@bongos/core 1.24.48 → 1.24.50

package/modules/ui-design/public/brand/favicon.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 200 200"><style>svg{--i:#17181a;--d:#fb9569}@media (prefers-color-scheme:dark){svg{--i:#e2e1e4}}</style><path d="M137 31 A78 78 0 1 0 170 66" pathLength="100" fill="none" stroke-width="24" stroke-linecap="round" style="stroke:var(--i)"/><circle cx="100" cy="100" r="50" style="fill:var(--i)"/><circle cx="156" cy="46" r="18" style="fill:var(--d)"/></svg>

package/modules/ui-design/public/brand/mark-body.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 200 200" aria-hidden="true"><path d="M137 31 A78 78 0 1 0 170 66" pathLength="100" fill="none" stroke-width="15" stroke-linecap="round" style="stroke:#000000"/><circle cx="100" cy="100" r="55" style="fill:#000000"/></svg>

package/modules/ui-design/public/brand/mark-dark.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 200 200" role="img" aria-label="logo"><path d="M137 31 A78 78 0 1 0 170 66" pathLength="100" fill="none" stroke-width="15" stroke-linecap="round" style="stroke:#e2e1e4"/><circle cx="100" cy="100" r="55" style="fill:#e2e1e4"/><circle cx="156" cy="46" r="12" style="fill:#fb9569"/></svg>

package/modules/ui-design/public/brand/mark-dot.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 200 200" aria-hidden="true"><circle cx="156" cy="46" r="12" style="fill:#000000"/></svg>

package/modules/ui-design/public/brand/mark-light.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 200 200" role="img" aria-label="logo"><path d="M137 31 A78 78 0 1 0 170 66" pathLength="100" fill="none" stroke-width="15" stroke-linecap="round" style="stroke:#17181a"/><circle cx="100" cy="100" r="55" style="fill:#17181a"/><circle cx="156" cy="46" r="12" style="fill:#fb9569"/></svg>

package/modules/ui-design/public/brand/mark-mono.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 200 200" role="img" aria-label="logo"><path d="M137 31 A78 78 0 1 0 170 66" pathLength="100" fill="none" stroke-width="15" stroke-linecap="round" style="stroke:#000000"/><circle cx="100" cy="100" r="55" style="fill:#000000"/><circle cx="156" cy="46" r="12" style="fill:#000000"/></svg>

package/modules/ui-design/public/brand/mark.svg

@@ -0,0 +1,21 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 200 200" role="img" aria-label="mark">
+  <!-- THE Cloud Bongos mark: the one source (task 1005088). An open ring, the
+       planet in it, and the moon in the gap. Every page draws it from here:
+         - inline, by reference: an svg with viewBox 0 0 200 200 holding
+           use href="/modules/ui-design/public/brand/mark.svg#mark"
+           (the parts are #mark-ring, #mark-disc and #mark-dot, for a page that animates them);
+         - coloured by two custom properties on the referencing element: mark-ink (the ring
+           and the planet; currentColor when unset) and mark-dot (the moon; the page's
+           accent when unset), each written with the two leading dashes in CSS;
+         - server-side (the gates, a look's favicon) through src/brand-mark.js;
+         - as files (light, dark, mono, the favicon set) written beside this one by
+           scripts/bongos/gen-brand.js from the pack's colours. Never edit those by hand.
+       Keep the ids and the two custom properties: src/brand-mark.js and
+       tests/brand_mark.mjs read them. An XML comment may not hold two dashes in a row,
+       or no browser will read this file. -->
+  <g id="mark">
+    <path id="mark-ring" d="M137 31 A78 78 0 1 0 170 66" pathLength="100" fill="none" stroke-width="15" stroke-linecap="round" style="stroke:var(--mark-ink,currentColor)"/>
+    <circle id="mark-disc" cx="100" cy="100" r="55" style="fill:var(--mark-ink,currentColor)"/>
+    <circle id="mark-dot" cx="156" cy="46" r="12" style="fill:var(--mark-dot,var(--accent,currentColor))"/>
+  </g>
+</svg>

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.24.48",
+  "version": "1.24.50",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.24.48",
+      "version": "1.24.50",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.24.48",
+  "version": "1.24.50",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -11259,5 +11259,17 @@
       "id": "1005084",
       "text": "The builders' hall now has one button and one text box style everywhere instead of eight button sizes and five box styles; main buttons are the full 46px pill with dark text on the orange, and the setup screen's save button is"
     }
+  ],
+  "1.24.49": [
+    {
+      "id": "1005088",
+      "text": "The Cloud Bongos logo and the browser-tab icon now come from one file, so every page, the hall, the welcome screen, the gates and the fundraising page show exactly the same mark, and phones get a proper home-screen icon."
+    }
+  ],
+  "1.24.50": [
+    {
+      "id": "1005089",
+      "text": "The public status page now looks like the rest of Cloud Bongos: same colours, fonts, logo and panels, with a dark mode, and its off-site backup copy is built from the same source so the two always match."
+    }
   ]
 }

package/scripts/bongos/fitness.js

@@ -574,8 +574,7 @@ const KERNEL_FILES = [
   // task 1004421 (ADR 0358): branding.js lays the chosen look over the pack through this
   // file — the same identity/config category, requiring only instance-config and node
   // built-ins, so it joins the roster rather than reading as a kernel→domain leak.
-  'src/hall-look.js',
-  'src/build-info.js',
+  'src/hall-look.js', 'src/brand-mark.js', 'src/build-info.js', // brand-mark: the mark's one source (task 1005088), read by hall-look; same imports
   // task 1003476 (goal 1000072): the project's stale-claim timer — host configuration
   // a module reads rather than hardcodes, exactly the category instance-config.js and
   // branding.js are in. The doorway (a KERNEL_FILE) re-exports it, so leaving it off

package/scripts/bongos/gen-brand.js

@@ -0,0 +1,99 @@
+#!/usr/bin/env node
+'use strict';
+// gen-brand.js — the logo and favicon set, written from the one mark (task 1005088).
+//
+// The mark's one source is a shipped module's public/brand/mark.svg (src/brand-mark.js finds
+// it). Pages that can colour it themselves reference it with <use>; everything that cannot —
+// an <img>, a CSS mask, a browser tab, a home-screen icon — gets a fixed-colour file written
+// here, beside the source, in the neutral pack's colours (config/branding.neutral.json):
+//
+//   mark-light.svg   the mark in Ink with the accent moon (light grounds)
+//   mark-dark.svg    the mark in the Night ink with the accent moon (dark grounds)
+//   mark-mono.svg    the whole mark in one ink (black), for a print or a stamp
+//   mark-body.svg    the ring and planet only, one ink   (the loaders' mask shapes:
+//   mark-dot.svg     the moon only, one ink               the ring breathes, the moon turns)
+//   favicon.svg      the small cut, Ink by day and the Night ink by night
+//   apple-touch-icon.png  180x180, the light mark on the pack's ground (--png; needs a browser)
+//
+// Deterministic text, so `--check` is a clean gate (tests/brand_mark.mjs runs it). The PNG is
+// rendered by the system browser and only written with --png.
+//
+// Usage:
+//   node scripts/bongos/gen-brand.js          # write the SVG variants
+//   node scripts/bongos/gen-brand.js --png    # … and render apple-touch-icon.png
+//   node scripts/bongos/gen-brand.js --check  # write nothing; exit 2 if a variant is stale
+
+const fs = require('node:fs');
+const path = require('node:path');
+const { NIGHT_INK, readMarkSource, markParts, markFile, faviconSvg } = require('../../src/brand-mark');
+
+const ROOT = path.resolve(__dirname, '..', '..');
+
+function brandDir() {
+  const modulesDir = path.join(ROOT, 'modules');
+  const hit = fs.readdirSync(modulesDir).sort()
+    .map((m) => path.join(modulesDir, m, 'public', 'brand'))
+    .find((d) => fs.existsSync(path.join(d, 'mark.svg')));
+  if (!hit) throw new Error('no module ships public/brand/mark.svg');
+  return hit;
+}
+
+function packColors() {
+  const pack = JSON.parse(fs.readFileSync(path.join(ROOT, 'config', 'branding.neutral.json'), 'utf8'));
+  return pack.theme.ui.colors;
+}
+
+// { filename: text } for every SVG variant. Pure given the source and the colours.
+function brandFiles(src, colors) {
+  const parts = markParts(src);
+  if (!parts) throw new Error('mark.svg is missing #mark-ring, #mark-disc or #mark-dot');
+  const mono = '#000000';
+  return {
+    'mark-light.svg': markFile(parts, { ink: colors.ink, dot: colors.accent, label: 'logo' }),
+    'mark-dark.svg': markFile(parts, { ink: NIGHT_INK, dot: colors.accent, label: 'logo' }),
+    'mark-mono.svg': markFile(parts, { ink: mono, dot: mono, label: 'logo' }),
+    'mark-body.svg': markFile(parts, { ink: mono, dot: mono, only: ['ring', 'disc'] }),
+    'mark-dot.svg': markFile(parts, { ink: mono, dot: mono, only: ['dot'] }),
+    'favicon.svg': faviconSvg({ ink: colors.ink, accent: colors.accent }, src) + '\n',
+  };
+}
+
+async function renderTouchIcon(dir, colors) {
+  const { launchBrowser } = require('../../modules/ui-design/kit/lib'); // eslint-disable-line global-require
+  const svg = fs.readFileSync(path.join(dir, 'mark-light.svg'), 'utf8');
+  const browser = await launchBrowser();
+  try {
+    const page = await browser.newPage({ viewport: { width: 180, height: 180 }, deviceScaleFactor: 1 });
+    await page.setContent(`<html><body style="margin:0;background:${colors.bg}">` +
+      `<img src="data:image/svg+xml;base64,${Buffer.from(svg).toString('base64')}" style="display:block;width:128px;height:128px;margin:26px">` +
+      '</body></html>');
+    await page.waitForLoadState('load');
+    await page.screenshot({ path: path.join(dir, 'apple-touch-icon.png'), omitBackground: false });
+  } finally { await browser.close(); }
+}
+
+async function main() {
+  const args = process.argv.slice(2);
+  const dir = brandDir();
+  const colors = packColors();
+  const files = brandFiles(readMarkSource({ root: ROOT }), colors);
+  const stale = [];
+  for (const [name, text] of Object.entries(files)) {
+    const file = path.join(dir, name);
+    const cur = fs.existsSync(file) ? fs.readFileSync(file, 'utf8') : null;
+    if (cur === text) continue;
+    stale.push(name);
+    if (!args.includes('--check')) fs.writeFileSync(file, text);
+  }
+  if (args.includes('--check')) {
+    if (stale.length) { process.stderr.write(`gen-brand: stale — ${stale.join(', ')}. Run: node scripts/bongos/gen-brand.js\n`); process.exit(2); }
+    process.stdout.write('gen-brand: the logo and favicon set match mark.svg\n');
+    return;
+  }
+  if (args.includes('--png')) await renderTouchIcon(dir, colors);
+  process.stdout.write(`gen-brand: ${stale.length ? `wrote ${stale.join(', ')}` : 'nothing to write'}${args.includes('--png') ? ' + apple-touch-icon.png' : ''}\n`);
+}
+
+if (require.main === module) main().catch((e) => { process.stderr.write(`${e.message}\n`); process.exit(1); });
+
+module.exports = { brandFiles, packColors };

package/scripts/gds/gen-brand.js

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+// scripts/gds/gen-brand.js — @bongos-forwarder (task 1004848). Generated by
+// scripts/bongos/codemod-rename-scripts-gds.js; do not edit.
+// The real script is scripts/bongos/gen-brand.js. This forwarder keeps callers that still name
+// the old path working, and warns once so they get repointed. Task 1003706 removes it.
+'use strict';
+require('../bongos/forwarder.js').forward(module, 'gen-brand.js');

package/scripts/status-mirror-sync.js

@@ -23,15 +23,19 @@
 //                           mirror, and the publish REFUSES rather than shipping a
 //                           page whose banner points nowhere.
 //
-// DESIGN: status.js + style.css + cursors/ are byte-identical between the
-// droplet copy and the mirror (#737 parameterized the one differing constant via
-// window.STATUS_API_BASE), so they are PURE COPIES. Only index.html carries the
-// three off-box additions, injected here at stable anchors:
+// DESIGN: status.js + style.css + the shared sheets and brand files the page
+// links (SHARED_ASSETS, at the same paths) are byte-identical between the server
+// copy and the mirror (#737 parameterized the one differing constant via
+// window.STATUS_API_BASE), so they are PURE COPIES. index.html is built from the
+// SAME functions the server serves it with (task 1005089): the server's brand-token
+// stamp (applyBrandTokens) and its theme splice (themeMarkup — the pack's palette,
+// faces, font links and favicon), so the mirror cannot drift from the live page.
+// On top of that it carries the three off-box additions, injected at stable anchors:
 //   1. <script>window.STATUS_API_BASE = <domains.publicOrigin></script>   (head)
 //   2. <div id="offbox-status">…</div>                                    (after <body>)
 //   3. the availability-banner driver <script> (reads domains.statusDataUrl) (before status.js)
 // If any anchor is missing the script THROWS — a silent mis-sync is worse than
-// a failed run.
+// a failed run. tests/status_mirror_sync.mjs holds the mirror equal to the live page.
 //
 // USAGE:
 //   node scripts/status-mirror-sync.js --repo-dir <path-to-mirror-checkout> [--push]
@@ -48,35 +52,25 @@ const { execFileSync } = require('node:child_process');
 
 const REPO_ROOT = path.resolve(__dirname, '..');
 const SRC = path.join(REPO_ROOT, 'modules', 'status-ui', 'public');
-const { branding, clientBranding, applyBrandConditionals } = require('../src/branding');
-const { escapeHtml } = require('../src/html-escape');
-
-// Stamp instance-identity tokens into the mirror HTML. The off-box mirror is
-// served by a static Pages host, NOT the branding-injecting Node server — so this
-// script must reproduce serve-internal.applyBrandTokens (task 1705, ADR 0062 §3), else
-// the mirror would render literal {{worldName}}/{{currency}} placeholders. KEEP IN SYNC
-// with src/bongos/serve-internal.js applyBrandTokens. `brand` is the client-safe pack
-// and `publicOrigin` the resolved origin — both injected, never read ambiently, so the
-// transform stays pure and testable.
+const { branding, clientBranding } = require('../src/branding');
+const { stampHtml } = require('../src/asset-version');
+// The server's own serving transforms: the mirror is built with them, not with a
+// copy of them, so the off-box page and the live page are one page (task 1005089).
+const { applyBrandTokens, themeMarkup } = require('../src/bongos/serve-internal');
+
+// The shared files the page links from other modules, published at the SAME paths
+// so the page's root-absolute hrefs resolve on the mirror's host as on the server.
+const SHARED_ASSETS = [
+  'modules/ui-design/public/tokens.css',
+  'modules/hall-ui/public/controls.css',
+  'modules/ui-design/public/brand',
+];
+
+// Stamp instance-identity tokens into the mirror HTML: the server's applyBrandTokens
+// (task 1705, ADR 0062 §3), with every origin INJECTED ('' when absent) so nothing is
+// read ambiently and the transform stays pure and testable.
 function brandTokens(html, brand = {}, publicOrigin = '', buildersOrigin = '') {
-  const world = (brand.identity && brand.identity.worldName) || '';
-  const product = (brand.identity && brand.identity.productName) || '';
-  const tagline = (brand.copy && brand.copy.tagline) || '';
-  const cur = (brand.currency && brand.currency.label) || 'credits';
-  const Cur = cur ? cur.charAt(0).toUpperCase() + cur.slice(1) : cur;
-  const company = (brand.identity && brand.identity.company) || {};
-  const esc = escapeHtml; // the one server escaper (task 1004876)
-  return applyBrandConditionals(html, { companyName: company.name, companySite: company.site, companyTagline: company.tagline })
-    .split('{{worldName}}').join(esc(world))
-    .split('{{productName}}').join(esc(product))
-    .split('{{Currency}}').join(esc(Cur))
-    .split('{{currency}}').join(esc(cur))
-    .split('{{tagline}}').join(esc(tagline))
-    .split('{{companyName}}').join(esc(company.name))
-    .split('{{companySite}}').join(esc(company.site))
-    .split('{{companyTagline}}').join(esc(company.tagline))
-    .split('{{publicOrigin}}').join(esc(publicOrigin || ''))
-    .split('{{buildersOrigin}}').join(esc(buildersOrigin || publicOrigin || ''));
+  return applyBrandTokens(html, brand || {}, publicOrigin || '', buildersOrigin || publicOrigin || '', '', '', '');
 }
 
 // ---- the three off-box index.html injections -------------------------------
@@ -152,7 +146,9 @@ function buildMirrorIndex({ srcHtml, apiBase, statusDataUrl, brand }) {
   if (html.includes('offbox-status')) {
     throw new Error('modules/status-ui/public/index.html already contains offbox markup — the source should be the droplet (no-banner) copy. Aborting.');
   }
-  html = injectOnce(html, '</head>', headInject(apiBase) + brandingInject(brand), 'before');
+  // The off-box globals, then the pack's theme exactly as the server splices it —
+  // last in <head>, after the page's own sheets, so the pack wins here as it does live.
+  html = injectOnce(html, '</head>', headInject(apiBase) + brandingInject(brand) + themeMarkup((brand || {}).theme), 'before');
   html = injectOnce(html, '<body>', BANNER_DIV, 'after');
   // Insert the driver right before the main status.js script tag.
   const scriptAnchor = '<script src="/status.js';
@@ -188,17 +184,11 @@ if (require.main === module) {
     fs.copyFileSync(path.join(SRC, rel), path.join(repoDir, rel));
     console.error(`  copied ${rel}`);
   };
-  const copyDir = (rel) => {
-    const from = path.join(SRC, rel), to = path.join(repoDir, rel);
-    if (!fs.existsSync(from)) return;
-    fs.rmSync(to, { recursive: true, force: true });
-    fs.cpSync(from, to, { recursive: true });
-    console.error(`  copied ${rel}/`);
-  };
 
   console.error('[status-mirror-sync] building mirror from modules/status-ui/public/ …');
   const indexHtml = buildMirrorIndex({
-    srcHtml: fs.readFileSync(path.join(SRC, 'index.html'), 'utf8'),
+    // the content-hash ?v= stamp the server serves the index with (#521)
+    srcHtml: stampHtml(fs.readFileSync(path.join(SRC, 'index.html'), 'utf8'), { assetDir: SRC, urlPrefix: '/' }),
     apiBase: b.domains.publicOrigin,
     statusDataUrl: b.domains.statusDataUrl,
     brand: clientBranding(),
@@ -207,12 +197,21 @@ if (require.main === module) {
   console.error('  wrote index.html (with off-box injections)');
   copyFile('status.js');
   copyFile('style.css');
-  copyDir('cursors');
+  // the retired bronze cursors (task 1005089) leave the mirror too
+  fs.rmSync(path.join(repoDir, 'cursors'), { recursive: true, force: true });
+  for (const rel of SHARED_ASSETS) {
+    const from = path.join(REPO_ROOT, rel), to = path.join(repoDir, rel);
+    fs.rmSync(to, { recursive: true, force: true });
+    fs.mkdirSync(path.dirname(to), { recursive: true });
+    fs.cpSync(from, to, { recursive: true });
+    console.error(`  copied ${rel}`);
+  }
 
   // ---- commit + (optionally) push -------------------------------------------
 
   const git = (args) => execFileSync('git', ['-C', repoDir, ...args], { encoding: 'utf8' });
-  git(['add', 'index.html', 'status.js', 'style.css', 'cursors']);
+  git(['add', '-A', '--', 'index.html', 'status.js', 'style.css', 'modules']);
+  git(['rm', '-r', '-q', '--cached', '--ignore-unmatch', 'cursors']);
   const status = git(['status', '--porcelain']);
   if (!status.trim()) {
     console.error('[status-mirror-sync] mirror already up to date — nothing to publish.');
@@ -228,4 +227,4 @@ if (require.main === module) {
   console.error(`[status-mirror-sync] published. The Pages host rebuilds ${b.domains.statusOrigin || 'the mirror'} in ~1 min.`);
 }
 
-module.exports = { buildMirrorIndex, injectOnce, brandTokens };
+module.exports = { buildMirrorIndex, injectOnce, brandTokens, SHARED_ASSETS };

package/src/bongos/platform-visibility-gate.js

@@ -179,6 +179,9 @@ function relativeReturn(raw) {
 
 // The one server escaper (task 1004876); it also escapes ' , which this copy did not.
 const { escapeHtml: escAttr } = require('../html-escape');
+// The mark, inlined from its one source (task 1005088) so the door still loads nothing;
+// coloured by .mark's --mark-ink / --mark-dot below.
+const { markSvg } = require('../brand-mark');
 
 // The door. Self-contained on purpose (the pre-launch gate's shape): it is
 // served to someone who may not see the project, so it pulls no stylesheet, no
@@ -198,8 +201,8 @@ body{margin:0;min-height:100vh;display:grid;place-items:center;padding:24px;
   background:#edecee;color:#17181a}
 @media(prefers-color-scheme:dark){body{background:#000000;color:#ffffff}}
 .box{width:min(380px,100%);text-align:center}
-.mark{display:block;width:48px;height:48px;margin:0 auto 22px}
-@media(prefers-color-scheme:dark){.mark .mr{stroke:#e2e1e4}.mark .mp{fill:#e2e1e4}}
+.mark{display:block;width:48px;height:48px;margin:0 auto 22px;--mark-ink:#17181a;--mark-dot:#fb9569}
+@media(prefers-color-scheme:dark){.mark{--mark-ink:#e2e1e4}}
 h1{font-size:20px;font-weight:700;margin:0 0 6px}
 p{margin:0 0 20px;opacity:.72;font-size:14px}
 /* dark ink on the accent fill: the chrome world's salmon carries white at 2.19:1 */
@@ -207,7 +210,7 @@ a.btn{display:inline-block;padding:11px 22px;border-radius:999px;background:#fb9
   font:700 14px/1 inherit;text-decoration:none}
 a.btn:focus{outline:2px solid #a3481a;outline-offset:2px}
 </style></head><body><div class="box">
-<svg class="mark" viewBox="0 0 200 200" aria-hidden="true"><path class="mr" d="M137 31 A78 78 0 1 0 170 66" fill="none" stroke="#17181a" stroke-width="15" stroke-linecap="round"/><circle class="mp" cx="100" cy="100" r="55" fill="#17181a"/><circle cx="156" cy="46" r="12" fill="#fb9569"/></svg>
+${markSvg({ className: 'mark' })}
 <h1>${safe}</h1>
 <p>This project’s pages are open to its members. Sign in to continue.</p>
 <a class="btn" href="${escAttr(signIn)}">Sign in</a>

package/src/bongos/prelaunch-gate.js

@@ -180,6 +180,9 @@ function relativeReturn(raw) {
 
 // The one server escaper (task 1004876); it also escapes ' , which this copy did not.
 const { escapeHtml: escAttr } = require('../html-escape');
+// The mark, inlined from its one source (task 1005088) so the form still loads nothing;
+// coloured by .mark's --mark-ink / --mark-dot below.
+const { markSvg } = require('../brand-mark');
 
 // The form. Self-contained and token-free on purpose: it is served BEFORE the
 // visitor is allowed to see anything, so it must not pull the branding bundle,
@@ -198,8 +201,8 @@ body{margin:0;min-height:100vh;display:grid;place-items:center;padding:24px;
   background:#edecee;color:#17181a}
 @media(prefers-color-scheme:dark){body{background:#000000;color:#ffffff}}
 .box{width:min(380px,100%);text-align:center}
-.mark{display:block;width:48px;height:48px;margin:0 auto 22px}
-@media(prefers-color-scheme:dark){.mark .mr{stroke:#e2e1e4}.mark .mp{fill:#e2e1e4}}
+.mark{display:block;width:48px;height:48px;margin:0 auto 22px;--mark-ink:#17181a;--mark-dot:#fb9569}
+@media(prefers-color-scheme:dark){.mark{--mark-ink:#e2e1e4}}
 h1{font-size:20px;font-weight:700;margin:0 0 6px}
 p{margin:0 0 20px;opacity:.72;font-size:14px}
 form{display:flex;gap:8px}
@@ -213,7 +216,7 @@ button{padding:11px 20px;border:0;border-radius:999px;background:#fb9569;color:#
 .err{margin:14px 0 0;color:#b3261e;font-size:13.5px}
 @media(prefers-color-scheme:dark){.err{color:#ffb4a8}}
 </style></head><body><div class="box">
-<svg class="mark" viewBox="0 0 200 200" aria-hidden="true"><path class="mr" d="M137 31 A78 78 0 1 0 170 66" fill="none" stroke="#17181a" stroke-width="15" stroke-linecap="round"/><circle class="mp" cx="100" cy="100" r="55" fill="#17181a"/><circle cx="156" cy="46" r="12" fill="#fb9569"/></svg>
+${markSvg({ className: 'mark' })}
 <h1>${name}</h1>
 <p>Not open to the world yet. Enter the password to have a look.</p>
 <form method="POST" action="${SUBMIT_PATH}">

package/src/bongos/serve-internal.js

@@ -133,6 +133,7 @@ function themeMarkup(theme) {
   // before anything reads the URL, so the neutral pack's inline `data:image/svg+xml,
   // <svg …>` favicon resolves to exactly the same bytes it does today.
   if (theme.favicon) out += `<link rel="icon" href="${esc(theme.favicon)}">`;
+  if (theme.appleTouchIcon) out += `<link rel="apple-touch-icon" href="${esc(theme.appleTouchIcon)}">`;
   return out;
 }
 
@@ -834,15 +835,16 @@ function mountInternalSurfaces(app) {
     const surface = surfaceOf(req);
     if (!surface) return next();
     // /api/* already handled above; everything else on a surface host serves from
-    // the module's static dir. The index page comes from the stamped in-memory copy
-    // (asset ?v= = content hash); everything else falls through to the on-disk
-    // static handler.
-    if ((req.method === 'GET' || req.method === 'HEAD') &&
-        (req.path === '/' || req.path === '/index.html') &&
-        surface.html['index.html']) {
+    // the module's static dir. Each page ("/" is the index, "/explore[.html]" its
+    // sibling; task 1005089) comes from the stamped + branded in-memory copy (asset
+    // ?v= = content hash); everything else falls through to the on-disk static handler.
+    // The map's keys are fixed at boot (the dir's own .html files), so a slug can only name a shipped page.
+    const pm = /^\/(?:([a-z0-9-]+)(?:\.html)?)?$/i.exec(req.path);
+    const page = pm && `${pm[1] || 'index'}.html`;
+    if ((req.method === 'GET' || req.method === 'HEAD') && page && surface.html[page]) {
       res.set('Cache-Control', 'public, max-age=60');
       res.type('html');
-      return res.send(surface.html['index.html']);
+      return res.send(surface.html[page]);
     }
     return surface.static(req, res, next);
   });

package/src/brand-mark.js

@@ -0,0 +1,96 @@
+// src/brand-mark.js — the Bongos mark for the server, read from its one source (task 1005088).
+//
+// The ring-and-dot mark lives in exactly one file, a shipped module's public/brand/mark.svg.
+// A browser page draws it by reference (<use href="…/brand/mark.svg#mark">); the server needs
+// the markup itself in two places that load nothing — the pre-launch and members-only gates,
+// which are self-contained on purpose — and in a looked hall's favicon, drawn in the look's own
+// colours. This file reads that source and hands those out, and scripts/bongos/gen-brand.js
+// writes the static variants (light, dark, mono, the favicon) from the same functions.
+//
+// The source is found by its SHAPE — any shipped module's public/brand/mark.svg — never by a
+// module key, which core may not name (ADR 0083 §Decision #4), as src/hall-look.js finds the
+// style library. PURE given the source text; the default reader is the only I/O.
+'use strict';
+
+const fs = require('node:fs');
+const path = require('node:path');
+
+// The Night ink: the chrome world's ink on a dark ground, which every dark twin of the mark uses.
+const NIGHT_INK = '#e2e1e4';
+// The two custom properties the source colours itself by, exactly as written there.
+const INK_VAR = 'var(--mark-ink,currentColor)';
+const DOT_VAR = 'var(--mark-dot,var(--accent,currentColor))';
+// The favicon cut: at 16px the display weights blur, so the tab icon draws a heavier ring, a
+// slightly smaller planet and a larger moon. Same geometry, other weights.
+const SMALL_CUT = { ring: { 'stroke-width': '24' }, disc: { r: '50' }, dot: { r: '18' } };
+
+let _source = null;
+function findSource(root) {
+  const base = root || require('./instance-config').resolveCoreRoot(); // eslint-disable-line global-require
+  const modulesDir = path.join(base, 'modules');
+  return fs.readdirSync(modulesDir).sort()
+    .map((m) => path.join(modulesDir, m, 'public', 'brand', 'mark.svg'))
+    .find((f) => fs.existsSync(f)) || null;
+}
+// The source text, read once. null when no shipped module carries it.
+function readMarkSource({ root } = {}) {
+  if (_source !== null && !root) return _source;
+  let text = '';
+  try { const file = findSource(root); text = file ? fs.readFileSync(file, 'utf8') : ''; } catch { text = ''; }
+  if (!root) _source = text;
+  return text;
+}
+
+// The three parts as the source writes them, ids dropped (an inline copy must not collide
+// with the source's ids on a page). null when the source is missing or misshapen.
+function markParts(src = readMarkSource()) {
+  const pick = (id) => {
+    const m = String(src || '').match(new RegExp(`<(path|circle)\\s+id="mark-${id}"([^>]*?)\\s*/>`));
+    return m ? `<${m[1]}${m[2]}/>` : null;
+  };
+  const parts = { ring: pick('ring'), disc: pick('disc'), dot: pick('dot') };
+  return parts.ring && parts.disc && parts.dot ? parts : null;
+}
+
+function setAttrs(el, attrs) {
+  let out = el;
+  for (const [k, v] of Object.entries(attrs || {})) out = out.replace(new RegExp(`\\s${k}="[^"]*"`), ` ${k}="${v}"`);
+  return out;
+}
+
+// The parts' markup with the two colours set: each a CSS value (a hex, or a var()).
+function partsMarkup(parts, { ink = INK_VAR, dot = DOT_VAR, cut = null, only = null } = {}) {
+  const names = only || ['ring', 'disc', 'dot'];
+  return names.map((n) => setAttrs(parts[n], cut && cut[n]).split(INK_VAR).join(ink).split(DOT_VAR).join(dot)).join('');
+}
+
+// The mark as inline markup for a server-rendered page. Coloured by --mark-ink / --mark-dot on
+// the element (or its ancestors), exactly as a page's <use> reference is.
+function markSvg({ className = 'mark', src } = {}) {
+  const parts = markParts(src === undefined ? readMarkSource() : src);
+  if (!parts) return '';
+  return `<svg class="${className}" viewBox="0 0 200 200" aria-hidden="true">${partsMarkup(parts)}</svg>`;
+}
+
+// A standalone SVG file of the mark in fixed colours (the light, dark and mono logos, and the
+// two mask shapes the loaders cut from it).
+function markFile(parts, { ink, dot, only, label = '' } = {}) {
+  const a11y = label ? ` role="img" aria-label="${label}"` : ' aria-hidden="true"';
+  return `<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 200 200"${a11y}>${partsMarkup(parts, { ink, dot, only })}</svg>\n`;
+}
+
+// The favicon: the small cut, in the pack's ink by day and the Night ink by night.
+function faviconSvg({ ink, accent, night = NIGHT_INK }, src = readMarkSource()) {
+  const parts = markParts(src);
+  if (!parts) return '';
+  return '<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 200 200">' +
+    `<style>svg{--i:${ink};--d:${accent}}@media (prefers-color-scheme:dark){svg{--i:${night}}}</style>` +
+    partsMarkup(parts, { ink: 'var(--i)', dot: 'var(--d)', cut: SMALL_CUT }) + '</svg>';
+}
+
+// An SVG as a data: URI for a <link rel="icon"> (single quotes, # escaped), or '' for ''.
+function svgDataUri(svg) {
+  return svg ? 'data:image/svg+xml;utf8,' + svg.replace(/"/g, "'").replace(/#/g, '%23') : '';
+}
+
+module.exports = { NIGHT_INK, readMarkSource, markParts, markSvg, markFile, faviconSvg, svgDataUri };

package/src/branding.js

@@ -268,6 +268,8 @@ function clientBranding(b = branding()) {
         links: Array.isArray(ui.fonts?.links) ? ui.fonts.links : [],
       },
       favicon: ui.favicon || '',
+      // the home-screen icon (a 180x180 PNG; task 1005088), '' when the pack names none
+      appleTouchIcon: ui.appleTouchIcon || '',
       backdrop: ui.backdrop || '',
       // The look (ADR 0358): which one this hall wears ('' = its own pack), whether
       // its night is tinted (only ever true with a look), and its logo address.

package/src/hall-look.js

@@ -23,6 +23,7 @@
 
 const fs = require('node:fs');
 const path = require('node:path');
+const { faviconSvg, svgDataUri } = require('./brand-mark');
 
 const HEX = /^#[0-9a-f]{6}$/i;
 const LOOK_NAME = /^[a-z][a-z-]{0,39}$/;
@@ -53,13 +54,10 @@ function readLibraryLook(name, { root } = {}) {
 }
 
 // The favicon a looked hall shows without a logo: the Bongos mark (task 1004846) in the
-// look's own ink with its accent as the moon, and the Night ink twin in dark mode.
+// look's own ink with its accent as the moon, and the Night ink twin in dark mode. Drawn from
+// the mark's one source (task 1005088); the colours are the look's validated hex.
 function lookFavicon(colors) {
-  const c = (k) => encodeURIComponent(colors[k]);
-  return "data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 200 200'>" +
-    `<style>.r{stroke:${c('ink')}}.p{fill:${c('ink')}}@media (prefers-color-scheme:dark){.r{stroke:%23e2e1e4}.p{fill:%23e2e1e4}}</style>` +
-    "<path class='r' d='M137 31A78 78 0 1 0 170 66' fill='none' stroke-width='24' stroke-linecap='round'/>" +
-    `<circle class='p' cx='100' cy='100' r='50'/><circle cx='156' cy='46' r='18' fill='${c('accent')}'/></svg>`;
+  return svgDataUri(faviconSvg({ ink: colors.ink, accent: colors.accent }));
 }
 
 // What the hall wears: { name, ui } or null for its own pack. PURE given readLook.
@@ -91,8 +89,10 @@ function applyLook(resolved, readLook = readLibraryLook) {
     ui.look = look.name;
     ui.nightTint = project.nightTint !== 'off';
     ui.favicon = lookFavicon(ui.colors);
+    // the home-screen icon is the pack's own colours; a hall in other colours goes without
+    ui.appleTouchIcon = '';
   }
-  if (logo) { ui.logo = logo; ui.favicon = logo; }
+  if (logo) { ui.logo = logo; ui.favicon = logo; ui.appleTouchIcon = ''; }
   resolved.theme.ui = ui;
   return resolved;
 }

package/src/module-api.js

@@ -81,7 +81,7 @@ const { sleep } = require('./sleep');
 // MAJOR (see allowBoxScope below): passes the request through untouched.
 function deprecatedNoopMiddleware(_req, _res, next) { next(); }
 
-const CORE_VERSION = '1.24.48'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.24.50'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('discord'); log.info('mounted');