smoodly 0.0.24 → 0.0.25

package/dist/admin/forms/time-zone-context.js

@@ -0,0 +1,15 @@
+"use client";
+import { jsx as _jsx } from "react/jsx-runtime";
+// The site's time zone from the registry (spec 2026-09-25 date pickers
+// §5), for the datetime widget. Undefined = none configured: the widget
+// falls back to the browser's zone and says so. Defaults to undefined so
+// a form rendered without the shell (tests, a bare page) still works.
+import { createContext, useContext } from "react";
+const Ctx = createContext(undefined);
+export function TimeZoneProvider({ zone, children }) {
+    return _jsx(Ctx.Provider, { value: zone, children: children });
+}
+/** The configured zone, or undefined. */
+export function useTimeZone() {
+    return useContext(Ctx);
+}

package/dist/admin/forms/useRichtextEditor.js

@@ -28,7 +28,16 @@ const EMPTY = { type: "doc", content: [{ type: "paragraph" }] };
 const LEVELS = [1, 2, 3, 4, 5, 6];
 const isDoc = (v) => !!v && typeof v === "object" && v.type === "doc";
 export function useRichtextEditor({ value, toolset, onChange, contentClass, onEscape }) {
-    const allowed = useMemo(() => allowedOf(toolset), [toolset]);
+    // Keyed by content, not identity: the registry crosses the server → client
+    // boundary and is re-serialized whenever the route's server tree renders
+    // again — every autosave does that, since the op is a Server Action that
+    // expires the page's cache tag — so `toolset` arrives as a new object with
+    // the same content. On identity TipTap rebuilt the editor after each save,
+    // dropping its undo history and the focus (found 2026-09-26: cmd-Z did
+    // nothing once the first autosave had landed). The elements list is made
+    // stable the same way in ElementsProvider.
+    const toolsetKey = JSON.stringify(toolset ?? null);
+    const allowed = useMemo(() => allowedOf(toolset), [toolsetKey]); // eslint-disable-line react-hooks/exhaustive-deps
     const elements = useElements();
     const assets = useAssets();
     const items = useMemo(() => insertItems(allowed, elements), [allowed, elements]);

package/dist/admin/next/bridge.d.ts

@@ -1 +1,2 @@
-export declare function EditorBridge(): null;
+import { type ReactElement } from "react";
+export declare function EditorBridge(): ReactElement;

package/dist/admin/next/bridge.js

@@ -1,16 +1,32 @@
 "use client";
+import { jsx as _jsx } from "react/jsx-runtime";
 // Runs INSIDE the draft-route iframe (glue adds it only when draft mode +
 // the editor param are on). Reports geometry — section nodes, empty zones
 // and, since spec 2026-09-10, every marked field with its resolved path —
 // forwards select/hover with the field under the pointer, executes
 // refresh/scroll, and says when a render has committed. The admin overlay
-// draws all chrome. Rects are in document coordinates: the iframe is sized
+// draws all chrome — bar one rule this component renders: a section that
+// renders nothing (a fresh custom section, an all-optional section left
+// empty) is stamped blank and takes a min-height, so the editor can see
+// and select it; the live site never mounts the bridge, so it keeps its
+// true height. Rects are in document coordinates: the iframe is sized
 // to the full document height by the editor, so client rects + scroll
 // offsets map 1:1 onto the overlay.
 import { useEffect } from "react";
 import { useRouter } from "next/navigation";
-import { EDITOR_ATTR, FIELD_ATTR, NODE_ATTR, ZONE_ATTR, resolveMarkPath } from "../../marks.js";
+import { BLANK_ATTR, EDITOR_ATTR, FIELD_ATTR, NODE_ATTR, ZONE_ATTR, resolveMarkPath } from "../../marks.js";
 const post = (m) => window.parent.postMessage(m, "*");
+/** The height of an md-spaced section with nothing inside (3.5rem + 3.5rem). */
+// The editor sizes the iframe to the reported height; the document's own
+// viewport must never scroll (2026-09-26): a fractional content height
+// (4595.3px in a 4595px frame) left it scrollable by a hair, and a
+// trackpad scroll over the canvas showed the frame's overlay scrollbar.
+// Hidden overflow drops no layout — programmatic scrollIntoView still
+// works, and the live site never mounts this.
+const BRIDGE_CSS = `html{overflow:hidden}[${NODE_ATTR}][${BLANK_ATTR}]{min-height:7rem}`;
+const MEDIA = "img,picture,video,audio,svg,canvas,iframe,object";
+/** No visible text (innerText skips <style> and hidden content) and no media. */
+const isBlank = (el) => el.innerText.trim() === "" && el.querySelector(MEDIA) === null;
 export function EditorBridge() {
     const router = useRouter();
     // Every commit of this component — the mount, then each RSC refresh,
@@ -28,7 +44,19 @@ export function EditorBridge() {
         const report = () => {
             // Array.from, not spread: the package's lib set is ES2020 + DOM
             // (no DOM.Iterable), so a NodeList isn't statically iterable here.
-            const nodes = all(`[${NODE_ATTR}]`).map((el) => ({ id: el.getAttribute(NODE_ATTR), ...docRect(el) }));
+            const roots = all(`[${NODE_ATTR}]`);
+            // Stamp before measuring, so the min-height is in the rects; only on a
+            // change, so the attribute mutation this causes converges instead of looping.
+            for (const el of roots) {
+                const blank = isBlank(el);
+                if (blank !== el.hasAttribute(BLANK_ATTR)) {
+                    if (blank)
+                        el.setAttribute(BLANK_ATTR, "");
+                    else
+                        el.removeAttribute(BLANK_ATTR);
+                }
+            }
+            const nodes = roots.map((el) => ({ id: el.getAttribute(NODE_ATTR), ...docRect(el) }));
             const emptyZones = all(`[${ZONE_ATTR}]`).map((el) => ({ zone: el.getAttribute(ZONE_ATTR), ...docRect(el) }));
             const fields = [];
             for (const el of all(`[${FIELD_ATTR}]`)) {
@@ -39,7 +67,9 @@ export function EditorBridge() {
                 if (mark)
                     fields.push({ ...mark, ...docRect(el) });
             }
-            post({ source: "smoodly", kind: "rects", nodes, emptyZones, fields, docH: document.documentElement.scrollHeight });
+            // Rounded up from the fractional box, so the frame is never a hair too short.
+            const docH = Math.ceil(Math.max(document.documentElement.scrollHeight, document.documentElement.getBoundingClientRect().height));
+            post({ source: "smoodly", kind: "rects", nodes, emptyZones, fields, docH });
         };
         const raf = () => requestAnimationFrame(report);
         const ro = new ResizeObserver(raf);
@@ -93,5 +123,5 @@ export function EditorBridge() {
             window.removeEventListener("message", onMessage);
         };
     }, [router]);
-    return null;
+    return _jsx("style", { "data-smoodly-bridge": "", children: BRIDGE_CSS });
 }

package/dist/admin/ops-impl.js

@@ -11,6 +11,7 @@ import { CUSTOM_NODE_TYPE, customSchema } from "../custom/index.js";
 import { SETTINGS_KEY, CSS_KEY } from "../global.js";
 import { withDefaults } from "../field-defaults.js";
 import { elementSchemas } from "../richtext-walk.js";
+import { SCHEMA_VERSION } from "../schema-version.js";
 const ok = (data) => ({ ok: true, data });
 /** A history row without its content (spec 2026-09-13 history §6). */
 const summary = ({ id, savedAt }) => ({ id, savedAt });
@@ -926,6 +927,9 @@ export function createAdminOps(deps) {
                 return ok(null);
             }),
         },
+        schema: {
+            status: () => guard(async () => ok({ database: await pages.schemaVersion(), required: SCHEMA_VERSION })),
+        },
         preview: {
             enable: () => guard(async () => (await effects?.draft?.enable(), ok(null))),
             disable: () => guard(async () => (await effects?.draft?.disable(), ok(null))),

package/dist/admin/ops.d.ts

@@ -98,6 +98,11 @@ export type MembersListResult = {
     members: MemberRecord[];
     consoleUrl: string | null;
 };
+/** `database` null = no smoodly_meta table (older than v1). Behind blocks the shell; ahead is silent (spec 2026-09-26 §5). */
+export type SchemaStatus = {
+    database: number | null;
+    required: number;
+};
 export type AdminOps = {
     pages: {
         /** Lists every node, materializing fixed pages and collection mounts (in every supported locale) first. */
@@ -210,6 +215,10 @@ export type AdminOps = {
         /** Admins only, self-host only; the same two guards. The Auth account stays. */
         remove(userId: string): Promise<OpResult<null>>;
     };
+    schema: {
+        /** Every member. The shell calls it once on mount and blocks when behind. */
+        status(): Promise<OpResult<SchemaStatus>>;
+    };
     preview: {
         enable(): Promise<OpResult<null>>;
         disable(): Promise<OpResult<null>>;

package/dist/admin/serialize.d.ts

@@ -74,6 +74,8 @@ export type AdminRegistry = {
         default: string;
         supported: string[];
     };
+    /** The site's time zone when configured (spec 2026-09-25 date pickers §5); the datetime widget edits in it. */
+    timeZone?: string;
     /** The project's custom-CSS flag (spec 2026-09-14 §4). */
     css: boolean;
     /** Which slug the site root serves. */

package/dist/admin/serialize.js

@@ -104,6 +104,7 @@ export function serializeAdminConfig(config) {
         },
         css: config.css,
         locales: config.locales,
+        ...(config.timeZone !== undefined ? { timeZone: config.timeZone } : {}),
         homePageSlug: config.homePageSlug,
         pageDepth: config.pageDepth,
         media: { maxSize: config.media.maxSize, accept: [...config.media.accept] },

package/dist/admin/shell/AdminApp.js

@@ -24,6 +24,7 @@ import { LoginView } from "./LoginView.js";
 import { SetPasswordView } from "./SetPasswordView.js";
 import { useAdminSession } from "./session.js";
 import { IconRail } from "./IconRail.js";
+import { ConfirmHost } from "../ui/ConfirmDialog.js";
 import { useRoute } from "./router.js";
 import { AdminPathProvider } from "./base.js";
 import { mountMismatch } from "../../admin-path.js";
@@ -33,6 +34,9 @@ import { MediaScreen } from "./MediaScreen.js";
 import { SettingsView } from "./SettingsView.js";
 import { AssetsProvider } from "../forms/assets-context.js";
 import { ElementsProvider } from "../forms/elements-context.js";
+import { TimeZoneProvider } from "../forms/time-zone-context.js";
+import { SchemaNotice } from "./SchemaNotice.js";
+import { schemaBehind } from "../../schema-version.js";
 export function AdminApp({ registry, op, auth }) {
     const session = useAdminSession(auth);
     const [ops] = useState(() => makeClientOps(op, session.token));
@@ -57,6 +61,22 @@ export function AdminApp({ registry, op, auth }) {
             setRole("editor"); });
         return () => { live = false; };
     }, [signedIn, ops]);
+    // The one version check (spec 2026-09-26 §5): behind blocks the shell,
+    // equal or ahead renders as usual. Unknown until it answers; a failed
+    // call renders as usual too — the notice is for a known-behind schema.
+    const [schema, setSchema] = useState(null);
+    useEffect(() => {
+        if (!signedIn) {
+            setSchema(null);
+            return;
+        }
+        let live = true;
+        ops.schema.status()
+            .then((r) => { if (live && r.ok)
+            setSchema(r.data); })
+            .catch(() => { });
+        return () => { live = false; };
+    }, [signedIn, ops]);
     const userId = session.state.status === "signed_in" ? session.state.session.user.id : "";
     if (session.state.status === "loading") {
         return (_jsx("div", { style: { height: "100vh", display: "grid", placeItems: "center", color: "var(--text-muted)" }, children: "Loading\u2026" }));
@@ -70,6 +90,8 @@ export function AdminApp({ registry, op, auth }) {
     // An invite or reset link signed the person in: Set password before the shell (members management §6).
     if (session.arrival)
         return _jsx(SetPasswordView, { client: session.client, mode: session.arrival, onDone: session.clearArrival });
+    if (schema && schemaBehind(schema.database, schema.required))
+        return _jsx(SchemaNotice, { status: schema });
     let main;
     if (head === "pages" && !tail)
         main = _jsx(PagesList, { ops: ops, registry: registry });
@@ -89,5 +111,5 @@ export function AdminApp({ registry, op, auth }) {
         main = _jsx(MediaScreen, {});
     else
         main = _jsx(ErrorPane, { message: "Not found." });
-    return (_jsx(AdminPathProvider, { value: registry.adminPath, children: _jsx(ElementsProvider, { elements: registry.elements, children: _jsx(AssetsProvider, { ops: ops, media: registry.media, children: _jsxs("div", { className: "sm-shell", children: [_jsx(IconRail, { registry: registry, active: head, email: email, settings: role !== null && can(role, "settings"), onSignOut: () => session.client.auth.signOut() }), _jsx("main", { className: "sm-main", children: main }, `${head}/${tail ?? ""}`)] }) }) }) }));
+    return (_jsx(AdminPathProvider, { value: registry.adminPath, children: _jsx(ElementsProvider, { elements: registry.elements, children: _jsx(TimeZoneProvider, { zone: registry.timeZone, children: _jsxs(AssetsProvider, { ops: ops, media: registry.media, children: [_jsxs("div", { className: "sm-shell", children: [_jsx(IconRail, { registry: registry, active: head, email: email, settings: role !== null && can(role, "settings"), onSignOut: () => session.client.auth.signOut() }), _jsx("main", { className: "sm-main", children: main }, `${head}/${tail ?? ""}`)] }), _jsx(ConfirmHost, {})] }) }) }) }));
 }

package/dist/admin/shell/EntriesList.js

@@ -14,34 +14,19 @@ import { relativeTime } from "../ui/format.js";
 import { useSortable } from "../ui/useSortable.js";
 import { useAdminHref } from "./base.js";
 import { navigate } from "./router.js";
+import { confirm } from "../ui/confirm.js";
 import { ErrorPane } from "./ErrorPane.js";
-const LOCALE_KEY = "smoodly.entries.locale";
-/** The selected locale survives a reload within the session; a stored
- *  value that is no longer supported falls back to the default. */
-function rememberedLocale(registry) {
-    try {
-        const stored = window.sessionStorage.getItem(LOCALE_KEY);
-        if (stored && registry.locales.supported.includes(stored))
-            return stored;
-    }
-    catch {
-        // storage unavailable — the default is fine
-    }
-    return registry.locales.default;
-}
+import { rememberLocale, rememberedLocale } from "./locale-memory.js";
 export function EntriesList({ ops, registry, collection }) {
     const adminHref = useAdminHref();
     const meta = registry.collections.find((c) => c.name === collection);
     const [records, setRecords] = useState(null);
     const [error, setError] = useState(null);
-    const [locale, setLocale] = useState(() => rememberedLocale(registry));
+    const [locale, setLocale] = useState(() => rememberedLocale(registry.locales));
     const multilingual = registry.locales.supported.length > 1;
     const pickLocale = (next) => {
         setLocale(next);
-        try {
-            window.sessionStorage.setItem(LOCALE_KEY, next);
-        }
-        catch { /* see rememberedLocale */ }
+        rememberLocale(next);
     };
     const load = useCallback(() => ops.entries.list(collection)
         .then((r) => (r.ok ? setRecords(r.data) : setError(r.message)))
@@ -75,7 +60,7 @@ export function EntriesList({ ops, registry, collection }) {
     if (error)
         return _jsx(ErrorPane, { message: error });
     const open = (id) => {
-        navigate(adminHref(`/${collection}/${encodeURIComponent(id)}?locale=${encodeURIComponent(locale)}`));
+        void navigate(adminHref(`/${collection}/${encodeURIComponent(id)}?locale=${encodeURIComponent(locale)}`));
     };
     /** "+ New entry" creates an empty draft in the locale on screen and opens it (spec 2026-09-14 §4). */
     const createEntry = async () => {
@@ -97,7 +82,13 @@ export function EntriesList({ ops, registry, collection }) {
         if (!record)
             return;
         const from = entrySourceLocale(record, registry);
-        if (!window.confirm(`Add "${row.title}" to ${locale}? Its ${from} fields are copied as the first ${locale} draft.`))
+        const ok = await confirm({
+            title: `Add this entry to ${locale}?`,
+            body: `Its ${from} fields are copied as the first ${locale} draft. Nothing is published until you publish it.`,
+            confirmLabel: `Add to ${locale}`,
+            subject: { name: row.title },
+        });
+        if (!ok)
             return;
         let result;
         try {

package/dist/admin/shell/EntryForm.js

@@ -15,7 +15,10 @@ import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-run
 // publish control. A draft may be incomplete; publish validates it and
 // lists the fields in an amber banner. The safe-delete guard's message
 // renders verbatim — it is product surface.
+import { Eye } from "lucide-react";
 import { useEffect, useMemo, useRef, useState } from "react";
+import { stillFailing, validateFields } from "../validate.js";
+import { elementSchemas } from "../../richtext-walk.js";
 import { FieldWidget } from "../forms/FieldWidget.js";
 import { revealField } from "../forms/reveal.js";
 import { useRefOptions } from "../forms/useRefOptions.js";
@@ -32,7 +35,8 @@ import { entrySourceLocale, entryTitle, localizedFieldKeys } from "./entries-lis
 import { useAdminHref } from "./base.js";
 import { localeFromUrl, writeLocaleToUrl } from "../editor/locale-url.js";
 import { navigate, useLeaveGuard } from "./router.js";
-import { LIVE_URL_MESSAGE, liveUrlChanges } from "./live-url.js";
+import { LIVE_URL_CONFIRM, liveUrlChanges } from "./live-url.js";
+import { confirm, DISCARD_CONFIRM } from "../ui/confirm.js";
 /** A stable empty map for the hooks that run before the "no such collection" return. */
 const NO_FIELDS = {};
 export function EntryForm({ ops, registry, collection, id }) {
@@ -73,7 +77,9 @@ export function EntryForm({ ops, registry, collection, id }) {
             const stored = row?.slug ?? null;
             const next = typeof value.slug === "string" ? value.slug : null;
             if (next !== confirmedSlug.current && liveUrlChanges({ status: row?.status, from: stored, to: next })) {
-                if (window.confirm(LIVE_URL_MESSAGE))
+                const current = recordRef.current;
+                const subject = current && meta ? { name: entryTitle(current, meta, registry, locale), path: slugPrefix && stored ? `${slugPrefix}${stored}` : null } : undefined;
+                if (await confirm({ ...LIVE_URL_CONFIRM, subject }))
                     confirmedSlug.current = next;
                 else {
                     value = { ...value, slug: stored };
@@ -127,6 +133,22 @@ export function EntryForm({ ops, registry, collection, id }) {
         return _jsx("p", { style: { padding: 32 }, children: "No such collection." });
     const row = record?.locales[locale];
     const status = row ? localeStatusOf(row) : null;
+    // A refused publish's field errors clear one by one as the fields are fixed: every change revalidates
+    // (the same rules the op applies) and keeps only what still fails; the notice's list shrinks with them.
+    const elementDescs = useMemo(() => elementSchemas(registry.elements), [registry]);
+    const hasFieldErrors = Object.keys(fieldErrors).length > 0;
+    useEffect(() => {
+        if (!hasFieldErrors || !fields || !meta)
+            return;
+        const fresh = validateFields(fields, meta.fields, elementDescs);
+        setFieldErrors((prev) => stillFailing(prev, fresh));
+        setNotice((n) => {
+            if (!n?.fields)
+                return n;
+            const left = n.fields.filter((f) => fresh.some((e) => e.field === f.field));
+            return left.length === 0 ? null : left.length === n.fields.length ? n : { ...n, fields: left };
+        });
+    }, [fields, hasFieldErrors, meta, elementDescs]);
     /** An op's failure onto the screen: amber with the fields for a validation result, red otherwise. */
     const fail = (r) => {
         if (r.code === "validation" && r.fields && r.fields.length > 0) {
@@ -180,7 +202,7 @@ export function EntryForm({ ops, registry, collection, id }) {
     };
     /** Discard (spec 2026-09-13 publish flow §4): confirm, flush so a late save cannot re-dirty the row, restore, reload. */
     const discard = async () => {
-        if (!window.confirm("Discard your changes and restore the published version?"))
+        if (!(await confirm({ ...DISCARD_CONFIRM, subject: entrySubject() })))
             return;
         setNotice(null);
         setBusy("discard");
@@ -290,7 +312,14 @@ export function EntryForm({ ops, registry, collection, id }) {
         const remaining = Object.keys(record.locales).filter((l) => l !== locale);
         if (remaining.length === 0)
             return;
-        if (!window.confirm(`Remove this entry from ${locale}? Its ${locale} fields and history are deleted.`))
+        const ok = await confirm({
+            title: `Remove this entry from ${locale}?`,
+            body: `Its ${locale} fields and history are deleted. Other languages are not affected.`,
+            confirmLabel: `Remove from ${locale}`,
+            destructive: true,
+            subject: entrySubject(),
+        });
+        if (!ok)
             return;
         let result;
         try {
@@ -307,11 +336,18 @@ export function EntryForm({ ops, registry, collection, id }) {
         goToLocale(remaining.includes(registry.locales.default) ? registry.locales.default : remaining[0]);
     };
     const destroy = async () => {
-        if (!window.confirm(multilingual ? "Delete this entry in every language?" : "Delete this entry?"))
+        const ok = await confirm({
+            title: "Delete this entry?",
+            body: `The entry${multilingual ? " in every language" : ""} and its history are removed. Anything referencing it loses the reference. This cannot be undone.`,
+            confirmLabel: "Delete entry",
+            destructive: true,
+            subject: entrySubject(),
+        });
+        if (!ok)
             return;
         const r = await ops.entries.delete(collection, id);
         if (r.ok)
-            navigate(adminHref(`/${collection}`), { force: true });
+            void navigate(adminHref(`/${collection}`), { force: true });
         else
             fail(r);
     };
@@ -319,6 +355,11 @@ export function EntryForm({ ops, registry, collection, id }) {
     // The mount's path in the ACTIVE locale prefixes the slug; no path, no prefix.
     const base = meta.path?.[locale];
     const slugPrefix = base ? `/${base}/` : undefined;
+    /** The confirm dialogs' context chip: the entry's title and, on a routed collection, its URL. */
+    const entrySubject = () => {
+        const slug = record?.locales[locale]?.slug;
+        return record ? { name: heading, path: slugPrefix && slug ? `${slugPrefix}${slug}` : null } : undefined;
+    };
     const present = record ? registry.locales.supported.filter((l) => record.locales[l]) : [locale];
     const widget = ([key, d]) => (_jsx(FieldWidget, { fieldKey: key, descriptor: d, value: fields?.[key], errors: fieldErrors, refOptions: refTargets[key] ? refOptions[refTargets[key]] : undefined, suggestions: tagSuggestions[key], prefix: d.type === "slug" ? slugPrefix : undefined, mark: multilingual && !localeKeys.includes(key) ? _jsx(UnlocalizedMark, {}) : undefined, onChange: (value) => {
             setFields((f) => ({ ...(f ?? {}), [key]: value }));
@@ -333,6 +374,6 @@ export function EntryForm({ ops, registry, collection, id }) {
                                 trailing: multilingual && (_jsx(LocaleSwitcher, { registry: registry, present: present, parentLocales: parentLocales, value: locale, adding: adding, onSwitch: (l) => { void switchLocale(l); }, onAdd: (l) => void doAddLocale(l) })),
                             },
                             { label: heading },
-                        ] }) }), right: _jsxs(_Fragment, { children: [(touched || saveState === "error") && _jsx(SaveIndicator, { state: saveState }), urls[locale] && (_jsx(LinkButton, { href: urls[locale], target: "_blank", rel: "noreferrer", title: "Opens the site route. While the admin's draft-mode cookie is on, this shows the DRAFT \u2014 open it in a private window to see what visitors see.", children: "View live" })), _jsx(PublishControl, { status: status, pending: dirty || saveState !== "saved", busy: busy, flash: published, disabled: !row, onPublish: () => { void publish(); }, onUnpublish: () => { void unpublish(); }, onDiscard: () => { void discard(); }, onHistory: () => { void openHistory(); } })] }) }), history && row && (_jsx(HistoryModal, { rows: history, draftId: row.draftVersionId, onSelect: (v) => { void loadSnapshot(v); }, onClose: () => setHistory(null), onRestore: restore, render: (versionId) => snapshot?.id === versionId ? (_jsx("fieldset", { disabled: true, className: "sm-history__form", children: Object.entries(meta.fields).map(([key, d]) => (_jsx(FieldWidget, { fieldKey: key, descriptor: d, value: snapshot.fields[key], refOptions: refTargets[key] ? refOptions[refTargets[key]] : undefined, prefix: d.type === "slug" ? slugPrefix : undefined, onChange: () => { } }, key))) })) : _jsx("p", { className: "sm-hint", style: { padding: 16 }, children: "Loading\u2026" }) })), _jsxs("div", { className: "sm-editor", children: [_jsxs("div", { className: "sm-form", ref: formRef, children: [notice && (_jsxs(Banner, { tone: notice.tone, onDismiss: () => setNotice(null), children: [_jsx("p", { style: { margin: 0 }, children: notice.text }), _jsx(FieldErrorList, { fields: notice.fields ?? [], onReveal: (path) => { if (formRef.current)
+                        ] }) }), right: _jsxs(_Fragment, { children: [(touched || saveState === "error") && _jsx(SaveIndicator, { state: saveState }), urls[locale] && (_jsx(LinkButton, { icon: true, href: urls[locale], target: "_blank", rel: "noreferrer", "aria-label": "View live", title: "View live \u2014 opens the site route. While the admin's draft-mode cookie is on, this shows the DRAFT \u2014 open it in a private window to see what visitors see.", children: _jsx(Eye, { size: 16, strokeWidth: 1.5, "aria-hidden": "true" }) })), _jsx(PublishControl, { status: status, pending: dirty || saveState !== "saved", busy: busy, flash: published, disabled: !row, onPublish: () => { void publish(); }, onUnpublish: () => { void unpublish(); }, onDiscard: () => { void discard(); }, onHistory: () => { void openHistory(); } })] }) }), history && row && (_jsx(HistoryModal, { rows: history, draftId: row.draftVersionId, onSelect: (v) => { void loadSnapshot(v); }, onClose: () => setHistory(null), onRestore: restore, render: (versionId) => snapshot?.id === versionId ? (_jsx("fieldset", { disabled: true, className: "sm-history__form", children: Object.entries(meta.fields).map(([key, d]) => (_jsx(FieldWidget, { fieldKey: key, descriptor: d, value: snapshot.fields[key], refOptions: refTargets[key] ? refOptions[refTargets[key]] : undefined, prefix: d.type === "slug" ? slugPrefix : undefined, onChange: () => { } }, key))) })) : _jsx("p", { className: "sm-hint", style: { padding: 16 }, children: "Loading\u2026" }) })), _jsxs("div", { className: "sm-editor", children: [_jsxs("div", { className: "sm-form", ref: formRef, children: [notice && (_jsxs(Banner, { tone: notice.tone, onDismiss: () => setNotice(null), children: [_jsx("p", { style: { margin: 0 }, children: notice.text }), _jsx(FieldErrorList, { fields: notice.fields ?? [], onReveal: (path) => { if (formRef.current)
                                             revealField(formRef.current, path); } })] })), absent ? (_jsxs("div", { style: { display: "flex", flexDirection: "column", gap: 12 }, children: [_jsxs("p", { children: ["This entry doesn't exist in ", locale, " yet. Adding it copies the ", entrySourceLocale(record, registry), " fields as the first ", locale, " draft."] }), _jsxs("div", { style: { display: "flex", gap: 8 }, children: [_jsxs(Button, { onClick: () => void doAddLocale(locale), disabled: adding || !parentLocales.includes(locale), title: parentLocales.includes(locale) ? undefined : `add ${locale} to the parent first`, children: ["Add ", locale] }), _jsxs(Button, { variant: "secondary", onClick: () => { void switchLocale(entrySourceLocale(record, registry)); }, children: ["Back to ", entrySourceLocale(record, registry)] })] })] })) : fields !== null ? (Object.entries(meta.fields).map(widget)) : !notice && _jsx("p", { style: { color: "var(--text-muted)" }, children: "Loading\u2026" })] }), _jsx(ResizeHandle, {}), _jsxs("aside", { className: "sm-inspector", children: [record && row && (_jsxs("div", { className: "sm-card", children: [_jsx(SectionLabel, { children: "Document info" }), _jsx(InfoRow, { label: "Created", value: relativeTime(record.createdAt) }), _jsx(InfoRow, { label: "Updated", value: updatedLine(row.updatedAt, row.updatedBy) }), multilingual && _jsx(InfoRow, { label: "Languages", value: Object.keys(record.locales).join(", ") }), _jsx(InfoRow, { label: "ID", value: id, mono: true })] })), record && (_jsxs("div", { className: "sm-card", children: [multilingual && row && Object.keys(record.locales).length > 1 && (_jsxs(Button, { variant: "secondary", onClick: () => void doRemoveLocale(), children: ["Remove from ", locale] })), _jsx(Button, { variant: "danger", onClick: destroy, children: "Delete" })] }))] })] })] }));
 }

package/dist/admin/shell/GlobalForm.js

@@ -12,6 +12,8 @@ import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-run
 // validates the draft and lists the fields in an amber banner. "Used on
 // N pages" is the refs index's answer.
 import { useEffect, useMemo, useRef, useState } from "react";
+import { stillFailing, validateNode } from "../validate.js";
+import { elementSchemas } from "../../richtext-walk.js";
 import { CSS_KEY, SETTINGS_KEY, STYLES_KEY } from "../../global.js";
 import { tabsFor } from "../forms/tabs.js";
 import { revealField } from "../forms/reveal.js";
@@ -28,6 +30,7 @@ import { useAdminHref } from "./base.js";
 import { GlobalFields } from "./GlobalFields.js";
 import { localeFromUrl, writeLocaleToUrl } from "../editor/locale-url.js";
 import { useLeaveGuard } from "./router.js";
+import { confirm, DISCARD_CONFIRM } from "../ui/confirm.js";
 export function GlobalForm({ ops, registry, name }) {
     const adminHref = useAdminHref();
     const item = registry.globals.find((s) => s.name === name);
@@ -101,6 +104,23 @@ export function GlobalForm({ ops, registry, name }) {
         else
             setNotice({ tone: "error", text: r.message });
     };
+    // A refused publish's field errors clear as the fields are fixed: every change revalidates the way the
+    // op does (a visual item like a node: fields, `$settings` under `settings.`, `$css`) and keeps what still fails.
+    const elementDescs = useMemo(() => elementSchemas(registry.elements), [registry]);
+    const hasFieldErrors = Object.keys(fieldErrors).length > 0;
+    useEffect(() => {
+        if (!hasFieldErrors || !fields || !item)
+            return;
+        const { [SETTINGS_KEY]: settings, [CSS_KEY]: css, ...values } = fields;
+        const fresh = validateNode({ fields: values, settings: settings !== null && typeof settings === "object" ? settings : {}, css }, { fields: item.fields, settings: item.section !== undefined ? item.settings : undefined }, elementDescs);
+        setFieldErrors((prev) => stillFailing(prev, fresh));
+        setNotice((n) => {
+            if (!n?.fields)
+                return n;
+            const left = n.fields.filter((f) => fresh.some((e) => e.field === f.field));
+            return left.length === 0 ? null : left.length === n.fields.length ? n : { ...n, fields: left };
+        });
+    }, [fields, hasFieldErrors, item, elementDescs]);
     const publish = async () => {
         setNotice(null);
         setBusy("publish");
@@ -143,7 +163,7 @@ export function GlobalForm({ ops, registry, name }) {
             fail(r);
     };
     const discard = async () => {
-        if (!window.confirm("Discard your changes and restore the published version?"))
+        if (!(await confirm({ ...DISCARD_CONFIRM, subject: { name: item.title } })))
             return;
         setNotice(null);
         setBusy("discard");
@@ -235,7 +255,7 @@ export function GlobalForm({ ops, registry, name }) {
     };
     return (_jsxs(_Fragment, { children: [_jsx(TopBar, { left: _jsx(_Fragment, { children: _jsx(Breadcrumb, { backHref: adminHref("/globals"), items: [
                             {
-                                label: "Globals", href: adminHref("/globals"),
+                                label: "Site", href: adminHref("/globals"),
                                 trailing: multilingual && (_jsx(LocaleSwitcher, { registry: registry, present: registry.locales.supported, parentLocales: [], value: locale, adding: false, onSwitch: (l) => { void switchLocale(l); }, onAdd: () => undefined })),
                             },
                             { label: item.title },

package/dist/admin/shell/GlobalList.js

@@ -14,30 +14,16 @@ import { LocalePicker } from "../ui/LocaleSwitcher.js";
 import { relativeTime } from "../ui/format.js";
 import { useAdminHref } from "./base.js";
 import { ErrorPane } from "./ErrorPane.js";
-const LOCALE_KEY = "smoodly.entries.locale"; // the same choice the collection lists remember
-function rememberedLocale(registry) {
-    try {
-        const stored = window.sessionStorage.getItem(LOCALE_KEY);
-        if (stored && registry.locales.supported.includes(stored))
-            return stored;
-    }
-    catch {
-        // storage unavailable — the default is fine
-    }
-    return registry.locales.default;
-}
+import { rememberLocale, rememberedLocale } from "./locale-memory.js";
 export function GlobalList({ ops, registry }) {
     const adminHref = useAdminHref();
     const [items, setItems] = useState(null);
     const [error, setError] = useState(null);
-    const [locale, setLocale] = useState(() => rememberedLocale(registry));
+    const [locale, setLocale] = useState(() => rememberedLocale(registry.locales));
     const multilingual = registry.locales.supported.length > 1;
     const pickLocale = (next) => {
         setLocale(next);
-        try {
-            window.sessionStorage.setItem(LOCALE_KEY, next);
-        }
-        catch { /* see rememberedLocale */ }
+        rememberLocale(next);
     };
     const load = useCallback(() => {
         ops.globals.list()
@@ -48,7 +34,7 @@ export function GlobalList({ ops, registry }) {
     if (error)
         return _jsx(ErrorPane, { message: error });
     const rows = items ? globalRows(items, registry, locale) : [];
-    return (_jsx(ListView, { title: "Globals", titleTrailing: multilingual && _jsx(LocalePicker, { locales: registry.locales.supported, value: locale, onChange: pickLocale }), columns: [
+    return (_jsx(ListView, { title: "Site", titleTrailing: multilingual && _jsx(LocalePicker, { locales: registry.locales.supported, value: locale, onChange: pickLocale }), columns: [
             { label: "Title", width: "minmax(160px,1fr)" },
             { label: "Kind", width: "90px" },
             { label: "Updated", width: "minmax(110px,160px)" },

package/dist/admin/shell/IconRail.js

@@ -26,9 +26,11 @@ import { RouteLink } from "./RouteLink.js";
 /** Lucide at the rail's size and stroke (the tile's CSS restates both). */
 const ICON = { size: 18, strokeWidth: 2, "aria-hidden": true };
 /** The app icon, inlined: a package can't ship a file into the host app's
- *  /public. Brand blue on white in both themes, so no --logo-filter. */
+ *  /public. design_handoff_smoodly_neutral/assets/smoodly-logo.svg — the
+ *  outer and inner shapes take --logo-outer / --logo-inner (white over
+ *  navy on the frame), so a look decides its colours. */
 function AppIcon() {
-    return (_jsxs("svg", { className: "sm-rail__logo", viewBox: "0 0 89 86", fill: "none", xmlns: "http://www.w3.org/2000/svg", role: "img", "aria-label": "Smoodly", children: [_jsx("path", { fill: "#0038B1", d: "M0 51.5552C0 24.3141 25.0505 0 52.5493 0H52.7761C74.4707 0 89 14.6336 89 34.445C89 61.6862 64.4034 86 36.0066 86C14.0946 86 0 70.9165 0 51.5552Z" }), _jsx("path", { fill: "#FFFFFF", d: "M23.25 46.1188C23.25 33.0027 34.8806 21.2959 47.6479 21.2959H47.7532C57.8257 21.2959 64.5714 28.3417 64.5714 37.8805C64.5714 50.9966 53.1516 62.7033 39.9674 62.7033C29.7939 62.7033 23.25 55.4409 23.25 46.1188Z" })] }));
+    return (_jsxs("svg", { className: "sm-rail__logo", viewBox: "0 0 28 27", fill: "none", xmlns: "http://www.w3.org/2000/svg", role: "img", "aria-label": "Smoodly", children: [_jsx("path", { style: { fill: "var(--logo-outer)" }, d: "M0 16.1859C0 7.6335 7.88106 0 16.5324 0H16.6037C23.429 0 28 4.59428 28 10.8141C28 19.3666 20.2618 27 11.3279 27C4.43425 27 0 22.2645 0 16.1859Z" }), _jsx("path", { style: { fill: "var(--logo-inner)" }, d: "M7 14.7932C7 10.6754 10.6591 7 14.6757 7H14.7089C17.8777 7 20 9.21206 20 12.2068C20 16.3247 16.4072 20 12.2594 20C9.05876 20 7 17.7199 7 14.7932Z" })] }));
 }
 export function IconRail({ registry, active, email, settings = true, onSignOut }) {
     const adminHref = useAdminHref();
@@ -44,14 +46,21 @@ export function IconRail({ registry, active, email, settings = true, onSignOut }
     const close = () => setOpen(null);
     const hoverLeave = () => setHovered(false);
     // A click open moves focus into the menu; a pointer down outside closes it.
+    // Outside means outside the menu and its trigger — the rest of the rail
+    // counts too (2026-09-26); the trigger is left to its own toggle.
     useEffect(() => {
         if (!open || !root.current)
             return;
         if (!hovered)
             root.current.querySelector(`#${CSS.escape(menuId(open))} [role=menuitem]`)?.focus();
         const onPointerDown = (e) => {
-            if (e.target instanceof Node && !root.current?.contains(e.target))
-                close();
+            if (!(e.target instanceof Node))
+                return;
+            const menu = root.current?.querySelector(`#${CSS.escape(menuId(open))}`);
+            const trigger = root.current?.querySelector(`[aria-controls="${menuId(open)}"]`);
+            if (menu?.contains(e.target) || trigger?.contains(e.target))
+                return;
+            close();
         };
         document.addEventListener("pointerdown", onPointerDown);
         return () => document.removeEventListener("pointerdown", onPointerDown);
@@ -79,5 +88,5 @@ export function IconRail({ registry, active, email, settings = true, onSignOut }
     const collectionsOpen = open === "collections" || (hovered && open === null);
     const name = email?.split("@")[0] ?? "Editor";
     const initials = name.slice(0, 2).toUpperCase();
-    return (_jsxs("nav", { className: "sm-rail", "aria-label": "Primary", ref: root, onKeyDown: onKeyDown, children: [_jsx(AppIcon, {}), _jsxs("ul", { className: "sm-rail__list", children: [link("pages", "Pages", _jsx(PanelTop, { ...ICON }), adminHref("/pages")), collections.length > 0 && (_jsxs("li", { className: "sm-rail__item", onMouseEnter: () => setHovered(true), onMouseLeave: hoverLeave, children: [_jsxs("button", { type: "button", className: "sm-rail__btn", "aria-current": collectionActive ? "page" : undefined, "aria-haspopup": "menu", "aria-expanded": collectionsOpen, "aria-controls": menuId("collections"), onClick: () => toggle("collections"), children: [_jsx("span", { className: "sm-rail__tile", children: _jsx(LibraryBig, { ...ICON }) }), _jsx("span", { className: "sm-rail__label", children: "Collections" })] }), _jsx("ul", { className: "sm-rail__menu sm-rail__menu--collections", role: "menu", id: menuId("collections"), "data-open": collectionsOpen, children: collections.map((c) => (_jsx("li", { role: "none", children: _jsx(RouteLink, { role: "menuitem", className: "sm-rail__menu-item", href: adminHref(`/${c.name}`), "aria-current": c.name === active ? "page" : undefined, onClick: () => { close(); hoverLeave(); }, children: _jsx("span", { children: c.title }) }) }, c.name))) })] })), link("media", "Media", _jsx(Image, { ...ICON }), adminHref("/media")), registry.globals.length > 0 && link("globals", "Globals", _jsx(Globe, { ...ICON }), adminHref("/globals")), settings && link("settings", "Settings", _jsx(Settings, { ...ICON }), adminHref("/settings"))] }), _jsxs("div", { className: "sm-rail__item sm-rail__foot", children: [_jsx("button", { type: "button", className: "sm-rail__user", title: name, "aria-haspopup": "menu", "aria-expanded": open === "user", "aria-controls": menuId("user"), onClick: () => toggle("user"), children: initials }), _jsxs("ul", { className: "sm-rail__menu sm-rail__menu--up", role: "menu", id: menuId("user"), "data-open": open === "user", children: [_jsx("li", { className: "sm-rail__menu-title", role: "presentation", children: name }), _jsx("li", { role: "none", children: _jsx(ThemeToggle, {}) }), _jsx("li", { role: "none", children: _jsx("button", { type: "button", role: "menuitem", className: "sm-rail__menu-item", onClick: () => { close(); onSignOut(); }, children: "Sign out" }) })] })] })] }));
+    return (_jsxs("nav", { className: "sm-rail", "aria-label": "Primary", ref: root, onKeyDown: onKeyDown, children: [_jsx(AppIcon, {}), _jsxs("ul", { className: "sm-rail__list", children: [link("pages", "Pages", _jsx(PanelTop, { ...ICON }), adminHref("/pages")), collections.length > 0 && (_jsxs("li", { className: "sm-rail__item", onMouseEnter: () => setHovered(true), onMouseLeave: hoverLeave, children: [_jsxs("button", { type: "button", className: "sm-rail__btn", "aria-current": collectionActive ? "page" : undefined, "aria-haspopup": "menu", "aria-expanded": collectionsOpen, "aria-controls": menuId("collections"), onClick: () => toggle("collections"), children: [_jsx("span", { className: "sm-rail__tile", children: _jsx(LibraryBig, { ...ICON }) }), _jsx("span", { className: "sm-rail__label", children: "Collections" })] }), _jsx("ul", { className: "sm-rail__menu sm-rail__menu--collections", role: "menu", id: menuId("collections"), "data-open": collectionsOpen, children: collections.map((c) => (_jsx("li", { role: "none", children: _jsx(RouteLink, { role: "menuitem", className: "sm-rail__menu-item", href: adminHref(`/${c.name}`), "aria-current": c.name === active ? "page" : undefined, onClick: () => { close(); hoverLeave(); }, children: _jsx("span", { children: c.title }) }) }, c.name))) })] })), link("media", "Media", _jsx(Image, { ...ICON }), adminHref("/media")), registry.globals.length > 0 && link("globals", "Site", _jsx(Globe, { ...ICON }), adminHref("/globals")), settings && link("settings", "Settings", _jsx(Settings, { ...ICON }), adminHref("/settings"))] }), _jsxs("div", { className: "sm-rail__item sm-rail__foot", children: [_jsx("button", { type: "button", className: "sm-rail__user", title: name, "aria-haspopup": "menu", "aria-expanded": open === "user", "aria-controls": menuId("user"), onClick: () => toggle("user"), children: initials }), _jsxs("ul", { className: "sm-rail__menu sm-rail__menu--up", role: "menu", id: menuId("user"), "data-open": open === "user", children: [_jsx("li", { className: "sm-rail__menu-title", role: "presentation", children: name }), _jsx("li", { role: "none", children: _jsx(ThemeToggle, {}) }), _jsx("li", { role: "none", children: _jsx("button", { type: "button", role: "menuitem", className: "sm-rail__menu-item", onClick: () => { close(); onSignOut(); }, children: "Sign out" }) })] })] })] }));
 }

package/dist/admin/shell/InviteModal.js

@@ -2,13 +2,15 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 // packages/smoodly/src/admin/shell/InviteModal.tsx
 // Invite a member (spec 2026-09-25 members management §4): an email, a
-// role, Send. The op's error shows inside; success closes it and the
-// page reports what happened.
+// role, Send. The role is a radio list with a line under each option
+// saying what it may do — the one place the difference is explained in
+// the admin (the Roles page was dropped 2026-09-25). The op's error
+// shows inside; success closes it and the page reports what happened.
 import { useState } from "react";
 import { MEMBER_ROLES } from "../../permissions.js";
 import { Modal } from "../ui/Modal.js";
-import { Banner, Button, Field, Segmented } from "../ui/primitives.js";
-import { roleLabel } from "./members-list.js";
+import { Banner, Button, Field } from "../ui/primitives.js";
+import { ROLE_DESCRIPTION, roleLabel } from "./members-list.js";
 export function InviteModal({ onClose, onInvite }) {
     const [email, setEmail] = useState("");
     const [role, setRole] = useState("editor");
@@ -20,5 +22,7 @@ export function InviteModal({ onClose, onInvite }) {
         setError(await onInvite({ email: email.trim(), role }));
         setBusy(false);
     };
-    return (_jsx(Modal, { title: "Invite a member", width: 420, onClose: onClose, children: _jsxs("form", { onSubmit: submit, style: { display: "flex", flexDirection: "column", gap: 14 }, children: [_jsx(Field, { label: "Email", children: _jsx("input", { className: "sm-input", type: "email", required: true, autoFocus: true, value: email, onChange: (e) => setEmail(e.target.value) }) }), _jsx(Field, { label: "Role", asDiv: true, children: _jsx(Segmented, { options: MEMBER_ROLES, value: role, onChange: setRole, label: roleLabel }) }), error && _jsx(Banner, { tone: "error", children: error }), _jsxs("div", { style: { display: "flex", justifyContent: "flex-end", gap: 8 }, children: [_jsx(Button, { variant: "secondary", onClick: onClose, children: "Cancel" }), _jsx("button", { type: "submit", className: "sm-btn sm-btn--primary", disabled: busy, children: busy ? "Sending…" : "Send invite" })] })] }) }));
+    // Editor first: the default, and the one most invites want.
+    const roles = [...MEMBER_ROLES].reverse();
+    return (_jsx(Modal, { title: "Invite a member", width: 420, onClose: onClose, children: _jsxs("form", { onSubmit: submit, style: { display: "flex", flexDirection: "column", gap: 14 }, children: [_jsx(Field, { label: "Email", children: _jsx("input", { className: "sm-input", type: "email", required: true, autoFocus: true, value: email, onChange: (e) => setEmail(e.target.value) }) }), _jsx(Field, { label: "Role", asDiv: true, children: _jsx("div", { className: "sm-choices", role: "radiogroup", children: roles.map((r) => (_jsxs("label", { className: "sm-choice sm-choice--desc", children: [_jsx("input", { type: "radio", name: "role", value: r, checked: role === r, onChange: () => setRole(r) }), _jsxs("span", { children: [_jsx("span", { className: "sm-choice__label", children: roleLabel(r) }), _jsx("span", { className: "sm-choice__desc", children: ROLE_DESCRIPTION[r] })] })] }, r))) }) }), error && _jsx(Banner, { tone: "error", children: error }), _jsxs("div", { style: { display: "flex", justifyContent: "flex-end", gap: 8 }, children: [_jsx(Button, { variant: "secondary", onClick: onClose, children: "Cancel" }), _jsx("button", { type: "submit", className: "sm-btn sm-btn--primary", disabled: busy, children: busy ? "Sending…" : "Send invite" })] })] }) }));
 }