@caelo-cms/shared 0.10.43 → 0.10.44

package/dist/cap-failures.js

@@ -17,7 +17,7 @@
  */
 const LOOKUP_FAIL_THRESHOLD = 3;
 const counters = new Map();
-/** Total fail-closed trips since process start — surfaced in /security/costs. */
+/** Total fail-closed trips since process start — surfaced in /settings/costs. */
 let totalTrips = 0;
 export function recordCapLookupSuccess(key) {
     counters.delete(key);

package/dist/document-language.d.ts

@@ -14,7 +14,7 @@
  *      contribution point (the `international-site` plugin knows each
  *      page's locale — core does not, since epic #380), else
  *   2. the site's stored language (`site_defaults.site_language`, set
- *      by the AI via `set_site_identity` or by the Owner at /security/seo).
+ *      by the AI via `set_site_identity` or by the Owner at /settings/seo).
  * The stored language has no default (migration 0232, CLAUDE.md §2): NULL
  * means nobody chose one yet. Nothing here substitutes a language for it —
  * the preview renders `<html>` without `lang` and flags

package/dist/document-language.js

@@ -15,7 +15,7 @@
  *      contribution point (the `international-site` plugin knows each
  *      page's locale — core does not, since epic #380), else
  *   2. the site's stored language (`site_defaults.site_language`, set
- *      by the AI via `set_site_identity` or by the Owner at /security/seo).
+ *      by the AI via `set_site_identity` or by the Owner at /settings/seo).
  * The stored language has no default (migration 0232, CLAUDE.md §2): NULL
  * means nobody chose one yet. Nothing here substitutes a language for it —
  * the preview renders `<html>` without `lang` and flags

package/dist/preview-compose.js

@@ -453,7 +453,7 @@ export function composePageWithLayout(input) {
     // caller, not silently emit a body-less page.
     if (!listSlotNames(input.layoutHtml).includes("content")) {
         const slug = input.layoutSlug ?? "(unknown)";
-        throw new ComposeError("layout-missing-content", `layout "${slug}" is missing the required \`<caelo-slot name="content">\` slot — fix via /security/layouts`, input.layoutSlug);
+        throw new ComposeError("layout-missing-content", `layout "${slug}" is missing the required \`<caelo-slot name="content">\` slot — fix via /settings/layouts`, input.layoutSlug);
     }
     // CSS / JS aggregation order: layout (ground) → template (overrides
     // layout) → modules (highest specificity). The array's source order

package/dist/subagents.d.ts

@@ -49,7 +49,7 @@ export declare const EXPECTED_RETURN_SHAPES: readonly ExpectedReturnShape[];
  * The tier VOCABULARY is deliberately abstract — tool results and
  * editor-facing text never name the underlying model (CLAUDE.md §2:
  * provider brand never surfaces in the editor chat UI); concrete model
- * ids appear only on Owner surfaces (security panel, cost dashboard).
+ * ids appear only on Owner surfaces (Settings panel, cost dashboard).
  */
 export declare const subagentModelTier: z.ZodEnum<{
     small: "small";

package/dist/subagents.js

@@ -44,7 +44,7 @@ export const EXPECTED_RETURN_SHAPES = expectedReturnShape.options;
  * The tier VOCABULARY is deliberately abstract — tool results and
  * editor-facing text never name the underlying model (CLAUDE.md §2:
  * provider brand never surfaces in the editor chat UI); concrete model
- * ids appear only on Owner surfaces (security panel, cost dashboard).
+ * ids appear only on Owner surfaces (Settings panel, cost dashboard).
  */
 export const subagentModelTier = z.enum(["inherit", "mid", "small"]);
 /** Single source of truth for the tier enum (same #251 drift-guard pattern

package/dist/version.d.ts

@@ -9,7 +9,7 @@
  *   5. Pushes — GitHub Actions takes over for the publish step.
  *
  * Read by:
- *   - admin's /security index page (header badge + about-modal),
+ *   - admin's /settings index page (header badge + about-modal),
  *   - cms-provision CLI's `version` subcommand,
  *   - User-Agent header on plugin-host's outbound HTTP calls,
  *   - Tier-1 manifest signing (the version is hashed into the
@@ -19,7 +19,7 @@
  * Format: SemVer 2.0.0. Pre-1.0 minor bumps are breaking; post-1.0
  * follow standard SemVer.
  */
-export declare const CAELO_VERSION = "0.10.43";
+export declare const CAELO_VERSION = "0.10.44";
 /**
  * Deprecated alias for back-compat — early P17 work spelled this
  * `CALEO_VERSION` (typo of "Caelo"). New code should import
@@ -31,7 +31,7 @@ export declare const CAELO_VERSION = "0.10.43";
  *
  * @deprecated use CAELO_VERSION
  */
-export declare const CALEO_VERSION = "0.10.43";
+export declare const CALEO_VERSION = "0.10.44";
 /**
  * Parsed shape — major/minor/patch + optional pre-release tag.
  * Stable interface for callers that need to feature-gate (rare —

package/dist/version.js

@@ -10,7 +10,7 @@
  *   5. Pushes — GitHub Actions takes over for the publish step.
  *
  * Read by:
- *   - admin's /security index page (header badge + about-modal),
+ *   - admin's /settings index page (header badge + about-modal),
  *   - cms-provision CLI's `version` subcommand,
  *   - User-Agent header on plugin-host's outbound HTTP calls,
  *   - Tier-1 manifest signing (the version is hashed into the
@@ -20,7 +20,7 @@
  * Format: SemVer 2.0.0. Pre-1.0 minor bumps are breaking; post-1.0
  * follow standard SemVer.
  */
-export const CAELO_VERSION = "0.10.43";
+export const CAELO_VERSION = "0.10.44";
 /**
  * Deprecated alias for back-compat — early P17 work spelled this
  * `CALEO_VERSION` (typo of "Caelo"). New code should import

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@caelo-cms/shared",
-  "version": "0.10.43",
+  "version": "0.10.44",
   "private": false,
   "license": "MPL-2.0",
   "description": "Shared Zod schemas + types + the two-pass HTML composer used by every Caelo CMS workspace package. Stable enough for plugin authors and embedders to depend on directly.",

package/src/cap-failures.ts

@@ -20,7 +20,7 @@
 const LOOKUP_FAIL_THRESHOLD = 3;
 const counters = new Map<string, number>();
 
-/** Total fail-closed trips since process start — surfaced in /security/costs. */
+/** Total fail-closed trips since process start — surfaced in /settings/costs. */
 let totalTrips = 0;
 
 export function recordCapLookupSuccess(key: string): void {

package/src/document-language.ts

@@ -16,7 +16,7 @@
  *      contribution point (the `international-site` plugin knows each
  *      page's locale — core does not, since epic #380), else
  *   2. the site's stored language (`site_defaults.site_language`, set
- *      by the AI via `set_site_identity` or by the Owner at /security/seo).
+ *      by the AI via `set_site_identity` or by the Owner at /settings/seo).
  * The stored language has no default (migration 0232, CLAUDE.md §2): NULL
  * means nobody chose one yet. Nothing here substitutes a language for it —
  * the preview renders `<html>` without `lang` and flags

package/src/preview-compose.ts

@@ -733,7 +733,7 @@ export function composePageWithLayout(input: ComposeWithLayoutInput): ComposeOut
     const slug = input.layoutSlug ?? "(unknown)";
     throw new ComposeError(
       "layout-missing-content",
-      `layout "${slug}" is missing the required \`<caelo-slot name="content">\` slot — fix via /security/layouts`,
+      `layout "${slug}" is missing the required \`<caelo-slot name="content">\` slot — fix via /settings/layouts`,
       input.layoutSlug,
     );
   }

package/src/subagents.ts

@@ -50,7 +50,7 @@ export const EXPECTED_RETURN_SHAPES: readonly ExpectedReturnShape[] = expectedRe
  * The tier VOCABULARY is deliberately abstract — tool results and
  * editor-facing text never name the underlying model (CLAUDE.md §2:
  * provider brand never surfaces in the editor chat UI); concrete model
- * ids appear only on Owner surfaces (security panel, cost dashboard).
+ * ids appear only on Owner surfaces (Settings panel, cost dashboard).
  */
 export const subagentModelTier = z.enum(["inherit", "mid", "small"]);
 export type SubagentModelTier = z.infer<typeof subagentModelTier>;

package/src/version.ts

@@ -11,7 +11,7 @@
  *   5. Pushes — GitHub Actions takes over for the publish step.
  *
  * Read by:
- *   - admin's /security index page (header badge + about-modal),
+ *   - admin's /settings index page (header badge + about-modal),
  *   - cms-provision CLI's `version` subcommand,
  *   - User-Agent header on plugin-host's outbound HTTP calls,
  *   - Tier-1 manifest signing (the version is hashed into the
@@ -22,7 +22,7 @@
  * follow standard SemVer.
  */
 
-export const CAELO_VERSION = "0.10.43";
+export const CAELO_VERSION = "0.10.44";
 
 /**
  * Deprecated alias for back-compat — early P17 work spelled this