@caelo-cms/shared 0.10.24 → 0.10.26

package/dist/url.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Slug/URL primitives shared between the static generator, the preview
+ * op, and the admin UI (epic #380 #384 — successor of the deleted
+ * i18n.ts). URL shape beyond base + slug becomes a plugin contribution
+ * on the URL composition point (#390).
+ *
+ *   isHomeSlug / isDesignatedHomePage — the home-decision predicate.
+ *   trimSlashes / trimTrailingSlashes — linear-scan slug hygiene.
+ */
+/**
+ * Strip leading and trailing `/` characters with a single linear scan.
+ *
+ * Replaces the regex `/^\/+|\/+$/g`, whose trailing-slash branch
+ * backtracks O(n²) on a long run of slashes that is not at end-of-string
+ * (CodeQL js/polynomial-redos). This char-index walk is unconditionally
+ * linear and produces byte-identical output for every input.
+ */
+export declare function trimSlashes(s: string): string;
+/**
+ * Strip only trailing `/` characters with a single linear scan — the
+ * non-backtracking replacement for `/\/+$/` (same ReDoS class as above).
+ * Used for base URLs, which carry a scheme and must keep their leading
+ * characters.
+ */
+export declare function trimTrailingSlashes(s: string): string;
+/**
+ * The "magic slug" sentinel test: a page whose slug is empty, `home`,
+ * or `index` is the site root by convention even without an explicit
+ * `site_defaults.home_page_id` designation. Leading/trailing slashes
+ * are ignored so `/home/` reads the same as `home`.
+ */
+export declare function isHomeSlug(slug: string): boolean;
+/**
+ * The single home-decision predicate every URL/output-path site must
+ * use so canonical, redirects, and the emitted file agree (0184
+ * explicit-homepage feature). A page is the site root when it IS the
+ * designated `site_defaults.home_page_id` OR carries a magic slug.
+ *
+ * @param pageId              The page being resolved.
+ * @param slug                That page's slug.
+ * @param designatedHomePageId  `site_defaults.home_page_id`
+ *                              (null/undefined when none designated).
+ */
+export declare function isDesignatedHomePage(pageId: string, slug: string, designatedHomePageId: string | null | undefined): boolean;
+//# sourceMappingURL=url.d.ts.map

package/dist/url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.d.ts","sourceRoot":"","sources":["../src/url.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AAEH;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAM7C;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAIrD;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAGhD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,oBAAoB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC9C,OAAO,CAET"}

package/dist/url.js

@@ -0,0 +1,64 @@
+// SPDX-License-Identifier: MPL-2.0
+/**
+ * Slug/URL primitives shared between the static generator, the preview
+ * op, and the admin UI (epic #380 #384 — successor of the deleted
+ * i18n.ts). URL shape beyond base + slug becomes a plugin contribution
+ * on the URL composition point (#390).
+ *
+ *   isHomeSlug / isDesignatedHomePage — the home-decision predicate.
+ *   trimSlashes / trimTrailingSlashes — linear-scan slug hygiene.
+ */
+/**
+ * Strip leading and trailing `/` characters with a single linear scan.
+ *
+ * Replaces the regex `/^\/+|\/+$/g`, whose trailing-slash branch
+ * backtracks O(n²) on a long run of slashes that is not at end-of-string
+ * (CodeQL js/polynomial-redos). This char-index walk is unconditionally
+ * linear and produces byte-identical output for every input.
+ */
+export function trimSlashes(s) {
+    let start = 0;
+    let end = s.length;
+    while (start < end && s.charCodeAt(start) === 47 /* '/' */)
+        start += 1;
+    while (end > start && s.charCodeAt(end - 1) === 47 /* '/' */)
+        end -= 1;
+    return s.slice(start, end);
+}
+/**
+ * Strip only trailing `/` characters with a single linear scan — the
+ * non-backtracking replacement for `/\/+$/` (same ReDoS class as above).
+ * Used for base URLs, which carry a scheme and must keep their leading
+ * characters.
+ */
+export function trimTrailingSlashes(s) {
+    let end = s.length;
+    while (end > 0 && s.charCodeAt(end - 1) === 47 /* '/' */)
+        end -= 1;
+    return s.slice(0, end);
+}
+/**
+ * The "magic slug" sentinel test: a page whose slug is empty, `home`,
+ * or `index` is the site root by convention even without an explicit
+ * `site_defaults.home_page_id` designation. Leading/trailing slashes
+ * are ignored so `/home/` reads the same as `home`.
+ */
+export function isHomeSlug(slug) {
+    const s = trimSlashes(slug);
+    return s === "" || s === "home" || s === "index";
+}
+/**
+ * The single home-decision predicate every URL/output-path site must
+ * use so canonical, redirects, and the emitted file agree (0184
+ * explicit-homepage feature). A page is the site root when it IS the
+ * designated `site_defaults.home_page_id` OR carries a magic slug.
+ *
+ * @param pageId              The page being resolved.
+ * @param slug                That page's slug.
+ * @param designatedHomePageId  `site_defaults.home_page_id`
+ *                              (null/undefined when none designated).
+ */
+export function isDesignatedHomePage(pageId, slug, designatedHomePageId) {
+    return (designatedHomePageId != null && pageId === designatedHomePageId) || isHomeSlug(slug);
+}
+//# sourceMappingURL=url.js.map

package/dist/url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.js","sourceRoot":"","sources":["../src/url.ts"],"names":[],"mappings":"AAAA,mCAAmC;AAEnC;;;;;;;;GAQG;AAEH;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,CAAS;IACnC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC;IACnB,OAAO,KAAK,GAAG,GAAG,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,SAAS;QAAE,KAAK,IAAI,CAAC,CAAC;IACvE,OAAO,GAAG,GAAG,KAAK,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,SAAS;QAAE,GAAG,IAAI,CAAC,CAAC;IACvE,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,CAAS;IAC3C,IAAI,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC;IACnB,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,SAAS;QAAE,GAAG,IAAI,CAAC,CAAC;IACnE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACzB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC5B,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,OAAO,CAAC;AACnD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAc,EACd,IAAY,EACZ,oBAA+C;IAE/C,OAAO,CAAC,oBAAoB,IAAI,IAAI,IAAI,MAAM,KAAK,oBAAoB,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;AAC/F,CAAC"}

package/dist/version.d.ts

@@ -19,7 +19,7 @@
  * Format: SemVer 2.0.0. Pre-1.0 minor bumps are breaking; post-1.0
  * follow standard SemVer.
  */
-export declare const CAELO_VERSION = "0.10.24";
+export declare const CAELO_VERSION = "0.10.26";
 /**
  * Deprecated alias for back-compat — early P17 work spelled this
  * `CALEO_VERSION` (typo of "Caelo"). New code should import
@@ -31,7 +31,7 @@ export declare const CAELO_VERSION = "0.10.24";
  *
  * @deprecated use CAELO_VERSION
  */
-export declare const CALEO_VERSION = "0.10.24";
+export declare const CALEO_VERSION = "0.10.26";
 /**
  * Parsed shape — major/minor/patch + optional pre-release tag.
  * Stable interface for callers that need to feature-gate (rare —

package/dist/version.js

@@ -20,7 +20,7 @@
  * Format: SemVer 2.0.0. Pre-1.0 minor bumps are breaking; post-1.0
  * follow standard SemVer.
  */
-export const CAELO_VERSION = "0.10.24";
+export const CAELO_VERSION = "0.10.26";
 /**
  * Deprecated alias for back-compat — early P17 work spelled this
  * `CALEO_VERSION` (typo of "Caelo"). New code should import

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@caelo-cms/shared",
-  "version": "0.10.24",
+  "version": "0.10.26",
   "private": false,
   "license": "MPL-2.0",
   "description": "Shared Zod schemas + types + the two-pass HTML composer used by every Caelo CMS workspace package. Stable enough for plugin authors and embedders to depend on directly.",

package/src/__tests__/redos-hardening.test.ts

@@ -12,9 +12,9 @@
 
 import { describe, expect, it } from "bun:test";
 import { fontFamilySlug, parseFontsCss } from "../fonts.js";
-import { trimSlashes, trimTrailingSlashes } from "../i18n.js";
 import { renderTemplate } from "../template-engine.js";
 import { stripCssComments } from "../theme-importers/css-comments.js";
+import { trimSlashes, trimTrailingSlashes } from "../url.js";
 
 // 250ms, not 100: under CI coverage instrumentation on a loaded runner
 // the LINEAR 100k-char scans measured up to ~113ms (PR #170 flake). A

package/src/ai-tools.ts

@@ -24,6 +24,7 @@ import {
   setPlacementContentSchema,
   slugSchema,
 } from "./content.js";
+import { pluginPreviewSelectionSchema } from "./plugin-preview.js";
 
 /**
  * v0.6.2 — `position` argument shared across the three `add_module_to_*`
@@ -416,6 +417,7 @@ export const chatSendMessageInput = z
     // operator content — it re-runs the paused gated turn. A refine below
     // requires exactly one of content / resumeApproval.
     content: z.string().min(1).max(8000).optional(),
+    previewSelection: pluginPreviewSelectionSchema.optional(),
     /** Element-reference chips appended to the message. */
     chips: z
       .array(
@@ -505,6 +507,8 @@ export const chatPublishInput = z
               // surface so chat-branched theme edits replay into live
               // on chat.publish.
               "theme",
+              // A plugin private-storage row written on the branch.
+              "pluginRow",
             ]),
             entityId: z.string().uuid(),
           })
@@ -683,7 +687,6 @@ export const duplicatePageToolInput = z
     newName: z.string().min(1).max(256).optional(),
     newTitle: z.string().min(1).max(256).optional(),
     targetTemplateId: z.string().uuid().optional(),
-    locale: z.string().min(2).max(10).optional(),
   })
   .strict();
 
@@ -731,11 +734,11 @@ export const reorderModuleToolInput = z
 
 /**
  * P7 — `find_media`. Searches the media library by alt-text /
- * filename / mime. Returns up to `limit` matches with the WebP-800
- * URL pre-resolved (or `orig` for non-image kinds). The system prompt
- * already lists recent + frequently-used media; this tool covers the
- * "search for an image of a sunlit office" case where the asset isn't
- * in the recent slice.
+ * filename / mime. Each row carries the media UUID (what
+ * `set_theme_asset` / `set_media_alt` require) plus a pre-resolved
+ * variant URL. The AI's only media-inventory surface — the `## Media`
+ * system-prompt block was removed by the context diet (#300), so every
+ * asset lookup ("an image of a sunlit office") goes through this tool.
  */
 export const findMediaToolInput = z
   .object({
@@ -790,16 +793,11 @@ export const setMediaAltToolInput = z
 export type SetMediaAltToolInput = z.infer<typeof setMediaAltToolInput>;
 
 /**
- * 0184 — `set_home_page`. AI designates a page as the site homepage (per
- * locale, the locale root). Records `locales.home_page_id`; the page keeps
- * its own slug but resolves to `/`.
+ * 0184 — `set_home_page`. AI designates a page as the site homepage.
+ * Records `site_defaults.home_page_id`; the page keeps its own slug but
+ * resolves to `/`.
  */
-export const setHomePageToolInput = z
-  .object({
-    pageId: z.string().uuid(),
-    locale: z.string().min(2).max(10).optional(),
-  })
-  .strict();
+export const setHomePageToolInput = z.object({ pageId: z.string().uuid() }).strict();
 export type SetHomePageToolInput = z.infer<typeof setHomePageToolInput>;
 
 /**

package/src/build-page.ts

@@ -22,7 +22,6 @@
 import { z } from "zod";
 import {
   contentInstanceCreateSchema,
-  localeSchema,
   MODULE_CSS_MAX,
   MODULE_HTML_MAX,
   MODULE_JS_MAX,
@@ -194,7 +193,6 @@ export const buildPageTargetSchema = z
     slug: slugSchema.optional(),
     title: z.string().min(1).max(256).optional(),
     name: z.string().min(1).max(256).optional(),
-    locale: localeSchema.optional(),
     templateId: z.string().uuid().optional(),
     status: pageStatusSchema.optional(),
     /**
@@ -210,9 +208,9 @@ export const buildPageTargetSchema = z
   })
   .strict()
   .superRefine((page, ctx) => {
-    const createKeys = (
-      ["slug", "title", "name", "locale", "templateId", "status"] as const
-    ).filter((k) => page[k] !== undefined);
+    const createKeys = (["slug", "title", "name", "templateId", "status"] as const).filter(
+      (k) => page[k] !== undefined,
+    );
     if (page.pageId !== undefined) {
       if (createKeys.length > 0) {
         ctx.addIssue({

package/src/content.test.ts

@@ -2,9 +2,9 @@
 
 import { describe, expect, it } from "bun:test";
 import {
-  localeSchema,
   MODULE_HTML_MAX,
   moduleCreateSchema,
+  moduleUpdateSchema,
   pageCreateSchema,
   pageSetModulesSchema,
   pageUpdateSchema,
@@ -29,21 +29,6 @@ describe("slugSchema", () => {
   });
 });
 
-describe("localeSchema", () => {
-  it("accepts language and language-region", () => {
-    expect(localeSchema.safeParse("en").success).toBe(true);
-    expect(localeSchema.safeParse("de").success).toBe(true);
-    expect(localeSchema.safeParse("de-AT").success).toBe(true);
-  });
-
-  it("rejects malformed locales", () => {
-    expect(localeSchema.safeParse("EN").success).toBe(false);
-    expect(localeSchema.safeParse("en-us").success).toBe(false);
-    expect(localeSchema.safeParse("eng").success).toBe(false);
-    expect(localeSchema.safeParse("").success).toBe(false);
-  });
-});
-
 describe("moduleCreateSchema", () => {
   it("accepts a minimal module", () => {
     const r = moduleCreateSchema.safeParse({
@@ -73,6 +58,104 @@ describe("moduleCreateSchema", () => {
     });
     expect(r.success).toBe(false);
   });
+
+  // issue #432 — CDATA wrappers stored verbatim broke rendering and sent the
+  // AI into a ~20-loop visual repair spiral; the write boundary now rejects
+  // them with an actionable message.
+  it("rejects XML CDATA wrappers in css and js, with an actionable message", () => {
+    const base = { slug: "site-header", displayName: "Site header", html: "<header></header>" };
+    const css = moduleCreateSchema.safeParse({
+      ...base,
+      css: "/*<![CDATA[*/ .x { color: red } /*]]>*/",
+    });
+    expect(css.success).toBe(false);
+    if (!css.success) {
+      expect(css.error.issues.map((i) => i.message).join(" ")).toContain("CDATA");
+    }
+    const js = moduleCreateSchema.safeParse({
+      ...base,
+      js: "//<![CDATA[\nconsole.log('hi');\n//]]>",
+    });
+    expect(js.success).toBe(false);
+  });
+
+  it("accepts plain css/js (and js merely mentioning ']]>' in a string)", () => {
+    const base = { slug: "site-header", displayName: "Site header", html: "<header></header>" };
+    expect(
+      moduleCreateSchema.safeParse({ ...base, css: ".x { color: red }", js: "console.log(1);" })
+        .success,
+    ).toBe(true);
+    // Only the OPENING marker is the corruption signature; a bare "]]>"
+    // inside a string literal is legitimate (e.g. code emitting XML).
+    expect(moduleCreateSchema.safeParse({ ...base, js: 'xml += "]]>";' }).success).toBe(true);
+  });
+
+  it("rejects CDATA on the update path too (edit_module / edit_content funnel)", () => {
+    const r = moduleUpdateSchema.safeParse({
+      moduleId: "8c2f2f2a-0000-4000-8000-000000000432",
+      css: "/*<![CDATA[*/ .x{} /*]]>*/",
+    });
+    expect(r.success).toBe(false);
+  });
+});
+
+// CLAUDE.md §1A / issue #417 — repeating content is a list field, never
+// numbered scalars. Threshold is 3: a pair (col1/col2) is a legitimate
+// layout split; three-or-more numbered siblings is a list.
+describe("moduleFields numbered-scalar fanout guard (§1A)", () => {
+  const mod = (fields: unknown) =>
+    moduleCreateSchema.safeParse({
+      slug: "cards",
+      displayName: "Cards",
+      html: "<div></div>",
+      fields,
+    });
+  const text = (name: string) => ({ name, kind: "text", label: name });
+
+  it("rejects a bare base + numbered siblings (label, label2, label3)", () => {
+    const r = mod([text("label"), text("label2"), text("label3")]);
+    expect(r.success).toBe(false);
+    if (!r.success) {
+      const msg = r.error.issues[0]?.message ?? "";
+      expect(msg).toContain("numbered-scalar fanout");
+      expect(msg).toContain('"label", "label2", "label3"');
+      // AI-actionable: the error names every list-kind fix.
+      expect(msg).toContain("text-list");
+      expect(msg).toContain("link-list");
+      expect(msg).toContain("module-list");
+      expect(msg).toContain("§1A");
+    }
+  });
+
+  it("rejects underscore-separated runs (quote_1..quote_3) and mixed separators", () => {
+    expect(mod([text("quote_1"), text("quote_2"), text("quote_3")]).success).toBe(false);
+    expect(mod([text("logo1"), text("logo_2"), text("logo_3")]).success).toBe(false);
+  });
+
+  it("rejects fanout on moduleUpdateSchema too (same shared fields array)", () => {
+    const r = moduleUpdateSchema.safeParse({
+      moduleId: "6f9619ff-8b86-4d01-b42d-00cf4fc964ff",
+      fields: [text("card1"), text("card2"), text("card3")],
+    });
+    expect(r.success).toBe(false);
+  });
+
+  it("allows a two-field split (col1/col2) — threshold is 3", () => {
+    expect(mod([text("col1"), text("col2")]).success).toBe(true);
+    expect(mod([text("label"), text("label2")]).success).toBe(true);
+    expect(mod([text("address_line1"), text("address_line2")]).success).toBe(true);
+  });
+
+  it("allows unrelated numbered fields that never form a run of 3", () => {
+    expect(mod([text("hero_title"), text("cta_2024"), text("step_1")]).success).toBe(true);
+    // Same suffix, different bases — no shared run.
+    expect(mod([text("left_col1"), text("right_col1"), text("mid_col1")]).success).toBe(true);
+  });
+
+  it("scopes to scalar kinds — numbered list fields are a modelling question, not fanout", () => {
+    const linkList = (name: string) => ({ name, kind: "link-list", label: name });
+    expect(mod([linkList("links1"), linkList("links2"), linkList("links3")]).success).toBe(true);
+  });
 });
 
 describe("pageCreateSchema (no raw HTML invariant)", () => {
@@ -84,7 +167,6 @@ describe("pageCreateSchema (no raw HTML invariant)", () => {
     });
     expect(r.success).toBe(true);
     if (!r.success) return;
-    expect(r.data.locale).toBe("en");
     // status is intentionally OPTIONAL (no schema default): pages.create
     // resolves it at write time — published on a bootstrap site, else draft.
     // Omitting it here leaves it undefined for the handler to resolve.

package/src/content.ts

@@ -84,11 +84,6 @@ export function slugifyModuleSection(
   return `${deriveModuleType(displayName)}-${idx}-${suffix}`;
 }
 
-/** BCP-47 shape: 2-letter language with optional 2-letter region. P9 widens this. */
-export const localeSchema = z
-  .string()
-  .regex(/^[a-z]{2}(-[A-Z]{2})?$/, "locale must be 'xx' or 'xx-YY' (BCP-47 shape)");
-
 const displayNameSchema = z.string().min(1).max(128);
 
 /** Caps are arbitrary but cheap — paste-of-binary mistakes get caught. */
@@ -99,8 +94,39 @@ export const TEMPLATE_HTML_MAX = 512 * 1024;
 export const TEMPLATE_CSS_MAX = 128 * 1024;
 
 const moduleHtml = z.string().max(MODULE_HTML_MAX, `html exceeds ${MODULE_HTML_MAX} bytes`);
-const moduleCss = z.string().max(MODULE_CSS_MAX, `css exceeds ${MODULE_CSS_MAX} bytes`);
-const moduleJs = z.string().max(MODULE_JS_MAX, `js exceeds ${MODULE_JS_MAX} bytes`);
+
+/**
+ * issue #432 root-cause guard — reject XML CDATA wrappers in module css/js.
+ *
+ * Module css/js is stored and served VERBATIM, so a `<![CDATA[ … ]]>`
+ * wrapper (an XHTML-era idiom the AI occasionally reaches for when
+ * "protecting" inline code) reaches the browser unparsed: the stylesheet
+ * fails to apply and the script throws `SyntaxError: Unexpected token '<'`.
+ * On e2e runs 31000584991 / 31000699422 (2026-08-05) exactly this landed
+ * silently, the page rendered broken, and the model burned ~15–20 extra
+ * loops (~+1.2M input tokens) discovering and repairing it via
+ * screenshot/inspect/edit cycles. Rejecting at the write boundary with an
+ * actionable message turns that repair spiral into a single corrected call
+ * (CLAUDE.md §11 — failure surfaces are AI-actionable; §2 — fail loudly).
+ *
+ * css/js only: CDATA is never valid CSS or JS, while an html body may
+ * legitimately carry CDATA inside inline `<svg>`/`<math>` foreign content.
+ */
+const CDATA_OPEN = "<![CDATA[";
+const noCdata = (value: string): boolean => !value.includes(CDATA_OPEN);
+const cdataMessage = (field: "css" | "js"): string =>
+  `${field} contains an XML CDATA marker (${CDATA_OPEN}) — module ${field} is stored and served ` +
+  `verbatim, so CDATA wrappers reach the browser unparsed and break rendering. ` +
+  `Remove the wrapper and resend plain ${field === "css" ? "CSS" : "JavaScript"}.`;
+
+const moduleCss = z
+  .string()
+  .max(MODULE_CSS_MAX, `css exceeds ${MODULE_CSS_MAX} bytes`)
+  .refine(noCdata, cdataMessage("css"));
+const moduleJs = z
+  .string()
+  .max(MODULE_JS_MAX, `js exceeds ${MODULE_JS_MAX} bytes`)
+  .refine(noCdata, cdataMessage("js"));
 
 /**
  * v0.4.0 — module field schema. Each field declares one substitution slot in
@@ -283,6 +309,54 @@ export const moduleRefSchema = z
   .strict();
 export type ModuleRef = z.infer<typeof moduleRefSchema>;
 
+/**
+ * CLAUDE.md §1A — "repeating content is a list field, never numbered
+ * scalars". This guard rejects the mechanically detectable half of that
+ * rule: a RUN of 3+ sibling scalar fields sharing a base name plus a
+ * numeric suffix (`label`, `label2`, `label3` / `quote_1`…`quote_3`).
+ *
+ * Threshold is 3 (issue #417): a two-field split (`col1`/`col2` for a
+ * two-column layout) is routinely a genuine layout role, so a pair stays
+ * legal; three-or-more numbered siblings is repeating content that must
+ * be ONE list field. The bare base name counts as an implicit member of
+ * its run — `label` next to `label2`/`label3` is item 1 in disguise.
+ *
+ * Deliberately out of scope (guidance-only, per the issue): content-
+ * derived names (`quote_justamazing`) and mid-name numbering
+ * (`step1_title`) — neither is detectable without false positives.
+ * Nested/list kinds are excluded too: a numbered run of lists is
+ * already a modelling question, not scalar fanout. The server-side
+ * extractor fallback (`extract-module-structure.ts`) is also
+ * unguarded on purpose: it numbers repeated tags in messy HUMAN-
+ * authored HTML, runs only when the caller declared no fields, and its
+ * output never re-enters this schema — the guard polices the boundary
+ * where the AI (or a human) AUTHORS `fields[]` explicitly.
+ */
+const NUMBERED_SCALAR_FANOUT_THRESHOLD = 3;
+const numberedFieldName = /^([a-z][a-z0-9_]*?)_?\d+$/;
+
+function findNumberedScalarFanoutRuns(
+  fields: readonly { name: string; kind: string }[],
+): string[][] {
+  const scalarKinds = new Set<string>(MODULE_FIELD_PRIMITIVE_KINDS);
+  const scalarNames = fields.filter((f) => scalarKinds.has(f.kind)).map((f) => f.name);
+  const byBase = new Map<string, string[]>();
+  for (const name of scalarNames) {
+    const m = numberedFieldName.exec(name);
+    const base = m?.[1];
+    if (base === undefined) continue;
+    const members = byBase.get(base);
+    if (members) members.push(name);
+    else byBase.set(base, [name]);
+  }
+  const runs: string[][] = [];
+  for (const [base, members] of byBase) {
+    const run = scalarNames.includes(base) ? [base, ...members] : members;
+    if (run.length >= NUMBERED_SCALAR_FANOUT_THRESHOLD) runs.push(run);
+  }
+  return runs;
+}
+
 const moduleFieldsArray = z
   .array(moduleFieldSchema)
   .max(64, "modules may declare at most 64 fields")
@@ -295,6 +369,20 @@ const moduleFieldsArray = z
       }
       seen.add(f.name);
     }
+    for (const run of findNumberedScalarFanoutRuns(arr)) {
+      ctx.addIssue({
+        code: z.ZodIssueCode.custom,
+        message:
+          `numbered-scalar fanout: ${run.map((n) => `"${n}"`).join(", ")} repeat one role as ` +
+          "numbered scalar fields — repeating content is ONE list field, never numbered scalars " +
+          '(CLAUDE.md §1A). Replace the run with a single field: kind "text-list" (list of ' +
+          'strings, inner template iterates {{.}}), "link-list" (list of {label, href}), or ' +
+          '"module-list" (rich per-item structure: mint a card sub-module and reference it per ' +
+          "item — in build_page, author the card detached with `ref` and pass " +
+          '[{"$ref": "<ref>"}, …] as the field value). A two-field split like col1/col2 is fine; ' +
+          `${NUMBERED_SCALAR_FANOUT_THRESHOLD}+ numbered siblings is a list.`,
+      });
+    }
   });
 
 /**
@@ -457,7 +545,6 @@ export const pageStatusSchema = z.enum(["draft", "published"]);
 export const pageCreateSchema = z
   .object({
     slug: slugSchema,
-    locale: localeSchema.default("en"),
     /** P6.7.5 — internal editor label. Defaults to title if omitted. */
     name: z.string().min(1).max(256).optional(),
     title: z.string().min(1).max(256),

package/src/context.ts

@@ -31,6 +31,12 @@ export interface ExecutionContext {
    * fold consecutive AI actions into one entry.
    */
   readonly chatTaskId?: string;
+  /**
+   * For a plugin installed as an external artifact: the digest of the
+   * artifact this call runs. Private storage operations accept the call
+   * only while exactly this artifact is the active, granted one.
+   */
+  readonly pluginArtifactDigest?: string;
   /**
    * P10.5: parent attribution for subagent invocations. When the
    * `spawn_subagent` tool calls runChatTurn for the child, it carries

package/src/font-assets.ts

@@ -0,0 +1,63 @@
+// SPDX-License-Identifier: MPL-2.0
+import { z } from "zod";
+
+export const fontRef = z
+  .object({ id: z.string().uuid(), sha256: z.string().regex(/^[a-f0-9]{64}$/) })
+  .strict();
+export const fontLicense = z
+  .object({
+    name: z.string().min(1).max(200),
+    text: z.string().min(1).max(100_000),
+    webEmbedding: z.boolean(),
+    documentEmbedding: z.boolean(),
+  })
+  .strict();
+export const fontMetadata = fontRef.extend({
+  family: z.string(),
+  subfamily: z.string(),
+  postscriptName: z.string(),
+  cssFamily: z.string(),
+  format: z.enum(["ttf", "otf", "woff", "woff2"]),
+  weight: z.number(),
+  style: z.enum(["normal", "italic"]),
+  axes: z.record(z.string(), z.object({ min: z.number(), max: z.number(), default: z.number() })),
+  sizeBytes: z.number(),
+  glyphCount: z.number(),
+  embedding: z.object({
+    web: z.boolean(),
+    document: z.boolean(),
+    subset: z.boolean(),
+    restriction: z.string().nullable(),
+  }),
+  license: fontLicense,
+  source: z.string(),
+  createdAt: z.string(),
+});
+export type FontRef = z.infer<typeof fontRef>;
+export type FontMetadata = z.infer<typeof fontMetadata>;
+export const fontImportInput = z
+  .object({
+    dataBase64: z.string().min(1).max(11_184_812),
+    license: fontLicense,
+    source: z.string().min(1).max(1000),
+  })
+  .strict();
+export const fontResolveInput = fontRef
+  .extend({
+    use: z.enum(["web", "document"]),
+    text: z.string().max(200_000).default(""),
+    formats: z
+      .array(z.enum(["ttf", "otf", "woff", "woff2"]))
+      .min(1)
+      .max(4),
+  })
+  .strict();
+export const fontReadInput = fontRef
+  .extend({ offset: z.number().int().min(0), length: z.number().int().min(1).max(262144) })
+  .strict();
+export const fontFindInput = z
+  .object({
+    query: z.string().max(200).default(""),
+    limit: z.number().int().min(1).max(100).default(50),
+  })
+  .strict();

package/src/google-models.ts

@@ -0,0 +1,20 @@
+// SPDX-License-Identifier: MPL-2.0
+
+/** Curated against https://ai.google.dev/gemini-api/docs/models on 2026-09-11.
+ * Keep image-only models out of the chat picker: they cannot call tools.
+ * Exact IDs are intentional; automatic latest aliases could change behaviour.
+ */
+export const GOOGLE_CHAT_MODELS = [
+  { id: "gemini-3.8-flash", label: "Gemini 3.8 Flash" },
+  { id: "gemini-3.5-flash-lite", label: "Gemini 3.5 Flash-Lite" },
+  { id: "gemini-3.1-pro-preview", label: "Gemini 3.1 Pro (Preview)" },
+  { id: "gemini-2.5-pro", label: "Gemini 2.5 Pro" },
+  { id: "gemini-2.5-flash", label: "Gemini 2.5 Flash" },
+] as const;
+export const DEFAULT_GOOGLE_CHAT_MODEL = "gemini-3.8-flash";
+export const GOOGLE_IMAGE_MODELS = [
+  { id: "gemini-3.1-flash-image", label: "Nano Banana 2 (Gemini 3.1 Flash Image)" },
+  { id: "gemini-3.1-flash-lite-image", label: "Nano Banana 2 Lite" },
+  { id: "gemini-3-pro-image", label: "Nano Banana Pro (Gemini 3 Pro Image)" },
+  { id: "gemini-2.5-flash-image", label: "Nano Banana (Gemini 2.5 Flash Image)" },
+] as const;