Site: react-email download email; accept Gmail's MEDIUM mailbox verdict

.agents/skills/product-design/decision-log.md

@@ -48,3 +48,4 @@ One line per accepted guidance change: `date | change | evidence`.
 
 2026-10-02 | S3 mobile download form sends one email via SES instead of opening a mail draft; inline sending, sent and retryable error states retain the accepted layout, success clears the address, local development explicitly says preview | site-email assignment; DESIGN.md Marketing site; rule/design-reachable-states
 2026-10-02 | Installer moves to the dawn scene for everyone (Paper I3, I4 the Finder dark-appearance check; I1/I2 superseded): Finder draws icon labels black on a DMG background in both appearances, so the night art left them unreadable; the arrow becomes neutral ink `#4A4C52`; black labels measure 11.9:1 or better | owner decision 2026-10-02 via the dmg-dawn-design brief; mounted-DMG evidence; DESIGN.md Installer
+2026-10-02 | Site download email becomes a react-email template on the light set (dawn banner, blue mark, ink button), always light because mail clients handle dark grounds unpredictably; an address SES Insights can't confirm gets "We couldn't confirm that address" with the Mac route instead of "unavailable" | owner request 2026-10-02; DESIGN.md Marketing site

DESIGN.md

@@ -310,7 +310,7 @@ The Desktop App is Electron (Chromium 152, React). CSS effects are available: sh
 - **The twinkle:** on launch only, the star's core brightens for two frames. The mark never animates anywhere else.
 - **Brand deck:** the "Brand deck" page of the Paper file (12 slides: cover, idea, principles, voice, mark, logo, app icon, colour, typography, pixel world, icons and motion, applications).
 - Draw the mark on whole pixels only; never rotate, outline, or anti-alias it.
-- **Marketing site:** the "Marketing site" page of the Paper file (S1 desktop dark, S2 light, S3 mobile), built in `apps/site`. It uses the brand deck's system: Night ground, the night-sky scene in the hero and the closing CTA only, SF Pro Regular headlines with tight tracking, section kickers (`01 — Supervise`: the pixel star, SF Pro at 14px with 0.02em tracking, then a hairline to the edge), and real product shots exported from accepted artboards (`design/assets/site/`), never redrawn UI. One primary action on every screen, "Download for macOS" (to `/download/mac`, which redirects to the latest Release's DMG), as a Snow button; the secondary action is always the source, "View source" with the GitHub mark, linking to github.com/luxdotdev/polaris. Starlight stays off buttons and links here too (rule/starlight-is-rare), and signal colours appear only inside product shots. The repo is public: the "03 — Yours" card names the repository, says every line is on GitHub, shows the `git clone` line and a "View source" button; there is no notify form. Copy names what Polaris does, not the hardware it runs on: hosts are "this Mac" or "any machine you can reach over SSH". The footer credits lux.dev LLC ("An open source project by lux.dev", "© 2026 lux.dev LLC"). rule/scene-text-contrast holds on the site too: the nav sits on a solid Night bar (~95%) with links in `#C9D0E0`, never directly on the sky, and buttons over a scene are opaque. S2 is the light version: the dawn scene in the hero (faded into `bg-light` above the product shot) and the closing CTA, light product shots, ink primary buttons, the blue colourway of the mark, and light dither and wash variants. S3 is mobile (390, dark): one column, shots bleed off the right edge, and because a phone cannot install a Mac app the primary action becomes "Email me the Mac download" (email field plus button) instead of Download; it sends one plain-text email through AWS SES with the Mac download and source links. The form keeps its S3 field and button layout; sending disables both with "Sending…", success clears the address and shows "Email sent" with "Check your inbox for the Mac download.", and errors keep the address and enable retry with a plain status line. Development labels the fake send as a preview. Polaris never stores or logs the email address or raw IP; request telemetry contains only an email-request fact, route and timestamp. The site follows the system appearance (S1 dark, S2 light; phones get S3's layout in either), lays out S1/S2 from 1024px and S3 below, and shows the email form only below 768px.
+- **Marketing site:** the "Marketing site" page of the Paper file (S1 desktop dark, S2 light, S3 mobile), built in `apps/site`. It uses the brand deck's system: Night ground, the night-sky scene in the hero and the closing CTA only, SF Pro Regular headlines with tight tracking, section kickers (`01 — Supervise`: the pixel star, SF Pro at 14px with 0.02em tracking, then a hairline to the edge), and real product shots exported from accepted artboards (`design/assets/site/`), never redrawn UI. One primary action on every screen, "Download for macOS" (to `/download/mac`, which redirects to the latest Release's DMG), as a Snow button; the secondary action is always the source, "View source" with the GitHub mark, linking to github.com/luxdotdev/polaris. Starlight stays off buttons and links here too (rule/starlight-is-rare), and signal colours appear only inside product shots. The repo is public: the "03 — Yours" card names the repository, says every line is on GitHub, shows the `git clone` line and a "View source" button; there is no notify form. Copy names what Polaris does, not the hardware it runs on: hosts are "this Mac" or "any machine you can reach over SSH". The footer credits lux.dev LLC ("An open source project by lux.dev", "© 2026 lux.dev LLC"). rule/scene-text-contrast holds on the site too: the nav sits on a solid Night bar (~95%) with links in `#C9D0E0`, never directly on the sky, and buttons over a scene are opaque. S2 is the light version: the dawn scene in the hero (faded into `bg-light` above the product shot) and the closing CTA, light product shots, ink primary buttons, the blue colourway of the mark, and light dither and wash variants. S3 is mobile (390, dark): one column, shots bleed off the right edge, and because a phone cannot install a Mac app the primary action becomes "Email me the Mac download" (email field plus button) instead of Download; it sends one email through AWS SES with the Mac download and source links: a react-email template (`apps/site/emails/download.tsx`) on the light set (white card on `bg-light`, the dawn scene as a banner, the blue mark, Medium headline, one ink "Download for macOS" button, ink underlined links, never Starlight), always light because mail clients handle dark grounds unpredictably, with a plain-text part. An address SES Insights can't confirm gets "We couldn't confirm that address. Check it, or download Polaris on your Mac at polaris.lux.dev." The form keeps its S3 field and button layout; sending disables both with "Sending…", success clears the address and shows "Email sent" with "Check your inbox for the Mac download.", and errors keep the address and enable retry with a plain status line. Development labels the fake send as a preview. Polaris never stores or logs the email address or raw IP; each request's wide event records only why it ended (apps/site/app/api/email/README.md). The site follows the system appearance (S1 dark, S2 light; phones get S3's layout in either), lays out S1/S2 from 1024px and S3 below, and shows the email form only below 768px.
 
 ### Installer