@bongos/core 1.21.93 → 1.21.95

package/modules/public-landing/public/projects.html

@@ -601,6 +601,8 @@ body:has(#view-new:not([hidden])) footer.foot{position:relative;z-index:1;backgr
   display:inline-flex;align-items:center;justify-content:center;font-family:var(--font-body);font-size:13px;letter-spacing:0;}
 #panel-done .humanSteps>li.sdone::before{content:"✓";text-transform:none;color:var(--ok);background:color-mix(in srgb,var(--ok) 12%,transparent);border:1px solid var(--ok);}
 #panel-done .humanSteps>li.slocked::before{border:1px solid var(--rule-soft);}
+/* the optional step (command-line sign-in, task 1004649): a dashed ring until it ticks */
+#panel-done .humanSteps>li.soptional:not(.sdone)::before{border-style:dashed;}
 #panel-done .humanSteps b{font-size:15px;line-height:24px;}
 .alive{margin-top:18px;padding-top:18px;border-top:1px solid var(--rule);}
 #view-new .aliveH{margin:0;font-family:var(--font-display);font-size:28px;font-weight:200;letter-spacing:-.02em;line-height:1.2;text-transform:none;color:var(--ink);}
@@ -4581,6 +4583,9 @@ summary{min-height:24px;padding:3px 0;}
        survives the GitHub round-trip; the server, not this page, names the terms version. */
     var DRAFT_KEY = 'cb-create-draft-v10';
     var CREATED_KEY = 'cb-created-instance';
+    /* the project "Start another project" set down (task 1004650): the server's resume
+       read does not pull this tab back to it */
+    var DECLINED_KEY = 'cb-resume-declined';
     /* `description` + `teamShape` are the optional About step (task 1002334) —
        both legitimately stay empty, and empty is what the create request omits. */
     /* `modules` is the picker's answer (task 1002339) and is THREE-VALUED like
@@ -6603,7 +6608,7 @@ summary{min-height:24px;padding:3px 0;}
       return '<a href="' + (instanceId ? '?view=manage&id=' + encodeURIComponent(instanceId) : '?view=mine') +
         '">' + label + '</a>';
     }
-    var live = { instStatus: null, addrReady: false, manifest: null, manifestMsg: '', manifestCode: '', manifestFailure: null, appSlug: null };
+    var live = { instStatus: null, addrReady: false, manifest: null, manifestMsg: '', manifestCode: '', manifestFailure: null, appSlug: null, setup: null, installUrl: null };
     var planPromises = {};             /* mode|domain → Promise<steps[]> */
     var lastStepsHtml = '';
     var lastProgHtml = '';            /* same change-only contract, for the progress strip */
@@ -6632,6 +6637,9 @@ summary{min-height:24px;padding:3px 0;}
        (task 1002562) — the owner no longer runs `bongos init --adopt` here. */
     function renderStepGithubRepo() {
       var landed = live.instStatus === 'active';
+      /* the one-page checklist (task 1004649) shows only the GitHub steps the founder
+         takes; a repo the platform made or adopted needs nothing, so it is not a row */
+      if (state.mode === 'adopt' || state.repoAutoCreated || landed) return '';
       var repoLabel = state.owner && state.repo ? '<strong>' + esc(state.owner + '/' + state.repo) + '</strong>' : 'your new repository';
       /* Naming a repo without linking it stranded the owner on exactly the path where the
          platform did the work (task 1002855). Adopt links the repo the owner picked;
@@ -6697,27 +6705,34 @@ summary{min-height:24px;padding:3px 0;}
       else window.location.assign(url);
     }
 
+    /* The four GitHub steps of part 03, in the mockup's words and order (task 1004649,
+       docs/design/mocks/day-night-rooms/): Approve the <name> app on GitHub · Install it
+       on your repo · Builders can sign in · Command-line sign-in is on. One click starts
+       ONE trip — approve, straight on to installing, back here — and every tick is what
+       the server verified (live.setup, the status poll's `checklist`). Every value that
+       reaches the markup goes through esc(). */
+    function ghStep(key) { return live.setup && live.setup[key]; }
+    function appTitle() { return 'Approve the ' + esc(state.name || state.slug || 'project') + ' app on GitHub'; }
+
     /* oauth-app — the ADR 0133 one-click GitHub-App manifest flow is the primary path
        (gap 3 / idea 1000676); locked until a domain exists (the App needs the real
        callback host — the server refuses domainless with domain_required). */
     function renderStepOauthApp() {
       var domain = resolvedDomain();
       if (!domain) {
-        return '<li class="slocked" data-onboard-step="oauth-app"><b>Wire GitHub sign-in</b><p>Unlocks once your project has an address — sign-in needs a real domain. Attach one any time from ' + projectPageLink('this project’s own page') + '.</p></li>';
+        return '<li class="slocked" data-onboard-step="oauth-app"><b>' + appTitle() + '</b><p>Unlocks once your project has an address — sign-in needs a real domain. Attach one any time from ' + projectPageLink('this project’s own page') + '.</p></li>';
+      }
+      /* GitHub made the app and the platform placed its keys: the slug is recorded only
+         after the placement (the runner), so a known slug outside a failure is the tick —
+         a fact, whatever the venue says about starting a NEW trip */
+      if (live.manifest !== 'error' && live.manifest !== 'expired' && (ghStep('approve') === 'done' || live.appSlug)) {
+        return '<li class="sdone" data-onboard-step="oauth-app"><b>' + appTitle() + '</b><p>GitHub made the app, and its keys are on your project.</p></li>';
       }
       /* honesty about the venue (owner walk, 2026-08-12): GitHub rejects app
          manifests whose hook URL isn't publicly reachable, so a locally-hosted
          platform can't complete the one-click flow — say it BEFORE the bounce. */
       if (!apexBase()) {
-        return '<li class="slocked" data-onboard-step="oauth-app"><b>Wire GitHub sign-in</b><p>This platform is running on a local address, and GitHub refuses app setups it can’t reach over the public internet — so the one-click flow can’t complete here. On a publicly-addressed platform this is one click.</p>' + manualOauthDetails() + '</li>';
-      }
-      if (live.manifest === 'done') {
-        /* the wait ends HERE now, not on the callback page (task 1004548): once the
-           project answers too, the step carries the door itself */
-        var open = live.instStatus === 'active' && live.addrReady;
-        return '<li class="sdone" data-onboard-step="oauth-app"><b>GitHub sign-in is wired</b><p>Credentials placed and verified — sign-in on <code style="font-family:var(--font-mono)">' + esc(domain) + '</code> is live.' +
-          (open ? '' : ' The door below opens once your project is answering.') + '</p>' +
-          (open ? '<a class="ghbtn" href="https://' + esc(domain) + '" target="_blank" rel="noopener">Open ' + esc(domain) + ' →</a>' : '') + '</li>';
+        return '<li class="slocked" data-onboard-step="oauth-app"><b>' + appTitle() + '</b><p>This platform is running on a local address, and GitHub refuses app setups it can’t reach over the public internet — so the one-click flow can’t complete here. On a publicly-addressed platform this is one click.</p>' + manualOauthDetails() + '</li>';
       }
       if (live.manifest === 'error' || live.manifest === 'expired') {
         /* a plain sentence first; the raw route text folds under Technical
@@ -6731,86 +6746,98 @@ summary{min-height:24px;padding:3px 0;}
         else if (live.manifestCode === 'domain_required') snag = 'This project needs an address first — attach one from ' + projectPageLink('its own page') + ', then come back to this step.';
         else if (live.manifestFailure === 'sign_in_unconfirmed') {
           var appLink = live.appSlug ? '<a href="https://github.com/settings/apps/' + esc(live.appSlug) + '" target="_blank" rel="noopener">your app on GitHub</a>' : 'the app on your GitHub account';
-          return '<li data-onboard-step="oauth-app"><b>Wire GitHub sign-in</b><p>GitHub approved the app and the platform placed its credentials on your project, but your project didn’t confirm that sign-in works. Trying again would make a second app on your GitHub account and is unlikely to fix this — it needs a look from the platform team. <a href="/contact">Contact us</a> and mention ' + appLink + '.</p>' +
+          return '<li data-onboard-step="oauth-app"><b>' + appTitle() + '</b><p>GitHub approved the app and the platform placed its credentials on your project, but your project didn’t confirm that sign-in works. Trying again would make a second app on your GitHub account and is unlikely to fix this — it needs a look from the platform team. <a href="/contact">Contact us</a> and mention ' + appLink + '.</p>' +
             progressMarkup(1, 1, 'Stopped: your project didn’t confirm sign-in.', 'isErr', 'signin') +
             '<button type="button" class="linklike" data-action="manifest-start">Try again anyway</button></li>';
         }
         else if (live.manifestFailure === 'finish_failed') snag = 'GitHub approved the app, but the platform couldn’t finish setting up sign-in on your project. The app GitHub made is still on your account — delete it first (GitHub → Settings → Developer settings → GitHub Apps) so you don’t end up with two, then try again.';
         else { snag = 'GitHub setup didn’t start. Nothing was changed on GitHub — try again.'; raw = live.manifestMsg; }
-        return '<li data-onboard-step="oauth-app"><b>Wire GitHub sign-in</b><p>' + snag + '</p>' +
+        return '<li data-onboard-step="oauth-app"><b>' + appTitle() + '</b><p>' + snag + '</p>' +
           (raw ? '<details><summary>Technical details</summary><p>' + esc(raw) + '</p></details>' : '') +
-          '<button type="button" class="ghbtn" data-action="manifest-start">' + GH_ICON + 'Set up GitHub sign-in</button>' + manualOauthDetails() + '</li>';
+          '<button type="button" class="ghbtn" data-action="manifest-start">' + GH_ICON + 'Connect GitHub ↗</button>' + manualOauthDetails() + '</li>';
       }
       if (live.manifest === 'code_received' || live.manifest === 'converting') {
-        /* GitHub's half is done — say so, rather than keep telling the founder
-           to approve an app they just approved */
+        /* GitHub's half of the approval is done — say so, rather than keep telling the
+           founder to approve an app they just approved */
         autoOpenArmed = true;
-        return '<li data-onboard-step="oauth-app"><b>Wire GitHub sign-in</b><p>GitHub’s part is done. The platform is placing the credentials on your project now — this usually takes a few minutes, and this step ticks itself.</p>' +
-          progressMarkup(1, 1, 'Placing credentials and checking sign-in works…', '', 'signin') + autoOpenTick() + '</li>';
+        return '<li data-onboard-step="oauth-app"><b>' + appTitle() + '</b><p>Approved on GitHub. The platform is placing the app’s keys on your project, and the GitHub tab goes on to installing it on your repo. This step ticks itself.</p>' +
+          progressMarkup(1, 1, 'Placing the app’s keys on your project…', '', 'signin') + autoOpenTick() + '</li>';
       }
       if (live.manifest) {   /* pending — GitHub holds the manifest, nobody has approved it yet */
         autoOpenArmed = true;
-        return '<li data-onboard-step="oauth-app"><b>Wire GitHub sign-in</b><p>Waiting on GitHub — approve the app in the tab that opened. No GitHub tab? It may have opened behind this window or in another one. Once approved, the platform places the credentials and verifies sign-in on its own; this step ticks itself.</p>' +
+        return '<li data-onboard-step="oauth-app"><b>' + appTitle() + '</b><p>Waiting on GitHub — approve the app in the tab that opened. No GitHub tab? It may have opened behind this window or in another one. Once approved, GitHub takes you straight on to installing it on your repo, then back here; every step ticks itself.</p>' +
           progressMarkup(0, 0, 'Waiting for your approval on GitHub…', '', 'signin') + autoOpenTick() +
           (manifestStale ? '<button type="button" class="linklike" data-action="manifest-start">Didn’t get to GitHub? Start the setup again</button>' : '') + '</li>';
       }
-      return '<li data-onboard-step="oauth-app"><b>Wire GitHub sign-in — one click</b><p>Approve a pre-filled GitHub App and the platform wires sign-in by itself: no keys to copy, and the secret never leaves the server side.</p>' +
-        '<button type="button" class="ghbtn" data-action="manifest-start">' + GH_ICON + 'Set up GitHub sign-in</button>' + manualOauthDetails() + '</li>';
+      return '<li data-onboard-step="oauth-app"><b>' + appTitle() + '</b><p>One trip to GitHub: approve the app, install it on your repo, and you land back here. No keys to copy, and the secret never leaves the server side.</p>' +
+        '<button type="button" class="ghbtn" data-action="manifest-start">' + GH_ICON + 'Connect GitHub ↗</button>' + manualOauthDetails() + '</li>';
     }
 
-    /* device-flow — the one-checkbox repair for terminal sign-in (task 1003051):
-       GitHub creates a manifest-born App with Device Flow OFF and offers no API to
-       enable it, so `bongos setup` in a terminal is refused until the owner ticks
-       the box. Web sign-in works either way; the CLI also has a web-token fallback. */
+    /* device-flow — "Command-line sign-in is on", the OPTIONAL fourth step (task 1004649).
+       GitHub creates a manifest-born App with Device Flow OFF and offers no manifest
+       field and no API to switch it on (the spike in task 1004649), so only the founder's
+       own tick in the app's settings can — and the runner ticks this step when GitHub
+       starts a device sign-in for the app. It never holds the project back: web sign-in
+       works without it, and the CLI falls back to a web token meanwhile. */
     function renderStepDeviceFlow() {
+      var title = '<b>Command-line sign-in is on</b>';
+      if (ghStep('device_flow') === 'done') {
+        return '<li class="sdone soptional" data-onboard-step="device-flow">' + title + '<p>Builders can sign in from a terminal too — the <code style="font-family:var(--font-mono)">bongos setup</code> command builders run on their own machine.</p></li>';
+      }
       if (live.manifest !== 'done') {
-        return '<li class="slocked" data-onboard-step="device-flow"><b>Let builders sign in from a command line — one checkbox</b><p>Unlocks once GitHub sign-in above is wired. It lets builders sign in from a terminal — the <code style="font-family:var(--font-mono)">bongos setup</code> command builders run on their own machine; web sign-in works without it.</p></li>';
+        return '<li class="slocked soptional" data-onboard-step="device-flow">' + title + '<p>Optional — turn it on later. It lets builders sign in from a terminal, with the <code style="font-family:var(--font-mono)">bongos setup</code> command they run on their own machine; web sign-in works without it.</p></li>';
       }
       var appUrl = live.appSlug ? 'https://github.com/settings/apps/' + esc(live.appSlug) : null;
-      return '<li data-onboard-step="device-flow"><b>Let builders sign in from a command line — one checkbox</b><p>' +
+      return '<li class="soptional" data-onboard-step="device-flow">' + title + '<p>Optional — turn it on later. GitHub leaves it off on new apps and lets only you switch it on: ' +
         (appUrl
-          ? 'Open <a href="' + appUrl + '" target="_blank" rel="noopener">your app’s settings</a>, check <strong>Enable Device Flow</strong>, and save. '
+          ? 'open <a href="' + appUrl + '" target="_blank" rel="noopener">your app’s settings</a>, check <strong>Enable Device Flow</strong>, and save. '
           : 'GitHub → Settings → Developer settings → GitHub Apps → your app → check <strong>Enable Device Flow</strong> → save. ') +
-        'GitHub leaves it off on new apps and only offers it as this checkbox — until it’s ticked, terminal sign-in falls back to a web token from the hall’s Settings page.</p></li>';
+        'We tick this when GitHub has it on. Until then builders sign in on the web, and terminal sign-in falls back to a web token from the hall’s Settings page.</p></li>';
     }
 
-    /* app-install — the ADR 0055 publish credential (task 1003049): the sign-in App
-       doubles as it, but only an INSTALLED App can mint push tokens; without this
-       one click every finished task waits at confirmed for a manual merge. */
+    /* app-install — "Install it on your repo": the ADR 0055 publish credential (task
+       1003049). The same trip carries the founder here straight from the approval (task
+       1004649); this step ticks only once the runner has asked GitHub, with the app's own
+       key, and GitHub said the app is on this repo. The button is the way back for a
+       founder who returned without installing. */
     function renderStepAppInstall() {
-      if (live.manifest !== 'done') {
-        return '<li class="slocked" data-onboard-step="app-install"><b>Install the GitHub App on your repo</b><p>Unlocks once GitHub sign-in above is wired — the same app, installed on your repo, is what lets finished work merge and ship itself.</p></li>';
+      var title = '<b>Install it on your repo</b>';
+      if (ghStep('install') === 'done') {
+        return '<li class="sdone" data-onboard-step="app-install">' + title + '<p>The app is on ' + (state.owner && state.repo ? esc(state.owner + '/' + state.repo) : 'your repo') + ', so finished work can merge and ship itself.</p></li>';
       }
-      var installUrl = live.appSlug ? 'https://github.com/apps/' + esc(live.appSlug) + '/installations/new' : null;
-      return '<li data-onboard-step="app-install"><b>Install the GitHub App on your repo</b><p>One click: install the app you just approved on this project’s repo. Without it, finished work waits for a manual merge instead of shipping itself.</p>' +
-        (installUrl
-          ? '<a class="ghbtn" href="' + installUrl + '" target="_blank" rel="noopener">' + GH_ICON + 'Install the app on your repo</a>'
-          : '<p>GitHub → Settings → Developer settings → GitHub Apps → your app → <strong>Install App</strong> → pick this project’s repo.</p>') +
-        '</li>';
+      if (!live.appSlug) {
+        return '<li class="slocked" data-onboard-step="app-install">' + title + '<p>Comes straight after the approval, on the same trip: pick your repo and you land back here.</p></li>';
+      }
+      var installUrl = live.installUrl || ('https://github.com/apps/' + encodeURIComponent(live.appSlug) + '/installations/new');
+      return '<li data-onboard-step="app-install">' + title + '<p>Your GitHub tab goes here next. We check with GitHub that the app is on your repo, and this step ticks itself. Came back without installing it?</p>' +
+        '<a class="ghbtn" href="' + esc(installUrl) + '" target="_blank" rel="noopener">' + GH_ICON + 'Install it on your repo ↗</a></li>';
     }
 
+    /* first-sign-in — "Builders can sign in": ticks when the platform has seen sign-in
+       work on the project (the runner's auth_configured check, the manifest 'done'). The
+       door opens only when the project ANSWERS too: a link to an address that does not
+       resolve yet is the worst first impression a founder can get (task 1003232). */
     function renderStepFirstSignIn() {
       var domain = resolvedDomain();
+      var title = '<b>Builders can sign in</b>';
       if (!domain) {
-        return '<li class="slocked" data-onboard-step="first-sign-in"><b>First sign-in</b><p>Unlocks with sign-in above — you’ll open your project’s address, sign in with GitHub once, and be seated as the owner (the founding Archon).</p></li>';
+        return '<li class="slocked" data-onboard-step="first-sign-in">' + title + '<p>Unlocks with an address — then you open it, sign in with GitHub once, and take the owner’s seat (the founding Archon).</p></li>';
       }
-      /* the door opens only when the project ANSWERS and sign-in is wired: a
-         link to an address that does not resolve yet is the worst first
-         impression a founder can get of their own project (task 1003232) */
-      if (live.instStatus !== 'active' || !live.addrReady || live.manifest !== 'done') {
-        return '<li class="slocked" data-onboard-step="first-sign-in"><b>First sign-in</b><p>Unlocks once your project is answering and sign-in above is wired. Then you’ll open <code style="font-family:var(--font-mono)">' + esc(domain) + '</code>, sign in with GitHub once, and be seated as the owner — the founding Archon.</p></li>';
+      if (live.manifest !== 'done') {
+        return '<li class="slocked" data-onboard-step="first-sign-in">' + title + '<p>Ticks once the platform has seen sign-in work on <code style="font-family:var(--font-mono)">' + esc(domain) + '</code>.</p></li>';
       }
-      return '<li data-onboard-step="first-sign-in"><b>First sign-in</b><p>Open <a href="https://' + esc(domain) + '" target="_blank" rel="noopener"><code style="font-family:var(--font-mono)">' + esc(domain) + '</code></a> and sign in with GitHub once. That seats you as the owner — the founding Archon.</p></li>';
+      var open = live.instStatus === 'active' && live.addrReady;
+      return '<li class="sdone" data-onboard-step="first-sign-in">' + title + '<p>Sign-in works on <code style="font-family:var(--font-mono)">' + esc(domain) + '</code>.' +
+        (open ? ' Open it and sign in with GitHub once to take the owner’s seat — the founding Archon.' : ' The door opens here once your project is answering.') + '</p>' +
+        (open ? '<a class="ghbtn" href="https://' + esc(domain) + '" target="_blank" rel="noopener">Open ' + esc(domain) + ' →</a>' : '') + '</li>';
     }
 
+    /* enter-hall — not a row of the GitHub checklist (the "is alive" block below carries
+       the way in); kept only for a project with no address, whose hall is local */
     function renderStepEnterHall() {
       var domain = resolvedDomain();
-      if (domain && (live.instStatus !== 'active' || !live.addrReady || live.manifest !== 'done')) {
-        return '<li class="slocked" data-onboard-step="enter-hall"><b>Enter your builders hall</b><p>Unlocks with the first sign-in — your project’s home will be <code style="font-family:var(--font-mono)">' + esc(domain) + '/builders</code>.</p></li>';
-      }
-      return domain
-        ? '<li data-onboard-step="enter-hall"><b>Enter your builders hall</b><p>Your project’s home — open <a href="https://' + esc(domain) + '/builders" target="_blank" rel="noopener"><code style="font-family:var(--font-mono)">' + esc(domain) + '/builders</code></a> and start building.</p></li>'
-        : '<li data-onboard-step="enter-hall"><b>Enter your builders hall</b><p>No address yet — run <code style="font-family:var(--font-mono)">bongos dev</code> in your repo checkout to start the local hall on your machine.</p></li>';
+      if (domain) return '';
+      return '<li data-onboard-step="enter-hall"><b>Enter your builders hall</b><p>No address yet — run <code style="font-family:var(--font-mono)">bongos dev</code> in your repo checkout to start the local hall on your machine (on an address it lives at /builders).</p></li>';
     }
 
     var STEP_RENDERERS = {
@@ -6828,9 +6855,13 @@ summary{min-height:24px;padding:3px 0;}
        control-plane wizard cannot reach. Spun out per the direction's §9
        delivery-split as task 1002739. */
 
+    /* the mockup's order: the repo (only when the founder must make it), approve,
+       install, sign-in, command line; a plan step this page has no row for goes last */
+    var STEP_ORDER = ['github-repo', 'oauth-app', 'app-install', 'first-sign-in', 'device-flow', 'enter-hall'];
+    function stepRank(s) { var i = STEP_ORDER.indexOf(s.key); return i < 0 ? STEP_ORDER.length : i; }
     function renderSteps() {
       fetchPlan().then(function (steps) {
-        var html = steps.filter(function (s) { return s && s.kind === 'human'; }).map(function (s) {
+        var html = steps.filter(function (s) { return s && s.kind === 'human'; }).slice().sort(function (a, b) { return stepRank(a) - stepRank(b); }).map(function (s) {
           var r = STEP_RENDERERS[s.key];
           return r ? r(s) : '<li data-onboard-step="' + esc(s.key) + '"><b>' + esc(s.label || s.key) + '</b></li>';
         }).join('');
@@ -6898,18 +6929,36 @@ summary{min-height:24px;padding:3px 0;}
       try { localStorage.setItem(AUTO_OPEN_KEY, box.checked ? '1' : '0'); } catch (e) {}
     });
 
-    /* ── C8: the wizard's polls run only on stage, exactly like the sky.
-       Off-view or hidden-tab, a due tick parks itself instead of fetching;
-       enter() and the visibility flip resume whatever was parked. ── */
+    /* ── C8: the wizard's polls run only while the create view is on stage, like the
+       sky. Off-view a due tick parks itself instead of fetching; enter() resumes it.
+       A HIDDEN tab is different (task 1004650): that is exactly when the founder is on
+       GitHub, in another tab or on their phone, so the polls keep checking there at a
+       slower pace (HIDDEN_POLL_MS), and the moment the tab is seen again a waiting tick
+       runs at once — the laptop's checklist ticks on its own. ── */
+    var HIDDEN_POLL_MS = 20000;
     function wizPollActive() {
-      return !document.hidden && currentView === 'new';
+      return currentView === 'new';
+    }
+    /* the next tick's wait: the poll's own pace while the tab is seen, the slow one while hidden */
+    function wizPollDelay(ms) {
+      return document.hidden ? Math.max(ms, HIDDEN_POLL_MS) : ms;
     }
     function resumePolls() {
       if (watchPending && instanceId) { watchPending = false; startProgress(instanceId); }
       if (manifestPending && manifestState) { manifestPending = false; pollManifest(manifestState); }
     }
+    /* each poll's waiting tick, so a return to the tab can run it now instead of later.
+       Only a WAITING tick is run (its timer is set): one mid-fetch re-arms itself, and
+       running it again would start a second chain. */
+    var progressKick = null, manifestKick = null;
+    function kickPolls() {
+      if (pollTimer && progressKick) { clearTimeout(pollTimer); pollTimer = null; progressKick(); }
+      if (manifestPollTimer && manifestKick) { clearTimeout(manifestPollTimer); manifestPollTimer = null; manifestKick(); }
+    }
     document.addEventListener('visibilitychange', function () {
-      if (wizPollActive()) resumePolls();
+      if (document.hidden || !wizPollActive()) return;
+      resumePolls();
+      kickPolls();
     });
 
     /* ── GitHub-App manifest flow (ADR 0133): mint a one-time state for OUR instance,
@@ -6929,6 +6978,17 @@ summary{min-height:24px;padding:3px 0;}
     var handbackState = (function () {
       try { var m = /[#&]ghstate=([0-9a-f]{16,128})/i.exec(location.hash || ''); return m ? m[1] : null; } catch (e) { return null; }
     })();
+    /* …and the PROJECT it is for (task 1004650): the return route resolves the state on
+       the server and lands its owner on ?view=new&id=<project>, so a phone, another
+       window or a fresh tab reaches the right project's part 03 with nothing in this
+       tab's storage. Read once at load, for the same reason as the state above. */
+    var handbackProject = (function () {
+      try {
+        var q = new URLSearchParams(location.search || '');
+        var id = q.get('view') === 'new' ? q.get('id') : null;
+        return id && /^\d{1,12}$/.test(id) ? id : null;
+      } catch (e) { return null; }
+    })();
     /* the manifest leg survives a reload: token + last status ride the CREATED
        record, so enter() re-seeds the step instead of re-offering "Set up
        GitHub sign-in" for an app the founder already approved (task 1003232) */
@@ -6991,6 +7051,22 @@ summary{min-height:24px;padding:3px 0;}
     function manifestInFlight() {
       return live.manifest === 'pending' || live.manifest === 'code_received' || live.manifest === 'converting';
     }
+    /* the checklist the server derived (task 1004649) — change-only; true when it moved.
+       The install link rides only on a state-keyed read; the owner's read keeps the last. */
+    function seedSetup(checklist, installUrl) {
+      if (!checklist || typeof checklist !== 'object') return false;
+      var next = JSON.stringify(checklist), was = live.setup ? JSON.stringify(live.setup) : '';
+      var url = typeof installUrl === 'string' && /^https:\/\/github\.com\/apps\//.test(installUrl) ? installUrl : null;
+      var urlMoved = !!url && url !== live.installUrl && (!live.installUrl || /[?&]state=/.test(url) || !/[?&]state=/.test(live.installUrl));
+      if (next === was && !urlMoved) return false;
+      live.setup = checklist;
+      if (urlMoved) live.installUrl = url;
+      return true;
+    }
+    /* still worth watching after sign-in: the install not verified yet, while the runner checks */
+    function setupOpen() {
+      return !!(live.setup && !live.setup.connected && live.manifest === 'done');
+    }
     function noteManifestWait() {
       if (live.manifest === 'pending' && !manifestStale && manifestStartedAt && (Date.now() - manifestStartedAt) > 90000) { manifestStale = true; renderSteps(); }
     }
@@ -7001,19 +7077,21 @@ summary{min-height:24px;padding:3px 0;}
       function tick() {
         if (myGen !== manifestGen) return;
         if (!wizPollActive()) { manifestPending = true; stopManifestPoll(); return; }
+        manifestKick = tick;
         fetch(API + '/provisioning/github-app/status?state=' + encodeURIComponent(stateToken))
           .then(function (res) { if (!res.ok) throw new Error('soft'); return res.json(); })
           .then(function (d) {
             if (myGen !== manifestGen) return;
             if (d.app_slug && d.app_slug !== live.appSlug) { live.appSlug = d.app_slug; rememberManifest(undefined, undefined, d.app_slug); renderSteps(); }
+            if (seedSetup(d.checklist, d.install_url)) renderSteps();   /* the server-verified ticks (task 1004649) */
             var next = d.ready ? 'done' : (d.status || 'pending');
             var failure = d.failure || null;
             if (next !== live.manifest || failure !== live.manifestFailure) { live.manifest = next; live.manifestFailure = failure; rememberManifest(undefined, next); renderSteps(); }
             else noteManifestWait();
-            if (!d.terminal) manifestPollTimer = setTimeout(tick, 4000);
+            if (!d.terminal) manifestPollTimer = setTimeout(tick, wizPollDelay(4000));
             else manifestPollTimer = null;   /* a stale fired id would read as "still polling" and resume a finished poll */
           })
-          .catch(function () { if (myGen === manifestGen) manifestPollTimer = setTimeout(tick, 8000); });
+          .catch(function () { if (myGen === manifestGen) manifestPollTimer = setTimeout(tick, wizPollDelay(8000)); });
       }
       tick();
     }
@@ -7204,6 +7282,7 @@ summary{min-height:24px;padding:3px 0;}
       function tick() {
         if (myGen !== watchGen) return;
         if (!wizPollActive()) { watchPending = true; stopPolling(); return; }
+        progressKick = tick;
         ticks += 1;
         if (ticks > 400) {
           /* ~33 min: this tab stops watching, but the standup keeps going — hand
@@ -7249,6 +7328,8 @@ summary{min-height:24px;padding:3px 0;}
               if (seedChanged) { rememberManifest(undefined, live.manifest, live.appSlug || undefined); renderSteps(); }
               else noteManifestWait();
             }
+            /* the server-verified checklist rides the same read (task 1004649) */
+            if (data.github_setup && !manifestPollTimer && seedSetup(data.github_setup.checklist, data.github_setup.install_url)) renderSteps();
             /* the checklist reflects live state (task 1002694): a status transition —
                e.g. the scaffold landing — re-renders the steps (change-only, so the
                5s tick never clobbers an open dropdown or mid-flight button) */
@@ -7258,7 +7339,7 @@ summary{min-height:24px;padding:3px 0;}
             var terminal = renderProgress(inst);
             /* a GitHub leg still in flight keeps this read alive even once the
                project is up — after a reload it is the ONLY thing watching it */
-            if (!terminal || manifestInFlight()) pollTimer = setTimeout(tick, 5000);
+            if (!terminal || manifestInFlight() || setupOpen()) pollTimer = setTimeout(tick, wizPollDelay(5000));
             else stopPolling();
           })
           .catch(function (err) {
@@ -7271,7 +7352,7 @@ summary{min-height:24px;padding:3px 0;}
               return;
             }
             /* transient (network / 5xx): keep the last view, try again a bit later */
-            pollTimer = setTimeout(tick, 10000);
+            pollTimer = setTimeout(tick, wizPollDelay(10000));
           });
       }
       tick();
@@ -7288,7 +7369,7 @@ summary{min-height:24px;padding:3px 0;}
       instanceId = null;
       watchPending = false; manifestPending = false; manifestState = null;
       manifestStartedAt = 0; manifestStale = false;
-      live = { instStatus: null, addrReady: false, manifest: null, manifestMsg: '', manifestCode: '', manifestFailure: null, appSlug: null };
+      live = { instStatus: null, addrReady: false, manifest: null, manifestMsg: '', manifestCode: '', manifestFailure: null, appSlug: null, setup: null, installUrl: null };
       lastStepsHtml = '';
       lastProgHtml = '';
       hopReset();
@@ -7320,6 +7401,11 @@ summary{min-height:24px;padding:3px 0;}
         resetForNewProject();
         /* the deliberate goodbye: the record goes too, so nothing offers to resume
            the project the founder has just said they are finished watching */
+        try {
+          var gone = createdRecord();
+          if (gone && gone.id) sessionStorage.setItem(DECLINED_KEY, String(gone.id));
+        } catch (e) {}
+        serverRecord = null;
         try { sessionStorage.removeItem(CREATED_KEY); } catch (e) {}
         paintResumeOffer(null);
         show(1, true);
@@ -7722,7 +7808,8 @@ summary{min-height:24px;padding:3px 0;}
       var list = $('humanSteps'), st = $('ghState');
       if (!list || !st) return;
       if (state.step !== 2) { st.textContent = 'opens once your project exists'; return; }
-      var items = Array.prototype.slice.call(list.children);
+      /* the optional step (command-line sign-in) never holds "connected" back */
+      var items = Array.prototype.slice.call(list.children).filter(function (li) { return !li.classList.contains('soptional'); });
       var done = items.filter(function (li) { return li.classList.contains('sdone'); }).length;
       st.textContent = items.length && done === items.length ? 'connected ✓'
         : manifestInFlight() ? 'waiting on GitHub…'
@@ -7762,8 +7849,11 @@ summary{min-height:24px;padding:3px 0;}
     })();
 
     /* ── the hub's three doors ── */
+    /* the server's resume answer (task 1004650), kept in memory too: a browser whose
+       storage throws still has the project it was handed */
+    var serverRecord = null;
     function createdRecord() {
-      try { return JSON.parse(sessionStorage.getItem(CREATED_KEY) || 'null'); } catch (e) { return null; }
+      try { return JSON.parse(sessionStorage.getItem(CREATED_KEY) || 'null') || serverRecord; } catch (e) { return serverRecord; }
     }
     /* The "still watching …" offer above step 1 (task 1003503). Its markup is baked
        into the panel, so this only names the project and shows or hides the line —
@@ -7828,6 +7918,12 @@ summary{min-height:24px;padding:3px 0;}
       /* restore the opt-out too — without it resolvedDomain() re-derives the
          assigned address and the done panel promises one that doesn't exist */
       state.noAddress = !!created.noaddr;
+      /* a record the server handed over (another device, a fresh tab) carries the repo
+         the project is on, so the install step names it (task 1004650) */
+      if (created.repo_ref && !state.repo) {
+        var rr = String(created.repo_ref).split('/');
+        if (rr.length === 2) { state.owner = rr[0]; state.repo = rr[1]; }
+      }
       /* a hand-back from the callback page names the attempt GitHub just approved */
       if (handbackState) {
         created.manifest_state = handbackState;
@@ -7850,9 +7946,54 @@ summary{min-height:24px;padding:3px 0;}
        identity settles it shows the draft step optimistically (the page stays
        usable while /me is in flight — the boot's own rule); onAuth() re-enters
        once the answer lands. Focus only moves on a deliberate nav (the flag). */
+    /* askServerResume(focus) — which project is this founder connecting, by the SERVER's
+       view, when this tab cannot say (task 1004650)? Asked once per page load. A hand-back
+       names its project (handbackProject, from the return route): it always lands on that
+       project's part 03, and only its owner gets an answer. With no name, the server picks
+       the founder's newest project whose GitHub is not connected yet: an arrival lands on
+       it unless something is being typed, and a deliberate "New project" only offers it on
+       the resume line. Nothing found → the page as it was. */
+    var resumeAsked = false;
+    function recordFromServer(p) {
+      return { id: p.id, slug: p.slug || '', name: p.slug || '', domain: p.domain || '', noaddr: !p.domain,
+        mode: p.onboard_mode === 'adopt' ? 'adopt' : 'greenfield', repo_ref: p.repo || null, at: Date.now(), from_server: true };
+    }
+    function askServerResume(focus) {
+      resumeAsked = true;
+      var named = handbackProject;
+      handbackProject = null;
+      return fetch(API + '/provisioning/github-app/resume' + (named ? '?id=' + encodeURIComponent(named) : ''), { credentials: 'same-origin' })
+        .then(function (res) { return res.ok ? res.json() : null; })
+        .catch(function () { return null; })
+        .then(function (d) {
+          var p = d && d.project;
+          var had = createdRecord();
+          if (!p || !p.id || (!named && had && had.id)) { if (named) enter(focus); return; }
+          var declined = null;
+          try { declined = sessionStorage.getItem(DECLINED_KEY); } catch (e) {}
+          if (!named && declined === String(p.id)) return;
+          var rec = recordFromServer(p);
+          /* the same project this tab already knew keeps what it knew (a demo's teammates) */
+          if (had && String(had.id) === String(p.id)) rec = Object.assign({}, had, rec, { name: had.name || rec.name });
+          else if (had && had.id) resetForNewProject();   /* a hand-back for a different project */
+          serverRecord = rec;
+          try { sessionStorage.setItem(CREATED_KEY, JSON.stringify(rec)); } catch (e) {}
+          if (currentView !== 'new') return;
+          if (named || (!focus && !String(state.name || '').trim())) { resumeIntent = true; enterCreated(rec, false); }
+          else paintResumeOffer(rec);
+        });
+    }
+
     function enter(focus) {
       if (authKnown && !me) { show(0, !!focus); return; }
       var created = authKnown ? createdRecord() : null;
+      /* this tab cannot say which project — ask the server (task 1004650). A named
+         hand-back waits for that answer instead of painting another project first. */
+      if (authKnown && !resumeAsked && (handbackProject || !(created && created.id))) {
+        var waitForIt = !!handbackProject;
+        askServerResume(!!focus);
+        if (waitForIt) return;
+      }
       /* A draft on the page (step 1) beside a stored create is a SECOND project being
          typed. A reload or a GitHub round-trip (repo access) is that same visit
          continuing, so the draft keeps its place and the earlier project stays one

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.93",
+  "version": "1.21.95",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.21.93",
+      "version": "1.21.95",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.93",
+  "version": "1.21.95",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -9388,5 +9388,17 @@
       "id": "1004657",
       "text": "When a project votes that a part of its government is decided by a group, that vote now holds on every page, not only the People page. Before, someone with the right permission could still switch unattended building on, sign o"
     }
+  ],
+  "1.21.94": [
+    {
+      "id": "1004649",
+      "text": "Connecting GitHub to a new project is now one trip. The founder clicks \"Connect GitHub\", approves the project's app on GitHub, and GitHub carries straight on to installing it on their repo (already picked when the repo is publ"
+    }
+  ],
+  "1.21.95": [
+    {
+      "id": "1004650",
+      "text": "Connecting GitHub no longer depends on staying in one browser tab. After you approve on GitHub, even on your phone or in another window, you land back on your own project's GitHub checklist. Our server remembers which project"
+    }
   ]
 }

package/scripts/gds/oauth-secret.js

@@ -172,12 +172,14 @@ function main() {
   cp.execSync(`systemctl restart ${slug}`, { stdio: 'inherit' });
   console.log(`✓ restarted ${slug}`);
 
-  // (3) VERIFY — probe /healthz for auth_configured (retry briefly for restart).
+  // (3) VERIFY — probe the JSON health answer for auth_configured (retry briefly for
+  // restart). /api/bongos/healthz, not the root /healthz, which answers a plain "ok"
+  // that never parses (task 1004577).
   if (!port) { console.error('✖ no PORT in web.env and no --port given — cannot probe /healthz'); process.exit(1); }
   let probe = { authConfigured: false };
   for (let i = 0; i < 10; i++) {
     try {
-      const out = cp.execSync(`curl -sS --max-time 5 http://127.0.0.1:${port}/healthz`, { stdio: ['ignore', 'pipe', 'pipe'] }).toString();
+      const out = cp.execSync(`curl -sS --max-time 5 http://127.0.0.1:${port}/api/bongos/healthz`, { stdio: ['ignore', 'pipe', 'pipe'] }).toString();
       probe = parseHealthzAuth(out);
       if (probe.ok || probe.authConfigured) break;
     } catch { /* not up yet */ }