@caelo-cms/shared 0.10.72 → 0.11.1

package/src/__tests__/redos-hardening.test.ts

@@ -12,6 +12,8 @@
 
 import { describe, expect, it } from "bun:test";
 import { fontFamilySlug, parseFontsCss } from "../fonts.js";
+import { DEFAULT_LIST_TYPES } from "../lists/default-types.js";
+import { createListRenderContext } from "../lists/resolve.js";
 import { renderTemplate } from "../template-engine.js";
 import { stripCssComments } from "../theme-importers/css-comments.js";
 import { trimSlashes, trimTrailingSlashes } from "../url.js";
@@ -59,36 +61,69 @@ describe("stripCssComments (S4)", () => {
   });
 });
 
-describe("renderTemplate SECTION_RE (S4)", () => {
+describe("renderTemplate sections (S4, epic #1107 tokenizer)", () => {
+  const lists = createListRenderContext({
+    listTypes: new Map(DEFAULT_LIST_TYPES.map((t) => [t.slug, { id: t.slug, def: t }])),
+    lists: new Map(),
+    pageTypes: new Map(),
+    pages: new Map(),
+    media: new Map(),
+    siteLanguage: "en",
+    homePageId: null,
+  }).forPage(null);
+  const navField = { name: "nav_items", kind: "list" as const, listType: "links" };
+  const entry = (n: number, label: string, href: string) => ({
+    id: `00000000-0000-4000-9000-${String(n).padStart(12, "0")}`,
+    node: "link",
+    values: { label, link: { href } },
+  });
+
   it("scans a large closed section body linearly (no quadratic backtracking)", () => {
-    // A closed section with a 100k-char literal body. The tempered-dot scans
-    // it in one linear pass; the old lazy [\s\S]*? + backreference close was
-    // the polynomial shape this guards against.
+    // A closed section with a 100k-char literal body: the section pass
+    // tokenizes once and pairs tags with a stack, no regex over the body.
     const big = "x".repeat(100_000);
-    const html = `<nav>{{#nav_items}}${big}<a href="{{href}}">{{label}}</a>{{/nav_items}}</nav>`;
+    const html = `<nav>{{#nav_items}}${big}<a href="{{link}}">{{label}}</a>{{/nav_items}}</nav>`;
     expect(
       underBudget(() =>
         renderTemplate({
           html,
-          fields: [{ name: "nav_items", kind: "link-list" }],
-          contentValues: { nav_items: [{ label: "Docs", href: "/docs" }] },
+          fields: [navField],
+          contentValues: { nav_items: [entry(1, "Docs", "/docs")] },
+          lists,
         }),
       ),
     ).toBeLessThan(BUDGET_MS);
   });
 
+  it("thousands of unclosed sections cost one pass, not one scan each", () => {
+    // Unclosed opens stay unpaired (the later Mustache pass reports them);
+    // pairing must not rescan the rest of the document per open.
+    const html = "{{#a}}".repeat(5_000) + "x".repeat(50_000);
+    expect(
+      underBudget(() => {
+        try {
+          renderTemplate({
+            html,
+            fields: [{ name: "a", kind: "text" }],
+            contentValues: { a: "1" },
+          });
+        } catch {
+          // Mustache refuses the unclosed sections; only the cost matters here.
+        }
+      }),
+    ).toBeLessThan(BUDGET_MS);
+  });
+
   it("still iterates a closed section the same way", () => {
     const out = renderTemplate({
-      html: '<nav>{{#nav_items}}<a href="{{href}}">{{label}}</a>{{/nav_items}}</nav>',
-      fields: [{ name: "nav_items", kind: "link-list" }],
-      contentValues: {
-        nav_items: [
-          { label: "Docs", href: "/docs" },
-          { label: "Blog", href: "/blog" },
-        ],
-      },
+      html: '<nav>{{#nav_items}}<a href="{{link}}">{{label}}</a>{{/nav_items}}</nav>',
+      fields: [navField],
+      contentValues: { nav_items: [entry(1, "Docs", "/docs"), entry(2, "Blog", "/blog")] },
+      lists,
     });
-    expect(out.html).toBe('<nav><a href="/docs">Docs</a><a href="/blog">Blog</a></nav>');
+    expect(out.html.replace(/ data-caelo-list-item="[^"]*"/g, "")).toBe(
+      '<nav><a href="/docs">Docs</a><a href="/blog">Blog</a></nav>',
+    );
   });
 });
 

package/src/ai-tools-add-module-modes.test.ts

@@ -71,7 +71,7 @@ describe("addModuleToolInput modes (issue #159)", () => {
   it("TOLERATES a moduleId call carrying authoring keys (incl. structural html) — placement-only, handler surfaces the ignored-authoring info", () => {
     // §1A/§11 — a valid placement must never fail over an extra authoring
     // field. moduleId + html passes; the tool handler (not the schema)
-    // reports that html was not applied and points at edit_module.
+    // reports that html was not applied and points at update_modules_many.
     const r = addModuleToolInput.safeParse({
       ...BASE,
       moduleId: "11111111-1111-4111-8111-111111111102",
@@ -104,3 +104,53 @@ describe("addModuleToolInput modes (issue #159)", () => {
     expect(r.success).toBe(false);
   });
 });
+
+describe("addModuleToolInput — list fields carry their own content (PR #1121 e2e)", () => {
+  const LIST = "caelo:list/22222222-2222-4222-8222-222222222222";
+  const footer = (fields: unknown[]) =>
+    addModuleToolInput.safeParse({
+      ...BASE,
+      target: "layout" as const,
+      targetRef: "site-default",
+      blockName: "footer",
+      displayName: "Footer",
+      html: '<nav>{{#footer_links}}<a href="{{link}}">{{label}}</a>{{/footer_links}}</nav>',
+      fields,
+    });
+
+  it("accepts a footer bound to a shared list without values or defaults", () => {
+    const r = footer([
+      {
+        name: "footer_links",
+        kind: "list",
+        label: "Links",
+        listType: "menu",
+        bind: "shared",
+        list: LIST,
+      },
+    ]);
+    expect(r.success).toBe(true);
+  });
+
+  it("accepts a list fed by a source", () => {
+    const r = footer([
+      {
+        name: "footer_links",
+        kind: "list",
+        label: "Crumbs",
+        listType: "links",
+        bind: "source",
+        source: { kind: "system", name: "breadcrumbs" },
+      },
+    ]);
+    expect(r.success).toBe(true);
+  });
+
+  it("still refuses a shared list field with no list and no value, naming the list route", () => {
+    const r = footer([
+      { name: "footer_links", kind: "list", label: "Links", listType: "menu", bind: "shared" },
+    ]);
+    expect(r.success).toBe(false);
+    expect(r.error?.issues[0]?.message).toContain("upsert_lists_many");
+  });
+});

package/src/ai-tools.test.ts

@@ -1,24 +1,21 @@
 // SPDX-License-Identifier: MPL-2.0
 
 import { describe, expect, it } from "bun:test";
-import {
-  chatPublishInput,
-  chatSendMessageInput,
-  editModuleToolInput,
-  siteMemoryProposeToolInput,
-} from "./ai-tools.js";
+import { chatPublishInput, chatSendMessageInput, siteMemoryProposeToolInput } from "./ai-tools.js";
+import { moduleUpdateSchema } from "./content.js";
 
 const UUID = "11111111-1111-4111-8111-111111111111";
 const UUID_2 = "22222222-2222-4222-8222-222222222222";
 
-describe("editModuleToolInput", () => {
+// The per-item shape of update_modules_many (the module-edit tool extends it).
+describe("moduleUpdateSchema (update_modules_many item)", () => {
   it("accepts a minimal valid edit", () => {
-    const r = editModuleToolInput.safeParse({ moduleId: UUID, html: "<p>x</p>" });
+    const r = moduleUpdateSchema.safeParse({ moduleId: UUID, html: "<p>x</p>" });
     expect(r.success).toBe(true);
   });
 
   it("rejects unknown keys (.strict)", () => {
-    const r = editModuleToolInput.safeParse({
+    const r = moduleUpdateSchema.safeParse({
       moduleId: UUID,
       html: "<p>x</p>",
       pageId: UUID_2,
@@ -27,7 +24,7 @@ describe("editModuleToolInput", () => {
   });
 
   it("rejects oversized html", () => {
-    const r = editModuleToolInput.safeParse({
+    const r = moduleUpdateSchema.safeParse({
       moduleId: UUID,
       html: "x".repeat(300_000),
     });