Static Hosting

@matters/static (apps/static, dev port 4005) hosts per-user static pages at static.matters.ai on top of Vercel Blob (@vercel/blob). Each user owns slugs; each slug renders uploaded files. There is no shared database — Blob JSON documents are the store.

Auth model (proxy.ts)#

Clerk middleware with a prefix allowlist. Public prefixes: the landing page, /v + /v1 renderers, sign-in/sign-up, /dashboard, /complete-profile, /forbidden, /access-denied, plus internal (api, _next, favicon.ico, robots.txt, sitemap.xml). Everything else — notably /[username]/* — requires auth.protect().

Owner surface — /[username]/*#

• /dashboard — signed-in redirect: no identity → /sign-in; no username → /complete-profile; otherwise → /<username>.
• /[username] — the owner's page list; /[username]/editor — upload/manage; /[username]/settings and /[username]/agreements — page settings.
• Identity comes from lib/auth.ts (getOwnerIdentity).

Public renderer — /v/[slug]#

/v/[slug]/route.ts (+ /v/[slug]/[...path]/route.ts for sub-paths) serves the entry file and assets for a slug. /v1 is the legacy renderer route.

Storage schema (lib/static-store.ts)#

users/<username>/pages/<pageId>/meta.json   — StaticPageRecord
slugs/<slug>.json                            — SlugRecord (slug → username + pageId)

A StaticPageRecord holds pageId, username, slug, title, passwordHash (nullable — lib/password.ts gates protected pages), files[] (path, blobUrl, contentType, size), entryFile, and timestamps. Slugs are opaque 16-char ids (createOpaqueSlug). Reads use cache: "no-store" fetches; writes put with addRandomSuffix: false.

APIs#

Related#

• Monorepo — where @matters/static sits among the apps
• Environment Variables — Blob and Clerk keys
• Deployment — the static deployable