@caelo-cms/provisioning 0.10.72 → 0.11.1

package/dist/agent-db.js

@@ -6335,6 +6335,350 @@ var ZodIssueCode = {
 };
 var ZodFirstPartyTypeKind;
 (function(ZodFirstPartyTypeKind) {})(ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {}));
+// ../shared/src/escaped-line-breaks.ts
+function escapedLineBreakLength(value, i) {
+  if (value[i] !== "\\")
+    return 0;
+  if (value[i + 1] === "n")
+    return 2;
+  if (value[i + 1] === "r" && value[i + 2] === "\\" && value[i + 3] === "n")
+    return 4;
+  return 0;
+}
+var REGEX_PRECEDERS = new Set([..."(,=:[!&|?{};+-*%<>~^"]);
+function skipQuoted(value, start) {
+  const quote = value[start];
+  let j = start + 1;
+  while (j < value.length) {
+    const ch = value[j];
+    if (ch === "\\") {
+      if (value[j + 1] === "n" || value[j + 1] === "r")
+        return -1;
+      j += 2;
+      continue;
+    }
+    if (ch === quote)
+      return j + 1;
+    j += 1;
+  }
+  return j;
+}
+function jsLiteralHoldsEscape(value) {
+  let prev = "";
+  let i = 0;
+  while (i < value.length) {
+    const ch = value[i];
+    const lineBreak = escapedLineBreakLength(value, i);
+    if (lineBreak > 0) {
+      prev = "";
+      i += lineBreak;
+      continue;
+    }
+    if (ch === "\\") {
+      i += 2;
+      continue;
+    }
+    if (ch === '"' || ch === "'" || ch === "`") {
+      const end = skipQuoted(value, i);
+      if (end < 0)
+        return true;
+      prev = ch;
+      i = end;
+      continue;
+    }
+    if (ch === "/" && value[i + 1] === "/") {
+      i += 2;
+      while (i < value.length && escapedLineBreakLength(value, i) === 0)
+        i += 1;
+      continue;
+    }
+    if (ch === "/" && value[i + 1] === "*") {
+      const close = value.indexOf("*/", i + 2);
+      i = close < 0 ? value.length : close + 2;
+      continue;
+    }
+    if (ch === "/" && (prev === "" || REGEX_PRECEDERS.has(prev))) {
+      let j = i + 1;
+      let inClass = false;
+      while (j < value.length) {
+        const r = value[j];
+        if (r === "\\") {
+          if (value[j + 1] === "n" || value[j + 1] === "r")
+            return true;
+          j += 2;
+          continue;
+        }
+        if (r === "[")
+          inClass = true;
+        else if (r === "]")
+          inClass = false;
+        else if (r === "/" && !inClass)
+          break;
+        j += 1;
+      }
+      prev = "/";
+      i = j + 1;
+      continue;
+    }
+    if (ch !== " " && ch !== "\t")
+      prev = ch;
+    i += 1;
+  }
+  return false;
+}
+function cssLiteralHoldsEscape(value) {
+  let i = 0;
+  while (i < value.length) {
+    const ch = value[i];
+    if (ch === "/" && value[i + 1] === "*") {
+      const close = value.indexOf("*/", i + 2);
+      i = close < 0 ? value.length : close + 2;
+      continue;
+    }
+    if (ch === '"' || ch === "'") {
+      const end = skipQuoted(value, i);
+      if (end < 0)
+        return true;
+      i = end;
+      continue;
+    }
+    i += ch === "\\" ? 2 : 1;
+  }
+  return false;
+}
+var RAW_TEXT_ELEMENTS = new Set(["script", "style", "pre", "textarea"]);
+function htmlLiteralHoldsEscape(value) {
+  const lower = value.toLowerCase();
+  let i = 0;
+  while (i < value.length) {
+    if (value[i] !== "<") {
+      i += 1;
+      continue;
+    }
+    if (value.startsWith("<!--", i)) {
+      const close = value.indexOf("-->", i + 4);
+      const end = close < 0 ? value.length : close + 3;
+      if (/(?<!\\)\\[nr]/.test(value.slice(i, end)))
+        return true;
+      i = end;
+      continue;
+    }
+    const name = /^<([a-zA-Z][a-zA-Z0-9-]*)/.exec(value.slice(i, i + 64))?.[1]?.toLowerCase();
+    let j = i + 1;
+    while (j < value.length && value[j] !== ">") {
+      if (value[j] === '"' || value[j] === "'") {
+        const end = skipQuoted(value, j);
+        if (end < 0)
+          return true;
+        j = end;
+        continue;
+      }
+      j += 1;
+    }
+    i = j + 1;
+    if (name && RAW_TEXT_ELEMENTS.has(name)) {
+      const close = lower.indexOf(`</${name}`, i);
+      const end = close < 0 ? value.length : close;
+      if (/(?<!\\)\\[nr]/.test(value.slice(i, end)))
+        return true;
+      i = end;
+    }
+  }
+  return false;
+}
+var LITERAL_HOLDS_ESCAPE = {
+  html: htmlLiteralHoldsEscape,
+  css: cssLiteralHoldsEscape,
+  js: jsLiteralHoldsEscape
+};
+var ESCAPED_LINE_BREAK = /(?<!\\)(?:\\r)?\\n/g;
+function hasEscapedLineBreaks(value, language) {
+  if (/[\r\n]/.test(value))
+    return false;
+  const hits = value.match(ESCAPED_LINE_BREAK)?.length ?? 0;
+  if (hits < 2)
+    return false;
+  if (!/(?<!\\)\\n(?:[ \t]|\\t)/.test(value))
+    return false;
+  return !LITERAL_HOLDS_ESCAPE[language](value);
+}
+function decodeEscapedLineBreaks(value, language) {
+  if (typeof value !== "string" || !hasEscapedLineBreaks(value, language))
+    return value;
+  return value.replace(/(?<!\\)(?:\\r)?\\n((?:\\t)*)/g, (_m, tabs) => `
+${"\t".repeat(tabs.length / 2)}`);
+}
+
+// ../shared/src/lists/fields.ts
+var LIST_RESERVED_NAMES = new Set([
+  "id",
+  "node",
+  "index",
+  "depth",
+  "first",
+  "last",
+  "items",
+  "page",
+  "site_text",
+  "recurse"
+]);
+var listNameSchema = string2().regex(/^[a-z][a-z0-9_]{0,63}$/, "must be snake_case (lowercase letters, digits, underscores)");
+var fieldLabel = string2().min(1).max(128);
+var fieldExtSchema = record(string2().regex(/^[a-z0-9-]+$/), unknown());
+var base = {
+  name: listNameSchema,
+  label: fieldLabel,
+  required: boolean2().optional(),
+  default: unknown().optional(),
+  ext: fieldExtSchema.optional()
+};
+var textField = object({
+  ...base,
+  type: literal("text"),
+  maxLength: number2().int().min(1).max(2000).optional()
+}).strict();
+var richtextField = object({
+  ...base,
+  type: literal("richtext"),
+  maxLength: number2().int().min(1).max(20000).optional()
+}).strict();
+var linkField = object({ ...base, type: literal("link") }).strict();
+var mediaField = object({ ...base, type: literal("media") }).strict();
+var selectField = object({
+  ...base,
+  type: literal("select"),
+  options: array(listNameSchema).min(1).max(64)
+}).strict();
+var booleanField = object({ ...base, type: literal("boolean") }).strict();
+var numberField = object({
+  ...base,
+  type: literal("number"),
+  min: number2().optional(),
+  max: number2().optional()
+}).strict();
+var dateField = object({ ...base, type: literal("date") }).strict();
+var iconField = object({ ...base, type: literal("icon") }).strict();
+var moduleField = object({
+  ...base,
+  type: literal("module"),
+  accepts: array(string2().regex(/^[a-z0-9-]+$/)).max(32).optional()
+}).strict();
+var termField = object({
+  ...base,
+  type: literal("term"),
+  list: string2().regex(/^[a-z0-9-]+$/),
+  multiple: boolean2().optional()
+}).strict();
+var fieldDefSchema = discriminatedUnion("type", [
+  textField,
+  richtextField,
+  linkField,
+  mediaField,
+  selectField,
+  booleanField,
+  numberField,
+  dateField,
+  iconField,
+  moduleField,
+  termField
+]);
+var linkValueSchema = object({
+  href: string2().min(1).max(2000),
+  target: _enum(["_self", "_blank"]).optional()
+}).strict();
+var embeddedModuleValueSchema = object({ moduleId: string2().uuid(), contentInstanceId: string2().uuid() }).strict();
+
+// ../shared/src/lists/list-type.ts
+var LIST_MAX_DEPTH = 8;
+var LIST_MAX_ITEMS = 500;
+var LIST_QUERY_MAX_LIMIT = 50;
+var QUERY_KNOBS = [
+  "page_type",
+  "terms",
+  "terms_mode",
+  "parent",
+  "exclude_current",
+  "order",
+  "limit"
+];
+var SYSTEM_SOURCE_NAMES = [
+  "breadcrumbs",
+  "children",
+  "siblings",
+  "page_terms",
+  "term_pages"
+];
+var queryOrderSchema = union([
+  _enum(["published_desc", "published_asc", "title_asc"]),
+  string2().regex(/^prop_(?:desc|asc):[a-z][a-z0-9_]{0,63}$/)
+]);
+var pageQuerySchema = object({
+  page_type: string2().regex(/^[a-z0-9-]+$/).optional(),
+  terms: array(string2().regex(/^caelo:term\/[0-9a-f-]{36}\/[0-9a-f-]{36}$/)).max(20).optional(),
+  terms_mode: _enum(["any", "all"]).optional(),
+  parent: string2().regex(/^caelo:page\/[0-9a-f-]{36}$/).optional(),
+  exclude_current: boolean2().optional(),
+  order: queryOrderSchema,
+  limit: number2().int().min(1).max(LIST_QUERY_MAX_LIMIT)
+}).strict();
+var pageQueryPartialSchema = pageQuerySchema.partial();
+var sourceDefSchema = discriminatedUnion("kind", [
+  object({
+    kind: literal("query"),
+    editable: array(_enum(QUERY_KNOBS)).max(QUERY_KNOBS.length),
+    defaults: pageQueryPartialSchema
+  }).strict(),
+  object({
+    kind: literal("system"),
+    name: _enum(SYSTEM_SOURCE_NAMES, {
+      error: () => `system sources are ${SYSTEM_SOURCE_NAMES.join(", ")} \u2014 a plugin's list source (consent_categories, language_links, \u2026) is {kind:"plugin", name:"<source>"}, and a module that only iterates it needs no field at all: {{#<source>}}\u2026{{/<source>}}.`
+    })
+  }).strict(),
+  object({
+    kind: literal("plugin"),
+    name: string2().regex(/^[a-z][a-z0-9_]{0,63}$/)
+  }).strict()
+]);
+var childrenSchema = object({
+  name: listNameSchema,
+  allow: array(listNameSchema).min(1).max(32),
+  max: number2().int().min(1).max(LIST_MAX_ITEMS).optional()
+}).strict();
+var nodeDefSchema = object({
+  label: string2().min(1).max(128),
+  fields: array(fieldDefSchema).max(32),
+  children: childrenSchema.optional(),
+  current_from: listNameSchema.optional(),
+  source: sourceDefSchema.optional(),
+  ext: fieldExtSchema.optional()
+}).strict();
+var LIST_TYPE_ROLES = ["navigation", "vocabulary", "content"];
+var listTypeDefSchema = object({
+  slug: string2().regex(/^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$/),
+  name: string2().min(1).max(200),
+  purpose: string2().min(1).max(1000),
+  role: _enum(LIST_TYPE_ROLES),
+  root: object({
+    allow: array(listNameSchema).min(1).max(32),
+    max: number2().int().min(1).max(LIST_MAX_ITEMS).optional()
+  }).strict(),
+  nodes: record(listNameSchema, nodeDefSchema),
+  max_depth: number2().int().min(1).max(LIST_MAX_DEPTH).optional()
+}).strict();
+
+// ../shared/src/lists/items.ts
+var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
+var listItemInputSchema = lazy(() => object({
+  id: string2().regex(UUID_RE, "id must be a lowercase uuid").optional(),
+  node: string2().min(1).max(64),
+  values: record(string2(), unknown()).default({}),
+  children: array(listItemInputSchema).optional(),
+  query: record(string2(), unknown()).optional()
+}).strict());
+
+// ../shared/src/lists/refs.ts
+var LIST_REF_RE = /^caelo:list\/([0-9a-f-]{36})$/;
+
 // ../shared/src/content.ts
 var slugSchema = string2().regex(/^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$/, "slug must be lowercase letters, digits, or hyphens (1\u201364 chars, no leading/trailing hyphen)");
 var displayNameSchema = string2().min(1).max(128);
@@ -6343,12 +6687,49 @@ var MODULE_CSS_MAX = 128 * 1024;
 var MODULE_JS_MAX = 256 * 1024;
 var TEMPLATE_HTML_MAX = 512 * 1024;
 var TEMPLATE_CSS_MAX = 128 * 1024;
-var moduleHtml = string2().max(MODULE_HTML_MAX, `html exceeds ${MODULE_HTML_MAX} bytes`);
+function jsonEncodedCodeMessage(field, value) {
+  const t = value.trim();
+  if (t.length < 2 || !t.startsWith('"') || !t.endsWith('"'))
+    return null;
+  try {
+    if (typeof JSON.parse(t) !== "string")
+      return null;
+  } catch {
+    return null;
+  }
+  return `${field} is JSON-encoded (wrapped in quotes with \\" escapes) \u2014 send the raw ${field} itself, not a JSON string of it.`;
+}
+function htmlEscapedMarkupMessage(field, value) {
+  if (value.includes("<") || !/&lt;\/?[a-zA-Z]/.test(value))
+    return null;
+  return `${field} is HTML-escaped (&lt;\u2026&gt; instead of <\u2026>) \u2014 send the markup itself, unescaped.`;
+}
+function escapedLineBreaksMessage(field, value) {
+  if (!hasEscapedLineBreaks(value, field))
+    return null;
+  return `${field} has its line breaks escaped (literal \\n sequences, no real line break) \u2014 send the ${field} with real line breaks.`;
+}
+var noCorruptMarkup = (field) => (value, ctx) => {
+  const message = jsonEncodedCodeMessage(field, value) ?? htmlEscapedMarkupMessage(field, value) ?? escapedLineBreaksMessage(field, value);
+  if (message)
+    ctx.addIssue({ code: "custom", message });
+};
+var noJsonEncodedCode = (field) => (value, ctx) => {
+  const message = jsonEncodedCodeMessage(field, value);
+  if (message)
+    ctx.addIssue({ code: "custom", message });
+};
+var noCorruptCss = (value, ctx) => {
+  const message = jsonEncodedCodeMessage("css", value) ?? escapedLineBreaksMessage("css", value);
+  if (message)
+    ctx.addIssue({ code: "custom", message });
+};
+var moduleHtml = string2().max(MODULE_HTML_MAX, `html exceeds ${MODULE_HTML_MAX} bytes`).superRefine(noCorruptMarkup("html"));
 var CDATA_OPEN = "<![CDATA[";
 var noCdata = (value) => !value.includes(CDATA_OPEN);
 var cdataMessage = (field) => `${field} contains an XML CDATA marker (${CDATA_OPEN}) \u2014 module ${field} is stored and served ` + `verbatim, so CDATA wrappers reach the browser unparsed and break rendering. ` + `Remove the wrapper and resend plain ${field === "css" ? "CSS" : "JavaScript"}.`;
-var moduleCss = string2().max(MODULE_CSS_MAX, `css exceeds ${MODULE_CSS_MAX} bytes`).refine(noCdata, cdataMessage("css"));
-var moduleJs = string2().max(MODULE_JS_MAX, `js exceeds ${MODULE_JS_MAX} bytes`).refine(noCdata, cdataMessage("js"));
+var moduleCss = string2().max(MODULE_CSS_MAX, `css exceeds ${MODULE_CSS_MAX} bytes`).refine(noCdata, cdataMessage("css")).superRefine(noCorruptCss);
+var moduleJs = string2().max(MODULE_JS_MAX, `js exceeds ${MODULE_JS_MAX} bytes`).refine(noCdata, cdataMessage("js")).superRefine(noJsonEncodedCode("js"));
 var MODULE_FIELD_PRIMITIVE_KINDS = [
   "text",
   "richtext",
@@ -6358,7 +6739,7 @@ var MODULE_FIELD_PRIMITIVE_KINDS = [
   "boolean",
   "link"
 ];
-var MODULE_FIELD_LIST_KINDS = ["text-list", "link-list"];
+var MODULE_FIELD_LIST_KINDS = ["list"];
 var MODULE_FIELD_NESTED_KINDS = ["module", "module-list"];
 var MODULE_FIELD_KINDS = [
   ...MODULE_FIELD_PRIMITIVE_KINDS,
@@ -6388,26 +6769,55 @@ var moduleFieldModuleListSchema = object({
   min: number2().int().nonnegative().optional(),
   max: number2().int().positive().max(256).optional()
 }).strict();
-var moduleFieldTextListSchema = object({
-  name: moduleFieldName,
-  kind: literal("text-list"),
-  label: moduleFieldLabel,
-  min: number2().int().nonnegative().optional(),
-  max: number2().int().positive().max(256).optional(),
-  default: array(string2()).optional()
-}).strict();
-var moduleFieldLinkListSchema = object({
+var moduleFieldListSchema = object({
   name: moduleFieldName,
-  kind: literal("link-list"),
+  kind: literal("list"),
   label: moduleFieldLabel,
+  listType: slugSchema,
+  bind: _enum(["local", "shared", "source"]).optional(),
+  list: string2().regex(LIST_REF_RE, "list must be caelo:list/<id>").optional(),
+  source: sourceDefSchema.optional(),
   min: number2().int().nonnegative().optional(),
-  max: number2().int().positive().max(256).optional(),
-  default: array(object({ label: string2(), href: string2() }).strict()).optional()
+  max: number2().int().positive().max(LIST_MAX_ITEMS).optional(),
+  default: union([
+    array(listItemInputSchema),
+    string2().regex(LIST_REF_RE, "a shared default must be caelo:list/<id>")
+  ]).optional()
 }).strict();
+function listFieldIssues(f) {
+  const bind = f.bind ?? "local";
+  const issues = [];
+  if (bind === "source" && f.source === undefined) {
+    issues.push(`list field "${f.name}": bind "source" needs a source (query, system or plugin).`);
+  }
+  if (bind !== "source" && f.source !== undefined) {
+    issues.push(`list field "${f.name}": source is only allowed with bind "source".`);
+  }
+  if (bind === "local" && f.list !== undefined) {
+    issues.push(`list field "${f.name}": list is only allowed with bind "shared" \u2014 a local list stores its entries in the placement.`);
+  }
+  if (bind === "source" && f.list !== undefined && f.source?.kind !== "system") {
+    issues.push(`list field "${f.name}": list on a source field names the vocabulary of a page_terms source only.`);
+  }
+  if (f.default !== undefined) {
+    if (bind === "local" && typeof f.default === "string") {
+      issues.push(`list field "${f.name}": a local default is an array of entries, not a list reference.`);
+    }
+    if (bind === "shared" && Array.isArray(f.default)) {
+      issues.push(`list field "${f.name}": a shared default is caelo:list/<id> \u2014 create the list with upsert_lists_many first.`);
+    }
+    if (bind === "source") {
+      issues.push(`list field "${f.name}": a source field has no default; its entries are generated.`);
+    }
+  }
+  if (f.min !== undefined && f.max !== undefined && f.min > f.max) {
+    issues.push(`list field "${f.name}": min is greater than max.`);
+  }
+  return issues;
+}
 var moduleFieldSchema = discriminatedUnion("kind", [
   moduleFieldPrimitiveSchema,
-  moduleFieldTextListSchema,
-  moduleFieldLinkListSchema,
+  moduleFieldListSchema,
   moduleFieldModuleSchema,
   moduleFieldModuleListSchema
 ]);
@@ -6448,11 +6858,16 @@ var moduleFieldsArray = array(moduleFieldSchema).max(64, "modules may declare at
       return;
     }
     seen.add(f.name);
+    if (f.kind === "list") {
+      for (const message of listFieldIssues(f)) {
+        ctx.addIssue({ code: ZodIssueCode.custom, message });
+      }
+    }
   }
   for (const run of findNumberedScalarFanoutRuns(arr)) {
     ctx.addIssue({
       code: ZodIssueCode.custom,
-      message: `numbered-scalar fanout: ${run.map((n) => `"${n}"`).join(", ")} repeat one role as ` + "numbered scalar fields \u2014 repeating content is ONE list field, never numbered scalars " + '(CLAUDE.md \xA71A). Replace the run with a single field: kind "text-list" (list of ' + 'strings, inner template iterates {{.}}), "link-list" (list of {label, href}), or ' + '"module-list" (rich per-item structure: mint a card sub-module and reference it per ' + "item \u2014 in build_page, author the card detached with `ref` and pass " + '[{"$ref": "<ref>"}, \u2026] as the field value). A two-field split like col1/col2 is fine; ' + `${NUMBERED_SCALAR_FANOUT_THRESHOLD}+ numbered siblings is a list.`
+      message: `numbered-scalar fanout: ${run.map((n) => `"${n}"`).join(", ")} repeat one role as ` + "numbered scalar fields \u2014 repeating content is ONE list field, never numbered scalars " + '(CLAUDE.md \xA71A). Replace the run with a single field: kind "list" with a list type ' + '(listType "texts" for plain strings \u2014 the template iterates {{#f}}{{text}}{{/f}}; ' + '"links" for label + link \u2014 {{#f}}<a href="{{link}}">{{label}}</a>{{/f}}), or ' + '"module-list" (rich per-item structure: mint a card sub-module and reference it per ' + "item \u2014 in build_page, author the card detached with `ref` and pass " + '[{"$ref": "<ref>"}, \u2026] as the field value). A two-field split like col1/col2 is fine; ' + `${NUMBERED_SCALAR_FANOUT_THRESHOLD}+ numbered siblings is a list.`
     });
   }
 });
@@ -6481,21 +6896,12 @@ var moduleUpdateSchema = object({
   js: moduleJs.optional(),
   fields: moduleFieldsArray.optional()
 }).strict();
-var TEMPLATE_KINDS = [
-  "home",
-  "landing",
-  "product",
-  "blog",
-  "doc",
-  "content",
-  "utility"
-];
-var templateKindSchema = _enum(TEMPLATE_KINDS);
+var pageTypeSlugSchema = string2().regex(/^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$/, "page type slug: lowercase letters, digits, hyphens");
 var templateCreateSchema = object({
   slug: slugSchema,
   displayName: displayNameSchema,
-  kind: templateKindSchema.default("content"),
-  html: string2().max(TEMPLATE_HTML_MAX, `html exceeds ${TEMPLATE_HTML_MAX} bytes`),
+  pageType: pageTypeSlugSchema.optional(),
+  html: string2().max(TEMPLATE_HTML_MAX, `html exceeds ${TEMPLATE_HTML_MAX} bytes`).superRefine(noCorruptMarkup("html")),
   css: string2().max(TEMPLATE_CSS_MAX, `css exceeds ${TEMPLATE_CSS_MAX} bytes`).default(""),
   layoutId: string2().uuid().optional(),
   blocks: array(object({
@@ -6512,8 +6918,8 @@ var templateBlockSchema = object({
 var templateUpdateSchema = object({
   templateId: string2().uuid(),
   displayName: displayNameSchema.optional(),
-  kind: templateKindSchema.optional(),
-  html: string2().max(TEMPLATE_HTML_MAX).optional(),
+  pageType: pageTypeSlugSchema.optional(),
+  html: string2().max(TEMPLATE_HTML_MAX).superRefine(noCorruptMarkup("html")).optional(),
   css: string2().max(TEMPLATE_CSS_MAX).optional(),
   layoutId: string2().uuid().optional(),
   blocks: array(templateBlockSchema).optional()
@@ -6523,13 +6929,17 @@ var templateBlocksSetSchema = object({
   blocks: array(templateBlockSchema)
 }).strict();
 var pageStatusSchema = _enum(["draft", "published"]);
+var pageShortTitleSchema = string2().trim().min(1, "the short title is the page's breadcrumb label and cannot be blank").max(256);
 var pageCreateSchema = object({
   slug: slugSchema,
-  name: string2().min(1).max(256).optional(),
   title: string2().min(1).max(256),
+  shortTitle: pageShortTitleSchema.optional(),
   templateId: string2().uuid().optional(),
   status: pageStatusSchema.optional(),
-  parentPageId: string2().uuid().nullable().optional()
+  parentPageId: string2().uuid().nullable().optional(),
+  pageType: pageTypeSlugSchema.optional(),
+  properties: record(string2(), unknown()).optional(),
+  terms: array(string2().max(120)).max(100).optional()
 }).strict();
 var pageMoveSchema = object({
   pageId: string2().uuid(),
@@ -6543,12 +6953,15 @@ var pagesMoveManySchema = object({
 var pageUpdateSchema = object({
   pageId: string2().uuid(),
   expectedVersion: number2().int().nonnegative().optional(),
-  name: string2().min(1).max(256).optional(),
   title: string2().min(1).max(256).optional(),
+  shortTitle: pageShortTitleSchema.optional(),
   slug: slugSchema.optional(),
   templateId: string2().uuid().optional(),
   status: pageStatusSchema.optional(),
-  redirectFromOld: _enum(["auto", "skip"]).optional()
+  redirectFromOld: _enum(["auto", "skip"]).optional(),
+  pageType: pageTypeSlugSchema.optional(),
+  properties: record(string2(), unknown()).optional(),
+  terms: array(string2().max(120)).max(100).optional()
 }).strict();
 var pageSetModulesSchema = object({
   pageId: string2().uuid(),
@@ -6592,6 +7005,11 @@ var forkPlacementContentSchema = object({
   position: number2().int().nonnegative()
 }).strict();
 
+// ../shared/src/lists/item-attr.ts
+var UUID = "[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}";
+var NAME = "[a-z][a-z0-9_]{0,63}";
+var LIST_ITEM_ATTR_RE = new RegExp(`^(?:${UUID}/${UUID}|instance/${UUID}/${NAME}/${UUID}|local/${NAME}/${UUID})$`);
+
 // ../shared/src/plugin-preview.ts
 var identifier = string2().regex(/^[a-zA-Z0-9][a-zA-Z0-9_.:-]{0,127}$/);
 var pluginPreviewTargetSchema = object({
@@ -6683,6 +7101,42 @@ function unwrapCdataEnvelope(value) {
   return m[1];
 }
 
+// ../shared/src/source-text-transport.ts
+function decodeJsonEncodedSource(value) {
+  if (typeof value !== "string")
+    return value;
+  const t = value.trim();
+  if (t.length < 2 || !t.startsWith('"') || !t.endsWith('"'))
+    return value;
+  if (!/\\["ntr\\/u]/.test(t))
+    return value;
+  try {
+    const decoded = JSON.parse(t);
+    return typeof decoded === "string" ? decoded : value;
+  } catch {
+    return value;
+  }
+}
+var ENTITIES = {
+  "&lt;": "<",
+  "&gt;": ">",
+  "&quot;": '"',
+  "&#34;": '"',
+  "&#39;": "'",
+  "&#x27;": "'",
+  "&apos;": "'"
+};
+function decodeHtmlEscapedSource(value) {
+  if (typeof value !== "string")
+    return value;
+  if (value.includes("<") || !/&lt;\/?[a-zA-Z]/.test(value))
+    return value;
+  return value.replace(/&lt;|&gt;|&quot;|&#34;|&#39;|&#x27;|&apos;/g, (e) => ENTITIES[e] ?? e).replace(/&amp;/g, "&");
+}
+function decodeSourceTextTransport(value, language) {
+  return decodeEscapedLineBreaks(decodeHtmlEscapedSource(decodeJsonEncodedSource(unwrapCdataEnvelope(value))), language);
+}
+
 // ../shared/src/ai-tools.ts
 function stripSurroundingQuotes(v) {
   if (typeof v !== "string")
@@ -6690,31 +7144,13 @@ function stripSurroundingQuotes(v) {
   const m = v.match(/^(["'])([\s\S]+)\1$/);
   return m ? m[2] : v;
 }
-function sourceTextArg(schema) {
-  return preprocess(unwrapCdataEnvelope, schema);
+function sourceTextArg(schema, language) {
+  return preprocess((value) => decodeSourceTextTransport(value, language), schema);
 }
 var positionInputSchema = preprocess(stripSurroundingQuotes, union([
   _enum(["top", "bottom"]),
   preprocess((v) => typeof v === "string" && /^\d+$/.test(v) ? Number.parseInt(v, 10) : v, number2().int().min(0).max(1000))
 ]));
-var editModuleToolInput = object({
-  moduleId: string2().uuid(),
-  displayName: string2().min(1).max(128).optional(),
-  description: string2().max(1000).optional(),
-  kind: _enum(["chrome", "hero", "content", "cta", "utility"]).optional(),
-  type: slugSchema.optional(),
-  html: sourceTextArg(string2().max(MODULE_HTML_MAX)).optional(),
-  css: sourceTextArg(string2().max(MODULE_CSS_MAX)).optional(),
-  js: sourceTextArg(string2().max(MODULE_JS_MAX)).optional(),
-  fields: array(moduleFieldSchema).max(64).optional(),
-  bindThemeLiterals: boolean2().optional()
-}).strict();
-var setPageModuleContentToolInput = object({
-  pageId: string2().uuid(),
-  blockName: string2().min(1).max(64),
-  position: number2().int().nonnegative(),
-  contentValues: record(string2(), unknown())
-}).strict();
 var siteMemoryProposeToolInput = object({
   slot: _enum(["purpose", "brand-voice", "tone", "banned-phrases", "instructions", "glossary"]),
   body: string2().min(1).max(4000),
@@ -6734,9 +7170,9 @@ var addModuleToolInput = object({
   description: string2().max(1000).optional(),
   kind: _enum(["chrome", "hero", "content", "cta", "utility"]).optional(),
   type: slugSchema.optional(),
-  html: sourceTextArg(string2().min(1).max(50000)).optional(),
-  css: sourceTextArg(string2().max(50000)).optional(),
-  js: sourceTextArg(string2().max(50000)).optional(),
+  html: sourceTextArg(string2().min(1).max(50000), "html").optional(),
+  css: sourceTextArg(string2().max(50000), "css").optional(),
+  js: sourceTextArg(string2().max(50000), "js").optional(),
   fields: array(moduleFieldSchema).max(64).optional(),
   bindThemeLiterals: boolean2().optional(),
   values: record(string2(), unknown()).optional()
@@ -6745,7 +7181,7 @@ var addModuleToolInput = object({
     if (input.moduleId !== undefined) {
       ctx.addIssue({
         code: ZodIssueCode.custom,
-        message: "Reusing a module on a layout renders the module's STORED field defaults \u2014 `values` has nothing to bind to. Drop `values` (the chrome shows the module as-is), or change the shared copy via edit_module."
+        message: "Reusing a module on a layout renders the module's STORED field defaults \u2014 `values` has nothing to bind to. Drop `values` (the chrome shows the module as-is), or change the shared copy via update_modules_many."
       });
     } else if (input.fields === undefined || input.fields.length === 0) {
       ctx.addIssue({
@@ -6771,10 +7207,11 @@ var addModuleToolInput = object({
       message: "Pass either `moduleId` (place an existing module from list_modules) " + "or `displayName` + `html` (mint a new module)."
     });
   }
-  if (input.fields !== undefined && input.fields.length > 0 && input.values === undefined && !input.fields.some((f) => ("default" in f) && f.default !== undefined)) {
+  const carriesContent = (f) => ("default" in f) && f.default !== undefined || f.kind === "list" && (f.bind === "source" || f.bind === "shared" && f.list !== undefined);
+  if (input.fields !== undefined && input.fields.length > 0 && input.values === undefined && !input.fields.some(carriesContent)) {
     ctx.addIssue({
       code: ZodIssueCode.custom,
-      message: "A minted module needs its initial content IN THIS CALL: pass `values` " + "({fieldName: value, \u2026}) for this placement, or give the fields `default`s. " + "Without either, the module renders empty placeholders until a second call."
+      message: "A minted module needs its initial content IN THIS CALL: pass `values` " + "({fieldName: value, \u2026}) for this placement, or give the fields `default`s. " + 'A list field bound to a site list carries its content through `list` ({kind:"list", bind:"shared", list:"caelo:list/<id>"} \u2014 create the list first with upsert_lists_many). ' + "Without either, the module renders empty placeholders until a second call."
     });
   }
 });
@@ -6821,7 +7258,9 @@ var chatChipSchema = object({
   blockName: string2().min(1).max(80).optional(),
   position: number2().int().nonnegative().optional(),
   field: string2().min(1).max(200).optional(),
-  index: number2().int().nonnegative().optional()
+  item: string2().uuid().optional(),
+  key: string2().regex(/^[a-z][a-z0-9_]{0,63}$/).optional(),
+  listItem: string2().max(200).regex(LIST_ITEM_ATTR_RE).optional()
 }).strict();
 var CHAT_MAX_CHIPS = 20;
 var chatSendMessageInput = object({
@@ -6853,7 +7292,9 @@ var chatPublishInput = object({
       "pageLayout",
       "pageModuleContent",
       "layout",
-      "structuredSet",
+      "listType",
+      "list",
+      "pageType",
       "theme",
       "pluginRow"
     ]),
@@ -6882,9 +7323,10 @@ var slugInputSchema = string2().min(1).max(120).regex(/^[a-z0-9][a-z0-9-]*$/, "l
 var createTemplateToolInput = object({
   slug: slugInputSchema,
   displayName: string2().min(1).max(256),
-  html: sourceTextArg(string2().min(1).max(2000000)),
-  css: sourceTextArg(string2().max(2000000)).default(""),
+  html: sourceTextArg(string2().min(1).max(2000000), "html"),
+  css: sourceTextArg(string2().max(2000000), "css").default(""),
   layoutId: string2().uuid().optional(),
+  pageType: pageTypeSlugSchema.optional(),
   blocks: array(object({
     name: string2().min(1).max(80),
     displayName: string2().min(1).max(200),
@@ -6896,12 +7338,6 @@ var removeModuleFromToolInput = object({
   targetRef: string2().min(1).max(500),
   moduleId: string2().uuid()
 }).strict();
-var setStructuredSetToolInput = object({
-  kind: _enum(["nav-menu", "taxonomy", "tags", "link-list"]),
-  slug: slugInputSchema,
-  displayName: string2().min(1).max(200),
-  items: array(unknown())
-}).strict();
 var setTemplateLayoutToolInput = object({
   templateId: string2().uuid(),
   layoutSlug: slugInputSchema
@@ -6909,8 +7345,8 @@ var setTemplateLayoutToolInput = object({
 var createLayoutToolInput = object({
   slug: slugInputSchema,
   displayName: string2().min(1).max(200),
-  html: sourceTextArg(string2().min(1).max(50000)),
-  css: sourceTextArg(string2().max(50000)).optional(),
+  html: sourceTextArg(string2().min(1).max(50000), "html"),
+  css: sourceTextArg(string2().max(50000), "css").optional(),
   blocks: array(object({
     name: string2().min(1).max(80),
     displayName: string2().min(1).max(200),
@@ -6926,8 +7362,8 @@ var setSiteDefaultsToolInput = object({
 var duplicatePageToolInput = object({
   sourcePageId: string2().uuid(),
   newSlug: slugInputSchema,
-  newName: string2().min(1).max(256).optional(),
   newTitle: string2().min(1).max(256).optional(),
+  newShortTitle: pageShortTitleSchema.optional(),
   targetTemplateId: string2().uuid().optional(),
   newParentPageId: string2().uuid().nullable().optional()
 }).strict();
@@ -6939,16 +7375,15 @@ var repointPageTemplateToolInput = object({
     object({ kind: literal("preserve-as-block"), blockName: slugInputSchema }).strict()
   ]).default({ kind: "drop" })
 }).strict();
+var movePositionInputSchema = preprocess(stripSurroundingQuotes, union([
+  _enum(["top", "bottom", "up", "down"]),
+  preprocess((v) => typeof v === "string" && /^\d+$/.test(v) ? Number.parseInt(v, 10) : v, number2().int().min(0).max(1000))
+]));
 var moveModuleToolInput = object({
   pageId: string2().uuid(),
   moduleId: string2().uuid(),
-  toBlockName: string2().min(1).max(80),
-  position: positionInputSchema
-}).strict();
-var reorderModuleToolInput = object({
-  pageId: string2().uuid(),
-  moduleId: string2().uuid(),
-  direction: union([_enum(["up", "down"]), number2().int().min(0).max(1000)])
+  toBlockName: string2().min(1).max(80).optional(),
+  position: movePositionInputSchema
 }).strict();
 var findMediaToolInput = object({
   query: string2().max(256).optional(),
@@ -6997,19 +7432,13 @@ var autofillPageSeoToolInput = object({
   metaDescription: string2().trim().min(1).max(320),
   ogImageAssetId: string2().uuid().nullable().optional()
 }).strict();
-var optimizePageSeoToolInput = object({
-  pageId: string2().uuid(),
-  metaDescription: string2().min(1).max(320),
-  ogImageAssetId: string2().uuid().nullable().optional(),
-  context: string2().max(4000).optional()
-}).strict();
 var findRedirectsToolInput = object({
   query: string2().max(500).optional(),
   statusCode: union([literal(301), literal(302), literal(307), literal(308), literal(410)]).optional(),
   limit: number2().int().min(1).max(200).default(50)
 }).strict();
 var bulkCreateRedirectsToolInput = object({
-  redirects: array(object({
+  items: array(object({
     fromPath: string2().min(1).max(500),
     toPath: redirectTargetPathSchema,
     statusCode: union([
@@ -7032,7 +7461,7 @@ var bulkDeleteRedirectsToolInput = object({
   matches: string2().min(1).max(500).optional()
 }).strict();
 var bulkOptimizeSeoToolInput = object({
-  updates: array(object({
+  items: array(object({
     pageId: string2().uuid(),
     metaDescription: string2().min(1).max(320),
     ogImageAssetId: string2().uuid().nullable().optional()
@@ -7263,7 +7692,7 @@ var buildPageContentSchema = discriminatedUnion("source", [
 var buildPageModuleSchema = object({
   blockName: slugSchema.optional(),
   position: positionInputSchema.optional(),
-  ref: string2().regex(/^[a-z][a-z0-9_-]{0,31}$/, "ref must be a short lowercase handle").optional(),
+  ref: string2().regex(/^[A-Za-z][A-Za-z0-9_-]{0,31}$/, "ref must be a short handle: a letter, then letters, digits, _ or -").optional(),
   moduleId: union([
     string2().uuid('moduleId must be a UUID from list_modules \u2014 to re-place a module minted earlier in THIS call, pass {"$ref": "<its ref>"} instead'),
     object({ $ref: string2() }).strict()
@@ -7272,9 +7701,9 @@ var buildPageModuleSchema = object({
   description: string2().max(1000).optional(),
   kind: moduleKindSchema.optional(),
   type: slugSchema.optional(),
-  html: sourceTextArg(string2().min(1).max(MODULE_HTML_MAX)).optional(),
-  css: sourceTextArg(string2().max(MODULE_CSS_MAX)).optional(),
-  js: sourceTextArg(string2().max(MODULE_JS_MAX)).optional(),
+  html: sourceTextArg(string2().min(1).max(MODULE_HTML_MAX), "html").optional(),
+  css: sourceTextArg(string2().max(MODULE_CSS_MAX), "css").optional(),
+  js: sourceTextArg(string2().max(MODULE_JS_MAX), "js").optional(),
   fields: array(moduleFieldSchema).max(64).optional(),
   bindThemeLiterals: boolean2().optional(),
   content: buildPageContentSchema.optional()
@@ -7304,14 +7733,27 @@ var buildPageTargetSchema = object({
   pageId: string2().uuid().optional(),
   slug: slugSchema.optional(),
   title: string2().min(1).max(256).optional(),
-  name: string2().min(1).max(256).optional(),
+  shortTitle: pageCreateSchema.shape.shortTitle,
   templateId: string2().uuid().optional(),
   status: pageStatusSchema.optional(),
-  parentPageId: string2().uuid().optional(),
+  parentPageId: string2().uuid().nullable().optional(),
+  pageType: pageCreateSchema.shape.pageType,
+  properties: pageCreateSchema.shape.properties,
+  terms: pageCreateSchema.shape.terms,
   importPageId: string2().uuid().optional(),
   metaDescription: string2().trim().min(1).max(SEO_DESCRIPTION_HARD_MAX).optional()
 }).strict().superRefine((page, ctx) => {
-  const createKeys = ["slug", "title", "name", "templateId", "status", "parentPageId"].filter((k) => page[k] !== undefined);
+  const createKeys = [
+    "slug",
+    "title",
+    "shortTitle",
+    "templateId",
+    "status",
+    "parentPageId",
+    "pageType",
+    "properties",
+    "terms"
+  ].filter((k) => page[k] !== undefined);
   if (page.pageId !== undefined) {
     if (createKeys.length > 0) {
       ctx.addIssue({
@@ -7386,7 +7828,7 @@ var INTERACTIONS = {
   carousel: { css: CAROUSEL_CSS, js: CAROUSEL_JS }
 };
 var INTERACTION_IDS = Object.keys(INTERACTIONS);
-var INTERACTION_MARKUP_CONTRACT = '**Vetted interactions - use these instead of writing JS for them.** Add `data-caelo-ui="<id>"` to the markup and Caelo ships accessible, dependency-free behaviour once per page; style it freely in the module CSS. ' + '`accordion` (FAQ, collapsible sections): `<div data-caelo-ui="accordion" data-single>` containing `<details id="..."><summary>Question</summary><div>Answer</div></details>` items - `data-single` keeps one open; a link to `#<details id>` opens it. ' + '`tabs`: `<div data-caelo-ui="tabs"><div role="tablist" aria-label="..."><button type="button" role="tab" id="t1" aria-controls="p1" aria-selected="true">...</button><button type="button" role="tab" id="t2" aria-controls="p2" aria-selected="false" tabindex="-1">...</button></div><div role="tabpanel" id="p1" aria-labelledby="t1">...</div><div role="tabpanel" id="p2" aria-labelledby="t2" hidden>...</div></div>` - ids must be unique on the page. ' + '`carousel` (slider, testimonials): `<section data-caelo-ui="carousel" aria-roledescription="carousel" aria-label="..."><div data-caelo-carousel-track tabindex="0"><div role="group" aria-roledescription="slide" aria-label="1 of 3">...</div>...</div><button type="button" data-caelo-carousel-prev aria-label="Previous slide"><span aria-hidden="true">&lsaquo;</span></button><button type="button" data-caelo-carousel-next aria-label="Next slide"><span aria-hidden="true">&rsaquo;</span></button></section>` (an icon button keeps its visible content aria-hidden; a text button needs no aria-label) - one slide per view by default; set the slides\' `flex-basis` in module CSS to show more. ' + "`mobile-nav` is applied by the built-in nav-menu renderer; never add it by hand. " + "Write module JS only for behaviour the kit does not cover.";
+var INTERACTION_MARKUP_CONTRACT = "`data-caelo-ui` kit \u2014 use it instead of JS for these (accessible, shipped once per page, style freely in module CSS):\n" + '- `accordion` (FAQ, collapsible): `<div data-caelo-ui="accordion" data-single>` with `<details id="..."><summary>Question</summary><div>Answer</div></details>` items; `data-single` keeps one open; a link to `#<details id>` opens it.\n' + '- `tabs`: `<div data-caelo-ui="tabs"><div role="tablist" aria-label="..."><button type="button" role="tab" id="t1" aria-controls="p1" aria-selected="true">...</button><button type="button" role="tab" id="t2" aria-controls="p2" aria-selected="false" tabindex="-1">...</button></div><div role="tabpanel" id="p1" aria-labelledby="t1">...</div><div role="tabpanel" id="p2" aria-labelledby="t2" hidden>...</div></div>`; ids unique on the page.\n' + '- `carousel` (slider, testimonials): `<section data-caelo-ui="carousel" aria-roledescription="carousel" aria-label="..."><div data-caelo-carousel-track tabindex="0"><div role="group" aria-roledescription="slide" aria-label="1 of 3">...</div>...</div><button type="button" data-caelo-carousel-prev aria-label="Previous slide"><span aria-hidden="true">&lsaquo;</span></button><button type="button" data-caelo-carousel-next aria-label="Next slide"><span aria-hidden="true">&rsaquo;</span></button></section>`; icon buttons keep visible content aria-hidden, text buttons need no aria-label. One slide per view; set the slides\' `flex-basis` in module CSS to show more.\n' + '- `mobile-nav` (menu collapsing behind a toggle on small screens): `<nav class="caelo-nav-menu" data-caelo-ui="mobile-nav" data-nav-open="false"><button type="button" class="caelo-nav-toggle" aria-expanded="false" aria-label="Menu"><span class="caelo-nav-bar"></span><span class="caelo-nav-bar"></span><span class="caelo-nav-bar"></span></button><ul>{{#menu}}<li>\u2026</li>{{/menu}}</ul></nav>` around the module\'s menu `list` field.\n' + "Write module JS only for behaviour the kit does not cover.";
 
 // ../shared/src/media.ts
 var MEDIA_ALLOWED_MIMES = [
@@ -7967,6 +8409,9 @@ mustache.Context = Context;
 mustache.Writer = Writer;
 var mustache_default = mustache;
 
+// ../shared/src/template-sections.ts
+var CONTEXT_HEADS = new Set(["page", "site_text"]);
+
 // ../shared/src/template-engine.ts
 mustache_default.escape = (s) => s === null || s === undefined ? "" : String(s);
 var SECTION_KINDS = new Set(MODULE_FIELD_SECTION_KINDS);
@@ -7979,7 +8424,7 @@ var THEME_ASSET_KEY_TO_SLOT = {
 var THEME_ASSET_KEYS = Object.keys(THEME_ASSET_KEY_TO_SLOT);
 
 // ../shared/src/template-balance.ts
-var RAW_TEXT_ELEMENTS = new Set([
+var RAW_TEXT_ELEMENTS2 = new Set([
   "script",
   "style",
   "textarea",
@@ -8297,9 +8742,9 @@ var languageTagSchema = string2().max(35).regex(/^[A-Za-z]{2,8}(-[A-Za-z0-9]{1,8
 var HTML_WS = new Set(["\t", `
 `, "\f", "\r", " "]);
 // ../shared/src/edit-markers.ts
-var EDITABLE_KINDS = new Set(["text", "text-list", "link-list", "url", "image"]);
+var EDITABLE_KINDS = new Set(["text", "url", "image", "list"]);
 var MARKABLE_ATTRIBUTES = new Set(["href", "src", "alt"]);
-var RAW_TEXT_ELEMENTS2 = new Set(["script", "style", "title", "textarea"]);
+var RAW_TEXT_ELEMENTS3 = new Set(["script", "style", "title", "textarea"]);
 // ../shared/src/font-usage.ts
 var GLOBAL_KEYWORDS = new Set(["inherit", "initial", "unset", "revert", "revert-layer"]);
 var SYSTEM_FONTS = new Set([
@@ -8456,6 +8901,31 @@ var VARIANT_RE = LINK_REF_PART_PATTERNS.variant;
 var SITE_SERVED_FILES = new Set(["/robots.txt", "/sitemap.xml"]);
 var URL_KINDS = new Set(["url", "link", "image"]);
 var NESTED_KINDS = new Set(["module", "module-list"]);
+// ../shared/src/lists/address.ts
+var SEG = "[a-z0-9_-]+";
+var ADDRESS_RE = new RegExp(`^(?:list/(${SEG})/item/(${SEG})/(${SEG})` + `|instance/(${SEG})/(${SEG})/item/(${SEG})/(${SEG})` + `|page/(${SEG})/props/(${SEG})` + `|list_type/(${SEG})/node/(${SEG})/(${SEG}))$`);
+// ../shared/src/lists/page-type.ts
+var pageTypeDefSchema = object({
+  slug: string2().regex(/^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$/),
+  name: string2().min(1).max(200),
+  purpose: string2().min(1).max(1000),
+  templates: array(string2().uuid()).min(1).max(64),
+  defaultTemplate: string2().uuid(),
+  properties: array(fieldDefSchema).max(32).default([]),
+  vocabularies: array(object({
+    list: string2().uuid(),
+    cardinality: _enum(["one", "many"]),
+    required: boolean2().optional()
+  }).strict()).max(16).default([])
+}).strict();
+// ../shared/src/lists/resolve.ts
+var SEG2 = "[a-z0-9_-]+";
+var LIST_VALUE_RE = new RegExp(`^list/(${SEG2})/item/(${SEG2})/(${SEG2})$`);
+var INSTANCE_VALUE_RE = new RegExp(`^instance/(${SEG2})/(${SEG2})/item/(${SEG2})/(${SEG2})$`);
+var PAGE_PROP_RE = new RegExp(`^page/(${SEG2})/props/(${SEG2})$`);
+var LIST_HIDDEN_RE = new RegExp(`^list/(${SEG2})/item/(${SEG2})$`);
+var INSTANCE_HIDDEN_RE = new RegExp(`^instance/(${SEG2})/(${SEG2})/item/(${SEG2})$`);
+var STRUCTURAL_TYPES = new Set(["module", "term"]);
 // ../shared/src/markup-structure.ts
 var LEAF_TAGS = new Set(["svg", "math", "script", "style", "noscript", "iframe"]);
 // ../shared/src/page-log.ts
@@ -8588,31 +9058,6 @@ var PINNED_FONT_SLICE_FILE_PATTERN = "[0-9a-f]{64}\\.[0-9a-f]{12}\\.[a-z]+(?:-[a
 var PINNED_FONT_SLICE_FILE_RE = new RegExp(`^${PINNED_FONT_SLICE_FILE_PATTERN}$`);
 var CONTENT_HASHED_PATH_PATTERN = `^/(?:_app/immutable/.+|_assets/fonts/[^/]+/[0-9a-f]{16}\\.woff2|_assets/fonts/pinned/${PINNED_FONT_SLICE_FILE_PATTERN}|_assets/[a-z0-9][a-z0-9-]*(?:/[a-z][a-z0-9-]*)?\\.[0-9a-f]{16}\\.[a-z0-9]{2,5}|_caelo/plugin/[^/]+/[^/]+\\.[0-9a-f]{12}\\.(?:js|css))$`;
 var CONTENT_HASHED_PATH_RE = new RegExp(CONTENT_HASHED_PATH_PATTERN);
-// ../shared/src/structured-sets.ts
-var navMenuItem = lazy(() => object({
-  label: string2().min(1).max(120),
-  href: string2().min(1).max(500),
-  target: _enum(["_self", "_blank"]).optional(),
-  children: array(navMenuItem).optional(),
-  adSlotId: string2().min(1).max(100).optional()
-}).strict());
-var taxonomyItem = object({
-  slug: string2().min(1).max(120),
-  displayName: string2().min(1).max(200),
-  parentSlug: string2().min(1).max(120).optional(),
-  description: string2().max(2000).optional()
-}).strict();
-var tagItem = object({
-  slug: string2().min(1).max(120).regex(/^[a-z0-9-]+$/, "lowercase letters/digits/hyphens"),
-  displayName: string2().min(1).max(200),
-  color: string2().regex(/^#[0-9a-fA-F]{3,8}$/, "hex color").optional()
-}).strict();
-var linkListItem = object({
-  label: string2().min(1).max(200),
-  href: string2().min(1).max(500),
-  description: string2().max(500).optional()
-}).strict();
-var structuredSetKind = _enum(["nav-menu", "taxonomy", "tags", "link-list"]);
 // ../shared/src/subagents.ts
 var expectedReturnShape = _enum(["verdict", "tree", "freeform", "rebuild"]);
 var EXPECTED_RETURN_SHAPES = expectedReturnShape.options;
@@ -18008,7 +18453,7 @@ async function recordAudit(tx, opts) {
 var SYSTEM_ACTOR_ID = "00000000-0000-0000-0000-00000000ffff";
 
 // ../query-api/src/branch-access.ts
-var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+var UUID_RE2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 function namedBranches(ctx, input) {
   const out = new Set;
   if (ctx.chatBranchId)
@@ -18029,11 +18474,11 @@ function branchNotFound(operation, chatBranchId) {
   };
 }
 function firstMalformedBranch(branches) {
-  return branches.find((b) => !UUID_RE.test(b)) ?? null;
+  return branches.find((b) => !UUID_RE2.test(b)) ?? null;
 }
 async function firstInvisibleBranch(tx, branches) {
   for (const branch of branches) {
-    if (!UUID_RE.test(branch))
+    if (!UUID_RE2.test(branch))
       return branch;
     const rows = await tx.execute(sql`SELECT caelo_branch_visible(${branch}::uuid) AS visible`);
     if (rows[0]?.visible !== true)
@@ -18096,6 +18541,7 @@ function isRlsDenial(error) {
 
 // ../query-api/src/plugin-schema-provision.ts
 import { createHash } from "crypto";
+var DROPPED_COLUMNS_SETTING = "caelo.plugin_dropped_columns";
 var SCHEMA_HEADER_RE = /^CREATE SCHEMA IF NOT EXISTS "(plugin_[a-z][a-z0-9_]*)";/;
 function provisionedSchemaName(caller, ddl) {
   const name = SCHEMA_HEADER_RE.exec(ddl)?.[1];
@@ -18116,14 +18562,19 @@ async function provisionPluginSchemaInTx(tx, caller, opts) {
       AND to_regnamespace(${schemaName}) IS NOT NULL
   `);
   if (recorded.length > 0)
-    return;
+    return { schemaName, droppedColumns: [] };
   await tx.execute(sql.raw(opts.sql));
+  const dropped = await tx.execute(sql.raw(`SELECT coalesce(current_setting('${DROPPED_COLUMNS_SETTING}', true), '') AS v`));
   await tx.execute(sql`
     INSERT INTO plugin_schema_provisions (schema_name, sql_digest)
     VALUES (${schemaName}, ${digest})
     ON CONFLICT (schema_name) DO UPDATE
       SET sql_digest = EXCLUDED.sql_digest, provisioned_at = now()
   `);
+  return {
+    schemaName,
+    droppedColumns: (dropped[0]?.v ?? "").split(",").filter((c) => c.length > 0)
+  };
 }
 
 // ../query-api/src/post-commit.ts
@@ -18494,9 +18945,16 @@ class DatabaseAdapter {
     }
     if (!this.#skipVerify)
       await this.verifyRoles();
-    await this.#public.transaction(async (tx) => {
-      await provisionPluginSchemaInTx(tx, "provisionPluginPublicSchema", opts);
+    const outcome = await this.#public.transaction(async (tx) => {
+      return provisionPluginSchemaInTx(tx, "provisionPluginPublicSchema", opts);
     });
+    if (outcome.droppedColumns.length > 0) {
+      const admin = this.#adminDb("provisionPluginPublicSchema");
+      await admin.transaction(async (tx) => {
+        await tx.execute(sql.raw("SELECT set_config('caelo.actor_kind', 'system', true)"));
+        await auditDroppedColumns(tx, "cms_public", opts.pluginId, outcome);
+      });
+    }
   }
   async provisionPluginAdminSchema(opts) {
     if (!/^[0-9a-f-]{36}$/i.test(opts.pluginId)) {
@@ -18506,7 +18964,10 @@ class DatabaseAdapter {
     if (!this.#skipVerify)
       await this.verifyRoles();
     await admin.transaction(async (tx) => {
-      await provisionPluginSchemaInTx(tx, "provisionPluginAdminSchema", opts);
+      const outcome = await provisionPluginSchemaInTx(tx, "provisionPluginAdminSchema", opts);
+      if (outcome.droppedColumns.length > 0) {
+        await auditDroppedColumns(tx, "cms_admin", opts.pluginId, outcome);
+      }
     });
   }
   async dropPluginAdminSchema(opts) {
@@ -18541,6 +19002,16 @@ class DatabaseAdapter {
     return this.#public;
   }
 }
+async function auditDroppedColumns(tx, database, pluginId, outcome) {
+  await recordAudit(tx, {
+    actorId: SYSTEM_ACTOR_ID,
+    operation: "plugins.schema_drop_columns",
+    input: { database, schema: outcome.schemaName, columns: outcome.droppedColumns },
+    succeeded: true,
+    entityId: pluginId,
+    resultSummary: `${database}.${outcome.schemaName}: dropped ${outcome.droppedColumns.join(", ")}`
+  });
+}
 // ../query-api/src/execute.ts
 var allowAllRateLimiter = {
   async check() {