diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 3ccedab..b123a0d 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -324,15 +324,19 @@ jobs:
   # ---------------------------------------------------------------------------
   # 5. npm publish — OIDC trusted publishing with provenance.
   #
-  #    Gated by the `OCH_NPM_PUBLISH_ENABLED` repo variable. Each
-  #    @opencodehub/* package on npmjs.com has the trusted publisher
-  #    relationship configured against this repo + workflow filename,
-  #    so no NPM_TOKEN is required — the `id-token: write` permission
-  #    drives both OIDC auth to npm AND the Sigstore provenance
-  #    attestation that ties each published tarball back to this
-  #    workflow run + commit SHA. pnpm 10.21+ / 11.x supports OIDC on
-  #    direct `pnpm publish` (the changeset-publish regression in
-  #    pnpm/pnpm#11566 does not apply here).
+  #    Only `@opencodehub/cli` is published; every other workspace
+  #    package is `private: true` and its source is bundled into the CLI
+  #    at build time (PR #189), so `pnpm -r publish` skips them. The CLI
+  #    has an npm trusted-publisher relationship configured against this
+  #    repo + workflow filename, so no NPM_TOKEN is required — the
+  #    `id-token: write` permission drives both OIDC auth to npm AND the
+  #    Sigstore provenance attestation that ties the published tarball
+  #    back to this workflow run + commit SHA. This path is live: run
+  #    #176 published 0.6.0 with provenance. pnpm 10.21+ / 11.x supports
+  #    OIDC on direct `pnpm publish` (the changeset-publish regression in
+  #    pnpm/pnpm#11566 does not apply here). The publish job is gated
+  #    `if: vars.OCH_NPM_PUBLISH_ENABLED == 'true'` — that repo variable
+  #    is the on/off switch (set to `true` today).
   # ---------------------------------------------------------------------------
   npm-publish:
     name: npm publish (OIDC + provenance)
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7b02314..c387452 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -289,25 +289,6 @@
 
 * **release:** keep 0.x semver — breaking changes bump minor, feats bump patch ([a6ee4bf](https://github.com/theagenticguy/opencodehub/commit/a6ee4bf1081dd9a0623694aadae1e6f72cf60254))
 
-## [Unreleased]
-
-### Fixed
-
-- **cli:** `scan` ingests SARIF into the scanned repo, not CWD.
-- **cli:** `doctor` resolves native bindings from owner workspaces.
-- **smoke-mcp:** asserts 29 tools, matching the v1.0 server surface.
-
-### Docs
-
-- **repo:** README v1.0 status, 29-tool surface, parse-runtime section,
-  and accurate 17-package list (drops `eval` / `gym`, adds
-  `cobol-proleap`, `frameworks`, `pack`, `policy`, `wiki`).
-- **adr:** cross-link the two concurrently-numbered ADR 0013 files,
-  flip 0011 + 0013-m7 status to Accepted, and scrub session-local
-  spec coordinates from ADR text.
-- **repo:** sync `CHANGELOG`, `USECASE`, `AGENTS`, and `OBJECTIVES`
-  with v1 reality (tool count, language count, package set).
-
 ## [0.1.1](https://github.com/theagenticguy/opencodehub/compare/root-v0.1.0...root-v0.1.1) (2026-04-22)
 
 
diff --git a/README.md b/README.md
index 64872e5..92dd4f2 100644
--- a/README.md
+++ b/README.md
@@ -80,7 +80,29 @@ flowchart LR
 | **MCP-native** | Works out-of-the-box with Claude Code, Cursor, Codex, Windsurf, OpenCode. The MCP server is the primary interface; CLI exists for scripts and CI. |
 | **Embedded storage, two-tier** | `@ladybugdb/core` holds the structural store: symbols, edges, embeddings, BM25 + HNSW. A dedicated DuckDB sibling holds the temporal views: cochanges and summaries. Embedded files. No daemon. No database to operate. Both tiers are always present, with no backend knob (ADR 0016). |
 | **15 languages at GA** | TypeScript, JavaScript, Python, Go, Rust, Java, C#, C, C++, Ruby, Kotlin, Swift, PHP, Dart, COBOL — tree-sitter for the first 14 plus a regex provider for fixed-format COBOL. |
-| **WASM-only parse runtime** | `web-tree-sitter` WASM is the only parse runtime, on Node 20, 22, and 24. The 15 grammar `.wasm` blobs are vendored at `packages/ingestion/vendor/wasms/`. There is no native opt-in — `npm install -g @opencodehub/cli@latest` does zero native builds and zero GitHub fetches. |
+| **WASM-only parse runtime** | `web-tree-sitter` WASM is the only parse runtime. The 15 grammar `.wasm` blobs are vendored at `packages/ingestion/vendor/wasms/`, so parsing does **zero grammar/native builds and zero GitHub fetches** at install time — there is no native parser opt-in. Storage and embeddings still load prebuilt native bindings (see Platform support). |
+
+## Platform support
+
+Parsing is WASM and runs anywhere Node does. The storage and embedding
+tiers, however, depend on **prebuilt native bindings** — `@ladybugdb/core`
+(graph store), `@duckdb/node-api` (temporal store), and `onnxruntime-node`
+(local embeddings) — so OpenCodeHub runs on the platforms those bindings
+ship a prebuild for:
+
+| Platform | Supported |
+|---|---|
+| `darwin-arm64`, `darwin-x64` | ✅ prebuilt |
+| `linux-x64`, `linux-arm64` (glibc) | ✅ prebuilt |
+| `win32-x64` | ✅ prebuilt |
+| `win32-arm64` | ❌ no prebuild — `codehub analyze` fails at store open |
+| Alpine / musl, 32-bit Linux ARM | ❌ no prebuild — needs a source build of `@ladybugdb/core` |
+
+On an unsupported platform the lbug binding fails to load and `open()`
+throws `GraphDbBindingError` (there is no DuckDB-graph fallback — see
+[ADR 0016](./docs/adr/0016-duckdb-graph-rip.md)). The five-target prebuilt
+matrix mirrors `@ladybugdb/core`'s release artifacts; track its upstream
+for musl / `win32-arm64` coverage.
 
 ## Quick start
 
@@ -229,10 +251,11 @@ supersedes ADR 0013 and the DuckDB-as-graph passages of ADR 0011.
 ## Parse runtime — WASM-only, vendored grammars
 
 `@opencodehub/ingestion` runs `web-tree-sitter` (WASM) as the only parse
-runtime on Node 20, 22, and 24. There is no native opt-in: the native
-`tree-sitter` N-API addon and all 14 `tree-sitter-<lang>` npm packages
-are gone from the install graph. `npm install -g @opencodehub/cli@latest`
-does zero native builds and zero GitHub fetches.
+runtime on the supported Node range (22 and 24). There is no native opt-in:
+the native `tree-sitter` N-API addon and all 14 `tree-sitter-<lang>` npm
+packages are gone from the install graph, so parsing pulls **zero native
+builds and zero GitHub fetches** at install time. (Storage and embeddings
+load prebuilt native bindings — see Platform support.)
 
 All 15 grammar `.wasm` blobs are vendored at
 `packages/ingestion/vendor/wasms/`, built from the grammar sources
@@ -253,14 +276,40 @@ superseded.
 `IGraphStore` / `ITemporalStore` interface segregation), B (19-scanner
 fleet incl. betterleaks), C (debt sweep — embedder fingerprint, SCIP
 REFERENCES + TYPE_OF), and D (dogfood polish) have all merged. The
-current shipped tag remains `0.1.1`; `1.0.0` is cut once schema +
-tool-surface stability is signed off.
+published package is `@opencodehub/cli` (currently `0.7.0`; the monorepo
+root tracks `0.8.0`); `1.0.0` is cut once schema + tool-surface stability
+is signed off.
 
 While on `0.x`, **any release may contain breaking changes** to the
 graph schema, MCP tool shapes, CLI flags, or storage layout. Breaking
 changes are called out with `!` or a `BREAKING CHANGE:` footer in the
 commit log and summarised in each release's generated CHANGELOG.
 
+## Troubleshooting
+
+### `codehub analyze` runs out of memory on a large repo
+
+The in-memory graph (`KnowledgeGraph`) holds the full node and edge set in
+two JavaScript `Map`s for the duration of `analyze`, and `bulkLoad`
+materializes transient copies before persistence — there is no spill to
+disk during the build. A real index is already in the 96k-node /
+291k-edge range; a monorepo roughly 10x that size can exhaust Node's
+default heap and exit with an out-of-memory error (`FATAL ERROR:
+Reached heap limit` / `JavaScript heap out of memory`), sometimes without
+a clear message.
+
+Raise Node's old-space ceiling for the run via `NODE_OPTIONS` (nothing
+is set by default):
+
+```bash
+# 8 GB heap — bump higher for very large monorepos
+NODE_OPTIONS=--max-old-space-size=8192 codehub analyze
+```
+
+Pick a value comfortably below your machine's free RAM. If you still hit
+the ceiling, analyze a subtree at a time rather than the whole monorepo
+in one pass.
+
 ## Supply-chain posture
 
 - **CycloneDX SBOM** at [`SBOM.cdx.json`](./SBOM.cdx.json) (regenerated on every release)
@@ -274,8 +323,10 @@ Architecture decision records live in [`docs/adr/`](./docs/adr/) — the
 durable record of design tradeoffs (storage backend, SCIP adoption,
 hierarchical embeddings, CI toolchain pins, etc.).
 
-A standalone user-guide + MCP reference site is being bootstrapped in a
-dedicated repo; this README will link it once published.
+The user guide + MCP reference is published at
+**<https://theagenticguy.github.io/opencodehub>** — an Astro Starlight
+site whose source lives in-repo at [`packages/docs/`](./packages/docs/)
+and deploys to GitHub Pages on every push to `main`.
 
 ## Contributing
 
diff --git a/docs/RELEASE.md b/docs/RELEASE.md
index dfb1dab..d814333 100644
--- a/docs/RELEASE.md
+++ b/docs/RELEASE.md
@@ -32,7 +32,7 @@ Three workflows split the work:
 | Workflow                              | Trigger                         | Purpose                                                               |
 | ------------------------------------- | ------------------------------- | --------------------------------------------------------------------- |
 | `.github/workflows/release-please.yml`| `push: main`                    | Open / update the release PR; on merge, cut the tag and call release.yml. |
-| `.github/workflows/pre-release-gate.yml` | `pull_request: main`         | Add release-time-only checks (npm audit, lockfile integrity, detect-secrets, license re-assert). Aggregator job is the required check on release branches. |
+| `.github/workflows/pre-release-gate.yml` | `pull_request: main`         | Add release-time-only checks (npm audit, lockfile integrity, betterleaks secret sweep, license re-assert). Aggregator job is the required check on release branches. |
 | `.github/workflows/release.yml`       | `release: published` + `workflow_call` + `workflow_dispatch` | Build, SBOM, code-pack, cosign sign, SLSA L3 provenance, attach to release. |
 
 The existing CI surface (`ci.yml`, `codeql.yml`, `semgrep.yml`, `osv.yml`,
@@ -175,14 +175,19 @@ If the gate is broken and you must cut a release out-of-band:
 The pipeline runs without any long-lived secrets except `GITHUB_TOKEN`
 (which GitHub injects automatically). Specifically:
 
-- **No npm token** — `npm-publish` is gated by the
-  `OCH_NPM_PUBLISH_ENABLED` repo variable (default unset = disabled)
-  until the packages flip to public. When that change lands, set
-  `OCH_NPM_PUBLISH_ENABLED=true` in
-  `Settings -> Secrets and variables -> Actions -> Variables`, then
-  configure the npmjs.org OIDC trust relationship at
-  `https://www.npmjs.com/settings/<scope>/access` so `npm publish
-  --provenance` works without a static `NPM_TOKEN`.
+- **No npm token** — npm publishing is **live** via OIDC trusted
+  publishing (run #176 published `0.6.0` with provenance). Only
+  `@opencodehub/cli` is published; every other workspace package is
+  `private: true` and bundled into the CLI at build time (PR #189), so
+  `pnpm -r publish` skips them. The CLI's trusted-publisher relationship
+  is configured at `https://www.npmjs.com/settings/opencodehub/access`
+  against this repo + `release.yml`, so the `id-token: write` permission
+  drives both OIDC auth to npm and the Sigstore provenance attestation —
+  no static `NPM_TOKEN`. The publish job is gated `if:
+  vars.OCH_NPM_PUBLISH_ENABLED == 'true'`, so that repo variable is the
+  on/off switch in `Settings -> Secrets and variables -> Actions ->
+  Variables` — it is set to `true` today; unset it (or any non-`true`
+  value) to skip the publish step.
 - **No cosign keys** — keyless signing uses the workflow's OIDC token
   against Fulcio. The certificate's SAN binds the signature to the
   workflow file path + ref, which is what `cosign verify-blob` checks.
@@ -235,7 +240,7 @@ branch, it adds:
 | ---------------------- | ------------------------------------------------------------------------------------------------ |
 | `npm-audit`            | `pnpm audit --audit-level=high --prod` finds no high-or-critical vulns in production deps.       |
 | `lockfile-integrity`   | `pnpm install --frozen-lockfile --ignore-scripts` succeeds — no lockfile drift, no postinstalls. |
-| `detect-secrets`       | Full sweep against `.secrets.baseline`; any new finding fails the gate.                          |
+| `betterleaks`          | `betterleaks dir` full sweep with the vendored `packages/scanners/config/betterleaks.default.toml`; any finding fails the gate (ADR 0017 replaced detect-secrets). |
 | `licenses-reassert`    | `license-checker-rseidelsohn` allowlist (Apache-2.0, MIT, BSD-2/3-Clause, ISC, CC0-1.0, BlueOak-1.0.0, 0BSD). |
 | `pre-release-gate`     | Aggregator. Fails if any of the above failed; passes (no-op) on non-release PRs.                 |
 
diff --git a/docs/adr/0012-repo-as-first-class-node.md b/docs/adr/0012-repo-as-first-class-node.md
index 15a6707..1e182fc 100644
--- a/docs/adr/0012-repo-as-first-class-node.md
+++ b/docs/adr/0012-repo-as-first-class-node.md
@@ -107,11 +107,12 @@ The phased plan, sequenced by milestone:
   AMBIGUOUS_REPO `_meta.choices[]` payload, the `group_*` tools'
   additive `repo_uri` fields, and the cross-repo link records all
   source `repo_uri` from the new node.
-- **M7**: drop the legacy `repo` registry-name argument across all
-  per-repo and group MCP tools (T-M7-6); the `repo_uri` form becomes
-  the only accepted input. New edge kinds (`Repo HAS_FILE File`,
-  `Repo HAS_DEPENDENCY Dependency`) get added then — see §Edge kinds
-  deferred below.
+- **M7** (planned at authoring time; **not pursued** — see §Edge kinds
+  deferred below): drop the legacy `repo` registry-name argument across
+  all per-repo and group MCP tools (T-M7-6) and add `Repo`-rooted edge
+  kinds (T-M7-7). Neither task shipped. The clean-slate v1 release keeps
+  the legacy `repo` argument as an accepted alias alongside `repo_uri`,
+  and `Repo` remains an edge-less singleton node.
 
 ## Schema choice — append-only `NodeKind` union
 
@@ -226,27 +227,35 @@ without a `RepoNode`. Three rules govern the migration:
    `CLAUDE.md`) works regardless of whether the graph has the node
    yet.
 
-## Edge kinds deferred
-
-`Repo` ships in M6 **without new edge kinds**. The full graph schema
-would have `Repo HAS_FILE File`, `Repo HAS_DEPENDENCY Dependency`,
-`Repo OWNED_BY Contributor`, `Repo IN_GROUP Community` (or similar),
-but those edges add complexity that does not pay off until M7's
-default-flip work for the LadybugDB backend. The M6 scope is the node
-itself plus the wire-format updates to AMBIGUOUS_REPO, the
-`group_*` tools, and the cross-repo link records. M7 (T-M7-6 and
-T-M7-7) extends the schema with the four edge kinds above, gated by
-its own parity gate and ADR.
-
-The reason for the deferral is the v1.0 invariant at the heart of ADR
-0011: every new edge kind is a new physical rel table on the
-LadybugDB backend (rel-table-per-kind shape, ADR 0011 §Schema
-choice), so each new kind costs one DDL update plus one parity-test
-fixture. Bundling those four kinds into M7 — alongside the
-default-backend flip — keeps the parity surface small and the merge
-risk low. Adding them in M6 would split the rel-table-per-kind
-churn across two milestones and risk a graphHash drift if the
-W-M6-1 fixture coverage missed an interaction.
+## Edge kinds deferred → not pursued (won't-do for v1)
+
+`Repo` ships **without new edge kinds**, and that stayed true for v1.
+At authoring time this section sketched four `Repo`-rooted edges —
+`Repo HAS_FILE File`, `Repo HAS_DEPENDENCY Dependency`,
+`Repo OWNED_BY Contributor`, `Repo IN_GROUP Community` (or similar) —
+to land in M7 under tasks T-M7-6 / T-M7-7. **None of them shipped.**
+
+> **Resolution (v1 clean-slate, 2026-06): won't-do.** The four
+> `Repo`-rooted edge kinds were never added. The v1 release does not
+> carry the M7 edge-schema extension; `RelationType` /
+> `RELATION_TYPES` in `packages/core-types/src/edges.ts` has **25**
+> members (`CONTAINS` … `TYPE_OF`), none of them `Repo`-rooted, and
+> `Repo` remains an edge-less singleton. `OWNED_BY` does exist in that
+> enum, but it is a **blame-level** edge from a symbol/file to a
+> `Contributor` (its `confidence` carries the normalized blame-line
+> share, per `CodeRelation`'s doc comment) — it is **not** the
+> `Repo OWNED_BY Contributor` repo-level edge sketched above. The
+> federation surface (AMBIGUOUS_REPO, the `group_*` tools, cross-repo
+> links) reads `repo_uri` straight off the `RepoNode` and from the
+> persisted ContractRegistry, so no `Repo`-rooted edge was needed to
+> ship it.
+
+The original deferral rationale (left for the record): every new edge
+kind is a new physical rel table on the LadybugDB backend
+(rel-table-per-kind shape, ADR 0011 §Schema choice), so each new kind
+costs one DDL update plus one parity-test fixture. The cost never paid
+off — the v1 surface ships without these edges, and any future
+`Repo`-rooted edge work would land under its own ADR.
 
 ## Risks
 
@@ -300,9 +309,10 @@ W-M6-1 fixture coverage missed an interaction.
   flips to **Accepted** in the same commit that ships AC-M6-5 (this
   ADR plus the AGENTS.md / CLAUDE.md cross-references plus the
   synthetic 2-repo quickcheck) — see §References below.
-- **Superseded**: not before M7. M7 adds a follow-up ADR (scope: drop
-  legacy `repo` argument, add `Repo`-rooted edge kinds, final
-  parity audit across the testbed corpus).
+- **Superseded**: no. The planned M7 follow-up (drop the legacy `repo`
+  argument, add `Repo`-rooted edge kinds) was **not pursued** — see
+  §Edge kinds deferred → not pursued. The `RepoNode` shape this ADR
+  introduced stands as-is in v1.
 
 ## References
 
diff --git a/docs/adr/0013-m7-default-flip-and-abstraction.md b/docs/adr/0013-m7-default-flip-and-abstraction.md
index e05e68c..76230e2 100644
--- a/docs/adr/0013-m7-default-flip-and-abstraction.md
+++ b/docs/adr/0013-m7-default-flip-and-abstraction.md
@@ -32,12 +32,16 @@ later, four facts forced the M7 architectural shift.
    limit identified in ADR 0011 §Context (one polymorphic `relations`
    table, `WHERE type = ?` evaluated after the join, no per-kind
    columnar pushdown) holds across every workload we measured in M4 –
-   M6. The 24-edge-kind cardinality is now 28 with M5/M6 additions
-   (`HAS_FILE`, `HAS_DEPENDENCY`, `IN_GROUP`, `OWNED_BY` repo-level
-   edges). DuckDB is the right engine for time-series / cochange
-   queries — its column-store strengths land squarely in the temporal
-   domain — but the graph workload is a different shape and benefits
-   from a graph-native engine.
+   M6. The edge-kind cardinality is **25** (`RelationType` /
+   `RELATION_TYPES` in `packages/core-types/src/edges.ts`, `CONTAINS`
+   … `TYPE_OF`) — the M5/M6 addition over the earlier 24 was `OWNED_BY`
+   (a blame-level symbol→`Contributor` edge), not the four `Repo`-rooted
+   edges (`HAS_FILE`, `HAS_DEPENDENCY`, `IN_GROUP`,
+   `Repo OWNED_BY Contributor`) that ADR 0012 §Edge kinds deferred
+   sketched: those never shipped. DuckDB is the right engine for
+   time-series / cochange queries — its column-store strengths land
+   squarely in the temporal domain — but the graph workload is a
+   different shape and benefits from a graph-native engine.
 2. **The `IGraphStore` interface had grown two non-graph
    responsibilities.** By the end of M6 it carried `cochanges` and
    `symbol-summaries` queries — both temporal, neither graph. Every
diff --git a/docs/adr/0018-cleanroom-tool-name-provenance.md b/docs/adr/0018-cleanroom-tool-name-provenance.md
new file mode 100644
index 0000000..6aa0dac
--- /dev/null
+++ b/docs/adr/0018-cleanroom-tool-name-provenance.md
@@ -0,0 +1,68 @@
+# ADR 0018 — Cleanroom provenance of the route / tool / contract tool names
+
+- Status: **Accepted** — 2026-06-05.
+- Authors: Laith Al-Saadoon + Claude.
+- Branch: `roadmap/docs-destale-cleanroom`.
+- Supersedes nothing. Records the independent-derivation rationale for a
+  set of MCP tool names so the provenance is on the record.
+
+## Context
+
+Six MCP tool names describe HTTP-route, MCP-tool, and cross-repo-contract
+intelligence:
+
+- `route_map` — enumerate detected HTTP routes and their handlers.
+- `tool_map` — enumerate detected MCP tools and their handlers.
+- `shape_check` — classify a route/tool's request/response shape.
+- `api_impact` — blast radius scoped to API-surface symbols.
+- `group_list` — enumerate named cross-repo groups.
+- `group_sync` — recompute a group's cross-repo contract registry.
+
+These names sit in the public MCP surface (`packages/mcp/src/server.ts`)
+and are referenced from the README, `CLAUDE.md`, and the Claude Code
+plugin. Because the names are short and domain-generic, it is worth
+recording — once — that they were derived from the tools' observable
+behavior plus ordinary software-engineering vocabulary, not adopted from
+any third party's published interface.
+
+## Decision
+
+Document the provenance; **rename nothing**. Each name is a literal,
+compositional description of what the tool returns:
+
+| Name | Derivation |
+|---|---|
+| `route_map` | A *map* (listing) of *routes*. The route detectors live in `@opencodehub/frameworks`; the tool projects their output. |
+| `tool_map` | A *map* of MCP *tools*, same detector family as `route_map`. |
+| `shape_check` | A *check* of a request/response *shape* (the `ShapeStatus` classifier in `packages/analysis/src/shape.ts`). |
+| `api_impact` | The existing `impact` blast-radius analysis, *scoped to the API surface*. The name is `api` + `impact`, both already in the vocabulary. |
+| `group_list` | *List* the cross-repo *groups* — the `group_*` family's enumeration verb. |
+| `group_sync` | *Sync* (recompute) a *group's* contract registry — the family's write verb. |
+
+"map", "check", "impact", "list", "sync", "route", "tool", "shape",
+"api", and "group" are generic engineering terms. The `noun_verb` /
+`noun_map` shape is the same convention the rest of the surface already
+uses (`detect_changes`, `list_repos`, `pack_codebase`, `risk_trends`).
+No name encodes a third party's distinctive naming, abbreviation, or
+internal taxonomy; each falls out of the tool's function and the
+surrounding naming pattern.
+
+## Status
+
+- **Accepted**: 2026-06-05, on merge of the documentation de-stale sweep.
+- **Superseded**: not planned. If a tool is renamed, this ADR is amended
+  in the same change.
+
+## References
+
+- Code:
+  - `packages/mcp/src/server.ts` — the tool registrations (28 tools).
+  - `packages/frameworks/` — the route + MCP-tool detectors behind
+    `route_map` / `tool_map` / `api_impact`.
+  - `packages/analysis/src/shape.ts` — the `ShapeStatus` classifier
+    behind `shape_check`.
+  - `packages/analysis/src/group/` — the cross-repo contract extractors
+    behind `group_list` / `group_sync`.
+- Related ADRs:
+  - ADR 0012 — Repo as a first-class graph node; the `group_*` family
+    and the `repo_uri` handle.
diff --git a/packages/analysis/src/index.ts b/packages/analysis/src/index.ts
index 19ee0e2..cb231ac 100644
--- a/packages/analysis/src/index.ts
+++ b/packages/analysis/src/index.ts
@@ -1,20 +1,3 @@
-/**
- * Compat shim — wiki rendering lives in `@opencodehub/wiki` in v1.0.
- * These re-exports stay one release for migration; import directly from
- * `@opencodehub/wiki` instead.
- *
- * @deprecated Use `@opencodehub/wiki`.
- */
-export type {
-  LlmModuleInput,
-  LlmOverview,
-  LlmOverviewOptions,
-  WikiLlmOptions,
-  WikiOptions,
-  WikiResult,
-} from "@opencodehub/wiki";
-/** @deprecated Use `@opencodehub/wiki`. */
-export { generateWiki } from "@opencodehub/wiki";
 export type { ApiImpactFilter, ApiImpactRow } from "./api-impact.js";
 export { listApiImpact, scoreRisk, worseRisk } from "./api-impact.js";
 export type {
diff --git a/packages/cli/package.json b/packages/cli/package.json
index 82704cd..e410610 100644
--- a/packages/cli/package.json
+++ b/packages/cli/package.json
@@ -104,6 +104,6 @@
     "code-analysis"
   ],
   "engines": {
-    "node": ">=20.0.0"
+    "node": ">=22.0.0"
   }
 }
diff --git a/packages/core-types/README.md b/packages/core-types/README.md
index f44dc7a..9f5df25 100644
--- a/packages/core-types/README.md
+++ b/packages/core-types/README.md
@@ -41,10 +41,10 @@ import {
   must always produce the same digest, regardless of insertion order. It is
   built on `canonicalJson` / `writeCanonicalJson` (sorted keys, streaming) and
   the `sha256Hex` / `hash6` helpers.
-- **Provenance** — `PROVENANCE_PREFIXES`, `SCIP_PROVENANCE_PREFIXES`, and
-  `LSP_PROVENANCE_PREFIXES` classify where a relation came from. Confidence
-  tiers (heuristic vs. SCIP-confirmed vs. SCIP-unconfirmed) are assigned by the
-  ingestion pipeline's confidence-demote phase, not by this package.
+- **Provenance** — `PROVENANCE_PREFIXES` and `SCIP_PROVENANCE_PREFIXES`
+  classify where a relation came from. Confidence tiers (heuristic vs.
+  SCIP-confirmed vs. SCIP-unconfirmed) are assigned by the ingestion pipeline's
+  confidence-demote phase, not by this package.
 - **Schema version** — `SCHEMA_VERSION` plus `compareSchemaVersion`, which
   classifies an indexed graph's version against the running binary
   (`major-drift` / `minor-drift` / `forward-incompat` / `ok`).
diff --git a/packages/core-types/src/index.ts b/packages/core-types/src/index.ts
index a0a7446..638f72d 100644
--- a/packages/core-types/src/index.ts
+++ b/packages/core-types/src/index.ts
@@ -6,11 +6,7 @@ export { canonicalJson, hash6, hashCanonicalJson, sha256Hex, writeCanonicalJson
 export type { EdgeId, MakeNodeIdOptions, NodeId, ParsedNodeId } from "./id.js";
 export { makeEdgeId, makeNodeId, parseNodeId } from "./id.js";
 export type { LanguageId } from "./language-id.js";
-export {
-  LSP_PROVENANCE_PREFIXES,
-  PROVENANCE_PREFIXES,
-  SCIP_PROVENANCE_PREFIXES,
-} from "./lsp-provenance.js";
+export { PROVENANCE_PREFIXES, SCIP_PROVENANCE_PREFIXES } from "./lsp-provenance.js";
 export type {
   AnnotationNode,
   ClassNode,
diff --git a/packages/core-types/src/lsp-provenance.ts b/packages/core-types/src/lsp-provenance.ts
index b36a601..a7f0c2f 100644
--- a/packages/core-types/src/lsp-provenance.ts
+++ b/packages/core-types/src/lsp-provenance.ts
@@ -22,7 +22,3 @@ export const SCIP_PROVENANCE_PREFIXES: readonly string[] = [
 ];
 
 export const PROVENANCE_PREFIXES: readonly string[] = SCIP_PROVENANCE_PREFIXES;
-
-/** @deprecated — use `SCIP_PROVENANCE_PREFIXES`. Retained transiently for
- *  any ecosystem consumer still importing the legacy name. */
-export const LSP_PROVENANCE_PREFIXES: readonly string[] = SCIP_PROVENANCE_PREFIXES;
diff --git a/packages/ingestion/package.json b/packages/ingestion/package.json
index 01d6cb9..36bfce4 100644
--- a/packages/ingestion/package.json
+++ b/packages/ingestion/package.json
@@ -90,6 +90,6 @@
     "pipeline"
   ],
   "engines": {
-    "node": ">=20.0.0"
+    "node": ">=22.0.0"
   }
 }
diff --git a/scripts/smoke-mcp.sh b/scripts/smoke-mcp.sh
index 1c3b549..d57f35a 100755
--- a/scripts/smoke-mcp.sh
+++ b/scripts/smoke-mcp.sh
@@ -5,18 +5,22 @@
 # Uses only node (for the server) and python3 (for JSON parsing) — no extra
 # dependencies. Safe to run in CI.
 #
-# Tool roster at v1.0 (29 tools — see packages/mcp/src/server.ts):
-#   Core (8): list_repos, pack_codebase, query, context, impact,
-#             detect_changes, rename, sql
+# Tool roster (28 tools — see packages/mcp/src/server.ts):
+#   Core (7): list_repos, pack_codebase, query, context, impact,
+#             detect_changes, sql
 #   Groups (6): group_list, group_query, group_status, group_contracts,
 #               group_cross_repo_links, group_sync
 #   Project (1): project_profile
 #   Dependencies (2): dependencies, license_audit
 #   Ownership (1): owners
-#   Findings (5): list_findings, list_findings_delta, list_dead_code,
-#                 remove_dead_code, scan
+#   Findings (4): list_findings, list_findings_delta, list_dead_code, scan
 #   Analysis (2): verdict, risk_trends
-#   Routing/contracts (4): route_map, api_impact, shape_check, tool_map
+#   Routing/contracts (5): route_map, api_impact, shape_check, signature,
+#                          tool_map
+#
+# The source-mutating `rename` and `remove_dead_code` tools were removed
+# in 0.7.0 (PR #175); OpenCodeHub plans and verifies refactors but does
+# not apply source edits.
 #
 # CI / acceptance.sh can override the assertion via the EXPECTED_TOOLS env var
 # when the wire is mid-migration.
@@ -61,7 +65,7 @@ for line in sys.stdin:
 print(tools)
 ')
 
-EXPECTED_TOOLS="${EXPECTED_TOOLS:-29}"
+EXPECTED_TOOLS="${EXPECTED_TOOLS:-28}"
 if [ "$COUNT" = "$EXPECTED_TOOLS" ]; then
   echo "smoke-mcp: PASS ($COUNT tools listed)"
   exit 0