@bongos/core 1.21.57 → 1.21.58

package/modules/public-landing/public/guild.html

@@ -13,7 +13,9 @@
        GET /guilds/:slug/members   the OWN-SCOPE read, signed in only: a member's
                                    door to their guild, unlisted ones included,
                                    with their own two switches;
-     and writes one: PATCH /guilds/:slug/membership (those two switches). A
+     and writes two: PATCH /guilds/:slug/membership (those two switches) and, for
+     the guild's owner only, POST /guilds/:slug/engagements (the guild applying to
+     a project, task 1002303, R27; ADR 0365 D2). A
      stranger, an unknown slug and an unlisted guild seen from outside are one
      "no guild here", so the page never confirms an unlisted guild exists.
      Hub-only, like /account: platform-server.js serves /g/<slug> only where
@@ -75,6 +77,12 @@
 .gAsk{display:grid;gap:14px;padding:18px 0 20px;border-top:1px solid var(--rule);border-bottom:1px solid var(--rule);}
 .gAsk p{margin:0;font-size:14.5px;line-height:1.55;color:var(--ink-soft);max-width:62ch;}
 .gAsk p b{display:block;margin-bottom:4px;font-family:var(--font-body);font-weight:500;font-size:17px;color:var(--ink);}
+/* the owner's one field (apply to a project): the account page's .aField, a bare
+   input closed by one hairline that takes ink on focus */
+.aField{display:grid;gap:4px;min-width:0;max-width:52ch;}
+.aField input{width:100%;box-sizing:border-box;min-height:44px;font-family:var(--font-body);font-size:15.5px;font-weight:400;line-height:1.5;color:var(--ink);background:none;border:0;border-bottom:1px solid var(--ctl-line);border-radius:0;padding:8px 0;}
+.aField input::placeholder{color:var(--ink-faint);}
+.aField input:focus{outline:none;border-bottom-color:var(--ink);box-shadow:0 1px 0 var(--ink);}
 /* the record: four band floors as figures, two by two so a long band ("200,000+")
    keeps its cell, a hairline above each (the ledger grammar) */
 .gFigs{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:4px 28px;margin:0;}
@@ -215,6 +223,22 @@
       </form>
     </section>
 
+    <!-- APPLY TO A PROJECT — the guild's owner only (task 1002303, R27; ADR 0365
+         D2): POST /guilds/:slug/engagements { origin }. It applies for nobody —
+         each member sees it in their invitations on the projects page and applies
+         as themselves, the owner too. A project that is unknown, not on the map or
+         not public gets one answer, so the page never says which. -->
+    <section class="aSec" id="gApply" hidden aria-labelledby="gApply-h">
+      <h2 id="gApply-h">apply to a project</h2>
+      <p class="aSide">Put this guild forward for a project. It applies for nobody: each member sees it in their invitations and applies as themselves, you included.</p>
+      <form class="aBody" id="applyForm" novalidate>
+        <label class="aField"><span class="aLabel">Project address</span>
+          <input type="url" id="applyOrigin" inputmode="url" autocomplete="off" spellcheck="false" placeholder="https://project.example.com"></label>
+        <div class="actions"><button type="submit" class="btn" id="applySend">apply as this guild</button></div>
+        <p class="projMsg" id="applyMsg" role="status" aria-live="polite"></p>
+      </form>
+    </section>
+
     <!-- THE RECORD — R26's rounded weekly totals (ADR 0337 D4.4), from the public
          read only: band floors ("100+"), never an exact sum, and no count of who
          is in them. An unlisted guild publishes none. -->
@@ -367,7 +391,7 @@
   }
 
   // ---- paint: every region from the server's answers ----
-  function paint() { paintHead(); paintYou(); paintRecord(); paintRoster(); }
+  function paint() { paintHead(); paintYou(); paintApply(); paintRecord(); paintRoster(); }
 
   function guild() { return (mine && mine.guild) || pub.guild; }
 
@@ -498,6 +522,44 @@
     say($('youMsg'), 'You’re staying off its public page. You can change that here at any time.');
   });
 
+  // ---- apply to a project: the owner files, and it applies for nobody ----
+  // Shown from the own-scope read only, to the owner; the route refuses anyone
+  // else on its own (a member is told the act is the owner's, a stranger 404s).
+  function paintApply() {
+    $('gApply').hidden = !(mine && mine.you.membership_kind === 'owner');
+  }
+  $('applyForm').addEventListener('submit', function (ev) {
+    ev.preventDefault();
+    var msg = $('applyMsg');
+    var field = $('applyOrigin');
+    var origin = String(field.value || '').trim();
+    if (!origin) { say(msg, 'Enter the project’s address.', 'err'); return; }
+    // the hub's join field's rule: a bare host is assumed https://, the form the
+    // server's exact origin lookup matches
+    if (!/^https?:\/\//i.test(origin)) origin = 'https://' + origin;
+    var btn = $('applySend');
+    btn.disabled = true;
+    say(msg, 'Sending…');
+    return request('POST', '/guilds/' + slug + '/engagements', { origin: origin }).then(function (res) {
+      btn.disabled = false;
+      if (res.status === 401) { say(msg, 'Your session expired — sign in again to send this.', 'err'); bar.paint(null); return; }
+      var e = res.ok && res.data && res.data.engagement;
+      if (e) {
+        field.value = '';
+        var gName = (e.guild && e.guild.name) || guild().name;
+        var pName = (e.project && e.project.name) || origin;
+        say(msg, 'Done. ' + gName + '’s members will see ' + pName + ' in their invitations, and each one applies as themselves. ' +
+          'That includes you — this didn’t apply for you.', 'ok');
+        return;
+      }
+      // unknown, inactive, off the map or not public are ONE refusal on the
+      // server, so they are one line here: it never says a private project exists
+      var code = res.data && res.data.error && res.data.error.code;
+      if (res.status === 404 && code === 'unknown_project') { say(msg, 'No public project on the map at that address.', 'err'); return; }
+      say(msg, serverWords(res, 'Couldn’t send that. Try again.'), 'err');
+    }, function () { btn.disabled = false; say(msg, 'Couldn’t reach the server. Try again.', 'err'); });
+  });
+
   // ---- the record ----
   function paintRecord() {
     var t = pub && pub.totals;

package/modules/public-landing/public/guild.probes.json

@@ -1,5 +1,5 @@
 {
-  "_": "The guild page's interaction contract for modules/ui-design/kit/probe.js (task 1002301): signed out, the public page and the sign-in doors pointing back at the guild; signed in, the member's two switches driven end to end against the stub's held guilds (serve.js keeps fixtures/guilds.json for the run and refuses what PATCH /guilds/:slug/membership refuses), so a save the page re-reads comes back saved. The probes are a SEQUENCE over one stub: the prompt's yes lists the builder, later probes put them back off, and the 'not now' probe runs in a fresh browser (no remembered answer). A probe with `continue` keeps the previous page.",
+  "_": "The guild page's interaction contract for modules/ui-design/kit/probe.js (task 1002301): signed out, the public page and the sign-in doors pointing back at the guild; signed in, the member's two switches driven end to end against the stub's held guilds (serve.js keeps fixtures/guilds.json for the run and refuses what PATCH /guilds/:slug/membership refuses), so a save the page re-reads comes back saved. The probes are a SEQUENCE over one stub: the prompt's yes lists the builder, later probes put them back off, and the 'not now' probe runs in a fresh browser (no remembered answer). The owner of night-shift (task 1002303, R27) puts the guild forward for a project: an empty field sends nothing, a project not public on the map is one honest line, and a bare host is taken as https:// — the stub mirrors POST /guilds/:slug/engagements' refusals (a member's 403, one 404 for any project not public on the map). A probe with `continue` keeps the previous page.",
   "page": "/guild",
   "surface": "public-landing",
   "probes": [
@@ -16,7 +16,7 @@
       "expect": { "visible": ["#missing"], "hidden": ["#guildBody"] } },
     { "name": "signed in, a member not on the public page: asked first, the pair waits", "auth": true, "width": 1440, "url": "/g/forge-crew",
       "steps": [["wait", 500]],
-      "expect": { "visible": ["#gYou", "#showAsk", "#askYes", "#askNo"], "hidden": ["#shownBand"], "count": [["#gRoster li", 6]],
+      "expect": { "visible": ["#gYou", "#showAsk", "#askYes", "#askNo"], "hidden": ["#shownBand", "#gApply"], "count": [["#gRoster li", 6]],
         "text": [["#countWhat", "Your numbers count toward this guild’s rounded totals — even while your record is hidden or your account is private. They are never shown on their own: only inside totals rounded down to a band (10+, 20+, 50+ …) and counted once a week. Leave them out of any guild you’d rather not share them with."]] } },
     { "name": "show me: the switch saves, the prompt gives way to the pair, set to Show me", "continue": true,
       "steps": [["click", "#askYes"], ["wait", 500]],
@@ -36,7 +36,17 @@
         "text": [["#youMsg", "You’re staying off its public page. You can change that here at any time."]] } },
     { "name": "the owner of an unlisted guild: no public page, so no pair and no record", "auth": true, "width": 1440, "url": "/g/night-shift",
       "steps": [["wait", 500]],
-      "expect": { "visible": ["#gYou", "#shownUnlisted"], "hidden": ["#shownBand", "#showAsk", "#gFigs"], "text": [["#gKicker", "Guild · unlisted"], ["#gYouSide", "You own this guild. Only you see this, and only you can change it."]] } },
+      "expect": { "visible": ["#gYou", "#shownUnlisted", "#gApply", "#applyOrigin"], "hidden": ["#shownBand", "#showAsk", "#gFigs"], "text": [["#gKicker", "Guild · unlisted"], ["#gYouSide", "You own this guild. Only you see this, and only you can change it."]] } },
+    { "name": "apply to a project: an empty field asks for the address and sends nothing", "continue": true,
+      "steps": [["click", "#applySend"], ["wait", 150]],
+      "expect": { "text": [["#applyMsg", "Enter the project’s address."]], "hasClass": [["#applyMsg", "err"]] } },
+    { "name": "apply to a project: a project that is not public on the map is one honest line, and the address stays", "continue": true,
+      "steps": [["fill", "#applyOrigin", "https://hidden.example.com"], ["click", "#applySend"], ["wait", 400]],
+      "expect": { "text": [["#applyMsg", "No public project on the map at that address."]], "value": [["#applyOrigin", "https://hidden.example.com"]] } },
+    { "name": "apply to a project: a bare host is taken as https://, and the line says it applied for nobody", "continue": true,
+      "steps": [["fill", "#applyOrigin", "demo.cloudbongos.com"], ["click", "#applySend"], ["wait", 400]],
+      "expect": { "hasClass": [["#applyMsg", "ok"]], "value": [["#applyOrigin", ""]],
+        "text": [["#applyMsg", "Done. Night Shift’s members will see Demo in their invitations, and each one applies as themselves. That includes you — this didn’t apply for you."]] } },
     { "name": "a public guild you are not in: the public page, nothing of yours", "auth": true, "width": 1440, "url": "/g/open-hands",
       "steps": [["wait", 500]],
       "expect": { "visible": ["#guildBody"], "hidden": ["#gYou", "#missing"], "text": [["#gRecordNote", "Not counted yet. A guild’s record is counted once a week."]] } },

package/modules/public-landing/public/guild.states.json

@@ -1,5 +1,5 @@
 {
-  "_": "The guild page's states for modules/ui-design/kit/render.js (task 1002301, R25; ADR 0336 D4, ADR 0337 D4.4). One shell serves every /g/<slug>; the stub answers three guilds from fixtures/guilds.json. Signed out: forge-crew is the public page (four listed members, the rounded record), and night-shift — unlisted — is the same 'no guild here' an unknown slug gets, with sign-in. Signed in as the fixture builder: forge-crew is the members' view (everyone, six, with the prompt to be listed because they are a member who is not on its public page; the pair for that switch waits until the prompt is answered), night-shift is their unlisted guild (no public page, no published record), open-hands is a public guild they are not in (the public view, not counted yet), and an unknown slug is 'no guild here' without the sign-in. Dark only, like every apex page (ADR 0204).",
+  "_": "The guild page's states for modules/ui-design/kit/render.js (task 1002301, R25; ADR 0336 D4, ADR 0337 D4.4). One shell serves every /g/<slug>; the stub answers three guilds from fixtures/guilds.json. Signed out: forge-crew is the public page (four listed members, the rounded record), and night-shift — unlisted — is the same 'no guild here' an unknown slug gets, with sign-in. Signed in as the fixture builder: forge-crew is the members' view (everyone, six, with the prompt to be listed because they are a member who is not on its public page; the pair for that switch waits until the prompt is answered), night-shift is their unlisted guild (no public page, no published record), open-hands is a public guild they are not in (the public view, not counted yet), and an unknown slug is 'no guild here' without the sign-in. As night-shift's owner they also see 'apply to a project' (task 1002303, R27): the field, and the guild put forward for a project on the map — it applies for nobody, so the line says each member applies as themselves. Dark only, like every apex page (ADR 0204).",
   "page": "/guild",
   "surface": "public-landing",
   "modes": ["dark"],
@@ -9,28 +9,33 @@
   "ignoreControls": [".vh"],
   "states": {
     "out-public": { "url": "/g/forge-crew", "auth": false, "actions": [["wait", 400]],
-      "expect": { "visible": ["#guildBody", "#gName", "#gRoster", "#gFigs", "#signinTop"], "hidden": ["#gYou", "#missing", "#loading", "#who"],
+      "expect": { "visible": ["#guildBody", "#gName", "#gRoster", "#gFigs", "#signinTop"], "hidden": ["#gYou", "#gApply", "#missing", "#loading", "#who"],
         "text": [["#gName", "Forge Crew"], ["#gKicker", "Guild"], ["#gMeta", "4 members · since Sep 2026"], ["#tShipped", "100+"], ["#tCredits", "2,000+"], ["#tKarma", "50+"], ["#tProjects", "under 10"], ["#gRecordNote", "Counted on 1 Oct 2026. Projects are the public projects its listed members build on."]],
         "count": [["#gRoster li", 4]] } },
     "out-unlisted": { "url": "/g/night-shift", "auth": false, "actions": [["wait", 400]],
       "expect": { "visible": ["#missing", "#missingSignin"], "hidden": ["#guildBody", "#loading"],
         "text": [["#missingWhy", "There is no public guild at this address. If it is an unlisted guild you belong to, sign in to see it."]] } },
     "in-member": { "url": "/g/forge-crew", "auth": true, "actions": [["wait", 500]],
-      "expect": { "visible": ["#guildBody", "#gYou", "#showAsk", "#countWhat", "#who"], "hidden": ["#shownBand", "#shownUnlisted", "#missing", "#signinTop"],
+      "expect": { "visible": ["#guildBody", "#gYou", "#showAsk", "#countWhat", "#who"], "hidden": ["#shownBand", "#shownUnlisted", "#gApply", "#missing", "#signinTop"],
         "text": [["#gKicker", "Guild · public"], ["#gMeta", "6 members · 4 on the public page · since Sep 2026"], ["#gYouSide", "You’re a member of this guild. Only you see this, and only you can change it."]],
         "checked": "input[name=shown][value=off]",
         "count": [["#gRoster li", 6]] } },
     "in-unlisted-owner": { "url": "/g/night-shift", "auth": true, "actions": [["wait", 500]],
-      "expect": { "visible": ["#guildBody", "#gYou", "#shownUnlisted"], "hidden": ["#showAsk", "#shownBand", "#gFigs", "#gDesc"],
+      "expect": { "visible": ["#guildBody", "#gYou", "#shownUnlisted", "#gApply"], "hidden": ["#showAsk", "#shownBand", "#gFigs", "#gDesc"],
         "text": [["#gKicker", "Guild · unlisted"], ["#shownUnlisted", "This guild is unlisted, so it has no public page. If you make it public, you’ll be listed on it as its owner, and each member will be asked before they are."], ["#gMeta", "3 members"], ["#gRecordNote", "This guild is unlisted, so its record isn’t published anywhere."], ["#countWhat", "Your numbers are left out of this guild’s totals, from its next weekly count."]],
         "checked": "input[name=counted][value=off]" } },
     "in-not-member": { "url": "/g/open-hands", "auth": true, "actions": [["wait", 500]],
-      "expect": { "visible": ["#guildBody", "#gRoster"], "hidden": ["#gYou", "#missing"],
+      "expect": { "visible": ["#guildBody", "#gRoster"], "hidden": ["#gYou", "#gApply", "#missing"],
         "text": [["#gKicker", "Guild"], ["#gMeta", "2 members · since Oct 2026"], ["#tShipped", "—"], ["#gRecordNote", "Not counted yet. A guild’s record is counted once a week."]],
         "count": [["#gRoster li", 2]] } },
     "in-missing": { "url": "/g/no-such-guild", "auth": true, "actions": [["wait", 500]],
       "expect": { "visible": ["#missing"], "hidden": ["#guildBody", "#missingSignin"],
         "text": [["#missingWhy", "There is no guild at this address that you can see. A guild that is unlisted is shown only to its members."]] } },
+    "in-owner-apply": { "url": "/g/night-shift", "auth": true, "actions": [["wait", 500], ["focus", "#applyOrigin"], ["wait", 150]],
+      "expect": { "visible": ["#gApply", "#applyOrigin", "#applySend"], "text": [["#gApply-h", "apply to a project"], ["#applyMsg", ""]], "value": [["#applyOrigin", ""]] } },
+    "in-owner-applied": { "url": "/g/night-shift", "auth": true, "actions": [["wait", 500], ["fill", "#applyOrigin", "example.com"], ["click", "#applySend"], ["wait", 400]],
+      "expect": { "visible": ["#gApply", "#applyMsg"], "hasClass": [["#applyMsg", "ok"]], "value": [["#applyOrigin", ""]],
+        "text": [["#applyMsg", "Done. Night Shift’s members will see Example World in their invitations, and each one applies as themselves. That includes you — this didn’t apply for you."]] } },
     "in-profile-band": { "url": "/g/forge-crew", "auth": true, "actions": [["wait", 500], ["click", "#who"], ["wait", 300]],
       "expect": { "visible": ["#menuProfile"], "hidden": ["#menuProjects"], "text": [["#bandWhoLogin", "builder"]] } }
   },

package/modules/public-landing/public/projects.html

@@ -963,6 +963,11 @@ summary{min-height:24px;padding:3px 0;}
           <section id="mineInvites" hidden aria-labelledby="mineInvitesH">
             <h2 id="mineInvitesH">Invitations</h2>
             <ul class="mineRows" id="invitesList"></ul>
+            <!-- a guild you are in, engaging a project (task 1002303, R27; ADR 0365):
+                 "G is applying to P" and "P invited G", from GET /me/guild-engagements.
+                 Each card's Apply is the ordinary join request with `guild` added, so
+                 you apply as yourself, never as the guild. -->
+            <ul class="mineRows" id="engageList"></ul>
           </section>
 
           <section aria-labelledby="mineBuildingH">
@@ -1281,6 +1286,17 @@ summary{min-height:24px;padding:3px 0;}
           <ul class="suggList" id="mInviteSugg"></ul>
           <ul class="inviteList" id="mInviteList"></ul>
           <div class="projMsg" id="mInviteMsg" role="status" aria-live="polite"></div>
+          <!-- invite a guild (task 1002303, R27; ADR 0365 D3): POST /projects/invite-guild
+               { client_id, guild } records that the project invited the guild and
+               answers one hall hand-off link per member on the guild's public page,
+               drawn as the same lines as a single invite above. -->
+          <p class="finePrint">Or invite a guild, by its name or its /g/ address. Each member gets their own invite, and only the members shown on the guild’s public page are listed.</p>
+          <div class="attach">
+            <label class="vh" for="mInviteGuild">Guild name or address</label>
+            <input type="text" id="mInviteGuild" placeholder="Guild name or /g/ address" autocomplete="off" autocapitalize="off" spellcheck="false" maxlength="200">
+            <button type="button" class="btn small ghost" data-invite-guild="mInvite">Invite the guild</button>
+          </div>
+          <div class="projMsg" id="mInviteGuildMsg" role="status" aria-live="polite"></div>
         </div>
       </div>
 
@@ -3616,10 +3632,9 @@ summary{min-height:24px;padding:3px 0;}
      hub has no accept route at all. Decline still works; it only clears the
      hub's own pending row. */
   function renderInvitesList(invites) {
-    var section = $('mineInvites');
     var ul = $('invitesList');
     ul.textContent = '';
-    if (!invites || !invites.length) { section.hidden = true; return; }
+    if (!invites || !invites.length) { paintInvitesSection(); return; }
     invites.forEach(function (inv) {
       var row = mineRow(inv);
       var hint = mineEl('p', 'mineRow__hint');
@@ -3643,21 +3658,151 @@ summary{min-height:24px;padding:3px 0;}
       decline.addEventListener('click', function () {
         postThenRemoveRow(
           API + '/my-projects/invites/' + encodeURIComponent(inv.client_id) + '/decline', row, decline, null,
-          function () { if (!ul.children.length) section.hidden = true; }
+          paintInvitesSection
         );
       });
       actions.appendChild(decline);
       row.appendChild(actions);
       ul.appendChild(row);
     });
-    section.hidden = false;
+    paintInvitesSection();
+  }
+
+  /* the Invitations section holds two lists — the projects' own invites and the
+     guild cards below — and shows while either has a row */
+  function paintInvitesSection() {
+    $('mineInvites').hidden = !$('invitesList').children.length && !$('engageList').children.length;
   }
 
   function loadInvites() {
-    return fetch(API + '/my-projects/invites', { credentials: 'same-origin' })
-      .then(function (res) { return res.ok ? res.json() : { invites: [] }; })
-      .then(function (d) { renderInvitesList(d.invites || []); })
-      .catch(function () { $('mineInvites').hidden = true; });
+    return Promise.all([
+      fetch(API + '/my-projects/invites', { credentials: 'same-origin' })
+        .then(function (res) { return res.ok ? res.json() : { invites: [] }; })
+        .then(function (d) { renderInvitesList(d.invites || []); })
+        .catch(function () { renderInvitesList([]); }),
+      loadEngagements()
+    ]);
+  }
+
+  /* ── a guild you are in, engaging a project (task 1002303, R27; ADR 0365) ──
+     GET /me/guild-engagements names what the guilds you are in have going: "G is
+     applying to P" (the guild's owner put it forward) and "P invited G" (the
+     project invited the guild; its hall sends each member on the guild's public
+     page their own invite, and the rest of the guild hears it here). The read only
+     names a project that is on the map and public, and leaves out one you already
+     build on, are invited to, or have applied to. Each card's Apply is the SAME
+     relay as everything else in this view — postJoinRequest — with `guild` added:
+     you apply as yourself, never as the guild, with your own note if you like. A
+     guild that no longer holds for you (you left it, or its 30 days ran out) is a
+     409 and nothing is relayed; the card then offers the plain application.
+     textContent / createElement only. Proof: tests/hub_engagement_cards.mjs */
+  var ENGAGE_GONE = 'That guild application has ended — you can still apply on your own.';
+  function engageLine(e) {
+    var g = e.guild.name || e.guild.slug;
+    var p = (e.project && e.project.name) || hostOf(e.project.origin);
+    return e.kind === 'invited' ? p + ' invited ' + g : g + ' is applying to ' + p + ' — apply with them?';
+  }
+  function sessionExpired(el) {
+    el.className = 'projMsg err';
+    el.textContent = 'Your session expired — ';
+    var a = document.createElement('a');
+    a.href = API + '/auth/web/start?return=/projects%3Fview%3Dmine&repos=1';
+    a.textContent = 'sign in again';
+    el.appendChild(a);
+    el.appendChild(document.createTextNode('.'));
+  }
+  function engageRow(e) {
+    var origin = e.project.origin;
+    var slug = e.guild.slug;
+    var row = mineRow({ name: engageLine(e), origin: origin });
+    row.className = 'mineRow engageRow';
+    var main = row.querySelector('.mineRow__main');
+    var hint = mineEl('p', 'mineRow__hint');
+    hint.textContent = 'You apply as yourself — add a note for the owner if you like.';
+    main.appendChild(hint);
+    var note = document.createElement('textarea');
+    note.className = 'mineJoinNote';
+    note.rows = 2;
+    note.maxLength = 400;
+    note.placeholder = 'A note for the owner (optional) — what you’d like to work on, who you are.';
+    note.setAttribute('aria-label', 'A note for the owner (optional)');
+    note.hidden = true;
+    main.appendChild(note);
+    var msg = mineEl('p', 'projMsg');
+    msg.setAttribute('role', 'status');
+    msg.setAttribute('aria-live', 'polite');
+    main.appendChild(msg);
+    var actions = mineEl('div', 'mineRow__actions');
+    var noteBtn = document.createElement('button');
+    noteBtn.type = 'button';
+    noteBtn.className = 'linklike';
+    noteBtn.textContent = 'Add a note';
+    noteBtn.addEventListener('click', function () { note.hidden = false; noteBtn.hidden = true; note.focus(); });
+    var apply = document.createElement('button');
+    apply.type = 'button';
+    apply.className = 'btn small';
+    apply.textContent = 'Apply';
+    /* with the guild until the server says it no longer holds, then on your own */
+    var withGuild = true;
+    function idle() { apply.disabled = false; apply.textContent = withGuild ? 'Apply' : 'Apply on my own'; }
+    apply.addEventListener('click', function () {
+      apply.disabled = true;
+      apply.textContent = 'Applying…';
+      msg.className = 'projMsg';
+      msg.textContent = '';
+      postJoinRequest(origin, (note.value || '').trim() || null, withGuild ? slug : null).then(function (res) {
+        if (res.unauthenticated) { idle(); sessionExpired(msg); return; }
+        if (res.ok && res.data && res.data.status === 'requested') {
+          /* no longer pressable, so no longer the accent (the One Warm Thing rule) */
+          apply.className = 'btn small ghost';
+          apply.textContent = 'Applied';
+          hint.hidden = true;
+          note.hidden = true;
+          noteBtn.hidden = true;
+          msg.className = 'projMsg ok';
+          msg.textContent = res.data.message || 'Requested.';
+          return;
+        }
+        var err = apiError(res.data, res.status);
+        if (res.status === 409 && err.code === 'guild_engagement_gone') {
+          withGuild = false;
+          idle();
+          msg.textContent = ENGAGE_GONE;
+          return;
+        }
+        idle();
+        /* the relay's own answer (invite_only, already_member …) in its own words */
+        msg.className = 'projMsg' + (res.ok ? '' : ' err');
+        msg.textContent = (res.ok && res.data && res.data.message) || err.message || 'Could not reach that project — try again in a moment.';
+      }).catch(function () {
+        idle();
+        msg.className = 'projMsg err';
+        msg.textContent = 'Couldn’t reach the platform — check your connection and try again.';
+      });
+    });
+    actions.appendChild(noteBtn);
+    actions.appendChild(apply);
+    row.appendChild(actions);
+    return row;
+  }
+  /* a row this page cannot act on (an unknown kind, no guild to name, no address
+     to apply to) is dropped rather than drawn as a card whose button fails */
+  function renderEngagements(rows) {
+    var ul = $('engageList');
+    ul.textContent = '';
+    (rows || []).forEach(function (e) {
+      if (!e || (e.kind !== 'apply' && e.kind !== 'invited')) return;
+      if (!e.guild || typeof e.guild.slug !== 'string' || !e.guild.slug) return;
+      if (!e.project || !safeHttpUrl(e.project.origin)) return;
+      ul.appendChild(engageRow(e));
+    });
+    paintInvitesSection();
+  }
+  function loadEngagements() {
+    return fetch(API + '/me/guild-engagements', { credentials: 'same-origin' })
+      .then(function (res) { return res.ok ? res.json() : { engagements: [] }; })
+      .then(function (d) { renderEngagements(d.engagements || []); })
+      .catch(function () { renderEngagements([]); });
   }
 
   /* the one relay both the map's per-card Apply (submitApply) and the
@@ -3665,11 +3810,17 @@ summary{min-height:24px;padding:3px 0;}
      the 'requested' echo update kept in ONE place (task 1003774). Keys the
      echo off the server's OWN resolved origin where the response carries one:
      it need not match what the visitor typed byte-for-byte (a trailing
-     slash, a different case) to be the same project the map's catalog names. */
-  function postJoinRequest(origin, note) {
+     slash, a different case) to be the same project the map's catalog names.
+     `guild` (a slug, optional) is a guild card's: the application is still the
+     caller's own, and the hub records which guild they came with (task 1002303,
+     R27; ADR 0365 D1/D2). */
+  function postJoinRequest(origin, note, guild) {
+    var body = { origin: origin };
+    if (note) body.note = note;
+    if (guild) body.guild = guild;
     return fetch(API + '/my-projects/join', {
       method: 'POST', credentials: 'same-origin', headers: { 'Content-Type': 'application/json' },
-      body: JSON.stringify(note ? { origin: origin, note: note } : { origin: origin }),
+      body: JSON.stringify(body),
     }).then(function (res) {
       if (res.status === 401) return { unauthenticated: true };
       return jsonOrEmpty(res).then(function (data) {
@@ -10296,11 +10447,17 @@ summary{min-height:24px;padding:3px 0;}
      here, because the project notifies the hub (POST /sso/invites/notify).
 
      WHAT IT PUBLISHES OF AN INVITEE is the login the inviter typed and nothing else.
+
+     A GUILD (task 1002303, R27; ADR 0365 D3), on the project's own page only: the
+     inviter names a public guild and POST /projects/invite-guild { client_id, guild }
+     answers one hand-off link per member on the guild's PUBLIC page — the people the
+     inviter could see, and their handle and display name, which that page already
+     shows. They become the same lines, each finished on the hall like any other.
      Proof: ../../../tests/project_invite_ui.mjs ══ */
 
   var INVITE_MOUNTS = {
     wizInvite: { who: 'wizInviteWho', list: 'wizInviteList', msg: 'wizInviteMsg', after: 'doneStepsHead', why: 'wizInviteWhy', sugg: 'wizInviteSugg' },
-    mInvite: { who: 'mInviteWho', list: 'mInviteList', msg: 'mInviteMsg', after: null, why: 'mInviteWhy', sugg: 'mInviteSugg' }
+    mInvite: { who: 'mInviteWho', list: 'mInviteList', msg: 'mInviteMsg', after: null, why: 'mInviteWhy', sugg: 'mInviteSugg', guild: 'mInviteGuild', guildMsg: 'mInviteGuildMsg' }
   };
   var inviteSlug = {};   /* mount id → the slug it invites to; '' means no step at all */
   var inviteRows = {};   /* mount id → the invites filed on THIS project this session */
@@ -10320,6 +10477,7 @@ summary{min-height:24px;padding:3px 0;}
       inviteRows[id] = [];
       inviteSugg[id] = null;
       inviteSay(id, '', '');
+      inviteSay(id, '', '', false, 'guildMsg');
     }
     var box = $(id);
     if (box) box.hidden = !next;
@@ -10389,14 +10547,15 @@ summary{min-height:24px;padding:3px 0;}
   }
 
   /* One line per name handed to the hall this session: the login the inviter
-     typed, and the link that finishes its invite there. The line says the invite is
+     typed (or, for a guild's member, the display name its public page shows), and
+     the link that finishes its invite there. The line says the invite is
      NOT sent yet, because it is not — the hall's Invite button is what sends it. */
   function renderInviteRows(id) {
     var m = INVITE_MOUNTS[id];
     var list = m && $(m.list);
     if (!list) return;
     list.innerHTML = (inviteRows[id] || []).map(function (r) {
-      return '<li><b>' + esc(r.login) + '</b><small>not sent yet — finish it on your project’s hall.</small>'
+      return '<li><b>' + esc(r.name || r.login) + '</b><small>not sent yet — finish it on your project’s hall.</small>'
         + '<a class="btn small" href="' + esc(r.url) + '" target="_blank" rel="noopener">Send the invite →</a></li>';
     }).join('');
     /* the two lists are one answer: a name that just became a pending row is no
@@ -10404,9 +10563,10 @@ summary{min-height:24px;padding:3px 0;}
     renderInviteSugg(id);
   }
 
-  function inviteSay(id, text, cls, isHtml) {
+  /* `key` names the line: the mount's message (the default) or the guild row's */
+  function inviteSay(id, text, cls, isHtml, key) {
     var m = INVITE_MOUNTS[id];
-    var el = m && $(m.msg);
+    var el = m && m[key || 'msg'] ? $(m[key || 'msg']) : null;
     if (!el) return;
     el.className = 'projMsg' + (cls ? ' ' + cls : '');
     if (isHtml) el.innerHTML = text; else el.textContent = text;
@@ -10461,6 +10621,73 @@ summary{min-height:24px;padding:3px 0;}
     });
   }
 
+  /* inviteGuildSlug(raw) — a guild named the ways a person pastes one: its name in
+     the address ("forge-crew"), "/g/forge-crew", or the guild page's whole address.
+     PURE. Anything else is sent as typed, and the route answers for it. */
+  function inviteGuildSlug(raw) {
+    var s = String(raw == null ? '' : raw).replace(/^\s+|\s+$/g, '');
+    var m = /(?:^|\/)g\/([^\/?#\s]+)\/?(?:[?#].*)?$/i.exec(s);
+    if (m) {
+      s = m[1];
+      try { s = decodeURIComponent(s); } catch (e) { /* sent as typed */ }
+    }
+    return s.toLowerCase();
+  }
+
+  /* doInviteGuild(id) — one public guild, one request: a pending line per member on
+     its public page, each finished on the hall like a single invite. The route
+     records that the project invited the guild and sends nothing, and nor does
+     this. Only a mount that names a guild field has this control. */
+  function doInviteGuild(id) {
+    var m = INVITE_MOUNTS[id];
+    var slug = inviteSlug[id] || '';
+    if (!m || !m.guild || !slug || inviteBusy[id]) return;
+    var field = $(m.guild);
+    var guild = inviteGuildSlug(field && field.value);
+    if (!guild) {
+      inviteSay(id, 'Type the guild’s name or its /g/ address.', 'err', false, 'guildMsg');
+      if (field && field.focus) field.focus();
+      return;
+    }
+    inviteBusy[id] = true;
+    inviteSay(id, 'Finding the guild’s members…', '', false, 'guildMsg');
+    fetch(API + '/projects/invite-guild', {
+      method: 'POST', credentials: 'same-origin', headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ client_id: slug, guild: guild })
+    }).then(function (res) {
+      return jsonOrEmpty(res).then(function (data) {
+        inviteBusy[id] = false;
+        if (res.status === 401) { inviteSay(id, signInAgain(), 'err', true, 'guildMsg'); return; }
+        var g = res.ok && data && data.guild;
+        if (g) {
+          /* a member already on a line (the same guild twice) is not drawn again */
+          var listed = 0;
+          (data.invites || []).forEach(function (r) {
+            var url = r ? safeHttpUrl(r.invite_url) : '';
+            if (!url || !r.handle) return;
+            listed++;
+            if ((inviteRows[id] || []).some(function (x) { return x.url === url; })) return;
+            inviteRows[id] = (inviteRows[id] || []).concat([{ login: String(r.handle), name: r.display_name ? String(r.display_name) : '', url: url }]);
+          });
+          renderInviteRows(id);
+          if (field) field.value = '';
+          var name = g.name || guild;
+          inviteSay(id, listed
+            ? name + ': ' + listed + (listed === 1 ? ' member' : ' members') + ' to invite. Send each invite from your project’s hall — every line above opens it with their name filled in.'
+            : 'Nobody is listed on ' + name + '’s public page yet, so there is no one to invite from here.', listed ? 'ok' : '', false, 'guildMsg');
+          return;
+        }
+        var e = apiError(data, res.status);
+        /* an unknown guild and an unlisted one are one answer on the server */
+        if (res.status === 404 && e.code === 'guild_not_found') { inviteSay(id, 'No public guild at that name.', 'err', false, 'guildMsg'); return; }
+        inviteSay(id, inviteRefusal(e.code, res.status, e.message), 'err', false, 'guildMsg');
+      });
+    }).catch(function () {
+      inviteBusy[id] = false;
+      inviteSay(id, 'Couldn’t reach the platform — check your connection and try again.', 'err', false, 'guildMsg');
+    });
+  }
+
   /* skipInvite(id) — the step steps aside having sent NOTHING. Focus moves on
      rather than being stranded inside the box that just went away. */
   function skipInvite(id) {
@@ -10479,6 +10706,7 @@ summary{min-height:24px;padding:3px 0;}
     var box = $(id);
     if (box) {
       box.addEventListener('click', function (ev) {
+        if (ev.target.closest && ev.target.closest('[data-invite-guild]')) { doInviteGuild(id); return; }
         var t = ev.target.closest && ev.target.closest('[data-invite-send],[data-invite-skip],[data-invite-pick]');
         if (!t) return;
         /* a picked suggestion fills the field and takes the SAME path as a typed
@@ -10501,6 +10729,14 @@ summary{min-height:24px;padding:3px 0;}
         doInvite(id);
       });
     }
+    var guildField = INVITE_MOUNTS[id].guild ? $(INVITE_MOUNTS[id].guild) : null;
+    if (guildField) {
+      guildField.addEventListener('keydown', function (ev) {
+        if (ev.key !== 'Enter') return;
+        ev.preventDefault();
+        doInviteGuild(id);
+      });
+    }
   });
 
   /* ── boot: who am I → my instances ────────────────────────────────────── */

package/modules/public-landing/public/projects.probes.json

@@ -175,6 +175,31 @@
       "expect": {"visible":["#panel-fork",".doorPill","#wizDemo","#wizStart"]} },
     { "name": "the wizard driver at 390: the review rows stack and the walk still reaches Create", "auth": true, "width": 390, "url": "/projects?view=new",
       "steps": [["wait",600],["click","#termsAck"],["wait",100],["click","#wizStart"],["wait",400],["fill","#newName","Mercury"],["click","#typeCards .tpill[data-type=\"game\"]"],["click","#panel-what button[type=submit]"],["wait",400],["select","#physCountry","US"],["wait",100],["click","[data-phys=\"builder_geography\"][data-val=\"global\"]"],["click","[data-phys=\"minors_on_board\"][data-val=\"false\"]"],["click","[data-phys=\"entity\"][data-val=\"intent-solo\"]"],["click","#physNext"],["wait",700],["click","#reviewRows .setRow[data-row=\"address\"] [data-row-chg]"],["wait",200],["fill","#f-slug","mercury"],["wait",900],["fill","#f-domain","mercury.example.com"],["wait",200],["click","#reviewRows .setRow[data-row=\"address\"] [data-row-chg]"],["wait",200],["click","#reviewGo"],["wait",500]],
-      "expect": {"visible":["#panel-look","#wizLook","#doCreate"],"hidden":["#panel-review"],"text":[["#look-h","Give it a look."]]} }
+      "expect": {"visible":["#panel-look","#wizLook","#doCreate"],"hidden":["#panel-review"],"text":[["#look-h","Give it a look."]]} },
+    { "name": "guild cards (task 1002303, R27): the mine view lists what your guilds have going, each card with its own Apply", "auth": true, "width": 1440, "url": "/projects?view=mine",
+      "steps": [["wait",900]],
+      "expect": { "visible": ["#mineInvites", "#engageList"], "count": [["#engageList .engageRow", 2], ["#engageList .engageRow .mineJoinNote:not([hidden])", 0]],
+        "text": [["#engageList .engageRow:nth-child(1) .mineRow__name", "Forge Crew is applying to Tidepool — apply with them?"], ["#engageList .engageRow:nth-child(2) .mineRow__name", "Lantern Works invited Forge Crew"]] } },
+    { "name": "guild cards: Add a note opens the card's own note; Apply sends it with the guild (the stub refuses a guild with no engagement) and the card says it went through", "continue": true,
+      "steps": [["click","#engageList .engageRow:first-child .linklike"],["fill","#engageList .engageRow:first-child .mineJoinNote","Happy to take the migrations."],["click","#engageList .engageRow:first-child .btn"],["wait",400]],
+      "expect": { "hidden": ["#engageList .engageRow:first-child .mineJoinNote"], "hasClass": [["#engageList .engageRow:first-child .projMsg", "ok"]],
+        "text": [["#engageList .engageRow:first-child .btn", "Applied"], ["#engageList .engageRow:first-child .projMsg", "Requested access. The project’s owner admits new builders; once approved, sign in to enter."]] } },
+    { "name": "guild cards: the invited card applies on its own, with no note", "continue": true,
+      "steps": [["click","#engageList .engageRow:nth-child(2) .btn"],["wait",400]],
+      "expect": { "text": [["#engageList .engageRow:nth-child(2) .btn", "Applied"]], "hasClass": [["#engageList .engageRow:nth-child(2) .projMsg", "ok"]] } },
+    { "name": "invite a guild (task 1002303, R27): a /g/ address gives one pending line per member on its public page, each a link to the hall", "auth": true, "width": 1440, "url": "/projects?view=manage&id=101",
+      "steps": [["wait",900],["fill","#mInviteGuild","/g/forge-crew"],["click","#mInvite [data-invite-guild]"],["wait",400]],
+      "expect": { "count": [["#mInviteList li", 4]], "value": [["#mInviteGuild", ""]],
+        "href": [["#mInviteList li:first-child a", "https://mercury.example.test/builders/watch?invite=mara-quinn"]],
+        "text": [["#mInviteGuildMsg", "Forge Crew: 4 members to invite. Send each invite from your project’s hall — every line above opens it with their name filled in."]] } },
+    { "name": "invite a guild: the same guild again draws no second line", "continue": true,
+      "steps": [["fill","#mInviteGuild","forge-crew"],["click","#mInvite [data-invite-guild]"],["wait",400]],
+      "expect": { "count": [["#mInviteList li", 4]] } },
+    { "name": "invite a guild: an unlisted guild is the same one line as an unknown one", "continue": true,
+      "steps": [["fill","#mInviteGuild","night-shift"],["click","#mInvite [data-invite-guild]"],["wait",400]],
+      "expect": { "text": [["#mInviteGuildMsg", "No public guild at that name."]], "hasClass": [["#mInviteGuildMsg", "err"]], "count": [["#mInviteList li", 4]], "value": [["#mInviteGuild", "night-shift"]] } },
+    { "name": "invite a guild: an empty field is a question, not a request; Enter in the field sends too", "continue": true,
+      "steps": [["fill","#mInviteGuild",""],["focus","#mInviteGuild"],["press","Enter"],["wait",150]],
+      "expect": { "text": [["#mInviteGuildMsg", "Type the guild’s name or its /g/ address."]], "activeId": "mInviteGuild" } }
   ]
 }