@bongos/core 1.24.14 → 1.24.16

package/modules/public-landing/public/assets/hub-bar.js

@@ -116,14 +116,57 @@
     fetch(API + '/auth/logout', { method: 'POST', credentials: 'same-origin' }).then(finish, finish);
   });
 
+  // ---- the Link GitHub chip (task 1004996): signed in with no GitHub linked ----
+  // Very small and quiet: one link at the head of the bar's right side, carrying
+  // the engineer's icon (the hall's craft-mode.js ICONS.building), never a pop-up
+  // or banner. It starts the link (ADR 0396), whose answer lands on /account. A
+  // read that fails, or a child with no sign-in-methods route, draws nothing.
+  // Only a stand-in login (~<handle>, the Google-only row) is asked about:
+  // linking GitHub writes the real login over it, so anyone else has GitHub
+  // and costs no read. projects.html keeps its own copy, as it does of the bands.
+  var GH_TITLE = 'Link GitHub — needed for coding work';
+  function githubChip(me) {
+    var old = $('ghChip');
+    if (!me || String(me.github_login || '').charAt(0) !== '~') { if (old) old.remove(); return null; }
+    return fetch(API + '/me/sign-in-methods', { method: 'GET', credentials: 'same-origin', headers: { Accept: 'application/json' } })
+      .then(function (res) { return res.ok ? res.json() : null; })
+      .then(function (d) {
+        var methods = d && Array.isArray(d.methods) ? d.methods : null;
+        var show = !!methods && !methods.some(function (m) { return m && m.provider === 'github'; });
+        var bar = show && document.querySelector('.barRight');
+        if (!bar) { if ($('ghChip')) $('ghChip').remove(); return false; }
+        if ($('ghChip')) return true;
+        var a = document.createElement('a');
+        a.className = 'ghChip';
+        a.id = 'ghChip';
+        a.href = API + '/auth/link/github/start';
+        a.title = GH_TITLE;
+        a.setAttribute('aria-label', GH_TITLE);
+        var svg = document.createElementNS('http://www.w3.org/2000/svg', 'svg');
+        svg.setAttribute('viewBox', '0 0 16 16');
+        svg.setAttribute('aria-hidden', 'true');
+        var path = document.createElementNS('http://www.w3.org/2000/svg', 'path');
+        path.setAttribute('d', 'M2 13.5h12M3.5 13.5V8.5h4v5M7.5 13.5V4.5h5v9');
+        svg.appendChild(path);
+        var label = document.createElement('span');
+        label.className = 'ghChip__label';
+        label.textContent = 'Link GitHub';
+        a.appendChild(svg);
+        a.appendChild(label);
+        bar.insertBefore(a, bar.firstChild);
+        return true;
+      }, function () { return false; });
+  }
+
   // ---- the identity read: the hub's own GET /me ----
   var ready = fetch(API + '/me', { method: 'GET', credentials: 'same-origin', headers: { Accept: 'application/json' } })
     .then(function (res) { return res.ok ? res.json().catch(function () { return null; }) : null; })
     .then(function (d) {
       var me = d ? (d.builder || d.me || d) : null;
       paint(me);
+      githubChip(me);
       return me;
     }, function () { paint(null); return null; });
 
-  window.HubBar = { paint: paint, ready: ready };
+  window.HubBar = { paint: paint, ready: ready, githubChip: githubChip };
 })();

package/modules/public-landing/public/privacy.html

@@ -124,10 +124,14 @@
     <ul>
       <li><b>GitHub</b> — for signing in, and for the repositories your projects ship to.</li>
       <li><b>The AI model provider</b> — when a shipped task is graded, the change it made is sent to the model the grader runs on, Anthropic's Claude, under the key of the builder or the instance.</li>
+      <li><b>AI features, through OpenRouter</b> — when you use AI Studio, your prompt, the files you attach, and short notes about the project are sent through OpenRouter to the AI company whose model answers (for example Google's Gemini). We set OpenRouter to use only companies that do not keep your prompts or train on them. Your requests, files and results are stored here so you can see them again, with what each one cost.</li>
       <!--apex-only:start--><li><b>Hosting</b> — projects hosted by the platform run on servers rented from DigitalOcean, with their web address and traffic passing through Cloudflare.</li><!--apex-only:end-->
     </ul>
     <p>Nothing is sold, and nothing is shared for advertising.</p>
 
+    <h2>Your age</h2>
+    <p>If you record your age, only its band is kept (for example "adult" or "16 to 17"), not your birthday. It decides whether you can be paid and whether you can use the AI features, which are for adults only.</p>
+
     <h2>Session length, and Leaving</h2>
     <p>Sign out to end a session. Browser sessions expire on their own; command-line tokens last until you revoke them from your settings.</p>
     <p>Your builder record and your shipped work stay attributed to you after you leave — the ledger of who built what is the point of the platform. The owner can deactivate a builder: that ends their sessions and releases their claims, and keeps the record.</p>
@@ -135,7 +139,7 @@
 
     <h2>The code is open</h2>
     <p>Every part of this — what is stored, where, and for how long — is public. This site runs Cloud Bongos, free software under the AGPL-3.0. <a href="{{sourceRepoUrl}}">Read the source.</a></p>
-    <p>This statement describes the software as it ships and changes when the software does. Revised August 2026.</p>
+    <p>This statement describes the software as it ships and changes when the software does. Revised October 2026.</p>
   </section>
 </main>
 

package/modules/public-landing/public/projects-google.states.json

@@ -0,0 +1,14 @@
+{
+  "_": "The Link GitHub chip on the hub (task 1004996): a Google-only person signed in on the sky, so projects.html's own bar copy draws the very small chip with the engineer's icon at the head of its right side. stub.fixtures points the identity at fixtures/me-google.json (the stand-in login ~builder) and the ways-in read at fixtures/me-sign-in-methods-google.json; the default projects.states.json (GitHub linked) draws none.",
+  "page": "/projects",
+  "surface": "public-landing",
+  "stub": { "fixtures": { "me": "me-google", "me__sign-in-methods": "me-sign-in-methods-google" } },
+  "modes": ["dark"],
+  "modeQuery": false,
+  "ignoreRequests": ["/api/(gds|bongos)/me$", "/my-projects", "/api/bongos/instance$"],
+  "ignoreConsole": ["/api/(gds|bongos)/me", "\\b401\\b", "\\b404\\b", "Unauthorized"],
+  "ignoreControls": [".skip", ".vh"],
+  "states": {
+    "in-google": { "auth": true, "actions": [["wait", 800]], "expect": { "visible": ["#ghChip", "#who"], "attr": [["#ghChip", "href", "/api/bongos/auth/link/github/start"]] } }
+  }
+}

package/modules/public-landing/public/projects.html

@@ -11818,6 +11818,44 @@ summary{min-height:24px;padding:3px 0;}
     if (!signedIn && $('onlyMine').checked) { $('onlyMine').checked = false; applyMapFilter(); }
   }
 
+  /* The Link GitHub chip (task 1004996): signed in with no GitHub linked, one very
+     small link at the head of the bar's right side with the engineer's icon. It
+     starts the link (ADR 0396); the answer lands on /account. A failed read, or a
+     child with no sign-in-methods route, draws nothing. Only a stand-in login
+     (~<handle>) is asked about: linking GitHub writes the real login over it.
+     assets/hub-bar.js keeps the same lines for the pages without views; change both. */
+  var GH_TITLE = 'Link GitHub — needed for coding work';
+  function githubChip() {
+    if (!me || String(me.github_login || '').charAt(0) !== '~') return;
+    fetch(API + '/me/sign-in-methods', { method: 'GET', credentials: 'same-origin', headers: { Accept: 'application/json' } })
+      .then(function (res) { return res.ok ? res.json() : null; })
+      .then(function (d) {
+        var methods = d && Array.isArray(d.methods) ? d.methods : null;
+        var show = !!methods && !methods.some(function (m) { return m && m.provider === 'github'; });
+        var bar = show && document.querySelector('.barRight');
+        if (!bar) { if ($('ghChip')) $('ghChip').remove(); return; }
+        if ($('ghChip')) return;
+        var a = document.createElement('a');
+        a.className = 'ghChip';
+        a.id = 'ghChip';
+        a.href = API + '/auth/link/github/start';
+        a.title = GH_TITLE;
+        a.setAttribute('aria-label', GH_TITLE);
+        var svg = document.createElementNS('http://www.w3.org/2000/svg', 'svg');
+        svg.setAttribute('viewBox', '0 0 16 16');
+        svg.setAttribute('aria-hidden', 'true');
+        var path = document.createElementNS('http://www.w3.org/2000/svg', 'path');
+        path.setAttribute('d', 'M2 13.5h12M3.5 13.5V8.5h4v5M7.5 13.5V4.5h5v9');
+        svg.appendChild(path);
+        var label = document.createElement('span');
+        label.className = 'ghChip__label';
+        label.textContent = 'Link GitHub';
+        a.appendChild(svg);
+        a.appendChild(label);
+        bar.insertBefore(a, bar.firstChild);
+      }, function () { /* no answer: no chip */ });
+  }
+
   /* Boot. The view is set FIRST, from the URL, so the page is navigable before
      any request resolves — /projects?view=new must land on the create view even
      if the identity call is slow or fails. */
@@ -11838,6 +11876,7 @@ summary{min-height:24px;padding:3px 0;}
       /* renderWho rebuilds the chip, so the waiting count is painted again on it (task 1004646) */
       if (window.InviteBadge) window.InviteBadge.refresh();
       paintShellIdentity();
+      githubChip();
       wizard.onAuth();
       $('gate').hidden = true;
       $('mine').hidden = false;

package/modules/public-landing/public/terms.html

@@ -129,9 +129,19 @@
     <p><b>These numbers describe; they do not govern.</b> Your cross-project record is descriptive analytics and never authority. What you may do inside any project is decided by that project alone, from its own records, at the moment you ask. A large record grants nothing and a hidden one takes nothing away; no project is required to read it, and none may treat it as permission. A rank shown here is that project&rsquo;s own standing for you, as that project reported it &mdash; the platform holds no rank of its own.</p>
     <p><b>What is public.</b> Once you have signed in with your platform account in your browser, here or to a project, and accepted these terms, your profile and that record are public by default: at your handle&rsquo;s page, in the people directory, to project owners looking for people to work with, and to search engines. An account that has never signed in that way stays provisional and is published nowhere.</p>
     <p><b>What you control.</b> From your settings you can hide your statistics, drop out of the recruiting directory, or make your account private. Each takes effect immediately, everywhere, including on a page someone already has open. Hiding removes the platform&rsquo;s combined view; it does not retract the per-project numbers each project publishes itself, so a determined reader could still add them up the hard way.</p>
-    <p><b>Your acceptance is recorded.</b> The platform stores the date you accepted these terms, and which version, on your account. It is written when you sign in with your platform account in your browser, here or to a project, and only once &mdash; signing in again does not change the date you accepted. Signing in from the command line does not record it: you approve that sign-in on GitHub&rsquo;s page, where these terms are not shown, so an account that has only signed in that way stays unpublished until you sign in once in your browser. This is version <b>2026-08-29</b>.</p>
+    <p><b>Your acceptance is recorded.</b> The platform stores the date you accepted these terms, and which version, on your account. It is written when you sign in with your platform account in your browser, here or to a project, and only once &mdash; signing in again does not change the date you accepted. When these terms change, your next sign-in that way records that you accepted the new version. Signing in from the command line does not record it: you approve that sign-in on GitHub&rsquo;s page, where these terms are not shown, so an account that has only signed in that way stays unpublished until you sign in once in your browser. This is version <b>2026-10-30</b>.</p>
     <p><b>Accounts from before these terms.</b> If your account already existed when this version took effect, the platform accepted it on your behalf, rather than waiting for you to sign in, and dated it the day that was done. The record marks that acceptance as grandfathered, so it is never mistaken for one you gave, and your own acceptance replaces it the next time you sign in that way.</p>
     <!--apex-only:end-->
+    <h2>AI features</h2>
+    <p>Some features, such as AI Studio, send what you submit to an AI model run by another company, reached through OpenRouter. To use them:</p>
+    <ul>
+      <li>You must be 18 or over. The AI companies only serve adults, so these features stay off until your account records that you are.</li>
+      <li>You agree to follow the terms and usage policies of the AI company whose model answers your request, and OpenRouter's own terms. Which company that is shows on <a href="https://openrouter.ai/models">openrouter.ai</a>.</li>
+      <li>You may not use what these features produce to train or build a competing AI model, or try to trick a model into breaking its own rules.</li>
+      <li>You are responsible for what you submit and for what you do with the results, including that you have the right to use any image or file you upload.</li>
+    </ul>
+    <p>When you pay with your balance, the price is what the AI company charged plus a small markup, shown before you confirm. When you use your own key, you pay that company directly and its terms apply to you as its customer. AI output can be wrong; check it before you rely on it.</p>
+
     <h2>Fair use</h2>
     <p>Don't use {{productName}} to break the law, to attack this site or other people's projects, to mine, spam or otherwise abuse hosted resources, or to harass other builders. The owner may deactivate a builder or take a project offline for breaking these, and may set further house rules inside the hall.</p>
 
@@ -140,7 +150,7 @@
 
     <h2>Changes</h2>
     <p>These terms ship with the software and change with it. The version served on this page is the one that applies; the repository keeps the history. <a href="{{sourceRepoUrl}}">Read the source.</a></p>
-    <p>Questions go through the <a href="/contact">contact page</a>. What is kept about you is on the <a href="/privacy">privacy page</a>. Revised August 2026.</p>
+    <p>Questions go through the <a href="/contact">contact page</a>. What is kept about you is on the <a href="/privacy">privacy page</a>. Revised October 2026.</p>
   </section>
 </main>
 

package/modules/ui-design/kit/fixtures/me-google.json

@@ -0,0 +1,10 @@
+{
+  "_": "A Google-only builder (task 1004996): the stand-in login ~<handle> a Google-born row carries until GitHub is linked. Aliased as me by the *-google states files, beside me-sign-in-methods-google.",
+  "builder": {
+    "id": "1",
+    "github_login": "~builder",
+    "display_name": "A Builder",
+    "avatar_url": "/__kit/avatar.svg",
+    "rank": "archon"
+  }
+}

package/modules/ui-design/kit/fixtures/me-sign-in-methods-google.json

@@ -0,0 +1,4 @@
+{
+  "_": "A Google-only person (task 1004996): no GitHub way in, so the bar draws the Link GitHub chip. Aliased as me__sign-in-methods by the *-google states files.",
+  "methods": [{ "provider": "google", "email": "octo@example.com" }]
+}

package/modules/ui-design/kit/serve.js

@@ -585,8 +585,14 @@ function myGuilds(res) {
 // The fixture builder is GitHub-born with Google linked, held for the run so a
 // Remove reads back. Each way in carries the route's own unlink_refused, by
 // account-logins.js unlinkRefusal's rule, and DELETE refuses as the route does.
+// A states file may alias `me__sign-in-methods` to a fixture's `methods` (task 1004996: the
+// Link GitHub chip pictures a Google-only person through `me-sign-in-methods-google`).
 let _ways = null;
-function waysHeld() { return _ways || (_ways = [{ provider: 'github', email: null }, { provider: 'google', email: 'octo@example.com' }]); }
+function waysHeld() {
+  if (_ways) return _ways;
+  if (ALIAS['me__sign-in-methods']) return (_ways = heldFixture('me__sign-in-methods').methods.map((m) => ({ provider: m.provider, email: m.email || null })));
+  return (_ways = [{ provider: 'github', email: null }, { provider: 'google', email: 'octo@example.com' }]);
+}
 function wayRefusal(provider, count) { return provider === 'github' ? 'born_with' : count <= 1 ? 'last_way_in' : null; }
 function signInMethods(res) {
   const held = waysHeld();

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.24.14",
+  "version": "1.24.16",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.24.14",
+      "version": "1.24.16",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.24.14",
+  "version": "1.24.16",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -10922,10 +10922,64 @@
       "text": "The weekly Market Watch run now also reads the links members added to a tracked item, treating them safely as outside text and staying within its page-reading limit."
     }
   ],
-  "1.24.14": [
+  "1.24.15": [
+    {
+      "id": "1005027",
+      "text": "The automatic checks that gate releases now agree with the new terms rule, so finished work can reach the live site again."
+    },
+    {
+      "id": "1005026",
+      "text": "Approving a correction to a Market Watch log entry works again, and the release lane that puts finished work on the live site is unblocked."
+    },
+    {
+      "id": "1005025",
+      "text": "AI Studio is now adults only and only uses AI providers that do not keep or train on your prompts; the terms and privacy pages explain the AI features, and everyone re-accepts the updated terms at their next sign-in."
+    },
+    {
+      "id": "1004958",
+      "text": "Every task now has a short two or three word name, and the AI writes \"task 1004745 - payout approvals\" instead of a bare number: in the startup notes, the sessions board, claim and ship messages, stuck-ship notes and blockers."
+    },
+    {
+      "id": "1003182",
+      "text": "The project now has an account record that shows every movement of money and why it happened: who was paid, for which task, and under which payment-processor transfer. Entries can never be edited or deleted, a retried payout c"
+    },
+    {
+      "id": "1005024",
+      "text": "The AI Studio works again with your own Google key even when Google retires a model, and you can now paste a picture or take a photo with your camera."
+    },
+    {
+      "id": "1004996",
+      "text": "People who signed in with Google and have not linked GitHub now see a tiny \"Link GitHub\" chip in the top bar, with the engineer icon so it reads as needed for coding. One click starts linking. It disappears once GitHub is link"
+    },
+    {
+      "id": "1005023",
+      "text": "The slop reminder no longer pops up on the app's own status messages, only when someone actually corrects the AI."
+    },
+    {
+      "id": "1005018",
+      "text": "People using a screen reader on Market Watch now hear the right name for the pop-up they opened (\"stop tracking\" or \"send a new scout\") instead of always \"Propose a change\"."
+    },
+    {
+      "id": "1005021",
+      "text": "Each builder's computer now updates its own project folder at the start of a session, saving any old leftovers first, and tells them plainly when it can't."
+    },
+    {
+      "id": "1004957",
+      "text": "Ask the AI \"what are my sessions doing\" (or type /session-board) and it shows a table of everything you have going at once: each session, its task, whether it is building, waiting to land, back from review or stuck, and what i"
+    },
+    {
+      "id": "1005016",
+      "text": "When the owner approves a member's correction to a Market Watch finding, the finding now actually changes (or is marked wrong), the item page shows a small \"corrected\" note, and who, when and why are kept."
+    },
     {
       "id": "1004906",
       "text": "The payment processor is chosen: Stripe Connect. Each project's money will sit in its own Stripe account, so we never hold anyone's money. J.P. Morgan Payments is recorded as the backup. Nothing is bought or opened yet, and th"
     }
+  ],
+  "1.24.16": [
+    {
+      "id": "1005028",
+      "text": "Settings now has a Your age section where you record your age group, which switches on AI Studio for adults."
+    }
   ]
 }

package/scripts/bongos/claim.js

@@ -12,6 +12,7 @@ const path = require('node:path');
 const { cliClient, requireSession, fmtTouches, printOnboardingNudge, rewardPolicy, costPlusOnlyNote, detectWorktreeName, cliExit } = require('./cli-lib');
 const { nextNumbers, padAdr, padMig } = require('./next-number');
 const { CORE_NS } = require('./migration-namespace');
+const { taskRef } = require('../../modules/lifecycle/task-name.js'); // task 1004958
 const { contextPack, formatContextPack, resolveWorktreeRoot } = require('./context-pack');
 const { printClaimRecall } = require('./claim-recall');
 const { decideWorktreeClaim, ESCAPE_FLAG } = require('./worktree-claim-guard');
@@ -238,6 +239,7 @@ function printClaimCard(task, widgetsEnabled = true) {
     const model = shipCard.buildCardModel({
       stage: 'claimed',
       taskId: task.id,
+      shortName: task.short_name,
       title: task.title,
       description: task.description || '',
       estMinutes: task.est_minutes != null ? Number(task.est_minutes) : null,
@@ -391,13 +393,13 @@ function claimFailureGuidance({ code, message, d }, r, taskId, ctx) {
     // so this one leaves it alone instead of piling onto the same /strand-fix.
     const leases = (ctx && ctx.strandLeases) || [];
     for (const t of owed) {
-      lines.push(`  - task ${t.id}${t.title ? `  ${clip(t.title)}` : ''}`);
+      lines.push(`  - ${taskRef(t.id, t.short_name)}${t.title ? `  ${clip(t.title)}` : ''}`);
       if (t.reason) lines.push(`      flagged: ${clip(t.reason)}`);
       const held = leases.find((l) => String(l.task_id) === String(t.id) && !l.mine);
       if (held) lines.push(`      already being fixed by ${held.by} — leave it to that session`);
     }
     if (waiting.length) lines.push('  Waiting, not on you (set aside; they land on their own):');
-    for (const t of waiting) lines.push(`  - task ${t.id}${t.title ? `  ${clip(t.title)}` : ''} — ${clip(t.waits_on || t.reason || 'outside you')}`);
+    for (const t of waiting) lines.push(`  - ${taskRef(t.id, t.short_name)}${t.title ? `  ${clip(t.title)}` : ''} — ${clip(t.waits_on || t.reason || 'outside you')}`);
     lines.push(`  ${clip(d.hint, 600) || 'Clear it with /strand-fix N, or rebase the branch and re-ship — or /builder-release it to give up on one.'}`);
     return { lines, exit: QUEUE_GATED_EXIT };
   }

package/scripts/bongos/land-watch.js

@@ -118,6 +118,7 @@ function buildShippedEnvelope(crumb, task) {
     ...inputs,
     postGradeStatus: 'shipped',
     taskId: crumb.taskId,
+    shortName: inputs.shortName || (task && task.short_name),
     // Prefer a fact from the fresh task row when the breadcrumb didn't carry it.
     title: inputs.title || (task && task.title) || `Task #${crumb.taskId}`,
     valueSummary: inputs.valueSummary || (task && task.value_summary) || '',

package/scripts/bongos/report-checkout.js

@@ -0,0 +1,30 @@
+#!/usr/bin/env node
+// scripts/bongos/report-checkout.js — tell the server how far behind this computer's
+// project folder is (task 1005021).
+//
+// WHY. Session start heals a stale main folder when it safely can; when it cannot, nobody
+// would know — the owner's sat 1,000 changes behind for a week. This sends the facts to
+// PATCH /me/checkout-freshness, and GET /me then tells the person and their agent.
+// Spawned detached by .claude/hooks/session-start.js, so it never delays a session.
+// Silent and fail-open: no session, offline, an older server — nothing happens.
+//
+// Usage: node scripts/bongos/report-checkout.js <behind> <branch> <reason>
+
+'use strict';
+
+const { apiCall, readSessionToken, cliExit } = require('./cli-lib');
+
+async function main() {
+  const [behindRaw, branch, reason] = process.argv.slice(2);
+  const behind = Number.parseInt(behindRaw, 10);
+  if (!Number.isInteger(behind) || behind < 0 || !reason) return cliExit(0);
+  if (!readSessionToken()) return cliExit(0);
+  try {
+    await apiCall('PATCH', '/api/bongos/me/checkout-freshness',
+      { behind, branch: branch && branch !== 'HEAD' ? branch : '', reason },
+      { allowUnauthenticated: true });
+  } catch (_) { /* fail-open */ }
+  return cliExit(0);
+}
+
+if (require.main === module) main();

package/scripts/bongos/run-unit-tests.js

@@ -266,6 +266,13 @@ const INTEGRATION = new Set([
   // cannot be edited, deleted or truncated; unknown types and blank amounts are
   // refused; the reads' SQL resolves a task's own set over the project's.
   'pay_terms_db',
+  // task 1004991 (ADR 0385 pay-type gates): the gate table from the real migration —
+  // append-only, no eu_labour row, evidence required — and the verdict SQL.
+  'pay_type_gates_db',
+  // task 1004958: core_289's CHECK and the task-name backfill against real Postgres.
+  'task_name_db',
+  // task 1004958: the blocker read's lateral join that names held tasks, against real Postgres.
+  'blocker_tasks_named_db',
   // task 1004988 (ADR 0385 D2): credit_log from the real migration — Postgres
   // refuses a spend, redemption or transfer row; only a reversal of an existing
   // row may be negative, and core_194's clawback still books.
@@ -274,6 +281,10 @@ const INTEGRATION = new Set([
   // Postgres, the writer's ON CONFLICT turns it into a no-op, and a ledger already
   // holding a duplicate still migrates (a warning, no index, nothing deleted).
   'credit_log_idea_unique_db',
+  // task 1003182: the project-account record from the real migration — Postgres refuses a
+  // causeless or wrongly-directed movement, any UPDATE/DELETE/TRUNCATE, and a second row
+  // for one processor reference.
+  'project_account_db',
   // task 1004408: migration platform_identity_028 deletes the old hub invite's
   // pending rows before a cutoff it reads from the core_upgrades ledger. Only a real
   // engine runs the DO block, the numeric version compare and the one-shot guard.