@aotter/mantle-runtime 0.0.11-alpha.11

package/dist/domain/service/ViewSqlCompiler.js

@@ -0,0 +1,147 @@
+import { DiagnosticError, isParamRef, runtimeDiagnostic, } from "@aotter/mantle-spec";
+import { clampPage, clampShow } from "./Pagination.js";
+// alias → SQL column. Aliases mirror RESERVED_ENTRY_COLUMNS from
+// spec; SQL column shape (snake_case) is local to the storage layout.
+// The compile-time check below ensures the alias set stays in sync —
+// adding to spec without updating here is a type error.
+const RESERVED_COLUMN = {
+    id: "id",
+    status: "status",
+    version: "version",
+    createdAt: "created_at",
+    updatedAt: "updated_at",
+    authorId: "author_id",
+};
+const _aliasCheck = RESERVED_COLUMN;
+void _aliasCheck;
+const DEFAULT_PROJECTION = Object.entries(RESERVED_COLUMN)
+    .map(([alias, col]) => (alias === col ? col : `${col} AS ${alias}`))
+    .join(", ");
+export function compileView(view, options = {}) {
+    const sqlParams = [view.spec.from];
+    const selectExpr = buildSelect(view.spec.fields);
+    const whereParts = ["collection = ?"];
+    if (view.spec.filter) {
+        const compiled = compileFilter(view.spec.filter, options.params ?? {});
+        if (compiled !== null) {
+            whereParts.push(`(${compiled.sql})`);
+            sqlParams.push(...compiled.params);
+        }
+    }
+    const where = `WHERE ${whereParts.join(" AND ")}`;
+    const orderBy = buildOrderBy(view.spec.orderBy);
+    const effectiveShow = clampShow(options.show, view.spec.limit);
+    const effectivePage = clampPage(options.page);
+    const offset = (effectivePage - 1) * effectiveShow;
+    const sql = `SELECT ${selectExpr} FROM entries ${where}${orderBy} LIMIT ${effectiveShow} OFFSET ${offset}`;
+    return { sql, params: sqlParams, effectivePage, effectiveShow };
+}
+function buildSelect(fields) {
+    if (!fields || fields.length === 0)
+        return DEFAULT_PROJECTION;
+    return fields.map(fieldExpr).join(", ");
+}
+function fieldExpr(field) {
+    const reserved = RESERVED_COLUMN[field];
+    if (reserved) {
+        return reserved === field ? reserved : `${reserved} AS ${field}`;
+    }
+    return `json_extract(data, ${quotedJsonPath(field)}) AS ${quoteIdent(field)}`;
+}
+function fieldRefExpr(field) {
+    const reserved = RESERVED_COLUMN[field];
+    if (reserved)
+        return reserved;
+    return `json_extract(data, ${quotedJsonPath(field)})`;
+}
+/**
+ * Returns `null` when the node has no constraint to emit: an `eq`
+ * whose `{ $param }` ref is unresolved, or an AND/OR whose children
+ * all dropped. v0.1.0 parser enforces required-only param refs so
+ * the drop path is dead today; kept so v0.1.x "optional param ref"
+ * promotion is a parser-only change.
+ *
+ * Each node returns its own `{ sql, params }` (vs. pushing into a
+ * shared array) so a dropped sub-tree can never leave orphan params
+ * bound to the parent's `?` placeholders.
+ */
+function compileFilter(node, paramValues) {
+    if ("eq" in node) {
+        const value = node.eq.value;
+        let bound;
+        if (isParamRef(value)) {
+            const resolved = paramValues[value.$param];
+            if (resolved === undefined)
+                return null;
+            bound = resolved;
+        }
+        else {
+            bound = value;
+        }
+        return { sql: `${fieldRefExpr(node.eq.field)} = ?`, params: [bound] };
+    }
+    const op = "and" in node ? "AND" : "OR";
+    const children = "and" in node ? node.and : node.or;
+    const compiled = children
+        .map((c) => compileFilter(c, paramValues))
+        .filter((c) => c !== null);
+    if (compiled.length === 0)
+        return null;
+    return {
+        sql: compiled.map((c) => `(${c.sql})`).join(` ${op} `),
+        params: compiled.flatMap((c) => c.params),
+    };
+}
+function buildOrderBy(orderBy) {
+    if (!orderBy || orderBy.length === 0)
+        return "";
+    const parts = orderBy.map((o) => {
+        const dir = (o.direction ?? "asc").toUpperCase();
+        return `${fieldRefExpr(o.field)} ${dir}`;
+    });
+    return ` ORDER BY ${parts.join(", ")}`;
+}
+// Schema JSON property keys can be arbitrary strings per RFC 8259,
+// but SQLite's JSON1 path syntax (`$."key"`) has no documented way
+// to escape an inner `"` or `\` inside a quoted key — doubled-quote
+// escaping is the SQLite identifier convention, NOT a JSON-path
+// convention. So we always quote the path/alias (admitting hyphens,
+// spaces, etc.) but refuse `"`, `\`, and `\0` in field names —
+// those break either the JSON-path resolution or the SQL string
+// literal. Real Schema authors don't use those characters in keys;
+// rejecting them keeps the path always-resolvable.
+const FORBIDDEN_FIELD_CHARS = /["\\\0]/;
+function assertFieldNameSafe(name, callsite) {
+    if (!FORBIDDEN_FIELD_CHARS.test(name))
+        return;
+    throw new DiagnosticError(runtimeDiagnostic({
+        code: "INTERNAL_ERROR",
+        severity: "error",
+        path: `compileView/${callsite}`,
+        value: name,
+        expected: 'field name without `"`, `\\`, or NUL',
+        message: `field name '${name}' contains an unrepresentable character (\", \\, or NUL); Schema validation should have caught this.`,
+    }));
+}
+/**
+ * Emit `'$."<field>"'` — a SQL string literal containing a SQLite
+ * JSON path. Doubles single quotes for the surrounding SQL literal
+ * (SQLite literal escape). Field name itself is guaranteed free of
+ * `"` / `\` / NUL by `assertFieldNameSafe`, so the inner double-
+ * quoted key needs no further escape.
+ */
+function quotedJsonPath(field) {
+    assertFieldNameSafe(field, "quotedJsonPath");
+    // Only `'` needs escaping for the surrounding SQL literal; field
+    // is guaranteed free of `"` / `\` / NUL.
+    return `'$."${field.replace(/'/g, "''")}"'`;
+}
+/**
+ * SQLite quoted-identifier alias (`"hero-image"`). Used as the result
+ * column name so callers read the field back under its declared key.
+ */
+function quoteIdent(name) {
+    assertFieldNameSafe(name, "quoteIdent");
+    return `"${name}"`;
+}
+//# sourceMappingURL=ViewSqlCompiler.js.map

package/dist/domain/service/ViewSqlCompiler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ViewSqlCompiler.js","sourceRoot":"","sources":["../../../src/domain/service/ViewSqlCompiler.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EAEf,UAAU,EACV,iBAAiB,GAGlB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AA8BvD,iEAAiE;AACjE,sEAAsE;AACtE,qEAAqE;AACrE,wDAAwD;AACxD,MAAM,eAAe,GAAqC;IACxD,EAAE,EAAE,IAAI;IACR,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,YAAY;IACvB,SAAS,EAAE,YAAY;IACvB,QAAQ,EAAE,WAAW;CACtB,CAAC;AACF,MAAM,WAAW,GACf,eAAe,CAAC;AAClB,KAAK,WAAW,CAAC;AAEjB,MAAM,kBAAkB,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC;KACvD,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,OAAO,KAAK,EAAE,CAAC,CAAC;KACnE,IAAI,CAAC,IAAI,CAAC,CAAC;AAEd,MAAM,UAAU,WAAW,CAAC,IAAkB,EAAE,UAA8B,EAAE;IAC9E,MAAM,SAAS,GAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,UAAU,GAAa,CAAC,gBAAgB,CAAC,CAAC;IAChD,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACrB,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACvE,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,UAAU,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC;YACrC,SAAS,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,SAAS,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;IAClD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,aAAa,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/D,MAAM,aAAa,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,CAAC,aAAa,GAAG,CAAC,CAAC,GAAG,aAAa,CAAC;IACnD,MAAM,GAAG,GAAG,UAAU,UAAU,iBAAiB,KAAK,GAAG,OAAO,UAAU,aAAa,WAAW,MAAM,EAAE,CAAC;IAC3G,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,aAAa,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,WAAW,CAAC,MAA0B;IAC7C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,kBAAkB,CAAC;IAC9D,OAAO,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,OAAO,KAAK,EAAE,CAAC;IACnE,CAAC;IACD,OAAO,sBAAsB,cAAc,CAAC,KAAK,CAAC,QAAQ,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;AAChF,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,OAAO,sBAAsB,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC;AACxD,CAAC;AAOD;;;;;;;;;;GAUG;AACH,SAAS,aAAa,CACpB,IAAe,EACf,WAAoC;IAEpC,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC;QAC5B,IAAI,KAAc,CAAC;QACnB,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC3C,IAAI,QAAQ,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YACxC,KAAK,GAAG,QAAQ,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,KAAK,CAAC;QAChB,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;IACxE,CAAC;IACD,MAAM,EAAE,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,MAAM,QAAQ,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;IACpD,MAAM,QAAQ,GAAG,QAAQ;SACtB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;SACzC,MAAM,CAAC,CAAC,CAAC,EAAyB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IACpD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,OAAO;QACL,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC;QACtD,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,OAAwF;IAExF,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC9B,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACjD,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IACH,OAAO,aAAa,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AACzC,CAAC;AAED,mEAAmE;AACnE,mEAAmE;AACnE,oEAAoE;AACpE,gEAAgE;AAChE,oEAAoE;AACpE,+DAA+D;AAC/D,gEAAgE;AAChE,mEAAmE;AACnE,mDAAmD;AAEnD,MAAM,qBAAqB,GAAG,SAAS,CAAC;AAExC,SAAS,mBAAmB,CAAC,IAAY,EAAE,QAAgB;IACzD,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO;IAC9C,MAAM,IAAI,eAAe,CACvB,iBAAiB,CAAC;QAChB,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,eAAe,QAAQ,EAAE;QAC/B,KAAK,EAAE,IAAI;QACX,QAAQ,EAAE,sCAAsC;QAChD,OAAO,EAAE,eAAe,IAAI,sGAAsG;KACnI,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,cAAc,CAAC,KAAa;IACnC,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IAC7C,iEAAiE;IACjE,yCAAyC;IACzC,OAAO,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,IAAY;IAC9B,mBAAmB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACxC,OAAO,IAAI,IAAI,GAAG,CAAC;AACrB,CAAC"}

package/dist/domain/service/index.d.ts

@@ -0,0 +1,28 @@
+/**
+ * `domain/service/` — pure stateless algorithms operating on the
+ * domain model + spec types. No env, no I/O.
+ *
+ * `PublishedEntries` + `JoinedEntryReader` take a `DatabaseDriver`
+ * and perform real reads; they live in `./io/` and are imported
+ * directly by their consumers — NOT re-exported here, so the barrel's
+ * purity claim above holds.
+ */
+export * from "./PublishKeys.js";
+export * from "./MarkdownSerializer.js";
+export * from "./SitemapSerializer.js";
+export * from "./HtmlRenderer.js";
+export * from "./PreviewBanner.js";
+export * from "./PublicPathResolver.js";
+export * from "./LocaleNegotiator.js";
+export * from "./AbsoluteUrl.js";
+export * from "./SeoMetaComposer.js";
+export * from "./ViewSqlCompiler.js";
+export * from "./Pagination.js";
+export * from "./ViewParamCoercer.js";
+export * from "./PathMatcher.js";
+export * from "./TriggerIndex.js";
+export * from "./BuiltinProjector.js";
+export * from "./McpToolNaming.js";
+export * from "./AuthPredicateEvaluator.js";
+export * from "./EntrySeoSupport.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/domain/service/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/domain/service/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,oBAAoB,CAAC;AACnC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,sBAAsB,CAAC"}

package/dist/domain/service/index.js

@@ -0,0 +1,28 @@
+/**
+ * `domain/service/` — pure stateless algorithms operating on the
+ * domain model + spec types. No env, no I/O.
+ *
+ * `PublishedEntries` + `JoinedEntryReader` take a `DatabaseDriver`
+ * and perform real reads; they live in `./io/` and are imported
+ * directly by their consumers — NOT re-exported here, so the barrel's
+ * purity claim above holds.
+ */
+export * from "./PublishKeys.js";
+export * from "./MarkdownSerializer.js";
+export * from "./SitemapSerializer.js";
+export * from "./HtmlRenderer.js";
+export * from "./PreviewBanner.js";
+export * from "./PublicPathResolver.js";
+export * from "./LocaleNegotiator.js";
+export * from "./AbsoluteUrl.js";
+export * from "./SeoMetaComposer.js";
+export * from "./ViewSqlCompiler.js";
+export * from "./Pagination.js";
+export * from "./ViewParamCoercer.js";
+export * from "./PathMatcher.js";
+export * from "./TriggerIndex.js";
+export * from "./BuiltinProjector.js";
+export * from "./McpToolNaming.js";
+export * from "./AuthPredicateEvaluator.js";
+export * from "./EntrySeoSupport.js";
+//# sourceMappingURL=index.js.map

package/dist/domain/service/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/domain/service/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,oBAAoB,CAAC;AACnC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,sBAAsB,CAAC"}

package/dist/domain/service/io/EntryWriteGuard.d.ts

@@ -0,0 +1,19 @@
+import { type SchemaManifest } from "@aotter/mantle-spec";
+import type { EntryRepository } from "../../port/EntryRepository.js";
+import type { SiteConfigRepository } from "../../port/SiteConfigRepository.js";
+export interface AssertEntryWritableArgs {
+    readonly opPath: string;
+    readonly entries: EntryRepository;
+    readonly schema: SchemaManifest;
+    readonly data: Record<string, unknown>;
+    readonly excludeId?: string;
+    readonly siteConfig?: SiteConfigRepository;
+}
+/** Shared post-projection guard for every authoring path.
+ *
+ * MCP, admin/API, and builtin Procedure writes all land here after
+ * `x-clam-bind` stamping, so schema validation and unique-index
+ * semantics cannot drift by transport.
+ */
+export declare function assertEntryWritable(args: AssertEntryWritableArgs): Promise<void>;
+//# sourceMappingURL=EntryWriteGuard.d.ts.map

package/dist/domain/service/io/EntryWriteGuard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"EntryWriteGuard.d.ts","sourceRoot":"","sources":["../../../../src/domain/service/io/EntryWriteGuard.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,cAAc,EACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAE/E,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,oBAAoB,CAAC;CAC5C;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAMtF"}

package/dist/domain/service/io/EntryWriteGuard.js

@@ -0,0 +1,109 @@
+import { DiagnosticError, EntryDataValidator, CLAM_BIND_KEYWORD, runtimeDiagnostic, } from "@aotter/mantle-spec";
+/** Shared post-projection guard for every authoring path.
+ *
+ * MCP, admin/API, and builtin Procedure writes all land here after
+ * `x-clam-bind` stamping, so schema validation and unique-index
+ * semantics cannot drift by transport.
+ */
+export async function assertEntryWritable(args) {
+    const validator = new EntryDataValidator();
+    const diagnostics = validator.validate(args.schema, dataForValidation(args.schema, args.data));
+    if (diagnostics.length > 0)
+        throw new DiagnosticError(diagnostics);
+    await assertLocale(args);
+    await assertUniqueIndexes(args);
+}
+async function assertLocale(args) {
+    const localized = args.schema.spec.localized === true;
+    const value = args.data["locale"];
+    if (!localized) {
+        if (value === undefined || value === null)
+            return;
+        throw new DiagnosticError(runtimeDiagnostic({
+            code: "INPUT_VALIDATION_FAILED",
+            severity: "error",
+            path: `${args.opPath}/locale`,
+            value,
+            expected: `no data.locale because Schema '${args.schema.metadata.name}' is not localized`,
+            message: `Entry for non-localized Schema '${args.schema.metadata.name}' must not carry data.locale.`,
+        }));
+    }
+    if (typeof value !== "string" || value.length === 0) {
+        throw new DiagnosticError(runtimeDiagnostic({
+            code: "INPUT_VALIDATION_FAILED",
+            severity: "error",
+            path: `${args.opPath}/locale`,
+            value,
+            expected: "data.locale string",
+            message: `Entry for localized Schema '${args.schema.metadata.name}' must carry data.locale.`,
+        }));
+    }
+    if (!args.siteConfig)
+        return;
+    const locales = await args.siteConfig.readLocales();
+    // ADR-0010: empty `site_config.locales` means the locale subsystem
+    // is off site-wide. Pass through so a fresh deploy whose `bootInit`
+    // hasn't seeded locales yet can still accept localized writes.
+    if (locales.length === 0)
+        return;
+    if (locales.includes(value))
+        return;
+    throw new DiagnosticError(runtimeDiagnostic({
+        code: "INPUT_VALIDATION_FAILED",
+        severity: "error",
+        path: `${args.opPath}/locale`,
+        value,
+        expected: `one of site.locales: ${locales.join(", ")}`,
+        candidates: locales,
+        message: `Locale '${value}' is not enabled for this site.`,
+    }));
+}
+function dataForValidation(schema, data) {
+    const properties = schema.spec.schema.properties ?? {};
+    let out = null;
+    for (const [key, propDef] of Object.entries(properties)) {
+        if (!isClamBindProperty(propDef) || data[key] !== null)
+            continue;
+        if (!out)
+            out = { ...data };
+        delete out[key];
+    }
+    return out ?? data;
+}
+function isClamBindProperty(propDef) {
+    return typeof propDef === "object" && propDef !== null && CLAM_BIND_KEYWORD in propDef;
+}
+async function assertUniqueIndexes(args) {
+    const indexes = args.schema.spec.uniqueIndexes ?? [];
+    for (let i = 0; i < indexes.length; i += 1) {
+        const index = indexes[i] ?? [];
+        const fields = {};
+        let complete = true;
+        for (const field of index) {
+            const value = args.data[field];
+            if (value === undefined || value === null) {
+                complete = false;
+                break;
+            }
+            fields[field] = value;
+        }
+        if (!complete || Object.keys(fields).length === 0)
+            continue;
+        const existing = await args.entries.findByDataFields({
+            collection: args.schema.metadata.name,
+            fields,
+            excludeId: args.excludeId,
+        });
+        if (!existing)
+            continue;
+        throw new DiagnosticError(runtimeDiagnostic({
+            code: "CONFLICT",
+            severity: "error",
+            path: `${args.opPath}/uniqueIndexes/${i}`,
+            value: fields,
+            expected: `unique ${index.map((f) => `data.${f}`).join(" + ")} in collection '${args.schema.metadata.name}'`,
+            message: `Entry data conflicts with existing '${args.schema.metadata.name}' entry '${existing.id}' on unique index (${index.join(", ")}).`,
+        }));
+    }
+}
+//# sourceMappingURL=EntryWriteGuard.js.map

package/dist/domain/service/io/EntryWriteGuard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EntryWriteGuard.js","sourceRoot":"","sources":["../../../../src/domain/service/io/EntryWriteGuard.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,GAElB,MAAM,qBAAqB,CAAC;AAa7B;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAA6B;IACrE,MAAM,SAAS,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAC3C,MAAM,WAAW,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/F,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,WAAW,CAAC,CAAC;IACnE,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IACzB,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAA6B;IACvD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC;IACtD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO;QAClD,MAAM,IAAI,eAAe,CACvB,iBAAiB,CAAC;YAChB,IAAI,EAAE,yBAAyB;YAC/B,QAAQ,EAAE,OAAO;YACjB,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM,SAAS;YAC7B,KAAK;YACL,QAAQ,EAAE,kCAAkC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,oBAAoB;YACzF,OAAO,EAAE,mCAAmC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,+BAA+B;SACrG,CAAC,CACH,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,eAAe,CACvB,iBAAiB,CAAC;YAChB,IAAI,EAAE,yBAAyB;YAC/B,QAAQ,EAAE,OAAO;YACjB,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM,SAAS;YAC7B,KAAK;YACL,QAAQ,EAAE,oBAAoB;YAC9B,OAAO,EAAE,+BAA+B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,2BAA2B;SAC7F,CAAC,CACH,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,UAAU;QAAE,OAAO;IAC7B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;IACpD,mEAAmE;IACnE,oEAAoE;IACpE,+DAA+D;IAC/D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACjC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO;IACpC,MAAM,IAAI,eAAe,CACvB,iBAAiB,CAAC;QAChB,IAAI,EAAE,yBAAyB;QAC/B,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM,SAAS;QAC7B,KAAK;QACL,QAAQ,EAAE,wBAAwB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACtD,UAAU,EAAE,OAAO;QACnB,OAAO,EAAE,WAAW,KAAK,iCAAiC;KAC3D,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,MAAsB,EACtB,IAA6B;IAE7B,MAAM,UAAU,GACb,MAAM,CAAC,IAAI,CAAC,MAAmD,CAAC,UAAU,IAAI,EAAE,CAAC;IACpF,IAAI,GAAG,GAAmC,IAAI,CAAC;IAC/C,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACxD,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI;YAAE,SAAS;QACjE,IAAI,CAAC,GAAG;YAAE,GAAG,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;QAC5B,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,IAAI,IAAI,CAAC;AACrB,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAgB;IAC1C,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,iBAAiB,IAAI,OAAO,CAAC;AACzF,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,IAA6B;IAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC;IACrD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/B,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,IAAI,QAAQ,GAAG,IAAI,CAAC;QACpB,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBAC1C,QAAQ,GAAG,KAAK,CAAC;gBACjB,MAAM;YACR,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;QACxB,CAAC;QACD,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC5D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;YACnD,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI;YACrC,MAAM;YACN,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,MAAM,IAAI,eAAe,CACvB,iBAAiB,CAAC;YAChB,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,OAAO;YACjB,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM,kBAAkB,CAAC,EAAE;YACzC,KAAK,EAAE,MAAM;YACb,QAAQ,EAAE,UAAU,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG;YAC5G,OAAO,EAAE,uCAAuC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,YAAY,QAAQ,CAAC,EAAE,sBAAsB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;SAC3I,CAAC,CACH,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/domain/service/io/JoinedEntryReader.d.ts

@@ -0,0 +1,33 @@
+import type { ContentState, Entry, SchemaManifest } from "@aotter/mantle-spec";
+import type { DatabaseDriver } from "../../port/DatabaseDriver.js";
+/**
+ * `joinParentIfTranslation` — when `entry.collection` declares
+ * `translates.parent`, fetch the parent and merge its data into the
+ * child's data (translation wins on key conflict). Implements
+ * ADR-0010's promise that public render paths join translations to
+ * their parent on the declared field, so parent-only fields like
+ * `posts.coverUrl` reach templates that read `data.coverUrl`.
+ *
+ * Status filter: parent must be in the same lifecycle bucket as the
+ * child (typically "published"). `RequestPublishUseCase` already
+ * blocks publishing a translation whose parent isn't published, so at
+ * render time `parentStatus: "published"` always finds the parent.
+ * Preview omits the filter — a draft translation can preview against
+ * its already-published parent.
+ */
+export declare function joinParentIfTranslation(db: DatabaseDriver, schemas: ReadonlyMap<string, SchemaManifest>, entry: Entry, options?: {
+    readonly parentStatus?: ContentState;
+}): Promise<Entry>;
+/**
+ * Batch sibling for list paths. Issues one `IN (...)` query for all
+ * parent lookups across the list, deduplicating join values — so a
+ * 20-locale list keyed off the same parent slug costs 1 D1 read, not
+ * 20. Assumes all entries share a single collection (the contract of
+ * `RenderListLiveUseCase` / `HtmlPublishOrchestrator.renderList`); if
+ * mixed collections ever land here, fall back path-per-entry would
+ * be needed.
+ */
+export declare function joinParentForList(db: DatabaseDriver, schemas: ReadonlyMap<string, SchemaManifest>, entries: readonly Entry[], options?: {
+    readonly parentStatus?: ContentState;
+}): Promise<Entry[]>;
+//# sourceMappingURL=JoinedEntryReader.d.ts.map

package/dist/domain/service/io/JoinedEntryReader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"JoinedEntryReader.d.ts","sourceRoot":"","sources":["../../../../src/domain/service/io/JoinedEntryReader.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC/E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAMnE;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,uBAAuB,CAC3C,EAAE,EAAE,cAAc,EAClB,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,cAAc,CAAC,EAC5C,KAAK,EAAE,KAAK,EACZ,OAAO,GAAE;IAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAA;CAAO,GACrD,OAAO,CAAC,KAAK,CAAC,CAuBhB;AAED;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CACrC,EAAE,EAAE,cAAc,EAClB,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,cAAc,CAAC,EAC5C,OAAO,EAAE,SAAS,KAAK,EAAE,EACzB,OAAO,GAAE;IAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAA;CAAO,GACrD,OAAO,CAAC,KAAK,EAAE,CAAC,CA0ClB"}

package/dist/domain/service/io/JoinedEntryReader.js

@@ -0,0 +1,95 @@
+import { readEntriesByDataFieldIn, readEntryByDataField, } from "./PublishedEntries.js";
+/**
+ * `joinParentIfTranslation` — when `entry.collection` declares
+ * `translates.parent`, fetch the parent and merge its data into the
+ * child's data (translation wins on key conflict). Implements
+ * ADR-0010's promise that public render paths join translations to
+ * their parent on the declared field, so parent-only fields like
+ * `posts.coverUrl` reach templates that read `data.coverUrl`.
+ *
+ * Status filter: parent must be in the same lifecycle bucket as the
+ * child (typically "published"). `RequestPublishUseCase` already
+ * blocks publishing a translation whose parent isn't published, so at
+ * render time `parentStatus: "published"` always finds the parent.
+ * Preview omits the filter — a draft translation can preview against
+ * its already-published parent.
+ */
+export async function joinParentIfTranslation(db, schemas, entry, options = {}) {
+    const schema = schemas.get(entry.collection);
+    const translates = schema?.spec.translates;
+    if (!translates)
+        return entry;
+    const joinValue = entry.data[translates.on];
+    if (typeof joinValue !== "string" || joinValue === "")
+        return entry;
+    const parent = await readEntryByDataField(db, {
+        collection: translates.parent,
+        field: translates.on,
+        value: joinValue,
+        // Parent is non-localized by ADR-0010 contract (CrossSchemaChecker
+        // enforces `parent.localized: false` when a child has `translates`).
+        locale: null,
+        status: options.parentStatus,
+    });
+    if (!parent)
+        return entry;
+    return {
+        ...entry,
+        data: { ...parent.data, ...entry.data },
+    };
+}
+/**
+ * Batch sibling for list paths. Issues one `IN (...)` query for all
+ * parent lookups across the list, deduplicating join values — so a
+ * 20-locale list keyed off the same parent slug costs 1 D1 read, not
+ * 20. Assumes all entries share a single collection (the contract of
+ * `RenderListLiveUseCase` / `HtmlPublishOrchestrator.renderList`); if
+ * mixed collections ever land here, fall back path-per-entry would
+ * be needed.
+ */
+export async function joinParentForList(db, schemas, entries, options = {}) {
+    if (entries.length === 0)
+        return [];
+    const probe = schemas.get(entries[0].collection);
+    const translates = probe?.spec.translates;
+    if (!translates)
+        return [...entries];
+    const joinValues = new Set();
+    for (const entry of entries) {
+        const value = entry.data[translates.on];
+        if (typeof value === "string" && value !== "")
+            joinValues.add(value);
+    }
+    if (joinValues.size === 0)
+        return [...entries];
+    const parents = await readEntriesByDataFieldIn(db, {
+        collection: translates.parent,
+        field: translates.on,
+        values: [...joinValues],
+        locale: null,
+        status: options.parentStatus,
+    });
+    // Multiple rows per joinValue are sorted updated_at DESC by the
+    // query; first occurrence wins (matches single-entry path which
+    // does LIMIT 1).
+    const parentByValue = new Map();
+    for (const parent of parents) {
+        const key = parent.data[translates.on];
+        if (typeof key === "string" && !parentByValue.has(key)) {
+            parentByValue.set(key, parent);
+        }
+    }
+    return entries.map((entry) => {
+        const value = entry.data[translates.on];
+        if (typeof value !== "string")
+            return entry;
+        const parent = parentByValue.get(value);
+        if (!parent)
+            return entry;
+        return {
+            ...entry,
+            data: { ...parent.data, ...entry.data },
+        };
+    });
+}
+//# sourceMappingURL=JoinedEntryReader.js.map

package/dist/domain/service/io/JoinedEntryReader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"JoinedEntryReader.js","sourceRoot":"","sources":["../../../../src/domain/service/io/JoinedEntryReader.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAE/B;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,EAAkB,EAClB,OAA4C,EAC5C,KAAY,EACZ,UAAoD,EAAE;IAEtD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC;IAC3C,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAE9B,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAC5C,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IAEpE,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,EAAE,EAAE;QAC5C,UAAU,EAAE,UAAU,CAAC,MAAM;QAC7B,KAAK,EAAE,UAAU,CAAC,EAAE;QACpB,KAAK,EAAE,SAAS;QAChB,mEAAmE;QACnE,qEAAqE;QACrE,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,OAAO,CAAC,YAAY;KAC7B,CAAC,CAAC;IACH,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAE1B,OAAO;QACL,GAAG,KAAK;QACR,IAAI,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE;KACxC,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,EAAkB,EAClB,OAA4C,EAC5C,OAAyB,EACzB,UAAoD,EAAE;IAEtD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC;IAC1C,IAAI,CAAC,UAAU;QAAE,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;IAErC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE;YAAE,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;IAE/C,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,EAAE,EAAE;QACjD,UAAU,EAAE,UAAU,CAAC,MAAM;QAC7B,KAAK,EAAE,UAAU,CAAC,EAAE;QACpB,MAAM,EAAE,CAAC,GAAG,UAAU,CAAC;QACvB,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,OAAO,CAAC,YAAY;KAC7B,CAAC,CAAC;IACH,gEAAgE;IAChE,gEAAgE;IAChE,iBAAiB;IACjB,MAAM,aAAa,GAAG,IAAI,GAAG,EAAiB,CAAC;IAC/C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACvD,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5C,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,OAAO;YACL,GAAG,KAAK;YACR,IAAI,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE;SACxC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/domain/service/io/PublishedEntries.d.ts

@@ -0,0 +1,69 @@
+import { type ContentState, type Entry } from "@aotter/mantle-spec";
+import type { DatabaseDriver } from "../../port/DatabaseDriver.js";
+/**
+ * Cross-collection scan of `status='published'` entries. Pure read,
+ * no rendering. Used by every renderer that crosses Schema boundaries
+ * (`HtmlPublishOrchestrator`, `ComposeLlmsTxtUseCase`,
+ * `ComposeSitemapUseCase`). Distinguishes the three locale modes:
+ *
+ *   - locale: string — only entries where `data.locale = locale`
+ *   - locale: null   — only non-localized entries (`data.locale IS NULL`)
+ *   - omitted        — every locale + non-localized
+ *
+ * The locale=null case matters for publish: writing a non-localized
+ * entry must not overwrite per-locale indexes with cross-locale soup.
+ */
+export interface PublishedEntriesFilter {
+    readonly locale?: string | null;
+    readonly collection?: string;
+    /** Optional `LIMIT N` on the SQL query — caps both D1 read and JS
+     *  memory. Sitemap composition uses this; publish pipeline omits
+     *  (one entry-locale-collection scan is naturally small). */
+    readonly limit?: number;
+}
+export declare function readPublishedEntries(db: DatabaseDriver, filter?: PublishedEntriesFilter): Promise<Entry[]>;
+/** Single-entry lookup by id. Used by the publish pipeline to load
+ *  the entry it's about to render; lifted into the domain service so
+ *  the orchestrator stops owning row-to-domain mapping. */
+export declare function readEntryById(db: DatabaseDriver, id: string): Promise<Entry | null>;
+/** Lookup an entry by (collection, slug[, locale][, status]). Used by
+ *  request-time render paths (preview, live-dev) that route by URL
+ *  slug — not the publish pipeline's flow which already holds the
+ *  entry id. Returns the most-recently-updated row if multiple
+ *  match. */
+export interface ReadEntryBySlugArgs {
+    readonly collection: string;
+    readonly slug: string;
+    /** `string` filters to that locale; `null` filters to non-localized
+     *  entries (data.locale IS NULL); omitted = no locale filter. */
+    readonly locale?: string | null;
+    readonly status?: ContentState;
+}
+export declare function readEntryBySlug(db: DatabaseDriver, args: ReadEntryBySlugArgs): Promise<Entry | null>;
+/** Lookup an entry by an arbitrary `data.<field>` value. Generalizes
+ *  `readEntryBySlug` for the parent-join code path: `translates.on`
+ *  is conventionally "slug" but the grammar permits other field names,
+ *  so the join reader must not hard-code `$.slug`. */
+export interface ReadEntryByDataFieldArgs {
+    readonly collection: string;
+    readonly field: string;
+    readonly value: string;
+    readonly locale?: string | null;
+    readonly status?: ContentState;
+}
+export declare function readEntryByDataField(db: DatabaseDriver, args: ReadEntryByDataFieldArgs): Promise<Entry | null>;
+/** Batch sibling to `readEntryByDataField`. Issues a single
+ *  `... WHERE data.<field> IN (?, ?, ...)` query, returning one row per
+ *  distinct value (most-recently-updated when multiple rows share the
+ *  same value). Used by the list-render parent-join to avoid N+1 reads
+ *  when a list of translations shares parents on a small set of join
+ *  values. */
+export interface ReadEntriesByDataFieldInArgs {
+    readonly collection: string;
+    readonly field: string;
+    readonly values: readonly string[];
+    readonly locale?: string | null;
+    readonly status?: ContentState;
+}
+export declare function readEntriesByDataFieldIn(db: DatabaseDriver, args: ReadEntriesByDataFieldInArgs): Promise<Entry[]>;
+//# sourceMappingURL=PublishedEntries.d.ts.map

package/dist/domain/service/io/PublishedEntries.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PublishedEntries.d.ts","sourceRoot":"","sources":["../../../../src/domain/service/io/PublishedEntries.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,YAAY,EAAE,KAAK,KAAK,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAEnE;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;iEAE6D;IAC7D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAYD,wBAAsB,oBAAoB,CACxC,EAAE,EAAE,cAAc,EAClB,MAAM,GAAE,sBAA2B,GAClC,OAAO,CAAC,KAAK,EAAE,CAAC,CAqBlB;AAED;;2DAE2D;AAC3D,wBAAsB,aAAa,CACjC,EAAE,EAAE,cAAc,EAClB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CASvB;AAED;;;;aAIa;AACb,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;qEACiE;IACjE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED,wBAAsB,eAAe,CACnC,EAAE,EAAE,cAAc,EAClB,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAQvB;AAED;;;sDAGsD;AACtD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAgBD,wBAAsB,oBAAoB,CACxC,EAAE,EAAE,cAAc,EAClB,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAsBvB;AAED;;;;;cAKc;AACd,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED,wBAAsB,wBAAwB,CAC5C,EAAE,EAAE,cAAc,EAClB,IAAI,EAAE,4BAA4B,GACjC,OAAO,CAAC,KAAK,EAAE,CAAC,CAwBlB"}