@odla-ai/brand 0.7.0 → 0.7.2

package/README.md

@@ -51,7 +51,7 @@ The package is a **schema + rules + an agent skill + a color engine + a token co
 - **The upload surface is intentionally narrow.** Raster PNG/JPEG/GIF/WebP and
   PDF inputs are supported. SVG active content and binary font files are not;
   typography remains an exact, reviewable family/style proposal.
-- **Tokens compile to the @odla-ai/ui contract.** `compileBrandTokens` maps swatch roles onto `--ui-*` names — always emitting every required token plus the accent-composing derived set, so a scoped preview island never keeps stale root composites — and `renderTokensCss` emits theme-structured CSS (light, dark, invert). Dark is derived algorithmically and contrast re-tuned per token.
+- **Tokens compile to the @odla-ai/ui contract.** `compileBrandTokens` maps swatch roles onto `--ui-*` names — always emitting every required token plus the accent-composing derived set, so a scoped preview island never keeps stale root composites — and `renderTokensCss` emits theme-structured CSS (light, dark, invert). Dark is derived algorithmically and contrast re-tuned per token. A reviewed typography proposal may also carry bounded `tokenOverrides`; those `--ui-*` component and layout values are validated, stored with the approved section, and compiled into both published token maps.
 - **Zero runtime dependencies.** The db client is injected structurally (a real `@odla-ai/db` `AdminDb` satisfies `BrandDb`); `@odla-ai/ai` is a types-only optional peer.
 
 - **Claude Designs are a first-class input.** A design exported from

package/dist/{index-r36KQK5n.d.cts → index-r6SGidYT.d.cts}

@@ -66,13 +66,18 @@ interface PaletteSection {
     name: string;
     swatches: Swatch[];
 }
-/** `typography`-kind section content. `scale` is a modular type-scale ratio. */
+/**
+ * `typography`-kind section content. `scale` is a modular type-scale ratio.
+ * `tokenOverrides` carries bounded `--ui-*` component/layout values through
+ * the same reviewed activation that publishes the font choices.
+ */
 interface TypographySection {
     fontDisplay?: string;
     fontBody?: string;
     fontMono?: string;
     scale?: number;
     notes?: string;
+    tokenOverrides?: Record<string, string>;
 }
 /** `voice`-kind section content: tone plus writing principles/examples. */
 interface VoiceSection {

package/dist/{index-r36KQK5n.d.ts → index-r6SGidYT.d.ts}

@@ -66,13 +66,18 @@ interface PaletteSection {
     name: string;
     swatches: Swatch[];
 }
-/** `typography`-kind section content. `scale` is a modular type-scale ratio. */
+/**
+ * `typography`-kind section content. `scale` is a modular type-scale ratio.
+ * `tokenOverrides` carries bounded `--ui-*` component/layout values through
+ * the same reviewed activation that publishes the font choices.
+ */
 interface TypographySection {
     fontDisplay?: string;
     fontBody?: string;
     fontMono?: string;
     scale?: number;
     notes?: string;
+    tokenOverrides?: Record<string, string>;
 }
 /** `voice`-kind section content: tone plus writing principles/examples. */
 interface VoiceSection {

package/dist/index.cjs

@@ -598,6 +598,7 @@ var DESIGN_CONTENT_TYPES = /* @__PURE__ */ new Set(["text/html"]);
 var HEX_RGB = /^#[0-9a-f]{3}$/;
 var HEX_RRGGBB = /^#[0-9a-f]{6}$/;
 var HEX_ALPHA = /^#[0-9a-f]{4}$|^#[0-9a-f]{8}$/;
+var UI_TOKEN_NAME = /^--ui-[a-z0-9-]+$/;
 var isRecord = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 function assertHex(value, label = "color") {
   if (typeof value !== "string")
@@ -664,6 +665,21 @@ function assertTypographySection(c) {
     out.scale = c.scale;
   }
   if (c.notes !== void 0) out.notes = capString(c.notes, "content.notes", 2e3);
+  if (c.tokenOverrides !== void 0) {
+    if (!isRecord(c.tokenOverrides))
+      throw new BrandInputError("content.tokenOverrides must be an object");
+    const entries = Object.entries(c.tokenOverrides);
+    if (entries.length > 64)
+      throw new BrandInputError("content.tokenOverrides must have at most 64 entries");
+    out.tokenOverrides = Object.fromEntries(entries.map(([name, raw]) => {
+      if (!UI_TOKEN_NAME.test(name))
+        throw new BrandInputError(`content.tokenOverrides.${name} must be a --ui-* token name`);
+      const value = capString(raw, `content.tokenOverrides.${name}`, 500);
+      if (/[;{}]/.test(value) || /url\s*\(/i.test(value))
+        throw new BrandInputError(`content.tokenOverrides.${name} contains an unsafe CSS value`);
+      return [name, value];
+    }));
+  }
   return out;
 }
 function assertVoiceSection(c) {
@@ -4043,7 +4059,8 @@ async function handleDesignPreview(ctx, req, bookId, assetId) {
   const asset = await linkedAsset(ctx, book, assetId);
   if (asset.kind !== DESIGN_ASSET_KIND) throw new BrandNotFoundError(`design ${assetId}`);
   const signed = await ctx.db.storage.sign(asset.path, SIGNED_READ_TTL_SECONDS);
-  const fetched = await ctx.fetchPrivateAsset(signed, {
+  const fetchPrivateAsset = ctx.fetchPrivateAsset;
+  const fetched = await fetchPrivateAsset(signed, {
     headers: { accept: "text/html" },
     redirect: "manual",
     signal: req.signal
@@ -4142,7 +4159,10 @@ var proposalGuardEquals = (snapshot) => ({ ...snapshot });
 
 // src/routes/proposal-effects.ts
 async function tokenSnapshot(swatches, typography, input, paletteId, paletteReceiptId, paletteActionDigest, typographyReceiptId, typographyActionDigest) {
-  const compiled = compileBrandTokens({ swatches, ...typography ? { typography } : {} });
+  const compiled = compileBrandTokens({
+    swatches,
+    ...typography ? { typography, overrides: typography.tokenOverrides } : {}
+  });
   const sources = {
     paletteId,
     paletteReceiptId,
@@ -4928,7 +4948,8 @@ async function handleBrandDiscussionAsset(ctx, req, target) {
     await ctx.db.storage.sign(before.path, SIGN_TTL_SECONDS)
   );
   if (!signed) throw new BrandInputError("private asset signing failed");
-  const response = await ctx.fetchPrivateAsset(signed, {
+  const fetchPrivateAsset = ctx.fetchPrivateAsset;
+  const response = await fetchPrivateAsset(signed, {
     headers: { accept: contentType },
     redirect: "manual",
     signal: req.signal
@@ -5165,7 +5186,10 @@ function createBrandRoutes(options) {
     newId: options.newId ?? (() => crypto.randomUUID()),
     maxUploadBytes: options.maxUploadBytes ?? 8 * 1024 * 1024,
     discussionBasePath: options.discussionBasePath ?? "/",
-    fetchPrivateAsset: options.fetchPrivateAsset ?? fetch,
+    // Bound: this is stored on the context and invoked from route handlers,
+    // where a property call would set the receiver to that context and
+    // Cloudflare's fetch refuses a foreign receiver ("Illegal invocation").
+    fetchPrivateAsset: options.fetchPrivateAsset ?? globalThis.fetch.bind(globalThis),
     previewFrameAncestors: options.previewFrameAncestors ?? ["'self'"]
   };
   return async (req) => {