@spacefast/common 0.0.24 → 0.0.26

package/dist/utils/page-colors.d.ts

@@ -1,17 +1,19 @@
 import type { SpacePageTheme } from "../contracts/space-config.js";
-/** Default page palette (mirrored into the shared template CSS). */
+/** Default page palette (mirrored into the shared template CSS) — the
+ * printed-matter scheme: warm canvas, ink type, marker accent (always a
+ * ground with ink on top; the link derivation handles its text-grade). */
 export declare const PAGE_COLOR_DEFAULTS: {
-    readonly accent: "#ff4217";
-    readonly bg: "#f9f8f4";
-    readonly fg: "#1a1913";
-    readonly muted: "#6f6b62";
-    readonly card: "#f9f8f4";
-    readonly border: "#ddd9cf";
-    readonly darkBg: "#141313";
-    readonly darkFg: "#e9e7e2";
-    readonly darkMuted: "#8f8b84";
-    readonly darkCard: "#141313";
-    readonly darkBorder: "#2b2a27";
+    readonly accent: "#d8f24b";
+    readonly bg: "#f7f5ef";
+    readonly fg: "#0c0c0c";
+    readonly muted: "#6e6a5e";
+    readonly card: "#f7f5ef";
+    readonly border: "#e5e1d4";
+    readonly darkBg: "#0c0c0c";
+    readonly darkFg: "#f0eee6";
+    readonly darkMuted: "#a6a193";
+    readonly darkCard: "#0c0c0c";
+    readonly darkBorder: "#2b2823";
 };
 export type PageSchemeColors = {
     bg: string;

package/dist/utils/page-colors.js

@@ -18,19 +18,21 @@
 // Everything is pure and deterministic: publish finalize, dashboard previews,
 // and tests all call the same functions and get the same pixels.
 import { formatHex, oklch, parse, wcagContrast } from "culori";
-/** Default page palette (mirrored into the shared template CSS). */
+/** Default page palette (mirrored into the shared template CSS) — the
+ * printed-matter scheme: warm canvas, ink type, marker accent (always a
+ * ground with ink on top; the link derivation handles its text-grade). */
 export const PAGE_COLOR_DEFAULTS = {
-    accent: "#ff4217",
-    bg: "#f9f8f4",
-    fg: "#1a1913",
-    muted: "#6f6b62",
-    card: "#f9f8f4",
-    border: "#ddd9cf",
-    darkBg: "#141313",
-    darkFg: "#e9e7e2",
-    darkMuted: "#8f8b84",
-    darkCard: "#141313",
-    darkBorder: "#2b2a27",
+    accent: "#d8f24b",
+    bg: "#f7f5ef",
+    fg: "#0c0c0c",
+    muted: "#6e6a5e",
+    card: "#f7f5ef",
+    border: "#e5e1d4",
+    darkBg: "#0c0c0c",
+    darkFg: "#f0eee6",
+    darkMuted: "#a6a193",
+    darkCard: "#0c0c0c",
+    darkBorder: "#2b2823",
 };
 /** WCAG AA for body-size text. */
 const TEXT_CONTRAST = 4.5;
@@ -139,7 +141,7 @@ function schemeFromBackground(background) {
 /** The one entry point: raw theme in, everything the templates paint with out. */
 export function derivePageColors(theme) {
     const accentInput = theme.accent?.trim();
-    const accent = safeParse(accentInput) ? accentInput : PAGE_COLOR_DEFAULTS.accent;
+    const accent = accentInput && safeParse(accentInput) ? accentInput : PAGE_COLOR_DEFAULTS.accent;
     const onAccent = onAccentColor(accent);
     const background = theme.background?.trim();
     if (background && safeParse(background)) {

package/dist/utils/page-fonts.d.ts

@@ -1,2 +1,2 @@
 export declare const PAGE_FONT_FACES: string;
-export declare const PAGE_FONT_PRELOAD_HTML: string;
+export declare const PAGE_FONT_PRELOAD_HTML = "<link rel=\"preload\" href=\"https://wordpress.com/i/fonts/recoleta/400.woff2\" as=\"font\" type=\"font/woff2\" crossorigin>";

package/dist/utils/page-fonts.js

@@ -1,22 +1,15 @@
-// The platform page fonts, loaded from shared origins so every space hostname
-// reuses one warm browser-cache entry instead of a cold per-space fetch:
-// Recoleta (commercial, never committed to this repo) from wordpress.com's
-// font CDN, Haskoy from spacefast.com (apps/www/public/assets/fonts, served
-// immutable with CORS — see wwwHeaders in apps/www/src/lib/routing.mjs).
+// The platform page fonts. Recoleta is the only downloaded face (DESIGN.md
+// §4) — body and mono are system stacks, so a published page pays for exactly
+// one typeface. It is commercial, never committed to this repo, and loads from
+// wordpress.com's font CDN so every space hostname reuses one warm
+// browser-cache entry instead of a cold per-space fetch.
 // `font-display:optional` renders the fallback and never swaps mid-view when a
 // font arrives late — cached loads (everything after the first) get the brand
-// fonts with no flicker either way.
+// font with no flicker either way.
 const RECOLETA_BASE = "https://wordpress.com/i/fonts/recoleta/";
-const HASKOY_URL = "https://spacefast.com/assets/fonts/haskoy-latin-variable.woff2";
 const RECOLETA_WEIGHTS = [300, 400, 500, 600, 700];
-const faces = [
-    ...RECOLETA_WEIGHTS.map((weight) => `@font-face{font-family:"Recoleta";src:url("${RECOLETA_BASE}${weight}.woff2") format("woff2");font-style:normal;font-weight:${weight};font-display:optional}`),
-    `@font-face{font-family:"Haskoy";src:url("${HASKOY_URL}") format("woff2");font-style:normal;font-weight:100 900;font-display:optional}`,
-];
-export const PAGE_FONT_FACES = faces.join("");
-// Only the faces the default pages actually render: Recoleta 400 for headings,
-// Haskoy for everything else. Fonts are a cross-origin fetch; `crossorigin` is
-// required — font requests are CORS mode, and a mismatched preload is discarded.
-export const PAGE_FONT_PRELOAD_HTML = [`${RECOLETA_BASE}400.woff2`, HASKOY_URL]
-    .map((url) => `<link rel="preload" href="${url}" as="font" type="font/woff2" crossorigin>`)
-    .join("");
+export const PAGE_FONT_FACES = RECOLETA_WEIGHTS.map((weight) => `@font-face{font-family:"Recoleta";src:url("${RECOLETA_BASE}${weight}.woff2") format("woff2");font-style:normal;font-weight:${weight};font-display:optional}`).join("");
+// Only the face the default pages actually download: Recoleta 400 for headings.
+// Fonts are a cross-origin fetch; `crossorigin` is required — font requests are
+// CORS mode, and a mismatched preload is discarded.
+export const PAGE_FONT_PRELOAD_HTML = `<link rel="preload" href="${RECOLETA_BASE}400.woff2" as="font" type="font/woff2" crossorigin>`;

package/dist/utils/pages.d.ts

@@ -1,4 +1,5 @@
 import { type CustomPageId, type SitePageId } from "../contracts/pages.js";
+import { type DerivedPageColors } from "./page-colors.js";
 export { PAGE_PREVIEW_QUERY, previewPageHref } from "./page-preview.js";
 export type PageTheme = {
     accent?: string | undefined;
@@ -40,6 +41,18 @@ export type PageDiagnostic = {
 };
 export declare function isPagePublicPath(path: string): boolean;
 export declare function escapePageHtml(value: string): string;
+/**
+ * The custom properties a theme paints with. Pushed colors are intent; the
+ * readability engine (page-colors.ts) derives what the templates actually use.
+ * A custom background pins a complete scheme for both OS modes — emitting
+ * `--sf-bg` alone used to leave dark-mode visitors with the dark foreground on
+ * the user's light background.
+ *
+ * Exported because the dashboard's live preview paints the same tokens from an
+ * unsaved draft: it passes the colors it has already derived, and gets exactly
+ * what the published page would carry.
+ */
+export declare function pageThemeCss(theme: PageTheme, derived?: DerivedPageColors): string;
 export declare function expandPageHtml(source: string, context: PageExpansionContext): string;
 export declare function validatePageSources(input: {
     pages: Readonly<Record<string, string>>;
@@ -49,7 +62,13 @@ export declare function isCompleteHtmlDocument(source: string): boolean;
 export declare function applyPageLayout(layout: string | null, content: string, context: Omit<PageExpansionContext, "page" | "content">): string;
 export declare function inferPageThemeFromThemeJson(raw: string): Partial<PageTheme>;
 export declare function defaultPageBody(id: SitePageId): string;
-export declare const DEFAULT_PAGE_TEMPLATES: Readonly<Record<SitePageId, string>>;
+export declare const DEFAULT_PAGE_TEMPLATES: {
+    "404": string;
+    denied: string;
+    access: string;
+    index: string;
+    preview: string;
+};
 export declare const DEFAULT_LAYOUT_TEMPLATE: string;
 export declare function defaultPageTemplate(id: SitePageId): string;
 export declare function pageIdFromFilename(filename: string): CustomPageId | null;

package/dist/utils/pages.js

@@ -33,15 +33,21 @@ export function escapePageHtml(value) {
         .replaceAll('"', """)
         .replaceAll("'", "'");
 }
-// Pushed colors are intent; the readability engine (page-colors.ts) derives
-// what the templates actually paint with. A custom background pins a complete
-// scheme for both OS modes — emitting `--sf-bg` alone used to leave dark-mode
-// visitors with the dark foreground on the user's light background.
-function themeStyle(theme) {
+/**
+ * The custom properties a theme paints with. Pushed colors are intent; the
+ * readability engine (page-colors.ts) derives what the templates actually use.
+ * A custom background pins a complete scheme for both OS modes — emitting
+ * `--sf-bg` alone used to leave dark-mode visitors with the dark foreground on
+ * the user's light background.
+ *
+ * Exported because the dashboard's live preview paints the same tokens from an
+ * unsaved draft: it passes the colors it has already derived, and gets exactly
+ * what the published page would carry.
+ */
+export function pageThemeCss(theme, derived = derivePageColors(theme)) {
     const root = [];
     const dark = [];
     if (theme.accent || theme.background) {
-        const derived = derivePageColors(theme);
         // `derived.accent` is the parse-validated input (or the default), never
         // an arbitrary string straight from the theme.
         if (theme.accent)
@@ -59,7 +65,11 @@ function themeStyle(theme) {
     if (root.length === 0)
         return "";
     const darkBlock = dark.length > 0 ? `@media(prefers-color-scheme:dark){:root{${dark.join(";")}}}` : "";
-    return `<style>:root{${root.join(";")}}${darkBlock}</style>`;
+    return `:root{${root.join(";")}}${darkBlock}`;
+}
+function themeStyle(theme) {
+    const css = pageThemeCss(theme);
+    return css ? `<style>${css}</style>` : "";
 }
 const runtimeSlot = (name, fallback) => `<!--sf-runtime:${name}:start-->${fallback}<!--sf-runtime:${name}:end-->`;
 function renderFiles(files) {
@@ -84,7 +94,7 @@ function renderFile(file) {
 function renderSpacefastBranding(hidden) {
     const wordmark = hidden
         ? ""
-        : `<span class="sf-powered" tabindex="0"><svg class="sf-wordmark" viewBox="0 0 326 62" role="img" aria-label="Spacefast"><rect class="sf-wordmark-shadow" x="14" y="12" width="306" height="48"></rect><rect class="sf-wordmark-plate" x="10" y="8" width="306" height="48"></rect><path class="sf-wordmark-paper" d="${SPACEFAST_WORDMARK_PATH}"></path></svg><span class="sf-powered-line"><a href="https://spacefast.com">Best way to share what your agent made</a></span></span>`;
+        : `<span class="sf-powered" tabindex="0"><svg class="sf-wordmark" viewBox="0 0 152 28.9062" role="img" aria-label="Spacefast"><path fill="currentColor" d="${SPACEFAST_WORDMARK_PATH}"></path></svg><span class="sf-powered-line"><a href="https://spacefast.com">Best way to share what your agent made</a></span></span>`;
     return `<footer class="sf-colophon"><div class="sf-colophon-row">${wordmark}<a class="sf-help" href="https://spacefast.com/help">Need help?</a></div></footer>`;
 }
 function renderElement(element, context) {
@@ -128,6 +138,7 @@ const ELEMENT_PATTERN = /<\s*(sf-[a-z0-9-]+)\b[^>]*>(?:\s*<\s*\/\s*\1\s*>)?|<\s*
 export function expandPageHtml(source, context) {
     let output = source.replace(ELEMENT_PATTERN, (_match, paired, unary) => {
         const name = (paired ?? unary)?.toLowerCase();
+        // SAFETY: The set membership check admits only names from the PageElement literal set.
         return name && knownElements.has(name) ? renderElement(name, context) : _match;
     });
     if (output.includes("/*sf-default-fonts*/")) {
@@ -377,7 +388,7 @@ export function defaultPageBody(id) {
 // The built-in palette runs through the same readability engine as pushed
 // themes, so buttons and links remain readable for every accepted accent.
 const defaultPageColors = derivePageColors({});
-const sharedCss = `/*sf-default-fonts*/:root{color-scheme:light dark;--sf-accent:${PAGE_COLOR_DEFAULTS.accent};--sf-bg:${PAGE_COLOR_DEFAULTS.bg};--sf-fg:${PAGE_COLOR_DEFAULTS.fg};--sf-muted:${PAGE_COLOR_DEFAULTS.muted};--sf-card:${PAGE_COLOR_DEFAULTS.card};--sf-border:${PAGE_COLOR_DEFAULTS.border};--sf-link:${defaultPageColors.link};--sf-on-accent:${defaultPageColors.onAccent};--sf-error:#a82d1a;--sf-font:"Haskoy",-apple-system,BlinkMacSystemFont,ui-sans-serif,"Segoe UI",sans-serif;--sf-display-font:"Recoleta",Georgia,serif;--sf-mono:ui-monospace,"SF Mono",Menlo,Consolas,monospace}*{box-sizing:border-box}html{min-width:320px;background:var(--sf-bg);-webkit-font-smoothing:antialiased}body{margin:0;min-height:100vh;background:var(--sf-bg);color:var(--sf-fg);font:14px/1.65 var(--sf-font)}a{color:inherit}.sf-page{min-height:100vh;display:flex;flex-direction:column;padding:clamp(22px,4vw,44px)}.sf-header{display:flex;align-items:center;min-height:32px}.sf-page-center .sf-header{justify-content:center}.sf-brand{display:inline-flex;min-width:0;align-items:center;gap:10px;color:var(--sf-fg);text-decoration:none}.sf-brand-mark{width:7px;height:7px;flex:none;background:var(--sf-accent)}.sf-logo{width:28px;height:28px;flex:none;object-fit:contain}.sf-brand strong{min-width:0;overflow-wrap:anywhere;font-size:13px;font-weight:600}.sf-main{flex:1;width:100%;padding:clamp(34px,9vh,84px) 0}.sf-page-plain .sf-main{max-width:680px}.sf-page-center .sf-main{max-width:620px;margin:auto;display:flex;flex-direction:column;align-items:center;text-align:center}.sf-eyebrow{margin:0 0 14px;color:var(--sf-muted);font:500 11px/1.5 var(--sf-mono);letter-spacing:.12em;text-transform:uppercase;overflow-wrap:anywhere}.sf-page-center .sf-eyebrow{margin-bottom:16px}h1{max-width:20ch;margin:0 0 12px;color:var(--sf-fg);font:400 clamp(1.9rem,5vw,2.8rem)/1.22 var(--sf-display-font);letter-spacing:-.012em;text-wrap:balance}.sf-copy,.sf-sub{max-width:52ch;margin:0;color:var(--sf-muted);text-wrap:pretty}.sf-inline-path{font-family:var(--sf-mono);font-size:.9em;color:var(--sf-fg);overflow-wrap:anywhere}.sf-actions{display:flex;flex-wrap:wrap;align-items:center;gap:14px;margin-top:22px}.sf-page-center .sf-actions{justify-content:center}.sf-button{display:inline-flex;min-height:44px;align-items:center;justify-content:center;border:0;background:var(--sf-accent);color:var(--sf-on-accent);padding:10px 16px;font:600 13px/1.4 var(--sf-font);text-decoration:none;cursor:pointer}.sf-ghost{color:var(--sf-muted);text-underline-offset:3px}.sf-button:hover{filter:brightness(1.06)}a:focus-visible,button:focus-visible{outline:2px solid var(--sf-link);outline-offset:2px}.sf-copy+.sf-copy{margin-top:12px}.sf-files{width:100%;margin:24px 0 0;padding:0;list-style:none}.sf-files li{display:flex;min-width:0;align-items:baseline;gap:18px;border-bottom:1px solid var(--sf-border)}.sf-files a{min-width:0;flex:1;padding:10px 2px;color:var(--sf-fg);font-weight:500;text-decoration:none}.sf-files a:hover{color:var(--sf-link)}.sf-file-name{overflow-wrap:anywhere}.sf-file-size{flex:none;padding:10px 2px;color:var(--sf-muted);font:12px/1.5 var(--sf-mono);white-space:nowrap}.sf-empty{max-width:420px;margin:24px 0 0;border:1px dashed var(--sf-border);padding:18px 20px;color:var(--sf-muted)}.sf-preview-wrap{width:min(100%,560px);aspect-ratio:16/9;margin:10px 0 18px;overflow:hidden;background:#fff;outline:1px solid color-mix(in srgb,var(--sf-fg) 10%,transparent);outline-offset:-1px}.sf-preview{display:block;width:100%;height:100%;border:0;object-fit:contain}.sf-file-meta{width:min(100%,560px);margin:0}.sf-file-meta div{display:flex;min-width:0;justify-content:space-between;gap:20px;border-bottom:1px solid var(--sf-border);padding:9px 2px}.sf-file-meta dt{color:var(--sf-fg);font-weight:600}.sf-file-meta dd{min-width:0;margin:0;color:var(--sf-muted);font-family:var(--sf-mono);overflow-wrap:anywhere;text-align:right}.sf-colophon{display:flex;flex-direction:column;align-items:center;gap:10px;padding:44px 0 26px;margin-top:auto;color:var(--sf-muted)}.sf-page-plain .sf-colophon{align-items:flex-start}.sf-colophon-row{display:flex;align-items:center;gap:20px;flex-wrap:wrap}.sf-powered{display:inline-flex;align-items:center;gap:10px;cursor:pointer;outline:none}.sf-powered-line{display:none;font-size:12px;color:var(--sf-muted)}.sf-powered:hover .sf-powered-line,.sf-powered:focus .sf-powered-line,.sf-powered:focus-within .sf-powered-line{display:inline}.sf-powered-line a{color:var(--sf-link);text-decoration:underline;text-underline-offset:3px}.sf-help{font-size:12px;color:var(--sf-muted);text-decoration:underline;text-underline-offset:3px}.sf-help:hover{color:var(--sf-fg)}.sf-wordmark{display:block;flex:none;width:auto;height:11px}.sf-wordmark-shadow{fill:var(--sf-accent)}.sf-wordmark-plate{fill:#141419}.sf-wordmark-paper{fill:#fbf8f1}@media(max-width:520px){.sf-page{padding:20px}.sf-button{min-height:48px}.sf-file-meta div{flex-direction:column;gap:2px}.sf-file-meta dd{text-align:left}.sf-colophon{padding-top:32px}}@media(prefers-color-scheme:dark){:root{--sf-bg:${PAGE_COLOR_DEFAULTS.darkBg};--sf-fg:${PAGE_COLOR_DEFAULTS.darkFg};--sf-muted:${PAGE_COLOR_DEFAULTS.darkMuted};--sf-card:${PAGE_COLOR_DEFAULTS.darkCard};--sf-border:${PAGE_COLOR_DEFAULTS.darkBorder};--sf-link:${defaultPageColors.linkDark};--sf-error:#ff8a7a}.sf-preview-wrap{outline-color:#ffffff1a}}@media(forced-colors:active){.sf-brand-mark{background:CanvasText}.sf-button{border:1px solid ButtonText}.sf-powered:focus{outline:1px solid CanvasText;outline-offset:3px}}`;
+const sharedCss = `/*sf-default-fonts*/:root{color-scheme:light dark;--sf-accent:${PAGE_COLOR_DEFAULTS.accent};--sf-bg:${PAGE_COLOR_DEFAULTS.bg};--sf-fg:${PAGE_COLOR_DEFAULTS.fg};--sf-muted:${PAGE_COLOR_DEFAULTS.muted};--sf-card:${PAGE_COLOR_DEFAULTS.card};--sf-border:${PAGE_COLOR_DEFAULTS.border};--sf-link:${defaultPageColors.link};--sf-on-accent:${defaultPageColors.onAccent};--sf-error:#a82d1a;--sf-font:-apple-system,BlinkMacSystemFont,"SF Pro Text","SF Pro Display","Segoe UI",system-ui,Roboto,"Helvetica Neue",Arial,sans-serif;--sf-display-font:"Recoleta",Georgia,serif;--sf-mono:ui-monospace,"SF Mono",Menlo,Consolas,monospace}*{box-sizing:border-box}html{min-width:320px;background:var(--sf-bg);-webkit-font-smoothing:antialiased}body{margin:0;min-height:100vh;background:var(--sf-bg);color:var(--sf-fg);font:14px/1.65 var(--sf-font)}a{color:inherit}.sf-page{min-height:100vh;display:flex;flex-direction:column;padding:clamp(22px,4vw,44px)}.sf-header{display:flex;align-items:center;min-height:32px}.sf-page-center .sf-header{justify-content:center}.sf-brand{display:inline-flex;min-width:0;align-items:center;gap:10px;color:var(--sf-fg);text-decoration:none}.sf-brand-mark{width:7px;height:7px;flex:none;background:var(--sf-accent)}.sf-logo{width:28px;height:28px;flex:none;object-fit:contain}.sf-brand strong{min-width:0;overflow-wrap:anywhere;font-size:13px;font-weight:600}.sf-main{flex:1;width:100%;padding:clamp(34px,9vh,84px) 0}.sf-page-plain .sf-main{max-width:680px}.sf-page-center .sf-main{max-width:620px;margin:auto;display:flex;flex-direction:column;align-items:center;text-align:center}.sf-eyebrow{margin:0 0 14px;color:var(--sf-muted);font:500 11px/1.5 var(--sf-mono);letter-spacing:.12em;text-transform:uppercase;overflow-wrap:anywhere}.sf-page-center .sf-eyebrow{margin-bottom:16px}h1{max-width:20ch;margin:0 0 12px;color:var(--sf-fg);font:400 clamp(1.9rem,5vw,2.8rem)/1.22 var(--sf-display-font);letter-spacing:-.012em;text-wrap:balance}.sf-copy,.sf-sub{max-width:52ch;margin:0;color:var(--sf-muted);text-wrap:pretty}.sf-inline-path{font-family:var(--sf-mono);font-size:.9em;color:var(--sf-fg);overflow-wrap:anywhere}.sf-actions{display:flex;flex-wrap:wrap;align-items:center;gap:14px;margin-top:22px}.sf-page-center .sf-actions{justify-content:center}.sf-button{display:inline-flex;min-height:44px;align-items:center;justify-content:center;border:0;background:var(--sf-accent);color:var(--sf-on-accent);padding:10px 16px;font:600 13px/1.4 var(--sf-font);text-decoration:none;cursor:pointer}.sf-ghost{color:var(--sf-muted);text-underline-offset:3px}.sf-button:hover{filter:brightness(1.06)}a:focus-visible,button:focus-visible{outline:2px solid var(--sf-link);outline-offset:2px}.sf-copy+.sf-copy{margin-top:12px}.sf-files{width:100%;margin:24px 0 0;padding:0;list-style:none}.sf-files li{display:flex;min-width:0;align-items:baseline;gap:18px;border-bottom:1px solid var(--sf-border)}.sf-files a{min-width:0;flex:1;padding:10px 2px;color:var(--sf-fg);font-weight:500;text-decoration:none}.sf-files a:hover{color:var(--sf-link)}.sf-file-name{overflow-wrap:anywhere}.sf-file-size{flex:none;padding:10px 2px;color:var(--sf-muted);font:12px/1.5 var(--sf-mono);white-space:nowrap}.sf-empty{max-width:420px;margin:24px 0 0;border:1px dashed var(--sf-border);padding:18px 20px;color:var(--sf-muted)}.sf-preview-wrap{width:min(100%,560px);aspect-ratio:16/9;margin:10px 0 18px;overflow:hidden;background:#fff;outline:1px solid color-mix(in srgb,var(--sf-fg) 10%,transparent);outline-offset:-1px}.sf-preview{display:block;width:100%;height:100%;border:0;object-fit:contain}.sf-file-meta{width:min(100%,560px);margin:0}.sf-file-meta div{display:flex;min-width:0;justify-content:space-between;gap:20px;border-bottom:1px solid var(--sf-border);padding:9px 2px}.sf-file-meta dt{color:var(--sf-fg);font-weight:600}.sf-file-meta dd{min-width:0;margin:0;color:var(--sf-muted);font-family:var(--sf-mono);overflow-wrap:anywhere;text-align:right}.sf-colophon{display:flex;flex-direction:column;align-items:center;gap:10px;padding:44px 0 26px;margin-top:auto;color:var(--sf-muted)}.sf-page-plain .sf-colophon{align-items:flex-start}.sf-colophon-row{display:flex;align-items:center;gap:20px;flex-wrap:wrap}.sf-powered{display:inline-flex;align-items:center;gap:10px;cursor:pointer;outline:none}.sf-powered-line{display:none;font-size:12px;color:var(--sf-muted)}.sf-powered:hover .sf-powered-line,.sf-powered:focus .sf-powered-line,.sf-powered:focus-within .sf-powered-line{display:inline}.sf-powered-line a{color:var(--sf-link);text-decoration:underline;text-underline-offset:3px}.sf-help{font-size:12px;color:var(--sf-muted);text-decoration:underline;text-underline-offset:3px}.sf-help:hover{color:var(--sf-fg)}.sf-wordmark{display:block;flex:none;width:auto;height:14px;color:var(--sf-fg)}@media(max-width:520px){.sf-page{padding:20px}.sf-button{min-height:48px}.sf-file-meta div{flex-direction:column;gap:2px}.sf-file-meta dd{text-align:left}.sf-colophon{padding-top:32px}}@media(prefers-color-scheme:dark){:root{--sf-bg:${PAGE_COLOR_DEFAULTS.darkBg};--sf-fg:${PAGE_COLOR_DEFAULTS.darkFg};--sf-muted:${PAGE_COLOR_DEFAULTS.darkMuted};--sf-card:${PAGE_COLOR_DEFAULTS.darkCard};--sf-border:${PAGE_COLOR_DEFAULTS.darkBorder};--sf-link:${defaultPageColors.linkDark};--sf-error:#ff8a7a}.sf-preview-wrap{outline-color:#ffffff1a}}@media(forced-colors:active){.sf-brand-mark{background:CanvasText}.sf-button{border:1px solid ButtonText}.sf-powered:focus{outline:1px solid CanvasText;outline-offset:3px}}`;
 const accessCss = `.sf-page.access .sf-main{max-width:26rem;padding:clamp(42px,8vh,72px) 0}.sf-page.access h1{max-width:18ch;margin-bottom:14px;font:600 clamp(2rem,7vw,2.65rem)/1.12 var(--sf-font);letter-spacing:-.035em}.sf-page.access .sf-copy{font-size:15px;line-height:1.6}.sf-access-default{display:flex;width:100%;flex-direction:column;align-items:center}.sf-access-status{padding:10px 12px;border:1px solid color-mix(in srgb,var(--sf-fg) 10%,transparent);border-radius:8px;background:color-mix(in srgb,var(--sf-fg) 4%,transparent);color:var(--sf-fg)}.sf-access-lanes{display:flex;flex-direction:column;gap:16px;width:min(23rem,100%);margin-top:30px;text-align:left}.sf-access-lanes form{display:flex;flex-direction:column;gap:14px;margin:0}.sf-input{box-sizing:border-box;width:100%;min-height:46px;padding:11px 12px;border:1px solid color-mix(in srgb,var(--sf-fg) 18%,transparent);border-radius:8px;outline:2px solid transparent;outline-offset:-1px;background:color-mix(in srgb,var(--sf-bg) 92%,var(--sf-fg));color:var(--sf-fg);font:500 15px/1.45 var(--sf-font);appearance:none}.sf-input::placeholder{color:color-mix(in srgb,var(--sf-muted) 82%,transparent);font:inherit}.sf-input:hover{border-color:color-mix(in srgb,var(--sf-fg) 34%,transparent)}.sf-input:focus-visible{border-color:var(--sf-accent);outline-color:var(--sf-accent)}textarea.sf-input{min-height:92px;resize:vertical}.sf-label{color:var(--sf-fg);font:600 13px/1.4 var(--sf-font)}.sf-access-lanes .sf-button{width:100%;min-height:46px;border-radius:8px}.sf-access-or{display:flex;align-items:center;gap:12px;color:var(--sf-muted);font-size:13px}.sf-access-or:before,.sf-access-or:after{content:"";flex:1;border-top:1px solid color-mix(in srgb,var(--sf-fg) 12%,transparent)}.sf-error{margin:0;color:var(--sf-error);font-size:14px}.sf-access-password-row{display:flex;gap:8px}.sf-access-password-row .sf-input{min-width:0;flex:1}.sf-access-password-row .sf-button{width:auto;flex:none}.sf-access-request{padding-top:2px}.sf-access-request summary{padding:4px 0;cursor:pointer;color:var(--sf-muted);font:550 14px/1.5 var(--sf-font)}.sf-access-request summary:hover{color:var(--sf-fg)}.sf-access-request[open] summary{color:var(--sf-fg)}.sf-access-request form{margin-top:16px}@media(max-width:520px){.sf-page.access .sf-main{padding:38px 0}.sf-page.access h1{font-size:2rem}.sf-page.access .sf-copy{font-size:16px}.sf-input{min-height:48px;font-size:16px}.sf-access-lanes .sf-button{min-height:48px}.sf-access-password-row{flex-direction:column}.sf-access-password-row .sf-button{width:100%}}@media(prefers-color-scheme:dark){.sf-access-status{background:color-mix(in srgb,var(--sf-fg) 5%,transparent)}}`;
 const pageHeader = '<header class="sf-header"><a class="sf-brand" href="/" aria-label="Homepage"><span class="sf-brand-mark" aria-hidden="true"></span><sf-logo></sf-logo><strong><sf-name></sf-name></strong></a></header>';
 const pageFooter = "<sf-spacefast-branding></sf-spacefast-branding>";
@@ -400,8 +411,10 @@ export function defaultPageTemplate(id) {
 }
 export function pageIdFromFilename(filename) {
     const id = filename.replace(/\.html$/, "");
+    // SAFETY: The set membership check admits only ids from the CustomPageId literal set.
     return customPageIds.has(id) ? id : null;
 }
 export function allDefaultPageTemplates() {
+    // SAFETY: SITE_PAGE_IDS maps every SitePageId to its corresponding default template entry.
     return Object.fromEntries(SITE_PAGE_IDS.map((id) => [id, DEFAULT_PAGE_TEMPLATES[id]]));
 }

package/dist/utils/publish-policy.d.ts

@@ -25,6 +25,13 @@ export declare function normalizePublishPath(relativePath: string): string;
  * could mint its own tokens.
  */
 export declare const PUBLISHABLE_BUILD_ARTIFACT_PREFIX = "__spacefast/functions/bundles/";
+/**
+ * The bundle carve-out's sibling for the Next-cache seed document: the same
+ * reasoning (travel through the ordinary manifest and upload path, stay
+ * unservable by default), the same deliberate narrowness (a prefix of its
+ * own, never the whole `functions/` directory — see the bundle comment).
+ */
+export declare const PUBLISHABLE_SEED_ARTIFACT_PREFIX = "__spacefast/functions/seeds/";
 export declare function publishPathIgnored(relativePath: string): boolean;
 export declare function publishPathIsConvention(relativePath: string): boolean;
 export declare function providerRuntimeFeatureWarnings(paths: readonly string[]): PublishManifestWarning[];

package/dist/utils/publish-policy.fixtures.json

@@ -146,6 +146,16 @@
         "path": "__spacefast/functions/bundlesX/evil.json",
         "expected": "static_runtime_control_path_not_supported"
     },
+    {
+        "path": "__spacefast/functions/seeds/abc123/seed.json",
+        "expected": null,
+        "why": "the Next-cache seed document, the bundle carve-out's sibling"
+    },
+    {
+        "path": "__spacefast/functions/seeds.json",
+        "expected": "static_runtime_control_path_not_supported",
+        "why": "the carve-out is the seeds/ prefix, not anything starting with seeds"
+    },
     {
         "path": "__spacefast/zero/deploy.json",
         "expected": null,
@@ -201,10 +211,6 @@
         "path": "engine-manifest.json",
         "expected": "static_runtime_control_path_not_supported"
     },
-    {
-        "path": "entrypoint-shim.php",
-        "expected": "static_runtime_control_path_not_supported"
-    },
     {
         "path": "nested/custom-redirects.php",
         "expected": null,
@@ -213,7 +219,7 @@
     {
         "path": "init.php",
         "expected": null,
-        "why": "engine/init.php installs under .stattic/engine/, not the docroot"
+        "why": "engine/init.php installs inside an immutable release, not the docroot"
     },
     {
         "path": ".spacefast/storage/routes/current.php",

package/dist/utils/publish-policy.js

@@ -2,7 +2,7 @@ import { BRAND } from "../brand.js";
 import { WORST_CASE_QUOTAS } from "../contracts/quotas.js";
 import { SPACE_CONFIG_PRIVATE_FILES } from "../contracts/space-config.js";
 import { ZERO_RUNTIME_DEPLOY_PATH } from "../contracts/zero.js";
-// The ONE static publish policy (internal-docs/platform.md "Upload Contract"):
+// The ONE static publish policy (the platform spec "Upload Contract"):
 // path denials, manifest scale caps, plan caps, duplicate detection, and the
 // free-plan content rules live here. Consumed by API manifest validation, CLI
 // local preflight, inline archive extraction, and the runtime parity fixtures
@@ -112,6 +112,13 @@ export function normalizePublishPath(relativePath) {
  * could mint its own tokens.
  */
 export const PUBLISHABLE_BUILD_ARTIFACT_PREFIX = "__spacefast/functions/bundles/";
+/**
+ * The bundle carve-out's sibling for the Next-cache seed document: the same
+ * reasoning (travel through the ordinary manifest and upload path, stay
+ * unservable by default), the same deliberate narrowness (a prefix of its
+ * own, never the whole `functions/` directory — see the bundle comment).
+ */
+export const PUBLISHABLE_SEED_ARTIFACT_PREFIX = "__spacefast/functions/seeds/";
 /**
  * The one FILE inside the control prefix a publish may write.
  *
@@ -127,6 +134,7 @@ export const PUBLISHABLE_BUILD_ARTIFACT_PREFIX = "__spacefast/functions/bundles/
  */
 function isPublishableBuildArtifactPath(normalizedPath, lowerPath) {
     return (lowerPath.startsWith(PUBLISHABLE_BUILD_ARTIFACT_PREFIX) ||
+        lowerPath.startsWith(PUBLISHABLE_SEED_ARTIFACT_PREFIX) ||
         normalizedPath === ZERO_RUNTIME_DEPLOY_PATH);
 }
 export function publishPathIgnored(relativePath) {

package/dist/utils/query-keys.d.ts

@@ -6,10 +6,10 @@ export declare const qk: {
     accountInvitations: () => readonly ["account", "invitations"];
     apiTokens: (teamId?: string) => readonly ["api-tokens"] | readonly ["api-tokens", string];
     agentAccounts: (teamId: string) => readonly ["agent-accounts", string];
-    myShelf: () => readonly ["my-shelf"];
     mcpDashboard: (teamId: string) => readonly ["mcp", "dashboard", string];
     teams: () => readonly ["teams", "list"];
     team: (ref: string) => readonly ["teams", "by-ref", string];
+    teamDetail: (id: string) => readonly ["teams", string, "detail"];
     teamMembers: (id: string) => readonly ["teams", string, "members"];
     teamInvites: (id: string) => readonly ["teams", string, "invites"];
     teamBilling: (id: string) => readonly ["teams", string, "billing"];
@@ -41,7 +41,7 @@ export declare const qk: {
     spaceBuilds: (id: string) => readonly ["spaces", string, "builds"];
     spaceRepositoryConnection: (id: string, connectionType?: string) => readonly ["spaces", string, "repository-connection", string];
     repositoryInstallations: (spaceId: string) => readonly ["spaces", string, "repository-installations"];
-    repositoryInstallationRepositories: (installationId: string) => readonly ["repository-connections", "installations", string, "repositories"];
+    repositoryInstallationRepositories: (spaceId: string, installationId: string) => readonly ["spaces", string, "repository-installations", string, "repositories"];
     spaceRepositoryAnalyze: (id: string, connectionType?: string, ref?: string, root?: string) => readonly ["spaces", string, "repository-connection", string, "analyze", string, string];
     spaceRepositoryWebhookDeliveries: (id: string, connectionType?: string) => readonly ["spaces", string, "repository-webhook-deliveries", string];
     teamWebhooks: (teamId: string) => readonly ["teams", string, "webhooks"];
@@ -54,7 +54,7 @@ export declare const qk: {
     spaceVersionFileUrlPreview: (id: string, versionId: string, path: string) => readonly ["spaces", string, "versions", string, "files", string, "url-preview"];
     spaceVersionFileDiff: (id: string, versionId: string, baseVersionId?: string) => readonly ["spaces", string, "versions", string, "files", "diff", string];
     spaceVersionConventionArtifacts: (id: string, versionId: string) => readonly ["spaces", string, "versions", string, "convention-artifacts"];
-    spaceVersionConventionArtifact: (id: string, versionId: string, kind: "redirects" | "headers") => readonly ["spaces", string, "versions", string, "convention-artifacts", "redirects" | "headers"];
+    spaceVersionConventionArtifact: (id: string, versionId: string, kind: "redirects" | "headers") => readonly ["spaces", string, "versions", string, "convention-artifacts", "headers" | "redirects"];
     spaceVersionRoutingSummary: (id: string, versionId: string) => readonly ["spaces", string, "versions", string, "routing-summary"];
     spaceDiagnostics: (id: string) => readonly ["spaces", string, "diagnostics"];
     spaceDomains: (id: string) => readonly ["spaces", string, "domains"];
@@ -67,7 +67,7 @@ export declare const qk: {
     spaceRuntimeRealtimeEvents: (id: string, limit: number) => readonly ["spaces", string, "runtime", "realtime", "events", number];
     spaceVariables: (id: string) => readonly ["spaces", string, "variables"];
     spaceCertificates: (id: string) => readonly ["spaces", string, "runtime", "certificates"];
-    spaceLogs: (id: string, kind: "build" | "access" | "runtime") => readonly ["spaces", string, "logs", "build" | "runtime" | "access"];
+    spaceLogs: (id: string, kind: "build" | "access" | "runtime") => readonly ["spaces", string, "logs", "build" | "access" | "runtime"];
     spaceAnalytics: (id: string, window: string) => readonly ["spaces", string, "analytics", string];
     teamAgentHandoffs: (teamId: string) => readonly ["teams", string, "agent-handoffs"];
     teamAccessDefaults: (teamId: string) => readonly ["teams", string, "access", "defaults"];

package/dist/utils/query-keys.js

@@ -8,13 +8,13 @@ export const qk = {
     // teamId yields the bare prefix (personal scope, and invalidate-all sweeps).
     apiTokens: (teamId) => teamId === undefined ? ["api-tokens"] : ["api-tokens", teamId],
     agentAccounts: (teamId) => ["agent-accounts", teamId],
-    myShelf: () => ["my-shelf"],
     mcpDashboard: (teamId) => ["mcp", "dashboard", teamId],
     // The teams LIST gets its own leaf so invalidating it never cascades into
     // ["teams", id, ...] resource queries (members, spaces, domains, ...).
     teams: () => ["teams", "list"],
     // Keyed by slug (the URL ref), so it lives outside the id namespace.
     team: (ref) => ["teams", "by-ref", ref],
+    teamDetail: (id) => ["teams", id, "detail"],
     teamMembers: (id) => ["teams", id, "members"],
     teamInvites: (id) => ["teams", id, "invites"],
     teamBilling: (id) => ["teams", id, "billing"],
@@ -55,7 +55,7 @@ export const qk = {
     spaceBuilds: (id) => ["spaces", id, "builds"],
     spaceRepositoryConnection: (id, connectionType = "connected") => ["spaces", id, "repository-connection", connectionType],
     repositoryInstallations: (spaceId) => [...qk.space(spaceId), "repository-installations"],
-    repositoryInstallationRepositories: (installationId) => ["repository-connections", "installations", installationId, "repositories"],
+    repositoryInstallationRepositories: (spaceId, installationId) => [...qk.space(spaceId), "repository-installations", installationId, "repositories"],
     spaceRepositoryAnalyze: (id, connectionType = "connected", ref = "", root = "") => ["spaces", id, "repository-connection", connectionType, "analyze", ref, root],
     spaceRepositoryWebhookDeliveries: (id, connectionType = "connected") => ["spaces", id, "repository-webhook-deliveries", connectionType],
     teamWebhooks: (teamId) => ["teams", teamId, "webhooks"],

package/dist/utils/runtime-upload.d.ts

@@ -4,6 +4,11 @@ export declare function runtimeUploadFetchUrl(input: {
     uploadId: string;
     path: string;
 }): string;
+export declare function runtimeUploadFileUrl(input: {
+    baseUrl: string;
+    uploadId: string;
+    path: string;
+}): string;
 export declare function runtimeUploadBlobUrl(input: {
     baseUrl: string;
     spaceId: string;

package/dist/utils/runtime-upload.js

@@ -15,6 +15,13 @@ export function runtimeUploadFetchUrl(input) {
         path: runtimeUploadCanonicalPath(input.path),
     }), input.baseUrl).toString();
 }
+export function runtimeUploadFileUrl(input) {
+    return new URL(runtimeUploadPath({
+        op: "file",
+        upload_id: input.uploadId,
+        path: runtimeUploadCanonicalPath(input.path),
+    }), input.baseUrl).toString();
+}
 export function runtimeUploadBlobUrl(input) {
     return new URL(runtimeUploadPath({
         route: `/spaces/${encodeURIComponent(input.spaceId)}/blobs/${encodeURIComponent(input.sha256)}`,

package/dist/utils/secure-local-file.js

@@ -273,7 +273,6 @@ function lockName(leaf) {
     const digest = createHash("sha256").update(identity).digest("hex").slice(0, 24);
     return `.spacefast-${digest}.lock`;
 }
-const LEGACY_LEAF_LOCK_STALE_MS = 2 * 60_000;
 function serializeLeafLockOwner(owner) {
     const { phase, ...identity } = owner;
     return `${phase === "active" ? "A" : "R"}${JSON.stringify(identity)}\n`;
@@ -293,6 +292,7 @@ function parseLeafLockOwner(raw) {
             (value.temporaryName === undefined ||
                 (typeof value.temporaryName === "string" &&
                     /^\.spacefast-[0-9a-f-]{36}\.tmp$/.test(value.temporaryName)))) {
+            // SAFETY: The preceding checks establish every required LeafLockOwner field and the optional temporaryName field.
             return { ...value, phase };
         }
     }
@@ -360,14 +360,8 @@ function processIsAlive(pid) {
     }
 }
 async function leafLockRecordIsStale(record) {
-    // The original lock format was an empty exclusive file. It carries no owner
-    // identity, so a short age fence is the only safe compatibility signal: a
-    // fresh legacy writer stays exclusive, while crash wreckage can recover.
-    if (record?.kind === "legacy") {
-        return Date.now() - record.modifiedAtMs > LEGACY_LEAF_LOCK_STALE_MS;
-    }
-    // A malformed non-empty record is not proof that no writer owns it. New lock
-    // records are atomically published, so corruption still needs explicit recovery.
+    // A malformed record is not proof that no writer owns it. New lock records are
+    // atomically published, so corruption still needs explicit recovery.
     if (record?.kind !== "owned")
         return false;
     const { owner } = record;
@@ -399,13 +393,8 @@ async function readLeafLockRecord(filePath) {
             visibleMetadata.ino !== metadata.ino) {
             return { kind: "invalid" };
         }
-        const raw = await file.readFile("utf8");
-        const owner = parseLeafLockOwner(raw);
-        if (owner)
-            return { kind: "owned", owner };
-        return raw.length === 0
-            ? { kind: "legacy", modifiedAtMs: metadata.mtimeMs }
-            : { kind: "invalid" };
+        const owner = parseLeafLockOwner(await file.readFile("utf8"));
+        return owner ? { kind: "owned", owner } : { kind: "invalid" };
     }
     finally {
         await file.close();

package/dist/utils/space-config.d.ts

@@ -3,7 +3,7 @@ import { type SpaceConfig, type SpaceConfigFile } from "../contracts/space-confi
 export type SpaceConfigBlockingIssueCode = "config_file_too_large" | "config_templates_over_limit" | "config_meta_too_long" | "config_name_too_long" | "config_functions_key_removed" | "config_invalid" | "config_runtime_invalid_kind" | "config_runtime_entry_missing" | "inject_snippet_too_large" | "inject_invalid";
 export type SpaceConfigIssue = {
     severity: "info" | "warning" | "error";
-    code: SpaceConfigBlockingIssueCode | "single_html_index" | "files_mode_inferred";
+    code: SpaceConfigBlockingIssueCode | "single_html_index" | "files_mode_inferred" | "listing_shadows_fallback";
     message: string;
     /** JSON-path-lite pointer into the config shape (e.g. `meta.title`). */
     path?: string;

package/dist/utils/space-config.js

@@ -57,6 +57,7 @@ function capIssues(candidate) {
         }
         else {
             for (const key of ["head", "bodyStart", "bodyEnd", "noscript"]) {
+                // SAFETY: The enclosing branch proves inject is a non-null, non-array object.
                 const snippets = inject[key];
                 if (snippets === undefined) {
                     continue;
@@ -174,6 +175,7 @@ export function stripJsonComments(raw) {
     let inLineComment = false;
     let inBlockComment = false;
     for (let i = 0; i < raw.length; i += 1) {
+        // SAFETY: The loop condition proves i addresses a character in raw.
         const char = raw[i];
         const next = raw[i + 1];
         if (inLineComment) {
@@ -220,6 +222,7 @@ export function stripJsonComments(raw) {
             // Trailing comma: skip when the next non-whitespace/non-comment char closes.
             let j = i + 1;
             while (j < raw.length) {
+                // SAFETY: The loop condition proves j addresses a character in raw.
                 const ahead = raw[j];
                 if (/\s/.test(ahead)) {
                     j += 1;

package/dist/utils/static-runtime-policy.d.ts

@@ -5,14 +5,20 @@ export declare const PLATFORM_MANAGED_RESPONSE_HEADERS: string[];
 export declare const PLATFORM_MANAGED_RESPONSE_HEADER_PREFIXES: string[];
 /** True when user rules may neither set nor remove this response header. */
 export declare function isPlatformManagedResponseHeader(name: string): boolean;
-export declare const NON_IMMUTABLE_EXTENSIONS: string[];
-export declare const GUARANTEED_IMMUTABLE_PREFIXES: string[];
+/**
+ * The token grammar a `_headers` rule accepts for a header NAME. The routing
+ * compiler enforces it; anything that GENERATES `_headers` rules (the Next
+ * materializer's framework sections) must gate on the same pattern, so a
+ * generated rule can never fail the author's publish.
+ */
+export declare const HEADER_RULE_NAME_PATTERN: RegExp;
+/** `content-type` → `Content-Type`: the casing compiled rules and generated `_headers` carry. */
+export declare function canonicalHeaderName(input: string): string;
 /** Lowercased extension without the leading dot, posix semantics. Dotfiles have no extension. */
 export declare function pathExtension(filePath: string): string;
 /** Basename without its extension (the "stem"), posix semantics. */
 export declare function pathStem(filePath: string): string;
 export declare function isPhpLikeStaticPath(filePath: string): boolean;
-export declare function isImmutableAssetPath(filePath: string): boolean;
 /** Forced inert serving policy for a committed static file. PHP-like files are never executable. */
 export declare function runtimeFileSafety(filePath: string): {
     executable: false;