@jini-ai/cms 0.5.6 → 0.5.7

package/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 0.5.7 — 2026-10-12
+
+- New render-only leaf subpaths: `./forms/html-render`, `./forms/submission-attempts`, `./widgets/page-embed-types`, `./widgets/html/html-embeds`, `./widgets/html/gallery-render`, `./navigation/types`, `./navigation/dropdown` and `./media/slug` (the media slug rule, still re-exported from `./media`). Existing barrels are unchanged.
+
 ## 0.5.4 — 2026-10-08
 
 - Ships `dist/forms/**`: 0.5.3's `files` negation `!forms/**` also stripped `dist/forms`, so `@jini-ai/cms/forms` (and `/html`, `/sql`, `/express`) failed to resolve. The negation is removed: `files` already ships only `dist`, and the nested `forms/` package is never packed.

package/dist/media/media-service.d.ts

@@ -1,3 +1,4 @@
+export { isValidMediaSlugFormat } from "./slug.js";
 import type { Clock, IdGenerator, UUID } from "@jini-ai/core/primitives";
 import { MediaConflictError, MediaNotFoundError, MediaSourceImmutableError, MediaStillReferencedError, MediaValidationError, type MediaRecord, type MediaSource } from "./types.js";
 import type { AssetBlobRepoPort, AssetRenditionRepoPort, BlobStorePort, MediaRepoPort } from "./ports.js";
@@ -53,9 +54,6 @@ export declare function resolveWriteOnceSource(required: {
     existing: MediaSource | undefined;
     requestedSha256: string;
 }, _optional?: Record<string, never>): MediaSource;
-export declare function isValidMediaSlugFormat(requiredArgs: {
-    slug: string;
-}, optionalArgs?: Record<string, never>): boolean;
 export interface UploadMediaInput {
     workspaceId: UUID;
     bytes: Uint8Array;

package/dist/media/media-service.js

@@ -1,3 +1,5 @@
+import { isValidMediaSlugFormat } from "./slug.js";
+export { isValidMediaSlugFormat } from "./slug.js";
 import { createSystemClock } from "@jini-ai/core/primitives";
 import { nowIso as kernelNowIso } from "@jini-ai/core/primitives";
 /**
@@ -145,28 +147,6 @@ function deriveTitleFromFilename(filename) {
     const base = filename.trim().replace(/\.[^./\\]+$/, "");
     return base.trim() || "Untitled";
 }
-/** Shared slug-format rule (2026-09-07) — same shape as `post`'s `SLUG_FORMAT_PATTERN`: lowercase
- *  letters, digits, and dashes only. Media slugs have no reserved-word list (`post`'s `admin`/`api`
- *  exclusions exist because a post slug can become a literal URL path segment a route dispatches
- *  on; a media slug is only ever a lookup key, never a route itself, so that hazard doesn't apply). */
-const MEDIA_SLUG_FORMAT_PATTERN = /^[a-z0-9-]+$/;
-/**
- * Slugs that spell a UUID are refused outright (2026-09-07 fix).
- *
- * A lowercase UUID is `[a-z0-9-]+` character for character, so {@link MEDIA_SLUG_FORMAT_PATTERN}
- * happily accepted one — and {@link findMediaByIdOrSlug} used to resolve SLUG FIRST, so pointing one
- * asset's slug at another asset's `id` silently took over every reference already authored against
- * that id (every `/m/{id}/…` URL a host's renderer has ever emitted for the victim). That resolution
- * order is now id-first, which closes the hijack for rows that already carry such a slug; this rule
- * is the write-path half — a slug that can only ever shadow an id is not a slug anyone wants, so it
- * is refused where a human can still see why rather than silently shadowed at read time.
- *
- * Shape-based, not a lookup: it rejects EVERY UUID-shaped value, not only ones that currently
- * collide, so a slug cannot become a hijack later when some future upload happens to mint that id.
- * Ordinary hex-and-dash slugs (`abc-123-def`, `2026-09-07-launch-clip`) are unaffected — nothing but
- * the exact 8-4-4-4-12 hex grouping matches.
- */
-const MEDIA_SLUG_UUID_SHAPE_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
 /** Shared slug max-length rule (2026-09-07) — same bound as `post.ts`'s `MAX_SLUG_LENGTH`, reused
  *  rather than inventing a second number. `post.ts` only enforces this on its EXPLICIT/caller-
  *  supplied slug path (`resolveExplicitSlug`, reject-with-error); its own title-derived path is
@@ -177,10 +157,6 @@ const MEDIA_SLUG_UUID_SHAPE_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9
  *  human for a shorter value — silently truncating an internally-derived value is the same
  *  "coerce, don't fail" convention `deriveTitleFromFilename`/`slugifyMediaTitle` already use. */
 const MEDIA_MAX_SLUG_LENGTH = 120;
-export function isValidMediaSlugFormat(requiredArgs, optionalArgs = {}) {
-    const { slug } = requiredArgs;
-    return MEDIA_SLUG_FORMAT_PATTERN.test(slug) && !MEDIA_SLUG_UUID_SHAPE_PATTERN.test(slug);
-}
 /** Truncates a slug candidate to `maxLength`, stripping a trailing dash the cut can introduce (so a
  *  truncation never leaves a slug ending mid-word with a dangling "-"), falling back to `"untitled"`
  *  if nothing legible survives (only reachable when `maxLength` itself is tiny, e.g. while reserving

package/dist/media/slug.d.ts

@@ -0,0 +1,8 @@
+/** Return whether a media lookup slug has the accepted shape, without I/O.
+ * @complexity O(n) time in the slug length, O(1) space.
+ * @example isValidMediaSlugFormat({ slug: "summer-photo" }); // true
+ */
+export declare function isValidMediaSlugFormat(requiredArgs: {
+    slug: string;
+}, optionalArgs?: Record<string, never>): boolean;
+//# sourceMappingURL=slug.d.ts.map

package/dist/media/slug.js

@@ -0,0 +1,32 @@
+/** @file Pure media slug policy; writes and public URL rendering share the same format and UUID-shadowing rule. */
+/** Shared slug-format rule (2026-09-07) — same shape as `post`'s `SLUG_FORMAT_PATTERN`: lowercase
+ *  letters, digits, and dashes only. Media slugs have no reserved-word list (`post`'s `admin`/`api`
+ *  exclusions exist because a post slug can become a literal URL path segment a route dispatches
+ *  on; a media slug is only ever a lookup key, never a route itself, so that hazard doesn't apply). */
+const MEDIA_SLUG_FORMAT_PATTERN = /^[a-z0-9-]+$/;
+/**
+ * Slugs that spell a UUID are refused outright (2026-09-07 fix).
+ *
+ * A lowercase UUID is `[a-z0-9-]+` character for character, so {@link MEDIA_SLUG_FORMAT_PATTERN}
+ * happily accepted one — and {@link findMediaByIdOrSlug} used to resolve SLUG FIRST, so pointing one
+ * asset's slug at another asset's `id` silently took over every reference already authored against
+ * that id (every `/m/{id}/…` URL a host's renderer has ever emitted for the victim). That resolution
+ * order is now id-first, which closes the hijack for rows that already carry such a slug; this rule
+ * is the write-path half — a slug that can only ever shadow an id is not a slug anyone wants, so it
+ * is refused where a human can still see why rather than silently shadowed at read time.
+ *
+ * Shape-based, not a lookup: it rejects EVERY UUID-shaped value, not only ones that currently
+ * collide, so a slug cannot become a hijack later when some future upload happens to mint that id.
+ * Ordinary hex-and-dash slugs (`abc-123-def`, `2026-09-07-launch-clip`) are unaffected — nothing but
+ * the exact 8-4-4-4-12 hex grouping matches.
+ */
+const MEDIA_SLUG_UUID_SHAPE_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
+/** Return whether a media lookup slug has the accepted shape, without I/O.
+ * @complexity O(n) time in the slug length, O(1) space.
+ * @example isValidMediaSlugFormat({ slug: "summer-photo" }); // true
+ */
+export function isValidMediaSlugFormat(requiredArgs, optionalArgs = {}) {
+    const { slug } = requiredArgs;
+    return MEDIA_SLUG_FORMAT_PATTERN.test(slug) && !MEDIA_SLUG_UUID_SHAPE_PATTERN.test(slug);
+}
+//# sourceMappingURL=slug.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jini-ai/cms",
-  "version": "0.5.6",
+  "version": "0.5.7",
   "description": "Content-model capability for Jini-hosted products: framework-free contracts, ports, and domain services in `/core` and per-domain subpaths; Node-bound adapters in domain-specific subpaths.",
   "license": "Apache-2.0",
   "repository": {
@@ -29,6 +29,14 @@
       "./trash": "universal",
       "./settings/express": "node",
       "./media/node": "node",
+      "./forms/html-render": "universal",
+      "./forms/submission-attempts": "universal",
+      "./widgets/page-embed-types": "universal",
+      "./widgets/html/html-embeds": "node",
+      "./widgets/html/gallery-render": "universal",
+      "./navigation/types": "universal",
+      "./navigation/dropdown": "universal",
+      "./media/slug": "universal",
       "./forms": "universal",
       "./forms/html": "node",
       "./forms/sql": "node",
@@ -214,6 +222,46 @@
       "import": "./dist/media/node.js",
       "default": "./dist/media/node.js"
     },
+    "./forms/html-render": {
+      "types": "./dist/forms/html-render.d.ts",
+      "import": "./dist/forms/html-render.js",
+      "default": "./dist/forms/html-render.js"
+    },
+    "./forms/submission-attempts": {
+      "types": "./dist/forms/submission-attempts.d.ts",
+      "import": "./dist/forms/submission-attempts.js",
+      "default": "./dist/forms/submission-attempts.js"
+    },
+    "./widgets/page-embed-types": {
+      "types": "./dist/widgets/page-embed-types.d.ts",
+      "import": "./dist/widgets/page-embed-types.js",
+      "default": "./dist/widgets/page-embed-types.js"
+    },
+    "./widgets/html/html-embeds": {
+      "types": "./dist/widgets/html/html-embeds.d.ts",
+      "import": "./dist/widgets/html/html-embeds.js",
+      "default": "./dist/widgets/html/html-embeds.js"
+    },
+    "./widgets/html/gallery-render": {
+      "types": "./dist/widgets/html/gallery-render.d.ts",
+      "import": "./dist/widgets/html/gallery-render.js",
+      "default": "./dist/widgets/html/gallery-render.js"
+    },
+    "./navigation/types": {
+      "types": "./dist/navigation/types.d.ts",
+      "import": "./dist/navigation/types.js",
+      "default": "./dist/navigation/types.js"
+    },
+    "./navigation/dropdown": {
+      "types": "./dist/navigation/dropdown.d.ts",
+      "import": "./dist/navigation/dropdown.js",
+      "default": "./dist/navigation/dropdown.js"
+    },
+    "./media/slug": {
+      "types": "./dist/media/slug.d.ts",
+      "import": "./dist/media/slug.js",
+      "default": "./dist/media/slug.js"
+    },
     "./forms": {
       "types": "./dist/forms/index.d.ts",
       "import": "./dist/forms/index.js",
@@ -364,12 +412,12 @@
     "@types/better-sqlite3": "^7.6.13",
     "@electric-sql/pglite": "0.5.8",
     "jsdom": "^25.0.1",
-    "@jini-ai/http-kit": "0.4.1",
-    "@jini-ai/db": "0.3.2",
-    "@jini-ai/core": "0.4.3"
+    "@jini-ai/core": "0.4.4",
+    "@jini-ai/db": "0.3.3",
+    "@jini-ai/http-kit": "0.4.1"
   },
   "dependencies": {
-    "@jini-ai/core": "^0.4.3"
+    "@jini-ai/core": "^0.4.4"
   },
   "peerDependencies": {
     "sharp": "^0.35.3",