smoodly 0.0.28 → 0.0.30

package/dist/admin/editor/canvas-diagnosis.js

@@ -0,0 +1,106 @@
+// Why the page editor's canvas stayed silent (spec 2026-09-27
+// shadowed-page detector §3–§5). When the bridge never speaks, the editor
+// fetches the canvas URL once; this module names the cause from the
+// response and words it twice — a sentence for the editor, a line for
+// whoever fixes it. Pure: no React, no store.
+/** The meta Smoodly's page renderer writes in draft mode (§3). */
+export const DRAFT_META_NAME = "smoodly-draft";
+/** The attribute on the <style> the editor bridge server-renders. */
+export const BRIDGE_ATTR = "data-smoodly-bridge";
+/** Read a fetch Response into a probe. A constructed Response has no url; the requested one stands in. */
+export async function probeOf(requested, res) {
+    return {
+        kind: "response", requested, url: res.url || requested, status: res.status, redirected: res.redirected,
+        html: await res.text(),
+        frameOptions: res.headers.get("x-frame-options"),
+        csp: res.headers.get("content-security-policy"),
+    };
+}
+/** The first matching cause, in the spec's order (§4). */
+export function diagnoseCanvas(probe) {
+    if (probe.kind === "failed")
+        return { kind: "unreachable" };
+    if (probe.redirected)
+        return { kind: "redirect", to: redirectTarget(probe.url, probe.requested) };
+    if (probe.status === 404)
+        return { kind: "notFound" };
+    if (probe.status >= 500)
+        return { kind: "crashed", status: probe.status };
+    if (probe.status < 200 || probe.status > 299)
+        return { kind: "refused", status: probe.status };
+    if (!probe.html.includes(`name="${DRAFT_META_NAME}"`))
+        return { kind: "shadowed" };
+    if (!probe.html.includes(`${BRIDGE_ATTR}=`))
+        return { kind: "noSearchParams" };
+    const framing = framingHeader(probe.frameOptions, probe.csp, new URL(probe.requested).origin);
+    if (framing)
+        return { kind: "framing", ...framing };
+    return { kind: "script" };
+}
+/** The redirect's end as a visitor would read it: path + search without the editor parameter, the full URL off-origin. */
+function redirectTarget(url, requested) {
+    const u = new URL(url);
+    u.searchParams.delete("smoodly-editor");
+    return u.origin === new URL(requested).origin ? u.pathname + u.search : u.href;
+}
+/** The header that keeps the canvas iframe out, if any: X-Frame-Options DENY, or a frame-ancestors without the site's own origin. */
+function framingHeader(frameOptions, csp, origin) {
+    if (frameOptions?.trim().toLowerCase() === "deny")
+        return { header: "X-Frame-Options", value: frameOptions };
+    const directive = csp?.split(";").map((d) => d.trim()).find((d) => /^frame-ancestors(\s|$)/i.test(d));
+    if (!directive)
+        return null;
+    const sources = directive.split(/\s+/).slice(1);
+    const allows = sources.some((s) => s.toLowerCase() === "'self'" || s === "*" || s.replace(/\/$/, "") === origin);
+    return allows ? null : { header: "Content-Security-Policy", value: directive };
+}
+/** The warning's two lines for a cause (§5, verbatim). */
+export function canvasMessage(cause, path) {
+    switch (cause.kind) {
+        case "shadowed":
+            return {
+                editor: `This page can't be shown here — another route in the site's code answers ${path}.`,
+                developer: `A route other than Smoodly's catch-all answers ${path} (the response has no Smoodly draft marker). Rename the page, or move or remove that route.`,
+            };
+        case "noSearchParams":
+            return {
+                editor: "This page can't be shown in the editor — its route is missing a setting.",
+                developer: `Smoodly rendered ${path} without the editor bridge. The route file must pass searchParams: renderSmoodlyPath(path, { searchParams }).`,
+            };
+        case "crashed":
+            return {
+                editor: "This page failed to render.",
+                developer: `${path} answered ${cause.status}. The server log has the error — often the page shape, or a component inside a section, throwing.`,
+            };
+        case "notFound":
+            return {
+                editor: `Nothing on the site answers ${path}.`,
+                developer: `${path} answered 404. Check that the locale is in the app's routing and that the catch-all route file is in place.`,
+            };
+        case "redirect":
+            return {
+                editor: `${path} sends visitors to another address, so this page can't be shown.`,
+                developer: `${path} redirects to ${cause.to}. Check middleware and the i18n routing.`,
+            };
+        case "refused":
+            return {
+                editor: `The site refused to show ${path}.`,
+                developer: `${path} answered ${cause.status}. Middleware or the host refused the request; the draft-mode cookie must reach the page.`,
+            };
+        case "framing":
+            return {
+                editor: "The site doesn't allow its pages to be shown inside the editor.",
+                developer: `${path} sends ${cause.header}: ${cause.value}, which blocks the canvas iframe. Allow the site's own origin (SAMEORIGIN, frame-ancestors 'self').`,
+            };
+        case "script":
+            return {
+                editor: "The page loaded but didn't connect to the editor.",
+                developer: `${path} rendered with the editor bridge, but its script never reached the editor. Look for an error in the canvas's browser console.`,
+            };
+        case "unreachable":
+            return {
+                editor: "The site didn't answer.",
+                developer: `The request for ${path} failed before any response — is the site running? A redirect to another origin fails this way too.`,
+            };
+    }
+}

package/dist/admin/editor/crash-copy.d.ts

@@ -0,0 +1,7 @@
+import type { CrashedSection } from "../../marks.ts";
+export declare function crashLines(crashed: CrashedSection[], titleOf: (id: string) => string): string[];
+export declare function publishCrashConfirm(lines: string[]): {
+    title: string;
+    body: string;
+    confirmLabel: string;
+};

package/dist/admin/editor/crash-copy.js

@@ -0,0 +1,13 @@
+export function crashLines(crashed, titleOf) {
+    return crashed.map(({ id, live }) => live === "left-out"
+        ? `“${titleOf(id)}” failed to render in the preview — on the live site it is left out.`
+        : `“${titleOf(id)}” failed to render in the preview — on the live site the whole page would fail to load.`);
+}
+export function publishCrashConfirm(lines) {
+    const n = lines.length;
+    return {
+        title: n === 1 ? "Publish with 1 broken section?" : `Publish with ${n} broken sections?`,
+        body: [...lines, `Fix or remove ${n === 1 ? "it" : "them"} in the editor, or publish anyway.`].join(" "),
+        confirmLabel: "Publish anyway",
+    };
+}

package/dist/admin/editor/protocol.d.ts

@@ -1,3 +1,4 @@
+import type { CrashedSection } from "../../marks.ts";
 export type BridgeRect = {
     id: string;
     x: number;
@@ -28,6 +29,7 @@ export type FromBridge = {
     emptyZones: ZoneRect[];
     fields: FieldRect[];
     docH: number;
+    crashed: CrashedSection[];
 }
 /** A click: the node under it, the marked field under it, and where (iframe client coordinates). */
  | {

package/dist/admin/editor/useCanvasBridge.d.ts

@@ -1,5 +1,6 @@
 import { type RefObject } from "react";
 import type { BridgeRect, FieldRect, ToBridge, ZoneRect } from "./protocol.ts";
+import type { CrashedSection } from "../../marks.ts";
 export type Geometry = "waiting" | "ok" | "missing";
 export declare function useCanvasBridge({ iframeRef, iframeSrc, onSelect, onHover, onRendered }: {
     iframeRef: RefObject<HTMLIFrameElement | null>;
@@ -16,4 +17,6 @@ export declare function useCanvasBridge({ iframeRef, iframeSrc, onSelect, onHove
     docH: number;
     geometry: Geometry;
     postToCanvas: (m: ToBridge) => void;
+    onFrameLoad: () => void;
+    crashed: CrashedSection[];
 };

package/dist/admin/editor/useCanvasBridge.js

@@ -1,23 +1,28 @@
 // The admin side of the editor⇄canvas protocol: the geometry the bridge
 // reports (node rects, empty zones, document height), select/hover
 // forwarded from the iframe, and `postToCanvas` for refresh/scroll.
-// Geometry silence is survivable — after GEOMETRY_TIMEOUT_MS the overlay
-// goes dark, the iframe and the outline keep working.
+// Silence is survivable — GEOMETRY_TIMEOUT_MS after the frame's load
+// with no bridge message, `geometry` turns "missing" and the page editor
+// diagnoses why (spec 2026-09-27 shadowed-page detector §2); the iframe
+// and the outline keep working.
 import { useCallback, useEffect, useRef, useState } from "react";
 const GEOMETRY_TIMEOUT_MS = 4000;
 export function useCanvasBridge({ iframeRef, iframeSrc, onSelect, onHover, onRendered }) {
     const [rects, setRects] = useState([]);
     const [emptyZones, setEmptyZones] = useState([]);
     const [fields, setFields] = useState([]);
+    const [crashed, setCrashed] = useState([]);
     const [docH, setDocH] = useState(900);
     const [geometry, setGeometry] = useState("waiting");
+    // The wait starts at the frame's load, not its src: a slow first compile in `next dev` is not silence.
+    const [loaded, setLoaded] = useState(false);
     // The listener registers once; the handlers are read through refs.
     const handlers = useRef({ onSelect, onHover, onRendered });
     handlers.current = { onSelect, onHover, onRendered };
     // A new canvas URL (a locale switch, a rename) means new geometry — the
     // previous page's rects are stale the instant the iframe starts loading
     // a different route, so clear them alongside resetting geometry.
-    useEffect(() => { setGeometry("waiting"); setRects([]); setEmptyZones([]); setFields([]); }, [iframeSrc]);
+    useEffect(() => { setGeometry("waiting"); setLoaded(false); setRects([]); setEmptyZones([]); setFields([]); setCrashed([]); }, [iframeSrc]);
     const postToCanvas = useCallback((m) => {
         iframeRef.current?.contentWindow?.postMessage(m, "*");
     }, [iframeRef]);
@@ -28,12 +33,13 @@ export function useCanvasBridge({ iframeRef, iframeSrc, onSelect, onHover, onRen
                 return;
             if (e.source !== iframeRef.current?.contentWindow)
                 return;
+            setGeometry("ok"); // any bridge message: Smoodly rendered the canvas with its bridge
             if (m.kind === "rects") {
                 setRects(m.nodes);
                 setEmptyZones(m.emptyZones);
                 setFields(m.fields);
                 setDocH(m.docH);
-                setGeometry("ok");
+                setCrashed(m.crashed ?? []);
             }
             else if (m.kind === "select") {
                 handlers.current.onSelect(m.id, m.path, m.x, m.y);
@@ -49,10 +55,11 @@ export function useCanvasBridge({ iframeRef, iframeSrc, onSelect, onHover, onRen
         return () => window.removeEventListener("message", onMessage);
     }, [iframeRef]);
     useEffect(() => {
-        if (!iframeSrc || geometry !== "waiting")
+        if (!iframeSrc || !loaded || geometry !== "waiting")
             return;
         const t = setTimeout(() => setGeometry((g) => (g === "waiting" ? "missing" : g)), GEOMETRY_TIMEOUT_MS);
         return () => clearTimeout(t);
-    }, [iframeSrc, geometry]);
-    return { rects, emptyZones, fields, docH, geometry, postToCanvas };
+    }, [iframeSrc, loaded, geometry]);
+    const onFrameLoad = useCallback(() => setLoaded(true), []);
+    return { rects, emptyZones, fields, docH, geometry, postToCanvas, onFrameLoad, crashed };
 }

package/dist/admin/editor/useCanvasDiagnosis.d.ts

@@ -0,0 +1,7 @@
+import { type CanvasCause } from "./canvas-diagnosis.ts";
+import type { Geometry } from "./useCanvasBridge.ts";
+export type CanvasDiagnosis = {
+    cause: CanvasCause;
+    path: string;
+};
+export declare function useCanvasDiagnosis(iframeSrc: string | null, geometry: Geometry): CanvasDiagnosis | null;

package/dist/admin/editor/useCanvasDiagnosis.js

@@ -0,0 +1,24 @@
+// The page editor's diagnosis of a silent canvas (spec 2026-09-27
+// shadowed-page detector §4): once the bridge's wait ends in "missing",
+// fetch the canvas URL once — same origin, so the draft-mode cookie rides
+// along and the server renders what the frame got — and name the cause.
+// A new src, or the bridge speaking after all, drops the answer.
+import { useEffect, useState } from "react";
+import { diagnoseCanvas, probeOf } from "./canvas-diagnosis.js";
+export function useCanvasDiagnosis(iframeSrc, geometry) {
+    const [diagnosis, setDiagnosis] = useState(null);
+    useEffect(() => {
+        setDiagnosis(null);
+        if (!iframeSrc || geometry !== "missing")
+            return;
+        let live = true;
+        const requested = new URL(iframeSrc, window.location.href);
+        fetch(requested.href, { cache: "no-store" })
+            .then((res) => probeOf(requested.href, res))
+            .catch(() => ({ kind: "failed" }))
+            .then((probe) => { if (live)
+            setDiagnosis({ cause: diagnoseCanvas(probe), path: requested.pathname }); });
+        return () => { live = false; };
+    }, [iframeSrc, geometry]);
+    return diagnosis;
+}

package/dist/admin/field-paths.d.ts

@@ -11,3 +11,6 @@ export declare function getAtPath(fields: Record<string, unknown> | undefined, p
  *  siblings keep their identity — and keeps arrays arrays. Missing
  *  objects along the way are created. */
 export declare function setAtPath(fields: Record<string, unknown> | undefined, path: string, value: unknown): Record<string, unknown>;
+/** `fields` without the key at `path` (spec 2026-09-27 editor safety §5: an orphan's Clear).
+ *  Copies only the spine; a missing path returns an equal copy. */
+export declare function unsetAtPath(fields: Record<string, unknown> | undefined, path: string): Record<string, unknown>;

package/dist/admin/field-paths.js

@@ -47,3 +47,29 @@ export function setAtPath(fields, path, value) {
     };
     return set(fields ?? {}, splitPath(path));
 }
+/** `fields` without the key at `path` (spec 2026-09-27 editor safety §5: an orphan's Clear).
+ *  Copies only the spine; a missing path returns an equal copy. */
+export function unsetAtPath(fields, path) {
+    const unset = (obj, segments) => {
+        if (obj === null || typeof obj !== "object")
+            return obj;
+        const [head, ...rest] = segments;
+        if (Array.isArray(obj)) {
+            const i = Number(head);
+            if (rest.length === 0 || !(i in obj))
+                return obj;
+            const copy = obj.slice();
+            copy[i] = unset(obj[i], rest);
+            return copy;
+        }
+        const o = obj;
+        if (!(head in o))
+            return o;
+        if (rest.length === 0) {
+            const { [head]: _gone, ...keep } = o;
+            return keep;
+        }
+        return { ...o, [head]: unset(o[head], rest) };
+    };
+    return unset(fields ?? {}, splitPath(path));
+}

package/dist/admin/forms/OrphanFields.d.ts

@@ -0,0 +1,8 @@
+import type { ReactElement } from "react";
+import type { Finding } from "../drift.ts";
+export declare function OrphanFields({ orphans, strip, onClear }: {
+    orphans: Finding[];
+    /** The node-id prefix to drop from the shown key and from the path Clear gets. */
+    strip?: string;
+    onClear(path: string): void;
+}): ReactElement | null;

package/dist/admin/forms/OrphanFields.js

@@ -0,0 +1,11 @@
+"use client";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Button } from "../ui/primitives.js";
+const shown = (v) => (typeof v === "string" ? v : JSON.stringify(v));
+export function OrphanFields({ orphans, strip, onClear }) {
+    const rows = orphans.filter((f) => f.kind === "orphan-field");
+    if (rows.length === 0)
+        return null;
+    const local = (p) => (strip && p.startsWith(`${strip}.`) ? p.slice(strip.length + 1) : p);
+    return (_jsxs("details", { className: "sm-orphans", "data-testid": "orphan-fields", children: [_jsx("summary", { className: "sm-orphans__head", children: "No longer in the schema" }), rows.map((f) => (_jsxs("div", { className: "sm-orphans__row", children: [_jsx("code", { children: local(f.path) }), _jsx("span", { className: "sm-orphans__value", children: shown(f.value) }), _jsx(Button, { variant: "secondary", onClick: () => { void navigator.clipboard?.writeText(shown(f.value)); }, children: "Copy" }), _jsx(Button, { variant: "secondary", onClick: () => onClear(local(f.path)), children: "Clear" })] }, f.path)))] }));
+}

package/dist/admin/forms/RefPicker.js

@@ -1,7 +1,8 @@
 "use client";
 import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
 // One widget for f.ref and f.refList (spec 2026-09-17 §2): a search input,
-// the picked entries under it. A refList's rows drag like a list's.
+// the picked entries under it. A refList's rows drag like a list's; a single
+// ref shows its pick inside the input, open and remove beside it (2026-09-27).
 import { ExternalLink } from "lucide-react";
 import { Combobox } from "../ui/Combobox.js";
 import { Grip, IconButton, cx } from "../ui/primitives.js";
@@ -10,6 +11,7 @@ import { useSortable } from "../ui/useSortable.js";
 import { useAdminHref } from "../shell/base.js";
 import { moveItem } from "./list.js";
 import { pickRef, refCandidates, refIds, refRows, refValue, statusTone } from "./ref-picker.js";
+const ABSENT = "Not available in this locale";
 const titleCase = (name) => name.replace(/^./, (c) => c.toUpperCase());
 function StatusDot({ status }) {
     if (status === "")
@@ -26,5 +28,7 @@ export function RefPicker({ value, onChange, options, multiple, max, target }) {
     const set = (next) => onChange(refValue(next, multiple));
     const sortable = useSortable({ count: multiple ? rows.length : 0, onDrop: (from, to) => set(moveItem(ids, from, to)) });
     const present = (options ?? []).filter((o) => !o.absent).length;
-    return (_jsxs("div", { className: "sm-refpicker", children: [_jsx(Combobox, { label: `Search ${titleCase(target)}`, keepOpen: multiple, options: candidates.map((o) => ({ value: o.id, label: o.title })), disabled: options === undefined || atMax, placeholder: atMax ? `Maximum ${max}` : options === undefined ? "Loading…" : "Type to search", emptyText: present === 0 ? `No entries in ${titleCase(target)} yet` : "Every entry is already picked", renderOption: (o) => (_jsxs(_Fragment, { children: [_jsx("span", { className: "sm-refpicker__title", children: o.label }), _jsx(StatusDot, { status: byId.get(o.value)?.status ?? "" })] })), onPick: (id) => set(pickRef(ids, id, multiple, max)) }), rows.length > 0 && (_jsx("div", { className: "sm-refpicker__rows", ref: sortable.containerRef, children: rows.map((r, i) => (_jsxs("div", { style: multiple ? sortable.rowStyle(i) : undefined, className: cx("sm-refrow", r.state !== "ok" && "sm-refrow--muted", multiple && sortable.rowClass(i)), children: [multiple && _jsx(Grip, { ...sortable.handleProps(i) }), _jsxs("span", { className: "sm-refpicker__title", children: [r.title, r.state === "absent" && _jsx("span", { className: "sm-refrow__note", children: " \u00B7 Not available in this locale" })] }), _jsx(StatusDot, { status: r.status }), (r.state === "ok" || r.state === "absent") && (_jsx("a", { className: "sm-iconbtn", href: adminHref(`/${target}/${r.id}`), target: "_blank", rel: "noreferrer", "aria-label": "Open entry", title: "Open entry", children: _jsx(ExternalLink, { size: 13, strokeWidth: 1.75, "aria-hidden": "true" }) })), _jsx(IconButton, { label: "Remove", onClick: () => set(ids.filter((_, j) => j !== i)), children: "\u00D7" })] }, `${r.id}-${i}`))) }))] }));
+    const openLink = (r) => (r.state === "ok" || r.state === "absent") && (_jsx("a", { className: "sm-iconbtn", href: adminHref(`/${target}/${r.id}`), target: "_blank", rel: "noreferrer", "aria-label": "Open entry", title: "Open entry", children: _jsx(ExternalLink, { size: 13, strokeWidth: 1.75, "aria-hidden": "true" }) }));
+    const single = multiple ? undefined : rows[0];
+    return (_jsxs("div", { className: "sm-refpicker", children: [_jsx(Combobox, { label: `Search ${titleCase(target)}`, keepOpen: multiple, options: candidates.map((o) => ({ value: o.id, label: o.title })), disabled: options === undefined || atMax, placeholder: atMax ? `Maximum ${max}` : options === undefined ? "Loading…" : "Type to search", emptyText: present === 0 ? `No entries in ${titleCase(target)} yet` : "Every entry is already picked", renderOption: (o) => (_jsxs(_Fragment, { children: [_jsx("span", { className: "sm-refpicker__title", children: o.label }), _jsx(StatusDot, { status: byId.get(o.value)?.status ?? "" })] })), selected: single && `${single.title}${single.state === "absent" ? ` · ${ABSENT}` : ""}`, suffix: single && (_jsxs(_Fragment, { children: [_jsx(StatusDot, { status: single.status }), openLink(single), _jsx(IconButton, { label: "Remove", onClick: () => set([]), children: "\u00D7" })] })), onPick: (id) => set(pickRef(ids, id, multiple, max)) }), multiple && rows.length > 0 && (_jsx("div", { className: "sm-refpicker__rows", ref: sortable.containerRef, children: rows.map((r, i) => (_jsxs("div", { style: multiple ? sortable.rowStyle(i) : undefined, className: cx("sm-refrow", r.state !== "ok" && "sm-refrow--muted", multiple && sortable.rowClass(i)), children: [multiple && _jsx(Grip, { ...sortable.handleProps(i) }), _jsxs("span", { className: "sm-refpicker__title", children: [r.title, r.state === "absent" && _jsxs("span", { className: "sm-refrow__note", children: [" \u00B7 ", ABSENT] })] }), _jsx(StatusDot, { status: r.status }), openLink(r), _jsx(IconButton, { label: "Remove", onClick: () => set(ids.filter((_, j) => j !== i)), children: "\u00D7" })] }, `${r.id}-${i}`))) }))] }));
 }

package/dist/admin/forms/RichtextElementCard.js

@@ -11,13 +11,16 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 // document's element nodes. Collapse is component state only: a card
 // starts collapsed (2026-09-09) unless it holds nothing yet — a freshly
 // inserted element opens, so its fields can be filled straight away.
+// Drift (spec 2026-09-27 editor safety §5): an unregistered element's card
+// takes the broken stripe and lists its stored fields read-only; a
+// registered one the field's toolset leaves out says so in its head.
 import { useState } from "react";
 import { NodeViewWrapper } from "@tiptap/react";
 import { isHidden } from "../../conditions.js";
-import { IconButton, SectionLabel } from "../ui/primitives.js";
+import { IconButton, SectionLabel, cx } from "../ui/primitives.js";
 import { FieldWidget } from "./FieldWidget.js";
 import { useElements } from "./elements-context.js";
-import { cardClass, useRichtextForm } from "./richtext-form-context.js";
+import { cardClass, elementCardState, useRichtextForm } from "./richtext-form-context.js";
 import { elementIndexAt } from "./richtext-insert.js";
 /** No field holds a value yet — the state right after an insert. */
 function isBlank(fields) {
@@ -31,6 +34,9 @@ export function RichtextElementCard({ node, editor, getPos, updateAttributes, de
     const fields = (node.attrs.fields && typeof node.attrs.fields === "object" ? node.attrs.fields : {});
     const settings = (node.attrs.settings && typeof node.attrs.settings === "object" ? node.attrs.settings : {});
     const [open, setOpen] = useState(() => isBlank(fields));
+    // As drift decides it: an element whose contexts dropped "richtext" is outside every toolset.
+    const allowed = form.elements?.filter((n) => elements.find((e) => e.name === n)?.contexts.includes("richtext"));
+    const state = elementCardState(name, Boolean(element), allowed);
     const pos = getPos();
     const index = typeof pos === "number" ? elementIndexAt(editor.state.doc, pos) : 0;
     const base = `${form.path}.elements.${index}`;
@@ -39,5 +45,5 @@ export function RichtextElementCard({ node, editor, getPos, updateAttributes, de
     const scope = { fields, settings };
     const visibleFields = Object.entries(element?.fields ?? {}).filter(([, d]) => !isHidden(d, { self: fields, ...scope }));
     const visibleSettings = Object.entries(element?.settings ?? {}).filter(([, d]) => !isHidden(d, { self: settings, ...scope }));
-    return (_jsxs(NodeViewWrapper, { className: cardClass(selected, form.canvas), "data-theme": form.canvas ? "light" : undefined, children: [_jsxs("div", { className: "sm-rtcard__head", "data-drag-handle": true, onClick: select, children: [_jsx("span", { className: "sm-rtcard__icon", "aria-hidden": "true", children: element?.icon ?? "▤" }), _jsx("span", { className: "sm-rtcard__title", children: element?.title ?? `Unknown element "${name}"` }), _jsx(IconButton, { label: open ? "Collapse" : "Expand", onClick: (e) => { e.stopPropagation(); setOpen((o) => !o); }, children: open ? "▾" : "▸" }), _jsx(IconButton, { label: "Delete element", onClick: (e) => { e.stopPropagation(); deleteNode(); }, children: "\u00D7" })] }), open && element && (_jsxs("div", { className: "sm-rtcard__body", contentEditable: false, children: [visibleFields.map(([key, d]) => (_jsx(FieldWidget, { fieldKey: key, descriptor: d, value: fields[key], errors: form.errors, path: `${base}.${key}`, scope: scope, onChange: (v) => updateAttributes({ fields: { ...fields, [key]: v } }) }, key))), visibleSettings.length > 0 && _jsx(SectionLabel, { caps: true, children: "Settings" }), visibleSettings.map(([key, d]) => (_jsx(FieldWidget, { fieldKey: key, descriptor: d, value: settings[key], errors: form.errors, path: `${base}.settings.${key}`, scope: scope, onChange: (v) => updateAttributes({ settings: { ...settings, [key]: v } }) }, `setting-${key}`)))] }))] }));
+    return (_jsxs(NodeViewWrapper, { className: cx(cardClass(selected, form.canvas), state.unknown && "sm-rtcard--broken"), "data-theme": form.canvas ? "light" : undefined, children: [_jsxs("div", { className: "sm-rtcard__head", "data-drag-handle": true, onClick: select, children: [_jsx("span", { className: "sm-rtcard__icon", "aria-hidden": "true", children: element?.icon ?? "▤" }), _jsx("span", { className: "sm-rtcard__title", children: element?.title ?? `Unknown element "${name}"` }), state.outside && _jsx("span", { className: "sm-hint", children: "Not in this field's toolset" }), _jsx(IconButton, { label: open ? "Collapse" : "Expand", onClick: (e) => { e.stopPropagation(); setOpen((o) => !o); }, children: open ? "▾" : "▸" }), _jsx(IconButton, { label: "Delete element", onClick: (e) => { e.stopPropagation(); deleteNode(); }, children: "\u00D7" })] }), open && !element && (_jsx("div", { className: "sm-rtcard__body", contentEditable: false, children: Object.entries(fields).map(([key, value]) => (_jsxs("div", { className: "sm-orphans__row", children: [_jsx("code", { children: key }), _jsx("span", { className: "sm-orphans__value", children: typeof value === "string" ? value : JSON.stringify(value) })] }, key))) })), open && element && (_jsxs("div", { className: "sm-rtcard__body", contentEditable: false, children: [visibleFields.map(([key, d]) => (_jsx(FieldWidget, { fieldKey: key, descriptor: d, value: fields[key], errors: form.errors, path: `${base}.${key}`, scope: scope, onChange: (v) => updateAttributes({ fields: { ...fields, [key]: v } }) }, key))), visibleSettings.length > 0 && _jsx(SectionLabel, { caps: true, children: "Settings" }), visibleSettings.map(([key, d]) => (_jsx(FieldWidget, { fieldKey: key, descriptor: d, value: settings[key], errors: form.errors, path: `${base}.settings.${key}`, scope: scope, onChange: (v) => updateAttributes({ settings: { ...settings, [key]: v } }) }, `setting-${key}`)))] }))] }));
 }

package/dist/admin/forms/RichtextWidget.js

@@ -8,6 +8,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 // flag, so its own cards stay admin-styled.
 import { useMemo } from "react";
 import { EditorContent } from "@tiptap/react";
+import { allowedOf } from "../../toolset.js";
 import { RichtextToolbar } from "./RichtextToolbar.js";
 import { RichtextInsertMenu } from "./RichtextInsertMenu.js";
 import { RichtextLinkRow, RichtextMenu } from "./RichtextPopovers.js";
@@ -17,7 +18,8 @@ import { useRichtextEditor } from "./useRichtextEditor.js";
 export function RichtextWidget({ value, toolset, onChange, errors, path = "" }) {
     const rt = useRichtextEditor({ value, toolset, onChange, contentClass: "sm-richtext__content" });
     const parent = useRichtextForm();
-    const formInfo = useMemo(() => ({ errors, path, canvas: parent.canvas }), [errors, path, parent.canvas]);
+    const allowed = useMemo(() => allowedOf(toolset).elements, [toolset]);
+    const formInfo = useMemo(() => ({ errors, path, canvas: parent.canvas, elements: allowed }), [errors, path, parent.canvas, allowed]);
     return (_jsx(RichtextFormProvider, { value: formInfo, children: _jsxs("div", { className: "sm-richtext", children: [_jsxs("div", { className: "sm-richtext__head", children: [_jsx(RichtextToolbar, { allowed: rt.allowed, active: rt.active, canInsert: rt.canInsert, onCommand: rt.run }), rt.menu.open && _jsx(RichtextMenu, { menu: rt.menu })] }), rt.link.open && _jsx(RichtextLinkRow, { link: rt.link }), _jsxs("div", { className: "sm-richtext__body", children: [_jsx(EditorContent, { editor: rt.editor }), rt.slash && (_jsx("div", { className: "sm-richtext__slash", style: { top: rt.slash.state.rect ? rt.slash.state.rect.bottom - (editorTop(rt.editor) ?? 0) + 4 : 0 }, children: _jsx(RichtextInsertMenu, { items: rt.slash.state.items, active: rt.slash.active, onPick: (item) => rt.slash?.state.pick(item) }) }))] }), rt.picker.open && _jsx(MediaPicker, { kinds: ["image"], onPick: rt.picker.pick, onClose: rt.picker.close })] }) }));
 }
 /** The editor's top in viewport coordinates, to place the slash menu relative to the body wrapper. */

package/dist/admin/forms/TagsField.js

@@ -27,7 +27,7 @@ export function TagsField({ value, onChange, max, suggestions, label, initialAdd
             timer.current = setTimeout(() => setFlash(null), 600);
         }
     };
-    return (_jsxs("div", { className: "sm-tags", children: [tags.map((t, i) => (_jsxs("span", { className: cx("sm-tag", flash === t && "sm-tag--flash"), children: [t, _jsx("button", { type: "button", className: "sm-tag__x", "aria-label": `Remove ${t}`, onClick: () => onChange(tags.filter((_, j) => j !== i)), children: "\u00D7" })] }, t))), adding && !atMax && (_jsx(Combobox, { className: "sm-combo--tag", label: `Add to ${label}`, placeholder: "Add a tag", autoFocus: true, keepOpen: true, initialOpen: true, options: (suggestions ?? []).filter((s) => !tags.some((t) => sameTag(t, s))).map((s) => ({ value: s, label: s })), onPick: commit, onSubmit: commit, createRow: suggestions !== undefined, onQueryChange: (next) => { if (!next.includes(","))
+    return (_jsxs("div", { className: "sm-tags", children: [tags.map((t, i) => (_jsxs("span", { className: cx("sm-tag", flash === t && "sm-tag--flash"), children: [t, _jsx("button", { type: "button", className: "sm-tag__x", "aria-label": `Remove ${t}`, onClick: () => onChange(tags.filter((_, j) => j !== i)), children: "\u00D7" })] }, t))), adding && !atMax && (_jsx(Combobox, { className: "sm-combo--tag", listClassName: "sm-combo__list--tag", label: `Add to ${label}`, placeholder: "Add a tag", autoFocus: true, keepOpen: true, initialOpen: true, options: (suggestions ?? []).filter((s) => !tags.some((t) => sameTag(t, s))).map((s) => ({ value: s, label: s })), onPick: commit, onSubmit: commit, createRow: suggestions !== undefined, onQueryChange: (next) => { if (!next.includes(","))
                     return next; commit(next); return ""; }, onInputKey: (e, query) => {
                     if (e.key !== "Backspace" || query !== "" || tags.length === 0)
                         return false;

package/dist/admin/forms/richtext-form-context.d.ts

@@ -4,6 +4,8 @@ export type RichtextFormInfo = {
     path: string;
     /** Mounted in the canvas: cards carry the admin's classes and the light theme (spec 2026-09-10 §5). */
     canvas?: boolean;
+    /** The field toolset's insertable elements — a card outside them says so (spec 2026-09-27 editor safety §5). */
+    elements?: string[];
 };
 export declare function RichtextFormProvider({ value, children }: {
     value: RichtextFormInfo;
@@ -14,3 +16,9 @@ export declare function useRichtextForm(): RichtextFormInfo;
  *  (`sm-admin`, light — the page stays light) and opts out of Tailwind
  *  typography (`not-prose`), which would otherwise style its internals. */
 export declare function cardClass(selected: boolean, canvas: boolean | undefined): string;
+/** What an element card marks (spec 2026-09-27 editor safety §5): an unregistered name, or a
+ *  registered one the field's toolset leaves out — the toolset gates insertion only, so it renders. */
+export declare function elementCardState(name: string, known: boolean, allowed: string[] | undefined): {
+    unknown: boolean;
+    outside: boolean;
+};

package/dist/admin/forms/richtext-form-context.js

@@ -16,3 +16,8 @@ export function useRichtextForm() { return useContext(Ctx); }
 export function cardClass(selected, canvas) {
     return ["sm-rtcard", selected && "sm-rtcard--selected", canvas && "sm-admin not-prose"].filter(Boolean).join(" ");
 }
+/** What an element card marks (spec 2026-09-27 editor safety §5): an unregistered name, or a
+ *  registered one the field's toolset leaves out — the toolset gates insertion only, so it renders. */
+export function elementCardState(name, known, allowed) {
+    return { unknown: !known, outside: known && allowed !== undefined && !allowed.includes(name) };
+}

package/dist/admin/health.d.ts

@@ -0,0 +1,23 @@
+import type { AdminRegistry } from "./serialize.ts";
+import type { PageScan } from "../store.ts";
+import { type EntryScan } from "../entry-store.ts";
+import { type VersionedFinding } from "./drift.ts";
+export type HealthDocKind = "page" | "entry" | "global";
+export type HealthFinding = VersionedFinding & {
+    locale: string;
+};
+export type HealthDocument = {
+    kind: HealthDocKind;
+    id: string;
+    title: string;
+    collection: string | null;
+    findings: HealthFinding[];
+};
+export type HealthReport = {
+    documents: HealthDocument[];
+    collections: {
+        name: string;
+        count: number;
+    }[];
+};
+export declare function buildHealthReport(registry: AdminRegistry, pages: PageScan[], entries: EntryScan[]): HealthReport;

package/dist/admin/health.js

@@ -0,0 +1,42 @@
+import { entryFieldsIn } from "../entry-store.js";
+import { entryDrift, mergeVersions, pageDrift } from "./drift.js";
+export function buildHealthReport(registry, pages, entries) {
+    const documents = [];
+    const def = registry.locales.default;
+    for (const scan of pages) {
+        const findings = [];
+        for (const locale of Object.keys(scan.record.locales)) {
+            const draft = pageDrift(registry, scan.record.template, scan.draft[locale] ?? null);
+            const live = scan.live[locale] ? pageDrift(registry, scan.record.template, scan.live[locale]) : [];
+            for (const f of mergeVersions(draft, live))
+                findings.push({ ...f, locale });
+        }
+        if (findings.length === 0)
+            continue;
+        const row = scan.record.locales[def] ?? Object.values(scan.record.locales)[0];
+        documents.push({ kind: "page", id: scan.record.id, title: row?.title ?? scan.record.id, collection: null, findings });
+    }
+    const unknown = new Map();
+    for (const { record, live } of entries) {
+        const collection = registry.collections.find((c) => c.name === record.collection);
+        const item = registry.globals.find((g) => g.name === record.collection);
+        if (!collection && !item) {
+            unknown.set(record.collection, (unknown.get(record.collection) ?? 0) + 1);
+            continue;
+        }
+        const findings = [];
+        for (const [locale, row] of Object.entries(record.locales)) {
+            const draft = entryDrift(registry, record.collection, { fields: entryFieldsIn(record, locale), shared: record.fields, own: row.fields });
+            const lived = live[locale] ? entryDrift(registry, record.collection, { fields: live[locale] }) : [];
+            for (const f of mergeVersions(draft, lived))
+                findings.push({ ...f, locale });
+        }
+        if (findings.length === 0)
+            continue;
+        const locale = record.locales[def] ? def : Object.keys(record.locales)[0];
+        const titleValue = collection?.titleField && locale ? entryFieldsIn(record, locale)[collection.titleField] : undefined;
+        const title = item ? item.title : typeof titleValue === "string" && titleValue !== "" ? titleValue : record.id;
+        documents.push({ kind: item ? "global" : "entry", id: record.id, title, collection: record.collection, findings });
+    }
+    return { documents, collections: [...unknown].map(([name, count]) => ({ name, count })) };
+}

package/dist/admin/index.d.ts

@@ -7,6 +7,7 @@ export { ensureGlobalItems, initialGlobalFields } from "./global-items.ts";
 export { makeClientOps } from "./client-ops.ts";
 export { gateAdminOp, type AdminAuth } from "./auth.ts";
 export { supabaseAdminAuth } from "./supabase-auth.ts";
+export type { AuthConfig } from "./shell/session.ts";
 export { serializeAdminConfig } from "./serialize.ts";
 export type { AdminRegistry, AdminSection, AdminCollection, AdminPageTemplate, AdminGlobal, AdminField } from "./serialize.ts";
 export * from "./tree-ops.ts";

package/dist/admin/next/bridge.js

@@ -14,7 +14,7 @@ import { jsx as _jsx } from "react/jsx-runtime";
 // offsets map 1:1 onto the overlay.
 import { useEffect } from "react";
 import { useRouter } from "next/navigation";
-import { BLANK_ATTR, EDITOR_ATTR, FIELD_ATTR, NODE_ATTR, ZONE_ATTR, resolveMarkPath } from "../../marks.js";
+import { BLANK_ATTR, CRASHED_ATTR, EDITOR_ATTR, FIELD_ATTR, NODE_ATTR, ZONE_ATTR, crashedOf, resolveMarkPath } from "../../marks.js";
 const post = (m) => window.parent.postMessage(m, "*");
 /** The height of an md-spaced section with nothing inside (3.5rem + 3.5rem). */
 // The editor sizes the iframe to the reported height; the document's own
@@ -69,7 +69,9 @@ export function EditorBridge() {
             }
             // Rounded up from the fractional box, so the frame is never a hair too short.
             const docH = Math.ceil(Math.max(document.documentElement.scrollHeight, document.documentElement.getBoundingClientRect().height));
-            post({ source: "smoodly", kind: "rects", nodes, emptyZones, fields, docH });
+            // Crashed sections (spec 2026-09-27 section guard §6): the placeholders the guard and the canvas net left.
+            const crashed = crashedOf(all(`[${CRASHED_ATTR}]`));
+            post({ source: "smoodly", kind: "rects", nodes, emptyZones, fields, docH, crashed });
         };
         const raf = () => requestAnimationFrame(report);
         const ro = new ResizeObserver(raf);

package/dist/admin/next/index.d.ts

@@ -6,4 +6,3 @@ export type { MemberRole } from "../../permissions.ts";
 export type { AuthConfig } from "../shell/session.ts";
 export type { ContentConfig } from "../../env.ts";
 export type { AdminAuth } from "../auth.ts";
-export { supabaseAdminAuth } from "../supabase-auth.ts";

package/dist/admin/next/index.js

@@ -1,3 +1,8 @@
+// The admin route group's entry. createSmoodlyAdmin imports the "use
+// client" shell, so any module that imports a value from here puts the
+// whole admin in its route's JavaScript — whether it renders or not.
+// Never import it from code the site's routes reach (smoodly/server.ts
+// included); the auth glue lives in `smoodly/admin`, which has no client
+// code.
 export { createAdminOpHandler } from "./op-handler.js";
 export { createSmoodlyAdmin } from "./create-admin.js";
-export { supabaseAdminAuth } from "../supabase-auth.js";