Every page carries a tab icon, and /favicon.ico answers with the mark instead of a 404 #7919

Every page's head now links a 32px PNG tab icon (/icons/forge-32.png), and GET /favicon.ico returns 200 image/png instead of a 404.

• src/web/layout.ts: the head carries <link rel="icon" type="image/png" sizes="32x32" href="/icons/forge-32.png" /> just before the apple-touch-icon.
• src/web/standards.ts: SIZES includes 32 (shape icon). The new favicon() handler serves markPng(32, "icon"), the same cached bytes as /icons/forge-32.png. Both go through one pngResponse helper, so they share the content type, length and public, max-age=604800, immutable cache header.
• src/http/server.ts: registers GET /favicon.ico next to the icon route. It reads no session and does no auth work, and the server's security headers apply to it as to every response.
• src/core/reserved.ts: reserves favicon.ico. The reserved-names check fails any new top-level route that isn't reserved.
• test/standards.test.ts: a new test checks that / carries the icon link, and that /favicon.ico is 200 image/png, 32×32, byte-identical to /icons/forge-32.png, with the same immutable cache header and the CSP, X-Content-Type-Options and Referrer-Policy headers. It fails with the route removed.

The head still has the inline SVG data-URI icon after the PNG link. I left it in place: it is the same mark and stays sharp on high-density screens.

Checks: bun scripts/gate.ts, bun x tsc --noEmit and bun scripts/design-lint.ts are clean. scripts/fast.ts named 1409 test files for this diff (an estimated two hours), so I chose the suites myself: standards, reserved-names, shared-red, smoke, webspec, run-secrets and repo-layout, all 111 passing. The forge's full check runs on the push.

To try it: open any page and look at the tab, or curl -I <preview>/favicon.ico.

🤖 Generated with Claude Code

Closes #7914

Every page's head now links a 32px PNG tab icon (/icons/forge-32.png), and GET /favicon.ico returns 200 image/png instead of a 404.

• src/web/layout.ts: the head carries <link rel="icon" type="image/png" sizes="32x32" href="/icons/forge-32.png" /> just before the apple-touch-icon.
• src/web/standards.ts: SIZES includes 32 (shape icon). The new favicon() handler serves markPng(32, "icon"), the same cached bytes as /icons/forge-32.png. Both go through one pngResponse helper, so they share the content type, length and public, max-age=604800, immutable cache header.
• src/http/server.ts: registers GET /favicon.ico next to the icon route. It reads no session and does no auth work, and the server's security headers apply to it as to every response.
• src/core/reserved.ts: reserves favicon.ico. The reserved-names check fails any new top-level route that isn't reserved.
• test/standards.test.ts: a new test checks that / carries the icon link, and that /favicon.ico is 200 image/png, 32×32, byte-identical to /icons/forge-32.png, with the same immutable cache header and the CSP, X-Content-Type-Options and Referrer-Policy headers. It fails with the route removed.

The head still has the inline SVG data-URI icon after the PNG link. I left it in place: it is the same mark and stays sharp on high-density screens.

Checks: bun scripts/gate.ts, bun x tsc --noEmit and bun scripts/design-lint.ts are clean. scripts/fast.ts named 1409 test files for this diff (an estimated two hours), so I chose the suites myself: standards, reserved-names, shared-red, smoke, webspec, run-secrets and repo-layout, all 111 passing. The forge's full check runs on the push.

To try it: open any page and look at the tab, or curl -I <preview>/favicon.ico.

🤖 Generated with Claude Code

Every forge page now has a 32px tab icon, and GET /favicon.ico returns the forge's mark. Browsers that skip the <link> tags and go straight to that path now get the icon instead of a 404.

• Icon on every page: src/web/layout.ts adds the 32px icon link to every page.
• The route: src/web/standards.ts adds the favicon handler, and src/http/server.ts registers it next to /robots.txt and /icons/:spec.png.
• Reserved name: favicon.ico is added to SYSTEM_NAMES in src/core/reserved.ts, so no user or repository can take the name.
• Tests: test/standards.test.ts covers the icon link on pages and what the route returns.

The second commit fixes the two tests that failed the first check. Both compare the router's top-level routes against a list of pages, and /favicon.ico is an image, not a page. It is now on the not-a-page list in test/forge-looks.test.ts and in the excluded-route pattern in test/design-audit.test.ts, the same way /robots.txt and /sitemap.xml are. The code was right; those two lists just hadn't been updated for the new route.

bun scripts/gate.ts, bun x tsc --noEmit and the three affected test files (forge-looks, design-audit, standards) pass locally.

To try it: open any page on the preview and look at the tab, or curl -I https://lab--7919--forge-trevato-apps.open-platform.sh/favicon.ico.

🤖 Generated with Claude Code

/favicon.ico now returns the forge mark instead of a 404. It sends the same 32px PNG bytes as /icons/forge-32.png, with the same immutable cache and the server's usual security headers.

This answers @sentinel's review. Every page already has an inline SVG tab icon (src/web/layout.ts:736), so the PNG <link rel="icon"> I had added to the page head is removed. With it gone, browsers no longer have two icons to choose between. The test no longer checks the head for that link; it now only checks /favicon.ico (status, content type, same bytes and cache header as /icons/forge-32.png, 32×32 size, security headers). The doc comment on favicon() in src/web/standards.ts now says the pages bring their own SVG icon and that this route is for browser requests from pages that aren't ours, like raw files and JSON answers.

These stay as they were:

• the 32 entry in SIZES
• favicon.ico as a reserved name
• its entries in the looks and design-audit lists of routes that aren't pages

Why this doesn't hold up the pipeline work: it is one read-only route and has no data, schema or migration. It touches none of #6534, #6611, #5276, #3316, #6217, #6428, #1242 or #1073. It only stops a browser 404 on pages we don't render.

To try it: curl -sI https://lab--7919--forge-trevato-apps.open-platform.sh/favicon.ico should show 200, content-type: image/png and an immutable cache-control. Page heads should have exactly one rel="icon".

The gate, tsc --noEmit and design-lint pass, and test/standards.test.ts, test/design-audit.test.ts and test/forge-looks.test.ts pass (27 tests).

🤖 Generated with Claude Code

Every page now links a 32px PNG tab icon, and GET /favicon.ico returns that mark as a 200 image/png instead of a 404.

• src/web/standards.ts: a new favicon() handler serves the same cached bytes as /icons/forge-32.png, with the same content type and public, max-age=604800, immutable cache header. Pages keep their one inline SVG icon in the head; only the route is new.
• src/http/server.ts: registers GET /favicon.ico next to the icon route. It reads no session, and the server's security headers (CSP, X-Content-Type-Options, Referrer-Policy) apply to it.
• src/core/reserved.ts: reserves favicon.ico as a system name, as the reserved-names check requires for any new top-level route.
• Tests: test/standards.test.ts checks that /favicon.ico is a 32×32 image/png, byte-identical to /icons/forge-32.png, with the same cache and security headers; it fails with the route removed. The looks and design-audit lists in test/forge-looks.test.ts and test/design-audit.test.ts now mark it as a route, not a page.

The last check failed on one terminal test, "tell the crew in the terminal > a page that is not http(s) keeps the prompt open and tells nothing". Its cause is not fixed, because I could not reproduce the failure. The test passes alone, in file order, under six random-order seeds, in twelve parallel random-order runs, and with main merged in. The check log names the test but not which assertion failed. The pull's only change on that test's import path is the one-line favicon.ico entry in SYSTEM_NAMES, which the terminal flow never reads. This push merges main (34 commits) and re-runs the check; no test was changed.

Before pushing, bun scripts/gate.ts, bun x tsc --noEmit and bun scripts/design-lint.ts passed. bun scripts/fast.ts named 1,419 files because reserved.ts is imported almost everywhere, so I ran the covering files directly instead, and all passed: test/standards.test.ts, test/standards-sitemap.test.ts, test/reserved-names.test.ts, test/design-audit.test.ts, test/forge-looks.test.ts and test/tui-tell.test.ts.

To try it: curl -sI https://lab--7919--forge-trevato-apps.open-platform.sh/favicon.ico should answer 200 image/png.

🤖 Generated with Claude Code