@spacefast/common 0.0.5 → 0.0.7

package/brand-assets/spacefast-favicon.svg

@@ -0,0 +1,16 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 160 160" role="img" aria-label="Spacefast">
+  <style>
+    .sf-favicon-primary { fill: #141419; }
+    @media (prefers-color-scheme: dark) { .sf-favicon-primary { fill: #fbf8f1; } }
+  </style>
+  <g transform="rotate(-1 80 80)">
+    <g transform="translate(22.5 48) scale(2.15)" fill="#ff4217">
+      <path d="M0 0h24v7H7v7h17v20H0v-7h17v-7H0V0Z"/>
+      <path d="M0 0h25v7H7v6h15v7H7v14H0V0Z" transform="translate(31 0)"/>
+    </g>
+    <g class="sf-favicon-primary" transform="translate(17.5 43) scale(2.15)" fill="#141419">
+      <path d="M0 0h24v7H7v7h17v20H0v-7h17v-7H0V0Z"/>
+      <path d="M0 0h25v7H7v6h15v7H7v14H0V0Z" transform="translate(31 0)"/>
+    </g>
+  </g>
+</svg>

package/brand-assets/spacefast-sf-full-bleed.svg

@@ -0,0 +1,13 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 160 160" role="img" aria-label="Spacefast">
+  <rect width="160" height="160" fill="#141419"/>
+  <g transform="rotate(-1 80 80)">
+    <g transform="translate(39.75 55.5) scale(1.5)" fill="#ff4217">
+      <path d="M0 0h24v7H7v7h17v20H0v-7h17v-7H0V0Z"/>
+      <path d="M0 0h25v7H7v6h15v7H7v14H0V0Z" transform="translate(31 0)"/>
+    </g>
+    <g transform="translate(34.75 50.5) scale(1.5)" fill="#fbf8f1">
+      <path d="M0 0h24v7H7v7h17v20H0v-7h17v-7H0V0Z"/>
+      <path d="M0 0h25v7H7v6h15v7H7v14H0V0Z" transform="translate(31 0)"/>
+    </g>
+  </g>
+</svg>

package/brand-assets/spacefast-wordmark.svg

@@ -0,0 +1,5 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 326 62" role="img" aria-label="Spacefast">
+  <rect x="14" y="12" width="306" height="48" fill="#ff4217"/>
+  <rect x="10" y="8" width="306" height="48" fill="#141419" stroke="#141419" stroke-width="1"/>
+  <path fill="#fbf8f1" d="M20 15h24v7H27v7h17v20H20v-7h17v-7H20V15ZM51 15h24v18H58v16h-7V15Zm7 11h10v-4H58v4ZM83 15h24l9 34h-8l-2-8H84l-2 8h-8l9-34Zm3 19h18l-4-12H90l-4 12ZM145 22h-19v20h19v7h-26V15h26v7ZM152 15h26v7h-19v6h15v7h-15v7h19v7h-26V15ZM185 15h25v7h-18v6h15v7h-15v14h-7V15ZM215 15h24l9 34h-8l-2-8h-22l-2 8h-8l9-34Zm3 19h18l-4-12h-10l-4 12ZM250 15h24v7h-17v7h17v20h-24v-7h17v-7h-17V15ZM279 15h27v7h-10v27h-7V22h-10v-7Z"/>
+</svg>

package/dist/agents/connect-targets.d.ts

@@ -0,0 +1,138 @@
+export declare const LOCAL_MCP_PACKAGE = "spacefast";
+export declare const LOCAL_MCP_COMMAND = "npx";
+export declare const LOCAL_MCP_ARGS: readonly ["-y", "spacefast", "mcp"];
+/** The copy-paste one-liner form, e.g. `npx -y spacefast mcp`. */
+export declare const LOCAL_MCP_COMMAND_LINE: string;
+/**
+ * base64 of a UTF-8 string, without Buffer. Byte-identical to
+ * `Buffer.from(value, "utf8").toString("base64")`, so deeplinks stay stable
+ * whether they are built at the Astro build (Node) or in the dashboard (browser).
+ */
+export declare function base64Utf8(value: string): string;
+/** The on-device MCP server entry, byte-identical to the committed plugin `.mcp.json`. */
+export declare function localMcpServersJson(): {
+    mcpServers: {
+        spacefast: {
+            command: string;
+            args: ("mcp" | "spacefast" | "-y")[];
+            env: {};
+        };
+    };
+};
+/**
+ * VS Code's `.vscode/mcp.json` uses a top-level `servers` key (not the
+ * `mcpServers` key Cursor/Claude Code use), so it gets its own generator —
+ * single-sourced from the same command/args/package so it can never drift.
+ * See https://code.visualstudio.com/docs/agent-customization/mcp-servers.
+ */
+export declare function vscodeMcpServersJson(): {
+    servers: {
+        spacefast: {
+            type: string;
+            command: string;
+            args: ("mcp" | "spacefast" | "-y")[];
+        };
+    };
+};
+export declare function cursorHostedMcpDeeplink(mcpEndpoint: string): string;
+export declare function vscodeHostedMcpDeeplink(mcpEndpoint: string): string;
+/**
+ * The hosted server entry for Claude Code's `.mcp.json`. Claude Code rejects a
+ * bare `{ url }` as invalid, so the entry carries `type: "http"` — byte-identical
+ * to the committed `plugins/claude-code/.mcp.json`.
+ */
+export declare function hostedMcpServersJson(mcpEndpoint: string): {
+    mcpServers: {
+        spacefast: {
+            type: string;
+            url: string;
+        };
+    };
+};
+/**
+ * The hosted server entry for Cursor's `~/.cursor/mcp.json`. Cursor's known-good
+ * shape is a bare `{ url }` (no `type`) — matching the committed
+ * `plugins/cursor/.mcp.json`. Kept separate from the Claude Code generator
+ * rather than adding `type` everywhere, since `type: "http"` in Cursor's file is
+ * untested territory.
+ */
+export declare function cursorHostedMcpServersJson(mcpEndpoint: string): {
+    mcpServers: {
+        spacefast: {
+            url: string;
+        };
+    };
+};
+/** The hosted server entry for VS Code's `.vscode/mcp.json` (`servers` + `type: http`). */
+export declare function vscodeHostedMcpServersJson(mcpEndpoint: string): {
+    servers: {
+        spacefast: {
+            type: string;
+            url: string;
+        };
+    };
+};
+export declare function codexHostedMcpToml(mcpEndpoint: string): string;
+export declare const CODEX_MCP_TOML: string;
+/**
+ * Claude Code's one-command hosted-MCP connect (`claude mcp add`). Parameterized
+ * by the hosted endpoint so the dashboard can point it at the runtime-derived
+ * endpoint while the marketing site passes the prod constant.
+ */
+export declare function buildClaudeMcpAddCommand(mcpEndpoint: string): string;
+/**
+ * Codex's hosted-MCP connect. `codex mcp add` registers the server; OAuth is a
+ * separate `codex mcp login` step, so both are chained — a bare `add` leaves the
+ * connection unauthenticated and the tools 401.
+ */
+export declare function buildCodexMcpAddCommand(mcpEndpoint: string): string;
+export type ConnectCopyLanguage = "bash" | "json" | "toml" | "text";
+export type ConnectCopy = Readonly<{
+    /** Short label for the affordance and the copied-value toast. */
+    label: string;
+    /** The string written to the clipboard. */
+    value: string;
+    language: ConnectCopyLanguage;
+}>;
+export type ConnectDeeplink = Readonly<{
+    href: string;
+    label: string;
+}>;
+/** A downloadable artifact that wires the agent (e.g. the Claude desktop extension). */
+export type ConnectDownload = Readonly<{
+    href: string;
+    label: string;
+}>;
+/**
+ * A single connect card: one agent, one primary action (a one-click deeplink or
+ * a copy of the command/endpoint that wires it), plus an optional secondary
+ * "copy the client config file" affordance.
+ */
+export declare const CONNECT_TARGET_IDS: readonly ["claude-code", "cursor", "vscode", "codex", "claude", "chatgpt"];
+export type ConnectTargetId = (typeof CONNECT_TARGET_IDS)[number];
+export type ConnectTarget = Readonly<{
+    id: ConnectTargetId;
+    name: string;
+    /** One short line on how this agent connects. */
+    blurb: string;
+    /** One-click URL-scheme install, when the client supports one. */
+    deeplink?: ConnectDeeplink;
+    /** The primary copy action when there is no deeplink (command or endpoint). */
+    primary?: ConnectCopy;
+    /** Secondary copy-the-config affordance (the client's MCP config file). */
+    config?: ConnectCopy;
+    /** A downloadable installer for clients that ship one (Claude Desktop). */
+    download?: ConnectDownload;
+}>;
+/**
+ * The per-agent connect catalog, parameterized by the hosted MCP endpoint.
+ * Every one-click and copy-config path carries the hosted endpoint (OAuth,
+ * nothing to install); on-device stdio is the CLI users' alternative and
+ * lives in the docs/marketing setup lanes, not here.
+ */
+export declare function buildConnectTargets({ mcpEndpoint }: {
+    mcpEndpoint: string;
+}): ConnectTarget[];
+export declare function getConnectTarget(id: ConnectTargetId, options: {
+    mcpEndpoint: string;
+}): ConnectTarget;

package/dist/agents/connect-targets.js

@@ -0,0 +1,243 @@
+/*
+ * Shared, browser-safe agent connect catalog.
+ *
+ * One source of truth for "add Spacefast to your agent": the MCP launch config,
+ * the one-click deeplinks, and the per-agent connect entries. Both the marketing
+ * site (apps/www/src/lib/llmo.ts + agent-targets.ts, with the hardcoded prod
+ * endpoint) and the dashboard (apps/my /account/agents, with the runtime-derived
+ * hosted endpoint) consume these, so every "connect an agent" surface advertises
+ * the identical command, package, and config — they can never drift apart.
+ *
+ * ISOMORPHIC ON PURPOSE: no Buffer, no process, no Node-only APIs. The dashboard
+ * renders this in the browser, so base64 goes through TextEncoder + btoa (both
+ * standard in browsers, Node 16+, and Bun) rather than Buffer.
+ */
+import { spacefastClaudePluginAddCommand, spacefastClaudePluginInstallCommand, spacefastCodexPluginAddCommand, spacefastCodexPluginInstallCommand, } from "../docs/skill-distribution.js";
+export const LOCAL_MCP_PACKAGE = "spacefast";
+export const LOCAL_MCP_COMMAND = "npx";
+export const LOCAL_MCP_ARGS = ["-y", LOCAL_MCP_PACKAGE, "mcp"];
+/** The copy-paste one-liner form, e.g. `npx -y spacefast mcp`. */
+export const LOCAL_MCP_COMMAND_LINE = `${LOCAL_MCP_COMMAND} ${LOCAL_MCP_ARGS.join(" ")}`;
+/**
+ * base64 of a UTF-8 string, without Buffer. Byte-identical to
+ * `Buffer.from(value, "utf8").toString("base64")`, so deeplinks stay stable
+ * whether they are built at the Astro build (Node) or in the dashboard (browser).
+ */
+export function base64Utf8(value) {
+    const bytes = new TextEncoder().encode(value);
+    let binary = "";
+    for (const byte of bytes) {
+        binary += String.fromCharCode(byte);
+    }
+    return btoa(binary);
+}
+/** The on-device MCP server entry, byte-identical to the committed plugin `.mcp.json`. */
+export function localMcpServersJson() {
+    return {
+        mcpServers: {
+            [LOCAL_MCP_PACKAGE]: {
+                command: LOCAL_MCP_COMMAND,
+                args: [...LOCAL_MCP_ARGS],
+                env: {},
+            },
+        },
+    };
+}
+/**
+ * VS Code's `.vscode/mcp.json` uses a top-level `servers` key (not the
+ * `mcpServers` key Cursor/Claude Code use), so it gets its own generator —
+ * single-sourced from the same command/args/package so it can never drift.
+ * See https://code.visualstudio.com/docs/agent-customization/mcp-servers.
+ */
+export function vscodeMcpServersJson() {
+    return {
+        servers: {
+            [LOCAL_MCP_PACKAGE]: {
+                type: "stdio",
+                command: LOCAL_MCP_COMMAND,
+                args: [...LOCAL_MCP_ARGS],
+            },
+        },
+    };
+}
+/*
+ * ONE-CLICK PATHS ARE ALWAYS HOSTED. Policy: hosted MCP for cloud agents,
+ * on-device for local ones — but a one-click install must never depend on the
+ * user having npm/npx. The hosted URL server needs no runtime at all (the
+ * client speaks HTTP + OAuth), so every deeplink and every primary action
+ * carries the hosted endpoint. On-device stdio (`npx -y spacefast mcp`) stays
+ * available as the explicitly-labeled alternative for people who run the CLI —
+ * their environment already provides npx.
+ */
+// Cursor one-click MCP install link — the canonical form Cursor's own directory
+// badges emit is the HTTPS web link (`https://cursor.com/install-mcp`), which
+// renders as a normal anchor everywhere; the `cursor://` scheme still works but
+// isn't what Cursor advertises. The inner config is the hosted URL entry
+// (base64-encoded); Cursor handles the OAuth dance itself.
+export function cursorHostedMcpDeeplink(mcpEndpoint) {
+    return `https://cursor.com/install-mcp?name=${LOCAL_MCP_PACKAGE}&config=${encodeURIComponent(base64Utf8(JSON.stringify({ url: mcpEndpoint })))}`;
+}
+// VS Code one-click MCP install link — the HTTPS redirect service GitHub's
+// install badges use, which works for stable VS Code (not just Insiders). The
+// config is the server object WITHOUT the name (name is the query param), and
+// `type: "http"` is mandatory — VS Code treats a bare `url` as a stdio command
+// and fails confusingly.
+export function vscodeHostedMcpDeeplink(mcpEndpoint) {
+    return `https://insiders.vscode.dev/redirect/mcp/install?name=${LOCAL_MCP_PACKAGE}&config=${encodeURIComponent(JSON.stringify({ type: "http", url: mcpEndpoint }))}`;
+}
+/**
+ * The hosted server entry for Claude Code's `.mcp.json`. Claude Code rejects a
+ * bare `{ url }` as invalid, so the entry carries `type: "http"` — byte-identical
+ * to the committed `plugins/claude-code/.mcp.json`.
+ */
+export function hostedMcpServersJson(mcpEndpoint) {
+    return {
+        mcpServers: {
+            [LOCAL_MCP_PACKAGE]: { type: "http", url: mcpEndpoint },
+        },
+    };
+}
+/**
+ * The hosted server entry for Cursor's `~/.cursor/mcp.json`. Cursor's known-good
+ * shape is a bare `{ url }` (no `type`) — matching the committed
+ * `plugins/cursor/.mcp.json`. Kept separate from the Claude Code generator
+ * rather than adding `type` everywhere, since `type: "http"` in Cursor's file is
+ * untested territory.
+ */
+export function cursorHostedMcpServersJson(mcpEndpoint) {
+    return {
+        mcpServers: {
+            [LOCAL_MCP_PACKAGE]: { url: mcpEndpoint },
+        },
+    };
+}
+/** The hosted server entry for VS Code's `.vscode/mcp.json` (`servers` + `type: http`). */
+export function vscodeHostedMcpServersJson(mcpEndpoint) {
+    return {
+        servers: {
+            [LOCAL_MCP_PACKAGE]: { type: "http", url: mcpEndpoint },
+        },
+    };
+}
+// Codex reads MCP servers from `~/.codex/config.toml`; the hosted entry is a
+// bare streamable-HTTP url (same lane the committed codex plugin ships).
+export function codexHostedMcpToml(mcpEndpoint) {
+    return [`[mcp_servers.${LOCAL_MCP_PACKAGE}]`, `url = ${JSON.stringify(mcpEndpoint)}`].join("\n");
+}
+// The on-device stdio TOML, for CLI users whose environment provides npx.
+export const CODEX_MCP_TOML = [
+    `[mcp_servers.${LOCAL_MCP_PACKAGE}]`,
+    `command = ${JSON.stringify(LOCAL_MCP_COMMAND)}`,
+    `args = [${LOCAL_MCP_ARGS.map((arg) => JSON.stringify(arg)).join(", ")}]`,
+].join("\n");
+/**
+ * Claude Code's one-command hosted-MCP connect (`claude mcp add`). Parameterized
+ * by the hosted endpoint so the dashboard can point it at the runtime-derived
+ * endpoint while the marketing site passes the prod constant.
+ */
+export function buildClaudeMcpAddCommand(mcpEndpoint) {
+    return `claude mcp add --transport http ${LOCAL_MCP_PACKAGE} ${mcpEndpoint}`;
+}
+/**
+ * Codex's hosted-MCP connect. `codex mcp add` registers the server; OAuth is a
+ * separate `codex mcp login` step, so both are chained — a bare `add` leaves the
+ * connection unauthenticated and the tools 401.
+ */
+export function buildCodexMcpAddCommand(mcpEndpoint) {
+    return `codex mcp add ${LOCAL_MCP_PACKAGE} --url ${mcpEndpoint} && codex mcp login ${LOCAL_MCP_PACKAGE}`;
+}
+/**
+ * A single connect card: one agent, one primary action (a one-click deeplink or
+ * a copy of the command/endpoint that wires it), plus an optional secondary
+ * "copy the client config file" affordance.
+ */
+export const CONNECT_TARGET_IDS = [
+    "claude-code",
+    "cursor",
+    "vscode",
+    "codex",
+    "claude",
+    "chatgpt",
+];
+/**
+ * The per-agent connect catalog, parameterized by the hosted MCP endpoint.
+ * Every one-click and copy-config path carries the hosted endpoint (OAuth,
+ * nothing to install); on-device stdio is the CLI users' alternative and
+ * lives in the docs/marketing setup lanes, not here.
+ */
+export function buildConnectTargets({ mcpEndpoint }) {
+    const cursorConfigJson = JSON.stringify(cursorHostedMcpServersJson(mcpEndpoint), null, 2);
+    const vscodeHostedConfigJson = JSON.stringify(vscodeHostedMcpServersJson(mcpEndpoint), null, 2);
+    return [
+        {
+            // The plugin is the recommended lane for CLI agents that support one:
+            // one paste ships the publish skill AND the MCP servers (hosted primary)
+            // and stays updated through the marketplace. `claude mcp add` remains
+            // the minimal MCP-only path in the config slot and on /agents.
+            id: "claude-code",
+            name: "Claude Code",
+            blurb: "One paste installs the plugin: publish skill plus MCP, updated from the marketplace.",
+            primary: {
+                label: "Install plugin",
+                value: `${spacefastClaudePluginAddCommand} && ${spacefastClaudePluginInstallCommand}`,
+                language: "bash",
+            },
+            config: {
+                label: "MCP only: claude mcp add",
+                value: buildClaudeMcpAddCommand(mcpEndpoint),
+                language: "bash",
+            },
+        },
+        {
+            id: "cursor",
+            name: "Cursor",
+            blurb: "One click adds hosted MCP. OAuth sign-in, nothing to install.",
+            deeplink: { href: cursorHostedMcpDeeplink(mcpEndpoint), label: "Add to Cursor" },
+            config: { label: "~/.cursor/mcp.json", value: cursorConfigJson, language: "json" },
+        },
+        {
+            id: "vscode",
+            name: "VS Code",
+            blurb: "One click adds hosted MCP for Copilot agent mode.",
+            deeplink: { href: vscodeHostedMcpDeeplink(mcpEndpoint), label: "Add to VS Code" },
+            config: { label: ".vscode/mcp.json", value: vscodeHostedConfigJson, language: "json" },
+        },
+        {
+            id: "codex",
+            name: "Codex",
+            blurb: "One paste installs the plugin: publish skill plus MCP, updated from the marketplace.",
+            primary: {
+                label: "Install plugin",
+                value: `${spacefastCodexPluginAddCommand} && ${spacefastCodexPluginInstallCommand}`,
+                language: "bash",
+            },
+            config: {
+                label: "MCP only: codex mcp add",
+                value: buildCodexMcpAddCommand(mcpEndpoint),
+                language: "bash",
+            },
+        },
+        {
+            id: "claude",
+            name: "Claude",
+            blurb: "Settings → Connectors → Add custom connector, paste this endpoint. Or grab the desktop extension.",
+            primary: { label: "MCP endpoint", value: mcpEndpoint, language: "text" },
+            download: {
+                href: "https://github.com/spacefast/plugins/releases/latest/download/claude-desktop.mcpb",
+                label: "Download desktop extension",
+            },
+        },
+        {
+            id: "chatgpt",
+            name: "ChatGPT",
+            blurb: "Turn on Developer mode (Settings → Apps & Connectors → Advanced), then Connectors → Create with this endpoint.",
+            primary: { label: "MCP endpoint", value: mcpEndpoint, language: "text" },
+        },
+    ];
+}
+export function getConnectTarget(id, options) {
+    const target = buildConnectTargets(options).find((entry) => entry.id === id);
+    if (!target)
+        throw new TypeError(`Unknown agent target: ${id}`);
+    return target;
+}

package/dist/brand-assets-build.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Build-only SVG serialization for the canonical Spacefast brand geometry.
+ *
+ * Browser and application modules must import `@spacefast/common/brand-assets`
+ * and render ordinary SVG markup from its constants. Only asset generators,
+ * plugin packaging, and other build steps may import this module.
+ */
+import { type SpacefastBrandColors } from "./brand-assets.js";
+export type WordmarkSvgOptions = {
+    ariaLabel?: string;
+    colors?: Partial<SpacefastBrandColors>;
+    height?: number;
+    width?: number;
+};
+export type IconSvgOptions = {
+    ariaLabel?: string;
+    colors?: Partial<SpacefastBrandColors>;
+    size?: number;
+};
+export type FaviconSvgOptions = {
+    ariaLabel?: string;
+    theme?: "adaptive" | "dark" | "light";
+};
+export declare function spacefastWordmarkSvg(options?: WordmarkSvgOptions): string;
+export declare function spacefastIconSvg(options?: IconSvgOptions): string;
+export declare function spacefastFaviconSvg(options?: FaviconSvgOptions): string;

package/dist/brand-assets-build.js

@@ -0,0 +1,81 @@
+/**
+ * Build-only SVG serialization for the canonical Spacefast brand geometry.
+ *
+ * Browser and application modules must import `@spacefast/common/brand-assets`
+ * and render ordinary SVG markup from its constants. Only asset generators,
+ * plugin packaging, and other build steps may import this module.
+ */
+import { SPACEFAST_BRAND_COLORS, SPACEFAST_ICON_F_OFFSET_X, SPACEFAST_ICON_F_PATH, SPACEFAST_ICON_LETTER_ORIGIN, SPACEFAST_ICON_LETTER_SCALE, SPACEFAST_ICON_S_PATH, SPACEFAST_ICON_SHADOW_OFFSET, SPACEFAST_ICON_VIEW_BOX, SPACEFAST_WORDMARK_PATH, SPACEFAST_WORDMARK_PLATE, SPACEFAST_WORDMARK_SHADOW_OFFSET, SPACEFAST_WORDMARK_VIEW_BOX, } from "./brand-assets.js";
+function resolvedColors(colors) {
+    return { ...SPACEFAST_BRAND_COLORS, ...colors };
+}
+function svgAttribute(value) {
+    return value
+        .replaceAll("&", "&")
+        .replaceAll('"', """)
+        .replaceAll("<", "&lt;")
+        .replaceAll(">", "&gt;");
+}
+function numericAttribute(name, value) {
+    if (value === undefined)
+        return "";
+    if (!Number.isFinite(value) || value <= 0) {
+        throw new RangeError(`${name} must be a positive finite number`);
+    }
+    return ` ${name}="${value}"`;
+}
+export function spacefastWordmarkSvg(options = {}) {
+    const colors = resolvedColors(options.colors);
+    const plate = SPACEFAST_WORDMARK_PLATE;
+    const shadow = SPACEFAST_WORDMARK_SHADOW_OFFSET;
+    const label = svgAttribute(options.ariaLabel ?? "Spacefast");
+    return `<svg xmlns="http://www.w3.org/2000/svg"${numericAttribute("width", options.width)}${numericAttribute("height", options.height)} viewBox="${SPACEFAST_WORDMARK_VIEW_BOX}" role="img" aria-label="${label}">
+  <rect x="${plate.x + shadow.x}" y="${plate.y + shadow.y}" width="${plate.width}" height="${plate.height}" fill="${svgAttribute(colors.shadow)}"/>
+  <rect x="${plate.x}" y="${plate.y}" width="${plate.width}" height="${plate.height}" fill="${svgAttribute(colors.plate)}" stroke="${svgAttribute(colors.plate)}" stroke-width="1"/>
+  <path fill="${svgAttribute(colors.paper)}" d="${SPACEFAST_WORDMARK_PATH}"/>
+</svg>
+`;
+}
+function iconLetters(fill, x, y, scale = SPACEFAST_ICON_LETTER_SCALE, className) {
+    const classAttribute = className ? ` class="${svgAttribute(className)}"` : "";
+    return `<g${classAttribute} transform="translate(${x} ${y}) scale(${scale})" fill="${svgAttribute(fill)}">
+      <path d="${SPACEFAST_ICON_S_PATH}"/>
+      <path d="${SPACEFAST_ICON_F_PATH}" transform="translate(${SPACEFAST_ICON_F_OFFSET_X} 0)"/>
+    </g>`;
+}
+export function spacefastIconSvg(options = {}) {
+    const colors = resolvedColors(options.colors);
+    const origin = SPACEFAST_ICON_LETTER_ORIGIN;
+    const shadow = SPACEFAST_ICON_SHADOW_OFFSET;
+    const label = svgAttribute(options.ariaLabel ?? "Spacefast");
+    const size = numericAttribute("width", options.size) + numericAttribute("height", options.size);
+    return `<svg xmlns="http://www.w3.org/2000/svg"${size} viewBox="${SPACEFAST_ICON_VIEW_BOX}" role="img" aria-label="${label}">
+  <rect width="160" height="160" fill="${svgAttribute(colors.plate)}"/>
+  <g transform="rotate(-1 80 80)">
+    ${iconLetters(colors.shadow, origin.x + shadow.x, origin.y + shadow.y)}
+    ${iconLetters(colors.paper, origin.x, origin.y)}
+  </g>
+</svg>
+`;
+}
+export function spacefastFaviconSvg(options = {}) {
+    const theme = options.theme ?? "adaptive";
+    const label = svgAttribute(options.ariaLabel ?? "Spacefast");
+    const primary = theme === "dark" ? SPACEFAST_BRAND_COLORS.paper : SPACEFAST_BRAND_COLORS.plate;
+    const adaptiveStyles = theme === "adaptive"
+        ? `
+  <style>
+    .sf-favicon-primary { fill: ${SPACEFAST_BRAND_COLORS.plate}; }
+    @media (prefers-color-scheme: dark) { .sf-favicon-primary { fill: ${SPACEFAST_BRAND_COLORS.paper}; } }
+  </style>`
+        : "";
+    const origin = { x: 17.5, y: 43 };
+    const scale = 2.15;
+    return `<svg xmlns="http://www.w3.org/2000/svg" viewBox="${SPACEFAST_ICON_VIEW_BOX}" role="img" aria-label="${label}">${adaptiveStyles}
+  <g transform="rotate(-1 80 80)">
+    ${iconLetters(SPACEFAST_BRAND_COLORS.shadow, origin.x + 5, origin.y + 5, scale)}
+    ${iconLetters(primary, origin.x, origin.y, scale, "sf-favicon-primary")}
+  </g>
+</svg>
+`;
+}

package/dist/brand-assets.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Canonical Spacefast visual geometry.
+ *
+ * Keep this module dependency-free: React, Astro, build scripts, social-card
+ * renderers, and plugin generators all consume it. Generated SVG/PNG files are
+ * build outputs of these constants, never independent sources of truth.
+ */
+export declare const SPACEFAST_BRAND_COLORS: {
+    readonly shadow: "#ff4217";
+    readonly plate: "#141419";
+    readonly paper: "#fbf8f1";
+};
+export type SpacefastBrandColors = {
+    shadow: string;
+    plate: string;
+    paper: string;
+};
+export declare const SPACEFAST_WORDMARK_VIEW_BOX = "0 0 326 62";
+export declare const SPACEFAST_WORDMARK_PLATE: {
+    readonly x: 10;
+    readonly y: 8;
+    readonly width: 306;
+    readonly height: 48;
+};
+export declare const SPACEFAST_WORDMARK_SHADOW_OFFSET: {
+    readonly x: 4;
+    readonly y: 4;
+};
+export declare const SPACEFAST_WORDMARK_PATH = "M20 15h24v7H27v7h17v20H20v-7h17v-7H20V15ZM51 15h24v18H58v16h-7V15Zm7 11h10v-4H58v4ZM83 15h24l9 34h-8l-2-8H84l-2 8h-8l9-34Zm3 19h18l-4-12H90l-4 12ZM145 22h-19v20h19v7h-26V15h26v7ZM152 15h26v7h-19v6h15v7h-15v7h19v7h-26V15ZM185 15h25v7h-18v6h15v7h-15v14h-7V15ZM215 15h24l9 34h-8l-2-8h-22l-2 8h-8l9-34Zm3 19h18l-4-12h-10l-4 12ZM250 15h24v7h-17v7h17v20h-24v-7h17v-7h-17V15ZM279 15h27v7h-10v27h-7V22h-10v-7Z";
+export declare const SPACEFAST_ICON_VIEW_BOX = "0 0 160 160";
+export declare const SPACEFAST_ICON_S_PATH = "M0 0h24v7H7v7h17v20H0v-7h17v-7H0V0Z";
+export declare const SPACEFAST_ICON_F_PATH = "M0 0h25v7H7v6h15v7H7v14H0V0Z";
+export declare const SPACEFAST_ICON_LETTER_ORIGIN: {
+    readonly x: 34.75;
+    readonly y: 50.5;
+};
+export declare const SPACEFAST_ICON_LETTER_SCALE = 1.5;
+export declare const SPACEFAST_ICON_F_OFFSET_X = 31;
+export declare const SPACEFAST_ICON_SHADOW_OFFSET: {
+    readonly x: 5;
+    readonly y: 5;
+};

package/dist/brand-assets.js

@@ -0,0 +1,30 @@
+/**
+ * Canonical Spacefast visual geometry.
+ *
+ * Keep this module dependency-free: React, Astro, build scripts, social-card
+ * renderers, and plugin generators all consume it. Generated SVG/PNG files are
+ * build outputs of these constants, never independent sources of truth.
+ */
+export const SPACEFAST_BRAND_COLORS = {
+    shadow: "#ff4217",
+    plate: "#141419",
+    paper: "#fbf8f1",
+};
+export const SPACEFAST_WORDMARK_VIEW_BOX = "0 0 326 62";
+export const SPACEFAST_WORDMARK_PLATE = {
+    x: 10,
+    y: 8,
+    width: 306,
+    height: 48,
+};
+export const SPACEFAST_WORDMARK_SHADOW_OFFSET = { x: 4, y: 4 };
+// Re-kerned and vertically centered on the plate. This is a literal so browser
+// consumers render ordinary SVG markup without assembling path text at runtime.
+export const SPACEFAST_WORDMARK_PATH = "M20 15h24v7H27v7h17v20H20v-7h17v-7H20V15ZM51 15h24v18H58v16h-7V15Zm7 11h10v-4H58v4ZM83 15h24l9 34h-8l-2-8H84l-2 8h-8l9-34Zm3 19h18l-4-12H90l-4 12ZM145 22h-19v20h19v7h-26V15h26v7ZM152 15h26v7h-19v6h15v7h-15v7h19v7h-26V15ZM185 15h25v7h-18v6h15v7h-15v14h-7V15ZM215 15h24l9 34h-8l-2-8h-22l-2 8h-8l9-34Zm3 19h18l-4-12h-10l-4 12ZM250 15h24v7h-17v7h17v20h-24v-7h17v-7h-17V15ZM279 15h27v7h-10v27h-7V22h-10v-7Z";
+export const SPACEFAST_ICON_VIEW_BOX = "0 0 160 160";
+export const SPACEFAST_ICON_S_PATH = "M0 0h24v7H7v7h17v20H0v-7h17v-7H0V0Z";
+export const SPACEFAST_ICON_F_PATH = "M0 0h25v7H7v6h15v7H7v14H0V0Z";
+export const SPACEFAST_ICON_LETTER_ORIGIN = { x: 34.75, y: 50.5 };
+export const SPACEFAST_ICON_LETTER_SCALE = 1.5;
+export const SPACEFAST_ICON_F_OFFSET_X = 31;
+export const SPACEFAST_ICON_SHADOW_OFFSET = { x: 5, y: 5 };

package/dist/brand.d.ts

@@ -13,3 +13,4 @@ export declare const BRAND: {
     readonly managementHostnameApex: "view.fast";
 };
 export declare const ERROR_DOCS_BASE_URL: `${string}/docs/errors`;
+export declare const GITHUB_CHECK_RUN_NAME: "Spacefast Builds";

package/dist/brand.js

@@ -22,3 +22,8 @@ export const BRAND = {
 // plan: `${websiteOrigin}/docs/errors/{code}` forever). Lives next to the
 // brand origin it derives from; `error-codes.ts` consumes it.
 export const ERROR_DOCS_BASE_URL = `${BRAND.websiteOrigin}/docs/errors`;
+// The GitHub check-run name every build reports under. One constant because the
+// create and update paths live in different modules and drifted once
+// ("Stattic" vs "Spacefast") — GitHub keys check runs by name, so a mismatch
+// shows two orphaned checks per commit.
+export const GITHUB_CHECK_RUN_NAME = `${BRAND.productName} Builds`;

package/dist/config/domains.d.ts

@@ -12,14 +12,20 @@ export type EnvDomains = {
     /** Fully-qualified hostname per service. */
     readonly hosts: Readonly<Record<Service, string>>;
 };
-/** The full domain map for an environment. */
-export declare function domainsFor(env: DeployEnv): EnvDomains;
+/** The production apex. Everything else about prod derives from this string. */
+export declare const PROD_ENV_DOMAIN: "spacefast.com";
+/** The local-dev apex (portless serves every subdomain over HTTPS). */
+export declare const DEV_ENV_DOMAIN: "sf.localhost";
+/**
+ * Construct the full per-service host map from a single env domain
+ * (`spacefast.com`, `sf.localhost`, …). One knob — services are always
+ * `<service>.<domain>` over https, with two deliberate exceptions:
+ * the marketing site sits on the bare prod apex, and the internal handbook
+ * lives on the view.fast infra apex in prod.
+ */
+export declare function envDomainsFor(domain: string): EnvDomains;
 /** Origin (scheme + host, no trailing slash) for a service in an environment. */
 export declare function serviceOrigin(service: Service, env: DeployEnv): string;
-/** Cookie domain that scopes auth across all subdomains of an environment. */
-export declare function cookieDomainFor(env: DeployEnv): string;
-/** Domain Search Terminal (Fly.io); its web redirects to spacefast.com/domains. */
-export declare const FAST_DOMAIN_SEARCH_APEX: "fastdomainsearch.com";
 /** Atomic infrastructure apex used for public managed/custom domains. */
 export declare const VIEW_FAST_APEX: "view.fast";
 /** Apex for default space hostnames: `{hostLabel}.view.fast`. */