_resume",
+        "tags": [
+          "provisioning"
+        ],
+        "summary": "GET /provisioning/github-app/resume",
+        "description": "GET /provisioning/github-app/resume[?id=<n>] — the project page's \"which project am I connecting?\" read when its tab remembers nothing (task 1004650): a hand-back on another device, a fresh tab, a cleared browser. With an id: that project, if the caller owns it. Without: the caller's newest project whose GitHub checklist is not connected yet, made or last tried within a week — so opening the create page later resumes part 03 from the server's view. Either way { project: null } when there is none; never the state token. rank: any authenticated builder (requireBuilder), own projects only — no Archon override.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/provisioning/routes/github-setup.js",
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetProvisioningGithubAppResumeResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/provisioning/github-app/return": {
+      "get": {
+        "operationId": "get_provisioning_github_app_return",
+        "tags": [
+          "provisioning"
+        ],
+        "summary": "GET /provisioning/github-app/return",
+        "description": "GET /provisioning/github-app/return?state=<> — where the callback and setup pages send the founder back (task 1004650). The SERVER resolves the one-time state to the project it was minted for and 302s that project's signed-in OWNER to its part 03 (/projects?view=new&id=<id>), so the hand-back works from any tab, window or device — nothing in browser storage is read. Not signed in → through the web sign-in and back here. Signed in as anyone else, an unknown or malformed state, or a gone project → one refusal page that names no project (no oracle about which). The state stays single-use where it matters: only the manifest callback's code exchange consumes it, and this route changes nothing — it reveals a project's page only to the person who already owns it. rank: public — as a GATE: it is a browser redirect, so no middleware 401s a signed-out visitor (they are sent through sign-in instead). WHO lands is decided in-handler from the live session: the project's own owner, no Archon override, and nobody else ever learns which project the state names. It reveals no secret and writes nothing.\n\n**Rank:** `public` — No authentication — any caller.",
+        "x-rank": "public",
+        "x-source": "modules/provisioning/routes/github-setup.js",
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          }
+        },
+        "security": []
+      }
+    },
+    "/provisioning/github-app/setup": {
+      "get": {
+        "operationId": "get_provisioning_github_app_setup",
+        "tags": [
+          "provisioning"
+        ],
+        "summary": "GET /provisioning/github-app/setup",
+        "description": "GET /provisioning/github-app/setup?installation_id=&setup_action=&state= — the App's setup_url (task 1004649). GitHub sends the founder's BROWSER here after they install the app (or change its repos), carrying the state we put on the install link. GitHub's own docs warn the installation_id can be spoofed, so this route trusts NOTHING it is handed: it records only that an install was REPORTED for the attempt — which makes the runner ask GitHub, with the app's own key, whether the app really is on the repo — and hands the founder back to the project page. A missing or unknown state gets the same way back, without the attempt. rank: public — a browser redirect with no session; no secret revealed, no authority changed, the only write an audit row.\n\n**Rank:** `public` — No authentication — any caller.",
+        "x-rank": "public",
+        "x-source": "modules/provisioning/routes/github-setup.js",
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          }
+        },
+        "security": []
+      }
+    },
     "/provisioning/github-app/status": {
       "get": {
         "operationId": "get_provisioning_github_app_status",
@@ -16467,9 +16547,9 @@
           "provisioning"
         ],
         "summary": "GET /provisioning/github-app/status",
-        "description": "GET /provisioning/github-app/status?state=<> — the PUBLIC progress read the onboarding setup checklist polls (task 1004548) to know when setup is done + where to send the owner. Same public-by-state model as the callback: the unguessable, single-use `state` token is the only key, and the response reveals only the manifest lifecycle status + the instance's own (already-public) domain — never a secret. Per-IP rate-limited because the page polls it every ~3s. `ready` is true iff the manifest reached 'done' (creds placed + /healthz verified) — the setup checklist then opens https://<domain>. rank: public — no session, no mutation, no secret; an unknown state is a 404 no-op.\n\n**Rank:** `public` — No authentication — any caller.",
+        "description": "GET /provisioning/github-app/status?state=<> — the PUBLIC progress read (task 1004548; the checklist since task 1004649). Reveals the manifest lifecycle status, the instance's own (already-public) domain and repo, the App's public slug, and the four-step checklist with the one-trip install link — never a secret. `ready` is true iff sign-in is verified (the auto-open signal). `terminal` now waits for the install too: a finished sign-in with the app not yet installed is not the end of the trip. rank: public — no session, no mutation, no secret; an unknown state is a 404 no-op.\n\n**Rank:** `public` — No authentication — any caller.",
         "x-rank": "public",
-        "x-source": "modules/provisioning/routes/provisioning.js",
+        "x-source": "modules/provisioning/routes/github-setup.js",
         "responses": {
           "200": {
             "description": "Success.",
@@ -26752,6 +26832,19 @@
           "capacity"
         ]
       },
+      "GetProvisioningGithubAppResumeResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "project": {}
+        },
+        "required": [
+          "ok",
+          "project"
+        ]
+      },
       "GetProvisioningGithubAppStatusResponse": {
         "type": "object",
         "properties": {
@@ -26764,7 +26857,11 @@
           "terminal": {},
           "domain": {},
           "instance_status": {},
-          "app_slug": {}
+          "app_slug": {},
+          "checklist": {},
+          "install_url": {},
+          "repo": {},
+          "verifying": {}
         },
         "required": [
           "ok",
@@ -26774,7 +26871,11 @@
           "terminal",
           "domain",
           "instance_status",
-          "app_slug"
+          "app_slug",
+          "checklist",
+          "install_url",
+          "repo",
+          "verifying"
         ]
       },
       "GetProvisioningHealthResponse": {
@@ -26866,12 +26967,14 @@
         "properties": {
           "instance": {},
           "open_intent": {},
-          "github_app": {}
+          "github_app": {},
+          "github_setup": {}
         },
         "required": [
           "instance",
           "open_intent",
-          "github_app"
+          "github_app",
+          "github_setup"
         ]
       },
       "GetProvisioningInstancesIdSettingsResponse": {
@@ -34222,9 +34325,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 533,
-  "x-schema-count": 574,
+  "x-endpoint-count": 536,
+  "x-schema-count": 575,
   "x-undocumented-bodies": 12,
-  "x-response-schemas": 380,
+  "x-response-schemas": 381,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 533 endpoints across 94 route files.
+> **Generated from the live route files** — the route file is authoritative. 536 endpoints across 95 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust-boundary-server-enforced-permissions.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -636,7 +636,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | POST | `/api/bongos/projects/invite` | `metic+archon` | `client_id`, `github_login` | own-or-metic in effect: where to invite a builder into a project, asked by a `project.curate` holder OR the project's OWN OWNER (task 100… |
 | POST | `/api/bongos/projects/invite-guild` | `metic+archon` | `client_id`, `guild` | own-or-metic in effect, the SAME gate as POST /projects/invite above and for the same reasons (a non-inviter gets that route's unchanged … |
 
-## `provisioning` (42)
+## `provisioning` (45)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -644,7 +644,10 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | GET | `/api/bongos/provisioning/fleet` | `metic+archon` | — | GET /provisioning/fleet — the full instance roster across all owners. |
 | GET | `/api/bongos/provisioning/fleet/cost-ledger` | `metic+archon` | — | GET /provisioning/fleet/cost-ledger — per-instance monthly cost to us + estimated cost to its owner, with totals. |
 | GET | `/api/bongos/provisioning/github-app/callback` | `public` | — | GET /provisioning/github-app/callback?code=&state= — GitHub redirects the owner's BROWSER here after they approve the App Manifest (task … |
-| GET | `/api/bongos/provisioning/github-app/status` | `public` | — | GET /provisioning/github-app/status?state=<> — the PUBLIC progress read the onboarding setup checklist polls (task 1004548) to know when … |
+| GET | `/api/bongos/provisioning/github-app/resume` | `any-builder` | — | GET /provisioning/github-app/resume[?id=<n>] — the project page's "which project am I connecting?" read when its tab remembers nothing (t… |
+| GET | `/api/bongos/provisioning/github-app/return` | `public` | — | GET /provisioning/github-app/return?state=<> — where the callback and setup pages send the founder back (task 1004650). |
+| GET | `/api/bongos/provisioning/github-app/setup` | `public` | — | GET /provisioning/github-app/setup?installation_id=&setup_action=&state= — the App's setup_url (task 1004649). |
+| GET | `/api/bongos/provisioning/github-app/status` | `public` | — | GET /provisioning/github-app/status?state=<> — the PUBLIC progress read (task 1004548; the checklist since task 1004649). |
 | GET | `/api/bongos/provisioning/health` | `public` | — | GET /provisioning/health — liveness + the core version this module mounted against. |
 | GET | `/api/bongos/provisioning/instances` | `any-builder` | — | GET /provisioning/instances — the caller's own instances + each open intent. |
 | POST | `/api/bongos/provisioning/instances` | `any-builder` | `slug`, `target_ref`, `hosting_shape`, `domain`, `no_address`, `tier`, `onboard_mode`, `type`, `description`, `detail`, `modules`, `terms_acknowledged`, `demo`, `ship_mode` | POST /provisioning/instances — request a new instance. |