@bongos/core 1.19.583 → 1.19.585

package/docs/copy-registry.json

@@ -3,9 +3,9 @@
   "generator": "scripts/gds/copy-inventory.js",
   "goal": 1000074,
   "counts": {
-    "strings": 1709,
-    "unique_ids": 1478,
-    "certain": 1709,
+    "strings": 1710,
+    "unique_ids": 1479,
+    "certain": 1710,
     "heuristic": 0,
     "duplicate_ids": 162
   },
@@ -23,7 +23,7 @@
     "landing": {
       "at": "modules/public-landing/public",
       "files": 5,
-      "strings": 372
+      "strings": 373
     }
   },
   "blind_spots": [
@@ -92,9 +92,9 @@
         "modules/public-landing/public/projects.html:1018",
         "modules/public-landing/public/projects.html:1049",
         "modules/public-landing/public/projects.html:1088",
-        "modules/public-landing/public/projects.html:1160",
-        "modules/public-landing/public/projects.html:1200",
-        "modules/public-landing/public/projects.html:1213"
+        "modules/public-landing/public/projects.html:1167",
+        "modules/public-landing/public/projects.html:1207",
+        "modules/public-landing/public/projects.html:1220"
       ]
     },
     {
@@ -106,7 +106,7 @@
         "modules/public-landing/public/contact.html:71",
         "modules/public-landing/public/index.html:900",
         "modules/public-landing/public/privacy.html:80",
-        "modules/public-landing/public/projects.html:1338",
+        "modules/public-landing/public/projects.html:1345",
         "modules/public-landing/public/terms.html:84"
       ]
     },
@@ -119,8 +119,8 @@
         "modules/public-landing/public/projects.html:1019",
         "modules/public-landing/public/projects.html:1052",
         "modules/public-landing/public/projects.html:1091",
-        "modules/public-landing/public/projects.html:1161",
-        "modules/public-landing/public/projects.html:1201"
+        "modules/public-landing/public/projects.html:1168",
+        "modules/public-landing/public/projects.html:1208"
       ]
     },
     {
@@ -132,7 +132,7 @@
         "modules/public-landing/public/contact.html:71",
         "modules/public-landing/public/index.html:900",
         "modules/public-landing/public/privacy.html:80",
-        "modules/public-landing/public/projects.html:1338",
+        "modules/public-landing/public/projects.html:1345",
         "modules/public-landing/public/terms.html:84"
       ]
     },
@@ -183,7 +183,7 @@
         "modules/public-landing/public/index.html:906",
         "modules/public-landing/public/projects.html:550",
         "modules/public-landing/public/projects.html:550",
-        "modules/public-landing/public/projects.html:1338"
+        "modules/public-landing/public/projects.html:1345"
       ]
     },
     {
@@ -218,8 +218,8 @@
       "at": [
         "modules/public-landing/public/projects.html:864",
         "modules/public-landing/public/projects.html:865",
-        "modules/public-landing/public/projects.html:1240",
-        "modules/public-landing/public/projects.html:1241"
+        "modules/public-landing/public/projects.html:1247",
+        "modules/public-landing/public/projects.html:1248"
       ]
     },
     {
@@ -13011,7 +13011,7 @@
       "surface": "landing",
       "text": "A non-profit, capture-resistant commons.",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1338,
+      "line": 1345,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -13029,7 +13029,7 @@
       "surface": "landing",
       "text": "A pair of bongo drums",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1267,
+      "line": 1274,
       "origin": "html-attr:aria-label",
       "confidence": "certain"
     },
@@ -13218,7 +13218,7 @@
       "surface": "landing",
       "text": "Builders' hall",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1338,
+      "line": 1345,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -13245,7 +13245,7 @@
       "surface": "landing",
       "text": "Built by agents, on",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1338,
+      "line": 1345,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -13425,7 +13425,7 @@
       "surface": "landing",
       "text": "Create my project",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1214,
+      "line": 1221,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -13461,7 +13461,7 @@
       "surface": "landing",
       "text": "Domain you own",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1189,
+      "line": 1196,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -13722,7 +13722,7 @@
       "surface": "landing",
       "text": "GitHub username",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1240,
+      "line": 1247,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -13731,7 +13731,7 @@
       "surface": "landing",
       "text": "GitHub username",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1241,
+      "line": 1248,
       "origin": "html-attr:placeholder",
       "confidence": "certain"
     },
@@ -13812,7 +13812,7 @@
       "surface": "landing",
       "text": "Invite builders",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1237,
+      "line": 1244,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -13848,7 +13848,7 @@
       "surface": "landing",
       "text": "Its address in the sky",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1176,
+      "line": 1183,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -14019,7 +14019,7 @@
       "surface": "landing",
       "text": "Next →",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1161,
+      "line": 1168,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -14028,7 +14028,7 @@
       "surface": "landing",
       "text": "Next →",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1201,
+      "line": 1208,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -14109,7 +14109,7 @@
       "surface": "landing",
       "text": "One tap files the request and the platform starts standing your project up — server, database, address. Here's the beat you're about to drop:",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1209,
+      "line": 1216,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -14163,7 +14163,7 @@
       "surface": "landing",
       "text": "Open source (AGPL-3.0)",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1338,
+      "line": 1345,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -14199,7 +14199,7 @@
       "surface": "landing",
       "text": "Optional — invite people by GitHub username. Each one gets an invitation to accept from their own projects page, and they need to have signed in here at least once. Skip this and invite anyone later; nothing about your project waits on it.",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1238,
+      "line": 1245,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -14280,7 +14280,7 @@
       "surface": "landing",
       "text": "Project handle",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1179,
+      "line": 1186,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -14316,7 +14316,7 @@
       "surface": "landing",
       "text": "Projects aren’t created from this instance — this is a project, not the platform that hosts them.",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1330,
+      "line": 1337,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -14469,7 +14469,7 @@
       "surface": "landing",
       "text": "Ready to roll",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1208,
+      "line": 1215,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -14775,7 +14775,7 @@
       "surface": "landing",
       "text": "Start without an address — possible, but sign-in on your project can’t be set up until it has one.",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1196,
+      "line": 1203,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -14883,7 +14883,7 @@
       "surface": "landing",
       "text": "The drums are rolling",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1223,
+      "line": 1230,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -14901,7 +14901,7 @@
       "surface": "landing",
       "text": "The handle names your project on the platform — and its address comes with it. Once it stands up, a few GitHub steps (the next screen walks you through them) switch sign-in on.",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1177,
+      "line": 1184,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -14991,7 +14991,7 @@
       "surface": "landing",
       "text": "These are the same steps however a project is created — nothing here is special to this page.",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1258,
+      "line": 1265,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -15018,7 +15018,7 @@
       "surface": "landing",
       "text": "This files the request; the control plane does the real standup and nothing touches servers from this page. You'll get the few steps only you can do right after.",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1216,
+      "line": 1223,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -15108,7 +15108,16 @@
       "surface": "landing",
       "text": "Use a domain I own instead",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1187,
+      "line": 1194,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
+    {
+      "id": "9be878db0d86",
+      "surface": "landing",
+      "text": "Use my GitHub repositories instead",
+      "file": "modules/public-landing/public/projects.html",
+      "line": 1163,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -15504,7 +15513,7 @@
       "surface": "landing",
       "text": "Your steps — the parts only you can play",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1253,
+      "line": 1260,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -15522,7 +15531,7 @@
       "surface": "landing",
       "text": "Yours from the moment it stands up. You can point a domain you own at it any time.",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1185,
+      "line": 1192,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -16179,7 +16188,7 @@
       "surface": "landing",
       "text": "← Back",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1160,
+      "line": 1167,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -16188,7 +16197,7 @@
       "surface": "landing",
       "text": "← Back",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1200,
+      "line": 1207,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -16197,7 +16206,7 @@
       "surface": "landing",
       "text": "← Back",
       "file": "modules/public-landing/public/projects.html",
-      "line": 1213,
+      "line": 1220,
       "origin": "html-text",
       "confidence": "certain"
     },

package/docs/module-api-changelog.md

@@ -1615,5 +1615,9 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.581 with no explicit bump. run 34160253741. (task 1002620)
   1.19.583 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.582 with no explicit bump. run 34162998083. (task 1002620)
+  1.19.584 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.583 with no explicit bump. run 34164936809. (task 1002620)
+  1.19.585 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.584 with no explicit bump. run 34165392436. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/public-landing/public/assets/cosmos.css

@@ -50,6 +50,10 @@
 
   /* the gate's locked space palette (dark mode's sky) */
   --space-deep:#05060f; --space-mid:#0a0c20; --space-high:#0d0f28; --nebula:#2b2456;
+  /* the black hole's interior (task 1002328) — the one colour that is NOT
+     theme-relative: a black hole is the absence of a surface in either sky, so it
+     is declared once here and never restated dark. Explore's own --orb-void. */
+  --orb-void:#0b0b10;
   --sun-lit:#fb923c; --gold:#ffd98a; --gold-soft:#f6c976;
 
   /* semantic state tier — each is painted as 12px/700 chip TEXT on its own
@@ -822,6 +826,60 @@ p.sec-p{font-size:var(--fs-lede);font-weight:500;color:var(--ink-soft);line-heig
 .worldOrb[data-material="obsidian"][data-shape="blob"]{--tpl-src:var(--plate-obsidian-blob-cut);--tpl-ar:.794;--tpl-zoom:1.55448;--tpl-px:-.2697;--tpl-py:-.15965;}
 .worldOrb[data-material="obsidian"][data-shape="pair"]{--tpl-src:var(--plate-obsidian-pair-cut);--tpl-ar:2.23705;--tpl-zoom:1.0248;--tpl-px:-.01015;--tpl-py:-.30191;}
 .worldOrb[data-material="obsidian"][data-shape="bead"]{--tpl-src:var(--plate-obsidian-bead-cut);--tpl-ar:1.0027;--tpl-zoom:1.34698;--tpl-px:-.17053;--tpl-py:-.17255;}
+/* ── THE VISIBILITY RENDER-TYPE (data-orb), a SECOND axis over the planet above
+   (BV1.R09, task 1002328; ADR 0182 D1, criterion proj-visibility-states). The
+   planet is what a project LOOKS like — the owner's chosen shape and material.
+   This is what its door SAYS, derived server-side and read off the feed. The
+   three readings are the Explore page's (task 1002326, modules/status-ui/public/
+   explore.html), so the two in-repo surfaces that draw this feed agree.
+
+   PUBLIC is the baseline and takes no rule: the planet as drawn is the public
+   planet. Only the two states that differ from it declare anything here. ── */
+
+/* PRIVATE — a star: visible from anywhere, with no surface to land on. The object
+   keeps its own artwork and its own name (D1: private is on the map UNDER its
+   name; what it withholds is the door, not the identity) and gains a star's light.
+   A drop-shadow on the disc's own filter, the .worldOrb.match idiom below: the
+   object is a MASK, so an outline or a box-shadow would be clipped away. Composed
+   after the contact shadow, which dark states as a no-op filter for this reason.
+
+   Carried as a VARIABLE rather than written into the filter directly, because the
+   search spotlight below sets `filter` on the same element and is later in the
+   cascade: written inline it would be clobbered, and a private project would
+   quietly draw as a planet for as long as a query matched it. */
+.worldOrb[data-orb="star"]{
+  --star-light:drop-shadow(0 0 7px color-mix(in srgb,var(--acc,var(--accent)) 75%,transparent))
+    drop-shadow(0 0 20px color-mix(in srgb,var(--acc,var(--accent)) 40%,transparent));}
+.worldOrb[data-orb="star"] .disc{filter:var(--orb-shadow) var(--star-light);}
+/* the corona sits BEHIND the object (the relationship ring's grammar, z-index:-1),
+   so the star reads as a point of light the object is standing in */
+.worldOrb[data-orb="star"] .disc::after{content:"";position:absolute;
+  left:50%;top:50%;width:calc(100% + 34px);aspect-ratio:1;translate:-50% -50%;border-radius:50%;z-index:-1;
+  background:radial-gradient(circle,color-mix(in srgb,var(--acc,var(--accent)) 26%,transparent) 0 34%,transparent 70%);}
+/* the ring wins the ::after when the viewer owns or builds on the project — the
+   relationship is the more useful thing to say, and the glow above still reads */
+.worldOrb[data-orb="star"][data-rel="owner"] .disc::after,
+.worldOrb[data-orb="star"][data-rel="builder"] .disc::after{background:none;}
+
+/* STEALTH — a black hole: existence without identity. The object is REPLACED, not
+   decorated: ::before is where the planet plate is painted, so switching it off is
+   what makes this the one orb on the map carrying no artwork. Nothing here reads a
+   per-project value — every black hole is drawn identically, on the page's own
+   accent, because interchangeable is the whole point of the metaphor (D2a). With
+   the mask gone a box-shadow is no longer clipped, so the ring is a real ring. */
+.worldOrb[data-orb="black-hole"]{cursor:default;}
+.worldOrb[data-orb="black-hole"] .disc{border-radius:50%;background:var(--orb-void);
+  box-shadow:0 0 0 1.5px var(--accent),0 0 14px 2px color-mix(in srgb,var(--accent) 55%,transparent);}
+.worldOrb[data-orb="black-hole"] .disc::before{display:none;}
+/* it does not rise to meet the pointer: there is nothing behind it to open */
+.worldOrb[data-orb="black-hole"]:hover .disc{translate:none;}
+/* the placeholder name is not a project's name, and does not dress as one */
+.worldOrb[data-orb="black-hole"] .nm{color:var(--ink-soft);font-style:italic;}
+/* the table's anonymous row: same rule, and no pointer, since the row's click
+   target (its address) is exactly what the row does not have */
+.tbl .tblRow.anon{cursor:default;}
+.tbl .tblRow.anon .ptitle{color:var(--ink-soft);font-style:italic;}
+
 /* the relationship ring: yours takes the accent (the one live thing about the
    orb); building there is a hairline of it */
 .worldOrb[data-rel="owner"] .disc::after,.worldOrb[data-rel="builder"] .disc::after{content:"";position:absolute;
@@ -986,8 +1044,12 @@ p.sec-p{font-size:var(--fs-lede);font-weight:500;color:var(--ink-soft);line-heig
 /* the spotlight is a drop-shadow in the accent on the disc's own filter — a
    glow that follows the silhouette (the object is a mask, so an outline or a
    box-shadow would be clipped away). Composed after the contact shadow, which
-   dark states as a no-op filter for exactly this. */
-.worldOrb.match .disc{filter:var(--orb-shadow) drop-shadow(0 0 16px color-mix(in srgb,var(--acc,var(--accent)) 60%,transparent));}
+   dark states as a no-op filter for exactly this.
+
+   A star composes its own light in after the spotlight (--star-light, set above;
+   the empty fallback makes this a no-op for every other orb), so a private project
+   the query matched does not stop looking private for as long as it matches. */
+.worldOrb.match .disc{filter:var(--orb-shadow) drop-shadow(0 0 16px color-mix(in srgb,var(--acc,var(--accent)) 60%,transparent)) var(--star-light,);}
 .field .hoverCard{position:absolute;z-index:6;pointer-events:none;display:flex;flex-direction:column;gap:2px;
   background:var(--bg-card);border:1px solid var(--rule);border-radius:var(--radius-sm);
   padding:9px 13px;max-width:240px;}

package/modules/public-landing/public/projects.html

@@ -1154,6 +1154,13 @@ summary{min-height:24px;padding:3px 0;}
                 <!-- visibility stated BEFORE GitHub's own radio is the first place it
                      appears (task 1002721, owner firsthand in the QA walk) -->
                 <div class="hint" style="grid-column:1 / -1;">Creating the repo yourself on GitHub? Public or private is your choice there — both work here, and we never change it.</div>
+                <!-- the way back from the manual fallback (task 1003683). Choosing "or enter
+                     it manually" used to hide the connect offer for good: #ghConnect renders
+                     only while repoAccess is 'need-connect', and nothing ever set it back, so
+                     a full reload was the only route to the button. Stays hidden when the
+                     fallback was FORCED (repoAccess 'unavailable'), where connecting cannot
+                     help and the offer would be a lie. -->
+                <button type="button" class="linklike" id="ghManualBack" style="grid-column:1 / -1;" hidden>Use my GitHub repositories instead</button>
               </div>
               <div class="hint" id="h-home">&nbsp;</div>
               <div class="nav">
@@ -1546,6 +1553,39 @@ summary{min-height:24px;padding:3px 0;}
   ORB_SHAPES.forEach(function (s) { ['tint', 'wash', 'chrome'].forEach(function (y) { ORB_TEMPLATES.push(s + '-' + y); }); });
   ORB_SHAPES.forEach(function (s) { ORB_MATERIALS.forEach(function (m) { ['tint', 'wash', 'plain'].forEach(function (y) { ORB_TEMPLATES.push(s + '-' + m + '-' + y); }); }); });
   var ORB_WALK = ['blob-tint', 'pair-gold-wash', 'bead-obsidian-plain', 'blob-frost-wash', 'pair-chrome', 'bead-gold-tint', 'blob-obsidian-wash', 'pair-frost-tint', 'bead-wash', 'blob-gold-plain', 'pair-obsidian-tint', 'bead-frost-wash'];
+  /* THE VISIBILITY RENDER-TYPE — a SECOND axis, and not the planet above (BV1.R09,
+     task 1002328; ADR 0182 D1, criterion proj-visibility-states). The planet is
+     what a project LOOKS like — the owner's chosen shape and material. This is what
+     its door SAYS: public draws a planet, private a star, stealth a black hole.
+     Dark matter never arrives; the feed excludes it in SQL, because a client-side
+     filter ships the husk to anyone who opens a network tab.
+
+     THE VALUE IS READ, NEVER DERIVED. `orb` is computed server-side in
+     modules/platform-identity/projects-feed.js, which holds the only copy of the
+     state→orb mapping in the repo; this page reads that field and does not own a
+     `state` table of its own. The three words below are LABELS for the states, not
+     a second mapping — and they are explore.js's words (R07, task 1002326), so the
+     two in-repo surfaces say the same thing. */
+  var ORB_STATE = { planet: 'Public', star: 'Private', 'black-hole': 'Stealth' };
+  /* FAIL-CLOSED, the choice projects-feed.js makes for the same question: a row
+     whose render-type this page does not recognise is NOT DRAWN. The risk is a
+     fourth state shipped by a newer server and read by an older page — drawing it
+     as the default would publish, as a public planet, a project that chose not to
+     be one. Applied to CATALOG rows only: the viewer's own provisioning rows never
+     came from the feed and carry no `orb`. */
+  function drawableCatalogRow(p) {
+    return Object.prototype.hasOwnProperty.call(ORB_STATE, String((p && p.orb) || ''));
+  }
+  /* Is this row anonymous on the map? The one predicate the sky and the table both
+     ask, so neither can answer it differently (ADR 0182 D2a). */
+  function isBlackHole(p) { return String((p && p.orb) || '') === 'black-hole'; }
+  /* What a black hole is allowed to say. Deliberately takes no project argument:
+     there is no identifying value in scope to leak by accident, now or when the
+     feed grows a column. explore.js's anonymousCard() makes the same choice. */
+  function anonymousName() { return 'A project'; }
+  function anonymousBlurb() {
+    return 'Something is here. Its name, and everything else about it, stay with its owner.';
+  }
   var catalog = [];
   var mineOrigins = {};   /* normalized host → 'owner' | 'builder' */
   var ownedInstances = []; /* the viewer's OWN provisioning rows (never torn_down) */
@@ -1689,6 +1729,27 @@ summary{min-height:24px;padding:3px 0;}
     (spot ? list.concat(dimmed) : list).forEach(function (p, i) {
       var slot = ORB_SLOTS[i % ORB_SLOTS.length];
       var isDim = spot && i >= list.length;
+      /* A BLACK HOLE IS DRAWN FROM NOTHING BUT ITS EXISTENCE (ADR 0182 D2a).
+         A <span>, not an <a>: there is nowhere to go. No name, no address, no
+         badge, no liveness chip — and no planet artwork, because the shape /
+         material walk is an identity THIS PAGE assigns, and an identity assigned
+         to rows that are supposed to be interchangeable is exactly what lets an
+         observer follow one of them from yesterday's feed into today's. The
+         server redacted the row; this is the page declining to re-identify it. */
+      if (isBlackHole(p)) {
+        var bh = document.createElement('span');
+        bh.className = 'worldOrb blackHole' + (spot ? (isDim ? ' dim' : ' match') : '');
+        bh.setAttribute('data-generated', '');
+        bh.setAttribute('data-orb', 'black-hole');
+        if (isDim) bh.setAttribute('aria-hidden', 'true');
+        /* no --acc: the accent is per-project identity too, so a black hole takes
+           the page's own and is the same colour as every other black hole */
+        bh.style.cssText = '--d:' + slot[2] + 'px;left:' + slot[0] + '%;top:' + slot[1] + '%';
+        bh.title = anonymousBlurb();
+        bh.innerHTML = '<span class="disc"></span><span class="nm">' + esc(anonymousName()) + '</span>';
+        layer.appendChild(bh);
+        return;
+      }
       var a = document.createElement('a');
       a.className = 'worldOrb' + (spot ? (isDim ? ' dim' : ' match') : '');
       /* a dimmed orb is BACKDROP: at .25 opacity its label cannot carry
@@ -1698,6 +1759,12 @@ summary{min-height:24px;padding:3px 0;}
       a.setAttribute('data-generated', '');
       var rel = relOf(p);
       a.setAttribute('data-rel', rel);
+      /* the door the project chose, as the feed derived it. An IDENTIFIED state —
+         public or private — is on the map under its own name; what the state
+         changes is how it is drawn and who may walk in, never whether it is named.
+         An owned-only entry never came from the feed, so it claims no state. */
+      var orbState = drawableCatalogRow(p) ? String(p.orb) : '';
+      if (orbState) a.setAttribute('data-orb', orbState);
       /* the planet: shape, material and style as data attributes (shape[-material]-style;
          no material = chrome), cosmos.css does the rest */
       var tpl = templateOf(p), tplParts = tpl.split('-');
@@ -1724,7 +1791,10 @@ summary{min-height:24px;padding:3px 0;}
         if (href) { a.target = '_blank'; a.rel = 'noopener'; }
       }
       a.setAttribute('data-origin', String(p.origin || ''));
-      a.title = p.tagline || p.name || '';
+      /* the state in words as well as in the drawing — a visitor should not have
+         to have learned the shapes to tell a planet from a star (the explore
+         page's rule: the orb is decorative, the plain word carries the meaning) */
+      a.title = [p.tagline || p.name || '', ORB_STATE[orbState] || ''].filter(Boolean).join(' · ');
       a.style.cssText = '--acc:' + accentOf(p) +
         ';--d:' + slot[2] + 'px;left:' + slot[0] + '%;top:' + slot[1] + '%';
       a.innerHTML =
@@ -1765,7 +1835,21 @@ summary{min-height:24px;padding:3px 0;}
        not a peer in the catalog's sort order. */
     body.querySelectorAll('li[data-generated]').forEach(function (n) { n.remove(); });
     body.insertAdjacentHTML('beforeend', list.map(function (p) {
+      /* The table is a PEER VIEW of the map, not a back door around D2a: a black
+         hole says exactly as little here as it does in the sky. No name, no
+         address, no facts, no doors — and no liveness chip, because a chip is a
+         claim about a specific project. The row exists so the count is honest;
+         that is the whole of what it publishes. */
+      if (isBlackHole(p)) {
+        return '<li class="tblRow anon" data-generated data-orb="black-hole">' +
+          '<span class="worldOrb blackHole" data-orb="black-hole" style="--d:64px" aria-hidden="true">' +
+          '<span class="disc"></span></span>' +
+          '<div class="tWho"><span class="ptitle">' + esc(anonymousName()) + '</span></div>' +
+          '<p class="ptag">' + esc(anonymousBlurb()) + '</p>' +
+          '</li>';
+      }
       var rel = relOf(p);
+      var orbState = drawableCatalogRow(p) ? String(p.orb) : '';
       var pill = rel === 'owner' ? '<span class="pill">yours</span>'
         : rel === 'builder' ? '<span class="pill">you build here</span>' : '';
       /* the project's own planet, the object the sky and the Your-projects row
@@ -1775,6 +1859,7 @@ summary{min-height:24px;padding:3px 0;}
       var planet = '<span class="worldOrb"' + planetAttrs({ tpl: templateOf(p) }) +
         ' style="--acc:' + accentOf(p) + ';--d:64px" aria-hidden="true"><span class="disc"></span></span>';
       return '<li class="tblRow" data-generated ' + (p._inst ? 'data-manage="' + esc(String(p._inst.id)) + '" ' : '') +
+        (orbState ? 'data-orb="' + esc(orbState) + '" ' : '') +
         'data-origin="' + esc(String(p.origin || '')) + '">' + planet +
         '<div class="tWho">' + (p._inst
             ? '<a class="ptitle" data-manage="' + esc(String(p._inst.id)) + '" href="?view=manage&id=' + esc(String(p._inst.id)) + '">' + esc(p.name) + '</a>'
@@ -1810,7 +1895,13 @@ summary{min-height:24px;padding:3px 0;}
        entries. The sky, the table, the search box and the count read the same
        list and can never disagree about what exists. */
     var catalogHosts = {};
-    catalog.forEach(function (p) {
+    /* FAIL-CLOSED FIRST, before anything else reads these rows (task 1002328): a
+       render-type this page does not recognise is not drawn, not counted, and —
+       the reason it is filtered HERE rather than inside the renderers — not allowed
+       to claim a host either, or it would suppress the viewer's own entry for that
+       same project in the loop below. */
+    var drawnCatalog = catalog.filter(drawableCatalogRow);
+    drawnCatalog.forEach(function (p) {
       var h = hostOf(p.origin);
       catalogHosts[h] = 1;
       p._inst = ownedByHost[h] || null;
@@ -1818,7 +1909,7 @@ summary{min-height:24px;padding:3px 0;}
          create — their own instance row is a truthful source, never a guess */
       if (p.type == null && p._inst && p._inst.type) p.type = p._inst.type;
     });
-    var browse = catalog.slice();
+    var browse = drawnCatalog.slice();
     ownedInstances.forEach(function (inst) {
       var h = inst.domain ? hostOf(inst.domain) : '';
       if (h && catalogHosts[h]) return;   /* annotated onto its catalog row above */
@@ -3498,6 +3589,7 @@ summary{min-height:24px;padding:3px 0;}
     }
     $('ghConnectBtn').addEventListener('click', connectRepos);
     $('ghManualToggle').addEventListener('click', function () { repoAccess = 'manual'; syncHome(); $('f-owner').focus(); });
+    $('ghManualBack').addEventListener('click', function () { repoAccess = 'need-connect'; syncHome(); $('ghConnectBtn').focus(); });
 
     function syncHome() {
       var need = repoAccess === 'need-connect';
@@ -3508,6 +3600,9 @@ summary{min-height:24px;padding:3px 0;}
       $('ghAdopt').hidden = !(ok && adopt);
       $('ghFresh').hidden = !(ok && !adopt);
       $('manualHome').hidden = !isManualHome();
+      /* only when the visitor CHOSE manual: with 'unavailable' the server cannot hold a
+         token, so a connect round-trip would land back here having changed nothing */
+      $('ghManualBack').hidden = repoAccess !== 'manual';
       if (need) {
         /* Informed consent (ADR 0155): this grants `repo`, which GitHub's own screen
            words as full control of ALL your repositories — so say plainly why we ask
@@ -4568,7 +4663,14 @@ summary{min-height:24px;padding:3px 0;}
          re-enters to the real draft step the moment /me answers */
       var step = authKnown && state.step >= 1 && state.step <= 7 ? state.step : 1;
       if (step === 1) {
+        /* Pre-auth, step 1 is a PLACEHOLDER, not where the visitor is — but show()
+           persists whatever step it renders, so it used to overwrite the draft's real
+           position with 1 and leave onAuth() nothing to re-enter to (task 1003683). Every
+           return through GitHub landed the visitor back at the name step. Put the real
+           step back after rendering the placeholder, in memory AND in the draft. */
+        var resumeStep = state.step;
         show(1, false);
+        if (!authKnown && resumeStep >= 1 && resumeStep <= 7) { state.step = resumeStep; saveDraft(); }
         if (focus) $('newName').focus();
       } else {
         show(step, !!focus);

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.583",
+  "version": "1.19.585",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.583",
+      "version": "1.19.585",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",