@jini-ai/admin 0.6.11 → 0.6.15-rc.1

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # Changelog
 
+## 0.6.13
+
+### Patch Changes
+
+- fddd084: Allow consent-enabled static HTML exports with native reopening controls and denied visitor defaults. Keep reopened preferences at the banner position and show dynamic-code help through the shared info-tip.
+- 0728914: Engine guard clean-up (`pnpm guard` 106 -> 0): layer, subpath-isolation and module-state findings fixed by moving
+  shared contracts to their owners instead of reaching across domains. Additive public API: `@jini-ai/core/filesystem`
+  (guarded-reader contracts), `useFetchQueryScope` from `@jini-ai/ui` fetch-query (per-provider query scope),
+  `@jini-ai/chat/react` re-exports of the accepted-input, run-state and agent-plugin chat-state helpers. The Claude
+  filesystem probe cache in `@jini-ai/agent-runtime` is instance-owned. No behaviour change intended; host-facing
+  breaks are listed in `owner-store-to-server` and `guard-host-ports`.
+
+## 0.6.12
+
+### Patch Changes
+
+- consent settings: per-site `'unsafe-eval'` toggle.
+
 ## 0.6.11
 
 ## 0.6.10

package/dist/browser/index.d.ts

@@ -6,4 +6,5 @@
  */
 export { NAVIGATION_EVENT, installInternalLinkInterceptor, navigate, readRoutePath, subscribeToRoute, } from './navigation.js';
 export { createAdminShellNavigation } from './shell-navigation.js';
+export { createBrowserTelemetry, installBrowserErrorListeners, type BrowserTelemetry, type BrowserTelemetryDeps, type BrowserTelemetryPayload } from './telemetry.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/browser/index.js

@@ -6,4 +6,5 @@
  */
 export { NAVIGATION_EVENT, installInternalLinkInterceptor, navigate, readRoutePath, subscribeToRoute, } from './navigation.js';
 export { createAdminShellNavigation } from './shell-navigation.js';
+export { createBrowserTelemetry, installBrowserErrorListeners } from './telemetry.js';
 //# sourceMappingURL=index.js.map

package/dist/browser/telemetry.d.ts

@@ -0,0 +1,45 @@
+/** Browser telemetry over host-bound transport, timers and session state. Route names stay with the host. */
+export type BrowserTelemetryPayload = {
+    type: "error";
+    message: string;
+    stack: string;
+    componentStack?: string | undefined;
+    route: string;
+} | {
+    type: "pageview";
+    route: string;
+};
+export interface BrowserTelemetryDeps {
+    send(payload: BrowserTelemetryPayload): Promise<unknown>;
+    nowMs(): number;
+    setTimer(fn: () => void, ms: number): unknown;
+    clearTimer(handle: unknown): void;
+}
+export interface BrowserTelemetry {
+    /** Only a signed-in session can post; before sign-in everything is dropped. */
+    setSignedIn(signedIn: boolean): void;
+    /** The current route template; errors carry it, and a change sends a (debounced) page view. */
+    setRoute(route: string): void;
+    reportError(input: {
+        error: unknown;
+        componentStack?: string | undefined;
+    }): void;
+}
+/**
+ * Builds the telemetry engine over injected I/O so its dedupe, cap and debounce are testable.
+ * @complexity O(1) amortized per call; O(f) memory for at most {@link MAX_FINGERPRINTS} fingerprints.
+ */
+export declare function createBrowserTelemetry(deps: BrowserTelemetryDeps, { maxErrorsPerMinute, pageviewDelayMs, initialRoute }?: {
+    maxErrorsPerMinute?: number | undefined;
+    pageviewDelayMs?: number | undefined;
+    initialRoute?: string | undefined;
+}): BrowserTelemetry;
+/**
+ * Window-level errors the React root never sees (event handlers, timers, promises).
+ * @returns Uninstall.
+ */
+export declare function installBrowserErrorListeners({ target, telemetry }: {
+    target: Pick<Window, "addEventListener" | "removeEventListener">;
+    telemetry: Pick<BrowserTelemetry, "reportError">;
+}, _options?: {}): () => void;
+//# sourceMappingURL=telemetry.d.ts.map

package/dist/browser/telemetry.js

@@ -0,0 +1,108 @@
+/** Mirrors the server's caps (`browser-telemetry.ts`): longer text is cut here, not refused there. */
+const CAPS = { message: 1_000, stack: 8_000, componentStack: 4_000, route: 200 };
+const WINDOW_MS = 60_000;
+const DEDUPE_MS = 5 * 60_000;
+const MAX_FINGERPRINTS = 200;
+/** Message of an Error or a thrown string; any other thrown value is named by type only, never dumped. */
+function messageOf(error) {
+    if (error instanceof Error)
+        return error.message || error.name;
+    if (typeof error === "string")
+        return error;
+    return `Non-Error thrown (${error === null ? "null" : typeof error})`;
+}
+function errorPayload({ error, componentStack, route }) {
+    const stack = error instanceof Error && typeof error.stack === "string" ? error.stack : "";
+    const cs = componentStack ? componentStack.slice(0, CAPS.componentStack) : "";
+    return { type: "error", message: messageOf(error).slice(0, CAPS.message), stack: stack.slice(0, CAPS.stack), ...(cs ? { componentStack: cs } : {}), route };
+}
+/** Message + first stack frame: the same bug from the same place is one report, not hundreds. */
+function fingerprintOf(payload) {
+    const frame = payload.stack.split("\n").find((line) => /\bat\b|@/.test(line)) ?? "";
+    return `${payload.message}|${frame.trim()}`;
+}
+/**
+ * Builds the telemetry engine over injected I/O so its dedupe, cap and debounce are testable.
+ * @complexity O(1) amortized per call; O(f) memory for at most {@link MAX_FINGERPRINTS} fingerprints.
+ */
+export function createBrowserTelemetry(deps, { maxErrorsPerMinute = 10, pageviewDelayMs = 1_000, initialRoute = "" } = {}) {
+    let signedIn = false;
+    let route = initialRoute;
+    let lastPageview = null;
+    let timer = null;
+    let sentAt = [];
+    const seen = new Map();
+    const post = (payload) => {
+        try {
+            void deps.send(payload).catch(() => { });
+        }
+        catch { /* never throws */ }
+    };
+    const underCap = (now) => {
+        sentAt = sentAt.filter((at) => now - at < WINDOW_MS);
+        return sentAt.length < maxErrorsPerMinute;
+    };
+    const isRepeat = (fingerprint, now) => {
+        const last = seen.get(fingerprint);
+        if (last !== undefined && now - last < DEDUPE_MS)
+            return true;
+        seen.delete(fingerprint);
+        if (seen.size >= MAX_FINGERPRINTS)
+            seen.delete(seen.keys().next().value);
+        seen.set(fingerprint, now);
+        return false;
+    };
+    const flushPageview = () => {
+        timer = null;
+        if (!signedIn || route === lastPageview)
+            return;
+        lastPageview = route;
+        post({ type: "pageview", route });
+    };
+    return {
+        setSignedIn(next) { signedIn = next; if (!next)
+            lastPageview = null; },
+        setRoute(next) {
+            route = next.slice(0, CAPS.route);
+            try {
+                if (timer !== null)
+                    deps.clearTimer(timer);
+                timer = deps.setTimer(flushPageview, pageviewDelayMs);
+            }
+            catch { /* never throws */ }
+        },
+        reportError({ error, componentStack }) {
+            try {
+                if (!signedIn)
+                    return;
+                const payload = errorPayload({ error, componentStack, route });
+                const now = deps.nowMs();
+                if (isRepeat(fingerprintOf(payload), now) || !underCap(now))
+                    return;
+                sentAt.push(now);
+                post(payload);
+            }
+            catch { /* never throws */ }
+        },
+    };
+}
+/**
+ * Window-level errors the React root never sees (event handlers, timers, promises).
+ * @returns Uninstall.
+ */
+export function installBrowserErrorListeners({ target, telemetry }, _options = {}) {
+    const onError = (event) => {
+        // A cross-origin "Script error." carries nothing usable; skip it rather than report noise.
+        if (event.error === undefined || event.error === null)
+            return;
+        telemetry.reportError({ error: event.error });
+    };
+    const onRejection = (event) => telemetry.reportError({ error: event.reason });
+    target.addEventListener("error", onError);
+    target.addEventListener("unhandledrejection", onRejection);
+    return () => {
+        target.removeEventListener("error", onError);
+        target.removeEventListener("unhandledrejection", onRejection);
+    };
+}
+//# sourceMappingURL=telemetry.js.map

package/dist/comments/react/hooks/use-comment-queue.hooks.js

@@ -1,5 +1,5 @@
 import { createContext, createElement, useContext, useCallback, useEffect, useMemo, useRef } from 'react';
-import { useCachedLoader, useFetchQuery, useInvalidate } from '@jini-ai/ui/fetch-query';
+import { useCachedLoader, useFetchQuery, useInvalidate, useFetchQueryScope } from '@jini-ai/ui/fetch-query';
 import { AdminConfigError } from '../../../core/module/create-admin.js';
 import { useController } from '../../../core/react/use-controller.js';
 import { createCommentQueueController } from '../../controllers/comment-queue.controller.js';
@@ -18,19 +18,6 @@ const CommentQueueScopeContext = createContext(null);
 export function CommentQueueScopeProvider({ scope, children }) {
     return createElement(CommentQueueScopeContext.Provider, { value: scope }, children);
 }
-// Weak API keys preserve sharing between consumers without retaining APIs from previous sessions.
-// Explicit workspace/principal keys below also isolate hosts that retain one API across sessions.
-const queueScopes = new WeakMap();
-let nextQueueScope = 0;
-/** Allocate the API portion of a namespace; workspace/principal identity is keyed separately. */
-function queueScope({ api }, _optional = {}) {
-    let scope = queueScopes.get(api);
-    if (scope === undefined) {
-        scope = ++nextQueueScope;
-        queueScopes.set(api, scope);
-    }
-    return scope;
-}
 /** Preserve the hook's loading defaults while no controller from the current scope is attached. */
 function queueDisplay({ snapshot }, _optional = {}) {
     const { status, items, nextCursor, error, loadingMore, pendingPurge } = snapshot ?? BEFORE_FIRST_SNAPSHOT;
@@ -73,7 +60,10 @@ function useCursorPageLoader({ api, queueRoot, status, cursor }, _optional = {})
  */
 export function useCommentQueue({ api, scope, permissions = NO_GRANTS }, { t = englishComments, events } = {}) {
     const invalidate = useInvalidate();
-    const queueRoot = useMemo(() => [...KEYS.queueRoot, queueScope({ api }), scope.workspaceId, scope.principalId], [api, scope.workspaceId, scope.principalId]);
+    // Weak API keys preserve sharing between consumers without retaining APIs from previous sessions.
+    // Explicit workspace/principal keys below also isolate hosts that retain one API across sessions.
+    const apiScope = useFetchQueryScope({ owner: api });
+    const queueRoot = useMemo(() => [...KEYS.queueRoot, apiScope, scope.workspaceId, scope.principalId], [apiScope, scope.workspaceId, scope.principalId]);
     const invalidateQueue = useCallback(() => invalidate({ key: queueRoot }), [invalidate, queueRoot]);
     const loadPageRef = useRef(null);
     const { controller: attachedController, snapshot: attachedSnapshot } = useController({

package/dist/consent/react/ConsentFields.d.ts

@@ -20,9 +20,13 @@ export interface ConsentFieldsProps {
     /** Host max lengths per text field; the defaults are the engine's loosest bounds. */
     limits?: Readonly<Partial<Record<TextKey | 'policyVersion', number>>> | undefined;
 }
-/** Banner copy and its links. Text is always plain text; the engine never renders it as HTML. */
-export declare function ConsentBannerFields({ value, onChange, disabled, problems, dictionary, limits }: ConsentFieldsProps): import("react").JSX.Element;
-/** On/off, region behavior and the policy version that re-asks visitors when it changes. */
+/** Banner copy and its links. Optional host modes report only a mode patch; the host's independent
+ * enabled switch stays authoritative. Text is always plain text.
+ * @example <ConsentBannerFields value={value} onChange={onChange} bannerModes={['jini', 'headless', 'off']} /> */
+export declare function ConsentBannerFields({ value, onChange, disabled, problems, dictionary, limits, bannerModes }: ConsentFieldsProps & {
+    bannerModes?: readonly NonNullable<ConsentSettingsView['bannerMode']>[] | undefined;
+}): import("react").JSX.Element;
+/** On/off, script policy, region behavior and the version that re-asks visitors when it changes. */
 export declare function ConsentRulesFields({ value, onChange, disabled, problems, dictionary, limits, regionModes }: ConsentFieldsProps & {
     regionModes?: readonly ConsentSettingsView['regionMode'][];
 }): import("react").JSX.Element;

package/dist/consent/react/ConsentFields.js

@@ -1,6 +1,7 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useId } from 'react';
 import { defaultAdminTheme } from '@jini-ai/ui/theme';
+import { InfoTip } from '@jini-ai/ui/admin-widgets';
 import { pixelInputValue, problemsFor, useConsentSettingsPanel, usePolicyVersionInput } from './settings-panel.hooks.js';
 const BANNER_FIELDS = [
     { key: 'title', label: 'Banner title' }, { key: 'message', label: 'Banner message', multiline: true },
@@ -8,6 +9,7 @@ const BANNER_FIELDS = [
     { key: 'preferencesLabel', label: 'Preferences label' }, { key: 'privacyPolicyUrl', label: 'Privacy policy page URL' },
     { key: 'secondaryLinkLabel', label: 'Second link text' }, { key: 'secondaryLinkUrl', label: 'Second link URL' },
 ];
+const BANNER_MODE_LABELS = { jini: 'Jini banner', headless: 'My own', off: 'None' };
 const REGION_LABELS = {
     auto: 'Automatic (unknown region: opt-in)', 'opt-in': 'Opt-in everywhere (EU / UK)', 'opt-out': 'Opt-out everywhere (California)',
 };
@@ -38,21 +40,31 @@ function Field({ label, field, problems, children }) {
     const attributes = own.length ? { id, 'aria-invalid': true, 'aria-describedby': `${id}-problems` } : { id };
     return _jsxs("div", { className: "jini-consent-settings-field", children: [_jsx("label", { htmlFor: id, className: "jini-field-label", children: label }), children(attributes), _jsx(FieldProblems, { id: `${id}-problems`, problems: own })] });
 }
-/** Banner copy and its links. Text is always plain text; the engine never renders it as HTML. */
-export function ConsentBannerFields({ value, onChange, disabled = false, problems, dictionary, limits = {} }) {
+/** Host-supplied banner modes. Native radios provide keyboard selection; the hint keeps its space
+ * while hidden, and the parent fieldset supplies the disabled state. */
+function BannerModeFields({ value, onChange, dictionary, modes }) {
+    const id = useId();
+    const t = translator(dictionary);
+    const handlers = useConsentSettingsPanel({ value, onChange });
+    return _jsxs("fieldset", { className: "jini-consent-banner-modes", "aria-describedby": value.bannerMode === 'headless' ? `${id}-mode-hint` : undefined, children: [_jsx("legend", { children: t('Banner mode') }), _jsx("div", { className: "jini-consent-banner-options", children: modes.map(mode => _jsxs("label", { children: [_jsx("input", { type: "radio", name: `${id}-banner-mode`, value: mode, checked: (value.bannerMode ?? 'jini') === mode, onChange: handlers.bannerMode({ mode }) }), _jsx("span", { children: t(BANNER_MODE_LABELS[mode]) })] }, mode)) }), _jsx("p", { id: `${id}-mode-hint`, className: "jini-hint jini-consent-banner-mode-hint", style: { visibility: value.bannerMode === 'headless' ? 'visible' : 'hidden' }, children: t('Your banner calls window.jiniConsent.set(...)') })] });
+}
+/** Banner copy and its links. Optional host modes report only a mode patch; the host's independent
+ * enabled switch stays authoritative. Text is always plain text.
+ * @example <ConsentBannerFields value={value} onChange={onChange} bannerModes={['jini', 'headless', 'off']} /> */
+export function ConsentBannerFields({ value, onChange, disabled = false, problems, dictionary, limits = {}, bannerModes }) {
     const t = translator(dictionary);
     const handlers = useConsentSettingsPanel({ value, onChange });
-    return _jsxs("fieldset", { disabled: disabled, className: "jini-consent-settings-fields", children: [_jsx("legend", { children: t('Banner text') }), BANNER_FIELDS.map(({ key, label, multiline }) => _jsx(Field, { label: t(label), field: key, problems: problems, children: aria => multiline
+    return _jsxs("fieldset", { disabled: disabled, className: "jini-consent-settings-fields", children: [_jsx("legend", { children: t('Banner text') }), bannerModes && _jsx(BannerModeFields, { value: value, onChange: onChange, dictionary: dictionary, modes: bannerModes }), BANNER_FIELDS.map(({ key, label, multiline }) => _jsx(Field, { label: t(label), field: key, problems: problems, children: aria => multiline
                     ? _jsx("textarea", { className: "jini-input", value: value[key] ?? '', maxLength: limits[key] ?? 2000, rows: 3, onChange: handlers.text(key), ...aria })
                     : _jsx("input", { className: "jini-input", type: "text", value: value[key] ?? '', maxLength: limits[key] ?? 2000, onChange: handlers.text(key), ...aria }) }, key)), _jsx("p", { className: "jini-hint", children: t('Link a published privacy page, such as /privacy. The second link is optional.') })] });
 }
-/** On/off, region behavior and the policy version that re-asks visitors when it changes. */
+/** On/off, script policy, region behavior and the version that re-asks visitors when it changes. */
 export function ConsentRulesFields({ value, onChange, disabled = false, problems, dictionary, limits = {}, regionModes = ['auto', 'opt-in', 'opt-out'] }) {
     const id = useId();
     const t = translator(dictionary);
     const handlers = useConsentSettingsPanel({ value, onChange });
     const modes = regionModes.includes(value.regionMode) ? regionModes : [value.regionMode, ...regionModes];
-    return _jsxs("fieldset", { disabled: disabled, className: "jini-consent-settings-fields", children: [_jsx("legend", { children: t('Rules') }), _jsxs("button", { type: "button", className: value.enabled ? 'jini-toggle-row on' : 'jini-toggle-row', role: "switch", "aria-checked": value.enabled, "aria-labelledby": `${id}-enabled`, "aria-describedby": `${id}-hint`, onClick: handlers.toggle, children: [_jsxs("span", { className: "jini-toggle-row-text", children: [_jsx("span", { id: `${id}-enabled`, className: "jini-toggle-row-label", children: t('Enable cookie consent on this site') }), _jsx("span", { id: `${id}-hint`, className: "jini-toggle-row-hint", children: t('Applies to published site pages.') })] }), _jsx("span", { className: "jini-toggle-row-switch", "aria-hidden": "true" })] }), _jsx(Field, { label: t('Region mode'), field: "regionMode", problems: problems, children: aria => _jsx("select", { className: "jini-input", value: value.regionMode, onChange: handlers.region, ...aria, children: modes.map(mode => _jsx("option", { value: mode, children: t(REGION_LABELS[mode]) }, mode)) }) }), _jsx("p", { className: "jini-hint", children: t('California permits optional categories until opt-out. Global Privacy Control always disables analytics and marketing.') }), _jsx(Field, { label: t('Policy version'), field: "policyVersion", problems: problems, children: aria => _jsx(PolicyVersionInput, { value: value.policyVersion, onChange: onChange, maxLength: limits.policyVersion ?? 128, aria: aria }) }), _jsx("p", { className: "jini-hint", children: t('Change the policy version to ask visitors to choose again.') })] });
+    return _jsxs("fieldset", { disabled: disabled, className: "jini-consent-settings-fields", children: [_jsx("legend", { children: t('Rules') }), _jsxs("button", { type: "button", className: value.enabled ? 'jini-toggle-row on' : 'jini-toggle-row', role: "switch", "aria-checked": value.enabled, "aria-labelledby": `${id}-enabled`, "aria-describedby": `${id}-hint`, onClick: handlers.toggle, children: [_jsxs("span", { className: "jini-toggle-row-text", children: [_jsx("span", { id: `${id}-enabled`, className: "jini-toggle-row-label", children: t('Enable cookie consent on this site') }), _jsx("span", { id: `${id}-hint`, className: "jini-toggle-row-hint", children: t('Applies to published site pages.') })] }), _jsx("span", { className: "jini-toggle-row-switch", "aria-hidden": "true" })] }), value.enabled && _jsxs("div", { style: { display: 'flex', alignItems: 'center', gap: 8 }, children: [_jsxs("button", { type: "button", className: value.allowUnsafeEval === true ? 'jini-toggle-row on' : 'jini-toggle-row', role: "switch", "aria-checked": value.allowUnsafeEval === true, "aria-labelledby": `${id}-eval`, "aria-describedby": `${id}-eval-hint`, onClick: handlers.toggleUnsafeEval, children: [_jsx("span", { className: "jini-toggle-row-text", children: _jsx("span", { id: `${id}-eval`, className: "jini-toggle-row-label", children: t('Allow dynamic code (unsafe-eval)') }) }), _jsx("span", { className: "jini-toggle-row-switch", "aria-hidden": "true" })] }), _jsx(InfoTip, { triggerLabel: t('About dynamic code'), descriptionId: `${id}-eval-hint`, label: t("Some themes need this. It weakens the site's script protection. Optional scripts still wait for consent.") })] }), _jsx(Field, { label: t('Region mode'), field: "regionMode", problems: problems, children: aria => _jsx("select", { className: "jini-input", value: value.regionMode, onChange: handlers.region, ...aria, children: modes.map(mode => _jsx("option", { value: mode, children: t(REGION_LABELS[mode]) }, mode)) }) }), _jsx("p", { className: "jini-hint", children: t('California permits optional categories until opt-out. Global Privacy Control always disables analytics and marketing.') }), _jsx(Field, { label: t('Policy version'), field: "policyVersion", problems: problems, children: aria => _jsx(PolicyVersionInput, { value: value.policyVersion, onChange: onChange, maxLength: limits.policyVersion ?? 128, aria: aria }) }), _jsx("p", { className: "jini-hint", children: t('Change the policy version to ask visitors to choose again.') })] });
 }
 /** Placement, bounded appearance tokens and allowlisted custom CSS. The engine checks contrast and
  * CSS safety; its problems arrive on the `appearance` field and show under the custom CSS. */

package/dist/consent/react/ConsentSettingsPanel.d.ts

@@ -12,6 +12,10 @@ export interface ConsentAppearanceView {
 /** The host's consent configuration. The look fields are optional so older hosts stay valid. */
 export interface ConsentSettingsView {
     enabled: boolean;
+    /** Optional for older hosts; omitted means the dynamic code exception is off. */
+    allowUnsafeEval?: boolean;
+    /** Optional for older hosts; omitted uses the Jini banner when consent is enabled. */
+    bannerMode?: 'jini' | 'headless' | 'off';
     regionMode: 'auto' | 'opt-in' | 'opt-out';
     policyVersion: string;
     privacyPolicyUrl: string;

package/dist/consent/react/settings-panel.hooks.d.ts

@@ -3,6 +3,10 @@ import type { ConsentAppearanceView, ConsentFieldProblem, ConsentSettingsPanelPr
 /** Keep value conversions and toggle behavior out of the view. React owns event signatures. */
 export declare function useConsentSettingsPanel({ value, onChange }: Pick<ConsentSettingsPanelProps, 'value' | 'onChange'>, _options?: {}): {
     toggle: () => void;
+    toggleUnsafeEval: () => void;
+    bannerMode: ({ mode }: {
+        mode: NonNullable<ConsentSettingsView["bannerMode"]>;
+    }, _optional?: {}) => () => void;
     region: (event: ChangeEvent<HTMLSelectElement>) => void;
     placement: (event: ChangeEvent<HTMLSelectElement>) => void;
     text: (key: keyof ConsentSettingsView) => (event: ChangeEvent<HTMLInputElement | HTMLTextAreaElement>) => void;

package/dist/consent/react/settings-panel.hooks.js

@@ -3,6 +3,8 @@ import { useEffect, useState } from 'react';
 export function useConsentSettingsPanel({ value, onChange }, _options = {}) {
     return {
         toggle: () => onChange({ patch: { enabled: !value.enabled } }),
+        toggleUnsafeEval: () => onChange({ patch: { allowUnsafeEval: value.allowUnsafeEval !== true } }),
+        bannerMode: ({ mode }, _optional = {}) => () => onChange({ patch: { bannerMode: mode } }),
         region: (event) => onChange({ patch: { regionMode: event.target.value } }),
         placement: (event) => onChange({ patch: { placement: event.target.value } }),
         text: (key) => (event) => onChange({ patch: { [key]: event.target.value } }),

package/dist/forms/forms.module.d.ts

@@ -9,6 +9,10 @@ export declare const formsModule: {
         readonly formsNavigation: import("../core/module/token.js").AdminPortToken<import("./ports.js").FormsNavigationPort, "admin.forms.navigation">;
     };
     readonly messages: {
+        readonly "Basic spam protection is on.": "Basic spam protection is on.";
+        readonly "Hidden-field checks, submission timing when available, duplicate suppression, and rate limits.": "Hidden-field checks, submission timing when available, duplicate suppression, and rate limits.";
+        readonly "Live server defaults: wait 1 second; up to 5 submissions per minute per IP address and form.": "Live server defaults: wait 1 second; up to 5 submissions per minute per IP address and form.";
+        readonly "Exported forms use their destination's protection; timing and duplicate suppression may be unavailable. Custom embeds need the generated hidden controls for hidden-field checks.": "Exported forms use their destination's protection; timing and duplicate suppression may be unavailable. Custom embeds need the generated hidden controls for hidden-field checks.";
         readonly "Created / Updated": "Created / Updated";
         readonly "Created {created} \u00B7 Updated {updated}": "Created {created} · Updated {updated}";
         readonly "Created {date}": "Created {date}";

package/dist/forms/messages.en.d.ts

@@ -1,5 +1,9 @@
 import type { FormsTranslator } from "./models.js";
 export declare const formsMessagesEn: {
+    readonly "Basic spam protection is on.": "Basic spam protection is on.";
+    readonly "Hidden-field checks, submission timing when available, duplicate suppression, and rate limits.": "Hidden-field checks, submission timing when available, duplicate suppression, and rate limits.";
+    readonly "Live server defaults: wait 1 second; up to 5 submissions per minute per IP address and form.": "Live server defaults: wait 1 second; up to 5 submissions per minute per IP address and form.";
+    readonly "Exported forms use their destination's protection; timing and duplicate suppression may be unavailable. Custom embeds need the generated hidden controls for hidden-field checks.": "Exported forms use their destination's protection; timing and duplicate suppression may be unavailable. Custom embeds need the generated hidden controls for hidden-field checks.";
     readonly "Created / Updated": "Created / Updated";
     readonly "Created {created} \u00B7 Updated {updated}": "Created {created} · Updated {updated}";
     readonly "Created {date}": "Created {date}";

package/dist/forms/messages.en.js

@@ -1,4 +1,8 @@
 export const formsMessagesEn = {
+    "Basic spam protection is on.": "Basic spam protection is on.",
+    "Hidden-field checks, submission timing when available, duplicate suppression, and rate limits.": "Hidden-field checks, submission timing when available, duplicate suppression, and rate limits.",
+    "Live server defaults: wait 1 second; up to 5 submissions per minute per IP address and form.": "Live server defaults: wait 1 second; up to 5 submissions per minute per IP address and form.",
+    "Exported forms use their destination's protection; timing and duplicate suppression may be unavailable. Custom embeds need the generated hidden controls for hidden-field checks.": "Exported forms use their destination's protection; timing and duplicate suppression may be unavailable. Custom embeds need the generated hidden controls for hidden-field checks.",
     "Created / Updated": "Created / Updated",
     "Created {created} · Updated {updated}": "Created {created} · Updated {updated}",
     "Created {date}": "Created {date}",

package/dist/forms/react/components/FormEditorFieldsBody.js

@@ -8,6 +8,6 @@ export function FormEditorFieldsBody(props) {
     return (_jsxs(_Fragment, { children: [_jsx("div", { className: "field-group", children: _jsxs("div", { className: "field-row", children: [_jsxs("div", { className: "field", children: [_jsx("label", { className: "field-label", htmlFor: "form-name", children: t("Name") }), _jsx("input", { id: "form-name", value: name, onChange: handlers.onName, ...agentHandle({ handle: "form-editor-name" }, { role: "field", label: "This form's display name" }) })] }), _jsxs("div", { className: "field", children: [_jsx("label", { className: "field-label", htmlFor: "form-slug", children: t("Slug") }), _jsx("input", { id: "form-slug", value: slug, disabled: !isNew, onChange: handlers.onSlug, ...agentHandle({ handle: "form-editor-slug" }, {
                                         role: "field",
                                         label: "This form's URL slug — only editable while creating a new form",
-                                    }) })] })] }) }), _jsx("div", { className: "field-group", children: _jsx(FormEditorModeSwitch, { props: props, handlers: handlers }) }), _jsx(FormEditorActions, { props: props })] }));
+                                    }) })] })] }) }), _jsx("div", { className: "field-group", children: _jsx(FormEditorModeSwitch, { props: props, handlers: handlers }) }), _jsxs("div", { className: "field-group", children: [_jsx("p", { children: _jsx("strong", { children: t("Basic spam protection is on.") }) }), _jsx("p", { className: "muted", children: t("Hidden-field checks, submission timing when available, duplicate suppression, and rate limits.") }), _jsx("p", { className: "muted", children: t("Live server defaults: wait 1 second; up to 5 submissions per minute per IP address and form.") }), _jsx("p", { className: "muted", children: t("Exported forms use their destination's protection; timing and duplicate suppression may be unavailable. Custom embeds need the generated hidden controls for hidden-field checks.") })] }), _jsx(FormEditorActions, { props: props })] }));
 }
 //# sourceMappingURL=FormEditorFieldsBody.js.map

package/dist/forms/react/index.d.ts

@@ -25,6 +25,10 @@ export declare function forms(_required: Record<string, never>, options?: FormsR
         readonly formsNavigation: import("../../core/module/token.js").AdminPortToken<import("../ports.js").FormsNavigationPort, "admin.forms.navigation">;
     };
     messages: {
+        readonly "Basic spam protection is on.": "Basic spam protection is on.";
+        readonly "Hidden-field checks, submission timing when available, duplicate suppression, and rate limits.": "Hidden-field checks, submission timing when available, duplicate suppression, and rate limits.";
+        readonly "Live server defaults: wait 1 second; up to 5 submissions per minute per IP address and form.": "Live server defaults: wait 1 second; up to 5 submissions per minute per IP address and form.";
+        readonly "Exported forms use their destination's protection; timing and duplicate suppression may be unavailable. Custom embeds need the generated hidden controls for hidden-field checks.": "Exported forms use their destination's protection; timing and duplicate suppression may be unavailable. Custom embeds need the generated hidden controls for hidden-field checks.";
         readonly "Created / Updated": "Created / Updated";
         readonly "Created {created} \u00B7 Updated {updated}": "Created {created} · Updated {updated}";
         readonly "Created {date}": "Created {date}";
@@ -243,6 +247,10 @@ export declare function forms(_required: Record<string, never>, options?: FormsR
                 readonly formsNavigation: import("../../core/module/token.js").AdminPortToken<import("../ports.js").FormsNavigationPort, "admin.forms.navigation">;
             };
             readonly messages: {
+                readonly "Basic spam protection is on.": "Basic spam protection is on.";
+                readonly "Hidden-field checks, submission timing when available, duplicate suppression, and rate limits.": "Hidden-field checks, submission timing when available, duplicate suppression, and rate limits.";
+                readonly "Live server defaults: wait 1 second; up to 5 submissions per minute per IP address and form.": "Live server defaults: wait 1 second; up to 5 submissions per minute per IP address and form.";
+                readonly "Exported forms use their destination's protection; timing and duplicate suppression may be unavailable. Custom embeds need the generated hidden controls for hidden-field checks.": "Exported forms use their destination's protection; timing and duplicate suppression may be unavailable. Custom embeds need the generated hidden controls for hidden-field checks.";
                 readonly "Created / Updated": "Created / Updated";
                 readonly "Created {created} \u00B7 Updated {updated}": "Created {created} · Updated {updated}";
                 readonly "Created {date}": "Created {date}";
@@ -465,6 +473,10 @@ export declare function forms(_required: Record<string, never>, options?: FormsR
                 readonly formsNavigation: import("../../core/module/token.js").AdminPortToken<import("../ports.js").FormsNavigationPort, "admin.forms.navigation">;
             };
             readonly messages: {
+                readonly "Basic spam protection is on.": "Basic spam protection is on.";
+                readonly "Hidden-field checks, submission timing when available, duplicate suppression, and rate limits.": "Hidden-field checks, submission timing when available, duplicate suppression, and rate limits.";
+                readonly "Live server defaults: wait 1 second; up to 5 submissions per minute per IP address and form.": "Live server defaults: wait 1 second; up to 5 submissions per minute per IP address and form.";
+                readonly "Exported forms use their destination's protection; timing and duplicate suppression may be unavailable. Custom embeds need the generated hidden controls for hidden-field checks.": "Exported forms use their destination's protection; timing and duplicate suppression may be unavailable. Custom embeds need the generated hidden controls for hidden-field checks.";
                 readonly "Created / Updated": "Created / Updated";
                 readonly "Created {created} \u00B7 Updated {updated}": "Created {created} · Updated {updated}";
                 readonly "Created {date}": "Created {date}";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jini-ai/admin",
-  "version": "0.6.11",
+  "version": "0.6.15-rc.1",
   "description": "Composable admin surface for Jini-hosted products: framework-free contracts, panel registry, and route model in `/core`; React shell and panels in `/react`. Import only the layers you need.",
   "license": "Apache-2.0",
   "repository": {
@@ -448,12 +448,12 @@
   "peerDependencies": {
     "react": "^18.3.0 || ^19.0.0",
     "react-dom": "^18.3.0 || ^19.0.0",
-    "@jini-ai/agentic": "^0.6.10",
-    "@jini-ai/ui": "^0.6.10",
-    "@jini-ai/ui-kit": "^0.6.10",
-    "@jini-ai/agent-plugins": "^0.6.10",
-    "@jini-ai/cms": "^0.6.10",
-    "@jini-ai/core": "^0.6.10"
+    "@jini-ai/agentic": "^0.6.15-rc.1",
+    "@jini-ai/ui": "^0.6.15-rc.1",
+    "@jini-ai/ui-kit": "^0.6.15-rc.1",
+    "@jini-ai/agent-plugins": "^0.6.15-rc.1",
+    "@jini-ai/cms": "^0.6.15-rc.1",
+    "@jini-ai/core": "^0.6.15-rc.1"
   },
   "peerDependenciesMeta": {
     "react": {
@@ -491,12 +491,12 @@
     "react": "^19.2.0",
     "react-dom": "^19.2.0",
     "@testing-library/user-event": "^14.6.1",
-    "@jini-ai/cms": "^0.6.11",
-    "@jini-ai/agent-plugins": "^0.6.11",
-    "@jini-ai/ui-kit": "^0.6.11",
-    "@jini-ai/core": "^0.6.11",
-    "@jini-ai/agentic": "^0.6.11",
-    "@jini-ai/ui": "^0.6.11"
+    "@jini-ai/ui": "^0.6.15-rc.1",
+    "@jini-ai/ui-kit": "^0.6.15-rc.1",
+    "@jini-ai/core": "^0.6.15-rc.1",
+    "@jini-ai/agentic": "^0.6.15-rc.1",
+    "@jini-ai/cms": "^0.6.15-rc.1",
+    "@jini-ai/agent-plugins": "^0.6.15-rc.1"
   },
   "typesVersions": {
     "*": {