caracms 0.1.0 → 0.3.0

package/src/components/form-client.ts

@@ -3,7 +3,8 @@
  * (Form.astro carries it). It enhances a form that already works without it:
  *
  * - submits with `fetch` (`Accept: application/json`), shows "Sending…", then the
- *   thanks line, or the endpoint's own sentence when it gave one;
+ *   thanks line, or the endpoint's own sentence when it gave one (the thanks and the
+ *   failure lines are the form's `data-thanks` / `data-failed` when Form.astro was given them);
  * - makes a files field's picks add up: each pick is added to the files already chosen
  *   (the real list kept in a `DataTransfer` and given back to `input.files`, so the fetch
  *   and a plain submit both send every one), the same name and size never twice, listed
@@ -126,6 +127,8 @@ function enhance(form: HTMLFormElement): void {
 	if (!status) return;
 	const submit = form.querySelector<HTMLButtonElement>('button[type="submit"]');
 	const widget = form.querySelector<HTMLElement>('[data-caracms-turnstile]');
+	const thanks = form.dataset.thanks || THANKS;
+	const failedLine = form.dataset.failed || FAILED;
 	const say = (text: string, failed: boolean) => {
 		status.textContent = text;
 		status.classList.toggle('cms-form-failed', failed);
@@ -145,7 +148,7 @@ function enhance(form: HTMLFormElement): void {
 		if (tooMuch) return say(tooMuch, true);
 		submit?.setAttribute('disabled', '');
 		say('Sending…', false);
-		let failure = FAILED;
+		let failure = failedLine;
 		try {
 			const res = await fetch(form.action, { method: 'POST', headers: { Accept: 'application/json' }, body: new FormData(form) });
 			if (!res.ok) {
@@ -154,7 +157,7 @@ function enhance(form: HTMLFormElement): void {
 				throw new Error(String(res.status));
 			}
 			form.reset();
-			say(THANKS, false);
+			say(thanks, false);
 		} catch {
 			say(failure, true);
 		} finally {
@@ -167,7 +170,7 @@ function enhance(form: HTMLFormElement): void {
 	// The no-JS path lands back here with ?sent=1.
 	const params = new URLSearchParams(location.search);
 	if (params.get('sent') === '1') {
-		say(THANKS, false);
+		say(thanks, false);
 		params.delete('sent');
 		const rest = params.toString();
 		history.replaceState(null, '', `${location.pathname}${rest ? `?${rest}` : ''}${location.hash}`);

package/src/components/sitemap.xml.ts

@@ -21,7 +21,8 @@ export async function sitemapUrls(siteUrl: string): Promise<string[]> {
 	for (const collection of siteCollections(site)) {
 		if (collection.urlBase === null) continue;
 		for (const entry of await listDocuments(site, collection.name)) {
-			if (entry.warning || entry.url === null) continue;
+			// M9 Decision 7: a hidden page (or one under it) isn't on the site.
+			if (entry.warning || entry.url === null || entry.hidden) continue;
 			urls.push(`${siteUrl}${entry.url.split('/').map((p) => encodeURIComponent(p)).join('/')}`);
 		}
 	}

package/src/config.ts

@@ -227,8 +227,19 @@ export interface SiteConfig {
 	 * hands it to the site's own routes as `seo.titleSeparator`, so their titles match.
 	 */
 	titleSeparator?: string;
+	/**
+	 * What a page without its own `seo.title` falls back to (M9, head.ts). `'page-and-brand'`
+	 * (the default): `<document title><titleSeparator><brand name>`, the home page excepted.
+	 * `'site'`: every page falls back as the home page does, to Site Settings' `seo.title`,
+	 * then the brand name, then the document title. For a site (a Tina template's, say)
+	 * whose pages all show the site's own title.
+	 */
+	titleFallback?: TitleFallback;
 }
 
+/** The config's `titleFallback` values (head.ts). */
+export type TitleFallback = 'page-and-brand' | 'site';
+
 /** The fallback title's separator when the config sets none (head.ts). */
 export const DEFAULT_TITLE_SEPARATOR = ' · ';
 
@@ -329,6 +340,8 @@ export interface ResolvedSite {
 	forms: Record<string, ResolvedForm>;
 	/** The fallback title's separator, spaces included (`DEFAULT_TITLE_SEPARATOR` when the config sets none). */
 	titleSeparator: string;
+	/** What a page without its own `seo.title` falls back to (`'page-and-brand'` when the config sets none). */
+	titleFallback: TitleFallback;
 	/**
 	 * M8 Decision 10: the URLs the site's own `src/pages/` serves (code-routes.ts), read by the
 	 * integration at setup (and by the commands). Absent before then: nothing is reserved.
@@ -563,7 +576,13 @@ export function resolveSite(config: SiteConfig, root: string): ResolvedSite {
 		fail(`titleSeparator must be the text between a page's title and the site's name, spaces included, like ' | ' (got ${JSON.stringify(config.titleSeparator)}).`);
 	}
 
-	return { root, collections, blocks, textStyles, page: abs(config.page), brand, sharedFolder, phoneLinesWidth, repoPath: repoPath!, timeZone, forms, titleSeparator };
+	// What a page without its own title falls back to (M9): the page and the brand, or the site's title.
+	const titleFallback = config.titleFallback ?? 'page-and-brand';
+	if (titleFallback !== 'page-and-brand' && titleFallback !== 'site') {
+		fail(`titleFallback must be 'page-and-brand' (the page's title and the site's name) or 'site' (Site Settings' title on every page) (got ${JSON.stringify(config.titleFallback)}).`);
+	}
+
+	return { root, collections, blocks, textStyles, page: abs(config.page), brand, sharedFolder, phoneLinesWidth, repoPath: repoPath!, timeZone, forms, titleSeparator, titleFallback };
 }
 
 interface FieldCheck {
@@ -617,6 +636,11 @@ function validateField(field: Field, where: string, check: FieldCheck): void {
 	// M6c (G8): help is plain text, said in the sidebar.
 	if (field.help !== undefined && (typeof field.help !== 'string' || field.help.trim() === '')) fail(`${where}: help is a sentence of plain text, shown under the field in the editor (got ${JSON.stringify(field.help)}).`);
 	switch (field.kind) {
+		case 'text':
+			// M9 Decision 10.
+			if (field.lines !== undefined && field.lines !== true) fail(`${where}: lines is true or left out (got ${JSON.stringify(field.lines)}).`);
+			if (field.lines && !field.multiline) fail(`${where}: lines draws each typed line as its own element, so the field takes several lines. Write text({ lines: true }) without multiline: false.`);
+			break;
 		case 'lockup':
 			if (!Object.hasOwn(check.textStyles, field.style)) fail(`${where} uses the text style "${field.style}", which isn't in textStyles.`);
 			break;
@@ -635,6 +659,10 @@ function validateField(field: Field, where: string, check: FieldCheck): void {
 						"An h3 with no h2 above it breaks the page's outline, and the page's h1 is a block's heading field.",
 				);
 			}
+			// M9 Decision 11: a heading is bold and line breaks only.
+			if (field.heading !== undefined && field.heading !== true) fail(`${where}: heading is true or left out (got ${JSON.stringify(field.heading)}).`);
+			if (field.heading && headings.length > 0) fail(`${where}: a heading rich-text field can't hold headings of its own; it is the block's heading. Leave headings out.`);
+			if (field.heading && field.links) fail(`${where}: a heading rich-text field takes bold and line breaks only, not links. Leave links out.`);
 			break;
 		}
 		case 'buttons':
@@ -701,6 +729,9 @@ function validateField(field: Field, where: string, check: FieldCheck): void {
 			if (field.only !== undefined && field.only !== 'image' && field.only !== 'video') fail(`${where}: media's only must be 'image' or 'video' (got ${JSON.stringify(field.only)}).`);
 			if (field.play !== undefined && field.play !== 'loop') fail(`${where}: media's play can only be 'loop' (a loop-only slot, like a hero's); leave it out to let each clip choose (got ${JSON.stringify(field.play)}).`);
 			if (field.play === 'loop' && field.only === 'image') fail(`${where}: play: 'loop' is for a slot that takes videos, but this one takes images only.`);
+			// M9 Decision 8.
+			if (field.format !== undefined && field.format !== 'webp' && field.format !== 'png') fail(`${where}: media's format must be 'png' or 'webp' (got ${JSON.stringify(field.format)}).`);
+			if (field.format !== undefined && field.only === 'video') fail(`${where}: format is for images, but this slot takes videos only.`);
 			break;
 		default:
 			break;

package/src/content-schema.ts

@@ -47,11 +47,12 @@ const clip: Schema = closed(
 const plainImage: Schema = closed({ key: { type: 'string', minLength: 1 }, w: size, h: size, focal }, ['key']);
 const seo: Schema = closed({ title: string, description: string, image: plainImage });
 
-function richText(headings: readonly string[]): Schema {
+function richText(headings: readonly string[], lists = true): Schema {
 	const kinds = ['p', ...headings];
 	const unit: Schema[] = [
 		...kinds.map((k) => closed({ [k]: string }, [k])),
-		...['ul', 'ol'].map((k) => closed({ [k]: strings }, [k])),
+		// M9 Decision 11: a heading rich-text field is paragraphs only.
+		...(lists ? ['ul', 'ol'] : []).map((k) => closed({ [k]: strings }, [k])),
 	];
 	// A plain string reads as rich text too (rich-text.ts → "A plain string is read as rich text").
 	return { anyOf: [string, { type: 'array', items: { oneOf: unit } }] };
@@ -68,7 +69,7 @@ export function fieldSchema(field: Field): Schema {
 		case 'select':
 			return described({ enum: field.options.map((o) => o.value) }, field);
 		case 'richText':
-			return described(richText(field.headings), field);
+			return described(richText(field.headings, !field.heading), field);
 		case 'link':
 			return described(field.addressOnly ? closed({ href: string }) : closed({ label: string, href: string }), field);
 		case 'buttons':
@@ -129,7 +130,9 @@ export function collectionSchema(site: Pick<ResolvedSite, 'blocks'>, collection:
 	const own = Object.fromEntries(Object.entries(collection.fields ?? {}).map(([key, f]) => [key, fieldSchema(f)]));
 	switch (collection.kind) {
 		case 'sections':
-			return document(collection, { ...own, blocks: { type: 'array', items: { anyOf: [{ $ref: '#/$defs/shared' }, anyBlock(site)] } }, seo }, ['title', 'blocks'], { shared: sharedEntry, ...blockDefs(site) });
+			// M9 Decision 7: `hidden: true` keeps the page off the site; absent, it's shown.
+			const hidden: Schema = { description: 'Hidden from the site: not served, not in the sitemap, still edited in /admin.', const: true };
+			return document(collection, { hidden, ...own, blocks: { type: 'array', items: { anyOf: [{ $ref: '#/$defs/shared' }, anyBlock(site)] } }, seo }, ['title', 'blocks'], { shared: sharedEntry, ...blockDefs(site) });
 		case 'fields':
 			return document(collection, { ...own, seo }, ['title']);
 		case 'shared':

package/src/content.ts

@@ -41,6 +41,8 @@ import { parseSource } from './json-source.ts';
 export { contentReader } from './read.ts';
 // M8 trial (item 1): Site Settings for a site's own routes, as the page component gets them.
 export { siteSettings } from './read.ts';
+// Urban Return port, Decision 20: a Site Settings image's URL for the page's frame (media.ts).
+export { settingsImageUrl } from './media.ts';
 
 export type WarningCode = 'invalid-json' | 'no-title' | 'nested-index';
 
@@ -70,6 +72,13 @@ export interface DocumentEntry {
 	label: string;
 	/** Set when the file can't be opened. */
 	warning: DocumentWarning | null;
+	/**
+	 * M9 Decision 7: hidden from the site, by the page's own `"hidden": true` or (`hiddenBy`, the
+	 * path of the hidden page above it) a page it's nested under. A site's routes, the sitemap and
+	 * `contentReader().documents()` leave it out; the editor lists it, marked. Never the home page.
+	 */
+	hidden?: true;
+	hiddenBy?: string;
 	/** A section builder's shared-block entries, by shared block path, in block order, once each (Decision 8). Absent otherwise. */
 	uses?: string[];
 	/** A shared block: its block's type (`''` when it has none). Absent otherwise. */
@@ -224,6 +233,7 @@ export async function listDocuments(
 		if (!collection) throw new DocumentError('unknown-collection', `No collection "${name}" is declared.`);
 		const paths = await documentPaths(collection, source);
 		const entries = (await Promise.all(paths.map((path) => entryFor(site, collection, path, source)))).filter((e) => e !== null);
+		if (collection.nested) hideChildren(entries);
 		all.push(...(collection.nested ? flattenTree(pageTree(entries)) : entries.sort(byLabel)));
 	}
 	if (!collectionName) {
@@ -236,6 +246,22 @@ export async function listDocuments(
 	return all;
 }
 
+/** M9 Decision 7: a hidden page's children are hidden with it; `hiddenBy` names the topmost hidden page above. */
+function hideChildren(entries: DocumentEntry[]): void {
+	const hidden = new Set(entries.filter((e) => e.hidden).map((e) => e.path));
+	if (hidden.size === 0) return;
+	for (const entry of entries) {
+		const parts = entry.path.split('/');
+		for (let n = 1; n < parts.length; n++) {
+			const above = parts.slice(0, n).join('/');
+			if (!hidden.has(above)) continue;
+			entry.hidden = true;
+			entry.hiddenBy = above;
+			break;
+		}
+	}
+}
+
 /**
  * Read one document. Throws DocumentError: 'not-found', 'bad-path',
  * 'unknown-collection', or the listing's warning codes ('invalid-json',
@@ -308,6 +334,8 @@ function inspect(
 		return warn('no-title', 'This file has no title, so it can’t be opened. Add a "title".');
 	}
 	const entry: DocumentEntry = { ...base, title, label: title, warning: null };
+	// M9 Decision 7: the home page is never hidden.
+	if ((document.kind === undefined || document.kind === 'sections') && document.hidden && path !== 'index') entry.hidden = true;
 	if (document.kind === undefined || document.kind === 'sections') {
 		entry.uses = [...new Set(document.blocks.flatMap((b) => (b.shared !== undefined ? [b.shared] : [])))];
 	} else if (document.kind === 'shared') {

package/src/document.ts

@@ -60,6 +60,13 @@ export interface SiteDocument {
 	 * own `seo` as it is.
 	 */
 	seo?: Seo;
+	/**
+	 * M9 Decision 7: the page is hidden from the site (the file's top-level `"hidden": true`;
+	 * absent means shown). Not served, not in the sitemap, not offered by the link picker; still
+	 * edited, previewed and published in /admin. The editor sends `false` to unhide, which takes
+	 * the key out of the file. The home page (`index`) can't be hidden (content.ts reads it as shown).
+	 */
+	hidden?: boolean;
 	/**
 	 * M6c (G2): the page fields' parsed values, keyed by field, every field of the
 	 * collection's `fields` present (the file's top-level keys after `title`). Present
@@ -217,6 +224,7 @@ export function parseDocument(raw: unknown, site: Pick<ResolvedSite, 'blocks'>):
 		title: typeof doc.title === 'string' ? doc.title : '',
 		blocks: rawBlocks.map((b, index) => parseBlock(b, index, site)),
 		...seoOf(doc),
+		...(doc.hidden === true ? { hidden: true } : {}),
 	};
 }
 
@@ -279,6 +287,8 @@ export function normaliseDocument(input: unknown, site: Pick<ResolvedSite, 'bloc
 			return { source, type, known: true, data: parsed };
 		}),
 		...seoOf(asObject(input)),
+		// M9 Decision 7: true hides, false unhides, absent leaves the file's as it is.
+		...(typeof doc.hidden === 'boolean' ? { hidden: doc.hidden } : {}),
 	};
 }
 
@@ -366,6 +376,9 @@ export interface DocumentReader {
  * render from the document (never module state, so concurrent preview renders
  * can't leak into each other: M3 → Watch-outs).
  */
+/** M9 Decision 9: `<Blocks wrap>`'s rule and its runs, for a site's page component (`import type { WrapBlocks } from 'caracms/document'`). */
+export type { BlockRun, WrapBlock, WrapBlocks } from './block-runs.ts';
+
 export interface BlockContext {
 	/**
 	 * The block's position in the document being rendered: the editor's block index (0 for a
@@ -497,8 +510,8 @@ export function headingTag(cms: BlockContext, field: string): 'h1' | 'h2' {
 	return cms.h1Field === field ? 'h1' : 'h2';
 }
 
-/** Is a field one that can hold the page's heading (Decision 16): a lockup or a text field marked `heading`? */
-export const isHeadingField = (field: Field): boolean => (field.kind === 'lockup' || field.kind === 'text') && field.heading;
+/** Is a field one that can hold the page's heading (Decision 16): a lockup, or a text or rich-text field (M9 Decision 11) marked `heading`? */
+export const isHeadingField = (field: Field): boolean => (field.kind === 'lockup' || field.kind === 'text' || field.kind === 'richText') && !!field.heading;
 
 /**
  * Decision 16: the index of the first block, in render order (skipping unknown

package/src/editor/client/block-list/summary.ts

@@ -9,7 +9,8 @@
  *   fieldsSummary(block)        the picker's line under a type: its fields' labels
  */
 import { own, sharedEntryOf } from '../../../document.ts';
-import { titleCase, type Field } from '../../../fields.ts';
+import { parseField, titleCase, type Field } from '../../../fields.ts';
+import { richTextPlain, type RichTextValue } from '../../../rich-text.ts';
 import type { EditorBlock, EditorSite, ListedDocument } from '../../types.ts';
 
 /**
@@ -94,6 +95,11 @@ function firstText(fields: Record<string, Field>, block: Pick<EditorBlock, 'data
 			if (lines.length) return lines.join(' / ');
 		}
 		if (field.kind === 'text' && typeof value === 'string' && value.trim()) return value.replace(/\s+/g, ' ').trim();
+		// M9 Decision 11: a rich heading's words, without its bold.
+		if (field.kind === 'richText' && field.heading) {
+			const words = richTextPlain(parseField(field, value) as RichTextValue).replace(/\s+/g, ' ').trim();
+			if (words) return words;
+		}
 	}
 	return null;
 }

package/src/editor/client/editor.ts

@@ -336,6 +336,25 @@ export function createEditor(props: AdminProps, options: { client: boolean }): E
 	/** A lock answer (a 409, or Edit here) shown at once, until a poll started after it answers. */
 	const lockOverride = createStore<{ file: string; state: LockState; lock: LockView | null; after: number } | null>(null);
 
+	/**
+	 * Redis diet Decision 10: files a write from this tab was Kept for, with the poll count
+	 * then. The write took (or kept) the lock, so the tab holds it until a poll started
+	 * after that write answers: the poll is the word from then on.
+	 */
+	const keptAfter = new Map<string, number>();
+	/** Files this tab holds the lock on: the last poll's, a lock answer's (Edit here), and those a write just took. */
+	const lockedFiles = (): string[] => {
+		const files = new Set((liveState.get().status?.locks ?? []).filter((l) => l.mine === 'this-tab').map((l) => l.file));
+		const o = lockOverride.get();
+		if (o?.state === 'yours') files.add(o.file);
+		const seq = liveState.get().seq;
+		for (const [file, after] of keptAfter) {
+			if (seq > after) keptAfter.delete(file);
+			else files.add(file);
+		}
+		return [...files];
+	};
+
 	// Unsent edits held in this browser (the cookie says so): the bar starts at Keeping.
 	const initialKeep = props.unsent ? 'keeping' : 'kept';
 	const keeper = options.client
@@ -351,12 +370,11 @@ export function createEditor(props: AdminProps, options: { client: boolean }): E
 							tab,
 							retryDelays: RETRY_DELAYS,
 							you,
-							lockedFiles: () => {
-								const files = new Set((liveState.get().status?.locks ?? []).filter((l) => l.mine === 'this-tab').map((l) => l.file));
-								const o = lockOverride.get();
-								if (o?.state === 'yours') files.add(o.file);
-								return [...files];
-							},
+							lockedFiles,
+							holds: (file: string) => lockedFiles().includes(file),
+							onKept: (file: string) => keptAfter.set(file, liveSession.started()),
+							...(liveProps?.keepDelayMs !== undefined ? { keepDelay: liveProps.keepDelayMs } : {}),
+							...(liveProps?.keepCapMs !== undefined ? { keepCap: liveProps.keepCapMs } : {}),
 							onLocked: (file, refusal) => lockOverride.set({ file, state: refusal.state, lock: refusal.lock, after: liveSession.started() }),
 							onSignedOut: (body) => liveState.update({ signedOut: body }),
 						}

package/src/editor/client/fields/HiddenToggle.tsx

@@ -0,0 +1,51 @@
+/**
+ * M9 Decision 7: the page's "Hidden from the site" switch, at the document level under its
+ * page fields and above Search and sharing. It's the toggle field's switch (SimpleFields.tsx →
+ * ToggleField), set through `editor.doc.setHidden`, so it saves and publishes like any edit.
+ *
+ * - Only on a section builder's page with an address, and never on the home page (`index`),
+ *   which can't be hidden.
+ * - A page under a hidden page is hidden with it (content.ts → `hiddenBy`): the switch shows
+ *   on and can't be turned off here, and its help names the page to show again.
+ */
+import { useMemo } from 'react';
+import { useEditor, useStore } from '../context.tsx';
+import { FieldFrame } from './FieldFrame.tsx';
+import { FieldHostProvider, type FieldHost } from './host.tsx';
+
+const SCOPE = 'page-hidden';
+const NAME = 'hidden';
+
+export function HiddenToggle() {
+	const editor = useEditor();
+	const ref = useStore(editor.doc.state, (s) => s.ref);
+	const kind = useStore(editor.doc.state, (s) => s.document.kind);
+	const hidden = useStore(editor.doc.state, (s) => !!s.document.hidden);
+	const documents = useStore(editor.documents);
+	const readOnly = useStore(editor.access, (a) => a.readOnly);
+	const host = useMemo<FieldHost>(
+		() => ({ scope: SCOPE, picked: () => null, pick() {}, set: (_path, value) => editor.doc.setHidden(value === true), removeItem() {}, raw: () => undefined, readOnly }),
+		[editor, readOnly],
+	);
+	const collection = editor.site.collections.find((c) => c.name === ref.collection);
+	if (kind !== 'sections' || !collection?.urlBase || ref.path === 'index') return null;
+	const listed = documents.find((d) => d.collection === ref.collection && d.path === ref.path);
+	const by = listed?.hiddenBy ? documents.find((d) => d.collection === ref.collection && d.path === listed.hiddenBy) : undefined;
+	const on = hidden || !!by;
+	const id = `f-${SCOPE}-${NAME}`;
+	const help = by
+		? `Hidden with ${by.label}, the page it's under. Show that page again to show this one.`
+		: 'Visitors get the 404 page, and it’s left out of the sitemap and the link picker. You can still edit, preview and publish it.';
+	return (
+		<div className="page-hidden" data-page-hidden={on ? 'on' : 'off'}>
+			<FieldHostProvider host={host}>
+				<FieldFrame blockKey={SCOPE} name={NAME} label="Hidden from the site" help={help} htmlFor={id}>
+					<button type="button" className="switch" role="switch" id={id} data-path={NAME} aria-checked={on} disabled={readOnly || !!by} onClick={() => host.set(NAME, !hidden)}>
+						<span className="track" />
+						<span>{on ? 'On' : 'Off'}</span>
+					</button>
+				</FieldFrame>
+			</FieldHostProvider>
+		</div>
+	);
+}

package/src/editor/client/fields/LinkField.tsx

@@ -88,6 +88,7 @@ export function LinkControl(props: { path: string; href: string; onChange: (href
 	const file = fileKeyOf(href.trim());
 	const doc = href && !file ? documentAt(href, linkable) : undefined;
 	const missing = props.warnings.find((w) => w.code === 'link-missing');
+	const hiddenTarget = props.warnings.find((w) => w.code === 'link-hidden');
 	const rule = props.warnings.find((w) => w.code === 'link-rule');
 	const files = useLibraryFiles();
 	const chooseFile = () => {
@@ -181,20 +182,24 @@ export function LinkControl(props: { path: string; href: string; onChange: (href
 	if (doc && !rule) {
 		const collection = editor.site.collections.find((c) => c.name === doc.collection);
 		const crumb = collection?.nested ? parentLabel(doc, documents) : '';
+		// M9 Decision 7: a link to a hidden page keeps its chip, with the warning under it.
 		return (
-			<div className="lnk" data-link-path={props.path}>
-				<div className="lnk-box" data-path={props.path} tabIndex={-1}>
-					<Icon name={docIcon(collection)} />
-					<span className="lnk-doc">
-						<b>
-							{crumb ? `${crumb} / ` : ''}
-							{doc.label || doc.title}
-						</b>
-						<span className="mono">{doc.url}</span>
-					</span>
-					{clear}
+			<>
+				<div className="lnk" data-link-path={props.path} data-link-hidden={hiddenTarget ? '' : undefined}>
+					<div className="lnk-box" data-path={props.path} tabIndex={-1}>
+						<Icon name={docIcon(collection)} />
+						<span className="lnk-doc">
+							<b>
+								{crumb ? `${crumb} / ` : ''}
+								{doc.label || doc.title}
+							</b>
+							<span className="mono">{doc.url}</span>
+						</span>
+						{clear}
+					</div>
 				</div>
-			</div>
+				{hiddenTarget ? <Warnings warnings={[hiddenTarget]} /> : null}
+			</>
 		);
 	}
 	if (missing && !rule) {

package/src/editor/client/fields/ReferenceField.tsx

@@ -148,6 +148,12 @@ export function RefPicker(props: { to: string; taken?: readonly string[]; onPick
 							<Icon name={icon} />
 							<span className="nm">{d.label || d.title}</span>
 							<span className="meta">
+								{/* M9 Decision 7: a hidden page is still offered (the reference is legitimate), marked as the pages list marks it. */}
+								{d.hidden ? (
+									<span className="hmark" data-mark="hidden" title={d.hiddenBy ? 'Hidden from the site with the page it’s under' : 'Hidden from the site'}>
+										Hidden
+									</span>
+								) : null}
 								<span>{on ? 'Added' : <span className="mono">{d.url ?? d.path}</span>}</span>
 							</span>
 						</button>

package/src/editor/client/fields/RichTextField.tsx

@@ -5,7 +5,8 @@
  *
  * - **The toolbar:** the paragraph style (only when the field allows headings:
  *   Paragraph, Heading 2, and Heading 3 where allowed; never Heading 1), Bold,
- *   Italic, Bulleted list, Numbered list, and Link (when the field allows links).
+ *   Italic, Bulleted list, Numbered list, and Link (when the field allows links). A heading
+ *   field (M9 Decision 11) has Bold only.
  *   ⌘B, ⌘I and ⌘K do the same.
  * - **The link popover** (⌘K or the toolbar): find a document by title or address,
  *   or type an address; picking a document stores its URL (Decision 4). An address
@@ -23,7 +24,7 @@
  */
 import { Editor } from '@tiptap/core';
 import { useEffect, useRef, useState, type FocusEvent } from 'react';
-import type { RichTextField as RichTextDescriptor } from '../../../fields.ts';
+import { richTextOptions, type RichTextField as RichTextDescriptor } from '../../../fields.ts';
 import { fileAddress, fileKeyOf } from '../../../files.ts';
 import type { LibraryFile } from '../../types.ts';
 import { richTextHtml, type RichTextValue } from '../../../rich-text.ts';
@@ -48,8 +49,8 @@ export function RichTextField(props: { name: string; label: string; field: RichT
 	const { name, field } = props;
 	const id = `f-${host.scope}-${name}`.replace(/\./g, '-');
 	const value = (Array.isArray(props.value) ? props.value : []) as RichTextValue;
-	const options = { headings: field.headings, links: field.links };
-	const optionsKey = `${field.headings.join(',')}|${field.links}`;
+	const options = richTextOptions(field);
+	const optionsKey = `${field.headings.join(',')}|${field.links}|${!!field.heading}`;
 	const linkable = useLinkable();
 	const warnings = useFieldWarnings(name, field, props.value);
 
@@ -79,7 +80,7 @@ export function RichTextField(props: { name: string; label: string; field: RichT
 		const ed = new Editor({
 			element: el,
 			extensions: richTextExtensions(latest.current.options),
-			content: toDoc(JSON.parse(lastValue.current) as RichTextValue),
+			content: toDoc(JSON.parse(lastValue.current) as RichTextValue, latest.current.options),
 			injectCSS: false,
 			enableInputRules: false,
 			enablePasteRules: false,
@@ -126,7 +127,7 @@ export function RichTextField(props: { name: string; label: string; field: RichT
 		const json = JSON.stringify(value);
 		if (!ed || json === lastValue.current) return;
 		lastValue.current = json;
-		if (JSON.stringify(fromDoc(ed.getJSON() as PMNode, options)) !== json) ed.commands.setContent(toDoc(value), { emitUpdate: false });
+		if (JSON.stringify(fromDoc(ed.getJSON() as PMNode, options)) !== json) ed.commands.setContent(toDoc(value, options), { emitUpdate: false });
 	}, [props.value]);
 
 	useEffect(() => {
@@ -172,8 +173,8 @@ export function RichTextField(props: { name: string; label: string; field: RichT
 	};
 
 	const shownAsText = warnings.filter((w) => w.code === 'disallowed-kind').length;
-	const quiet = warnings.filter((w) => w.code === 'disallowed-kind' || w.code === 'link-off');
-	const loud = warnings.filter((w) => w.code !== 'disallowed-kind' && w.code !== 'link-off');
+	const quiet = warnings.filter((w) => w.code === 'disallowed-kind' || w.code === 'link-off' || w.code === 'italic-off');
+	const loud = warnings.filter((w) => w.code !== 'disallowed-kind' && w.code !== 'link-off' && w.code !== 'italic-off');
 	const disabled = host.readOnly;
 
 	return (
@@ -215,30 +216,35 @@ export function RichTextField(props: { name: string; label: string; field: RichT
 					<button type="button" aria-label="Bold" aria-pressed={active('bold')} disabled={disabled} onMouseDown={keep} onClick={() => run((e) => e.chain().focus().toggleMark('bold').run())}>
 						<b>B</b>
 					</button>
-					<button type="button" aria-label="Italic" aria-pressed={active('italic')} disabled={disabled} onMouseDown={keep} onClick={() => run((e) => e.chain().focus().toggleMark('italic').run())}>
-						<i className="tb-i">I</i>
-					</button>
-					<span className="sep" aria-hidden="true" />
-					<button
-						type="button"
-						aria-label="Bulleted list"
-						aria-pressed={active('bulletList')}
-						disabled={disabled}
-						onMouseDown={keep}
-						onClick={() => run((e) => toggleList(e, 'bulletList'))}
-					>
-						<FieldIcon name="ul" size="sm" />
-					</button>
-					<button
-						type="button"
-						aria-label="Numbered list"
-						aria-pressed={active('orderedList')}
-						disabled={disabled}
-						onMouseDown={keep}
-						onClick={() => run((e) => toggleList(e, 'orderedList'))}
-					>
-						<FieldIcon name="ol" size="sm" />
-					</button>
+					{/* M9 Decision 11: a heading field is bold and line breaks only. */}
+					{field.heading ? null : (
+						<>
+							<button type="button" aria-label="Italic" aria-pressed={active('italic')} disabled={disabled} onMouseDown={keep} onClick={() => run((e) => e.chain().focus().toggleMark('italic').run())}>
+								<i className="tb-i">I</i>
+							</button>
+							<span className="sep" aria-hidden="true" />
+							<button
+								type="button"
+								aria-label="Bulleted list"
+								aria-pressed={active('bulletList')}
+								disabled={disabled}
+								onMouseDown={keep}
+								onClick={() => run((e) => toggleList(e, 'bulletList'))}
+							>
+								<FieldIcon name="ul" size="sm" />
+							</button>
+							<button
+								type="button"
+								aria-label="Numbered list"
+								aria-pressed={active('orderedList')}
+								disabled={disabled}
+								onMouseDown={keep}
+								onClick={() => run((e) => toggleList(e, 'orderedList'))}
+							>
+								<FieldIcon name="ol" size="sm" />
+							</button>
+						</>
+					)}
 					{field.links ? (
 						<>
 							<span className="sep" aria-hidden="true" />

package/src/editor/client/fields/host.tsx

@@ -20,6 +20,7 @@ import { fieldWarnings, getAtPath, parseField, splitPath, type Field, type Field
 import { mediaFor } from '../media/store.ts';
 import { useEditor, useStore } from '../context.tsx';
 import type { Editor, View } from '../editor.ts';
+import { hiddenDocuments, hiddenPages } from '../../../links.ts';
 
 export interface FieldHost {
 	/**
@@ -121,6 +122,10 @@ export function useWarningContext(): WarningContext {
 		const keys = files ? new Set(files.map((f) => f.key)) : null;
 		return {
 			addresses: documents.map((d) => d.url),
+			// M9 Decision 7: a link to a hidden page warns.
+			hiddenPages: hiddenPages(documents),
+			// ...and so does a reference to one.
+			hiddenDocuments: hiddenDocuments(documents),
 			// M8 trial (item 3): an address the site's own code serves exists too.
 			codeRoutes: editor.site.codeRoutes ?? [],
 			documentExists: (collection: string, path: string) => ids.has(`${collection}/${path}`),

package/src/editor/client/fields/parts.tsx

@@ -113,7 +113,8 @@ export interface LinkHits {
 export function linkHits(query: string, documents: readonly ListedDocument[], collections: Editor['site']['collections']): LinkHits {
 	const q = query.trim();
 	const address: LinkHit | null = q && looksLikeAddress(q) ? { key: `addr:${q}`, href: q, doc: null, crumb: '' } : null;
-	const linkable = documents.filter((d) => typeof d.url === 'string');
+	// M9 Decision 7: a hidden page isn't offered (a link to one only warns).
+	const linkable = documents.filter((d) => typeof d.url === 'string' && !d.hidden);
 	const groups = q
 		? searchDocuments(q, linkable, collections).map((g) => ({
 				label: g.collection.label,