@bongos/core 1.21.65 → 1.21.67

package/modules/hall-ui/public/profile.html

@@ -6,9 +6,10 @@
   <title>Profile — {{worldName}}</title>
   <meta name="description" content="A builder of {{worldName}} — rank, works shipped, standing, and achievements.">
   <!-- The platform hub's apex, stamped server-side (P08, task 1002804; ADR 0214
-       D2). Empty on a vanilla instance, and profile-canonical.js renders nothing
-       then — a meta, never an href, so an empty value cannot degrade into a
-       same-host URL claiming to be the hub. -->
+       D2), read through OTB.hubOrigin() (the profile nudge's link to the hub).
+       Empty on a vanilla instance, and then no hub link renders — a meta, never
+       an href, so an empty value cannot degrade into a same-host URL claiming
+       to be the hub. -->
   <meta name="hub-origin" content="{{hubOrigin}}">
   <link rel="icon" href="data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'><text x='16' y='24' font-size='24' text-anchor='middle' font-family='sans-serif'>⌂</text></svg>">
   <link rel="preconnect" href="https://fonts.googleapis.com">
@@ -223,10 +224,6 @@
      exists by the time renderProfile runs; profile.js guards on it anyway, so a
      page that omits this script simply has no connections section. -->
 <script src="/builders/profile-connections.js?v=2026-08-29-r20"></script>
-<!-- Canonical-profile wiring (P08). Loaded BEFORE profile.js so
-     window.OTBCanonical exists when renderProfile runs; profile.js guards on it,
-     so a page that omits this script simply declares no canonical. -->
-<script src="/builders/profile-canonical.js?v=2026-08-29-p08"></script>
 <!-- The charts (task 1003489). Loaded BEFORE profile.js so window.OTBProfileCharts
      exists when renderProfile runs; profile.js guards on it, so a page that
      omits this script simply has no charts section content. -->

package/modules/hall-ui/public/profile.js

@@ -965,11 +965,6 @@
     // reveals its own section or leaves it hidden. Optional by design: a page
     // that does not load it simply has no connections section.
     if (window.OTBConnections) window.OTBConnections.render(data, selfId);
-    // Canonical-profile wiring (P08, task 1002804) — the rel=canonical + the
-    // link-out to the cross-project record on a federated instance, and the
-    // numeric-id redirect on the hub. Optional the same way: a page without the
-    // script declares no canonical rather than breaking.
-    if (window.OTBCanonical) window.OTBCanonical.render(data);
   }
 
   // Render the friendly "no builder chosen" empty state for a signed-out visitor

package/modules/platform-identity/routes/my-projects.js

@@ -65,7 +65,7 @@ async function isDarkMatter(client) {
 // build, not to write prose into the platform's UI. Anything else is "not
 // relayed" (null) → the caller's 502.
 const RELAY_SENTENCE = {
-  requested: 'Requested access. The project’s owner admits new builders; once approved, sign in to enter.',
+  requested: 'Applied. The project’s owner admits new builders; once approved, sign in to enter.',
   already_member: 'You already build on this project — sign in to it to see it here.',
   invite_only: 'This project is invite-only — it doesn’t take requests. Ask its owner for an invite; once invited, sign in to it.',
   open_enrollment: 'This project is open — no request needed. Sign in to it and you’re in.',

package/modules/public-landing/public/account.html

@@ -124,7 +124,7 @@
     <p class="bandWho" id="bandWho"><img id="bandWhoImg" alt="" hidden><span class="whoName" id="bandWhoLogin"></span></p>
     <ul class="bandRow">
       <li class="bandCell"><a class="bandT" href="/projects?view=mine">My projects</a></li>
-      <li class="bandCell"><a class="bandT" href="/account" aria-current="page">Account</a></li>
+      <li class="bandCell"><a class="bandT" href="/invitations">Invitations</a></li><li class="bandCell"><a class="bandT" href="/account" aria-current="page">Account</a></li>
       <!-- the honest hover target; the delegated click upgrades it to the POST -->
       <li class="bandCell"><a class="bandT signout" href="/api/bongos/auth/logout">Sign out</a></li>
     </ul>

package/modules/public-landing/public/assets/cosmos.css

@@ -1435,16 +1435,18 @@ p.sec-p{font-size:var(--fs-lede);font-weight:500;color:var(--ink-soft);line-heig
    ender on the error ink; no lift, no shadow ── */
 #view-mine .actions,#view-manage .actions{gap:8px;margin:0;}
 #view-mine .actions{justify-content:flex-end;}
-#view-mine .btn,#view-manage .btn{min-height:44px;padding:0 22px;font-family:var(--font-body);font-weight:500;font-size:15px;text-transform:lowercase;white-space:nowrap;box-shadow:none;transition:border-color .15s ease,background .15s ease;}
-#view-mine .btn:hover,#view-manage .btn:hover{transform:none;box-shadow:none;}
-#view-mine .btn:active,#view-manage .btn:active{transform:none;}
-#view-mine .btn.small,#view-manage .btn.small{min-height:40px;padding:0 18px;font-weight:400;font-size:14.5px;color:var(--ink);background:none;border:1px solid var(--rule);}
-#view-mine .btn.small:hover,#view-manage .btn.small:hover{border-color:var(--ink-faint);color:var(--ink);}
-#view-mine .btn.small:not(.ghost):not(.danger),#view-manage .btn.small:not(.ghost):not(.danger){background:var(--accent);border-color:var(--accent);color:var(--accent-on);font-weight:500;}
-#view-mine .btn.small:not(.ghost):not(.danger):hover,#view-manage .btn.small:not(.ghost):not(.danger):hover{background:color-mix(in srgb,var(--accent) 88%,var(--ink));border-color:color-mix(in srgb,var(--accent) 88%,var(--ink));color:var(--accent-on);}
-#view-mine .btn.small.danger,#view-manage .btn.small.danger{border-color:color-mix(in srgb,var(--err) 45%,transparent);color:var(--err);}
-#view-mine .btn.small.danger:hover,#view-manage .btn.small.danger:hover{background:none;border-color:var(--err);color:var(--err);}
-#view-mine .btn.small:disabled,#view-manage .btn.small:disabled{background:none;border-color:var(--rule-soft);color:var(--ink-faint);}
+/* the mine and manage views' buttons; #invt is /invitations, whose cards moved out of the mine
+   view (task 1004276) and keep the buttons they had there */
+#view-mine .btn,#view-manage .btn,#invt .btn{min-height:44px;padding:0 22px;font-family:var(--font-body);font-weight:500;font-size:15px;text-transform:lowercase;white-space:nowrap;box-shadow:none;transition:border-color .15s ease,background .15s ease;}
+#view-mine .btn:hover,#view-manage .btn:hover,#invt .btn:hover{transform:none;box-shadow:none;}
+#view-mine .btn:active,#view-manage .btn:active,#invt .btn:active{transform:none;}
+#view-mine .btn.small,#view-manage .btn.small,#invt .btn.small{min-height:40px;padding:0 18px;font-weight:400;font-size:14.5px;color:var(--ink);background:none;border:1px solid var(--rule);}
+#view-mine .btn.small:hover,#view-manage .btn.small:hover,#invt .btn.small:hover{border-color:var(--ink-faint);color:var(--ink);}
+#view-mine .btn.small:not(.ghost):not(.danger),#view-manage .btn.small:not(.ghost):not(.danger),#invt .btn.small:not(.ghost):not(.danger){background:var(--accent);border-color:var(--accent);color:var(--accent-on);font-weight:500;}
+#view-mine .btn.small:not(.ghost):not(.danger):hover,#view-manage .btn.small:not(.ghost):not(.danger):hover,#invt .btn.small:not(.ghost):not(.danger):hover{background:color-mix(in srgb,var(--accent) 88%,var(--ink));border-color:color-mix(in srgb,var(--accent) 88%,var(--ink));color:var(--accent-on);}
+#view-mine .btn.small.danger,#view-manage .btn.small.danger,#invt .btn.small.danger{border-color:color-mix(in srgb,var(--err) 45%,transparent);color:var(--err);}
+#view-mine .btn.small.danger:hover,#view-manage .btn.small.danger:hover,#invt .btn.small.danger:hover{background:none;border-color:var(--err);color:var(--err);}
+#view-mine .btn.small:disabled,#view-manage .btn.small:disabled,#invt .btn.small:disabled{background:none;border-color:var(--rule-soft);color:var(--ink-faint);}
 /* the address field and the ender's typed-back name: a hairline field. Both
    live on the project's own page now (task 1003355), so the scope is one. */
 #view-manage .attach{gap:10px 14px;margin-top:12px;align-items:center;}

package/modules/public-landing/public/contact.html

@@ -85,7 +85,7 @@
       <li class="bandCell"><a class="bandT" href="/projects?view=mine">My projects</a></li>
       <!-- apex-only because /account is: it is served only where platform-identity
            runs, so a child instance loses the item whole (as on projects.html) -->
-      <!--apex-only:start--><li class="bandCell"><a class="bandT" href="/account">Account</a></li><!--apex-only:end-->
+      <!--apex-only:start--><li class="bandCell"><a class="bandT" href="/invitations">Invitations</a></li><li class="bandCell"><a class="bandT" href="/account">Account</a></li><!--apex-only:end-->
       <!-- the honest hover target; assets/hub-bar.js upgrades the click to the POST -->
       <li class="bandCell"><a class="bandT signout" href="/api/bongos/auth/logout">Sign out</a></li>
     </ul>

package/modules/public-landing/public/guild.html

@@ -158,7 +158,7 @@
     <p class="bandWho" id="bandWho"><img id="bandWhoImg" alt="" hidden><span class="whoName" id="bandWhoLogin"></span></p>
     <ul class="bandRow">
       <li class="bandCell"><a class="bandT" href="/projects?view=mine">My projects</a></li>
-      <li class="bandCell"><a class="bandT" href="/account">Account</a></li>
+      <li class="bandCell"><a class="bandT" href="/invitations">Invitations</a></li><li class="bandCell"><a class="bandT" href="/account">Account</a></li>
       <!-- the honest hover target; the delegated click upgrades it to the POST -->
       <li class="bandCell"><a class="bandT signout" href="/api/bongos/auth/logout">Sign out</a></li>
     </ul>

package/modules/public-landing/public/index-cli.states.json

@@ -0,0 +1,20 @@
+{
+  "_": "The landing on an instance that has published a CLI release (task 1004257): the same page, the same stub, the release feed /downloads/bongos/latest.json answered from a sample instead of the 404 an apex with no config/bongos-cli.json gives. The download block sits in the closing band under the fold, so the state focuses its door to bring it into view. Rendered by name: node modules/ui-design/kit/render.js --states modules/public-landing/public/index-cli.states.json",
+  "page": "/",
+  "surface": "public-landing",
+  "modes": ["dark"],
+  "modeQuery": false,
+  "stub": {
+    "fixtures": { "bongos-cli-latest": "bongos-cli-latest-sample" }
+  },
+  "ignoreRequests": ["/api/(gds|bongos)/me$", "/my-projects", "/provisioning/"],
+  "ignoreConsole": ["/api/(gds|bongos)/me", "\\b401\\b", "Unauthorized"],
+  "ignoreControls": [".skip", ".vh"],
+  "states": {
+    "cli-out": {
+      "auth": false,
+      "actions": [["focus", "[data-cli-get]"], ["wait", 200]],
+      "expect": { "visible": ["[data-cli]", "[data-cli-get]", "#cliFor"], "count": [["[data-cli-also] a", 4]] }
+    }
+  }
+}

package/modules/public-landing/public/index.html

@@ -329,6 +329,20 @@ h2{font-family:var(--font-display);font-weight:300;font-size:clamp(26px,3.1vw,42
   filter:var(--sky-shadow)}
 .close .doorbar{margin:0 auto}
 
+/* the CLI download (task 1004257): one door on its own ground under the pair, quieter than the
+   accent door above it, with the platform it picked and the other platforms under it. The block is
+   [hidden] until the release feed answers, so no display rule is set on .cli itself. */
+.cli{margin-top:30px}
+.cli .door{gap:10px;padding:0 28px}
+.door--solo{background:var(--door-ground);border:1px solid var(--door-edge)}
+.door .dl{width:18px;height:18px;flex:none;fill:none;stroke:currentColor;stroke-width:1.6;
+  stroke-linecap:round;stroke-linejoin:round}
+.cli .label{margin-top:16px}
+.cliAlso{margin-top:6px;font-size:14.5px;color:var(--ink-soft)}
+.cliAlso a{display:inline-block;min-height:24px;padding:3px 0;margin:0 7px;line-height:1.24;
+  color:var(--accent-ink);text-decoration:underline;text-underline-offset:3px;
+  text-decoration-thickness:1px}
+
 /* footer */
 footer{position:relative;border-top:1px solid var(--rule-soft);padding:30px 26px 52px;font-size:14.5px;
   color:var(--ink-soft)}
@@ -704,7 +718,7 @@ composition A; landing composition v3, picked by the owner 2026-08-27. No roll,
            account page, where the person's own settings live (ADR 0337 D4.3).
            Apex-only because the page is — /account is served only where
            platform-identity runs, so a child instance loses the item whole. -->
-      <!--apex-only:start--><li class="bandCell"><a class="bandT" href="/account">Account</a></li><!--apex-only:end-->
+      <!--apex-only:start--><li class="bandCell"><a class="bandT" href="/invitations">Invitations</a></li><li class="bandCell"><a class="bandT" href="/account">Account</a></li><!--apex-only:end-->
       <!-- the honest hover target; the script upgrades the click to the POST -->
       <li class="bandCell"><a class="bandT signout" href="/api/bongos/auth/logout">Sign out</a></li>
     </ul>
@@ -894,6 +908,11 @@ composition A; landing composition v3, picked by the owner 2026-08-27. No roll,
         <a class="door door--go" href="/projects?view=new">Start a project</a>
         <a class="door" href="/projects">Find a project</a>
       </div>
+      <div class="cli" data-cli hidden>
+        <a class="door door--solo" data-cli-get aria-describedby="cliFor"><svg class="dl" viewBox="0 0 20 20" aria-hidden="true"><path d="M10 3.5v9.5M6 9.5l4 4 4-4M4.5 16.5h11"/></svg>Download the CLI</a>
+        <p class="label" id="cliFor" data-cli-for></p>
+        <p class="cliAlso" data-cli-also></p>
+      </div>
     </div>
   </section>
 </main>
@@ -1192,6 +1211,54 @@ composition A; landing composition v3, picked by the owner 2026-08-27. No roll,
       host.appendChild(li);
     });
   });
+
+  /* ── the CLI download (task 1004257). The binaries are release assets an instance points
+     at with config/bongos-cli.json; with no release configured /downloads/bongos/* does not
+     mount, so the block stays hidden rather than offer a door that 404s. The feed names the
+     version and the targets; every link stays on this origin's /downloads/bongos/<target>
+     redirect, never the asset URL. A user agent cannot tell Apple silicon from Intel, and
+     Macs have shipped Apple silicon since 2020, so a Mac gets arm64 with Intel one link
+     away; a phone or tablet gets no guess, only the list. ── */
+  var CLI_NAMES = {
+    'mac-arm64': 'macOS, Apple silicon', 'mac-x64': 'macOS, Intel',
+    'linux-x64': 'Linux, x64', 'linux-arm64': 'Linux, ARM64', 'win-x64': 'Windows'
+  };
+  function cliTarget(nav, targets) {
+    var data = nav.userAgentData || {};
+    var s = (String(data.platform || nav.platform || '') + ' ' + String(nav.userAgent || '')).toLowerCase();
+    var want = [];
+    if (data.mobile || /android|iphone|ipad|ipod|mobile/.test(s) || (/mac/.test(s) && nav.maxTouchPoints > 1)) want = [];
+    else if (/win/.test(s)) want = ['win-x64'];
+    else if (/mac/.test(s)) want = ['mac-arm64', 'mac-x64'];
+    else if (/aarch64|arm64|armv8/.test(s)) want = ['linux-arm64', 'linux-x64'];
+    else if (/linux|x11|cros/.test(s)) want = ['linux-x64', 'linux-arm64'];
+    for (var i = 0; i < want.length; i++) if (targets.indexOf(want[i]) !== -1) return want[i];
+    return null;
+  }
+  json('/downloads/bongos/latest.json').then(function (data) {
+    var box = document.querySelector('[data-cli]');
+    var assets = data && data.assets;
+    if (!box || !assets || typeof assets !== 'object') return;
+    var targets = Object.keys(assets).filter(function (k) { return /^[a-z0-9][a-z0-9-]{0,39}$/.test(k); });
+    if (!targets.length) return;
+    var version = /^\d+\.\d+\.\d+$/.test(String(data.version)) ? 'v' + data.version : '';
+    var pick = cliTarget(navigator, targets);
+    var get = box.querySelector('[data-cli-get]');
+    if (pick && get) get.href = '/downloads/bongos/' + pick;
+    else if (get) get.remove();
+    var label = pick ? (CLI_NAMES[pick] || pick) : 'Download the CLI';
+    box.querySelector('[data-cli-for]').textContent = version ? label + ' · ' + version : label;
+    var also = box.querySelector('[data-cli-also]');
+    var rest = targets.filter(function (k) { return k !== pick; });
+    if (rest.length) also.appendChild(document.createTextNode(pick ? 'Also for' : 'For'));
+    rest.forEach(function (k) {
+      var a = document.createElement('a');
+      a.href = '/downloads/bongos/' + k;
+      a.textContent = CLI_NAMES[k] || k;
+      also.appendChild(a);
+    });
+    box.hidden = false;
+  });
 })();
 </script>
 </body>

package/modules/public-landing/public/index.states.json

@@ -1,14 +1,14 @@
 {
-  "_": "The landing's states for modules/ui-design/kit/render.js (task 1003320): the bar and its two bands, signed out and in. Dark only (task 1003336): the apex pins data-mode=\"dark\", so `modes` names the one mode and there is no query to walk.",
+  "_": "The landing's states for modules/ui-design/kit/render.js (task 1003320): the bar and its two bands, signed out and in. With no CLI release the feed 404s, as on an apex without config/bongos-cli.json, and the download block stays hidden (task 1004257; index-cli.states.json renders it with one). Dark only (task 1003336): the apex pins data-mode=\"dark\", so `modes` names the one mode and there is no query to walk.",
   "page": "/",
   "surface": "public-landing",
   "modes": ["dark"],
   "modeQuery": false,
-  "ignoreRequests": ["/api/(gds|bongos)/me$", "/my-projects", "/provisioning/"],
-  "ignoreConsole": ["/api/(gds|bongos)/me", "\\b401\\b", "Unauthorized"],
+  "ignoreRequests": ["/api/(gds|bongos)/me$", "/my-projects", "/provisioning/", "/downloads/bongos/latest\\.json$"],
+  "ignoreConsole": ["/api/(gds|bongos)/me", "\\b401\\b", "Unauthorized", "status of 404"],
   "ignoreControls": [".skip", ".vh"],
   "states": {
-    "out": { "auth": false, "expect": { "expanded": false, "visible": ["#who a.signin"], "hidden": ["#mineCell"] } },
+    "out": { "auth": false, "expect": { "expanded": false, "visible": ["#who a.signin"], "hidden": ["#mineCell", "[data-cli]"] } },
     "in": { "auth": true, "expect": { "expanded": false, "visible": ["#who .trig"] } },
     "out-projects": { "auth": false, "actions": [["click", "#projTrig"], ["wait", 350]], "expect": { "expanded": true, "open": "#menuProjects", "count": [["#menuProjects [aria-current]", 0]] } },
     "in-profile": { "auth": true, "actions": [["click", "#who .trig"], ["wait", 350]], "expect": { "expanded": true, "open": "#menuProfile" } }

package/modules/public-landing/public/invitations-empty.states.json

@@ -0,0 +1,56 @@
+{
+  "_": "The invitations page with nothing waiting (task 1004276): the same page, every list's read aliased to an empty fixture, so the one empty line shows under the heading and the join field still stands.",
+  "page": "/invitations",
+  "surface": "public-landing",
+  "modes": [
+    "dark"
+  ],
+  "modeQuery": false,
+  "stub": {
+    "fixtures": {
+      "my-projects__invites": "my-projects-invites-empty",
+      "me__guild-engagements": "me-guild-engagements-empty",
+      "me__guild-requests": "me-guild-requests-empty",
+      "guilds": "guilds-empty"
+    }
+  },
+  "ignoreRequests": [
+    "/api/(gds|bongos)/me$",
+    "/my-projects",
+    "/me/guild-"
+  ],
+  "ignoreConsole": [
+    "/api/(gds|bongos)/me",
+    "\\b401\\b",
+    "Unauthorized"
+  ],
+  "ignoreControls": [
+    ".skip",
+    ".vh"
+  ],
+  "states": {
+    "in-empty": {
+      "auth": true,
+      "actions": [
+        [
+          "wait",
+          900
+        ]
+      ],
+      "expect": {
+        "visible": [
+          "#invtBody",
+          "#invitesNone",
+          "#joinOrigin",
+          "#joinBtn"
+        ],
+        "count": [
+          [
+            "#mineInvites .mineRow",
+            0
+          ]
+        ]
+      }
+    }
+  }
+}

package/modules/public-landing/public/invitations-picker.states.json

@@ -0,0 +1,84 @@
+{
+  "_": "The join field's project picker on the invitations page (task 1004276; the owner's ask of 2026-10-06, typing an address is tedious). The map feed is aliased to featured-invitations (seven projects: two the fixture builder already builds on and one anonymous black hole, all left out; Tidepool applied to through my-projects-applied), so the list shows four pickable projects and one Applied row. States: the list open on focus, narrowed by typing, and a project picked with the keyboard.",
+  "page": "/invitations",
+  "surface": "public-landing",
+  "modes": [
+    "dark"
+  ],
+  "modeQuery": false,
+  "stub": {
+    "fixtures": {
+      "featured": "featured-invitations",
+      "my-projects": "my-projects-applied"
+    }
+  },
+  "ignoreRequests": [
+    "/api/(gds|bongos)/me$",
+    "/my-projects",
+    "/me/guild-"
+  ],
+  "ignoreConsole": [
+    "/api/(gds|bongos)/me",
+    "\\b401\\b",
+    "Unauthorized"
+  ],
+  "ignoreControls": [
+    ".skip",
+    ".vh"
+  ],
+  "states": {
+    "in-pick-open": {
+      "auth": true,
+      "actions": [
+        ["wait", 900],
+        ["focus", "#joinOrigin"],
+        ["wait", 500]
+      ],
+      "expect": {
+        "visible": ["#joinList"],
+        "count": [
+          ["#joinList [role=\"option\"]", 5],
+          ["#joinList [role=\"option\"][aria-disabled=\"true\"]", 1]
+        ],
+        "text": [
+          ["#joinList [role=\"option\"]:first-child .joinOpt__name", "Demo"],
+          ["#joinList [aria-disabled=\"true\"] .joinOpt__tag", "Applied"]
+        ]
+      }
+    },
+    "in-pick-typed": {
+      "auth": true,
+      "actions": [
+        ["wait", 900],
+        ["fill", "#joinOrigin", "gro"],
+        ["wait", 500]
+      ],
+      "expect": {
+        "visible": ["#joinList"],
+        "count": [
+          ["#joinList [role=\"option\"]", 1]
+        ],
+        "text": [
+          ["#joinList [role=\"option\"] .joinOpt__name", "The Grove"]
+        ]
+      }
+    },
+    "in-pick-chosen": {
+      "auth": true,
+      "actions": [
+        ["wait", 900],
+        ["fill", "#joinOrigin", "lantern"],
+        ["wait", 500],
+        ["press", "ArrowDown"],
+        ["press", "Enter"],
+        ["wait", 200]
+      ],
+      "expect": {
+        "hidden": ["#joinList"],
+        "value": [
+          ["#joinOrigin", "https://lantern-works.cloudbongos.com"]
+        ]
+      }
+    }
+  }
+}