@bongos/core 1.24.57 → 1.24.59

package/docs/copy-registry.json

@@ -3,17 +3,17 @@
   "generator": "scripts/bongos/copy-inventory.js",
   "goal": 1000074,
   "counts": {
-    "strings": 3138,
-    "unique_ids": 2480,
-    "certain": 3138,
+    "strings": 3132,
+    "unique_ids": 2475,
+    "certain": 3132,
     "heuristic": 0,
-    "duplicate_ids": 261
+    "duplicate_ids": 260
   },
   "surfaces": {
     "builders-hall": {
       "at": "modules/hall-ui/public",
       "files": 171,
-      "strings": 2028
+      "strings": 2022
     },
     "status-dashboard": {
       "at": "modules/status-ui/public",
@@ -1081,8 +1081,8 @@
       "text": "A new version of Bongos is ready",
       "occurrences": 2,
       "at": [
-        "modules/hall-ui/public/update-pill.js:247",
-        "modules/hall-ui/public/update-pill.js:278"
+        "modules/hall-ui/public/update-pill.js:246",
+        "modules/hall-ui/public/update-pill.js:270"
       ]
     },
     {
@@ -1165,16 +1165,6 @@
         "modules/hall-ui/public/goals-render.js:1039"
       ]
     },
-    {
-      "id": "1ac8ed08e067",
-      "surface": "builders-hall",
-      "text": "Ask for this upgrade",
-      "occurrences": 2,
-      "at": [
-        "modules/hall-ui/public/settings-software-update.js:103",
-        "modules/hall-ui/public/settings-software-update.js:283"
-      ]
-    },
     {
       "id": "688cc6dd38ee",
       "surface": "builders-hall",
@@ -1252,7 +1242,7 @@
       "occurrences": 2,
       "at": [
         "modules/hall-ui/public/core-move-notice.js:48",
-        "modules/hall-ui/public/update-pill.js:236"
+        "modules/hall-ui/public/update-pill.js:235"
       ]
     },
     {
@@ -2591,8 +2581,8 @@
       "text": "bongos upgrade",
       "occurrences": 2,
       "at": [
-        "modules/hall-ui/public/settings-software-update.js:122",
-        "modules/hall-ui/public/update-pill.js:274"
+        "modules/hall-ui/public/settings-software-update.js:85",
+        "modules/hall-ui/public/update-pill.js:266"
       ]
     },
     {
@@ -3412,7 +3402,7 @@
       "surface": "builders-hall",
       "text": "A new version of Bongos is ready",
       "file": "modules/hall-ui/public/update-pill.js",
-      "line": 247,
+      "line": 246,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -3421,7 +3411,7 @@
       "surface": "builders-hall",
       "text": "A new version of Bongos is ready",
       "file": "modules/hall-ui/public/update-pill.js",
-      "line": 278,
+      "line": 270,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -4109,33 +4099,6 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
-    {
-      "id": "76fc7f5961dd",
-      "surface": "builders-hall",
-      "text": "Ask for this update",
-      "file": "modules/hall-ui/public/update-pill.js",
-      "line": 272,
-      "origin": "js-markup",
-      "confidence": "certain"
-    },
-    {
-      "id": "1ac8ed08e067",
-      "surface": "builders-hall",
-      "text": "Ask for this upgrade",
-      "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 103,
-      "origin": "js-markup",
-      "confidence": "certain"
-    },
-    {
-      "id": "1ac8ed08e067",
-      "surface": "builders-hall",
-      "text": "Ask for this upgrade",
-      "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 283,
-      "origin": "js-text-assign",
-      "confidence": "certain"
-    },
     {
       "id": "fa86bf403775",
       "surface": "builders-hall",
@@ -4519,7 +4482,7 @@
       "surface": "builders-hall",
       "text": "Bongos is updated",
       "file": "modules/hall-ui/public/update-pill.js",
-      "line": 236,
+      "line": 235,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -4915,7 +4878,7 @@
       "surface": "builders-hall",
       "text": "Checking for a newer version…",
       "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 292,
+      "line": 225,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -5563,7 +5526,7 @@
       "surface": "builders-hall",
       "text": "Could not check for a newer version: {…}.",
       "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 214,
+      "line": 177,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -5572,7 +5535,7 @@
       "surface": "builders-hall",
       "text": "Could not check for updates: {…}.",
       "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 302,
+      "line": 235,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -6125,15 +6088,6 @@
       "origin": "js-notice",
       "confidence": "certain"
     },
-    {
-      "id": "5d2e5fb4c8b5",
-      "surface": "builders-hall",
-      "text": "Could not send the request: {…}.",
-      "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 284,
-      "origin": "js-text-assign",
-      "confidence": "certain"
-    },
     {
       "id": "1f4d9a989606",
       "surface": "builders-hall",
@@ -7871,15 +7825,6 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
-    {
-      "id": "3c24eedc9f2d",
-      "surface": "builders-hall",
-      "text": "If that page does not let you in, ask {…} to install it for you.{…}",
-      "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 102,
-      "origin": "js-markup",
-      "confidence": "certain"
-    },
     {
       "id": "65977bbcda48",
       "surface": "builders-hall",
@@ -8191,7 +8136,7 @@
       "surface": "builders-hall",
       "text": "Its notes could not be read.",
       "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 150,
+      "line": 113,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -9694,7 +9639,7 @@
       "surface": "builders-hall",
       "text": "No changes are listed for this version.",
       "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 152,
+      "line": 115,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -9829,7 +9774,7 @@
       "surface": "builders-hall",
       "text": "No notes were packed for this version.",
       "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 151,
+      "line": 114,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10540,7 +10485,7 @@
       "surface": "builders-hall",
       "text": "Nothing needs doing. The next version will be offered here when it is out.",
       "file": "modules/hall-ui/public/update-pill.js",
-      "line": 219,
+      "line": 218,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10810,7 +10755,7 @@
       "surface": "builders-hall",
       "text": "Only the people allowed to update this project can start it.",
       "file": "modules/hall-ui/public/update-pill.js",
-      "line": 276,
+      "line": 268,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10819,7 +10764,7 @@
       "surface": "builders-hall",
       "text": "Only the people allowed to upgrade this project see an Update button here.",
       "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 117,
+      "line": 80,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10999,7 +10944,7 @@
       "surface": "builders-hall",
       "text": "Open the update window",
       "file": "modules/hall-ui/public/update-pill.js",
-      "line": 402,
+      "line": 393,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -11980,7 +11925,7 @@
       "surface": "builders-hall",
       "text": "Reading what it brings…",
       "file": "modules/hall-ui/public/update-pill.js",
-      "line": 249,
+      "line": 248,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -12043,7 +11988,7 @@
       "surface": "builders-hall",
       "text": "Recent updates",
       "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 199,
+      "line": 162,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -12844,7 +12789,7 @@
       "surface": "builders-hall",
       "text": "See where it got to",
       "file": "modules/hall-ui/public/update-pill.js",
-      "line": 233,
+      "line": 232,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -13186,7 +13131,7 @@
       "surface": "builders-hall",
       "text": "Show {…} more version{…}",
       "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 168,
+      "line": 131,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -14671,7 +14616,7 @@
       "surface": "builders-hall",
       "text": "The newest version did not go in",
       "file": "modules/hall-ui/public/update-pill.js",
-      "line": 218,
+      "line": 217,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -14806,7 +14751,7 @@
       "surface": "builders-hall",
       "text": "The release notes could not be read: {…}. The versions are still listed.",
       "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 164,
+      "line": 127,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -15085,7 +15030,7 @@
       "surface": "builders-hall",
       "text": "The update did not go in",
       "file": "modules/hall-ui/public/update-pill.js",
-      "line": 241,
+      "line": 240,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -15463,7 +15408,7 @@
       "surface": "builders-hall",
       "text": "This project is updated on the server that runs it:",
       "file": "modules/hall-ui/public/update-pill.js",
-      "line": 274,
+      "line": 266,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -15472,16 +15417,7 @@
       "surface": "builders-hall",
       "text": "This project is upgraded on the server that runs it:",
       "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 122,
-      "origin": "js-markup",
-      "confidence": "certain"
-    },
-    {
-      "id": "53e287924841",
-      "surface": "builders-hall",
-      "text": "This project runs on a server that {…} looks after, so they install its updates. Ask them for this one and they are told which version you want.{…}",
-      "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 101,
+      "line": 85,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -15832,7 +15768,7 @@
       "surface": "builders-hall",
       "text": "Up to date",
       "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 223,
+      "line": 186,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -15859,7 +15795,7 @@
       "surface": "builders-hall",
       "text": "Update now",
       "file": "modules/hall-ui/public/update-pill.js",
-      "line": 265,
+      "line": 264,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -15877,7 +15813,7 @@
       "surface": "builders-hall",
       "text": "Update to {…}",
       "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 134,
+      "line": 97,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -15886,7 +15822,7 @@
       "surface": "builders-hall",
       "text": "Updating Bongos",
       "file": "modules/hall-ui/public/update-pill.js",
-      "line": 229,
+      "line": 228,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -16039,7 +15975,7 @@
       "surface": "builders-hall",
       "text": "Waiting for your hall…",
       "file": "modules/hall-ui/public/deploy-handoff.js",
-      "line": 185,
+      "line": 190,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -16525,7 +16461,7 @@
       "surface": "builders-hall",
       "text": "What's new",
       "file": "modules/hall-ui/public/update-pill.js",
-      "line": 279,
+      "line": 271,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -16984,7 +16920,7 @@
       "surface": "builders-hall",
       "text": "You can keep working or close this card. The button up top says when it is done.",
       "file": "modules/hall-ui/public/update-pill.js",
-      "line": 232,
+      "line": 231,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -17758,7 +17694,7 @@
       "surface": "builders-hall",
       "text": "bongos upgrade",
       "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 122,
+      "line": 85,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -17767,7 +17703,7 @@
       "surface": "builders-hall",
       "text": "bongos upgrade",
       "file": "modules/hall-ui/public/update-pill.js",
-      "line": 274,
+      "line": 266,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -19783,7 +19719,7 @@
       "surface": "builders-hall",
       "text": "there takes this version, and puts the old one back if it fails.",
       "file": "modules/hall-ui/public/update-pill.js",
-      "line": 274,
+      "line": 266,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -19792,7 +19728,7 @@
       "surface": "builders-hall",
       "text": "there takes this version, with the same health check and rollback.",
       "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 122,
+      "line": 85,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -21070,7 +21006,7 @@
       "surface": "builders-hall",
       "text": "…and {…} older version{…}, also in this update.",
       "file": "modules/hall-ui/public/settings-software-update.js",
-      "line": 169,
+      "line": 132,
       "origin": "js-markup",
       "confidence": "certain"
     },

package/docs/module-api-changelog.md

@@ -3368,5 +3368,9 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.24.55 with no explicit bump. run 42377334765. (task 1002620)
   1.24.57 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.24.56 with no explicit bump. run 42379442367. (task 1002620)
+  1.24.58 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.24.57 with no explicit bump. run 42380593295. (task 1002620)
+  1.24.59 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.24.58 with no explicit bump. run 42385816081. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/docs/page-readings.json

@@ -604,7 +604,7 @@
       "surface": "builders",
       "title": "Deploy",
       "states_read": ["work","out"],
-      "files_hash": "4eaabd84e23eb547",
+      "files_hash": "6ccbad19e9cf90ba",
       "reading_hash": "76c11d0fbc739610",
       "counts": {"lines":19,"placed":5,"shared":9,"unplaced":5},
       "omitted": {"data":3},
@@ -2449,7 +2449,7 @@
       "surface": "builders",
       "title": "Settings",
       "states_read": ["account","access","preferences","install-reports","sound","update"],
-      "files_hash": "215b1a40406eb8bd",
+      "files_hash": "4d3149b035f9551d",
       "reading_hash": "085bb32894909ee0",
       "counts": {"lines":137,"placed":90,"shared":9,"unplaced":38},
       "omitted": {"data":16},
@@ -2474,14 +2474,14 @@
         {"key":"L0017","section":"Software update","text":"Newest for this project","placement":"unplaced","state":"update"},
         {"key":"L0018","section":"Software update","text":"— published 21 hours ago","placement":"unplaced","state":"update"},
         {"key":"L0019","section":"Software update","text":"Update ready","placement":"unplaced","state":"update"},
-        {"key":"L0020","section":"Software update","text":"Update to {…}","placement":"placed","file":"modules/hall-ui/public/settings-software-update.js","line":134,"string_id":"5304b52c592d","state":"update"},
+        {"key":"L0020","section":"Software update","text":"Update to {…}","placement":"placed","file":"modules/hall-ui/public/settings-software-update.js","line":97,"string_id":"5304b52c592d","state":"update"},
         {"key":"L0021","section":"Software update","text":"{…} and {…}","placement":"placed","file":"modules/hall-ui/public/profile-nudge.js","line":77,"string_id":"56b00d773232","state":"update"},
         {"key":"L0022","section":"What's new in these 7 versions","text":"What's new in these 7 versions","placement":"unplaced","state":"update"},
         {"key":"L0023","section":"What's new in these 7 versions","text":"published 21 hours ago","placement":"unplaced","state":"update"},
         {"key":"L0024","section":"What's new in these 7 versions","text":"{…} and {…}","placement":"placed","file":"modules/hall-ui/public/profile-nudge.js","line":77,"string_id":"56b00d773232","state":"update","occurrences":8},
         {"key":"L0025","section":"What's new in these 7 versions","text":"published 28 hours ago","placement":"unplaced","state":"update","occurrences":4},
         {"key":"L0026","section":"What's new in these 7 versions","text":"{…} of {…}","placement":"placed","file":"modules/hall-ui/public/sky-panel.js","line":120,"string_id":"73c1372b43d9","state":"update"},
-        {"key":"L0027","section":"What's new in these 7 versions","text":"Show {…} more version{…}","placement":"placed","file":"modules/hall-ui/public/settings-software-update.js","line":168,"string_id":"44945da22716","state":"update"},
+        {"key":"L0027","section":"What's new in these 7 versions","text":"Show {…} more version{…}","placement":"placed","file":"modules/hall-ui/public/settings-software-update.js","line":131,"string_id":"44945da22716","state":"update"},
         {"key":"L0028","section":"What's new in these 7 versions","text":"Checked 20 hours ago.","placement":"unplaced","state":"update"},
         {"key":"L0029","section":"footer","text":"Sign out","placement":"shared","file":"modules/hall-ui/public/shell.js","line":533,"string_id":"1883ad7f07fc","state":"update","occurrences":5},
         {"key":"L0030","section":"What's new in these 7 versions","text":"Could not load your security cards: {…}","placement":"placed","file":"modules/hall-ui/public/settings-passkeys.js","line":112,"string_id":"9e77d71db3ec","state":"update"},
@@ -5031,7 +5031,7 @@
       "surface": "status",
       "title": "{{productName}} — build status",
       "states_read": ["loaded"],
-      "files_hash": "10ee56cc01853b2d",
+      "files_hash": "5b546389375906c5",
       "reading_hash": "5abba39cf5ec9226",
       "counts": {"lines":66,"placed":47,"shared":9,"unplaced":10},
       "omitted": {"data":90},

package/docs/recipes/ops-gotchas.md

@@ -276,11 +276,11 @@ Inside the namespace the file lists as `---------- 1 root root 0`. The runner un
 
 ### The live status page is NOT served by the droplet — editing the status surface + deploying does nothing
 
-> **Path note (BV1.R84):** the status surface moved from `public-status/` to `modules/status-ui/public/` (carved to the `status-ui` web-surface module). Everything below applies at the new path; `scripts/status-mirror-sync.js` was re-pointed. **Open follow-up:** `.github/workflows/sync-status-mirror.yml` still triggers on `public-status/**` and must be re-pointed at `modules/status-ui/public/**` by an owner/Archon (the GitHub App can't push `.github/workflows/*`, learning 107) — until then the auto-sync won't fire and you must run the script by hand.
+> **Path note (BV1.R84):** the status surface moved from `public-status/` to `modules/status-ui/public/` (carved to the `status-ui` web-surface module). Everything below applies at the new path; `scripts/status-mirror-sync.js` was re-pointed. **No auto-sync:** `.github/workflows/sync-status-mirror.yml` is not in this repo and nothing in CI runs the sync — you must run the script by hand (task 1005131).
 
 - **Symptom:** you change `modules/status-ui/public/`, deploy to the droplet, the origin serves the new page (verified via `curl` on the box), but `status.example.com` keeps showing the old version. Purging Cloudflare doesn't help.
 - **Root cause:** the off-box move (ADR 0029) repointed `status.example.com` DNS at **GitHub Pages from the separate repo `example-owner/example-status`** (served by Fastly — headers say `server: GitHub.com`, `via: varnish`, **no `cf-*` headers** → Cloudflare isn't even in the path). The droplet still serves `modules/status-ui/public/` as a same-origin fallback, but the public DNS goes to Pages. There was no sync, so droplet edits never reached the live page.
-- **Fix:** publish to the mirror with `node scripts/status-mirror-sync.js --repo-dir <mirror-checkout> --push` — or (once the workflow trigger is re-pointed, see the path note above) let `.github/workflows/sync-status-mirror.yml` do it on push (needs the `STATUS_MIRROR_TOKEN` repo secret). `status.js`/`style.css`/`cursors/` are byte-identical copies (the one off-box difference, the API base, is injected via `window.STATUS_API_BASE` in the mirror's `index.html`); the sync injects the off-box banner + API-base script into `index.html` at fixed anchors and **throws if an anchor is missing** rather than mis-publishing. GitHub Pages purges its own Fastly cache on deploy, so the live page updates ~1 min after the Pages build goes green (`gh api repos/example-owner/example-status/pages/builds/latest`). ([#737](https://example.com/builders#/task/737))
+- **Fix:** publish to the mirror with `node scripts/status-mirror-sync.js --repo-dir <mirror-checkout> --push` (by hand — no workflow runs it, see the path note above). `status.js`/`style.css`/`cursors/` are byte-identical copies (the one off-box difference, the API base, is injected via `window.STATUS_API_BASE` in the mirror's `index.html`); the sync injects the off-box banner + API-base script into `index.html` at fixed anchors and **throws if an anchor is missing** rather than mis-publishing. GitHub Pages purges its own Fastly cache on deploy, so the live page updates ~1 min after the Pages build goes green (`gh api repos/example-owner/example-status/pages/builds/latest`). ([#737](https://example.com/builders#/task/737))
 - **Why it bites:** the origin looks correct at every layer you can `curl` from the box, so you chase a phantom cache on the wrong CDN. The tell is the response headers — `server: GitHub.com` + Fastly, not `cloudflare`.
 
 ---

package/modules/hall-ui/public/deploy-handoff.js

@@ -168,8 +168,13 @@
       if (e && e.status === 403) return read('/provisioning/instances').then(function (d) { return d.instances || []; });
       throw e;
     }).then(function (rows) {
-      for (var i = 0; i < rows.length; i++) if (rows[i] && String(rows[i].slug) === slug) inst = rows[i];
+      var byHost = !scopeBy(root.location, 'project') && !!scopeBy(root.location, 'host');
+      for (var i = 0; i < rows.length; i++) {
+        var r = rows[i];
+        if (r && (byHost ? String(r.domain || '').trim().toLowerCase() === String(slug).toLowerCase() : String(r.slug) === slug)) inst = r;
+      }
       if (!inst) throw new Error('No project called ' + slug + ' is hosted here under your account.');
+      slug = String(inst.slug || slug);
       allowed = projectOrigin(inst, root.location.protocol);
       return read('/provisioning/instances/' + encodeURIComponent(inst.id) + '/core-upgrade');
     }).then(function (d) {
@@ -190,12 +195,15 @@
     });
   }
 
-  function scopeSlug(loc) {
+  var SCOPE_RE = { project: /[?&]project=([^&#]+)/, host: /[?&]host=([^&#]+)/ };
+  function scopeBy(loc, name) {
     try {
-      var m = /[?&]project=([^&#]+)/.exec(String((loc && loc.search) || ''));
+      var m = SCOPE_RE[name].exec(String((loc && loc.search) || ''));
       return m ? decodeURIComponent(m[1]) : null;
     } catch (e) { return null; }
   }
+  // ?host=<address> scopes by the project's web address (task 1005128), as ?project= does by name.
+  function scopeSlug(loc) { return scopeBy(loc, 'project') || scopeBy(loc, 'host'); }
 
   var api = { wanted: wanted, run: run, judgeGo: judgeGo, projectOrigin: projectOrigin, MSG: MSG };
   if (typeof module !== 'undefined' && module.exports) module.exports = api;

package/modules/hall-ui/public/deploy.js

@@ -806,13 +806,17 @@
   // READ OFF `location`, DEFENSIVELY. The page runs in a vm harness whose `window.location`
   // is a stub with no `search`, and a page that threw there would be untestable — but the
   // deeper reason is that a missing scope is the ORDINARY case and must cost nothing.
-  function scopeSlug() {
+  const SCOPE_RE = { project: /[?&]project=([^&#]+)/, host: /[?&]host=([^&#]+)/ };
+  function scopeParam(name) {
     try {
       const q = String((window.location && window.location.search) || '');
-      const m = /[?&]project=([^&#]+)/.exec(q);
+      const m = SCOPE_RE[name].exec(q);
       return m ? decodeURIComponent(m[1]) : null;
     } catch (e) { return null; }
   }
+  // ?host=<address> is the same scope by the project's web address (task 1005128): a hosted
+  // project whose server never learned its slug sends its owner here by the name it answers on.
+  function scopeSlug() { return scopeParam('project') || scopeParam('host'); }
 
   // Resolve a scoped slug to the instance the control plane knows by that name.
   //
@@ -822,6 +826,7 @@
   // row survives it, and the pin move is gated server-side per instance regardless — the
   // slug decides what is looked at, never what is allowed.
   async function findBySlug(slug) {
+    const byHost = !scopeParam('project') && !!scopeParam('host');
     let rows = [];
     try {
       rows = (await fetchJson('/provisioning/fleet')).instances || [];
@@ -829,7 +834,8 @@
       if (e && e.kind !== '403') throw e;
       rows = (await fetchJson('/provisioning/instances')).instances || [];
     }
-    return rows.find((i) => i && String(i.slug) === slug) || null;
+    const want = String(slug).toLowerCase();
+    return rows.find((i) => i && (byHost ? String(i.domain || '').trim().toLowerCase() === want : String(i.slug) === slug)) || null;
   }
 
   // A Render project's hall has no provisioning door (task 1004270): its /deploy page is the
@@ -866,6 +872,7 @@
           // renders nothing reads as a project with nothing to deploy.
           view.unreadable = 'no project by that name is hosted here.';
         } else {
+          view.name = String(inst.slug || slug);
           try {
             view.box = (await fetchJson(`/provisioning/instances/${inst.id}/core-upgrade`)).preview;
           } catch (e) {