@batterai/host 0.1.0

package/dist/content-source/viewer.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Viewer + per-field access (decision 004 §1.2; invariants D/E/P).
+ *
+ * Decision 012 (CMS identity delegation): battery-editor owns no access
+ * enforcement. A Viewer is just the CMS delivery context plus a `Locale`.
+ * Authoring uses an opaque delegated `CmsSession`; public delivery is an
+ * explicit sessionless mode. Adapters never parse identity, scope data by the
+ * caller's organization, or reason about roles (invariant D4). The legacy
+ * identity/scoping fields are removed (Phase 2/3).
+ */
+import type { Locale } from "@batterai/bind-core";
+declare const SESSION_TOKEN: unique symbol;
+/**
+ * Opaque end-user auth context the CMS understands. Battery-editor never
+ * parses it — only adapters read the bearer token, via `sessionBearerToken`,
+ * to authenticate CMS calls on the end user's behalf.
+ */
+export interface CmsSession {
+    readonly [SESSION_TOKEN]: string;
+}
+/** Build a `CmsSession` from a delegated bearer token. Throws on empty/blank input. */
+export declare function cmsSessionFromToken(bearerToken: string): CmsSession;
+/** Adapter-only accessor: extract the bearer token to authenticate a CMS call. */
+export declare function sessionBearerToken(session: CmsSession): string;
+export interface Viewer {
+    /** Opaque end-user auth context (delegated CMS session). Adapters forward it;
+     * battery-editor never parses it. Present for authoring/preview only. */
+    readonly session?: CmsSession;
+    /** Explicit public-delivery marker. A bare missing session is still invalid
+     * for delegated adapters; this opt-in mode is the only anonymous read path. */
+    readonly delivery?: "public";
+    readonly locale: Locale;
+}
+/** Build a `Viewer` from a delegated CMS session and a locale. */
+export declare function delegatedViewer(session: CmsSession, locale: Locale): Viewer;
+/** Build the genuine anonymous public-delivery viewer. */
+export declare function publicDeliveryViewer(locale: Locale): Viewer;
+export declare function isPublicDeliveryViewer(viewer: Viewer): boolean;
+/** Per-field read/write permission. `*Reason` REQUIRED semantics on false —
+ * invariant P demands non-editable-with-reason, never bare unavailability. */
+export interface FieldAccess {
+    readonly canRead: boolean;
+    readonly canWrite: boolean;
+    readonly readReason?: string;
+    readonly writeReason?: string;
+}
+export {};
+//# sourceMappingURL=viewer.d.ts.map

package/dist/content-source/viewer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"viewer.d.ts","sourceRoot":"","sources":["../../src/content-source/viewer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAElD,QAAA,MAAM,aAAa,eAAkC,CAAC;AAEtD;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,uFAAuF;AACvF,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,UAAU,CAKnE;AAED,kFAAkF;AAClF,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CAE9D;AAED,MAAM,WAAW,MAAM;IACrB;6EACyE;IACzE,QAAQ,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC;IAC9B;mFAC+E;IAC/E,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,kEAAkE;AAClE,wBAAgB,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAE3E;AAED,0DAA0D;AAC1D,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED;8EAC8E;AAC9E,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B"}

package/dist/content-source/viewer.js

@@ -0,0 +1,24 @@
+const SESSION_TOKEN = Symbol("cmsSessionBearerToken");
+/** Build a `CmsSession` from a delegated bearer token. Throws on empty/blank input. */
+export function cmsSessionFromToken(bearerToken) {
+    if (bearerToken.trim().length === 0) {
+        throw new Error("cmsSessionFromToken: bearerToken must not be empty or blank");
+    }
+    return { [SESSION_TOKEN]: bearerToken };
+}
+/** Adapter-only accessor: extract the bearer token to authenticate a CMS call. */
+export function sessionBearerToken(session) {
+    return session[SESSION_TOKEN];
+}
+/** Build a `Viewer` from a delegated CMS session and a locale. */
+export function delegatedViewer(session, locale) {
+    return { session, locale };
+}
+/** Build the genuine anonymous public-delivery viewer. */
+export function publicDeliveryViewer(locale) {
+    return { delivery: "public", locale };
+}
+export function isPublicDeliveryViewer(viewer) {
+    return viewer.delivery === "public" && viewer.session === undefined;
+}
+//# sourceMappingURL=viewer.js.map

package/dist/content-source/viewer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"viewer.js","sourceRoot":"","sources":["../../src/content-source/viewer.ts"],"names":[],"mappings":"AAYA,MAAM,aAAa,GAAG,MAAM,CAAC,uBAAuB,CAAC,CAAC;AAWtD,uFAAuF;AACvF,MAAM,UAAU,mBAAmB,CAAC,WAAmB;IACrD,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,EAAE,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,CAAC;AAC1C,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,kBAAkB,CAAC,OAAmB;IACpD,OAAO,OAAO,CAAC,aAAa,CAAC,CAAC;AAChC,CAAC;AAYD,kEAAkE;AAClE,MAAM,UAAU,eAAe,CAAC,OAAmB,EAAE,MAAc;IACjE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC7B,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,oBAAoB,CAAC,MAAc;IACjD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC;AACtE,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,30 @@
+/**
+ * @batterai/host — the runtime (plan §4 L2; decision 004).
+ * Imports bind-core/contract/block-sdk/media only (depcruise-enforced).
+ * DOM-free except src/client/** (the one browser-mount seam).
+ */
+export * from "./content-source/viewer";
+export * from "./content-source/content-source";
+export * from "./content-source/permissions";
+export * from "./content-source/conformance-kit";
+export * from "./lifecycle/version-token";
+export * from "./lifecycle/lifecycle-store";
+export * from "./lifecycle/cms-lifecycle-store";
+export * from "./cache/dependency-graph";
+export * from "./cache/render-cache";
+export * from "./messages";
+export * from "./scope-engine/build-stack";
+export * from "./scope-engine/repeater-query";
+export * from "./resolver/data-loader";
+export * from "./resolver/resolution-service";
+export * from "./write/write-path";
+export * from "./routing/route-resolver";
+export * from "./seo/metadata";
+export * from "./seo/sitemap";
+export * from "./render/page-renderer";
+export * from "./render/image-usage";
+export * from "./render/image-usage-preview";
+export * from "./collab/page-draft-store";
+export * from "./collab/in-memory-page-draft-store";
+export * from "./collab/page-doc-page-draft-store";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,cAAc,yBAAyB,CAAC;AACxC,cAAc,iCAAiC,CAAC;AAChD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,kCAAkC,CAAC;AACjD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iCAAiC,CAAC;AAChD,cAAc,0BAA0B,CAAC;AACzC,cAAc,sBAAsB,CAAC;AACrC,cAAc,YAAY,CAAC;AAC3B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,wBAAwB,CAAC;AACvC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qCAAqC,CAAC;AACpD,cAAc,oCAAoC,CAAC"}

package/dist/index.js

@@ -0,0 +1,30 @@
+/**
+ * @batterai/host — the runtime (plan §4 L2; decision 004).
+ * Imports bind-core/contract/block-sdk/media only (depcruise-enforced).
+ * DOM-free except src/client/** (the one browser-mount seam).
+ */
+export * from "./content-source/viewer.js";
+export * from "./content-source/content-source.js";
+export * from "./content-source/permissions.js";
+export * from "./content-source/conformance-kit.js";
+export * from "./lifecycle/version-token.js";
+export * from "./lifecycle/lifecycle-store.js";
+export * from "./lifecycle/cms-lifecycle-store.js";
+export * from "./cache/dependency-graph.js";
+export * from "./cache/render-cache.js";
+export * from "./messages.js";
+export * from "./scope-engine/build-stack.js";
+export * from "./scope-engine/repeater-query.js";
+export * from "./resolver/data-loader.js";
+export * from "./resolver/resolution-service.js";
+export * from "./write/write-path.js";
+export * from "./routing/route-resolver.js";
+export * from "./seo/metadata.js";
+export * from "./seo/sitemap.js";
+export * from "./render/page-renderer.js";
+export * from "./render/image-usage.js";
+export * from "./render/image-usage-preview.js";
+export * from "./collab/page-draft-store.js";
+export * from "./collab/in-memory-page-draft-store.js";
+export * from "./collab/page-doc-page-draft-store.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,cAAc,yBAAyB,CAAC;AACxC,cAAc,iCAAiC,CAAC;AAChD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,kCAAkC,CAAC;AACjD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iCAAiC,CAAC;AAChD,cAAc,0BAA0B,CAAC;AACzC,cAAc,sBAAsB,CAAC;AACrC,cAAc,YAAY,CAAC;AAC3B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,wBAAwB,CAAC;AACvC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qCAAqC,CAAC;AACpD,cAAc,oCAAoC,CAAC"}

package/dist/lifecycle/cms-lifecycle-store.d.ts

@@ -0,0 +1,72 @@
+/**
+ * CMS-backed lifecycle store (decision 009). Same contract + invariants as
+ * createInMemoryLifecycleStore (lifecycle-store.ts): drafts are mutable working
+ * copies, publishes are immutable snapshots, rollback is a NEW publish of old
+ * data, version tokens are monotonic. The difference: state lives in the CMS,
+ * reached through a small PageDocPort, so pages survive restarts
+ * — the durable home the in-memory store never was.
+ *
+ * Two deliberate deltas from the in-memory store (decision 009):
+ *  - Version derivation is PER-SUBJECT (max persisted token + 1), not one
+ *    process-global counter. The documented invariant is "monotonic per
+ *    subject" (version-token.ts). The global counter's cross-subject
+ *    uniqueness was incidental and no consumer relies on it: the render-cache
+ *    key joins per-subject tokens, and CAS compares within a single subject.
+ *  - It clones at BOTH boundaries — never mutating a doc it read from the port,
+ *    and cloning every value it returns — because a port MAY hand back a shared
+ *    instance (an in-memory fake does). The in-memory store could clone on
+ *    write only; this one cannot.
+ *
+ * Every mutator is a read-modify-write with optimistic concurrency through
+ * PageDocPort.write(expectedDocVersion). A concrete CMS port must enforce that
+ * compare at the storage boundary; callers retry bounded conflicts here.
+ */
+import { type LifecycleEvents, type LifecycleStore } from "./lifecycle-store";
+import { type ContentVersionToken, type PublishedSnapshot } from "./version-token";
+/** The full persisted row for one subject: the mutable draft (if any) plus the
+ * immutable, append-only published history. Stored as ONE JSON document in the
+ * CMS (a Payload `document` json field / a Strapi `document` json attribute). */
+export interface StoredPageDoc<T> {
+    readonly docVersion: number;
+    readonly draft?: T;
+    readonly snapshots: readonly PublishedSnapshot<T>[];
+}
+export interface PageDocWriteOptions {
+    readonly expectedDocVersion: number;
+}
+export declare class PageDocConflict extends Error {
+    readonly key: string;
+    readonly expectedDocVersion: number;
+    readonly actualDocVersion: number | undefined;
+    constructor(key: string, expectedDocVersion: number, actualDocVersion: number | undefined);
+}
+/**
+ * Minimal, CMS-agnostic persistence port. A concrete port is built for exactly
+ * one CMS instance; getPublished (the public read) has no viewer, so the port
+ * is bound to its backing store at construction. Contract:
+ *  - read(key): the persisted doc or undefined. Caller-owned for reading; the
+ *    store never mutates it in place.
+ *  - readVersion(key): optional fast path for render-cache version checks.
+ *    Concrete CMS ports should read a projected latest-version column/field,
+ *    not hydrate the full JSON page document just to decide cache freshness.
+ *  - write(key, doc, { expectedDocVersion }): upsert with compare-and-swap.
+ *    Missing rows have version 0; successful writes persist doc.docVersion.
+ *    The port persists a DEEP COPY (real CMS ports serialize to JSON; an
+ *    in-memory fake MUST structuredClone) so the store can keep building fresh
+ *    docs without the port aliasing them.
+ */
+export interface PageDocPort<T> {
+    read(key: string): Promise<StoredPageDoc<T> | undefined>;
+    readVersion?(key: string): Promise<ContentVersionToken | undefined>;
+    write(key: string, doc: StoredPageDoc<T>, options: PageDocWriteOptions): Promise<void>;
+}
+export interface CmsLifecycleStoreDeps<T> {
+    readonly port: PageDocPort<T>;
+    readonly events?: Partial<LifecycleEvents>;
+    readonly clock?: () => string;
+    /** Maximum published snapshots retained per subject. Defaults to 50 to keep
+     * CMS JSON documents bounded while preserving recent rollback history. */
+    readonly maxSnapshots?: number;
+}
+export declare function createCmsLifecycleStore<T>(deps: CmsLifecycleStoreDeps<T>): LifecycleStore<T>;
+//# sourceMappingURL=cms-lifecycle-store.d.ts.map

package/dist/lifecycle/cms-lifecycle-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cms-lifecycle-store.d.ts","sourceRoot":"","sources":["../../src/lifecycle/cms-lifecycle-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAGL,KAAK,eAAe,EACpB,KAAK,cAAc,EACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAIL,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EAEvB,MAAM,iBAAiB,CAAC;AAEzB;;iFAEiF;AACjF,MAAM,WAAW,aAAa,CAAC,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACnB,QAAQ,CAAC,SAAS,EAAE,SAAS,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC;CACrD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC;AAED,qBAAa,eAAgB,SAAQ,KAAK;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM;IAAE,QAAQ,CAAC,kBAAkB,EAAE,MAAM;IAAE,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,SAAS;gBAA/F,GAAG,EAAE,MAAM,EAAW,kBAAkB,EAAE,MAAM,EAAW,gBAAgB,EAAE,MAAM,GAAG,SAAS;CAIrH;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,WAAW,CAAC,CAAC;IAC5B,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;IACzD,WAAW,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAAC;IACpE,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxF;AAED,MAAM,WAAW,qBAAqB,CAAC,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IAC3C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;IAC9B;8EAC0E;IAC1E,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,IAAI,EAAE,qBAAqB,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,CAsH5F"}

package/dist/lifecycle/cms-lifecycle-store.js

@@ -0,0 +1,150 @@
+/**
+ * CMS-backed lifecycle store (decision 009). Same contract + invariants as
+ * createInMemoryLifecycleStore (lifecycle-store.ts): drafts are mutable working
+ * copies, publishes are immutable snapshots, rollback is a NEW publish of old
+ * data, version tokens are monotonic. The difference: state lives in the CMS,
+ * reached through a small PageDocPort, so pages survive restarts
+ * — the durable home the in-memory store never was.
+ *
+ * Two deliberate deltas from the in-memory store (decision 009):
+ *  - Version derivation is PER-SUBJECT (max persisted token + 1), not one
+ *    process-global counter. The documented invariant is "monotonic per
+ *    subject" (version-token.ts). The global counter's cross-subject
+ *    uniqueness was incidental and no consumer relies on it: the render-cache
+ *    key joins per-subject tokens, and CAS compares within a single subject.
+ *  - It clones at BOTH boundaries — never mutating a doc it read from the port,
+ *    and cloning every value it returns — because a port MAY hand back a shared
+ *    instance (an in-memory fake does). The in-memory store could clone on
+ *    write only; this one cannot.
+ *
+ * Every mutator is a read-modify-write with optimistic concurrency through
+ * PageDocPort.write(expectedDocVersion). A concrete CMS port must enforce that
+ * compare at the storage boundary; callers retry bounded conflicts here.
+ */
+import { NothingToPublish, RollbackTargetMissing, } from "./lifecycle-store.js";
+import { subjectKey, versionNumber, versionToken, } from "./version-token.js";
+export class PageDocConflict extends Error {
+    key;
+    expectedDocVersion;
+    actualDocVersion;
+    constructor(key, expectedDocVersion, actualDocVersion) {
+        super(`PageDocConflict: ${key} expected docVersion ${expectedDocVersion}, got ${actualDocVersion ?? "missing"}`);
+        this.key = key;
+        this.expectedDocVersion = expectedDocVersion;
+        this.actualDocVersion = actualDocVersion;
+        this.name = "PageDocConflict";
+    }
+}
+export function createCmsLifecycleStore(deps) {
+    const { port, events } = deps;
+    const clock = deps.clock ?? (() => new Date().toISOString());
+    const maxSnapshots = deps.maxSnapshots ?? 50;
+    function load(subject) {
+        return port.read(subjectKey(subject));
+    }
+    function normalize(doc) {
+        if (!doc)
+            return undefined;
+        return {
+            ...doc,
+            docVersion: Number.isInteger(doc.docVersion) && doc.docVersion >= 0 ? doc.docVersion : 0,
+            snapshots: doc.snapshots ?? [],
+        };
+    }
+    function nextVersion(snapshots) {
+        // PER-SUBJECT max+1 (empty history => 1, matching the in-memory store's
+        // first token). Parse via versionNumber so the zero-pad width lives in one
+        // place; snapshots are appended in order so any read order is fine.
+        const maxN = snapshots.length ? Math.max(...snapshots.map((s) => versionNumber(s.version))) : 0;
+        return versionToken(maxN + 1);
+    }
+    function pruneSnapshots(snapshots) {
+        if (maxSnapshots <= 0)
+            return [];
+        return snapshots.slice(-maxSnapshots);
+    }
+    /** publish/rollback share this: append a NEW immutable snapshot of `data`,
+     * keep the existing draft, persist, and fire the invalidation hook. Never
+     * mutates `cur` (it may be the port's retained instance). */
+    async function mutate(subject, update) {
+        const key = subjectKey(subject);
+        let lastConflict;
+        for (let attempt = 0; attempt < 8; attempt += 1) {
+            const cur = normalize(await port.read(key));
+            const expectedDocVersion = cur?.docVersion ?? 0;
+            const next = update(cur);
+            try {
+                await port.write(key, { ...next.doc, docVersion: expectedDocVersion + 1 }, { expectedDocVersion });
+                return next.result;
+            }
+            catch (error) {
+                if (error instanceof PageDocConflict) {
+                    lastConflict = error;
+                    continue;
+                }
+                throw error;
+            }
+        }
+        throw lastConflict ?? new PageDocConflict(key, -1, undefined);
+    }
+    function appended(subject, cur, data) {
+        const snap = {
+            subject,
+            version: nextVersion(cur.snapshots),
+            publishedAt: clock(),
+            data: structuredClone(data),
+        };
+        return { doc: { draft: cur.draft, snapshots: pruneSnapshots([...cur.snapshots, snap]) }, snapshot: snap };
+    }
+    return {
+        async getDraft(subject) {
+            const doc = normalize(await load(subject));
+            return doc?.draft === undefined ? undefined : structuredClone(doc.draft);
+        },
+        async saveDraft(subject, data) {
+            await mutate(subject, (cur) => ({
+                doc: {
+                    draft: structuredClone(data),
+                    snapshots: cur?.snapshots ?? [],
+                },
+                result: undefined,
+            }));
+        },
+        async getPublished(subject) {
+            const snap = normalize(await load(subject))?.snapshots.at(-1);
+            return snap ? structuredClone(snap) : undefined;
+        },
+        async publish(subject) {
+            const snap = await mutate(subject, (cur) => {
+                if (!cur || cur.draft === undefined)
+                    throw new NothingToPublish(subject);
+                const { doc, snapshot } = appended(subject, cur, cur.draft);
+                return { doc, result: snapshot };
+            });
+            events?.onVersionBump?.(subject, snap.version);
+            return structuredClone(snap);
+        },
+        async rollback(subject, toVersion) {
+            const snap = await mutate(subject, (cur) => {
+                const target = cur?.snapshots.find((s) => s.version === toVersion);
+                if (!cur || !target)
+                    throw new RollbackTargetMissing(subject, toVersion);
+                const { doc, snapshot } = appended(subject, cur, target.data);
+                return { doc, result: snapshot };
+            });
+            events?.onVersionBump?.(subject, snap.version);
+            return structuredClone(snap);
+        },
+        async listSnapshots(subject) {
+            const doc = normalize(await load(subject));
+            return (doc?.snapshots ?? []).map((s) => structuredClone(s));
+        },
+        async currentVersion(subject) {
+            const key = subjectKey(subject);
+            if (port.readVersion)
+                return port.readVersion(key);
+            return normalize(await port.read(key))?.snapshots.at(-1)?.version;
+        },
+    };
+}
+//# sourceMappingURL=cms-lifecycle-store.js.map

package/dist/lifecycle/cms-lifecycle-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cms-lifecycle-store.js","sourceRoot":"","sources":["../../src/lifecycle/cms-lifecycle-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EACL,gBAAgB,EAChB,qBAAqB,GAGtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,UAAU,EACV,aAAa,EACb,YAAY,GAIb,MAAM,iBAAiB,CAAC;AAezB,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACnB;IAAsB;IAAqC;IAAhF,YAAqB,GAAW,EAAW,kBAA0B,EAAW,gBAAoC;QAClH,KAAK,CAAC,oBAAoB,GAAG,wBAAwB,kBAAkB,SAAS,gBAAgB,IAAI,SAAS,EAAE,CAAC,CAAC;QAD9F,QAAG,GAAH,GAAG,CAAQ;QAAW,uBAAkB,GAAlB,kBAAkB,CAAQ;QAAW,qBAAgB,GAAhB,gBAAgB,CAAoB;QAElH,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAgCD,MAAM,UAAU,uBAAuB,CAAI,IAA8B;IACvE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7D,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;IAE7C,SAAS,IAAI,CAAC,OAAyB;QACrC,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IACxC,CAAC;IAED,SAAS,SAAS,CAAC,GAAiC;QAClD,IAAI,CAAC,GAAG;YAAE,OAAO,SAAS,CAAC;QAC3B,OAAO;YACL,GAAG,GAAG;YACN,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACxF,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,EAAE;SAC/B,CAAC;IACJ,CAAC;IAED,SAAS,WAAW,CAAC,SAA0C;QAC7D,wEAAwE;QACxE,2EAA2E;QAC3E,oEAAoE;QACpE,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChG,OAAO,YAAY,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;IAChC,CAAC;IAED,SAAS,cAAc,CAAC,SAA0C;QAChE,IAAI,YAAY,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC;QACjC,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC;IACxC,CAAC;IAED;;iEAE6D;IAC7D,KAAK,UAAU,MAAM,CACnB,OAAyB,EACzB,MAAyH;QAEzH,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,YAAyC,CAAC;QAC9C,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YAChD,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5C,MAAM,kBAAkB,GAAG,GAAG,EAAE,UAAU,IAAI,CAAC,CAAC;YAChD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,kBAAkB,GAAG,CAAC,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBACnG,OAAO,IAAI,CAAC,MAAM,CAAC;YACrB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;oBACrC,YAAY,GAAG,KAAK,CAAC;oBACrB,SAAS;gBACX,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,MAAM,YAAY,IAAI,IAAI,eAAe,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAChE,CAAC;IAED,SAAS,QAAQ,CAAC,OAAyB,EAAE,GAAqB,EAAE,IAAO;QAIzE,MAAM,IAAI,GAAyB;YACjC,OAAO;YACP,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC;YACnC,WAAW,EAAE,KAAK,EAAE;YACpB,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC;SAC5B,CAAC;QACF,OAAO,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC,GAAG,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5G,CAAC;IAED,OAAO;QACL,KAAK,CAAC,QAAQ,CAAC,OAAO;YACpB,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3C,OAAO,GAAG,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3E,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI;YAC3B,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC9B,GAAG,EAAE;oBACH,KAAK,EAAE,eAAe,CAAC,IAAI,CAAC;oBAC5B,SAAS,EAAE,GAAG,EAAE,SAAS,IAAI,EAAE;iBAChC;gBACD,MAAM,EAAE,SAAS;aAClB,CAAC,CAAC,CAAC;QACN,CAAC;QACD,KAAK,CAAC,YAAY,CAAC,OAAO;YACxB,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9D,OAAO,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClD,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,OAAO;YACnB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACzC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS;oBAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;gBACzE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC5D,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;YACnC,CAAC,CAAC,CAAC;YACH,MAAM,EAAE,aAAa,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAC/C,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS;YAC/B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACzC,MAAM,MAAM,GAAG,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC;gBACnE,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM;oBAAE,MAAM,IAAI,qBAAqB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;gBACzE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC9D,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;YACnC,CAAC,CAAC,CAAC;YACH,MAAM,EAAE,aAAa,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAC/C,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QACD,KAAK,CAAC,aAAa,CAAC,OAAO;YACzB,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/D,CAAC;QACD,KAAK,CAAC,cAAc,CAAC,OAAO;YAC1B,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;YAChC,IAAI,IAAI,CAAC,WAAW;gBAAE,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACnD,OAAO,SAAS,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC;QACpE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/lifecycle/lifecycle-store.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Content-lifecycle substrate (decision 004 §4.2; invariant F + P precondition).
+ * Drafts are mutable working copies; ONLY publishes are immutable snapshots.
+ * Rollback is a publish of old data under a NEW token — history is never edited.
+ * Ships with an in-memory implementation (the Phase-5 gate's store; adapters
+ * may back it natively per capabilities.draftPublish in Phase 6/6.5).
+ */
+import type { Viewer } from "../content-source/viewer";
+import { type ContentVersionToken, type PublishedSnapshot, type VersionedSubject } from "./version-token";
+export declare class RollbackTargetMissing extends Error {
+    readonly subject: VersionedSubject;
+    readonly toVersion: ContentVersionToken;
+    constructor(subject: VersionedSubject, toVersion: ContentVersionToken);
+}
+export declare class NothingToPublish extends Error {
+    readonly subject: VersionedSubject;
+    constructor(subject: VersionedSubject);
+}
+export interface LifecycleStore<T> {
+    getDraft(subject: VersionedSubject, viewer: Viewer): Promise<T | undefined>;
+    saveDraft(subject: VersionedSubject, data: T, viewer: Viewer): Promise<void>;
+    /** The ONLY published read for public requests. undefined = 404, never an
+     * empty render (invariant F). */
+    getPublished(subject: VersionedSubject): Promise<PublishedSnapshot<T> | undefined>;
+    publish(subject: VersionedSubject, viewer: Viewer): Promise<PublishedSnapshot<T>>;
+    rollback(subject: VersionedSubject, toVersion: ContentVersionToken, viewer: Viewer): Promise<PublishedSnapshot<T>>;
+    listSnapshots(subject: VersionedSubject): Promise<readonly PublishedSnapshot<T>[]>;
+    currentVersion(subject: VersionedSubject): Promise<ContentVersionToken | undefined>;
+}
+export interface LifecycleEvents {
+    /** Fired on publish AND rollback — the dependency graph's invalidation hook. */
+    onVersionBump(subject: VersionedSubject, version: ContentVersionToken): void;
+}
+export declare function createInMemoryLifecycleStore<T>(events?: Partial<LifecycleEvents>, clock?: () => string): LifecycleStore<T>;
+//# sourceMappingURL=lifecycle-store.d.ts.map

package/dist/lifecycle/lifecycle-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle-store.d.ts","sourceRoot":"","sources":["../../src/lifecycle/lifecycle-store.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAGL,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACtB,MAAM,iBAAiB,CAAC;AAEzB,qBAAa,qBAAsB,SAAQ,KAAK;IAClC,QAAQ,CAAC,OAAO,EAAE,gBAAgB;IAAE,QAAQ,CAAC,SAAS,EAAE,mBAAmB;gBAAlE,OAAO,EAAE,gBAAgB,EAAW,SAAS,EAAE,mBAAmB;CAIxF;AAED,qBAAa,gBAAiB,SAAQ,KAAK;IAC7B,QAAQ,CAAC,OAAO,EAAE,gBAAgB;gBAAzB,OAAO,EAAE,gBAAgB;CAI/C;AAED,MAAM,WAAW,cAAc,CAAC,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;IAC5E,SAAS,CAAC,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7E;qCACiC;IACjC,YAAY,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;IACnF,OAAO,CAAC,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;IAClF,QAAQ,CACN,OAAO,EAAE,gBAAgB,EACzB,SAAS,EAAE,mBAAmB,EAC9B,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,aAAa,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,SAAS,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACnF,cAAc,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAAC;CACrF;AAED,MAAM,WAAW,eAAe;IAC9B,gFAAgF;IAChF,aAAa,CAAC,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAAC;CAC9E;AAED,wBAAgB,4BAA4B,CAAC,CAAC,EAC5C,MAAM,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,EACjC,KAAK,GAAE,MAAM,MAAuC,GACnD,cAAc,CAAC,CAAC,CAAC,CAgDnB"}

package/dist/lifecycle/lifecycle-store.js

@@ -0,0 +1,69 @@
+import { subjectKey, versionToken, } from "./version-token.js";
+export class RollbackTargetMissing extends Error {
+    subject;
+    toVersion;
+    constructor(subject, toVersion) {
+        super(`rollback: no snapshot ${toVersion} for ${subjectKey(subject)}`);
+        this.subject = subject;
+        this.toVersion = toVersion;
+        this.name = "RollbackTargetMissing";
+    }
+}
+export class NothingToPublish extends Error {
+    subject;
+    constructor(subject) {
+        super(`publish: no draft for ${subjectKey(subject)}`);
+        this.subject = subject;
+        this.name = "NothingToPublish";
+    }
+}
+export function createInMemoryLifecycleStore(events, clock = () => new Date().toISOString()) {
+    const drafts = new Map();
+    const snapshots = new Map();
+    let counter = 0;
+    function bump(subject, data) {
+        counter += 1;
+        const snap = {
+            subject,
+            version: versionToken(counter),
+            publishedAt: clock(),
+            data: structuredClone(data), // immutability: never share the draft object
+        };
+        const list = snapshots.get(subjectKey(subject)) ?? [];
+        list.push(snap);
+        snapshots.set(subjectKey(subject), list);
+        events?.onVersionBump?.(subject, snap.version);
+        return snap;
+    }
+    return {
+        async getDraft(subject) {
+            return drafts.get(subjectKey(subject));
+        },
+        async saveDraft(subject, data) {
+            drafts.set(subjectKey(subject), structuredClone(data));
+        },
+        async getPublished(subject) {
+            return snapshots.get(subjectKey(subject))?.at(-1);
+        },
+        async publish(subject) {
+            const draft = drafts.get(subjectKey(subject));
+            if (draft === undefined)
+                throw new NothingToPublish(subject);
+            return bump(subject, draft);
+        },
+        async rollback(subject, toVersion) {
+            const target = snapshots.get(subjectKey(subject))?.find((s) => s.version === toVersion);
+            if (!target)
+                throw new RollbackTargetMissing(subject, toVersion);
+            // Rollback = a NEW snapshot of the old data; the target stays untouched.
+            return bump(subject, target.data);
+        },
+        async listSnapshots(subject) {
+            return [...(snapshots.get(subjectKey(subject)) ?? [])];
+        },
+        async currentVersion(subject) {
+            return snapshots.get(subjectKey(subject))?.at(-1)?.version;
+        },
+    };
+}
+//# sourceMappingURL=lifecycle-store.js.map

package/dist/lifecycle/lifecycle-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle-store.js","sourceRoot":"","sources":["../../src/lifecycle/lifecycle-store.ts"],"names":[],"mappings":"AAQA,OAAO,EACL,UAAU,EACV,YAAY,GAIb,MAAM,iBAAiB,CAAC;AAEzB,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IACzB;IAAoC;IAAzD,YAAqB,OAAyB,EAAW,SAA8B;QACrF,KAAK,CAAC,yBAAyB,SAAS,QAAQ,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QADpD,YAAO,GAAP,OAAO,CAAkB;QAAW,cAAS,GAAT,SAAS,CAAqB;QAErF,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACpB;IAArB,YAAqB,OAAyB;QAC5C,KAAK,CAAC,yBAAyB,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QADnC,YAAO,GAAP,OAAO,CAAkB;QAE5C,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAuBD,MAAM,UAAU,4BAA4B,CAC1C,MAAiC,EACjC,QAAsB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IAEpD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAa,CAAC;IACpC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkC,CAAC;IAC5D,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,SAAS,IAAI,CAAC,OAAyB,EAAE,IAAO;QAC9C,OAAO,IAAI,CAAC,CAAC;QACb,MAAM,IAAI,GAAyB;YACjC,OAAO;YACP,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC;YAC9B,WAAW,EAAE,KAAK,EAAE;YACpB,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE,6CAA6C;SAC3E,CAAC;QACF,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACtD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;QACzC,MAAM,EAAE,aAAa,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,KAAK,CAAC,QAAQ,CAAC,OAAO;YACpB,OAAO,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;QACzC,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI;YAC3B,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;QACzD,CAAC;QACD,KAAK,CAAC,YAAY,CAAC,OAAO;YACxB,OAAO,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,OAAO;YACnB,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;YAC9C,IAAI,KAAK,KAAK,SAAS;gBAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC7D,OAAO,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC9B,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS;YAC/B,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC;YACxF,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,qBAAqB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YACjE,yEAAyE;YACzE,OAAO,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;QACD,KAAK,CAAC,aAAa,CAAC,OAAO;YACzB,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACzD,CAAC;QACD,KAAK,CAAC,cAAc,CAAC,OAAO;YAC1B,OAAO,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC;QAC7D,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/lifecycle/version-token.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Content-version token + versioned subjects (decision 004 §4.1). MONOTONIC
+ * per subject; distinct from bind-core's grammar SchemaVersion.
+ */
+import type { ContentTypeId, InstanceId, PageId } from "@batterai/bind-core";
+export type ContentVersionToken = string & {
+    readonly __brand: "ContentVersionToken";
+};
+export type VersionedSubject = {
+    readonly kind: "page";
+    readonly pageId: PageId;
+} | {
+    readonly kind: "instance";
+    readonly contentTypeId: ContentTypeId;
+    readonly instanceId: InstanceId;
+};
+export declare function subjectKey(s: VersionedSubject): string;
+export declare function versionToken(n: number): ContentVersionToken;
+/** Inverse of versionToken: recover the numeric ordinal. The CMS-backed store
+ * (cms-lifecycle-store.ts) derives the next per-subject version from persisted
+ * snapshots instead of a live counter, so it needs to parse tokens back. */
+export declare function versionNumber(t: ContentVersionToken): number;
+export interface PublishedSnapshot<T> {
+    readonly subject: VersionedSubject;
+    readonly version: ContentVersionToken;
+    readonly publishedAt: string;
+    /** IMMUTABLE — a new publish creates a NEW snapshot; history is never edited. */
+    readonly data: T;
+}
+//# sourceMappingURL=version-token.d.ts.map

package/dist/lifecycle/version-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-token.d.ts","sourceRoot":"","sources":["../../src/lifecycle/version-token.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAE7E,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAA;CAAE,CAAC;AAEvF,MAAM,MAAM,gBAAgB,GACxB;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAClD;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;CAAE,CAAC;AAE1G,wBAAgB,UAAU,CAAC,CAAC,EAAE,gBAAgB,GAAG,MAAM,CAEtD;AAED,wBAAgB,YAAY,CAAC,CAAC,EAAE,MAAM,GAAG,mBAAmB,CAG3D;AAED;;4EAE4E;AAC5E,wBAAgB,aAAa,CAAC,CAAC,EAAE,mBAAmB,GAAG,MAAM,CAU5D;AAED,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,iFAAiF;IACjF,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;CAClB"}

package/dist/lifecycle/version-token.js

@@ -0,0 +1,22 @@
+export function subjectKey(s) {
+    return s.kind === "page" ? `page:${s.pageId}` : `instance:${s.contentTypeId}:${s.instanceId}`;
+}
+export function versionToken(n) {
+    // Zero-padded so lexicographic order == numeric order (monotonic compare).
+    return `v${String(n).padStart(12, "0")}`;
+}
+/** Inverse of versionToken: recover the numeric ordinal. The CMS-backed store
+ * (cms-lifecycle-store.ts) derives the next per-subject version from persisted
+ * snapshots instead of a live counter, so it needs to parse tokens back. */
+export function versionNumber(t) {
+    const raw = t;
+    if (!/^v\d+$/.test(raw)) {
+        throw new Error(`Invalid content version token: ${raw}`);
+    }
+    const n = Number(raw.slice(1));
+    if (!Number.isSafeInteger(n) || n < 1) {
+        throw new Error(`Invalid content version token: ${raw}`);
+    }
+    return n;
+}
+//# sourceMappingURL=version-token.js.map

package/dist/lifecycle/version-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-token.js","sourceRoot":"","sources":["../../src/lifecycle/version-token.ts"],"names":[],"mappings":"AAYA,MAAM,UAAU,UAAU,CAAC,CAAmB;IAC5C,OAAO,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;AAChG,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,CAAS;IACpC,2EAA2E;IAC3E,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,EAAyB,CAAC;AAClE,CAAC;AAED;;4EAE4E;AAC5E,MAAM,UAAU,aAAa,CAAC,CAAsB;IAClD,MAAM,GAAG,GAAG,CAAW,CAAC;IACxB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,kCAAkC,GAAG,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,kCAAkC,GAAG,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/messages.d.ts

@@ -0,0 +1,26 @@
+import { type Locale, type MessageParams } from "@batterai/contract";
+export declare const HOST_MESSAGES_EN: {
+    readonly "binding.broken": "broken binding: {reason}";
+    readonly "block.unknown": "Unknown block type: {type}";
+    readonly "loadMore.retry": "Loading failed - try again";
+    readonly "metadata.brokenTitle": "Broken title binding";
+    readonly "repeater.empty": "No content in this list yet.";
+    readonly "route.previewAuthRequired": "preview requires a signed-in editor";
+    readonly "write.fieldUnreadable": "field is not readable for this user";
+    readonly "write.pageLoginRequired": "only signed-in editors can edit pages";
+    readonly "write.unsupportedInstanceValue": "UnsupportedInstanceWriteValue: a {kind} value cannot be written to a CMS field yet - only literal values are supported";
+};
+export declare const HOST_MESSAGES_NL: {
+    readonly "binding.broken": "binding kapot: {reason}";
+    readonly "block.unknown": "Onbekend bloktype: {type}";
+    readonly "loadMore.retry": "Laden mislukt - opnieuw proberen";
+    readonly "metadata.brokenTitle": "kapotte titel-binding";
+    readonly "repeater.empty": "Nog geen inhoud in deze lijst.";
+    readonly "route.previewAuthRequired": "preview vereist een ingelogde redacteur";
+    readonly "write.fieldUnreadable": "veld niet leesbaar voor deze gebruiker";
+    readonly "write.pageLoginRequired": "alleen ingelogde redacteuren kunnen pagina's bewerken";
+    readonly "write.unsupportedInstanceValue": "UnsupportedInstanceWriteValue: een {kind}-waarde kan nog niet naar een CMS-veld worden geschreven - alleen letterlijke waarden";
+};
+export type HostMessageKey = keyof typeof HOST_MESSAGES_EN;
+export declare function hostMessage(locale: Locale | string | undefined, key: HostMessageKey, params?: MessageParams): string;
+//# sourceMappingURL=messages.d.ts.map

package/dist/messages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../src/messages.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,KAAK,MAAM,EAAuB,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAE1G,eAAO,MAAM,gBAAgB;;;;;;;;;;CAWM,CAAC;AAEpC,eAAO,MAAM,gBAAgB;;;;;;;;;;CAWqC,CAAC;AAEnE,MAAM,MAAM,cAAc,GAAG,MAAM,OAAO,gBAAgB,CAAC;AAO3D,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,EAAE,GAAG,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,MAAM,CAEpH"}