@atelic-action/ui 2.2.1 → 3.1.0

package/README.md

@@ -41,7 +41,7 @@ Every export, grouped by the entry it is imported from. The gallery column links
 | `Paragraph`, `Runs`, `ArtifactAnchor`, `isEmpty`, `ArtifactLink`, `ArtifactParagraph` | `@atelic-action/ui/artifact` | Plain data text a routine can write as JSON: a paragraph, its runs alone, one link, the empty test, and the two types | [#paragraph](https://ui.atelic.me/#paragraph) |
 | `ArtifactShell` | `@atelic-action/ui/artifact` | The chrome around a document page: skip link, dark header, credit band, watermark | [#site-header](https://ui.atelic.me/#site-header) (its dark bar) |
 | `AppErrorBoundary`, `ErrorFallback` | `@atelic-action/ui/artifact` | The error boundary and the page it falls back to | none |
-| `buildPageHead`, `canonicalUrl`, `newTabProps`, the `ArtifactConfig` types | `@atelic-action/ui/artifact` | A page's head, a link's new tab props, and a site's contract | none |
+| `buildPageHead`, `canonicalURL`, `newTabProps`, the `ArtifactConfig` types | `@atelic-action/ui/artifact` | A page's head, a link's new tab props, and a site's contract | none |
 | `mintToken`, `sealReader`, `openReader`, `readerId`, `readerLink`, `whoIsReading` | `@atelic-action/ui/artifact` and `@atelic-action/ui/artifact/readers` | Who opened a document; the second entry is the same six, built, for what Node runs | none |
 | `Masthead`, `TitleCard`, `Footer`, `FailurePage` | `@atelic-action/ui/email` | An email's frame: the wordmark row, the title card, the foot, the failure page | [#email](https://ui.atelic.me/#email) |
 | `Card`, `Row`, `FoldRow`, `Eyebrow`, `SubEyebrow`, `Fold`, `BigFold` | `@atelic-action/ui/email` | The containers and labels an email's sections sit in | [#email](https://ui.atelic.me/#email) |
@@ -338,7 +338,7 @@ The two pieces a reader sees are ordinary components, in `@atelic-action/ui/comp
 
 - **The pieces:** `GradeChip` and `gradeLabel` with the `WriteupGrade` type, `SignOff` with the `WriteupPerson` type, `Shot` with the `WriteupShot` type, and the plain data text (`Paragraph`, `Runs`, `ArtifactAnchor`, and `isEmpty`, with the `ArtifactLink` and `ArtifactParagraph` types: a paragraph is a string or runs of text and `{ text, href }` links, so a routine can write a document as JSON).
 - **The shell:** `ArtifactShell`, the `.atelic-ui` scope with the skip link, the dark header, the credit band, and the watermark around a page.
-- **The contract and the head:** the `ArtifactConfig` types, and `buildPageHead` and `canonicalUrl` with their `PageMeta` type.
+- **The contract and the head:** the `ArtifactConfig` types, and `buildPageHead` and `canonicalURL` with their `PageMeta` type.
 - **Who opened it:** `mintToken`, `sealReader`, `openReader`, `readerId`, `readerLink`, and `whoIsReading`. The same six are also built and exported alone as `@atelic-action/ui/artifact/readers`, because a Playwright spec and a script run under Node, which compiles nothing inside `node_modules`.
 - **The error boundary:** `AppErrorBoundary` and its `ErrorFallback`.
 - **`newTabProps`,** for the links a content module writes.
@@ -429,7 +429,7 @@ import { SiteShell } from "@atelic-action/ui/chrome";
 import { CTASection, Hero } from "@atelic-action/ui/sections";
 
 <SiteShell site={site} currentPath={pathname} heroNav>
-	<Hero title="Bread worth the early line." primaryCta={site.cta} />
+	<Hero title="Bread worth the early line." primaryCTA={site.cta} />
 	<CTASection site={site} title="Skip the line, keep the bread." />
 </SiteShell>;
 ```
@@ -456,7 +456,7 @@ The provider stays in the source entry on purpose. A built copy of it would be a
 
 ### SiteShell
 
-`SiteShell` (in `@atelic-action/ui/chrome`) is the page wrapper: the `.atelic-ui` scope around the skip link, the header, `<main>`, the sticky CTA bar, the footer with its credit band, and the watermark, all mapped from the `SiteConfig`. It takes `site`, `currentPath` (the package imports no router), `basePath`, and `nav` (defaults to `site.nav`), plus `heroNav`, `stickyCta`, `footer`, `pageNav`, `navOnDark`, `hideNavCta`, and `credit` as before. A site keeps a wrapper a few lines long:
+`SiteShell` (in `@atelic-action/ui/chrome`) is the page wrapper: the `.atelic-ui` scope around the skip link, the header, `<main>`, the sticky CTA bar, the footer with its credit band, and the watermark, all mapped from the `SiteConfig`. It takes `site`, `currentPath` (the package imports no router), `basePath`, and `nav` (defaults to `site.nav`), plus `heroNav`, `stickyCTA`, `footer`, `pageNav`, `navOnDark`, `hideNavCTA`, and `credit` as before. A site keeps a wrapper a few lines long:
 
 ```tsx
 import { SiteShell as Shell, type SiteShellProps } from "@atelic-action/ui/chrome";
@@ -795,7 +795,7 @@ function RootLayout() {
 
 | Prop | What it is |
 |---|---|
-| `config` | An `AppConfig`: `name` (aria labels), `mark` (the wordmark), `storagePrefix` (every storage key and cookie), `publicRoutes` (exact paths a signed out visitor may load), `publicPages` (prefix patterns ending in `/*`, rendered in the public chrome), and `apiBaseUrl`, which the app resolves itself (`env.VITE_API_BASE_URL ?? "https://api.example.com"`), since the package never reads `import.meta.env` |
+| `config` | An `AppConfig`: `name` (aria labels), `mark` (the wordmark), `storagePrefix` (every storage key and cookie), `publicRoutes` (exact paths a signed out visitor may load), `publicPages` (prefix patterns ending in `/*`, rendered in the public chrome), and `apiBaseURL`, which the app resolves itself (`env.VITE_API_BASE_URL ?? "https://api.example.com"`), since the package never reads `import.meta.env` |
 | `nav` | The `NavItem[]` every nav surface reads, sub pages as `children`; the one place a destination is declared |
 | `queryClient` | Optional; defaults to the shell's, whose mutation cache raises `meta.toast` |
 | `toaster` | Optional; sonner's `Toaster` at the top right by default, `false` for none |
@@ -862,7 +862,7 @@ Delete `src/shared/`, `src/stores/authStore.ts`, `src/stores/unitsStore.ts`, and
 
 Then the handful of edits the seam asks for:
 
-1. **`src/app/config.ts`** resolves `apiBaseUrl` itself (`env.VITE_API_BASE_URL ?? "https://api.example.com"`).
+1. **`src/app/config.ts`** resolves `apiBaseURL` itself (`env.VITE_API_BASE_URL ?? "https://api.example.com"`).
 2. **`src/app/types.ts`** registers its `User` (above).
 3. **`src/main.tsx`** wraps the router in `AppProvider`, and passes `showDetails={import.meta.env.DEV}` to `ErrorFallback`, which no longer reads the environment.
 4. **`src/routes/__root.tsx`** keeps only `AuthGuard` and `AppLayout` around the `Outlet`; the query client, the rail state, the user, and the toaster are the provider's.

package/dist/artifact/readers.d.ts

@@ -30,4 +30,4 @@ export declare function whoIsReading(visit: {
     senderEmail: string;
 }): Promise<string | undefined>;
 /** The link to send a reader: the artifact's page with their token on it. */
-export declare function readerLink(siteUrl: string, token: string, path?: string): string;
+export declare function readerLink(siteURL: string, token: string, path?: string): string;

package/dist/artifact/readers.js

@@ -25,13 +25,13 @@
  */
 const encoder = new TextEncoder();
 const decoder = new TextDecoder();
-function toBase64Url(bytes) {
+function toBase64URL(bytes) {
     return btoa(String.fromCharCode(...bytes))
         .replaceAll("+", "-")
         .replaceAll("/", "_")
         .replaceAll("=", "");
 }
-function fromBase64Url(text) {
+function fromBase64URL(text) {
     const padded = text.replaceAll("-", "+").replaceAll("_", "/");
     return Uint8Array.from(atob(padded), (char) => char.charCodeAt(0));
 }
@@ -51,7 +51,7 @@ async function keyFor(token) {
 }
 /** A fresh token for one reader's links: twelve characters, safe in a URL. */
 export function mintToken() {
-    return toBase64Url(crypto.getRandomValues(new Uint8Array(9)));
+    return toBase64URL(crypto.getRandomValues(new Uint8Array(9)));
 }
 /** Seal a reader's email under their token: the entry site.config.ts lists. */
 export async function sealReader(email, token) {
@@ -60,7 +60,7 @@ export async function sealReader(email, token) {
     const packed = new Uint8Array(iv.length + sealed.length);
     packed.set(iv);
     packed.set(sealed, iv.length);
-    return { id: await readerId(token), sealed: toBase64Url(packed) };
+    return { id: await readerId(token), sealed: toBase64URL(packed) };
 }
 /** The email a link's token opens, or undefined when it opens nobody's. */
 export async function openReader(readers, token) {
@@ -71,7 +71,7 @@ export async function openReader(readers, token) {
     if (!reader)
         return undefined;
     try {
-        const packed = fromBase64Url(reader.sealed);
+        const packed = fromBase64URL(reader.sealed);
         const opened = await crypto.subtle.decrypt({ name: "AES-GCM", iv: packed.slice(0, 12) }, await keyFor(token), packed.slice(12));
         return decoder.decode(opened);
     }
@@ -110,8 +110,8 @@ export async function whoIsReading(visit) {
     return openReader(visit.readers, token);
 }
 /** The link to send a reader: the artifact's page with their token on it. */
-export function readerLink(siteUrl, token, path = "/writeup") {
-    const url = new URL(path, siteUrl);
+export function readerLink(siteURL, token, path = "/writeup") {
+    const url = new URL(path, siteURL);
     url.searchParams.set("k", token);
     return url.toString();
 }

package/dist/vite/private-chunks.d.ts

@@ -11,10 +11,12 @@
  * up anywhere else.
  *
  * Public content is the short list that is safe to ship to every page: the
- * 404's copy, the sealed proposal (ciphertext by design, GATE.md), and the
- * heads in `*.meta.ts`, which carry a title and nothing a snapshot produced.
- * Every other module under src/content/ is treated as private, so a new
- * artifact starts behind the wall.
+ * 404's copy, the sealed proposal (ciphertext by design, GATE.md), the note
+ * (built from public signals only, the practice's FOOTPRINT.md, Privacy,
+ * and meant to be read at /notes with no sign in, which a host opens through
+ * the gate's `open` option), and the heads in `*.meta.ts`, which carry a title and
+ * nothing a snapshot produced. Every other module under src/content/ is
+ * treated as private, so a new artifact starts behind the wall.
  */
 import type { Plugin } from "vite";
 /** Where the client build writes the chunks the wall holds back. */

package/dist/vite/private-chunks.js

@@ -1,6 +1,6 @@
 /** Where the client build writes the chunks the wall holds back. */
 export const DOC_DIR = "assets/doc";
-const PUBLIC_CONTENT = /\/src\/content\/(not-found\.tsx|proposal[^/]*|[^/]+\.meta\.ts)$/;
+const PUBLIC_CONTENT = /\/src\/content\/(not-found\.tsx|proposal[^/]*|notes\.(?:tsx|json)|[^/]+\.meta\.ts)$/;
 /** Whether a module id is content that must never ship to the login page. */
 export function isPrivateContent(id) {
     const path = id.split("?")[0].replaceAll("\\", "/");

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@atelic-action/ui",
-	"version": "2.2.1",
+	"version": "3.1.0",
 	"description": "Shared UI for the Atelic templates: site chrome, base styles, the component library, the access gate, and the app shell they install",
 	"type": "module",
 	"license": "UNLICENSED",

package/src/app/config.ts

@@ -26,7 +26,7 @@ export interface AppConfig {
 	 * `import.meta.env.VITE_API_BASE_URL ?? "https://api.example.com"`), so the
 	 * package never reads the app's environment itself.
 	 */
-	apiBaseUrl: string;
+	apiBaseURL: string;
 	/** Where the Profile link in the rail menu and the mobile menu goes. Defaults to "/profile". */
 	profileHref?: string;
 }

package/src/app/context/SidebarContext.tsx

@@ -33,7 +33,7 @@ function readSaved(name: string): boolean {
 	const config = peekAppConfig();
 	if (!config) return false;
 	try {
-		return localStorage.getItem(config.storagePrefix + "-" + name) === "true";
+		return localStorage.getItem(`${config.storagePrefix}-${name}`) === "true";
 	} catch {
 		return false;
 	}
@@ -43,7 +43,7 @@ function writeSaved(name: string, value: boolean) {
 	const config = peekAppConfig();
 	if (!config) return;
 	try {
-		localStorage.setItem(config.storagePrefix + "-" + name, String(value));
+		localStorage.setItem(`${config.storagePrefix}-${name}`, String(value));
 	} catch {
 		// Storage refused; the state lives in memory for this visit.
 	}

package/src/app/lib/dates.ts

@@ -20,7 +20,7 @@ export const MONTHS = [
 // Today as a local YYYY-MM-DD string, for lexical comparison against other ISO
 // dates and for asking the api about the day the user is standing in. `now` is
 // injectable for tests.
-export function todayIso(now: Date = new Date()): string {
+export function todayISO(now: Date = new Date()): string {
 	const month = String(now.getMonth() + 1).padStart(2, "0");
 	const day = String(now.getDate()).padStart(2, "0");
 	return `${now.getFullYear()}-${month}-${day}`;
@@ -41,7 +41,7 @@ export function localTimeZone(): string | undefined {
 // Format an ISO date without constructing a Date. "2026-06-08" -> "Jun 8, 2026".
 // Returns the input untouched when it does not parse, so a bad value is visible
 // rather than blank.
-export function formatIsoDate(iso: string | null): string | null {
+export function formatISODate(iso: string | null): string | null {
 	if (!iso) return null;
 	const [year, month, day] = iso.split("-").map(Number);
 	if (!year || !month || !day || month < 1 || month > 12) return iso;

package/src/app/lib/http.ts

@@ -5,7 +5,7 @@
  * modules under src/features/<feature>/api.ts build on `apiFetch` and never
  * touch `fetch` themselves; swapping the backend means swapping this file and
  * the session module beside it, not the features. The base URL is the app's
- * `apiBaseUrl`, read on every call.
+ * `apiBaseURL`, read on every call.
  */
 
 import { getAppConfig } from "../config";
@@ -81,7 +81,7 @@ async function readBody<T>(response: Response): Promise<T> {
  * page that needs none. GET only by design: nothing public writes.
  */
 export async function publicFetch<T>(endpoint: string): Promise<T> {
-	const response = await fetch(`${getAppConfig().apiBaseUrl}${endpoint}`, {
+	const response = await fetch(`${getAppConfig().apiBaseURL}${endpoint}`, {
 		headers: { Accept: "application/json" },
 	});
 
@@ -98,7 +98,7 @@ export async function publicFetch<T>(endpoint: string): Promise<T> {
  * Handles authentication headers, proactive token refresh, and 401 retry.
  */
 export async function apiFetch<T>(endpoint: string, options: RequestInit = {}): Promise<T> {
-	const url = `${getAppConfig().apiBaseUrl}${endpoint}`;
+	const url = `${getAppConfig().apiBaseURL}${endpoint}`;
 	const skipAuth = isAuthEndpoint(endpoint);
 
 	// Proactive refresh: skip for auth endpoints (login/refresh)
@@ -145,7 +145,7 @@ export async function apiFetch<T>(endpoint: string, options: RequestInit = {}):
  * all mirror apiFetch.
  */
 export async function uploadFormData<T>(endpoint: string, formData: FormData): Promise<T> {
-	const url = `${getAppConfig().apiBaseUrl}${endpoint}`;
+	const url = `${getAppConfig().apiBaseURL}${endpoint}`;
 
 	if (!(await ensureValidToken())) {
 		throw new Error("Session expired. Please log in again.");

package/src/app/lib/oauth.ts

@@ -6,7 +6,7 @@ import { getAppConfig } from "../config";
  * 2.0's POST-only default for resistance to login CSRF.
  */
 export function startGoogleAuth(): void {
-	postNavigate(`${getAppConfig().apiBaseUrl}/auth/google_oauth2`);
+	postNavigate(`${getAppConfig().apiBaseURL}/auth/google_oauth2`);
 }
 
 /**

package/src/app/lib/session.ts

@@ -9,7 +9,7 @@ import type { RegisteredUser, TokenResponse } from "../types";
 import { apiFetch } from "./http";
 import { toSnakeCase } from "./transformKeys";
 import type { UnitPreferences } from "./units";
-import { type ApiEntityEnvelope, unwrapEntity } from "./unwrap";
+import { type APIEntityEnvelope, unwrapEntity } from "./unwrap";
 
 export const session = {
 	/** Exchange an OAuth code for the JWT pair. */
@@ -21,13 +21,13 @@ export const session = {
 
 	/** The signed in user. */
 	me: async () => {
-		const envelope = await apiFetch<ApiEntityEnvelope<RegisteredUser>>("/v1/users/me");
+		const envelope = await apiFetch<APIEntityEnvelope<RegisteredUser>>("/v1/users/me");
 		return unwrapEntity(envelope);
 	},
 
 	/** Save the person's unit preferences, a system per measure. */
 	updateUnits: async (units: UnitPreferences) => {
-		const envelope = await apiFetch<ApiEntityEnvelope<RegisteredUser>>("/v1/users/me", {
+		const envelope = await apiFetch<APIEntityEnvelope<RegisteredUser>>("/v1/users/me", {
 			method: "PATCH",
 			body: JSON.stringify({ user: { units: toSnakeCase(units) } }),
 		});

package/src/app/lib/tokenRefresh.ts

@@ -35,7 +35,7 @@ export async function refreshAccessToken(): Promise<RefreshResponse> {
 	}
 
 	refreshPromise = (async () => {
-		const response = await fetch(`${getAppConfig().apiBaseUrl}/v1/auth/refresh`, {
+		const response = await fetch(`${getAppConfig().apiBaseURL}/v1/auth/refresh`, {
 			method: "POST",
 			headers: {
 				"Content-Type": "application/json",

package/src/app/lib/unwrap.ts

@@ -7,7 +7,7 @@
 /**
  * API response envelope for collection (index) endpoints.
  */
-export interface ApiCollectionEnvelope<T> {
+export interface APICollectionEnvelope<T> {
 	data: { collection: T[] };
 	meta: {
 		currentPage: number;
@@ -20,7 +20,7 @@ export interface ApiCollectionEnvelope<T> {
 /**
  * API response envelope for entity (show/create/update) endpoints.
  */
-export interface ApiEntityEnvelope<T> {
+export interface APIEntityEnvelope<T> {
 	data: { entity: T };
 	meta: Record<string, unknown>;
 }
@@ -43,6 +43,6 @@ export function unwrapCollection<T, M>(envelope: {
 /**
  * Extract a single entity from the API envelope.
  */
-export function unwrapEntity<T>(envelope: ApiEntityEnvelope<T>): T {
+export function unwrapEntity<T>(envelope: APIEntityEnvelope<T>): T {
 	return envelope.data.entity;
 }

package/src/artifact/index.ts

@@ -24,7 +24,7 @@ export {
 	Paragraph,
 	Runs,
 } from "./Paragraph";
-export { buildPageHead, canonicalUrl, type PageMeta } from "./pageHead";
+export { buildPageHead, canonicalURL, type PageMeta } from "./pageHead";
 export {
 	mintToken,
 	openReader,

package/src/artifact/pageHead.ts

@@ -22,7 +22,7 @@ export interface PageMeta {
 }
 
 /** Canonical URL for a path under the artifact's origin. */
-export function canonicalUrl(site: ArtifactConfig, path: string): string {
+export function canonicalURL(site: ArtifactConfig, path: string): string {
 	return path === "/" ? `${site.url}/` : `${site.url}${path}`;
 }
 
@@ -34,7 +34,7 @@ export function canonicalUrl(site: ArtifactConfig, path: string): string {
  * to one business is asking nothing of the kind.
  */
 export function buildPageHead(site: ArtifactConfig, page: PageMeta) {
-	const canonical = canonicalUrl(site, page.path);
+	const canonical = canonicalURL(site, page.path);
 	// og:image must be a full URL per the OG spec; site-relative paths
 	// (self-hosted images under public/) resolve against the host origin.
 	const ogImageRaw = page.ogImage ?? site.ogImage;

package/src/artifact/readers.ts

@@ -29,14 +29,14 @@ import type { ArtifactReader } from "./artifactConfig.js";
 const encoder = new TextEncoder();
 const decoder = new TextDecoder();
 
-function toBase64Url(bytes: Uint8Array): string {
+function toBase64URL(bytes: Uint8Array): string {
 	return btoa(String.fromCharCode(...bytes))
 		.replaceAll("+", "-")
 		.replaceAll("/", "_")
 		.replaceAll("=", "");
 }
 
-function fromBase64Url(text: string): Uint8Array<ArrayBuffer> {
+function fromBase64URL(text: string): Uint8Array<ArrayBuffer> {
 	const padded = text.replaceAll("-", "+").replaceAll("_", "/");
 	return Uint8Array.from(atob(padded), (char) => char.charCodeAt(0));
 }
@@ -60,7 +60,7 @@ async function keyFor(token: string): Promise<CryptoKey> {
 
 /** A fresh token for one reader's links: twelve characters, safe in a URL. */
 export function mintToken(): string {
-	return toBase64Url(crypto.getRandomValues(new Uint8Array(9)));
+	return toBase64URL(crypto.getRandomValues(new Uint8Array(9)));
 }
 
 /** Seal a reader's email under their token: the entry site.config.ts lists. */
@@ -76,7 +76,7 @@ export async function sealReader(email: string, token: string): Promise<Artifact
 	const packed = new Uint8Array(iv.length + sealed.length);
 	packed.set(iv);
 	packed.set(sealed, iv.length);
-	return { id: await readerId(token), sealed: toBase64Url(packed) };
+	return { id: await readerId(token), sealed: toBase64URL(packed) };
 }
 
 /** The email a link's token opens, or undefined when it opens nobody's. */
@@ -89,7 +89,7 @@ export async function openReader(
 	const reader = readers.find((entry) => entry.id === id);
 	if (!reader) return undefined;
 	try {
-		const packed = fromBase64Url(reader.sealed);
+		const packed = fromBase64URL(reader.sealed);
 		const opened = await crypto.subtle.decrypt(
 			{ name: "AES-GCM", iv: packed.slice(0, 12) },
 			await keyFor(token),
@@ -139,8 +139,8 @@ export async function whoIsReading(visit: {
 }
 
 /** The link to send a reader: the artifact's page with their token on it. */
-export function readerLink(siteUrl: string, token: string, path = "/writeup"): string {
-	const url = new URL(path, siteUrl);
+export function readerLink(siteURL: string, token: string, path = "/writeup"): string {
+	const url = new URL(path, siteURL);
 	url.searchParams.set("k", token);
 	return url.toString();
 }

package/src/chrome/SiteShell.tsx

@@ -33,7 +33,7 @@ export interface SiteShellProps {
 	 * A page that closes on its own ask turns the mobile booking bar off,
 	 * since that ask is the conversion surface there.
 	 */
-	stickyCta?: boolean;
+	stickyCTA?: boolean;
 	/**
 	 * Such a page also drops the site footer: when a page ends on its own
 	 * sign off, the NAP footer after it steps on the close.
@@ -44,7 +44,7 @@ export interface SiteShellProps {
 	/** Match the header to a dark page surface. */
 	navOnDark?: boolean;
 	/** Hide the header's primary CTA (e.g. a reveal, where the ask is the letter). The menu keeps it. */
-	hideNavCta?: boolean;
+	hideNavCTA?: boolean;
 	/**
 	 * The developer credit band. Defaults on (client sites carry it); the
 	 * practice's own site turns it off, since crediting yourself on your
@@ -67,11 +67,11 @@ export function SiteShell({
 	basePath,
 	nav,
 	heroNav = false,
-	stickyCta = true,
+	stickyCTA = true,
 	footer = true,
 	pageNav,
 	navOnDark = false,
-	hideNavCta = false,
+	hideNavCTA = false,
 	credit = true,
 	children,
 }: SiteShellProps) {
@@ -106,11 +106,11 @@ export function SiteShell({
 					variant={variant}
 					currentPath={pathname}
 					stops={pageNav}
-					hideCTA={hideNavCta}
+					hideCTA={hideNavCTA}
 					contact={{ phone: site.phone, email: site.email, address: site.address }}
 				/>
 				<main id="main">{children}</main>
-				{stickyCta && <StickyCTABar primaryCTA={cta} phone={site.phone} />}
+				{stickyCTA && <StickyCTABar primaryCTA={cta} phone={site.phone} />}
 				{footer ? (
 					<Footer
 						brand={brand}

package/src/scripts/reader-link.ts

@@ -38,15 +38,15 @@ export interface ReaderArgs {
 	/** A token already in a sent link, when --token gave one. */
 	token?: string;
 	/** --qr: write the QR for this reader even when another is already named. */
-	forceQr: boolean;
+	forceQR: boolean;
 	/** --no-qr: never write the QR. */
-	noQr: boolean;
+	noQR: boolean;
 }
 
 /** Reads the command line; undefined when it does not name a reader, which is a usage error. */
 export function parseReaderArgs(flags: string[]): ReaderArgs | undefined {
-	const noQr = flags.includes("--no-qr");
-	const forceQr = flags.includes("--qr");
+	const noQR = flags.includes("--no-qr");
+	const forceQR = flags.includes("--qr");
 	const args = flags.filter((flag) => flag !== "--no-qr" && flag !== "--qr");
 	const at = args.indexOf("--token");
 	const given = at === -1 ? undefined : args[at + 1];
@@ -56,7 +56,7 @@ export function parseReaderArgs(flags: string[]): ReaderArgs | undefined {
 	const path = `/${givenPath.replace(/^\/+|\/+$/g, "")}`;
 
 	if (!email?.includes("@") || (at !== -1 && !given)) return undefined;
-	return { email, path, token: given, forceQr, noQr };
+	return { email, path, token: given, forceQR, noQR };
 }
 
 /**
@@ -69,7 +69,7 @@ export async function main(flags: string[], cwd: string = process.cwd()): Promis
 		console.error(USAGE);
 		process.exit(1);
 	}
-	const { email, path, forceQr, noQr } = parsed;
+	const { email, path, forceQR, noQR } = parsed;
 	let site: Awaited<ReturnType<typeof loadSite>>;
 	try {
 		site = await loadSite(cwd);
@@ -90,14 +90,14 @@ export async function main(flags: string[], cwd: string = process.cwd()): Promis
 	// The sheet's QR is the reader's link. A private artifact identifies by sign
 	// in and never by a token, so its QR stays on the bare host.
 	const named = site.analytics?.identify.length ?? 0;
-	const sheetIsFree = named === 0 || forceQr;
-	if (path === "/writeup" && !noQr && site.access === "public" && !sheetIsFree) {
+	const sheetIsFree = named === 0 || forceQR;
+	if (path === "/writeup" && !noQR && site.access === "public" && !sheetIsFree) {
 		console.log("");
 		console.log(
 			"Left public/images/qr.png alone: a reader is already named, and the sheet is theirs. Pass --qr to give the sheet to this reader.",
 		);
 	}
-	if (path === "/writeup" && !noQr && site.access === "public" && sheetIsFree) {
+	if (path === "/writeup" && !noQR && site.access === "public" && sheetIsFree) {
 		const qr = resolve(cwd, "public/images/qr.png");
 		await QRCode.toFile(qr, link, { width: 330, margin: 4, errorCorrectionLevel: "M" });
 		console.log("");

package/src/scripts/seal-document.mjs

@@ -82,15 +82,15 @@ async function deriveKey(email, salt) {
 }
 
 /**
- * Encrypt `contentHtml` once and wrap the content key for each person.
+ * Encrypt `contentHTML` once and wrap the content key for each person.
  * `people` is [{ id, email }]. The email is the reader's secret, the thing
  * their key derives from, so it never reaches the payload; nor does the id,
  * which is often a first name. A sealed reader is an ordinal (`r1`, `r2`)
  * and their wrap, and nothing that says who they are.
  */
-export async function sealDocument(contentHtml, people) {
-	if (typeof contentHtml !== "string" || contentHtml.length === 0) {
-		throw new Error("contentHtml is empty; nothing to seal");
+export async function sealDocument(contentHTML, people) {
+	if (typeof contentHTML !== "string" || contentHTML.length === 0) {
+		throw new Error("contentHTML is empty; nothing to seal");
 	}
 	if (!Array.isArray(people) || people.length === 0) {
 		throw new Error("no people; a payload nobody can open is not worth building");
@@ -109,7 +109,7 @@ export async function sealDocument(contentHtml, people) {
 		await webcrypto.subtle.encrypt(
 			{ name: "AES-GCM", iv: civ },
 			contentKey,
-			encoder.encode(contentHtml),
+			encoder.encode(contentHTML),
 		),
 	);
 
@@ -160,8 +160,8 @@ export async function main(args = argv.slice(2)) {
 	const config = JSON.parse(readFileSync(configFile, "utf8"));
 	if (!config.content) throw new Error(`${configPath} has no "content" path`);
 
-	const contentHtml = readFileSync(resolve(dirname(configFile), config.content), "utf8");
-	const payload = await sealDocument(contentHtml, config.people);
+	const contentHTML = readFileSync(resolve(dirname(configFile), config.content), "utf8");
+	const payload = await sealDocument(contentHTML, config.people);
 
 	const out = resolve(outPath ?? "gate-payload.json");
 	writeFileSync(out, `${JSON.stringify(payload, null, "\t")}\n`);

package/src/sections/CTABanner.tsx

@@ -21,8 +21,8 @@ export interface CTABannerProps {
 	 * works before photography exists.
 	 */
 	image?: { src: string; alt?: string };
-	primaryCta?: CTABannerCTA;
-	secondaryCta?: CTABannerCTA;
+	primaryCTA?: CTABannerCTA;
+	secondaryCTA?: CTABannerCTA;
 	/**
 	 * Wash over the image so the copy pops: "dark" (light text over a dark
 	 * gradient, the hero treatment) or "light" (ink text over a surface wash,
@@ -43,8 +43,8 @@ export function CTABanner({
 	title,
 	lead,
 	image,
-	primaryCta,
-	secondaryCta,
+	primaryCTA,
+	secondaryCTA,
 	tone = "dark",
 }: CTABannerProps) {
 	const withBase = useWithBase();
@@ -67,21 +67,21 @@ export function CTABanner({
 					{eyebrow && <Eyebrow onDark={onDark}>{eyebrow}</Eyebrow>}
 					<h2>{title}</h2>
 					{lead && <Lead>{lead}</Lead>}
-					{(primaryCta || secondaryCta) && (
+					{(primaryCTA || secondaryCTA) && (
 						<div className="cta-banner-actions">
-							{primaryCta && (
-								<Button href={primaryCta.href} newTab={primaryCta.newTab} arrow>
-									{primaryCta.label}
+							{primaryCTA && (
+								<Button href={primaryCTA.href} newTab={primaryCTA.newTab} arrow>
+									{primaryCTA.label}
 								</Button>
 							)}
-							{secondaryCta && (
+							{secondaryCTA && (
 								<Button
 									variant="ghost"
 									onDark={onDark}
-									href={secondaryCta.href}
-									newTab={secondaryCta.newTab}
+									href={secondaryCTA.href}
+									newTab={secondaryCTA.newTab}
 								>
-									{secondaryCta.label}
+									{secondaryCTA.label}
 								</Button>
 							)}
 						</div>

package/src/sections/FAQBrowser.tsx

@@ -6,7 +6,7 @@ import { useWithBase } from "../routing/BasePathProvider";
 import { JumpRail } from "./JumpRail";
 import { PageHero } from "./PageHero";
 
-export interface FAQCta {
+export interface FAQCTA {
 	label: string;
 	href: string;
 	newTab?: boolean;
@@ -20,7 +20,7 @@ export interface FAQEntry {
 	/** Plain-text answer for search matching and FAQPage structured data. */
 	answerText: string;
 	/** Optional link rendered at the end of the open answer. */
-	cta?: FAQCta;
+	cta?: FAQCTA;
 }
 
 export interface FAQCategory {
@@ -31,7 +31,7 @@ export interface FAQCategory {
 	tabLabel?: string;
 	description?: string;
 	/** Optional link line rendered under the category's card group. */
-	cta?: FAQCta;
+	cta?: FAQCTA;
 	items: FAQEntry[];
 }
 
@@ -50,7 +50,7 @@ function matches(query: string, item: FAQEntry): boolean {
 	return item.question.toLowerCase().includes(q) || item.answerText.toLowerCase().includes(q);
 }
 
-function CTALink({ cta, className }: { cta: FAQCta; className?: string }) {
+function CTALink({ cta, className }: { cta: FAQCTA; className?: string }) {
 	const withBase = useWithBase();
 	return (
 		<a className={className} href={withBase(cta.href)} {...newTabProps(cta.href, cta.newTab)}>

package/src/sections/Hero.tsx

@@ -30,8 +30,8 @@ export interface HeroProps {
 		 */
 		position?: string;
 	};
-	primaryCta?: HeroCTA;
-	secondaryCta?: HeroCTA;
+	primaryCTA?: HeroCTA;
+	secondaryCTA?: HeroCTA;
 	/** Trust indicators rendered under the CTAs. */
 	trust?: HeroTrustItem[];
 	/** Anchor target for the scroll-down affordance, e.g. "#pain". */
@@ -44,8 +44,8 @@ export function Hero({
 	title,
 	subtitle,
 	image,
-	primaryCta,
-	secondaryCta,
+	primaryCTA,
+	secondaryCTA,
 	trust,
 	scrollTarget,
 }: HeroProps) {
@@ -75,16 +75,16 @@ export function Hero({
 				{eyebrow && <Eyebrow onDark>{eyebrow}</Eyebrow>}
 				<h1>{title}</h1>
 				{subtitle && <p className="hero-sub">{subtitle}</p>}
-				{(primaryCta || secondaryCta) && (
+				{(primaryCTA || secondaryCTA) && (
 					<div className="cta-row">
-						{primaryCta && (
-							<Button {...ctaProps(primaryCta, { size: "lg", arrow: true })}>
-								{primaryCta.label}
+						{primaryCTA && (
+							<Button {...ctaProps(primaryCTA, { size: "lg", arrow: true })}>
+								{primaryCTA.label}
 							</Button>
 						)}
-						{secondaryCta && (
-							<Button {...ctaProps(secondaryCta, { variant: "ghost", size: "lg", onDark: true })}>
-								{secondaryCta.label}
+						{secondaryCTA && (
+							<Button {...ctaProps(secondaryCTA, { variant: "ghost", size: "lg", onDark: true })}>
+								{secondaryCTA.label}
 							</Button>
 						)}
 					</div>

package/src/sections/LocationSection.tsx

@@ -45,8 +45,8 @@ export function LocationSection({ site, eyebrow = "Find us", title, lead }: Loca
 					</div>
 
 					<div className="loc-actions">
-						{site.mapLinkUrl && (
-							<Button variant="dark" href={site.mapLinkUrl} newTab arrow>
+						{site.mapLinkURL && (
+							<Button variant="dark" href={site.mapLinkURL} newTab arrow>
 								Get Directions
 							</Button>
 						)}

package/src/sections/MapEmbed.tsx

@@ -6,7 +6,7 @@ import type { SiteConfig } from "./siteConfig";
 /** The keys of the site config the map reads; a whole `SiteConfig` passes as it is. */
 export type MapEmbedSite = Pick<
 	SiteConfig,
-	"name" | "address" | "mapImage" | "mapLinkUrl" | "mapEmbedUrl"
+	"name" | "address" | "mapImage" | "mapLinkURL" | "mapEmbedURL"
 >;
 
 export interface MapEmbedProps {
@@ -30,8 +30,8 @@ export function MapEmbed({ site }: MapEmbedProps) {
 		return (
 			<a
 				className="map-frame map-static"
-				href={site.mapLinkUrl ?? "#"}
-				{...(site.mapLinkUrl ? { target: "_blank", rel: "noopener" } : {})}
+				href={site.mapLinkURL ?? "#"}
+				{...(site.mapLinkURL ? { target: "_blank", rel: "noopener" } : {})}
 				aria-label={`Get directions to ${site.name}, ${address}`}
 			>
 				<img src={withBase(site.mapImage)} alt={`Map to ${site.name}, ${address}`} loading="lazy" />
@@ -43,7 +43,7 @@ export function MapEmbed({ site }: MapEmbedProps) {
 		);
 	}
 
-	if (!site.mapEmbedUrl) return null;
+	if (!site.mapEmbedURL) return null;
 
 	if (!loaded) {
 		return (
@@ -66,7 +66,7 @@ export function MapEmbed({ site }: MapEmbedProps) {
 		<div className="map-frame">
 			<iframe
 				title={`Map to ${site.name}, ${address}`}
-				src={site.mapEmbedUrl}
+				src={site.mapEmbedURL}
 				loading="lazy"
 				referrerPolicy="no-referrer-when-downgrade"
 			/>

package/src/sections/ReviewCarousel.tsx

@@ -28,7 +28,7 @@ export interface ReviewCarouselProps {
 	 * the prop is inert. Prefer a count the profile can't outgrow ("100+"),
 	 * since the live number climbs and the caption doesn't.
 	 */
-	profileUrl?: string;
+	profileURL?: string;
 	/** Short paragraph under the caption: where the reviews come from. */
 	lead?: ReactNode;
 	/** Optional value/label row (three reads well). Omit to hide entirely. */
@@ -68,7 +68,7 @@ function quoteSize(quote: string): string {
  * Per-review stars are opt-in per item (`rating`), like `ReviewWall`:
  * render them only when the source actually shows them.
  *
- * `profileUrl` turns the caption into a link out to the live review
+ * `profileURL` turns the caption into a link out to the live review
  * profile, carrying the wall's dated-source idiom (quiet text, trailing
  * arrow, new tab) so a visitor can check the aggregate at the source.
  */
@@ -78,7 +78,7 @@ export function ReviewCarousel({
 	outOf = "5",
 	rating,
 	caption,
-	profileUrl,
+	profileURL,
 	lead,
 	stats,
 	items,
@@ -112,21 +112,21 @@ export function ReviewCarousel({
 			className={["section", "review-carousel", className].filter(Boolean).join(" ")}
 			id={id}
 		>
-			<div className="wrap rc-grid">
-				<div className="rc-aggregate">
+			<div className="wrap rvc-grid">
+				<div className="rvc-aggregate">
 					{eyebrow && <Eyebrow>{eyebrow}</Eyebrow>}
-					<p className="rc-score">
-						<span className="rc-score-num">{score}</span>
-						{outOf && <span className="rc-score-out">/ {outOf}</span>}
+					<p className="rvc-score">
+						<span className="rvc-score-num">{score}</span>
+						{outOf && <span className="rvc-score-out">/ {outOf}</span>}
 					</p>
 					{(rating != null || caption) && (
-						<p className="rc-rating">
+						<p className="rvc-rating">
 							{rating != null && <StarRow rating={rating} size={19} />}
 							{caption &&
-								(profileUrl ? (
+								(profileURL ? (
 									<a
-										className="rc-caption"
-										href={profileUrl}
+										className="rvc-caption"
+										href={profileURL}
 										target="_blank"
 										rel="noopener"
 										aria-label={`${caption}, opens the review profile in a new tab`}
@@ -135,17 +135,17 @@ export function ReviewCarousel({
 										<ArrowUpRight size={14} strokeWidth={2} aria-hidden="true" />
 									</a>
 								) : (
-									<span className="rc-caption">{caption}</span>
+									<span className="rvc-caption">{caption}</span>
 								))}
 						</p>
 					)}
-					{lead && <p className="rc-lead">{lead}</p>}
+					{lead && <p className="rvc-lead">{lead}</p>}
 					{stats && stats.length > 0 && (
-						<dl className="rc-stats">
+						<dl className="rvc-stats">
 							{stats.map((stat) => (
-								<div className="rc-stat" key={stat.label}>
-									<dt className="rc-stat-value">{stat.value}</dt>
-									<dd className="rc-stat-label">{stat.label}</dd>
+								<div className="rvc-stat" key={stat.label}>
+									<dt className="rvc-stat-value">{stat.value}</dt>
+									<dd className="rvc-stat-label">{stat.label}</dd>
 								</div>
 							))}
 						</dl>
@@ -155,15 +155,15 @@ export function ReviewCarousel({
 				{/* A named <section> is an ARIA region, the carousel pattern's
 				    wrapper — spelled semantically rather than role="group". */}
 				<section
-					className="rc-viewport"
+					className="rvc-viewport"
 					aria-roledescription="carousel"
 					aria-label={ariaLabel}
 					onKeyDown={onKeyDown}
 				>
-					<div className="rc-stage" aria-live="polite">
+					<div className="rvc-stage" aria-live="polite">
 						{items.map((item, i) => (
 							<figure
-								className={["rc-slide", i === index && "is-active"].filter(Boolean).join(" ")}
+								className={["rvc-slide", i === index && "is-active"].filter(Boolean).join(" ")}
 								key={item.by + item.quote.slice(0, 24)}
 								aria-hidden={i !== index}
 								aria-roledescription="slide"
@@ -171,24 +171,24 @@ export function ReviewCarousel({
 							>
 								{item.rating != null && <StarRow rating={item.rating} size={17} />}
 								<blockquote
-									className={["rc-quote", quoteSize(item.quote)].filter(Boolean).join(" ")}
+									className={["rvc-quote", quoteSize(item.quote)].filter(Boolean).join(" ")}
 								>
 									“{item.quote}”
 								</blockquote>
-								<figcaption className="rc-who">
-									<span className="rc-name">{item.by}</span>
-									{item.detail && <span className="rc-detail">{item.detail}</span>}
+								<figcaption className="rvc-who">
+									<span className="rvc-name">{item.by}</span>
+									{item.detail && <span className="rvc-detail">{item.detail}</span>}
 								</figcaption>
 							</figure>
 						))}
 					</div>
 
-					<div className="rc-controls">
-						<div className="rc-dots">
+					<div className="rvc-controls">
+						<div className="rvc-dots">
 							{items.map((_, i) => (
 								<button
 									type="button"
-									className={["rc-dot", i === index && "is-active"].filter(Boolean).join(" ")}
+									className={["rvc-dot", i === index && "is-active"].filter(Boolean).join(" ")}
 									// biome-ignore lint/suspicious/noArrayIndexKey: a dot is a position, not an identity; review text can repeat
 									key={`dot-${i}`}
 									aria-label={`Go to review ${i + 1}`}
@@ -197,10 +197,10 @@ export function ReviewCarousel({
 								/>
 							))}
 						</div>
-						<div className="rc-arrows">
+						<div className="rvc-arrows">
 							<button
 								type="button"
-								className="rc-arrow"
+								className="rvc-arrow"
 								aria-label="Previous review"
 								onClick={() => go(index - 1)}
 							>
@@ -208,7 +208,7 @@ export function ReviewCarousel({
 							</button>
 							<button
 								type="button"
-								className="rc-arrow"
+								className="rvc-arrow"
 								aria-label="Next review"
 								onClick={() => go(index + 1)}
 							>

package/src/sections/ReviewWall.tsx

@@ -22,7 +22,7 @@ export interface ReviewItem {
 	 */
 	date?: string;
 	/** Permalink to the review at its source; turns the date into a link. */
-	sourceUrl?: string;
+	sourceURL?: string;
 	/** Short labels (service, program, location) that drive the filter. */
 	tags?: string[];
 }
@@ -73,10 +73,10 @@ function ReviewCard({ item, clampAt }: { item: ReviewItem; clampAt: number }) {
 				<div className="rw-top">
 					{item.rating != null && <StarRow rating={item.rating} />}
 					{item.date &&
-						(item.sourceUrl ? (
+						(item.sourceURL ? (
 							<a
 								className="rw-date"
-								href={item.sourceUrl}
+								href={item.sourceURL}
 								target="_blank"
 								rel="noopener"
 								aria-label={`Read the ${item.date} review from ${item.by} at its source`}

package/src/sections/SocialStrip.tsx

@@ -20,7 +20,7 @@ export interface SocialStripProps {
 	/** Display handle, e.g. "@platformstrength". */
 	handle: string;
 	/** The profile the strip links out to. */
-	profileUrl: string;
+	profileURL: string;
 	photos: SocialPhoto[];
 	/** Follow button label; defaults to "Follow {handle}". */
 	followLabel?: string;
@@ -39,7 +39,7 @@ export function SocialStrip({
 	title,
 	lead,
 	handle,
-	profileUrl,
+	profileURL,
 	photos,
 	followLabel,
 	surface = "default",
@@ -57,7 +57,7 @@ export function SocialStrip({
 							<a
 								key={photo.src}
 								className="social-tile"
-								href={profileUrl}
+								href={profileURL}
 								target="_blank"
 								rel="noopener"
 								aria-label={photo.alt ? `${photo.alt} (opens ${handle})` : `Opens ${handle}`}
@@ -72,7 +72,7 @@ export function SocialStrip({
 					)}
 				</div>
 				<div className="social-follow">
-					<Button href={profileUrl} newTab variant="dark">
+					<Button href={profileURL} newTab variant="dark">
 						<AtSign size={17} aria-hidden />
 						{followLabel ?? `Follow ${handle}`}
 					</Button>

package/src/sections/index.ts

@@ -32,7 +32,7 @@ export {
 	FAQBrowser,
 	type FAQBrowserProps,
 	type FAQCategory,
-	type FAQCta,
+	type FAQCTA,
 	type FAQEntry,
 } from "./FAQBrowser";
 export { FeatureDetail, type FeatureDetailProps } from "./FeatureDetail";

package/src/sections/siteConfig.ts

@@ -121,8 +121,8 @@ export interface SiteConfig {
 	email: string;
 	address: Address;
 	geo?: { latitude: number; longitude: number };
-	mapEmbedUrl?: string;
-	mapLinkUrl?: string;
+	mapEmbedURL?: string;
+	mapLinkURL?: string;
 	/**
 	 * Path to a static map screenshot (e.g. "/images/map.jpg"). When set, the
 	 * map renders as a lightweight image linking to directions instead of the

package/src/styles/sections.css

@@ -2307,56 +2307,56 @@
 	   REVIEW CAROUSEL — aggregate rating beside one review card at a time
 	   ================================================================= */
 
-	.atelic-ui .rc-grid {
+	.atelic-ui .rvc-grid {
 		display: grid;
 		grid-template-columns: 1fr;
 		gap: clamp(32px, 4vw, 48px);
 		align-items: center;
 	}
 	@media (min-width: 940px) {
-		.atelic-ui .rc-grid {
+		.atelic-ui .rvc-grid {
 			grid-template-columns: minmax(0, 0.85fr) minmax(0, 1.15fr);
 			gap: clamp(40px, 5vw, 72px);
 		}
 	}
 
 	/* ---- Left column: the aggregate ---- */
-	.atelic-ui .rc-aggregate {
+	.atelic-ui .rvc-aggregate {
 		min-width: 0;
 	}
-	.atelic-ui .rc-score {
+	.atelic-ui .rvc-score {
 		display: flex;
 		align-items: baseline;
 		gap: 10px;
 		margin: 6px 0 0;
 	}
-	.atelic-ui .rc-score-num {
+	.atelic-ui .rvc-score-num {
 		font-size: clamp(4.2rem, 8vw, 6.6rem);
 		font-weight: 800;
 		line-height: 0.95;
 		letter-spacing: -0.045em;
 		color: var(--ink);
 	}
-	.atelic-ui .rc-score-out {
+	.atelic-ui .rvc-score-out {
 		font-size: clamp(1.2rem, 2vw, 1.7rem);
 		font-weight: 500;
 		color: var(--neutral-300);
 	}
-	.atelic-ui .rc-rating {
+	.atelic-ui .rvc-rating {
 		display: flex;
 		align-items: center;
 		flex-wrap: wrap;
 		gap: 10px;
 		margin: 16px 0 0;
 	}
-	.atelic-ui .rc-caption {
+	.atelic-ui .rvc-caption {
 		font-size: 0.95rem;
 		color: var(--ink-soft);
 	}
 	/* The caption as a link out to the live profile: the same quiet idiom as
 	   the wall's dated source link (trailing arrow, new tab), plus a hairline
 	   underline so it reads as a link inside an otherwise static block. */
-	.atelic-ui a.rc-caption {
+	.atelic-ui a.rvc-caption {
 		display: inline-flex;
 		align-items: center;
 		gap: 3px;
@@ -2367,16 +2367,16 @@
 			color 0.2s ease,
 			text-decoration-color 0.2s ease;
 	}
-	.atelic-ui a.rc-caption:hover {
+	.atelic-ui a.rvc-caption:hover {
 		color: var(--primary);
 		text-decoration-color: currentColor;
 	}
-	.atelic-ui a.rc-caption:focus-visible {
+	.atelic-ui a.rvc-caption:focus-visible {
 		outline: 2px solid var(--primary);
 		outline-offset: 3px;
 		border-radius: var(--radius-sm);
 	}
-	.atelic-ui .rc-lead {
+	.atelic-ui .rvc-lead {
 		margin: 20px 0 0;
 		max-width: 46ch;
 		font-size: 1.02rem;
@@ -2385,36 +2385,36 @@
 	}
 
 	/* ---- Optional mini stat row ---- */
-	.atelic-ui .rc-stats {
+	.atelic-ui .rvc-stats {
 		display: flex;
 		flex-wrap: wrap;
 		gap: 0;
 		margin: clamp(24px, 3vw, 34px) 0 0;
 	}
-	.atelic-ui .rc-stat {
+	.atelic-ui .rvc-stat {
 		padding: 2px 22px 2px 0;
 		margin-right: 22px;
 		border-right: 1px solid var(--hairline-strong);
 	}
-	.atelic-ui .rc-stat:last-child {
+	.atelic-ui .rvc-stat:last-child {
 		border-right: none;
 		margin-right: 0;
 		padding-right: 0;
 	}
-	.atelic-ui .rc-stat-value {
+	.atelic-ui .rvc-stat-value {
 		font-size: 1.35rem;
 		font-weight: 800;
 		letter-spacing: -0.02em;
 		color: var(--ink);
 	}
-	.atelic-ui .rc-stat-label {
+	.atelic-ui .rvc-stat-label {
 		margin: 2px 0 0;
 		font-size: 0.8rem;
 		color: var(--neutral-500);
 	}
 
 	/* ---- Right column: the card ---- */
-	.atelic-ui .rc-viewport {
+	.atelic-ui .rvc-viewport {
 		min-width: 0;
 		padding: clamp(24px, 3vw, 40px);
 		background: var(--card);
@@ -2427,10 +2427,10 @@
 	   HTML, the card is as tall as the longest one, and stepping through
 	   never shifts the page. Inactive slides are hidden (and so are dropped
 	   from the tab order and the accessibility tree) rather than unmounted. */
-	.atelic-ui .rc-stage {
+	.atelic-ui .rvc-stage {
 		display: grid;
 	}
-	.atelic-ui .rc-slide {
+	.atelic-ui .rvc-slide {
 		grid-area: 1 / 1;
 		display: flex;
 		flex-direction: column;
@@ -2444,20 +2444,20 @@
 		visibility: hidden;
 		transition: opacity 0.35s ease;
 	}
-	.atelic-ui .rc-slide.is-active {
+	.atelic-ui .rvc-slide.is-active {
 		opacity: 1;
 		visibility: visible;
 	}
 	@media (prefers-reduced-motion: reduce) {
-		.atelic-ui .rc-slide {
+		.atelic-ui .rvc-slide {
 			transition: none;
 		}
 	}
-	.atelic-ui .rc-slide .star-row {
+	.atelic-ui .rvc-slide .star-row {
 		margin-bottom: 18px;
 	}
 
-	.atelic-ui .rc-quote {
+	.atelic-ui .rvc-quote {
 		margin: 0;
 		font-size: clamp(1.15rem, 1.5vw, 1.42rem);
 		font-weight: 500;
@@ -2467,54 +2467,54 @@
 	}
 	/* Longer quotes set smaller, so one paragraph-length review doesn't drive
 	   the shared card height past what the page can hold (see quoteSize). */
-	.atelic-ui .rc-quote.is-medium {
+	.atelic-ui .rvc-quote.is-medium {
 		font-size: clamp(1.05rem, 1.25vw, 1.2rem);
 		line-height: 1.55;
 	}
-	.atelic-ui .rc-quote.is-compact {
+	.atelic-ui .rvc-quote.is-compact {
 		font-size: clamp(0.98rem, 1.1vw, 1.06rem);
 		line-height: 1.6;
 		letter-spacing: 0;
 	}
 
-	.atelic-ui .rc-who {
+	.atelic-ui .rvc-who {
 		display: flex;
 		flex-direction: column;
 		gap: 3px;
 		width: 100%;
 		padding-top: clamp(20px, 2.4vw, 28px);
 	}
-	.atelic-ui .rc-who::before {
+	.atelic-ui .rvc-who::before {
 		content: "";
 		display: block;
 		height: 1px;
 		background: var(--hairline-strong);
 		margin-bottom: clamp(18px, 2.2vw, 24px);
 	}
-	.atelic-ui .rc-name {
+	.atelic-ui .rvc-name {
 		font-weight: 700;
 		font-size: 1rem;
 		color: var(--ink);
 	}
-	.atelic-ui .rc-detail {
+	.atelic-ui .rvc-detail {
 		font-size: 0.86rem;
 		color: var(--neutral-500);
 	}
 
 	/* ---- Pagination and arrows ---- */
-	.atelic-ui .rc-controls {
+	.atelic-ui .rvc-controls {
 		display: flex;
 		align-items: center;
 		justify-content: space-between;
 		gap: 16px;
 		margin-top: clamp(20px, 2.4vw, 28px);
 	}
-	.atelic-ui .rc-dots {
+	.atelic-ui .rvc-dots {
 		display: flex;
 		align-items: center;
 		gap: 8px;
 	}
-	.atelic-ui .rc-dot {
+	.atelic-ui .rvc-dot {
 		width: 8px;
 		height: 8px;
 		padding: 0;
@@ -2524,19 +2524,19 @@
 			width 0.25s ease,
 			background 0.2s ease;
 	}
-	.atelic-ui .rc-dot:hover {
+	.atelic-ui .rvc-dot:hover {
 		background: var(--neutral-500);
 	}
-	.atelic-ui .rc-dot.is-active {
+	.atelic-ui .rvc-dot.is-active {
 		width: 26px;
 		background: var(--ink);
 	}
-	.atelic-ui .rc-arrows {
+	.atelic-ui .rvc-arrows {
 		display: flex;
 		align-items: center;
 		gap: 8px;
 	}
-	.atelic-ui .rc-arrow {
+	.atelic-ui .rvc-arrow {
 		width: 40px;
 		height: 40px;
 		display: grid;
@@ -2550,12 +2550,12 @@
 			border-color 0.2s ease,
 			color 0.2s ease;
 	}
-	.atelic-ui .rc-arrow:hover {
+	.atelic-ui .rvc-arrow:hover {
 		background: var(--surface-alt);
 		border-color: var(--neutral-300);
 	}
-	.atelic-ui .rc-arrow:focus-visible,
-	.atelic-ui .rc-dot:focus-visible {
+	.atelic-ui .rvc-arrow:focus-visible,
+	.atelic-ui .rvc-dot:focus-visible {
 		outline: 2px solid var(--primary);
 		outline-offset: 3px;
 	}

package/src/vite/private-chunks.ts

@@ -11,17 +11,20 @@
  * up anywhere else.
  *
  * Public content is the short list that is safe to ship to every page: the
- * 404's copy, the sealed proposal (ciphertext by design, GATE.md), and the
- * heads in `*.meta.ts`, which carry a title and nothing a snapshot produced.
- * Every other module under src/content/ is treated as private, so a new
- * artifact starts behind the wall.
+ * 404's copy, the sealed proposal (ciphertext by design, GATE.md), the note
+ * (built from public signals only, the practice's FOOTPRINT.md, Privacy,
+ * and meant to be read at /notes with no sign in, which a host opens through
+ * the gate's `open` option), and the heads in `*.meta.ts`, which carry a title and
+ * nothing a snapshot produced. Every other module under src/content/ is
+ * treated as private, so a new artifact starts behind the wall.
  */
 import type { Plugin } from "vite";
 
 /** Where the client build writes the chunks the wall holds back. */
 export const DOC_DIR = "assets/doc";
 
-const PUBLIC_CONTENT = /\/src\/content\/(not-found\.tsx|proposal[^/]*|[^/]+\.meta\.ts)$/;
+const PUBLIC_CONTENT =
+	/\/src\/content\/(not-found\.tsx|proposal[^/]*|notes\.(?:tsx|json)|[^/]+\.meta\.ts)$/;
 
 /** Whether a module id is content that must never ship to the login page. */
 export function isPrivateContent(id: string): boolean {