@norskvideo/ctl-dev-kit 0.1.40 → 0.1.42

package/conventions/upgrade-latest.yml

@@ -102,10 +102,31 @@ jobs:
           [ -n "$new_studio_lib" ] && [ "$new_studio_lib" != "null" ] || { echo "could not resolve norsk-studio npm nightly"; exit 1; }
           studio_line="${new_studio_lib%%-*}"   # e.g. 1.28.0 — keep the image on this line
           old_studio_img="$(jq -r '.latest.studio | split(":")[1]' manifest.seed.json)"
-          new_studio_img="$(curl -fsSL "https://hub.docker.com/v2/repositories/norskvideo/norsk-studio/tags?page_size=100&ordering=last_updated" \
-            | jq -r '.results[].name' \
+          # FOLLOW THE NIGHTLY CHANNEL — do not pick the newest tag NAME on the
+          # line. Newest-name selects on publish recency, so any build landing a
+          # <line>-<date>-<sha> tag wins, including one off a feature branch. Not
+          # hypothetical: a norsk-studio `reasoning` build took both the nightly
+          # tag and the newest-name slot on 2026-08-25, this job pinned it at
+          # 04:29, and every signed probe workflow was refused at launch that
+          # morning because the fix on main was not in it. norsk-studio now
+          # refuses to publish `nightly` from anything but main, so the channel is
+          # the trustworthy signal — and this follows it rather than guessing.
+          #
+          # Resolve nightly's digest, then name the version-specific tag carrying
+          # the same digest. The moving tag is not pinnable itself: it moves under
+          # you, and a launch has to record the exact image it ran.
+          hub="https://hub.docker.com/v2/repositories/norskvideo/norsk-studio"
+          nightly_digest="$(curl -fsSL "$hub/tags/nightly" | jq -r '.digest // empty')"
+          [ -n "$nightly_digest" ] || { echo "could not resolve the norsk-studio nightly tag's digest"; exit 1; }
+          new_studio_img="$(curl -fsSL "$hub/tags?page_size=100&ordering=last_updated" \
+            | jq -r --arg d "$nightly_digest" '.results[] | select(.digest == $d) | .name' \
             | grep -E "^${studio_line}-[0-9]{4}-[0-9]{2}-[0-9]{2}-[0-9a-f]+$" | head -1 || true)"
-          [ -n "$new_studio_img" ] || { echo "no published norsk-studio image on the $studio_line line — npm/docker version lines have diverged"; exit 1; }
+          [ -n "$new_studio_img" ] || {
+            echo "norsk-studio nightly ($nightly_digest) has no version-specific tag on the $studio_line line."
+            echo "Either the npm and docker version lines have diverged, or nightly has moved to a"
+            echo "different line than the npm nightly ($new_studio_lib). Not guessing — fix the channel."
+            exit 1
+          }
           echo "studio lib:   ${old_studio_lib:-<no npm pins>} -> $new_studio_lib"
           echo "studio image: $old_studio_img -> $new_studio_img"
           if [ "$old_studio_img" != "$new_studio_img" ]; then

package/create-product/backend-turnkey.ts

@@ -696,6 +696,7 @@ function productTemplateTs(ctx: ShapeContext): string {
 // @norskvideo/ctl-product-template-schema/pack — this repo carries no copy of
 // the wire format.
 import {
+  ProductTemplateAdvancedSchema,
   type ProductTemplateManifest,
   type ProductTemplateMaterials,
   type ProductTemplateParameter,
@@ -712,8 +713,26 @@ export type BuildOpts = {
   // buildStudioLibrary(). Required — the production composer is the builder.
   library?: ComponentLibrary;
   generatedAt?: Date;
+  // Create-time custom defaults from the build form's disclosure, merged
+  // per-knob over STANDARD_ADVANCED_OVERRIDES into manifest.advanced.
+  advanced?: ProductTemplateManifest["advanced"];
 };
 
+// The build form rides its Custom defaults as a reserved $advancedDefaults
+// sibling of the config keys; the config schema is strict, so split it off
+// before the parse. Absent key = plain config passthrough.
+export function splitAdvancedDefaults(
+  body: unknown,
+):
+  | { ok: true; config: unknown; advanced?: ProductTemplateManifest["advanced"] }
+  | { ok: false; issues: unknown[] } {
+  if (typeof body !== "object" || body === null || !("$advancedDefaults" in body)) return { ok: true, config: body };
+  const { $advancedDefaults: raw, ...config } = body as Record<string, unknown>;
+  const parsed = ProductTemplateAdvancedSchema.safeParse(raw);
+  if (!parsed.success) return { ok: false, issues: parsed.error.issues };
+  return { ok: true, config, advanced: parsed.data };
+}
+
 const STUDIO_DEFAULT_HOST_PORT = 18000;
 
 export function buildProductTemplateMaterials(config: ProductConfig, opts: BuildOpts = {}): ProductTemplateMaterials {
@@ -734,7 +753,7 @@ export function buildProductTemplateMaterials(config: ProductConfig, opts: Build
       // proxy. Narrow as the product grows a surface of its own.
       expose: ["/", "/static/*", "/api/*", "/live/api/*", "/ws", "/ws/*"],
     },
-    advanced: { ...STANDARD_ADVANCED_OVERRIDES },
+    advanced: { ...STANDARD_ADVANCED_OVERRIDES, ...opts.advanced },
   };
 
   return {
@@ -1066,7 +1085,7 @@ export const openapiRouter = createOpenapiRouter(buildOpenApiYaml);
 }
 
 function routesProductTemplateTs(ctx: ShapeContext): string {
-  return `import { buildProductTemplateMaterials } from "${ctx.scope}/shared/product-template";
+  return `import { type BuildOpts, buildProductTemplateMaterials, splitAdvancedDefaults } from "${ctx.scope}/shared/product-template";
 import { ProductConfigSchema } from "${ctx.scope}/shared/schemas";
 import { packProductTemplate } from "@norskvideo/ctl-product-template-schema/pack";
 import type { ComponentLibrary } from "@norskvideo/norsk-studio-builder";
@@ -1083,14 +1102,19 @@ const STARTER_CONFIGS: Record<string, unknown> = {
 export function makeProductTemplateRouter(library: ComponentLibrary): Router {
   const router = Router();
 
-  const sendTemplate = (res: Parameters<Parameters<Router["get"]>[1]>[1], raw: unknown, filename: string) => {
+  const sendTemplate = (
+    res: Parameters<Parameters<Router["get"]>[1]>[1],
+    raw: unknown,
+    filename: string,
+    advanced?: BuildOpts["advanced"],
+  ) => {
     const parsed = ProductConfigSchema.safeParse(raw);
     if (!parsed.success) {
       res.status(400).json({ error: "invalid config", issues: parsed.error.issues });
       return;
     }
     try {
-      const materials = buildProductTemplateMaterials(parsed.data, { library });
+      const materials = buildProductTemplateMaterials(parsed.data, { library, advanced });
       const tar = packProductTemplate(materials);
       res
         .status(200)
@@ -1105,9 +1129,15 @@ export function makeProductTemplateRouter(library: ComponentLibrary): Router {
     }
   };
 
-  // POST /api/product-template — build a tar from an arbitrary ProductConfig.
+  // POST /api/product-template — build a tar from an arbitrary ProductConfig,
+  // optionally carrying create-time custom defaults as $advancedDefaults.
   router.post("/product-template", (req, res) => {
-    sendTemplate(res, req.body, "${ctx.name}.tar");
+    const split = splitAdvancedDefaults(req.body);
+    if (!split.ok) {
+      res.status(400).json({ error: "invalid $advancedDefaults", issues: split.issues });
+      return;
+    }
+    sendTemplate(res, split.config, "${ctx.name}.tar", split.advanced);
   });
 
   // GET /api/product-template/<slug> — the runner GETs these at product-add

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@norskvideo/ctl-dev-kit",
-  "version": "0.1.40",
+  "version": "0.1.42",
   "type": "module",
   "exports": {
     "./package.json": "./package.json",