@bongos/core 1.21.27 → 1.21.29

package/modules/hall-ui/public/style.css

@@ -1201,6 +1201,234 @@ html[data-fullscreen="on"][data-fullscreen-plain="on"] .app-content { padding-to
   pointer-events: none;
 }
 
+/* THE CRAFT MODE (task 1004492, craft-mode.js). The top bar's switch: one pill
+   holding the four crafts and Legacy, the current one lit. Narrower windows
+   drop the words, and a phone shows only the current mode (or "Mode"), which
+   opens the picker. The picker below asks once per session. Neither paints a
+   mode's colour — the looks are their own task (1004495). */
+.craft-switch {
+  display: inline-flex;
+  align-items: center;
+  gap: 2px;
+  padding: 3px;
+  border-radius: var(--radius-pill);
+  box-shadow: inset 0 0 0 1px var(--glass-edge);
+  flex-shrink: 0;
+}
+.craft-switch__opt,
+.craft-switch__open {
+  display: inline-flex;
+  align-items: center;
+  gap: 6px;
+  min-width: 28px;
+  height: 28px;
+  padding: 0 10px;
+  border: 0;
+  border-radius: var(--radius-pill);
+  background: none;
+  color: var(--ink-soft);
+  font: inherit;
+  font-size: 13px;
+  cursor: pointer;
+  white-space: nowrap;
+}
+.craft-switch__opt:hover,
+.craft-switch__open:hover { color: var(--ink); background: var(--glass); }
+.craft-switch__opt[aria-pressed="true"] { color: var(--ink); background: var(--glass-strong); }
+.craft-switch__opt:focus-visible,
+.craft-switch__open:focus-visible { outline: 2px solid var(--focus); outline-offset: 1px; }
+.craft-switch__icon { width: 15px; height: 15px; flex-shrink: 0; }
+.craft-switch__open { display: none; }
+@media (max-width: 1180px) {
+  .craft-switch__opt { padding: 0 7px; }
+  .craft-switch__opt .craft-switch__label { display: none; }
+}
+@media (max-width: 640px) {
+  .craft-switch { padding: 2px; }
+  .craft-switch__opt[aria-pressed="false"] { display: none; }
+  .craft-switch--unset .craft-switch__open { display: inline-flex; padding: 0 7px; }
+}
+
+/* The picker: a dialog over a scrim, four doors in a row and Legacy beside the
+   "ask me again" box. Each door carries its scene from the approved prototype,
+   which is night-dark in either theme because every scene is a night one. */
+html.craft-picker-open { overflow: hidden; }
+.craft-picker {
+  position: fixed;
+  inset: 0;
+  z-index: var(--z-modal);
+  display: flex;
+  align-items: flex-start;
+  justify-content: center;
+  padding: max(24px, 8vh) 16px 24px;
+  overflow-y: auto;
+  background: var(--scrim);
+}
+.craft-picker__panel {
+  position: relative;
+  width: min(1120px, 100%);
+  box-sizing: border-box;
+  display: flex;
+  flex-direction: column;
+  gap: 12px;
+  padding: 40px 44px 30px;
+  border-radius: 22px;
+  background: var(--bg-card);
+  color: var(--ink);
+  box-shadow: 0 0 0 1px var(--glass-edge), 0 24px 64px rgba(0, 0, 0, .35);
+}
+.craft-picker__close {
+  position: absolute;
+  top: 14px;
+  right: 14px;
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  width: 36px;
+  height: 36px;
+  border: 0;
+  border-radius: var(--radius-pill);
+  background: none;
+  color: var(--ink-soft);
+  cursor: pointer;
+}
+.craft-picker__close svg { width: 18px; height: 18px; }
+.craft-picker__close:hover { color: var(--ink); background: var(--glass); }
+.craft-picker__eyebrow {
+  margin: 0;
+  font-family: var(--label-face);
+  font-size: var(--label-size);
+  letter-spacing: var(--label-space);
+  text-transform: var(--label-case);
+  color: var(--ink-faint);
+}
+.craft-picker__title {
+  margin: 0;
+  font-family: var(--font-display);
+  font-size: clamp(28px, 4vw, 40px);
+  font-weight: 300;
+  letter-spacing: -0.03em;
+  line-height: 1.15;
+}
+.craft-picker__lede { margin: 0 0 16px; font-size: 16px; line-height: 1.5; color: var(--ink-soft); }
+.craft-picker__doors {
+  display: grid;
+  grid-template-columns: repeat(4, minmax(0, 1fr));
+  gap: 16px;
+}
+.craft-door {
+  display: flex;
+  flex-direction: column;
+  align-items: stretch;
+  gap: 8px;
+  padding: 0 0 20px;
+  overflow: hidden;
+  border: 0;
+  border-radius: 14px;
+  background: var(--bg);
+  color: var(--ink);
+  font: inherit;
+  text-align: left;
+  cursor: pointer;
+  box-shadow: inset 0 0 0 1px var(--glass-edge);
+  transition: transform 200ms cubic-bezier(.2, .7, .3, 1), box-shadow 200ms;
+}
+.craft-door:hover { transform: translateY(-3px); box-shadow: inset 0 0 0 1px var(--rule); }
+.craft-door:focus-visible { outline: 2px solid var(--focus); outline-offset: 3px; }
+.craft-door--pre { box-shadow: inset 0 0 0 2px var(--accent); }
+.craft-door__head { display: flex; align-items: center; gap: 10px; padding: 10px 20px 0; }
+.craft-door__icon { width: 20px; height: 20px; flex-shrink: 0; }
+.craft-door__name { font-size: 20px; font-weight: 500; letter-spacing: -0.02em; }
+.craft-door__line { padding: 0 20px; font-size: 14px; line-height: 1.45; color: var(--ink-soft); }
+.craft-art {
+  position: relative;
+  display: block;
+  height: 110px;
+  overflow: hidden;
+  background: #101012;
+}
+.craft-art--artistry { background: #0c1122; }
+.craft-art--ideating { background: #05060d; }
+.craft-art--governing { background: #000; }
+.craft-art__dot { position: absolute; border-radius: 999px; box-sizing: border-box; }
+.craft-art__dot--star { background: #d8dcf0; }
+.craft-art__dot--lit { background: var(--accent); border-radius: 0; }
+.craft-art__dot--gold { background: #f2d27a; }
+.craft-art__dot--glow { background: #f2d27a; box-shadow: 0 0 10px rgba(242, 210, 122, .7); }
+.craft-art__dot--proto { box-shadow: inset 0 0 0 1px rgba(242, 210, 122, .55); }
+.craft-art__bar { position: absolute; height: 10px; border-radius: 4px; background: rgba(255, 255, 255, .12); }
+.craft-art__bar--dim { background: rgba(255, 255, 255, .08); }
+.craft-art__pill { position: absolute; width: 84px; height: 26px; border-radius: 999px; background: var(--accent); }
+.craft-art__card {
+  position: absolute; right: 20px; top: 20px; width: 60px; height: 72px; border-radius: 8px;
+  background: rgba(255, 255, 255, .06); box-shadow: inset 0 0 0 1px rgba(255, 255, 255, .12);
+}
+.craft-art__moon {
+  position: absolute; right: 30px; top: 18px; width: 28px; height: 28px; border-radius: 999px;
+  background: #f1e6d2; box-shadow: 0 0 0 9px rgba(241, 230, 210, .10);
+}
+.craft-art__ground { position: absolute; left: 0; right: 0; bottom: 0; height: 32px; background: #090b16; }
+.craft-art__house { position: absolute; bottom: 0; background: #0a0d1a; }
+.craft-art__ring {
+  position: absolute; left: 50%; top: 14px; width: 82px; height: 82px; margin-left: -41px;
+  border-radius: 999px; box-shadow: inset 0 0 0 1px rgba(242, 210, 122, .22);
+}
+.craft-art__city { position: absolute; left: 50%; top: 0; width: 300px; height: 110px; margin-left: -150px; }
+.craft-picker__foot {
+  display: flex;
+  flex-wrap: wrap;
+  align-items: center;
+  justify-content: space-between;
+  gap: 12px 24px;
+  margin-top: 14px;
+  padding-top: 18px;
+  border-top: 1px solid var(--rule-soft);
+}
+.craft-picker__again {
+  display: inline-flex;
+  align-items: center;
+  gap: 10px;
+  min-height: 24px;
+  font-size: 14px;
+  color: var(--ink-soft);
+  cursor: pointer;
+}
+.craft-picker__again input { width: 18px; height: 18px; margin: 0; accent-color: var(--accent); }
+.craft-picker__side { display: inline-flex; flex-wrap: wrap; align-items: center; gap: 12px 18px; }
+.craft-picker__hint { font-size: 13px; color: var(--ink-faint); }
+.craft-picker__legacy {
+  display: inline-flex;
+  align-items: center;
+  height: 40px;
+  padding: 0 18px;
+  border: 0;
+  border-radius: var(--radius-pill);
+  background: none;
+  color: var(--ink);
+  font: inherit;
+  font-size: 14px;
+  cursor: pointer;
+  box-shadow: inset 0 0 0 1px var(--rule);
+}
+.craft-picker__legacy:hover { background: var(--glass); }
+.craft-picker__legacy:focus-visible,
+.craft-picker__close:focus-visible { outline: 2px solid var(--focus); outline-offset: 2px; }
+@media (max-width: 900px) {
+  .craft-picker__doors { grid-template-columns: repeat(2, minmax(0, 1fr)); }
+}
+@media (max-width: 640px) {
+  .craft-picker { padding: 12px; }
+  .craft-picker__panel { padding: 28px 18px 20px; gap: 8px; border-radius: 18px; }
+  .craft-picker__doors { grid-template-columns: minmax(0, 1fr); gap: 10px; }
+  .craft-door { flex-direction: row; flex-wrap: wrap; align-items: center; gap: 4px 0; padding: 0 0 14px; }
+  .craft-art { flex: 0 0 100%; height: 96px; }
+  .craft-art__city { top: -8px; }
+  .craft-door__head { padding: 10px 16px 0; }
+  .craft-door__name { font-size: 18px; }
+  .craft-door__line { flex: 0 0 100%; padding: 0 16px; box-sizing: border-box; }
+  .craft-picker__legacy { height: auto; min-height: 40px; white-space: normal; text-align: left; }
+}
+
 /* THE BACK LINK (task 1004430): at the head of the bar when the page was
    reached from inside another hall page. 24px floor on both axes. */
 .topbar-back {

package/modules/hall-ui/public/task.html

@@ -54,7 +54,9 @@
 
 <!-- The app shell (sidebar + top bar + footer). Dependency-free; runs at parse
      time so the chrome exists before the deferred page scripts execute. -->
-<script src="/builders/shell.js?v=2026-10-02-trail"></script>
+<script src="/builders/shell-trail.js?v=2026-10-02-craft"></script>
+<script src="/builders/craft-mode.js?v=2026-10-02-craft"></script>
+<script src="/builders/shell.js?v=2026-10-02-craft"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded FIRST so task.js can pull from it. -->

package/modules/hall-ui/public/thinking.html

@@ -138,7 +138,9 @@
   </div>
 </div>
 
-<script src="/builders/shell.js?v=2026-10-02-trail"></script>
+<script src="/builders/shell-trail.js?v=2026-10-02-craft"></script>
+<script src="/builders/craft-mode.js?v=2026-10-02-craft"></script>
+<script src="/builders/shell.js?v=2026-10-02-craft"></script>
 <script src="/builders/palette.js" defer></script>
 
 <script src="/builders/idea-objects.js?v=2026-09-27-split"></script>

package/modules/hall-ui/public/tweak-editor.html

@@ -142,7 +142,9 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-10-02-trail"></script>
+<script src="/builders/shell-trail.js?v=2026-10-02-craft"></script>
+<script src="/builders/craft-mode.js?v=2026-10-02-craft"></script>
+<script src="/builders/shell.js?v=2026-10-02-craft"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <script src="/builders/brand-holes.js?v=2026-09-29-aqfix"></script>

package/modules/hall-ui/public/watch.html

@@ -162,7 +162,9 @@
 
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
-<script src="/builders/shell.js?v=2026-10-02-trail"></script>
+<script src="/builders/shell-trail.js?v=2026-10-02-craft"></script>
+<script src="/builders/craft-mode.js?v=2026-10-02-craft"></script>
+<script src="/builders/shell.js?v=2026-10-02-craft"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before watch.js, which pulls from it. -->

package/modules/hall-ui/public/work.html

@@ -171,7 +171,9 @@
 
 <!-- The app shell (sidebar + top bar + footer). Dependency-free; runs at parse
      time so the chrome exists before the deferred page scripts execute. -->
-<script src="/builders/shell.js?v=2026-10-02-trail"></script>
+<script src="/builders/shell-trail.js?v=2026-10-02-craft"></script>
+<script src="/builders/craft-mode.js?v=2026-10-02-craft"></script>
+<script src="/builders/shell.js?v=2026-10-02-craft"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded FIRST so work.js can pull from it. -->

package/modules/hall-ui/records/craft-mode.md

@@ -0,0 +1,22 @@
+# Craft mode — the entry picker and the top-bar switch (task 1004492, goal 1000095 WA6)
+
+Covers: every shelled hall page (`craft-mode.js`, `shell.js`, `style.css`), and the carve of the Back link + trail into `shell-trail.js`.
+
+## What it is
+
+- On entering the hall, once per browser session, a signed-in builder is asked **"What are you doing now?"**: Building, Artistry, Ideating, Governing, or **Legacy mode** (the owner's fifth choice, 2026-10-01: the hall exactly as it was). The approved prototype is the design canvas linked on the task; the doors carry its four scenes (the work desk, the night room, the sky, the governor city).
+- The answer is ONE attribute, `html[data-craft="building|artistry|ideating|governing|legacy"]`, readable by every hall page. Every change also fires `otb:craft` on `document` with `{ detail: { mode } }`, so a page can react without polling.
+- The top bar carries a switch with all five; pressing one changes the mode without a reload. Under 1180px it drops the words; at phone width only the current mode shows (or a "Choose your mode" button when there is none), and tapping it opens the picker.
+- Artistry is pre-selected for a builder whose `main_discipline` is `artist` (or, with no main role, whose first craft is).
+
+## The rules an edit here must keep
+
+- **It is a mode the hall wears, never a second hall** (the founding-mode precedent). This task records and shows the choice; what each mode changes — the nav (1004493), the look (1004494/1004495), the mode tools (1004496–1004498) — reads the attribute and is its own task.
+- **No mode is the default and the fallback.** Closing the picker, storage that throws, and a page with `<body data-craft-mode="off">` all leave the attribute off, and the hall renders as it did before craft modes: `tests/craft_mode.mjs` boots the shell with and without `craft-mode.js` and requires the root attributes and the sidebar to be identical and the top bar to differ by the switch alone.
+- **Once per session**: `sessionStorage['hall-craft']` holds the mode and `['hall-craft-asked']` that the picker was shown. Unticking "Ask me again next session" writes `localStorage['hall-craft-keep']`, which later sessions start from. A stored value that is not one of the five is ignored. A browser whose storage throws is never asked — it could not remember being asked.
+- **The picker waits for a signed-in builder.** `shell.js` hands `onAccess(access, builder)` what `/me` said from `applyAccess`, so both callers (the index's `hall-render.js` and the shell's own probe) reach it, and a signed-out visitor is never asked.
+- **Load order**: `shell-trail.js`, then `craft-mode.js`, then `shell.js`, deferred alike, on every hall page (test-pinned). `shell.js` reads both at boot and runs without either: the vm tests that boot `shell.js` alone still work.
+
+## The carve
+
+`shell.js` sat at exactly 1,500 lines, the fitness ratchet, so the Back link + trail section (tasks 1004430/1004476/1004477) moved verbatim into `shell-trail.js` (`window.OTBShellTrail.make({ esc, nav })`). Behaviour is unchanged; `tests/hall_fullscreen.mjs` loads it before the shell and still drives the trail through the real top bar.

package/modules/hall-ui/records/hall-navigation.md

@@ -1,6 +1,6 @@
 # Hall navigation — the Back link and its trail, and the standard full-screen switch (tasks 1004430, 1004477, 1004476)
 
-Covers: every shelled hall page (`shell.js`, `style.css`), plus `goal-map.html` joining the chrome.
+Covers: every shelled hall page (`shell.js`, `style.css`), plus `goal-map.html` joining the chrome. Since task 1004492 the Back link and trail code lives in `shell-trail.js` (carved out of `shell.js` unchanged; see `craft-mode.md`).
 
 ## The Back link
 

package/modules/provisioning/routes/callback-page.js

@@ -15,7 +15,7 @@
 //
 // Shape: no DB, no network, no request object — given a plain options bag it returns
 // a string. `esc` and `callbackPage` are the whole surface; PAGE_STYLE and
-// CALLBACK_SCRIPT stay private because they are only ever this page's own body.
+// HANDBACK_SCRIPT stay private because they are only ever this page's own body.
 'use strict';
 
 const api = require('../../../src/module-api');
@@ -53,73 +53,44 @@ h1{font-family:"Baloo 2",system-ui,sans-serif;font-weight:700;font-size:1.5rem;l
 .sub p{margin:.6rem 0}
 code{font-family:"Fira Code",ui-monospace,SFMono-Regular,monospace;background:rgba(56,189,248,.14);color:var(--sky600);padding:.12em .45em;border-radius:6px;font-size:.9em;overflow-wrap:anywhere}
 @media (prefers-color-scheme:dark){code{color:var(--sky)}}
-.steps{display:flex;align-items:flex-start;justify-content:center;margin:1.9rem 0 1.1rem}
-.step{flex:1 1 0;max-width:9rem;position:relative}
-.step::before{content:"";position:absolute;top:16px;left:-50%;width:100%;height:3px;background:var(--line);z-index:0;transition:background .4s ease}
-.step:first-child::before{display:none}
-.dot{width:34px;height:34px;border-radius:50%;margin:0 auto;display:grid;place-items:center;background:var(--bg3);border:2px solid var(--line);color:var(--inkSoft);font-weight:700;font-size:.95rem;position:relative;z-index:1;transition:all .4s ease}
-.lbl{margin-top:.55rem;font-size:.78rem;color:var(--inkSoft);font-weight:600;line-height:1.25;padding:0 .2rem}
-.step.done .dot{background:var(--ok);border-color:var(--ok);color:#fff}
-.step.done::before{background:var(--ok)}
-.step.active .dot{border-color:var(--sun);color:var(--sun600);animation:pulse 1.5s ease-in-out infinite}
-.step.active .lbl{color:var(--ink)}
-.step.active .dot::after{content:"";position:absolute;inset:-3px;border-radius:50%;border:2px solid transparent;border-top-color:var(--sun);animation:spin .8s linear infinite}
-@keyframes spin{to{transform:rotate(360deg)}}
-@keyframes pulse{0%,100%{box-shadow:0 0 0 4px rgba(249,115,22,.15)}50%{box-shadow:0 0 0 9px rgba(249,115,22,.04)}}
-@media (prefers-reduced-motion:reduce){.step.active .dot,.step.active .dot::after{animation:none}}
-.status-line{min-height:1.4em;color:var(--inkSoft);font-size:.94rem;margin:.4rem auto 0;max-width:24rem;line-height:1.45}
 .cta{margin-top:1.4rem}
 .btn{display:inline-block;background:var(--sun);color:var(--sunInk);text-decoration:none;font-weight:700;font-family:"Baloo 2",system-ui,sans-serif;padding:.72rem 1.5rem;border-radius:999px;font-size:1.02rem;box-shadow:0 10px 22px -8px rgba(249,115,22,.7);transition:transform .15s ease,box-shadow .15s ease}
 .btn:hover{transform:translateY(-1px);box-shadow:0 14px 28px -8px rgba(249,115,22,.8)}
 .muted{color:var(--inkSoft);opacity:.9;font-size:.85rem;margin:1.1rem auto 0;max-width:24rem;line-height:1.45}
-.hidden{display:none!important}
 `;
 
-// Client script for the PROGRESS variant only (task 2096): poll the public status
-// endpoint, advance the stepper, and auto-open the instance the moment its credentials
-// land. Deliberately contains NO backticks and NO ${...} so it survives the outer
-// template literal verbatim; the only server data it reads is the JSON config block
-// written just above it. Fails soft — a poll hiccup just retries; a long wait reveals a
-// manual "open" button rather than ever falsely erroring. The auto-open countdown runs
-// ONLY when this page is the wizard's pop-up; a same-tab return (pop-up blocked) keeps
-// the founder here with the door and a way back to the checklist (task 1003236).
-const CALLBACK_SCRIPT = `
+// Client script for the HAND-BACK variant (task 1004548; replaces the task 2096 progress
+// stepper). Placing the credentials takes minutes, and the founder used to wait for it
+// HERE, in a second tab, away from the checklist that still had steps for them. Now the
+// page hands them straight back: as the wizard's pop-up it closes itself so the checklist
+// tab is in front again (that tab is already polling the same status and shows the wait);
+// if the browser refuses the close, or this was a same-tab return (pop-up blocked), this
+// tab becomes the checklist. The one-time state rides the URL FRAGMENT — never sent to a
+// server — so a checklist opened here can keep watching the same attempt.
+// Deliberately contains NO backticks and NO ${...} so it survives the outer template
+// literal verbatim; the only server data it reads is the JSON config block above it.
+const HANDBACK_SCRIPT = `
 (function(){
   var cfg=window.__CB_SETUP__||{};
-  var state=cfg.state||'',domain=cfg.domain||'';
-  if(!state||!domain)return;
-  var target='https://'+domain;
-  var pollUrl=location.pathname.replace('/callback','/status')+'?state='+encodeURIComponent(state);
-  var steps=document.getElementById('steps'),statusEl=document.getElementById('status');
-  var cta=document.getElementById('cta'),go=document.getElementById('go'),foot=document.getElementById('foot'),back=document.getElementById('back');
-  /* Opened from the wizard as a pop-up (window.opener alive, or the tab still carries the name the wizard gave it):
-     the checklist is in the other tab, so this one may auto-open the instance. Same-tab fallback (pop-up blocked,
-     form target=_self): this IS the founder's checklist tab — never navigate it away; offer both doors (task 1003236). */
-  var popup=!!window.opener||window.name==='ghAppSetup';
-  var finished=false,tries=0,manual=false;
-  function dot(n){return steps.querySelector('[data-step="'+n+'"]');}
-  function setActive(n){for(var i=1;i<=3;i++){var el=dot(i);if(!el)continue;el.classList.remove('active','done');if(i<n){el.classList.add('done');el.querySelector('.dot').textContent='\\u2713';}else if(i===n){el.classList.add('active');}}}
-  function allDone(){for(var i=1;i<=3;i++){var el=dot(i);if(!el)continue;el.classList.remove('active');el.classList.add('done');el.querySelector('.dot').textContent='\\u2713';}}
-  function ready(){if(finished)return;finished=true;allDone();statusEl.textContent='Your instance is ready \\u2014 sign in with GitHub to claim it as owner.';cta.classList.remove('hidden');
-    if(!popup){go.textContent='Open '+domain+' \\u2192';if(back)back.classList.remove('hidden');if(foot)foot.textContent='Your setup checklist is waiting where you left it \\u2014 finish it first, or open your instance now.';return;}
-    var n=4;(function tick(){if(n<=0){location.href=target;return;}go.textContent='Opening '+domain+' in '+n+'\\u2026';n--;setTimeout(tick,1000);})();}
-  function failed(){if(finished)return;finished=true;statusEl.textContent='Setup didn\\u2019t finish. Open your instance page and start the GitHub sign-in setup again.';cta.classList.remove('hidden');go.textContent='Open '+domain+' \\u2192';}
-  function revealManual(){if(manual||finished)return;manual=true;cta.classList.remove('hidden');go.textContent='Open '+domain+' \\u2192';if(foot)foot.textContent='This is taking a little longer than usual \\u2014 you can open your instance now, or keep waiting.';}
-  function schedule(){if(!finished)setTimeout(poll,3000);}
-  function poll(){tries++;fetch(pollUrl,{headers:{accept:'application/json'},cache:'no-store'}).then(function(r){return r.ok?r.json():null;}).then(function(j){if(!j){schedule();return;}if(j.ready||j.status==='done'){ready();return;}if(j.status==='error'||j.status==='expired'){failed();return;}setActive(2);if(tries===40)revealManual();schedule();}).catch(function(){schedule();});}
-  setActive(2);poll();
+  var back=cfg.back||'/projects?view=new';
+  if(cfg.state)back+='#ghstate='+encodeURIComponent(cfg.state);
+  var link=document.getElementById('back');if(link)link.href=back;
+  var popup=false;
+  try{popup=!!window.opener&&!window.opener.closed;}catch(e){}
+  if(popup){try{window.opener.focus();}catch(e){}try{window.close();}catch(e){}}
+  setTimeout(function(){location.replace(back);},popup?700:300);
 })();
 `;
 
 // The standalone landing page for the public GitHub redirect (the mothership serves it;
 // it is NOT the hall shell). Two variants share the Cloud Bongos brand shell (task 2096):
-//   • progress — ok + state + domain: an animated stepper that polls the status endpoint
-//     and auto-opens the instance when its credentials are placed.
+//   • hand-back — ok + state + domain: a brief "GitHub app created" that returns the
+//     founder to their setup checklist, where the wait is shown (task 1004548).
 //   • message — everything else (errors + the no-domain success fallback): a calm badge
 //     + `body` (server-authored, trusted HTML).
 function callbackPage({ ok, title, body, state, domain }) {
-  const progress = !!(ok && state && domain);
-  const cfgJson = JSON.stringify({ state: state || '', domain: domain || '' }).replace(/</g, '\\u003c');
+  const handback = !!(ok && state && domain);
+  const cfgJson = JSON.stringify({ state: state || '', domain: domain || '', back: '/projects?view=new' }).replace(/</g, '\\u003c');
   const head = `<!doctype html><html lang="en"><head><meta charset="utf-8">
 <meta name="viewport" content="width=device-width, initial-scale=1">
 <meta name="color-scheme" content="light dark">
@@ -127,24 +98,16 @@ function callbackPage({ ok, title, body, state, domain }) {
 <link rel="preconnect" href="https://fonts.googleapis.com"><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
 <link href="https://fonts.googleapis.com/css2?family=Baloo+2:wght@600;700;800&family=Quicksand:wght@400;500;600;700&family=Fira+Code&display=swap" rel="stylesheet">
 <style>${PAGE_STYLE}</style></head><body>`;
-  if (progress) {
+  if (handback) {
     return `${head}
 <main class="card">
+  <div class="badge-warn">✓</div>
   <h1>${esc(title)}</h1>
-  <p class="sub">Finishing sign-in setup for <code>${esc(domain)}</code>.</p>
-  <div class="steps" id="steps" aria-label="Setup progress">
-    <div class="step done" data-step="1"><div class="dot">✓</div><div class="lbl">GitHub app created</div></div>
-    <div class="step active" data-step="2"><div class="dot">2</div><div class="lbl">Placing credentials</div></div>
-    <div class="step" data-step="3"><div class="dot">3</div><div class="lbl">Ready to sign in</div></div>
-  </div>
-  <p class="status-line" id="status">Hang tight — keep this tab open while we finish.</p>
-  <div class="cta hidden" id="cta"><a class="btn" id="go" href="https://${esc(domain)}">Open ${esc(domain)} →</a></div>
-  <p class="muted hidden" id="back"><a href="/projects?view=new">Finish your remaining setup steps →</a></p>
-  <p class="muted" id="foot">This page opens <code>${esc(domain)}</code> for you the moment it’s ready.</p>
-  <noscript><p class="muted">When setup finishes, open <a href="https://${esc(domain)}">${esc(domain)}</a> and sign in with GitHub — that first sign-in makes you the owner.</p></noscript>
+  <p class="sub">Taking you back to your setup checklist — it finishes setting up <code>${esc(domain)}</code> there.</p>
+  <div class="cta"><a class="btn" id="back" href="/projects?view=new">Back to my checklist →</a></div>
 </main>
 <script>window.__CB_SETUP__=${cfgJson};</script>
-<script>${CALLBACK_SCRIPT}</script>
+<script>${HANDBACK_SCRIPT}</script>
 </body></html>`;
   }
   return `${head}

package/modules/provisioning/routes/provisioning.js

@@ -1391,12 +1391,12 @@ module.exports = function provisioningRoutes() {
   });
 
   // GET /provisioning/github-app/status?state=<> — the PUBLIC progress read the onboarding
-  // callback page polls (task 2096) to know when setup is done + where to send the owner.
+  // setup checklist polls (task 1004548) to know when setup is done + where to send the owner.
   // Same public-by-state model as the callback: the unguessable, single-use `state` token
   // is the only key, and the response reveals only the manifest lifecycle status + the
   // instance's own (already-public) domain — never a secret. Per-IP rate-limited because
   // the page polls it every ~3s. `ready` is true iff the manifest reached 'done' (creds
-  // placed + /healthz verified) — the page then auto-redirects to https://<domain>.
+  // placed + /healthz verified) — the setup checklist then opens https://<domain>.
   // rank: public — no session, no mutation, no secret; an unknown state is a 404 no-op.
   router.get('/provisioning/github-app/status', statusRateLimit, async (req, res) => {
     try {
@@ -1461,11 +1461,11 @@ module.exports = function provisioningRoutes() {
       }).catch(() => {});
       const inst = await provisioning.getInstanceById(pool, row.instance_id).catch(() => null);
       const domain = inst && inst.domain ? inst.domain : null;
-      // Progress variant (task 2096): the page polls …/github-app/status?state= and
-      // auto-opens the instance the moment its credentials are placed — no "come back
-      // later" dead-end. Falls back to a static success if we have no domain to poll.
+      // Hand-back variant (task 1004548): the page returns the founder to their setup
+      // checklist, which shows the wait for the credentials and opens the instance when
+      // it's ready. Falls back to a static success if we have no domain to point at.
       return sendPage(200, domain
-        ? callbackPage({ ok: true, title: 'Setting up your instance', state, domain })
+        ? callbackPage({ ok: true, title: 'GitHub app created', state, domain })
         : callbackPage({ ok: true, title: 'GitHub app created',
           body: '<p>Nice — GitHub created the app. We’re placing its credentials on your instance now; this finishes on its own within a few minutes.</p><p class="muted">You can close this tab.</p>' }));
     } catch (err) {