gina 0.5.13 → 0.5.14

package/CHANGELOG.md

@@ -6,6 +6,14 @@ adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html),
 and is generated by [Changie](https://github.com/miniscruff/changie).
 
 
+## 0.5.14 - 2026-07-09
+### Added
+* Stable publishes now assert README.md carries exactly one "What's in <version>" section, naming the version being released (script/check_readme_freshness.js, wired into the release prepare step). The publish aborts when the section is missing, duplicated, or names a different version. Previously the gate only asserted that README.md had been touched since the previous stable tag, which is blind to a wrong edit: adding a new section while leaving the prior one in place touches the file, so the gate passed while shipping a README whose newest release was buried under older ones. The version-match assertion is skipped on prerelease targets, where the drafted stable heading legitimately precedes the version bump. Alpha publishes skip the gate entirely.
+### Fixed
+* A form error label that is not a string no longer takes the form down. The validator engine now discards it, warns once naming the rule, and renders that rule's English default instead — covering all four sources a label can arrive from: a bundle catalog's `_validator` node, a `gina.validator.setErrorLabels()` override, a rule's `errorMessage` argument, and a field's `error`. Only the first was caught by the boot lint. Previously the engine threw `TypeError: target.match is not a function`, and nothing on the path catches it: the validation pass aborted, so no error message rendered, the form never submitted through gina, and because the boot-time pass throws out of an unguarded form-binding loop, every later form on the page was left unbound — the page silently fell back to native browser submits with no client-side validation at all. Separately, `compileError()` no longer throws when a backend field error carries no `{{placeholder}}` (a plain string such as "Already taken" made `String.match` return `null`, and the null was dereferenced), and the query rule keeps its resolved label when a backend field error is not a string.
+* A validation error returned for a specific form field no longer exposes a raw server stack trace to the browser. When an ApiError is built for a client field (`new gina.ApiError(err, 'fieldName')`) and the underlying error has no message — so the framework falls back to its stack — or an application passes a stack string directly, the field message is now replaced with a neutral one (`An error occurred`) outside local scope; the full stack is kept in local scope for debugging. This mirrors how Gina already strips the stack from the JSON error body outside local scope, and closes the one channel that strip could not reach: the per-field message map, which the form validator renders verbatim.
+* A validator field that stays in error while its message changes — because the value now fails a different rule, the message is value-dependent, or a late `setErrorLabels()` overlay changed the label — now re-announces the new message through the form's ARIA live region, so assistive technology no longer keeps announcing the first message. The visible message already refreshed on such updates; this fixes the screen-reader announcement to match.
+
 ## 0.5.13 - 2026-07-08
 ### Added
 * Gina now warns at bundle boot when a `_validator` label in a locale catalog cannot be rendered. Built-in rule labels accept only the placeholders `%l` (field label), `%n` (field name) and `%s` (size); any other `%`-token — including a literal percent glued to letters, as in `20%sur le prix` — is substituted with the string "undefined" in the message shown to the user, and a non-string label makes the validator throw. The catalog still loads, and the warning names the offending rule and the catalog file, so a translation typo surfaces in the boot log instead of in production copy.

package/README.md

@@ -42,23 +42,12 @@ open https://localhost:3100
 
 > **npm 12+** blocks install scripts by default, and gina's post-install bootstraps `~/.gina` and the framework dependencies. Install with `npm install -g gina@latest --allow-scripts=gina`, or allow it once for all global installs with `npm config set allow-scripts=gina --location=user`. (Not needed on npm ≤ 11.)
 
-## What's in 0.5.13
+## What's in 0.5.14
 
-- **Added — unrenderable `_validator` catalog labels are caught at bundle boot.** Gina now warns when a `_validator` label in a locale catalog cannot be rendered. Built-in rule labels accept only the placeholders `%l` (field label), `%n` (field name) and `%s` (size); any other `%`-token — including a literal percent glued to letters, as in `20%sur le prix` — is substituted with the string `undefined` in the message shown to the user, and a non-string label makes the validator throw. The catalog still loads, and the warning names the offending rule and the catalog file, so a translation typo surfaces in the boot log instead of in production copy.
-
-## What's in 0.5.12
-
-- **Added — FormValidator built-in rule labels localise from the i18n catalog, client and server.** The built-in rule messages (`isEmail`, `isRequired`, and the rest) now resolve per culture from `bundle/locales/<culture>.json` under the `_validator.<rule>` namespace, on both the server-rendered and client-side validation paths — English defaults fill any gaps, with a culture → base-language → English fallback. An app can still override per key with `gina.validator.setErrorLabels(labels[, culture])` (precedence: `setErrorLabels` > bundle catalog > English), and a per-field or per-rule message still wins over all of it.
-- **Added — per-bundle i18n catalogs activate culture negotiation and `t()`.** A bundle that ships a `locales/` directory now loads its catalogs at boot, activating URL-prefix / cookie / `Accept-Language` culture negotiation, the `t()` global, and the `t` template filter (opt-in and non-fatal — no `locales/` → unaffected; a malformed catalog warns rather than blocking boot). Two fixes make the negotiated culture actually reach every request: it previously resolved to `en`/empty regardless of configuration (#B83), and was dropped on warm/cached page reloads (#B84).
-- **Added — `data-gina-form-rule` forms auto-boot the client validator.** A form declaring `data-gina-form-rule` with a matching rule set now validates in the browser automatically at page load, with no per-page boot code — the same batteries-included behaviour as `data-gina-dialog` popins. Explicit construction to attach submit/lifecycle handlers still works and is idempotent with the auto-boot.
-- **Fixed — FormValidator correctness.** An empty required field shows a single "is required" message instead of also stacking "invalid" (#B78); a cross-field `is` rule no longer throws (and ungates the form) when the referenced field is still empty (#B82); and an invalid submit trigger is now marked `aria-disabled` + `.gina-form-submit-disabled` instead of natively `disabled`, so a click still surfaces every field error and focuses the first invalid field (#B76) — consumers should style that state (the framework ships no button CSS).
-- **Fixed — popin / redirect robustness.** A hover/focus-warmed popin whose GET returned an XHR redirect no longer shows raw JSON (#B80); a `_self` popin redirect no longer intermittently opens against a not-yet-loaded body (#B77); XHR/popin redirect responses carry the same `no-store` directives as plain redirects (#B75); and the HTTP/1.x static directory-to-index redirect now sends an unconditional 301 outside dev instead of a blank 200.
-- **Fixed — CLI robustness.** A malformed `@<project>` token (uppercase / dash / bare `@`) is now rejected with a clear error and exit 1 instead of silently targeting the wrong project (#B69); `GINA_HOMEDIR` is re-exported to every spawned child command so a home override is honoured; `project:start` / `service:start` delegate instead of hanging on a version-gate misparse; bulk `start` / `stop` / `restart` on a bundle-less project answer cleanly instead of crashing the daemon; and the framework-not-installed hint points at the real `gina framework:add` (#B81).
-
-## What's in 0.5.11
-
-- **Added — `gina image:build`: first-class OCI packaging.** Package a project bundle as a standard OCI image with one command: it synthesizes a `Containerfile` + build context from the project's registered state (bundles, entry, ports, env model, Node engine floor) and executes the build with buildah — natively on Linux, or on a container host reached over ssh (`GINA_CONTAINER_HOST=ssh://[user@]host[:port]` env override → native buildah → `container.host` in `~/.gina/<shortVersion>/settings.json`). A non-dev `--env` ships the release tree built in-image by `gina bundle:build`, so a production image never runs dev-mode hot-reload; the image boots via `gina-init` + `gina-container` (SIGTERM drain) and the `EXPOSE`d port is computed deterministically from the port allocator. `${secret:KEY}` placeholders ride byte-verbatim and resolve from the container environment at runtime — never baked. `--emit` prints the synthesized artifact without building; `--format=json` emits a one-shot machine-readable result; `--stream` emits NDJSON progress frames for CI/GUI consumers.
-- **Fixed — proxied redirects now carry no-store cache headers (#B68).** Framework-emitted redirects on requests classified as reverse-proxied now include `Cache-Control: no-cache, no-store, must-revalidate` (+ `Pragma` / `Expires`), so a browser never caches a proxy-context-derived redirect; the inter-bundle query 3xx forward path inherits the set. Direct production redirects are byte-identical, and the `301` default and route-declared `param.code` are untouched.
+- **Fixed — a non-string validator error label no longer takes the form down.** The validator engine discards it, warns once naming the rule, and renders that rule's English default instead — covering all four sources a label can arrive from: a bundle catalog's `_validator` node, a `gina.validator.setErrorLabels()` override, a rule's `errorMessage` argument, and a field's `error`. Previously the engine threw `TypeError: target.match is not a function`, which aborted the validation pass — no message rendered, the form never submitted through Gina, and every later form on the page was left unbound and silently fell back to a native browser submit with no client-side validation. `compileError()` also no longer throws when a backend field error carries no `{{placeholder}}`, and the `query` rule keeps its resolved label when a backend field error is not a string.
+- **Fixed — a field validation error no longer exposes a raw server stack trace to the browser.** When an `ApiError` is built for a client field and the underlying error has no message (so the framework falls back to its stack) — or an application passes a stack string directly — the per-field message is replaced with a neutral one (`An error occurred`) outside local scope; the full stack is kept in local scope for debugging. This closes the one channel the JSON error-body stack strip could not reach: the per-field message map the form validator renders verbatim.
+- **Fixed — a changing validator message on a still-invalid field is re-announced to assistive technology.** When a field stays in error while its message changes — a different rule now fails, the message is value-dependent, or a late `setErrorLabels()` overlay changed the label — the new message is re-announced through the form's ARIA live region, so screen readers no longer keep announcing the first message. The visible message already refreshed; this fixes the announcement to match.
+- **Added — stable publishes assert the README carries exactly one, correctly-named "What's in" section.** The release step now aborts a stable publish when the section is missing, duplicated, or names a different version — previously it only checked that the file had been touched, which is blind to a wrong edit.
 
 See the full [Changelog](./CHANGELOG.md) and [Roadmap](./ROADMAP.md).
 

package/ROADMAP.md

@@ -38,6 +38,7 @@ This roadmap covers planned features, architectural improvements, new connectors
 | **Q3 2026** | `0.5.11` ✅ | `image:build` — first-class OCI packaging: synthesizes a Containerfile + build context from the project's registered state (bundles, entry, ports, env model, node floor) and builds with buildah, natively on Linux or on a container host over ssh (env override → native → `container.host` settings fallback); dev/prod parity (a non-dev env ships the release tree built in-image), deterministic `EXPOSE`, `${secret:KEY}` placeholders never baked; `--emit` / `--format=json` / `--stream` NDJSON for CI and GUI consumers · **Fixed**: framework-emitted redirects on proxied requests carry no-store cache headers, so a browser never caches a proxy-context-derived redirect (the inter-bundle query 3xx forward path inherits the set; direct production redirects unchanged) |
 | **Q3 2026** | `0.5.12` ✅ | FormValidator built-in rule labels localise from the per-bundle i18n catalog (`_validator.<rule>`) on both the client and server, with a `gina.validator.setErrorLabels()` per-key override · per-bundle i18n catalogs activate URL-prefix / cookie / `Accept-Language` culture negotiation and `t()` at boot, and the negotiated culture now reaches every request (it previously resolved to `en`/empty #B83, and was dropped on warm/cached reloads #B84) · `data-gina-form-rule` forms auto-boot the client validator · **Fixed**: validator correctness (empty-required single message #B78, cross-field `is` empty operand #B82, submit trigger stays operable via `aria-disabled` #B76), popin / redirect robustness (#B80 / #B77 / #B75, static directory-to-index 301 outside dev), and CLI robustness (malformed `@<project>` rejected #B69, `GINA_HOMEDIR` re-export across child commands, `project:start` / `service:start` delegation, zero-bundle bulk commands, `framework:add` install hint #B81) |
 | **Q3 2026** | `0.5.13` ✅ | Unrenderable `_validator` catalog labels are caught at bundle boot — an unknown `%`-token (anything but `%l` / `%n` / `%s`, including a literal percent glued to letters as in `20%sur le prix`), a non-string label, or a non-object `_validator` section now warns and names the offending rule and catalog file. Warn-only: the catalog still loads, so a translation typo surfaces in the boot log instead of in production copy |
+| **Q3 2026** | `0.5.14` ✅ | Validator + error-handling robustness — a non-string validator error label now degrades to the rule's English default instead of throwing (the throw had aborted validation and left every later form on the page unbound), across all four label sources · a per-field `ApiError` message no longer leaks a raw server stack trace to the browser outside local scope · a changing validator message on a still-invalid field re-announces through the ARIA live region · release: stable publishes assert a single, correctly-named README "What's in" section |
 | **Q1 2027** | `0.5.x` | HTTP/2 priorities (blocked on Node scheduler hooks) · Beemaster admin + visual translation editor |
 | **Q3 2027** | `1.0.0` | First stable release — Windows alpha compatibility is a hard gate |
 

package/framework/v0.5.14/VERSION

@@ -0,0 +1 @@
+0.5.14

package/framework/{v0.5.13 → v0.5.14}/core/asset/plugin/dist/vendor/gina/js/gina.js

@@ -2999,6 +2999,16 @@ function FormValidatorUtil(data, $fields, xhrOptions, fieldsSet, culture) {
         'isApiError': 'Condition not satisfied',
         'isInList': 'Must be one of: %s'
     };
+    /**
+     * Rules already warned about by `replace()`'s fail-soft guard, so one mistyped label
+     * emits one warning and not one per debounced keystroke. Scoped to this engine
+     * instance on purpose: `validate()` builds a fresh engine per pass, but a
+     * module-scoped cache would suppress a second bundle's warning on the server, where
+     * the module is shared across bundles and requests.
+     * @inner
+     * @type {Object.<string, boolean>}
+     */
+    var _labelWarnings = {};
     local.errorLabels = _defaultErrorLabels;
     // #i18n (server) — resolve built-in rule labels from the bundle catalog's
     // `_validator.<rule>` namespace for the negotiated `culture`. Mirrors the client
@@ -3127,6 +3137,13 @@ function FormValidatorUtil(data, $fields, xhrOptions, fieldsSet, culture) {
 
     var compileError = function(error, data) {
         var varArr = error.match(/\{\{([^{{}}]+)\}\}/g );
+        // `String.match` with a /g regex yields `null` — not [] — when nothing matches, so a
+        // backend field error carrying no `{{placeholder}}` (the common shape, e.g. "Already
+        // taken") used to die on `varArr.length` before it could be rendered. Nothing along
+        // the only call path catches it, and the throw kills the whole validation pass.
+        if (!varArr) {
+            return error;
+        }
         for (let v=0, vLen=varArr.length; v<vLen; v++) {
             let localValue = varArr[v]
                                 .replace(/\[/g, '["')
@@ -3233,7 +3250,7 @@ function FormValidatorUtil(data, $fields, xhrOptions, fieldsSet, culture) {
                 this.error = errorMessage = cachedErrors[this.name].query[this.value].slice(0);
                 hasCachedErrors = true;
             }
-            errors['query'] = replace( this.error || errorMessage || local.errorLabels['query'], this);
+            errors['query'] = replace( this.error || errorMessage || local.errorLabels['query'], this, 'query');
             console.debug('[2] potential cached error detected !! ', hasCachedErrors, cachedErrors, ' vs ', errors['query']);
 
             if (hasCachedErrors) {
@@ -3397,7 +3414,13 @@ function FormValidatorUtil(data, $fields, xhrOptions, fieldsSet, culture) {
                     if ( typeof(errorFields[_this.name]) != 'undefined') {
 
                         // compiling against rules[field].query.data
-                        local.errorLabels['query'] = compileError(errorFields[_this.name], options.data);
+                        // Only a string can be compiled — `compileError` runs `error.match()`.
+                        // A non-string field error from the backend leaves the resolved
+                        // `query` label in place (localized, else the English default)
+                        // rather than taking the pass down.
+                        if ( typeof(errorFields[_this.name]) === 'string' ) {
+                            local.errorLabels['query'] = compileError(errorFields[_this.name], options.data);
+                        }
 
 
                     } else if ( typeof(result.error) != 'undefined' && /^5/.test(result.status) ) {
@@ -3407,7 +3430,7 @@ function FormValidatorUtil(data, $fields, xhrOptions, fieldsSet, culture) {
                     // Fixed added on 2023-01-10
                     // We want `local.errorLabels['query']` before the generic|user defined `rule` error
                     var optionError = ( typeof(options['error']) != 'undefined' ) ? options['error'] : null;
-                    errors['query'] = replace(systemError || _this['error'] || optionError || local.errorLabels['query'],  _this);
+                    errors['query'] = replace(systemError || _this['error'] || optionError || local.errorLabels['query'], _this, 'query');
 
                     console.debug('[1] query error detected !! ', result, errorFields, errors['query']);
                 }
@@ -4007,7 +4030,7 @@ function FormValidatorUtil(data, $fields, xhrOptions, fieldsSet, culture) {
             }
 
             if (!isValid) {
-                errors[alias] = replace(this.error || errorMessage || local.errorLabels[alias], this);
+                errors[alias] = replace(this.error || errorMessage || local.errorLabels[alias], this, alias);
                 if ( typeof(errorStack) != 'undefined' )
                     errors['stack'] = errorStack;
             }
@@ -4060,7 +4083,7 @@ function FormValidatorUtil(data, $fields, xhrOptions, fieldsSet, culture) {
             }
 
             if (!isValid) {
-                errors['isEmail'] = replace(this['error'] || local.errorLabels['isEmail'], this)
+                errors['isEmail'] = replace(this['error'] || local.errorLabels['isEmail'], this, 'isEmail')
             }
             // if error tagged by a previous vlaidation, remove it when isValid == true
             else if ( isValid && typeof(errors['isEmail']) != 'undefined' ) {
@@ -4102,7 +4125,7 @@ function FormValidatorUtil(data, $fields, xhrOptions, fieldsSet, culture) {
             }
 
             if (!isValid) {
-                errors['isJsonWebToken'] = replace(this['error'] || local.errorLabels['isJsonWebToken'], this)
+                errors['isJsonWebToken'] = replace(this['error'] || local.errorLabels['isJsonWebToken'], this, 'isJsonWebToken')
             }
             // if error tagged by a previous vlaidation, remove it when isValid == true
             else if ( isValid && typeof(errors['isJsonWebToken']) != 'undefined' ) {
@@ -4150,7 +4173,7 @@ function FormValidatorUtil(data, $fields, xhrOptions, fieldsSet, culture) {
             var isValid = (val !== null) ? true : false;
 
             if (!isValid) {
-                errors['isBoolean'] = replace(this.error || local.errorLabels['isBoolean'], this)
+                errors['isBoolean'] = replace(this.error || local.errorLabels['isBoolean'], this, 'isBoolean')
             }
             // if error tagged by a previous vlaidation, remove it when isValid == true
             else if ( isValid && typeof(errors['isBoolean']) != 'undefined' ) {
@@ -4195,7 +4218,7 @@ function FormValidatorUtil(data, $fields, xhrOptions, fieldsSet, culture) {
                 }
 
             } catch (err) {
-                errors['isNumber'] = replace(this.error || local.errorLabels['isNumber'], this);
+                errors['isNumber'] = replace(this.error || local.errorLabels['isNumber'], this, 'isNumber');
                 this.valid = false;
                 if ( errors.count() > 0 )
                     this['errors'] = errors;
@@ -4221,14 +4244,14 @@ function FormValidatorUtil(data, $fields, xhrOptions, fieldsSet, culture) {
             if ( !isValid || !isMinLength || !isMaxLength ) {
 
                 if ( !isValid )
-                    errors['isNumber'] = replace(this.error || local.errorLabels['isNumber'], this);
+                    errors['isNumber'] = replace(this.error || local.errorLabels['isNumber'], this, 'isNumber');
                 if ( !isMinLength || !isMaxLength ) {
                     if ( !isMinLength )
-                        errors['isNumberLength'] = replace(this.error || local.errorLabels['isNumberMinLength'], this);
+                        errors['isNumberLength'] = replace(this.error || local.errorLabels['isNumberMinLength'], this, 'isNumberMinLength');
                     if ( !isMaxLength )
-                        errors['isNumberLength'] = replace(this.error || local.errorLabels['isNumberMaxLength'], this);
+                        errors['isNumberLength'] = replace(this.error || local.errorLabels['isNumberMaxLength'], this, 'isNumberMaxLength');
                     if ( minLength === maxLength )
-                        errors['isNumberLength'] = replace(this.error || local.errorLabels['isNumberLength'], this);
+                        errors['isNumberLength'] = replace(this.error || local.errorLabels['isNumberLength'], this, 'isNumberLength');
                 }
 
                 isValid = false;
@@ -4259,7 +4282,7 @@ function FormValidatorUtil(data, $fields, xhrOptions, fieldsSet, culture) {
                     val = this.value = local.data[this.name] = Math.round(val);
                 } catch (err) {
 
-                    errors['toInteger'] = replace(this.error || local.errorLabels['toInteger'], this);
+                    errors['toInteger'] = replace(this.error || local.errorLabels['toInteger'], this, 'toInteger');
                     this.valid = false;
                     if ( errors.count() > 0 )
                         this['errors'] = errors;
@@ -4297,22 +4320,22 @@ function FormValidatorUtil(data, $fields, xhrOptions, fieldsSet, culture) {
             if ( !isValid || !isMinLength || !isMaxLength ) {
 
                 if ( !isValid )
-                    errors['isInteger'] = replace(this.error || local.errorLabels['isInteger'], this);
+                    errors['isInteger'] = replace(this.error || local.errorLabels['isInteger'], this, 'isInteger');
 
                 if ( !isMinLength || !isMaxLength ) {
 
                     if ( !isMinLength ) {
-                        errors['isIntegerLength'] = replace(this.error || local.errorLabels['isIntegerMinLength'], this);
+                        errors['isIntegerLength'] = replace(this.error || local.errorLabels['isIntegerMinLength'], this, 'isIntegerMinLength');
                         isValid = false;
                     }
 
                     if ( !isMaxLength ) {
-                        errors['isIntegerLength'] = replace(this.error || local.errorLabels['isIntegerMaxLength'], this);
+                        errors['isIntegerLength'] = replace(this.error || local.errorLabels['isIntegerMaxLength'], this, 'isIntegerMaxLength');
                         isValid = false;
                     }
 
                     if ( minLength === maxLength ) {
-                        errors['isIntegerLength'] = replace(this.error || local.errorLabels['isIntegerLength'], this);
+                        errors['isIntegerLength'] = replace(this.error || local.errorLabels['isIntegerLength'], this, 'isIntegerLength');
                         isValid = false;
                     }
                 }
@@ -4369,14 +4392,14 @@ function FormValidatorUtil(data, $fields, xhrOptions, fieldsSet, culture) {
                         }
                     } catch(err) {
                         isValid = false;
-                        errors['toFloat'] = replace(this.error || local.errorLabels['toFloat'], this);
+                        errors['toFloat'] = replace(this.error || local.errorLabels['toFloat'], this, 'toFloat');
                         this.valid = false;
                         if ( errors.count() > 0 )
                             this['errors'] = errors;
                     }
                 } else {
                     isValid = false;
-                    errors['toFloat'] = replace(this.error || local.errorLabels['toFloatNAN'], this)
+                    errors['toFloat'] = replace(this.error || local.errorLabels['toFloatNAN'], this, 'toFloatNAN')
                 }
             }
 
@@ -4464,7 +4487,7 @@ function FormValidatorUtil(data, $fields, xhrOptions, fieldsSet, culture) {
             }
 
             if (!isValid) {
-                errors['isFloat'] = replace(this.error || local.errorLabels['isFloat'], this)
+                errors['isFloat'] = replace(this.error || local.errorLabels['isFloat'], this, 'isFloat')
             }
 
             // #B78 - keep .valid consistent with a surviving isRequired error.
@@ -4530,7 +4553,7 @@ function FormValidatorUtil(data, $fields, xhrOptions, fieldsSet, culture) {
 
 
             if (!isValid) {
-                errors['isRequired'] = replace(this.error || local.errorLabels['isRequired'], this)
+                errors['isRequired'] = replace(this.error || local.errorLabels['isRequired'], this, 'isRequired')
             }
             // if error tagged by a previous vlaidation, remove it when isValid == true
             else if ( isValid ) {
@@ -4614,11 +4637,11 @@ function FormValidatorUtil(data, $fields, xhrOptions, fieldsSet, culture) {
                     isValid = false;
 
                     if ( !isMinLength )
-                        errors['isStringLength'] = replace(this['error'] || local.errorLabels['isStringMinLength'], this);
+                        errors['isStringLength'] = replace(this['error'] || local.errorLabels['isStringMinLength'], this, 'isStringMinLength');
                     if ( !isMaxLength )
-                        errors['isStringLength'] = replace(this['error'] || local.errorLabels['isStringMaxLength'], this);
+                        errors['isStringLength'] = replace(this['error'] || local.errorLabels['isStringMaxLength'], this, 'isStringMaxLength');
                     if (minLength === maxLength)
-                        errors['isStringLength'] = replace(this['error'] || local.errorLabels['isStringLength'], this);
+                        errors['isStringLength'] = replace(this['error'] || local.errorLabels['isStringLength'], this, 'isStringLength');
                 }
 
             }
@@ -4649,7 +4672,7 @@ function FormValidatorUtil(data, $fields, xhrOptions, fieldsSet, culture) {
             if (!val || val == '' || /NaN|Invalid Date/i.test(val) ) {
                 if ( /NaN|Invalid Date/i.test(val) ) {
                     console.warn('[FormValidator::isDate] Provided value for field `'+ this.name +'` is not allowed: `'+ val +'`');
-                    errors['isDate'] = replace(this.error || local.errorLabels['isDate'], this);
+                    errors['isDate'] = replace(this.error || local.errorLabels['isDate'], this, 'isDate');
 
                 }
                 this.valid = isValid;
@@ -4736,7 +4759,7 @@ function FormValidatorUtil(data, $fields, xhrOptions, fieldsSet, culture) {
                     if ( !errors['isRequired'] && this.value == '' ) {
                         isValid = true
                     } else {
-                        errors['isDate'] = replace(this.error || local.errorLabels['isDate'], this);
+                        errors['isDate'] = replace(this.error || local.errorLabels['isDate'], this, 'isDate');
                     }
 
                     this.valid = isValid;
@@ -4804,7 +4827,7 @@ function FormValidatorUtil(data, $fields, xhrOptions, fieldsSet, culture) {
 
             if (!isValid) {
                 this['size'] = allowedValues.join(', ');
-                errors['isInList'] = replace(this.error || local.errorLabels['isInList'], this);
+                errors['isInList'] = replace(this.error || local.errorLabels['isInList'], this, 'isInList');
             } else if ( typeof(errors['isInList']) != 'undefined' ) {
                 delete errors['isInList'];
             }
@@ -5087,8 +5110,55 @@ function FormValidatorUtil(data, $fields, xhrOptions, fieldsSet, culture) {
         return local.data
     }
 
+    /**
+     * Interpolate the `%l`/`%n`/`%s` tokens of an error label against a field object.
+     *
+     * `target` reaches here from four independent sources, none of which the framework
+     * controls: a bundle catalog's `_validator.<rule>` label, a runtime
+     * `gina.validator.setErrorLabels()` override, a rule's `errorMessage` argument
+     * (`is: ["$a === $b", <errorMessage>]`), and a per-field `error` (plus the `query`
+     * rule's `systemError`/`optionError`). Only the first is linted at boot.
+     *
+     * A non-string `target` used to throw here, and the throw is unrecoverable: it
+     * escapes `validate()`, so the submit-validation callback never runs and the form
+     * silently refuses to submit, and a boot-time pass aborts the whole form-binding
+     * loop. So degrade instead of dying — an authoring mistake must never cost a form.
+     *
+     * @inner
+     * @param   {*}      target     - The unresolved label. Fail-soft when not a string.
+     * @param   {object} fieldObj   - Field the label is rendered for; supplies the tokens.
+     * @param   {string} [rule]     - Rule the label belongs to. OPTIONAL: `replace` is
+     *      re-exported to app-defined validators through `getValidationContext()`, which
+     *      call it with two arguments. Absent, a non-string label degrades to an empty
+     *      message rather than to the rule's English default.
+     * @returns {string} The interpolated label; never throws.
+     *
+     * @example
+     *   replace('Should be at least %s characters', { size: 5 })  // -> 'Should be at least 5 characters'
+     *   replace({ message: 'oops' }, field, 'isRequired')         // -> 'Cannot be left empty' (+ one warn)
+     */
     /**@js_externs replace*/
-    var replace = function(target, fieldObj) {
+    var replace = function(target, fieldObj, rule) {
+        if ( typeof(target) !== 'string' ) {
+            // Prefer the rule's resolved label (it may be localised) over the English
+            // default — the resolved label is only unusable when it IS the bad value,
+            // in which case the `typeof` test below skips it and English wins.
+            var _fallback = ( rule && typeof(local.errorLabels[rule]) === 'string' )
+                ? local.errorLabels[rule]
+                : ( rule && typeof(_defaultErrorLabels[rule]) === 'string' )
+                    ? _defaultErrorLabels[rule]
+                    : '';
+            var _warnKey = rule || '(unknown rule)';
+            if ( !_labelWarnings[_warnKey] ) {
+                _labelWarnings[_warnKey] = true;
+                console.warn('[FormValidator] error label for rule `' + _warnKey + '` must be a string'
+                    + ' — got ' + ( target === null ? 'null' : typeof(target) ) + '.'
+                    + ' Falling back to ' + ( _fallback ? '`' + _fallback + '`' : 'an empty message' ) + '.'
+                    + ' Check the bundle catalog\'s `_validator` node, `setErrorLabels()`, the rule\'s'
+                    + ' `errorMessage` argument, and the field\'s `error`.');
+            }
+            target = _fallback;
+        }
         var keys = target.match(/%[a-z]+/gi);
         if (keys) {
             for (var k = 0, len = keys.length; k < len; ++k) {
@@ -10726,9 +10796,11 @@ function ValidatorPlugin(rules, data, formId, culture) {
                         //     }
                         // }
                         for (var e in errors[name]) {
-                            $msg = document.createElement('p');
-                            $msg.appendChild( document.createTextNode(errors[name][e]) );
-                            $err.appendChild($msg);
+                            if (e != 'stack') { // ignore stack for display (parity with the first-error branch, #B89)
+                                $msg = document.createElement('p');
+                                $msg.appendChild( document.createTextNode(errors[name][e]) );
+                                $err.appendChild($msg);
+                            }
 
                             if ( envIsDev ) {
                                 if (!formsErrors) formsErrors = {};
@@ -10751,6 +10823,22 @@ function ValidatorPlugin(rules, data, formId, culture) {
                 if ( !isWarning && $el.type != 'hidden' ) {
                     $el.setAttribute('aria-invalid', 'true');
                 }
+
+                // #B89 — re-announce the REFRESHED message through the live region. The
+                // first-error branch announces, but this refresh branch rebuilt $err with a
+                // NEW message (the value now fails a different rule, or a late setErrorLabels
+                // overlay changed the label) and, without this, assistive tech kept announcing
+                // the first message. Same guard as the first-error announce: committed (not
+                // soft-warning) errors, per-field/blur path, once focus has left the field.
+                // aria-live=polite + textContent-replace re-announces because the string changed.
+                if (
+                    !isWarning
+                    && typeof(fieldName) != 'undefined'
+                    && $err
+                    && $el !== document.activeElement
+                ) {
+                    announceA11yError($form, $err.textContent);
+                }
             }
 
             if (