@spacefast/common 0.0.24 → 0.2.1

package/dist/utils/page-colors.js

@@ -1,44 +1,27 @@
-// Readability engine for Spacefast-authored pages.
-//
-// Theme colors are intent, not CSS: users and agents push any accent or
-// background (dashboard, spacefast.jsonc, API) and the platform guarantees
-// every rendered page stays readable. This module derives the full set of
-// colors the templates actually paint with:
-//
-//   - `onAccent`  — button-label color on accent fills (black or white).
-//   - `link`      — the accent, lightness-adjusted until it meets WCAG AA
-//                   against the surface it sits on. Hue and chroma survive,
-//                   so it still reads as the brand color.
-//   - `pinned`    — when a background is set, a complete coherent scheme
-//                   (fg/muted/surface/border) derived from it and pinned for
-//                   every visitor. A chosen background IS the page; the
-//                   visitor's OS dark-mode setting must not repaint half the
-//                   variables into an unreadable hybrid.
-//
-// Everything is pure and deterministic: publish finalize, dashboard previews,
-// and tests all call the same functions and get the same pixels.
+// Readability engine for Spacefast-authored pages. Users and agents push any
+// accent or background; this module derives the colors the templates paint
+// with so every page meets WCAG AA. A pushed background pins a whole scheme,
+// because the visitor's OS dark-mode setting must not repaint half the
+// variables into an unreadable hybrid.
 import { formatHex, oklch, parse, wcagContrast } from "culori";
-/** Default page palette (mirrored into the shared template CSS). */
+/** Default page palette, mirrored into the shared template CSS. */
 export const PAGE_COLOR_DEFAULTS = {
-    accent: "#ff4217",
-    bg: "#f9f8f4",
-    fg: "#1a1913",
-    muted: "#6f6b62",
-    card: "#f9f8f4",
-    border: "#ddd9cf",
-    darkBg: "#141313",
-    darkFg: "#e9e7e2",
-    darkMuted: "#8f8b84",
-    darkCard: "#141313",
-    darkBorder: "#2b2a27",
+    accent: "#d8f24b",
+    bg: "#f7f5ef",
+    fg: "#0c0c0c",
+    muted: "#6e6a5e",
+    card: "#f7f5ef",
+    border: "#e5e1d4",
+    darkBg: "#0c0c0c",
+    darkFg: "#f0eee6",
+    darkMuted: "#a6a193",
+    darkCard: "#0c0c0c",
+    darkBorder: "#2b2823",
 };
-/** WCAG AA for body-size text. */
+// WCAG AA: 4.5 for text, 3 for non-text control boundaries.
 const TEXT_CONTRAST = 4.5;
-/** Body-size button labels on accent fills. */
 const UI_CONTRAST = 4.5;
-/** Essential control boundaries against their painted surface. */
 const CONTROL_CONTRAST = 3;
-/** Primary foreground meets AA even on mid-tone custom backgrounds. */
 const FG_CONTRAST = 4.5;
 function safeParse(value) {
     if (!value)
@@ -57,10 +40,9 @@ function isLightSurface(surface) {
     return contrast("#000000", surface) >= contrast("#ffffff", surface);
 }
 /**
- * Return `color` unchanged when it already meets `target` on `surface`;
- * otherwise move its OKLCH lightness (hue/chroma preserved) just far enough
- * to meet it. Falls back to plain black/white when even full lightness range
- * cannot reach the target (e.g. a mid-gray surface).
+ * Moves `color`'s OKLCH lightness (hue and chroma preserved) just far enough
+ * to meet `target` on `surface`. Falls back to black or white when the full
+ * lightness range cannot reach it, as on a mid-gray surface.
  */
 export function readableOn(color, surface, target) {
     if (contrast(color, surface) >= target)
@@ -76,8 +58,7 @@ export function readableOn(color, surface, target) {
     if (contrast(atLimit, surface) < target) {
         return isLightSurface(surface) ? "#000000" : "#ffffff";
     }
-    // Binary search for the lightness closest to the original that still meets
-    // the target; contrast is monotonic in lightness on a fixed surface side.
+    // Contrast is monotonic in lightness on a fixed surface side.
     let searchLimit = limit;
     let searchStart = base.l;
     for (let i = 0; i < 24; i += 1) {
@@ -91,14 +72,12 @@ export function readableOn(color, surface, target) {
     }
     return formatHex({ ...base, l: searchLimit });
 }
-/** Button-label color for an accent fill: white when it can carry, else ink. */
 export function onAccentColor(accent) {
     return contrast("#ffffff", accent) >= UI_CONTRAST ? "#ffffff" : "#000000";
 }
 function clamp(value, min, max) {
     return Math.min(max, Math.max(min, value));
 }
-/** Derive a complete coherent scheme from a pushed background color. */
 function schemeFromBackground(background) {
     const parsed = safeParse(background);
     const bg = parsed ? formatHex(parsed) : PAGE_COLOR_DEFAULTS.bg;
@@ -136,10 +115,9 @@ function schemeFromBackground(background) {
         },
     };
 }
-/** The one entry point: raw theme in, everything the templates paint with out. */
 export function derivePageColors(theme) {
     const accentInput = theme.accent?.trim();
-    const accent = safeParse(accentInput) ? accentInput : PAGE_COLOR_DEFAULTS.accent;
+    const accent = accentInput && safeParse(accentInput) ? accentInput : PAGE_COLOR_DEFAULTS.accent;
     const onAccent = onAccentColor(accent);
     const background = theme.background?.trim();
     if (background && safeParse(background)) {

package/dist/utils/page-fonts.d.ts

@@ -1,2 +1,2 @@
 export declare const PAGE_FONT_FACES: string;
-export declare const PAGE_FONT_PRELOAD_HTML: string;
+export declare const PAGE_FONT_PRELOAD_HTML = "<link rel=\"preload\" href=\"https://wordpress.com/i/fonts/recoleta/400.woff2\" as=\"font\" type=\"font/woff2\" crossorigin>";

package/dist/utils/page-fonts.js

@@ -1,22 +1,10 @@
-// The platform page fonts, loaded from shared origins so every space hostname
-// reuses one warm browser-cache entry instead of a cold per-space fetch:
-// Recoleta (commercial, never committed to this repo) from wordpress.com's
-// font CDN, Haskoy from spacefast.com (apps/www/public/assets/fonts, served
-// immutable with CORS — see wwwHeaders in apps/www/src/lib/routing.mjs).
-// `font-display:optional` renders the fallback and never swaps mid-view when a
-// font arrives late — cached loads (everything after the first) get the brand
-// fonts with no flicker either way.
+// Recoleta is the only downloaded face (DESIGN.md §4); body and mono are system
+// stacks. It is commercial, never committed to this repo, and loads from
+// wordpress.com's font CDN so every space hostname shares one cache entry.
+// `font-display:optional` never swaps mid-view when a font arrives late.
 const RECOLETA_BASE = "https://wordpress.com/i/fonts/recoleta/";
-const HASKOY_URL = "https://spacefast.com/assets/fonts/haskoy-latin-variable.woff2";
 const RECOLETA_WEIGHTS = [300, 400, 500, 600, 700];
-const faces = [
-    ...RECOLETA_WEIGHTS.map((weight) => `@font-face{font-family:"Recoleta";src:url("${RECOLETA_BASE}${weight}.woff2") format("woff2");font-style:normal;font-weight:${weight};font-display:optional}`),
-    `@font-face{font-family:"Haskoy";src:url("${HASKOY_URL}") format("woff2");font-style:normal;font-weight:100 900;font-display:optional}`,
-];
-export const PAGE_FONT_FACES = faces.join("");
-// Only the faces the default pages actually render: Recoleta 400 for headings,
-// Haskoy for everything else. Fonts are a cross-origin fetch; `crossorigin` is
-// required — font requests are CORS mode, and a mismatched preload is discarded.
-export const PAGE_FONT_PRELOAD_HTML = [`${RECOLETA_BASE}400.woff2`, HASKOY_URL]
-    .map((url) => `<link rel="preload" href="${url}" as="font" type="font/woff2" crossorigin>`)
-    .join("");
+export const PAGE_FONT_FACES = RECOLETA_WEIGHTS.map((weight) => `@font-face{font-family:"Recoleta";src:url("${RECOLETA_BASE}${weight}.woff2") format("woff2");font-style:normal;font-weight:${weight};font-display:optional}`).join("");
+// Only the weight the default pages render. `crossorigin` is required: font
+// requests are CORS mode, and a mismatched preload is discarded.
+export const PAGE_FONT_PRELOAD_HTML = `<link rel="preload" href="${RECOLETA_BASE}400.woff2" as="font" type="font/woff2" crossorigin>`;

package/dist/utils/page-preview.d.ts

@@ -3,5 +3,4 @@
  * the preview page is reachable only under this query flag.
  */
 export declare const PAGE_PREVIEW_QUERY = "spacefast_view";
-/** The preview page for a file whose bytes live at `fileHref`. */
 export declare function previewPageHref(fileHref: string): string;

package/dist/utils/page-preview.js

@@ -3,7 +3,6 @@
  * the preview page is reachable only under this query flag.
  */
 export const PAGE_PREVIEW_QUERY = "spacefast_view";
-/** The preview page for a file whose bytes live at `fileHref`. */
 export function previewPageHref(fileHref) {
     return `${fileHref}${fileHref.includes("?") ? "&" : "?"}${PAGE_PREVIEW_QUERY}=1`;
 }

package/dist/utils/pages.d.ts

@@ -1,4 +1,5 @@
-import { type CustomPageId, type SitePageId } from "../contracts/pages.js";
+import { type CustomPageId, type PlatformPageId, type SitePageId } from "../contracts/pages.js";
+import { type DerivedPageColors } from "./page-colors.js";
 export { PAGE_PREVIEW_QUERY, previewPageHref } from "./page-preview.js";
 export type PageTheme = {
     accent?: string | undefined;
@@ -21,7 +22,7 @@ export type PagePreviewFile = {
     mime?: string;
 };
 export type PageExpansionContext = {
-    page: CustomPageId | "layout";
+    page: CustomPageId | PlatformPageId | "layout";
     theme?: PageTheme;
     content?: string;
     displayPath?: string;
@@ -29,6 +30,9 @@ export type PageExpansionContext = {
     itemCount?: number;
     visibleItemCount?: number;
     hideSpacefastBranding?: boolean;
+    supportUrl?: string;
+    partnerBranding?: boolean;
+    useSystemDisplayFont?: boolean;
     files?: readonly PageFileEntry[];
     file?: PagePreviewFile;
 };
@@ -40,6 +44,13 @@ export type PageDiagnostic = {
 };
 export declare function isPagePublicPath(path: string): boolean;
 export declare function escapePageHtml(value: string): string;
+/**
+ * The custom properties a theme paints with. A custom background pins a
+ * complete scheme for both OS modes; `--sf-bg` alone would leave dark-mode
+ * visitors with the dark foreground on a light background. Exported so the
+ * dashboard preview paints the same tokens from an unsaved draft.
+ */
+export declare function pageThemeCss(theme: PageTheme, derived?: DerivedPageColors): string;
 export declare function expandPageHtml(source: string, context: PageExpansionContext): string;
 export declare function validatePageSources(input: {
     pages: Readonly<Record<string, string>>;
@@ -49,7 +60,26 @@ export declare function isCompleteHtmlDocument(source: string): boolean;
 export declare function applyPageLayout(layout: string | null, content: string, context: Omit<PageExpansionContext, "page" | "content">): string;
 export declare function inferPageThemeFromThemeJson(raw: string): Partial<PageTheme>;
 export declare function defaultPageBody(id: SitePageId): string;
-export declare const DEFAULT_PAGE_TEMPLATES: Readonly<Record<SitePageId, string>>;
+export declare const DEFAULT_PAGE_TEMPLATES: {
+    "404": string;
+    denied: string;
+    access: string;
+    index: string;
+    preview: string;
+};
+export declare const DEFAULT_PLATFORM_PAGE_TEMPLATES: {
+    login: string;
+    undeployed: string;
+    suspended: string;
+    legal: string;
+    gone: string;
+    "runtime-error": string;
+    "rate-limited": string;
+    "tier-unavailable": string;
+    "proxy-error": string;
+    "method-not-allowed": string;
+    "content-too-large": string;
+};
 export declare const DEFAULT_LAYOUT_TEMPLATE: string;
 export declare function defaultPageTemplate(id: SitePageId): string;
 export declare function pageIdFromFilename(filename: string): CustomPageId | null;

package/dist/utils/pages.js

@@ -33,17 +33,17 @@ export function escapePageHtml(value) {
         .replaceAll('"', """)
         .replaceAll("'", "'");
 }
-// Pushed colors are intent; the readability engine (page-colors.ts) derives
-// what the templates actually paint with. A custom background pins a complete
-// scheme for both OS modes — emitting `--sf-bg` alone used to leave dark-mode
-// visitors with the dark foreground on the user's light background.
-function themeStyle(theme) {
+/**
+ * The custom properties a theme paints with. A custom background pins a
+ * complete scheme for both OS modes; `--sf-bg` alone would leave dark-mode
+ * visitors with the dark foreground on a light background. Exported so the
+ * dashboard preview paints the same tokens from an unsaved draft.
+ */
+export function pageThemeCss(theme, derived = derivePageColors(theme)) {
     const root = [];
     const dark = [];
     if (theme.accent || theme.background) {
-        const derived = derivePageColors(theme);
-        // `derived.accent` is the parse-validated input (or the default), never
-        // an arbitrary string straight from the theme.
+        // `derived.accent` is parse-validated, never a raw string from the theme.
         if (theme.accent)
             root.push(`--sf-accent:${derived.accent}`);
         root.push(`--sf-on-accent:${derived.onAccent}`, `--sf-link:${derived.link}`);
@@ -59,7 +59,11 @@ function themeStyle(theme) {
     if (root.length === 0)
         return "";
     const darkBlock = dark.length > 0 ? `@media(prefers-color-scheme:dark){:root{${dark.join(";")}}}` : "";
-    return `<style>:root{${root.join(";")}}${darkBlock}</style>`;
+    return `:root{${root.join(";")}}${darkBlock}`;
+}
+function themeStyle(theme) {
+    const css = pageThemeCss(theme);
+    return css ? `<style>${css}</style>` : "";
 }
 const runtimeSlot = (name, fallback) => `<!--sf-runtime:${name}:start-->${fallback}<!--sf-runtime:${name}:end-->`;
 function renderFiles(files) {
@@ -72,8 +76,8 @@ function renderFiles(files) {
 function renderFile(file) {
     if (!file)
         return '<p class="sf-empty">File unavailable.</p>';
-    // This page is itself the `?spacefast_view=1` representation, so the embed,
-    // the download and the raw link all point straight at the canonical path.
+    // This page is itself the `?spacefast_view=1` representation, so every link
+    // points straight at the canonical path.
     const href = escapePageHtml(file.href);
     const name = escapePageHtml(file.name);
     const media = file.mime?.startsWith("image/")
@@ -81,11 +85,13 @@ function renderFile(file) {
         : `<iframe class="sf-preview" src="${href}" title="Preview of ${name}" loading="lazy" sandbox></iframe>`;
     return `<div class="sf-preview-wrap">${media}</div><dl class="sf-file-meta"><div><dt>Name</dt><dd>${name}</dd></div>${file.size ? `<div><dt>Size</dt><dd>${escapePageHtml(file.size)}</dd></div>` : ""}${file.mime ? `<div><dt>Type</dt><dd>${escapePageHtml(file.mime)}</dd></div>` : ""}</dl><div class="sf-actions"><a class="sf-button" href="${href}" download>Download</a><a class="sf-ghost" href="${href}">View raw</a></div>`;
 }
-function renderSpacefastBranding(hidden) {
+function renderSpacefastBranding(hidden, supportUrl, partnerBranding) {
     const wordmark = hidden
         ? ""
-        : `<span class="sf-powered" tabindex="0"><svg class="sf-wordmark" viewBox="0 0 326 62" role="img" aria-label="Spacefast"><rect class="sf-wordmark-shadow" x="14" y="12" width="306" height="48"></rect><rect class="sf-wordmark-plate" x="10" y="8" width="306" height="48"></rect><path class="sf-wordmark-paper" d="${SPACEFAST_WORDMARK_PATH}"></path></svg><span class="sf-powered-line"><a href="https://spacefast.com">Best way to share what your agent made</a></span></span>`;
-    return `<footer class="sf-colophon"><div class="sf-colophon-row">${wordmark}<a class="sf-help" href="https://spacefast.com/help">Need help?</a></div></footer>`;
+        : `<span class="sf-powered" tabindex="0"><svg class="sf-wordmark" viewBox="0 0 152 28.9062" role="img" aria-label="Spacefast"><path fill="currentColor" d="${SPACEFAST_WORDMARK_PATH}"></path></svg><span class="sf-powered-line"><a href="https://spacefast.com">Best way to share what your agent made</a></span></span>`;
+    const helpUrl = supportUrl ?? (partnerBranding ? null : "https://spacefast.com/help");
+    const help = helpUrl ? `<a class="sf-help" href="${escapePageHtml(helpUrl)}">Need help?</a>` : "";
+    return `<footer class="sf-colophon"><div class="sf-colophon-row">${wordmark}${help}</div></footer>`;
 }
 function renderElement(element, context) {
     switch (element) {
@@ -110,7 +116,7 @@ function renderElement(element, context) {
             return escapePageHtml(visible < count ? `${label} · showing first ${visible}` : label);
         }
         case "sf-spacefast-branding":
-            return renderSpacefastBranding(context.hideSpacefastBranding);
+            return renderSpacefastBranding(context.hideSpacefastBranding, context.supportUrl, context.partnerBranding);
         case "sf-files":
             return renderFiles(context.files ?? []);
         case "sf-file":
@@ -128,15 +134,21 @@ const ELEMENT_PATTERN = /<\s*(sf-[a-z0-9-]+)\b[^>]*>(?:\s*<\s*\/\s*\1\s*>)?|<\s*
 export function expandPageHtml(source, context) {
     let output = source.replace(ELEMENT_PATTERN, (_match, paired, unary) => {
         const name = (paired ?? unary)?.toLowerCase();
+        // SAFETY: The set membership check admits only names from the PageElement literal set.
         return name && knownElements.has(name) ? renderElement(name, context) : _match;
     });
     if (output.includes("/*sf-default-fonts*/")) {
-        output = output.replaceAll("/*sf-default-fonts*/", PAGE_FONT_FACES);
-        // The faces point at shared font origins; preloading ahead of the inline
-        // stylesheet starts the cross-origin fetches with the parse.
-        output = /<\s*style\b/i.test(output)
-            ? output.replace(/<\s*style\b/i, (tag) => `${PAGE_FONT_PRELOAD_HTML}${tag}`)
-            : `${PAGE_FONT_PRELOAD_HTML}${output}`;
+        output = output.replaceAll("/*sf-default-fonts*/", context.useSystemDisplayFont ? "" : PAGE_FONT_FACES);
+        if (context.useSystemDisplayFont) {
+            output = output.replaceAll('--sf-display-font:"Recoleta",Georgia,serif', "--sf-display-font:var(--sf-font)");
+        }
+        // Preloading ahead of the inline stylesheet starts the cross-origin
+        // fetches with the parse.
+        output = context.useSystemDisplayFont
+            ? output
+            : /<\s*style\b/i.test(output)
+                ? output.replace(/<\s*style\b/i, (tag) => `${PAGE_FONT_PRELOAD_HTML}${tag}`)
+                : `${PAGE_FONT_PRELOAD_HTML}${output}`;
     }
     const tokens = themeStyle(context.theme ?? {});
     if (tokens) {
@@ -187,8 +199,7 @@ export function validatePageSources(input) {
         const path = sourcePath.includes("_pages/") ? sourcePath : `_pages/${sourcePath}`;
         const filename = path.slice(path.lastIndexOf("_pages/") + 7);
         const id = filename.replace(/\.html$/i, "");
-        // A collab layout is Space-level — one review room, one URL — so unlike the
-        // gate and listing pages it has no per-directory form.
+        // One review room per Space, so collab has no per-directory form.
         if (!customPageIds.has(id) ||
             filename !== `${id}.html` ||
             (id === "collab" && path !== COLLAB_PAGE_SOURCE)) {
@@ -216,8 +227,7 @@ export function validatePageSources(input) {
                 path,
             });
         for (const element of foundElements(source)) {
-            // Collab elements are the browser SDK's, not the compiler's: legal in the
-            // review room, meaningless anywhere the SDK is not the point.
+            // Collab elements belong to the browser SDK, legal only in the review room.
             if (id === "collab" && collabElements.has(element))
                 continue;
             if (!knownElements.has(element))
@@ -255,8 +265,8 @@ export function validatePageSources(input) {
                 message: "The index page does not render <sf-files>.",
                 path,
             });
-        // Without the lane slot the runtime has nowhere to inject the working
-        // sign-in/password/request blocks and the template ships a dead gate.
+        // Without the lane slot the runtime cannot inject the sign-in, password
+        // and request blocks, and the gate ships dead.
         if (id === "access" && !/<\s*sf-access-lanes\b/i.test(source))
             diagnostics.push({
                 severity: "error",
@@ -374,10 +384,9 @@ export function defaultPageBody(id) {
     const source = DEFAULT_PAGE_TEMPLATES[id];
     return source.match(/<body[^>]*>([\s\S]*?)<\/body>/i)?.[1] ?? source;
 }
-// The built-in palette runs through the same readability engine as pushed
-// themes, so buttons and links remain readable for every accepted accent.
+// The built-in palette runs through the same readability engine as pushed themes.
 const defaultPageColors = derivePageColors({});
-const sharedCss = `/*sf-default-fonts*/:root{color-scheme:light dark;--sf-accent:${PAGE_COLOR_DEFAULTS.accent};--sf-bg:${PAGE_COLOR_DEFAULTS.bg};--sf-fg:${PAGE_COLOR_DEFAULTS.fg};--sf-muted:${PAGE_COLOR_DEFAULTS.muted};--sf-card:${PAGE_COLOR_DEFAULTS.card};--sf-border:${PAGE_COLOR_DEFAULTS.border};--sf-link:${defaultPageColors.link};--sf-on-accent:${defaultPageColors.onAccent};--sf-error:#a82d1a;--sf-font:"Haskoy",-apple-system,BlinkMacSystemFont,ui-sans-serif,"Segoe UI",sans-serif;--sf-display-font:"Recoleta",Georgia,serif;--sf-mono:ui-monospace,"SF Mono",Menlo,Consolas,monospace}*{box-sizing:border-box}html{min-width:320px;background:var(--sf-bg);-webkit-font-smoothing:antialiased}body{margin:0;min-height:100vh;background:var(--sf-bg);color:var(--sf-fg);font:14px/1.65 var(--sf-font)}a{color:inherit}.sf-page{min-height:100vh;display:flex;flex-direction:column;padding:clamp(22px,4vw,44px)}.sf-header{display:flex;align-items:center;min-height:32px}.sf-page-center .sf-header{justify-content:center}.sf-brand{display:inline-flex;min-width:0;align-items:center;gap:10px;color:var(--sf-fg);text-decoration:none}.sf-brand-mark{width:7px;height:7px;flex:none;background:var(--sf-accent)}.sf-logo{width:28px;height:28px;flex:none;object-fit:contain}.sf-brand strong{min-width:0;overflow-wrap:anywhere;font-size:13px;font-weight:600}.sf-main{flex:1;width:100%;padding:clamp(34px,9vh,84px) 0}.sf-page-plain .sf-main{max-width:680px}.sf-page-center .sf-main{max-width:620px;margin:auto;display:flex;flex-direction:column;align-items:center;text-align:center}.sf-eyebrow{margin:0 0 14px;color:var(--sf-muted);font:500 11px/1.5 var(--sf-mono);letter-spacing:.12em;text-transform:uppercase;overflow-wrap:anywhere}.sf-page-center .sf-eyebrow{margin-bottom:16px}h1{max-width:20ch;margin:0 0 12px;color:var(--sf-fg);font:400 clamp(1.9rem,5vw,2.8rem)/1.22 var(--sf-display-font);letter-spacing:-.012em;text-wrap:balance}.sf-copy,.sf-sub{max-width:52ch;margin:0;color:var(--sf-muted);text-wrap:pretty}.sf-inline-path{font-family:var(--sf-mono);font-size:.9em;color:var(--sf-fg);overflow-wrap:anywhere}.sf-actions{display:flex;flex-wrap:wrap;align-items:center;gap:14px;margin-top:22px}.sf-page-center .sf-actions{justify-content:center}.sf-button{display:inline-flex;min-height:44px;align-items:center;justify-content:center;border:0;background:var(--sf-accent);color:var(--sf-on-accent);padding:10px 16px;font:600 13px/1.4 var(--sf-font);text-decoration:none;cursor:pointer}.sf-ghost{color:var(--sf-muted);text-underline-offset:3px}.sf-button:hover{filter:brightness(1.06)}a:focus-visible,button:focus-visible{outline:2px solid var(--sf-link);outline-offset:2px}.sf-copy+.sf-copy{margin-top:12px}.sf-files{width:100%;margin:24px 0 0;padding:0;list-style:none}.sf-files li{display:flex;min-width:0;align-items:baseline;gap:18px;border-bottom:1px solid var(--sf-border)}.sf-files a{min-width:0;flex:1;padding:10px 2px;color:var(--sf-fg);font-weight:500;text-decoration:none}.sf-files a:hover{color:var(--sf-link)}.sf-file-name{overflow-wrap:anywhere}.sf-file-size{flex:none;padding:10px 2px;color:var(--sf-muted);font:12px/1.5 var(--sf-mono);white-space:nowrap}.sf-empty{max-width:420px;margin:24px 0 0;border:1px dashed var(--sf-border);padding:18px 20px;color:var(--sf-muted)}.sf-preview-wrap{width:min(100%,560px);aspect-ratio:16/9;margin:10px 0 18px;overflow:hidden;background:#fff;outline:1px solid color-mix(in srgb,var(--sf-fg) 10%,transparent);outline-offset:-1px}.sf-preview{display:block;width:100%;height:100%;border:0;object-fit:contain}.sf-file-meta{width:min(100%,560px);margin:0}.sf-file-meta div{display:flex;min-width:0;justify-content:space-between;gap:20px;border-bottom:1px solid var(--sf-border);padding:9px 2px}.sf-file-meta dt{color:var(--sf-fg);font-weight:600}.sf-file-meta dd{min-width:0;margin:0;color:var(--sf-muted);font-family:var(--sf-mono);overflow-wrap:anywhere;text-align:right}.sf-colophon{display:flex;flex-direction:column;align-items:center;gap:10px;padding:44px 0 26px;margin-top:auto;color:var(--sf-muted)}.sf-page-plain .sf-colophon{align-items:flex-start}.sf-colophon-row{display:flex;align-items:center;gap:20px;flex-wrap:wrap}.sf-powered{display:inline-flex;align-items:center;gap:10px;cursor:pointer;outline:none}.sf-powered-line{display:none;font-size:12px;color:var(--sf-muted)}.sf-powered:hover .sf-powered-line,.sf-powered:focus .sf-powered-line,.sf-powered:focus-within .sf-powered-line{display:inline}.sf-powered-line a{color:var(--sf-link);text-decoration:underline;text-underline-offset:3px}.sf-help{font-size:12px;color:var(--sf-muted);text-decoration:underline;text-underline-offset:3px}.sf-help:hover{color:var(--sf-fg)}.sf-wordmark{display:block;flex:none;width:auto;height:11px}.sf-wordmark-shadow{fill:var(--sf-accent)}.sf-wordmark-plate{fill:#141419}.sf-wordmark-paper{fill:#fbf8f1}@media(max-width:520px){.sf-page{padding:20px}.sf-button{min-height:48px}.sf-file-meta div{flex-direction:column;gap:2px}.sf-file-meta dd{text-align:left}.sf-colophon{padding-top:32px}}@media(prefers-color-scheme:dark){:root{--sf-bg:${PAGE_COLOR_DEFAULTS.darkBg};--sf-fg:${PAGE_COLOR_DEFAULTS.darkFg};--sf-muted:${PAGE_COLOR_DEFAULTS.darkMuted};--sf-card:${PAGE_COLOR_DEFAULTS.darkCard};--sf-border:${PAGE_COLOR_DEFAULTS.darkBorder};--sf-link:${defaultPageColors.linkDark};--sf-error:#ff8a7a}.sf-preview-wrap{outline-color:#ffffff1a}}@media(forced-colors:active){.sf-brand-mark{background:CanvasText}.sf-button{border:1px solid ButtonText}.sf-powered:focus{outline:1px solid CanvasText;outline-offset:3px}}`;
+const sharedCss = `/*sf-default-fonts*/:root{color-scheme:light dark;--sf-accent:${PAGE_COLOR_DEFAULTS.accent};--sf-bg:${PAGE_COLOR_DEFAULTS.bg};--sf-fg:${PAGE_COLOR_DEFAULTS.fg};--sf-muted:${PAGE_COLOR_DEFAULTS.muted};--sf-card:${PAGE_COLOR_DEFAULTS.card};--sf-border:${PAGE_COLOR_DEFAULTS.border};--sf-link:${defaultPageColors.link};--sf-on-accent:${defaultPageColors.onAccent};--sf-error:#a82d1a;--sf-font:-apple-system,BlinkMacSystemFont,"SF Pro Text","SF Pro Display","Segoe UI",system-ui,Roboto,"Helvetica Neue",Arial,sans-serif;--sf-display-font:"Recoleta",Georgia,serif;--sf-mono:ui-monospace,"SF Mono",Menlo,Consolas,monospace}*{box-sizing:border-box}html{min-width:320px;background:var(--sf-bg);-webkit-font-smoothing:antialiased}body{margin:0;min-height:100vh;background:var(--sf-bg);color:var(--sf-fg);font:14px/1.65 var(--sf-font)}a{color:inherit}.sf-page{min-height:100vh;display:flex;flex-direction:column;padding:clamp(22px,4vw,44px)}.sf-header{display:flex;align-items:center;min-height:32px}.sf-page-center .sf-header{justify-content:center}.sf-brand{display:inline-flex;min-width:0;align-items:center;gap:10px;color:var(--sf-fg);text-decoration:none}.sf-brand-mark{width:7px;height:7px;flex:none;background:var(--sf-accent)}.sf-logo{width:28px;height:28px;flex:none;object-fit:contain}.sf-brand strong{min-width:0;overflow-wrap:anywhere;font-size:13px;font-weight:600}.sf-main{flex:1;width:100%;padding:clamp(34px,9vh,84px) 0}.sf-page-plain .sf-main{max-width:680px}.sf-page-center .sf-main{max-width:620px;margin:auto;display:flex;flex-direction:column;align-items:center;text-align:center}.sf-eyebrow{margin:0 0 14px;color:var(--sf-muted);font:500 11px/1.5 var(--sf-mono);letter-spacing:.12em;text-transform:uppercase;overflow-wrap:anywhere}.sf-page-center .sf-eyebrow{margin-bottom:16px}h1{max-width:20ch;margin:0 0 12px;color:var(--sf-fg);font:400 clamp(1.9rem,5vw,2.8rem)/1.22 var(--sf-display-font);letter-spacing:-.012em;text-wrap:balance}.sf-copy,.sf-sub{max-width:52ch;margin:0;color:var(--sf-muted);text-wrap:pretty}.sf-inline-path{font-family:var(--sf-mono);font-size:.9em;color:var(--sf-fg);overflow-wrap:anywhere}.sf-actions{display:flex;flex-wrap:wrap;align-items:center;gap:14px;margin-top:22px}.sf-page-center .sf-actions{justify-content:center}.sf-button{display:inline-flex;min-height:44px;align-items:center;justify-content:center;border:0;background:var(--sf-accent);color:var(--sf-on-accent);padding:10px 16px;font:600 13px/1.4 var(--sf-font);text-decoration:none;cursor:pointer}.sf-ghost{color:var(--sf-muted);text-underline-offset:3px}.sf-button:hover{filter:brightness(1.06)}a:focus-visible,button:focus-visible{outline:2px solid var(--sf-link);outline-offset:2px}.sf-copy+.sf-copy{margin-top:12px}.sf-files{width:100%;margin:24px 0 0;padding:0;list-style:none}.sf-files li{display:flex;min-width:0;align-items:baseline;gap:18px;border-bottom:1px solid var(--sf-border)}.sf-files a{min-width:0;flex:1;padding:10px 2px;color:var(--sf-fg);font-weight:500;text-decoration:none}.sf-files a:hover{color:var(--sf-link)}.sf-file-name{overflow-wrap:anywhere}.sf-file-size{flex:none;padding:10px 2px;color:var(--sf-muted);font:12px/1.5 var(--sf-mono);white-space:nowrap}.sf-empty{max-width:420px;margin:24px 0 0;border:1px dashed var(--sf-border);padding:18px 20px;color:var(--sf-muted)}.sf-preview-wrap{width:min(100%,560px);aspect-ratio:16/9;margin:10px 0 18px;overflow:hidden;background:#fff;outline:1px solid color-mix(in srgb,var(--sf-fg) 10%,transparent);outline-offset:-1px}.sf-preview{display:block;width:100%;height:100%;border:0;object-fit:contain}.sf-file-meta{width:min(100%,560px);margin:0}.sf-file-meta div{display:flex;min-width:0;justify-content:space-between;gap:20px;border-bottom:1px solid var(--sf-border);padding:9px 2px}.sf-file-meta dt{color:var(--sf-fg);font-weight:600}.sf-file-meta dd{min-width:0;margin:0;color:var(--sf-muted);font-family:var(--sf-mono);overflow-wrap:anywhere;text-align:right}.sf-colophon{display:flex;flex-direction:column;align-items:center;gap:10px;padding:44px 0 26px;margin-top:auto;color:var(--sf-muted)}.sf-page-plain .sf-colophon{align-items:flex-start}.sf-colophon-row{display:flex;align-items:center;gap:20px;flex-wrap:wrap}.sf-powered{display:inline-flex;align-items:center;gap:10px;cursor:pointer;outline:none}.sf-powered-line{display:none;font-size:12px;color:var(--sf-muted)}.sf-powered:hover .sf-powered-line,.sf-powered:focus .sf-powered-line,.sf-powered:focus-within .sf-powered-line{display:inline}.sf-powered-line a{color:var(--sf-link);text-decoration:underline;text-underline-offset:3px}.sf-help{font-size:12px;color:var(--sf-muted);text-decoration:underline;text-underline-offset:3px}.sf-help:hover{color:var(--sf-fg)}.sf-wordmark{display:block;flex:none;width:auto;height:14px;color:var(--sf-fg)}@media(max-width:520px){.sf-page{padding:20px}.sf-button{min-height:48px}.sf-file-meta div{flex-direction:column;gap:2px}.sf-file-meta dd{text-align:left}.sf-colophon{padding-top:32px}}@media(prefers-color-scheme:dark){:root{--sf-bg:${PAGE_COLOR_DEFAULTS.darkBg};--sf-fg:${PAGE_COLOR_DEFAULTS.darkFg};--sf-muted:${PAGE_COLOR_DEFAULTS.darkMuted};--sf-card:${PAGE_COLOR_DEFAULTS.darkCard};--sf-border:${PAGE_COLOR_DEFAULTS.darkBorder};--sf-link:${defaultPageColors.linkDark};--sf-error:#ff8a7a}.sf-preview-wrap{outline-color:#ffffff1a}}@media(forced-colors:active){.sf-brand-mark{background:CanvasText}.sf-button{border:1px solid ButtonText}.sf-powered:focus{outline:1px solid CanvasText;outline-offset:3px}}`;
 const accessCss = `.sf-page.access .sf-main{max-width:26rem;padding:clamp(42px,8vh,72px) 0}.sf-page.access h1{max-width:18ch;margin-bottom:14px;font:600 clamp(2rem,7vw,2.65rem)/1.12 var(--sf-font);letter-spacing:-.035em}.sf-page.access .sf-copy{font-size:15px;line-height:1.6}.sf-access-default{display:flex;width:100%;flex-direction:column;align-items:center}.sf-access-status{padding:10px 12px;border:1px solid color-mix(in srgb,var(--sf-fg) 10%,transparent);border-radius:8px;background:color-mix(in srgb,var(--sf-fg) 4%,transparent);color:var(--sf-fg)}.sf-access-lanes{display:flex;flex-direction:column;gap:16px;width:min(23rem,100%);margin-top:30px;text-align:left}.sf-access-lanes form{display:flex;flex-direction:column;gap:14px;margin:0}.sf-input{box-sizing:border-box;width:100%;min-height:46px;padding:11px 12px;border:1px solid color-mix(in srgb,var(--sf-fg) 18%,transparent);border-radius:8px;outline:2px solid transparent;outline-offset:-1px;background:color-mix(in srgb,var(--sf-bg) 92%,var(--sf-fg));color:var(--sf-fg);font:500 15px/1.45 var(--sf-font);appearance:none}.sf-input::placeholder{color:color-mix(in srgb,var(--sf-muted) 82%,transparent);font:inherit}.sf-input:hover{border-color:color-mix(in srgb,var(--sf-fg) 34%,transparent)}.sf-input:focus-visible{border-color:var(--sf-accent);outline-color:var(--sf-accent)}textarea.sf-input{min-height:92px;resize:vertical}.sf-label{color:var(--sf-fg);font:600 13px/1.4 var(--sf-font)}.sf-access-lanes .sf-button{width:100%;min-height:46px;border-radius:8px}.sf-access-or{display:flex;align-items:center;gap:12px;color:var(--sf-muted);font-size:13px}.sf-access-or:before,.sf-access-or:after{content:"";flex:1;border-top:1px solid color-mix(in srgb,var(--sf-fg) 12%,transparent)}.sf-error{margin:0;color:var(--sf-error);font-size:14px}.sf-access-password-row{display:flex;gap:8px}.sf-access-password-row .sf-input{min-width:0;flex:1}.sf-access-password-row .sf-button{width:auto;flex:none}.sf-access-request{padding-top:2px}.sf-access-request summary{padding:4px 0;cursor:pointer;color:var(--sf-muted);font:550 14px/1.5 var(--sf-font)}.sf-access-request summary:hover{color:var(--sf-fg)}.sf-access-request[open] summary{color:var(--sf-fg)}.sf-access-request form{margin-top:16px}@media(max-width:520px){.sf-page.access .sf-main{padding:38px 0}.sf-page.access h1{font-size:2rem}.sf-page.access .sf-copy{font-size:16px}.sf-input{min-height:48px;font-size:16px}.sf-access-lanes .sf-button{min-height:48px}.sf-access-password-row{flex-direction:column}.sf-access-password-row .sf-button{width:100%}}@media(prefers-color-scheme:dark){.sf-access-status{background:color-mix(in srgb,var(--sf-fg) 5%,transparent)}}`;
 const pageHeader = '<header class="sf-header"><a class="sf-brand" href="/" aria-label="Homepage"><span class="sf-brand-mark" aria-hidden="true"></span><sf-logo></sf-logo><strong><sf-name></sf-name></strong></a></header>';
 const pageFooter = "<sf-spacefast-branding></sf-spacefast-branding>";
@@ -394,14 +403,58 @@ export const DEFAULT_PAGE_TEMPLATES = {
     index: document("index", "<sf-page-title></sf-page-title>", '<p class="sf-eyebrow"><sf-page-path></sf-page-path></p><h1><sf-page-title></sf-page-title></h1><p class="sf-sub"><sf-page-summary></sf-page-summary></p><sf-files></sf-files>', "plain"),
     preview: document("preview", "<sf-page-title></sf-page-title>", '<p class="sf-eyebrow"><sf-page-path></sf-page-path></p><h1><sf-page-title></sf-page-title></h1><sf-file></sf-file>', "plain"),
 };
+const PLATFORM_PAGE_COPY = {
+    login: [401, "This space is for members", "Sign in to continue — you’ll come right back here."],
+    undeployed: [503, "Waiting for launch", "This space hasn’t been published yet. Check back soon."],
+    suspended: [402, "This space is paused", "Serving is on hold until billing is sorted out."],
+    legal: [
+        451,
+        "Unavailable for legal reasons",
+        "This space is blocked in response to a legal demand.",
+    ],
+    gone: [404, "Nothing here", "This space is no longer available."],
+    "runtime-error": [
+        500,
+        "Something broke on our side",
+        "The runtime hit an error serving this page. Try again in a moment.",
+    ],
+    "rate-limited": [
+        429,
+        "Slow down a second",
+        "Too many requests hit this space at once. Give it a moment and try again.",
+    ],
+    "tier-unavailable": [503, "Back in a bit", "This space is temporarily unavailable."],
+    "proxy-error": [502, "The upstream missed the connection", "Try again in a moment."],
+    "method-not-allowed": [405, "That method won’t work here", "Try the request another way."],
+    "content-too-large": [413, "That request is too large", "Send a smaller request and try again."],
+};
+function platformDocument(id) {
+    const [status, title, description] = PLATFORM_PAGE_COPY[id];
+    return `<!doctype html>\n<html lang="en">\n<head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="robots" content="noindex"><title>${title}</title><style>${sharedCss}</style></head>\n<body><div class="sf-page sf-page-center">${pageHeader}<main class="sf-main"><p class="sf-eyebrow">${status}</p><h1>${title}</h1><p class="sf-copy">${description}</p></main>${pageFooter}</div></body>\n</html>\n`;
+}
+export const DEFAULT_PLATFORM_PAGE_TEMPLATES = {
+    login: platformDocument("login"),
+    undeployed: platformDocument("undeployed"),
+    suspended: platformDocument("suspended"),
+    legal: platformDocument("legal"),
+    gone: platformDocument("gone"),
+    "runtime-error": platformDocument("runtime-error"),
+    "rate-limited": platformDocument("rate-limited"),
+    "tier-unavailable": platformDocument("tier-unavailable"),
+    "proxy-error": platformDocument("proxy-error"),
+    "method-not-allowed": platformDocument("method-not-allowed"),
+    "content-too-large": platformDocument("content-too-large"),
+};
 export const DEFAULT_LAYOUT_TEMPLATE = `<!doctype html>\n<html lang="en">\n<head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title><sf-page-title></sf-page-title></title><style>${sharedCss}</style></head>\n<body><sf-content></sf-content></body>\n</html>\n`;
 export function defaultPageTemplate(id) {
     return DEFAULT_PAGE_TEMPLATES[id];
 }
 export function pageIdFromFilename(filename) {
     const id = filename.replace(/\.html$/, "");
+    // SAFETY: The set membership check admits only ids from the CustomPageId literal set.
     return customPageIds.has(id) ? id : null;
 }
 export function allDefaultPageTemplates() {
+    // SAFETY: SITE_PAGE_IDS maps every SitePageId to its corresponding default template entry.
     return Object.fromEntries(SITE_PAGE_IDS.map((id) => [id, DEFAULT_PAGE_TEMPLATES[id]]));
 }

package/dist/utils/privacy-regions.d.ts

@@ -0,0 +1,19 @@
+/** EU 27 + CH, IS, LI, NO, GB. */
+export declare const GDPR_COUNTRY_CODES: Set<string>;
+export declare const GEO_COUNTRY_UNKNOWN = "unknown";
+/**
+ * GDPR applicability FAILS CLOSED: an unknown or missing country is treated as
+ * inside the GDPR zone (wpcom `isGdprCountry`). Country codes are ISO 3166-1
+ * alpha-2, case-insensitive.
+ */
+export declare function isGdprCountry(countryCode: string | null | undefined): boolean;
+/** US states with comprehensive privacy laws, lowercase full names (wpcom `CCPARegions`). */
+export declare const CCPA_REGIONS: Set<string>;
+/**
+ * CCPA applicability FAILS OPEN: an unknown or missing region is NOT assumed
+ * to be a CCPA region (wpcom `pertainsToCCPA`: "if we aren't sure what the
+ * region is we shouldn't assume it pertains to CCPA"). Matches on substring,
+ * like wpcom, so a region string such as "california" or "California, US"
+ * both qualify.
+ */
+export declare function isCcpaRegion(countryCode: string | null | undefined, region: string | null | undefined): boolean;

package/dist/utils/privacy-regions.js

@@ -0,0 +1,91 @@
+// Privacy-regulation region lists, ported from wpcom's a8c-analytics
+// (`a8c-analytics-src/kit/constants.ts`, verified 2026-08-23) so Spacefast's
+// consent behavior matches WordPress.com's. One home for both the server-side
+// Tag SDK and the dashboard consent engine.
+/** EU 27 + CH, IS, LI, NO, GB. */
+export const GDPR_COUNTRY_CODES = new Set([
+    "AT",
+    "BE",
+    "BG",
+    "CY",
+    "CZ",
+    "DE",
+    "DK",
+    "EE",
+    "ES",
+    "FI",
+    "FR",
+    "GR",
+    "HR",
+    "HU",
+    "IE",
+    "IT",
+    "LT",
+    "LU",
+    "LV",
+    "MT",
+    "NL",
+    "PL",
+    "PT",
+    "RO",
+    "SE",
+    "SI",
+    "SK",
+    "CH",
+    "IS",
+    "LI",
+    "NO",
+    "GB",
+]);
+export const GEO_COUNTRY_UNKNOWN = "unknown";
+/**
+ * GDPR applicability FAILS CLOSED: an unknown or missing country is treated as
+ * inside the GDPR zone (wpcom `isGdprCountry`). Country codes are ISO 3166-1
+ * alpha-2, case-insensitive.
+ */
+export function isGdprCountry(countryCode) {
+    if (!countryCode || countryCode.toLowerCase() === GEO_COUNTRY_UNKNOWN) {
+        return true;
+    }
+    return GDPR_COUNTRY_CODES.has(countryCode.toUpperCase());
+}
+/** US states with comprehensive privacy laws, lowercase full names (wpcom `CCPARegions`). */
+export const CCPA_REGIONS = new Set([
+    "california",
+    "colorado",
+    "connecticut",
+    "delaware",
+    "florida",
+    "indiana",
+    "iowa",
+    "kentucky",
+    "maryland",
+    "minnesota",
+    "montana",
+    "nebraska",
+    "new hampshire",
+    "new jersey",
+    "oregon",
+    "rhode island",
+    "tennessee",
+    "texas",
+    "utah",
+    "virginia",
+]);
+/**
+ * CCPA applicability FAILS OPEN: an unknown or missing region is NOT assumed
+ * to be a CCPA region (wpcom `pertainsToCCPA`: "if we aren't sure what the
+ * region is we shouldn't assume it pertains to CCPA"). Matches on substring,
+ * like wpcom, so a region string such as "california" or "California, US"
+ * both qualify.
+ */
+export function isCcpaRegion(countryCode, region) {
+    if (countryCode && countryCode.toUpperCase() !== "US") {
+        return false;
+    }
+    if (!region || region.toLowerCase() === GEO_COUNTRY_UNKNOWN) {
+        return false;
+    }
+    const normalized = region.toLowerCase();
+    return [...CCPA_REGIONS].some((candidate) => normalized.includes(candidate));
+}

package/dist/utils/publish-form-data.d.ts

@@ -16,17 +16,16 @@ export declare function createPublishFormData(input: {
     upload: DirectPublishUpload;
     clientAttribution: string;
     spaceId?: string | undefined;
+    teamId?: string | undefined;
     slug?: string | undefined;
     title?: string | undefined;
     description?: string | undefined;
     /** Live promotion intent for archive builds; null produces an unpromoted ready version. */
     channel?: "live" | null | undefined;
     /**
-     * Control-plane-only provenance for the version's build/deploy read models —
-     * a compiled runtime (Zero capsule, Functions worker) declares its artifact
-     * here under its own key (e.g. `statticZero`). Same shape the CLI sends on the
-     * declared-session path; the multipart intake reads it from the `metadata`
-     * JSON field and folds it into `publishRequestSchema.sourceMetadata`.
+     * Build provenance for the version's build/deploy read models. A compiled
+     * runtime declares its artifact under its own key (e.g. `statticZero`); the
+     * multipart intake folds it into `publishRequestSchema.sourceMetadata`.
      */
     sourceMetadata?: Record<string, unknown> | undefined;
     /** Bounded build transcript recorded on the version when a build ran. */

package/dist/utils/publish-form-data.js

@@ -3,11 +3,10 @@ export function createPublishFormData(input) {
     const form = new FormData();
     if (input.spaceId)
         form.append("spaceId", input.spaceId);
+    if (input.teamId)
+        form.append("teamId", input.teamId);
     if (input.description)
         form.append("description", input.description);
-    // The multipart intake merges this JSON field into the parsed publish body
-    // (it reads `payload`/`publish`/`metadata`), so build provenance rides the
-    // one-shot form exactly as it rides the CLI's declared-session JSON body.
     if (input.sourceMetadata || input.buildLog || input.channel !== undefined) {
         form.append("metadata", JSON.stringify({
             ...(input.sourceMetadata ? { sourceMetadata: input.sourceMetadata } : {}),