@jini-ai/admin 0.6.12 → 0.6.15-rc.2

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 0.6.13
+
+### Patch Changes
+
+- fddd084: Allow consent-enabled static HTML exports with native reopening controls and denied visitor defaults. Keep reopened preferences at the banner position and show dynamic-code help through the shared info-tip.
+- 0728914: Engine guard clean-up (`pnpm guard` 106 -> 0): layer, subpath-isolation and module-state findings fixed by moving
+  shared contracts to their owners instead of reaching across domains. Additive public API: `@jini-ai/core/filesystem`
+  (guarded-reader contracts), `useFetchQueryScope` from `@jini-ai/ui` fetch-query (per-provider query scope),
+  `@jini-ai/chat/react` re-exports of the accepted-input, run-state and agent-plugin chat-state helpers. The Claude
+  filesystem probe cache in `@jini-ai/agent-runtime` is instance-owned. No behaviour change intended; host-facing
+  breaks are listed in `owner-store-to-server` and `guard-host-ports`.
+
 ## 0.6.12
 
 ### Patch Changes

package/dist/browser/index.d.ts

@@ -6,4 +6,5 @@
  */
 export { NAVIGATION_EVENT, installInternalLinkInterceptor, navigate, readRoutePath, subscribeToRoute, } from './navigation.js';
 export { createAdminShellNavigation } from './shell-navigation.js';
+export { createBrowserTelemetry, installBrowserErrorListeners, type BrowserTelemetry, type BrowserTelemetryDeps, type BrowserTelemetryPayload } from './telemetry.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/browser/index.js

@@ -6,4 +6,5 @@
  */
 export { NAVIGATION_EVENT, installInternalLinkInterceptor, navigate, readRoutePath, subscribeToRoute, } from './navigation.js';
 export { createAdminShellNavigation } from './shell-navigation.js';
+export { createBrowserTelemetry, installBrowserErrorListeners } from './telemetry.js';
 //# sourceMappingURL=index.js.map

package/dist/browser/telemetry.d.ts

@@ -0,0 +1,45 @@
+/** Browser telemetry over host-bound transport, timers and session state. Route names stay with the host. */
+export type BrowserTelemetryPayload = {
+    type: "error";
+    message: string;
+    stack: string;
+    componentStack?: string | undefined;
+    route: string;
+} | {
+    type: "pageview";
+    route: string;
+};
+export interface BrowserTelemetryDeps {
+    send(payload: BrowserTelemetryPayload): Promise<unknown>;
+    nowMs(): number;
+    setTimer(fn: () => void, ms: number): unknown;
+    clearTimer(handle: unknown): void;
+}
+export interface BrowserTelemetry {
+    /** Only a signed-in session can post; before sign-in everything is dropped. */
+    setSignedIn(signedIn: boolean): void;
+    /** The current route template; errors carry it, and a change sends a (debounced) page view. */
+    setRoute(route: string): void;
+    reportError(input: {
+        error: unknown;
+        componentStack?: string | undefined;
+    }): void;
+}
+/**
+ * Builds the telemetry engine over injected I/O so its dedupe, cap and debounce are testable.
+ * @complexity O(1) amortized per call; O(f) memory for at most {@link MAX_FINGERPRINTS} fingerprints.
+ */
+export declare function createBrowserTelemetry(deps: BrowserTelemetryDeps, { maxErrorsPerMinute, pageviewDelayMs, initialRoute }?: {
+    maxErrorsPerMinute?: number | undefined;
+    pageviewDelayMs?: number | undefined;
+    initialRoute?: string | undefined;
+}): BrowserTelemetry;
+/**
+ * Window-level errors the React root never sees (event handlers, timers, promises).
+ * @returns Uninstall.
+ */
+export declare function installBrowserErrorListeners({ target, telemetry }: {
+    target: Pick<Window, "addEventListener" | "removeEventListener">;
+    telemetry: Pick<BrowserTelemetry, "reportError">;
+}, _options?: {}): () => void;
+//# sourceMappingURL=telemetry.d.ts.map

package/dist/browser/telemetry.js

@@ -0,0 +1,108 @@
+/** Mirrors the server's caps (`browser-telemetry.ts`): longer text is cut here, not refused there. */
+const CAPS = { message: 1_000, stack: 8_000, componentStack: 4_000, route: 200 };
+const WINDOW_MS = 60_000;
+const DEDUPE_MS = 5 * 60_000;
+const MAX_FINGERPRINTS = 200;
+/** Message of an Error or a thrown string; any other thrown value is named by type only, never dumped. */
+function messageOf(error) {
+    if (error instanceof Error)
+        return error.message || error.name;
+    if (typeof error === "string")
+        return error;
+    return `Non-Error thrown (${error === null ? "null" : typeof error})`;
+}
+function errorPayload({ error, componentStack, route }) {
+    const stack = error instanceof Error && typeof error.stack === "string" ? error.stack : "";
+    const cs = componentStack ? componentStack.slice(0, CAPS.componentStack) : "";
+    return { type: "error", message: messageOf(error).slice(0, CAPS.message), stack: stack.slice(0, CAPS.stack), ...(cs ? { componentStack: cs } : {}), route };
+}
+/** Message + first stack frame: the same bug from the same place is one report, not hundreds. */
+function fingerprintOf(payload) {
+    const frame = payload.stack.split("\n").find((line) => /\bat\b|@/.test(line)) ?? "";
+    return `${payload.message}|${frame.trim()}`;
+}
+/**
+ * Builds the telemetry engine over injected I/O so its dedupe, cap and debounce are testable.
+ * @complexity O(1) amortized per call; O(f) memory for at most {@link MAX_FINGERPRINTS} fingerprints.
+ */
+export function createBrowserTelemetry(deps, { maxErrorsPerMinute = 10, pageviewDelayMs = 1_000, initialRoute = "" } = {}) {
+    let signedIn = false;
+    let route = initialRoute;
+    let lastPageview = null;
+    let timer = null;
+    let sentAt = [];
+    const seen = new Map();
+    const post = (payload) => {
+        try {
+            void deps.send(payload).catch(() => { });
+        }
+        catch { /* never throws */ }
+    };
+    const underCap = (now) => {
+        sentAt = sentAt.filter((at) => now - at < WINDOW_MS);
+        return sentAt.length < maxErrorsPerMinute;
+    };
+    const isRepeat = (fingerprint, now) => {
+        const last = seen.get(fingerprint);
+        if (last !== undefined && now - last < DEDUPE_MS)
+            return true;
+        seen.delete(fingerprint);
+        if (seen.size >= MAX_FINGERPRINTS)
+            seen.delete(seen.keys().next().value);
+        seen.set(fingerprint, now);
+        return false;
+    };
+    const flushPageview = () => {
+        timer = null;
+        if (!signedIn || route === lastPageview)
+            return;
+        lastPageview = route;
+        post({ type: "pageview", route });
+    };
+    return {
+        setSignedIn(next) { signedIn = next; if (!next)
+            lastPageview = null; },
+        setRoute(next) {
+            route = next.slice(0, CAPS.route);
+            try {
+                if (timer !== null)
+                    deps.clearTimer(timer);
+                timer = deps.setTimer(flushPageview, pageviewDelayMs);
+            }
+            catch { /* never throws */ }
+        },
+        reportError({ error, componentStack }) {
+            try {
+                if (!signedIn)
+                    return;
+                const payload = errorPayload({ error, componentStack, route });
+                const now = deps.nowMs();
+                if (isRepeat(fingerprintOf(payload), now) || !underCap(now))
+                    return;
+                sentAt.push(now);
+                post(payload);
+            }
+            catch { /* never throws */ }
+        },
+    };
+}
+/**
+ * Window-level errors the React root never sees (event handlers, timers, promises).
+ * @returns Uninstall.
+ */
+export function installBrowserErrorListeners({ target, telemetry }, _options = {}) {
+    const onError = (event) => {
+        // A cross-origin "Script error." carries nothing usable; skip it rather than report noise.
+        if (event.error === undefined || event.error === null)
+            return;
+        telemetry.reportError({ error: event.error });
+    };
+    const onRejection = (event) => telemetry.reportError({ error: event.reason });
+    target.addEventListener("error", onError);
+    target.addEventListener("unhandledrejection", onRejection);
+    return () => {
+        target.removeEventListener("error", onError);
+        target.removeEventListener("unhandledrejection", onRejection);
+    };
+}
+//# sourceMappingURL=telemetry.js.map

package/dist/comments/react/hooks/use-comment-queue.hooks.js

@@ -1,5 +1,5 @@
 import { createContext, createElement, useContext, useCallback, useEffect, useMemo, useRef } from 'react';
-import { useCachedLoader, useFetchQuery, useInvalidate } from '@jini-ai/ui/fetch-query';
+import { useCachedLoader, useFetchQuery, useInvalidate, useFetchQueryScope } from '@jini-ai/ui/fetch-query';
 import { AdminConfigError } from '../../../core/module/create-admin.js';
 import { useController } from '../../../core/react/use-controller.js';
 import { createCommentQueueController } from '../../controllers/comment-queue.controller.js';
@@ -18,19 +18,6 @@ const CommentQueueScopeContext = createContext(null);
 export function CommentQueueScopeProvider({ scope, children }) {
     return createElement(CommentQueueScopeContext.Provider, { value: scope }, children);
 }
-// Weak API keys preserve sharing between consumers without retaining APIs from previous sessions.
-// Explicit workspace/principal keys below also isolate hosts that retain one API across sessions.
-const queueScopes = new WeakMap();
-let nextQueueScope = 0;
-/** Allocate the API portion of a namespace; workspace/principal identity is keyed separately. */
-function queueScope({ api }, _optional = {}) {
-    let scope = queueScopes.get(api);
-    if (scope === undefined) {
-        scope = ++nextQueueScope;
-        queueScopes.set(api, scope);
-    }
-    return scope;
-}
 /** Preserve the hook's loading defaults while no controller from the current scope is attached. */
 function queueDisplay({ snapshot }, _optional = {}) {
     const { status, items, nextCursor, error, loadingMore, pendingPurge } = snapshot ?? BEFORE_FIRST_SNAPSHOT;
@@ -73,7 +60,10 @@ function useCursorPageLoader({ api, queueRoot, status, cursor }, _optional = {})
  */
 export function useCommentQueue({ api, scope, permissions = NO_GRANTS }, { t = englishComments, events } = {}) {
     const invalidate = useInvalidate();
-    const queueRoot = useMemo(() => [...KEYS.queueRoot, queueScope({ api }), scope.workspaceId, scope.principalId], [api, scope.workspaceId, scope.principalId]);
+    // Weak API keys preserve sharing between consumers without retaining APIs from previous sessions.
+    // Explicit workspace/principal keys below also isolate hosts that retain one API across sessions.
+    const apiScope = useFetchQueryScope({ owner: api });
+    const queueRoot = useMemo(() => [...KEYS.queueRoot, apiScope, scope.workspaceId, scope.principalId], [apiScope, scope.workspaceId, scope.principalId]);
     const invalidateQueue = useCallback(() => invalidate({ key: queueRoot }), [invalidate, queueRoot]);
     const loadPageRef = useRef(null);
     const { controller: attachedController, snapshot: attachedSnapshot } = useController({

package/dist/consent/react/ConsentFields.d.ts

@@ -20,8 +20,12 @@ export interface ConsentFieldsProps {
     /** Host max lengths per text field; the defaults are the engine's loosest bounds. */
     limits?: Readonly<Partial<Record<TextKey | 'policyVersion', number>>> | undefined;
 }
-/** Banner copy and its links. Text is always plain text; the engine never renders it as HTML. */
-export declare function ConsentBannerFields({ value, onChange, disabled, problems, dictionary, limits }: ConsentFieldsProps): import("react").JSX.Element;
+/** Banner copy and its links. Optional host modes report only a mode patch; the host's independent
+ * enabled switch stays authoritative. Text is always plain text.
+ * @example <ConsentBannerFields value={value} onChange={onChange} bannerModes={['jini', 'headless', 'off']} /> */
+export declare function ConsentBannerFields({ value, onChange, disabled, problems, dictionary, limits, bannerModes }: ConsentFieldsProps & {
+    bannerModes?: readonly NonNullable<ConsentSettingsView['bannerMode']>[] | undefined;
+}): import("react").JSX.Element;
 /** On/off, script policy, region behavior and the version that re-asks visitors when it changes. */
 export declare function ConsentRulesFields({ value, onChange, disabled, problems, dictionary, limits, regionModes }: ConsentFieldsProps & {
     regionModes?: readonly ConsentSettingsView['regionMode'][];

package/dist/consent/react/ConsentFields.js

@@ -1,6 +1,7 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useId } from 'react';
 import { defaultAdminTheme } from '@jini-ai/ui/theme';
+import { InfoTip } from '@jini-ai/ui/admin-widgets';
 import { pixelInputValue, problemsFor, useConsentSettingsPanel, usePolicyVersionInput } from './settings-panel.hooks.js';
 const BANNER_FIELDS = [
     { key: 'title', label: 'Banner title' }, { key: 'message', label: 'Banner message', multiline: true },
@@ -8,6 +9,7 @@ const BANNER_FIELDS = [
     { key: 'preferencesLabel', label: 'Preferences label' }, { key: 'privacyPolicyUrl', label: 'Privacy policy page URL' },
     { key: 'secondaryLinkLabel', label: 'Second link text' }, { key: 'secondaryLinkUrl', label: 'Second link URL' },
 ];
+const BANNER_MODE_LABELS = { jini: 'Jini banner', headless: 'My own', off: 'None' };
 const REGION_LABELS = {
     auto: 'Automatic (unknown region: opt-in)', 'opt-in': 'Opt-in everywhere (EU / UK)', 'opt-out': 'Opt-out everywhere (California)',
 };
@@ -38,11 +40,21 @@ function Field({ label, field, problems, children }) {
     const attributes = own.length ? { id, 'aria-invalid': true, 'aria-describedby': `${id}-problems` } : { id };
     return _jsxs("div", { className: "jini-consent-settings-field", children: [_jsx("label", { htmlFor: id, className: "jini-field-label", children: label }), children(attributes), _jsx(FieldProblems, { id: `${id}-problems`, problems: own })] });
 }
-/** Banner copy and its links. Text is always plain text; the engine never renders it as HTML. */
-export function ConsentBannerFields({ value, onChange, disabled = false, problems, dictionary, limits = {} }) {
+/** Host-supplied banner modes. Native radios provide keyboard selection; the hint keeps its space
+ * while hidden, and the parent fieldset supplies the disabled state. */
+function BannerModeFields({ value, onChange, dictionary, modes }) {
+    const id = useId();
+    const t = translator(dictionary);
+    const handlers = useConsentSettingsPanel({ value, onChange });
+    return _jsxs("fieldset", { className: "jini-consent-banner-modes", "aria-describedby": value.bannerMode === 'headless' ? `${id}-mode-hint` : undefined, children: [_jsx("legend", { children: t('Banner mode') }), _jsx("div", { className: "jini-consent-banner-options", children: modes.map(mode => _jsxs("label", { children: [_jsx("input", { type: "radio", name: `${id}-banner-mode`, value: mode, checked: (value.bannerMode ?? 'jini') === mode, onChange: handlers.bannerMode({ mode }) }), _jsx("span", { children: t(BANNER_MODE_LABELS[mode]) })] }, mode)) }), _jsx("p", { id: `${id}-mode-hint`, className: "jini-hint jini-consent-banner-mode-hint", style: { visibility: value.bannerMode === 'headless' ? 'visible' : 'hidden' }, children: t('Your banner calls window.jiniConsent.set(...)') })] });
+}
+/** Banner copy and its links. Optional host modes report only a mode patch; the host's independent
+ * enabled switch stays authoritative. Text is always plain text.
+ * @example <ConsentBannerFields value={value} onChange={onChange} bannerModes={['jini', 'headless', 'off']} /> */
+export function ConsentBannerFields({ value, onChange, disabled = false, problems, dictionary, limits = {}, bannerModes }) {
     const t = translator(dictionary);
     const handlers = useConsentSettingsPanel({ value, onChange });
-    return _jsxs("fieldset", { disabled: disabled, className: "jini-consent-settings-fields", children: [_jsx("legend", { children: t('Banner text') }), BANNER_FIELDS.map(({ key, label, multiline }) => _jsx(Field, { label: t(label), field: key, problems: problems, children: aria => multiline
+    return _jsxs("fieldset", { disabled: disabled, className: "jini-consent-settings-fields", children: [_jsx("legend", { children: t('Banner text') }), bannerModes && _jsx(BannerModeFields, { value: value, onChange: onChange, dictionary: dictionary, modes: bannerModes }), BANNER_FIELDS.map(({ key, label, multiline }) => _jsx(Field, { label: t(label), field: key, problems: problems, children: aria => multiline
                     ? _jsx("textarea", { className: "jini-input", value: value[key] ?? '', maxLength: limits[key] ?? 2000, rows: 3, onChange: handlers.text(key), ...aria })
                     : _jsx("input", { className: "jini-input", type: "text", value: value[key] ?? '', maxLength: limits[key] ?? 2000, onChange: handlers.text(key), ...aria }) }, key)), _jsx("p", { className: "jini-hint", children: t('Link a published privacy page, such as /privacy. The second link is optional.') })] });
 }
@@ -52,7 +64,7 @@ export function ConsentRulesFields({ value, onChange, disabled = false, problems
     const t = translator(dictionary);
     const handlers = useConsentSettingsPanel({ value, onChange });
     const modes = regionModes.includes(value.regionMode) ? regionModes : [value.regionMode, ...regionModes];
-    return _jsxs("fieldset", { disabled: disabled, className: "jini-consent-settings-fields", children: [_jsx("legend", { children: t('Rules') }), _jsxs("button", { type: "button", className: value.enabled ? 'jini-toggle-row on' : 'jini-toggle-row', role: "switch", "aria-checked": value.enabled, "aria-labelledby": `${id}-enabled`, "aria-describedby": `${id}-hint`, onClick: handlers.toggle, children: [_jsxs("span", { className: "jini-toggle-row-text", children: [_jsx("span", { id: `${id}-enabled`, className: "jini-toggle-row-label", children: t('Enable cookie consent on this site') }), _jsx("span", { id: `${id}-hint`, className: "jini-toggle-row-hint", children: t('Applies to published site pages.') })] }), _jsx("span", { className: "jini-toggle-row-switch", "aria-hidden": "true" })] }), value.enabled && _jsxs("button", { type: "button", className: value.allowUnsafeEval === true ? 'jini-toggle-row on' : 'jini-toggle-row', role: "switch", "aria-checked": value.allowUnsafeEval === true, "aria-labelledby": `${id}-eval`, "aria-describedby": `${id}-eval-hint`, onClick: handlers.toggleUnsafeEval, children: [_jsxs("span", { className: "jini-toggle-row-text", children: [_jsx("span", { id: `${id}-eval`, className: "jini-toggle-row-label", children: t('Allow dynamic code (unsafe-eval)') }), _jsx("span", { id: `${id}-eval-hint`, className: "jini-toggle-row-hint", children: t("Some themes need this. It weakens the site's script protection. Optional scripts still wait for consent.") })] }), _jsx("span", { className: "jini-toggle-row-switch", "aria-hidden": "true" })] }), _jsx(Field, { label: t('Region mode'), field: "regionMode", problems: problems, children: aria => _jsx("select", { className: "jini-input", value: value.regionMode, onChange: handlers.region, ...aria, children: modes.map(mode => _jsx("option", { value: mode, children: t(REGION_LABELS[mode]) }, mode)) }) }), _jsx("p", { className: "jini-hint", children: t('California permits optional categories until opt-out. Global Privacy Control always disables analytics and marketing.') }), _jsx(Field, { label: t('Policy version'), field: "policyVersion", problems: problems, children: aria => _jsx(PolicyVersionInput, { value: value.policyVersion, onChange: onChange, maxLength: limits.policyVersion ?? 128, aria: aria }) }), _jsx("p", { className: "jini-hint", children: t('Change the policy version to ask visitors to choose again.') })] });
+    return _jsxs("fieldset", { disabled: disabled, className: "jini-consent-settings-fields", children: [_jsx("legend", { children: t('Rules') }), _jsxs("button", { type: "button", className: value.enabled ? 'jini-toggle-row on' : 'jini-toggle-row', role: "switch", "aria-checked": value.enabled, "aria-labelledby": `${id}-enabled`, "aria-describedby": `${id}-hint`, onClick: handlers.toggle, children: [_jsxs("span", { className: "jini-toggle-row-text", children: [_jsx("span", { id: `${id}-enabled`, className: "jini-toggle-row-label", children: t('Enable cookie consent on this site') }), _jsx("span", { id: `${id}-hint`, className: "jini-toggle-row-hint", children: t('Applies to published site pages.') })] }), _jsx("span", { className: "jini-toggle-row-switch", "aria-hidden": "true" })] }), value.enabled && _jsxs("div", { style: { display: 'flex', alignItems: 'center', gap: 8 }, children: [_jsxs("button", { type: "button", className: value.allowUnsafeEval === true ? 'jini-toggle-row on' : 'jini-toggle-row', role: "switch", "aria-checked": value.allowUnsafeEval === true, "aria-labelledby": `${id}-eval`, "aria-describedby": `${id}-eval-hint`, onClick: handlers.toggleUnsafeEval, children: [_jsx("span", { className: "jini-toggle-row-text", children: _jsx("span", { id: `${id}-eval`, className: "jini-toggle-row-label", children: t('Allow dynamic code (unsafe-eval)') }) }), _jsx("span", { className: "jini-toggle-row-switch", "aria-hidden": "true" })] }), _jsx(InfoTip, { triggerLabel: t('About dynamic code'), descriptionId: `${id}-eval-hint`, label: t("Some themes need this. It weakens the site's script protection. Optional scripts still wait for consent.") })] }), _jsx(Field, { label: t('Region mode'), field: "regionMode", problems: problems, children: aria => _jsx("select", { className: "jini-input", value: value.regionMode, onChange: handlers.region, ...aria, children: modes.map(mode => _jsx("option", { value: mode, children: t(REGION_LABELS[mode]) }, mode)) }) }), _jsx("p", { className: "jini-hint", children: t('California permits optional categories until opt-out. Global Privacy Control always disables analytics and marketing.') }), _jsx(Field, { label: t('Policy version'), field: "policyVersion", problems: problems, children: aria => _jsx(PolicyVersionInput, { value: value.policyVersion, onChange: onChange, maxLength: limits.policyVersion ?? 128, aria: aria }) }), _jsx("p", { className: "jini-hint", children: t('Change the policy version to ask visitors to choose again.') })] });
 }
 /** Placement, bounded appearance tokens and allowlisted custom CSS. The engine checks contrast and
  * CSS safety; its problems arrive on the `appearance` field and show under the custom CSS. */

package/dist/consent/react/ConsentSettingsPanel.d.ts

@@ -14,6 +14,8 @@ export interface ConsentSettingsView {
     enabled: boolean;
     /** Optional for older hosts; omitted means the dynamic code exception is off. */
     allowUnsafeEval?: boolean;
+    /** Optional for older hosts; omitted uses the Jini banner when consent is enabled. */
+    bannerMode?: 'jini' | 'headless' | 'off';
     regionMode: 'auto' | 'opt-in' | 'opt-out';
     policyVersion: string;
     privacyPolicyUrl: string;

package/dist/consent/react/settings-panel.hooks.d.ts

@@ -4,6 +4,9 @@ import type { ConsentAppearanceView, ConsentFieldProblem, ConsentSettingsPanelPr
 export declare function useConsentSettingsPanel({ value, onChange }: Pick<ConsentSettingsPanelProps, 'value' | 'onChange'>, _options?: {}): {
     toggle: () => void;
     toggleUnsafeEval: () => void;
+    bannerMode: ({ mode }: {
+        mode: NonNullable<ConsentSettingsView["bannerMode"]>;
+    }, _optional?: {}) => () => void;
     region: (event: ChangeEvent<HTMLSelectElement>) => void;
     placement: (event: ChangeEvent<HTMLSelectElement>) => void;
     text: (key: keyof ConsentSettingsView) => (event: ChangeEvent<HTMLInputElement | HTMLTextAreaElement>) => void;

package/dist/consent/react/settings-panel.hooks.js

@@ -4,6 +4,7 @@ export function useConsentSettingsPanel({ value, onChange }, _options = {}) {
     return {
         toggle: () => onChange({ patch: { enabled: !value.enabled } }),
         toggleUnsafeEval: () => onChange({ patch: { allowUnsafeEval: value.allowUnsafeEval !== true } }),
+        bannerMode: ({ mode }, _optional = {}) => () => onChange({ patch: { bannerMode: mode } }),
         region: (event) => onChange({ patch: { regionMode: event.target.value } }),
         placement: (event) => onChange({ patch: { placement: event.target.value } }),
         text: (key) => (event) => onChange({ patch: { [key]: event.target.value } }),

package/dist/forms/forms.module.d.ts

@@ -9,6 +9,10 @@ export declare const formsModule: {
         readonly formsNavigation: import("../core/module/token.js").AdminPortToken<import("./ports.js").FormsNavigationPort, "admin.forms.navigation">;
     };
     readonly messages: {
+        readonly "Basic spam protection is on.": "Basic spam protection is on.";
+        readonly "Hidden-field checks, submission timing when available, duplicate suppression, and rate limits.": "Hidden-field checks, submission timing when available, duplicate suppression, and rate limits.";
+        readonly "Live server defaults: wait 1 second; up to 5 submissions per minute per IP address and form.": "Live server defaults: wait 1 second; up to 5 submissions per minute per IP address and form.";
+        readonly "Exported forms use their destination's protection; timing and duplicate suppression may be unavailable. Custom embeds need the generated hidden controls for hidden-field checks.": "Exported forms use their destination's protection; timing and duplicate suppression may be unavailable. Custom embeds need the generated hidden controls for hidden-field checks.";
         readonly "Created / Updated": "Created / Updated";
         readonly "Created {created} \u00B7 Updated {updated}": "Created {created} · Updated {updated}";
         readonly "Created {date}": "Created {date}";

package/dist/forms/html-rules.js

@@ -1,4 +1,4 @@
-import { FIELD_TYPE_REGISTRY } from "@jini-ai/cms/forms";
+import { FIELD_TYPE_REGISTRY, escapeFormHtml } from "@jini-ai/cms/forms";
 /** Persisted descriptors, including those derived from HTML, supply column headers, choice labels and field types. */
 export function formAnswerColumns({ fields }, display = {}) {
     return fields.map((field) => {
@@ -85,9 +85,6 @@ export function formSubmissionRows({ data, answerColumns }, { unknownFieldLabel
         return { key, label: column?.header.trim() || unknownFieldLabel, value: formatted, file: formAnswerFile({ value }) };
     });
 }
-function escapeHtml(value) {
-    return value.replace(/[&<>"']/g, (char) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[char]);
-}
 const kindOf = (type) => Object.hasOwn(FIELD_TYPE_REGISTRY, type) ? FIELD_TYPE_REGISTRY[type] : { control: "input", htmlType: "text" };
 const isDefault = (field, value) => Array.isArray(field.default) ? field.default.includes(value) : field.default === value;
 /** Name, required and the stored constraints, as authored HTML attributes the CMS reads back. */
@@ -97,13 +94,13 @@ function starterAttributes(field, kind) {
         ["pattern", field.pattern], ["min", field.min], ["max", field.max], ["step", field.step], ["accept", field.accept?.join(",")],
         ...Object.entries(kind.attributes ?? {}),
     ];
-    return `name="${escapeHtml(field.id)}"${field.required ? " required" : ""}` +
-        constraints.filter(([, value]) => value != null && value !== "").map(([name, value]) => ` ${name}="${escapeHtml(String(value))}"`).join("");
+    return `name="${escapeFormHtml({ value: field.id })}"${field.required ? " required" : ""}` +
+        constraints.filter(([, value]) => value != null && value !== "").map(([name, value]) => ` ${name}="${escapeFormHtml({ value: String(value) })}"`).join("");
 }
 /** One field's starter markup; every control comes from the registry kind, as the public render does. */
 function starterField(field) {
     const kind = kindOf(field.type);
-    return starterRendererFor({ kind })({ field, kind, label: escapeHtml(field.label), attrs: starterAttributes(field, kind) });
+    return starterRendererFor({ kind })({ field, kind, label: escapeFormHtml({ value: field.label }), attrs: starterAttributes(field, kind) });
 }
 function starterRendererFor({ kind }) {
     if (kind.control === "group")
@@ -113,7 +110,7 @@ function starterRendererFor({ kind }) {
     if (kind.control === "textarea")
         return ({ label, attrs }) => `<label>${label}\n  <textarea ${attrs}></textarea>\n</label>`;
     if (kind.htmlType === "hidden")
-        return ({ field, label, attrs }) => `<input type="hidden" ${attrs} value="${escapeHtml(String(field.default ?? ""))}" aria-label="${label}">`;
+        return ({ field, label, attrs }) => `<input type="hidden" ${attrs} value="${escapeFormHtml({ value: String(field.default ?? "") })}" aria-label="${label}">`;
     if (kind.htmlType === "checkbox")
         return starterCheckbox;
     return ({ label, attrs }) => `<label>${label}\n  <input type="${kind.htmlType}" ${attrs}>\n</label>`;
@@ -123,16 +120,16 @@ function starterGroup({ field, kind, label, attrs }) {
     // Native `required` on every checkbox would demand ALL of them, so a checkbox group leaves it
     // off (the server still enforces one-or-more); a radio group's `required` means "pick one".
     const boxAttrs = kind.multiple ? starterAttributes({ ...field, required: false }, kind) : attrs;
-    const boxes = (field.options ?? []).map((option) => `  <label><input type="${kind.htmlType}" ${boxAttrs} value="${escapeHtml(option.value)}"${isDefault(field, option.value) ? " checked" : ""}> ${escapeHtml(option.label)}</label>`);
+    const boxes = (field.options ?? []).map((option) => `  <label><input type="${kind.htmlType}" ${boxAttrs} value="${escapeFormHtml({ value: option.value })}"${isDefault(field, option.value) ? " checked" : ""}> ${escapeFormHtml({ value: option.label })}</label>`);
     return `<fieldset>\n  <legend>${label}</legend>\n${boxes.join("\n")}\n</fieldset>`;
 }
 function starterSelect({ field, kind, label, attrs }) {
-    const empty = kind.multiple ? [] : [`    <option value="">${escapeHtml(field.placeholder ?? "Choose an option")}</option>`];
-    const choices = (field.options ?? []).map((option) => `    <option value="${escapeHtml(option.value)}"${isDefault(field, option.value) ? " selected" : ""}>${escapeHtml(option.label)}</option>`);
+    const empty = kind.multiple ? [] : [`    <option value="">${escapeFormHtml({ value: field.placeholder ?? "Choose an option" })}</option>`];
+    const choices = (field.options ?? []).map((option) => `    <option value="${escapeFormHtml({ value: option.value })}"${isDefault(field, option.value) ? " selected" : ""}>${escapeFormHtml({ value: option.label })}</option>`);
     return `<label>${label}\n  <select ${attrs}${kind.multiple ? " multiple" : ""}>\n${[...empty, ...choices].join("\n")}\n  </select>\n</label>`;
 }
 function starterCheckbox({ field, label, attrs }) {
-    const value = field.checkboxValue !== undefined ? ` value="${escapeHtml(field.checkboxValue)}"` : "";
+    const value = field.checkboxValue !== undefined ? ` value="${escapeFormHtml({ value: field.checkboxValue })}"` : "";
     const checked = field.default === true || (field.checkboxValue !== undefined && field.default === field.checkboxValue) ? " checked" : "";
     return `<label><input type="checkbox"${field.type === "toggle" ? ' role="switch"' : ""} ${attrs}${value}${checked}> ${label}</label>`;
 }
@@ -144,7 +141,7 @@ function starterCheckbox({ field, label, attrs }) {
  * @complexity O(f + o) for fields and their options; no I/O.
  */
 export function formHtmlStarter({ fields }, { submitLabel = "Send" } = {}) {
-    return fields.map(starterField).join("\n\n") + `\n\n<button type="submit">${escapeHtml(submitLabel)}</button>`;
+    return fields.map(starterField).join("\n\n") + `\n\n<button type="submit">${escapeFormHtml({ value: submitLabel })}</button>`;
 }
 export function formHtmlEmbed({ slug }, _optional = {}) {
     const config = JSON.stringify({ type: "form", id: slug, mode: "html" }).replace(/'/g, "&#39;");

package/dist/forms/messages.en.d.ts

@@ -1,5 +1,9 @@
 import type { FormsTranslator } from "./models.js";
 export declare const formsMessagesEn: {
+    readonly "Basic spam protection is on.": "Basic spam protection is on.";
+    readonly "Hidden-field checks, submission timing when available, duplicate suppression, and rate limits.": "Hidden-field checks, submission timing when available, duplicate suppression, and rate limits.";
+    readonly "Live server defaults: wait 1 second; up to 5 submissions per minute per IP address and form.": "Live server defaults: wait 1 second; up to 5 submissions per minute per IP address and form.";
+    readonly "Exported forms use their destination's protection; timing and duplicate suppression may be unavailable. Custom embeds need the generated hidden controls for hidden-field checks.": "Exported forms use their destination's protection; timing and duplicate suppression may be unavailable. Custom embeds need the generated hidden controls for hidden-field checks.";
     readonly "Created / Updated": "Created / Updated";
     readonly "Created {created} \u00B7 Updated {updated}": "Created {created} · Updated {updated}";
     readonly "Created {date}": "Created {date}";

package/dist/forms/messages.en.js

@@ -1,4 +1,8 @@
 export const formsMessagesEn = {
+    "Basic spam protection is on.": "Basic spam protection is on.",
+    "Hidden-field checks, submission timing when available, duplicate suppression, and rate limits.": "Hidden-field checks, submission timing when available, duplicate suppression, and rate limits.",
+    "Live server defaults: wait 1 second; up to 5 submissions per minute per IP address and form.": "Live server defaults: wait 1 second; up to 5 submissions per minute per IP address and form.",
+    "Exported forms use their destination's protection; timing and duplicate suppression may be unavailable. Custom embeds need the generated hidden controls for hidden-field checks.": "Exported forms use their destination's protection; timing and duplicate suppression may be unavailable. Custom embeds need the generated hidden controls for hidden-field checks.",
     "Created / Updated": "Created / Updated",
     "Created {created} · Updated {updated}": "Created {created} · Updated {updated}",
     "Created {date}": "Created {date}",

package/dist/forms/react/components/FormEditorFieldsBody.js

@@ -8,6 +8,6 @@ export function FormEditorFieldsBody(props) {
     return (_jsxs(_Fragment, { children: [_jsx("div", { className: "field-group", children: _jsxs("div", { className: "field-row", children: [_jsxs("div", { className: "field", children: [_jsx("label", { className: "field-label", htmlFor: "form-name", children: t("Name") }), _jsx("input", { id: "form-name", value: name, onChange: handlers.onName, ...agentHandle({ handle: "form-editor-name" }, { role: "field", label: "This form's display name" }) })] }), _jsxs("div", { className: "field", children: [_jsx("label", { className: "field-label", htmlFor: "form-slug", children: t("Slug") }), _jsx("input", { id: "form-slug", value: slug, disabled: !isNew, onChange: handlers.onSlug, ...agentHandle({ handle: "form-editor-slug" }, {
                                         role: "field",
                                         label: "This form's URL slug — only editable while creating a new form",
-                                    }) })] })] }) }), _jsx("div", { className: "field-group", children: _jsx(FormEditorModeSwitch, { props: props, handlers: handlers }) }), _jsx(FormEditorActions, { props: props })] }));
+                                    }) })] })] }) }), _jsx("div", { className: "field-group", children: _jsx(FormEditorModeSwitch, { props: props, handlers: handlers }) }), _jsxs("div", { className: "field-group", children: [_jsx("p", { children: _jsx("strong", { children: t("Basic spam protection is on.") }) }), _jsx("p", { className: "muted", children: t("Hidden-field checks, submission timing when available, duplicate suppression, and rate limits.") }), _jsx("p", { className: "muted", children: t("Live server defaults: wait 1 second; up to 5 submissions per minute per IP address and form.") }), _jsx("p", { className: "muted", children: t("Exported forms use their destination's protection; timing and duplicate suppression may be unavailable. Custom embeds need the generated hidden controls for hidden-field checks.") })] }), _jsx(FormEditorActions, { props: props })] }));
 }
 //# sourceMappingURL=FormEditorFieldsBody.js.map

package/dist/forms/react/index.d.ts

@@ -25,6 +25,10 @@ export declare function forms(_required: Record<string, never>, options?: FormsR
         readonly formsNavigation: import("../../core/module/token.js").AdminPortToken<import("../ports.js").FormsNavigationPort, "admin.forms.navigation">;
     };
     messages: {
+        readonly "Basic spam protection is on.": "Basic spam protection is on.";
+        readonly "Hidden-field checks, submission timing when available, duplicate suppression, and rate limits.": "Hidden-field checks, submission timing when available, duplicate suppression, and rate limits.";
+        readonly "Live server defaults: wait 1 second; up to 5 submissions per minute per IP address and form.": "Live server defaults: wait 1 second; up to 5 submissions per minute per IP address and form.";
+        readonly "Exported forms use their destination's protection; timing and duplicate suppression may be unavailable. Custom embeds need the generated hidden controls for hidden-field checks.": "Exported forms use their destination's protection; timing and duplicate suppression may be unavailable. Custom embeds need the generated hidden controls for hidden-field checks.";
         readonly "Created / Updated": "Created / Updated";
         readonly "Created {created} \u00B7 Updated {updated}": "Created {created} · Updated {updated}";
         readonly "Created {date}": "Created {date}";
@@ -243,6 +247,10 @@ export declare function forms(_required: Record<string, never>, options?: FormsR
                 readonly formsNavigation: import("../../core/module/token.js").AdminPortToken<import("../ports.js").FormsNavigationPort, "admin.forms.navigation">;
             };
             readonly messages: {
+                readonly "Basic spam protection is on.": "Basic spam protection is on.";
+                readonly "Hidden-field checks, submission timing when available, duplicate suppression, and rate limits.": "Hidden-field checks, submission timing when available, duplicate suppression, and rate limits.";
+                readonly "Live server defaults: wait 1 second; up to 5 submissions per minute per IP address and form.": "Live server defaults: wait 1 second; up to 5 submissions per minute per IP address and form.";
+                readonly "Exported forms use their destination's protection; timing and duplicate suppression may be unavailable. Custom embeds need the generated hidden controls for hidden-field checks.": "Exported forms use their destination's protection; timing and duplicate suppression may be unavailable. Custom embeds need the generated hidden controls for hidden-field checks.";
                 readonly "Created / Updated": "Created / Updated";
                 readonly "Created {created} \u00B7 Updated {updated}": "Created {created} · Updated {updated}";
                 readonly "Created {date}": "Created {date}";
@@ -465,6 +473,10 @@ export declare function forms(_required: Record<string, never>, options?: FormsR
                 readonly formsNavigation: import("../../core/module/token.js").AdminPortToken<import("../ports.js").FormsNavigationPort, "admin.forms.navigation">;
             };
             readonly messages: {
+                readonly "Basic spam protection is on.": "Basic spam protection is on.";
+                readonly "Hidden-field checks, submission timing when available, duplicate suppression, and rate limits.": "Hidden-field checks, submission timing when available, duplicate suppression, and rate limits.";
+                readonly "Live server defaults: wait 1 second; up to 5 submissions per minute per IP address and form.": "Live server defaults: wait 1 second; up to 5 submissions per minute per IP address and form.";
+                readonly "Exported forms use their destination's protection; timing and duplicate suppression may be unavailable. Custom embeds need the generated hidden controls for hidden-field checks.": "Exported forms use their destination's protection; timing and duplicate suppression may be unavailable. Custom embeds need the generated hidden controls for hidden-field checks.";
                 readonly "Created / Updated": "Created / Updated";
                 readonly "Created {created} \u00B7 Updated {updated}": "Created {created} · Updated {updated}";
                 readonly "Created {date}": "Created {date}";

package/dist/media/html-attributes.d.ts

@@ -1,13 +1,6 @@
-/** Browser-only live metadata hint, separate from server validation across the browser/Node
- * boundary. The server must enforce the same policy on writes and rendering independently.
- * Hints never gate Save: an invalid attribute once silently blocked saving unrelated title/alt/
- * caption/credit/class changes. Rejections must instead reach the authoritative atomic write.
- * One flat allowlist includes global and image/video extras: per-element name filtering is
- * unnecessary because an unused loading attribute on a wrapper is harmless. Extend the list,
- * not the tokenizer, when adding an allowed name. data-/aria- families remain open-ended. */
 export declare const MEDIA_HTML_ATTRIBUTE_ALLOWED_NAMES: readonly ["class", "id", "style", "title", "role", "tabindex", "lang", "dir", "hidden", "translate", "draggable", "loading", "decoding", "playsinline", "muted", "loop", "autoplay", "poster"];
 /** Whether `name` is on the allowlist — a well-formed attribute name
- *  ({@link MEDIA_HTML_ATTRIBUTE_NAME_PATTERN}) that is either an exact match against
+ *  (`/^[a-z][a-z0-9-]*$/`) that is either an exact match against
  *  {@link MEDIA_HTML_ATTRIBUTE_ALLOWED_NAMES} or carries a `data-`/`aria-` prefix (both open-ended
  *  families with no fixed suffix list). Case-insensitive: HTML attribute names are themselves
  *  case-insensitive, and an operator typing `DATA-FOO` should not slip past a lowercase-only check.

package/dist/media/html-attributes.js

@@ -5,44 +5,10 @@
  * One flat allowlist includes global and image/video extras: per-element name filtering is
  * unnecessary because an unused loading attribute on a wrapper is harmless. Extend the list,
  * not the tokenizer, when adding an allowed name. data-/aria- families remain open-ended. */
-export const MEDIA_HTML_ATTRIBUTE_ALLOWED_NAMES = [
-    // Global attributes (2026-09-23).
-    "class",
-    "id",
-    "style",
-    "title",
-    "role",
-    "tabindex",
-    "lang",
-    "dir",
-    "hidden",
-    "translate",
-    "draggable",
-    // Pre-existing <img>/<video> extras, kept everywhere (one list, not one per element).
-    "loading",
-    "decoding",
-    "playsinline",
-    "muted",
-    "loop",
-    "autoplay",
-    "poster",
-];
-/**
- * The shape EVERY accepted attribute name must have, checked before allowlist membership
- * (2026-09-07 stored-XSS fix; keep identical in `@jini-ai/cms/media`'s `html-attributes.ts` — see
- * that file's copy of this comment for the full incident).
- *
- * The `data-`/`aria-` families below are open-ended by design — no fixed suffix list — so the
- * prefix check alone accepted whatever characters {@link HTML_ATTRIBUTE_TOKEN}'s name class
- * (`[^\s="']+`, which excludes only whitespace, `=` and quotes) let through. `<`, `>` and `/` are
- * all legal in that class, and the server renderer templating a name into ` name="value"` escapes
- * only the VALUE — so a stored `data-x><svg/onload=alert(1)` closed the `<img>` and opened a live
- * `<svg onload>` on the public page. Constraining the NAME to the characters a real HTML attribute
- * name can contain is what makes "the value is escaped" sufficient.
- */
-const MEDIA_HTML_ATTRIBUTE_NAME_PATTERN = /^[a-z][a-z0-9-]*$/;
+import { EMBED_HTML_ATTRIBUTE_ALLOWED_NAMES, isAllowedEmbedHtmlAttributeName, parseEmbedHtmlAttributes, } from "@jini-ai/cms/widgets/markers";
+export const MEDIA_HTML_ATTRIBUTE_ALLOWED_NAMES = EMBED_HTML_ATTRIBUTE_ALLOWED_NAMES;
 /** Whether `name` is on the allowlist — a well-formed attribute name
- *  ({@link MEDIA_HTML_ATTRIBUTE_NAME_PATTERN}) that is either an exact match against
+ *  (`/^[a-z][a-z0-9-]*$/`) that is either an exact match against
  *  {@link MEDIA_HTML_ATTRIBUTE_ALLOWED_NAMES} or carries a `data-`/`aria-` prefix (both open-ended
  *  families with no fixed suffix list). Case-insensitive: HTML attribute names are themselves
  *  case-insensitive, and an operator typing `DATA-FOO` should not slip past a lowercase-only check.
@@ -51,82 +17,7 @@ const MEDIA_HTML_ATTRIBUTE_NAME_PATTERN = /^[a-z][a-z0-9-]*$/;
  * one fixed-length array lookup.
  */
 export function isAllowedMediaHtmlAttributeName({ name }, _optional = {}) {
-    const lower = name.toLowerCase();
-    if (!MEDIA_HTML_ATTRIBUTE_NAME_PATTERN.test(lower))
-        return false;
-    if (lower.startsWith("data-") || lower.startsWith("aria-"))
-        return true;
-    return MEDIA_HTML_ATTRIBUTE_ALLOWED_NAMES.includes(lower);
-}
-/** Matches one `name`, or one `name="value"`/`name='value'`/`name=value` pair — the same loose
- *  shape real HTML attribute syntax allows, since that is the syntax an operator typing this field
- *  would naturally reach for. */
-const HTML_ATTRIBUTE_TOKEN = /([^\s="']+)(?:=(?:"([^"]*)"|'([^']*)'|([^\s"']+)))?/g;
-/** The highest ASCII code point {@link isUnsafeMediaUrlValue} strips: every C0 control character
- *  plus the ordinary space, i.e. code points `0`-`32` inclusive. Named rather than written as an
- *  inline regex control-character range so the linter never has to reason about a literal control
- *  character inside a pattern. Ported from the shared server parser, `html-attributes.ts`. */
-const ASCII_WHITESPACE_OR_CONTROL_MAX_CODE_POINT = 0x20;
-/**
- * Whether `value`'s scheme, once every ASCII whitespace/control character (code points `0`-`32`) is
- * stripped and the result lowercased, starts with `javascript:`, `vbscript:` or `data:` — the three
- * schemes a browser will still execute or navigate to even when the URL carries interior whitespace
- * a naive end-trim (the old `.trim()`-only check) would miss, e.g. `java\tscript:x`: browsers strip
- * tabs and newlines from inside a URL before parsing its scheme, so this check must too. Ported
- * 2026-09-23 from the shared server parser's `isUnsafeUrlValue` (`html-attributes.ts`).
- *
- * @complexity O(n) in the value's length (one filter pass, one prefix test).
- */
-function isUnsafeMediaUrlValue(value) {
-    let stripped = "";
-    for (const char of value) {
-        // `char` is never empty, so `charCodeAt(0)` is always a number; for an astral character it is
-        // the high surrogate (>= 0xD800), which is kept exactly as the full code point would be.
-        if (char.charCodeAt(0) > ASCII_WHITESPACE_OR_CONTROL_MAX_CODE_POINT)
-            stripped += char;
-    }
-    stripped = stripped.toLowerCase();
-    return stripped.startsWith("javascript:") || stripped.startsWith("vbscript:") || stripped.startsWith("data:");
-}
-/**
- * Whether a `style` value carries a known CSS injection or CSS-escape-bypass vector:
- * `expression(...)` (legacy IE script-in-CSS), a `javascript:`/`vbscript:` value inside a CSS
- * `url(...)`, `-moz-binding`/`behavior:` (XBL/HTC script bindings), `@import` (pulls in a second,
- * unvetted stylesheet), or ANY backslash — a CSS escape sequence (`\65` is `e`) can respell any of
- * the above past a plain substring check, so a backslash anywhere in the value is rejected outright.
- * Plain `url(...)` values (background images) are otherwise allowed. Ported 2026-09-23 from the
- * shared server parser's `isUnsafeStyleValue` (`html-attributes.ts`).
- *
- * @complexity O(n) in the value's length (one regex test).
- */
-const UNSAFE_MEDIA_STYLE_PATTERN = /expression\(|javascript:|vbscript:|-moz-binding|behavior:|@import|\\/i;
-function isUnsafeMediaStyleValue(value) {
-    return UNSAFE_MEDIA_STYLE_PATTERN.test(value);
-}
-/** Classifies one already-tokenized `name`/`value` pair. Split out of {@link parseMediaHtmlAttributes}
- *  so each rejection reason is its own directly testable branch, and so the loop below reads as
- *  "tokenize, then classify" rather than one function doing both.
- *
- * Order matters (ported 2026-09-23 from the shared server parser's `classifyEmbedHtmlAttributeToken`):
- * `on*` is checked FIRST (so an `onerror` always reports as `event-handler`, the more actionable
- * reason, never the generic `disallowed-name`), then the URL-scheme check runs against EVERY value
- * regardless of name (matching the pre-existing `javascript:` check this is ported from), then
- * allowlist membership, then — only for an already-allowed `style` — the CSS-specific unsafe-value
- * check.
- *
- * @complexity O(1) — four fixed checks against one already-extracted token; each check's own O(n) in
- * the token's length is linear, not nested.
- */
-function classifyMediaHtmlAttributeToken(name, value) {
-    if (name.startsWith("on"))
-        return { reason: "event-handler", attribute: name };
-    if (isUnsafeMediaUrlValue(value))
-        return { reason: "unsafe-url", attribute: name };
-    if (!isAllowedMediaHtmlAttributeName({ name }))
-        return { reason: "disallowed-name", attribute: name };
-    if (name === "style" && isUnsafeMediaStyleValue(value))
-        return { reason: "unsafe-style", attribute: name };
-    return null;
+    return isAllowedEmbedHtmlAttributeName({ name });
 }
 /**
  * Parses the `HTML attributes` field's free text (`name="value" name2="value2"`, or a bare
@@ -154,54 +45,8 @@ function classifyMediaHtmlAttributeToken(name, value) {
  *   attributes plus O(e) for e rejected tokens.
  */
 export function parseMediaHtmlAttributes({ text }, _optional = {}) {
-    const trimmed = text.trim();
-    if (trimmed === "")
-        return { attributes: {}, errors: [], error: null };
-    const attributes = {};
-    const errors = [];
-    HTML_ATTRIBUTE_TOKEN.lastIndex = 0;
-    let consumed = 0;
-    // A `for` loop (rather than `while ((match = …exec(trimmed)) !== null)`) keeps every assignment
-    // to `match` in statement position, never inside the loop's own test expression.
-    for (let match = HTML_ATTRIBUTE_TOKEN.exec(trimmed); match !== null; match = HTML_ATTRIBUTE_TOKEN.exec(trimmed)) {
-        // Non-whitespace text between the previous match and this one is a fragment the token pattern
-        // could not parse as a name (e.g. a stray quote) — the tokenizer has lost sync, so everything
-        // parsed so far is discarded rather than trusted.
-        const skipped = trimmed.slice(consumed, match.index).trim();
-        if (skipped !== "")
-            return malformedMediaHtmlAttributes({ errors, fragment: skipped });
-        consumed = match.index + match[0].length;
-        const { name, value } = readMediaHtmlAttributeToken({ match });
-        const rejection = classifyMediaHtmlAttributeToken(name, value);
-        if (rejection) {
-            errors.push(rejection);
-            continue;
-        }
-        attributes[name] = value;
-    }
-    const trailing = trimmed.slice(consumed).trim();
-    if (trailing !== "")
-        return malformedMediaHtmlAttributes({ errors, fragment: trailing });
-    return { attributes, errors, error: errors[0] ?? null };
-}
-/** The lowercased name and the value of one {@link HTML_ATTRIBUTE_TOKEN} match: whichever of the
- *  double-quoted, single-quoted or unquoted value groups matched, or `""` for a bare boolean name.
- *
- * @complexity O(n) in the name's length (one lowercase pass).
- */
-function readMediaHtmlAttributeToken({ match }, _optional = {}) {
-    return { name: match[1].toLowerCase(), value: match[2] ?? match[3] ?? match[4] ?? "" };
-}
-/** The fail-closed result once the tokenizer loses sync: `fragment` (already trimmed) is appended
- *  to `errors` as the final `malformed` entry, and every accepted attribute is discarded — see
- *  {@link parseMediaHtmlAttributes}'s header for why. Mutates `errors` (the caller's own list).
- *
- * @complexity O(1).
- */
-function malformedMediaHtmlAttributes({ errors, fragment }, _optional = {}) {
-    const malformed = { reason: "malformed", attribute: fragment };
-    errors.push(malformed);
-    return { attributes: {}, errors, error: malformed };
+    // Media hints always use inline-attribute policy; stylesheet escape allowances do not apply.
+    return parseEmbedHtmlAttributes({ text });
 }
 /** The hint names the rejected token so operators can distinguish a typo from a hard no.
  * This is client feedback only; the server must independently enforce write/render policy. */

package/dist/seo/react/hooks/SeoPage.hooks.d.ts

@@ -1,4 +1,4 @@
-import type { FormEvent, ComponentType } from 'react';
+import type { FormEvent } from 'react';
 import type { TabBarTab } from '@jini-ai/ui/tab-strip';
 import type { SeoTranslator, SeoSettingsPatch, SeoSettings, SeoEntryAnalysis } from '../../models.js';
 export { buildSeoSettingsPatch, resolveSeoTabId } from '../../rules.js';
@@ -47,24 +47,4 @@ export interface SeoTabController {
     regenerateSitemap: () => void;
     openSitemapModal: () => void;
 }
-/** Panel selection is presentation dispatch; this never changes the defaults form's field set. */
-export declare function seoTabPanel({ activeTabId, controller, components }: {
-    activeTabId: import('../../rules.js').SeoTabId;
-    controller: SeoTabController;
-    components: {
-        SeoDefaultsTab: ComponentType<{
-            controller: SeoTabController;
-        }>;
-        SeoSitemapTab: ComponentType<{
-            controller: SeoTabController;
-        }>;
-        SeoEntrySection: ComponentType<{
-            locale: string;
-        }>;
-    };
-}, _optional?: Record<string, never>): import("react").ReactElement<{
-    controller: SeoTabController;
-}, string | import("react").JSXElementConstructor<any>> | import("react").ReactElement<{
-    locale: string;
-}, string | import("react").JSXElementConstructor<any>>;
 //# sourceMappingURL=SeoPage.hooks.d.ts.map

package/dist/seo/react/hooks/SeoPage.hooks.js

@@ -26,12 +26,4 @@ export function useAnalyzePanel({ analysis }, _optional = {}) {
 export function useSeoDefaults({ save }, _optional = {}) {
     return { submit: (event) => { event.preventDefault(); void save(buildSeoSettingsPatch({ form: new FormData(event.currentTarget) })); } };
 }
-/** Panel selection is presentation dispatch; this never changes the defaults form's field set. */
-export function seoTabPanel({ activeTabId, controller, components }, _optional = {}) {
-    if (activeTabId === 'sitemap')
-        return createElement(components.SeoSitemapTab, { controller });
-    if (activeTabId === 'entries')
-        return createElement(components.SeoEntrySection, { locale: controller.locale });
-    return createElement(components.SeoDefaultsTab, { controller });
-}
 //# sourceMappingURL=SeoPage.hooks.js.map

package/dist/seo/react/pages/SeoPage.js

@@ -1,5 +1,5 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
-import { useAnalyzePanel, useSeoDefaults, useSeoTabs, seoTabPanel } from "../hooks/SeoPage.hooks.js";
+import { useAnalyzePanel, useSeoDefaults, useSeoTabs } from "../hooks/SeoPage.hooks.js";
 import { agentHandle } from "@jini-ai/agentic";
 import { TabBar } from "@jini-ai/ui/tab-strip";
 import { InfoTip, Select } from "@jini-ai/ui/admin-widgets";
@@ -230,7 +230,15 @@ export function Seo({ tabId, onTabChange, useSeoHook = useWiredSeo } = {}) {
         regenerateSitemap,
         openSitemapModal,
     };
-    return (_jsxs("div", { className: "jini-page jini-seo-page", children: [_jsxs("div", { className: "jini-page-header", children: [_jsxs("div", { className: "jini-page-header-text", children: [_jsx("p", { className: "jini-page-kicker", children: t({ locale: locale, key: "Marketing" }) }), _jsx("h1", { className: "jini-page-title", children: "SEO" }), _jsx("p", { className: "jini-page-description", children: t({ locale: locale, key: "Site-wide defaults for meta titles, descriptions, social previews, and robots directives." }) })] }), _jsx("div", { className: "jini-page-actions", children: headerActions })] }), error ? _jsx("div", { className: "jini-notice jini-notice-error", children: error }) : null, notice ? _jsx("div", { className: "jini-notice", children: notice }) : null, _jsx(TabBar, { ariaLabel: "SEO", tabs: tabs, activeId: activeTabId, onChange: changeTab, containerHandle: "seo-tab-bar" }), seoTabPanel({ activeTabId, controller, components: { SeoDefaultsTab, SeoSitemapTab, SeoEntrySection } }), sitemapModalOpen ? (_jsx(SitemapModal, { locale: locale, sitemapEnabled: settings.sitemapEnabled, regenerating: saving, onRegenerate: regenerateSitemap, onClose: closeSitemapModal })) : null] }));
+    return (_jsxs("div", { className: "jini-page jini-seo-page", children: [_jsxs("div", { className: "jini-page-header", children: [_jsxs("div", { className: "jini-page-header-text", children: [_jsx("p", { className: "jini-page-kicker", children: t({ locale: locale, key: "Marketing" }) }), _jsx("h1", { className: "jini-page-title", children: "SEO" }), _jsx("p", { className: "jini-page-description", children: t({ locale: locale, key: "Site-wide defaults for meta titles, descriptions, social previews, and robots directives." }) })] }), _jsx("div", { className: "jini-page-actions", children: headerActions })] }), error ? _jsx("div", { className: "jini-notice jini-notice-error", children: error }) : null, notice ? _jsx("div", { className: "jini-notice", children: notice }) : null, _jsx(TabBar, { ariaLabel: "SEO", tabs: tabs, activeId: activeTabId, onChange: changeTab, containerHandle: "seo-tab-bar" }), seoTabPanel({ activeTabId, controller }), sitemapModalOpen ? (_jsx(SitemapModal, { locale: locale, sitemapEnabled: settings.sitemapEnabled, regenerating: saving, onRegenerate: regenerateSitemap, onClose: closeSitemapModal })) : null] }));
+}
+/** Panel selection is presentation dispatch; this never changes the defaults form's field set. */
+function seoTabPanel({ activeTabId, controller }, _optional = {}) {
+    if (activeTabId === 'sitemap')
+        return _jsx(SeoSitemapTab, { controller: controller });
+    if (activeTabId === 'entries')
+        return _jsx(SeoEntrySection, { locale: controller.locale });
+    return _jsx(SeoDefaultsTab, { controller: controller });
 }
 export { Seo as SeoPage };
 export default Seo;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jini-ai/admin",
-  "version": "0.6.12",
+  "version": "0.6.15-rc.2",
   "description": "Composable admin surface for Jini-hosted products: framework-free contracts, panel registry, and route model in `/core`; React shell and panels in `/react`. Import only the layers you need.",
   "license": "Apache-2.0",
   "repository": {
@@ -448,12 +448,12 @@
   "peerDependencies": {
     "react": "^18.3.0 || ^19.0.0",
     "react-dom": "^18.3.0 || ^19.0.0",
-    "@jini-ai/agentic": "^0.6.10",
-    "@jini-ai/ui": "^0.6.10",
-    "@jini-ai/ui-kit": "^0.6.10",
-    "@jini-ai/agent-plugins": "^0.6.10",
-    "@jini-ai/cms": "^0.6.10",
-    "@jini-ai/core": "^0.6.10"
+    "@jini-ai/agentic": "^0.6.15-rc.2",
+    "@jini-ai/ui": "^0.6.15-rc.2",
+    "@jini-ai/ui-kit": "^0.6.15-rc.2",
+    "@jini-ai/agent-plugins": "^0.6.15-rc.2",
+    "@jini-ai/cms": "^0.6.15-rc.2",
+    "@jini-ai/core": "^0.6.15-rc.2"
   },
   "peerDependenciesMeta": {
     "react": {
@@ -491,12 +491,12 @@
     "react": "^19.2.0",
     "react-dom": "^19.2.0",
     "@testing-library/user-event": "^14.6.1",
-    "@jini-ai/ui": "^0.6.12",
-    "@jini-ai/agentic": "^0.6.12",
-    "@jini-ai/ui-kit": "^0.6.12",
-    "@jini-ai/agent-plugins": "^0.6.12",
-    "@jini-ai/cms": "^0.6.12",
-    "@jini-ai/core": "^0.6.12"
+    "@jini-ai/agentic": "^0.6.15-rc.2",
+    "@jini-ai/core": "^0.6.15-rc.2",
+    "@jini-ai/agent-plugins": "^0.6.15-rc.2",
+    "@jini-ai/cms": "^0.6.15-rc.2",
+    "@jini-ai/ui": "^0.6.15-rc.2",
+    "@jini-ai/ui-kit": "^0.6.15-rc.2"
   },
   "typesVersions": {
     "*": {