@usenavii/core 0.5.0 → 0.6.0

package/CHANGELOG.md

@@ -6,6 +6,60 @@ Format: [Keep a Changelog](https://keepachangelog.com/en/1.1.0/). Versioning: [S
 
 ## [Unreleased]
 
+## [0.23.1] - 2026-05-26
+
+### Fixed (release)
+- `@usenavii/react` workspace dep on `@usenavii/core` updated to `^0.6.0` — v0.23.0 release workflow failed pnpm install with `ERR_PNPM_NO_MATCHING_VERSION_INSIDE_WORKSPACE` because the workspace spec was stuck at `^0.5.0`. v0.23.1 reships the v0.23.0 feature set (mood overlay + runtime palette injection) with the dep bump.
+
+## [0.23.0] - 2026-05-26 (yanked — release pipeline failed)
+
+### Added (`@usenavii/core` 0.6.0, `@usenavii/react` 0.6.0)
+- **`AvatarOptions.mood`** — new `MoodId = 'neutral' | 'happy' | 'serious' | 'sleepy' | 'wink'`. Overrides seed-derived eyes + mouth with a curated pair: `happy` → wide + smile, `serious` → squint + flat, `sleepy` → sleepy + dot, `wink` → wink + smirk. Same seed + same mood = byte-identical render. Different mood on the same seed shares body / palette / topper. Bypasses pack pick constraints by design (the mood IS the override). `neutral` (or undefined) preserves prior behavior.
+- **Runtime palette injection in `build()`** — `options.palette` (Palette object) now wins over `spec.palette` (id). Lets callers pass a brand or runtime-built palette without registering it in `PALETTES`. Fall-through: `options.palette` → `spec.palette` id → `PALETTES[0]`.
+- **React `<Navii>`** forwards new `mood` and `palette` props through to the engine; `MoodId` re-exported from the React package.
+
+### Added (API host)
+- `GET /avatar/:seed?mood=happy|serious|sleepy|wink|neutral` — server-side mood overlay. PNG cache key extended with `m=` so moods don't collide.
+
+
+
+### Added (API host)
+- Elorm UI logo (inline SVG, `currentColor`) in the landing "built with navii" wall, sized via new `.logo svg.lg` rule.
+
+## [0.22.4] - 2026-05-26
+
+### Fixed (Figma plugin)
+- **Missing `permissions: ["teamlibrary"]`** in `manifest.json`. Without it, `figma.teamLibrary.getAvailableLibraryVariableCollectionsAsync()` throws and Brand mode silently returns an empty palette list for every Pro user. Added.
+- **`innerHTML` interpolation** of `pack.name` and `pack.emoji` replaced with `createElement` + `textContent` (ui.ts, active-packs chip + pack-card title). XSS surface closed even though current pack data is static.
+- **`doInsertBuild` new-node path** now wrapped in try/catch — uncaught throw from `figma.createNodeFromSvg` would otherwise kill the plugin's main thread.
+
+### Removed (Figma plugin)
+- **Cmd+Shift+P dev-bypass shortcut** that unlocked Pro features for free. Violated Figma's review policy (hidden functionality circumventing fees). Deleted entirely; only the Cmd+Enter primary-action shortcut remains.
+
+### Changed (Figma plugin)
+- **License key no longer crosses the iframe boundary.** Main thread sends a sanitized `publicLicenseView()` over `figma.ui.postMessage`. The raw key stays in the main thread (needed for re-verify) + `figma.clientStorage` only. UI never sees or stores the key string.
+
+### Fixed (build pipeline)
+- **`scripts/build.mjs`** stopped escaping `<script` (without `/`). Per HTML5 only `</script` ends a script block; the extra replace could corrupt minified regex/string literals containing the substring. Only `</script` is escaped now.
+
+## [0.22.3] - 2026-05-26
+
+### Fixed (API host)
+- `/license/verify` blocked by CORS when called from the Figma plugin iframe (`Origin: null` preflight). Added permissive CORS middleware (route only accepts a license key — no cookies/auth — so wide-open CORS is safe) plus an `OPTIONS` preflight handler. Plugin verify flow now reaches the API end-to-end.
+
+## [0.22.2] - 2026-05-26
+
+### Added (API host)
+- `GET /thanks` — post-purchase confirmation page Polar redirects buyers to after successful checkout. Confirms payment, points them to their email for the license key, and links to the Polar customer portal via the one-time `customer_session_token` query param.
+
+### Fixed (API host)
+- Buyers hit a 404 at `https://navii.dev/thanks` after paying because no route existed yet.
+
+## [0.22.1] - 2026-05-26
+
+### Changed (API host)
+- Support email switched from `tsormed@gmail.com` to `support@navii.dev` (ImprovMX free-tier forward → tsormed@gmail.com).
+
 ## [0.22.0] - 2026-05-26
 
 ### Added (`@usenavii/core` 0.5.0)
@@ -119,7 +173,11 @@ Deployment-only release. No changes to `@usenavii/core` or `@usenavii/react` (bo
 - React binding: `<Navii seed="..." />`.
 - Dual ESM/CJS build via tsup. TypeScript types included.
 
-[Unreleased]: https://github.com/uxderrick/navii/compare/v0.22.0...HEAD
+[Unreleased]: https://github.com/uxderrick/navii/compare/v0.22.4...HEAD
+[0.22.4]: https://github.com/uxderrick/navii/compare/v0.22.3...v0.22.4
+[0.22.3]: https://github.com/uxderrick/navii/compare/v0.22.2...v0.22.3
+[0.22.2]: https://github.com/uxderrick/navii/compare/v0.22.1...v0.22.2
+[0.22.1]: https://github.com/uxderrick/navii/compare/v0.22.0...v0.22.1
 [0.22.0]: https://github.com/uxderrick/navii/compare/v0.21.2...v0.22.0
 [0.21.2]: https://github.com/uxderrick/navii/compare/v0.21.1...v0.21.2
 [0.21.1]: https://github.com/uxderrick/navii/compare/v0.21.0...v0.21.1

package/dist/index.cjs

@@ -1339,6 +1339,18 @@ function resolvePacks(ids) {
 }
 
 // src/select.ts
+var MOOD_EYES = {
+  happy: "wide",
+  serious: "squint",
+  sleepy: "sleepy",
+  wink: "wink"
+};
+var MOOD_MOUTH = {
+  happy: "smile",
+  serious: "flat",
+  sleepy: "dot",
+  wink: "smirk"
+};
 function applyStyleHint(pool, packs, hint, partKey) {
   for (const pack of packs) {
     const subset = pack.styleHints?.[hint]?.[partKey];
@@ -1400,10 +1412,13 @@ function selectAvatar(seed2, options = {}) {
     topperPool = applyStyleHint(topperPool, enabledPacks, styleHint, "topper");
   }
   const body = rng.pick(bodyPool);
-  const eyes = rng.pick(eyesPool);
-  const mouth = rng.pick(mouthPool);
+  const eyesPicked = rng.pick(eyesPool);
+  const mouthPicked = rng.pick(mouthPool);
   const antenna = rng.pick(antennaPool);
   const accessory = rng.pick(accessoryPool);
+  const mood = options.mood;
+  const eyes = mood && mood !== "neutral" ? MOOD_EYES[mood] : eyesPicked;
+  const mouth = mood && mood !== "neutral" ? MOOD_MOUTH[mood] : mouthPicked;
   let background;
   if (typeof options.background === "string") {
     background = options.background;
@@ -1674,7 +1689,7 @@ function seed(fields) {
 
 // src/build.ts
 function build(spec = {}, options = {}) {
-  const palette = spec.palette ? PALETTE_BY_ID[spec.palette] ?? PALETTES[0] : PALETTES[0];
+  const palette = options.palette ?? (spec.palette ? PALETTE_BY_ID[spec.palette] ?? PALETTES[0] : PALETTES[0]);
   const resolved = {
     seed: "__build__",
     palette,