@michaelthielemann/kestrel 1.7.0 → 2.0.0

package/layers/ui/app/components/ui/Field.vue

@@ -22,6 +22,7 @@ const slotProps = computed(() => ({
 
 <template>
   <div class="ui-field" :data-invalid="error ? 'true' : undefined">
+    <!-- eslint-disable-next-line vuejs-accessibility/label-has-for -- the matching control is the default slot's content, invisible to static analysis across the slot boundary -->
     <label v-if="label" :for="fieldId" class="ui-field__label">
       {{ label }}<span v-if="required" class="ui-field__required" aria-hidden="true">*</span>
     </label>

package/layers/ui/app/components/ui/Fieldset.vue

@@ -10,7 +10,8 @@ const props = defineProps<{
   id?: string
 }>()
 
-const { fieldId, hintId, errId, describedby, ariaInvalid, ariaRequired } = useFieldA11y(props)
+// No `fieldId`: a group has no single control to point a label `for` at (see below).
+const { hintId, errId, describedby, ariaInvalid, ariaRequired } = useFieldA11y(props)
 
 // No `id` — a group has no single control to point a label `for` at; the
 // <legend> labels the group natively. Consumers spread these onto the group root.

package/layers/ui/app/components/ui/Icon.vue

@@ -17,7 +17,8 @@ const hasA11yName = computed(() => props.label != null || attrs.role != null ||
 <template>
   <!-- v-html body is either a static registry icon or developer-supplied SVG allowlist-sanitised by
        resolveIconBody → sanitizeIconSvg (no script-capable elements/attributes survive). -->
-  <svg
+  <!-- eslint-disable-next-line vue/no-v-html -- sanitized via resolveIconBody -> sanitizeIconSvg (allowlist-only tags/attrs) -->
+  <svg v-html="body"
     class="ui-icon"
     :data-icon="dataIcon"
     :width="dim"
@@ -31,7 +32,6 @@ const hasA11yName = computed(() => props.label != null || attrs.role != null ||
     :role="label ? 'img' : undefined"
     :aria-label="label || undefined"
     :aria-hidden="hasA11yName ? undefined : 'true'"
-    v-html="body"
   />
 </template>
 

package/layers/ui/app/components/ui/NumberInput.vue

@@ -55,6 +55,7 @@ function onKeydown(e: KeyboardEvent) {
 
 <template>
   <div v-if="suffix" class="ui-number-wrap" :class="{ 'ui-number-wrap--slim': slim }" :data-disabled="disabled || undefined">
+    <!-- eslint-disable-next-line vuejs-accessibility/form-control-has-label -- id/label land via v-bind="$attrs" from the wrapping UiField, invisible to static analysis -->
     <input
       v-model="text"
       type="number"
@@ -70,6 +71,7 @@ function onKeydown(e: KeyboardEvent) {
     >
     <span class="ui-number-wrap__suffix" aria-hidden="true">{{ suffix }}</span>
   </div>
+  <!-- eslint-disable-next-line vuejs-accessibility/form-control-has-label -- id/label land via v-bind="$attrs" from the wrapping UiField, invisible to static analysis -->
   <input
     v-else
     v-model="text"

package/layers/ui/app/components/ui/Richtext.vue

@@ -8,6 +8,7 @@ import { Superscript } from '@tiptap/extension-superscript'
 import { TextAlign } from '@tiptap/extension-text-align'
 import RichtextToolbar from './RichtextToolbar.vue'
 import { RichtextSpanClass, RichtextBlockClass } from '../../utils/richtext-preserve-class'
+import { RICHTEXT_LINK_SCHEME } from '../../../../fields/app/utils/richtext-links'
 
 const props = withDefaults(
   defineProps<{
@@ -24,6 +25,11 @@ const props = withDefaults(
 )
 const model = defineModel<string | null>()
 
+// TipTap emits `update` for non-content changes too — `setEditable`/`setOptions` emit directly, past the
+// transaction pipeline and its docChanged guard — and that echo reaches the edit form as a user edit.
+// Only a changed doc is one, so every emit is checked against the doc it last saw.
+let lastDoc: unknown = null
+
 // StarterKit (v3) already bundles Link + Underline; only the rest are added here.
 const editor = useEditor({
   content: model.value ?? '',
@@ -33,7 +39,13 @@ const editor = useEditor({
   extensions: [
     StarterKit.configure({
       heading: { levels: [1, 2, 3, 4, 5, 6] },
-      link: { openOnClick: false },
+      // `protocols`: the Link mark validates every href against its own scheme allowlist, which has no
+      // `kestrel:`. Without this it drops the whole anchor when stored content is loaded and makes the
+      // toolbar's `setLink` a silent no-op — opening and saving a record would destroy its internal links.
+      // `target`/`rel` null: the sanitizer owns that policy — it decorates absolute http(s) links and
+      // strips the attributes from every other kind. The mark's own defaults would stamp them on ANY
+      // anchor, so a stored internal/relative/mailto link came back changed and read as an unsaved edit.
+      link: { openOnClick: false, protocols: [RICHTEXT_LINK_SCHEME], HTMLAttributes: { target: null, rel: null } },
     }),
     Highlight,
     Subscript,
@@ -41,7 +53,12 @@ const editor = useEditor({
     TextAlign.configure({ types: ['heading', 'paragraph'] }),
     RichtextSpanClass, RichtextBlockClass, // preserve consumer presentational classes on round-trip
   ],
+  onCreate: ({ editor }) => {
+    lastDoc = editor.state.doc
+  },
   onUpdate: ({ editor }) => {
+    if (editor.state.doc === lastDoc) return
+    lastDoc = editor.state.doc
     model.value = editor.isEmpty ? '' : editor.getHTML()
   },
 })
@@ -53,10 +70,15 @@ watch(model, (value) => {
   const current = e.isEmpty ? '' : e.getHTML()
   // `emitUpdate: false`: this value came FROM the model, so re-emitting it would reach the edit form as
   // a user edit — clearing the redo stack and turning a restored null back into ''.
-  if (next !== current) e.commands.setContent(next, { emitUpdate: false })
+  if (next !== current) {
+    e.commands.setContent(next, { emitUpdate: false })
+    lastDoc = e.state.doc
+  }
 })
 
-watch(() => props.disabled, (d) => editor.value?.setEditable(!d))
+// `false` — the second arg suppresses the update event; `disabled` tracks the form's `saving` flag, so
+// the post-save toggle would otherwise re-dirty the form that was just rebaselined.
+watch(() => props.disabled, (d) => editor.value?.setEditable(!d, false))
 
 // Apply the accessible name + textbox semantics directly to the ProseMirror surface, reactively (the
 // error-driven describedby/invalid arrive after mount). `editor.view.dom` is the contenteditable element.

package/layers/ui/app/components/ui/Select.vue

@@ -17,6 +17,7 @@ const model = defineModel<string | null>()
 
 <template>
   <span class="ui-select">
+    <!-- eslint-disable-next-line vuejs-accessibility/form-control-has-label -- id/label land via v-bind="$attrs" from the wrapping UiField, invisible to static analysis -->
     <select v-model="model" :disabled="disabled" class="ui-select__field" v-bind="$attrs">
       <option v-if="placeholder" value="" disabled>{{ placeholder }}</option>
       <option v-for="o in options" :key="o.value" :value="o.value">{{ o.label }}</option>

package/layers/ui/app/components/ui/TextInput.vue

@@ -31,6 +31,7 @@ const inputType = computed(() => (revealable.value && revealed.value ? 'text' :
 
 <template>
   <div class="ui-input-wrap">
+    <!-- eslint-disable-next-line vuejs-accessibility/form-control-has-label -- id/label land via v-bind="$attrs" from the wrapping UiField, invisible to static analysis -->
     <input
       v-model="model"
       :type="inputType"

package/layers/ui/app/components/ui/Textarea.vue

@@ -12,6 +12,7 @@ const model = defineModel<string | null>()
 </script>
 
 <template>
+  <!-- eslint-disable-next-line vuejs-accessibility/form-control-has-label -- id/label land via Vue's default attrs fallthrough (single root element) from the wrapping UiField -->
   <textarea
     v-model="model"
     :rows="rows"

package/layers/ui/app/components/ui/TimeInput.vue

@@ -5,6 +5,7 @@ const model = defineModel<string | null>()
 </script>
 
 <template>
+  <!-- eslint-disable-next-line vuejs-accessibility/form-control-has-label -- id/label land via Vue's default attrs fallthrough (single root element) from the wrapping UiField -->
   <input v-model="model" type="time" :disabled="disabled" class="ui-time">
 </template>
 

package/layers/ui/app/i18n/de.ts

@@ -4,6 +4,7 @@ import type { Catalog } from '../composables/useT'
 export const de: Catalog = {
   'common.new': '{label} anlegen',
   'common.save': 'Speichern',
+  'common.publish': 'Veröffentlichen',
   'common.cancel': 'Abbrechen',
   'common.create': 'Erstellen',
   'common.delete': 'Löschen',
@@ -142,6 +143,11 @@ export const de: Catalog = {
   'pageSettings.statusPublished': 'Veröffentlicht',
 
   'editor.openInNewTab': 'In neuem Tab öffnen',
+  'editor.previewUnsaved': 'Ungespeicherte Änderungen in neuem Tab ansehen',
+  'editor.previewFailed': 'Vorschau konnte nicht geöffnet werden.',
+  'editor.publishFailed': 'Veröffentlichen fehlgeschlagen.',
+  'editor.publishNotGenerated': 'Statischer Output ist in dieser Umgebung aus — es wurde nichts geschrieben.',
+  'editor.publishDraft': 'Ein Entwurf hat keine öffentliche Seite. Zum Veröffentlichen den Status auf Veröffentlicht setzen.',
   // editor status light — LEFT lamp: ONE word + details tooltip (save/publish status)
   'editorStatus.word.saving': 'Speichert…',
   'editorStatus.word.unsaved': 'Ungespeichert',
@@ -156,12 +162,16 @@ export const de: Catalog = {
   // editor status light — RIGHT lamp: ONE word + details tooltip (static-page generation status)
   'editorStatus.word.live': 'Live',
   'editorStatus.word.generating': 'Generiert…',
+  'editorStatus.word.notPublished': 'Nicht veröffentlicht',
   'editorStatus.word.notBuilt': 'Nicht gebaut',
   'editorStatus.word.notLive': 'Nicht live',
   'editorStatus.word.error': 'Fehler',
+  'editorStatus.word.outdated': 'Veraltet',
   'editorStatus.live.liveS3': 'Live — Seite auf S3 abgelegt.',
   'editorStatus.live.liveLocal': 'Live — Seite in den statischen Output geschrieben.',
   'editorStatus.live.pending': 'Wird veröffentlicht…',
+  'editorStatus.live.outdated': 'Gespeichert, aber nicht veröffentlicht — live steht noch die zuletzt veröffentlichte Fassung.',
+  'editorStatus.live.notPublished': 'Nie veröffentlicht — mit Veröffentlichen kommt die Seite auf die Live-Site.',
   'editorStatus.live.notBuilt': 'In dieser Umgebung nicht generiert — die statische Seite wird beim Deploy gebaut.',
   'editorStatus.live.error': 'Generieren der statischen Seite fehlgeschlagen.',
   'editorStatus.live.draft': 'Entwurf — nicht generiert. Erscheint erst nach Veröffentlichung auf der Live-Seite.',

package/layers/ui/app/i18n/en.ts

@@ -7,6 +7,7 @@ export const en: Catalog = {
   // common / shared
   'common.new': 'New {label}',
   'common.save': 'Save',
+  'common.publish': 'Publish',
   'common.cancel': 'Cancel',
   'common.create': 'Create',
   'common.delete': 'Delete',
@@ -154,6 +155,11 @@ export const en: Catalog = {
 
   // editor action bar — live preview + status "Ampel"
   'editor.openInNewTab': 'Open in new tab',
+  'editor.previewUnsaved': 'Preview unsaved changes in a new tab',
+  'editor.previewFailed': 'Could not open the preview.',
+  'editor.publishFailed': 'Publishing failed.',
+  'editor.publishNotGenerated': 'Static output is off in this environment — nothing was written.',
+  'editor.publishDraft': 'A draft has no public page. Publish it by setting its status to Published.',
   // editor Ampel — LEFT lamp: one WORD + a details tooltip (save + publish lifecycle of this record)
   'editorStatus.word.saving': 'Saving…',
   'editorStatus.word.unsaved': 'Unsaved',
@@ -168,12 +174,16 @@ export const en: Catalog = {
   // editor Ampel — RIGHT lamp: one WORD + a details tooltip (generated state of the static page)
   'editorStatus.word.live': 'Live',
   'editorStatus.word.generating': 'Generating…',
+  'editorStatus.word.notPublished': 'Not published',
   'editorStatus.word.notBuilt': 'Not built',
   'editorStatus.word.notLive': 'Not live',
   'editorStatus.word.error': 'Error',
+  'editorStatus.word.outdated': 'Outdated',
   'editorStatus.live.liveS3': 'Live — page uploaded to S3.',
   'editorStatus.live.liveLocal': 'Live — page written to the static output.',
   'editorStatus.live.pending': 'Publishing in progress…',
+  'editorStatus.live.outdated': 'Saved but not published — the live page still shows the last published version.',
+  'editorStatus.live.notPublished': 'Never published — press Publish to put this page on the live site.',
   'editorStatus.live.notBuilt': 'Not generated in this environment — the static page is built on deploy.',
   'editorStatus.live.error': 'Publishing the static page failed.',
   'editorStatus.live.draft': 'Draft — not generated. It stays off the live site until published.',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@michaelthielemann/kestrel",
-  "version": "1.7.0",
+  "version": "2.0.0",
   "description": "A slim, collection-driven Nuxt 4 CMS meta-layer with a runtime schema engine. Add `extends: ['@michaelthielemann/kestrel']`, define collections, and the database migrates itself.",
   "license": "Apache-2.0",
   "author": "Michael Thielemann <283621694+MichaelThielemann@users.noreply.github.com>",
@@ -44,6 +44,7 @@
   "engines": {
     "node": ">=22.12.0"
   },
+  "//lint": "The root eslint.config.mjs imports the generated playground/.nuxt/eslint.config.mjs (Nuxt-aware: auto-import globals for every layer + extension) — `nuxt prepare` must run first or that import 404s on a fresh checkout. Cheap on a warm .nuxt cache, so it's chained rather than a separate step.",
   "scripts": {
     "dev": "nuxt dev",
     "build": "nuxt build",
@@ -56,6 +57,7 @@
     "test:e2e": "vitest run --config vitest.e2e.config.ts",
     "test:nuxt": "vitest run --config vitest.nuxt.config.ts",
     "typecheck": "node scripts/typecheck.mjs",
+    "lint": "nuxt prepare playground && eslint .",
     "hash-password": "node scripts/hash-password.mjs"
   },
   "dependencies": {
@@ -110,11 +112,14 @@
     }
   },
   "devDependencies": {
+    "@nuxt/eslint": "^1.9.0",
     "@nuxt/kit": "^4.5.2",
     "@nuxt/test-utils": "^4.1.0",
     "@vitejs/plugin-vue": "^6.0.8",
     "@vue/test-utils": "^2.4.11",
     "drizzle-kit": "^0.31.10",
+    "eslint": "^9.39.1",
+    "eslint-plugin-vuejs-accessibility": "^2.4.1",
     "h3": "^1.15.11",
     "happy-dom": "^20.11.2",
     "playwright-core": "^1.62.1",

package/scripts/kestrel.mjs

@@ -30,13 +30,16 @@ function inspect(target) {
     packageJson: readIf(join(target, 'package.json')),
     nuxtConfig: readIf(join(target, 'nuxt.config.ts')) ?? readIf(join(target, 'nuxt.config.js')),
     appVue: readIf(join(target, 'app', 'app.vue')) ?? readIf(join(target, 'app.vue')),
+    kestrelConfig: readIf(join(target, 'kestrel.config.ts')) ?? readIf(join(target, 'kestrel.config.js')),
     env: readIf(join(target, '.env')),
   })
 }
 
+const LEVEL_LABEL = { error: () => red('✖ error'), info: () => dim('· note '), warn: () => yellow('▲ warn ') }
+
 function printFindings(found) {
   for (const d of found) {
-    out(`${d.level === 'error' ? red('✖ error') : yellow('▲ warn ')} ${d.message}`)
+    out(`${(LEVEL_LABEL[d.level] ?? LEVEL_LABEL.warn)()} ${d.message}`)
     out()
   }
 }
@@ -170,10 +173,11 @@ function doctor(positional) {
   const found = inspect(target)
 
   out()
-  if (!found.length) {
+  // An `info` finding is a note about how this project is configured, not a problem with it — so it prints,
+  // but it must not withhold the all-clear the way a warning does.
+  if (!found.some((d) => d.level !== 'info')) {
     out(`${green('✔')} ${relative(process.cwd(), target) || '.'} looks like a working Kestrel project.`)
     out()
-    return 0
   }
   printFindings(found)
   return found.some((d) => d.level === 'error') ? 1 : 0

package/scripts/lib/scaffold.mjs

@@ -110,11 +110,22 @@ const withoutComments = (src) => src.replace(/<!--[\s\S]*?-->/g, '')
 const kebab = (tag) => tag.replace(/(?!^)([A-Z])/g, '-$1').toLowerCase()
 export const usesComponent = (src, tag) => new RegExp(`<\\s*(${tag}|${kebab(tag)})[\\s/>]`, 'i').test(src)
 
+/** Whether `output.publishOnSave` resolves to `true` — config or its env override, same precedence as
+ *  `resolveKestrel` (env wins when it names a valid boolean; otherwise the config file's own value). */
+function publishOnSaveEnabled(kestrelConfig, env) {
+  const fromEnv = env !== null ? envValue(env, 'KESTREL_OUTPUT_PUBLISH_ON_SAVE')?.toLowerCase() : undefined
+  if (fromEnv !== undefined) {
+    if (['true', '1', 'yes', 'on'].includes(fromEnv)) return true
+    if (['false', '0', 'no', 'off'].includes(fromEnv)) return false
+  }
+  return typeof kestrelConfig === 'string' && /\bpublishOnSave\s*:\s*true\b/.test(kestrelConfig)
+}
+
 /**
  * `kestrel doctor`, as a pure function of what was read; `null` means the file is absent.
  * The `app.vue` rules mirror `layers/core/modules/kestrel/app-shell.ts`; a test pins the two together.
  */
-export function diagnoseProject({ packageJson, nuxtConfig, appVue, env }) {
+export function diagnoseProject({ packageJson, nuxtConfig, appVue, env, kestrelConfig }) {
   const found = []
   const add = (level, message) => found.push({ level, message })
 
@@ -179,5 +190,16 @@ export function diagnoseProject({ packageJson, nuxtConfig, appVue, env }) {
     }
   }
 
+  // Informational, not a misconfiguration: `publishOnSave: false` is the correct 2.0 default. Named
+  // because it is a silent behaviour change from 1.x — a headless consumer that only PATCHes content and
+  // never opens /admin gets no other signal that saves stopped reaching the static output.
+  if (!publishOnSaveEnabled(kestrelConfig, env)) {
+    add(
+      'info',
+      'saving a record no longer publishes it by default — only an explicit Publish action does (ADR-0008). ' +
+        'Set `output.publishOnSave: true` in kestrel.config.ts, or KESTREL_OUTPUT_PUBLISH_ON_SAVE=1, to restore the pre-2.0 behaviour.',
+    )
+  }
+
   return found
 }

package/templates/starter/app/blocks/Prose.vue

@@ -8,5 +8,6 @@ defineBlock({ label: { en: 'Prose' }, icon: 'file-text' })
 
 <template>
   <!-- richtext is sanitized server-side on write -->
+  <!-- eslint-disable-next-line vue/no-v-html -- sanitized via sanitizeRichtext (sanitize-html allowlist) in layers/fields/server/field-registry/index.ts -->
   <div class="block-prose" v-html="body" />
 </template>