@typeroll/mcp-server 0.45.77 → 0.45.80

package/skills/tr-new-site.md

@@ -5,6 +5,42 @@ description: Use when the user wants to create a new Typeroll site from scratch,
 
 # Bootstrap a new Typeroll site
 
+## Site tokens before block overrides
+
+Core 0.2.106 / template capabilities 0.54.0 adds palette names in all colour
+fields and named typography/spacing steps. Check the connected capability
+version; on older renderers use `var(--color-surface)` rather than a bare name.
+
+Set colours and font families in site settings, then use named styles and
+palette names in blocks. Do not write hex, rgb or font-family literals in block
+content. Prefer `primary`, `secondary`, `accent`, `background`, `surface`, `text`,
+`text_light`, and `on_primary`/`on_secondary`/`on_accent` for text on brand colours.
+Use `surface_hover` for a darker interactive surface (derived automatically
+unless explicitly configured). Existing semantic roles should be reused; a
+new visual shade is not automatically a new semantic role. For a derived shade
+use `color-mix(in srgb, var(--color-surface) 92%, var(--color-primary))`.
+For an additional role not in the native palette, define a named site style
+or a site CSS variable derived from existing palette variables, and document it.
+
+Choose `heading`, `body` or `mono` for fonts. Font families belong only in the
+site's `fonts` settings. Use type-size steps `xs`, `sm`, `md`, `lg`, `xl`, `2xl`,
+`3xl`; spacing `none`, `xs`, `sm`, `md`, `lg`, `xl`; line height `tight`, `snug`,
+`normal`, `relaxed`, `loose`. Presentation fields accept responsive maps of these
+names, for example `font_size_px: {mobile: "md", desktop: "lg"}`. Read the field
+schema: counts, widths and breakpoints are not spacing steps. Pixel values are
+explicit exceptions, not the default authoring method. Configure scales in
+`design_scales`, then reuse them in role styles and blocks.
+
+Record deliberate exceptions in `decisions.md`, with source/block, reason and
+review criteria (for example white text on a photograph). Run `lint_design_tokens`
+before launch and after major design changes. It warns, never blocks launch.
+Use the starter's `scripts/typeroll/color_tokens.py` for an exact-match dry run;
+review the plan before applying it in a dedicated Version. Equal hex values can
+mean different roles: never automatically choose between background and text.
+Verify a primary/surface change in a test Version across header, footer, cards,
+menus and buttons, then restore the test settings. Do not republish automatically.
+
+
 > **The buffer model (draft writes).** Every content write in this recipe
 > (pages, blocks and partials) lands in an unsaved per-doc
 > DRAFT — deploys and plain previews only see SAVED content. For recipe-style
@@ -165,7 +201,7 @@ it there.
 ### 3. Header + footer partials
 
 **Start from the native preset — don't hand-roll navigation.** Read
-`tr-header-footer` and use its `template/site_logo` + `core/navigation`
+`tr-header-footer` and use its `template/site_logo` + `core/navigation_menu` with `core/navigation_links` slots
 composition. The server-rendered landmark, current-page state, no-JS links,
 mobile disclosure, focus treatment, and responsive behavior are Core
 contracts rather than tenant CSS/JavaScript.
@@ -202,7 +238,7 @@ on a block *inside* the section instead):
 
 ```json
 [
-  { "type": "core/section", "data": { "background": "#ffffff", "padding_y": "lg" }, "children": [
+  { "type": "core/section", "data": { "background": "surface", "padding_y": "lg" }, "children": [
     { "type": "core/media_card", "data": {
         "image": "MEDIA_URL", "image_alt": "…", "image_side": "right",
         "heading": "Huvudrubriken", "heading_level": "h2",
@@ -269,12 +305,10 @@ passing the whole tree inline (`block={ type: 'core/columns', slots:
 slot_index=0|1`. Requires template_capabilities_version ≥ 0.15.2 — on
 older sites use `core/grid` (children flow into columns) instead.
 
-Partial last rows (template_capabilities_version ≥ 0.16.5): when N equal
-cards don't divide by the grid's column count (5 cards, 3 cols), set
-`last_row: 'center'` on the `core/grid` — the orphan row auto-centers.
-NEVER invent a "wide" variant of one peer card to fill the hole, and
-don't hand-roll 6-column CSS tricks; both distort content to patch
-layout. On older sites, pick a column count that divides N.
+Partial last rows: keep `last_row: 'start'` on `core/grid`. Incomplete rows
+stay left-aligned, preserving the reading edge. Center only after an explicit
+owner design request, never as an automatic fix. Do not widen one peer card
+or invent six-column CSS to fill a gap.
 
 Icons (template_capabilities_version ≥ 0.16.0): `type: 'icon'` fields on
 `core/icon`, `core/icon_box`, and `core/step_card` render inline SVG when

package/skills/tr-starter-design.md

@@ -5,6 +5,42 @@ description: Reference for the default design new Typeroll sites start with —
 
 # Starter design system
 
+## Site tokens before block overrides
+
+Core 0.2.106 / template capabilities 0.54.0 adds palette names in all colour
+fields and named typography/spacing steps. Check the connected capability
+version; on older renderers use `var(--color-surface)` rather than a bare name.
+
+Set colours and font families in site settings, then use named styles and
+palette names in blocks. Do not write hex, rgb or font-family literals in block
+content. Prefer `primary`, `secondary`, `accent`, `background`, `surface`, `text`,
+`text_light`, and `on_primary`/`on_secondary`/`on_accent` for text on brand colours.
+Use `surface_hover` for a darker interactive surface (derived automatically
+unless explicitly configured). Existing semantic roles should be reused; a
+new visual shade is not automatically a new semantic role. For a derived shade
+use `color-mix(in srgb, var(--color-surface) 92%, var(--color-primary))`.
+For an additional role not in the native palette, define a named site style
+or a site CSS variable derived from existing palette variables, and document it.
+
+Choose `heading`, `body` or `mono` for fonts. Font families belong only in the
+site's `fonts` settings. Use type-size steps `xs`, `sm`, `md`, `lg`, `xl`, `2xl`,
+`3xl`; spacing `none`, `xs`, `sm`, `md`, `lg`, `xl`; line height `tight`, `snug`,
+`normal`, `relaxed`, `loose`. Presentation fields accept responsive maps of these
+names, for example `font_size_px: {mobile: "md", desktop: "lg"}`. Read the field
+schema: counts, widths and breakpoints are not spacing steps. Pixel values are
+explicit exceptions, not the default authoring method. Configure scales in
+`design_scales`, then reuse them in role styles and blocks.
+
+Record deliberate exceptions in `decisions.md`, with source/block, reason and
+review criteria (for example white text on a photograph). Run `lint_design_tokens`
+before launch and after major design changes. It warns, never blocks launch.
+Use the starter's `scripts/typeroll/color_tokens.py` for an exact-match dry run;
+review the plan before applying it in a dedicated Version. Equal hex values can
+mean different roles: never automatically choose between background and text.
+Verify a primary/surface change in a test Version across header, footer, cards,
+menus and buttons, then restore the test settings. Do not republish automatically.
+
+
 A reference for the *default* design that ships with new Typeroll sites.
 The customer may have replaced it — always inspect the actual header partial
 (`read_partial partial_id="header"`) and an existing page before assuming any

package/workspace-templates/qa/checklist.md

@@ -0,0 +1,52 @@
+# Verification
+
+- Confirm Organization, Site, Version and deployed/source identity.
+- Run `python3 scripts/typeroll/check_unsaved.py` before trigger_deploy. Review
+  and explicitly save authorized Pages and partials; templates save immediately.
+- Compare preserved text with capture_text.cjs + compare_text.py and an explicit
+  selector. Check intentional additions, source comments and images separately.
+- Inspect desktop/mobile previews and actual hosted output around breakpoints.
+  Use shootframe.cjs / shoot_hosted.cjs and inspect full screenshots, not only tiles.
+- Exercise menus, keyboard focus, current links, forms and enabled app states.
+  Use card-stacking-check.cjs for whole-card excerpt/media/whitespace targets.
+- Check actual contrast on light/dark/photo backgrounds, image subjects and
+  sharpness, footer balance, left-aligned last rows and heading hierarchy.
+- Check home title/suffix, metadata, canonical/indexing policy and JSON-LD.
+- Run check_url_parity.py and check_assets.py on the deployed candidate; compare
+  final targets with the approved URL map and flatten accidental redirect chains.
+- Treat 403/network/DNS failures as unverified. Do not claim search-bot access
+  from a user-agent string or turn off customer protection without approval.
+- Record tested pages, viewports, revision, results and unresolved issues per QA
+  round. Record product defects in qa/typeroll-platform-feedback.md.
+- Keep screenshots and private runtime reports in ignored qa/reports/.
+- Check publishing readiness and migration launch report. Passing technical
+  validation does not prove visual/editorial completeness or grant launch approval.
+
+Commands/dependencies/limits: scripts/README.md. Design: workflows/design.md.
+Follow existing owner authorization; test publication, traffic cutover and
+indexing have distinct effects but do not require repeated approval if covered.
+
+
+- [ ] Check heading role spacing, slot gap and responsive vertical padding in the browser.
+- [ ] Review global/current navigation colors against the real parent background.
+- [ ] Check intrinsic-width image and full-image hero framing at breakpoint boundaries.
+- [ ] Test click-to-load video with keyboard; no provider request before activation.
+- [ ] Review matched drafts, unpublished targets and redirect chains before launch.
+- [ ] Explicitly save working copies, or obtain approval to publish saved content only.
+
+## Design tokens (Core 0.2.106+)
+
+- [ ] Run `lint_design_tokens` before launch and after major design changes.
+- [ ] Review hardcoded colours, fonts and sizes; record justified exceptions in decisions.md.
+- [ ] Dry-run colour migration; do not infer semantic roles from equal hex values.
+- [ ] Change primary and surface in a test Version: header, footer, cards, menus and buttons follow without block edits at mobile/tablet/desktop widths. Restore the test settings.
+- [ ] Report actual versus simulated before/after counts separately; do not claim a migration was applied from a dry run.
+
+- [ ] Before source retirement, review workflows/source-media.md: unused originals,
+  print files, private archive manifest, verified copies and a restore test.
+- [ ] Review ICC-converted derivatives visually; preserve originals separately.
+- [ ] Verify Analytics configuration and actual beacon/cookie behavior after build.
+- [ ] Read domain publication intent before deployment; distinguish test-host
+  updates, future-host candidates and explicit traffic approval.
+- [ ] Inspect the frozen candidate's noindex/robots output, not only current CMS settings.
+- [ ] Review owner facts and dates against the chosen preserve/renew text policy.

package/workspace-templates/qa/typeroll-platform-feedback.md

@@ -0,0 +1,11 @@
+# Platform feedback
+
+Record site-specific observations here, without credentials or private exports.
+
+| ID | Priority | Surface / version | Observation | Evidence | Workaround | Status |
+| --- | --- | --- | --- | --- | --- | --- |
+
+For each finding record expected versus actual behavior, minimal reproduction,
+Site/Version, page/block locator, relevant schema, tested widths, source revision
+and whether it blocks launch. Distinguish bugs, capabilities, instructions and
+project choices. Link upstream fixes; verify deployed output before closing them.

package/workspace-templates/scripts/README.md

@@ -0,0 +1,111 @@
+# Repeatable site QA
+
+These optional tools supplement MCP and the platform's publication validator.
+They do not publish, change DNS, approve a launch or replace visual review.
+Python tools use the standard library except contact_sheet.py (Pillow). Browser
+tools require Node.js 22+, Playwright and its Chromium browser. From scripts/typeroll:
+
+```sh
+npm install --no-save --package-lock=false playwright
+npx playwright install chromium
+```
+
+Run the commands below from the **workspace root**. Inject TYPEROLL_API_KEY through
+your private credential manager. Never put it in a file or command argument.
+trlib.py reads portal, organization_id, site_id and version from typeroll.json,
+checks the connected Site/Organization, discovers the live tool schema, and
+passes the Version where supported. It refuses unversioned operations on a
+non-main binding; use the explicit interactive API workflow for organization or
+shared media operations instead. It is a small hosted MCP helper for API keys,
+not a replacement OAuth client or a new general CRUD CLI. REST is also supported
+by Typeroll if your integration already uses it.
+
+## Before publication
+
+```sh
+python3 scripts/typeroll/check_unsaved.py
+```
+
+Exit 1 lists unsaved Pages **and partials**. Review those changes; save only the
+work authorized for this publication, then run again. Templates save immediately.
+A working-copy preview is not proof of saved output. Never auto-save other work.
+
+## After an authorized publication
+
+```sh
+python3 scripts/typeroll/check_url_parity.py https://YOUR-TEST-HOST
+python3 scripts/typeroll/check_assets.py https://YOUR-TEST-HOST
+node scripts/typeroll/shoot_hosted.cjs https://YOUR-TEST-HOST qa/reports/hosted /,/about/ 390 768 1023 1024 1280
+node scripts/typeroll/card-stacking-check.cjs https://YOUR-TEST-HOST/listing/ 390
+```
+
+URL parity reads every migration inventory page and observed spelling, skips
+explicit exclusions unless --show-excluded, keeps origins/query parameters,
+detects loops and flags chains beyond a single redirect (one initial slash
+normalization is allowed). This does **not** prove the final destination is the
+editorially correct page: compare with the approved URL map too. No inventory
+is a failure, not a passing zero-row check. Asset QA uses resolved routes,
+checks published/unlisted Pages, relative URLs, srcset and downloads, uses four
+concurrent HEAD requests and falls back to GET when HEAD is unsupported. CSS
+backgrounds, authenticated assets and dynamically loaded resources need browser QA.
+Neither tool spoofs a search crawler. A 403/DNS/network failure is unverified;
+inspect access policy rather than treating it as a broken migration or a pass.
+
+## Other helpers
+
+- `call.py TOOL '{"argument":"value"}'`: raw MCP result; use `-` to read JSON
+  from stdin. Mutating tools require the same owner authorization as interactive
+  calls. Network failures are not automatically retried for mutations.
+- `trlib.upload(path, content_type, alt)`: direct signed upload and mandatory
+  finalize SHA-256 verification. No image bytes pass through the model or Git.
+- `sweep_blocks.example.py`: dry-run grid normalization across Pages, templates
+  and partials. Review before --apply; refuses to commit existing unsaved work.
+  It is not transactional: a failure can leave a partial draft; inspect before retry.
+- `shootframe.cjs OUT-PREFIX SIGNED-PREVIEW-URL [widths...]`: selects only the
+  Typeroll preview iframe, reports fonts/hosts/overflow. Signed URLs are secrets;
+  pass privately, never paste into committed reports or shell history. Direct-frame
+  capture checks rendering only; test Extension storage/navigation/handoffs in
+  the original wrapper because those features depend on its parent bridge.
+- `layout_trace.cjs URL [width] [selector]`: computed spacing of ancestors and
+  next section. Works with a direct page or Typeroll preview.
+- `contact_sheet.py OUT-PREFIX COLS TILE-WIDTH PNG...`: Pillow contact sheets.
+  It crops tall screenshots; inspect full screenshots too.
+- `capture_text.cjs URL qa/reports/text.json 'main .article-content'` followed by
+  `compare_text.py sources/private/page.html qa/reports/text.json --source-title 'Title'`:
+  word/punctuation diff. A saved single WP REST record (.json) is another source
+  adapter. Select exactly the preserved region, including its template-owned
+  title once. Deliberate shared additions need separate acceptance. Comments,
+  scripts and styles are excluded from source text. It never edits content.
+
+Browser reports exit nonzero for missing images, overflow, unexpected H1 count,
+failed requests or incomplete scrolling. They keep third-party failures visible.
+Network checks retry only a bounded read. All reports, screenshots and source
+exports stay under ignored qa/reports/ or sources/private/. Do not commit signed
+URLs, personal data or customer assets. Adapt scripts deliberately and run tests
+before applying broad changes. The workspace updater preserves your edits.
+
+## Palette migration (Core 0.2.106 / MCP 0.45.80+)
+
+`color_tokens.py --plan /tmp/design-token-plan.json` runs the read-only
+`lint_design_tokens` audit and lists unambiguous direct block hex replacements.
+Review the plan and remove deliberate exceptions. `--apply /tmp/design-token-plan.json`
+requires the same site/palette and a dedicated non-main Version without existing
+working copies. Pause other editing in that Version during the run: ordinary
+field writes do not provide a site-wide transaction. The script refuses stale
+values, never retries uncertain writes, and never publishes. On an interruption,
+inspect working copies before saving or resuming. Templates save immediately.
+
+Ambiguous colours, nested/responsive colour maps and custom CSS are reported for
+manual review rather than rewritten. API updates through the normal block tools
+can resolve these after choosing the semantic role. Run lint again and compare
+header, footer, navigation, cards and buttons at all breakpoints. Keep generated
+plans outside Git; they are version-specific review artifacts.
+
+## Local image preparation
+
+`prepare_image.py SOURCE OUTPUT.jpg` requires Pillow with ImageCms. It converts
+through the original ICC profile to sRGB and applies orientation, without
+uploading or changing CMS content. Missing CMYK profiles, transparency, multiple
+frames and existing output files stop with an error. `--assume-srgb` is only for
+reviewed unprofiled RGB/gray; `--source-profile FILE.icc` supplies the actual profile.
+See workflows/source-media.md for archive verification and original preservation.

package/workspace-templates/scripts/typeroll/browser.cjs

@@ -0,0 +1,50 @@
+// Isolated QA browser only. Never persist storage state, cookies or signed URLs.
+const { chromium } = require('playwright');
+const fs = require('node:fs/promises');
+const path = require('node:path');
+async function open(page, url) {
+  await page.goto(url, { waitUntil: 'domcontentloaded', timeout: 60000 });
+  // Select only Typeroll's own preview, never an arbitrary ad/video iframe.
+  const frame = page.locator('iframe[title="Preview"], iframe[title="Site preview"]');
+  if (await frame.count() === 1) {
+    await page.waitForFunction(() => document.querySelector('iframe[title="Preview"], iframe[title="Site preview"]')?.getAttribute('src'), null, { timeout: 15000 });
+    const src = await frame.getAttribute('src');
+    if (!src) throw Error('Preview frame has no source');
+    const target = new URL(src, page.url());
+    if (target.origin !== new URL(page.url()).origin) throw Error('Unexpected preview frame origin');
+    await page.goto(target.href, { waitUntil: 'domcontentloaded', timeout: 60000 });
+  }
+  await page.evaluate(() => document.fonts.ready);
+}
+async function settle(page) {
+  // Bounded for infinite-scroll pages; report coverage rather than hanging.
+  for (let y = 0; y < 30000; y += 600) {
+    await page.evaluate(y => scrollTo(0, y), y);
+    await page.waitForTimeout(100);
+    if (y + 900 >= await page.evaluate(() => document.documentElement.scrollHeight)) break;
+  }
+  await page.evaluate(() => scrollTo(0, 0));
+  await page.waitForTimeout(300);
+}
+async function inspect(page) {
+  return page.evaluate(() => ({
+    overflow: document.documentElement.scrollWidth > innerWidth,
+    h1: document.querySelectorAll('h1').length,
+    title: document.title,
+    robots: document.querySelector('meta[name="robots"]')?.content ?? null,
+    fonts: { body: getComputedStyle(document.body).fontFamily, heading: getComputedStyle(document.querySelector('h1') || document.body).fontFamily },
+    incompleteImages: [...document.images].filter(i => !i.complete || !i.naturalWidth).map(i => new URL(i.currentSrc || i.src, location.href).pathname),
+    scrollCoverageComplete: document.documentElement.scrollHeight <= 30000,
+  }));
+}
+async function screenshot(page, file) {
+  await fs.mkdir(path.dirname(file), { recursive: true });
+  await page.screenshot({ path: file, fullPage: true, animations: 'disabled' });
+}
+function widths(args) {
+  const values = (args.length ? args : ['390', '768', '1023', '1024', '1280']).map(Number);
+  if (values.some(w => !Number.isInteger(w) || w < 240 || w > 4000)) throw Error('Invalid viewport width');
+  return values;
+}
+function fail() { console.error('QA failed; inspect the target privately. URLs and credentials are withheld.'); process.exitCode = 2; }
+module.exports = { chromium, open, settle, inspect, screenshot, widths, fail };

package/workspace-templates/scripts/typeroll/call.py

@@ -0,0 +1,12 @@
+"""One MCP call; output can contain private data. Do not commit it."""
+import argparse
+import json
+import sys
+import trlib
+
+parser = argparse.ArgumentParser(description=__doc__)
+parser.add_argument('tool')
+parser.add_argument('arguments', nargs='?', default='{}', help='JSON or - for stdin')
+args = parser.parse_args()
+value = json.loads(sys.stdin.read() if args.arguments == '-' else args.arguments)
+print(json.dumps(trlib.call(args.tool, value), ensure_ascii=False, indent=2))

package/workspace-templates/scripts/typeroll/capture_text.cjs

@@ -0,0 +1,17 @@
+// Explicit selector avoids silently excluding the wrong column/sidebar.
+const qa = require('./browser.cjs');
+const fs = require('node:fs/promises');
+const [url, out, selector = 'main'] = process.argv.slice(2);
+(async () => {
+  const browser = await qa.chromium.launch();
+  try {
+    const page = await browser.newPage();
+    await qa.open(page, url); await qa.settle(page);
+    const target = page.locator(selector);
+    if (await target.count() !== 1) throw Error('Select exactly one content region');
+    const value = await target.evaluate(el => ({ text: el.innerText,
+      images: [...el.querySelectorAll('img')].map(i => ({ alt: i.alt, path: new URL(i.currentSrc || i.src, location.href).pathname })) }));
+    await fs.mkdir(require('node:path').dirname(out), { recursive: true });
+    await fs.writeFile(out, JSON.stringify(value, null, 2));
+  } finally { await browser.close(); }
+})().catch(qa.fail);

package/workspace-templates/scripts/typeroll/card-stacking-check.cjs

@@ -0,0 +1,27 @@
+// Check every whole-card target, including excerpt/media/meta, without navigating.
+const qa = require('./browser.cjs');
+const [url, width = '390'] = process.argv.slice(2);
+(async () => {
+  const browser = await qa.chromium.launch();
+  try {
+    const page = await browser.newPage({ viewport: { width: qa.widths([width])[0], height: 900 } });
+    await qa.open(page, url);
+    const cards = page.locator('[data-block="post_card"][data-whole="true"]');
+    const report = [];
+    for (let index = 0; index < await cards.count(); index++) {
+      const card = cards.nth(index);
+      await card.scrollIntoViewIfNeeded();
+      report.push(await card.evaluate(card => {
+        const link = card.querySelector('.block-postcard-title > a');
+        const targets = [card, ...card.querySelectorAll('.block-postcard-excerpt,.block-postcard-meta,.block-postcard-media')];
+        const hits = targets.filter(el => el.getBoundingClientRect().height > 0).map(el => {
+          const r = el.getBoundingClientRect(), x = r.left + r.width / 2, y = r.top + r.height / 2;
+          return { part: el.className || 'card', inViewport: y >= 0 && y < innerHeight, linked: document.elementFromPoint(x, y)?.closest('a') === link };
+        });
+        return { block: card.dataset.blockId || card.dataset.bid || null, title: link?.textContent, hits };
+      }));
+    }
+    console.log(JSON.stringify(report, null, 2));
+    if (!report.length || report.some(r => r.hits.some(h => !h.inViewport || !h.linked))) process.exitCode = 1;
+  } finally { await browser.close(); }
+})().catch(qa.fail);

package/workspace-templates/scripts/typeroll/check_assets.py

@@ -0,0 +1,72 @@
+"""Check published page assets, including relative URLs and srcset. CSS backgrounds need visual QA."""
+import argparse
+import concurrent.futures
+from html.parser import HTMLParser
+import json
+import urllib.parse
+import trlib
+from check_url_parity import origin, fetch, probe
+
+
+class Assets(HTMLParser):
+    def __init__(self, base):
+        super().__init__(convert_charrefs=True)
+        self.base, self.urls = base, set()
+
+    def handle_starttag(self, tag, attrs):
+        data = dict(attrs)
+        values = []
+        if tag in ('img', 'source', 'video', 'audio', 'script'):
+            values.extend(data[k] for k in ('src', 'poster') if data.get(k))
+        if tag == 'link' and data.get('rel') == 'stylesheet':
+            values.append(data.get('href', ''))
+        href = data.get('href', '')
+        if tag == 'a' and ('download' in data or urllib.parse.urlsplit(href).path.lower().endswith(('.pdf', '.jpg', '.jpeg', '.png', '.webp', '.avif', '.svg', '.zip'))):
+            values.append(href)
+        if data.get('srcset') and not data['srcset'].strip().startswith('data:'):
+            values.extend(item.strip().split()[0] for item in data['srcset'].split(',') if item.strip())
+        for value in values:
+            url = urllib.parse.urljoin(self.base, value)
+            if urllib.parse.urlsplit(url).scheme in ('http', 'https'):
+                self.urls.add(url)
+
+
+def check(url):
+    status, location, _ = fetch(url, 'HEAD')
+    # HEAD is not supported everywhere; redirects must resolve too.
+    if status in (405, 501) or location:
+        status = probe(url).get('status', 0)
+    return {'url': url, 'status': status, 'ok': status == 200}
+
+
+def main():
+    parser = argparse.ArgumentParser(description=__doc__)
+    parser.add_argument('origin', type=origin)
+    args = parser.parse_args()
+    pages = [p for p in trlib.all_pages() if p.get('status') in ('published', 'unlisted')]
+    errors, assets = [], set()
+    for page in pages:
+        if not page.get('url'):
+            errors.append({'page_id': page['id'], 'error': 'missing_resolved_route'})
+            continue
+        route = urllib.parse.urlsplit(page['url'])
+        url = args.origin + (route.path or '/') + ('?' + route.query if route.query else '')
+        evidence = probe(url, expected_page=True)
+        if not evidence.get('ok'):
+            errors.append({'page_id': page['id'], **evidence})
+            continue
+        status, _, body = fetch(evidence['final_url'])
+        if status != 200:
+            errors.append({'page_id': page['id'], 'status': status})
+            continue
+        parser = Assets(evidence['final_url'])
+        parser.feed(body.decode('utf8', 'replace'))
+        assets.update(parser.urls)
+    with concurrent.futures.ThreadPoolExecutor(max_workers=4) as pool:
+        results = list(pool.map(check, sorted(assets)))
+    print(json.dumps({'pages': len(pages), 'page_errors': errors, 'assets': results}, indent=2))
+    return 1 if not pages or errors or any(not item['ok'] for item in results) else 0
+
+
+if __name__ == '__main__':
+    raise SystemExit(main())

package/workspace-templates/scripts/typeroll/check_unsaved.py

@@ -0,0 +1,13 @@
+"""Pre-deploy gate: list every Page and partial with an unsaved working copy (Page templates save immediately).
+Deploys build saved content only, and previews with include_working_copy hide the difference.
+usage: python3 scripts/typeroll/check_unsaved.py   (exit 1 when something is unsaved)"""
+import os, sys
+sys.path.insert(0, os.path.dirname(os.path.abspath(__file__)))
+import trlib
+SITE = trlib.site_id()
+bad = [t for t in trlib.containers() if t["kind"] != "template"
+       and trlib.call("read_working_copy", {"site_id": SITE, "target": t}).get("working_copy")]
+for t in bad:
+    print("unsaved:", t["kind"], t["id"])
+print("unsaved total:", len(bad))
+sys.exit(1 if bad else 0)

package/workspace-templates/scripts/typeroll/check_url_parity.py

@@ -0,0 +1,74 @@
+"""Read-only URL continuity check on an explicitly supplied deployed origin."""
+import argparse
+import json
+import urllib.error
+import urllib.parse
+import urllib.request
+import trlib
+
+UA = 'Typeroll-Starter-QA/1.0 (+https://typeroll.com/docs/)'
+
+
+def fetch(url, method='GET'):
+    request = urllib.request.Request(url, method=method, headers={'User-Agent': UA})
+    for attempt in range(2):
+        try:
+            with urllib.request.build_opener(trlib.NoRedirect).open(request, timeout=30) as response:
+                return response.status, response.headers.get('Location'), response.read() if method == 'GET' else b''
+        except urllib.error.HTTPError as error:
+            if error.code in (502, 503, 504) and attempt == 0:
+                continue
+            return error.code, error.headers.get('Location'), b''
+        except (OSError, TimeoutError):
+            if attempt:
+                return 0, None, b''
+
+
+def origin(value):
+    parsed = urllib.parse.urlsplit(value)
+    if parsed.scheme not in ('http', 'https') or not parsed.netloc or parsed.username or parsed.password or parsed.query or parsed.fragment or parsed.path not in ('', '/'):
+        raise ValueError('Supply a plain deployed HTTP(S) origin')
+    return value.rstrip('/')
+
+
+def probe(url, expected_page=False):
+    initial, seen, hops = url, set(), []
+    for _ in range(6):
+        if url in seen:
+            return {'error': 'redirect_loop', 'hops': hops}
+        seen.add(url)
+        status, location, _ = fetch(url)
+        if status not in (301, 302, 303, 307, 308) or not location:
+            slash = bool(hops) and urllib.parse.urlsplit(initial)._replace(path=urllib.parse.urlsplit(initial).path.rstrip('/')) == urllib.parse.urlsplit(hops[0])._replace(path=urllib.parse.urlsplit(hops[0]).path.rstrip('/'))
+            maximum = 1 if expected_page else 2 if slash else 1
+            acceptable_page_hop = not expected_page or not hops or (len(hops) == 1 and slash)
+            ok = status == 200 and len(hops) <= maximum and acceptable_page_hop
+            return {'ok': ok, 'status': status, 'hops': hops, 'final_url': url}
+        url = urllib.parse.urljoin(url, location)
+        if urllib.parse.urlsplit(url).scheme not in ('http', 'https'):
+            return {'error': 'unsupported_redirect_scheme', 'hops': hops}
+        hops.append(url)
+    return {'error': 'too_many_redirects', 'hops': hops}
+
+
+def main():
+    parser = argparse.ArgumentParser(description=__doc__)
+    parser.add_argument('origin', type=origin)
+    parser.add_argument('--show-excluded', action='store_true')
+    args = parser.parse_args()
+    report = []
+    for row in trlib.all_migration_urls():
+        if row.get('status') == 'excluded' and not args.show_excluded:
+            continue
+        for path in sorted(set([row['path']] + (row.get('observed_paths') or []))):
+            # Inventory spellings must be paths, not a silent change of tested host.
+            if not path.startswith('/') or path.startswith('//'):
+                raise ValueError('Inventory contains a non-local path')
+            url = args.origin + urllib.parse.quote(path, safe='/%?=&:+')
+            report.append({'path': path, **probe(url, row.get('status') == 'migrated')})
+    print(json.dumps(report, indent=2))
+    return 1 if not report or any(not row.get('ok') for row in report) else 0
+
+
+if __name__ == '__main__':
+    raise SystemExit(main())