@plumix/core 0.1.0

package/dist/plugin/fields/password.js

@@ -0,0 +1,25 @@
+/**
+ * Build a typed `password` meta-box field. Renders with masked input
+ * (`<input type="password">`) so the value isn't visible at a glance
+ * — useful for non-secret-but-sensitive fields (display PINs,
+ * recovery codes copied into a settings group). Storage shape is
+ * identical to `text`; nothing here is a substitute for actual
+ * encrypted-at-rest storage if the value is a real secret.
+ */
+export function password(options) {
+    return {
+        key: options.key,
+        label: options.label,
+        type: "string",
+        inputType: "password",
+        placeholder: options.placeholder,
+        maxLength: options.maxLength,
+        required: options.required,
+        description: options.description,
+        default: options.default,
+        span: options.span,
+        capability: options.capability,
+        sanitize: options.sanitize,
+    };
+}
+//# sourceMappingURL=password.js.map

package/dist/plugin/fields/password.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.js","sourceRoot":"","sources":["../../../src/plugin/fields/password.ts"],"names":[],"mappings":"AAgBA;;;;;;;GAOG;AACH,MAAM,UAAU,QAAQ,CAAC,OAA6B;IACpD,OAAO;QACL,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,UAAU;QACrB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC;AACJ,CAAC"}

package/dist/plugin/fields/radio.d.ts

@@ -0,0 +1,16 @@
+import type { Label } from "../../i18n/label.js";
+import type { MetaBoxFieldOption, MetaBoxFieldSpan, RadioMetaBoxField } from "../manifest.js";
+export interface RadioFieldOptions {
+    readonly key: string;
+    readonly label: Label;
+    readonly options: readonly MetaBoxFieldOption[];
+    readonly required?: boolean;
+    readonly description?: Label;
+    readonly default?: string;
+    readonly span?: MetaBoxFieldSpan;
+    readonly capability?: string;
+    readonly sanitize?: (value: unknown) => unknown;
+}
+/** Build a typed `radio` meta-box field. `options` is required. */
+export declare function radio(options: RadioFieldOptions): RadioMetaBoxField;
+//# sourceMappingURL=radio.d.ts.map

package/dist/plugin/fields/radio.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"radio.d.ts","sourceRoot":"","sources":["../../../src/plugin/fields/radio.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,KAAK,EACV,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EAClB,MAAM,gBAAgB,CAAC;AAExB,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAChD,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,gBAAgB,CAAC;IACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;CACjD;AAED,mEAAmE;AACnE,wBAAgB,KAAK,CAAC,OAAO,EAAE,iBAAiB,GAAG,iBAAiB,CAcnE"}

package/dist/plugin/fields/radio.js

@@ -0,0 +1,17 @@
+/** Build a typed `radio` meta-box field. `options` is required. */
+export function radio(options) {
+    return {
+        key: options.key,
+        label: options.label,
+        type: "string",
+        inputType: "radio",
+        options: options.options,
+        required: options.required,
+        description: options.description,
+        default: options.default,
+        span: options.span,
+        capability: options.capability,
+        sanitize: options.sanitize,
+    };
+}
+//# sourceMappingURL=radio.js.map

package/dist/plugin/fields/radio.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"radio.js","sourceRoot":"","sources":["../../../src/plugin/fields/radio.ts"],"names":[],"mappings":"AAmBA,mEAAmE;AACnE,MAAM,UAAU,KAAK,CAAC,OAA0B;IAC9C,OAAO;QACL,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,OAAO;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC;AACJ,CAAC"}

package/dist/plugin/fields/range.d.ts

@@ -0,0 +1,28 @@
+import type { Label } from "../../i18n/label.js";
+import type { MetaBoxFieldSpan, RangeMetaBoxField } from "../manifest.js";
+export interface RangeFieldOptions {
+    readonly key: string;
+    readonly label: Label;
+    readonly min: number;
+    readonly max: number;
+    readonly step?: number;
+    readonly required?: boolean;
+    readonly description?: Label;
+    readonly default?: number;
+    readonly span?: MetaBoxFieldSpan;
+    readonly capability?: string;
+    /**
+     * Optional override. The builder ships a default sanitizer that
+     * enforces the declared `min`/`max` bounds on write; passing a
+     * custom one replaces it entirely.
+     */
+    readonly sanitize?: (value: unknown) => unknown;
+}
+/**
+ * Build a typed `range` meta-box field. Renders as a slider in the
+ * admin. Both `min` and `max` are required; `min <= max` is enforced
+ * at registration time. The builder injects a default sanitizer that
+ * rejects values outside `[min, max]` on write.
+ */
+export declare function range(options: RangeFieldOptions): RangeMetaBoxField;
+//# sourceMappingURL=range.d.ts.map

package/dist/plugin/fields/range.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"range.d.ts","sourceRoot":"","sources":["../../../src/plugin/fields/range.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAG1E,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,gBAAgB,CAAC;IACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;CACjD;AAED;;;;;GAKG;AACH,wBAAgB,KAAK,CAAC,OAAO,EAAE,iBAAiB,GAAG,iBAAiB,CAwBnE"}

package/dist/plugin/fields/range.js

@@ -0,0 +1,46 @@
+import { FieldConfigError } from "./errors.js";
+/**
+ * Build a typed `range` meta-box field. Renders as a slider in the
+ * admin. Both `min` and `max` are required; `min <= max` is enforced
+ * at registration time. The builder injects a default sanitizer that
+ * rejects values outside `[min, max]` on write.
+ */
+export function range(options) {
+    if (options.min > options.max) {
+        throw FieldConfigError.rangeMinGreaterThanMax({
+            fieldKey: options.key,
+            min: options.min,
+            max: options.max,
+        });
+    }
+    const { min, max } = options;
+    return {
+        key: options.key,
+        label: options.label,
+        type: "number",
+        inputType: "range",
+        min,
+        max,
+        step: options.step,
+        required: options.required,
+        description: options.description,
+        default: options.default,
+        span: options.span,
+        capability: options.capability,
+        sanitize: options.sanitize ?? buildBoundsSanitizer(min, max),
+    };
+}
+function buildBoundsSanitizer(min, max) {
+    return (value) => {
+        if (typeof value !== "number" || !Number.isFinite(value)) {
+            // eslint-disable-next-line no-restricted-syntax -- sanitizer flow-control sentinel; migrated in the field-sanitizer-error slice
+            throw new Error("invalid_value");
+        }
+        if (value < min || value > max) {
+            // eslint-disable-next-line no-restricted-syntax -- sanitizer flow-control sentinel; migrated in the field-sanitizer-error slice
+            throw new Error("invalid_value");
+        }
+        return value;
+    };
+}
+//# sourceMappingURL=range.js.map

package/dist/plugin/fields/range.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"range.js","sourceRoot":"","sources":["../../../src/plugin/fields/range.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAqB/C;;;;;GAKG;AACH,MAAM,UAAU,KAAK,CAAC,OAA0B;IAC9C,IAAI,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC9B,MAAM,gBAAgB,CAAC,sBAAsB,CAAC;YAC5C,QAAQ,EAAE,OAAO,CAAC,GAAG;YACrB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;IAC7B,OAAO;QACL,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,OAAO;QAClB,GAAG;QACH,GAAG;QACH,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC;KAC7D,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAC3B,GAAW,EACX,GAAW;IAEX,OAAO,CAAC,KAAK,EAAE,EAAE;QACf,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACzD,gIAAgI;YAChI,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,KAAK,GAAG,GAAG,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;YAC/B,gIAAgI;YAChI,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;AACJ,CAAC"}

package/dist/plugin/fields/repeater-validate.d.ts

@@ -0,0 +1,34 @@
+import type { MetaBoxField } from "../manifest.js";
+interface RepeaterValidationOptions {
+    readonly min?: number;
+    readonly max?: number;
+}
+export declare function walkRepeaterRows(subFields: readonly MetaBoxField[], options?: RepeaterValidationOptions): (value: unknown) => unknown;
+type RepeaterValidationReason = "invalid_shape" | "below_min" | "above_max" | "subfield_invalid";
+export declare class RepeaterValidationError extends Error {
+    readonly path: string;
+    readonly reason: RepeaterValidationReason;
+    private constructor();
+    static rootNotArray(): RepeaterValidationError;
+    static tooManyRows(ctx: {
+        maxRows: number;
+    }): RepeaterValidationError;
+    static rowNotPlainObject(ctx: {
+        path: string;
+    }): RepeaterValidationError;
+    static belowMin(ctx: {
+        min: number;
+        rowCount: number;
+    }): RepeaterValidationError;
+    static aboveMax(ctx: {
+        max: number;
+        rowCount: number;
+    }): RepeaterValidationError;
+    static subfieldInvalid(ctx: {
+        path: string;
+        fieldKey: string;
+        detail: string;
+    }): RepeaterValidationError;
+}
+export {};
+//# sourceMappingURL=repeater-validate.d.ts.map

package/dist/plugin/fields/repeater-validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repeater-validate.d.ts","sourceRoot":"","sources":["../../../src/plugin/fields/repeater-validate.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEnD,UAAU,yBAAyB;IACjC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB;AASD,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,SAAS,YAAY,EAAE,EAClC,OAAO,GAAE,yBAA8B,GACtC,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CA+C7B;AAED,KAAK,wBAAwB,GAC3B,eAAe,GAAG,WAAW,GAAG,WAAW,GAAG,kBAAkB,CAAC;AAEnE,qBAAa,uBAAwB,SAAQ,KAAK;IAKhD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAE1C,OAAO;IAUP,MAAM,CAAC,YAAY,IAAI,uBAAuB;IAQ9C,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,uBAAuB;IAQrE,MAAM,CAAC,iBAAiB,CAAC,GAAG,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,uBAAuB;IAQxE,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,QAAQ,EAAE,MAAM,CAAC;KAClB,GAAG,uBAAuB;IAQ3B,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,QAAQ,EAAE,MAAM,CAAC;KAClB,GAAG,uBAAuB;IAQ3B,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE;QAC1B,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;KAChB,GAAG,uBAAuB;CAO5B"}

package/dist/plugin/fields/repeater-validate.js

@@ -0,0 +1,104 @@
+// Empty rows are stripped before min/max bounds apply: blank rows are an
+// authoring affordance, not data the caller meant to persist. Reference
+// subfields inside rows skip the live-id check that top-level refs get
+// from validateMetaReferences — recursion into rows is a post-0.1 follow-up.
+// Hard ceiling on row count regardless of field-level `max`. The 256 KiB
+// meta byte cap doesn't bound work pre-walk: a payload of N empty rows
+// allocates O(N) before the byte cap measures the post-strip output.
+// 1000 covers any realistic authoring (FAQ lists, link strips, gallery
+// captions); above that, the user has modeled the wrong abstraction.
+const MAX_REPEATER_ROWS = 1000;
+export function walkRepeaterRows(subFields, options = {}) {
+    return (value) => {
+        if (value === null || value === undefined)
+            return value;
+        if (!Array.isArray(value)) {
+            throw RepeaterValidationError.rootNotArray();
+        }
+        if (value.length > MAX_REPEATER_ROWS) {
+            throw RepeaterValidationError.tooManyRows({ maxRows: MAX_REPEATER_ROWS });
+        }
+        const rows = [];
+        value.forEach((rawRow, i) => {
+            if (rawRow === null ||
+                typeof rawRow !== "object" ||
+                Array.isArray(rawRow)) {
+                throw RepeaterValidationError.rowNotPlainObject({ path: `[${i}]` });
+            }
+            const inputRow = rawRow;
+            const next = {};
+            let hasValue = false;
+            for (const sf of subFields) {
+                const raw = inputRow[sf.key];
+                const sanitized = sf.sanitize
+                    ? runSubSanitize(sf, raw, `[${i}].${sf.key}`)
+                    : raw;
+                if (sanitized !== null && sanitized !== undefined && sanitized !== "") {
+                    hasValue = true;
+                }
+                next[sf.key] = sanitized;
+            }
+            if (hasValue)
+                rows.push(next);
+        });
+        if (options.min !== undefined && rows.length < options.min) {
+            throw RepeaterValidationError.belowMin({
+                min: options.min,
+                rowCount: rows.length,
+            });
+        }
+        if (options.max !== undefined && rows.length > options.max) {
+            throw RepeaterValidationError.aboveMax({
+                max: options.max,
+                rowCount: rows.length,
+            });
+        }
+        return rows;
+    };
+}
+export class RepeaterValidationError extends Error {
+    static {
+        RepeaterValidationError.prototype.name = "RepeaterValidationError";
+    }
+    path;
+    reason;
+    constructor(reason, path, message) {
+        super(message);
+        this.path = path;
+        this.reason = reason;
+    }
+    static rootNotArray() {
+        return new RepeaterValidationError("invalid_shape", "<root>", "repeater value must be an array of rows");
+    }
+    static tooManyRows(ctx) {
+        return new RepeaterValidationError("invalid_shape", "<root>", `repeater input exceeds ${String(ctx.maxRows)} rows`);
+    }
+    static rowNotPlainObject(ctx) {
+        return new RepeaterValidationError("invalid_shape", ctx.path, "repeater row must be a plain object");
+    }
+    static belowMin(ctx) {
+        return new RepeaterValidationError("below_min", "<root>", `repeater requires at least ${String(ctx.min)} non-empty row(s); got ${String(ctx.rowCount)}`);
+    }
+    static aboveMax(ctx) {
+        return new RepeaterValidationError("above_max", "<root>", `repeater allows at most ${String(ctx.max)} row(s); got ${String(ctx.rowCount)}`);
+    }
+    static subfieldInvalid(ctx) {
+        return new RepeaterValidationError("subfield_invalid", ctx.path, `repeater subfield "${ctx.fieldKey}" rejected value: ${ctx.detail}`);
+    }
+}
+function runSubSanitize(field, value, path) {
+    // Caller gates on `field.sanitize` — cast is a type-narrowing shortcut.
+    const sanitize = field.sanitize;
+    try {
+        return sanitize(value);
+    }
+    catch (cause) {
+        const detail = cause instanceof Error ? cause.message : String(cause);
+        throw RepeaterValidationError.subfieldInvalid({
+            path,
+            fieldKey: field.key,
+            detail,
+        });
+    }
+}
+//# sourceMappingURL=repeater-validate.js.map

package/dist/plugin/fields/repeater-validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repeater-validate.js","sourceRoot":"","sources":["../../../src/plugin/fields/repeater-validate.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,wEAAwE;AACxE,uEAAuE;AACvE,6EAA6E;AAS7E,yEAAyE;AACzE,uEAAuE;AACvE,qEAAqE;AACrE,uEAAuE;AACvE,qEAAqE;AACrE,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAE/B,MAAM,UAAU,gBAAgB,CAC9B,SAAkC,EAClC,UAAqC,EAAE;IAEvC,OAAO,CAAC,KAAK,EAAE,EAAE;QACf,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACxD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,uBAAuB,CAAC,YAAY,EAAE,CAAC;QAC/C,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;YACrC,MAAM,uBAAuB,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,IAAI,GAA8B,EAAE,CAAC;QAC3C,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;YAC1B,IACE,MAAM,KAAK,IAAI;gBACf,OAAO,MAAM,KAAK,QAAQ;gBAC1B,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EACrB,CAAC;gBACD,MAAM,uBAAuB,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtE,CAAC;YACD,MAAM,QAAQ,GAAG,MAAiC,CAAC;YACnD,MAAM,IAAI,GAA4B,EAAE,CAAC;YACzC,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;gBAC3B,MAAM,GAAG,GAAG,QAAQ,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;gBAC7B,MAAM,SAAS,GAAG,EAAE,CAAC,QAAQ;oBAC3B,CAAC,CAAC,cAAc,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,CAAC;oBAC7C,CAAC,CAAC,GAAG,CAAC;gBACR,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;oBACtE,QAAQ,GAAG,IAAI,CAAC;gBAClB,CAAC;gBACD,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;YAC3B,CAAC;YACD,IAAI,QAAQ;gBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;YAC3D,MAAM,uBAAuB,CAAC,QAAQ,CAAC;gBACrC,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,QAAQ,EAAE,IAAI,CAAC,MAAM;aACtB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;YAC3D,MAAM,uBAAuB,CAAC,QAAQ,CAAC;gBACrC,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,QAAQ,EAAE,IAAI,CAAC,MAAM;aACtB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;AACJ,CAAC;AAKD,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD;QACE,uBAAuB,CAAC,SAAS,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACrE,CAAC;IAEQ,IAAI,CAAS;IACb,MAAM,CAA2B;IAE1C,YACE,MAAgC,EAChC,IAAY,EACZ,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,MAAM,CAAC,YAAY;QACjB,OAAO,IAAI,uBAAuB,CAChC,eAAe,EACf,QAAQ,EACR,yCAAyC,CAC1C,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,WAAW,CAAC,GAAwB;QACzC,OAAO,IAAI,uBAAuB,CAChC,eAAe,EACf,QAAQ,EACR,0BAA0B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CACrD,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,iBAAiB,CAAC,GAAqB;QAC5C,OAAO,IAAI,uBAAuB,CAChC,eAAe,EACf,GAAG,CAAC,IAAI,EACR,qCAAqC,CACtC,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,GAGf;QACC,OAAO,IAAI,uBAAuB,CAChC,WAAW,EACX,QAAQ,EACR,8BAA8B,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,0BAA0B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAC9F,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,GAGf;QACC,OAAO,IAAI,uBAAuB,CAChC,WAAW,EACX,QAAQ,EACR,2BAA2B,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CACjF,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,eAAe,CAAC,GAItB;QACC,OAAO,IAAI,uBAAuB,CAChC,kBAAkB,EAClB,GAAG,CAAC,IAAI,EACR,sBAAsB,GAAG,CAAC,QAAQ,qBAAqB,GAAG,CAAC,MAAM,EAAE,CACpE,CAAC;IACJ,CAAC;CACF;AAED,SAAS,cAAc,CACrB,KAAmB,EACnB,KAAc,EACd,IAAY;IAEZ,wEAAwE;IACxE,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAmC,CAAC;IAC3D,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtE,MAAM,uBAAuB,CAAC,eAAe,CAAC;YAC5C,IAAI;YACJ,QAAQ,EAAE,KAAK,CAAC,GAAG;YACnB,MAAM;SACP,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/plugin/fields/repeater.d.ts

@@ -0,0 +1,16 @@
+import type { Label } from "../../i18n/label.js";
+import type { MetaBoxField, MetaBoxFieldSpan, RepeaterMetaBoxField } from "../manifest.js";
+export interface RepeaterFieldOptions {
+    readonly key: string;
+    readonly label: Label;
+    readonly required?: boolean;
+    readonly description?: Label;
+    readonly default?: unknown;
+    readonly span?: MetaBoxFieldSpan;
+    readonly capability?: string;
+    readonly subFields: readonly MetaBoxField[];
+    readonly min?: number;
+    readonly max?: number;
+}
+export declare function repeater(options: RepeaterFieldOptions): RepeaterMetaBoxField;
+//# sourceMappingURL=repeater.d.ts.map

package/dist/plugin/fields/repeater.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repeater.d.ts","sourceRoot":"","sources":["../../../src/plugin/fields/repeater.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EAChB,oBAAoB,EACrB,MAAM,gBAAgB,CAAC;AAIxB,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,gBAAgB,CAAC;IACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,SAAS,YAAY,EAAE,CAAC;IAC5C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB;AAoBD,wBAAgB,QAAQ,CAAC,OAAO,EAAE,oBAAoB,GAAG,oBAAoB,CAgD5E"}

package/dist/plugin/fields/repeater.js

@@ -0,0 +1,68 @@
+import { FieldConfigError } from "./errors.js";
+import { walkRepeaterRows } from "./repeater-validate.js";
+// Mirrors `META_FIELD_KEY_RE` in plugin/validation/meta-box-fields.ts. The top-level
+// registrar validates field keys against this regex but doesn't
+// recurse into subFields, so the repeater builder enforces it locally
+// — guards row-object shape and protects against duplicate-key clobber.
+const REPEATER_SUBFIELD_KEY_RE = /^[a-zA-Z0-9_:-]+$/;
+// `__proto__`/`constructor`/`prototype` match the key regex but writing
+// them into a fresh object literal mutates the prototype chain. Reject
+// at registration regardless of regex pass.
+const FORBIDDEN_SUBFIELD_KEYS = new Set([
+    "__proto__",
+    "constructor",
+    "prototype",
+]);
+// Nested repeaters rejected at registration to keep v0.1 UX flat.
+// Subfield keys are also validated here for shape + uniqueness — the
+// top-level `assertMetaBoxFields` only walks the outer fields array.
+export function repeater(options) {
+    const seen = new Set();
+    for (const sf of options.subFields) {
+        if (sf.inputType === "repeater") {
+            throw FieldConfigError.repeaterNestedNotSupported({
+                repeaterKey: options.key,
+                subFieldKey: sf.key,
+            });
+        }
+        if (FORBIDDEN_SUBFIELD_KEYS.has(sf.key)) {
+            throw FieldConfigError.repeaterSubFieldKeyForbidden({
+                repeaterKey: options.key,
+                subFieldKey: sf.key,
+            });
+        }
+        if (!REPEATER_SUBFIELD_KEY_RE.test(sf.key)) {
+            throw FieldConfigError.repeaterSubFieldKeyInvalid({
+                repeaterKey: options.key,
+                subFieldKey: sf.key,
+                pattern: REPEATER_SUBFIELD_KEY_RE.source,
+            });
+        }
+        if (seen.has(sf.key)) {
+            throw FieldConfigError.repeaterSubFieldDuplicate({
+                repeaterKey: options.key,
+                subFieldKey: sf.key,
+            });
+        }
+        seen.add(sf.key);
+    }
+    return {
+        key: options.key,
+        label: options.label,
+        type: "json",
+        inputType: "repeater",
+        subFields: options.subFields,
+        min: options.min,
+        max: options.max,
+        required: options.required,
+        description: options.description,
+        default: options.default,
+        span: options.span,
+        capability: options.capability,
+        sanitize: walkRepeaterRows(options.subFields, {
+            min: options.min,
+            max: options.max,
+        }),
+    };
+}
+//# sourceMappingURL=repeater.js.map

package/dist/plugin/fields/repeater.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repeater.js","sourceRoot":"","sources":["../../../src/plugin/fields/repeater.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAe1D,qFAAqF;AACrF,gEAAgE;AAChE,sEAAsE;AACtE,wEAAwE;AACxE,MAAM,wBAAwB,GAAG,mBAAmB,CAAC;AAErD,wEAAwE;AACxE,uEAAuE;AACvE,4CAA4C;AAC5C,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAAC;IAC3D,WAAW;IACX,aAAa;IACb,WAAW;CACZ,CAAC,CAAC;AAEH,kEAAkE;AAClE,qEAAqE;AACrE,qEAAqE;AACrE,MAAM,UAAU,QAAQ,CAAC,OAA6B;IACpD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACnC,IAAI,EAAE,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;YAChC,MAAM,gBAAgB,CAAC,0BAA0B,CAAC;gBAChD,WAAW,EAAE,OAAO,CAAC,GAAG;gBACxB,WAAW,EAAE,EAAE,CAAC,GAAG;aACpB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,uBAAuB,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;YACxC,MAAM,gBAAgB,CAAC,4BAA4B,CAAC;gBAClD,WAAW,EAAE,OAAO,CAAC,GAAG;gBACxB,WAAW,EAAE,EAAE,CAAC,GAAG;aACpB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3C,MAAM,gBAAgB,CAAC,0BAA0B,CAAC;gBAChD,WAAW,EAAE,OAAO,CAAC,GAAG;gBACxB,WAAW,EAAE,EAAE,CAAC,GAAG;gBACnB,OAAO,EAAE,wBAAwB,CAAC,MAAM;aACzC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,gBAAgB,CAAC,yBAAyB,CAAC;gBAC/C,WAAW,EAAE,OAAO,CAAC,GAAG;gBACxB,WAAW,EAAE,EAAE,CAAC,GAAG;aACpB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,OAAO;QACL,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,IAAI,EAAE,MAAM;QACZ,SAAS,EAAE,UAAU;QACrB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,QAAQ,EAAE,gBAAgB,CAAC,OAAO,CAAC,SAAS,EAAE;YAC5C,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC;KACH,CAAC;AACJ,CAAC"}

package/dist/plugin/fields/richtext-validate.d.ts

@@ -0,0 +1,61 @@
+interface RichtextAllowlist {
+    readonly marks?: readonly string[];
+    readonly nodes?: readonly string[];
+    readonly blocks?: readonly string[];
+}
+/**
+ * Build a sanitize-shaped validator for a `richtext` field. Returns
+ * a function that walks a Tiptap JSON doc and either passes the
+ * input through unchanged or throws a `RichtextValidationError`
+ * pinpointing the first offending node/mark.
+ *
+ * Throws on the FIRST violation rather than collecting all of them
+ * — the editor already prevents these cases at the source, so a
+ * server-side reject is an integrity-check failure, not a "warn the
+ * user about every issue" UX. Single-shot reject keeps the error
+ * surface small.
+ */
+export declare function walkRichtextDoc(allowlist: RichtextAllowlist): (value: unknown) => unknown;
+type RichtextValidationReason = "disallowed_node" | "disallowed_mark" | "unsafe_href" | "invalid_shape";
+/**
+ * Error thrown when the validator encounters a disallowed type or
+ * unsafe attribute. Carries the JSON path so the editor (or test
+ * harness) can pinpoint the offending location — e.g.
+ * `"content[2].content[0].marks[1]"` for a disallowed mark on the
+ * third paragraph's first text run's second mark.
+ */
+export declare class RichtextValidationError extends Error {
+    readonly path: string;
+    readonly reason: RichtextValidationReason;
+    private constructor();
+    static nestingExceeded(ctx: {
+        path: string;
+        maxDepth: number;
+    }): RichtextValidationError;
+    static nodeNotPlainObject(ctx: {
+        path: string;
+    }): RichtextValidationError;
+    static nodeMissingType(ctx: {
+        path: string;
+    }): RichtextValidationError;
+    static disallowedNode(ctx: {
+        path: string;
+        nodeType: string;
+    }): RichtextValidationError;
+    static markNotPlainObject(ctx: {
+        path: string;
+    }): RichtextValidationError;
+    static markMissingType(ctx: {
+        path: string;
+    }): RichtextValidationError;
+    static disallowedMark(ctx: {
+        path: string;
+        markType: string;
+    }): RichtextValidationError;
+    static unsafeHref(ctx: {
+        path: string;
+        hrefType: string;
+    }): RichtextValidationError;
+}
+export {};
+//# sourceMappingURL=richtext-validate.d.ts.map

package/dist/plugin/fields/richtext-validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"richtext-validate.d.ts","sourceRoot":"","sources":["../../../src/plugin/fields/richtext-validate.ts"],"names":[],"mappings":"AA4DA,UAAU,iBAAiB;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAC7B,SAAS,EAAE,iBAAiB,GAC3B,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAmB7B;AAED,KAAK,wBAAwB,GAC3B,iBAAiB,GAAG,iBAAiB,GAAG,aAAa,GAAG,eAAe,CAAC;AAE1E;;;;;;GAMG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;IAKhD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAE1C,OAAO;IAUP,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE;QAC1B,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;KAClB,GAAG,uBAAuB;IAQ3B,MAAM,CAAC,kBAAkB,CAAC,GAAG,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,uBAAuB;IAQzE,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,uBAAuB;IAQtE,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE;QACzB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;KAClB,GAAG,uBAAuB;IAQ3B,MAAM,CAAC,kBAAkB,CAAC,GAAG,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,uBAAuB;IAQzE,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,uBAAuB;IAQtE,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE;QACzB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;KAClB,GAAG,uBAAuB;IAQ3B,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE;QACrB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;KAClB,GAAG,uBAAuB;CAS5B"}