From d6e8d6cd73ccc4d34cc62977ab1a97a84de499b1 Mon Sep 17 00:00:00 2001
From: Ahmet Abdullah Gultekin <ahmetabdullahgultekin@gmail.com>
Date: Thu, 28 May 2026 12:52:34 +0000
Subject: [PATCH 1/4] docs(deploy): add verify.fivucsas.com build+deploy
 runbook + envDir caveat

Documents the verify-widget Docker deploy (was missing from Key Commands) and
the VITE_API_BASE_URL/envDir requirement whose absence blanked /login for ~11
days (env.ts fail-fast threw at boot). See web-app PR #98.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 CLAUDE.md | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/CLAUDE.md b/CLAUDE.md
index 5258ae5..f32370e 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -77,6 +77,17 @@ scp -P 65002 amispoof/lib/spoof-detector.js amispoof/lib/spoof-detector.js.map a
 # Deploy links hub (links.fivucsas.com — single static index.html)
 scp -P 65002 /opt/projects/fivucsas/links-website/index.html u349700627@46.202.158.52:~/domains/links.fivucsas.com/public_html/index.html
 
+# Deploy verify.fivucsas.com (hosted login + auth widget — Docker/nginx via Traefik, NOT Hostinger)
+# CRITICAL: build:verify needs VITE_API_BASE_URL. vite.verify.config.ts sets envDir=project root
+# so .env.production is loaded — without it env.ts throws at boot and /login renders blank
+# (#verify-root never mounts). Preserve the SDK files (fivucsas-auth*.js) at the html root.
+cd /opt/projects/fivucsas/web-app && npm run build:verify
+rsync -a --delete dist-verify/assets/ ../verify-widget/html/assets/   # assets/ = verify build only
+cp dist-verify/index.html ../verify-widget/html/index.html            # keep html/fivucsas-auth*.js
+cd /opt/projects/fivucsas/verify-widget
+docker compose -f docker-compose.prod.yml build && docker compose -f docker-compose.prod.yml up -d
+# Verify: curl -s https://verify.fivucsas.com/ | grep assets/index-  (new hash) — /login must mount React
+
 # Regenerate + deploy the poster PDF/PNG from the canonical HTML (A0 841×1189mm).
 # Canonical poster = landing-website/public/poster/files/fivucsas-poster.html (served at fivucsas.com/poster/files/; the viewer poster/index.html links only to files/*).
 cd /opt/projects/fivucsas/landing-website/public/poster/files

From 1fc3617ad8600c7cc8c39022fee67a0a2da85ef9 Mon Sep 17 00:00:00 2001
From: Ahmet Abdullah Gultekin <ahmetabdullahgultekin@gmail.com>
Date: Thu, 28 May 2026 13:04:17 +0000
Subject: [PATCH 2/4] docs: record execution-autonomy + keep-docs-updated
 working agreement (2026-05-28)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 CLAUDE.md | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/CLAUDE.md b/CLAUDE.md
index f32370e..95b1745 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -227,4 +227,5 @@ CX43 CPU-only — GPU ihtiyacı doğmaz (Faz 1-3 roadmap CPU-safe).
 - **Python**: Clean Architecture, Pydantic, async/await
 - No hardcoded secrets — use .env.prod
 - Do NOT dockerize static sites (keep on Hostinger)
-- Recommend first, implement only after explicit approval
+- Autonomy (2026-05-28): commit/push/merge (incl. PR `--admin`) without per-action approval; spawn concurrent agents for independent stacked tasks. Recommend-first is reserved for significant DESIGN/product choices and destructive/irreversible actions.
+- Always keep related docs up to date (CLAUDE.md, READMEs, deploy runbooks) and commit them with the change.

From 5afec2560582961e2f69827ade033475b19cc7b5 Mon Sep 17 00:00:00 2001
From: Ahmet Abdullah Gultekin <ahmetabdullahgultekin@gmail.com>
Date: Thu, 28 May 2026 19:09:30 +0000
Subject: [PATCH 3/4] feat(suite): unify cross-site nav + language on the
 shared launcher

Roll the redesigned <fivucsas-launcher> (app.fivucsas.com/launcher.js) out
to demo, docs (+biometric/identity/sdk), and landing; delete each site's
bespoke "FIVUCSAS suite" cross-site bar and per-site EN/TR switch so there
is one global toggle. Static sites localize via html[data-lang]; landing
(React) listens for the launcher's fivucsas:languagechange event. bys-demo
keeps its simulated-portal content; links stays as the hub. Also commits
the demo widget museum note.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 CLAUDE.md                           |  2 +-
 bys-demo/index.html                 | 40 +++++----------------------
 docs-site/html/biometric/index.html | 17 ++----------
 docs-site/html/identity/index.html  | 17 ++----------
 docs-site/html/index.html           | 43 ++---------------------------
 docs-site/html/sdk/index.html       | 17 ++----------
 landing-website/index.html          |  2 ++
 landing-website/src/App.tsx         | 21 ++++++--------
 8 files changed, 27 insertions(+), 132 deletions(-)

diff --git a/CLAUDE.md b/CLAUDE.md
index 95b1745..dddb01c 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -5,7 +5,7 @@
 Multi-tenant biometric auth platform | Marmara University CSE4297 | Hexagonal Architecture
 
 **Status**: Production deployed. Phases 0-8 complete. ~1,900+ tests. All services healthy.
-**Last verified**: 2026-05-21 (2026-05-21: `links.fivucsas.com` hub — API tile → `/swagger-ui.html` with admin-IP "gated" badge (raw API root returned 401), Turkish i18n role-label fixes (English under `lang=tr` was İ-mangling Latin `i` under uppercase), team contact info, Ayşenur LinkedIn URL fix; poster author contact block + **regenerated A0 PDF/PNG** from `landing-website/public/poster/files/fivucsas-poster.html`; attribution — Ayşe Gülsüm Eren GitHub `@aysegulsum` + `marun.edu.tr` academic emails across `spoof-detector` + `practice-and-test` (forensic git-author records left intact); bilingual TR/EN switchers completed on `bys-demo`/`docs-site`/`verify-widget`. Consolidated into PR #69 → `master` (whole `fix/2026-05-12-bake-mini-fasnet-models` branch). NOTE: `api.fivucsas.com/` returns 401 by design (it's an API origin, not a page); Swagger/`/v3/api-docs`/`/actuator` are admin-IP gated (403 public), OIDC discovery is public (200). Carry-forward from 2026-05-12 / 2026-05-11: 11 PRs shipped across 5 repos + Flyway repair on prod, V59/V60 applied, branch protection on 6 branches, master/main reconciled, INVESTIGATION 2026-05-07 P1 residue closed, tenant onboarding playbook + 8 ADRs + docs/ hierarchy consolidated, spoof-detector blink cache + EAR recalibration paper-P0. **Added today**: parent PR #57 (poster suite: A0 default + 4 style variants compliant with CSE4198 §5.1) + parent PR #58 (archived 18 dated 2026-04/2026-05-04 docs into `archive/2026-05/{audits,plans,reviews,roadmaps,sessions}/`, tidied `.gitignore`); bio PR #99 (closed issue #91: 32 stale unit tests + 3 asyncio-fixture leaks fixed, no production code touched, module-scoped TestClient pattern documented for follow-ups); bio Dependabot #97/#98 in flight (rebased post-#99). Submodule pointer for biometric-processor bumped to post-#99 main.)
+**Last verified**: 2026-05-28 (2026-05-28: **Suite launcher unified + security backlog.** Redesigned shared `<fivucsas-launcher>` web component (web-app #103) — hosted at `app.fivucsas.com/launcher.js` (ships in web-app `public/` → Hostinger deploy), it is the ONE cross-site app switcher + global EN/TR toggle. Rolled out to `demo`, `docs` (+3 subpages: biometric/identity/sdk), `amispoof` (web-app #104 removed the amispoof auto-skip), and `landing`; deleted every site's bespoke "FIVUCSAS suite" cross-site bar + per-site EN/TR switch, incl. the dashboard TopBar toggle (Settings-page language `<select>` kept). One toggle drives `html[data-lang]` (static sites localize via `[data-lang]` CSS) and fires a `fivucsas:languagechange` CustomEvent → `i18n.changeLanguage` for the React surfaces (dashboard + verify share `web-app/src/i18n/index.ts`; landing listens in `App.tsx`). `links.fivucsas.com` keeps its own controls — it IS the hub. **api #111 (S13)**: TOTP used-code replay prevention — bounded ~120s Redis `SET key 1 EX NX` marker per `(userId, timeStep)`, max ~3 in-window markers/user, in-memory fallback capped 50k; NOT an infinite blacklist; enrollment keeps plain verify (legit retries). **web #102 (F13/F9)**: surfaced swallowed voice-enrollment errors via `formatApiError` + the `OTP_ATTEMPTS_EXHAUSTED` state. **F12** voice threshold verified CORRECT (verify = cosine *similarity* `>=` 0.65; search = pgvector `<=>` cosine *distance* `< 0.6`) — no change. 2026-05-21: `links.fivucsas.com` hub — API tile → `/swagger-ui.html` with admin-IP "gated" badge (raw API root returned 401), Turkish i18n role-label fixes (English under `lang=tr` was İ-mangling Latin `i` under uppercase), team contact info, Ayşenur LinkedIn URL fix; poster author contact block + **regenerated A0 PDF/PNG** from `landing-website/public/poster/files/fivucsas-poster.html`; attribution — Ayşe Gülsüm Eren GitHub `@aysegulsum` + `marun.edu.tr` academic emails across `spoof-detector` + `practice-and-test` (forensic git-author records left intact); bilingual TR/EN switchers completed on `bys-demo`/`docs-site`/`verify-widget`. Consolidated into PR #69 → `master` (whole `fix/2026-05-12-bake-mini-fasnet-models` branch). NOTE: `api.fivucsas.com/` returns 401 by design (it's an API origin, not a page); Swagger/`/v3/api-docs`/`/actuator` are admin-IP gated (403 public), OIDC discovery is public (200). Carry-forward from 2026-05-12 / 2026-05-11: 11 PRs shipped across 5 repos + Flyway repair on prod, V59/V60 applied, branch protection on 6 branches, master/main reconciled, INVESTIGATION 2026-05-07 P1 residue closed, tenant onboarding playbook + 8 ADRs + docs/ hierarchy consolidated, spoof-detector blink cache + EAR recalibration paper-P0. **Added today**: parent PR #57 (poster suite: A0 default + 4 style variants compliant with CSE4198 §5.1) + parent PR #58 (archived 18 dated 2026-04/2026-05-04 docs into `archive/2026-05/{audits,plans,reviews,roadmaps,sessions}/`, tidied `.gitignore`); bio PR #99 (closed issue #91: 32 stale unit tests + 3 asyncio-fixture leaks fixed, no production code touched, module-scoped TestClient pattern documented for follow-ups); bio Dependabot #97/#98 in flight (rebased post-#99). Submodule pointer for biometric-processor bumped to post-#99 main.)
 
 ## Architecture
 
diff --git a/bys-demo/index.html b/bys-demo/index.html
index bf94574..11155ba 100644
--- a/bys-demo/index.html
+++ b/bys-demo/index.html
@@ -5,19 +5,9 @@
 /* Language gating (injected) */
 html[data-lang="tr"] [data-en]{ display:none !important; }
 html[data-lang="en"] [data-tr]{ display:none !important; }
-.lang-switch-bys{
-  display:inline-flex; gap:0; border:1px solid rgba(255,255,255,.25); border-radius:99px; padding:2px;
-  margin-left:14px; vertical-align:middle;
-}
-.lang-switch-bys button{
-  background:transparent; border:none; color:rgba(255,255,255,.7); cursor:pointer;
-  font-family:Inter, sans-serif; font-size:11px; font-weight:600; letter-spacing:.12em;
-  padding:3px 9px; border-radius:99px; transition: background .15s ease, color .15s ease;
-}
-.lang-switch-bys button.active{ background:#ffffff; color:#8B0000; }
 </style>
     <meta charset="UTF-8">
-    <meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self' 'unsafe-inline' https://verify.fivucsas.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https://api.fivucsas.com https://verify.fivucsas.com; frame-src https://verify.fivucsas.com; base-uri 'self'; form-action 'self' https://verify.fivucsas.com;">
+    <meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self' 'unsafe-inline' https://verify.fivucsas.com https://app.fivucsas.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https://api.fivucsas.com https://verify.fivucsas.com; frame-src https://verify.fivucsas.com; base-uri 'self'; form-action 'self' https://verify.fivucsas.com;">
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <title>FIVUCSAS Biyometrik Kimlik Doğrulama — Üniversite BYS Entegrasyon Demosu</title>
     <meta name="description" content="Canlı entegrasyon demosu: FIVUCSAS biyometrik kimlik doğrulama platformunun bir üniversite öğrenci bilgi sistemine nasıl entegre edildiğini gösterir. Marmara BYS arayüzü, demo veridir.">
@@ -134,31 +124,9 @@
                 <svg role="img" aria-label="E-posta" width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M4 4h16c1.1 0 2 .9 2 2v12c0 1.1-.9 2-2 2H4c-1.1 0-2-.9-2-2V6c0-1.1.9-2 2-2z"/><polyline points="22,6 12,13 2,6"/></svg>
                 bilgisistem@marmara.edu.tr
             </div>
-            <span class="lang-switch-bys" role="group" aria-label="Language">
-                <button type="button" data-set="tr" class="active">TR</button>
-                <button type="button" data-set="en">EN</button>
-            </span>
         </div>
     </div>
 </header>
-<script>
-(function(){
-  var sw = document.querySelector('.lang-switch-bys');
-  var html = document.documentElement;
-  function apply(lang){
-    html.setAttribute('data-lang', lang);
-    html.setAttribute('lang', lang);
-    sw.querySelectorAll('button').forEach(function(b){ b.classList.toggle('active', b.dataset.set === lang); });
-    try { history.replaceState(null, '', lang === 'tr' ? '#' : '#en'); } catch(e){}
-  }
-  var initial = (location.hash === '#en') ? 'en' : 'tr';
-  apply(initial);
-  sw.addEventListener('click', function(e){
-    var b = e.target.closest('button[data-set]');
-    if (b) apply(b.dataset.set);
-  });
-})();
-</script>
 
 <!-- Navigation Bar -->
 <nav class="bys-navbar">
@@ -328,6 +296,10 @@ <h1 class="bys-title"><span data-tr>Öğrenci Bilgi Sistemi</span><span data-en>
                 <button type="button" class="fivucsas-advanced-btn" onclick="startFivucsasWidget()">
                     İnline MFA (gelişmiş) &mdash; iframe widget örneği
                 </button>
+                <p class="fivucsas-widget-note" style="margin-top:10px;font-size:12.5px;line-height:1.5;color:#94a3b8;max-width:420px;">
+                    <span data-tr>Bu satır içi (iframe) widget, FIVUCSAS'ın <strong>gömülebilir kimlik doğrulama</strong> yeteneğini göstermek için buradadır (vitrin). Güvenlik gereği (clickjacking koruması) canlı iframe yalnızca FIVUCSAS demo alanlarında etkindir, harici müşteri/kiracılara açılmaz. Birincil ve önerilen entegrasyon yukarıdaki <strong>yönlendirmeli (redirect)</strong> butondur.</span>
+                    <span data-en>This inline (iframe) widget is here to showcase FIVUCSAS's <strong>embeddable authentication</strong> capability. For security (clickjacking protection), the live iframe is enabled only on FIVUCSAS demo origins and is not offered to external customers/tenants. The primary, recommended integration is the <strong>redirect</strong> button above.</span>
+                </p>
             </div>
 
         </div><!-- /.login-card -->
@@ -424,5 +396,7 @@ <h1 class="bys-title"><span data-tr>Öğrenci Bilgi Sistemi</span><span data-en>
 }
 </script>
 
+<!-- FIVUCSAS suite launcher (shared cross-site nav + global EN/TR toggle; drives html[data-lang]) -->
+<script src="https://app.fivucsas.com/launcher.js" defer></script>
 </body>
 </html>
diff --git a/docs-site/html/biometric/index.html b/docs-site/html/biometric/index.html
index 3065958..179ac7a 100644
--- a/docs-site/html/biometric/index.html
+++ b/docs-site/html/biometric/index.html
@@ -128,21 +128,6 @@
     </style>
 </head>
 <body>
-<!-- FIVUCSAS suite bar — cross-site nav -->
-<div style="background:#0a0d12;border-bottom:1px solid #1f2937;padding:6px 16px;display:flex;flex-wrap:wrap;gap:14px;align-items:center;font-size:12px;font-family:'Inter',system-ui,-apple-system,sans-serif;color:#94a3b8;">
-  <a href="https://fivucsas.com/" style="color:#818cf8;text-decoration:none;font-weight:600;">← FIVUCSAS</a>
-  <span style="color:#374151;">|</span>
-  <a href="https://app.fivucsas.com/" style="color:#cbd5e1;text-decoration:none;">Dashboard</a>
-  <span style="color:#374151;">|</span>
-  <a href="https://demo.fivucsas.com/" style="color:#cbd5e1;text-decoration:none;">Demo</a>
-  <span style="color:#374151;">|</span>
-  <a href="https://verify.fivucsas.com/" style="color:#cbd5e1;text-decoration:none;">Widget</a>
-  <span style="color:#374151;">|</span>
-  <a href="https://amispoof.fivucsas.com/" style="color:#cbd5e1;text-decoration:none;">amispoof</a>
-  <span style="color:#374151;">|</span>
-  <a href="https://docs.fivucsas.com/" style="color:#94a3b8;text-decoration:none;" aria-current="page">Docs</a>
-  <a href="https://status.fivucsas.com/" style="color:#cbd5e1;text-decoration:none;margin-left:auto;">Status &uarr;</a>
-</div>
 
     <header class="header">
         <div class="header-inner">
@@ -179,5 +164,7 @@
             filter: true
         });
     </script>
+<!-- FIVUCSAS suite launcher (shared cross-site nav + global EN/TR toggle; drives html[data-lang]) -->
+<script src="https://app.fivucsas.com/launcher.js" defer></script>
 </body>
 </html>
diff --git a/docs-site/html/identity/index.html b/docs-site/html/identity/index.html
index 30437f9..f5dbe28 100644
--- a/docs-site/html/identity/index.html
+++ b/docs-site/html/identity/index.html
@@ -202,21 +202,6 @@
     </style>
 </head>
 <body>
-<!-- FIVUCSAS suite bar — cross-site nav -->
-<div style="background:#0a0d12;border-bottom:1px solid #1f2937;padding:6px 16px;display:flex;flex-wrap:wrap;gap:14px;align-items:center;font-size:12px;font-family:'Inter',system-ui,-apple-system,sans-serif;color:#94a3b8;">
-  <a href="https://fivucsas.com/" style="color:#818cf8;text-decoration:none;font-weight:600;">← FIVUCSAS</a>
-  <span style="color:#374151;">|</span>
-  <a href="https://app.fivucsas.com/" style="color:#cbd5e1;text-decoration:none;">Dashboard</a>
-  <span style="color:#374151;">|</span>
-  <a href="https://demo.fivucsas.com/" style="color:#cbd5e1;text-decoration:none;">Demo</a>
-  <span style="color:#374151;">|</span>
-  <a href="https://verify.fivucsas.com/" style="color:#cbd5e1;text-decoration:none;">Widget</a>
-  <span style="color:#374151;">|</span>
-  <a href="https://amispoof.fivucsas.com/" style="color:#cbd5e1;text-decoration:none;">amispoof</a>
-  <span style="color:#374151;">|</span>
-  <a href="https://docs.fivucsas.com/" style="color:#94a3b8;text-decoration:none;" aria-current="page">Docs</a>
-  <a href="https://status.fivucsas.com/" style="color:#cbd5e1;text-decoration:none;margin-left:auto;">Status &uarr;</a>
-</div>
 
     <header class="header">
         <div class="header-inner">
@@ -347,5 +332,7 @@ <h3>System</h3>
             document.getElementById('fallback').style.display = 'block';
         }
     </script>
+<!-- FIVUCSAS suite launcher (shared cross-site nav + global EN/TR toggle; drives html[data-lang]) -->
+<script src="https://app.fivucsas.com/launcher.js" defer></script>
 </body>
 </html>
diff --git a/docs-site/html/index.html b/docs-site/html/index.html
index 4d6be3f..b64c216 100644
--- a/docs-site/html/index.html
+++ b/docs-site/html/index.html
@@ -4,13 +4,6 @@
 <style>
 html[data-lang="tr"] [data-en]{ display:none !important; }
 html[data-lang="en"] [data-tr]{ display:none !important; }
-.lang-switch-fix{ position: fixed; top: 14px; right: 14px; z-index: 9999;
-  display:inline-flex; gap:0; border:1px solid rgba(255,255,255,.25); border-radius:99px; padding:2px;
-  background:rgba(15,15,35,.85); }
-.lang-switch-fix button{ background:transparent; border:none; color:rgba(255,255,255,.7); cursor:pointer;
-  font-family: ui-monospace,monospace; font-size:11px; font-weight:600; letter-spacing:.12em;
-  padding:4px 10px; border-radius:99px; }
-.lang-switch-fix button.active{ background:#6366f1; color:#fff; }
 </style>
     <meta charset="UTF-8">
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
@@ -417,40 +410,6 @@
     </style>
 </head>
 <body>
-<span class="lang-switch-fix" role="group" aria-label="Language">
-  <button type="button" data-set="tr">TR</button>
-  <button type="button" data-set="en" class="active">EN</button>
-</span>
-<script>
-(function(){
-  var sw = document.querySelector('.lang-switch-fix');
-  var html = document.documentElement;
-  function apply(lang){
-    html.setAttribute('data-lang', lang); html.setAttribute('lang', lang);
-    sw.querySelectorAll('button').forEach(function(b){ b.classList.toggle('active', b.dataset.set === lang); });
-    try { history.replaceState(null,'', lang==='en' ? '#' : '#tr'); } catch(e){}
-  }
-  var initial = (location.hash === '#tr') ? 'tr' : 'en';
-  apply(initial);
-  sw.addEventListener('click', function(e){ var b = e.target.closest('button[data-set]'); if (b) apply(b.dataset.set); });
-})();
-</script>
-<!-- FIVUCSAS suite bar — cross-site nav -->
-<div style="background:#0a0d12;border-bottom:1px solid #1f2937;padding:6px 16px;display:flex;flex-wrap:wrap;gap:14px;align-items:center;font-size:12px;font-family:'Inter',system-ui,-apple-system,sans-serif;color:#94a3b8;">
-  <a href="https://fivucsas.com/" style="color:#818cf8;text-decoration:none;font-weight:600;">← FIVUCSAS</a>
-  <span style="color:#374151;">|</span>
-  <a href="https://app.fivucsas.com/" style="color:#cbd5e1;text-decoration:none;">Dashboard</a>
-  <span style="color:#374151;">|</span>
-  <a href="https://demo.fivucsas.com/" style="color:#cbd5e1;text-decoration:none;">Demo</a>
-  <span style="color:#374151;">|</span>
-  <a href="https://verify.fivucsas.com/" style="color:#cbd5e1;text-decoration:none;">Widget</a>
-  <span style="color:#374151;">|</span>
-  <a href="https://amispoof.fivucsas.com/" style="color:#cbd5e1;text-decoration:none;">amispoof</a>
-  <span style="color:#374151;">|</span>
-  <a href="https://docs.fivucsas.com/" style="color:#94a3b8;text-decoration:none;" aria-current="page">Docs</a>
-  <a href="https://status.fivucsas.com/" style="color:#cbd5e1;text-decoration:none;margin-left:auto;">Status &uarr;</a>
-</div>
-
     <header class="header">
         <div class="header-inner">
             <a href="/" class="logo">
@@ -565,5 +524,7 @@ <h2><span data-en>Architecture Overview</span><span data-tr>Mimari Genel Bakış
             </div>
         </div>
     </footer>
+<!-- FIVUCSAS suite launcher (shared cross-site nav + global EN/TR toggle; drives html[data-lang]) -->
+<script src="https://app.fivucsas.com/launcher.js" defer></script>
 </body>
 </html>
diff --git a/docs-site/html/sdk/index.html b/docs-site/html/sdk/index.html
index 70071ce..908873d 100644
--- a/docs-site/html/sdk/index.html
+++ b/docs-site/html/sdk/index.html
@@ -207,21 +207,6 @@
     </style>
 </head>
 <body>
-<!-- FIVUCSAS suite bar — cross-site nav -->
-<div style="background:#0a0d12;border-bottom:1px solid #1f2937;padding:6px 16px;display:flex;flex-wrap:wrap;gap:14px;align-items:center;font-size:12px;font-family:'Inter',system-ui,-apple-system,sans-serif;color:#94a3b8;">
-  <a href="https://fivucsas.com/" style="color:#818cf8;text-decoration:none;font-weight:600;">← FIVUCSAS</a>
-  <span style="color:#374151;">|</span>
-  <a href="https://app.fivucsas.com/" style="color:#cbd5e1;text-decoration:none;">Dashboard</a>
-  <span style="color:#374151;">|</span>
-  <a href="https://demo.fivucsas.com/" style="color:#cbd5e1;text-decoration:none;">Demo</a>
-  <span style="color:#374151;">|</span>
-  <a href="https://verify.fivucsas.com/" style="color:#cbd5e1;text-decoration:none;">Widget</a>
-  <span style="color:#374151;">|</span>
-  <a href="https://amispoof.fivucsas.com/" style="color:#cbd5e1;text-decoration:none;">amispoof</a>
-  <span style="color:#374151;">|</span>
-  <a href="https://docs.fivucsas.com/" style="color:#94a3b8;text-decoration:none;" aria-current="page">Docs</a>
-  <a href="https://status.fivucsas.com/" style="color:#cbd5e1;text-decoration:none;margin-left:auto;">Status &uarr;</a>
-</div>
 
     <header class="header">
         <div class="header-inner">
@@ -534,5 +519,7 @@ <h2>Security Best Practices</h2>
 <span class="cm">// user.name = display name</span></pre>
         </div>
     </div>
+<!-- FIVUCSAS suite launcher (shared cross-site nav + global EN/TR toggle; drives html[data-lang]) -->
+<script src="https://app.fivucsas.com/launcher.js" defer></script>
 </body>
 </html>
diff --git a/landing-website/index.html b/landing-website/index.html
index daa12e4..e2f131e 100644
--- a/landing-website/index.html
+++ b/landing-website/index.html
@@ -167,5 +167,7 @@
     <h1 style="position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);white-space:nowrap;border:0;">FIVUCSAS — Face and Identity Verification Using Cloud-based SaaS</h1>
     <div id="root"></div>
     <script type="module" src="/src/main.tsx"></script>
+    <!-- FIVUCSAS suite launcher (shared cross-site nav + global EN/TR toggle) -->
+    <script src="https://app.fivucsas.com/launcher.js" defer></script>
   </body>
 </html>
diff --git a/landing-website/src/App.tsx b/landing-website/src/App.tsx
index 8a26a89..f3ad14c 100644
--- a/landing-website/src/App.tsx
+++ b/landing-website/src/App.tsx
@@ -274,6 +274,15 @@ export default function App() {
       else if ((navigator.language || 'en').toLowerCase().startsWith('tr')) initial = 'tr'
     } catch { /* noop */ }
     setLang(initial)
+
+    // The shared suite launcher (app.fivucsas.com/launcher.js) owns the global
+    // EN/TR toggle and fires this event when it changes — keep landing in sync.
+    const onLangChange = (e: Event) => {
+      const next = (e as CustomEvent<{ lang?: Lang }>).detail?.lang
+      if (next === 'en' || next === 'tr') setLang(next)
+    }
+    window.addEventListener('fivucsas:languagechange', onLangChange as EventListener)
+    return () => window.removeEventListener('fivucsas:languagechange', onLangChange as EventListener)
   }, [])
 
   useEffect(() => {
@@ -285,8 +294,6 @@ export default function App() {
     try { localStorage.setItem('fivucsas-lang', lang) } catch { /* noop */ }
   }, [lang])
 
-  const toggleLang = () => setLang(prev => prev === 'en' ? 'tr' : 'en')
-
   const heroRef = useRef<HTMLDivElement>(null)
   const { scrollYProgress } = useScroll({ target: heroRef, offset: ['start start', 'end start'] })
   const heroOpacity = useTransform(scrollYProgress, [0, 0.9], [1, 0])
@@ -347,13 +354,6 @@ export default function App() {
                 <span className="w-1.5 h-1.5 rounded-full bg-emerald-400 animate-pulse" />
                 {text(t.nav.status)}
               </a>
-              <button
-                onClick={toggleLang}
-                aria-label="Toggle language"
-                className="ml-2 px-3 py-1.5 text-xs font-mono font-semibold rounded-lg border border-white/10 bg-white/5 text-slate-300 hover:text-white hover:border-white/20 transition-colors"
-              >
-                {lang === 'en' ? 'TR' : 'EN'}
-              </button>
               <a
                 href="https://app.fivucsas.com"
                 className="ml-2 inline-flex items-center gap-2 px-4 py-2 rounded-lg bg-gradient-to-r from-primary-500 to-primary-600 hover:from-primary-400 hover:to-primary-500 text-sm font-semibold shadow-glow-primary transition-all"
@@ -385,9 +385,6 @@ export default function App() {
                 </a>
               ))}
               <div className="flex gap-2 pt-2">
-                <button onClick={toggleLang} className="flex-1 px-3 py-2 text-sm font-mono rounded-lg border border-white/10 bg-white/5 text-slate-300">
-                  {lang === 'en' ? 'Türkçe' : 'English'}
-                </button>
                 <a href="https://app.fivucsas.com" className="flex-1 text-center px-3 py-2 rounded-lg bg-gradient-to-r from-primary-500 to-primary-600 text-sm font-semibold shadow-glow-primary">
                   {text(t.nav.signIn)}
                 </a>

From 6a95ed26c6fb4fc1df9f516999fefe57b38439ac Mon Sep 17 00:00:00 2001
From: Ahmet Abdullah Gultekin <ahmetabdullahgultekin@gmail.com>
Date: Thu, 28 May 2026 19:16:57 +0000
Subject: [PATCH 4/4] chore(launcher): one-time ?v=2026-05-28 cache-bust on
 launcher refs

app.fivucsas.com serves .js as immutable; a shared stable URL is needed so
all sites hit the same cache entry. Bump retires existing immutable copies;
launcher.js itself is moved to a revalidating cache (web-app .htaccess) so
future updates propagate without further ?v= bumps.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 bys-demo/index.html                 | 2 +-
 docs-site/html/biometric/index.html | 2 +-
 docs-site/html/identity/index.html  | 2 +-
 docs-site/html/index.html           | 2 +-
 docs-site/html/sdk/index.html       | 2 +-
 landing-website/index.html          | 2 +-
 6 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/bys-demo/index.html b/bys-demo/index.html
index 11155ba..33175b2 100644
--- a/bys-demo/index.html
+++ b/bys-demo/index.html
@@ -397,6 +397,6 @@ <h1 class="bys-title"><span data-tr>Öğrenci Bilgi Sistemi</span><span data-en>
 </script>
 
 <!-- FIVUCSAS suite launcher (shared cross-site nav + global EN/TR toggle; drives html[data-lang]) -->
-<script src="https://app.fivucsas.com/launcher.js" defer></script>
+<script src="https://app.fivucsas.com/launcher.js?v=2026-05-28" defer></script>
 </body>
 </html>
diff --git a/docs-site/html/biometric/index.html b/docs-site/html/biometric/index.html
index 179ac7a..4233216 100644
--- a/docs-site/html/biometric/index.html
+++ b/docs-site/html/biometric/index.html
@@ -165,6 +165,6 @@
         });
     </script>
 <!-- FIVUCSAS suite launcher (shared cross-site nav + global EN/TR toggle; drives html[data-lang]) -->
-<script src="https://app.fivucsas.com/launcher.js" defer></script>
+<script src="https://app.fivucsas.com/launcher.js?v=2026-05-28" defer></script>
 </body>
 </html>
diff --git a/docs-site/html/identity/index.html b/docs-site/html/identity/index.html
index f5dbe28..98031ea 100644
--- a/docs-site/html/identity/index.html
+++ b/docs-site/html/identity/index.html
@@ -333,6 +333,6 @@ <h3>System</h3>
         }
     </script>
 <!-- FIVUCSAS suite launcher (shared cross-site nav + global EN/TR toggle; drives html[data-lang]) -->
-<script src="https://app.fivucsas.com/launcher.js" defer></script>
+<script src="https://app.fivucsas.com/launcher.js?v=2026-05-28" defer></script>
 </body>
 </html>
diff --git a/docs-site/html/index.html b/docs-site/html/index.html
index b64c216..b44ebd9 100644
--- a/docs-site/html/index.html
+++ b/docs-site/html/index.html
@@ -525,6 +525,6 @@ <h2><span data-en>Architecture Overview</span><span data-tr>Mimari Genel Bakış
         </div>
     </footer>
 <!-- FIVUCSAS suite launcher (shared cross-site nav + global EN/TR toggle; drives html[data-lang]) -->
-<script src="https://app.fivucsas.com/launcher.js" defer></script>
+<script src="https://app.fivucsas.com/launcher.js?v=2026-05-28" defer></script>
 </body>
 </html>
diff --git a/docs-site/html/sdk/index.html b/docs-site/html/sdk/index.html
index 908873d..72fa6d0 100644
--- a/docs-site/html/sdk/index.html
+++ b/docs-site/html/sdk/index.html
@@ -520,6 +520,6 @@ <h2>Security Best Practices</h2>
         </div>
     </div>
 <!-- FIVUCSAS suite launcher (shared cross-site nav + global EN/TR toggle; drives html[data-lang]) -->
-<script src="https://app.fivucsas.com/launcher.js" defer></script>
+<script src="https://app.fivucsas.com/launcher.js?v=2026-05-28" defer></script>
 </body>
 </html>
diff --git a/landing-website/index.html b/landing-website/index.html
index e2f131e..a01b3c8 100644
--- a/landing-website/index.html
+++ b/landing-website/index.html
@@ -168,6 +168,6 @@ <h1 style="position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow
     <div id="root"></div>
     <script type="module" src="/src/main.tsx"></script>
     <!-- FIVUCSAS suite launcher (shared cross-site nav + global EN/TR toggle) -->
-    <script src="https://app.fivucsas.com/launcher.js" defer></script>
+    <script src="https://app.fivucsas.com/launcher.js?v=2026-05-28" defer></script>
   </body>
 </html>