@michaelthielemann/kestrel 2.0.0 → 3.0.0

package/layers/admin/app/layouts/admin.vue

@@ -32,7 +32,7 @@ useHead(() => ({
     <aside v-if="authenticated" class="admin__rail">
       <div class="rail__head">
         <NuxtLink to="/admin" class="rail__brand" aria-label="Kestrel">
-          <UiBrand />
+          <KestrelUiBrand />
           <span class="rail__brand-word rail__label">kestrel</span>
         </NuxtLink>
         <button
@@ -41,7 +41,7 @@ useHead(() => ({
           :aria-label="collapsed ? t('a11y.expandSidebar') : t('a11y.collapseSidebar')"
           @click="toggleRail"
         >
-          <UiIcon :name="collapsed ? 'panel-left-open' : 'panel-left-close'" size="1.25rem" />
+          <KestrelUiIcon :name="collapsed ? 'panel-left-open' : 'panel-left-close'" size="1.25rem" />
         </button>
       </div>
 
@@ -51,15 +51,15 @@ useHead(() => ({
           class="rail__item rail__item--dashboard"
           :title="collapsed ? t('nav.dashboard') : undefined"
         >
-          <UiIcon name="home" class="rail__icon" size="1.25rem" />
+          <KestrelUiIcon name="home" class="rail__icon" size="1.25rem" />
           <span class="rail__label">{{ t('nav.dashboard') }}</span>
         </NuxtLink>
 
-        <AdminNav />
+        <KestrelAdminNav />
       </div>
 
       <div class="rail__foot">
-        <AdminAccount />
+        <KestrelAdminAccount />
         <button
           type="button"
           class="rail__item"
@@ -67,14 +67,14 @@ useHead(() => ({
           :aria-label="theme === 'dark' ? t('a11y.toLight') : t('a11y.toDark')"
           @click="toggleTheme"
         >
-          <UiIcon :name="theme === 'dark' ? 'sun' : 'moon'" class="rail__icon" size="1.25rem" />
+          <KestrelUiIcon :name="theme === 'dark' ? 'sun' : 'moon'" class="rail__icon" size="1.25rem" />
           <span class="rail__label">{{ theme === 'dark' ? t('theme.light') : t('theme.dark') }}</span>
         </button>
       </div>
     </aside>
 
     <main class="admin__main"><slot /></main>
-    <UiToasts />
+    <KestrelUiToasts />
   </div>
 </template>
 

package/layers/admin/app/pages/admin/[collection]/[id].nuxt.test.ts

@@ -8,13 +8,13 @@ import RecordPage from './[id].vue'
 const thingsSchema = {
   name: 'things', mode: 'multi', translatable: false, pageLike: false, seo: false, status: false,
   blocks: { enabled: false }, label: { singular: 'Thing', plural: 'Things' },
-  fields: { title: { type: 'text', required: true, translatable: false, unique: false } },
+  fields: { title: { type: 'text', required: true, unique: false } },
 }
 // Carries an explicit `label.new` — the create heading must use it verbatim, not the generic template.
 const articlesSchema = {
   name: 'articles', mode: 'multi', translatable: false, pageLike: false, seo: false, status: false,
   blocks: { enabled: false }, label: { singular: 'Article', plural: 'Articles', new: 'Compose article' },
-  fields: { title: { type: 'text', required: true, translatable: false, unique: false } },
+  fields: { title: { type: 'text', required: true, unique: false } },
 }
 registerEndpoint('/api/collections', () => ({ data: [thingsSchema, articlesSchema] }))
 registerEndpoint('/api/articles', () => ({ data: [], total: 0, page: 1, perPage: 25 }))

package/layers/admin/app/pages/admin/[collection]/[id].vue

@@ -111,24 +111,24 @@ async function confirmDelete() {
   <section class="record">
     <div class="record__head">
       <NuxtLink :to="listPath" class="record__back">
-        <UiIcon name="arrow-left" :size="16" />
+        <KestrelUiIcon name="arrow-left" :size="16" />
         <span>{{ t('editor.back', { collection: plural }) }}</span>
       </NuxtLink>
       <h1 class="record__title" :class="{ 'record__title--generic': !hasRecordTitle }">{{ heading }}</h1>
       <div class="record__actions">
-        <UiButton type="button" variant="ghost" size="sm" icon="undo" :disabled="saving || !editorRef?.canUndo" :title="t('history.undo')" :aria-label="t('history.undo')" @click="editorRef?.undo()" />
-        <UiButton type="button" variant="ghost" size="sm" icon="redo" :disabled="saving || !editorRef?.canRedo" :title="t('history.redo')" :aria-label="t('history.redo')" @click="editorRef?.redo()" />
-        <UiButton type="button" variant="ghost" size="sm" icon="external-link" :title="previewTitle" :aria-label="previewTitle" :loading="editorRef?.previewOpening" @click="editorRef?.openPreview()" />
-        <UiButton type="button" variant="secondary" size="sm" icon="x" :disabled="saving" @click="toList">{{ t('common.cancel') }}</UiButton>
-        <UiButton v-if="id !== 'new'" variant="danger" size="sm" icon="trash" :loading="deleting" @click="onDelete">{{ t('common.delete') }}</UiButton>
-        <UiButton type="submit" :form="EDITOR_FORM_ID" variant="primary" size="sm" icon="check" :loading="saving">{{ t('common.save') }}</UiButton>
+        <KestrelUiButton type="button" variant="ghost" size="sm" icon="undo" :disabled="saving || !editorRef?.canUndo" :title="t('history.undo')" :aria-label="t('history.undo')" @click="editorRef?.undo()" />
+        <KestrelUiButton type="button" variant="ghost" size="sm" icon="redo" :disabled="saving || !editorRef?.canRedo" :title="t('history.redo')" :aria-label="t('history.redo')" @click="editorRef?.redo()" />
+        <KestrelUiButton type="button" variant="ghost" size="sm" icon="external-link" :title="previewTitle" :aria-label="previewTitle" :loading="editorRef?.previewOpening" @click="editorRef?.openPreview()" />
+        <KestrelUiButton type="button" variant="secondary" size="sm" icon="x" :disabled="saving" @click="toList">{{ t('common.cancel') }}</KestrelUiButton>
+        <KestrelUiButton v-if="id !== 'new'" variant="danger" size="sm" icon="trash" :loading="deleting" @click="onDelete">{{ t('common.delete') }}</KestrelUiButton>
+        <KestrelUiButton type="submit" :form="EDITOR_FORM_ID" variant="primary" size="sm" icon="check" :loading="saving">{{ t('common.save') }}</KestrelUiButton>
         <!-- Publishing is its own decision: Save persists, Publish writes the static page (ADR-0008). -->
-        <UiButton v-if="editorRef?.canPublish !== false" type="button" variant="secondary" size="sm" icon="upload" :loading="editorRef?.publishing" :disabled="saving" @click="editorRef?.publish()">{{ t('common.publish') }}</UiButton>
-        <EditorStatus class="record__ampel" :dirty="editorRef?.dirty ?? false" :saving="saving" :has-status="editorRef?.hasStatus ?? false" :status="editorRef?.status" :saved-status="editorRef?.savedStatus" :page-like="editorRef?.pageLike ?? false" :live="editorRef?.live" />
+        <KestrelUiButton v-if="editorRef?.canPublish !== false" type="button" variant="secondary" size="sm" icon="upload" :loading="editorRef?.publishing" :disabled="saving" @click="editorRef?.publish()">{{ t('common.publish') }}</KestrelUiButton>
+        <KestrelEditorStatus class="record__ampel" :dirty="editorRef?.dirty ?? false" :saving="saving" :has-status="editorRef?.hasStatus ?? false" :status="editorRef?.status" :saved-status="editorRef?.savedStatus" :page-like="editorRef?.pageLike ?? false" :live="editorRef?.live" />
       </div>
     </div>
-    <CollectionEditor ref="editorRef" :collection="collection" :id="id" :form-id="EDITOR_FORM_ID" :locale-param="localeParam" :group="group" :actions="false" @saved="onSaved" />
-    <CollectionDeleteDialog
+    <KestrelCollectionEditor ref="editorRef" :collection="collection" :id="id" :form-id="EDITOR_FORM_ID" :locale-param="localeParam" :group="group" :actions="false" @saved="onSaved" />
+    <KestrelCollectionDeleteDialog
       :open="deleteOpen"
       :report="deleteReport"
       :busy="deleting"

package/layers/admin/app/pages/admin/[collection]/index.vue

@@ -29,12 +29,12 @@ const listLocale = computed(() => (def?.translatable ? (localeParam.value || pri
     <p v-if="!def" class="collection__missing">{{ t('collection.unknown', { name: collection }) }}</p>
 
     <template v-else-if="def.mode === 'single'">
-      <SingletonEditor :collection="collection" :title="resolveLocalized(def.label?.singular, lang) ?? collection" :locale-param="localeParam" />
+      <KestrelSingletonEditor :collection="collection" :title="resolveLocalized(def.label?.singular, lang) ?? collection" :locale-param="localeParam" />
     </template>
 
     <template v-else>
       <h1 class="collection__title">{{ resolveLocalized(def.label?.plural, lang) ?? collection }}</h1>
-      <CollectionList :schema="def" :locale="listLocale" />
+      <KestrelCollectionList :schema="def" :locale="listLocale" />
     </template>
   </section>
 </template>

package/layers/admin/app/pages/admin/[collection]/publish-preview.nuxt.test.ts

@@ -9,7 +9,7 @@ import RecordPage from './[id].vue'
 const pagesSchema = {
   name: 'pages', mode: 'multi', translatable: false, pageLike: true, seo: false, status: true,
   blocks: { enabled: false }, label: { singular: 'Page', plural: 'Pages' },
-  fields: { title: { type: 'text', required: true, translatable: false, unique: false } },
+  fields: { title: { type: 'text', required: true, unique: false } },
 }
 registerEndpoint('/api/collections', () => ({ data: [pagesSchema] }))
 

package/layers/admin/app/pages/admin/index.vue

@@ -27,10 +27,10 @@ $fetch<unknown[]>('/api/references/broken')
     <h1 class="dash__title">{{ t('dash.title') }}</h1>
     <p class="dash__lede">{{ t('dash.lede') }}</p>
     <NuxtLink v-if="brokenCount" to="/admin/references" class="dash__alert">
-      <UiIcon name="triangle-alert" :size="18" />
+      <KestrelUiIcon name="triangle-alert" :size="18" />
       <span>{{ t('refs.dashAlert', { n: brokenCount }) }}</span>
     </NuxtLink>
-    <UiEmptyState
+    <KestrelUiEmptyState
       v-if="!collections.length"
       icon="file-text"
       :title="t('dash.empty.title')"
@@ -39,7 +39,7 @@ $fetch<unknown[]>('/api/references/broken')
     <ul v-else class="dash__grid">
       <li v-for="c in collections" :key="c.name">
         <NuxtLink :to="`/admin/${c.name}`" class="dash__card">
-          <UiIcon :name="c.icon ?? 'file-text'" class="dash__icon" size="1.5rem" />
+          <KestrelUiIcon :name="c.icon ?? 'file-text'" class="dash__icon" size="1.5rem" />
           <span class="dash__name">{{ resolveLocalized(c.label?.plural, lang) ?? c.name }}</span>
           <span class="dash__mode">{{ c.mode === 'single' ? t('dash.mode.singleton') : t('dash.mode.collection') }}</span>
         </NuxtLink>

package/layers/admin/app/pages/admin/login.vue

@@ -25,22 +25,22 @@ async function submit() {
 <template>
   <form class="login" @submit.prevent="submit">
     <div class="login__brand">
-      <UiBrand />
+      <KestrelUiBrand />
       <span class="login__brand-word">kestrel</span>
     </div>
     <h1 class="login__title">{{ t('login.signIn') }}</h1>
-    <UiAlert v-if="error" variant="error">{{ error }}</UiAlert>
-    <UiField :label="t('login.password')">
+    <KestrelUiAlert v-if="error" variant="error">{{ error }}</KestrelUiAlert>
+    <KestrelUiField :label="t('login.password')">
       <template #default="f">
-        <UiTextInput
+        <KestrelUiTextInput
           v-model="password"
           type="password"
           autocomplete="current-password"
           v-bind="f"
         />
       </template>
-    </UiField>
-    <UiButton type="submit" variant="primary" :loading="loading">{{ t('login.signIn') }}</UiButton>
+    </KestrelUiField>
+    <KestrelUiButton type="submit" variant="primary" :loading="loading">{{ t('login.signIn') }}</KestrelUiButton>
   </form>
 </template>
 

package/layers/admin/app/pages/admin/media.vue

@@ -6,7 +6,7 @@ const { t } = useT()
 <template>
   <section class="media-page">
     <h1 class="media-page__title">{{ t('media.title') }}</h1>
-    <MediaLibrary />
+    <KestrelMediaLibrary />
   </section>
 </template>
 

package/layers/admin/app/pages/admin/references.vue

@@ -26,14 +26,14 @@ try {
 <template>
   <section class="refs">
     <NuxtLink to="/admin" class="refs__back">
-      <UiIcon name="arrow-left" :size="16" />
+      <KestrelUiIcon name="arrow-left" :size="16" />
       <span>{{ t('nav.dashboard') }}</span>
     </NuxtLink>
     <h1 class="refs__title">{{ t('refs.title') }}</h1>
     <p class="refs__lede">{{ t('refs.lede') }}</p>
 
-    <UiAlert v-if="loadError" variant="error" class="refs__error">{{ t('refs.loadError') }}</UiAlert>
-    <UiEmptyState
+    <KestrelUiAlert v-if="loadError" variant="error" class="refs__error">{{ t('refs.loadError') }}</KestrelUiAlert>
+    <KestrelUiEmptyState
       v-else-if="!broken.length"
       icon="check"
       :title="t('refs.empty.title')"

package/layers/admin/app/utils/edit-form.ts

@@ -17,6 +17,8 @@ export interface FetchErrorInfo {
   statusCode?: number
   statusMessage?: string
   issues: ServerIssue[]
+  /** The error body when it is NOT a Zod-issue array — e.g. `{ savedUpdatedAt }` from a failed write effect. */
+  data?: Record<string, unknown>
 }
 
 // The wire `SerializedField` is structurally what every Field* widget and `validateField` read
@@ -26,13 +28,18 @@ export function asFieldDef(field: SerializedField): FieldDef {
 }
 
 // Read an ofetch/H3 error envelope: top-level statusCode/statusMessage, Zod issues nested at err.data.data.
+// The BODY's statusMessage wins over the response's: ofetch maps `statusMessage` from `response.statusText`,
+// and HTTP/2 has no reason phrase — behind any h2 proxy that arrives as '' and the real message is only in
+// the JSON. Anything else under `data` (not an issue array) is handed back for the caller to act on.
 export function readFetchError(e: unknown): FetchErrorInfo {
   const err = e as { statusCode?: number; statusMessage?: string; data?: { data?: ServerIssue[] } & Record<string, unknown> }
-  const raw = err.data?.data ?? err.data
+  const body = Array.isArray(err.data) ? undefined : err.data
+  const raw = body?.data ?? err.data
   return {
     statusCode: err.statusCode,
-    statusMessage: err.statusMessage,
+    statusMessage: (body?.statusMessage as string | undefined) || err.statusMessage,
     issues: Array.isArray(raw) ? (raw as ServerIssue[]) : [],
+    ...(body && !Array.isArray(body.data) ? { data: body } : {}),
   }
 }
 

package/layers/admin/app/utils/list-cell.ts

@@ -0,0 +1,46 @@
+// Cell rendering for the collection list: how a raw row value becomes the string in a table cell.
+import type { ListColumn } from './list-columns'
+import { humanizeFieldName } from '../../../ui/app/utils/humanize'
+
+const dateFmt = new Intl.DateTimeFormat(undefined, { year: 'numeric', month: 'short', day: '2-digit' })
+// A date-only value ('YYYY-MM-DD', from a datetime field with precision 'date') parses as UTC midnight;
+// formatting it in the local zone would shift the calendar day, so pin it to UTC. Full ISO timestamps
+// (createdAt/updatedAt carry a 'Z') and local datetimes keep the local-zone formatter.
+const dateOnlyFmt = new Intl.DateTimeFormat(undefined, { year: 'numeric', month: 'short', day: '2-digit', timeZone: 'UTC' })
+
+export function isDateColumn(col: ListColumn): boolean {
+  return col.key === 'createdAt' || col.key === 'updatedAt' || col.field?.type === 'datetime'
+}
+
+export function cellText(value: unknown): string {
+  if (value == null) return ''
+  if (typeof value === 'string') return value.replace(/<[^>]*>/g, '').slice(0, 80)
+  if (typeof value === 'object') return JSON.stringify(value).slice(0, 80)
+  return String(value)
+}
+
+export function cellDisplay(col: ListColumn, row: Record<string, unknown>): string {
+  const value = row[col.key]
+  if (isDateColumn(col) && value != null) {
+    const dateOnly = typeof value === 'string' && /^\d{4}-\d{2}-\d{2}$/.test(value)
+    const d = new Date(value as string)
+    if (!Number.isNaN(d.getTime())) return (dateOnly ? dateOnlyFmt : dateFmt).format(d)
+  }
+  return cellText(value)
+}
+
+/** A column header's text: a field column humanizes its own name, chrome columns translate a key. */
+export function columnLabel(col: ListColumn, t: (key: string) => string): string {
+  return col.type === 'field' ? humanizeFieldName(col.name ?? col.key) : t(col.labelKey ?? col.key)
+}
+
+/** A row's human label: the first visible non-sidecar cell that has a value, else the bare id — used for
+ *  the per-row checkbox / action aria-labels so each control names its row. */
+export function rowLabel(columns: ListColumn[], row: Record<string, unknown>): string {
+  for (const c of columns) {
+    if (c.type === 'translations' || c.type === 'deadRefs') continue
+    const d = cellDisplay(c, row)
+    if (d) return d
+  }
+  return `#${row.id}`
+}

package/layers/admin/nuxt.config.ts

@@ -1,4 +1,7 @@
+import { kestrelComponents } from '../core/modules/component-namespace/shared'
+
 export default defineNuxtConfig({
+  components: [kestrelComponents(import.meta.url)],
   routeRules: {
     // The admin is a client-rendered SPA.
     '/admin/**': { ssr: false },

package/layers/core/modules/component-namespace/index.ts

@@ -0,0 +1,20 @@
+import { addComponentsDir, defineNuxtModule } from '@nuxt/kit'
+import { resolve } from 'node:path'
+import { KESTREL_COMPONENT_PREFIX, KESTREL_OVERRIDE_PRIORITY } from './shared'
+
+/** Where a consumer places a component that replaces a shipped one, relative to their `srcDir`. */
+export const KESTREL_OVERRIDE_DIR = 'Kestrel/components'
+
+export default defineNuxtModule({
+  meta: { name: 'kestrel-component-namespace' },
+  setup(_options, nuxt) {
+    // The trailing `components` segment is load-bearing: Nuxt reports a missing registered directory
+    // (NUXT_B3001) unless the path matches its default-components pattern, which requires that suffix.
+    // Without it every consumer who never uses the seam would see a build warning.
+    addComponentsDir({
+      path: resolve(nuxt.options.srcDir, KESTREL_OVERRIDE_DIR),
+      prefix: KESTREL_COMPONENT_PREFIX,
+      priority: KESTREL_OVERRIDE_PRIORITY,
+    })
+  },
+})

package/layers/core/modules/component-namespace/shared.ts

@@ -0,0 +1,24 @@
+import { fileURLToPath } from 'node:url'
+
+export const KESTREL_COMPONENT_PREFIX = 'Kestrel'
+
+/**
+ * Above every layer-derived priority (Nuxt assigns `layerCount - i`, so the consumer's app dir — index 0
+ * — otherwise always wins). A consumer file that lands on a `Kestrel*` name anywhere but the override
+ * directory therefore loses instead of silently replacing the admin component.
+ */
+export const KESTREL_LAYER_PRIORITY = 100
+
+/** The one supported override seam, above the layers. */
+export const KESTREL_OVERRIDE_PRIORITY = 200
+
+/**
+ * The components directory of a Kestrel layer, namespaced. Nuxt drops a prefix the filename already
+ * carries, so `KestrelImg.vue` stays `KestrelImg` while `ui/Button.vue` becomes `KestrelUiButton`.
+ * Pass the layer's own `import.meta.url`.
+ */
+export const kestrelComponents = (layerUrl: string) => ({
+  path: fileURLToPath(new URL('./app/components', layerUrl)),
+  prefix: KESTREL_COMPONENT_PREFIX,
+  priority: KESTREL_LAYER_PRIORITY,
+})

package/layers/core/modules/kestrel/index.ts

@@ -56,6 +56,13 @@ export default defineNuxtModule<KestrelConfig>({
     pub.siteName = c.siteName ?? ''
     // Reference desktop width (px) for the admin page-builder preset; the editor's scale-to-fit shrinks it.
     pub.previewDesktopWidth = c.preview.desktopWidth
+    // Whether the admin shows the EU AI Act disclosure controls on a media asset; the data itself is
+    // always resolved server-side, so flipping this off only hides the editor.
+    pub.aiDisclosureEnabled = c.aiDisclosure.enabled
+    // Article metadata is an APP-side concern on both ends — the admin SEO panel decides whether to offer
+    // the fields, the public page decides whether to publish them as JSON-LD — so the flag has to be
+    // client-visible. It gates a disclosure, not a secret.
+    pub.seoArticleMeta = c.seo.articleMeta
 
     // Server-only resolved settings, so server utils read the CONSUMER's `kestrel: {}` (via this module)
     // rather than importing Kestrel's own `kestrel.config.ts` file. Essential when Kestrel is consumed as
@@ -67,6 +74,10 @@ export default defineNuxtModule<KestrelConfig>({
     srv.siteDescription = c.siteDescription
     // Built-in collection toggles (pages/media) — read by the register plugin to gate built-ins.
     srv.collections = c.collections
+    // Read by the upload route to decide whether to run the AI-signal scan at all.
+    srv.aiDisclosure = c.aiDisclosure
+    // Answer-engine toggles; `llmsFull` is server-only (it gates a Nitro route and what the publisher writes).
+    srv.seo = c.seo
     // Static-publish target for the runtime publisher (server-only). S3 creds are env-only; prefer the
     // output-specific creds, fall back to the shared media creds so a single S3 account "just works".
     srv.output = {

package/layers/core/nuxt.config.ts

@@ -2,6 +2,7 @@ import { fileURLToPath } from 'node:url'
 
 export default defineNuxtConfig({
   modules: [
+    fileURLToPath(new URL('./modules/component-namespace/index.ts', import.meta.url)),
     fileURLToPath(new URL('./modules/auto-discovery/index.ts', import.meta.url)),
     fileURLToPath(new URL('./modules/kestrel/index.ts', import.meta.url)),
   ],

package/layers/core/server/api/[collection]/index.put.test.ts

@@ -0,0 +1,76 @@
+import { describe, it, expect, beforeEach } from 'vitest'
+import { createError } from 'h3'
+import Database from 'better-sqlite3'
+import { drizzle } from 'drizzle-orm/better-sqlite3'
+import { buildCollection } from '../../../../fields/server/utils/buildCollection'
+import { defineCollection } from '../../utils/defineCollection'
+import { putSingleton } from '../../utils/crud'
+import { requireCollection } from '../../utils/http'
+import { clearRegistry, registerCollection } from '../../utils/registry'
+import { clearWriteListeners } from '../../utils/write-events'
+import { registerWriteEffect, clearWriteEffects, runWriteEffects } from '../../utils/write-effects'
+import { desiredSchema } from '../../schema/desired'
+import { diffSchema } from '../../schema/diff'
+import { renderSqlite } from '../../schema/render-sqlite'
+
+const settings = buildCollection(defineCollection({
+  name: 'settings', mode: 'single',
+  fields: { title: { type: 'text', required: true } },
+}))
+
+interface FakeEvent { query: Record<string, unknown>; body: unknown; context: { params: Record<string, string> } }
+
+let db: ReturnType<typeof drizzle>
+
+// Bind the auto-imported helpers to the REAL implementations, so this proves the actual wiring rather
+// than a stub (same rationale as options.get.test.ts).
+Object.assign(globalThis, {
+  defineEventHandler: (handler: unknown) => handler,
+  createError,
+  getQuery: (event: FakeEvent) => event.query,
+  readBody: (event: FakeEvent) => Promise.resolve(event.body),
+  useDb: () => db,
+  requireAdmin: () => {},
+  requireCollection,
+  readIfUnmodifiedSince: () => undefined,
+  putSingleton,
+  runWriteEffects,
+})
+
+const handler = (await import('./index.put')).default as unknown as (event: FakeEvent) => Promise<Record<string, unknown>>
+const put = (collection: string, body: unknown) => handler({ query: {}, body, context: { params: { collection } } })
+
+beforeEach(() => {
+  const sqlite = new Database(':memory:')
+  for (const stmt of renderSqlite(diffSchema(desiredSchema([settings.table]), {}))) sqlite.exec(stmt)
+  db = drizzle(sqlite)
+  clearRegistry()
+  registerCollection(settings)
+  clearWriteListeners()
+  clearWriteEffects()
+})
+
+describe('PUT /api/[collection] — singleton save', () => {
+  it('writes the row and returns it', async () => {
+    await expect(put('settings', { title: 'Hello' })).resolves.toMatchObject({ title: 'Hello' })
+  })
+
+  it('runs post-write effects with the saved row', async () => {
+    const seen: unknown[] = []
+    registerWriteEffect((e) => { seen.push([e.def.name, e.row.title]) })
+    await put('settings', { title: 'Hello' })
+    expect(seen).toEqual([['settings', 'Hello']])
+  })
+
+  it('fails the save when an effect rejects — a stale side effect must not report success', async () => {
+    registerWriteEffect(() => { throw createError({ statusCode: 500, statusMessage: 'artifact is stale' }) })
+    await expect(put('settings', { title: 'Hello' })).rejects.toMatchObject({ statusCode: 500, statusMessage: 'artifact is stale' })
+  })
+
+  it('does not run effects when validation rejects the body', async () => {
+    let ran = false
+    registerWriteEffect(() => { ran = true })
+    await expect(put('settings', { title: '' })).rejects.toMatchObject({ statusCode: 400 })
+    expect(ran).toBe(false)
+  })
+})

package/layers/core/server/api/[collection]/index.put.ts

@@ -3,5 +3,22 @@ export default defineEventHandler(async (event) => {
   const collection = requireCollection(event)
   const query = getQuery(event)
   const body = await readBody(event)
-  return putSingleton(useDb(), collection, query.locale as string | undefined, body, { expectedUpdatedAt: readIfUnmodifiedSince(event) })
+  const saved = putSingleton(useDb(), collection, query.locale as string | undefined, body, { expectedUpdatedAt: readIfUnmodifiedSince(event) })
+  // Awaited, and a rejection is the save's response: a singleton whose write has an external side effect
+  // (the redirects artifact the edge serves) is not really saved until that side effect landed, and the
+  // write-event bus swallows throws by design. See write-effects.ts.
+  try {
+    await runWriteEffects(collection.def, saved)
+  } catch (error) {
+    // The row IS committed and its `updatedAt` bumped, but the client only rebaselines on success — so
+    // hand the new baseline back with the error, or the retry these failures ask for would 409 on a
+    // precondition that is stale by construction.
+    const err = error as { statusCode?: number; statusMessage?: string; data?: Record<string, unknown> }
+    throw createError({
+      statusCode: err.statusCode ?? 500,
+      statusMessage: err.statusMessage ?? 'The record was saved but a follow-up step failed',
+      data: { ...(err.data ?? {}), savedUpdatedAt: new Date(saved.updatedAt as string | number).getTime() },
+    })
+  }
+  return saved
 })

package/layers/core/server/utils/collection-types.ts

@@ -20,8 +20,9 @@ export interface BuiltCollection {
   insert: CollectionSchema
   update: CollectionSchema
   select: CollectionSchema
-  /** Re-enforce `required` for conditional fields whose condition is met against the whole record
-   *  (the per-field schema can't see siblings). Returns Zod-shaped issues keyed by the field's def
-   *  name. Present only when the collection has conditional required fields. */
+  /** Every pre-write check the per-field schema can't do because it sees one field at a time: `required`
+   *  re-enforced for conditional fields whose condition is met against the whole record, plus the
+   *  collection's own `def.validate`. Returns Zod-shaped issues keyed by the field's def name. Present
+   *  only when the collection has conditional required fields or a `validate`. */
   applyConditions?: (record: Record<string, unknown>) => { issues: ConditionIssue[] }
 }

package/layers/core/server/utils/defineCollection.ts

@@ -15,7 +15,6 @@ export type Localized = string | Record<string, string>
 interface BaseFieldDef {
   required?: boolean
   default?: unknown
-  translatable?: boolean
   unique?: boolean
   /** Add a non-unique DB index on this field's column — for a field frequently FILTERED or SORTED by but
    *  not unique (e.g. `media.folder`). `unique` already implies an index, so this is only the non-unique case. */
@@ -97,7 +96,7 @@ export type FieldDef =
   | (BaseFieldDef & { type: 'number'; options?: { min?: number; max?: number; integer?: boolean; decimals?: number; unit?: string; units?: string[] } })
   | (BaseFieldDef & { type: 'boolean' })
   | (BaseFieldDef & { type: 'datetime'; options?: { precision?: 'date' | 'datetime' | 'time'; range?: boolean } })
-  | (BaseFieldDef & { type: 'choice'; options: { choices: { label: string; value: string }[]; multiple?: boolean; display?: 'select' | 'buttons' | 'checkboxes' } })
+  | (BaseFieldDef & { type: 'choice'; options: { choices: { label: Localized; value: string }[]; multiple?: boolean; display?: 'select' | 'buttons' | 'checkboxes' } })
   | (BaseFieldDef & { type: 'link'; options?: { types?: LinkType[]; collections?: string[] } })
   | (BaseFieldDef & { type: 'media'; options?: { multiple?: boolean; accept?: 'image' | 'any' } })
   | (BaseFieldDef & { type: 'relation'; relation: { collection: string; many?: boolean; labelField?: string } })
@@ -158,6 +157,13 @@ export interface CollectionDef {
    *  so adding a field never hides it. Absent → today's one-field-per-row. (Deviates from Pruvious, which
    *  nests this under a `dashboard` wrapper — Kestrel keeps its flat CollectionDef idiom.) */
   fieldLayout?: FieldLayoutDSL
+  /** Whole-record validation the per-field Zod schema cannot express, because a field validator only ever
+   *  sees its own value — e.g. a rule set whose rows have to compile as a unit. Runs server-side BEFORE
+   *  the write, next to the conditional-required check, and its issues become the same field-scoped 400
+   *  the editor already renders. Server-only: a function, never serialized.
+   *  Note the asymmetry: `record` is keyed by COLUMN name (`authorId` for a single relation/media field —
+   *  see `resolveColumnName`), while an issue's `path[0]` is the FIELD key the editor renders against. */
+  validate?: (record: Record<string, unknown>) => Array<{ path: (string | number)[]; message: string }>
   /** Display labels. `new` is the complete, per-locale "create" phrase (e.g. de `'Neue Seite'` /
    *  `'Neuer Beitrag'`) — supplying the whole phrase sidesteps German gender agreement, which no
    *  `'Neu {x}'` template can get right. Falls back to a generic phrase from `singular` when absent. */

package/layers/core/server/utils/kestrel-config.ts

@@ -138,10 +138,32 @@ export interface KestrelConfig {
   /** Disable Kestrel's built-in collections (default on). Set in `kestrel: {}` (consumer nuxt.config) or
    *  `kestrel.config.ts`; per-setting env `KESTREL_COLLECTIONS_PAGES` / `_MEDIA` overrides. */
   collections?: { pages?: boolean; media?: boolean }
+  /** Search / answer-engine surface. Both flags default to **false** and stay off until a consumer turns
+   *  them on: each one publishes something the site did not publish before, and an upgrade must never
+   *  start disclosing it. Everything else on this surface (canonical, OG, hreflang, sitemap, robots,
+   *  llms.txt, the WebSite/WebPage JSON-LD graph) is unconditional — it only restates what the page head
+   *  already says. */
+  seo?: {
+    /** Offer editors `author` / `publishedDate` / `keywords` on the SEO panel and publish them as
+     *  schema.org `author` / `datePublished` / `keywords` (which also promotes the page's JSON-LD node
+     *  from `WebPage` to `Article`). Some consumers must not attribute content at all — internal
+     *  authorship, confidentiality — so nothing is emitted and the fields are not even shown unless this
+     *  is on. Env `KESTREL_SEO_ARTICLE_META`. */
+    articleMeta?: boolean
+    /** Serve and publish `/llms-full.txt`: the full Markdown body of every published, indexable page in
+     *  one file (the llmstxt.org long form). Off by default — it aggregates the whole site into a single
+     *  scrapeable artifact, and it reads every page's block content on every publish, which the link-only
+     *  `llms.txt` deliberately avoids. Env `KESTREL_SEO_LLMS_FULL`. */
+    llmsFull?: boolean
+  }
   /** Admin page-builder live preview. `desktopWidth` is the reference viewport width (px) the "Desktop"
    *  preset renders at before the editor's scale-to-fit shrinks it to the pane; default 1440. Env:
    *  `KESTREL_PREVIEW_DESKTOP_WIDTH`. */
   preview?: { desktopWidth?: number }
+  /** EU AI Act Art. 50 disclosure fields on media assets — OFF by default. Kestrel only stores/manages
+   *  this metadata; it never burns a label/watermark into an image and never auto-emits it into public
+   *  output — see docs/media-uploads.md. Env: `KESTREL_AI_DISCLOSURE`. */
+  aiDisclosure?: { enabled?: boolean }
 }
 
 export interface ResolvedKestrel {
@@ -170,8 +192,13 @@ export interface ResolvedKestrel {
   }
   /** Resolved built-in-collection toggles (default on). The register plugin skips a built-in whose flag is false. */
   collections: { pages: boolean; media: boolean }
+  /** Resolved answer-engine toggles, both default-off (see `KestrelConfig.seo`). */
+  seo: { articleMeta: boolean; llmsFull: boolean }
   /** Resolved admin-preview settings (surfaced to the client via `runtimeConfig.public`). */
   preview: { desktopWidth: number }
+  /** Gates the media-disclosure UI in the admin ONLY. `ResolvedMedia.aiDisclosure` is always resolved from
+   *  the columns, so turning this off hides the editor controls without touching existing data. */
+  aiDisclosure: { enabled: boolean }
 }
 
 type Env = Record<string, string | undefined>
@@ -411,7 +438,14 @@ export function resolveKestrel(config: KestrelConfig | undefined, env: Env, root
     media: envBool(env.KESTREL_COLLECTIONS_MEDIA, c.collections?.media ?? true),
   }
 
+  const seo = {
+    articleMeta: envBool(env.KESTREL_SEO_ARTICLE_META, c.seo?.articleMeta ?? false),
+    llmsFull: envBool(env.KESTREL_SEO_LLMS_FULL, c.seo?.llmsFull ?? false),
+  }
+
   const preview = { desktopWidth: resolvePosInt(c.preview?.desktopWidth, env.KESTREL_PREVIEW_DESKTOP_WIDTH, 1440) }
 
-  return { dbPath, siteUrl, siteName, siteDescription, supportedLocales, primaryLocale, prefixPrimary, media, output, collections, preview }
+  const aiDisclosure = { enabled: envBool(env.KESTREL_AI_DISCLOSURE, c.aiDisclosure?.enabled ?? false) }
+
+  return { dbPath, siteUrl, siteName, siteDescription, supportedLocales, primaryLocale, prefixPrimary, media, output, collections, seo, preview, aiDisclosure }
 }