studio-engine 0.127.0 → 0.129.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 22ef2ab3094c82f6f447ee86455dac3e2c70b759ec3d58f2f1a887a347c4b1ad
-  data.tar.gz: 92c5bc2d6c5f53914e33d7c50623a076791ef50faff385b4e63218e3773eb6a6
+  metadata.gz: ed5be658c4ba3547da2294995bc7c13e7181bccbd5710fd07d84c7fb0af95a2c
+  data.tar.gz: d48d2fbebaee5b7e33a22c16bc2f6d40b1afc161d0dacb6eb42d51a8e36cd4fe
 SHA512:
-  metadata.gz: 1420fb65a41535cc4c4ae4a1466a83fe46d02eca34c17ed26b1ef1fdfc1cf6ca934776f70a843380410593c7932bbc23c53fe2fe6f0b992e3bf5a19206b5e7f3
-  data.tar.gz: c88656c2c2363917fff41839b65c00ccc0f499d3c30c1a216ae783081f6712b44c200ef93500fceae04d99f6719db344ed0b213b742e104d632d9a0d063fc4d3
+  metadata.gz: 99e6c74a4c11320449ee3b58d89b56712067f02bc6b2228d602f4ec942b06617b77960e05d8d29dc03dda95e5c92868d4da18bd67922494fbe84abb40b6e308f
+  data.tar.gz: 353b2199a4a651ee65a0d00c448c8273731b9a4bebbb5c5eff97fe97ba57177ae8f1a47ab0fa6d4b9f2f99856c46a8992c62c84d4319db28116b0dd557c05adf

data/CHANGELOG.md

@@ -4,6 +4,167 @@ The format is [Keep a Changelog](https://keepachangelog.com/en/1.1.0/). This pro
 
 ## Unreleased
 
+## 0.129.0 — 2026-11-05
+
+### Changed
+
+- **The `/admin/style` copy is trimmed.** Each section keeps at most one short sentence of intro,
+  and the notes under specimens are cut the same way. Controls, specimens and error messages are
+  unchanged. The hidden copy-to-agent references on the modal cards are unchanged too. The Tricks
+  section is not part of this trim.
+
+- **A bad or missing CSRF token on a JSON or `Accept: */*` request is now a 422 with no ErrorLog
+  row, on every controller using `Studio::ErrorHandling`.** The catch-all answered JSON 500 and
+  wrote a row. It now answers `422 {error, reason: "invalid_token"}` in every environment, and a
+  test on such a route that asserted `assert_raises(ActionController::InvalidAuthenticityToken)`
+  now asserts the 422. An HTML form is unchanged: the redirect home with its alert, and the row.
+
+### Fixed
+
+- **A theme toggle is one crossfade.** `$store.theme.toggle()` added `theme-transition` for 300ms, and
+  in a host with that rule about 210 elements ran their own 200ms transition while gradients and
+  the page background snapped. It now flips the whole page in one 160ms view transition with no
+  movement. No element runs its own transition, and no named element keeps its own picture. A
+  browser with no view transitions, a reduced-motion reader, and a toggle during a Turbo visit
+  flip at once, and the visit's motion plays on. Under the crossfade the class, the store value
+  and localStorage change together in the transition's callback, so all three still read the old
+  theme for up to a frame after the call: a caller that reads them in the same tick must wait.
+  `toggleTheme` and `storedTheme` are no longer exported, and the store starts from the root's
+  class. `$store.theme.set("dark" | "light")` is the one setter, and `toggle()` stays. The
+  `theme-transition` rule in a host is now dead. Measured on the hub's `/deployments`, signed in,
+  2100 elements, Metal GPU: the largest step between frames fell from 35-65% of the brightness
+  change to 11%, and element transitions started by one toggle from about 1170 to 0.
+  Chromium sends every pointer hit to the root during a view transition, for about 160ms. A pointer
+  that stops in that time can show no `:hover` until it moves again, and a second click on the toggle
+  is dropped. A host spec that toggles and then hovers must wait for `data-theme-flip` to clear.
+
+- **The agent chat at phone width.** Measured at 390x844 and 320x568, light and dark:
+  - No blank tail. A turn's `sr-only` name escaped the log, which had no positioned ancestor,
+    and stretched the document to 1933px where `main` ended at 977px. The log is now
+    `position: relative`.
+  - The newest turn shows above the composer, on load and after a new turn. The page scrolls
+    the thread's end clear of the stuck composer; not for an empty thread, not for a reader
+    scrolled up in the log or the page, and not during a hold, when it waits for the button
+    to be let go.
+  - A stale page says so. A refused token reads "This page has expired" with a reload hint on
+    the voice line and the typed error, and a refused send keeps its words in the box.
+
+## 0.128.0 — 2026-11-05
+
+### Fixed
+
+- **The modified-click booking spec no longer waits on a Playwright event that can stay silent.**
+  `e2e/booking_frame.spec.js` timed out on two `accepted` runs because Playwright 1.62.1 sometimes
+  never fires its `page` event for a tab Chromium did open. The spec now reads the new tab from
+  Chromium's target list. It still needs one new tab at the booking URL, no dialog, and the first
+  page unmoved. No host change: a modified click on a booking link always opened its tab.
+
+- **Firefox runs the shared head's import map.** The head's two URL module tags (`studio/alpine`,
+  `studio/sticky_table_header`) sent a `Link: rel=modulepreload` response header, and Firefox then
+  refused the import map: every bare `studio/*` import failed and no panel opened, on every host
+  that renders the head. Both tags now pass `preload_links_header: false`. They keep their place in
+  the document, their `data-turbo-track` and their CSP treatment. Hosts: keep a module tag of your
+  own below the import map, and pass the same option if it loads by URL.
+
+- **Hold to talk, before the phone test.** Studio's shared voice chat, from the review of
+  `engine-chat-takes-voice`:
+  - A tap under `TAP_MS` (300ms) on a hold button is now the recorder's `tapped` state: the
+    line says to hold the button, and it does not count as a silent take, so the help no longer
+    opens by itself. A refused microphone and two real silent takes in a row still open it; a
+    tap between two silent takes ends the run.
+  - A held button keeps its whole box through a hold at phone width, stuck or not. The status
+    line reserves two lines (one in a composer 36rem wide) and fixes its height for the hold,
+    the chip stays one line, the timer sits on the button, and the recorder's own failed and
+    refused lines moved to the chat's one line. The chat's chip prompt is now "Microphone: hold
+    to allow".
+  - A `site_footer_chat_path` callable that raises hides the Chat link and reports it
+    (`SiteFooter.reporter` on each render, `ErrorLog.capture!` once per error class).
+  - A turn with status `held` says it was received and won't get an automatic answer, and
+    never asks for a resend. The hub still reports these as `failed` until
+    `chat-caps-count-held-messages` ships; they keep the failed line until then.
+  - A later typed send clears "Sent. Spoken by ..." (`studio:agent-chat:sent`).
+  - A key held on the talk button no longer dismisses the refused-microphone help.
+  - The composer's picker scrolls within a short window, so the chip stays on screen.
+  - Firefox's `AbortError` reads as a busy microphone, and Esc in the open picker stops there.
+
+### Added
+
+- **`/admin/style` Theme: logos first, Typography beside the editor, a preview that waits for an edit.** A
+  host may supply its own logo block in `app/views/style/host/_logos.html.erb`.
+- **`Studio.surface_style = :glass`: opt-in translucent cards over a soft ambient page.** A host
+  sets it and writes `data-surface-style` on its root. It reaches `.card`, `.card-hover`,
+  `.empty-state` and `.bg-surface.rounded-xl.border`. Menus stay solid. Real blur is only on
+  `.surface-glass-blur`, because a dense board cannot afford it on every card.
+- **`Studio.sidebar_style = :glass`: an opt-in floating panel for the link sidebar.** The panel
+  insets from the page's edge, in both themes. Where the browser supports `backdrop-filter` it
+  blurs the page through a 72% fill, and a nearly solid fill replaces that under the
+  reduced-transparency setting or with no support. The blur is read in Chromium. It is not read
+  in a real Safari, and a headless WebKit paints the fill with no visible blur, so the fill alone
+  holds resting text at 4.5:1 over the worst page for each theme. It draws a link's `icon:`, marks
+  the current page's row with `aria-current="page"` in the app's primary color and a ring on
+  keyboard focus, and turns off the separate blurred edge. It hangs from the navbar, with square
+  top corners, and its spacing is five tokens on the panel's shell. The default stays `:default`,
+  so no app moves until it opts in.
+- **`studio_icon(name, size:)`: one line icon set, as inline SVG in `currentColor`.** It holds the
+  Lucide icons the sidebar needs, vendored under `lib/studio/icons`, with their ISC and MIT texts
+  beside them. An unknown name renders nothing, so a caller can fall back to an emoji.
+- **Link sidebar: a section may show its header.** A section in `Studio.sidebar_sections` with
+  `header: true` shows its title above its rows, in the `label-upper` style. The default stays no
+  header, so an app changes only when it opts in. The divider stays, and there is no ADMIN chip.
+  The group keeps its accessible name and the word on screen is `aria-hidden`, so a screen reader
+  announces the title once. The header is plain text outside the rows: it takes no click, and a
+  row keeps its height, its centering and its no-jump description. A section with a blank title
+  draws no header. The engine lab shows the case at `/lab/sidebar_panels?sidebar=1&headers=1`.
+- **`Studio.sidebar_geo_signpost`: a host may take the Geo row out of the link sidebar.** It
+  defaults to true, so no app changes. False draws no Geo row in the panel. The partial
+  `components/_geo_signpost` stays, so a host that moves Geo renders it on its own page.
+- **One loader pace for every app.** Under 350ms no loader and no added wait; once shown, at
+  least 750ms (`Studio::Loader::OVERLAY_DELAY_MS`, `OVERLAY_MIN_SHOW_MS`; `min_show:` beside
+  `delay:` on `studio_loader_overlay`). `layouts/studio/_head` now carries the overlay in a
+  `<template>`, and `studio/loader` adds it to the body, so an app with no overlay of its own gets
+  one on this bump. `config.loader_overlay = false` opts out. A slow visit in such an app now shows
+  the overlay, and a visit that answers between 350ms and 1100ms lands later than it did. The wait
+  holds a visit's good HTML response ahead of the view transition's old picture, so the move plays
+  after the loader goes. Failures, downloads, frames, forms, a full-load answer and
+  `StudioLoader.hide()` never wait. See `docs/LOADER.md`, *The standard pace*.
+- **`config.page_transition_style`,** `:slide` (the default) or `:unfold`: one app plays one move.
+
+### Changed
+
+- **Page transitions draw nothing at random.** Alex McRitchie's ruling of 2026-11-04 replaces
+  the random draw per page change of 2026-11-03. Every page change and full load plays the app's
+  one move, and with no style set that move is the slide. A consumer that reads
+  `data-page-transition` or `Math.random` around a visit must change: `fade-*` is now `slide-*`,
+  and `pickStyle` and `DIRECTIONS` are gone.
+- **Page transitions paint the app's page color behind the move, and pages stay opaque.** The
+  black backdrop and the 0.3 opacity are gone, so blank areas no longer darken, a full-width hero
+  has no dark strip beside it, a light theme no longer greys, and an unfold has no black wedges. The
+  leaving page of an unfold stays opaque too.
+
+- **The browser lane counts its own specs.** `bin/lib/e2e_spec_census.rb` computes the spec count
+  from `e2e/`, as the hub does, and `bin/e2e-executed-set-check` reads it. `config/e2e_lane.yml`
+  loses `total_specs` and `executed`, so adding a spec moves no number and two PRs no longer
+  conflict on them. `bin/e2e-census-check` compares Playwright's `--list` with the census.
+- **`CHANGELOG.md` merges with `merge=union`,** so parallel PRs stop conflicting on it. A branch
+  forked before a roll can land an entry under the rolled heading: `docs/RELEASE.md`, *Rolling
+  `Unreleased` into a version*, says how to read and fix that.
+- **Link sidebar: the blurred edge reaches further and fades with no visible end.** The band is
+  100px wide, up from 40px, with the same 6px blur. Its mask is now an eased multi-stop gradient:
+  whole at the panel, half at 60px, clear at 100px, flat at both ends. The old hold and straight
+  fade showed as a line over a photo. It stays flush with the panel, takes no clicks, and draws
+  nothing below `md`. The engine lab shows it over the hub's Denver photo at
+  `/lab/sidebar_panels?sidebar=1&busy=photo`.
+
+### Fixed
+
+- **A late survey autosave can no longer change a completed response.** `record_answer` rewrote
+  the whole answers hash from the copy it had loaded, so a save that overlapped the submit could
+  replace the finished answers with a stale set, and two saves at once could lose each other's
+  keys. It now reads and writes under a row lock, and it refuses a completed row. The submit holds
+  one lock from its first answer through the completion. `on_survey_completed` still fires once,
+  after the commit. The stepper cancels any save still in flight when the form submits. A save that
+  loses the race answers 409, and the stepper shows the visitor no error. A host needs no change.
+
 ## 0.127.0 — 2026-11-04
 
 ### Added

data/README.md

@@ -41,7 +41,7 @@ resolved.
 - **Geo**: `Studio::GeoDetection` places every visitor (IP → country + subdivision, session-cached), `Studio::GeoSetting` stores the operator's blocked countries and regions, `require_geo_allowed` locks whichever surfaces an app chooses, and the shared badge + `/admin/geo` manager ship with it. See [`docs/GEO.md`](docs/GEO.md).
 - **Site identity and link previews**: `Studio::SiteIdentity` holds the app's title, description and image, edited at `/admin/link_preview` beside a live unfurl card and read anywhere through `Studio.site_identity`. Every page unfurls with it unless it calls `link_preview image:, title:, description:`, and `Studio::LinkPreviewBots` serves preview fetchers a slim page under iMessage's 1 MiB limit. Adopt with `bin/rails g studio:site_identity`. See [`docs/LINK_PREVIEW.md`](docs/LINK_PREVIEW.md).
 - **Branded loader**: `studio_loader`, `studio_loader_pending` and `studio_loader_overlay` draw the app's own icon in its theme colours for page loads, long waits and pending buttons, in the style `config.loader` names (Breathe by default). See [`docs/LOADER.md`](docs/LOADER.md).
-- **App-to-app page transitions**: `config.page_transition_direction` (`:left`, `:right`, `:top`, `:bottom`) moves an app's pages one way on every page change, full page loads included, with the navbar and banners held still. It turns smooth-load on. See [`docs/PAGE_TRANSITIONS.md`](docs/PAGE_TRANSITIONS.md).
+- **App-to-app page transitions**: `config.page_transition_direction` (`:left`, `:right`, `:top`, `:bottom`) moves an app's pages one way on every page change, full page loads included, with the navbar and banners held still. `config.page_transition_style` (`:slide`, the default, or `:unfold`) names the one move an app plays; nothing is drawn at random. The direction turns smooth-load on. See [`docs/PAGE_TRANSITIONS.md`](docs/PAGE_TRANSITIONS.md).
 - **Public user page**: `/u/:username` shows a user's avatar and username (nothing else), and unfurls with their avatar, falling back to the site image. Link any username to it with `link_to_user_profile(user)` or `studio_user_profile_path(user)`. Opt in with `config.draw_public_user_routes = true`. See [`docs/PUBLIC_USER_PAGE.md`](docs/PUBLIC_USER_PAGE.md).
 - **Transactional emails**: `Studio::EmailCatalog` — every email an app sends, its type, a live preview, and its banner — plus the shared `/admin/emails` page. Every app inherits the standard emails and their artwork on day one, and can register its own workflows and upload its own banners. See [Transactional emails](#transactional-emails).
 - **Site footer**: `<%= studio_site_footer %>` in the layout renders the public site's footer. It is on by default: with nothing configured it prints the app's name, logo and the legal links the app has routes for, and no address. `config.site_footer` declares the app's own facts (brand, social profiles, link columns, an address with a live map, legal links), every part optional; `config.site_footer_address` adds a location in one setting; `config.site_footer = false` turns the footer off; `config.site_footer_chat_path` adds a standard Chat link to the Contact column. Leaflet is vendored and served by the engine. See [`docs/SITE_FOOTER.md`](docs/SITE_FOOTER.md).
@@ -171,6 +171,7 @@ Studio.configure do |config|
   # the fresh response arrives.
   config.smooth_load = true
   # config.page_transition_direction = :left  # the app's page move; also turns smooth-load on
+  # config.page_transition_style = :unfold     # default :slide
   # Nav spinner minimum display (default 2500). Smooth-load apps typically
   # drop to ~300; keep the high floor if multi-second ops ride the spinner.
   config.nav_spinner_min_ms = 300
@@ -782,6 +783,9 @@ than assuming drop-in equivalence:
 the engine's: Theme, Modals, Tricks, Tasks. An app grows a **fifth section, its
 own**, by defining one partial:
 
+A host may also define `app/views/style/host/_logos.html.erb`, which replaces the Theme section's
+default logo grid.
+
 ```erb
 <%# app/views/style/host/_modals.html.erb %>
 <div class="card p-4 space-y-3">
@@ -823,7 +827,9 @@ of `app/views/style/_host.html.erb`.
 Two seams, both empty by default, so the navbar is unchanged until an app opts in.
 
 - `sidebar_sections` fills the slide-out link sidebar (the cog trigger in the icon
-  rail). Rules: `lib/studio/sidebar_sections.rb`.
+  rail). Rules: `lib/studio/sidebar_sections.rb`. `Studio.sidebar_style = :glass` floats it
+  as an inset translucent panel with line icons (`studio_icon`, `lib/studio/icons/README.md`);
+  see `docs/NAVBAR_SETUP.md`.
 - `navbar_links` fills the navbar's own link slots: the desktop bar beside the
   logo and the phone row under it. Rules: `lib/studio/navbar_links.rb`.
 
@@ -1095,7 +1101,7 @@ config.navbar_account_sidebar = { flag: "gearOpen", controls: %w[gear-sidebar ge
 `components/_sidebar_panel` takes three opt-in locals; unset, the panel renders
 as before:
 
-- `edge: true` draws a soft blurred band along the panel's inner edge from `md`
+- `edge: true` draws a soft blurred band, 100px wide, along the panel's inner edge from `md`
   up, through a `data-sidebar-edge` hook and engine.css. It takes no clicks. The
   link sidebar passes it. It softens the page beside the panel, so leave it off
   a panel kept open beside live content.

data/app/assets/javascripts/studio/page_transition_reveal.js

@@ -5,7 +5,7 @@
 // CLASSIC AND SYNCHRONOUS ON PURPOSE. pagereveal fires before the first render, and a listener
 // bound after that misses it for good. A module is deferred, so it can be too late.
 //
-// It holds no table of styles. The leaving page drew the style with studio/page_transitions
+// It holds no table of styles. The leaving page read the style with studio/page_transitions
 // at pageswap and left it here. No style means the leaving page did not plan this one (its
 // module had not run, or it was the same path), so the load is plain, not the browser's fade.
 (function () {