@riverbankcms/sdk 0.135.1 → 0.137.0

package/CHANGELOG.md

@@ -7,6 +7,120 @@ and then gets the version it went out in.
 
 ## Unreleased
 
+### Theme contract changes (#1318)
+
+- **`saveSiteChromeSelection`'s header body no longer carries a `theme`.** The
+  surface used to send the whole compiled theme alongside `layoutId`, `styleId`
+  and `preferences` — the Phase 4b dual write — and the server compared the two
+  headers and logged a mismatch. The server has been the author of those bytes
+  since 4b, so the second copy was only ever a measurement: it is gone, and with
+  it the `theme:site_chrome_selection:header_compilation_mismatch` log. The
+  footer surface still sends a theme, because a footer save's change *is* a
+  theme. The save response is unchanged and still returns the persisted theme,
+  which is what a client reconciles to.
+
+- **`sdkUpsertTheme`'s update body takes a theme with no `header`.** `POST
+  /sdk/{siteId}/theme` used to accept and persist whatever `theme.header` an SDK
+  consumer sent, which was the last route through which raw header bytes reached
+  persistence. `theme` is now `SdkThemeWireWithoutHeader` (exported from
+  `@riverbankcms/api`), and the header is compiled server-side from the site's
+  stored selection and `header_preferences` against the site style the body
+  authors. A body carrying a `header` is rejected rather than silently stripped.
+  A site whose current theme row cannot be read is refused rather than
+  re-provisioned.
+
+- **`saveSiteTheme`'s body takes a theme with no `header`.** `theme` is now
+  `Omit<Theme, 'header'>` (`ThemeWithoutHeader`, exported from
+  `@riverbankcms/api`), derived at the route from `themeSchema.omit({ header:
+  true })`. The header is compiled server-side from the row's stored selection
+  and `header_preferences`; `headerSelection` still names the selection to
+  compile for. This was the last path by which hand-written header bytes could
+  reach persistence. A save against a site with no current theme selection is
+  now refused with `THEME_SELECTION_NOT_FOUND` rather than falling back to a
+  site-style default, and the header selection it stores is the one the shared
+  pipeline resolves — which applies the site style's **curated** repair, not
+  only the catalogue's. A body naming a (layout, style) pair the site style does
+  not offer now stores the repaired pair, so the persisted ids and the persisted
+  bytes always name the same selection.
+
+- **`HeaderPreferences` gains a required `brandPresentation` field**
+  (`'recommended' | 'plain'`), and `headerPreferencesSchema` requires it. It
+  says whether the header wears a brand presentation block at all. `'plain'` is
+  the state several live rows persist — no `logo` object — which the record
+  could not express before, so a recompile would have given those sites a logo
+  treatment they have never rendered. This is a **widening**: `'recommended'` is
+  the default and reproduces the previous behaviour exactly, and the header
+  parity lockfile is unchanged. Consumers that construct a `HeaderPreferences`
+  literal must add the field; consumers that only read one are unaffected.
+
+- **`readHeaderPreferences` is no longer exported.** It gained a fourth
+  argument — the two headers the brand-presentation modes compile to, because
+  the mode is derived by comparing the persisted `logo` against both — and the
+  type of that argument was never on the package surface, so the export was a
+  function no consumer could call. Deriving a record from persisted bytes goes
+  through `recompileSiteChromeHeaderFromPersistedIntent`, which builds the
+  candidates itself and has always been the supported way to do it.
+
+- **`headerPreferencesWireSchema` is exported alongside `headerPreferencesSchema`.** It is the
+  same record with `brandPresentation` defaulting to `'recommended'`, for bodies arriving from a
+  client build that predates the field. The field is not client-authored — the server reads the
+  mode off the row — so defaulting it on the wire loses nothing, and the persisted schema keeps
+  requiring it so a stored record can never be incomplete.
+
+- **`headerLogoShapeContext` is exported from
+  `@riverbankcms/theme-core/site-styles`.** It is the one definition of "the
+  site's logo as the header pipeline sees it", from an asset (or its absence)
+  and the accommodation the row persists. The dashboard's server lookup and the
+  #1318 Phase 4c migration generator both go through it.
+
+- **`APIEndpoints` no longer carries `createTheme`, and `POST /ai/chat/create-theme`
+  no longer exists.** The endpoint generated theme proposals from a site id and
+  had no caller anywhere — not in the dashboard, not in the SDK's own
+  `PublicAPIEndpoints`, not in the e2e or integration suites. Site creation goes
+  through `generateThemes` (`POST /theme/generate`), which is what the wizard has
+  always called. The `ThemeGenerationTurn` type it was the sole user of is
+  removed with it.
+
+- **`APIEndpoints` no longer carries `generateThemes`, and `POST /theme/generate`
+  no longer exists.** It generated three AI theme proposals for a site, and its
+  only caller was the site-creation wizard's theme step, which no navigation
+  ever reached — the page was reachable only by typing its URL. The step and the
+  whole generator chain behind it are gone. Like `createTheme`, this endpoint is
+  not in `PublicAPIEndpoints`, so the SDK's hand-written public surface is
+  unchanged; what narrows is the bundled `@riverbankcms/api` declarations.
+  `ThemeRow` stays exported from the package — it was only ever this endpoint's
+  response element there, but it is a general row type.
+
+- **`header.maxWidth` is now optional on the way in.** It gained a schema
+  default of `'container'`, so `SdkThemeWire` (`z.input<typeof themeSchema>`)
+  accepts a theme body that omits it, where before the field was required and a
+  body without it failed to parse. This is a widening — every theme that parsed
+  before still parses, and the parsed value is unchanged, since the field only
+  ever holds `'container'` in practice. Nothing authors it any more: the field
+  is layout-owned, and full-bleed headers will come back as a layout facet
+  rather than a free-form value if they are ever wanted.
+
+- **`header.interactionPalette` accepts a fourth value, `'quiet'`.** The header
+  hover-colour vocabulary was `primary | secondary | accent`, all of which fill
+  the nav link with a colour on hover and focus. `'quiet'` means "no fill" — the
+  header style's own hover treatment stands and the palette step writes nothing.
+  This is a widening of the persisted theme enum, so every theme that parsed
+  before still parses and no existing value changes meaning; a consumer that
+  exhaustively switches on the palette needs a branch for it.
+
+### Breaking: manifest content uses explicit trust stages (#1245)
+
+- SDK rendering now exposes `RenderablePageOutline` values whose blocks carry a
+  closed render-admission result. Valid blocks contain renderable content;
+  invalid content or an unavailable manifest remains represented as an invalid
+  block admission so hosts can diagnose it without receiving rejected content.
+- `EditorPageRenderer` is the explicit raw/incomplete editor entrypoint. The
+  production renderer no longer accepts the `usePlaceholders` trust-stage
+  switch.
+- The JSON transport remains record-shaped, but consumers constructing or
+  inspecting renderer page outlines must handle the new admission contract.
+  No deprecated aliases or compatibility mode are retained.
+
 ### Routable content includes native page surfaces (#1332)
 
 - **`RoutableContentItem` is now a discriminated union.** The public routable-

package/README.md

@@ -1135,16 +1135,12 @@ const { baseUrl } = getRiverbankEnv();
   pageId="page-456"
   previewStage="preview"  // or "published"
   client={client}
-
-  // Editor-mid-edit fallback: when strict manifest validation fails (e.g.
-  // a required field is temporarily empty), retry against a relaxed
-  // validator over the same content so valid in-flight fields still
-  // render instead of flipping the block to the red "Invalid content"
-  // fallback. Leave unset (or `false`) for production frontends.
-  usePlaceholders={true}
 />
 ```
 
+`Block` uses strict manifest validation. Editor-owned incomplete draft previews
+must use the editor renderer rather than weakening this production boundary.
+
 ### CTA Links with Page/Entry Identifiers
 
 Block content can reference pages and content entries using stable identifiers instead of UUIDs. These links are resolved at render time:
@@ -2680,7 +2676,7 @@ The optional theme-independent wrapper belongs inside `rendering`: use `runtime:
 
 `SiteResponse.theme` is required but nullable: `Theme | null`. A null value means the CMS has no theme; it does not select a rendering mode. Override-only rendering deliberately ignores it. Themed catch-all rendering first prefers explicit `theme`, `themes`, or `getTheme` inputs, then uses the CMS theme. If none resolves, it throws the exported `MissingSdkThemeError` with code `missing_sdk_theme` before theme parsing or token construction.
 
-The nullable contract must be published before the server stops supplying its temporary fallback. Externally pinned hosts must upgrade to this SDK contract and either opt into override-only rendering or provide a real local/CMS theme before that server cutover.
+The nullable contract was published before the server stopped supplying its temporary fallback. Externally pinned hosts must use that SDK contract and either opt into override-only rendering or provide a real local/CMS theme.
 
 Keep the `server-only` marker at the top of the registry so Next.js turns an accidental Client Component import into a build error. `generateMetadata()` never receives or runs host loaders—even with `customMetadata`—so a normal request does not repeat host queries for metadata and rendering.
 

package/dist/{PreviewEditorSidebar-D4p_5TdY.mjs → PreviewEditorSidebar-Bn6cONPa.mjs}

@@ -1,8 +1,8 @@
 "use client";
-import { $ as FooterComposerPanel, $a as Maximize2, $i as SelectTrigger, A as markApplySaved, B as resetTypographyToSaved, Bt as useEditorUiStoreInstance, C as applyTypographyDraftPatch, Ca as DropdownMenuContent, Ci as updateButtonStyleSelectionChoice, Cr as curatedSiteStyles, D as dismissWarnings, Da as DropdownMenuTrigger, Dr as findFooterLook, E as deriveStyleConfiguratorCapabilities, Ea as DropdownMenuSeparator, En as ThemeScope, F as previewCuratedPalette, Fa as assertNever$1, Fr as curatedPalettes, Ga as Smartphone, H as styleConfiguratorHistoryEntryForPersistedSelection, I as previewFooterLook, Ka as SlidersHorizontal, L as previewHeaderLayout, M as openRow, N as palettePreviewProjection, Na as unsafeAsEditorBlockId, Ni as paletteColorEntries, Nt as BlockEditor, O as isPreviewingChange, Or as getHeaderLayout, P as previewButtonStyle, Pi as paletteColorsSchema, Q as resolvePreviewSidebarTab, Qa as Monitor, Qi as SelectItem, R as previewHeaderStyle, S as applyResolvedSelections, Sa as DropdownMenu, Si as updateButtonStyleHoverPreference, T as createStyleConfiguratorState, Ta as DropdownMenuLabel, Ti as themeButtonClassName, Tr as getCuratedSiteStyle, U as syncStyleConfiguratorState, Ua as Tablet, V as setPaletteColors, W as toggleRow, Xi as Select, Z as createOptimisticActionRunner, Zi as SelectContent, _ as PREVIEW_DESIGN_SAVE_ERROR_MESSAGE, _n as listEntryPageContentSlots, aa as PopoverContent, an as resolveContentTitle, ao as ChevronRight, at as useUISelector, b as cycleSiteChromeSelectionId, ba as CollapsibleTrigger, bi as findButtonStyleRecipe, c as selectionSnapshotFromApplySiteStyleSelectionResponse, ca as Tabs, cn as ManifestForm, co as Check, ct as useEntryController, d as resolveStyleConfiguratorInitialSnapshot, da as TabsTrigger, dn as FormRenderer, ea as SelectValue, eo as LoaderCircle, ia as Popover, in as resolvePageRouteSlug, it as ContentFieldsForm, j as markApplySaving, ja as cn, ji as VARIANT_ROLES, k as markApplyFailed, ka as Button, kr as getHeaderStyle, l as deriveSiteStylePreviewUpdate, la as TabsContent, n as useSiteChromeCustomizeOptional, na as CalloutDescription, oa as PopoverTrigger, oo as ChevronLeft, p as usePreviewDesignCoordinator, pn as createStoreBackend, ra as SearchInput, rn as deriveRouteMetadataPresentation, s as buildApplySiteStyleSelectionBody, sa as Input, so as ChevronDown, ta as Callout, tn as isAdapterReferenceKind, u as planSiteStylePreviewChange, ua as TabsList, un as createManifestValidation, v as reportPreviewDesignError, va as Collapsible, vi as buttonStyleHoverPreferenceValue, w as cancelPreview, wa as DropdownMenuItem, wi as buttonStyleSelectionKey, x as planSiteChromeSelection, xa as Surface, xi as resolveButtonStyleSelection, y as buildSiteChromeSelectionModels, ya as CollapsibleContent, yi as buttonStyleSelectionParameterValue, z as previewSiteStyle, za as X$1, zt as useEditorUiStore } from "./SiteChromeCustomizeContext-61X2m7QV.mjs";
-import { d as unwrapResponse, f as getDashboardUrl, r as usePreviewAuth } from "./previewAuthStore-C7ksxt5b.mjs";
-import { t as Separator } from "./separator-CadhAtI7.mjs";
-import { S as getSiteFontsStorageUrl, _ as usePreviewBlockCustomizeSelectionOptional, b as buildFontPreviewUrl, d as buildPreviewDashboardSetupUrl, f as resolvePreviewDashboardSetupHandoff, g as useBlockCustomizeControls, h as usePreviewSiteFontStorageUrl, m as resolvePreviewSidebarChromeModel, p as resolvePreviewEditorGuidanceModel, u as canInspectSiteStyle, v as PreviewFormProvider, x as generateFontFaceCss, y as previewWidgetOverrides } from "./SdkPreviewModeRuntime-BKLtM3Nz.mjs";
+import { $ as FooterComposerPanel, $a as Monitor, $i as SelectItem, A as markApplySaving, Aa as Button, Ar as getHeaderStyle, B as setPaletteColors, Ba as X$1, Bt as useEditorUiStoreInstance, C as cancelPreview, Ca as DropdownMenu, Ci as updateButtonStyleHoverPreference, D as isPreviewingChange, Da as DropdownMenuSeparator, E as dismissWarnings, Ea as DropdownMenuLabel, Ei as themeButtonClassName, En as ThemeScope, Er as getCuratedSiteStyle, F as previewFooterLook, Fi as paletteColorsSchema, H as syncStyleConfiguratorState, I as previewHeaderLayout, Ia as assertNever$1, Ir as curatedPalettes, Ka as Smartphone, L as previewHeaderStyle, M as palettePreviewProjection, Ma as cn, Mi as VARIANT_ROLES, N as previewButtonStyle, Nt as BlockEditor, O as markApplyFailed, Oa as DropdownMenuTrigger, Or as findFooterLook, P as previewCuratedPalette, Pa as unsafeAsEditorBlockId, Pi as paletteColorEntries, Q as resolvePreviewSidebarTab, Qi as SelectContent, R as previewSiteStyle, S as applyTypographyDraftPatch, Sa as Surface, Si as resolveButtonStyleSelection, T as deriveStyleConfiguratorCapabilities, Ta as DropdownMenuItem, Ti as buttonStyleSelectionKey, U as toggleRow, V as styleConfiguratorHistoryEntryForPersistedSelection, Wa as Tablet, X as resolveStyleConfiguratorInitialSnapshot, Z as createOptimisticActionRunner, Zi as Select, _ as reportPreviewDesignError, _n as listEntryPageContentSlots, aa as Popover, an as resolveContentTitle, at as useUISelector, b as planSiteChromeSelection, ba as CollapsibleContent, bi as buttonStyleSelectionParameterValue, c as selectionSnapshotFromApplySiteStyleSelectionResponse, ca as Input, cn as ManifestForm, co as ChevronDown, ct as useEntryController, da as TabsList, dn as FormRenderer, ea as SelectTrigger, eo as Maximize2, f as usePreviewDesignCoordinator, fa as TabsTrigger, g as PREVIEW_DESIGN_SAVE_ERROR_MESSAGE, ia as SearchInput, in as resolvePageRouteSlug, it as ContentFieldsForm, j as openRow, k as markApplySaved, kr as getHeaderLayout, l as deriveSiteStylePreviewUpdate, la as Tabs, lo as Check, n as useSiteChromeCustomizeOptional, na as Callout, oa as PopoverContent, oo as ChevronRight, pn as createStoreBackend, qa as SlidersHorizontal, ra as CalloutDescription, rn as deriveRouteMetadataPresentation, s as buildApplySiteStyleSelectionBody, sa as PopoverTrigger, so as ChevronLeft, ta as SelectValue, tn as isAdapterReferenceKind, to as LoaderCircle, u as planConfiguratorPreview, ua as TabsContent, un as createManifestValidation, v as buildSiteChromeSelectionModels, w as createStyleConfiguratorState, wa as DropdownMenuContent, wi as updateButtonStyleSelectionChoice, wr as curatedSiteStyles, x as applyResolvedSelections, xa as CollapsibleTrigger, xi as findButtonStyleRecipe, y as cycleSiteChromeSelectionId, ya as Collapsible, yi as buttonStyleHoverPreferenceValue, z as resetTypographyToSaved, zt as useEditorUiStore } from "./SiteChromeCustomizeContext-BbkNSt5a.mjs";
+import { d as unwrapResponse, f as getDashboardUrl, r as usePreviewAuth } from "./previewAuthStore-L_cKW8Sb.mjs";
+import { t as Separator } from "./separator-BIHkie5i.mjs";
+import { S as getSiteFontsStorageUrl, _ as usePreviewBlockCustomizeSelectionOptional, b as buildFontPreviewUrl, d as buildPreviewDashboardSetupUrl, f as resolvePreviewDashboardSetupHandoff, g as useBlockCustomizeControls, h as usePreviewSiteFontStorageUrl, m as resolvePreviewSidebarChromeModel, p as resolvePreviewEditorGuidanceModel, u as canInspectSiteStyle, v as PreviewFormProvider, x as generateFontFaceCss, y as previewWidgetOverrides } from "./SdkPreviewModeRuntime-BbbGsI_v.mjs";
 import React, { createContext, forwardRef, useCallback, useContext, useEffect, useId, useLayoutEffect, useMemo, useRef, useState, useSyncExternalStore, useTransition } from "react";
 import { Fragment as Fragment$1, jsx, jsxs } from "react/jsx-runtime";
 import { useQuery, useQueryClient } from "@tanstack/react-query";
@@ -3670,7 +3670,7 @@ function StyleConfigurator({ siteId, apiClient, theme, selectionId, selectionVer
 			clearPreview("style-configurator");
 			return;
 		}
-		previewTheme("style-configurator", planSiteStylePreviewChange({
+		previewTheme("style-configurator", planConfiguratorPreview({
 			siteStyle,
 			selection: state.previewed,
 			headerLogoContext,
@@ -3706,7 +3706,7 @@ function StyleConfigurator({ siteId, apiClient, theme, selectionId, selectionVer
 			const next = previewSiteStyle(current, siteStyleId);
 			const siteStyle = getCuratedSiteStyle(siteStyleId);
 			if (!siteStyle) return next;
-			const result = planSiteStylePreviewChange({
+			const result = planConfiguratorPreview({
 				siteStyle,
 				selection: next.previewed,
 				headerLogoContext,
@@ -3754,7 +3754,7 @@ function StyleConfigurator({ siteId, apiClient, theme, selectionId, selectionVer
 			if (!current) return current;
 			const siteStyle = getCuratedSiteStyle(current.previewed.siteStyleId);
 			if (!siteStyle) return current;
-			return applyTypographyDraftPatch(current, planSiteStylePreviewChange({
+			return applyTypographyDraftPatch(current, planConfiguratorPreview({
 				siteStyle,
 				selection: current.previewed,
 				headerLogoContext,
@@ -3876,7 +3876,7 @@ function StyleConfigurator({ siteId, apiClient, theme, selectionId, selectionVer
 	});
 	const currentPalette = palettePreviewProjection(state.previewed.palette);
 	const paletteControlsDisabled = saving || !stagedCapabilities.canPreviewStaged;
-	const currentPreviewPlan = planSiteStylePreviewChange({
+	const currentPreviewPlan = planConfiguratorPreview({
 		siteStyle: currentSiteStyle,
 		selection: state.previewed,
 		headerLogoContext,

package/dist/{PreviewEditorUI-D0cRoTX1.mjs → PreviewEditorUI-LAwXZPSx.mjs}

@@ -1,7 +1,7 @@
 "use client";
-import { Aa as cva, At as useEditor, Bt as useEditorUiStoreInstance, Ca as DropdownMenuContent, Da as DropdownMenuTrigger, Ha as TriangleAlert, Ja as Redo2, Ji as TooltipContent, Rt as classifyHistoryShortcut, Sa as DropdownMenu, Va as Undo2, Wa as Sparkles, Xa as PenLine, Xt as useMultiAutosave, Ya as Pencil, Yi as TooltipTrigger, Za as Palette, _a as DialogTitle, a as previewDesignHistoryDomainForCommand, eo as LoaderCircle, fa as Dialog, ga as DialogHeader, i as usePreviewDesignHistoryOrder, io as EllipsisVertical, ja as cn, ka as Button, lt as useEntryEditorController, ma as DialogDescription, n as useSiteChromeCustomizeOptional, o as selectPreviewDesignHistoryDomain, pa as DialogContent, qi as Tooltip, ro as Eye, so as ChevronDown, wa as DropdownMenuItem, zt as useEditorUiStore } from "./SiteChromeCustomizeContext-61X2m7QV.mjs";
-import { d as unwrapResponse, r as usePreviewAuth } from "./previewAuthStore-C7ksxt5b.mjs";
-import { C as FixedBottomSurface, a as usePreviewPageDesignEditorState, c as applyPreviewChromeSurfaceToElement, l as resolvePreviewChromeSurface, o as PREVIEW_CHROME_PORTAL_CLASS_NAME, s as PREVIEW_CHROME_THEME_CLASS_NAME } from "./SdkPreviewModeRuntime-BKLtM3Nz.mjs";
+import { Aa as Button, At as useEditor, Bt as useEditorUiStoreInstance, Ca as DropdownMenu, Ga as Sparkles, Ha as Undo2, Ji as Tooltip, Ma as cn, Oa as DropdownMenuTrigger, Qa as Palette, Rt as classifyHistoryShortcut, Ta as DropdownMenuItem, Ua as TriangleAlert, Xa as Pencil, Xi as TooltipTrigger, Xt as useMultiAutosave, Ya as Redo2, Yi as TooltipContent, Za as PenLine, _a as DialogHeader, a as previewDesignHistoryDomainForCommand, ao as EllipsisVertical, co as ChevronDown, ha as DialogDescription, i as usePreviewDesignHistoryOrder, io as Eye, ja as cva, lt as useEntryEditorController, ma as DialogContent, n as useSiteChromeCustomizeOptional, o as selectPreviewDesignHistoryDomain, pa as Dialog, to as LoaderCircle, va as DialogTitle, wa as DropdownMenuContent, zt as useEditorUiStore } from "./SiteChromeCustomizeContext-BbkNSt5a.mjs";
+import { d as unwrapResponse, r as usePreviewAuth } from "./previewAuthStore-L_cKW8Sb.mjs";
+import { C as FixedBottomSurface, a as usePreviewPageDesignEditorState, c as applyPreviewChromeSurfaceToElement, l as resolvePreviewChromeSurface, o as PREVIEW_CHROME_PORTAL_CLASS_NAME, s as PREVIEW_CHROME_THEME_CLASS_NAME } from "./SdkPreviewModeRuntime-BbbGsI_v.mjs";
 import * as React$1 from "react";
 import { useCallback, useEffect, useMemo, useState, useTransition } from "react";
 import { Fragment as Fragment$1, jsx, jsxs } from "react/jsx-runtime";

package/dist/{PreviewQueryProvider-DcgaESkm.mjs → PreviewQueryProvider-ztQUdsNo.mjs}

@@ -1,5 +1,5 @@
 "use client";
-import { n as markPreviewAuthExpired, s as ApiRequestError } from "./previewAuthStore-C7ksxt5b.mjs";
+import { n as markPreviewAuthExpired, s as ApiRequestError } from "./previewAuthStore-L_cKW8Sb.mjs";
 import { createContext, useContext, useRef } from "react";
 import { jsx } from "react/jsx-runtime";
 import { MutationCache, QueryCache, QueryClient, QueryClientProvider } from "@tanstack/react-query";