@michaelthielemann/kestrel 1.7.0 → 2.1.0

package/layers/ui/app/i18n/en.ts

@@ -7,6 +7,7 @@ export const en: Catalog = {
   // common / shared
   'common.new': 'New {label}',
   'common.save': 'Save',
+  'common.publish': 'Publish',
   'common.cancel': 'Cancel',
   'common.create': 'Create',
   'common.delete': 'Delete',
@@ -154,6 +155,11 @@ export const en: Catalog = {
 
   // editor action bar — live preview + status "Ampel"
   'editor.openInNewTab': 'Open in new tab',
+  'editor.previewUnsaved': 'Preview unsaved changes in a new tab',
+  'editor.previewFailed': 'Could not open the preview.',
+  'editor.publishFailed': 'Publishing failed.',
+  'editor.publishNotGenerated': 'Static output is off in this environment — nothing was written.',
+  'editor.publishDraft': 'A draft has no public page. Publish it by setting its status to Published.',
   // editor Ampel — LEFT lamp: one WORD + a details tooltip (save + publish lifecycle of this record)
   'editorStatus.word.saving': 'Saving…',
   'editorStatus.word.unsaved': 'Unsaved',
@@ -168,12 +174,16 @@ export const en: Catalog = {
   // editor Ampel — RIGHT lamp: one WORD + a details tooltip (generated state of the static page)
   'editorStatus.word.live': 'Live',
   'editorStatus.word.generating': 'Generating…',
+  'editorStatus.word.notPublished': 'Not published',
   'editorStatus.word.notBuilt': 'Not built',
   'editorStatus.word.notLive': 'Not live',
   'editorStatus.word.error': 'Error',
+  'editorStatus.word.outdated': 'Outdated',
   'editorStatus.live.liveS3': 'Live — page uploaded to S3.',
   'editorStatus.live.liveLocal': 'Live — page written to the static output.',
   'editorStatus.live.pending': 'Publishing in progress…',
+  'editorStatus.live.outdated': 'Saved but not published — the live page still shows the last published version.',
+  'editorStatus.live.notPublished': 'Never published — press Publish to put this page on the live site.',
   'editorStatus.live.notBuilt': 'Not generated in this environment — the static page is built on deploy.',
   'editorStatus.live.error': 'Publishing the static page failed.',
   'editorStatus.live.draft': 'Draft — not generated. It stays off the live site until published.',
@@ -191,6 +201,12 @@ export const en: Catalog = {
   'editor.unsupported': 'No editor is registered for type “{type}”.',
   'seo.socialImage': 'Social share image',
   'seo.socialImageHint': 'Shown as the preview image when the page is shared (og:image).',
+  'seo.author': 'Author',
+  'seo.authorHint': 'Published as the article author in the page’s structured data.',
+  'seo.publishedDate': 'Publication date',
+  'seo.publishedDateHint': 'Tells search and answer engines how current this page is.',
+  'seo.keywords': 'Keywords',
+  'seo.keywordsHint': 'Comma-separated topics for this page.',
 
   // locale bar (translations)
   'localeBar.fieldLabel': 'Locale',
@@ -327,6 +343,13 @@ export const en: Catalog = {
   'mediaViewer.alt': 'Alt text',
   'mediaViewer.altHint': 'Describes the image for screen readers and SEO.',
   'mediaViewer.saveFailed': "Couldn't save the alt text.",
+  'mediaViewer.aiSourceTypeLabel': 'AI disclosure',
+  'mediaViewer.aiSourceTypeHint': 'How this asset was produced (EU AI Act Art. 50). Leave empty when nothing needs disclosing.',
+  'mediaViewer.aiSourceType.trainedAlgorithmicMedia': 'Fully AI-generated',
+  'mediaViewer.aiSourceType.compositeWithTrainedAlgorithmicMedia': 'AI content composited into real media',
+  'mediaViewer.aiSourceType.algorithmicallyEnhanced': 'AI-enhanced / algorithmically edited',
+  'mediaViewer.aiNote': 'Disclosure note',
+  'mediaViewer.aiNoteHint': 'Free text, e.g. the tool used. Pre-filled with any AI signals found in the file at upload — evidence only, not a verified claim.',
 
   // richtext toolbar
   'richtext.bold': 'Bold',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@michaelthielemann/kestrel",
-  "version": "1.7.0",
+  "version": "2.1.0",
   "description": "A slim, collection-driven Nuxt 4 CMS meta-layer with a runtime schema engine. Add `extends: ['@michaelthielemann/kestrel']`, define collections, and the database migrates itself.",
   "license": "Apache-2.0",
   "author": "Michael Thielemann <283621694+MichaelThielemann@users.noreply.github.com>",
@@ -44,6 +44,7 @@
   "engines": {
     "node": ">=22.12.0"
   },
+  "//lint": "The root eslint.config.mjs imports the generated playground/.nuxt/eslint.config.mjs (Nuxt-aware: auto-import globals for every layer + extension) — `nuxt prepare` must run first or that import 404s on a fresh checkout. Cheap on a warm .nuxt cache, so it's chained rather than a separate step.",
   "scripts": {
     "dev": "nuxt dev",
     "build": "nuxt build",
@@ -56,6 +57,7 @@
     "test:e2e": "vitest run --config vitest.e2e.config.ts",
     "test:nuxt": "vitest run --config vitest.nuxt.config.ts",
     "typecheck": "node scripts/typecheck.mjs",
+    "lint": "nuxt prepare playground && eslint .",
     "hash-password": "node scripts/hash-password.mjs"
   },
   "dependencies": {
@@ -76,6 +78,7 @@
     "dompurify": "^3.4.13",
     "drizzle-orm": "^0.45.2",
     "drizzle-zod": "^0.8.3",
+    "exifr": "^7.1.3",
     "file-type": "^22.0.1",
     "jsdom": "^29.1.1",
     "nanoid": "^5.1.16",
@@ -110,11 +113,14 @@
     }
   },
   "devDependencies": {
+    "@nuxt/eslint": "^1.9.0",
     "@nuxt/kit": "^4.5.2",
     "@nuxt/test-utils": "^4.1.0",
     "@vitejs/plugin-vue": "^6.0.8",
     "@vue/test-utils": "^2.4.11",
     "drizzle-kit": "^0.31.10",
+    "eslint": "^9.39.1",
+    "eslint-plugin-vuejs-accessibility": "^2.4.1",
     "h3": "^1.15.11",
     "happy-dom": "^20.11.2",
     "playwright-core": "^1.62.1",

package/scripts/kestrel.mjs

@@ -30,13 +30,16 @@ function inspect(target) {
     packageJson: readIf(join(target, 'package.json')),
     nuxtConfig: readIf(join(target, 'nuxt.config.ts')) ?? readIf(join(target, 'nuxt.config.js')),
     appVue: readIf(join(target, 'app', 'app.vue')) ?? readIf(join(target, 'app.vue')),
+    kestrelConfig: readIf(join(target, 'kestrel.config.ts')) ?? readIf(join(target, 'kestrel.config.js')),
     env: readIf(join(target, '.env')),
   })
 }
 
+const LEVEL_LABEL = { error: () => red('✖ error'), info: () => dim('· note '), warn: () => yellow('▲ warn ') }
+
 function printFindings(found) {
   for (const d of found) {
-    out(`${d.level === 'error' ? red('✖ error') : yellow('▲ warn ')} ${d.message}`)
+    out(`${(LEVEL_LABEL[d.level] ?? LEVEL_LABEL.warn)()} ${d.message}`)
     out()
   }
 }
@@ -170,10 +173,11 @@ function doctor(positional) {
   const found = inspect(target)
 
   out()
-  if (!found.length) {
+  // An `info` finding is a note about how this project is configured, not a problem with it — so it prints,
+  // but it must not withhold the all-clear the way a warning does.
+  if (!found.some((d) => d.level !== 'info')) {
     out(`${green('✔')} ${relative(process.cwd(), target) || '.'} looks like a working Kestrel project.`)
     out()
-    return 0
   }
   printFindings(found)
   return found.some((d) => d.level === 'error') ? 1 : 0

package/scripts/lib/scaffold.mjs

@@ -110,11 +110,22 @@ const withoutComments = (src) => src.replace(/<!--[\s\S]*?-->/g, '')
 const kebab = (tag) => tag.replace(/(?!^)([A-Z])/g, '-$1').toLowerCase()
 export const usesComponent = (src, tag) => new RegExp(`<\\s*(${tag}|${kebab(tag)})[\\s/>]`, 'i').test(src)
 
+/** Whether `output.publishOnSave` resolves to `true` — config or its env override, same precedence as
+ *  `resolveKestrel` (env wins when it names a valid boolean; otherwise the config file's own value). */
+function publishOnSaveEnabled(kestrelConfig, env) {
+  const fromEnv = env !== null ? envValue(env, 'KESTREL_OUTPUT_PUBLISH_ON_SAVE')?.toLowerCase() : undefined
+  if (fromEnv !== undefined) {
+    if (['true', '1', 'yes', 'on'].includes(fromEnv)) return true
+    if (['false', '0', 'no', 'off'].includes(fromEnv)) return false
+  }
+  return typeof kestrelConfig === 'string' && /\bpublishOnSave\s*:\s*true\b/.test(kestrelConfig)
+}
+
 /**
  * `kestrel doctor`, as a pure function of what was read; `null` means the file is absent.
  * The `app.vue` rules mirror `layers/core/modules/kestrel/app-shell.ts`; a test pins the two together.
  */
-export function diagnoseProject({ packageJson, nuxtConfig, appVue, env }) {
+export function diagnoseProject({ packageJson, nuxtConfig, appVue, env, kestrelConfig }) {
   const found = []
   const add = (level, message) => found.push({ level, message })
 
@@ -179,5 +190,16 @@ export function diagnoseProject({ packageJson, nuxtConfig, appVue, env }) {
     }
   }
 
+  // Informational, not a misconfiguration: `publishOnSave: false` is the correct 2.0 default. Named
+  // because it is a silent behaviour change from 1.x — a headless consumer that only PATCHes content and
+  // never opens /admin gets no other signal that saves stopped reaching the static output.
+  if (!publishOnSaveEnabled(kestrelConfig, env)) {
+    add(
+      'info',
+      'saving a record no longer publishes it by default — only an explicit Publish action does (ADR-0008). ' +
+        'Set `output.publishOnSave: true` in kestrel.config.ts, or KESTREL_OUTPUT_PUBLISH_ON_SAVE=1, to restore the pre-2.0 behaviour.',
+    )
+  }
+
   return found
 }

package/templates/starter/app/blocks/Prose.vue

@@ -8,5 +8,6 @@ defineBlock({ label: { en: 'Prose' }, icon: 'file-text' })
 
 <template>
   <!-- richtext is sanitized server-side on write -->
+  <!-- eslint-disable-next-line vue/no-v-html -- sanitized via sanitizeRichtext (sanitize-html allowlist) in layers/fields/server/field-registry/index.ts -->
   <div class="block-prose" v-html="body" />
 </template>

package/templates/starter/nuxt.config.ts

@@ -16,5 +16,8 @@ export default defineNuxtConfig({
     media: { uploadDir: '.data/uploads' },
     // locales: ['en', 'de'],
     // collections: { pages: false },
+    // Answer-engine extras, both off until you opt in: articleMeta publishes author/date/keywords,
+    // llmsFull serves /llms-full.txt (every published page's full body in one file).
+    // seo: { articleMeta: true, llmsFull: true },
   },
 })