@elytracms/studio 0.0.1

package/dist/lib/operations/graph-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph-commands.js","sourceRoot":"","sources":["../../../src/lib/operations/graph-commands.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAoEjD;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAChC,SAAiB,EACjB,MAAqB,EACrB,IAAqB,EACrB,IAA+B;IAE/B,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAA;YAC9C,OAAO;gBACL,SAAS,EAAE,YAAY;gBACvB,KAAK,EAAE;oBACL,SAAS;oBACT,wDAAwD;oBACxD,KAAK,EAAE,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC;oBACnC,OAAO,EAAE,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;iBAClD;aACF,CAAA;QACH,CAAC;QAED,KAAK,WAAW;YACd,OAAO;gBACL,SAAS,EAAE,YAAY;gBACvB,uEAAuE;gBACvE,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE;aACjE,CAAA;QAEH,uEAAuE;QACvE,oEAAoE;QACpE,KAAK,QAAQ,CAAC;QACd,KAAK,OAAO,CAAC;QACb,KAAK,UAAU,CAAC;QAChB,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ,CAAC;QACd,KAAK,WAAW,CAAC;QACjB,KAAK,SAAS,CAAC;QACf,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM,CAAC;QACZ,KAAK,SAAS,CAAC;QACf,KAAK,YAAY,CAAC;QAClB,KAAK,cAAc,CAAC;QACpB,KAAK,YAAY;YACf,OAAO,IAAI,CAAA;QAEb;YACE,OAAO,IAAI,CAAA;IACf,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,UAA4B,EAC5B,SAAiB,EACjB,KAAkC;IAElC,mEAAmE;IACnE,kEAAkE;IAClE,MAAM,SAAS,GAAG,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IAClE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IAC9D,IAAI,MAAM,CAAC,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;QAAE,OAAO,MAAM,CAAA;IAChG,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAA;AACpG,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,UAA4B,EAC5B,SAAiB,EACjB,YAAyC;IAEzC,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,UAAU,EAAE,SAAS,EAAE,YAAY,CAAC,CAAA;IAC/E,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAA;IACjC,OAAO,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;AACrD,CAAC;AAED,4DAA4D;AAC5D,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,UAA4B,EAC5B,SAAiB;IAEjB,OAAO,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;AACvD,CAAC"}

package/dist/lib/operations/graph-persistence.d.ts

@@ -0,0 +1,27 @@
+import type { BuilderAction, BuilderSnapshot } from './graph-commands';
+import type { WorkingGraph } from '../working-graph';
+import type { OperationError, OperationsClient } from './operations-package';
+/**
+ * Builder → operations persistence (EC-141). Mirrors every committed builder
+ * mutation onto the operations layer as the matching `graph.*` command, in
+ * dispatch order, against a guaranteed-identical baseline revision.
+ *
+ * Failures are *surfaced, never silent, and never block local editing*: a
+ * rejected/denied/failed command reaches `onError` (the store renders it) and
+ * invalidates the baseline, so the next mutation re-syncs — which re-surfaces
+ * a standing denial instead of silently dropping edits.
+ */
+export interface GraphPersister {
+    /** Queue the command mirroring a dispatched action (no-op for pure-UI actions). */
+    enqueue(action: BuilderAction, prev: BuilderSnapshot, next: {
+        present: WorkingGraph;
+    }): void;
+    /** Await every queued command (test/publish synchronization point). */
+    flush(): Promise<void>;
+}
+export interface GraphPersisterOptions {
+    projectId: string;
+    getOperations: () => Promise<OperationsClient>;
+    onError: (error: OperationError) => void;
+}
+export declare function createGraphPersister(options: GraphPersisterOptions): GraphPersister;

package/dist/lib/operations/graph-persistence.js

@@ -0,0 +1,35 @@
+import { ensureGraphBaseline, graphInvocationFor } from './graph-commands';
+import { createPersistQueue } from './persist-queue';
+export function createGraphPersister(options) {
+    const queue = createPersistQueue();
+    let baselineReady = false;
+    return {
+        enqueue(action, prev, next) {
+            const invocation = graphInvocationFor(options.projectId, action, prev, next);
+            if (!invocation)
+                return;
+            queue.push(async () => {
+                const operations = await options.getOperations();
+                // graph.save replaces the whole graph, so it *is* a baseline; the
+                // node-level commands need the persisted latest to equal the
+                // session's pre-edit graph first.
+                if (!baselineReady && invocation.operation !== 'graph.save') {
+                    const baseline = await ensureGraphBaseline(operations, options.projectId, prev.present);
+                    if (!baseline.ok) {
+                        options.onError(baseline.error);
+                        return;
+                    }
+                }
+                const result = await operations.execute(invocation.operation, invocation.input);
+                if (!result.ok) {
+                    baselineReady = false;
+                    options.onError(result.error);
+                    return;
+                }
+                baselineReady = true;
+            });
+        },
+        flush: () => queue.flush(),
+    };
+}
+//# sourceMappingURL=graph-persistence.js.map

package/dist/lib/operations/graph-persistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph-persistence.js","sourceRoot":"","sources":["../../../src/lib/operations/graph-persistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAI1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AAyBpD,MAAM,UAAU,oBAAoB,CAAC,OAA8B;IACjE,MAAM,KAAK,GAAG,kBAAkB,EAAE,CAAA;IAClC,IAAI,aAAa,GAAG,KAAK,CAAA;IAEzB,OAAO;QACL,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI;YACxB,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;YAC5E,IAAI,CAAC,UAAU;gBAAE,OAAM;YACvB,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;gBACpB,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,aAAa,EAAE,CAAA;gBAChD,kEAAkE;gBAClE,6DAA6D;gBAC7D,kCAAkC;gBAClC,IAAI,CAAC,aAAa,IAAI,UAAU,CAAC,SAAS,KAAK,YAAY,EAAE,CAAC;oBAC5D,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,UAAU,EAAE,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;oBACvF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;wBACjB,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;wBAC/B,OAAM;oBACR,CAAC;gBACH,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,CAAA;gBAC/E,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;oBACf,aAAa,GAAG,KAAK,CAAA;oBACrB,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;oBAC7B,OAAM;gBACR,CAAC;gBACD,aAAa,GAAG,IAAI,CAAA;YACtB,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE;KAC3B,CAAA;AACH,CAAC"}

package/dist/lib/operations/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Studio operations layer (EC-141). The single seam every studio mutation
+ * goes through — see `studio-operations.ts` for the bootstrap and
+ * `operations-package.ts` for why the package is bridged by path.
+ */
+export * from './operations-package';
+export * from './studio-operations';
+export * from './persist-queue';
+export * from './graph-commands';
+export * from './graph-persistence';
+export * from './cms-persistence';
+export * from './asset-repository';
+export * from './session-hydration';

package/dist/lib/operations/index.js

@@ -0,0 +1,14 @@
+/**
+ * Studio operations layer (EC-141). The single seam every studio mutation
+ * goes through — see `studio-operations.ts` for the bootstrap and
+ * `operations-package.ts` for why the package is bridged by path.
+ */
+export * from './operations-package';
+export * from './studio-operations';
+export * from './persist-queue';
+export * from './graph-commands';
+export * from './graph-persistence';
+export * from './cms-persistence';
+export * from './asset-repository';
+export * from './session-hydration';
+//# sourceMappingURL=index.js.map

package/dist/lib/operations/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/operations/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,cAAc,sBAAsB,CAAA;AACpC,cAAc,qBAAqB,CAAA;AACnC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,kBAAkB,CAAA;AAChC,cAAc,qBAAqB,CAAA;AACnC,cAAc,mBAAmB,CAAA;AACjC,cAAc,oBAAoB,CAAA;AAClC,cAAc,qBAAqB,CAAA"}

package/dist/lib/operations/operations-package.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Bridge to `@elytracms/operations` (EC-141). Every studio import of operations
+ * types/functions goes through `lib/operations`, keeping the app's dependency
+ * on the layer a single, swappable seam.
+ */
+export * from '@elytracms/operations';

package/dist/lib/operations/operations-package.js

@@ -0,0 +1,7 @@
+/**
+ * Bridge to `@elytracms/operations` (EC-141). Every studio import of operations
+ * types/functions goes through `lib/operations`, keeping the app's dependency
+ * on the layer a single, swappable seam.
+ */
+export * from '@elytracms/operations';
+//# sourceMappingURL=operations-package.js.map

package/dist/lib/operations/operations-package.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operations-package.js","sourceRoot":"","sources":["../../../src/lib/operations/operations-package.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,cAAc,uBAAuB,CAAA"}

package/dist/lib/operations/persist-queue.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Serial persistence queue (EC-141). Studio stores keep their working state
+ * optimistic (synchronous, in-memory) and mirror each mutation onto the
+ * operations layer; this queue guarantees the mirrored commands run strictly
+ * in dispatch order, one at a time, so the persisted timeline is deterministic.
+ *
+ * Tasks report their failures through their own structured channels
+ * (`OperationResult` handling inside the task); an unexpected *throw* is routed
+ * to `onTaskError` and never breaks the chain.
+ */
+export interface PersistQueue {
+    push(task: () => Promise<void>): void;
+    /** Await every task queued so far (drains work queued while awaiting too). */
+    flush(): Promise<void>;
+}
+export declare function createPersistQueue(onTaskError?: (error: unknown) => void): PersistQueue;

package/dist/lib/operations/persist-queue.js

@@ -0,0 +1,18 @@
+export function createPersistQueue(onTaskError) {
+    let pending = Promise.resolve();
+    return {
+        push(task) {
+            pending = pending.then(task).catch((error) => {
+                onTaskError?.(error);
+            });
+        },
+        async flush() {
+            let current;
+            do {
+                current = pending;
+                await current;
+            } while (current !== pending);
+        },
+    };
+}
+//# sourceMappingURL=persist-queue.js.map

package/dist/lib/operations/persist-queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"persist-queue.js","sourceRoot":"","sources":["../../../src/lib/operations/persist-queue.ts"],"names":[],"mappings":"AAgBA,MAAM,UAAU,kBAAkB,CAAC,WAAsC;IACvE,IAAI,OAAO,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAA;IAC9C,OAAO;QACL,IAAI,CAAC,IAAI;YACP,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBACpD,WAAW,EAAE,CAAC,KAAK,CAAC,CAAA;YACtB,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,KAAK,CAAC,KAAK;YACT,IAAI,OAAsB,CAAA;YAC1B,GAAG,CAAC;gBACF,OAAO,GAAG,OAAO,CAAA;gBACjB,MAAM,OAAO,CAAA;YACf,CAAC,QAAQ,OAAO,KAAK,OAAO,EAAC;QAC/B,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/lib/operations/session-hydration.d.ts

@@ -0,0 +1,84 @@
+import type { ProjectGraph } from '@elytracms/project-graph';
+import type { CmsDocument, CollectionDef } from '@elytracms/cms-core';
+import type { AssetRecord } from '@elytracms/persistence';
+import type { OperationResult, OperationsClient } from './operations-package';
+/**
+ * Persisted-session hydration (Milestone B sign-off fix, EC-177 gap 1).
+ *
+ * Against a persistent backend (Convex mode) a studio session must BOOT from
+ * what is persisted — the latest graph revision, the saved CMS schema +
+ * documents, and the per-environment publishing state — and fall back to the
+ * deterministic fixtures only when the project has nothing persisted yet
+ * (first run). Before this, every session seeded from fixtures, so reloads
+ * hid the editor's work and the next publish pinned fixture-derived state
+ * over production.
+ *
+ * This module is the pure load half: read-only `@elytracms/operations` queries
+ * composed into one hydration result. `not-found` is a *normal* answer (the
+ * first-run fallback); every other failure propagates as the structured
+ * operation error so the gate renders it — never a silent fixture fallback.
+ * The React gate that applies it lives in
+ * `components/studio/project-session.tsx`; playground mode never calls this.
+ */
+/**
+ * Collections owned by studio subsystems (data sources, saved views). They live
+ * in the same persisted schema but are NOT content: the CMS session, the
+ * sidebar, and the content preview engine must never offer them as authorable
+ * collections. Routes/redirects are NO LONGER system collections (EC-207): they
+ * are config-sourced and never persisted to the backend.
+ */
+export declare const STUDIO_SYSTEM_COLLECTION_IDS: ReadonlySet<string>;
+/** The persisted CMS content of a project: schema + documents, system collections excluded. */
+export interface HydratedCms {
+    collections: CollectionDef[];
+    documents: CmsDocument[];
+    /**
+     * Published document keys (EC-224), via the version pointer: a record is
+     * published iff `publishedVersion` is set. The session boots its
+     * `publishedKeys` from this — published-ness is the pointer, nothing else.
+     */
+    publishedKeys: string[];
+    /**
+     * The project's asset records (the `assets` table — NOT cms `asset`-collection
+     * documents). The preview content engine wires these into its lookup so listing/
+     * relation results resolve their `asset`-typed FIELDS (e.g. a ProductGrid product's
+     * `gallery`) to delivery shape — matching what the renderer's `resolveAsset` already
+     * does for static `asset` props (EC-262). Without them, the studio canvas renders
+     * such nested images blank even though the documents reference real assets.
+     */
+    assets: AssetRecord[];
+}
+/** The deployment's persisted publish, with the pinned revision's graph snapshot. */
+export interface HydratedPublish {
+    /** The pinned graph revision number. */
+    revision: number;
+    /** Serialized graph of the pinned revision (collab version snapshot shape). */
+    serializedGraph: string;
+    publishedAt?: string;
+}
+/** Everything a Convex-mode session boots from. `null` fields mean "nothing persisted" (first run). */
+export interface HydratedProjectSession {
+    /** The latest persisted graph revision's graph, or `null` when no revision exists. */
+    graph: ProjectGraph | null;
+    /** Persisted CMS schema + documents, or `null` when no content schema was ever saved. */
+    cms: HydratedCms | null;
+    /**
+     * The currently-published revision snapshot, or `null` when nothing is
+     * published. Single-environment (EC-179): a deployment IS one environment.
+     */
+    publish: HydratedPublish | null;
+}
+/**
+ * Load the persisted CMS content state. `null` when the project has no
+ * persisted content schema (first run — the session seeds fixtures and the
+ * persister's baseline will persist them on the first edit). A schema that
+ * contains only studio system collections counts as "no content persisted":
+ * system stores (saved views, routes) may create the schema record before any
+ * content baseline ran.
+ */
+export declare function loadHydratedCms(operations: OperationsClient, projectId: string): Promise<OperationResult<HydratedCms | null>>;
+/**
+ * Load everything a project session hydrates from: latest graph, CMS content,
+ * and the currently-published revision snapshot (single-environment, EC-179).
+ */
+export declare function loadProjectSession(operations: OperationsClient, projectId: string): Promise<OperationResult<HydratedProjectSession>>;

package/dist/lib/operations/session-hydration.js

@@ -0,0 +1,112 @@
+import { serializeProjectGraph } from '@elytracms/project-graph';
+import { documentKey } from '@elytracms/cms-core';
+import { DATA_SOURCES_COLLECTION } from '../data/sources-store';
+import { VIEWS_COLLECTION } from '../cms-views/views-store';
+/**
+ * Persisted-session hydration (Milestone B sign-off fix, EC-177 gap 1).
+ *
+ * Against a persistent backend (Convex mode) a studio session must BOOT from
+ * what is persisted — the latest graph revision, the saved CMS schema +
+ * documents, and the per-environment publishing state — and fall back to the
+ * deterministic fixtures only when the project has nothing persisted yet
+ * (first run). Before this, every session seeded from fixtures, so reloads
+ * hid the editor's work and the next publish pinned fixture-derived state
+ * over production.
+ *
+ * This module is the pure load half: read-only `@elytracms/operations` queries
+ * composed into one hydration result. `not-found` is a *normal* answer (the
+ * first-run fallback); every other failure propagates as the structured
+ * operation error so the gate renders it — never a silent fixture fallback.
+ * The React gate that applies it lives in
+ * `components/studio/project-session.tsx`; playground mode never calls this.
+ */
+/**
+ * Collections owned by studio subsystems (data sources, saved views). They live
+ * in the same persisted schema but are NOT content: the CMS session, the
+ * sidebar, and the content preview engine must never offer them as authorable
+ * collections. Routes/redirects are NO LONGER system collections (EC-207): they
+ * are config-sourced and never persisted to the backend.
+ */
+export const STUDIO_SYSTEM_COLLECTION_IDS = new Set([
+    DATA_SOURCES_COLLECTION,
+    VIEWS_COLLECTION,
+]);
+/**
+ * Load the persisted CMS content state. `null` when the project has no
+ * persisted content schema (first run — the session seeds fixtures and the
+ * persister's baseline will persist them on the first edit). A schema that
+ * contains only studio system collections counts as "no content persisted":
+ * system stores (saved views, routes) may create the schema record before any
+ * content baseline ran.
+ */
+export async function loadHydratedCms(operations, projectId) {
+    const schema = await operations.schema.get({ projectId });
+    if (!schema.ok) {
+        return schema.error.code === 'not-found' ? { ok: true, value: null } : schema;
+    }
+    const collections = schema.value.collections.filter((collection) => !STUDIO_SYSTEM_COLLECTION_IDS.has(collection.id));
+    if (collections.length === 0)
+        return { ok: true, value: null };
+    const documents = await operations.documents.list({ projectId });
+    if (!documents.ok)
+        return documents;
+    // The project's asset records (assets table), wired into the preview lookup so
+    // listing/relation results resolve their nested `asset` fields (EC-262). Non-fatal:
+    // a failed asset list degrades previews to no images, never blocks the session.
+    const assets = await operations.assets.list({ projectId });
+    const contentIds = new Set(collections.map((collection) => collection.id));
+    const contentRecords = documents.value.filter((record) => contentIds.has(record.document.collection));
+    // EC-224: a record is published when its version pointer is set — the same
+    // gate delivery reads. There is no flat-state fallback (the field is gone).
+    const isRecordPublished = (record) => record.publishedVersion !== undefined;
+    return {
+        ok: true,
+        value: {
+            collections,
+            // The live row hydrates AS PERSISTED — a continuous draft (EC-224). We no
+            // longer stamp a `state:'published'` mirror: published-ness is the version
+            // pointer (`publishedKeys`), which every studio reader now consults (the
+            // table badge/$state via `isPublished`, the preview engine via the pin).
+            documents: contentRecords.map((record) => record.document),
+            publishedKeys: contentRecords
+                .filter(isRecordPublished)
+                .map((record) => documentKey(record.document)),
+            assets: assets.ok ? assets.value : [],
+        },
+    };
+}
+/**
+ * Load everything a project session hydrates from: latest graph, CMS content,
+ * and the currently-published revision snapshot (single-environment, EC-179).
+ */
+export async function loadProjectSession(operations, projectId) {
+    const latest = await operations.graph.getLatest({ projectId });
+    if (!latest.ok && latest.error.code !== 'not-found')
+        return latest;
+    const graph = latest.ok ? latest.value.graph : null;
+    const cms = await loadHydratedCms(operations, projectId);
+    if (!cms.ok)
+        return cms;
+    const state = await operations.publishing.getState({ projectId });
+    if (!state.ok)
+        return state;
+    let publish = null;
+    if (state.value &&
+        state.value.status === 'published' &&
+        state.value.publishedRevision !== undefined) {
+        const publishedRevision = state.value.publishedRevision;
+        const revision = await operations.graph.getRevision({ projectId, revision: publishedRevision });
+        if (!revision.ok && revision.error.code !== 'not-found')
+            return revision;
+        // A dangling pin (revision record gone) leaves `publish` null, not fatal.
+        if (revision.ok) {
+            publish = {
+                revision: publishedRevision,
+                serializedGraph: serializeProjectGraph(revision.value.graph),
+                ...(state.value.publishedAt !== undefined ? { publishedAt: state.value.publishedAt } : {}),
+            };
+        }
+    }
+    return { ok: true, value: { graph, cms: cms.value, publish } };
+}
+//# sourceMappingURL=session-hydration.js.map

package/dist/lib/operations/session-hydration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-hydration.js","sourceRoot":"","sources":["../../../src/lib/operations/session-hydration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAA;AAEhE,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAGjD,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAA;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAG3D;;;;;;;;;;;;;;;;;GAiBG;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAwB,IAAI,GAAG,CAAC;IACvE,uBAAuB;IACvB,gBAAgB;CACjB,CAAC,CAAA;AA6CF;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,UAA4B,EAC5B,SAAiB;IAEjB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IACzD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAA;IAC/E,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CACjD,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,4BAA4B,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CACjE,CAAA;IACD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IAC9D,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IAChE,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,OAAO,SAAS,CAAA;IACnC,+EAA+E;IAC/E,oFAAoF;IACpF,gFAAgF;IAChF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IAC1D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAA;IAC1E,MAAM,cAAc,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CACvD,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAC3C,CAAA;IACD,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,iBAAiB,GAAG,CAAC,MAAuC,EAAE,EAAE,CACpE,MAAM,CAAC,gBAAgB,KAAK,SAAS,CAAA;IACvC,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,WAAW;YACX,0EAA0E;YAC1E,2EAA2E;YAC3E,yEAAyE;YACzE,yEAAyE;YACzE,SAAS,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;YAC1D,aAAa,EAAE,cAAc;iBAC1B,MAAM,CAAC,iBAAiB,CAAC;iBACzB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAChD,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;SACtC;KACF,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,UAA4B,EAC5B,SAAiB;IAEjB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IAC9D,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,MAAM,CAAA;IAClE,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;IAEnD,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;IACxD,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,GAAG,CAAA;IAEvB,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IACjE,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,KAAK,CAAA;IAE3B,IAAI,OAAO,GAA2B,IAAI,CAAA;IAC1C,IACE,KAAK,CAAC,KAAK;QACX,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,WAAW;QAClC,KAAK,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS,EAC3C,CAAC;QACD,MAAM,iBAAiB,GAAG,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAA;QACvD,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC,CAAA;QAC/F,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW;YAAE,OAAO,QAAQ,CAAA;QACxE,0EAA0E;QAC1E,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,GAAG;gBACR,QAAQ,EAAE,iBAAiB;gBAC3B,eAAe,EAAE,qBAAqB,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;gBAC5D,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3F,CAAA;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAA;AAChE,CAAC"}

package/dist/lib/operations/studio-operations.d.ts

@@ -0,0 +1,59 @@
+import type { PersistenceAdapter } from '@elytracms/persistence';
+import type { ChangesetOperations, OperationsClient, Principal, ReferenceIndexAttachment } from './operations-package';
+/**
+ * The studio's single operations bootstrap (EC-141, vision AD-7).
+ *
+ * One `OperationsClient` + one `ChangesetOperations` instance, built over the
+ * selected persistence adapter, shared by every store and surface in the app.
+ * The UI never talks to a repository for writes — every mutation is a typed
+ * operation command (validate → authorize → mutate → event), so the studio
+ * dogfoods the same seam plugins, AI changesets, and the CLI use.
+ *
+ * The EC-155 reference index is attached to the shared event bus here, so any
+ * document/graph/publishing command issued anywhere in the studio keeps the
+ * index maintained.
+ */
+export interface StudioOperations {
+    readonly operations: OperationsClient;
+    readonly changesets: ChangesetOperations;
+    /**
+     * The raw adapter, exposed for *transport and read paths only*: blob byte
+     * upload/download (`adapter.blobs`) and existing read stores. Studio code
+     * must not call repository write methods on it — writes go through
+     * `operations`.
+     */
+    readonly adapter: PersistenceAdapter;
+    /** EC-155 maintained-on-write index attachment (flushable in tests). */
+    readonly references: ReferenceIndexAttachment;
+}
+export interface CreateStudioOperationsOptions {
+    /**
+     * The signed-in principal (EC-150). When present, the EC-150 role hook
+     * (`createRoleAuthorization` over `adapter.members`) becomes the
+     * authorization chokepoint for every command and query — viewers get
+     * structured denials on mutations, editors on administration. Without an
+     * actor the client runs pass-through (seeds, fixtures, tests that exercise
+     * domain logic rather than permissions); the route guard keeps
+     * unauthenticated users away from every operation surface.
+     */
+    actor?: Principal;
+}
+/** Build a studio operations bundle over an adapter (exported for tests). */
+export declare function createStudioOperations(adapter: PersistenceAdapter, options?: CreateStudioOperationsOptions): StudioOperations;
+/**
+ * The shared studio operations client for the active backend (lazily
+ * bootstrapped, cached per deployment). In-memory mode this owns the one seeded
+ * adapter the whole session mutates; against Convex it owns one client per
+ * deployment — the active project (EC-179) selects which.
+ */
+export declare function getStudioOperations(): Promise<StudioOperations>;
+/**
+ * Bind (or clear) the session principal (EC-150). Called by the auth context
+ * on sign-in/sign-out. Rebuilds the operations clients over the *same* adapters
+ * — the persisted state (and, in-memory, the whole session's edits) survives;
+ * only the authorization identity changes. All cached backends are rebuilt so a
+ * later switch picks up the new actor too.
+ */
+export declare function setStudioSession(actor: Principal | null): void;
+/** Test seam: replace (or clear) the singleton for the active backend. */
+export declare function setStudioOperationsForTests(next: StudioOperations | null): void;

package/dist/lib/operations/studio-operations.js

@@ -0,0 +1,92 @@
+import { activeDeploymentKey, selectPersistenceAdapter } from '../persistence';
+import { studioManifestLookup } from '../registry';
+import { attachConfiguredRevalidationWebhooks } from '../webhooks';
+import { attachReferenceIndex, createChangesets, createOperations, createRoleAuthorization, } from './operations-package';
+/** Build a studio operations bundle over an adapter (exported for tests). */
+export function createStudioOperations(adapter, options = {}) {
+    const authorized = options.actor
+        ? { actor: options.actor, authorize: createRoleAuthorization(adapter.members) }
+        : {};
+    const operations = createOperations({ adapter, ...authorized });
+    // EC-190: thread the live registry as a manifest lookup so relation/asset
+    // props inside compositions index field-type-driven (manifests are code,
+    // AD-11 — persistence never depends on the registry).
+    const references = attachReferenceIndex(operations.events, adapter, {
+        lookupManifest: studioManifestLookup(),
+    });
+    const changesets = createChangesets({ adapter, events: operations.events, ...authorized });
+    // EC-146 instant publish: when a host revalidate endpoint is configured via
+    // env, every successful publish-shaped command (document upsert/delete/
+    // setState, graph publish/unpublish) fires a signed revalidation webhook.
+    // No env (dev/tests) → no-op.
+    attachConfiguredRevalidationWebhooks(operations.events);
+    return { operations, changesets, adapter, references };
+}
+// One adapter + one operations bundle per backend (EC-179): keyed by the active
+// deployment so switching to a project on another Convex deployment selects (or
+// lazily builds) that backend's client, rather than reusing the first one.
+const adaptersByKey = new Map();
+const instancesByKey = new Map();
+let currentActor = null;
+/**
+ * The active backend key, tolerant of an unconfigured env: the real app never
+ * reaches `getStudioOperations` while misconfigured (the `BackendGate` renders a
+ * boot error first), but tests inject a bundle directly via the seam below — so
+ * a missing backend resolves to one stable key rather than throwing.
+ */
+function deploymentKey() {
+    try {
+        return activeDeploymentKey();
+    }
+    catch {
+        return '__unconfigured__';
+    }
+}
+function getAdapter(key) {
+    let adapter = adaptersByKey.get(key);
+    if (!adapter) {
+        adapter = selectPersistenceAdapter();
+        adaptersByKey.set(key, adapter);
+    }
+    return adapter;
+}
+/**
+ * The shared studio operations client for the active backend (lazily
+ * bootstrapped, cached per deployment). In-memory mode this owns the one seeded
+ * adapter the whole session mutates; against Convex it owns one client per
+ * deployment — the active project (EC-179) selects which.
+ */
+export function getStudioOperations() {
+    const key = deploymentKey();
+    let instance = instancesByKey.get(key);
+    if (!instance) {
+        const actor = currentActor;
+        instance = getAdapter(key).then((adapter) => createStudioOperations(adapter, actor ? { actor } : {}));
+        instancesByKey.set(key, instance);
+    }
+    return instance;
+}
+/**
+ * Bind (or clear) the session principal (EC-150). Called by the auth context
+ * on sign-in/sign-out. Rebuilds the operations clients over the *same* adapters
+ * — the persisted state (and, in-memory, the whole session's edits) survives;
+ * only the authorization identity changes. All cached backends are rebuilt so a
+ * later switch picks up the new actor too.
+ */
+export function setStudioSession(actor) {
+    if (currentActor?.id === actor?.id)
+        return; // same user (or both null) — keep the clients
+    currentActor = actor;
+    instancesByKey.clear();
+}
+/** Test seam: replace (or clear) the singleton for the active backend. */
+export function setStudioOperationsForTests(next) {
+    if (next) {
+        instancesByKey.set(deploymentKey(), Promise.resolve(next));
+        return;
+    }
+    instancesByKey.clear();
+    adaptersByKey.clear();
+    currentActor = null;
+}
+//# sourceMappingURL=studio-operations.js.map

package/dist/lib/operations/studio-operations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"studio-operations.js","sourceRoot":"","sources":["../../../src/lib/operations/studio-operations.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAA;AAC9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,EAAE,oCAAoC,EAAE,MAAM,aAAa,CAAA;AAClE,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,sBAAsB,CAAA;AAgD7B,6EAA6E;AAC7E,MAAM,UAAU,sBAAsB,CACpC,OAA2B,EAC3B,UAAyC,EAAE;IAE3C,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK;QAC9B,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,uBAAuB,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;QAC/E,CAAC,CAAC,EAAE,CAAA;IACN,MAAM,UAAU,GAAG,gBAAgB,CAAC,EAAE,OAAO,EAAE,GAAG,UAAU,EAAE,CAAC,CAAA;IAC/D,0EAA0E;IAC1E,yEAAyE;IACzE,sDAAsD;IACtD,MAAM,UAAU,GAAG,oBAAoB,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE;QAClE,cAAc,EAAE,oBAAoB,EAAE;KACvC,CAAC,CAAA;IACF,MAAM,UAAU,GAAG,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC,CAAA;IAC1F,4EAA4E;IAC5E,wEAAwE;IACxE,0EAA0E;IAC1E,8BAA8B;IAC9B,oCAAoC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;IACvD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,CAAA;AACxD,CAAC;AAED,gFAAgF;AAChF,gFAAgF;AAChF,2EAA2E;AAC3E,MAAM,aAAa,GAAG,IAAI,GAAG,EAAuC,CAAA;AACpE,MAAM,cAAc,GAAG,IAAI,GAAG,EAAqC,CAAA;AACnE,IAAI,YAAY,GAAqB,IAAI,CAAA;AAEzC;;;;;GAKG;AACH,SAAS,aAAa;IACpB,IAAI,CAAC;QACH,OAAO,mBAAmB,EAAE,CAAA;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,kBAAkB,CAAA;IAC3B,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACpC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,GAAG,wBAAwB,EAAE,CAAA;QACpC,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IACjC,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB;IACjC,MAAM,GAAG,GAAG,aAAa,EAAE,CAAA;IAC3B,IAAI,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACtC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,YAAY,CAAA;QAC1B,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAC1C,sBAAsB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACxD,CAAA;QACD,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IACnC,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAuB;IACtD,IAAI,YAAY,EAAE,EAAE,KAAK,KAAK,EAAE,EAAE;QAAE,OAAM,CAAC,8CAA8C;IACzF,YAAY,GAAG,KAAK,CAAA;IACpB,cAAc,CAAC,KAAK,EAAE,CAAA;AACxB,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,2BAA2B,CAAC,IAA6B;IACvE,IAAI,IAAI,EAAE,CAAC;QACT,cAAc,CAAC,GAAG,CAAC,aAAa,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;QAC1D,OAAM;IACR,CAAC;IACD,cAAc,CAAC,KAAK,EAAE,CAAA;IACtB,aAAa,CAAC,KAAK,EAAE,CAAA;IACrB,YAAY,GAAG,IAAI,CAAA;AACrB,CAAC"}

package/dist/lib/persistence/backend-mode.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Studio backend mode resolution (EC-153). Convex is the **default and primary**
+ * persistence backend; the deterministic in-memory adapter is demoted to an
+ * explicit, labeled **playground** mode and is never an automatic fallback:
+ *
+ * - `VITE_CONVEX_URL` set → Convex mode (the production/dev default).
+ * - `VITE_ELYTRA_MODE=playground` → playground mode (seeded in-memory adapter,
+ *   local + ephemeral). The flag wins over a configured URL — explicit beats
+ *   implicit — so a checked-out `.env.local` can be flipped without deleting it.
+ * - Neither → **misconfigured**: the studio renders a deterministic boot-error
+ *   screen (see `BackendGate`) telling the developer exactly what to set.
+ *   Likewise, a Convex backend that is unreachable at runtime is a visible
+ *   error state — the studio never silently swaps in in-memory storage.
+ */
+export declare const MODE_ENV_VAR = "VITE_ELYTRA_MODE";
+export declare const PLAYGROUND_MODE = "playground";
+export declare const CONVEX_URL_ENV_VAR = "VITE_CONVEX_URL";
+export type StudioBackendMode = 'convex' | 'playground';
+export type StudioBackendConfig = {
+    kind: 'convex';
+    url: string;
+} | {
+    kind: 'playground';
+} | {
+    kind: 'misconfigured';
+    reason: 'missing-convex-url' | 'unknown-mode';
+    detail: string;
+};
+/** The studio's env surface: Vite client env first, Node/SSR env second. */
+export type EnvRecord = Record<string, string | undefined>;
+/**
+ * Test seam: pin the env the selectors see. `vi.stubEnv` cannot reach the
+ * `import.meta.env` snapshot Vitest hands this module, so suites that exercise
+ * `selectPersistenceAdapter`/`selectAuthAdapter` against specific configurations
+ * use this instead — keeping results independent of any developer `.env.local`.
+ */
+export declare function setStudioEnvOverrideForTests(env: EnvRecord | null): void;
+/** Resolve the configured studio env (Vite client env wins over process.env). */
+export declare function studioEnv(): EnvRecord;
+/**
+ * Pure mode decision — testable with a plain env record. The app calls it with
+ * {@link studioEnv}; `CONVEX_URL` (Node-side alias) is honored for SSR/tools.
+ */
+export declare function resolveBackendConfig(env?: EnvRecord): StudioBackendConfig;
+/** True when the studio runs in the explicit, labeled playground mode. */
+export declare function isPlaygroundMode(): boolean;
+/** `email:password` for unattended dev sign-in (gitignored `.env.local`). */
+export declare const DEV_LOGIN_ENV_VAR = "VITE_ELYTRA_DEV_LOGIN";
+/** Parsed dev auto-login credentials. */
+export interface DevAutoLoginCredentials {
+    email: string;
+    password: string;
+}
+/**
+ * Dev-only unattended auth — **not a bypass**. When `VITE_ELYTRA_DEV_LOGIN=
+ * email:password` is set in a dev build, the studio auto-signs-in with those
+ * credentials on load (see {@link DevAutoLoginAdapter}) so local/automated
+ * testing skips the sign-in screen while still establishing a REAL backend
+ * session: Convex's server-side `requireRole` guards still apply, so the dev
+ * user must exist and be a member. Returns null in production builds (gated by
+ * {@link isViteDevBuild}) and when unset/malformed, so it can never weaken a
+ * deployed app. `isDevBuild` is a parameter purely so the decision is unit
+ * testable (`import.meta.env.DEV` is not reachable via `vi.stubEnv`).
+ *
+ * `password` may itself contain `:` — only the first colon separates the fields.
+ */
+export declare function resolveDevAutoLogin(env?: EnvRecord, isDevBuild?: boolean): DevAutoLoginCredentials | null;
+/** True when dev auto-login is configured (dev build only) — for the UI marker. */
+export declare function isDevAutoLoginActive(): boolean;