@elytracms/studio 0.0.103 → 0.0.104

package/convex/ingest.test.ts

@@ -10,13 +10,14 @@ import {
   signedIngestRequest,
 } from '@elytracms/core/ingest'
 import type { IngestHandlerResult, IngestPayload } from '@elytracms/core/ingest'
-import { defineRecordKind } from '@elytracms/core/persistence'
+import { defineRecordKind, resolveRecordQuery } from '@elytracms/core/persistence'
 import schema from './schema'
 import { internalMutation } from './functions'
 import { defineStudioHttp } from './http'
 import { CONVEX_MAX_NESTING_DEPTH, measureMaxDepth } from '@elytracms/core/cms-core'
 import {
   claimIngestUploads,
+  ingestBindingRecordKind,
   ingestHandlerArgs,
   parseIngestPayload,
   recordIngestUpload,
@@ -24,7 +25,7 @@ import {
   unclaimedIngestUploads,
 } from './ingest'
 import type { IngestHandlerRef } from './ingest'
-import { saveRecord } from './record-functions'
+import { findRecordDoc, saveRecord } from './record-functions'
 import { createIngestRoute } from '../../next/src/ingest'
 
 beforeEach(() => {
@@ -80,7 +81,7 @@ const testIngestModule = {
       // EC-750: the row's id first — the claim binds every file to it (the owner release is asked for).
       const id = `sub_${(await ctx.db.query('records').collect()).length + 1}`
       // EC-695: one call for every upload, after every check that can refuse — all bound or none.
-      const claim = await claimIngestUploads(ctx, payload.uploads ?? [], payload.target, args.receivedAt, id)
+      const claim = await claimIngestUploads(ctx, payload.uploads ?? [], payload.target, args.receivedAt, testSubmissionKind, id)
       if (!claim.ok) return claim
       const files = claim.files.map((file) => file.storageId)
       await saveRecord(
@@ -98,11 +99,56 @@ const testIngestModule = {
 const handle = makeFunctionReference<'mutation'>('testIngest:handle') as unknown as IngestHandlerRef
 const silentAuth = { addHttpRoutes: () => {} }
 
+/**
+ * EC-762 (Codex r10 F51) — a third-party addon whose ONE submission handler writes two record
+ * kinds, each row under an EXPLICIT id the payload names (the records API accepts any nonempty
+ * id; ids are unique only within a kind). The target names the kind.
+ */
+const attachmentRequestKind = defineRecordKind({
+  kind: 'attachmentRequest',
+  module: 'testCases',
+  fields: { note: z.string().min(1), files: z.array(z.string()).optional() },
+})
+const supportCaseKind = defineRecordKind({
+  kind: 'supportCase',
+  module: 'testCases',
+  fields: { note: z.string().min(1), files: z.array(z.string()).optional() },
+})
+const caseKindOf = (target: string) =>
+  target === 'attachmentRequest' ? attachmentRequestKind : target === 'supportCase' ? supportCaseKind : undefined
+
+const testCasesModule = {
+  handle: internalMutation({
+    args: ingestHandlerArgs,
+    handler: async (ctx, args): Promise<IngestHandlerResult> => {
+      const payload: IngestPayload = parseIngestPayload(args.payload)
+      if (payload.kind === 'upload') {
+        return recordIngestUpload(ctx, payload, args.receivedAt, { maxBytes: 1000, contentTypes: ['image/*'] })
+      }
+      if (payload.kind !== 'submission') return { ok: false, status: 422, message: 'Not a submission.' }
+      const kind = caseKindOf(payload.target)
+      if (!kind) return { ok: false, status: 404, message: `No case kind “${payload.target}”.` }
+      const id = payload.data['id']
+      if (typeof id !== 'string' || id.length === 0) return { ok: false, status: 422, message: 'An id is required.' }
+      const claim = await claimIngestUploads(ctx, payload.uploads ?? [], payload.target, args.receivedAt, kind, id)
+      if (!claim.ok) return claim
+      const files = claim.files.map((file) => file.storageId)
+      await saveRecord(ctx, kind, id, { note: payload.target, ...(files.length ? { files } : {}) }, {
+        createdAt: args.receivedAt,
+        updatedAt: args.receivedAt,
+      })
+      return { ok: true, id }
+    },
+  }),
+}
+const casesHandle = makeFunctionReference<'mutation'>('testCases:handle') as unknown as IngestHandlerRef
+
 function backend(handlers: Parameters<typeof defineStudioHttp>[0]['ingest'] = { submission: handle }) {
   return convexTest(schema, {
     ...import.meta.glob(['./**/*.ts', '!./**/*.test.ts', '!./_generated/**']),
     './_generated/api.ts': async () => ({}),
     './testIngest.ts': async () => testIngestModule,
+    './testCases.ts': async () => testCasesModule,
     './http.ts': async () => ({ default: defineStudioHttp({ auth: silentAuth, ingest: handlers }) }),
   })
 }
@@ -456,13 +502,13 @@ describe('the claim binds only this intent’s bytes; release deletes only bound
     const assetFile = await storeFile(t, 400, 'image/png')
     await insertAsset(t, { storageKey: assetFile })
     expect(await owners(t)).toEqual({ [own]: owner, [other]: otherOwner })
-    const released = await t.run((ctx) => releaseIngestUploads(ctx, owner))
+    const released = await t.run((ctx) => releaseIngestUploads(ctx, testSubmissionKind, owner))
     expect(released).toEqual({ deleted: [own], kept: [] })
     expect([await stored(t, own), await stored(t, other), await stored(t, assetFile)]).toEqual([false, true, true])
     expect(await bindings(t)).toEqual([{ storageId: other, uploadId: theirs }])
     // An owner with nothing bound any more (released already, or a row that never claimed) deletes nothing.
-    expect(await t.run((ctx) => releaseIngestUploads(ctx, owner))).toEqual({ deleted: [], kept: [] })
-    expect(await t.run((ctx) => releaseIngestUploads(ctx, 'sub_never'))).toEqual({ deleted: [], kept: [] })
+    expect(await t.run((ctx) => releaseIngestUploads(ctx, testSubmissionKind, owner))).toEqual({ deleted: [], kept: [] })
+    expect(await t.run((ctx) => releaseIngestUploads(ctx, testSubmissionKind, 'sub_never'))).toEqual({ deleted: [], kept: [] })
   })
 
   // EC-685 (Codex r4 F20, ordering 2): a fact checked at claim time is not permanent — an
@@ -495,7 +541,7 @@ describe('the claim binds only this intent’s bytes; release deletes only bound
     )
     // An editor promotes two of the uploads to an asset (its file and its preview) — after the claims.
     await insertAsset(t, { storageKey: promoted, thumb: preview })
-    const released = await t.run((ctx) => releaseIngestUploads(ctx, owner))
+    const released = await t.run((ctx) => releaseIngestUploads(ctx, testSubmissionKind, owner))
     expect(released).toEqual({ deleted: [unreferenced], kept: [promoted, preview] })
     expect([await stored(t, promoted), await stored(t, preview), await stored(t, unreferenced)]).toEqual([true, true, false])
     expect(await bindings(t)).toEqual([]) // ownership passed: no binding is left to hold the asset's bytes
@@ -520,7 +566,7 @@ describe('the claim binds only this intent’s bytes; release deletes only bound
     await t.run(async (ctx) => {
       for (const row of await ctx.db.query('assets').collect()) await ctx.db.delete(row._id)
     })
-    expect(await t.run((ctx) => releaseIngestUploads(ctx, owner))).toEqual({ deleted: [own], kept: [] })
+    expect(await t.run((ctx) => releaseIngestUploads(ctx, testSubmissionKind, owner))).toEqual({ deleted: [own], kept: [] })
     expect(await stored(t, own)).toBe(false)
   })
 
@@ -625,10 +671,17 @@ describe('the claim binds only this intent’s bytes; release deletes only bound
     const own = await storeFile(t, 400, 'image/png')
     const owner = await ownerOf(await claimWith(t, uploadId, own))
     const row = await t.run(async (ctx) => (await ctx.db.query('records').collect()).find((r) => r.kind === 'ingestBinding')!)
-    expect(row.data).toEqual({ uploadId, target: 'contact', owner, boundAt: '2026-10-26T12:00:00.000Z' })
-    // EC-750: the owner fills the static `key1` slot (`by_kind_key1`) — no schema or index change.
-    expect(row.key1).toBe(owner)
-    expect(row.key2).toBeUndefined()
+    expect(row.data).toEqual({ uploadId, target: 'contact', ownerKind: 'testSubmission', owner, boundAt: '2026-10-26T12:00:00.000Z' })
+    // EC-762: the owner's kind fills the static `key1` slot and its id `key2`, read together
+    // through the existing `by_kind_keys` index — no schema or index change.
+    expect(row.key1).toBe('testSubmission')
+    expect(row.key2).toBe(owner)
+    expect(resolveRecordQuery(ingestBindingRecordKind, { where: { ownerKind: 'testSubmission', owner } })).toEqual({
+      index: 'by_kind_keys',
+      key1: 'testSubmission',
+      key2: owner,
+      order: 'asc',
+    })
     expect(measureMaxDepth(row).depth).toBe(2) // the row object → `data` → its string columns
     expect(measureMaxDepth(row).depth).toBeLessThanOrEqual(CONVEX_MAX_NESTING_DEPTH)
   })
@@ -643,7 +696,7 @@ describe('the claim binds only this intent’s bytes; release deletes only bound
       ),
     )
   const claimDirect = (t: ReturnType<typeof backend>, claims: { uploadId: string; storageId: string }[]) =>
-    t.run((ctx) => claimIngestUploads(ctx, claims, 'contact', '2026-10-26T12:00:00.000Z', 'sub_direct'))
+    t.run((ctx) => claimIngestUploads(ctx, claims, 'contact', '2026-10-26T12:00:00.000Z', testSubmissionKind, 'sub_direct'))
 
   it('EC-695: a submission with one refused claim binds NOTHING — the claims before it stay issued; nothing is deleted', async () => {
     env()['ELYTRA_INGEST_SECRET'] = SECRET
@@ -713,6 +766,148 @@ describe('the claim binds only this intent’s bytes; release deletes only bound
   })
 })
 
+/**
+ * EC-762 (Codex r10 F51) — the first EXECUTABLE probe of F51's static trace. A record is
+ * identified by its kind AND its id (`record-functions.ts`, `findRecordDoc`), and an explicit id
+ * is unique only within its kind. One third-party handler writes `attachmentRequest/same` and
+ * `supportCase/same`, each claiming its OWN upload; removing one must not delete the other's.
+ */
+describe('EC-762 probe — an upload’s owner is the record’s kind AND id (Codex r10 F51)', () => {
+  const REMOVED_AT = '2026-10-26T12:00:00.000Z'
+  async function declareFor(t: ReturnType<typeof backend>, target: string): Promise<string> {
+    const intent = { kind: 'upload', target, field: 'cv', contentType: 'image/png', size: 500, sha256: await sha256Of(400) } as const
+    const answer = await signedPost(t, intent)
+    expect(answer.status).toBe(200)
+    return ((await answer.json()) as { uploadId: string }).uploadId
+  }
+  /** A genuine case of `target`'s kind under the explicit id `id`, claiming one upload of its own. Returns its file. */
+  async function genuineCase(t: ReturnType<typeof backend>, target: string, id: string): Promise<string> {
+    const uploadId = await declareFor(t, target)
+    const file = await storeFile(t, 400, 'image/png')
+    const answer = await signedPost(t, { kind: 'submission', target, data: { id }, uploads: [{ uploadId, storageId: file }] })
+    expect(answer.status).toBe(200)
+    expect(await answer.json()).toEqual({ ok: true, id })
+    return file
+  }
+  /** The addon's removal of one row: release what it claimed, then delete it. */
+  const removeCase = (t: ReturnType<typeof backend>, kind: typeof attachmentRequestKind, id: string) =>
+    t.run(async (ctx) => {
+      const released = await releaseIngestUploads(ctx, kind, id)
+      const doc = await findRecordDoc(ctx, kind, id)
+      if (doc) await ctx.db.delete(doc._id)
+      return released
+    })
+  const caseBindings = (t: ReturnType<typeof backend>) =>
+    t.run(async (ctx) =>
+      (await ctx.db.query('records').collect())
+        .filter((row) => row.kind === 'ingestBinding')
+        .map((row) => {
+          const data = row.data as { ownerKind?: string; owner?: string }
+          return { storageId: row.recordId, ownerKind: data.ownerKind, owner: data.owner }
+        }),
+    )
+  async function twoKindsOneId() {
+    env()['ELYTRA_INGEST_SECRET'] = SECRET
+    const t = backend({ submission: casesHandle })
+    const a = await genuineCase(t, 'attachmentRequest', 'same')
+    const b = await genuineCase(t, 'supportCase', 'same')
+    return { t, a, b }
+  }
+
+  /** A binding row as an earlier release wrote it, straight into the table. */
+  const plantBinding = (t: ReturnType<typeof backend>, storageId: string, data: Record<string, string>, key1?: string) =>
+    t.run(async (ctx) => {
+      await ctx.db.insert('records', {
+        kind: 'ingestBinding',
+        recordId: storageId,
+        data: { uploadId: `upload_${storageId}`, target: 'attachmentRequest', boundAt: REMOVED_AT, ...data },
+        ...(key1 !== undefined ? { key1 } : {}),
+        at: REMOVED_AT,
+        createdAt: REMOVED_AT,
+        updatedAt: REMOVED_AT,
+      })
+    })
+  async function asEditor(t: ReturnType<typeof backend>) {
+    await t.run(async (ctx) => {
+      await ctx.db.insert('members', { userId: 'user_editor', role: 'admin', createdAt: REMOVED_AT, updatedAt: REMOVED_AT })
+    })
+    return t.withIdentity({ subject: 'user_editor', issuer: 'https://convex.test' })
+  }
+  const deleteBlob = makeFunctionReference<'mutation', { storageKey: string }, unknown>('assets:deleteBlob')
+
+  it('a claim binds each file to its owner’s kind AND id', async () => {
+    const { t, a, b } = await twoKindsOneId()
+    expect(await caseBindings(t)).toEqual([
+      { storageId: a, ownerKind: 'attachmentRequest', owner: 'same' }, // base: ownerKind undefined
+      { storageId: b, ownerKind: 'supportCase', owner: 'same' },
+    ])
+  })
+
+  it('Codex’s trace: removing attachmentRequest/same keeps supportCase/same’s bytes and binding', async () => {
+    const { t, a, b } = await twoKindsOneId()
+    // Measured on the base (7c2e9261), counterexample form: `{ deleted: [a, b], kept: [] }`, both files gone, no binding left.
+    expect(await removeCase(t, attachmentRequestKind, 'same')).toEqual({ deleted: [a], kept: [] })
+    expect([await stored(t, a), await stored(t, b)]).toEqual([false, true])
+    expect(await caseBindings(t)).toEqual([{ storageId: b, ownerKind: 'supportCase', owner: 'same' }])
+    // supportCase/same still holds its file; its own removal deletes it (below).
+  })
+
+  it('control: removing the owner itself (same kind, same id) deletes its file and binding — the instrument sees a deletion', async () => {
+    const { t, a, b } = await twoKindsOneId()
+    const released = await removeCase(t, supportCaseKind, 'same')
+    expect(released.deleted).toContain(b)
+    expect(await stored(t, b)).toBe(false)
+    expect((await caseBindings(t)).map((binding) => binding.storageId)).not.toContain(b)
+    // …and after both rows are removed nothing is left: no residue.
+    await removeCase(t, attachmentRequestKind, 'same')
+    expect([await stored(t, a), await stored(t, b)]).toEqual([false, false])
+    expect(await caseBindings(t)).toEqual([])
+  })
+
+  it('a KIND-LESS binding (written before bindings recorded the owner’s kind) is never deleted — residue, never loss; it still holds its bytes', async () => {
+    const { t, a } = await twoKindsOneId()
+    const kindless = await storeFile(t, 300, 'image/png')
+    await plantBinding(t, kindless, { owner: 'same' }, 'same') // the shape EC-750 wrote: `owner` in `key1`, no kind
+    expect(await removeCase(t, attachmentRequestKind, 'same')).toEqual({ deleted: [a], kept: [] }) // base: deleted the kind-less file too
+    expect(await stored(t, kindless)).toBe(true)
+    expect((await caseBindings(t)).filter((binding) => binding.storageId === kindless)).toEqual([
+      { storageId: kindless, ownerKind: undefined, owner: 'same' },
+    ])
+    const editor = await asEditor(t)
+    expect(await editor.mutation(deleteBlob, { storageKey: kindless })).toEqual({ deleted: false, heldBy: 'ingest' })
+    expect(await stored(t, kindless)).toBe(true)
+  })
+
+  it('control: an OWNER-LESS binding (written before EC-750) is never deleted', async () => {
+    const { t, a } = await twoKindsOneId()
+    const ownerless = await storeFile(t, 300, 'image/png')
+    await plantBinding(t, ownerless, {})
+    await removeCase(t, attachmentRequestKind, 'same')
+    await removeCase(t, supportCaseKind, 'same')
+    expect([await stored(t, a), await stored(t, ownerless)]).toEqual([false, true])
+    expect(await caseBindings(t)).toEqual([{ storageId: ownerless, ownerKind: undefined, owner: undefined }])
+  })
+
+  it('assets:deleteBlob still keeps bytes a binding holds — after attachmentRequest/same’s removal, supportCase/same’s binding protects its file', async () => {
+    const { t, b } = await twoKindsOneId()
+    await removeCase(t, attachmentRequestKind, 'same')
+    await t.run(async (ctx) => {
+      await ctx.db.insert('assets', {
+        assetId: 'asset_case',
+        filename: 'case.png',
+        contentType: 'image/png',
+        byteSize: 400,
+        storageKey: b,
+        createdAt: REMOVED_AT,
+        updatedAt: REMOVED_AT,
+      })
+    })
+    const editor = await asEditor(t)
+    expect(await editor.mutation(deleteBlob, { storageKey: b })).toEqual({ deleted: false, heldBy: 'ingest' }) // base: the bytes were already gone
+    expect(await stored(t, b)).toBe(true)
+  })
+})
+
 describe('the site’s route → the receiver, end to end (EC-617)', () => {
   it('a visitor’s submission through createIngestRoute lands a record; a mismatched site secret is a 502', async () => {
     env()['ELYTRA_INGEST_SECRET'] = SECRET

package/convex/ingest.ts

@@ -16,6 +16,7 @@ import {
 } from '@elytracms/core/ingest'
 import type { IngestHandlerResult, IngestPayload, IngestUploadClaim } from '@elytracms/core/ingest'
 import { defineRecordKind, resolveRecordQuery } from '@elytracms/core/persistence'
+import type { AnyRecordKind } from '@elytracms/core/persistence'
 import { createUuidIdFactory } from '@elytracms/core/determinism'
 import type { MutationCtx, QueryCtx } from './functions'
 import { findRecordDoc, listRecordWire, queryRecordDocs, saveRecord } from './record-functions'
@@ -44,8 +45,8 @@ import { findRecordDoc, listRecordWire, queryRecordDocs, saveRecord } from './re
  *    claims its stored files with {@link claimIngestUploads}, which checks that the deployment
  *    stored each for ITS intent (EC-671) — its bytes the ones the upload request declared by
  *    SHA-256 (EC-685) — and that it matches the declared size and type, and binds them all or
- *    none (EC-695) to the record that claims them (EC-750); {@link releaseIngestUploads}, asked
- *    for that record, is the only way such bytes are deleted.
+ *    none (EC-695) to the record that claims them, by its kind and id (EC-750, EC-762);
+ *    {@link releaseIngestUploads}, asked for that record, is the only way such bytes are deleted.
  *
  * The engine never imports an addon: the handler is an internal-mutation REFERENCE the
  * consumer passes in its one `http.ts` line (`defineStudioHttp({ auth, ingest: {
@@ -197,9 +198,11 @@ export function ingestReceiver(handlers: IngestHandlers = {}): PublicHttpAction
 // which deletes only what a claim bound.
 //
 // EC-750 (Codex r9 F46) — bound to WHOM. A binding records the record that claimed the file
-// (`owner`), and release is asked for an owner, never for storage ids: removing a row deletes
-// only the files that row claimed. Before, release took the removed row's `files` ids — a column
-// a whole-record write can fill with another row's file — and deleted any bound one.
+// — EC-762 (Codex r10 F51): its kind AND its id (`ownerKind` + `owner`), the identity the records
+// table declares — and release is asked for that owner, never for storage ids: removing a row
+// deletes only the files that row claimed. Before EC-750, release took the removed row's `files`
+// ids — a column a whole-record write can fill with another row's file — and deleted any bound
+// one; before EC-762, it took the id alone, so a row of another kind sharing the id lost its files.
 //
 // EC-685 — causation. Eligibility (stored after the intent, unbound, no asset's) is not
 // ownership: with intents A and B open, bytes stored through B's URL were eligible for A. So
@@ -243,23 +246,34 @@ export const ingestUploadRecordKind = defineRecordKind({
  * claim's transaction; read by the claim (a file another claim bound is refused) and by
  * {@link releaseIngestUploads}. Engine-internal (no public functions), like the intent.
  *
- * EC-750 (Codex r9 F46) — and WHOSE: `owner` is the id of the record that claimed the file (a
- * forms submission), its `key1` slot, so "this record's files" is one indexed read
- * (`by_kind_key1`) and release asks that question, never "is this id bound?". `target` is the
- * intent's (the form every submission to it shares), so it cannot say whose a file is. A
- * binding written before EC-750 has no owner and no slot: no release reads it, so it is never
- * deleted and keeps protecting its bytes from `assets:deleteBlob` (residue, never loss — EC-671's
- * no-migration precedent).
+ * EC-750 (Codex r9 F46) — and WHOSE: the record that claimed the file (a forms submission), so
+ * release asks "this record's files", never "is this id bound?". `target` is the intent's (the
+ * form every submission to it shares), so it cannot say whose a file is.
+ *
+ * EC-762 (Codex r10 F51) — a record is its kind AND its id (the records table's `kind` +
+ * `recordId`; an explicit id is unique only within its kind), so the owner is both:
+ * `ownerKind` (the owning kind's name) in the `key1` slot and `owner` (its id) in `key2`, read
+ * TOGETHER through the existing `by_kind_keys` index. Two rows of different kinds sharing an id
+ * never share a binding. Two string columns, never one object column (a key slot holds a
+ * string: an object would stringify to the same `[object Object]` for every owner) and never a
+ * composite string (a second encoding of an identity the table already stores as two columns).
+ *
+ * Bindings of earlier releases are never read by a release, so never deleted: one written before
+ * EC-750 has no owner and no slot, one written before EC-762 has its owner's id in `key1` and no
+ * `key2`. Each keeps protecting its bytes from `assets:deleteBlob` (residue, never loss —
+ * EC-671's no-migration precedent; no owner-only fallback, which would re-open F51).
  */
 export const ingestBindingRecordKind = defineRecordKind({
   kind: 'ingestBinding',
   module: 'ingest',
-  keys: ['owner'],
+  keys: ['ownerKind', 'owner'],
   time: 'boundAt',
   fields: {
     uploadId: z.string().min(1),
     target: z.string().min(1),
-    /** EC-750: the id of the record that claimed the file — what {@link releaseIngestUploads} is asked for. */
+    /** EC-762: the KIND of the record that claimed the file (its declaration's `kind`). */
+    ownerKind: z.string().min(1),
+    /** EC-750: the id of the record that claimed the file — with `ownerKind`, what {@link releaseIngestUploads} is asked for. */
     owner: z.string().min(1),
     boundAt: z.string().min(1),
   },
@@ -421,17 +435,20 @@ async function assetReferencesStorage(ctx: MutationCtx, storageId: string): Prom
  * mutation that RETURNS commits its writes (a claim made before a later refusal stays bound with
  * no row to hold it); one that THROWS commits nothing.
  *
- * EC-750: `owner` is the id of the record the handler is about to write — mint it BEFORE the
- * claim. Every binding records it, and {@link releaseIngestUploads} deletes a file only for the
- * owner that claimed it: a row naming another row's file (an editor's whole-record write can
- * put any id in its `files`) never deletes it.
+ * EC-750 / EC-762: the owner is the record the handler is about to write — its kind's
+ * declaration (`ownerKind`) and its id (`ownerId`, minted BEFORE the claim). Every binding records
+ * both, and {@link releaseIngestUploads} deletes a file only for the owner that claimed it: a row
+ * naming another row's file (an editor's whole-record write can put any id in its `files`) never
+ * deletes it, nor does a row of another kind that happens to share the id. The declaration, not a
+ * string: a misspelt kind cannot compile into bindings no release ever finds.
  */
 export async function claimIngestUploads(
   ctx: MutationCtx,
   claims: readonly IngestUploadClaim[],
   target: string,
   receivedAt: string,
-  owner: string,
+  ownerKind: AnyRecordKind,
+  ownerId: string,
 ): Promise<IngestUploadsClaimResult> {
   const accepted: AcceptedClaim[] = []
   for (const [index, claim] of claims.entries()) {
@@ -445,7 +462,7 @@ export async function claimIngestUploads(
       ctx,
       ingestBindingRecordKind,
       claim.storageId,
-      { uploadId: claim.uploadId, target, owner, boundAt: receivedAt },
+      { uploadId: claim.uploadId, target, ownerKind: ownerKind.kind, owner: ownerId, boundAt: receivedAt },
       stamps,
     )
     await saveRecord(ctx, ingestUploadRecordKind, claim.uploadId, { state: 'claimed', storageId: claim.storageId }, stamps)
@@ -537,13 +554,14 @@ async function judgeIngestUploadClaim(
 }
 
 /**
- * Delete the ingest bytes ONE record claimed (EC-671, EC-750) — the ONE way ingest bytes are
- * deleted. It is asked for an OWNER (the id {@link claimIngestUploads} bound the files to), never
- * for storage ids: it reads that owner's bindings by their key (`by_kind_key1`) and deletes each
- * file with its binding — so it never sees, and never writes, another owner's binding. A row's
- * `files` column is the visitor's and the editor's word (a whole-record write can name any id,
- * or clear the list), so release never reads it: a row naming another row's file deletes
- * nothing, and a row whose list was cleared still deletes what it claimed.
+ * Delete the ingest bytes ONE record claimed (EC-671, EC-750, EC-762) — the ONE way ingest bytes
+ * are deleted. It is asked for an OWNER — the kind's declaration and the id
+ * {@link claimIngestUploads} bound the files to — never for storage ids: it reads that owner's
+ * bindings by BOTH keys (`by_kind_keys`) and deletes each file with its binding — so it never
+ * sees, and never writes, another owner's binding, a row of another kind sharing the id
+ * included. A row's `files` column is the visitor's and the editor's word (a whole-record write
+ * can name any id, or clear the list), so release never reads it: a row naming another row's
+ * file deletes nothing, and a row whose list was cleared still deletes what it claimed.
  *
  * Of the owner's files it KEEPS, returned in `kept`:
  *
@@ -553,24 +571,27 @@ async function judgeIngestUploadClaim(
  *   asset's own delete removes them later. Read in this transaction, so no asset can acquire
  *   the file between the check and the delete.
  *
- * Never touched: a binding of another owner, and a binding written before EC-750 (no owner, no
- * key slot — residue, never loss; it keeps protecting its bytes from `assets:deleteBlob`).
+ * Never touched: a binding of another owner; a binding written before EC-750 (no owner, no key
+ * slot); one written before EC-762 (its owner's id alone, in `key1`, no `key2` — read by id
+ * alone it would be F51 again, so there is no such fallback). Residue, never loss: each keeps
+ * protecting its bytes from `assets:deleteBlob`.
  *
- * Call it when removing a row that holds claimed files — never for a refused submission, which
- * bound nothing ({@link claimIngestUploads}, EC-695). The mirror is `assets:deleteBlob`, which keeps bytes a binding holds
- * ({@link ingestBindingHolds}): each delete path re-checks the OTHER owner in its own
- * transaction.
+ * Call it when removing a row that holds claimed files, with that row's kind and id — never for
+ * a refused submission, which bound nothing ({@link claimIngestUploads}, EC-695). The mirror is
+ * `assets:deleteBlob`, which keeps bytes a binding holds ({@link ingestBindingHolds}): each
+ * delete path re-checks the OTHER owner in its own transaction.
  */
 export async function releaseIngestUploads(
   ctx: MutationCtx,
-  owner: string,
+  ownerKind: AnyRecordKind,
+  ownerId: string,
 ): Promise<{ deleted: string[]; kept: string[] }> {
   const deleted: string[] = []
   const kept: string[] = []
   const owned = await queryRecordDocs(
     ctx,
     ingestBindingRecordKind,
-    resolveRecordQuery(ingestBindingRecordKind, { where: { owner } }),
+    resolveRecordQuery(ingestBindingRecordKind, { where: { ownerKind: ownerKind.kind, owner: ownerId } }),
   )
   for (const binding of owned) {
     const storageId = binding.recordId

package/dist/components/builder/canvas-theme-notice.js

@@ -1,6 +1,7 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useState } from 'react';
 import { AlertTriangle, X } from 'lucide-react';
+import { elytraGuidePath } from '@elytracms/core/studio-core';
 import { translate } from '../../lib/i18n/index.js';
 import { isDevRuntime } from '../../lib/persistence/index.js';
 import { Row, Text } from '@elytracms/studio/ui';
@@ -30,6 +31,8 @@ const NOTICE_KEYS = {
     'no-theme-tokens': 'builder.canvasTheme.noThemeTokensNotice',
     'no-stylesheet': 'builder.canvasTheme.noStylesheetNotice',
 };
+/** EC-765: the notices point at the guide's theming chapter where the project has it installed. */
+const THEMING_CHAPTER = elytraGuidePath('13-theming.md');
 export function CanvasThemeNotice({ status }) {
     // Local state only forces the re-render on dismiss; the truth is module-level.
     const [, setDismissedAt] = useState(0);
@@ -38,7 +41,7 @@ export function CanvasThemeNotice({ status }) {
     const messageKey = NOTICE_KEYS[status.kind];
     if (!messageKey || dismissedKinds.has(status.kind))
         return null;
-    return (_jsx("div", { "data-testid": "canvas-theme-notice", "data-notice-kind": status.kind, className: "absolute top-4 left-1/2 z-20 w-max max-w-[min(460px,90%)] -translate-x-1/2", children: _jsx("div", { className: "rounded-lg border border-border bg-popover p-2 text-popover-foreground shadow-lg", children: _jsxs(Row, { gap: "2", align: "start", children: [_jsx(AlertTriangle, { className: "mt-0.5 size-3.5 shrink-0 text-warning", "aria-hidden": true }), _jsx(Text, { size: "xs", className: "min-w-0 flex-1", children: translate(messageKey) }), _jsx("button", { type: "button", "aria-label": translate('common.dismiss'), onClick: () => {
+    return (_jsx("div", { "data-testid": "canvas-theme-notice", "data-notice-kind": status.kind, className: "absolute top-4 left-1/2 z-20 w-max max-w-[min(460px,90%)] -translate-x-1/2", children: _jsx("div", { className: "rounded-lg border border-border bg-popover p-2 text-popover-foreground shadow-lg", children: _jsxs(Row, { gap: "2", align: "start", children: [_jsx(AlertTriangle, { className: "mt-0.5 size-3.5 shrink-0 text-warning", "aria-hidden": true }), _jsx(Text, { size: "xs", className: "min-w-0 flex-1", children: translate(messageKey, { guide: THEMING_CHAPTER }) }), _jsx("button", { type: "button", "aria-label": translate('common.dismiss'), onClick: () => {
                             dismissedKinds.add(status.kind);
                             setDismissedAt(Date.now());
                         }, className: "shrink-0 rounded p-0.5 text-muted-foreground hover:bg-muted hover:text-foreground", children: _jsx(X, { className: "size-3.5" }) })] }) }) }));

package/dist/components/builder/canvas-theme-notice.js.map

@@ -1 +1 @@
-{"version":3,"file":"canvas-theme-notice.js","sourceRoot":"","sources":["../../../src/components/builder/canvas-theme-notice.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAChC,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,MAAM,cAAc,CAAA;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AACpD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAA;AAGhD;;;;;;;;;;;;;;GAcG;AAEH,MAAM,cAAc,GAAG,IAAI,GAAG,EAA6B,CAAA;AAE3D,sDAAsD;AACtD,MAAM,UAAU,8BAA8B;IAC5C,cAAc,CAAC,KAAK,EAAE,CAAA;AACxB,CAAC;AAED,MAAM,WAAW,GAAuD;IACtE,MAAM,EAAE,kCAAkC;IAC1C,kBAAkB,EAAE,2CAA2C;IAC/D,iBAAiB,EAAE,yCAAyC;IAC5D,eAAe,EAAE,wCAAwC;CAC1D,CAAA;AAED,MAAM,UAAU,iBAAiB,CAAC,EAAE,MAAM,EAAwC;IAChF,+EAA+E;IAC/E,MAAM,CAAC,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAA;IACtC,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,EAAE;QAAE,OAAO,IAAI,CAAA;IAC3C,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAC3C,IAAI,CAAC,UAAU,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAE/D,OAAO,CACL,6BACc,qBAAqB,sBACf,MAAM,CAAC,IAAI,EAC7B,SAAS,EAAC,4EAA4E,YAEtF,cAAK,SAAS,EAAC,kFAAkF,YAC/F,MAAC,GAAG,IAAC,GAAG,EAAC,GAAG,EAAC,KAAK,EAAC,OAAO,aACxB,KAAC,aAAa,IAAC,SAAS,EAAC,uCAAuC,wBAAe,EAC/E,KAAC,IAAI,IAAC,IAAI,EAAC,IAAI,EAAC,SAAS,EAAC,gBAAgB,YACvC,SAAS,CAAC,UAAU,CAAC,GACjB,EACP,iBACE,IAAI,EAAC,QAAQ,gBACD,SAAS,CAAC,gBAAgB,CAAC,EACvC,OAAO,EAAE,GAAG,EAAE;4BACZ,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;4BAC/B,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;wBAC5B,CAAC,EACD,SAAS,EAAC,mFAAmF,YAE7F,KAAC,CAAC,IAAC,SAAS,EAAC,UAAU,GAAG,GACnB,IACL,GACF,GACF,CACP,CAAA;AACH,CAAC","sourcesContent":["import { useState } from 'react'\nimport { AlertTriangle, X } from 'lucide-react'\nimport { translate } from '../../lib/i18n'\nimport { isDevRuntime } from '../../lib/persistence'\nimport { Row, Text } from '@elytracms/studio/ui'\nimport type { CanvasThemeStatus } from './canvas-chrome'\n\n/**\n * EC-414 AD-D item 2 — the canvas-theme runtime notice, in the established\n * validation-surface style (the `ClipboardNoticeOverlay` shape: a dismissible,\n * NEVER-blocking overlay above the canvas, in the STUDIO document — studio UI\n * primitives are fine here, this is not in-frame chrome). Dev builds only:\n *\n *   - `legacy`: the probe found the merged pre-EC-414 canvas.css — a one-time\n *     notice naming the migration (the canvas keeps working exactly as before).\n *   - `stylesheet-error` / `no-theme-tokens` / `no-stylesheet`: the canvas\n *     stylesheet is broken or missing — the invalid state is named explicitly\n *     instead of silently rendering unstyled blocks.\n *\n * \"One-time\": dismissing a kind suppresses it for the rest of the studio\n * session (module state survives canvas remounts/navigation).\n */\n\nconst dismissedKinds = new Set<CanvasThemeStatus['kind']>()\n\n/** Test hook: reset the session-sticky dismissals. */\nexport function resetCanvasThemeNoticeForTests(): void {\n  dismissedKinds.clear()\n}\n\nconst NOTICE_KEYS: Partial<Record<CanvasThemeStatus['kind'], string>> = {\n  legacy: 'builder.canvasTheme.legacyNotice',\n  'stylesheet-error': 'builder.canvasTheme.stylesheetErrorNotice',\n  'no-theme-tokens': 'builder.canvasTheme.noThemeTokensNotice',\n  'no-stylesheet': 'builder.canvasTheme.noStylesheetNotice',\n}\n\nexport function CanvasThemeNotice({ status }: { status: CanvasThemeStatus | null }) {\n  // Local state only forces the re-render on dismiss; the truth is module-level.\n  const [, setDismissedAt] = useState(0)\n  if (!status || !isDevRuntime()) return null\n  const messageKey = NOTICE_KEYS[status.kind]\n  if (!messageKey || dismissedKinds.has(status.kind)) return null\n\n  return (\n    <div\n      data-testid=\"canvas-theme-notice\"\n      data-notice-kind={status.kind}\n      className=\"absolute top-4 left-1/2 z-20 w-max max-w-[min(460px,90%)] -translate-x-1/2\"\n    >\n      <div className=\"rounded-lg border border-border bg-popover p-2 text-popover-foreground shadow-lg\">\n        <Row gap=\"2\" align=\"start\">\n          <AlertTriangle className=\"mt-0.5 size-3.5 shrink-0 text-warning\" aria-hidden />\n          <Text size=\"xs\" className=\"min-w-0 flex-1\">\n            {translate(messageKey)}\n          </Text>\n          <button\n            type=\"button\"\n            aria-label={translate('common.dismiss')}\n            onClick={() => {\n              dismissedKinds.add(status.kind)\n              setDismissedAt(Date.now())\n            }}\n            className=\"shrink-0 rounded p-0.5 text-muted-foreground hover:bg-muted hover:text-foreground\"\n          >\n            <X className=\"size-3.5\" />\n          </button>\n        </Row>\n      </div>\n    </div>\n  )\n}\n"]}
+{"version":3,"file":"canvas-theme-notice.js","sourceRoot":"","sources":["../../../src/components/builder/canvas-theme-notice.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAChC,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,MAAM,cAAc,CAAA;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAC7D,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AACpD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAA;AAGhD;;;;;;;;;;;;;;GAcG;AAEH,MAAM,cAAc,GAAG,IAAI,GAAG,EAA6B,CAAA;AAE3D,sDAAsD;AACtD,MAAM,UAAU,8BAA8B;IAC5C,cAAc,CAAC,KAAK,EAAE,CAAA;AACxB,CAAC;AAED,MAAM,WAAW,GAAuD;IACtE,MAAM,EAAE,kCAAkC;IAC1C,kBAAkB,EAAE,2CAA2C;IAC/D,iBAAiB,EAAE,yCAAyC;IAC5D,eAAe,EAAE,wCAAwC;CAC1D,CAAA;AAED,mGAAmG;AACnG,MAAM,eAAe,GAAG,eAAe,CAAC,eAAe,CAAC,CAAA;AAExD,MAAM,UAAU,iBAAiB,CAAC,EAAE,MAAM,EAAwC;IAChF,+EAA+E;IAC/E,MAAM,CAAC,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAA;IACtC,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,EAAE;QAAE,OAAO,IAAI,CAAA;IAC3C,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAC3C,IAAI,CAAC,UAAU,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAE/D,OAAO,CACL,6BACc,qBAAqB,sBACf,MAAM,CAAC,IAAI,EAC7B,SAAS,EAAC,4EAA4E,YAEtF,cAAK,SAAS,EAAC,kFAAkF,YAC/F,MAAC,GAAG,IAAC,GAAG,EAAC,GAAG,EAAC,KAAK,EAAC,OAAO,aACxB,KAAC,aAAa,IAAC,SAAS,EAAC,uCAAuC,wBAAe,EAC/E,KAAC,IAAI,IAAC,IAAI,EAAC,IAAI,EAAC,SAAS,EAAC,gBAAgB,YACvC,SAAS,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,GAC7C,EACP,iBACE,IAAI,EAAC,QAAQ,gBACD,SAAS,CAAC,gBAAgB,CAAC,EACvC,OAAO,EAAE,GAAG,EAAE;4BACZ,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;4BAC/B,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;wBAC5B,CAAC,EACD,SAAS,EAAC,mFAAmF,YAE7F,KAAC,CAAC,IAAC,SAAS,EAAC,UAAU,GAAG,GACnB,IACL,GACF,GACF,CACP,CAAA;AACH,CAAC","sourcesContent":["import { useState } from 'react'\nimport { AlertTriangle, X } from 'lucide-react'\nimport { elytraGuidePath } from '@elytracms/core/studio-core'\nimport { translate } from '../../lib/i18n'\nimport { isDevRuntime } from '../../lib/persistence'\nimport { Row, Text } from '@elytracms/studio/ui'\nimport type { CanvasThemeStatus } from './canvas-chrome'\n\n/**\n * EC-414 AD-D item 2 — the canvas-theme runtime notice, in the established\n * validation-surface style (the `ClipboardNoticeOverlay` shape: a dismissible,\n * NEVER-blocking overlay above the canvas, in the STUDIO document — studio UI\n * primitives are fine here, this is not in-frame chrome). Dev builds only:\n *\n *   - `legacy`: the probe found the merged pre-EC-414 canvas.css — a one-time\n *     notice naming the migration (the canvas keeps working exactly as before).\n *   - `stylesheet-error` / `no-theme-tokens` / `no-stylesheet`: the canvas\n *     stylesheet is broken or missing — the invalid state is named explicitly\n *     instead of silently rendering unstyled blocks.\n *\n * \"One-time\": dismissing a kind suppresses it for the rest of the studio\n * session (module state survives canvas remounts/navigation).\n */\n\nconst dismissedKinds = new Set<CanvasThemeStatus['kind']>()\n\n/** Test hook: reset the session-sticky dismissals. */\nexport function resetCanvasThemeNoticeForTests(): void {\n  dismissedKinds.clear()\n}\n\nconst NOTICE_KEYS: Partial<Record<CanvasThemeStatus['kind'], string>> = {\n  legacy: 'builder.canvasTheme.legacyNotice',\n  'stylesheet-error': 'builder.canvasTheme.stylesheetErrorNotice',\n  'no-theme-tokens': 'builder.canvasTheme.noThemeTokensNotice',\n  'no-stylesheet': 'builder.canvasTheme.noStylesheetNotice',\n}\n\n/** EC-765: the notices point at the guide's theming chapter where the project has it installed. */\nconst THEMING_CHAPTER = elytraGuidePath('13-theming.md')\n\nexport function CanvasThemeNotice({ status }: { status: CanvasThemeStatus | null }) {\n  // Local state only forces the re-render on dismiss; the truth is module-level.\n  const [, setDismissedAt] = useState(0)\n  if (!status || !isDevRuntime()) return null\n  const messageKey = NOTICE_KEYS[status.kind]\n  if (!messageKey || dismissedKinds.has(status.kind)) return null\n\n  return (\n    <div\n      data-testid=\"canvas-theme-notice\"\n      data-notice-kind={status.kind}\n      className=\"absolute top-4 left-1/2 z-20 w-max max-w-[min(460px,90%)] -translate-x-1/2\"\n    >\n      <div className=\"rounded-lg border border-border bg-popover p-2 text-popover-foreground shadow-lg\">\n        <Row gap=\"2\" align=\"start\">\n          <AlertTriangle className=\"mt-0.5 size-3.5 shrink-0 text-warning\" aria-hidden />\n          <Text size=\"xs\" className=\"min-w-0 flex-1\">\n            {translate(messageKey, { guide: THEMING_CHAPTER })}\n          </Text>\n          <button\n            type=\"button\"\n            aria-label={translate('common.dismiss')}\n            onClick={() => {\n              dismissedKinds.add(status.kind)\n              setDismissedAt(Date.now())\n            }}\n            className=\"shrink-0 rounded p-0.5 text-muted-foreground hover:bg-muted hover:text-foreground\"\n          >\n            <X className=\"size-3.5\" />\n          </button>\n        </Row>\n      </div>\n    </div>\n  )\n}\n"]}

package/dist/components/components/components-index.d.ts

@@ -1,10 +1,3 @@
-/**
- * The Components section landing view (EC-050, overhauled EC-320). Serves BOTH
- * audiences: editors get a live census of what components exist (totals,
- * per-category breakdown, health) and a "pick one" nudge;
- * devs get pointers to the real in-repo docs for registering and extending
- * components — no code sample to drift, no invented docs.
- */
 export declare function ComponentsIndex({ projectId }: {
     projectId: string;
 }): import("react").JSX.Element;

package/dist/components/components/components-index.js

@@ -1,5 +1,6 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { BookOpen, Layers, MousePointerClick, Sparkles } from 'lucide-react';
+import { elytraGuidePath } from '@elytracms/core/studio-core';
 import { getStudioRegistry, registryHealth } from '../../lib/registry/index.js';
 import { translate } from '../../lib/i18n/index.js';
 import { RegistryBrowser } from './registry-browser.js';
@@ -9,9 +10,15 @@ import { Badge, Card, Code, Heading, Panel, PanelHeader, Row, Spacer, Stack, Tex
  * The Components section landing view (EC-050, overhauled EC-320). Serves BOTH
  * audiences: editors get a live census of what components exist (totals,
  * per-category breakdown, health) and a "pick one" nudge;
- * devs get pointers to the real in-repo docs for registering and extending
+ * devs get pointers to the guide's chapters on registering and extending
  * components — no code sample to drift, no invented docs.
  */
+/** The guide chapters the developer panel points at (EC-765: file names in the shipped guide). */
+const COMPONENTS_INDEX_CHAPTERS = {
+    authoring: '12-component-authoring.md',
+    components: '03-components.md',
+    overview: '00-overview.md',
+};
 export function ComponentsIndex({ projectId }) {
     const studio = getStudioRegistry();
     const manifests = studio.registry.list();
@@ -20,7 +27,7 @@ export function ComponentsIndex({ projectId }) {
     return (_jsxs("div", { className: "mx-auto w-full max-w-4xl p-4 sm:p-6", children: [_jsx("div", { className: "mb-6 h-80 overflow-hidden rounded-lg border border-border md:hidden", children: _jsx(RegistryBrowser, { projectId: projectId }) }), _jsxs(Stack, { gap: "6", children: [_jsxs(Stack, { gap: "1", children: [_jsx(Heading, { size: "display", children: translate('components.index.title') }), _jsx(Text, { tone: "muted", children: translate('components.index.subtitle') })] }), _jsxs("div", { className: "grid gap-3 sm:grid-cols-3", children: [_jsx(StatCard, { label: translate('components.index.stat.total'), value: stats.total }), _jsx(StatCard, { label: translate('components.index.stat.valid'), value: health.valid, tone: "success" }), _jsx(StatCard, { label: translate('components.index.stat.needAttention'), value: health.incompatible + health.invalid, tone: health.incompatible + health.invalid > 0 ? 'warning' : 'muted', hint: translate('components.index.stat.needAttentionHint', {
                                     incompatible: health.incompatible,
                                     invalid: health.invalid,
-                                }) })] }), stats.categories.length > 0 ? (_jsxs(Panel, { children: [_jsxs(PanelHeader, { children: [_jsx(Layers, { className: "size-4 text-muted-foreground" }), _jsx(Text, { size: "sm", weight: "semibold", children: translate('components.index.byCategory') })] }), _jsx(Row, { gap: "2", wrap: true, className: "p-4", children: stats.categories.map((category) => (_jsxs(Badge, { variant: "outline", children: [_jsx("span", { className: category.key ? 'capitalize' : undefined, children: category.key || translate('components.taxonomy.uncategorized') }), _jsx("span", { className: "font-mono text-muted-foreground", children: category.count })] }, category.key || '__uncategorized__'))) })] })) : null, _jsxs(Card, { className: "flex items-center gap-3 p-4", children: [_jsx("span", { className: "grid size-9 shrink-0 place-items-center rounded-lg bg-muted text-muted-foreground", children: _jsx(MousePointerClick, { className: "size-4" }) }), _jsx(Text, { size: "sm", tone: "muted", children: translate('components.index.pickHint') })] }), _jsxs(Panel, { children: [_jsxs(PanelHeader, { children: [_jsx(BookOpen, { className: "size-4 text-muted-foreground" }), _jsx(Text, { size: "sm", weight: "semibold", children: translate('components.index.guide.title') }), _jsx(Spacer, {}), _jsx(Badge, { variant: "outline", children: translate('components.index.guide.badge') })] }), _jsxs(Stack, { gap: "3", className: "p-4", children: [_jsx(Text, { size: "sm", tone: "muted", children: translate('components.index.guide.intro') }), _jsxs(Stack, { gap: "2", children: [_jsx(DocPointer, { path: "docs/component-authoring.md", description: translate('components.index.guide.doc.authoring') }), _jsx(DocPointer, { path: "docs/guide/03-components.md", description: translate('components.index.guide.doc.components') }), _jsx(DocPointer, { path: "docs/guide/00-overview.md", description: translate('components.index.guide.doc.guide') })] }), _jsxs(Text, { size: "xs", tone: "subtle", children: [_jsx(Sparkles, { className: "mr-1 inline size-3", "aria-hidden": true }), translate('components.index.guide.namespaceNote')] })] })] })] })] }));
+                                }) })] }), stats.categories.length > 0 ? (_jsxs(Panel, { children: [_jsxs(PanelHeader, { children: [_jsx(Layers, { className: "size-4 text-muted-foreground" }), _jsx(Text, { size: "sm", weight: "semibold", children: translate('components.index.byCategory') })] }), _jsx(Row, { gap: "2", wrap: true, className: "p-4", children: stats.categories.map((category) => (_jsxs(Badge, { variant: "outline", children: [_jsx("span", { className: category.key ? 'capitalize' : undefined, children: category.key || translate('components.taxonomy.uncategorized') }), _jsx("span", { className: "font-mono text-muted-foreground", children: category.count })] }, category.key || '__uncategorized__'))) })] })) : null, _jsxs(Card, { className: "flex items-center gap-3 p-4", children: [_jsx("span", { className: "grid size-9 shrink-0 place-items-center rounded-lg bg-muted text-muted-foreground", children: _jsx(MousePointerClick, { className: "size-4" }) }), _jsx(Text, { size: "sm", tone: "muted", children: translate('components.index.pickHint') })] }), _jsxs(Panel, { children: [_jsxs(PanelHeader, { children: [_jsx(BookOpen, { className: "size-4 text-muted-foreground" }), _jsx(Text, { size: "sm", weight: "semibold", children: translate('components.index.guide.title') }), _jsx(Spacer, {}), _jsx(Badge, { variant: "outline", children: translate('components.index.guide.badge') })] }), _jsxs(Stack, { gap: "3", className: "p-4", children: [_jsx(Text, { size: "sm", tone: "muted", children: translate('components.index.guide.intro') }), _jsxs(Stack, { gap: "2", children: [_jsx(DocPointer, { path: elytraGuidePath(COMPONENTS_INDEX_CHAPTERS.authoring), description: translate('components.index.guide.doc.authoring') }), _jsx(DocPointer, { path: elytraGuidePath(COMPONENTS_INDEX_CHAPTERS.components), description: translate('components.index.guide.doc.components') }), _jsx(DocPointer, { path: elytraGuidePath(COMPONENTS_INDEX_CHAPTERS.overview), description: translate('components.index.guide.doc.guide') })] }), _jsxs(Text, { size: "xs", tone: "subtle", children: [_jsx(Sparkles, { className: "mr-1 inline size-3", "aria-hidden": true }), translate('components.index.guide.namespaceNote')] })] })] })] })] }));
 }
 function DocPointer({ path, description }) {
     return (_jsxs(Row, { gap: "3", align: "center", className: "rounded-md border border-border p-2.5", children: [_jsx(Code, { tone: "primary", className: "shrink-0", children: path }), _jsx(Text, { size: "xs", tone: "muted", children: description })] }));