@bongos/core 1.25.17 → 1.25.18

package/docs/file-map.md

@@ -116,7 +116,8 @@
 │   ├── copy-desk/               ← CORE-DOMAIN module (task 1003113 / R02 of goal 1000074, default-on): the COPY half of the design contract — ADR 0081 gave design TOKENS a repo-owned source of truth, text had none. Owns the FLAG (anyone in any role marks a string or a whole surface as needing an artist's attention, with a reason required in BOTH the route and a CHECK constraint) and the QUEUE an artist reads it from. READS R01's committed registry (docs/copy-registry.json, generated by scripts/bongos/copy-inventory.js) and never writes it. NO LIVE CMS is the hard non-goal: no column here could hold replacement text, and copy_no_cms.mjs pins that. Key is `copy-desk`, not `copy` — the branding contract already owns a `copy` block, so the bare word reds the "core carries no module code" fitness check. R03 (task 1003114, ADR 0233) added the PROPOSAL: an artist writes the replacement wording and it becomes a Bongos task carrying a fenced copy-proposal patch — no row, NO second migration (a proposals table is the forbidden column with extra steps), and scripts/bongos/copy-apply.js lands it as a real diff under a claim. BV2.TW05 (task 1004316, ADR 0341 D8) added Tweak Mode's three derived READS — GET /copy-desk/pages, /copy-desk/pages/:pageId, /copy-desk/tally: page status and count, changelog, drift, "N of M tweaked" per surface, and the artist's tally — over the page-tweak tasks (lifecycle port), docs/page-inventory.json and docs/page-readings.json (both now in the publish manifest), with no status table. BV2.TW06 (task 1004317, ADR 0341 D2, D5, D6) added its first two page WRITES: POST /copy-desk/pages/:pageId/claim (an artist-craft builder opens or takes the page's tweak round as a web-claimed task, through the lifecycle port's webClaimPageTweak, under an advisory lock on the page) and POST /copy-desk/pages/:pageId/asks (anyone files a page ask, a copy_desk_flags row with scope 'page', added by copy_desk_002_page_asks.sql). CLAUDE.md, module.json, registry.js, flags.js, proposals.js, pages.js (the page-tweak block format), page-status.js (the pure derivation), page-data.js (the page artifacts' read side), routes/copy-desk.js, migrations/copy_desk_001_flags.sql, migrations/copy_desk_002_page_asks.sql, tests/{copy_flags,copy_queue,copy_no_cms,copy_proposals,copy_page_status}.mjs + tests/fixtures/page-tweak.cjs. Its hall surface lives with hall-ui (public/copy-desk.{html,js,css}), per the one-key-per-web-surface precedent. skills/tweak/SKILL.md is the /tweak skill (contributes.skills; moved out of .claude/skills/ in task 1004471, hidden from the model listing, typed as /tweak).
 │   ├── page-notes/              ← the artist's page feedback docs (task 1004496, default-on): the Artistry palette button's store. A doc about one hall page, with up to eight reference images (stored in the DB, images only), turned into ideas by an AI split on submit and kept as the page's reference (?note=N). Apart from copy-desk, which may hold no wording. module.json, CLAUDE.md, notes.js (pure), split.js, db.js, routes/, migrations/.
 │   ├── ai-studio/               ← AI generation for artists (task 1004916, ADR 0392, default-off; hub first): a sketch or image set plus a prompt gets a Gemini reply and generated images on our key (processor-held balance, one named price multiplier, funds held first, released on failure) or the builder's own key (no charge). Keys entered only in Settings, never leave the server. module.json, CLAUDE.md, routes/.
-│   ├── front-door-guide/        ← the start-a-project guide (task 1005272, goal 1000106, default-off; hub first): a signed-out visitor talks with an AI guide for a few capped messages before signing up, on the platform's own Anthropic key from the environment. Every cap on the server (messages and spend per visitor, daily and monthly site budget, message length, rate limits, bot check); a spent budget or no key answers the plain form. The chat ends in a structured plan naming only modules the creation picker offers (the provisioning.moduleCatalog port), saved, attached to the account at sign-up, and swept after a set number of days if nobody signs up (task 1005273). It asks whether the visitor starts fresh or already has something and plans an existing project from their description only, never reading their work (task 1005279). module.json, CLAUDE.md (the response shape), settings.js, guide.js, plan.js, starting-point.js, context.js, claude.js, limits.js, db.js, routes/, pollers/retention-sweep.js, migrations/.
+│   ├── app-host/                ← where the app runs (task 1004571, default-on): the options menu's panel showing where a hosted project's app runs (no platform, or Render with its stage and address), read from the hub over POST /sso/app-status; the owner (core.pin.move) gets Connect Render / retry links to the hub's Manage panel. module.json, CLAUDE.md, routes/app-host.js, public/settings-widget.js.
+│   ├── front-door-guide/        ← the start-a-project guide (task 1005272, goal 1000106, default-off; hub first): a signed-out visitor talks with an AI guide for a few capped messages before signing up, on the platform's own Anthropic key from the environment. Every cap on the server (messages and spend per visitor, daily and monthly site budget, message length, rate limits, bot check); a spent budget or no key answers the plain form. module.json, CLAUDE.md (the response shape), settings.js, guide.js, claude.js, limits.js, db.js, routes/, migrations/.
 │   ├── market-watch/            ← Market Watch (task 1004935, goal 1000137, default-off): a weekly AI watch on a project's competitors, partners and topics. No routes yet; the manifest declares spend.requiresPayer. Kept out of the creation picker (HUB_ONLY_MODULES) until it does something. Data layer (task 1004936): migrations/ (market_watch_* tables), db.js (read queries), seed.js + seed/ (the 2026-10-28 research, hub only), pollers/hub-seed.js. module.json, CLAUDE.md.
 │   ├── raise/                   ← the /raise investor page (task 1004847, ADR 0384, default-off; hub only): password-gated for investors (signing in accepts the NDA, non-binding interest), edited in place by any active builder with every change logged. The copy in content/ is the owner's words — never reword it in code. module.json, CLAUDE.md, raise.js (pure), page.js, web.js (the GET-only raise.web port core mounts at /raise), db.js, routes/ (every write), migrations/, content/, views/, public/.
 │   ├── npm-release/             ← the deploy page for a project that publishes an npm package from GitHub (task 1002622, default-OFF — on only in the Bongos hall, which publishes @bongos/core). "Where the work is": every task finished in the last 14 days, placed in the stage it has actually reached (not merged · merged, no version yet · published, not running here · running here, not released · released · in no version), plus the version history — each version's tasks. The version↔task join reads the release-notes.json the package itself carries (scripts/bongos/release-notes.js writes it at pack time), streamed out of the NEWEST version's npm tarball in-process (no child process, no sync call) when the running core's own copy stops short. module.json, work.js (the reading + the stage placement — the packument, tarball stream and tar reader it uses are the core's src/bongos/package-registry.js, reached through the doorway's readPackageRegistry since task 1004296), routes/work.js (GET /npm-release/work, gated core.pin.move like the page), public/work.{js,css} (the two sections /deploy lends it: #nr-work, #nr-versions). Task 1004301 added the same line on a task's own page: routes/task-where.js (GET /npm-release/task/:id, any signed-in builder — it shows nothing not already public) + public/task-widget.js, injected into task.html by the loader's uiSections seam (hallWidgetScripts file task-widget.js) to fill #task-contrib on otb:task-shown. Tests sit at the repo root — tests/npm_release_{work,page}.mjs — because a default-off module's own tests/ is skipped by the unit runner.

package/docs/module-api-changelog.md

@@ -3472,5 +3472,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.25.14 with no explicit bump. run 43503871976. (task 1002620)
   1.25.17 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.25.16 with no explicit bump. run 43506364199. (task 1002620)
+  1.25.18 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.25.17 with no explicit bump. run 43517532785. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/docs/page-inventory.json

@@ -1677,7 +1677,10 @@
         "modules/ui-design/public/tokens.css",
         "modules/public-landing/public/assets/world.css",
         "modules/public-landing/public/assets/guide-scene.css",
+        "modules/public-landing/public/assets/guide-hall.css",
+        "modules/public-landing/public/assets/guide-core.js",
         "modules/public-landing/public/assets/guide-scene.js",
+        "modules/public-landing/public/assets/guide-hall.js",
         "modules/public-landing/public/assets/artist-review.js"
       ],
       "states_files": [

package/docs/page-readings.json

@@ -3909,97 +3909,97 @@
       "surface": "landing",
       "title": "{{productName}}: {{tagline}}",
       "states_read": ["out","in","out-projects","in-profile","cli-out"],
-      "files_hash": "eba5591fb7fda6d0",
+      "files_hash": "50e2a85506962213",
       "reading_hash": "50e33d9c2cb09eb0",
       "counts": {"lines":85,"placed":50,"shared":16,"unplaced":19},
       "omitted": {"data":6},
       "notes": [],
       "lines": [
-        {"key":"L0001","section":"skip link","text":"Skip to content","placement":"shared","file":"modules/public-landing/public/index.html","line":698,"string_id":"a061df49e6cb"},
+        {"key":"L0001","section":"skip link","text":"Skip to content","placement":"shared","file":"modules/public-landing/public/index.html","line":702,"string_id":"a061df49e6cb"},
         {"key":"L0002","section":"top bar","text":"Community","placement":"shared"},
         {"key":"L0003","section":"top bar","text":"Projects","placement":"shared"},
-        {"key":"L0004","section":"top bar","text":"New account","placement":"shared","file":"modules/public-landing/public/index.html","line":720,"string_id":"bb78cca99fe5"},
+        {"key":"L0004","section":"top bar","text":"New account","placement":"shared","file":"modules/public-landing/public/index.html","line":724,"string_id":"bb78cca99fe5"},
         {"key":"L0005","section":"top bar","text":"Review","placement":"shared","state":"in"},
-        {"key":"L0006","section":"page top","text":"My projects","placement":"placed","file":"modules/public-landing/public/index.html","line":761,"string_id":"4a167ef6e515","state":"in-profile"},
+        {"key":"L0006","section":"page top","text":"My projects","placement":"placed","file":"modules/public-landing/public/index.html","line":765,"string_id":"4a167ef6e515","state":"in-profile"},
         {"key":"L0007","section":"page top","text":"Invitations","placement":"unplaced","state":"in-profile"},
         {"key":"L0008","section":"page top","text":"Connections","placement":"unplaced","state":"in-profile"},
         {"key":"L0009","section":"page top","text":"Account","placement":"unplaced","state":"in-profile"},
-        {"key":"L0010","section":"page top","text":"Sign out","placement":"placed","file":"modules/public-landing/public/index.html","line":770,"string_id":"f9af2d90ce5b","state":"in-profile"},
-        {"key":"L0011","section":"top bar","text":"Sign in","placement":"shared","file":"modules/public-landing/public/index.html","line":722,"string_id":"ad80586f802a"},
+        {"key":"L0010","section":"page top","text":"Sign out","placement":"placed","file":"modules/public-landing/public/index.html","line":774,"string_id":"f9af2d90ce5b","state":"in-profile"},
+        {"key":"L0011","section":"top bar","text":"Sign in","placement":"shared","file":"modules/public-landing/public/index.html","line":726,"string_id":"ad80586f802a"},
         {"key":"L0012","section":"page top","text":"Sky","placement":"unplaced","state":"out-projects"},
-        {"key":"L0013","section":"page top","text":"a universe of Projects","placement":"placed","file":"modules/public-landing/public/index.html","line":747,"string_id":"ed075e6e5f3a","state":"out-projects"},
+        {"key":"L0013","section":"page top","text":"a universe of Projects","placement":"placed","file":"modules/public-landing/public/index.html","line":751,"string_id":"ed075e6e5f3a","state":"out-projects"},
         {"key":"L0014","section":"page top","text":"Table","placement":"unplaced","state":"out-projects"},
-        {"key":"L0015","section":"page top","text":"sky project directory","placement":"placed","file":"modules/public-landing/public/index.html","line":748,"string_id":"dd8f15e45e84","state":"out-projects"},
-        {"key":"L0016","section":"page top","text":"+ Create New Project","placement":"placed","file":"modules/public-landing/public/index.html","line":750,"string_id":"205f6e9eab89","state":"out-projects"},
-        {"key":"L0017","section":"page top","text":"fresh start/fresh idea","placement":"placed","file":"modules/public-landing/public/index.html","line":750,"string_id":"46c35bc7dcdf","state":"out-projects"},
-        {"key":"L0018","section":"Building Digitally,as simple as Bongos.","text":"Building Digitally,","placement":"placed","file":"modules/public-landing/public/index.html","line":784,"string_id":"16bc370da814"},
-        {"key":"L0019","section":"Building Digitally,as simple as Bongos.","text":"as simple as Bongos.","placement":"placed","file":"modules/public-landing/public/index.html","line":784,"string_id":"acbabdef6f40"},
-        {"key":"L0020","section":"Building Digitally,as simple as Bongos.","text":"Bringing AI to the artisan and the artist in everyone.","placement":"placed","file":"modules/public-landing/public/index.html","line":786,"string_id":"c6bc1f427fd0"},
-        {"key":"L0021","section":"Building Digitally,as simple as Bongos.","text":"Find a project to join","placement":"placed","file":"modules/public-landing/public/index.html","line":790,"string_id":"483a7eff25f2"},
-        {"key":"L0022","section":"Building Digitally,as simple as Bongos.","text":"Start a project","placement":"placed","file":"modules/public-landing/public/index.html","line":791,"string_id":"2ae36be1c531"},
-        {"key":"L0023","section":"Built on Bongos.","text":"Built on Bongos.","placement":"placed","file":"modules/public-landing/public/index.html","line":800,"string_id":"20b4fa9a0424"},
-        {"key":"L0024","section":"Built on Bongos.","text":"Example World","placement":"placed","file":"modules/public-landing/public/index.html","line":805,"string_id":"1b5a6cfc494c"},
-        {"key":"L0025","section":"Built on Bongos.","text":"a game, 11 builders","placement":"placed","file":"modules/public-landing/public/index.html","line":806,"string_id":"b7cee0f10353"},
+        {"key":"L0015","section":"page top","text":"sky project directory","placement":"placed","file":"modules/public-landing/public/index.html","line":752,"string_id":"dd8f15e45e84","state":"out-projects"},
+        {"key":"L0016","section":"page top","text":"+ Create New Project","placement":"placed","file":"modules/public-landing/public/index.html","line":754,"string_id":"205f6e9eab89","state":"out-projects"},
+        {"key":"L0017","section":"page top","text":"fresh start/fresh idea","placement":"placed","file":"modules/public-landing/public/index.html","line":754,"string_id":"46c35bc7dcdf","state":"out-projects"},
+        {"key":"L0018","section":"Building Digitally,as simple as Bongos.","text":"Building Digitally,","placement":"placed","file":"modules/public-landing/public/index.html","line":788,"string_id":"16bc370da814"},
+        {"key":"L0019","section":"Building Digitally,as simple as Bongos.","text":"as simple as Bongos.","placement":"placed","file":"modules/public-landing/public/index.html","line":788,"string_id":"acbabdef6f40"},
+        {"key":"L0020","section":"Building Digitally,as simple as Bongos.","text":"Bringing AI to the artisan and the artist in everyone.","placement":"placed","file":"modules/public-landing/public/index.html","line":790,"string_id":"c6bc1f427fd0"},
+        {"key":"L0021","section":"Building Digitally,as simple as Bongos.","text":"Find a project to join","placement":"placed","file":"modules/public-landing/public/index.html","line":794,"string_id":"483a7eff25f2"},
+        {"key":"L0022","section":"Building Digitally,as simple as Bongos.","text":"Start a project","placement":"placed","file":"modules/public-landing/public/index.html","line":795,"string_id":"2ae36be1c531"},
+        {"key":"L0023","section":"Built on Bongos.","text":"Built on Bongos.","placement":"placed","file":"modules/public-landing/public/index.html","line":804,"string_id":"20b4fa9a0424"},
+        {"key":"L0024","section":"Built on Bongos.","text":"Example World","placement":"placed","file":"modules/public-landing/public/index.html","line":809,"string_id":"1b5a6cfc494c"},
+        {"key":"L0025","section":"Built on Bongos.","text":"a game, 11 builders","placement":"placed","file":"modules/public-landing/public/index.html","line":810,"string_id":"b7cee0f10353"},
         {"key":"L0026","section":"Built on Bongos.","text":"0 builders","placement":"unplaced"},
-        {"key":"L0027","section":"Built on Bongos.","text":"Emersonian Circles","placement":"placed","file":"modules/public-landing/public/index.html","line":815,"string_id":"9a4a940d2a56"},
-        {"key":"L0028","section":"Built on Bongos.","text":"1 builder","placement":"placed","file":"modules/public-landing/public/index.html","line":811,"string_id":"22825067f4c5"},
-        {"key":"L0029","section":"Built on Bongos.","text":"View Projects","placement":"placed","file":"modules/public-landing/public/index.html","line":819,"string_id":"b97287183335"},
-        {"key":"L0030","section":"A project as a codebase, regardless of function.","text":"A project as a codebase, regardless of function.","placement":"placed","file":"modules/public-landing/public/index.html","line":826,"string_id":"407982c3d4ff"},
-        {"key":"L0031","section":"A project as a codebase, regardless of function.","text":"A laddered beat progresses all tasks.","placement":"placed","file":"modules/public-landing/public/index.html","line":827,"string_id":"545c82e99696"},
+        {"key":"L0027","section":"Built on Bongos.","text":"Emersonian Circles","placement":"placed","file":"modules/public-landing/public/index.html","line":819,"string_id":"9a4a940d2a56"},
+        {"key":"L0028","section":"Built on Bongos.","text":"1 builder","placement":"placed","file":"modules/public-landing/public/index.html","line":815,"string_id":"22825067f4c5"},
+        {"key":"L0029","section":"Built on Bongos.","text":"View Projects","placement":"placed","file":"modules/public-landing/public/index.html","line":823,"string_id":"b97287183335"},
+        {"key":"L0030","section":"A project as a codebase, regardless of function.","text":"A project as a codebase, regardless of function.","placement":"placed","file":"modules/public-landing/public/index.html","line":830,"string_id":"407982c3d4ff"},
+        {"key":"L0031","section":"A project as a codebase, regardless of function.","text":"A laddered beat progresses all tasks.","placement":"placed","file":"modules/public-landing/public/index.html","line":831,"string_id":"545c82e99696"},
         {"key":"L0032","section":"A project as a codebase, regardless of function.","text":"claim","placement":"unplaced"},
-        {"key":"L0033","section":"A project as a codebase, regardless of function.","text":"Take on a task","placement":"placed","file":"modules/public-landing/public/index.html","line":832,"string_id":"c160ff80c611"},
+        {"key":"L0033","section":"A project as a codebase, regardless of function.","text":"Take on a task","placement":"placed","file":"modules/public-landing/public/index.html","line":836,"string_id":"c160ff80c611"},
         {"key":"L0034","section":"A project as a codebase, regardless of function.","text":"build","placement":"unplaced"},
-        {"key":"L0035","section":"A project as a codebase, regardless of function.","text":"run your preferred model","placement":"placed","file":"modules/public-landing/public/index.html","line":837,"string_id":"efbb62ff5488"},
+        {"key":"L0035","section":"A project as a codebase, regardless of function.","text":"run your preferred model","placement":"placed","file":"modules/public-landing/public/index.html","line":841,"string_id":"efbb62ff5488"},
         {"key":"L0036","section":"A project as a codebase, regardless of function.","text":"grade","placement":"unplaced"},
-        {"key":"L0037","section":"A project as a codebase, regardless of function.","text":"evaluated by agentic agents","placement":"placed","file":"modules/public-landing/public/index.html","line":842,"string_id":"f8d9d6f2490f"},
+        {"key":"L0037","section":"A project as a codebase, regardless of function.","text":"evaluated by agentic agents","placement":"placed","file":"modules/public-landing/public/index.html","line":846,"string_id":"f8d9d6f2490f"},
         {"key":"L0038","section":"A project as a codebase, regardless of function.","text":"ship","placement":"unplaced"},
-        {"key":"L0039","section":"A project as a codebase, regardless of function.","text":"agentically merged and made live","placement":"placed","file":"modules/public-landing/public/index.html","line":847,"string_id":"eedec34758da"},
+        {"key":"L0039","section":"A project as a codebase, regardless of function.","text":"agentically merged and made live","placement":"placed","file":"modules/public-landing/public/index.html","line":851,"string_id":"eedec34758da"},
         {"key":"L0040","section":"A project as a codebase, regardless of function.","text":"credit","placement":"unplaced"},
-        {"key":"L0041","section":"A project as a codebase, regardless of function.","text":"equity or cash payouts","placement":"placed","file":"modules/public-landing/public/index.html","line":852,"string_id":"a7767cf28a36"},
-        {"key":"L0042","section":"A project as a codebase, regardless of function.","text":"1,111 of 1,561 shipped on V1","placement":"placed","file":"modules/public-landing/public/index.html","line":860,"string_id":"14277fea260d"},
-        {"key":"L0043","section":"A project as a codebase, regardless of function.","text":"The six most recent shipped tasks.","placement":"placed","file":"modules/public-landing/public/index.html","line":862,"string_id":"40ed6300ba27"},
-        {"key":"L0044","section":"A project as a codebase, regardless of function.","text":"Landing composition round: three versions of the approved world","placement":"placed","file":"modules/public-landing/public/index.html","line":866,"string_id":"376b549bf7c8"},
-        {"key":"L0045","section":"A project as a codebase, regardless of function.","text":"Percy Jackson","placement":"placed","file":"modules/public-landing/public/index.html","line":867,"string_id":"3eb67b892dea","occurrences":4},
+        {"key":"L0041","section":"A project as a codebase, regardless of function.","text":"equity or cash payouts","placement":"placed","file":"modules/public-landing/public/index.html","line":856,"string_id":"a7767cf28a36"},
+        {"key":"L0042","section":"A project as a codebase, regardless of function.","text":"1,111 of 1,561 shipped on V1","placement":"placed","file":"modules/public-landing/public/index.html","line":864,"string_id":"14277fea260d"},
+        {"key":"L0043","section":"A project as a codebase, regardless of function.","text":"The six most recent shipped tasks.","placement":"placed","file":"modules/public-landing/public/index.html","line":866,"string_id":"40ed6300ba27"},
+        {"key":"L0044","section":"A project as a codebase, regardless of function.","text":"Landing composition round: three versions of the approved world","placement":"placed","file":"modules/public-landing/public/index.html","line":870,"string_id":"376b549bf7c8"},
+        {"key":"L0045","section":"A project as a codebase, regardless of function.","text":"Percy Jackson","placement":"placed","file":"modules/public-landing/public/index.html","line":871,"string_id":"3eb67b892dea","occurrences":4},
         {"key":"L0046","section":"A project as a codebase, regardless of function.","text":"27 Aug","placement":"unplaced","occurrences":4},
-        {"key":"L0047","section":"A project as a codebase, regardless of function.","text":"See what you did, by role, including every idea you filed and what became of it","placement":"placed","file":"modules/public-landing/public/index.html","line":872,"string_id":"67b61947244d"},
-        {"key":"L0048","section":"A project as a codebase, regardless of function.","text":"ship.js still writes no session record when the session is rooted in another project dir","placement":"placed","file":"modules/public-landing/public/index.html","line":878,"string_id":"156d37716e14"},
-        {"key":"L0049","section":"A project as a codebase, regardless of function.","text":"World round: PRODUCT.md and four style candidates across landing, hall and status","placement":"placed","file":"modules/public-landing/public/index.html","line":884,"string_id":"8a4892d03781"},
-        {"key":"L0050","section":"A project as a codebase, regardless of function.","text":"Footer doors before launch: privacy, terms and contact pages linked from the landing page and the hub","placement":"placed","file":"modules/public-landing/public/index.html","line":890,"string_id":"0a0667aea2db"},
+        {"key":"L0047","section":"A project as a codebase, regardless of function.","text":"See what you did, by role, including every idea you filed and what became of it","placement":"placed","file":"modules/public-landing/public/index.html","line":876,"string_id":"67b61947244d"},
+        {"key":"L0048","section":"A project as a codebase, regardless of function.","text":"ship.js still writes no session record when the session is rooted in another project dir","placement":"placed","file":"modules/public-landing/public/index.html","line":882,"string_id":"156d37716e14"},
+        {"key":"L0049","section":"A project as a codebase, regardless of function.","text":"World round: PRODUCT.md and four style candidates across landing, hall and status","placement":"placed","file":"modules/public-landing/public/index.html","line":888,"string_id":"8a4892d03781"},
+        {"key":"L0050","section":"A project as a codebase, regardless of function.","text":"Footer doors before launch: privacy, terms and contact pages linked from the landing page and the hub","placement":"placed","file":"modules/public-landing/public/index.html","line":894,"string_id":"0a0667aea2db"},
         {"key":"L0051","section":"A project as a codebase, regardless of function.","text":"26 Aug","placement":"unplaced","occurrences":2},
-        {"key":"L0052","section":"A project as a codebase, regardless of function.","text":"Task titles are write-once, no route can edit one, so a wrong title is permanent","placement":"placed","file":"modules/public-landing/public/index.html","line":896,"string_id":"052e2da986c2"},
-        {"key":"L0053","section":"A project as a codebase, regardless of function.","text":"For founders","placement":"placed","file":"modules/public-landing/public/index.html","line":925,"string_id":"dbced351ca0d"},
-        {"key":"L0054","section":"Types of projects","text":"Types of projects","placement":"placed","file":"modules/public-landing/public/index.html","line":926,"string_id":"a165999f36a9"},
-        {"key":"L0055","section":"Types of projects","text":"Open source.","placement":"placed","file":"modules/public-landing/public/index.html","line":928,"string_id":"275ca0d5ce65"},
-        {"key":"L0056","section":"Types of projects","text":"Download our core code and protocols, and build instantly with your team.","placement":"placed","file":"modules/public-landing/public/index.html","line":928,"string_id":"d919980d2ca5"},
-        {"key":"L0057","section":"Types of projects","text":"Bongos Managed.","placement":"placed","file":"modules/public-landing/public/index.html","line":930,"string_id":"4782de01c86b"},
-        {"key":"L0058","section":"Types of projects","text":"Buy microtransaction packages of code modules on our marketplace.","placement":"placed","file":"modules/public-landing/public/index.html","line":932,"string_id":"101339c676b4"},
-        {"key":"L0059","section":"Types of projects","text":"Have us handle your hosting.","placement":"placed","file":"modules/public-landing/public/index.html","line":933,"string_id":"41778f67b4c9"},
-        {"key":"L0060","section":"Types of projects","text":"Get access to our advanced project presets and module packages.","placement":"placed","file":"modules/public-landing/public/index.html","line":934,"string_id":"8bb1f00b1558"},
-        {"key":"L0061","section":"Types of projects","text":"Equity issuance, business filing, and builder compensation.","placement":"placed","file":"modules/public-landing/public/index.html","line":935,"string_id":"af5ca714d375"},
-        {"key":"L0062","section":"Types of projects","text":"For builders","placement":"placed","file":"modules/public-landing/public/index.html","line":941,"string_id":"f510ba460300"},
-        {"key":"L0063","section":"Ways to get paid/rewarded","text":"Ways to get paid/rewarded","placement":"placed","file":"modules/public-landing/public/index.html","line":942,"string_id":"3597d73ce7f9"},
-        {"key":"L0064","section":"Ways to get paid/rewarded","text":"Build equity in multiple projects.","placement":"placed","file":"modules/public-landing/public/index.html","line":944,"string_id":"0f1ec6cf9dfa"},
-        {"key":"L0065","section":"Ways to get paid/rewarded","text":"Work as a paid contractor for companies big, medium and small.","placement":"placed","file":"modules/public-landing/public/index.html","line":945,"string_id":"a581f96fb2c8"},
-        {"key":"L0066","section":"Ways to get paid/rewarded","text":"Play as a: game or learning experience.","placement":"placed","file":"modules/public-landing/public/index.html","line":946,"string_id":"384c5b38f500"},
-        {"key":"L0067","section":"Ways to get paid/rewarded","text":"Start a project","placement":"placed","file":"modules/public-landing/public/index.html","line":791,"string_id":"2ae36be1c531"},
-        {"key":"L0068","section":"Ways to get paid/rewarded","text":"Find a project","placement":"placed","file":"modules/public-landing/public/index.html","line":958,"string_id":"0208e4bbba9c"},
-        {"key":"L0069","section":"Ways to get paid/rewarded","text":"Download the CLI","placement":"placed","file":"modules/public-landing/public/index.html","line":961,"string_id":"41c49e22002d","state":"cli-out"},
+        {"key":"L0052","section":"A project as a codebase, regardless of function.","text":"Task titles are write-once, no route can edit one, so a wrong title is permanent","placement":"placed","file":"modules/public-landing/public/index.html","line":900,"string_id":"052e2da986c2"},
+        {"key":"L0053","section":"A project as a codebase, regardless of function.","text":"For founders","placement":"placed","file":"modules/public-landing/public/index.html","line":929,"string_id":"dbced351ca0d"},
+        {"key":"L0054","section":"Types of projects","text":"Types of projects","placement":"placed","file":"modules/public-landing/public/index.html","line":930,"string_id":"a165999f36a9"},
+        {"key":"L0055","section":"Types of projects","text":"Open source.","placement":"placed","file":"modules/public-landing/public/index.html","line":932,"string_id":"275ca0d5ce65"},
+        {"key":"L0056","section":"Types of projects","text":"Download our core code and protocols, and build instantly with your team.","placement":"placed","file":"modules/public-landing/public/index.html","line":932,"string_id":"d919980d2ca5"},
+        {"key":"L0057","section":"Types of projects","text":"Bongos Managed.","placement":"placed","file":"modules/public-landing/public/index.html","line":934,"string_id":"4782de01c86b"},
+        {"key":"L0058","section":"Types of projects","text":"Buy microtransaction packages of code modules on our marketplace.","placement":"placed","file":"modules/public-landing/public/index.html","line":936,"string_id":"101339c676b4"},
+        {"key":"L0059","section":"Types of projects","text":"Have us handle your hosting.","placement":"placed","file":"modules/public-landing/public/index.html","line":937,"string_id":"41778f67b4c9"},
+        {"key":"L0060","section":"Types of projects","text":"Get access to our advanced project presets and module packages.","placement":"placed","file":"modules/public-landing/public/index.html","line":938,"string_id":"8bb1f00b1558"},
+        {"key":"L0061","section":"Types of projects","text":"Equity issuance, business filing, and builder compensation.","placement":"placed","file":"modules/public-landing/public/index.html","line":939,"string_id":"af5ca714d375"},
+        {"key":"L0062","section":"Types of projects","text":"For builders","placement":"placed","file":"modules/public-landing/public/index.html","line":945,"string_id":"f510ba460300"},
+        {"key":"L0063","section":"Ways to get paid/rewarded","text":"Ways to get paid/rewarded","placement":"placed","file":"modules/public-landing/public/index.html","line":946,"string_id":"3597d73ce7f9"},
+        {"key":"L0064","section":"Ways to get paid/rewarded","text":"Build equity in multiple projects.","placement":"placed","file":"modules/public-landing/public/index.html","line":948,"string_id":"0f1ec6cf9dfa"},
+        {"key":"L0065","section":"Ways to get paid/rewarded","text":"Work as a paid contractor for companies big, medium and small.","placement":"placed","file":"modules/public-landing/public/index.html","line":949,"string_id":"a581f96fb2c8"},
+        {"key":"L0066","section":"Ways to get paid/rewarded","text":"Play as a: game or learning experience.","placement":"placed","file":"modules/public-landing/public/index.html","line":950,"string_id":"384c5b38f500"},
+        {"key":"L0067","section":"Ways to get paid/rewarded","text":"Start a project","placement":"placed","file":"modules/public-landing/public/index.html","line":795,"string_id":"2ae36be1c531"},
+        {"key":"L0068","section":"Ways to get paid/rewarded","text":"Find a project","placement":"placed","file":"modules/public-landing/public/index.html","line":962,"string_id":"0208e4bbba9c"},
+        {"key":"L0069","section":"Ways to get paid/rewarded","text":"Download the CLI","placement":"placed","file":"modules/public-landing/public/index.html","line":965,"string_id":"41c49e22002d","state":"cli-out"},
         {"key":"L0070","section":"Ways to get paid/rewarded","text":"Windows · v0.4.2","placement":"unplaced","state":"cli-out"},
         {"key":"L0071","section":"Ways to get paid/rewarded","text":"Also for","placement":"unplaced","state":"cli-out"},
         {"key":"L0072","section":"Ways to get paid/rewarded","text":"macOS, Apple silicon","placement":"unplaced","state":"cli-out"},
         {"key":"L0073","section":"Ways to get paid/rewarded","text":"macOS, Intel","placement":"unplaced","state":"cli-out"},
         {"key":"L0074","section":"Ways to get paid/rewarded","text":"Linux, x64","placement":"unplaced","state":"cli-out"},
         {"key":"L0075","section":"Ways to get paid/rewarded","text":"Linux, ARM64","placement":"unplaced","state":"cli-out"},
-        {"key":"L0076","section":"footer","text":"A non-profit, capture-resistant commons.","placement":"shared","file":"modules/public-landing/public/index.html","line":1018,"string_id":"afe83bbbd0d4"},
-        {"key":"L0077","section":"footer","text":"Built by agents, on Cloud Bongos.","placement":"shared","file":"modules/public-landing/public/index.html","line":1018,"string_id":"bd315dd71ea7"},
-        {"key":"L0078","section":"footer","text":"Open source","placement":"shared","file":"modules/public-landing/public/index.html","line":1018,"string_id":"d6314ddcc1d0"},
+        {"key":"L0076","section":"footer","text":"A non-profit, capture-resistant commons.","placement":"shared","file":"modules/public-landing/public/index.html","line":1060,"string_id":"afe83bbbd0d4"},
+        {"key":"L0077","section":"footer","text":"Built by agents, on Cloud Bongos.","placement":"shared","file":"modules/public-landing/public/index.html","line":1060,"string_id":"bd315dd71ea7"},
+        {"key":"L0078","section":"footer","text":"Open source","placement":"shared","file":"modules/public-landing/public/index.html","line":1060,"string_id":"d6314ddcc1d0"},
         {"key":"L0079","section":"footer","text":"AGPL-3.0","placement":"shared"},
         {"key":"L0080","section":"footer","text":"About","placement":"shared"},
         {"key":"L0081","section":"footer","text":"Docs","placement":"shared"},
         {"key":"L0082","section":"footer","text":"Privacy","placement":"shared"},
         {"key":"L0083","section":"footer","text":"Terms","placement":"shared"},
         {"key":"L0084","section":"footer","text":"Contact","placement":"shared"},
-        {"key":"L0085","section":"footer","text":"Builders' hall","placement":"shared","file":"modules/public-landing/public/index.html","line":1024,"string_id":"90a128c97eae"}
+        {"key":"L0085","section":"footer","text":"Builders' hall","placement":"shared","file":"modules/public-landing/public/index.html","line":1066,"string_id":"90a128c97eae"}
       ]
     },
     {
@@ -4138,8 +4138,8 @@
       "surface": "landing",
       "title": "{{productName}} — projects",
       "states_read": ["out-map","in-map","in-map-projects","in-map-profile","in-map-kbd","in-map-search","in-map-mine-on","in-table","in-table-by-builders","in-mine","in-manage","in-manage-address","in-manage-planet","in-manage-card","in-manage-look","in-manage-kind","in-manage-invite","in-manage-invite-handoff","in-manage-invite-guild","in-manage-app-live","in-manage-app-building","in-manage-app-failed","in-manage-app-retry","in-manage-app-offer","in-manage-app-connect","in-manage-snag","in-manage-gone","in-manage-missing","out-manage","in-new","in-new-named","in-new-ready","in-new-name-prefilled","in-new-demo","in-new-demo-used","in-new-checks-filled","in-new-checks-entity","in-new-row-code","in-new-row-address","in-new-row-team","in-new-row-extras","in-new-row-rewards","in-new-row-app","in-new-row-run","in-new-row-ship","in-new-look","in-new-look-custom","in-new-create-blocked","in-new-done","in-new-resume-offer","out-new","out-map-projects","card","card-noart","card-self","in-manage-demo","in-mine-dns-pending","in-manage-dns-pending","in-mine-empty","card-floor","card-backdrop","in-google","in-new-done-live","setup-just-created","setup-waiting-on-github","setup-installing","setup-stopped","setup-all-done","setup-cloud-hop-open"],
-      "files_hash": "5534a50b3bece717",
-      "reading_hash": "c22f44c534cabbdd",
+      "files_hash": "7b2088fa77af5b51",
+      "reading_hash": "b1b60799f9b3f5c8",
       "counts": {"lines":687,"placed":239,"shared":23,"unplaced":425},
       "omitted": {"data":135},
       "notes": ["in-new-checks-filled: an action failed (page.selectOption: Error: Element is not a <select> element); read as it stood"],
@@ -4306,7 +4306,7 @@
         {"key":"L0160","section":"Its kind","text":"This project has never said what kind it is. Saying so puts the word beside its name wherever it is listed; it changes nothing else.","placement":"unplaced","state":"in-manage"},
         {"key":"L0161","section":"Its kind","text":"What the choice changes","placement":"placed","file":"modules/public-landing/public/projects.html","line":1341,"string_id":"ed394c66d49c","state":"in-manage"},
         {"key":"L0162","section":"Its extras","text":"Its extras","placement":"placed","file":"modules/public-landing/public/projects.html","line":1358,"string_id":"218224e0007c","state":"in-manage"},
-        {"key":"L0163","section":"Its extras","text":"Every project also starts with the same 18 core parts — the platform itself, the way it tracks work, and the builders’ hall. They are always on, so they are not part of this choice.","placement":"unplaced","state":"in-manage"},
+        {"key":"L0163","section":"Its extras","text":"Every project also starts with the same 19 core parts — the platform itself, the way it tracks work, and the builders’ hall. They are always on, so they are not part of this choice.","placement":"unplaced","state":"in-manage"},
         {"key":"L0164","section":"Its extras","text":"What an extra is — and what is always on","placement":"placed","file":"modules/public-landing/public/projects.html","line":1361,"string_id":"4bc11236f997","state":"in-manage"},
         {"key":"L0165","section":"Its environment variables","text":"Its environment variables","placement":"placed","file":"modules/public-landing/public/projects.html","line":1373,"string_id":"7ad12a8a0b97","state":"in-manage"},
         {"key":"L0166","section":"Its environment variables","text":"Why there is nowhere to type the value","placement":"placed","file":"modules/public-landing/public/projects.html","line":1376,"string_id":"101301013616","state":"in-manage"},
@@ -4706,7 +4706,7 @@
         {"key":"L0560","section":"02How it’s run filled in from your answers","text":"1 suggested for a {…}","placement":"unplaced","state":"in-new-ready"},
         {"key":"L0561","section":"02How it’s run filled in from your answers","text":"Extras for this project","placement":"placed","file":"modules/public-landing/public/projects.html","line":1890,"string_id":"7c8dcf228e70","state":"in-new-row-extras"},
         {"key":"L0562","section":"02How it’s run filled in from your answers","text":"Search extras…","placement":"placed","file":"modules/public-landing/public/projects.html","line":1891,"string_id":"74f80d9e1abc","attr":"placeholder","state":"in-new-row-extras"},
-        {"key":"L0563","section":"02How it’s run filled in from your answers","text":"Every project also has the same 18 core parts, always on: the platform, its work tracking and the builders’ hall.","placement":"unplaced","state":"in-new-row-extras"},
+        {"key":"L0563","section":"02How it’s run filled in from your answers","text":"Every project also has the same 19 core parts, always on: the platform, its work tracking and the builders’ hall.","placement":"unplaced","state":"in-new-row-extras"},
         {"key":"L0564","section":"02How it’s run filled in from your answers","text":"Just the core for now","placement":"unplaced","state":"in-new"},
         {"key":"L0565","section":"02How it’s run filled in from your answers","text":"Pick a kind and we suggest extras for it.","placement":"unplaced","state":"in-new"},
         {"key":"L0566","section":"02How it’s run filled in from your answers","text":"Rewards","placement":"unplaced","state":"in-new"},

package/modules/app-host/CLAUDE.md

@@ -0,0 +1,15 @@
+# @bongos/core — installed platform dependency (not your project's CLAUDE.md)
+
+This file is a placeholder shipped inside the **@bongos/core** package. The core's own
+internal agent notes are intentionally omitted from the published artifact so they cannot
+load into your instance's context.
+
+**It does not govern this repository.** Your own root `CLAUDE.md`, your `.claude/`
+directory, and the live Bongos database are the source of truth for how work happens here
+and who may do what.
+
+You are seeing this only because an agent opened a file under `node_modules/@bongos/core/`.
+Nothing in here needs to be read to use the platform — run `bongos help` for commands.
+
+_To work ON the platform core itself, use the standalone @bongos/core source repository,
+not this vendored copy._

package/modules/app-host/module.json

@@ -0,0 +1,20 @@
+{
+  "key": "app-host",
+  "title": "Where the app runs",
+  "description": "Shows, in a project's options menu, where the project's own app runs: no platform yet, or Render with its stage (creating, building, live, failed) and its address once live. Read from the hub with the project's own credentials, never from Render. The owner gets a Connect Render link to the hub's existing connect flow, and a failure says what went wrong and where to retry it; every other builder sees the state alone (task 1004571).",
+  "version": "1.0.0",
+  "coreVersion": "^1.25.0",
+  "category": { "parent": "hosting" },
+  "default": true,
+  "author": "Cloud Bongos",
+  "origin": "Cloud Bongos core",
+  "license": "AGPL-3.0",
+  "maintainer": "Cloud Bongos maintainers",
+  "maintenance": { "status": "core-maintained" },
+  "contributes": {
+    "routes": ["app-host"],
+    "uiSections": ["app-host"]
+  },
+  "provides": [],
+  "consumes": []
+}

package/modules/app-host/public/settings-widget.js

@@ -0,0 +1,143 @@
+// modules/app-host/public/settings-widget.js — the options menu's "Where the app runs" panel
+// (task 1004571).
+//
+// A module's panel in the one options menu (V3G.R04): registered through the settings-panel
+// seam (window.OTB.contributeSettingsPanel), injected before settings.js only while this
+// module is on. It draws GET /api/bongos/app-host and decides nothing: which actions a viewer
+// gets is the server's answer (`owner`, `connect_url`), and every sentence about a failure is
+// the setup's own (app-status.js oneSentence). It never offers a second Render form — Connect
+// Render and Retry are links to the hub's own Manage panel, where that flow already lives.
+(() => {
+  'use strict';
+
+  const OTB = window.OTB || {};
+  if (typeof OTB.contributeSettingsPanel !== 'function') return;
+  if (typeof OTB.escapeHtml !== 'function') return;
+  const esc = OTB.escapeHtml;
+
+  // Only these shapes are ever put in an href: the app's onrender.com address, Render's own
+  // dashboard, and the hub page the server named. Anything else draws no link.
+  const APP_URL_RE = /^https:\/\/[a-z0-9-]{1,63}\.onrender\.com\/?$/;
+  const RENDER_RE = /^https:\/\/dashboard\.render\.com\//;
+  const HUB_RE = /^https?:\/\/[^\s"'<>]+$/i;
+  const safe = (url, re) => (typeof url === 'string' && re.test(url) ? url : null);
+
+  function pill(tone, word) {
+    return `<span class="status-pill status-pill--${tone}">${esc(word)}</span>`;
+  }
+  function row(label, desc, ctl) {
+    return `<div class="prow">
+      <div class="prow__main"><span class="prow__label">${label}</span>${desc ? `<span class="prow__desc">${desc}</span>` : ''}</div>
+      ${ctl ? `<div class="prow__ctl">${ctl}</div>` : ''}
+    </div>`;
+  }
+  const hint = (text) => `<p class="panel-hint">${text}</p>`;
+  const where = (d) => (d.hub_host ? `this project's page on ${esc(d.hub_host)}` : "this project's page");
+
+  /** The owner's action, or the line that says who can act. */
+  function action(d, ownerLabel, othersLine) {
+    const href = safe(d.connect_url, HUB_RE);
+    if (d.owner && href) {
+      return `<div class="row-end"><a class="pbtn pbtn--save" href="${esc(href)}">${esc(ownerLabel)}</a></div>`
+        + hint(`Opens ${where(d)}, where it is set up.`);
+    }
+    return hint(othersLine);
+  }
+
+  // The stage, in the words a builder reads: what is happening and which step it is.
+  const STAGE = {
+    creating: ['info', 'creating', 'Render is creating the app’s service. Step 1 of 3.'],
+    building: ['info', 'building', 'Render is building the app. Step 2 of 3.'],
+    quiet: ['warn', 'no answer yet', 'Render hasn’t answered for over 20 minutes. It may have stopped the build.'],
+    live: ['ok', 'live', 'The app is live. Step 3 of 3.'],
+  };
+
+  // The sandbox beside a Render app (task 1005289): a free copy on the owner's Render account
+  // that follows main. Drawn only when the server sent one, in the same words and pills.
+  const SANDBOX_STAGE = {
+    creating: ['info', 'creating', 'Render is creating the sandbox.'],
+    building: ['info', 'building', 'Render is building the sandbox.'],
+    quiet: ['warn', 'no answer yet', 'Render hasn’t answered about the sandbox for a while.'],
+    live: ['ok', 'live', 'The sandbox is live. It updates with every finished change.'],
+  };
+  function sandboxRow(sb) {
+    if (!sb || typeof sb !== 'object') return '';
+    if (sb.state === 'left') return row('Sandbox', esc(sb.error || 'The sandbox is still on the Render account.'), pill('neutral', 'left'));
+    if (sb.state === 'failed') return row('Sandbox', `Setting up the sandbox stopped. ${esc(sb.error || '')}`.trim(), pill('danger', 'failed'));
+    const own = Object.prototype.hasOwnProperty.call(SANDBOX_STAGE, sb.stage);
+    const [tone, word, line] = own ? SANDBOX_STAGE[sb.stage] : SANDBOX_STAGE.creating;
+    let desc = esc(sb.state === 'requested' && sb.message ? sb.message : line);
+    const url = safe(sb.url, APP_URL_RE);
+    if (sb.stage === 'live' && url) desc += ` <a href="${esc(url)}" target="_blank" rel="noopener">${esc(url.replace(/^https:\/\//, ''))}</a>`;
+    return row('Sandbox', desc, pill(tone, word));
+  }
+
+  /** The panel's body for one server answer. PURE (exported on window for the test). */
+  function render(d) {
+    if (!d || d.hub !== true) {
+      return hint('This project runs on its own server, so where its app runs is set up there, not here.');
+    }
+    if (!d.reachable) {
+      return row('Platform', `Couldn’t ask ${d.hub_host ? esc(d.hub_host) : 'the platform'} just now.`, pill('neutral', 'unknown'))
+        + '<div class="row-end"><button type="button" class="pbtn" data-app-host-retry>Check again</button></div>';
+    }
+    if (!d.known) {
+      return hint(`This project’s app isn’t set up through ${d.hub_host ? esc(d.hub_host) : 'the platform'}, so there is nothing to show here.`);
+    }
+    const app = d.app;
+    if (!app || app.platform !== 'render' || app.state === 'disconnected') {
+      const was = app && app.state === 'disconnected' ? ' Render was disconnected.' : '';
+      return row('Platform', `No platform yet. The app isn’t running anywhere.${was}`, pill('neutral', 'no platform'))
+        + action(d, 'Connect Render', 'The project’s owner can connect Render to run the app.');
+    }
+    if (app.state === 'failed') {
+      const why = app.error ? esc(app.error) : 'The setup stopped without saying why.';
+      return row('Render', `Setting the app up on Render stopped. ${why}`, pill('danger', 'failed'))
+        + action(d, 'Retry on the project page', `The project’s owner can retry it from ${where(d)}.`)
+        + sandboxRow(d.sandbox);
+    }
+    const [tone, word, line] = Object.prototype.hasOwnProperty.call(STAGE, app.stage) ? STAGE[app.stage] : STAGE.creating;
+    let desc = esc(line);
+    if (app.waiting && app.stage === 'creating') desc = 'Waiting to start. The setup begins shortly. Step 1 of 3.';
+    const url = safe(app.url, APP_URL_RE);
+    if (app.stage === 'live' && url) desc += ` <a href="${esc(url)}" target="_blank" rel="noopener">${esc(url.replace(/^https:\/\//, ''))}</a>`;
+    let out = row('Render', desc, pill(tone, word));
+    const links = app.links || {};
+    const deploys = safe(links.deploys, RENDER_RE);
+    const service = safe(links.service, RENDER_RE);
+    if (app.stage === 'quiet' && deploys) {
+      out += `<div class="row-end"><a class="pbtn" href="${esc(deploys)}" target="_blank" rel="noopener">Open Render’s deploy history</a></div>`;
+    } else if (service) {
+      out += `<div class="row-end"><a class="pbtn" href="${esc(service)}" target="_blank" rel="noopener">Open in Render</a></div>`;
+    }
+    return out + sandboxRow(d.sandbox);
+  }
+
+  async function load(el) {
+    el.setAttribute('aria-busy', 'true');
+    el.innerHTML = hint('Checking where the app runs…');
+    let d = null;
+    try {
+      const res = await fetch('/api/bongos/app-host', { credentials: 'same-origin', headers: { Accept: 'application/json' } });
+      d = res.ok ? await res.json() : null;
+    } catch { d = null; }
+    el.innerHTML = d ? render(d) : row('Platform', 'Couldn’t load this just now.', pill('neutral', 'unknown'))
+      + '<div class="row-end"><button type="button" class="pbtn" data-app-host-retry>Check again</button></div>';
+    el.removeAttribute('aria-busy');
+    const again = el.querySelector('[data-app-host-retry]');
+    if (again) again.addEventListener('click', () => { load(el).then(() => { const b = el.querySelector('.pbtn, a'); if (b) b.focus(); }); });
+  }
+
+  OTB.contributeSettingsPanel({
+    id: 'app-host',
+    title: 'Where the app runs',
+    order: 10,
+    mount(el) {
+      el.setAttribute('aria-live', 'polite');
+      el.insertAdjacentHTML('beforebegin', '<p class="scroll__lede">The app is what your users open. This hall is hosted for you; the app runs on a platform the project’s owner connects.</p>');
+      load(el);
+    },
+  });
+
+  window.OTBAppHost = { render };
+})();

package/modules/app-host/routes/app-host.js

@@ -0,0 +1,88 @@
+// modules/app-host/routes/app-host.js — GET /app-host: where this project's app runs, for
+// the options menu's "Where the app runs" panel (task 1004571).
+//
+// We host every project's hall; its app runs on the owner's Render account (ADR 0345), and
+// the setup's state is the hub's provisioning row. So this asks the hub through the kernel's
+// narrow port (api.readAppStatusFromHub — the project's own credentials, no argument), and
+// passes on modules/provisioning/app-status.js's shape. It never calls Render.
+//
+// WHO SEES WHAT IS DECIDED HERE, NOT IN THE PAGE. Every signed-in builder sees the state:
+// the stage, the address once live, and a failure in the setup's own words. Only a builder
+// holding `core.pin.move` — the owner's hard gate over what runs for users, the atom the
+// deploy door and Software update read — is handed the owner's actions: the Connect Render
+// link, the Render dashboard links, and where to retry. The link only names the hub page;
+// the hub's own Manage panel is still the door, and it opens only for the project's owner.
+//
+// TOLERANT OF NEW FIELDS. The hub's shape grows (a sandbox address is coming, task
+// 1005289), so the reply passes the status through and only REMOVES the owner-only fields
+// for everyone else, rather than rebuilding it from a list that would silently drop them.
+'use strict';
+
+const express = require('express');
+const api = require('../../../src/module-api');
+
+const log = api.logger('app-host');
+
+// What only the owner is handed from the hub's status: the Render dashboard links, the
+// workspace id, and the answers a retry re-sends (the retry itself happens on the hub).
+const OWNER_ONLY = Object.freeze(['links', 'workspace', 'retry', 'can_add']);
+// The hub page's section for the app (modules/public-landing/public/projects.html #mAppCard).
+const APP_SECTION = '#mAppCard';
+
+/** Does this viewer hold the owner's atom? Fail-closed: authority that cannot be read is no. */
+async function holdsOwnerAtom(req) {
+  try {
+    const government = api.resolveOptional('government');
+    if (!government || typeof government.resolveBuilderPermissions !== 'function') return false;
+    const held = (await government.resolveBuilderPermissions(req.builder && req.builder.id)) || [];
+    return held.includes('core.pin.move');
+  } catch { return false; }
+}
+
+/**
+ * The reply for one viewer, from the hub read. PURE — the route's whole decision.
+ * read: { hub: false } | { hub: true, reachable, known?, app?, sandbox?, manage? }
+ * The sandbox (render-sandbox.js's shape, task 1005289) is filtered the same way, and left
+ * out while there is none: adding one is the owner's, on the hub's page.
+ */
+function viewFor(read, { owner = false } = {}) {
+  const r = read && typeof read === 'object' ? read : { hub: false };
+  if (r.hub !== true) return { hub: false, reachable: false, known: false, app: null, sandbox: null, owner: false, connect_url: null, hub_host: null };
+  const manage = r.manage && typeof r.manage.manage_url === 'string' ? r.manage : null;
+  let app = r.app && typeof r.app === 'object' ? { ...r.app } : null;
+  if (app && !owner) for (const k of OWNER_ONLY) delete app[k];
+  if (app && owner && 'retry' in app) delete app.retry; // the retry form is the hub's; the hall only links to it
+  let sandbox = r.sandbox && typeof r.sandbox === 'object' && r.sandbox.state !== 'none' ? { ...r.sandbox } : null;
+  if (sandbox) for (const k of OWNER_ONLY) if (!owner || k === 'retry' || k === 'can_add') delete sandbox[k];
+  return {
+    hub: true,
+    reachable: r.reachable === true,
+    known: r.reachable === true && r.known === true,
+    app,
+    sandbox: app ? sandbox : null,
+    owner: !!owner,
+    connect_url: owner && manage ? manage.manage_url + APP_SECTION : null,
+    hub_host: manage ? manage.hub_host || null : null,
+  };
+}
+
+module.exports = function buildAppHostRouter({ readHub = () => api.readAppStatusFromHub(), isOwner = holdsOwnerAtom } = {}) {
+  const router = express.Router();
+
+  // GET /app-host — rank: any signed-in builder; owner-only parts gated on core.pin.move.
+  router.get('/app-host', api.requireBuilder, async (req, res) => {
+    try {
+      const [read, owner] = await Promise.all([readHub(), isOwner(req)]);
+      res.set('Cache-Control', 'no-store');
+      res.json({ ok: true, ...viewFor(read, { owner: owner === true }) });
+    } catch (err) {
+      log.error('[app-host] GET /app-host', err && err.message);
+      res.fail('app_host_failed', { status: 500, message: 'Could not read where the app runs.' });
+    }
+  });
+
+  return router;
+};
+
+module.exports.viewFor = viewFor;
+module.exports.OWNER_ONLY = OWNER_ONLY;