@bongos/core 1.21.51 → 1.21.53

package/modules/public-landing/public/assets/hub-bar.js

@@ -0,0 +1,127 @@
+/* assets/hub-bar.js — THE HUB'S BAR on the pages that have no views of their own
+   (task 1004489, after task 1004455).
+
+   /projects draws the bar and its two bands — the Projects band and the profile
+   band behind the identity chip. The apex pages a person reaches from it wear the
+   same bar so the chrome does not swap under them: the account page (/account) and
+   the three footer doors (/privacy, /terms, /contact). Each page keeps the bar's
+   MARKUP (real markup, pinned byte-equal to the hub's); this file is the one copy
+   of what makes it work there:
+     - the chip, filled from GET /me — signed out there is no chip and no
+       Your-projects item, and the sign-in door takes the chip's slot;
+     - the bands' disclosure: a trigger toggles its band, opening one closes the
+       other, Escape closes and returns focus to the trigger, a click outside or
+       Tab out closes, the arrows walk the items, an item activated closes it;
+     - sign out: the profile band's plain anchor upgraded to the hub's logout POST.
+
+   projects.html keeps its own copy (its bands also fold the map search and switch
+   views), so a change to the disclosure is made there AND here.
+   tests/hub_account_page.mjs and tests/landing_legal_pages.mjs execute this file.
+
+   A page that knows more about who is signed in than GET /me says paints the chip
+   itself through window.HubBar.paint(me); window.HubBar.ready settles with what
+   GET /me answered (null when nobody is signed in or the read failed). */
+(function () {
+  'use strict';
+  var API = '/api/bongos';
+  function $(id) { return document.getElementById(id); }
+
+  // ---- the chip: who is signed in (null = nobody) ----
+  function paint(me) {
+    var login = me ? (me.github_login || 'signed in') : '';
+    var avatar = me && me.avatar_url;
+    $('who').hidden = !me;
+    $('signinTop').hidden = !!me;
+    $('mineCell').hidden = !me;
+    [['whoImg', 'whoLogin'], ['bandWhoImg', 'bandWhoLogin']].forEach(function (ids) {
+      $(ids[0]).hidden = !avatar;
+      if (avatar) $(ids[0]).src = avatar;
+      $(ids[1]).textContent = login;
+    });
+    if (me) $('who').setAttribute('aria-label', 'Account, ' + login);
+    else closeMenus();
+  }
+
+  // ---- the bands: the hub's disclosure (projects.html "THE BANDS") without the map search ----
+  function openBand() { return document.querySelector('.menuBand:not([hidden])'); }
+  function closeMenus() {
+    var open = openBand();
+    if (!open) return;
+    var trig = document.querySelector('.trig[aria-expanded="true"]');
+    var inside = open.contains(document.activeElement);
+    open.hidden = true;
+    if (trig) trig.setAttribute('aria-expanded', 'false');
+    if (inside && trig) trig.focus();
+  }
+  function openMenu(trig, byKeyboard) {
+    closeMenus();
+    trig.setAttribute('aria-expanded', 'true');
+    var band = $(trig.getAttribute('aria-controls'));
+    band.hidden = false;
+    // Enter/Space on the trigger lands on the first item; a pointer stays put
+    if (byKeyboard) { var first = band.querySelector('.bandCell:not([hidden]) a'); if (first) first.focus(); }
+  }
+  document.querySelectorAll('.trig').forEach(function (t) {
+    t.addEventListener('click', function (ev) {
+      if (t.getAttribute('aria-expanded') === 'true') closeMenus();
+      else openMenu(t, ev.detail === 0);
+    });
+  });
+  document.addEventListener('click', function (ev) {
+    if (!openBand()) return;
+    if (ev.target.closest && (ev.target.closest('.menuBand') || ev.target.closest('.trig'))) return;
+    closeMenus();
+  });
+  document.addEventListener('keydown', function (ev) {
+    var open = openBand();
+    if (!open) return;
+    if (ev.key === 'Escape') { closeMenus(); return; }
+    if (ev.key !== 'ArrowDown' && ev.key !== 'ArrowUp') return;
+    var items = Array.prototype.filter.call(open.querySelectorAll('a'), function (a) { return !a.closest('[hidden]'); });
+    if (!items.length) return;
+    var at = items.indexOf(document.activeElement);
+    ev.preventDefault();
+    items[(at + (ev.key === 'ArrowDown' ? 1 : items.length - 1) + items.length) % items.length].focus();
+  });
+  document.querySelectorAll('.menuBand').forEach(function (b) {
+    b.addEventListener('click', function (ev) {
+      if (ev.target.closest && ev.target.closest('a')) closeMenus();
+    });
+    // Tab out of the band closes it; a null relatedTarget is the window losing
+    // focus or a click on nothing, which the document click covers
+    b.addEventListener('focusout', function (ev) {
+      var to = ev.relatedTarget;
+      if (!to || b.contains(to) || (to.closest && to.closest('.trig'))) return;
+      closeMenus();
+    });
+  });
+
+  // ---- the profile band: the current place, and sign out (projects.html doLogout) ----
+  $('menuProfile').addEventListener('click', function (ev) {
+    if (!ev.target.closest) return;
+    // an item marked as this page: a reload would only throw away what was typed
+    if (ev.target.closest('[aria-current="page"]')) { ev.preventDefault(); return; }
+    if (!ev.target.closest('a.signout')) return;
+    ev.preventDefault();
+    var finish = function () {
+      var apex = location.hostname.split('.').slice(-2).join('.');
+      ['bongos_session', 'gds_session', 'pms_session'].forEach(function (name) {
+        document.cookie = name + '=; Max-Age=0; path=/';
+        document.cookie = name + '=; Max-Age=0; path=/; Domain=.' + apex;
+      });
+      window.location.assign(location.pathname);
+    };
+    fetch(API + '/auth/logout', { method: 'POST', credentials: 'same-origin' }).then(finish, finish);
+  });
+
+  // ---- the identity read: the hub's own GET /me ----
+  var ready = fetch(API + '/me', { method: 'GET', credentials: 'same-origin', headers: { Accept: 'application/json' } })
+    .then(function (res) { return res.ok ? res.json().catch(function () { return null; }) : null; })
+    .then(function (d) {
+      var me = d ? (d.builder || d.me || d) : null;
+      paint(me);
+      return me;
+    }, function () { paint(null); return null; });
+
+  window.HubBar = { paint: paint, ready: ready };
+})();

package/modules/public-landing/public/contact.html

@@ -20,9 +20,14 @@
 <!-- Dark only, like every apex page (task 1003336, ADR 0204): data-mode="dark" is fixed on <html>. -->
 <style>
 /* The reading column only. No :root block — the pack's injected theme owns the
-   tokens (landing direction C1); everything below reads them. */
+   tokens (landing direction C1); everything below reads them. The bar and the
+   bands are cosmos.css's own rules, not restyled here. */
+/* the skip link un-hides itself on focus, reversing everything .vh sets (the hub's rule) */
+.skip:focus{position:fixed;top:8px;left:8px;z-index:100;width:auto;height:auto;margin:0;overflow:visible;clip-path:none;white-space:normal;
+  font-size:14px;font-weight:800;text-decoration:none;color:var(--ink);background:var(--bg-card);
+  border:2px solid var(--ctl-line);border-radius:12px;padding:10px 16px;}
 .legal{position:relative;z-index:1;max-width:720px;margin:0 auto;padding:clamp(6px,1.5vw,18px) clamp(16px,4vw,40px) 48px;}
-.legal h1{font-family:var(--font-display);font-weight:700;font-size:clamp(26px,3.8vw,36px);letter-spacing:-0.5px;color:var(--chrome-ink);text-shadow:var(--chrome-glow);margin-bottom:6px;}
+.legal h1{font-family:var(--font-display);font-weight:700;font-size:clamp(26px,3.8vw,36px);letter-spacing:-0.5px;color:var(--chrome-ink);text-shadow:var(--chrome-glow);margin:18px 0 6px;}
 .legal .lede{color:var(--hero-lede);text-shadow:var(--chrome-glow);margin-bottom:18px;}
 .legal h2{font-family:var(--font-display);font-weight:700;font-size:var(--fs-h3);letter-spacing:-0.3px;line-height:1.25;margin:22px 0 8px;}
 .legal .card h2:first-child{margin-top:0;}
@@ -34,15 +39,60 @@
 </style>
 </head>
 <body>
-<header class="top">
-  <a class="mark" href="/">{{productName}}</a>
-  <div class="top-right">
-    <a class="btn-space" href="/projects">Projects</a>
-    <a class="btn-space" data-link-hall href="{{buildersOrigin}}">Hall</a>
+<!-- THE BAR and its two bands are the hub's own (projects.html; task 1004489,
+     after the account page's task 1004455): same markup, same cosmos.css rules,
+     so following a footer link from /projects or /account keeps the chrome. No
+     map search (it only filters the map), the band links name /projects in full
+     because this page has no views of its own, and no item is the current place.
+     assets/hub-bar.js fills the chip from GET /me and runs the bands. -->
+<a class="skip vh" href="#legal">Skip to content</a>
+<header class="shell bar">
+  <div class="barLeft">
+    <a class="barMark" id="barMark" href="/">
+      <svg viewBox="0 0 26 20" aria-hidden="true" fill="none" stroke="currentColor" stroke-width="1.4"
+           stroke-linecap="round" stroke-linejoin="round">
+        <ellipse cx="8.4" cy="5.6" rx="6.6" ry="2.9"/>
+        <path d="M1.8 5.6v6.6a6.6 2.9 0 0 0 13.2 0V5.6"/>
+        <ellipse cx="19.6" cy="8.4" rx="4.7" ry="2.1"/>
+        <path d="M14.9 8.4v4.6a4.7 2.1 0 0 0 9.4 0V8.4"/>
+      </svg>
+      <span>{{productName}}</span>
+    </a>
+  </div>
+  <div class="barRight">
+    <button class="trig" type="button" id="projTrig" data-menu="projects" aria-expanded="false" aria-controls="menuProjects">Projects<svg class="cv" viewBox="0 0 20 20" aria-hidden="true"><path d="m5.6 8 4.4 4.4L14.4 8"/></svg></button>
+    <!-- the identity chip IS the profile trigger; assets/hub-bar.js fills it from
+         GET /me. Signed out it stays hidden and the sign-in door takes its slot. -->
+    <button class="trig who" type="button" id="who" data-menu="profile" aria-expanded="false" aria-controls="menuProfile" hidden><img id="whoImg" alt="" hidden><span class="whoName" id="whoLogin"></span><svg class="cv" viewBox="0 0 20 20" aria-hidden="true"><path d="m5.6 8 4.4 4.4L14.4 8"/></svg></button>
+    <a class="signinDoor" id="signinTop" hidden href="/api/bongos/auth/web/start?return=/contact&amp;repos=1">Sign in</a>
   </div>
 </header>
 
-<main class="legal">
+<div class="menuBand" id="menuProjects" data-menu="projects" hidden>
+  <div class="bandIn">
+    <ul class="bandRow">
+      <li class="bandCell"><a class="bandT" href="/projects?view=map">Sky</a><span class="bandC">the sky of every project</span></li>
+      <li class="bandCell"><a class="bandT" href="/projects?view=map&amp;sub=table">Table</a><span class="bandC">the same projects as rows</span></li>
+      <li class="bandCell" id="mineCell"><a class="bandT" href="/projects?view=mine">Your projects</a><span class="bandC">the ones you own or build on</span></li>
+      <li class="bandCell"><a class="bandT" href="/projects?view=new">New project</a><span class="bandC">five questions and a home</span></li>
+    </ul>
+  </div>
+</div>
+<div class="menuBand" id="menuProfile" data-menu="profile" hidden>
+  <div class="bandIn bandProfile">
+    <p class="bandWho" id="bandWho"><img id="bandWhoImg" alt="" hidden><span class="whoName" id="bandWhoLogin"></span></p>
+    <ul class="bandRow">
+      <li class="bandCell"><a class="bandT" href="/projects?view=mine">My projects</a></li>
+      <!-- apex-only because /account is: it is served only where platform-identity
+           runs, so a child instance loses the item whole (as on projects.html) -->
+      <!--apex-only:start--><li class="bandCell"><a class="bandT" href="/account">Account</a></li><!--apex-only:end-->
+      <!-- the honest hover target; assets/hub-bar.js upgrades the click to the POST -->
+      <li class="bandCell"><a class="bandT signout" href="/api/bongos/auth/logout">Sign out</a></li>
+    </ul>
+  </div>
+</div>
+
+<main class="legal" id="legal">
   <h1>Contact</h1>
   <p class="lede">Two doors. Both are public, and both are how {{productName}} itself works day to day.</p>
 
@@ -68,6 +118,7 @@
   </section>
 </main>
 
-<footer class="foot"><!--apex-only:start--><span>A non-profit, capture-resistant commons. </span><!--apex-only:end-->Built by agents, on Cloud&nbsp;Bongos. <a href="https://www.npmjs.com/package/@bongos/core" target="_blank" rel="noopener">Open source</a> (<a href="https://www.gnu.org/licenses/agpl-3.0.html" target="_blank" rel="noopener">AGPL-3.0</a>).<nav class="footNav" aria-label="Site"><a href="/privacy">Privacy</a><a href="/terms">Terms</a><a href="/contact" aria-current="page">Contact</a></nav></footer>
+<footer class="foot"><!--apex-only:start--><span>A non-profit, capture-resistant commons. </span><!--apex-only:end-->Built by agents, on Cloud&nbsp;Bongos. <a href="https://www.npmjs.com/package/@bongos/core" target="_blank" rel="noopener">Open source</a> (<a href="https://www.gnu.org/licenses/agpl-3.0.html" target="_blank" rel="noopener">AGPL-3.0</a>).<nav class="footNav" aria-label="Site"><a href="/privacy">Privacy</a><a href="/terms">Terms</a><a href="/contact" aria-current="page">Contact</a><a data-link-hall href="{{buildersOrigin}}">Builders' hall</a></nav></footer>
+<script src="/assets/hub-bar.js"></script>
 </body>
 </html>

package/modules/public-landing/public/privacy.html

@@ -18,9 +18,14 @@
 <!-- Dark only, like every apex page (task 1003336, ADR 0204): data-mode="dark" is fixed on <html>. -->
 <style>
 /* The reading column only. No :root block — the pack's injected theme owns the
-   tokens (landing direction C1); everything below reads them. */
+   tokens (landing direction C1); everything below reads them. The bar and the
+   bands are cosmos.css's own rules, not restyled here. */
+/* the skip link un-hides itself on focus, reversing everything .vh sets (the hub's rule) */
+.skip:focus{position:fixed;top:8px;left:8px;z-index:100;width:auto;height:auto;margin:0;overflow:visible;clip-path:none;white-space:normal;
+  font-size:14px;font-weight:800;text-decoration:none;color:var(--ink);background:var(--bg-card);
+  border:2px solid var(--ctl-line);border-radius:12px;padding:10px 16px;}
 .legal{position:relative;z-index:1;max-width:720px;margin:0 auto;padding:clamp(6px,1.5vw,18px) clamp(16px,4vw,40px) 48px;}
-.legal h1{font-family:var(--font-display);font-weight:700;font-size:clamp(26px,3.8vw,36px);letter-spacing:-0.5px;color:var(--chrome-ink);text-shadow:var(--chrome-glow);margin-bottom:6px;}
+.legal h1{font-family:var(--font-display);font-weight:700;font-size:clamp(26px,3.8vw,36px);letter-spacing:-0.5px;color:var(--chrome-ink);text-shadow:var(--chrome-glow);margin:18px 0 6px;}
 .legal .lede{color:var(--hero-lede);text-shadow:var(--chrome-glow);margin-bottom:18px;}
 .legal h2{font-family:var(--font-display);font-weight:700;font-size:var(--fs-h3);letter-spacing:-0.3px;line-height:1.25;margin:22px 0 8px;}
 .legal .card h2:first-child{margin-top:0;}
@@ -33,15 +38,60 @@
 </style>
 </head>
 <body>
-<header class="top">
-  <a class="mark" href="/">{{productName}}</a>
-  <div class="top-right">
-    <a class="btn-space" href="/projects">Projects</a>
-    <a class="btn-space" data-link-hall href="{{buildersOrigin}}">Hall</a>
+<!-- THE BAR and its two bands are the hub's own (projects.html; task 1004489,
+     after the account page's task 1004455): same markup, same cosmos.css rules,
+     so following a footer link from /projects or /account keeps the chrome. No
+     map search (it only filters the map), the band links name /projects in full
+     because this page has no views of its own, and no item is the current place.
+     assets/hub-bar.js fills the chip from GET /me and runs the bands. -->
+<a class="skip vh" href="#legal">Skip to content</a>
+<header class="shell bar">
+  <div class="barLeft">
+    <a class="barMark" id="barMark" href="/">
+      <svg viewBox="0 0 26 20" aria-hidden="true" fill="none" stroke="currentColor" stroke-width="1.4"
+           stroke-linecap="round" stroke-linejoin="round">
+        <ellipse cx="8.4" cy="5.6" rx="6.6" ry="2.9"/>
+        <path d="M1.8 5.6v6.6a6.6 2.9 0 0 0 13.2 0V5.6"/>
+        <ellipse cx="19.6" cy="8.4" rx="4.7" ry="2.1"/>
+        <path d="M14.9 8.4v4.6a4.7 2.1 0 0 0 9.4 0V8.4"/>
+      </svg>
+      <span>{{productName}}</span>
+    </a>
+  </div>
+  <div class="barRight">
+    <button class="trig" type="button" id="projTrig" data-menu="projects" aria-expanded="false" aria-controls="menuProjects">Projects<svg class="cv" viewBox="0 0 20 20" aria-hidden="true"><path d="m5.6 8 4.4 4.4L14.4 8"/></svg></button>
+    <!-- the identity chip IS the profile trigger; assets/hub-bar.js fills it from
+         GET /me. Signed out it stays hidden and the sign-in door takes its slot. -->
+    <button class="trig who" type="button" id="who" data-menu="profile" aria-expanded="false" aria-controls="menuProfile" hidden><img id="whoImg" alt="" hidden><span class="whoName" id="whoLogin"></span><svg class="cv" viewBox="0 0 20 20" aria-hidden="true"><path d="m5.6 8 4.4 4.4L14.4 8"/></svg></button>
+    <a class="signinDoor" id="signinTop" hidden href="/api/bongos/auth/web/start?return=/privacy&amp;repos=1">Sign in</a>
   </div>
 </header>
 
-<main class="legal">
+<div class="menuBand" id="menuProjects" data-menu="projects" hidden>
+  <div class="bandIn">
+    <ul class="bandRow">
+      <li class="bandCell"><a class="bandT" href="/projects?view=map">Sky</a><span class="bandC">the sky of every project</span></li>
+      <li class="bandCell"><a class="bandT" href="/projects?view=map&amp;sub=table">Table</a><span class="bandC">the same projects as rows</span></li>
+      <li class="bandCell" id="mineCell"><a class="bandT" href="/projects?view=mine">Your projects</a><span class="bandC">the ones you own or build on</span></li>
+      <li class="bandCell"><a class="bandT" href="/projects?view=new">New project</a><span class="bandC">five questions and a home</span></li>
+    </ul>
+  </div>
+</div>
+<div class="menuBand" id="menuProfile" data-menu="profile" hidden>
+  <div class="bandIn bandProfile">
+    <p class="bandWho" id="bandWho"><img id="bandWhoImg" alt="" hidden><span class="whoName" id="bandWhoLogin"></span></p>
+    <ul class="bandRow">
+      <li class="bandCell"><a class="bandT" href="/projects?view=mine">My projects</a></li>
+      <!-- apex-only because /account is: it is served only where platform-identity
+           runs, so a child instance loses the item whole (as on projects.html) -->
+      <!--apex-only:start--><li class="bandCell"><a class="bandT" href="/account">Account</a></li><!--apex-only:end-->
+      <!-- the honest hover target; assets/hub-bar.js upgrades the click to the POST -->
+      <li class="bandCell"><a class="bandT signout" href="/api/bongos/auth/logout">Sign out</a></li>
+    </ul>
+  </div>
+</div>
+
+<main class="legal" id="legal">
   <h1>Privacy</h1>
   <p class="lede">What {{productName}} keeps about you and your project, who else sees it, and how long it stays — in plain words. The code that does all of this is open, so every sentence here can be checked.</p>
 
@@ -77,6 +127,7 @@
   </section>
 </main>
 
-<footer class="foot"><!--apex-only:start--><span>A non-profit, capture-resistant commons. </span><!--apex-only:end-->Built by agents, on Cloud&nbsp;Bongos. <a href="https://www.npmjs.com/package/@bongos/core" target="_blank" rel="noopener">Open source</a> (<a href="https://www.gnu.org/licenses/agpl-3.0.html" target="_blank" rel="noopener">AGPL-3.0</a>).<nav class="footNav" aria-label="Site"><a href="/privacy" aria-current="page">Privacy</a><a href="/terms">Terms</a><a href="/contact">Contact</a></nav></footer>
+<footer class="foot"><!--apex-only:start--><span>A non-profit, capture-resistant commons. </span><!--apex-only:end-->Built by agents, on Cloud&nbsp;Bongos. <a href="https://www.npmjs.com/package/@bongos/core" target="_blank" rel="noopener">Open source</a> (<a href="https://www.gnu.org/licenses/agpl-3.0.html" target="_blank" rel="noopener">AGPL-3.0</a>).<nav class="footNav" aria-label="Site"><a href="/privacy" aria-current="page">Privacy</a><a href="/terms">Terms</a><a href="/contact">Contact</a><a data-link-hall href="{{buildersOrigin}}">Builders' hall</a></nav></footer>
+<script src="/assets/hub-bar.js"></script>
 </body>
 </html>

package/modules/public-landing/public/terms.html

@@ -18,9 +18,14 @@
 <!-- Dark only, like every apex page (task 1003336, ADR 0204): data-mode="dark" is fixed on <html>. -->
 <style>
 /* The reading column only. No :root block — the pack's injected theme owns the
-   tokens (landing direction C1); everything below reads them. */
+   tokens (landing direction C1); everything below reads them. The bar and the
+   bands are cosmos.css's own rules, not restyled here. */
+/* the skip link un-hides itself on focus, reversing everything .vh sets (the hub's rule) */
+.skip:focus{position:fixed;top:8px;left:8px;z-index:100;width:auto;height:auto;margin:0;overflow:visible;clip-path:none;white-space:normal;
+  font-size:14px;font-weight:800;text-decoration:none;color:var(--ink);background:var(--bg-card);
+  border:2px solid var(--ctl-line);border-radius:12px;padding:10px 16px;}
 .legal{position:relative;z-index:1;max-width:720px;margin:0 auto;padding:clamp(6px,1.5vw,18px) clamp(16px,4vw,40px) 48px;}
-.legal h1{font-family:var(--font-display);font-weight:700;font-size:clamp(26px,3.8vw,36px);letter-spacing:-0.5px;color:var(--chrome-ink);text-shadow:var(--chrome-glow);margin-bottom:6px;}
+.legal h1{font-family:var(--font-display);font-weight:700;font-size:clamp(26px,3.8vw,36px);letter-spacing:-0.5px;color:var(--chrome-ink);text-shadow:var(--chrome-glow);margin:18px 0 6px;}
 .legal .lede{color:var(--hero-lede);text-shadow:var(--chrome-glow);margin-bottom:18px;}
 .legal h2{font-family:var(--font-display);font-weight:700;font-size:var(--fs-h3);letter-spacing:-0.3px;line-height:1.25;margin:22px 0 8px;}
 .legal .card h2:first-child{margin-top:0;}
@@ -33,15 +38,60 @@
 </style>
 </head>
 <body>
-<header class="top">
-  <a class="mark" href="/">{{productName}}</a>
-  <div class="top-right">
-    <a class="btn-space" href="/projects">Projects</a>
-    <a class="btn-space" data-link-hall href="{{buildersOrigin}}">Hall</a>
+<!-- THE BAR and its two bands are the hub's own (projects.html; task 1004489,
+     after the account page's task 1004455): same markup, same cosmos.css rules,
+     so following a footer link from /projects or /account keeps the chrome. No
+     map search (it only filters the map), the band links name /projects in full
+     because this page has no views of its own, and no item is the current place.
+     assets/hub-bar.js fills the chip from GET /me and runs the bands. -->
+<a class="skip vh" href="#legal">Skip to content</a>
+<header class="shell bar">
+  <div class="barLeft">
+    <a class="barMark" id="barMark" href="/">
+      <svg viewBox="0 0 26 20" aria-hidden="true" fill="none" stroke="currentColor" stroke-width="1.4"
+           stroke-linecap="round" stroke-linejoin="round">
+        <ellipse cx="8.4" cy="5.6" rx="6.6" ry="2.9"/>
+        <path d="M1.8 5.6v6.6a6.6 2.9 0 0 0 13.2 0V5.6"/>
+        <ellipse cx="19.6" cy="8.4" rx="4.7" ry="2.1"/>
+        <path d="M14.9 8.4v4.6a4.7 2.1 0 0 0 9.4 0V8.4"/>
+      </svg>
+      <span>{{productName}}</span>
+    </a>
+  </div>
+  <div class="barRight">
+    <button class="trig" type="button" id="projTrig" data-menu="projects" aria-expanded="false" aria-controls="menuProjects">Projects<svg class="cv" viewBox="0 0 20 20" aria-hidden="true"><path d="m5.6 8 4.4 4.4L14.4 8"/></svg></button>
+    <!-- the identity chip IS the profile trigger; assets/hub-bar.js fills it from
+         GET /me. Signed out it stays hidden and the sign-in door takes its slot. -->
+    <button class="trig who" type="button" id="who" data-menu="profile" aria-expanded="false" aria-controls="menuProfile" hidden><img id="whoImg" alt="" hidden><span class="whoName" id="whoLogin"></span><svg class="cv" viewBox="0 0 20 20" aria-hidden="true"><path d="m5.6 8 4.4 4.4L14.4 8"/></svg></button>
+    <a class="signinDoor" id="signinTop" hidden href="/api/bongos/auth/web/start?return=/terms&amp;repos=1">Sign in</a>
   </div>
 </header>
 
-<main class="legal">
+<div class="menuBand" id="menuProjects" data-menu="projects" hidden>
+  <div class="bandIn">
+    <ul class="bandRow">
+      <li class="bandCell"><a class="bandT" href="/projects?view=map">Sky</a><span class="bandC">the sky of every project</span></li>
+      <li class="bandCell"><a class="bandT" href="/projects?view=map&amp;sub=table">Table</a><span class="bandC">the same projects as rows</span></li>
+      <li class="bandCell" id="mineCell"><a class="bandT" href="/projects?view=mine">Your projects</a><span class="bandC">the ones you own or build on</span></li>
+      <li class="bandCell"><a class="bandT" href="/projects?view=new">New project</a><span class="bandC">five questions and a home</span></li>
+    </ul>
+  </div>
+</div>
+<div class="menuBand" id="menuProfile" data-menu="profile" hidden>
+  <div class="bandIn bandProfile">
+    <p class="bandWho" id="bandWho"><img id="bandWhoImg" alt="" hidden><span class="whoName" id="bandWhoLogin"></span></p>
+    <ul class="bandRow">
+      <li class="bandCell"><a class="bandT" href="/projects?view=mine">My projects</a></li>
+      <!-- apex-only because /account is: it is served only where platform-identity
+           runs, so a child instance loses the item whole (as on projects.html) -->
+      <!--apex-only:start--><li class="bandCell"><a class="bandT" href="/account">Account</a></li><!--apex-only:end-->
+      <!-- the honest hover target; assets/hub-bar.js upgrades the click to the POST -->
+      <li class="bandCell"><a class="bandT signout" href="/api/bongos/auth/logout">Sign out</a></li>
+    </ul>
+  </div>
+</div>
+
+<main class="legal" id="legal">
   <h1>Terms</h1>
   <p class="lede">The short version: this is free software run by its owner, your code stays yours, and you are responsible for what you ship.</p>
 
@@ -82,6 +132,7 @@
   </section>
 </main>
 
-<footer class="foot"><!--apex-only:start--><span>A non-profit, capture-resistant commons. </span><!--apex-only:end-->Built by agents, on Cloud&nbsp;Bongos. <a href="https://www.npmjs.com/package/@bongos/core" target="_blank" rel="noopener">Open source</a> (<a href="https://www.gnu.org/licenses/agpl-3.0.html" target="_blank" rel="noopener">AGPL-3.0</a>).<nav class="footNav" aria-label="Site"><a href="/privacy">Privacy</a><a href="/terms" aria-current="page">Terms</a><a href="/contact">Contact</a></nav></footer>
+<footer class="foot"><!--apex-only:start--><span>A non-profit, capture-resistant commons. </span><!--apex-only:end-->Built by agents, on Cloud&nbsp;Bongos. <a href="https://www.npmjs.com/package/@bongos/core" target="_blank" rel="noopener">Open source</a> (<a href="https://www.gnu.org/licenses/agpl-3.0.html" target="_blank" rel="noopener">AGPL-3.0</a>).<nav class="footNav" aria-label="Site"><a href="/privacy">Privacy</a><a href="/terms" aria-current="page">Terms</a><a href="/contact">Contact</a><a data-link-hall href="{{buildersOrigin}}">Builders' hall</a></nav></footer>
+<script src="/assets/hub-bar.js"></script>
 </body>
 </html>

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.51",
+  "version": "1.21.53",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.21.51",
+      "version": "1.21.53",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.51",
+  "version": "1.21.53",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -9074,5 +9074,17 @@
       "id": "1004531",
       "text": "We walked the whole Governor City against its design, in light and dark and on a phone: the home city, the street, every building, a vote decided from its card, and an amendment drafted from a building. Fixes: drafting a chang"
     }
+  ],
+  "1.21.52": [
+    {
+      "id": "1004489",
+      "text": "The Privacy, Terms and Contact pages now have the same top bar as the projects and account pages — the Projects menu and your profile menu — so following a footer link no longer swaps the whole header."
+    }
+  ],
+  "1.21.53": [
+    {
+      "id": "1004498",
+      "text": "Ideating mode now has its own tool. An \"Ideas\" button in the top bar opens a side panel where an ideator writes about the page they are on. \"Turn into ideas\" has an AI split the text into separate ideas, each filed under their"
+    }
   ]
 }

package/src/module-api.js

@@ -75,7 +75,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // MAJOR (see allowBoxScope below): passes the request through untouched.
 function deprecatedNoopMiddleware(_req, _res, next) { next(); }
 
-const CORE_VERSION = '1.21.51'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.21.53'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('discord'); log.info('mounted');

package/tests/hall_tweak_editor.mjs

@@ -635,7 +635,7 @@ try {
     assert.match(HTML, /<body data-page="tweak-editor"[^>]*data-fullscreen-switch/);
     assert.equal((HTML.match(/<h1\b/g) || []).length, 1);
     assert.ok(HTML.indexOf('tweak-editor-lib.js') < HTML.indexOf('tweak-editor.js?'), 'the lib loads first');
-    assert.match(HTML, /shell\.js\?v=2026-10-04-paintbrush/);
+    assert.match(HTML, /shell\.js\?v=2026-10-04-lightbulb/);
     assert.equal(/fonts\.googleapis\.com\/css/.test(HTML), false);
     for (const id of ['tw-bar', 'tw-counter', 'tw-open', 'tw-open-more', 'tw-divider', 'tw-openwrap', 'tw-open-menu', 'tw-open-tab', 'tw-open-split', 'tw-frame', 'tw-frame-view', 'tw-split-close', 'tw-download', 'tw-upload', 'tw-file', 'tw-submit', 'tw-paper', 'tw-doc', 'tw-notice', 'tw-done', 'tw-take', 'tw-pick', 'tw-picks', 'tw-refused', 'tw-refused-title', 'tw-refused-list', 'tw-refused-next', 'tw-refused-download', 'tw-refused-close']) {
       assert.ok(new RegExp(`id="${id}"`).test(HTML), `#${id} is in the markup`);

package/tests/hub_account_page.mjs

@@ -18,7 +18,9 @@
 //      header of its own — the same markup as projects.html, cosmos.css's rules,
 //      no map search, links into /projects, Account as the current place — and
 //      the bands EXECUTED: the chip from GET /me, open/close, Escape, the arrows,
-//      a click outside, and sign out as the POST.
+//      a click outside, and sign out as the POST. The bands script is the shared
+//      assets/hub-bar.js since task 1004489 (the three footer doors load it too),
+//      so the page's own script and that file run together here, as in a browser.
 //
 // DB-free. Run:  node --test tests/hub_account_page.mjs
 
@@ -37,6 +39,7 @@ const LANDING = path.join(ROOT, 'modules', 'public-landing', 'public');
 const HALL = path.join(ROOT, 'modules', 'hall-ui', 'public');
 const PAGE = fs.readFileSync(path.join(LANDING, 'account.html'), 'utf8').replace(/\r\n/g, '\n');
 const SCRIPT = PAGE.split('<script>').pop().split('</script>')[0];
+const BAR = fs.readFileSync(path.join(LANDING, 'assets', 'hub-bar.js'), 'utf8');
 const HUB = fs.readFileSync(path.join(LANDING, 'projects.html'), 'utf8').replace(/\r\n/g, '\n');
 const COSMOS = fs.readFileSync(path.join(LANDING, 'assets', 'cosmos.css'), 'utf8');
 
@@ -62,7 +65,9 @@ test('portable and dark only: stamped title, balanced sentinels, no :root, no ba
 });
 
 test('the script builds no markup from strings, and the controls are real markup', () => {
-  assert.doesNotMatch(SCRIPT, /innerHTML|insertAdjacentHTML|outerHTML/, 'live DOM is textContent / createElement only');
+  for (const [name, src] of [['the page', SCRIPT], ['assets/hub-bar.js', BAR]]) {
+    assert.doesNotMatch(src, /innerHTML|insertAdjacentHTML|outerHTML/, `${name}: live DOM is textContent / createElement only`);
+  }
   for (const id of ['fName', 'fBio', 'fHandle', 'fLinkWebsite', 'fLinkX', 'fLinkLinkedin', 'fLinkDiscord', 'profileSave', 'handleSave', 'privacySave', 'recordSave']) {
     assert.match(PAGE, new RegExp(`id="${id}"`), `#${id} ships in the markup`);
   }
@@ -76,8 +81,17 @@ test('the script builds no markup from strings, and the controls are real markup
 test('the door returns here, and the page calls only its own-scoped routes', () => {
   assert.match(PAGE, /href="\/api\/bongos\/auth\/web\/start\?return=\/account&amp;repos=1"/, 'sign-in lands back on /account, asking for repo access once (task 1004549)');
   const calls = [...SCRIPT.matchAll(/request\('(GET|PATCH|POST)', '([^']+)'/g)].map((m) => `${m[1]} ${m[2]}`);
-  assert.deepEqual([...new Set(calls)].sort(), ['GET /me', 'GET /me/cross-project','PATCH /me/cross-project', 'PATCH /me/handle', 'PATCH /me/profile'].sort());
-  assert.match(SCRIPT, /fetch\(API \+ '\/auth\/logout', \{ method: 'POST'/, 'sign out is the hub logout POST');
+  assert.deepEqual([...new Set(calls)].sort(), ['GET /me/cross-project', 'PATCH /me/cross-project', 'PATCH /me/handle', 'PATCH /me/profile'].sort());
+  // the bar's two calls live in the shared asset: the identity read and sign out
+  const barCalls = [...BAR.matchAll(/fetch\(API \+ '([^']+)', \{ method: '(GET|POST)'/g)].map((m) => `${m[2]} ${m[1]}`);
+  assert.deepEqual(barCalls.sort(), ['GET /me', 'POST /auth/logout']);
+  assert.match(BAR, /var API = '\/api\/bongos';/);
+});
+
+test('the bar’s script is the shared asset, loaded before the page’s own (task 1004489)', () => {
+  assert.match(PAGE, /<script src="\/assets\/hub-bar\.js"><\/script>\n<script>\n\(function \(\) \{/, 'hub-bar.js runs first, so window.HubBar exists when the page script asks for it');
+  assert.doesNotMatch(SCRIPT, /function (openBand|closeMenus|openMenu|paintBar)\b|\/auth\/logout/, 'no second copy of the bands, the chip or sign out in the page');
+  assert.match(SCRIPT, /var bar = window\.HubBar \|\| \{ paint: function \(\) \{\}, ready: Promise\.resolve\(null\) \};/, 'and the page survives the asset failing to load');
 });
 
 // ── 1b. the bar is the hub's (task 1004455) ──────────────────────────────────
@@ -259,7 +273,10 @@ function boot(answer) {
     return Promise.resolve({ status, ok: status >= 200 && status < 300, json: () => Promise.resolve(data) });
   };
   const location = { hostname: 'cloudbongos.com', pathname: '/account' };
-  vm.runInNewContext(SCRIPT, { document, fetch, location, window: { location: { assign(p) { dom.assigned = p; } } }, URL, Array, Object, JSON, Promise });
+  // one global, as in the browser: hub-bar.js sets window.HubBar, then the page reads it
+  const ctx = vm.createContext({ document, fetch, location, window: { location: { assign(p) { dom.assigned = p; } } }, URL, Array, Object, JSON, Promise });
+  vm.runInContext(BAR, ctx);
+  vm.runInContext(SCRIPT, ctx);
   return dom;
 }
 const settle = async () => { for (let i = 0; i < 8; i++) await new Promise((r) => setImmediate(r)); };