studio-engine 0.89.0 → 0.91.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: eeb8af5c3521e31b4bda82538bc2053bf4ff364008f616454ce89aa267d30643
-  data.tar.gz: b4374bb37c27468e3b20df3656973a1818df2445aa7b0a0b6c242dc2d67f08fd
+  metadata.gz: 0cf7b3c1fa31a2eb5f9746838c8c4976d026920c986504c674f760c57c73a33d
+  data.tar.gz: c39625c99d384e68eedfee1a31dde4816e6f3aa2f004f6ab2f88c4e10d447b00
 SHA512:
-  metadata.gz: c107ea4e17a719e1612a243550c0427bc5868e5ebc0219ab913e12312d4580fee715788afd80cdb6617f7ef4b8df799e67e8507fd3851db2d2f71e85fcf07bd0
-  data.tar.gz: f41f199936bd5bd48bf226b0df833679c956ca84671c86971f9a115b88c666885ebe4229814fd17b240cf8bed981da5660315dc75bdd8185ee9df4c51f185a1a
+  metadata.gz: bfeb555efeae9e981014cf5afb73c8e1eb7b01c90d92dc0c1ba6838d5c1acc950ddc908846be93d15d23ac07a9f5acf277c103c3d95b4611e85b758de5c940f0
+  data.tar.gz: 728932ef4510055ab9b8cd3d6f472abe228ee632febfe007251beb242aec114a1e11c77381a63e44167fb7817c79d8d6716d24687e4261b4c660968e23ffef8c

data/CHANGELOG.md

@@ -4,6 +4,39 @@ The format is [Keep a Changelog](https://keepachangelog.com/en/1.1.0/). This pro
 
 ## Unreleased
 
+## 0.91.0 — 2026-10-06
+
+### Added
+
+- **`fizz_portal: true` on `studio/hold_button`** lifts the bubbles out of a card
+  that clips them: the layers move to `<body>` in a fixed box that tracks the
+  button through scroll and resize, paints one rung above the button's highest
+  ancestor z-index, and mirrors its state and palette. The default is off, so
+  every existing caller renders as before. The style guide's live hold button
+  uses it.
+
+## 0.90.0 — 2026-10-06
+
+### Removed
+
+- **`components/card`, `components/input` and `components/progress_bar`.** No
+  app renders these partials. The `card` and `input-field` utilities they wrapped
+  still ship; write the classes on your own markup.
+- **`Studio::Impersonation`** and its four settings,
+  `impersonation_target_session_key`, `impersonation_actor_session_key`,
+  `impersonation_started_at_session_key` and `impersonation_max_minutes`. No app
+  includes the concern; each owns its Act As session. The
+  `studio/banners/impersonation` banner stays.
+- **`Studio::Broadcastable`.** No app includes it. Wrap a broadcast in
+  `Studio::Cable.safe_broadcast { broadcast_replace_to ... }` instead
+  (`docs/CABLE.md`).
+- **`Studio::UserProfile`.** No app includes it; each `User` defines
+  `display_name`, `avatar_initials` and `avatar_color` itself. The initial-circle
+  palette moves to `Studio::AVATAR_COLORS`.
+- **`/admin/email_images`**, `Studio::EmailImagesController`, its view and the
+  `admin_email_images_path` and `admin_email_image_path` helpers. `/admin/emails`
+  replaces the page, and no app links or tests it.
+
 ## 0.89.0 — 2026-10-05
 
 ### Changed

data/README.md

@@ -34,7 +34,7 @@ resolved.
 - **Session drift**: every page carries a session stamp and loads `window.StudioSession`, which notices when another tab signs in or out, the session expires, or the server revokes it; `session:changed` / `session:mismatch` events, cross-tab sync, an identity-source plug-in interface, and `expectChange` holds for deliberate switches. The rehydrate endpoint (`GET /session/state`) is opt-in. See [`docs/SESSION_DRIFT.md`](docs/SESSION_DRIFT.md).
 - **Theme system**: Dynamic CSS custom properties generated from 7 role colors (primary, dark, light, success, accent, warning, danger). Dark/light mode toggle. Admin theme editor at `/admin/theme`.
 - **UI primitives**: Shared component partials and CSS primitives such as `components/emoji_swap` for nav/sidebar emoji hover transitions.
-- **Operator tooling**: Shared `studio/banners/environment` banner with Dev Mode + email connector controls, `studio/banners/impersonation`, and an opt-in `Studio::Impersonation` concern for Act As session conventions.
+- **Operator tooling**: Shared `studio/banners/environment` banner with Dev Mode + email connector controls and `studio/banners/impersonation`.
 - **Sluggable concern**: `before_save :set_slug` with `to_param` for human-readable URLs
 - **ThemeSetting model**: Per-app DB overrides with fallback to config defaults
 - **Geo**: `Studio::GeoDetection` places every visitor (IP → country + subdivision, session-cached), `Studio::GeoSetting` stores the operator's blocked countries and regions, `require_geo_allowed` locks whichever surfaces an app chooses, and the shared badge + `/admin/geo` manager ship with it. See [`docs/GEO.md`](docs/GEO.md).
@@ -169,22 +169,8 @@ with their own users and return route:
            stop_path: admin_stop_impersonating_path %>
 ```
 
-The engine also provides an optional `Studio::Impersonation` concern for the
-session convention:
-
-```ruby
-class ApplicationController < ActionController::Base
-  include Studio::ErrorHandling
-  include Studio::Impersonation
-end
-```
-
-The concern adds `true_user`, `impersonated_user`, `impersonating?`,
-`start_impersonation_session(target_user, actor:)`, and
-`clear_impersonation_session`. Consumer apps still own the authorization rule,
-audit log, enter/exit controller actions, and any app-specific safeguards such
-as binding session-token checks to `true_user` or disabling wallet-only
-privileges while impersonating.
+Each app owns its Act As session, authorization rule, audit log and enter/exit
+actions; the engine supplies only the banner.
 
 ## UI Primitives
 
@@ -702,8 +688,7 @@ matching slot is absent, so existing call sites render unchanged.
 Every consuming app can render the same admin page — **`/admin/emails`** —
 listing each transactional email it sends with the banner riding at the top of
 that email, and whether that banner is the **inherited default** or an
-**app-owned override**. Supersedes the old `/admin/email_images`, which is
-deprecated but still renders for one release.
+**app-owned override**.
 
 **The page is opt-in:**
 

data/app/assets/tailwind/studio_engine/engine-motion.css

@@ -1315,6 +1315,8 @@ body.modal-open { overflow: visible; }
      span.hold-stack            positioning + z-order context
        span.hold-fizz             resting bubble layer   (behind the button)
        span.hold-fizz.hold-fizz-extra   hover-only layer (lively level only)
+       span.hold-fizz-portal      wraps both layers with fizz_portal: true, and
+                                  moves to <body> (see THE PORTAL below)
        button.hold-btn            the button itself, painted OVER the bubbles
          div.hold-icon            progress ring + tick
          ul.hold-text             four sliding labels: idle/hold/done/blocked
@@ -1731,14 +1733,17 @@ body.modal-open { overflow: visible; }
   z-index: 1;
 }
 
-.hold-stack > .hold-fizz {
+.hold-stack > .hold-fizz,
+.hold-stack > .hold-fizz-portal,
+.hold-fizz-portal > .hold-fizz {
   position: absolute;
   inset: 0;
   z-index: 0;
   pointer-events: none;
 }
 
-.hold-stack .fizz-bit {
+.hold-stack .fizz-bit,
+.hold-fizz-portal .fizz-bit {
   position: absolute;
   width: var(--fs, 4px);
   height: var(--fs, 4px);
@@ -1760,17 +1765,20 @@ body.modal-open { overflow: visible; }
 /* Hover and the nudge shake both mean "look at me" — boil for the moment.
    Calm only: lively rests at this boil already and answers hover its own way,
    below, so it must not pick this rule up (it outranks lively's rest rule). */
-.hold-stack:not(.fizz-lively):has(> .hold-btn:hover:not(.process):not(.loading):not(.success):not(.error)) .fizz-bit {
+.hold-stack:not(.fizz-lively):has(> .hold-btn:hover:not(.process):not(.loading):not(.success):not(.error)) .fizz-bit,
+.hold-fizz-portal:not(.fizz-lively).is-hover:not(.is-process):not(.is-loading):not(.is-success):not(.is-error) .fizz-bit {
   animation: fizz-boil calc(var(--ft, 1.8s) * 0.62) linear calc(var(--fd, 0s) * 0.35) infinite;
 }
 
-.hold-stack.fizz-lively .fizz-bit {
+.hold-stack.fizz-lively .fizz-bit,
+.hold-fizz-portal.fizz-lively .fizz-bit {
   animation: fizz-boil calc(var(--ft, 1.8s) * 0.62) linear calc(var(--fd, 0s) * 0.35) infinite;
 }
 
 /* The hover layer keeps running while hidden. It has to: killing the animation
    would snap the bubbles to their base opacity: 0 and leave nothing to fade. */
-.hold-stack > .hold-fizz-extra {
+.hold-stack > .hold-fizz-extra,
+.hold-fizz-portal > .hold-fizz-extra {
   opacity: 0;
   transition: opacity 0.45s ease;
 }
@@ -1778,29 +1786,69 @@ body.modal-open { overflow: visible; }
 /* The guard list is as much the point as the hover: a held, submitting,
    confirmed or blocked button speaks for itself, so the hover crowd fades away
    and leaves the ring and the burst to read cleanly. */
-.hold-stack.fizz-lively:has(> .hold-btn:hover:not(.process):not(.loading):not(.success):not(.error)) > .hold-fizz-extra {
+.hold-stack.fizz-lively:has(> .hold-btn:hover:not(.process):not(.loading):not(.success):not(.error)) > .hold-fizz-extra,
+.hold-fizz-portal.fizz-lively.is-hover:not(.is-process):not(.is-loading):not(.is-success):not(.is-error) > .hold-fizz-extra {
   opacity: 1;
 }
 
 .hold-stack:has(> .hold-btn.nudge) .fizz-bit,
-.hold-stack:has(> .hold-btn.nudge-soft) .fizz-bit {
+.hold-stack:has(> .hold-btn.nudge-soft) .fizz-bit,
+.hold-fizz-portal.is-nudge .fizz-bit,
+.hold-fizz-portal.is-nudge-soft .fizz-bit {
   animation: fizz-boil calc(var(--ft, 1.8s) * 0.55) linear calc(var(--fd, 0s) * 0.25) infinite;
 }
 
 .hold-stack:has(> .hold-btn.process) .fizz-bit,
-.hold-stack:has(> .hold-btn.loading) .fizz-bit {
+.hold-stack:has(> .hold-btn.loading) .fizz-bit,
+.hold-fizz-portal.is-process .fizz-bit,
+.hold-fizz-portal.is-loading .fizz-bit {
   animation: fizz-boil calc(var(--ft, 1.8s) * 0.45) linear calc(var(--fd, 0s) * 0.2) infinite;
 }
 
-.hold-stack:has(> .hold-btn.success) .fizz-bit {
+.hold-stack:has(> .hold-btn.success) .fizz-bit,
+.hold-fizz-portal.is-success .fizz-bit {
   animation: fizz-burst 1.1s cubic-bezier(0.12, 0.72, 0.24, 1) forwards;
 }
 
-.hold-stack:has(> .hold-btn.error) .fizz-bit {
+.hold-stack:has(> .hold-btn.error) .fizz-bit,
+.hold-fizz-portal.is-error .fizz-bit {
   animation: none;
   opacity: 0;
 }
 
+/* THE PORTAL (studio/hold_button, fizz_portal: true). A button inside an
+   overflow-hidden card has its bubbles cut off at the card's edge, because the
+   layer is absolutely positioned inside the card's clip. With the option set,
+   the button's script moves the layers out of the stack into one fixed box on
+   <body> that tracks the stack's rect, so the bubbles rise past the card's edge
+   instead.
+
+   Out of the stack, the state rules above cannot read the button through
+   :has(), so the script mirrors its state onto the box as .is-process,
+   .is-loading, .is-success, .is-error, .is-nudge, .is-nudge-soft and .is-hover,
+   and copies the stack's --fizz-c-* palette onto it.
+
+   It paints one rung above the highest z-index among the button's ancestors
+   (never below --z-raised), which the script sets inline. A page's own sticky
+   or fixed bar must therefore sit ABOVE --z-raised (--z-sticky is the rung for
+   one); a bar at z 20 or lower, such as Tailwind's sticky z-10 or z-20, ties or
+   loses to the box, and the bubbles paint over it. Painting above the
+   button would put bubbles on its face, so the clip path cuts the button's own
+   rect out of the box: the bubbles show only outside it, as they do in the
+   stack. The 50vmax margin is the room they have to rise. */
+.hold-fizz-portal.is-portaled {
+  position: fixed;
+  top: 0;
+  left: 0;
+  z-index: var(--z-raised, 20);
+  pointer-events: none;
+  clip-path: polygon(evenodd,
+    -50vmax -50vmax, calc(100% + 50vmax) -50vmax,
+    calc(100% + 50vmax) calc(100% + 50vmax), -50vmax calc(100% + 50vmax),
+    -50vmax -50vmax,
+    0 0, 100% 0, 100% 100%, 0 100%, 0 0);
+}
+
 @keyframes hold-tick {
   100% { transform: rotate(-90deg) translate(0, -5px) scale(var(--progress-scale)); }
 }
@@ -1867,7 +1915,9 @@ body.modal-open { overflow: visible; }
    it not to. */
 @media (prefers-reduced-motion: reduce) {
   .hold-stack .fizz-bit,
-  .hold-stack .hold-fizz-extra {
+  .hold-stack .hold-fizz-extra,
+  .hold-fizz-portal .fizz-bit,
+  .hold-fizz-portal .hold-fizz-extra {
     animation: none !important;
     opacity: 0 !important;
     transition: none !important;

data/app/controllers/studio/emails_controller.rb

@@ -7,7 +7,7 @@ module Studio
   # It lists Studio::EmailCatalog's registry — one row per registered email, each
   # showing its live banner and whether that banner is the INHERITED engine
   # default or an APP-OWNED override — and writes an override through the shared
-  # crop modal. Replaces /admin/email_images, which now redirects here.
+  # crop modal.
   #
   # An app whose host never set Studio.s3_bucket_prefix cannot store an override.
   # That is a read-only page, not an error: uploads_available? gates the write

data/app/services/studio/email_catalog.rb

@@ -762,8 +762,8 @@ module Studio
     # THE SAME QUESTION background_url ASKS, so it must ask it the same way.
     # This guard read engine_artwork? while background_url read layered?, and the
     # two answer differently for a host that registers its own background: the
-    # mailer sent the layered banner while /admin/email_images and the detail
-    # page's "Artwork" frame both drew the flat asset. That frame is where
+    # mailer sent the layered banner while the detail page's "Artwork" frame
+    # drew the flat asset. That frame is where
     # "Modify image" lives, and an upload writes the row background_url reads
     # FIRST — so the operator was shown one picture and told it was the one the
     # button would replace.

data/app/services/studio/email_image.rb

@@ -20,8 +20,7 @@ module Studio
   # stays green. A host that did reference it gets a NameError, not a silent
   # wrong answer.
   #
-  # Delete it once no consumer's main names it — the same staged retirement
-  # /admin/email_images is on.
+  # Delete it once no consumer's main names it.
   #
   # Deliberately explicit rather than method_missing: a typo should still raise
   # NoMethodError here, and the delegated surface should be readable as a list.

data/app/views/studio/_hold_button.html.erb

@@ -39,6 +39,13 @@
                          layer, for a button that should not compete.
     fizz_colors        - Up to 12 CSS colors the bubbles wear, as a static
                          array (default: none = the built-in candy palette).
+    fizz_portal        - Lift the bubbles out of the stack into a fixed layer on
+                         <body> that tracks the button (default: false). For a
+                         button inside an overflow-hidden card, whose bubbles
+                         are otherwise cut off at the card's edge: with it set
+                         they rise past the edge. The button, its timers and its
+                         states are the same either way. See THE PORTAL in
+                         engine-motion.css.
     fizz_bind          - Alpine expression bound to the stack's :style, for a
                          palette that changes at runtime (default: none). The
                          turf-monster's board passes "fizzPalette", mapping
@@ -65,6 +72,7 @@
 <% fizz_colors ||= nil %>
 <% fizz_bind ||= nil %>
 <% fizz_level ||= :lively %>
+<% fizz_portal = fizz && local_assigns[:fizz_portal] %>
 <%# Static palette (gallery, or any call site with fixed colors). A runtime
     palette rides fizz_bind instead. %>
 <% fizz_style = Array(fizz_colors).first(Studio::FizzHelper::SLOTS)
@@ -75,11 +83,17 @@
     transform makes it a stacking context), so the bubbles have to be a
     sibling the button paints over — they only show where they escape its
     edges, like carbonation coming off the sides. %>
-<span class="hold-stack<%= " fizz-lively" if fizz_level.to_s == "lively" %>"<% if fizz_bind %> :style="<%= fizz_bind %>"<% end %><% if fizz_style.present? %> style="<%= fizz_style %>"<% end %>>
+<span class="hold-stack<%= " fizz-lively" if fizz_level.to_s == "lively" %>"<% if fizz_bind %> :style="<%= fizz_bind %>"<% end %><% if fizz_style.present? %> style="<%= fizz_style %>"<% end %><% if fizz_portal %> data-fizz-portal x-init="window.studioFizzPortal && window.studioFizzPortal.mount($el)"<% end %>>
   <%# Fizz layer — bubbles that simmer at rest, boil while the button is held,
       and burst outward on success. Purely decorative, so it is aria-hidden and
       pointer-events:none; the table behind it is seeded per hold_id (see Studio::FizzHelper). %>
   <% if fizz %>
+    <%# With fizz_portal the layers ride one wrapper, which the script below
+        moves to <body>. Until it does, the wrapper sits in the stack exactly
+        where the layers would. %>
+    <% if fizz_portal %>
+    <span class="hold-fizz-portal<%= " fizz-lively" if fizz_level.to_s == "lively" %>" aria-hidden="true">
+    <% end %>
     <%= render "studio/fizz_layer", seed: hold_id %>
     <%# Lively's hover doubles the COUNT, not the speed: a second scatter that
         rests invisible, fades in over the gaps in the first, and fades back
@@ -87,6 +101,9 @@
     <% if fizz_level.to_s == "lively" %>
       <%= render "studio/fizz_layer", seed: "#{hold_id}~extra", extra: true %>
     <% end %>
+    <% if fizz_portal %>
+    </span>
+    <% end %>
   <% end %>
 <button class="hold-btn"
         data-hold-id="<%= hold_id %>"
@@ -236,6 +253,151 @@
       Object.keys(nudgeTimers).forEach(function(id) { stopNudgeCycle(id); });
     });
 
+    // ── The fizz portal (fizz_portal: true) ─────────────────────────────
+    // Moves a stack's bubble layers to the document body in one fixed box that tracks the
+    // stack's rect, so a card's overflow clip cannot cut them off. The box
+    // mirrors the button's state classes and the stack's palette, because the
+    // CSS can no longer read either through the stack. engine-motion.css,
+    // THE PORTAL, holds the other half.
+    var PORTAL_STATES = ['process', 'loading', 'success', 'error', 'nudge', 'nudge-soft'];
+    var portals = [];
+
+    // One rung above the highest z-index among the stack's ancestors, so the
+    // bubbles clear the card, the panel or the modal the button sits in,
+    // and never below --z-raised.
+    function portalZ(stack) {
+      var floor = parseInt(getComputedStyle(document.documentElement).getPropertyValue('--z-raised'), 10);
+      var top = isNaN(floor) ? 20 : floor;
+      for (var n = stack.parentElement; n && n !== document.body; n = n.parentElement) {
+        var z = parseInt(getComputedStyle(n).zIndex, 10);
+        if (!isNaN(z) && z + 1 > top) top = z + 1;
+      }
+      return top;
+    }
+
+    function syncPortalState(p) {
+      PORTAL_STATES.forEach(function(s) {
+        p.box.classList.toggle('is-' + s, p.button.classList.contains(s));
+      });
+    }
+
+    function syncPortalPalette(p) {
+      var cs = getComputedStyle(p.stack);
+      for (var i = 1; i <= <%= Studio::FizzHelper::SLOTS %>; i++) {
+        var v = cs.getPropertyValue('--fizz-c-' + i).trim();
+        if (v) p.box.style.setProperty('--fizz-c-' + i, v);
+        else p.box.style.removeProperty('--fizz-c-' + i);
+      }
+    }
+
+    function placePortal(p) {
+      if (!p.stack.isConnected) { unmountPortal(p, false); return; }
+      var r = p.stack.getBoundingClientRect();
+      var shown = p.visible && r.width > 0 && r.height > 0;
+      p.box.style.visibility = shown ? '' : 'hidden';
+      if (shown) {
+        p.box.style.transform = 'translate(' + r.left + 'px, ' + r.top + 'px)';
+        p.box.style.width = r.width + 'px';
+        p.box.style.height = r.height + 'px';
+        if (p.parked) { clearInterval(p.parked); p.parked = null; }
+        p.frame = requestAnimationFrame(function() { placePortal(p); });
+      } else {
+        p.frame = null;
+        // Parked: no frames run, so nothing would notice the stack leaving the
+        // DOM (an x-if, a Turbo stream, a closed modal) until the next page
+        // load. A slow check tears the box and its observers down when it does.
+        if (!p.parked) {
+          p.parked = setInterval(function() {
+            if (!p.stack.isConnected) unmountPortal(p, false);
+          }, 1000);
+        }
+      }
+    }
+
+    function unmountPortal(p, restore) {
+      if (p.frame) cancelAnimationFrame(p.frame);
+      if (p.parked) clearInterval(p.parked);
+      p.observers.forEach(function(o) { o.disconnect(); });
+      p.button.removeEventListener('mouseenter', p.enter);
+      p.button.removeEventListener('mouseleave', p.leave);
+      if (restore && p.stack.isConnected) {
+        // Back where the server rendered it, with nothing the script added,
+        // so a cached snapshot restores to the markup it came from.
+        p.box.className = p.box.className.replace(/\s*\bis-[\w-]+/g, '');
+        p.box.removeAttribute('style');
+        p.box.removeAttribute('data-fizz-portal-for');
+        p.stack.insertBefore(p.box, p.stack.firstChild);
+      } else {
+        p.box.remove();
+      }
+      delete p.stack._fizzPortal;
+      portals = portals.filter(function(q) { return q !== p; });
+    }
+
+    function mountPortal(stack) {
+      if (stack._fizzPortal) return stack._fizzPortal;
+      var box = stack.querySelector(':scope > .hold-fizz-portal');
+      var button = stack.querySelector(':scope > .hold-btn');
+      if (!box || !button) return null;
+
+      var p = { stack: stack, box: box, button: button, visible: true, frame: null, parked: null, observers: [] };
+      stack._fizzPortal = p;
+      portals.push(p);
+
+      document.body.appendChild(box);
+      box.classList.add('is-portaled');
+      box.setAttribute('data-fizz-portal-for', button.dataset.holdId || 'hold');
+      box.style.zIndex = portalZ(stack);
+      syncPortalState(p);
+      syncPortalPalette(p);
+
+      p.enter = function() { box.classList.add('is-hover'); };
+      p.leave = function() { box.classList.remove('is-hover'); };
+      button.addEventListener('mouseenter', p.enter);
+      button.addEventListener('mouseleave', p.leave);
+
+      var states = new MutationObserver(function() { syncPortalState(p); });
+      states.observe(button, { attributes: true, attributeFilter: ['class'] });
+      var palette = new MutationObserver(function() { syncPortalPalette(p); });
+      palette.observe(stack, { attributes: true, attributeFilter: ['style'] });
+      p.observers.push(states, palette);
+
+      // Track the rect every frame while the stack is on screen: a visible
+      // portal reads one rect per frame. Park the box while the stack is not
+      // on screen (scrolled away, inside a closed panel, or clipped out of a
+      // scroll container): no frames, only a once-a-second check that the
+      // stack is still in the DOM.
+      if ('IntersectionObserver' in window) {
+        var seen = new IntersectionObserver(function(entries) {
+          p.visible = entries[entries.length - 1].isIntersecting;
+          if (!p.stack.isConnected) { unmountPortal(p, false); return; }
+          if (p.visible && !p.frame) placePortal(p);
+          if (!p.visible) placePortal(p);
+        });
+        seen.observe(stack);
+        p.observers.push(seen);
+      }
+      placePortal(p);
+      return p;
+    }
+
+    function mountAllPortals() {
+      portals.slice().forEach(function(p) { if (!p.stack.isConnected) unmountPortal(p, false); });
+      document.querySelectorAll('.hold-stack[data-fizz-portal]').forEach(mountPortal);
+    }
+
+    window.studioFizzPortal = {
+      mount: mountPortal,
+      mountAll: mountAllPortals,
+      count: function() { return portals.length; }
+    };
+    document.addEventListener('turbo:load', mountAllPortals);
+    document.addEventListener('turbo:before-cache', function() {
+      portals.slice().forEach(function(p) { unmountPortal(p, true); });
+    });
+    if (document.readyState === 'loading') document.addEventListener('DOMContentLoaded', mountAllPortals);
+    else mountAllPortals();
+
     window.holdBtnStart = function(el) {
       var holdId = el.dataset.holdId || 'hold';
       var scope = el.closest('[x-data]');

data/app/views/studio/public_users/show.html.erb

@@ -19,7 +19,7 @@
       <%= render "components/avatar", user: @public_user, size: "xl", alt: username %>
     <% else %>
       <%# Drawn from the username alone: a host's avatar_initials / avatar_color may read the name or email (cyvasse's do). %>
-      <% colors = Studio::UserProfile::AVATAR_COLORS %>
+      <% colors = Studio::AVATAR_COLORS %>
       <div class="w-28 h-28 text-4xl rounded-full flex items-center justify-center font-bold text-white"
            style="background-color: <%= colors[Digest::MD5.hexdigest(username).hex % colors.size] %>"><%= username[0].upcase %></div>
     <% end %>

data/app/views/style/_tricks.html.erb

@@ -344,6 +344,8 @@
         brand — and every color also reads a <code class="font-mono text-2xs">--hold-*</code>
         input, so one instance can be re-themed from any ancestor.
         <code class="font-mono text-2xs">prefers-reduced-motion</code> switches the bubbles off.
+        Inside a card that clips, pass <code class="font-mono text-2xs">fizz_portal: true</code>
+        and the bubbles rise past the card&rsquo;s edge instead of stopping at it.
       </p>
     </div>
     <div class="grid gap-4 sm:grid-cols-2 lg:grid-cols-3">
@@ -360,12 +362,14 @@
         </div>
       <% end %>
 
-      <%# 2. The button itself, live: press and hold for two seconds. %>
+      <%# 2. The button itself, live: press and hold for two seconds. The card
+          clips, so this one sets fizz_portal and its bubbles rise past the
+          card's edge. %>
       <%= render layout: "style/specimen",
             locals: { klass: ".hold-btn  (studio/hold_button)",
-                      usage: %(render "studio/hold_button", hold_id: "confirm", duration: 2000) } do %>
+                      usage: %(render "studio/hold_button", hold_id: "confirm", duration: 2000, fizz_portal: true) } do %>
         <div class="w-full max-w-xs" x-data="{ submitting: false }">
-          <%= render "studio/hold_button", hold_id: "style-hold", duration: 2000,
+          <%= render "studio/hold_button", hold_id: "style-hold", duration: 2000, fizz_portal: true,
                 default_text: "Hold to Confirm", hold_text: "Almost there…", success_text: "Confirmed!" %>
           <button type="button" class="btn btn-neutral btn-sm mt-3 mx-auto block"
                   @click="document.querySelector('.hold-btn[data-hold-id=style-hold]').classList.remove('process','success','error','loading')">Reset</button>

data/app/views/style/index.html.erb

@@ -65,9 +65,11 @@
 
   <%# Section nav — sticky under the host navbar (--nav-h, 0 fallback). A pill per
       section; the row scrolls horizontally on narrow screens, its edges softened
-      by the .fade-edge-x primitive. Order leads with Theme (the color foundation). %>
-  <nav class="sticky z-20 -mx-4 px-4 py-3 bg-surface border-y border-subtle"
-       style="top: var(--nav-h, 0px)" aria-label="Style guide sections">
+      by the .fade-edge-x primitive. Order leads with Theme (the color foundation).
+      It sits at --z-sticky, above --z-raised, so the live hold button's portal
+      bubbles scroll under it rather than over it. %>
+  <nav class="sticky -mx-4 px-4 py-3 bg-surface border-y border-subtle"
+       style="top: var(--nav-h, 0px); z-index: var(--z-sticky, 30)" aria-label="Style guide sections">
     <div class="fade-edge-x overflow-x-auto">
       <div class="flex items-center gap-2 min-w-max">
         <% sections.each do |anchor, label| %>

data/lib/studio/engine.rb

@@ -113,8 +113,8 @@ module Studio
     # skip :require_authentication, its mailers and jobs subclass ActionMailer
     # and ActiveJob, and the two concerns roots (app/controllers/concerns,
     # app/models/concerns) are roots of their OWN to Zeitwerk: excluding
-    # app/models does not exclude app/models/concerns, and Sluggable and
-    # Studio::UserProfile sit there. They stay lazily loadable, and nothing in a
+    # app/models does not exclude app/models/concerns, and Sluggable sits
+    # there. They stay lazily loadable, and nothing in a
     # host that draws no Studio.routes asks for them.
     #
     # Read off the engine's own eager-load paths rather than listed, so a root

data/lib/studio/version.rb

@@ -1,3 +1,3 @@
 module Studio
-  VERSION = "0.89.0"
+  VERSION = "0.91.0"
 end

data/lib/studio.rb

@@ -839,6 +839,10 @@ module Studio
   # Studio::ProfilesController to get it would couple the two for no reason.
   FIRST_NAME_MAX_LENGTH = 40
 
+  # The house palette for initial-circle backgrounds. /u/:username hashes the
+  # username into it, so one person draws the same circle on every render.
+  AVATAR_COLORS = %w[#EF4444 #F97316 #EAB308 #22C55E #06B6D4 #3B82F6 #8B5CF6 #EC4899].freeze
+
   # How long a WHOLE typed answer may be — one string holding a full name, which
   # the onboarding step stores as users.name and SPLITS into the two halves
   # above (Studio::NameParts).
@@ -914,14 +918,6 @@ module Studio
     true
   end
 
-  # Optional admin Act As / impersonation session conventions. Consumers that
-  # include Studio::Impersonation get current_user layered over true_user with
-  # these session keys, but still own authorization, audit logging, and routes.
-  mattr_accessor :impersonation_target_session_key, default: :impersonated_user_id
-  mattr_accessor :impersonation_actor_session_key,  default: :true_admin_id
-  mattr_accessor :impersonation_started_at_session_key, default: :impersonation_started_at
-  mattr_accessor :impersonation_max_minutes, default: 30
-
   # Cap for the host app's local (development + test) log file, in bytes.
   # nil means "use the engine's defaults" — Studio::Engine::DEVELOPMENT_LOG_MAX_BYTES
   # and ::TEST_LOG_MAX_BYTES. An Integer sets your own cap; `false` opts out and
@@ -1530,9 +1526,6 @@ module Studio
       # stores this app's own override; destroy drops it back to the inherited
       # default. Surfaced from each app's admin sidebar.
       #
-      # /admin/email_images redirects here but KEEPS its admin_email_images_path
-      # helper, so a shipped host sidebar link on the old helper still resolves
-      # (same treatment as /admin/design_system -> /admin/style).
       # OPT-IN, and it has to be. turf-monster ALREADY owns /admin/emails —
       # `namespace :admin { get "emails", as: :emails }` (its EmailCatalog
       # manager) — which claims the SAME path and the SAME helper names,
@@ -1592,17 +1585,6 @@ module Studio
              as: :onboarding_skip_first_name
       end
 
-      # DEPRECATED, kept for ONE release. Not a redirect: consumer-ci.yml runs
-      # each consumer's DEFAULT-BRANCH suite against this engine, and both
-      # mcritchie-studio and turf-monster have tests on `main` that GET this page
-      # and PATCH through admin_email_image_path. Redirecting (or deleting) here
-      # reddens their lanes the moment the PR opens, and no change inside the
-      # engine PR can fix it. Each app's adoption task moves its link + tests; a
-      # later engine minor deletes these two routes with the controller and view.
-      get   "admin/email_images",          to: "studio/email_images#index",  as: :admin_email_images
-      patch "admin/email_images/:variant", to: "studio/email_images#update", as: :admin_email_image,
-            constraints: { variant: /[a-z_]+/ }
-
       # Surveys (docs/SURVEYS.md). Both halves OPT-IN — see
       # Studio.draw_survey_routes and Studio.draw_admin_survey_routes.
       if Studio.draw_survey_routes

data/studio-engine.gemspec

@@ -40,7 +40,7 @@ Gem::Specification.new do |spec|
   spec.add_dependency "mini_magick", "~> 5.0"
   spec.add_dependency "resend", "~> 1.1"
   # Realtime: the redis cable/cache/Sidekiq adapter (Studio::Redis) + Turbo Streams
-  # broadcasting (Studio::Broadcastable). `redis` is the dependency whose ABSENCE
+  # broadcasting (Studio::Cable). `redis` is the dependency whose ABSENCE
   # 500'd a host app's task board — declaring it here makes that impossible to repeat.
   #
   # The `< 6` ceiling is ActionCable's, not ours. Its redis pubsub adapter

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: studio-engine
 version: !ruby/object:Gem::Version
-  version: 0.89.0
+  version: 0.91.0
 platform: ruby
 authors:
 - Alex McRitchie
@@ -323,7 +323,6 @@ files:
 - app/controllers/concerns/studio/board/reorderable.rb
 - app/controllers/concerns/studio/error_handling.rb
 - app/controllers/concerns/studio/geo_detection.rb
-- app/controllers/concerns/studio/impersonation.rb
 - app/controllers/concerns/studio/link_consumption.rb
 - app/controllers/concerns/studio/link_preview_bots.rb
 - app/controllers/concerns/studio/magic_link_issuing.rb
@@ -338,7 +337,6 @@ files:
 - app/controllers/solana_sessions_controller.rb
 - app/controllers/studio/admin_surveys_controller.rb
 - app/controllers/studio/bookings_controller.rb
-- app/controllers/studio/email_images_controller.rb
 - app/controllers/studio/emails_controller.rb
 - app/controllers/studio/geo_settings_controller.rb
 - app/controllers/studio/knowledge_docs_controller.rb
@@ -373,8 +371,6 @@ files:
 - app/mailers/user_mailer.rb
 - app/models/concerns/sluggable.rb
 - app/models/concerns/studio/board/rankable.rb
-- app/models/concerns/studio/broadcastable.rb
-- app/models/concerns/studio/user_profile.rb
 - app/models/current.rb
 - app/models/error_log.rb
 - app/models/image_cache.rb
@@ -399,18 +395,15 @@ files:
 - app/views/components/_avatar.html.erb
 - app/views/components/_avatar_cropper.html.erb
 - app/views/components/_badge.html.erb
-- app/views/components/_card.html.erb
 - app/views/components/_copy_button.html.erb
 - app/views/components/_emoji_swap.html.erb
 - app/views/components/_empty_state.html.erb
 - app/views/components/_geo_badge.html.erb
 - app/views/components/_geo_signpost.html.erb
 - app/views/components/_google_logo.html.erb
-- app/views/components/_input.html.erb
 - app/views/components/_json_debug.html.erb
 - app/views/components/_link_sidebar.html.erb
 - app/views/components/_link_sidebar_trigger.html.erb
-- app/views/components/_progress_bar.html.erb
 - app/views/components/_sidebar_panel.html.erb
 - app/views/components/_theme_toggle.html.erb
 - app/views/components/_theme_toggle_morph.html.erb
@@ -458,7 +451,6 @@ files:
 - app/views/studio/booking/_frame.html.erb
 - app/views/studio/booking/_popup.html.erb
 - app/views/studio/bookings/show.html.erb
-- app/views/studio/email_images/index.html.erb
 - app/views/studio/emails/_banner_editor.html.erb
 - app/views/studio/emails/_banner_preview.html.erb
 - app/views/studio/emails/_banner_scale.html.erb

data/app/controllers/concerns/studio/impersonation.rb

@@ -1,90 +0,0 @@
-require "time"
-
-module Studio
-  module Impersonation
-    extend ActiveSupport::Concern
-
-    included do
-      if respond_to?(:helper_method)
-        helper_method :true_user, :impersonated_user, :impersonating?, :impersonation_started_at
-      end
-    end
-
-    private
-
-    # The real session owner. While acting as another user, this remains the
-    # admin/operator account whose session token should be verified.
-    def true_user
-      return @true_user if defined?(@true_user)
-
-      @true_user = User.find_by(id: session[Studio.session_key])
-    end
-
-    # The currently visible user. Consumers with extra wallet or privilege state
-    # can override this and still call true_user/impersonating? from the concern.
-    def current_user
-      return @current_user if defined?(@current_user)
-
-      @current_user = impersonating? ? impersonated_user : true_user
-    end
-
-    def impersonated_user
-      return @impersonated_user if defined?(@impersonated_user)
-
-      @impersonated_user = User.find_by(id: session[Studio.impersonation_target_session_key])
-    end
-
-    def impersonating?
-      return @impersonating if defined?(@impersonating)
-
-      @impersonating = compute_impersonating?
-    end
-
-    def start_impersonation_session(target_user, actor: true_user)
-      session[Studio.impersonation_actor_session_key] = actor.id
-      session[Studio.impersonation_target_session_key] = target_user.id
-      session[Studio.impersonation_started_at_session_key] = Time.current.iso8601
-      reset_impersonation_memoization
-    end
-
-    def clear_impersonation_session
-      session.delete(Studio.impersonation_actor_session_key)
-      session.delete(Studio.impersonation_target_session_key)
-      session.delete(Studio.impersonation_started_at_session_key)
-      reset_impersonation_memoization
-    end
-
-    def impersonation_started_at
-      raw = session[Studio.impersonation_started_at_session_key]
-      return nil if raw.blank?
-
-      return raw if raw.is_a?(Time)
-
-      zone = Time.zone if Time.respond_to?(:zone)
-      zone ? zone.parse(raw.to_s) : Time.parse(raw.to_s)
-    rescue ArgumentError, TypeError
-      nil
-    end
-
-    def compute_impersonating?
-      return false if session[Studio.impersonation_target_session_key].blank?
-      return false unless true_user&.respond_to?(:admin?) && true_user.admin?
-      return false unless impersonation_started_at
-      return false if impersonation_started_at < Studio.impersonation_max_minutes.to_i.minutes.ago
-
-      target = impersonated_user
-      target.present? &&
-        (!target.respond_to?(:admin?) || !target.admin?) &&
-        target.id != true_user.id
-    rescue StandardError
-      false
-    end
-
-    def reset_impersonation_memoization
-      remove_instance_variable(:@current_user) if defined?(@current_user)
-      remove_instance_variable(:@true_user) if defined?(@true_user)
-      remove_instance_variable(:@impersonated_user) if defined?(@impersonated_user)
-      remove_instance_variable(:@impersonating) if defined?(@impersonating)
-    end
-  end
-end

data/app/controllers/studio/email_images_controller.rb

@@ -1,76 +0,0 @@
-module Studio
-  # DEPRECATED — superseded by Studio::EmailsController (/admin/emails), which
-  # shows every registered email with its live image, says whether that image is
-  # the inherited default or app-owned, and uploads through the crop modal.
-  #
-  # Kept alive for ONE release on purpose, not by neglect. consumer-ci.yml checks
-  # out each consumer repo with no `ref:` — i.e. its DEFAULT BRANCH — and runs
-  # that suite against the engine PR. mcritchie-studio and turf-monster both have
-  # tests on `main` that drive this page and its admin_email_image_path helper,
-  # so deleting it here would redden their lanes from the moment the PR opens,
-  # and nothing inside the engine PR could fix it: the consumer PRs would have to
-  # travel accepted -> release -> main in BOTH apps before this could go green.
-  #
-  # So the retirement is staged: this release adds /admin/emails and leaves this
-  # page working; each app's adoption task moves its link and its tests; a later
-  # engine minor deletes this file, its view, and its two routes once no
-  # consumer's main references them.
-  #
-  # It is not frozen in its broken state, though — see #index.
-  class EmailImagesController < ApplicationController
-    before_action :require_admin
-
-    MAX_BYTES = 8.megabytes
-
-    def index
-      @variants = Studio::EmailCatalog.variants
-    end
-
-    # The canonical page this one is being retired in favour of, or nil when this
-    # app has not drawn it. Rendered as a banner at the top of the old view so an
-    # admin who lands here by a stale link is walked forward.
-    #
-    # The nil case is REAL, not defensive padding: /admin/emails is opt-in
-    # (Studio.draw_admin_emails_routes, default off because turf-monster owns the
-    # name), so on any app that has not opted in the helper does not exist and a
-    # bare call raises NameError — which 500s this page. Consumer CI caught
-    # exactly that on mcritchie-studio.
-    #
-    # Asks the ROUTER rather than the config flag: the flag is read at route-draw
-    # time, so a host that flips it afterwards would still have no route, and the
-    # router is the thing that actually knows.
-    def successor_path
-      return nil unless Rails.application.routes.named_routes.key?(:admin_emails)
-
-      admin_emails_path
-    end
-    helper_method :successor_path
-
-    # PATCH /admin/email_images/:variant — upload/replace a banner.
-    def update
-      variant = params[:variant].to_s
-      return head :not_found unless Studio::EmailCatalog.known?(variant)
-
-      file = params[:image]
-      unless valid_image?(file)
-        message = file.blank? ? "Choose an image to upload." : "Use a PNG, JPG, or WebP under 8 MB."
-        return redirect_to admin_email_images_path, alert: message, status: :see_other
-      end
-
-      rescue_and_log do
-        Studio::EmailCatalog.store(variant, io: file, content_type: file.content_type)
-        redirect_to admin_email_images_path, notice: "#{Studio::EmailCatalog.label(variant)} banner updated."
-      end
-    rescue StandardError
-      redirect_to admin_email_images_path, alert: "Couldn't save the image. Please try again.", status: :see_other
-    end
-
-    private
-
-    def valid_image?(file)
-      file.respond_to?(:content_type) &&
-        file.content_type.to_s.start_with?("image/") &&
-        file.respond_to?(:size) && file.size.to_i.positive? && file.size <= MAX_BYTES
-    end
-  end
-end

data/app/models/concerns/studio/broadcastable.rb

@@ -1,40 +0,0 @@
-# frozen_string_literal: true
-
-module Studio
-  # Mixin for ActiveRecord models that broadcast Turbo Streams. It wraps
-  # turbo-rails' broadcast_*_to methods in Studio::Cable.safe_broadcast, so a cable
-  # failure (a Redis hiccup, a missing/misconfigured adapter) can NEVER break the
-  # model save / after_commit that triggered the broadcast — the SEV-1 guard, in
-  # one place. The host model already has the raw broadcast_*_to methods (turbo-rails
-  # includes Turbo::Broadcastable into ActiveRecord::Base); these are the SAFE
-  # variants every app should broadcast through.
-  #
-  #   class Task < ApplicationRecord
-  #     include Studio::Broadcastable
-  #     after_create_commit { safe_broadcast_replace_to [:board], target: "card_#{id}",
-  #                                                       partial: "tasks/card", locals: { task: self } }
-  #   end
-  module Broadcastable
-    extend ActiveSupport::Concern
-
-    def safe_broadcast_replace_to(*args, **kwargs, &block)
-      Studio::Cable.safe_broadcast { broadcast_replace_to(*args, **kwargs, &block) }
-    end
-
-    def safe_broadcast_update_to(*args, **kwargs, &block)
-      Studio::Cable.safe_broadcast { broadcast_update_to(*args, **kwargs, &block) }
-    end
-
-    def safe_broadcast_append_to(*args, **kwargs, &block)
-      Studio::Cable.safe_broadcast { broadcast_append_to(*args, **kwargs, &block) }
-    end
-
-    def safe_broadcast_prepend_to(*args, **kwargs, &block)
-      Studio::Cable.safe_broadcast { broadcast_prepend_to(*args, **kwargs, &block) }
-    end
-
-    def safe_broadcast_remove_to(*args, **kwargs, &block)
-      Studio::Cable.safe_broadcast { broadcast_remove_to(*args, **kwargs, &block) }
-    end
-  end
-end

data/app/models/concerns/studio/user_profile.rb

@@ -1,111 +0,0 @@
-# frozen_string_literal: true
-
-require "digest"
-
-module Studio
-  # The four things every Studio app's User has had to define for itself: how to
-  # name a person on screen, and how to draw them when they have no picture.
-  #
-  # WHY THIS EXISTS. The engine's own components/_avatar partial calls
-  # `display_name`, `avatar_initials` and `avatar_color` — and the engine has
-  # never provided any of them. Every consumer wrote its own; mcritchie-industries'
-  # user.rb even carries a comment explaining that it must, because the engine's
-  # nav renders the partial. Three copies, and by 2026-08-14 they had drifted:
-  #
-  #   mcritchie-studio      name → email prefix (capitalized) → wallet → "anon"
-  #   mcritchie-industries  name → email prefix (raw)                  → "User"
-  #   turf-monster          username → name → email prefix (cap) → wallet → "anon"
-  #
-  # Same intent, three answers, and two different words for the same empty state.
-  # That is the drift a concern removes.
-  #
-  # ON THE MERGED CHAIN. It is turf-monster's — the richest of the three — with
-  # `first_name` folded in after `name`, because /profile now lets people set that
-  # field and a name someone just typed should be the name they see. Apps missing
-  # a link in the chain simply skip it; the chain is respond_to?-guarded end to
-  # end, so mcritchie-industries' eight-column users table walks it without
-  # raising. One consequence worth stating rather than burying: an MI user with no
-  # name now falls back to "anon" instead of "User", and an email-derived name is
-  # capitalized. That is MI adopting the house standard, and its adoption task
-  # owns the change.
-  #
-  # EVERY METHOD IS OVERRIDABLE. These are plain instance methods from an included
-  # module, so a host that defines its own `display_name` in the class body wins
-  # outright. Standardizing the default is the goal; forbidding an app from having
-  # an opinion is not.
-  module UserProfile
-    extend ActiveSupport::Concern
-
-    # The house palette for initial-circle backgrounds. Identical in all three
-    # apps today, which is the clearest possible signal it belonged here.
-    AVATAR_COLORS = %w[#EF4444 #F97316 #EAB308 #22C55E #06B6D4 #3B82F6 #8B5CF6 #EC4899].freeze
-
-    # What to call this person on screen.
-    def display_name
-      studio_profile_username.presence ||
-        studio_profile_attr(:name).presence ||
-        studio_profile_attr(:first_name).presence ||
-        studio_profile_email_prefix.presence ||
-        studio_profile_wallet.presence ||
-        "anon"
-    end
-
-    # One character for the initials circle. Deliberately NOT derived from
-    # display_name: that chain ends in a wallet address or the word "anon", and
-    # "a" for every anonymous account is worse than a neutral mark.
-    def avatar_initials
-      source = studio_profile_username.presence ||
-               studio_profile_attr(:name).presence ||
-               studio_profile_attr(:first_name).presence ||
-               studio_profile_email_prefix.presence
-
-      # `source[0]`, not ActiveSupport's `String#first`: this module is included
-      # into a host model, and nothing here should depend on which core_ext that
-      # host happens to have loaded. Plain Ruby costs nothing and cannot vanish.
-      source.presence.to_s[0]&.upcase || "?"
-    end
-
-    # A stable colour for this account — same person, same circle, every render.
-    # Hashed rather than random for exactly that reason, and keyed off identity
-    # fields so it survives a display-name change.
-    def avatar_color
-      key = studio_profile_username.presence ||
-            studio_profile_attr(:name).presence ||
-            studio_profile_attr(:email).presence ||
-            id.to_s
-
-      AVATAR_COLORS[Digest::MD5.hexdigest(key.to_s).hex % AVATAR_COLORS.size]
-    end
-
-    private
-
-    # Read an attribute only if this host's model actually has it. The whole
-    # tolerance of the chain lives in this one method.
-    def studio_profile_attr(attribute)
-      return nil unless respond_to?(attribute)
-
-      public_send(attribute)
-    end
-
-    # `username` is turf-monster's on-chain handle and does not exist in the hub
-    # apps. It leads the chain where it exists because it is what that app's
-    # people call each other.
-    def studio_profile_username
-      studio_profile_attr(:username)
-    end
-
-    def studio_profile_email_prefix
-      email = studio_profile_attr(:email)
-      return nil if email.blank?
-
-      email.to_s.split("@").first.to_s.capitalize
-    end
-
-    # Defers to the host's own truncation rather than reformatting an address
-    # here — mcritchie-studio and turf-monster both define `truncated_solana`,
-    # and turf's has to pick between a web2 and a web3 address to do it.
-    def studio_profile_wallet
-      studio_profile_attr(:truncated_solana)
-    end
-  end
-end

data/app/views/components/_card.html.erb

@@ -1,4 +0,0 @@
-<%# locals: (padding: "p-6") %>
-<div class="card <%= padding %>">
-  <%= yield %>
-</div>

data/app/views/components/_input.html.erb

@@ -1,13 +0,0 @@
-<%# locals: (form:, field:, label: nil, type: "text", placeholder: nil, rows: nil) %>
-<div class="mb-5">
-  <% if label.present? %>
-    <label class="block text-sm text-secondary mb-2 font-medium"><%= label %></label>
-  <% end %>
-  <% if type.to_s == "textarea" %>
-    <%= form.text_area field, rows: rows || 4, class: "input-field", placeholder: placeholder %>
-  <% elsif type.to_s == "password" %>
-    <%= form.password_field field, class: "input-field", placeholder: placeholder %>
-  <% else %>
-    <%= form.text_field field, class: "input-field", placeholder: placeholder %>
-  <% end %>
-</div>

data/app/views/components/_progress_bar.html.erb

@@ -1,9 +0,0 @@
-<%# locals: (percent:, height: "h-3", color: "var(--color-cta)", label: nil, animated: false) %>
-<div class="w-full <%= height %> rounded-full bg-surface-alt overflow-hidden">
-  <div class="h-full rounded-full<%= ' transition-all duration-500 ease-out' if animated %>"
-       style="width: <%= [percent.to_f, 100].min %>%; background-color: <%= color %>">
-  </div>
-</div>
-<% if label %>
-  <p class="text-xs text-muted mt-1"><%= label %></p>
-<% end %>

data/app/views/studio/email_images/index.html.erb

@@ -1,74 +0,0 @@
-<%# DEPRECATED page — superseded by /admin/emails (studio/emails/index).
-    Kept for one release so consumer suites on their default branch keep passing;
-    see Studio::EmailImagesController for the full staging note. %>
-<% content_for(:title) { "Email images" } %>
-<div class="max-w-2xl mx-auto px-4 py-8">
-  <header class="mb-6">
-    <h1 class="text-2xl font-bold">Email images</h1>
-    <p class="text-sm text-muted mt-1">
-      The banner shown at the top of branded transactional emails. Recommended
-      width 600px (it's displayed full-bleed at the top of the email card).
-    </p>
-  </header>
-
-  <%# Only when this app actually DREW /admin/emails — it is opt-in, and pointing
-      at a route that does not exist raises NameError and 500s this page. %>
-  <% if successor_path %>
-    <div class="mb-6 rounded-xl border border-subtle bg-inset px-4 py-3">
-      <p class="text-sm font-semibold text-heading">There's a better page now</p>
-      <p class="text-sm text-body mt-1">
-        <%= link_to "Emails", successor_path, class: "underline underline-offset-2" %>
-        lists every email this app sends with its live banner, says whether that
-        banner is the shared default or this app's own, and crops on upload.
-        This page is going away.
-      </p>
-    </div>
-  <% end %>
-
-  <% flash.each do |type, message| %>
-    <div class="mb-4 rounded-lg px-4 py-3 text-sm bg-surface border <%= type.to_s == "alert" ? "border-danger/30 text-danger-ink" : "border-success/30 text-success-ink" %>">
-      <%= message %>
-    </div>
-  <% end %>
-
-  <div class="space-y-6">
-    <% @variants.each do |variant, label| %>
-      <%# preview_url, not url: this page's ORIGINAL BUG was reading only the S3
-          override, so it announced "No image yet" for an email that was visibly
-          sending a banner from a committed repo asset. Even on its way out it
-          should tell the truth about what ships. %>
-      <% current_url = Studio::EmailCatalog.preview_url(variant) %>
-      <%# NOT `== :default` — that value split into :app_asset / :engine_default.
-          Comparing against a value nothing returns would silently never show
-          this note again. Anything that is not an upload is still inherited
-          from a file, which is all this retiring page needs to say. %>
-      <% inherited = current_url.present? && Studio::EmailCatalog.source(variant) != :app %>
-      <section class="rounded-xl border border-subtle p-5">
-        <h2 class="font-semibold mb-3"><%= label %></h2>
-
-        <div class="rounded-lg overflow-hidden border border-subtle mb-3" style="aspect-ratio: 600 / 240; background: linear-gradient(135deg, var(--color-primary-700), var(--color-primary-900));">
-          <% if current_url %>
-            <%= image_tag current_url, class: "w-full h-full object-cover", alt: "#{label} email banner" %>
-          <% else %>
-            <div class="w-full h-full flex items-center justify-center text-xs text-white/80 text-center px-4">
-              No image yet — emails send without a banner until you upload one.
-            </div>
-          <% end %>
-        </div>
-
-        <% if inherited %>
-          <p class="text-xs text-muted mb-3">
-            This is the shared default that ships with the engine. Uploading here
-            makes the image this app's own.
-          </p>
-        <% end %>
-
-        <%= form_with url: admin_email_image_path(variant), method: :patch, html: { multipart: true }, class: "flex flex-wrap items-center gap-3" do %>
-          <%= file_field_tag :image, accept: "image/png,image/jpeg,image/webp",
-                class: "text-sm file:mr-3 file:rounded-md file:border-0 file:bg-primary file:px-3 file:py-1.5 file:text-white file:cursor-pointer" %>
-          <%= submit_tag(current_url ? "Replace image" : "Upload image", class: "btn btn-primary btn-sm") %>
-        <% end %>
-      </section>
-    <% end %>
-  </div>
-</div>