Move forrt.org to the Doors design (draft until launch)

.codespell-ignore.txt

@@ -42,6 +42,7 @@ Udo
 Yau
 Mathes
 Smal
+Asai
 
 # Technical or code related terms
 aCount
@@ -98,3 +99,9 @@ ons
 sie
 tru
 ublication
+doubleclick
+
+# German glossary label
+Referenz
+pre-selected
+jus

.codespellrc

@@ -1,6 +1,6 @@
 [codespell]
 # Skip these files and directories
-skip = .git,*.png,*.jpg,*.jpeg,*.gif,*.svg,*.ico,*.woff,*.woff2,*.ttf,*.eot,*.min.js,*.min.css,themes,node_modules,public,resources,static/admin,static/newsletters,*.lock,package-lock.json,.hugo_build.lock,go.sum,*.json,*.css,*.scss,*.toml,content/glossary/german,content/glossary/portuguese,content/glossary/arabic,content/glossary/spanish,content/glossary/french,content/glossary/turkish,data,*.pdf,content/glossary/english/open_material.md
+skip = .git,assets/three,assets/three/*,scripts/rebrand/baseline,scripts/rebrand/baseline/*,*.png,*.jpg,*.jpeg,*.gif,*.svg,*.ico,*.woff,*.woff2,*.ttf,*.eot,*.min.js,*.bundle.js,*.min.css,themes,node_modules,public,resources,static/admin,static/newsletters,*.lock,package-lock.json,.hugo_build.lock,go.sum,*.json,*.css,*.scss,*.toml,content/glossary/german,content/glossary/portuguese,content/glossary/arabic,content/glossary/spanish,content/glossary/french,content/glossary/turkish,data,*.pdf,content/glossary/english/open_material.md
 
 # Ignore these words (project-specific terms and proper nouns)
 ignore-words = .codespell-ignore.txt

.github/workflows/README.md

@@ -20,7 +20,7 @@ This document describes the GitHub Actions workflows used in the FORRT website r
 
 ## Deployment Workflows
 
-### [deploy.yaml](workflows/deploy.yaml)
+### [deploy.yaml](deploy.yaml)
 **Production deployment to forrt.org**
 
 | Trigger | Target | Schedule |
@@ -33,7 +33,7 @@ Builds the Hugo site and deploys to GitHub Pages (`gh-pages` branch).
 
 It uses the newest `data-artifact` and `announcements-artifact` from runs on `main` only. Runs of `data-processing.yml` or `create_announcements.yml` dispatched from another branch, for example to test a pipeline change, upload `*-preview` artifacts (#1030) that production never uses (#960). Staging can opt in to a branch's data artifact only; it never uses branch announcement artifacts. To stage branch data, run `data-processing.yml` on the branch, then dispatch `staging-aggregate.yaml` with `data_branch` set to that branch (combine with `single_pr` to stage only the PR that changes the pipeline). Production never uses it. If a branch other than `main` is named and has no data artifact, staging stops with an error rather than substituting `main`'s data (`data_branch: main` behaves like leaving it empty). For default staging runs and production, a missing data artifact makes the fallback dispatch `data-processing.yml` on `main`; a missing announcements artifact is not regenerated by these workflows.
 
-### [staging-aggregate.yaml](workflows/staging-aggregate.yaml)
+### [staging-aggregate.yaml](staging-aggregate.yaml)
 **Staging deployment for pull requests**
 
 | Trigger | Target | Schedule |
@@ -49,9 +49,23 @@ Features:
 - Queues builds instead of canceling (concurrency)
 - Auto-cleans old staging branches (keeps 2)
 
+### [rebrand-preview.yaml](rebrand-preview.yaml)
+**Preview of the Doors redesign, while it is in progress**
+
+| Trigger | Target | Schedule |
+|---------|--------|----------|
+| Push to `rebrand-doors` | forrt.org/rebrand-doors/ (`forrtproject/rebrand-doors`) | On push |
+| PR into `rebrand-doors` | Checks only, no deployment | On PR events |
+
+Features:
+- Uses the same data and announcement artifacts as `deploy.yaml`, with noindex and no analytics
+- Compares each build with its merge base with `main`: URL list, structured data, SEO tags and internal links. See `scripts/rebrand/README.md`
+- A failed check marks the run red but still updates the preview
+- Delete this workflow when the redesign launches
+
 ## Data Workflows
 
-### [data-processing.yml](workflows/data-processing.yml)
+### [data-processing.yml](data-processing.yml)
 **Fetches and processes external data sources**
 
 | Trigger | Schedule |
@@ -78,7 +92,7 @@ Triggers `deploy.yaml` after successful processing via `repository_dispatch`.
 
 ## Quality Checks
 
-### [spell-check.yaml](workflows/spell-check.yaml)
+### [spell-check.yaml](spell-check.yaml)
 **Spelling validation using codespell**
 
 | Trigger | Runs on |
@@ -94,7 +108,7 @@ Triggers `deploy.yaml` after successful processing via `repository_dispatch`.
 |---------|---------|
 | Pull requests changing the clusters data, parser or tests | PR branches |
 
-### [check_images.yaml](workflows/check_images.yaml)
+### [check_images.yaml](check_images.yaml)
 **Image validation in PRs**
 
 | Trigger | Runs on |
@@ -105,7 +119,7 @@ Validates image files and references.
 
 ## Repository Maintenance
 
-### [cleanup-branches.yml](workflows/cleanup-branches.yml)
+### [cleanup-branches.yml](cleanup-branches.yml)
 **Automated branch cleanup**
 
 | Trigger | Schedule |

.github/workflows/rebrand-preview.yaml

@@ -0,0 +1,228 @@
+name: Doors preview
+
+# =======================
+# Doors Redesign Preview
+# =======================
+# Purpose: Builds the rebrand-doors branch and publishes it at forrt.org/rebrand-doors/
+# Triggers: Push to rebrand-doors, and PRs into it (checks only, no deployment)
+# Target: forrtproject/rebrand-doors, on GitHub Pages under the forrt.org domain
+# Checks: Every run also builds the merge base with main from the same data, then compares
+#         the two builds.
+#         A failed check shows on the run but does not hold back the preview.
+# Note: Uses the same data and announcement artifacts as deploy.yaml. Delete this
+#       workflow when the redesign launches.
+
+on:
+  push:
+    branches:
+      - rebrand-doors
+  pull_request:
+    branches:
+      - rebrand-doors
+
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: "true"
+
+concurrency:
+  group: rebrand-preview-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  build:
+    name: Build and check
+    runs-on: ubuntu-22.04
+    # Fork PRs get no artifacts token and have no preview to update.
+    if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository
+    permissions:
+      contents: read
+      actions: read  # Needed for artifact access
+    env:
+      HUGO_VERSION: "0.158.0"
+      HUGO_EXTENDED: true
+      PREVIEW_BASE: /rebrand-doors/
+      PREVIEW_URL: https://forrt.org/rebrand-doors/
+    outputs:
+      source-rules: ${{ steps.source-rules.outcome }}
+      compare: ${{ steps.compare.outcome }}
+      links: ${{ steps.links.outcome }}
+      seo: ${{ steps.seo.outcome }}
+      design: ${{ steps.design.outcome }}
+      axe: ${{ steps.axe.outcome }}
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+
+      # See deploy.yaml: Git quotes non-ASCII paths unless this is off, and Hugo
+      # then finds no date for them.
+      - name: Let Git report non-ASCII paths unquoted
+        run: git config core.quotepath false
+
+      # The point where the branch last took main, not main's tip: otherwise anything landing
+      # on main shows up here as a change, until main is next merged in.
+      - name: Check out the merge base with main as the reference
+        run: git worktree add --detach "$RUNNER_TEMP/reference" "$(git merge-base origin/main HEAD)"
+
+      # =======================
+      # Artifacts, as in deploy.yaml
+      # =======================
+      - name: Download data artifact
+        uses: dawidd6/action-download-artifact@07ab29fd4a977ae4d2b275087cf67563dfdf0295
+        continue-on-error: true
+        with:
+          workflow: data-processing.yml
+          name: data-artifact
+          path: ${{ runner.temp }}/artifacts/data
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          search_artifacts: true
+          branch: main  # as in deploy.yaml: only main's runs, never a branch test run (#960)
+          if_no_artifact_found: warn
+
+      - name: Download announcements artifact
+        uses: dawidd6/action-download-artifact@07ab29fd4a977ae4d2b275087cf67563dfdf0295
+        continue-on-error: true
+        with:
+          workflow: create_announcements.yml
+          name: announcements-artifact
+          path: ${{ runner.temp }}/artifacts/announcements
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          search_artifacts: true
+          branch: main  # as in deploy.yaml: only main's runs, never a branch test run (#960)
+          if_no_artifact_found: warn
+
+      - name: Apply artifacts to both checkouts
+        run: |
+          for checkout in . "$RUNNER_TEMP/reference"; do
+            scripts/rebrand/apply_artifacts.sh "$checkout" \
+              "$RUNNER_TEMP/artifacts/data" "$RUNNER_TEMP/artifacts/announcements"
+          done
+
+      # =======================
+      # Builds
+      # =======================
+      - name: Setup Hugo
+        uses: peaceiris/actions-hugo@75d2e84710de30f6ff7268e08f310b60ef14033f
+        with:
+          hugo-version: ${{ env.HUGO_VERSION }}
+          extended: ${{ env.HUGO_EXTENDED }}
+
+      # HUGO_ENV=staging adds noindex and leaves out Google Analytics.
+      - name: Build the branch
+        run: hugo --gc --minify --cleanDestinationDir --destination public --baseURL "$PREVIEW_URL"
+        env:
+          HUGO_ENV: staging
+
+      - name: Build the reference from the same data
+        working-directory: ${{ runner.temp }}/reference
+        run: hugo --gc --minify --destination "$RUNNER_TEMP/public-reference" --baseURL "$PREVIEW_URL"
+        env:
+          HUGO_ENV: staging
+
+      - name: Point root-relative links at the subfolder
+        run: |
+          python3 scripts/rebrand/preview_paths.py public --base "$PREVIEW_BASE"
+          python3 scripts/rebrand/preview_paths.py "$RUNNER_TEMP/public-reference" --base "$PREVIEW_BASE"
+
+      # =======================
+      # Checks
+      # =======================
+      - name: Templates and generated paths
+        id: source-rules
+        continue-on-error: true
+        run: python3 scripts/rebrand/check_source_rules.py --base origin/main
+
+      - name: URL list, structured data and SEO tags against the reference
+        id: compare
+        continue-on-error: true
+        run: python3 scripts/rebrand/compare_builds.py "$RUNNER_TEMP/public-reference" public
+
+      - name: Internal links
+        id: links
+        continue-on-error: true
+        run: |
+          python3 scripts/rebrand/check_internal_links.py public --base "$PREVIEW_BASE" \
+            --reference "$RUNNER_TEMP/public-reference"
+
+      - name: Built HTML (headings, conditional assets, image alt and dimensions)
+        id: seo
+        continue-on-error: true
+        run: python3 scripts/check_seo_html.py public
+
+      - name: Designed screens in a browser (overflow, position, layout shift, pause, directory)
+        id: design
+        continue-on-error: true
+        run: |
+          pip install --quiet playwright==1.63.0 pillow
+          # The runner image already has Chromium's libraries; --with-deps adds fonts from the
+          # Ubuntu mirror. When the mirror is unreachable, install the browser without them.
+          playwright install --with-deps chromium || {
+            echo "::warning::Could not install Chromium's system packages; installing the browser without them"
+            playwright install chromium
+          }
+          python3 scripts/rebrand/check_design.py public --base "$PREVIEW_BASE"
+
+      - name: Accessibility rules in a browser (axe-core, by WCAG level)
+        id: axe
+        continue-on-error: true
+        run: |
+          curl -fsSL https://cdn.jsdelivr.net/npm/axe-core@4.11.1/axe.min.js -o "$RUNNER_TEMP/axe.min.js"
+          python3 scripts/rebrand/check_axe.py public --base "$PREVIEW_BASE" --axe "$RUNNER_TEMP/axe.min.js"
+
+      - name: Upload site artifact
+        if: github.event_name != 'pull_request'
+        uses: actions/upload-artifact@v7
+        with:
+          name: rebrand-preview-${{ github.run_number }}
+          path: public/
+          retention-days: 1
+          if-no-files-found: error
+
+  deploy:
+    name: Deploy preview
+    runs-on: ubuntu-22.04
+    needs: build
+    if: github.event_name != 'pull_request'
+    timeout-minutes: 15
+    steps:
+      - name: Download site artifact
+        uses: actions/download-artifact@v7
+        with:
+          name: rebrand-preview-${{ github.run_number }}
+          path: public
+
+      # No cname: the repository inherits the organisation site's forrt.org domain, which
+      # is what puts it at forrt.org/rebrand-doors/. force_orphan keeps one commit, so the
+      # repository does not grow by the size of the site on every push.
+      - name: Deploy to forrtproject/rebrand-doors
+        uses: peaceiris/actions-gh-pages@4f9cc6602d3f66b9c108549d475ec49e8ef4d45e
+        with:
+          personal_token: ${{ secrets.STAGING_GITHUB_TOKEN }}
+          external_repository: forrtproject/rebrand-doors
+          publish_dir: public
+          publish_branch: gh-pages
+          force_orphan: true
+
+  checks:
+    name: Check results
+    runs-on: ubuntu-22.04
+    needs: build
+    steps:
+      - name: Fail if any check failed
+        env:
+          SOURCE_RULES: ${{ needs.build.outputs.source-rules }}
+          COMPARE: ${{ needs.build.outputs.compare }}
+          LINKS: ${{ needs.build.outputs.links }}
+          SEO: ${{ needs.build.outputs.seo }}
+          DESIGN: ${{ needs.build.outputs.design }}
+          AXE: ${{ needs.build.outputs.axe }}
+        run: |
+          echo "Templates and generated paths: $SOURCE_RULES"
+          echo "URL list, structured data and SEO tags: $COMPARE"
+          echo "Internal links: $LINKS"
+          echo "Built HTML: $SEO"
+          echo "Designed screens: $DESIGN"
+          echo "Accessibility rules: $AXE"
+          for result in "$SOURCE_RULES" "$COMPARE" "$LINKS" "$SEO" "$DESIGN" "$AXE"; do
+            [ "$result" = "success" ] || exit 1
+          done

CONTRIBUTING.md

@@ -16,10 +16,12 @@ Please follow the [FORRT Code of Conduct](https://forrt.org/coc/) in issues, rev
 
 - [Questions, Ideas & Suggestions](#questions-ideas--suggestions)
 - [Edit content in your browser](#edit-content-in-your-browser)
+  - [Linking glossary terms](#linking-glossary-terms)
 - [Local Development Setup](#local-development-setup)
   - [Standard Setup](#standard-setup-git--hugo)
   - [RStudio Setup](#rstudio-setup)
 - [Contribution Workflow](#contribution-workflow)
+  - [Citing references](#citing-references)
   - [Contributing with AI tools](#contributing-with-ai-tools)
   - [Content, Licensing & Fact-Checking](#content-licensing--fact-checking)
 - [Deployment & Staging](#deployment--staging)
@@ -47,6 +49,12 @@ You do not need to install Git or Hugo to fix text or a broken link. Find the re
 
 Preserve the YAML/TOML front matter at the top of the file and existing Hugo shortcodes. Describe the affected page and link to it in your PR. Generated paths include `content/curated_resources/` (except `_index.md`), `content/glossary/`, `content/contributors/tenzing.md`, `content/contributor-analysis/`, `content/publications/citation_chart.webp`, announcement bundles in `content/post/`, `static/data/fred_citation.txt`, and generated files in `data/`. The manually maintained `data/publications.yaml` is editable; follow the [publication instructions](content/publications/README). Generated content is refreshed during deployment. Use the source submission form/sheet linked from the public page or open an issue rather than editing the generated output. Local previews use committed copies and can differ from production. For layout or code changes, use the local setup below.
 
+To set a short note beside the text, put `{{% callout title="A title" %}}Your note{{% /callout %}}` just before the paragraph it goes with. On articles and most other text pages it sits in the right-hand column on wide screens, and in the text on phones and on pages set to full width. `title` is optional, and `tone="example"` or `tone="warning"` changes its colour. Keep it short: a long note runs on past the text it goes with.
+
+### Linking glossary terms
+
+On hand-written pages, use `{{< term "Preregistration" >}}` to link an English glossary term. To match an existing inflection, use `{{< term "Preregistration" "preregistered" >}}`. Preserve the author's exact wording and spelling; add markup only, and skip an occurrence if it cannot be marked without changing the text. Titles are matched without regard to case. Mark only the first occurrence of each term on a page, and keep existing resource links intact. Hover, keyboard focus, or a first touch tap shows a short definition; the popover links to the full entry. A repeat tap on the open trigger, mouse clicks, and Enter follow the term link, which also works without JavaScript. Unknown terms render as plain text and produce a Hugo build warning; check the [English glossary](https://forrt.org/glossary/english/) for the exact title. Do not add these shortcodes to generated content.
+
 ## Local Development Setup
 
 Choose the setup method that suits your workflow.
@@ -145,6 +153,22 @@ All proposed changes must be made on a feature branch and submitted via a Pull R
 
 For more on Git, see the [official documentation](https://docs.github.com/en/get-started/using-git/about-git).
 
+### Citing references
+
+Hand-written pages can cite works in [`content/glossary/apa_lookup.json`](content/glossary/apa_lookup.json), the shared bibliography generated from the Glossary BibTeX Google Doc. Use its exact keys:
+
+```text
+{{< cite "Nosek2018" "Simmons2011" >}}
+{{< cite key="Nosek2018" narrative="true" >}}
+(e.g. Smith, 2019; {{< cite key="Nosek2018" bare="true" >}})
+```
+
+These render as “(Nosek et al., 2018; Simmons et al., 2011)”, “Nosek et al. (2018)” and “(e.g. Smith, 2019; Nosek et al., 2018)”. Use `bare` inside brackets you write yourself, for example alongside a work that isn't in the bibliography, so the author's wording stays as it was. Every page that cites must include `{{< references >}}` once, after its last citation, to add an alphabetical reference list. The built-HTML check fails citation links without matching reference entries. Clicking a citation opens its full APA reference with source and copy actions; without JavaScript it jumps to the reference list. Unknown keys produce a build warning and appear in square brackets.
+
+To ask readers to cite a work, show it as a card with a copy button: `{{< citation-card key="Asai2026OpenScholar" />}}` takes the reference from the bibliography, and `{{< citation-card >}}…{{< /citation-card >}}` takes one written out. In reference lists, cards and the “cite us” blocks, a reference with more than five authors shows the first three and “et al.”, with a button that shows the rest. Copying always gives the full reference.
+
+Do not edit the generated bibliography or glossary terms. Request additions to the Glossary BibTeX Doc through an issue; the bibliography generator supplies the APA text. Glossary definitions automatically link citations only when their first author and year identify exactly one of the term’s listed references and their author lists agree. Other citations stay plain text. Citations already linked to a source are left alone.
+
 ### Contributing with AI tools
 
 Contributions co-authored with AI agents are welcome, but only if you have **fully reviewed both the code and the content** yourself and can stand behind them.