@mulmoclaude/core 0.2.10 → 0.2.12

package/assets/helps/billing-invoice.md

@@ -3,11 +3,12 @@
 Read this when the user asks to **set up invoicing / billing** (sample query:
 *"Set up invoicing for my business"*). It scaffolds **two** collection skills:
 
-- **`profile`** — the user's **own** business identity (the "bill-from" block:
-  company name, tax ID, payment details). A singleton (one record, id `me`).
-- **`invoice`** — an invoice ledger; each invoice references a client, embeds the
-  profile as the issuer, and carries a table of line items with host-computed
-  subtotal / tax / total.
+- **`profile`** — the user's **own** business identit(ies) (the "bill-from" block:
+  company name, tax ID, payment details). One or more records, one per issuer; the
+  primary one is id `me`.
+- **`invoice`** — an invoice ledger; each invoice references a client, picks an
+  issuer profile (`issuerId` → `profile`) which it embeds as the bill-from block,
+  and carries a table of line items with host-computed subtotal / tax / total.
 
 This is **Bundle B** of the billing suite. It **builds on Bundle A**
 (`clients` + `worklog`, see `config/helps/billing-clients-worklog.md`):
@@ -37,7 +38,10 @@ use the `mc-` prefix.**
 > other collections in the workspace. The whole point is a reproducible billing
 > suite. (For a *custom* collection, use `config/helps/collection-skills.md`
 > instead.) Existing records under `data/invoice/items` / `data/profile/items`
-> already match these schemas and will render as-is — no data edits needed.
+> render as-is, with one exception: because `invoice.issuerId` is new and
+> required, **backfill `issuerId: "me"` on any pre-existing invoice records** (a
+> `manageCollection` `putItems` with `mode: "merge"`) so their issuer block
+> resolves — otherwise they show a "missing issuer" prompt until set.
 
 ## Slug contract (do not change these)
 
@@ -45,7 +49,7 @@ use the `mc-` prefix.**
 
 | Collection | slug | `dataPath` | referenced by |
 |---|---|---|---|
-| Profile | `profile` | `data/profile/items` | `invoice.issuer` (embed `profile/me`) |
+| Profile | `profile` | `data/profile/items` | `invoice.issuerId` (ref) + `invoice.issuer` (embed via `idField`) |
 | Invoice | `invoice` | `data/invoice/items` | — |
 | Clients | `clients` | `data/clients/items` | `invoice.clientId` (ref, from Bundle A) |
 
@@ -56,13 +60,15 @@ use the `mc-` prefix.**
 
 ## Order: `profile` before `invoice`
 
-`invoice.issuer` embeds the `profile/me` record, so create `profile` first.
+`invoice.issuerId` references a `profile` record (and `issuer` embeds it), so
+create `profile` first.
 
 ---
 
 ## 1. `profile`
 
-`data/skills/profile/schema.json` (a **singleton** — exactly one record, id `me`):
+`data/skills/profile/schema.json` (one record per issuer; the primary one is id
+`me` — **not** a singleton, so an invoice can pick among several issuers):
 
 ```json
 {
@@ -70,7 +76,6 @@ use the `mc-` prefix.**
   "icon": "badge",
   "dataPath": "data/profile/items",
   "primaryKey": "id",
-  "singleton": "me",
   "fields": {
     "id":                { "type": "string",   "label": "ID", "primary": true, "required": true },
     "companyName":       { "type": "string",   "label": "Company / legal name", "required": true },
@@ -90,25 +95,27 @@ use the `mc-` prefix.**
 ```markdown
 ---
 name: profile
-description: The user's own business profile — the issuer ("bill-from") identity
-  used on invoices. A singleton collection with exactly one record, id `me`. The
-  record lives at `data/profile/items/me.json`; the user views and edits it at
-  `/collections/profile`. Record I/O via the `manageCollection` tool (raw
-  Read / Write / Edit on the JSON file is the escape hatch).
+description: The user's own business profile(s) — the issuer ("bill-from") identity
+  used on invoices. One or more records, each an issuer; the primary one is `me`.
+  Records live at `data/profile/items/<id>.json`; the user views and edits them at
+  `/collections/profile`. Each invoice picks one via its `issuerId` ref. Record I/O
+  via the `manageCollection` tool (raw Read / Write / Edit on the JSON is the escape hatch).
 ---
 
 # Business Profile (schema-driven collection)
 
-Holds the user's **own** business identity — the "bill-from" side of an invoice.
-Counterpart to `clients`, which holds the "bill-to" parties.
+Holds the user's **own** business identit(ies) — the "bill-from" side of an
+invoice. Counterpart to `clients`, which holds the "bill-to" parties.
 
-## Singleton — exactly one record, id `me`
-This collection has **one** record. Its primary key is always the literal string
-`me`, stored at `data/profile/items/me.json`. Never create a second record and
-never invent another id — read, create, and update `me.json` only.
+## Multiple issuers — `me` is the primary one
+This collection can hold **several** records, one per issuer identity (a personal
+name, a company, a second LLC). The primary profile keeps the id `me`, stored at
+`data/profile/items/me.json`; add more with their own kebab-case ids (e.g.
+`pervasive`, `personal`). An invoice points at one via its `issuerId`, so a
+profile must exist before an invoice can reference it.
 
 ## Record shape
-- `id` — string, **primary key**, always `me`
+- `id` — string, **primary key** (kebab-case slug; the primary profile is `me`)
 - `companyName` — string, **required** (the legal/company name shown on invoices)
 - `taxRegistrationId` — string (VAT / EIN / JP T-number — region-dependent)
 - `email` — email
@@ -123,18 +130,20 @@ never invent another id — read, create, and update `me.json` only.
 Leave optional fields the user hasn't given you out of the JSON entirely.
 
 ## What to do
-**Set up / update**: Read `data/profile/items/me.json` (may not exist yet), merge
-changes, Write back. Preserve fields you weren't asked to change. If missing and
-the user wants to set their profile, create it with `id: "me"` plus the fields
-they provided.
+**Set up / update**: Read the relevant `data/profile/items/<id>.json` (the primary
+one is `me.json`, may not exist yet), merge changes, Write back. Preserve fields
+you weren't asked to change. When creating the primary profile use `id: "me"`; for
+an additional issuer, list `data/profile/items/` first and pick a fresh kebab-case
+id.
 
-**Look up**: Read `me.json` and answer from it. If missing, tell the user their
-profile isn't set up yet and offer to collect it (`presentForm` only if several
-fields are needed at once).
+**Look up**: Read the relevant profile JSON and answer from it. If the primary
+`me.json` is missing, tell the user their profile isn't set up yet and offer to
+collect it (`presentForm` only if several fields are needed at once).
 
-**Never delete** the profile unless the user explicitly asks to reset it.
+**Never delete** a profile unless the user explicitly asks to — an invoice's
+`issuerId` ref breaks if you remove a profile it points at.
 
-## Linking to the profile in chat
+## Linking to a profile in chat
 - Do: `[your business profile](/collections/profile?selected=me)`
 - Don't: link the raw JSON path.
 
@@ -147,8 +156,9 @@ only when you genuinely need several fields they haven't provided.
 
 ## 2. `invoice`
 
-`data/skills/invoice/schema.json` (`issuer` embeds `profile/me`; `clientId` is a
-`ref` **to `clients`**; subtotal / tax / total are `derived`):
+`data/skills/invoice/schema.json` (`issuerId` is a `ref` **to `profile`** and
+`issuer` embeds whichever profile it names via `idField`; `clientId` is a `ref`
+**to `clients`**; subtotal / tax / total are `derived`):
 
 ```json
 {
@@ -158,7 +168,8 @@ only when you genuinely need several fields they haven't provided.
   "primaryKey": "id",
   "fields": {
     "id":        { "type": "string", "label": "ID", "primary": true, "required": true },
-    "issuer":    { "type": "embed",  "to": "profile", "id": "me", "label": "From (issuer)" },
+    "issuerId":  { "type": "ref",    "to": "profile", "label": "From (issuer)", "required": true },
+    "issuer":    { "type": "embed",  "to": "profile", "idField": "issuerId", "label": "From (issuer)" },
     "clientId":  { "type": "ref",    "to": "clients", "label": "Client", "required": true },
     "issueDate": { "type": "date",   "label": "Issued", "required": true },
     "dueDate":   { "type": "date",   "label": "Due" },
@@ -196,7 +207,8 @@ name: invoice
 description: A simple invoice ledger — create, list, edit, and remove invoices.
   Records live at `data/invoice/items/<id>.json`; the user views them at
   `/collections/invoice`. Each invoice references a client (`clientId` → the
-  `clients` collection) and embeds the user's `profile/me` as the issuer.
+  `clients` collection) and an issuer profile (`issuerId` → the `profile`
+  collection), which it embeds as the bill-from block.
   Subtotal / tax / total are host-computed — you don't write them.
 ---
 
@@ -207,9 +219,13 @@ description: A simple invoice ledger — create, list, edit, and remove invoices
   counter): `INV-2026-0001`. List `data/invoice/items/` first to find the highest
   number for the year, then increment; pick the next free number rather than
   overwriting.
-- `issuer` — **display-only** embed of `profile/me` (the bill-from block). You do
-  **not** write this — it carries no stored value. If the profile isn't set up,
-  the view shows a "set it up" prompt; point the user at `/collections/profile`.
+- `issuerId` — ref → `profile`, **required**. The bill-from identity. Write the
+  raw profile slug (the primary profile is `me`); the host renders it as a dropdown
+  picker. List `data/profile/items/` to find the right slug; no profile set up yet
+  → point the user at `/collections/profile`.
+- `issuer` — **display-only** embed of the profile named by `issuerId` (the
+  bill-from block). You do **not** write this — it carries no stored value; it
+  follows whatever `issuerId` points at.
 - `clientId` — ref → `clients`, **required**
 - `issueDate` — ISO date `YYYY-MM-DD`, **required** (default today)
 - `dueDate` — ISO date (optional)
@@ -232,8 +248,10 @@ or supply a literal slug. Never invent a clientId — it renders as a broken lin
 
 ## What to do
 **Create**: derive an `id`, build the record, Write `data/invoice/items/<id>.json`.
-Defaults: `status: "draft"`, `issueDate: <today>`. Set `currency` from context —
-don't silently default to USD. Don't write `subtotal` / `tax` / `total`.
+Defaults: `status: "draft"`, `issueDate: <today>`, `issuerId: "me"` (the primary
+profile) unless the user names a different issuer — then resolve it to a real
+`profile` slug. Set `currency` from context — don't silently default to USD. Don't
+write `subtotal` / `tax` / `total`.
 
 **Create from worklog hours** (common): when the user says "invoice Acme for the
 work I did this month":
@@ -304,11 +322,12 @@ and present it in the canvas with the `presentDocument` tool. Steps:
 
 1. **Resolve the recipient (Bill To).** Read `data/clients/items/<clientId>.json`
    for the client's `name`, `address`, `email`.
-2. **Resolve the issuer (From).** Read `data/profile/items/me.json` for
-   `companyName`, `taxRegistrationId`, `address`, `email`, `phone`,
-   `paymentDetails`. **If that file does not exist**, stop and tell the user their
-   business profile isn't set up — point them at `/collections/profile` — and do
-   not write a half-blank invoice.
+2. **Resolve the issuer (From).** Read `data/profile/items/<issuerId>.json` — the
+   invoice's own `issuerId` (fall back to `me` for a legacy invoice without one) —
+   for `companyName`, `taxRegistrationId`, `address`, `email`, `phone`,
+   `paymentDetails`. **If that file does not exist**, stop and tell the user that
+   issuer's business profile isn't set up — point them at `/collections/profile` —
+   and do not write a half-blank invoice.
 3. **Compute totals** from line items: `subtotal` = Σ(`quantity` × `rate`), `tax`
    = `subtotal` × `taxRate` (missing `taxRate` = 0), `total` = `subtotal` + `tax`.
    Format money with the invoice's `currency`.
@@ -332,8 +351,11 @@ The invoice record is in the `<record_data_json>` block above. You are the
 `accounting` role and own `manageAccounting`. Post the double-entry sale journal.
 
 ### 1. Resolve the book
-1. Read `data/profile/items/me.json`. If it has a non-empty `defaultBookId`, use
-   it as `bookId` and skip the rest of this step.
+1. Read `data/profile/items/<issuerId>.json` — the invoice's own `issuerId` (fall
+   back to `me` for a legacy invoice without one). If it has a non-empty
+   `defaultBookId`, use it as `bookId` and skip the rest of this step. If that
+   profile file doesn't exist, tell the user that issuer's profile isn't set up
+   (point them at `/collections/profile`) and stop.
 2. Otherwise call `manageAccounting` `getBooks`. One book → use it. Several →
    keep books whose currency/country fit the invoice; if one remains use it; else
    prefer the book whose name matches the issuer's `companyName`; only if still
@@ -378,11 +400,14 @@ The invoice record is in the `<record_data_json>` block above. You are the
 `accounting` role and own `manageAccounting`. The invoice is paid; post the
 cash-receipt journal that clears the receivable. Payment is always direct deposit
 to the issuer's bank account (the issuer's `paymentDetails` on
-`data/profile/items/me.json`), so the debit is the book's Cash / Checking account.
+`data/profile/items/<issuerId>.json`), so the debit is the book's Cash / Checking
+account.
 
 ### 1. Resolve the book
-Read `data/profile/items/me.json` for a non-empty `defaultBookId`; else `getBooks`
-and pick as in the sale flow. No book → tell the user to set one up and stop.
+Read `data/profile/items/<issuerId>.json` — the invoice's own `issuerId` (fall
+back to `me` for a legacy invoice) — for a non-empty `defaultBookId`; else
+`getBooks` and pick as in the sale flow. No book → tell the user to set one up and
+stop.
 
 ### 2. Resolve real account codes
 `getAccounts` — never invent: **Cash / Checking / Bank** (asset, the debit; if
@@ -418,7 +443,8 @@ The invoice record is in the `<record_data_json>` block above. You are the
 journals posted for it.
 
 ### 1. Resolve the book
-Read `data/profile/items/me.json` for a non-empty `defaultBookId`; else resolve
+Read `data/profile/items/<issuerId>.json` — the invoice's own `issuerId` (fall
+back to `me` for a legacy invoice) — for a non-empty `defaultBookId`; else resolve
 via `getBooks` (as in the sale flow). No book → nothing to void; say so and stop.
 
 ### 2. Resolve the Accounts Receivable code

package/assets/helps/collection-skills.md

@@ -168,10 +168,17 @@ Every field spec needs a `type` and a `label`. Extra keys by type:
   A `derived` field on the same record can also **dereference** a `ref` to read
   a numeric column off the record it points at — see the cross-collection
   formula syntax below.
-- **`embed`** — `to: "<target-slug>"`, `id: "<record-id>"`. Pulls a _fixed_
+- **`embed`** — `to: "<target-slug>"`, plus **exactly one** of `id` (a _fixed_
+  record id, same for every row) or `idField` (a _per-record_ target). Pulls a
   record from another collection into the read-only detail view (display-only,
-  **nothing is stored** on this record). Example: an invoice embedding the
-  user's own profile: `{ "type": "embed", "to": "profile", "id": "me" }`.
+  **nothing is stored** on this record). Fixed — every row embeds the same
+  singleton record (e.g. a one-record `settings` collection):
+  `{ "type": "embed", "to": "settings", "id": "app" }`.
+  Per-record — `idField` names a sibling field (typically a `ref`) holding the
+  target id, so each row embeds a different record; the host renders that
+  sibling as a dropdown picker in the editor and hides its own cell (the embed
+  owns it). E.g. a multi-issuer invoice: a `ref` field `issuerId → profile`
+  plus `{ "type": "embed", "to": "profile", "idField": "issuerId" }`.
 - **`table`** — `of: { <col>: <sub-field-spec>, ... }`. An array of rows. Each
   sub-field is a flat spec; sub-fields **cannot** be `table` or `derived`
   (no nested tables, no computed columns).
@@ -851,8 +858,9 @@ recipe when the user wants any of them, and copy the schema verbatim:
   - **`worklog`** — adds a `ref` (`clientId → clients`), a `date`, a `number`, a
     `boolean`. A companion data source.
 - **`config/helps/billing-invoice.md`** (Bundle B):
-  - **`profile`** — a `singleton` (one record, id `me`): the issuer identity.
-  - **`invoice`** — the full toolkit in one schema: an `embed` issuer
-    (`profile/me`), a `ref` client (`clients`), a `table` of line items, three
-    `derived` money fields, an `enum` status, and four `actions` (PDF always-on;
-    sale / payment / void gated by `status` via `when`).
+  - **`profile`** — one record per issuer identity (primary id `me`); each invoice
+    picks one.
+  - **`invoice`** — the full toolkit in one schema: a `ref` issuer (`issuerId →
+    profile`) embedded via an `idField` `embed`, a `ref` client (`clients`), a
+    `table` of line items, three `derived` money fields, an `enum` status, and four
+    `actions` (PDF always-on; sale / payment / void gated by `status` via `when`).

package/dist/collection/core/schema.d.ts

@@ -151,6 +151,27 @@ export interface CollectionCustomView {
     /** Skill-relative path to the HTML file under `views/` (e.g.
      *  `views/year.html`). Path-safe, must end in `.html`. */
     file: string;
+    /** Optional skill-relative path to a JSON translation dictionary co-located
+     *  with the view (e.g. `views/year.i18n.json`). Shape mirrors **vue-i18n
+     *  locale messages** so an author can lift their app's locale JSON
+     *  verbatim:
+     *
+     *  ```json
+     *  { "en": { "next": "Next", "hello": "Hello, {name}" },
+     *    "ja": { "next": "次へ", "hello": "{name} さん、こんにちは" } }
+     *  ```
+     *
+     *  The host picks the block matching the active app locale (fallback
+     *  `"en"`, else `{}`) and injects ONLY that flat string map into
+     *  `window.__MC_VIEW.dict`. The iframe-side helper
+     *  `__MC_VIEW.t(key, named?)` mirrors vue-i18n's `t('msg', { name: 'x' })`
+     *  signature — named-interpolation only (no pluralization / linked
+     *  messages in v1; shipping vue-i18n's full runtime into every sandboxed
+     *  iframe would dominate page weight). The view never sees other locales'
+     *  strings. Constrained to `views/*.i18n.json` so authors keep the
+     *  translation file next to the HTML it translates. Absent ⇒ host-side
+     *  no-op (an i18n-less view keeps working; `t(key)` echoes the key). */
+    i18n?: string;
     /** What the view may do with the data endpoint. Defaults to `["read"]`
      *  (least privilege); declare `["read","write"]` only for views that
      *  edit records. The mint endpoint clamps any requested caps to this. */
@@ -199,9 +220,20 @@ export interface CollectionFieldSpec {
      *  record to pull from the `to` collection (e.g. `me` for the
      *  singleton mc-profile). Nothing is stored on this record — the
      *  embed is a display-only directive resolved at render time, so
-     *  it never appears in the list table or the edit form. Required
-     *  when type is `embed`; ignored on every other type. */
+     *  it never appears in the list table or the edit form. Supply
+     *  either this (a fixed target, same for every record) or
+     *  `idField` (a per-record target) — exactly one. Ignored on every
+     *  other type. */
     id?: string;
+    /** When `type === "embed"`: the name of a sibling top-level field
+     *  whose value names the target record's primary key — letting the
+     *  embed point at a *different* record per row (e.g. an invoice's
+     *  `issuerId` ref selects which `profile` to embed as the
+     *  bill-from block). The renderer reads `record[idField]` at render
+     *  time; an absent/empty value resolves to "no record" (the same
+     *  fail-soft as a missing fixed `id`). Mutually exclusive with `id`
+     *  — an embed must declare exactly one. Ignored on every other type. */
+    idField?: string;
     /** When `type === "money"` (or `type === "derived"` with
      *  `display: "money"`): a literal ISO 4217 currency code passed to
      *  `Intl.NumberFormat` for display — fixed for every record. The

package/dist/collection/paths.cjs

@@ -36,8 +36,20 @@ var VIEWS_PREFIX = "views/";
 function isSafeCustomViewPath(value) {
 	return value.startsWith(VIEWS_PREFIX) && /\.html$/.test(value) && isSafeTemplatePath(value);
 }
+/**
+* A custom-view `i18n` value: the JSON dictionary file authors ship next to
+* their `views/<id>.html`. Constrained to `views/<name>.i18n.json` so the
+* field can only point at a translation file co-located with the view it
+* translates — the same `views/` containment the HTML reader uses. The
+* `.i18n.json` suffix (vs plain `.json`) makes the file's purpose grep-able
+* for both authors and tooling.
+*/
+function isSafeCustomViewI18nPath(value) {
+	return value.startsWith(VIEWS_PREFIX) && /\.i18n\.json$/.test(value) && isSafeTemplatePath(value);
+}
 //#endregion
 exports.isSafeActionTemplatePath = isSafeActionTemplatePath;
+exports.isSafeCustomViewI18nPath = isSafeCustomViewI18nPath;
 exports.isSafeCustomViewPath = isSafeCustomViewPath;
 exports.isSafeTemplatePath = isSafeTemplatePath;
 

package/dist/collection/paths.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"paths.cjs","names":[],"sources":["../../src/collection/server/templatePath.ts"],"sourcesContent":["// Shared template-path safety, used by BOTH the collection schema\n// validator (`discovery.ts` `ActionSpecSchema`) and the skill-bridge\n// hook (`hooks/handlers/skillBridge.ts`). Centralised so the set of\n// action `template` paths a schema may declare is *exactly* the set\n// the bridge mirrors into `.claude/skills/<slug>/` — if the two\n// diverge, a schema can validate yet reference a template the bridge\n// silently drops (runtime \"template could not be read\").\n//\n// Keep this module dependency-free: the bridge is bundled into a lean\n// esbuild dispatcher, so it must not drag in workspace/path machinery.\n\n/** `templates/` — the subdir an action template must live under. */\nconst TEMPLATES_PREFIX = \"templates/\";\n\n/**\n * A safe skill-relative path: non-empty, no backslash, not absolute,\n * and every `/`-separated segment is a plain `[A-Za-z0-9._-]+` token\n * that isn't `.` / `..` (no traversal). Multi-segment (nested) paths\n * are allowed. The reader's realpath containment is the hard\n * guarantee; this fails a bad path fast.\n */\nexport function isSafeTemplatePath(value: string): boolean {\n  if (value.length === 0 || value.includes(\"\\\\\") || value.startsWith(\"/\")) return false;\n  return value.split(\"/\").every((seg) => seg.length > 0 && seg !== \".\" && seg !== \"..\" && /^[A-Za-z0-9._-]+$/.test(seg));\n}\n\n/**\n * An action `template` value: a safe path that lives under the skill's\n * `templates/` subdir. This is the canonical contract — the schema\n * validator rejects anything else up front, and the bridge mirrors\n * exactly these. Nested paths (`templates/mail/welcome.md`) and any\n * extension are allowed as long as the path is otherwise safe.\n */\nexport function isSafeActionTemplatePath(value: string): boolean {\n  return value.startsWith(TEMPLATES_PREFIX) && isSafeTemplatePath(value);\n}\n\n/** `views/` — the subdir a custom-view HTML file must live under. */\nconst VIEWS_PREFIX = \"views/\";\n\n/**\n * A custom-view `file` value: a safe path under the skill's `views/`\n * subdir that ends in `.html`. Custom views are LLM-authored HTML the\n * host renders in a sandboxed iframe; constraining them to `views/*.html`\n * keeps the data folder and the schema/template files off-limits to the\n * view-file reader. Same per-segment safety as templates; the reader's\n * realpath containment is the hard guarantee.\n */\nexport function isSafeCustomViewPath(value: string): boolean {\n  return value.startsWith(VIEWS_PREFIX) && /\\.html$/.test(value) && isSafeTemplatePath(value);\n}\n"],"mappings":";;;AAYA,IAAM,mBAAmB;;;;;;;;AASzB,SAAgB,mBAAmB,OAAwB;CACzD,IAAI,MAAM,WAAW,KAAK,MAAM,SAAS,IAAI,KAAK,MAAM,WAAW,GAAG,GAAG,OAAO;CAChF,OAAO,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO,QAAQ,IAAI,SAAS,KAAK,QAAQ,OAAO,QAAQ,QAAQ,oBAAoB,KAAK,GAAG,CAAC;AACvH;;;;;;;;AASA,SAAgB,yBAAyB,OAAwB;CAC/D,OAAO,MAAM,WAAW,gBAAgB,KAAK,mBAAmB,KAAK;AACvE;;AAGA,IAAM,eAAe;;;;;;;;;AAUrB,SAAgB,qBAAqB,OAAwB;CAC3D,OAAO,MAAM,WAAW,YAAY,KAAK,UAAU,KAAK,KAAK,KAAK,mBAAmB,KAAK;AAC5F"}
+{"version":3,"file":"paths.cjs","names":[],"sources":["../../src/collection/server/templatePath.ts"],"sourcesContent":["// Shared template-path safety, used by BOTH the collection schema\n// validator (`discovery.ts` `ActionSpecSchema`) and the skill-bridge\n// hook (`hooks/handlers/skillBridge.ts`). Centralised so the set of\n// action `template` paths a schema may declare is *exactly* the set\n// the bridge mirrors into `.claude/skills/<slug>/` — if the two\n// diverge, a schema can validate yet reference a template the bridge\n// silently drops (runtime \"template could not be read\").\n//\n// Keep this module dependency-free: the bridge is bundled into a lean\n// esbuild dispatcher, so it must not drag in workspace/path machinery.\n\n/** `templates/` — the subdir an action template must live under. */\nconst TEMPLATES_PREFIX = \"templates/\";\n\n/**\n * A safe skill-relative path: non-empty, no backslash, not absolute,\n * and every `/`-separated segment is a plain `[A-Za-z0-9._-]+` token\n * that isn't `.` / `..` (no traversal). Multi-segment (nested) paths\n * are allowed. The reader's realpath containment is the hard\n * guarantee; this fails a bad path fast.\n */\nexport function isSafeTemplatePath(value: string): boolean {\n  if (value.length === 0 || value.includes(\"\\\\\") || value.startsWith(\"/\")) return false;\n  return value.split(\"/\").every((seg) => seg.length > 0 && seg !== \".\" && seg !== \"..\" && /^[A-Za-z0-9._-]+$/.test(seg));\n}\n\n/**\n * An action `template` value: a safe path that lives under the skill's\n * `templates/` subdir. This is the canonical contract — the schema\n * validator rejects anything else up front, and the bridge mirrors\n * exactly these. Nested paths (`templates/mail/welcome.md`) and any\n * extension are allowed as long as the path is otherwise safe.\n */\nexport function isSafeActionTemplatePath(value: string): boolean {\n  return value.startsWith(TEMPLATES_PREFIX) && isSafeTemplatePath(value);\n}\n\n/** `views/` — the subdir a custom-view HTML file must live under. */\nconst VIEWS_PREFIX = \"views/\";\n\n/**\n * A custom-view `file` value: a safe path under the skill's `views/`\n * subdir that ends in `.html`. Custom views are LLM-authored HTML the\n * host renders in a sandboxed iframe; constraining them to `views/*.html`\n * keeps the data folder and the schema/template files off-limits to the\n * view-file reader. Same per-segment safety as templates; the reader's\n * realpath containment is the hard guarantee.\n */\nexport function isSafeCustomViewPath(value: string): boolean {\n  return value.startsWith(VIEWS_PREFIX) && /\\.html$/.test(value) && isSafeTemplatePath(value);\n}\n\n/**\n * A custom-view `i18n` value: the JSON dictionary file authors ship next to\n * their `views/<id>.html`. Constrained to `views/<name>.i18n.json` so the\n * field can only point at a translation file co-located with the view it\n * translates — the same `views/` containment the HTML reader uses. The\n * `.i18n.json` suffix (vs plain `.json`) makes the file's purpose grep-able\n * for both authors and tooling.\n */\nexport function isSafeCustomViewI18nPath(value: string): boolean {\n  return value.startsWith(VIEWS_PREFIX) && /\\.i18n\\.json$/.test(value) && isSafeTemplatePath(value);\n}\n"],"mappings":";;;AAYA,IAAM,mBAAmB;;;;;;;;AASzB,SAAgB,mBAAmB,OAAwB;CACzD,IAAI,MAAM,WAAW,KAAK,MAAM,SAAS,IAAI,KAAK,MAAM,WAAW,GAAG,GAAG,OAAO;CAChF,OAAO,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO,QAAQ,IAAI,SAAS,KAAK,QAAQ,OAAO,QAAQ,QAAQ,oBAAoB,KAAK,GAAG,CAAC;AACvH;;;;;;;;AASA,SAAgB,yBAAyB,OAAwB;CAC/D,OAAO,MAAM,WAAW,gBAAgB,KAAK,mBAAmB,KAAK;AACvE;;AAGA,IAAM,eAAe;;;;;;;;;AAUrB,SAAgB,qBAAqB,OAAwB;CAC3D,OAAO,MAAM,WAAW,YAAY,KAAK,UAAU,KAAK,KAAK,KAAK,mBAAmB,KAAK;AAC5F;;;;;;;;;AAUA,SAAgB,yBAAyB,OAAwB;CAC/D,OAAO,MAAM,WAAW,YAAY,KAAK,gBAAgB,KAAK,KAAK,KAAK,mBAAmB,KAAK;AAClG"}

package/dist/collection/paths.js

@@ -35,7 +35,18 @@ var VIEWS_PREFIX = "views/";
 function isSafeCustomViewPath(value) {
 	return value.startsWith(VIEWS_PREFIX) && /\.html$/.test(value) && isSafeTemplatePath(value);
 }
+/**
+* A custom-view `i18n` value: the JSON dictionary file authors ship next to
+* their `views/<id>.html`. Constrained to `views/<name>.i18n.json` so the
+* field can only point at a translation file co-located with the view it
+* translates — the same `views/` containment the HTML reader uses. The
+* `.i18n.json` suffix (vs plain `.json`) makes the file's purpose grep-able
+* for both authors and tooling.
+*/
+function isSafeCustomViewI18nPath(value) {
+	return value.startsWith(VIEWS_PREFIX) && /\.i18n\.json$/.test(value) && isSafeTemplatePath(value);
+}
 //#endregion
-export { isSafeActionTemplatePath, isSafeCustomViewPath, isSafeTemplatePath };
+export { isSafeActionTemplatePath, isSafeCustomViewI18nPath, isSafeCustomViewPath, isSafeTemplatePath };
 
 //# sourceMappingURL=paths.js.map

package/dist/collection/paths.js.map

@@ -1 +1 @@
-{"version":3,"file":"paths.js","names":[],"sources":["../../src/collection/server/templatePath.ts"],"sourcesContent":["// Shared template-path safety, used by BOTH the collection schema\n// validator (`discovery.ts` `ActionSpecSchema`) and the skill-bridge\n// hook (`hooks/handlers/skillBridge.ts`). Centralised so the set of\n// action `template` paths a schema may declare is *exactly* the set\n// the bridge mirrors into `.claude/skills/<slug>/` — if the two\n// diverge, a schema can validate yet reference a template the bridge\n// silently drops (runtime \"template could not be read\").\n//\n// Keep this module dependency-free: the bridge is bundled into a lean\n// esbuild dispatcher, so it must not drag in workspace/path machinery.\n\n/** `templates/` — the subdir an action template must live under. */\nconst TEMPLATES_PREFIX = \"templates/\";\n\n/**\n * A safe skill-relative path: non-empty, no backslash, not absolute,\n * and every `/`-separated segment is a plain `[A-Za-z0-9._-]+` token\n * that isn't `.` / `..` (no traversal). Multi-segment (nested) paths\n * are allowed. The reader's realpath containment is the hard\n * guarantee; this fails a bad path fast.\n */\nexport function isSafeTemplatePath(value: string): boolean {\n  if (value.length === 0 || value.includes(\"\\\\\") || value.startsWith(\"/\")) return false;\n  return value.split(\"/\").every((seg) => seg.length > 0 && seg !== \".\" && seg !== \"..\" && /^[A-Za-z0-9._-]+$/.test(seg));\n}\n\n/**\n * An action `template` value: a safe path that lives under the skill's\n * `templates/` subdir. This is the canonical contract — the schema\n * validator rejects anything else up front, and the bridge mirrors\n * exactly these. Nested paths (`templates/mail/welcome.md`) and any\n * extension are allowed as long as the path is otherwise safe.\n */\nexport function isSafeActionTemplatePath(value: string): boolean {\n  return value.startsWith(TEMPLATES_PREFIX) && isSafeTemplatePath(value);\n}\n\n/** `views/` — the subdir a custom-view HTML file must live under. */\nconst VIEWS_PREFIX = \"views/\";\n\n/**\n * A custom-view `file` value: a safe path under the skill's `views/`\n * subdir that ends in `.html`. Custom views are LLM-authored HTML the\n * host renders in a sandboxed iframe; constraining them to `views/*.html`\n * keeps the data folder and the schema/template files off-limits to the\n * view-file reader. Same per-segment safety as templates; the reader's\n * realpath containment is the hard guarantee.\n */\nexport function isSafeCustomViewPath(value: string): boolean {\n  return value.startsWith(VIEWS_PREFIX) && /\\.html$/.test(value) && isSafeTemplatePath(value);\n}\n"],"mappings":";;AAYA,IAAM,mBAAmB;;;;;;;;AASzB,SAAgB,mBAAmB,OAAwB;CACzD,IAAI,MAAM,WAAW,KAAK,MAAM,SAAS,IAAI,KAAK,MAAM,WAAW,GAAG,GAAG,OAAO;CAChF,OAAO,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO,QAAQ,IAAI,SAAS,KAAK,QAAQ,OAAO,QAAQ,QAAQ,oBAAoB,KAAK,GAAG,CAAC;AACvH;;;;;;;;AASA,SAAgB,yBAAyB,OAAwB;CAC/D,OAAO,MAAM,WAAW,gBAAgB,KAAK,mBAAmB,KAAK;AACvE;;AAGA,IAAM,eAAe;;;;;;;;;AAUrB,SAAgB,qBAAqB,OAAwB;CAC3D,OAAO,MAAM,WAAW,YAAY,KAAK,UAAU,KAAK,KAAK,KAAK,mBAAmB,KAAK;AAC5F"}
+{"version":3,"file":"paths.js","names":[],"sources":["../../src/collection/server/templatePath.ts"],"sourcesContent":["// Shared template-path safety, used by BOTH the collection schema\n// validator (`discovery.ts` `ActionSpecSchema`) and the skill-bridge\n// hook (`hooks/handlers/skillBridge.ts`). Centralised so the set of\n// action `template` paths a schema may declare is *exactly* the set\n// the bridge mirrors into `.claude/skills/<slug>/` — if the two\n// diverge, a schema can validate yet reference a template the bridge\n// silently drops (runtime \"template could not be read\").\n//\n// Keep this module dependency-free: the bridge is bundled into a lean\n// esbuild dispatcher, so it must not drag in workspace/path machinery.\n\n/** `templates/` — the subdir an action template must live under. */\nconst TEMPLATES_PREFIX = \"templates/\";\n\n/**\n * A safe skill-relative path: non-empty, no backslash, not absolute,\n * and every `/`-separated segment is a plain `[A-Za-z0-9._-]+` token\n * that isn't `.` / `..` (no traversal). Multi-segment (nested) paths\n * are allowed. The reader's realpath containment is the hard\n * guarantee; this fails a bad path fast.\n */\nexport function isSafeTemplatePath(value: string): boolean {\n  if (value.length === 0 || value.includes(\"\\\\\") || value.startsWith(\"/\")) return false;\n  return value.split(\"/\").every((seg) => seg.length > 0 && seg !== \".\" && seg !== \"..\" && /^[A-Za-z0-9._-]+$/.test(seg));\n}\n\n/**\n * An action `template` value: a safe path that lives under the skill's\n * `templates/` subdir. This is the canonical contract — the schema\n * validator rejects anything else up front, and the bridge mirrors\n * exactly these. Nested paths (`templates/mail/welcome.md`) and any\n * extension are allowed as long as the path is otherwise safe.\n */\nexport function isSafeActionTemplatePath(value: string): boolean {\n  return value.startsWith(TEMPLATES_PREFIX) && isSafeTemplatePath(value);\n}\n\n/** `views/` — the subdir a custom-view HTML file must live under. */\nconst VIEWS_PREFIX = \"views/\";\n\n/**\n * A custom-view `file` value: a safe path under the skill's `views/`\n * subdir that ends in `.html`. Custom views are LLM-authored HTML the\n * host renders in a sandboxed iframe; constraining them to `views/*.html`\n * keeps the data folder and the schema/template files off-limits to the\n * view-file reader. Same per-segment safety as templates; the reader's\n * realpath containment is the hard guarantee.\n */\nexport function isSafeCustomViewPath(value: string): boolean {\n  return value.startsWith(VIEWS_PREFIX) && /\\.html$/.test(value) && isSafeTemplatePath(value);\n}\n\n/**\n * A custom-view `i18n` value: the JSON dictionary file authors ship next to\n * their `views/<id>.html`. Constrained to `views/<name>.i18n.json` so the\n * field can only point at a translation file co-located with the view it\n * translates — the same `views/` containment the HTML reader uses. The\n * `.i18n.json` suffix (vs plain `.json`) makes the file's purpose grep-able\n * for both authors and tooling.\n */\nexport function isSafeCustomViewI18nPath(value: string): boolean {\n  return value.startsWith(VIEWS_PREFIX) && /\\.i18n\\.json$/.test(value) && isSafeTemplatePath(value);\n}\n"],"mappings":";;AAYA,IAAM,mBAAmB;;;;;;;;AASzB,SAAgB,mBAAmB,OAAwB;CACzD,IAAI,MAAM,WAAW,KAAK,MAAM,SAAS,IAAI,KAAK,MAAM,WAAW,GAAG,GAAG,OAAO;CAChF,OAAO,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO,QAAQ,IAAI,SAAS,KAAK,QAAQ,OAAO,QAAQ,QAAQ,oBAAoB,KAAK,GAAG,CAAC;AACvH;;;;;;;;AASA,SAAgB,yBAAyB,OAAwB;CAC/D,OAAO,MAAM,WAAW,gBAAgB,KAAK,mBAAmB,KAAK;AACvE;;AAGA,IAAM,eAAe;;;;;;;;;AAUrB,SAAgB,qBAAqB,OAAwB;CAC3D,OAAO,MAAM,WAAW,YAAY,KAAK,UAAU,KAAK,KAAK,KAAK,mBAAmB,KAAK;AAC5F;;;;;;;;;AAUA,SAAgB,yBAAyB,OAAwB;CAC/D,OAAO,MAAM,WAAW,YAAY,KAAK,gBAAgB,KAAK,KAAK,KAAK,mBAAmB,KAAK;AAClG"}

package/dist/collection/server/discovery.d.ts

@@ -32,6 +32,7 @@ export declare const CollectionSchemaZ: z.ZodObject<{
         required: z.ZodOptional<z.ZodBoolean>;
         to: z.ZodOptional<z.ZodString>;
         id: z.ZodOptional<z.ZodString>;
+        idField: z.ZodOptional<z.ZodString>;
         currency: z.ZodOptional<z.ZodString>;
         currencyField: z.ZodOptional<z.ZodString>;
         values: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -143,6 +144,7 @@ export declare const CollectionSchemaZ: z.ZodObject<{
         label: z.ZodString;
         icon: z.ZodOptional<z.ZodString>;
         file: z.ZodString;
+        i18n: z.ZodOptional<z.ZodString>;
         capabilities: z.ZodOptional<z.ZodArray<z.ZodEnum<{
             read: "read";
             write: "write";

package/dist/collection/server/index.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_server = require("../../server-Db-x7OXz.cjs");
+const require_server = require("../../server-Ceb6OQ8v.cjs");
 const require_collection_paths = require("../paths.cjs");
 exports.COMPUTED_TYPES = require_server.COMPUTED_TYPES;
 exports.CollectionSchemaZ = require_server.CollectionSchemaZ;
@@ -23,6 +23,7 @@ exports.getWorkspaceRoot = require_server.getWorkspaceRoot;
 exports.isContainedInRoot = require_server.isContainedInRoot;
 exports.isContainedInWorkspace = require_server.isContainedInWorkspace;
 exports.isSafeActionTemplatePath = require_collection_paths.isSafeActionTemplatePath;
+exports.isSafeCustomViewI18nPath = require_collection_paths.isSafeCustomViewI18nPath;
 exports.isSafeCustomViewPath = require_collection_paths.isSafeCustomViewPath;
 exports.isSafeTemplatePath = require_collection_paths.isSafeTemplatePath;
 exports.isTriggerDue = require_server.isTriggerDue;
@@ -34,6 +35,7 @@ exports.maybeSpawnSuccessor = require_server.maybeSpawnSuccessor;
 exports.parseCivil = require_server.parseCivil;
 exports.publishCollectionChange = require_server.publishCollectionChange;
 exports.readCustomViewHtml = require_server.readCustomViewHtml;
+exports.readCustomViewI18n = require_server.readCustomViewI18n;
 exports.readItem = require_server.readItem;
 exports.readSkillTemplate = require_server.readSkillTemplate;
 exports.resolveCreateItemId = require_server.resolveCreateItemId;

package/dist/collection/server/index.js

@@ -1,3 +1,3 @@
-import { A as readSkillTemplate, B as safeSlugName, C as buildActionSeedPrompt, D as listItems, E as generateItemId, F as isContainedInWorkspace, G as setCollectionChangePublisher, H as getWorkspaceRoot, I as itemFilePath, L as resolveDataDir, M as writeItem, N as SCHEMA_FILE, O as readCustomViewHtml, P as isContainedInRoot, R as resolveTemplatePath, S as validateRecordObject, T as deleteItem, U as log, V as configureCollectionHost, W as publishCollectionChange, _ as loadCollection, a as computeSuccessor, b as COMPUTED_TYPES, c as isTriggerDue, d as resolveEvery, f as successorId, g as discoverCollections, h as acceptParsedSchema, i as advanceTriggerDate, j as resolveCreateItemId, k as readItem, l as maybeSpawnSuccessor, m as CollectionSchemaZ, n as deleteCollection, o as daysInMonth, p as enrichItems, r as deleteCollectionRefusalMessage, s as formatCivil, t as deleteCustomView, u as parseCivil, v as toDetail, w as buildCollectionActionSeedPrompt, x as validateCollectionRecords, y as toSummary, z as safeRecordId } from "../../server-q4WPXtbU.js";
-import { isSafeActionTemplatePath, isSafeCustomViewPath, isSafeTemplatePath } from "../paths.js";
-export { COMPUTED_TYPES, CollectionSchemaZ, SCHEMA_FILE, acceptParsedSchema, advanceTriggerDate, buildActionSeedPrompt, buildCollectionActionSeedPrompt, computeSuccessor, configureCollectionHost, daysInMonth, deleteCollection, deleteCollectionRefusalMessage, deleteCustomView, deleteItem, discoverCollections, enrichItems, formatCivil, generateItemId, getWorkspaceRoot, isContainedInRoot, isContainedInWorkspace, isSafeActionTemplatePath, isSafeCustomViewPath, isSafeTemplatePath, isTriggerDue, itemFilePath, listItems, loadCollection, log, maybeSpawnSuccessor, parseCivil, publishCollectionChange, readCustomViewHtml, readItem, readSkillTemplate, resolveCreateItemId, resolveDataDir, resolveEvery, resolveTemplatePath, safeRecordId, safeSlugName, setCollectionChangePublisher, successorId, toDetail, toSummary, validateCollectionRecords, validateRecordObject, writeItem };
+import { A as readItem, B as safeRecordId, C as buildActionSeedPrompt, D as listItems, E as generateItemId, F as isContainedInRoot, G as publishCollectionChange, H as configureCollectionHost, I as isContainedInWorkspace, K as setCollectionChangePublisher, L as itemFilePath, M as resolveCreateItemId, N as writeItem, O as readCustomViewHtml, P as SCHEMA_FILE, R as resolveDataDir, S as validateRecordObject, T as deleteItem, U as getWorkspaceRoot, V as safeSlugName, W as log, _ as loadCollection, a as computeSuccessor, b as COMPUTED_TYPES, c as isTriggerDue, d as resolveEvery, f as successorId, g as discoverCollections, h as acceptParsedSchema, i as advanceTriggerDate, j as readSkillTemplate, k as readCustomViewI18n, l as maybeSpawnSuccessor, m as CollectionSchemaZ, n as deleteCollection, o as daysInMonth, p as enrichItems, r as deleteCollectionRefusalMessage, s as formatCivil, t as deleteCustomView, u as parseCivil, v as toDetail, w as buildCollectionActionSeedPrompt, x as validateCollectionRecords, y as toSummary, z as resolveTemplatePath } from "../../server-C7inPZNG.js";
+import { isSafeActionTemplatePath, isSafeCustomViewI18nPath, isSafeCustomViewPath, isSafeTemplatePath } from "../paths.js";
+export { COMPUTED_TYPES, CollectionSchemaZ, SCHEMA_FILE, acceptParsedSchema, advanceTriggerDate, buildActionSeedPrompt, buildCollectionActionSeedPrompt, computeSuccessor, configureCollectionHost, daysInMonth, deleteCollection, deleteCollectionRefusalMessage, deleteCustomView, deleteItem, discoverCollections, enrichItems, formatCivil, generateItemId, getWorkspaceRoot, isContainedInRoot, isContainedInWorkspace, isSafeActionTemplatePath, isSafeCustomViewI18nPath, isSafeCustomViewPath, isSafeTemplatePath, isTriggerDue, itemFilePath, listItems, loadCollection, log, maybeSpawnSuccessor, parseCivil, publishCollectionChange, readCustomViewHtml, readCustomViewI18n, readItem, readSkillTemplate, resolveCreateItemId, resolveDataDir, resolveEvery, resolveTemplatePath, safeRecordId, safeSlugName, setCollectionChangePublisher, successorId, toDetail, toSummary, validateCollectionRecords, validateRecordObject, writeItem };

package/dist/collection/server/io.d.ts

@@ -78,6 +78,13 @@ export declare function deleteItem(dataDir: string, itemId: string, opts?: IoOpt
  *  carry a primary-key value (UI shortcut — Claude normally derives a
  *  semantic id from the record's name). */
 export declare function generateItemId(): string;
+/** The shape `readSourceAwareFile` (and its public callers
+ *  `readCustomViewHtml` / `readCustomViewI18n`) need from a loaded collection:
+ *  the slug for the safe-name check, the source to pick the base set, and the
+ *  discovered skill dir for the imported-layout fallback. Kept as a named
+ *  alias so the three signatures stay in lockstep (and so sonarjs stops
+ *  flagging the inline `Pick` union as duplication). */
+type SourceAwareReadTarget = Pick<LoadedCollection, "slug" | "source" | "skillDir">;
 /** Read a collection's custom-view HTML, path-safely. `viewFile` is a
  *  schema-validated `views/*.html` path, resolved with realpath containment.
  *  Returns the HTML, or null when the path is unsafe or the file is missing.
@@ -94,7 +101,26 @@ export declare function generateItemId(): string;
  *  so it only needs the single lookup. `resolveTemplatePath` does the
  *  containment / `..` defense per base, so the fallback never broadens the
  *  attack surface. */
-export declare function readCustomViewHtml(collection: Pick<LoadedCollection, "slug" | "source" | "skillDir">, viewFile: string, opts?: IoOptions): Promise<string | null>;
+export declare function readCustomViewHtml(collection: SourceAwareReadTarget, viewFile: string, opts?: IoOptions): Promise<string | null>;
+export interface CustomViewI18nResult {
+    /** The locale the returned `dict` is keyed to — equals the requested locale
+     *  when available, else the `"en"` fallback, else `""` when neither block is
+     *  present (empty `dict`). The host echoes this back to the iframe so
+     *  `__MC_VIEW.locale` reflects what the view actually got. */
+    locale: string;
+    /** Flat key → string map for the picked locale. Empty when the file is
+     *  absent, malformed, or has no usable locale block. Non-string values in a
+     *  locale block are dropped — `__MC_VIEW.dict` is contract-flat. */
+    dict: Record<string, string>;
+}
+/** Read a custom view's translation dictionary and return only the strings
+ *  for the requested locale (or the `"en"` fallback, or empty). Same
+ *  source-aware fallback as `readCustomViewHtml` so imported and authored
+ *  project collections both work. The on-disk file is `{ <locale>: { <key>:
+ *  <string> } }`; the host never streams other locales' strings to the view.
+ *  Malformed JSON / unknown shape yields an empty dict — an i18n-less view
+ *  keeps working unchanged (`__MC_VIEW.t(key)` falls back to the key). */
+export declare function readCustomViewI18n(collection: SourceAwareReadTarget, i18nFile: string, locale: string, opts?: IoOptions): Promise<CustomViewI18nResult>;
 /** The item id a CREATE should use for `schema`, or null when the
  *  caller should generate one. A singleton collection pins every
  *  create to its fixed `schema.singleton` id, so the "at most one
@@ -118,3 +144,4 @@ export declare function buildActionSeedPrompt(record: CollectionItem, templateTe
  *  record (see `progressSummary`) + the template verbatim. Pure +
  *  exported for tests. Domain-free — the template carries the specifics. */
 export declare function buildCollectionActionSeedPrompt(items: CollectionItem[], schema: CollectionSchema, templateText: string): string;
+export {};

package/dist/collection/server/templatePath.d.ts

@@ -23,3 +23,12 @@ export declare function isSafeActionTemplatePath(value: string): boolean;
  * realpath containment is the hard guarantee.
  */
 export declare function isSafeCustomViewPath(value: string): boolean;
+/**
+ * A custom-view `i18n` value: the JSON dictionary file authors ship next to
+ * their `views/<id>.html`. Constrained to `views/<name>.i18n.json` so the
+ * field can only point at a translation file co-located with the view it
+ * translates — the same `views/` containment the HTML reader uses. The
+ * `.i18n.json` suffix (vs plain `.json`) makes the file's purpose grep-able
+ * for both authors and tooling.
+ */
+export declare function isSafeCustomViewI18nPath(value: string): boolean;

package/dist/collection-watchers/index.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_collection_index = require("../collection/index.cjs");
-const require_server = require("../server-Db-x7OXz.cjs");
+const require_server = require("../server-Ceb6OQ8v.cjs");
 const require_notifier = require("../notifier-bS8IEeLA.cjs");
 let node_fs = require("node:fs");
 let node_fs_promises = require("node:fs/promises");

package/dist/collection-watchers/index.js

@@ -1,5 +1,5 @@
 import { whenMatches } from "../collection/index.js";
-import { D as listItems, _ as loadCollection, c as isTriggerDue, g as discoverCollections, k as readItem, l as maybeSpawnSuccessor } from "../server-q4WPXtbU.js";
+import { A as readItem, D as listItems, _ as loadCollection, c as isTriggerDue, g as discoverCollections, l as maybeSpawnSuccessor } from "../server-C7inPZNG.js";
 import { d as publish, m as updateForPlugin, n as clear, s as listAll } from "../notifier-ChpY0XrY.js";
 import { watch } from "node:fs";
 import { mkdir } from "node:fs/promises";