smoodly 0.0.45 → 0.0.47

package/dist/admin/ops.d.ts

@@ -1,5 +1,5 @@
 import type { PageRecord } from "../store.ts";
-import type { PageTree } from "../render.tsx";
+import type { PageTree } from "../page-context.ts";
 import type { EntryRecord, EntryUsage } from "../entry-store.ts";
 import type { AssetRecord, AssetMeta } from "../media.ts";
 import type { AssetPage, AssetQuery, FinishInput, UploadTicket } from "../asset-store.ts";
@@ -289,7 +289,8 @@ export type AdminOps = {
     };
 };
 /** `token`: the editor's Supabase Auth session token, attached by the
- *  client facade and verified by the server gate (admin/auth.ts). */
+ *  client facade, sent as the Authorization header and verified by the
+ *  server gate (admin/auth.ts). */
 export type AdminOpCall = {
     path: string;
     args: unknown[];

package/dist/admin/page-data.d.ts

@@ -0,0 +1,21 @@
+import type { PresenceConfig } from "../env.ts";
+import type { AdminRegistry } from "./serialize.ts";
+import type { AuthConfig } from "./auth-config.ts";
+export type AdminPageData = {
+    registry: AdminRegistry;
+    /** What the browser needs to sign in: public values only. */
+    auth: AuthConfig;
+    /** What the browser needs to join the editing-presence channel; null = presence is off. */
+    presence: PresenceConfig | null;
+    /** Where operations are posted. */
+    opUrl: string;
+    /** The folder the package's files are served from, without a trailing slash. */
+    filesBase: string;
+    /** What the editor puts before a page's address to load its draft: "" where the framework serves drafts
+     *  at the page's own address (Next), the preview address's base where it does not (Astro). */
+    previewBase: string;
+};
+export declare const ADMIN_DATA_ID = "smoodly-admin-data";
+export declare const ADMIN_ROOT_ID = "smoodly-admin-root";
+/** The reserved segment under the admin path: the endpoint and the files live here. */
+export declare const ADMIN_INTERNAL = "_smoodly";

package/dist/admin/page-data.js

@@ -0,0 +1,4 @@
+export const ADMIN_DATA_ID = "smoodly-admin-data";
+export const ADMIN_ROOT_ID = "smoodly-admin-root";
+/** The reserved segment under the admin path: the endpoint and the files live here. */
+export const ADMIN_INTERNAL = "_smoodly";

package/dist/admin/page.d.ts

@@ -0,0 +1,6 @@
+import { type AdminPageData } from "./page-data.ts";
+/** The theme boot runs inside the wrapper (it reads `currentScript.parentElement`), before first paint;
+ *  the script then mounts the shell into the wrapper, replacing the boot and the notice. */
+export declare function adminPageHtml(data: AdminPageData): string;
+/** An admin that cannot start: the message, on the admin's own background. */
+export declare function adminErrorHtml(message: string): string;

package/dist/admin/page.js

@@ -0,0 +1,35 @@
+// packages/smoodly/src/admin/page.ts
+// The admin's one HTML page (spec 2026-10-02 astro cloud fit §4): a mount point, the page's data as JSON
+// and the script. The same document for every address under the admin path; the shell reads its route
+// from the URL (shell/router.ts). Framework-free: a string.
+import { ADMIN_DATA_ID, ADMIN_ROOT_ID } from "./page-data.js";
+import { BOOT_CSS, THEME_BOOT } from "./ui/theme.js";
+const escapeHtml = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+/** JSON for a <script> element: every `<` escaped, so no value can close the element or open a comment. */
+const scriptJson = (value) => JSON.stringify(value).replace(/</g, "\\u003c");
+const notice = (text) => `<div style="height:100vh;display:grid;place-items:center;padding:0 24px;text-align:center;font:14px/1.5 system-ui,sans-serif;color:#8A8FA3">${text}</div>`;
+const documentOf = (body) => `<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<meta name="robots" content="noindex">
+<title>Smoodly</title>
+<style data-smoodly-boot>${BOOT_CSS}</style>
+</head>
+<body>
+${body}
+</body>
+</html>
+`;
+/** The theme boot runs inside the wrapper (it reads `currentScript.parentElement`), before first paint;
+ *  the script then mounts the shell into the wrapper, replacing the boot and the notice. */
+export function adminPageHtml(data) {
+    return documentOf(`<div class="sm-admin" id="${ADMIN_ROOT_ID}"><script>${THEME_BOOT}</script>${notice("Loading…")}</div>\n` +
+        `<script type="application/json" id="${ADMIN_DATA_ID}">${scriptJson(data)}</script>\n` +
+        `<script type="module" src="${escapeHtml(data.filesBase)}/admin.js"></script>`);
+}
+/** An admin that cannot start: the message, on the admin's own background. */
+export function adminErrorHtml(message) {
+    return documentOf(`<div class="sm-admin">${notice(escapeHtml(message))}</div>`);
+}

package/dist/admin/serialize.js

@@ -28,11 +28,11 @@ function serializeMap(map) {
 }
 /** A registered section's settings descriptors — what a visual global's form shows (spec 2026-09-14 §3). */
 export function sectionSettings(config, name) {
-    return (config.registry.sections ?? []).find((s) => s.schema.name === name)?.schema.settings ?? {};
+    return config.registry.sections.find((s) => s.name === name)?.settings ?? {};
 }
 /** Whether a section gets the custom-CSS box: the project flag, unless the schema opts out (spec 2026-09-14 §4). */
 function sectionCss(config, name) {
-    return config.css && (config.registry.sections ?? []).find((s) => s.schema.name === name)?.schema.css !== false;
+    return config.css && config.registry.sections.find((s) => s.name === name)?.css !== false;
 }
 const lower = (key) => fieldLabel(key).toLowerCase();
 function seoLabels(c) {
@@ -46,7 +46,7 @@ function seoLabels(c) {
 export function serializeAdminConfig(config) {
     const perLocale = (v) => perLocaleSegments(v, config.locales.supported);
     return {
-        sections: (config.registry.sections ?? []).map(({ schema }) => {
+        sections: config.registry.sections.map((schema) => {
             const s = schema;
             return {
                 name: s.name,
@@ -60,7 +60,7 @@ export function serializeAdminConfig(config) {
                 sample: s.sample,
             };
         }),
-        elements: (config.registry.elements ?? []).map(({ schema }) => {
+        elements: config.registry.elements.map((schema) => {
             const e = schema;
             return {
                 name: e.name,
@@ -84,9 +84,9 @@ export function serializeAdminConfig(config) {
                 ...(c.seo !== undefined ? { seo: seoLabels(c) } : {}),
             };
         }),
-        pages: (config.registry.pages ?? [])
-            .filter(({ schema }) => schema.kind === "page")
-            .map(({ schema }) => {
+        pages: config.registry.pages
+            .filter((schema) => schema.kind === "page")
+            .map((schema) => {
             const p = schema;
             const slug = fixedSlug(p, config.locales.default);
             return {

package/dist/admin/shell/AdminApp.js

@@ -5,8 +5,8 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 // list views in the main area, editor/entry views mounted by segment.
 // Internal routing is the shell's own (shell/router.ts): the route is read
 // from the URL on mount, then pushState moves between views and the shell
-// never reloads (spec 2026-09-08 client routing). The shell mounts from the
-// admin LAYOUT (next/create-admin.tsx), never from the catch-all page.
+// never reloads (spec 2026-09-08 client routing). The shell is mounted by
+// the prebuilt entry (browser/main.tsx) into the admin's one HTML page (page.ts).
 //
 // Layout is the design system's three columns: the 72px icon rail
 // (shell/IconRail.tsx), then the main column whose views own their own

package/dist/admin/shell/ContentHealthPage.js

@@ -26,7 +26,9 @@ export function ContentHealthPage({ ops, registry, initial = null }) {
         return _jsx(ErrorPane, { message: error, back: false, onRetry: scan });
     const sections = report ? healthSections(report, registry) : null;
     const brokenCount = sections ? sections.broken.length + sections.collections.length : 0;
-    return (_jsxs(_Fragment, { children: [_jsx(TopBar, { left: _jsx("span", { className: "sm-title", children: "Content health" }), right: _jsxs(_Fragment, { children: [report && _jsx("span", { className: "sm-hint", children: "Checked just now" }), _jsx(Button, { variant: "secondary", onClick: scan, disabled: !report, children: "Rescan" })] }) }), _jsx("div", { className: "sm-listwrap", children: _jsxs("div", { className: "sm-table sm-health", children: [!sections && _jsx("div", { className: "sm-empty", children: "Checking content\u2026" }), sections && brokenCount === 0 && sections.orphan.length === 0 && _jsx("div", { className: "sm-empty", children: "Everything matches the code." }), sections && brokenCount > 0 && (_jsxs("section", { children: [_jsxs("h2", { className: "sm-health__section", children: ["Blocks publishing \u00B7 ", brokenCount] }), sections.collections.map((c) => _jsx("p", { className: "sm-health__headline", children: c.headline }, c.name)), sections.broken.map((g) => _jsx(Group, { group: g }, g.key))] })), sections && sections.orphan.length > 0 && (_jsxs("section", { children: [_jsxs("h2", { className: "sm-health__section", children: ["Left over \u00B7 ", sections.orphan.length] }), sections.orphan.map((g) => _jsx(Group, { group: g }, g.key))] }))] }) })] }));
+    return (_jsxs(_Fragment, { children: [_jsx(TopBar, { left: _jsx("span", { className: "sm-title", children: "Content health" }), right: _jsxs(_Fragment, { children: [report && _jsx("span", { className: "sm-hint", children: "Checked just now" }), _jsx(Button, { variant: "secondary", onClick: scan, disabled: !report, children: "Rescan" })] }) }), _jsx("div", { className: "sm-listwrap", children: _jsxs("div", { className: "sm-table sm-health", children: [!sections && _jsx("div", { className: "sm-empty", children: "Checking content\u2026" }), report?.delivery && (_jsx("p", { className: "sm-health__delivery", children: report.delivery.behind === 0
+                                ? "Every published document is current."
+                                : _jsxs(_Fragment, { children: [report.delivery.behind, " ", report.delivery.behind === 1 ? "document is" : "documents are", " behind the current stamp. Run ", _jsx("code", { children: "npx smoodly rebuild" }), " in the site's folder."] }) })), sections && brokenCount === 0 && sections.orphan.length === 0 && _jsx("div", { className: "sm-empty", children: "Everything matches the code." }), sections && brokenCount > 0 && (_jsxs("section", { children: [_jsxs("h2", { className: "sm-health__section", children: ["Blocks publishing \u00B7 ", brokenCount] }), sections.collections.map((c) => _jsx("p", { className: "sm-health__headline", children: c.headline }, c.name)), sections.broken.map((g) => _jsx(Group, { group: g }, g.key))] })), sections && sections.orphan.length > 0 && (_jsxs("section", { children: [_jsxs("h2", { className: "sm-health__section", children: ["Left over \u00B7 ", sections.orphan.length] }), sections.orphan.map((g) => _jsx(Group, { group: g }, g.key))] }))] }) })] }));
 }
 function Group({ group }) {
     const adminHref = useAdminHref();

package/dist/admin/shell/EntryForm.js

@@ -456,7 +456,7 @@ export function EntryForm({ ops, registry, collection, id }) {
             return;
         const r = await ops.entries.delete(collection, id);
         if (r.ok)
-            void navigate(adminHref(`/${collection}`), { force: true });
+            void navigate(adminHref(`/${collection}`));
         else
             fail(r);
     };

package/dist/admin/shell/router.d.ts

@@ -1,4 +1,3 @@
-import { type ConfirmOptions } from "../ui/confirm.ts";
 export type Route = {
     pathname: string;
     segments: string[];
@@ -19,27 +18,15 @@ export declare function isPlainLeftClick(e: {
     altKey: boolean;
     defaultPrevented: boolean;
 }, target?: string | null): boolean;
-/** The leave question, asked in the admin's own dialog (ui/confirm.ts). */
-export declare const LEAVE_CONFIRM: ConfirmOptions;
-/** Leaving is allowed when no guard is dirty, else when the editor
- *  confirms — asked once, however many guards are dirty. */
-export declare function mayLeave(guards: Iterable<() => boolean>, confirm: (options: ConfirmOptions) => boolean | Promise<boolean>): Promise<boolean>;
-/** Move to `href` in place; resolves true when the move happened. A push
- *  asks the leave guard (in the admin's dialog, so the answer is awaited);
- *  a replace never leaves the view, so it does not ask. `force` skips the
- *  guard for a view that has just saved or deleted its record — React has
- *  not flushed its setDirty(false) yet. */
+/** Move to `href` in place; resolves true when the move happened. Every
+ *  view saves by itself, so nothing asks before leaving. */
 export declare function navigate(href: string, opts?: {
     replace?: boolean;
-    force?: boolean;
 }): Promise<boolean>;
 /** The current route under `base`: empty until mount, then the URL,
  *  re-read on popstate and after navigate(). */
 export declare function useRoute(base: string): Route;
-/** Register the calling view as dirty: navigate() asks before leaving,
- *  and beforeunload covers reload, closing the tab and a real link out. */
-export declare function useLeaveGuard(dirty: boolean): void;
-/** The tab-close half of useLeaveGuard alone, for a view that saves on
+/** The tab-close guard, for a view that saves on
  *  unmount (the page editor, spec 2026-09-29 pre-install fixes §4): an
  *  in-app navigation loses nothing, so only reload, closing the tab and a
  *  real link out ask, while a change or a save is pending. */

package/dist/admin/shell/router.js

@@ -10,7 +10,6 @@
 // framework-agnostic.
 import { useEffect, useState } from "react";
 import { DEFAULT_ADMIN_PATH } from "../../admin-path.js";
-import { confirm } from "../ui/confirm.js";
 /** The segments under `base`: "/admin/articles/x" → ["articles", "x"];
  *  the mount itself, or a pathname outside it, → []. Segments stay as
  *  written; the shell decodes the ones it uses, as it does for the
@@ -29,24 +28,7 @@ export function isPlainLeftClick(e, target) {
         return false;
     return !target || target === "_self";
 }
-/** The leave question, asked in the admin's own dialog (ui/confirm.ts). */
-export const LEAVE_CONFIRM = {
-    title: "Discard unsaved changes?",
-    body: "Your latest edits have not been saved and will be lost if you leave now.",
-    confirmLabel: "Discard changes",
-    cancelLabel: "Stay",
-    destructive: true,
-};
-/** Leaving is allowed when no guard is dirty, else when the editor
- *  confirms — asked once, however many guards are dirty. */
-export async function mayLeave(guards, confirm) {
-    for (const dirty of guards)
-        if (dirty())
-            return confirm(LEAVE_CONFIRM);
-    return true;
-}
 // ── the live router ──────────────────────────────────────────────────
-const guards = new Set();
 const listeners = new Set();
 function currentRoute(base) {
     const { pathname, search } = window.location;
@@ -55,14 +37,9 @@ function currentRoute(base) {
 // The segments derive from the pathname and a base that never changes
 // under a mounted shell, so two strings decide sameness.
 const sameRoute = (a, b) => a.pathname === b.pathname && a.search === b.search;
-/** Move to `href` in place; resolves true when the move happened. A push
- *  asks the leave guard (in the admin's dialog, so the answer is awaited);
- *  a replace never leaves the view, so it does not ask. `force` skips the
- *  guard for a view that has just saved or deleted its record — React has
- *  not flushed its setDirty(false) yet. */
+/** Move to `href` in place; resolves true when the move happened. Every
+ *  view saves by itself, so nothing asks before leaving. */
 export async function navigate(href, opts = {}) {
-    if (!opts.replace && !opts.force && !(await mayLeave(guards, confirm)))
-        return false;
     window.history[opts.replace ? "replaceState" : "pushState"](null, "", href);
     for (const listener of listeners)
         listener();
@@ -81,20 +58,7 @@ export function useRoute(base) {
     }, [base]);
     return route;
 }
-/** Register the calling view as dirty: navigate() asks before leaving,
- *  and beforeunload covers reload, closing the tab and a real link out. */
-export function useLeaveGuard(dirty) {
-    useEffect(() => {
-        if (!dirty)
-            return;
-        const guard = () => true;
-        guards.add(guard);
-        const onBeforeUnload = (e) => { e.preventDefault(); e.returnValue = ""; };
-        window.addEventListener("beforeunload", onBeforeUnload);
-        return () => { guards.delete(guard); window.removeEventListener("beforeunload", onBeforeUnload); };
-    }, [dirty]);
-}
-/** The tab-close half of useLeaveGuard alone, for a view that saves on
+/** The tab-close guard, for a view that saves on
  *  unmount (the page editor, spec 2026-09-29 pre-install fixes §4): an
  *  in-app navigation loses nothing, so only reload, closing the tab and a
  *  real link out ask, while a change or a save is pending. */

package/dist/admin/shell/session.d.ts

@@ -1,9 +1,6 @@
 import { type Session, type SupabaseClient } from "@supabase/supabase-js";
-export type AuthConfig = {
-    url: string;
-    key: string;
-    providers?: ("google" | "github")[];
-};
+import type { AuthConfig } from "../auth-config.ts";
+export type { AuthConfig };
 export type Arrival = "invite" | "recovery";
 /** What an auth email link says it is: GoTrue's implicit flow puts `type=` in the fragment; a query form is accepted too. */
 export declare function arrivalOf(hash: string, search: string): Arrival | null;

package/dist/admin/supabase-auth.js

@@ -11,7 +11,7 @@ export function supabaseAdminAuth(input) {
     let client = null;
     const auth = () => {
         if (!input.authKey) {
-            throw new Error("smoodly: set SMOODLY_PUBLISHABLE_KEY in .env.local, or in your host's environment variables — the admin signs in with it (Deploying: https://smoodly.io/docs/getting-started/deploying).");
+            throw new Error("smoodly: set SMOODLY_PUBLISHABLE_KEY in .env (Astro) or .env.local (Next.js), or in your host's environment variables — the admin signs in with it (Deploying: https://smoodly.io/docs/getting-started/deploying).");
         }
         return (client ?? (client = createClient(input.authUrl, input.authKey, { auth: { persistSession: false, autoRefreshToken: false } })));
     };

package/dist/admin/tree-ops.d.ts

@@ -1,4 +1,4 @@
-import type { PageTree, TreeNode } from "../render.tsx";
+import type { PageTree, TreeNode } from "../page-context.ts";
 import type { ZonePolicy } from "../zones.ts";
 import type { AdminSection, AdminGlobal } from "./serialize.ts";
 export declare function zoneOf(tree: PageTree, id: string): string | null;

package/dist/admin/ui/fonts.d.ts

@@ -0,0 +1,12 @@
+export declare const FONT_FILES: readonly [{
+    readonly file: "public-sans-latin.woff2";
+    readonly source: "public-sans-latin-wght-normal.woff2";
+    readonly range: "U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD";
+}, {
+    readonly file: "public-sans-latin-ext.woff2";
+    readonly source: "public-sans-latin-ext-wght-normal.woff2";
+    readonly range: "U+0100-02BA,U+02BD-02C5,U+02C7-02CC,U+02CE-02D7,U+02DD-02FF,U+0304,U+0308,U+0329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF";
+}];
+/** The @font-face rules with the files' absolute addresses: the same text goes into the admin's own
+ *  document and into the canvas frame's, where a relative address would resolve against the site page. */
+export declare function fontFaceCss(filesBase: string): string;

package/dist/admin/ui/fonts.js

@@ -0,0 +1,22 @@
+// packages/smoodly/src/admin/ui/fonts.ts
+// The admin's own font, served by the admin's route from the package's files (plan 2026-10-03 prebuilt
+// admin): no request leaves the site for it. Public Sans, variable weight, two subsets; the browser
+// fetches a subset only when the page shows a character in its range. `source` is the file's name in
+// @fontsource-variable/public-sans, which the build reads (scripts/build-admin.ts).
+export const FONT_FILES = [
+    {
+        file: "public-sans-latin.woff2",
+        source: "public-sans-latin-wght-normal.woff2",
+        range: "U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD",
+    },
+    {
+        file: "public-sans-latin-ext.woff2",
+        source: "public-sans-latin-ext-wght-normal.woff2",
+        range: "U+0100-02BA,U+02BD-02C5,U+02C7-02CC,U+02CE-02D7,U+02DD-02FF,U+0304,U+0308,U+0329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF",
+    },
+];
+/** The @font-face rules with the files' absolute addresses: the same text goes into the admin's own
+ *  document and into the canvas frame's, where a relative address would resolve against the site page. */
+export function fontFaceCss(filesBase) {
+    return FONT_FILES.map((f) => `@font-face{font-family:'Public Sans';font-style:normal;font-display:swap;font-weight:100 900;src:url(${filesBase}/${f.file}) format('woff2');unicode-range:${f.range}}`).join("\n");
+}

package/dist/admin/ui/theme.d.ts

@@ -1,7 +1,16 @@
+/** The sheet colours, named so the page's pre-script background (BOOT_CSS) cannot drift from the tokens. */
+export declare const SHEET_LIGHT = "#FFFFFF";
+export declare const SHEET_DARK = "#1B1E30";
 export declare const ADMIN_CSS: string;
 /** Where the theme toggle's choice is remembered, browser-side only. */
 export declare const THEME_KEY = "smoodly-theme";
-/** Which look the developer is comparing (see the warm block): "warm" applies it, anything else is the default. */
-export declare const LOOK_KEY = "smoodly-look";
-/** One <style> element and the theme boot, rendered once by AdminLayout. */
-export declare function AdminStyles(): import("react").JSX.Element;
+/** Applies a remembered choice before first paint, so a dark-mode editor never
+ *  gets a white flash, and the inspector never jumps to a dragged width. It
+ *  runs INSIDE the admin wrapper, so `currentScript.parentElement` is that
+ *  element — no id lookup, and the host document's <html> is left alone. The
+ *  width test repeats parseStoredWidth (ui/resize.ts) inline: an integer
+ *  string at or above the minimum, else ignored. */
+export declare const THEME_BOOT: string;
+/** The admin page's background until the script has injected the stylesheet: the sheet colour under the
+ *  tokens' own light and dark rules, so a dark-mode editor never gets a white flash (admin/page.ts). */
+export declare const BOOT_CSS: string;