@omega.js/desktop 0.52.0 → 0.54.0

package/README.md

@@ -5,27 +5,27 @@
 </p>
 
 <p align="center">
-  <strong>OMEGA Desktop</strong> — all-in-one development framework for Electron apps. Sister project to
+  <strong>OMEGA Desktop</strong>: all-in-one development framework for Electron apps. Sister project to
   <a href="../extension/">@omega.js/extension</a> and
-  <a href="https://github.com/itw-creative-works/ultimate-jekyll-manager">Ultimate Jekyll Manager</a>.
+  <a href="../web/">@omega.js/web</a>.
 </p>
 
 ## What it does
 
-- **One-line bootstrap** per Electron process: `require('@omega.js/desktop/main')`, `/preload`, `/renderer`.
+- **One ready-made `omega` per Electron process**: `const omega = require('@omega.js/desktop/main'); omega.initialize()`, and the same for `/preload` and `/renderer`. Main carries every lib as a property (`omega.windows`, `omega.tray`, `omega.auth`, ...); the renderer extends @omega.js/client and carries `omega.desktop`, the bridge to main.
 - **Modular feature library** — storage, IPC, theme, tray, menu, context menu, window manager, startup, app-state, deep-link, auto-updater, @omega.js/client auth, Sentry, **analytics, context, usage, remote-config, restart-manager**. Each feature is its own module with documented API.
-- **System-aware dynamic theme.** `manager.theme` follows the OS light/dark preference **live** by default (`'system'`), with `'light'`/`'dark'` overrides persisted across boots. Every renderer — windows AND embedded views — keeps `<html data-bs-theme>` in sync automatically; consumers drop plain `<button data-omega-theme-set="dark">` controls and @omega.js/desktop wires them.
-- **Cross-platform analytics identity.** GA4 Measurement Protocol with `client_id = uuidv5(deviceId, projectIdNamespace)` and `user_id = uuidv5(firebaseUid, projectIdNamespace)`. Same Firebase project ID in @omega.js/backend, UJM, @omega.js/client, and @omega.js/desktop produces identical `user_id` outputs everywhere → unified events for one human across desktop + web + backend, no manual stitching.
-- **"Hot config"** fetched from your brand site (`<brand.url>/data/resources/main.json`) and polled hourly — flip a force-update version, default user-agent, ad rotation, etc. without re-releasing. `manager.remoteConfig.get('versionRequired')`. Cached to storage so offline boots still have last-known values.
+- **System-aware dynamic theme.** `omega.theme` follows the OS light/dark preference **live** by default (`'system'`), with `'light'`/`'dark'` overrides persisted across boots. Every renderer (windows AND embedded views) keeps `<html data-bs-theme>` in sync automatically; consumers drop plain `<button data-omega-theme-set="dark">` controls and @omega.js/desktop wires them.
+- **Cross-platform analytics identity.** GA4 Measurement Protocol with `client_id = uuidv5(deviceId, projectIdNamespace)` and `user_id = uuidv5(firebaseUid, projectIdNamespace)`. Same Firebase project ID in @omega.js/backend, @omega.js/web, @omega.js/client, and @omega.js/desktop produces identical `user_id` outputs everywhere → unified events for one human across desktop + web + backend, no manual stitching.
+- **"Hot config"** fetched from your brand site (`<brand.url>/data/resources/main.json`) and polled hourly: flip a force-update version, default user-agent, ad rotation, etc. without re-releasing. `omega.remoteConfig.get('versionRequired')`. Cached to storage so offline boots still have last-known values.
 - **File-based feature definitions** — trays, menus, and context-menus are JS files (full power, no DSL): `src/integrations/{tray,menu,context-menu}/index.js`. All three ship sensible **id-tagged defaults** (legacy-framework-style: about, preferences, check-for-updates, dev menu w/ inspector + log folders, etc.) and share the same **id-path mutation API**: `find`, `update`, `remove`, `enable`, `show`, `hide`, `insertBefore`, `insertAfter`, `appendTo`. Any default item is one line away from removal, customization, or repositioning.
 - **Lazy windows + Discord-style hide-on-close.** @omega.js/desktop doesn't auto-create any windows — your `main.js` calls `windows.create('main', { show: !startup.isLaunchHidden() })`. The `main` window's X button hides instead of quitting on every platform; real quit only via Cmd+Q / menu Quit / tray Quit / auto-update install. Inset titlebar by default (mac `hiddenInset` traffic lights / win native overlay buttons / linux native frame) with a draggable topbar in the page template.
 - **Zero-bounce hidden-launch on macOS.** `startup.mode = 'hidden'` bakes `LSUIElement: true` into Info.plist at build time → app launches completely invisible (no dock icon, no Cmd+Tab, no taskbar). Tray + notifications + networking still work. When the user double-clicks the running app's icon, @omega.js/desktop's `app.on('activate')` (macOS) / `app.on('second-instance')` (win/linux) handler surfaces the `main` window and the dock icon appears alongside it. CleanMyMac-style "tray-only at login, full window when manually opened" is the default.
 - **Auto-update background install.** When a download finishes from a background poll (not user-initiated), @omega.js/desktop auto-relaunches into the new version after 5s — apps update overnight without bothering the user. User-initiated checks skip this so your UI can prompt instead.
-- **Vert (ad) units with zero JS.** Drop `<div data-omega-vert></div>` into any view — the renderer auto-binds it (live, MutationObserver) to the shared OMEGA verts module: house/company inventory only (no AdSense in desktop surfaces), lazy near-viewport loading, sandboxed iframe, no-fill collapse. See [verts](docs/verts.md).
+- **Vert (ad) units with zero JS.** Drop `<div data-omega-vert></div>` into any view — the renderer auto-binds it (live, MutationObserver) to the shared OMEGA verts module: house/company inventory only (no AdSense in desktop surfaces), lazy near-viewport loading, sandboxed iframe, no-fill collapse. See [verts](../../docs/desktop/verts.md).
 - **esbuild-bundled** main / preload / renderer for source protection.
-- **Built-in test framework** — Jest-like syntax, four layers: `build` (plain Node), `main` (spawned Electron), `renderer` (hidden BrowserWindow), and `boot` (spawns the consumer's actual built `dist/main.bundle.js` for end-to-end smoke tests against the live manager — no `npm start && sleep && kill` shell hacks). Boot layer always rebuilds the bundle first so tests never see stale code.
-- **Schema-validated config.** One `config/omega.json5` (the OMEGA-wide format: shared brand/analytics/payment/firebase sections + desktop settings under `targets.desktop`), validated against the canonical schema in the bundled `@omega.js/config`. Validation runs at app boot AND during `gulp audit` — a misconfigured app never reaches the "white window of confusion" stage; it tells you exactly which field is broken with a numbered list. Simple flag model — `required: true | false | (config) => bool` — and `match` / `enum` / `type` only fire on field presence so consumers never see a flood of redundant errors for the same field. Pure-JS validator, no Ajv/Joi/Zod dep. See [config-schema](docs/config-schema.md).
-- **Multi-platform build/release** via GitHub Actions — macOS sign + notarize, Linux (deb + AppImage + optional Snap), Windows EV-token signing (self-hosted runner now, cloud-signing pluggable). Sensible installer defaults out of the box: NSIS one-click install on Windows (desktop + start menu shortcut, launch on finish), universal mac binary (one .dmg for Intel + Apple Silicon), `app.category` automatically mapped to per-platform values, copyright `{YEAR}` token always current. Snap Store publishing is on by default in the scaffold and auto-skipped at build time when `SNAPCRAFT_STORE_CREDENTIALS` isn't set — drop the credential blob into `.env`, run `mgr push-secrets`, and the next release ships to the Snap Store. See [installer-options](docs/installer-options.md).
+- **Built-in test framework**: Jest-like syntax, four layers: `build` (plain Node), `main` (spawned Electron), `renderer` (hidden BrowserWindow), and `boot` (spawns the consumer's actual built `dist/main.bundle.js` for end-to-end smoke tests against the live `omega`, no `npm start && sleep && kill` shell hacks). Boot layer always rebuilds the bundle first so tests never see stale code.
+- **Schema-validated config.** One `config/omega.json5` (the OMEGA-wide format: shared brand/analytics/payment/firebase sections + desktop settings under `targets.desktop`), validated against the canonical schema in the bundled `@omega.js/config`. Validation runs at app boot AND during `gulp audit` — a misconfigured app never reaches the "white window of confusion" stage; it tells you exactly which field is broken with a numbered list. Simple flag model — `required: true | false | (config) => bool` — and `match` / `enum` / `type` only fire on field presence so consumers never see a flood of redundant errors for the same field. Pure-JS validator, no Ajv/Joi/Zod dep. See [config-schema](../../docs/desktop/config-schema.md).
+- **Multi-platform build/release** via GitHub Actions — macOS sign + notarize, Linux (deb + AppImage + optional Snap), Windows EV-token signing (self-hosted runner now, cloud-signing pluggable). Sensible installer defaults out of the box: NSIS one-click install on Windows (desktop + start menu shortcut, launch on finish), universal mac binary (one .dmg for Intel + Apple Silicon), `app.category` automatically mapped to per-platform values, copyright `{YEAR}` token always current. Snap Store publishing is on by default in the scaffold and auto-skipped at build time when `SNAPCRAFT_STORE_CREDENTIALS` isn't set — drop the credential blob into `.env`, run `mgr push-secrets`, and the next release ships to the Snap Store. See [installer-options](../../docs/desktop/installer-options.md).
 
 ## Quick start (consumer)
 
@@ -36,11 +36,11 @@ npm install @omega.js/desktop --save-dev
 nvm use                  # switch to the Node version Electron uses (one-time per shell)
 npm start                # dev: gulp → esbuild → electron .
 OMEGA_CDP_PORT=9222 npm start  # dev + expose Chrome DevTools Protocol for Claude/MCP debugging
-npx omega cdp status       # drive the running dev app over CDP: status|eval|shot|capture|theme|relaunch|quit (docs/cdp-debugging.md)
+npx omega cdp status       # drive the running dev app over CDP: status|eval|shot|capture|theme|relaunch|quit (docs/desktop/cdp-debugging.md)
 npm run build            # local production build (bundles only, no installer)
 npm run package:quick    # fast packaged build for host platform/arch (.app/.exe-folder/linux-unpacked, ~20-30s) — for smoke-testing packaged behavior
 npm run package          # full local production package (DMG/zip/universal-mac, NSIS-win, deb+AppImage-linux)
-npm run release          # signed + published release via GitHub Actions
+npx omega release        # signed + published release via GitHub Actions
 npx omega test             # YOUR project tests only (C5 scoping — docs/shared/testing.md)
 npx omega test framework:  # the framework's own suite (aliases: omega:, mgr:, desktop:, em:; add a path to narrow)
 npx omega test full:       # both sources
@@ -82,7 +82,7 @@ Five logs in `<projectRoot>/logs/`, each with its own purpose:
 | `dev.log` | Gulp pipeline output — sass, bundle, html, electron child stdout from `npm start` | Truncated each `npm start` |
 | `build.log` | Gulp pipeline output for production builds/packages (`npm run build` / `package` / `publish`, i.e. `OMEGA_BUILD_MODE=true`) | Truncated each build |
 | `test.log` | `npx omega test` runner output (suite names, pass/fail, harness boot lines) | Truncated each test run |
-| `deploy.log` | `omega deploy` and `npm run release`, the whole deploy: the scaffold, the precheck, the dispatch, then the streamed GH Actions run | Truncated each deploy |
+| `deploy.log` | `omega deploy` and `omega release`, the whole deploy: the scaffold, the precheck, the dispatch, then the streamed GH Actions run | Truncated each deploy |
 
 ```bash
 npx omega logs                  # tail last 50 of runtime.log
@@ -96,7 +96,7 @@ In production, `runtime.log` lives at `app.getPath('logs')`:
 - Windows: `%APPDATA%\<AppName>\logs\runtime.log`
 - Linux: `~/.config/<AppName>/logs/runtime.log`
 
-See [docs/logging.md](docs/logging.md) for the full picture (renderer forwarding, log levels, programmatic path access).
+See [docs/desktop/logging.md](../../docs/desktop/logging.md) for the full picture (renderer forwarding, log levels, programmatic path access).
 
 Override gulp's `dev.log` path via `OMEGA_LOG_FILE=<path>`; disable entirely via `OMEGA_LOG_FILE=false`. The default `.gitignore` includes `logs/`.
 
@@ -113,53 +113,58 @@ with the C3/D10 skin.
 
 ## Per-process imports
 
+Each entry exports ONE ready-made instance, `omega`; a consumer never writes `new`.
+
 ```js
 // src/main.js
-new (require('@omega.js/desktop/main'))().initialize();
+const omega = require('@omega.js/desktop/main');
+omega.initialize().then(() => { const { logger, windows } = omega; });
 
 // src/preload.js
-new (require('@omega.js/desktop/preload'))().initialize();
+const omega = require('@omega.js/desktop/preload');
+omega.initialize();
 
 // src/assets/js/components/<view>/index.js
-new (require('@omega.js/desktop/renderer'))().initialize();
+import omega from '@omega.js/desktop/renderer';
+omega.initialize().then(() => { const { logger, desktop } = omega; });
 ```
 
 ## Documentation
 
-Each subsystem has its own API reference under [`docs/`](docs/):
-
-- [storage](docs/storage.md) — KV store, sync in main, async (via IPC) in renderer, dot-notation paths, change broadcasts
-- [ipc](docs/ipc.md) — typed channel bus, `handle` / `invoke` / `broadcast`
-- [windows](docs/windows.md) — lazy named-window registry (no auto-create), bounds persistence, inset titlebar, hide-on-close
-- [tray](docs/tray.md) — file-based tray definition, dynamic items, runtime mutators
-- [menu](docs/menu.md) — file-based application menu, platform-aware default template
-- [context-menu](docs/context-menu.md) — file-based right-click menus, called per-event with `params`
-- [startup](docs/startup.md) — launch modes (`normal` / `hidden`), LSUIElement on macOS, login-item handling
-- [app-state](docs/app-state.md) — first-launch / launch-count / crash-sentinel flags
-- [deep-link](docs/deep-link.md) — cross-platform deep links, single-instance, pattern routing, built-in routes
-- [client-bridge](docs/client-bridge.md) — Firebase auth state synchronized across main + every renderer
-- [auto-updater](docs/auto-updater.md) — startup + periodic checks, 30-day max-age gate, dev simulation
-- [analytics](docs/analytics.md) — GA4 Measurement Protocol with cross-platform `uuidv5` identity (same human → same `user_id` across desktop/web/backend)
-- [context](docs/context.md) — runtime info block (geolocation, client, session, app) — @omega.js/backend-shaped
-- [usage](docs/usage.md) — opens / hoursTotal / hoursThisSession; clean-exit accumulation
-- [remote-config](docs/remote-config.md) — "hot config" fetched from brand site for runtime flag flips without re-releases
-- [restart-manager](docs/restart-manager.md) — auxiliary helper app for relaunches; auto-installs via signed mac.zip / NSIS exe / browser-opened .deb
-- [config-schema](docs/config-schema.md) — canonical schema + validator for `config/omega.json5`. Hard-fails boot AND `gulp audit` on missing required fields, regex mismatches, enum violations, type mismatches. Single source of truth in the bundled `@omega.js/config`
-- [templating](docs/templating.md) — `{{ var }}` token replacement, page template, body-only views
-- [themes](docs/themes.md) — classy + bootstrap themes, `@use 'omega-desktop' as * with (...)` overrides, per-page CSS bundles, system-aware appearance (`manager.theme`)
-- [sentry](docs/sentry.md) — error/crash reporting, dev-mode gating, auto auth attribution, release tagging
-- [hooks](docs/hooks.md) — lifecycle hooks (build/pre, build/post, release/pre, release/post, notarize)
-- [installer-options](docs/installer-options.md) — installer/distribution config: NSIS one-click defaults, ia32 inclusion, app.category mapping, `{YEAR}` copyright token, snap publishing (default-on with cred-gated auto-skip), MAS roadmap
-- [signing](docs/signing.md) — macOS + Windows code signing reference, cert files, env vars
-- [releasing](docs/releasing.md) — end-to-end release walkthrough (`.env` → GitHub Release)
-- [runner](docs/runner.md) — Windows EV-token signing runner — `npx omega runner start`, which onboards new GH orgs, `npx omega runner monitor` for a live signing event tail
-- [test-framework](docs/test-framework.md) — writing tests, running them, layers
-- [test-boot-layer](docs/test-boot-layer.md) — boot test layer (spawns the consumer's actual built bundle for end-to-end smoke tests)
-- [build-system](docs/build-system.md) — gulp, esbuild, electron-builder pipeline
+Each subsystem has its own API reference under [`docs/desktop/`](../../docs/desktop):
+
+- [storage](../../docs/desktop/storage.md) — KV store, sync in main, async (via IPC) in renderer, dot-notation paths, change broadcasts
+- [ipc](../../docs/desktop/ipc.md) — typed channel bus, `handle` / `invoke` / `broadcast`
+- [windows](../../docs/desktop/windows.md) — lazy named-window registry (no auto-create), bounds persistence, inset titlebar, hide-on-close
+- [tray](../../docs/desktop/tray.md) — file-based tray definition, dynamic items, runtime mutators
+- [menu](../../docs/desktop/menu.md) — file-based application menu, platform-aware default template
+- [context-menu](../../docs/desktop/context-menu.md) — file-based right-click menus, called per-event with `params`
+- [startup](../../docs/desktop/startup.md) — launch modes (`normal` / `hidden`), LSUIElement on macOS, login-item handling
+- [app-state](../../docs/desktop/app-state.md) — first-launch / launch-count / crash-sentinel flags
+- [deep-link](../../docs/desktop/deep-link.md) — cross-platform deep links, single-instance, pattern routing, built-in routes
+- [auth](../../docs/desktop/auth.md): `omega.auth`, Firebase auth state synchronized across main + every renderer
+- [auto-updater](../../docs/desktop/auto-updater.md) — startup + periodic checks, 30-day max-age gate, dev simulation
+- [analytics](../../docs/desktop/analytics.md) — GA4 Measurement Protocol with cross-platform `uuidv5` identity (same human → same `user_id` across desktop/web/backend)
+- [context](../../docs/desktop/context.md) — runtime info block (geolocation, client, session, app) — @omega.js/backend-shaped
+- [usage](../../docs/desktop/usage.md) — opens / hoursTotal / hoursThisSession; clean-exit accumulation
+- [remote-config](../../docs/desktop/remote-config.md) — "hot config" fetched from brand site for runtime flag flips without re-releases
+- [restart-manager](../../docs/desktop/restart-manager.md) — auxiliary helper app for relaunches; auto-installs via signed mac.zip / NSIS exe / browser-opened .deb
+- [config-schema](../../docs/desktop/config-schema.md) — canonical schema + validator for `config/omega.json5`. Hard-fails boot AND `gulp audit` on missing required fields, regex mismatches, enum violations, type mismatches. Single source of truth in the bundled `@omega.js/config`
+- [templating](../../docs/desktop/templating.md) — `{{ var }}` token replacement, page template, body-only views
+- [themes](../../docs/desktop/themes.md): classy + bootstrap themes, `@use 'omega-desktop' as * with (...)` overrides, per-page CSS bundles, system-aware appearance (`omega.theme`)
+- [sentry](../../docs/desktop/sentry.md) — error/crash reporting, dev-mode gating, auto auth attribution, release tagging
+- [hooks](../../docs/desktop/hooks.md) — lifecycle hooks (build/pre, build/post, release/pre, release/post, notarize)
+- [installer-options](../../docs/desktop/installer-options.md) — installer/distribution config: NSIS one-click defaults, ia32 inclusion, app.category mapping, `{YEAR}` copyright token, snap publishing (default-on with cred-gated auto-skip), MAS roadmap
+- [signing](../../docs/desktop/signing.md) — macOS + Windows code signing reference, cert files, env vars
+- [releasing](../../docs/desktop/releasing.md) — end-to-end release walkthrough (`.env` → GitHub Release)
+- [runner](../../docs/desktop/runner.md) — Windows EV-token signing runner — `npx omega runner start`, which onboards new GH orgs, `npx omega runner monitor` for a live signing event tail
+- [test-framework](../../docs/desktop/test-framework.md) — writing tests, running them, layers
+- [test-boot-layer](../../docs/desktop/test-boot-layer.md) — boot test layer (spawns the consumer's actual built bundle for end-to-end smoke tests)
+- [build-system](../../docs/desktop/build-system.md) — gulp, esbuild, electron-builder pipeline
 
 ## Status
 
-Active development on `v1`. See [`PROGRESS.md`](PROGRESS.md) for pass-by-pass progress.
+Active development on `v1`.
 
 ## License
 

package/dist/assets/css/core/_initialize.scss

@@ -1,6 +1,6 @@
 // @omega.js/desktop core init — desktop-targeted defaults that complement the active theme.
 // Web-specific bits (cookieconsent, exit-popup, social-sharing, lazy-loading, service-worker)
-// are intentionally not ported from UJM — they don't apply to a packaged Electron app.
+// are intentionally left out — they don't apply to a packaged Electron app.
 
 // Make sure the html / body fill the window with no scrollbars from layout glitches.
 html, body {

package/dist/assets/js/core/app-shell.js

@@ -3,15 +3,18 @@
  * Drives the .omega-shell mechanics (core/css/shell/_index.scss): desktop
  * sidebar collapse (persisted) and the mobile drawer (scrim + Escape dismiss).
  * Controls are declarative — [data-shell-toggle="collapse|drawer"] and
- * [data-shell-dismiss] anywhere in the page.
+ * [data-shell-dismiss] anywhere in the page. The API is `omega.shell`.
  */
-import omega from '@omega.js/client';
 
 // Constants
 const STORAGE_KEY = 'shell.collapsed';
 
-// Module
-export default () => {
+/**
+ * Build the shell API for `omega.shell` and wire the page's shell controls.
+ * @param {object} omega - the runtime instance (its storage holds the collapse state).
+ * @returns {object} the shell API: isCollapsed, isOpen, setCollapsed, setOpen, toggleCollapsed, toggleOpen.
+ */
+export function createShell(omega) {
   const $shell = document.querySelector('[data-omega-shell]');
 
   // Create app shell API
@@ -38,7 +41,7 @@ export default () => {
       }
 
       $shell.setAttribute('data-shell-collapsed', value ? 'true' : 'false');
-      omega.storage().set(STORAGE_KEY, !!value);
+      omega.storage.set(STORAGE_KEY, !!value);
       syncControls(shellAPI);
     },
 
@@ -70,19 +73,13 @@ export default () => {
     },
   };
 
-  // Register on the omega library — web's bundle entry creates the container before
-  // this runs; vendored surfaces (desktop/extension renderers) call this
-  // module directly with no such entry, so create it if absent (#111)
-  omega._library = omega._library || {};
-  omega._library.appShell = shellAPI;
-
-  // No shell on this page — the API stays registered but inert
+  // No shell on this page: the API is still returned, but inert
   if (!$shell) {
-    return;
+    return shellAPI;
   }
 
   // Restore the persisted collapse state
-  if (String(omega.storage().get(STORAGE_KEY)) === 'true') {
+  if (String(omega.storage.get(STORAGE_KEY)) === 'true') {
     $shell.setAttribute('data-shell-collapsed', 'true');
   }
 
@@ -119,7 +116,9 @@ export default () => {
   syncControls(shellAPI);
 
   console.log('App shell module loaded');
-};
+
+  return shellAPI;
+}
 
 /**
  * Sync aria-expanded on every shell control to the current state

package/dist/assets/themes/_template/_theme.js

@@ -1,6 +1,4 @@
-// <Theme Name> — JS entry point
-// Loaded at runtime via webpack's __theme__ alias. Exposes Bootstrap globally
-// and runs your theme behaviors once the DOM is ready.
+// <Theme Name>: JS entry point. A theme module: the host calls the default export with { omega, options }.
 import bootstrap from '__main_assets__/themes/bootstrap/js/index.umd.js';
 import { ready as domReady } from '@omega.js/client/modules/dom.js';
 
@@ -8,7 +6,9 @@ import { ready as domReady } from '@omega.js/client/modules/dom.js';
 window.bootstrap = bootstrap;
 
 // Initialize theme behaviors when the DOM is ready
-domReady().then(() => {
+export default async function ({ omega, options }) {
+  await domReady();
+
   // Add your theme's initializers here, e.g.:
-  // import('./js/navbar-scroll.js').then(m => m.default());
-});
+  // await import('./js/navbar-scroll.js').then((m) => m.default(omega));
+}

package/dist/assets/themes/base/_includes/global/sections/account.html

@@ -6,12 +6,12 @@
 
 {% capture action_attributes %}{% if include.attributes %}{% for attr in include.attributes %} {{ attr[0] }}="{{ attr[1] }}"{% endfor %}{% endif %}{% endcapture %}
 
-<div class="dropdown animation-slide-up d-inline-flex" data-omega-bind="@show auth.user" hidden>
+<div class="dropdown animation-slide-up d-inline-flex" data-omega-bind="@show auth.user.authenticated" hidden>
   <button class="p-0 border-0 bg-transparent" type="button" data-bs-toggle="dropdown" {{ action_attributes }} aria-expanded="false">
     <span class="d-flex align-items-center">
       <span class="position-relative d-inline-flex">
         <span class="avatar avatar-{{ avatar_size }} rounded-circle bg-secondary bg-opacity-10 border d-flex align-items-center justify-content-center overflow-hidden d-inline-flex">
-          <img src="{{ site.omega.placeholder.src }}" data-omega-bind="@attr src auth.user.photoURL" alt="{{ resolved.config.brand.name }} profile picture"/>
+          <img src="{{ site.omega.placeholder.src }}" data-omega-bind="@attr src auth.user.profile.photoURL" alt="{{ resolved.config.brand.name }} profile picture"/>
         </span>
         <!-- Active status indicator -->
         <span class="position-absolute bottom-0 end-0 p-1 bg-success border border-2 border-white avatar avatar-2xs rounded-circle mb-0">
@@ -27,7 +27,7 @@
         <div class="d-flex align-items-center">
           <div class="position-relative me-3">
             <div class="avatar avatar-md rounded-circle bg-secondary bg-opacity-10 border d-flex align-items-center justify-content-center overflow-hidden">
-              <img src="{{ site.omega.placeholder.src }}" data-omega-bind="@attr src auth.user.photoURL" alt="{{ resolved.config.brand.name }} profile picture"/>
+              <img src="{{ site.omega.placeholder.src }}" data-omega-bind="@attr src auth.user.profile.photoURL" alt="{{ resolved.config.brand.name }} profile picture"/>
             </div>
             <!-- Active status indicator -->
             <span class="position-absolute bottom-0 end-0 p-1 bg-success border border-2 border-white avatar avatar-2xs rounded-circle mb-0">
@@ -35,7 +35,7 @@
             </span>
           </div>
           <div class="flex-grow-1 overflow-hidden">
-            <div class="fw-semibold text-truncate text-body" data-omega-bind="@text auth.user.displayName">User</div>
+            <div class="fw-semibold text-truncate text-body" data-omega-bind="@text auth.user.profile.displayName">User</div>
             <div class="small text-muted text-truncate" data-omega-bind="@text auth.user.email">email@example.com</div>
           </div>
         </div>

package/dist/assets/themes/base/_includes/global/sections/app-sidebar.html

@@ -223,24 +223,24 @@
         <div class="omega-side__ad omega-shell__label">
           <div class="d-flex align-items-center justify-content-between mb-2">
             <span class="omega-chip">Sponsored</span>
-            <a href="/pricing" class="omega-footer__link" data-omega-bind="@show !auth.resolved.active" hidden aria-label="Remove ads with Pro">
+            <a href="/pricing" class="omega-footer__link" data-omega-bind="@show !auth.user.active" hidden aria-label="Remove ads with Pro">
               <i class="fa-solid fa-xmark fa-xs"></i>
             </a>
           </div>
           {% section "verts/unit", type: "in-article", size: "rectangle" %}
-          <a href="/pricing" class="d-block text-center omega-footer__link small mt-2 text-decoration-none" data-omega-bind="@show !auth.resolved.active" hidden>
+          <a href="/pricing" class="d-block text-center omega-footer__link small mt-2 text-decoration-none" data-omega-bind="@show !auth.user.active" hidden>
             Remove with <span class="text-primary">Pro</span>
           </a>
         </div>
       {% endif %}
 
       <!-- User row -->
-      <div class="omega-side__user" data-omega-bind="@show auth.user" hidden>
+      <div class="omega-side__user" data-omega-bind="@show auth.user.authenticated" hidden>
         <span class="avatar avatar-sm rounded-circle overflow-hidden d-inline-flex flex-shrink-0">
-          <img src="{{ site.omega.placeholder.src }}" data-omega-bind="@attr src auth.user.photoURL" alt="{{ resolved.config.brand.name }} profile picture"/>
+          <img src="{{ site.omega.placeholder.src }}" data-omega-bind="@attr src auth.user.profile.photoURL" alt="{{ resolved.config.brand.name }} profile picture"/>
         </span>
         <span class="omega-shell__label flex-grow-1 overflow-hidden">
-          <span class="omega-side__user-name d-block text-truncate" data-omega-bind="@text auth.user.displayName">User</span>
+          <span class="omega-side__user-name d-block text-truncate" data-omega-bind="@text auth.user.profile.displayName">User</span>
           <span class="omega-side__user-email d-block text-truncate" data-omega-bind="@text auth.user.email">email@example.com</span>
         </span>
         <a href="/dashboard/account" class="btn-icon omega-shell__label" aria-label="Account settings">

package/dist/assets/themes/base/_layouts/frontend/pages/account/index.html

@@ -163,9 +163,9 @@ config:
           <div class="mb-4">
             <div class="d-flex align-items-center">
               <div id="avatar-container" class="me-3 position-relative d-flex align-items-center">
-                <!-- Avatar always available from getUser() -->
+                <!-- Avatar always available from the User's profile -->
                 <div class="avatar avatar-lg rounded-circle overflow-hidden border">
-                  <img src="{{ site.omega.placeholder.src }}" data-omega-bind="@attr src auth.user.photoURL" class="object-fit-cover w-100 h-100" alt="{{ resolved.config.brand.name }} profile picture"/>
+                  <img src="{{ site.omega.placeholder.src }}" data-omega-bind="@attr src auth.user.profile.photoURL" class="object-fit-cover w-100 h-100" alt="{{ resolved.config.brand.name }} profile picture"/>
                 </div>
                 <!-- Active status indicator -->
                 <span class="position-absolute bottom-0 end-0 p-1 bg-success border border-2 border-white avatar avatar-2xs rounded-circle mb-0">
@@ -173,7 +173,7 @@ config:
                 </span>
               </div>
               <div>
-                <h5 class="mb-1" data-omega-bind="@text auth.user.displayName">Loading...</h5>
+                <h5 class="mb-1" data-omega-bind="@text auth.user.profile.displayName">Loading...</h5>
                 <small class="text-muted" id="profile-join-date">Member since Loading...</small>
               </div>
             </div>

package/dist/assets/themes/base/_layouts/frontend/pages/alternatives/index.html

@@ -121,7 +121,7 @@ bands below keep the reveal lane. {% endcomment %}
               {% endif %}
               <a href="{{ item.url }}" class="omega-rowlist__item omega-rowlist__item--link" data-omega-reveal>
                 {%- comment %} The competitor's own description rides UNDER the
-                row title (#563, legacy UJM parity): every _alternatives doc
+                row title (#563): every _alternatives doc
                 authors it, and the hub was the only place it could land.
                 Unauthored, the row is exactly what it always was. {% endcomment -%}
                 <span>

package/dist/assets/themes/base/_layouts/frontend/pages/blog/tags/tag.html

@@ -9,7 +9,7 @@ hero:
 <!-- ═══ Masthead ═══ -->
 {% comment %} The term as it DISPLAYS: the aggregation humanizes the winning
    spelling ("Growth Hacks", #457); the tag cloud on /blog/tags title-cases the
-   RAW spelling ("Growth-hacks") — a split legacy UJM shipped too (#294). {% endcomment %}
+   RAW spelling ("Growth-hacks") (#294). {% endcomment %}
 {% assign tag_name = resolved.tag.name | omega_title_case %}
 {% comment %} #467 (after #749): this masthead IS the page's first viewport, so
 the band paints with the document — data-omega-first-paint on the section, no

package/dist/assets/themes/base/_layouts/frontend/pages/payment/confirmation.html

@@ -4,7 +4,7 @@ layout: frontend/core/cover
 # ═══ Payment confirmation — reimagined 2026-07-16: the receipt moment.
 # Serif headline + ok-chip, the order as a RECEIPT panel (mono order id,
 # hairline rows), next steps as the numbered ritual, quiet support foot.
-# All web-manager bindings preserved (confirmation.order.*, subscription.*);
+# Bindings: confirmation.order.*, subscription.*;
 # the celebration confetti rides the page JS as before.
 ---
 

package/dist/assets/themes/base/_sections/marketing/newsletter-cta/section.js

@@ -12,13 +12,12 @@
  * the Google script). No site key configured → the request still sends;
  * the backend decides.
  */
-import omega from '@omega.js/client';
 import { WAKEUP_ROUTE } from '@omega.js/client/modules/request.js';
 import { FormManager } from '@omega.js/client/modules/form-manager.js';
 import { initializeRecaptcha, getRecaptchaToken } from '__main_assets__/js/libs/recaptcha.js';
 import { event } from '__main_assets__/js/libs/analytics.js';
 
-export default (el) => {
+export default (el, { omega }) => {
   const $form = el.querySelector('form.newsletter-form');
   if (!$form) {
     return;
@@ -41,7 +40,7 @@ export default (el) => {
     warmup();
   }, { once: true });
 
-  const formManager = new FormManager($form, {
+  const formManager = new FormManager(omega, $form, {
     allowResubmit: false,
     resetOnSuccess: true,
     submittingText: 'Subscribing...',

package/dist/assets/themes/base/_sections/verts/unit/section.html

@@ -3,5 +3,5 @@
     {%- if args.size != blank %} data-omega-vert-size="{{ args.size }}"{% endif %}
     {%- if args.vert_id != blank %} data-omega-vert-id="{{ args.vert_id }}"{% endif %}
     {%- if args.tags != blank %} data-omega-vert-tags="{{ args.tags | join: ',' }}"{% endif %}
-    data-omega-bind="@hide auth.resolved.active"></div>
+    data-omega-bind="@hide auth.user.active"></div>
 </section>

package/dist/assets/themes/base/_sections/verts/unit/section.js

@@ -8,15 +8,14 @@
  * renders empty). One implementation
  * across web/desktop/extension (the data-omega-vert vocabulary). Paying users
  * never see the unit: the host carries the standard
- * `@hide auth.resolved.active` binding.
+ * `@hide auth.user.active` binding.
  */
-import omega from '@omega.js/client';
 
-export default (el) => {
+export default (el, { omega }) => {
   const $host = el.querySelector('.omega-vert-unit');
   if (!$host) {
     return;
   }
 
-  omega.verts().mount($host);
+  omega.verts.mount($host);
 };

package/dist/assets/themes/base/_theme.js

@@ -1,4 +1,5 @@
-// Base ships structure, not look — and no behavior of its own. This file
+// A theme module: the host calls the default export with { omega, options }.
+// Base ships structure, not look, and no behavior of its own. This file
 // exists for the same reason `_theme.scss` does: so the chain always
 // RESOLVES. `core/js/main.js` dynamically imports `__theme__/_theme.js`, and
 // the alias walks the theme roots and falls back to the FIRST one when no
@@ -6,8 +7,8 @@
 // theme, a tokens-only rung-1 fork) used to fail the bundle with an ENOENT on
 // a path it never claimed to own ([#773](https://github.com/Omega-JS-Stack/omega/issues/773)).
 // Base is the floor that catches it: every theme chain ends here, so the
-// import always lands on a real module.
+// import always lands on a real module whose default export the host can call.
 //
 // A theme with behavior ships its own `_theme.js` and wins the walk ahead of
 // this one; nothing here is meant to be extended.
-export {};
+export default async function ({ omega, options }) {}

package/dist/assets/themes/bootstrap/_theme.js

@@ -1,4 +1,4 @@
-// Import the theme entry point
+// A theme module: the host calls the default export with { omega, options }.
 import bootstrap from './js/index.umd.js';
 
 // Make Bootstrap available globally
@@ -12,5 +12,5 @@ window.bootstrap = bootstrap;
 /* @dev-only:end */
 
 // Add any custom code here
-// ...
+export default async function ({ omega, options }) {}
 

package/dist/assets/themes/bootstrap/overrides/_links.scss

@@ -22,5 +22,5 @@
   }
 }
 
-// (The UJM-era forced underline on .nav-link.active is gone — every nav
+// (No forced underline on .nav-link.active — every nav
 // component owns its active look: pills fill, tabs border, classy fills.)

package/dist/assets/themes/classy/_theme.js

@@ -1,4 +1,4 @@
-// Import the theme entry point
+// A theme module: the host calls the default export with { omega, options }.
 // __main_assets__ is a build alias that resolves to the framework's core assets
 import bootstrap from '__main_assets__/themes/bootstrap/js/index.umd.js';
 import { ready as domReady } from '@omega.js/client/modules/dom.js';
@@ -14,18 +14,20 @@ window.bootstrap = bootstrap;
 /* @dev-only:end */
 
 // Nav glassiness, marquees, reveals, count-ups, and rotators all ride the
-// shared motion engine (core/js/core/motion.js) — no theme JS needed.
+// shared motion engine (core/js/core/motion.js), so no theme JS is needed.
 
-// Import tooltip initialization (the shared core-layer helper — #99)
+// Import tooltip initialization (the shared core-layer helper, #99)
 import initializeTooltips from '__main_assets__/js/libs/initialize-tooltips.js';
 // Import hero demo form initialization
 import initHeroDemoForm from './js/hero-demo-form.js';
 
 // Initialize theme components when DOM is ready
-domReady().then(() => {
+export default async function ({ omega, options }) {
+  await domReady();
+
   // Generic Bootstrap initializations
   initializeTooltips();
 
   // Initialize hero demo form if present
-  initHeroDemoForm();
-});
+  initHeroDemoForm(omega);
+}

package/dist/assets/themes/classy/css/marketing/_sections.scss

@@ -31,8 +31,7 @@
     }
   }
 
-  // Real combomarks (Ian 2026-07-16: the legacy UJM wordmark set, ported to
-  // core/logos): full-color originals inlined, muted to a uniform wall by the
+  // Real combomarks (core/logos): full-color originals inlined, muted to a uniform wall by the
   // item's grayscale — dark mode luminance-flips them so ink-dark marks stay
   // legible on charcoal. Hover restores the brand color (the item drops its
   // filter; the invert must go with it).

package/dist/assets/themes/classy/js/hero-demo-form.js

@@ -19,8 +19,9 @@ function safeRedirect(raw) {
 
 /**
  * Initialize the hero demo form if present
+ * @param {object} omega - the host's instance, handed down by the theme module
  */
-export default async function initHeroDemoForm() {
+export default async function initHeroDemoForm(omega) {
   const $form = document.querySelector('#hero-demo-form');
 
   if (!$form) {
@@ -30,7 +31,7 @@ export default async function initHeroDemoForm() {
   // Dynamic import FormManager only when needed
   const { FormManager } = await import('@omega.js/client/modules/form-manager.js');
 
-  const formManager = new FormManager($form, {
+  const formManager = new FormManager(omega, $form, {
     submittingText: 'Processing...',
   });
 

package/dist/assets/themes/neobrutalism/_theme.js

@@ -1,6 +1,4 @@
-// Neobrutalism Theme — JS entry point
-// Loaded at runtime via webpack's __theme__ alias (import('__theme__/_theme.js')).
-// Exposes Bootstrap globally and wires up theme behaviors on DOM ready.
+// Neobrutalism Theme: JS entry point. A theme module: the host calls the default export with { omega, options }.
 import bootstrap from '__main_assets__/themes/bootstrap/js/index.umd.js';
 import { ready as domReady } from '@omega.js/client/modules/dom.js';
 
@@ -18,7 +16,9 @@ window.bootstrap = bootstrap;
 import initializeTooltips from '__main_assets__/js/libs/initialize-tooltips.js';
 
 // Initialize when DOM is ready
-domReady().then(() => {
+export default async function ({ omega, options }) {
+  await domReady();
+
   // Generic Bootstrap initializations
   initializeTooltips();
-});
+}

package/dist/assets/themes/neobrutalism/js/pages/test/libraries/layers/index.js

@@ -1,6 +1,6 @@
 // /test — Theme (neobrutalism) page JS — the #theme layer.
 // Runs AFTER #main, BEFORE #project. Turns the "js-theme" dot green.
-export default ({ manager, options }) => {
+export default ({ omega, options }) => {
   const dot = document.querySelector('.layer-dot[data-layer="js-theme"]');
   if (dot) {
     dot.style.background = '#30a46c'; // green

package/dist/assets/themes/newsflash/_theme.js

@@ -1,6 +1,4 @@
-// Newsflash Theme — JS entry point
-// Loaded at runtime via webpack's __theme__ alias (import('__theme__/_theme.js')).
-// Exposes Bootstrap globally and wires up theme behaviors on DOM ready.
+// Newsflash Theme: JS entry point. A theme module: the host calls the default export with { omega, options }.
 import bootstrap from '__main_assets__/themes/bootstrap/js/index.umd.js';
 import { ready as domReady } from '@omega.js/client/modules/dom.js';
 
@@ -14,11 +12,13 @@ window.bootstrap = bootstrap;
 /* @dev-only:end */
 
 // Theme behaviors (masthead scroll state rides the shared motion engine's
-// data-omega-scroll-watch — no theme JS)
+// data-omega-scroll-watch, no theme JS)
 import initializeTooltips from '__main_assets__/js/libs/initialize-tooltips.js';
 
 // Initialize when DOM is ready
-domReady().then(() => {
+export default async function ({ omega, options }) {
+  await domReady();
+
   // Generic Bootstrap initializations
   initializeTooltips();
-});
+}