@bongos/core 1.21.105 → 1.21.106

package/modules/public-landing/public/projects.probes.json

@@ -167,12 +167,12 @@
     { "name": "part 02 (task 1004648): Change opens a row in place and reads Done, opening another closes it, and nothing needs confirming", "auth": true, "width": 1440, "url": "/projects?view=new",
       "steps": [["wait",600],["fill","#newName","Mercury"],["click","#typeCards .tpill[data-type=\"game\"]"],["fill","#f-desc","A co-op farming game where the seasons never repeat."],["select","#physCountry","US"],["wait",100],["click","[data-phys=\"builder_geography\"][data-val=\"global\"]"],["click","[data-phys=\"minors_on_board\"][data-val=\"false\"]"],["click","[data-phys=\"entity\"][data-val=\"intent-solo\"]"],["wait",300],["click","#reviewRows .setRow[data-row=\"team\"] [data-row-chg]"],["wait",200],["click","[data-phys-solo=\"many\"]"],["wait",600],["click","#reviewRows .setRow[data-row=\"run\"] [data-row-chg]"],["wait",300]],
       "expect": {"visible":["#reviewRows .setRow[data-row=\"rewards\"]","#reviewRows .setRow.open[data-row=\"run\"] .opts"],"hidden":["#reviewRows .setRow[data-row=\"team\"] .opts"],"text":[["#reviewRows .setRow[data-row=\"run\"] [data-row-chg]","Done"],["#reviewRows .setRow[data-row=\"team\"] [data-row-chg]","Change"]]} },
-    { "name": "the wizard driver (task 1004648): part 01, the checks, the address row (the dotless stub host takes a domain the founder owns), the tick, then Create — part 03 goes live with the checklist, the cloud hop and its status line", "auth": true, "width": 1440, "url": "/projects?view=new",
+    { "name": "the wizard driver (task 1004648): part 01, the checks, the address row (the dotless stub host takes a domain the founder owns), the tick, then Create — part 03 goes live as Getting <name> ready: one sentence, the checked facts, and the cloud hop behind its link", "auth": true, "width": 1440, "url": "/projects?view=new",
       "steps": [["wait",600],["fill","#newName","Mercury"],["click","#typeCards .tpill[data-type=\"game\"]"],["fill","#f-desc","A co-op farming game where the seasons never repeat."],["select","#physCountry","US"],["wait",100],["click","[data-phys=\"builder_geography\"][data-val=\"global\"]"],["click","[data-phys=\"minors_on_board\"][data-val=\"false\"]"],["click","[data-phys=\"entity\"][data-val=\"intent-solo\"]"],["wait",300],["click","#reviewRows .setRow[data-row=\"address\"] [data-row-chg]"],["wait",200],["fill","#f-slug","mercury"],["wait",900],["fill","#f-domain","mercury.example.com"],["wait",200],["click","#reviewRows .setRow[data-row=\"address\"] [data-row-chg]"],["wait",200],["click","#termsAck"],["wait",100],["click","#doCreate"],["wait",1500]],
-      "expect": {"visible":["#panel-done","#humanSteps","#hop","#hopCanvas","#hopStatus","#hopJump"],"hidden":["#wizParts","#liveProgress"],"text":[["#done-h","Setting up Mercury"],["#hopStatus","Raising the server, database, and address — nothing needed from you."]]} },
+      "expect": {"visible":["#panel-done","#setupNow","#homeFacts","#ghFacts","#hopLink"],"hidden":["#wizParts","#hop","#doneAlive"],"text":[["#donePartT","Getting Mercury ready"]]} },
     { "name": "the wizard driver at 320 (narrower than a 375 phone): the page stacks, nothing scrolls sideways, and the walk still reaches part 03", "auth": true, "width": 320, "url": "/projects?view=new",
       "steps": [["wait",600],["fill","#newName","Mercury"],["click","#typeCards .tpill[data-type=\"game\"]"],["fill","#f-desc","A co-op farming game where the seasons never repeat."],["select","#physCountry","US"],["wait",100],["click","[data-phys=\"builder_geography\"][data-val=\"global\"]"],["click","[data-phys=\"minors_on_board\"][data-val=\"false\"]"],["click","[data-phys=\"entity\"][data-val=\"intent-solo\"]"],["wait",300],["click","#reviewRows .setRow[data-row=\"address\"] [data-row-chg]"],["wait",200],["fill","#f-slug","mercury"],["wait",900],["fill","#f-domain","mercury.example.com"],["wait",200],["click","#reviewRows .setRow[data-row=\"address\"] [data-row-chg]"],["wait",200],["click","#termsAck"],["wait",100],["click","#doCreate"],["wait",1500]],
-      "expect": {"noOverflow":true,"visible":["#panel-done","#humanSteps"],"hidden":["#wizParts"]} },
+      "expect": {"noOverflow":true,"visible":["#panel-done","#homeFacts","#ghFacts"],"hidden":["#wizParts"]} },
     { "name": "invite a guild (task 1002303, R27): a /g/ address gives one pending line per member on its public page, each a link to the hall", "auth": true, "width": 1440, "url": "/projects?view=manage&id=101",
       "steps": [["wait",900],["fill","#mInviteGuild","/g/forge-crew"],["click","#mInvite [data-invite-guild]"],["wait",400]],
       "expect": { "count": [["#mInviteList li", 4]], "value": [["#mInviteGuild", ""]],

package/modules/public-landing/public/projects.states.json

@@ -56,7 +56,7 @@
     "in-new-look": {"auth":true,"url":"/projects?view=new","actions":[["wait",600],["fill","#newName","Mercury"],["click","#typeCards .tpill[data-type=\"game\"]"],["fill","#f-desc","A co-op farming game where the seasons never repeat."],["select","#physCountry","US"],["wait",100],["click","[data-phys=\"builder_geography\"][data-val=\"global\"]"],["click","[data-phys=\"minors_on_board\"][data-val=\"false\"]"],["click","[data-phys=\"entity\"][data-val=\"intent-solo\"]"],["wait",300],["click","#reviewRows .setRow[data-row=\"look\"] [data-row-chg]"],["wait",400]],"expect":{"visible":["#reviewRows .setRow.open[data-row=\"look\"] .opts","#wizLook"]}},
     "in-new-look-custom": {"auth":true,"url":"/projects?view=new","actions":[["wait",600],["fill","#newName","Mercury"],["click","#typeCards .tpill[data-type=\"game\"]"],["fill","#f-desc","A co-op farming game where the seasons never repeat."],["select","#physCountry","US"],["wait",100],["click","[data-phys=\"builder_geography\"][data-val=\"global\"]"],["click","[data-phys=\"minors_on_board\"][data-val=\"false\"]"],["click","[data-phys=\"entity\"][data-val=\"intent-solo\"]"],["wait",300],["click","#reviewRows .setRow[data-row=\"look\"] [data-row-chg]"],["wait",400],["click","#wizLook-custom"],["wait",200]],"expect":{"visible":["#reviewRows .setRow.open[data-row=\"look\"] .opts","#wizLook","#wizAccent","#wizAccentNote"]}},
     "in-new-create-blocked": {"auth":true,"url":"/projects?view=new","actions":[["wait",600],["fill","#newName","Mercury"],["click","#typeCards .tpill[data-type=\"game\"]"],["fill","#f-desc","A co-op farming game where the seasons never repeat."],["click","#termsAck"],["wait",100],["click","#doCreate"],["wait",400]],"expect":{"visible":["#reviewRows .setRow.open[data-row=\"address\"] .opts","#h-domain"],"hidden":["#doneBody"],"text":[["#createWhy","Fix the row that’s open, then create."]]}},
-    "in-new-done": {"auth":true,"url":"/projects?view=new","actions":[["wait",600],["fill","#newName","Mercury"],["click","#typeCards .tpill[data-type=\"game\"]"],["fill","#f-desc","A co-op farming game where the seasons never repeat."],["select","#physCountry","US"],["wait",100],["click","[data-phys=\"builder_geography\"][data-val=\"global\"]"],["click","[data-phys=\"minors_on_board\"][data-val=\"false\"]"],["click","[data-phys=\"entity\"][data-val=\"intent-solo\"]"],["wait",300],["click","#reviewRows .setRow[data-row=\"address\"] [data-row-chg]"],["wait",200],["fill","#f-slug","mercury"],["wait",900],["fill","#f-domain","mercury.example.com"],["wait",200],["click","#reviewRows .setRow[data-row=\"address\"] [data-row-chg]"],["wait",200],["click","#termsAck"],["wait",100],["click","#doCreate"],["wait",1500]],"expect":{"visible":["#panel-done","#doneBody","#humanSteps","#hop","#hopCanvas","#hopStatus","#hopJump","#wizRecap"],"hidden":["#wizParts","#qWrap","#wizInvite","#liveProgress","#wizInviteLater"],"attr":[["#doCreate","disabled",""],["#wizRoom","data-screen","done"]],"text":[["#done-h","Setting up Mercury"],["#doCreate","Created"]]}},
+    "in-new-done": {"auth":true,"url":"/projects?view=new","actions":[["wait",600],["fill","#newName","Mercury"],["click","#typeCards .tpill[data-type=\"game\"]"],["fill","#f-desc","A co-op farming game where the seasons never repeat."],["select","#physCountry","US"],["wait",100],["click","[data-phys=\"builder_geography\"][data-val=\"global\"]"],["click","[data-phys=\"minors_on_board\"][data-val=\"false\"]"],["click","[data-phys=\"entity\"][data-val=\"intent-solo\"]"],["wait",300],["click","#reviewRows .setRow[data-row=\"address\"] [data-row-chg]"],["wait",200],["fill","#f-slug","mercury"],["wait",900],["fill","#f-domain","mercury.example.com"],["wait",200],["click","#reviewRows .setRow[data-row=\"address\"] [data-row-chg]"],["wait",200],["click","#termsAck"],["wait",100],["click","#doCreate"],["wait",1500]],"expect":{"visible":["#panel-done","#doneBody","#setupNow","#homeFacts","#ghFacts","#hopLink","#wizRecap"],"hidden":["#wizParts","#qWrap","#wizInvite","#hop","#doneAlive"],"attr":[["#doCreate","disabled",""],["#wizRoom","data-screen","done"]],"text":[["#donePartT","Getting Mercury ready"],["#doCreate","Created"]]}},
     "in-new-resume-offer": {"auth":true,"url":"/projects?view=new","actions":[["wait",600],["fill","#newName","Mercury"],["click","#typeCards .tpill[data-type=\"game\"]"],["fill","#f-desc","A co-op farming game where the seasons never repeat."],["select","#physCountry","US"],["wait",100],["click","[data-phys=\"builder_geography\"][data-val=\"global\"]"],["click","[data-phys=\"minors_on_board\"][data-val=\"false\"]"],["click","[data-phys=\"entity\"][data-val=\"intent-solo\"]"],["wait",300],["click","#reviewRows .setRow[data-row=\"address\"] [data-row-chg]"],["wait",200],["fill","#f-slug","mercury"],["wait",900],["fill","#f-domain","mercury.example.com"],["wait",200],["click","#reviewRows .setRow[data-row=\"address\"] [data-row-chg]"],["wait",200],["click","#termsAck"],["wait",100],["click","#doCreate"],["wait",1500],["click","#projTrig"],["wait",350],["click","#menuProjects [data-nav=\"new\"]"],["wait",500]],"expect":{"visible":["#panel-page","#wizResume","#wizResumeGo","#wizParts"],"hidden":["#doneBody"],"text":[["#wizResumeName","Mercury"]]}},
     "out-new": {"auth":false,"url":"/projects?view=new","expect":{"visible":["#panel-gate","#wizSignin"],"hidden":["#qWrap","#panel-page"]}},
     "out-map-projects": { "auth": false, "actions": [["click", "#projTrig"], ["wait", 350]], "expect": { "expanded": true, "hidden": ["#menuProjects [data-nav=\"mine\"]"] } },

package/modules/ui-design/kit/fixtures/provisioning-instances-hall-live.json

@@ -1,5 +1,5 @@
 {
-  "_": "The owner's projects for the kit (task 1003345): four states the mine list and the manage page render — live, standing up, snagged, torn down. Timestamps written \"$now-3m\" / \"$now-1d\" are resolved by the stub at request time so \"checked 3m ago\" stays true. Mooring (task 1003345, the grade's finding): live but unreachable since its last probe, so the restart door renders and the restart probe has a row to drive.",
+  "_": "The owner's projects for the kit (task 1003345): four states the mine list and the manage page render — live, standing up, snagged, torn down. Timestamps written \"$now-3m\" / \"$now-1d\" are resolved by the stub at request time so \"checked 3m ago\" stays true. Mooring (task 1003345, the grade's finding): live but unreachable since its last probe, so the restart door renders and the restart probe has a row to drive. Mercury (102) also carries the owner read's GitHub halves (github_app, github_setup), produced by the REAL projections with the app approved, installed and signed in, so part 03 reaches every required fact done (task 1004683).",
   "instances": [
     {
       "id": 101,
@@ -44,7 +44,27 @@
         "state": "running",
         "created_at": "$now-6m"
       },
-      "dns_resolves": true
+      "dns_resolves": true,
+      "github_app": {
+        "status": "done",
+        "app_slug": "mercury-cloudbongos-com",
+        "failure": null,
+        "started_at": "2026-10-09T12:52:53.145Z"
+      },
+      "github_setup": {
+        "checklist": {
+          "approve": "done",
+          "install": "done",
+          "sign_in": "done",
+          "device_flow": "later",
+          "connected": true
+        },
+        "install_url": null,
+        "repo": "builder/mercury",
+        "verifying": true,
+        "pick_up": null,
+        "app_org": null
+      }
     },
     {
       "id": 103,

package/modules/ui-design/kit/fixtures/provisioning-instances-setup.json

@@ -0,0 +1,195 @@
+{
+  "_": "Part 03 after Create, one project per scenario of the design of record docs/design/mocks/day-night-rooms/setup-status.html (task 1004683): 201 just created, 202 waiting on GitHub, 203 installing, 204 stopped (the install never confirmed, the checking window over), 205 all done. Each row carries the github_app and github_setup halves of the owner's instance read, produced by the REAL projections (manifest-truth publicGithubApp, github-setup githubSetupRead); serve.js hands them out beside the instance on the single read. Regenerate the GitHub halves rather than hand-editing them.",
+  "instances": [
+    {
+      "id": 201,
+      "slug": "kestrel",
+      "domain": "kestrel.cloudbongos.com",
+      "target_ref": "founder/kestrel",
+      "hosting_shape": "cloud-host",
+      "onboard_mode": "greenfield",
+      "error_note": null,
+      "dns_note": null,
+      "torn_down_at": null,
+      "open_intent": null,
+      "status": "provisioning",
+      "created_at": "$now-1m",
+      "provisioned_at": null,
+      "updated_at": "$now-1m",
+      "last_verified_at": null,
+      "last_verified_up": null,
+      "dns_resolves": false,
+      "github_app": null,
+      "github_setup": {
+        "checklist": {
+          "approve": "todo",
+          "install": "todo",
+          "sign_in": "todo",
+          "device_flow": "todo",
+          "connected": false
+        },
+        "install_url": null,
+        "repo": "founder/kestrel",
+        "verifying": false,
+        "app_org": null,
+        "pick_up": null
+      }
+    },
+    {
+      "id": 202,
+      "slug": "heron",
+      "domain": "heron.cloudbongos.com",
+      "target_ref": "founder/heron",
+      "hosting_shape": "cloud-host",
+      "onboard_mode": "greenfield",
+      "error_note": null,
+      "dns_note": null,
+      "torn_down_at": null,
+      "open_intent": null,
+      "status": "active",
+      "created_at": "$now-9m",
+      "provisioned_at": "$now-6m",
+      "updated_at": "$now-6m",
+      "last_verified_at": null,
+      "last_verified_up": null,
+      "dns_resolves": false,
+      "github_app": {
+        "status": "pending",
+        "app_slug": null,
+        "failure": null,
+        "started_at": "2026-10-09T12:48:57.326Z"
+      },
+      "github_setup": {
+        "checklist": {
+          "approve": "now",
+          "install": "todo",
+          "sign_in": "todo",
+          "device_flow": "todo",
+          "connected": false
+        },
+        "install_url": null,
+        "repo": "founder/heron",
+        "verifying": false,
+        "pick_up": "reopen",
+        "app_org": null
+      }
+    },
+    {
+      "id": 203,
+      "slug": "plover",
+      "domain": "plover.cloudbongos.com",
+      "target_ref": "founder/plover",
+      "hosting_shape": "cloud-host",
+      "onboard_mode": "greenfield",
+      "error_note": null,
+      "dns_note": null,
+      "torn_down_at": null,
+      "open_intent": null,
+      "status": "active",
+      "created_at": "$now-14m",
+      "provisioned_at": "$now-11m",
+      "updated_at": "$now-11m",
+      "last_verified_at": "$now-9s",
+      "last_verified_up": true,
+      "dns_resolves": true,
+      "github_app": {
+        "status": "converting",
+        "app_slug": "plover-cloudbongos-com",
+        "failure": null,
+        "started_at": "2026-10-09T12:45:57.326Z"
+      },
+      "github_setup": {
+        "checklist": {
+          "approve": "done",
+          "install": "now",
+          "sign_in": "now",
+          "device_flow": "todo",
+          "connected": false
+        },
+        "install_url": "https://github.com/apps/plover-cloudbongos-com/installations/new",
+        "repo": "founder/plover",
+        "verifying": true,
+        "pick_up": null,
+        "app_org": null
+      }
+    },
+    {
+      "id": 204,
+      "slug": "tern",
+      "domain": "tern.cloudbongos.com",
+      "target_ref": "founder/tern",
+      "hosting_shape": "cloud-host",
+      "onboard_mode": "greenfield",
+      "error_note": null,
+      "dns_note": null,
+      "torn_down_at": null,
+      "open_intent": null,
+      "status": "active",
+      "created_at": "$now-4h",
+      "provisioned_at": "$now-235m",
+      "updated_at": "$now-235m",
+      "last_verified_at": "$now-9s",
+      "last_verified_up": true,
+      "dns_resolves": true,
+      "github_app": {
+        "status": "done",
+        "app_slug": "tern-cloudbongos-com",
+        "failure": null,
+        "started_at": "2026-10-09T08:59:57.326Z"
+      },
+      "github_setup": {
+        "checklist": {
+          "approve": "done",
+          "install": "now",
+          "sign_in": "done",
+          "device_flow": "later",
+          "connected": false
+        },
+        "install_url": "https://github.com/apps/tern-cloudbongos-com/installations/new",
+        "repo": "founder/tern",
+        "verifying": false,
+        "pick_up": "check",
+        "app_org": null
+      }
+    },
+    {
+      "id": 205,
+      "slug": "wren",
+      "domain": "wren.cloudbongos.com",
+      "target_ref": "founder/wren",
+      "hosting_shape": "cloud-host",
+      "onboard_mode": "greenfield",
+      "error_note": null,
+      "dns_note": null,
+      "torn_down_at": null,
+      "open_intent": null,
+      "status": "active",
+      "created_at": "$now-30m",
+      "provisioned_at": "$now-27m",
+      "updated_at": "$now-27m",
+      "last_verified_at": "$now-3s",
+      "last_verified_up": true,
+      "dns_resolves": true,
+      "github_app": {
+        "status": "done",
+        "app_slug": "wren-cloudbongos-com",
+        "failure": null,
+        "started_at": "2026-10-09T12:25:57.326Z"
+      },
+      "github_setup": {
+        "checklist": {
+          "approve": "done",
+          "install": "done",
+          "sign_in": "done",
+          "device_flow": "later",
+          "connected": true
+        },
+        "install_url": null,
+        "repo": "founder/wren",
+        "verifying": true,
+        "pick_up": null,
+        "app_org": null
+      }
+    }
+  ]
+}

package/modules/ui-design/kit/serve.js

@@ -309,12 +309,27 @@ function instances(res, id, settings) {
   if (FAIL.has(name)) return json(res, 500, { error: { code: 'stub_failure', message: `FAIL=${name}` } });
   const file = path.join(FIXTURES, (ALIAS[name] || name) + '.json');
   if (!fs.existsSync(file)) return json(res, 404, { error: { code: 'no_fixture', message: name } });
-  const list = stamp((JSON.parse(fs.readFileSync(file, 'utf8')).instances || []).map(withAsk).map(withPlanet));
+  // a fixture row may carry the owner read's two GitHub halves (github_app, github_setup —
+  // the shapes modules/provisioning/routes/provisioning.js adds, task 1004683); they ride
+  // the single read beside the instance, never inside it, and never the list
+  const rows = stamp((JSON.parse(fs.readFileSync(file, 'utf8')).instances || []).map(withAsk).map(withPlanet));
+  const bare = (i) => { const { github_app, github_setup, ...rest } = i; return rest; };
+  const list = rows.map(bare);
   if (id === null) return json(res, 200, { instances: list });
-  const inst = list.find((i) => String(i.id) === String(id));
-  if (!inst) return json(res, 404, { error: { code: 'not_found', message: 'no such instance' } });
+  const row = rows.find((i) => String(i.id) === String(id));
+  if (!row) return json(res, 404, { error: { code: 'not_found', message: 'no such instance' } });
+  const inst = bare(row);
   if (settings) return json(res, 200, { settings: { platform_visibility: 'public', joinability: 'open', visibility: 'public' }, planet: PLANETS.get(String(id)) || NO_PLANET, options: { platform_visibility: ['public', 'gated'], joinability: ['open', 'apply', 'invite_only'], visibility: ['public', 'private', 'stealth'] } });
-  return json(res, 200, { instance: inst, open_intent: inst.open_intent || null });
+  return json(res, 200, { instance: inst, open_intent: inst.open_intent || null, github_app: row.github_app || null, github_setup: row.github_setup || null });
+}
+// GET /provisioning/github-app/resume?id=N — the route's resume record (routes/github-setup.js
+// resumeRecord) for a fixture project, so a render can open part 03 on it by URL alone
+function resumeAnswer(res, id) {
+  const file = path.join(FIXTURES, (ALIAS['provisioning-instances'] || 'provisioning-instances') + '.json');
+  const rows = fs.existsSync(file) ? (JSON.parse(fs.readFileSync(file, 'utf8')).instances || []) : [];
+  const inst = id ? rows.find((i) => String(i.id) === String(id)) : null;
+  const repo = inst && /^[A-Za-z0-9][A-Za-z0-9-]{0,38}\/[A-Za-z0-9._-]{1,100}$/.test(String(inst.target_ref || '')) ? inst.target_ref : null;
+  return json(res, 200, { ok: true, project: inst ? { id: inst.id, slug: inst.slug, domain: inst.domain || null, onboard_mode: inst.onboard_mode || 'greenfield', repo } : null });
 }
 // A project's art in the featured fixture may be root-relative (the surface's
 // own /assets/…, served by this stub) — the page accepts only an http(s) art
@@ -644,6 +659,9 @@ const server = http.createServer((req, res) => {
     if (/^\/provisioning\/instances\/\d+\/invite-suggestions$/.test(rest) && req.method === 'GET') {
       return AUTH ? json(res, 200, { suggested: [], seeking: null, reason: null }) : json(res, 401, UNAUTH);
     }
+    if (rest === '/provisioning/github-app/resume' && req.method === 'GET') {
+      return AUTH ? resumeAnswer(res, u.searchParams.get('id')) : json(res, 401, UNAUTH);
+    }
     const one = rest.match(/^\/provisioning\/instances\/(\d+)(\/settings)?$/);
     if (one && req.method === 'GET') return AUTH ? instances(res, one[1], !!one[2]) : json(res, 401, UNAUTH);
     // the hub's own cross-project surface (task 1003774): the requested/leave/

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.105",
+  "version": "1.21.106",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.21.105",
+      "version": "1.21.106",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.105",
+  "version": "1.21.106",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -9476,5 +9476,11 @@
       "id": "1004666",
       "text": "A check that is still running is no longer reported as a failed one. Before, a project whose test service posts a \"still working\" status would see its change called broken and trigger a pointless repair attempt; now it is corr"
     }
+  ],
+  "1.21.106": [
+    {
+      "id": "1004683",
+      "text": "After pressing Create, a founder now sees \"Getting <name> ready\" with a plain count (\"4 of 6 done\", or \"ready\" with a tick) and one sentence saying what is happening and whether it is their turn. Below it are two short lists,"
+    }
   ]
 }

package/src/module-api.js

@@ -75,7 +75,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // MAJOR (see allowBoxScope below): passes the request through untouched.
 function deprecatedNoopMiddleware(_req, _res, next) { next(); }
 
-const CORE_VERSION = '1.21.105'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.21.106'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('discord'); log.info('mounted');

package/tests/cosmos_token_contrast.mjs

@@ -515,24 +515,16 @@ test('text is never dimmed by subtree opacity', () => {
   assert.deepEqual(offenders, [], `\n  ${offenders.join('\n  ')}\n`);
 });
 
-test('the .prog strip mirrors .strip: state marks are --sea-ink, ticks are --on-ok', () => {
-  // /create's done panel renders the page-local .prog, NOT cosmos's .strip —
-  // a re-point of one and not the other is exactly how the 1.74:1 dark tick
-  // shipped the first time. State-mark rules (done fill/connector, now
-  // ring/pulse, the tick) must use the derived tokens; raw --sea is only legal
-  // as a tint ingredient (color-mix) or the idle -soft rail.
-  const progRules = [...pageSrc.matchAll(/\.prog[^{}]*\{([^}]*)\}/g)];
-  assert.ok(progRules.length >= 5, 'the .prog rules moved out of projects.html — update this test');
-  const bad = [];
-  for (const m of progRules) {
-    const body = m[1];
-    if (/(?:border(?:-\w+)?|background)\s*:\s*var\(\s*--sea\s*\)/.test(body)) {
-      bad.push(`raw --sea state mark: ${m[0].slice(0, 80)}`);
-    }
-    if (/border-(?:left|bottom)\s*:[^;]*#fff\b/i.test(body)) {
-      bad.push(`hardcoded #fff tick: ${m[0].slice(0, 80)}`);
-    }
-  }
+test('part 03 draws no stage strip, and its fact marks use the status inks, never raw --sea or #fff (task 1004683)', () => {
+  // The done panel's page-local .prog strip (a mirror of cosmos's .strip) left with the
+  // stage dots: part 03 is one list of checked facts now. The mine and manage views keep
+  // cosmos's own .strip. A fact's mark carries its state in the --ok / --err / --accent
+  // inks (which the day room re-points through --wz-*); raw --sea or a literal white
+  // would be the 1.74:1 dark tick this test was first written for.
+  assert.equal([...pageSrc.matchAll(/\.prog[^{}]*\{([^}]*)\}/g)].length, 0, 'no .prog rules are left in projects.html');
+  const marks = [...pageSrc.matchAll(/\.setFact\.(done|bad|now|you) \.d\{([^}]*)\}/g)];
+  assert.ok(marks.length >= 4, 'the four marked fact states are found');
+  const bad = marks.filter((m) => /var\(\s*--sea\s*\)|#fff\b/i.test(m[2])).map((m) => m[0].slice(0, 80));
   assert.deepEqual(bad, [], `\n  ${bad.join('\n  ')}\n`);
 });
 

package/tests/github_handback_any_device.mjs

@@ -82,8 +82,8 @@ function region(startMark, endMark) {
   const e = s < 0 ? -1 : SCRIPT.indexOf(endMark, s);
   return s > 0 && e > s ? SCRIPT.slice(s, e) : null;
 }
-const POLLS = region("    /* ── C8: the wizard's polls run only while the create view is on stage", '    /* ── live build progress (task 2083)');
-const WATCH_VARS = region('    var pollTimer = null;', "    /* The done panel's own flow vocabularies");
+const POLLS = region("    /* ── C8: the wizard's polls run only while the create view is on stage", "    /* ── the owner's instance read (task 2083)");
+const WATCH_VARS = region('    var pollTimer = null;', '    function startProgress(id) {');
 const START_PROGRESS = (SCRIPT.match(/ {4}function startProgress\(id\) \{[\s\S]*?\n {4}\}/) || [null])[0];
 const DOORS = region("    /* ── the hub's three doors ── */", '    return { enter: enter, leave: leave, onAuth: onAuth };');
 
@@ -136,7 +136,8 @@ function page({ url, who, storage = 'empty', name = '', hidden = false, instance
     renderDone() { log.rendered += 1; }, renderSteps() { log.rendered += 1; },
     resetForNewProject() { log.resets += 1; },
     saveDraft() {},
-    setProgress() {}, progressMarkup: () => '', setMoment() {}, renderProgress: () => false, addressReady: () => true,
+    // part 03's facts (task 1004683) are tests/setup_status_facts.mjs; here they only have to exist
+    paintFacts() {}, homeFacts: () => [], ghFacts: () => [], setupReady: () => false, hostOk: () => true, addressReady: () => true,
   };
   sandbox.globalThis = sandbox;
   vm.createContext(sandbox);

package/tests/github_one_trip.mjs

@@ -8,8 +8,8 @@
 //      app's OWN key: the creds read back out of a REAL webEnvBody, a JWT that verifies,
 //      installed / not installed / cannot tell, device flow on / off / cannot tell, and the
 //      tick recording only what GitHub confirmed — never a secret in a log line.
-//   3. the REAL projection (githubSetupRead) run into the REAL page renderers (projects.html,
-//      the vm-slice idiom): each server state draws the step the founder should see.
+//   3. the REAL projection (githubSetupRead) run into the REAL page facts (projects.html,
+//      ghFacts, the vm-slice idiom; task 1004683): each server state draws the fact the founder should see.
 //   4. the device-flow finding is written down where the next builder will look.
 //
 // Run:  node --test tests/github_one_trip.mjs
@@ -185,38 +185,35 @@ test('the window query takes each project\'s LATEST attempt, past placement, sti
   assert.match(fs.readFileSync(path.join(ROOT, 'scripts', 'gds', 'provision.js'), 'utf8'), /require\('\.\/provision-github-setup\.js'\)\.verifyGithubAppSetups\(deps\)/, 'it runs on every runner tick, after the conversions');
 });
 
-// ── 3. the real projection into the real renderers ──────────────────────────
+// ── 3. the real projection into the real page facts ─────────────────────────
+// Since task 1004683 part 03 draws FACTS, not checklist markup: ghFacts() is pure over
+// what the reads said, and paintFacts draws it from nodes (tests/setup_status_facts.mjs
+// runs the whole route-to-DOM path). Here: the GitHub half, fed by the real projection.
 
-const RS = SCRIPT.indexOf('    /* The four GitHub steps of part 03');
-const RE = SCRIPT.indexOf('    var STEP_RENDERERS = {', RS);
+const FS = SCRIPT.indexOf('    function ghStep(key) {');
+const FE = SCRIPT.indexOf('    /* ── drawing it: nodes and textContent only', FS);
 const SS = SCRIPT.indexOf('    /* the checklist the server derived (task 1004649)');
 const SE = SCRIPT.indexOf('    function pollManifest(stateToken) {', SS);
-const PS = SCRIPT.indexOf('    function stepsPaint() {');
-const PE = SCRIPT.indexOf('    (function hopInput()', PS);
 
 test('the regions are findable (a rename must fail loudly)', () => {
-  assert.ok(RS > 0 && RE > RS && SS > 0 && SE > SS && PS > 0 && PE > PS);
+  assert.ok(FS > 0 && FE > FS && SS > 0 && SE > SS);
+  assert.match(SCRIPT.slice(FS, FE), /function ghFacts\(now\)/);
 });
 
 function page({ manifest, appSlug = null }) {
   const sandbox = {
-    live: { manifest, manifestMsg: '', manifestCode: '', manifestFailure: null, appSlug, setup: null, installUrl: null, instStatus: 'active', addrReady: true },
+    live: { manifest, manifestMsg: '', manifestCode: '', manifestFailure: null, appSlug, appOrg: null, setup: null, installUrl: null, pickUp: null, verifying: false, askedPlatform: false, instStatus: 'active', addrReady: true, inst: null, readAt: 0, gone: '', repo: null },
     state: { name: 'Mer<cury', slug: 'mercury', owner: 'acme', repo: 'mercury', step: 2 },
-    autoOpenArmed: false,
-    resolvedDomain: () => 'mercury.example.com', apexBase: () => 'example.com',
-    esc: (x) => String(x).replace(/[&<>"']/g, (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' }[c])),
-    GH_ICON: '', manualOauthDetails: () => '', projectPageLink: (t) => t, autoOpenTick: () => '',
-    progressMarkup: (a, b, note) => `<prog>${note}</prog>`, encodeURIComponent, JSON, Array,
+    resolvedDomain: () => 'mercury.example.com', apexBase: () => 'example.com', addressReady: () => true,
+    document: { hidden: false, hasFocus: () => true },
   };
   vm.createContext(sandbox);
-  vm.runInContext(`${SCRIPT.slice(RS, RE)}\n${SCRIPT.slice(SS, SE)}\n${SCRIPT.slice(PS, PE)}`, sandbox);
+  vm.runInContext(`${SCRIPT.slice(FS, FE)}\n${SCRIPT.slice(SS, SE)}`, sandbox);
   return sandbox;
 }
-const ROWS = ['renderStepOauthApp', 'renderStepAppInstall', 'renderStepFirstSignIn', 'renderStepDeviceFlow'];
-function draw(sb) {
-  return ROWS.map((f) => vm.runInContext(`${f}()`, sb));
-}
-function cls(li) { return ((li.match(/^<li(?: class="([^"]*)")?/) || [])[1] || '').split(/\s+/).filter(Boolean); }
+// vm-born values compared through JSON
+const draw = (sb) => JSON.parse(JSON.stringify(vm.runInContext('ghFacts(Date.now())', sb)));
+const states = (rows) => rows.map((r) => r.state);
 
 async function serverSays(status, appSlug, eventRows) {
   const db = { query: async () => ({ rows: eventRows }) };
@@ -224,55 +221,50 @@ async function serverSays(status, appSlug, eventRows) {
   return GS.githubSetupRead(db, { target_ref: 'acme/mercury' }, row, status);
 }
 
-test('the mockup\'s four steps, in its words and order, the typed name escaped', () => {
-  const sb = page({ manifest: null });
-  const rows = draw(sb);
-  const titles = rows.map((li) => (li.match(/<b>([^<]*)<\/b>/) || [])[1]);
-  assert.deepEqual(titles, ['Approve the Mer&lt;cury app on GitHub', 'Install it on your repo', 'Builders can sign in', 'Command-line sign-in is on']);
-  assert.match(rows[0], /data-action="manifest-start"[^>]*>Connect GitHub ↗/, 'one click starts the one trip');
-  assert.equal(SCRIPT.match(/var STEP_ORDER = \[([^\]]*)\]/)[1], "'github-repo', 'oauth-app', 'app-install', 'first-sign-in', 'device-flow', 'enter-hall'", 'drawn in the mockup\'s order');
+test('the mockup\'s four facts, in its words and order; the typed name is text, never markup', () => {
+  const rows = draw(page({ manifest: null }));
+  assert.deepEqual(rows.map((r) => r.title), ['Approve the Mer<cury app on GitHub', 'Install it on your repo', 'Builders can sign in', 'Command-line sign-in']);
+  assert.deepEqual(rows.map((r) => r.key), ['approve', 'install', 'sign_in', 'device_flow']);
+  assert.equal(rows[0].act, 'connect', 'one click starts the one trip, from inside the Approve fact');
+  assert.equal(rows[0].state, 'you', 'it is the founder\'s turn');
+  assert.equal(rows[3].opt, true, 'command-line sign-in is optional');
+  assert.doesNotMatch(SCRIPT.slice(FS, FE), /esc\(|innerHTML/, 'the facts carry text; the painter writes nodes');
 });
 
-test('each server state draws the step the founder should see — from the REAL projection', async () => {
+test('each server state draws the facts the founder should see — from the REAL projection', async () => {
   // keys placed, nothing verified on GitHub yet
   let sb = page({ manifest: 'converting', appSlug: 'mercury-app' });
   let d = await serverSays('converting', 'mercury-app', []);
-  vm.runInContext(`seedSetup(${JSON.stringify(d.checklist)}, ${JSON.stringify(d.install_url)})`, sb);
+  vm.runInContext(`seedSetup(${JSON.stringify(d.checklist)}, ${JSON.stringify(d.install_url)}, ${JSON.stringify(d)})`, sb);
   let rows = draw(sb);
-  assert.deepEqual(rows.map(cls), [['sdone'], [], ['slocked'], ['slocked', 'soptional']]);
-  assert.match(rows[1], /href="https:\/\/github\.com\/apps\/mercury-app\/installations\/new\?state=S1"/, 'the way back to the install, with the attempt');
-  assert.equal(vm.runInContext('stepsPaint.toString().length > 0', sb), true);
+  assert.deepEqual(states(rows), ['done', 'you', 'now', 'todo']);
+  assert.equal(rows[1].href, 'https://github.com/apps/mercury-app/installations/new?state=S1', 'the way back to the install, with the attempt');
+  assert.equal(rows[1].sub, 'acme/mercury', 'the repo the server says it installs on');
+  assert.equal(rows[1].right, 'not yet seen');
 
   // sign-in verified, install still unconfirmed: NOT connected
   sb = page({ manifest: 'done', appSlug: 'mercury-app' });
   d = await serverSays('done', 'mercury-app', []);
-  vm.runInContext(`seedSetup(${JSON.stringify(d.checklist)}, ${JSON.stringify(d.install_url)})`, sb);
+  vm.runInContext(`seedSetup(${JSON.stringify(d.checklist)}, ${JSON.stringify(d.install_url)}, ${JSON.stringify(d)})`, sb);
   rows = draw(sb);
-  assert.deepEqual(rows.map(cls), [['sdone'], [], ['sdone'], ['soptional']]);
-  assert.match(rows[3], /Optional — turn it on later\./);
+  assert.deepEqual(states(rows), ['done', 'you', 'done', 'todo']);
+  assert.equal(JSON.stringify(rows[3].sub), JSON.stringify(['Turn it on later in ', { t: 'the app settings', href: 'https://github.com/settings/apps/mercury-app' }, '.']));
   assert.equal(vm.runInContext('setupOpen()', sb), true, 'the page keeps watching for the install');
 
   // GitHub confirmed the install to the runner: connected, device flow still optional
   sb = page({ manifest: 'done', appSlug: 'mercury-app' });
   d = await serverSays('done', 'mercury-app', [{ event: 'github-app-installed', at: '2026-10-08T10:00:00Z' }]);
-  vm.runInContext(`seedSetup(${JSON.stringify(d.checklist)}, ${JSON.stringify(d.install_url)})`, sb);
+  vm.runInContext(`seedSetup(${JSON.stringify(d.checklist)}, ${JSON.stringify(d.install_url)}, ${JSON.stringify(d)})`, sb);
   rows = draw(sb);
-  assert.deepEqual(rows.map(cls), [['sdone'], ['sdone'], ['sdone'], ['soptional']]);
-  assert.match(rows[1], /The app is on acme\/mercury/);
+  assert.deepEqual(states(rows), ['done', 'done', 'done', 'todo']);
   assert.equal(vm.runInContext('setupOpen()', sb), false);
-  // the part's state line, from these very rows: the optional step does not hold it back
-  const items = rows.map((li) => ({ classList: { contains: (c) => cls(li).includes(c) } }));
-  const ghState = { textContent: '' };
-  sb.$ = (id) => (id === 'humanSteps' ? { children: items } : id === 'ghState' ? ghState : null);
-  sb.manifestInFlight = () => false;
-  vm.runInContext('stepsPaint()', sb);
-  assert.equal(ghState.textContent, 'connected ✓');
+  assert.equal(vm.runInContext('setupCount([], ghFacts(Date.now()))', sb), 'ready ✓', 'the optional fact does not hold the count back');
 
   // and once GitHub has device flow on, the fourth ticks too
   sb = page({ manifest: 'done', appSlug: 'mercury-app' });
   d = await serverSays('done', 'mercury-app', [{ event: 'github-app-installed', at: '2026-10-08T10:00:00Z' }, { event: 'github-app-device-flow', at: '2026-10-08T10:05:00Z' }]);
-  vm.runInContext(`seedSetup(${JSON.stringify(d.checklist)}, ${JSON.stringify(d.install_url)})`, sb);
-  assert.deepEqual(cls(draw(sb)[3]), ['sdone', 'soptional']);
+  vm.runInContext(`seedSetup(${JSON.stringify(d.checklist)}, ${JSON.stringify(d.install_url)}, ${JSON.stringify(d)})`, sb);
+  assert.equal(draw(sb)[3].state, 'done');
 });
 
 test('seedSetup is change-only, and an install link must be GitHub\'s', () => {
@@ -286,6 +278,12 @@ test('seedSetup is change-only, and an install link must be GitHub\'s', () => {
   vm.runInContext(`seedSetup(${c}, 'javascript:alert(1)')`, sb2);
   assert.equal(vm.runInContext('live.installUrl', sb2), null);
   assert.equal(vm.runInContext('seedSetup(null, null)', sb2), false);
+  // the repo it installs on rides the read, strict
+  const sb3 = page({ manifest: 'done', appSlug: 'a' });
+  vm.runInContext(`seedSetup(${c}, null, { repo: 'acme/mer cury' })`, sb3);
+  assert.equal(vm.runInContext('live.repo', sb3), null, 'a malformed repo never reaches the page');
+  vm.runInContext(`seedSetup(${c}, null, { repo: 'acme/mercury' })`, sb3);
+  assert.equal(vm.runInContext('live.repo', sb3), 'acme/mercury');
 });
 
 // ── 4. the finding is written down ──────────────────────────────────────────

package/tests/github_org_account.mjs

@@ -113,7 +113,7 @@ const PICKER = region("    /* ── whose GitHub account: mine or an organisati
 const ENSURE_REPO = region('    function ensureFreshRepo() {', "    $('doCreate').addEventListener('click'");
 const NOTE_ORG = region("    /* the organisation the server says this attempt's app is on: change-only */", '    function startManifest(btn) {');
 const START = region('    function startManifest(btn) {', '    /* the "start again" offer once a wait has clearly gone wrong');
-const SETTINGS = region('    /* the organisation that owns the app, when the founder made it on one (task 1004651) */', '    /* oauth-app — the ADR 0133 one-click GitHub-App manifest flow');
+const SETTINGS = region('    /* the organisation that owns the app, when the founder made it on one (task 1004651) */', '    /* When a fact was seen, said plainly');
 
 test('the page regions are still findable (a rename must fail loudly, not test nothing)', () => {
   for (const [name, r] of Object.entries({ PICKER, ENSURE_REPO, NOTE_ORG, START, SETTINGS })) assert.ok(r, `${name} region not found`);
@@ -165,7 +165,7 @@ function page({ state = {}, live = {} } = {}) {
     live: { manifest: null, manifestMsg: '', manifestFailure: null, appSlug: null, appOrg: null, setup: null, installUrl: null, ...live },
     repoAccess: true, instanceId: 42, me: { github_login: 'founder' },
     hopForRepoAccess: () => false, syncHome() {}, saveDraft() {},
-    rememberManifest() {}, renderSteps() {}, pollManifest() {}, watchGhTab() {},
+    rememberManifest() {}, paintFacts() {}, repaintFacts() {}, pollManifest() {}, watchGhTab() {},
   };
   sandbox.manifestStartedAt = 0;
   vm.createContext(sandbox);