@bongos/core 1.19.126 → 1.19.128

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.126",
-  "core_contract": "1.19.126",
-  "source_commit": "b56cedc2da8ef6691bd7990c6e3219896694e540",
+  "core_version": "1.19.128",
+  "core_contract": "1.19.128",
+  "source_commit": "15671cf5128a6b644791170f9b76c0637bcc0c2a",
   "source_ref": "HEAD",
-  "built_at": "2026-08-15T00:16:09.571Z",
+  "built_at": "2026-08-15T01:56:43.213Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 303,
     "agent_docs_stubbed": 21,
-    "functional_verbatim": 1245,
+    "functional_verbatim": 1246,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 1569,
-  "tree_sha256": "5703791569f4c26556ad21f0bbcf605faf1b42cfd3631a1ce5f25a05269fd4b4",
+  "file_count": 1570,
+  "tree_sha256": "4df41f4612e88057c6058199bd929bb309af81367a8fd7435309497c2456ac1a",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -2367,7 +2367,7 @@
     {
       "path": "modules/builder-settings/builder-needs.js",
       "mode": "0000644",
-      "sha256": "0b40afc38f91ad053d5ecca380eb35d314a3f104fbe8096d51efeb3de131fc98"
+      "sha256": "3cb7478d9e347147e331f0954a9178a1770918067a678efdb8caef96241dfb5a"
     },
     {
       "path": "modules/builder-settings/db.js",
@@ -3844,6 +3844,11 @@
       "mode": "0000644",
       "sha256": "ddbc1f7e659e716fcbb3ba3ec6c1237756f46dbd895bcb27a1dc925a7c782e76"
     },
+    {
+      "path": "modules/provisioning/migrations/provisioning_008_dns_note.sql",
+      "mode": "0000644",
+      "sha256": "8dc04a18ad77563a2bd73029bf13cab03fb5dadd1b62850fddbde475257e6a76"
+    },
     {
       "path": "modules/provisioning/module.json",
       "mode": "0000644",
@@ -3862,7 +3867,7 @@
     {
       "path": "modules/provisioning/provisioning.js",
       "mode": "0000644",
-      "sha256": "59fd212df421b2bdcdfaef4871aa1927c371d3f7d6affafe44e810135acd12b6"
+      "sha256": "90aa880898f6b3235e8b2a1a553695c63c29920968edb9c9af58364902118e33"
     },
     {
       "path": "modules/provisioning/rate-limit.js",
@@ -3872,7 +3877,7 @@
     {
       "path": "modules/provisioning/routes/provisioning.js",
       "mode": "0000644",
-      "sha256": "321db8769eda7c5f6f385e90edaeec70fc071f0bc2e53e6147705153b0d32d3a"
+      "sha256": "eddf451d5ee5085563af258b5c605c445776c9e226587341f9b4b8b405492240"
     },
     {
       "path": "modules/provisioning/tests/liveness.mjs",
@@ -3882,7 +3887,7 @@
     {
       "path": "modules/provisioning/tests/provisioning.mjs",
       "mode": "0000644",
-      "sha256": "4a5c817d88771a62ccb5d26aea865976b7246a253b2ad7b00e11e3be856586ef"
+      "sha256": "0dc18db288580ca00792194ce5f50a13aae8c445c14d7fc42a2095ab2379c93f"
     },
     {
       "path": "modules/provisioning/ui/.gitkeep",
@@ -4167,12 +4172,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "64edc372bb49cd5c30eb5a1d46f54361293de787d1717d2e116f52568ff93f2c"
+      "sha256": "573c516fc294514ce5ed281eb161de21132ddbfd775c5eb63ae1636bd89fc854"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "c652ffaf3901e4ccc8f64ff9340f7f4f6c418ab738fc52f2b71450083d2a4e97"
+      "sha256": "bfe73c49720864c119018c0ce9a8889271e7f67c4708ca4dbeaf5af26d277b11"
     },
     {
       "path": "public-docs/index.html",
@@ -4427,7 +4432,7 @@
     {
       "path": "public-landing/projects.html",
       "mode": "0000644",
-      "sha256": "6dcb73054fa58d3b0254f1d82a7f639ed465db2c2fd1e83e26f29b80532047e5"
+      "sha256": "ac866c928701c41ac7f055f8807590a3db71eb2538502a54a6fca9ac1d79868d"
     },
     {
       "path": "public-landing/world/assets/clouds/cloud-island-large.png",
@@ -5082,7 +5087,7 @@
     {
       "path": "scripts/gds/provision.js",
       "mode": "0000644",
-      "sha256": "a10501b65207bbd72f9fc039d4cf1ef0be7f85dc832e8e95e1b26aa966e507b8"
+      "sha256": "1925ed112ec553a95388b81cccc1fb003ba2a0e91a5a80c6e315b45895688d0f"
     },
     {
       "path": "scripts/gds/publish-credential-check.js",
@@ -5527,12 +5532,12 @@
     {
       "path": "src/bongos/db-kernel.js",
       "mode": "0000644",
-      "sha256": "fa80ba2c0bb742b83d637280e65965f450bc0387063e65dd06f6bd9171283f23"
+      "sha256": "f31dd847ed641bf49013c345b1f08f9e2794a875dad777de10daeda2a4ae1cf3"
     },
     {
       "path": "src/bongos/db.js",
       "mode": "0000644",
-      "sha256": "64b0efa7c0a251266a8dbc00d43373fb1516fa5c88ba737220c969ec97a2e98b"
+      "sha256": "d3dd606664855a94788751d13ab7fc62ccdc4a8df48f331ec97a5a81a8a6fa96"
     },
     {
       "path": "src/bongos/github-repos.js",
@@ -5687,7 +5692,7 @@
     {
       "path": "src/bongos/routes/me.js",
       "mode": "0000644",
-      "sha256": "e6c9e19a4b644f35da665cc48df21085d9a187e3b694a73af01f3d1b83c620b8"
+      "sha256": "83657d8a2f8e1d81a80324350ddd983baf5346da3f88ce1f41c2211275f34440"
     },
     {
       "path": "src/bongos/routes/modules.js",
@@ -5757,7 +5762,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "c64972eb393e195b4f24de3459036423077430a5cf643fd2e3a8da525ab3af56"
+      "sha256": "e0b338840f48746ba4ad9bccd7dd4b80c36b844c2e16ea12bdf42f22ceb2eef5"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -6147,7 +6152,7 @@
     {
       "path": "tests/builder_needs.mjs",
       "mode": "0000644",
-      "sha256": "e3d8c5ac45d59f5d566547e2c406cf44ffa60f1b243afcb222b09eee68f5ee0d"
+      "sha256": "49a8146cbb0ec5def5b48130ed61fdec6e9855f22fe5ad3a09b39ae2cb218ca8"
     },
     {
       "path": "tests/bump_version.mjs",
@@ -7297,7 +7302,7 @@
     {
       "path": "tests/provision.mjs",
       "mode": "0000644",
-      "sha256": "edb6c5da9ec32536d50f7cb648b81b026b7926f73f891feb0906fc7343b5b11d"
+      "sha256": "5297caf5005fd26c8435aa374511882a6c2d232e43f07cdc6ec19d1168ee1cc1"
     },
     {
       "path": "tests/provisioning_default_domain.mjs",
@@ -7307,7 +7312,7 @@
     {
       "path": "tests/provisioning_domain_attach.mjs",
       "mode": "0000644",
-      "sha256": "fbbd7397fd03181e9c2ea58ed8accb1a9d9d66d4c904a09265161e1034b02f9f"
+      "sha256": "856f434c8e1a8e8ad549c81689f1bbe27ff555e4ba08f9b485c3e9d46838a4a5"
     },
     {
       "path": "tests/provisioning_github_app_routes.mjs",
@@ -7332,7 +7337,7 @@
     {
       "path": "tests/public_landing_projects.mjs",
       "mode": "0000644",
-      "sha256": "2d4dea6cd6be287c1d7629009adc64fba526b1ebbe53a800ae43499e1b8e3f18"
+      "sha256": "7f2fe0290fc0a429b54ca53d449453e9009a57e40bb8003b2718beef33be2309"
     },
     {
       "path": "tests/public_mirror_export.mjs",

package/modules/builder-settings/builder-needs.js

@@ -90,13 +90,68 @@ function artKeyNeed(ctx) {
 // pure (ctx) => need|null function here — every renderer picks it up for free.
 const NEEDS = [artKeyNeed];
 
+// ---- founding grace (task 1002739 / direction §5.6, idea 1000701) -----------
+//
+// A freshly-provisioned instance used to greet its founding owner with "your
+// free art coverage has ended" — a demand as the payoff moment of the whole
+// create flow. While the founding owner's first days are running, the roster
+// leads with a welcome and every action_needed item is held at 'covered'
+// (listed, honest, but not demanding). First-run is a time window, not a
+// visit-counter: counting the first hall visit would end the grace on the very
+// request that renders it.
+//
+// ctx.isFoundingOwner   — is this builder the instance's first admitted builder?
+// ctx.founderCreatedAt  — that first builder's created_at (≈ the instance's
+//                         birth on a newborn); the window anchors here.
+// ctx.projectName       — branding identity.productName, for the greeting.
+// ctx.nowMs             — injectable clock for tests; defaults to Date.now().
+const FOUNDING_GRACE_DAYS = 7;
+const FOUNDING_GRACE_MS = FOUNDING_GRACE_DAYS * 24 * 60 * 60 * 1000;
+
+function foundingGraceActive(ctx = {}) {
+  if (!ctx.isFoundingOwner || !ctx.founderCreatedAt) return false;
+  const born = new Date(ctx.founderCreatedAt).getTime();
+  if (!Number.isFinite(born)) return false;
+  const now = typeof ctx.nowMs === 'number' ? ctx.nowMs : Date.now();
+  return now - born < FOUNDING_GRACE_MS;
+}
+
+function foundingWelcomeNeed(ctx) {
+  const name = ctx.projectName || 'your project';
+  return {
+    id: 'founding_welcome',
+    title: `Welcome to ${name}`,
+    what: 'Your project is standing, and this hall is where it gets built.',
+    learn_more_url: null,
+    state: 'covered',
+    severity: 'info',
+    message: `You made it — ${name} is up, and this hall is its workshop. ` +
+      'Look around at your own pace; if the platform ever needs something from you, ' +
+      'it will say so here once your first days are behind you.',
+    action: null,
+  };
+}
+
 // Compute the live list for a builder. `ctx` carries everything the need
 // functions read (see each need's doc). Returns:
 //   { items: Need[], action_needed_count, has_action_needed }
 // items is ordered: action_needed first (loudest), then covered, then satisfied,
-// so any renderer that takes "the first one" gets the most urgent.
+// so any renderer that takes "the first one" gets the most urgent. During the
+// founding grace nothing is action_needed, so the welcome (prepended before the
+// stable sort) is what that renderer shows.
 function computeNeeds(ctx = {}) {
-  const items = NEEDS.map((fn) => fn(ctx)).filter(Boolean);
+  const grace = foundingGraceActive(ctx);
+  let items = NEEDS.map((fn) => fn(ctx)).filter(Boolean);
+  if (grace) {
+    items = items.map((n) => n.state !== 'action_needed' ? n : {
+      ...n,
+      state: 'covered',
+      severity: 'info',
+      message: 'Nothing needed from you today — we’ll bring this up once your first days are behind you.',
+      action: null,
+    });
+    items.unshift(foundingWelcomeNeed(ctx));
+  }
   const order = { action_needed: 0, covered: 1, satisfied: 2 };
   items.sort((a, b) => (order[a.state] ?? 9) - (order[b.state] ?? 9));
   const actionNeeded = items.filter((n) => n.state === 'action_needed');
@@ -111,5 +166,7 @@ module.exports = {
   computeNeeds,
   // exported for tests / direct reuse
   artKeyNeed,
+  foundingGraceActive,
+  FOUNDING_GRACE_DAYS,
   SETTINGS_PATH,
 };

package/modules/provisioning/migrations/provisioning_008_dns_note.sql

@@ -0,0 +1,15 @@
+-- provisioning_008_dns_note.sql — transport the runner's "DNS was skipped" fact
+-- to the owner's card (task 1002720 / QA-walk F16).
+--
+-- WHY. With BOX_DNS_HOOK unset, domain-attach wires env + Caddy but SKIPS the
+-- A-record upsert — a fact that lived only in the runner's log while the owner's
+-- card promised the address "will answer shortly" (it never would). This column
+-- carries the outstanding manual step as a plain sentence the card renders.
+--
+-- OVERLAY, NOT A STATE (the provisioning_006 rule): nullable, no default,
+-- never written by the lifecycle. NULL = nothing outstanding. A later attach
+-- with a working hook clears it.
+ALTER TABLE provisioning_instances ADD COLUMN IF NOT EXISTS dns_note text;
+
+INSERT INTO schema_migrations (version) VALUES ('provisioning_008_dns_note')
+ON CONFLICT (version) DO NOTHING;

package/modules/provisioning/provisioning.js

@@ -198,6 +198,9 @@ function publicInstance(row) {
     // them differently ("live?" vs "unreachable"). Never collapse the two.
     last_verified_at: row.last_verified_at || null,
     last_verified_up: row.last_verified_up == null ? null : !!row.last_verified_up,
+    // The outstanding manual-DNS step, if the runner had no hook to point the
+    // A record (task 1002720 / F16). null = nothing outstanding.
+    dns_note: row.dns_note || null,
     cost_estimate_usd: Number(row.cost_estimate_usd || 0),
     error_note: row.error_note || null,
     created_at: row.created_at,
@@ -372,6 +375,30 @@ async function recordLivenessProbe(db, id, up) {
   return rows[0] || null;
 }
 
+// Record (or clear, with null) the outstanding manual-DNS sentence the card
+// renders (task 1002720 / F16). Same narrowness rule as recordLivenessProbe:
+// no `status`, no `updated_at` — the runner's lifecycle authorship and the
+// owner's card ordering stay untouched.
+async function recordDnsNote(db, id, note) {
+  const { rows } = await db.query(
+    `UPDATE provisioning_instances SET dns_note = $2 WHERE id = $1 RETURNING id, dns_note`,
+    [id, note || null]
+  );
+  return rows[0] || null;
+}
+
+// Clear the error_note latch (task 1002720 / F19). The retire leg of the intent
+// runner sets it when work stops; a later SUCCESSFUL run must release it, or the
+// card shows "we stopped trying" forever on a healed instance. Same narrowness
+// rule: no status, no updated_at.
+async function clearErrorNote(db, id) {
+  const { rows } = await db.query(
+    `UPDATE provisioning_instances SET error_note = NULL WHERE id = $1 RETURNING id`,
+    [id]
+  );
+  return rows[0] || null;
+}
+
 // The caller's own instances, newest first.
 async function listInstancesForOwner(db, ownerBuilderId) {
   const { rows } = await db.query(
@@ -701,7 +728,7 @@ module.exports = {
   isProvisionedHostname,
   getInstanceById, getInstanceBySlug, getInstanceByDomain, listInstancesForOwner, listAllInstances,
   // data access — verification overlay (task 1002696)
-  listActiveInstancesForLiveness, recordLivenessProbe,
+  listActiveInstancesForLiveness, recordLivenessProbe, recordDnsNote, clearErrorNote,
   createInstance, setInstanceStatus, updateInstanceDomain,
   enqueueIntent, enqueueTeardown, getOpenIntent, claimNextIntent, resolveIntent,
   recordEvent, instanceStateForSlug, costLedger,

package/modules/provisioning/routes/provisioning.js

@@ -589,6 +589,28 @@ module.exports = function provisioningRoutes() {
       }
       const current = provisioning.normalizeHostname(inst.domain);
       if (current && current === domain) {
+        // Re-sending the SAME address is the owner's only re-kick when the
+        // wiring stopped (task 1002720 / F19) — the mirror of what POST
+        // /instances already does for a snagged standup. Only when the wiring
+        // DEMONSTRABLY needs it — a retired intent left its error_note, or the
+        // probe says the address doesn't answer — and nothing is in flight. A
+        // healthy instance (no note, verified up or unprobed) keeps the
+        // idempotent no-op below.
+        const needsRewire = inst.error_note || inst.last_verified_up === false;
+        if (inst.status === 'active' && needsRewire && !(await provisioning.getOpenIntent(pool, id))) {
+          const { created } = await provisioning.enqueueIntent(pool, id, 'domain-attach', 'api:self');
+          if (created) {
+            await provisioning.recordEvent(pool, {
+              instanceId: id, ownerBuilderId: req.builder.id, event: 'domain',
+              detail: `domain ${domain} re-attach queued (owner re-kick)`, actor: 'api:self',
+            }).catch(() => {});
+          }
+          // created:false = a racing enqueue got there first — still truthful.
+          return res.json({ ok: true, changed: false, queued: !!created, domain: inst.domain,
+            message: created
+              ? 'Wiring that address again — this card updates when it starts.'
+              : 'That address is already being wired — this card updates when it starts.' });
+        }
         return res.json({ ok: true, changed: false, queued: false, domain: inst.domain,
           message: 'This instance already has that address.' });
       }
@@ -640,8 +662,11 @@ module.exports = function provisioningRoutes() {
         actor: 'api:self',
       }).catch(() => {});
       res.json({ ok: true, changed: true, queued, domain,
+        // State-only sentence (task 1002720 / F16): the web tier holds no cloud
+        // tokens and cannot know whether a DNS hook exists on the runner, so
+        // "it will answer there shortly" was a promise it could not keep.
         message: queued
-          ? 'Your instance is being wired to its new address — it will answer there shortly.'
+          ? 'Your instance is being wired to its new address — this card will show whether it answers.'
           : 'Address recorded — it will be wired when the instance is provisioned.' });
     } catch (err) {
       console.error('[provisioning] POST /provisioning/instances/:id/domain', err);

package/modules/provisioning/tests/provisioning.mjs

@@ -235,5 +235,26 @@ t('publicInstance projects the declared type — nullable, never silently droppe
   assert.equal(q.type, null, 'a row predating provisioning_007 projects null, not undefined');
 });
 
+t('publicInstance projects dns_note — nullable, never silently dropped (task 1002720 / F16)', () => {
+  const p = P.publicInstance({ id: 1, slug: 'x', status: 'active', dns_note: 'point the A record at 203.0.113.5' });
+  assert.match(p.dns_note, /A record/, 'the owner-facing manual-DNS sentence must reach the card');
+  const q = P.publicInstance({ id: 2, slug: 'y', status: 'active' });
+  assert.equal(q.dns_note, null, 'a row predating provisioning_008 projects null, not undefined');
+});
+
+await ta('recordDnsNote / clearErrorNote are NARROW single-column updates — no status, no updated_at', async () => {
+  let sql = '', params = null;
+  const db = { query: async (q, p) => { sql = q; params = p; return { rows: [{ id: 5 }] }; } };
+  await P.recordDnsNote(db, 5, 'note text');
+  assert.match(sql, /SET dns_note = \$2/);
+  assert.doesNotMatch(sql, /status|updated_at/, 'the overlay must never reshuffle lifecycle or card order');
+  assert.deepEqual(params, [5, 'note text']);
+  await P.recordDnsNote(db, 5, null);
+  assert.deepEqual(params, [5, null], 'null clears');
+  await P.clearErrorNote(db, 5);
+  assert.match(sql, /SET error_note = NULL/);
+  assert.doesNotMatch(sql, /status\s*=|updated_at/, 'releasing the latch must not touch the lifecycle');
+});
+
 console.log(`\nprovisioning module: ${passed} passed, ${failed} failed`);
 process.exit(failed ? 1 : 0);

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.126",
+  "version": "1.19.128",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.126",
+      "version": "1.19.128",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.126",
+  "version": "1.19.128",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/public-landing/projects.html

@@ -228,6 +228,17 @@ h1[tabindex="-1"]:focus{outline:none;}
 .prog.isLive .pnote{color:color-mix(in srgb,var(--ok) 75%,var(--ink));font-size:14px;}
 .prog.isErr{background:var(--err-soft);border-color:color-mix(in srgb,var(--err) 25%,var(--bg-card));}
 .prog.isErr .pnote{color:var(--err);}
+/* teardown's calm neutral (F22) — transcribed from cosmos's .strip.flowDown,
+   the same .prog-mirrors-.strip duplication as the rest of this block */
+.prog.flowDown{border-color:var(--line);background:linear-gradient(180deg,var(--neutral-soft) 0%,var(--bg-card) 100%);}
+.prog.flowDown .stages li:not(:first-child)::before{background:var(--line);}
+.prog.flowDown .stages li.done:not(:first-child)::before{background:var(--ink-faint);}
+.prog.flowDown .sdot{border-color:var(--line);}
+.prog.flowDown .stages li.done .sdot{border-color:var(--ink-faint);background:var(--ink-faint);}
+.prog.flowDown .stages li.now .sdot{border-color:var(--ink-soft);}
+.prog.flowDown .stages li.now .sdot::after{background:var(--ink-soft);}
+.prog.flowDown .slbl{color:var(--ink-faint);}
+.prog.flowDown .stages li.now .slbl,.prog.flowDown .stages li.done .slbl{color:var(--ink-soft);}
 .again{
   display:inline-block;margin-top:14px;font-size:13px;font-weight:700;color:var(--ink-faint);
   background:none;border:none;cursor:pointer;font-family:var(--font-body);text-decoration:underline;
@@ -2864,25 +2875,55 @@ h1[tabindex="-1"]:focus{outline:none;}
     var watchPending = false;      /* a parked progress watch, resumed on re-entry */
     var watchGen = 0;              /* same orphaning contract as manifestGen above */
     function stopPolling() { watchGen += 1; if (pollTimer) { clearTimeout(pollTimer); pollTimer = null; } }
-    function progressMarkup(stageNow, stagesDone, note, cls) {
-      var names = ['Request filed', 'Standing it up', 'Live'];
-      return '<div class="prog ' + (cls || '') + '" role="status" aria-live="polite">' +
-        '<ul class="stages">' + names.map(function (n, i) {
+    /* The done panel's own flow vocabularies (F22). A local mirror of the mine
+       view's FLOWS — that table lives in the OTHER page IIFE, out of scope here,
+       the same isolation that makes .prog duplicate .strip. */
+    var PROG_FLOWS = {
+      standup: { names: ['Request filed', 'Standing it up', 'Live'], cls: '' },
+      revive: { names: ['Revive queued', 'Standing it up', 'Back live'], cls: '' },
+      teardown: { names: ['Teardown queued', 'Winding down', 'Torn down'], cls: 'flowDown' }
+    };
+    function progressMarkup(stageNow, stagesDone, note, cls, flow) {
+      var f = PROG_FLOWS[flow || 'standup'];
+      return '<div class="prog ' + (f.cls ? f.cls + ' ' : '') + (cls || '') + '" role="status" aria-live="polite">' +
+        '<ul class="stages">' + f.names.map(function (n, i) {
           var c = stagesDone > i ? 'done' : (stageNow === i ? 'now' : '');
           return '<li class="' + c + '"><span class="sdot"></span><span class="slbl">' + n + '</span></li>';
         }).join('') + '</ul>' +
         '<p class="pnote">' + note + '</p></div>';
     }
     /* Renders the current instance state; returns true when the state is terminal
-       (no further polling wanted). */
+       (no further polling wanted). The strip is chosen by the OPEN INTENT first,
+       then status (F22): a torn-down instance with a queued revive must never be
+       told to "start another project". */
     function renderProgress(inst) {
       var el = $('liveProgress');
       if (!el) return true;
       var s = inst && inst.status;
+      var revive = !!(inst && inst.torn_down_at);
+      var oi = inst && inst.open_intent;
+      /* requested/provisioning/tearing_down speak their STATUS (a requested
+         instance always has its provision intent open — the intent branch
+         would make the status branch dead and diverge from the mine card) */
+      if (oi && s !== 'provisioning' && s !== 'tearing_down' && s !== 'requested') {
+        if (oi.action === 'provision') {
+          el.innerHTML = progressMarkup(0, 0,
+            (s === 'torn_down' ? 'A revive is queued' : 'A standup is queued') + ' — this panel updates when it starts.',
+            '', s === 'torn_down' ? 'revive' : 'standup');
+          return false;
+        }
+        if (oi.action === 'teardown') {
+          el.innerHTML = progressMarkup(0, 0, 'A teardown is queued — this panel updates when it starts.', '', 'teardown');
+          return false;
+        }
+      }
       if (s === 'requested') {
-        el.innerHTML = progressMarkup(1, 1, 'Waiting for a runner to pick it up. This updates the moment it starts.');
+        el.innerHTML = progressMarkup(1, 1, 'Waiting for a runner to pick it up. This updates the moment it starts.', '', revive ? 'revive' : 'standup');
       } else if (s === 'provisioning') {
-        el.innerHTML = progressMarkup(1, 1, 'Raising the server, database, and address — nothing needed from you.');
+        el.innerHTML = progressMarkup(1, 1,
+          revive ? 'Bringing it back on the newest platform version — nothing needed from you.'
+                 : 'Raising the server, database, and address — nothing needed from you.',
+          '', revive ? 'revive' : 'standup');
       } else if (s === 'active') {
         var addr = inst.domain ? 'https://' + inst.domain : null;
         el.innerHTML = progressMarkup(-1, 3,
@@ -2894,9 +2935,13 @@ h1[tabindex="-1"]:focus{outline:none;}
            false "keeps retrying" — retries stop, and the retry door is the mine view */
         el.innerHTML = progressMarkup(1, 1,
           'The standup stopped partway — it won’t continue on its own. Retry it (and see the technical details) from <a href="?view=mine">your projects page</a>.', 'isErr');
-      } else if (s === 'tearing_down' || s === 'torn_down') {
-        /* a deliberate end is calm, never styled as a failure (direction §5) */
-        el.innerHTML = progressMarkup(-1, 0, 'This instance was torn down. Bring it back any time from <a href="?view=mine">your projects page</a>, or start another below.');
+      } else if (s === 'tearing_down') {
+        /* a deliberate end is calm, never styled as a failure (direction §5) —
+           and it speaks the teardown vocabulary, not the standup's (F22) */
+        el.innerHTML = progressMarkup(1, 1, 'Taking the server offline. The repository stays yours; ' +
+          (inst.hosting_shape === 'dedicated' ? 'its database goes with the machine.' : 'the database is kept.'), '', 'teardown');
+      } else if (s === 'torn_down') {
+        el.innerHTML = progressMarkup(-1, 3, 'This instance was torn down. Bring it back any time from <a href="?view=mine">your projects page</a>, or start another below.', '', 'teardown');
         return true;
       } else {
         el.innerHTML = progressMarkup(0, 1, 'Filed. Watching for the standup to start…');
@@ -2936,6 +2981,7 @@ h1[tabindex="-1"]:focus{outline:none;}
           .then(function (data) {
             if (myGen !== watchGen) return;
             var inst = data.instance;
+            if (inst) inst.open_intent = data.open_intent || null;   /* F22: the strip reads intents */
             /* the checklist reflects live state (task 1002694): a status transition —
                e.g. the scaffold landing — re-renders the steps (change-only, so the
                5s tick never clobbers an open dropdown or mid-flight button) */
@@ -3198,6 +3244,10 @@ h1[tabindex="-1"]:focus{outline:none;}
   /* domainless instances get their first address; an assigned default may be
      upgraded to a bring-your-own domain (the server allows exactly that re-point) */
   function canAttachDomain(inst) {
+    /* the re-kick door (F19): an active instance whose address wiring stopped
+       (error_note, no intent in flight) can re-send its own domain — the route
+       re-enqueues the attach for exactly this shape */
+    if (inst.status === 'active' && inst.domain && inst.error_note && !inst.open_intent) return true;
     return (!inst.domain || inst.domain === assignedDefaultFor(inst)) &&
       (inst.status === 'requested' || inst.status === 'error' || inst.status === 'active');
   }
@@ -3258,7 +3308,8 @@ h1[tabindex="-1"]:focus{outline:none;}
                : 'Raising the server, database, and address — nothing needed from you.');
     }
     if (s === 'tearing_down') {
-      return stripMarkup('teardown', 1, 1, 'Taking the server offline. The repository stays yours; the database is kept.');
+      return stripMarkup('teardown', 1, 1, 'Taking the server offline. The repository stays yours; ' +
+        (inst.hosting_shape === 'dedicated' ? 'its database goes with the machine.' : 'the database is kept.'));
     }
     if (inst.open_intent) {
       var a = inst.open_intent.action;
@@ -3297,6 +3348,14 @@ h1[tabindex="-1"]:focus{outline:none;}
   /* ── rendering ───────────────────────────────────────────────────────── */
 
   var SHAPE_LABEL = { standalone: 'its own server', 'co-tenant': 'shared server', dedicated: 'its own server' };
+  /* what a teardown ACTUALLY does, per hosting shape (F17 — the DECIDED policy:
+     retention is deliberate on shared boxes; a dedicated machine takes its
+     database with it). Copy follows the runner, never the other way around. */
+  function teardownTruth(inst) {
+    return inst && inst.hosting_shape === 'dedicated'
+      ? 'This project has a machine to itself, so the machine goes away and its database goes with it. Your repository is untouched.'
+      : 'The server goes away and the address stops answering. Your repository is untouched. The database is kept, so bringing it back later restores its memory.';
+  }
 
   function addressRow(inst) {
     if (inst.domain) {
@@ -3305,6 +3364,9 @@ h1[tabindex="-1"]:focus{outline:none;}
            heartbeat earns it — never the runner finishing its script */
         var link = '<a href="https://' + esc(inst.domain) + '" target="_blank" rel="noopener">' + esc(inst.domain) + '</a>';
         if (inst.last_verified_up) return 'Answering at ' + link;
+        /* the runner had no DNS hook (F16): the CAUSE beats the bare symptom —
+           a successful A record flips last_verified_up and retires the note */
+        if (inst.dns_note) return 'Its address is ' + link + '. ' + esc(inst.dns_note);
         if (inst.last_verified_up === false) return 'Not answering at ' + link + ' right now.';
         return 'Its address is ' + link + ' — confirming it answers.';
       }
@@ -3335,20 +3397,28 @@ h1[tabindex="-1"]:focus{outline:none;}
     var addr = addressRow(inst);
     if (addr) body += '<div class="addr">' + addr + '</div>';
     if (canAttachDomain(inst)) {
+      var rekick = inst.status === 'active' && inst.domain && inst.error_note;
       body += '<div class="attach">' +
-        '<input type="text" id="dom-' + iid + '" placeholder="myproject.example.com" autocomplete="off" spellcheck="false" maxlength="253">' +
+        '<input type="text" id="dom-' + iid + '" placeholder="myproject.example.com" autocomplete="off" spellcheck="false" maxlength="253"' +
+        (rekick ? ' value="' + esc(inst.domain) + '"' : '') + '>' +
         '<button type="button" class="btn small" data-attach="' + iid + '">' +
-        (inst.domain ? 'Use your own domain' : 'Give it an address') + '</button></div>';
+        (rekick ? 'Try the address again' : inst.domain ? 'Use your own domain' : 'Give it an address') + '</button></div>';
     }
-    if (inst.status === 'error' && !inst.open_intent) {
+    if ((inst.status === 'error' || inst.error_note) && !inst.open_intent) {
       /* once a retry is queued the strip tells the story — the stale error
-         paragraph would just contradict it (owner walk, 2026-08-12) */
+         paragraph would just contradict it (owner walk, 2026-08-12). Also
+         covers an ACTIVE instance whose intent retired with a note (F19) —
+         the work stopped and the card must say so, not stay silent. */
       body += '<div class="projMsg err">' + errMarkup(inst) + '</div>';
     }
     body += stripFor(inst);
-    if (gone) {
+    if (gone && !inst.open_intent) {
+      /* with a revive queued, the strip tells the story — this paragraph would
+         contradict it (F22, the same guard the error paragraph has) */
       body += '<div class="projMsg">Torn down' + (inst.torn_down_at ? ' ' + esc(shortDate(inst.torn_down_at)) : '') +
-        '. The repository is still yours, and its database is kept — bringing it back takes one click. Or <a href="?view=new">start another</a>.</div>';
+        (inst.hosting_shape === 'dedicated'
+          ? '. The repository is still yours. Bringing it back stands up a fresh machine with an empty database. Or <a href="?view=new">start another</a>.</div>'
+          : '. The repository is still yours, and its database is kept — bringing it back takes one click. Or <a href="?view=new">start another</a>.</div>');
     }
     var lm = lastMsg[inst.id];
     body += '<div class="projMsg' + (lm && lm.cls ? ' ' + lm.cls : '') + '" id="msg-' + iid + '">' + (lm ? lm.text : '') + '</div>';
@@ -3522,7 +3592,7 @@ h1[tabindex="-1"]:focus{outline:none;}
     var act = $('act-' + id);
     if (!act) return;
     act.innerHTML = '<div class="confirmRow">' +
-      '<span class="plain">Tear it down? The server goes away and the address stops answering. Your repository is untouched. The database is kept, so bringing it back later restores its memory.</span>' +
+      '<span class="plain">Tear it down? ' + teardownTruth(byId[id]) + '</span>' +
       '<button type="button" class="btn small danger" data-teardown-yes="' + esc(id) + '">Yes, tear it down</button>' +
       '<button type="button" class="linklike" data-teardown-no="' + esc(id) + '">Keep it running</button></div>';
   }