Source files and privacy

Source retention is optional for every import. It defaults off and never affects publication eligibility.

For .rev, choose Keep editable source in LIGR before creating the upload. For ZIP, choose Keep original archive in LIGR. REST clients must send retainSource: false when the user leaves it unchecked. Omitting, sending false, or sending null disables retention.

Raw .riv uploads reject retainSource: true with RUNTIME_HAS_NO_EDITABLE_SOURCE. Their immutable runtime revisions already preserve the uploaded bytes.

Playback images and source retention

retainSource: false disables storage of the original editor file or complete upload archive after processing. It does not remove supplied images required for playback. LIGR stores those images with the runtime revision. Required playback files remain available after save, reload, and publication, independently of the retention choice.

Missing external images remain explicitly unresolved in a draft. Known dimensions do not mean that image bytes are available. Use the builder’s image uploads or bindings to supply the missing images.

Temporary processing

LIGR receives editor source temporarily when it must compile that source. Users who do not want source uploaded can compile externally and upload only .riv.

An import expires after 24 hours. Processing attempts have a 15-minute deadline. Abandoned cleanup targets approximately 24 hours, plus manager scheduling and queue delivery time.

Cleanup retries after storage failures. Late upload events reopen cleanup after a previous pass. Cancelled and unattached candidates enter cleanup even when retention was selected.

Do not treat the upload URL expiry as deletion proof. The upload URL lasts 15 minutes, while cleanup follows the job lifecycle above.

Converter limits

The converter accepts script-free sources and uses bundled dependencies. It does not transmit source to Rive for signing. Scripted source conversion returns SCRIPT_SIGNING_UNSUPPORTED. Import configuration permits up to 20,000 mapped bindings and 4 MiB of serialized data, including expanded list rows.

Existing signed .riv runtimes remain supported. Check the selected environment’s import capabilities before uploading source.

Retained originals

Retention stores the exact uploaded .rev file or complete ZIP archive. LIGR never regenerates an editor file for an original download. It does not promise a byte-identical .rev to RML to .rev round trip.

A retained runtime-and-assets ZIP is stored as an original archive. It is not editable source.

Request metadata before requesting a file:

GET /rest/v2/themes/{themeId}/rive-graphics/{graphicId}/files/metadata?version=1&assetId={assetId}

Use version=working for the current draft. Use a positive number for one exact published version. Send assetId when the graphic has multiple matching assets.

originalAvailable: false means that exact revision has no retained original. LIGR never falls back to another version’s source. The builder settings menu offers Download runtime file (.riv) and a separate original download when that original is available.

A runtime download returns the exact .riv bytes for the selected version. It does not embed separately hosted images or reconstruct a ZIP. Keep the version’s configuration and playback images when moving that runtime to another renderer. To tell two versions apart, compare the sha256 field of each download. Two versions with the same .riv bytes have the same sha256.

GET /rest/v2/themes/{themeId}/rive-graphics/{graphicId}/files/original?version=1&assetId={assetId}

The response signs the exact owner-authorized object for five minutes. The complete original ZIP is the download; there is no archive-member extraction endpoint.

Themes that require editable source

Source stays optional by default. A theme owner can turn on Require editable source for Rive graphics in the theme settings. On such a theme, every import must carry editable source: a .rev file or a complete project ZIP. Runtime-only uploads (.riv, or a ZIP whose selected entry is a runtime) are refused with SOURCE_REQUIRED. The source is always kept, so retainSource is treated as true and the builder locks the retention choice on. GET /v2/themes/{themeId}/rive-graphics/capabilities reports sourceRequired: true for these themes. Turning the setting off later changes nothing already stored; imports made under it keep their source.