@wildo-ai/saas-website 1.1.5 → 1.1.6

package/dist/esm/index.d.ts

@@ -11,75 +11,33 @@
  * accompanying SKILLs in `framework-knowledge`.
  *
  * @wildo-boundary
- *   - This barrel MAY re-export from any subdirectory of `src/`.
- *   - Subdirectories MUST observe their own boundary contracts (see
- *     each subdirectory's own `index.ts` `@wildo-boundary` block):
+ *   This barrel re-exports the React-side surface: `schemas/`, `core/`,
+ *   `components/`. The other entries are separate subpaths with their own
+ *   audiences — `/astro` (Node, Astro frontmatter), `/astro-island` (the
+ *   bridge factory), `/config` and `/config-loader` (Node), `/mdx`,
+ *   `/companion` (React-free). Per directory:
  *       - `schemas/`            : NO React, NO Astro, NO `~wildo-frontend-lib/**`
- *       - `seo/`                : NO React, NO Astro
- *       - `core/`               : MAY use React; NO `~wildo-frontend-lib/**` (Q17=B)
- *       - `astro/`              : MAY use Astro; NO React component runtime imports
+ *       - `core/`, `components/`: MAY use React; NO `~wildo-frontend-lib/**` (Q17=B)
+ *       - `astro/`              : MAY use Astro and Node; NO React component runtime imports
+ *       - `config/`             : Node-side loaders; never reachable from a React-island entry
  *       - `mdx/`                : MAY use `@mdx-js/*`
- *       - `integration/`        : MAY use React; MAY import the
- *                                 `@wildo-ai/saas-models/public-runtime` SUBPATH,
- *                                 the `@wildo-ai/presets-components-models/public-runtime`
- *                                 SUBPATH, `@wildo-ai/zod-decorators`,
- *                                 plus the SSR / Astro-middleware tier
- *                                 (`axios`, `jsonwebtoken`, `socket.io-client`,
- *                                 `reflect-metadata`) — D12 revised
- *                                 2026-04-19 (second same-day loosening);
- *                                 the ROOT barrels of `@wildo-ai/saas-models`
- *                                 and `@wildo-ai/presets-components-models`
- *                                 are FORBIDDEN (they boot the decorator
- *                                 framework / pull the heavy registry);
- *                                 the saas-app DI / backend stack
- *                                 (`inversify`, `mongoose`, `express`,
- *                                 `pino`, `helmet`, `argon2`, `bcrypt`,
- *                                 the `@wildo-ai/saas-frontend-lib` /
- *                                 `@wildo-ai/saas-backend-lib` /
- *                                 `@wildo-ai/external-connectors-models`
- *                                 root + subpath surfaces) is FORBIDDEN;
- *                                 MUST NOT import `~wildo-frontend-lib/**`
- *                                 (Q17=B / D16)
  *
- *   D12 (client-bundle import discipline, all `core/`/`schemas/`/`integration/`
- *   files): the entire saas-website source tree ships into a browser bundle
- *   (Astro SSG + React islands). Every shared model atom MUST come from a
- *   side-effect-free `/public-runtime` subpath:
- *     - `@wildo-ai/saas-models/public-runtime` is the primary door
- *       (saas-models-public-runtime.md K-6 — consumers see one path).
- *     - `@wildo-ai/presets-components-models/public-runtime` is the
- *       internal seam for symbols not (yet) re-exported by saas-models.
- *     - `@wildo-ai/zod-decorators` is allowed to import (first revision
- *       2026-04-19). The package itself is side-effect-free; only an
- *       explicit `initZodDecorators()` call mutates `z.ZodType.prototype`,
- *       which neither saas-website nor the saas-models /public-runtime
- *       barrel does.
- *     - `axios`, `jsonwebtoken`, `socket.io-client`, `reflect-metadata` are
- *       allowed for SSR / Astro-middleware code paths (second same-day
- *       revision 2026-04-19). The website engine needs them to provide
- *       middleware utilities (HTTP proxying to the SaaS backend, JWT
- *       verification of cross-frontend handoff codes, real-time push,
- *       decorator-metadata reads). They are SSR-tier — discipline
- *       (and a future strict/loose entry split for React islands vs
- *       middleware) keeps them out of the React-island bundle.
+ *   D12 (client-bundle import discipline): everything reachable from a
+ *   React-island entry ships to the browser, so every shared model atom
+ *   comes from a side-effect-free `/public-runtime` subpath —
+ *   `@wildo-ai/saas-models/public-runtime` first,
+ *   `@wildo-ai/presets-components-models/public-runtime` for symbols it does
+ *   not re-export yet — and `@wildo-ai/zod-decorators` is allowed because
+ *   only an explicit `initZodDecorators()` mutates Zod's prototype.
  *
- *   The ROOT barrel of `@wildo-ai/saas-models` is forbidden everywhere in
- *   this package — it calls `initZodDecorators()` at module load and pulls
- *   `@wildo-ai/external-connectors-models` + the full schema graph into
- *   the bundle. Same forbid applies to the root barrel of
- *   `@wildo-ai/presets-components-models`, the saas-app DI runtime
- *   (`inversify`, `@wildo-ai/saas-frontend-lib`, `@wildo-ai/saas-backend-lib`),
- *   and pure-backend libs (`mongoose`, `express`, `pino`, `helmet`,
- *   `argon2`, `bcrypt`). Enforced by `src/__tests__/bundle-isolation.test.ts`.
- *
- *   These boundaries are enforced by review + the bundle-isolation test
- *   above until Phase 8 promotes them to a programmatic ESLint check
- *   (cf. `saas-website-slice.md`
- *   §"DEFERRED to Phase 8 — boundary lint mechanism design").
- *
- * Phase 1+2 status: schemas + runtime contexts/hooks + layout
- * primitives + L1 placeholders + factories are all exported. Phase 5
- * adds the Astro adapter; Phase 5.7 the `integration/` layer.
+ *   The ROOT barrels of `@wildo-ai/saas-models` and
+ *   `@wildo-ai/presets-components-models` are forbidden everywhere in this
+ *   package (they boot the decorator framework and pull the full schema
+ *   graph), as are the saas-app DI runtime (`inversify`,
+ *   `@wildo-ai/saas-frontend-lib`, `@wildo-ai/saas-backend-lib`) and
+ *   pure-backend libs (`mongoose`, `express`, `pino`, `helmet`, `argon2`,
+ *   `bcrypt`). Enforced by `src/__tests__/bundle-isolation.test.ts`, which
+ *   walks every entry's import graph against an allow-list.
  *
  * D18 (L1 boundary, Phase 2): the L1 primitives (`WebsiteHeading`,
  * `WebsiteText`, `WebsiteButton`, `WebsiteLink`, `WebsiteImage`) are
@@ -95,10 +53,12 @@ export * from './schemas/refs/page-ref.schemas';
 export * from './schemas/refs/section-ref.schemas';
 export * from './schemas/label-keys/website-label-key.schemas';
 export * from './schemas/label-keys/website-consent-label-keys.schemas';
+export * from './schemas/label-keys/website-provider-component-label-keys.schemas';
 export * from './schemas/sections/website-section-category.shared';
 export * from './schemas/sections/website-section-definition.shared.schemas';
 export * from './schemas/structured-data/website-structured-data.shared.schemas';
 export * from './schemas/structured-data/structured-data-reconciliation.shared';
+export * from './schemas/structured-data/pricing-offer-structured-data.shared';
 export * from './schemas/design-tokens/website-design-tokens.shared.schemas';
 export * from './schemas/manifests/website-page-manifest.shared.schemas';
 export * from './schemas/manifests/website-root-config.shared.schemas';
@@ -121,9 +81,14 @@ export * from './core/consent/WebsiteConsentContext';
 export * from './core/consent/useWebsiteConsent';
 export * from './core/consent/WebsiteConsentGate';
 export * from './core/consent/WebsiteConsentBanner';
+export * from './core/external-providers/provider-component-registry.website';
+export * from './core/external-providers/useWebsiteProviderComponent';
+export * from './core/external-providers/WebsiteProviderComponent';
+export * from './core/external-providers/website-provider-sdk-activations';
 export * from './core/anonymous-session/website-anonymous-session-client';
 export * from './core/anonymous-session/inbound-contact-form.schema';
 export * from './core/anonymous-session/InboundContactForm';
+export * from './core/anonymous-session/website-submission-challenge';
 export * from './components/low-level/WebsiteHeading';
 export * from './components/low-level/WebsiteText';
 export * from './components/low-level/WebsiteLink';

package/dist/esm/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4FG;AAEH,cAAc,iCAAiC,CAAC;AAChD,cAAc,oCAAoC,CAAC;AACnD,cAAc,gDAAgD,CAAC;AAC/D,cAAc,yDAAyD,CAAC;AACxE,cAAc,oDAAoD,CAAC;AACnE,cAAc,8DAA8D,CAAC;AAC7E,cAAc,kEAAkE,CAAC;AACjF,cAAc,iEAAiE,CAAC;AAChF,cAAc,8DAA8D,CAAC;AAC7E,cAAc,0DAA0D,CAAC;AACzE,cAAc,wDAAwD,CAAC;AACvE,cAAc,qDAAqD,CAAC;AACpE,cAAc,2CAA2C,CAAC;AAE1D,cAAc,uCAAuC,CAAC;AACtD,cAAc,mCAAmC,CAAC;AAClD,cAAc,oCAAoC,CAAC;AACnD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uCAAuC,CAAC;AACtD,cAAc,mCAAmC,CAAC;AAClD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,qCAAqC,CAAC;AACpD,cAAc,yCAAyC,CAAC;AACxD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,kCAAkC,CAAC;AACjD,cAAc,+BAA+B,CAAC;AAE9C,cAAc,wCAAwC,CAAC;AACvD,cAAc,sCAAsC,CAAC;AACrD,cAAc,kCAAkC,CAAC;AACjD,cAAc,mCAAmC,CAAC;AAClD,cAAc,qCAAqC,CAAC;AAEpD,cAAc,2DAA2D,CAAC;AAC1E,cAAc,sDAAsD,CAAC;AACrE,cAAc,6CAA6C,CAAC;AAE5D,cAAc,uCAAuC,CAAC;AACtD,cAAc,oCAAoC,CAAC;AACnD,cAAc,oCAAoC,CAAC;AACnD,cAAc,4CAA4C,CAAC;AAC3D,cAAc,uCAAuC,CAAC;AACtD,cAAc,sCAAsC,CAAC;AACrD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,qCAAqC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AAEH,cAAc,iCAAiC,CAAC;AAChD,cAAc,oCAAoC,CAAC;AACnD,cAAc,gDAAgD,CAAC;AAC/D,cAAc,yDAAyD,CAAC;AACxE,cAAc,oEAAoE,CAAC;AACnF,cAAc,oDAAoD,CAAC;AACnE,cAAc,8DAA8D,CAAC;AAC7E,cAAc,kEAAkE,CAAC;AACjF,cAAc,iEAAiE,CAAC;AAChF,cAAc,gEAAgE,CAAC;AAC/E,cAAc,8DAA8D,CAAC;AAC7E,cAAc,0DAA0D,CAAC;AACzE,cAAc,wDAAwD,CAAC;AACvE,cAAc,qDAAqD,CAAC;AACpE,cAAc,2CAA2C,CAAC;AAE1D,cAAc,uCAAuC,CAAC;AACtD,cAAc,mCAAmC,CAAC;AAClD,cAAc,oCAAoC,CAAC;AACnD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uCAAuC,CAAC;AACtD,cAAc,mCAAmC,CAAC;AAClD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,qCAAqC,CAAC;AACpD,cAAc,yCAAyC,CAAC;AACxD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,kCAAkC,CAAC;AACjD,cAAc,+BAA+B,CAAC;AAE9C,cAAc,wCAAwC,CAAC;AACvD,cAAc,sCAAsC,CAAC;AACrD,cAAc,kCAAkC,CAAC;AACjD,cAAc,mCAAmC,CAAC;AAClD,cAAc,qCAAqC,CAAC;AAEpD,cAAc,+DAA+D,CAAC;AAC9E,cAAc,uDAAuD,CAAC;AACtE,cAAc,oDAAoD,CAAC;AACnE,cAAc,4DAA4D,CAAC;AAE3E,cAAc,2DAA2D,CAAC;AAC1E,cAAc,sDAAsD,CAAC;AACrE,cAAc,6CAA6C,CAAC;AAC5D,cAAc,uDAAuD,CAAC;AAEtE,cAAc,uCAAuC,CAAC;AACtD,cAAc,oCAAoC,CAAC;AACnD,cAAc,oCAAoC,CAAC;AACnD,cAAc,4CAA4C,CAAC;AAC3D,cAAc,uCAAuC,CAAC;AACtD,cAAc,sCAAsC,CAAC;AACrD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,qCAAqC,CAAC"}

package/dist/esm/index.js

@@ -11,75 +11,33 @@
  * accompanying SKILLs in `framework-knowledge`.
  *
  * @wildo-boundary
- *   - This barrel MAY re-export from any subdirectory of `src/`.
- *   - Subdirectories MUST observe their own boundary contracts (see
- *     each subdirectory's own `index.ts` `@wildo-boundary` block):
+ *   This barrel re-exports the React-side surface: `schemas/`, `core/`,
+ *   `components/`. The other entries are separate subpaths with their own
+ *   audiences — `/astro` (Node, Astro frontmatter), `/astro-island` (the
+ *   bridge factory), `/config` and `/config-loader` (Node), `/mdx`,
+ *   `/companion` (React-free). Per directory:
  *       - `schemas/`            : NO React, NO Astro, NO `~wildo-frontend-lib/**`
- *       - `seo/`                : NO React, NO Astro
- *       - `core/`               : MAY use React; NO `~wildo-frontend-lib/**` (Q17=B)
- *       - `astro/`              : MAY use Astro; NO React component runtime imports
+ *       - `core/`, `components/`: MAY use React; NO `~wildo-frontend-lib/**` (Q17=B)
+ *       - `astro/`              : MAY use Astro and Node; NO React component runtime imports
+ *       - `config/`             : Node-side loaders; never reachable from a React-island entry
  *       - `mdx/`                : MAY use `@mdx-js/*`
- *       - `integration/`        : MAY use React; MAY import the
- *                                 `@wildo-ai/saas-models/public-runtime` SUBPATH,
- *                                 the `@wildo-ai/presets-components-models/public-runtime`
- *                                 SUBPATH, `@wildo-ai/zod-decorators`,
- *                                 plus the SSR / Astro-middleware tier
- *                                 (`axios`, `jsonwebtoken`, `socket.io-client`,
- *                                 `reflect-metadata`) — D12 revised
- *                                 2026-04-19 (second same-day loosening);
- *                                 the ROOT barrels of `@wildo-ai/saas-models`
- *                                 and `@wildo-ai/presets-components-models`
- *                                 are FORBIDDEN (they boot the decorator
- *                                 framework / pull the heavy registry);
- *                                 the saas-app DI / backend stack
- *                                 (`inversify`, `mongoose`, `express`,
- *                                 `pino`, `helmet`, `argon2`, `bcrypt`,
- *                                 the `@wildo-ai/saas-frontend-lib` /
- *                                 `@wildo-ai/saas-backend-lib` /
- *                                 `@wildo-ai/external-connectors-models`
- *                                 root + subpath surfaces) is FORBIDDEN;
- *                                 MUST NOT import `~wildo-frontend-lib/**`
- *                                 (Q17=B / D16)
  *
- *   D12 (client-bundle import discipline, all `core/`/`schemas/`/`integration/`
- *   files): the entire saas-website source tree ships into a browser bundle
- *   (Astro SSG + React islands). Every shared model atom MUST come from a
- *   side-effect-free `/public-runtime` subpath:
- *     - `@wildo-ai/saas-models/public-runtime` is the primary door
- *       (saas-models-public-runtime.md K-6 — consumers see one path).
- *     - `@wildo-ai/presets-components-models/public-runtime` is the
- *       internal seam for symbols not (yet) re-exported by saas-models.
- *     - `@wildo-ai/zod-decorators` is allowed to import (first revision
- *       2026-04-19). The package itself is side-effect-free; only an
- *       explicit `initZodDecorators()` call mutates `z.ZodType.prototype`,
- *       which neither saas-website nor the saas-models /public-runtime
- *       barrel does.
- *     - `axios`, `jsonwebtoken`, `socket.io-client`, `reflect-metadata` are
- *       allowed for SSR / Astro-middleware code paths (second same-day
- *       revision 2026-04-19). The website engine needs them to provide
- *       middleware utilities (HTTP proxying to the SaaS backend, JWT
- *       verification of cross-frontend handoff codes, real-time push,
- *       decorator-metadata reads). They are SSR-tier — discipline
- *       (and a future strict/loose entry split for React islands vs
- *       middleware) keeps them out of the React-island bundle.
+ *   D12 (client-bundle import discipline): everything reachable from a
+ *   React-island entry ships to the browser, so every shared model atom
+ *   comes from a side-effect-free `/public-runtime` subpath —
+ *   `@wildo-ai/saas-models/public-runtime` first,
+ *   `@wildo-ai/presets-components-models/public-runtime` for symbols it does
+ *   not re-export yet — and `@wildo-ai/zod-decorators` is allowed because
+ *   only an explicit `initZodDecorators()` mutates Zod's prototype.
  *
- *   The ROOT barrel of `@wildo-ai/saas-models` is forbidden everywhere in
- *   this package — it calls `initZodDecorators()` at module load and pulls
- *   `@wildo-ai/external-connectors-models` + the full schema graph into
- *   the bundle. Same forbid applies to the root barrel of
- *   `@wildo-ai/presets-components-models`, the saas-app DI runtime
- *   (`inversify`, `@wildo-ai/saas-frontend-lib`, `@wildo-ai/saas-backend-lib`),
- *   and pure-backend libs (`mongoose`, `express`, `pino`, `helmet`,
- *   `argon2`, `bcrypt`). Enforced by `src/__tests__/bundle-isolation.test.ts`.
- *
- *   These boundaries are enforced by review + the bundle-isolation test
- *   above until Phase 8 promotes them to a programmatic ESLint check
- *   (cf. `saas-website-slice.md`
- *   §"DEFERRED to Phase 8 — boundary lint mechanism design").
- *
- * Phase 1+2 status: schemas + runtime contexts/hooks + layout
- * primitives + L1 placeholders + factories are all exported. Phase 5
- * adds the Astro adapter; Phase 5.7 the `integration/` layer.
+ *   The ROOT barrels of `@wildo-ai/saas-models` and
+ *   `@wildo-ai/presets-components-models` are forbidden everywhere in this
+ *   package (they boot the decorator framework and pull the full schema
+ *   graph), as are the saas-app DI runtime (`inversify`,
+ *   `@wildo-ai/saas-frontend-lib`, `@wildo-ai/saas-backend-lib`) and
+ *   pure-backend libs (`mongoose`, `express`, `pino`, `helmet`, `argon2`,
+ *   `bcrypt`). Enforced by `src/__tests__/bundle-isolation.test.ts`, which
+ *   walks every entry's import graph against an allow-list.
  *
  * D18 (L1 boundary, Phase 2): the L1 primitives (`WebsiteHeading`,
  * `WebsiteText`, `WebsiteButton`, `WebsiteLink`, `WebsiteImage`) are
@@ -95,10 +53,12 @@ export * from './schemas/refs/page-ref.schemas.js';
 export * from './schemas/refs/section-ref.schemas.js';
 export * from './schemas/label-keys/website-label-key.schemas.js';
 export * from './schemas/label-keys/website-consent-label-keys.schemas.js';
+export * from './schemas/label-keys/website-provider-component-label-keys.schemas.js';
 export * from './schemas/sections/website-section-category.shared.js';
 export * from './schemas/sections/website-section-definition.shared.schemas.js';
 export * from './schemas/structured-data/website-structured-data.shared.schemas.js';
 export * from './schemas/structured-data/structured-data-reconciliation.shared.js';
+export * from './schemas/structured-data/pricing-offer-structured-data.shared.js';
 export * from './schemas/design-tokens/website-design-tokens.shared.schemas.js';
 export * from './schemas/manifests/website-page-manifest.shared.schemas.js';
 export * from './schemas/manifests/website-root-config.shared.schemas.js';
@@ -121,9 +81,14 @@ export * from './core/consent/WebsiteConsentContext.js';
 export * from './core/consent/useWebsiteConsent.js';
 export * from './core/consent/WebsiteConsentGate.js';
 export * from './core/consent/WebsiteConsentBanner.js';
+export * from './core/external-providers/provider-component-registry.website.js';
+export * from './core/external-providers/useWebsiteProviderComponent.js';
+export * from './core/external-providers/WebsiteProviderComponent.js';
+export * from './core/external-providers/website-provider-sdk-activations.js';
 export * from './core/anonymous-session/website-anonymous-session-client.js';
 export * from './core/anonymous-session/inbound-contact-form.schema.js';
 export * from './core/anonymous-session/InboundContactForm.js';
+export * from './core/anonymous-session/website-submission-challenge.js';
 export * from './components/low-level/WebsiteHeading.js';
 export * from './components/low-level/WebsiteText.js';
 export * from './components/low-level/WebsiteLink.js';

package/dist/esm/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4FG;AAEH,cAAc,iCAAiC,CAAC;AAChD,cAAc,oCAAoC,CAAC;AACnD,cAAc,gDAAgD,CAAC;AAC/D,cAAc,yDAAyD,CAAC;AACxE,cAAc,oDAAoD,CAAC;AACnE,cAAc,8DAA8D,CAAC;AAC7E,cAAc,kEAAkE,CAAC;AACjF,cAAc,iEAAiE,CAAC;AAChF,cAAc,8DAA8D,CAAC;AAC7E,cAAc,0DAA0D,CAAC;AACzE,cAAc,wDAAwD,CAAC;AACvE,cAAc,qDAAqD,CAAC;AACpE,cAAc,2CAA2C,CAAC;AAE1D,cAAc,uCAAuC,CAAC;AACtD,cAAc,mCAAmC,CAAC;AAClD,cAAc,oCAAoC,CAAC;AACnD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uCAAuC,CAAC;AACtD,cAAc,mCAAmC,CAAC;AAClD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,qCAAqC,CAAC;AACpD,cAAc,yCAAyC,CAAC;AACxD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,kCAAkC,CAAC;AACjD,cAAc,+BAA+B,CAAC;AAE9C,cAAc,wCAAwC,CAAC;AACvD,cAAc,sCAAsC,CAAC;AACrD,cAAc,kCAAkC,CAAC;AACjD,cAAc,mCAAmC,CAAC;AAClD,cAAc,qCAAqC,CAAC;AAEpD,cAAc,2DAA2D,CAAC;AAC1E,cAAc,sDAAsD,CAAC;AACrE,cAAc,6CAA6C,CAAC;AAE5D,cAAc,uCAAuC,CAAC;AACtD,cAAc,oCAAoC,CAAC;AACnD,cAAc,oCAAoC,CAAC;AACnD,cAAc,4CAA4C,CAAC;AAC3D,cAAc,uCAAuC,CAAC;AACtD,cAAc,sCAAsC,CAAC;AACrD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,qCAAqC,CAAC","sourcesContent":["/**\n * @wildo-package @wildo-ai/saas-website\n *\n * SaaS marketing/landing website engine — schemas + helpers + layout\n * placeholders + Astro/MDX adapters + SEO/AEO/GEO builder library.\n *\n * Per `saas-website-slice.md` D6/D15: this engine ships **NO concrete\n * business sections** (no Hero, no CTA, no Pricing). It ships the\n * structural and helper machinery; consumers author every business\n * section themselves via the `defineWebsiteSection` factory and the\n * accompanying SKILLs in `framework-knowledge`.\n *\n * @wildo-boundary\n *   - This barrel MAY re-export from any subdirectory of `src/`.\n *   - Subdirectories MUST observe their own boundary contracts (see\n *     each subdirectory's own `index.ts` `@wildo-boundary` block):\n *       - `schemas/`            : NO React, NO Astro, NO `~wildo-frontend-lib/**`\n *       - `seo/`                : NO React, NO Astro\n *       - `core/`               : MAY use React; NO `~wildo-frontend-lib/**` (Q17=B)\n *       - `astro/`              : MAY use Astro; NO React component runtime imports\n *       - `mdx/`                : MAY use `@mdx-js/*`\n *       - `integration/`        : MAY use React; MAY import the\n *                                 `@wildo-ai/saas-models/public-runtime` SUBPATH,\n *                                 the `@wildo-ai/presets-components-models/public-runtime`\n *                                 SUBPATH, `@wildo-ai/zod-decorators`,\n *                                 plus the SSR / Astro-middleware tier\n *                                 (`axios`, `jsonwebtoken`, `socket.io-client`,\n *                                 `reflect-metadata`) — D12 revised\n *                                 2026-04-19 (second same-day loosening);\n *                                 the ROOT barrels of `@wildo-ai/saas-models`\n *                                 and `@wildo-ai/presets-components-models`\n *                                 are FORBIDDEN (they boot the decorator\n *                                 framework / pull the heavy registry);\n *                                 the saas-app DI / backend stack\n *                                 (`inversify`, `mongoose`, `express`,\n *                                 `pino`, `helmet`, `argon2`, `bcrypt`,\n *                                 the `@wildo-ai/saas-frontend-lib` /\n *                                 `@wildo-ai/saas-backend-lib` /\n *                                 `@wildo-ai/external-connectors-models`\n *                                 root + subpath surfaces) is FORBIDDEN;\n *                                 MUST NOT import `~wildo-frontend-lib/**`\n *                                 (Q17=B / D16)\n *\n *   D12 (client-bundle import discipline, all `core/`/`schemas/`/`integration/`\n *   files): the entire saas-website source tree ships into a browser bundle\n *   (Astro SSG + React islands). Every shared model atom MUST come from a\n *   side-effect-free `/public-runtime` subpath:\n *     - `@wildo-ai/saas-models/public-runtime` is the primary door\n *       (saas-models-public-runtime.md K-6 — consumers see one path).\n *     - `@wildo-ai/presets-components-models/public-runtime` is the\n *       internal seam for symbols not (yet) re-exported by saas-models.\n *     - `@wildo-ai/zod-decorators` is allowed to import (first revision\n *       2026-04-19). The package itself is side-effect-free; only an\n *       explicit `initZodDecorators()` call mutates `z.ZodType.prototype`,\n *       which neither saas-website nor the saas-models /public-runtime\n *       barrel does.\n *     - `axios`, `jsonwebtoken`, `socket.io-client`, `reflect-metadata` are\n *       allowed for SSR / Astro-middleware code paths (second same-day\n *       revision 2026-04-19). The website engine needs them to provide\n *       middleware utilities (HTTP proxying to the SaaS backend, JWT\n *       verification of cross-frontend handoff codes, real-time push,\n *       decorator-metadata reads). They are SSR-tier — discipline\n *       (and a future strict/loose entry split for React islands vs\n *       middleware) keeps them out of the React-island bundle.\n *\n *   The ROOT barrel of `@wildo-ai/saas-models` is forbidden everywhere in\n *   this package — it calls `initZodDecorators()` at module load and pulls\n *   `@wildo-ai/external-connectors-models` + the full schema graph into\n *   the bundle. Same forbid applies to the root barrel of\n *   `@wildo-ai/presets-components-models`, the saas-app DI runtime\n *   (`inversify`, `@wildo-ai/saas-frontend-lib`, `@wildo-ai/saas-backend-lib`),\n *   and pure-backend libs (`mongoose`, `express`, `pino`, `helmet`,\n *   `argon2`, `bcrypt`). Enforced by `src/__tests__/bundle-isolation.test.ts`.\n *\n *   These boundaries are enforced by review + the bundle-isolation test\n *   above until Phase 8 promotes them to a programmatic ESLint check\n *   (cf. `saas-website-slice.md`\n *   §\"DEFERRED to Phase 8 — boundary lint mechanism design\").\n *\n * Phase 1+2 status: schemas + runtime contexts/hooks + layout\n * primitives + L1 placeholders + factories are all exported. Phase 5\n * adds the Astro adapter; Phase 5.7 the `integration/` layer.\n *\n * D18 (L1 boundary, Phase 2): the L1 primitives (`WebsiteHeading`,\n * `WebsiteText`, `WebsiteButton`, `WebsiteLink`, `WebsiteImage`) are\n * self-contained placeholders — they do NOT consume\n * `ComponentRegistryService` from `saas-frontend-lib` and do NOT\n * re-export `saas-frontend-lib` primitives. Consumers override at the\n * L1 boundary by barrel-re-exporting their preferred styled variant\n * from their app's `app/website/primitives/<Primitive>.tsx`. Phase 6\n * dogfood will revisit and decide whether to promote a registry-based\n * override mechanism.\n */\n\nexport * from './schemas/refs/page-ref.schemas';\nexport * from './schemas/refs/section-ref.schemas';\nexport * from './schemas/label-keys/website-label-key.schemas';\nexport * from './schemas/label-keys/website-consent-label-keys.schemas';\nexport * from './schemas/sections/website-section-category.shared';\nexport * from './schemas/sections/website-section-definition.shared.schemas';\nexport * from './schemas/structured-data/website-structured-data.shared.schemas';\nexport * from './schemas/structured-data/structured-data-reconciliation.shared';\nexport * from './schemas/design-tokens/website-design-tokens.shared.schemas';\nexport * from './schemas/manifests/website-page-manifest.shared.schemas';\nexport * from './schemas/manifests/website-root-config.shared.schemas';\nexport * from './schemas/blog/blog-post-frontmatter.shared.schemas';\nexport * from './schemas/validators/label-pack.validator';\n\nexport * from './core/contexts/WebsiteRuntimeContext';\nexport * from './core/contexts/useWebsiteRuntime';\nexport * from './core/contexts/WebsitePageContext';\nexport * from './core/contexts/useWebsitePage';\nexport * from './core/contexts/WebsiteSectionContext';\nexport * from './core/contexts/useWebsiteSection';\nexport * from './core/hooks/useWebsiteLabel';\nexport * from './core/hooks/useWebsiteDesignTokens';\nexport * from './core/factories/define-website-section';\nexport * from './core/factories/define-website-page-manifest';\nexport * from './core/layouts/WebsitePageLayout';\nexport * from './core/layouts/WebsiteSection';\n\nexport * from './core/consent/website-consent-storage';\nexport * from './core/consent/WebsiteConsentContext';\nexport * from './core/consent/useWebsiteConsent';\nexport * from './core/consent/WebsiteConsentGate';\nexport * from './core/consent/WebsiteConsentBanner';\n\nexport * from './core/anonymous-session/website-anonymous-session-client';\nexport * from './core/anonymous-session/inbound-contact-form.schema';\nexport * from './core/anonymous-session/InboundContactForm';\n\nexport * from './components/low-level/WebsiteHeading';\nexport * from './components/low-level/WebsiteText';\nexport * from './components/low-level/WebsiteLink';\nexport * from './components/low-level/WebsiteInternalLink';\nexport * from './core/routing/internal-routing.utils';\nexport * from './components/low-level/WebsiteButton';\nexport * from './components/low-level/WebsiteInternalButton';\nexport * from './components/low-level/WebsiteImage';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AAEH,cAAc,iCAAiC,CAAC;AAChD,cAAc,oCAAoC,CAAC;AACnD,cAAc,gDAAgD,CAAC;AAC/D,cAAc,yDAAyD,CAAC;AACxE,cAAc,oEAAoE,CAAC;AACnF,cAAc,oDAAoD,CAAC;AACnE,cAAc,8DAA8D,CAAC;AAC7E,cAAc,kEAAkE,CAAC;AACjF,cAAc,iEAAiE,CAAC;AAChF,cAAc,gEAAgE,CAAC;AAC/E,cAAc,8DAA8D,CAAC;AAC7E,cAAc,0DAA0D,CAAC;AACzE,cAAc,wDAAwD,CAAC;AACvE,cAAc,qDAAqD,CAAC;AACpE,cAAc,2CAA2C,CAAC;AAE1D,cAAc,uCAAuC,CAAC;AACtD,cAAc,mCAAmC,CAAC;AAClD,cAAc,oCAAoC,CAAC;AACnD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uCAAuC,CAAC;AACtD,cAAc,mCAAmC,CAAC;AAClD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,qCAAqC,CAAC;AACpD,cAAc,yCAAyC,CAAC;AACxD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,kCAAkC,CAAC;AACjD,cAAc,+BAA+B,CAAC;AAE9C,cAAc,wCAAwC,CAAC;AACvD,cAAc,sCAAsC,CAAC;AACrD,cAAc,kCAAkC,CAAC;AACjD,cAAc,mCAAmC,CAAC;AAClD,cAAc,qCAAqC,CAAC;AAEpD,cAAc,+DAA+D,CAAC;AAC9E,cAAc,uDAAuD,CAAC;AACtE,cAAc,oDAAoD,CAAC;AACnE,cAAc,4DAA4D,CAAC;AAE3E,cAAc,2DAA2D,CAAC;AAC1E,cAAc,sDAAsD,CAAC;AACrE,cAAc,6CAA6C,CAAC;AAC5D,cAAc,uDAAuD,CAAC;AAEtE,cAAc,uCAAuC,CAAC;AACtD,cAAc,oCAAoC,CAAC;AACnD,cAAc,oCAAoC,CAAC;AACnD,cAAc,4CAA4C,CAAC;AAC3D,cAAc,uCAAuC,CAAC;AACtD,cAAc,sCAAsC,CAAC;AACrD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,qCAAqC,CAAC","sourcesContent":["/**\n * @wildo-package @wildo-ai/saas-website\n *\n * SaaS marketing/landing website engine — schemas + helpers + layout\n * placeholders + Astro/MDX adapters + SEO/AEO/GEO builder library.\n *\n * Per `saas-website-slice.md` D6/D15: this engine ships **NO concrete\n * business sections** (no Hero, no CTA, no Pricing). It ships the\n * structural and helper machinery; consumers author every business\n * section themselves via the `defineWebsiteSection` factory and the\n * accompanying SKILLs in `framework-knowledge`.\n *\n * @wildo-boundary\n *   This barrel re-exports the React-side surface: `schemas/`, `core/`,\n *   `components/`. The other entries are separate subpaths with their own\n *   audiences — `/astro` (Node, Astro frontmatter), `/astro-island` (the\n *   bridge factory), `/config` and `/config-loader` (Node), `/mdx`,\n *   `/companion` (React-free). Per directory:\n *       - `schemas/`            : NO React, NO Astro, NO `~wildo-frontend-lib/**`\n *       - `core/`, `components/`: MAY use React; NO `~wildo-frontend-lib/**` (Q17=B)\n *       - `astro/`              : MAY use Astro and Node; NO React component runtime imports\n *       - `config/`             : Node-side loaders; never reachable from a React-island entry\n *       - `mdx/`                : MAY use `@mdx-js/*`\n *\n *   D12 (client-bundle import discipline): everything reachable from a\n *   React-island entry ships to the browser, so every shared model atom\n *   comes from a side-effect-free `/public-runtime` subpath —\n *   `@wildo-ai/saas-models/public-runtime` first,\n *   `@wildo-ai/presets-components-models/public-runtime` for symbols it does\n *   not re-export yet — and `@wildo-ai/zod-decorators` is allowed because\n *   only an explicit `initZodDecorators()` mutates Zod's prototype.\n *\n *   The ROOT barrels of `@wildo-ai/saas-models` and\n *   `@wildo-ai/presets-components-models` are forbidden everywhere in this\n *   package (they boot the decorator framework and pull the full schema\n *   graph), as are the saas-app DI runtime (`inversify`,\n *   `@wildo-ai/saas-frontend-lib`, `@wildo-ai/saas-backend-lib`) and\n *   pure-backend libs (`mongoose`, `express`, `pino`, `helmet`, `argon2`,\n *   `bcrypt`). Enforced by `src/__tests__/bundle-isolation.test.ts`, which\n *   walks every entry's import graph against an allow-list.\n *\n * D18 (L1 boundary, Phase 2): the L1 primitives (`WebsiteHeading`,\n * `WebsiteText`, `WebsiteButton`, `WebsiteLink`, `WebsiteImage`) are\n * self-contained placeholders — they do NOT consume\n * `ComponentRegistryService` from `saas-frontend-lib` and do NOT\n * re-export `saas-frontend-lib` primitives. Consumers override at the\n * L1 boundary by barrel-re-exporting their preferred styled variant\n * from their app's `app/website/primitives/<Primitive>.tsx`. Phase 6\n * dogfood will revisit and decide whether to promote a registry-based\n * override mechanism.\n */\n\nexport * from './schemas/refs/page-ref.schemas';\nexport * from './schemas/refs/section-ref.schemas';\nexport * from './schemas/label-keys/website-label-key.schemas';\nexport * from './schemas/label-keys/website-consent-label-keys.schemas';\nexport * from './schemas/label-keys/website-provider-component-label-keys.schemas';\nexport * from './schemas/sections/website-section-category.shared';\nexport * from './schemas/sections/website-section-definition.shared.schemas';\nexport * from './schemas/structured-data/website-structured-data.shared.schemas';\nexport * from './schemas/structured-data/structured-data-reconciliation.shared';\nexport * from './schemas/structured-data/pricing-offer-structured-data.shared';\nexport * from './schemas/design-tokens/website-design-tokens.shared.schemas';\nexport * from './schemas/manifests/website-page-manifest.shared.schemas';\nexport * from './schemas/manifests/website-root-config.shared.schemas';\nexport * from './schemas/blog/blog-post-frontmatter.shared.schemas';\nexport * from './schemas/validators/label-pack.validator';\n\nexport * from './core/contexts/WebsiteRuntimeContext';\nexport * from './core/contexts/useWebsiteRuntime';\nexport * from './core/contexts/WebsitePageContext';\nexport * from './core/contexts/useWebsitePage';\nexport * from './core/contexts/WebsiteSectionContext';\nexport * from './core/contexts/useWebsiteSection';\nexport * from './core/hooks/useWebsiteLabel';\nexport * from './core/hooks/useWebsiteDesignTokens';\nexport * from './core/factories/define-website-section';\nexport * from './core/factories/define-website-page-manifest';\nexport * from './core/layouts/WebsitePageLayout';\nexport * from './core/layouts/WebsiteSection';\n\nexport * from './core/consent/website-consent-storage';\nexport * from './core/consent/WebsiteConsentContext';\nexport * from './core/consent/useWebsiteConsent';\nexport * from './core/consent/WebsiteConsentGate';\nexport * from './core/consent/WebsiteConsentBanner';\n\nexport * from './core/external-providers/provider-component-registry.website';\nexport * from './core/external-providers/useWebsiteProviderComponent';\nexport * from './core/external-providers/WebsiteProviderComponent';\nexport * from './core/external-providers/website-provider-sdk-activations';\n\nexport * from './core/anonymous-session/website-anonymous-session-client';\nexport * from './core/anonymous-session/inbound-contact-form.schema';\nexport * from './core/anonymous-session/InboundContactForm';\nexport * from './core/anonymous-session/website-submission-challenge';\n\nexport * from './components/low-level/WebsiteHeading';\nexport * from './components/low-level/WebsiteText';\nexport * from './components/low-level/WebsiteLink';\nexport * from './components/low-level/WebsiteInternalLink';\nexport * from './core/routing/internal-routing.utils';\nexport * from './components/low-level/WebsiteButton';\nexport * from './components/low-level/WebsiteInternalButton';\nexport * from './components/low-level/WebsiteImage';\n"]}

package/dist/esm/schemas/design-tokens/website-design-tokens.shared.schemas.d.ts

@@ -3,8 +3,10 @@ import { z } from 'zod';
  * @wildo_source:part:start saas.website.design-tokens.colors facet:layer:shared facet:family:website
  *
  * `WebsiteColorTokens` — minimal palette the marketing-site exposes as
- * CSS custom properties (`--website-color-<token>`) on the
- * `<WebsitePageLayout>` root.
+ * CSS custom properties (`--website-colors-<token>`, the key verbatim, so
+ * `surfaceForeground` → `--website-colors-surfaceForeground`) on `:root`.
+ * Reference one from code through `websiteDesignTokenCssVar('colors', …)`
+ * rather than spelling the name.
  *
  * **Why a dedicated marketing palette** (vs. reusing
  * `presets-components-models/design-tokens-config`):
@@ -33,8 +35,9 @@ import { z } from 'zod';
  * `cssSafeValue` JSDoc above for the full threat model.
  *
  * **Adding a token**: append the field here using `cssSafeValue(...)`,
- * document its semantic intent in the JSDoc, and update the matching
- * CSS-emit helper in Phase 2 (`emitWebsiteColorTokensCss`).
+ * document its semantic intent in the JSDoc. `renderWebsiteDesignTokensCss`
+ * (from `@wildo-ai/saas-website/astro`) emits every key generically, so no
+ * emitter needs editing.
  */
 declare const _WebsiteColorTokensSchema: z.ZodObject<{
     background: z.ZodString;
@@ -56,7 +59,7 @@ export type WebsiteColorTokens = z.infer<typeof _WebsiteColorTokensSchema>;
  * @wildo_source:part:start saas.website.design-tokens.radius facet:layer:shared facet:family:website
  *
  * `WebsiteRadiusTokens` — border-radius scale exposed as
- * `--website-radius-<token>` CSS variables.
+ * `--website-radii-<token>` CSS variables.
  *
  * Marketing radii are intentionally a separate token set from the
  * SaaS app's radii: the website typically wants larger pill / hero
@@ -115,6 +118,32 @@ declare const _WebsiteDesignTokensSchema: z.ZodObject<{
 }, z.core.$strip>;
 export declare const WebsiteDesignTokensSchema: typeof _WebsiteDesignTokensSchema;
 export type WebsiteDesignTokens = z.infer<typeof _WebsiteDesignTokensSchema>;
-export {};
 /** @wildo_source:part:end saas.website.design-tokens.bundle */
+/**
+ * The CSS custom-property NAME one design token is emitted under —
+ * `--website-<group>-<token>`, with the token key verbatim (no case
+ * conversion), so `('colors', 'surfaceForeground')` is
+ * `--website-colors-surfaceForeground`.
+ *
+ * This is the one place the naming rule lives. `renderWebsiteDesignTokensCss`
+ * emits through it, and every engine component that reads a token reads
+ * through `websiteDesignTokenCssVar`. It exists because the rule used to be
+ * spelled by hand at each reader, and one reader spelled it
+ * `surface-foreground`: the consent banner's text colour silently fell back to
+ * `#000` on every site, whatever palette the application authored.
+ */
+export declare function websiteDesignTokenCssProperty(group: string, token: string): string;
+/**
+ * A `var(...)` reference to one design token, typed against the token bundle
+ * so a misspelt group or key does not compile.
+ *
+ * @example
+ * ```ts
+ * import { websiteDesignTokenCssVar } from '@wildo-ai/saas-website';
+ * const style = { color: websiteDesignTokenCssVar('colors', 'surfaceForeground', '#000') };
+ * // → 'var(--website-colors-surfaceForeground, #000)'
+ * ```
+ */
+export declare function websiteDesignTokenCssVar<G extends keyof WebsiteDesignTokens>(group: G, token: keyof WebsiteDesignTokens[G] & string, fallback?: string): string;
+export {};
 //# sourceMappingURL=website-design-tokens.shared.schemas.d.ts.map

package/dist/esm/schemas/design-tokens/website-design-tokens.shared.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"website-design-tokens.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../../src/schemas/design-tokens/website-design-tokens.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA4DxB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,QAAA,MAAM,yBAAyB;;;;;;;;;;;;iBAY7B,CAAC;AAEH,eAAO,MAAM,wBAAwB,EAAE,OAAO,yBAAqD,CAAC;AAEpG,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC3E,+DAA+D;AAE/D;;;;;;;;;;;;;;;GAeG;AACH,QAAA,MAAM,0BAA0B;;;;;;;iBAO9B,CAAC;AAEH,eAAO,MAAM,yBAAyB,EAAE,OAAO,0BAAuD,CAAC;AAEvG,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC7E,+DAA+D;AAE/D;;;;;;;;;;GAUG;AACH,QAAA,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;iBAG9B,CAAC;AAEH,eAAO,MAAM,yBAAyB,EAAE,OAAO,0BAAuD,CAAC;AAEvG,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;;AAC7E,+DAA+D"}
+{"version":3,"file":"website-design-tokens.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../../src/schemas/design-tokens/website-design-tokens.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA4DxB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,QAAA,MAAM,yBAAyB;;;;;;;;;;;;iBAY7B,CAAC;AAEH,eAAO,MAAM,wBAAwB,EAAE,OAAO,yBAAqD,CAAC;AAEpG,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC3E,+DAA+D;AAE/D;;;;;;;;;;;;;;;GAeG;AACH,QAAA,MAAM,0BAA0B;;;;;;;iBAO9B,CAAC;AAEH,eAAO,MAAM,yBAAyB,EAAE,OAAO,0BAAuD,CAAC;AAEvG,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC7E,+DAA+D;AAE/D;;;;;;;;;;GAUG;AACH,QAAA,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;iBAG9B,CAAC;AAEH,eAAO,MAAM,yBAAyB,EAAE,OAAO,0BAAuD,CAAC;AAEvG,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC7E,+DAA+D;AAE/D;;;;;;;;;;;;GAYG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAElF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CAAC,CAAC,SAAS,MAAM,mBAAmB,EAC1E,KAAK,EAAE,CAAC,EACR,KAAK,EAAE,MAAM,mBAAmB,CAAC,CAAC,CAAC,GAAG,MAAM,EAC5C,QAAQ,CAAC,EAAE,MAAM,GAChB,MAAM,CAGR"}

package/dist/esm/schemas/design-tokens/website-design-tokens.shared.schemas.js

@@ -58,8 +58,10 @@ const cssSafeValue = (fieldName) => z
  * @wildo_source:part:start saas.website.design-tokens.colors facet:layer:shared facet:family:website
  *
  * `WebsiteColorTokens` — minimal palette the marketing-site exposes as
- * CSS custom properties (`--website-color-<token>`) on the
- * `<WebsitePageLayout>` root.
+ * CSS custom properties (`--website-colors-<token>`, the key verbatim, so
+ * `surfaceForeground` → `--website-colors-surfaceForeground`) on `:root`.
+ * Reference one from code through `websiteDesignTokenCssVar('colors', …)`
+ * rather than spelling the name.
  *
  * **Why a dedicated marketing palette** (vs. reusing
  * `presets-components-models/design-tokens-config`):
@@ -88,8 +90,9 @@ const cssSafeValue = (fieldName) => z
  * `cssSafeValue` JSDoc above for the full threat model.
  *
  * **Adding a token**: append the field here using `cssSafeValue(...)`,
- * document its semantic intent in the JSDoc, and update the matching
- * CSS-emit helper in Phase 2 (`emitWebsiteColorTokensCss`).
+ * document its semantic intent in the JSDoc. `renderWebsiteDesignTokensCss`
+ * (from `@wildo-ai/saas-website/astro`) emits every key generically, so no
+ * emitter needs editing.
  */
 const _WebsiteColorTokensSchema = z.object({
     background: cssSafeValue('background color'),
@@ -110,7 +113,7 @@ export const WebsiteColorTokensSchema = _WebsiteColorTokensSchema;
  * @wildo_source:part:start saas.website.design-tokens.radius facet:layer:shared facet:family:website
  *
  * `WebsiteRadiusTokens` — border-radius scale exposed as
- * `--website-radius-<token>` CSS variables.
+ * `--website-radii-<token>` CSS variables.
  *
  * Marketing radii are intentionally a separate token set from the
  * SaaS app's radii: the website typically wants larger pill / hero
@@ -149,4 +152,35 @@ const _WebsiteDesignTokensSchema = z.object({
 });
 export const WebsiteDesignTokensSchema = _WebsiteDesignTokensSchema;
 /** @wildo_source:part:end saas.website.design-tokens.bundle */
+/**
+ * The CSS custom-property NAME one design token is emitted under —
+ * `--website-<group>-<token>`, with the token key verbatim (no case
+ * conversion), so `('colors', 'surfaceForeground')` is
+ * `--website-colors-surfaceForeground`.
+ *
+ * This is the one place the naming rule lives. `renderWebsiteDesignTokensCss`
+ * emits through it, and every engine component that reads a token reads
+ * through `websiteDesignTokenCssVar`. It exists because the rule used to be
+ * spelled by hand at each reader, and one reader spelled it
+ * `surface-foreground`: the consent banner's text colour silently fell back to
+ * `#000` on every site, whatever palette the application authored.
+ */
+export function websiteDesignTokenCssProperty(group, token) {
+    return `--website-${group}-${token}`;
+}
+/**
+ * A `var(...)` reference to one design token, typed against the token bundle
+ * so a misspelt group or key does not compile.
+ *
+ * @example
+ * ```ts
+ * import { websiteDesignTokenCssVar } from '@wildo-ai/saas-website';
+ * const style = { color: websiteDesignTokenCssVar('colors', 'surfaceForeground', '#000') };
+ * // → 'var(--website-colors-surfaceForeground, #000)'
+ * ```
+ */
+export function websiteDesignTokenCssVar(group, token, fallback) {
+    const property = websiteDesignTokenCssProperty(group, token);
+    return fallback === undefined ? `var(${property})` : `var(${property}, ${fallback})`;
+}
 //# sourceMappingURL=website-design-tokens.shared.schemas.js.map

package/dist/esm/schemas/design-tokens/website-design-tokens.shared.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"website-design-tokens.shared.schemas.js","sourceRoot":"","sources":["../../../../../src/schemas/design-tokens/website-design-tokens.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,MAAM,+BAA+B,GAAG,uBAAuB,CAAC;AAChE,MAAM,YAAY,GAAG,CAAC,SAAiB,EAAe,EAAE,CACtD,CAAC;KACE,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,SAAS,oBAAoB,EAAE,CAAC;KACnD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;IAC/D,KAAK,EACH,GAAG,SAAS,oDAAoD;QAChE,8DAA8D;QAC9D,wEAAwE;CAC3E,CAA2B,CAAC;AAEjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,UAAU,EAAE,YAAY,CAAC,kBAAkB,CAAC;IAC5C,UAAU,EAAE,YAAY,CAAC,kBAAkB,CAAC;IAC5C,OAAO,EAAE,YAAY,CAAC,eAAe,CAAC;IACtC,iBAAiB,EAAE,YAAY,CAAC,yBAAyB,CAAC;IAC1D,MAAM,EAAE,YAAY,CAAC,cAAc,CAAC;IACpC,gBAAgB,EAAE,YAAY,CAAC,wBAAwB,CAAC;IACxD,OAAO,EAAE,YAAY,CAAC,eAAe,CAAC;IACtC,iBAAiB,EAAE,YAAY,CAAC,yBAAyB,CAAC;IAC1D,MAAM,EAAE,YAAY,CAAC,cAAc,CAAC;IACpC,KAAK,EAAE,YAAY,CAAC,aAAa,CAAC;IAClC,eAAe,EAAE,YAAY,CAAC,uBAAuB,CAAC;CACvD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAqC,yBAAyB,CAAC;AAGpG,+DAA+D;AAE/D;;;;;;;;;;;;;;;GAeG;AACH,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,YAAY,CAAC,aAAa,CAAC;IACjC,EAAE,EAAE,YAAY,CAAC,WAAW,CAAC;IAC7B,EAAE,EAAE,YAAY,CAAC,WAAW,CAAC;IAC7B,EAAE,EAAE,YAAY,CAAC,WAAW,CAAC;IAC7B,EAAE,EAAE,YAAY,CAAC,WAAW,CAAC;IAC7B,IAAI,EAAE,YAAY,CAAC,aAAa,CAAC;CAClC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAsC,0BAA0B,CAAC;AAGvG,+DAA+D;AAE/D;;;;;;;;;;GAUG;AACH,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,MAAM,EAAE,yBAAyB;IACjC,KAAK,EAAE,0BAA0B;CAClC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAsC,0BAA0B,CAAC;AAGvG,+DAA+D","sourcesContent":["import { z } from 'zod';\n\n/**\n * CSS-injection-safe value validator shared by every design-token field.\n *\n * **Threat model** — TWO escape surfaces, BOTH covered:\n *\n *   1. CSS *declaration* break-out (Phase 6 third audit fix H-α):\n *      the renderer `renderWebsiteDesignTokensCss` interpolates token\n *      values **raw** into a `:root { --website-<group>-<token>: <value>; }`\n *      block. A value containing any of `;`, `}`, `{`, `/*`, `*\\/`, or a\n *      newline can break out of the property declaration and inject\n *      arbitrary CSS — at minimum a config typo silently corrupts the\n *      page; at worst a malicious or untrusted config author injects a\n *      `body { display: none; }` rule that blanks the entire site.\n *\n *   2. HTML *style-element* break-out (Phase 6 fourth audit fix H-Χ):\n *      the rendered `:root { ... }` block is itself wrapped in an inline\n *      `<style>…</style>` element by the head renderer. Per the HTML spec\n *      the `<style>` element is a *raw-text* element — its only\n *      terminator is the literal sequence `</style`. A token value\n *      containing `<` (or, for symmetry, `>`) can therefore close the\n *      `<style>` element early and follow up with `<svg onload=alert(1)>`\n *      or any other HTML / JS payload, which the H-α deny-list (which\n *      did NOT forbid `<` / `>`) failed to catch. CSS values legitimately\n *      need NEITHER `<` NOR `>` (no CSS grammar uses them — no color,\n *      length, variable reference, calc expression, or functional\n *      notation does), so denying both is conservative and correct.\n *\n * **Why validate at the schema layer (not inside the renderer)**:\n *   1. Fail at config load (build-time / boot-time), not at every\n *      `<head>` render — a malformed token surfaces in the schema-parse\n *      error message instead of silently emitting broken CSS / HTML.\n *   2. Single source of truth — every field that flows into the\n *      `<style>`-wrapped CSS block gets the same guard (impossible to\n *      add a future token field that bypasses the renderer's escape\n *      pass).\n *   3. The renderer stays a simple interpolator, which makes its own\n *      audit surface trivially small.\n *\n * **Why a `.refine` over a strict color-string regex**: colors accept\n * `currentColor`, named colors, `var(--foo)` references, oklch\n * functional notation, etc. — a strict positive grammar is ~80 lines\n * and high-maintenance. A negative deny-list of the eight characters\n * that are LITERALLY the only ones that can break out of either the CSS\n * property declaration OR the wrapping `<style>` element is small,\n * complete, and obviously correct.\n */\nconst CSS_INJECTION_FORBIDDEN_PATTERN = /[;{}<>\\n\\r]|\\/\\*|\\*\\//;\nconst cssSafeValue = (fieldName: string): z.ZodString =>\n  z\n    .string()\n    .min(1, { error: `${fieldName} must not be empty` })\n    .refine((value) => !CSS_INJECTION_FORBIDDEN_PATTERN.test(value), {\n      error:\n        `${fieldName} must not contain CSS-injection or HTML break-out ` +\n        `metacharacters (; { } < > /* */ newline) — token values are ` +\n        `interpolated raw into <style>:root { --website-...: <value>; }</style>`,\n    }) as unknown as z.ZodString;\n\n/**\n * @wildo_source:part:start saas.website.design-tokens.colors facet:layer:shared facet:family:website\n *\n * `WebsiteColorTokens` — minimal palette the marketing-site exposes as\n * CSS custom properties (`--website-color-<token>`) on the\n * `<WebsitePageLayout>` root.\n *\n * **Why a dedicated marketing palette** (vs. reusing\n * `presets-components-models/design-tokens-config`):\n *\n * - The SaaS app's design tokens carry many semantic states (`muted`,\n *   `destructive`, `ring`, `sidebar-*`, …) that have no marketing-site\n *   analogue. Forcing the website to consume the full palette would\n *   leak app-internal semantics into a public surface.\n * - Marketing pages need *display-grade* colors (heavily branded\n *   accents, gradient stops, hero-overlay tints) that the SaaS app's\n *   functional palette deliberately avoids.\n * - Designers overriding website tokens (Phase 6 dogfood proves this\n *   path) should not be able to break the SaaS app by editing one\n *   tailwind.config — the two surfaces stay decoupled.\n *\n * **Token format**: every value is a CSS color string. Shape validation\n * is intentionally permissive (accepts hex, rgb/rgba, hsl/hsla, oklch,\n * `currentColor`, named colors, CSS variable references) — a strict\n * color-string regex would reject legitimate values (oklch grammar\n * alone is ~80 lines) and a malformed-but-syntactically-valid color\n * fails loudly at render time.\n *\n * **What IS strictly enforced**: every value passes `cssSafeValue`,\n * which rejects the six characters that can break out of a CSS\n * property declaration (`;`, `{`, `}`, `/*`, `*\\/`, newline). See the\n * `cssSafeValue` JSDoc above for the full threat model.\n *\n * **Adding a token**: append the field here using `cssSafeValue(...)`,\n * document its semantic intent in the JSDoc, and update the matching\n * CSS-emit helper in Phase 2 (`emitWebsiteColorTokensCss`).\n */\nconst _WebsiteColorTokensSchema = z.object({\n  background: cssSafeValue('background color'),\n  foreground: cssSafeValue('foreground color'),\n  primary: cssSafeValue('primary color'),\n  primaryForeground: cssSafeValue('primaryForeground color'),\n  accent: cssSafeValue('accent color'),\n  accentForeground: cssSafeValue('accentForeground color'),\n  surface: cssSafeValue('surface color'),\n  surfaceForeground: cssSafeValue('surfaceForeground color'),\n  border: cssSafeValue('border color'),\n  muted: cssSafeValue('muted color'),\n  mutedForeground: cssSafeValue('mutedForeground color'),\n});\n\nexport const WebsiteColorTokensSchema: typeof _WebsiteColorTokensSchema = _WebsiteColorTokensSchema;\n\nexport type WebsiteColorTokens = z.infer<typeof _WebsiteColorTokensSchema>;\n/** @wildo_source:part:end saas.website.design-tokens.colors */\n\n/**\n * @wildo_source:part:start saas.website.design-tokens.radius facet:layer:shared facet:family:website\n *\n * `WebsiteRadiusTokens` — border-radius scale exposed as\n * `--website-radius-<token>` CSS variables.\n *\n * Marketing radii are intentionally a separate token set from the\n * SaaS app's radii: the website typically wants larger pill / hero\n * radii than the app's compact-UI radii. Keeping them separate lets\n * either surface evolve without coupling.\n *\n * Values are CSS length strings (`'0.25rem'`, `'12px'`,\n * `'9999px'`). Same permissive-shape + strict-CSS-injection\n * rationale as `WebsiteColorTokens` (every value runs through\n * `cssSafeValue`).\n */\nconst _WebsiteRadiusTokensSchema = z.object({\n  none: cssSafeValue('none radius'),\n  sm: cssSafeValue('sm radius'),\n  md: cssSafeValue('md radius'),\n  lg: cssSafeValue('lg radius'),\n  xl: cssSafeValue('xl radius'),\n  full: cssSafeValue('full radius'),\n});\n\nexport const WebsiteRadiusTokensSchema: typeof _WebsiteRadiusTokensSchema = _WebsiteRadiusTokensSchema;\n\nexport type WebsiteRadiusTokens = z.infer<typeof _WebsiteRadiusTokensSchema>;\n/** @wildo_source:part:end saas.website.design-tokens.radius */\n\n/**\n * @wildo_source:part:start saas.website.design-tokens.bundle facet:layer:shared facet:family:website\n *\n * `WebsiteDesignTokens` — the complete design-token bundle attached to\n * `WebsiteRootConfig.designTokens`. Currently colors + radii only\n * (per plan Phase 1 scope: \"WebsiteColorTokensSchema + WebsiteRadiusTokensSchema (only)\").\n *\n * Future expansions (typography scale, motion tokens, shadow elevation)\n * will land as additional fields here without breaking the\n * `WebsiteRootConfig` shape.\n */\nconst _WebsiteDesignTokensSchema = z.object({\n  colors: _WebsiteColorTokensSchema,\n  radii: _WebsiteRadiusTokensSchema,\n});\n\nexport const WebsiteDesignTokensSchema: typeof _WebsiteDesignTokensSchema = _WebsiteDesignTokensSchema;\n\nexport type WebsiteDesignTokens = z.infer<typeof _WebsiteDesignTokensSchema>;\n/** @wildo_source:part:end saas.website.design-tokens.bundle */\n"]}
+{"version":3,"file":"website-design-tokens.shared.schemas.js","sourceRoot":"","sources":["../../../../../src/schemas/design-tokens/website-design-tokens.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,MAAM,+BAA+B,GAAG,uBAAuB,CAAC;AAChE,MAAM,YAAY,GAAG,CAAC,SAAiB,EAAe,EAAE,CACtD,CAAC;KACE,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,SAAS,oBAAoB,EAAE,CAAC;KACnD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;IAC/D,KAAK,EACH,GAAG,SAAS,oDAAoD;QAChE,8DAA8D;QAC9D,wEAAwE;CAC3E,CAA2B,CAAC;AAEjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,UAAU,EAAE,YAAY,CAAC,kBAAkB,CAAC;IAC5C,UAAU,EAAE,YAAY,CAAC,kBAAkB,CAAC;IAC5C,OAAO,EAAE,YAAY,CAAC,eAAe,CAAC;IACtC,iBAAiB,EAAE,YAAY,CAAC,yBAAyB,CAAC;IAC1D,MAAM,EAAE,YAAY,CAAC,cAAc,CAAC;IACpC,gBAAgB,EAAE,YAAY,CAAC,wBAAwB,CAAC;IACxD,OAAO,EAAE,YAAY,CAAC,eAAe,CAAC;IACtC,iBAAiB,EAAE,YAAY,CAAC,yBAAyB,CAAC;IAC1D,MAAM,EAAE,YAAY,CAAC,cAAc,CAAC;IACpC,KAAK,EAAE,YAAY,CAAC,aAAa,CAAC;IAClC,eAAe,EAAE,YAAY,CAAC,uBAAuB,CAAC;CACvD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAqC,yBAAyB,CAAC;AAGpG,+DAA+D;AAE/D;;;;;;;;;;;;;;;GAeG;AACH,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,YAAY,CAAC,aAAa,CAAC;IACjC,EAAE,EAAE,YAAY,CAAC,WAAW,CAAC;IAC7B,EAAE,EAAE,YAAY,CAAC,WAAW,CAAC;IAC7B,EAAE,EAAE,YAAY,CAAC,WAAW,CAAC;IAC7B,EAAE,EAAE,YAAY,CAAC,WAAW,CAAC;IAC7B,IAAI,EAAE,YAAY,CAAC,aAAa,CAAC;CAClC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAsC,0BAA0B,CAAC;AAGvG,+DAA+D;AAE/D;;;;;;;;;;GAUG;AACH,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,MAAM,EAAE,yBAAyB;IACjC,KAAK,EAAE,0BAA0B;CAClC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAsC,0BAA0B,CAAC;AAGvG,+DAA+D;AAE/D;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,6BAA6B,CAAC,KAAa,EAAE,KAAa;IACxE,OAAO,aAAa,KAAK,IAAI,KAAK,EAAE,CAAC;AACvC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAAQ,EACR,KAA4C,EAC5C,QAAiB;IAEjB,MAAM,QAAQ,GAAG,6BAA6B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC7D,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,QAAQ,GAAG,CAAC,CAAC,CAAC,OAAO,QAAQ,KAAK,QAAQ,GAAG,CAAC;AACvF,CAAC","sourcesContent":["import { z } from 'zod';\n\n/**\n * CSS-injection-safe value validator shared by every design-token field.\n *\n * **Threat model** — TWO escape surfaces, BOTH covered:\n *\n *   1. CSS *declaration* break-out (Phase 6 third audit fix H-α):\n *      the renderer `renderWebsiteDesignTokensCss` interpolates token\n *      values **raw** into a `:root { --website-<group>-<token>: <value>; }`\n *      block. A value containing any of `;`, `}`, `{`, `/*`, `*\\/`, or a\n *      newline can break out of the property declaration and inject\n *      arbitrary CSS — at minimum a config typo silently corrupts the\n *      page; at worst a malicious or untrusted config author injects a\n *      `body { display: none; }` rule that blanks the entire site.\n *\n *   2. HTML *style-element* break-out (Phase 6 fourth audit fix H-Χ):\n *      the rendered `:root { ... }` block is itself wrapped in an inline\n *      `<style>…</style>` element by the head renderer. Per the HTML spec\n *      the `<style>` element is a *raw-text* element — its only\n *      terminator is the literal sequence `</style`. A token value\n *      containing `<` (or, for symmetry, `>`) can therefore close the\n *      `<style>` element early and follow up with `<svg onload=alert(1)>`\n *      or any other HTML / JS payload, which the H-α deny-list (which\n *      did NOT forbid `<` / `>`) failed to catch. CSS values legitimately\n *      need NEITHER `<` NOR `>` (no CSS grammar uses them — no color,\n *      length, variable reference, calc expression, or functional\n *      notation does), so denying both is conservative and correct.\n *\n * **Why validate at the schema layer (not inside the renderer)**:\n *   1. Fail at config load (build-time / boot-time), not at every\n *      `<head>` render — a malformed token surfaces in the schema-parse\n *      error message instead of silently emitting broken CSS / HTML.\n *   2. Single source of truth — every field that flows into the\n *      `<style>`-wrapped CSS block gets the same guard (impossible to\n *      add a future token field that bypasses the renderer's escape\n *      pass).\n *   3. The renderer stays a simple interpolator, which makes its own\n *      audit surface trivially small.\n *\n * **Why a `.refine` over a strict color-string regex**: colors accept\n * `currentColor`, named colors, `var(--foo)` references, oklch\n * functional notation, etc. — a strict positive grammar is ~80 lines\n * and high-maintenance. A negative deny-list of the eight characters\n * that are LITERALLY the only ones that can break out of either the CSS\n * property declaration OR the wrapping `<style>` element is small,\n * complete, and obviously correct.\n */\nconst CSS_INJECTION_FORBIDDEN_PATTERN = /[;{}<>\\n\\r]|\\/\\*|\\*\\//;\nconst cssSafeValue = (fieldName: string): z.ZodString =>\n  z\n    .string()\n    .min(1, { error: `${fieldName} must not be empty` })\n    .refine((value) => !CSS_INJECTION_FORBIDDEN_PATTERN.test(value), {\n      error:\n        `${fieldName} must not contain CSS-injection or HTML break-out ` +\n        `metacharacters (; { } < > /* */ newline) — token values are ` +\n        `interpolated raw into <style>:root { --website-...: <value>; }</style>`,\n    }) as unknown as z.ZodString;\n\n/**\n * @wildo_source:part:start saas.website.design-tokens.colors facet:layer:shared facet:family:website\n *\n * `WebsiteColorTokens` — minimal palette the marketing-site exposes as\n * CSS custom properties (`--website-colors-<token>`, the key verbatim, so\n * `surfaceForeground` → `--website-colors-surfaceForeground`) on `:root`.\n * Reference one from code through `websiteDesignTokenCssVar('colors', …)`\n * rather than spelling the name.\n *\n * **Why a dedicated marketing palette** (vs. reusing\n * `presets-components-models/design-tokens-config`):\n *\n * - The SaaS app's design tokens carry many semantic states (`muted`,\n *   `destructive`, `ring`, `sidebar-*`, …) that have no marketing-site\n *   analogue. Forcing the website to consume the full palette would\n *   leak app-internal semantics into a public surface.\n * - Marketing pages need *display-grade* colors (heavily branded\n *   accents, gradient stops, hero-overlay tints) that the SaaS app's\n *   functional palette deliberately avoids.\n * - Designers overriding website tokens (Phase 6 dogfood proves this\n *   path) should not be able to break the SaaS app by editing one\n *   tailwind.config — the two surfaces stay decoupled.\n *\n * **Token format**: every value is a CSS color string. Shape validation\n * is intentionally permissive (accepts hex, rgb/rgba, hsl/hsla, oklch,\n * `currentColor`, named colors, CSS variable references) — a strict\n * color-string regex would reject legitimate values (oklch grammar\n * alone is ~80 lines) and a malformed-but-syntactically-valid color\n * fails loudly at render time.\n *\n * **What IS strictly enforced**: every value passes `cssSafeValue`,\n * which rejects the six characters that can break out of a CSS\n * property declaration (`;`, `{`, `}`, `/*`, `*\\/`, newline). See the\n * `cssSafeValue` JSDoc above for the full threat model.\n *\n * **Adding a token**: append the field here using `cssSafeValue(...)`,\n * document its semantic intent in the JSDoc. `renderWebsiteDesignTokensCss`\n * (from `@wildo-ai/saas-website/astro`) emits every key generically, so no\n * emitter needs editing.\n */\nconst _WebsiteColorTokensSchema = z.object({\n  background: cssSafeValue('background color'),\n  foreground: cssSafeValue('foreground color'),\n  primary: cssSafeValue('primary color'),\n  primaryForeground: cssSafeValue('primaryForeground color'),\n  accent: cssSafeValue('accent color'),\n  accentForeground: cssSafeValue('accentForeground color'),\n  surface: cssSafeValue('surface color'),\n  surfaceForeground: cssSafeValue('surfaceForeground color'),\n  border: cssSafeValue('border color'),\n  muted: cssSafeValue('muted color'),\n  mutedForeground: cssSafeValue('mutedForeground color'),\n});\n\nexport const WebsiteColorTokensSchema: typeof _WebsiteColorTokensSchema = _WebsiteColorTokensSchema;\n\nexport type WebsiteColorTokens = z.infer<typeof _WebsiteColorTokensSchema>;\n/** @wildo_source:part:end saas.website.design-tokens.colors */\n\n/**\n * @wildo_source:part:start saas.website.design-tokens.radius facet:layer:shared facet:family:website\n *\n * `WebsiteRadiusTokens` — border-radius scale exposed as\n * `--website-radii-<token>` CSS variables.\n *\n * Marketing radii are intentionally a separate token set from the\n * SaaS app's radii: the website typically wants larger pill / hero\n * radii than the app's compact-UI radii. Keeping them separate lets\n * either surface evolve without coupling.\n *\n * Values are CSS length strings (`'0.25rem'`, `'12px'`,\n * `'9999px'`). Same permissive-shape + strict-CSS-injection\n * rationale as `WebsiteColorTokens` (every value runs through\n * `cssSafeValue`).\n */\nconst _WebsiteRadiusTokensSchema = z.object({\n  none: cssSafeValue('none radius'),\n  sm: cssSafeValue('sm radius'),\n  md: cssSafeValue('md radius'),\n  lg: cssSafeValue('lg radius'),\n  xl: cssSafeValue('xl radius'),\n  full: cssSafeValue('full radius'),\n});\n\nexport const WebsiteRadiusTokensSchema: typeof _WebsiteRadiusTokensSchema = _WebsiteRadiusTokensSchema;\n\nexport type WebsiteRadiusTokens = z.infer<typeof _WebsiteRadiusTokensSchema>;\n/** @wildo_source:part:end saas.website.design-tokens.radius */\n\n/**\n * @wildo_source:part:start saas.website.design-tokens.bundle facet:layer:shared facet:family:website\n *\n * `WebsiteDesignTokens` — the complete design-token bundle attached to\n * `WebsiteRootConfig.designTokens`. Currently colors + radii only\n * (per plan Phase 1 scope: \"WebsiteColorTokensSchema + WebsiteRadiusTokensSchema (only)\").\n *\n * Future expansions (typography scale, motion tokens, shadow elevation)\n * will land as additional fields here without breaking the\n * `WebsiteRootConfig` shape.\n */\nconst _WebsiteDesignTokensSchema = z.object({\n  colors: _WebsiteColorTokensSchema,\n  radii: _WebsiteRadiusTokensSchema,\n});\n\nexport const WebsiteDesignTokensSchema: typeof _WebsiteDesignTokensSchema = _WebsiteDesignTokensSchema;\n\nexport type WebsiteDesignTokens = z.infer<typeof _WebsiteDesignTokensSchema>;\n/** @wildo_source:part:end saas.website.design-tokens.bundle */\n\n/**\n * The CSS custom-property NAME one design token is emitted under —\n * `--website-<group>-<token>`, with the token key verbatim (no case\n * conversion), so `('colors', 'surfaceForeground')` is\n * `--website-colors-surfaceForeground`.\n *\n * This is the one place the naming rule lives. `renderWebsiteDesignTokensCss`\n * emits through it, and every engine component that reads a token reads\n * through `websiteDesignTokenCssVar`. It exists because the rule used to be\n * spelled by hand at each reader, and one reader spelled it\n * `surface-foreground`: the consent banner's text colour silently fell back to\n * `#000` on every site, whatever palette the application authored.\n */\nexport function websiteDesignTokenCssProperty(group: string, token: string): string {\n  return `--website-${group}-${token}`;\n}\n\n/**\n * A `var(...)` reference to one design token, typed against the token bundle\n * so a misspelt group or key does not compile.\n *\n * @example\n * ```ts\n * import { websiteDesignTokenCssVar } from '@wildo-ai/saas-website';\n * const style = { color: websiteDesignTokenCssVar('colors', 'surfaceForeground', '#000') };\n * // → 'var(--website-colors-surfaceForeground, #000)'\n * ```\n */\nexport function websiteDesignTokenCssVar<G extends keyof WebsiteDesignTokens>(\n  group: G,\n  token: keyof WebsiteDesignTokens[G] & string,\n  fallback?: string,\n): string {\n  const property = websiteDesignTokenCssProperty(group, token);\n  return fallback === undefined ? `var(${property})` : `var(${property}, ${fallback})`;\n}\n"]}

package/dist/esm/schemas/label-keys/website-provider-component-label-keys.schemas.d.ts

@@ -0,0 +1,32 @@
+import { type WebsiteLabelKey } from './website-label-key.schemas';
+/**
+ * The label keys the framework's provider-component slot reads (#1703).
+ *
+ * FRAMEWORK-OWNED, like the consent panel's keys: `WebsiteProviderComponent` renders these states,
+ * not the site's chrome, so the site does not list them in `chromeLabelKeys`.
+ * `composeEffectiveChromeLabelKeys` unions them into the label-pack validator's expected set, so a
+ * locale pack missing one fails the build rather than showing a visitor a raw key.
+ *
+ * Required of every site, including one that places no provider component today, for the reason the
+ * consent keys are: the words are cheap, and a site that adds an address lookup tomorrow must not
+ * ship it with an unlabelled refusal. The consent-required state also names each missing purpose and
+ * offers the panel, and it reuses the consent keys for both (`purpose-<purpose>`, `manage`) rather
+ * than a second wording of the same thing.
+ */
+export declare enum WebsiteProviderComponentLabelSlot {
+    /**
+     * Shown where a provider component would be when the visitor has not agreed to a purpose it rests
+     * on. Says the feature is off until they agree; the purposes and the way to agree follow it.
+     */
+    CONSENT_REQUIRED = "consent-required",
+    /**
+     * Shown when the component could not be loaded (a network failure, a blocked script). Says the
+     * feature is unavailable right now, without blaming the visitor.
+     */
+    UNAVAILABLE = "unavailable"
+}
+/** The fully-composed key for one slot state. */
+export declare function websiteProviderComponentLabelKey(slot: WebsiteProviderComponentLabelSlot): WebsiteLabelKey;
+/** Every framework-owned provider-component key — what a locale pack must carry. Total over the vocabulary. */
+export declare const WEBSITE_PROVIDER_COMPONENT_LABEL_KEYS: readonly WebsiteLabelKey[];
+//# sourceMappingURL=website-provider-component-label-keys.schemas.d.ts.map

package/dist/esm/schemas/label-keys/website-provider-component-label-keys.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"website-provider-component-label-keys.schemas.d.ts","sourceRoot":"","sources":["../../../../../src/schemas/label-keys/website-provider-component-label-keys.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAyB,KAAK,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAE1F;;;;;;;;;;;;;GAaG;AACH,oBAAY,iCAAiC;IAC3C;;;OAGG;IACH,gBAAgB,qBAAqB;IACrC;;;OAGG;IACH,WAAW,gBAAgB;CAC5B;AAID,iDAAiD;AACjD,wBAAgB,gCAAgC,CAAC,IAAI,EAAE,iCAAiC,GAAG,eAAe,CAEzG;AAED,+GAA+G;AAC/G,eAAO,MAAM,qCAAqC,EAAE,SAAS,eAAe,EAE3E,CAAC"}

package/dist/esm/schemas/label-keys/website-provider-component-label-keys.schemas.js

@@ -0,0 +1,36 @@
+import { WebsiteLabelKeySchema } from './website-label-key.schemas.js';
+/**
+ * The label keys the framework's provider-component slot reads (#1703).
+ *
+ * FRAMEWORK-OWNED, like the consent panel's keys: `WebsiteProviderComponent` renders these states,
+ * not the site's chrome, so the site does not list them in `chromeLabelKeys`.
+ * `composeEffectiveChromeLabelKeys` unions them into the label-pack validator's expected set, so a
+ * locale pack missing one fails the build rather than showing a visitor a raw key.
+ *
+ * Required of every site, including one that places no provider component today, for the reason the
+ * consent keys are: the words are cheap, and a site that adds an address lookup tomorrow must not
+ * ship it with an unlabelled refusal. The consent-required state also names each missing purpose and
+ * offers the panel, and it reuses the consent keys for both (`purpose-<purpose>`, `manage`) rather
+ * than a second wording of the same thing.
+ */
+export var WebsiteProviderComponentLabelSlot;
+(function (WebsiteProviderComponentLabelSlot) {
+    /**
+     * Shown where a provider component would be when the visitor has not agreed to a purpose it rests
+     * on. Says the feature is off until they agree; the purposes and the way to agree follow it.
+     */
+    WebsiteProviderComponentLabelSlot["CONSENT_REQUIRED"] = "consent-required";
+    /**
+     * Shown when the component could not be loaded (a network failure, a blocked script). Says the
+     * feature is unavailable right now, without blaming the visitor.
+     */
+    WebsiteProviderComponentLabelSlot["UNAVAILABLE"] = "unavailable";
+})(WebsiteProviderComponentLabelSlot || (WebsiteProviderComponentLabelSlot = {}));
+const PROVIDER_COMPONENT_LABEL_KEY_PREFIX = 'website.chrome.provider-component';
+/** The fully-composed key for one slot state. */
+export function websiteProviderComponentLabelKey(slot) {
+    return WebsiteLabelKeySchema.parse(`${PROVIDER_COMPONENT_LABEL_KEY_PREFIX}.${slot}`);
+}
+/** Every framework-owned provider-component key — what a locale pack must carry. Total over the vocabulary. */
+export const WEBSITE_PROVIDER_COMPONENT_LABEL_KEYS = Object.freeze(Object.values(WebsiteProviderComponentLabelSlot).map(websiteProviderComponentLabelKey));
+//# sourceMappingURL=website-provider-component-label-keys.schemas.js.map

package/dist/esm/schemas/label-keys/website-provider-component-label-keys.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"website-provider-component-label-keys.schemas.js","sourceRoot":"","sources":["../../../../../src/schemas/label-keys/website-provider-component-label-keys.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAwB,MAAM,6BAA6B,CAAC;AAE1F;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAN,IAAY,iCAWX;AAXD,WAAY,iCAAiC;IAC3C;;;OAGG;IACH,0EAAqC,CAAA;IACrC;;;OAGG;IACH,gEAA2B,CAAA;AAC7B,CAAC,EAXW,iCAAiC,KAAjC,iCAAiC,QAW5C;AAED,MAAM,mCAAmC,GAAG,mCAAmC,CAAC;AAEhF,iDAAiD;AACjD,MAAM,UAAU,gCAAgC,CAAC,IAAuC;IACtF,OAAO,qBAAqB,CAAC,KAAK,CAAC,GAAG,mCAAmC,IAAI,IAAI,EAAE,CAAC,CAAC;AACvF,CAAC;AAED,+GAA+G;AAC/G,MAAM,CAAC,MAAM,qCAAqC,GAA+B,MAAM,CAAC,MAAM,CAC5F,MAAM,CAAC,MAAM,CAAC,iCAAiC,CAAC,CAAC,GAAG,CAAC,gCAAgC,CAAC,CACvF,CAAC","sourcesContent":["import { WebsiteLabelKeySchema, type WebsiteLabelKey } from './website-label-key.schemas';\n\n/**\n * The label keys the framework's provider-component slot reads (#1703).\n *\n * FRAMEWORK-OWNED, like the consent panel's keys: `WebsiteProviderComponent` renders these states,\n * not the site's chrome, so the site does not list them in `chromeLabelKeys`.\n * `composeEffectiveChromeLabelKeys` unions them into the label-pack validator's expected set, so a\n * locale pack missing one fails the build rather than showing a visitor a raw key.\n *\n * Required of every site, including one that places no provider component today, for the reason the\n * consent keys are: the words are cheap, and a site that adds an address lookup tomorrow must not\n * ship it with an unlabelled refusal. The consent-required state also names each missing purpose and\n * offers the panel, and it reuses the consent keys for both (`purpose-<purpose>`, `manage`) rather\n * than a second wording of the same thing.\n */\nexport enum WebsiteProviderComponentLabelSlot {\n  /**\n   * Shown where a provider component would be when the visitor has not agreed to a purpose it rests\n   * on. Says the feature is off until they agree; the purposes and the way to agree follow it.\n   */\n  CONSENT_REQUIRED = 'consent-required',\n  /**\n   * Shown when the component could not be loaded (a network failure, a blocked script). Says the\n   * feature is unavailable right now, without blaming the visitor.\n   */\n  UNAVAILABLE = 'unavailable',\n}\n\nconst PROVIDER_COMPONENT_LABEL_KEY_PREFIX = 'website.chrome.provider-component';\n\n/** The fully-composed key for one slot state. */\nexport function websiteProviderComponentLabelKey(slot: WebsiteProviderComponentLabelSlot): WebsiteLabelKey {\n  return WebsiteLabelKeySchema.parse(`${PROVIDER_COMPONENT_LABEL_KEY_PREFIX}.${slot}`);\n}\n\n/** Every framework-owned provider-component key — what a locale pack must carry. Total over the vocabulary. */\nexport const WEBSITE_PROVIDER_COMPONENT_LABEL_KEYS: readonly WebsiteLabelKey[] = Object.freeze(\n  Object.values(WebsiteProviderComponentLabelSlot).map(websiteProviderComponentLabelKey),\n);\n"]}