@bongos/core 1.24.47 → 1.24.49

package/modules/public-landing/public/contact.html

@@ -50,11 +50,7 @@
 <header class="shell bar">
   <div class="barLeft">
     <a class="barMark" id="barMark" href="/">
-      <svg class="bongosMark" viewBox="0 0 200 200" aria-hidden="true">
-        <path class="mr" d="M137 31 A78 78 0 1 0 170 66" fill="none" stroke="#17181a" stroke-width="15" stroke-linecap="round"/>
-        <circle class="mp" cx="100" cy="100" r="55" fill="#17181a"/>
-        <circle cx="156" cy="46" r="12" style="fill:var(--accent)"/>
-      </svg>
+      <svg class="bongosMark" viewBox="0 0 200 200" aria-hidden="true"><use href="/modules/ui-design/public/brand/mark.svg#mark"/></svg>
       <span>{{productName}}</span>
     </a>
   </div>

package/modules/public-landing/public/guild.html

@@ -125,11 +125,7 @@
 <header class="shell bar">
   <div class="barLeft">
     <a class="barMark" id="barMark" href="/">
-      <svg class="bongosMark" viewBox="0 0 200 200" aria-hidden="true">
-        <path class="mr" d="M137 31 A78 78 0 1 0 170 66" fill="none" stroke="#17181a" stroke-width="15" stroke-linecap="round"/>
-        <circle class="mp" cx="100" cy="100" r="55" fill="#17181a"/>
-        <circle cx="156" cy="46" r="12" style="fill:var(--accent)"/>
-      </svg>
+      <svg class="bongosMark" viewBox="0 0 200 200" aria-hidden="true"><use href="/modules/ui-design/public/brand/mark.svg#mark"/></svg>
       <span>{{productName}}</span>
     </a>
   </div>

package/modules/public-landing/public/index.html

@@ -154,9 +154,10 @@ main:focus{outline:none;box-shadow:none}
   color:var(--ink);text-shadow:var(--type-halo)}
 /* the mark: Ink and one light; its Night ink twin on a dark ground (task 1004846) */
 .barMark svg{width:32px;height:32px;display:block;flex:none}
-:root[data-mode="dark"] .bongosMark .mr{stroke:#e2e1e4}
-:root[data-mode="dark"] .bongosMark .mp{fill:#e2e1e4}
-@media (prefers-color-scheme: dark){:root:not([data-mode="light"]) .bongosMark .mr{stroke:#e2e1e4}:root:not([data-mode="light"]) .bongosMark .mp{fill:#e2e1e4}}
+/* drawn from the one mark (modules/ui-design/public/brand/mark.svg, task 1005088) */
+.bongosMark{--mark-ink:var(--ink)}
+:root[data-mode="dark"] .bongosMark{--mark-ink:#e2e1e4}
+@media (prefers-color-scheme: dark){:root:not([data-mode="light"]) .bongosMark{--mark-ink:#e2e1e4}}
 /* the right group is lowercase text; the OPEN trigger is underlined in the accent */
 .trig{display:inline-flex;align-items:center;gap:7px;min-height:44px;padding:0;cursor:pointer;
   background:none;border:0;border-radius:var(--radius-sm);font-family:var(--font-body);font-size:15px;
@@ -690,11 +691,7 @@ composition A; landing composition v3, picked by the owner 2026-08-27. No roll,
 <header class="topbar bar">
   <div class="barLeft">
     <a class="barMark" href="/" aria-label="{{productName}}">
-      <svg class="bongosMark" viewBox="0 0 200 200" aria-hidden="true">
-        <path class="mr" d="M137 31 A78 78 0 1 0 170 66" fill="none" stroke="#17181a" stroke-width="15" stroke-linecap="round"/>
-        <circle class="mp" cx="100" cy="100" r="55" fill="#17181a"/>
-        <circle cx="156" cy="46" r="12" style="fill:var(--accent)"/>
-      </svg>
+      <svg class="bongosMark" viewBox="0 0 200 200" aria-hidden="true"><use href="/modules/ui-design/public/brand/mark.svg#mark"/></svg>
       <span class="mark-word">{{productName}}</span>
     </a>
   </div>

package/modules/public-landing/public/invitations.html

@@ -80,11 +80,7 @@
 <header class="shell bar">
   <div class="barLeft">
     <a class="barMark" id="barMark" href="/">
-      <svg class="bongosMark" viewBox="0 0 200 200" aria-hidden="true">
-        <path class="mr" d="M137 31 A78 78 0 1 0 170 66" fill="none" stroke="#17181a" stroke-width="15" stroke-linecap="round"/>
-        <circle class="mp" cx="100" cy="100" r="55" fill="#17181a"/>
-        <circle cx="156" cy="46" r="12" style="fill:var(--accent)"/>
-      </svg>
+      <svg class="bongosMark" viewBox="0 0 200 200" aria-hidden="true"><use href="/modules/ui-design/public/brand/mark.svg#mark"/></svg>
       <span>{{productName}}</span>
     </a>
   </div>

package/modules/public-landing/public/privacy.html

@@ -49,11 +49,7 @@
 <header class="shell bar">
   <div class="barLeft">
     <a class="barMark" id="barMark" href="/">
-      <svg class="bongosMark" viewBox="0 0 200 200" aria-hidden="true">
-        <path class="mr" d="M137 31 A78 78 0 1 0 170 66" fill="none" stroke="#17181a" stroke-width="15" stroke-linecap="round"/>
-        <circle class="mp" cx="100" cy="100" r="55" fill="#17181a"/>
-        <circle cx="156" cy="46" r="12" style="fill:var(--accent)"/>
-      </svg>
+      <svg class="bongosMark" viewBox="0 0 200 200" aria-hidden="true"><use href="/modules/ui-design/public/brand/mark.svg#mark"/></svg>
       <span>{{productName}}</span>
     </a>
   </div>

package/modules/public-landing/public/projects.html

@@ -808,11 +808,7 @@ summary{min-height:24px;padding:3px 0;}
 <header class="shell bar">
   <div class="barLeft">
     <a class="barMark" id="barMark" href="/">
-      <svg class="bongosMark" viewBox="0 0 200 200" aria-hidden="true">
-        <path class="mr" d="M137 31 A78 78 0 1 0 170 66" fill="none" stroke="#17181a" stroke-width="15" stroke-linecap="round"/>
-        <circle class="mp" cx="100" cy="100" r="55" fill="#17181a"/>
-        <circle cx="156" cy="46" r="12" style="fill:var(--accent)"/>
-      </svg>
+      <svg class="bongosMark" viewBox="0 0 200 200" aria-hidden="true"><use href="/modules/ui-design/public/brand/mark.svg#mark"/></svg>
       <span data-brand-product-inline>Cloud Bongos</span>
     </a>
     <!-- under 480 the search folds into this magnifier, which drops one

package/modules/public-landing/public/terms.html

@@ -49,11 +49,7 @@
 <header class="shell bar">
   <div class="barLeft">
     <a class="barMark" id="barMark" href="/">
-      <svg class="bongosMark" viewBox="0 0 200 200" aria-hidden="true">
-        <path class="mr" d="M137 31 A78 78 0 1 0 170 66" fill="none" stroke="#17181a" stroke-width="15" stroke-linecap="round"/>
-        <circle class="mp" cx="100" cy="100" r="55" fill="#17181a"/>
-        <circle cx="156" cy="46" r="12" style="fill:var(--accent)"/>
-      </svg>
+      <svg class="bongosMark" viewBox="0 0 200 200" aria-hidden="true"><use href="/modules/ui-design/public/brand/mark.svg#mark"/></svg>
       <span>{{productName}}</span>
     </a>
   </div>

package/modules/raise/views/gate.html

@@ -5,7 +5,8 @@
 <meta name="viewport" content="width=device-width, initial-scale=1">
 <meta name="robots" content="noindex, nofollow">
 <title>Cloud Bongos — Pre-seed</title>
-<link rel="icon" href="{{base}}/assets/favicon.svg" type="image/svg+xml">
+<link rel="icon" href="/modules/ui-design/public/brand/favicon.svg" type="image/svg+xml">
+<link rel="apple-touch-icon" href="/modules/ui-design/public/brand/apple-touch-icon.png">
 <link rel="preconnect" href="https://fonts.googleapis.com">
 <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
 <link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=JetBrains+Mono:wght@400&family=Manrope:wght@300;400;500;600&display=swap">
@@ -16,8 +17,8 @@
 <body class="gate-body">
 <main class="gate">
   <div class="gate__brand">
-    <img class="logo logo--light" src="{{base}}/assets/logo-ink.svg" alt="" width="56" height="56">
-    <img class="logo logo--dark" src="{{base}}/assets/logo-night.svg" alt="" width="56" height="56">
+    <img class="logo logo--light" src="/modules/ui-design/public/brand/mark-light.svg" alt="" width="56" height="56">
+    <img class="logo logo--dark" src="/modules/ui-design/public/brand/mark-dark.svg" alt="" width="56" height="56">
     <span class="wordmark">cloud bongos</span>
   </div>
   {{error}}

package/modules/raise/views/nda.html

@@ -5,7 +5,8 @@
 <meta name="viewport" content="width=device-width, initial-scale=1">
 <meta name="robots" content="noindex, nofollow">
 <title>Confidentiality agreement — Cloud Bongos</title>
-<link rel="icon" href="{{base}}/assets/favicon.svg" type="image/svg+xml">
+<link rel="icon" href="/modules/ui-design/public/brand/favicon.svg" type="image/svg+xml">
+<link rel="apple-touch-icon" href="/modules/ui-design/public/brand/apple-touch-icon.png">
 <link rel="preconnect" href="https://fonts.googleapis.com">
 <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
 <link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=JetBrains+Mono:wght@400&family=Manrope:wght@300;400;500;600&display=swap">

package/modules/raise/views/page.html

@@ -5,7 +5,8 @@
 <meta name="viewport" content="width=device-width, initial-scale=1">
 <meta name="robots" content="noindex, nofollow">
 <title>Cloud Bongos — Pre-seed</title>
-<link rel="icon" href="{{base}}/assets/favicon.svg" type="image/svg+xml">
+<link rel="icon" href="/modules/ui-design/public/brand/favicon.svg" type="image/svg+xml">
+<link rel="apple-touch-icon" href="/modules/ui-design/public/brand/apple-touch-icon.png">
 <link rel="preconnect" href="https://fonts.googleapis.com">
 <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
 <link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=JetBrains+Mono:wght@400&family=Manrope:wght@300;400;500;600&display=swap">
@@ -20,8 +21,8 @@
 {{editBar}}
 <header class="top">
   <a class="brand" href="#top" aria-label="Cloud Bongos — back to top">
-    <img class="logo logo--light" src="{{base}}/assets/logo-ink.svg" alt="" width="32" height="32">
-    <img class="logo logo--dark" src="{{base}}/assets/logo-night.svg" alt="" width="32" height="32">
+    <img class="logo logo--light" src="/modules/ui-design/public/brand/mark-light.svg" alt="" width="32" height="32">
+    <img class="logo logo--dark" src="/modules/ui-design/public/brand/mark-dark.svg" alt="" width="32" height="32">
     <span class="wordmark">cloud bongos</span>
   </a>
   <nav class="top__actions">

package/modules/status-ui/public/index.html

@@ -5,7 +5,7 @@
   <meta name="viewport" content="width=device-width, initial-scale=1">
   <title>{{worldName}} — the public ledger</title>
   <meta name="description" content="The public ledger of {{worldName}} — {{currency}} spent, works wrought, and the citizens who shape her stones.">
-  <link rel="icon" href="data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'><text x='16' y='24' font-size='24' text-anchor='middle' font-family='serif'>Α</text></svg>">
+  <link rel="icon" href="/modules/ui-design/public/brand/favicon.svg" type="image/svg+xml">
   <link rel="preconnect" href="https://fonts.googleapis.com">
   <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
   <link href="https://fonts.googleapis.com/css2?family=Cinzel:wght@500;700&family=EB+Garamond:ital,wght@0,400;0,500;0,600;1,400;1,500&display=swap" rel="stylesheet">

package/modules/status-ui/public/style.css

@@ -354,7 +354,7 @@ main {
 }
 /* the ring and the core: one ink, breathing */
 .loading-mark::before {
-  --lm-shape: url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 200 200'%3E%3Cpath d='M137 31 A78 78 0 1 0 170 66' fill='none' stroke='black' stroke-width='15' stroke-linecap='round'/%3E%3Ccircle cx='100' cy='100' r='55'/%3E%3C/svg%3E");
+  --lm-shape: url("/modules/ui-design/public/brand/mark-body.svg");
   background: color-mix(in srgb, var(--ink) 30%, var(--bg-card));
   animation:
     loading-mark-turn 1.6s cubic-bezier(.45, .05, .55, .95) infinite,
@@ -362,7 +362,7 @@ main {
 }
 /* the dot: the accent, laid exactly over the mark and turning with it */
 .loading-mark::after {
-  --lm-shape: url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 200 200'%3E%3Ccircle cx='156' cy='46' r='12'/%3E%3C/svg%3E");
+  --lm-shape: url("/modules/ui-design/public/brand/mark-dot.svg");
   background: var(--accent);
 }
 @keyframes loading-mark-arrive { from { filter: opacity(0); transform: translateY(6px); } }

package/modules/ui-design/public/brand/favicon.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 200 200"><style>svg{--i:#17181a;--d:#fb9569}@media (prefers-color-scheme:dark){svg{--i:#e2e1e4}}</style><path d="M137 31 A78 78 0 1 0 170 66" pathLength="100" fill="none" stroke-width="24" stroke-linecap="round" style="stroke:var(--i)"/><circle cx="100" cy="100" r="50" style="fill:var(--i)"/><circle cx="156" cy="46" r="18" style="fill:var(--d)"/></svg>

package/modules/ui-design/public/brand/mark-body.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 200 200" aria-hidden="true"><path d="M137 31 A78 78 0 1 0 170 66" pathLength="100" fill="none" stroke-width="15" stroke-linecap="round" style="stroke:#000000"/><circle cx="100" cy="100" r="55" style="fill:#000000"/></svg>

package/modules/ui-design/public/brand/mark-dark.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 200 200" role="img" aria-label="logo"><path d="M137 31 A78 78 0 1 0 170 66" pathLength="100" fill="none" stroke-width="15" stroke-linecap="round" style="stroke:#e2e1e4"/><circle cx="100" cy="100" r="55" style="fill:#e2e1e4"/><circle cx="156" cy="46" r="12" style="fill:#fb9569"/></svg>

package/modules/ui-design/public/brand/mark-dot.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 200 200" aria-hidden="true"><circle cx="156" cy="46" r="12" style="fill:#000000"/></svg>

package/modules/ui-design/public/brand/mark-light.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 200 200" role="img" aria-label="logo"><path d="M137 31 A78 78 0 1 0 170 66" pathLength="100" fill="none" stroke-width="15" stroke-linecap="round" style="stroke:#17181a"/><circle cx="100" cy="100" r="55" style="fill:#17181a"/><circle cx="156" cy="46" r="12" style="fill:#fb9569"/></svg>

package/modules/ui-design/public/brand/mark-mono.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 200 200" role="img" aria-label="logo"><path d="M137 31 A78 78 0 1 0 170 66" pathLength="100" fill="none" stroke-width="15" stroke-linecap="round" style="stroke:#000000"/><circle cx="100" cy="100" r="55" style="fill:#000000"/><circle cx="156" cy="46" r="12" style="fill:#000000"/></svg>

package/modules/ui-design/public/brand/mark.svg

@@ -0,0 +1,21 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 200 200" role="img" aria-label="mark">
+  <!-- THE Cloud Bongos mark: the one source (task 1005088). An open ring, the
+       planet in it, and the moon in the gap. Every page draws it from here:
+         - inline, by reference: an svg with viewBox 0 0 200 200 holding
+           use href="/modules/ui-design/public/brand/mark.svg#mark"
+           (the parts are #mark-ring, #mark-disc and #mark-dot, for a page that animates them);
+         - coloured by two custom properties on the referencing element: mark-ink (the ring
+           and the planet; currentColor when unset) and mark-dot (the moon; the page's
+           accent when unset), each written with the two leading dashes in CSS;
+         - server-side (the gates, a look's favicon) through src/brand-mark.js;
+         - as files (light, dark, mono, the favicon set) written beside this one by
+           scripts/bongos/gen-brand.js from the pack's colours. Never edit those by hand.
+       Keep the ids and the two custom properties: src/brand-mark.js and
+       tests/brand_mark.mjs read them. An XML comment may not hold two dashes in a row,
+       or no browser will read this file. -->
+  <g id="mark">
+    <path id="mark-ring" d="M137 31 A78 78 0 1 0 170 66" pathLength="100" fill="none" stroke-width="15" stroke-linecap="round" style="stroke:var(--mark-ink,currentColor)"/>
+    <circle id="mark-disc" cx="100" cy="100" r="55" style="fill:var(--mark-ink,currentColor)"/>
+    <circle id="mark-dot" cx="156" cy="46" r="12" style="fill:var(--mark-dot,var(--accent,currentColor))"/>
+  </g>
+</svg>

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.24.47",
+  "version": "1.24.49",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.24.47",
+      "version": "1.24.49",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.24.47",
+  "version": "1.24.49",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -11253,5 +11253,17 @@
       "id": "1005082",
       "text": "The design rulebook now describes the builders' hall as it really is, and spells out the name: 'cloud bongos' in the logo, 'Cloud Bongos' in sentences. The design-tool token file is now built automatically from the real styles"
     }
+  ],
+  "1.24.48": [
+    {
+      "id": "1005084",
+      "text": "The builders' hall now has one button and one text box style everywhere instead of eight button sizes and five box styles; main buttons are the full 46px pill with dark text on the orange, and the setup screen's save button is"
+    }
+  ],
+  "1.24.49": [
+    {
+      "id": "1005088",
+      "text": "The Cloud Bongos logo and the browser-tab icon now come from one file, so every page, the hall, the welcome screen, the gates and the fundraising page show exactly the same mark, and phones get a proper home-screen icon."
+    }
   ]
 }

package/scripts/bongos/fitness.js

@@ -574,8 +574,7 @@ const KERNEL_FILES = [
   // task 1004421 (ADR 0358): branding.js lays the chosen look over the pack through this
   // file — the same identity/config category, requiring only instance-config and node
   // built-ins, so it joins the roster rather than reading as a kernel→domain leak.
-  'src/hall-look.js',
-  'src/build-info.js',
+  'src/hall-look.js', 'src/brand-mark.js', 'src/build-info.js', // brand-mark: the mark's one source (task 1005088), read by hall-look; same imports
   // task 1003476 (goal 1000072): the project's stale-claim timer — host configuration
   // a module reads rather than hardcodes, exactly the category instance-config.js and
   // branding.js are in. The doorway (a KERNEL_FILE) re-exports it, so leaving it off

package/scripts/bongos/gen-brand.js

@@ -0,0 +1,99 @@
+#!/usr/bin/env node
+'use strict';
+// gen-brand.js — the logo and favicon set, written from the one mark (task 1005088).
+//
+// The mark's one source is a shipped module's public/brand/mark.svg (src/brand-mark.js finds
+// it). Pages that can colour it themselves reference it with <use>; everything that cannot —
+// an <img>, a CSS mask, a browser tab, a home-screen icon — gets a fixed-colour file written
+// here, beside the source, in the neutral pack's colours (config/branding.neutral.json):
+//
+//   mark-light.svg   the mark in Ink with the accent moon (light grounds)
+//   mark-dark.svg    the mark in the Night ink with the accent moon (dark grounds)
+//   mark-mono.svg    the whole mark in one ink (black), for a print or a stamp
+//   mark-body.svg    the ring and planet only, one ink   (the loaders' mask shapes:
+//   mark-dot.svg     the moon only, one ink               the ring breathes, the moon turns)
+//   favicon.svg      the small cut, Ink by day and the Night ink by night
+//   apple-touch-icon.png  180x180, the light mark on the pack's ground (--png; needs a browser)
+//
+// Deterministic text, so `--check` is a clean gate (tests/brand_mark.mjs runs it). The PNG is
+// rendered by the system browser and only written with --png.
+//
+// Usage:
+//   node scripts/bongos/gen-brand.js          # write the SVG variants
+//   node scripts/bongos/gen-brand.js --png    # … and render apple-touch-icon.png
+//   node scripts/bongos/gen-brand.js --check  # write nothing; exit 2 if a variant is stale
+
+const fs = require('node:fs');
+const path = require('node:path');
+const { NIGHT_INK, readMarkSource, markParts, markFile, faviconSvg } = require('../../src/brand-mark');
+
+const ROOT = path.resolve(__dirname, '..', '..');
+
+function brandDir() {
+  const modulesDir = path.join(ROOT, 'modules');
+  const hit = fs.readdirSync(modulesDir).sort()
+    .map((m) => path.join(modulesDir, m, 'public', 'brand'))
+    .find((d) => fs.existsSync(path.join(d, 'mark.svg')));
+  if (!hit) throw new Error('no module ships public/brand/mark.svg');
+  return hit;
+}
+
+function packColors() {
+  const pack = JSON.parse(fs.readFileSync(path.join(ROOT, 'config', 'branding.neutral.json'), 'utf8'));
+  return pack.theme.ui.colors;
+}
+
+// { filename: text } for every SVG variant. Pure given the source and the colours.
+function brandFiles(src, colors) {
+  const parts = markParts(src);
+  if (!parts) throw new Error('mark.svg is missing #mark-ring, #mark-disc or #mark-dot');
+  const mono = '#000000';
+  return {
+    'mark-light.svg': markFile(parts, { ink: colors.ink, dot: colors.accent, label: 'logo' }),
+    'mark-dark.svg': markFile(parts, { ink: NIGHT_INK, dot: colors.accent, label: 'logo' }),
+    'mark-mono.svg': markFile(parts, { ink: mono, dot: mono, label: 'logo' }),
+    'mark-body.svg': markFile(parts, { ink: mono, dot: mono, only: ['ring', 'disc'] }),
+    'mark-dot.svg': markFile(parts, { ink: mono, dot: mono, only: ['dot'] }),
+    'favicon.svg': faviconSvg({ ink: colors.ink, accent: colors.accent }, src) + '\n',
+  };
+}
+
+async function renderTouchIcon(dir, colors) {
+  const { launchBrowser } = require('../../modules/ui-design/kit/lib'); // eslint-disable-line global-require
+  const svg = fs.readFileSync(path.join(dir, 'mark-light.svg'), 'utf8');
+  const browser = await launchBrowser();
+  try {
+    const page = await browser.newPage({ viewport: { width: 180, height: 180 }, deviceScaleFactor: 1 });
+    await page.setContent(`<html><body style="margin:0;background:${colors.bg}">` +
+      `<img src="data:image/svg+xml;base64,${Buffer.from(svg).toString('base64')}" style="display:block;width:128px;height:128px;margin:26px">` +
+      '</body></html>');
+    await page.waitForLoadState('load');
+    await page.screenshot({ path: path.join(dir, 'apple-touch-icon.png'), omitBackground: false });
+  } finally { await browser.close(); }
+}
+
+async function main() {
+  const args = process.argv.slice(2);
+  const dir = brandDir();
+  const colors = packColors();
+  const files = brandFiles(readMarkSource({ root: ROOT }), colors);
+  const stale = [];
+  for (const [name, text] of Object.entries(files)) {
+    const file = path.join(dir, name);
+    const cur = fs.existsSync(file) ? fs.readFileSync(file, 'utf8') : null;
+    if (cur === text) continue;
+    stale.push(name);
+    if (!args.includes('--check')) fs.writeFileSync(file, text);
+  }
+  if (args.includes('--check')) {
+    if (stale.length) { process.stderr.write(`gen-brand: stale — ${stale.join(', ')}. Run: node scripts/bongos/gen-brand.js\n`); process.exit(2); }
+    process.stdout.write('gen-brand: the logo and favicon set match mark.svg\n');
+    return;
+  }
+  if (args.includes('--png')) await renderTouchIcon(dir, colors);
+  process.stdout.write(`gen-brand: ${stale.length ? `wrote ${stale.join(', ')}` : 'nothing to write'}${args.includes('--png') ? ' + apple-touch-icon.png' : ''}\n`);
+}
+
+if (require.main === module) main().catch((e) => { process.stderr.write(`${e.message}\n`); process.exit(1); });
+
+module.exports = { brandFiles, packColors };

package/scripts/gds/gen-brand.js

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+// scripts/gds/gen-brand.js — @bongos-forwarder (task 1004848). Generated by
+// scripts/bongos/codemod-rename-scripts-gds.js; do not edit.
+// The real script is scripts/bongos/gen-brand.js. This forwarder keeps callers that still name
+// the old path working, and warns once so they get repointed. Task 1003706 removes it.
+'use strict';
+require('../bongos/forwarder.js').forward(module, 'gen-brand.js');

package/src/bongos/platform-visibility-gate.js

@@ -179,6 +179,9 @@ function relativeReturn(raw) {
 
 // The one server escaper (task 1004876); it also escapes ' , which this copy did not.
 const { escapeHtml: escAttr } = require('../html-escape');
+// The mark, inlined from its one source (task 1005088) so the door still loads nothing;
+// coloured by .mark's --mark-ink / --mark-dot below.
+const { markSvg } = require('../brand-mark');
 
 // The door. Self-contained on purpose (the pre-launch gate's shape): it is
 // served to someone who may not see the project, so it pulls no stylesheet, no
@@ -198,8 +201,8 @@ body{margin:0;min-height:100vh;display:grid;place-items:center;padding:24px;
   background:#edecee;color:#17181a}
 @media(prefers-color-scheme:dark){body{background:#000000;color:#ffffff}}
 .box{width:min(380px,100%);text-align:center}
-.mark{display:block;width:48px;height:48px;margin:0 auto 22px}
-@media(prefers-color-scheme:dark){.mark .mr{stroke:#e2e1e4}.mark .mp{fill:#e2e1e4}}
+.mark{display:block;width:48px;height:48px;margin:0 auto 22px;--mark-ink:#17181a;--mark-dot:#fb9569}
+@media(prefers-color-scheme:dark){.mark{--mark-ink:#e2e1e4}}
 h1{font-size:20px;font-weight:700;margin:0 0 6px}
 p{margin:0 0 20px;opacity:.72;font-size:14px}
 /* dark ink on the accent fill: the chrome world's salmon carries white at 2.19:1 */
@@ -207,7 +210,7 @@ a.btn{display:inline-block;padding:11px 22px;border-radius:999px;background:#fb9
   font:700 14px/1 inherit;text-decoration:none}
 a.btn:focus{outline:2px solid #a3481a;outline-offset:2px}
 </style></head><body><div class="box">
-<svg class="mark" viewBox="0 0 200 200" aria-hidden="true"><path class="mr" d="M137 31 A78 78 0 1 0 170 66" fill="none" stroke="#17181a" stroke-width="15" stroke-linecap="round"/><circle class="mp" cx="100" cy="100" r="55" fill="#17181a"/><circle cx="156" cy="46" r="12" fill="#fb9569"/></svg>
+${markSvg({ className: 'mark' })}
 <h1>${safe}</h1>
 <p>This project’s pages are open to its members. Sign in to continue.</p>
 <a class="btn" href="${escAttr(signIn)}">Sign in</a>

package/src/bongos/prelaunch-gate.js

@@ -180,6 +180,9 @@ function relativeReturn(raw) {
 
 // The one server escaper (task 1004876); it also escapes ' , which this copy did not.
 const { escapeHtml: escAttr } = require('../html-escape');
+// The mark, inlined from its one source (task 1005088) so the form still loads nothing;
+// coloured by .mark's --mark-ink / --mark-dot below.
+const { markSvg } = require('../brand-mark');
 
 // The form. Self-contained and token-free on purpose: it is served BEFORE the
 // visitor is allowed to see anything, so it must not pull the branding bundle,
@@ -198,8 +201,8 @@ body{margin:0;min-height:100vh;display:grid;place-items:center;padding:24px;
   background:#edecee;color:#17181a}
 @media(prefers-color-scheme:dark){body{background:#000000;color:#ffffff}}
 .box{width:min(380px,100%);text-align:center}
-.mark{display:block;width:48px;height:48px;margin:0 auto 22px}
-@media(prefers-color-scheme:dark){.mark .mr{stroke:#e2e1e4}.mark .mp{fill:#e2e1e4}}
+.mark{display:block;width:48px;height:48px;margin:0 auto 22px;--mark-ink:#17181a;--mark-dot:#fb9569}
+@media(prefers-color-scheme:dark){.mark{--mark-ink:#e2e1e4}}
 h1{font-size:20px;font-weight:700;margin:0 0 6px}
 p{margin:0 0 20px;opacity:.72;font-size:14px}
 form{display:flex;gap:8px}
@@ -213,7 +216,7 @@ button{padding:11px 20px;border:0;border-radius:999px;background:#fb9569;color:#
 .err{margin:14px 0 0;color:#b3261e;font-size:13.5px}
 @media(prefers-color-scheme:dark){.err{color:#ffb4a8}}
 </style></head><body><div class="box">
-<svg class="mark" viewBox="0 0 200 200" aria-hidden="true"><path class="mr" d="M137 31 A78 78 0 1 0 170 66" fill="none" stroke="#17181a" stroke-width="15" stroke-linecap="round"/><circle class="mp" cx="100" cy="100" r="55" fill="#17181a"/><circle cx="156" cy="46" r="12" fill="#fb9569"/></svg>
+${markSvg({ className: 'mark' })}
 <h1>${name}</h1>
 <p>Not open to the world yet. Enter the password to have a look.</p>
 <form method="POST" action="${SUBMIT_PATH}">

package/src/bongos/serve-internal.js

@@ -133,6 +133,7 @@ function themeMarkup(theme) {
   // before anything reads the URL, so the neutral pack's inline `data:image/svg+xml,
   // <svg …>` favicon resolves to exactly the same bytes it does today.
   if (theme.favicon) out += `<link rel="icon" href="${esc(theme.favicon)}">`;
+  if (theme.appleTouchIcon) out += `<link rel="apple-touch-icon" href="${esc(theme.appleTouchIcon)}">`;
   return out;
 }
 

package/src/brand-mark.js

@@ -0,0 +1,96 @@
+// src/brand-mark.js — the Bongos mark for the server, read from its one source (task 1005088).
+//
+// The ring-and-dot mark lives in exactly one file, a shipped module's public/brand/mark.svg.
+// A browser page draws it by reference (<use href="…/brand/mark.svg#mark">); the server needs
+// the markup itself in two places that load nothing — the pre-launch and members-only gates,
+// which are self-contained on purpose — and in a looked hall's favicon, drawn in the look's own
+// colours. This file reads that source and hands those out, and scripts/bongos/gen-brand.js
+// writes the static variants (light, dark, mono, the favicon) from the same functions.
+//
+// The source is found by its SHAPE — any shipped module's public/brand/mark.svg — never by a
+// module key, which core may not name (ADR 0083 §Decision #4), as src/hall-look.js finds the
+// style library. PURE given the source text; the default reader is the only I/O.
+'use strict';
+
+const fs = require('node:fs');
+const path = require('node:path');
+
+// The Night ink: the chrome world's ink on a dark ground, which every dark twin of the mark uses.
+const NIGHT_INK = '#e2e1e4';
+// The two custom properties the source colours itself by, exactly as written there.
+const INK_VAR = 'var(--mark-ink,currentColor)';
+const DOT_VAR = 'var(--mark-dot,var(--accent,currentColor))';
+// The favicon cut: at 16px the display weights blur, so the tab icon draws a heavier ring, a
+// slightly smaller planet and a larger moon. Same geometry, other weights.
+const SMALL_CUT = { ring: { 'stroke-width': '24' }, disc: { r: '50' }, dot: { r: '18' } };
+
+let _source = null;
+function findSource(root) {
+  const base = root || require('./instance-config').resolveCoreRoot(); // eslint-disable-line global-require
+  const modulesDir = path.join(base, 'modules');
+  return fs.readdirSync(modulesDir).sort()
+    .map((m) => path.join(modulesDir, m, 'public', 'brand', 'mark.svg'))
+    .find((f) => fs.existsSync(f)) || null;
+}
+// The source text, read once. null when no shipped module carries it.
+function readMarkSource({ root } = {}) {
+  if (_source !== null && !root) return _source;
+  let text = '';
+  try { const file = findSource(root); text = file ? fs.readFileSync(file, 'utf8') : ''; } catch { text = ''; }
+  if (!root) _source = text;
+  return text;
+}
+
+// The three parts as the source writes them, ids dropped (an inline copy must not collide
+// with the source's ids on a page). null when the source is missing or misshapen.
+function markParts(src = readMarkSource()) {
+  const pick = (id) => {
+    const m = String(src || '').match(new RegExp(`<(path|circle)\\s+id="mark-${id}"([^>]*?)\\s*/>`));
+    return m ? `<${m[1]}${m[2]}/>` : null;
+  };
+  const parts = { ring: pick('ring'), disc: pick('disc'), dot: pick('dot') };
+  return parts.ring && parts.disc && parts.dot ? parts : null;
+}
+
+function setAttrs(el, attrs) {
+  let out = el;
+  for (const [k, v] of Object.entries(attrs || {})) out = out.replace(new RegExp(`\\s${k}="[^"]*"`), ` ${k}="${v}"`);
+  return out;
+}
+
+// The parts' markup with the two colours set: each a CSS value (a hex, or a var()).
+function partsMarkup(parts, { ink = INK_VAR, dot = DOT_VAR, cut = null, only = null } = {}) {
+  const names = only || ['ring', 'disc', 'dot'];
+  return names.map((n) => setAttrs(parts[n], cut && cut[n]).split(INK_VAR).join(ink).split(DOT_VAR).join(dot)).join('');
+}
+
+// The mark as inline markup for a server-rendered page. Coloured by --mark-ink / --mark-dot on
+// the element (or its ancestors), exactly as a page's <use> reference is.
+function markSvg({ className = 'mark', src } = {}) {
+  const parts = markParts(src === undefined ? readMarkSource() : src);
+  if (!parts) return '';
+  return `<svg class="${className}" viewBox="0 0 200 200" aria-hidden="true">${partsMarkup(parts)}</svg>`;
+}
+
+// A standalone SVG file of the mark in fixed colours (the light, dark and mono logos, and the
+// two mask shapes the loaders cut from it).
+function markFile(parts, { ink, dot, only, label = '' } = {}) {
+  const a11y = label ? ` role="img" aria-label="${label}"` : ' aria-hidden="true"';
+  return `<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 200 200"${a11y}>${partsMarkup(parts, { ink, dot, only })}</svg>\n`;
+}
+
+// The favicon: the small cut, in the pack's ink by day and the Night ink by night.
+function faviconSvg({ ink, accent, night = NIGHT_INK }, src = readMarkSource()) {
+  const parts = markParts(src);
+  if (!parts) return '';
+  return '<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 200 200">' +
+    `<style>svg{--i:${ink};--d:${accent}}@media (prefers-color-scheme:dark){svg{--i:${night}}}</style>` +
+    partsMarkup(parts, { ink: 'var(--i)', dot: 'var(--d)', cut: SMALL_CUT }) + '</svg>';
+}
+
+// An SVG as a data: URI for a <link rel="icon"> (single quotes, # escaped), or '' for ''.
+function svgDataUri(svg) {
+  return svg ? 'data:image/svg+xml;utf8,' + svg.replace(/"/g, "'").replace(/#/g, '%23') : '';
+}
+
+module.exports = { NIGHT_INK, readMarkSource, markParts, markSvg, markFile, faviconSvg, svgDataUri };

package/src/branding.js

@@ -268,6 +268,8 @@ function clientBranding(b = branding()) {
         links: Array.isArray(ui.fonts?.links) ? ui.fonts.links : [],
       },
       favicon: ui.favicon || '',
+      // the home-screen icon (a 180x180 PNG; task 1005088), '' when the pack names none
+      appleTouchIcon: ui.appleTouchIcon || '',
       backdrop: ui.backdrop || '',
       // The look (ADR 0358): which one this hall wears ('' = its own pack), whether
       // its night is tinted (only ever true with a look), and its logo address.