@bongos/core 1.19.402 → 1.19.403

package/public-landing/projects.html

@@ -539,7 +539,7 @@ summary{min-height:24px;padding:3px 0;}
           <td class="right num" id="selfBuilders">—</td>
           <td class="colTags" id="selfTags">—</td>
           <td class="right colStatus"><span class="chip calm"><span class="cdot"></span>—</span></td>
-          <td class="colGo"><a class="rowGo" href="/">Open →</a></td>
+          <td class="colGo"><a class="rowGo" href="/">Open →</a><a class="rowHall" id="selfHall" href="{{buildersOrigin}}" aria-label="Builders' hall" title="Builders' hall" hidden><svg viewBox="0 0 20 20" aria-hidden="true"><path d="M2.8 7.4 10 3.5l7.2 3.9"/><path d="M5.2 8.8v5.6M10 8.8v5.6M14.8 8.8v5.6"/><path d="M3.4 16.3h13.2"/></svg></a></td>
         </tr>
         <!--apex-only:end-->
       </tbody>
@@ -563,20 +563,30 @@ summary{min-height:24px;padding:3px 0;}
   <div class="cardScrim" id="cardScrim" hidden>
     <div class="projCard" id="projCard" role="dialog" aria-modal="true" aria-labelledby="cardName">
       <button type="button" class="cardX" id="cardClose" aria-label="Close">✕</button>
+      <!-- The poster (task 1003301, the v2 pick): every region a DIRECT child of
+           the card, on purpose. The C6 card test slices the card non-greedily up
+           to the first adjacent pair of closing wrapper tags, and a nested
+           wrapper would silently shorten what that test guards. So the banner is
+           a bare img, the figures and the faces are paragraphs, the facts a
+           definition list. Each region degrades by hiding: no art, no banner;
+           no faces, no row; one figure null, the other stands alone; both null,
+           no band; a fact with no answer hides label and value together,
+           because "Owner: dash" on the most authoritative-looking element of
+           the page reads as broken, not honest (task 1002778). Everything null
+           is the card that shipped before this one: disc, name, tagline,
+           relationship, the address, one door. -->
+      <img class="cardArt" id="cardArt" alt="" hidden>
+      <p class="cardFigs" id="cardFigs" hidden>
+        <span class="cardCall a" id="cardBuildersFig" hidden><svg class="lead" viewBox="0 0 68 26" preserveAspectRatio="none" aria-hidden="true"><line x1="0" y1="25" x2="67" y2="1" stroke="currentColor" stroke-width="1" vector-effect="non-scaling-stroke"/></svg><span class="fig" id="cardBuilders"></span><span class="cap">builders</span></span>
+        <span class="cardCall b" id="cardShippedFig" hidden><svg class="lead" viewBox="0 0 68 26" preserveAspectRatio="none" aria-hidden="true"><line x1="0" y1="25" x2="67" y2="1" stroke="currentColor" stroke-width="1" vector-effect="non-scaling-stroke"/></svg><span class="fig" id="cardShipped"></span><span class="cap">shipped in 30 days</span></span>
+      </p>
       <span class="cardDot" id="cardDot"></span>
       <h3 id="cardName"></h3>
       <p class="cardTag" id="cardTag"></p>
       <p class="cardRel" id="cardRel" hidden></p>
-      <!-- The facts strip. A definition list, never nested block wrappers, on
-           purpose: the C6 card test slices the card non-greedily up to the
-           first adjacent pair of closing wrapper tags, and a nested wrapper
-           would silently shorten what that test guards. A fact with no answer
-           hides, label and value together, because "Owner: dash" on the most
-           authoritative-looking element of the page reads as broken, not
-           honest (task 1002778). -->
+      <p class="cardFaces" id="cardFaces" hidden></p>
       <dl class="cardMeta" id="cardMeta" hidden>
         <dt id="cardTypeL" hidden>Type</dt><dd id="cardType" hidden></dd>
-        <dt id="cardBuildersL" hidden>Builders</dt><dd id="cardBuilders" hidden></dd>
         <dt id="cardRunsL" hidden>Runs</dt><dd id="cardRuns" hidden></dd>
         <dt id="cardOwnerL" hidden>Owner</dt><dd id="cardOwner" hidden></dd>
         <dt id="cardListedL" hidden>Listed</dt><dd id="cardListed" hidden></dd>
@@ -1492,7 +1502,7 @@ summary{min-height:24px;padding:3px 0;}
           : '<span class="chip calm"><span class="cdot"></span>—</span>') + '</td>' +
         '<td class="colGo">' + (safeHttpUrl(p.origin)
           ? '<a class="rowGo" href="' + esc(safeHttpUrl(p.origin)) + '" target="_blank" rel="noopener">Open →</a>'
-          : '') + '</td>' +
+          : '') + hallGlyphHtml(p, rel) + '</td>' +
         '</tr>';
     }).join(''));
   }
@@ -1577,6 +1587,9 @@ summary{min-height:24px;padding:3px 0;}
     if (row) {
       row.hidden = !selfShown;
       $('selfPill').innerHTML = badge ? ' <span class="pill">' + badge + '</span>' : '';
+      /* the hall glyph: member-gated (the badge says so) and address-gated */
+      var sh = $('selfHall');
+      if (sh) sh.hidden = !badge || !hallUrlOf(SELF_PROJECT);
     }
 
     var shown = list.length + (selfShown ? 1 : 0);
@@ -1639,32 +1652,111 @@ summary{min-height:24px;padding:3px 0;}
     return !!value;
   }
 
+  /* Runs, on the poster, is the project's ADDRESS: where it answers. The table
+     keeps the module list in its Runs column (the v2 pick, direction §7). */
+  function runsOf(p) {
+    return p.isSelf ? hostOf(location.host) : hostOf(p.origin);
+  }
+  /* shipped in the last 30 days, "N+" when the count sat at the feed's row cap;
+     null is "we could not ask" and hides, 0 is a real answer and renders */
+  function shippedFigure(p) {
+    if (p.shipped_30d == null) return '';
+    return String(p.shipped_30d) + (p.shipped_30d_capped ? '+' : '');
+  }
+  /* A figure either has an answer or takes no space: the callout hides whole,
+     leader and caption with it, so the other figure stands alone. */
+  function cardFig(id, value) {
+    $(id).textContent = value || '';
+    $(id + 'Fig').hidden = !value;
+    return !!value;
+  }
+  /* The faces: up to five avatars from the project's own leaderboard, then +N
+     for the builders beyond them. Third-party URLs, scheme-checked before they
+     become a src. No faces, no row. */
+  var FACES_MAX = 5;
+  function cardFaces(p) {
+    var faces = Array.isArray(p.faces) ? p.faces.map(safeHttpUrl).filter(Boolean).slice(0, FACES_MAX) : [];
+    var more = p.builders != null && p.builders > faces.length ? p.builders - faces.length : 0;
+    $('cardFaces').innerHTML = faces.map(function (u) {
+      return '<img src="' + esc(u) + '" alt="" loading="lazy">';
+    }).join('') + (more ? '<span class="facesMore">+' + more + '</span>' : '');
+    $('cardFaces').hidden = !faces.length;
+  }
+  /* The banner. has-art switches the whole layout (the disc over the banner's
+     edge, the figures as callouts on it); without art the card is the card
+     that shipped before this one. A broken image demotes to no-art, so the
+     most authoritative element of the page never shows a broken glyph. */
+  function cardArt(url) {
+    var img = $('cardArt');
+    if (url) img.src = url; else img.removeAttribute('src');
+    img.hidden = !url;
+    $('projCard').classList.toggle('has-art', !!url);
+  }
+  $('cardArt').addEventListener('error', function () { cardArt(''); });
+  /* EXACTLY ONE hall-URL derivation (task 1003257, owner decision a). The hub's
+     own hall comes from the DOM: the server-stamped anchor in its own table row
+     (dropped whole by the stamp when a pack names no hall; never assembled in
+     script). A project's comes from the hall_origin its feed row carries. Both
+     go through safeHttpUrl, and both count only where the hall is a different
+     host from the site: a door that opens onto the room you are in is a dead door. */
+  function hallUrlOf(p) {
+    var hall, site;
+    if (p.isSelf) {
+      var a = $('selfHall');
+      hall = a ? safeHttpUrl(a.getAttribute('href')) : '';
+      site = location.host;
+    } else {
+      hall = safeHttpUrl(p.hall_origin);
+      site = p.origin;
+    }
+    return hall && hostOf(hall) !== hostOf(site) ? hall : '';
+  }
+  var HALL_GLYPH = '<svg viewBox="0 0 20 20" aria-hidden="true"><path d="M2.8 7.4 10 3.5l7.2 3.9"/><path d="M5.2 8.8v5.6M10 8.8v5.6M14.8 8.8v5.6"/><path d="M3.4 16.3h13.2"/></svg>';
+  function isMember(rel) { return rel === 'owner' || rel === 'builder'; }
+  /* the row's hall glyph: a member's door, only where the hall is elsewhere */
+  function hallGlyphHtml(p, rel) {
+    var hall = isMember(rel) ? hallUrlOf(p) : '';
+    return hall
+      ? '<a class="rowHall" href="' + esc(hall) + '" target="_blank" rel="noopener" aria-label="Builders\' hall" title="Builders\' hall">' + HALL_GLYPH + '</a>'
+      : '';
+  }
+
   function openCard(p, rel, returnTo) {
     var href = p.isSelf ? '/' : safeHttpUrl(p.origin);
+    /* the art: catalog text an Archon typed, scheme-checked server-side and
+       again here before it becomes a src */
+    cardArt(p.isSelf ? '' : safeHttpUrl(p.art_url));
     $('cardDot').style.setProperty('--acc', p.isSelf ? 'var(--accent)' : accentOf(p));
     $('cardName').textContent = p.name || '';
     $('cardTag').textContent = p.tagline || '';
     var label = rel === 'owner' ? 'yours' : rel === 'builder' ? 'you build here' : '';
     $('cardRel').textContent = label;
     $('cardRel').hidden = !label;
-    /* builders: 0 is a real answer ("nobody has joined yet"), null is "we could
-       not ask" and hides. runs: [] is a real answer too — the project declares
-       nothing beyond the core set, which the owner voiced as "core". */
+    cardFaces(p);
+    /* the two figures: builders (0 is a real answer, "nobody has joined yet";
+       null is "we could not ask" and hides) and shipped in the last 30 days */
+    var figs = cardFig('cardBuilders', p.builders == null ? '' : String(p.builders));
+    figs = cardFig('cardShipped', shippedFigure(p)) || figs;
+    $('cardFigs').hidden = !figs;
     var any = cardFact('cardType', typeLabel(p.type));
-    any = cardFact('cardBuilders', p.builders == null ? '' : String(p.builders)) || any;
-    any = cardFact('cardRuns', Array.isArray(p.tags) ? tagsHtml(p.tags) : '', true) || any;
+    any = cardFact('cardRuns', runsOf(p)) || any;
     /* when the rel chip already says "yours", naming the viewer as Owner is
        noise — the fact answers strangers, not the person it describes */
     any = cardFact('cardOwner', rel === 'owner' ? '' : ownerHtml(p), true) || any;
     any = cardFact('cardListed', p.created_at ? listedDate(p.created_at) : '') || any;
     $('cardMeta').hidden = !any;
     /* the platform's door is same-tab: / is this site, and a new tab for the
-       page you are already on is a bug, not a courtesy */
-    $('cardActions').innerHTML = href
-      ? '<a class="btn small" href="' + esc(href) + '"' +
+       page you are already on is a bug, not a courtesy. The hall door beside it
+       is member-gated AND address-gated: a member's entry, only where the hall
+       is somewhere other than the site the first door already opens. */
+    var hall = isMember(rel) ? hallUrlOf(p) : '';
+    $('cardActions').innerHTML = (href
+      ? '<a class="cardOpen" id="cardOpen" href="' + esc(href) + '"' +
         (p.isSelf ? '' : ' target="_blank" rel="noopener"') + '>' +
         (p.isSelf ? 'Home →' : 'Open site →') + '</a>'
-      : '';
+      : '') + (hall
+      ? '<a class="cardHall" id="cardHall" href="' + esc(hall) + '" target="_blank" rel="noopener">' + HALL_GLYPH + 'Builders\' hall</a>'
+      : '');
     closeMenus();
     cardReturn = returnTo || null;
     $('cardScrim').hidden = false;
@@ -1864,6 +1956,7 @@ summary{min-height:24px;padding:3px 0;}
            builder count and its owner — the archon row — by the same rule the
            server-side enrichment applies to every other project */
         SELF_PROJECT.builders = real.length;
+        SELF_PROJECT.faces = real.map(function (b) { return safeHttpUrl(b.avatar_url); }).filter(Boolean).slice(0, FACES_MAX);
         var arch = real.filter(function (b) { return b.rank === 'archon'; })[0];
         if (arch && arch.github_login) {
           SELF_PROJECT.owner = String(arch.github_login);
@@ -1872,6 +1965,21 @@ summary{min-height:24px;padding:3px 0;}
       })
       .catch(function () { /* unreachable → the dash already in the markup stands */ });
   }
+  /* the platform's shipped-in-30-days figure, by the rule the server applies
+     to every other project (project-stats.js): rows inside the window from
+     shipped_at, "N+" when the feed's row cap (200 with ?days honoured) was full */
+  function loadSelfShipped() {
+    return fetch(API + '/public/recent-shipped?days=30', { credentials: 'same-origin' })
+      .then(function (res) { return res.ok ? res.json() : null; })
+      .then(function (d) {
+        if (!d || !Array.isArray(d.tasks)) return;
+        var since = Date.now() - 30 * 24 * 60 * 60 * 1000;
+        var n = d.tasks.filter(function (t) { return Date.parse(t && t.shipped_at) >= since; }).length;
+        SELF_PROJECT.shipped_30d = n;
+        SELF_PROJECT.shipped_30d_capped = d.tasks.length >= 200 && n === d.tasks.length;
+      })
+      .catch(function () { /* unknown stays unknown: the figure hides */ });
+  }
 
   function loadCatalog() {
     fetch(API + '/projects/featured', { credentials: 'same-origin' })
@@ -5610,7 +5718,8 @@ summary{min-height:24px;padding:3px 0;}
        signed-out stranger lands on and it must not depend on identity */
     .then(loadCatalog, loadCatalog)
     /* the platform's own count is public too, so it loads either way */
-    .then(loadSelfStats, loadSelfStats);
+    .then(loadSelfStats, loadSelfStats)
+    .then(loadSelfShipped, loadSelfShipped);
 })();
 </script>
 </body>

package/public-landing/projects.probes.json

@@ -51,6 +51,34 @@
     { "name": "Escape closes the card when no band is open", "continue": true,
       "steps": [["press", "Escape"], ["wait", 150]],
       "expect": { "dialog": false } },
+    { "name": "the poster (task 1003301): art, five faces and +N, two figures on the art, the address, a member's hall door", "continue": true,
+      "steps": [["dispatchClick", "#orbField a.worldOrb[data-origin=\"https://amazonprimea.com\"]"], ["wait", 900]],
+      "expect": { "dialog": true, "hasClass": [["#projCard", "has-art"]],
+                  "visible": ["#cardArt", "#cardFaces", "#cardBuildersFig", "#cardShippedFig", "#cardOpen", "#cardHall"],
+                  "count": [["#cardFaces img", 5], ["#projCard > div", 1]],
+                  "text": [["#cardBuilders", "11"], ["#cardShipped", "0"], ["#cardRel", "you build here"], ["#cardRuns", "amazonprimea.com"], ["#cardFaces .facesMore", "+6"], ["#cardHall", "Builders' hall"]],
+                  "href": [["#cardHall", "https://builders.amazonprimea.com/"], ["#cardOpen", "https://amazonprimea.com/"]] } },
+    { "name": "the ladder: a project that answered nothing is the card that shipped before (disc, name, tagline, address, listed, one door)", "continue": true,
+      "steps": [["press", "Escape"], ["wait", 150], ["dispatchClick", "#orbField a.worldOrb[data-origin=\"https://demo.cloudbongos.com\"]"], ["wait", 500]],
+      "expect": { "dialog": true, "hasClass": [["#projCard", "has-art", false]],
+                  "hidden": ["#cardArt", "#cardFaces", "#cardFigs", "#cardBuildersFig", "#cardShippedFig", "#cardHall", "#cardRel", "#cardTypeL", "#cardOwnerL"],
+                  "visible": ["#cardDot", "#cardName", "#cardTag", "#cardRuns", "#cardListed", "#cardOpen"],
+                  "text": [["#cardRuns", "demo.cloudbongos.com"]] } },
+    { "name": "the hall door is address-gated: a member of a project whose hall is its own site gets no door; the capped figure reads N+", "continue": true,
+      "steps": [["press", "Escape"], ["wait", 150], ["dispatchClick", "#orbField a.worldOrb[data-origin=\"https://emersonian-circles.cloudbongos.com\"]"], ["wait", 500]],
+      "expect": { "dialog": true, "hidden": ["#cardArt", "#cardFaces", "#cardHall"], "visible": ["#cardFigs", "#cardBuildersFig", "#cardShippedFig", "#cardOpen"],
+                  "text": [["#cardRel", "you build here"], ["#cardShipped", "30+"], ["#cardBuilders", "1"]] } },
+    { "name": "the platform's own card: figures and faces by the same rule, its hall door from the stamped DOM link", "continue": true,
+      "steps": [["press", "Escape"], ["wait", 150], ["dispatchClick", "#selfOrb"], ["wait", 500]],
+      "expect": { "dialog": true, "hidden": ["#cardArt"], "visible": ["#cardBuildersFig", "#cardShippedFig", "#cardFaces", "#cardOpen", "#cardHall"],
+                  "text": [["#cardRel", "yours"]], "href": [["#cardOpen", "/"]] } },
+    { "name": "the table: the hall glyph rides the door cell on the one member row whose hall is elsewhere, and on the platform's row", "continue": true,
+      "steps": [["press", "Escape"], ["wait", 150], ["click", "#projTrig"], ["wait", 120], ["click", "a[data-sub=\"table\"]"], ["wait", 300]],
+      "expect": { "dialog": false, "visible": ["#selfHall"], "count": [["#mapRows tr[data-generated] .rowHall", 1], ["#mapRows tr[data-generated] td", 18]],
+                  "href": [["#mapRows tr[data-generated] .rowHall", "https://builders.amazonprimea.com/"]] } },
+    { "name": "back to the sky for the rest of the sequence", "continue": true,
+      "steps": [["click", "#projTrig"], ["wait", 120], ["click", "a[data-sub=\"sky\"]"], ["wait", 300]],
+      "expect": { "hidden": ["#sub-table-body"] } },
     { "name": "a solo Shift tap focuses the search on the map", "continue": true,
       "steps": [["clickAt", 700, 600], ["press", "Shift"], ["wait", 100]],
       "expect": { "activeId": "mapQ" } },

package/public-landing/projects.states.json

@@ -1,5 +1,5 @@
 {
-  "_": "The hub's states for modules/ui-design/kit/render.js (task 1003320): name → url + actions + expectations. `auth` picks the signed-in stub. Rendered dark + light at 1440/390/320 and audited against the platform floors.",
+  "_": "The hub's states for modules/ui-design/kit/render.js (task 1003320): name → url + actions + expectations. `auth` picks the signed-in stub. Rendered dark + light at 1440/390/320 and audited against the platform floors. The card states (task 1003301) walk the poster's ladder: the full poster, the artless two-up band, the all-null floor, the platform's own card.",
   "page": "/projects",
   "surface": "public-landing",
   "modeQuery": "mode",
@@ -14,12 +14,15 @@
     "in-map-kbd": { "auth": true, "actions": [["focus", "#projTrig"], ["press", "Enter"], ["wait", 350], ["press", "ArrowDown"], ["wait", 120]], "expect": { "expanded": true, "activeText": "Table" } },
     "in-map-search": { "auth": true, "actions": [["clickIfVisible", "#qToggle"], ["wait", 200], ["fill", "#mapQ", "emer"], ["wait", 300]], "expect": { "value": [["#mapQ", "emer"]] } },
     "in-map-mine-on": { "auth": true, "actions": [["check", "#onlyMine"], ["wait", 300]], "expect": { "checked": "#onlyMine" } },
-    "in-table": { "auth": true, "actions": [["click", "#projTrig"], ["wait", 250], ["click", "a[data-sub=\"table\"]"], ["wait", 400]], "expect": { "visible": ["#sub-table-body", ".tblMast", ".mastObj"], "closed": "#menuProjects" } },
+    "in-table": { "auth": true, "actions": [["click", "#projTrig"], ["wait", 250], ["click", "a[data-sub=\"table\"]"], ["wait", 400]], "expect": { "visible": ["#sub-table-body", ".tblMast", ".mastObj", "#selfHall"], "closed": "#menuProjects", "count": [["#mapRows tr[data-generated] .rowHall", 1]] } },
     "in-mine": { "auth": true, "url": "/projects?view=mine", "expect": { "hidden": ["#qWrap"] } },
     "in-new": { "auth": true, "url": "/projects?view=new", "expect": { "hidden": ["#qWrap"] } },
     "out-new": { "auth": false, "url": "/projects?view=new", "expect": { "hidden": ["#qWrap"] } },
     "out-map-projects": { "auth": false, "actions": [["click", "#projTrig"], ["wait", 350]], "expect": { "expanded": true, "hidden": ["#menuProjects [data-nav=\"mine\"]"] } },
-    "card": { "auth": true, "actions": [["dispatchClick", "#orbField a.worldOrb:not(#selfOrb)"], ["wait", 600]], "expect": { "dialog": true } }
+    "card": { "auth": true, "actions": [["dispatchClick", "#orbField a.worldOrb[data-origin=\"https://amazonprimea.com\"]"], ["wait", 900]], "expect": { "dialog": true, "hasClass": [["#projCard", "has-art"]], "visible": ["#cardArt", "#cardFaces", "#cardBuildersFig", "#cardShippedFig", "#cardOpen", "#cardHall"], "text": [["#cardBuilders", "11"], ["#cardShipped", "0"], ["#cardRel", "you build here"], ["#cardRuns", "amazonprimea.com"], ["#cardFaces .facesMore", "+6"]], "count": [["#cardFaces img", 5]], "href": [["#cardHall", "https://builders.amazonprimea.com/"]] } },
+    "card-noart": { "auth": true, "actions": [["dispatchClick", "#orbField a.worldOrb[data-origin=\"https://emersonian-circles.cloudbongos.com\"]"], ["wait", 600]], "expect": { "dialog": true, "hasClass": [["#projCard", "has-art", false]], "hidden": ["#cardArt", "#cardFaces", "#cardHall"], "visible": ["#cardBuildersFig", "#cardShippedFig", "#cardOpen"], "text": [["#cardShipped", "30+"], ["#cardRel", "you build here"]] } },
+    "card-floor": { "auth": true, "actions": [["dispatchClick", "#orbField a.worldOrb[data-origin=\"https://demo.cloudbongos.com\"]"], ["wait", 600]], "expect": { "dialog": true, "hidden": ["#cardArt", "#cardFaces", "#cardFigs", "#cardHall", "#cardRel", "#cardTypeL", "#cardOwnerL"], "visible": ["#cardOpen", "#cardRuns", "#cardListed"] } },
+    "card-self": { "auth": true, "actions": [["dispatchClick", "#selfOrb"], ["wait", 600]], "expect": { "dialog": true, "hidden": ["#cardArt"], "visible": ["#cardBuildersFig", "#cardShippedFig", "#cardFaces", "#cardOpen", "#cardHall"], "text": [["#cardRel", "yours"]] } }
   },
   "reducedMotion": { "auth": true, "actions": [["click", "#projTrig"], ["wait", 100]] }
 }

package/src/module-api.js

@@ -1244,8 +1244,10 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 //         landed since 1.19.400 with no explicit bump. run 33205015717. (task 1002620)
 //   1.19.402 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
 //         landed since 1.19.401 with no explicit bump. run 33206226800. (task 1002620)
+//   1.19.403 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.402 with no explicit bump. run 33208825538. (task 1002620)
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.402'; // CI auto-patch carrier (ADR 0161); see changelog above
+const CORE_VERSION = '1.19.403'; // CI auto-patch carrier (ADR 0161); see changelog above
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/cosmos_token_contrast.mjs

@@ -176,6 +176,8 @@ const PAIRS = [
   // shipped a fired-down ember where #ffffff measured 4.61:1 — that is history now,
   // and any prose below still naming those values is history too.)
   ['.btn label on its fill',            'var(--accent-on)',     'var(--accent)',        4.5],
+  // the poster card's door lifts to --accent-lift on hover (task 1003301)
+  ['.cardOpen:hover label on its lift', 'var(--accent-on)',     'var(--accent-lift)',   4.5],
   ['.btn.ghost:hover label',            'var(--accent-deep)',   CARD,                   4.5],
   ['.btn.danger label',                 'var(--err)',           CARD,                   4.5],
   // Code chips, pills, the now-step number, the hover inks: --accent-deep is
@@ -205,8 +207,9 @@ const PAIRS = [
   ['.chip.live label',                  'var(--ok)',            'var(--ok-soft)',       4.5],
   ['.chip.maybe label',                 'var(--warn)',          'var(--warn-soft)',     4.5],
   ['.chip.down/.bad label',             'var(--err)',           'var(--err-soft)',      4.5],
-  // .chip.busy + the .tbl .pill / .cardRel / builder-badge family: accent-deep
-  // ink on the accent-soft tint, both modes
+  // .chip.busy + the builder-badge family: accent-deep ink on the accent-soft
+  // tint, both modes (.tbl .pill and .cardRel are mono labels in ink-faint since
+  // tasks 1003332 / 1003301 — a fact is not pressable, so the accent left them)
   ['.chip.busy label',                  'var(--accent-deep)',   'var(--accent-soft)',   4.5],
   // lifecycle strip STATE INDICATORS (task 1002751): non-text at the WCAG
   // 1.4.11 bar of 3.0. --sea-ink derives brighter in dark exactly the way

package/tests/project_stats.mjs

@@ -27,7 +27,8 @@ beforeEach(() => { stats._reset(); });
 function json(body) {
   return Promise.resolve({ ok: true, status: 200, json: () => Promise.resolve(body) });
 }
-// route a fake instance: { leaderboard: [...], enabled: {...} }
+// route a fake instance: { leaderboard: [...], enabled: {...}, tasks: [...],
+// days: 30|undefined (whether the remote honoured ?days=), index: {...} }
 function stub(map) {
   globalThis.fetch = (url) => {
     const u = new URL(url);
@@ -39,9 +40,17 @@ function stub(map) {
     if (u.pathname.endsWith('/modules')) {
       return site.enabled ? json({ enabled: site.enabled }) : Promise.reject(new Error('down'));
     }
+    if (u.pathname.endsWith('/recent-shipped')) {
+      return site.tasks ? json({ tasks: site.tasks, days: site.days }) : Promise.reject(new Error('down'));
+    }
+    if (u.pathname === '/api/bongos') {
+      return site.index ? json(site.index) : Promise.reject(new Error('404'));
+    }
     return Promise.reject(new Error('404'));
   };
 }
+const DAY = 24 * 60 * 60 * 1000;
+function shipped(daysAgo) { return { shipped_at: new Date(Date.now() - daysAgo * DAY).toISOString() }; }
 
 test('system accounts are excluded — they are machines, not builders', async () => {
   // measured live: raw leaderboards read 13/3/3 against real 11/1/1
@@ -208,7 +217,7 @@ test('concurrent requests for the same origin collapse into one fetch', async ()
     stats.getProjectStats(['https://8.8.8.8']),
     stats.getProjectStats(['https://8.8.8.8']),
   ]);
-  assert.equal(calls, 2, 'two endpoints for one origin, not six for three callers');
+  assert.equal(calls, 4, 'four feeds for one origin, not twelve for three callers');
 });
 
 test('a non-http origin is refused rather than fetched', async () => {
@@ -274,3 +283,120 @@ test('an origin named __proto__ cannot retarget the result prototype', async ()
   assert.equal(Object.getPrototypeOf(out), null, 'the result map is null-prototype');
   assert.equal(({}).builders, undefined, 'Object.prototype is untouched');
 });
+
+/* ── The poster card's fields (task 1003301) ────────────────────────────────
+   Faces, shipped-in-30-days and the hall address ride the SAME allSettled as
+   builders and tags, degrade to null exactly like them, and share the one
+   frozen null shape — a key that went missing would ship as undefined, which
+   JSON.stringify drops, which silently changes the wire. ── */
+
+const KEYS = ['builders', 'tags', 'owner', 'owner_avatar', 'faces', 'shipped_30d', 'shipped_30d_capped', 'hall_origin'];
+
+test('one frozen null shape carries every key, and both fallbacks are that shape', async () => {
+  assert.ok(Object.isFrozen(stats.NULL_STATS));
+  assert.deepEqual(Object.keys(stats.NULL_STATS).sort(), KEYS.slice().sort());
+  const failed = await stats.getProjectStats(['file:///etc/passwd']);   // the cached-failure literal
+  assert.equal(failed['file:///etc/passwd'], stats.NULL_STATS);
+  stub({});
+  const unreached = await stats.getProjectStats(['https://9.9.9.9']);   // the read fallback
+  for (const k of KEYS) assert.equal(unreached['https://9.9.9.9'][k], null, `${k} is null, never undefined`);
+});
+
+test('faces are the first five people with an http avatar, in the feed\'s order; machines and bad URLs are skipped', async () => {
+  const av = (n) => `https://avatars.example.com/${n}.png`;
+  stub({
+    'https://8.8.8.8': {
+      leaderboard: [
+        { github_login: 'a', avatar_url: av('a') }, { github_login: 'bfg-system', avatar_url: av('bot') },
+        { github_login: 'b', avatar_url: 'javascript:alert(1)' }, { github_login: 'c', avatar_url: av('c') },
+        { github_login: 'd', avatar_url: av('d') }, { github_login: 'e', avatar_url: av('e') },
+        { github_login: 'f', avatar_url: av('f') }, { github_login: 'g', avatar_url: av('g') },
+      ],
+      enabled: {},
+    },
+  });
+  const out = await stats.getProjectStats(['https://8.8.8.8']);
+  assert.deepEqual(out['https://8.8.8.8'].faces, ['a', 'c', 'd', 'e', 'f'].map(av));
+  assert.equal(out['https://8.8.8.8'].builders, 7, 'the +N the card shows is counted against builders');
+});
+
+test('a leaderboard with no avatars yields an empty faces list — asked, none — not null', async () => {
+  stub({ 'https://8.8.8.8': { leaderboard: [{ github_login: 'a' }], enabled: {} } });
+  const out = await stats.getProjectStats(['https://8.8.8.8']);
+  assert.deepEqual(out['https://8.8.8.8'].faces, []);
+});
+
+test('shipped_30d counts only rows inside the window, from shipped_at, whatever the remote returned', async () => {
+  stub({
+    'https://8.8.8.8': {
+      leaderboard: [], enabled: {},
+      tasks: [shipped(1), shipped(29), shipped(31), shipped(400), { shipped_at: null }, {}],
+    },
+  });
+  const out = await stats.getProjectStats(['https://8.8.8.8']);
+  assert.equal(out['https://8.8.8.8'].shipped_30d, 2);
+  assert.equal(out['https://8.8.8.8'].shipped_30d_capped, false);
+});
+
+test('shipped_30d is capped ("N+") when the feed\'s row cap is full and every row is inside the window', async () => {
+  const full = (n) => Array.from({ length: n }, (_, i) => shipped(i % 20));
+  stub({
+    'https://1.1.1.1': { leaderboard: [], enabled: {}, tasks: full(200), days: 30 },   // ?days honoured: cap 200
+    'https://8.8.8.8': { leaderboard: [], enabled: {}, tasks: full(30) },              // older core, no days: cap 30
+    'https://9.9.9.9': { leaderboard: [], enabled: {}, tasks: full(199), days: 30 },   // under the cap
+  });
+  const out = await stats.getProjectStats(['https://1.1.1.1', 'https://8.8.8.8', 'https://9.9.9.9']);
+  assert.deepEqual([out['https://1.1.1.1'].shipped_30d, out['https://1.1.1.1'].shipped_30d_capped], [200, true]);
+  assert.deepEqual([out['https://8.8.8.8'].shipped_30d, out['https://8.8.8.8'].shipped_30d_capped], [30, true]);
+  assert.deepEqual([out['https://9.9.9.9'].shipped_30d, out['https://9.9.9.9'].shipped_30d_capped], [199, false]);
+});
+
+test('the shipped feed is asked for the window explicitly', async () => {
+  const urls = [];
+  globalThis.fetch = (url) => { urls.push(String(url)); return Promise.reject(new Error('down')); };
+  await stats.getProjectStats(['https://8.8.8.8']);
+  assert.ok(urls.includes(`https://8.8.8.8/api/bongos/public/recent-shipped?days=${stats.SHIPPED_WINDOW_DAYS}`));
+  assert.ok(urls.includes('https://8.8.8.8/api/bongos'), 'the discovery index answers the hall address');
+});
+
+test('hall_origin is the discovery index\'s hall only where it is a different host from the site', async () => {
+  stub({
+    'https://1.1.1.1': { leaderboard: [], enabled: {}, index: { hall: 'https://builders.example.com' } },
+    'https://8.8.8.8': { leaderboard: [], enabled: {}, index: { hall: 'https://8.8.8.8' } },      // single host
+    'https://9.9.9.9': { leaderboard: [], enabled: {}, index: { hall: 'javascript:alert(1)' } },
+    'https://4.4.4.4': { leaderboard: [], enabled: {} },                                           // no index (older core)
+  });
+  const out = await stats.getProjectStats(['https://1.1.1.1', 'https://8.8.8.8', 'https://9.9.9.9', 'https://4.4.4.4']);
+  assert.equal(out['https://1.1.1.1'].hall_origin, 'https://builders.example.com');
+  assert.equal(out['https://8.8.8.8'].hall_origin, null, 'a hall at <site>/builders is the site\'s own door');
+  assert.equal(out['https://9.9.9.9'].hall_origin, null);
+  assert.equal(out['https://4.4.4.4'].hall_origin, null);
+});
+
+test('a dead shipped feed leaves the other quarters standing', async () => {
+  stub({ 'https://8.8.8.8': { leaderboard: [{ github_login: 'a' }], enabled: { game: true }, index: { hall: 'https://h.example.com' } } });
+  const out = await stats.getProjectStats(['https://8.8.8.8']);
+  assert.equal(out['https://8.8.8.8'].shipped_30d, null, 'the dead quarter is unknown');
+  assert.equal(out['https://8.8.8.8'].shipped_30d_capped, null);
+  assert.equal(out['https://8.8.8.8'].builders, 1);
+  assert.deepEqual(out['https://8.8.8.8'].tags, ['game']);
+  assert.equal(out['https://8.8.8.8'].hall_origin, 'https://h.example.com');
+});
+
+test('the origin\'s host is resolved once per sweep, not once per feed', async () => {
+  const src = await import('node:fs').then((fs) =>
+    fs.readFileSync(new URL('../modules/platform-identity/project-stats.js', import.meta.url), 'utf8'));
+  assert.match(src, /await assertPublicHost\(siteUrl\(origin\)\.hostname\);/, 'the guard runs in fetchStats, before the allSettled');
+  const getJson = (src.match(/async function getJson\(url\)\s*\{([\s\S]*?)\n\}/) || [, ''])[1];
+  assert.ok(getJson, 'getJson() must exist');
+  assert.doesNotMatch(getJson, /assertPublicHost/, 'no per-feed lookup');
+});
+
+test('httpUrl accepts only http(s) strings and caps them', () => {
+  assert.equal(stats.httpUrl('https://a.example/x.png'), 'https://a.example/x.png');
+  assert.equal(stats.httpUrl('http://a.example/x.png'), 'http://a.example/x.png');
+  assert.equal(stats.httpUrl('javascript:alert(1)'), null);
+  assert.equal(stats.httpUrl('//a.example/x.png'), null);
+  assert.equal(stats.httpUrl(42), null);
+  assert.equal(stats.httpUrl('https://a.example/' + 'x'.repeat(400)).length, 300);
+});