[ChefControl]

Closes #213. Found while writing the privacy notice (#150, PR #211).

What changes for players

• The scoreboard and the wall of shame show a first name and the initial of the last: "Pat Smith" is now "Pat S." Emails still show as "A player".
• Settings → 🛡️ Privacy (signed in) has a Show me on the scoreboards switch, at the top of the panel, on by default. Turning it off takes the player's scores/{uid} and shame/{uid} down at once and puts nothing new up. The choice is kept on the account, so every device follows it. Turning it on puts them back.

How

• src/publicName.ts: the new rule, kept apart from cloud.ts so the one-off script can use it in Node.
• cloud.ts: cloud.hidden (null until the account's been read, so nothing goes up before it's known), showOnBoards(), and the switch under Privacy. A sync's read from before a switch can't undo it.
• firebase.ts: hide() writes the choice and deletes both entries in one batch, so it's both or neither. Saves are now written with merge: true, so the choice survives later saves.
• The switch reuses the Buy button switch, now a shared .switch class. Captions: "As Pat S." / "Hidden from other players".

firestore.rules (published to the live project by the owner on 2026-10-28)

• A signed-in player may delete their own scores/{uid} and shame/{uid}, and no one else's.
• saves/{uid} may carry hidden (a bool).
• New test/rules/scores.test.ts; shame.test.ts now expects owners can delete. npm run test:rules passes locally: 18 tests.
• They're live already, so the switch works as soon as this deploys. The old game doesn't write hidden, so it's unaffected.

One-off: shorten the names already up
After this is live, run once, signed in to gcloud as a project owner:

node scripts/shorten-names.ts           # lists what it would change
node scripts/shorten-names.ts --write   # changes them

It uses Firestore's REST API with gcloud's token and changes only name. Running it again does nothing. Not tried against live data: gcloud isn't installed on this Mac.

Privacy notice (public/privacy.html, from #211): the scoreboard and wall of shame rows now say "Pat S." and that turning off Show me on the scoreboards deletes the entry at once. The short version, the save row, the sign-in intro and the "delete it" bullet under Your rights match. Last changed is now 28 October 2026.

Privacy in Settings stays in the game (owner's ask): the About group's 🛡️ Privacy is now a category row like Credits & Copyrights. It opens into the scoreboards switch (signed in), then the notice's short version (word for word, kept the same by a test) and Read the full notice ›, which shows privacy.html in a kit dialog over the paused game (✕, Esc or a tap beside it closes it; Esc leaves Settings open). Inside the game the notice drops its "Play Floe Market" link and opens its outside links in a tab of their own.

Design system: updated the Settings card (the shared switch and its second use, and the Privacy row and dialog) and the Scoreboard card ("Pat S." names, opted-out players).

Rebased on main after #210 and #211. The only conflict was #210's "Floe Emoji" font in the switch CSS, which is kept.

CI fix: test/rain.test.ts checked for no <iframe> anywhere (to rule out a YouTube player); it now leaves out the notice's own frame and checks that frame stays empty until asked for.

Tested: test/cloud.test.ts, test/firebase.test.ts, test/wallOfShame.test.ts pass locally (44); full suite left to CI. Also looked at the switch on and off in a dev server that wasn't signed in.

🤖 Generated with Claude Code