@bongos/core 1.19.484 → 1.19.485

package/tests/hall_settings_world.mjs

@@ -0,0 +1,274 @@
+// tests/hall_settings_world.mjs — the PANEL family in the chrome world
+// (task 1003308, goal 1000081): settings, profile, pair, not-ready.
+//
+// tests/hall_tokens.mjs pins the TIER these pages spend; this pins how they
+// spend it. Everything here is a fact that is silent in a browser: the page
+// still renders, it just renders wrong, or it renders right on one machine and
+// fails a floor on the reviewer's. Each assertion is something the redesign
+// measured and would otherwise have to re-measure by hand every time.
+//
+// What it locks:
+//   * ONE ARCHETYPE SHEET. panel.css holds the row, the switch, the field, the
+//     chip control and the family's voices; the four page sheets hold only what
+//     one page has. Every page links panel.css BEFORE its own sheet.
+//   * THE ONE h1. None of the five had one — the hall predates the floor — so
+//     every render failed one-header-main-h1. The h1 is the page's name in the
+//     room voice, and it lives in the static markup so the DOM has it in every
+//     state, not only the happy path.
+//   * THE SWITCH IS A SWITCH. A toggle is role=switch with aria-checked, drawn
+//     as a 44x24 track inside a 46x38 target; the page scripts keep reading
+//     data-on, which they wrote. The wandering pick is a radio row, not four
+//     "Choose" buttons.
+//   * THE 24px FLOOR ON BOTH AXES. .craft-pref was 13x13 — the smallest control
+//     in the hall; .profile__disc-edit (123x19) and .profile__needs-act (18px)
+//     on the Standing card belonged to this family and are bought up with the
+//     prose-link recipe.
+//   * WHITE ON THE ACCENT, AND THE ONE EXCEPTION. Eight literals across three
+//     sheets are gone; the Discord blurple pair stays, because it is Discord's
+//     mark and not the world's, and it is named as the exception in a comment.
+//   * THE COMPAT ALIASES. Five sheets, zero aliases spent.
+//
+// Reproduce the renders these came from (the family needs the fixture harness —
+// every panel is filled from /me/* reads the kit stub does not carry):
+//   node scripts/hall-preview/server.js --port 4621 --fixture-me
+//   node modules/ui-design/kit/render.js --states modules/hall-ui/public/settings.states.json \
+//     --base-in http://builders.localhost:4621 --base-out http://builders.localhost:4621
+//   (and profile / pair / not-ready .states.json the same way)
+
+import { test } from 'node:test';
+import assert from 'node:assert/strict';
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
+const HALL = path.join(ROOT, 'modules', 'hall-ui', 'public');
+const read = (f) => fs.readFileSync(path.join(HALL, f), 'utf8');
+const stripComments = (css) => css.replace(/\/\*[\s\S]*?\*\//g, '');
+
+const PAGES = ['settings', 'profile', 'pair', 'not-ready'];
+const SHEETS = ['panel.css', 'settings.css', 'pair.css', 'profile.css'];
+
+const panelCss = read('panel.css');
+const settingsCss = read('settings.css');
+const styleCss = read('style.css');
+const settingsJs = read('settings.js');
+
+// The body of the first rule whose selector LIST contains `selector` as one of
+// its comma-separated members — the family sheet groups the page scripts' own
+// names onto one rule, so a rule is found by membership, not by a bare prefix.
+function ruleOf(css, selector) {
+  // an @media wrapper is unwrapped so the rules inside it scan as flat rules;
+  // the FIRST match wins, which is the unwrapped one for a selector that also
+  // has a breakpoint override
+  const bare = stripComments(css).replace(/@media[^{]*\{/g, '');
+  // a lookbehind, not a consuming group: a consumed `}` would hide every other rule
+  const re = /(?<=^|[}])\s*([^{}]+?)\s*\{([^}]*)\}/g;
+  let m;
+  while ((m = re.exec(bare))) {
+    const members = m[1].split(',').map((s) => s.trim());
+    if (members.includes(selector)) return m[2];
+  }
+  return null;
+}
+
+// ---- 1. one archetype sheet, linked before the page's own -------------------
+
+test('every page in the family links panel.css before its own sheet', () => {
+  for (const p of PAGES) {
+    const html = read(`${p}.html`);
+    const links = [...html.matchAll(/<link rel="stylesheet" href="\/builders\/([a-z-]+\.css)[^"]*">/g)].map((x) => x[1]);
+    const at = links.indexOf('panel.css');
+    assert.ok(at > -1, `${p}.html links panel.css`);
+    assert.ok(links.indexOf('style.css') < at, `${p}.html: the shell first, then the archetype`);
+    const own = `${p}.css`;
+    if (links.includes(own)) assert.ok(links.indexOf(own) > at, `${p}.html: the page sheet after the archetype`);
+  }
+  assert.ok(read('profile.html').includes('/builders/profile.css'), 'the profile has a sheet of its own now');
+});
+
+test('the archetype holds the row, the switch, the field and the voices; the page sheets do not redefine them', () => {
+  for (const sel of ['.prow', '.sw', '.sw__track', '.sw__knob', '.field-label', '.pinput', '.chip-ctl', '.panel-note', '.panel-status', '.gate']) {
+    assert.ok(ruleOf(panelCss, sel), `panel.css defines ${sel}`);
+  }
+  for (const sheet of ['settings.css', 'pair.css', 'profile.css']) {
+    const css = read(sheet);
+    for (const sel of ['.prow', '.sw', '.sw__track', '.pinput', '.chip-ctl']) {
+      assert.equal(ruleOf(css, sel), null, `${sheet} must not redefine ${sel} — that is how the family would drift`);
+    }
+  }
+});
+
+// ---- 2. the one h1, in the static markup ----------------------------------
+
+test('each of the five pages has exactly one h1, in the family\'s page head', () => {
+  for (const p of PAGES) {
+    const html = read(`${p}.html`).replace(/<!--[\s\S]*?-->/g, '');
+    const h1s = html.match(/<h1\b/g) || [];
+    assert.equal(h1s.length, 1, `${p}.html: one-header-main-h1 — the page had none until task 1003308`);
+    assert.match(html, /<div class="page-head page-head--room page-head--panel">\s*(<p class="page-head__eyebrow">[^<]*<\/p>\s*)?<h1 id="[a-z-]+-h1" class="page-head__h">/,
+      `${p}.html: the h1 is the page's name in the room voice, static so every state has it`);
+  }
+  assert.match(ruleOf(panelCss, '.page-head--room.page-head--panel') || '', /padding-top:\s*0/,
+    'the family takes the room VOICE, not its top air — a form page starts at the content edge');
+});
+
+// ---- 3. the switch, the radio, the chip: the 24px floor on both axes -------
+
+test('a toggle is a role=switch with aria-checked, and the page script keeps data-on', () => {
+  assert.match(settingsJs, /function switchHtml\(/, 'one switch builder');
+  const fn = settingsJs.match(/function switchHtml\([\s\S]*?\n  \}\n/);
+  assert.ok(fn, 'switchHtml is a whole function');
+  assert.match(fn[0], /role="switch"/, 'role=switch');
+  assert.match(fn[0], /aria-checked="\$\{on \? 'true' : 'false'\}"/, 'state is aria-checked');
+  assert.match(fn[0], /data-on="\$\{on \? '1' : '0'\}"/, 'and data-on stays, because every delegated click handler reads it');
+  assert.match(fn[0], /sw__track[\s\S]*sw__knob/, 'drawn as a track and a knob');
+  assert.doesNotMatch(settingsJs, /aria-pressed/, 'no aria-pressed toggles are left on the page');
+  for (const fnName of ['renderSounds', 'renderRender', 'renderCrossProject', 'privacyRow']) {
+    const body = settingsJs.match(new RegExp(`function ${fnName}\\([\\s\\S]*?\\n  \\}\\n`));
+    assert.ok(body && /switchHtml\(/.test(body[0]), `${fnName} renders the switch`);
+  }
+});
+
+test('the switch clears the floor: a 46x38 target drawing a 44x24 track', () => {
+  const sw = ruleOf(panelCss, '.sw');
+  assert.ok(sw, '.sw has a rule');
+  assert.match(sw, /width:\s*46px/, 'the target is 46 wide');
+  assert.match(sw, /height:\s*38px/, 'and 38 tall — this is what the floor measures');
+  const track = ruleOf(panelCss, '.sw__track');
+  assert.match(track, /width:\s*44px/, 'the drawn track stays the world\'s small shape');
+  assert.match(track, /height:\s*24px/);
+  const on = ruleOf(panelCss, '.sw[aria-checked="true"] .sw__track');
+  assert.match(on, /background:\s*var\(--accent-tint\)/, 'on is the tint, the accent arrives on the knob');
+});
+
+test('the wandering pick is a radio row, wired on change', () => {
+  const render = settingsJs.match(/function renderWandering\([\s\S]*?\n  \}\n/);
+  assert.ok(render, 'renderWandering is a whole function');
+  assert.match(render[0], /<label class="prow prow--pick" for="\$\{id\}"/, 'the whole row is the radio\'s label');
+  assert.match(render[0], /<input class="pradio" type="radio" name="wandering"/, 'a real radio group');
+  assert.match(render[0], /locked \? ' disabled' : ''/, 'a level above the rank ceiling is a disabled radio');
+  assert.doesNotMatch(render[0], /Rank-locked<\/button>|Choose<\/button>/, 'the four "Choose" buttons are gone');
+  const load = settingsJs.match(/async function loadWandering\([\s\S]*?\n  \}\n/);
+  assert.match(load[0], /addEventListener\('change'/, 'a radio fires change, not click');
+  assert.match(load[0], /closest\('\.pradio'\)/);
+  const radio = ruleOf(panelCss, '.pradio');
+  assert.match(radio, /width:\s*24px/);
+  assert.match(radio, /height:\s*24px/, 'a native radio is 13px; the floor is 24');
+});
+
+test('.craft-pref is a 24px target with a 14px drawn box — it was 13x13, the smallest control in the hall', () => {
+  const box = ruleOf(panelCss, '.craft-pref');
+  assert.ok(box, '.craft-pref has a rule');
+  assert.match(box, /width:\s*24px/);
+  assert.match(box, /height:\s*24px/);
+  assert.match(box, /appearance:\s*none/, 'the native box has to go, or sizing it up sizes the glyph up too');
+  const before = ruleOf(panelCss, '.craft-pref::before');
+  assert.match(before, /width:\s*14px/, 'the drawn box stays 14px inside the 24px target');
+  const check = ruleOf(panelCss, '.craft-pref:checked::after');
+  assert.match(check, /border:\s*solid var\(--accent-on\)/, 'the tick is the dark ink on the salmon, never white');
+});
+
+test('the Standing card\'s two under-floor links buy both axes and hand the room back', () => {
+  for (const sel of ['.profile__disc-edit', '.profile__needs-act']) {
+    const r = ruleOf(styleCss, sel);
+    assert.ok(r, `${sel} has a rule`);
+    assert.match(r, /display:\s*inline-block/, `${sel}: inline-block, so min-height applies to a run of text`);
+    assert.match(r, /min-height:\s*24px/, `${sel}: the height half of the floor (it measured 19px and 18px)`);
+    assert.match(r, /min-width:\s*24px/, `${sel}: the width half`);
+    assert.match(r, /padding:\s*3px 4px/, `${sel}: the row recipe`);
+    assert.match(r, /margin:\s*-3px -4px/, `${sel}: the negative margin gives the padding back to the line`);
+  }
+});
+
+// ---- 4. the world's own bans -------------------------------------------------
+
+test('no sheet in the family spends a compat alias', () => {
+  const aliases = ['--surface', '--surface-2', '--border', '--border-strong', '--accent-weak', '--accent-text'];
+  for (const sheet of SHEETS) {
+    const bare = stripComments(read(sheet));
+    const spent = aliases.filter((a) => new RegExp(`var\\(\\s*${a}\\s*[,)]`).test(bare));
+    assert.deepEqual(spent, [], `${sheet}: the aliases exist for un-reskinned pages, so spending one here opts the sheet out of the world`);
+  }
+});
+
+test('white on the accent is gone, and the Discord mark is the one named exception', () => {
+  for (const sheet of ['panel.css', 'pair.css', 'profile.css']) {
+    const bare = stripComments(read(sheet));
+    assert.doesNotMatch(bare, /#[0-9a-f]{3,8}\b/i, `${sheet} carries no colour literal`);
+    assert.doesNotMatch(bare, /:\s*white\b/i, `${sheet} carries no named white`);
+  }
+  const bare = stripComments(settingsCss);
+  const literals = [...bare.matchAll(/#[0-9a-f]{3,8}\b/gi)].map((m) => m[0].toLowerCase());
+  assert.deepEqual([...new Set(literals)].sort(), ['#4853c4', '#5865f2', '#ffffff'],
+    'settings.css: the blurple pair and its white are the only literals, and they are Discord\'s');
+  for (const lit of literals) {
+    // every literal sits inside a .settings-btn--discord rule
+    const idx = bare.indexOf(lit);
+    const ruleStart = bare.lastIndexOf('{', idx);
+    const selector = bare.slice(bare.lastIndexOf('}', ruleStart) + 1, ruleStart);
+    assert.match(selector, /\.settings-btn--discord/, `${lit} is spent only on the Discord button`);
+  }
+  assert.match(settingsCss, /THIRD-PARTY MARK, KEPT ON PURPOSE/, 'the exception is named in a comment so a literal sweep leaves it alone');
+  // the save/accent buttons take --accent-on. `.pair-approve` and `.craft-save`
+  // are members of the base pill rule AND the save rule, so the save rule is
+  // found by its own name and the two are asserted as its members.
+  const save = ruleOf(panelCss, '.pbtn--save');
+  assert.ok(save, '.pbtn--save has a rule');
+  assert.match(save, /background:\s*var\(--accent\)/);
+  assert.match(save, /color:\s*var\(--accent-on\)/, 'the dark ink for the salmon — white on it fails AA');
+  const saveSelector = stripComments(panelCss).match(/([^{}]*\.pbtn--save[^{}]*)\{/);
+  assert.ok(saveSelector, 'the save rule\'s selector list is readable');
+  for (const member of ['.craft-save', '.pair-approve']) {
+    assert.ok(saveSelector[1].split(',').map((s) => s.trim()).includes(member), `${member} is the accent door on its page`);
+  }
+});
+
+// ---- 5. the token is quoted, the project is a row, the profile is a band ----
+
+test('the CLI token is quoted — one tonal step down, wrapping anywhere', () => {
+  const fn = settingsJs.match(/async function issueCliToken\([\s\S]*?\n  \}\n/);
+  assert.ok(fn, 'issueCliToken is a whole function');
+  assert.match(fn[0], /class="quote"/, 'the result renders the quote');
+  assert.match(fn[0], /<pre class="quote__pre">\$\{escapeHtml\(body\.paste_command \|\| ''\)\}<\/pre>/, 'the secret is escaped into the pre');
+  assert.doesNotMatch(fn[0], /style="/, 'no inline style on the foot');
+  const pre = ruleOf(settingsCss, '.quote__pre');
+  assert.match(pre, /overflow-wrap:\s*anywhere/, 'a 64-character token wraps inside its quote instead of widening the panel');
+  assert.match(ruleOf(settingsCss, '.quote') || '', /background:\s*var\(--glass\)/, 'one tonal step down from the panel');
+});
+
+// The hall's my-projects page is GONE (owner decision, task 1003308): "my
+// projects" is a user-level page that already lives on the hub, so the hall
+// carries neither the page nor a link nor a redirect to it.
+test('the hall no longer ships a my-projects page', () => {
+  for (const f of ['my-projects.html', 'my-projects.js', 'my-projects.css', 'my-projects.states.json']) {
+    assert.ok(!fs.existsSync(path.join(HALL, f)), `${f} is gone — the page is the hub's`);
+  }
+  for (const f of ['shell.js', 'palette.js']) {
+    assert.doesNotMatch(read(f), /my-projects/, `${f} does not link the page`);
+  }
+});
+
+test('the profile identity band is a MODIFIER on the shell\'s .profile, never a second base rule', () => {
+  assert.match(read('profile.html'), /<div class="profile profile--ident" id="profile-head">/, 'the band opts in from its markup');
+  const css = read('profile.css');
+  assert.ok(ruleOf(css, '.profile--ident'), 'profile.css styles the modifier');
+  assert.equal(ruleOf(css, '.profile'), null, 'and never redeclares bare .profile — Home\'s Standing card shares it');
+  assert.match(ruleOf(css, '.profile--ident .profile__avatar') || '', /var\(--skeleton\)/, 'the avatar placeholder is the skeleton tone, not --bg-deep (pure black in dark)');
+  assert.match(ruleOf(css, '.ach') || '', /background:\s*var\(--bg-card\)/, 'a shelf tile on the bare section is the panel, not a card in a card');
+});
+
+// ---- 6. the floors are reproducible ------------------------------------------
+
+test('all five pages have a states file, so the floors are reproducible', () => {
+  for (const p of PAGES) {
+    const json = JSON.parse(read(`${p}.states.json`));
+    assert.equal(json.surface, 'hall-ui', `${p}.states.json names its surface`);
+    assert.ok(Object.keys(json.states).length >= 2, `${p}.states.json renders more than the default state`);
+  }
+  assert.ok(Object.keys(JSON.parse(read('settings.states.json')).states).length >= 4, 'settings renders every rail group');
+  for (const fx of ['me__sessions', 'auth__app-pair__info']) {
+    assert.ok(fs.existsSync(path.join(ROOT, 'scripts', 'hall-preview', 'fixtures', `${fx}.json`)),
+      `the harness serves ${fx} — without it the page only ever rendered its empty state`);
+  }
+});

package/tests/join_application_note.mjs

@@ -94,19 +94,11 @@ test('the relay sends the composed note and the applicant’s name — not a con
   assert.match(join, /note: \{ type: 'string', maxLength: APPLICANT_NOTE_MAX \}/, 'the note is declared in the route’s schema');
 });
 
-test('the join box offers the note as optional, and never demands it', () => {
-  const html = src('modules/hall-ui/public/my-projects.html');
-  assert.match(html, /<textarea id="join-note"/, 'the note field exists');
-  assert.match(html, /maxlength="400"/, 'the field cannot outrun the route’s cap');
-  assert.match(html, /Add a note \(optional\)/, 'and it is labelled optional');
-  assert.match(html, /id="join-status"/, 'the answer line is its own element, not the note field');
-});
-
-test('a door refusal keeps what the applicant typed; a filed request clears it', () => {
-  const js = src('modules/hall-ui/public/my-projects.js');
-  const click = (js.match(/joinBtn\.addEventListener\('click'[\s\S]*?\n  \}\);\n/) || [''])[0];
-  assert.ok(click, 'the join handler must exist');
-  assert.match(click, /note \? \{ origin: origin, note: note \} : \{ origin: origin \}/, 'a blank note is omitted, not sent as ""');
-  assert.match(click, /if \(!refused\) \{ joinInput\.value = ''; joinNoteInput\.value = ''; load\(\); \}/,
-    'cleared only when the request was actually filed — a refusal keeps the words for the next try');
+// The hall's my-projects page (the join box + its click handler) was REMOVED in
+// task 1003308 — "my projects" is a user-level page that lives on the hub, and
+// the hall keeps no copy. The route contract above is the whole surface now;
+// the hub's own join form is pinned by tests/public_landing_projects.mjs.
+test('the hall no longer carries a join box of its own', () => {
+  assert.ok(!fs.existsSync(path.join(ROOT, 'modules/hall-ui/public/my-projects.html')), 'the hall page is gone');
+  assert.ok(!fs.existsSync(path.join(ROOT, 'modules/hall-ui/public/my-projects.js')), 'and its script with it');
 });

package/tests/module-scope-map.mjs

@@ -126,7 +126,7 @@ test('platform-identity joined the roster (task 1002322) — the catalog territo
     'modules/platform-identity/platform-identity.js',   // visibility column + catalog domain
     'modules/platform-identity/routes/projects.js',     // the feed + invite routes
     'modules/status-ui/public/explore.js',              // orb render-type surface
-    'modules/hall-ui/public/my-projects.js',            // owner settings / applications queue
+    'modules/hall-ui/public/settings.js',               // the builder's own settings (my-projects.js left the hall in task 1003308)
     'modules/public-landing/public/projects.html',                     // the creation step, ?view=new since task 1002763
     'modules/provisioning/',                            // module-bundle selection at provision time
   ]) {

package/modules/hall-ui/public/my-projects.css

@@ -1,62 +0,0 @@
-/* my-projects.css — page styles for the cross-project view (task 1002868).
-   Every color derives from the style.css tokens (pack-driven); this file owns
-   only the page's own layout — rows, the join form, the inline notes. */
-
-.row {
-  display: flex;
-  align-items: center;
-  gap: 10px;
-  background: var(--surface);
-  border: 1px solid var(--border);
-  border-radius: var(--radius-sm);
-  padding: 10px 12px;
-  margin-bottom: 8px;
-}
-.row .meta { flex: 1; min-width: 0; }
-.row .name { font-weight: 600; }
-.row .origin { color: var(--accent-text); font-size: 12.5px; word-break: break-all; }
-.row .owner-pill {
-  font-size: 11px;
-  background: var(--accent);
-  color: #fff;
-  border-radius: 999px;
-  padding: 2px 8px;
-}
-
-.empty { margin: 0; color: var(--ink-soft); font-size: 13.5px; }
-
-.join { display: flex; gap: 8px; }
-.join input {
-  flex: 1;
-  font: inherit;
-  font-size: 13px;
-  padding: 0 10px;
-  height: 30px;
-  border: 1px solid var(--border-strong);
-  border-radius: var(--radius-sm);
-  background: var(--surface);
-  color: var(--ink);
-}
-/* The application's optional note (task 1002330). Sits under the one-click join
-   row so the click stays the primary act and the note is plainly skippable. */
-.join-note-label {
-  display: block;
-  margin: 10px 0 4px;
-  color: var(--ink-soft);
-  font-size: 12px;
-}
-.join-note {
-  display: block;
-  width: 100%;
-  box-sizing: border-box;
-  font: inherit;
-  font-size: 13px;
-  line-height: 1.4;
-  padding: 6px 10px;
-  resize: vertical;
-  border: 1px solid var(--border-strong);
-  border-radius: var(--radius-sm);
-  background: var(--surface);
-  color: var(--ink);
-}
-.note { margin: 10px 0 0; color: var(--ink-soft); font-size: 13px; min-height: 1.2em; }

package/modules/hall-ui/public/my-projects.html

@@ -1,73 +0,0 @@
-<!doctype html>
-<html lang="en">
-<head>
-  <meta charset="utf-8">
-  <meta name="viewport" content="width=device-width, initial-scale=1">
-  <title>My Projects — {{worldName}}</title>
-  <meta name="description" content="Your cross-project view: the projects you own and build on across {{worldName}}.">
-  <link rel="icon" href="data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'><text x='16' y='24' font-size='24' text-anchor='middle' font-family='sans-serif'>⌂</text></svg>">
-  <link rel="preconnect" href="https://fonts.googleapis.com">
-  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
-  <link rel="stylesheet" href="/builders/style.css?v=2026-07-02-shell1">
-  <link rel="stylesheet" href="/builders/my-projects.css">
-</head>
-<body data-page="my-projects" data-page-title="My Projects">
-
-<div class="app">
-  <aside class="app-sidebar" id="app-sidebar" aria-label="Primary"></aside>
-  <div class="app-scrim" id="app-scrim" hidden></div>
-  <div class="app-body">
-    <header class="app-topbar" id="app-topbar"></header>
-    <div class="app-content">
-      <div class="page-head">
-        <p class="page-head__sub">Every project you build on across the platform.</p>
-      </div>
-
-      <main id="hall-main">
-        <section class="scroll" aria-labelledby="owned-h">
-          <h2 id="owned-h" class="scroll__h">Projects you own</h2>
-          <div id="owned"><p class="empty">—</p></div>
-        </section>
-
-        <section class="scroll" id="invites-section" hidden aria-labelledby="invites-h">
-          <h2 id="invites-h" class="scroll__h">Invitations</h2>
-          <div id="invites"></div>
-        </section>
-
-        <section class="scroll" aria-labelledby="building-h">
-          <h2 id="building-h" class="scroll__h">Projects you build on</h2>
-          <div id="building"><p class="empty">—</p></div>
-        </section>
-
-        <section class="scroll" aria-labelledby="join-h">
-          <h2 id="join-h" class="scroll__h">Join a project</h2>
-          <div class="join">
-            <input id="join-origin" type="url" placeholder="https://project.cloudbongos.com" autocomplete="off">
-            <button id="join-btn" type="button" class="btn-ghost">Request to join</button>
-          </div>
-          <!-- An application is one click; the note is the applicant's own words,
-               and it is optional on purpose (task 1002330 — lightweight, never an
-               owner-defined form). It reaches the project owner's queue. -->
-          <label class="join-note-label" for="join-note">Add a note (optional)</label>
-          <textarea id="join-note" class="join-note" rows="2" maxlength="400"
-                    placeholder="Anything the project's owner should know — what you'd like to work on, who you are."></textarea>
-          <p id="join-status" class="note"></p>
-        </section>
-      </main>
-
-      <footer class="app-foot" id="app-foot"></footer>
-    </div>
-  </div>
-</div>
-
-<div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
-
-<!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
-     chrome exists before the page script runs. -->
-<script src="/builders/shell.js?v=2026-07-02-shell1"></script>
-<!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
-<script src="/builders/palette.js" defer></script>
-<script src="/builders/brand-apply.js"></script>
-<script src="/builders/my-projects.js"></script>
-</body>
-</html>

package/modules/hall-ui/public/my-projects.js

@@ -1,153 +0,0 @@
-// my-projects.js — the signed-in builder's cross-project view (ADR 0141 §3, task
-// #1002112). Fetches /api/gds/my-projects (session cookie, same-origin) and renders
-// owned + building-on lists with self-service leave, plus a join-by-origin form
-// whose application is one click plus an optional note (task 1002330).
-// All network values are rendered via textContent — never innerHTML.
-(function () {
-  'use strict';
-  var ownedEl = document.getElementById('owned');
-  var buildingEl = document.getElementById('building');
-  var joinBtn = document.getElementById('join-btn');
-  var joinInput = document.getElementById('join-origin');
-  var joinNoteInput = document.getElementById('join-note');   // the applicant's own words (optional)
-  var joinStatus = document.getElementById('join-status');    // what the project answered
-
-  function el(tag, cls) { var e = document.createElement(tag); if (cls) e.className = cls; return e; }
-
-  function safeOriginHost(origin) {
-    try {
-      var u = new URL(String(origin));
-      return (u.protocol === 'https:' || u.protocol === 'http:') ? u.host : null;
-    } catch (_) { return null; }
-  }
-
-  function renderList(container, items, opts) {
-    container.textContent = '';
-    if (!items || items.length === 0) {
-      var p = el('p', 'empty');
-      p.textContent = opts.emptyText;
-      container.appendChild(p);
-      return;
-    }
-    items.forEach(function (m) {
-      var row = el('div', 'row');
-      var meta = el('div', 'meta');
-      var name = el('div', 'name');
-      name.textContent = m.name || m.client_id;
-      meta.appendChild(name);
-      var host = safeOriginHost(m.origin);
-      if (host) {
-        var o = el('div', 'origin');
-        o.textContent = host;
-        meta.appendChild(o);
-      }
-      row.appendChild(meta);
-      if (m.membership_kind === 'owner') {
-        var pill = el('span', 'owner-pill');
-        pill.textContent = 'owner';
-        row.appendChild(pill);
-      }
-      if (opts.leavable) {
-        var btn = el('button', 'btn-ghost');
-        btn.type = 'button';
-        btn.textContent = 'Leave';
-        btn.addEventListener('click', function () { leave(m.client_id, row, btn); });
-        row.appendChild(btn);
-      }
-      container.appendChild(row);
-    });
-  }
-
-  function leave(clientId, row, btn) {
-    btn.disabled = true;
-    btn.textContent = 'Leaving…';
-    fetch('/api/gds/my-projects/' + encodeURIComponent(clientId) + '/leave', { method: 'POST' })
-      .then(function (r) { return r.ok ? r.json() : Promise.reject(); })
-      .then(function () { row.remove(); })
-      .catch(function () { btn.disabled = false; btn.textContent = 'Leave'; });
-  }
-
-  function resolveInvite(clientId, accept, row, btns) {
-    btns.forEach(function (b) { b.disabled = true; });
-    fetch('/api/gds/my-projects/invites/' + encodeURIComponent(clientId) + '/' + (accept ? 'accept' : 'decline'), { method: 'POST' })
-      .then(function (r) { return r.ok ? r.json() : Promise.reject(); })
-      .then(function () { row.remove(); if (accept) load(); loadInvites(); })
-      .catch(function () { btns.forEach(function (b) { b.disabled = false; }); });
-  }
-
-  function loadInvites() {
-    var section = document.getElementById('invites-section');
-    var container = document.getElementById('invites');
-    fetch('/api/gds/my-projects/invites', { headers: { Accept: 'application/json' } })
-      .then(function (r) { return r.ok ? r.json() : Promise.reject(); })
-      .then(function (data) {
-        var invites = (data && data.invites) || [];
-        if (invites.length === 0) { section.hidden = true; return; }
-        container.textContent = '';
-        invites.forEach(function (inv) {
-          var row = el('div', 'row');
-          var meta = el('div', 'meta');
-          var name = el('div', 'name');
-          name.textContent = inv.name || inv.client_id;
-          meta.appendChild(name);
-          var host = safeOriginHost(inv.origin);
-          if (host) { var o = el('div', 'origin'); o.textContent = host; meta.appendChild(o); }
-          row.appendChild(meta);
-          var accept = el('button', 'btn-ghost'); accept.type = 'button'; accept.textContent = 'Accept';
-          var decline = el('button', 'btn-ghost'); decline.type = 'button'; decline.textContent = 'Decline';
-          accept.addEventListener('click', function () { resolveInvite(inv.client_id, true, row, [accept, decline]); });
-          decline.addEventListener('click', function () { resolveInvite(inv.client_id, false, row, [accept, decline]); });
-          row.appendChild(accept); row.appendChild(decline);
-          container.appendChild(row);
-        });
-        section.hidden = false;
-      })
-      .catch(function () { section.hidden = true; });
-  }
-
-  function load() {
-    fetch('/api/gds/my-projects', { headers: { Accept: 'application/json' } })
-      .then(function (r) { return r.ok ? r.json() : Promise.reject(); })
-      .then(function (data) {
-        renderList(ownedEl, data.owned, { emptyText: 'You don’t own any projects yet.', leavable: false });
-        renderList(buildingEl, data.building, { emptyText: 'You’re not building on any other projects yet.', leavable: true });
-      })
-      .catch(function () {
-        ownedEl.textContent = ''; buildingEl.textContent = '';
-        var p = el('p', 'empty'); p.textContent = 'Couldn’t load your projects right now.';
-        buildingEl.appendChild(p);
-      });
-  }
-
-  joinBtn.addEventListener('click', function () {
-    var origin = (joinInput.value || '').trim();
-    if (!origin) { joinStatus.textContent = 'Enter a project URL.'; return; }
-    var note = (joinNoteInput.value || '').trim();
-    joinBtn.disabled = true;
-    joinStatus.textContent = 'Requesting…';
-    fetch('/api/gds/my-projects/join', {
-      method: 'POST',
-      headers: { 'Content-Type': 'application/json' },
-      /* note is omitted entirely when blank — an application with nothing written
-         is still an application (task 1002330). */
-      body: JSON.stringify(note ? { origin: origin, note: note } : { origin: origin }),
-    })
-      .then(function (r) { return r.json().then(function (b) { return { ok: r.ok, body: b }; }); })
-      .then(function (res) {
-        joinBtn.disabled = false;
-        if (res.ok && res.body && res.body.message) {
-          joinStatus.textContent = res.body.message;
-          /* a door refusal rides a 200 (task 1003044): keep the address AND the
-             note the applicant wrote, and don't repaint as if a request went out */
-          var refused = res.body.status === 'invite_only' || res.body.status === 'open_enrollment' || res.body.status === 'members_only';
-          if (!refused) { joinInput.value = ''; joinNoteInput.value = ''; load(); }
-        }
-        else if (res.body && res.body.error && res.body.error.code === 'unknown_project') { joinStatus.textContent = 'That project isn’t on the platform.'; }
-        else { joinStatus.textContent = 'Could not request access right now.'; }
-      })
-      .catch(function () { joinBtn.disabled = false; joinStatus.textContent = 'Could not request access right now.'; });
-  });
-
-  load();
-  loadInvites();
-}());