@supersuit/artifacts 0.58.2 → 0.59.0

package/CHANGELOG.md

@@ -3,6 +3,25 @@
 `@supersuit/artifacts`. One entry per version, newest first. Each entry says what changed, how a
 host can tell whether it is affected (DETECTOR), what a host does about it (REMEDY), and the tests.
 
+## 0.59.0 (2026-11-02)
+
+**The deployable hub host ships in the package** (supersuit-dev#1630). `template/hub/` is a complete
+Next.js app for one operator's own artifact hub on Firebase App Hosting: every shell route as a
+one-line file, Google sign-in on the hub's own domain (the same-origin `/__/auth` rewrite and
+`/api/artifact-pass`), `/brand.json`, `/api/health` with the tile app door's version, the door
+itself at `/frapp`, the 410 proxy for shut per-reader links, `apphosting.yaml` with every setting the
+hub setup writes, and the comments feed's Firestore index. It is configured only by `HUB_TENANT`
+and the variables in its README, so it needs nothing from any private repository. Until now the
+only deployable host was private, and an operator's hub setup stopped at its first step with no
+source they could reach (supersuit-dev#1606). `npm version` pins the template to the package's own
+version (`scripts/sync-template-version.mjs`).
+
+- DETECTOR: `ls node_modules/@supersuit/artifacts/template/hub` is empty or missing.
+- REMEDY: update. Supersuit's hub setup uses this host when `--hub-source` is not given.
+- Tests: `test/hub-template.test.mjs`; `npm run test:template` (`scripts/check-template.mjs`)
+  installs the template from the packed tarball outside the repo and runs `next build`, and the
+  publish workflow runs it before publishing.
+
 ## 0.58.2 (2026-11-02)
 
 **A letter's greeting and sign-off keep their own lines.** Markdown joins a soft line break with a

package/README.md

@@ -15,6 +15,17 @@ npm install @supersuit/artifacts
 Peers: `next >= 16`, `react >= 19`, `react-dom >= 19`, `firebase-admin >= 13` (the store is
 Firestore), and optionally `@google-cloud/storage >= 7` for uploaded files.
 
+## A deployable hub host, in the package
+
+`template/hub/` is a complete Next.js app that serves one operator's pages from a Google Cloud
+project they own (Firebase App Hosting, Firestore, Cloud Storage, Google sign-in on their own
+domain), configured entirely by environment variables. It ships in the tarball so anyone can
+deploy a hub without access to any private repository. Supersuit's `create-or-update-my-artifact-hub`
+copies it out of the package, runs `npm install` and deploys it; its own
+[README](./template/hub/README.md) lists every variable. The template pins this package's own
+version (`npm version` keeps it in step), and `npm run test:template` packs the package, installs
+the template from the tarball outside this repo and runs `next build` on it.
+
 ## What you get
 
 | Export | What it is |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@supersuit/artifacts",
-  "version": "0.58.2",
+  "version": "0.59.0",
   "description": "Publish markdown as branded, read-aloud pages from a Next.js app: the artifacts store, the route factory, the read-along reader, brand packs, password and confidential pages, and share cards.",
   "license": "MIT",
   "type": "module",
@@ -54,6 +54,7 @@
   "files": [
     "lib",
     "fonts",
+    "template",
     "README.md",
     "CHANGELOG.md",
     "LICENSE"
@@ -64,7 +65,9 @@
     "typecheck": "tsc -p tsconfig.json --noEmit",
     "test": "vitest run",
     "test:packed": "node scripts/check-packed.mjs",
-    "prepack": "npm run build"
+    "prepack": "npm run build",
+    "test:template": "node scripts/check-template.mjs",
+    "version": "node scripts/sync-template-version.mjs"
   },
   "peerDependencies": {
     "@google-cloud/storage": ">=7",

package/template/hub/README.md

@@ -0,0 +1,35 @@
+# The artifact hub host
+
+A deployable Next.js app that serves one operator's published pages on their own domain, from a
+Google Cloud project they own. It is the `@supersuit/artifacts` shell wired to Firestore, Cloud
+Storage and Firebase sign-in, and nothing else. It ships inside the `@supersuit/artifacts` npm
+package at `template/hub/`.
+
+**You do not deploy this by hand.** Supersuit's `create-or-update-my-artifact-hub` skill copies this
+folder out of the installed package, runs `npm install`, and deploys it to Firebase App Hosting with
+the settings it writes for that hub. It reads `apphosting.yaml` for the shape of the settings.
+
+## What configures it
+
+Everything comes from the environment. `apphosting.yaml` lists every variable; the setup writes the
+real values into an `apphosting.hub.yaml` override at deploy time.
+
+| Variable | What it is |
+| --- | --- |
+| `HUB_TENANT` | JSON: `{ host, owner, firebase: { apiKey, appId, authDomain, projectId }, pack? }`. `authDomain` must equal `host`. `pack` is the hub's own colors, type and mark. |
+| `FIREBASE_STORAGE_BUCKET` | The project's default bucket: public page media. |
+| `ARTIFACT_PRIVATE_BUCKET` | A bucket with no public grant, for `media: private`. Unset, private media is refused. |
+| `TENANT_PUBLISH_KEY_HUB` | The publish key (a Secret Manager secret). |
+| `ARTIFACT_PASS_SECRET` | Signs the five-minute reader pass (a secret). |
+| `ARTIFACT_RECIPIENT_SECRET` | Signs per-reader links (a secret). |
+| `TENANT_OWNER_EMAIL_HUB` | The address the owner signs in with. Optional. |
+| `TENANT_ADMINS_HUB` | Comma-separated admin sign-in addresses. Optional. |
+
+With `HUB_TENANT` unset the app still builds, and every page says the hub is not configured yet.
+
+## What it serves
+
+Pages at `/<id>`, past versions at `/<id>/v/<n>`, share cards at `/<id>/share.png`, the publish and
+reader APIs under `/api/`, reader sign-in at `/artifact/sign-in` (Google, against the hub's own
+Firebase project, same-origin through the `/__/auth` rewrite), `/brand.json`, `/api/health`, and the
+tile app door at `/frapp`.

package/template/hub/app/[id]/not-found.tsx

@@ -0,0 +1,8 @@
+export default function ArtifactNotFound() {
+  return (
+    <div className="mx-auto max-w-2xl px-6 pt-32 text-center">
+      <h1 className="text-3xl">Nothing here</h1>
+      <p className="mt-4 opacity-70">This page was unpublished or the link is off by a character.</p>
+    </div>
+  )
+}

package/template/hub/app/[id]/page.tsx

@@ -0,0 +1,15 @@
+// Published pages: /<id>. Thin file; the behaviour is the shell's, the wiring is src/lib/routes.ts.
+import type { Metadata } from 'next'
+import { hubRoutes } from '@/lib/routes'
+
+export const dynamic = 'force-dynamic'
+
+type Props = { params: Promise<{ id: string }>; searchParams?: Promise<{ key?: string | string[] }> }
+
+export function generateMetadata(props: Props): Promise<Metadata> {
+  return hubRoutes().generateMetadata(props)
+}
+
+export default function ArtifactPage(props: Props) {
+  return hubRoutes().Page(props)
+}

package/template/hub/app/[id]/share.png/route.tsx

@@ -0,0 +1,10 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+type Ctx = { params: Promise<{ id: string }> }
+
+export const dynamic = 'force-dynamic'
+
+export function GET(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().SHARE_IMAGE(request, ctx)
+}

package/template/hub/app/[id]/v/[n]/page.tsx

@@ -0,0 +1,15 @@
+// One past version of a page: /<id>/v/<n>, read-only, behind the page's own door.
+import type { Metadata } from 'next'
+import { hubRoutes } from '@/lib/routes'
+
+export const dynamic = 'force-dynamic'
+
+type Props = { params: Promise<{ id: string; n: string }>; searchParams?: Promise<{ key?: string | string[] }> }
+
+export function generateMetadata(props: Props): Promise<Metadata> {
+  return hubRoutes().generateVersionMetadata(props)
+}
+
+export default function ArtifactVersionPage(props: Props) {
+  return hubRoutes().VersionPage(props)
+}

package/template/hub/app/api/artifact-pass/route.ts

@@ -0,0 +1,24 @@
+import type { NextRequest } from 'next/server'
+import { getAdminAuth } from '@/lib/firebase-admin'
+import { localPass } from '@/lib/local-sign-in'
+import { hubTenant } from '@/tenant'
+
+export const dynamic = 'force-dynamic'
+export const runtime = 'nodejs'
+
+// The pass for a reader who signed in on this host (app/artifact/sign-in).
+export async function GET(request: NextRequest) {
+  const r = await localPass({
+    tenant: hubTenant(),
+    to: request.nextUrl.searchParams.get('to'),
+    authorization: request.headers.get('authorization'),
+    verify: async (t) => {
+      const d = await getAdminAuth().verifyIdToken(t)
+      return { uid: d.uid, email: d.email, emailVerified: d.email_verified === true, name: typeof d.name === 'string' ? d.name : undefined }
+    },
+    secret: process.env.ARTIFACT_PASS_SECRET,
+  })
+  return r.ok
+    ? Response.json({ url: r.url }, { headers: { 'cache-control': 'no-store' } })
+    : Response.json({ error: r.error }, { status: r.status, headers: { 'cache-control': 'no-store' } })
+}

package/template/hub/app/api/artifacts/[id]/access/route.ts

@@ -0,0 +1,14 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+type Ctx = { params: Promise<{ id: string }> }
+
+export const dynamic = 'force-dynamic'
+
+export function GET(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().ACCESS(request, ctx)
+}
+
+export function POST(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().ACCESS(request, ctx)
+}

package/template/hub/app/api/artifacts/[id]/assets/[name]/route.ts

@@ -0,0 +1,10 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+type Ctx = { params: Promise<{ id: string; name: string }> }
+
+export const maxDuration = 60
+
+export function PUT(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().PUT_ASSET(request, ctx)
+}

package/template/hub/app/api/artifacts/[id]/forward/route.ts

@@ -0,0 +1,10 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+type Ctx = { params: Promise<{ id: string }> }
+
+export const dynamic = 'force-dynamic'
+
+export function POST(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().FORWARD(request, ctx)
+}

package/template/hub/app/api/artifacts/[id]/personal/route.ts

@@ -0,0 +1,18 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+type Ctx = { params: Promise<{ id: string }> }
+
+export const dynamic = 'force-dynamic'
+
+export function GET(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().PERSONAL_GET(request, ctx)
+}
+
+export function POST(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().PERSONAL_POST(request, ctx)
+}
+
+export function DELETE(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().PERSONAL_DELETE(request, ctx)
+}

package/template/hub/app/api/artifacts/[id]/reads/route.ts

@@ -0,0 +1,10 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+type Ctx = { params: Promise<{ id: string }> }
+
+export const dynamic = 'force-dynamic'
+
+export function GET(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().READS(request, ctx)
+}

package/template/hub/app/api/artifacts/[id]/recipients/route.ts

@@ -0,0 +1,14 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+type Ctx = { params: Promise<{ id: string }> }
+
+export const dynamic = 'force-dynamic'
+
+export function GET(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().RECIPIENTS(request, ctx)
+}
+
+export function POST(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().RECIPIENTS(request, ctx)
+}

package/template/hub/app/api/artifacts/[id]/reply/route.ts

@@ -0,0 +1,10 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+type Ctx = { params: Promise<{ id: string }> }
+
+export const dynamic = 'force-dynamic'
+
+export function POST(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().REPLY(request, ctx)
+}

package/template/hub/app/api/artifacts/[id]/resolve/route.ts

@@ -0,0 +1,10 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+type Ctx = { params: Promise<{ id: string }> }
+
+export const dynamic = 'force-dynamic'
+
+export function POST(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().RESOLVE(request, ctx)
+}

package/template/hub/app/api/artifacts/[id]/responses/route.ts

@@ -0,0 +1,14 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+type Ctx = { params: Promise<{ id: string }> }
+
+export const dynamic = 'force-dynamic'
+
+export function GET(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().RESPONSES(request, ctx)
+}
+
+export function DELETE(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().RESPONSES(request, ctx)
+}

package/template/hub/app/api/artifacts/[id]/route.ts

@@ -0,0 +1,12 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+type Ctx = { params: Promise<{ id: string }> }
+
+export function GET(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().GET(request, ctx)
+}
+
+export function DELETE(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().DELETE(request, ctx)
+}

package/template/hub/app/api/artifacts/[id]/seen/route.ts

@@ -0,0 +1,10 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+type Ctx = { params: Promise<{ id: string }> }
+
+export const dynamic = 'force-dynamic'
+
+export function POST(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().SEEN(request, ctx)
+}

package/template/hub/app/api/artifacts/[id]/settings/route.ts

@@ -0,0 +1,14 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+type Ctx = { params: Promise<{ id: string }> }
+
+export const dynamic = 'force-dynamic'
+
+export function GET(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().SETTINGS(request, ctx)
+}
+
+export function POST(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().SETTINGS(request, ctx)
+}

package/template/hub/app/api/artifacts/[id]/state/route.ts

@@ -0,0 +1,14 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+type Ctx = { params: Promise<{ id: string }> }
+
+export const dynamic = 'force-dynamic'
+
+export function GET(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().STATE_GET(request, ctx)
+}
+
+export function POST(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().STATE_POST(request, ctx)
+}

package/template/hub/app/api/artifacts/[id]/transcribe/route.ts

@@ -0,0 +1,10 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+type Ctx = { params: Promise<{ id: string }> }
+
+export const dynamic = 'force-dynamic'
+
+export function POST(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().TRANSCRIBE(request, ctx)
+}

package/template/hub/app/api/artifacts/[id]/uploads/[name]/route.ts

@@ -0,0 +1,11 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+type Ctx = { params: Promise<{ id: string; name: string }> }
+
+// Big files (narration) skip the function: this signs a URL the publisher PUTs to directly.
+export const maxDuration = 30
+
+export function POST(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().UPLOAD(request, ctx)
+}

package/template/hub/app/api/artifacts/[id]/versions/route.ts

@@ -0,0 +1,14 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+type Ctx = { params: Promise<{ id: string }> }
+
+export const dynamic = 'force-dynamic'
+
+export function GET(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().VERSIONS(request, ctx)
+}
+
+export function POST(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().VERSIONS(request, ctx)
+}

package/template/hub/app/api/artifacts/[id]/views/route.ts

@@ -0,0 +1,10 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+type Ctx = { params: Promise<{ id: string }> }
+
+export const dynamic = 'force-dynamic'
+
+export function GET(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().VIEWS(request, ctx)
+}

package/template/hub/app/api/artifacts/route.ts

@@ -0,0 +1,13 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+export const dynamic = 'force-dynamic'
+export const maxDuration = 30
+
+export function POST(request: NextRequest) {
+  return hubRoutes().POST(request)
+}
+
+export function GET(request: NextRequest) {
+  return hubRoutes().LIST(request)
+}

package/template/hub/app/api/comments/route.ts

@@ -0,0 +1,8 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+export const dynamic = 'force-dynamic'
+
+export function GET(request: NextRequest) {
+  return hubRoutes().COMMENTS_FEED(request)
+}

package/template/hub/app/api/health/route.ts

@@ -0,0 +1,10 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+import { healthOf } from '@/lib/health'
+
+export const dynamic = 'force-dynamic'
+
+// Whether this hub's queries will be served, the comments feed's Firestore index first. No key.
+export function GET(request: NextRequest) {
+  return healthOf(hubRoutes(), request)
+}

package/template/hub/app/api/reader/ack/route.ts

@@ -0,0 +1,6 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+export function POST(request: NextRequest) {
+  return hubRoutes().ACK(request)
+}

package/template/hub/app/api/reader/enter/route.ts

@@ -0,0 +1,8 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+export const dynamic = 'force-dynamic'
+
+export function GET(request: NextRequest) {
+  return hubRoutes().ENTER(request)
+}

package/template/hub/app/api/reader/leave/route.ts

@@ -0,0 +1,8 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+export const dynamic = 'force-dynamic'
+
+export function GET(request: NextRequest) {
+  return hubRoutes().LEAVE(request)
+}

package/template/hub/app/api/reader/track/route.ts

@@ -0,0 +1,6 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+export function POST(request: NextRequest) {
+  return hubRoutes().TRACK(request)
+}

package/template/hub/app/artifact/sign-in/page.tsx

@@ -0,0 +1,29 @@
+import { notFound } from 'next/navigation'
+import { hubTenant } from '@/tenant'
+import { SignIn } from './sign-in'
+
+export const dynamic = 'force-dynamic'
+export const metadata = { title: 'Sign in', robots: { index: false, follow: false } }
+
+// The sign-in a private page's door links to: Google, against the hub's own Firebase project.
+export default async function Page({ searchParams }: { searchParams: Promise<{ to?: string; switch?: string }> }) {
+  const tenant = hubTenant()
+  if (!tenant.localSignIn) notFound()
+  const { to, switch: sw } = await searchParams
+  // Only a page on this host: `to` arrives as a full URL from the door.
+  let path: string | null = null
+  try {
+    const u = new URL(to ?? '')
+    if (u.origin === tenant.siteUrl && /^\/[a-z0-9]{8}$/.test(u.pathname)) path = u.pathname
+  } catch {}
+  const { pack } = tenant
+  return (
+    <main style={{ background: pack.ground, color: pack.ink, minHeight: '100vh', fontFamily: pack.type.body }}>
+      <div style={{ maxWidth: '26rem', margin: '0 auto', padding: '18vh 1.5rem 4rem', textAlign: 'center' }}>
+        <p style={{ fontSize: '.75rem', letterSpacing: '.14em', textTransform: 'uppercase', opacity: 0.6 }}>{pack.kicker}</p>
+        <h1 style={{ fontFamily: pack.type.display, fontSize: '1.9rem', margin: '.6rem 0 1rem' }}>Open a private page</h1>
+        <SignIn firebase={tenant.localSignIn.firebase} to={path} accent={pack.accent} ground={pack.ground} switchAccount={sw === '1'} />
+      </div>
+    </main>
+  )
+}

package/template/hub/app/artifact/sign-in/sign-in.tsx

@@ -0,0 +1,60 @@
+'use client'
+import { useEffect, useState } from 'react'
+import { initializeApp, getApps, getApp } from 'firebase/app'
+import { getAuth, GoogleAuthProvider, onAuthStateChanged, signInWithPopup, signOut, type User } from 'firebase/auth'
+import type { FirebaseWebConfig } from '@/tenant'
+
+const NAME = 'artifacts'
+
+export function SignIn({ firebase, to, accent, ground, switchAccount = false }: { firebase: FirebaseWebConfig; to: string | null; accent: string; ground: string; switchAccount?: boolean }) {
+  const [user, setUser] = useState<User | null | undefined>(undefined)
+  const [state, setState] = useState<'idle' | 'working' | 'unverified' | 'error'>('idle')
+  const auth = () => getAuth(getApps().some(a => a.name === NAME) ? getApp(NAME) : initializeApp(firebase, NAME))
+
+  // `switch=1` from the page's "Use a different account": forget the account this host holds
+  // BEFORE watching it, or it would vouch for the same one again and the reader could never change.
+  useEffect(() => {
+    let off = () => {}
+    let live = true
+    ;(switchAccount ? signOut(auth()).catch(() => {}) : Promise.resolve()).then(() => {
+      if (live) off = onAuthStateChanged(auth(), setUser)
+    })
+    return () => { live = false; off() }
+  }, []) // eslint-disable-line react-hooks/exhaustive-deps
+
+  useEffect(() => {
+    if (!user || !to || state !== 'idle') return
+    let live = true
+    setState('working')
+    ;(async () => {
+      try {
+        const res = await fetch(`/api/artifact-pass?to=${encodeURIComponent(to)}`, { headers: { authorization: `Bearer ${await user.getIdToken()}` } })
+        const d = await res.json().catch(() => ({}))
+        if (!live) return
+        if (res.ok && typeof d.url === 'string') { window.location.replace(d.url); return }
+        setState(res.status === 403 ? 'unverified' : 'error')
+      } catch { if (live) setState('error') }
+    })()
+    return () => { live = false }
+    // `state` stays OUT of the deps: setting it to 'working' would re-run this effect, whose
+    // cleanup marks the in-flight request dead, and the page would sit on "Opening…" forever.
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, [user, to])
+
+  const button = { background: accent, color: ground, border: 0, borderRadius: '.6rem', padding: '.65rem 1.3rem', fontSize: '.95rem', cursor: 'pointer' }
+  if (!to) return <p style={{ opacity: 0.7 }}>Nothing to open. Tap the link you were sent, then its sign-in button.</p>
+  if (user === undefined) return <p style={{ opacity: 0.6 }}>…</p>
+  if (!user) return (
+    <>
+      <p style={{ opacity: 0.75, marginBottom: '1.4rem' }}>Sign in with the Google account this page was shared with.</p>
+      <button style={button} onClick={() => {
+        const p = new GoogleAuthProvider(); p.setCustomParameters({ prompt: 'select_account' })
+        signInWithPopup(auth(), p).catch(() => setState('error'))
+      }}>Sign in with Google</button>
+      {state === 'error' && <p style={{ opacity: 0.7, marginTop: '1rem' }}>That did not finish. Try again.</p>}
+    </>
+  )
+  if (state === 'unverified') return <p style={{ opacity: 0.75 }}>That Google account has no verified email. Sign in with one that does.</p>
+  if (state === 'error') return <p style={{ opacity: 0.75 }}>Signed in as {user.email}, but the page did not open. Reload to try again.</p>
+  return <p style={{ opacity: 0.6 }}>Opening…</p>
+}

package/template/hub/app/brand.json/route.ts

@@ -0,0 +1,10 @@
+// GET /brand.json: the colours this hub renders its everyday pages in (src/lib/brand-colors.ts).
+// Public on purpose: it is three colours any page on the hub already shows.
+import { brandColors } from '@/lib/brand-colors'
+import { hubTenant } from '@/tenant'
+
+export const dynamic = 'force-dynamic'
+
+export function GET() {
+  return Response.json(brandColors(hubTenant().pack), { headers: { 'cache-control': 'public, max-age=300' } })
+}

package/template/hub/app/frapp/font/route.ts

@@ -0,0 +1,12 @@
+// GET /frapp/font: the pack's display face, the same bytes its share card is set in, so the door
+// (plain HTML, no next/font) can wear it. Same-origin only by the door's CSP (font-src 'self').
+import { hubTenant } from '@/tenant'
+
+export const dynamic = 'force-dynamic'
+
+export async function GET() {
+  const pack = hubTenant().pack
+  if (!pack.share?.font) return new Response(null, { status: 404 })
+  const f = await pack.share.font()
+  return new Response(f.data, { headers: { 'content-type': 'font/ttf', 'cache-control': 'public, max-age=86400' } })
+}

package/template/hub/app/frapp/og/route.ts

@@ -0,0 +1,17 @@
+// GET /frapp/og?k=<kind>&t=<title>: the share card a texted door link unfurls into, drawn by the
+// shell's own share card in the hub's pack. With a title, the kind is the kicker above it.
+import { renderShareCard } from '@supersuit/artifacts/brand'
+import { doorCard } from '@/lib/frapp-door.mjs'
+import { cardPack } from '@/lib/frapp-door-theme'
+import { hubTenant } from '@/tenant'
+
+export const dynamic = 'force-dynamic'
+
+export async function GET(req: Request) {
+  const tenant = hubTenant()
+  const url = new URL(req.url)
+  const card = doorCard(url.searchParams.get('k'), url.searchParams.get('t'))
+  if (!tenant.pack.share) return new Response(null, { status: 404 })
+  const kicker = card.title ? card.kindTitle : tenant.pack.kicker
+  return renderShareCard(cardPack(tenant.id, tenant.pack, kicker), card.heading)
+}