@goodfellow-cms/admin 0.6.0 → 0.7.0

package/dist/{entry-values-BrY3L0Ai.js → entry-values-DO01xZ9L.js}

@@ -1,5 +1,5 @@
 import { n as CONNECT_MESSAGE, r as createChannel } from "./plugin-protocol-DkvBDqsF.js";
-import { APP_API_HEADER, COLOR_SCHEME_ATTRIBUTE, ConflictError, DraftError, FOOTER_FILE, GOODFELLOW_REGISTRY, HEADER_FILE, MAX_UPLOAD_BYTES, MEDIA_DIR, MENUS_FILE, PluginTaskError, REDIRECTS_FILE, SHADCN_NAMESPACE, SHADCN_REGISTRY, SITE_FILE, ScheduledBuildsError, SignInError, TASK_INPUT_LIMIT, addressPatternFor, adminOrigin, allPages, checkEntrySlug, checkPageAddress, checkSite, codeFileChanges, collectionFileChange, collectionFileChange as collectionFileChange$1, customCssFileChange, deleteCollectionChanges, describedConfig, duplicatePageData, entryFileChange, entryFileChange as entryFileChange$1, entryLanguage, entryPathIn, entryTitle, escapeStyleText, extensionOf, fileName, goodfellowRegistryUrl, googleFontsUrl, isDemoStore, isStorableAddress, keptDrafts, layoutFileChange, loadSiteContent, markdownToHtml, mediaFileChange, mediaKind, mediaKind as mediaKind$1, mediaStorageFileChange, memoryKeeper, menusFileChange, moveEntryChanges, movePageChanges, newCollectionSettings, newDraftName, newPageData, newTaskRequestId, openTaskAnswer, outsideHost, pageFileChange, pageTitle as pageTitle$1, pluginFrameUrl, pluginMayList, pluginMayUse, publishProblems, redirectsFileChange, relinkSite, relinkedChanges, scheduleOf, scheduleProblem, scheduleState, siteLanguages, siteSettingsFileChange, slugify, storedCss, storedData, storedEntryFields, storedMediaUrl, taskKeys, themeToCss, todayIn, trimChars, uniqueName, upcomingChanges, updateSettingsFileChange, uploadName, wallClock, withStoredFiles, withoutCredits, writeChanges } from "@goodfellow-cms/core";
+import { APP_API_HEADER, COLOR_SCHEME_ATTRIBUTE, ConflictError, DraftError, FOOTER_FILE, GOODFELLOW_REGISTRY, HEADER_FILE, MAX_UPLOAD_BYTES, MEDIA_DIR, MENUS_FILE, PluginTaskError, REDIRECTS_FILE, SHADCN_NAMESPACE, SHADCN_REGISTRY, SITE_FILE, ScheduledBuildsError, SignInError, TASK_INPUT_LIMIT, addressPatternFor, adminOrigin, allPages, checkEntrySlug, checkPageAddress, checkSite, codeFileChanges, collectionFileChange, collectionFileChange as collectionFileChange$1, customCssFileChange, deleteCollectionChanges, describedConfig, duplicatePageData, entryFileChange, entryFileChange as entryFileChange$1, entryLanguage, entryPathIn, entryTitle, escapeStyleText, extensionOf, fileName, goodfellowRegistryUrl, googleFontsUrl, isDemoStore, isStorableAddress, keptDrafts, layoutFileChange, limitsFor, loadSiteContent, markdownToHtml, mayChangeEntry, mayChangeLayout, mayChangeMedia, mayChangeMenus, mayChangePage, mediaFileChange, mediaKind, mediaKind as mediaKind$1, mediaStorageFileChange, memoryKeeper, menusFileChange, moveEntryChanges, movePageChanges, newCollectionSettings, newDraftName, newPageData, newTaskRequestId, openTaskAnswer, outsideHost, outsideLimits, pageFileChange, pageTitle as pageTitle$1, pluginFrameUrl, pluginMayList, pluginMayUse, publishProblems, redirectsFileChange, relinkSite, relinkedChanges, reviewersFor, scheduleOf, scheduleProblem, scheduleState, siteLanguages, siteSettingsFileChange, slugify, storedCss, storedData, storedEntryFields, storedMediaUrl, taskKeys, themeToCss, todayIn, trimChars, uniqueName, upcomingChanges, updateSettingsFileChange, uploadName, wallClock, withStoredFiles, withoutCredits, writeChanges } from "@goodfellow-cms/core";
 import { createContext, useCallback, useContext, useEffect, useId, useLayoutEffect, useMemo, useRef, useState, useSyncExternalStore } from "react";
 import TurndownService from "turndown";
 import { gfm } from "turndown-plugin-gfm";
@@ -493,7 +493,15 @@ const defaultStrings = {
 	"editor.failed": "The editor stopped working. Reload the page to start it again.",
 	"editor.frame": "Editing {title}",
 	"editor.choose": "Editor",
+	"editor.blockSearch": "Search blocks",
+	"editor.blockSearchNone": "No blocks match. Try another word, such as \"picture\" or \"columns\".",
+	"editor.blockSearchFound": "Blocks found",
 	"editor.standard": "Standard editor",
+	"editor.plugin.switchLoses": "Some of what you changed in {editor} can't be kept in the other editor, so switching now leaves behind everything you changed since you opened {editor}. Switch anyway?\n\n{problems}",
+	"editor.plugin.pageSettings": "The page's settings",
+	"editor.plugin.problem": "{block}: {message}",
+	"editor.plugin.problemField": "{block}, {field}: {message}",
+	"editor.plugin.loading": "Opening {editor}…",
 	"editor.plugin.failed": "{editor} didn't start. Choose the standard editor to keep editing.",
 	"editor.plugin.invalid": "{editor} gave back something this site can't publish, so nothing was published. Try again, or choose the standard editor.",
 	"publish.publishing": "Publishing…",
@@ -522,6 +530,9 @@ const defaultStrings = {
 	"draft.leave": "Back to the live site",
 	"draft.waiting": "A draft started {date} is waiting to be published.",
 	"draft.waitingMany": "{count} drafts are waiting to be published.",
+	"draft.reviewWaiting": "A draft is waiting for review: {title}.",
+	"draft.reviewWaitingMany": "{count} drafts are waiting for review.",
+	"draft.inReview": "Submitted for review.",
 	"draft.choose": "Draft to open",
 	"draft.started": "Started {date}",
 	"draft.open": "Open",
@@ -541,6 +552,22 @@ const defaultStrings = {
 	"checks.alsoWarnings": "These could be better too:",
 	"checks.publishAnyway": "Publish anyway",
 	"checks.goBack": "Go back",
+	"limits.title": "Some of this is outside what you can change",
+	"limits.intro": "An owner has limited what you can change on this site, and these changes are outside it:",
+	"limits.review": "Submit them for review instead: the site's reviewers are asked to look, and can publish them for you.",
+	"limits.noReview": "Ask an owner to make these changes for you, or to let you make them on Site Settings' Editors screen.",
+	"limits.goBack": "Go back",
+	"limits.submitting": "Submitting for review…",
+	"limits.submitted": "Submitted for review. The live site stays as it is until a reviewer publishes it.",
+	"limits.submitError": "The changes couldn't be submitted for review. Check your connection and try again.",
+	"limits.page": "The page {name}",
+	"limits.entry": "{name}, in {collection}",
+	"limits.media": "The media library",
+	"limits.layout": "The header and footer",
+	"limits.menus": "The menus",
+	"limits.other": "The site's settings, or other things only owners change",
+	"limits.readOnly": "You can look at this, but an owner has limited what you can change, and it's outside it.",
+	"limits.mediaReadOnly": "An owner has limited what you can change, and the media library is outside it. You can still use its files on pages you can change.",
 	"checks.missing-page": "{place} links to {target}, which isn't a page on the site.",
 	"checks.missing-media": "{place} uses {target}, which isn't in the media library.",
 	"checks.no-title": "{place} has no title, so browser tabs and search results show only the site's name.",
@@ -572,6 +599,7 @@ const defaultStrings = {
 	"pages.empty": "This site has no pages yet.",
 	"pages.column.title": "Title",
 	"pages.column.address": "Address",
+	"pages.look": "Look",
 	"pages.edit": "Edit",
 	"pages.move": "Change address",
 	"pages.duplicate": "Duplicate",
@@ -633,7 +661,7 @@ const defaultStrings = {
 	"deletePage.submit": "Delete page",
 	"deletePage.message": "Delete page \"{title}\"",
 	"address.invalid": "Use lowercase letters, numbers and hyphens, with / between parts, such as /about-us.",
-	"address.reserved": "This address is used by the admin panel. Choose another.",
+	"address.reserved": "This address can't be used: the admin panel uses it, or it ends in /index, which is the page above it. Choose another.",
 	"address.taken": "Another page already uses this address.",
 	"field.required": "This can't be empty.",
 	"editPage.message": "Update page \"{title}\"",
@@ -711,7 +739,7 @@ const defaultStrings = {
 	"newEntry.addressHint": "The last part of the page's address, as in {example}.",
 	"newEntry.message": "Add {entry} \"{title}\"",
 	"entryName.invalid": "Use lowercase letters, numbers and hyphens only, such as easter-vigil.",
-	"entryName.reserved": "This address is used by the admin panel. Choose another.",
+	"entryName.reserved": "This address can't be used: the admin panel uses it, or it ends in /index, which is the page above it. Choose another.",
 	"entryName.taken": "Something else on the site already uses this address.",
 	"moveEntry.message": "Move {entry} \"{title}\" from {from} to {to}",
 	"deleteEntry.body": "{title} will be removed from {name}.",
@@ -904,6 +932,51 @@ const defaultStrings = {
 	"table.removeColumn": "Remove this column",
 	"table.removeColumnNumber": "Remove column {column}",
 	"table.cell": "Row {row}, column {column}",
+	"style.align": "Text alignment",
+	"style.align.default": "As the block has it",
+	"style.align.left": "Left",
+	"style.align.center": "Centered",
+	"style.align.right": "Right",
+	"style.align.justify": "Justified",
+	"style.fontSize": "Text size",
+	"style.fontSize.xs": "Extra small",
+	"style.fontSize.sm": "Small",
+	"style.fontSize.base": "Normal",
+	"style.fontSize.lg": "Large",
+	"style.fontSize.xl": "Extra large",
+	"style.fontSize.2xl": "Very large",
+	"style.fontSize.3xl": "Huge",
+	"style.fontSize.4xl": "Very huge",
+	"style.fontSize.5xl": "Giant",
+	"style.fontSize.6xl": "Enormous",
+	"style.color": "Text color",
+	"style.background": "Background color",
+	"style.colorDefault": "As the block has it",
+	"style.colorCustom": "Choose a color",
+	"style.contrast": "This text may be hard to read on this background. Try colors further apart.",
+	"style.padding": "Space inside",
+	"style.margin": "Space around",
+	"style.eachSide": "Set each side",
+	"style.side.top": "Top",
+	"style.side.right": "Right",
+	"style.side.bottom": "Bottom",
+	"style.side.left": "Left",
+	"style.allSides": "All sides",
+	"style.none": "None",
+	"style.radius": "Rounded corners",
+	"style.radius.none": "Square",
+	"style.radius.sm": "Slightly rounded",
+	"style.radius.md": "Rounded",
+	"style.radius.lg": "The theme's rounding",
+	"style.radius.xl": "Very rounded",
+	"style.radius.full": "Round",
+	"style.default": "As the block has it",
+	"style.custom": "Your own…",
+	"style.customLength": "Your own size, such as 12px or 1.5rem",
+	"style.customLengthInvalid": "Write a number with px, rem, em or %, such as 12px.",
+	"style.other": "Other CSS classes",
+	"style.otherHint": "Tailwind classes, or your own from Custom CSS, separated by spaces.",
+	"style.reset": "Back to the block's own look",
 	"media.credit": "Credit: {credit}",
 	"media.stored": "Kept by {plugin}",
 	"media.error.storageSize": "{name} is too large: {plugin} takes files up to {size}.",
@@ -1014,6 +1087,7 @@ const defaultStrings = {
 	"settings.previewEmpty": "Add a home page to see a preview here.",
 	"domain.intro": "Connect a domain you own, such as example.org, so the site is at that address.",
 	"domain.current": "The site is at {address} now.",
+	"domain.copy": "This admin panel is a copy of the site's, such as a staging site, at {address}. That address is set where the copy is built, so the domain this screen connects is the main site's.",
 	"domain.connected": "Connected to {domain}.",
 	"domain.signIn": "Editors sign in by going to {host} and coming back here. Add {address} to the redirect URIs of the application they sign in with on {host}, or signing in will stop working once the site moves.",
 	"domain.local": "Domains are connected in the published site's admin panel, where you sign in with GitHub, GitLab or Bitbucket.",
@@ -1540,7 +1614,7 @@ const defaultStrings = {
 	"updates.error.save": "The change couldn't be saved. Try again in a moment.",
 	"updates.error.other": "Something went wrong. Try again in a moment.",
 	"editors.intro": "The people who can edit this site.",
-	"editors.roles": "Editors can change and publish everything in the admin panel. Owners can also invite and remove editors, and connect a domain.",
+	"editors.roles": "Editors can change and publish everything in the admin panel, unless their limits below say otherwise. Owners can also invite and remove editors, limit what they can change, and connect a domain.",
 	"editors.local": "Editors are invited in the published site's admin panel, where you sign in with GitHub, GitLab or Bitbucket.",
 	"editors.demo": "Editors can't be invited in a demo.",
 	"editors.loading": "Loading editors…",
@@ -1576,6 +1650,33 @@ const defaultStrings = {
 	"editors.error.invalid": "That isn't a username or email address that {host} accepts.",
 	"editors.error.already": "They already edit the site, or have been invited.",
 	"editors.error.other": "Something went wrong. Try again in a moment.",
+	"permissions.title": "Limits",
+	"permissions.intro": "Limit what someone can change: some pages, some collections, the media library, the header and footer, or the menus. Anyone not listed here can change everything their role allows. Changes outside someone's limits go to a reviewer, who publishes them or not.",
+	"permissions.where": "The admin panel keeps people to their limits, so nobody changes the wrong page by mistake. People who can publish to the site on {host} could still change other files there, so only a site with its own server holds everyone to them.",
+	"permissions.whereServer": "The site's server holds everyone to their limits, whatever they try.",
+	"permissions.host": "the site's host",
+	"permissions.person": "Their username",
+	"permissions.personHint": "The name they sign in with, as the list above shows it.",
+	"permissions.add": "Limit what they can change",
+	"permissions.change": "Change",
+	"permissions.remove": "Remove limits",
+	"permissions.nothing": "Nothing yet",
+	"permissions.allPages": "Every page",
+	"permissions.editTitle": "What {name} can change",
+	"permissions.editIntro": "Tick what they can change. They can look at everything else, and submit changes to it for review.",
+	"permissions.pages": "Pages",
+	"permissions.pagesHint": "Each with the pages under it, and their translations.",
+	"permissions.collections": "Collections' items",
+	"permissions.more": "Also",
+	"permissions.languages": "Languages",
+	"permissions.everyLanguage": "Every language",
+	"permissions.save": "Publish limits",
+	"permissions.message": "Change what {name} can change",
+	"permissions.removeMessage": "Let {name} change everything",
+	"permissions.reviewers": "Who reviews changes outside someone's limits",
+	"permissions.reviewersHint": "Usernames, separated by commas. Leave it empty for every owner.",
+	"permissions.saveReviewers": "Publish reviewers",
+	"permissions.reviewersMessage": "Change who reviews changes outside editors' limits",
 	"general.siteTitle": "Site name",
 	"general.description": "Description",
 	"general.descriptionHint": "Shown by search engines when a page doesn't have its own description.",
@@ -2235,6 +2336,119 @@ function SiteCodeFrame({ onClient }) {
 	});
 }
 //#endregion
+//#region src/limits-dialog.tsx
+/** What a change outside someone's limits touches, in words. Files that are none of those are named once, together. */
+function describeLimitProblems(t, content, problems) {
+	const described = /* @__PURE__ */ new Set();
+	const pages = allPages(content);
+	for (const problem of problems) if (problem.kind === "page") {
+		const title = (pages.find((found) => found.path === problem.address)?.content.data.root.props)?.title;
+		described.add(t("limits.page", { name: typeof title === "string" && title ? title : problem.address }));
+	} else if (problem.kind === "entry") {
+		const collection = content.collections.find((found) => found.id === problem.collection);
+		const title = (collection?.entries.find((found) => found.slug === problem.slug))?.content.fields.title;
+		described.add(t("limits.entry", {
+			name: typeof title === "string" && title ? title : problem.slug,
+			collection: collection?.settings.name ?? problem.collection
+		}));
+	} else described.add(t(`limits.${problem.kind}`));
+	return [...described];
+}
+/**
+* Changes outside what someone may change: listed, with what they can do
+* instead, submitting them for review where the site can take one.
+*/
+function LimitsDialog({ problems, content, onSubmit, onClose }) {
+	const t = useStrings();
+	const [state, setState] = useState({ type: "asking" });
+	const submit = async () => {
+		if (!onSubmit) return;
+		setState({ type: "submitting" });
+		try {
+			setState({
+				type: "submitted",
+				...await onSubmit()
+			});
+		} catch (error) {
+			setState({
+				type: "error",
+				error
+			});
+		}
+	};
+	return /* @__PURE__ */ jsxs(Dialog, {
+		title: t("limits.title"),
+		onClose,
+		children: [
+			/* @__PURE__ */ jsx("p", { children: t("limits.intro") }),
+			/* @__PURE__ */ jsx("ul", {
+				className: "gfa-check-list",
+				children: describeLimitProblems(t, content, problems).map((line) => /* @__PURE__ */ jsx("li", { children: line }, line))
+			}),
+			state.type === "submitted" ? /* @__PURE__ */ jsxs("p", {
+				role: "status",
+				children: [
+					t("limits.submitted"),
+					" ",
+					state.url && /* @__PURE__ */ jsx("a", {
+						href: state.url,
+						target: "_blank",
+						rel: "noreferrer",
+						children: t("draft.seeReview")
+					})
+				]
+			}) : /* @__PURE__ */ jsx("p", { children: t(onSubmit ? "limits.review" : "limits.noReview") }),
+			state.type === "error" && /* @__PURE__ */ jsx(ErrorMessage, {
+				message: t("limits.submitError"),
+				error: state.error
+			}),
+			/* @__PURE__ */ jsxs("div", {
+				className: "gfa-dialog-actions",
+				children: [/* @__PURE__ */ jsx(Button, {
+					onClick: onClose,
+					children: t(state.type === "submitted" ? "action.close" : "limits.goBack")
+				}), onSubmit && state.type !== "submitted" && /* @__PURE__ */ jsx(Button, {
+					variant: "primary",
+					disabled: state.type === "submitting",
+					onClick: () => void submit(),
+					children: t(state.type === "submitting" ? "limits.submitting" : "draft.submit")
+				})]
+			})
+		]
+	});
+}
+//#endregion
+//#region src/limits.ts
+/**
+* What the signed-in person may change, for screens that show the rest
+* read-only. Publishing checks every change again (`outsideLimits()`), so
+* these only spare people changes they couldn't publish.
+*/
+/** Whether someone with `limits` may change what's open. Collections' templates are their settings, which limits never cover. */
+function mayChange(content, limits, what) {
+	if (!limits) return true;
+	switch (what.kind) {
+		case "page": {
+			const page = content.pages.find((found) => found.path === what.path);
+			return mayChangePage(content, limits, page ?? { path: what.path });
+		}
+		case "header":
+		case "footer": return mayChangeLayout(content, limits, what.language);
+		case "template": return false;
+		case "entry": {
+			const entry = content.collections.find((found) => found.id === what.collection)?.entries.find((found) => found.slug === what.entry);
+			return entry ? mayChangeEntry(content, limits, entry) : (limits.collections ?? []).includes(what.collection);
+		}
+		case "media": return mayChangeMedia(limits);
+		case "menus": return mayChangeMenus(content, limits, what.language);
+	}
+}
+/** Whether the signed-in person may change what's open, once the site has loaded. */
+function useMayChange(what) {
+	const { state, limits } = useAdmin();
+	return state.status !== "ready" || mayChange(state.content, limits, what);
+}
+//#endregion
 //#region src/media-previews.ts
 const TYPES = {
 	jpg: "image/jpeg",
@@ -3632,6 +3846,7 @@ function MediaScreen() {
 	const [copied, setCopied] = useState(null);
 	const [moved, setMoved] = useState();
 	const searchId = useId();
+	const mayChange = useMayChange({ kind: "media" });
 	useEffect(() => {
 		const stop = (event) => {
 			if (event.dataTransfer?.types.includes("Files")) event.preventDefault();
@@ -3650,7 +3865,7 @@ function MediaScreen() {
 		children: [
 			/* @__PURE__ */ jsxs("div", {
 				className: "gfa-screen-header",
-				children: [/* @__PURE__ */ jsx("h1", { children: t("media.title") }), /* @__PURE__ */ jsx(UploadButton, {
+				children: [/* @__PURE__ */ jsx("h1", { children: t("media.title") }), mayChange && /* @__PURE__ */ jsx(UploadButton, {
 					label: t("media.upload"),
 					disabled: status.type === "uploading",
 					onFiles: (files) => void run(files)
@@ -3660,6 +3875,11 @@ function MediaScreen() {
 				className: "gfa-hint",
 				children: t("media.intro")
 			}),
+			!mayChange && /* @__PURE__ */ jsx("p", {
+				className: "gfa-notice",
+				role: "note",
+				children: t("limits.mediaReadOnly")
+			}),
 			cloudflareVideos && /* @__PURE__ */ jsxs("p", {
 				className: "gfa-notice",
 				role: "note",
@@ -3674,7 +3894,7 @@ function MediaScreen() {
 					})
 				]
 			}),
-			/* @__PURE__ */ jsx(StorageSection, { onDone: setMoved }),
+			mayChange && /* @__PURE__ */ jsx(StorageSection, { onDone: setMoved }),
 			moved && /* @__PURE__ */ jsx("p", {
 				className: "gfa-notice gfa-notice-success",
 				role: "status",
@@ -3696,7 +3916,7 @@ function MediaScreen() {
 				})]
 			}),
 			/* @__PURE__ */ jsx(DropZone, {
-				onFiles: (files) => void run(files),
+				onFiles: (files) => void (mayChange && run(files)),
 				children: media.length === 0 ? /* @__PURE__ */ jsx("p", { children: t("media.empty") }) : urls.length === 0 ? /* @__PURE__ */ jsx("p", { children: t("media.noMatches") }) : /* @__PURE__ */ jsx("ul", {
 					className: "gfa-media-grid",
 					children: urls.map((url) => /* @__PURE__ */ jsxs("li", {
@@ -3715,25 +3935,21 @@ function MediaScreen() {
 							}),
 							/* @__PURE__ */ jsxs("div", {
 								className: "gfa-media-actions",
-								children: [
-									/* @__PURE__ */ jsx(Button, {
-										variant: "ghost",
-										onClick: () => void navigator.clipboard?.writeText(url).then(() => setCopied(url), () => setCopied(null)),
-										children: copied === url ? t("media.copied") : t("media.copy")
-									}),
-									/* @__PURE__ */ jsx(UploadButton, {
-										label: t("media.replace"),
-										variant: "secondary",
-										multiple: false,
-										disabled: status.type === "uploading",
-										onFiles: (files) => void run(files.slice(0, 1), mediaPath(url))
-									}),
-									/* @__PURE__ */ jsx(Button, {
-										variant: "ghost",
-										onClick: () => setDeleting(url),
-										children: t("media.delete")
-									})
-								]
+								children: [/* @__PURE__ */ jsx(Button, {
+									variant: "ghost",
+									onClick: () => void navigator.clipboard?.writeText(url).then(() => setCopied(url), () => setCopied(null)),
+									children: copied === url ? t("media.copied") : t("media.copy")
+								}), mayChange && /* @__PURE__ */ jsxs(Fragment$1, { children: [/* @__PURE__ */ jsx(UploadButton, {
+									label: t("media.replace"),
+									variant: "secondary",
+									multiple: false,
+									disabled: status.type === "uploading",
+									onFiles: (files) => void run(files.slice(0, 1), mediaPath(url))
+								}), /* @__PURE__ */ jsx(Button, {
+									variant: "ghost",
+									onClick: () => setDeleting(url),
+									children: t("media.delete")
+								})] })]
 							})
 						]
 					}, url))
@@ -3967,7 +4183,7 @@ function pluginSecretsHelp(place, plugin, t) {
 //#endregion
 //#region src/registry-version.ts
 /** The release of Goodfellow's block registry this admin panel was built with, so a site gets blocks that match it. */
-const REGISTRY_VERSION = "0.6.0";
+const REGISTRY_VERSION = "0.7.0";
 //#endregion
 //#region src/schedule.tsx
 /** The computer's own time zone, which a site without one takes when something is first scheduled. */
@@ -4318,13 +4534,15 @@ function AdminProvider({ site, frames, store, account, preview, siteUrl, registr
 	const [draftPaths, setDraftPaths] = useState([]);
 	const content = draft?.store ?? store;
 	const [checking, setChecking] = useState();
+	const [limiting, setLimiting] = useState();
+	const [draftReviews, setDraftReviews] = useState([]);
 	const blocks = useMemo(() => describedConfig(site.description, "template").components, [site.description]);
 	const storage = useRef(void 0);
 	storage.current = state.status === "ready" ? state.content.mediaStorage : void 0;
 	const mediaPreviews = useMemo(() => createMediaPreviews(content, siteUrl, () => storage.current), [content, siteUrl]);
 	const outOfReach = registry !== void 0 || atAdminAddress(site.admin) || site.broker !== void 0;
 	const registries = useMemo(() => ({
-		[GOODFELLOW_REGISTRY]: registry ?? goodfellowRegistryUrl("0.6.0"),
+		[GOODFELLOW_REGISTRY]: registry ?? goodfellowRegistryUrl("0.7.0"),
 		...outOfReach && {
 			[SHADCN_NAMESPACE]: SHADCN_REGISTRY,
 			...site.registries
@@ -4422,9 +4640,14 @@ function AdminProvider({ site, frames, store, account, preview, siteUrl, registr
 		reload
 	]);
 	const refreshDrafts = useCallback(async (current) => {
-		const [names, paths] = await Promise.all([siteDrafts.list().catch(() => []), current ? current.paths().catch(() => []) : []]);
+		const [names, paths, reviews] = await Promise.all([
+			siteDrafts.list().catch(() => []),
+			current ? current.paths().catch(() => []) : [],
+			siteDrafts.reviews().catch(() => [])
+		]);
 		setDraftNames(names);
 		setDraftPaths(paths);
+		setDraftReviews(reviews);
 	}, [siteDrafts]);
 	useEffect(() => {
 		if (draftFound) refreshDrafts(draft);
@@ -4444,12 +4667,64 @@ function AdminProvider({ site, frames, store, account, preview, siteUrl, registr
 		setChecking(void 0);
 		return go;
 	}, []);
+	const limits = useMemo(() => state.status === "ready" ? limitsFor(state.content.permissions, account?.user.login) : void 0, [state, account]);
+	/** Who's asked to review: those the permissions name, else every owner, never the one asking. */
+	const reviewers = useCallback(async () => {
+		const owners = await editors?.list().then((list) => list.editors.flatMap((editor) => editor.role === "owner" && editor.login ? [editor.login] : [])).catch(() => []);
+		const self = account?.user.login.toLowerCase();
+		const permissions = state.status === "ready" ? state.content.permissions : void 0;
+		return reviewersFor(permissions, owners ?? []).filter((login) => login.toLowerCase() !== self);
+	}, [
+		editors,
+		account,
+		state
+	]);
+	/** Shows what's outside someone's limits, and lets them submit it for review where the site can take one. */
+	const askLimits = useCallback((problems, shown, submit) => new Promise((done) => setLimiting({
+		problems,
+		content: shown,
+		...submit && { submit },
+		done
+	})), []);
 	const publish = useCallback(async (changes, message, options) => {
 		if (state.status !== "ready") return {
 			ok: false,
 			reason: "error",
 			error: /* @__PURE__ */ new Error("The site isn't loaded.")
 		};
+		const outside = draft || options?.draft ? [] : outsideLimits(state.content, limits, changes);
+		if (outside.length > 0) {
+			const from = state.revision;
+			const description = [
+				t("draft.reviewDescription"),
+				"",
+				...changes.map((change) => `- \`${change.path}\``)
+			].join("\n");
+			const submit = backendDrafts ? async () => {
+				const review = await siteDrafts.create(newDraftName(), { from });
+				await writeChanges(review.store, changes, {
+					message,
+					expectedRevision: await review.store.revision()
+				});
+				const { url } = await review.submitForReview({
+					title: message,
+					description,
+					reviewers: await reviewers()
+				});
+				refreshDrafts(void 0);
+				return { url };
+			} : account?.review ? () => account.review?.(changes, {
+				title: message,
+				description,
+				from
+			}) ?? Promise.resolve({}) : void 0;
+			await askLimits(outside, state.content, submit);
+			return {
+				ok: false,
+				reason: "checks",
+				error: void 0
+			};
+		}
 		const checks = options?.checks === false ? void 0 : await checkPublish(content, state, changes, {
 			blocks,
 			code
@@ -4504,7 +4779,13 @@ function AdminProvider({ site, frames, store, account, preview, siteUrl, registr
 		confirmChecks,
 		refreshDrafts,
 		loadFrom,
-		onSignInError
+		onSignInError,
+		limits,
+		backendDrafts,
+		account,
+		askLimits,
+		reviewers,
+		t
 	]);
 	const openDraft = useCallback(async (name) => {
 		if (name === draft?.name) return true;
@@ -4548,6 +4829,29 @@ function AdminProvider({ site, frames, store, account, preview, siteUrl, registr
 			reason: "error",
 			error: live.status === "error" && live.error
 		};
+		const outside = outsideLimits(live.content, limitsFor(live.content.permissions, account?.user.login), changes);
+		if (outside.length > 0) {
+			const current = draft;
+			const submit = backendDrafts ? async () => {
+				const paths = changes.map((change) => change.path);
+				return current.submitForReview({
+					title: t("draft.reviewTitle", { name: current.name }),
+					description: [
+						t("draft.reviewDescription"),
+						"",
+						...paths.map((path) => `- \`${path}\``)
+					].join("\n"),
+					reviewers: await reviewers()
+				});
+			} : void 0;
+			await askLimits(outside, live.content, submit);
+			refreshDrafts(current);
+			return {
+				ok: false,
+				reason: "checks",
+				error: void 0
+			};
+		}
 		if (!await confirmChecks(await checkPublish(store, live, changes, {
 			blocks,
 			code
@@ -4584,7 +4888,12 @@ function AdminProvider({ site, frames, store, account, preview, siteUrl, registr
 		key,
 		t,
 		confirmChecks,
-		onSignInError
+		onSignInError,
+		account,
+		backendDrafts,
+		askLimits,
+		reviewers,
+		refreshDrafts
 	]);
 	const submitDraft = useCallback(async () => {
 		if (!draft) return {
@@ -4599,8 +4908,10 @@ function AdminProvider({ site, frames, store, account, preview, siteUrl, registr
 					t("draft.reviewDescription"),
 					"",
 					...paths.map((path) => `- \`${path}\``)
-				].join("\n")
+				].join("\n"),
+				reviewers: await reviewers()
 			});
+			refreshDrafts(draft);
 			return {
 				ok: true,
 				url
@@ -4611,7 +4922,12 @@ function AdminProvider({ site, frames, store, account, preview, siteUrl, registr
 				error
 			};
 		}
-	}, [draft, t]);
+	}, [
+		draft,
+		t,
+		reviewers,
+		refreshDrafts
+	]);
 	const discardDraft = useCallback(async () => {
 		if (!draft) return { ok: true };
 		try {
@@ -4630,6 +4946,7 @@ function AdminProvider({ site, frames, store, account, preview, siteUrl, registr
 	const drafts = useMemo(() => ({
 		kept: backendDrafts === void 0,
 		names: draftNames,
+		reviews: draftReviews,
 		...draft && { current: {
 			name: draft.name,
 			paths: draftPaths
@@ -4641,6 +4958,7 @@ function AdminProvider({ site, frames, store, account, preview, siteUrl, registr
 	}), [
 		backendDrafts,
 		draftNames,
+		draftReviews,
 		draft,
 		draftPaths,
 		openDraft,
@@ -4692,6 +5010,7 @@ function AdminProvider({ site, frames, store, account, preview, siteUrl, registr
 	const pluginInstalls = demo || contentOnly ? void 0 : account?.review ? "review" : atAdminAddress(site.admin) || site.broker !== void 0 ? "publish" : void 0;
 	const value = useMemo(() => ({
 		site,
+		...limits && { limits },
 		blocks,
 		code,
 		preview,
@@ -4724,6 +5043,7 @@ function AdminProvider({ site, frames, store, account, preview, siteUrl, registr
 		tasks
 	}), [
 		site,
+		limits,
 		blocks,
 		code,
 		preview,
@@ -4766,16 +5086,28 @@ function AdminProvider({ site, frames, store, account, preview, siteUrl, registr
 		value,
 		children: /* @__PURE__ */ jsxs(StringsProvider, {
 			strings,
-			children: [state.status === "ready" ? /* @__PURE__ */ jsx(SiteFrames, {
-				frames,
-				state,
-				onCodeClient,
-				children
-			}) : children, checking && /* @__PURE__ */ jsx(ChecksDialog, {
-				checks: checking.checks,
-				content: checking.content,
-				onDecide: checking.decide
-			})]
+			children: [
+				state.status === "ready" ? /* @__PURE__ */ jsx(SiteFrames, {
+					frames,
+					state,
+					onCodeClient,
+					children
+				}) : children,
+				checking && /* @__PURE__ */ jsx(ChecksDialog, {
+					checks: checking.checks,
+					content: checking.content,
+					onDecide: checking.decide
+				}),
+				limiting && /* @__PURE__ */ jsx(LimitsDialog, {
+					problems: limiting.problems,
+					content: limiting.content,
+					...limiting.submit && { onSubmit: limiting.submit },
+					onClose: () => {
+						setLimiting(void 0);
+						limiting.done();
+					}
+				})
+			]
 		})
 	});
 }
@@ -5079,4 +5411,4 @@ function formValues(collection, entry) {
 	return values;
 }
 //#endregion
-export { useDebounced as $, useRoute as A, redirectsFileChange as At, FrameServicesProvider as B, AppLink as C, menusFileChange as Ct, hasUnsavedChanges as D, newPageData as Dt, entryEditorHref as E, newCollectionSettings as Et, PluginScreenFrame as F, storedEntryFields as Ft, READY_MESSAGE as G, useFrame as H, usePluginFrame as I, uniqueName as It, Dialog as J, draftStarted as K, usePluginHost as L, updateSettingsFileChange as Lt, prepareUpload as M, slugify as Mt, useOutsideHost as N, storedCss as Nt, navigate as O, pageFileChange as Ot, PublishFailure as P, storedData as Pt, TextField as Q, createMediaPreviews as R, editedMarkdown as Rt, MediaScreen as S, mediaFileChange as St, collectionHref as T, movePageChanges as Tt, useFrameServices as U, reloadFrames as V, useFrameUpdates as W, Field as X, ErrorMessage as Y, PublishedNotice as Z, scheduleSettingsChanges as _, customCssFileChange as _t, AdminContext as a, findPage as at, MediaChooser as b, entryFileChange$1 as bt, useCanChangeSettings as c, mediaUrl as ct, useApplyThemeChoice as d, addressPatternFor as dt, StringsProvider as et, useDarkMode as f, checkEntrySlug as ft, ScheduleStatus as g, collectionSettingsChanges as gt, ScheduleFields as h, collectionFileChange$1 as ht, usePreviewStyles as i, describeContrast as it, useUnsavedChanges as j, siteSettingsFileChange as jt, pageEditorHref as k, pageTitle$1 as kt, useSiteContent as l, siteImages as lt, ComingUp as m, codeFileChanges as mt, formValues as n, useStringTable as nt, AdminProvider as o, allMedia as ot, useThemeChoice as p, checkPageAddress as pt, Button as q, PreviewFrame as r, useStrings as rt, useAdmin as s, fileName as st, SCHEDULE_PROP as t, defaultStrings as tt, setThemeChoice as u, uploadName as ut, REGISTRY_VERSION as v, deleteCollectionChanges as vt, SETTINGS_SECTIONS as w, moveEntryChanges as wt, MediaField as x, layoutFileChange as xt, MediaChoiceContext as y, duplicatePageData as yt, showMediaInPreview as z, formattedHtml as zt };
+export { PublishedNotice as $, useRoute as A, pageFileChange as At, mayChange as B, editedMarkdown as Bt, AppLink as C, layoutFileChange as Ct, hasUnsavedChanges as D, movePageChanges as Dt, entryEditorHref as E, moveEntryChanges as Et, PluginScreenFrame as F, storedCss as Ft, useFrameServices as G, FrameServicesProvider as H, usePluginFrame as I, storedData as It, draftStarted as J, useFrameUpdates as K, usePluginHost as L, storedEntryFields as Lt, prepareUpload as M, redirectsFileChange as Mt, useOutsideHost as N, siteSettingsFileChange as Nt, navigate as O, newCollectionSettings as Ot, PublishFailure as P, slugify as Pt, Field as Q, createMediaPreviews as R, uniqueName as Rt, MediaScreen as S, entryFileChange$1 as St, collectionHref as T, menusFileChange as Tt, reloadFrames as U, useMayChange as V, formattedHtml as Vt, useFrame as W, Dialog as X, Button as Y, ErrorMessage as Z, scheduleSettingsChanges as _, collectionFileChange$1 as _t, AdminContext as a, useStrings as at, MediaChooser as b, deleteCollectionChanges as bt, useCanChangeSettings as c, allMedia as ct, useApplyThemeChoice as d, siteImages as dt, TextField as et, useDarkMode as f, uploadName as ft, ScheduleStatus as g, codeFileChanges as gt, ScheduleFields as h, checkPageAddress as ht, usePreviewStyles as i, useStringTable as it, useUnsavedChanges as j, pageTitle$1 as jt, pageEditorHref as k, newPageData as kt, useSiteContent as l, fileName as lt, ComingUp as m, checkEntrySlug as mt, formValues as n, StringsProvider as nt, AdminProvider as o, describeContrast as ot, useThemeChoice as p, addressPatternFor as pt, READY_MESSAGE as q, PreviewFrame as r, defaultStrings as rt, useAdmin as s, findPage as st, SCHEDULE_PROP as t, useDebounced as tt, setThemeChoice as u, mediaUrl as ut, REGISTRY_VERSION as v, collectionSettingsChanges as vt, SETTINGS_SECTIONS as w, mediaFileChange as wt, MediaField as x, duplicatePageData as xt, MediaChoiceContext as y, customCssFileChange as yt, showMediaInPreview as z, updateSettingsFileChange as zt };