@bongos/core 1.21.83 → 1.21.84

package/modules/public-landing/public/projects.html

@@ -1950,6 +1950,31 @@ summary{min-height:24px;padding:3px 0;}
                   </div>
                   <span class="acts"><button type="button" class="rowChg" data-row-chg aria-expanded="false">Edit</button></span>
                 </div>
+
+                <!-- how finished work ships (task 1004629, ADR 0369): Auto unless the owner
+                     says otherwise. It rides the create as ship_mode and becomes the project's
+                     own ship mode, which its settings page can change any time. -->
+                <div class="setRow" data-row="ship">
+                  <span class="k">Shipping</span>
+                  <div class="v"><span class="rowV" data-row-v></span><small class="rowS" data-row-s></small>
+                    <div class="opts" hidden>
+                      <fieldset class="appOpts" id="shipOpts">
+                        <legend>When the AI finishes a task</legend>
+                        <label class="appOpt">
+                          <input type="radio" name="shipMode" value="auto" checked>
+                          <span><b>Auto (recommended)</b>
+                            <span>The AI ships finished work on its own. You don’t run any commands.</span></span>
+                        </label>
+                        <label class="appOpt">
+                          <input type="radio" name="shipMode" value="manual">
+                          <span><b>Manual</b>
+                            <span>The AI stops before each ship and waits for you to approve it.</span></span>
+                        </label>
+                      </fieldset>
+                    </div>
+                  </div>
+                  <span class="acts"><button type="button" class="rowChg" data-row-chg aria-expanded="false">Edit</button></span>
+                </div>
               </div>
               <div class="hint" id="h-review">&nbsp;</div>
               <div class="nav">
@@ -4476,7 +4501,7 @@ summary{min-height:24px;padding:3px 0;}
        request omits the field), [] = the owner switched them all off, [...] =
        what they picked. Never seed it with the preselect — that would store an
        answer nobody gave. */
-    var state = { step: 0, name: '', projType: null, description: '', teamShape: null, modules: null, mode: 'greenfield', owner: '', ownerTouched: false, repo: '', repoTouched: false, slug: '', slugTouched: false, domain: '', noAddress: false, appPlatform: 'later', physics: null, demo: null, look: null, termsAck: false, confirmed: {} };
+    var state = { step: 0, name: '', projType: null, description: '', teamShape: null, modules: null, mode: 'greenfield', owner: '', ownerTouched: false, repo: '', repoTouched: false, slug: '', slugTouched: false, domain: '', noAddress: false, appPlatform: 'later', shipMode: 'auto', physics: null, demo: null, look: null, termsAck: false, confirmed: {} };
     try { Object.assign(state, JSON.parse(sessionStorage.getItem(DRAFT_KEY) || '{}')); } catch (e) {}
     var authKnown = false;   /* flips true when the boot's /me settles, either way */
 
@@ -5956,7 +5981,6 @@ summary{min-height:24px;padding:3px 0;}
     if (appOptsEl) appOptsEl.addEventListener('change', function (ev) {
       if (ev.target && ev.target.name === 'appPlatform' && !ev.target.disabled) { state.appPlatform = ev.target.value; saveDraft(); syncRenderSetup(); paintSetup(); }
     });
-
     /* ── Render (task 1004352, ADR 0348) ──
        The flow itself is renderConnect(), shared with an existing project's page (task
        1004184). Here it reads and writes the draft (`state`), so every answer but the key
@@ -6073,7 +6097,14 @@ summary{min-height:24px;padding:3px 0;}
       return 'Workspace ' + ws + ' — a new app (' + runtimeLabel(state.renderRuntime || 'node') + ', ' + plan + ')' + db + '. Render bills you directly.';
     }
 
-    var ROWS = ['code', 'address', 'app', 'extras', 'team', 'rewards', 'run'];
+    /* the ship row (task 1004629): anything but 'manual' — an older draft has none — is Auto */
+    function shipModeChoice() { return state.shipMode === 'manual' ? 'manual' : 'auto'; }
+    function syncShipStep() {
+      var pick = shipModeChoice();
+      root.querySelectorAll('#shipOpts input[name=shipMode]').forEach(function (i) { i.checked = i.value === pick; });
+    }
+
+    var ROWS = ['code', 'address', 'app', 'extras', 'team', 'rewards', 'run', 'ship'];
     function rowEl(key) { return root.querySelector('#reviewRows .setRow[data-row="' + key + '"]'); }
     function confirmedRows() {
       if (!state.confirmed || typeof state.confirmed !== 'object') state.confirmed = {};
@@ -6118,6 +6149,7 @@ summary{min-height:24px;padding:3px 0;}
       if (key === 'extras') renderModules();
       if (key === 'code') syncHome();
       if (key === 'app') { syncAppStep(); syncRenderSetup(); }
+      if (key === 'ship') syncShipStep();
     }
     function closeRow(key) {
       var row = rowEl(key);
@@ -6182,6 +6214,8 @@ summary{min-height:24px;padding:3px 0;}
        controls' own handlers run first (they are on the targets), then the row repaints */
     ['input', 'change'].forEach(function (type) {
       $('reviewRows').addEventListener(type, function (ev) {
+        /* the ship row's radios have no handler of their own (task 1004629) */
+        if (type === 'change' && ev.target.name === 'shipMode') { state.shipMode = ev.target.value; saveDraft(); }
         if (ev.target.closest && ev.target.closest('.setRow.open .opts')) {
           var row = ev.target.closest('.setRow'), t = rowText(row.getAttribute('data-row'));
           row.querySelector('[data-row-v]').textContent = t.v;
@@ -6247,6 +6281,11 @@ summary{min-height:24px;padding:3px 0;}
         if (a.framing === 'open-source') return { v: 'Free core only', s: 'The free core, on your own machines.' };
         return { v: 'Everything, for you', s: 'Hosting, payouts and the starter kit, managed.' };
       }
+      if (key === 'ship') {
+        return shipModeChoice() === 'manual'
+          ? { v: 'Manual', s: 'The AI waits for you to approve each ship. You can change this later in your project’s settings.' }
+          : { v: 'Auto (recommended)', s: 'The AI ships finished work on its own. You can change this later in your project’s settings.' };
+      }
       return { v: '', s: '' };
     }
     /* paint every row from the draft, and the locked Continue under them */
@@ -6407,7 +6446,9 @@ summary{min-height:24px;padding:3px 0;}
                existing history instead of pushing a fresh tree, which a repo that already
                has commits rejects as unrelated history. state.mode already tracked
                greenfield|adopt for the UI — it has to reach the server too. */
-            onboard_mode: state.mode === 'adopt' ? 'adopt' : 'greenfield'
+            onboard_mode: state.mode === 'adopt' ? 'adopt' : 'greenfield',
+            /* the ship row (task 1004629): becomes the new project's own ship mode */
+            ship_mode: shipModeChoice()
           })
         });
       }).then(function (res) {
@@ -7175,7 +7216,7 @@ summary{min-height:24px;padding:3px 0;}
          is three-valued and null is its "nothing said" sentinel; leaving the key out
          left it UNDEFINED, which is not null — so pickedModules() reached .slice()
          on it and the second project's Modules step threw. */
-      state = { step: 1, name: '', projType: null, description: '', teamShape: null, modules: null, mode: 'greenfield', owner: '', ownerTouched: false, repo: '', repoTouched: false, slug: '', slugTouched: false, domain: '', noAddress: false, appPlatform: 'later', physics: null, demo: null, look: null, termsAck: false, confirmed: {} };
+      state = { step: 1, name: '', projType: null, description: '', teamShape: null, modules: null, mode: 'greenfield', owner: '', ownerTouched: false, repo: '', repoTouched: false, slug: '', slugTouched: false, domain: '', noAddress: false, appPlatform: 'later', shipMode: 'auto', physics: null, demo: null, look: null, termsAck: false, confirmed: {} };
       $('newName').value = ''; $('f-owner').value = ''; $('f-repo').value = ''; $('f-slug').value = ''; $('f-domain').value = '';
       $('f-noaddr').checked = false; $('f-desc').value = '';
       $('termsAck').checked = false; paintDoors(); demoShow('intro'); checksShow('main');

package/modules/public-landing/public/projects.states.json

@@ -55,6 +55,7 @@
     "in-new-review-extras": {"auth":true,"url":"/projects?view=new","actions":[["wait",600],["click","#termsAck"],["wait",100],["click","#wizStart"],["wait",400],["fill","#newName","Mercury"],["click","#typeCards .tpill[data-type=\"game\"]"],["fill","#f-desc","A co-op farming game where the seasons never repeat."],["click","#panel-what button[type=submit]"],["wait",400],["select","#physCountry","US"],["wait",100],["click","[data-phys=\"builder_geography\"][data-val=\"global\"]"],["click","[data-phys=\"minors_on_board\"][data-val=\"false\"]"],["click","[data-phys=\"entity\"][data-val=\"intent-solo\"]"],["click","#physNext"],["wait",700],["click","#reviewRows .setRow[data-row=\"extras\"] [data-row-chg]"],["wait",900]],"expect":{"visible":["#modQ","#modCards .tpill","#modCoreNote"]}},
     "in-new-review-team": {"auth":true,"url":"/projects?view=new","actions":[["wait",600],["click","#termsAck"],["wait",100],["click","#wizStart"],["wait",400],["fill","#newName","Mercury"],["click","#typeCards .tpill[data-type=\"game\"]"],["fill","#f-desc","A co-op farming game where the seasons never repeat."],["click","#panel-what button[type=submit]"],["wait",400],["select","#physCountry","US"],["wait",100],["click","[data-phys=\"builder_geography\"][data-val=\"global\"]"],["click","[data-phys=\"minors_on_board\"][data-val=\"false\"]"],["click","[data-phys=\"entity\"][data-val=\"intent-solo\"]"],["click","#physNext"],["wait",700],["click","#reviewRows .setRow[data-row=\"team\"] [data-row-chg]"],["wait",300],["click","[data-phys-solo=\"many\"]"],["wait",600]],"expect":{"visible":["#physTeam","#physGuessLine","#teamCards","#reviewRows .setRow[data-row=\"rewards\"]"]}},
     "in-new-review-run": {"auth":true,"url":"/projects?view=new","actions":[["wait",600],["click","#termsAck"],["wait",100],["click","#wizStart"],["wait",400],["fill","#newName","Mercury"],["click","#typeCards .tpill[data-type=\"game\"]"],["fill","#f-desc","A co-op farming game where the seasons never repeat."],["click","#panel-what button[type=submit]"],["wait",400],["select","#physCountry","US"],["wait",100],["click","[data-phys=\"builder_geography\"][data-val=\"global\"]"],["click","[data-phys=\"minors_on_board\"][data-val=\"false\"]"],["click","[data-phys=\"entity\"][data-val=\"intent-solo\"]"],["click","#physNext"],["wait",700],["click","#reviewRows .setRow[data-row=\"run\"] [data-row-chg]"],["wait",300],["click","[data-phys=\"framing\"][data-val=\"hybrid\"]"],["wait",600]],"expect":{"visible":["#physSuite"]}},
+    "in-new-review-ship": {"auth":true,"url":"/projects?view=new","actions":[["wait",600],["click","#termsAck"],["wait",100],["click","#wizStart"],["wait",400],["fill","#newName","Mercury"],["click","#typeCards .tpill[data-type=\"game\"]"],["fill","#f-desc","A co-op farming game where the seasons never repeat."],["click","#panel-what button[type=submit]"],["wait",400],["select","#physCountry","US"],["wait",100],["click","[data-phys=\"builder_geography\"][data-val=\"global\"]"],["click","[data-phys=\"minors_on_board\"][data-val=\"false\"]"],["click","[data-phys=\"entity\"][data-val=\"intent-solo\"]"],["click","#physNext"],["wait",700],["click","#reviewRows .setRow[data-row=\"ship\"] [data-row-chg]"],["wait",300],["click","#shipOpts input[value=\"manual\"]"],["wait",300]],"expect":{"visible":["#shipOpts"]}},
     "in-new-review-confirmed": {"auth":true,"url":"/projects?view=new","actions":[["wait",600],["click","#termsAck"],["wait",100],["click","#wizStart"],["wait",400],["fill","#newName","Mercury"],["click","#typeCards .tpill[data-type=\"game\"]"],["fill","#f-desc","A co-op farming game where the seasons never repeat."],["click","#panel-what button[type=submit]"],["wait",400],["select","#physCountry","US"],["wait",100],["click","[data-phys=\"builder_geography\"][data-val=\"global\"]"],["click","[data-phys=\"minors_on_board\"][data-val=\"false\"]"],["click","[data-phys=\"entity\"][data-val=\"intent-solo\"]"],["click","#physNext"],["wait",700],["click","#reviewRows .setRow[data-row=\"address\"] [data-row-chg]"],["wait",200],["fill","#f-slug","mercury"],["wait",900],["fill","#f-domain","mercury.example.com"],["wait",200],["click","#reviewRows .setRow[data-row=\"address\"] [data-row-chg]"],["wait",200]],"expect":{"visible":["#reviewGo","#reviewRows .setRow.done"],"text":[["#reviewGo","Looks right, continue"]]}},
     "in-new-look": {"auth":true,"url":"/projects?view=new","actions":[["wait",600],["click","#termsAck"],["wait",100],["click","#wizStart"],["wait",400],["fill","#newName","Mercury"],["click","#typeCards .tpill[data-type=\"game\"]"],["fill","#f-desc","A co-op farming game where the seasons never repeat."],["click","#panel-what button[type=submit]"],["wait",400],["select","#physCountry","US"],["wait",100],["click","[data-phys=\"builder_geography\"][data-val=\"global\"]"],["click","[data-phys=\"minors_on_board\"][data-val=\"false\"]"],["click","[data-phys=\"entity\"][data-val=\"intent-solo\"]"],["click","#physNext"],["wait",700],["click","#reviewRows .setRow[data-row=\"address\"] [data-row-chg]"],["wait",200],["fill","#f-slug","mercury"],["wait",900],["fill","#f-domain","mercury.example.com"],["wait",200],["click","#reviewRows .setRow[data-row=\"address\"] [data-row-chg]"],["wait",200],["click","#reviewGo"],["wait",500]],"expect":{"visible":["#panel-look","#wizLook","#wizRecap","#doCreate"],"hidden":["#panel-review"],"attr":[["#wizRoom","data-screen","look"]]}},
     "in-new-done": {"auth":true,"url":"/projects?view=new","actions":[["wait",600],["click","#termsAck"],["wait",100],["click","#wizStart"],["wait",400],["fill","#newName","Mercury"],["click","#typeCards .tpill[data-type=\"game\"]"],["fill","#f-desc","A co-op farming game where the seasons never repeat."],["click","#panel-what button[type=submit]"],["wait",400],["select","#physCountry","US"],["wait",100],["click","[data-phys=\"builder_geography\"][data-val=\"global\"]"],["click","[data-phys=\"minors_on_board\"][data-val=\"false\"]"],["click","[data-phys=\"entity\"][data-val=\"intent-solo\"]"],["click","#physNext"],["wait",700],["click","#reviewRows .setRow[data-row=\"address\"] [data-row-chg]"],["wait",200],["fill","#f-slug","mercury"],["wait",900],["fill","#f-domain","mercury.example.com"],["wait",200],["click","#reviewRows .setRow[data-row=\"address\"] [data-row-chg]"],["wait",200],["click","#reviewGo"],["wait",500],["click","#doCreate"],["wait",1500]],"expect":{"visible":["#panel-done","#hop","#hopCanvas","#hopStatus","#hopJump"],"hidden":["#panel-look","#qWrap","#wizBack","#wizInvite","#liveProgress","#humanSteps","#wizInviteLater","#stepPager"]}},

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.83",
+  "version": "1.21.84",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.21.83",
+      "version": "1.21.84",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.83",
+  "version": "1.21.84",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -9324,5 +9324,11 @@
       "id": "1004646",
       "text": "Project invites now reach people on cloudbongos.com. Before, an invite sent by GitHub username was silently lost if the person had never signed in to a project through cloudbongos.com, which is almost every new invitee, so the"
     }
+  ],
+  "1.21.84": [
+    {
+      "id": "1004629",
+      "text": "New projects now ask how finished work should ship: Auto (recommended) or Manual. The answer becomes the project's ship mode, which the owner can change later on the settings page."
+    }
   ]
 }

package/src/bongos/project-settings.js

@@ -226,14 +226,26 @@ function parseShipMode(raw) {
 // resolveShipMode() — the project's ship mode and where it came from.
 // Returns { mode, source, chosen, invalid }:
 //   mode    — always 'auto' or 'manual'
-//   source  — 'project_settings' | 'default'
+//   source  — 'project_settings' | 'wizard' | 'default'
 //   chosen  — true only when someone actually SET a usable value. "Never chosen" is
 //             a real answer the first-ship prompt (task 1004630) asks about, so it
 //             must not be confused with "chose the default".
 //   invalid — null, or { where, raw, reason } for a stored value that is unusable.
 // A database that cannot be read answers the default rather than failing a ship —
 // the same reporting posture as resolveRotDays.
-async function resolveShipMode() {
+//
+// 'wizard' (task 1004629): the founder picked a mode in the project-creation wizard,
+// which reaches this instance as the server-only branding value founding.shipMode
+// (the hub cannot write this database). It counts as chosen, but only while no row
+// exists: the settings page and the CLI write the row, so a later change always wins.
+// `deps.branding` is the test seam; production reads the process's own pack.
+function wizardShipMode(deps) {
+  let pack;
+  try { pack = deps.branding ? deps.branding() : require('../branding').branding(); } catch (_) { return null; }
+  return parseShipMode(pack && pack.founding && pack.founding.shipMode).mode || null;
+}
+
+async function resolveShipMode(deps = {}) {
   let row = null;
   try {
     row = await getSetting(SETTING_KEYS.SHIP_MODE);
@@ -251,6 +263,8 @@ async function resolveShipMode() {
       invalid: { where: `project_settings['${SETTING_KEYS.SHIP_MODE}']`, raw: String(row.value), reason: got.reason },
     };
   }
+  const fromWizard = wizardShipMode(deps);
+  if (fromWizard) return { mode: fromWizard, source: 'wizard', chosen: true, invalid: null };
   return { mode: DEFAULT_SHIP_MODE, source: 'default', chosen: false, invalid: null };
 }
 

package/src/branding.js

@@ -103,6 +103,9 @@ const ENV_OVERRIDES = [
   ['FOUNDING_BIRTH', ['founding', 'birth']],
   ['DEMO_PEOPLE', ['founding', 'demoPeople']],
   ['DEMO_HOURS', ['founding', 'demoHours']],
+  // The ship mode the founder picked in the wizard (task 1004629), empty when none was.
+  // resolveShipMode reads it only while project_settings['ship.mode'] is unset.
+  ['SHIP_MODE', ['founding', 'shipMode']],
 ];
 
 const isObj = (v) => v && typeof v === 'object' && !Array.isArray(v);

package/src/module-api.js

@@ -75,7 +75,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // MAJOR (see allowBoxScope below): passes the request through untouched.
 function deprecatedNoopMiddleware(_req, _res, next) { next(); }
 
-const CORE_VERSION = '1.21.83'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.21.84'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('discord'); log.info('mounted');

package/tests/projects_hub.mjs

@@ -729,7 +729,7 @@ test('the About answers travel on the create request, and an empty one is OMITTE
   // wizard PREFILLED, and the sentence is never prefilled, so it has no row there — its
   // cost is stated on its own field (pinned above)
   assert.doesNotMatch(SCRIPT, /function renderReview\(|\$\('reviewList'\)/, 'no ledger review is left');
-  assert.match(SCRIPT, /var ROWS = \['code', 'address', 'app', 'extras', 'team', 'rewards', 'run'\];/,
+  assert.match(SCRIPT, /var ROWS = \['code', 'address', 'app', 'extras', 'team', 'rewards', 'run', 'ship'\];/,
     'the review rows are the seven prefilled answers');
 });
 

package/tests/projects_hub_app_step.mjs

@@ -168,7 +168,7 @@ test('the row is real markup: Render and Decide later, Decide later the default'
 
 test("the row sits in the review, between Address and Extras, and its checks are the old step's (task 1004504)", () => {
   assert.match(HUB, /var panels = \{ 0: 'panel-gate', 1: 'panel-fork', 2: 'panel-what', 3: 'panel-checks', 4: 'panel-review', 5: 'panel-look', 6: 'panel-done' \};/);
-  assert.match(HUB, /var ROWS = \['code', 'address', 'app', 'extras', 'team', 'rewards', 'run'\];/);
+  assert.match(HUB, /var ROWS = \['code', 'address', 'app', 'extras', 'team', 'rewards', 'run', 'ship'\];/);
   assert.doesNotMatch(HUB, /<li[^>]*data-step="\d+"/, 'no rail beat names the step any more');
   assert.match(HUB, /if \(step === 4\) \{[^}]*syncAppStep\(\); syncRenderSetup\(\);\r?\n\s*paintSetup\(\);\r?\n\s*\}/, 'entering the review repaints the row, Render setup included');
   assert.match(HUB, /if \(key === 'app'\) \{ syncAppStep\(\); syncRenderSetup\(\); \}/, 'opening the row repaints it too');

package/tests/provision_settings_apply.mjs

@@ -78,6 +78,7 @@ ${NEUTRAL_PREFIX}_LOGO_URL=
 ${NEUTRAL_PREFIX}_FOUNDING_BIRTH=
 ${NEUTRAL_PREFIX}_DEMO_PEOPLE=
 ${NEUTRAL_PREFIX}_DEMO_HOURS=
+${NEUTRAL_PREFIX}_SHIP_MODE=
 ${NEUTRAL_PREFIX}_HUB_UPGRADE_URL=
 `;
 
@@ -148,6 +149,8 @@ t('settingsEnvVarsFor: the runner pushes the SAME pair webEnvBody writes at stan
     [`${NEUTRAL_PREFIX}_LOOK_ACCENT`]: '', [`${NEUTRAL_PREFIX}_LOGO_URL`]: '',
     // the birth marker and a demo's box (task 1004506), empty on an un-stamped row
     [`${NEUTRAL_PREFIX}_FOUNDING_BIRTH`]: '', [`${NEUTRAL_PREFIX}_DEMO_PEOPLE`]: '', [`${NEUTRAL_PREFIX}_DEMO_HOURS`]: '',
+    // the wizard's ship mode (task 1004629), empty when none was picked
+    [`${NEUTRAL_PREFIX}_SHIP_MODE`]: '',
     // where the hall's Update button goes (task 1004608), empty when no hub origin resolves
     [`${NEUTRAL_PREFIX}_HUB_UPGRADE_URL`]: '',
   });
@@ -250,7 +253,7 @@ await ta('dry-run PLANS the patch: reads nothing real, writes NOTHING (no synthe
   assert.equal(r.ok, true);
   assert.equal(r.healthy, null, 'nothing ran, nothing observed');
   assert.equal(writes.length, 0, 'a dry-run must not plan a two-line overwrite of web.env');
-  assert.ok(logs.some((l) => /would patch .*_PLATFORM_VISIBILITY, .*_JOINABILITY, .*_VISIBILITY, .*_JOIN_GRANT, .*_ARTIST_GATE, .*_SPEND_PAYER, .*_LOOK, .*_NIGHT_TINT, .*_ARTIST_GATE_SINCE, .*_LOOK_ACCENT, .*_LOGO_URL, .*_FOUNDING_BIRTH, .*_DEMO_PEOPLE, .*_DEMO_HOURS, .*_HUB_UPGRADE_URL in \/etc\/spike\/web\.env in place/.test(l)), logs.join('\n'));
+  assert.ok(logs.some((l) => /would patch .*_PLATFORM_VISIBILITY, .*_JOINABILITY, .*_VISIBILITY, .*_JOIN_GRANT, .*_ARTIST_GATE, .*_SPEND_PAYER, .*_LOOK, .*_NIGHT_TINT, .*_ARTIST_GATE_SINCE, .*_LOOK_ACCENT, .*_LOGO_URL, .*_FOUNDING_BIRTH, .*_DEMO_PEOPLE, .*_DEMO_HOURS, .*_SHIP_MODE, .*_HUB_UPGRADE_URL in \/etc\/spike\/web\.env in place/.test(l)), logs.join('\n'));
   assert.ok(cmds.some((c) => /restart spike/.test(c)), 'the restart is still in the plan');
   assert.ok(logs.some((l) => /dry-run — nothing ran/.test(l)), 'the closing line does not claim a restart happened');
 });

package/tests/provisioning_settings_env.mjs

@@ -127,6 +127,8 @@ t('settingsEnvVars is the single source both legs derive from — same keys, sam
     // The birth marker and a demo's box (task 1004506): empty on a row the create
     // route never stamped, which is every row made before it shipped (spec D8).
     CLOUDBONGOS_FOUNDING_BIRTH: '', CLOUDBONGOS_DEMO_PEOPLE: '', CLOUDBONGOS_DEMO_HOURS: '',
+    // The wizard's ship mode (task 1004629): empty when none was picked.
+    CLOUDBONGOS_SHIP_MODE: '',
   });
   // varsOf splits on '=', so an empty value reads as '' on both sides — the point
   // of the comparison is that the standup lines carry exactly the same key set.
@@ -135,7 +137,7 @@ t('settingsEnvVars is the single source both legs derive from — same keys, sam
     X_PLATFORM_VISIBILITY: 'public', X_JOINABILITY: 'apply', X_VISIBILITY: 'public', X_JOIN_GRANT: 'full',
     X_ARTIST_GATE: 'strict', X_ARTIST_GATE_SINCE: '', X_SPEND_PAYER: 'none',
     X_LOOK: 'own', X_NIGHT_TINT: 'on', X_LOOK_ACCENT: '', X_LOGO_URL: '',
-    X_FOUNDING_BIRTH: '', X_DEMO_PEOPLE: '', X_DEMO_HOURS: '',
+    X_FOUNDING_BIRTH: '', X_DEMO_PEOPLE: '', X_DEMO_HOURS: '', X_SHIP_MODE: '',
   }, 'defaults, explicitly');
 });
 

package/tests/wizard_physics_more.mjs

@@ -377,13 +377,13 @@ test('rewards are hidden for a solo founder: the real table hides the row, and t
   assert.equal(w.run("rowApplies('rewards')"), false, 'the REAL softLimitsFor hides reward_intents for one-and-one');
   assert.equal(w.row('rewards').hidden, true, 'and the row goes with it');
   assert.ok(!w.run('unconfirmedRows()').includes('rewards'), 'nothing to confirm for a question never asked');
-  assert.equal(w.run('unconfirmedRows()').length, 6, 'six rows apply');
+  assert.equal(w.run('unconfirmedRows()').length, 7, 'seven rows apply');
   assert.equal(w.run('createDetail()').reward_intents, undefined);
   w.change('team');
   w.q('[data-phys-solo="many"]')[0].click();
   await w.settle();
   assert.equal(w.row('rewards').hidden, false, 'a team brings the question back, once the table is asked again');
-  assert.equal(w.run('unconfirmedRows()').length, 7);
+  assert.equal(w.run('unconfirmedRows()').length, 8);
 });
 
 test('rewards: a greyed option is disabled and leaves the list, and each reason is said once', async () => {
@@ -482,9 +482,9 @@ test('one "Looks right, continue" confirms every row that applies, each through
   assert.equal(w.go().disabled, false, 'Continue is never locked: it is the confirmation');
   assert.equal(w.go().textContent, 'Looks right, continue');
   assert.equal(w.row('code').querySelector('[data-row-ok]'), null, 'no row carries a Looks right of its own');
-  assert.equal(w.run('unconfirmedRows()').length, 7, 'nothing is confirmed before the founder says so');
+  assert.equal(w.run('unconfirmedRows()').length, 8, 'nothing is confirmed before the founder says so');
   assert.equal(w.run('validateStep(4)'), true, 'one Continue confirms them all');
-  for (const key of ['code', 'address', 'app', 'extras', 'team', 'rewards', 'run']) assert.equal(w.state.confirmed[key], true, key);
+  for (const key of ['code', 'address', 'app', 'extras', 'team', 'rewards', 'run', 'ship']) assert.equal(w.state.confirmed[key], true, key);
   assert.equal(w.state.modules && plain(w.state.modules).join(), 'discord', 'confirming the extras is the answer the create sends');
   w.change('team');
   assert.equal(w.state.confirmed.team, undefined, 'Edit takes a row back');
@@ -629,7 +629,7 @@ test('no path reaches Look without the founder confirming the address: a prefill
     assert.equal(w.state.confirmed.address, undefined, `${label}: the prefills leave the address unconfirmed`);
     assert.equal(w.run("rowFixed('address')"), false, `${label}: the address is never a fixed row`);
     assert.equal(w.row('address').querySelector('[data-row-chg]').hidden, false, `${label}: it can always be changed`);
-    for (const key of ['code', 'app', 'extras', 'team', 'rewards', 'run']) if (w.run(`rowApplies('${key}')`)) w.ok(key);
+    for (const key of ['code', 'app', 'extras', 'team', 'rewards', 'run', 'ship']) if (w.run(`rowApplies('${key}')`)) w.ok(key);
     assert.deepEqual(plain(w.run('unconfirmedRows()')), ['address'], `${label}: every other row confirmed, the address still asked`);
     // the address is on the page the founder confirms (task 1004550): only their own
     // "Looks right, continue" — or Done on the row — confirms it, and its check still runs

package/tests/wizard_ship_mode.mjs

@@ -0,0 +1,187 @@
+// tests/wizard_ship_mode.mjs — the project-creation wizard asks how finished work ships,
+// and the new project is born with that answer (task 1004629, ADR 0369).
+//
+// Pinned here, end to end:
+//   1. the wizard's review has a Shipping row: Auto first and checked, one plain sentence
+//      each, "you can change it later", and the create request carries ship_mode;
+//   2. the create route accepts only auto|manual and stamps it, write-once, on the row it
+//      just made (modules/provisioning/birth.js);
+//   3. the stamp rides the new instance's web.env as <PREFIX>_SHIP_MODE, which
+//      src/branding.js maps onto the server-only founding.shipMode;
+//   4. the instance's resolveShipMode reads it as a CHOSEN mode while no project_settings
+//      row exists, and a row (the settings page, the CLI) always wins.
+//
+// Run:  node --test tests/wizard_ship_mode.mjs
+import { strict as assert } from 'node:assert';
+import { test, after } from 'node:test';
+import { createRequire } from 'node:module';
+import { execFileSync } from 'node:child_process';
+import fs from 'node:fs';
+import path from 'node:path';
+import vm from 'node:vm';
+import { fileURLToPath } from 'node:url';
+
+const require = createRequire(import.meta.url);
+const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
+const HUB = fs.readFileSync(path.join(ROOT, 'modules', 'public-landing', 'public', 'projects.html'), 'utf8').replace(/\r\n/g, '\n');
+
+// Destructured from literal relative paths, so the dead-code scan (knip) can trace them.
+const { SHIP_MODE_KEY, stampShipMode, BIRTH_COMPANION_ENV } = require('../modules/provisioning/birth.js');
+const { resolveShipMode } = require('../src/bongos/project-settings.js');
+const provisioning = require('../modules/provisioning/provisioning.js');
+const poolMod = require('../src/bongos/pool.js');
+
+function slice(start, end, what) {
+  const a = HUB.indexOf(start), b = HUB.indexOf(end, a);
+  assert.ok(a > 0 && b > a, `slice for ${what} not found — a rename moved it`);
+  return HUB.slice(a, b);
+}
+
+// ── 1. the wizard ──────────────────────────────────────────────────────────
+
+test('the review asks how finished work ships: Auto (recommended) first and checked, Manual second', () => {
+  const row = slice('<div class="setRow" data-row="ship">', '<div class="hint" id="h-review">', 'the ship row');
+  const auto = row.indexOf('value="auto"'), manual = row.indexOf('value="manual"');
+  assert.ok(auto > 0 && manual > auto, 'Auto comes first');
+  assert.match(row, /<input type="radio" name="shipMode" value="auto" checked>/, 'and is the pick until the founder says otherwise');
+  assert.match(row, /<b>Auto \(recommended\)<\/b>/);
+  assert.match(row, /<b>Manual<\/b>/);
+  assert.match(row, /ships finished work on its own/, 'one plain sentence for Auto');
+  assert.match(row, /waits for you to approve it/, 'and one for Manual');
+});
+
+test('the row says what was picked and that it can be changed later; an older draft reads Auto', () => {
+  const fns = slice('    /* the ship row (task 1004629)', '    var ROWS = [', 'the ship choice');
+  const ctx = { state: {} };
+  vm.runInNewContext(`${fns}; this.choice = shipModeChoice;`, ctx);
+  assert.equal(ctx.choice(), 'auto', 'a draft with no shipMode is Auto');
+  ctx.state.shipMode = 'manual';
+  assert.equal(ctx.choice(), 'manual');
+  ctx.state.shipMode = 'yolo';
+  assert.equal(ctx.choice(), 'auto', 'anything but manual is Auto');
+  const say = slice("      if (key === 'ship') {", "      return { v: '', s: '' };", "the ship row's words");
+  assert.match(say, /v: 'Auto \(recommended\)'/);
+  assert.match(say, /v: 'Manual'/);
+  assert.equal((say.match(/You can change this later in your project’s settings\./g) || []).length, 2, 'both say it can be changed later');
+});
+
+test('the draft remembers the pick, and Create sends it as ship_mode', () => {
+  assert.match(HUB, /appPlatform: 'later', shipMode: 'auto', physics: null/, 'the initial state starts on Auto');
+  assert.equal((HUB.match(/shipMode: 'auto'/g) || []).length, 2, 'and so does the reset (the two literals stay equal)');
+  assert.match(HUB, /if \(type === 'change' && ev\.target\.name === 'shipMode'\) \{ state\.shipMode = ev\.target\.value; saveDraft\(\); \}/);
+  assert.match(HUB, /ship_mode: shipModeChoice\(\)\n {10}\}\)/, 'the create request carries it');
+});
+
+// ── 2. the stamp ───────────────────────────────────────────────────────────
+
+test('stampShipMode writes a valid answer once, and writes nothing for none or junk', async () => {
+  const seen = [];
+  const db = { query: async (sql, params) => { seen.push({ sql, params }); return { rows: [] }; } };
+  assert.equal(await stampShipMode(db, 41, 'manual'), true);
+  assert.equal(seen.length, 1);
+  assert.match(seen[0].sql, /UPDATE provisioning_instances/);
+  assert.match(seen[0].sql, /WHERE id = \$1 AND NOT \(COALESCE\(settings, '\{\}'::jsonb\) \? \$2::text\)/, 'write-once');
+  assert.deepEqual(seen[0].params, [41, SHIP_MODE_KEY, 'manual']);
+  assert.equal(await stampShipMode(db, 41, undefined), false, 'no answer: the project asks at its first ship instead');
+  assert.equal(await stampShipMode(db, 41, 'yolo'), false);
+  assert.equal(seen.length, 1, 'nothing written for either');
+});
+
+test('the stamp is not a setting: no client patch can write it and it never projects as one', () => {
+  assert.ok(!(SHIP_MODE_KEY in provisioning.SETTINGS_VOCAB));
+  assert.ok(!(SHIP_MODE_KEY in provisioning.PLANET_VOCAB));
+  assert.ok(!(SHIP_MODE_KEY in provisioning.effectiveSettings({ settings: { [SHIP_MODE_KEY]: 'manual' } })));
+});
+
+// ── 3. the transport ───────────────────────────────────────────────────────
+
+test('the stamped mode rides web.env as SHIP_MODE; an unstamped or mangled row sends empty', () => {
+  assert.equal(typeof BIRTH_COMPANION_ENV.SHIP_MODE, 'function');
+  assert.equal(provisioning.settingsEnvVars({ settings: { ship_mode: 'manual' } }, 'X').X_SHIP_MODE, 'manual');
+  assert.equal(provisioning.settingsEnvVars({ settings: { ship_mode: 'auto' } }, 'X').X_SHIP_MODE, 'auto');
+  assert.equal(provisioning.settingsEnvVars({ settings: {} }, 'X').X_SHIP_MODE, '');
+  assert.equal(provisioning.settingsEnvVars({ settings: { ship_mode: 'sometimes' } }, 'X').X_SHIP_MODE, '');
+});
+
+test('the instance reads it into founding.shipMode, and never publishes it to the client', () => {
+  const read = (env) => JSON.parse(execFileSync(process.execPath, ['-e',
+    "const b=require('./src/branding.js');const r=(b.branding||b)();console.log(JSON.stringify({m:(r.founding||{}).shipMode||null,c:'founding' in b.clientBranding(r)}))"],
+    { cwd: ROOT, encoding: 'utf8', env: { ...process.env, ...env } }));
+  assert.deepEqual(read({ CLOUDBONGOS_SHIP_MODE: 'manual' }), { m: 'manual', c: false });
+  assert.deepEqual(read({ CLOUDBONGOS_SHIP_MODE: '' }), { m: null, c: false }, 'the empty line every other instance carries is nothing');
+});
+
+// ── 4. the instance's own resolver ─────────────────────────────────────────
+
+async function withRow(value, fn) {
+  const pool = poolMod.pool;
+  const saved = pool.query;
+  pool.query = async () => ({ rows: value == null ? [] : [{ key: 'ship.mode', value, updated_at: null, updated_by: 1 }] });
+  try { return await fn(); } finally { pool.query = saved; }
+}
+const packWith = (shipMode) => () => ({ founding: { shipMode } });
+
+test('a wizard pick counts as chosen while no setting row exists', async () => {
+  const r = await withRow(null, () => resolveShipMode({ branding: packWith('manual') }));
+  assert.deepEqual(r, { mode: 'manual', source: 'wizard', chosen: true, invalid: null });
+  const auto = await withRow(null, () => resolveShipMode({ branding: packWith('auto') }));
+  assert.equal(auto.chosen, true, 'picking Auto in the wizard is a choice, so the first ship does not ask again');
+});
+
+test('the settings page (a row) always wins over the wizard; junk or no pick is the default, unchosen', async () => {
+  const r = await withRow('auto', () => resolveShipMode({ branding: packWith('manual') }));
+  assert.equal(r.mode, 'auto');
+  assert.equal(r.source, 'project_settings');
+  assert.deepEqual(await withRow(null, () => resolveShipMode({ branding: packWith('') })), { mode: 'auto', source: 'default', chosen: false, invalid: null });
+  assert.deepEqual(await withRow(null, () => resolveShipMode({ branding: packWith('maybe') })), { mode: 'auto', source: 'default', chosen: false, invalid: null });
+  assert.equal((await withRow(null, () => resolveShipMode({ branding: () => { throw new Error('no pack'); } }))).source, 'default', 'a pack that cannot be read is no pick');
+});
+
+// ── 2b. the create route ───────────────────────────────────────────────────
+
+const api = require('../src/module-api.js');
+const birth = require('../modules/provisioning/birth.js');
+provisioning.getInstanceBySlug = async () => null;
+provisioning.getInstanceByDomain = async () => null;
+birth.stampBirth = async () => {};
+provisioning.createInstance = async (_db, args) => ({
+  instance: { id: 41, owner_builder_id: 7, slug: args.slug, status: 'requested', hosting_shape: 'byo-host', detail: {} }, created: true,
+});
+provisioning.enqueueIntent = async (_db, _id, action) => ({ intent: { id: 9, action, state: 'pending' }, created: true });
+provisioning.getOpenIntent = async () => null;
+provisioning.recordEvent = async () => {};
+api.requireBuilder = (req, _res, next) => { req.builder = { id: 7, github_login: 'owner' }; next(); };
+const stamped = [];
+api.pool.query = async (sql, params) => { if (/jsonb_build_object/.test(sql) && params[1] === SHIP_MODE_KEY) stamped.push(params[2]); return { rows: [] }; };
+
+const express = require('express');
+const app = express();
+app.use(express.json());
+app.use((_req, res, next) => {
+  res.fail = (code, opts) => {
+    const status = typeof opts === 'number' ? opts : (opts && opts.status) || 400;
+    res.status(status).json({ error: { code, message: opts && opts.message } });
+  };
+  next();
+});
+app.use('/api/bongos', require('../modules/provisioning/routes/provisioning.js')());
+const server = app.listen(0);
+after(() => server.close());
+async function create(body) {
+  await new Promise((r) => (server.listening ? r() : server.once('listening', r)));
+  const res = await fetch(`http://127.0.0.1:${server.address().port}/api/bongos/provisioning/instances`, {
+    method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(body),
+  });
+  return { status: res.status, body: await res.json() };
+}
+
+test('the create route stamps the pick on the new row, and refuses anything but auto|manual', async () => {
+  stamped.length = 0;
+  const r = await create({ slug: 'ships-by-hand', hosting_shape: 'byo-host', ship_mode: 'manual' });
+  assert.equal(r.status, 201, JSON.stringify(r.body));
+  assert.deepEqual(stamped, ['manual']);
+  stamped.length = 0;
+  assert.equal((await create({ slug: 'no-pick', hosting_shape: 'byo-host' })).status, 201, 'the answer is optional (an API caller)');
+  assert.deepEqual(stamped, [], 'and none is stamped when none is given');
+  assert.equal((await create({ slug: 'bad-pick', hosting_shape: 'byo-host', ship_mode: 'sometimes' })).status, 400);
+});

package/tests/wizard_six_screens.mjs

@@ -81,10 +81,10 @@ test('planet words survive only as the light touch: the fork and the alive momen
   assert.match(SCRIPT, /if \(inst\.last_verified_up\) \{\n\s*\/\*[^*]*\*\/\n\s*\$\('done-h'\)\.textContent =/, 'said only once the project has answered (Live is a verified claim)');
 });
 
-test('the review cannot be skipped: seven rows, one Edit each, and one Continue that confirms them all (task 1004550)', () => {
+test('the review cannot be skipped: eight rows, one Edit each, and one Continue that confirms them all (task 1004550)', () => {
   const p = panel('panel-review');
   const rows = [...p.matchAll(/<div class="setRow" data-row="([a-z]+)">/g)].map((m) => m[1]);
-  assert.deepEqual(rows, ['code', 'address', 'app', 'extras', 'team', 'rewards', 'run']);
+  assert.deepEqual(rows, ['code', 'address', 'app', 'extras', 'team', 'rewards', 'run', 'ship']);
   for (const key of rows) {
     const r = (p.match(new RegExp(`<div class="setRow" data-row="${key}">[\\s\\S]*?<span class="acts">[^\\n]*\\n`)) || [''])[0];
     assert.match(r, /<span class="acts"><button type="button" class="rowChg" data-row-chg aria-expanded="false">Edit<\/button><\/span>/, `${key}: one Edit, nothing else`);
@@ -110,6 +110,7 @@ test('nothing the old steps could do is lost: their controls are moved whole int
   has('extras', ['modQ', 'modCards', 'modWhy', 'modCoreNote']);
   has('team', ['physTeam', 'physStartN', 'physExpected', 'teamCards']);
   has('run', ['physSuite']);
+  has('ship', ['shipOpts']);
   for (const id of ['physCountry', 'physRegion', 'physAges', 'physIntent', 'physForms', 'physHaveEntity', 'checksStop', 'physStopMsg', 'physFromAccount']) {
     assert.match(panel('panel-checks'), new RegExp(`id="${id}"`), `the quick checks host #${id}`);
   }