@spacefast/common 0.0.26 → 0.2.1

package/dist/utils/local-space-state.d.ts

@@ -5,16 +5,13 @@ export declare const LOCAL_SPACE_STATE_FILE_NAME = "state.json";
 /**
  * Local Spacefast checkout contract.
  *
- * `.spacefast/space.json` is the committable selection axis: it names which
- * space a checkout targets (`space`) and may carry non-secret provider/team
- * coordinates (`team`, `apiBaseUrl`). It must not carry credentials.
+ * `.spacefast/space.json` is the committable selection axis: which space a
+ * checkout targets, plus non-secret provider/team coordinates. Never credentials.
  *
- * `.spacefast/state.json` is the local credential/cache axis: it records the
- * resolved `spaceId`, provider `apiUrl`, anonymous `claimToken` before claim,
- * durable `accessToken` after continuation, and small publish caches such as
- * `lastVersionId`. It is secret, machine-written, gitignored, and merge-written.
- * The strict versioned schema fails closed instead of letting an older tool
- * reinterpret fields written under a contract it does not understand.
+ * `.spacefast/state.json` is the secret axis: credentials and small publish
+ * caches, machine-written, gitignored, merge-written. Its strict versioned
+ * schema fails closed rather than let an older tool reinterpret fields written
+ * under a contract it does not understand.
  */
 export declare const localSpaceLinkSchema: z.ZodObject<{
     team: z.ZodOptional<z.ZodString>;
@@ -124,17 +121,15 @@ export declare function localSpaceStateDir(root: string): string;
 export declare function localSpaceStatePath(root: string): string;
 export declare function localSpaceLinkPath(root: string): string;
 export declare function readLocalSpaceLink(root: string): Promise<LocalSpaceLink | null>;
-/** Like readLocalSpaceLink, but reports the file path alongside the link. */
 export declare function readLocalSpaceLinkWithPath(root: string): Promise<{
     link: LocalSpaceLink;
     path: string;
 } | null>;
 export declare function readLocalSpaceStateAt(root: string): Promise<DiscoveredLocalSpaceState | null>;
 /**
- * Walk up from `startDir` to the filesystem root (or `boundary`, when given),
- * returning the first non-null result of `probe`. Shared by every "nearest
- * checkout marker" lookup (state+link discovery here, the CLI's link-only
- * discovery) so the traversal rules live in one place.
+ * Walk up from `startDir` to the filesystem root (or `boundary`), returning the
+ * first non-null `probe` result. Every "nearest checkout marker" lookup shares
+ * it so the traversal rules live in one place.
  */
 export declare function findUpward<T>(probe: (dir: string) => Promise<T | null>, startDir?: string, boundary?: string): Promise<T | null>;
 export declare function discoverLocalSpaceState(startDir?: string, boundary?: string): Promise<DiscoveredLocalSpaceState | null>;
@@ -144,8 +139,9 @@ export declare function mutateLocalSpaceState(root: string, mutate: (current: Lo
     afterBackup?: (() => void | Promise<void>) | undefined;
     /** Fault-injection observer used to synchronize concurrency tests. */
     onConflict?: (() => void | Promise<void>) | undefined;
+    /** Reports whether this mutation changed `.gitignore`. */
+    onGitignoreResult?: ((changed: boolean) => void) | undefined;
 }): Promise<LocalSpaceStateFile>;
-/** Reserve random replay custody before a claim token can be consumed. */
 export declare function reserveLocalCredentialReplay(root: string, input: {
     operation: LocalCredentialReplayOperation;
     claimToken: string;
@@ -155,4 +151,8 @@ export declare function saveLocalSpaceState(root: string, input: SaveLocalSpaceS
     statePath: string;
     linkPath: string;
     wroteLink: boolean;
+    gitignore: {
+        path: string;
+        changed: boolean;
+    };
 }>;

package/dist/utils/local-space-state.js

@@ -10,16 +10,13 @@ export const LOCAL_SPACE_STATE_FILE_NAME = "state.json";
 /**
  * Local Spacefast checkout contract.
  *
- * `.spacefast/space.json` is the committable selection axis: it names which
- * space a checkout targets (`space`) and may carry non-secret provider/team
- * coordinates (`team`, `apiBaseUrl`). It must not carry credentials.
+ * `.spacefast/space.json` is the committable selection axis: which space a
+ * checkout targets, plus non-secret provider/team coordinates. Never credentials.
  *
- * `.spacefast/state.json` is the local credential/cache axis: it records the
- * resolved `spaceId`, provider `apiUrl`, anonymous `claimToken` before claim,
- * durable `accessToken` after continuation, and small publish caches such as
- * `lastVersionId`. It is secret, machine-written, gitignored, and merge-written.
- * The strict versioned schema fails closed instead of letting an older tool
- * reinterpret fields written under a contract it does not understand.
+ * `.spacefast/state.json` is the secret axis: credentials and small publish
+ * caches, machine-written, gitignored, merge-written. Its strict versioned
+ * schema fails closed rather than let an older tool reinterpret fields written
+ * under a contract it does not understand.
  */
 export const localSpaceLinkSchema = z
     .object({
@@ -31,7 +28,7 @@ export const localSpaceLinkSchema = z
 export const LOCAL_SPACE_STATE_SCHEMA_VERSION = 1;
 // One reservation, two slots: it is written as `pendingPublish` and moved to
 // `creationReplay` once its receipt commits. Space creation is the only
-// mutation that reserves one — credential-free publishes are not idempotent.
+// mutation that reserves one. Credential-free publishes are not idempotent.
 export const creationAttemptSchema = z
     .object({
     key: z.string().min(1),
@@ -145,7 +142,6 @@ function linkSpaceId(link) {
 export async function readLocalSpaceLink(root) {
     return (await readLocalSpaceLinkWithPath(root))?.link ?? null;
 }
-/** Like readLocalSpaceLink, but reports the file path alongside the link. */
 export async function readLocalSpaceLinkWithPath(root) {
     const primary = parseLink(await readJsonFile(root, path.join(LOCAL_SPACE_STATE_DIR_NAME, LOCAL_SPACE_LINK_FILE_NAME)));
     return primary ? { link: primary, path: localSpaceLinkPath(root) } : null;
@@ -183,10 +179,9 @@ function isWithinBoundary(current, boundary) {
     return relative === "" || (!relative.startsWith("..") && !path.isAbsolute(relative));
 }
 /**
- * Walk up from `startDir` to the filesystem root (or `boundary`, when given),
- * returning the first non-null result of `probe`. Shared by every "nearest
- * checkout marker" lookup (state+link discovery here, the CLI's link-only
- * discovery) so the traversal rules live in one place.
+ * Walk up from `startDir` to the filesystem root (or `boundary`), returning the
+ * first non-null `probe` result. Every "nearest checkout marker" lookup shares
+ * it so the traversal rules live in one place.
  */
 export async function findUpward(probe, startDir = process.cwd(), boundary) {
     let current = path.resolve(startDir);
@@ -251,7 +246,7 @@ async function ensureStateGitignored(root, onConflict) {
             const lines = raw.split(/\r?\n/);
             const missing = entries.filter((entry) => !lines.includes(entry));
             if (missing.length === 0)
-                return;
+                return false;
             const prefix = raw.length > 0 && !raw.endsWith("\n") ? "\n" : "";
             await secureWriteFile({
                 root,
@@ -261,7 +256,7 @@ async function ensureStateGitignored(root, onConflict) {
                 mode: 0o644,
                 expectedContent: existing,
             });
-            return;
+            return true;
         }
         catch (error) {
             if (error instanceof SecureLocalFileConflictError)
@@ -274,6 +269,7 @@ async function ensureStateGitignored(root, onConflict) {
         }
     }
     /* eslint-enable no-await-in-loop */
+    throw new LocalSpaceStateConflictError("Local .gitignore stayed busy for too long.");
 }
 function assignDefined(target, input) {
     for (const [key, value] of Object.entries(input)) {
@@ -308,7 +304,8 @@ export async function writeLocalSpaceLink(root, link) {
 }
 export async function mutateLocalSpaceState(root, mutate, options = {}) {
     const stateRelativePath = path.join(LOCAL_SPACE_STATE_DIR_NAME, LOCAL_SPACE_STATE_FILE_NAME);
-    await ensureStateGitignored(root, options.onConflict);
+    const gitignoreChanged = await ensureStateGitignored(root, options.onConflict);
+    options.onGitignoreResult?.(gitignoreChanged);
     /* eslint-disable no-await-in-loop -- compare-and-swap retries are intentionally serialized against the latest committed state. */
     for (let attempt = 1; attempt <= LOCAL_STATE_MUTATION_ATTEMPTS; attempt += 1) {
         try {
@@ -320,8 +317,8 @@ export async function mutateLocalSpaceState(root, mutate, options = {}) {
             const current = parsed?.success
                 ? parsed.data
                 : { schemaVersion: LOCAL_SPACE_STATE_SCHEMA_VERSION };
-            // The callback may run again after a compare-and-swap collision. Keeping it
-            // synchronous makes remote effects and other one-shot work impossible here.
+            // The callback may run again after a compare-and-swap collision; keeping
+            // it synchronous rules out one-shot work inside it.
             const payload = localSpaceStateSchema.parse({
                 ...mutate(structuredClone(current)),
                 schemaVersion: LOCAL_SPACE_STATE_SCHEMA_VERSION,
@@ -362,7 +359,6 @@ function sameCredentialReplay(left, right) {
         left.key === right.key &&
         left.principal === right.principal);
 }
-/** Reserve random replay custody before a claim token can be consumed. */
 export async function reserveLocalCredentialReplay(root, input) {
     const identity = createOneShotReplayIdentity(`sf-${input.operation}`);
     const candidate = {
@@ -396,6 +392,7 @@ function credentialMatches(state, expected) {
     return state.claimToken === expected.claimToken && state.accessToken === expected.accessToken;
 }
 export async function saveLocalSpaceState(root, input) {
+    let gitignoreChanged = false;
     await mutateLocalSpaceState(root, (existing) => {
         if (existing.spaceId && existing.spaceId !== input.spaceId && !input.replaceSpace) {
             throw new LocalSpaceStateConflictError(`Local Spacefast state changed from ${input.spaceId} to ${existing.spaceId}.`);
@@ -473,6 +470,10 @@ export async function saveLocalSpaceState(root, input) {
             delete next.pendingCredentialReplay;
         }
         return localSpaceStateSchema.parse(next);
+    }, {
+        onGitignoreResult: (changed) => {
+            gitignoreChanged = changed;
+        },
     });
     const statePath = localSpaceStatePath(root);
     const linkRelativePath = path.join(LOCAL_SPACE_STATE_DIR_NAME, LOCAL_SPACE_LINK_FILE_NAME);
@@ -495,7 +496,12 @@ export async function saveLocalSpaceState(root, input) {
                 throw new LocalSpaceStateConflictError(`The committed checkout link selects ${inheritedLink.space}, not ${input.spaceId}.`);
             }
             if (inheritedLink) {
-                return { statePath, linkPath: localSpaceLinkPath(root), wroteLink };
+                return {
+                    statePath,
+                    linkPath: localSpaceLinkPath(root),
+                    wroteLink,
+                    gitignore: { path: path.join(root, ".gitignore"), changed: gitignoreChanged },
+                };
             }
         }
         try {
@@ -519,5 +525,10 @@ export async function saveLocalSpaceState(root, input) {
     else if (primaryLink.space !== input.spaceId) {
         throw new LocalSpaceStateConflictError(`The committed checkout link selects ${primaryLink.space}, not ${input.spaceId}.`);
     }
-    return { statePath, linkPath: localSpaceLinkPath(root), wroteLink };
+    return {
+        statePath,
+        linkPath: localSpaceLinkPath(root),
+        wroteLink,
+        gitignore: { path: path.join(root, ".gitignore"), changed: gitignoreChanged },
+    };
 }

package/dist/utils/oauth-signed-query.d.ts

@@ -1,8 +1,6 @@
 /**
- * The signed OAuth authorize continuation carried by a query string, or null
- * when there isn't one. Better Auth's signature covers every param it sent
- * (the set is self-declared in `ba_param`) — anything extra that later joined
- * the URL (a returnTo, a tracking param) must be dropped before the query is
- * sent back, or verification fails.
+ * The signed authorize continuation in `query`, or null when there isn't one.
+ * The signature covers only the params `ba_param` names, so anything that
+ * joined the URL later must be dropped or verification fails.
  */
 export declare function signedOAuthQuerySubset(query: string): string | null;

package/dist/utils/oauth-signed-query.js

@@ -1,13 +1,10 @@
-// Better Auth's OAuth authorize endpoint hands interaction prompts (login,
-// consent) to the dashboard by redirecting with the ENTIRE authorize query,
-// HMAC-signed by the auth server (`sig` + `exp` + `ba_*` bookkeeping params).
-// Verification hashes the query verbatim, so it must round-trip byte-exact.
+// Better Auth redirects interaction prompts to the dashboard with the entire
+// authorize query, HMAC-signed. Verification hashes it verbatim, so the query
+// must round-trip byte-exact.
 /**
- * The signed OAuth authorize continuation carried by a query string, or null
- * when there isn't one. Better Auth's signature covers every param it sent
- * (the set is self-declared in `ba_param`) — anything extra that later joined
- * the URL (a returnTo, a tracking param) must be dropped before the query is
- * sent back, or verification fails.
+ * The signed authorize continuation in `query`, or null when there isn't one.
+ * The signature covers only the params `ba_param` names, so anything that
+ * joined the URL later must be dropped or verification fails.
  */
 export function signedOAuthQuerySubset(query) {
     const params = new URLSearchParams(query);

package/dist/utils/one-shot-replay.d.ts

@@ -3,11 +3,9 @@ export type OneShotReplayIdentity = {
     principal: string;
 };
 /**
- * Creates an unguessable capability for replaying one shown-once response.
- *
- * Neither value is derived from the credential consumed by the mutation. A
- * caller holding only that old credential therefore cannot locate the stored
- * response after the credential is revoked.
+ * An unguessable capability for replaying one shown-once response. Neither
+ * value derives from the credential the mutation consumes, so a caller holding
+ * only that revoked credential cannot locate the stored response.
  */
 export declare function createOneShotReplayIdentity(prefix: string): OneShotReplayIdentity;
 /** Production headers for one one-shot attempt (or one device-poll sequence). */

package/dist/utils/one-shot-replay.js

@@ -1,10 +1,8 @@
 import { randomBytes } from "node:crypto";
 /**
- * Creates an unguessable capability for replaying one shown-once response.
- *
- * Neither value is derived from the credential consumed by the mutation. A
- * caller holding only that old credential therefore cannot locate the stored
- * response after the credential is revoked.
+ * An unguessable capability for replaying one shown-once response. Neither
+ * value derives from the credential the mutation consumes, so a caller holding
+ * only that revoked credential cannot locate the stored response.
  */
 export function createOneShotReplayIdentity(prefix) {
     return {

package/dist/utils/page-colors.d.ts

@@ -1,7 +1,5 @@
 import type { SpacePageTheme } from "../contracts/space-config.js";
-/** Default page palette (mirrored into the shared template CSS) — the
- * printed-matter scheme: warm canvas, ink type, marker accent (always a
- * ground with ink on top; the link derivation handles its text-grade). */
+/** Default page palette, mirrored into the shared template CSS. */
 export declare const PAGE_COLOR_DEFAULTS: {
     readonly accent: "#d8f24b";
     readonly bg: "#f7f5ef";
@@ -28,7 +26,6 @@ export type DerivedPageColors = {
     scheme: "adaptive" | "light" | "dark";
     /** The accent exactly as pushed (fills keep the brand color verbatim). */
     accent: string;
-    /** Label color on accent fills. */
     onAccent: string;
     /** Accent-derived link color, readable on the light (or pinned) surface. */
     link: string;
@@ -38,15 +35,12 @@ export type DerivedPageColors = {
     pinned?: PageSchemeColors;
 };
 /**
- * Return `color` unchanged when it already meets `target` on `surface`;
- * otherwise move its OKLCH lightness (hue/chroma preserved) just far enough
- * to meet it. Falls back to plain black/white when even full lightness range
- * cannot reach the target (e.g. a mid-gray surface).
+ * Moves `color`'s OKLCH lightness (hue and chroma preserved) just far enough
+ * to meet `target` on `surface`. Falls back to black or white when the full
+ * lightness range cannot reach it, as on a mid-gray surface.
  */
 export declare function readableOn(color: string, surface: string, target: number): string;
-/** Button-label color for an accent fill: white when it can carry, else ink. */
 export declare function onAccentColor(accent: string): string;
-/** The one entry point: raw theme in, everything the templates paint with out. */
 export declare function derivePageColors(theme: Pick<SpacePageTheme, "accent" | "background">): DerivedPageColors;
 /** Hex form of any schema-accepted color, for color-picker inputs. */
 export declare function pageColorToHex(value: string): string | null;

package/dist/utils/page-colors.js

@@ -1,26 +1,10 @@
-// Readability engine for Spacefast-authored pages.
-//
-// Theme colors are intent, not CSS: users and agents push any accent or
-// background (dashboard, spacefast.jsonc, API) and the platform guarantees
-// every rendered page stays readable. This module derives the full set of
-// colors the templates actually paint with:
-//
-//   - `onAccent`  — button-label color on accent fills (black or white).
-//   - `link`      — the accent, lightness-adjusted until it meets WCAG AA
-//                   against the surface it sits on. Hue and chroma survive,
-//                   so it still reads as the brand color.
-//   - `pinned`    — when a background is set, a complete coherent scheme
-//                   (fg/muted/surface/border) derived from it and pinned for
-//                   every visitor. A chosen background IS the page; the
-//                   visitor's OS dark-mode setting must not repaint half the
-//                   variables into an unreadable hybrid.
-//
-// Everything is pure and deterministic: publish finalize, dashboard previews,
-// and tests all call the same functions and get the same pixels.
+// Readability engine for Spacefast-authored pages. Users and agents push any
+// accent or background; this module derives the colors the templates paint
+// with so every page meets WCAG AA. A pushed background pins a whole scheme,
+// because the visitor's OS dark-mode setting must not repaint half the
+// variables into an unreadable hybrid.
 import { formatHex, oklch, parse, wcagContrast } from "culori";
-/** Default page palette (mirrored into the shared template CSS) — the
- * printed-matter scheme: warm canvas, ink type, marker accent (always a
- * ground with ink on top; the link derivation handles its text-grade). */
+/** Default page palette, mirrored into the shared template CSS. */
 export const PAGE_COLOR_DEFAULTS = {
     accent: "#d8f24b",
     bg: "#f7f5ef",
@@ -34,13 +18,10 @@ export const PAGE_COLOR_DEFAULTS = {
     darkCard: "#0c0c0c",
     darkBorder: "#2b2823",
 };
-/** WCAG AA for body-size text. */
+// WCAG AA: 4.5 for text, 3 for non-text control boundaries.
 const TEXT_CONTRAST = 4.5;
-/** Body-size button labels on accent fills. */
 const UI_CONTRAST = 4.5;
-/** Essential control boundaries against their painted surface. */
 const CONTROL_CONTRAST = 3;
-/** Primary foreground meets AA even on mid-tone custom backgrounds. */
 const FG_CONTRAST = 4.5;
 function safeParse(value) {
     if (!value)
@@ -59,10 +40,9 @@ function isLightSurface(surface) {
     return contrast("#000000", surface) >= contrast("#ffffff", surface);
 }
 /**
- * Return `color` unchanged when it already meets `target` on `surface`;
- * otherwise move its OKLCH lightness (hue/chroma preserved) just far enough
- * to meet it. Falls back to plain black/white when even full lightness range
- * cannot reach the target (e.g. a mid-gray surface).
+ * Moves `color`'s OKLCH lightness (hue and chroma preserved) just far enough
+ * to meet `target` on `surface`. Falls back to black or white when the full
+ * lightness range cannot reach it, as on a mid-gray surface.
  */
 export function readableOn(color, surface, target) {
     if (contrast(color, surface) >= target)
@@ -78,8 +58,7 @@ export function readableOn(color, surface, target) {
     if (contrast(atLimit, surface) < target) {
         return isLightSurface(surface) ? "#000000" : "#ffffff";
     }
-    // Binary search for the lightness closest to the original that still meets
-    // the target; contrast is monotonic in lightness on a fixed surface side.
+    // Contrast is monotonic in lightness on a fixed surface side.
     let searchLimit = limit;
     let searchStart = base.l;
     for (let i = 0; i < 24; i += 1) {
@@ -93,14 +72,12 @@ export function readableOn(color, surface, target) {
     }
     return formatHex({ ...base, l: searchLimit });
 }
-/** Button-label color for an accent fill: white when it can carry, else ink. */
 export function onAccentColor(accent) {
     return contrast("#ffffff", accent) >= UI_CONTRAST ? "#ffffff" : "#000000";
 }
 function clamp(value, min, max) {
     return Math.min(max, Math.max(min, value));
 }
-/** Derive a complete coherent scheme from a pushed background color. */
 function schemeFromBackground(background) {
     const parsed = safeParse(background);
     const bg = parsed ? formatHex(parsed) : PAGE_COLOR_DEFAULTS.bg;
@@ -138,7 +115,6 @@ function schemeFromBackground(background) {
         },
     };
 }
-/** The one entry point: raw theme in, everything the templates paint with out. */
 export function derivePageColors(theme) {
     const accentInput = theme.accent?.trim();
     const accent = accentInput && safeParse(accentInput) ? accentInput : PAGE_COLOR_DEFAULTS.accent;

package/dist/utils/page-fonts.js

@@ -1,15 +1,10 @@
-// The platform page fonts. Recoleta is the only downloaded face (DESIGN.md
-// §4) — body and mono are system stacks, so a published page pays for exactly
-// one typeface. It is commercial, never committed to this repo, and loads from
-// wordpress.com's font CDN so every space hostname reuses one warm
-// browser-cache entry instead of a cold per-space fetch.
-// `font-display:optional` renders the fallback and never swaps mid-view when a
-// font arrives late — cached loads (everything after the first) get the brand
-// font with no flicker either way.
+// Recoleta is the only downloaded face (DESIGN.md §4); body and mono are system
+// stacks. It is commercial, never committed to this repo, and loads from
+// wordpress.com's font CDN so every space hostname shares one cache entry.
+// `font-display:optional` never swaps mid-view when a font arrives late.
 const RECOLETA_BASE = "https://wordpress.com/i/fonts/recoleta/";
 const RECOLETA_WEIGHTS = [300, 400, 500, 600, 700];
 export const PAGE_FONT_FACES = RECOLETA_WEIGHTS.map((weight) => `@font-face{font-family:"Recoleta";src:url("${RECOLETA_BASE}${weight}.woff2") format("woff2");font-style:normal;font-weight:${weight};font-display:optional}`).join("");
-// Only the face the default pages actually download: Recoleta 400 for headings.
-// Fonts are a cross-origin fetch; `crossorigin` is required — font requests are
-// CORS mode, and a mismatched preload is discarded.
+// Only the weight the default pages render. `crossorigin` is required: font
+// requests are CORS mode, and a mismatched preload is discarded.
 export const PAGE_FONT_PRELOAD_HTML = `<link rel="preload" href="${RECOLETA_BASE}400.woff2" as="font" type="font/woff2" crossorigin>`;

package/dist/utils/page-preview.d.ts

@@ -3,5 +3,4 @@
  * the preview page is reachable only under this query flag.
  */
 export declare const PAGE_PREVIEW_QUERY = "spacefast_view";
-/** The preview page for a file whose bytes live at `fileHref`. */
 export declare function previewPageHref(fileHref: string): string;

package/dist/utils/page-preview.js

@@ -3,7 +3,6 @@
  * the preview page is reachable only under this query flag.
  */
 export const PAGE_PREVIEW_QUERY = "spacefast_view";
-/** The preview page for a file whose bytes live at `fileHref`. */
 export function previewPageHref(fileHref) {
     return `${fileHref}${fileHref.includes("?") ? "&" : "?"}${PAGE_PREVIEW_QUERY}=1`;
 }

package/dist/utils/pages.d.ts

@@ -1,4 +1,4 @@
-import { type CustomPageId, type SitePageId } from "../contracts/pages.js";
+import { type CustomPageId, type PlatformPageId, type SitePageId } from "../contracts/pages.js";
 import { type DerivedPageColors } from "./page-colors.js";
 export { PAGE_PREVIEW_QUERY, previewPageHref } from "./page-preview.js";
 export type PageTheme = {
@@ -22,7 +22,7 @@ export type PagePreviewFile = {
     mime?: string;
 };
 export type PageExpansionContext = {
-    page: CustomPageId | "layout";
+    page: CustomPageId | PlatformPageId | "layout";
     theme?: PageTheme;
     content?: string;
     displayPath?: string;
@@ -30,6 +30,9 @@ export type PageExpansionContext = {
     itemCount?: number;
     visibleItemCount?: number;
     hideSpacefastBranding?: boolean;
+    supportUrl?: string;
+    partnerBranding?: boolean;
+    useSystemDisplayFont?: boolean;
     files?: readonly PageFileEntry[];
     file?: PagePreviewFile;
 };
@@ -42,15 +45,10 @@ export type PageDiagnostic = {
 export declare function isPagePublicPath(path: string): boolean;
 export declare function escapePageHtml(value: string): string;
 /**
- * The custom properties a theme paints with. Pushed colors are intent; the
- * readability engine (page-colors.ts) derives what the templates actually use.
- * A custom background pins a complete scheme for both OS modes — emitting
- * `--sf-bg` alone used to leave dark-mode visitors with the dark foreground on
- * the user's light background.
- *
- * Exported because the dashboard's live preview paints the same tokens from an
- * unsaved draft: it passes the colors it has already derived, and gets exactly
- * what the published page would carry.
+ * The custom properties a theme paints with. A custom background pins a
+ * complete scheme for both OS modes; `--sf-bg` alone would leave dark-mode
+ * visitors with the dark foreground on a light background. Exported so the
+ * dashboard preview paints the same tokens from an unsaved draft.
  */
 export declare function pageThemeCss(theme: PageTheme, derived?: DerivedPageColors): string;
 export declare function expandPageHtml(source: string, context: PageExpansionContext): string;
@@ -69,6 +67,19 @@ export declare const DEFAULT_PAGE_TEMPLATES: {
     index: string;
     preview: string;
 };
+export declare const DEFAULT_PLATFORM_PAGE_TEMPLATES: {
+    login: string;
+    undeployed: string;
+    suspended: string;
+    legal: string;
+    gone: string;
+    "runtime-error": string;
+    "rate-limited": string;
+    "tier-unavailable": string;
+    "proxy-error": string;
+    "method-not-allowed": string;
+    "content-too-large": string;
+};
 export declare const DEFAULT_LAYOUT_TEMPLATE: string;
 export declare function defaultPageTemplate(id: SitePageId): string;
 export declare function pageIdFromFilename(filename: string): CustomPageId | null;