@jini-ai/admin 0.4.13 → 0.6.10

package/CHANGELOG.md

@@ -1,5 +1,70 @@
 # Changelog
 
+## 0.6.10
+
+### Patch Changes
+
+- e27fa91: Removed the `./server` export subpath. It held only the Composio integration, which moves back
+  out — now `@jini-ai/integrations/composio`, a subpath of `@jini-ai/integrations`
+  (`packages/integrations/`; see that package's own changeset for the full history). `jini.entries`
+  drops its `"./server": "node"` entry, and the `@jini-ai/protocol` devDependency (which existed only
+  for composio's type-only `JsonValue` references) is removed. No other consumer imported
+  `@jini-ai/admin/server` — nothing else needs an import-path change.
+- cc33cf1: Folded `@jini-ai/composio` into `@jini-ai/admin` as a `./server` subpath, and retired the package.
+
+  Composio's only consumer is the admin surface, so a standalone package was a boundary that bought
+  nothing — the same reasoning that retired `@jini-ai/ui-core` into `@jini-ai/ui/core`. All 11 source
+  files and 8 test files move as-is; no production logic changed.
+
+  It lands under `./server`, not `./core`, because it imports `node:fs`, `node:crypto`, and
+  `node:path`. `/core` is the framework-free, DOM-free, universal layer, and that property is what
+  makes it installable without React — it is not a general-purpose home for anything non-React.
+  `jini.entries` now reads `{".": universal, "./core": universal, "./browser": browser,
+"./server": node}`. `@jini-ai/protocol` becomes a **devDependency**: all seven references are
+  `import type { JsonValue }`, so admin's consumers pay nothing at runtime for this.
+
+  **Composio's tests had never been type-checked.** Its `tsconfig.json` set `include: ["src"]` while
+  its tests lived in a top-level `tests/` directory, so `tsc` never looked at them, and `vitest` does
+  not type-check. Twenty errors under `exactOptionalPropertyTypes: true` — a setting predating the
+  package — had been latent since its creation. Admin co-locates tests under `src/**/__tests__/`,
+  which `include: ["src"]` does cover, so the move surfaced them; it did not cause them. Nineteen
+  were mechanical fixture shapes. The twentieth was not: a `credentialStore.set` fixture in
+  `service.contract.test.ts` was missing `accountLabel` **on purpose**, simulating a persisted record
+  without one so the test could assert the resulting rejection path. "Fixing" it to satisfy the
+  compiler made the request match instead of mismatch and broke the test at runtime; it is now
+  preserved verbatim behind a documented assertion. No production type was widened to satisfy a
+  fixture. `src/server/**` keeps composio's own 100% coverage threshold via a scoped glob rather than
+  promoting it package-wide onto `/core` and `/browser`, which never carried it.
+
+  **`@jini-ai/composio` is retired, not versioned forward.** It was published (0.1.0, 0.2.0, 0.2.1 —
+  a longer public life than ui-core's single version), but has zero consumers: no source file,
+  package.json, or lockfile in either this repo or Tovu has ever referenced it, verified with a `-S`
+  pickaxe over full git history rather than current state alone. Deleting the source does **not**
+  unpublish anything — 0.2.1 stays installable and no existing build breaks — so a deprecation-stub
+  package was judged not worth keeping alive for a name nothing needs. Whoever runs the next release
+  should follow up against the registry with:
+
+  ```
+  npm deprecate @jini-ai/composio "Merged into @jini-ai/admin; import from '@jini-ai/admin/server' instead."
+  ```
+
+  One caution for anyone re-examining that consumer question later: composio's CHANGELOG for 0.2.1
+  says "Verified against a real external consumer (Tovu...)", which reads like direct evidence of a
+  dependency. It is not. That exact sentence appears verbatim in 23 other packages' CHANGELOGs — it
+  is boilerplate from a repo-wide `main`/`types` resolution fix that was batch-applied, not a
+  composio-specific claim.
+
+  Composio's `source-map.md` is carried forward to `src/server/source-map.md`. Its package-level
+  `UNLOCKED.md` is not: it tracked admission evidence for the locked/incubating gate removed
+  2026-07-28, and its one substantive point is covered in more detail by `source-map.md`. The root
+  `UNLOCKED.md`'s composio entry is deliberately left untouched as historical record, per that file's
+  own header.
+
+- 82ed2d3: Media, SEO and widgets require FetchQueryProvider. Successful media refreshes clear errors; editor reads request fresh versions. Remove redundant settings-loader/provider reads and limit media invalidation to the library. Retain the exported headless entry-picker controller as deprecated pending owner-approved removal.
+- ea8d883: Restore host media-prefix invalidation while isolating provider queries, and validate single-owner SEO form reads.
+- ea8d883: Skip cross-origin image HEAD probes, translate social image warnings through the SEO translator, and use the existing warning notice class.
+- 1c5d476: Hydrate reopened SEO forms from the fresh settings read through the shared query loader so cached default values cannot hide newer settings.
+
 ## 0.4.13 — 2026-10-22
 
 - 2026-10-22: Consent banner editor sections and preview, redirect list fixes, media lightbox via @jini-ai/ui, media provider tab fixes, coverage.
@@ -62,7 +127,7 @@
 
 ## Unreleased
 
-- Add portable Forms admin screens, HTTP/memory adapters and core-port conformance under ./forms*.
+- Add portable Forms admin screens, HTTP/memory adapters and core-port conformance under ./forms\*.
 - Add composable comments admin queue/settings module with HTTP and memory adapters and API conformance.
 - Add portable redirects admin module, React list, HTTP/memory adapters and API conformance.
 - Add portable SEO admin settings, sitemap viewer, entry overrides and analysis with HTTP/memory adapters and API conformance.
@@ -78,7 +143,6 @@
 
 - Adopt shared kernel contracts and preserve the module rationale in neutral documentation.
 
-
 - Complete object-argument calls in Sidebar, RowMenu and ConfirmDialog, preserving
   preferences, routing, tone precedence, selection and agent handle behavior.
 - Merge every per-request `HeadersInit` form through `Headers`, with case-insensitive

package/dist/consent/react/ConsentFields.js

@@ -1,5 +1,6 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useId } from 'react';
+import { defaultAdminTheme } from '@jini-ai/ui/theme';
 import { pixelInputValue, problemsFor, useConsentSettingsPanel, usePolicyVersionInput } from './settings-panel.hooks.js';
 const BANNER_FIELDS = [
     { key: 'title', label: 'Banner title' }, { key: 'message', label: 'Banner message', multiline: true },
@@ -11,8 +12,9 @@ const REGION_LABELS = {
     auto: 'Automatic (unknown region: opt-in)', 'opt-in': 'Opt-in everywhere (EU / UK)', 'opt-out': 'Opt-out everywhere (California)',
 };
 const PLACEMENT_LABELS = { 'bottom-bar': 'Bottom bar', 'bottom-left': 'Bottom left', 'bottom-right': 'Bottom right', 'top-bar': 'Top bar' };
+// Native color inputs need concrete colors rather than CSS variable expressions.
 const COLOR_TOKENS = [
-    { key: 'backgroundColor', label: 'Background', fallback: '#ffffff' }, { key: 'textColor', label: 'Text', fallback: '#222222' }, { key: 'borderColor', label: 'Border', fallback: '#222222' },
+    { key: 'backgroundColor', label: 'Background', fallback: defaultAdminTheme.light.bg }, { key: 'textColor', label: 'Text', fallback: defaultAdminTheme.light.text }, { key: 'borderColor', label: 'Border', fallback: defaultAdminTheme.light.border },
 ];
 /** The engine's own pixel bounds (`compileConsentCss`); out-of-range values come back as problems. */
 const PIXEL_TOKENS = [
@@ -60,7 +62,7 @@ export function ConsentLookFields({ value, onChange, disabled = false, problems,
     const appearance = value.appearance ?? {};
     return _jsxs("fieldset", { disabled: disabled, className: "jini-consent-settings-fields", children: [_jsx("legend", { children: t('Look & position') }), _jsx(Field, { label: t('Position'), field: "placement", problems: problems, children: aria => _jsx("select", { className: "jini-input", value: value.placement ?? placements[0], onChange: handlers.placement, ...aria, children: placements.map(placement => _jsx("option", { value: placement, children: t(PLACEMENT_LABELS[placement] ?? placement) }, placement)) }) }), _jsxs("div", { className: "jini-consent-token-grid", children: [COLOR_TOKENS.map(token => _jsx(ColorToken, { label: t(token.label), value: appearance[token.key], fallback: token.fallback, resetLabel: t('Default'), onChange: handlers.token(token.key) }, token.key)), PIXEL_TOKENS.map(token => _jsx(Field, { label: t(token.label), field: token.key, children: attributes => _jsx("input", { className: "jini-input", type: "number", inputMode: "numeric", min: token.min, max: token.max, step: 1, placeholder: t('Default'), value: pixelInputValue({ value: appearance[token.key] }), onChange: event => handlers.token(token.key)(event.target.value === '' ? '' : `${event.target.value}px`), ...attributes }) }, token.key))] }), _jsx(Field, { label: t('Custom CSS'), field: "appearance", problems: problems, children: aria => _jsx("textarea", { className: "jini-input jini-consent-css", value: value.customCss ?? '', rows: 6, spellCheck: false, onChange: handlers.text('customCss'), ...aria }) }), _jsx("p", { className: "jini-hint", children: t('Only banner selectors and safe properties are allowed. Text needs 4.5:1 contrast.') })] });
 }
-/** A native color picker; unset shows the engine default and offers no reset. */
+/** A native color picker; unset shows the shared theme default and offers no reset. */
 function ColorToken({ label, value, fallback, resetLabel, onChange }) {
     const id = useId();
     return _jsxs("div", { className: "jini-consent-settings-field", children: [_jsx("label", { htmlFor: id, className: "jini-field-label", children: label }), _jsxs("span", { className: "jini-consent-color-row", children: [_jsx("input", { id: id, className: "jini-consent-color", type: "color", value: value ?? fallback, onChange: event => onChange(event.target.value) }), _jsx("code", { className: "jini-hint", children: value ?? resetLabel }), value !== undefined && _jsx("button", { type: "button", className: "jini-btn-link", "aria-label": `${resetLabel}: ${label}`, onClick: () => onChange(''), children: resetLabel })] })] });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jini-ai/admin",
-  "version": "0.4.13",
+  "version": "0.6.10",
   "description": "Composable admin surface for Jini-hosted products: framework-free contracts, panel registry, and route model in `/core`; React shell and panels in `/react`. Import only the layers you need.",
   "license": "Apache-2.0",
   "repository": {
@@ -448,12 +448,12 @@
   "peerDependencies": {
     "react": "^18.3.0 || ^19.0.0",
     "react-dom": "^18.3.0 || ^19.0.0",
-    "@jini-ai/agentic": "^0.4.4",
-    "@jini-ai/ui": "^0.5.5",
-    "@jini-ai/ui-kit": "^0.1.3",
-    "@jini-ai/agent-plugins": "^0.4.3",
-    "@jini-ai/cms": "^0.5.13",
-    "@jini-ai/core": "^0.4.3"
+    "@jini-ai/agentic": "^0.6.10",
+    "@jini-ai/ui": "^0.6.10",
+    "@jini-ai/ui-kit": "^0.6.10",
+    "@jini-ai/agent-plugins": "^0.6.10",
+    "@jini-ai/cms": "^0.6.10",
+    "@jini-ai/core": "^0.6.10"
   },
   "peerDependenciesMeta": {
     "react": {
@@ -491,12 +491,12 @@
     "react": "^19.2.0",
     "react-dom": "^19.2.0",
     "@testing-library/user-event": "^14.6.1",
-    "@jini-ai/ui-kit": "^0.1.5",
-    "@jini-ai/cms": "^0.5.14",
-    "@jini-ai/core": "^0.4.9",
-    "@jini-ai/agent-plugins": "^0.4.8",
-    "@jini-ai/agentic": "^0.4.5",
-    "@jini-ai/ui": "^0.5.6"
+    "@jini-ai/agentic": "^0.6.10",
+    "@jini-ai/core": "^0.6.10",
+    "@jini-ai/agent-plugins": "^0.6.10",
+    "@jini-ai/ui-kit": "^0.6.10",
+    "@jini-ai/ui": "^0.6.10",
+    "@jini-ai/cms": "^0.6.10"
   },
   "typesVersions": {
     "*": {