paneltir 0.7.0 → 0.9.0

package/dist/style.css

@@ -841,6 +841,128 @@
   color: var(--pt-color-success);
 }
 
+/* src/components/Setup/SetupWizard.css */
+.pt-wizard {
+  display: flex;
+  flex-direction: column;
+  gap: var(--pt-space-lg);
+}
+.pt-wizard__head {
+  display: flex;
+  align-items: baseline;
+  justify-content: space-between;
+  gap: var(--pt-space-sm);
+  flex-wrap: wrap;
+}
+.pt-wizard__progress {
+  margin: 0;
+  font-family: var(--pt-font-mono);
+  font-size: 12px;
+  color: var(--pt-color-ink-faint);
+}
+.pt-wizard__step {
+  padding: var(--pt-space-lg);
+  border: var(--pt-border-width) solid var(--pt-color-line);
+  border-radius: var(--pt-radius-panel);
+  background: var(--pt-color-panel);
+}
+.pt-wizard__step--done {
+  border-color: var(--pt-color-success);
+}
+.pt-wizard__now {
+  margin: 0 0 var(--pt-space-xs);
+  font-size: 11px;
+  letter-spacing: var(--pt-label-tracking);
+  text-transform: uppercase;
+  color: var(--pt-color-ink-faint);
+}
+.pt-wizard__label {
+  margin: 0 0 var(--pt-space-xs);
+  font-size: 16px;
+  color: var(--pt-color-ink);
+}
+.pt-wizard__var {
+  margin: 0 0 var(--pt-space-sm);
+  font-family: var(--pt-font-mono);
+  font-size: 12.5px;
+  color: var(--pt-color-accent);
+  overflow-wrap: anywhere;
+}
+.pt-wizard__enables {
+  margin: 0 0 var(--pt-space-sm);
+  font-size: 13px;
+  line-height: 1.5;
+  color: var(--pt-color-ink-dim);
+}
+.pt-wizard__fix {
+  font-size: 13px;
+  line-height: 1.55;
+  color: var(--pt-color-ink-dim);
+}
+.pt-wizard__fix ol,
+.pt-wizard__fix ul {
+  margin: 0;
+  padding-left: 18px;
+}
+.pt-wizard__fix li {
+  margin-bottom: 4px;
+}
+.pt-wizard__fix code,
+.pt-wizard__prompt {
+  font-family: var(--pt-font-mono);
+  background: var(--pt-color-raised);
+  color: var(--pt-color-ink);
+  border-radius: var(--pt-radius-square);
+  overflow-wrap: anywhere;
+}
+.pt-wizard__fix code {
+  font-size: 12px;
+  padding: 1px 5px;
+}
+.pt-wizard__actions {
+  display: flex;
+  align-items: center;
+  gap: var(--pt-space-sm);
+  flex-wrap: wrap;
+  margin-top: var(--pt-space-md);
+}
+.pt-wizard__said {
+  margin: 0;
+  font-size: 12.5px;
+  color: var(--pt-color-warning);
+}
+.pt-wizard__verify {
+  margin: var(--pt-space-sm) 0 0;
+  padding-left: 18px;
+  font-size: 13px;
+  line-height: 1.55;
+  color: var(--pt-color-ink-dim);
+}
+.pt-wizard__done-title {
+  margin: 0 0 var(--pt-space-xs);
+  font-size: 11px;
+  letter-spacing: var(--pt-label-tracking);
+  text-transform: uppercase;
+  color: var(--pt-color-ink-faint);
+}
+.pt-wizard__done ul {
+  margin: 0;
+  padding-left: 18px;
+  font-size: 13px;
+  color: var(--pt-color-ink-dim);
+}
+.pt-wizard__stuck {
+  padding-top: var(--pt-space-md);
+  border-top: var(--pt-border-width) solid var(--pt-color-line-faint);
+}
+.pt-wizard__prompt {
+  margin: 0 0 var(--pt-space-sm);
+  padding: var(--pt-space-sm);
+  font-size: 12px;
+  line-height: 1.5;
+  white-space: pre-wrap;
+}
+
 /* src/components/Notifications/Notifications.css */
 .pt-bell {
   position: relative;

package/fingerprint.json

@@ -1,7 +1,7 @@
 {
   "name": "paneltir",
-  "version": "0.7.0",
-  "hash": "sha256:406af8c690cfa9b2452360712afff3f3fe9605a7bb0aa834238e5187acfc37c0",
-  "fileCount": 151,
-  "generatedAt": "2026-09-07T12:33:30.026Z"
+  "version": "0.9.0",
+  "hash": "sha256:f65d491a7350ddce22f6981dbcb91531f5e88fc66b7f9f8f83115d802773064f",
+  "fileCount": 161,
+  "generatedAt": "2026-09-10T03:50:24.162Z"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "paneltir",
-  "version": "0.7.0",
+  "version": "0.9.0",
   "description": "A React UI kit for admin panels: page frame, a board with touch-ready drag and drop, detail sheets, and a whole panel in one component. Structure and behaviour are fixed; colour and brand belong to each project.",
   "license": "SEE LICENSE IN LICENSE",
   "author": "DFKlabs (https://DFKlabs.com)",
@@ -64,7 +64,7 @@
     "check:boards": "node scripts/check-boards.mjs",
     "demo:install": "npm --prefix examples/demo ci",
     "demo:build": "npm --prefix examples/demo run build",
-    "verify": "npm run typecheck && npm run build && npm run icons:check && npm run seo:check && npm run test:auth && npm run test:marketplace && npm run test:init && npm run test:board && npm run check:boards && npm run check:docs && npm run check:package && npm run fingerprint:check",
+    "verify": "npm run typecheck && npm run build && npm run icons:check && npm run seo:check && npm run test:auth && npm run test:marketplace && npm run test:init && npm run test:board && npm run test:move && npm run test:theme && npm run test:setup && npm run test:updates && npm run release-notes:check && npm run check:boards && npm run check:docs && npm run check:package && npm run fingerprint:check",
     "site:install": "npm --prefix site ci",
     "site:dev": "npm --prefix site run dev",
     "site:build": "npm --prefix site run build",
@@ -72,7 +72,13 @@
     "check:docs": "node scripts/check-docs.mjs",
     "check:package": "node scripts/check-package.mjs",
     "test:init": "node scripts/test-init.mjs",
-    "test:board": "node scripts/test-board.mjs"
+    "release-notes": "node scripts/release-notes.mjs",
+    "release-notes:check": "node scripts/release-notes.mjs --check",
+    "test:updates": "node scripts/test-updates.mjs",
+    "test:board": "node scripts/test-board.mjs",
+    "test:move": "node scripts/test-move.mjs",
+    "test:theme": "node scripts/test-theme.mjs",
+    "test:setup": "node scripts/test-setup.mjs"
   },
   "peerDependencies": {
     "react": ">=18",
@@ -90,5 +96,39 @@
   },
   "engines": {
     "node": ">=20"
+  },
+  "paneltirRelease": {
+    "version": "0.9.0",
+    "date": "2026-09-10",
+    "entries": [
+      {
+        "kind": "feature",
+        "text": {
+          "en": "A project's own theme can be offered alongside the kit's four instead of replacing them. Pass it as `extraThemes`; `themes` still means \"exactly these\".",
+          "es": "El tema propio de un proyecto puede ofrecerse junto a los cuatro del kit en vez de sustituirlos. Pásalo como `extraThemes`; `themes` sigue significando «exactamente estos»."
+        }
+      },
+      {
+        "kind": "fix",
+        "text": {
+          "en": "A panel that passed one theme of its own showed a settings sheet with a single row: the four presets were silently gone. They are back, and the project's own identity is what the panel opens in.",
+          "es": "Un panel que pasaba un tema propio mostraba un solo tema en los ajustes: los cuatro presets desaparecían sin decir nada. Han vuelto, y el panel abre con la identidad del proyecto."
+        }
+      },
+      {
+        "kind": "fix",
+        "text": {
+          "en": "A theme derived from a project is drawn in the kit's own default shape rather than borrowing the shape of an unrelated theme.",
+          "es": "Un tema derivado de un proyecto se dibuja con la forma por defecto del kit, en vez de tomar prestada la de un tema que no tiene nada que ver."
+        }
+      },
+      {
+        "kind": "chore",
+        "text": {
+          "en": "The install instructions name every theme the kit ships. They named three of four, so the only light one was never offered to a project — and a check now refuses to let that happen again.",
+          "es": "Las instrucciones de instalación nombran todos los temas que trae el kit. Nombraban tres de cuatro, así que el único claro no se ofrecía nunca — y ahora una comprobación impide que vuelva a pasar."
+        }
+      }
+    ]
   }
 }

package/template/.claude/skills/panel/SKILL.md

@@ -132,6 +132,47 @@ Never invent a palette. If the project has no colours of its own, say so and
 leave the theme alone — the kit ships presets for exactly that case, and one
 of them is a light theme.
 
+## Setting the panel up in the first place
+
+The panel is asked for this by name: its walkthrough carries a line the owner
+can paste into a session here, and it points at this file. So when somebody
+arrives asking you to set up the Paneltir panel, this is the answer, and the
+job is to walk them through it rather than to hand them a list.
+
+Four things live in the **hosting environment** — never in this repository, and
+never in the board.
+
+| | What it is | Without it |
+| --- | --- | --- |
+| `ADMIN_PASSWORD` | The panel's password. | The gate answers 503 rather than letting anyone in. It fails closed on purpose: a panel with no password must not become a public one. |
+| `GH_TOKEN` | A GitHub fine-grained token, **Contents: read and write, on this repository only**. | Everything works and Save fails. |
+| `PANEL_REPO` | This project's `owner/repo`. | Save has nowhere to write. There is no default, because writing to the wrong repository is worse than not writing. |
+| `SESSION_SECRET` | Optional; signs the session cookie. Defaults to `ADMIN_PASSWORD`. | Nothing, until the password changes — at which point every session already issued ends, which is usually what was wanted. |
+
+`PANEL_FILE` is there too, and only matters when the board is somewhere other
+than `src/data/panel-state.json`.
+
+Three things are worth saying while you walk somebody through it:
+
+- **Environment variables are read at deploy time.** Adding one to a running
+  deployment changes nothing until it redeploys. More than half of "I added it
+  and it still says missing" is this.
+- **Scope the token to this repository alone.** A token that can write to
+  everything is a token whose blast radius is everything, and this one only
+  ever commits one file.
+- **Check, do not assume.** The panel's Help screen asks the server what is
+  actually set and reports *whether*, never the value. That answer is worth
+  more than a screenshot of a settings page.
+
+Then two things to try before the gate is trusted, because a door nobody has
+pushed is not known to be shut:
+
+1. Open `/admin` signed out. It must land on the sign-in screen.
+2. Signed out, request the panel's own JavaScript bundle. It must answer 401.
+   A page that is protected while its bundle is not leaves the board readable
+   by anyone who opens the HTML — and that is the failure that looks exactly
+   like everything working.
+
 ## When the board will not open
 
 Run `npx paneltir board`. It reads the file and names every problem by