@bongos/core 1.21.96 → 1.21.98

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.21.96",
-  "core_contract": "1.21.96",
-  "source_commit": "7fe8cc68952fc52e5a2f6620ee7f55c89bd72728",
+  "core_version": "1.21.98",
+  "core_contract": "1.21.98",
+  "source_commit": "e830432e8980019fb401fc5aa8adf72bcca01811",
   "source_ref": "HEAD",
-  "built_at": "2026-10-09T10:00:46.973Z",
+  "built_at": "2026-10-09T11:44:35.365Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 590,
     "agent_docs_stubbed": 28,
-    "functional_verbatim": 3014,
+    "functional_verbatim": 3017,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 3633,
-  "tree_sha256": "3b6bd78cdd3212bf3c1010e59d8d2c6101c0857f1bb1bee230fb85b7f83e51ee",
+  "file_count": 3636,
+  "tree_sha256": "10aaec2a3eabaf5dd793204d82ecbfcb2fbc61dfde61a60d2a3d318c3f9503c5",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -312,12 +312,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "3e9f5bc0b7e0ede71e6ad8b88e6770faa836227d029f0d9e7e1ce5d38d94866c"
+      "sha256": "be92a792c9e31d1e9ed27daa7100b4690d1daf3058696773faa5e027fa1217f9"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "cd0300814bc05a6309264b232aaa6f14ccba9d0b1af5f379f88678c51b50452e"
+      "sha256": "38ce1804582b7c52760bcef0165d8717b12c63ec07458e758c35cfb15cd825cd"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -327,17 +327,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "714ebd69e4d8ab4d1e155e383150e6d293e45f37caea516acff7d3277d2df933"
+      "sha256": "9c53971b3f18dd7e4bc98e76259909bfc992a382bc6f8d1e771856ae88908aa9"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "1f25c3084694cef28c60e61b170cfa7d3c99cacd911a17063085c6b83b0b9eae"
+      "sha256": "eb0e60d817b14b4e301e0cf1356c2df5b4ee3064b28584cd54552a4db88bdd94"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "c8aa4619d61ebd5d3f4c593010bfad32591229de234ffa412443fc1811546926"
+      "sha256": "04f464358035a3d57a7840319acce0012ec5585cab9393a9a8b7ada8dc08acd9"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -1197,7 +1197,7 @@
     {
       "path": "docs/adr/0152-metic-task-abandonment.md",
       "mode": "0000644",
-      "sha256": "64f0fa0815727e7a5caa3ed64593f3445d4c47cb889a327cdd8f2b8465b5afad"
+      "sha256": "4fac5741dc3812f9c2229256fad097d5af627a9a00c471003145d7525f574568"
     },
     {
       "path": "docs/adr/0153-sequential-chain-runner.md",
@@ -2317,17 +2317,17 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "650244908092826b311d3b87c8943bba0c4d95d2b196698a897de3accbc5f17a"
+      "sha256": "ed7f8d58d6d1524cc80208d6658723d77f78edc612315f7c8e81df8ff77639e6"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "d4a92b1fd93c0a8b9c7e48f89d79766d5e298a2dae1fe3db588ed6fdaeff3ce1"
+      "sha256": "e1042de87b32e2c0c4846a1718776d3f9397555c765c1bcbc4d3f0c25df08c9c"
     },
     {
       "path": "docs/architecture.md",
       "mode": "0000644",
-      "sha256": "0dac6b0ee55d7836cf6352c695f592000bfd61d0c3ec06d9c17d37b476b1134a"
+      "sha256": "688331d1b50b20cca58d8a3addd72776f9531e5360635f1486f992b9793c0ec2"
     },
     {
       "path": "docs/branding-contract.md",
@@ -2347,12 +2347,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "99d765694dcd9dfcc5343f41f4202a7e24beeac1b8b48574686b0fde7eca5a4e"
+      "sha256": "1a099ad05b024aedba8a0e33212ade9859767aeb362e44d3110cb540471a3f20"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "a0820afa8785e8c5d73f3fc4680939b28b12b51ca44bc67209d390cc6853a6f1"
+      "sha256": "ed419751a6b1f63b01bf9954707634a417f9cba613597d0e3310e3e38c18e45e"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2432,7 +2432,7 @@
     {
       "path": "docs/design/project-startup-direction.md",
       "mode": "0000644",
-      "sha256": "ab970c9b8903537174d7edd6ba3980480373df9c67d88c6fad81714dfe8c185d"
+      "sha256": "d006cb1befb0fa39530e80af237cc5709ad0957cc6c3ece5909ca12dbe770f5d"
     },
     {
       "path": "docs/design/projects-hub-direction-v2.md",
@@ -2862,7 +2862,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "fe148fd74b342e433645b14587ff11c31faf3bccdedd032335d254bbc5afaa5d"
+      "sha256": "7d7a017bb5c1bb3a0af17cd04a2b747a9df2a2fdb26879cb431096eb6d4cf9c0"
     },
     {
       "path": "docs/modules-contract.md",
@@ -2952,7 +2952,7 @@
     {
       "path": "docs/page-readings.json",
       "mode": "0000644",
-      "sha256": "6dafc2854956f0628a7a1ad6fe0c47dd4c530e7e3962c3664b8c87b5e9ba96c3"
+      "sha256": "64bfd69c24b6f0a1c99b5cea536b6730c0d1a212d71f97e9e9fe4fe07322e9dd"
     },
     {
       "path": "docs/project-context.template.md",
@@ -4084,6 +4084,11 @@
       "mode": "0000644",
       "sha256": "7a1348d5d881859db66a0bacd9e2956d8b16a8ddcaf4f65e91408508a6c8d35b"
     },
+    {
+      "path": "migrations/core_274_parked_backlog_stays_parked.sql",
+      "mode": "0000644",
+      "sha256": "48266ddb9168d1240029ecf6e69572010512dddc219d0f0cb4d6b373775752eb"
+    },
     {
       "path": "modules/agents/CLAUDE.md",
       "mode": "0000644",
@@ -6307,22 +6312,22 @@
     {
       "path": "modules/hall-ui/public/studio-lib.js",
       "mode": "0000644",
-      "sha256": "c59012e9d27e88131dc2151cc5d1d264b0fd426b6788580afb12947a7a3b7f48"
+      "sha256": "13510574f86779136d6c05d12739974cb84090ee80e1c494c83c20745ec3baeb"
     },
     {
       "path": "modules/hall-ui/public/studio.css",
       "mode": "0000644",
-      "sha256": "65f5dea97cb00594b3158b9147456f973a744d36c2cc5bbc557e858d4398a810"
+      "sha256": "9a3b85b8760200225d26fa062b8c95470f7b6902889a51a422c7f4787d73bc80"
     },
     {
       "path": "modules/hall-ui/public/studio.html",
       "mode": "0000644",
-      "sha256": "810d8263b6d7d0bc4ea1cfbe4f9c61593c9d98dc848064a5dcea745f5f2cd08f"
+      "sha256": "7c7053c61fd30cd79fd131f25058f1cf169c9d8610427664010dc09fb08f2fba"
     },
     {
       "path": "modules/hall-ui/public/studio.js",
       "mode": "0000644",
-      "sha256": "5e94a4cd19f2e29bd4f7125473568887e3d9782e50221fb478825aef177d70d7"
+      "sha256": "f3a9fa920f732bddf245148c4faff10a52e88724b33800ae440b37e9aa1cd1da"
     },
     {
       "path": "modules/hall-ui/public/studio.states.json",
@@ -6582,7 +6587,7 @@
     {
       "path": "modules/hall-ui/records/studio.md",
       "mode": "0000644",
-      "sha256": "3858a0613dba085da127375b055308b0b21d42c78871b51bf9692a25f76d2e02"
+      "sha256": "794b41537bbae12a111bfe69ff856653a14154827cfc7039ccf05a1231504174"
     },
     {
       "path": "modules/hall-ui/records/tweak-editor.md",
@@ -6927,12 +6932,12 @@
     {
       "path": "modules/lifecycle/db-ship.js",
       "mode": "0000644",
-      "sha256": "1b2c55becb653ff92eea3bc202bdef855b0b46c2cdb247a2e738eb5b626d2c22"
+      "sha256": "982d65a4e74063ba914a48ace9e95b595bd1540ea27b1c9f47a842c82f8c9ff6"
     },
     {
       "path": "modules/lifecycle/db-tasks.js",
       "mode": "0000644",
-      "sha256": "d611c0e5dd9b1f38779b97f6585bb02bdc9fda1a20453348cf86f978e4abb8b5"
+      "sha256": "710e4c97c0b67a3b258d6997ba9dc485e42bb57a0988777c0f10f8391b952489"
     },
     {
       "path": "modules/lifecycle/db-versions.js",
@@ -7387,7 +7392,7 @@
     {
       "path": "modules/lifecycle/routes/tasks.js",
       "mode": "0000644",
-      "sha256": "564dabb3de1eee96e374160d39f57c61100bca843ebac2b2267aa4693ec5038f"
+      "sha256": "1ced2b26ca9ce2e755e7ac1ce5b56130785041119a9373e3290250ee4b790ff4"
     },
     {
       "path": "modules/lifecycle/routes/version-route-authz.js",
@@ -8267,7 +8272,7 @@
     {
       "path": "modules/provisioning/github-setup.js",
       "mode": "0000644",
-      "sha256": "5bce3df9db40089e773d6cf45ae116ccab50b68ecd385df361a09c6aa6c8fe5c"
+      "sha256": "78d6aa74315507f0de80b676858fd2c952cdf1e2038b197326bded06b5708170"
     },
     {
       "path": "modules/provisioning/look.js",
@@ -8577,7 +8582,7 @@
     {
       "path": "modules/provisioning/routes/github-setup.js",
       "mode": "0000644",
-      "sha256": "1551d38419839bc2ad84cb1cbd819419e15d00ead14e3b68e61f65d422dc8629"
+      "sha256": "7d4bd8f7eec5d7f7ca5433a3e0499d53e51553daa3e2fcb1dbac1e346ce90238"
     },
     {
       "path": "modules/provisioning/routes/look.js",
@@ -8587,7 +8592,7 @@
     {
       "path": "modules/provisioning/routes/provisioning.js",
       "mode": "0000644",
-      "sha256": "9e195130cfd5fd1b9ef086f2e33bf1a6a91afe2fcaa234b8e45f0c2bedf198a6"
+      "sha256": "336ac83ef1fcdc91416bd6ca4d0cd040a2b926e0b695a9fbd528a5ab262a4974"
     },
     {
       "path": "modules/provisioning/routes/render-standup.js",
@@ -9337,7 +9342,7 @@
     {
       "path": "modules/public-landing/public/projects.html",
       "mode": "0000644",
-      "sha256": "600e34896afe2f555bf8651a3636a07fbf0156ceda1ad2aa84ab2d2d7b161a77"
+      "sha256": "b74e1e16220642c2a304f7e8cb776e239af14944c1212f4e32a675d840d731e2"
     },
     {
       "path": "modules/public-landing/public/projects.probes.json",
@@ -10117,12 +10122,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "1108a8c0201d8bf012906969b018d65498d9fab8d3d399e9ba86df6388d713b2"
+      "sha256": "8430c9bf8e4cfbf413316f9b99f85ddfb2dca688374f65373c3959d3f5d67d1a"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "f03398091a4557a6f0347eda8a60d38fa846bb10b9df44fc242ec4b1b0de4ec9"
+      "sha256": "ff69b26fc946bd74d06693048dd4cb7495107d8ee6fef45b45d5c678bce417a5"
     },
     {
       "path": "public-docs/index.html",
@@ -10142,7 +10147,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "eb303846cdf391b5bbf69c5a0d5ab480e804a23e15c324e9b1e63aee43f24555"
+      "sha256": "feedbd41f5e5808a38ee9478e01a5060197e78ea317797cee594931e24aeb8bc"
     },
     {
       "path": "scripts/cron/style_guide_audit.sh",
@@ -11157,7 +11162,7 @@
     {
       "path": "scripts/gds/provision-github-setup.js",
       "mode": "0000644",
-      "sha256": "aa0927e26143328727f3c752f2ebb337a840ae76bf699bc10930cb6182c51146"
+      "sha256": "03a8b05edf56250283946993eaa429c7063696029fd0f5e23d2e834e90034692"
     },
     {
       "path": "scripts/gds/provision-net.js",
@@ -11207,7 +11212,7 @@
     {
       "path": "scripts/gds/provision.js",
       "mode": "0000644",
-      "sha256": "4f4857e34141db1d78cfec4b0b7f735658893aba946f53348c2430fe852b2a93"
+      "sha256": "772a2586d3601723f096f74f9d8aad82d418c5dce4dc9cb8809525ecd4a005ba"
     },
     {
       "path": "scripts/gds/publish-credential-check.js",
@@ -12412,7 +12417,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "f836e60518d2f8b4e6f54235518d1f4e7bde80d9c226268c8880418fe1008812"
+      "sha256": "7a9984b85013e6be20e59eb846c78da89ea7f62b650aa3f3c7bf9d3fda539e53"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -12487,7 +12492,7 @@
     {
       "path": "tests/abandon_task.mjs",
       "mode": "0000644",
-      "sha256": "bcf19d27a76fd9fbafc3791f6a46d9636453427dc1c50940069673781eb817bc"
+      "sha256": "598f0ee6d3634dc23aeb391d2dc9644dc6a0e8287d47de7d6374cceebe9c96f3"
     },
     {
       "path": "tests/access_requests_invite.mjs",
@@ -14042,12 +14047,17 @@
     {
       "path": "tests/github_one_trip.mjs",
       "mode": "0000644",
-      "sha256": "b04dbcd87504e696367a03db39c0a3c0ae9b647039ab25b354c89884c74d2ba5"
+      "sha256": "74d7041230f6b0f3370093d8417f61b3557b1b4b408fa56fc07968a5e0187f4d"
     },
     {
       "path": "tests/github_org_account.mjs",
       "mode": "0000644",
-      "sha256": "0745d0da6a5bd0494fc067756285ffedff62a6fd946aa1508690321d5f52cee2"
+      "sha256": "576f0f0e5c2cf483ce64de1c444e66999a2a772c5d1cb2b1e56a211549871a6f"
+    },
+    {
+      "path": "tests/github_pick_up.mjs",
+      "mode": "0000644",
+      "sha256": "448de823c452326e4f86bbd3de84180f349f8d81371339590abfae738e1788bf"
     },
     {
       "path": "tests/github_push_ancestry.mjs",
@@ -14922,7 +14932,7 @@
     {
       "path": "tests/hall_studio_home.mjs",
       "mode": "0000644",
-      "sha256": "ff68748598091253bb643deb47ca73023e188a5320f21536489f62ac69cd2cbb"
+      "sha256": "0079447c51ccac1d4e25ca488c7b7df11a8aa79bce7f82a901ad6b10710fc38f"
     },
     {
       "path": "tests/hall_studio_world.mjs",
@@ -16124,6 +16134,11 @@
       "mode": "0000644",
       "sha256": "2f9996efb0ed59579e000cd105a0b461dbcf80f5f08def5c4535a849b16bc963"
     },
+    {
+      "path": "tests/parked_backlog_stays_parked.mjs",
+      "mode": "0000644",
+      "sha256": "f87af6b6768e29d523a7b47f63f1a4940037f8ab8bbfe224570ccb03af9cee03"
+    },
     {
       "path": "tests/parse_cookie_decode.mjs",
       "mode": "0000644",
@@ -16437,7 +16452,7 @@
     {
       "path": "tests/projects_hub_pre_uat.mjs",
       "mode": "0000644",
-      "sha256": "e580ed2ea20556cc60f4160ace7316e8691b30f020c0701e783811ae0f134860"
+      "sha256": "5a0a072fbb78010e547cd9c177bd2bfb80c0f5ee9e08e16d8b00094a04b2b83e"
     },
     {
       "path": "tests/projects_hub_render_connect.mjs",
@@ -16467,7 +16482,7 @@
     {
       "path": "tests/promotion_triggers_skip_cascade.mjs",
       "mode": "0000644",
-      "sha256": "ce1de49cfe554f3e5fa4ae9a784a8ba41d537571c9ae6307f72c2710e693f6aa"
+      "sha256": "acb8c2f7f2bc100e9bb637035c69a443e942d8623872cb4d51edccd2b804c6e6"
     },
     {
       "path": "tests/prose_edits.mjs",
@@ -16602,7 +16617,7 @@
     {
       "path": "tests/provisioning_github_app_routes.mjs",
       "mode": "0000644",
-      "sha256": "c8969d3782cbc6d9b3b4c776cdf8c3f2e0bc5282d6cb7af3a82c5164034416a1"
+      "sha256": "ffbefb8d490fd5dbb2793c6d82afb60b8b900ce4a053be9d5f8db08cace32feb"
     },
     {
       "path": "tests/provisioning_look.mjs",
@@ -18112,7 +18127,7 @@
     {
       "path": "tests/wizard_github_feedback.mjs",
       "mode": "0000644",
-      "sha256": "153932c97b0cfb95c01c19787d7543ce80efe2ef8a8ab813e67c0376b4eb508b"
+      "sha256": "efcdc79ae0d4b2dece25dd483863ce1ad3249f0b836d7e1791c2b61cc4a56939"
     },
     {
       "path": "tests/wizard_intent_resume.mjs",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 538 operations across 76 resource groups
+- 539 operations across 76 resource groups
 
 ## Use it from your project
 

package/clients/bongos-client/bongos-client.global.js

@@ -939,6 +939,8 @@ function createClient(opts = {}) {
       postProvisioningInstancesIdForceTeardown: (args) => request("POST", "/provisioning/instances/{id}/force-teardown", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/github-app — rank: any-builder — POST /provisioning/instances/:id/github-app
       postProvisioningInstancesIdGithubApp: (args) => request("POST", "/provisioning/instances/{id}/github-app", { hasBody: true }, args),
+      // POST /provisioning/instances/{id}/github-app/pick-up — rank: any-builder — POST /provisioning/instances/:id/github-app/pick-up
+      postProvisioningInstancesIdGithubAppPickUp: (args) => request("POST", "/provisioning/instances/{id}/github-app/pick-up", { hasBody: true }, args),
       // GET /provisioning/instances/{id}/invite-suggestions — rank: any-builder — GET /provisioning/instances/:id/invite-suggestions
       getProvisioningInstancesIdInviteSuggestions: (args) => request("GET", "/provisioning/instances/{id}/invite-suggestions", { hasBody: false }, args),
       // DELETE /provisioning/instances/{id}/logo — rank: any-builder — DELETE /provisioning/instances/:id/logo

package/clients/bongos-client/index.cjs

@@ -938,6 +938,8 @@ function createClient(opts = {}) {
       postProvisioningInstancesIdForceTeardown: (args) => request("POST", "/provisioning/instances/{id}/force-teardown", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/github-app — rank: any-builder — POST /provisioning/instances/:id/github-app
       postProvisioningInstancesIdGithubApp: (args) => request("POST", "/provisioning/instances/{id}/github-app", { hasBody: true }, args),
+      // POST /provisioning/instances/{id}/github-app/pick-up — rank: any-builder — POST /provisioning/instances/:id/github-app/pick-up
+      postProvisioningInstancesIdGithubAppPickUp: (args) => request("POST", "/provisioning/instances/{id}/github-app/pick-up", { hasBody: true }, args),
       // GET /provisioning/instances/{id}/invite-suggestions — rank: any-builder — GET /provisioning/instances/:id/invite-suggestions
       getProvisioningInstancesIdInviteSuggestions: (args) => request("GET", "/provisioning/instances/{id}/invite-suggestions", { hasBody: false }, args),
       // DELETE /provisioning/instances/{id}/logo — rank: any-builder — DELETE /provisioning/instances/:id/logo

package/clients/bongos-client/index.d.ts

@@ -134,7 +134,7 @@ export interface GetProjectsFeaturedResponse { projects: unknown; page: PageInfo
 export interface GetProjectsResponse { projects: unknown }
 export interface GetProvisioningFleetResponse { instances: unknown; capacity: unknown }
 export interface GetProvisioningGithubAppResumeResponse { ok: boolean; project: unknown }
-export interface GetProvisioningGithubAppStatusResponse { ok: boolean; status: unknown; failure: unknown; ready: unknown; terminal: unknown; domain: unknown; instance_status: unknown; app_slug: unknown; checklist: unknown; install_url: unknown; repo: unknown; verifying: unknown; app_org: unknown }
+export interface GetProvisioningGithubAppStatusResponse { ok: boolean; status: unknown; failure: unknown; ready: unknown; terminal: unknown; domain: unknown; instance_status: unknown; app_slug: unknown; checklist: unknown; install_url: unknown; repo: unknown; verifying: unknown; app_org: unknown; pick_up: unknown }
 export interface GetProvisioningHealthResponse { module: unknown; ok: boolean; coreVersion: unknown }
 export interface GetProvisioningInstancesIdEnvManifestResponse { instance: unknown; env_vars: unknown; environments: unknown; values_held: boolean; note: unknown }
 export interface GetProvisioningInstancesIdInviteSuggestionsResponse { suggested: unknown; seeking: unknown; reason: unknown; unavailable?: unknown }
@@ -1448,6 +1448,8 @@ export interface BongosClient {
     postProvisioningInstancesIdForceTeardown(args?: RequestArgs): Promise<PostProvisioningInstancesIdForceTeardownResponse>;
     /** POST /provisioning/instances/{id}/github-app — rank: any-builder */
     postProvisioningInstancesIdGithubApp(args?: RequestArgs & { body?: PostProvisioningInstancesIdGithubAppRequest }): Promise<PostProvisioningInstancesIdGithubAppResponse>;
+    /** POST /provisioning/instances/{id}/github-app/pick-up — rank: any-builder */
+    postProvisioningInstancesIdGithubAppPickUp(args?: RequestArgs): Promise<ApiResponse>;
     /** GET /provisioning/instances/{id}/invite-suggestions — rank: any-builder */
     getProvisioningInstancesIdInviteSuggestions(args?: RequestArgs): Promise<GetProvisioningInstancesIdInviteSuggestionsResponse>;
     /** DELETE /provisioning/instances/{id}/logo — rank: any-builder */

package/clients/bongos-client/index.mjs

@@ -935,6 +935,8 @@ export function createClient(opts = {}) {
       postProvisioningInstancesIdForceTeardown: (args) => request("POST", "/provisioning/instances/{id}/force-teardown", { hasBody: true }, args),
       // POST /provisioning/instances/{id}/github-app — rank: any-builder — POST /provisioning/instances/:id/github-app
       postProvisioningInstancesIdGithubApp: (args) => request("POST", "/provisioning/instances/{id}/github-app", { hasBody: true }, args),
+      // POST /provisioning/instances/{id}/github-app/pick-up — rank: any-builder — POST /provisioning/instances/:id/github-app/pick-up
+      postProvisioningInstancesIdGithubAppPickUp: (args) => request("POST", "/provisioning/instances/{id}/github-app/pick-up", { hasBody: true }, args),
       // GET /provisioning/instances/{id}/invite-suggestions — rank: any-builder — GET /provisioning/instances/:id/invite-suggestions
       getProvisioningInstancesIdInviteSuggestions: (args) => request("GET", "/provisioning/instances/{id}/invite-suggestions", { hasBody: false }, args),
       // DELETE /provisioning/instances/{id}/logo — rank: any-builder — DELETE /provisioning/instances/:id/logo

package/docs/adr/0152-metic-task-abandonment.md

@@ -37,6 +37,8 @@ That was tolerable while abandon *was* Archon-only (the person who could break i
 
 Restore lands in `backlog`, never straight to `ready`. The task was retired deliberately; bringing it back should re-enter it as un-workable and require a second, explicit promote to become claimable. The restore branch returns before the reward gate ([ADR 0096](0096-require-reward-before-workable.md)) — that is a promote-to-*workable* concern, and `backlog` is the pre-workable state, the same reasoning `/demote` already uses.
 
+**Amendment (task 1004592, migration `core_274`).** Landing in `backlog` was not enough on its own: the promotion sweep (`promoteUnblockedBacklogTasks`) drains every backlog row with no unmet dependency and no open blocker, so a restored task was promoted on the next reconciler tick and the "second, explicit promote" never had to happen (observed on task 1003397, 2026-10-06). A restore — and `POST /tasks/:id/demote` — now stamps `tasks.parked_at` / `parked_by`. The sweep and the three promotion triggers skip a parked row, and a trigger clears the stamp whenever the task leaves `backlog`, so a person's promote is the only way out. A task filed straight into backlog by hand is not parked; that intent is not recorded at create time.
+
 The backing `db.restoreTask` is the mirror of `db.abandonTask`: `SELECT … FOR UPDATE`, guard, single `UPDATE`, commit, with `TASK_NOT_FOUND` / `TASK_NOT_ABANDONED` as its refusals. It clears the `value_summary = 'Abandoned: <reason>'` stamp abandon writes — and *only* that stamp (`CASE WHEN value_summary LIKE 'Abandoned: %'`) — so a restored task never carries a retire note into a later ship card or `#ship-news` broadcast, while an unrelated summary survives.
 
 ### What is unchanged

package/docs/api/openapi.json

@@ -17510,6 +17510,51 @@
         ]
       }
     },
+    "/provisioning/instances/{id}/github-app/pick-up": {
+      "post": {
+        "operationId": "post_provisioning_instances_id_github_app_pick_up",
+        "tags": [
+          "provisioning"
+        ],
+        "summary": "POST /provisioning/instances/:id/github-app/pick-up",
+        "description": "POST /provisioning/instances/:id/github-app/pick-up — \"Pick up where it stopped\" and \"Check again\" (task 1004652). It resumes the latest attempt from the step it stopped at, with the app GitHub already made, and never mints a new link: 'convert' puts an approved attempt whose code is still young back in the runner's queue; 'check' records a check request, which re-opens the runner's checking window for sign-in, the install and device flow. Every other pick-up is the page's own ('reopen' and 'fresh' go through the mint route, whose guard reuses or refuses; 'operator' files a blocker), so they are a 409 naming the action. Answers with the fresh read. rank: any authenticated builder (requireBuilder), the project's OWNER only — no Archon override, as with the mint route; anyone else gets the same 404 as a missing project.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/provisioning/routes/github-setup.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/provisioning/instances/{id}/invite-suggestions": {
       "get": {
         "operationId": "get_provisioning_instances_id_invite_suggestions",
@@ -23515,7 +23560,7 @@
           "tasks"
         ],
         "summary": "POST /tasks/:id/demote",
-        "description": "POST /tasks/:id/demote — the strict inverse of /promote: flip a task ready→backlog and nothing else. Use case (task 1223): a dependency-gated task that was wrongly promoted to ready needs to go back to backlog without hand-SQL on prod. Mirrors /promote's auth (Metic+ — scope mutation, ADR 0090). Strictly ready→backlog: refuse any other current status (blocked, active, or any later lifecycle state). A claimed task is `active`, so this gate also refuses demoting work that's already in flight — demote is not a way to yank a task out from under its claim holder. No reward side-effects (the reward gate is a promote-only concern; backlog is the pre-workable state). rank: metic+archon — ready→backlog demotion; scope mutation; mirrors /promote (ADR 0090).\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `task.demote` (all required).",
+        "description": "POST /tasks/:id/demote — the strict inverse of /promote: flip a task ready→backlog and nothing else. Use case (task 1223): a dependency-gated task that was wrongly promoted to ready needs to go back to backlog without hand-SQL on prod. Mirrors /promote's auth (Metic+ — scope mutation, ADR 0090). Strictly ready→backlog: refuse any other current status (blocked, active, or any later lifecycle state). A claimed task is `active`, so this gate also refuses demoting work that's already in flight — demote is not a way to yank a task out from under its claim holder. No reward side-effects (the reward gate is a promote-only concern). The task lands PARKED so the sweep leaves it (1004592). rank: metic+archon — ready→backlog demotion; scope mutation; mirrors /promote (ADR 0090).\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `task.demote` (all required).",
         "x-rank": "metic+archon",
         "x-source": "modules/lifecycle/routes/tasks.js",
         "x-permissions": [
@@ -23992,7 +24037,7 @@
           "tasks"
         ],
         "summary": "POST /tasks/:id/promote",
-        "description": "backlog→ready promotion; scope mutation; ADR 0090 (was archon). Also the UN-ABANDON path (ADR 0152): 'abandoned' → 'backlog'. When abandon moved down to Metic+ it needed an undo at the same rank, or a Metic's mis-retire would be unrecoverable without Archon SQL (no other route restores an abandoned task — PATCH refuses `status` outright). A restore lands in **backlog**, never straight to ready: the task was retired for a reason, so it re-enters as un-workable and takes a second, deliberate promote to become claimable again.\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `task.promote` (all required).",
+        "description": "backlog→ready promotion; scope mutation; ADR 0090 (was archon). Also the UN-ABANDON path (ADR 0152): 'abandoned' → 'backlog'. When abandon moved down to Metic+ it needed an undo at the same rank, or a Metic's mis-retire would be unrecoverable without Archon SQL (no other route restores an abandoned task — PATCH refuses `status` outright). A restore lands in **backlog**, never straight to ready: the task was retired for a reason, so it re-enters PARKED (core_274, task 1004592 — the promotion sweep skips it) and only a second promote frees it.\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `task.promote` (all required).",
         "x-rank": "metic+archon",
         "x-source": "modules/lifecycle/routes/tasks.js",
         "x-permissions": [
@@ -26954,7 +26999,8 @@
           "install_url": {},
           "repo": {},
           "verifying": {},
-          "app_org": {}
+          "app_org": {},
+          "pick_up": {}
         },
         "required": [
           "ok",
@@ -26969,7 +27015,8 @@
           "install_url",
           "repo",
           "verifying",
-          "app_org"
+          "app_org",
+          "pick_up"
         ]
       },
       "GetProvisioningHealthResponse": {
@@ -34427,7 +34474,7 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 538,
+  "x-endpoint-count": 539,
   "x-schema-count": 576,
   "x-undocumented-bodies": 12,
   "x-response-schemas": 382,

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 538 endpoints across 95 route files.
+> **Generated from the live route files** — the route file is authoritative. 539 endpoints across 95 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust-boundary-server-enforced-permissions.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -638,7 +638,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | POST | `/api/bongos/projects/invite` | `metic+archon` | `client_id`, `github_login` | own-or-metic in effect: where to invite a builder into a project, asked by a `project.curate` holder OR the project's OWN OWNER (task 100… |
 | POST | `/api/bongos/projects/invite-guild` | `metic+archon` | `client_id`, `guild` | own-or-metic in effect, the SAME gate as POST /projects/invite above and for the same reasons (a non-inviter gets that route's unchanged … |
 
-## `provisioning` (45)
+## `provisioning` (46)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -666,6 +666,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | DELETE | `/api/bongos/provisioning/instances/:id/env-manifest/:varId` | `any-builder` | — | DELETE — remove one declaration. |
 | POST | `/api/bongos/provisioning/instances/:id/force-teardown` | `metic+archon` | — | POST /provisioning/instances/:id/force-teardown — Archon tears down ANY instance. |
 | POST | `/api/bongos/provisioning/instances/:id/github-app` | `any-builder` | `account`, `org` | POST /provisioning/instances/:id/github-app — mint a GitHub-App-Manifest onboarding link for the caller's OWN instance (task 2080, ADR 01… |
+| POST | `/api/bongos/provisioning/instances/:id/github-app/pick-up` | `any-builder` | — | POST /provisioning/instances/:id/github-app/pick-up — "Pick up where it stopped" and "Check again" (task 1004652). |
 | GET | `/api/bongos/provisioning/instances/:id/invite-suggestions` | `any-builder` | — | ── Who is worth inviting (BV1.R28, task 1002347, goal 1000046 C6) ──────── GET /provisioning/instances/:id/invite-suggestions — turn the … |
 | PUT | `/api/bongos/provisioning/instances/:id/logo` | `any-builder` | `image_b64`, `content_type` | PUT …/logo — rank: any authenticated builder (own resource; archon may change any). |
 | DELETE | `/api/bongos/provisioning/instances/:id/logo` | `any-builder` | validated | DELETE …/logo — rank: any authenticated builder (own resource; archon may change any). |

package/docs/architecture.md

@@ -108,6 +108,9 @@ versions(id PK 'V1'|'PMS-V1'..., name, track, status, scope_doc_path, ...)  -- t
 tasks(id, version_id, title, description, status, touches text[], est_minutes, est_cost_usd,
       manual_degree, priority, automation_tag, credits_reward, source, source_ref,
       promoted_at, shipped_at, shipped_by, value_summary, created_at, updated_at)
+  + parked_at, parked_by (mig core_274, task 1004592) -- a PERSON put this task in backlog (restore
+    or /demote); the promotion sweep and the three promotion triggers skip it, and a trigger clears
+    both whenever status leaves 'backlog'
   + visual_url, visual_alt (mig core_223, task 1003109) -- the OPTIONAL ship-time VISUAL: a
     screenshot / before-after / diagram, stored on disk under <INSTANCE ROOT>/var/task-visuals/
     (never inside the installed core package, which every upgrade replaces; task 1004381) and served by