@getvitops/generator 8.2.0 → 8.3.0-alpha.0

package/dist/index.mjs

@@ -1,5 +1,5 @@
-import { _ as SYSTEM_DARK_SEL, a as expandPalette, b as roleHue, c as monotonicityErrors, d as tokenVar, f as validateColorContract, g as ROLE_TOKEN_KEYS, h as REQUIRED_ROLES, i as checkContrast, l as patchToOverrideCss, m as DARK_SEL, n as NUMERIC_STEPS, o as functionalRole, p as BASE_HOOK, r as buildReverseIndex, s as ladderWarnings, t as CONTRAST, u as tokenClass, v as TW_CLASH, x as roleKind, y as TYPO_KEYMAP } from "./tokens-C1RJwFeG.mjs";
-import { A as jsonSchema, C as resolveTheme, D as DesignSystemSchema, E as validateConfig, M as movedTokens, O as SCHEMA_LOCAL_PATH, S as resolvePrivacyContact, T as stripNulls, _ as getAt, a as CONFIG_VERSION, b as resolveConfig, c as JURISDICTIONS, d as SiteFontSchema, f as configJsonSchema, g as formatConfig, h as experimentDimensionWarnings, i as CONFIG_SCHEMA_URL, j as validate, k as SCHEMA_URL, l as JURISDICTION_COUNTRIES, m as designSystemPath, n as BIGIN_DATA_CENTERS, o as CRM_PROVIDERS, p as deepMerge, r as CONFIG_SCHEMA_LOCAL_PATH, s as ConfigSchema, t as AD_PROVIDERS, u as PLAN_CAPABILITIES, v as isConfig, w as setAt, x as resolveInput, y as mergePatch } from "./config-BfcWKH-5.mjs";
+import { C as roleKind, S as roleHue, _ as ROLE_TOKEN_KEYS, a as expandPalette, b as TYPO_KEYMAP, c as monotonicityErrors, d as tokenVar, f as validateColorContract, g as REQUIRED_ROLES, h as LAYOUT_TOKENS, i as checkContrast, l as patchToOverrideCss, m as DARK_SEL, n as NUMERIC_STEPS, o as functionalRole, p as BASE_HOOK, r as buildReverseIndex, s as ladderWarnings, t as CONTRAST, u as tokenClass, v as SYSTEM_DARK_SEL, w as roleSolidOptions, x as layoutDecls, y as TW_CLASH } from "./tokens-CaIGQQLk.mjs";
+import { A as jsonSchema, C as resolveTheme, D as DesignSystemSchema, E as validateConfig, M as movedTokens, O as SCHEMA_LOCAL_PATH, S as resolvePrivacyContact, T as stripNulls, _ as getAt, a as CONFIG_VERSION, b as resolveConfig, c as JURISDICTIONS, d as SiteFontSchema, f as configJsonSchema, g as formatConfig, h as experimentDimensionWarnings, i as CONFIG_SCHEMA_URL, j as validate, k as SCHEMA_URL, l as JURISDICTION_COUNTRIES, m as designSystemPath, n as BIGIN_DATA_CENTERS, o as CRM_PROVIDERS, p as deepMerge, r as CONFIG_SCHEMA_LOCAL_PATH, s as ConfigSchema, t as AD_PROVIDERS, u as PLAN_CAPABILITIES, v as isConfig, w as setAt, x as resolveInput, y as mergePatch } from "./config-D5xuz8--.mjs";
 import { buildIconSprite, loadIconSvg, spriteId } from "./icons-sprite.mjs";
 import { cpSync, existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
@@ -45,6 +45,7 @@ const TIERS = {
 			adds: "WAI-ARIA tree semantics, roving-tabindex keyboard navigation, filter, expand/collapse all, hash deep-linking"
 		},
 		astro: a("Tree", "wc"),
+		emdashExempt: "needs nested data (branches within branches) that a flat repeater cannot hold; revisit if EmDash block fields gain nesting",
 		use: "`<Tree items={…} />` — it emits `<wc-tree>` itself, so do NOT add your own wrapper."
 	},
 	carousel: {
@@ -82,6 +83,7 @@ const TIERS = {
 		use: "`<Gallery images={…} label=\"…\" />` — it emits `<wc-gallery>` wrapping a `<Carousel />` (which emits its own `<wc-carousel>`) itself, so do NOT add your own wrapper around either. Each thumbnail is a plain `<a href=\"#slide-id\">` into the carousel's own `<li id=\"slide-id\">` inside a single `<dialog class=\"lightbox-dialog\">` (see `lightbox`), so it is a working modal lightbox — WITH prev/next — before any script runs. Stepping between images is the carousel's job, not the gallery's."
 	},
 	entries: {
+		emdash: ["vitops.entries"],
 		css: c([
 			"entries__table",
 			"entries__scroll",
@@ -92,8 +94,9 @@ const TIERS = {
 			registered: true,
 			adds: "parses heading + `<dl>` pairs into a table above a breakpoint"
 		},
+		astro: a("Entries", "wc"),
 		bricks: "vitops-entries",
-		use: "`<wc-entries>` around `<h3>` + `<dl>` pairs. The tier-2 exemplar: semantic pairs with no JS, a table with it."
+		use: "`<Entries entries={[{ heading, pairs: [{ term, value }] }]} />` — it emits `<wc-entries>` itself, so do NOT add your own wrapper. By hand: `<wc-entries>` around `<h3>` + `<dl>` pairs. The tier-2 exemplar: semantic pairs with no JS, a table with it."
 	},
 	copy: {
 		emdash: ["vitops.copyButton"],
@@ -112,6 +115,7 @@ const TIERS = {
 		use: "`<wc-copy>` around the content and a `[data-copy]` button."
 	},
 	dismissable: {
+		emdash: ["vitops.banner"],
 		css: c(["banner__close", "notification__close"], "patterns/banner.css"),
 		wc: {
 			tag: "wc-dismissable",
@@ -127,6 +131,7 @@ const TIERS = {
 			"splitter__panel",
 			"splitter__handle"
 		], "patterns/splitter.css"),
+		emdashExempt: "app UI (resizable panes), not editorial content; an editor does not drag-resize a published page",
 		wc: {
 			tag: "wc-split-panel",
 			registered: true,
@@ -165,7 +170,85 @@ const TIERS = {
 		astro: a("Marquee", "wc"),
 		use: "`<Marquee>` around one `.marquee__content`, or `<wc-marquee>` by hand. Scrolls via CSS alone; JS only removes the seam."
 	},
+	tone: {
+		css: c([
+			"tone",
+			"tone--solid",
+			"accent"
+		], "patterns/tone.css"),
+		use: "Add `.tone` and set `--tone-bg` / `--tone-fg` / `--tone-border` / `--tone-solid` / `--tone-on-solid` as custom properties — never a class built from a value, which Tailwind cannot see. `@getvitops/emdash`'s `resolveTone(tone, color)` writes them: role, then semantic fallbacks, then `neutral`, or a palette `color` escape hatch. `.accent` colours a run inside a heading."
+	},
+	section: {
+		emdash: ["vitops_section"],
+		css: c([
+			"section",
+			"section__head",
+			"section__kicker",
+			"section__title",
+			"section__sub",
+			"section__body",
+			"section--split",
+			"section--center"
+		], "patterns/section.css"),
+		use: "`.section.region` > `.centered` > `.section__inner` holding `.section__head` (kicker, heading, sub) and `.section__body`. `.section--split` puts the head beside the body when wide. In EmDash it is a block TYPE (`vitops_section`) with a Portable Text body that accepts any other block — see `vitopsBlockTypes()`."
+	},
+	steps: {
+		emdash: ["vitops.steps"],
+		css: c([
+			"steps",
+			"steps__item",
+			"steps__body",
+			"steps__title",
+			"steps__text",
+			"steps--row"
+		], "patterns/steps.css"),
+		use: "`<ol class=\"steps tone\">` of `<li class=\"steps__item\">` each holding a `.steps__body` with a real heading. The number is a CSS counter and the connector line a pseudo-element; `.steps--row` runs it sideways when wide."
+	},
+	stats: {
+		emdash: ["vitops.stats"],
+		css: c([
+			"stats",
+			"stats__item",
+			"stats__figure",
+			"stats__label",
+			"stats__group",
+			"stats__delta",
+			"stats--tiles"
+		], "patterns/stats.css"),
+		use: "`<ul class=\"stats\">` of `.stats__item`, each figure a `<Counter>`. `.stats--tiles` adds `.stats__group` and `.stats__delta`; `data-state=\"up|down\"` colours the delta through the success/danger roles."
+	},
+	callout: {
+		emdash: ["vitops.callout"],
+		css: c([
+			"callout",
+			"callout__body",
+			"callout__title",
+			"callout__text",
+			"callout__actions",
+			"callout--center"
+		], "patterns/callout.css"),
+		use: "`.callout.tone` with a `.callout__body` and `.callout__actions`. A call-to-action band that stays on the page — NOT `banner`, which is a dismissible announcement."
+	},
+	logos: {
+		emdash: ["vitops.logos"],
+		css: c([
+			"logos",
+			"logos__item",
+			"logos--grayscale"
+		], "patterns/logos.css"),
+		use: "`<ul class=\"logos\">` of `.logos__item` images (alt text = the name). A still grid; `marquee` is the scrolling version."
+	},
+	embed: {
+		emdash: ["vitops.embed"],
+		css: c([
+			"embed",
+			"embed__frame",
+			"embed__placeholder"
+		], "patterns/embed.css"),
+		use: "`.embed` around an `<iframe class=\"embed__frame\" data-consent=\"marketing\" data-consent-src=\"…\">` with NO `src`, and a `.embed__placeholder`. The consent runtime assigns the address after the grant; the placeholder holds a real link. Never give the iframe a live `src`."
+	},
 	counter: {
+		emdash: ["vitops.stats"],
 		css: c([
 			"counter",
 			"counter__value",
@@ -180,6 +263,7 @@ const TIERS = {
 		use: "`<Counter value=\"94%\" />` — it emits `<wc-counter>` itself, so do NOT add your own wrapper. The final value is parsed from the fallback text, never passed separately."
 	},
 	"multi-field": {
+		emdashExempt: "repeats rows a visitor adds at submit time (several phone numbers, guests); `vitops.form` has a fixed, editor-defined field list and no such field type",
 		css: c([
 			"form-group",
 			"input-group",
@@ -193,7 +277,18 @@ const TIERS = {
 		bricks: "vitops-multi-field",
 		use: "`<wc-multi-field>` around a field template. One row submits fine with no JS."
 	},
+	turnstile: {
+		emdash: ["vitops.form"],
+		css: c(["form-group"], "patterns/forms.css"),
+		wc: {
+			tag: "wc-turnstile",
+			registered: true,
+			adds: "loads Cloudflare Turnstile on first interaction with the form and holds a submit until its token arrives"
+		},
+		use: "`<wc-turnstile sitekey=\"…\">` inside a `<form>`, around a paragraph saying the spam check needs JavaScript. Pair it with `createConversionRoute({ turnstile })`; the `vitops.form` block does both."
+	},
 	"color-scheme-toggle": {
+		emdashExempt: "site chrome (header/footer), not page content; belongs in the nav/layout",
 		css: c([], "patterns/icon.css"),
 		wc: {
 			tag: "wc-color-scheme-toggle",
@@ -204,6 +299,7 @@ const TIERS = {
 		use: "`<wc-color-scheme-toggle></wc-color-scheme-toggle>`. Renamed from `<color-scheme-toggle>` in 4.0. Shadow DOM, so it is absent rather than broken without JS."
 	},
 	consent: {
+		emdashExempt: "site chrome: the layout renders `<CookieConsent />` once; an editor-placed copy would duplicate the gate",
 		css: c([
 			"consent",
 			"consent__body",
@@ -223,6 +319,7 @@ const TIERS = {
 		use: "`<CookieConsent />`. Its own Lit-free bundle so a site needing consent does not download a rendering framework."
 	},
 	"theme-editor": {
+		emdashExempt: "tooling, not content; it is mounted in the EmDash admin by `designSystemEditor`, never in a page",
 		css: c([
 			"ed-panel",
 			"ed-launch",
@@ -315,6 +412,7 @@ const TIERS = {
 		use: "`<NavShell>` with a `nav` slot, plus `<NavShellToggle>` if the toggle must live outside the shell."
 	},
 	subgrid: {
+		emdash: ["vitops.pricing"],
 		css: c([
 			"subgrid",
 			"subgrid-card",
@@ -368,10 +466,14 @@ const TIERS = {
 		css: c([
 			"sitenav",
 			"sitenav__link",
-			"sitenav--drawer-start"
+			"sitenav--drawer-start",
+			"navlist",
+			"navlist--columns"
 		], "patterns/sitenav.css"),
+		astro: [...a("SiteNav", "css"), ...a("SiteFooter", "css")],
+		emdash: ["vitops.nav"],
 		bricks: "vitops-sitenav",
-		use: "`.sitenav` with `--bp-*` and a drawer direction. `<details>` + Invoker Commands, no JS."
+		use: "`.sitenav` with `--bp-*` and a drawer direction. `<details>` + Invoker Commands, no JS. In Astro: `<SiteNav {...await loadNavMenus(getMenu)} />` renders EmDash menu `primary` (the default: dropdowns from `md`, drawer below) and, if they exist, `primary-mobile` (depth-1 nav below `md`) and `primary-mega` (mega panels from `xl`) — adding the menu in the admin is the whole change. An item's `titleAttr` is its description. `<SiteFooter sitemap legal name>` renders `footer-sitemap` + `footer-legal` + the copyright line. For a menu inside page content (a site map, a section's links, footer-style columns) use `.navlist` — plain nested lists, `--inline` / `--columns` — or, in EmDash, the `vitops.nav` block (menu, layout `list|inline|columns|sitenav`, depth 1–3, heading, tone). Name each `<nav>` uniquely: the header is `Primary` and the footer `Site map` / `Legal`, and the block never reuses those."
 	},
 	"split-link": {
 		css: c([
@@ -468,7 +570,8 @@ const TIERS = {
 			"review__source"
 		], "patterns/review.css", true),
 		astro: a("ReviewCard", "css"),
-		use: "`<ReviewCard review={…} />` — one card, from `vitops reviews`' `.vitops/reviews.json` cache. Put several inside `<Carousel>` slides or `<Marquee>` items; there is no group component and no `wc-review`."
+		emdash: ["vitops.reviews"],
+		use: "`<ReviewCard review={…} />` — one card, from `vitops reviews`' `.vitops/reviews.json` cache. Put several inside `<Carousel>` slides or `<Marquee>` items; there is no group component and no `wc-review`. In EmDash, `vitops.reviews` is that whole row: it reads the cache as a build-time import (`virtual:getvitops/reviews`, served by `vitops()`; empty when the file is absent), picks reviews with `selectReviews()`, and lays them out as a grid, carousel or marquee. A new review appears after `vitops reviews` is re-run, committed and the site rebuilt."
 	},
 	tabs: {
 		css: c(["tabs"], void 0, true),
@@ -2294,6 +2397,7 @@ function renderComponentsConcept(ds) {
 	const astro = tierPatterns("astro").flatMap(({ name, entry }) => entry.astro.map((a) => `| ${code(a.component)} | ${code(name)} | ${a.wraps === "wc" ? `the ${code(`<${entry.wc.tag}>`)} tag, fallback inside` : "tier-1 markup — no web component"} |`)).join("\n");
 	const bricks = tierPatterns("bricks").map(({ name, entry }) => `| ${code(entry.bricks)} | ${code(name)} |`).join("\n");
 	const emdash = tierPatterns("emdash").flatMap(({ name, entry }) => entry.emdash.map((type) => `| ${code(type)} | ${code(name)} | ${entry.astro?.length ? list(entry.astro.map((a) => `<${a.component.split("/").pop().replace(".astro", "")} />`)) : "tier-1 markup"} |`)).join("\n");
+	const exempt = TIER_NAMES.filter((n) => TIERS[n].emdashExempt).map((n) => `- ${code(TIERS[n].wc?.tag ?? n)} — ${TIERS[n].emdashExempt}`).join("\n");
 	const css = tierPatterns("css").map(({ name, entry }) => {
 		const c = entry.css;
 		const config = !c.generated ? "—" : declared.has(name) ? "declared" : "**absent from this config — no CSS emitted**";
@@ -2388,13 +2492,21 @@ ${bricks}
 ## EmDash blocks
 
 Portable Text block ${code("_type")}s from ${code("@getvitops/emdash")}. Repeating patterns are
-repeater fields. A block cannot contain other blocks — a section holding a card and a button is a
-${code("blocks")} field in the EmDash schema, not a Portable Text block.
+repeater fields. A Portable Text block cannot contain other blocks, so a pattern that must hold
+them is a schema-level block TYPE with a Portable Text body instead — ${code("vitops_section")},
+from ${code("vitopsBlockTypes()")}. Its body accepts every ${code("vitops.*")} block below.
 
 | Block | Pattern | Renders via |
 | --- | --- | --- |
 ${emdash}
 
+### Web components with no block, on purpose
+
+Every shipped ${code("wc-*")} element either has a block above or a stated reason here
+(${code("emdashExempt")} in the manifest, enforced by ${code("tiers.test.ts")}):
+
+${exempt}
+
 ## CSS
 
 ${code("patterns.items")} patterns get the full token cascade — ${code("base")} declarations,
@@ -3983,7 +4095,7 @@ function derivePolicyVars(cfg) {
 	const fields = formFields(site);
 	const hasForms = fields.length > 0;
 	const hasAnalytics = Object.values(site.analytics ?? {}).some((v) => typeof v === "string" ? v.length > 0 : !!v);
-	processors.filter((p) => p.cookies?.length);
+	const cookieProcessors = processors.filter((p) => p.cookies?.length);
 	const consent = legal?.cookieConsent;
 	const contact = resolvePrivacyContact(cfg);
 	const businessName = org?.legalName ?? (org?.name != null ? t(org.name, locale, locale) : void 0) ?? "we";
@@ -4096,6 +4208,12 @@ function derivePolicyVars(cfg) {
 	const operatorCountries = list(uniq(processors.map((p) => p.operatorCountry)).filter((c) => foreign(c) && !named.has(norm(c))));
 	const countries = list(uniq(processors.flatMap((p) => [...(p.storage ?? []).map((s) => s.country), p.operatorCountry])));
 	const address = contact?.address ?? org?.address;
+	const trackingTechnologies = uniq([
+		...cookieProcessors.map((p) => `${p.name} (${p.purpose})`),
+		hasSessionReplay ? "session recording of how you interact with a page" : void 0,
+		hasAdTracking ? "advertising attribution (the `_ac` cookie described in our Cookie Notice)" : void 0,
+		...Object.keys(site.ads ?? {}).map((a) => `${a} advertising measurement`)
+	]);
 	return {
 		businessName,
 		url: site.domains?.canonical ?? "",
@@ -4127,7 +4245,12 @@ function derivePolicyVars(cfg) {
 		operatorCountries: operatorCountries || void 0,
 		countries: countries || void 0,
 		consentModel: consent?.enabled ? consent.type ?? "opt-in" : "none",
-		cookieCategories: consent?.categories ?? []
+		cookieCategories: consent?.categories ?? [],
+		privacyOfficerName: contact?.name,
+		privacyOfficerTitle: privacy?.privacyOfficerTitle,
+		transferAssessment: privacy?.impactAssessments === true,
+		trackingTechnologies,
+		newsletterSignup: fields.some((f) => /newsletter|subscribe|mailing/i.test(f.name))
 	};
 }
 
@@ -4352,6 +4475,18 @@ function toPortableText(blocks, prefix) {
 * renders as a callout in HTML and as a warning banner in EmDash.
 */
 const REVIEW_NOTICE = "> Generated from this site's configuration. It is a starting point, not legal advice — have it reviewed before you publish it, and make sure it matches what your site actually does.";
+/**
+* The second banner the `qc` documents carry, after `REVIEW_NOTICE`.
+*
+* Quebec adds obligations a generic review prompt does not name, and each is a
+* thing this generator cannot check: that a person in charge of privacy has been
+* designated and is published, that a privacy impact assessment precedes any
+* communication outside Quebec, that consent mechanics match the Act, and — easy
+* to miss — that content directed at Quebec consumers is available in French. It
+* is a second blockquote (a second `vitops.banner` in Portable Text) so it cannot
+* be skimmed past as part of the first.
+*/
+const QC_REVIEW_NOTICE = "> Quebec (Law 25): this document is written for the Quebec privacy regime and has NOT been reviewed by counsel. Before publishing, have a lawyer confirm that a person in charge of the protection of personal information is designated, that any transfer of information outside Quebec is preceded by a privacy impact assessment, that your consent and cookie mechanisms match the Act, and whether a French version is required for your audience. It is not legal advice.";
 /** A markdown bullet list. Empty in, empty out — never a stray `-`. */
 function bullets(items) {
 	return items.map((item) => `- ${item}`).join("\n");
@@ -4396,7 +4531,7 @@ Cookies used on this Site may track:
 
 ${bullets(v.cookieTracked)}
 
-${providersSection$1(v)}${categoriesSection(v)}
+${providersSection$2(v)}${categoriesSection(v)}
 ## Your Choices
 
 ${bullets(v.cookieOptOutOptions)}
@@ -4418,7 +4553,7 @@ If you have questions about our use of cookies, please contact us at ${v.mailing
 * attribution with a cookieless analytics provider sets `_ac` and no third-party
 * cookie at all, and the old wording would have declared it cookie-free.
 */
-function providersSection$1(v) {
+function providersSection$2(v) {
 	const setting = v.processors.filter((p) => p.cookies?.length);
 	const cookieless = v.processors.filter((p) => p.cookies?.length === 0);
 	const own = v.firstPartyCookies;
@@ -4447,6 +4582,68 @@ ${bullets(v.cookieCategories)}
 `;
 }
 
+// src/legal/templates/cookies.qc.ts
+function cookiesQc(v) {
+	return `# Cookie Notice
+${updatedLine(v)}
+${REVIEW_NOTICE}
+${QC_REVIEW_NOTICE}
+
+This notice explains how ${v.businessName} uses cookies and similar technologies on ${v.url || "this website"} (the "Site"). It supplements our Privacy Policy, which sets out your rights under Quebec's Act respecting the protection of personal information in the private sector.
+
+## What Cookies Are
+
+A cookie is a small text file that a website asks your browser to store. Cookies let a site remember things between pages and visits. Similar technologies, such as local storage, do the same.
+
+## What We Use Them For
+
+${bullets(v.cookiePurposes)}
+
+They may record:
+
+${bullets(v.cookieTracked)}
+
+${consentSection(v)}${providersSection$2(v)}${categoriesSection(v)}
+## Your Choices
+
+${bullets(v.cookieOptOutOptions)}
+
+Most browsers let you see the cookies stored, delete them one by one or all at once, and block them. Blocking every cookie will stop parts of the Site from working as intended.
+
+## Contact
+
+Questions about cookies, or a request concerning your personal information, can be sent to ${v.mailingAddress}. If you are not satisfied with our response you may contact the Commission d'accès à l'information du Québec (www.cai.gouv.qc.ca).
+`;
+}
+/**
+* Only when something on the Site can actually identify or profile a visitor —
+* a notice that announced profiling technology the config does not enable would
+* be a false statement in the other direction.
+*/
+function consentSection(v) {
+	if (v.trackingTechnologies.length === 0) return "";
+	const assurance = v.consentModel === "opt-in" ? "These are not activated until you choose to allow them using the consent controls on the Site. You can change your choice at any time." : v.consentModel === "opt-out" ? "You can deactivate them at any time using the consent controls on the Site." : "You can block them through your browser settings.";
+	return `## Technologies That Can Identify, Locate or Profile You
+
+Some technologies on this Site can identify you, or collect information about your behaviour in order to profile you:
+
+${bullets(v.trackingTechnologies)}
+
+${assurance}
+
+`;
+}
+
+// src/legal/templates/casl.ts
+function caslSection(v) {
+	if (!v.newsletterSignup) return "";
+	return `
+### Commercial Electronic Messages
+
+If you subscribe to our newsletter or otherwise ask to receive commercial electronic messages from us, we treat that request as your consent to receive them. Under Canada's Anti-Spam Legislation, each such message must identify who sent it and include a way to unsubscribe, and you may withdraw your consent at any time using the "unsubscribe" link in a message or by contacting us at ${v.mailingAddress}.
+`;
+}
+
 // src/legal/templates/privacy.ca.ts
 /**
 * Privacy policy — Canada (PIPEDA).
@@ -4527,14 +4724,14 @@ For example, we may use your personal information to:
 
 ${bullets(v.usePurposes)}
 
-${providersSection(v)}
+${providersSection$1(v)}
 
 Business reserves the right to transfer personal information in the event that we merge with or are acquired by a third party. We also may disclose your personal information for any other purpose required or permitted by law or to which you consent.
 
 ### Your Choices
 
 ${bullets(v.optOutOptions)}
-
+${caslSection(v)}
 ### How We Protect Personal Information
 
 The security of your personal information is important to us. We protect your personal information in our control through appropriate security safeguards against loss, theft, unauthorized access, disclosure, copying, use or modification. These safeguards include physical measures (such as locked filing cabinets), organizational measures (such as employee training and restricted access), and technological measures (such as encryption and passwords). Personal information may be accessed by persons within our organization who require such access to carry out the purposes described in this Privacy Policy, or such other purposes as permitted or required by law. Personal information we collect is maintained with the source of the information at ${v.url}.
@@ -4542,7 +4739,7 @@ The security of your personal information is important to us. We protect your pe
 We retain personal information that we collect only as long as necessary for the purposes for which it was collected or to meet legal requirements. We destroy personal information when it is no longer needed for such purposes.${v.retention ? ` In general, we keep personal information for ${v.retention}.` : ""}
 
 It is important to understand that no security measures are absolute. We cannot guarantee the safety of any information you provide to us.
-${transferSection(v)}
+${transferSection$1(v)}
 ### Accessing and Correcting Your Personal Information
 
 You have a right to access your personal information and to request a correction to it if you believe it is inaccurate. If you have submitted personal information and would like to have access to it, or if you would like to have it corrected, please contact us using the contact information provided below. We may require you verify your identity before allowing you to access your personal information.
@@ -4558,7 +4755,7 @@ If you have any questions regarding this Privacy Policy, to submit a complaint,
 * "we may share with service providers" without naming them is the vaguest and
 * least useful sentence a policy can contain.
 */
-function providersSection(v) {
+function providersSection$1(v) {
 	if (v.processors.length === 0) return "We do not transfer personal information to third party service providers.";
 	return `We may transfer personal information to third party service providers that assist us with carrying out these purposes. When we transfer personal information to service providers, we require them to protect the information in a manner consistent with our privacy practices and applicable privacy laws. These service providers are:
 
@@ -4577,7 +4774,7 @@ We remain responsible for personal information in the possession of our service
 *
 * The closer is shared: it is true of whichever clauses appear.
 */
-function transferSection(v) {
+function transferSection$1(v) {
 	const clauses = [storageClause(v), operatorClause(v)].filter(Boolean);
 	if (clauses.length === 0) return "";
 	return `
@@ -4607,6 +4804,184 @@ function operatorClause(v) {
 	return `Some of the service providers we use are established in, or controlled from, jurisdictions outside of Canada, including ${v.operatorCountries}. Personal information those providers handle on our behalf may be subject to the laws of those jurisdictions even when it is stored in Canada.`;
 }
 
+// src/legal/templates/privacy.qc.ts
+/**
+* Privacy policy — Quebec (Act respecting the protection of personal information
+* in the private sector, as amended by Law 25).
+*
+* Written fresh rather than adapted from `privacy.ca.ts`: the Quebec regime asks
+* for things PIPEDA does not — a published person in charge, a stated position on
+* technologies that identify or profile, a privacy impact assessment before
+* information leaves Quebec, portability, de-indexing, the right to be told about
+* automated decisions — and frames "abroad" as outside Quebec rather than outside
+* Canada. Reusing the `ca` prose would assert PIPEDA's framing under Law 25's name.
+*
+* Same rule as everywhere: the config records facts, this file owns prose, and a
+* fact the config cannot know is never asserted. So the assessment assurance
+* renders only when `impactAssessments` is attested, the profiling assurance only
+* under an opt-in consent model, and the person in charge is named only when the
+* config names one. What remains is the statute's own wording of the visitor's
+* rights, which holds regardless of how the business operates.
+*/
+function privacyQc(v) {
+	return `# Privacy Policy
+${updatedLine(v)}
+${REVIEW_NOTICE}
+${QC_REVIEW_NOTICE}
+
+This is the privacy policy of ${v.businessName} ("we", "us"). It explains what personal information we collect through ${v.url || "our website"} (the "Site"), why, how it is used and shared, how long it is kept, and the rights you have over it under Quebec's Act respecting the protection of personal information in the private sector (the "Act").
+
+We may update this policy. The version published on the Site is the one that applies, and we will state the date of the latest revision at the top of it.
+
+**Summary.**
+
+${bullets([
+		"The person in charge of the protection of personal information",
+		"What we collect, and why",
+		"Technologies that can identify, locate or profile you",
+		"Who receives your information, and transfers outside Quebec",
+		"How long we keep it",
+		"Your rights, and how to exercise them"
+	])}
+
+## The Person in Charge of the Protection of Personal Information
+
+${responsible(v)}
+
+## What We Collect, and Why
+
+Personal information is information that relates to a natural person and allows that person to be identified. We collect only the personal information we need for a specific purpose that we have identified, and we tell you that purpose at or before the time we collect it. We ask for your consent to use or communicate it for that purpose; where the Act requires it, your consent is requested separately from any other information, in clear and simple terms. We collect personal information when you:
+
+${bullets(v.collectionReasons)}
+
+Depending on what you ask of us, this may include:
+
+${bullets(v.piiCollected)}
+
+When you visit the Site, your browser also sends us certain technical information automatically:
+
+${bullets(v.techInfo)}
+
+We use it to:
+
+${bullets(v.techInfoPurposes)}
+
+Cookies and similar technologies on the Site may record:
+
+${bullets(v.cookieTracked)}
+
+We use them to:
+
+${bullets(v.cookiePurposes)}
+
+Our Cookie Notice lists them in detail.${v.cookieTool ? ` ${v.cookieTool}` : ""}
+
+${trackingSection(v)}## How We Use and Share Personal Information
+
+We use personal information for the purposes for which it was collected, as described in this policy, or for another purpose to which you consent. For example, we may use it to:
+
+${bullets(v.usePurposes)}
+
+${providersSection(v)}
+
+We may also communicate personal information where the Act permits or requires it without your consent, for example in response to a lawful order.
+${transferSection(v)}
+## How Long We Keep Personal Information
+
+We keep personal information only for as long as it is needed for the purposes for which it was collected, or as the law requires. When it is no longer needed, we destroy it or anonymize it for serious and legitimate purposes, as the Act provides.${v.retention ? ` In general, we keep personal information for ${v.retention}.` : ""}
+
+## How We Protect Personal Information
+
+We protect personal information with security measures appropriate to its sensitivity, the purposes for which it is used, its quantity and distribution, and the medium on which it is held. Access is limited to the people who need it to carry out these purposes. No measure is absolute, and we cannot guarantee the security of information you send us.
+
+If a confidentiality incident involving your personal information presents a risk of serious injury, the Act requires us to notify the Commission d'accès à l'information du Québec and the people concerned, and to take measures to reduce the risk of harm.
+
+## Your Rights
+
+Subject to the limits the Act provides, you have the right to:
+
+${bullets([
+		"be informed of the personal information we hold about you, and to obtain a copy of it (access)",
+		"have inaccurate, incomplete or equivocal information corrected, or information collected or held unlawfully deleted (rectification)",
+		"receive your computerized personal information in a structured, commonly used technological format, or have it sent to another organization you name (portability)",
+		"withdraw your consent to our use or communication of your personal information at any time, subject to legal and contractual restrictions",
+		"ask us to stop disseminating your personal information, or to de-index any hyperlink attached to your name that gives access to it, where the dissemination contravenes the law or a court order",
+		"be informed if a decision about you is made exclusively through automated processing of your personal information, to be told what information and main factors were used, and to have the decision reviewed by a person"
+	])}
+
+To exercise any of these rights, write to the person in charge at the address below. We may ask you to verify your identity first. The Act requires us to respond to a request within 30 days of receiving it, and if we refuse it, to tell you why and what recourse you have.
+${caslSection(v)}
+## Complaints
+
+If you are not satisfied with our response, you may file a complaint with the Commission d'accès à l'information du Québec (www.cai.gouv.qc.ca).
+
+## How to Contact Us
+
+Questions, requests and complaints about this policy or your personal information can be sent to ${v.mailingAddress}.
+`;
+}
+/**
+* Law 25 requires the title and contact details of the person in charge to be
+* published. The name and title are printed only if the config states them; the
+* contact is always the resolved privacy contact. Nothing here asserts that the
+* business "designated" anyone — whether someone was is for the owner to confirm,
+* which the banner asks of them.
+*/
+function responsible(v) {
+	const who = [v.privacyOfficerName, v.privacyOfficerTitle && `(${v.privacyOfficerTitle})`].filter(Boolean).join(" ");
+	const role = `The person in charge of the protection of personal information at ${v.businessName}`;
+	return who ? `${role} is ${who}, who can be reached at ${v.mailingAddress}.` : `${role} can be reached at ${v.mailingAddress}.`;
+}
+/**
+* Section 8.1: where a technology can identify, locate or profile you, the Act
+* requires telling you and, for the profiling functions, that they be off until
+* you turn them on. We say "off until you choose" only under an opt-in consent
+* model, which is the one configuration where that is true.
+*/
+function trackingSection(v) {
+	if (v.trackingTechnologies.length === 0) return "";
+	const assurance = v.consentModel === "opt-in" ? "None of these is activated until you choose to allow it using the consent controls on the Site, and you can change your choice at any time." : v.consentModel === "opt-out" ? "You can deactivate them at any time using the consent controls on the Site." : "You can block them through your browser settings.";
+	return `### Technologies That Can Identify, Locate or Profile You
+
+The Site uses technologies that can identify you, or collect information about your behaviour in order to profile you:
+
+${bullets(v.trackingTechnologies)}
+
+${assurance}
+
+`;
+}
+function providersSection(v) {
+	if (v.processors.length === 0) return "We do not communicate personal information to third-party service providers.";
+	return `We may entrust personal information to service providers who carry out a mandate or service contract on our behalf. We provide them only the information they need, require them to use it only for that mandate and not keep it afterwards, and we remain responsible for it. They are:
+
+${bullets(v.processors.map((p) => `${p.name}, for ${p.purpose}${p.privacyUrl ? ` (privacy policy: ${p.privacyUrl})` : ""}`))}`;
+}
+/**
+* Law 25 s. 17: before communicating personal information outside Quebec, an
+* organization must assess the privacy factors and, in broad terms, that the
+* information would receive adequate protection. Two kinds of fact feed this
+* section — where information rests, and which foreign law can reach it — and
+* the assessment assurance is a third that only `impactAssessments` can supply.
+*
+* "Canada" is rewritten because for this template set "outside Quebec" includes
+* the rest of Canada, and a bare "including Canada" would read as a contradiction.
+*/
+function transferSection(v) {
+	const where = (s) => s.replace(/\bCanada\b/g, "elsewhere in Canada");
+	const clauses = [];
+	const scoped = list(v.scopedStorage.map((s) => `${where(s.country)}, in the case of ${s.scope}`));
+	if (v.storageCountries) clauses.push(`Some or all of the personal information we collect may be stored or processed outside Quebec, including in ${where(v.storageCountries)}.${scoped ? ` Certain categories are also held outside Quebec even where the rest is not: ${scoped}.` : ""}`);
+	else if (scoped) clauses.push(`Certain categories of the personal information we collect are stored or processed outside Quebec: ${scoped}.`);
+	if (v.operatorCountries) clauses.push(`Some of our service providers are established in, or controlled from, ${where(v.operatorCountries)}, so information they handle for us may be subject to the laws of those places even when it is stored in Quebec.`);
+	if (clauses.length === 0) return "";
+	return `
+### Transfers Outside Quebec
+
+${clauses.join("\n\n")}
+${v.transferAssessment ? "\nBefore we communicate personal information outside Quebec, we carry out a privacy impact assessment that takes into account, among other things, the sensitivity of the information, the purposes for which it is used, the safeguards that apply, and the legal framework of the place where it will be held.\n" : ""}`;
+}
+
 // src/legal/templates/terms.ca.ts
 function termsCa(v) {
 	return `# Terms of Service
@@ -4659,7 +5034,7 @@ Our handling of personal information is described in our Privacy Policy, which f
 
 ## Governing Law
 
-These terms are governed by the laws of ${governingLaw(v)}. You agree to the exclusive jurisdiction of the courts of that jurisdiction for any dispute arising out of or in connection with these terms or the Site.
+These terms are governed by the laws of ${governingLaw$1(v)}. You agree to the exclusive jurisdiction of the courts of that jurisdiction for any dispute arising out of or in connection with these terms or the Site.
 
 ## Contact
 
@@ -4671,17 +5046,90 @@ If you have questions about these terms, please contact us at ${v.mailingAddress
 * conventional clause names both. Without a province we can only name the
 * country — better a broader clause than one asserting a province we guessed.
 */
-function governingLaw(v) {
+function governingLaw$1(v) {
 	if (v.governingLaw) return v.governingLaw;
 	return v.governingProvince ? `${v.governingProvince} and the federal laws of ${v.governingCountry} applicable therein` : v.governingCountry;
 }
 
+// src/legal/templates/terms.qc.ts
+function termsQc(v) {
+	return `# Terms of Use
+${updatedLine(v)}
+${REVIEW_NOTICE}
+${QC_REVIEW_NOTICE}
+
+These terms govern your use of ${v.url || "this website"} (the "Site"), operated by ${v.businessName} ("we", "us"). By using the Site you accept them. If you do not accept them, please do not use the Site.
+
+We may revise these terms. The version published on the Site is the one that applies, and using the Site after a revision means you accept it.
+
+## Using the Site
+
+You may use the Site only for lawful purposes. You agree not to:
+
+${bullets([
+		"use the Site in a way that contravenes any law or regulation that applies to you or to us",
+		"try to gain unauthorized access to the Site, its servers or any system connected to it",
+		"interfere with the Site or disrupt it, including by introducing malicious code",
+		"collect or harvest personal information about other visitors",
+		"copy, redistribute or resell any part of the Site, except as these terms allow"
+	])}
+
+We may suspend or restrict access to the Site, in whole or in part, at any time.
+
+## Intellectual Property
+
+Unless otherwise indicated, the content of the Site — its text, graphics, logos and layout — belongs to us or is used under licence, and is protected by copyright and other laws. You may view, download and print content for your own personal, non-commercial use. Any other use requires our prior written permission.
+
+## Information on the Site
+
+We take reasonable care to keep the Site accurate and current, but we do not guarantee that its content is complete or up to date. It is provided for general information and is not advice suited to your particular situation.
+
+## Other Websites and Services
+
+The Site may link to or depend on websites and services run by others. We do not control them and are not responsible for their content, availability or practices. A link is not an endorsement.
+
+## Warranty and Liability
+
+The Site is provided "as is" and "as available". Subject to the next paragraph, we give no warranty that it will be uninterrupted, secure or free of errors, and we are not liable for indirect or consequential damages arising from your use of the Site.
+
+**Nothing in these terms excludes or limits our liability for our intentional or gross fault, for bodily or moral injury, or for anything else that the law of Quebec does not allow us to exclude or limit.** If you are a consumer, nothing in these terms deprives you of the rights and recourses the Consumer Protection Act gives you.
+
+## Personal Information
+
+How we handle personal information is described in our Privacy Policy, which is part of these terms.
+
+## Governing Law
+
+These terms are governed by the laws of ${governingLaw(v)}. Any dispute arising from them or from your use of the Site is subject to the jurisdiction of the courts of that jurisdiction, subject to any mandatory rule that gives you the right to bring a proceeding elsewhere.
+
+## Contact
+
+Questions about these terms can be sent to ${v.mailingAddress}.
+`;
+}
+/**
+* The address decides, as in the `ca` terms, because that is the one fact the
+* config holds — but with no province to go on this falls back to Quebec rather
+* than to the country, since these are the Quebec terms.
+*/
+function governingLaw(v) {
+	if (v.governingLaw) return v.governingLaw;
+	return `${v.governingProvince ?? "Quebec"} and the federal laws of Canada applicable therein`;
+}
+
 // src/legal/templates/index.ts
-const TEMPLATES = { ca: {
-	privacy: privacyCa,
-	terms: termsCa,
-	cookies: cookiesCa
-} };
+const TEMPLATES = {
+	ca: {
+		privacy: privacyCa,
+		terms: termsCa,
+		cookies: cookiesCa
+	},
+	qc: {
+		privacy: privacyQc,
+		terms: termsQc,
+		cookies: cookiesQc
+	}
+};
 /** Stable output order, independent of which docs a given config enables. */
 const DOC_ORDER = [
 	"privacy",
@@ -4914,13 +5362,11 @@ const buildScale = (s) => {
 };
 /**
 * Wrong spellings worth naming explicitly, because each is a plausible reading of
-* the key it isn't. `transform`/`decoration` were documented in the schema for a
+* the key it isn't. (`transform`/`decoration` used to live here; they are aliases now, below.) They were documented in the schema for a
 * while and shipped title-case navigation to production; `letter-spacing` and
 * `font-*` are the natural guesses for keys we chose to shorten.
 */
 const ALSO_MEANT = {
-	transform: "text-transform",
-	decoration: "text-decoration",
 	"letter-spacing": "tracking",
 	wrap: "text-wrap",
 	"font-family": "family",
@@ -4929,6 +5375,33 @@ const ALSO_MEANT = {
 	"font-style": "style",
 	lineHeight: "line-height"
 };
+/**
+* Short spellings accepted for the two keys named after a full CSS property.
+* `transform`/`decoration` read naturally beside `tracking`/`weight` and were the
+* documented names for a while, so they are accepted and normalised to the
+* canonical `text-transform`/`text-decoration` (which wins if both are present)
+* rather than warned about and dropped.
+*/
+const TYPO_ALIASES = {
+	transform: "text-transform",
+	decoration: "text-decoration"
+};
+const normalizeTypographyKeys = (typography) => {
+	if (!typography?.roles) return typography;
+	const roles = Object.fromEntries(Object.entries(typography.roles).map(([role, spec]) => {
+		const out = {};
+		for (const [k, v] of Object.entries(spec)) {
+			const canonical = TYPO_ALIASES[k];
+			if (canonical == null) out[k] = v;
+			else if (!(canonical in spec)) out[canonical] = v;
+		}
+		return [role, out];
+	}));
+	return {
+		...typography,
+		roles
+	};
+};
 const TYPO_IDENTITY = {
 	"font-style": "normal",
 	"letter-spacing": "normal",
@@ -4964,12 +5437,12 @@ function build(ds, format, assetsDir, buildOpts = {}) {
 		const hueName = roleHue(spec);
 		const hue = expandedPalette[hueName];
 		if (hue == null) throw new Error(`role "${role}" references unknown palette hue "${hueName}"`);
-		scaleRoles.push(functionalRole(role, hueName, hue, roleKind(spec)));
+		scaleRoles.push(functionalRole(role, hueName, hue, roleKind(spec), roleSolidOptions(spec)));
 	}
 	const surfaceRole = scaleRoles.find((r) => r.role === "surface" && "bg" in r.light);
 	if (!surfaceRole && roleMap["surface"] != null) console.warn("[vitops] colors.roles.surface is chromatic, so no --color-bg-surface exists — skipping --surface-glass, --overlay and .glass. Declare it as { \"hue\": \"…\", \"kind\": \"surface\" } if you meant a surface role.");
 	const focusRole = scaleRoles.find((r) => r.role === "ui-primary") ?? scaleRoles[0];
-	for (const w of ladderWarnings(expandedPalette)) console.warn(`[vitops] ${w}`);
+	for (const w of ladderWarnings(expandedPalette, ds.colors.palette)) console.warn(`[vitops] ${w}`);
 	{
 		const errors = monotonicityErrors(expandedPalette);
 		if (errors.length) throw new Error(errors.join("\n"));
@@ -4989,12 +5462,32 @@ function build(ds, format, assetsDir, buildOpts = {}) {
 			light: planeKeys.flatMap((k) => surfaceRole.light[k] ? [resolve(surfaceRole.light[k])] : []),
 			dark: planeKeys.flatMap((k) => surfaceRole.dark[k] ? [resolve(surfaceRole.dark[k])] : [])
 		} : void 0;
-		const failures = scaleRoles.flatMap((fr) => checkContrast(fr, numericOf, surfaceBg));
+		const failures = scaleRoles.flatMap((fr) => checkContrast(fr, numericOf, surfaceBg, buildOpts.darkOnly ? ["dark"] : void 0));
 		if (failures.length) throw new Error(`colour contrast contract failed (${failures.length} pairing${failures.length === 1 ? "" : "s"}):\n  ${failures.join("\n  ")}`);
 	}
+	if (buildOpts.darkOnly) scaleRoles.forEach((fr, i) => {
+		scaleRoles[i] = {
+			...fr,
+			light: fr.dark
+		};
+	});
 	const patterns = ds.patterns;
-	const shadows = ds.shadows;
-	const typography = ds.typography;
+	const shadowDrops = {};
+	const shadows = ds.shadows ? Object.fromEntries(Object.entries(ds.shadows).map(([name, v]) => {
+		if (typeof v === "string") {
+			shadowDrops[name] = {
+				token: `--shadow-${name}`,
+				value: v
+			};
+			return [name, v];
+		}
+		if (v.drop != null) shadowDrops[name] = {
+			token: `--shadow-${name}-drop`,
+			value: v.drop
+		};
+		return [name, v.box ?? v.drop];
+	})) : void 0;
+	const typography = normalizeTypographyKeys(ds.typography);
 	const UTILITIES = (ds.colors.utilities ?? [
 		"bg",
 		"text",
@@ -5015,7 +5508,7 @@ function build(ds, format, assetsDir, buildOpts = {}) {
 	if (BRICKS) generated["color.css"] = "/* Colours provided by Bricks (palette import generates tokens + utilities). */\n" + NON_PALETTE_BG;
 	else {
 		let css = `/* GENERATED from design-system.json — do not edit by hand. */\n:root {\n`;
-		css += `  color-scheme: light;\n`;
+		css += `  color-scheme: ${buildOpts.darkOnly ? "dark" : "light"};\n`;
 		css += `  /* Hue scales (numeric steps, 50 = tinted near-white … 950 = tinted near-black) */\n`;
 		for (const [name, hue] of Object.entries(expandedPalette)) for (const [n, hex] of Object.entries(hue.numeric)) css += `  --color-${name}-${n}: ${hex};\n`;
 		css += `\n  /* Role tokens (the public API) */\n`;
@@ -5033,7 +5526,7 @@ function build(ds, format, assetsDir, buildOpts = {}) {
 		{
 			let fb = "";
 			for (const fr of scaleRoles) for (const [t, val] of Object.entries(fr.dark)) if (fr.light[t] !== val) fb += `  ${tokenVar(fr.role, t)}: ${val};\n`;
-			if (surfaceRole) fb += `  --overlay: color-mix(in oklch, var(--color-${surfaceRole.hue}-950) 60%, transparent);\n`;
+			if (surfaceRole && !buildOpts.darkOnly) fb += `  --overlay: color-mix(in oklch, var(--color-${surfaceRole.hue}-950) 60%, transparent);\n`;
 			if (fb) {
 				css += `/* Functional role tokens (dark) */\n`;
 				css += `${DARK_SEL} {\n  color-scheme: dark;\n${fb}}\n\n`;
@@ -5055,9 +5548,16 @@ function build(ds, format, assetsDir, buildOpts = {}) {
 		let sh = `/* GENERATED drop-shadow tokens + utilities — do not edit by hand. */\n`;
 		if (entries.length) {
 			sh += `:root {\n`;
-			for (const [name, value] of entries) sh += `  --shadow-${name}: ${value};\n`;
+			for (const [name, value] of entries) {
+				sh += `  --shadow-${name}: ${value};\n`;
+				const drop = shadowDrops[name];
+				if (drop && drop.token !== `--shadow-${name}`) sh += `  ${drop.token}: ${drop.value};\n`;
+			}
 			sh += `}\n\n`;
-			for (const [name] of entries) sh += `.drop-shadow-${name} { filter: drop-shadow(var(--shadow-${name})); }\n`;
+			for (const [name] of entries) {
+				const drop = shadowDrops[name];
+				if (drop) sh += `.drop-shadow-${name} { filter: drop-shadow(var(${drop.token})); }\n`;
+			}
 		}
 		generated["shadows.css"] = sh;
 	}
@@ -5108,6 +5608,8 @@ function build(ds, format, assetsDir, buildOpts = {}) {
 				sp += `}\n`;
 			}
 		}
+		const layoutVars = layoutDecls(ds.layout);
+		if (Object.keys(layoutVars).length) sp += `\n/* layout tokens (from \`layout\`) */\n:root {\n${decls(layoutVars)}\n}\n`;
 		generated["spacing.css"] = sp;
 	}
 	let twPatternTokensCss = "";
@@ -5155,7 +5657,8 @@ function build(ds, format, assetsDir, buildOpts = {}) {
 			}
 			if (typeof spec.scale === "number") body.push(`scale: ${spec.scale};`);
 			if (typeof spec.lift === "string") body.push(`translate: 0 calc(-1 * ${spec.lift});`);
-			if (typeof spec.shadow === "string" && shadows?.[spec.shadow]) body.push(`filter: drop-shadow(var(--shadow-${spec.shadow}));`);
+			if (typeof spec.shadow === "string" && shadowDrops[spec.shadow]) body.push(`filter: drop-shadow(var(${shadowDrops[spec.shadow]?.token}));`);
+			else if (typeof spec.shadow === "string" && shadows?.[spec.shadow]) console.warn(`[vitops] pattern state "shadow: ${spec.shadow}" skipped: shadows.${spec.shadow} has no \`drop\` form`);
 			else if (spec.shadow === true) body.push(`box-shadow: var(--lift-shadow, 0 8px 20px -6px rgb(0 0 0 / 0.25));`);
 			if (spec.ring === true) {
 				const ringColor = role ? `var(--color-bg-${role}-solid)` : `var(--color-border-focus)`;
@@ -5391,6 +5894,7 @@ function build(ds, format, assetsDir, buildOpts = {}) {
 				key
 			};
 			for (const role of Object.keys(typoRoles)) for (const [key, [, sfx]] of Object.entries(TYPO_KEYMAP)) reverseIndex[`--${role}-${sfx}`] = `typography.roles.${role}.${key}`;
+			for (const [path, token] of Object.entries(LAYOUT_TOKENS)) reverseIndex[token] = `layout.${path}`;
 			const pDefaults = patterns?.defaults ?? {};
 			const pRadii = patterns?.radii ?? {};
 			const pGroups = patterns?.groups ?? {};
@@ -5447,6 +5951,7 @@ function build(ds, format, assetsDir, buildOpts = {}) {
 					items
 				},
 				shadows: shadows ?? {},
+				layout: ds.layout ?? {},
 				reverseIndex
 			}, null, 2);
 		})(),
@@ -5464,7 +5969,8 @@ function build(ds, format, assetsDir, buildOpts = {}) {
 			patternsCss: pat,
 			assetsDir,
 			utilities: UTILITIES,
-			systemColorScheme: buildOpts.systemColorScheme === true
+			systemColorScheme: buildOpts.systemColorScheme === true,
+			darkOnly: buildOpts.darkOnly === true
 		}),
 		designMd: format !== "design" ? "" : emitDesignMd({
 			ds,
@@ -5497,6 +6003,12 @@ function emitTailwind(ctx) {
 	theme.push(`\n  /* Container breakpoints → @sm:/@md:/@lg:/@xl: */`);
 	for (const [name, val] of BREAKPOINTS) theme.push(`  --container-${name}: ${val};`);
 	parts.push(`@theme {\n${theme.join("\n")}\n}\n`);
+	const dropTokens = Object.entries(ds.shadows ?? {}).flatMap(([n, v]) => typeof v !== "string" && v.drop != null ? [`  --shadow-${n}-drop: ${v.drop};`] : []);
+	if (dropTokens.length) parts.push(`/* drop-shadow() forms of split shadows */\n:root {\n${dropTokens.join("\n")}\n}\n`);
+	{
+		const layoutVars = layoutDecls(ds.layout);
+		if (Object.keys(layoutVars).length) parts.push(`/* Layout tokens (from \`layout\`) */\n:root {\n${decls(layoutVars)}\n}\n`);
+	}
 	if (spaceSteps.length) parts.push(`/* Fluid space scale — var(--space-<name>) or p-(--space-<name>) */\n:root {\n` + spaceSteps.map((s) => `  --space-${s.name}: ${s.value};`).join("\n") + `\n}\n`);
 	if (scaleRoles.length) {
 		let fn = "";
@@ -5508,6 +6020,7 @@ function emitTailwind(ctx) {
 			fn += `  --surface-glass: color-mix(in oklch, var(--color-bg-surface) 72%, transparent);\n`;
 			fn += `  --overlay: color-mix(in oklch, var(--color-${surface.hue}-950) 45%, transparent);\n`;
 		}
+		if (ctx.darkOnly) fn = `  color-scheme: dark;\n${fn}`;
 		parts.push(`/* Role tokens (the public API) */\n:root {\n${fn}}\n`);
 	}
 	parts.push(`/* ── Framework tokens (consumed by the inlined components) ── */\n${twTypeTokensCss}\n${twPatternTokensCss}`);
@@ -5515,7 +6028,7 @@ function emitTailwind(ctx) {
 	for (const fr of scaleRoles) for (const [t, val] of Object.entries(fr.dark)) if (fr.light[t] !== val) darkBlock += `  ${tokenVar(fr.role, t)}: ${val};\n`;
 	{
 		const surface = scaleRoles.find((r) => r.role === "surface");
-		if (surface) darkBlock += `  --overlay: color-mix(in oklch, var(--color-${surface.hue}-950) 60%, transparent);\n`;
+		if (surface && !ctx.darkOnly) darkBlock += `  --overlay: color-mix(in oklch, var(--color-${surface.hue}-950) 60%, transparent);\n`;
 	}
 	if (darkBlock) {
 		parts.push(`/* Functional role tokens (dark) */\n${DARK_SEL} {\n  color-scheme: dark;\n${darkBlock}}\n`);
@@ -6000,7 +6513,10 @@ async function generate(options) {
 		...options.siteEnv != null ? { siteEnv: options.siteEnv } : {}
 	});
 	const config = options.site != null ? loadConfigFile(options.site, options.siteEnv) : embedded;
-	const built = build(ds, format, assetsDir, { systemColorScheme: options.systemColorScheme ?? config?.designSystem?.defaultColorScheme === "system" });
+	const built = build(ds, format, assetsDir, {
+		systemColorScheme: options.systemColorScheme ?? config?.designSystem?.defaultColorScheme === "system",
+		darkOnly: config?.designSystem?.defaultColorScheme === "dark"
+	});
 	mkdirSync(outDir, { recursive: true });
 	const written = [];
 	const put = (rel, content) => {
@@ -6013,6 +6529,7 @@ async function generate(options) {
 	else if (format === "tailwind") {
 		put("tailwind.css", built.tailwind);
 		put("tokens.json", built.tokensJson);
+		put("design-manifest.json", built.designManifest);
 	} else if (format === "css") {
 		const { code } = bundleCss(built.generated, assetsDir, true);
 		put("styles.css", code);
@@ -6444,5 +6961,5 @@ function defaultSiteConfig(opts) {
 	};
 }
 
-export { AD_PROVIDERS, BASE_HOOK, BIGIN_DATA_CENTERS, CONFIG_SCHEMA_LOCAL_PATH, CONFIG_SCHEMA_URL, CONFIG_VERSION, CONTRAST, CRM_PROVIDERS, ConfigSchema, DARK_SEL, DOC_ORDER, DOC_SLUGS, DesignSystemSchema, JURISDICTIONS, JURISDICTION_COUNTRIES, KNOWN_PROCESSORS, NUMERIC_STEPS, PLAN_CAPABILITIES, REQUIRED_ROLES, ROLE_TOKEN_KEYS, SCHEMA_LOCAL_PATH, SCHEMA_URL, SiteFontSchema, TEMPLATES, TIERS, TIER_NAMES, TW_CLASH, TYPO_KEYMAP, buildIconSprite, buildReverseIndex, checkContrast, configJsonSchema, deepMerge, defaultConfig, defaultSiteConfig, derivePolicyVars, designSystemPath, detectProcessorKeys, enabledDocs, expandPalette, experimentDimensionWarnings, formatConfig, functionalRole, generate, generateDocs, generateLegal, getAt, isConfig, jsonSchema, loadIconSvg, mergePatch, movedTokens, parseMarkdown, patchToOverrideCss, processorsMissingLocation, renderInlineMarkdown, renderMarkdown, renderNodes, renderRobotsTxt, resolveConfig, resolveInput, resolvePrivacyContact, resolveProcessors, resolveTheme, roleColorUtilities, roleHue, roleKind, schemaTreeNodes, setAt, spriteId, stripNulls, tierPatterns, tierTags, toContentNodes, toHtmlFragment, toPortableText, tokenClass, tokenVar, validate, validateColorContract, validateConfig };
+export { AD_PROVIDERS, BASE_HOOK, BIGIN_DATA_CENTERS, CONFIG_SCHEMA_LOCAL_PATH, CONFIG_SCHEMA_URL, CONFIG_VERSION, CONTRAST, CRM_PROVIDERS, ConfigSchema, DARK_SEL, DOC_ORDER, DOC_SLUGS, DesignSystemSchema, JURISDICTIONS, JURISDICTION_COUNTRIES, KNOWN_PROCESSORS, NUMERIC_STEPS, PLAN_CAPABILITIES, REQUIRED_ROLES, ROLE_TOKEN_KEYS, SCHEMA_LOCAL_PATH, SCHEMA_URL, SiteFontSchema, TEMPLATES, TIERS, TIER_NAMES, TW_CLASH, TYPO_KEYMAP, buildIconSprite, buildReverseIndex, checkContrast, configJsonSchema, deepMerge, defaultConfig, defaultSiteConfig, derivePolicyVars, designSystemPath, detectProcessorKeys, enabledDocs, expandPalette, experimentDimensionWarnings, formatConfig, functionalRole, generate, generateDocs, generateLegal, getAt, isConfig, jsonSchema, loadIconSvg, mergePatch, movedTokens, parseMarkdown, patchToOverrideCss, processorsMissingLocation, renderInlineMarkdown, renderMarkdown, renderNodes, renderRobotsTxt, resolveConfig, resolveInput, resolvePrivacyContact, resolveProcessors, resolveTheme, roleColorUtilities, roleHue, roleKind, roleSolidOptions, schemaTreeNodes, setAt, spriteId, stripNulls, tierPatterns, tierTags, toContentNodes, toHtmlFragment, toPortableText, tokenClass, tokenVar, validate, validateColorContract, validateConfig };
 //# sourceMappingURL=index.mjs.map