studio-engine 0.41.0 → 0.43.0

data/app/views/studio/mailers/_layered_banner.html.erb

@@ -0,0 +1,136 @@
+<%#
+  The layered email banner: background image, live text on top.
+
+  locals: (banner:)  — a Studio::Banner
+
+  The markup is deliberately old-fashioned. Outlook on Windows renders through
+  Word and ignores `background-image` on nearly everything, so the picture is
+  carried three ways at once:
+
+    * the `background` ATTRIBUTE on the td, which the widest set of clients honour
+    * the CSS `background-image`, for the ones that prefer it
+    * a VML `v:rect` / `v:fill` inside a `gte mso 9` conditional, which is the
+      only thing that reaches Outlook. Every other client never sees it.
+
+  `bgcolor` is the floor: if the image is blocked or still loading, the cell is a
+  brand colour with legible text on it rather than white-on-white.
+
+  The scrim is a coloured overlay cell between artwork and type. Background art
+  is chosen to look good, not to guarantee contrast, and white text on a pale
+  sky cannot be read. Set scrim: 0 on artwork dark enough to carry the type.
+%>
+<%
+  banner = local_assigns.fetch(:banner)
+
+  # PREVIEW HOOKS, off by default.
+  #
+  # The admin page edits this banner's words and repaints it as you type, which
+  # needs handles on the three text nodes. They are opt-in because this partial
+  # renders REAL EMAIL: shipping data- attributes into every inbox to serve an
+  # admin screen is the kind of thing that is invisible until a mail client
+  # chokes on it. With preview off the markup is byte-for-byte what it was, and
+  # a test asserts exactly that.
+  preview = local_assigns.fetch(:preview, false)
+  hook = ->(name) { preview ? %( data-banner-#{name}).html_safe : "" }
+
+  # TYPE AND RHYTHM SCALE WITH THE BANNER.
+  #
+  # Everything below is a proportion of the height, not a fixed pixel size.
+  # Hardcoding 42px type looked right at 300px tall and OVERFLOWED at 200 —
+  # the box shrank, the words did not, and the banner rendered 238px with the
+  # header clipped at both edges. Proportions mean the next height change is a
+  # one-line edit rather than a re-tune.
+  h = banner.height
+
+  header_size   = (h * 0.15).round      # 30px at 200, 45 at 300
+  header_line   = (h * 0.17).round
+  subtext_size  = (h * 0.075).round     # 15px at 200
+  subtext_line  = (h * 0.10).round
+  logo_width    = (h * 0.60).round      # 120px at 200
+  side_padding  = (banner.width * 0.05).round
+
+  # The block is vertically centred, so the gap between sub-text and logo is
+  # what pushes the header toward the top edge and the logo toward the bottom.
+  #
+  # It has to ADAPT to the greeting. A gap that fills the banner for "Welcome
+  # Alex!" leaves "Welcome Bartholomew Fitzgerald-Montgomery!" clipped, because
+  # a wrapped header is a whole line taller while the box is not. The line
+  # estimate is deliberately crude — it only has to answer "one line or more",
+  # client fonts differ anyway, and being wrong costs breathing room rather
+  # than a broken banner.
+  gap_after_header = (h * 0.02).round
+  chars_per_line   = 21
+  header_lines     = [(banner.header.to_s.length / chars_per_line.to_f).ceil, 1].max
+  gap_before_logo  = header_lines > 1 ? (h * 0.18).round : (h * 0.35).round
+%>
+<table role="presentation" width="<%= banner.width %>" cellpadding="0" cellspacing="0" border="0"
+       style="width:<%= banner.width %>px;border-collapse:collapse;">
+  <tr>
+    <td <%= %(background="#{banner.background_url}").html_safe if banner.background_url.present? %>
+        bgcolor="<%= Studio.theme_primary %>"
+        width="<%= banner.width %>" height="<%= banner.height %>" valign="middle"
+        style="width:<%= banner.width %>px;height:<%= banner.height %>px;<%= "background-image:url(#{banner.background_url});background-size:cover;background-position:center;background-repeat:no-repeat;" if banner.background_url.present? %>">
+      <% if banner.background_url.present? %>
+        <!--[if gte mso 9]>
+        <v:rect xmlns:v="urn:schemas-microsoft-com:vml" fill="true" stroke="false"
+                style="width:<%= banner.width %>px;height:<%= banner.height %>px;">
+          <v:fill type="frame" src="<%= banner.background_url %>" color="<%= Studio.theme_primary %>" />
+          <v:textbox inset="0,0,0,0">
+        <![endif]-->
+      <% end %>
+      <div>
+        <table role="presentation" width="<%= banner.width %>" cellpadding="0" cellspacing="0" border="0"
+               style="width:<%= banner.width %>px;">
+          <tr>
+            <%# VERTICAL PADDING IS ZERO ON PURPOSE.
+                A table cell's padding ADDS to its declared height, so
+                height:300 plus 26px top and bottom rendered a 352px banner.
+                Dropping the height instead shrank the scrim to a band across
+                the middle, because the tinted cell then only covered its own
+                content. Full height with horizontal-only padding gives both:
+                exactly 300px, and a wash over the whole picture. valign does
+                the vertical centring that the padding was doing. %>
+            <td align="center" valign="middle" height="<%= banner.height %>"<%= hook.call("scrim") %>
+                <%# bgcolor is the OUTLOOK path and the CSS below is everywhere
+                    else. Word ignores rgba(), so without the attribute the wash
+                    vanishes there and white text sits on bare artwork — the exact
+                    contrast case the scrim exists for, in the one client that
+                    cannot be spot-checked. Every other client honours the rgba
+                    declaration and overrides the flat attribute. %>
+                <%= %(bgcolor="#{banner.scrim_solid_hex}").html_safe if banner.scrim_opacity.positive? %>
+                style="height:<%= banner.height %>px;padding:0 <%= side_padding %>px;<%= "background-color:rgba(24,16,64,#{banner.scrim_opacity});" if banner.scrim_opacity.positive? %>">
+              <% if preview || banner.header.present? %>
+                <p<%= hook.call("header") %> style="margin:0 0 <%= gap_after_header %>px;font-family:Montserrat,'Segoe UI',Helvetica,Arial,sans-serif;font-size:<%= header_size %>px;line-height:<%= header_line %>px;font-weight:700;color:#ffffff;">
+                  <%= banner.header %>
+                </p>
+              <% end %>
+              <% if preview || banner.subtext.present? %>
+                <p<%= hook.call("subtext") %> style="margin:0 0 <%= gap_before_logo %>px;font-family:Montserrat,'Segoe UI',Helvetica,Arial,sans-serif;font-size:<%= subtext_size %>px;line-height:<%= subtext_line %>px;color:#efeaff;">
+                  <%= banner.subtext %>
+                </p>
+              <% end %>
+              <% if banner.logo_url.present? %>
+                <%= image_tag banner.logo_url, width: logo_width, alt: banner.logo_alt.to_s,
+                      data: (preview ? { banner_logo: true } : {}),
+                      style: "display:block;margin:0 auto;width:#{logo_width}px;height:auto;border:0;" %>
+              <% elsif preview %>
+                <%# A hidden placeholder so ticking "hide the logo" and unticking it
+                    again repaints without a round trip. Preview only — an email
+                    with no logo ships no img tag at all. %>
+                <img data-banner-logo width="<%= logo_width %>" alt=""
+                     src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw=="
+                     style="display:none;margin:0 auto;width:<%= logo_width %>px;height:auto;border:0;">
+              <% end %>
+            </td>
+          </tr>
+        </table>
+      </div>
+      <% if banner.background_url.present? %>
+        <!--[if gte mso 9]>
+          </v:textbox>
+        </v:rect>
+        <![endif]-->
+      <% end %>
+    </td>
+  </tr>
+</table>

data/app/views/studio/modals/_image_upload.html.erb

@@ -44,6 +44,16 @@
       maxWidth: 256,
       maxHeight: 256,
       transparent: true,
+      // GIFS BYPASS THE CROPPER ENTIRELY when allowed. They cannot go through
+      // it: confirm() paints the crop onto a canvas and calls toBlob(...,
+      // "image/png"), which keeps frame one and throws the animation away —
+      // silently, with a perfectly good-looking still as the result. So an
+      // allowed GIF is passed through as its ORIGINAL BYTES, uncropped, and the
+      // aspect it was authored at is the aspect that ships.
+      //
+      // Off by default because most upload sites (avatars, square thumbnails)
+      // genuinely want the crop, and an un-cropped image there is a bug.
+      allowGifs: false,
       autoCropArea: 0.9,
       // dispatch: keep the modal open after confirm so the opener's host can run
       // its own processing -> success flow (it replaces the modal). When false
@@ -57,6 +67,7 @@
         if (props.maxWidth) this.maxWidth = props.maxWidth;
         if (props.maxHeight) this.maxHeight = props.maxHeight;
         if (typeof props.transparent === "boolean") this.transparent = props.transparent;
+        if (typeof props.allowGifs === "boolean") this.allowGifs = props.allowGifs;
         if (props.dispatch) this.dispatch = true;
         // Carried through untouched and echoed back on confirm, so the host that
         // OPENED the cropper is the only one that acts on the result.
@@ -103,6 +114,17 @@
           return;
         }
         var self = this;
+
+        if (this.isAnimatedCandidate(file)) {
+          if (!this.allowGifs) {
+            this.error = "GIFs aren't accepted here. Use a PNG, JPG or WebP.";
+            return;
+          }
+          this.error = null;
+          this.passThrough(file);
+          return;
+        }
+
         var reader = new FileReader();
         reader.onload = function (e) {
           self.error = null;
@@ -112,6 +134,25 @@
         reader.readAsDataURL(file);
       },
 
+      // Type, not extension: a file renamed to .gif is still a PNG and belongs in
+      // the cropper, and a .GIF from a Windows machine is still a GIF.
+      isAnimatedCandidate(file) {
+        return (file.type || "").toLowerCase() === "image/gif";
+      },
+
+      // Hand the ORIGINAL file straight to the opener, no canvas in the path.
+      // Same event and the same owner token as a cropped confirm, so every host
+      // downstream is unchanged — the only difference is what is in the blob.
+      passThrough(file) {
+        try {
+          window.dispatchEvent(new CustomEvent("crop-photo-confirmed",
+                                               { detail: { blob: file, owner: this.owner || null,
+                                                           filename: file.name, uncropped: true } }));
+        } catch (_) {}
+        if (this.cropper) { this.cropper.destroy(); this.cropper = null; }
+        if (!this.dispatch) this.$store[this._storeName].close();
+      },
+
       onFilePicked(event) {
         var file = event.target.files[0];
         event.target.value = "";
@@ -228,6 +269,7 @@
       if (opts.maxWidth) p.maxWidth = opts.maxWidth;
       if (opts.maxHeight) p.maxHeight = opts.maxHeight;
       if (opts.autoCropArea) p.autoCropArea = opts.autoCropArea;
+      if (typeof opts.allowGifs === "boolean") p.allowGifs = opts.allowGifs;
       if (extra) { for (var k in extra) { p[k] = extra[k]; } }
       return p;
     }
@@ -249,7 +291,12 @@
       onCropConfirmed(detail) {
         if (!detail) return;
         if (detail.owner && detail.owner !== ownerId) return;
-        this.applyCrop(detail.blob);
+        // An uncropped pass-through (a GIF) carries its own name and type. The
+        // cropped path does not — it produced a PNG — so it keeps the caller's
+        // filename. Sending "banner.png" for GIF bytes would have the server
+        // store an animated file under a name and content type that say
+        // otherwise, and the inbox would be told it is a PNG.
+        this.applyCrop(detail.blob, detail.filename);
       },
       // Native picker: read the chosen image, then hand it to the modal.
       onFileSelected(event) {
@@ -262,10 +309,15 @@
         reader.readAsDataURL(file);
         event.target.value = "";
       },
-      applyCrop(blob) {
+      applyCrop(blob, filename) {
         if (!blob) return;
+        // The blob's OWN type when it has one — a pass-through GIF arrives as the
+        // original File and already knows it is image/gif. Only the cropped path
+        // needs the png default, because that is what toBlob produced.
+        var type = blob.type || "image/png";
+        var name = filename || opts.filename || "image.png";
         var dt = new DataTransfer();
-        dt.items.add(new File([blob], opts.filename || "image.png", { type: "image/png" }));
+        dt.items.add(new File([blob], name, { type: type }));
         this.$refs.fileInput.files = dt.files;
         window.submitFormWithProgress(this.$refs.form, opts);
       }

data/app/views/studio/newsletter_mailer/subscribed.html.erb

@@ -0,0 +1,40 @@
+<%# Body only — branded_mailer supplies the banner + card. Colours mirror
+    user_mailer/magic_link: brand primary for anything actionable, so the two
+    emails read as coming from the same place. %>
+<h1 style="margin:0 0 18px;font-size:22px;line-height:1.3;color:#1f2a1c;">You're on the list</h1>
+
+<%# From the catalogue, so /admin/emails owns this copy.
+
+    sanitize: true strips scripts and event handlers; it leaves a, strong and img
+    standing. The author is an admin, so that is a reasonable line — but it is not
+    "no HTML", and describing it that way would misstate the guard. %>
+<%# Resolved here as well as in the mailer, for the same reason the sign-in view
+    does it: a host may render this view from its own mailer. %>
+<% body = @body.presence || Studio::EmailCatalog.body(:newsletter_subscribed) %>
+<% if body.present? %>
+  <%= simple_format body, { style: "margin:0 0 24px;font-size:16px;line-height:1.6;color:#3f4a3c;" }, sanitize: true %>
+<% end %>
+
+<p style="margin:0 0 24px;font-size:16px;line-height:1.6;color:#3f4a3c;">
+  Nothing else to do. The next one lands in this inbox.
+</p>
+
+<p style="margin:28px 0 0;font-size:13px;line-height:1.5;color:#6b756a;text-align:center;">
+  We're sending to <strong style="color:#2f3a2c;"><%= @email %></strong>.
+</p>
+
+<% if @unsubscribe_url.present? %>
+  <%# Renders ONLY when the host wired a real URL. A newsletter needs a way out,
+      but an unsubscribe link that goes nowhere is worse than none — it spends
+      the reader's trust and then fails them. %>
+  <p style="margin:24px 0 0;font-size:12px;line-height:1.4;color:#8a948a;text-align:center;">
+    Changed your mind?
+    <a href="<%= @unsubscribe_url %>" style="color:<%= Studio.theme_primary %>;">Unsubscribe</a>.
+  </p>
+<% end %>
+
+<p style="margin:28px 0 0;font-size:12px;line-height:1.5;color:#8a948a;text-align:center;">
+  Didn't sign up? You can safely ignore this email and we won't send another.
+</p>
+
+<p style="margin:20px 0 0;font-size:13px;color:#6b756a;text-align:center;">— <%= @app_name %></p>

data/app/views/studio/newsletter_mailer/subscribed.text.erb

@@ -0,0 +1,13 @@
+You're on the <%= @app_name %> list.
+
+Thanks for subscribing. We'll send the occasional note about what we're
+building — no more often than it's worth your time.
+
+We're sending to <%= @email %>.
+<% if @unsubscribe_url.present? %>
+Changed your mind? Unsubscribe here:
+<%= @unsubscribe_url %>
+<% end %>
+Didn't sign up? You can safely ignore this message and we won't send another.
+
+— <%= @app_name %>

data/app/views/user_mailer/magic_link.html.erb

@@ -1,17 +1,50 @@
-<%# Body only — branded_mailer supplies the banner + card. Uses the theme success
-    color for the button so it matches each app. %>
+<%# Body only — branded_mailer supplies the banner + card.
+
+    The button and its copy-and-paste fallback share ONE colour — cta_color,
+    which the operator can change. They were pinned to different sources, so a
+    yellow button left a purple fallback underneath it and the pair the comment
+    below promises to keep together came apart.
+
+    The button is theme PRIMARY by default, not success. Success is the "it worked" green;
+    signing in has not happened yet, and the brand colour is what ties the button
+    to the banner above it. The copy-and-paste link is the SAME colour on purpose
+    — it is the button's fallback, and a green link under a purple button reads
+    as a mistake. %>
 <h1 style="margin:0 0 18px;font-size:22px;line-height:1.3;color:#1f2a1c;">Your sign-in link</h1>
 
-<p style="margin:0 0 24px;font-size:16px;line-height:1.6;color:#3f4a3c;">
-  Tap the button below to sign in to <strong style="color:#1f2a1c;"><%= @app_name %></strong> — no password needed.
-  If you don't have an account yet, we'll create one for you.
-</p>
+<%# BODY AND BUTTON COME FROM THE CATALOGUE, not from this file. An operator
+    edits them on /admin/emails; the strings that used to live here are the
+    registry defaults, so an app that never opens that page sends what it always
+    sent.
+
+    simple_format(sanitize: true) turns blank lines into paragraphs and strips
+    scripts and event handlers — it does NOT strip all HTML: a, strong and img
+    survive. That is acceptable because the author is an admin, but the guard is
+    narrower than "no HTML" and the comment should not claim otherwise.
+
+    THE VIEW RESOLVES THEM ITSELF when the mailer did not. A host that defines
+    its own UserMailer — turf-monster does on main; McRitchie Studio does on its
+    adoption branch — renders THIS
+    view without setting the new ivars, so depending on them alone shipped an
+    email with no body and no button to exactly the apps that had customised
+    their mail. The mailer's values still win when present, which is what carries
+    the recipient's name into the copy. %>
+<%
+  body      = @body.presence      || Studio::EmailCatalog.body(:magic_link)
+  cta_text  = @cta_text.presence  || (Studio::EmailCatalog.cta_enabled?(:magic_link) ? Studio::EmailCatalog.cta_text(:magic_link) : nil)
+  cta_color = @cta_color.presence || Studio::EmailCatalog.cta_color(:magic_link)
+%>
+<% if body.present? %>
+  <%= simple_format body, { style: "margin:0 0 24px;font-size:16px;line-height:1.6;color:#3f4a3c;" }, sanitize: true %>
+<% end %>
 
-<table role="presentation" cellpadding="0" cellspacing="0" border="0" align="center" style="margin:0 auto;">
-  <tr><td align="center" bgcolor="<%= Studio.theme_success %>" style="border-radius:10px;">
-    <a href="<%= @magic_url %>" style="display:inline-block;padding:16px 40px;font-size:17px;font-weight:700;color:#ffffff;text-decoration:none;border-radius:10px;font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,Helvetica,Arial,sans-serif;">Sign in to <%= @app_name %> 🪄</a>
-  </td></tr>
-</table>
+<% if cta_text.present? %>
+  <table role="presentation" cellpadding="0" cellspacing="0" border="0" align="center" style="margin:0 auto;">
+    <tr><td align="center" bgcolor="<%= cta_color %>" style="border-radius:10px;">
+      <a href="<%= @magic_url %>" style="display:inline-block;padding:16px 40px;font-size:17px;font-weight:700;color:#ffffff;text-decoration:none;border-radius:10px;font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,Helvetica,Arial,sans-serif;"><%= cta_text %> 🪄</a>
+    </td></tr>
+  </table>
+<% end %>
 
 <p style="margin:28px 0 0;font-size:13px;line-height:1.5;color:#6b756a;text-align:center;">
   This link is for <strong style="color:#2f3a2c;"><%= @email %></strong> and expires in <%= Studio.magic_link_ttl.in_minutes.round %> minutes — it can only be used once.
@@ -19,7 +52,11 @@
 
 <p style="margin:24px 0 0;font-size:12px;line-height:1.4;color:#8a948a;text-align:center;">
   Button not working? Copy and paste this link:<br>
-  <a href="<%= @magic_url %>" style="font-size:9px;line-height:1.3;color:<%= Studio.theme_success %>;word-break:break-all;"><%= @magic_url %></a>
+  <%# 11px, not the old 9px: this is the link someone falls back to when the
+      button fails, so it has to be readable enough to select by hand. It stays
+      a step under the 12px label above it — the label explains, the URL is the
+      thing you drag across. %>
+  <a href="<%= @magic_url %>" style="font-size:11px;line-height:1.5;color:<%= cta_color %>;word-break:break-all;"><%= @magic_url %></a>
 </p>
 
 <p style="margin:28px 0 0;font-size:12px;line-height:1.5;color:#8a948a;text-align:center;">

data/db/migrate/20260812000000_create_studio_email_settings.rb

@@ -0,0 +1,26 @@
+# Per-email, per-APP settings an operator can change from /admin/emails without
+# a deploy — starting with the banner scrim.
+#
+# Separate from ImageCache (which holds the uploaded banner) because this is a
+# NUMBER, not an asset, and separate from the registry (which is code) because
+# the whole point is that an operator can tune it against real artwork and see
+# the result. The registry stays the default; a row here is an override.
+class CreateStudioEmailSettings < ActiveRecord::Migration[7.2]
+  def change
+    create_table :studio_email_settings do |t|
+      # The registry key — "magic_link", "contest_winnings". Not a foreign key:
+      # the catalogue is code, and an app may unregister an email without
+      # wanting its saved settings destroyed.
+      t.string  :email_key, null: false
+
+      # Scrim as a PERCENT (0-100) rather than a float. It is what the operator
+      # types and what the page shows; storing the same units the human uses
+      # keeps the round-trip lossless and the value obvious in the console.
+      t.integer :scrim_percent
+
+      t.timestamps
+    end
+
+    add_index :studio_email_settings, :email_key, unique: true
+  end
+end

data/db/migrate/20260812210000_add_copy_to_studio_email_settings.rb

@@ -0,0 +1,32 @@
+# The banner's WORDS, editable by the operator alongside its tint.
+#
+# Separate migration rather than an edit to CreateStudioEmailSettings: that one
+# has already been installed and run in a host, and rewriting an applied
+# migration is how a schema quietly diverges from the file that claims to
+# describe it.
+#
+# Every column is nullable, and nil means INHERIT — the registry default applies.
+# That distinction is the whole design: "the operator has not set this" and "the
+# operator set this to empty" are different answers, and a NOT NULL default
+# would collapse them.
+class AddCopyToStudioEmailSettings < ActiveRecord::Migration[7.2]
+  def change
+    change_table :studio_email_settings, bulk: true do |t|
+      # Supports a {name} placeholder, which is what keeps the field honest for
+      # an email whose greeting is per-recipient.
+      t.string  :header
+
+      # Used when no name is known. A magic link may be the first contact we
+      # ever have with someone, so "Welcome {name}!" has to have somewhere to
+      # fall back to that is not "Welcome !".
+      t.string  :header_fallback
+
+      t.string  :subtext
+
+      # Blank inherits the registry logo. hide_logo is the deliberate "no logo"
+      # answer — without it, blank would have to mean both inherit and none.
+      t.string  :logo_url
+      t.boolean :hide_logo, null: false, default: false
+    end
+  end
+end

data/db/migrate/20260812220000_add_subject_to_studio_email_settings.rb

@@ -0,0 +1,15 @@
+# The subject line, editable beside the banner's words.
+#
+# Its OWN migration, and that is the point rather than an oversight. The subject
+# column was first written into AddCopyToStudioEmailSettings, which a host had
+# already run — so the column silently never appeared, and the manager offered a
+# field backed by nothing. Editing an applied migration does not re-apply it; it
+# only makes the file disagree with the database it claims to describe.
+class AddSubjectToStudioEmailSettings < ActiveRecord::Migration[7.2]
+  def change
+    # Nullable, because nil means INHERIT the registry default — the same
+    # distinction every other copy column carries. A NOT NULL default would
+    # collapse "never set" into "set to empty".
+    add_column :studio_email_settings, :subject, :string
+  end
+end

data/db/migrate/20260813010000_add_body_cta_footer_to_studio_email_settings.rb

@@ -0,0 +1,32 @@
+# The email BELOW the banner: its body copy, its call to action, and the footer
+# every email shares.
+#
+# Same rule as the banner's words — nil means INHERIT the registry default, so
+# an app that never opens /admin/emails sends exactly what it sent before.
+#
+# The FOOTER is app-wide rather than per-email, and it lives in this same table
+# under a reserved key (Studio::EmailSetting::FOOTER_KEY). A separate table for
+# two strings would cost a migration, a model and a join to say the same thing;
+# a reserved key keeps one place to look for "what has the operator changed".
+class AddBodyCtaFooterToStudioEmailSettings < ActiveRecord::Migration[7.2]
+  def change
+    change_table :studio_email_settings, bulk: true do |t|
+      # The paragraph(s) under the header. Rendered through
+      # simple_format(sanitize: true), which makes blank lines into paragraphs and
+      # strips scripts and event handlers — inline tags like a and strong survive.
+      # The author is an admin, so that line is deliberate rather than an oversight.
+      t.text    :body
+
+      t.string  :cta_text
+      # Hex, defaulting to the app's primary. Stored rather than derived so an
+      # operator can make one email's button stand out.
+      t.string  :cta_color
+      # NULL, not false: three states again. nil inherits the registry's answer,
+      # true and false are the operator's.
+      t.boolean :cta_enabled
+
+      # Footer, on the reserved row.
+      t.string  :discord_url
+    end
+  end
+end

data/lib/studio/version.rb

@@ -1,3 +1,3 @@
 module Studio
-  VERSION = "0.41.0"
+  VERSION = "0.43.0"
 end

data/lib/studio.rb

@@ -570,6 +570,18 @@ module Studio
                constraints: { key: /[a-z0-9_]+/ }
         delete "admin/emails/:key",     to: "studio/emails#destroy",
                constraints: { key: /[a-z0-9_]+/ }
+        # Operator-tunable per-email settings (the banner scrim today). Separate
+        # from #update, which takes an image upload.
+        patch  "admin/emails/:key/settings", to: "studio/emails#settings",
+               as: :admin_email_settings, constraints: { key: /[a-z0-9_]+/ }
+        # The banner's words and logo. Its own route so writing a sentence and
+        # nudging the tint save independently.
+        patch  "admin/emails/:key/copy", to: "studio/emails#copy",
+               as: :admin_email_copy, constraints: { key: /[a-z0-9_]+/ }
+        # The per-email logo. Separate from the banner upload above — different
+        # picture, different ImageCache purpose, independently revertible.
+        patch  "admin/emails/:key/logo", to: "studio/emails#logo",
+               as: :admin_email_logo, constraints: { key: /[a-z0-9_]+/ }
       end
 
       # DEPRECATED, kept for ONE release. Not a redirect: consumer-ci.yml runs

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: studio-engine
 version: !ruby/object:Gem::Version
-  version: 0.41.0
+  version: 0.43.0
 platform: ruby
 authors:
 - Alex McRitchie
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-08-12 00:00:00.000000000 Z
+date: 2026-08-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -169,7 +169,10 @@ files:
 - LICENSE
 - README.md
 - app/assets/images/emails/email-change-confirmation.gif
+- app/assets/images/emails/logo-horizontal.png
+- app/assets/images/emails/magic-link-background.gif
 - app/assets/images/emails/magic-link.gif
+- app/assets/images/emails/newsletter-subscribed-background.gif
 - app/assets/images/resend-favicon.png
 - app/assets/images/ses-favicon.png
 - app/assets/javascripts/studio/canvas_confetti.js
@@ -210,6 +213,7 @@ files:
 - app/jobs/error_log_cleanup_job.rb
 - app/jobs/studio/email_delivery_job.rb
 - app/mailers/application_mailer.rb
+- app/mailers/studio/newsletter_mailer.rb
 - app/mailers/user_mailer.rb
 - app/models/concerns/sluggable.rb
 - app/models/concerns/studio/board/rankable.rb
@@ -219,13 +223,16 @@ files:
 - app/models/image_cache.rb
 - app/models/session_context.rb
 - app/models/studio/email_delivery.rb
+- app/models/studio/email_setting.rb
 - app/models/studio/enumeral.rb
 - app/models/studio/link.rb
 - app/models/studio/model_page.rb
 - app/models/theme_setting.rb
 - app/services/google_oauth_validator.rb
+- app/services/studio/banner.rb
 - app/services/studio/email_catalog.rb
 - app/services/studio/email_image.rb
+- app/services/studio/email_preview_target.rb
 - app/views/components/_admin_dropdown.html.erb
 - app/views/components/_avatar.html.erb
 - app/views/components/_avatar_cropper.html.erb
@@ -277,11 +284,18 @@ files:
 - app/views/studio/board/_card_shell.html.erb
 - app/views/studio/board/_column.html.erb
 - app/views/studio/email_images/index.html.erb
+- app/views/studio/emails/_banner_editor.html.erb
+- app/views/studio/emails/_banner_preview.html.erb
+- app/views/studio/emails/_banner_scale.html.erb
+- app/views/studio/emails/_recipient_picker.html.erb
+- app/views/studio/emails/_recipient_repaint.html.erb
 - app/views/studio/emails/_row.html.erb
 - app/views/studio/emails/index.html.erb
+- app/views/studio/emails/orphan.html.erb
 - app/views/studio/emails/show.html.erb
 - app/views/studio/links/confirm.html.erb
 - app/views/studio/local_emails/index.html.erb
+- app/views/studio/mailers/_layered_banner.html.erb
 - app/views/studio/modals/_crop_photo.html.erb
 - app/views/studio/modals/_host.html.erb
 - app/views/studio/modals/_image_upload.html.erb
@@ -315,6 +329,8 @@ files:
 - app/views/studio/modals/templates/_success.html.erb
 - app/views/studio/modals/templates/_wizard.html.erb
 - app/views/studio/models/show.html.erb
+- app/views/studio/newsletter_mailer/subscribed.html.erb
+- app/views/studio/newsletter_mailer/subscribed.text.erb
 - app/views/style/_modal_specimen.html.erb
 - app/views/style/_modals.html.erb
 - app/views/style/_specimen.html.erb
@@ -336,6 +352,10 @@ files:
 - db/migrate/20260620000001_create_studio_links.rb
 - db/migrate/20260620000002_allow_null_image_cache_owner.rb
 - db/migrate/20260623130000_create_studio_enumerals.rb
+- db/migrate/20260812000000_create_studio_email_settings.rb
+- db/migrate/20260812210000_add_copy_to_studio_email_settings.rb
+- db/migrate/20260812220000_add_subject_to_studio_email_settings.rb
+- db/migrate/20260813010000_add_body_cta_footer_to_studio_email_settings.rb
 - lib/studio-engine.rb
 - lib/studio.rb
 - lib/studio/cable.rb