stack-site-builder 1.19.2 → 1.19.4

package/CHANGELOG.md

@@ -11,6 +11,27 @@ content schema, while a consuming site supplies only content, taxonomy data and
 config. Sites track the theme with `pnpm up stack-site-builder`, so each release
 here is a plain version bump they pull in.
 
+## [1.19.4] - 2026-07-24
+
+### Fixed
+
+- **Header no longer flickers on navigation** — the member login control used
+  to render `hidden` and only appear after a runtime `/aas-auth.json` fetch,
+  shifting the whole right-side icon row on every page load. Whether login
+  users are configured is a build-time fact (`AAS_PRIVATE_*` env), so the
+  control now renders in its final state; the fetch only wires the login form,
+  and is skipped entirely on sites without private users.
+
+## [1.19.3] - 2026-07-23
+
+### Fixed
+
+- **Hero/card icons: no more drop shadow, no more distortion** — the cards
+  home and product-landing hero icons dropped their shadow, and every icon
+  slot (heroes, home cards, products index) now uses `object-contain`, so a
+  non-square source keeps its aspect ratio instead of stretching to fill
+  the square box.
+
 ## [1.19.2] - 2026-07-23
 
 ### Fixed
@@ -345,6 +366,7 @@ catalog sites from a thin content-only repository.
 - **Standalone development setup** — a devcontainer and a minimal `playground/`
   consuming site for developing and previewing the theme on its own.
 
+[1.19.3]: https://github.com/CodeCompose7/stack-site-builder/compare/v1.19.2...v1.19.3
 [1.19.2]: https://github.com/CodeCompose7/stack-site-builder/compare/v1.19.1...v1.19.2
 [1.19.1]: https://github.com/CodeCompose7/stack-site-builder/compare/v1.19.0...v1.19.1
 [1.19.0]: https://github.com/CodeCompose7/stack-site-builder/compare/v1.18.0...v1.19.0

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "stack-site-builder",
   "type": "module",
-  "version": "1.19.2",
+  "version": "1.19.4",
   "license": "MIT",
   "description": "The engine behind the awesome-*-stack catalog sites: an Astro theme with the catalog/concepts/articles/slides/samples routes, components, styles and markdown pipeline. Sites provide content, taxonomy data and config.",
   "repository": {

package/src/components/CardsHome.astro

@@ -29,7 +29,7 @@ const resolveHref = (href: string, external?: boolean) =>
 ---
 
 <section class="py-14 text-center">
-  {h?.hero?.icon && <img src={withBase(h.hero.icon)} alt="" class="mx-auto h-20 w-20 rounded-[22%] shadow-md" />}
+  {h?.hero?.icon && <img src={withBase(h.hero.icon)} alt="" class="mx-auto h-20 w-20 rounded-[22%] object-contain" />}
   <h1 class="mt-5 text-4xl font-bold tracking-tight sm:text-5xl">{heroTitle}</h1>
   <p class="mx-auto mt-4 max-w-2xl text-xl text-[var(--aas-muted)]" set:html={heroSubtitle} />
 </section>
@@ -50,7 +50,7 @@ const resolveHref = (href: string, external?: boolean) =>
                 <img
                   src={withBase(c.icon)}
                   alt=""
-                  class:list={['h-20 w-20 shrink-0', c.rounded ? 'rounded-[22%]' : 'rounded-xl']}
+                  class:list={['h-20 w-20 shrink-0 object-contain', c.rounded ? 'rounded-[22%]' : 'rounded-xl']}
                   loading="lazy"
                 />
               )}

package/src/components/ProductLanding.astro

@@ -47,7 +47,7 @@ const altBg = (i: number) => i % 2 === 1;
     ]}
   >
     <div class="mx-auto max-w-[75rem] px-5">
-      {d.icon && <img src={withBase(d.icon)} alt="" class="mx-auto h-24 w-24 rounded-[22%] shadow-lg" />}
+      {d.icon && <img src={withBase(d.icon)} alt="" class="mx-auto h-24 w-24 rounded-[22%] object-contain" />}
       <h1 class="mt-6 text-4xl font-bold tracking-tight sm:text-5xl">{d.title}</h1>
       {d.subtitle && <p class="mt-3 text-xl text-[var(--aas-muted)]" set:html={d.subtitle} />}
       {

package/src/components/ProductsIndex.astro

@@ -54,7 +54,7 @@ const sections = productTree.roots
             class="aas-lift flex items-center gap-6 rounded-3xl border border-[var(--aas-border)] bg-[var(--aas-panel)] p-6 no-underline"
           >
             {a.data.icon && (
-              <img src={withBase(a.data.icon)} alt="" class="h-20 w-20 shrink-0 rounded-[22%]" loading="lazy" />
+              <img src={withBase(a.data.icon)} alt="" class="h-20 w-20 shrink-0 rounded-[22%] object-contain" loading="lazy" />
             )}
             <span class="min-w-0">
               <span class="block text-xl font-semibold text-[var(--aas-text)]">{a.data.title}</span>

package/src/layouts/BaseLayout.astro

@@ -11,6 +11,19 @@ import { getNavProducts, getTopProducts, productSlugOf } from '../lib/products';
 import { homeTemplate } from '../lib/home';
 import { sectionEnabled, type SectionKey } from '../lib/sections';
 import { siteIcons } from '../lib/icons';
+import { privateClientData } from '../lib/private';
+
+// Whether the site has login users configured is a build-time fact (AAS_PRIVATE_*
+// env), so the header login control renders in its final state instead of being
+// revealed after a runtime fetch — a late reveal shifted the whole icon row on
+// every navigation.
+let authEnabled = false;
+try {
+  privateClientData();
+  authEnabled = true;
+} catch {
+  /* no private env — control stays hidden */
+}
 
 interface Props {
   title: string;
@@ -272,9 +285,9 @@ const navItems = allNavItems.filter((item) => !item.section || sectionEnabled(it
               ))
             }
           </div>
-          {/* Member login/logout for private content — hidden until
-              /aas-auth.json reports the site has login users configured. */}
-          <details class="aas-menu relative" data-auth hidden>
+          {/* Member login/logout for private content — rendered only when the
+              build has login users configured, so the header never reflows. */}
+          <details class="aas-menu relative" data-auth hidden={!authEnabled}>
             <summary
               class="flex cursor-pointer list-none items-center rounded-lg border border-[var(--aas-border)] px-2.5 py-1 text-[var(--aas-text)] select-none"
               aria-label={t('private.login')}
@@ -391,17 +404,17 @@ const navItems = allNavItems.filter((item) => !item.section || sectionEnabled(it
         type AuthData,
       } from '../lib/private-client';
 
-      // Header member login/logout: reveal the control only when the site has
-      // login users configured (/aas-auth.json — { enabled: false } otherwise).
+      // Header member login/logout: visibility is decided at build time (the
+      // control renders hidden on sites without login users) — the fetch only
+      // wires the login form with the user table from /aas-auth.json.
       const authCtrl = document.querySelector<HTMLDetailsElement>('[data-auth]');
-      if (authCtrl) {
+      if (authCtrl && !authCtrl.hidden) {
         (async () => {
           try {
             const base = import.meta.env.BASE_URL.replace(/\/$/, '');
             const res = await fetch(`${base}/aas-auth.json`);
             const data = (await res.json()) as { enabled: boolean } & AuthData;
             if (!data.enabled) return;
-            authCtrl.hidden = false;
             const form = authCtrl.querySelector<HTMLFormElement>('[data-auth-form]')!;
             const logoutBtn = authCtrl.querySelector<HTMLButtonElement>('[data-auth-logout]')!;
             const errorEl = authCtrl.querySelector<HTMLElement>('[data-auth-error]')!;