@bongos/core 1.19.420 → 1.19.421

package/public-landing/projects.html

@@ -50,15 +50,10 @@
 #view-mine .hero,#view-manage .hero{max-width:none;}
 
 /* ── the manage view (task 1003041): container rhythm only — every component
-   it draws (card, chip, addr, empty) is cosmos vocabulary ── */
-.backRow{margin:14px 0;font-weight:700;}
+   it draws (the head, the ledger, the choice cells, the rail, the doors) is
+   cosmos vocabulary, scoped to #view-manage there (task 1003345) ── */
 #view-manage .empty{text-align:left;}
 #view-manage .empty p{margin-bottom:0;}
-#view-manage .visOpt{display:flex;gap:10px;align-items:flex-start;padding:10px 12px;border:1px solid var(--rule);border-radius:10px;margin-bottom:8px;cursor:pointer;}
-#view-manage .visOpt:has(input:checked){border-color:var(--accent);}
-#view-manage .visOpt input{margin-top:4px;flex:none;}
-#view-manage .visOpt b{display:block;font-size:15px;}
-#view-manage .visOpt span{display:block;font-size:13px;color:var(--ink-soft);line-height:1.45;}
 
 /* The bongo pair on the New-project view. Component-scoped custom properties,
    never :root (C1). The drum head is SKIN — using --bg-card would turn it black
@@ -576,8 +571,8 @@ summary{min-height:24px;padding:3px 0;}
   <div class="wrap viewWrap">
     <div class="hero" style="padding-left:0;padding-right:0">
       <h1>Your projects</h1>
-      <p class="lede">Every project you own — what it is, whether it is answering, and the controls that matter.
-        Each card says what the platform <b>last verified</b>, and when.</p>
+      <p class="lede">Every project you own: what it is, whether it is answering, and the controls that matter.
+        Each row says what the platform <b>last verified</b>, and when.</p>
     </div>
 
     <div class="card">
@@ -617,11 +612,12 @@ summary{min-height:24px;padding:3px 0;}
         <p class="mineEmpty" id="mineEmpty" hidden>Nothing matches that. <button type="button" class="linklike" id="mineClear">Clear the filters</button></p>
 
         <section class="empty" id="empty" hidden>
-          <p>You don't own any projects yet. Name one, pick a home for its code, and it gets an address of its own in this sky.</p>
+          <h2>nothing of yours in this sky yet</h2>
+          <p>Name a project, pick a home for its code, and it gets an address of its own here. It shows up in this list the moment you file it.</p>
           <a class="btn" href="?view=new" data-nav-to="new">Create your first project</a>
         </section>
         <ul class="projects" id="projectsList"></ul>
-        <p class="finePrint">Buttons here ask the platform to act; each card reports only what was verified, and when. A standup keeps going even with this tab closed.</p>
+        <p class="finePrint">Buttons here ask the platform to act; each row reports only what was verified, and when. A standup keeps going even with this tab closed.</p>
       </section>
     </div>
   </div>
@@ -640,6 +636,19 @@ summary{min-height:24px;padding:3px 0;}
   <div class="wrap viewWrap">
     <p class="backRow"><a href="?view=mine" data-nav-to="mine">← Your projects</a></p>
 
+    <!-- the head stands in EVERY state (task 1003345): the page's one h1 lives
+         here, outside #mMain, so the signed-out, not-found and loading states
+         keep a visible heading (the kit's one-header-main-h1 floor). The planet
+         and the chip fill only once a project has rendered; the clause hides
+         with #mMain (cosmos, :has). -->
+    <div class="hero mHead" style="padding-left:0;padding-right:0">
+      <span id="mOrb"></span>
+      <div>
+        <div class="titleRow"><h1 id="mTitle"><span id="mName">Manage</span></h1><span id="mChip"></span></div>
+        <p class="lede">Its address, its repository, what the platform last <b>verified</b> about it, and the controls you have today.</p>
+      </div>
+    </div>
+
     <!-- signed out: the same identity-only door the mine view uses (ADR 0143) -->
     <section id="mGate" class="card" hidden>
       <p class="lede">This is a project’s management page — it answers only to the person who owns it. Sign in with GitHub to open yours.</p>
@@ -660,19 +669,18 @@ summary{min-height:24px;padding:3px 0;}
     <div class="loading" id="mLoading">Reading the project…</div>
 
     <section id="mMain" hidden>
-      <div class="hero" style="padding-left:0;padding-right:0">
-        <h1 id="mTitle">Manage</h1>
-        <p class="lede">Its address, its repository, what the platform last <b>verified</b> about it — and the controls you have today.</p>
-      </div>
-
-      <div class="card">
-        <div class="projHead"><span class="projName" id="mName">…</span><span id="mChip"></span></div>
-        <div class="projMeta" id="mMeta" hidden></div>
-        <div class="addr" id="mAddr" hidden></div>
-        <p class="finePrint" id="mCreated" hidden></p>
+      <!-- the ledger of facts (task 1003345): each fact keeps its id and fills
+           as one label · value pair; a fact with no answer hides — never a dash -->
+      <div class="card" id="mFacts">
+        <div class="ledger">
+          <div id="mMeta" hidden></div>
+          <div id="mAddr" hidden></div>
+          <div id="mCreated" hidden></div>
+          <div id="mPlanet" hidden></div>
+        </div>
         <!-- the card's own story, on the project's own page (task 1003232): the
-             per-flow strip, the honest snag, and the doors — the same
-             stripFor/errMarkup/canRetry/canRevive the list card reads -->
+             per-flow rail, the honest snag, and the doors — the same
+             stripFor/errMarkup/canRetry/canRevive the list row reads -->
         <div id="mStrip"></div>
         <div class="projMsg err" id="mErr" hidden></div>
         <div class="projMsg" id="mMsg" role="status" aria-live="polite"></div>
@@ -684,8 +692,8 @@ summary{min-height:24px;padding:3px 0;}
            private direction is refused (server + copy) until the private-repo
            deploy fix lands, because the deploy pull cannot read a private repo
            (walk finding N4). -->
-      <div class="card" id="mRepoVisibility">
-        <h2 style="font-family:var(--font-display);font-size:19px;margin-bottom:12px;">Repository visibility</h2>
+      <div class="card mSec" id="mRepoVisibility">
+        <h2>Repository visibility</h2>
         <div id="mRepoVis"><p class="finePrint">Checking the repository on GitHub…</p></div>
         <!-- the limitation itself, one click away (grade follow-up task 1003077):
              the refusal above states it; this fold explains it and links the
@@ -704,8 +712,8 @@ summary{min-height:24px;padding:3px 0;}
            a change reaches a live project only by the restart the runner
            performs (ADR 0190). The fold is a SIBLING of the volatile slot (the
            #mRepoVisWhy shape) so no re-render can drop it. -->
-      <div class="card" id="mVisibility">
-        <h2 style="font-family:var(--font-display);font-size:19px;margin-bottom:12px;">Who can see it</h2>
+      <div class="card mSec" id="mVisibility">
+        <h2>Who can see it</h2>
         <div id="mVis"><p class="finePrint">Reading the project’s settings…</p></div>
         <details class="finePrint" id="mVisWhat">
           <summary>What “only signed-in members” changes</summary>
@@ -719,8 +727,8 @@ summary{min-height:24px;padding:3px 0;}
            RUNS is read back from its own public manifest (brand.project.
            joinability) — never from the save's reply, which is a receipt. The
            fold is a SIBLING of the volatile slot so no re-render can drop it. -->
-      <div class="card" id="mJoinability">
-        <h2 style="font-family:var(--font-display);font-size:19px;margin-bottom:12px;">How people join</h2>
+      <div class="card mSec" id="mJoinability">
+        <h2>How people join</h2>
         <div id="mJoin"><p class="finePrint">Reading the project’s settings…</p></div>
         <details class="finePrint" id="mJoinWhat">
           <summary>What each choice changes</summary>
@@ -736,8 +744,8 @@ summary{min-height:24px;padding:3px 0;}
            much as for a healthy one, which is why it asks for the project's own
            name typed back: it is the only control on this page that ends
            something, and the card's one-click confirm is too light for it. -->
-      <div class="card" id="mDelete">
-        <h2 style="font-family:var(--font-display);font-size:19px;margin-bottom:12px;">Take it offline</h2>
+      <div class="card mSec" id="mDelete">
+        <h2>Take it offline</h2>
         <div id="mDel"><p class="finePrint">Reading the project…</p></div>
         <!-- the teardown-vs-delete distinction, stated once as a SIBLING of the
              volatile slot (the #mRepoVisWhy shape) so no re-render can drop it.
@@ -1284,7 +1292,6 @@ summary{min-height:24px;padding:3px 0;}
      were orphans). Keeping the per-project variety is what makes a sky legible;
      deriving it from contract tokens is what makes it survive a re-brand. */
   var ORB_ACCENTS = ['var(--sea)', 'var(--terracotta)', 'var(--gold-soft)', 'var(--sun-lit)', 'var(--accent)'];
-  var ORB_GLOWS = ORB_ACCENTS.map(function (t) { return 'color-mix(in srgb,' + t + ' 45%,transparent)'; });
   /* THE PLANET TEMPLATES (task 1003319; the materials, task 1003337). A project's
      orb is one of the world's three whole objects (blob / pair / bead) in one of
      four materials (chrome — the first round, named by omission — frost, gold,
@@ -2009,7 +2016,7 @@ summary{min-height:24px;padding:3px 0;}
   function loadCatalog() {
     fetch(API + '/projects/featured', { credentials: 'same-origin' })
       .then(function (res) { if (!res.ok) throw new Error('catalog'); return res.json(); })
-      .then(function (data) { catalog = (data && data.projects) || []; assignAccents(); applyMapFilter(); })
+      .then(function (data) { catalog = (data && data.projects) || []; assignAccents(); applyMapFilter(); repaintPlanets(); })
       .catch(function () {
         /* a child instance has no catalog module at all — say so plainly
            rather than leave an empty sky with no explanation */
@@ -4249,19 +4256,57 @@ summary{min-height:24px;padding:3px 0;}
     return !!inst.open_intent; /* e.g. a queued teardown or domain-attach on an active instance */
   }
 
-  /* ── the orb: the gate's project sphere, glow keyed to verification ────── */
-
+  /* ── the planet on a row (task 1003345): the SAME object the sky shows. A
+     catalog-matched instance takes its catalog row's template and accent
+     (curated, or position-walked by assignAccents); an owned-only one walks
+     by its slug, the rule the map's appended entries use — so one project is
+     one object in both views and never re-colours between them. ── */
+  function planetOf(inst) {
+    var h = inst.domain ? hostOf(inst.domain) : '';
+    for (var i = 0; h && i < catalog.length; i++) {
+      if (hostOf(catalog[i].origin) === h) {
+        return { tpl: templateOf(catalog[i]), acc: accentOf(catalog[i]), curated: ORB_TEMPLATES.indexOf(catalog[i].template) !== -1 };
+      }
+    }
+    return { tpl: slugTemplate(inst.slug), acc: ORB_ACCENTS[slugAccent(inst.slug)], curated: false };
+  }
+  /* shape[-material]-style → the data attributes cosmos.css draws from (the map's rule) */
+  function planetAttrs(pl) {
+    var parts = pl.tpl.split('-');
+    return ' data-template="' + esc(pl.tpl) + '" data-shape="' + esc(parts[0]) +
+      '" data-material="' + esc(parts.length === 3 ? parts[1] : 'chrome') +
+      '" data-style="' + esc(parts[parts.length - 1]) + '"';
+  }
+  var PLANET_SHAPE_WORDS = { blob: 'the blob', pair: 'the bongo pair', bead: 'the bead' };
+  var PLANET_STYLE_WORDS = { tint: 'tinted', wash: 'washed', plain: 'plain', chrome: 'plain' };
+  /* the planet as a clause for the manage ledger: the accent as a dot, then shape, material, style */
+  function planetWords(pl) {
+    var parts = pl.tpl.split('-');
+    var material = parts.length === 3 ? parts[1] : 'chrome';
+    return '<span class="swDot" style="--sw:' + pl.acc + '" aria-hidden="true"></span>' +
+      esc((PLANET_SHAPE_WORDS[parts[0]] || parts[0]) + ' in ' + material + ', ' +
+        (PLANET_STYLE_WORDS[parts[parts.length - 1]] || parts[parts.length - 1]));
+  }
+  /* the catalog can land after a view rendered — the rows and the manage head take its planets then */
+  function repaintPlanets() {
+    Object.keys(byId).forEach(function (id) { renderCard(byId[id]); });
+    if (manageInst) paintManagePlanet(manageInst);
+  }
+
+  /* ── the row's object: the planet, its state on the object (ghost = torn
+     down, ashen = failed its check, dim = a stale probe); only a live
+     project's planet is a door to its site ── */
   function orbFor(inst) {
-    var k = slugAccent(inst.slug);
-    var cls = 'orb';
+    var pl = planetOf(inst);
+    var cls = 'worldOrb';
     if (inst.status === 'torn_down' || inst.status === 'tearing_down') cls += ' ghost';
     else if (inst.status === 'error' || (inst.status === 'active' && inst.last_verified_up === false)) cls += ' ashen';
     else if (inst.status === 'active' && !freshUp(inst)) cls += ' dim';
-    var style = '--acc:' + ORB_ACCENTS[k] + ';--glow:' + ORB_GLOWS[k];
+    var attrs = planetAttrs(pl) + ' style="--acc:' + pl.acc + ';--d:64px"';
     if (inst.status === 'active' && inst.domain) {
-      return '<a class="' + cls + '" style="' + style + '" href="https://' + esc(inst.domain) + '" target="_blank" rel="noopener" title="Open ' + esc(inst.slug) + '" aria-label="Open ' + esc(inst.slug) + '"></a>';
+      return '<a class="' + cls + '"' + attrs + ' href="https://' + esc(inst.domain) + '" target="_blank" rel="noopener" title="Open ' + esc(inst.slug) + '" aria-label="Open ' + esc(inst.slug) + '"><span class="disc"></span></a>';
     }
-    return '<span class="' + cls + '" style="' + style + '" aria-hidden="true"></span>';
+    return '<span class="' + cls + '"' + attrs + ' aria-hidden="true"><span class="disc"></span></span>';
   }
 
   /* ── progress strips: each flow speaks its own stages (direction §4).
@@ -4747,6 +4792,17 @@ summary{min-height:24px;padding:3px 0;}
       encodeURIComponent('/projects?view=manage&id=' + manageId);
   }
 
+  /* one label · value pair of the manage ledger */
+  function ledgerRow(r) { return '<span class="k">' + r[0] + '</span><span class="v">' + r[1] + '</span>'; }
+  /* the head's planet and the ledger's planet row (task 1003345) — one resolution
+     (planetOf) for both, so the head, the row and the sky can never disagree; the
+     planet row is the slot the picker (task 1003347) fills */
+  function paintManagePlanet(inst) {
+    var pl = planetOf(inst);
+    $('mOrb').innerHTML = orbFor(inst);
+    $('mPlanet').innerHTML = ledgerRow(['planet', planetWords(pl) + (pl.curated ? '' : '<small>chosen for it by the platform.</small>')]);
+    $('mPlanet').hidden = false;
+  }
   function renderManage(inst) {
     manageInst = inst;
     $('mLoading').hidden = true;
@@ -4757,20 +4813,22 @@ summary{min-height:24px;padding:3px 0;}
     /* the ONE chip site of this view — chipFor() or nothing, so the manage
        page can never tell a different liveness story than the card (C6) */
     $('mChip').innerHTML = chipFor(inst);
-    var meta = [];
+    paintManagePlanet(inst);
+    var rows = [];
     if (inst.target_ref) {
-      meta.push('repo <a href="https://github.com/' + esc(inst.target_ref) +
-        '" target="_blank" rel="noopener"><code>' + esc(inst.target_ref) + '</code></a>');
+      rows.push(['repository', '<a href="https://github.com/' + esc(inst.target_ref) +
+        '" target="_blank" rel="noopener">' + esc(inst.target_ref) + '</a>']);
     }
-    if (inst.hosting_shape) meta.push(esc(SHAPE_LABEL[inst.hosting_shape] || inst.hosting_shape));
-    if (inst.onboard_mode === 'adopt') meta.push('adopted repo');
-    $('mMeta').innerHTML = meta.map(function (m) { return '<span>' + m + '</span>'; }).join('');
-    $('mMeta').hidden = !meta.length;
+    var server = inst.hosting_shape ? esc(SHAPE_LABEL[inst.hosting_shape] || inst.hosting_shape) : '';
+    if (inst.onboard_mode === 'adopt') server += (server ? ', ' : '') + 'adopted repo';
+    if (server) rows.push(['server', server]);
+    $('mMeta').innerHTML = rows.map(ledgerRow).join('');
+    $('mMeta').hidden = !rows.length;
     var addr = addressRow(inst);
-    $('mAddr').innerHTML = addr;
+    $('mAddr').innerHTML = addr ? ledgerRow(['address', addr]) : '';
     $('mAddr').hidden = !addr;
     /* a fact with no answer hides — never a dash (the card rule) */
-    $('mCreated').textContent = inst.created_at ? 'Created ' + listedDate(inst.created_at) : '';
+    $('mCreated').innerHTML = inst.created_at ? ledgerRow(['created', esc(listedDate(inst.created_at))]) : '';
     $('mCreated').hidden = !inst.created_at;
     /* fetch-free like everything else here, so the once-a-minute tick may call
        it: the delete section reads only status + open_intent, both already in
@@ -4780,8 +4838,7 @@ summary{min-height:24px;padding:3px 0;}
        only, so a queued settings push shows up on the tick without a reload */
     renderVisState(inst);
     renderJoinState(inst);
-    /* the page names its project — in the heading and in the tab */
-    $('mTitle').textContent = inst.slug || 'Manage';
+    /* the page names its project — the heading holds #mName; and in the tab */
     document.title = (inst.slug ? inst.slug + ' — ' : '') + BASE_TITLE;
     /* the card's own story, on the project's own page (task 1003232): the
        per-flow strip, the honest snag, and the doors the list card has */
@@ -4880,6 +4937,10 @@ summary{min-height:24px;padding:3px 0;}
       $('mGate').hidden = true;
       $('mMissing').hidden = true;
       $('mLoading').hidden = false;
+      /* the head stands in every state — a fresh load must not wear the last project's name */
+      $('mName').textContent = 'Manage';
+      $('mChip').innerHTML = '';
+      $('mOrb').innerHTML = '';
     }
     var asked = manageId; /* a stale answer must never paint a newer project */
     fetch(API + '/provisioning/instances/' + encodeURIComponent(manageId), { credentials: 'same-origin' })

package/public-landing/projects.probes.json

@@ -1,7 +1,8 @@
 {
-  "_": "The hub's interaction contract for modules/ui-design/kit/probe.js (task 1003320): the disclosure bands, the views, the card, the fold under 480, signed out. A probe with `continue` keeps the previous page — the contract is a sequence.",
+  "_": "The hub's interaction contract for modules/ui-design/kit/probe.js (task 1003320): the disclosure bands, the views, the card, the fold under 480, signed out. A probe with `continue` keeps the previous page — the contract is a sequence. The manage flows (task 1003345): attach, restart, teardown (the row and the ender), revive, retry and join drive the stub's receipts end to end, so the makeover cannot silently break a door. The catalog is featured-hub.json (stub.fixtures): the signed-in stub owns Demo, and an owned orb's plain click opens its manage view, never its card — the card probes open the landing's other rows and Tidewater, the un-owned floor row.",
   "page": "/projects",
   "surface": "public-landing",
+  "stub": { "fixtures": { "featured": "featured-hub" } },
   "probes": [
     { "name": "closed: the main content starts under the bar", "auth": true, "width": 1440,
       "steps": [],
@@ -46,7 +47,7 @@
       "steps": [["click", "#menuProfile a[data-nav-to=\"mine\"]"], ["wait", 300]],
       "expect": { "param": { "view": "mine" }, "closed": "#menuProfile", "text": [["[aria-current=\"page\"]", "Your projects"]] } },
     { "name": "an orb opens the card", "continue": true,
-      "steps": [["back"], ["wait", 400], ["dispatchClick", "#orbField a.worldOrb:not(#selfOrb)"], ["wait", 400]],
+      "steps": [["back"], ["wait", 400], ["dispatchClick", "#orbField a.worldOrb:not(#selfOrb):not([data-manage])"], ["wait", 400]],
       "expect": { "dialog": true } },
     { "name": "Escape closes the card when no band is open", "continue": true,
       "steps": [["press", "Escape"], ["wait", 150]],
@@ -59,11 +60,11 @@
                   "text": [["#cardBuilders", "11"], ["#cardShipped", "0"], ["#cardRel", "you build here"], ["#cardRuns", "amazonprimea.com"], ["#cardFaces .facesMore", "+6"], ["#cardHall", "Builders' hall"]],
                   "href": [["#cardHall", "https://builders.amazonprimea.com/"], ["#cardOpen", "https://amazonprimea.com/"]] } },
     { "name": "the ladder: a project that answered nothing is the card that shipped before (disc, name, tagline, address, listed, one door)", "continue": true,
-      "steps": [["press", "Escape"], ["wait", 150], ["dispatchClick", "#orbField a.worldOrb[data-origin=\"https://demo.cloudbongos.com\"]"], ["wait", 500]],
+      "steps": [["press", "Escape"], ["wait", 150], ["dispatchClick", "#orbField a.worldOrb[data-origin=\"https://tidewater.cloudbongos.com\"]"], ["wait", 500]],
       "expect": { "dialog": true, "hasClass": [["#projCard", "has-art", false]],
                   "hidden": ["#cardArt", "#cardFaces", "#cardFigs", "#cardBuildersFig", "#cardShippedFig", "#cardHall", "#cardRel", "#cardTypeL", "#cardOwnerL"],
                   "visible": ["#cardDot", "#cardName", "#cardTag", "#cardRuns", "#cardListed", "#cardOpen"],
-                  "text": [["#cardRuns", "demo.cloudbongos.com"]] } },
+                  "text": [["#cardRuns", "tidewater.cloudbongos.com"]] } },
     { "name": "the hall door is address-gated: a member of a project whose hall is its own site gets no door; the capped figure reads N+", "continue": true,
       "steps": [["press", "Escape"], ["wait", 150], ["dispatchClick", "#orbField a.worldOrb[data-origin=\"https://emersonian-circles.cloudbongos.com\"]"], ["wait", 500]],
       "expect": { "dialog": true, "hidden": ["#cardArt", "#cardFaces", "#cardHall"], "visible": ["#cardFigs", "#cardBuildersFig", "#cardShippedFig", "#cardOpen"],
@@ -74,7 +75,7 @@
                   "text": [["#cardRel", "yours"]], "href": [["#cardOpen", "/"]] } },
     { "name": "the table: the hall glyph rides the door cell on the one member row whose hall is elsewhere, and on the platform's row", "continue": true,
       "steps": [["press", "Escape"], ["wait", 150], ["click", "#projTrig"], ["wait", 120], ["click", "a[data-sub=\"table\"]"], ["wait", 300]],
-      "expect": { "dialog": false, "visible": ["#selfHall"], "count": [["#mapRows tr[data-generated] .rowHall", 1], ["#mapRows tr[data-generated] td", 18]],
+      "expect": { "dialog": false, "visible": ["#selfHall"], "count": [["#mapRows tr[data-generated] .rowHall", 1], ["#mapRows tr[data-generated] td", 42]],
                   "href": [["#mapRows tr[data-generated] .rowHall", "https://builders.amazonprimea.com/"]] } },
     { "name": "back to the sky for the rest of the sequence", "continue": true,
       "steps": [["click", "#projTrig"], ["wait", 120], ["click", "a[data-sub=\"sky\"]"], ["wait", 300]],
@@ -93,7 +94,7 @@
       "expect": { "count": [["#menuProjects .bandCell:not([hidden])", 3], ["#menuProjects a[href=\"/docs\"]", 0]], "hidden": ["#menuProjects [data-nav=\"mine\"]"],
                   "href": [[".footNav a[href=\"/#about\"]", "/#about"], [".footNav a[href=\"/docs\"]", "/docs"]] } },
     { "name": "signed out: the card still closes on Escape (nothing throws with no session)", "continue": true,
-      "steps": [["press", "Escape"], ["wait", 100], ["dispatchClick", "#orbField a.worldOrb:not(#selfOrb)"], ["wait", 400], ["press", "Escape"], ["wait", 150]],
+      "steps": [["press", "Escape"], ["wait", 100], ["dispatchClick", "#orbField a.worldOrb:not(#selfOrb):not([data-manage])"], ["wait", 400], ["press", "Escape"], ["wait", 150]],
       "expect": { "dialog": false, "closed": "#menuProjects" } },
     { "name": "390: the magnifier opens the row and focuses the field", "auth": true, "width": 390,
       "steps": [["click", "#qToggle"], ["wait", 150]],
@@ -106,6 +107,30 @@
       "expect": { "hasClass": [["#qWrap", "is-open", false]], "open": "#menuProjects", "top": [["#hubMain", 60]] } },
     { "name": "390: a solo Shift tap opens the fold and focuses the field, without overflow", "continue": true,
       "steps": [["press", "Escape"], ["wait", 100], ["press", "Shift"], ["wait", 150]],
-      "expect": { "hasClass": [["#qWrap", "is-open", true]], "activeId": "mapQ", "noOverflow": true } }
+      "expect": { "hasClass": [["#qWrap", "is-open", true]], "activeId": "mapQ", "noOverflow": true } },
+    { "name": "manage flows (task 1003345): the address fold on a live row records a domain", "auth": true, "width": 1440, "url": "/projects?view=mine",
+      "steps": [["wait",600],["click","li[data-inst=\"101\"] details.attachFold summary"],["fill","#dom-101","demo.example.com"],["click","[data-attach=\"101\"]"],["wait",600]],
+      "expect": {"text":[["#msg-101","Address recorded."]],"hasClass":[["#msg-101","ok",true]]} },
+    { "name": "manage flows: restart on an unreachable row asks; the row re-reads the project and shows the queued rail, the door leaves while the intent is open", "auth": true, "width": 1440, "url": "/projects?view=mine",
+      "steps": [["wait",600],["click","[data-restart=\"105\"]"],["wait",900]],
+      "expect": {"text":[["li[data-inst=\"105\"] .strip .pnote","A restart is queued — this card updates when it starts."],["li[data-inst=\"105\"] .strip .stages li.now .slbl","Restart queued"]],"visible":["li[data-inst=\"105\"] .strip","li[data-inst=\"105\"] .worldOrb.ashen"],"hidden":["[data-restart=\"105\"]"]} },
+    { "name": "manage flows: tear it down asks twice on a row — the truth first, then the door", "auth": true, "width": 1440, "url": "/projects?view=mine",
+      "steps": [["wait",600],["click","[data-teardown=\"101\"]"],["wait",200]],
+      "expect": {"visible":["li[data-inst=\"101\"] .confirmRow","[data-teardown-yes=\"101\"]","[data-teardown-no=\"101\"]"],"hidden":["[data-teardown=\"101\"]"]} },
+    { "name": "manage flows: the second press queues the teardown; the row re-reads the project and shows the wind-down rail, the door leaves", "continue": true,
+      "steps": [["click","[data-teardown-yes=\"101\"]"],["wait",900]],
+      "expect": {"text":[["li[data-inst=\"101\"] .strip .pnote","A teardown is queued — this card updates when it starts."]],"visible":["li[data-inst=\"101\"] .strip.flowDown"],"hidden":["[data-teardown=\"101\"]","[data-teardown-yes=\"101\"]"]} },
+    { "name": "manage flows: bring it back on a torn-down row re-files the project", "auth": true, "width": 1440, "url": "/projects?view=mine",
+      "steps": [["wait",600],["click","[data-revive=\"104\"]"],["wait",600]],
+      "expect": {"text":[["#msg-104","Queued. The platform picks it up from here."]],"hasClass":[["#msg-104","ok",true]],"visible":["li[data-inst=\"104\"] .worldOrb.ghost"]} },
+    { "name": "manage flows: try again on a snagged row re-files it too", "auth": true, "width": 1440, "url": "/projects?view=mine",
+      "steps": [["wait",600],["click","[data-retry=\"103\"]"],["wait",600]],
+      "expect": {"text":[["#msg-103","Queued. The platform picks it up from here."]],"hasClass":[["#msg-103","ok",true]]} },
+    { "name": "manage flows: how people join — pick a cell, save, the receipt lands under the choice", "auth": true, "width": 1440, "url": "/projects?view=manage&id=101",
+      "steps": [["wait",900],["check","input[name=\"mJoinPick\"][value=\"apply\"]"],["click","[data-join-save]"],["wait",600]],
+      "expect": {"text":[["#mJoinMsg","Saved. The project restarts to apply it."],["#mName","demo"]],"checked":"input[name=\"mJoinPick\"][value=\"apply\"]","visible":["#mOrb .worldOrb","#mFacts .ledger .k"]} },
+    { "name": "manage flows: the ender asks for the name typed back, queues the teardown, and the page re-reads the project as queued", "auth": true, "width": 1440, "url": "/projects?view=manage&id=105",
+      "steps": [["wait",900],["click","[data-del-ask]"],["wait",200],["fill","#mDelName","mooring"],["wait",100],["click","[data-del-yes]"],["wait",900]],
+      "expect": {"text":[["#mDel .addr","A teardown is queued for this project."],["#mName","mooring"]],"hidden":["#mDelName","[data-del-ask]"],"visible":["#mStrip .strip.flowDown"]} }
   ]
 }

package/public-landing/projects.states.json

@@ -1,28 +1,32 @@
 {
-  "_": "The hub's states for modules/ui-design/kit/render.js (task 1003320): name → url + actions + expectations. `auth` picks the signed-in stub. Rendered dark only at 1440/390/320 (the apex pins data-mode=\"dark\", task 1003336) and audited against the platform floors. The card states (task 1003301) walk the poster's ladder: the full poster, the artless two-up band, the all-null floor, the platform's own card.",
+  "_": "The hub's states for modules/ui-design/kit/render.js (task 1003320): name → url + actions + expectations. `auth` picks the signed-in stub. Rendered dark only at 1440/390/320 (the apex pins data-mode=\"dark\", task 1003336) and audited against the platform floors. The card states (task 1003301) walk the poster's ladder: the full poster, the artless two-up band, the all-null floor, the platform's own card. The signed-in stub OWNS Demo (provisioning-instances.json, task 1003345), and an owned orb's plain click opens its manage view, never its card — so the all-null floor card renders from projects-floor.states.json on the hub's own catalog (featured-hub.json, one un-owned null row more).",
   "page": "/projects",
   "surface": "public-landing",
   "modes": ["dark"],
   "modeQuery": false,
-  "ignoreRequests": ["/api/(gds|bongos)/me$", "/my-projects", "/provisioning/"],
-  "ignoreConsole": ["/api/(gds|bongos)/me", "\\b401\\b", "Unauthorized"],
+  "ignoreRequests": ["/api/(gds|bongos)/me$", "/my-projects", "/provisioning/instances/999", "/provisioning/instances/101$", "/api/gds/instance$"],
+  "ignoreConsole": ["/api/(gds|bongos)/me", "\\b401\\b", "\\b404\\b", "Unauthorized"],
   "ignoreControls": [".skip", ".vh"],
   "states": {
     "out-map": { "auth": false, "expect": { "expanded": false } },
-    "in-map": { "auth": true, "expect": { "expanded": false, "count": [["#orbField .worldOrb[data-shape][data-style]", 4]], "attr": [["#selfOrb", "data-template", "pair-chrome"], ["#orbField a.worldOrb[data-origin=\"https://amazonprimea.com\"]", "data-template", "bead-wash"], ["#orbField a.worldOrb[data-origin=\"https://demo.cloudbongos.com\"]", "data-shape", "pair"], ["#orbField a.worldOrb[data-origin=\"https://demo.cloudbongos.com\"]", "data-material", "gold"], ["#orbField a.worldOrb[data-origin=\"https://demo.cloudbongos.com\"]", "data-template", "pair-gold-wash"], ["#orbField a.worldOrb[data-origin=\"https://emersonian-circles.cloudbongos.com\"]", "data-template", "bead-obsidian-plain"]] } },
+    "in-map": { "auth": true, "expect": { "expanded": false, "count": [["#orbField .worldOrb[data-shape][data-style]", 7]], "attr": [["#selfOrb", "data-template", "pair-chrome"], ["#orbField a.worldOrb[data-origin=\"https://amazonprimea.com\"]", "data-template", "bead-wash"], ["#orbField a.worldOrb[data-origin=\"https://demo.cloudbongos.com\"]", "data-shape", "pair"], ["#orbField a.worldOrb[data-origin=\"https://demo.cloudbongos.com\"]", "data-material", "gold"], ["#orbField a.worldOrb[data-origin=\"https://demo.cloudbongos.com\"]", "data-template", "pair-gold-wash"], ["#orbField a.worldOrb[data-origin=\"https://emersonian-circles.cloudbongos.com\"]", "data-template", "bead-obsidian-plain"]] } },
     "in-map-projects": { "auth": true, "actions": [["click", "#projTrig"], ["wait", 350]], "expect": { "expanded": true, "open": "#menuProjects" } },
     "in-map-profile": { "auth": true, "actions": [["click", "#who"], ["wait", 350]], "expect": { "expanded": true, "open": "#menuProfile" } },
     "in-map-kbd": { "auth": true, "actions": [["focus", "#projTrig"], ["press", "Enter"], ["wait", 350], ["press", "ArrowDown"], ["wait", 120]], "expect": { "expanded": true, "activeText": "Table" } },
     "in-map-search": { "auth": true, "actions": [["clickIfVisible", "#qToggle"], ["wait", 200], ["fill", "#mapQ", "emer"], ["wait", 300]], "expect": { "value": [["#mapQ", "emer"]] } },
     "in-map-mine-on": { "auth": true, "actions": [["check", "#onlyMine"], ["wait", 300]], "expect": { "checked": "#onlyMine" } },
     "in-table": { "auth": true, "actions": [["click", "#projTrig"], ["wait", 250], ["click", "a[data-sub=\"table\"]"], ["wait", 400]], "expect": { "visible": ["#sub-table-body", ".tblMast", ".mastObj", "#selfHall"], "closed": "#menuProjects", "count": [["#mapRows tr[data-generated] .rowHall", 1]] } },
-    "in-mine": { "auth": true, "url": "/projects?view=mine", "expect": { "hidden": ["#qWrap"] } },
+    "in-mine": { "auth": true, "url": "/projects?view=mine", "expect": { "hidden": ["#qWrap", "#empty"], "visible": ["#mineBar", "#projectsList", "#projectsList .proj .worldOrb .disc"], "count": [["#projectsList .proj", 5], ["#projectsList .proj.gone", 1], ["#projectsList .proj .worldOrb[data-shape][data-material][data-style]", 5], ["#projectsList .proj .strip", 1], ["#projectsList .proj .worldOrb.ashen", 2], ["#projectsList [data-restart]", 1]] } },
+    "in-manage": { "auth": true, "url": "/projects?view=manage&id=101", "expect": { "visible": ["#mMain", "#mChip .chip", "#mOrb .worldOrb", "#mFacts .ledger .k", "#mActs"], "hidden": ["#qWrap", "#mGate", "#mMissing", "#mErr"], "text": [["#mName", "demo"], ["#mTitle", "demo"]] } },
+    "in-manage-snag": { "auth": true, "url": "/projects?view=manage&id=103", "expect": { "visible": ["#mMain", "#mErr", "#mActs"], "text": [["#mName", "tidepool"]] } },
+    "in-manage-gone": { "auth": true, "url": "/projects?view=manage&id=104", "expect": { "visible": ["#mMain", "#mActs"], "hidden": ["#mErr"], "text": [["#mName", "old-lantern"]] } },
+    "in-manage-missing": { "auth": true, "url": "/projects?view=manage&id=999", "expect": { "visible": ["#mMissing"], "hidden": ["#mMain", "#mGate"] } },
+    "out-manage": { "auth": false, "url": "/projects?view=manage&id=101", "expect": { "visible": ["#mGate"], "hidden": ["#mMain", "#mMissing"] } },
     "in-new": { "auth": true, "url": "/projects?view=new", "expect": { "hidden": ["#qWrap"] } },
     "out-new": { "auth": false, "url": "/projects?view=new", "expect": { "hidden": ["#qWrap"] } },
     "out-map-projects": { "auth": false, "actions": [["click", "#projTrig"], ["wait", 350]], "expect": { "expanded": true, "hidden": ["#menuProjects [data-nav=\"mine\"]"] } },
     "card": { "auth": true, "actions": [["dispatchClick", "#orbField a.worldOrb[data-origin=\"https://amazonprimea.com\"]"], ["wait", 900]], "expect": { "dialog": true, "hasClass": [["#projCard", "has-art"]], "visible": ["#cardArt", "#cardFaces", "#cardBuildersFig", "#cardShippedFig", "#cardOpen", "#cardHall"], "text": [["#cardBuilders", "11"], ["#cardShipped", "0"], ["#cardRel", "you build here"], ["#cardRuns", "amazonprimea.com"], ["#cardFaces .facesMore", "+6"]], "count": [["#cardFaces img", 5]], "href": [["#cardHall", "https://builders.amazonprimea.com/"]] } },
     "card-noart": { "auth": true, "actions": [["dispatchClick", "#orbField a.worldOrb[data-origin=\"https://emersonian-circles.cloudbongos.com\"]"], ["wait", 600]], "expect": { "dialog": true, "hasClass": [["#projCard", "has-art", false]], "hidden": ["#cardArt", "#cardFaces", "#cardHall"], "visible": ["#cardBuildersFig", "#cardShippedFig", "#cardOpen"], "text": [["#cardShipped", "30+"], ["#cardRel", "you build here"]] } },
-    "card-floor": { "auth": true, "actions": [["dispatchClick", "#orbField a.worldOrb[data-origin=\"https://demo.cloudbongos.com\"]"], ["wait", 600]], "expect": { "dialog": true, "hidden": ["#cardArt", "#cardFaces", "#cardFigs", "#cardHall", "#cardRel", "#cardTypeL", "#cardOwnerL"], "visible": ["#cardOpen", "#cardRuns", "#cardListed"] } },
     "card-self": { "auth": true, "actions": [["dispatchClick", "#selfOrb"], ["wait", 600]], "expect": { "dialog": true, "hidden": ["#cardArt"], "visible": ["#cardBuildersFig", "#cardShippedFig", "#cardFaces", "#cardOpen", "#cardHall"], "text": [["#cardRel", "yours"]] } }
   },
   "reducedMotion": { "auth": true, "actions": [["click", "#projTrig"], ["wait", 100]] }

package/src/module-api.js

@@ -33,7 +33,7 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.420'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.421'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/account_privacy_flags.mjs

@@ -284,16 +284,23 @@ test('the discoverable toggle names EXACTLY what it grants — the D3 sliver, na
     'the section ships hidden — it reveals only where the hub module answers');
 });
 
-test('no toggle claims a protection this task has not built — the read paths are still open', () => {
+test('each toggle claims exactly what is enforced — visibility in force, recruiting not yet', () => {
   const js = readFileSync(join(ROOT, 'modules/hall-ui/public/settings.js'), 'utf8');
   const html = readFileSync(join(ROOT, 'modules/hall-ui/public/settings.html'), 'utf8');
-  // Storing a flag is not enforcing it (task 1002967 wires the read paths). A
-  // builder flipping this for personal safety must not be told they are hidden
-  // while GET /profiles/:handle still serves the page.
-  assert.match(html, /saved to your account now\. They start applying as[\s\S]*nothing is hidden yet/,
-    'the section states plainly that the choice is recorded, not yet in force');
-  assert.doesNotMatch(js, /Private hides the page|is private — hidden from everyone/,
-    'no present-tense promise that the page is already hidden');
-  assert.match(js, /Private will hide the page from everyone but you/,
-    'the row says what the choice WILL do');
+  // A toggle may promise only what a read path actually enforces, and the two
+  // rows are at different stages. Task 1002967 wired VISIBILITY into every
+  // public read, so its row moved to the present tense here — and it must also
+  // say the page 404s to the OWNER, because that is the surprising half of D2
+  // (the owner reads their record through the own-scope side door instead).
+  // DISCOVERABILITY is still stored-only: no recruiting surface reads it, so a
+  // present-tense promise there would be the "protection you do not have" this
+  // assertion pair exists to prevent.
+  assert.match(js, /Private hides the page from everyone — including you/,
+    'visibility is enforced now, so the row says so — and names the 404-to-self');
+  assert.doesNotMatch(js, /Private will hide the page/,
+    'the future tense outlived its truth the moment resolveHandle joined the predicate');
+  assert.match(html, /profile page setting applies now[\s\S]*Recruiter discoverability is saved to your[\s\S]*starts applying as the recruiting surfaces land/,
+    'the section note splits the two: one in force, one recorded and waiting');
+  assert.doesNotMatch(js, /Recruiters looking for builders (?:can|are able to) find you\b/,
+    'no present-tense promise about recruiting reach — nothing reads that flag yet');
 });