@webship.co/workspace 1.0.0-alpha1 → 1.0.0-beta2

package/core/config/settings.template.yml

@@ -0,0 +1,292 @@
+# Paths are not listed here: the tooling locates itself from the checkout, for
+# whoever is running it. Add root/path/scripts/config/backups only to override
+# that (or export WORKSPACE_ROOT/PATH/SCRIPTS/CONFIG).
+# The admin user a fresh install is given — Drupal, Webship, Drupal CMS and anything else
+# built here. These are local development sites, so `pass` is deliberately NOT treated as a
+# secret: the settings form shows it, because checking what you will log in with is the whole
+# point of the field.
+account:
+  name: webmaster
+  pass: CHANGE_ME
+  mail: info@webship.co
+
+# Who contributions are credited to — on webship/workspace, webship/ai-agents and every
+# drupal.org issue, merge request and pull request this tooling opens. Per machine: this live
+# copy holds your real values, the committed one ships CHANGE_ME.
+# After bootstrap.sh these are $contributor_name and $contributor_email in any
+# cmd-*.sh. The Webship agents read them too — see webship/ai-agents
+# .claude/agents/RULES.md, "Contributor identity".
+contributor:
+  name: CHANGE_ME
+  email: CHANGE_ME
+
+# AI provider keys for the sites this workspace builds. When a built site has
+# the AI stack (Drupal CMS AI, Webship AI), set_ai_provider_keys wires these
+# in after install. Placeholders are skipped; real keys live ONLY in your own
+# checkout — never commit them. parse_yaml flattens each to
+# $ai_providers_<provider>_api_key.
+git:
+  # One block per forge: GitHub, drupal.org's GitLab at git.drupalcode.org, and Bitbucket. Each
+  # holds the host, the account name that forge knows you by, the address commits carry there,
+  # and its token. `drupal` IS a GitLab instance, which is why there is no separate gitlab entry.
+  #
+  # `token` renders as an empty password field: the value is never sent back to the browser,
+  # never echoed into a job log, never written to actions.log. The commit NAME comes from
+  # contributor.name above; only the address varies per forge.
+  github:
+    host: github.com
+    # Authenticate with the `gh` CLI's own login when it works, and only fall back to the token
+    # below. Inside the dashboard container gh is not signed in — it reads the same ~/.config/gh
+    # but the token lives in the host keyring, which the container cannot read. That is what the
+    # token is for.
+    use_gh_cli: true
+    username: CHANGE_ME
+    email: CHANGE_ME
+    token: CHANGE_ME
+  drupal:
+    host: git.drupalcode.org
+    username: CHANGE_ME
+    email: CHANGE_ME
+    token: CHANGE_ME
+  bitbucket:
+    host: bitbucket.org
+    username: CHANGE_ME
+    email: CHANGE_ME
+    token: CHANGE_ME
+
+sources:
+  # Where a sync pulls from, and where a proposed change is filed. Change these to work from a
+  # fork or a different host — nothing here is hardcoded. An env var still wins for a one-off run.
+  tooling:
+    # This workspace's own commands, scripts and dashboard.
+    host: github.com
+    repo: webship/workspace
+    ref: 1.0.x
+  ai_items:
+    # The shared AI Agents, AI Skills and Prompts.
+    host: github.com
+    repo: webship/ai-agents
+    ref: main
+
+ai_providers:
+  # The local Claude Code CLI comes first and is the default: it needs no key of its own —
+  # it uses this machine's own Claude Code login — so nothing is sent to a third-party API
+  # and there is no key to leak. Set active: false to fall through to the keyed providers
+  # below, in the order they appear. An ANTHROPIC_API_KEY/OPENAI_API_KEY/GEMINI_API_KEY in
+  # the environment still wins over all of this, for a one-off run.
+  claude_code_cli:
+    active: true
+  openai:
+    api_key: sk-change-this
+  anthropic:
+    api_key: sk-change-this
+  gemini:
+    api_key: sk-change-this
+  xai:
+    api_key: sk-change-this
+  stability:
+    api_key: sk-change-this
+workspaces: []
+# Workspace folders are plugins (dev, test, drupal-modules, …): `webship-workspace plugin require <name>`
+# puts one on this list when you activate it. See Settings → Plugins, or `webship-workspace catalog`.
+
+# The base domain every dashboard URL is built from, and what DDEV routes.
+#
+#   <project>.<tld>          the first label is the DDEV project name, the rest is the project TLD
+#   workspace.ddev.site      the dashboard
+#   dev.workspace.ddev.site  a workspace page
+#   blog1.dev.workspace...   a project's site
+#
+# Change it with the command, never by hand — it applies the TLD to DDEV as well, and editing this
+# line alone leaves the dashboard's links and DDEV's routing pointing at different places:
+#
+#   bash ~/workspace/core/scripts/autostart.sh --domain workspace.ddev.site
+#
+# Keep ddev.site on a laptop: *.ddev.site resolves to 127.0.0.1 at ANY depth, which is the only
+# reason the nested scheme works with an empty /etc/hosts, and /etc/hosts cannot hold wildcards.
+# On a Docker host or dedicated server, use your own domain and point *.<domain> at the host.
+# ~/workspace with the DDEV project name `workspace` is the blessed default —
+# leave this as is there. Additional side-by-side checkouts (~/webship-workspace,
+# ~/un-workspace, …) each need their own identity: in that checkout run
+#   cd core/workspace-app && ddev config --project-name=<folder-name>
+# and set hub_domain to <folder-name>.ddev.site (or delete the key — it then
+# derives from the DDEV project name). Screen logs, backups and graphs already
+# live inside each checkout, so nothing else collides.
+hub_domain: workspace.ddev.site
+
+# The Workspace's default language: what the AI Assistant answers in, listens for and speaks.
+# en-US, en-GB, ar-JO, ar-SA, ar-AE, ar-EG, fr-FR, de-DE, es-ES or tr-TR. assistant.speech_language,
+# when set, still pins the microphone and the voice on their own.
+language: en-US
+
+# Second storage: a folder on another disk that whole workspace folders can live on, each one a
+# symlink from this tree. Per machine and never synced, like contributor:. Empty means none.
+# Managed with core/scripts/storage.sh (--status, --move, --back, --mounts).
+storage:
+  second: ""
+
+# Whether the dashboard comes back on its own after a reboot.
+# Install the boot service with: bash ~/workspace/core/scripts/autostart.sh --enable
+dashboard:
+  # Which projects start at boot. A word, not only a list:
+  #   workspace    just the dashboard — the default; seconds to boot, everything else one click away
+  #   running      whatever was running at the last clean shutdown
+  #   all          every registered project (each is a web + db container competing for RAM)
+  #   dev1,test2   exactly those, in that order
+  # The dashboard is always started first and always included, whatever this says.
+  autostart: workspace
+
+# The AI assistant panel, and its voice. Last in this file because it is the longest block and the
+# least often edited — the things above it are the ones you come here to change.
+#
+# Speech is the browser's own, in both directions: no key, no service, nothing leaves the machine.
+# Every value below is optional and the defaults are what ships.
+assistant:
+  intro: true
+  # What the assistant is CALLED, everywhere it is named: the panel's heading, the control in the
+  # navigation, the launcher and the full page at /assistant. This is the default — the home
+  # dashboard and every page that belongs to no workspace. A workspace overrides it with its own
+  # `assistant: name:` in workspace.<name>.settings.yml.
+  name: AI Assistant
+  # What the composer says when it is empty. `none` (or off / default / auto) means no placeholder,
+  # which is what ships: an empty field with a cursor in it already says "type here", and a prompt
+  # that suggests what to ask narrows what gets asked. Overridable per workspace the same way.
+  placeholder: none
+  # The assistant's avatar: the one the robot icon in the panel shows first, one of `avatars`, hidden
+  # (and silent) with the next click. `none` takes the icon away.
+  avatar: druplicon
+  # The avatars that can be picked in the panel's avatar settings. druplicon ships with the dashboard;
+  # any other name is a character (characters/<name>.json) or a model (public/models/<name>.vrm) in an
+  # avatars workspace project, served from there and never copied here. Licences are per model: add
+  # only what you may use, and a fan-made model only on your own machine.
+  avatars:
+    - druplicon
+  # Per avatar, optional: the hair colour it starts with (#rrggbb; each browser can pick another), and the
+  # Claude Code agent it brings while shown (used only when installed in ~/.claude/agents), e.g.
+  #   avatar_hair:
+  #     labiba-meme: "#0074e0"
+  #   avatar_agents:
+  #     druplicon: avatar-druplicon
+  # Where the assistant keeps what the team teaches it (MEMORY.md), relative to the workspace root.
+  # Private to this machine: gitignored, and never copied by sync-tooling or the updater.
+  memory: core/workspace-app/.memory
+  # The Claude Code agent the assistant runs as, when it is installed in ~/.claude/agents: its rules
+  # and skills on top of the dashboard's own. `none` runs the assistant without one.
+  agent: webship-workspace
+
+  # Voice IN — the browser's own speech recognition.
+  # false removes the microphone rather than leaving a button that does nothing.
+  voice_input: true
+  # Send on its own after this many ms of silence. 0 = never; you press send.
+  submit_after_silence: 2500
+  # Pin the recogniser's language, e.g. en-US, en-GB, ar-JO. Ships as en-US; `auto` follows the browser instead.
+  # Worth setting if you dictate anything but your browser's language: a recogniser left on the
+  # wrong one does not fail, it returns confident nonsense.
+  speech_language: en-US
+  # Show words as they are guessed, before the recogniser settles on them.
+  interim_results: true
+  # Stop listening once the message is sent.
+  stop_after_submit: true
+
+  # Voice OUT — the assistant reads its answer aloud. Browser synthesis, so no key either.
+  voice_output: true
+  # A voice by name, as the browser lists it (Chrome: "Google US English"; the exact names differ
+  # per browser and per OS). `default` uses the browser default; an unknown name falls back to it.
+  voice_name: default
+  speech_rate: 1
+  speech_pitch: 1
+  speech_volume: 1
+
+  # Spoken words that ACT instead of being typed. true listens for the command's own word —
+  # command_stop: true listens for "stop". Each one costs you that word in ordinary dictation, so
+  # describing a submit button would send the message; that is why they are all off.
+  # A phrase of your own works too, and is the only way to have one in another language:
+  #   command_stop: توقف
+  command_submit: false
+  command_stop: false
+  command_pause: false
+  command_resume: false
+  command_clear: false
+
+# Optional dashboard features, per plugin — folders under core/workspace-app/plugins/ or npm
+# modules (module: <require-name>). `workspaces` limits which folders get the feature; empty or
+# absent means all of them. See core/workspace-app/PLUGINS.md to write one.
+plugins: {}
+# Every optional feature is an npm package @webship.co/workspace-<name>; `plugins.sh --activate` adds
+# its block here. Nothing is added until you ask for it.
+
+# ElevenLabs, for the final voiceover of a narrated video (videos/cmd-tools-elevenlabs.sh). Nothing is
+# sent to ElevenLabs unless a person agrees to a run, and the stage is not offered without a real key.
+# ELEVENLABS_API_KEY in the environment wins over api_key. voice_id `ask` means choose one each time.
+# region: global | us | eu | in | sg (an isolated residency environment is a separate account and key).
+elevenlabs:
+  api_key: CHANGE_ME
+  voice_id: ask
+  model_id: eleven_v4
+  region: global
+  pronunciation: ""
+
+# Short codes for the name the Build form proposes.
+#
+# A name is `<code><major>x<minor><patch>b<n>`:
+#
+#   w11x0xb1        Webship, the 11.0.x branch, first build
+#   w11x00b1        Webship, the ~11.0.0 release
+#
+# The code comes from the product's TITLE. Several words give their initials — Haven is `h`,
+# Website Starter is `ws`, Drupal CMS is `dc`. A single word keeps its word, because reducing it to a
+# letter is where a code stops being readable and starts being a puzzle, and because it collides:
+# Haven and Healthcare would both be `h`.
+#
+# Override any of them here. The three below are the ones the derivation gets wrong or that are typed
+# often enough to have earned a letter.
+short_codes:
+  webship: w
+  drupal: d
+  # Webship's own site templates: their initials all come out as `ws`, so each gets a code.
+  website_starter: wst
+  webship_starter: wsh
+  webship_portal: wpo
+  webapi_starter: wapi
+  webships_starter: wss
+  webships_project: wsp
+
+# Sign in with Google for the dashboard itself. Off, which is right on a laptop where the dashboard answers
+# only that laptop. Turn it on for a remote hub (hub_domain set to a public domain): every page, action and
+# terminal then needs a Google account whose verified email is in allowed_domains (or allowed_emails).
+# It uses the same OAuth client as the Google Drive plugin (plugin.google-drive-sync.settings.yml); add this
+# redirect URI to that client:
+#   https://<hub_domain>/auth/google/callback
+# Nothing allowed means nobody is let in. Locked out? Set enabled back to false here; it applies at once.
+auth:
+  google:
+    enabled: false
+    allowed_domains: []
+    # allowed_emails:
+    #   - someone@example.org
+    # How long a sign-in lasts, in hours (1 to 720).
+    session_hours: 12
+
+# Default styling for the dashboard. Every value is optional — the defaults below are what
+# ships, and /settings rewrites only the line you change.
+#   mode          light | dark | system   (system follows the OS setting)
+#   editor_theme  auto | light | dark     (auto follows mode)
+#   theme         a directory under core/workspace-app/public/themes — the palette every
+#                 component asks for. `mode` chooses which half of it you see.
+#   logo          a filename in core/workspace-app/public — not a path or a URL, because
+#                 everything the dashboard loads is served from itself
+#   logo_on_dark  the mark to swap in on a dark page; defaults to `logo`
+#   favicon       the browser-tab icon; defaults to `logo`
+#
+# mode and editor_theme are DEFAULTS, for someone who has not used the theme toggle. A stored
+# choice always wins over them.
+style:
+  workspace_name: workspace
+  mode: light
+  editor_theme: auto
+  theme: default
+  logo:
+  logo_on_dark:
+  favicon:
+  page_size: 50
+  page_sort: newest

package/core/config/style.yml

@@ -0,0 +1,53 @@
+# How the dashboard LOOKS — core/config/style.yml
+#
+# Styling is its own concern, so it has its own file. Which palette, which mode, the logos and
+# favicons, how wide a page runs, how the assistant is shown. It used to sit inside settings.yml
+# under a `style:` key, in a file that is otherwise about where projects are built, who commits,
+# and which API keys this machine holds — so the one file nobody should open casually was also the
+# file you had to open to change a logo.
+#
+# A theme's own TOKENS are not here either: they live in core/config/theme.<name>.yml, one file per
+# theme. This file chooses the theme; that file sets its colours, sizes and spacing.
+#
+# Everything here is a DEFAULT, not an override. A mode, a width or an assistant view chosen from
+# the interface is remembered in that browser and wins — which is the difference between a default
+# and a setting that argues with the person using it.
+#
+# `style:` in settings.yml still works and fills in anything this file does not set, so a machine
+# that has not moved its block yet keeps the appearance it had. Where both set the same key, this
+# file wins.
+
+# The word beside the logo in the toolbar.
+workspace_name: Workspace
+
+# Which palette the dashboard wears: a directory under core/workspace-app/public/themes/.
+# `default` is the Webship palette. The Settings screen lists every theme on disk, so this comment
+# does not name them — a list here goes stale the first time one is added.
+theme: default
+
+# light | dark | system. A default: someone who has used the toggle keeps their choice.
+mode: light
+# The code editor, independently of the page: auto | light | dark. A code editor is somewhere people
+# often want dark even on a light page.
+editor_theme: auto
+
+# How the AI assistant is shown, and whether it starts open: sidebar | wide | float | full,
+# and yes | no. Quoted, because unquoted `yes` is a BOOLEAN in YAML 1.1.
+assistant_view: sidebar
+assistant_open: "yes"
+
+# How much of the window a page's content may use: comfortable (a 900px reading width) | wide | full.
+page_width: comfortable
+
+# Rows before a list pages, and how it is sorted to begin with.
+page_size: 50
+page_sort: newest
+
+# Brand assets, from core/workspace-app/public/. One blue mark reads on a light and a dark page, so both point at the same file.
+logo_on_light: logo.png
+logo_on_dark: logo.png
+favicon_svg:
+favicon_png: favicon.png
+# A separate, larger file: a home-screen icon is 180px, and the 32px tab icon blown up to that is a
+# blurry tile.
+touch_icon: touch-icon.png

package/core/config/theme.default.yml

@@ -0,0 +1,161 @@
+# Every token the "default" theme sets — core/config/theme.default.yml
+#
+# Webship. A theme is a palette: it declares custom properties and selects nothing, so every
+# value in it is configuration. They are all here, editable on the Settings screen, rather than
+# only by editing a stylesheet inside the app.
+#
+# Names go without the leading dashes. `tokens:` applies to both halves; `dark:` applies to the
+# dark half only, exactly like the html.dark block in a theme file. Anything here overrides the
+# theme CSS, which is what you get with no YAML at all.
+
+tokens:
+  brand-primary: "#0074e0"
+  brand-secondary: "#2b447c"
+  brand-accent: "#e4dcff"
+  brand-dark: "#000000"
+  brand-light: "#ebe8e5"
+  subtle-light: "#f5f3f2"
+  subtle-brand: "#deedff"
+  subtle-accent: "#f6f3ff"
+  text-default: "#000000"
+  text-subtle: "#4d4d4d"
+  text-inverse: "#ffffff"
+  text-light: "#ebe8e5"
+  text-brand: "var(--brand-primary)"
+  text-accent: "var(--brand-accent)"
+  font-primary: "Figtree, \"Helvetica Neue\", Arial, sans-serif"
+  font-secondary: "\"DM Serif Text\", Georgia, serif"
+  font-code: "\"JetBrains Mono\", ui-monospace, SFMono-Regular, Menlo, monospace"
+  weight-regular: 400
+  weight-semibold: 600
+  leading-heading: 1.4
+  leading-display: 1.3
+  leading-body: 1.6
+  tracking-wide: 0.0625em
+  size-h1: 2rem
+  size-h2: 1.625rem
+  size-h3: 1.5rem
+  size-h4: 1.25rem
+  size-h5: 1.125rem
+  size-h6: 1rem
+  size-body: 0.9375rem
+  size-small: 0.875rem
+  type-h1: "var(--weight-regular) var(--size-h1)/1.15 var(--font-secondary)"
+  type-h2: "var(--weight-regular) var(--size-h2)/1.2 var(--font-secondary)"
+  type-h3: "var(--weight-semibold) var(--size-h3)/1.25 var(--font-primary)"
+  type-h4: "var(--weight-semibold) var(--size-h4)/1.3 var(--font-primary)"
+  type-h5: "var(--weight-semibold) var(--size-h5)/1.35 var(--font-primary)"
+  type-h6: "var(--weight-semibold) var(--size-h6)/1 var(--font-primary)"
+  type-body: "var(--weight-regular) var(--size-body)/var(--leading-body) var(--font-primary)"
+  type-body-sm: "var(--weight-regular) var(--size-small)/1.45 var(--font-primary)"
+  type-label: "var(--weight-semibold) var(--size-body)/1 var(--font-primary)"
+  type-caption: "var(--weight-regular) var(--size-small)/1.35 var(--font-primary)"
+  type-mono: "var(--weight-regular) var(--size-body)/1.5 var(--font-code)"
+  type-mono-sm: "var(--weight-regular) var(--size-small)/1.4 var(--font-code)"
+  tracking-h1: normal
+  tracking-h2: normal
+  tracking-h3: normal
+  tracking-h4: normal
+  tracking-h5: normal
+  tracking-h6: "var(--tracking-wide)"
+  surface: "var(--subtle-light)"
+  surface-card: "#ffffff"
+  surface-muted: "#f1eef9"
+  surface-input: "#ffffff"
+  text-subtle-2: "#333333"
+  line: "#e2ddd8"
+  line-strong: "#c9c2ba"
+  link: "#0063c0"
+  brand-pressed: "#0063c0"
+  brand-2-pressed: "#22355f"
+  focus-ring: "rgba(0, 116, 224, .35)"
+  ok: "#146c43"
+  ok-soft: "#d0e2d9"
+  pcard-tool-label: 0rem
+  ok-ink: "#14532d"
+  danger: "#e71139"
+  danger-soft: "#facfd7"
+  danger-ink: "#7d1a2e"
+  danger-armed: "#a4133c"
+  danger-text: "#c20f31"
+  warning: "#fdd26e"
+  warning-soft: "#fef1d3"
+  warning-ink: "#5c4300"
+  info: "#0dcaf0"
+  info-soft: "#cff4fc"
+  info-ink: "#055160"
+  success: "#146c43"
+  success-soft: "#d0e2d9"
+  success-ink: "#0f5132"
+  busy-soft: "var(--subtle-brand)"
+  busy-ink: "var(--brand-secondary)"
+  accent-soft: "var(--subtle-accent)"
+  accent-ink: "#4b3fa8"
+  chip-bg: "var(--brand-primary)"
+  chip-ink: "var(--text-inverse)"
+  shadow-card: "0 4px 16px rgba(35, 41, 70, .06)"
+  shadow-card-hover: "0 12px 28px rgba(43, 68, 124, .16)"
+  shadow-float: "0 1.5rem 3rem rgba(43, 68, 124, .28)"
+  shadow-toast: "0 14px 34px rgba(35, 41, 70, .26)"
+  toast-ring: "rgba(255, 255, 255, .9)"
+  code-bg: "#1f2437"
+  code-ink: "#e6e9f5"
+  terminal-ink: "#c9f7d4"
+  media-bg: "#000000"
+  paper: "#ffffff"
+  checker-a: "#dcdcdc"
+  checker-b: "#d8d8d8"
+  checker-bg: "#f4f4f4"
+  overlay: "rgba(0, 0, 0, .6)"
+  brand-1: "var(--brand-primary)"
+  brand-2: "var(--brand-secondary)"
+  brand-3: "var(--brand-accent)"
+  brand-grad: "linear-gradient(135deg, var(--brand-primary), var(--brand-secondary))"
+  ink: "var(--brand-secondary)"
+
+# The dark half. Only the tokens that differ at night are listed.
+dark:
+  surface: "#0f1626"
+  surface-card: "#172033"
+  surface-muted: "#1f2a42"
+  surface-input: "#0f1729"
+  text-default: "#e8edf6"
+  text-subtle-2: "#c2cbdd"
+  text-subtle: "#93a0b8"
+  line: "#27334d"
+  line-strong: "#3b4a6d"
+  link: "#57a8ff"
+  brand-pressed: "#2f8fe8"
+  brand-2-pressed: "#1b2b4d"
+  focus-ring: "rgba(87, 168, 255, .40)"
+  ok-soft: "#10261a"
+  ok-ink: "#a8e6b8"
+  danger-soft: "#2a1620"
+  danger-ink: "#ffd0da"
+  danger-armed: "#e0466b"
+  danger-text: "#ff8fa3"
+  warning-soft: "#2e2610"
+  warning-ink: "#fde4a3"
+  info-soft: "#0c2a33"
+  info-ink: "#9eeaf9"
+  success-soft: "#10291d"
+  success-ink: "#a3d9bd"
+  busy-soft: "#1a2440"
+  busy-ink: "#b9c9ff"
+  accent-soft: "#2c2550"
+  accent-ink: "#d9d2ff"
+  chip-bg: "#33406e"
+  chip-ink: "#e8edf6"
+  subtle-light: "#131b2c"
+  subtle-brand: "#10243d"
+  subtle-accent: "#221f3a"
+  shadow-card: "0 4px 16px rgba(0, 0, 0, .35)"
+  shadow-card-hover: "0 12px 28px rgba(0, 0, 0, .50)"
+  shadow-float: "0 1.5rem 3rem rgba(0, 0, 0, .55)"
+  shadow-toast: "0 14px 34px rgba(0, 0, 0, .50)"
+  toast-ring: "rgba(0, 0, 0, .5)"
+  checker-a: "#2a3550"
+  checker-b: "#26314a"
+  checker-bg: "#131b2c"
+  overlay: "rgba(0, 0, 0, .72)"
+  ink: "var(--text-default)"

package/core/config/theme.dispatch.yml

@@ -0,0 +1,166 @@
+# Dispatch — core/config/theme.dispatch.yml
+#
+# A style in the shape of Upsun Dispatch: OKLCH colour throughout, a violet primary, a lime accent,
+# and Open Sans for text with Space Mono for code. The type is its scale — 36/30/24/20/18 with the
+# line height tightening as the size grows, and tracking from -0.02em down.
+#
+# The colour values were read out of the product's own stylesheet rather than sampled from a
+# screenshot, so they are the values it actually ships.
+#
+# The two families are NOT vendored here — nothing in public/vendor/fonts holds them — so a machine
+# without them falls back through the stack. That is deliberate: a style is a set of values, and
+# shipping two more typefaces to look like somebody else's product is a different decision.
+
+name: Dispatch
+
+tokens:
+  brand-primary: "oklch(54.7% .257 280.028)"
+  brand-secondary: "oklch(38.1% .171 280.684)"
+  brand-accent: "oklch(92.8% .196 119.528)"
+  brand-dark: "oklch(14.1% .004 285.823)"
+  brand-light: "oklch(96.7% .001 286.375)"
+  subtle-light: "oklch(96.7% .001 286.375)"
+  subtle-brand: "oklch(97% .014 254.604)"
+  subtle-accent: "oklch(98.2% .03 119.528)"
+  text-default: "oklch(0% 0 0)"
+  text-subtle: "oklch(55.2% .014 285.938)"
+  text-inverse: "oklch(100% 0 0)"
+  text-light: "#ebe8e5"
+  text-brand: "var(--brand-primary)"
+  text-accent: "var(--brand-accent)"
+  font-primary: "Open Sans, \"Open Sans Variable\", ui-sans-serif, system-ui, \"Segoe UI\", Helvetica, Arial, sans-serif"
+  font-secondary: "Open Sans, \"Open Sans Variable\", ui-sans-serif, system-ui, \"Segoe UI\", Helvetica, Arial, sans-serif"
+  font-code: "\"Space Mono\", ui-monospace, SFMono-Regular, Menlo, Consolas, monospace"
+  weight-regular: 400
+  weight-semibold: 600
+  leading-heading: 1.4
+  leading-display: 1.3
+  leading-body: 1.5
+  tracking-wide: 0.0625em
+  size-h1: 2.25rem
+  size-h2: 1.875rem
+  size-h3: 1.5rem
+  size-h4: 1.25rem
+  size-h5: 1.125rem
+  size-h6: 0.8125rem
+  size-body: 1.0625rem
+  size-small: 0.875rem
+  type-h1: "var(--weight-bold, 700) var(--size-h1)/1.1 var(--font-primary)"
+  type-h2: "var(--weight-bold, 700) var(--size-h2)/1.15 var(--font-primary)"
+  type-h3: "var(--weight-semibold) var(--size-h3)/1.25 var(--font-primary)"
+  type-h4: "var(--weight-semibold) var(--size-h4)/1.3 var(--font-primary)"
+  type-h5: "var(--weight-semibold) var(--size-h5)/1.35 var(--font-primary)"
+  type-h6: "var(--weight-semibold) var(--size-h6)/1 var(--font-primary)"
+  type-body: "var(--weight-regular) var(--size-body)/var(--leading-body) var(--font-primary)"
+  type-body-sm: "var(--weight-regular) var(--size-small)/1.45 var(--font-primary)"
+  type-label: "var(--weight-semibold) var(--size-body)/1 var(--font-primary)"
+  type-caption: "var(--weight-regular) var(--size-small)/1.35 var(--font-primary)"
+  type-mono: "var(--weight-regular) var(--size-body)/1.5 var(--font-code)"
+  type-mono-sm: "var(--weight-regular) var(--size-small)/1.4 var(--font-code)"
+  tracking-h1: -0.02em
+  tracking-h2: -0.015em
+  tracking-h3: -0.01em
+  tracking-h4: -0.01em
+  tracking-h5: -0.005em
+  tracking-h6: 0.08em
+  surface: "oklch(100% 0 0)"
+  surface-card: "oklch(100% 0 0)"
+  surface-muted: "oklch(96.7% .001 286.375)"
+  surface-input: "oklch(100% 0 0)"
+  text-subtle-2: "oklch(37% .012 285.805)"
+  line: "oklch(92% .004 286.32)"
+  line-strong: "oklch(87.1% .006 286.286)"
+  link: "oklch(54.7% .257 280.028)"
+  brand-pressed: "oklch(47.3% .247 278.19)"
+  brand-2-pressed: "#22355f"
+  focus-ring: "oklch(63.7% .204 285.403 / .40)"
+  ok: "oklch(70.9% .115 194.873)"
+  ok-soft: "#d0e2d9"
+  pcard-tool-label: 0rem
+  ok-ink: "#14532d"
+  danger: "oklch(57.7% .215 27.325)"
+  danger-soft: "#facfd7"
+  danger-ink: "#7d1a2e"
+  danger-armed: "#a4133c"
+  danger-text: "#c20f31"
+  warning: "oklch(77.9% .162 79.562)"
+  warning-soft: "#fef1d3"
+  warning-ink: "#5c4300"
+  info: "oklch(54.6% .245 262.881)"
+  info-soft: "#cff4fc"
+  info-ink: "#055160"
+  success: "#146c43"
+  success-soft: "#d0e2d9"
+  success-ink: "#0f5132"
+  busy-soft: "var(--subtle-brand)"
+  busy-ink: "var(--brand-secondary)"
+  accent-soft: "var(--subtle-accent)"
+  accent-ink: "#4b3fa8"
+  chip-bg: "oklch(54.7% .257 280.028)"
+  chip-ink: "var(--text-inverse)"
+  shadow-card: "0 4px 16px rgba(35, 41, 70, .06)"
+  shadow-card-hover: "0 12px 28px rgba(43, 68, 124, .16)"
+  shadow-float: "0 1.5rem 3rem rgba(43, 68, 124, .28)"
+  shadow-toast: "0 14px 34px rgba(35, 41, 70, .26)"
+  toast-ring: "rgba(255, 255, 255, .9)"
+  code-bg: "#1f2437"
+  code-ink: "#e6e9f5"
+  terminal-ink: "#c9f7d4"
+  media-bg: "#000000"
+  paper: "#ffffff"
+  checker-a: "#dcdcdc"
+  checker-b: "#d8d8d8"
+  checker-bg: "#f4f4f4"
+  overlay: "rgba(0, 0, 0, .6)"
+  brand-1: "var(--brand-primary)"
+  brand-2: "var(--brand-secondary)"
+  brand-3: "var(--brand-accent)"
+  brand-grad: "linear-gradient(135deg, var(--brand-primary), var(--brand-secondary))"
+  ink: "var(--brand-secondary)"
+
+# The dark half.
+dark:
+  surface: "oklch(14.1% .004 285.823)"
+  surface-card: "oklch(21% .006 285.885)"
+  surface-muted: "oklch(27.4% .005 286.033)"
+  surface-input: "oklch(21% .006 285.885)"
+  text-default: "oklch(98.5% 0 0)"
+  text-subtle-2: "oklch(87.1% .006 286.286)"
+  text-subtle: "oklch(71.2% .013 286.067)"
+  line: "oklch(27.4% .005 286.033)"
+  line-strong: "oklch(37% .012 285.805)"
+  link: "oklch(72.6% .151 288.094)"
+  brand-pressed: "oklch(63.7% .204 285.403)"
+  brand-2-pressed: "#1b2b4d"
+  focus-ring: "oklch(63.7% .204 285.403 / .40)"
+  ok-soft: "#10261a"
+  ok-ink: "#a8e6b8"
+  danger-soft: "#2a1620"
+  danger-ink: "#ffd0da"
+  danger-armed: "#e0466b"
+  danger-text: "#ff8fa3"
+  warning-soft: "#2e2610"
+  warning-ink: "#fde4a3"
+  info-soft: "#0c2a33"
+  info-ink: "#9eeaf9"
+  success-soft: "#10291d"
+  success-ink: "#a3d9bd"
+  busy-soft: "#1a2440"
+  busy-ink: "#b9c9ff"
+  accent-soft: "#2c2550"
+  accent-ink: "#d9d2ff"
+  chip-bg: "oklch(37% .013 285.805)"
+  chip-ink: "#e8edf6"
+  subtle-light: "oklch(21% .006 285.885)"
+  subtle-brand: "oklch(28.2% .091 267.935)"
+  subtle-accent: "oklch(29% .075 132)"
+  shadow-card: "0 4px 16px rgba(0, 0, 0, .35)"
+  shadow-card-hover: "0 12px 28px rgba(0, 0, 0, .50)"
+  shadow-float: "0 1.5rem 3rem rgba(0, 0, 0, .55)"
+  shadow-toast: "0 14px 34px rgba(0, 0, 0, .50)"
+  toast-ring: "rgba(0, 0, 0, .5)"
+  checker-a: "#2a3550"
+  checker-b: "#26314a"
+  checker-bg: "#131b2c"
+  overlay: "rgba(0, 0, 0, .72)"
+  ink: "var(--text-default)"