diff --git a/app/Console/Commands/RemoveExpiredGitHubAccess.php b/app/Console/Commands/RemoveExpiredGitHubAccess.php
new file mode 100644
index 00000000..afbb166b
--- /dev/null
+++ b/app/Console/Commands/RemoveExpiredGitHubAccess.php
@@ -0,0 +1,50 @@
+<?php
+
+namespace App\Console\Commands;
+
+use App\Models\User;
+use App\Support\GitHubOAuth;
+use Illuminate\Console\Command;
+
+class RemoveExpiredGitHubAccess extends Command
+{
+    protected $signature = 'github:remove-expired-access';
+
+    protected $description = 'Remove GitHub repository access for users whose Max licenses have expired';
+
+    public function handle(): int
+    {
+        $github = GitHubOAuth::make();
+        $removed = 0;
+
+        // Find users with GitHub access granted
+        $users = User::query()
+            ->whereNotNull('mobile_repo_access_granted_at')
+            ->whereNotNull('github_username')
+            ->get();
+
+        foreach ($users as $user) {
+            // Check if user still has an active Max license
+            if (! $user->hasActiveMaxLicense()) {
+                // Remove from repository
+                $success = $github->removeFromMobileRepo($user->github_username);
+
+                if ($success) {
+                    // Clear the access timestamp
+                    $user->update([
+                        'mobile_repo_access_granted_at' => null,
+                    ]);
+
+                    $this->info("Removed access for user: {$user->email} (@{$user->github_username})");
+                    $removed++;
+                } else {
+                    $this->error("Failed to remove access for user: {$user->email} (@{$user->github_username})");
+                }
+            }
+        }
+
+        $this->info("Total users with access removed: {$removed}");
+
+        return Command::SUCCESS;
+    }
+}
diff --git a/app/Console/Kernel.php b/app/Console/Kernel.php
index 682809d8..c9e58a9c 100644
--- a/app/Console/Kernel.php
+++ b/app/Console/Kernel.php
@@ -17,6 +17,12 @@ protected function schedule(Schedule $schedule): void
             ->dailyAt('09:00')
             ->onOneServer()
             ->runInBackground();
+
+        // Remove GitHub access for users with expired Max licenses
+        $schedule->command('github:remove-expired-access')
+            ->dailyAt('10:00')
+            ->onOneServer()
+            ->runInBackground();
     }
 
     /**
diff --git a/app/Http/Controllers/GitHubIntegrationController.php b/app/Http/Controllers/GitHubIntegrationController.php
new file mode 100644
index 00000000..5a6fd20f
--- /dev/null
+++ b/app/Http/Controllers/GitHubIntegrationController.php
@@ -0,0 +1,92 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Support\GitHubOAuth;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\Log;
+use Laravel\Socialite\Facades\Socialite;
+
+class GitHubIntegrationController extends Controller
+{
+    public function __construct()
+    {
+        $this->middleware('auth');
+    }
+
+    public function redirectToGitHub(): RedirectResponse
+    {
+        return Socialite::driver('github')
+            ->scopes(['read:user'])
+            ->redirect();
+    }
+
+    public function handleCallback(): RedirectResponse
+    {
+        try {
+            $githubUser = Socialite::driver('github')->user();
+
+            $user = Auth::user();
+            $user->update([
+                'github_id' => $githubUser->id,
+                'github_username' => $githubUser->nickname,
+            ]);
+
+            return redirect()->route('customer.licenses')
+                ->with('success', 'GitHub account connected successfully!');
+        } catch (\Exception $e) {
+            Log::error('GitHub OAuth callback failed', [
+                'error' => $e->getMessage(),
+                'trace' => $e->getTraceAsString(),
+            ]);
+
+            return redirect()->route('customer.licenses')
+                ->with('error', 'Failed to connect GitHub account. Please try again.');
+        }
+    }
+
+    public function requestRepoAccess(): RedirectResponse
+    {
+        $user = Auth::user();
+
+        if (! $user->github_username) {
+            return back()->with('error', 'Please connect your GitHub account first.');
+        }
+
+        if (! $user->hasActiveMaxLicense()) {
+            return back()->with('error', 'You need an active Max license to access the mobile repository.');
+        }
+
+        $github = GitHubOAuth::make();
+        $success = $github->inviteToMobileRepo($user->github_username);
+
+        if ($success) {
+            $user->update([
+                'mobile_repo_access_granted_at' => now(),
+            ]);
+
+            return back()->with('success', 'Repository invitation sent! Please check your GitHub notifications to accept the invitation.');
+        }
+
+        return back()->with('error', 'Failed to send repository invitation. Please try again or contact support.');
+    }
+
+    public function disconnect(): RedirectResponse
+    {
+        $user = Auth::user();
+
+        if ($user->mobile_repo_access_granted_at && $user->github_username) {
+            $github = GitHubOAuth::make();
+            $github->removeFromMobileRepo($user->github_username);
+        }
+
+        $user->update([
+            'github_id' => null,
+            'github_username' => null,
+            'mobile_repo_access_granted_at' => null,
+        ]);
+
+        return back()->with('success', 'GitHub account disconnected successfully.');
+    }
+}
diff --git a/app/Models/User.php b/app/Models/User.php
index e1fec6ab..4a138df0 100644
--- a/app/Models/User.php
+++ b/app/Models/User.php
@@ -27,6 +27,7 @@ class User extends Authenticatable implements FilamentUser
     protected $casts = [
         'email_verified_at' => 'datetime',
         'password' => 'hashed',
+        'mobile_repo_access_granted_at' => 'datetime',
     ];
 
     public function canAccessPanel(Panel $panel): bool
@@ -55,6 +56,15 @@ public function wallOfLoveSubmissions(): HasMany
         return $this->hasMany(WallOfLoveSubmission::class);
     }
 
+    public function hasActiveMaxLicense(): bool
+    {
+        return $this->licenses()
+            ->where('policy_name', 'max')
+            ->where('is_suspended', false)
+            ->whereActive()
+            ->exists();
+    }
+
     public function getFirstNameAttribute(): ?string
     {
         if (empty($this->name)) {
diff --git a/app/Support/GitHubOAuth.php b/app/Support/GitHubOAuth.php
new file mode 100644
index 00000000..02a91a67
--- /dev/null
+++ b/app/Support/GitHubOAuth.php
@@ -0,0 +1,126 @@
+<?php
+
+namespace App\Support;
+
+use Illuminate\Support\Facades\Http;
+use Illuminate\Support\Facades\Log;
+
+class GitHubOAuth
+{
+    private const ORGANIZATION = 'nativephp';
+
+    private const REPOSITORY = 'mobile';
+
+    public function __construct(
+        private ?string $token
+    ) {}
+
+    public static function make(): static
+    {
+        return new static(config('services.github.token') ?? '');
+    }
+
+    public function inviteToMobileRepo(string $githubUsername): bool
+    {
+        $response = Http::withToken($this->token)
+            ->put(
+                sprintf(
+                    'https://api.github.com/repos/%s/%s/collaborators/%s',
+                    self::ORGANIZATION,
+                    self::REPOSITORY,
+                    $githubUsername
+                ),
+                [
+                    'permission' => 'pull', // Read-only access
+                ]
+            );
+
+        if ($response->failed()) {
+            Log::error('Failed to invite user to GitHub repository', [
+                'username' => $githubUsername,
+                'status' => $response->status(),
+                'response' => $response->json(),
+            ]);
+
+            return false;
+        }
+
+        return true;
+    }
+
+    public function removeFromMobileRepo(string $githubUsername): bool
+    {
+        $response = Http::withToken($this->token)
+            ->delete(
+                sprintf(
+                    'https://api.github.com/repos/%s/%s/collaborators/%s',
+                    self::ORGANIZATION,
+                    self::REPOSITORY,
+                    $githubUsername
+                )
+            );
+
+        if ($response->failed()) {
+            Log::error('Failed to remove user from GitHub repository', [
+                'username' => $githubUsername,
+                'status' => $response->status(),
+                'response' => $response->json(),
+            ]);
+
+            return false;
+        }
+
+        return true;
+    }
+
+    public function checkCollaboratorStatus(string $githubUsername): ?string
+    {
+        // First check if they're an active collaborator
+        $response = Http::withToken($this->token)
+            ->get(
+                sprintf(
+                    'https://api.github.com/repos/%s/%s/collaborators/%s',
+                    self::ORGANIZATION,
+                    self::REPOSITORY,
+                    $githubUsername
+                )
+            );
+
+        if ($response->status() === 204) {
+            return 'active';
+        }
+
+        // Check for pending invitation
+        if ($this->hasPendingInvitation($githubUsername)) {
+            return 'pending';
+        }
+
+        if ($response->status() === 404) {
+            return null;
+        }
+
+        return 'unknown';
+    }
+
+    public function hasPendingInvitation(string $githubUsername): bool
+    {
+        $response = Http::withToken($this->token)
+            ->get(
+                sprintf(
+                    'https://api.github.com/repos/%s/%s/invitations',
+                    self::ORGANIZATION,
+                    self::REPOSITORY
+                )
+            );
+
+        if ($response->failed()) {
+            return false;
+        }
+
+        $invitations = $response->json();
+
+        return collect($invitations)->contains(function ($invitation) use ($githubUsername) {
+            return strtolower($invitation['invitee']['login'] ?? '') === strtolower($githubUsername);
+        });
+    }
+}
diff --git a/composer.json b/composer.json
index f83725e1..d8ac9968 100644
--- a/composer.json
+++ b/composer.json
@@ -19,6 +19,7 @@
         "laravel/framework": "^10.10",
         "laravel/pennant": "^1.18",
         "laravel/sanctum": "^3.3",
+        "laravel/socialite": "^5.24",
         "laravel/tinker": "^2.8",
         "league/commonmark": "^2.4",
         "livewire/livewire": "^3.6.4",
diff --git a/composer.lock b/composer.lock
index 7115cbf5..49389d62 100644
--- a/composer.lock
+++ b/composer.lock
@@ -4,7 +4,7 @@
         "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
         "This file is @generated automatically"
     ],
-    "content-hash": "7363069a0c36eee5bb7eb259ab6134a6",
+    "content-hash": "565e1d22ee6d0b4e9d0611e4bfb58658",
     "packages": [
         {
             "name": "anourvalar/eloquent-serialize",
@@ -1746,6 +1746,69 @@
             },
             "time": "2025-06-12T15:11:14+00:00"
         },
+        {
+            "name": "firebase/php-jwt",
+            "version": "v6.11.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/firebase/php-jwt.git",
+                "reference": "d1e91ecf8c598d073d0995afa8cd5c75c6e19e66"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/firebase/php-jwt/zipball/d1e91ecf8c598d073d0995afa8cd5c75c6e19e66",
+                "reference": "d1e91ecf8c598d073d0995afa8cd5c75c6e19e66",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^8.0"
+            },
+            "require-dev": {
+                "guzzlehttp/guzzle": "^7.4",
+                "phpspec/prophecy-phpunit": "^2.0",
+                "phpunit/phpunit": "^9.5",
+                "psr/cache": "^2.0||^3.0",
+                "psr/http-client": "^1.0",
+                "psr/http-factory": "^1.0"
+            },
+            "suggest": {
+                "ext-sodium": "Support EdDSA (Ed25519) signatures",
+                "paragonie/sodium_compat": "Support EdDSA (Ed25519) signatures when libsodium is not present"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Firebase\\JWT\\": "src"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Neuman Vong",
+                    "email": "neuman+pear@twilio.com",
+                    "role": "Developer"
+                },
+                {
+                    "name": "Anant Narayanan",
+                    "email": "anant@php.net",
+                    "role": "Developer"
+                }
+            ],
+            "description": "A simple library to encode and decode JSON Web Tokens (JWT) in PHP. Should conform to the current spec.",
+            "homepage": "https://github.com/firebase/php-jwt",
+            "keywords": [
+                "jwt",
+                "php"
+            ],
+            "support": {
+                "issues": "https://github.com/firebase/php-jwt/issues",
+                "source": "https://github.com/firebase/php-jwt/tree/v6.11.1"
+            },
+            "time": "2025-04-09T20:32:01+00:00"
+        },
         {
             "name": "fruitcake/php-cors",
             "version": "v1.3.0",
@@ -3114,6 +3177,78 @@
             },
             "time": "2024-11-14T18:34:49+00:00"
         },
+        {
+            "name": "laravel/socialite",
+            "version": "v5.24.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/laravel/socialite.git",
+                "reference": "1d19358c28e8951dde6e36603b89d8f09e6cfbfd"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/laravel/socialite/zipball/1d19358c28e8951dde6e36603b89d8f09e6cfbfd",
+                "reference": "1d19358c28e8951dde6e36603b89d8f09e6cfbfd",
+                "shasum": ""
+            },
+            "require": {
+                "ext-json": "*",
+                "firebase/php-jwt": "^6.4",
+                "guzzlehttp/guzzle": "^6.0|^7.0",
+                "illuminate/contracts": "^6.0|^7.0|^8.0|^9.0|^10.0|^11.0|^12.0",
+                "illuminate/http": "^6.0|^7.0|^8.0|^9.0|^10.0|^11.0|^12.0",
+                "illuminate/support": "^6.0|^7.0|^8.0|^9.0|^10.0|^11.0|^12.0",
+                "league/oauth1-client": "^1.11",
+                "php": "^7.2|^8.0",
+                "phpseclib/phpseclib": "^3.0"
+            },
+            "require-dev": {
+                "mockery/mockery": "^1.0",
+                "orchestra/testbench": "^4.18|^5.20|^6.47|^7.55|^8.36|^9.15|^10.8",
+                "phpstan/phpstan": "^1.12.23",
+                "phpunit/phpunit": "^8.0|^9.3|^10.4|^11.5|^12.0"
+            },
+            "type": "library",
+            "extra": {
+                "laravel": {
+                    "aliases": {
+                        "Socialite": "Laravel\\Socialite\\Facades\\Socialite"
+                    },
+                    "providers": [
+                        "Laravel\\Socialite\\SocialiteServiceProvider"
+                    ]
+                },
+                "branch-alias": {
+                    "dev-master": "5.x-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Laravel\\Socialite\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Taylor Otwell",
+                    "email": "taylor@laravel.com"
+                }
+            ],
+            "description": "Laravel wrapper around OAuth 1 & OAuth 2 libraries.",
+            "homepage": "https://laravel.com",
+            "keywords": [
+                "laravel",
+                "oauth"
+            ],
+            "support": {
+                "issues": "https://github.com/laravel/socialite/issues",
+                "source": "https://github.com/laravel/socialite"
+            },
+            "time": "2025-12-09T15:37:06+00:00"
+        },
         {
             "name": "laravel/tinker",
             "version": "v2.10.2",
@@ -3648,6 +3783,82 @@
             ],
             "time": "2024-09-21T08:32:55+00:00"
         },
+        {
+            "name": "league/oauth1-client",
+            "version": "v1.11.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/thephpleague/oauth1-client.git",
+                "reference": "f9c94b088837eb1aae1ad7c4f23eb65cc6993055"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/thephpleague/oauth1-client/zipball/f9c94b088837eb1aae1ad7c4f23eb65cc6993055",
+                "reference": "f9c94b088837eb1aae1ad7c4f23eb65cc6993055",
+                "shasum": ""
+            },
+            "require": {
+                "ext-json": "*",
+                "ext-openssl": "*",
+                "guzzlehttp/guzzle": "^6.0|^7.0",
+                "guzzlehttp/psr7": "^1.7|^2.0",
+                "php": ">=7.1||>=8.0"
+            },
+            "require-dev": {
+                "ext-simplexml": "*",
+                "friendsofphp/php-cs-fixer": "^2.17",
+                "mockery/mockery": "^1.3.3",
+                "phpstan/phpstan": "^0.12.42",
+                "phpunit/phpunit": "^7.5||9.5"
+            },
+            "suggest": {
+                "ext-simplexml": "For decoding XML-based responses."
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "1.0-dev",
+                    "dev-develop": "2.0-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "League\\OAuth1\\Client\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Ben Corlett",
+                    "email": "bencorlett@me.com",
+                    "homepage": "http://www.webcomm.com.au",
+                    "role": "Developer"
+                }
+            ],
+            "description": "OAuth 1.0 Client Library",
+            "keywords": [
+                "Authentication",
+                "SSO",
+                "authorization",
+                "bitbucket",
+                "identity",
+                "idp",
+                "oauth",
+                "oauth1",
+                "single sign on",
+                "trello",
+                "tumblr",
+                "twitter"
+            ],
+            "support": {
+                "issues": "https://github.com/thephpleague/oauth1-client/issues",
+                "source": "https://github.com/thephpleague/oauth1-client/tree/v1.11.0"
+            },
+            "time": "2024-12-10T19:59:05+00:00"
+        },
         {
             "name": "league/uri",
             "version": "7.6.0",
@@ -4898,6 +5109,125 @@
             },
             "time": "2023-11-29T20:28:41+00:00"
         },
+        {
+            "name": "paragonie/constant_time_encoding",
+            "version": "v3.1.3",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/paragonie/constant_time_encoding.git",
+                "reference": "d5b01a39b3415c2cd581d3bd3a3575c1ebbd8e77"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/paragonie/constant_time_encoding/zipball/d5b01a39b3415c2cd581d3bd3a3575c1ebbd8e77",
+                "reference": "d5b01a39b3415c2cd581d3bd3a3575c1ebbd8e77",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^8"
+            },
+            "require-dev": {
+                "infection/infection": "^0",
+                "nikic/php-fuzzer": "^0",
+                "phpunit/phpunit": "^9|^10|^11",
+                "vimeo/psalm": "^4|^5|^6"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "ParagonIE\\ConstantTime\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Paragon Initiative Enterprises",
+                    "email": "security@paragonie.com",
+                    "homepage": "https://paragonie.com",
+                    "role": "Maintainer"
+                },
+                {
+                    "name": "Steve 'Sc00bz' Thomas",
+                    "email": "steve@tobtu.com",
+                    "homepage": "https://www.tobtu.com",
+                    "role": "Original Developer"
+                }
+            ],
+            "description": "Constant-time Implementations of RFC 4648 Encoding (Base-64, Base-32, Base-16)",
+            "keywords": [
+                "base16",
+                "base32",
+                "base32_decode",
+                "base32_encode",
+                "base64",
+                "base64_decode",
+                "base64_encode",
+                "bin2hex",
+                "encoding",
+                "hex",
+                "hex2bin",
+                "rfc4648"
+            ],
+            "support": {
+                "email": "info@paragonie.com",
+                "issues": "https://github.com/paragonie/constant_time_encoding/issues",
+                "source": "https://github.com/paragonie/constant_time_encoding"
+            },
+            "time": "2025-09-24T15:06:41+00:00"
+        },
+        {
+            "name": "paragonie/random_compat",
+            "version": "v9.99.100",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/paragonie/random_compat.git",
+                "reference": "996434e5492cb4c3edcb9168db6fbb1359ef965a"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/paragonie/random_compat/zipball/996434e5492cb4c3edcb9168db6fbb1359ef965a",
+                "reference": "996434e5492cb4c3edcb9168db6fbb1359ef965a",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">= 7"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "4.*|5.*",
+                "vimeo/psalm": "^1"
+            },
+            "suggest": {
+                "ext-libsodium": "Provides a modern crypto API that can be used to generate random bytes."
+            },
+            "type": "library",
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Paragon Initiative Enterprises",
+                    "email": "security@paragonie.com",
+                    "homepage": "https://paragonie.com"
+                }
+            ],
+            "description": "PHP 5.x polyfill for random_bytes() and random_int() from PHP 7",
+            "keywords": [
+                "csprng",
+                "polyfill",
+                "pseudorandom",
+                "random"
+            ],
+            "support": {
+                "email": "info@paragonie.com",
+                "issues": "https://github.com/paragonie/random_compat/issues",
+                "source": "https://github.com/paragonie/random_compat"
+            },
+            "time": "2020-10-15T08:29:30+00:00"
+        },
         {
             "name": "phpoption/phpoption",
             "version": "1.9.4",
@@ -4973,6 +5303,116 @@
             ],
             "time": "2025-08-21T11:53:16+00:00"
         },
+        {
+            "name": "phpseclib/phpseclib",
+            "version": "3.0.48",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/phpseclib/phpseclib.git",
+                "reference": "64065a5679c50acb886e82c07aa139b0f757bb89"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/phpseclib/phpseclib/zipball/64065a5679c50acb886e82c07aa139b0f757bb89",
+                "reference": "64065a5679c50acb886e82c07aa139b0f757bb89",
+                "shasum": ""
+            },
+            "require": {
+                "paragonie/constant_time_encoding": "^1|^2|^3",
+                "paragonie/random_compat": "^1.4|^2.0|^9.99.99",
+                "php": ">=5.6.1"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "*"
+            },
+            "suggest": {
+                "ext-dom": "Install the DOM extension to load XML formatted public keys.",
+                "ext-gmp": "Install the GMP (GNU Multiple Precision) extension in order to speed up arbitrary precision integer arithmetic operations.",
+                "ext-libsodium": "SSH2/SFTP can make use of some algorithms provided by the libsodium-php extension.",
+                "ext-mcrypt": "Install the Mcrypt extension in order to speed up a few other cryptographic operations.",
+                "ext-openssl": "Install the OpenSSL extension in order to speed up a wide variety of cryptographic operations."
+            },
+            "type": "library",
+            "autoload": {
+                "files": [
+                    "phpseclib/bootstrap.php"
+                ],
+                "psr-4": {
+                    "phpseclib3\\": "phpseclib/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Jim Wigginton",
+                    "email": "terrafrost@php.net",
+                    "role": "Lead Developer"
+                },
+                {
+                    "name": "Patrick Monnerat",
+                    "email": "pm@datasphere.ch",
+                    "role": "Developer"
+                },
+                {
+                    "name": "Andreas Fischer",
+                    "email": "bantu@phpbb.com",
+                    "role": "Developer"
+                },
+                {
+                    "name": "Hans-Jürgen Petrich",
+                    "email": "petrich@tronic-media.com",
+                    "role": "Developer"
+                },
+                {
+                    "name": "Graham Campbell",
+                    "email": "graham@alt-three.com",
+                    "role": "Developer"
+                }
+            ],
+            "description": "PHP Secure Communications Library - Pure-PHP implementations of RSA, AES, SSH2, SFTP, X.509 etc.",
+            "homepage": "http://phpseclib.sourceforge.net",
+            "keywords": [
+                "BigInteger",
+                "aes",
+                "asn.1",
+                "asn1",
+                "blowfish",
+                "crypto",
+                "cryptography",
+                "encryption",
+                "rsa",
+                "security",
+                "sftp",
+                "signature",
+                "signing",
+                "ssh",
+                "twofish",
+                "x.509",
+                "x509"
+            ],
+            "support": {
+                "issues": "https://github.com/phpseclib/phpseclib/issues",
+                "source": "https://github.com/phpseclib/phpseclib/tree/3.0.48"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/terrafrost",
+                    "type": "github"
+                },
+                {
+                    "url": "https://www.patreon.com/phpseclib",
+                    "type": "patreon"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/phpseclib/phpseclib",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2025-12-15T11:51:42+00:00"
+        },
         {
             "name": "psr/cache",
             "version": "3.0.0",
diff --git a/config/services.php b/config/services.php
index 446c24a8..d4605099 100644
--- a/config/services.php
+++ b/config/services.php
@@ -39,6 +39,13 @@
         'api_key' => env('BIFROST_API_KEY'),
     ],
 
+    'github' => [
+        'client_id' => env('GITHUB_CLIENT_ID'),
+        'client_secret' => env('GITHUB_CLIENT_SECRET'),
+        'redirect' => env('APP_URL').'/auth/github/callback',
+        'token' => env('GITHUB_TOKEN'), // For API calls (admin:org scope required)
+    ],
+
     'turnstile' => [
         'site_key' => env('TURNSTILE_SITE_KEY'),
         'secret_key' => env('TURNSTILE_SECRET_KEY'),
diff --git a/database/migrations/2025_11_20_120818_add_github_fields_to_users_table.php b/database/migrations/2025_11_20_120818_add_github_fields_to_users_table.php
new file mode 100644
index 00000000..a7efdf7a
--- /dev/null
+++ b/database/migrations/2025_11_20_120818_add_github_fields_to_users_table.php
@@ -0,0 +1,30 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    /**
+     * Run the migrations.
+     */
+    public function up(): void
+    {
+        Schema::table('users', function (Blueprint $table) {
+            $table->string('github_id')->nullable()->after('email');
+            $table->string('github_username')->nullable()->after('github_id');
+            $table->timestamp('mobile_repo_access_granted_at')->nullable()->after('github_username');
+        });
+    }
+
+    /**
+     * Reverse the migrations.
+     */
+    public function down(): void
+    {
+        Schema::table('users', function (Blueprint $table) {
+            $table->dropColumn(['github_id', 'github_username', 'mobile_repo_access_granted_at']);
+        });
+    }
+};
diff --git a/resources/views/components/github-access-banner.blade.php b/resources/views/components/github-access-banner.blade.php
new file mode 100644
index 00000000..b4cda442
--- /dev/null
+++ b/resources/views/components/github-access-banner.blade.php
@@ -0,0 +1,60 @@
+@props(['inline' => false])
+
+@if(auth()->user()->hasActiveMaxLicense())
+    <div @class(['max-w-7xl mx-auto px-4 sm:px-6 lg:px-8' => !$inline])>
+        <div class="bg-gradient-to-r from-gray-50 to-slate-100 dark:from-gray-800 dark:to-slate-900 border border-gray-300 dark:border-gray-600 rounded-lg p-6 h-full">
+            <div class="flex items-start">
+                <div class="flex-shrink-0">
+                    <svg class="h-6 w-6 text-gray-700 dark:text-gray-300" fill="currentColor" viewBox="0 0 24 24" aria-hidden="true">
+                        <path fill-rule="evenodd" d="M12 2C6.477 2 2 6.484 2 12.017c0 4.425 2.865 8.18 6.839 9.504.5.092.682-.217.682-.483 0-.237-.008-.868-.013-1.703-2.782.605-3.369-1.343-3.369-1.343-.454-1.158-1.11-1.466-1.11-1.466-.908-.62.069-.608.069-.608 1.003.07 1.531 1.032 1.531 1.032.892 1.53 2.341 1.088 2.91.832.092-.647.35-1.088.636-1.338-2.22-.253-4.555-1.113-4.555-4.951 0-1.093.39-1.988 1.029-2.688-.103-.253-.446-1.272.098-2.65 0 0 .84-.27 2.75 1.026A9.564 9.564 0 0112 6.844c.85.004 1.705.115 2.504.337 1.909-1.296 2.747-1.027 2.747-1.027.546 1.379.202 2.398.1 2.651.64.7 1.028 1.595 1.028 2.688 0 3.848-2.339 4.695-4.566 4.943.359.309.678.92.678 1.855 0 1.338-.012 2.419-.012 2.747 0 .268.18.58.688.482A10.019 10.019 0 0022 12.017C22 6.484 17.522 2 12 2z" clip-rule="evenodd" />
+                    </svg>
+                </div>
+                <div class="ml-4 flex-1">
+                    <h3 class="font-medium text-gray-900 dark:text-white">
+                        GitHub Repository Access
+                    </h3>
+                    <div class="mt-1 text-sm text-gray-600 dark:text-gray-400">
+                        @if(auth()->user()->github_username)
+                            <p>Connected as <span class="font-mono font-medium text-gray-900 dark:text-white">{{ '@' . auth()->user()->github_username }}</span></p>
+                            @if(auth()->user()->mobile_repo_access_granted_at)
+                                <p class="mt-1">
+                                    <span class="inline-flex items-center px-2 py-0.5 rounded text-xs font-medium bg-green-100 text-green-800 dark:bg-green-900 dark:text-green-200">
+                                        Invitation Sent
+                                    </span>
+                                </p>
+                                <p class="mt-1 text-xs">Check your GitHub notifications to accept.</p>
+                            @else
+                                <p>Request access to the nativephp/mobile repository.</p>
+                            @endif
+                        @else
+                            <p>Connect your GitHub account to access the nativephp/mobile repository.</p>
+                        @endif
+                    </div>
+                    <div class="mt-4 flex flex-wrap gap-2">
+                        @if(auth()->user()->github_username)
+                            @if(!auth()->user()->mobile_repo_access_granted_at)
+                                <form action="{{ route('github.request-access') }}" method="POST">
+                                    @csrf
+                                    <button type="submit" class="inline-flex items-center px-4 py-2 border border-transparent text-sm font-medium rounded-md text-white bg-blue-600 hover:bg-blue-700 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-blue-500">
+                                        Request Access
+                                    </button>
+                                </form>
+                            @endif
+                            <form action="{{ route('github.disconnect') }}" method="POST">
+                                @csrf
+                                @method('DELETE')
+                                <button type="submit" class="inline-flex items-center px-4 py-2 border border-gray-300 dark:border-gray-600 text-sm font-medium rounded-md text-gray-700 dark:text-gray-300 bg-white dark:bg-gray-700 hover:bg-gray-50 dark:hover:bg-gray-600 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-gray-500">
+                                    Disconnect
+                                </button>
+                            </form>
+                        @else
+                            <a href="{{ route('github.redirect') }}" class="inline-flex items-center px-4 py-2 border border-transparent text-sm font-medium rounded-md text-white bg-gray-900 dark:bg-white dark:text-gray-900 hover:bg-gray-800 dark:hover:bg-gray-100 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-gray-500">
+                                Connect GitHub
+                            </a>
+                        @endif
+                    </div>
+                </div>
+            </div>
+        </div>
+    </div>
+@endif
diff --git a/resources/views/customer/licenses/index.blade.php b/resources/views/customer/licenses/index.blade.php
index 5f000a26..7c4f826b 100644
--- a/resources/views/customer/licenses/index.blade.php
+++ b/resources/views/customer/licenses/index.blade.php
@@ -24,14 +24,38 @@
 
         {{-- Banners --}}
         <div class="max-w-7xl mx-auto px-4 sm:px-6 lg:px-8 mb-6">
-            <div class="grid grid-cols-1 lg:grid-cols-2 gap-6">
+            <div class="grid grid-cols-1 lg:grid-cols-3 gap-6">
                 <x-discounts-banner :inline="true" />
                 <livewire:wall-of-love-banner :inline="true" />
+                <x-github-access-banner :inline="true" />
             </div>
         </div>
 
         {{-- Content --}}
         <div class="max-w-7xl mx-auto py-6 px-4 sm:px-6 lg:px-8">
+            {{-- Flash Messages --}}
+            @if(session()->has('success'))
+                <div class="bg-green-50 dark:bg-green-900/20 border border-green-200 dark:border-green-700 rounded-lg p-4 mb-6">
+                    <div class="flex items-center">
+                        <svg class="h-5 w-5 text-green-600 dark:text-green-400 mr-2" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+                            <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M5 13l4 4L19 7"></path>
+                        </svg>
+                        <p class="text-sm text-green-700 dark:text-green-300">{{ session('success') }}</p>
+                    </div>
+                </div>
+            @endif
+
+            @if(session()->has('error'))
+                <div class="bg-red-50 dark:bg-red-900/20 border border-red-200 dark:border-red-700 rounded-lg p-4 mb-6">
+                    <div class="flex items-center">
+                        <svg class="h-5 w-5 text-red-600 dark:text-red-400 mr-2" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+                            <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M6 18L18 6M6 6l12 12"></path>
+                        </svg>
+                        <p class="text-sm text-red-700 dark:text-red-300">{{ session('error') }}</p>
+                    </div>
+                </div>
+            @endif
+
             @if($licenses->count() > 0)
                 <div class="bg-white dark:bg-gray-800 shadow overflow-hidden sm:rounded-md">
                     <ul class="divide-y divide-gray-200 dark:divide-gray-700">
diff --git a/routes/web.php b/routes/web.php
index ac54808b..420bda93 100644
--- a/routes/web.php
+++ b/routes/web.php
@@ -142,6 +142,14 @@
     ->middleware(EnsureFeaturesAreActive::using(ShowAuthButtons::class))
     ->name('customer.logout');
 
+// GitHub OAuth routes
+Route::middleware(['auth', EnsureFeaturesAreActive::using(ShowAuthButtons::class)])->group(function () {
+    Route::get('auth/github', [App\Http\Controllers\GitHubIntegrationController::class, 'redirectToGitHub'])->name('github.redirect');
+    Route::get('auth/github/callback', [App\Http\Controllers\GitHubIntegrationController::class, 'handleCallback'])->name('github.callback');
+    Route::post('customer/github/request-access', [App\Http\Controllers\GitHubIntegrationController::class, 'requestRepoAccess'])->name('github.request-access');
+    Route::delete('customer/github/disconnect', [App\Http\Controllers\GitHubIntegrationController::class, 'disconnect'])->name('github.disconnect');
+});
+
 Route::get('callback', function (Illuminate\Http\Request $request) {
     $url = $request->query('url');
 
diff --git a/tests/Feature/GitHubIntegrationTest.php b/tests/Feature/GitHubIntegrationTest.php
new file mode 100644
index 00000000..7ff7b767
--- /dev/null
+++ b/tests/Feature/GitHubIntegrationTest.php
@@ -0,0 +1,250 @@
+<?php
+
+namespace Tests\Feature;
+
+use App\Features\ShowAuthButtons;
+use App\Models\License;
+use App\Models\User;
+use Illuminate\Foundation\Testing\RefreshDatabase;
+use Illuminate\Support\Facades\Http;
+use Laravel\Pennant\Feature;
+use Tests\TestCase;
+
+class GitHubIntegrationTest extends TestCase
+{
+    use RefreshDatabase;
+
+    protected function setUp(): void
+    {
+        parent::setUp();
+
+        Feature::define(ShowAuthButtons::class, true);
+    }
+
+    public function test_user_with_active_max_license_sees_github_integration_card(): void
+    {
+        $user = User::factory()->create();
+        License::factory()->create([
+            'user_id' => $user->id,
+            'policy_name' => 'max',
+            'expires_at' => now()->addDays(30),
+            'is_suspended' => false,
+        ]);
+
+        $response = $this->actingAs($user)->get('/customer/licenses');
+
+        $response->assertStatus(200);
+        $response->assertSee('GitHub Repository Access');
+        $response->assertSee('Connect GitHub');
+    }
+
+    public function test_user_without_max_license_does_not_see_github_integration_card(): void
+    {
+        $user = User::factory()->create();
+        License::factory()->create([
+            'user_id' => $user->id,
+            'policy_name' => 'pro',
+            'expires_at' => now()->addDays(30),
+            'is_suspended' => false,
+        ]);
+
+        $response = $this->actingAs($user)->get('/customer/licenses');
+
+        $response->assertStatus(200);
+        $response->assertDontSee('GitHub Repository Access');
+    }
+
+    public function test_user_with_connected_github_sees_username(): void
+    {
+        $user = User::factory()->create([
+            'github_username' => 'testuser',
+            'github_id' => '123456',
+        ]);
+        License::factory()->create([
+            'user_id' => $user->id,
+            'policy_name' => 'max',
+            'expires_at' => now()->addDays(30),
+            'is_suspended' => false,
+        ]);
+
+        $response = $this->actingAs($user)->get('/customer/licenses');
+
+        $response->assertStatus(200);
+        $response->assertSee('Connected as');
+        $response->assertSee('@testuser');
+        $response->assertSee('Request Access');
+    }
+
+    public function test_user_can_request_repo_access_with_active_max_license(): void
+    {
+        Http::fake([
+            'api.github.com/repos/nativephp/mobile/collaborators/*' => Http::response([], 201),
+        ]);
+
+        $user = User::factory()->create([
+            'github_username' => 'testuser',
+            'github_id' => '123456',
+        ]);
+        License::factory()->create([
+            'user_id' => $user->id,
+            'policy_name' => 'max',
+            'expires_at' => now()->addDays(30),
+            'is_suspended' => false,
+        ]);
+
+        $response = $this->actingAs($user)
+            ->post('/customer/github/request-access');
+
+        $response->assertRedirect();
+        $response->assertSessionHas('success');
+
+        $this->assertDatabaseHas('users', [
+            'id' => $user->id,
+        ]);
+
+        $user->refresh();
+        $this->assertNotNull($user->mobile_repo_access_granted_at);
+    }
+
+    public function test_user_cannot_request_repo_access_without_max_license(): void
+    {
+        $user = User::factory()->create([
+            'github_username' => 'testuser',
+            'github_id' => '123456',
+        ]);
+        License::factory()->create([
+            'user_id' => $user->id,
+            'policy_name' => 'pro',
+            'expires_at' => now()->addDays(30),
+            'is_suspended' => false,
+        ]);
+
+        $response = $this->actingAs($user)
+            ->post('/customer/github/request-access');
+
+        $response->assertRedirect();
+        $response->assertSessionHas('error');
+    }
+
+    public function test_user_cannot_request_repo_access_without_connected_github(): void
+    {
+        $user = User::factory()->create();
+        License::factory()->create([
+            'user_id' => $user->id,
+            'policy_name' => 'max',
+            'expires_at' => now()->addDays(30),
+            'is_suspended' => false,
+        ]);
+
+        $response = $this->actingAs($user)
+            ->post('/customer/github/request-access');
+
+        $response->assertRedirect();
+        $response->assertSessionHas('error', 'Please connect your GitHub account first.');
+    }
+
+    public function test_user_can_disconnect_github_account(): void
+    {
+        Http::fake([
+            'api.github.com/repos/nativephp/mobile/collaborators/*' => Http::response([], 204),
+        ]);
+
+        $user = User::factory()->create([
+            'github_username' => 'testuser',
+            'github_id' => '123456',
+            'mobile_repo_access_granted_at' => now(),
+        ]);
+        License::factory()->create([
+            'user_id' => $user->id,
+            'policy_name' => 'max',
+            'expires_at' => now()->addDays(30),
+            'is_suspended' => false,
+        ]);
+
+        $response = $this->actingAs($user)
+            ->delete('/customer/github/disconnect');
+
+        $response->assertRedirect();
+        $response->assertSessionHas('success');
+
+        $this->assertDatabaseHas('users', [
+            'id' => $user->id,
+            'github_username' => null,
+            'github_id' => null,
+            'mobile_repo_access_granted_at' => null,
+        ]);
+    }
+
+    public function test_scheduled_command_removes_access_for_expired_max_license(): void
+    {
+        Http::fake([
+            'api.github.com/repos/nativephp/mobile/collaborators/*' => Http::response([], 204),
+        ]);
+
+        $user = User::factory()->create([
+            'github_username' => 'testuser',
+            'github_id' => '123456',
+            'mobile_repo_access_granted_at' => now()->subDays(10),
+        ]);
+        License::factory()->create([
+            'user_id' => $user->id,
+            'policy_name' => 'max',
+            'expires_at' => now()->subDays(1), // Expired
+            'is_suspended' => false,
+        ]);
+
+        $this->artisan('github:remove-expired-access')
+            ->assertExitCode(0);
+
+        $this->assertDatabaseHas('users', [
+            'id' => $user->id,
+            'mobile_repo_access_granted_at' => null,
+        ]);
+    }
+
+    public function test_scheduled_command_does_not_remove_access_for_active_max_license(): void
+    {
+        $user = User::factory()->create([
+            'github_username' => 'testuser',
+            'github_id' => '123456',
+            'mobile_repo_access_granted_at' => now()->subDays(10),
+        ]);
+        License::factory()->create([
+            'user_id' => $user->id,
+            'policy_name' => 'max',
+            'expires_at' => now()->addDays(30), // Active
+            'is_suspended' => false,
+        ]);
+
+        $this->artisan('github:remove-expired-access')
+            ->assertExitCode(0);
+
+        $this->assertDatabaseHas('users', [
+            'id' => $user->id,
+            'github_username' => 'testuser',
+            'mobile_repo_access_granted_at' => $user->mobile_repo_access_granted_at,
+        ]);
+    }
+
+    public function test_user_with_granted_access_sees_access_status(): void
+    {
+        $user = User::factory()->create([
+            'github_username' => 'testuser',
+            'github_id' => '123456',
+            'mobile_repo_access_granted_at' => now()->subHours(2),
+        ]);
+        License::factory()->create([
+            'user_id' => $user->id,
+            'policy_name' => 'max',
+            'expires_at' => now()->addDays(30),
+            'is_suspended' => false,
+        ]);
+
+        $response = $this->actingAs($user)->get('/customer/licenses');
+
+        $response->assertStatus(200);
+        $response->assertSee('Invitation Sent');
+        $response->assertSee('@testuser');
+        $response->assertDontSee('Request Access');
+    }
+}