@justai/cuts 0.155.0 → 0.157.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@justai/cuts",
-  "version": "0.155.0",
+  "version": "0.157.0",
   "description": "A persona's named parts — the page shell that holds them, and the cuts themselves.",
   "license": "UNLICENSED",
   "repository": {

package/src/Base.astro

@@ -82,6 +82,12 @@ interface Props {
    *  privacy/terms child personas use this: the surface that proves it collects nothing by running
    *  nothing. */
   gaId?: string | null;
+  /** Sign-in, ON by default. Pass `false` for a persona with no accounts: the SSO token capture is
+   *  then not rendered in the head, so nothing reads `#auth_token` or writes `justai_token`. It is
+   *  the head half of the opt-out — pass the same `auth={false}` to Toolbar, which then renders no
+   *  AuthMount and loads no sdk.js. Everything else in the head (language, theme, the service
+   *  worker, analytics as `gaId` decides) is untouched. */
+  auth?: boolean;
   /**
    * queries: kind game · data-kind · my game persona has margins · the game does not fill the screen ·
    *          which storefront lists this persona · persona kind in the layout
@@ -135,6 +141,7 @@ const {
   themeDark,
   themeLight,
   gaId = "G-13L3BP6XCW",
+  auth = true,
   kind = "app",
   page,
 } = Astro.props;
@@ -210,8 +217,10 @@ const ogImage = page?.image
          #auth_token before the deferred sdk.js can read it; and the language picker copies the
          current hash onto the next locale's URL (LangPicker), which would PROPAGATE the raw token
          into a new page and into history. Capturing first defeats both. Move this and sign-in breaks
-         silently — no error, the visitor simply lands back signed out. */}
-    <script is:inline set:html={AUTH_CAPTURE_JS} />
+         silently — no error, the visitor simply lands back signed out.
+         A persona with no accounts (`auth={false}`) has no token to capture, so the script is not
+         rendered at all. */}
+    {auth && <script is:inline set:html={AUTH_CAPTURE_JS} />}
     <script is:inline set:html={JS_CLASS_JS} />
     {/* queries: design grid · x-ray · ?xray · safe area · debug overlay · see the layout ·
         is my content inside the safe area · layout debugging

package/src/Preroll.astro

@@ -457,6 +457,22 @@ const primary = storeRows[0]?.url;
    * container, and layout containment makes it the containing block for FIXED descendants too — a
    * fixed overlay written inside it would be clipped to the frame it is meant to surround. */
   html[data-stage="playing"] { overflow: hidden; }
+  /* queries: oyun başlayınca toolbar gitsin · the toolbar hides while playing · full screen game ·
+   *          tam ekran oyun · ipad oyun ekranı · the hud is under the toolbar
+   *
+   * ── WHILE A GAME PLAYS, THE TOOLBAR STEPS OUT AND THE GAME TAKES THE WHOLE SCREEN ──────────────
+   *
+   * The founder, 2026-10-22, on an iPad and a phone: the game's own money, day and full-screen keys
+   * were crowded by the bar above them. So while the stage is `playing` the bar's sticky slot leaves
+   * the flow and the game kernel grows by exactly what it gave up — the whole painted screen. The
+   * moment the game announces `paused` (its own pause key, the tab hidden, leaving full screen) the
+   * attribute goes and the bar comes back with the page as it was. The protocol is unchanged: the
+   * game says what the player is doing, and this is only what the shell does with it. */
+  html[data-stage="playing"] .tb-slot { display: none; }
+  /* What the shell takes above the kernel is nothing, while it plays: the one number the game
+   * kernel's height law and its landing offset both read (@justai/ui base.css). `!important` because
+   * the shell measures the bar and writes the number inline on the root — and the bar is gone. */
+  html[data-stage="playing"] { --shell-top: 0px !important; }
   /* queries: theater mode · where did the dim layer go · dark theme while playing
    *
    * ── THE THEATER IS THE PERSONA'S OWN DARK THEME, NOT A LAYER ────────────────────────────────

package/src/Toolbar.astro

@@ -54,9 +54,12 @@ interface Props {
   // translated it yet gets a working, named control rather than an unlabelled icon.
   files?: boolean;
   filesLabel?: string;
-  // The home affordance points at app.zone, so the two apexes suppress it: app.zone IS that
-  // destination, and justai.pro is above it (sending the parent "home" to a child platform is
-  // the wrong direction). Every other persona keeps it.
+  // The home affordance points at the persona's apex (`apex` below), so EVERY apex suppresses it:
+  // app.zone, pin.games and cityinmotion.nl ARE that destination — told their own host, the row
+  // draws their mark as a link to the page it sits on, beside the profile icon that is the same
+  // face (cityinmotion.nl shipped exactly that until 2026-10-15) — and justai.pro is above them
+  // all (sending the parent "home" to a child platform is the wrong direction). Every other
+  // persona keeps it. The template passes `home={false}` for every apex it generates.
   home?: boolean;
   /**
    * Which storefront the home affordance points at. Defaults to app.zone — see BackToZone, which owns
@@ -147,11 +150,25 @@ interface Props {
   // `feed` already reads the host persona's avatar from the registry, and an absolute URL it was
   // given beats a relative one it inferred.
   parent?: { href?: string; label?: string; icon?: string };
+
+  // queries: accountless persona · no sign-in on this persona · turn auth off · auth={false} ·
+  //          the toolbar loads sdk.js on a persona with no accounts · privacy-sensitive persona
+  //
+  // ── SIGN-IN, ON UNLESS A PERSONA SAYS IT HAS NO ACCOUNTS ─────────────────────────────────────
+  //
+  // ON by default, because every persona today is one place in one signed-in ecosystem. Pass
+  // `auth={false}` and the AuthMount is not RENDERED — no mount point, no sdk.js tag,
+  // so no request to auth.justai.pro is ever made. Hiding it would not be the same thing: a hidden
+  // mount still loads a third-party script into the persona's origin, which is the surface an
+  // accountless, privacy-sensitive persona is opting out of.
+  //
+  // Pass the same `auth={false}` to Base, which owns the other half (the token capture in the head).
+  auth?: boolean;
 }
 import BackToZone from "./BackToZone.astro";
 const {
   sectionsLabel, profileLabel, kernelLabel, postsLabel,
-  files = true, filesLabel = "Files", landOn, avatar = "/icon.svg", parent,
+  files = true, filesLabel = "Files", landOn, avatar = "/icon.svg", parent, auth = true,
 } = Astro.props;
 // A child's row answers UP to its parent, not out to the zone, and has no stream of its own — so
 // both default off the moment `parent` is given, rather than each consumer remembering to say so.
@@ -274,7 +291,7 @@ import AuthMount from "./AuthMount.astro";
       <div class="tb-right">
         <slot name="toolbarRight" />
         <slot name="langPicker" />
-        <AuthMount />
+        {auth && <AuthMount />}
       </div>
     </div>
   </header>

package/src/behaviour/preroll.ts

@@ -180,8 +180,11 @@ if (root && root.dataset.door === "store") {
           const el = document.getElementById(id);
           if (el) el.toggleAttribute("inert", playing);
         }
-        // The page is locked, so make sure what it is locked ON is the stage.
-        if (playing) stage.scrollIntoView({ block: "nearest" });
+        // The page is locked, so make sure what it is locked ON is the stage — the whole of it, now
+        // that the toolbar has stepped out (see Preroll.astro). On pause the bar is back, and the
+        // kernel lands under it again by its own scroll-margin.
+        if (playing) (document.getElementById("kernel") ?? stage).scrollIntoView({ block: "start" });
+        else document.getElementById("kernel")?.scrollIntoView({ block: "start" });
         // queries: space does nothing · keyboard not reaching the game · input bind · focus
         //
         // AND THE KEYBOARD GOES WITH THE STAGE. The play press happened in THIS document, so this
@@ -245,6 +248,11 @@ if (root && root.dataset.door === "store") {
       document.addEventListener("justai:pause-request", () => askPause("chrome"));
       document.addEventListener("justai:fullscreen-request", () =>
         (stage as any).requestFullscreen?.().catch(() => {}));
+      // Leaving full screen is leaving the game for a moment: it pauses, and with the pause the
+      // toolbar comes back — the same way back as the game's own pause key.
+      document.addEventListener("fullscreenchange", () => {
+        if (!document.fullscreenElement && document.documentElement.dataset.stage === "playing") askPause("fullscreen");
+      });
       document.addEventListener("visibilitychange", () => {
         if (document.hidden && document.documentElement.dataset.stage === "playing") askPause("hidden");
       });