@bongos/core 1.19.83 → 1.19.85

package/public-landing/create.html

@@ -11,24 +11,31 @@
 <link rel="preconnect" href="https://fonts.googleapis.com">
 <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
 <link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Baloo+2:wght@500;600;700&family=Quicksand:wght@400;500;600;700&display=swap">
+<!-- The R07 redesign (task 1002696): shared token + component layer — the space
+     sky both modes ride on, light/dark governing the cards. The server re-injects
+     the branding :root AFTER stylesheets, so the pack stays authoritative.
+     Design contract: docs/design/projects-surfaces-redesign-direction.md -->
+<link rel="stylesheet" href="/assets/cosmos.css">
+<script>
+/* apply the saved color mode BEFORE first paint so there's no flash;
+   no saved choice = follow the OS (prefers-color-scheme) */
+try{var _m=localStorage.getItem('cb-color-mode');if(_m==='light'||_m==='dark')document.documentElement.setAttribute('data-mode',_m);}catch(e){}
+</script>
 <style>
-/* ── Cloud Bongos vanilla look (ADR 0064) — same baked defaults as index.html;
-   for cloudbongos.com these equal config/branding.neutral.json and the server
-   re-injects the same vars after this stylesheet so the pack stays authoritative.
+/* ── /create page-specific layout. Tokens, the reset, the sky, the header voice
+   and the shared card/chip/button vocabulary all come from cosmos.css above;
+   what stays here is this page's own structure (the wizard) plus token-built
+   variants of it.
+   DUAL MODE (task 1002696, owner decision 2026-08-12): light = the sunrise
+   white/orange page, dark = the gate's deep-space sky with dark-navy cards. The
+   card INTERIOR flips too — so no literal color may live in this block; every
+   surface here is a cosmos token or a color-mix over one. (A local :root token
+   block would land after cosmos's dark tiers and silently defeat them — that is
+   why the old one is gone.)
    The /create page is the branded project-creation experience (goal 35, task 2081):
    one page, no framework, the same trust boundary as the hall wizard — it only
    ENQUEUES a provisioning request and then hands the human the steps only they
    can do. ── */
-:root{
-  --bg:#fff7ed; --bg-deep:#ffedd5;
-  --ink:#2a1f17; --ink-soft:#6b5d52; --ink-faint:#9c8d80;
-  --accent:#f97316; --accent-deep:#ea580c; --sea:#38bdf8; --terracotta:#fb7185;
-  --card:#fffdfa; --line:#f3e1c9; --ok:#16a34a; --err:#dc2626;
-  --font-display:"Baloo 2","Quicksand",system-ui,"Arial Rounded MT Bold",sans-serif;
-  --font-body:"Quicksand",system-ui,-apple-system,"Segoe UI",sans-serif;
-  --font-mono:"Fira Code",ui-monospace,SFMono-Regular,Menlo,monospace;
-}
-*{box-sizing:border-box;margin:0;padding:0;}
 /* The `hidden` attribute must always win. Several blocks below set an explicit
    `display` via a class (.field→block, .row2→grid); an author rule like that
    silently defeats the user-agent [hidden] rule, so `el.hidden = true` fails to
@@ -36,52 +43,18 @@
    adopt-picker / fresh-name / manual sub-panels — without this they ALL render at
    once. Make hidden authoritative for the whole page. */
 [hidden]{display:none !important;}
-html{scroll-behavior:smooth;}
-body{
-  font-family:var(--font-body); color:var(--ink);
-  background:var(--bg);
-  min-height:100vh; -webkit-font-smoothing:antialiased; overflow-x:hidden;
-}
-/* ── the sky — a fixed layer carrying the dawn gradient + clouds. The gradient
-   lives HERE (not background-attachment:fixed on body): fixed-attachment
-   backgrounds black out on scrolled composited pages in Chromium, and /create
-   is the first landing page tall enough to scroll. ── */
-.sky{
-  position:fixed;inset:0;z-index:0;pointer-events:none;overflow:hidden;
-  /* dawn at altitude: a whisper of sky up top settling into the sunrise warmth */
-  background:linear-gradient(180deg,#e9f5fd 0%,#fde8c8 34%,#fff4e6 62%,#fffdfa 100%);
-}
-.cloud{position:absolute;border-radius:50%;background:rgba(255,255,255,0.55);filter:blur(38px);}
-.cloud.a{width:380px;height:380px;top:-120px;left:-80px;animation:drift 26s ease-in-out infinite alternate;}
-.cloud.b{width:300px;height:300px;top:4%;right:-60px;background:rgba(255,224,178,0.5);animation:drift 32s ease-in-out infinite alternate-reverse;}
-.cloud.c{width:460px;height:460px;bottom:-200px;left:24%;background:rgba(255,255,255,0.4);animation:drift 40s ease-in-out infinite alternate;}
-.cloud.d{width:230px;height:230px;top:38%;left:2%;background:rgba(56,189,248,0.14);animation:drift 30s ease-in-out infinite alternate-reverse;}
-.cloud.e{width:200px;height:200px;top:16%;left:56%;background:rgba(56,189,248,0.10);animation:drift 36s ease-in-out infinite alternate;}
-@keyframes drift{from{transform:translateX(-18px)}to{transform:translateX(26px)}}
-
-/* ── header ── */
-.top{
-  position:relative;z-index:2;display:flex;align-items:center;justify-content:space-between;
-  padding:20px clamp(18px,4vw,40px);
-}
-.top .mark{
-  font-family:var(--font-display);font-weight:700;font-size:22px;letter-spacing:-0.5px;
-  text-transform:lowercase;color:var(--ink);text-decoration:none;
-}
-.top .mark span{color:var(--accent);}
-.top-right{display:flex;align-items:center;gap:clamp(10px,2vw,18px);}
+
 /* exit the wizard — Esc, or this button (task 2098). Nothing is created until the
    final step, so leaving simply drops the in-progress project. */
 .exit-wizard{
   display:inline-flex;align-items:center;gap:7px;cursor:pointer;
-  background:transparent;border:1px solid rgba(42,31,23,0.16);border-radius:999px;
-  padding:7px 14px;font-family:var(--font-body);font-weight:600;font-size:13px;color:var(--ink-soft);
+  background:var(--glass-bg);border:1.5px solid var(--glass-border);border-radius:999px;
+  padding:7px 14px;font-family:var(--font-body);font-weight:600;font-size:13px;color:var(--glass-ink);
+  text-shadow:var(--chrome-glow);backdrop-filter:blur(4px);
   transition:background .14s ease,border-color .14s ease,color .14s ease;
 }
-.exit-wizard:hover{background:rgba(42,31,23,0.05);color:var(--ink);border-color:rgba(42,31,23,0.28);}
-.exit-wizard kbd{font-family:var(--font-mono);font-size:10px;line-height:1;background:rgba(42,31,23,0.08);border-radius:4px;padding:2px 5px;color:var(--ink-faint);}
-.who{display:flex;align-items:center;gap:10px;font-size:14px;font-weight:600;color:var(--ink-soft);min-height:34px;}
-.who img{width:30px;height:30px;border-radius:50%;border:2px solid #fff;box-shadow:0 2px 8px rgba(42,31,23,0.12);}
+.exit-wizard:hover{border-color:var(--chrome-accent);color:var(--chrome-accent);}
+.exit-wizard kbd{font-family:var(--font-mono);font-size:10px;line-height:1;background:color-mix(in srgb,var(--chrome-ink) 12%,transparent);border-radius:4px;padding:2px 5px;color:var(--chrome-ink-dim);}
 
 /* ── layout ── */
 .wrap{
@@ -101,20 +74,20 @@ body{
 }
 .guide .mascot img{display:block;width:100%;height:auto;}
 .bubble{
-  position:relative;background:#fff;border-radius:18px;padding:14px 18px;max-width:280px;
+  position:relative;background:var(--bg-card);border-radius:18px;padding:14px 18px;max-width:280px;
   font-size:15px;font-weight:600;color:var(--ink-soft);text-align:center;line-height:1.45;
-  box-shadow:0 10px 30px -12px rgba(42,31,23,0.18);
+  box-shadow:0 10px 30px -12px rgba(5,6,15,0.35);
 }
 .bubble::after{
   content:"";position:absolute;top:-8px;left:50%;transform:translateX(-50%) rotate(45deg);
-  width:16px;height:16px;background:#fff;border-radius:3px;
+  width:16px;height:16px;background:var(--bg-card);border-radius:3px;
 }
 .guide .bubble{order:-1;margin-bottom:16px;}
 
 /* the wizard card — a cloud you build on */
 .card{
   flex:1;min-width:0;background:var(--card);border-radius:26px;
-  box-shadow:0 24px 60px -24px rgba(234,88,12,0.22), 0 6px 22px -8px rgba(42,31,23,0.10);
+  box-shadow:var(--shadow-card);
   padding:clamp(22px,3.6vw,40px);
   animation:rise .7s ease-out .08s both;
 }
@@ -130,11 +103,11 @@ body{
 .beats li.done:not(:first-child)::before{background:var(--accent);}
 .beats .dot{
   position:relative;z-index:1;width:28px;height:28px;border-radius:50%;
-  border:3px solid var(--line);background:#fff;display:flex;align-items:center;justify-content:center;
+  border:3px solid var(--line);background:var(--bg-card);display:flex;align-items:center;justify-content:center;
   font-family:var(--font-display);font-weight:700;font-size:13px;color:var(--ink-faint);
   transition:all .25s ease;
 }
-.beats li.now .dot{border-color:var(--accent);color:var(--accent-deep);box-shadow:0 0 0 6px rgba(249,115,22,0.14);}
+.beats li.now .dot{border-color:var(--accent);color:var(--accent-deep);box-shadow:0 0 0 6px color-mix(in srgb,var(--accent) 14%,transparent);}
 .beats li.done .dot{border-color:var(--accent);background:var(--accent);color:#fff;}
 .beats .lbl{font-size:12px;font-weight:700;color:var(--ink-faint);letter-spacing:0.2px;}
 .beats li.now .lbl{color:var(--accent-deep);}
@@ -145,20 +118,21 @@ body{
 .panel.on{display:block;animation:fadeStep .3s ease both;}
 @keyframes fadeStep{from{opacity:0;transform:translateX(10px)}to{opacity:1;transform:none}}
 h1{font-family:var(--font-display);font-weight:700;font-size:clamp(24px,3.4vw,32px);letter-spacing:-0.5px;line-height:1.15;margin-bottom:8px;}
+/* show() moves focus to each panel's h1 for keyboard/SR context — keep the
+   focus, lose the ring (a black rectangle around a heading; owner walk) */
+h1[tabindex="-1"]:focus{outline:none;}
 .lede{font-size:15.5px;color:var(--ink-soft);font-weight:500;line-height:1.55;margin-bottom:24px;max-width:56ch;}
-.lede a{color:var(--accent-deep);font-weight:700;text-decoration:none;}
-.lede a:hover{text-decoration:underline;}
 
 .field{display:block;margin-bottom:18px;}
 .field>span{display:block;font-size:13.5px;font-weight:700;color:var(--ink-soft);margin-bottom:7px;letter-spacing:0.2px;}
 .field small{font-weight:500;color:var(--ink-faint);}
 input[type=text]{
   width:100%;font-family:var(--font-body);font-size:17px;font-weight:600;color:var(--ink);
-  background:#fff;border:2px solid var(--line);border-radius:14px;padding:13px 16px;outline:none;
+  background:var(--bg-card);border:2px solid var(--line);border-radius:14px;padding:13px 16px;outline:none;
   transition:border-color .15s ease, box-shadow .15s ease;
 }
-input[type=text]::placeholder{color:#c9b8a6;font-weight:500;}
-input[type=text]:focus{border-color:var(--accent);box-shadow:0 0 0 4px rgba(249,115,22,0.13);}
+input[type=text]::placeholder{color:color-mix(in srgb,var(--ink-faint) 70%,var(--bg-card));font-weight:500;}
+input[type=text]:focus{border-color:var(--accent);box-shadow:0 0 0 4px color-mix(in srgb,var(--accent) 13%,transparent);}
 input[type=text].bad{border-color:var(--err);}
 .hint{font-size:13px;font-weight:600;color:var(--ink-faint);margin-top:7px;min-height:18px;}
 .hint.ok{color:var(--ok);}
@@ -170,17 +144,18 @@ input[type=text].bad{border-color:var(--err);}
 /* choice cards (greenfield / adopt) */
 .choices{display:grid;grid-template-columns:1fr 1fr;gap:14px;margin-bottom:18px;}
 .choice{
-  text-align:left;cursor:pointer;background:#fff;border:2px solid var(--line);border-radius:18px;
+  text-align:left;cursor:pointer;background:var(--bg-card);border:2px solid var(--line);border-radius:18px;
   padding:16px;font-family:var(--font-body);transition:all .15s ease;
 }
-.choice:hover{border-color:#eacba4;transform:translateY(-1px);}
-.choice[aria-pressed=true]{border-color:var(--accent);background:#fff9f2;box-shadow:0 8px 24px -12px rgba(249,115,22,0.35);}
+.choice:hover{border-color:var(--rule);transform:translateY(-1px);}
+.choice[aria-pressed=true]{border-color:var(--accent);background:color-mix(in srgb,var(--accent) 5%,var(--bg-card));box-shadow:0 8px 24px -12px color-mix(in srgb,var(--accent) 35%,transparent);}
 .choice svg{display:block;margin-bottom:9px;}
 .choice b{display:block;font-size:15.5px;font-weight:700;margin-bottom:3px;}
 .choice p{font-size:13px;font-weight:500;color:var(--ink-soft);line-height:1.45;}
 .reassure{
-  display:none;background:#f0f9ff;border:1.5px solid #d3ecfb;border-radius:14px;
-  padding:12px 15px;font-size:13.5px;font-weight:500;color:#22617e;line-height:1.5;margin-bottom:18px;
+  display:none;background:color-mix(in srgb,var(--sea) 8%,var(--bg-card));
+  border:1.5px solid color-mix(in srgb,var(--sea) 25%,var(--bg-card));border-radius:14px;
+  padding:12px 15px;font-size:13.5px;font-weight:500;color:color-mix(in srgb,var(--sea) 40%,var(--ink));line-height:1.5;margin-bottom:18px;
 }
 .reassure.on{display:block;}
 
@@ -210,14 +185,14 @@ input[type=text].bad{border-color:var(--err);}
 }
 .btn:hover{transform:translateY(-1px);box-shadow:0 16px 34px -10px var(--accent);}
 .btn:active{transform:translateY(0) scale(.98);}
-.btn:disabled{background:#ecd9c3;color:#b09a85;box-shadow:none;cursor:not-allowed;transform:none;}
+.btn:disabled{background:color-mix(in srgb,var(--ink) 12%,var(--bg-deep));color:color-mix(in srgb,var(--ink) 40%,var(--bg-deep));box-shadow:none;cursor:not-allowed;transform:none;}
 .btn.ghost{background:transparent;color:var(--ink-soft);box-shadow:none;border:2px solid var(--line);padding:12px 22px;}
-.btn.ghost:hover{border-color:#d9c1a4;color:var(--ink);}
+.btn.ghost:hover{border-color:var(--rule-soft);color:var(--ink);}
 .btn.big{width:100%;justify-content:center;font-size:18px;padding:17px 30px;}
 .gh{width:20px;height:20px;fill:currentColor;}
 
 .alert{
-  display:none;background:#fef2f2;border:1.5px solid #fbd5d5;border-radius:14px;
+  display:none;background:var(--err-soft);border:1.5px solid color-mix(in srgb,var(--err) 25%,transparent);border-radius:14px;
   padding:12px 15px;font-size:14px;font-weight:600;color:var(--err);line-height:1.5;margin-top:16px;
 }
 .alert.on{display:block;}
@@ -241,7 +216,7 @@ input[type=text].bad{border-color:var(--err);}
 @keyframes pop{from{transform:scale(.4);opacity:0}to{transform:scale(1);opacity:1}}
 .steps{list-style:none;counter-reset:hs;margin-top:20px;}
 .steps>li{
-  position:relative;background:#fff;border:2px solid var(--line);border-radius:18px;
+  position:relative;background:var(--bg-card);border:2px solid var(--line);border-radius:18px;
   padding:16px 18px 16px 58px;margin-bottom:12px;counter-increment:hs;
 }
 .steps>li::before{
@@ -253,7 +228,7 @@ input[type=text].bad{border-color:var(--err);}
 .steps p{font-size:13.5px;font-weight:500;color:var(--ink-soft);line-height:1.55;margin-top:4px;}
 /* live checklist states (task 1002694): a step the platform has verified done, and a
    step that can't be performed yet (its prerequisite — usually the domain — is missing) */
-.steps>li.sdone{border-color:#bbe7c8;background:linear-gradient(180deg,#f0fdf4 0%,#fcfffc 100%);}
+.steps>li.sdone{border-color:color-mix(in srgb,var(--ok) 30%,var(--bg-card));background:linear-gradient(180deg,color-mix(in srgb,var(--ok) 8%,var(--bg-card)) 0%,var(--bg-card) 100%);}
 .steps>li.sdone::before{content:"✓";background:var(--ok);color:#fff;}
 .steps>li.slocked{opacity:.6;}
 .steps details{margin-top:10px;}
@@ -266,7 +241,7 @@ input[type=text].bad{border-color:var(--err);}
 .kv .kk{font-weight:700;color:var(--ink-faint);flex:0 0 auto;}
 .kv code{font-family:var(--font-mono);font-size:12px;color:var(--accent-deep);word-break:break-all;flex:1;}
 .copy{
-  flex:0 0 auto;cursor:pointer;border:none;border-radius:8px;background:#fff;border:1.5px solid var(--line);
+  flex:0 0 auto;cursor:pointer;border:none;border-radius:8px;background:var(--bg-card);border:1.5px solid var(--line);
   font-family:var(--font-body);font-size:11.5px;font-weight:700;color:var(--ink-soft);padding:5px 10px;
   transition:all .12s ease;
 }
@@ -277,19 +252,19 @@ input[type=text].bad{border-color:var(--err);}
 
 /* ── live build progress (task 2083) ── */
 .prog{
-  background:linear-gradient(180deg,#f2faff 0%,#fbfeff 100%);
-  border:2px solid #dceefb;border-radius:18px;padding:18px 20px 16px;margin-top:14px;
+  background:linear-gradient(180deg,color-mix(in srgb,var(--sea) 8%,var(--bg-card)) 0%,var(--bg-card) 100%);
+  border:2px solid var(--sea-soft);border-radius:18px;padding:18px 20px 16px;margin-top:14px;
 }
 .prog .stages{display:flex;list-style:none;margin-bottom:4px;}
 .prog .stages li{flex:1;display:flex;flex-direction:column;align-items:center;gap:7px;position:relative;}
 .prog .stages li:not(:first-child)::before{
   content:"";position:absolute;top:11px;right:50%;width:100%;height:3px;border-radius:2px;
-  background:#dceefb;z-index:0;margin-right:12px;
+  background:var(--sea-soft);z-index:0;margin-right:12px;
 }
 .prog .stages li.done:not(:first-child)::before{background:var(--sea);}
 .prog .sdot{
   position:relative;z-index:1;width:24px;height:24px;border-radius:50%;
-  border:3px solid #dceefb;background:#fff;display:flex;align-items:center;justify-content:center;
+  border:3px solid var(--sea-soft);background:var(--bg-card);display:flex;align-items:center;justify-content:center;
 }
 .prog .stages li.done .sdot{border-color:var(--sea);background:var(--sea);}
 .prog .stages li.done .sdot::after{content:"";width:8px;height:5px;border-left:2.5px solid #fff;border-bottom:2.5px solid #fff;transform:rotate(-45deg) translate(1px,-1px);}
@@ -299,18 +274,18 @@ input[type=text].bad{border-color:var(--err);}
   animation:beatPulse 1.2s ease-in-out infinite;
 }
 @keyframes beatPulse{0%,100%{transform:scale(.7);opacity:.6}50%{transform:scale(1.15);opacity:1}}
-.prog .slbl{font-size:12px;font-weight:700;color:#8fb6cc;}
-.prog .stages li.now .slbl,.prog .stages li.done .slbl{color:#22617e;}
-.prog .pnote{text-align:center;font-size:13px;font-weight:600;color:#4a809d;min-height:18px;}
+.prog .slbl{font-size:12px;font-weight:700;color:color-mix(in srgb,var(--sea) 55%,var(--ink-faint));}
+.prog .stages li.now .slbl,.prog .stages li.done .slbl{color:color-mix(in srgb,var(--sea) 40%,var(--ink));}
+.prog .pnote{text-align:center;font-size:13px;font-weight:600;color:color-mix(in srgb,var(--sea) 45%,var(--ink-soft));min-height:18px;}
 .prog .pnote a{color:var(--accent-deep);font-weight:700;text-decoration:none;}
 .prog .pnote a:hover{text-decoration:underline;}
-.prog.isLive{background:linear-gradient(180deg,#f0fdf4 0%,#fcfffc 100%);border-color:#bbe7c8;}
+.prog.isLive{background:linear-gradient(180deg,color-mix(in srgb,var(--ok) 8%,var(--bg-card)) 0%,var(--bg-card) 100%);border-color:color-mix(in srgb,var(--ok) 30%,var(--bg-card));}
 .prog.isLive .stages li.done:not(:first-child)::before{background:var(--ok);}
 .prog.isLive .stages li.done .sdot{border-color:var(--ok);background:var(--ok);}
-.prog.isLive .slbl{color:#3e9e5f;}
-.prog.isLive .stages li.done .slbl{color:#166534;}
-.prog.isLive .pnote{color:#166534;font-size:14px;}
-.prog.isErr{background:#fef6f5;border-color:#f6d5d2;}
+.prog.isLive .slbl{color:var(--ok);}
+.prog.isLive .stages li.done .slbl{color:color-mix(in srgb,var(--ok) 75%,var(--ink));}
+.prog.isLive .pnote{color:color-mix(in srgb,var(--ok) 75%,var(--ink));font-size:14px;}
+.prog.isErr{background:var(--err-soft);border-color:color-mix(in srgb,var(--err) 25%,var(--bg-card));}
 .prog.isErr .pnote{color:var(--err);}
 .again{
   display:inline-block;margin-top:14px;font-size:13px;font-weight:700;color:var(--ink-faint);
@@ -319,7 +294,17 @@ input[type=text].bad{border-color:var(--err);}
 }
 .again:hover{color:var(--accent-deep);}
 
-.foot{position:relative;z-index:1;text-align:center;color:var(--ink-soft);font-size:13px;opacity:0.8;padding:0 24px 26px;}
+/* the collapsed address step — a confirmation, not a form (task 1002704) */
+.addrConfirm{border:2px solid color-mix(in srgb,var(--ok) 30%,var(--bg-card));border-radius:18px;padding:18px 20px;background:linear-gradient(180deg,color-mix(in srgb,var(--ok) 8%,var(--bg-card)) 0%,var(--bg-card) 100%);margin-bottom:16px;}
+.addrConfirm.optedOut{border-color:var(--line);background:var(--bg);opacity:.75;}
+.addrBig{font-family:var(--font-display);font-weight:700;font-size:19px;letter-spacing:-0.3px;line-height:1.4;}
+.addrBig code{font-family:var(--font-mono);font-size:15px;background:var(--bg-deep);border-radius:8px;padding:2px 9px;color:var(--accent-deep);word-break:break-all;}
+.addrConfirm>p{font-size:13.5px;font-weight:500;color:var(--ink-soft);line-height:1.5;margin-top:6px;}
+.addrConfirm details{margin-top:12px;}
+.addrConfirm summary{cursor:pointer;font-size:13px;font-weight:700;color:var(--ink-faint);}
+.addrConfirm details .inner{margin-top:10px;}
+.addrOpt{display:flex;align-items:flex-start;gap:8px;margin-top:12px;font-size:12.5px;font-weight:600;color:var(--warn);line-height:1.5;}
+.addrOpt input{margin-top:2px;}
 
 /* ── responsive ── */
 @media (max-width:860px){
@@ -336,25 +321,37 @@ input[type=text].bad{border-color:var(--err);}
 /* GitHub repo picker (task 1002099) */
 .linklike{background:none;border:0;padding:0;margin-left:12px;color:var(--accent-deep);font:inherit;font-size:13px;cursor:pointer;text-decoration:underline;}
 #ghConnect .btn{margin-top:4px;}
-.ghlist{margin-top:8px;max-height:220px;overflow-y:auto;border:1px solid var(--line,#e7d8c4);border-radius:10px;background:var(--bg-deep,#fff);}
+.ghlist{margin-top:8px;max-height:220px;overflow-y:auto;border:1px solid var(--line);border-radius:10px;background:var(--bg-deep);}
 .ghlist:empty{display:none;}
-.ghrow{display:flex;align-items:center;gap:8px;width:100%;text-align:left;background:none;border:0;border-bottom:1px solid rgba(42,31,23,0.06);padding:9px 12px;font:inherit;font-size:13.5px;color:var(--ink,#2a1f17);cursor:pointer;}
+/* rows sit on --bg-deep, so their tints mix over THAT, not the card */
+.ghrow{display:flex;align-items:center;gap:8px;width:100%;text-align:left;background:none;border:0;border-bottom:1px solid color-mix(in srgb,var(--ink) 8%,transparent);padding:9px 12px;font:inherit;font-size:13.5px;color:var(--ink);cursor:pointer;}
 .ghrow:last-child{border-bottom:0;}
-.ghrow:hover{background:#fff9f2;}
-.ghrow[aria-selected=true]{background:#fff3e6;box-shadow:inset 3px 0 0 var(--accent,#f97316);font-weight:600;}
-.ghrow .priv{margin-left:auto;font-size:11px;font-weight:600;color:var(--ink-faint,#9b8a78);background:rgba(42,31,23,0.06);border-radius:5px;padding:1px 6px;}
+.ghrow:hover{background:color-mix(in srgb,var(--accent) 6%,var(--bg-deep));}
+.ghrow[aria-selected=true]{background:color-mix(in srgb,var(--accent) 12%,var(--bg-deep));box-shadow:inset 3px 0 0 var(--accent);font-weight:600;}
+.ghrow .priv{margin-left:auto;font-size:11px;font-weight:600;color:var(--ink-faint);background:color-mix(in srgb,var(--ink) 8%,transparent);border-radius:5px;padding:1px 6px;}
 </style>
 </head>
 <body>
 <div class="sky" aria-hidden="true">
-  <div class="cloud a"></div><div class="cloud b"></div><div class="cloud c"></div>
-  <div class="cloud d"></div><div class="cloud e"></div>
+  <span class="star" style="top:3%;left:14%;width:2px;height:2px;"></span>
+  <span class="star" style="top:6%;left:32%;width:1.5px;height:1.5px;animation-delay:.7s;"></span>
+  <span class="star" style="top:4%;left:52%;width:2px;height:2px;animation-delay:1.4s;"></span>
+  <span class="star" style="top:9%;left:70%;width:1.5px;height:1.5px;animation-delay:.3s;"></span>
+  <span class="star" style="top:5%;left:86%;width:2.5px;height:2.5px;animation-delay:2s;"></span>
+  <span class="star" style="top:16%;left:8%;width:1.5px;height:1.5px;animation-delay:1s;"></span>
+  <span class="star" style="top:24%;left:44%;width:2px;height:2px;animation-delay:1.8s;"></span>
+  <span class="star" style="top:32%;left:80%;width:1.5px;height:1.5px;animation-delay:.5s;"></span>
+  <span class="star" style="top:46%;left:18%;width:1.5px;height:1.5px;animation-delay:2.4s;"></span>
+  <span class="star" style="top:58%;left:62%;width:2px;height:2px;animation-delay:1.2s;"></span>
+  <span class="star" style="top:72%;left:36%;width:1.5px;height:1.5px;animation-delay:.9s;"></span>
+  <span class="star" style="top:84%;left:74%;width:1.5px;height:1.5px;animation-delay:1.6s;"></span>
 </div>
 
 <header class="top">
   <a class="mark" href="/"><span data-brand-product>cloud bongos</span></a>
   <div class="top-right">
     <button type="button" class="exit-wizard" id="exitWizard" title="Leave the wizard — nothing is created">Exit <kbd>esc</kbd></button>
+    <button type="button" class="mode-toggle" id="modeToggle" title="Switch light / dark" aria-label="Switch light or dark mode">☾</button>
     <div class="who" id="who" aria-live="polite"></div>
   </div>
 </header>
@@ -420,12 +417,12 @@ input[type=text].bad{border-color:var(--err);}
           <button type="button" class="choice" id="c-green" aria-pressed="true">
             <svg width="30" height="30" viewBox="0 0 30 30" fill="none" aria-hidden="true"><path d="M15 26V14" stroke="#f97316" stroke-width="2.6" stroke-linecap="round"/><path d="M15 15c0-5 3.5-8.5 9-8.5 0 5.5-3.5 8.5-9 8.5Z" fill="#fdba74" stroke="#f97316" stroke-width="2"/><path d="M15 18c0-3.8-2.6-6.5-7-6.5 0 4.3 2.7 6.5 7 6.5Z" fill="#fed7aa" stroke="#f97316" stroke-width="2"/></svg>
             <b>Start fresh</b>
-            <p>A new, empty repo. We scaffold everything: config, first version, kickoff tasks.</p>
+            <p>A new, empty <strong>public</strong> repo. We scaffold everything: config, first version, kickoff tasks.</p>
           </button>
           <button type="button" class="choice" id="c-adopt" aria-pressed="false">
             <svg width="30" height="30" viewBox="0 0 30 30" fill="none" aria-hidden="true"><rect x="4" y="9" width="22" height="16" rx="3" fill="#fed7aa" stroke="#f97316" stroke-width="2"/><path d="M4 13h22" stroke="#f97316" stroke-width="2"/><path d="M10 9V6.5A1.5 1.5 0 0 1 11.5 5h7A1.5 1.5 0 0 1 20 6.5V9" stroke="#f97316" stroke-width="2"/><path d="M12 19h6" stroke="#ea580c" stroke-width="2.4" stroke-linecap="round"/></svg>
             <b>Adopt a repo I have</b>
-            <p>Layer Cloud Bongos onto an existing repository — history, code, and backlog intact.</p>
+            <p>Layer Cloud Bongos onto an existing repository — history, code, and backlog intact. Public or private, we never change it.</p>
           </button>
         </div>
         <div class="reassure" id="adoptNote">Adopting never overwrites your files: you get a conflict pre-flight first, nothing is written until you accept, and your existing backlog (issues, TODOs) is imported as real tasks.</div>
@@ -446,11 +443,17 @@ input[type=text].bad{border-color:var(--err);}
           <input type="text" id="ghSearch" placeholder="Search your repos…" autocomplete="off">
           <div id="ghList" class="ghlist" role="listbox" aria-label="Your repositories"></div>
           <div class="hint" id="ghAdoptHint">&nbsp;</div>
+          <!-- visibility stated on EVERY repo path (task 1002721) — the picker
+               marks private repos, and this says what adoption does about it -->
+          <div class="hint">We never change a repo’s visibility — public stays public, private stays private.</div>
         </div>
         <div id="ghFresh" class="field" hidden>
           <span>New repository name</span>
           <input type="text" id="ghNewName" placeholder="mercury" autocomplete="off" maxlength="100">
-          <div class="hint" id="ghFreshHint">We’ll create an empty repo at <code id="ghFreshPreview" style="font-family:var(--font-mono)">github.com/you/mercury</code>.</div>
+          <!-- visibility is stated on EVERY repo path (task 1002721) — this baked
+               line is the floor; updateFreshPreview() replaces it with the same
+               claim plus the resolved repo URL once a name is typed -->
+          <div class="hint" id="ghFreshHint">We’ll create an empty <strong>public</strong> repo — projects here are open by design. Want private code? Create the repo yourself on GitHub and “adopt” it instead.</div>
         </div>
 
         <div class="row2" id="manualHome">
@@ -460,6 +463,9 @@ input[type=text].bad{border-color:var(--err);}
           <label class="field"><span>Repository name</span>
             <input type="text" id="f-repo" placeholder="mercury" autocomplete="off" maxlength="120">
           </label>
+          <!-- visibility stated BEFORE GitHub's own radio is the first place it
+               appears (task 1002721, owner firsthand in the QA walk) -->
+          <div class="hint" style="grid-column:1 / -1;">Creating the repo yourself on GitHub? Public or private is your choice there — both work here, and we never change it.</div>
         </div>
         <div class="hint" id="h-home">&nbsp;</div>
         <div class="nav">
@@ -469,19 +475,33 @@ input[type=text].bad{border-color:var(--err);}
       </form>
     </section>
 
-    <!-- step 3 · address -->
+    <!-- step 3 · address — a CONFIRMATION, not a form (task 1002704: every project
+         gets its slug subdomain assigned up front; opt-out lives in the disclosure).
+         The domainless default was a proven dead-end (QA walk, task 1002702). -->
     <section class="panel" id="panel-address" aria-labelledby="addr-h">
       <h1 id="addr-h">Its address in the sky</h1>
-      <p class="lede">The handle names your project on the platform. A domain of your own is where the world will find it — you can add one later, but sign-in on your instance only works once it has a domain.</p>
+      <p class="lede">The handle names your project on the platform — and its address comes with it. Sign-in, sharing, everything just works from the moment it stands up.</p>
       <form data-next="4">
         <label class="field"><span>Project handle</span>
           <input type="text" id="f-slug" placeholder="mercury" autocomplete="off" maxlength="40" spellcheck="false">
           <div class="hint" id="h-slug">&nbsp;</div>
         </label>
-        <label class="field"><span>Domain you own <small>(optional for now)</small></span>
-          <input type="text" id="f-domain" placeholder="mercury.example.com" autocomplete="off" maxlength="253" spellcheck="false">
-          <div class="hint" id="h-domain">&nbsp;</div>
-        </label>
+        <div class="addrConfirm" id="addrConfirm">
+          <div class="addrBig" id="addrAssigned"></div>
+          <p id="addrAssignedNote">Yours from the moment it stands up. You can point a domain you own at it any time.</p>
+          <details id="addrCustom">
+            <summary>Use a domain I own instead</summary>
+            <div class="inner">
+              <label class="field"><span>Domain you own</span>
+                <input type="text" id="f-domain" placeholder="mercury.example.com" autocomplete="off" maxlength="253" spellcheck="false">
+                <div class="hint" id="h-domain">&nbsp;</div>
+              </label>
+              <label class="addrOpt"><input type="checkbox" id="f-noaddr">
+                <span>Start without an address — possible, but sign-in on your project can’t be set up until it has one.</span>
+              </label>
+            </div>
+          </details>
+        </div>
         <div class="nav">
           <button type="button" class="btn ghost" data-back="2">← Back</button>
           <button type="submit" class="btn">Next →</button>
@@ -534,10 +554,26 @@ input[type=text].bad{border-color:var(--err);}
   document.querySelectorAll('[data-brand-product]').forEach(function (n) { n.textContent = productName.toLowerCase(); });
   document.querySelectorAll('[data-brand-product-inline]').forEach(function (n) { n.textContent = productName; });
 
+  /* ── light/dark: the sky is constant, the mode governs the cards. No saved
+     choice = follow the OS; the toggle stores an explicit one. ── */
+  function resolvedMode() {
+    var m = document.documentElement.getAttribute('data-mode');
+    if (m === 'light' || m === 'dark') return m;
+    return (window.matchMedia && window.matchMedia('(prefers-color-scheme: dark)').matches) ? 'dark' : 'light';
+  }
+  function paintModeToggle() { $('modeToggle').textContent = resolvedMode() === 'dark' ? '☀' : '☾'; }
+  $('modeToggle').addEventListener('click', function () {
+    var next = resolvedMode() === 'dark' ? 'light' : 'dark';
+    document.documentElement.setAttribute('data-mode', next);
+    try { localStorage.setItem('cb-color-mode', next); } catch (e) {}
+    paintModeToggle();
+  });
+  paintModeToggle();
+
   /* ── state ── */
   var DRAFT_KEY = 'cb-create-draft';
   var CREATED_KEY = 'cb-created-instance';
-  var state = { step: 0, name: '', mode: 'greenfield', owner: '', ownerTouched: false, repo: '', repoTouched: false, slug: '', slugTouched: false, domain: '' };
+  var state = { step: 0, name: '', mode: 'greenfield', owner: '', ownerTouched: false, repo: '', repoTouched: false, slug: '', slugTouched: false, domain: '', noAddress: false };
   try { Object.assign(state, JSON.parse(sessionStorage.getItem(DRAFT_KEY) || '{}')); } catch (e) {}
   var me = null;
 
@@ -591,6 +627,58 @@ input[type=text].bad{border-color:var(--err);}
   function looksLikeDomain(d) {
     return /^(?!-)[a-z0-9-]{1,63}(?<!-)(\.(?!-)[a-z0-9-]{1,63}(?<!-))+$/i.test(String(d || ''));
   }
+  /* ── the assigned address (task 1002704): every project gets <slug>.<apex> up
+     front, derived from the host this wizard runs on — cloudbongos.com assigns
+     slug.cloudbongos.com; a self-hosted apex assigns under its own name. On a
+     dotless/local host (localhost, an IP) there is nothing sane to assign, so
+     the step degrades to the old optional-domain form. ── */
+  function apexBase() {
+    var h = String(location.hostname || '').toLowerCase().replace(/^www\./, '');
+    if (!h || h.indexOf('.') < 0) return null;
+    if (/^(localhost|127\.|\d+\.\d+\.\d+\.\d+$|\[)/.test(h)) return null;
+    return h;
+  }
+  function assignedDomain() {
+    var base = apexBase();
+    return base && validSlug(state.slug) ? state.slug + '.' + base : null;
+  }
+  /* What the create actually files: a custom domain wins; opting out files none;
+     otherwise the assigned subdomain. Everything downstream (review, submit,
+     the done-panel steps) reads THIS, never state.domain directly. */
+  function resolvedDomain() {
+    if (state.domain) return state.domain;
+    if (state.noAddress) return '';
+    return assignedDomain() || '';
+  }
+  function renderAddrPanel() {
+    var box = $('addrConfirm');
+    if (!box) return;
+    var assigned = assignedDomain();
+    var custom = state.domain && looksLikeDomain(state.domain) ? state.domain : '';
+    box.classList.toggle('optedOut', state.noAddress && !custom);
+    var big = $('addrAssigned');
+    var note = $('addrAssignedNote');
+    if (custom) {
+      big.innerHTML = '<code>' + esc(custom) + '</code> — your own domain, wired up for you.';
+      note.textContent = 'DNS pointing happens after the standup; the card on your projects page walks you through it.';
+    } else if (state.noAddress) {
+      big.textContent = 'Starting without an address.';
+      note.textContent = 'Sign-in on your project can’t be set up until it has one — add it any time from your projects page.';
+    } else if (assigned) {
+      big.innerHTML = '<code>' + esc(assigned) + '</code> — yours from the moment it stands up.';
+      note.textContent = 'Sign-in, sharing, everything just works. You can point a domain you own at it any time.';
+    } else if (!validSlug(state.slug)) {
+      big.textContent = 'Pick a handle above and the address comes with it.';
+      note.textContent = '';
+    } else {
+      /* dotless host (local dev): nothing sane to auto-assign — the domain
+         field IS the step here, so unfold it (a folded disclosure made the
+         opt-out checkbox unreachable-by-default; owner walk, 2026-08-12) */
+      big.textContent = 'No address is assigned on this host.';
+      note.textContent = 'Add a domain you own below, or start without one.';
+      $('addrCustom').open = true;
+    }
+  }
   /* Pinned GitHub OAuth-app values for a domain (auth.js WEB_REDIRECT_ORIGIN —
      callback is the apex /api/gds/auth/web/callback). Mirrors onboard.oauthAppInstructions. */
   function oauthAppValues(domain) {
@@ -633,6 +721,7 @@ input[type=text].bad{border-color:var(--err);}
     var h = $(panels[step]).querySelector('h1');
     if (h) { h.setAttribute('tabindex', '-1'); h.focus({ preventScroll: false }); }
     if (step === 2) { syncHome(); ensureRepoAccess(); }
+    if (step === 3) renderAddrPanel();
     if (step === 4) renderReview();
   }
 
@@ -642,6 +731,7 @@ input[type=text].bad{border-color:var(--err);}
   $('f-repo').value = state.repo;
   $('f-slug').value = state.slug;
   $('f-domain').value = state.domain;
+  $('f-noaddr').checked = !!state.noAddress;
 
   /* Auto-fill the repo name from the project name until the visitor edits it
      directly (mirrors the handle's auto-derive). The owner is filled once we know
@@ -826,6 +916,7 @@ input[type=text].bad{border-color:var(--err);}
     if (!state.slug) { h.innerHTML = '&nbsp;'; h.className = 'hint'; this.classList.remove('bad'); }
     else if (validSlug(state.slug)) { h.textContent = 'Nice — that works.'; h.className = 'hint ok'; this.classList.remove('bad'); }
     else { h.textContent = '2–40 lowercase letters, numbers, or dashes; no leading/trailing/double dash.'; h.className = 'hint err'; this.classList.add('bad'); }
+    renderAddrPanel();
     saveDraft();
   });
   $('f-domain').addEventListener('input', function () {
@@ -834,6 +925,12 @@ input[type=text].bad{border-color:var(--err);}
     if (!state.domain) { h.innerHTML = '&nbsp;'; h.className = 'hint'; this.classList.remove('bad'); }
     else if (looksLikeDomain(state.domain)) { h.textContent = 'Looks like a domain.'; h.className = 'hint ok'; this.classList.remove('bad'); }
     else { h.textContent = 'That doesn’t look like a domain yet (e.g. mercury.example.com).'; h.className = 'hint err'; this.classList.add('bad'); }
+    renderAddrPanel();
+    saveDraft();
+  });
+  $('f-noaddr').addEventListener('change', function () {
+    state.noAddress = !!this.checked;
+    renderAddrPanel();
     saveDraft();
   });
 
@@ -865,6 +962,15 @@ input[type=text].bad{border-color:var(--err);}
         return false;
       }
       if (state.domain && !looksLikeDomain(state.domain)) return false;
+      /* no auto-assigned address (dotless host): going domainless must be an
+         EXPLICIT choice — a domain, or the opt-out box. Never silent. */
+      if (!resolvedDomain() && !state.noAddress) {
+        $('addrCustom').open = true;
+        var hd = $('h-domain');
+        hd.textContent = 'Add a domain you own — or tick “start without an address” to go without one.';
+        hd.className = 'hint err';
+        return false;
+      }
       return true;
     }
     return true;
@@ -888,7 +994,9 @@ input[type=text].bad{border-color:var(--err);}
       ['Starting from', state.mode === 'adopt' ? 'A repo you already have' : 'A fresh, empty repo'],
       ['Repository', '<code>' + esc(state.owner + '/' + state.repo) + '</code>'],
       ['Handle', '<code>' + esc(state.slug) + '</code>'],
-      ['Domain', state.domain ? '<code>' + esc(state.domain) + '</code>' : '<em style="font-weight:600;color:var(--ink-faint)">add later</em>'],
+      ['Address', resolvedDomain()
+        ? '<code>' + esc(resolvedDomain()) + '</code>'
+        : '<em style="font-weight:600;color:var(--warn)">none — sign-in stays locked until it has one</em>'],
       ['Shape', 'Standalone — your own repo, pinned platform core']
     ];
     $('reviewList').innerHTML = rows.map(function (r) {
@@ -952,7 +1060,7 @@ input[type=text].bad{border-color:var(--err);}
         body: JSON.stringify({
           slug: state.slug,
           hosting_shape: 'standalone',
-          domain: state.domain || undefined,
+          domain: resolvedDomain() || undefined,
           target_ref: state.owner + '/' + state.repo,
           /* LOAD-BEARING for the control-plane runner, not just for the checklist we
              render (task 1002562): 'adopt' makes it clone + layer onto the repo's
@@ -974,7 +1082,7 @@ input[type=text].bad{border-color:var(--err);}
     }).then(function (data) {
       try {
         sessionStorage.setItem(CREATED_KEY, JSON.stringify({
-          id: data.instance && data.instance.id, slug: state.slug, domain: state.domain,
+          id: data.instance && data.instance.id, slug: state.slug, domain: resolvedDomain(),
           mode: state.mode, name: state.name, at: Date.now()
         }));
         sessionStorage.removeItem(DRAFT_KEY);
@@ -1016,10 +1124,12 @@ input[type=text].bad{border-color:var(--err);}
   var FALLBACK_HUMAN_KEYS = ['github-repo', 'oauth-app', 'first-sign-in', 'enter-hall'];
 
   function fetchPlan() {
-    var domain = state.domain || '';
+    var domain = resolvedDomain() || '';
     var key = state.mode + '|' + domain;
     if (!planPromises[key]) {
-      planPromises[key] = fetch(API + '/provisioning/onboard-plan?mode=' + encodeURIComponent(state.mode) + (domain ? '&domain=' + encodeURIComponent(domain) : ''))
+      // shape=standalone: this wizard only creates control-plane standalone
+      // instances, and the plan is shape-filtered server-side (direction §7)
+      planPromises[key] = fetch(API + '/provisioning/onboard-plan?mode=' + encodeURIComponent(state.mode) + '&shape=standalone' + (domain ? '&domain=' + encodeURIComponent(domain) : ''))
         .then(function (res) { if (!res.ok) throw new Error('plan'); return res.json(); })
         .then(function (d) { return (d && d.steps) || []; })
         .catch(function () {
@@ -1048,7 +1158,7 @@ input[type=text].bad{border-color:var(--err);}
         : '<li data-onboard-step="github-repo"><b>Your empty repo is ready</b><p>We created ' + repoLabel + ' on GitHub for you — public (projects here are open by design), empty, and waiting. The scaffold lands there when the build runs; nothing for you to do here.</p></li>';
     }
     var ghNewUrl = githubNewRepoUrl(state.owner, state.repo);
-    return '<li' + (landed ? ' class="sdone"' : '') + ' data-onboard-step="github-repo"><b>Create the empty GitHub repo</b><p>Do this first — the build needs the repo to exist. Click below (GitHub opens with the name already filled in), press <strong>Create repository</strong>, and leave it completely empty. Seeing “repository not found” above? That just means the repo isn’t created yet — make it here.</p>' +
+    return '<li' + (landed ? ' class="sdone"' : '') + ' data-onboard-step="github-repo"><b>Create the empty GitHub repo</b><p>Do this first — the build needs the repo to exist. Click below (GitHub opens with the name already filled in), press <strong>Create repository</strong>, and leave it completely empty. GitHub will ask public or private — your choice; both work here, and we never change it. Seeing “repository not found” above? That just means the repo isn’t created yet — make it here.</p>' +
       '<a class="ghbtn" href="' + esc(ghNewUrl) + '" target="_blank" rel="noopener">' + GH_ICON + 'Create ' + repoLabel + ' on GitHub</a></li>';
   }
 
@@ -1056,7 +1166,7 @@ input[type=text].bad{border-color:var(--err);}
      control-plane placement is named as the operator's, never handed to the owner
      as a command to run (gap 4). */
   function manualOauthDetails() {
-    var oa = oauthAppValues(state.domain);
+    var oa = oauthAppValues(resolvedDomain());
     return '<details><summary>Prefer to create an OAuth app by hand?</summary>' +
       '<p>GitHub → <em>your account’s</em> Settings → Developer settings → OAuth Apps → New OAuth App. (Developer settings live under your account, not the repo.)</p>' +
       '<div class="kv"><span class="kk">Homepage URL</span><code>' + esc(oa.homepageUrl) + '</code>' + copyBtn(oa.homepageUrl) + '</div>' +
@@ -1068,11 +1178,18 @@ input[type=text].bad{border-color:var(--err);}
      (gap 3 / idea 1000676); locked until a domain exists (the App needs the real
      callback host — the server refuses domainless with domain_required). */
   function renderStepOauthApp() {
-    if (!state.domain) {
+    var domain = resolvedDomain();
+    if (!domain) {
       return '<li class="slocked" data-onboard-step="oauth-app"><b>Wire GitHub sign-in</b><p>Unlocks once your project has an address — sign-in needs a real domain. Attach one any time from <a href="/projects">your projects page</a>.</p></li>';
     }
+    /* honesty about the venue (owner walk, 2026-08-12): GitHub rejects app
+       manifests whose hook URL isn't publicly reachable, so a locally-hosted
+       platform can't complete the one-click flow — say it BEFORE the bounce. */
+    if (!apexBase()) {
+      return '<li class="slocked" data-onboard-step="oauth-app"><b>Wire GitHub sign-in</b><p>This platform is running on a local address, and GitHub refuses app setups it can’t reach over the public internet — so the one-click flow can’t complete here. On a publicly-addressed platform this is one click.</p>' + manualOauthDetails() + '</li>';
+    }
     if (live.manifest === 'done') {
-      return '<li class="sdone" data-onboard-step="oauth-app"><b>GitHub sign-in is wired</b><p>Credentials placed and verified — sign-in on <code style="font-family:var(--font-mono)">' + esc(state.domain) + '</code> is live.</p></li>';
+      return '<li class="sdone" data-onboard-step="oauth-app"><b>GitHub sign-in is wired</b><p>Credentials placed and verified — sign-in on <code style="font-family:var(--font-mono)">' + esc(domain) + '</code> is live.</p></li>';
     }
     if (live.manifest === 'error' || live.manifest === 'expired') {
       return '<li data-onboard-step="oauth-app"><b>Wire GitHub sign-in</b><p>' +
@@ -1087,15 +1204,17 @@ input[type=text].bad{border-color:var(--err);}
   }
 
   function renderStepFirstSignIn() {
-    if (!state.domain) {
+    var domain = resolvedDomain();
+    if (!domain) {
       return '<li class="slocked" data-onboard-step="first-sign-in"><b>First sign-in</b><p>Unlocks with sign-in above — you’ll open your project’s address, sign in with GitHub once, and be seated as the owner (the founding Archon).</p></li>';
     }
-    return '<li data-onboard-step="first-sign-in"><b>First sign-in</b><p>Open <a href="https://' + esc(state.domain) + '" target="_blank" rel="noopener"><code style="font-family:var(--font-mono)">' + esc(state.domain) + '</code></a> and sign in with GitHub once. That seats you as the owner — the founding Archon.</p></li>';
+    return '<li data-onboard-step="first-sign-in"><b>First sign-in</b><p>Open <a href="https://' + esc(domain) + '" target="_blank" rel="noopener"><code style="font-family:var(--font-mono)">' + esc(domain) + '</code></a> and sign in with GitHub once. That seats you as the owner — the founding Archon.</p></li>';
   }
 
   function renderStepEnterHall() {
-    return state.domain
-      ? '<li data-onboard-step="enter-hall"><b>Enter your builders hall</b><p>Your project’s home — open <a href="https://' + esc(state.domain) + '/builders" target="_blank" rel="noopener"><code style="font-family:var(--font-mono)">' + esc(state.domain) + '/builders</code></a> and start building.</p></li>'
+    var domain = resolvedDomain();
+    return domain
+      ? '<li data-onboard-step="enter-hall"><b>Enter your builders hall</b><p>Your project’s home — open <a href="https://' + esc(domain) + '/builders" target="_blank" rel="noopener"><code style="font-family:var(--font-mono)">' + esc(domain) + '/builders</code></a> and start building.</p></li>'
       : '<li data-onboard-step="enter-hall"><b>Enter your builders hall</b><p>No address yet — run <code style="font-family:var(--font-mono)">bongos dev</code> in your repo checkout to start the local hall on your machine.</p></li>';
   }
 
@@ -1106,6 +1225,12 @@ input[type=text].bad{border-color:var(--err);}
     'enter-hall': renderStepEnterHall
   };
 
+  /* The newborn-instance welcome + account-nag suppression (direction §5.6,
+     idea 1000701) is NOT implemented here by design: it lives on the CHILD
+     instance's own surfaces (its hall greeting + needs roster), which this
+     control-plane wizard cannot reach. Spun out per the direction's §9
+     delivery-split as task 1002739. */
+
   function renderSteps() {
     fetchPlan().then(function (steps) {
       var html = steps.filter(function (s) { return s && s.kind === 'human'; }).map(function (s) {
@@ -1122,7 +1247,7 @@ input[type=text].bad{border-color:var(--err);}
     var adopt = state.mode === 'adopt';
     $('doneLede').innerHTML = 'Provisioning is requested for <strong>' + esc(state.name || state.slug) + '</strong>' +
       (adopt ? ' — adopting your existing repo' : '') +
-      '. The platform stands up the server, database, and address on its own — you can watch its live status right here.';
+      '. The platform stands up the server, database, and address on its own — watch it right here, or any time on <a href="/projects">your projects page</a>.';
     renderSteps();
   }
 
@@ -1215,9 +1340,9 @@ input[type=text].bad{border-color:var(--err);}
     if (!el) return true;
     var s = inst && inst.status;
     if (s === 'requested') {
-      el.innerHTML = progressMarkup(1, 1, 'Waiting for a builder runner to pick it up — usually under a minute.');
+      el.innerHTML = progressMarkup(1, 1, 'Waiting for a runner to pick it up. This updates the moment it starts.');
     } else if (s === 'provisioning') {
-      el.innerHTML = progressMarkup(1, 1, 'Raising the server, database, and address. A few minutes, no rush needed on your side.');
+      el.innerHTML = progressMarkup(1, 1, 'Raising the server, database, and address — nothing needed from you.');
     } else if (s === 'active') {
       var addr = inst.domain ? 'https://' + inst.domain : null;
       el.innerHTML = progressMarkup(-1, 3,
@@ -1225,11 +1350,13 @@ input[type=text].bad{border-color:var(--err);}
         '. Finish the steps below and the hall is yours.', 'isLive');
       return true;
     } else if (s === 'error') {
+      /* the honest snag (direction §5 / F19): no raw stderr as the headline, no
+         false "keeps retrying" — retries stop, and the retry door is /projects */
       el.innerHTML = progressMarkup(1, 1,
-        'The standup hit a snag' + (inst.error_note ? ': ' + esc(inst.error_note) : '') +
-        '. The platform keeps retrying — this page updates as it recovers.', 'isErr');
+        'The standup stopped partway — it won’t continue on its own. Retry it (and see the technical details) from <a href="/projects">your projects page</a>.', 'isErr');
     } else if (s === 'tearing_down' || s === 'torn_down') {
-      el.innerHTML = progressMarkup(-1, 0, 'This instance was torn down. You can start another project below.', 'isErr');
+      /* a deliberate end is calm, never styled as a failure (direction §5) */
+      el.innerHTML = progressMarkup(-1, 0, 'This instance was torn down. Bring it back any time from <a href="/projects">your projects page</a>, or start another below.');
       return true;
     } else {
       el.innerHTML = progressMarkup(0, 1, 'Filed. Watching for the standup to start…');
@@ -1297,8 +1424,9 @@ input[type=text].bad{border-color:var(--err);}
       live = { instStatus: null, manifest: null, manifestMsg: '' };
       lastStepsHtml = '';
       try { sessionStorage.removeItem(CREATED_KEY); sessionStorage.removeItem(DRAFT_KEY); } catch (e) {}
-      state = { step: 1, name: '', mode: 'greenfield', owner: '', ownerTouched: false, repo: '', repoTouched: false, slug: '', slugTouched: false, domain: '' };
+      state = { step: 1, name: '', mode: 'greenfield', owner: '', ownerTouched: false, repo: '', repoTouched: false, slug: '', slugTouched: false, domain: '', noAddress: false };
       $('f-name').value = ''; $('f-owner').value = ''; $('f-repo').value = ''; $('f-slug').value = ''; $('f-domain').value = '';
+      $('f-noaddr').checked = false;
       // Re-seed the owner from the signed-in account for the next project.
       if (me && me.github_login) { state.owner = me.github_login; $('f-owner').value = state.owner; }
       $('h-name').innerHTML = '&nbsp;';