includio-cms 0.37.1 → 0.37.2

package/API.md

@@ -1,8 +1,8 @@
-# includio-cms — Public API v0.37.1
+# includio-cms — Public API v0.37.2
 
 > Auto-generated by `scripts/generate-api-md.ts`. Do not edit by hand.
 
-Entry points: **23** · Stable: **665** · Experimental: **4**
+Entry points: **23** · Stable: **715** · Experimental: **4**
 
 Tags:
 - `@public` — frozen for v1.0; semver-protected.
@@ -13,17 +13,59 @@ Tags:
 
 ### `includio-cms`
 
+- `article(input: ArticleInput): JsonLdNode`
+- `interface ArticleInput`
+- `blogPosting(input: ArticleInput): JsonLdNode`
+- `breadcrumbList(items: Array<{ name: string; url: string }>): JsonLdNode`
 - `interface EmailAdapter` — Contract for email adapters. Used by `better-auth` reset-password flow and form submission
+- `faqPage(items: Array<{ question: string; answer: string }>): JsonLdNode`
+- `interface GeoInput`
+- `imageNode(img: string | MediaFile): string | JsonLdNode` — Normalize an image to a URL string or an ImageObject with dimensions.
+- `jsonLdGraph(nodes: JsonLdNode | JsonLdNode[]): { '@context': 'https://schema.org'; '@graph': JsonLdNode[]; }` — Wrap node(s) into a schema.org
+- `type JsonLdNode = Record<string, unknown> & { '@type': string | string[] }`
+- `localBusiness(input: LocalBusinessInput): JsonLdNode`
+- `interface LocalBusinessInput`
+- `organization(input: OrganizationInput): JsonLdNode`
+- `interface OrganizationInput`
+- `interface PostalAddressInput`
+- `pruneEmpty(value: T): T` — Recursively drop undefined/null/'' and empty arrays/objects.
 - `type ResolvedSeo = { [K in keyof SeoFieldData]: K extends 'ogImage' ? string | MediaFile | undefined : string | unde...` — Normalized SEO data — localized values flattened by `language`. A stable
 - `resolveSeo(entry: { seo?: Record<string, unknown> } | Record<string,..., language?: string): ResolvedSeo` — Resolve `entry.seo` into flat fields, flattening localized objects by
 - `interface SendMailOptions`
+- `slugifyFilename(base: string): string` — Slugify a media file base name (extension handled by the caller).
+- `thing(type: string | string[], props: Record<string, unknown> = {}): JsonLdNode` — Build a schema.org node of `type` from `props`, pruning empty values.
+- `webPage(input: WebPageInput): JsonLdNode`
+- `interface WebPageInput`
+- `website(input: WebSiteInput): JsonLdNode`
+- `interface WebSiteInput`
 
 ### `includio-cms/core`
 
+- `article(input: ArticleInput): JsonLdNode`
+- `interface ArticleInput`
+- `blogPosting(input: ArticleInput): JsonLdNode`
+- `breadcrumbList(items: Array<{ name: string; url: string }>): JsonLdNode`
 - `interface EmailAdapter` — Contract for email adapters. Used by `better-auth` reset-password flow and form submission
+- `faqPage(items: Array<{ question: string; answer: string }>): JsonLdNode`
+- `interface GeoInput`
+- `imageNode(img: string | MediaFile): string | JsonLdNode` — Normalize an image to a URL string or an ImageObject with dimensions.
+- `jsonLdGraph(nodes: JsonLdNode | JsonLdNode[]): { '@context': 'https://schema.org'; '@graph': JsonLdNode[]; }` — Wrap node(s) into a schema.org
+- `type JsonLdNode = Record<string, unknown> & { '@type': string | string[] }`
+- `localBusiness(input: LocalBusinessInput): JsonLdNode`
+- `interface LocalBusinessInput`
+- `organization(input: OrganizationInput): JsonLdNode`
+- `interface OrganizationInput`
+- `interface PostalAddressInput`
+- `pruneEmpty(value: T): T` — Recursively drop undefined/null/'' and empty arrays/objects.
 - `type ResolvedSeo = { [K in keyof SeoFieldData]: K extends 'ogImage' ? string | MediaFile | undefined : string | unde...` — Normalized SEO data — localized values flattened by `language`. A stable
 - `resolveSeo(entry: { seo?: Record<string, unknown> } | Record<string,..., language?: string): ResolvedSeo` — Resolve `entry.seo` into flat fields, flattening localized objects by
 - `interface SendMailOptions`
+- `slugifyFilename(base: string): string` — Slugify a media file base name (extension handled by the caller).
+- `thing(type: string | string[], props: Record<string, unknown> = {}): JsonLdNode` — Build a schema.org node of `type` from `props`, pruning empty values.
+- `webPage(input: WebPageInput): JsonLdNode`
+- `interface WebPageInput`
+- `website(input: WebSiteInput): JsonLdNode`
+- `interface WebSiteInput`
 
 ### `includio-cms/core/server`
 
@@ -332,8 +374,10 @@ Tags:
 - `const Image: LegacyComponentType`
 - `isImageFieldData(media: MediaFieldData): media is ImageFieldData`
 - `isVideoFieldData(media: MediaFieldData): media is VideoFieldData`
+- `const JsonLd: LegacyComponentType`
 - `const Media: LegacyComponentType`
 - `const Preview: LegacyComponentType`
+- `const Seo: LegacyComponentType`
 - `setCustomFields(defs: Map<string, CustomFieldDefinition>): <inferred>`
 - `setPreferMp4(value: boolean): <inferred>`
 - `setRemotes(data: typeof remotes): <inferred>`
@@ -343,6 +387,8 @@ Tags:
 
 ### `includio-cms/sveltekit/server`
 
+- `buildRobots(options: RobotsOptions = {}): string` — Build a robots.txt document. Defaults to allow-all + optional sitemap link.
+- `buildSitemap(entries: SitemapEntry[]): string` — Build a sitemap.xml document from a list of URL entries.
 - `cmsLayoutLoad(event: RequestEvent): <inferred>` — Returns `cmsContext` from `event.locals` for use in a SvelteKit layout
 - `countEntries(opts: CountEntriesOptions): Promise<number>` — Count entries matching the same filters as `resolveEntries`, without
 - `type CountEntriesOptions = Omit< ResolveEntriesOptions, 'limit' | 'offset' | 'populate' | 'orderBy' | 'dataOrderBy' >`
@@ -365,7 +411,10 @@ Tags:
 - `resolveEntry(opts: ResolveEntryOptions): Promise<Entry | null>` — Fetch a single populated Entry.
 - `interface ResolveEntryOptions`
 - `type ResolveStatus = 'published' | 'draft' | 'scheduled'` — Status filter for `resolveEntry`/`resolveEntries`/`countEntries`.
+- `interface RobotsOptions`
+- `interface RobotsRule`
 - `sendMail(options: SendMailOptions): Promise<void>` — Send an email through the configured CMS email adapter. Thin convenience
+- `interface SitemapEntry`
 
 ### `includio-cms/db-postgres`
 
@@ -691,18 +740,19 @@ Tags:
 - `createBooking(input: CreateBookingInput, opts: { now?: Date; actor?: PriceActor } = {}): Promise<{ booking: typeof bookingsTable.$inferSelect; accessToken: string }>` — Create a booking (public self-serve or staff). Validates catalog capacity +
 - `createBookingHandler(): { POST: RequestHandler }` — Public self-serve booking creation. Mount at `POST /api/booking`.
 - `createDepositPayment(bookingId: string): Promise<{ redirectUrl: string | null; status: 'redirect' | 'manual' | 'error'...` — Create the deposit payment for a freshly-created booking: ask the first
-- `createInstallmentPayment(bookingId: string, amount: number): Promise<{ paymentLink: string | null }>` — Generate an installment/balance payment link for an arbitrary amount (staff or
+- `createInstallmentPayment(bookingId: string, opts: InstallmentPaymentOptions): Promise<{ paymentLink: string | null }>` — Generate an installment/balance payment link. Records a pending ledger row keyed
 - `createMaintenanceHandler(): { POST: RequestHandler }` — Secured external trigger for booking maintenance — the swap-in for the
 - `createPortalHandler(): { GET: RequestHandler; POST: RequestHandler }` — Self-service portal. Mount at `GET|POST /api/booking/portal/[token]`.
 - `createWebhookHandler(): { POST: RequestHandler }` — Payment-provider webhook. Mount at `POST /api/booking/webhook/[provider]`.
 - `editBooking(bookingId: string, changes: BookingEditChanges, opts: { actor: 'staff' | 'portal'; now?: Date }): Promise<typeof bookingsTable.$inferSelect>` — Edit a booking (staff or portal). Recomputes totals per-participant + derived
 - `getBookingDb(): <inferred>` — Returns the Drizzle handle, asserting the postgres adapter is in use.
 - `getBookingMaintenanceStatus(): { running: boolean; lastRun: Date | null }`
+- `interface InstallmentPaymentOptions`
 - `listBookingAdjustments(bookingId: string): Promise<BookingAdjustment[]>` — List all adjustments (active + voided) for a booking, newest first.
 - `pickEmailTemplate(kind: BookingEmailKind): string` — Template file name for a kind (1:1 — kept as a function for future indirection).
 - `portalAddTrips(token: string, additions: Array<{ tripRef: string; assignments: string[] }>): <inferred>` — Self-service dobieranie wycieczki: doczytaj obecny stan, scal z `additions`
 - `portalEdit(token: string, changes: BookingEditChanges): <inferred>` — Portal self-service edit (actor:'portal' guards). Throws → handler maps to 409/400.
-- `portalPay(token: string, amount: number): <inferred>` — Portal: create an installment/balance payment link.
+- `portalPay(token: string): <inferred>` — Portal: create a balance payment link. The amount is NOT taken from the request —
 - `portalUpdateParticipant(token: string, assignmentId: string, data: Record<string, unknown>): <inferred>` — Portal self-service: customer fills their own participant data. Verifies the
 - `portalView(token: string): <inferred>` — Portal view: booking + items + participants + ledger (no staff data).
 - `priceFromExistingRows(tx: BookingTx, bookingId: string, config: ResolvedBookingConfig): Promise<ParticipantPriceResult>` — Price a booking from its CURRENTLY persisted people/items/assignments (no

package/CHANGELOG.md

@@ -3,6 +3,25 @@
 All notable changes to includio-cms are documented here.
 Generated from `src/lib/updates/` — do not edit manually.
 
+## 0.37.2 — 2026-07-16
+
+Powierzchnia SEO/AEO rdzenia — reużywalne helpery, które raz naprawione w rdzeniu działają u każdego klienta (wyszły z wdrożenia SEO u pod-zwrotnikami). W tym samym patchu domyka się też łatka bezpieczeństwa bookingu (kwota płatności).
+
+### Added
+- **Buildery JSON-LD (schema.org) w `includio-cms/core`.** Typowane, czyste funkcje: `organization`, `localBusiness`, `website`, `webPage`, `breadcrumbList`, `article`, `blogPosting`, `faqPage` + generyk `thing` i `jsonLdGraph`. Opt-in — nic nie emitują domyślnie. `undefined`/puste wartości wypadają z outputu, więc częściowe dane dają poprawny minimalny JSON-LD. Bespoke typy (np. `TouristTrip + Offer`, `Product`) składasz po stronie projektu przez `thing("TouristTrip", { ... })` — rdzeń zostaje generyczny.
+- **Komponent `<JsonLd>` w `includio-cms/sveltekit`.** Renderuje `<script type="application/ld+json">` w `<svelte:head>` (SSR), escapuje `<` → breakout ze `<script>` jest niemożliwy. Przyjmuje obiekt albo tablicę (np. wynik `jsonLdGraph`).
+- **`buildSitemap` / `buildRobots` w `includio-cms/sveltekit/server`.** Czyste buildery: `buildSitemap(entries)` → string `sitemap.xml` (URL-e XML-escaped, `lastmod` `Date`→ISO lub string, opcjonalne `changefreq`/`priority`), `buildRobots(options)` → `robots.txt` (domyślnie allow-all + link do sitemapy, konfigurowalne reguły). Projekt posiada route i wpina helper: `export const GET = async () => new Response(buildSitemap(entries), { headers: { "content-type": "application/xml" } });`.
+
+### Fixed
+- **Slugifikacja nazw plików mediów.** Upload i zmiana nazwy przepuszczają basename przez `slugifyFilename` (nowy helper w `includio-cms/core`): `"IMG-1234 (1).jpeg"` → `img-1234-1.jpeg`, polskie znaki transliterowane, spacje/wielkość/nawiasy usunięte. Tylko nowe pliki — istniejące URL-e w bazie nietknięte (bez migracji). Cap 200 znaków, path-traversal niemożliwy (slug nie zawiera `/` ani `.`).
+- **`<Seo>` dopełniony i wyeksportowany z `includio-cms/sveltekit`.** Wcześniej komponent istniał, ale nie był eksportowany (martwy). Bugfix: `og:url` i `og:type` używają `property=` zamiast `name=` (wymóg Open Graph). Nowe propsy: `ogType` (domyślnie `website`; `article` dokłada `article:published_time`/`modified_time`/`author`/`section`/`tag`), `noindex` (→ `<meta name="robots" content="noindex">`), `siteName` (→ `og:site_name`). `ogImage` typu `MediaFile` emituje `og:image:width`/`height`/`alt`.
+- **Typografia — łamanie sierot przyimkowych.** `fixOrphans` wstawia NBSP nie tylko po jednoliterowych spójnikach (`i/w/z/o/u/a/e`), ale też po krótkich przyimkach (`do na od po we za ze ku nad pod bez dla przy`). Lista konfigurowalna parametrem `words` + eksport `DEFAULT_ORPHAN_WORDS`. Domyślnie konserwatywnie (bez spójników typu `oraz/lub`), żeby nie NBSP-ować za dużo.
+- **Bezpieczeństwo (booking): kwota dopłaty przestaje pochodzić z żądania HTTP.** Domknięcie łuku 0.37.1 (cena szła z katalogu, ale kwota wpłaty — nie): `portalPay` podawał `amount` z ciała żądania prosto do `createInstallmentPayment`, bez konfrontacji z saldem — przeglądarka dyktowała kwotę (nadpłata do ręcznego zwrotu albo link na grosz). Bramka kwotowa oparta na aktorze (bliźniak bramki cenowej): `portal` NIE dyktuje (serwer obciąża `totals.balance`, fail-closed gdy brak salda), `staff` może. Portalowa wpłata zapisuje się teraz z `createdBy` aktora — nie zahardkodowanym `staff` (koniec kłamstwa w audycie).
+- **Booking: `ledger.balance` przestaje gubić rabaty.** `portalView` liczył `ledger` z `totals.gross` → `balance = gross − paid`, pomijając `discount`/`surcharge`/`manualDiscount`; portal pokazywał dwa różne salda i przycisk płatności brał gorzej policzone. Teraz `toPortalView` karmi `ledgerSummary` wartością netto (`netOf(totals)`), więc `ledger.balance === totals.balance`.
+
+### Breaking
+- **`createInstallmentPayment(bookingId, amount)` → `createInstallmentPayment(bookingId, { actor, amount? })`.** `actor: "portal" | "staff"` jest wymagany. Dla `portal` kwota jest ignorowana (serwer obciąża saldo); dla `staff` podajesz `amount`. `portalPay(token, amount)` → `portalPay(token)` (kwota nie jest już parametrem). Dotyczy tylko konsumentów wołających te funkcje bezpośrednio — ścieżka przez handler portalu/remote admina zaktualizowana w rdzeniu.
+
 ## 0.37.1 — 2026-07-14
 
 Dwie łatki cenowe w bookingu. (1) Cena rezerwacji przestaje pochodzić z żądania HTTP — do 0.37.0 publiczne endpointy przyjmowały `unitPrice` prosto z ciała żądania i nikt nie konfrontował go z katalogiem, więc wyprawę dało się zarezerwować za grosz. (2) Data wyceny zostaje zamrożona na rezerwacji — dotąd każde jej dotknięcie (edycja, ale też zaksięgowanie korekty) przeliczało reguły zależne od czasu wg DZISIEJSZEJ daty, przez co early-bird sprzed miesięcy cicho znikał i klient robił się winien pieniądze.

package/DOCS.md

@@ -1,4 +1,4 @@
-# Includio CMS Documentation (v0.37.1)
+# Includio CMS Documentation (v0.37.2)
 
 > This file is auto-generated from the docs site. For the latest version, update the package.
 

package/ROADMAP.md

@@ -40,6 +40,23 @@
 - [x] `[fix]` `[breaking]` `[P0]` **Data wyceny zamrożona na rezerwacji** (`bookings.priced_at`). Dotąd cena bazowa była zamrożona, ale data — nie: `editBooking` i `priceFromExistingRows` (ścieżka **korekt**) przeliczały reguły zależne od czasu wg `new Date()`. Obsługa księgowała dopłatę ustaloną telefonicznie tydzień przed wylotem → `daysUntil(anchor, now)` spadało poniżej progu → **early-bird sprzed miesięcy cicho znikał, a klient robił się winien pieniądze**. Bomba tykała sama, bez żadnej zmiany cennika. Rezerwacje sprzed 0.37.1: `priced_at = NULL` → fallback na `created_at` (zero migracji danych). Pełny snapshot **wartości** polityki (`pricing_snapshot`) zostaje w 0.38.0 §4.4 — wymaga świadomej zmiany cennika przez klientkę, więc da się ją uprzedzić.
 - [x] `[fix]` `[breaking]` `[P0]` **Cena rezerwacji przestaje pochodzić z żądania HTTP.** Do 0.37.0 trzy publiczne drogi wpuszczały `unitPrice` z ciała żądania i nikt nie konfrontował go z katalogiem (`create-handler.ts:37`, portalowe `add-trips`, portalowe `edit` → `editBooking`) — wyprawę dało się zarezerwować za grosz. Bramka stoi teraz w rdzeniu (`createBooking`/`editBooking`), oparta na aktorze: `public`/`portal` nie dyktują ceny (nowa pozycja → szew `resolvePrice` z katalogu, istniejąca → jej `unitPriceSnapshot`), `staff` nadal może korygować ręcznie. Domyślny aktor to `public`, więc przyszły publiczny endpoint jest bezpieczny bez pamiętania o niczym. Fail-closed: brak `resolvePrice` = odmowa wyceny.
 
+## 0.37.2 — SEO/AEO surface + kwota płatności
+
+> Domknięcie tego samego łuku co 0.37.1: **cena** przestała pochodzić z żądania HTTP, ale **kwota płatności** wciąż pochodzi.
+> Zgłoszone z pod-zwrotnikami (2026-07-14) — klient z rabatem pakietowym płacił w portalu za dużo. Konsument załatał się u siebie
+> (`totals.balance` zamiast `ledger.balance`), ale przyczyna siedzi w rdzeniu i każdy kolejny konsument wdepnie w to samo.
+
+- [x] `[fix]` `[P0]` **Kwota dopłaty przestaje pochodzić z żądania HTTP.** `portalPay(token, amount)` podaje `amount` prosto do `createInstallmentPayment(bookingId, amount)` (`payments.ts:149`), a ta wkłada go do `totalGross` adaptera i insertuje `booking_payments` — **bez żadnej konfrontacji z `totals.balance`**. Przeglądarka dyktuje, ile zapłaci: może za dużo (nadpłata do zwrotu ręcznego), może grosz (link płatności na 0,01 zł). Bramka z 0.37.1 stanęła na `unitPrice`, ale nie na kwocie wpłaty. Fix: kwotę wyznacza/weryfikuje serwer względem `totals.balance` (aktor `portal` nie dyktuje kwoty, `staff` może — symetrycznie do bramki cenowej), fail-closed przy rozjeździe. Przy okazji: portalowa wpłata zapisuje się z `createdBy: 'staff'` (`payments.ts:187`), co kłamie w audycie. <!-- files: src/lib/booking/server/portal.ts, src/lib/booking/server/payments.ts -->
+- [x] `[fix]` `[P0]` **`ledger.balance` gubi rabaty — i kusi nazwą.** `portalView` woła `ledgerSummary(booking.totals.gross, payments)` (`server/portal.ts:48`), a `ledgerSummary` liczy `balance = gross - paid` (`ledger.ts:87`), z pominięciem `discount` / `surcharge` / `manualDiscount`. Autorytatywne jest `totals.balance` (`netOf(base) - paid`, `totals.ts:73`) i portalView zwraca je obok — więc widok podaje konsumentowi **dwa różne salda, a to gorzej policzone nosi bardziej oczywistą nazwę**. Efekt u konsumenta: portal pokazywał „Pozostało 532 zł" i „Do dopłaty 610 zł" na jednym ekranie, a przycisk płatności brał tę drugą. Fix: `ledgerSummary` liczy saldo z netto (albo `portalView` przestaje zwracać `ledger.balance` i zostawia sam `overpaid`). Test regresyjny: rezerwacja z rabatem → `ledger.balance === totals.balance`. <!-- files: src/lib/booking/ledger.ts, src/lib/booking/server/portal.ts, src/lib/booking/totals.ts -->
+
+> **SEO/AEO surface** (bundlowane w tym samym patchu, 2026-07-16). Reużywalne w rdzeniu — raz naprawione, działa u każdego klienta. Spec: `docs/superpowers/specs/2026-07-15-seo-aeo-core-surface-design.md`, plan: `docs/superpowers/plans/2026-07-16-seo-aeo-core-surface.md`.
+
+- [x] `[feature]` `[P1]` **Buildery JSON-LD + `<JsonLd>`** — typowane, czyste buildery schema.org w `includio-cms/core` (`organization`/`localBusiness`/`website`/`webPage`/`breadcrumbList`/`article`/`blogPosting`/`faqPage` + generyk `thing`/`jsonLdGraph`) i komponent `<JsonLd>` (SSR w `<svelte:head>`, escape `<`). Opt-in. <!-- files: src/lib/core/fields/jsonLd/, src/lib/sveltekit/components/json-ld.svelte -->
+- [x] `[fix]` `[P1]` **Slugifikacja nazw plików mediów** — `slugifyFilename` w core; `files-local` slugifikuje basename przy uploadzie/rename (tylko nowe pliki, non-breaking). <!-- files: src/lib/core/fields/slugifyFilename.ts, src/lib/files-local/index.ts -->
+- [x] `[fix]` `[P1]` **`<Seo>` dopełniony + wyeksportowany** — export z `sveltekit`; bugfix `og:url`/`og:type` `name→property`; `ogType`/`noindex`/`siteName`/`article` props; og:image width/height/alt z `MediaFile`. <!-- files: src/lib/sveltekit/components/seo.svelte, src/lib/sveltekit/index.ts -->
+- [x] `[fix]` `[P2]` **fixOrphans: przyimki wieloliterowe** — domyślny zestaw rozszerzony o 2–3-literowe przyimki, konfigurowalny `words` param + `DEFAULT_ORPHAN_WORDS`. <!-- files: src/lib/core/server/fields/utils/fixOrphans.ts -->
+- [x] `[feature]` `[P1]` **`buildSitemap`/`buildRobots`** — czyste buildery w `sveltekit/server`; projekt posiada route. <!-- files: src/lib/sveltekit/server/sitemap.ts -->
+
 ## 0.38.0 — Moduły: kontrakt vs polityka
 
 > **WSTRZYMANE (2026-07-14).** Łuk jest dojrzały, ale klientka nie zobaczy z niego nic, a produktyzacja
@@ -86,6 +103,7 @@ Spec: `docs/superpowers/specs/2026-07-13-moduly-kontrakt-vs-polityka-design.md`.
 
 ## Backlog
 
+- [ ] `[feature]` `[P2]` **Panel SEO w sidebarze admina (Yoast-like)** — osobny brainstorm/spec. Guided, niestechniczny panel (odwrotność przytłaczającego Yoasta, on-brand): globalna konfiguracja SEO, per-wpisowy box (snippet preview, noindex toggle, focus keyword → wtedy świadome rozszerzenie pola `seo`), pobranie sitemapy (nakładka na `buildSitemap`). **Przekierowania (redirects)** prawdopodobnie własny spec (tabela DB + hook 301/302 + CRUD). Szwy pod to = SEO surface 0.37.2.
 - [ ] `[fix]` `[P1]` Wyciek puli połączeń DB w dev (HMR) — pojedynczy proces `vite dev` konsumenta trzymał **100 połączeń** do Postgresa (cały `max_connections`), po czym baza odbijała wszystko: `FATAL: sorry, too many clients already` (zaobserwowane 2026-07-13 na pod-zwrotnikami). Hipoteza: każde przeładowanie modułu przez HMR tworzy nowy klient `postgres.js` (pula domyślnie 10), a stary nie jest zamykany — 10 przeładowań wyczerpuje limit. Sprawdzić zamykanie klienta w `import.meta.hot.dispose` / singleton na `globalThis` w adapterze. Dotyka każdego, kto dłużej pracuje w dev. <!-- files: src/lib/db-postgres/index.ts -->
 - [ ] `[chore]` `[P1]` CMS doctor — `validateLayout()` jest napisany i przetestowany, ale nie jest wołany z żadnego miejsca produkcyjnego: literówka w nazwie pola w tabie przechodzi po cichu (pole ląduje w orphanach). Podpiąć go do `defineConfig` obok `validatePreviews`, dołożyć `pnpm cms check` w CLI i zestaw reguł zdrowia configu (martwe pola, `pathTemplate` bez `previewUrl`/`previews`, itp.). <!-- files: src/lib/core/fields/layoutUtils.ts, src/lib/sveltekit/config.ts, src/lib/core/config/, src/lib/cli/index.ts -->
 - [ ] `[feature]` `[P2]` Date/datetime field — przebudowa na shadcn-svelte (bits-ui Calendar/DatePicker) zamiast natywnego inputu. Zgłoszone w QA Etap 5a (4/5); funkcjonalnie OK, odłożone jako osobny redesign pola daty. <!-- files: src/lib/admin/components/fields/date-field.svelte, datetime-field.svelte -->

package/dist/admin/remote/booking.remote.js

@@ -209,7 +209,7 @@ export const editBookingStaff = command(z.object({ bookingId: z.string().uuid(),
 /** Staff: generate an installment/balance payment link for any amount. @public */
 export const addPaymentLink = command(z.object({ bookingId: z.string().uuid(), amount: z.number().int().positive() }), async ({ bookingId, amount }) => {
     requireAuth();
-    const result = await createInstallmentPayment(bookingId, amount);
+    const result = await createInstallmentPayment(bookingId, { actor: 'staff', amount });
     if (result.paymentLink) {
         await sendBookingEmail(bookingId, 'payment-link', {
             amount,

package/dist/booking/payment-amount.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Pure amount gate for installment/balance payment links — the payment-side twin
+ * of the 0.37.1 price gate. Keeps the *amount* from being dictated by an untrusted
+ * HTTP request. All amounts are in **minor units** (grosze).
+ */
+export type PaymentActor = 'portal' | 'staff';
+/** Thrown when a requested payment amount is not allowed for the actor. */
+export declare class PaymentAmountError extends Error {
+    constructor(message: string);
+}
+/**
+ * Resolve the amount to charge on an installment/balance link.
+ *
+ * - `portal` (untrusted): the server dictates the amount = current outstanding
+ *   `balance`; any `requestedAmount` from the browser is ignored. Fail-closed
+ *   when nothing is due (`balance <= 0`).
+ * - `staff` (trusted): honors `requestedAmount` (positive integer minor units) —
+ *   staff may bill a custom amount, e.g. a partial installment or a prepayment.
+ *
+ * @throws {PaymentAmountError} portal with nothing due, or staff with a
+ *   non-positive / fractional / missing amount.
+ */
+export declare function resolveInstallmentAmount(balance: number, actor: PaymentActor, requestedAmount?: number): number;

package/dist/booking/payment-amount.js

@@ -0,0 +1,37 @@
+/**
+ * Pure amount gate for installment/balance payment links — the payment-side twin
+ * of the 0.37.1 price gate. Keeps the *amount* from being dictated by an untrusted
+ * HTTP request. All amounts are in **minor units** (grosze).
+ */
+/** Thrown when a requested payment amount is not allowed for the actor. */
+export class PaymentAmountError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'PaymentAmountError';
+    }
+}
+/**
+ * Resolve the amount to charge on an installment/balance link.
+ *
+ * - `portal` (untrusted): the server dictates the amount = current outstanding
+ *   `balance`; any `requestedAmount` from the browser is ignored. Fail-closed
+ *   when nothing is due (`balance <= 0`).
+ * - `staff` (trusted): honors `requestedAmount` (positive integer minor units) —
+ *   staff may bill a custom amount, e.g. a partial installment or a prepayment.
+ *
+ * @throws {PaymentAmountError} portal with nothing due, or staff with a
+ *   non-positive / fractional / missing amount.
+ */
+export function resolveInstallmentAmount(balance, actor, requestedAmount) {
+    if (actor === 'staff') {
+        if (!Number.isInteger(requestedAmount) || requestedAmount <= 0) {
+            throw new PaymentAmountError('Kwota wpłaty musi być dodatnią liczbą całkowitą (grosze).');
+        }
+        return requestedAmount;
+    }
+    // portal: browser does not dictate the amount — the server charges the balance.
+    if (balance <= 0) {
+        throw new PaymentAmountError('Brak salda do zapłaty.');
+    }
+    return balance;
+}

package/dist/booking/server/http/portal-handler.js

@@ -65,7 +65,8 @@ export function createPortalHandler() {
             }
             try {
                 if (action === 'pay') {
-                    const out = await portalPay(token, Number(body.amount) || 0);
+                    // Kwota NIE pochodzi z żądania — serwer obciąża saldo (bramka kwotowa w rdzeniu).
+                    const out = await portalPay(token);
                     return out ? json(out) : json({ error: 'Not found' }, { status: 404 });
                 }
                 if (action === 'edit') {

package/dist/booking/server/payments.d.ts

@@ -1,5 +1,6 @@
 import type { PaymentEvent } from '../../shop/types.js';
 import type { PaymentKind } from '../ledger.js';
+import { type PaymentActor } from '../payment-amount.js';
 /**
  * Create the deposit payment for a freshly-created booking: ask the first
  * configured adapter for a payment (charging only the deposit amount via an
@@ -22,12 +23,21 @@ export declare function applyWebhookPayment(event: PaymentEvent): Promise<{
     bookingId: string | null;
     kind: PaymentKind | null;
 }>;
+export interface InstallmentPaymentOptions {
+    /** Trust level of the caller. `portal` cannot dictate the amount; `staff` can. */
+    actor: PaymentActor;
+    /** Required for `staff` (positive minor units). Ignored for `portal` (server charges the balance). */
+    amount?: number;
+}
 /**
- * Generate an installment/balance payment link for an arbitrary amount (staff or
- * portal). Records a pending ledger row keyed by the provider ref; the webhook
- * settles it later.
+ * Generate an installment/balance payment link. Records a pending ledger row keyed
+ * by the provider ref; the webhook settles it later.
+ *
+ * The charged amount is gated by {@link resolveInstallmentAmount}: for `actor:'portal'`
+ * the browser cannot dictate it — the server charges the outstanding `totals.balance`
+ * (fail-closed when nothing is due); `actor:'staff'` may bill a custom `amount`.
  */
-export declare function createInstallmentPayment(bookingId: string, amount: number): Promise<{
+export declare function createInstallmentPayment(bookingId: string, opts: InstallmentPaymentOptions): Promise<{
     paymentLink: string | null;
 }>;
 /** Record a manual cash payment (staff). Settles immediately and recomputes status. */

package/dist/booking/server/payments.js

@@ -6,6 +6,7 @@ import { applyPaymentEvent } from '../webhook-logic.js';
 import { deriveStatus } from '../state-machine.js';
 import { netOf } from '../totals.js';
 import { buildPaymentContext } from '../payment-context.js';
+import { resolveInstallmentAmount } from '../payment-amount.js';
 /**
  * Create the deposit payment for a freshly-created booking: ask the first
  * configured adapter for a payment (charging only the deposit amount via an
@@ -127,11 +128,14 @@ export async function applyWebhookPayment(event) {
     });
 }
 /**
- * Generate an installment/balance payment link for an arbitrary amount (staff or
- * portal). Records a pending ledger row keyed by the provider ref; the webhook
- * settles it later.
+ * Generate an installment/balance payment link. Records a pending ledger row keyed
+ * by the provider ref; the webhook settles it later.
+ *
+ * The charged amount is gated by {@link resolveInstallmentAmount}: for `actor:'portal'`
+ * the browser cannot dictate it — the server charges the outstanding `totals.balance`
+ * (fail-closed when nothing is due); `actor:'staff'` may bill a custom `amount`.
  */
-export async function createInstallmentPayment(bookingId, amount) {
+export async function createInstallmentPayment(bookingId, opts) {
     const config = requireBookingConfig();
     const db = getBookingDb();
     const [booking] = await db.select().from(bookingsTable).where(eq(bookingsTable.id, bookingId));
@@ -140,6 +144,8 @@ export async function createInstallmentPayment(bookingId, amount) {
     const adapter = config.payment[0];
     if (!adapter)
         throw new Error('No payment adapter configured');
+    // Amount gate (payment-side twin of the 0.37.1 price gate).
+    const amount = resolveInstallmentAmount(booking.totals.balance, opts.actor, opts.amount);
     const ctx = {
         ...buildPaymentContext({
             accessToken: booking.accessToken,
@@ -165,7 +171,7 @@ export async function createInstallmentPayment(bookingId, amount) {
         status: 'pending',
         providerRef: result.providerRef ?? null,
         paymentLink: result.redirectUrl ?? null,
-        createdBy: 'staff'
+        createdBy: opts.actor
     });
     return { paymentLink: result.redirectUrl ?? null };
 }

package/dist/booking/server/portal.d.ts

@@ -123,8 +123,11 @@ export declare function portalEdit(token: string, changes: BookingEditChanges):
     }[];
     ledger: import("../ledger.js").LedgerSummary;
 } | null>;
-/** Portal: create an installment/balance payment link. */
-export declare function portalPay(token: string, amount: number): Promise<{
+/**
+ * Portal: create a balance payment link. The amount is NOT taken from the request —
+ * the server charges the outstanding `totals.balance` (see {@link createInstallmentPayment}).
+ */
+export declare function portalPay(token: string): Promise<{
     paymentLink: string | null;
 } | null>;
 /**

package/dist/booking/server/portal.js

@@ -2,6 +2,7 @@ import { and, eq, inArray, isNull } from 'drizzle-orm';
 import { getBookingDb } from './db.js';
 import { bookingsTable, bookingItemsTable, bookingPersonsTable, bookingItemPersonsTable, bookingPaymentsTable } from '../../db-postgres/schema/booking/index.js';
 import { ledgerSummary } from '../ledger.js';
+import { netOf } from '../totals.js';
 import { editBooking } from './bookings.js';
 import { createInstallmentPayment } from './payments.js';
 import { resolveItemSchema, saveParticipantData } from './participants.js';
@@ -29,7 +30,9 @@ export function toPortalView(booking, items, participants, payments, schemaByIte
             kind: p.kind,
             paidAt: p.paidAt ?? null
         })),
-        ledger: ledgerSummary(booking.totals.gross, payments)
+        // Ledger balance must fold in discounts/surcharges — feed NET (like `totals.balance`),
+        // not the pre-discount `gross`, so `ledger.balance === totals.balance`.
+        ledger: ledgerSummary(netOf(booking.totals), payments)
     };
 }
 /** Resolve a booking by its unguessable portal access token (active only). */
@@ -138,12 +141,15 @@ export async function portalEdit(token, changes) {
     await editBooking(booking.id, changes, { actor: 'portal' });
     return portalView(token);
 }
-/** Portal: create an installment/balance payment link. */
-export async function portalPay(token, amount) {
+/**
+ * Portal: create a balance payment link. The amount is NOT taken from the request —
+ * the server charges the outstanding `totals.balance` (see {@link createInstallmentPayment}).
+ */
+export async function portalPay(token) {
     const booking = await resolveByToken(token);
     if (!booking)
         return null;
-    return createInstallmentPayment(booking.id, amount);
+    return createInstallmentPayment(booking.id, { actor: 'portal' });
 }
 /**
  * Portal self-service: customer fills their own participant data. Verifies the

package/dist/components/ui/input-group/input-group-input.svelte.d.ts

@@ -2,7 +2,7 @@ declare const InputGroupInput: import("svelte").Component<(Omit<import("svelte/e
     type: "file";
     files?: FileList;
 } | {
-    type?: "number" | "image" | "url" | "text" | "date" | "search" | "radio" | "hidden" | "email" | "password" | (string & {}) | "reset" | "color" | "button" | "checkbox" | "tel" | "time" | "month" | "submit" | "datetime-local" | "range" | "week";
+    type?: "number" | "image" | "url" | "text" | "date" | "search" | "radio" | "email" | "hidden" | "password" | (string & {}) | "reset" | "color" | "button" | "checkbox" | "tel" | "time" | "month" | "submit" | "datetime-local" | "range" | "week";
     files?: undefined;
 })) & {
     ref?: HTMLElement | null | undefined;

package/dist/components/ui/sidebar/sidebar-input.svelte.d.ts

@@ -2,7 +2,7 @@ declare const SidebarInput: import("svelte").Component<(Omit<import("svelte/elem
     type: "file";
     files?: FileList;
 } | {
-    type?: "number" | "image" | "url" | "text" | "date" | "search" | "radio" | "hidden" | "email" | "password" | (string & {}) | "reset" | "color" | "button" | "checkbox" | "tel" | "time" | "month" | "submit" | "datetime-local" | "range" | "week";
+    type?: "number" | "image" | "url" | "text" | "date" | "search" | "radio" | "email" | "hidden" | "password" | (string & {}) | "reset" | "color" | "button" | "checkbox" | "tel" | "time" | "month" | "submit" | "datetime-local" | "range" | "week";
     files?: undefined;
 })) & {
     ref?: HTMLElement | null | undefined;

package/dist/core/fields/jsonLd/builders.d.ts

@@ -0,0 +1,74 @@
+import type { MediaFile } from '../../../types/media.js';
+import { type JsonLdNode } from './graph.js';
+export interface OrganizationInput {
+    name: string;
+    url?: string;
+    logo?: string | MediaFile;
+    sameAs?: string[];
+    description?: string;
+}
+export declare function organization(input: OrganizationInput): JsonLdNode;
+export interface PostalAddressInput {
+    streetAddress?: string;
+    addressLocality?: string;
+    postalCode?: string;
+    addressRegion?: string;
+    addressCountry?: string;
+}
+export interface GeoInput {
+    latitude?: number;
+    longitude?: number;
+}
+export interface LocalBusinessInput extends OrganizationInput {
+    telephone?: string;
+    email?: string;
+    image?: string | MediaFile;
+    address?: PostalAddressInput;
+    geo?: GeoInput;
+    openingHours?: string | string[];
+    priceRange?: string;
+}
+export declare function localBusiness(input: LocalBusinessInput): JsonLdNode;
+export interface WebSiteInput {
+    name: string;
+    url: string;
+    description?: string;
+    inLanguage?: string;
+    /** e.g. https://site/search?q={search_term_string} */
+    searchUrlTemplate?: string;
+}
+export declare function website(input: WebSiteInput): JsonLdNode;
+export interface WebPageInput {
+    name: string;
+    url: string;
+    description?: string;
+    inLanguage?: string;
+    isPartOf?: string;
+}
+export declare function webPage(input: WebPageInput): JsonLdNode;
+export declare function breadcrumbList(items: Array<{
+    name: string;
+    url: string;
+}>): JsonLdNode;
+export interface ArticleInput {
+    headline: string;
+    url?: string;
+    image?: string | MediaFile;
+    description?: string;
+    datePublished?: string;
+    dateModified?: string;
+    author?: string | {
+        name: string;
+        url?: string;
+    };
+    publisher?: OrganizationInput;
+    inLanguage?: string;
+    section?: string;
+    keywords?: string;
+}
+export declare function article(input: ArticleInput): JsonLdNode;
+export declare function blogPosting(input: ArticleInput): JsonLdNode;
+export declare function faqPage(items: Array<{
+    question: string;
+    answer: string;
+}>): JsonLdNode;

package/dist/core/fields/jsonLd/builders.js

@@ -0,0 +1,88 @@
+import { thing, imageNode } from './graph.js';
+export function organization(input) {
+    return thing('Organization', {
+        name: input.name,
+        url: input.url,
+        logo: input.logo ? imageNode(input.logo) : undefined,
+        sameAs: input.sameAs,
+        description: input.description
+    });
+}
+export function localBusiness(input) {
+    return thing('LocalBusiness', {
+        name: input.name,
+        url: input.url,
+        logo: input.logo ? imageNode(input.logo) : undefined,
+        image: input.image ? imageNode(input.image) : undefined,
+        description: input.description,
+        sameAs: input.sameAs,
+        telephone: input.telephone,
+        email: input.email,
+        address: input.address ? thing('PostalAddress', { ...input.address }) : undefined,
+        geo: input.geo ? thing('GeoCoordinates', { ...input.geo }) : undefined,
+        openingHours: input.openingHours,
+        priceRange: input.priceRange
+    });
+}
+export function website(input) {
+    return thing('WebSite', {
+        name: input.name,
+        url: input.url,
+        description: input.description,
+        inLanguage: input.inLanguage,
+        potentialAction: input.searchUrlTemplate
+            ? thing('SearchAction', {
+                target: input.searchUrlTemplate,
+                'query-input': 'required name=search_term_string'
+            })
+            : undefined
+    });
+}
+export function webPage(input) {
+    return thing('WebPage', {
+        name: input.name,
+        url: input.url,
+        description: input.description,
+        inLanguage: input.inLanguage,
+        isPartOf: input.isPartOf ? { '@id': input.isPartOf } : undefined
+    });
+}
+export function breadcrumbList(items) {
+    return thing('BreadcrumbList', {
+        itemListElement: items.map((item, i) => thing('ListItem', { position: i + 1, name: item.name, item: item.url }))
+    });
+}
+function authorNode(author) {
+    return typeof author === 'string'
+        ? thing('Person', { name: author })
+        : thing('Person', { name: author.name, url: author.url });
+}
+function buildArticle(type, input) {
+    return thing(type, {
+        headline: input.headline,
+        url: input.url,
+        image: input.image ? imageNode(input.image) : undefined,
+        description: input.description,
+        datePublished: input.datePublished,
+        dateModified: input.dateModified,
+        author: input.author ? authorNode(input.author) : undefined,
+        publisher: input.publisher ? organization(input.publisher) : undefined,
+        inLanguage: input.inLanguage,
+        articleSection: input.section,
+        keywords: input.keywords
+    });
+}
+export function article(input) {
+    return buildArticle('Article', input);
+}
+export function blogPosting(input) {
+    return buildArticle('BlogPosting', input);
+}
+export function faqPage(items) {
+    return thing('FAQPage', {
+        mainEntity: items.map((qa) => thing('Question', {
+            name: qa.question,
+            acceptedAnswer: thing('Answer', { text: qa.answer })
+        }))
+    });
+}

package/dist/core/fields/jsonLd/graph.d.ts

@@ -0,0 +1,15 @@
+import type { MediaFile } from '../../../types/media.js';
+export type JsonLdNode = Record<string, unknown> & {
+    '@type': string | string[];
+};
+/** Recursively drop undefined/null/'' and empty arrays/objects. */
+export declare function pruneEmpty<T>(value: T): T;
+/** Build a schema.org node of `type` from `props`, pruning empty values. */
+export declare function thing(type: string | string[], props?: Record<string, unknown>): JsonLdNode;
+/** Wrap node(s) into a schema.org @graph document. */
+export declare function jsonLdGraph(nodes: JsonLdNode | JsonLdNode[]): {
+    '@context': 'https://schema.org';
+    '@graph': JsonLdNode[];
+};
+/** Normalize an image to a URL string or an ImageObject with dimensions. */
+export declare function imageNode(img: string | MediaFile): string | JsonLdNode;

package/dist/core/fields/jsonLd/graph.js

@@ -0,0 +1,43 @@
+function isEmpty(v) {
+    if (v === undefined || v === null || v === '')
+        return true;
+    if (Array.isArray(v))
+        return v.length === 0;
+    if (typeof v === 'object')
+        return Object.keys(v).length === 0;
+    return false;
+}
+/** Recursively drop undefined/null/'' and empty arrays/objects. */
+export function pruneEmpty(value) {
+    if (Array.isArray(value)) {
+        return value.map((v) => pruneEmpty(v)).filter((v) => !isEmpty(v));
+    }
+    if (value && typeof value === 'object') {
+        const out = {};
+        for (const [k, v] of Object.entries(value)) {
+            const pv = pruneEmpty(v);
+            if (!isEmpty(pv))
+                out[k] = pv;
+        }
+        return out;
+    }
+    return value;
+}
+/** Build a schema.org node of `type` from `props`, pruning empty values. */
+export function thing(type, props = {}) {
+    return pruneEmpty({ '@type': type, ...props });
+}
+/** Wrap node(s) into a schema.org @graph document. */
+export function jsonLdGraph(nodes) {
+    return { '@context': 'https://schema.org', '@graph': Array.isArray(nodes) ? nodes : [nodes] };
+}
+/** Normalize an image to a URL string or an ImageObject with dimensions. */
+export function imageNode(img) {
+    if (typeof img === 'string')
+        return img;
+    return thing('ImageObject', {
+        url: img.url,
+        width: img.width ?? undefined,
+        height: img.height ?? undefined
+    });
+}

package/dist/core/fields/jsonLd/index.d.ts

@@ -0,0 +1,2 @@
+export * from './graph.js';
+export * from './builders.js';

package/dist/core/fields/jsonLd/index.js

@@ -0,0 +1,2 @@
+export * from './graph.js';
+export * from './builders.js';

package/dist/core/fields/resolveSeo.d.ts

@@ -46,7 +46,7 @@ export type ResolvedSeo = {
  * ```svelte
  * <script lang="ts">
  *   import { resolveSeo } from 'includio-cms/core';
- *   import { Seo } from 'includio-cms';
+ *   import { Seo } from 'includio-cms/sveltekit';
  *   let { entry, language } = $props();
  *   const seo = $derived(resolveSeo(entry, language));
  * </script>

package/dist/core/fields/resolveSeo.js

@@ -45,7 +45,7 @@ void _SEO_KEYS_EXHAUSTIVE;
  * ```svelte
  * <script lang="ts">
  *   import { resolveSeo } from 'includio-cms/core';
- *   import { Seo } from 'includio-cms';
+ *   import { Seo } from 'includio-cms/sveltekit';
  *   let { entry, language } = $props();
  *   const seo = $derived(resolveSeo(entry, language));
  * </script>

package/dist/core/fields/slugifyFilename.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Slugify a media file base name (extension handled by the caller).
+ * Empty result falls back to `'file'`. `strict:true` removes dots/slashes,
+ * so no path-traversal survives. Capped at 200 chars (trailing `-` trimmed)
+ * to stay within filesystem name limits.
+ */
+export declare function slugifyFilename(base: string): string;

package/dist/core/fields/slugifyFilename.js

@@ -0,0 +1,14 @@
+import slugify from './slugify.js';
+const MAX_FILENAME_LENGTH = 200;
+/**
+ * Slugify a media file base name (extension handled by the caller).
+ * Empty result falls back to `'file'`. `strict:true` removes dots/slashes,
+ * so no path-traversal survives. Capped at 200 chars (trailing `-` trimmed)
+ * to stay within filesystem name limits.
+ */
+export function slugifyFilename(base) {
+    const slug = slugify(base, { lower: true, strict: true, trim: true })
+        .slice(0, MAX_FILENAME_LENGTH)
+        .replace(/-+$/, '');
+    return slug || 'file';
+}

package/dist/core/index.d.ts

@@ -1,2 +1,4 @@
 export { resolveSeo, type ResolvedSeo } from './fields/resolveSeo.js';
 export type { EmailAdapter, SendMailOptions } from '../types/adapters/email.js';
+export * from './fields/jsonLd/index.js';
+export { slugifyFilename } from './fields/slugifyFilename.js';

package/dist/core/index.js

@@ -3,3 +3,6 @@
 // browser/component bundle no longer pulls in `cms.js` and its server graph
 // ($env/dynamic/private).
 export { resolveSeo } from './fields/resolveSeo.js';
+// JSON-LD (schema.org) builders + <JsonLd> primitives — client-safe, pure.
+export * from './fields/jsonLd/index.js';
+export { slugifyFilename } from './fields/slugifyFilename.js';

package/dist/core/server/fields/utils/fixOrphans.d.ts

@@ -1,5 +1,17 @@
 /**
- * Replace regular space after single-letter Polish conjunctions with non-breaking space.
- * Idempotent — already-fixed text (with \u00A0) is not modified.
+ * Krótkie polskie wyrazy, które nie powinny zostawać na końcu wiersza.
+ * 1-literowe + wybrane przyimki 2–3-literowe. Konserwatywnie: bez spójników/partykuł
+ * (`nie oraz lub że bo to co`) — te można dołożyć przez parametr `words`.
  */
-export declare function fixOrphans(text: string): string;
+export declare const DEFAULT_ORPHAN_WORDS: readonly string[];
+/**
+ * Zamienia zwykłą spację po krótkim wyrazie na niełamliwą (NBSP, U+00A0).
+ * Idempotentna — tekst z NBSP nie jest ponownie modyfikowany (regex wymaga
+ * zwykłej spacji). Flaga `i` obsługuje oba przypadki wielkości; `$1` zachowuje
+ * oryginalną wielkość dopasowanego wyrazu.
+ *
+ * @param text - tekst do przetworzenia
+ * @param words - opcjonalna lista wyrazów-sierot (domyślnie {@link DEFAULT_ORPHAN_WORDS});
+ *   rozszerzaj przez `[...DEFAULT_ORPHAN_WORDS, 'oraz']`
+ */
+export declare function fixOrphans(text: string, words?: readonly string[]): string;

package/dist/core/server/fields/utils/fixOrphans.js

@@ -1,12 +1,35 @@
 /**
- * Polish orphan conjunctions that should not appear at line end.
- * Lowercase + uppercase variants of single-letter words.
+ * Krótkie polskie wyrazy, które nie powinny zostawać na końcu wiersza.
+ * 1-literowe + wybrane przyimki 2–3-literowe. Konserwatywnie: bez spójników/partykuł
+ * (`nie oraz lub że bo to co`) — te można dołożyć przez parametr `words`.
  */
-const ORPHAN_REGEX = /(?<=\s|^)([iIwWzZoOuUaAeE]) (?=\S)/g;
+export const DEFAULT_ORPHAN_WORDS = [
+    'a', 'e', 'i', 'o', 'u', 'w', 'z',
+    'do', 'na', 'od', 'po', 'we', 'za', 'ze', 'ku',
+    'nad', 'pod', 'bez', 'dla', 'przy'
+];
+// Non-breaking space (U+00A0), built from char code to keep the source ASCII-only.
+const NBSP = String.fromCharCode(0xa0);
+function escapeRegex(s) {
+    return s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+function buildOrphanRegex(words) {
+    const alt = [...words]
+        .sort((a, b) => b.length - a.length)
+        .map(escapeRegex)
+        .join('|');
+    return new RegExp(`(?<=\\s|^)(${alt}) (?=\\S)`, 'gi');
+}
 /**
- * Replace regular space after single-letter Polish conjunctions with non-breaking space.
- * Idempotent — already-fixed text (with \u00A0) is not modified.
+ * Zamienia zwykłą spację po krótkim wyrazie na niełamliwą (NBSP, U+00A0).
+ * Idempotentna — tekst z NBSP nie jest ponownie modyfikowany (regex wymaga
+ * zwykłej spacji). Flaga `i` obsługuje oba przypadki wielkości; `$1` zachowuje
+ * oryginalną wielkość dopasowanego wyrazu.
+ *
+ * @param text - tekst do przetworzenia
+ * @param words - opcjonalna lista wyrazów-sierot (domyślnie {@link DEFAULT_ORPHAN_WORDS});
+ *   rozszerzaj przez `[...DEFAULT_ORPHAN_WORDS, 'oraz']`
  */
-export function fixOrphans(text) {
-    return text.replace(ORPHAN_REGEX, '$1\u00A0');
+export function fixOrphans(text, words = DEFAULT_ORPHAN_WORDS) {
+    return text.replace(buildOrphanRegex(words), `$1${NBSP}`);
 }

package/dist/files-local/index.js

@@ -4,7 +4,7 @@ import { readFile, writeFile, rename, unlink, mkdir, readdir } from 'node:fs/pro
 import sharp from 'sharp';
 import { fileURLToPath } from 'url';
 import { dirname } from 'path';
-import { sanitizeFilename } from './sanitizeFilename.js';
+import { slugifyFilename } from '../core/fields/slugifyFilename.js';
 import { processVideo, setFfmpegPaths } from './video.js';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
@@ -60,7 +60,7 @@ export function local(config) {
             const id = randomUUID();
             const ext = extname(file.name); // File extension
             const rawName = basename(file.name, ext); // File name without extension
-            let filename = sanitizeFilename(rawName);
+            let filename = slugifyFilename(rawName);
             let filepath = ''; // Full file path
             const MAX_COLLISION_ATTEMPTS = 100;
             let attempt = 0;
@@ -77,7 +77,7 @@ export function local(config) {
                 try {
                     await readFile(resolvedFilePath);
                     // File exists, append counter
-                    filename = `${sanitizeFilename(rawName)}-${++attempt}`;
+                    filename = `${slugifyFilename(rawName)}-${++attempt}`;
                 }
                 catch {
                     // File doesn't exist, safe to use
@@ -147,7 +147,7 @@ export function local(config) {
                     name: oldName
                 };
             }
-            const sanitizedNewName = sanitizeFilename(newName);
+            const sanitizedNewName = slugifyFilename(newName);
             const ext = extname(url);
             // Derive old filename from URL to avoid double extension
             const oldFilename = url.split('/').pop() || `${oldName}${ext}`;
@@ -199,7 +199,7 @@ export function local(config) {
             await ensureDir(privateDir);
             const ext = extname(file.name);
             const rawName = basename(file.name, ext);
-            const safeName = sanitizeFilename(rawName);
+            const safeName = slugifyFilename(rawName);
             const filename = `${randomUUID().slice(0, 8)}-${safeName}${ext}`;
             const filepath = resolve(privateDir, filename);
             if (!filepath.startsWith(resolve(privateDir))) {

package/dist/sveltekit/components/json-ld.svelte

@@ -0,0 +1,12 @@
+<script lang="ts">
+	/** Wstrzykuje blok schema.org JSON-LD do <head>. `data` = obiekt lub tablica (np. z jsonLdGraph). */
+	let { data }: { data: unknown } = $props();
+	// Escape `<` → <: breakout ze <script> niemożliwy. Dane pochodzą od dewelopera (schema.org), nie od usera.
+	const json = $derived(JSON.stringify(data).replaceAll('<', '\\u003c'));
+</script>
+
+<svelte:head>
+	<!-- Bezpieczne: `<` w danych zescapowane, `<\/script>` chroni źródło przed wczesnym zamknięciem tagu. -->
+	<!-- eslint-disable-next-line svelte/no-at-html-tags, no-useless-escape -->
+	{@html `<script type="application/ld+json">${json}<\/script>`}
+</svelte:head>

package/dist/sveltekit/components/json-ld.svelte.d.ts

@@ -0,0 +1,6 @@
+type $$ComponentProps = {
+    data: unknown;
+};
+declare const JsonLd: import("svelte").Component<$$ComponentProps, {}, "">;
+type JsonLd = ReturnType<typeof JsonLd>;
+export default JsonLd;

package/dist/sveltekit/components/seo.svelte

@@ -8,9 +8,33 @@
 		keywords?: string;
 		ogImage?: MediaFile | string;
 		canonicalUrl?: string;
+		ogType?: string;
+		noindex?: boolean;
+		siteName?: string;
+		article?: {
+			publishedTime?: string;
+			modifiedTime?: string;
+			author?: string;
+			section?: string;
+			tags?: string[];
+		};
 	};
 
-	let { title, description, keywords, ogImage, canonicalUrl }: Props = $props();
+	let {
+		title,
+		description,
+		keywords,
+		ogImage,
+		canonicalUrl,
+		ogType = 'website',
+		noindex = false,
+		siteName,
+		article
+	}: Props = $props();
+
+	const url = $derived(canonicalUrl ?? page.url.toString());
+	const imageUrl = $derived(ogImage ? (typeof ogImage === 'string' ? ogImage : ogImage.url) : undefined);
+	const imageMeta = $derived(ogImage && typeof ogImage !== 'string' ? ogImage : undefined);
 </script>
 
 <svelte:head>
@@ -20,10 +44,13 @@
 		<meta property="og:title" content={title} />
 		<meta name="twitter:title" content={title} />
 	{/if}
-	<meta name="og:url" content={canonicalUrl ?? page.url.toString()} />
-	<meta name="og:type" content="website" />
+	<meta property="og:url" content={url} />
+	<meta property="og:type" content={ogType} />
+	{#if siteName}
+		<meta property="og:site_name" content={siteName} />
+	{/if}
 	<meta property="twitter:domain" content={page.url.hostname} />
-	<meta property="twitter:url" content={canonicalUrl ?? page.url.toString()} />
+	<meta property="twitter:url" content={url} />
 	{#if description}
 		<meta name="description" content={description} />
 		<meta property="og:description" content={description} />
@@ -32,17 +59,41 @@
 	{#if keywords}
 		<meta name="keywords" content={keywords} />
 	{/if}
+	{#if noindex}
+		<meta name="robots" content="noindex" />
+	{/if}
 	{#if canonicalUrl}
 		<link rel="canonical" href={canonicalUrl} />
 	{/if}
-	{#if ogImage}
-		{#if typeof ogImage === 'string'}
-			<meta property="og:image" content={ogImage} />
-			<meta name="twitter:image" content={ogImage} />
-		{:else}
-			<meta property="og:image" content={ogImage.url} />
-			<meta name="twitter:image" content={ogImage.url} />
+	{#if imageUrl}
+		<meta property="og:image" content={imageUrl} />
+		<meta name="twitter:image" content={imageUrl} />
+		{#if imageMeta?.width}
+			<meta property="og:image:width" content={String(imageMeta.width)} />
+		{/if}
+		{#if imageMeta?.height}
+			<meta property="og:image:height" content={String(imageMeta.height)} />
+		{/if}
+		{#if imageMeta?.alt}
+			<meta property="og:image:alt" content={imageMeta.alt} />
 		{/if}
 		<meta name="twitter:card" content="summary_large_image" />
 	{/if}
+	{#if ogType === 'article' && article}
+		{#if article.publishedTime}
+			<meta property="article:published_time" content={article.publishedTime} />
+		{/if}
+		{#if article.modifiedTime}
+			<meta property="article:modified_time" content={article.modifiedTime} />
+		{/if}
+		{#if article.author}
+			<meta property="article:author" content={article.author} />
+		{/if}
+		{#if article.section}
+			<meta property="article:section" content={article.section} />
+		{/if}
+		{#each article.tags ?? [] as tag, i (i)}
+			<meta property="article:tag" content={tag} />
+		{/each}
+	{/if}
 </svelte:head>

package/dist/sveltekit/components/seo.svelte.d.ts

@@ -5,6 +5,16 @@ type Props = {
     keywords?: string;
     ogImage?: MediaFile | string;
     canonicalUrl?: string;
+    ogType?: string;
+    noindex?: boolean;
+    siteName?: string;
+    article?: {
+        publishedTime?: string;
+        modifiedTime?: string;
+        author?: string;
+        section?: string;
+        tags?: string[];
+    };
 };
 declare const Seo: import("svelte").Component<Props, {}, "">;
 type Seo = ReturnType<typeof Seo>;

package/dist/sveltekit/index.d.ts

@@ -8,6 +8,8 @@ export { default as Video } from './components/video.svelte';
 export { default as CmsProvider } from './components/cms-provider.svelte';
 export { default as Media } from './components/media.svelte';
 export { default as StructuredContent } from './components/structured-content.svelte';
+export { default as JsonLd } from './components/json-ld.svelte';
+export { default as Seo } from './components/seo.svelte';
 export { enableHybridEditing } from './components/hybrid-context.js';
 export { setPreferMp4 } from './components/video-context.js';
 export { getLink, isImageFieldData, isVideoFieldData } from './utils/index.js';

package/dist/sveltekit/index.js

@@ -8,6 +8,8 @@ export { default as Video } from './components/video.svelte';
 export { default as CmsProvider } from './components/cms-provider.svelte';
 export { default as Media } from './components/media.svelte';
 export { default as StructuredContent } from './components/structured-content.svelte';
+export { default as JsonLd } from './components/json-ld.svelte';
+export { default as Seo } from './components/seo.svelte';
 export { enableHybridEditing } from './components/hybrid-context.js';
 export { setPreferMp4 } from './components/video-context.js';
 export { getLink, isImageFieldData, isVideoFieldData } from './utils/index.js';

package/dist/sveltekit/server/index.d.ts

@@ -10,3 +10,4 @@ export { createRestApiHandler } from '../../admin/api/rest/handler.js';
 export { generateApiKey } from '../../admin/api/rest/middleware/generateApiKey.js';
 export { createAdminApiHandler } from '../../admin/api/handler.js';
 export { extractBlocks, extractInlineBlocks, extractText, extractMediaRefs } from '../../core/server/fields/queryStructuredContent.js';
+export { buildSitemap, buildRobots, type SitemapEntry, type RobotsRule, type RobotsOptions } from './sitemap.js';

package/dist/sveltekit/server/index.js

@@ -14,3 +14,5 @@ export { generateApiKey } from '../../admin/api/rest/middleware/generateApiKey.j
 // Folded from `./admin/api/handler` (dropped as separate export in 0.26.1)
 export { createAdminApiHandler } from '../../admin/api/handler.js';
 export { extractBlocks, extractInlineBlocks, extractText, extractMediaRefs } from '../../core/server/fields/queryStructuredContent.js';
+// SEO: sitemap.xml / robots.txt builders — pure, projekt posiada route.
+export { buildSitemap, buildRobots } from './sitemap.js';

package/dist/sveltekit/server/sitemap.d.ts

@@ -0,0 +1,19 @@
+export interface SitemapEntry {
+    url: string;
+    lastmod?: string | Date;
+    changefreq?: 'always' | 'hourly' | 'daily' | 'weekly' | 'monthly' | 'yearly' | 'never';
+    priority?: number;
+}
+/** Build a sitemap.xml document from a list of URL entries. */
+export declare function buildSitemap(entries: SitemapEntry[]): string;
+export interface RobotsRule {
+    userAgent?: string;
+    allow?: string[];
+    disallow?: string[];
+}
+export interface RobotsOptions {
+    sitemapUrl?: string;
+    rules?: RobotsRule[];
+}
+/** Build a robots.txt document. Defaults to allow-all + optional sitemap link. */
+export declare function buildRobots(options?: RobotsOptions): string;

package/dist/sveltekit/server/sitemap.js

@@ -0,0 +1,43 @@
+function escapeXml(s) {
+    return s
+        .replace(/&/g, '&')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;')
+        .replace(/'/g, '&apos;');
+}
+function formatLastmod(v) {
+    return v instanceof Date ? v.toISOString() : v;
+}
+/** Build a sitemap.xml document from a list of URL entries. */
+export function buildSitemap(entries) {
+    const urls = entries
+        .map((e) => {
+        const parts = [`    <loc>${escapeXml(e.url)}</loc>`];
+        if (e.lastmod !== undefined)
+            parts.push(`    <lastmod>${escapeXml(formatLastmod(e.lastmod))}</lastmod>`);
+        if (e.changefreq)
+            parts.push(`    <changefreq>${e.changefreq}</changefreq>`);
+        if (e.priority !== undefined)
+            parts.push(`    <priority>${e.priority.toFixed(1)}</priority>`);
+        return `  <url>\n${parts.join('\n')}\n  </url>`;
+    })
+        .join('\n');
+    return `<?xml version="1.0" encoding="UTF-8"?>\n<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">${urls ? '\n' + urls + '\n' : ''}</urlset>`;
+}
+/** Build a robots.txt document. Defaults to allow-all + optional sitemap link. */
+export function buildRobots(options = {}) {
+    const rules = options.rules && options.rules.length > 0 ? options.rules : [{ userAgent: '*', allow: ['/'] }];
+    const blocks = rules.map((r) => {
+        const lines = [`User-agent: ${r.userAgent ?? '*'}`];
+        for (const a of r.allow ?? [])
+            lines.push(`Allow: ${a}`);
+        for (const d of r.disallow ?? [])
+            lines.push(`Disallow: ${d}`);
+        return lines.join('\n');
+    });
+    let out = blocks.join('\n\n');
+    if (options.sitemapUrl)
+        out += `\n\nSitemap: ${options.sitemapUrl}`;
+    return out + '\n';
+}

package/dist/updates/0.37.2/index.d.ts

@@ -0,0 +1,2 @@
+import type { CmsUpdate } from '../index.js';
+export declare const update: CmsUpdate;

package/dist/updates/0.37.2/index.js

@@ -0,0 +1,20 @@
+export const update = {
+    version: '0.37.2',
+    date: '2026-07-16',
+    description: 'Powierzchnia SEO/AEO rdzenia — reużywalne helpery, które raz naprawione w rdzeniu działają u każdego klienta (wyszły z wdrożenia SEO u pod-zwrotnikami). W tym samym patchu domyka się też łatka bezpieczeństwa bookingu (kwota płatności).',
+    features: [
+        '**Buildery JSON-LD (schema.org) w `includio-cms/core`.** Typowane, czyste funkcje: `organization`, `localBusiness`, `website`, `webPage`, `breadcrumbList`, `article`, `blogPosting`, `faqPage` + generyk `thing` i `jsonLdGraph`. Opt-in — nic nie emitują domyślnie. `undefined`/puste wartości wypadają z outputu, więc częściowe dane dają poprawny minimalny JSON-LD. Bespoke typy (np. `TouristTrip + Offer`, `Product`) składasz po stronie projektu przez `thing("TouristTrip", { ... })` — rdzeń zostaje generyczny.',
+        '**Komponent `<JsonLd>` w `includio-cms/sveltekit`.** Renderuje `<script type="application/ld+json">` w `<svelte:head>` (SSR), escapuje `<` → breakout ze `<script>` jest niemożliwy. Przyjmuje obiekt albo tablicę (np. wynik `jsonLdGraph`).',
+        '**`buildSitemap` / `buildRobots` w `includio-cms/sveltekit/server`.** Czyste buildery: `buildSitemap(entries)` → string `sitemap.xml` (URL-e XML-escaped, `lastmod` `Date`→ISO lub string, opcjonalne `changefreq`/`priority`), `buildRobots(options)` → `robots.txt` (domyślnie allow-all + link do sitemapy, konfigurowalne reguły). Projekt posiada route i wpina helper: `export const GET = async () => new Response(buildSitemap(entries), { headers: { "content-type": "application/xml" } });`.'
+    ],
+    fixes: [
+        '**Slugifikacja nazw plików mediów.** Upload i zmiana nazwy przepuszczają basename przez `slugifyFilename` (nowy helper w `includio-cms/core`): `"IMG-1234 (1).jpeg"` → `img-1234-1.jpeg`, polskie znaki transliterowane, spacje/wielkość/nawiasy usunięte. Tylko nowe pliki — istniejące URL-e w bazie nietknięte (bez migracji). Cap 200 znaków, path-traversal niemożliwy (slug nie zawiera `/` ani `.`).',
+        '**`<Seo>` dopełniony i wyeksportowany z `includio-cms/sveltekit`.** Wcześniej komponent istniał, ale nie był eksportowany (martwy). Bugfix: `og:url` i `og:type` używają `property=` zamiast `name=` (wymóg Open Graph). Nowe propsy: `ogType` (domyślnie `website`; `article` dokłada `article:published_time`/`modified_time`/`author`/`section`/`tag`), `noindex` (→ `<meta name="robots" content="noindex">`), `siteName` (→ `og:site_name`). `ogImage` typu `MediaFile` emituje `og:image:width`/`height`/`alt`.',
+        '**Typografia — łamanie sierot przyimkowych.** `fixOrphans` wstawia NBSP nie tylko po jednoliterowych spójnikach (`i/w/z/o/u/a/e`), ale też po krótkich przyimkach (`do na od po we za ze ku nad pod bez dla przy`). Lista konfigurowalna parametrem `words` + eksport `DEFAULT_ORPHAN_WORDS`. Domyślnie konserwatywnie (bez spójników typu `oraz/lub`), żeby nie NBSP-ować za dużo.',
+        '**Bezpieczeństwo (booking): kwota dopłaty przestaje pochodzić z żądania HTTP.** Domknięcie łuku 0.37.1 (cena szła z katalogu, ale kwota wpłaty — nie): `portalPay` podawał `amount` z ciała żądania prosto do `createInstallmentPayment`, bez konfrontacji z saldem — przeglądarka dyktowała kwotę (nadpłata do ręcznego zwrotu albo link na grosz). Bramka kwotowa oparta na aktorze (bliźniak bramki cenowej): `portal` NIE dyktuje (serwer obciąża `totals.balance`, fail-closed gdy brak salda), `staff` może. Portalowa wpłata zapisuje się teraz z `createdBy` aktora — nie zahardkodowanym `staff` (koniec kłamstwa w audycie).',
+        '**Booking: `ledger.balance` przestaje gubić rabaty.** `portalView` liczył `ledger` z `totals.gross` → `balance = gross − paid`, pomijając `discount`/`surcharge`/`manualDiscount`; portal pokazywał dwa różne salda i przycisk płatności brał gorzej policzone. Teraz `toPortalView` karmi `ledgerSummary` wartością netto (`netOf(totals)`), więc `ledger.balance === totals.balance`.'
+    ],
+    breakingChanges: [
+        '**`createInstallmentPayment(bookingId, amount)` → `createInstallmentPayment(bookingId, { actor, amount? })`.** `actor: "portal" | "staff"` jest wymagany. Dla `portal` kwota jest ignorowana (serwer obciąża saldo); dla `staff` podajesz `amount`. `portalPay(token, amount)` → `portalPay(token)` (kwota nie jest już parametrem). Dotyczy tylko konsumentów wołających te funkcje bezpośrednio — ścieżka przez handler portalu/remote admina zaktualizowana w rdzeniu.'
+    ]
+};

package/dist/updates/index.js

@@ -77,6 +77,7 @@ import { update as update0368 } from './0.36.8/index.js';
 import { update as update0369 } from './0.36.9/index.js';
 import { update as update0370 } from './0.37.0/index.js';
 import { update as update0371 } from './0.37.1/index.js';
+import { update as update0372 } from './0.37.2/index.js';
 export const updates = [
     update0065,
     update0066,
@@ -156,7 +157,8 @@ export const updates = [
     update0368,
     update0369,
     update0370,
-    update0371
+    update0371,
+    update0372
 ];
 export const getUpdatesFrom = (fromVersion) => {
     const fromParts = fromVersion.split('.').map(Number);

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "includio-cms",
-	"version": "0.37.1",
+	"version": "0.37.2",
 	"scripts": {
 		"dev": "vite dev",
 		"build": "vite build && npm run prepack",