@caelo-cms/shared 0.10.22 → 0.10.24

package/dist/genesis.js

@@ -0,0 +1,145 @@
+// SPDX-License-Identifier: MPL-2.0
+/**
+ * issue #163 — Site Genesis shared shapes; issue #375 generalises the
+ * same draft loop to growth-time.
+ *
+ * Design-time is divergent: the AI drafts complete freeform HTML pages
+ * (one per design direction) and the operator picks one; the CMS
+ * structure is derived FROM that choice (#164's compiler). Growth-time
+ * reuses the identical draft → present → select → materialise loop at
+ * smaller scope: `page` and `module` drafts are FRAGMENTS bound to the
+ * site's `var(--…)` theme tokens, composed into the real theme shell
+ * only at view time (never an AI approximation of the theme — #375).
+ * These are the boundary schemas for the brief + the draft rows.
+ */
+import { z } from "zod";
+/**
+ * The structured Design Brief the discovery dialog produces. Every
+ * field optional — the AI fills what the conversation answered; the
+ * draft prompts degrade gracefully on gaps. Stored on
+ * `site_defaults.design_brief`.
+ */
+export const designBriefSchema = z
+    .object({
+    audience: z.string().min(1).max(500).optional(),
+    /** 3–5 adjectives the operator wants the design to feel like. */
+    moodWords: z.array(z.string().min(1).max(40)).max(12).optional(),
+    tone: z.string().min(1).max(300).optional(),
+    industry: z.string().min(1).max(200).optional(),
+    differentiators: z.string().min(1).max(1000).optional(),
+    imageryDirection: z.string().min(1).max(500).optional(),
+    avoid: z.string().min(1).max(500).optional(),
+})
+    .strict();
+/** Complete single-file drafts stay well under this (inline CSS only). */
+export const GENESIS_DRAFT_MAX_HTML_BYTES = 300_000;
+export const genesisDraftStatus = z.enum(["candidate", "selected", "discarded"]);
+/** issue #199 — where a draft came from. */
+export const genesisDraftSourceKind = z.enum(["genesis", "byod_image", "byod_html"]);
+/**
+ * issue #375 — what a draft covers. `site` is the Genesis case (a whole
+ * new design); `page` / `module` are growth-time variants of something
+ * that already exists.
+ */
+export const designDraftScope = z.enum(["site", "page", "module"]);
+/**
+ * issue #375 — how a draft's HTML is stored. `site` drafts are complete
+ * standalone documents (Genesis, unchanged); `page`/`module` drafts are
+ * fragments that only become a renderable document when composed with
+ * the site's real theme shell at view time — so a stored variant never
+ * freezes a stale copy of the theme.
+ */
+export const designDraftFormat = z.enum(["document", "fragment"]);
+/** The stored format is fully determined by the scope (see the paired
+ *  DB CHECK constraint): `site` → standalone document, else fragment. */
+export function draftFormatForScope(scope) {
+    return scope === "site" ? "document" : "fragment";
+}
+const addDraftBase = z
+    .object({
+    /** Human-readable design direction ("bold editorial"). */
+    direction: z.string().min(3).max(120),
+    /** Why this direction fits the brief — shown beside the preview. */
+    rationale: z.string().max(1000).default(""),
+    /** Site scope: complete self-contained single-file HTML. Page/module
+     *  scope: an HTML fragment bound to the site's `var(--…)` tokens. */
+    html: z.string().min(200).max(GENESIS_DRAFT_MAX_HTML_BYTES),
+    /** issue #375 — what this draft covers; `site` is the Genesis case. */
+    scope: designDraftScope.default("site"),
+    /** issue #375 — page scope: the page this variant redesigns. Module
+     *  scope: optional page context for "this module as used on …". */
+    targetPageId: z.string().uuid().optional(),
+    /** issue #375 — module scope: the module this variant restyles. */
+    targetModuleId: z.string().uuid().optional(),
+    /** issue #375 — groups one request's variants into one comparison.
+     *  Omit on the first save (the op mints and returns it); pass it on
+     *  every sibling save of the same round. */
+    variantSetId: z.string().uuid().optional(),
+    /** issue #199 — 'byod_image' (AI reproduction of an operator
+     *  mockup) / 'byod_html' (operator HTML, sanitised at the op). */
+    sourceKind: genesisDraftSourceKind.default("genesis"),
+    /** issue #199 — byod_image only: the uploaded mockup's media
+     *  asset. The parity gate uses THIS image as the reference. */
+    referenceAssetId: z.string().uuid().optional(),
+})
+    .strict();
+/** Scope/target pairing rules shared by the op and the AI tool. */
+export const genesisAddDraftInput = addDraftBase.superRefine((v, ctx) => {
+    if (v.scope === "site") {
+        if (v.targetPageId !== undefined || v.targetModuleId !== undefined) {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                message: "site-scope drafts take no target — drop targetPageId/targetModuleId",
+            });
+        }
+    }
+    else if (v.sourceKind !== "genesis") {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: "byod drafts are site-scope only (issue #199); growth-time variants use sourceKind 'genesis'",
+        });
+    }
+    else if (v.scope === "page") {
+        if (v.targetPageId === undefined || v.targetModuleId !== undefined) {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                message: "page-scope drafts need targetPageId (and no targetModuleId)",
+            });
+        }
+    }
+    else if (v.targetModuleId === undefined) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: "module-scope drafts need targetModuleId (targetPageId is optional page context)",
+        });
+    }
+});
+/**
+ * issue #199 — strip <script> blocks from operator-provided draft
+ * HTML. Defense in depth: drafts render inside sandbox="" iframes
+ * (scripts never execute there), but stored HTML flows onward into
+ * materialisation, so the boundary removes them outright. Linear
+ * scan per the #113 discipline; case-insensitive; unterminated
+ * script blocks drop everything to EOF (never leak half a script).
+ */
+export function sanitizeDraftHtml(html) {
+    const lower = html.toLowerCase();
+    let out = "";
+    let from = 0;
+    while (true) {
+        const open = lower.indexOf("<script", from);
+        if (open === -1) {
+            out += html.slice(from);
+            return out;
+        }
+        out += html.slice(from, open);
+        const close = lower.indexOf("</script", open);
+        if (close === -1)
+            return out;
+        const closeEnd = lower.indexOf(">", close);
+        if (closeEnd === -1)
+            return out;
+        from = closeEnd + 1;
+    }
+}
+//# sourceMappingURL=genesis.js.map

package/dist/genesis.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"genesis.js","sourceRoot":"","sources":["../src/genesis.ts"],"names":[],"mappings":"AAAA,mCAAmC;AAEnC;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC/C,iEAAiE;IACjE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAChE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC/C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACvD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACvD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CAC7C,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,0EAA0E;AAC1E,MAAM,CAAC,MAAM,4BAA4B,GAAG,OAAO,CAAC;AAEpD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC;AAGjF,4CAA4C;AAC5C,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC;AAGrF;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;AAGnE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;AAGlE;yEACyE;AACzE,MAAM,UAAU,mBAAmB,CAAC,KAAuB;IACzD,OAAO,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;AACpD,CAAC;AAED,MAAM,YAAY,GAAG,CAAC;KACnB,MAAM,CAAC;IACN,0DAA0D;IAC1D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACrC,oEAAoE;IACpE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3C;yEACqE;IACrE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,4BAA4B,CAAC;IAC3D,uEAAuE;IACvE,KAAK,EAAE,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC;IACvC;uEACmE;IACnE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC1C,mEAAmE;IACnE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC5C;;gDAE4C;IAC5C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC1C;sEACkE;IAClE,UAAU,EAAE,sBAAsB,CAAC,OAAO,CAAC,SAAS,CAAC;IACrD;mEAC+D;IAC/D,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CAC/C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,mEAAmE;AACnE,MAAM,CAAC,MAAM,oBAAoB,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;IACtE,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACnE,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,OAAO,EAAE,qEAAqE;aAC/E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACtC,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EACL,6FAA6F;SAChG,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACnE,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,OAAO,EAAE,6DAA6D;aACvE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,IAAI,CAAC,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QAC1C,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,iFAAiF;SAC3F,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAGH;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC5C,IAAI,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC;YAChB,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACxB,OAAO,GAAG,CAAC;QACb,CAAC;QACD,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC9C,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC;QAC7B,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC3C,IAAI,QAAQ,KAAK,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC;QAChC,IAAI,GAAG,QAAQ,GAAG,CAAC,CAAC;IACtB,CAAC;AACH,CAAC"}

package/dist/i18n.d.ts

@@ -1,49 +1,42 @@
-export interface LocaleConfig {
-    code: string;
-    displayName: string;
-    urlStrategy: "none" | "subdirectory" | "subdomain" | "domain";
-    urlHost: string | null;
-    isDefault: boolean;
-}
 /**
- * Build a public-facing URL for a (locale, slug) tuple. Pure function —
- * no DB access — so the static generator can call it for every page
- * without round-trips.
+ * Strip leading and trailing `/` characters with a single linear scan.
  *
- * @param locale       The target locale's full config row.
- * @param slug         Path component (e.g. "about", "blog/post-1"). No leading slash.
- * @param siteBaseUrl  Default base URL when the strategy is `none` or
- *                     `subdirectory` (e.g. "https://example.com").
- * @returns Absolute URL, including scheme + host.
+ * Replaces the regex `/^\/+|\/+$/g`, whose trailing-slash branch
+ * backtracks O(n²) on a long run of slashes that is not at end-of-string
+ * (CodeQL js/polynomial-redos). This char-index walk is unconditionally
+ * linear and produces byte-identical output for every input.
  */
-export declare function resolveLocaleUrl(locale: LocaleConfig, slug: string, siteBaseUrl: string, pageUrlStyle?: "directory" | "no-extension"): string;
+export declare function trimSlashes(s: string): string;
 /**
- * Emit `<link rel="alternate" hreflang="…">` tags for every locale
- * that has a published variant of this page. The default locale also
- * gets an `x-default` entry per Google's i18n guidance.
+ * Strip only trailing `/` characters with a single linear scan — the
+ * non-backtracking replacement for `/\/+$/` (same ReDoS class as above).
+ * Used for base URLs, which carry a scheme and must keep their leading
+ * characters.
+ */
+export declare function trimTrailingSlashes(s: string): string;
+/**
+ * The "magic slug" sentinel test: a page whose slug is empty, `home`,
+ * or `index` is the locale root by convention even without an explicit
+ * `locales.home_page_id` designation. Leading/trailing slashes are
+ * ignored so `/home/` reads the same as `home`.
+ */
+export declare function isHomeSlug(slug: string): boolean;
+/**
+ * The single home-decision predicate every URL/output-path site must
+ * use so canonical, hreflang, redirects, and the emitted file agree
+ * (0184 explicit-homepage feature). A page is the locale root when it
+ * IS the locale's designated `home_page_id` OR carries a magic slug.
  *
- * Returned as a single string suitable for splicing into <head>.
+ * @param pageId            The page being resolved.
+ * @param slug              That page's slug.
+ * @param localeHomePageId  `locales.home_page_id` for the page's locale
+ *                          (null/undefined when no page is designated).
  */
-export declare function buildHreflangLinks(perLocaleUrls: ReadonlyArray<{
-    localeCode: string;
-    url: string;
-    isDefault: boolean;
-}>): string;
+export declare function pageIsLocaleHome(pageId: string, slug: string, localeHomePageId: string | null | undefined): boolean;
 /**
  * Canonical-JSON serializer + sha256 → hex. Stable across runs because
  * keys are sorted. The output is used for `pages.content_hash` so that
  * a Mode-2 translation can detect whether its source has changed.
  */
 export declare function computeContentHash(value: unknown): Promise<string>;
-export interface LocaleLintWarning {
-    code: string;
-    message: string;
-}
-/**
- * Cross-row config sanity checks. Run at:
- *   - propose-time (warnings stored on the proposal preview)
- *   - render-time (no fail-loudly per CLAUDE.md §2 since the renderer
- *     can still emit; surfaced in admin UI as banners)
- */
-export declare function lintLocaleConfig(locales: ReadonlyArray<LocaleConfig>, advancedUrlRouting: boolean): LocaleLintWarning[];
 //# sourceMappingURL=i18n.d.ts.map

package/dist/i18n.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"i18n.d.ts","sourceRoot":"","sources":["../src/i18n.ts"],"names":[],"mappings":"AA4BA,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,GAAG,cAAc,GAAG,WAAW,GAAG,QAAQ,CAAC;IAC9D,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,YAAY,EACpB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EAMnB,YAAY,GAAE,WAAW,GAAG,cAA4B,GACvD,MAAM,CAqCR;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,aAAa,EAAE,aAAa,CAAC;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAAC,GACpF,MAAM,CAaR;AAUD;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAWxE;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,aAAa,CAAC,YAAY,CAAC,EACpC,kBAAkB,EAAE,OAAO,GAC1B,iBAAiB,EAAE,CAoCrB"}
+{"version":3,"file":"i18n.d.ts","sourceRoot":"","sources":["../src/i18n.ts"],"names":[],"mappings":"AAgBA;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAM7C;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAIrD;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAGhD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAET;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAWxE"}

package/dist/i18n.js

@@ -1,105 +1,68 @@
 // SPDX-License-Identifier: MPL-2.0
 /**
- * P9 — i18n primitives shared between the static generator, the
- * preview op, and the admin UI:
+ * Slug/URL primitives shared between the static generator, the preview
+ * op, and the admin UI. Epic #380 Phase A (#383): locale URL shaping
+ * (resolveLocaleUrl, buildHreflangLinks) is deleted — URL shape beyond
+ * base + slug becomes a plugin contribution on the URL composition
+ * point (#390). What survives until the page-identity cut (#384):
  *
- *   computeContentHash(page, modules) — sha256 of canonical-JSON
- *     content. Drives `pages.content_hash` + the translation_status
- *     recompute path.
- *
- *   resolveLocaleUrl(locale, slug, defaultLocaleCode, siteBaseUrl) —
- *     builds the public URL for a (locale, slug) tuple given the
- *     locale's url_strategy + url_host. Used by:
- *       - hreflang emitter
- *       - sitemap.xml emitter (when extended for i18n)
- *       - language-selector module
- *
- *   buildHreflangLinks(currentLocale, perLocaleUrls, defaultLocaleCode) —
- *     emits the `<link rel="alternate" hreflang=...>` markup.
- *
- *   lintLocaleConfig(locales, advancedUrlRouting) — surfaces config
- *     warnings (mixed strategies, missing url_host for subdomain/
- *     domain, default locale using `none` alongside subdirectory
- *     siblings, advanced strategy chosen while toggle is off).
+ *   isHomeSlug / pageIsLocaleHome — the home-decision predicate.
+ *   computeContentHash — drives `pages.content_hash` (removed in #384).
+ *   trimSlashes / trimTrailingSlashes — linear-scan slug hygiene.
  */
 const TEXT_ENCODER = new TextEncoder();
 /**
- * Build a public-facing URL for a (locale, slug) tuple. Pure function —
- * no DB access — so the static generator can call it for every page
- * without round-trips.
+ * Strip leading and trailing `/` characters with a single linear scan.
  *
- * @param locale       The target locale's full config row.
- * @param slug         Path component (e.g. "about", "blog/post-1"). No leading slash.
- * @param siteBaseUrl  Default base URL when the strategy is `none` or
- *                     `subdirectory` (e.g. "https://example.com").
- * @returns Absolute URL, including scheme + host.
+ * Replaces the regex `/^\/+|\/+$/g`, whose trailing-slash branch
+ * backtracks O(n²) on a long run of slashes that is not at end-of-string
+ * (CodeQL js/polynomial-redos). This char-index walk is unconditionally
+ * linear and produces byte-identical output for every input.
  */
-export function resolveLocaleUrl(locale, slug, siteBaseUrl, 
-// v0.2.85 — page emission style. 'directory' (default) builds
-// URLs ending in `/<slug>/`; 'no-extension' builds URLs ending
-// in `/<slug>` (no trailing slash) to match what the bucket
-// actually serves when pages are emitted as bare slugs. Home
-// page is always `<base>/` regardless of style.
-pageUrlStyle = "directory") {
-    const stripped = slug.replace(/^\/+|\/+$/g, "");
-    const isHome = stripped === "" || stripped === "home" || stripped === "index";
-    // tail: the path component appended after `<base>/` or `<base>/<locale>/`.
-    // 'directory' style: trailing slash for non-home so the URL points at
-    // the directory the bucket serves index.html from.
-    // 'no-extension' style: no trailing slash, no extension — the URL
-    // points at the bare-slug object the bucket serves directly.
-    const tail = isHome ? "" : pageUrlStyle === "no-extension" ? stripped : `${stripped}/`;
-    const base = siteBaseUrl.replace(/\/+$/, "");
-    switch (locale.urlStrategy) {
-        case "none":
-            return tail ? `${base}/${tail}` : `${base}/`;
-        case "subdirectory":
-            // Default locale with strategy `subdirectory` still gets the prefix
-            // unless the migration set strategy=none for it. The decision is
-            // explicit per locale row, not implicit on isDefault.
-            return tail ? `${base}/${locale.code}/${tail}` : `${base}/${locale.code}/`;
-        case "subdomain": {
-            if (!locale.urlHost) {
-                throw new Error(`locale '${locale.code}' uses url_strategy='subdomain' without url_host — config invalid`);
-            }
-            const protocol = base.startsWith("http://") ? "http://" : "https://";
-            return tail ? `${protocol}${locale.urlHost}/${tail}` : `${protocol}${locale.urlHost}/`;
-        }
-        case "domain": {
-            if (!locale.urlHost) {
-                throw new Error(`locale '${locale.code}' uses url_strategy='domain' without url_host — config invalid`);
-            }
-            const protocol = base.startsWith("http://") ? "http://" : "https://";
-            return tail ? `${protocol}${locale.urlHost}/${tail}` : `${protocol}${locale.urlHost}/`;
-        }
-    }
+export function trimSlashes(s) {
+    let start = 0;
+    let end = s.length;
+    while (start < end && s.charCodeAt(start) === 47 /* '/' */)
+        start += 1;
+    while (end > start && s.charCodeAt(end - 1) === 47 /* '/' */)
+        end -= 1;
+    return s.slice(start, end);
 }
 /**
- * Emit `<link rel="alternate" hreflang="…">` tags for every locale
- * that has a published variant of this page. The default locale also
- * gets an `x-default` entry per Google's i18n guidance.
- *
- * Returned as a single string suitable for splicing into <head>.
+ * Strip only trailing `/` characters with a single linear scan — the
+ * non-backtracking replacement for `/\/+$/` (same ReDoS class as above).
+ * Used for base URLs, which carry a scheme and must keep their leading
+ * characters.
+ */
+export function trimTrailingSlashes(s) {
+    let end = s.length;
+    while (end > 0 && s.charCodeAt(end - 1) === 47 /* '/' */)
+        end -= 1;
+    return s.slice(0, end);
+}
+/**
+ * The "magic slug" sentinel test: a page whose slug is empty, `home`,
+ * or `index` is the locale root by convention even without an explicit
+ * `locales.home_page_id` designation. Leading/trailing slashes are
+ * ignored so `/home/` reads the same as `home`.
  */
-export function buildHreflangLinks(perLocaleUrls) {
-    if (perLocaleUrls.length === 0)
-        return "";
-    const lines = [];
-    for (const v of perLocaleUrls) {
-        lines.push(`<link rel="alternate" hreflang="${escapeAttr(v.localeCode)}" href="${escapeAttr(v.url)}" />`);
-    }
-    const def = perLocaleUrls.find((v) => v.isDefault);
-    if (def) {
-        lines.push(`<link rel="alternate" hreflang="x-default" href="${escapeAttr(def.url)}" />`);
-    }
-    return lines.join("\n");
+export function isHomeSlug(slug) {
+    const s = trimSlashes(slug);
+    return s === "" || s === "home" || s === "index";
 }
-function escapeAttr(s) {
-    return s
-        .replace(/&/g, "&amp;")
-        .replace(/"/g, "&quot;")
-        .replace(/</g, "&lt;")
-        .replace(/>/g, "&gt;");
+/**
+ * The single home-decision predicate every URL/output-path site must
+ * use so canonical, hreflang, redirects, and the emitted file agree
+ * (0184 explicit-homepage feature). A page is the locale root when it
+ * IS the locale's designated `home_page_id` OR carries a magic slug.
+ *
+ * @param pageId            The page being resolved.
+ * @param slug              That page's slug.
+ * @param localeHomePageId  `locales.home_page_id` for the page's locale
+ *                          (null/undefined when no page is designated).
+ */
+export function pageIsLocaleHome(pageId, slug, localeHomePageId) {
+    return (localeHomePageId != null && pageId === localeHomePageId) || isHomeSlug(slug);
 }
 /**
  * Canonical-JSON serializer + sha256 → hex. Stable across runs because
@@ -119,42 +82,4 @@ export async function computeContentHash(value) {
     const digest = await crypto.subtle.digest("SHA-256", TEXT_ENCODER.encode(canonical));
     return [...new Uint8Array(digest)].map((b) => b.toString(16).padStart(2, "0")).join("");
 }
-/**
- * Cross-row config sanity checks. Run at:
- *   - propose-time (warnings stored on the proposal preview)
- *   - render-time (no fail-loudly per CLAUDE.md §2 since the renderer
- *     can still emit; surfaced in admin UI as banners)
- */
-export function lintLocaleConfig(locales, advancedUrlRouting) {
-    const warnings = [];
-    const usingAdvanced = locales.some((l) => l.urlStrategy === "subdomain" || l.urlStrategy === "domain");
-    if (usingAdvanced && !advancedUrlRouting) {
-        warnings.push({
-            code: "advanced-routing-disabled",
-            message: "one or more locales use 'subdomain' or 'domain' strategy but Advanced URL Routing is disabled — enable it under /security/locales",
-        });
-    }
-    for (const l of locales) {
-        if ((l.urlStrategy === "subdomain" || l.urlStrategy === "domain") && !l.urlHost) {
-            warnings.push({
-                code: "missing-url-host",
-                message: `locale '${l.code}' uses url_strategy='${l.urlStrategy}' without url_host`,
-            });
-        }
-    }
-    // Default-locale 'none' alongside subdirectory siblings is a common
-    // mixed config; surface it so users know the default's URL stays bare
-    // while siblings get prefixed.
-    const def = locales.find((l) => l.isDefault);
-    const subdirSiblings = locales.filter((l) => !l.isDefault && l.urlStrategy === "subdirectory");
-    if (def && def.urlStrategy === "none" && subdirSiblings.length > 0) {
-        warnings.push({
-            code: "mixed-default-none-subdir",
-            message: `default locale '${def.code}' uses 'none' while ${subdirSiblings
-                .map((l) => l.code)
-                .join(", ")} use 'subdirectory' — this is valid but unusual; verify hreflang renders correctly`,
-        });
-    }
-    return warnings;
-}
 //# sourceMappingURL=i18n.js.map

package/dist/i18n.js.map

@@ -1 +1 @@
-{"version":3,"file":"i18n.js","sourceRoot":"","sources":["../src/i18n.ts"],"names":[],"mappings":"AAAA,mCAAmC;AAEnC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,MAAM,YAAY,GAAG,IAAI,WAAW,EAAE,CAAC;AAUvC;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAoB,EACpB,IAAY,EACZ,WAAmB;AACnB,8DAA8D;AAC9D,+DAA+D;AAC/D,4DAA4D;AAC5D,6DAA6D;AAC7D,gDAAgD;AAChD,eAA6C,WAAW;IAExD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,QAAQ,KAAK,EAAE,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,OAAO,CAAC;IAC9E,2EAA2E;IAC3E,sEAAsE;IACtE,mDAAmD;IACnD,kEAAkE;IAClE,6DAA6D;IAC7D,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,GAAG,CAAC;IACvF,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7C,QAAQ,MAAM,CAAC,WAAW,EAAE,CAAC;QAC3B,KAAK,MAAM;YACT,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC;QAC/C,KAAK,cAAc;YACjB,oEAAoE;YACpE,iEAAiE;YACjE,sDAAsD;YACtD,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC;QAC7E,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CACb,WAAW,MAAM,CAAC,IAAI,mEAAmE,CAC1F,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;YACrE,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,QAAQ,GAAG,MAAM,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,QAAQ,GAAG,MAAM,CAAC,OAAO,GAAG,CAAC;QACzF,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CACb,WAAW,MAAM,CAAC,IAAI,gEAAgE,CACvF,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;YACrE,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,QAAQ,GAAG,MAAM,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,QAAQ,GAAG,MAAM,CAAC,OAAO,GAAG,CAAC;QACzF,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,aAAqF;IAErF,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CACR,mCAAmC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAC9F,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACnD,IAAI,GAAG,EAAE,CAAC;QACR,KAAK,CAAC,IAAI,CAAC,oDAAoD,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC;SACL,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAAc;IACrD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACpD,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1D,MAAM,MAAM,GAA4B,EAAE,CAAC;YAC3C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;gBAAE,MAAM,CAAC,CAAC,CAAC,GAAI,GAA+B,CAAC,CAAC,CAAC,CAAC;YACzF,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IACrF,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC1F,CAAC;AAOD;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAoC,EACpC,kBAA2B;IAE3B,MAAM,QAAQ,GAAwB,EAAE,CAAC;IACzC,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAChC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,IAAI,CAAC,CAAC,WAAW,KAAK,QAAQ,CACnE,CAAC;IACF,IAAI,aAAa,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACzC,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,2BAA2B;YACjC,OAAO,EACL,mIAAmI;SACtI,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,IAAI,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YAChF,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,WAAW,CAAC,CAAC,IAAI,wBAAwB,CAAC,CAAC,WAAW,oBAAoB;aACpF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,oEAAoE;IACpE,sEAAsE;IACtE,+BAA+B;IAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,WAAW,KAAK,cAAc,CAAC,CAAC;IAC/F,IAAI,GAAG,IAAI,GAAG,CAAC,WAAW,KAAK,MAAM,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnE,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,2BAA2B;YACjC,OAAO,EAAE,mBAAmB,GAAG,CAAC,IAAI,uBAAuB,cAAc;iBACtE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;iBAClB,IAAI,CACH,IAAI,CACL,oFAAoF;SACxF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}
+{"version":3,"file":"i18n.js","sourceRoot":"","sources":["../src/i18n.ts"],"names":[],"mappings":"AAAA,mCAAmC;AAEnC;;;;;;;;;;GAUG;AAEH,MAAM,YAAY,GAAG,IAAI,WAAW,EAAE,CAAC;AAEvC;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,CAAS;IACnC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC;IACnB,OAAO,KAAK,GAAG,GAAG,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,SAAS;QAAE,KAAK,IAAI,CAAC,CAAC;IACvE,OAAO,GAAG,GAAG,KAAK,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,SAAS;QAAE,GAAG,IAAI,CAAC,CAAC;IACvE,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,CAAS;IAC3C,IAAI,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC;IACnB,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,SAAS;QAAE,GAAG,IAAI,CAAC,CAAC;IACnE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACzB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC5B,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,OAAO,CAAC;AACnD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAc,EACd,IAAY,EACZ,gBAA2C;IAE3C,OAAO,CAAC,gBAAgB,IAAI,IAAI,IAAI,MAAM,KAAK,gBAAgB,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;AACvF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAAc;IACrD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACpD,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1D,MAAM,MAAM,GAA4B,EAAE,CAAC;YAC3C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;gBAAE,MAAM,CAAC,CAAC,CAAC,GAAI,GAA+B,CAAC,CAAC,CAAC,CAAC;YACzF,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IACrF,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC1F,CAAC"}

package/dist/index.d.ts

@@ -1,20 +1,47 @@
 export declare const PROJECT_NAME = "caelo-cms";
 export * from "./ai-tools.js";
 export * from "./auth-forms.js";
+export * from "./base-css.js";
+export * from "./build-page.js";
 export * from "./cap-failures.js";
 export * from "./content.js";
 export * from "./context.js";
+export * from "./css-gradient-scan.js";
+export * from "./css-var-scan.js";
+export * from "./design-draft-shell.js";
+export * from "./design-manifest.js";
+export * from "./fonts.js";
+export * from "./genesis.js";
+export * from "./genesis-inventory.js";
 export * from "./i18n.js";
+export * from "./interactions.js";
 export { type LogContext, type Logger, type LoggerOptions, type LogLevel, makeLogger, mintRequestId, redact, type ServiceName, type StructuredLogEntry, } from "./logger.js";
 export * from "./media.js";
+export * from "./page-log.js";
 export * from "./preview-compose.js";
 export * from "./preview-scanner.js";
+export * from "./proposal-status.js";
+export * from "./responsive-images.js";
 export * from "./result.js";
+export * from "./safe-keys.js";
 export * from "./seo.js";
 export * from "./skills.js";
 export * from "./snapshots.js";
+export * from "./strip-cdata.js";
 export * from "./structured-sets.js";
 export * from "./subagents.js";
-export * from "./translation.js";
+export * from "./template-engine.js";
+export * from "./theme-importers/auto-detect.js";
+export * from "./theme-importers/dtcg.js";
+export * from "./theme-importers/loose.js";
+export * from "./theme-importers/shadcn.js";
+export * from "./theme-importers/style-dictionary.js";
+export * from "./theme-importers/tailwind.js";
+export * from "./theme-literal-binding.js";
+export * from "./theme-normalize.js";
+export * from "./theme-ramp.js";
+export * from "./theme-render.js";
+export * from "./themes.js";
+export * from "./themes-errors.js";
 export { CAELO_VERSION, CALEO_VERSION, type CaeloVersion, parseVersion } from "./version.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,YAAY,cAAc,CAAC;AAExC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,OAAO,EACL,KAAK,UAAU,EACf,KAAK,MAAM,EACX,KAAK,aAAa,EAClB,KAAK,QAAQ,EACb,UAAU,EACV,aAAa,EACb,MAAM,EACN,KAAK,WAAW,EAChB,KAAK,kBAAkB,GACxB,MAAM,aAAa,CAAC;AACrB,cAAc,YAAY,CAAC;AAC3B,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,aAAa,CAAC;AAC5B,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,sBAAsB,CAAC;AACrC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,KAAK,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,YAAY,cAAc,CAAC;AAExC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,wBAAwB,CAAC;AACvC,cAAc,WAAW,CAAC;AAC1B,cAAc,mBAAmB,CAAC;AAClC,OAAO,EACL,KAAK,UAAU,EACf,KAAK,MAAM,EACX,KAAK,aAAa,EAClB,KAAK,QAAQ,EACb,UAAU,EACV,aAAa,EACb,MAAM,EACN,KAAK,WAAW,EAChB,KAAK,kBAAkB,GACxB,MAAM,aAAa,CAAC;AACrB,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,sBAAsB,CAAC;AACrC,cAAc,kCAAkC,CAAC;AACjD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,uCAAuC,CAAC;AACtD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,oBAAoB,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,KAAK,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC"}

package/dist/index.js

@@ -2,20 +2,47 @@
 export const PROJECT_NAME = "caelo-cms";
 export * from "./ai-tools.js";
 export * from "./auth-forms.js";
+export * from "./base-css.js";
+export * from "./build-page.js";
 export * from "./cap-failures.js";
 export * from "./content.js";
 export * from "./context.js";
+export * from "./css-gradient-scan.js";
+export * from "./css-var-scan.js";
+export * from "./design-draft-shell.js";
+export * from "./design-manifest.js";
+export * from "./fonts.js";
+export * from "./genesis.js";
+export * from "./genesis-inventory.js";
 export * from "./i18n.js";
+export * from "./interactions.js";
 export { makeLogger, mintRequestId, redact, } from "./logger.js";
 export * from "./media.js";
+export * from "./page-log.js";
 export * from "./preview-compose.js";
 export * from "./preview-scanner.js";
+export * from "./proposal-status.js";
+export * from "./responsive-images.js";
 export * from "./result.js";
+export * from "./safe-keys.js";
 export * from "./seo.js";
 export * from "./skills.js";
 export * from "./snapshots.js";
+export * from "./strip-cdata.js";
 export * from "./structured-sets.js";
 export * from "./subagents.js";
-export * from "./translation.js";
+export * from "./template-engine.js";
+export * from "./theme-importers/auto-detect.js";
+export * from "./theme-importers/dtcg.js";
+export * from "./theme-importers/loose.js";
+export * from "./theme-importers/shadcn.js";
+export * from "./theme-importers/style-dictionary.js";
+export * from "./theme-importers/tailwind.js";
+export * from "./theme-literal-binding.js";
+export * from "./theme-normalize.js";
+export * from "./theme-ramp.js";
+export * from "./theme-render.js";
+export * from "./themes.js";
+export * from "./themes-errors.js";
 export { CAELO_VERSION, CALEO_VERSION, parseVersion } from "./version.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,mCAAmC;AAEnC,MAAM,CAAC,MAAM,YAAY,GAAG,WAAW,CAAC;AAExC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,OAAO,EAKL,UAAU,EACV,aAAa,EACb,MAAM,GAGP,MAAM,aAAa,CAAC;AACrB,cAAc,YAAY,CAAC;AAC3B,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,aAAa,CAAC;AAC5B,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,sBAAsB,CAAC;AACrC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,aAAa,EAAqB,YAAY,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,mCAAmC;AAEnC,MAAM,CAAC,MAAM,YAAY,GAAG,WAAW,CAAC;AAExC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,wBAAwB,CAAC;AACvC,cAAc,WAAW,CAAC;AAC1B,cAAc,mBAAmB,CAAC;AAClC,OAAO,EAKL,UAAU,EACV,aAAa,EACb,MAAM,GAGP,MAAM,aAAa,CAAC;AACrB,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,sBAAsB,CAAC;AACrC,cAAc,kCAAkC,CAAC;AACjD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,uCAAuC,CAAC;AACtD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,oBAAoB,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,aAAa,EAAqB,YAAY,EAAE,MAAM,cAAc,CAAC"}

package/dist/interactions.d.ts

@@ -0,0 +1,23 @@
+/**
+ * issue #160 — the vetted interaction baseline (epic #149).
+ *
+ * A header without a working mobile menu reads as broken, not minimal
+ * — and hand-rolled per-module JS gets focus/aria handling wrong more
+ * often than right. This module carries the FUNCTIONAL (non-aesthetic)
+ * CSS + JS for the built-in nav renderer: hamburger toggle under the
+ * mobile breakpoint, `aria-expanded` bookkeeping, escape-to-close.
+ * All colors/spacing stay the module/theme's business — these rules
+ * only govern show/hide behaviour, so they don't violate the
+ * no-global-look re-scope (#151).
+ *
+ * The composer includes each asset ONCE per page when at least one
+ * nav-menu module rendered (natural dedup, same rule as #158).
+ */
+/** Functional-only rules: collapse/expand mechanics, zero aesthetics. */
+export declare const NAV_FUNCTIONAL_CSS: string;
+/**
+ * Toggle behaviour. Runs deferred; idempotent per element via the
+ * data attribute; closes on Escape and returns focus to the toggle.
+ */
+export declare const NAV_TOGGLE_JS: string;
+//# sourceMappingURL=interactions.d.ts.map

package/dist/interactions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interactions.d.ts","sourceRoot":"","sources":["../src/interactions.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;GAcG;AAEH,yEAAyE;AACzE,eAAO,MAAM,kBAAkB,QAO1B,CAAC;AAEN;;;GAGG;AACH,eAAO,MAAM,aAAa,QAejB,CAAC"}