@odla-ai/brand 0.7.0 → 0.7.2

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { P as ProposalKind, a as ProposalStatus, A as AssetKind, b as AssetAnalysis, B as BookStatus, c as BrandTokensSnapshot, d as PaletteStatus, S as Swatch, e as PaletteSource, f as SectionKind, g as SectionStatus, h as SwatchRole } from './index-r36KQK5n.cjs';
-export { i as ASSET_KINDS, j as BOOK_STATUSES, k as BRAND_CHART_TOKENS, l as BRAND_CHAT_TOKENS, m as BRAND_DERIVED_TOKENS, n as BRAND_EMITTED_TOKENS, o as BRAND_NS, p as BRAND_REQUIRED_TOKENS, q as BrandTokens, C as CompileInput, r as CompiledBrandTokens, D as DARK_FLIP_L_MAX, s as DARK_FLIP_L_MIN, t as DEFAULT_ACCENT_SEED, u as DESIGN_ASSET_KIND, I as ImagerySection, L as LogoSection, M as MapResult, v as PALETTE_SOURCES, w as PALETTE_STATUSES, x as PROPOSAL_KINDS, y as PROPOSAL_STATUSES, z as PaletteSection, R as ROLE_TOKEN, E as RenderTokensCssOptions, F as SECTION_KINDS, G as SECTION_STATUSES, H as SWATCH_ROLES, T as TokenWarning, J as TypographySection, V as VoiceSection, K as compileBrandTokens, N as deriveDarkTokens, O as mapPaletteToTokens, Q as renderTokensCss } from './index-r36KQK5n.cjs';
+import { P as ProposalKind, a as ProposalStatus, A as AssetKind, b as AssetAnalysis, B as BookStatus, c as BrandTokensSnapshot, d as PaletteStatus, S as Swatch, e as PaletteSource, f as SectionKind, g as SectionStatus, h as SwatchRole } from './index-r6SGidYT.cjs';
+export { i as ASSET_KINDS, j as BOOK_STATUSES, k as BRAND_CHART_TOKENS, l as BRAND_CHAT_TOKENS, m as BRAND_DERIVED_TOKENS, n as BRAND_EMITTED_TOKENS, o as BRAND_NS, p as BRAND_REQUIRED_TOKENS, q as BrandTokens, C as CompileInput, r as CompiledBrandTokens, D as DARK_FLIP_L_MAX, s as DARK_FLIP_L_MIN, t as DEFAULT_ACCENT_SEED, u as DESIGN_ASSET_KIND, I as ImagerySection, L as LogoSection, M as MapResult, v as PALETTE_SOURCES, w as PALETTE_STATUSES, x as PROPOSAL_KINDS, y as PROPOSAL_STATUSES, z as PaletteSection, R as ROLE_TOKEN, E as RenderTokensCssOptions, F as SECTION_KINDS, G as SECTION_STATUSES, H as SWATCH_ROLES, T as TokenWarning, J as TypographySection, V as VoiceSection, K as compileBrandTokens, N as deriveDarkTokens, O as mapPaletteToTokens, Q as renderTokensCss } from './index-r6SGidYT.cjs';
 import { ToolHandler, Skill, ToolDef, Persona, Inference, AgentRunInput, ImageBlock, OracleContentBlock } from '@odla-ai/ai';
 
 /** One entry of the bundle's base64 asset manifest, without its payload. */

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { P as ProposalKind, a as ProposalStatus, A as AssetKind, b as AssetAnalysis, B as BookStatus, c as BrandTokensSnapshot, d as PaletteStatus, S as Swatch, e as PaletteSource, f as SectionKind, g as SectionStatus, h as SwatchRole } from './index-r36KQK5n.js';
-export { i as ASSET_KINDS, j as BOOK_STATUSES, k as BRAND_CHART_TOKENS, l as BRAND_CHAT_TOKENS, m as BRAND_DERIVED_TOKENS, n as BRAND_EMITTED_TOKENS, o as BRAND_NS, p as BRAND_REQUIRED_TOKENS, q as BrandTokens, C as CompileInput, r as CompiledBrandTokens, D as DARK_FLIP_L_MAX, s as DARK_FLIP_L_MIN, t as DEFAULT_ACCENT_SEED, u as DESIGN_ASSET_KIND, I as ImagerySection, L as LogoSection, M as MapResult, v as PALETTE_SOURCES, w as PALETTE_STATUSES, x as PROPOSAL_KINDS, y as PROPOSAL_STATUSES, z as PaletteSection, R as ROLE_TOKEN, E as RenderTokensCssOptions, F as SECTION_KINDS, G as SECTION_STATUSES, H as SWATCH_ROLES, T as TokenWarning, J as TypographySection, V as VoiceSection, K as compileBrandTokens, N as deriveDarkTokens, O as mapPaletteToTokens, Q as renderTokensCss } from './index-r36KQK5n.js';
+import { P as ProposalKind, a as ProposalStatus, A as AssetKind, b as AssetAnalysis, B as BookStatus, c as BrandTokensSnapshot, d as PaletteStatus, S as Swatch, e as PaletteSource, f as SectionKind, g as SectionStatus, h as SwatchRole } from './index-r6SGidYT.js';
+export { i as ASSET_KINDS, j as BOOK_STATUSES, k as BRAND_CHART_TOKENS, l as BRAND_CHAT_TOKENS, m as BRAND_DERIVED_TOKENS, n as BRAND_EMITTED_TOKENS, o as BRAND_NS, p as BRAND_REQUIRED_TOKENS, q as BrandTokens, C as CompileInput, r as CompiledBrandTokens, D as DARK_FLIP_L_MAX, s as DARK_FLIP_L_MIN, t as DEFAULT_ACCENT_SEED, u as DESIGN_ASSET_KIND, I as ImagerySection, L as LogoSection, M as MapResult, v as PALETTE_SOURCES, w as PALETTE_STATUSES, x as PROPOSAL_KINDS, y as PROPOSAL_STATUSES, z as PaletteSection, R as ROLE_TOKEN, E as RenderTokensCssOptions, F as SECTION_KINDS, G as SECTION_STATUSES, H as SWATCH_ROLES, T as TokenWarning, J as TypographySection, V as VoiceSection, K as compileBrandTokens, N as deriveDarkTokens, O as mapPaletteToTokens, Q as renderTokensCss } from './index-r6SGidYT.js';
 import { ToolHandler, Skill, ToolDef, Persona, Inference, AgentRunInput, ImageBlock, OracleContentBlock } from '@odla-ai/ai';
 
 /** One entry of the bundle's base64 asset manifest, without its payload. */

package/dist/index.js

@@ -463,6 +463,7 @@ var DESIGN_CONTENT_TYPES = /* @__PURE__ */ new Set(["text/html"]);
 var HEX_RGB = /^#[0-9a-f]{3}$/;
 var HEX_RRGGBB = /^#[0-9a-f]{6}$/;
 var HEX_ALPHA = /^#[0-9a-f]{4}$|^#[0-9a-f]{8}$/;
+var UI_TOKEN_NAME = /^--ui-[a-z0-9-]+$/;
 var isRecord = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 function assertHex(value, label = "color") {
   if (typeof value !== "string")
@@ -529,6 +530,21 @@ function assertTypographySection(c) {
     out.scale = c.scale;
   }
   if (c.notes !== void 0) out.notes = capString(c.notes, "content.notes", 2e3);
+  if (c.tokenOverrides !== void 0) {
+    if (!isRecord(c.tokenOverrides))
+      throw new BrandInputError("content.tokenOverrides must be an object");
+    const entries = Object.entries(c.tokenOverrides);
+    if (entries.length > 64)
+      throw new BrandInputError("content.tokenOverrides must have at most 64 entries");
+    out.tokenOverrides = Object.fromEntries(entries.map(([name, raw]) => {
+      if (!UI_TOKEN_NAME.test(name))
+        throw new BrandInputError(`content.tokenOverrides.${name} must be a --ui-* token name`);
+      const value = capString(raw, `content.tokenOverrides.${name}`, 500);
+      if (/[;{}]/.test(value) || /url\s*\(/i.test(value))
+        throw new BrandInputError(`content.tokenOverrides.${name} contains an unsafe CSS value`);
+      return [name, value];
+    }));
+  }
   return out;
 }
 function assertVoiceSection(c) {
@@ -2953,7 +2969,8 @@ async function handleDesignPreview(ctx, req, bookId, assetId) {
   const asset = await linkedAsset(ctx, book, assetId);
   if (asset.kind !== DESIGN_ASSET_KIND) throw new BrandNotFoundError(`design ${assetId}`);
   const signed = await ctx.db.storage.sign(asset.path, SIGNED_READ_TTL_SECONDS);
-  const fetched = await ctx.fetchPrivateAsset(signed, {
+  const fetchPrivateAsset = ctx.fetchPrivateAsset;
+  const fetched = await fetchPrivateAsset(signed, {
     headers: { accept: "text/html" },
     redirect: "manual",
     signal: req.signal
@@ -3052,7 +3069,10 @@ var proposalGuardEquals = (snapshot) => ({ ...snapshot });
 
 // src/routes/proposal-effects.ts
 async function tokenSnapshot(swatches, typography, input, paletteId, paletteReceiptId, paletteActionDigest, typographyReceiptId, typographyActionDigest) {
-  const compiled = compileBrandTokens({ swatches, ...typography ? { typography } : {} });
+  const compiled = compileBrandTokens({
+    swatches,
+    ...typography ? { typography, overrides: typography.tokenOverrides } : {}
+  });
   const sources = {
     paletteId,
     paletteReceiptId,
@@ -3838,7 +3858,8 @@ async function handleBrandDiscussionAsset(ctx, req, target) {
     await ctx.db.storage.sign(before.path, SIGN_TTL_SECONDS)
   );
   if (!signed) throw new BrandInputError("private asset signing failed");
-  const response = await ctx.fetchPrivateAsset(signed, {
+  const fetchPrivateAsset = ctx.fetchPrivateAsset;
+  const response = await fetchPrivateAsset(signed, {
     headers: { accept: contentType },
     redirect: "manual",
     signal: req.signal
@@ -4075,7 +4096,10 @@ function createBrandRoutes(options) {
     newId: options.newId ?? (() => crypto.randomUUID()),
     maxUploadBytes: options.maxUploadBytes ?? 8 * 1024 * 1024,
     discussionBasePath: options.discussionBasePath ?? "/",
-    fetchPrivateAsset: options.fetchPrivateAsset ?? fetch,
+    // Bound: this is stored on the context and invoked from route handlers,
+    // where a property call would set the receiver to that context and
+    // Cloudflare's fetch refuses a foreign receiver ("Illegal invocation").
+    fetchPrivateAsset: options.fetchPrivateAsset ?? globalThis.fetch.bind(globalThis),
     previewFrameAncestors: options.previewFrameAncestors ?? ["'self'"]
   };
   return async (req) => {