@bongos/core 1.19.583 → 1.19.584

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.583",
-  "core_contract": "1.19.583",
-  "source_commit": "fb22777c0f055003ba879a32ce83f133c3bcf404",
+  "core_version": "1.19.584",
+  "core_contract": "1.19.584",
+  "source_commit": "7c7b294c8826106fad152689caf15014afbaf444",
   "source_ref": "HEAD",
-  "built_at": "2026-09-07T21:24:48.534Z",
+  "built_at": "2026-09-07T21:57:27.222Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 453,
     "agent_docs_stubbed": 24,
-    "functional_verbatim": 2055,
+    "functional_verbatim": 2056,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 2532,
-  "tree_sha256": "bd94f04eed1f7a4c89844c53856157cdb9a14e2281876e6025d511ca9c446b7a",
+  "file_count": 2533,
+  "tree_sha256": "1091075083386a5cf37d1f5736153ed4f8cb23a152f278b1120d408446e48f14",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -1857,12 +1857,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "c4b6557f79a876b18cfc020ea4d45b8dfa419c9c37cab3fb2c629d85939bd75d"
+      "sha256": "9357061e4e1046ee48fc227ed0b837fc32d950f7ceb5fccb4a549d310c19e5ee"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "867399ce0002d6a1f509969544ad9589db6769352597471b495c66749271bb3c"
+      "sha256": "34c8e1786455cbf5c76dc5ad2fffb407d4d51e4009d5455545571c415d83afaa"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2707,7 +2707,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "a73cb53670674b790e02461ef7c11e001a5ed0ebb38498ffa222034263058932"
+      "sha256": "2e124b22362c309eb08016d25db0dfbcd5d7ee2930db895c21b5053a4565a782"
     },
     {
       "path": "docs/modules-contract.md",
@@ -6832,7 +6832,7 @@
     {
       "path": "modules/public-landing/public/projects.html",
       "mode": "0000644",
-      "sha256": "0154fab4db489db2eb1955bffdd9b0585ff7fe28607897e75c26d83c7edfc3e0"
+      "sha256": "79b713d994571f5f2405605fa19bd1b0ec05546f2ff606227afa9c91392bd969"
     },
     {
       "path": "modules/public-landing/public/projects.probes.json",
@@ -7577,12 +7577,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "b37aec87b322bad5e71296695b690719db6952a401e63afe00c277863e109082"
+      "sha256": "1dedc1b50a922313443c0c20150eb85bff94a6b56d86009a39084220724e3080"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "5ddfb97b2d19da1f5631fd5fcd81102c1fb3188a855b4ea9a2e640447dad2403"
+      "sha256": "03cb18f378e3d31ff342f11c865a8a97a9c08a1b6be530e35ca89fcb50632b3d"
     },
     {
       "path": "public-docs/index.html",
@@ -9292,7 +9292,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "4cae7c47e642670fbd78fa75a65b4cee629fbc43df0a9c34a69fc465c434330e"
+      "sha256": "21ef11c8ad8fe92b37ecb6279f79cbbf8d61a25283bb2623d50cf6db210414f7"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -12644,6 +12644,11 @@
       "mode": "0000644",
       "sha256": "456b20334164a710f59116d6a6c4b85090dc0e65668284d0a736e6ee1df5dea6"
     },
+    {
+      "path": "tests/wizard_draft_resume.mjs",
+      "mode": "0000644",
+      "sha256": "74ffbc7e4585e651d00ab879ece6f3d23089d7c9ae7acb15483d3752b47bbdc0"
+    },
     {
       "path": "tests/workflow_exec_paths.mjs",
       "mode": "0000644",

package/docs/copy-inventory.md

@@ -4,7 +4,7 @@
 > Deterministic on a given tree — regenerate and commit rather than hand-editing.
 > Machine-readable twin: [`copy-registry.json`](copy-registry.json).
 
-**1709 strings** across 3 surfaces · 1478 distinct pieces of copy · 1709 certain, 0 heuristic · 162 shown in more than one place.
+**1710 strings** across 3 surfaces · 1479 distinct pieces of copy · 1710 certain, 0 heuristic · 162 shown in more than one place.
 
 ## Surfaces
 
@@ -12,7 +12,7 @@
 |---|---|---|---|
 | `builders-hall` | `modules/hall-ui/public` | 78 | 1237 |
 | `status-dashboard` | `modules/status-ui/public` | 4 | 100 |
-| `landing` | `modules/public-landing/public` | 5 | 372 |
+| `landing` | `modules/public-landing/public` | 5 | 373 |
 
 ## Confidence, and why it is on every row
 
@@ -49,7 +49,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `90a128c97eae` | 4x | Builders' hall | modules/public-landing/public/index.html:906, modules/public-landing/public/projects.html:550, modules/public-landing/public/projects.html:550 |
 | `bd315dd71ea7` | 4x | Built by agents, on Cloud Bongos. | modules/public-landing/public/contact.html:71, modules/public-landing/public/index.html:900, modules/public-landing/public/privacy.html:80 |
 | `512ab32e3bf2` | 4x | Close box | modules/hall-ui/public/box-panel.js:149, modules/hall-ui/public/box-panel.js:163, modules/hall-ui/public/box-panel.js:206 |
-| `a5257c88eb07` | 4x | GitHub username | modules/public-landing/public/projects.html:864, modules/public-landing/public/projects.html:865, modules/public-landing/public/projects.html:1240 |
+| `a5257c88eb07` | 4x | GitHub username | modules/public-landing/public/projects.html:864, modules/public-landing/public/projects.html:865, modules/public-landing/public/projects.html:1247 |
 | `3eb67b892dea` | 4x | Percy Jackson | modules/public-landing/public/index.html:803, modules/public-landing/public/index.html:821, modules/public-landing/public/index.html:827 |
 | `0887725744f2` | 4x | Restricted. | modules/hall-ui/public/gate.js:219, modules/hall-ui/public/government.js:1104, modules/hall-ui/public/harbor.js:337 |
 | `e57ec24e13ef` | 4x | Sign in with GitHub | modules/hall-ui/public/hall-render.js:265, modules/hall-ui/public/hall-render.js:336, modules/hall-ui/public/hall-render.js:405 |
@@ -1425,7 +1425,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `7667eb552781` | certain | {…}: {…}% ({…}/{…} checks) | `modules/status-ui/public/status.js:468` |
 | `6d0d64f10bd9` | certain | ‹ earlier page | `modules/status-ui/public/index.html:321` |
 
-## `landing` — 372 strings
+## `landing` — 373 strings
 
 | id | conf | text | where |
 |---|---|---|---|
@@ -1445,9 +1445,9 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `afe83bbbd0d4` | certain | A non-profit, capture-resistant commons. | `modules/public-landing/public/contact.html:71` |
 | `afe83bbbd0d4` | certain | A non-profit, capture-resistant commons. | `modules/public-landing/public/index.html:900` |
 | `afe83bbbd0d4` | certain | A non-profit, capture-resistant commons. | `modules/public-landing/public/privacy.html:80` |
-| `afe83bbbd0d4` | certain | A non-profit, capture-resistant commons. | `modules/public-landing/public/projects.html:1338` |
+| `afe83bbbd0d4` | certain | A non-profit, capture-resistant commons. | `modules/public-landing/public/projects.html:1345` |
 | `afe83bbbd0d4` | certain | A non-profit, capture-resistant commons. | `modules/public-landing/public/terms.html:84` |
-| `2363998aa2be` | certain | A pair of bongo drums | `modules/public-landing/public/projects.html:1267` |
+| `2363998aa2be` | certain | A pair of bongo drums | `modules/public-landing/public/projects.html:1274` |
 | `407982c3d4ff` | certain | A project as a codebase, regardless of function. | `modules/public-landing/public/index.html:762` |
 | `c3504a900b0f` | certain | A project stood up from the hub runs on the platform's servers at your request. Any cost is shown before you c | `modules/public-landing/public/terms.html:61` |
 | `6cb796f01882` | certain | A project you create | `modules/public-landing/public/privacy.html:57` |
@@ -1468,10 +1468,10 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `90a128c97eae` | certain | Builders' hall | `modules/public-landing/public/index.html:906` |
 | `90a128c97eae` | certain | Builders' hall | `modules/public-landing/public/projects.html:550` |
 | `90a128c97eae` | certain | Builders' hall | `modules/public-landing/public/projects.html:550` |
-| `90a128c97eae` | certain | Builders' hall | `modules/public-landing/public/projects.html:1338` |
+| `90a128c97eae` | certain | Builders' hall | `modules/public-landing/public/projects.html:1345` |
 | `16bc370da814` | certain | Building Digitally, | `modules/public-landing/public/index.html:720` |
 | `1e3de399e779` | certain | Built by Verro Labs, Cloud Bongos is our way of making AI co-building usable by entire project groups, whether | `modules/public-landing/public/index.html:847` |
-| `ee7d8b276a29` | certain | Built by agents, on | `modules/public-landing/public/projects.html:1338` |
+| `ee7d8b276a29` | certain | Built by agents, on | `modules/public-landing/public/projects.html:1345` |
 | `bd315dd71ea7` | certain | Built by agents, on Cloud Bongos. | `modules/public-landing/public/contact.html:71` |
 | `bd315dd71ea7` | certain | Built by agents, on Cloud Bongos. | `modules/public-landing/public/index.html:900` |
 | `bd315dd71ea7` | certain | Built by agents, on Cloud Bongos. | `modules/public-landing/public/privacy.html:80` |
@@ -1491,11 +1491,11 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `eeda19200aeb` | certain | Cloud Bongos | `modules/public-landing/public/projects.html:1113` |
 | `3596c03573ce` | certain | Continue → | `modules/public-landing/public/projects.html:988` |
 | `21db11ef932e` | certain | Create a project | `modules/public-landing/public/projects.html:951` |
-| `330038e92a44` | certain | Create my project | `modules/public-landing/public/projects.html:1214` |
+| `330038e92a44` | certain | Create my project | `modules/public-landing/public/projects.html:1221` |
 | `c01533093b42` | certain | Create your first project | `modules/public-landing/public/projects.html:654` |
 | `b07e75a05f48` | certain | Creating the repo yourself on GitHub? Public or private is your choice there — both work here, and we never ch | `modules/public-landing/public/projects.html:1156` |
 | `3aeefb044b9f` | certain | Creation steps | `modules/public-landing/public/projects.html:937` |
-| `47d1558b17a3` | certain | Domain you own | `modules/public-landing/public/projects.html:1189` |
+| `47d1558b17a3` | certain | Domain you own | `modules/public-landing/public/projects.html:1196` |
 | `8d812912c392` | certain | Don't use {{productName}} to break the law, to attack this site or other people's projects, to mine, spam or o | `modules/public-landing/public/terms.html:73` |
 | `d919980d2ca5` | certain | Download our core code and protocols, and build instantly with your team. | `modules/public-landing/public/index.html:862` |
 | `18b6b56edc93` | certain | Each sign-in creates a session: a random token, whether it came from the browser or the command line, the brow | `modules/public-landing/public/privacy.html:54` |
@@ -1524,8 +1524,8 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `98eb6344d39e` | certain | GitHub owner | `modules/public-landing/public/projects.html:1148` |
 | `a5257c88eb07` | certain | GitHub username | `modules/public-landing/public/projects.html:864` |
 | `a5257c88eb07` | certain | GitHub username | `modules/public-landing/public/projects.html:865` |
-| `a5257c88eb07` | certain | GitHub username | `modules/public-landing/public/projects.html:1240` |
-| `a5257c88eb07` | certain | GitHub username | `modules/public-landing/public/projects.html:1241` |
+| `a5257c88eb07` | certain | GitHub username | `modules/public-landing/public/projects.html:1247` |
+| `a5257c88eb07` | certain | GitHub username | `modules/public-landing/public/projects.html:1248` |
 | `4995791c6449` | certain | Go to the hall | `modules/public-landing/public/contact.html:56` |
 | `41778f67b4c9` | certain | Have us handle your hosting. | `modules/public-landing/public/index.html:867` |
 | `978da2e651bd` | certain | Hosted projects | `modules/public-landing/public/terms.html:60` |
@@ -1534,11 +1534,11 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `4b542b000afa` | certain | How this project is drawn: on the sky, in your list, at the top of this page and on its card. A planet is a | `modules/public-landing/public/projects.html:887` |
 | `9f31eaed8252` | certain | If you grant repository access while creating a project, that permission is used to create or adopt your repos | `modules/public-landing/public/privacy.html:55` |
 | `607551ae732b` | certain | Invite a builder | `modules/public-landing/public/projects.html:860` |
-| `20786b02f47a` | certain | Invite builders | `modules/public-landing/public/projects.html:1237` |
+| `20786b02f47a` | certain | Invite builders | `modules/public-landing/public/projects.html:1244` |
 | `a1256030d879` | certain | Invite only | `modules/public-landing/public/projects.html:809` |
 | `1f5d4b500966` | certain | It is provided as it is, without warranty of any kind, as its licence — the AGPL-3.0 — says. | `modules/public-landing/public/terms.html:50` |
 | `43a874f27956` | certain | Its address | `modules/public-landing/public/projects.html:756` |
-| `cff8279a62e6` | certain | Its address in the sky | `modules/public-landing/public/projects.html:1176` |
+| `cff8279a62e6` | certain | Its address in the sky | `modules/public-landing/public/projects.html:1183` |
 | `639cb136cd20` | certain | Its address, its repository, what the platform last | `modules/public-landing/public/projects.html:685` |
 | `c30fde6c0be9` | certain | Its card | `modules/public-landing/public/projects.html:895` |
 | `218224e0007c` | certain | Its extras | `modules/public-landing/public/projects.html:844` |
@@ -1557,8 +1557,8 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `c661548d5140` | certain | Next → | `modules/public-landing/public/projects.html:1019` |
 | `c661548d5140` | certain | Next → | `modules/public-landing/public/projects.html:1052` |
 | `c661548d5140` | certain | Next → | `modules/public-landing/public/projects.html:1091` |
-| `c661548d5140` | certain | Next → | `modules/public-landing/public/projects.html:1161` |
-| `c661548d5140` | certain | Next → | `modules/public-landing/public/projects.html:1201` |
+| `c661548d5140` | certain | Next → | `modules/public-landing/public/projects.html:1168` |
+| `c661548d5140` | certain | Next → | `modules/public-landing/public/projects.html:1208` |
 | `f0dbace5717d` | certain | No project here. It may have been removed, or the link may be wrong. | `modules/public-landing/public/projects.html:701` |
 | `fad4acf2aba6` | certain | Not Sure | `modules/public-landing/public/projects.html:1010` |
 | `f8665480baf6` | certain | Nothing is sold, and nothing is shared for advertising. | `modules/public-landing/public/privacy.html:67` |
@@ -1567,17 +1567,17 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `1bc11853e893` | certain | On the map | `modules/public-landing/public/projects.html:824` |
 | `b4ac8f44710c` | certain | On the public map | `modules/public-landing/public/projects.html:742` |
 | `69400ca12477` | certain | Once you have signed in here and accepted these terms, your profile and that record are public by default: at  | `modules/public-landing/public/terms.html:68` |
-| `8329bb1a3693` | certain | One tap files the request and the platform starts standing your project up — server, database, address. Here's | `modules/public-landing/public/projects.html:1209` |
+| `8329bb1a3693` | certain | One tap files the request and the platform starts standing your project up — server, database, address. Here's | `modules/public-landing/public/projects.html:1216` |
 | `86cde1930d84` | certain | Only mine | `modules/public-landing/public/projects.html:419` |
 | `f82fe1982ab3` | certain | Open an issue on the repository | `modules/public-landing/public/contact.html:52` |
 | `cbfdd6ac4ec8` | certain | Open source (AGPL-3.0) | `modules/public-landing/public/contact.html:71` |
 | `cbfdd6ac4ec8` | certain | Open source (AGPL-3.0) | `modules/public-landing/public/index.html:900` |
 | `cbfdd6ac4ec8` | certain | Open source (AGPL-3.0) | `modules/public-landing/public/privacy.html:80` |
-| `cbfdd6ac4ec8` | certain | Open source (AGPL-3.0) | `modules/public-landing/public/projects.html:1338` |
+| `cbfdd6ac4ec8` | certain | Open source (AGPL-3.0) | `modules/public-landing/public/projects.html:1345` |
 | `cbfdd6ac4ec8` | certain | Open source (AGPL-3.0) | `modules/public-landing/public/terms.html:84` |
 | `275ca0d5ce65` | certain | Open source. | `modules/public-landing/public/index.html:862` |
 | `74cdcd87d1fa` | certain | Open the map | `modules/public-landing/public/index.html:755` |
-| `a226469fc575` | certain | Optional — invite people by GitHub username. Each one gets an invitation to accept from their own projects pag | `modules/public-landing/public/projects.html:1238` |
+| `a226469fc575` | certain | Optional — invite people by GitHub username. Each one gets an invitation to accept from their own projects pag | `modules/public-landing/public/projects.html:1245` |
 | `1ccd5072978c` | certain | Optional — skip it and nothing about your project changes. Answering shapes what we set up for you, and a desc | `modules/public-landing/public/projects.html:1035` |
 | `cb6c0f4da355` | certain | Optional — skip it and you get the suggested set below, shaped by what you just told us. These are extras on t | `modules/public-landing/public/projects.html:1071` |
 | `3eb67b892dea` | certain | Percy Jackson | `modules/public-landing/public/index.html:803` |
@@ -1586,11 +1586,11 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `3eb67b892dea` | certain | Percy Jackson | `modules/public-landing/public/index.html:833` |
 | `d4e9bf625ab3` | certain | Pick one of your repositories | `modules/public-landing/public/projects.html:1130` |
 | `65635b58dfab` | certain | Pick the shape that fits best — it’s how the project is listed on the map, and it stays as you pick it for now | `modules/public-landing/public/projects.html:1003` |
-| `92c7055aa799` | certain | Project handle | `modules/public-landing/public/projects.html:1179` |
+| `92c7055aa799` | certain | Project handle | `modules/public-landing/public/projects.html:1186` |
 | `edab0ed81a40` | certain | Project name | `modules/public-landing/public/projects.html:982` |
 | `edab0ed81a40` | certain | Project name | `modules/public-landing/public/projects.html:983` |
 | `9685afcf24b1` | certain | Project type | `modules/public-landing/public/projects.html:1005` |
-| `b76fce69822b` | certain | Projects aren’t created from this instance — this is a project, not the platform that hosts them. | `modules/public-landing/public/projects.html:1330` |
+| `b76fce69822b` | certain | Projects aren’t created from this instance — this is a project, not the platform that hosts them. | `modules/public-landing/public/projects.html:1337` |
 | `351a61f190a6` | certain | Questions go through the | `modules/public-landing/public/terms.html:80` |
 | `664f5731ddc3` | certain | Read the source. | `modules/public-landing/public/privacy.html:75` |
 | `664f5731ddc3` | certain | Read the source. | `modules/public-landing/public/terms.html:79` |
@@ -1607,7 +1607,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `a858e71476cc` | certain | Reading these pages signs you into nothing and sets no tracking cookie. There are no advertising or analytics  | `modules/public-landing/public/privacy.html:50` |
 | `53be603bd0ed` | certain | Reading your GitHub repositories… | `modules/public-landing/public/projects.html:1128` |
 | `1702f20d7a3b` | certain | Reading your projects… | `modules/public-landing/public/projects.html:630` |
-| `2cffb293878a` | certain | Ready to roll | `modules/public-landing/public/projects.html:1208` |
+| `2cffb293878a` | certain | Ready to roll | `modules/public-landing/public/projects.html:1215` |
 | `51660f7569f3` | certain | Repository name | `modules/public-landing/public/projects.html:1151` |
 | `0c6208abb13a` | certain | Repository visibility | `modules/public-landing/public/projects.html:770` |
 | `74f80d9e1abc` | certain | Search extras… | `modules/public-landing/public/projects.html:1080` |
@@ -1641,7 +1641,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `2ae36be1c531` | certain | Start a project | `modules/public-landing/public/projects.html:509` |
 | `2ae36be1c531` | certain | Start a project | `modules/public-landing/public/projects.html:978` |
 | `3651fe041ecf` | certain | Start fresh | `modules/public-landing/public/projects.html:1107` |
-| `d18145be6031` | certain | Start without an address — possible, but sign-in on your project can’t be set up until it has one. | `modules/public-landing/public/projects.html:1196` |
+| `d18145be6031` | certain | Start without an address — possible, but sign-in on your project can’t be set up until it has one. | `modules/public-landing/public/projects.html:1203` |
 | `0b1330bed905` | certain | Starting point | `modules/public-landing/public/projects.html:1102` |
 | `d75633cc707d` | certain | Take it offline | `modules/public-landing/public/projects.html:912` |
 | `052e2da986c2` | certain | Task titles are write-once, no route can edit one, so a wrong title is permanent | `modules/public-landing/public/index.html:832` |
@@ -1653,9 +1653,9 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `8ed2dfbfd1eb` | certain | The backdrop behind this project’s name on its card — the panel that opens when someone picks it out of the ma | `modules/public-landing/public/projects.html:899` |
 | `c6fb34560b04` | certain | The builders' hall | `modules/public-landing/public/contact.html:54` |
 | `183c89fecb58` | certain | The code is open | `modules/public-landing/public/privacy.html:74` |
-| `72e85e8b6f47` | certain | The drums are rolling | `modules/public-landing/public/projects.html:1223` |
+| `72e85e8b6f47` | certain | The drums are rolling | `modules/public-landing/public/projects.html:1230` |
 | `562422c98e3a` | certain | The hall is where members work: ideas, blockers and questions are raised and answered there. Sign in with GitH | `modules/public-landing/public/contact.html:55` |
-| `fb416bf1a26b` | certain | The handle names your project on the platform — and its address comes with it. Once it stands up, a few GitHub | `modules/public-landing/public/projects.html:1177` |
+| `fb416bf1a26b` | certain | The handle names your project on the platform — and its address comes with it. Once it stands up, a few GitHub | `modules/public-landing/public/projects.html:1184` |
 | `a954f0dce9a3` | certain | The platform | `modules/public-landing/public/contact.html:65` |
 | `4fd8f5746cc5` | certain | The platform is run as a non-profit, capture-resistant commons. | `modules/public-landing/public/terms.html:50` |
 | `198f1eac5a95` | certain | The platform stores the date you accepted these terms, and which version, on your account. It is written only  | `modules/public-landing/public/terms.html:70` |
@@ -1665,10 +1665,10 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `a184374b2b70` | certain | The repository is where the code, its history and its discussion live — the right door for a bug, a question,  | `modules/public-landing/public/contact.html:51` |
 | `502ab071ba33` | certain | The short version: this is free software run by its owner, your code stays yours, and you are responsible for  | `modules/public-landing/public/terms.html:46` |
 | `62377d81c52c` | certain | The six most recent, straight from the ledger. | `modules/public-landing/public/index.html:798` |
-| `2b193468bbb5` | certain | These are the same steps however a project is created — nothing here is special to this page. | `modules/public-landing/public/projects.html:1258` |
+| `2b193468bbb5` | certain | These are the same steps however a project is created — nothing here is special to this page. | `modules/public-landing/public/projects.html:1265` |
 | `02e596cc4569` | certain | These numbers describe; they do not govern. | `modules/public-landing/public/terms.html:67` |
 | `ea7de26ce2f0` | certain | These terms ship with the software and change with it. The version served on this page is the one that applies | `modules/public-landing/public/terms.html:79` |
-| `1eff94c94b66` | certain | This files the request; the control plane does the real standup and nothing touches servers from this page. Yo | `modules/public-landing/public/projects.html:1216` |
+| `1eff94c94b66` | certain | This files the request; the control plane does the real standup and nothing touches servers from this page. Yo | `modules/public-landing/public/projects.html:1223` |
 | `d83b739afb1e` | certain | This is a project’s management page — it answers only to the person who owns it. Sign in with GitHub to open y | `modules/public-landing/public/projects.html:691` |
 | `406e774e0952` | certain | This project’s deploys read its code from GitHub with an older key that only works on public repositories — so | `modules/public-landing/public/projects.html:778` |
 | `11c244aec5c3` | certain | This statement describes the software as it ships and changes when the software does. Revised August 2026. | `modules/public-landing/public/privacy.html:76` |
@@ -1678,7 +1678,8 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `b1dd149424ea` | certain | Turn the filter off to see what everyone else is building — or start your own. | `modules/public-landing/public/projects.html:508` |
 | `6ca9f17bdfb5` | certain | Two doors. Both are public, and both are how {{productName}} itself works day to day. | `modules/public-landing/public/contact.html:47` |
 | `a165999f36a9` | certain | Types of projects | `modules/public-landing/public/index.html:860` |
-| `8604a145869b` | certain | Use a domain I own instead | `modules/public-landing/public/projects.html:1187` |
+| `8604a145869b` | certain | Use a domain I own instead | `modules/public-landing/public/projects.html:1194` |
+| `9be878db0d86` | certain | Use my GitHub repositories instead | `modules/public-landing/public/projects.html:1163` |
 | `6e1001190059` | certain | VERRO LABS | `modules/public-landing/public/index.html:846` |
 | `5370dd2d0e62` | certain | Ways to get paid | `modules/public-landing/public/index.html:876` |
 | `2286591887e3` | certain | We never change a repo’s visibility — public stays public, private stays private. | `modules/public-landing/public/projects.html:1136` |
@@ -1722,9 +1723,9 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `4e25e6872321` | certain | Your projects | `modules/public-landing/public/projects.html:610` |
 | `878439d60f78` | certain | Your projects and your code | `modules/public-landing/public/terms.html:55` |
 | `f04dcdea0f96` | certain | Your repositories | `modules/public-landing/public/projects.html:1132` |
-| `8391cfe0dd03` | certain | Your steps — the parts only you can play | `modules/public-landing/public/projects.html:1253` |
+| `8391cfe0dd03` | certain | Your steps — the parts only you can play | `modules/public-landing/public/projects.html:1260` |
 | `cd379e3e0111` | certain | Your work across projects | `modules/public-landing/public/terms.html:65` |
-| `bb158e10340b` | certain | Yours from the moment it stands up. You can point a domain you own at it any time. | `modules/public-landing/public/projects.html:1185` |
+| `bb158e10340b` | certain | Yours from the moment it stands up. You can point a domain you own at it any time. | `modules/public-landing/public/projects.html:1192` |
 | `b7cee0f10353` | certain | a game, 11 builders | `modules/public-landing/public/index.html:742` |
 | `7c3f28fa6528` | certain | a to z | `modules/public-landing/public/projects.html:535` |
 | `9cebd20afcba` | certain | about it, and the controls you have today. | `modules/public-landing/public/projects.html:685` |
@@ -1797,9 +1798,9 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `5df2baabf82e` | certain | ← Back | `modules/public-landing/public/projects.html:1018` |
 | `5df2baabf82e` | certain | ← Back | `modules/public-landing/public/projects.html:1049` |
 | `5df2baabf82e` | certain | ← Back | `modules/public-landing/public/projects.html:1088` |
-| `5df2baabf82e` | certain | ← Back | `modules/public-landing/public/projects.html:1160` |
-| `5df2baabf82e` | certain | ← Back | `modules/public-landing/public/projects.html:1200` |
-| `5df2baabf82e` | certain | ← Back | `modules/public-landing/public/projects.html:1213` |
+| `5df2baabf82e` | certain | ← Back | `modules/public-landing/public/projects.html:1167` |
+| `5df2baabf82e` | certain | ← Back | `modules/public-landing/public/projects.html:1207` |
+| `5df2baabf82e` | certain | ← Back | `modules/public-landing/public/projects.html:1220` |
 | `b675934f9d39` | certain | ← Your projects | `modules/public-landing/public/projects.html:674` |
 
 ---

package/docs/copy-registry.json

@@ -3,9 +3,9 @@
   "generator": "scripts/gds/copy-inventory.js",
   "goal": 1000074,
   "counts": {
-    "strings": 1709,
-    "unique_ids": 1478,
-    "certain": 1709,
+    "strings": 1710,
+    "unique_ids": 1479,
+    "certain": 1710,
     "heuristic": 0,
     "duplicate_ids": 162
   },
@@ -23,7 +23,7 @@
     "landing": {
       "at": "modules/public-landing/public",
       "files": 5,
-      "strings": 372
+      "strings": 373
     }
   },
   "blind_spots": [
@@ -92,9 +92,9 @@
         "modules/public-landing/public/projects.html:1018",
         "modules/public-landing/public/projects.html:1049",
         "modules/public-landing/public/projects.html:1088",
-        "modules/public-landing/public/projects.html:1160",
-        "modules/public-landing/public/projects.html:1200",
-        "modules/public-landing/public/projects.html:1213"
+        "modules/public-landing/public/projects.html:1167",
+        "modules/public-landing/public/projects.html:1207",
+        "modules/public-landing/public/projects.html:1220"
       ]
     },
     {
@@ -106,7 +106,7 @@
         "modules/public-landing/public/contact.html:71",
         "modules/public-landing/public/index.html:900",
         "modules/public-landing/public/privacy.html:80",
-        "modules/public-landing/public/projects.html:1338",
+        "modules/public-landing/public/projects.html:1345",
         "modules/public-landing/public/terms.html:84"
       ]
     },
@@ -119,8 +119,8 @@
         "modules/public-landing/public/projects.html:1019",
         "modules/public-landing/public/projects.html:1052",
         "modules/public-landing/public/projects.html:1091",
-        "modules/public-landing/public/projects.html:1161",
-        "modules/public-landing/public/projects.html:1201"
+        "modules/public-landing/public/projects.html:1168",
+        "modules/public-landing/public/projects.html:1208"
       ]
     },
     {
@@ -132,7 +132,7 @@
         "modules/public-landing/public/contact.html:71",
         "modules/public-landing/public/index.html:900",
         "modules/public-landing/public/privacy.html:80",
-        "modules/public-landing/public/projects.html:1338",
+        "modules/public-landing/public/projects.html:1345",
         "modules/public-landing/public/terms.html:84"
       ]
     },
@@ -183,7 +183,7 @@
         "modules/public-landing/public/index.html:906",
         "modules/public-landing/public/projects.html:550",
         "modules/public-landing/public/projects.html:550",
-        "modules/public-landing/public/projects.html:1338"
+        "modules/public-landing/public/projects.html:1345"
       ]
     },
     {
@@ -218,8 +218,8 @@
       "at": [
         "modules/public-landing/public/projects.html:864",
         "modules/public-landing/public/projects.html:865",
-        "modules/public-landing/public/projects.html:1240",
-        "modules/public-landing/public/projects.html:1241"
+        "modules/public-landing/public/projects.html:1247",
+        "modules/public-landing/public/projects.html:1248"
       ]
     },
     {
@@ -13011,7 +13011,7 @@
       "surface": "landing",
       "text": "A non-profit, capture-resistant commons.",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1338,
+      "line": 1345,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -13029,7 +13029,7 @@
       "surface": "landing",
       "text": "A pair of bongo drums",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1267,
+      "line": 1274,
       "origin": "html-attr:aria-label",
       "confidence": "certain"
     },
@@ -13218,7 +13218,7 @@
       "surface": "landing",
       "text": "Builders' hall",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1338,
+      "line": 1345,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -13245,7 +13245,7 @@
       "surface": "landing",
       "text": "Built by agents, on",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1338,
+      "line": 1345,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -13425,7 +13425,7 @@
       "surface": "landing",
       "text": "Create my project",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1214,
+      "line": 1221,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -13461,7 +13461,7 @@
       "surface": "landing",
       "text": "Domain you own",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1189,
+      "line": 1196,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -13722,7 +13722,7 @@
       "surface": "landing",
       "text": "GitHub username",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1240,
+      "line": 1247,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -13731,7 +13731,7 @@
       "surface": "landing",
       "text": "GitHub username",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1241,
+      "line": 1248,
       "origin": "html-attr:placeholder",
       "confidence": "certain"
     },
@@ -13812,7 +13812,7 @@
       "surface": "landing",
       "text": "Invite builders",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1237,
+      "line": 1244,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -13848,7 +13848,7 @@
       "surface": "landing",
       "text": "Its address in the sky",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1176,
+      "line": 1183,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -14019,7 +14019,7 @@
       "surface": "landing",
       "text": "Next →",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1161,
+      "line": 1168,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -14028,7 +14028,7 @@
       "surface": "landing",
       "text": "Next →",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1201,
+      "line": 1208,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -14109,7 +14109,7 @@
       "surface": "landing",
       "text": "One tap files the request and the platform starts standing your project up — server, database, address. Here's the beat you're about to drop:",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1209,
+      "line": 1216,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -14163,7 +14163,7 @@
       "surface": "landing",
       "text": "Open source (AGPL-3.0)",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1338,
+      "line": 1345,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -14199,7 +14199,7 @@
       "surface": "landing",
       "text": "Optional — invite people by GitHub username. Each one gets an invitation to accept from their own projects page, and they need to have signed in here at least once. Skip this and invite anyone later; nothing about your project waits on it.",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1238,
+      "line": 1245,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -14280,7 +14280,7 @@
       "surface": "landing",
       "text": "Project handle",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1179,
+      "line": 1186,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -14316,7 +14316,7 @@
       "surface": "landing",
       "text": "Projects aren’t created from this instance — this is a project, not the platform that hosts them.",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1330,
+      "line": 1337,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -14469,7 +14469,7 @@
       "surface": "landing",
       "text": "Ready to roll",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1208,
+      "line": 1215,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -14775,7 +14775,7 @@
       "surface": "landing",
       "text": "Start without an address — possible, but sign-in on your project can’t be set up until it has one.",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1196,
+      "line": 1203,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -14883,7 +14883,7 @@
       "surface": "landing",
       "text": "The drums are rolling",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1223,
+      "line": 1230,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -14901,7 +14901,7 @@
       "surface": "landing",
       "text": "The handle names your project on the platform — and its address comes with it. Once it stands up, a few GitHub steps (the next screen walks you through them) switch sign-in on.",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1177,
+      "line": 1184,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -14991,7 +14991,7 @@
       "surface": "landing",
       "text": "These are the same steps however a project is created — nothing here is special to this page.",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1258,
+      "line": 1265,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -15018,7 +15018,7 @@
       "surface": "landing",
       "text": "This files the request; the control plane does the real standup and nothing touches servers from this page. You'll get the few steps only you can do right after.",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1216,
+      "line": 1223,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -15108,7 +15108,16 @@
       "surface": "landing",
       "text": "Use a domain I own instead",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1187,
+      "line": 1194,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
+    {
+      "id": "9be878db0d86",
+      "surface": "landing",
+      "text": "Use my GitHub repositories instead",
+      "file": "modules/public-landing/public/projects.html",
+      "line": 1163,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -15504,7 +15513,7 @@
       "surface": "landing",
       "text": "Your steps — the parts only you can play",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1253,
+      "line": 1260,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -15522,7 +15531,7 @@
       "surface": "landing",
       "text": "Yours from the moment it stands up. You can point a domain you own at it any time.",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1185,
+      "line": 1192,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -16179,7 +16188,7 @@
       "surface": "landing",
       "text": "← Back",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1160,
+      "line": 1167,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -16188,7 +16197,7 @@
       "surface": "landing",
       "text": "← Back",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1200,
+      "line": 1207,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -16197,7 +16206,7 @@
       "surface": "landing",
       "text": "← Back",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1213,
+      "line": 1220,
       "origin": "html-text",
       "confidence": "certain"
     },

package/docs/module-api-changelog.md

@@ -1615,5 +1615,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.581 with no explicit bump. run 34160253741. (task 1002620)
   1.19.583 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.582 with no explicit bump. run 34162998083. (task 1002620)
+  1.19.584 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.583 with no explicit bump. run 34164936809. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/public-landing/public/projects.html

@@ -1154,6 +1154,13 @@ summary{min-height:24px;padding:3px 0;}
                 <!-- visibility stated BEFORE GitHub's own radio is the first place it
                      appears (task 1002721, owner firsthand in the QA walk) -->
                 <div class="hint" style="grid-column:1 / -1;">Creating the repo yourself on GitHub? Public or private is your choice there — both work here, and we never change it.</div>
+                <!-- the way back from the manual fallback (task 1003683). Choosing "or enter
+                     it manually" used to hide the connect offer for good: #ghConnect renders
+                     only while repoAccess is 'need-connect', and nothing ever set it back, so
+                     a full reload was the only route to the button. Stays hidden when the
+                     fallback was FORCED (repoAccess 'unavailable'), where connecting cannot
+                     help and the offer would be a lie. -->
+                <button type="button" class="linklike" id="ghManualBack" style="grid-column:1 / -1;" hidden>Use my GitHub repositories instead</button>
               </div>
               <div class="hint" id="h-home">&nbsp;</div>
               <div class="nav">
@@ -3498,6 +3505,7 @@ summary{min-height:24px;padding:3px 0;}
     }
     $('ghConnectBtn').addEventListener('click', connectRepos);
     $('ghManualToggle').addEventListener('click', function () { repoAccess = 'manual'; syncHome(); $('f-owner').focus(); });
+    $('ghManualBack').addEventListener('click', function () { repoAccess = 'need-connect'; syncHome(); $('ghConnectBtn').focus(); });
 
     function syncHome() {
       var need = repoAccess === 'need-connect';
@@ -3508,6 +3516,9 @@ summary{min-height:24px;padding:3px 0;}
       $('ghAdopt').hidden = !(ok && adopt);
       $('ghFresh').hidden = !(ok && !adopt);
       $('manualHome').hidden = !isManualHome();
+      /* only when the visitor CHOSE manual: with 'unavailable' the server cannot hold a
+         token, so a connect round-trip would land back here having changed nothing */
+      $('ghManualBack').hidden = repoAccess !== 'manual';
       if (need) {
         /* Informed consent (ADR 0155): this grants `repo`, which GitHub's own screen
            words as full control of ALL your repositories — so say plainly why we ask
@@ -4568,7 +4579,14 @@ summary{min-height:24px;padding:3px 0;}
          re-enters to the real draft step the moment /me answers */
       var step = authKnown && state.step >= 1 && state.step <= 7 ? state.step : 1;
       if (step === 1) {
+        /* Pre-auth, step 1 is a PLACEHOLDER, not where the visitor is — but show()
+           persists whatever step it renders, so it used to overwrite the draft's real
+           position with 1 and leave onAuth() nothing to re-enter to (task 1003683). Every
+           return through GitHub landed the visitor back at the name step. Put the real
+           step back after rendering the placeholder, in memory AND in the draft. */
+        var resumeStep = state.step;
         show(1, false);
+        if (!authKnown && resumeStep >= 1 && resumeStep <= 7) { state.step = resumeStep; saveDraft(); }
         if (focus) $('newName').focus();
       } else {
         show(step, !!focus);

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.583",
+  "version": "1.19.584",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.583",
+      "version": "1.19.584",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.583",
+  "version": "1.19.584",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/src/module-api.js

@@ -55,7 +55,7 @@ const { buildInfo } = require('./build-info');
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.583'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.584'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/wizard_draft_resume.mjs

@@ -0,0 +1,194 @@
+// tests/wizard_draft_resume.mjs — the create wizard survives a round-trip through GitHub
+// (task 1003683).
+//
+// Two defects on the Home step, both found while walking the R24 proof on live:
+//
+//   1. EVERY boot reset the draft to step 1. enter() deliberately renders the name step
+//      before /me settles ("deeper steps carry authenticated side effects"), and its own
+//      comment promises "onAuth() re-enters to the real draft step the moment /me answers".
+//      But show() PERSISTS whatever step it renders, so the placeholder overwrote the
+//      draft's real position with 1 — leaving onAuth() nothing to return to. Granting repo
+//      access from step 5 therefore dumped the visitor back at the name step, every time.
+//      Reproduced live on core 1.19.580: planting {step:5} and reloading read back step 1.
+//
+//   2. "or enter it manually" was a ONE-WAY door. #ghConnect renders only while repoAccess
+//      is 'need-connect', the toggle set repoAccess='manual', and nothing ever set it back
+//      — so the "Allow repo access" button vanished until a full page reload. Navigating
+//      back to step 4 and forward again did not restore it.
+//
+// Harness: there is no jsdom in this repo, so this follows tests/project_door_ui.mjs —
+// slice the real region out of the page's INLINE script and run it in a vm under a minimal
+// DOM stub. The slice boundaries are asserted, so a rename can never leave this file
+// quietly testing nothing.
+//
+// NOT covered here, deliberately: the team shape. The first draft of this task claimed the
+// OAuth hop dropped it; that was wrong — teamShape, projType and modules all survive a
+// reload (verified live). What looked like a drop was the documented "clicking the chosen
+// pill again UNSAYS it" toggle being re-clicked by hand.
+//
+// Run:  node --test --test-reporter=tap tests/wizard_draft_resume.mjs
+
+import assert from 'node:assert/strict';
+import { test } from 'node:test';
+import fs from 'node:fs';
+import path from 'node:path';
+import vm from 'node:vm';
+import { fileURLToPath } from 'node:url';
+
+const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
+const HUB = fs.readFileSync(path.join(ROOT, 'modules', 'public-landing', 'public', 'projects.html'), 'utf8');
+
+// ── slice 1 · the step-resolution block inside enter() ────────────────────────────
+const STEP_RE = /var step = authKnown &&[\s\S]*?show\(step, !!focus\);\r?\n\s*\}/;
+const stepSlice = (HUB.match(STEP_RE) || [null])[0];
+
+test('the step-resolution slice is still findable (a rename must fail loudly, not silently pass)', () => {
+  assert.ok(stepSlice, 'enter()\'s step-resolution block was not found in projects.html');
+  assert.match(stepSlice, /show\(1, false\)/, 'the pre-auth placeholder render is part of the slice');
+});
+
+// A faithful miniature of the real show(): the ONE behaviour that matters here is that it
+// writes state.step and then persists the whole state. If show() ever stops persisting,
+// this test still passes for the right reason — the draft keeps the real step either way.
+function runStep({ authKnown, draftStep }) {
+  const store = new Map();
+  const state = { step: draftStep, name: 'probe', teamShape: 'small-team' };
+  store.set('draft', JSON.stringify(state));
+  const rendered = [];
+  const sandbox = {
+    authKnown,
+    state,
+    focus: false,
+    saveDraft() { store.set('draft', JSON.stringify(state)); },
+    show(step) { state.step = step; rendered.push(step); sandbox.saveDraft(); },
+    $: () => ({ focus() {} }),
+  };
+  sandbox.globalThis = sandbox;
+  vm.createContext(sandbox);
+  vm.runInContext(stepSlice, sandbox);
+  return { rendered, persisted: JSON.parse(store.get('draft')), state };
+}
+
+test('pre-auth: the placeholder renders step 1 but the draft KEEPS the real step', () => {
+  const { rendered, persisted } = runStep({ authKnown: false, draftStep: 5 });
+  assert.deepEqual(rendered, [1], 'still renders the name step before identity settles');
+  assert.equal(persisted.step, 5, 'the draft must not be overwritten with the placeholder');
+});
+
+test('pre-auth: the in-memory step is restored too, so onAuth() can re-enter to it', () => {
+  // onAuth() calls enter() again and reads state.step from MEMORY, not from storage — so
+  // restoring only the stored copy would fix nothing.
+  const { state } = runStep({ authKnown: false, draftStep: 6 });
+  assert.equal(state.step, 6);
+});
+
+test('post-auth: the real step is rendered', () => {
+  const { rendered, persisted } = runStep({ authKnown: true, draftStep: 5 });
+  assert.deepEqual(rendered, [5]);
+  assert.equal(persisted.step, 5);
+});
+
+test('a draft already at step 1 is unchanged, and an out-of-range step is not resurrected', () => {
+  assert.equal(runStep({ authKnown: false, draftStep: 1 }).persisted.step, 1);
+  // 8 is the done panel, reached by its own branch above this slice; 0 is the gate. Neither
+  // is a resumable wizard position, so the placeholder is allowed to stand.
+  for (const bad of [0, 8, 99]) {
+    assert.equal(runStep({ authKnown: false, draftStep: bad }).persisted.step, 1, `step ${bad} is not resumed`);
+  }
+});
+
+// ── slice 2 · syncHome's control over the way back ────────────────────────────────
+const SYNC_RE = /function syncHome\(\) \{[\s\S]*?\n {4}\}/;
+const syncSlice = (HUB.match(SYNC_RE) || [null])[0];
+
+test('the syncHome slice is still findable', () => {
+  assert.ok(syncSlice, 'syncHome() was not found in projects.html');
+  assert.match(syncSlice, /ghManualBack/, 'syncHome governs the way-back control');
+});
+
+function runSync(repoAccess) {
+  const els = {};
+  // Elements start HIDDEN so that "shown" is only ever the result of syncHome setting it.
+  // With a `hidden: false` default, a control syncHome never mentions reads as visible and
+  // the assertion below would pass against the unfixed page.
+  const el = (id) => (els[id] ||= {
+    id, hidden: true, textContent: '', _on: false,
+    classList: { toggle(_c, v) { els[id]._on = !!v; } },
+  });
+  const sandbox = {
+    repoAccess,
+    state: { mode: 'greenfield' },
+    $: el,
+    isManualHome: () => repoAccess === 'manual' || repoAccess === 'unavailable',
+    initAdoptPicker() {}, syncFresh() {},
+  };
+  sandbox.globalThis = sandbox;
+  vm.createContext(sandbox);
+  vm.runInContext(syncSlice + '\nsyncHome();', sandbox);
+  return { connectShown: el('ghConnect')._on, manualShown: !el('manualHome').hidden, backShown: !el('ghManualBack').hidden };
+}
+
+test('choosing manual leaves a way back to the connect offer', () => {
+  const manual = runSync('manual');
+  assert.equal(manual.manualShown, true, 'the manual fields are up');
+  assert.equal(manual.connectShown, false, 'the connect box is down — that is what made it a trap');
+  assert.equal(manual.backShown, true, 'and the way back is offered');
+});
+
+test('a FORCED fallback offers no way back, because connecting cannot help', () => {
+  // 'unavailable' means the server could not store a token. Offering "use my GitHub
+  // repositories instead" there would send the visitor through a round-trip that lands
+  // them right back here — an offer that cannot be honoured is worse than none.
+  const forced = runSync('unavailable');
+  assert.equal(forced.manualShown, true);
+  assert.equal(forced.backShown, false);
+});
+
+test('while the connect offer is up, the way back is not', () => {
+  const need = runSync('need-connect');
+  assert.equal(need.connectShown, true);
+  assert.equal(need.backShown, false, 'no second, redundant control beside the button itself');
+});
+
+// ── slice 3 · why this task's original team-shape claim was wrong ─────────────────
+// The bug was filed claiming a GitHub round-trip drops the team shape. It does not: a
+// planted draft reads teamShape back intact after a reload (verified live on 1.19.580).
+// The real explanation is this handler — the pill is an UNSAY toggle, so re-clicking the
+// already-chosen shape clears it. During the R24 walk that second click was mine. Pinning
+// it here so the claim rests on the handler's actual behaviour rather than on prose.
+// Anchored on addEventListener: the same selector also appears inside paintTeam(), which
+// only writes aria-pressed. Matching that one instead yields a slice that will not parse.
+const TEAM_RE = /root\.querySelectorAll\('#teamCards \.tpill'\)\.forEach\(function \(b\) \{\s*b\.addEventListener[\s\S]*?\n {4}\}\);/;
+const teamSlice = (HUB.match(TEAM_RE) || [null])[0];
+
+test('the team-pill slice is still findable', () => {
+  assert.ok(teamSlice, 'the #teamCards pill handler was not found in projects.html');
+  assert.match(teamSlice, /state\.teamShape/, 'the handler owns the team-shape answer');
+});
+
+test('the team pill UNSAYS on a second click — the answer is not dropped, it is toggled off', () => {
+  const state = { teamShape: null };
+  const handlers = [];
+  const pill = (team) => ({
+    getAttribute: (a) => (a === 'data-team' ? team : null),
+    addEventListener: (_e, fn) => handlers.push({ team, fn }),
+  });
+  const sandbox = {
+    state,
+    root: { querySelectorAll: () => [pill('solo'), pill('small-team'), pill('community')] },
+    paintTeam() {}, paintDetail() {}, saveDraft() {},
+  };
+  sandbox.globalThis = sandbox;
+  vm.createContext(sandbox);
+  vm.runInContext(teamSlice, sandbox);
+
+  const click = (team) => handlers.find((h) => h.team === team).fn();
+  click('small-team');
+  assert.equal(state.teamShape, 'small-team', 'first click answers');
+  click('small-team');
+  assert.equal(state.teamShape, null, 'the SAME pill again unsays it — this is the mis-read bug');
+  click('small-team');
+  assert.equal(state.teamShape, 'small-team', 'and a third click answers again');
+  click('community');
+  assert.equal(state.teamShape, 'community', 'a DIFFERENT pill replaces rather than clears');
+});