@bongos/core 1.25.7 → 1.25.8

package/modules/provisioning/github-setup.js

@@ -134,6 +134,9 @@ function githubChecklist(status, appSlug, facts = {}) {
     // what "is alive" waits for — device flow is optional by design
     connected: approve === 'done' && install === 'done' && signIn === 'done',
     wired_elsewhere: elsewhere,
+    // GitHub sent the founder back from the install page (or they asked for a check) and
+    // the runner has not confirmed it yet: the page shows the step as being checked
+    install_checking: install !== 'done' && !!(facts.installReportedAt || facts.checkRequestedAt),
   };
 }
 

package/modules/public-landing/public/projects.html

@@ -533,7 +533,10 @@ body:has(#view-new:not([hidden])) footer.foot{position:relative;z-index:1;backgr
 .setFact .optional{margin-left:8px;font-family:var(--label-face);font-size:var(--label-size);letter-spacing:var(--label-space);text-transform:uppercase;color:var(--ink-faint);}
 .setFact.done .d{background:color-mix(in srgb,var(--ok) 12%,transparent);color:var(--ok);border-color:var(--ok);}
 .setFact.done .t,.setFact.now .t,.setFact.you .t{color:var(--ink);}
-.setFact.now .d{border:2px solid var(--accent);}
+.setFact.now .d{border:2px solid var(--accent);border-top-color:transparent;animation:factSpin 1s linear infinite;}
+/* a loading wheel is essential, so it turns even with reduced motion (slower, no pulse) */
+@media (prefers-reduced-motion:reduce){.setFact.now .d{animation-duration:2s;}}
+@keyframes factSpin{to{transform:rotate(360deg)}}
 .setFact.you .d{background:color-mix(in srgb,var(--accent) 16%,transparent);border-color:color-mix(in srgb,var(--accent) 60%,transparent);color:var(--ink);}
 .setFact.bad .d{background:color-mix(in srgb,var(--err) 10%,transparent);color:var(--err);border-color:var(--err);}
 .setFact.bad .t{color:var(--err);}
@@ -548,8 +551,7 @@ body:has(#view-new:not([hidden])) footer.foot{position:relative;z-index:1;backgr
 .setFact .acctPick .acctTyped{margin-top:10px;}
 .setFact .acctPick .hint{min-height:0;}
 @media (prefers-reduced-motion:no-preference){
-  .setFact.now .d{animation:factBreathe 1.4s ease-in-out infinite,factSpin 1s linear infinite;border-top-color:transparent;}
-  @keyframes factSpin{to{transform:rotate(360deg)}}
+  .setFact.now .d{animation:factBreathe 1.4s ease-in-out infinite,factSpin 1s linear infinite;}
   .setNow.working::after{content:"";display:inline-block;width:1.2em;text-align:left;animation:workDots 1.4s steps(4,end) infinite;}
   @keyframes workDots{0%{content:""}25%{content:"."}50%{content:".."}75%{content:"..."}}
   @keyframes factBreathe{0%,100%{border-color:var(--accent)}50%{border-color:color-mix(in srgb,var(--accent) 35%,transparent)}}
@@ -6933,6 +6935,7 @@ summary{min-height:24px;padding:3px 0;}
        sentence and carries the action that fixes it, with the app GitHub already made, never a
        second one. live.pickUp is the server's word for what that action does (github-setup.js
        pickUpFor); live.verifying is whether the runner is still checking. */
+    var installOpened = false;   /* this page sent the founder to GitHub's install page */
     var ghTabTrouble = null;   /* 'behind' | 'closed': what this page saw of the GitHub tab it opened */
     var NO_SECOND_APP = 'Nothing is lost, and no second app will be made.';
     function projectName() { return state.name || state.slug || 'your project'; }
@@ -7067,6 +7070,10 @@ summary{min-height:24px;padding:3px 0;}
       /* the runner stopped checking and GitHub never confirmed the install: the link opens the
          SAME app's install page, and the click asks the runner to look again */
       else if (live.pickUp === 'check') { install.state = 'bad'; install.sub = 'GitHub stopped before the app was on ' + (repo || 'your repo') + '.'; install.right = checked; install.act = 'pick-up-link'; install.href = installUrl; }
+      /* the founder came back from GitHub's install page (GitHub reported it, or they pressed
+         the link here): the runner is checking with GitHub, so the step spins until it ticks,
+         and the link stays in case they never finished */
+      else if ((live.setup && live.setup.install_checking) || installOpened) { install.state = 'now'; install.sub = (repo ? repo + '. ' : '') + 'Checking with GitHub. This ticks by itself.'; install.right = checked; install.act = 'install-link'; install.href = installUrl; }
       else { install.state = 'you'; install.right = 'not yet seen'; install.act = 'install-link'; install.href = installUrl; }
 
       var signIn = { key: 'sign_in', title: 'Builders can sign in' };
@@ -7313,6 +7320,7 @@ summary{min-height:24px;padding:3px 0;}
       var ib = $('installBtn'), instRow = gh[1];
       var instHref = instRow && instRow.state !== 'done' && homeUp && (instRow.act === 'install-link' || instRow.act === 'pick-up-link') ? installHrefOf(instRow) : '';
       if (instHref) ib.setAttribute('href', instHref); else ib.removeAttribute('href');
+      if (!ib.getAttribute('data-wired')) { ib.setAttribute('data-wired', '1'); ib.addEventListener('click', function () { installOpened = true; paintFacts(); }); }
       ib.hidden = !instHref;
       paintSetDone(ready, home, gh);
       tipsRun(!ready);

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.25.7",
+  "version": "1.25.8",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.25.7",
+      "version": "1.25.8",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.25.7",
+  "version": "1.25.8",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -11753,5 +11753,6 @@
       "id": "1005219",
       "text": "Opening the builders' hall now starts on the Game or Classic choice. Signed out, your pick takes you to sign in and then straight to that menu."
     }
-  ]
+  ],
+  "1.25.8": []
 }

package/src/module-api.js

@@ -81,7 +81,7 @@ const { sleep } = require('./sleep');
 // MAJOR (see allowBoxScope below): passes the request through untouched.
 function deprecatedNoopMiddleware(_req, _res, next) { next(); }
 
-const CORE_VERSION = '1.25.7'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.25.8'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('discord'); log.info('mounted');

package/tests/github_one_trip.mjs

@@ -35,7 +35,7 @@ const SCRIPT = HUB.slice(HUB.lastIndexOf('<script>'), HUB.lastIndexOf('</script>
 
 test('each step reads only what the server has seen — the honest "not yet" states included', () => {
   const none = GS.githubChecklist(null, null);
-  assert.deepEqual(none, { approve: 'todo', install: 'todo', sign_in: 'todo', device_flow: 'todo', connected: false, wired_elsewhere: false }, 'never started');
+  assert.deepEqual(none, { approve: 'todo', install: 'todo', sign_in: 'todo', device_flow: 'todo', connected: false, wired_elsewhere: false, install_checking: false }, 'never started');
   assert.equal(GS.githubChecklist('pending', null).approve, 'now', 'waiting for the approval on GitHub');
   for (const s of ['code_received', 'converting']) {
     const c = GS.githubChecklist(s, null);
@@ -327,3 +327,10 @@ test('the device-flow finding lives in the direction doc, and the code points at
   assert.match(doc, /Device flow cannot be switched on for the founder \(spike, task 1004649\)/);
   assert.match(fs.readFileSync(path.join(ROOT, 'modules', 'provisioning', 'github-setup.js'), 'utf8'), /docs\/design\/project-startup-direction\.md/);
 });
+
+test('back from the install page, the install step reads as being checked until GitHub confirms it', () => {
+  const { githubChecklist } = require('../modules/provisioning/github-setup.js');
+  assert.equal(githubChecklist('done', 'kestrel', {}).install_checking, false, 'not reported yet');
+  assert.equal(githubChecklist('done', 'kestrel', { installReportedAt: '2026-10-25T10:00:00Z' }).install_checking, true, 'reported, not yet seen');
+  assert.equal(githubChecklist('done', 'kestrel', { installReportedAt: '2026-10-25T10:00:00Z', installedAt: '2026-10-25T10:01:00Z' }).install_checking, false, 'seen: done');
+});

package/tests/github_sign_in_seen.mjs

@@ -53,7 +53,7 @@ test('the project saying sign-in works ticks sign-in, whatever the attempt row s
 
 test('without that answer, nothing changes: a pending attempt still waits on GitHub', () => {
   const c = gs.githubChecklist('pending', null, {});
-  assert.deepEqual(c, { approve: 'now', install: 'todo', sign_in: 'todo', device_flow: 'todo', connected: false, wired_elsewhere: false });
+  assert.deepEqual(c, { approve: 'now', install: 'todo', sign_in: 'todo', device_flow: 'todo', connected: false, wired_elsewhere: false, install_checking: false });
 });
 
 test('with our app recorded, the answer ticks sign-in and the install keeps its own fact', () => {