@bongos/core 1.21.5 → 1.21.7

package/modules/platform-identity/routes/sso.js

@@ -580,6 +580,9 @@ module.exports = function ssoRoutes() {
       // here, like disciplines: the shape is checked and hard-capped in
       // upsertActivity, next to the data, so no route can forget it.
       recent_ships: {},
+      // Each craft's own counts (task 1004440): untyped here for the same reason,
+      // shaped and capped in upsertActivity (craft-rollup.js sanitizeCrafts).
+      crafts: {},
     })) return;
     const b = req.body || {};
     try {
@@ -617,6 +620,7 @@ module.exports = function ssoRoutes() {
         rank: b.rank || null,
         disciplines: Array.isArray(b.disciplines) ? b.disciplines : [],
         recentShips: b.recent_ships,
+        crafts: b.crafts,
         // The AUTHENTICATED client's registered origin — the bound every pushed
         // ship link must fall inside (task 1002803). Taken from the client row,
         // never from the body, for the same reason client_id is.

package/modules/platform-identity/tests/platform-identity.mjs

@@ -602,7 +602,7 @@ await ta('upsertActivity upserts per (client_id, github_id) with the talent snap
   // an empty list when the sender reported none, never NULL. Its own cap,
   // shape and link bound are covered by tests/hub_recent_ships.mjs. The last param
   // is the report's as-of stamp (task 1004268): null when the sender gave none.
-  assert.deepEqual(c.params, ['c1', 42, 100, 5, 3, 'metic', ['engineer'], '[]', null]);
+  assert.deepEqual(c.params, ['c1', 42, 100, 5, 3, 'metic', ['engineer'], '[]', null, '{}']);
 });
 
 await ta('upsertActivity sanitizes third-party self-report (ADR 0171 D7): off-ladder rank → null, disciplines validated + capped', async () => {

package/modules/provisioning/core-upgrade.js

@@ -250,14 +250,22 @@ function makeCoreUpgradeHandler({ provisioning, pool, parseId, validateOrRespond
  * and not asking it is what keeps the one comparison in the system (the runner's channel
  * resolution) the only one that can be wrong.
  *
- * An unknown `recommended` — the registry could not be read — leaves a failure STANDING.
- * Not knowing what is on offer is not evidence that the box recovered, and the direction
- * to fail in is showing an old failure, never hiding a live one.
+ * An UNREAD registry — `registryRead` false, the snapshot's `available` empty — leaves a
+ * failure STANDING. Not knowing what is on offer is not evidence that the box recovered,
+ * and the direction to fail in is showing an old failure, never hiding a live one. A
+ * registry that answered with nothing on offer is different: the box is current, and a
+ * failure about some other version is history (task 1004534).
  */
-function lastMoveSuperseded(target, served, recommended) {
+function lastMoveSuperseded(target, served, recommended, registryRead = false) {
   if (!target) return false;
   if (served && String(served) === String(target)) return true;
-  return !!(recommended && String(recommended) !== String(target));
+  if (recommended) return String(recommended) !== String(target);
+  // NOTHING ON OFFER FROM A REGISTRY THAT ANSWERED is an up-to-date box, not an unknown
+  // (task 1004534). The snapshot stores an empty `available` when the registry could not
+  // be read, so only that case leaves the failure standing. On 2026-10-02 cloudbongos
+  // served 1.21.5 with nothing newer in its rule, and a day-old failure about 1.20.73
+  // still led its /deploy page because a null recommendation was read as "unknown".
+  return !!(registryRead && served);
 }
 
 /**
@@ -371,7 +379,7 @@ function previewFromSnapshot(inst, snap, openIntent, lastMove) {
       // already moved past (task 1004172 — lastMoveSuperseded says why at length). The
       // CLIENT must not work this out: the page's standing rule is that it compares no
       // versions, and this is a version question wearing a different hat.
-      superseded: lastMoveSuperseded(lastMove.target_version, served, recommended),
+      superseded: lastMoveSuperseded(lastMove.target_version, served, recommended, available.length > 0),
       // Truncated because it reaches a DOM and upgrade.js's refusals can carry a whole
       // `git status` (the dirty-tree one lists every file). Never set on a DONE move:
       // a done row's last_error is the note below, and a move that worked is not an error.
@@ -468,6 +476,25 @@ function updateChannelOf(inst) {
   return UPDATE_CHANNELS.includes(c) ? c : DEFAULT_UPDATE_CHANNEL;
 }
 
+/**
+ * THIS hall's own update rule — the control-plane row's — for the offers the core makes
+ * outside /deploy: Settings → Software update and the hall's update banner (task 1004535).
+ * Those live in the core, which cannot read a module's table, so this is handed to them
+ * through the `provisioning.selfUpdateChannel` seam. Before it they asked with the platform
+ * default (patch) while the runner and the sweep followed the stored rule (minor on
+ * cloudbongos), so a step-up release would have read "up to date" there as it installed.
+ * null — no row, an unknown value, a failed read — means "use the default"; never throws.
+ */
+async function selfUpdateChannel(db) {
+  try {
+    const { rows } = await db.query("SELECT update_channel FROM provisioning_instances WHERE hosting_shape = 'control-plane' LIMIT 1");
+    const c = rows[0] && rows[0].update_channel;
+    return UPDATE_CHANNELS.includes(c) ? c : null;
+  } catch {
+    return null;
+  }
+}
+
 /**
  * POST /provisioning/instances/:id/update-channel — set how far this project's core
  * may move (task 1004445). Body: { channel: 'pinned' | 'patch' | 'minor' }.
@@ -518,5 +545,5 @@ function makeUpdateChannelHandler({ provisioning, pool, parseId, validateOrRespo
   };
 }
 
-module.exports = { UPDATE_CHANNELS, DEFAULT_UPDATE_CHANNEL, updateChannelOf, makeUpdateChannelHandler, CORE_UPGRADE_FROM, lastCoreMove, lastMoveSuperseded, parseRepoNote, preflightForOffer, UPGRADE_SHAPES, VERSION_RE, isCoreVersion, coreUpgradeFault, enqueueCoreUpgrade, makeCoreUpgradeHandler, previewFromSnapshot, makeCoreUpgradePreviewHandler, makeControlPlaneHandler };
+module.exports = { UPDATE_CHANNELS, DEFAULT_UPDATE_CHANNEL, updateChannelOf, selfUpdateChannel, makeUpdateChannelHandler, CORE_UPGRADE_FROM, lastCoreMove, lastMoveSuperseded, parseRepoNote, preflightForOffer, UPGRADE_SHAPES, VERSION_RE, isCoreVersion, coreUpgradeFault, enqueueCoreUpgrade, makeCoreUpgradeHandler, previewFromSnapshot, makeCoreUpgradePreviewHandler, makeControlPlaneHandler };
 

package/modules/provisioning/module.json

@@ -35,7 +35,8 @@
     "provisioning.instanceState",
     "provisioning.projectPlanets",
     "provisioning.projectOwnedBy",
-    "provisioning.projectPublishIdentity"
+    "provisioning.projectPublishIdentity",
+    "provisioning.selfUpdateChannel"
   ],
   "consumes": []
 }

package/modules/provisioning/seams.js

@@ -6,6 +6,7 @@
 const api = require('../../src/module-api');
 const { pool } = api;
 const provisioning = require('./provisioning');
+const { selfUpdateChannel } = require('./core-upgrade');
 
 // The `provisioning.projectPublishIdentity` port (task 1003578, ADR 0247 D4): the name and
 // description the publish gate judges, for the control-plane project a hub catalog row was
@@ -49,6 +50,7 @@ function registerProvisioningSeams() {
   api.registerProvider('provisioning.projectPlanets', (hosts) => provisioning.planetChoicesForHosts(pool, hosts));
   api.registerProvider('provisioning.projectOwnedBy', (target) => provisioning.projectOwnedBy(pool, target));
   api.registerProvider('provisioning.projectPublishIdentity', (target) => projectPublishIdentity(pool, target));
+  api.registerProvider('provisioning.selfUpdateChannel', () => selfUpdateChannel(pool));
 }
 
 module.exports = { registerProvisioningSeams, projectPublishIdentity };

package/modules/public-landing/public/projects-hall-live.states.json

@@ -0,0 +1,216 @@
+{
+  "_": "The create wizard done panel once the hall answers (task 1004503): the same walk as projects.states.json in-new-done, with the instance list aliased so the project just filed (id 102) is live and verified up. The invite box opens only now; in-new-done in the main file pictures it shut while the project is set up. Rendered by name: node modules/ui-design/kit/render.js --states modules/public-landing/public/projects-hall-live.states.json",
+  "page": "/projects",
+  "surface": "public-landing",
+  "modes": [
+    "dark"
+  ],
+  "modeQuery": false,
+  "stub": {
+    "fixtures": {
+      "provisioning-instances": "provisioning-instances-hall-live"
+    }
+  },
+  "ignoreRequests": [
+    "/api/(gds|bongos)/me$",
+    "/my-projects",
+    "/provisioning/onboard-plan",
+    "/env-manifest$"
+  ],
+  "ignoreConsole": [
+    "/api/(gds|bongos)/me",
+    "\\b401\\b",
+    "\\b404\\b",
+    "Unauthorized"
+  ],
+  "states": {
+    "in-new-done-live": {
+      "auth": true,
+      "url": "/projects?view=new",
+      "actions": [
+        [
+          "wait",
+          600
+        ],
+        [
+          "click",
+          "#termsAck"
+        ],
+        [
+          "wait",
+          100
+        ],
+        [
+          "click",
+          "#wizStart"
+        ],
+        [
+          "wait",
+          400
+        ],
+        [
+          "fill",
+          "#newName",
+          "Mercury"
+        ],
+        [
+          "click",
+          "#typeCards .tpill[data-type=\"game\"]"
+        ],
+        [
+          "fill",
+          "#f-desc",
+          "A co-op farming game where the seasons never repeat."
+        ],
+        [
+          "click",
+          "#panel-what button[type=submit]"
+        ],
+        [
+          "wait",
+          400
+        ],
+        [
+          "select",
+          "#physCountry",
+          "US"
+        ],
+        [
+          "wait",
+          100
+        ],
+        [
+          "click",
+          "[data-phys=\"builder_geography\"][data-val=\"global\"]"
+        ],
+        [
+          "click",
+          "[data-phys=\"minors_on_board\"][data-val=\"false\"]"
+        ],
+        [
+          "click",
+          "[data-phys=\"entity\"][data-val=\"intent-solo\"]"
+        ],
+        [
+          "click",
+          "#physNext"
+        ],
+        [
+          "wait",
+          700
+        ],
+        [
+          "click",
+          "#reviewRows .setRow[data-row=\"code\"] [data-row-ok]"
+        ],
+        [
+          "wait",
+          200
+        ],
+        [
+          "click",
+          "#reviewRows .setRow[data-row=\"address\"] [data-row-chg]"
+        ],
+        [
+          "wait",
+          200
+        ],
+        [
+          "fill",
+          "#f-slug",
+          "mercury"
+        ],
+        [
+          "wait",
+          900
+        ],
+        [
+          "fill",
+          "#f-domain",
+          "mercury.example.com"
+        ],
+        [
+          "wait",
+          200
+        ],
+        [
+          "click",
+          "#reviewRows .setRow[data-row=\"address\"] [data-row-use]"
+        ],
+        [
+          "wait",
+          200
+        ],
+        [
+          "click",
+          "#reviewRows .setRow[data-row=\"app\"] [data-row-ok]"
+        ],
+        [
+          "wait",
+          150
+        ],
+        [
+          "click",
+          "#reviewRows .setRow[data-row=\"extras\"] [data-row-ok]"
+        ],
+        [
+          "wait",
+          150
+        ],
+        [
+          "click",
+          "#reviewRows .setRow[data-row=\"team\"] [data-row-ok]"
+        ],
+        [
+          "wait",
+          150
+        ],
+        [
+          "click",
+          "#reviewRows .setRow[data-row=\"run\"] [data-row-ok]"
+        ],
+        [
+          "wait",
+          200
+        ],
+        [
+          "click",
+          "#reviewGo"
+        ],
+        [
+          "wait",
+          500
+        ],
+        [
+          "click",
+          "#doCreate"
+        ],
+        [
+          "wait",
+          1500
+        ],
+        [
+          "wait",
+          6000
+        ]
+      ],
+      "expect": {
+        "visible": [
+          "#panel-done",
+          "#wizInvite",
+          "#wizInviteWho"
+        ],
+        "text": [
+          [
+            "#done-h",
+            "Mercury is alive."
+          ]
+        ]
+      }
+    }
+  },
+  "ignoreControls": [
+    ".skip",
+    ".vh"
+  ]
+}

package/modules/public-landing/public/projects.html

@@ -4873,10 +4873,45 @@ summary{min-height:24px;padding:3px 0;}
       show(2, true);
     });
     /* the done panel's invite step names the demo's teammates (task 1004420): the hub
-       holds no invite of its own, so the founder sends each from the project's own box */
+       holds no invite of its own, so the founder sends each from the project's own box.
+       The names ride the created record too, so a reload before the hall is up keeps them
+       (task 1004503). */
+    function demoTeam() {
+      if (state.demo && state.demo.invites && state.demo.invites.length) return state.demo.invites;
+      var created = createdRecord();
+      return created && Array.isArray(created.demo_invites) ? created.demo_invites : [];
+    }
+    /* The invite step (tasks 1002346 and 1004503). A second account cannot join until the
+       project's hall is up, so the box opens only on the done panel's own verified Live
+       (last_verified_up), never while the project is being set up. Before that, one plain
+       line says when inviting opens, naming a demo's teammates so they are not lost. The
+       CREATED RECORD is the proof the widget needs: no signed-in identity, no filed instance
+       or no slug means nothing to invite to. Opening loads the suggestions once; a later
+       tick does not ask again. */
+    var invitesOpen = false;
+    function paintInviteGate(live) {
+      var created = createdRecord();
+      var canInvite = !!(me && created && created.id && created.slug);
+      if (live && canInvite) {
+        if (invitesOpen) return;
+        invitesOpen = true;
+        setInviteSlug('wizInvite', created.slug);
+        paintDemoTeam();
+        loadInviteSuggestions('wizInvite', created.id);
+        $('wizInviteLater').innerHTML = 'You can invite builders any time from ' + projectPageLink('the project’s own page') + '.';
+        return;
+      }
+      invitesOpen = false;
+      setInviteSlug('wizInvite', '');
+      $('wizDemoTeam').hidden = true;
+      var team = demoTeam();
+      $('wizInviteLater').textContent = team.length
+        ? 'You can invite ' + team.map(function (h) { return '@' + h; }).join(', ') + ' once its hall is up.'
+        : 'You can invite builders once its hall is up.';
+    }
     function paintDemoTeam() {
       var line = $('wizDemoTeam');
-      var who = state.demo && state.demo.invites && state.demo.invites.length ? state.demo.invites : [];
+      var who = demoTeam();
       line.hidden = !who.length;
       line.textContent = who.length ? 'Your demo teammates: ' + who.map(function (h) { return '@' + h; }).join(', ') + '. Invite each one here.' : '';
       if (who.length && !$('wizInviteWho').value) $('wizInviteWho').value = who[0];
@@ -6399,7 +6434,9 @@ summary{min-height:24px;padding:3px 0;}
           sessionStorage.setItem(CREATED_KEY, JSON.stringify({
             id: data.instance && data.instance.id, slug: state.slug, domain: madeDomain,
             noaddr: !madeDomain,
-            mode: state.mode, name: state.name, at: Date.now()
+            mode: state.mode, name: state.name, at: Date.now(),
+            /* a demo's teammates, offered once the hall is up (task 1004503) */
+            demo_invites: state.demo && state.demo.invites && state.demo.invites.length ? state.demo.invites.slice() : undefined
           }));
           sessionStorage.removeItem(DRAFT_KEY);
         } catch (e) {}
@@ -6650,16 +6687,8 @@ summary{min-height:24px;padding:3px 0;}
          skippable, so this panel names where it lives afterwards rather than
          leaving an owner to go looking for it. */
       $('doneModules').innerHTML = 'Add or remove modules later in ' + projectPageLink('the project’s settings') + '.';
-      /* the invite step (task 1002346, BV1.R27). The CREATED RECORD is the proof
-         the widget needs and the only one this panel has: no signed-in identity,
-         no filed instance or no slug ⇒ nothing to invite to, and the step stays
-         hidden. It is deliberately NOT keyed on instanceId, which startProgress
-         sets only AFTER this runs. */
-      var created = createdRecord();
-      setInviteSlug('wizInvite', (me && created && created.id && created.slug) ? created.slug : '');
-      paintDemoTeam();
-      loadInviteSuggestions('wizInvite', (me && created && created.slug) ? created.id : '');
-      $('wizInviteLater').innerHTML = 'You can invite builders any time from ' + projectPageLink('the project’s own page') + '.';
+      /* the invite step waits for the hall (task 1004503): until it answers, one line */
+      paintInviteGate(false);
       renderSteps();
     }
 
@@ -6912,6 +6941,7 @@ summary{min-height:24px;padding:3px 0;}
         if (inst.last_verified_up) {
           /* the alive moment (task 1004504): said only once the project has answered */
           $('done-h').textContent = (state.name || state.slug || 'Your project') + ' is alive.';
+          paintInviteGate(true);   /* the hall answers, so others can join now */
           setProgress(progressMarkup(-1, 3,
             'Your project is answering at ' + link + '. Finish the steps below and the hall is yours.', 'isLive', flow));
           return true;

package/modules/public-landing/public/projects.states.json

@@ -41,6 +41,7 @@
     "in-new-terms-refused": {"auth":true,"url":"/projects?view=new","actions":[["wait",600],["click","#termsAck"],["click","#termsAck"],["wait",200]],"expect":{"visible":["#panel-fork"],"hidden":["#panel-what"],"attr":[["#wizStart","disabled",""],["#wizDemo","disabled",""]]}},
     "in-new-fork-demo": {"auth":true,"url":"/projects?view=new","actions":[["wait",600],["click","#termsAck"],["wait",100],["click","#wizDemo"],["wait",300]],"expect":{"visible":["#panel-fork","#demoSetup","#demoFitVerdict","#demoInvites","#wizBack"],"hidden":["#forkIntro"],"attr":[["#wizDemo","aria-expanded","true"]]}},
     "in-new-demo-what": {"auth":true,"url":"/projects?view=new","actions":[["wait",600],["click","#termsAck"],["wait",100],["click","#wizDemo"],["wait",300],["fill","#demoIdea","A voting app for movie night"],["click","#demoStart"],["wait",400]],"expect":{"visible":["#panel-what","#demoTag"],"hidden":["#panel-fork"],"text":[["#wizEyebrow","New demo"]]}},
+    "in-new-demo-review-address": {"auth":true,"url":"/projects?view=new","actions":[["wait",600],["click","#termsAck"],["wait",100],["click","#wizDemo"],["wait",300],["fill","#demoIdea","A voting app for movie night"],["click","#demoStart"],["wait",400],["fill","#newName","Mercury"],["click","#typeCards .tpill[data-type=\"game\"]"],["click","#panel-what button[type=submit]"],["wait",700],["click","#reviewRows .setRow[data-row=\"address\"] [data-row-chg]"],["wait",300],["fill","#f-slug","mercury"],["wait",900]],"expect":{"visible":["#panel-review","#reviewRows .setRow[data-row=\"address\"] .opts","#f-slug","#addrConfirm","#f-noaddr"],"hidden":["#panel-checks"],"attr":[["#reviewGo","disabled",""]],"text":[["#wizEyebrow","New demo"]]}},
     "in-new-what": {"auth":true,"url":"/projects?view=new","actions":[["wait",600],["click","#termsAck"],["wait",100],["click","#wizStart"],["wait",400]],"expect":{"visible":["#panel-what","#newName","#typeCards","#f-desc","#wizBack"],"hidden":["#panel-fork","#demoTag"],"attr":[["#wizRoom","data-screen","what"]]}},
     "in-new-name-prefilled": {"auth":true,"url":"/projects?view=new&name=Mercury","actions":[["wait",600],["click","#termsAck"],["wait",100],["click","#wizStart"],["wait",400]],"expect":{"visible":["#panel-what","#newName"]}},
     "in-new-checks": {"auth":true,"url":"/projects?view=new","actions":[["wait",600],["click","#termsAck"],["wait",100],["click","#wizStart"],["wait",400],["fill","#newName","Mercury"],["click","#typeCards .tpill[data-type=\"game\"]"],["fill","#f-desc","A co-op farming game where the seasons never repeat."],["click","#panel-what button[type=submit]"],["wait",400]],"expect":{"visible":["#panel-checks","#physCountry","#physIntent"],"hidden":["#physAges","#physForms","#checksStop"],"attr":[["#wizRoom","data-screen","checks"]]}},
@@ -55,7 +56,7 @@
     "in-new-review-run": {"auth":true,"url":"/projects?view=new","actions":[["wait",600],["click","#termsAck"],["wait",100],["click","#wizStart"],["wait",400],["fill","#newName","Mercury"],["click","#typeCards .tpill[data-type=\"game\"]"],["fill","#f-desc","A co-op farming game where the seasons never repeat."],["click","#panel-what button[type=submit]"],["wait",400],["select","#physCountry","US"],["wait",100],["click","[data-phys=\"builder_geography\"][data-val=\"global\"]"],["click","[data-phys=\"minors_on_board\"][data-val=\"false\"]"],["click","[data-phys=\"entity\"][data-val=\"intent-solo\"]"],["click","#physNext"],["wait",700],["click","#reviewRows .setRow[data-row=\"run\"] [data-row-chg]"],["wait",300],["click","[data-phys=\"framing\"][data-val=\"hybrid\"]"],["wait",600]],"expect":{"visible":["#physSuite"]}},
     "in-new-review-confirmed": {"auth":true,"url":"/projects?view=new","actions":[["wait",600],["click","#termsAck"],["wait",100],["click","#wizStart"],["wait",400],["fill","#newName","Mercury"],["click","#typeCards .tpill[data-type=\"game\"]"],["fill","#f-desc","A co-op farming game where the seasons never repeat."],["click","#panel-what button[type=submit]"],["wait",400],["select","#physCountry","US"],["wait",100],["click","[data-phys=\"builder_geography\"][data-val=\"global\"]"],["click","[data-phys=\"minors_on_board\"][data-val=\"false\"]"],["click","[data-phys=\"entity\"][data-val=\"intent-solo\"]"],["click","#physNext"],["wait",700],["click","#reviewRows .setRow[data-row=\"code\"] [data-row-ok]"],["wait",200],["click","#reviewRows .setRow[data-row=\"address\"] [data-row-chg]"],["wait",200],["fill","#f-slug","mercury"],["wait",900],["fill","#f-domain","mercury.example.com"],["wait",200],["click","#reviewRows .setRow[data-row=\"address\"] [data-row-use]"],["wait",200],["click","#reviewRows .setRow[data-row=\"app\"] [data-row-ok]"],["wait",150],["click","#reviewRows .setRow[data-row=\"extras\"] [data-row-ok]"],["wait",150],["click","#reviewRows .setRow[data-row=\"team\"] [data-row-ok]"],["wait",150],["click","#reviewRows .setRow[data-row=\"run\"] [data-row-ok]"],["wait",200]],"expect":{"visible":["#reviewGo","#reviewRows .setRow.done"],"text":[["#reviewGo","Continue"]]}},
     "in-new-look": {"auth":true,"url":"/projects?view=new","actions":[["wait",600],["click","#termsAck"],["wait",100],["click","#wizStart"],["wait",400],["fill","#newName","Mercury"],["click","#typeCards .tpill[data-type=\"game\"]"],["fill","#f-desc","A co-op farming game where the seasons never repeat."],["click","#panel-what button[type=submit]"],["wait",400],["select","#physCountry","US"],["wait",100],["click","[data-phys=\"builder_geography\"][data-val=\"global\"]"],["click","[data-phys=\"minors_on_board\"][data-val=\"false\"]"],["click","[data-phys=\"entity\"][data-val=\"intent-solo\"]"],["click","#physNext"],["wait",700],["click","#reviewRows .setRow[data-row=\"code\"] [data-row-ok]"],["wait",200],["click","#reviewRows .setRow[data-row=\"address\"] [data-row-chg]"],["wait",200],["fill","#f-slug","mercury"],["wait",900],["fill","#f-domain","mercury.example.com"],["wait",200],["click","#reviewRows .setRow[data-row=\"address\"] [data-row-use]"],["wait",200],["click","#reviewRows .setRow[data-row=\"app\"] [data-row-ok]"],["wait",150],["click","#reviewRows .setRow[data-row=\"extras\"] [data-row-ok]"],["wait",150],["click","#reviewRows .setRow[data-row=\"team\"] [data-row-ok]"],["wait",150],["click","#reviewRows .setRow[data-row=\"run\"] [data-row-ok]"],["wait",200],["click","#reviewGo"],["wait",500]],"expect":{"visible":["#panel-look","#wizLook","#wizRecap","#doCreate"],"hidden":["#panel-review"],"attr":[["#wizRoom","data-screen","look"]]}},
-    "in-new-done": {"auth":true,"url":"/projects?view=new","actions":[["wait",600],["click","#termsAck"],["wait",100],["click","#wizStart"],["wait",400],["fill","#newName","Mercury"],["click","#typeCards .tpill[data-type=\"game\"]"],["fill","#f-desc","A co-op farming game where the seasons never repeat."],["click","#panel-what button[type=submit]"],["wait",400],["select","#physCountry","US"],["wait",100],["click","[data-phys=\"builder_geography\"][data-val=\"global\"]"],["click","[data-phys=\"minors_on_board\"][data-val=\"false\"]"],["click","[data-phys=\"entity\"][data-val=\"intent-solo\"]"],["click","#physNext"],["wait",700],["click","#reviewRows .setRow[data-row=\"code\"] [data-row-ok]"],["wait",200],["click","#reviewRows .setRow[data-row=\"address\"] [data-row-chg]"],["wait",200],["fill","#f-slug","mercury"],["wait",900],["fill","#f-domain","mercury.example.com"],["wait",200],["click","#reviewRows .setRow[data-row=\"address\"] [data-row-use]"],["wait",200],["click","#reviewRows .setRow[data-row=\"app\"] [data-row-ok]"],["wait",150],["click","#reviewRows .setRow[data-row=\"extras\"] [data-row-ok]"],["wait",150],["click","#reviewRows .setRow[data-row=\"team\"] [data-row-ok]"],["wait",150],["click","#reviewRows .setRow[data-row=\"run\"] [data-row-ok]"],["wait",200],["click","#reviewGo"],["wait",500],["click","#doCreate"],["wait",1500]],"expect":{"visible":["#panel-done","#liveProgress .prog","#humanSteps li"],"hidden":["#panel-look","#qWrap","#wizBack"]}},
+    "in-new-done": {"auth":true,"url":"/projects?view=new","actions":[["wait",600],["click","#termsAck"],["wait",100],["click","#wizStart"],["wait",400],["fill","#newName","Mercury"],["click","#typeCards .tpill[data-type=\"game\"]"],["fill","#f-desc","A co-op farming game where the seasons never repeat."],["click","#panel-what button[type=submit]"],["wait",400],["select","#physCountry","US"],["wait",100],["click","[data-phys=\"builder_geography\"][data-val=\"global\"]"],["click","[data-phys=\"minors_on_board\"][data-val=\"false\"]"],["click","[data-phys=\"entity\"][data-val=\"intent-solo\"]"],["click","#physNext"],["wait",700],["click","#reviewRows .setRow[data-row=\"code\"] [data-row-ok]"],["wait",200],["click","#reviewRows .setRow[data-row=\"address\"] [data-row-chg]"],["wait",200],["fill","#f-slug","mercury"],["wait",900],["fill","#f-domain","mercury.example.com"],["wait",200],["click","#reviewRows .setRow[data-row=\"address\"] [data-row-use]"],["wait",200],["click","#reviewRows .setRow[data-row=\"app\"] [data-row-ok]"],["wait",150],["click","#reviewRows .setRow[data-row=\"extras\"] [data-row-ok]"],["wait",150],["click","#reviewRows .setRow[data-row=\"team\"] [data-row-ok]"],["wait",150],["click","#reviewRows .setRow[data-row=\"run\"] [data-row-ok]"],["wait",200],["click","#reviewGo"],["wait",500],["click","#doCreate"],["wait",1500]],"expect":{"visible":["#panel-done","#liveProgress .prog","#humanSteps li","#wizInviteLater"],"hidden":["#panel-look","#qWrap","#wizBack","#wizInvite"]}},
     "in-new-resume-offer": {"auth":true,"url":"/projects?view=new","actions":[["wait",600],["click","#termsAck"],["wait",100],["click","#wizStart"],["wait",400],["fill","#newName","Mercury"],["click","#typeCards .tpill[data-type=\"game\"]"],["fill","#f-desc","A co-op farming game where the seasons never repeat."],["click","#panel-what button[type=submit]"],["wait",400],["select","#physCountry","US"],["wait",100],["click","[data-phys=\"builder_geography\"][data-val=\"global\"]"],["click","[data-phys=\"minors_on_board\"][data-val=\"false\"]"],["click","[data-phys=\"entity\"][data-val=\"intent-solo\"]"],["click","#physNext"],["wait",700],["click","#reviewRows .setRow[data-row=\"code\"] [data-row-ok]"],["wait",200],["click","#reviewRows .setRow[data-row=\"address\"] [data-row-chg]"],["wait",200],["fill","#f-slug","mercury"],["wait",900],["fill","#f-domain","mercury.example.com"],["wait",200],["click","#reviewRows .setRow[data-row=\"address\"] [data-row-use]"],["wait",200],["click","#reviewRows .setRow[data-row=\"app\"] [data-row-ok]"],["wait",150],["click","#reviewRows .setRow[data-row=\"extras\"] [data-row-ok]"],["wait",150],["click","#reviewRows .setRow[data-row=\"team\"] [data-row-ok]"],["wait",150],["click","#reviewRows .setRow[data-row=\"run\"] [data-row-ok]"],["wait",200],["click","#reviewGo"],["wait",500],["click","#doCreate"],["wait",1500],["click","#projTrig"],["wait",350],["click","#menuProjects [data-nav=\"new\"]"],["wait",500]],"expect":{"visible":["#panel-fork","#wizResume","#wizResumeGo"],"hidden":["#panel-done"],"text":[["#wizResumeName","Mercury"]]}},
     "in-new-look-custom": {"auth":true,"url":"/projects?view=new","actions":[["wait",600],["click","#termsAck"],["wait",100],["click","#wizStart"],["wait",400],["fill","#newName","Mercury"],["click","#typeCards .tpill[data-type=\"game\"]"],["fill","#f-desc","A co-op farming game where the seasons never repeat."],["click","#panel-what button[type=submit]"],["wait",400],["select","#physCountry","US"],["wait",100],["click","[data-phys=\"builder_geography\"][data-val=\"global\"]"],["click","[data-phys=\"minors_on_board\"][data-val=\"false\"]"],["click","[data-phys=\"entity\"][data-val=\"intent-solo\"]"],["click","#physNext"],["wait",700],["click","#reviewRows .setRow[data-row=\"code\"] [data-row-ok]"],["wait",200],["click","#reviewRows .setRow[data-row=\"address\"] [data-row-chg]"],["wait",200],["fill","#f-slug","mercury"],["wait",900],["fill","#f-domain","mercury.example.com"],["wait",200],["click","#reviewRows .setRow[data-row=\"address\"] [data-row-use]"],["wait",200],["click","#reviewRows .setRow[data-row=\"app\"] [data-row-ok]"],["wait",150],["click","#reviewRows .setRow[data-row=\"extras\"] [data-row-ok]"],["wait",150],["click","#reviewRows .setRow[data-row=\"team\"] [data-row-ok]"],["wait",150],["click","#reviewRows .setRow[data-row=\"run\"] [data-row-ok]"],["wait",200],["click","#reviewGo"],["wait",500],["click","#wizLook-custom"],["wait",200]],"expect":{"visible":["#panel-look","#wizAccent","#wizAccentNote"],"hidden":["#panel-review"]}},
     "out-new": {"auth":false,"url":"/projects?view=new","expect":{"visible":["#panel-gate","#wizSignin"],"hidden":["#qWrap","#panel-fork"]}},

package/modules/ui-design/kit/fixtures/provisioning-instances-hall-live.json

@@ -0,0 +1,106 @@
+{
+  "_": "The owner's projects for the kit (task 1003345): four states the mine list and the manage page render — live, standing up, snagged, torn down. Timestamps written \"$now-3m\" / \"$now-1d\" are resolved by the stub at request time so \"checked 3m ago\" stays true. Mooring (task 1003345, the grade's finding): live but unreachable since its last probe, so the restart door renders and the restart probe has a row to drive.",
+  "instances": [
+    {
+      "id": 101,
+      "slug": "demo",
+      "status": "active",
+      "domain": "demo.cloudbongos.com",
+      "target_ref": "builder/demo",
+      "hosting_shape": "co-tenant",
+      "onboard_mode": "scaffold",
+      "created_at": "2026-08-01T10:00:00.000Z",
+      "provisioned_at": "2026-08-01T10:20:00.000Z",
+      "updated_at": "$now-3m",
+      "last_verified_at": "$now-3m",
+      "last_verified_up": true,
+      "error_note": null,
+      "dns_note": null,
+      "dns_resolves": true,
+      "torn_down_at": null,
+      "open_intent": null
+    },
+    {
+      "id": 102,
+      "slug": "mercury",
+      "status": "active",
+      "planet_template": "blob-frost-tint",
+      "planet_accent": "sun-lit",
+      "domain": "mercury.cloudbongos.com",
+      "target_ref": "builder/mercury",
+      "hosting_shape": "cloud-host",
+      "owner_monthly_usd": null,
+      "onboard_mode": "scaffold",
+      "created_at": "$now-6m",
+      "provisioned_at": "$now-1m",
+      "updated_at": "$now-2m",
+      "last_verified_at": "$now-1m",
+      "last_verified_up": true,
+      "error_note": null,
+      "dns_note": null,
+      "torn_down_at": null,
+      "open_intent": {
+        "action": "standup",
+        "state": "running",
+        "created_at": "$now-6m"
+      },
+      "dns_resolves": true
+    },
+    {
+      "id": 103,
+      "slug": "tidepool",
+      "status": "error",
+      "domain": "tidepool.cloudbongos.com",
+      "target_ref": "builder/tidepool",
+      "hosting_shape": "co-tenant",
+      "onboard_mode": "adopt",
+      "created_at": "2026-08-20T09:00:00.000Z",
+      "provisioned_at": null,
+      "updated_at": "$now-1d",
+      "last_verified_at": null,
+      "last_verified_up": null,
+      "error_note": "The deploy could not read the repository: it is private, and the deploy key only reads public ones.",
+      "dns_note": null,
+      "torn_down_at": null,
+      "open_intent": null
+    },
+    {
+      "id": 104,
+      "slug": "old-lantern",
+      "status": "torn_down",
+      "domain": "old-lantern.cloudbongos.com",
+      "target_ref": "builder/old-lantern",
+      "hosting_shape": "co-tenant",
+      "onboard_mode": "scaffold",
+      "created_at": "2026-07-02T09:00:00.000Z",
+      "provisioned_at": "2026-07-02T09:30:00.000Z",
+      "updated_at": "2026-08-15T12:00:00.000Z",
+      "last_verified_at": "2026-08-15T11:50:00.000Z",
+      "last_verified_up": true,
+      "error_note": null,
+      "dns_note": null,
+      "dns_resolves": true,
+      "torn_down_at": "2026-08-15T12:00:00.000Z",
+      "open_intent": null
+    },
+    {
+      "id": 105,
+      "slug": "mooring",
+      "status": "active",
+      "domain": "mooring.cloudbongos.com",
+      "target_ref": "builder/mooring",
+      "hosting_shape": "co-tenant",
+      "onboard_mode": "scaffold",
+      "created_at": "2026-08-10T09:00:00.000Z",
+      "provisioned_at": "2026-08-10T09:20:00.000Z",
+      "updated_at": "$now-20m",
+      "last_verified_at": "$now-20m",
+      "last_verified_up": false,
+      "error_note": null,
+      "dns_note": null,
+      "dns_resolves": true,
+      "torn_down_at": null,
+      "open_intent": null
+    }
+  ]
+}

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.5",
+  "version": "1.21.7",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.21.5",
+      "version": "1.21.7",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.5",
+  "version": "1.21.7",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",