@bongos/core 1.24.76 → 1.24.77

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/bongos/package-core.js",
-  "core_version": "1.24.76",
-  "core_contract": "1.24.76",
-  "source_commit": "2bbf5fc6aa56831623542e4e5e21eb82d0ec565e",
+  "core_version": "1.24.77",
+  "core_contract": "1.24.77",
+  "source_commit": "173fce6916dbd53657d18e5f132ff3b3540d647b",
   "source_ref": "HEAD",
-  "built_at": "2026-11-10T00:02:08.746Z",
+  "built_at": "2026-11-10T01:28:52.098Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 639,
     "agent_docs_stubbed": 32,
-    "functional_verbatim": 3920,
+    "functional_verbatim": 3927,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 4592,
-  "tree_sha256": "39b643b66343f5765016c84fe0eb536d718f516a21264ea4fed1d120e344c368",
+  "file_count": 4599,
+  "tree_sha256": "44e851fe33c0399bd0bb45be9fcb39e837ca19041fbc1b0f7231fa40d101a3f9",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -2012,7 +2012,7 @@
     {
       "path": "docs/adr/0307-autobongos-a-deterministic-supervisor-and-agentic-workers.md",
       "mode": "0000644",
-      "sha256": "63031806792dd0ba4a8924d7bf73053dad1045633a9de29d1327866527799d69"
+      "sha256": "a83d794a07569c0490894d5889c8616ceb4e973ca6879e3e68a3b1e7ad784bda"
     },
     {
       "path": "docs/adr/0308-an-eleventh-working-area.md",
@@ -3007,7 +3007,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "45d2223305c6f77d97b989f3c97759555cc4c790eb905601b3b8ba6c76c4cf18"
+      "sha256": "06cdc4704a3ea353cb13e35c2be7fb6f3ac9e87b84cf8b870e09b7086a1165ef"
     },
     {
       "path": "docs/modules-contract.md",
@@ -4542,7 +4542,7 @@
     {
       "path": "modules/autonomy/gauge.js",
       "mode": "0000644",
-      "sha256": "cb534feb4dc4c55d941973e5918c58ccc07a13a50b9a4a50ef6c7370420330b1"
+      "sha256": "aa4987901ee688fc9f33b5a81058bfe70a79df8bf8a5c720e42de0a21a8dafdb"
     },
     {
       "path": "modules/autonomy/governor-docket.js",
@@ -11947,12 +11947,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "c155b0b7a1b2435d38d085ee0b88504031ed463eb7bd6f5de82b1c6aa459e271"
+      "sha256": "3407de417eaa11f0f2234084d5355de1f4113089bea94c3c85b94c510ae46874"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "3fb08cfc1ebf6b0719b4f826b9b4e317ac3419bae8c9032a14f3684308ea3b38"
+      "sha256": "f9e06cafeea2ebf151c36023bda87156efafd3965ec1245e8781072ac4f51134"
     },
     {
       "path": "public-docs/index.html",
@@ -11972,7 +11972,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "6bb5daade7507fe469acc3b41fecb047261fcbf2c99496dd31f6a62aeb9ef84a"
+      "sha256": "99def2fcf254ad4bcfca53ce46e3c21ee8ab543c9f84a4e676864b94cb91d2a3"
     },
     {
       "path": "scripts/bongos/CLAUDE.md",
@@ -12089,6 +12089,16 @@
       "mode": "0000644",
       "sha256": "d2a3106b277543f052fd37cc967dcc9d2942f8b782806b30efc2238c40d4780d"
     },
+    {
+      "path": "scripts/bongos/autobongos-bootstrap.ps1",
+      "mode": "0000644",
+      "sha256": "712801bf62bb00d07de067659f5a0df13dd57623e03ce5869bbaf33edc3ac083"
+    },
+    {
+      "path": "scripts/bongos/autobongos-bootstrap.sh",
+      "mode": "0000755",
+      "sha256": "3a919b371e76491935049a90196d95600b3c953e4ce04c9ed77a0274b1ec0afb"
+    },
     {
       "path": "scripts/bongos/autobongos-digest.js",
       "mode": "0000644",
@@ -12099,6 +12109,11 @@
       "mode": "0000644",
       "sha256": "9fcb0b301b6889dbd5da8b11a4ffbe579229663a481b3ece4a4feb5df5d2885c"
     },
+    {
+      "path": "scripts/bongos/autobongos-host.js",
+      "mode": "0000755",
+      "sha256": "25141335ab8a56b9c2897f5cd7bdcaf1e97294d9dcb21359dbeb220146fe524e"
+    },
     {
       "path": "scripts/bongos/autobongos-loop.js",
       "mode": "0000644",
@@ -12107,7 +12122,7 @@
     {
       "path": "scripts/bongos/autobongos-run.js",
       "mode": "0000644",
-      "sha256": "4a4db82b0d110c8e790f230d63ea2ba8e54327d6c3c94a0256bdf45cd1126d6d"
+      "sha256": "f7ca5670e45a5f1cbdee91868e364e9e933b7a0ec1764f98634be500df4ba0e2"
     },
     {
       "path": "scripts/bongos/autobongos-service.cmd",
@@ -12142,7 +12157,7 @@
     {
       "path": "scripts/bongos/autonomy-gauge.js",
       "mode": "0000644",
-      "sha256": "f9be35a9a47983069b629e9b1d6bda987228a25121f524321dcd931e9e2c2214"
+      "sha256": "4047f967d935643220a383cca857b602e0e457ad21d71640aa4f233aa654c258"
     },
     {
       "path": "scripts/bongos/backfill-cost.js",
@@ -12247,7 +12262,7 @@
     {
       "path": "scripts/bongos/cli-lib.js",
       "mode": "0000644",
-      "sha256": "bbfd061637439ce86bd261fd39e243f1701247ea6669c7ae4775d1e59c94a3a9"
+      "sha256": "7f00d2ce761ee775341e21cce68e64b8346f2f2c4bcd5cd41b16b9e8404f926e"
     },
     {
       "path": "scripts/bongos/client-baseurl-guard.js",
@@ -13794,6 +13809,16 @@
       "mode": "0000644",
       "sha256": "a83480ea44a33424c2d0ef5832d99ecd66956ef47b0e5992fc39d4c2361a68ec"
     },
+    {
+      "path": "scripts/gds/autobongos-bootstrap.ps1",
+      "mode": "0000644",
+      "sha256": "c6eaeab922ba3da0c944f0ad7ecdba515f5935f49fbdcf6daf10afc60fd6ad94"
+    },
+    {
+      "path": "scripts/gds/autobongos-bootstrap.sh",
+      "mode": "0000644",
+      "sha256": "9dda7da8b15ee5c86e96ddb9a2ba5cfed6f64e70e7d7d2ed0b50e018a1c3f98e"
+    },
     {
       "path": "scripts/gds/autobongos-digest.js",
       "mode": "0000644",
@@ -13804,6 +13829,11 @@
       "mode": "0000644",
       "sha256": "9b4dd6e35b2eb252be774d29610c4ab3602ca2fc8babf1beecb4b30f35f50a9d"
     },
+    {
+      "path": "scripts/gds/autobongos-host.js",
+      "mode": "0000644",
+      "sha256": "5009910c0b169817139af01bf2a9ed0f7c120fd4088252eafdd533b314b49a3d"
+    },
     {
       "path": "scripts/gds/autobongos-loop.js",
       "mode": "0000644",
@@ -15927,7 +15957,7 @@
     {
       "path": "src/instance-config.js",
       "mode": "0000644",
-      "sha256": "b123541932f206894a652aebf64a13ed0794a4b44e68936a11d65bf49c7a2fc9"
+      "sha256": "379813150afa1aa6636a231dfa0f4534d6bdd55c09e88f42b71345467b1a527d"
     },
     {
       "path": "src/link-preview.js",
@@ -15937,7 +15967,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "82edc72fcfea9701d271efc5f6792fe8403d9af7a882b01808230539b1105e6d"
+      "sha256": "206b745de49507349a5db6f044f6b7a841d736ae399dbee94e847a5d45a12bcc"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -16494,6 +16524,11 @@
       "mode": "0000644",
       "sha256": "d2d6f12d2e1abc8485b50f2ae2fd89b408be676ef0044025e92252fd22c87fe8"
     },
+    {
+      "path": "tests/autobongos_host.mjs",
+      "mode": "0000644",
+      "sha256": "6f3f7a7c473403851c34e608472121a51f6db14c11bd9134aa9a0a8c6820b972"
+    },
     {
       "path": "tests/autobongos_host_access.mjs",
       "mode": "0000644",
@@ -16502,7 +16537,7 @@
     {
       "path": "tests/autobongos_loop.mjs",
       "mode": "0000644",
-      "sha256": "bf70586b9144fd5b162647ad08fb07c5a9c810a145ebf55fa7cc7c99e44c4a4f"
+      "sha256": "da645ffd57bd16423e7e5004472c8813d4e1f804579a2133f2f34ebfdbd02bee"
     },
     {
       "path": "tests/autobongos_runner_login.mjs",
@@ -16577,7 +16612,7 @@
     {
       "path": "tests/autonomy_gauge.mjs",
       "mode": "0000644",
-      "sha256": "45f7bb8abb53b6248bf8f9110599817767969d3c2df0844566d714ca5de3d854"
+      "sha256": "2c9497f481414f0d51a6c91658b70584dea5d0f6b2e1e8ecd718fccb985a2de2"
     },
     {
       "path": "tests/autonomy_runner_health.mjs",
@@ -16967,7 +17002,7 @@
     {
       "path": "tests/cli_sessions.mjs",
       "mode": "0000644",
-      "sha256": "55d72cc2926ab8574e290ca16e40702759c8c6b0453a8ebd4aa9f09ae77f880d"
+      "sha256": "d3b12216c23fb74a7646815e1d2c169164b16538b257dfeb503a2c5d0be7b835"
     },
     {
       "path": "tests/cli_surface.mjs",

package/docs/adr/0307-autobongos-a-deterministic-supervisor-and-agentic-workers.md

@@ -112,6 +112,36 @@ match the **exact worktree name the runner generates**, not an `autobongos-`
 prefix: the loose form matched a human's hand-named tree and released their live
 claim out from under them, twice, during the task that added it.
 
+**Any device, not one always-on PC** (task 1005095, goal 1000139; owner direction
+2026-11-09). The host above was written for a single Windows box: a scheduled task
+registered from an Administrator shell, started at boot. The owner's rule is now
+that the runner runs on any device, Windows or Mac, always-on or a laptop, from one
+button. Four decisions carry that, in `scripts/bongos/autobongos-host.js`:
+
+- **It starts at sign-in, as the person, with no administrator.** A per-user Run
+  entry on Windows and a per-user launchd agent on a Mac. Boot-time start needs an
+  elevated registration on Windows and cannot reach the login keychain on a Mac,
+  where the Claude sign-in lives; sign-in start needs neither. A laptop that
+  sleeps stops checking in and resumes when it wakes, and the hall already reads
+  silence as silence. The boot-time task stays as the opt-in for an always-on PC.
+- **One Node program replaces the `.cmd` wrapper on this path**, so Windows and
+  Mac cannot drift: refresh the runner's copy, launch the supervisor, relaunch on
+  its upgrade exit, restart after a crash with a growing wait. Stop and uninstall
+  watch the processes exit before saying so.
+- **The runner keeps its own files** (`BONGOS_CONFIG_ROOT`, passed on to every
+  worker). A runner's own login in the builder's one session slot would sign the
+  builder's own tools out; a root of its own also means the runner can never fall
+  back to the builder's session.
+- **A device with no gauge at all works until the usage limit** (`absentMeansGo`,
+  passed only by the supervisor). §2's writer is a terminal statusLine, so a
+  device whose owner uses the desktop app never has a reading, and "unknown, so
+  hold" left it armed and idle forever. This is the 2026-09-30 ruling — hit the
+  limit, wait for its reset, resume — with nothing to read first. A reading that
+  exists and cannot be vouched for still holds.
+
+The program hard-resets its checkout on every start, so it refuses to run anywhere
+but a copy the setup marked as the runner's own.
+
 ### 6. The fence, and where it is enforced
 
 The allowlist of goals lives in the database and is edited from the hall, never

package/docs/module-api-changelog.md

@@ -3402,5 +3402,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.24.73 with no explicit bump. run 42715090111. (task 1002620)
   1.24.76 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.24.74 with no explicit bump. run 42724956677. (task 1002620)
+  1.24.77 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.24.76 with no explicit bump. run 42735935883. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/autonomy/gauge.js

@@ -116,7 +116,12 @@ function reserveFor(nowEpochS, config = {}) {
 // decide identically and a caller that has to enumerate them will miss one.
 function readGauge(raw, nowEpochS, config = {}) {
   const c = cfg(config);
-  if (!raw || typeof raw !== 'object') return { known: false, reason: 'no gauge file — the statusline writer has never run' };
+  // `absent` marks the one shape that is not a bad reading but NO reading: this
+  // device has never had a gauge at all (see decideCapacity, task 1005095).
+  // Only NOTHING is absent. A file that is there but is not a gauge — torn, or
+  // not JSON — is a bad reading like any other, and must never read as "none".
+  if (raw === null || raw === undefined) return { known: false, absent: true, reason: 'no gauge file — the statusline writer has never run' };
+  if (typeof raw !== 'object') return { known: false, reason: 'the gauge file is there but cannot be read as a gauge' };
 
   const writtenAt = Number(raw.written_at);
   if (!Number.isFinite(writtenAt)) return { known: false, reason: 'gauge file has no readable written_at' };
@@ -239,6 +244,25 @@ function decideCapacity({ gauge, now, config = {} } = {}) {
   const c = cfg(config);
   const g = readGauge(gauge, now, c);
 
+  // A DEVICE WITH NO GAUGE AT ALL (task 1005095, owner direction 2026-11-09: the
+  // runner must run on any device from one button). The gauge's only writer is a
+  // terminal statusLine, so a laptop whose owner uses the desktop app, or a PC
+  // set up five minutes ago, has no file and never will — and "unknown, so hold"
+  // left such a runner armed, checking in and idle forever. The owner already
+  // ruled (2026-09-30, task 1004454) that running until the usage limit is hit
+  // and resuming at its reset is acceptable; a device with no gauge is that same
+  // bargain with nothing to read first. So when the CALLER asks for it
+  // (`absentMeansGo`, which only the supervisor passes), no file is a go, marked
+  // `absent` and `derived` so the log says which kind of go it was. Everything
+  // else that cannot be vouched for — malformed, future-dated, aged out inside a
+  // window still running — is still UNKNOWN, and the default is unchanged: the
+  // gauge CLI and any other caller never default to go.
+  if (!g.known && g.absent && c.absentMeansGo === true) {
+    return {
+      go: true, unknown: false, sleepUntil: null, absent: true, derived: true, derivedSince: null,
+      reason: 'no usage gauge on this device — working until the usage limit says stop, then waiting for its reset',
+    };
+  }
   if (!g.known) return { go: false, unknown: true, sleepUntil: null, reason: g.reason };
 
   if (g.sevenDay) {

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.24.76",
+  "version": "1.24.77",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.24.76",
+      "version": "1.24.77",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.24.76",
+  "version": "1.24.77",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -11487,5 +11487,11 @@
       "id": "1005121",
       "text": "Closing a project-setup stage is now one step: if the founder alone decides, the stage closes and the project moves on at once; if others must vote, the answer says who and what to do next instead of falsely reporting success."
     }
+  ],
+  "1.24.77": [
+    {
+      "id": "1005095",
+      "text": "The Autobongos runner can now be set up on any Windows PC or Mac, including a laptop, with no administrator step. One program installs it, starts it whenever you sign in to the device, keeps it running, updates it by itself, a"
+    }
   ]
 }

package/scripts/bongos/autobongos-bootstrap.ps1

@@ -0,0 +1,169 @@
+# scripts/bongos/autobongos-bootstrap.ps1 -- the first lines of Autobongos setup
+# on a Windows PC (tasks 1005095, 1005094; goal 1000139).
+#
+#   autobongos-bootstrap.ps1 -Code abr_... -ApiBase https://... -Repo https://github.com/owner/name
+#
+# and, as the hall hands it out, with no file on the PC at all:
+#
+#   & ([scriptblock]::Create((irm 'https://<project>/api/bongos/autonomy/runner-setup.ps1'))) -Code '...' -ApiBase '...' -Repo '...'
+#
+# WHY THIS IS POWERSHELL AND SO SHORT. Everything that sets a runner up is one
+# Node program (autobongos-host.js), the same on Windows and Mac. But Node cannot
+# install Node, and the program lives in a copy of the project that does not exist
+# yet. So this does only what must happen before Node can take over: find or
+# install git, Node and Claude Code, make the runner ITS OWN copy of the project,
+# and hand over. The hall serves this file and Settings puts the one-time code in
+# the command, so the person copies one line.
+#
+# NO ADMINISTRATOR SHELL. It runs as the person, in an ordinary PowerShell window.
+# winget may show Windows' own "allow this app to make changes" prompt while it
+# installs git or Node; that is the installer asking, not this script.
+#
+# EVERY STOP IS A SENTENCE. A failure it cannot fix itself ends with what
+# happened and what to do, never a stack trace. Safe to run again: each step
+# checks before it acts, and a copy that already exists is brought current
+# instead of cloned twice.
+#
+# IT NEVER CALLS exit WHEN IT WAS PASTED (task 1005094). Run as a script block --
+# which is how the pasted line runs it -- `exit` ends the PowerShell WINDOW, so
+# the person would see their window vanish instead of the sentence telling them
+# what to do. Every stop therefore unwinds to the bottom of this file, which
+# calls `exit` only when this is running as a file.
+
+[CmdletBinding()]
+param(
+  [string]$Code,
+  [string]$ApiBase,
+  [string]$Repo,
+  # Where the runner keeps its own files. One folder, so removing the runner is
+  # deleting it. $HOME, not $env:USERPROFILE: it is the same folder on Windows,
+  # and it also exists where this file is only ever tested (PowerShell on Linux
+  # has no USERPROFILE, and a null default stops the script before its first line).
+  [string]$RunnerHome = (Join-Path $HOME '.cloudbongos-runner'),
+  # Say what would be done and stop before changing anything.
+  [switch]$DryRun
+)
+
+$ErrorActionPreference = 'Stop'
+$StopMark = 'autobongos-setup-stopped'
+
+function Stop-Setup([string]$What, [string]$Fix) {
+  Write-Host ''
+  Write-Host "Autobongos setup stopped here: $What" -ForegroundColor Yellow
+  Write-Host "What to do: $Fix"
+  throw $StopMark
+}
+
+function Say([string]$Text) { Write-Host $Text }
+
+# A fresh install changes PATH in the registry, not in this window.
+function Update-PathFromRegistry {
+  $machine = [Environment]::GetEnvironmentVariable('Path', 'Machine')
+  $user = [Environment]::GetEnvironmentVariable('Path', 'User')
+  $env:Path = (@($machine, $user) | Where-Object { $_ }) -join ';'
+}
+
+function Test-Tool([string]$Name) { return [bool](Get-Command $Name -ErrorAction SilentlyContinue) }
+
+# Find a tool, or install it with winget and look again.
+function Assert-Tool([string]$Name, [string]$WingetId, [string]$Url) {
+  if (Test-Tool $Name) { Say "  found $Name"; return }
+  if ($DryRun) { Say "  would install $Name ($WingetId)"; return }
+  if (-not (Test-Tool 'winget')) {
+    Stop-Setup "$Name is not installed, and this PC has no winget to install it with." "Install $Name from $Url, open a new PowerShell window, and paste the setup command again."
+  }
+  Say "  installing $Name (Windows may ask you to allow it)..."
+  & winget install --id $WingetId -e --source winget --accept-package-agreements --accept-source-agreements --silent | Out-Null
+  Update-PathFromRegistry
+  if (-not (Test-Tool $Name)) {
+    Stop-Setup "$Name did not install." "Install $Name from $Url, open a new PowerShell window, and paste the setup command again."
+  }
+  Say "  installed $Name"
+}
+
+# The whole setup, in the open (not a function): what node and git print must
+# reach the person as it happens, and node must keep the keyboard for the Claude
+# sign-in. A stop it can explain throws $StopMark and lands in the catch below.
+$SetupExit = 1
+try {
+  if (-not $Code -or -not $ApiBase -or -not $Repo) {
+    Stop-Setup 'the setup command is incomplete.' 'Copy the whole command again from Settings > Your Autobongos runner.'
+  }
+  if ($Repo -notmatch '^https://[A-Za-z0-9.-]+/[A-Za-z0-9._/-]+$') {
+    Stop-Setup 'the project address in the command does not look right.' 'Copy the whole command again from Settings > Your Autobongos runner.'
+  }
+  # The one-time code is sent to this address and the runner's login comes back
+  # from it, so it must be https. Plain http is for this machine alone (a
+  # developer's own instance); autobongos-host.js applies the same rule again.
+  if ($ApiBase -notmatch '^https://[A-Za-z0-9.-]+(:\d+)?/?$' -and $ApiBase -notmatch '^http://(localhost|127\.0\.0\.1)(:\d+)?/?$') {
+    Stop-Setup "the project's address in the command is not a secure (https) address." 'Copy the whole command again from Settings > Your Autobongos runner.'
+  }
+
+  Say 'Setting this PC up as an Autobongos runner.'
+  Say 'It gets its own copy of the project and its own sign-in; your own work on this PC is not touched.'
+  Say ''
+  Say 'Checking the three programs it needs...'
+  Assert-Tool 'git' 'Git.Git' 'https://git-scm.com/download/win'
+  Assert-Tool 'node' 'OpenJS.NodeJS.LTS' 'https://nodejs.org'
+
+  if (Test-Tool 'claude') {
+    Say '  found claude'
+  } elseif ($DryRun) {
+    Say '  would install Claude Code'
+  } else {
+    Say '  installing Claude Code...'
+    # npm.cmd, not npm: PowerShell blocks npm.ps1 by default (task 1005033).
+    & npm.cmd install -g '@anthropic-ai/claude-code' | Out-Null
+    Update-PathFromRegistry
+    if (-not (Test-Tool 'claude')) {
+      Stop-Setup 'Claude Code did not install.' 'Install it from https://claude.com/claude-code, open a new PowerShell window, and paste the setup command again.'
+    }
+    Say '  installed Claude Code'
+  }
+
+  $RepoDir = Join-Path $RunnerHome 'repo'
+  Say ''
+  if ($DryRun) {
+    Say "Would make the runner's copy of the project in $RepoDir and hand over to autobongos-host.js."
+    $SetupExit = 0
+  } else {
+
+  New-Item -ItemType Directory -Force -Path $RunnerHome | Out-Null
+  if (Test-Path (Join-Path $RepoDir '.git')) {
+    Say "The runner's copy is already here; bringing it up to date..."
+    & git -C $RepoDir fetch --quiet origin main
+    if ($LASTEXITCODE -ne 0) {
+      Stop-Setup "this PC could not fetch the project's code from GitHub." 'Sign in to GitHub when Windows asks, then paste the setup command again.'
+    }
+    & git -C $RepoDir reset --quiet --hard origin/main
+  } else {
+    Say "Making the runner's own copy of the project (GitHub may ask you to sign in)..."
+    & git clone --quiet $Repo $RepoDir
+    if ($LASTEXITCODE -ne 0) {
+      Stop-Setup 'this PC could not copy the project from GitHub.' 'Sign in to GitHub in the window that opens (use an account that can see the project), then paste the setup command again.'
+    }
+  }
+
+  $HostJs = Join-Path $RepoDir 'scripts\bongos\autobongos-host.js'
+  if (-not (Test-Path $HostJs)) {
+    Stop-Setup "the project's copy has no runner program in it." 'The project is on an older version. Ask the project owner to update it, then try again.'
+  }
+
+  $env:AUTOBONGOS_HOME = $RunnerHome
+  & node $HostJs setup --code $Code --api-base $ApiBase --mark-runner-copy
+  $SetupExit = $LASTEXITCODE
+
+  }
+} catch {
+  if ("$($_.Exception.Message)" -ne $StopMark) {
+    Write-Host ''
+    Write-Host 'Autobongos setup stopped on something unexpected.' -ForegroundColor Yellow
+    Write-Host 'What to do: paste the setup command again. If it stops here twice, tell the project owner.'
+  }
+  $SetupExit = 1
+}
+
+# As a FILE, report the result the way a script does. PASTED (a script block has
+# no file of its own), leave the window open and only record the result.
+if ($MyInvocation.MyCommand.Path) { exit $SetupExit }
+$global:LASTEXITCODE = $SetupExit