V48 Gate 3 (specification-implementation): production GitHub App renamed to bitcode-github-auxillary; staging pins its own public install URL

The production-mainnet GitHub App is now bitcode-github-auxillary
(https://github.com/apps/bitcode-github-auxillary, renamed from
bitcode-github-app-auxillary). The BITCODE_GITHUB_APP_PUBLIC_URL code
fallback repoints to it, and because the fallback now names the production
app, the staging-testnet bring-up script pushes
NEXT_PUBLIC_GITHUB_APP_PUBLIC_URL (default: the
bitcode-github-auxillary-stag-test app, overridable via
STAGING_TESTNET_GITHUB_APP_PUBLIC_URL) so staging surfaces never link the
production app. QA ledger: production-mainnet environment records the app;
the bring-up pending-manual list gains the vercel-env re-run for the new var.

Also repairs the bring-up template's tracking: .gitignore's `.env.*` rule was
silently swallowing scripts/.env.staging-testnet.example (the ledger claimed
it committed; it never did). Example templates (.env.*.example) are now
explicitly negated — placeholders only — while the real secrets file
scripts/.env.staging-testnet stays ignored.

Verified: uapi tsc 0; footer/nav public-shell suites green (9/9); bash -n on
the bring-up script; git check-ignore confirms example tracked-eligible +
secrets file still ignored.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: geraldarthurdavis

.gitignore

@@ -9,6 +9,9 @@ uapi/tmp
 .env.*
 !.env.example
 !**/.env.example
+# Example templates carry placeholders only — always committable.
+!.env.*.example
+!**/.env.*.example
 
 # Playwright test artifacts
 **/playwright-report/**

BITCODE_V48_QA.md

@@ -12,7 +12,10 @@
 TWO deployed environments plus local:
 
 - **production-mainnet** — bitcode.exchange + the original Supabase project;
-  mainnet posture.
+  GitHub App `bitcode-github-auxillary`
+  (https://github.com/apps/bitcode-github-auxillary — renamed 2026-07-05 from
+  `bitcode-github-app-auxillary`; the code fallback
+  `BITCODE_GITHUB_APP_PUBLIC_URL` names this app); mainnet posture.
 - **staging-testnet** — THE single non-production clone (Vercel custom
   environment `staginglocal-testnet` with domain `testnet.bitcode.exchange`,
   Supabase project `mwugicjpxmrtctvjghjg`, GitHub App
@@ -33,7 +36,10 @@ testnet4 network, GoTrue callback URL); local `.env.local` flipped to the
 staging-testnet project (old staging values retained as comments);
 `SUPABASE_JWT_SECRET` confirmed vestigial (no app code reads it). Pending
 manual: dashboard URL config + custom provider + GoTrue GitHub provider,
-GitHub App callback URLs, Vercel redeploy + stale-var sweep.
+GitHub App callback URLs, Vercel redeploy + stale-var sweep, and a
+`vercel-env` re-run to push `NEXT_PUBLIC_GITHUB_APP_PUBLIC_URL` (added
+2026-07-05 — staging surfaces must link the stag-test app now that the code
+fallback names the renamed production app `bitcode-github-auxillary`).
 
 Bring-up automation: `scripts/bringup-staging-testnet.sh`
 (migrate | vercel-env | verify) with secrets in

scripts/.env.staging-testnet.example

@@ -0,0 +1,26 @@
+# STAGING-TESTNET secrets for scripts/bringup-staging-testnet.sh
+# Copy to scripts/.env.staging-testnet (gitignored) and fill. Never commit values.
+
+# Supabase project mwugicjpxmrtctvjghjg (Settings → Database / API keys)
+STAGING_TESTNET_DB_PASSWORD=<database password>
+STAGING_TESTNET_ANON_KEY=<anon/publishable key>
+STAGING_TESTNET_PUBLISHABLE_KEY=<publishable key if distinct>
+STAGING_TESTNET_SERVICE_ROLE_KEY=<service role key>
+STAGING_TESTNET_SECRET_KEY=<secret key if distinct>
+STAGING_TESTNET_JWT_SECRET=<jwt secret>
+
+# Shared HMAC secret — MUST equal the custom:bitcode-bitcoin provider Client
+# Secret in the Supabase dashboard AND local .env.local
+# BITCODE_BITCOIN_OAUTH_CLIENT_SECRET.
+STAGING_TESTNET_WALLET_OAUTH_SECRET=<shared wallet oauth client secret>
+
+# GitHub App: bitcode-github-auxillary-stag-test
+STAGING_TESTNET_GITHUB_APP_ID=<app id>
+STAGING_TESTNET_GITHUB_APP_CLIENT_ID=<client id>
+STAGING_TESTNET_GITHUB_APP_CLIENT_SECRET=<client secret>
+STAGING_TESTNET_GITHUB_WEBHOOK_SECRET=<webhook secret if configured>
+STAGING_TESTNET_GITHUB_PRIVATE_KEY_PATH=~/Downloads/bitcode-github-auxillary-stag-test.2026-07-05.private-key.pem
+# Public install link for staging surfaces. Optional — defaults to the
+# stag-test app; the code fallback names the PRODUCTION app
+# (https://github.com/apps/bitcode-github-auxillary).
+#STAGING_TESTNET_GITHUB_APP_PUBLIC_URL=https://github.com/apps/bitcode-github-auxillary-stag-test

scripts/bringup-staging-testnet.sh

@@ -70,6 +70,11 @@ do_vercel_env() {
   push_var GITHUB_APP_CLIENT_ID "${STAGING_TESTNET_GITHUB_APP_CLIENT_ID:-}"
   push_var GITHUB_APP_CLIENT_SECRET "${STAGING_TESTNET_GITHUB_APP_CLIENT_SECRET:-}"
   push_var GITHUB_WEBHOOK_SECRET "${STAGING_TESTNET_GITHUB_WEBHOOK_SECRET:-}"
+  # Public install link — the code fallback names the PRODUCTION app
+  # (bitcode-github-auxillary), so staging must point its surfaces at the
+  # stag-test app explicitly.
+  push_var NEXT_PUBLIC_GITHUB_APP_PUBLIC_URL \
+    "${STAGING_TESTNET_GITHUB_APP_PUBLIC_URL:-https://github.com/apps/bitcode-github-auxillary-stag-test}"
   if [[ -n "${STAGING_TESTNET_GITHUB_PRIVATE_KEY_PATH:-}" && -f "${STAGING_TESTNET_GITHUB_PRIVATE_KEY_PATH}" ]]; then
     push_var GITHUB_PRIVATE_KEY "$(cat "${STAGING_TESTNET_GITHUB_PRIVATE_KEY_PATH}")"
   else

uapi/lib/github-app-url.ts

@@ -1,3 +1,6 @@
+// Fallback = the production-mainnet GitHub App. Non-production environments
+// set NEXT_PUBLIC_GITHUB_APP_PUBLIC_URL to their own app (staging-testnet:
+// https://github.com/apps/bitcode-github-auxillary-stag-test).
 export const BITCODE_GITHUB_APP_PUBLIC_URL =
   process.env.NEXT_PUBLIC_GITHUB_APP_PUBLIC_URL?.trim() ||
-  'https://github.com/apps/bitcode-github-app-auxillary';
+  'https://github.com/apps/bitcode-github-auxillary';