mosaic-headless 1.29.0 → 1.29.1

package/SKILL.md

@@ -4,7 +4,7 @@ description: |
   Build and modify Mosaic Pro (Nextend) sites by writing the underlying data model directly - no visual editor, no DOM. Query the real surface with `mo.py`, which joins every source table to the live sweeps so a lookup leads with the measured verdict rather than the declaration (128 node types, 191 properties, 98 style properties with 20 structured value shapes pinned down, 53 style states, 156 variants, 74 dynamic variables, 15 interaction triggers, 115 REST routes, 23 tables) instead of guessing, with every node type placed on a live site one at a time and asserted against the delivered HTML, the design-token and element-class layers verified against compiled CSS, the @VAR() dynamic language verified against rendered output, nine designed pages built through the tables themselves, and the delivered pages re-read in Chromium at three viewports so a rule that is present, correct and still wrong cannot pass. Drives Mosaic's own theme export/import and its plugin data upgrade from outside the editor and holds the copy against the source tree for tree. Measured on Mosaic Pro 1.0.9: the modal (`<dialog>`), OpenStreetMap, the exit-intent and scroll-depth triggers, run rules and the memory actions all built on a live page and read back, and the 1.0.7 -> 1.0.8 -> 1.0.9 migrations driven from outside wp-admin.
 license: "MIT"
 author: "moksa (https://moksaweb.com)"
-version: "1.29.0"
+version: "1.29.1"
 ---
 
 # Headless Mosaic
@@ -535,10 +535,10 @@ so the pattern is in the data, not just in this paragraph.
 | `data/dialog-verification.csv` | 19 | **driven live** - the 1.0.9 modal, its triggers, its run rules and the memory actions, each exercised in a real browser |
 | `data/dialog-form-verification.csv` | 49 | **driven live** - the same three nodes made into five FORMS (sheet, drawer, corner, takeover, gate), each re-opened at 390px and 768px; also where `pickOne` on a click turned out to be a latch rather than a lottery |
 | `data/token-verification.csv` | 15 | **driven live** - every `:root` custom property declared once, non-empty, and resolved by something on the page; a token nothing points at is a token that is not working |
-| `data/mobile-audit.csv` | 63 | **driven live** - what a sideways-scroll check cannot see: type under the legible floor, controls too small to hit, a grid that never collapsed, content escaping its box |
-| `data/component-wall-verification.csv` | 19 | **driven live** - tabs switched, an accordion opened, a form's fields and Mosaic's own honeypot, and an OpenStreetMap asserted on the coordinates it was GIVEN rather than the default it falls back to |
-| `data/form-surface-verification.csv` | 12 | **driven live** - every field type Mosaic ships in one form: select with labelled options, radio and checkbox groups, file upload, and the browser's own validation refusing an empty submit |
-| `data/content-loop-verification.csv` | 11 | **driven live** - a slider, a tab bar, a list and a paginated archive whose children all come from one authored template repeated per post; the pagination is clicked and the rows asserted to CHANGE |
+| `data/mobile-audit.csv` | 64 | **driven live** - what a sideways-scroll check cannot see: type under the legible floor, controls too small to hit, a grid that never collapsed, content escaping its box |
+| `data/component-wall-verification.csv` | 20 | **driven live** - tabs switched, an accordion opened, a form's fields and Mosaic's own honeypot, and an OpenStreetMap asserted on the coordinates it was GIVEN rather than the default it falls back to |
+| `data/form-surface-verification.csv` | 15 | **driven live** - every field type Mosaic ships in one form: select with labelled options, radio and checkbox groups, file upload, and the browser's own validation refusing an empty submit |
+| `data/content-loop-verification.csv` | 12 | **driven live** - a slider, a tab bar, a list and a paginated archive whose children all come from one authored template repeated per post; the pagination is clicked and the rows asserted to CHANGE |
 | `data/custom-fields-verification.csv` | 62 | **rendered live** - ACF and Meta Box fields of every common type read back through `@VAR` / `@LOOP` off the delivered page, loops included |
 | `data/theme-zip-verification.csv` | 22 | **round-tripped live** - Mosaic's own ZIP export imported in test mode and compared to its source, table by table and tree by tree |
 | `data/node-type-notes.csv` | 8 | where a sweep outcome is true but misleading on its own, why. Surfaced by `mo.py type` |

package/assets/templates/platforms/claude-ai.json

@@ -20,7 +20,7 @@
     "description": "Build and modify Mosaic Pro (Nextend) sites by writing the underlying data model directly - no visual editor, no DOM. Query the real surface (122 node types, 181 node properties, 98 style properties, 53 style states, 151 element classes, 74 dynamic variables, 114 REST routes, 23 tables) instead of guessing, with every node type placed on a live site one at a time and asserted against the delivered HTML, every style and node property swept against the compiled CSS and markup, and 569 responsive declarations checked against the stylesheet the site actually served.",
     "license": "MIT",
     "author": "moksa (https://moksaweb.com)",
-    "version": "1.29.0"
+    "version": "1.29.1"
   },
   "loaderBehaviour": "Upload via Settings -> Skills -> Upload. Claude.ai parses SKILL.md frontmatter and surfaces the skill in your library. The extraction tool (extract-block-schema.php) needs a live WP-CLI connection and won't run in the sandbox; use it from a local terminal against your own site instead.",
   "uploadSteps": [

package/assets/templates/platforms/claude-code.json

@@ -20,7 +20,7 @@
     "description": "Build and modify Mosaic Pro (Nextend) sites by writing the underlying data model directly - no visual editor, no DOM. Query the real surface (122 node types, 181 node properties, 98 style properties, 53 style states, 151 element classes, 74 dynamic variables, 114 REST routes, 23 tables) instead of guessing, with every node type placed on a live site one at a time and asserted against the delivered HTML, every style and node property swept against the compiled CSS and markup, and 569 responsive declarations checked against the stylesheet the site actually served.",
     "license": "MIT",
     "author": "moksa (https://moksaweb.com)",
-    "version": "1.29.0"
+    "version": "1.29.1"
   },
   "loaderBehaviour": "Auto-loads on session start when SKILL.md frontmatter parses successfully.",
   "verified": true,

package/assets/templates/platforms/codex-cli.json

@@ -20,7 +20,7 @@
     "description": "Build and modify Mosaic Pro (Nextend) sites by writing the underlying data model directly - no visual editor, no DOM. Query the real surface (122 node types, 181 node properties, 98 style properties, 53 style states, 151 element classes, 74 dynamic variables, 114 REST routes, 23 tables) instead of guessing, with every node type placed on a live site one at a time and asserted against the delivered HTML, every style and node property swept against the compiled CSS and markup, and 569 responsive declarations checked against the stylesheet the site actually served.",
     "license": "MIT",
     "author": "moksa (https://moksaweb.com)",
-    "version": "1.29.0"
+    "version": "1.29.1"
   },
   "loaderBehaviour": "Confirmed (2026-07-11): Codex CLI natively supports the SKILL.md spec. Place SKILL.md under .codex/skills/<name>/ (project) or ~/.codex/skills/<name>/ (personal) and Codex loads the name+description at session start, then the full body on demand. A parallel, broader convention .agents/skills/ (searched from cwd up to repo root, then ~/.agents/skills/) also exists across multiple tools - if your Codex CLI version prioritizes that path instead, mirror the same SKILL.md there.",
   "verified": true,

package/assets/templates/platforms/copilot.json

@@ -20,7 +20,7 @@
     "description": "Build and modify Mosaic Pro (Nextend) sites by writing the underlying data model directly - no visual editor, no DOM. Query the real surface (122 node types, 181 node properties, 98 style properties, 53 style states, 151 element classes, 74 dynamic variables, 114 REST routes, 23 tables) instead of guessing, with every node type placed on a live site one at a time and asserted against the delivered HTML, every style and node property swept against the compiled CSS and markup, and 569 responsive declarations checked against the stylesheet the site actually served.",
     "license": "MIT",
     "author": "moksa (https://moksaweb.com)",
-    "version": "1.29.0"
+    "version": "1.29.1"
   },
   "loaderBehaviour": "CHANGED as of 2026-07-11: GitHub Copilot added a proper '.github/skills/' Agent Skills directory (December 2025), alongside the older single-file .github/copilot-instructions.md convention. This config targets the new skills-directory form. If your Copilot version predates this (pre Dec 2025), use the instructions-append fallback instead (see fallback below).",
   "fallback": {

package/assets/templates/platforms/gemini-cli.json

@@ -20,7 +20,7 @@
     "description": "Build and modify Mosaic Pro (Nextend) sites by writing the underlying data model directly - no visual editor, no DOM. Query the real surface (122 node types, 181 node properties, 98 style properties, 53 style states, 151 element classes, 74 dynamic variables, 114 REST routes, 23 tables) instead of guessing, with every node type placed on a live site one at a time and asserted against the delivered HTML, every style and node property swept against the compiled CSS and markup, and 569 responsive declarations checked against the stylesheet the site actually served.",
     "license": "MIT",
     "author": "moksa (https://moksaweb.com)",
-    "version": "1.29.0"
+    "version": "1.29.1"
   },
   "loaderBehaviour": "CHANGED as of 2026-07-11: Gemini CLI now natively supports the same SKILL.md standard as Claude Code and Codex CLI - the same directory-based skill works unmodified. Gemini CLI discovers skills in this precedence order: built-in, extension skills, ~/.gemini/skills/ (personal), .gemini/skills/ (project, shared via version control). At session start Gemini injects each discovered skill's name+description into the system prompt and calls activate_skill when a task matches.",
   "verified": true,

package/data/component-wall-verification.csv

@@ -10,6 +10,7 @@ FORM/required,PASS,required is set on 3 of them
 FORM/honeypot,PASS,"Mosaic adds its own spam trap: ['mosaic_hp_url', 'mosaic_hp_ts']"
 FORM/option_labels,SKIPPED,no select on this form
 FORM/required_blocks,PASS,"empty form reports invalid: ['name', 'email', 'message']"
+MULTISTEP,SKIPPED,not on this page
 COMPONENT/instances,PASS,"3 instances: ['cs-0-cs-card', 'cs-1-cs-card', 'cs-2-cs-card']"
 COMPONENT/one_definition,PASS,"all share the generated class ['_fm'] - one definition, not 3 copies"
 COMPONENT/content_differs,PASS,"3 instances, 3 distinct bodies - the overrides are per-instance"

package/data/content-loop-verification.csv

@@ -2,11 +2,12 @@ check,result,detail
 TABS,SKIPPED,not on this page
 ACCORDION,SKIPPED,not on this page
 FORM,SKIPPED,not on this page
+MULTISTEP,SKIPPED,not on this page
 COMPONENT/instances,SKIPPED,fewer than two on this page
 LOOP/slider,PASS,6 slides from one authored slider-slide
 LOOP/tabs,PASS,4 tabs from one authored tabs-tab
 LOOP/tab_labels_intact,PASS,"no replacement characters - @substr counts bytes, so a length that is not a multiple of the encoding cuts a glyph in half"
-LOOP/pagination_links,PASS,"3 page links: ['v=16802&notes=1', 'v=16802&notes=2', 'v=16802&notes=3']"
+LOOP/pagination_links,PASS,"3 page links: ['v=18823&notes=1', 'v=18823&notes=2', 'v=18823&notes=3']"
 LOOP/pagination_key_is_safe,PASS,paginationKey does not collide with a WordPress query var
 LOOP/pagination_changes_rows,PASS,page 1 3 -> page 2 3
 MAP,SKIPPED,not on this page

package/data/form-surface-verification.csv

@@ -6,6 +6,9 @@ FORM/required,PASS,required is set on 8 of them
 FORM/honeypot,PASS,"Mosaic adds its own spam trap: ['mosaic_hp_url', 'mosaic_hp_ts']"
 FORM/option_labels,PASS,"5 options, all labelled"
 FORM/required_blocks,PASS,"empty form reports invalid: ['name', 'email', 'kind', 'kind']"
+MULTISTEP/one_at_rest,PASS,visible steps: [0]
+MULTISTEP/next,PASS,NEXT -> [1]
+MULTISTEP/back,PASS,BACK -> [0]
 COMPONENT/instances,SKIPPED,fewer than two on this page
 LOOP/slider,SKIPPED,not on this page
 LOOP/tabs,SKIPPED,not on this page

package/data/mobile-audit.csv

@@ -1,8 +1,8 @@
 path,width,finding,element,detail
+forms/,390,GRID_NOT_COLLAPSED,mk-f-links,2 columns at 390px
 components/,390,GRID_NOT_COLLAPSED,cp-tabs-menu,2 columns at 390px
 components/,390,GRID_NOT_COLLAPSED,mk-f-links,2 columns at 390px
 content/,390,GRID_NOT_COLLAPSED,mk-f-links,2 columns at 390px
-forms/,390,GRID_NOT_COLLAPSED,mk-f-links,2 columns at 390px
 dialogs/,390,GRID_NOT_COLLAPSED,mk-f-links,2 columns at 390px
 sliders/,390,SMALL_TARGET,sl-main-nav-dot,34x28: 
 sliders/,390,SMALL_TARGET,sl-main-nav-dot,34x28: 
@@ -18,11 +18,12 @@ sliders/,390,GRID_NOT_COLLAPSED,mk-f-links,2 columns at 390px
 tokens/,390,GRID_NOT_COLLAPSED,mk-f-links,2 columns at 390px
 dynamic/,390,GRID_NOT_COLLAPSED,mk-f-links,2 columns at 390px
 conversion/,390,GRID_NOT_COLLAPSED,mk-f-links,2 columns at 390px
+forms/,768,LONG_MEASURE,m-text,59 chars/line
+forms/,768,LONG_MEASURE,m-text,59 chars/line
 components/,768,LONG_MEASURE,m-text,44 chars/line
 components/,768,LONG_MEASURE,m-text,56 chars/line
 content/,768,LONG_MEASURE,m-text,43 chars/line
 content/,768,LONG_MEASURE,m-text,58 chars/line
-forms/,768,LONG_MEASURE,m-text,59 chars/line
 dialogs/,768,LONG_MEASURE,m-text,46 chars/line
 dialogs/,768,LONG_MEASURE,m-text,45 chars/line
 dialogs/,768,LONG_MEASURE,m-text,45 chars/line

package/data/navigation-verification.csv

@@ -1,16 +1,16 @@
 check,result,detail
-FRONT_PAGE,PASS,"HTTP 200, 240831 bytes"
+FRONT_PAGE,PASS,"HTTP 200, 240832 bytes"
 MENU_IS_LINKS,PASS,1 real <a href> in #mk-nav
-NAV 首頁,PASS,"/ -> HTTP 200, 240830 bytes"
-PAGE moksa,PASS,"HTTP 200, 240830 bytes"
-PAGE my-account,PASS,"HTTP 200, 101036 bytes"
-PAGE intro,PASS,"HTTP 200, 134744 bytes"
+NAV 首頁,PASS,"/ -> HTTP 200, 240832 bytes"
+PAGE moksa,PASS,"HTTP 200, 240833 bytes"
+PAGE my-account,PASS,"HTTP 200, 101037 bytes"
+PAGE intro,PASS,"HTTP 200, 134746 bytes"
 PAGE content,PASS,"HTTP 200, 102378 bytes"
-PAGE forms,PASS,"HTTP 200, 101343 bytes"
-PAGE components,PASS,"HTTP 200, 115524 bytes"
-PAGE conversion,PASS,"HTTP 200, 103202 bytes"
+PAGE forms,PASS,"HTTP 200, 126731 bytes"
+PAGE components,PASS,"HTTP 200, 119522 bytes"
+PAGE conversion,PASS,"HTTP 200, 103205 bytes"
 PAGE dynamic,PASS,"HTTP 200, 112622 bytes"
-PAGE tokens,PASS,"HTTP 200, 125792 bytes"
+PAGE tokens,PASS,"HTTP 200, 125794 bytes"
 PAGE sliders,PASS,"HTTP 200, 151809 bytes"
 PAGE dialogs,PASS,"HTTP 200, 207347 bytes"
 ANCHORS moksa,PASS,every in-page link resolves

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mosaic-headless",
-  "version": "1.29.0",
+  "version": "1.29.1",
   "description": "AI-agent skill: build Mosaic Pro (Nextend) WordPress sites by writing the underlying data model directly - 23 custom tables, no visual editor, no DOM. Every node type, style property and node property swept against a live install and asserted on the delivered HTML and compiled CSS. Installs into Claude Code, Cursor, Codex CLI, Gemini CLI, Copilot, Continue, Windsurf and Claude.ai.",
   "keywords": [
     "wordpress",

package/references/failure-modes.md

@@ -399,3 +399,48 @@ The through-line is the one this file keeps recording: Mosaic accepts a write it
 cannot use and says nothing. The defence is to read the delivered page back and
 count what arrived — `verify_components.py` now asserts the control count, the option
 labels and that an empty required form is actually refused.
+
+## `display` on an element whose visibility the plugin owns — twice now
+
+A `<dialog>`'s open state is its `display`, so `display:flex` on a modal host pins
+every modal open. The same mistake, in a different family: `multi-steps-form-step`
+is shown and hidden by the plugin moving `m-form-step--active`, and a `display:flex`
+on the step wins the cascade, so all three steps sit on the page at once with three
+sets of Next buttons.
+
+The rule that comes out of it: **if something other than you decides when an
+element is visible, do not set `display` on that element.** Put the layout on a
+child. The families to watch are the ones whose markup carries an `--active` /
+`--opened` class: `modal`, `multi-steps-form-step`, `tabs-tab-pane`,
+`dropdown-wrapper`, `success-screen`, `loop-no-result`.
+
+`tabs-tab-pane` is the one that does NOT bite, and the reason is instructive — the
+plugin hides it with `!important`:
+
+```css
+.m-tab-pane:not(.m-tab-pane--active){display:none !important}
+```
+
+Nothing an author writes can beat that. The two that bite are precisely the two
+where the plugin relies on the UA default or on the theme instead.
+
+## Mosaic ships no visibility CSS for a form step
+
+Measured: the step navigation works — `m-form-step--active` moves, the step tabs
+change state, Next and Back fire — and **every panel stays on screen**, because
+hiding the inactive ones was never the plugin's job. The variant catalog carries a
+`Form step` entry (`.m-form-step`), and that is where the rule is meant to live.
+A theme that never styles that variant gets a multi-step form that is one long
+page.
+
+So a multi-step form needs one rule the author supplies:
+
+```css
+.m-form-step:not(.m-form-step--active){display:none}
+```
+
+On a theme that cannot use the variant layer, a `code` node with
+`insertLocation: "head"` is the escape hatch — and **it emits its content
+verbatim**: it does not wrap anything, so the `<style>` tags are yours to write.
+Without them the rule lands in `<head>` as bare text between `</style>` and
+`</head>`, renders nothing, and reads as a CSS specificity problem.

package/scripts/check-release.mjs

@@ -101,10 +101,10 @@ const counts = {
   "data/dialog-verification.csv": 19,
   "data/slider-verification.csv": 30,
   "data/token-verification.csv": 15,
-  "data/mobile-audit.csv": 63,
-  "data/component-wall-verification.csv": 19,
-  "data/form-surface-verification.csv": 12,
-  "data/content-loop-verification.csv": 11,
+  "data/mobile-audit.csv": 64,
+  "data/component-wall-verification.csv": 20,
+  "data/form-surface-verification.csv": 15,
+  "data/content-loop-verification.csv": 12,
   "data/navigation-verification.csv": 36,
   "data/page-modal-verification.csv": 19,
   "data/interaction-rules-verification.csv": 17,