@caelo-cms/provisioning 0.10.72 → 0.11.0

package/dist/agent-db.js

@@ -6335,6 +6335,175 @@ var ZodIssueCode = {
 };
 var ZodFirstPartyTypeKind;
 (function(ZodFirstPartyTypeKind) {})(ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {}));
+// ../shared/src/lists/fields.ts
+var LIST_RESERVED_NAMES = new Set([
+  "id",
+  "node",
+  "index",
+  "depth",
+  "first",
+  "last",
+  "items",
+  "page",
+  "recurse"
+]);
+var listNameSchema = string2().regex(/^[a-z][a-z0-9_]{0,63}$/, "must be snake_case (lowercase letters, digits, underscores)");
+var fieldLabel = string2().min(1).max(128);
+var fieldExtSchema = record(string2().regex(/^[a-z0-9-]+$/), unknown());
+var base = {
+  name: listNameSchema,
+  label: fieldLabel,
+  required: boolean2().optional(),
+  default: unknown().optional(),
+  ext: fieldExtSchema.optional()
+};
+var textField = object({
+  ...base,
+  type: literal("text"),
+  maxLength: number2().int().min(1).max(2000).optional()
+}).strict();
+var richtextField = object({
+  ...base,
+  type: literal("richtext"),
+  maxLength: number2().int().min(1).max(20000).optional()
+}).strict();
+var linkField = object({ ...base, type: literal("link") }).strict();
+var mediaField = object({ ...base, type: literal("media") }).strict();
+var selectField = object({
+  ...base,
+  type: literal("select"),
+  options: array(listNameSchema).min(1).max(64)
+}).strict();
+var booleanField = object({ ...base, type: literal("boolean") }).strict();
+var numberField = object({
+  ...base,
+  type: literal("number"),
+  min: number2().optional(),
+  max: number2().optional()
+}).strict();
+var dateField = object({ ...base, type: literal("date") }).strict();
+var iconField = object({ ...base, type: literal("icon") }).strict();
+var moduleField = object({
+  ...base,
+  type: literal("module"),
+  accepts: array(string2().regex(/^[a-z0-9-]+$/)).max(32).optional()
+}).strict();
+var termField = object({
+  ...base,
+  type: literal("term"),
+  list: string2().regex(/^[a-z0-9-]+$/),
+  multiple: boolean2().optional()
+}).strict();
+var fieldDefSchema = discriminatedUnion("type", [
+  textField,
+  richtextField,
+  linkField,
+  mediaField,
+  selectField,
+  booleanField,
+  numberField,
+  dateField,
+  iconField,
+  moduleField,
+  termField
+]);
+var linkValueSchema = object({
+  href: string2().min(1).max(2000),
+  target: _enum(["_self", "_blank"]).optional()
+}).strict();
+var embeddedModuleValueSchema = object({ moduleId: string2().uuid(), contentInstanceId: string2().uuid() }).strict();
+
+// ../shared/src/lists/list-type.ts
+var LIST_MAX_DEPTH = 8;
+var LIST_MAX_ITEMS = 500;
+var LIST_QUERY_MAX_LIMIT = 50;
+var QUERY_KNOBS = [
+  "page_type",
+  "terms",
+  "terms_mode",
+  "parent",
+  "exclude_current",
+  "order",
+  "limit"
+];
+var SYSTEM_SOURCE_NAMES = [
+  "breadcrumbs",
+  "children",
+  "siblings",
+  "page_terms",
+  "term_pages"
+];
+var queryOrderSchema = union([
+  _enum(["published_desc", "published_asc", "title_asc"]),
+  string2().regex(/^prop_(?:desc|asc):[a-z][a-z0-9_]{0,63}$/)
+]);
+var pageQuerySchema = object({
+  page_type: string2().regex(/^[a-z0-9-]+$/).optional(),
+  terms: array(string2().regex(/^caelo:term\/[0-9a-f-]{36}\/[0-9a-f-]{36}$/)).max(20).optional(),
+  terms_mode: _enum(["any", "all"]).optional(),
+  parent: string2().regex(/^caelo:page\/[0-9a-f-]{36}$/).optional(),
+  exclude_current: boolean2().optional(),
+  order: queryOrderSchema,
+  limit: number2().int().min(1).max(LIST_QUERY_MAX_LIMIT)
+}).strict();
+var pageQueryPartialSchema = pageQuerySchema.partial();
+var sourceDefSchema = discriminatedUnion("kind", [
+  object({
+    kind: literal("query"),
+    editable: array(_enum(QUERY_KNOBS)).max(QUERY_KNOBS.length),
+    defaults: pageQueryPartialSchema
+  }).strict(),
+  object({
+    kind: literal("system"),
+    name: _enum(SYSTEM_SOURCE_NAMES, {
+      error: () => `system sources are ${SYSTEM_SOURCE_NAMES.join(", ")} \u2014 a plugin's list source (consent_categories, language_links, \u2026) is {kind:"plugin", name:"<source>"}, and a module that only iterates it needs no field at all: {{#<source>}}\u2026{{/<source>}}.`
+    })
+  }).strict(),
+  object({
+    kind: literal("plugin"),
+    name: string2().regex(/^[a-z][a-z0-9_]{0,63}$/)
+  }).strict()
+]);
+var childrenSchema = object({
+  name: listNameSchema,
+  allow: array(listNameSchema).min(1).max(32),
+  max: number2().int().min(1).max(LIST_MAX_ITEMS).optional()
+}).strict();
+var nodeDefSchema = object({
+  label: string2().min(1).max(128),
+  fields: array(fieldDefSchema).max(32),
+  children: childrenSchema.optional(),
+  current_from: listNameSchema.optional(),
+  source: sourceDefSchema.optional(),
+  ext: fieldExtSchema.optional()
+}).strict();
+var LIST_TYPE_ROLES = ["navigation", "vocabulary", "content"];
+var listTypeDefSchema = object({
+  slug: string2().regex(/^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$/),
+  name: string2().min(1).max(200),
+  purpose: string2().min(1).max(1000),
+  role: _enum(LIST_TYPE_ROLES),
+  root: object({
+    allow: array(listNameSchema).min(1).max(32),
+    max: number2().int().min(1).max(LIST_MAX_ITEMS).optional()
+  }).strict(),
+  nodes: record(listNameSchema, nodeDefSchema),
+  max_depth: number2().int().min(1).max(LIST_MAX_DEPTH).optional()
+}).strict();
+
+// ../shared/src/lists/items.ts
+var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
+var listItemInputSchema = lazy(() => object({
+  id: string2().regex(UUID_RE, "id must be a lowercase uuid").optional(),
+  node: string2().min(1).max(64),
+  values: record(string2(), unknown()).default({}),
+  children: array(listItemInputSchema).optional(),
+  query: record(string2(), unknown()).optional()
+}).strict());
+
+// ../shared/src/lists/refs.ts
+var LIST_REF_RE = /^caelo:list\/([0-9a-f-]{36})$/;
+
 // ../shared/src/content.ts
 var slugSchema = string2().regex(/^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$/, "slug must be lowercase letters, digits, or hyphens (1\u201364 chars, no leading/trailing hyphen)");
 var displayNameSchema = string2().min(1).max(128);
@@ -6343,12 +6512,39 @@ var MODULE_CSS_MAX = 128 * 1024;
 var MODULE_JS_MAX = 256 * 1024;
 var TEMPLATE_HTML_MAX = 512 * 1024;
 var TEMPLATE_CSS_MAX = 128 * 1024;
-var moduleHtml = string2().max(MODULE_HTML_MAX, `html exceeds ${MODULE_HTML_MAX} bytes`);
+function jsonEncodedCodeMessage(field, value) {
+  const t = value.trim();
+  if (t.length < 2 || !t.startsWith('"') || !t.endsWith('"'))
+    return null;
+  try {
+    if (typeof JSON.parse(t) !== "string")
+      return null;
+  } catch {
+    return null;
+  }
+  return `${field} is JSON-encoded (wrapped in quotes with \\" escapes) \u2014 send the raw ${field} itself, not a JSON string of it.`;
+}
+function htmlEscapedMarkupMessage(field, value) {
+  if (value.includes("<") || !/&lt;\/?[a-zA-Z]/.test(value))
+    return null;
+  return `${field} is HTML-escaped (&lt;\u2026&gt; instead of <\u2026>) \u2014 send the markup itself, unescaped.`;
+}
+var noCorruptMarkup = (field) => (value, ctx) => {
+  const message = jsonEncodedCodeMessage(field, value) ?? htmlEscapedMarkupMessage(field, value);
+  if (message)
+    ctx.addIssue({ code: "custom", message });
+};
+var noJsonEncodedCode = (field) => (value, ctx) => {
+  const message = jsonEncodedCodeMessage(field, value);
+  if (message)
+    ctx.addIssue({ code: "custom", message });
+};
+var moduleHtml = string2().max(MODULE_HTML_MAX, `html exceeds ${MODULE_HTML_MAX} bytes`).superRefine(noCorruptMarkup("html"));
 var CDATA_OPEN = "<![CDATA[";
 var noCdata = (value) => !value.includes(CDATA_OPEN);
 var cdataMessage = (field) => `${field} contains an XML CDATA marker (${CDATA_OPEN}) \u2014 module ${field} is stored and served ` + `verbatim, so CDATA wrappers reach the browser unparsed and break rendering. ` + `Remove the wrapper and resend plain ${field === "css" ? "CSS" : "JavaScript"}.`;
-var moduleCss = string2().max(MODULE_CSS_MAX, `css exceeds ${MODULE_CSS_MAX} bytes`).refine(noCdata, cdataMessage("css"));
-var moduleJs = string2().max(MODULE_JS_MAX, `js exceeds ${MODULE_JS_MAX} bytes`).refine(noCdata, cdataMessage("js"));
+var moduleCss = string2().max(MODULE_CSS_MAX, `css exceeds ${MODULE_CSS_MAX} bytes`).refine(noCdata, cdataMessage("css")).superRefine(noJsonEncodedCode("css"));
+var moduleJs = string2().max(MODULE_JS_MAX, `js exceeds ${MODULE_JS_MAX} bytes`).refine(noCdata, cdataMessage("js")).superRefine(noJsonEncodedCode("js"));
 var MODULE_FIELD_PRIMITIVE_KINDS = [
   "text",
   "richtext",
@@ -6358,7 +6554,7 @@ var MODULE_FIELD_PRIMITIVE_KINDS = [
   "boolean",
   "link"
 ];
-var MODULE_FIELD_LIST_KINDS = ["text-list", "link-list"];
+var MODULE_FIELD_LIST_KINDS = ["list"];
 var MODULE_FIELD_NESTED_KINDS = ["module", "module-list"];
 var MODULE_FIELD_KINDS = [
   ...MODULE_FIELD_PRIMITIVE_KINDS,
@@ -6388,26 +6584,55 @@ var moduleFieldModuleListSchema = object({
   min: number2().int().nonnegative().optional(),
   max: number2().int().positive().max(256).optional()
 }).strict();
-var moduleFieldTextListSchema = object({
-  name: moduleFieldName,
-  kind: literal("text-list"),
-  label: moduleFieldLabel,
-  min: number2().int().nonnegative().optional(),
-  max: number2().int().positive().max(256).optional(),
-  default: array(string2()).optional()
-}).strict();
-var moduleFieldLinkListSchema = object({
+var moduleFieldListSchema = object({
   name: moduleFieldName,
-  kind: literal("link-list"),
+  kind: literal("list"),
   label: moduleFieldLabel,
+  listType: slugSchema,
+  bind: _enum(["local", "shared", "source"]).optional(),
+  list: string2().regex(LIST_REF_RE, "list must be caelo:list/<id>").optional(),
+  source: sourceDefSchema.optional(),
   min: number2().int().nonnegative().optional(),
-  max: number2().int().positive().max(256).optional(),
-  default: array(object({ label: string2(), href: string2() }).strict()).optional()
+  max: number2().int().positive().max(LIST_MAX_ITEMS).optional(),
+  default: union([
+    array(listItemInputSchema),
+    string2().regex(LIST_REF_RE, "a shared default must be caelo:list/<id>")
+  ]).optional()
 }).strict();
+function listFieldIssues(f) {
+  const bind = f.bind ?? "local";
+  const issues = [];
+  if (bind === "source" && f.source === undefined) {
+    issues.push(`list field "${f.name}": bind "source" needs a source (query, system or plugin).`);
+  }
+  if (bind !== "source" && f.source !== undefined) {
+    issues.push(`list field "${f.name}": source is only allowed with bind "source".`);
+  }
+  if (bind === "local" && f.list !== undefined) {
+    issues.push(`list field "${f.name}": list is only allowed with bind "shared" \u2014 a local list stores its entries in the placement.`);
+  }
+  if (bind === "source" && f.list !== undefined && f.source?.kind !== "system") {
+    issues.push(`list field "${f.name}": list on a source field names the vocabulary of a page_terms source only.`);
+  }
+  if (f.default !== undefined) {
+    if (bind === "local" && typeof f.default === "string") {
+      issues.push(`list field "${f.name}": a local default is an array of entries, not a list reference.`);
+    }
+    if (bind === "shared" && Array.isArray(f.default)) {
+      issues.push(`list field "${f.name}": a shared default is caelo:list/<id> \u2014 create the list with upsert_lists_many first.`);
+    }
+    if (bind === "source") {
+      issues.push(`list field "${f.name}": a source field has no default; its entries are generated.`);
+    }
+  }
+  if (f.min !== undefined && f.max !== undefined && f.min > f.max) {
+    issues.push(`list field "${f.name}": min is greater than max.`);
+  }
+  return issues;
+}
 var moduleFieldSchema = discriminatedUnion("kind", [
   moduleFieldPrimitiveSchema,
-  moduleFieldTextListSchema,
-  moduleFieldLinkListSchema,
+  moduleFieldListSchema,
   moduleFieldModuleSchema,
   moduleFieldModuleListSchema
 ]);
@@ -6448,11 +6673,16 @@ var moduleFieldsArray = array(moduleFieldSchema).max(64, "modules may declare at
       return;
     }
     seen.add(f.name);
+    if (f.kind === "list") {
+      for (const message of listFieldIssues(f)) {
+        ctx.addIssue({ code: ZodIssueCode.custom, message });
+      }
+    }
   }
   for (const run of findNumberedScalarFanoutRuns(arr)) {
     ctx.addIssue({
       code: ZodIssueCode.custom,
-      message: `numbered-scalar fanout: ${run.map((n) => `"${n}"`).join(", ")} repeat one role as ` + "numbered scalar fields \u2014 repeating content is ONE list field, never numbered scalars " + '(CLAUDE.md \xA71A). Replace the run with a single field: kind "text-list" (list of ' + 'strings, inner template iterates {{.}}), "link-list" (list of {label, href}), or ' + '"module-list" (rich per-item structure: mint a card sub-module and reference it per ' + "item \u2014 in build_page, author the card detached with `ref` and pass " + '[{"$ref": "<ref>"}, \u2026] as the field value). A two-field split like col1/col2 is fine; ' + `${NUMBERED_SCALAR_FANOUT_THRESHOLD}+ numbered siblings is a list.`
+      message: `numbered-scalar fanout: ${run.map((n) => `"${n}"`).join(", ")} repeat one role as ` + "numbered scalar fields \u2014 repeating content is ONE list field, never numbered scalars " + '(CLAUDE.md \xA71A). Replace the run with a single field: kind "list" with a list type ' + '(listType "texts" for plain strings \u2014 the template iterates {{#f}}{{text}}{{/f}}; ' + '"links" for label + link \u2014 {{#f}}<a href="{{link}}">{{label}}</a>{{/f}}), or ' + '"module-list" (rich per-item structure: mint a card sub-module and reference it per ' + "item \u2014 in build_page, author the card detached with `ref` and pass " + '[{"$ref": "<ref>"}, \u2026] as the field value). A two-field split like col1/col2 is fine; ' + `${NUMBERED_SCALAR_FANOUT_THRESHOLD}+ numbered siblings is a list.`
     });
   }
 });
@@ -6481,21 +6711,12 @@ var moduleUpdateSchema = object({
   js: moduleJs.optional(),
   fields: moduleFieldsArray.optional()
 }).strict();
-var TEMPLATE_KINDS = [
-  "home",
-  "landing",
-  "product",
-  "blog",
-  "doc",
-  "content",
-  "utility"
-];
-var templateKindSchema = _enum(TEMPLATE_KINDS);
+var pageTypeSlugSchema = string2().regex(/^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$/, "page type slug: lowercase letters, digits, hyphens");
 var templateCreateSchema = object({
   slug: slugSchema,
   displayName: displayNameSchema,
-  kind: templateKindSchema.default("content"),
-  html: string2().max(TEMPLATE_HTML_MAX, `html exceeds ${TEMPLATE_HTML_MAX} bytes`),
+  pageType: pageTypeSlugSchema.optional(),
+  html: string2().max(TEMPLATE_HTML_MAX, `html exceeds ${TEMPLATE_HTML_MAX} bytes`).superRefine(noCorruptMarkup("html")),
   css: string2().max(TEMPLATE_CSS_MAX, `css exceeds ${TEMPLATE_CSS_MAX} bytes`).default(""),
   layoutId: string2().uuid().optional(),
   blocks: array(object({
@@ -6512,8 +6733,8 @@ var templateBlockSchema = object({
 var templateUpdateSchema = object({
   templateId: string2().uuid(),
   displayName: displayNameSchema.optional(),
-  kind: templateKindSchema.optional(),
-  html: string2().max(TEMPLATE_HTML_MAX).optional(),
+  pageType: pageTypeSlugSchema.optional(),
+  html: string2().max(TEMPLATE_HTML_MAX).superRefine(noCorruptMarkup("html")).optional(),
   css: string2().max(TEMPLATE_CSS_MAX).optional(),
   layoutId: string2().uuid().optional(),
   blocks: array(templateBlockSchema).optional()
@@ -6529,7 +6750,10 @@ var pageCreateSchema = object({
   title: string2().min(1).max(256),
   templateId: string2().uuid().optional(),
   status: pageStatusSchema.optional(),
-  parentPageId: string2().uuid().nullable().optional()
+  parentPageId: string2().uuid().nullable().optional(),
+  pageType: pageTypeSlugSchema.optional(),
+  properties: record(string2(), unknown()).optional(),
+  terms: array(string2().max(120)).max(100).optional()
 }).strict();
 var pageMoveSchema = object({
   pageId: string2().uuid(),
@@ -6548,7 +6772,10 @@ var pageUpdateSchema = object({
   slug: slugSchema.optional(),
   templateId: string2().uuid().optional(),
   status: pageStatusSchema.optional(),
-  redirectFromOld: _enum(["auto", "skip"]).optional()
+  redirectFromOld: _enum(["auto", "skip"]).optional(),
+  pageType: pageTypeSlugSchema.optional(),
+  properties: record(string2(), unknown()).optional(),
+  terms: array(string2().max(120)).max(100).optional()
 }).strict();
 var pageSetModulesSchema = object({
   pageId: string2().uuid(),
@@ -6592,6 +6819,11 @@ var forkPlacementContentSchema = object({
   position: number2().int().nonnegative()
 }).strict();
 
+// ../shared/src/lists/item-attr.ts
+var UUID = "[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}";
+var NAME = "[a-z][a-z0-9_]{0,63}";
+var LIST_ITEM_ATTR_RE = new RegExp(`^(?:${UUID}/${UUID}|instance/${UUID}/${NAME}/${UUID}|local/${NAME}/${UUID})$`);
+
 // ../shared/src/plugin-preview.ts
 var identifier = string2().regex(/^[a-zA-Z0-9][a-zA-Z0-9_.:-]{0,127}$/);
 var pluginPreviewTargetSchema = object({
@@ -6683,6 +6915,42 @@ function unwrapCdataEnvelope(value) {
   return m[1];
 }
 
+// ../shared/src/source-text-transport.ts
+function decodeJsonEncodedSource(value) {
+  if (typeof value !== "string")
+    return value;
+  const t = value.trim();
+  if (t.length < 2 || !t.startsWith('"') || !t.endsWith('"'))
+    return value;
+  if (!/\\["ntr\\/u]/.test(t))
+    return value;
+  try {
+    const decoded = JSON.parse(t);
+    return typeof decoded === "string" ? decoded : value;
+  } catch {
+    return value;
+  }
+}
+var ENTITIES = {
+  "&lt;": "<",
+  "&gt;": ">",
+  "&quot;": '"',
+  "&#34;": '"',
+  "&#39;": "'",
+  "&#x27;": "'",
+  "&apos;": "'"
+};
+function decodeHtmlEscapedSource(value) {
+  if (typeof value !== "string")
+    return value;
+  if (value.includes("<") || !/&lt;\/?[a-zA-Z]/.test(value))
+    return value;
+  return value.replace(/&lt;|&gt;|&quot;|&#34;|&#39;|&#x27;|&apos;/g, (e) => ENTITIES[e] ?? e).replace(/&amp;/g, "&");
+}
+function decodeSourceTextTransport(value) {
+  return decodeHtmlEscapedSource(decodeJsonEncodedSource(unwrapCdataEnvelope(value)));
+}
+
 // ../shared/src/ai-tools.ts
 function stripSurroundingQuotes(v) {
   if (typeof v !== "string")
@@ -6691,7 +6959,7 @@ function stripSurroundingQuotes(v) {
   return m ? m[2] : v;
 }
 function sourceTextArg(schema) {
-  return preprocess(unwrapCdataEnvelope, schema);
+  return preprocess(decodeSourceTextTransport, schema);
 }
 var positionInputSchema = preprocess(stripSurroundingQuotes, union([
   _enum(["top", "bottom"]),
@@ -6708,7 +6976,9 @@ var editModuleToolInput = object({
   js: sourceTextArg(string2().max(MODULE_JS_MAX)).optional(),
   fields: array(moduleFieldSchema).max(64).optional(),
   bindThemeLiterals: boolean2().optional()
-}).strict();
+}).strict().refine((v) => Object.keys(v).some((k) => k !== "moduleId" && k !== "bindThemeLiterals"), {
+  message: "edit_module changes nothing: pass what to change (html, css, js, fields, displayName, description, kind or type). list_modules shows the modules; add_module creates a new one."
+});
 var setPageModuleContentToolInput = object({
   pageId: string2().uuid(),
   blockName: string2().min(1).max(64),
@@ -6771,10 +7041,11 @@ var addModuleToolInput = object({
       message: "Pass either `moduleId` (place an existing module from list_modules) " + "or `displayName` + `html` (mint a new module)."
     });
   }
-  if (input.fields !== undefined && input.fields.length > 0 && input.values === undefined && !input.fields.some((f) => ("default" in f) && f.default !== undefined)) {
+  const carriesContent = (f) => ("default" in f) && f.default !== undefined || f.kind === "list" && (f.bind === "source" || f.bind === "shared" && f.list !== undefined);
+  if (input.fields !== undefined && input.fields.length > 0 && input.values === undefined && !input.fields.some(carriesContent)) {
     ctx.addIssue({
       code: ZodIssueCode.custom,
-      message: "A minted module needs its initial content IN THIS CALL: pass `values` " + "({fieldName: value, \u2026}) for this placement, or give the fields `default`s. " + "Without either, the module renders empty placeholders until a second call."
+      message: "A minted module needs its initial content IN THIS CALL: pass `values` " + "({fieldName: value, \u2026}) for this placement, or give the fields `default`s. " + 'A list field bound to a site list carries its content through `list` ({kind:"list", bind:"shared", list:"caelo:list/<id>"} \u2014 create the list first with upsert_lists_many). ' + "Without either, the module renders empty placeholders until a second call."
     });
   }
 });
@@ -6821,7 +7092,9 @@ var chatChipSchema = object({
   blockName: string2().min(1).max(80).optional(),
   position: number2().int().nonnegative().optional(),
   field: string2().min(1).max(200).optional(),
-  index: number2().int().nonnegative().optional()
+  item: string2().uuid().optional(),
+  key: string2().regex(/^[a-z][a-z0-9_]{0,63}$/).optional(),
+  listItem: string2().max(200).regex(LIST_ITEM_ATTR_RE).optional()
 }).strict();
 var CHAT_MAX_CHIPS = 20;
 var chatSendMessageInput = object({
@@ -6853,7 +7126,9 @@ var chatPublishInput = object({
       "pageLayout",
       "pageModuleContent",
       "layout",
-      "structuredSet",
+      "listType",
+      "list",
+      "pageType",
       "theme",
       "pluginRow"
     ]),
@@ -6885,6 +7160,7 @@ var createTemplateToolInput = object({
   html: sourceTextArg(string2().min(1).max(2000000)),
   css: sourceTextArg(string2().max(2000000)).default(""),
   layoutId: string2().uuid().optional(),
+  pageType: pageTypeSlugSchema.optional(),
   blocks: array(object({
     name: string2().min(1).max(80),
     displayName: string2().min(1).max(200),
@@ -6896,12 +7172,6 @@ var removeModuleFromToolInput = object({
   targetRef: string2().min(1).max(500),
   moduleId: string2().uuid()
 }).strict();
-var setStructuredSetToolInput = object({
-  kind: _enum(["nav-menu", "taxonomy", "tags", "link-list"]),
-  slug: slugInputSchema,
-  displayName: string2().min(1).max(200),
-  items: array(unknown())
-}).strict();
 var setTemplateLayoutToolInput = object({
   templateId: string2().uuid(),
   layoutSlug: slugInputSchema
@@ -7263,7 +7533,7 @@ var buildPageContentSchema = discriminatedUnion("source", [
 var buildPageModuleSchema = object({
   blockName: slugSchema.optional(),
   position: positionInputSchema.optional(),
-  ref: string2().regex(/^[a-z][a-z0-9_-]{0,31}$/, "ref must be a short lowercase handle").optional(),
+  ref: string2().regex(/^[A-Za-z][A-Za-z0-9_-]{0,31}$/, "ref must be a short handle: a letter, then letters, digits, _ or -").optional(),
   moduleId: union([
     string2().uuid('moduleId must be a UUID from list_modules \u2014 to re-place a module minted earlier in THIS call, pass {"$ref": "<its ref>"} instead'),
     object({ $ref: string2() }).strict()
@@ -7307,11 +7577,24 @@ var buildPageTargetSchema = object({
   name: string2().min(1).max(256).optional(),
   templateId: string2().uuid().optional(),
   status: pageStatusSchema.optional(),
-  parentPageId: string2().uuid().optional(),
+  parentPageId: string2().uuid().nullable().optional(),
+  pageType: pageCreateSchema.shape.pageType,
+  properties: pageCreateSchema.shape.properties,
+  terms: pageCreateSchema.shape.terms,
   importPageId: string2().uuid().optional(),
   metaDescription: string2().trim().min(1).max(SEO_DESCRIPTION_HARD_MAX).optional()
 }).strict().superRefine((page, ctx) => {
-  const createKeys = ["slug", "title", "name", "templateId", "status", "parentPageId"].filter((k) => page[k] !== undefined);
+  const createKeys = [
+    "slug",
+    "title",
+    "name",
+    "templateId",
+    "status",
+    "parentPageId",
+    "pageType",
+    "properties",
+    "terms"
+  ].filter((k) => page[k] !== undefined);
   if (page.pageId !== undefined) {
     if (createKeys.length > 0) {
       ctx.addIssue({
@@ -7386,7 +7669,7 @@ var INTERACTIONS = {
   carousel: { css: CAROUSEL_CSS, js: CAROUSEL_JS }
 };
 var INTERACTION_IDS = Object.keys(INTERACTIONS);
-var INTERACTION_MARKUP_CONTRACT = '**Vetted interactions - use these instead of writing JS for them.** Add `data-caelo-ui="<id>"` to the markup and Caelo ships accessible, dependency-free behaviour once per page; style it freely in the module CSS. ' + '`accordion` (FAQ, collapsible sections): `<div data-caelo-ui="accordion" data-single>` containing `<details id="..."><summary>Question</summary><div>Answer</div></details>` items - `data-single` keeps one open; a link to `#<details id>` opens it. ' + '`tabs`: `<div data-caelo-ui="tabs"><div role="tablist" aria-label="..."><button type="button" role="tab" id="t1" aria-controls="p1" aria-selected="true">...</button><button type="button" role="tab" id="t2" aria-controls="p2" aria-selected="false" tabindex="-1">...</button></div><div role="tabpanel" id="p1" aria-labelledby="t1">...</div><div role="tabpanel" id="p2" aria-labelledby="t2" hidden>...</div></div>` - ids must be unique on the page. ' + '`carousel` (slider, testimonials): `<section data-caelo-ui="carousel" aria-roledescription="carousel" aria-label="..."><div data-caelo-carousel-track tabindex="0"><div role="group" aria-roledescription="slide" aria-label="1 of 3">...</div>...</div><button type="button" data-caelo-carousel-prev aria-label="Previous slide"><span aria-hidden="true">&lsaquo;</span></button><button type="button" data-caelo-carousel-next aria-label="Next slide"><span aria-hidden="true">&rsaquo;</span></button></section>` (an icon button keeps its visible content aria-hidden; a text button needs no aria-label) - one slide per view by default; set the slides\' `flex-basis` in module CSS to show more. ' + "`mobile-nav` is applied by the built-in nav-menu renderer; never add it by hand. " + "Write module JS only for behaviour the kit does not cover.";
+var INTERACTION_MARKUP_CONTRACT = '**Vetted interactions - use these instead of writing JS for them.** Add `data-caelo-ui="<id>"` to the markup and Caelo ships accessible, dependency-free behaviour once per page; style it freely in the module CSS. ' + '`accordion` (FAQ, collapsible sections): `<div data-caelo-ui="accordion" data-single>` containing `<details id="..."><summary>Question</summary><div>Answer</div></details>` items - `data-single` keeps one open; a link to `#<details id>` opens it. ' + '`tabs`: `<div data-caelo-ui="tabs"><div role="tablist" aria-label="..."><button type="button" role="tab" id="t1" aria-controls="p1" aria-selected="true">...</button><button type="button" role="tab" id="t2" aria-controls="p2" aria-selected="false" tabindex="-1">...</button></div><div role="tabpanel" id="p1" aria-labelledby="t1">...</div><div role="tabpanel" id="p2" aria-labelledby="t2" hidden>...</div></div>` - ids must be unique on the page. ' + '`carousel` (slider, testimonials): `<section data-caelo-ui="carousel" aria-roledescription="carousel" aria-label="..."><div data-caelo-carousel-track tabindex="0"><div role="group" aria-roledescription="slide" aria-label="1 of 3">...</div>...</div><button type="button" data-caelo-carousel-prev aria-label="Previous slide"><span aria-hidden="true">&lsaquo;</span></button><button type="button" data-caelo-carousel-next aria-label="Next slide"><span aria-hidden="true">&rsaquo;</span></button></section>` (an icon button keeps its visible content aria-hidden; a text button needs no aria-label) - one slide per view by default; set the slides\' `flex-basis` in module CSS to show more. ' + '`mobile-nav` (menu collapsing behind a toggle on small screens): `<nav class="caelo-nav-menu" data-caelo-ui="mobile-nav" data-nav-open="false"><button type="button" class="caelo-nav-toggle" aria-expanded="false" aria-label="Menu"><span class="caelo-nav-bar"></span><span class="caelo-nav-bar"></span><span class="caelo-nav-bar"></span></button><ul>{{#menu}}<li>\u2026</li>{{/menu}}</ul></nav>` around the module\'s menu `list` field. ' + "Write module JS only for behaviour the kit does not cover.";
 
 // ../shared/src/media.ts
 var MEDIA_ALLOWED_MIMES = [
@@ -8297,7 +8580,7 @@ var languageTagSchema = string2().max(35).regex(/^[A-Za-z]{2,8}(-[A-Za-z0-9]{1,8
 var HTML_WS = new Set(["\t", `
 `, "\f", "\r", " "]);
 // ../shared/src/edit-markers.ts
-var EDITABLE_KINDS = new Set(["text", "text-list", "link-list", "url", "image"]);
+var EDITABLE_KINDS = new Set(["text", "url", "image", "list"]);
 var MARKABLE_ATTRIBUTES = new Set(["href", "src", "alt"]);
 var RAW_TEXT_ELEMENTS2 = new Set(["script", "style", "title", "textarea"]);
 // ../shared/src/font-usage.ts
@@ -8456,6 +8739,31 @@ var VARIANT_RE = LINK_REF_PART_PATTERNS.variant;
 var SITE_SERVED_FILES = new Set(["/robots.txt", "/sitemap.xml"]);
 var URL_KINDS = new Set(["url", "link", "image"]);
 var NESTED_KINDS = new Set(["module", "module-list"]);
+// ../shared/src/lists/address.ts
+var SEG = "[a-z0-9_-]+";
+var ADDRESS_RE = new RegExp(`^(?:list/(${SEG})/item/(${SEG})/(${SEG})` + `|instance/(${SEG})/(${SEG})/item/(${SEG})/(${SEG})` + `|page/(${SEG})/props/(${SEG})` + `|list_type/(${SEG})/node/(${SEG})/(${SEG}))$`);
+// ../shared/src/lists/page-type.ts
+var pageTypeDefSchema = object({
+  slug: string2().regex(/^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$/),
+  name: string2().min(1).max(200),
+  purpose: string2().min(1).max(1000),
+  templates: array(string2().uuid()).min(1).max(64),
+  defaultTemplate: string2().uuid(),
+  properties: array(fieldDefSchema).max(32).default([]),
+  vocabularies: array(object({
+    list: string2().uuid(),
+    cardinality: _enum(["one", "many"]),
+    required: boolean2().optional()
+  }).strict()).max(16).default([])
+}).strict();
+// ../shared/src/lists/resolve.ts
+var SEG2 = "[a-z0-9_-]+";
+var LIST_VALUE_RE = new RegExp(`^list/(${SEG2})/item/(${SEG2})/(${SEG2})$`);
+var INSTANCE_VALUE_RE = new RegExp(`^instance/(${SEG2})/(${SEG2})/item/(${SEG2})/(${SEG2})$`);
+var PAGE_PROP_RE = new RegExp(`^page/(${SEG2})/props/(${SEG2})$`);
+var LIST_HIDDEN_RE = new RegExp(`^list/(${SEG2})/item/(${SEG2})$`);
+var INSTANCE_HIDDEN_RE = new RegExp(`^instance/(${SEG2})/(${SEG2})/item/(${SEG2})$`);
+var STRUCTURAL_TYPES = new Set(["module", "term"]);
 // ../shared/src/markup-structure.ts
 var LEAF_TAGS = new Set(["svg", "math", "script", "style", "noscript", "iframe"]);
 // ../shared/src/page-log.ts
@@ -8588,31 +8896,6 @@ var PINNED_FONT_SLICE_FILE_PATTERN = "[0-9a-f]{64}\\.[0-9a-f]{12}\\.[a-z]+(?:-[a
 var PINNED_FONT_SLICE_FILE_RE = new RegExp(`^${PINNED_FONT_SLICE_FILE_PATTERN}$`);
 var CONTENT_HASHED_PATH_PATTERN = `^/(?:_app/immutable/.+|_assets/fonts/[^/]+/[0-9a-f]{16}\\.woff2|_assets/fonts/pinned/${PINNED_FONT_SLICE_FILE_PATTERN}|_assets/[a-z0-9][a-z0-9-]*(?:/[a-z][a-z0-9-]*)?\\.[0-9a-f]{16}\\.[a-z0-9]{2,5}|_caelo/plugin/[^/]+/[^/]+\\.[0-9a-f]{12}\\.(?:js|css))$`;
 var CONTENT_HASHED_PATH_RE = new RegExp(CONTENT_HASHED_PATH_PATTERN);
-// ../shared/src/structured-sets.ts
-var navMenuItem = lazy(() => object({
-  label: string2().min(1).max(120),
-  href: string2().min(1).max(500),
-  target: _enum(["_self", "_blank"]).optional(),
-  children: array(navMenuItem).optional(),
-  adSlotId: string2().min(1).max(100).optional()
-}).strict());
-var taxonomyItem = object({
-  slug: string2().min(1).max(120),
-  displayName: string2().min(1).max(200),
-  parentSlug: string2().min(1).max(120).optional(),
-  description: string2().max(2000).optional()
-}).strict();
-var tagItem = object({
-  slug: string2().min(1).max(120).regex(/^[a-z0-9-]+$/, "lowercase letters/digits/hyphens"),
-  displayName: string2().min(1).max(200),
-  color: string2().regex(/^#[0-9a-fA-F]{3,8}$/, "hex color").optional()
-}).strict();
-var linkListItem = object({
-  label: string2().min(1).max(200),
-  href: string2().min(1).max(500),
-  description: string2().max(500).optional()
-}).strict();
-var structuredSetKind = _enum(["nav-menu", "taxonomy", "tags", "link-list"]);
 // ../shared/src/subagents.ts
 var expectedReturnShape = _enum(["verdict", "tree", "freeform", "rebuild"]);
 var EXPECTED_RETURN_SHAPES = expectedReturnShape.options;
@@ -18008,7 +18291,7 @@ async function recordAudit(tx, opts) {
 var SYSTEM_ACTOR_ID = "00000000-0000-0000-0000-00000000ffff";
 
 // ../query-api/src/branch-access.ts
-var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+var UUID_RE2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 function namedBranches(ctx, input) {
   const out = new Set;
   if (ctx.chatBranchId)
@@ -18029,11 +18312,11 @@ function branchNotFound(operation, chatBranchId) {
   };
 }
 function firstMalformedBranch(branches) {
-  return branches.find((b) => !UUID_RE.test(b)) ?? null;
+  return branches.find((b) => !UUID_RE2.test(b)) ?? null;
 }
 async function firstInvisibleBranch(tx, branches) {
   for (const branch of branches) {
-    if (!UUID_RE.test(branch))
+    if (!UUID_RE2.test(branch))
       return branch;
     const rows = await tx.execute(sql`SELECT caelo_branch_visible(${branch}::uuid) AS visible`);
     if (rows[0]?.visible !== true)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@caelo-cms/provisioning",
-  "version": "0.10.72",
+  "version": "0.11.0",
   "private": false,
   "license": "MPL-2.0",
   "description": "Pulumi-driven provisioning for Caelo CMS — `bunx @caelo-cms/provisioning --provider <self-hosted|gcp|aws|azure>` brings up a TLS-served install with Postgres + storage + secrets manager + the admin + the API gateway.",
@@ -40,7 +40,7 @@
     "prepublishOnly": "tsc -b --force && bun build ../platform-updater/src/agent-db.ts --target=bun --outfile=dist/agent-db.js && tsc --project stacks/gcp/tsconfig.json && tsc --project stacks/gcp-firebase/tsconfig.json"
   },
   "dependencies": {
-    "@caelo-cms/shared": "^0.10.72",
+    "@caelo-cms/shared": "^0.11.0",
     "@clack/prompts": "1.8.1",
     "@pulumi/command": "^1",
     "@pulumi/gcp": "^10",