@bongos/core 1.19.530 → 1.19.531

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.530",
-  "core_contract": "1.19.530",
-  "source_commit": "f0252c888bf69ec2aadf5067e81ab801f6e6ef70",
+  "core_version": "1.19.531",
+  "core_contract": "1.19.531",
+  "source_commit": "9044e13dacbf2160d02eef08915ffa74dbc669be",
   "source_ref": "HEAD",
-  "built_at": "2026-09-04T13:34:55.894Z",
+  "built_at": "2026-09-04T13:41:13.821Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 435,
     "agent_docs_stubbed": 24,
-    "functional_verbatim": 1978,
+    "functional_verbatim": 1979,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 2437,
-  "tree_sha256": "9d176777fdd02fcc72db1a22651a24c4cbb6d8ff5a4531567c1d07e25511c7e1",
+  "file_count": 2438,
+  "tree_sha256": "0d93f09e833a982f219a54f124fe11808be718651cd93d5258119ef9e50a7954",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -1767,12 +1767,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "42f1210b3c422d2b05b719c38eabfb3ed25ed31988a757394dfc2caed045ee36"
+      "sha256": "729633c41036ec0026d3ef1ac787f68cb6fb7ab77e3eb578f855b5ec2d63280f"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "0d9a040a9bac5670b2034e98479d86706070853dbb65b799d770b76e488534a6"
+      "sha256": "344a451940b630b1f6db2f97acb45eb387616311675b243dcc4381dc604ef77d"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2617,7 +2617,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "b4be57f7972652783e91059ffccf9b0df8d972611955a66368c32bc14120dddc"
+      "sha256": "fa1785c5b0009ea7431a5fcf3fd13dcb5b65563c481e8d417d62c2eea6050af6"
     },
     {
       "path": "docs/modules-contract.md",
@@ -6887,12 +6887,12 @@
     {
       "path": "modules/status-ui/public/explore.html",
       "mode": "0000644",
-      "sha256": "e80fc1d5f44667f82761c9732433d1b38f074321024f493be0f74d9c037973ff"
+      "sha256": "7bdde42ca7bc23acaabf1966c928c6d0816e29677c243f82175a0e20bd995c07"
     },
     {
       "path": "modules/status-ui/public/explore.js",
       "mode": "0000644",
-      "sha256": "48769902093fa8d7d68ee38ee799eef70a2ac3190242886428fd635bf2a6e9ce"
+      "sha256": "a6311740e338d81cdeb9d5ce38733bd1dd4d978a6a5399c4f103017daf6f5cf2"
     },
     {
       "path": "modules/status-ui/public/index.html",
@@ -7332,12 +7332,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "c5ca6f4757bfbd6c174c11a75b767eb787bd202c8eda8e9ee1b51b7d76608b2a"
+      "sha256": "03ecbc56365c6b70ada0bdfd2ca666962f3ed8edcf95ef52acf93f2d0b82de51"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "2795c4357358560ad6802a780c375b49326f09c1c79ea047702cdcc2b8c602dd"
+      "sha256": "0eaf9886acaf585da2ecc97408dcb6f879a801ff20cead40a20bac221e8ea32f"
     },
     {
       "path": "public-docs/index.html",
@@ -9017,7 +9017,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "a92fb66032716db9e4517d003bde07cb8283a2282d2b3925283c2018cb348598"
+      "sha256": "a534c8a215f1f744707ef9835905ac2850c991757a76545f77a191f8c3827e7b"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -9934,6 +9934,11 @@
       "mode": "0000644",
       "sha256": "d6a78357533fdeea3bc33fe97cfcd27b1d04747c600d0a7800ddfca5199dbb1f"
     },
+    {
+      "path": "tests/explore_visible_states.mjs",
+      "mode": "0000644",
+      "sha256": "015588572bf3c75c1af00b3bb591f133dff7e604be1f9b40272f1f963b24bf71"
+    },
     {
       "path": "tests/extract_json.mjs",
       "mode": "0000644",

package/docs/copy-inventory.md

@@ -4,14 +4,14 @@
 > Deterministic on a given tree — regenerate and commit rather than hand-editing.
 > Machine-readable twin: [`copy-registry.json`](copy-registry.json).
 
-**1645 strings** across 3 surfaces · 1427 distinct pieces of copy · 1645 certain, 0 heuristic · 154 shown in more than one place.
+**1647 strings** across 3 surfaces · 1429 distinct pieces of copy · 1647 certain, 0 heuristic · 154 shown in more than one place.
 
 ## Surfaces
 
 | surface | lives at | files | strings |
 |---|---|---|---|
 | `builders-hall` | `modules/hall-ui/public` | 73 | 1187 |
-| `status-dashboard` | `modules/status-ui/public` | 4 | 98 |
+| `status-dashboard` | `modules/status-ui/public` | 4 | 100 |
 | `landing` | `modules/public-landing/public` | 5 | 360 |
 
 ## Confidence, and why it is on every row
@@ -1270,7 +1270,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `7e1bb38d4777` | certain | 🔒 Request to join | `modules/hall-ui/public/goals-render.js:861` |
 | `cce9c199e874` | certain | 🛡 Archon-mediated | `modules/hall-ui/public/goals-render.js:803` |
 
-## `status-dashboard` — 98 strings
+## `status-dashboard` — 100 strings
 
 | id | conf | text | where |
 |---|---|---|---|
@@ -1278,6 +1278,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `c5fbe5ea4335` | certain | , a third-party logistics house in Cleveland, Ohio. | `modules/status-ui/public/index.html:355` |
 | `2045078fb115` | certain | 90 days ago | `modules/status-ui/public/status.js:477` |
 | `e4848e2d9386` | certain | A new portrait is set down each time the city's stones are reshaped. Scroll to see how {{worldName}} has grown | `modules/status-ui/public/index.html:344` |
+| `390faeaffb47` | certain | A project | `modules/status-ui/public/explore.js:71` |
 | `f4a664041da5` | certain | A shipping container has washed ashore upon the coast south of Athens. About it a new civilization rises. Set  | `modules/status-ui/public/index.html:126` |
 | `623d6b7ae6b7` | certain | A true-to-life portrait of {{worldName}} as she stands today, rendered from the city's own stones. | `modules/status-ui/public/index.html:332` |
 | `155d14ab692a` | certain | All categories | `modules/status-ui/public/index.html:280` |
@@ -1290,11 +1291,10 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `c8959bdc0e59` | certain | Breakdown filtered to {…}: {…} of {…} ({…}% of all spend). | `modules/status-ui/public/status.js:659` |
 | `1fe8937399f5` | certain | By order of the Senate | `modules/status-ui/public/index.html:354` |
 | `21f644463d57` | certain | Citizens who have set the most stone. | `modules/status-ui/public/index.html:201` |
-| `87af953708b3` | certain | Couldn't load projects right now. | `modules/status-ui/public/explore.html:56` |
+| `87af953708b3` | certain | Couldn't load projects right now. | `modules/status-ui/public/explore.html:109` |
 | `3aa071ef1142` | certain | Cross into the city → | `modules/status-ui/public/index.html:128` |
-| `f70f217504ce` | certain | Explore — featured projects | `modules/status-ui/public/explore.html:6` |
-| `f70f217504ce` | certain | Explore — featured projects | `modules/status-ui/public/explore.html:6` |
-| `4db99e47bc50` | certain | Featured projects built on the platform. | `modules/status-ui/public/explore.html:52` |
+| `f151456aedc1` | certain | Explore — projects on the map | `modules/status-ui/public/explore.html:6` |
+| `f151456aedc1` | certain | Explore — projects on the map | `modules/status-ui/public/explore.html:6` |
 | `14d6b38bc659` | certain | Filter inscriptions by date range | `modules/status-ui/public/index.html:309` |
 | `194f07002413` | certain | Filter spend by category | `modules/status-ui/public/index.html:279` |
 | `183993d780be` | certain | Filter spend by source | `modules/status-ui/public/index.html:273` |
@@ -1315,15 +1315,17 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `37b171a6195a` | certain | No architects yet — be the first to lay a stone. | `modules/status-ui/public/index.html:205` |
 | `7816fbe0add8` | certain | No builders yet — be the first. | `modules/status-ui/public/status.js:1117` |
 | `0b097f051d6f` | certain | No endeavors underway just now. | `modules/status-ui/public/status.js:516` |
-| `837af36041de` | certain | No featured projects yet — check back soon. | `modules/status-ui/public/explore.html:55` |
+| `ed9b06f79234` | certain | No projects on the map yet — check back soon. | `modules/status-ui/public/explore.html:108` |
 | `4b1a11bfdf10` | certain | No works yet inscribed in this window. | `modules/status-ui/public/status.js:947` |
 | `7a8afe641683` | certain | No works yet inscribed. | `modules/status-ui/public/index.html:318` |
 | `3e8205a358d9` | certain | No {…} yet attributed to a hand. | `modules/status-ui/public/status.js:746` |
 | `c9efa62c36e7` | certain | No {…} yet spent. | `modules/status-ui/public/status.js:684` |
 | `2df94faddc8c` | certain | Not enough shipped works yet to draw the curve. | `modules/status-ui/public/index.html:224` |
 | `9d8692476139` | certain | Previous page | `modules/status-ui/public/index.html:321` |
+| `f1b103f87df2` | certain | Projects on the map, and how each one stands on it. | `modules/status-ui/public/explore.html:105` |
 | `48473324e839` | certain | Sections of the ledger | `modules/status-ui/public/index.html:144` |
 | `81cb441627b8` | certain | Show history of earlier portraits | `modules/status-ui/public/index.html:342` |
+| `abd2ce869517` | certain | Something is here. Its name, and everything else about it, stay with its owner. | `modules/status-ui/public/explore.js:74` |
 | `0cc023b5f470` | certain | Split by hand — {{currency}} spent by each builder at the workshop. | `modules/status-ui/public/index.html:295` |
 | `fddc39dcf1eb` | certain | Tablet being consulted… | `modules/status-ui/public/index.html:130` |
 | `8f86e1c9ad44` | certain | Text size | `modules/status-ui/public/index.html:18` |

package/docs/copy-registry.json

@@ -3,9 +3,9 @@
   "generator": "scripts/gds/copy-inventory.js",
   "goal": 1000074,
   "counts": {
-    "strings": 1645,
-    "unique_ids": 1427,
-    "certain": 1645,
+    "strings": 1647,
+    "unique_ids": 1429,
+    "certain": 1647,
     "heuristic": 0,
     "duplicate_ids": 154
   },
@@ -18,7 +18,7 @@
     "status-dashboard": {
       "at": "modules/status-ui/public",
       "files": 4,
-      "strings": 98
+      "strings": 100
     },
     "landing": {
       "at": "modules/public-landing/public",
@@ -693,9 +693,9 @@
       ]
     },
     {
-      "id": "f70f217504ce",
+      "id": "f151456aedc1",
       "surface": "status-dashboard",
-      "text": "Explore — featured projects",
+      "text": "Explore — projects on the map",
       "occurrences": 2,
       "at": [
         "modules/status-ui/public/explore.html:6",
@@ -15603,6 +15603,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "390faeaffb47",
+      "surface": "status-dashboard",
+      "text": "A project",
+      "file": "modules/status-ui/public/explore.js",
+      "line": 71,
+      "origin": "js-text-assign",
+      "confidence": "certain"
+    },
     {
       "id": "f4a664041da5",
       "surface": "status-dashboard",
@@ -15716,7 +15725,7 @@
       "surface": "status-dashboard",
       "text": "Couldn't load projects right now.",
       "file": "modules/status-ui/public/explore.html",
-      "line": 56,
+      "line": 109,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -15730,32 +15739,23 @@
       "confidence": "certain"
     },
     {
-      "id": "f70f217504ce",
+      "id": "f151456aedc1",
       "surface": "status-dashboard",
-      "text": "Explore — featured projects",
+      "text": "Explore — projects on the map",
       "file": "modules/status-ui/public/explore.html",
       "line": 6,
       "origin": "html-text",
       "confidence": "certain"
     },
     {
-      "id": "f70f217504ce",
+      "id": "f151456aedc1",
       "surface": "status-dashboard",
-      "text": "Explore — featured projects",
+      "text": "Explore — projects on the map",
       "file": "modules/status-ui/public/explore.html",
       "line": 6,
       "origin": "html-title",
       "confidence": "certain"
     },
-    {
-      "id": "4db99e47bc50",
-      "surface": "status-dashboard",
-      "text": "Featured projects built on the platform.",
-      "file": "modules/status-ui/public/explore.html",
-      "line": 52,
-      "origin": "html-text",
-      "confidence": "certain"
-    },
     {
       "id": "14d6b38bc659",
       "surface": "status-dashboard",
@@ -15937,11 +15937,11 @@
       "confidence": "certain"
     },
     {
-      "id": "837af36041de",
+      "id": "ed9b06f79234",
       "surface": "status-dashboard",
-      "text": "No featured projects yet — check back soon.",
+      "text": "No projects on the map yet — check back soon.",
       "file": "modules/status-ui/public/explore.html",
-      "line": 55,
+      "line": 108,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -15999,6 +15999,15 @@
       "origin": "html-attr:aria-label",
       "confidence": "certain"
     },
+    {
+      "id": "f1b103f87df2",
+      "surface": "status-dashboard",
+      "text": "Projects on the map, and how each one stands on it.",
+      "file": "modules/status-ui/public/explore.html",
+      "line": 105,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "48473324e839",
       "surface": "status-dashboard",
@@ -16017,6 +16026,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "abd2ce869517",
+      "surface": "status-dashboard",
+      "text": "Something is here. Its name, and everything else about it, stay with its owner.",
+      "file": "modules/status-ui/public/explore.js",
+      "line": 74,
+      "origin": "js-text-assign",
+      "confidence": "certain"
+    },
     {
       "id": "0cc023b5f470",
       "surface": "status-dashboard",

package/docs/module-api-changelog.md

@@ -1497,5 +1497,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.528 with no explicit bump. run 33877197857. (task 1002620)
   1.19.530 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.529 with no explicit bump. run 33878817005. (task 1002620)
+  1.19.531 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.530 with no explicit bump. run 33879403011. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/status-ui/public/explore.html

@@ -3,7 +3,7 @@
 <head>
   <meta charset="utf-8">
   <meta name="viewport" content="width=device-width, initial-scale=1">
-  <title>Explore — featured projects</title>
+  <title>Explore — projects on the map</title>
   <style>
     /* Self-contained so the showcase renders correctly whether or not the host
        injects theme tokens. Warm Cloud Bongos defaults; overridable by the pack. */
@@ -15,6 +15,10 @@
          salmon --accent is a fill and measures 2.1:1 as type on the card. */
       --bg: #edecee; --card: #fbfafc; --ink: #17181a; --ink-soft: #55565a;
       --rule: #c6c6c8; --accent: #fb9569; --accent-deep: #a3481a;
+      /* The black hole's own colour, and deliberately NOT a pack token: --ink
+         inverts between the schemes and would paint the void white in dark mode.
+         A hole is the one thing on this page that is the same colour in both. */
+      --orb-void: #0b0b10;
     }
     * { box-sizing: border-box; }
     body {
@@ -39,6 +43,55 @@
     .card .origin { color: var(--accent-deep); font-size: .82rem; word-break: break-all; margin-top: auto; }
     .card .art { width: 100%; height: 120px; object-fit: cover; border-radius: 10px; margin-bottom: .3rem; }
     .empty, .err { text-align: center; color: var(--ink-soft); padding: 3rem 1rem; }
+
+    /* THE THREE ORBS (BV1.R07, task 1002326; ADR 0182 D1) — how a project stands on
+       the map, DRAWN. The label beside each one is the plain word (Public / Private /
+       Stealth): the space words belong to the shape, not to the copy, which is the
+       goal's own interview decision. The orb is aria-hidden, so that plain word is
+       its accessible name. */
+    .state { display: flex; align-items: center; gap: .5rem; }
+    .state-label {
+      font-size: .74rem; letter-spacing: .09em; text-transform: uppercase;
+      color: var(--ink-soft);
+    }
+    .orb { width: 22px; height: 22px; border-radius: 50%; flex: 0 0 auto; position: relative; }
+    /* planet — identified and open: a lit sphere, ringed so you can pick it out */
+    .orb-planet {
+      background: radial-gradient(circle at 33% 30%, #ffffff 0 9%, var(--accent) 42%, var(--accent-deep) 100%);
+    }
+    .orb-planet::after {
+      content: ''; position: absolute; left: -26%; right: -26%; top: 40%; height: 24%;
+      border: 1.5px solid var(--accent-deep); border-radius: 50%;
+      transform: rotate(-20deg); opacity: .8;
+    }
+    /* star — identified but closed: visible from anywhere, with no surface to land on */
+    .orb-star {
+      background: radial-gradient(circle, #ffffff 0 15%, var(--accent) 38%, transparent 70%);
+    }
+    /* the rays taper rather than end, so the orb reads as a point of light and not
+       as a plus sign */
+    .orb-star::before, .orb-star::after {
+      content: ''; position: absolute; left: 50%; top: 50%; transform: translate(-50%, -50%);
+    }
+    .orb-star::before {
+      width: 2px; height: 155%;
+      background: linear-gradient(to bottom, transparent, var(--accent) 50%, transparent);
+    }
+    .orb-star::after {
+      width: 155%; height: 2px;
+      background: linear-gradient(to right, transparent, var(--accent) 50%, transparent);
+    }
+    /* black hole — existence without identity: you are shown the ring, never the object */
+    .orb-black-hole {
+      background: var(--orb-void);
+      box-shadow: 0 0 0 1.5px var(--accent), 0 0 10px 1px var(--accent);
+    }
+    /* an anonymous card has nothing to click and nothing to name, so it does not
+       pretend otherwise — no lift on hover, and its heading reads as the placeholder
+       it is rather than as a project's name */
+    .card.anon:hover { transform: none; box-shadow: none; }
+    .card.anon h2 { color: var(--ink-soft); font-weight: 600; }
+
     @media (prefers-color-scheme: dark) {
       :root { --bg: #000000; --card: #101012; --ink: #ffffff; --ink-soft: #c0c0c0; --rule: rgba(255,255,255,.16);
               --accent-deep: color-mix(in srgb, var(--accent) 45%, #ffffff); }
@@ -49,10 +102,10 @@
   <div class="wrap">
     <header>
       <h1>Explore</h1>
-      <p class="sub">Featured projects built on the platform.</p>
+      <p class="sub">Projects on the map, and how each one stands on it.</p>
     </header>
     <div id="grid" class="grid" hidden></div>
-    <div id="empty" class="empty" hidden>No featured projects yet — check back soon.</div>
+    <div id="empty" class="empty" hidden>No projects on the map yet — check back soon.</div>
     <div id="err" class="err" hidden>Couldn't load projects right now.</div>
   </div>
   <script src="/explore.js"></script>

package/modules/status-ui/public/explore.js

@@ -1,15 +1,39 @@
-// explore.js — the public Explore showcase (ADR 0141 §5, task #1002110). Fetches the
-// hub's featured projects and renders cards. On a NON-hub instance (platform-identity
-// off) the endpoint 404s / returns nothing, so the page shows a graceful empty state.
+// explore.js — the public Explore showcase (ADR 0141 §5, task #1002110), and since
+// BV1.R07 (task 1002326) the in-repo surface that DOGFOODS the visible-projects feed:
+// every project on the map, drawn as the state it stands in.
+//
+// Fetches the hub's public projects feed and renders one card each. On a NON-hub
+// instance (platform-identity off) the endpoint 404s / returns nothing, so the page
+// shows a graceful empty state.
+//
+// WHAT A CARD SAYS ABOUT VISIBILITY (ADR 0182 D1/D2a). Each feed row carries the
+// render type the server derived from the project's join door — planet, star or
+// black hole. This page draws that shape and labels it with the plain word
+// (Public / Private / Stealth), because the space words are the drawn orb's and
+// not the copy's. A black hole is ANONYMOUS: the feed already nulled everything
+// identifying server-side, and the branch that renders it here reads no
+// identifying field at all, so a server that regressed still could not put a name
+// on this page. Dark matter — a project that has not said what it is — is excluded
+// in SQL and never arrives; a row this page cannot classify is dropped rather than
+// guessed at, which is the same fail-closed rule one layer down.
 //
 // Project fields come from the network, so every value is set via textContent /
 // attribute assignment — never innerHTML — so a project name/tagline can't inject markup.
+//
+// Proof: ../../../tests/explore_visible_states.mjs
 (function () {
   'use strict';
   var grid = document.getElementById('grid');
   var empty = document.getElementById('empty');
   var err = document.getElementById('err');
 
+  // The map's render types → the plain word shown beside each one. Keyed on the
+  // feed's own `orb` field rather than re-derived from `state`: the state→orb
+  // mapping has exactly one home (modules/platform-identity/projects-feed.js) and a
+  // second copy here is a copy that drifts. An orb missing from this table is a row
+  // this page cannot honestly draw, so it draws nothing.
+  var ORB_LABEL = { planet: 'Public', star: 'Private', 'black-hole': 'Stealth' };
+
   function show(el) { if (el) el.hidden = false; }
 
   // Only http(s) origins are linkified — never javascript:/data: etc.
@@ -20,12 +44,50 @@
     } catch (_) { return null; }
   }
 
+  // The orb + its plain word. The shape is decorative (aria-hidden) — the label is
+  // what a screen reader gets, because a shape it cannot see is not a name.
+  function stateRow(orb) {
+    var row = document.createElement('div');
+    row.className = 'state';
+    var dot = document.createElement('span');
+    dot.className = 'orb orb-' + orb;
+    dot.setAttribute('aria-hidden', 'true');
+    row.appendChild(dot);
+    var label = document.createElement('span');
+    label.className = 'state-label';
+    label.textContent = ORB_LABEL[orb];
+    row.appendChild(label);
+    return row;
+  }
+
+  // A black hole publishes EXISTENCE and nothing else (ADR 0182 D2a). Deliberately
+  // takes no project argument: there is no identifying value in scope to leak by
+  // accident, now or when the feed grows a column.
+  function anonymousCard() {
+    var el = document.createElement('div');
+    el.className = 'card anon';
+    el.appendChild(stateRow('black-hole'));
+    var h = document.createElement('h2');
+    h.textContent = 'A project';
+    el.appendChild(h);
+    var p = document.createElement('p');
+    p.textContent = 'Something is here. Its name, and everything else about it, stay with its owner.';
+    el.appendChild(p);
+    return el;
+  }
+
+  // One feed row → one card, or null when the row is not drawable.
   function card(p) {
+    var orb = String((p && p.orb) || '');
+    if (!Object.prototype.hasOwnProperty.call(ORB_LABEL, orb)) return null;
+    if (orb === 'black-hole') return anonymousCard();
+
     var href = safeHref(p.origin);
     var el = document.createElement(href ? 'a' : 'div');
     el.className = 'card';
     if (href) { el.href = href; el.target = '_blank'; el.rel = 'noopener noreferrer'; }
 
+    el.appendChild(stateRow(orb));
     if (p.art_url && safeHref(p.art_url)) {
       var img = document.createElement('img');
       img.className = 'art';
@@ -55,8 +117,12 @@
     .then(function (r) { if (!r.ok) throw new Error('http ' + r.status); return r.json(); })
     .then(function (data) {
       var projects = (data && Array.isArray(data.projects)) ? data.projects : [];
-      if (projects.length === 0) { show(empty); return; }
-      projects.forEach(function (p) { grid.appendChild(card(p)); });
+      // Filtered BEFORE the count is read: a feed of rows none of which can be drawn
+      // is an empty map, and a visitor is owed the empty state rather than a grid
+      // with nothing in it.
+      var cards = projects.map(card).filter(Boolean);
+      if (cards.length === 0) { show(empty); return; }
+      cards.forEach(function (el) { grid.appendChild(el); });
       show(grid);
     })
     .catch(function () {

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.530",
+  "version": "1.19.531",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.530",
+      "version": "1.19.531",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.530",
+  "version": "1.19.531",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/src/module-api.js

@@ -45,7 +45,7 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.530'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.531'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/explore_visible_states.mjs

@@ -0,0 +1,285 @@
+// tests/explore_visible_states.mjs — the Explore page draws the three visible
+// states off the R06 feed (BV1.R07, task 1002326; goal 1000046, criterion
+// `proj-visibility-states`; ADR 0182 D1/D2a).
+//
+// WHY THIS FILE EXECUTES THE PAGE RATHER THAN GREPPING IT. explore.js builds every
+// card with createElement/appendChild — there is no markup in explore.html to pin.
+// A static test could only assert that the words "planet" and "black-hole" appear
+// somewhere in the source, which a page that renders nothing would also pass. So
+// this runs the REAL file in `vm` under a small DOM stub (the tests/idea_detail_page.mjs
+// precedent — there is no jsdom in this repo) and asserts over the tree a visitor
+// would actually get.
+//
+// The three things R07 owes, as assertions:
+//   1. each visible state draws ITS orb — planet / star / black hole — off the
+//      feed's own `orb` field, with the plain word (Public / Private / Stealth)
+//      as the label, because the space words are the drawn orb's, not the copy's;
+//   2. a stealth row is ANONYMOUS on the page: no name, no address, no picture,
+//      no link — and stays anonymous even if a regressed server sends identity,
+//      which is the client half of the feed's server-side allow-list (D2a);
+//   3. DARK MATTER NEVER DRAWS. It is excluded in SQL and must never reach here;
+//      if it ever does, a row this page cannot classify is dropped, not guessed at.
+//
+// Run:  node --test --test-reporter=tap tests/explore_visible_states.mjs
+
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import fs from 'node:fs';
+import path from 'node:path';
+import vm from 'node:vm';
+import { fileURLToPath } from 'node:url';
+
+// The state→orb mapping is the feed's, not this page's (projects-feed.js is the
+// only copy of it in the repo). Importing it here means a rename on the server
+// fails this file rather than silently leaving Explore drawing the old words.
+import { createRequire } from 'node:module';
+const require = createRequire(import.meta.url);
+const { ORB_BY_STATE, feedShapeFor } = require('../modules/platform-identity/projects-feed.js');
+
+const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
+const PAGE = path.join(ROOT, 'modules/status-ui/public');
+const SRC = fs.readFileSync(path.join(PAGE, 'explore.js'), 'utf8');
+const HTML = fs.readFileSync(path.join(PAGE, 'explore.html'), 'utf8');
+
+// ---- the DOM stub ---------------------------------------------------------
+// Only what explore.js touches: createElement, appendChild, textContent, className,
+// setAttribute and plain property assignment (href/src/alt/loading/target/rel).
+
+function makeElement(tag) {
+  return {
+    tagName: String(tag).toUpperCase(),
+    className: '',
+    textContent: '',
+    hidden: false,
+    children: [],
+    attrs: {},
+    appendChild(child) { this.children.push(child); return child; },
+    setAttribute(k, v) { this.attrs[k] = String(v); },
+    getAttribute(k) { return Object.prototype.hasOwnProperty.call(this.attrs, k) ? this.attrs[k] : null; },
+  };
+}
+
+// Every node in the subtree, root first.
+function nodes(el) {
+  return [el, ...el.children.flatMap(nodes)];
+}
+
+// Everything a visitor can READ on this subtree.
+function textOf(el) {
+  return nodes(el).map((n) => n.textContent || '').join(' ').replace(/\s+/g, ' ').trim();
+}
+
+// Everything a visitor's BROWSER can reach: text plus every attribute and every
+// URL-bearing property. This is what an anonymity assertion has to look at — a
+// name hidden in an href or an <img src> has still left the building.
+function reachable(el) {
+  return nodes(el)
+    .flatMap((n) => [n.textContent, n.className, n.href, n.src, n.alt, ...Object.values(n.attrs)])
+    .filter((v) => typeof v === 'string')
+    .join(' ');
+}
+
+const classed = (el, cls) => nodes(el).filter((n) => String(n.className).split(/\s+/).includes(cls));
+
+// Boot explore.js against the stub with `projects` as the feed's answer.
+function render(projects, { ok = true, body = null } = {}) {
+  const els = new Map(['grid', 'empty', 'err'].map(
+    (id) => [id, Object.assign(makeElement('div'), { id, hidden: true })]));
+
+  const documentObj = {
+    getElementById: (id) => els.get(id) || null,
+    createElement: (tag) => makeElement(tag),
+  };
+
+  const requests = [];
+  const sandbox = {
+    document: documentObj,
+    URL,
+    console,
+    setTimeout,
+    fetch(url, opts) {
+      requests.push({ url, opts });
+      return Promise.resolve({
+        ok,
+        status: ok ? 200 : 500,
+        json: () => Promise.resolve(body === null ? { projects } : body),
+      });
+    },
+  };
+  sandbox.globalThis = sandbox;
+  vm.createContext(sandbox);
+  vm.runInContext(SRC, sandbox, { filename: 'explore.js' });
+
+  return {
+    requests,
+    grid: () => els.get('grid'),
+    empty: () => els.get('empty'),
+    err: () => els.get('err'),
+    cards: () => els.get('grid').children,
+  };
+}
+
+// fetch → .then(json) → .then(render) is three microtask hops; a macrotask drains them all.
+const settle = () => new Promise((r) => setTimeout(r, 0));
+
+// ---- fixtures: rows exactly as GET /projects/featured shapes them ----------
+// Built through the REAL feedShapeFor(), so the stealth row is redacted by the
+// server's own allow-list rather than by this test's idea of it.
+
+const IDENTIFIED = {
+  origin: 'https://example-project.test',
+  name: 'Example Project',
+  tagline: 'A tagline that says what it is.',
+  art_url: 'https://example-project.test/art.png',
+  type: 'game',
+  template: null,
+  created_at: '2026-01-01T00:00:00Z',
+};
+
+const publicRow = feedShapeFor({ ...IDENTIFIED, visibility: 'public' });
+const privateRow = feedShapeFor({
+  ...IDENTIFIED, origin: 'https://closed-project.test', name: 'Closed Project', visibility: 'private',
+});
+const stealthRow = feedShapeFor({
+  ...IDENTIFIED, origin: 'https://hidden-project.test', name: 'Hidden Project', visibility: 'stealth',
+});
+
+// ---- 1. each visible state draws its orb ----------------------------------
+
+test('the feed mapping this page reads is still planet / star / black-hole', () => {
+  assert.deepEqual({ ...ORB_BY_STATE }, { public: 'planet', private: 'star', stealth: 'black-hole' });
+});
+
+test('each of the three visible states draws its own orb, with the plain word beside it', async () => {
+  const r = render([publicRow, privateRow, stealthRow]);
+  await settle();
+  assert.equal(r.cards().length, 3, 'all three visible states are on the map');
+  assert.equal(r.grid().hidden, false, 'the grid is shown');
+  assert.equal(r.empty().hidden, true, 'and the empty state is not');
+
+  const expected = [['orb-planet', 'Public'], ['orb-star', 'Private'], ['orb-black-hole', 'Stealth']];
+  r.cards().forEach((card, i) => {
+    const [orbClass, label] = expected[i];
+    assert.equal(classed(card, orbClass).length, 1, `card ${i} draws exactly one ${orbClass}`);
+    assert.ok(classed(card, 'state-label').some((n) => n.textContent === label),
+      `card ${i} is labelled "${label}"`);
+  });
+});
+
+test('the drawn orb is decorative — the plain word beside it is its accessible name', async () => {
+  const r = render([publicRow]);
+  await settle();
+  const [orb] = classed(r.cards()[0], 'orb');
+  assert.equal(orb.getAttribute('aria-hidden'), 'true',
+    'a screen reader hears "Public", never a shape it cannot see');
+  assert.equal(orb.textContent, '', 'the orb carries no text of its own');
+});
+
+test('no card writes the space words as copy — the metaphor is drawn, not said', async () => {
+  const r = render([publicRow, privateRow, stealthRow]);
+  await settle();
+  for (const card of r.cards()) {
+    assert.doesNotMatch(textOf(card), /\b(planet|star|black hole|black-hole)\b/i,
+      'the goal\'s interview decision: plain labels only — Public, Private, Stealth');
+  }
+});
+
+// ---- 2. a stealth row is anonymous ----------------------------------------
+
+test('a stealth card names nothing: no name, no address, no picture, no link', async () => {
+  const r = render([stealthRow]);
+  await settle();
+  const card = r.cards()[0];
+
+  assert.equal(card.tagName, 'DIV', 'an anonymous card is not a link — there is nowhere to send anyone');
+  assert.equal(nodes(card).filter((n) => n.tagName === 'IMG').length, 0, 'and carries no picture');
+  assert.equal(nodes(card).filter((n) => n.tagName === 'A').length, 0, 'and no link inside it either');
+  assert.equal(classed(card, 'origin').length, 0, 'and shows no address');
+
+  const seen = reachable(card);
+  for (const secret of ['Hidden Project', 'hidden-project.test', 'art.png', 'A tagline']) {
+    assert.ok(!seen.includes(secret), `"${secret}" never reaches the page`);
+  }
+  assert.ok(/something is here/i.test(textOf(card)),
+    'it says what a black hole says: something is there, and that is all');
+});
+
+test('a stealth row stays anonymous even if a regressed server sends identity', async () => {
+  // The feed nulls these server-side (ADR 0182 D2a). This is the client half of
+  // the same allow-list: the anonymous branch never READS an identifying field,
+  // so a server that started sending one again could not put it on the page.
+  const leaky = { ...stealthRow, name: 'Hidden Project', origin: 'https://hidden-project.test',
+    tagline: 'A tagline that says what it is.', art_url: 'https://hidden-project.test/art.png' };
+  const r = render([leaky]);
+  await settle();
+  const seen = reachable(r.cards()[0]);
+  for (const secret of ['Hidden Project', 'hidden-project.test', 'A tagline', 'art.png']) {
+    assert.ok(!seen.includes(secret), `"${secret}" is dropped by the page too`);
+  }
+  assert.equal(classed(r.cards()[0], 'orb-black-hole').length, 1, 'it is still a black hole');
+});
+
+test('an identified card still shows its name, tagline, picture and address', async () => {
+  const r = render([publicRow]);
+  await settle();
+  const card = r.cards()[0];
+  assert.equal(card.tagName, 'A', 'a planet is somewhere you can go');
+  assert.equal(card.href, 'https://example-project.test/');
+  assert.ok(textOf(card).includes('Example Project'));
+  assert.ok(textOf(card).includes('A tagline that says what it is.'));
+  assert.equal(nodes(card).filter((n) => n.tagName === 'IMG')[0].src, 'https://example-project.test/art.png');
+  assert.ok(classed(card, 'origin')[0].textContent.includes('example-project.test'));
+});
+
+// ---- 3. dark matter never draws -------------------------------------------
+
+test('a row this page cannot classify is not drawn', async () => {
+  // Dark matter is excluded in SQL and has no orb to draw; the same drop covers a
+  // fourth state added later and not taught to this page. Fail-closed: a card is
+  // never guessed at from a row the feed did not classify.
+  const unclassifiable = [
+    { ...publicRow, state: 'dark-matter', orb: null },
+    { ...publicRow, orb: 'quasar' },
+    { ...publicRow, orb: undefined },
+  ];
+  const r = render([...unclassifiable, publicRow]);
+  await settle();
+  assert.equal(r.cards().length, 1, 'only the one row with a known orb is drawn');
+  assert.equal(classed(r.cards()[0], 'orb-planet').length, 1);
+});
+
+test('a feed of nothing drawable shows the empty state, not an empty grid', async () => {
+  const r = render([{ ...publicRow, state: 'dark-matter', orb: null }]);
+  await settle();
+  assert.equal(r.empty().hidden, false, 'the visitor is told the map is empty');
+  assert.equal(r.grid().hidden, true, 'rather than shown a grid with nothing in it');
+});
+
+test('an empty feed and a failed fetch both land on the empty state', async () => {
+  const none = render([]);
+  await settle();
+  assert.equal(none.empty().hidden, false);
+
+  const down = render([], { ok: false });
+  await settle();
+  assert.equal(down.empty().hidden, false, 'a non-hub instance 404s here — not an error to a visitor');
+});
+
+// ---- the page it draws into ------------------------------------------------
+
+test('explore.html paints all three orbs and defines the void colour', () => {
+  for (const cls of ['.orb-planet', '.orb-star', '.orb-black-hole']) {
+    assert.ok(HTML.includes(`${cls} {`) || HTML.includes(`${cls},`) || HTML.includes(`${cls}:`),
+      `${cls} has a rule — a class name with no paint draws nothing`);
+  }
+  assert.match(HTML, /--orb-void:\s*#[0-9a-fA-F]{6}/,
+    'the hole has its own colour, in both schemes — the ink token inverts and would paint it white in dark mode');
+});
+
+test('the page reads the public feed and asks for JSON', async () => {
+  const r = render([]);
+  await settle();
+  assert.equal(r.requests.length, 1);
+  assert.equal(r.requests[0].url, '/api/gds/projects/featured');
+  assert.equal(r.requests[0].opts.headers.Accept, 'application/json');
+});