@bongos/core 1.23.11 → 1.23.13

package/modules/public-landing/public/community.html

@@ -16,6 +16,11 @@
      their own. The one viewer-relative page is the recruiter list: drawn only from a 200 of
      GET /scouting, whose door (a project owner, or project.curate) is the server's, never
      this page's (scouting-authz.js). A 401 or 403 draws no row.
+     THE RECRUIT DOOR (task 1002292; spec D6, owner 2026-10-27): a project OWNER (GET
+     /my-projects `owned`) gets a Recruit link on each leaderboard and search row. The hub
+     cannot read a project's project.recruit, which lives on that project (ADR 0335 D1), so
+     ownership stands in. The link only opens the project's own hall invite box with the
+     login filled in (ADR 0353); the project decides. The rows themselves never change.
      Hub-only, like /account: platform-server.js serves /community only where
      platform-identity is on. noindex until the SEO goal decides (owner, 2026-10-27).
      Server-stamped like the footer doors: {{…}} tokens filled by landingPage(). -->
@@ -69,19 +74,29 @@
 .connAv{width:36px;height:36px;border-radius:50%;flex:none;object-fit:cover;background:color-mix(in srgb,var(--ink) 12%,transparent);}
 .commRow .mineRow__name,.connWho .mineRow__name{overflow-wrap:anywhere;}
 /* the two dropdowns (the window, the search's craft): the field's pill */
-.commWhen select,.commFind select{flex:0 1 auto;min-height:44px;padding:0 14px;font:inherit;font-size:14.5px;color:var(--ink);
+.commWhen select,.commFind select,.commFor select{flex:0 1 auto;min-height:44px;padding:0 14px;font:inherit;font-size:14.5px;color:var(--ink);
   background:var(--bg-card);border:1px solid var(--ctl-line);border-radius:var(--radius-pill);cursor:pointer;}
-.commWhen select:focus-visible,.commFind input:focus-visible,.commFind select:focus-visible{outline:2px solid var(--focus);outline-offset:3px;box-shadow:0 0 0 8px var(--bg);}
+.commWhen select:focus-visible,.commFind input:focus-visible,.commFind select:focus-visible,.commFor select:focus-visible{outline:2px solid var(--focus);outline-offset:3px;box-shadow:0 0 0 8px var(--bg);}
 #findStatus{margin-top:8px;}
+/* the Recruit door, a project owner's only (task 1002292): what it opens, or which
+   project it recruits to; then a fifth column after the credits, where your own row
+   keeps an invisible twin so every row's credits line up */
+.commFor{display:flex;flex-wrap:wrap;align-items:center;gap:6px 10px;margin:6px 0 4px;max-width:62ch;font-size:13.5px;line-height:1.5;color:var(--ink-soft);}
+#findFor{margin-top:12px;}
+.commRows.canRecruit .commRow{grid-template-columns:3ch 36px minmax(0,1fr) auto auto;}
+.commGap{visibility:hidden;}
 /* the recruiter list, signed out: the account page's door */
 .commDoor{padding:8px 0 10px;max-width:62ch;}
 .commDoor p{margin:0 0 18px;font-size:15px;line-height:1.55;color:var(--ink-soft);}
 .commDoor .gh{width:18px;height:18px;fill:currentColor;}
 .commDoor .btn{text-transform:none;}
 @media (max-width:480px){
-  .commRow{grid-template-columns:3ch 32px minmax(0,1fr) auto;gap:0 10px;}
+  .commRow,.commRows.canRecruit .commRow{grid-template-columns:3ch 32px minmax(0,1fr) auto;gap:0 10px;}
   .commRow .connAv{width:32px;height:32px;}
   .commNum{font-size:19px;}
+  /* no room for a fifth column: Recruit drops under the name, as a row's actions do */
+  .commRow .commRecruit{grid-column:3/-1;justify-self:start;margin-top:8px;}
+  .commGap{display:none;}
 }
 </style>
 </head>
@@ -176,6 +191,7 @@
         </div>
       </div>
       <p class="commNote" id="boardNote">{{Currency}} earned across every project, since each builder started.</p>
+      <div class="commFor" id="boardFor" hidden></div>
       <p class="commMsg" id="boardLoading" role="status">Reading the leaderboard…</p>
       <p class="projMsg err" id="boardFailed" role="alert" hidden></p>
       <p class="commMsg" id="boardEmpty" hidden></p>
@@ -201,6 +217,7 @@
         </select>
         <button id="findBtn" type="submit" class="btn small">Search</button>
       </form>
+      <div class="commFor" id="findFor" hidden></div>
       <p class="projMsg" id="findStatus" role="status" aria-live="polite"></p>
       <ul class="mineRows" id="findList"></ul>
     </section>
@@ -259,8 +276,9 @@
   var UNIT = $('boardList').getAttribute('data-unit') || 'credits';
 
   /* THREE THINGS THESE PAGES MUST NOT DO (ADR 0217 D1, ADR 0337 D4.1, ADR 0255):
-       1. differ for a viewer anywhere but the recruiter list — the leaderboard and the
-          search are drawn from viewer-independent reads, and neither asks /me;
+       1. differ for a viewer anywhere but the recruiter list and the Recruit door — the
+          leaderboard and the search rows come from viewer-independent reads, and a
+          project owner only gains a link on each (task 1002292, spec D6);
        2. draw a recruiter row from anything but a 200 of GET /scouting, or draw more of a
           name-only row than its name, face and login;
        3. re-rank, re-filter or re-count what the server sent — rows are drawn in the
@@ -317,6 +335,36 @@
     return arr(list).map(function (d) { return CRAFT_WORD[d] || String(d); }).join(' · ');
   }
 
+  // ── the Recruit door: a project owner's link on each row (task 1002292) ─────
+  // Who sees it is GET /my-projects' `owned` (owner, 2026-10-27): the hub cannot read a
+  // project's project.recruit. Where it goes is invite-notices.js hallInviteUrl's shape,
+  // the project's hall invite box, which only fills the name in; the project decides.
+  var recruit = { to: [], pick: 0, me: '' };
+  function originOf(raw) {
+    try {
+      var u = new URL(String(raw));
+      return (u.protocol === 'https:' || u.protocol === 'http:') ? u.origin : '';
+    } catch (e) { return ''; }
+  }
+  // `keepPlace`: a board row keeps an invisible twin on your own row, so its credits line up
+  function recruitCell(r, keepPlace) {
+    var p = recruit.to[recruit.pick];
+    if (!p) return null;
+    var login = String(r.github_login || '');
+    if (!login || login.toLowerCase() === recruit.me) {
+      if (!keepPlace) return null;
+      var gap = el('span', 'btn small ghost commRecruit commGap', 'Recruit');
+      gap.setAttribute('aria-hidden', 'true');
+      return gap;
+    }
+    var a = el('a', 'btn small ghost commRecruit', 'Recruit');
+    a.setAttribute('href', p.origin + '/builders/watch?invite=' + encodeURIComponent(login));
+    a.setAttribute('target', '_blank');
+    a.setAttribute('rel', 'noopener');
+    a.setAttribute('aria-label', 'Recruit ' + (r.display_name || r.handle || login) + ' to ' + p.name + ' (opens in a new tab)');
+    return a;
+  }
+
   // ── the leaderboard ─────────────────────────────────────────────────────────
   var board = { window: 'all', craft: '' };
   var boardSeq = 0;
@@ -338,6 +386,8 @@
     credits.appendChild(el('span', 'commNum', num(r.credits).toLocaleString()));
     credits.appendChild(el('span', 'commUnit', UNIT));
     li.appendChild(credits);
+    var door = recruitCell(r, true);
+    if (door) li.appendChild(door);
     return li;
   }
   function emptyText() {
@@ -345,8 +395,11 @@
     if (board.window === 'all') return 'No ' + who + ' on the leaderboard yet.';
     return 'No ' + who + ' earned ' + UNIT + ' in this window yet.';
   }
+  var boardShown = null; // the last board drawn, redrawn when the Recruit door changes
   function paintBoard(results) {
     var list = $('boardList');
+    boardShown = results;
+    list.className = 'commRows' + (recruit.to.length ? ' canRecruit' : '');
     list.textContent = '';
     results.forEach(function (r) { if (r) list.appendChild(boardRow(r)); });
     $('boardEmpty').textContent = list.children.length ? '' : emptyText();
@@ -366,6 +419,7 @@
       if (seq !== boardSeq) return; // a later pick answered first; its rows win
       $('boardLoading').hidden = true;
       if (!r.ok) {
+        boardShown = null;
         $('boardList').textContent = '';
         $('boardEmpty').hidden = true;
         $('boardFailed').textContent = failText(r.status, 'The leaderboard');
@@ -403,23 +457,35 @@
     if (c) main.appendChild(el('p', 'mineRow__hint', c));
     who.appendChild(main);
     li.appendChild(who);
+    var door = recruitCell(r, false);
+    if (door) {
+      var acts = el('div', 'mineRow__actions');
+      acts.appendChild(door);
+      li.appendChild(acts);
+    }
     return li;
   }
+  var found = null; // the last results drawn, redrawn when the Recruit door changes
+  function paintFound(results) {
+    var list = $('findList');
+    found = results;
+    list.textContent = '';
+    if (results) results.forEach(function (p) { if (p) list.appendChild(findRow(p)); });
+  }
   function find() {
     var q = String($('findQ').value || '').trim();
     var craft = $('findCraft').value || '';
     var list = $('findList');
-    if (q.length < QUERY_MIN) { list.textContent = ''; say('Type at least ' + QUERY_MIN + ' letters of a name.', 'err'); return Promise.resolve(); }
-    if (q.length > QUERY_MAX) { list.textContent = ''; say('A search is at most ' + QUERY_MAX + ' characters.', 'err'); return Promise.resolve(); }
+    if (q.length < QUERY_MIN) { paintFound(null); say('Type at least ' + QUERY_MIN + ' letters of a name.', 'err'); return Promise.resolve(); }
+    if (q.length > QUERY_MAX) { paintFound(null); say('A search is at most ' + QUERY_MAX + ' characters.', 'err'); return Promise.resolve(); }
     var btn = $('findBtn');
     btn.disabled = true;
     say('Searching…');
     var path = '/community/search?q=' + encodeURIComponent(q) + (craft ? '&discipline=' + encodeURIComponent(craft) : '');
     return read(path).then(function (r) {
       btn.disabled = false;
-      list.textContent = '';
-      if (!r.ok) { say(failText(r.status, 'The search'), 'err'); return; }
-      arr(r.data.results).forEach(function (p) { if (p) list.appendChild(findRow(p)); });
+      if (!r.ok) { paintFound(null); say(failText(r.status, 'The search'), 'err'); return; }
+      paintFound(arr(r.data.results));
       var n = list.children.length;
       say(n ? plural(n, 'builder') + ' found.' : 'No builder by that name' + (craft ? ' in that role' : '') + '.');
     });
@@ -449,6 +515,51 @@
     });
   }
 
+  // ── the Recruit door's line, and the rows redrawn with it ───────────────────
+  function repaintRows() {
+    if (boardShown) paintBoard(boardShown);
+    if (found) paintFound(found);
+  }
+  // One project: what Recruit opens. Several: which one it recruits to, drawn once, so a
+  // pick redraws only the rows and the choice keeps the focus.
+  function paintFor(box) {
+    box.textContent = '';
+    box.hidden = false;
+    if (recruit.to.length === 1) {
+      box.textContent = 'Recruit opens ' + recruit.to[0].name + '’s hall with their name filled in, and you send the invite there.';
+      return;
+    }
+    var id = box.id + 'Pick';
+    var label = el('label', null, 'Recruit to');
+    label.setAttribute('for', id);
+    var pick = el('select', 'commForPick');
+    pick.id = id;
+    recruit.to.forEach(function (p, i) { var o = el('option', null, p.name); o.value = String(i); pick.appendChild(o); });
+    pick.value = String(recruit.pick);
+    pick.addEventListener('change', function () {
+      var i = Number(pick.value);
+      if (!recruit.to[i] || i === recruit.pick) return;
+      recruit.pick = i;
+      repaintRows();
+    });
+    box.appendChild(label);
+    box.appendChild(pick);
+    box.appendChild(el('span', null, 'Recruit opens its hall with their name filled in, and you send the invite there.'));
+  }
+  // A failed or empty read is no door at all: viewing never waits on it.
+  function loadOwned(me, box) {
+    return read('/my-projects').then(function (r) {
+      if (!r.ok) return;
+      recruit.me = String(me.github_login || '').toLowerCase();
+      recruit.to = arr(r.data.owned).map(function (p) {
+        return { name: String((p && (p.name || p.client_id)) || 'your project'), origin: originOf(p && p.origin) };
+      }).filter(function (p) { return p.origin; });
+      if (!recruit.to.length) return;
+      paintFor(box);
+      repaintRows();
+    });
+  }
+
   // ── the sub-page the path names: shown, named, marked current, and read ──────
   var VIEW = viewOf(window.location.pathname);
   var view = VIEWS[VIEW];
@@ -461,6 +572,7 @@
   $('signinTop').setAttribute('href', '/api/bongos/auth/web/start?return=' + view.path + '&repos=1');
   if (VIEW === 'leaderboard') loadBoard();
   if (VIEW === 'recruiters') bar.ready.then(function (me) { if (me) loadRecruit(); else showRecruit('recruitDoor'); });
+  else bar.ready.then(function (me) { if (me) loadOwned(me, $(VIEW === 'find' ? 'findFor' : 'boardFor')); });
 })();
 </script>
 <script src="/assets/invite-badge.js"></script>

package/modules/ui-design/kit/fixtures/my-projects-owner-two.json

@@ -0,0 +1 @@
+{"_":"GET /my-projects for a builder who owns TWO projects (task 1002292): the community pages' Recruit door asks which project it recruits to.","owned":[{"client_id":"mercury","name":"Mercury","origin":"https://mercury.example.test","hall_origin":null,"membership_kind":"owner","joined_at":"2026-08-01T10:00:00.000Z","last_active":"2026-10-20T18:00:00.000Z"},{"client_id":"tidepool","name":"Tidepool","origin":"https://tidepool.example.test","hall_origin":null,"membership_kind":"owner","joined_at":"2026-09-02T10:00:00.000Z","last_active":"2026-10-24T18:00:00.000Z"}],"building":[],"applied":[]}

package/modules/ui-design/kit/fixtures/my-projects-owner.json

@@ -0,0 +1 @@
+{"_":"GET /my-projects for a builder who owns ONE project (task 1002292): the community pages' Recruit door shows on every row and opens Mercury's hall invite box.","owned":[{"client_id":"mercury","name":"Mercury","origin":"https://mercury.example.test","hall_origin":null,"membership_kind":"owner","joined_at":"2026-08-01T10:00:00.000Z","last_active":"2026-10-20T18:00:00.000Z"}],"building":[{"client_id":"otb","name":"Example World","origin":"https://example.com","hall_origin":"https://builders.example.com","membership_kind":"member","joined_at":"2026-07-20T10:00:00.000Z","last_active":"2026-08-27T18:00:00.000Z"}],"applied":[]}

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.23.11",
+  "version": "1.23.13",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.23.11",
+      "version": "1.23.13",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.23.11",
+  "version": "1.23.13",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -10453,5 +10453,17 @@
       "id": "1004256",
       "text": "Signed-in builders now find 'Builders you may know' in the Community menu; it opens their suggestions on the Connections page, which says so plainly when there's no one to suggest yet."
     }
+  ],
+  "1.23.12": [
+    {
+      "id": "1002292",
+      "text": "Project owners can now press Recruit next to any builder on the community leaderboard or search, which opens their project's invite page with that builder's name already filled in."
+    }
+  ],
+  "1.23.13": [
+    {
+      "id": "1004644",
+      "text": "The tweak editor's split view now shows the landing and status pages under the words, instead of opening a second window."
+    }
   ]
 }

package/src/module-api.js

@@ -81,7 +81,7 @@ const { sleep } = require('./sleep');
 // MAJOR (see allowBoxScope below): passes the request through untouched.
 function deprecatedNoopMiddleware(_req, _res, next) { next(); }
 
-const CORE_VERSION = '1.23.11'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.23.13'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('discord'); log.info('mounted');

package/tests/hall_tweak_editor.mjs

@@ -675,11 +675,13 @@ try {
   await test('split view can frame only its own host; the live site refuses to be framed from another', () => {
     const here = { origin: 'https://builders.cloudbongos.com', href: 'https://builders.cloudbongos.com/builders/tweak-editor' };
     assert.equal(lib.canFrame('https://builders.cloudbongos.com/studio', here), true);
-    assert.equal(lib.canFrame('https://cloudbongos.com/', here), false, 'the apex is another origin');
+    assert.equal(lib.canFrame('https://cloudbongos.com/', here), true, 'the apex is a sibling the proxy lets the builders host frame');
+    assert.equal(lib.canFrame('https://cloudbongos.com/', here, false), false, 'the apex is another origin when siblings are off');
     assert.equal(lib.canFrame('not a url', { origin: '', href: '' }), false);
     // task 1004393: the apex and status pages split in place only once the proxy allows it.
-    assert.equal(lib.FRAME_SIBLINGS, false, 'off until the proxy sends frame-ancestors for the builders host');
-    assert.equal(lib.canFrame('https://status.cloudbongos.com/', here), false, 'the default follows the switch');
+    assert.equal(lib.FRAME_SIBLINGS, true, 'on: the proxy sends frame-ancestors for the builders host (task 1004644)');
+    assert.equal(lib.canFrame('https://status.cloudbongos.com/', here), true, 'the default follows the switch');
+    assert.equal(lib.canFrame('https://status.cloudbongos.com/', here, false), false, 'switched off, only the editor host frames');
     assert.equal(lib.canFrame('https://cloudbongos.com/pricing', here, true), true, 'the apex, switched on');
     assert.equal(lib.canFrame('https://status.cloudbongos.com/', here, true), true, 'the status host, switched on');
     assert.equal(lib.canFrame('https://box.cloudbongos.com/', here, true), false, 'never another subdomain');
@@ -791,19 +793,14 @@ try {
     } finally { PAGE.url = saved; }
   });
 
-  await test('a page on the apex splits into its own window docked to the bottom half, and never on load', async () => {
+  await test('a page on the apex splits in place under the words, with no second window (task 1004644)', async () => {
     const b = bootEditor({
       answers: { 'GET /copy-desk/pages/landing:index/draft': ok(editorRead()) },
       stored: { 'hall-tweak-open-as': 'split', 'hall-tweak-split': 'on' },
     });
     await b.settle();
-    assert.equal(b.opened.length, 0, 'no popup on load: a browser would block it');
-    assert.equal(b.el('tw-frame').hidden, true, 'nothing framed: the site would refuse');
-    await b.click('tw-open');
-    assert.equal(b.opened.length, 1);
-    assert.deepEqual(b.opened[0].slice(0, 2), ['https://cloudbongos.com/', 'tw-live-page']);
-    assert.equal(b.opened[0][2], 'popup=yes,width=1600,height=500,left=0,top=500');
-    assert.equal(b.el('tw-frame').hidden, true);
+    assert.equal(b.opened.length, 0, 'no popup: the page is framed in place');
+    assert.equal(b.el('tw-frame').hidden, false, 'the apex page shows under the words');
   });
 
   // task 1004776: a guarded line shows what it must still say under it, and the

package/tests/hub_community_page.mjs

@@ -78,6 +78,7 @@ test('no top block: one visually hidden h1, then one section per sub-page, only
   assert.match(MAIN, /<ol class="commRows" id="boardList" data-unit="\{\{currency\}\}" aria-labelledby="boardH"><\/ol>/, 'the unit is the instance’s own word, stamped by the server');
   assert.match(MAIN, /<p class="projMsg err" id="boardFailed" role="alert" hidden><\/p>/);
   assert.match(MAIN, /<form class="mineJoinRow commFind" id="findForm" role="search"/);
+  for (const id of ['boardFor', 'findFor']) assert.match(MAIN, new RegExp(`<div class="commFor" id="${id}" hidden></div>`), `${id}: the Recruit door’s line waits for GET /my-projects (task 1002292)`);
   assert.match(MAIN, /<h2 id="recruitH">Open to recruiters<\/h2>/, 'the hide flag is "hidden", never "private" (ADR 0337)');
   assert.match(MAIN, /<a class="btn" id="recruitSignin" href="\/api\/bongos\/auth\/web\/start\?return=\/community\/recruiters&amp;repos=1">/);
   for (const id of ['recruitDoor', 'recruitClosed', 'recruitFailed', 'recruitEmpty']) assert.match(MAIN, new RegExp(` id="${id}"[^>]*hidden`), `${id} waits for the route’s answer`);
@@ -100,11 +101,12 @@ test('the window dropdown and the query limits are the routes’ own (boundary-f
   assert.match(MAIN, new RegExp(`<input id="findQ" type="search"[^>]* maxlength="${max}"`));
 });
 
-test('the script builds no markup from strings, reads only the three routes, and never re-ranks or reads the ranked tier', () => {
+test('the script builds no markup from strings, reads only the four routes, and never re-ranks or reads the ranked tier', () => {
   assert.doesNotMatch(SCRIPT, /innerHTML|insertAdjacentHTML|outerHTML|document\.write/);
-  // every path literal in the code: the API base, the three reads, the three sub-pages and the sign-in door
+  // every path literal in the code: the API base, the four reads, the three sub-pages, the
+  // sign-in door and the hall's invite box the Recruit door opens (task 1002292)
   const paths = [...new Set([...CODE.matchAll(/'(\/[^'?]*)/g)].map((m) => m[1]))];
-  assert.deepEqual(paths.sort(), ['/api/bongos', '/api/bongos/auth/web/start', '/community', '/community/find', '/community/leaderboard', '/community/recruiters', '/community/search', '/scouting']);
+  assert.deepEqual(paths.sort(), ['/api/bongos', '/api/bongos/auth/web/start', '/builders/watch', '/community', '/community/find', '/community/leaderboard', '/community/recruiters', '/community/search', '/my-projects', '/scouting']);
   assert.doesNotMatch(CODE, /method:/, 'it only reads');
   assert.doesNotMatch(CODE, /'\/me\b/, 'who is signed in is the bar’s question');
   assert.doesNotMatch(CODE, /\.sort\(|\.count\b|_count\b/, 'the server ranks; every count is a list’s length');
@@ -173,7 +175,9 @@ async function boot({ pathname = '/community', me = null, reads = READS() } = {}
     requests.push({ url, credentials: init.credentials });
     const a = reads[url.replace(/^\/api\/bongos/, '')];
     if (!a || a.reject) return Promise.reject(new Error('offline'));
-    return Promise.resolve({ ok: a.status >= 200 && a.status < 300, status: a.status, json: () => Promise.resolve(a.body) });
+    const res = { ok: a.status >= 200 && a.status < 300, status: a.status, json: () => Promise.resolve(a.body) };
+    // `slow`: answers on a timer, after every microtask-settled read (the order a slow network gives)
+    return a.slow ? new Promise((resolve) => setTimeout(() => resolve(res), 5)) : Promise.resolve(res);
   };
   const document = {
     title: 'Cloud Bongos — Community',
@@ -225,7 +229,8 @@ test('the leaderboard, signed out: the all-time board in the server’s order wi
   assert.equal(find(bo, 'mineRow__hint').textContent, '1 work shipped · 0 karma');
   assert.equal(ui.$('boardNote').textContent, 'Credits earned across every project, since each builder started.');
   const signedIn = await boot({ me: { github_login: 'someone' } });
-  assert.deepEqual(signedIn.gets(), ['/api/bongos/community/leaderboard?window=all'], 'signed in, the same one read: viewing is ungated');
+  assert.deepEqual(signedIn.gets(), ['/api/bongos/community/leaderboard?window=all', '/api/bongos/my-projects'], 'signed in, the same board read: viewing is ungated, and the one more read is the Recruit door’s');
+  assert.equal(signedIn.$('boardList').textContent, ui.$('boardList').textContent, 'the same rows for every viewer');
 });
 
 test('the window dropdown and a craft are each one read; the pressed craft follows the pick', async () => {
@@ -320,6 +325,114 @@ test('recruiters: a door signed out, a refusal on a 403, rows only from a 200 as
   assert.equal(failed.$('recruitFailed').textContent, 'This list could not be read. Reload the page to try again.');
 });
 
+// ── 2b. the Recruit door (task 1002292; spec D6, owner 2026-10-27) ───────────
+// A project OWNER gets a Recruit link on each row: the hub cannot read a project's
+// `project.recruit` (ADR 0335 D1), so GET /my-projects' `owned` stands in. The link is the
+// project's own hall invite box with the GitHub login filled in (ADR 0353), and the
+// project decides.
+
+const OWNED = (...ps) => ({ status: 200, body: {
+  owned: ps.map(([client_id, origin, name]) => ({ client_id, name, origin, hall_origin: null, membership_kind: 'owner' })),
+  building: [{ client_id: 'zed', name: 'Zed', origin: 'https://zed.example', hall_origin: null, membership_kind: 'member' }],
+  applied: [],
+} });
+const recruitOf = (row) => find(row, 'commRecruit');
+
+test('recruit: an owner gets a Recruit link on every row but their own, opening their project’s hall invite box with the GitHub login filled in', async () => {
+  const reads = READS();
+  reads['/my-projects'] = OWNED(['mercury', 'https://mercury.example/x?y=1', 'Mercury']);
+  const ui = await boot({ me: { github_login: 'BO' }, reads });
+  assert.deepEqual(ui.gets(), ['/api/bongos/community/leaderboard?window=all', '/api/bongos/my-projects']);
+  const [ana, bo] = kids(ui.$('boardList'));
+  const a = recruitOf(ana);
+  assert.equal(a.tag, 'a');
+  assert.equal(a.textContent, 'Recruit');
+  assert.equal(a.attrs.href, 'https://mercury.example/builders/watch?invite=ana', 'the project’s origin and nothing else of the address');
+  assert.equal(a.attrs.target, '_blank', 'the board stays open behind it');
+  assert.equal(a.attrs.rel, 'noopener');
+  assert.equal(a.attrs['aria-label'], 'Recruit ANA to Mercury (opens in a new tab)', 'the new tab is said, not sprung');
+  assert.equal(recruitOf(bo).tag, 'span', 'your own row: an invisible twin keeps the credits in line');
+  assert.equal(recruitOf(bo).attrs['aria-hidden'], 'true');
+  assert.match(ui.$('boardList').className, /\bcanRecruit\b/);
+  assert.equal(ui.$('boardFor').hidden, false);
+  assert.equal(ui.$('boardFor').textContent, 'Recruit opens Mercury’s hall with their name filled in, and you send the invite there.');
+  await ui.pick('30d');
+  assert.equal(recruitOf(kids(ui.$('boardList'))[0]).attrs.href, 'https://mercury.example/builders/watch?invite=cy', 'a new window’s rows carry it too');
+  reads['/community/leaderboard?window=all'].slow = true;
+  const late = await boot({ me: { github_login: 'BO' }, reads });
+  assert.equal(kids(late.$('boardList')).length, 0, 'the board has not answered yet');
+  assert.equal(late.$('boardFor').hidden, false, 'the owner’s line is up before the board');
+  await new Promise((resolve) => setTimeout(resolve, 20));
+  await settle();
+  assert.equal(recruitOf(kids(late.$('boardList'))[0]).attrs.href, 'https://mercury.example/builders/watch?invite=ana', 'a board that answers after GET /my-projects draws its doors as it paints');
+  delete reads['/community/leaderboard?window=all'].slow;
+  reads['/community/leaderboard?window=all'].body.results[0].github_login = 'a b&c';
+  const odd = await boot({ me: { github_login: 'x' }, reads });
+  assert.equal(recruitOf(kids(odd.$('boardList'))[0]).attrs.href, 'https://mercury.example/builders/watch?invite=a%20b%26c', 'the login is encoded into the query');
+});
+
+test('recruit: none for a builder who owns no project, signed out, on a failed read, or for a project with no web address; the rows stay the same', async () => {
+  const reads = READS();
+  reads['/my-projects'] = OWNED();
+  const member = await boot({ me: { github_login: 'someone' }, reads });
+  assert.equal(member.gets().pop(), '/api/bongos/my-projects');
+  assert.ok(kids(member.$('boardList')).every((r) => !recruitOf(r)), 'building on a project is not owning one');
+  assert.equal(member.$('boardFor').hidden, true);
+  assert.doesNotMatch(member.$('boardList').className, /canRecruit/);
+  const out = await boot({ reads });
+  assert.deepEqual(out.gets(), ['/api/bongos/community/leaderboard?window=all'], 'signed out, nobody is asked about projects');
+  for (const answer of [{ status: 500, body: {} }, { status: 401, body: {} }, { reject: true }, OWNED(['evil', 'javascript:alert(1)', 'Evil'], ['none', null, 'None'])]) {
+    reads['/my-projects'] = answer;
+    const ui = await boot({ me: { github_login: 'someone' }, reads });
+    assert.ok(kids(ui.$('boardList')).every((r) => !recruitOf(r)), 'no door, and the board is drawn all the same');
+    assert.equal(kids(ui.$('boardList')).length, 2);
+    assert.equal(ui.$('boardFailed').hidden, true, 'a failed projects read is never the board’s failure');
+    assert.equal(ui.$('boardFor').hidden, true);
+  }
+});
+
+test('recruit: several projects are one “Recruit to” choice, and picking one re-points every row', async () => {
+  const reads = READS();
+  reads['/my-projects'] = OWNED(['mercury', 'https://mercury.example', 'Mercury'], ['venus', 'http://venus.example:8080', 'Venus']);
+  const ui = await boot({ me: { github_login: 'nobody' }, reads });
+  const pick = find(ui.$('boardFor'), 'commForPick');
+  assert.equal(pick.tag, 'select');
+  assert.equal(pick.id, 'boardForPick');
+  assert.deepEqual(kids(pick).map((o) => [o.value, o.textContent]), [['0', 'Mercury'], ['1', 'Venus']]);
+  assert.equal(kids(ui.$('boardFor'))[0].attrs.for, 'boardForPick', 'the choice is labelled');
+  assert.match(ui.$('boardFor').textContent, /^Recruit to/);
+  assert.equal(recruitOf(kids(ui.$('boardList'))[0]).attrs.href, 'https://mercury.example/builders/watch?invite=ana', 'the first project, as the server listed them');
+  pick.value = '1';
+  for (const f of pick._on.change || []) f({});
+  await settle();
+  const [ana, bo] = kids(ui.$('boardList'));
+  assert.equal(recruitOf(ana).attrs.href, 'http://venus.example:8080/builders/watch?invite=ana');
+  assert.equal(recruitOf(bo).attrs['aria-label'], 'Recruit bo to Venus (opens in a new tab)');
+  assert.equal(find(ui.$('boardFor'), 'commForPick'), pick, 'the choice is not redrawn, so it keeps the focus');
+  pick.value = '7';
+  for (const f of pick._on.change || []) f({});
+  assert.equal(recruitOf(kids(ui.$('boardList'))[0]).attrs.href, 'http://venus.example:8080/builders/watch?invite=ana', 'a value it never offered changes nothing');
+});
+
+test('recruit: found builders carry it too; the recruiter list never asks', async () => {
+  const reads = READS();
+  reads['/my-projects'] = OWNED(['mercury', 'https://mercury.example', 'Mercury']);
+  const ui = await boot({ pathname: '/community/find', me: { github_login: 'ph' }, reads });
+  assert.deepEqual(ui.gets(), ['/api/bongos/my-projects'], 'nothing searched until asked');
+  assert.equal(ui.$('findFor').hidden, false);
+  assert.equal(ui.$('findFor').textContent, 'Recruit opens Mercury’s hall with their name filled in, and you send the invite there.');
+  assert.equal(ui.$('boardFor').hidden, true, 'only the shown sub-page’s line');
+  ui.$('findQ').value = 'pri';
+  await ui.submit();
+  const [priya, hidden] = kids(ui.$('findList'));
+  const acts = find(priya, 'mineRow__actions');
+  assert.equal(recruitOf(acts).attrs.href, 'https://mercury.example/builders/watch?invite=priyan', 'by GitHub login, never the handle');
+  assert.equal(recruitOf(hidden), null, 'your own row: no door, and no twin in a row that keeps no columns');
+  assert.equal(ui.$('findStatus').textContent, '2 builders found.');
+  const recruiters = await boot({ pathname: '/community/recruiters', me: { github_login: 'owner' }, reads });
+  assert.deepEqual(recruiters.gets(), ['/api/bongos/scouting'], 'the recruiter list draws no Recruit door');
+});
+
 // ── 3. every bar carries the Community menu ──────────────────────────────────
 
 const SERVES_A_CHILD = ['privacy.html', 'terms.html', 'contact.html', 'index.html', 'projects.html'];
@@ -437,11 +550,20 @@ test('the kit renders each sub-page for everyone, the empty board, and a project
   assert.equal(states.states['out-find'].url, '/community/find');
   assert.equal(states.states['in-recruiters'].url, '/community/recruiters');
   assert.ok(states.states['in-recruiters'].expect.visible.includes('#recruitClosed'), 'signed in but not admitted: told, shown no one');
-  for (const [file, name, fixture] of [['community-empty.states.json', 'community-leaderboard', 'community-leaderboard-empty'], ['community-recruiter.states.json', 'scouting', 'scouting-recruiter']]) {
+  for (const [file, name, fixture] of [['community-empty.states.json', 'community-leaderboard', 'community-leaderboard-empty'], ['community-recruiter.states.json', 'scouting', 'scouting-recruiter'], ['community-owner.states.json', 'my-projects', 'my-projects-owner'], ['community-owner-two.states.json', 'my-projects', 'my-projects-owner-two']]) {
     assert.equal(json(file).stub.fixtures[name], fixture);
     assert.ok(fs.existsSync(path.join(ROOT, 'modules', 'ui-design', 'kit', 'fixtures', fixture + '.json')), `fixture ${fixture}`);
   }
   assert.equal(json('community-recruiter.states.json').states['in-recruiter'].url, '/community/recruiters');
+  // the Recruit door (task 1002292): an owner of one project on the board and the search, and of two with the choice
+  assert.ok(json('community-owner.states.json').states['in-owner'].expect.count.some(([sel, n]) => sel === '#boardList a.commRecruit' && n === 6));
+  assert.equal(json('community-owner.states.json').states['in-owner-find'].url, '/community/find');
+  assert.ok(json('community-owner-two.states.json').states['in-owner-two-picked'].actions.some((a) => a[0] === 'select' && a[1] === '#boardForPick'));
+  for (const f of ['my-projects-owner', 'my-projects-owner-two']) {
+    const owned = JSON.parse(fs.readFileSync(path.join(ROOT, 'modules', 'ui-design', 'kit', 'fixtures', f + '.json'), 'utf8')).owned;
+    assert.ok(owned.length && owned.every((p) => p.membership_kind === 'owner' && /^https:\/\//.test(p.origin)), `${f}: owned projects with web addresses`);
+  }
+  assert.deepEqual(JSON.parse(fs.readFileSync(path.join(ROOT, 'modules', 'ui-design', 'kit', 'fixtures', 'my-projects.json'), 'utf8')).owned, [], 'the default builder owns nothing, so every other state draws no door');
 });
 
 function stub(env = {}) {