@bongos/core 1.21.67 → 1.21.69

package/modules/public-landing/public/account.html

@@ -10,7 +10,8 @@
      once, and every project's hall links out to it instead of keeping a copy.
      Hub-only: platform-server.js serves /account only where platform-identity
      is on, because every read and write below is one of that module's own-scoped
-     routes (GET/PATCH /me/cross-project, PATCH /me/handle, PATCH /me/profile).
+     routes (GET/PATCH /me/cross-project, PATCH /me/handle, PATCH /me/profile,
+     GET /my-projects and POST /my-projects/:clientId/leave).
      Server-stamped like the footer doors: {{…}} tokens filled by landingPage(). -->
 <title>{{productName}} — Your account</title>
 <meta name="description" content="Your {{productName}} account: your handle, your name, your bio and links, and who can find you.">
@@ -245,6 +246,24 @@
         <p class="projMsg" id="recordMsg" role="status" aria-live="polite"></p>
       </form>
     </section>
+
+    <!-- PROJECTS YOU BUILD ON — GET /my-projects building[], Leave → POST
+         /my-projects/:clientId/leave (task 1003774). Moved here from
+         /projects?view=mine by task 1004277: the owner's call of 2026-09-25 put it
+         on the builder's own profile, own view only, and with no hub profile page
+         built (/u/<handle> was abandoned) this page is that own view (the owner's
+         pick, 2026-10-06). Cross-project data, so never on a project hall's seat
+         profile. The rows are cosmos.css's .mineRow, as on /invitations. -->
+    <section class="aSec" id="aBuilding" aria-labelledby="aBuilding-h">
+      <h2 id="aBuilding-h">projects you build on</h2>
+      <p class="aSide">The projects you have joined as a builder. Only you see this list.</p>
+      <div class="aBody">
+        <p class="aWhat" id="buildingLoading">Reading the projects you build on…</p>
+        <p class="aWhat" id="buildingEmpty" hidden>You’re not building on any other projects yet.</p>
+        <ul class="mineRows" id="buildingList"></ul>
+        <p class="projMsg" id="buildingMsg" role="status" aria-live="polite"></p>
+      </div>
+    </section>
   </div>
 </main>
 
@@ -323,6 +342,12 @@
       $('loading').hidden = true;
       $('door').hidden = true;
       $('acctBody').hidden = false;
+      // a link to one section (/projects' "Open your account" names #aBuilding)
+      // lands on it: the browser looked for the anchor while the body was hidden
+      var hash = window.location && window.location.hash;
+      var target = hash && document.getElementById(hash.slice(1));
+      if (target && typeof target.scrollIntoView === 'function') target.scrollIntoView();
+      loadBuilding();
     }, function () { showAlert('Couldn’t reach the server — check your connection and refresh.'); });
   }
 
@@ -530,6 +555,68 @@
       : 'Cross-project record shown on your public profile.');
   });
 
+  // ---- projects you build on (task 1004277; the rows and Leave came from
+  // /projects?view=mine, task 1003774). Read once the account is shown, on its
+  // own: a failed read says so and never paints a false "not building on
+  // anything". The map's mineOrigins clean-up stayed behind with the map —
+  // /projects re-reads GET /my-projects whenever it is opened. ----
+  function hostOf(origin) {
+    return String(origin || '').replace(/^https?:\/\//, '').replace(/^www\./, '').replace(/\/.*$/, '').toLowerCase();
+  }
+  function rowEl(tag, cls) { var e = document.createElement(tag); if (cls) e.className = cls; return e; }
+  function loadBuilding() {
+    var msg = $('buildingMsg');
+    return request('GET', '/my-projects').then(function (res) {
+      $('buildingLoading').hidden = true;
+      if (!res.ok || !res.data) { say(msg, 'Couldn’t read the projects you build on — refresh in a moment.', 'err'); return; }
+      paintBuilding(res.data.building || []);
+    }, function () {
+      $('buildingLoading').hidden = true;
+      say(msg, 'Couldn’t reach the server — check your connection and refresh.', 'err');
+    });
+  }
+  function paintBuilding(rows) {
+    var ul = $('buildingList');
+    ul.textContent = '';
+    rows.forEach(function (m) { ul.appendChild(buildingRow(m)); });
+    $('buildingEmpty').hidden = rows.length > 0;
+  }
+  function buildingRow(m) {
+    var label = m.name || m.client_id;
+    var row = rowEl('li', 'mineRow');
+    var main = rowEl('div', 'mineRow__main');
+    var name = rowEl('div', 'mineRow__name');
+    name.textContent = label;
+    main.appendChild(name);
+    var host = hostOf(m.origin);
+    if (host) { var h = rowEl('span', 'mineRow__host'); h.textContent = host; main.appendChild(h); }
+    row.appendChild(main);
+    var actions = rowEl('div', 'mineRow__actions');
+    var btn = document.createElement('button');
+    btn.type = 'button';
+    btn.className = 'btn small ghost';
+    btn.textContent = 'Leave';
+    // every row's button reads Leave; the name says which project it leaves
+    btn.setAttribute('aria-label', 'Leave ' + label);
+    btn.addEventListener('click', function () { leave(m.client_id, label, row, btn); });
+    actions.appendChild(btn);
+    row.appendChild(actions);
+    return row;
+  }
+  function leave(clientId, label, row, btn) {
+    var msg = $('buildingMsg');
+    function restore() { btn.disabled = false; btn.textContent = 'Leave'; }
+    btn.disabled = true;
+    btn.textContent = 'Leaving…';
+    request('POST', '/my-projects/' + encodeURIComponent(clientId) + '/leave').then(function (res) {
+      if (res.status === 401) { restore(); sessionGone(msg); return; }
+      if (!res.ok) { restore(); say(msg, 'Couldn’t leave ' + label + '. Try again.', 'err'); return; }
+      row.remove();
+      say(msg, 'You left ' + label + '.', 'ok');
+      if (!$('buildingList').children.length) $('buildingEmpty').hidden = false;
+    }, function () { restore(); say(msg, 'Couldn’t reach the server. Try again.', 'err'); });
+  }
+
   // The identity read failing is not a sign-out. If the account itself was
   // read, the chip names it from that answer, so the way out is never lost.
   load().then(function () { return bar.ready; }).then(function () {

package/modules/public-landing/public/account.probes.json

@@ -30,6 +30,15 @@
     { "name": "hiding the record saves hide_stats alone", "continue": true,
       "steps": [["click", "#aRecord .aOpt:nth-child(2)"], ["click", "#recordSave"], ["wait", 400]],
       "expect": { "text": [["#recordMsg", "Cross-project record hidden — removed from your profile and directories immediately."]], "checked": "input[name=record][value=hide]" } },
+    { "name": "projects you build on (task 1004277): one row per project, each with its own Leave", "auth": true, "width": 1440, "url": "/account#aBuilding",
+      "steps": [["wait", 500]],
+      "expect": { "count": [["#buildingList .mineRow", 2]], "attr": [["#buildingList .mineRow:first-child button", "aria-label", "Leave Example World"], ["#buildingList .mineRow:last-child button", "aria-label", "Leave Emersonian Circles"]], "hidden": ["#buildingEmpty"] } },
+    { "name": "Leave drops the row and says so", "continue": true,
+      "steps": [["click", "#buildingList .mineRow:first-child button"], ["wait", 300]],
+      "expect": { "count": [["#buildingList .mineRow", 1]], "text": [["#buildingMsg", "You left Example World."]], "hidden": ["#buildingEmpty"] } },
+    { "name": "leaving the last project shows the empty line", "continue": true,
+      "steps": [["click", "#buildingList .mineRow:first-child button"], ["wait", 300]],
+      "expect": { "count": [["#buildingList .mineRow", 0]], "text": [["#buildingMsg", "You left Emersonian Circles."], ["#buildingEmpty", "You’re not building on any other projects yet."]], "visible": ["#buildingEmpty"] } },
     { "name": "the hub's bar: the chip names the person, both bands closed, the page starts under the bar (task 1004455)", "auth": true, "width": 1440,
       "steps": [["wait", 400]],
       "expect": { "expanded": false, "top": [["#acct", 64]], "visible": ["#projTrig", "#who"], "hidden": ["#signinTop", "#menuProjects", "#menuProfile"], "text": [["#whoLogin", "builder"]], "count": [["#mapQ", 0]] } },

package/modules/public-landing/public/account.states.json

@@ -1,5 +1,5 @@
 {
-  "_": "The account page's states for modules/ui-design/kit/render.js (task 1004259, ADR 0337 D4.3): signed out it is the sign-in door and nothing else; signed in it is the hub's bar (task 1004455: the identity chip from GET /me, the Projects band and the profile band with Account current) over the four sections, painted from the stub's one account (fixtures/me__cross-project.json — public, recruiters following the profile setting, a bio and two links). Dark only, like every apex page (ADR 0204). The private, hidden, not-yet-published account renders from account-private.states.json.",
+  "_": "The account page's states for modules/ui-design/kit/render.js (task 1004259, ADR 0337 D4.3): signed out it is the sign-in door and nothing else; signed in it is the hub's bar (task 1004455: the identity chip from GET /me, the Projects band and the profile band with Account current) over the five sections, painted from the stub's one account (fixtures/me__cross-project.json — public, recruiters following the profile setting, a bio and two links), the fifth being the projects you build on, from fixtures/my-projects.json (task 1004277; in-building lands on it through /account#aBuilding). Dark only, like every apex page (ADR 0204). The private, hidden, not-yet-published account renders from account-private.states.json.",
   "page": "/account",
   "surface": "public-landing",
   "modes": ["dark"],
@@ -12,6 +12,7 @@
     "in": { "auth": true, "actions": [["wait", 400]], "expect": { "visible": ["#acctBody", "#fName", "#fBio", "#fHandle", "#recWhat", "#recordLine", "#who"], "text": [["#whoLogin", "builder"], ["#recordLine", "Your record: 3 projects · 1000 credits · 19 works shipped · 10 karma."]], "hidden": ["#door", "#loading", "#signinTop", "#menuProjects", "#menuProfile"], "value": [["#fHandle", "builder"], ["#fName", "A Builder"], ["#fLinkX", "https://x.com/builder"]] } },
     "in-projects-band": { "auth": true, "actions": [["wait", 400], ["click", "#projTrig"], ["wait", 300]], "expect": { "visible": ["#menuProjects", "#mineCell"], "hidden": ["#menuProfile"] } },
     "in-profile-band": { "auth": true, "actions": [["wait", 400], ["click", "#who"], ["wait", 300]], "expect": { "visible": ["#menuProfile"], "hidden": ["#menuProjects"], "text": [["#bandWhoLogin", "builder"], ["#menuProfile [aria-current=\"page\"]", "Account"]] } },
+    "in-building": { "auth": true, "url": "/account#aBuilding", "actions": [["wait", 500]], "expect": { "visible": ["#aBuilding", "#buildingList"], "hidden": ["#buildingEmpty", "#buildingLoading"], "count": [["#buildingList .mineRow", 2]], "text": [["#buildingList .mineRow:first-child .mineRow__name", "Example World"], ["#buildingList .mineRow:first-child .mineRow__host", "example.com"]], "attr": [["#buildingList .mineRow:first-child button", "aria-label", "Leave Example World"]] } },
     "in-privacy": { "auth": true, "actions": [["wait", 400], ["click", "#aPrivacy .aOpt:nth-child(2)"], ["wait", 150]], "expect": { "checked": "input[name=visibility][value=private]", "text": [["#recWhat", "They will see your name, your picture, your roles, and whether you have been active in the last 30 days — never your credits, works shipped, karma, or the projects you build on. This is the one thing a recruiter can see while your profile page is private. Turning this off removes you from both recruiting surfaces — the recruiting directory, and a recruiter’s look-up of one builder — straight away. · For now this follows your profile page setting."]] } }
   },
   "reducedMotion": { "auth": true, "actions": [["wait", 300]] }

package/modules/public-landing/public/assets/cosmos.css

@@ -1305,6 +1305,9 @@ p.sec-p{font-size:var(--fs-lede);font-weight:500;color:var(--ink-soft);line-heig
    (this content is a stacked list, not a label/value pair). ── */
 .mineExtra section{margin-top:30px;padding-top:26px;border-top:1px solid var(--rule-soft);}
 .mineExtra h2{font-family:var(--font-display);font-weight:300;font-size:clamp(20px,2.2vw,24px);letter-spacing:-.02em;line-height:1.15;text-transform:lowercase;color:var(--ink);margin:0 0 14px;}
+/* the mine view's two ways out (to /invitations and /account) are links in a
+   sentence; inline-block lets each clear the kit's 24px target floor */
+#view-mine .mineExtra .lede a{display:inline-block;min-height:24px;}
 .mineRows{list-style:none;display:flex;flex-direction:column;gap:0;margin:0;padding:0;}
 .mineRow{display:flex;align-items:center;justify-content:space-between;gap:16px;padding:14px 0;border-top:1px solid var(--rule-soft);}
 .mineRows .mineRow:first-child{border-top:0;}

package/modules/public-landing/public/invitations.html

@@ -197,6 +197,12 @@
       return (u.protocol === 'https:' || u.protocol === 'http:') ? u.href : '';
     } catch (e) { return ''; }
   }
+  /* hostOf is for DISPLAY: it tolerates a bare or half-typed address and drops
+     a leading www, so a row reads "example.com". pickHost (the join picker,
+     below) is for MATCHING: new URL().host keeps www and any port, so it agrees
+     exactly with the origins the server stores, and the picker's mine/applied
+     maps and the "Applied" echo key on that. Folding one into the other would
+     either mislabel rows or miss matches. */
   function hostOf(origin) {
     return String(origin || '').replace(/^https?:\/\//, '').replace(/^www\./, '').replace(/\/.*$/, '').toLowerCase();
   }
@@ -222,16 +228,16 @@
     return row;
   }
 
-  /* the leave/decline shape: disable, POST, drop the row on success, restore
-     the button on failure. `onRemoved` carries whatever else the caller needs
-     after the row is gone (the empty-line flip). */
-  function postThenRemoveRow(url, row, btn, idleLabel, onRemoved) {
+  /* the decline shape: disable, POST, drop the row on success, re-enable the
+     button on failure. `onRemoved` carries whatever else the caller needs after
+     the row is gone (the empty-line flip). The busy/idle label swap the /projects
+     copy carries is for its Leave button, which never moved here. */
+  function postThenRemoveRow(url, row, btn, onRemoved) {
     btn.disabled = true;
-    if (idleLabel) btn.textContent = idleLabel.busy;
     fetch(url, { method: 'POST', credentials: 'same-origin' })
       .then(function (r) { return r.ok ? r.json() : Promise.reject(); })
       .then(function () { row.remove(); if (onRemoved) onRemoved(); })
-      .catch(function () { btn.disabled = false; if (idleLabel) btn.textContent = idleLabel.idle; });
+      .catch(function () { btn.disabled = false; });
   }
 
   /* Each invitation renders as a way IN, never an Accept button: the hub's own
@@ -266,7 +272,7 @@
       decline.textContent = 'Decline';
       decline.addEventListener('click', function () {
         postThenRemoveRow(
-          API + '/my-projects/invites/' + encodeURIComponent(inv.client_id) + '/decline', row, decline, null,
+          API + '/my-projects/invites/' + encodeURIComponent(inv.client_id) + '/decline', row, decline,
           paintInvitesSection
         );
       });
@@ -856,8 +862,11 @@
     list.hidden = false;
     input.setAttribute('aria-expanded', 'true');
   }
+  /* once the feed is cached a keystroke renders once; only the first open
+     paints "Loading projects…" and then re-renders when the reads settle */
   function openPicker() {
     renderPicker();
+    if (picker.projects) return;
     loadPicker().then(function () {
       if (document.activeElement === $('joinOrigin')) renderPicker();
     });

package/modules/public-landing/public/projects.html

@@ -955,20 +955,22 @@ summary{min-height:24px;padding:3px 0;}
         <ul class="projects" id="projectsList"></ul>
         <p class="finePrint">Buttons here ask the platform to act; each row reports only what was verified, and when. A standup keeps going even with this tab closed.</p>
 
-        <!-- ══ PROJECTS YOU BUILD ON (task 1003774) · the way to INVITATIONS ══
+        <!-- ══ the ways to INVITATIONS and to PROJECTS YOU BUILD ON ══
              The invitations (a project's own, a guild's, a guild's engagements, the
              requests to a guild you own) and the join-by-address field have their own
-             page since task 1004276 (the owner's call, ADR 0337 D5): /invitations. ══ -->
+             page since task 1004276 (the owner's call, ADR 0337 D5): /invitations.
+             The projects you build on, with Leave (task 1003774), moved to the
+             account page with task 1004277: the owner put them on the builder's own
+             profile, and /account is the hub's own view of it. ══ -->
         <div class="mineExtra">
           <section aria-labelledby="mineToInvitesH">
             <h2 id="mineToInvitesH">Invitations</h2>
             <p class="lede">Invitations from projects and guilds, and applying to a project by its address, have their own page. <a href="/invitations">Open your invitations</a></p>
           </section>
 
-          <section aria-labelledby="mineBuildingH">
-            <h2 id="mineBuildingH">Projects you build on</h2>
-            <p class="mineEmpty" id="buildingEmpty" hidden>You’re not building on any other projects yet.</p>
-            <ul class="mineRows" id="buildingList"></ul>
+          <section aria-labelledby="mineToAccountH">
+            <h2 id="mineToAccountH">Projects you build on</h2>
+            <p class="lede">The projects you build on, and leaving one, are on your account page. <a href="/account#aBuilding">Open your account</a></p>
           </section>
         </div>
       </section>
@@ -2522,10 +2524,10 @@ summary{min-height:24px;padding:3px 0;}
       : '%3Fview%3D' + v + idPart.replace('&', '%26').replace('=', '%3D');
     $('signinTop').href = '/api/bongos/auth/web/start?return=/projects' + backPart + '&repos=1';
     /* the mine view is the only one that polls; it re-reads on entry so a
-       card that changed while you were on the map is not stale — including
-       the membership list (task 1003774), the same re-read
-       refreshList() already does for owned instances */
-    if (v === 'mine' && me) { refreshList(); loadMemberships(); }
+       card that changed while you were on the map is not stale. (It re-read
+       the memberships too while it listed the projects you build on; that
+       list is /account's since task 1004277.) */
+    if (v === 'mine' && me) refreshList();
     /* manage re-reads its project on entry — no timer lives here (C8) */
     if (v === 'manage') loadManage();
     /* owned chips refresh on re-entry, never on a timer — C8 keeps the map quiet */
@@ -3525,23 +3527,13 @@ summary{min-height:24px;padding:3px 0;}
      401 (signed out) is not an error here. */
   function loadMemberships() {
     return fetch(API + '/my-projects', { credentials: 'same-origin' })
-      .then(function (res) {
-        return res.ok
-          ? res.json().then(function (d) { return { ok: true, d: d }; })
-          : { ok: false, d: { owned: [], building: [], applied: [] } };
-      })
-      .then(function (r) {
-        var d = r.d;
+      .then(function (res) { return res.ok ? res.json() : { owned: [], building: [], applied: [] }; })
+      .then(function (d) {
         mineOrigins = {};
         appliedOrigins = {};
         (d.owned || []).forEach(function (m) { if (m.origin) mineOrigins[hostOf(m.origin)] = 'owner'; });
         (d.building || []).forEach(function (m) { if (m.origin) mineOrigins[hostOf(m.origin)] = 'builder'; });
         (d.applied || []).forEach(function (m) { if (m.origin) appliedOrigins[hostOf(m.origin)] = true; });
-        /* only a genuinely successful read may repaint "Projects you build on" —
-           a transient failure resets the map's origin maps (as before) but must
-           not overwrite the list with a false "not building on anything" empty
-           state on every re-entry to this view (task 1003774) */
-        if (r.ok) renderBuildingList(d.building || []);
       })
       .catch(function () { mineOrigins = {}; appliedOrigins = {}; });
   }
@@ -3569,65 +3561,6 @@ summary{min-height:24px;padding:3px 0;}
       .catch(function () { ownedInstances = []; ownedByHost = {}; });
   }
 
-  /* ── the building-on rows (task 1003774; the invitation rows moved to
-     /invitations with task 1004276) ── Same row shape as that page's lists: a name, its host in the mono face, and one
-     action on the right. textContent-only, matching the deleted hall page
-     this restores. */
-  function mineEl(tag, cls) { var e = document.createElement(tag); if (cls) e.className = cls; return e; }
-  function mineRow(p) {
-    var row = mineEl('li', 'mineRow');
-    var main = mineEl('div', 'mineRow__main');
-    var name = mineEl('div', 'mineRow__name');
-    name.textContent = p.name || p.client_id;
-    main.appendChild(name);
-    var host = hostOf(p.origin);
-    if (host) { var h = mineEl('span', 'mineRow__host'); h.textContent = host; main.appendChild(h); }
-    row.appendChild(main);
-    return row;
-  }
-
-  /* the leave/decline shape: disable, POST, drop the row on success, restore
-     the button on failure. `onRemoved` carries whatever else the caller needs
-     after the row is gone (the empty-state flip, the mineOrigins cleanup). */
-  function postThenRemoveRow(url, row, btn, idleLabel, onRemoved) {
-    btn.disabled = true;
-    if (idleLabel) btn.textContent = idleLabel.busy;
-    fetch(url, { method: 'POST', credentials: 'same-origin' })
-      .then(function (r) { return r.ok ? r.json() : Promise.reject(); })
-      .then(function () { row.remove(); if (onRemoved) onRemoved(); })
-      .catch(function () { btn.disabled = false; if (idleLabel) btn.textContent = idleLabel.idle; });
-  }
-
-  function renderBuildingList(rows) {
-    var ul = $('buildingList');
-    ul.textContent = '';
-    (rows || []).forEach(function (m) {
-      var row = mineRow(m);
-      var actions = mineEl('div', 'mineRow__actions');
-      var btn = document.createElement('button');
-      btn.type = 'button';
-      btn.className = 'btn small ghost';
-      btn.textContent = 'Leave';
-      btn.addEventListener('click', function () {
-        postThenRemoveRow(
-          API + '/my-projects/' + encodeURIComponent(m.client_id) + '/leave', row, btn,
-          { busy: 'Leaving…', idle: 'Leave' },
-          /* the map reads mineOrigins for its "you build here" pill and Apply
-             button — clear this project's entry so a leave takes effect there
-             on the next repaint too, not just in this list (task 1003774) */
-          function () {
-            delete mineOrigins[hostOf(m.origin)];
-            if (!ul.children.length) $('buildingEmpty').hidden = false;
-          }
-        );
-      });
-      actions.appendChild(btn);
-      row.appendChild(actions);
-      ul.appendChild(row);
-    });
-    $('buildingEmpty').hidden = !!(rows && rows.length);
-  }
-
   /* the relay the map's per-card Apply (submitApply) drives — POST
      /my-projects/join, the 401 case and the 'requested' echo update kept in ONE
      place (task 1003774). /invitations carries the same relay for its join field

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.67",
+  "version": "1.21.69",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.21.67",
+      "version": "1.21.69",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.67",
+  "version": "1.21.69",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -9182,5 +9182,17 @@
       "id": "1004257",
       "text": "The cloudbongos.com landing page now has a \"Download the CLI\" button in its closing section. It picks the right download for the visitor's computer and lists the others. It stays hidden until a CLI release is published, so not"
     }
+  ],
+  "1.21.68": [
+    {
+      "id": "1004589",
+      "text": "The /invitations project picker now draws its list once per keystroke instead of twice. Nothing looks different."
+    }
+  ],
+  "1.21.69": [
+    {
+      "id": "1004277",
+      "text": "The projects you build on, with their Leave buttons, now live on your account page. My projects links there."
+    }
   ]
 }

package/src/module-api.js

@@ -75,7 +75,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // MAJOR (see allowBoxScope below): passes the request through untouched.
 function deprecatedNoopMiddleware(_req, _res, next) { next(); }
 
-const CORE_VERSION = '1.21.67'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.21.69'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('discord'); log.info('mounted');

package/tests/card_apply_ui.mjs

@@ -246,7 +246,6 @@ test('loadMemberships reads GET /my-projects\' applied echo into appliedOrigins,
     API: '/api/bongos',
     mineOrigins: {},
     appliedOrigins: {},
-    renderBuildingList: () => {},
     hostOf: (o) => String(o || '').replace(/^https?:\/\//, '').replace(/^www\./, '').replace(/\/.*$/, '').toLowerCase(),
     fetch: () => Promise.resolve({
       ok: true,

package/tests/hub_account_page.mjs

@@ -81,7 +81,7 @@ test('the script builds no markup from strings, and the controls are real markup
 test('the door returns here, and the page calls only its own-scoped routes', () => {
   assert.match(PAGE, /href="\/api\/bongos\/auth\/web\/start\?return=\/account&repos=1"/, 'sign-in lands back on /account, asking for repo access once (task 1004549)');
   const calls = [...SCRIPT.matchAll(/request\('(GET|PATCH|POST)', '([^']+)'/g)].map((m) => `${m[1]} ${m[2]}`);
-  assert.deepEqual([...new Set(calls)].sort(), ['GET /me/cross-project', 'PATCH /me/cross-project', 'PATCH /me/handle', 'PATCH /me/profile'].sort());
+  assert.deepEqual([...new Set(calls)].sort(), ['GET /me/cross-project', 'PATCH /me/cross-project', 'PATCH /me/handle', 'PATCH /me/profile', 'GET /my-projects', 'POST /my-projects/'].sort());
   // the bar's two calls live in the shared asset: the identity read and sign out
   const barCalls = [...BAR.matchAll(/fetch\(API \+ '([^']+)', \{ method: '(GET|POST)'/g)].map((m) => `${m[2]} ${m[1]}`);
   assert.deepEqual(barCalls.sort(), ['GET /me', 'POST /auth/logout']);
@@ -180,14 +180,27 @@ const ACCOUNT = () => ({
 function boot(answer) {
   const els = new Map();
   const listeners = (o) => { o._on = {}; o.addEventListener = (t, f) => { (o._on[t] ||= []).push(f); }; return o; };
-  const el = (id, hidden, attrs) => listeners({
-    id, hidden, attrs, value: '', textContent: '', className: '', disabled: false, style: {},
-    appendChild(c) { this.textContent += c.textContent; return c; },
+  // textContent reads the node's own text plus its children's, and setting it
+  // drops the children, as in the browser — so a list can be built, read and
+  // emptied (the projects you build on, task 1004277)
+  const withChildren = (o) => {
+    o.children = [];
+    o._text = '';
+    Object.defineProperty(o, 'textContent', {
+      get() { return o._text + o.children.map((c) => c.textContent).join(''); },
+      set(v) { o._text = String(v); o.children = []; },
+    });
+    o.appendChild = (c) => { c.parent = o; o.children.push(c); return c; };
+    o.remove = () => { if (o.parent) o.parent.children = o.parent.children.filter((c) => c !== o); };
+    return o;
+  };
+  const el = (id, hidden, attrs) => withChildren(listeners({
+    id, hidden, attrs, value: '', className: '', disabled: false, style: {},
     getAttribute(n) { return n in attrs ? attrs[n] : null; },
     setAttribute(n, v) { attrs[n] = v; },
     closest(sel) { return sel === '.trig' && /\btrig\b/.test(attrs.class || '') ? this : null; },
     focus() { dom.focused = id; document.activeElement = this; },
-  });
+  }));
   for (const m of PAGE.matchAll(/<(\w+)([^>]*?)\sid="([\w-]+)"([^>]*)>/g)) {
     const attrs = Object.fromEntries([...(m[2] + m[4]).matchAll(/\s([\w-]+)="([^"]*)"/g)].map((a) => [a[1], a[2]]));
     els.set(m[3], el(m[3], /\shidden\b/.test(m[2] + m[4]), attrs));
@@ -262,7 +275,10 @@ function boot(answer) {
       if (!names.length) throw new Error(`unstubbed selector: ${sel}`);
       return radios.filter((r) => names.includes(r.name));
     },
-    createElement: () => ({ className: '', textContent: '' }),
+    createElement: (tag) => {
+      const attrs = {};
+      return withChildren(listeners({ tag, attrs, className: '', disabled: false, setAttribute(n, v) { attrs[n] = String(v); } }));
+    },
   };
   const fetch = (url, init = {}) => {
     const method = init.method || 'GET';
@@ -440,6 +456,116 @@ test('a session that expired mid-edit reopens the door instead of failing silent
   assert.equal(dom.els.get('signinTop').hidden, false);
 });
 
+// ── 3a. the projects you build on (task 1004277) ─────────────────────────────
+// Moved here from /projects?view=mine (task 1003774's list and Leave): the owner
+// put it on the builder's own profile, own view only, and with no hub profile
+// page built, /account is that view (the owner's pick, 2026-10-06).
+
+const BUILDING = [
+  { client_id: 'otb', name: 'Example World', origin: 'https://www.example.com/' },
+  { client_id: 'a b', name: null, origin: 'https://emersonian.cloudbongos.com' },
+];
+const building = (rows, leave = () => ({ status: 200, data: { ok: true, left: true } })) => (m, p) => {
+  if (m === 'GET' && p === '/me/cross-project') return { status: 200, data: ACCOUNT() };
+  if (m === 'GET' && p === '/my-projects') return rows ? { status: 200, data: { owned: [], building: rows, applied: [] } } : { status: 500, data: null };
+  if (m === 'POST' && /^\/my-projects\/[^/]+\/leave$/.test(p)) return leave(p);
+  return { status: 500, data: null };
+};
+const rowsOf = (dom) => dom.els.get('buildingList').children;
+const leaveOf = (row) => row.children[1].children[0];
+
+test('the section ships inside the signed-in body, last, as a list with an empty line and a status line', () => {
+  const body = PAGE.split('<div id="acctBody" hidden>')[1].split('</main>')[0];
+  const sec = (body.match(/<section class="aSec" id="aBuilding" aria-labelledby="aBuilding-h">[\s\S]*?<\/section>/) || [''])[0];
+  assert.ok(sec, 'the projects you build on are a section of the account body');
+  assert.ok(body.indexOf('id="aBuilding"') > body.indexOf('id="aRecord"'), 'after your record, which counts them');
+  assert.match(sec, /<h2 id="aBuilding-h">projects you build on<\/h2>/);
+  assert.match(sec, /<p class="aWhat" id="buildingEmpty" hidden>/, 'the empty line waits for a read that says so');
+  assert.match(sec, /<ul class="mineRows" id="buildingList"><\/ul>/, 'the rows are cosmos.css’s, as on /invitations');
+  assert.match(sec, /<p class="projMsg" id="buildingMsg" role="status" aria-live="polite"><\/p>/);
+});
+
+test('signed in: the list is read once, after the account, and each row names its project and host with its own Leave', async () => {
+  const dom = boot(building(BUILDING));
+  await settle();
+  assert.deepEqual(dom.calls.filter((c) => c.method === 'GET' && c.path !== '/me').map((c) => c.path), ['/me/cross-project', '/my-projects']);
+  assert.equal(dom.els.get('buildingLoading').hidden, true);
+  assert.equal(dom.els.get('buildingEmpty').hidden, true);
+  const rows = rowsOf(dom);
+  assert.equal(rows.length, 2);
+  assert.equal(rows[0].className, 'mineRow');
+  assert.equal(rows[0].children[0].children[0].textContent, 'Example World');
+  assert.equal(rows[0].children[0].children[1].textContent, 'example.com', 'the host, without scheme, www or path');
+  assert.equal(rows[1].children[0].children[0].textContent, 'a b', 'no name: the client id stands in');
+  assert.equal(leaveOf(rows[0]).textContent, 'Leave');
+  assert.equal(leaveOf(rows[0]).attrs['aria-label'], 'Leave Example World', 'every button reads Leave; its name says which project');
+  assert.equal(leaveOf(rows[0]).className, 'btn small ghost');
+});
+
+test('nothing built on: the empty line shows; a failed read says so and never claims the list is empty', async () => {
+  const none = boot(building([]));
+  await settle();
+  assert.equal(rowsOf(none).length, 0);
+  assert.equal(none.els.get('buildingEmpty').hidden, false);
+  assert.match(PAGE, /id="buildingEmpty" hidden>You’re not building on any other projects yet\.<\/p>/);
+
+  const failed = boot(building(null));
+  await settle();
+  assert.equal(failed.els.get('buildingEmpty').hidden, true, 'a failed read is not "nothing"');
+  assert.equal(failed.els.get('buildingLoading').hidden, true);
+  assert.equal(failed.text('buildingMsg'), 'Couldn’t read the projects you build on — refresh in a moment.');
+  assert.equal(failed.els.get('buildingMsg').className, 'projMsg err');
+});
+
+test('Leave posts to the project’s own client id, says so while it goes, drops the row, and the last one shows the empty line', async () => {
+  const dom = boot(building(BUILDING));
+  await settle();
+  const [first] = rowsOf(dom);
+  dom.click(leaveOf(first));
+  assert.equal(leaveOf(first).disabled, true);
+  assert.equal(leaveOf(first).textContent, 'Leaving…');
+  await settle();
+  assert.equal(dom.calls.filter((c) => c.method === 'POST')[0].path, '/my-projects/otb/leave');
+  assert.equal(rowsOf(dom).length, 1, 'the row is gone once the server says so');
+  assert.equal(dom.text('buildingMsg'), 'You left Example World.');
+  assert.equal(dom.els.get('buildingMsg').className, 'projMsg ok');
+  assert.equal(dom.els.get('buildingEmpty').hidden, true, 'one left still');
+
+  dom.click(leaveOf(rowsOf(dom)[0]));
+  await settle();
+  assert.equal(dom.calls.filter((c) => c.method === 'POST')[1].path, '/my-projects/a%20b/leave', 'the id is encoded, never spliced raw');
+  assert.equal(rowsOf(dom).length, 0);
+  assert.equal(dom.els.get('buildingEmpty').hidden, false, 'and with the last gone, the empty line');
+});
+
+test('a refused Leave keeps the row and its button, and an expired session opens the door', async () => {
+  const refused = boot(building(BUILDING, () => ({ status: 500, data: { error: { code: 'leave_failed', message: 'internal error' } } })));
+  await settle();
+  const row = rowsOf(refused)[0];
+  refused.click(leaveOf(row));
+  await settle();
+  assert.equal(rowsOf(refused).length, 2);
+  assert.equal(leaveOf(row).disabled, false);
+  assert.equal(leaveOf(row).textContent, 'Leave');
+  assert.equal(refused.text('buildingMsg'), 'Couldn’t leave Example World. Try again.', 'plain words, not the server’s "internal error"');
+  assert.equal(refused.els.get('buildingMsg').className, 'projMsg err');
+
+  const expired = boot(building(BUILDING, () => ({ status: 401, data: null })));
+  await settle();
+  expired.click(leaveOf(rowsOf(expired)[0]));
+  await settle();
+  assert.equal(rowsOf(expired).length, 2);
+  assert.equal(expired.els.get('door').hidden, false);
+  assert.equal(expired.els.get('acctBody').hidden, true);
+});
+
+test('/projects keeps no copy: the mine view points here, and nothing there reads or leaves the list', () => {
+  assert.doesNotMatch(HUB, /id="buildingList"|renderBuildingList|\/leave'/, 'the list and Leave moved here whole');
+  assert.match(HUB, /<h2 id="mineToAccountH">Projects you build on<\/h2>\s*<p class="lede">[^<]*<a href="\/account#aBuilding">Open your account<\/a><\/p>/, 'the mine view says where they went');
+  assert.match(HUB, /\(d\.building \|\| \[\]\)\.forEach\(function \(m\) \{ if \(m\.origin\) mineOrigins\[hostOf\(m\.origin\)\] = 'builder'; \}\);/, 'the map still reads who you build with');
+  assert.match(SCRIPT, /if \(target && typeof target\.scrollIntoView === 'function'\) target\.scrollIntoView\(\);/, 'and #aBuilding lands on the section once the body shows');
+});
+
 // ── 3b. the bar, executed (task 1004455) ─────────────────────────────────────
 
 const ME = { builder: { id: '1', github_login: 'octocat', avatar_url: 'https://avatars.example/u/1' } };

package/tests/hub_invitations_page.mjs

@@ -253,6 +253,21 @@ test('the picker lists the map minus the hub, an anonymous row and your own proj
   assert.equal(ui.$('joinOrigin').value, '', 'an Applied row cannot be picked again');
 });
 
+test('the picker: once the map is cached, a keystroke renders the list once (task 1004589)', async () => {
+  const ui = await boot({ me: { github_login: 'octocat' }, reads: { '/projects/featured': FEED, '/my-projects': MINE } });
+  const input = ui.$('joinOrigin');
+  let renders = 0;
+  const set = input.setAttribute;
+  input.setAttribute = (k, v) => { if (k === 'aria-expanded' && v === 'true') renders++; return set(k, v); };
+  await ui.fire(input, 'focus');
+  assert.equal(renders, 2, 'the first open paints "Loading projects…", then the list when the reads settle');
+  renders = 0;
+  input.value = 'grove';
+  await ui.fire(input, 'input');
+  assert.equal(renders, 1, 'not a second time when the already-settled read resolves again');
+  assert.deepEqual(optionsOf(ui).map((o) => o.children[0].textContent), ['The Grove']);
+});
+
 test('the picker narrows by name or address, and the keyboard picks: arrows skip an Applied row, Enter fills the address, Escape closes', async () => {
   const ui = await boot({ me: { github_login: 'octocat' }, reads: { '/projects/featured': FEED, '/my-projects': MINE } });
   const input = ui.$('joinOrigin');